Openproject

Project management software. https://openproject.com

Usage

momo-cloud.openproject = {
  enable = true;
  keyBaseFile = config.age.secrets."openproject-keybase".path;
  oidcSecretFile = config.age.secrets."openproject-oidc-secret".path;
  environmentFile = config.age.secrets."openproject-env-secrets".path;
  extraSeedEnvironmentFile = config.age.secrets."openproject-seeder-secrets".path;
};

Secrets

keyBaseFile

Generate the keybase:

openssl rand -hex 32

oidcSecretFile

Generate the OIDC secret, used by services.kanidm.provision:

openssl rand -hex 48

environmentFile

The environmentFile for secrets env should at least contain the SMTP password:

OPENPROJECT_SMTP__PASSWORD="smtp-password"

extraSeedEnvironmentFile

The seeder secrets env looks like this:

OPENPROJECT_OPENID__CONNECT_KANIDM_SECRET="oidc-secret"
OPENPROJECT_SEED__ENTERPRISE__TOKEN='-----BEGIN OPENPROJECT-EE TOKEN-----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    -----END OPENPROJECT-EE TOKEN-----'

To generate the enterprise-token, follow the directions in the momo/openproject-token-js repository.