v7.45

Thanks to C0rn3j and xet7 !

Fixes #5395

.devcontainer/Dockerfile

@@ -20,6 +20,7 @@ ENV \
     SRC_PATH=./ \
     WITH_API=true \
     RESULTS_PER_PAGE="" \
+    DEFAULT_BOARD_ID="" \
     ACCOUNTS_LOCKOUT_KNOWN_USERS_FAILURES_BEFORE=3 \
     ACCOUNTS_LOCKOUT_KNOWN_USERS_PERIOD=60 \
     ACCOUNTS_LOCKOUT_KNOWN_USERS_FAILURE_WINDOW=15 \
@@ -53,6 +54,7 @@ ENV \
     OAUTH2_ENABLED=false \
     OAUTH2_CA_CERT="" \
     OAUTH2_ADFS_ENABLED=false \
+    OAUTH2_B2C_ENABLED=false \
     OAUTH2_LOGIN_STYLE=redirect \
     OAUTH2_CLIENT_ID="" \
     OAUTH2_SECRET="" \

.github/ISSUE_TEMPLATE.md

@@ -1,14 +1,14 @@
 ## Issue
 <!--
+Please report these elsewhere:
+- SECURITY ISSUES, PGP EMAIL: https://github.com/wekan/wekan/blob/main/SECURITY.md
+- UCS: https://github.com/wekan/univention/issues
+
 **[PLEASE UPGRADE](https://github.com/wekan/wekan/wiki/Backup)** to the newest WeKan ® before reporting an issue.
 Please search existing Open and Closed issues, most questions have already been answered.
 
 If you can not login for any reason: https://github.com/wekan/wekan/wiki/Forgot-Password
 Email settings, only SMTP MAIL_URL and MAIL_FROM are in use: https://github.com/wekan/wekan/wiki/Troubleshooting-Mail
-
-The following types of issues should be reported separately:
-- SECURITY ISSUES: https://github.com/wekan/wekan/blob/master/SECURITY.md
-- UCS: https://github.com/wekan/univention/issues
 -->
 
 ### Server Setup Information

.github/workflows/codeql-analysis.yml

@@ -1,69 +0,0 @@
-name: "CodeQL"
-
-on:
-  push:
-    branches: [master]
-  pull_request:
-    # The branches below must be a subset of the branches above
-    branches: [master]
-  schedule:
-    - cron: '0 16 * * 3'
-
-permissions:
-  contents: read
-
-jobs:
-  analyze:
-    permissions:
-      actions: read  # for github/codeql-action/init to get workflow details
-      contents: read  # for actions/checkout to fetch code
-      security-events: write  # for github/codeql-action/autobuild to send a status report
-    name: Analyze
-    runs-on: ubuntu-latest
-
-    strategy:
-      fail-fast: false
-      matrix:
-        # Override automatic language detection by changing the below list
-        # Supported options are ['csharp', 'cpp', 'go', 'java', 'javascript', 'python']
-        language: ['javascript', 'python']
-        # Learn more...
-        # https://docs.github.com/en/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-code-scanning#overriding-automatic-language-detection
-
-    steps:
-    - name: Checkout repository
-      uses: actions/checkout@v3
-      with:
-        # We must fetch at least the immediate parents so that if this is
-        # a pull request then we can checkout the head.
-        fetch-depth: 2
-
-    # If this run was triggered by a pull request event, then checkout
-    # the head of the pull request instead of the merge commit.
-    - run: git checkout HEAD^2
-      if: ${{ github.event_name == 'pull_request' }}
-
-    # Initializes the CodeQL tools for scanning.
-    - name: Initialize CodeQL
-      uses: github/codeql-action/init@v2
-      with:
-        languages: ${{ matrix.language }}
-
-    # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
-    # If this step fails, then you should remove it and run the build manually (see below)
-    - name: Autobuild
-      uses: github/codeql-action/autobuild@v2
-
-    # ℹ️ Command-line programs to run using the OS shell.
-    # 📚 https://git.io/JvXDl
-
-    # ✏️ If the Autobuild fails above, remove it and uncomment the following three lines
-    #    and modify them (or add more) to build your code if your project
-    #    uses a compiled language
-
-    #- run: |
-    #   make bootstrap
-    #   make release
-
-    - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v2

.github/workflows/depsreview.yaml

@@ -9,6 +9,6 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: 'Checkout Repository'
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
       - name: 'Dependency Review'
-        uses: actions/dependency-review-action@v3
+        uses: actions/dependency-review-action@v4

.github/workflows/docker-publish.yml

@@ -9,11 +9,11 @@ on:
   schedule:
     - cron: '28 23 * * *'
   push:
-    branches: [ master ]
+    branches: [ main ]
     # Publish semver tags as releases.
     tags: [ 'v*.*.*' ]
   pull_request:
-    branches: [ master ]
+    branches: [ main ]
 
 env:
   # Use docker.io for Docker Hub if empty
@@ -32,13 +32,13 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       # Login against a Docker registry except on PR
       # https://github.com/docker/login-action
       - name: Log into registry ${{ env.REGISTRY }}
         if: github.event_name != 'pull_request'
-        uses: docker/login-action@465a07811f14bebb1938fbed4728c6a1ff8901fc
+        uses: docker/login-action@e92390c5fb421da1463c202d546fed0ec5c39f20
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.actor }}
@@ -48,14 +48,14 @@ jobs:
       # https://github.com/docker/metadata-action
       - name: Extract Docker metadata
         id: meta
-        uses: docker/metadata-action@818d4b7b91585d195f67373fd9cb0332e31a7175
+        uses: docker/metadata-action@8e5442c4ef9f78752691e2d8f8d19755c6f78e81
         with:
           images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
 
       # Build and push Docker image with Buildx (don't push on PR)
       # https://github.com/docker/build-push-action
       - name: Build and push Docker image
-        uses: docker/build-push-action@2eb1c1961a95fc15694676618e422e8ba1d63825
+        uses: docker/build-push-action@2cdde995de11925a030ce8070c3d77a52ffcf1c0
         with:
           context: .
           push: ${{ github.event_name != 'pull_request' }}

.github/workflows/dockerimage.yml

@@ -3,7 +3,7 @@ name: Docker Image CI
 on:
   push:
     branches:
-      - master
+      - main
 
 permissions:
   contents: read
@@ -15,6 +15,6 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
     - name: Build the Docker image
       run: docker build . --file Dockerfile --tag wekan:$(date +%s)

.github/workflows/release.yml

@@ -3,7 +3,7 @@ name: Release Charts
 on:
   push:
     branches:
-      - master
+      - main
 
 permissions:
   contents: read
@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
 
@@ -25,6 +25,6 @@ jobs:
           git config user.email "$GITHUB_ACTOR@users.noreply.github.com"
 
       - name: Run chart-releaser
-        uses: helm/chart-releaser-action@v1.5.0
+        uses: helm/chart-releaser-action@v1.6.0
         env:
           CR_TOKEN: "${{ secrets.GITHUB_TOKEN }}"

.github/workflows/test_suite.yml

@@ -3,7 +3,7 @@ name: Test suite
 on:
   push:
     branches:
-      - master
+      - main
   pull_request:
 
 permissions:
@@ -18,7 +18,7 @@ jobs:
 #    runs-on: ubuntu-latest
 #    steps:
 #    - name: checkout
-#      uses: actions/checkout@v3
+#      uses: actions/checkout@v4
 #
 #    - name: setup node
 #      uses: actions/setup-node@v1
@@ -42,7 +42,7 @@ jobs:
 #    needs: [lintcode]
 #    steps:
 #    - name: checkout
-#      uses: actions/checkout@v3
+#      uses: actions/checkout@v4
 #
 #    - name: setup node
 #      uses: actions/setup-node@v1
@@ -65,7 +65,7 @@ jobs:
 #    needs: [lintcode,lintstyle]
 #    steps:
 #    - name: checkout
-#      uses: actions/checkout@v3
+#      uses: actions/checkout@v4
 #
 #    - name: setup node
 #      uses: actions/setup-node@v1
@@ -90,12 +90,12 @@ jobs:
 
       # CHECKOUTS
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       # CACHING
       - name: Install Meteor
         id: cache-meteor-install
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         with:
           path: ~/.meteor
           key: v1-meteor-${{ hashFiles('.meteor/versions') }}
@@ -104,7 +104,7 @@ jobs:
 
       - name: Cache NPM dependencies
         id: cache-meteor-npm
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         with:
           path: ~/.npm
           key: v1-npm-${{ hashFiles('package-lock.json') }}
@@ -113,7 +113,7 @@ jobs:
 
       - name: Cache Meteor build
         id: cache-meteor-build
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         with:
           path: |
             .meteor/local/resolver-result-cache.json
@@ -125,7 +125,7 @@ jobs:
             v1-meteor_build_cache-
 
       - name: Setup meteor
-        uses: meteorengineer/setup-meteor@v1
+        uses: meteorengineer/setup-meteor@v2
         with:
           meteor-release: '2.2'
 
@@ -136,7 +136,7 @@ jobs:
         run: sh ./test-wekan.sh -cv
 
       - name: Upload coverage
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: coverage-folder
           path: .coverage/
@@ -147,17 +147,17 @@ jobs:
     needs: [tests]
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: Download coverage
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4
         with:
           name: coverage-folder
           path: .coverage/
 
 
       - name: Coverage Report
-        uses: VeryGoodOpenSource/very_good_coverage@v2.1.0
+        uses: VeryGoodOpenSource/very_good_coverage@v3.0.0
         with:
           path: ".coverage/lcov.info"
           min_coverage: 1 # TODO add tests and increase to 95!

.meteor/packages

@@ -6,7 +6,7 @@
 meteor-base@1.5.1
 
 # Build system
-ecmascript@0.16.7
+ecmascript@0.16.8
 standard-minifier-js@2.8.1
 mquandalle:jade
 coffeescript@2.4.1!
@@ -16,16 +16,15 @@ es5-shim@4.8.0
 
 # Collections
 aldeed:collection2
-cfs:standard-packages
 cottz:publish-relations
 dburles:collection-helpers
 idmontie:migrations
 easy:search
-mongo@1.16.7
+mongo@1.16.8
 mquandalle:collection-mutations
 
 # Account system
-accounts-password@2.3.4
+accounts-password@2.4.0
 useraccounts:core
 useraccounts:flow-routing
 useraccounts:unstyled
@@ -43,7 +42,7 @@ jquery@3.0.0!
 random@1.2.1
 reactive-dict@1.3.1
 session@1.2.1
-tracker@1.3.2
+tracker@1.3.3
 underscore@1.0.13
 arillo:flow-router-helpers
 audit-argument-checks@1.0.7
@@ -54,91 +53,11 @@ raix:handlebar-helpers
 http@2.0.0! # force new http package
 
 # Datepicker
-rajit:bootstrap3-datepicker
-rajit:bootstrap3-datepicker-de
-rajit:bootstrap3-datepicker-tr
-rajit:bootstrap3-datepicker-ja
-rajit:bootstrap3-datepicker-fr
-rajit:bootstrap3-datepicker-it
-rajit:bootstrap3-datepicker-th
-rajit:bootstrap3-datepicker-nl
-rajit:bootstrap3-datepicker-es
-rajit:bootstrap3-datepicker-lv
-rajit:bootstrap3-datepicker-sv
-rajit:bootstrap3-datepicker-gl
-rajit:bootstrap3-datepicker-eu
-rajit:bootstrap3-datepicker-vi
-rajit:bootstrap3-datepicker-no
-rajit:bootstrap3-datepicker-en-gb
-rajit:bootstrap3-datepicker-ro
-rajit:bootstrap3-datepicker-rs
-rajit:bootstrap3-datepicker-ru
-rajit:bootstrap3-datepicker-bs
-rajit:bootstrap3-datepicker-mn
-rajit:bootstrap3-datepicker-id
-rajit:bootstrap3-datepicker-fa
-rajit:bootstrap3-datepicker-ko
-rajit:bootstrap3-datepicker-pt
-rajit:bootstrap3-datepicker-sl
-rajit:bootstrap3-datepicker-sq
-rajit:bootstrap3-datepicker-cy
-rajit:bootstrap3-datepicker-ka
-rajit:bootstrap3-datepicker-sr
-rajit:bootstrap3-datepicker-az
-rajit:bootstrap3-datepicker-cs
-rajit:bootstrap3-datepicker-me
-rajit:bootstrap3-datepicker-ta
-rajit:bootstrap3-datepicker-eo
-rajit:bootstrap3-datepicker-oc
-rajit:bootstrap3-datepicker-he
-rajit:bootstrap3-datepicker-sw
-rajit:bootstrap3-datepicker-rs-latin
-rajit:bootstrap3-datepicker-da
-rajit:bootstrap3-datepicker-pt-br
-rajit:bootstrap3-datepicker-br
-rajit:bootstrap3-datepicker-it-ch
-rajit:bootstrap3-datepicker-en-za
-rajit:bootstrap3-datepicker-en-ie
-rajit:bootstrap3-datepicker-en-ca
-rajit:bootstrap3-datepicker-uz-latn
-rajit:bootstrap3-datepicker-ms
-rajit:bootstrap3-datepicker-uk
-rajit:bootstrap3-datepicker-hu
-rajit:bootstrap3-datepicker-fo
-rajit:bootstrap3-datepicker-kr
-rajit:bootstrap3-datepicker-hi
-rajit:bootstrap3-datepicker-km
-rajit:bootstrap3-datepicker-fi
-rajit:bootstrap3-datepicker-is
-rajit:bootstrap3-datepicker-kh
-rajit:bootstrap3-datepicker-bg
-rajit:bootstrap3-datepicker-bn
-rajit:bootstrap3-datepicker-pl
-rajit:bootstrap3-datepicker-et
-rajit:bootstrap3-datepicker-ar
-rajit:bootstrap3-datepicker-ca
-rajit:bootstrap3-datepicker-kk
-rajit:bootstrap3-datepicker-sk
-rajit:bootstrap3-datepicker-el
-rajit:bootstrap3-datepicker-hy
-rajit:bootstrap3-datepicker-hr
-rajit:bootstrap3-datepicker-tg
-rajit:bootstrap3-datepicker-nb
-rajit:bootstrap3-datepicker-mk
-rajit:bootstrap3-datepicker-nl-be
-rajit:bootstrap3-datepicker-zh-cn
-rajit:bootstrap3-datepicker-ar-tn
-rajit:bootstrap3-datepicker-en-au
-rajit:bootstrap3-datepicker-fr-ch
-rajit:bootstrap3-datepicker-zh-tw
-rajit:bootstrap3-datepicker-uz-cyrl
-rajit:bootstrap3-datepicker-sr-latin
-rajit:bootstrap3-datepicker-en-nz
+wekan-bootstrap-datepicker
 
 # UI components
 ostrio:i18n
 reactive-var@1.0.12
-fortawesome:fontawesome
 mousetrap:mousetrap
 mquandalle:jquery-textcomplete
 mquandalle:mousetrap-bindglobal
@@ -147,8 +66,6 @@ meteor-autosize
 shell-server@0.5.0
 email@2.2.5
 dynamic-import@0.7.3
-cfs:gridfs
-rzymek:fullcalendar
 msavin:usercache
 # Keep stylus in 1.1.0, because building v2 takes extra 52 minutes.
 meteorhacks:subs-manager
@@ -156,7 +73,6 @@ meteorhacks:aggregate@1.3.0
 wekan-markdown
 konecty:mongo-counter
 percolate:synced-cron
-cfs:filesystem
 ostrio:cookies
 ostrio:files@2.3.0
 pascoual:pdfkit
@@ -167,9 +83,14 @@ matb33:collection-hooks
 simple:json-routes
 kadira:flow-router
 spacebars
-service-configuration@1.3.1
+service-configuration@1.3.2
 communitypackages:picker
 minifier-css@1.6.4
 blaze
 kadira:blaze-layout
 peerlibrary:blaze-components
+ejson@1.1.3
+logging@1.3.3
+wekan-fullcalendar
+momentjs:moment@2.29.3
+wekan-fontawesome

