Bump Kanboard to version 1.2.16 on Alpine 3.12

lxc-apps/kanboard/app

@@ -1,5 +1,5 @@
 {
-    "version": "1.2.15-200621",
+    "version": "1.2.16-201021",
     "meta": {
         "title": "Kanboard",
         "desc-cs": "Kanban řízení projektů",
@@ -8,7 +8,7 @@
     },
     "containers": {
         "kanboard": {
-            "image": "kanboard_1.2.15-200621",
+            "image": "kanboard_1.2.16-201021",
             "depends": [
                 "kanboard-postgres"
             ],
@@ -18,7 +18,7 @@
             }
         },
         "kanboard-postgres": {
-            "image": "postgres_12.2.0-200621",
+            "image": "postgres_12.4.0-201021",
             "mounts": {
                 "kanboard/postgres_data": "var/lib/postgresql"
             }

lxc-apps/kanboard/image

@@ -1,5 +1,5 @@
-IMAGE kanboard_1.2.15-200621
+IMAGE kanboard_1.2.16-201021
-FROM alpine3.11-php7.3_7.3.18-200621
+FROM alpine3.12-php7.3_7.3.23-201021
 
 RUN EOF
     # Install runtime dependencies
@@ -9,7 +9,7 @@ RUN EOF
     apk --no-cache add --virtual .deps git
 
     # Download Kanboard
-    wget https://github.com/kanboard/kanboard/archive/v1.2.15.zip -O /srv/kanboard.zip
+    wget https://github.com/kanboard/kanboard/archive/v1.2.16.zip -O /srv/kanboard.zip
     unzip /srv/kanboard.zip -d /srv
     mv /srv/kanboard-* /srv/kanboard
 

lxc-apps/kanboard/install/kanboard_conf/config.php

@@ -2,6 +2,8 @@
 
 /*******************************************************************/
 /* Rename this file to config.php if you want to change the values */
+/*                                                                 */
+/* Make sure all paths are absolute by using __DIR__ where needed  */
 /*******************************************************************/
 
 // Data folder (must be writeable by the web server user and absolute)
@@ -10,20 +12,22 @@ define('DATA_DIR', __DIR__.DIRECTORY_SEPARATOR.'data');
 // Enable/Disable debug
 define('DEBUG', false);
 
-// Available log drivers: syslog, stderr, stdout or file
+// Available log drivers: syslog, stderr, stdout, system or file
-define('LOG_DRIVER', '');
+define('LOG_DRIVER', 'system');
 
 // Log filename if the log driver is "file"
 define('LOG_FILE', DATA_DIR.DIRECTORY_SEPARATOR.'debug.log');
 
 // Plugins directory
-define('PLUGINS_DIR', 'plugins');
+define('PLUGINS_DIR', __DIR__.DIRECTORY_SEPARATOR.'plugins');
 
 // Plugins directory URL
-define('PLUGIN_API_URL', 'https://kanboard.net/plugins.json');
+define('PLUGIN_API_URL', 'https://kanboard.org/plugins.json');
 
-// Enable/Disable plugin installer
+// Enable/Disable plugin installer (Disabled by default for security reasons)
-define('PLUGIN_INSTALLER', true);
+// There is no code review or any approval process to submit a plugin.
+// This is up to the Kanboard instance owner to validate if a plugin is legit.
+define('PLUGIN_INSTALLER', false);
 
 // Available cache drivers are "file" and "memory"
 define('CACHE_DRIVER', 'memory');
@@ -48,7 +52,8 @@ define('MAIL_SMTP_HOSTNAME', 'host');
 define('MAIL_SMTP_PORT', 25);
 define('MAIL_SMTP_USERNAME', '');
 define('MAIL_SMTP_PASSWORD', '');
-define('MAIL_SMTP_ENCRYPTION', null); // Valid values are "null", "ssl" or "tls"
+define('MAIL_SMTP_HELO_NAME', null); // valid: null (default), or FQDN
+define('MAIL_SMTP_ENCRYPTION', null); // Valid values are null (not a string "null"), "ssl" or "tls"
 
