Merge pull request #264 from owncloud-devops/upgrade-7

chore: update to ocis 7

config/ocis/csp.yaml

@@ -0,0 +1,46 @@
+directives:
+  child-src:
+    - '''self'''
+  connect-src:
+    - '''self'''
+    - 'blob:'
+    - 'https://${COMPANION_DOMAIN|companion.owncloud.test}/'
+    - 'wss://${COMPANION_DOMAIN|companion.owncloud.test}/'
+    - 'https://raw.githubusercontent.com/owncloud/awesome-ocis/'
+    - 'https://${KEYCLOAK_DOMAIN|keycloak.owncloud.test}/'
+  default-src:
+    - '''none'''
+  font-src:
+    - '''self'''
+  frame-ancestors:
+    - '''self'''
+  frame-src:
+    - '''self'''
+    - 'blob:'
+    - 'https://embed.diagrams.net/'
+    # In contrary to bash and docker the default is given after the | character
+    - 'https://${ONLYOFFICE_DOMAIN|onlyoffice.owncloud.test}/'
+    - 'https://${COLLABORA_DOMAIN|collabora.owncloud.test}/'
+    # This is needed for the external-sites web extension when embedding sites
+    - 'https://owncloud.dev'
+  img-src:
+    - '''self'''
+    - 'data:'
+    - 'blob:'
+    - 'https://raw.githubusercontent.com/owncloud/awesome-ocis/'
+    # In contrary to bash and docker the default is given after the | character
+    - 'https://${ONLYOFFICE_DOMAIN|onlyoffice.owncloud.test}/'
+    - 'https://${COLLABORA_DOMAIN|collabora.owncloud.test}/'
+  manifest-src:
+    - '''self'''
+  media-src:
+    - '''self'''
+  object-src:
+    - '''self'''
+    - 'blob:'
+  script-src:
+    - '''self'''
+    - '''unsafe-inline'''
+  style-src:
+    - '''self'''
+    - '''unsafe-inline'''

config/onlyoffice/entrypoint-override.sh

@@ -0,0 +1,7 @@
+#!/bin/sh
+set -e
+
+# we can't mount it directly because the run-document-server.sh script wants to move it
+cp /etc/onlyoffice/documentserver/local.dist.json /etc/onlyoffice/documentserver/local.json
+
+/app/ds/run-document-server.sh

config/onlyoffice/local.json

@@ -0,0 +1,72 @@
+{
+    "services": {
+      "CoAuthoring": {
+        "sql": {
+          "type": "postgres",
+          "dbHost": "localhost",
+          "dbPort": "5432",
+          "dbName": "onlyoffice",
+          "dbUser": "onlyoffice",
+          "dbPass": "onlyoffice"
+        },
+        "token": {
+          "enable": {
+            "request": {
+              "inbox": true,
+              "outbox": true
+            },
+            "browser": true
+          },
+          "inbox": {
+            "header": "Authorization"
+          },
+          "outbox": {
+            "header": "Authorization"
+          }
+        },
+        "secret": {
+          "inbox": {
+            "string": "B8LjkNqGxn6gf8bkuBUiMwyuCFwFddnu"
+          },
+          "outbox": {
+            "string": "B8LjkNqGxn6gf8bkuBUiMwyuCFwFddnu"
+          },
+          "session": {
+            "string": "B8LjkNqGxn6gf8bkuBUiMwyuCFwFddnu"
+          }
+        }
+      }
+    },
+    "rabbitmq": {
+      "url": "amqp://guest:guest@localhost"
+    },
+    "FileConverter": {
+          "converter": {
+              "inputLimits": [
+                  {
+                  "type": "docx;dotx;docm;dotm",
+                  "zip": {
+                      "uncompressed": "1GB",
+                      "template": "*.xml"
+                  }
+                  },
+                  {
+                  "type": "xlsx;xltx;xlsm;xltm",
+                  "zip": {
+                      "uncompressed": "1GB",
+                      "template": "*.xml"
+                  }
+                  },
+                  {
+                  "type": "pptx;ppsx;potx;pptm;ppsm;potm",
+                  "zip": {
+                      "uncompressed": "1GB",
+                      "template": "*.xml"
+                  }
+                  }
+              ]
+          }
+      }
+
+  }
+