.meteor/release

@@ -1 +1 @@
-METEOR@2.13
+METEOR@2.14

.meteor/versions

@@ -1,6 +1,6 @@
-accounts-base@2.2.8
-accounts-oauth@1.4.2
-accounts-password@2.3.4
+accounts-base@2.2.10
+accounts-oauth@1.4.3
+accounts-password@2.4.0
 aldeed:collection2@2.10.0
 aldeed:collection2-core@1.2.0
 aldeed:schema-deny@1.1.0
@@ -10,34 +10,16 @@ allow-deny@1.1.1
 arillo:flow-router-helpers@0.5.2
 audit-argument-checks@1.0.7
 autoupdate@1.8.0
-babel-compiler@7.10.4
+babel-compiler@7.10.5
 babel-runtime@1.5.1
 base64@1.0.12
 binary-heap@1.0.11
 blaze@2.7.1
 blaze-tools@1.1.3
-boilerplate-generator@1.7.1
+boilerplate-generator@1.7.2
 caching-compiler@1.2.2
 caching-html-compiler@1.2.1
 callback-hook@1.5.1
-cfs:access-point@0.1.49
-cfs:base-package@0.0.30
-cfs:collection@0.5.5
-cfs:collection-filters@0.2.4
-cfs:data-man@0.0.6
-cfs:file@0.1.17
-cfs:filesystem@0.1.2
-cfs:gridfs@0.0.34
-cfs:http-methods@0.0.32
-cfs:http-publish@0.0.13
-cfs:power-queue@0.9.11
-cfs:reactive-list@0.0.9
-cfs:reactive-property@0.0.4
-cfs:standard-packages@0.5.10
-cfs:storage-adapter@0.2.4
-cfs:tempstore@0.1.6
-cfs:upload-http@0.0.20
-cfs:worker@0.1.5
 check@1.3.2
 coffeescript@2.7.0
 coffeescript-compiler@2.4.1
@@ -47,23 +29,22 @@ dburles:collection-helpers@1.1.0
 ddp@1.4.1
 ddp-client@2.6.1
 ddp-common@1.4.0
-ddp-rate-limiter@1.2.0
-ddp-server@2.6.2
+ddp-rate-limiter@1.2.1
+ddp-server@2.7.0
 deps@1.0.12
 diff-sequence@1.1.2
 dynamic-import@0.7.3
 easy:search@2.2.1
 easysearch:components@2.2.2
 easysearch:core@2.2.2
-ecmascript@0.16.7
+ecmascript@0.16.8
 ecmascript-runtime@0.8.1
 ecmascript-runtime-client@0.12.1
 ecmascript-runtime-server@0.11.0
 ejson@1.1.3
 email@2.2.5
 es5-shim@4.8.0
-fetch@0.1.3
-fortawesome:fontawesome@4.7.0
+fetch@0.1.4
 geojson-utils@1.0.11
 hot-code-push@1.0.4
 html-tools@1.1.3
@@ -77,13 +58,12 @@ kadira:blaze-layout@2.3.0
 kadira:dochead@1.5.0
 kadira:flow-router@2.12.1
 konecty:mongo-counter@0.0.5_3
-livedata@1.0.18
 lmieulet:meteor-coverage@1.1.4
 localstorage@1.2.0
-logging@1.3.2
-matb33:collection-hooks@1.2.2
+logging@1.3.3
+matb33:collection-hooks@1.3.0
 mdg:validation-error@0.5.1
-meteor@1.11.3
+meteor@1.11.5
 meteor-autosize@5.0.1
 meteor-base@1.5.1
 meteorhacks:aggregate@1.3.0
@@ -97,11 +77,11 @@ minifier-css@1.6.4
 minifier-js@2.7.5
 minifiers@1.1.8-faster-rebuild.0
 minimongo@1.9.3
-modern-browsers@0.1.9
-modules@0.19.0
+modern-browsers@0.1.10
+modules@0.20.0
 modules-runtime@0.13.1
 momentjs:moment@2.29.3
-mongo@1.16.7
+mongo@1.16.8
 mongo-decimal@0.1.3
 mongo-dev-server@1.1.0
 mongo-id@1.0.8
@@ -114,8 +94,8 @@ mquandalle:jade-compiler@0.4.5
 mquandalle:jquery-textcomplete@0.8.0_1
 mquandalle:mousetrap-bindglobal@0.0.1
 msavin:usercache@1.8.0
-npm-mongo@4.16.0
-oauth@2.2.0
+npm-mongo@4.17.2
+oauth@2.2.1
 oauth2@1.3.2
 observe-sequence@1.0.21
 ongoworks:speakingurl@1.1.0
@@ -131,100 +111,19 @@ peerlibrary:blaze-components@0.23.0
 peerlibrary:computed-field@0.10.0
 peerlibrary:data-lookup@0.3.0
 peerlibrary:reactive-field@0.6.0
-percolate:synced-cron@1.3.2
+percolate:synced-cron@1.5.2
 promise@0.12.2
 raix:eventemitter@0.1.3
 raix:handlebar-helpers@0.2.5
-rajit:bootstrap3-datepicker@1.7.1_1
-rajit:bootstrap3-datepicker-ar@1.7.1
-rajit:bootstrap3-datepicker-ar-tn@1.7.1
-rajit:bootstrap3-datepicker-az@1.7.1
-rajit:bootstrap3-datepicker-bg@1.7.1
-rajit:bootstrap3-datepicker-bn@1.7.1
-rajit:bootstrap3-datepicker-br@1.7.1
-rajit:bootstrap3-datepicker-bs@1.7.1
-rajit:bootstrap3-datepicker-ca@1.7.1
-rajit:bootstrap3-datepicker-cs@1.7.1
-rajit:bootstrap3-datepicker-cy@1.7.1
-rajit:bootstrap3-datepicker-da@1.7.1
-rajit:bootstrap3-datepicker-de@1.7.1
-rajit:bootstrap3-datepicker-el@1.7.1
-rajit:bootstrap3-datepicker-en-au@1.7.1
-rajit:bootstrap3-datepicker-en-ca@1.7.1
-rajit:bootstrap3-datepicker-en-gb@1.7.1
-rajit:bootstrap3-datepicker-en-ie@1.7.1
-rajit:bootstrap3-datepicker-en-nz@1.7.1
-rajit:bootstrap3-datepicker-en-za@1.7.1
-rajit:bootstrap3-datepicker-eo@1.7.1
-rajit:bootstrap3-datepicker-es@1.7.1
-rajit:bootstrap3-datepicker-et@1.7.1
-rajit:bootstrap3-datepicker-eu@1.7.1
-rajit:bootstrap3-datepicker-fa@1.7.1
-rajit:bootstrap3-datepicker-fi@1.7.1
-rajit:bootstrap3-datepicker-fo@1.7.1
-rajit:bootstrap3-datepicker-fr@1.7.1
-rajit:bootstrap3-datepicker-fr-ch@1.7.1
-rajit:bootstrap3-datepicker-gl@1.7.1
-rajit:bootstrap3-datepicker-he@1.7.1
-rajit:bootstrap3-datepicker-hi@1.7.1
-rajit:bootstrap3-datepicker-hr@1.7.1
-rajit:bootstrap3-datepicker-hu@1.7.1
-rajit:bootstrap3-datepicker-hy@1.7.1
-rajit:bootstrap3-datepicker-id@1.7.1
-rajit:bootstrap3-datepicker-is@1.7.1
-rajit:bootstrap3-datepicker-it@1.7.1
-rajit:bootstrap3-datepicker-it-ch@1.7.1
-rajit:bootstrap3-datepicker-ja@1.7.1
-rajit:bootstrap3-datepicker-ka@1.7.1
-rajit:bootstrap3-datepicker-kh@1.7.1
-rajit:bootstrap3-datepicker-kk@1.7.1
-rajit:bootstrap3-datepicker-km@1.7.1
-rajit:bootstrap3-datepicker-ko@1.7.1
-rajit:bootstrap3-datepicker-kr@1.7.1
-rajit:bootstrap3-datepicker-lv@1.7.1
-rajit:bootstrap3-datepicker-me@1.7.1
-rajit:bootstrap3-datepicker-mk@1.7.1
-rajit:bootstrap3-datepicker-mn@1.7.1
-rajit:bootstrap3-datepicker-ms@1.7.1
-rajit:bootstrap3-datepicker-nb@1.7.1
-rajit:bootstrap3-datepicker-nl@1.7.1
-rajit:bootstrap3-datepicker-nl-be@1.7.1
-rajit:bootstrap3-datepicker-no@1.7.1
-rajit:bootstrap3-datepicker-oc@1.7.1
-rajit:bootstrap3-datepicker-pl@1.7.1
-rajit:bootstrap3-datepicker-pt@1.7.1
-rajit:bootstrap3-datepicker-pt-br@1.7.1
-rajit:bootstrap3-datepicker-ro@1.7.1
-rajit:bootstrap3-datepicker-rs@1.7.1
-rajit:bootstrap3-datepicker-rs-latin@1.7.1
-rajit:bootstrap3-datepicker-ru@1.7.1
-rajit:bootstrap3-datepicker-sk@1.7.1
-rajit:bootstrap3-datepicker-sl@1.7.1
-rajit:bootstrap3-datepicker-sq@1.7.1
-rajit:bootstrap3-datepicker-sr@1.7.1
-rajit:bootstrap3-datepicker-sr-latin@1.7.1
-rajit:bootstrap3-datepicker-sv@1.7.1
-rajit:bootstrap3-datepicker-sw@1.7.1
-rajit:bootstrap3-datepicker-ta@1.7.1
-rajit:bootstrap3-datepicker-tg@1.7.1
-rajit:bootstrap3-datepicker-th@1.7.1
-rajit:bootstrap3-datepicker-tr@1.7.1
-rajit:bootstrap3-datepicker-uk@1.7.1
-rajit:bootstrap3-datepicker-uz-cyrl@1.7.1
-rajit:bootstrap3-datepicker-uz-latn@1.7.1
-rajit:bootstrap3-datepicker-vi@1.7.1
-rajit:bootstrap3-datepicker-zh-cn@1.7.1
-rajit:bootstrap3-datepicker-zh-tw@1.7.1
 random@1.2.1
 rate-limit@1.1.1
-react-fast-refresh@0.2.7
+react-fast-refresh@0.2.8
 reactive-dict@1.3.1
 reactive-var@1.0.12
 reload@1.3.1
 retry@1.1.0
 routepolicy@1.1.1
-rzymek:fullcalendar@3.8.0
-service-configuration@1.3.1
+service-configuration@1.3.3
 session@1.2.1
 sha@1.0.9
 shell-server@0.5.0
@@ -233,7 +132,7 @@ simple:json-routes@2.3.1
 simple:rest-accounts-password@1.2.2
 simple:rest-bearer-token-parser@1.1.1
 simple:rest-json-error-handler@1.1.1
-socket-stream-client@0.5.1
+socket-stream-client@0.5.2
 spacebars@1.4.1
 spacebars-compiler@1.3.1
 standard-minifier-js@2.8.1
@@ -242,22 +141,26 @@ templating@1.4.1
 templating-compiler@1.4.1
 templating-runtime@1.5.0
 templating-tools@1.2.2
-tracker@1.3.2
+tracker@1.3.3
+typescript@4.9.5
 ui@1.0.13
 underscore@1.0.13
 url@1.3.2
 useraccounts:core@1.16.2
 useraccounts:flow-routing@1.15.0
 useraccounts:unstyled@1.14.2
-webapp@1.13.5
+webapp@1.13.6
 webapp-hashing@1.1.1
 wekan-accounts-cas@0.1.0
 wekan-accounts-lockout@1.0.0
 wekan-accounts-oidc@1.0.10
 wekan-accounts-sandstorm@0.8.0
+wekan-bootstrap-datepicker@1.10.0
+wekan-fontawesome@6.4.2
+wekan-fullcalendar@3.10.5
 wekan-ldap@0.0.2
 wekan-markdown@1.0.9
 wekan-oidc@1.0.12
 yasaricli:slugify@0.0.7
 zimme:active-route@2.3.2
-zodern:types@1.0.9
+zodern:types@1.0.10

CHANGELOG.md

@@ -1,25 +1,899 @@
 [Mac ChangeLog](https://github.com/wekan/wekan/wiki/Mac)
 
-Newest Node.js is at https://github.com/wekan/node-v14-esm/releases/tag/v14.21.4
+Newest WeKan at these amd64 platforms:
 
-Required versions of Node.js, MongoDB etc are listed at https://wekan.github.io
-Download section.
+- Windows and Linux bundle
+- Snap Candidate
+- Docker
+- Kubernetes
 
-Newest WeKan is on platforms: Snap Candidate, Docker, Kubernetes, Source/Bundle. Download section at https://wekan.github.io
+Fixing other platforms In Progress.
 
-In Progress is:
-- Getting newest WeKan to all platforms, fixing any migration and upgrade issues
-- Adding more platforms
-- Developing all paid features and fixes https://wekan.team/commercial-support/
-- More info and news at https://github.com/wekan/wekan/issues/4578#issuecomment-1505909376
-
-Note:
-- Snap Candidate has newest WeKan with MongoDB 6 https://github.com/wekan/wekan/issues/4824#issuecomment-1425753485
-- Snap Beta has old WeKan with MongoDB 5 https://github.com/wekan/wekan/issues/4780#issuecomment-1427625571
-- Snap Stable has old WeKan 6.09 with MongoDB 3.2.2 
+- Install info at Server part of webpage https://wekan.github.io
+- Newest Node.js is at https://github.com/wekan/node-v14-esm/releases/tag/v14.21.4
+- MongoDB 6.x
 
 [How to upgrade WeKan](https://github.com/wekan/wekan/issues/4585)
 