 // Sendmail command to use when the transport is "sendmail"
 define('MAIL_SENDMAIL_COMMAND', '/usr/sbin/sendmail -bs');
@@ -85,6 +90,12 @@ define('DB_SSL_CERT', null);
 // Mysql SSL CA
 define('DB_SSL_CA', null);
 
+// Mysql SSL server verification, set to false if you don't want the Mysql driver to validate the certificate CN
+define('DB_VERIFY_SERVER_CERT', null);
+
+// Timeout value for PDO attribute
+define('DB_TIMEOUT', null);
+
 // Enable LDAP authentication (false by default)
 define('LDAP_AUTH', false);
 
@@ -125,7 +136,7 @@ define('LDAP_USER_BASE_DN', '');
 define('LDAP_USER_FILTER', '');
 
 // LDAP attribute for username
-// Example for ActiveDirectory: 'samaccountname'
+// Example for ActiveDirectory: 'sAMAccountName'
 // Example for OpenLDAP: 'uid'
 define('LDAP_USER_ATTRIBUTE_USERNAME', 'uid');
 
@@ -150,6 +161,9 @@ define('LDAP_USER_ATTRIBUTE_LANGUAGE', '');
 // Allow automatic LDAP user creation
 define('LDAP_USER_CREATION', true);
 
+// Set new user as Manager
+define('LDAP_USER_DEFAULT_ROLE_MANAGER', false);
+
 // LDAP DN for administrators
 // Example: CN=Kanboard-Admins,CN=Users,DC=kanboard,DC=local
 define('LDAP_GROUP_ADMIN_DN', '');
@@ -174,6 +188,10 @@ define('LDAP_GROUP_FILTER', '');
 // Example for OpenLDAP: (&(objectClass=posixGroup)(memberUid=%s))
 define('LDAP_GROUP_USER_FILTER', '');
 
+// LDAP attribute for the user in the group filter
+// 'username' or 'dn'
+define('LDAP_GROUP_USER_ATTRIBUTE', 'username');
+
 // LDAP attribute for the group name
 define('LDAP_GROUP_ATTRIBUTE_NAME', 'cn');
 
@@ -186,6 +204,9 @@ define('REVERSE_PROXY_USER_HEADER', 'REMOTE_USER');
 // Username of the admin, by default blank
 define('REVERSE_PROXY_DEFAULT_ADMIN', '');
 
+// Header name to use for the username
+define('REVERSE_PROXY_EMAIL_HEADER', 'REMOTE_EMAIL');
+
 // Default domain to use for setting the email address
 define('REVERSE_PROXY_DEFAULT_DOMAIN', '');
 
@@ -226,14 +247,29 @@ define('BRUTEFORCE_LOCKDOWN_DURATION', 15);
 // See http://php.net/manual/en/session.configuration.php#ini.session.cookie-lifetime
 define('SESSION_DURATION', 0);
 
+// Session handler: db or php
+define('SESSION_HANDLER', 'db');
+
 // HTTP client proxy
 define('HTTP_PROXY_HOSTNAME', '');
 define('HTTP_PROXY_PORT', '3128');
 define('HTTP_PROXY_USERNAME', '');
 define('HTTP_PROXY_PASSWORD', '');
+define('HTTP_PROXY_EXCLUDE', 'localhost');
 
 // Set to false to allow self-signed certificates
 define('HTTP_VERIFY_SSL_CERTIFICATE', true);
 
 // TOTP (2FA) issuer name
 define('TOTP_ISSUER', 'Kanboard');
+
+// Comma separated list of fields to not synchronize when using external authentication providers
+define('EXTERNAL_AUTH_EXCLUDE_FIELDS', 'username');
+
+// Enable or disable displaying group-memberships in userlist (true by default)
+define('SHOW_GROUP_MEMBERSHIPS_IN_USERLIST', true);
+
+// Limit number of groups to display in userlist (The full list of group-memberships is always shown, ...
+// ... when hovering the mouse over the group-icon of a given user!)
+// If set to 0 ALL group-memberships will be listed (7 by default)
+define('SHOW_GROUP_MEMBERSHIPS_IN_USERLIST_WITH_LIMIT', 7);