+# v7.45 2024-05-06 WeKan ® release
+
+This release adds the following updates:
+
+- [Update Docker base container to Ubuntu 24.04, and update software versions](https://github.com/wekan/wekan/commit/63117e87e759af965c8eeceaaa41f52815630d20).
+  Thanks to developers of dependencies.
+- [Updated dependencies](https://github.com/wekan/wekan/pull/5392).
+  Thanks to developers of dependencies.
+
+and fixes the following bugs:
+
+- [Fix display of tables with a large number of rows](https://github.com/wekan/wekan/pull/5393).
+  Thanks to novashdima.
+- [Fix white List color and define Silver in CSS instead of leaving it unset](https://github.com/wekan/wekan/pull/5400).
+  Thanks to C0rn3j.
+- [Allow silver color to be set in List and Swimlane](https://github.com/wekan/wekan/pull/5401).
+  Thanks to C0rn3j.
+- [Fix Can't set a Due Date that has a leading zero in time, errors with invalid time](https://github.com/wekan/wekan/commit/9cebee734740790145ca574c539ccebd067cee7e).
+  Thanks to C0rn3j and xet7.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v7.44 2024-04-26 WeKan ® release
+
+This release adds the following new features:
+
+- [Collapse Lists](https://github.com/wekan/wekan/commit/a601ba542aebefdfa8b5d683d22405ab3d5f8569).
+  Thanks to xet7.
+- [Collapse Swimlanes. In Progress, does not work yet, not visible yet](https://github.com/wekan/wekan/commit b704d58f0f3cf5e7785b79d5a6c9f6c63da4159c).
+  Thanks to xet7.
+
+and fixes the following bugs:
+
+- [Fix board not visible at Collapse Lists](https://github.com/wekan/wekan/commit/e6476319bcb06cc71fa0eefa0a608ec3a7b89767).
+  Thanks to xet7.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v7.43 2024-04-18 WeKan ® release
+
+This release adds the following updates:
+
+- [Updated release script for Windows On-Premise, that is without container like Docker and Snap](https://github.com/wekan/wekan/commit/802eeb1e6bb87c45fa79298f67ff690e87f939f8).
+  Thanks to xet7.
+- [Updated translations Transifex URL at readme](https://github.com/wekan/wekan/commit/9838af5e5630a6ef34175e110ddfb6bfc225b40c).
+  Thanks to xet7.
+- [Improve Docker files](https://github.com/wekan/wekan/pull/5377).
+  Thanks to C0rn3j.
+- Updated dependencies.
+  [Part 1](https://github.com/wekan/wekan/commit/08e2f2f2731856255e0b40eb692328424efdf9ac),
+  [Part 2](https://github.com/wekan/wekan/commit/da99e363cd72cda7d400ce65785a6650e42c72cf).
+  Thanks to developers of dependencies.
+
+and fixes the following bugs:
+
+- [Fix DEBUG environment variable check](https://github.com/wekan/wekan/pull/5380).
+  Thanks to verdel.
+- [By default, use localized long date-time format](https://github.com/wekan/wekan/pull/5381).
+  Thanks to tvogel.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v7.42 2024-04-03 WeKan ® release
+
+This release fixes the following CRITICAL SECURITY ISSUES:
+
+- [Fixed CRITICAL SECURITY ISSUE by updating meteor-node-stubs](https://github.com/wekan/wekan/commit/c461adff11456734fcb9193b5522cc6451078732).
+  Thanks to Meteor developers.
+
+and adds the following updates:
+
+- Updated dependencies.
+  [Part 1](https://github.com/wekan/wekan/pull/5355),
+  [Part 2](https://github.com/wekan/wekan/pull/5356),
+  [Part 3](https://github.com/wekan/wekan/commit/1c8f783767a680758f2219d2f416ce3ae2fb0c57).
+  Thanks to dependabot and developers of dependencies.
+- [Small tweaks to moderndark theme](https://github.com/wekan/wekan/pull/5363).
+  Thanks to jghaanstra.
+
+and fixes the following bugs:
+
+- [Fixed link at readme](https://github.com/wekan/wekan/pull/5360).
+  Thanks to dyercode.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v7.41 2024-03-18 WeKan ® release
+
+This release fixes the following bugs:
+
+- Fixes for mongosh to allow snap packages to update to the edge/candidate version.
+  [Part 1](https://github.com/wekan/wekan/pull/5349),
+  [Part 2](https://github.com/wekan/wekan/pull/5350).
+  Thanks to lorodoes.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v7.40 2024-03-17 WeKan ® release
+
+This release fixes the following bugs:
+
+- [Fixed centering of text below custom login logo](https://github.com/wekan/wekan/commit/24c89aeb64cf6266d95f42124419d4f070864631).
+  Thanks to xet7.
+- [Fixed In RTL, hamburger margin is too much in mobile](https://github.com/wekan/wekan/commit/583fca1814d916490b04947ba8d97dd85168fb22).
+  Thanks to mohammadZahedian and xet7.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v7.39 2024-03-16 WeKan ® release
+
+This release adds the following updates:
+
+- Clarify usage of api.py.
+  [Part 1](https://github.com/wekan/wekan/pull/5341).
+  [Part 2](https://github.com/wekan/wekan/commit/8f3c948614df0641b0971d1882cc241587d9d3b4).
+  Thanks to e-gaulue and xet7.
+- Updated dependencies.
+  [Part 1](https://github.com/wekan/wekan/pull/5343),
+  [Part 2](https://github.com/wekan/wekan/pull/5344).
+
+and fixes the following bugs:
+
+- [Make the contents of the cards grow to the list width](https://github.com/wekan/wekan/pull/5346).
+  Thanks to kuba-orlik.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v7.38 2024-03-10 WeKan ® release
+
+This release adds the following new features:
+
+- [Added docs wikis to WeKan repo directory docs, to make possible to send PRs](https://github.com/wekan/wekan/commit/73ae73d4c38640e9daedbe8ef9e5b25b877ee804).
+  Thanks to e-gaulue, C0rn3j and xet7.
+- [Added script to count lines of code changed per committer email address, because GitHub removed that feature from web UI](https://github.com/wekan/wekan/commit/835e33bf090022875f50916412f80b6a9b4a3b21).
+  Thanks to bgwines and xet7.
+- [Add info about GitHub top committers at Finland](https://github.com/wekan/wekan/commit/ef5b8887799a75ab797655f39483bc08841815d2).
+  Thanks to xet7.
+
+and adds the following updates:
+
+- [Updated contributing to wiki](https://github.com/wekan/wekan/commit/8ba3a05648818f6162b2021affeb33066f91c400).
+  Thanks to xet7.
+- [Upgraded to MongoDB 6.0.14 at Snap Candidate](https://github.com/wekan/wekan/commit/07d6c1e5148eb0392357d55d0486a9672378c16f).
+  Thanks to MongoDB developers.
+
+and tried to fix the following bugs:
+
+- [Fix error during delete](https://github.com/wekan/wekan/pull/5336).
+  Thanks to xator91.
+- [Fixed text below custom login logo not visible](https://github.com/wekan/wekan/commit/00bbc2669814247c0ff79bd816be7bf34bcf08a2).
+  Thanks to xet7.
+- [Fixed In RTL, hamburger needs margin](https://github.com/wekan/wekan/commit/abd3c95dfa13cd697ff2fb7e299c85287406772a).
+  Thanks to mohammadZahedian and xet7.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v7.37 2024-03-07 WeKan ® release
+
+This release fixes the following bugs:
+
+- [Fixed API get swimlane cards wrong order. Please test](https://github.com/wekan/wekan/commit/7beced1e683c2eb2960b0ee40d5ec927d235fa6a).
+  Thanks to mohammadZahedian, xator91 and xet7.
+- [Fixed API get_all_cards doesn't return SwimlaneId. Please test](https://github.com/wekan/wekan/commit/ffafb30b9b394188e1b60ec836ad83f1738c266d).
+  Thanks to mohammadZahedian, xator91 and xet7.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v7.36 2024-03-06 WeKan ® release
+
+This release adds the following features:
+
+- [api.py: checklistid, checklistinfo, get_list_cards_count and get_board_cards_count](https://github.com/wekan/wekan/pull/5326).
+  Thanks to xator91.
+
+and fixes the following bugs:
+
+- [Fixed Card image cover should be margin-top:6px since hamburger menu and due date at the top](https://github.com/wekan/wekan/commit/747bc4c08837ad9781d63b9f16b97a64b0bfe7b8).
+  Thanks to e-gaulue and xet7.
+- [Try to fix API get cards wrong order. Please test](https://github.com/wekan/wekan/commit/c570405d0267e28f2b2644005d48fb097eac385b).
+  Thanks to mohammadZahedian, xator91 and xet7.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v7.35 2024-02-27 WeKan ® release
+
+This release adds the following features and bugs:
+
+- [Added back Mathjax that has bug of showing math twice](https://github.com/wekan/wekan/commit/f43dadc06894d874281ec0e449dcc4c81b3c59ad).
+  Thanks to macthecadillac, Dexus and xet7.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v7.34 2024-02-23 WeKan ® release
+
+This release adds the following updates:
+
+- [Updated translations](https://github.com/wekan/wekan/commit/3cd5d00b0b8d74acb2cd2afbc12f5b9d7aafcbd8).
+  Thanks to translators.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v7.33 2024-02-23 WeKan ® release
+
+This release adds the following updates:
+
+- [Updated docs for previous version of WeKan](https://github.com/wekan/wekan/commit/3b0616c1500b5070e660d2ba00968d59600958eb).
+  Thanks to xet7.
+
+and fixes the following bugs:
+
+- [OpenAPI: Fix breakage introduced with blank return](https://github.com/wekan/wekan/pull/5321).
+  Thanks to bentiss.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v7.32 2024-02-22 WeKan ® release
+
+This release adds the following new features:
+
+- [api.py: Added create label](https://github.com/wekan/wekan/pull/5308).
+  Thanks to xator91.
+- [api.py: Edit card color](https://github.com/wekan/wekan/pull/5309).
+  Thanks to xator91.
+- [api.py: Add checklist with multiple items also or just title](https://github.com/wekan/wekan/pull/5311).
+  Thanks to xator91.
+- [api.py: Delete all cards. Will delete all cards from Swimlanes automatically, will retrieve automatically all list id and delete everything](https://github.com/wekan/wekan/pull/5313).
+  Thanks to xator91.
+- [cards.js: Added a control to check error if card is not updated](https://github.com/wekan/wekan/pull/5312).
+  Thanks to xator91.
+- [Shortcut a to filter by assignees](https://github.com/wekan/wekan/pull/5318).
+  Thanks to DevOpsNB.
+
+and fixes the following bugs:
+
+- [Fixed Error 500 when adding user to a board and multiple same avatar icons by reverting back from Meteor 2.15 to 2.14](https://github.com/wekan/wekan/commit/b5f4be36d4577c391ad19c5e5dd9de3036b8998f).
+  Thanks to xator91, mariogalan, bbyszio, zeo101, laurentm255, johnnytolengo and xet7.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v7.31 2024-02-17 WeKan ® release
+
+This release adds the following new features:
+
+- [api.py: Added getcard and cardsbyswimlane](https://github.com/wekan/wekan/pull/5287).
+  Thanks to xator91.
+- [api.py: Add card with label and add a label to a card](https://github.com/wekan/wekan/pull/5290).
+  Thanks to xator91.
+- [api.py: Fix BoardID to SwimlaneID in cardsbyswimlane](https://github.com/wekan/wekan/pull/5290).
+  Thanks to xator91.
+- [boards.js: New update board title function for API](https://github.com/wekan/wekan/pull/5300).
+  Thanks to xator91.
+- [api.py: EDIT BOARD TITLE](https://github.com/wekan/wekan/pull/5301).
+  Thanks to xator91.
+
+and adds the following updates:
+
+- [Release scripts: Commented out not currently in use builds of WeKan bundle](https://github.com/wekan/wekan/commit/4eb0085243672071a392dc32f77dba3103c592ab).
+  Thanks to xet7.
+- [Try to fix Snap](https://github.com/wekan/wekan/commit/a54e52d34bdab02befda7eefad46d16814d2c46e).
+  Thanks to xet7.
+- [Updated to Meteor 2.15-rc.1 and removed duplicate nodemailer package because of some errors](https://github.com/wekan/wekan/commit/59c42bc1a3a1792a50379be2f9251fce9b45c1a3).
+  Thanks to Meteor developers.
+- [Updated to Meteor 2.15](https://github.com/wekan/wekan/commit/5198ee997cb43b503fcb2edaf781b0521d8096cd).
+  Thanks to Meteor developers.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v7.30 2024-01-28 WeKan ® release
+
+This release adds the following updates:
+
+- [Back to MongoDB 6.0.13](https://github.com/wekan/wekan/commit/64592d734cfdbe10b48c3aa3ea74e0ba35903976).
+  Thanks to xet7.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v7.29 2024-01-27 WeKan ® release
+
+This release removes the following features:
+
+- [Removed markdown-it-mathjax3](https://github.com/wekan/wekan/commit/19703fed311c894b61e9269cc0b973d0b0275a6a).
+  Thanks to Dexus and xet7.
+
+and adds the following updates:
+
+- [Updated to Meteor 2.14.1-beta.0](https://github.com/wekan/wekan/commit/28d640afb40f4d7c9070fa514c910fbf7065a724).
+  Thanks to Meteor developers.
+- [Updated to MongoDB 7.0.5 at Snap Candidate and Docker](https://github.com/wekan/wekan/commit/f624211620c5e42ccdd6f931ba473be62437a62c).
+  Thanks to MongoDB developers.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v7.28 2024-01-23 WeKan ® release
+
+This release adds the following new features:
+
+- [Added archive option to of Wekan API](https://github.com/wekan/wekan/pull/5265).
+  Thanks to gustavengstrom.
+
+and adds the following updates:
+
+- Updated dependencies.
+  [Part 1](https://github.com/wekan/wekan/pull/5270),
+  [Part 2](https://github.com/wekan/wekan/pull/5271),
+  [Part 3](https://github.com/wekan/wekan/commit/67896adefc4a12a93fed7575f621f8aa924a2ab8).
+  Thanks to developers of dependencies.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v7.27 2024-01-02 WeKan ® release
+
+This release fixes the following bugs:
+
+- [Fix missing maximize card](https://github.com/wekan/wekan/commit/f10f80f6559a6cdee020d5ca34fd5991e07617cf).
+  Thanks to xet7.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v7.26 2024-01-02 WeKan ® release
+
+This release fixes the following bugs:
+
+-[Fix some public board buttons](https://github.com/wekan/wekan/commit/8ae47cb2f82bcc2078cc9c9987f7d7b7f6394493).
+ Thanks to xet7.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v7.25 2023-12-30 WeKan ® release
+
+This release adds the following updates:
+
+- [Snap: Organized file locations](https://github.com/wekan/wekan/commit/84a228fc1a7ced2b8b146795acc13eb5abb13d24).
+  Thanks to xet7.
+- Updated GitHub Actions.
+  [Part 1](https://github.com/wekan/wekan/pulls/5243),
+  [Part 2](https://github.com/wekan/wekan/pulls/5244),
+  [Part 3](https://github.com/wekan/wekan/pulls/5245).
+- [Updated percolate:synced-cron](https://github.com/wekan/wekan/commit/06397e9e11a689a0a2e6a95ae785749d5a6a695b).
+  Thanks to developers of percolate:synced-cron.
+- Snap: Added MongoDB 3 binaries for migrating to MongoDB 6.
+  [Part 1](https://github.com/wekan/wekan/commit/805458a7638ff6213929bfa70a46b5afeacaedf1),
+  [Part 2](https://github.com/wekan/wekan/commit/335f0451e07d6ff924c0af3e5a934676c8e69f4c),
+  [Part 3](https://github.com/wekan/wekan/commit/374e67310723f3c0d3ab20f6b2e4bd0b273bce2b).
+  Thanks to xet7.
+- [Updated dependencies](https://github.com/wekan/wekan/commit/0e6d83c0852b2da4430f9c902b84c16f5c2ee8bc).
+  Thanks to developers of dependencies.
+
+and adds the following translations:
+
+- [Translations: Added German (Germany) (de_DE) and Odia (India) (or_IN)](https://github.com/wekan/wekan/commit/23c2a2bc224e2def4722a35c20f32a21062b4154).
+  Thanks to translators.
+
+and fixes the following bugs:
+
+- [Fix: Export HTML popup](https://github.com/wekan/wekan/pull/5252).
+  Thanks to Lewiscowles1986.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v7.24 2023-12-17 WeKan ® release
+
+This release adds the following new features:
+
+- [Azure AD B2C login using OAuth2](https://github.com/wekan/wekan/commit/93be112a9454c894c1ce3146ed377e6a6aeca64a).
+  https://github.com/wekan/wekan/wiki/B2C .
+  Thanks to snowsky and xet7.
+
+and adds the following updates:
+
+- [Upgrade to Meteor 2.14](https://github.com/wekan/wekan/commit/75383fe477874a7aaf5caa3b913e2173694efe13).
+  Thanks to Meteor developers.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v7.23 2023-12-11 WeKan ® release
+
+This release adds the following updates:
+
+- [Updated security.md about mitm](https://github.com/wekan/wekan/commit/b4c9c1df9a7e89d263b1864407a7007338ce770d).
+  Thanks to xet7.
+- [Upgraded to Meteor 2.14-rc.3](https://github.com/wekan/wekan/commit/6a3b8a668bc84c89714e44c3865168be81c8e2ed).
+  Thanks to Meteor developers.
+- [Updated dependencies](https://github.com/wekan/wekan/commit/e3a0a480ed960d30fc80f7c7c1a6c7471368d0e8).
+  Thanks to developers of dependencies.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v7.22 2023-12-01 WeKan ® release
+
+This release adds the following new features:
+
+- [At right sidebar, moved Minicard Settings to Card Settings popup](https://github.com/wekan/wekan/commit/2f2a039e3c1957b8921f3800315508d4f51c21b7).
+  Thanks to Roemer and xet7.
+- [New feature: Sidebar / Card Settings / Creator at minicard](https://github.com/wekan/wekan/commit/f3242869110738210b712761dda67fec34932307).
+  Thanks to Roemer and xet7.
+
+and adds the following updates:
+
+- [Upgraded to MongoDB 6.0.12 at Snap Candidate](https://github.com/wekan/wekan/commit/31ca78c17b0c734087cef99d481b939ac9533612).
+  Thanks to MongoDB developers.
+
+and fixes the following bugs:
+
+- [Fixed Markdown and copy buttons on top of text](https://github.com/wekan/wekan/commit/3cc10c77f99db344d0af3d6d862eb05c909fbf2c).
+  Thanks to mueller-ma and xet7.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v7.21 2023-11-27 WeKan ® release
+
+This release adds the following updates:
+
+- [Updated dependencies](https://github.com/wekan/wekan/commit/fef0c0e490ef0d90b6504074312bf827ff5f2d61).
+  Thanks to developers of dependencies.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v7.20 2023-11-26 WeKan ® release
+
+This release adds the following updates:
+
+- [Added standard for public code assessment](https://github.com/wekan/wekan/commit/a307bfa1ec82b66d97714bff32d4201aa8e6e6f7).
+  Thanks to those that participated to making of assessment.
+- [Upgraded to Meteor 2.14-beta.2](https://github.com/wekan/wekan/commit/126ddda45d07769f9fef67aa74241c9afa04b6a8).
+  Thanks to Meteor developers.
+- [Upgraded to Meteor 2.14-beta.4](https://github.com/wekan/wekan/commit/d90ab03bbe9f13d211aaca2e72542386fdf2a6ba).
+  Thanks to Meteor developers.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v7.19 2023-11-20 WeKan ® release
+
+This release adds the following new features:
+
+- [Updated swimlane (restore and changed title) and board (changed title) webhooks](https://github.com/wekan/wekan/pull/5205).
+  Thanks to gustavengstrom.
+- When user logins, "Automatically add user with the domain name" (at Admin Panel / Organizations) to Organization. In Progress.
+  [Part 1](https://github.com/wekan/wekan/commit/6e2f84673e98abec07a10c843ab83bed50774b35),
+  [Part 2](https://github.com/wekan/wekan/commit/9bc63669933bd763930add22ad7d05d89566d3ee).
+  Thanks to xet7.
+- [Permissions for default board after OIDC/OAuth2 login](https://github.com/wekan/wekan/pull/5213).
+  Thanks to diegosteiner.
+
+and adds the following updates:
+
+- [Added governance.md](https://github.com/wekan/wekan/commit/2b1d2222cc900e8c815c30a4d07c897e30ba3636).
+  Thanks to xet7.
+- Updated contributing.md.
+  [Part 1](https://github.com/wekan/wekan/commit/d840cb3be7b1788a4dbdd09ef45690afcf6b3dd4),
+  [Part 2](https://github.com/wekan/wekan/commit/e91e68c48c6392814fbc1362b7ae15ead34e7e47),
+  [Part 3](https://github.com/wekan/wekan/commit/026236edc962a8fc3863b9a4f7dc1d1f5dec3b5c),
+  [Part 4](https://github.com/wekan/wekan/commit/59874d16b9cf95ff05d92dd4d3bbdcb42fd37a94).
+- [Updated security.md](https://github.com/wekan/wekan/commit/f047c6da295c4ab5ddc6d4d0a8137f419d8704d5).
+- Updated code of conduct.md.
+  [Part 1](https://github.com/wekan/wekan/commit/c4293ecd95b9faec846060bcbcb8362cb58a54e6),
+  [Part 2](https://github.com/wekan/wekan/commit/f512047ac6439e53f92359f45ab907c629d225a9).
+
+and fixes the following bugs:
+
+- [Removed console.log](https://github.com/wekan/wekan/commit/0c54c1540c494bb7ffeb61a89cbc9a79c8f05d19).
+  Thanks to xet7.
+- [Fix typos at oidc_server.js](https://github.com/wekan/wekan/commit/cd51ad75086950f29adf245b6d6c0b43e69da171).
+  Thanks to xet7.
+- [Fix to not anymore show confusing Organization Id and Team Id fields at Admin Panel / People / People / Edit user](https://github.com/wekan/wekan/commit/6405c35bc08fc73657a4111c6fd72a8bd72ded70).
+  Thanks to xet7.
+- [Fix to not anymore require website for Organization and Team](https://github.com/wekan/wekan/commit/d4d6a5f96d88a89eb47ee56ba9857e859203a53c).
+  Thanks to xet7.
+- [Snap: Disable apparmor="DENIED" in syslog](https://github.com/wekan/wekan/commit/2048975e92152bb1c397b61fc2fd0a8124fade58).
+  Thanks to diegargon, webenefits and xet7.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v7.18 2023-11-14 WeKan ® release
+
+This release adds the following new features:
+
+- [Added restore list and changing list title to outgoing webhooks](https://github.com/wekan/wekan/pull/5198).
+  Thanks to gustavengstrom.
+
+and adds the following updates:
+
+- [Updated release scripts](https://github.com/wekan/wekan/commit/d4252f30567665897c6314b578dff1fe294265de).
+  Thanks to xet7.
+
+and fixes the following bugs:
+
+- [Add Docker label org.opencontainers.image.source](https://github.com/wekan/wekan/pull/5196).
+  Thanks to mueller-ma.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v7.17 2023-11-09 WeKan ® release
+
+This release fixes the following bugs:
+
+- [Fix move card rule on checklist complete doesn't work, with ReactiveMiniMongoIndex for Server-Side](https://github.com/wekan/wekan/pull/5194).
+  Thanks to mfilser.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v7.16 2023-11-09 WeKan ® release
+
+This release fixes the following bugs:
+
+- [Fix users.save is not a function](https://github.com/wekan/wekan/commit/42ece21fa14113a28792bf97dfd899a064f0ea56).
+  Thanks to xet7.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v7.15 2023-11-09 WeKan ® release
+
+This release fixes the following bugs:
+
+- [Fix missing profile/avatar pictures](https://github.com/wekan/wekan/commit/4e97a5351a4ac715d21503a129f12fe5bf3f4016).
+  Thanks to kovacs-andras and xet7.
+- [Commented out links at My Cards Table, because they unexpectly caused to go elsewhere from current view](https://github.com/wekan/wekan/commit/2c36fe3d45a0f95f8ba18526ffd1dc230f6f46a8).
+  Thanks to xet7.
+- [Add more Docker Labels to Dockerfile](https://github.com/wekan/wekan/commit/52e76c5496b6621916b61f35d5b68687685e0809).
+  Thanks to mueller-ma and xet7.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v7.14 2023-11-09 WeKan ® release
+
+This release adds the following updates:
+
+- [Upgraded to Meteor 2.14-beta.0](https://github.com/wekan/wekan/commit/55903472aae0032a49f03529cc9013007a20475e).
+  Thanks to Meteor developers.
+
+and fixes the following bugs:
+
+- [Removed double edit text from card description](https://github.com/wekan/wekan/commit/972981a57997fdaeb5202a3c588cd9eb83516360).
+  Thanks to derbolle and xet7.
+- [Fix Notifications are identical until one is marked read](https://github.com/wekan/wekan/pull/5189).
+  Thanks to mfilser.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v7.12 2023-11-02 WeKan ® release
+
+This release adds the following updates:
+
+- [Updated Snap Candidate MongoDB to 6.0.11](https://github.com/wekan/wekan/commit/ff4c8a5d23d9315ad12970c35cf2928b204b073b).
+  Thanks to MongoDB developers.
+
+and fixes the following bugs:
+
+- [Fix Add List button too wide at themes: Clearblue, Modern, Exodark](https://github.com/wekan/wekan/commit/b756150f76c711cf93aa486a55d0e3340f558c01).
+  Thanks to xet7.
+- [Fix Windows build bundle script](https://github.com/wekan/wekan/commit/720d4223e21da7fa6651dcb51def81a8e081750d).
+  Thanks to xet7.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v7.11 2023-11-02 WeKan ® release
+
+Known issues: At some non-amd64 platforms, Node.js 14.x may show segmentation fault.
+This will be fixed when upgrading to Node.js 18.x or newer works.
+
+This release fixes the following CRITICAL SECURITY ISSUES:
+
+- [Fix Security issue: Hyperlink injection](https://github.com/wekan/wekan/commit/4fe168b03b1f4303c2b117d24ad63ca9f40a02d2).
+  Thanks to mc-marcy and xet7.
+
+and adds the following new features:
+
+- [Feature: Convert to Markdown button at editor of Card Description and Comment. Useful when there is no WYSIWYG editor](https://github.com/wekan/wekan/commit/069e2c69b2e00e402628a3123164af257533ddc6).
+  Thanks to BabyFnord and xet7.
+- [Feature: Copy Card Details code block to clipboard](https://github.com/wekan/wekan/commit/0cc63b810c5a9e23a8a3939a11176f25c1fa8dc7).
+  Thanks to C0rn3j and xet7.
+
+and adds the following updates:
+
+- [docker-compose.yml back to latest docker image tag](https://github.com/wekan/wekan/commit/cfa0a063ce4ac5b2dcfa9952764cb15ce21bc263).
+  Thanks to xet7.
+- [Updated year at license](https://github.com/wekan/wekan/commit/0e902d73a881e4f1a17ee7f2028e1b041872ab61).
+  Thanks to xet7.
+- [Updated screenshot at readme](https://github.com/wekan/wekan/commit/be72274ca515dc7b652cb1b93361e97089186166).
+  Thanks to xet7.
+- [Added info to docker-compose.yml about newest docker image of newest git commit automatic build](https://github.com/wekan/wekan/commit/c9e80eaa03e42d1976576ad6553c056840f3060c).
+  Thanks to xet7.
+- Updated SECURITY.md.
+  [Part 1](https://github.com/wekan/wekan/commit/aae7960f251fe626d8bb319643e4cd939a8fbfa9),
+  [Part 2](https://github.com/wekan/wekan/commit/f5355422ee21d54e26785f483a7eaecade3d1b64),
+  [Part 3](https://github.com/wekan/wekan/commit/fe985e219a9e467973e9449762fc17c6a94e9031),
+  [Part 4](https://github.com/wekan/wekan/commit/90da40fde0b2c68d3f751fe8ff2a06f3180cf6d9),
+  [Part 5](https://github.com/wekan/wekan/commit/2c74240bcb9d24e206ffe4e59bc8242a6abd07d9).
+- Updated dependencies.
+  [Part 1](https://github.com/wekan/wekan/commit/c45bf4e36882c898055db248bf54a8e7e0add3c4),
+  [Part 1](https://github.com/wekan/wekan/commit/b08876327237c549783a2ee7d07db7f2dd0904a7),
+  [Part 1](https://github.com/wekan/wekan/commit/75de7b119d868e0e1ef650d7d795b7349b1c9281),
+  [Part 1](https://github.com/wekan/wekan/commit/974c17723705d58b660154bb2fd8997c018ddddc).
+  Thanks to developers of dependencies.
+- [Docker base image to Ubuntu 23.10](https://github.com/wekan/wekan/commit/0f99f22fa5bfc7d3764de2a7f34165f699571449).
+  Thanks to Ubuntu developers.
+- [Updated dependencies](https://github.com/wekan/wekan/commit/8323649cf098388684ea5e690dcb233171440345).
+  Thanks to zodern.
+- [Updated dependencies](https://github.com/wekan/wekan/commit/b54d17467cd2868091c52240594630923875946c).
+  Thanks to exceljs developers.
+
+and fixed the following bugs:
+
+- [Fixed can not close sidebar at Modern theme](https://github.com/wekan/wekan/commit/53e569d28582a04d7bac49c23cd04ed8f546ed71).
+  Thanks to xet7.
+- [Fix LDAP login](https://github.com/wekan/wekan/pull/5159).
+  Thanks to faburem.
+- [Fix can't use card template](https://github.com/wekan/wekan/pull/5161).
+  Thanks to faburem.
+- [Open card details always in the middle of the screen](https://github.com/wekan/wekan/pull/5168).
+  Thanks to mfilser.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v7.10 2023-09-29 WeKan ® release
+
+This release adds the following new features:
+
+- At opened card, toggle to show checklist at minicard.
+  [Part 1](https://github.com/wekan/wekan/commit/2a190fdc194ac2fc2d8086521c5a3eaa2aff0641),
+  [Part 2](https://github.com/wekan/wekan/commit/2c99d1cecbaab8556b65bce857b8d93c2cc62c37),
+  [Part 3](https://github.com/wekan/wekan/commit/80312d30520840145ee24042aca3ebeda3260d99),
+  [Part 4](https://github.com/wekan/wekan/commit/86814a0fd8615fde1867dcf2841b6a24fcfb105b),
+  [Part 5](https://github.com/wekan/wekan/commit/75d524f61558b2b6003220c43aa23adb142da91d),
+  [Part 6](https://github.com/wekan/wekan/commit/47468a475003c433db0fcc7735741e4548d6c19c).
+  Thanks to xet7.
+- [Added show-subtasks-field to be translateable at Board Settings / Subtasks Settings](https://github.com/wekan/wekan/commit/e60eddda0440f49d769d73db212322d5ba994662).
+  Thanks to xet7.
+- [After OIDC login, add users to board DEFAULT_BOARD_ID](https://github.com/wekan/wekan/pull/5098).
+  Thanks to diegosteiner.
+- [Added DEFAULT_BOARD_ID environment variable setting to all WeKan platforms](https://github.com/wekan/wekan/commit/a781c0e7dcfdbe34c1483ee83cec12455b7026f7).
+  Thanks to xet7.
+- [Make available translation text to set empty string](https://github.com/wekan/wekan/pull/5103).
+  Thanks to ipyramiddev.
+- [Added a condition to filter unwanted webhooks](https://github.com/wekan/wekan/pull/5106).
+  Thanks to ipyramiddev.
+- [Added docker-compose.yml-arm64](https://github.com/wekan/wekan/commit/e103bf46dd796b5c589b315ca68c7a60b5e388db).
+  Thanks to xet7.
+
+and adds the following updates:
+
+- [In rebuild-wekan.sh, option 9 to Save Meteor dependency chain to ../meteor-deps.txt](https://github.com/wekan/wekan/commit/7c80a34cf238cbccfe4fed0fb92cf73ddff6beed).
+  Thanks to xet7.
+- [Update FullCalendar version to 3.10.5](https://github.com/wekan/wekan/pull/5100).
+  Thanks to helioguardabaxo.
+- [Renamed directory packages/meteor-fullcalendar to packages/wekan-fullcalendar](https://github.com/wekan/wekan/commit/2d652df176b63f7cc27e9de51fbf2f2cbd52ef34).
+  Thanks to xet7.
+- [Removed old demo API key to silence GitHub secret scanning warning](https://github.com/wekan/wekan/commit/c22e71e3a2175260e483a08026e1ea3446dc77fa).
+  Thanks to xet7.
+- [Added assetlinks.json](https://github.com/wekan/wekan/commit/74b98a5ee40564448906f41cf66f93ee73faaea1).
+  Thanks to xet7.
+- [Update translations. Added Afrikaans (af), Afrikaans (South africa)(af_ZA), English (South Africa)(en_ZA)](https://github.com/wekan/wekan/commit/ee4a3b5b35ade479b8ddf7cdedf56aa1ef676b3f).
+  Thanks to translators.
+- Updated dependencies.
+  [Part 1](https://github.com/wekan/wekan/commit/4933bf8203dd615ca02963bd502a1cca2584bbac),
+  [Part 2](https://github.com/wekan/wekan/pull/5119).
+  [Part 3](https://github.com/wekan/wekan/pull/5129).
+  Thanks to developers of dependencies.
+- [Update Font Awesome version to 6.4.2](https://github.com/wekan/wekan/pull/5125).
+  Thanks to helioguardabaxo.
+- [Removed Font Awesome not in use directories svgs, scss and less](https://github.com/wekan/wekan/commit/473e2c28c6093403881515067e1b0560eddc85b2).
+  Thanks to xet7.
+- [Add all Font Awesome characters](https://github.com/wekan/wekan/pull/5128).
+  Thanks to helioguardabaxo.
+- [Update Bootstrap Datepicker version to 1.10.0](https://github.com/wekan/wekan/pull/5126).
+  Thanks to helioguardabaxo.
+- [Removed non-existing sw translation and not needed files from bootstrap-datepicker](https://github.com/wekan/wekan/commit/dfe05cc924767e69f40a7332f0e0196ddf2bc8d5).
+  Thanks to xet7.
+- [Upgraded to Meteor 2.13.3](https://github.com/wekan/wekan/commit/6b88ae2ba26427ab58597b580440e601fd77b320).
+  Thanks to Meteor developers.
+- [Upgrade Snap Candidate to MongoDB 6.0.10](https://github.com/wekan/wekan/commit/522ab40f436be5656fd6fbd8057c6715afa2fa36).
+  Thanks to MongoDB developers.
+- Renamed WeKan repo branch master to main.
+  [Part 1](https://github.com/wekan/wekan/commit/549982b5e10c240fb2358c21b0781fef2e63a2ba),
+  [Part 2](https://github.com/wekan/wekan/commit/fa32010a656a47a6fba9a625d6ab216c9b2034df),
+  [Part 3](https://github.com/wekan/wekan/commit/b68493b009bbbb63cf26c9020299762c2a2717aa).
+  Thanks to xet7.
+- [Use newest Docker build from newest main branch commit at docker-compose.yml](https://github.com/wekan/wekan/commit/8cba42efbefeac159c0c653b53f6464a2fc5ed09).
+  Thanks to xet7.
+- [Removed disabled codeql-analysis workflow](https://github.com/wekan/wekan/commit/240e05ba1640e92de639ddded5c4a20b32a74d2a).
+  Thanks to xet7.
+- [Updated versions at Dockerfile](https://github.com/wekan/wekan/commit/637442563ea843a89396d557db3327c1775e6a12).
+  Thanks to xet7.
+- [Fixed arm64 Dockerfile](https://github.com/wekan/wekan/commit/73e690a5fee24707377d3fe7985c52947cbc8929).
+  Thanks to manfromdownunder and xet7.
+- [Added Dockerfile for s390x](https://github.com/wekan/wekan/commit/eacb310e59e03b44b0249206b28e4cb3adf163d0).
+  Thanks to xet7.
+- [Updated dependencies](https://github.com/wekan/wekan/commit/52ce6da32c54d8c65ed679072c64fda66e1606a0).
+  Thanks to developers of dependencies.
+
+and fixes the following bugs:
+
+- [Correctly display preview for very tall images](https://github.com/wekan/wekan/pull/5097).
+  Thanks to VidVidex.
+- Replaced ldap logger https://www.npmjs.com/package/bunyan with https://docs.meteor.com/packages/logging.html, because bunyan did show dtrace errors when building WeKan.
+  [Part 1](https://github.com/wekan/wekan/commit/e83945c1a6c08fe58f660bcd7b7f8494f629e913),
+  [Part 2](https://github.com/wekan/wekan/commit/427eb8ebd16b847eb278cd319adb75adc5206e99).
+  Thanks to xet7.
+- [Comment out warning about unset variable at ldap.js](https://github.com/wekan/wekan/commit/7f91055d8c7ed508b2f6fca111f17ec1353c445a).
+  Thanks to xet7.
+- [Removed CollectionFS and and attachment migrations, because they prevented using MONGO_URL username/passwrod with MongoDB 6.x, CollectionFS forced old MongoDB driver](https://github.com/wekan/wekan/commit/3b936ff6e7ed733a65488f1384f868e17b8ab751).
+  Thanks to xet7.
+- [Hide incomplete feature Show checklist at minicard](https://github.com/wekan/wekan/commit/75d524f61558b2b6003220c43aa23adb142da91d).
+  Thanks to xet7.
+- [Fix for CalendarView, Create Card without Refresh](https://github.com/wekan/wekan/pull/5105).
+  Thanks to DimDz.
+- [Active members list now is ordered](https://github.com/wekan/wekan/pull/5107).
+  Thanks to helioguardabaxo.
+- [Removed limit when setting Swimlane max height](https://github.com/wekan/wekan/commit/7f9aa7509314a85a550dd16615429c5e030b5f2b).
+  Thanks to Meeques, mark-i-m and xet7.
+- [Fixed Can't login via LDAP because of some Node.js issues](https://github.com/wekan/wekan/commit/c898a3f5ea689469f4e1003b90162bd4233b6aeb).
+  Thanks to Danny-Graf and xet7.
+- [Stop using /etc/timezone in Docker. Only use /etc/localtime](https://github.com/wekan/wekan/commit/7baa95fcab5447a359c84a2139b1968f0332f683).
+  Thanks to dabiao2008 and xet7.
+- [Fix createCardWithDueDate Error: User id is required](https://github.com/wekan/wekan/commit/7d1ab0a38875909de02230e70181a7ddb5187870).
+  Thanks to xet7.
+- [Fix Swimlane Default title from "key default returned an object instead of string" to translated title of "Default"](https://github.com/wekan/wekan/commit/73a25775e1cb7b1f1b355707e21e3704b98ca9c5).
+  Thanks to titho85, hpvb and xet7.
+- [Fix allow normal user to view subtasks at subtasks board](https://github.com/wekan/wekan/commit/22d98fec38dd16b4cc8ad0fdca8c2973e9779e08).
+  Thanks to xet7.
+- [Fix minicard description text color to black, so that it is visible at light grey background](https://github.com/wekan/wekan/commit/ab944e51c728412d455d88b5714e84393eccb210).
+  Thanks to xet7.
+- [Fix mini width of add list also to moderndark theme](https://github.com/wekan/wekan/commit/05c6e101ff32efb42365ac2ffbd802497d5199ac).
+  Thanks to xet7.
+- [Fixed typo at ldap.js](https://github.com/wekan/wekan/commit/c27a00a4a872cca280ee07079f93941bbee9844f).
+  Thanks to xet7.
+- [Try to get some label outgoing webhooks working](https://github.com/wekan/wekan/commit/b40654cdfea61cd7a0a6c7f5efca86b62b3a2cbd).
+  Thanks to xet7.
+- [Fix missing Font Awesome icons](https://github.com/wekan/wekan/pull/5133).
+  Thanks to helioguardabaxo.
+- [Font Awesome 6.4.2 adding missing icons](https://github.com/wekan/wekan/pull/5134).
+  Thanks to mfilser.
+- [Make sessinAffinity stickable to clientIP](https://github.com/wekan/wekan/pull/5136).
+  Thanks to Dexus.
+- [Users can't change their password since V7.02](https://github.com/wekan/wekan/pull/5146).
+  Thanks to nebulade.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v7.09 2023-08-21 WeKan ® release
+
+This release adds the following new features:
+
+- [Move card to other boards API](https://github.com/wekan/wekan/pull/5090).
+  Thanks to DimDz.
+
+and adds the following updates:
+
+- [Upgraded Snap Candidate MongoDB to 6.0.9](https://github.com/wekan/wekan/commit/9d5af24e7b656c2bf6ad32bc8360bb80374408d6).
+  Thanks to MongoDB developers.
+- Fixed building s390x release.
+  [Part 1](https://github.com/wekan/wekan/commit/73f943f89a89374a83cdfb31f0bfbfdfe4d6f52e),
+  [Part 2](https://github.com/wekan/wekan/commit/7dfb1eb6ce00166a6263f98b9bf975b8a84d1143).
+  Thanks to xet7.
+- [ReactiveCache, use default parameters](https://github.com/wekan/wekan/pull/5091).
+  Thanks to mfilser.
+- [ReactiveCache, serialize and parse json with EJSON](https://github.com/wekan/wekan/pull/5092).
+  Thanks to mfilser.
+- [Translations are working on the client side again](https://github.com/wekan/wekan/pull/5093).
+  Thanks to mfilser.
+- [ReactiveCache, full implementation of the collection "Translation"](https://github.com/wekan/wekan/pull/5094).
+  Thanks to mfilser.
+- [Attachments, big images are now fully displayed](https://github.com/wekan/wekan/pull/5095).
+  Thanks to mfilser.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v7.08 2023-08-17 WeKan ® release
+
+This release adds the following new features:
+
+- [Custom translation strings at Admin Panel](https://github.com/wekan/wekan/pull/5085).
+  Thanks to ipyramiddev.
+- [Added remaining translations to feature custom translation strings at Admin Panel](https://github.com/wekan/wekan/commit/c769bed7dd6d61b5f56e0ec5d43c9f2662a156d2).
+  Thanks to xet7.
+- [Corrected source code so that it works correctly with reactiveCache](https://github.com/wekan/wekan/pull/5087).
+  Thanks to ipyramiddev.
+
+and adds the following updates:
+
+- Updated release scripts.
+  [Part 1](https://github.com/wekan/wekan/commit/558d406148eb47c27de9828b541f6081ceac224a),
+  [Part 2](https://github.com/wekan/wekan/commit/d6b960f79a5cb9db83587fae7d9c83d2ee63d90c),
+  [Part 3](https://github.com/wekan/wekan/commit/c570e426a1e6c4055a72a8ae6febce016c3eef5a),
+  [Part 4](https://github.com/wekan/wekan/commit/c47d5ca64e8c9c8a977d7dca5aeb92afb2e62fe5),
+  [Part 5](https://github.com/wekan/wekan/commit/7b94188f64e554be11bee244892a0cd9fefd0a9a),
+  [Part 6](https://github.com/wekan/wekan/commit/b068d07ce56add0fbd02a4a23fcb14d77bd9fcfd).
+  Thanks to xet7.
+
+and fixes the following bugs:
+
+- [Fix broken attachment preview in Safari](https://github.com/wekan/wekan/pull/5088).
+  Thanks to VidVidex.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v7.07 2023-08-16 WeKan ® release
+
+This release adds the following updates:
+
+- [Update Windows bundle build script](https://github.com/wekan/wekan/commit/d48068f63c93fc5a9f8041acb220d6491b5e22ae).
+  Thanks to xet7.
+
+and fixes the following bugs:
+
+- [Fix downloading attachments with unusual filenames](https://github.com/wekan/wekan/pull/5083).
+  Thanks to VidVidex.
+- [Add some filename, if there is no filename after sanitize](https://github.com/wekan/wekan/commit/3d1a161c59a0cb4eafb50ab2fdb04443d54b2086).
+  Thanks to xet7.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v7.06 2023-08-15 WeKan ® release
+
+This release adds the following updates:
+
+- [Updated exceljs and jszip](https://github.com/wekan/wekan/commit/f9823f67bd7ded44982298b15487f945e8216b60).
+  Thanks to developers of dependencies.
+- [Update building Windows bundle](https://github.com/wekan/wekan/commit/6d1705af344a36e1cd7846c3d41e486ae0200e2e).
+  Thanks to xet7.
+- [s390x disabled, because there is problem adding fibers](https://github.com/wekan/wekan/commit/9bf3b960a199ec8d65faab3061947d809144ebdc).
+  Thanks to xet7.
+
+and fixes the following bugs:
+
+- [Alphabetic ordered member lists on assigne and member lists](https://github.com/wekan/wekan/pull/5071).
+  Thanks to chrisi51.
+- [Label drag/drop (reorder labels) works now again](https://github.com/wekan/wekan/pull/5075).
+  Thanks to mfilser.
+- [Add attachment swiping](https://github.com/wekan/wekan/pull/5080).
+  Thanks to VidVidex.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v7.05 2023-08-08 WeKan ® release
+
+This release adds the following updates:
+
+- [Updated dependencies](https://github.com/wekan/wekan/commit/529a43fa0e47ff478dd6b2e6f1c7b4513fe0bbbb).
+  Thanks to developers of dependencies.
+
+and fixes the following bugs:
+
+- [Make default swimlane auto-height](https://github.com/wekan/wekan/pull/5059).
+  Thanks to mark-i-m.
+- [Show option b) -1 for disabling swimlane height at swimlane height popup](https://github.com/wekan/wekan/commit/ab4073721151e1308b2e9ffd32a1ee765c7b7668).
+  Thanks to xet7.
+- [Fixed Normal (non-admin) board users cannot adjust swimlane height](https://github.com/wekan/wekan/commit/6b1403984f3b11700f6b06b4eff64a062916381a).
+  Thanks to mgdbbrt and xet7.
+- [Fixing positioning of opened cards](https://github.com/wekan/wekan/pull/5066).
+  Thanks to chrisi51.
+- [Cleaner memberlist popups](https://github.com/wekan/wekan/issues/5068).
+  Thanks to chrisi51.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v7.04 2023-08-03 WeKan ® release
+
+This release fixes the following bugs:
+
+- [Fix edit_swimlane](https://github.com/wekan/wekan/pull/5055).
+  Thanks to Pandetthe.
+. [Login layout fixes 2](https://github.com/wekan/wekan/pull/5056).
+  Thanks to nebulade.
+- [Do not open preview for attachments that cannot be previewed](https://github.com/wekan/wekan/pull/5058).
+  Thanks to VidVidex.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v7.03 2023-08-02 WeKan ® release
+
+This release fixes the following bugs:
+
+- [Fix return value of edit_custom_field_dropdown_item](https://github.com/wekan/wekan/pull/5047).
+  Thanks to Pandetthe.
+- [Move authentication UI handling in correct place](https://github.com/wekan/wekan/pull/5049).
+  Thanks to nebulade.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
 # v7.02 2023-08-02 WeKan ® release
 
 This release adds the following new features:
@@ -2446,7 +3320,7 @@ and adds the following accessibility improvements:
 
 - Made WeKan zoomable by recommendation of Axe browser extension
   https://github.com/wekan/wekan/issues/459#issuecomment-999098233 by changing meta viewport settings at
-  https://github.com/wekan/wekan/blob/master/client/components/main/layouts.jade#L3 ,
+  https://github.com/wekan/wekan/blob/main/client/components/main/layouts.jade#L3 ,
   in some commit of this WeKan v5.88.
   Thanks to xet7.
 
@@ -6300,7 +7174,7 @@ This release fixes the following CRITICAL SECURITY VULNERABILITIES:
 - [Fix XSS bug reported today 4 hours ago by Cyb3rjunky](https://github.com/wekan/wekan/commit/482682e50079d70c5113169020d6834013b57c11).
   Logged in users could run javascript in input fields.
   This affects Wekan versions v3.12-v3.84.
-  In [Wekan v3.12](https://github.com/wekan/wekan/blob/master/CHANGELOG.md#v312-2019-08-09-wekan-release)
+  In [Wekan v3.12](https://github.com/wekan/wekan/blob/main/CHANGELOG.md#v312-2019-08-09-wekan-release)
   there was [changes for XSS filter to allow inserting images, videos etc
   on comment WYSIWYG editor](https://github.com/wekan/wekan/pull/2593)
   so features related to that are now removed.
@@ -8766,7 +9640,7 @@ This release adds the following new features:
 and fixes the following bugs:
 
 - Revert [Sandstorm API changes](https://github.com/wekan/wekan/commit/be03a191c4321c2f80116c0ee1ae6c826d882535)
-  that were done at [Wekan v2.05](https://github.com/wekan/wekan/blob/master/CHANGELOG.md#v205-2019-01-27-wekan-release)
+  that were done at [Wekan v2.05](https://github.com/wekan/wekan/blob/main/CHANGELOG.md#v205-2019-01-27-wekan-release)
   to fix #2143. Thanks to pantraining and xet7.
 
 Thanks to above GitHub users and translators for contributions.
@@ -8913,7 +9787,7 @@ Update translations. Thanks to translators.
 This release adds the following new features:
 
 - [IFTTT Rules improvements](https://github.com/wekan/wekan/pull/2088). Thanks to Angtrim.
-- Add [find.sh](https://github.com/wekan/wekan/blob/master/find.sh) bash script that ignores
+- Add [find.sh](https://github.com/wekan/wekan/blob/main/find.sh) bash script that ignores
   extra directories when searching. xet7 uses this a lot when developing. Thanks to xet7.
 
 Thanks to above GitHub users for their contributions.
@@ -10424,7 +11298,7 @@ This release adds the following new features:
 
 - [Checklist templates](https://github.com/wekan/wekan/pull/1470);
 - Added [Finnish language changelog](https://github.com/wekan/wekan/tree/devel/meta/t9n-changelog)
-  and [more Finnish traslations](https://github.com/wekan/wekan/blob/master/sandstorm-pkgdef.capnp)
+  and [more Finnish traslations](https://github.com/wekan/wekan/blob/main/sandstorm-pkgdef.capnp)
   to Sandstorm.
 
 Thanks to GitHub users erikturk and xet7 for their contributions.

CODE_OF_CONDUCT.md

@@ -0,0 +1,22 @@
+# Code of Conduct
+
+For all code at WeKan GitHub Organization https://github.com/wekan
+
+- All code in pull requests need to have permission already to add it to WeKan with MIT license, and will become MIT license.
+- All code xet7 add is MIT license.
+- For any dependencies, permissive licenses like https://copyfree.org are preferred
+- For anything currently that is non-permissive (like GPL, AGPL, SSPL), those will be replaced with permissive-licensed alternatives
+
+# Reporting about violations or something else
+
+## Private reports
+
+- Email support (at) wekan.team using [this PGP public key](support-at-wekan.team_pgp-publickey.asc) if possible
+- Security issues: [SECURITY.md](SECURITY.md)
+- License violations
+- Anything private, sensitive or negative
+
+## Public
+
+- Feature Requests and Bug Reports https://github.com/wekan/wekan/issues
+- Anything happy, positive, encouraging, helping, at friendly WeKan Global FOSS Community

CONTRIBUTING.md

@@ -1,19 +1,35 @@
+## About money
+
+Not paid:
+
+- Money is not paid for these, everyone uses their own time at their own cost:
+  - Security reports, see [SECURITY.md](SECURITY.md)
+  - Pull requests
+  - xet7 checking pull requests
+- Public Community Support
+  - https://github.com/wekan/wekan/issues
+
+Paid by customers of WeKan Team:
+
+- Commercial Support at https://wekan.team/commercial-support/
+  - Support
+  - Private Chat
+  - Features
+  - Fixes
+  - Hosting
+
 ## Contributing Security related
 
 For responsible security disclosure, please follow this process:
-https://github.com/wekan/wekan/blob/master/SECURITY.md
+https://github.com/wekan/wekan/blob/main/SECURITY.md
 
 CVE Hall of Fame is at https://wekan.github.io/hall-of-fame/
 
 ## Contributing to Documentation Wiki
 
-Please clone wiki:
-```
-git clone https://github.com/wekan/wekan.wiki
-```
-Edit .md files, and add changed files in .zip attachment
-directly to comment of new issue at
-https://github.com/wekan/wekan/issues 
+Fork WeKan repo https://github.com/wekan/wekan ,
+edit `docs` directory content at GitHub web interface,
+and click send PR.
 
 ## Contributing code
 
@@ -22,7 +38,7 @@ https://github.com/wekan/wekan/issues
 WeKan code contributors Hall of Fame is at ChangeLog, where
 GitHub usernames are mentioned with changes added:
 
-https://github.com/wekan/wekan/blob/master/CHANGELOG.md
+https://github.com/wekan/wekan/blob/main/CHANGELOG.md
 
 Changes can be like typo fixes, bugfixes, features, or anything else
 like for example at open GitHub issues https://github.com/wekan/wekan/issues .
@@ -42,7 +58,7 @@ About 300 persons have contributed to WeKan, stats at:
 
 https://www.openhub.net/p/wekan
 
-WeKan maintainer xet7 checks PR for typos etc before accepting to WeKan,
+WeKan maintainer xet7 reviews PR for typos etc before accepting to WeKan,
 so that WeKan code will still work OK.
 
 ## Contributing translations
@@ -53,7 +69,7 @@ https://transifex.com/wekan/wekan
 When adding new features, in your PR to
 https://github.com/wekan/wekan/pulls
 only add new English source language strings
-to https://github.com/wekan/wekan/blob/master/imports/i18n/data/en.i18n.json
+to https://github.com/wekan/wekan/blob/main/imports/i18n/data/en.i18n.json
 
 Maintainer of WeKan xet7 downloads all newest
 translations from Transifex and adds
@@ -62,12 +78,10 @@ new release.
 
 ## About WeKan Organization https://github.com/wekan
 
-xet7 rarely adds any new members to GitHub Organization,
-because xet7 prefers to check PRs.
+Only xet7 has write access to WeKan Organization.
 
-For some repos (other than https://github.com/wekan/wekan ),
-some contributors have direct commit access.
+xet7 reviews all PRs before merging.
 
-Some contributors are mentioned at this outdated page:
+There has been over 300 contributors to WeKan, newest stats at:
 
-https://github.com/wekan/wekan/wiki/Team
+https://www.openhub.net/p/wekan

Dockerfile

@@ -1,5 +1,8 @@
-FROM --platform=linux/amd64 ubuntu:23.04 as wekan
-LABEL maintainer="wekan"
+FROM --platform=linux/amd64 ubuntu:24.04 as wekan
+LABEL maintainer="wekan" \
+      org.opencontainers.image.ref.name="ubuntu" \
+      org.opencontainers.image.version="24.04" \
+      org.opencontainers.image.source="https://github.com/wekan/wekan"
 
 # 2022-09-04:
 # - above "--platform=linux/amd64 ubuntu:22.04 as wekan" is needed to build Dockerfile
@@ -22,15 +25,16 @@ ARG DEBIAN_FRONTEND=noninteractive
 ENV BUILD_DEPS="apt-utils libarchive-tools gnupg gosu wget curl bzip2 g++ build-essential git ca-certificates python3" \
     DEBUG=false \
     NODE_VERSION=v14.21.4 \
-    METEOR_RELEASE=METEOR@2.13 \
+    METEOR_RELEASE=METEOR@2.14 \
     USE_EDGE=false \
     METEOR_EDGE=1.5-beta.17 \
-    NPM_VERSION=latest \
+    NPM_VERSION=6.14.17 \
     FIBERS_VERSION=4.0.1 \
     ARCHITECTURE=linux-x64 \
     SRC_PATH=./ \
     WITH_API=true \
     RESULTS_PER_PAGE="" \
+    DEFAULT_BOARD_ID="" \
     ACCOUNTS_LOCKOUT_KNOWN_USERS_FAILURES_BEFORE=3 \
     ACCOUNTS_LOCKOUT_KNOWN_USERS_PERIOD=60 \
     ACCOUNTS_LOCKOUT_KNOWN_USERS_FAILURE_WINDOW=15 \
@@ -65,6 +69,7 @@ ENV BUILD_DEPS="apt-utils libarchive-tools gnupg gosu wget curl bzip2 g++ build-
     OIDC_REDIRECTION_ENABLED=false \
     OAUTH2_CA_CERT="" \
     OAUTH2_ADFS_ENABLED=false \
+    OAUTH2_B2C_ENABLED=false \
     OAUTH2_LOGIN_STYLE=redirect \
     OAUTH2_CLIENT_ID="" \
     OAUTH2_SECRET="" \
@@ -171,93 +176,92 @@ ENV BUILD_DEPS="apt-utils libarchive-tools gnupg gosu wget curl bzip2 g++ build-
 # Copy the app to the image
 COPY ${SRC_PATH} /home/wekan/app
 
-RUN \
-    set -o xtrace && \
-    # Add non-root user wekan
-    useradd --user-group --system --home-dir /home/wekan wekan && \
-    \
-    # OS dependencies
-    apt-get update -y && apt-get install -y --no-install-recommends ${BUILD_DEPS} && \
-    \
-    # Meteor installer doesn't work with the default tar binary, so using bsdtar while installing.
-    # https://github.com/coreos/bugs/issues/1095#issuecomment-350574389
-    cp $(which tar) $(which tar)~ && \
-    ln -sf $(which bsdtar) $(which tar) && \
-    \
-    # Download nodejs
-    wget https://github.com/wekan/node-v14-esm/releases/download/${NODE_VERSION}/node-${NODE_VERSION}-${ARCHITECTURE}.tar.gz && \
-    wget https://github.com/wekan/node-v14-esm/releases/download/${NODE_VERSION}/SHASUMS256.txt && \
-    #wget https://nodejs.org/dist/${NODE_VERSION}/node-${NODE_VERSION}-${ARCHITECTURE}.tar.gz && \
-    #wget https://nodejs.org/dist/${NODE_VERSION}/SHASUMS256.txt.asc && \
-    #---------------------------------------------------------------------------------------------
-    \
-    # Verify nodejs authenticity
-    grep node-${NODE_VERSION}-${ARCHITECTURE}.tar.gz SHASUMS256.txt | shasum -a 256 -c - && \
-    rm -f SHASUMS256.txt && \
-    #grep ${NODE_VERSION}-${ARCHITECTURE}.tar.gz SHASUMS256.txt.asc | shasum -a 256 -c - && \
-    #rm -f SHASUMS256.txt.asc && \
-    \
-    # Install Node
-    tar xvzf node-${NODE_VERSION}-${ARCHITECTURE}.tar.gz && \
-    rm node-${NODE_VERSION}-${ARCHITECTURE}.tar.gz && \
-    mv node-${NODE_VERSION}-${ARCHITECTURE} /opt/nodejs && \
-    ln -s /opt/nodejs/bin/node /usr/bin/node && \
-    ln -s /opt/nodejs/bin/npm /usr/bin/npm && \
-    mkdir -p /opt/nodejs/lib/node_modules/fibers/.node-gyp /root/.node-gyp/${NODE_VERSION} /home/wekan/.config && \
-    chown wekan --recursive /home/wekan/.config && \
-    \
-    #DOES NOT WORK: paxctl fix for alpine linux: https://github.com/wekan/wekan/issues/1303
-    #paxctl -mC `which node` && \
-    \
-    # Install Node dependencies. Python path for node-gyp.
-    npm install -g npm@${NPM_VERSION} && \
-    \
-    # Change user to wekan and install meteor
-    cd /home/wekan/ && \
-    chown wekan --recursive /home/wekan && \
-    echo "Starting meteor ${METEOR_RELEASE} installation...   \n" && \
-    gosu wekan:wekan curl https://install.meteor.com/ | /bin/sh && \
-    mv /root/.meteor /home/wekan/ && \
-    chown wekan --recursive /home/wekan/.meteor && \
-    \
-    sed -i 's/api\.versionsFrom/\/\/api.versionsFrom/' /home/wekan/app/packages/meteor-useraccounts-core/package.js && \
-    cd /home/wekan/.meteor && \
-    gosu wekan:wekan /home/wekan/.meteor/meteor -- help; \
-    \
-    # Build app
-    cd /home/wekan/app && \
-    mkdir -p /home/wekan/.npm && \
-    chown wekan --recursive /home/wekan/.npm /home/wekan/.config /home/wekan/.meteor && \
-    chmod u+w *.json && \
-    gosu wekan:wekan npm install && \
-    gosu wekan:wekan /home/wekan/.meteor/meteor build --directory /home/wekan/app_build && \
-    cd /home/wekan/app_build/bundle/programs/server/ && \
-    chmod u+w *.json && \
-    gosu wekan:wekan npm install && \
-    cd node_modules/fibers && \
-    node build.js && \
-    cd ../.. && \
-    # Remove legacy webbroser bundle, so that Wekan works also at Android Firefox, iOS Safari, etc.
-    rm -rf /home/wekan/app_build/bundle/programs/web.browser.legacy && \
-    mv /home/wekan/app_build/bundle /build && \
-    \
-    # Put back the original tar
-    mv $(which tar)~ $(which tar) && \
-    \
-    # Cleanup
-    apt-get remove --purge -y ${BUILD_DEPS} && \
-    apt-get autoremove -y && \
-    npm uninstall -g api2html &&\
-    rm -R /tmp/* && \
-    rm -R /var/lib/apt/lists/* && \
-    rm -R /home/wekan/.meteor && \
-    rm -R /home/wekan/app && \
-    rm -R /home/wekan/app_build && \
-    mkdir /data && \
-    chown wekan --recursive /data
-    #cat /home/wekan/python/esprima-python/files.txt | xargs rm -R && \
-    #rm -R /home/wekan/python
-    #rm /home/wekan/install_meteor.sh
+RUN <<EOR
+set -o xtrace
+# Add non-root user wekan
+useradd --user-group --system --home-dir /home/wekan wekan
+# OS dependencies
+apt-get update -y
+apt-get install -y --no-install-recommends ${BUILD_DEPS}
+# Meteor installer doesn't work with the default tar binary, so using bsdtar while installing.
+# https://github.com/coreos/bugs/issues/1095#issuecomment-350574389
+cp $(which tar) $(which tar)~
+ln -sf $(which bsdtar) $(which tar)
+# Download nodejs
+wget https://github.com/wekan/node-v14-esm/releases/download/${NODE_VERSION}/node-${NODE_VERSION}-${ARCHITECTURE}.tar.gz
+wget https://github.com/wekan/node-v14-esm/releases/download/${NODE_VERSION}/SHASUMS256.txt
+#wget https://nodejs.org/dist/${NODE_VERSION}/node-${NODE_VERSION}-${ARCHITECTURE}.tar.gz
+#wget https://nodejs.org/dist/${NODE_VERSION}/SHASUMS256.txt.asc
+#---------------------------------------------------------------------------------------------
+
+# Verify nodejs authenticity
+grep node-${NODE_VERSION}-${ARCHITECTURE}.tar.gz SHASUMS256.txt | shasum -a 256 -c -
+rm -f SHASUMS256.txt
+#grep ${NODE_VERSION}-${ARCHITECTURE}.tar.gz SHASUMS256.txt.asc | shasum -a 256 -c -
+#rm -f SHASUMS256.txt.asc
+
+# Install Node
+tar xvzf node-${NODE_VERSION}-${ARCHITECTURE}.tar.gz
+rm node-${NODE_VERSION}-${ARCHITECTURE}.tar.gz
+mv node-${NODE_VERSION}-${ARCHITECTURE} /opt/nodejs
+ln -s /opt/nodejs/bin/node /usr/bin/node
+ln -s /opt/nodejs/bin/npm /usr/bin/npm
+mkdir -p /opt/nodejs/lib/node_modules/fibers/.node-gyp /root/.node-gyp/${NODE_VERSION} /home/wekan/.config
+chown wekan --recursive /home/wekan/.config
+
+#DOES NOT WORK: paxctl fix for alpine linux: https://github.com/wekan/wekan/issues/1303
+#paxctl -mC `which node`
+
+# Install Node dependencies. Python path for node-gyp.
+npm install -g npm@${NPM_VERSION}
+
+# Change user to wekan and install meteor
+cd /home/wekan/
+chown wekan --recursive /home/wekan
+echo "Starting meteor ${METEOR_RELEASE} installation...   \n"
+gosu wekan:wekan curl https://install.meteor.com/ | /bin/sh
+mv /root/.meteor /home/wekan/
+chown wekan --recursive /home/wekan/.meteor
+
+sed -i 's/api\.versionsFrom/\/\/api.versionsFrom/' /home/wekan/app/packages/meteor-useraccounts-core/package.js
+cd /home/wekan/.meteor
+gosu wekan:wekan /home/wekan/.meteor/meteor -- help;
+
+# Build app
+cd /home/wekan/app
+mkdir -p /home/wekan/.npm
+chown wekan --recursive /home/wekan/.npm /home/wekan/.config /home/wekan/.meteor
+chmod u+w *.json
+gosu wekan:wekan meteor npm install
+gosu wekan:wekan /home/wekan/.meteor/meteor build --directory /home/wekan/app_build
+cd /home/wekan/app_build/bundle/programs/server/
+chmod u+w *.json
+gosu wekan:wekan meteor npm install
+cd node_modules/fibers
+node build.js
+cd ../..
+# Remove legacy webbroser bundle, so that Wekan works also at Android Firefox, iOS Safari, etc.
+rm -rf /home/wekan/app_build/bundle/programs/web.browser.legacy
+mv /home/wekan/app_build/bundle /build
+
+# Put back the original tar
+mv $(which tar)~ $(which tar)
+
+# Cleanup
+apt-get remove --purge -y ${BUILD_DEPS}
+apt-get autoremove -y
+npm uninstall -g api2html
+rm -R /tmp/*
+rm -R /var/lib/apt/lists/*
+rm -R /home/wekan/.meteor
+rm -R /home/wekan/app
+rm -R /home/wekan/app_build
+mkdir /data
+chown wekan --recursive /data
+#cat /home/wekan/python/esprima-python/files.txt | xargs rm -R
+#rm -R /home/wekan/python
+#rm /home/wekan/install_meteor.sh
+EOR
 
 ENV PORT=8080
 EXPOSE $PORT

Dockerfile.arm64v8

@@ -1,24 +1,18 @@
-FROM amd64/alpine:3.7 AS builder
+FROM arm64v8/ubuntu:23.04 AS builder
+#FROM amd64/alpine:latest AS builder
 
 # Set the environment variables for builder
-ENV QEMU_VERSION=v4.2.0-6 \
+ENV QEMU_VERSION=v7.2.0-1 \
     QEMU_ARCHITECTURE=aarch64 \
     NODE_ARCHITECTURE=linux-arm64 \
     NODE_VERSION=v14.21.4 \
     WEKAN_VERSION=latest  \
-    WEKAN_ARCHITECTURE=arm64 \
-    NODE_OPTIONS="--max_old_space_size=4096"
-
-#---------------------------------------------------------------------
-# https://github.com/wekan/wekan/issues/3585#issuecomment-1021522132
-# Add more Node heap:
-#   NODE_OPTIONS="--max_old_space_size=4096"
-# Add more stack:
-#   bash -c "ulimit -s 65500; exec node --stack-size=65500 main.js"
-#---------------------------------------------------------------------
+    WEKAN_ARCHITECTURE=arm64
 
     # Install dependencies
-RUN apk update && apk add ca-certificates outils-sha1 && \
+#RUN apk update && apk add ca-certificates outils-sha1 && \
+RUN echo 'debconf debconf/frontend select Noninteractive' | debconf-set-selections
+RUN apt update && apt install ca-certificates wget unzip -y && \
     \
     # Download qemu static for our architecture
     wget https://github.com/multiarch/qemu-user-static/releases/download/${QEMU_VERSION}/qemu-${QEMU_ARCHITECTURE}-static.tar.gz -O - | tar -xz && \
@@ -33,25 +27,27 @@ RUN apk update && apk add ca-certificates outils-sha1 && \
     unzip wekan-${WEKAN_VERSION}-${WEKAN_ARCHITECTURE}.zip && \
     \
     # Download node and shasums
+    wget https://github.com/wekan/node-v14-esm/releases/download/${NODE_VERSION}/node-${NODE_VERSION}-${NODE_ARCHITECTURE}.tar.gz && \
+    wget https://github.com/wekan/node-v14-esm/releases/download/${NODE_VERSION}/SHASUMS256.txt && \
     #wget https://nodejs.org/dist/${NODE_VERSION}/node-${NODE_VERSION}-${NODE_ARCHITECTURE}.tar.gz && \
     #wget https://nodejs.org/dist/${NODE_VERSION}/SHASUMS256.txt.asc && \
     #wget https://nodejs.org/dist/${NODE_VERSION}/node-${NODE_VERSION}-${NODE_ARCHITECTURE}.tar.gz && \
     #wget https://nodejs.org/dist/${NODE_VERSION}/SHASUMS256.txt.asc && \
     \
     # Verify nodejs authenticity
-    grep node-${NODE_VERSION}-${NODE_ARCHITECTURE}.tar.gz SHASUMS256.txt.asc | sha256sum -c - && \
+    grep node-${NODE_VERSION}-${NODE_ARCHITECTURE}.tar.gz SHASUMS256.txt | sha256sum -c - && \
     \
     # Extract node and remove tar.gz
     tar xvzf node-${NODE_VERSION}-${NODE_ARCHITECTURE}.tar.gz
 
 # Build wekan dockerfile
-FROM arm64v8/ubuntu:19.10
+FROM --platform=linux/arm64 arm64v8/ubuntu:23.04
 LABEL maintainer="wekan"
 
 # Set the environment variables (defaults where required)
 ENV QEMU_ARCHITECTURE=aarch64 \
     NODE_ARCHITECTURE=linux-arm64 \
-    NODE_VERSION=v14.21.3 \
+    NODE_VERSION=v14.21.4 \
     NODE_ENV=production \
     NPM_VERSION=latest \
     WITH_API=true \
@@ -77,30 +73,20 @@ RUN \
     ln -s /opt/nodejs/bin/node /usr/bin/node && \
     ln -s /opt/nodejs/bin/npm /usr/bin/npm && \
     mkdir -p /opt/nodejs/lib/node_modules/fibers/.node-gyp /root/.node-gyp/8.16.1 /home/wekan/.config && \
-    chown wekan --recursive /home/wekan/.config && \
-    \
-    # Install Node dependencies
-    npm install -g npm@${NPM_VERSION} && \
-    \
-    # Install Health Check dependencies
-    apk add curl
+    chown wekan --recursive /home/wekan/.config
 
-HEALTHCHECK --start-period=30s --interval=30s --timeout=10s --retries=3 \
-  CMD curl --fail "http://localhost:$PORT" || exit 1
+#    \
+#    # Install Node dependencies
+#    #npm install -g npm@${NPM_VERSION} && \
+#    \
+#    # Install Health Check dependencies
+#    #apk add curl
+#
+#HEALTHCHECK --start-period=30s --interval=30s --timeout=10s --retries=3 \
+#  CMD curl --fail "http://localhost:$PORT" || exit 1
 
 EXPOSE $PORT
 USER wekan
 
-#---------------------------------------------------------------------
-# https://github.com/wekan/wekan/issues/3585#issuecomment-1021522132
-# Add more Node heap:
-#   NODE_OPTIONS="--max_old_space_size=4096"
-# Add more stack:
-#   bash -c "ulimit -s 65500; exec node --stack-size=65500 main.js"
-#---------------------------------------------------------------------
-#
-#CMD ["node", "/home/wekan/bundle/main.js"]
-
-#CMD ["bash", "-c", "ulimit -s 65500; exec node --stack-size=65500 /home/wekan/bundle/main.js"]
 CMD ["bash", "-c", "ulimit -s 65500; exec node /home/wekan/bundle/main.js"]
 

Dockerfile.s390x

@@ -0,0 +1,94 @@
+FROM arm64v8/ubuntu:23.04 AS builder
+#FROM --platform=linux/amd64 amd64/ubuntu:23.04 AS builder
+#FROM --platform=linux/amd64 ghcr.io/wekan/wekan:main AS builder
+#FROM arm64v8/ubuntu:23.04 AS builder
+#FROM amd64/alpine:latest AS builder
+
+# Set the environment variables for builder
+ENV QEMU_VERSION=v7.2.0-1 \
+    QEMU_ARCHITECTURE=s390x \
+    NODE_ARCHITECTURE=linux-s390x \
+    NODE_VERSION=v14.21.4 \
+    WEKAN_VERSION=latest  \
+    WEKAN_ARCHITECTURE=s390x
+
+    # Install dependencies
+#RUN apk update && apk add ca-certificates outils-sha1 && \
+RUN echo 'debconf debconf/frontend select Noninteractive' | debconf-set-selections
+RUN apt update && apt install ca-certificates wget unzip -y && \
+    \
+    # Download qemu static for our architecture
+    wget https://github.com/multiarch/qemu-user-static/releases/download/${QEMU_VERSION}/qemu-${QEMU_ARCHITECTURE}-static.tar.gz -O - | tar -xz && \
+    \
+    # Download wekan and shasum
+    wget https://releases.wekan.team/${WEKAN_ARCHITECTURE}/wekan-${WEKAN_VERSION}-${WEKAN_ARCHITECTURE}.zip && \
+    wget https://releases.wekan.team/${WEKAN_ARCHITECTURE}/SHA256SUMS.txt && \
+    # Verify wekan
+    grep wekan-${WEKAN_VERSION}-${WEKAN_ARCHITECTURE}.zip SHA256SUMS.txt | sha256sum -c - && \
+    \
+    # Unzip wekan
+    unzip wekan-${WEKAN_VERSION}-${WEKAN_ARCHITECTURE}.zip && \
+    \
+    # Download node and shasums
+    wget https://github.com/wekan/node-v14-esm/releases/download/${NODE_VERSION}/node-${NODE_VERSION}-${NODE_ARCHITECTURE}.tar.gz && \
+    wget https://github.com/wekan/node-v14-esm/releases/download/${NODE_VERSION}/SHASUMS256.txt && \
+    #wget https://nodejs.org/dist/${NODE_VERSION}/node-${NODE_VERSION}-${NODE_ARCHITECTURE}.tar.gz && \
+    #wget https://nodejs.org/dist/${NODE_VERSION}/SHASUMS256.txt.asc && \
+    #wget https://nodejs.org/dist/${NODE_VERSION}/node-${NODE_VERSION}-${NODE_ARCHITECTURE}.tar.gz && \
+    #wget https://nodejs.org/dist/${NODE_VERSION}/SHASUMS256.txt.asc && \
+    \
+    # Verify nodejs authenticity
+    grep node-${NODE_VERSION}-${NODE_ARCHITECTURE}.tar.gz SHASUMS256.txt | sha256sum -c - && \
+    \
+    # Extract node and remove tar.gz
+    tar xvzf node-${NODE_VERSION}-${NODE_ARCHITECTURE}.tar.gz
+
+# Build wekan dockerfile
+FROM --platform=linux/s390x s390x/ubuntu:23.04
+LABEL maintainer="wekan"
+
+# Set the environment variables (defaults where required)
+ENV QEMU_ARCHITECTURE=s390x \
+    NODE_ARCHITECTURE=linux-s390x \
+    NODE_VERSION=v14.21.4 \
+    NODE_ENV=production \
+    NPM_VERSION=latest \
+    WITH_API=true \
+    PORT=8080 \
+    ROOT_URL=http://localhost \
+    MONGO_URL=mongodb://127.0.0.1:27017/wekan
+
+# Copy qemu-static to image
+COPY --from=builder qemu-${QEMU_ARCHITECTURE}-static /usr/bin
+
+# Copy the app to the image
+COPY --from=builder bundle /home/wekan/bundle
+
+# Copy
+COPY --from=builder node-${NODE_VERSION}-${NODE_ARCHITECTURE} /opt/nodejs
+
+RUN \
+    set -o xtrace && \
+    # Add non-root user wekan
+    useradd --user-group --system --home-dir /home/wekan wekan && \
+    \
+    # Install Node
+    ln -s /opt/nodejs/bin/node /usr/bin/node && \
+    ln -s /opt/nodejs/bin/npm /usr/bin/npm && \
+    mkdir -p /opt/nodejs/lib/node_modules/fibers/.node-gyp /root/.node-gyp/8.16.1 /home/wekan/.config && \
+    chown wekan --recursive /home/wekan/.config
+
+#    \
+#    # Install Node dependencies
+#    #npm install -g npm@${NPM_VERSION} && \
+#    \
+#    # Install Health Check dependencies
+#    #apk add curl
+#
+#HEALTHCHECK --start-period=30s --interval=30s --timeout=10s --retries=3 \
+#  CMD curl --fail "http://localhost:$PORT" || exit 1
+
+EXPOSE $PORT
+USER wekan
+
+CMD ["bash", "-c", "ulimit -s 65500; exec node /home/wekan/bundle/main.js"]

FUTURE.md

@@ -0,0 +1,40 @@
+# Future
+
+## Moved Import/Export/Sync issues to Big Picture Roadmap wiki page
+
+This change is limited to only Import/Export/Sync issues, while those are In Progress of being fixed.
+
+2023-11-21 xet7 closed 261 issues that are linked at https://github.com/wekan/wekan/wiki/Sync ,
+that is Roadmap of Import/Export/Sync in WeKan. It means, that those issues progress will be
+updated at that wiki page, when xet7 and other WeKan contributors fix those.
+Many of those issues are In Progress of being fixed and added.
+
+## Platform Updates
+
+Issues related to platforms are being closed, because only list of working platforms is mentioned now
+at WeKan website https://wekan.github.io Install section and at [ChangeLog](https://github.com/wekan/wekan/blob/main/CHANGELOG.md)
+where is this new text:
+
+> Newest WeKan at amd64 platforms: Linux bundle, Snap Candidate, Docker, Kubernetes. Fixing other platforms In Progress. 
+
+Platform support changes often, because:
+
+- There are many dependencies, that update or break or change often
+- Node.js segfaults at some CPU/OS
+- Some platforms have build errors
+
+Roadmap is to update all existing platforms, and add more platforms.
+
+Upcoming platform upgrades:
+
+- Fix migrations, so that newest WeKan can be released to Snap Stable. (Currently newest is at Snap Candidate).
+
+## WeKan features
+
+Most Meteor WeKan features are listed here:
+
+https://github.com/wekan/wekan/wiki/Deep-Dive-Into-WeKan
+
+Remaining features and all changes are listed here:
+
+https://github.com/wekan/wekan/blob/main/CHANGELOG.md

GOVERNANCE.md

@@ -0,0 +1,10 @@
+# Governance
+
+Anyone can send pull request to https://github.com/wekan/wekan/wiki/pulls ,
+if there is permission to add code to WeKan with MIT license.
+
+As maintainer, xet7 checks all pull requests and merges them.
+
+Only xet7 has write access to repo https://github.com/wekan/wekan
+
+

LICENSE

@@ -1,6 +1,6 @@
 The MIT License (MIT)
 
-Copyright (c) 2014-2019 The Wekan Team
+Copyright (c) 2014-2023 The Wekan Team
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

README.md

@@ -2,23 +2,34 @@
 
 # WeKan ® - Open Source kanban
 
+## Downloads
+
+https://wekan.github.io / Install WeKan ® Server
+
 ## Docker Containers
 
+- [GitHub](https://github.com/wekan/wekan/pkgs/container/wekan)
 - [Quay](https://quay.io/repository/wekan/wekan)
 - [Docker Hub](https://hub.docker.com/r/wekanteam/wekan)
 
-Other platforms and compatible software versions at https://wekan.github.io Download section.
+docker-compose.yml at https://github.com/wekan/wekan/blob/main/docker-compose.yml
+
+## Standards
+
+- [WeKan and Standard for Public Code](https://wekan.github.io/standard-for-public-code/) assessment was made at 2023-11.
+  Currently Wekan meets 8 out of 16 criteria out of the box.
+  Some others could be met with small changes.
 
 ## Code stats
 
+- [CII Best Practices](https://bestpractices.coreinfrastructure.org/projects/4619)
 - [Code Climate](https://codeclimate.com/github/wekan/wekan)
 - [Open Hub](https://www.openhub.net/p/wekan)
 - [OSS Insight](https://ossinsight.io/analyze/wekan/wekan)
-- [CII Best Practices](https://bestpractices.coreinfrastructure.org/projects/4619)
 
 ## [Translate WeKan ® at Transifex](https://app.transifex.com/wekan/)
 
-Translations to non-English languages are accepted only at [Transifex](https://app.transifex.com/wekan/) using webbrowser.
+Translations to non-English languages are accepted only at [Transifex](https://app.transifex.com/wekan/wekan) using webbrowser.
 New English strings of new features can be added as PRs to master branch file wekan/imports/i18n/data/en.i18n.json .
 
 ## [WeKan ® feature requests and bugs](https://github.com/wekan/wekan/issues)
@@ -70,14 +81,14 @@ that by providing one-click installation on various platforms.
   [Mac](https://github.com/wekan/wekan/wiki/Mac) / [Windows](https://github.com/wekan/wekan/wiki/Install-Wekan-from-source-on-Windows).
   [More Platforms](https://github.com/wekan/wekan/wiki/Platforms), bundle for RasPi3 ARM and other CPUs where Node.js and MongoDB exists.
 - 1 GB RAM minimum free for WeKan ®. Production server should have minimum total 4 GB RAM.
-  For thousands of users, for example with [Docker](https://github.com/wekan/wekan/blob/master/docker-compose.yml): 3 frontend servers,
+  For thousands of users, for example with [Docker](https://github.com/wekan/wekan/blob/main/docker-compose.yml): 3 frontend servers,
   each having 2 CPU and 2 wekan-app containers. One backend wekan-db server with many CPUs.
 - Enough disk space and alerts about low disk space. If you run out disk space, MongoDB database gets corrupted.
 - SECURITY: Updating to newest WeKan ® version very often. Please check you do not have automatic updates of Sandstorm or Snap turned off.
   Old versions have security issues because of old versions Node.js etc. Only newest WeKan ® is supported.
   WeKan ® on Sandstorm is not usually affected by any Standalone WeKan ® (Snap/Docker/Source) security issues.
 - [Reporting all new bugs immediately](https://github.com/wekan/wekan/issues).
-  New features and fixes are added to WeKan ® [many times a day](https://github.com/wekan/wekan/blob/master/CHANGELOG.md).
+  New features and fixes are added to WeKan ® [many times a day](https://github.com/wekan/wekan/blob/main/CHANGELOG.md).
 - [Backups](https://github.com/wekan/wekan/wiki/Backup) of WeKan ® database once a day miminum.
   Bugs, updates, users deleting list or card, harddrive full, harddrive crash etc can eat your data. There is no undo yet.
   Some bug can cause WeKan ® board to not load at all, requiring manual fixing of database content.
@@ -89,7 +100,7 @@ that by providing one-click installation on various platforms.
 [Developer Documentation][dev_docs]
 
 - There is many companies and individuals contributing code to WeKan ®, to add features and bugfixes
-  [many times a day](https://github.com/wekan/wekan/blob/master/CHANGELOG.md).
+  [many times a day](https://github.com/wekan/wekan/blob/main/CHANGELOG.md).
 - [Please add Add new Feature Requests and Bug Reports immediately](https://github.com/wekan/wekan/issues).
 - [Commercial Support](https://wekan.team/commercial-support/).
 
@@ -109,7 +120,7 @@ with [Meteor](https://www.meteor.com).
 
 [platforms]: https://github.com/wekan/wekan/wiki/Platforms
 [dev_docs]: https://github.com/wekan/wekan/wiki/Developer-Documentation
-[screenshot_wekan]: https://wekan.github.io/wekan-markdown.png
+[screenshot_wekan]: https://wekan.github.io/wekan-dark-mode.png
 [features]: https://github.com/wekan/wekan/wiki/Features
 [roadmap_wekan]: https://boards.wekan.team/b/D2SzJKZDS4Z48yeQH/wekan-open-source-kanban-board-with-mit-license
 [wekan_issues]: https://github.com/wekan/wekan/issues

SECURITY.md

@@ -1,3 +1,5 @@
+About money, see [CONTRIBUTING.md](CONTRIBUTING.md)
+
 Security is very important to us. If you discover any issue regarding security, please disclose
 the information responsibly by sending an email to support (at) wekan.team using
 [this PGP public key](support-at-wekan.team_pgp-publickey.asc) and not by
@@ -29,7 +31,7 @@ added to the Wekan Hall of Fame.
 ## Which domains are in scope?
 
 No public domains, because all those are donated to Wekan Open Source project,
-and we don't have any permissions to do security scans on those donated servers
+and we don't have any permissions to do security scans on those donated servers.
 
 Please don't perform research that could impact other users. Secondly, please keep
 the reports short and succinct. If we fail to understand the logics of your bug, we will tell you.
@@ -48,31 +50,132 @@ like Snap and Docker have their own specific sandboxing etc features.
 
 Standalone Wekan by default does not load any files from Internet, like fonts, CSS, etc.
 This also means all Standalone Wekan functionality works in offline local networks.
-Wekan is used by companies that have [thousands of users](https://github.com/wekan/wekan/wiki/AWS) and at healthcare.
+WeKan is used at most countries of the world https://snapcraft.io/wekan
+and by by companies that have 30k users.
 
-Wekan uses xss package for input fields like cards, as you can see from
-[package.json](https://github.com/wekan/wekan/blob/master/package.json). Other used versions can be seen from
-[Meteor versions file](https://github.com/wekan/wekan/blob/master/.meteor/versions).
-Forms can include markdown links, html, image tags etc like you see at https://wekan.github.io .
-It's possible to add attachments to cards, and markdown/html links to files.
+- Wekan private board attachments are not accessible without logging in.
+- There is feature to set board public, so that board is visible without logging in in readonly mode, with realtime updates.
+- Admin Panel has feature to disable all public boards, so all boards are private.
 
-Wekan attachments are not accessible without logging in. Import from Trello works by copying
-Trello export JSON to Wekan Trello import page, and in Trello JSON file there is direct links to all publicly
-accessible Trello attachment files, that Standalone Wekan downloads directly to Wekan MongoDB database in
-[CollectionFS](https://github.com/wekan/wekan/pull/875) format. When Wekan board is exported in
-Wekan JSON format, all board attachments are included in Wekan JSON file as base64 encoded text.
-That Wekan JSON format file can be imported to Sandstorm Wekan with all the attachments, when we get
-latest Wekan version working on Sandstorm, only couple of bugs are left before that. In Sandstorm it's not
-possible yet to import from Trello with attachments, because Wekan does not implement Sandstorm-compatible
-access to outside of Wekan grain.
+## SSL/TLS
 
-Standalone Wekan only has password auth currently, there is work in progress to add
-[oauth2](https://github.com/wekan/wekan/pull/1578), [Openid](https://github.com/wekan/wekan/issues/538),
-[LDAP](https://github.com/wekan/wekan/issues/119) etc. If you need more login security for Standalone Wekan now,
-it's possible add additional [Google Auth proxybouncer](https://github.com/wekan/wekan/wiki/Let's-Encrypt-and-Google-Auth) in front of password auth, and then use Google Authenticator for Google Auth. Standalone Wekan does have [brute force protection with eluck:accounts-lockout and browser-policy clickjacking protection](https://github.com/wekan/wekan/blob/master/CHANGELOG.md#v080-2018-04-04-wekan-release). You can also optionally use some [WAF](https://en.wikipedia.org/wiki/Web_application_firewall)
-like for example [AWS WAF](https://aws.amazon.com/waf/).
+- SSL/TLS encrypts traffic between webbrowser and webserver.
+- If you are thinking about TLS MITM, look at https://github.com/caddyserver/caddy/issues/2530
+- Let's Encrypt TLS requires publicly accessible webserver, that Let's Encrypt TLS validation servers check.
+- If firewall limits to only allowed IP addresses, you may need non-Let's Encrypt TLS cert.
+- For On Premise:
+  - https://caddyserver.com/docs/automatic-https#local-https
+  - https://github.com/wekan/wekan/wiki/Caddy-Webserver-Config
+  - https://github.com/wekan/wekan/wiki/Azure
+  - https://github.com/wekan/wekan/wiki/Traefik-and-self-signed-SSL-certs
 
-[All Wekan Platforms](https://github.com/wekan/wekan/wiki/Platforms)
+## XSS
+
+- Dompurify https://www.npmjs.com/package/dompurify
+  - WeKan uses dompurify npm package to filter for XSS at fields like cards, as you can see from
+    [package.json](https://github.com/wekan/wekan/blob/main/package.json). Other used versions can be seen from
+    [Meteor versions file](https://github.com/wekan/wekan/blob/main/.meteor/versions).
+  - Forms can include markdown links, html, image tags etc like you see at https://wekan.github.io .
+  - It's possible to add attachments to cards, and markdown/html links to files.
+  - Dompurify cleans up viewed code, so Javascript in input fields does not execute
+    - https://wekan.github.io/hall-of-fame/fieldbleed/
+- Reaction in comment is now checked, that it does not have extra added code
+  - https://wekan.github.io/hall-of-fame/reactionbleed/
+- https://github.com/wekan/wekan/blob/main/packages/markdown/src/template-integration.js#L76
+
+## QA about PubSub
+
+Q:
+
+Hello,
+I have just seen the Meteor DevTools Evolved extension and was wondering if anyone had asked themselves the question of security.
+Insofar as all data is shown in the minimongo tab in plain text.
+How can data be hidden from this extension?
+
+A:
+
+## PubSub
+
+- It is not security issue to show some text or image, that user has permission to see. It is a security issue, if browserside is some text or image that user should not see.
+- Meteor has browserside minimongo database, made with Javascript, updated with Publish/Subscribe, PubSub.
+- Publish/Subscribe means, that realtime web framework reads database changes stream, and then immediately updates webpage,
+  like like dashboards, chat, kanban. That is the point in any realtime web framework in any programming language.
+- Yes, you should check with Meteor DevTools Evolved Chromium/Firefox extension that at minimongo is only text that user has permission to see.
+- Do checking as logged in user, and logged out user.
+- Check permissions and sanitize before allowing some change, because someone could modify content of input field,
+  PubSub/websocket data (for example with Burp Suite Community Edition), etc.
+- If you have REST API, also check that only those that have login token, and have permission, can view or edit text
+- You should not include any data user is not allowed to see. Not to webpage text, not to websockets/PubSub, etc.
+- Minimongo should not have password hashes PubSub https://wekan.github.io/hall-of-fame/userbleed/
+- PubSub uses Websockets, so you need those to be enabled at webserver like Caddy/Nginx/Apache etc, examples of settings
+  at right menu of https://github.com/wekan/wekan/wiki
+- Clientside https://github.com/wekan/wekan/tree/main/client/components subscribes to 
+  PubSub https://github.com/wekan/wekan/tree/main/server/publications or calls meteor methods at https://github.com/wekan/wekan/tree/main/models
+- For Admin:
+  - You can have input field for password https://github.com/wekan/wekan/blob/main/client/components/cards/attachments.js#L303-L312
+  - You can save password to database https://github.com/wekan/wekan/blob/main/client/components/cards/attachments.js#L303-L312
+  - Check that only current user or Admin can change password https://github.com/wekan/wekan/blob/main/client/components/cards/attachments.js#L303-L312
+    - Note that currentUser uses code like Meteor.user() in .js file
+  - Do not have password hashes in PubSub https://github.com/wekan/wekan/blob/main/server/publications/users.js
+  - Only show Admin Panel to Admin https://github.com/wekan/wekan/blob/main/client/components/settings/settingBody.jade#L3
+- If there is a lot of data, use pagination https://github.com/wekan/wekan/blob/main/client/components/settings/peopleBody.js
+- Only have limited amount of data published in PubSub. Limit in MongoDB query in publications how much is published. Too much could make browser too slow.
+- Use Environment variables for any email etc passwords.
+- But what if you would like to remove minimongo? And only use Meteor methods for saving? In that case, you don't have realtime updates,
+  and you need to write much more code to load and save data yourself, handle any multi user data saving conflicts yourself,
+  and many Meteor Atmospherejs.com PubSub using packages would not work anymore https://github.com/wekan/we
+
+## PubSub: Fix that user can not change to Admin
+
+- With PubSub, there is checking, that someone modifying Websockets content, like permission isAdmin, can not change to Admin.
+- https://github.com/wekan/wekan/commit/cbad4cf5943d47b916f64b4582f8ca76a9dfd743
+- https://wekan.github.io/hall-of-fame/adminbleed/
+
+## Permissions and Roles
+
+- For any user permissions, it's best to use Meteor package package https://github.com/Meteor-Community-Packages/meteor-roles .
+- Currently WeKan has custom hardcoded permissions, WeKan does not yet use that meteor-roles package.
+  - Using permissions at WeKan sidebar https://github.com/wekan/wekan/blob/main/client/components/sidebar/sidebar.js#L1854-L1875
+  - List of roles https://github.com/wekan/wekan/wiki/REST-API-Role . Change at board or Admin Panel. Also Organizations/Teams.
+  - Worker role: https://github.com/wekan/wekan/issues/2788
+  - Not implemented yet: Granular Roles https://github.com/wekan/wekan/issues/3022
+- Check is user logged in, with `if (Meteor.user()) {`
+- Check is code running at server `if (Meteor.isServer()) {` or client `if Meteor.isClient()) {` .
+- Here is some authentication code https://github.com/wekan/wekan/blob/main/server/authentication.js
+
+## Environment variables
+
+- For any passwords, use environment variables, those are serverside
+- Do not copy environment variable to public variable that is visible browserside https://github.com/wekan/wekan/blob/main/server/max-size.js
+
+```
+Meteor.startup(() => {
+  if (process.env.HEADER_LOGIN_ID) {
+    Meteor.settings.public.attachmentsUploadMaxSize   = process.env.ATTACHMENTS_UPLOAD_MAX_SIZE;
+    Meteor.settings.public.attachmentsUploadMimeTypes = process.env.ATTACHMENTS_UPLOAD_MIME_TYPES;
+    Meteor.settings.public.avatarsUploadMaxSize       = process.env.AVATARS_UPLOAD_MAX_SIZE;
+```
+
+- For serverside, you can set Meteor.settings.variablename, without text public
+- For WeKan kanban, there is feature for setting board public, it can be viewed by anyone, there is realtime updates. But 
+- Some of those permissions are checked at users.js models at https://github.com/wekan/wekan/tree/main/models
+- Environment variables are used for email server passwords, etc, at all platforms https://github.com/wekan/wekan/commit/a781c0e7dcfdbe34c1483ee83cec12455b7026f7
+
+## Escape HTML comment tags so that HTML comments are visible
+
+- Someone reported, that it is problem that content of HTML comments in edit mode, are not visible at at view mode, so this makes HTML comments visible.
+- https://github.com/wekan/wekan/commit/167863d95711249e69bb3511175d73b34acbbdb3
+- https://wekan.github.io/hall-of-fame/invisiblebleed/
+
+## Attachments: XSS in filename is sanitized
+
+- https://github.com/wekan/wekan/blob/main/client/components/cards/attachments.js#L303-L312
+- https://wekan.github.io/hall-of-fame/filebleed/
+
+## Brute force login protection
+
+- https://github.com/wekan/wekan/commit/23e5e1e3bd081699ce39ce5887db7e612616014d
+- https://github.com/wekan/wekan/tree/main/packages/wekan-accounts-lockout
 
 ### Sandstorm Wekan Security
 
@@ -105,12 +208,6 @@ a security issue, we'd like to know about it, and also how to fix it:
 
 Typical already known or "no impact" bugs such as:
 
-- Brute force password guessing. Currently there is
-  [brute force protection with eluck:accounts-lockout](https://github.com/wekan/wekan/blob/master/CHANGELOG.md#v080-2018-04-04-wekan-release).
-- Security issues related to that Wekan uses Meteor 1.6.0.1 related packages, and upgrading to newer
-  Meteor 1.6.1 is complicated process that requires lots of changes to many dependency packages.
-  Upgrading [has been tried many times, spending a lot of time](https://github.com/meteor/meteor/issues/9609)
-  but there still is issues. Helping with package upgrades is very welcome.
 - [Wekan API old tokens not replaced correctly](https://github.com/wekan/wekan/issues/1437)
 - Missing Cookie flags on non-session cookies or 3rd party cookies
 - Logout CSRF

Stackerfile.yml

@@ -1,5 +1,5 @@
 appId: wekan-public/apps/77b94f60-dec9-0136-304e-16ff53095928
-appVersion: "v7.02.0"
+appVersion: "v7.45.0"
 files:
   userUploads:
     - README.md

api.py

@@ -37,9 +37,24 @@ If *nix:  chmod +x api.py => ./api.py users
     python3 api.py customfields BOARDID # Custom Fields of BOARDID
     python3 api.py customfield BOARDID CUSTOMFIELDID # Info of CUSTOMFIELDID
     python3 api.py addcustomfieldtoboard AUTHORID BOARDID NAME TYPE SETTINGS SHOWONCARD AUTOMATICALLYONCARD SHOWLABELONMINICARD SHOWSUMATTOPOFLIST # Add Custom Field to Board
-    python3 api.py editcustomfield BOARDID LISTID CARDID CUSTOMFIELDID NEWCUSTOMFIELDVALUE
+    python3 api.py editcustomfield BOARDID LISTID CARDID CUSTOMFIELDID NEWCUSTOMFIELDVALUE # Edit Custom Field
     python3 api.py listattachments BOARDID # List attachments
+    python3 api.py cardsbyswimlane SWIMLANEID LISTID # Retrieve cards list on a swimlane
+    python3 api.py getcard BOARDID LISTID CARDID # Get card info
+    python3 api.py addlabel BOARDID LISTID CARDID LABELID # Add label to a card
+    python3 api.py addcardwithlabel AUTHORID BOARDID SWIMLANEID LISTID CARDTITLE CARDDESCRIPTION LABELIDS # Add a card and a label
+    python3 api.py editboardtitle BOARDID NEWBOARDTITLE # Edit board title
+    python3 api.py copyboard BOARDID NEWBOARDTITLE # Copy a board
+    python3 api.py createlabel BOARDID LABELCOLOR LABELNAME (Color available: `white`, `green`, `yellow`, `orange`, `red`, `purple`, `blue`, `sky`, `lime`, `pink`, `black`, `silver`, `peachpuff`, `crimson`, `plum`, `darkgreen`, `slateblue`, `magenta`, `gold`, `navy`, `gray`, `saddlebrown`, `paleturquoise`, `mistyrose`, `indigo`) # Create a new label
+    python3 api.py editcardcolor BOARDID LISTID CARDID COLOR (Color available: `white`, `green`, `yellow`, `orange`, `red`, `purple`, `blue`, `sky`, `lime`, `pink`, `black`, `silver`, `peachpuff`, `crimson`, `plum`, `darkgreen`, `slateblue`, `magenta`, `gold`, `navy`, `gray`, `saddlebrown`, `paleturquoise`, `mistyrose`, `indigo`) # Edit card color
+    python3 api.py addchecklist BOARDID CARDID TITLE ITEM1 ITEM2 ITEM3 ITEM4 (You can add multiple items or just one, or also without any item, just TITLE works as well. * If items or Title contains spaces, you should add ' between them.) # Add checklist + item on a card
+    python3 api.py deleteallcards BOARDID SWIMLANEID ( * Be careful will delete ALL CARDS INSIDE the swimlanes automatically in every list * ) # Delete all cards on a swimlane
+    python3 api.py checklistid BOARDID CARDID # Retrieve Checklist ID attached to a card
+    python3 api.py checklistinfo BOARDID CARDID CHECKLISTID # Get checklist info
+    python3 api.py get_list_cards_count BOARDID LISTID # Retrieve how many cards in a list
+    python3 api.py get_board_cards_count BOARDID # Retrieve how many cards in a board
 
+    
   Admin API:
     python3 api.py users                # All users
     python3 api.py boards               # All Public Boards
@@ -179,6 +194,52 @@ if arguments == 10:
         print(body.text)
         # ------- ADD CUSTOM FIELD TO BOARD END -----------
 
+if arguments == 8:
+
+    if sys.argv[1] == 'addcardwithlabel':
+        # ------- ADD CARD WITH LABEL START -----------
+        authorid = sys.argv[2]
+        boardid = sys.argv[3]
+        swimlaneid = sys.argv[4]
+        listid = sys.argv[5]
+        cardtitle = sys.argv[6]
+        carddescription = sys.argv[7]
+        labelIds = sys.argv[8]  # Aggiunto labelIds
+
+        cardtolist = wekanurl + apiboards + boardid + s + l + s + listid + s + cs
+        # Add card
+        headers = {'Accept': 'application/json', 'Authorization': 'Bearer {}'.format(apikey)}
+        post_data = {
+            'authorId': '{}'.format(authorid),
+            'title': '{}'.format(cardtitle),
+            'description': '{}'.format(carddescription),
+            'swimlaneId': '{}'.format(swimlaneid),
+            'labelIds': labelIds
+        }
+
+        body = requests.post(cardtolist, data=post_data, headers=headers)
+        print(body.text)
+
+        # If ok id card
+        if body.status_code == 200:
+            card_data = body.json()
+            new_card_id = card_data.get('_id')
+
+            # Updating card
+            if new_card_id:
+                edcard = wekanurl + apiboards + boardid + s + l + s + listid + s + cs + s + new_card_id
+                put_data = {'labelIds': labelIds}
+                body = requests.put(edcard, data=put_data, headers=headers)
+                print("=== EDIT CARD ===\n")
+                body = requests.get(edcard, headers=headers)
+                data2 = body.text.replace('}', "}\n")
+                print(data2)
+            else:
+                print("Error obraining ID.")
+        else:
+            print("Error adding card.")
+        # ------- ADD CARD WITH LABEL END -----------
+
 if arguments == 7:
 
     if sys.argv[1] == 'addcard':
@@ -237,7 +298,53 @@ if arguments == 6:
         print(data2)
         # ------- EDIT CUSTOMFIELD END -----------
 
-if arguments == 4:
+if arguments == 5:
+
+    if sys.argv[1] == 'addlabel':
+
+        # ------- EDIT CARD ADD LABEL START -----------
+        boardid = sys.argv[2]
+        listid = sys.argv[3]
+        cardid = sys.argv[4]
+        labelIds = sys.argv[5]
+        edcard = wekanurl + apiboards + boardid + s + l + s + listid + s + cs + s + cardid
+        print(edcard)
+        headers = {'Accept': 'application/json', 'Authorization': 'Bearer {}'.format(apikey)}
+        put_data = {'labelIds': labelIds}
+        body = requests.put(edcard, data=put_data, headers=headers)
+        print("=== ADD LABEL ===\n")
+        body = requests.get(edcard, headers=headers)
+        data2 = body.text.replace('}',"}\n")
+        print(data2)
+        # ------- EDIT CARD ADD LABEL END -----------
+
+    if sys.argv[1] == 'editcardcolor':
+        # ------- EDIT CARD COLOR START -----------
+        boardid = sys.argv[2]
+        listid = sys.argv[3]
+        cardid = sys.argv[4]
+        newcolor = sys.argv[5]  
+
+        valid_colors = ['white', 'green', 'yellow', 'orange', 'red', 'purple', 'blue', 'sky', 'lime', 'pink', 'black',
+                    'silver', 'peachpuff', 'crimson', 'plum', 'darkgreen', 'slateblue', 'magenta', 'gold', 'navy',
+                    'gray', 'saddlebrown', 'paleturquoise', 'mistyrose', 'indigo']
+
+        if newcolor not in valid_colors:
+            print("Invalid color. Choose a color from the list.")
+            sys.exit(1)
+
+        edcard = wekanurl + apiboards + boardid + s + l + s + listid + s + cs + s + cardid
+        print(edcard)
+        headers = {'Accept': 'application/json', 'Authorization': 'Bearer {}'.format(apikey)}
+        put_data = {'color': '{}'.format(newcolor)}  
+        body = requests.put(edcard, data=put_data, headers=headers)
+        print("=== EDIT CARD COLOR ===\n")
+        body = requests.get(edcard, headers=headers)
+        data2 = body.text.replace('}', "}\n")
+        print(data2)
+        # ------- EDIT CARD COLOR END -----------
+
+if arguments >= 4:
 
     if sys.argv[1] == 'newuser':
 
@@ -251,9 +358,155 @@ if arguments == 4:
         print("=== CREATE NEW USER ===\n")
         print(body.text)
         # ------- CREATE NEW USER END -----------
+        
+    if sys.argv[1] == 'getcard':
+
+        # ------- LIST OF CARD START -----------
+        boardid = sys.argv[2]
+        listid = sys.argv[3]
+        cardid = sys.argv[4]
+        listone = wekanurl + apiboards + boardid + s + l + s + listid + s + cs + s + cardid
+        headers = {'Accept': 'application/json', 'Authorization': 'Bearer {}'.format(apikey)}
+        print("=== INFO OF ONE LIST ===\n")
+        print("URL:", listone)  # Stampa l'URL per debug
+        try:
+            response = requests.get(listone, headers=headers)
+            print("=== RESPONSE ===\n")
+            print("Status Code:", response.status_code)  # Stampa il codice di stato per debug
+
+            if response.status_code == 200:
+                data2 = response.text.replace('}', "}\n")
+                print(data2)
+            else:
+                print(f"Error: {response.status_code}")
+                print(f"Response: {response.text}")
+        except Exception as e:
+            print(f"Error in the GET request: {e}")
+        # ------- LISTS OF CARD END -----------
+
+    if sys.argv[1] == 'createlabel':
+
+        # ------- CREATE LABEL START -----------
+        boardid = sys.argv[2]
+        labelcolor = sys.argv[3]
+        labelname = sys.argv[4]
+        label_url = wekanurl + apiboards + boardid + s + 'labels'
+        print(label_url)
+        headers = {'Accept': 'application/json', 'Authorization': 'Bearer {}'.format(apikey)}
+        # Object to send
+        put_data = {'label': {'color': labelcolor, 'name': labelname}}
+        print("URL:", label_url)
+        print("Headers:", headers)
+        print("Data:", put_data)
+        try:
+          response = requests.put(label_url, json=put_data, headers=headers)
+          print("=== CREATE LABELS ===\n")
+          print("Response Status Code:", response.status_code)
+          print("Response Text:", response.text)
+        except Exception as e:
+          print("Error:", e)
+        # ------- CREATE LABEL END -----------
+
+    if sys.argv[1] == 'addchecklist':
+
+        # ------- ADD CHECKLIST START -----------
+        board_id = sys.argv[2]
+        card_id = sys.argv[3]
+        checklist_title = sys.argv[4]
+
+        # Aggiungi la checklist
+        checklist_url = wekanurl + apiboards + board_id + s + cs + s + card_id + '/checklists'
+        headers = {'Accept': 'application/json', 'Authorization': 'Bearer {}'.format(apikey)}
+        data = {'title': checklist_title}
+
+        response = requests.post(checklist_url, data=data, headers=headers)
+        response.raise_for_status()
+
+        result = json.loads(response.text)
+        checklist_id = result.get('_id')
+
+        print(f"Checklist '{checklist_title}' created. ID: {checklist_id}")
+
+        # Aggiungi gli items alla checklist
+        items_to_add = sys.argv[5:]  
+        for item_title in items_to_add:
+            checklist_item_url = wekanurl + apiboards + board_id + s + cs + s + card_id + s + 'checklists' + s + checklist_id + '/items'
+            item_data = {'title': item_title}
+
+            item_response = requests.post(checklist_item_url, data=item_data, headers=headers)
+            item_response.raise_for_status()
+
+            item_result = json.loads(item_response.text)
+            checklist_item_id = item_result.get('_id')
+
+            print(f"Item '{item_title}' added. ID: {checklist_item_id}")
+
+    if sys.argv[1] == 'checklistinfo':
+
+        # ------- ADD CHECKLIST START -----------
+        board_id = sys.argv[2]
+        card_id = sys.argv[3]
+        checklist_id = sys.argv[4]
+        checklist_url = wekanurl + apiboards + board_id + s + cs + s + card_id + '/checklists' + s + checklist_id
+        headers = {'Accept': 'application/json', 'Authorization': 'Bearer {}'.format(apikey)}
+        response = requests.get(checklist_url, headers=headers)
+
+        response.raise_for_status()
+
+        checklist_info = response.json()
+        print("Checklist Info:")
+        print(checklist_info)
 
 if arguments == 3:
 
+    if sys.argv[1] == 'editboardtitle':
+
+        # ------- EDIT BOARD TITLE START -----------
+        boardid = sys.argv[2]
+        boardtitle = sys.argv[3]
+        edboardtitle = wekanurl + apiboards + boardid + s + 'title'
+        print(edboardtitle)
+        headers = {'Accept': 'application/json', 'Authorization': 'Bearer {}'.format(apikey)}
+
+        post_data = {'title': boardtitle}
+
+        body = requests.put(edboardtitle, json=post_data, headers=headers)
+        print("=== EDIT BOARD TITLE ===\n")
+        #body = requests.get(edboardtitle, headers=headers)
+        data2 = body.text.replace('}',"}\n")
+        print(data2)
+        if body.status_code == 200:
+            print("Succesfull!")
+        else:
+            print(f"Error: {body.status_code}")
+            print(body.text)
+
+        # ------- EDIT BOARD TITLE END -----------
+
+    if sys.argv[1] == 'copyboard':
+
+        # ------- COPY BOARD START -----------
+        boardid = sys.argv[2]
+        boardtitle = sys.argv[3]
+        edboardcopy = wekanurl + apiboards + boardid + s + 'copy'
+        print(edboardcopy)
+        headers = {'Accept': 'application/json', 'Authorization': 'Bearer {}'.format(apikey)}
+
+        post_data = {'title': boardtitle}
+
+        body = requests.post(edboardcopy, json=post_data, headers=headers)
+        print("=== COPY BOARD ===\n")
+        #body = requests.get(edboardcopy, headers=headers)
+        data2 = body.text.replace('}',"}\n")
+        print(data2)
+        if body.status_code == 200:
+            print("Succesfull!")
+        else:
+            print(f"Error: {body.status_code}")
+            print(body.text)
+
+        # ------- COPY BOARD END -----------
+
     if sys.argv[1] == 'createlist':
 
         # ------- CREATE LIST START -----------
@@ -293,6 +546,90 @@ if arguments == 3:
         print(data2)
         # ------- INFO OF CUSTOM FIELD END -----------
 
+    if sys.argv[1] == 'cardsbyswimlane':
+    # ------- RETRIEVE CARDS BY SWIMLANE ID START -----------
+        boardid = sys.argv[2]
+        swimlaneid = sys.argv[3]
+        cardsbyswimlane = wekanurl + apiboards + boardid + s + sws + s + swimlaneid + s + cs
+        headers = {'Accept': 'application/json', 'Authorization': 'Bearer {}'.format(apikey)}
+        print("=== CARDS BY SWIMLANE ID ===\n")
+        print("URL:", cardsbyswimlane)  # Debug
+        try:
+            body = requests.get(cardsbyswimlane, headers=headers)
+            print("Status Code:", body.status_code)  # Debug
+            data = body.text.replace('}', "}\n")
+            print("Data:", data)
+        except Exception as e:
+            print("Error GET:", e)
+    # ------- RETRIEVE CARDS BY SWIMLANE ID END -----------
+
+    if sys.argv[1] == 'deleteallcards':
+        boardid = sys.argv[2]
+        swimlaneid = sys.argv[3]
+
+        # ------- GET SWIMLANE CARDS START -----------
+        get_swimlane_cards_url = wekanurl + apiboards + boardid + s + "swimlanes" + s + swimlaneid + s + "cards"
+        headers = {'Accept': 'application/json', 'Authorization': 'Bearer {}'.format(apikey)}
+
+        try:
+            response = requests.get(get_swimlane_cards_url, headers=headers)
+            response.raise_for_status()
+            cards_data = response.json()
+
+            # Print the details of each card
+            for card in cards_data:
+                # ------- DELETE CARD START -----------
+                delete_card_url = wekanurl + apiboards + boardid + s + "lists" + s + card['listId'] + s + "cards" + s + card['_id']
+                try:
+                    response = requests.delete(delete_card_url, headers=headers)
+                    if response.status_code == 404:
+                        print(f"Card not found: {card['_id']}")
+                    else:
+                        response.raise_for_status()
+                        deleted_card_data = response.json()
+                        print(f"Card Deleted Successfully. Card ID: {deleted_card_data['_id']}")
+                except requests.exceptions.RequestException as e:
+                    print(f"Error deleting card: {e}")
+                # ------- DELETE CARD END -----------
+
+        except requests.exceptions.RequestException as e:
+            print(f"Error getting swimlane cards: {e}")
+            sys.exit(1)
+        # ------- GET SWIMLANE CARDS END -----------
+
+    if sys.argv[1] == 'get_list_cards_count':
+        # ------- GET LIST CARDS COUNT START -----------
+        boardid = sys.argv[2]
+        listid = sys.argv[3]
+
+        get_list_cards_count_url = wekanurl + apiboards + boardid +  s + l + s + listid + s + "cards_count"
+        headers = {'Accept': 'application/json', 'Authorization': 'Bearer {}'.format(apikey)}
+
+        try:
+            response = requests.get(get_list_cards_count_url, headers=headers)
+            response.raise_for_status()
+            data = response.json()
+            print(f"List Cards Count: {data['list_cards_count']}")
+        except requests.exceptions.RequestException as e:
+            print(f"Error: {e}")
+        # ------- GET LIST CARDS COUNT END -----------
+
+    if sys.argv[1] == 'checklistid':
+
+        # ------- ADD CHECKLIST START -----------
+        board_id = sys.argv[2]
+        card_id = sys.argv[3]
+
+        checklist_url = wekanurl + apiboards + board_id + s + cs + s + card_id + '/checklists'
+        headers = {'Accept': 'application/json', 'Authorization': 'Bearer {}'.format(apikey)}
+        response = requests.get(checklist_url, headers=headers)
+
+        response.raise_for_status()
+        checklists = response.json()
+        print("Checklists:")
+        for checklist in checklists:
+          print(checklist)
+
 if arguments == 2:
 
     # ------- BOARDS LIST START -----------
@@ -364,6 +701,22 @@ if arguments == 2:
         print(data2)
         # ------- LISTS OF ATTACHMENTS END -----------
 
+    if sys.argv[1] == 'get_board_cards_count':
+        # ------- GET BOARD CARDS COUNT START -----------
+        boardid = sys.argv[2]
+
+        get_board_cards_count_url = wekanurl + apiboards + boardid + s + "cards_count"
+        headers = {'Accept': 'application/json', 'Authorization': 'Bearer {}'.format(apikey)}
+
+        try:
+            response = requests.get(get_board_cards_count_url, headers=headers)
+            response.raise_for_status()
+            data = response.json()
+            print(f"Board Cards Count: {data['board_cards_count']}")
+        except requests.exceptions.RequestException as e:
+            print(f"Error: {e}")
+        # ------- GET BOARD CARDS COUNT END -----------
+
 if arguments == 1:
 
     if sys.argv[1] == 'users':

client/components/boards/boardBody.js

@@ -320,7 +320,7 @@ BlazeComponent.extendComponent({
   calendarOptions() {
     return {
       id: 'calendar-view',
-      defaultView: 'agendaDay',
+      defaultView: 'month',
       editable: true,
       selectable: true,
       timezone: 'local',

client/components/boards/boardColors.css

@@ -1060,8 +1060,13 @@
 .board-color-clearblue .swimlane {
   background: none;
 }
-.board-color-clearblue .list:first-child {
-  margin-left: 15px;
+.board-color-clearblue .swimlane .list:first-child {
+  min-width: 20px;
+  margin-left: 0px;
+  border-left: none;
+}
+.board-color-clearblue .swimlane .list:nth-child {
+  flex: 0 0 265px;
 }
 .board-color-clearblue .list {
   background: rgba(255,255,255,0.35);
@@ -1073,8 +1078,10 @@
   background: rgba(255,255,255,0.1);
   height: min-content;
   flex: unset;
-  width: 270px;
   padding-bottom: 16px;
+  min-width: 20px;
+  margin-left: 0px;
+  border-left: none;
 }
 .board-color-clearblue .list.list-composer .open-list-composer {
   border-radius: 7px;
@@ -1082,6 +1089,7 @@
   padding: 7px 10px;
   display: block;
 }
+.board-color-clearblue .list.list-composer .open-list-composer:hover i,
 .board-color-clearblue .list.list-composer .open-list-composer:hover {
   box-shadow: 0 1px 2px rgba(0,0,0,0.2);
   background: rgba(255,255,255,0.7);
@@ -1452,12 +1460,17 @@
   background: none;
   box-shadow: none;
 }
-.board-color-modern .list:first-child {
-  margin-left: 5px;
+.board-color-modern .swimlane .list:first-child {
+  min-width: 20px;
+  margin-left: 0px;
+  border-left: none;
 }
+.board-color-modern .swimlane .list:nth-child {
+  flex: 0 0 265px;
+ }
 .board-color-modern .list.list-composer.js-list-composer {
   transition: all 0.3s ease;
-  min-width: 80px;
+  min-width: 20px;
 }
 .board-color-modern .open-list-composer.js-open-inlined-form:hover {
   color: #222;
@@ -1536,9 +1549,6 @@
 .board-color-modern .sidebar .sidebar-shadow {
   box-shadow: 0 0 60px rgba(0,0,0,0.2);
 }
-.board-color-modern .sidebar .sidebar-content {
-  padding: 30px;
-}
 .board-color-modern .board-color-modern section#notifications-drawer {
   border-radius: 5px;
 }
@@ -1680,6 +1690,11 @@
   padding: 4px;
   font-size: 14px;
 }
+@media screen and (max-width: 800px) {
+  .board-color-moderndark#header-quick-access {
+    padding: 0;
+  }
+}
 .board-color-moderndark#header-quick-access .allBoards {
   padding: 5px 10px 0 10px;
 }
@@ -1740,10 +1755,19 @@
   background: #666;
   border-radius: 0;
   border: 0px solid #666;
-  flex: 0 0 265px;
 }
 .board-color-moderndark .swimlane .list:first-child {
-  margin-left: 0;
+  color: #eee;
+  min-width: 20px;
+  margin-left: 0px;
+  border-left: none;
+}
+.board-color-moderndark .swimlane .list-composer .list-header-add .inlined-form .edit-controls .quiet,
+.board-color-moderndark .swimlane .list-composer .list-header-add .inlined-form .edit-controls .quiet a.js-list-template {
+  color: #eee;
+}
+.board-color-moderndark .swimlane .list:nth-child {
+  flex: 0 0 265px;
 }
 .board-color-moderndark .swimlane .list:nth-child(even) .list-header,
 .board-color-moderndark .swimlane .list:nth-child(even) .list-body {
@@ -1767,6 +1791,10 @@
 @media screen and (max-width: 800px) {
   .board-color-moderndark .list-header .list-header-name {
     line-height: 40px;
+    padding-top: 10px;
+  }
+  .board-color-moderndark .list-header-black, .board-color-moderndark .mini-list {
+    border-bottom: 0;
   }
 }
 @media screen and (min-width: 801px) {
@@ -1778,7 +1806,6 @@
   }
 }
 .board-color-moderndark .list-header .list-header-menu {
-  padding: 10px;
   top: 0;
 }
 .board-color-moderndark .list-header .list-header-plus-top {
@@ -1811,6 +1838,7 @@
 .board-color-moderndark .list .list-composer .open-list-composer i {
   color: #bbb;
 }
+.board-color-moderndark .swimlane .list:first-child .open-list-composer:hover i,
 .board-color-moderndark .list-body a.open-minicard-composer:hover,
 .board-color-moderndark .list-body a.open-minicard-composer:hover i,
 .board-color-moderndark .list .list-composer .open-list-composer:hover i {
@@ -1874,17 +1902,20 @@
 }
 @media screen and (max-width: 800px) {
   .board-color-moderndark .card-details {
-    width: 98%;
+    width: 94%;
   }
-  .card-details-popup {
-    padding: 0px;
+  .board-color-moderndark .card-details-popup {
+    padding: 0;
   }
-  .card-details-left, .card-details-right {
-    padding: 0px 10px;
+  .board-color-moderndark .card-details-left, .board-color-moderndark .card-details-right {
+    padding: 0px 20px;
   }
-  .card-details .card-details-header .card-details-menu-mobile-web {
+  .board-color-moderndark .card-details .card-details-header .card-details-menu-mobile-web {
     margin-right: 0;
   }
+  .board-color-moderndark .pop-over > .content-wrapper > .popup-container-depth-0 > .content {
+    width: calc(100% - 20px);
+  }
 }
 @media screen and (min-width: 801px) {
   .board-color-moderndark .card-details {
@@ -2094,6 +2125,18 @@
   box-shadow: inset 15px 15px 37px #1c1c1c, inset -15px -15px 37px #282828;
   border: none;
 }
+.board-color-exodark .swimlane .list:first-child {
+  min-width: 20px;
+  margin-left: 0px;
+  border-left: none;
+}
+.board-color-exodark .swimlane .list:nth-child {
+  flex: 0 0 265px;
+}
+.board-color-exodark .list.list-composer.js-list-composer {
+  transition: all 0.3s ease;
+  min-width: 0;
+}
 .board-color-exodark .list-header {
   border-top-right-radius: 15px;
   border-top-left-radius: 15px;

client/components/cards/attachments.css

@@ -24,7 +24,6 @@
   min-width: 150px;
   max-height: 150px;
   padding-right: 16px;
-
 }
 .attachment-thumbnail {
   max-width: 150px;
@@ -78,10 +77,10 @@
   width: 100%;
   height: 100vh;
   position: fixed;
-  top: 48px;  /* height of the navbar */
+  top: 0;
   left: 0;
   z-index: 9999 !important;
-  background: rgba(13,13,13,0.95);
+  background: rgba(13, 13, 13, 0.95);
 }
 #viewer-container {
   display: flex;
@@ -99,10 +98,12 @@
 #attachment-name {
   color: white;
   font-size: 1.5em;
-  max-width: calc(100% - 50px); /* Make sure the name does not overlap the close button */
+  max-width: calc(
+    100% - 50px
+  ); /* Make sure the name does not overlap the close button */
 }
 #viewer-close {
-  color:white;
+  color: white;
   cursor: pointer;
   font-size: 4em;
   top: 0;
@@ -111,25 +112,32 @@
 }
 .attachment-arrow {
   font-size: 4em;
-  color:white;
+  color: white;
   cursor: pointer;
   align-self: center;
   margin: 0 20px;
 }
+#viewer-content {
+  display: flex;
+  justify-content: center;
+  align-items: center;
+  width: 100%;
+  height: calc(100% - 50px);
+}
 #image-viewer {
-  background:
-    repeating-conic-gradient(#808080 0% 25%, transparent 0% 50%)
-      50% / 20px 20px; /* Checkerboard background for transparent images */
+  background: repeating-conic-gradient(#808080 0% 25%, transparent 0% 50%) 50% /
+    20px 20px; /* Checkerboard background for transparent images */
   max-width: 100%;
+  max-height: 100%;
 }
 #pdf-viewer {
   width: 40vw;
-  height: 100vh;
+  height: 100%;
 }
-#txt-viewer{
+#txt-viewer {
   background-color: white;
   width: 40vw;
-  height: 100vh;
+  height: 100%;
 }
 .pdf-preview-error {
   margin-top: 20vh;
@@ -148,25 +156,29 @@
   #viewer-container {
     display: block;
   }
-  .attachment-arrow{
+  .attachment-arrow {
     position: absolute;
     bottom: 2.2em;
     font-size: 1.6em;
     padding: 16px;
   }
-  #prev-attachment{
+  #prev-attachment {
     left: 0;
   }
-  #next-attachment{
+  #next-attachment {
     right: 0;
   }
   #pdf-viewer {
     width: 100%;
-    height: calc(100vh - 155px);  /* Full height - height of top and bottom bars */
+    height: calc(
+      100vh - 155px
+    ); /* Full height - height of top and bottom bars */
   }
   #txt-viewer {
     width: 100%;
-    height: calc(100vh - 155px);  /* Full height - height of top and bottom bars */
+    height: calc(
+      100vh - 155px
+    ); /* Full height - height of top and bottom bars */
   }
   #audio-viewer {
     margin-top: 20%;

client/components/cards/attachments.jade

@@ -51,8 +51,9 @@ template(name="attachmentGallery")
 
   .attachment-gallery
 
-    a.attachment-item.add-attachment.js-add-attachment
-      i.fa.fa-plus.icon
+    if canModifyCard
+      a.attachment-item.add-attachment.js-add-attachment
+        i.fa.fa-plus.icon
 
     each attachments
 

client/components/cards/attachments.js

@@ -11,6 +11,9 @@ const prettyMilliseconds = require('pretty-ms');
 let cardId = null;
 let openAttachmentId = null;
 
+// Used to store the start and end coordinates of a touch event for attachment swiping
+let touchStartCoords = null;
+let touchEndCoords = null;
 
 // Stores link to the attachment for which attachment actions popup was opened
 attachmentActionsLink = null;
@@ -35,24 +38,24 @@ Template.attachmentGallery.events({
   },
   'click .js-rename': Popup.open('attachmentRename'),
   'click .js-confirm-delete': Popup.afterConfirm('attachmentDelete', function() {
-    Attachments.remove(this._id);
-    Popup.back(2);
+      Attachments.remove(this._id);
+      Popup.back(2);
   }),
 });
 
-function getNextAttachmentId(currentAttachmentId) {
+function getNextAttachmentId(currentAttachmentId, offset = 0) {
     const attachments = ReactiveCache.getAttachments({'meta.cardId': cardId});
 
-    let i = 0;
-    for (; i < attachments.length; i++) {
-      if (attachments[i]._id === currentAttachmentId) {
-        break;
-      }
+  let i = 0;
+  for (; i < attachments.length; i++) {
+    if (attachments[i]._id === currentAttachmentId) {
+      break;
     }
-    return attachments[(i + 1 + attachments.length) % attachments.length]._id;
+  }
+  return attachments[(i + offset + 1 + attachments.length) % attachments.length]._id;
 }
 
-function getPrevAttachmentId(currentAttachmentId) {
+function getPrevAttachmentId(currentAttachmentId, offset = 0) {
   const attachments = ReactiveCache.getAttachments({'meta.cardId': cardId});
 
   let i = 0;
@@ -61,52 +64,70 @@ function getPrevAttachmentId(currentAttachmentId) {
       break;
     }
   }
-  return attachments[(i - 1 + attachments.length) % attachments.length]._id;
+  return attachments[(i + offset - 1 + attachments.length) % attachments.length]._id;
 }
 
-function openAttachmentViewer(attachmentId){
+function attachmentCanBeOpened(attachment) {
+  return (
+    attachment.isImage ||
+    attachment.isPDF ||
+    attachment.isText ||
+    attachment.isJSON ||
+    attachment.isVideo ||
+    attachment.isAudio
+  );
+}
 
-    const attachment = ReactiveCache.getAttachment(attachmentId);
+function openAttachmentViewer(attachmentId) {
+  const attachment = ReactiveCache.getAttachment(attachmentId);
 
-    $("#attachment-name").text(attachment.name);
+  // Check if we can open the attachment (if we have a viewer for it) and exit if not
+  if (!attachmentCanBeOpened(attachment)) {
+    return;
+  }
 
-    // IMPORTANT: if you ever add a new viewer, make sure you also implement
-    // cleanup in the closeAttachmentViewer() function
-    switch(true){
-      case (attachment.isImage):
-        $("#image-viewer").attr("src", attachment.link());
-        $("#image-viewer").removeClass("hidden");
-        break;
-      case (attachment.isPDF):
-        $("#pdf-viewer").attr("data", attachment.link());
-        $("#pdf-viewer").removeClass("hidden");
-        break;
-      case (attachment.isVideo):
-        // We have to create a new <source> DOM element and append it to the video
-        // element, otherwise the video won't load
-        let videoSource = document.createElement('source');
-        videoSource.setAttribute('src', attachment.link());
-        $("#video-viewer").append(videoSource);
+  /*
+  Instructions for adding a new viewer:
+    - add a new case to the switch statement below
+    - implement cleanup in the closeAttachmentViewer() function, if necessary
+    - mark attachment type as openable by adding a new condition to the attachmentCanBeOpened function
+  */
+  switch(true){
+    case (attachment.isImage):
+      $("#image-viewer").attr("src", attachment.link());
+      $("#image-viewer").removeClass("hidden");
+      break;
+    case (attachment.isPDF):
+      $("#pdf-viewer").attr("data", attachment.link());
+      $("#pdf-viewer").removeClass("hidden");
+      break;
+    case (attachment.isVideo):
+      // We have to create a new <source> DOM element and append it to the video
+      // element, otherwise the video won't load
+      let videoSource = document.createElement('source');
+      videoSource.setAttribute('src', attachment.link());
+      $("#video-viewer").append(videoSource);
 
-        $("#video-viewer").removeClass("hidden");
-        break;
-      case (attachment.isAudio):
-        // We have to create a new <source> DOM element and append it to the audio
-        // element, otherwise the audio won't load
-        let audioSource = document.createElement('source');
-        audioSource.setAttribute('src', attachment.link());
-        $("#audio-viewer").append(audioSource);
+      $("#video-viewer").removeClass("hidden");
+      break;
+    case (attachment.isAudio):
+      // We have to create a new <source> DOM element and append it to the audio
+      // element, otherwise the audio won't load
+      let audioSource = document.createElement('source');
+      audioSource.setAttribute('src', attachment.link());
+      $("#audio-viewer").append(audioSource);
 
-        $("#audio-viewer").removeClass("hidden");
-        break;
-      case (attachment.isText):
-      case (attachment.isJSON):
-        $("#txt-viewer").attr("data", attachment.link());
-        $("#txt-viewer").removeClass("hidden");
-        break;
-    }
+      $("#audio-viewer").removeClass("hidden");
+      break;
+    case (attachment.isText):
+    case (attachment.isJSON):
+      $("#txt-viewer").attr("data", attachment.link());
+      $("#txt-viewer").removeClass("hidden");
+      break;
+  }
 
-    $("#viewer-overlay").removeClass("hidden");
+  $('#attachment-name').text(attachment.name);
+  $('#viewer-overlay').removeClass('hidden');
 }
 
 function closeAttachmentViewer() {
@@ -133,36 +154,109 @@ function closeAttachmentViewer() {
   $("#audio-viewer").addClass("hidden");
 }
 
+function openNextAttachment() {
+  closeAttachmentViewer();
+
+    let i = 0;
+    // Find an attachment that can be opened
+    while (true) {
+      const id = getNextAttachmentId(openAttachmentId, i);
+      const attachment = ReactiveCache.getAttachment(id);
+      if (attachmentCanBeOpened(attachment)) {
+        openAttachmentId = id;
+        openAttachmentViewer(id);
+        break;
+      }
+      i++;
+    }
+}
+
+function openPrevAttachment() {
+  closeAttachmentViewer();
+
+    let i = 0;
+    // Find an attachment that can be opened
+    while (true) {
+      const id = getPrevAttachmentId(openAttachmentId, i);
+      const attachment = ReactiveCache.getAttachment(id);
+      if (attachmentCanBeOpened(attachment)) {
+        openAttachmentId = id;
+        openAttachmentViewer(id);
+        break;
+      }
+      i--;
+    }
+}
+
+function processTouch(){
+
+  xDist = touchEndCoords.x - touchStartCoords.x;
+  yDist = touchEndCoords.y - touchStartCoords.y;
+
+  console.log("xDist: " + xDist);
+
+  // Left swipe
+  if (Math.abs(xDist) > Math.abs(yDist) && xDist < 0) {
+    openNextAttachment();
+  }
+
+  // Right swipe
+  if (Math.abs(xDist) > Math.abs(yDist) && xDist > 0) {
+    openPrevAttachment();
+  }
+
+  // Up swipe
+  if (Math.abs(yDist) > Math.abs(xDist) && yDist < 0) {
+    closeAttachmentViewer();
+  }
+
+}
+
 Template.attachmentViewer.events({
+  'touchstart #viewer-container'(event) {
+    console.log("touchstart")
+    touchStartCoords = {
+      x: event.changedTouches[0].screenX,
+      y: event.changedTouches[0].screenY
+    }
+  },
+  'touchend #viewer-container'(event) {
+    console.log("touchend")
+    touchEndCoords = {
+      x: event.changedTouches[0].screenX,
+      y: event.changedTouches[0].screenY
+    }
+    processTouch();
+  },
   'click #viewer-container'(event) {
 
     // Make sure the click was on #viewer-container and not on any of its children
-    if(event.target !== event.currentTarget) return;
+    if(event.target !== event.currentTarget) {
+      event.stopPropagation();
+      return;
+    }
 
     closeAttachmentViewer();
   },
   'click #viewer-content'(event) {
 
     // Make sure the click was on #viewer-content and not on any of its children
-    if(event.target !== event.currentTarget) return;
+    if(event.target !== event.currentTarget) {
+      event.stopPropagation();
+      return;
+    }
 
     closeAttachmentViewer();
   },
   'click #viewer-close'() {
     closeAttachmentViewer();
   },
-  'click #next-attachment'(event) {
-    closeAttachmentViewer()
-    const id = getNextAttachmentId(openAttachmentId);
-    openAttachmentId = id;
-    openAttachmentViewer(id);
+  'click #next-attachment'() {
+    openNextAttachment();
+  },
+  'click #prev-attachment'() {
+    openPrevAttachment();
   },
-  'click #prev-attachment'(event) {
-    closeAttachmentViewer()
-    const id = getPrevAttachmentId(openAttachmentId);
-    openAttachmentId = id;
-    openAttachmentViewer(id);
-  }
 });
 
 Template.attachmentGallery.helpers({
@@ -204,13 +298,23 @@ Template.cardAttachmentsPopup.events({
       let uploads = [];
       for (const file of files) {
         const fileId = new ObjectID().toString();
-        // If filename is not same as sanitized filename, has XSS, then cancel upload
-        if (file.name !== DOMPurify.sanitize(file.name)) {
-          return false;
+        let fileName = DOMPurify.sanitize(file.name);
+
+        // If sanitized filename is not same as original filename,
+        // it could be XSS that is already fixed with sanitize,
+        // or just normal mistake, so it is not a problem.
+        // That is why here is no warning.
+        if (fileName !== file.name) {
+          // If filename is empty, only in that case add some filename
+          if (fileName.length === 0) {
+            fileName = 'Empty-filename-after-sanitize.txt';
+          }
         }
+
         const config = {
           file: file,
           fileId: fileId,
+          fileName: fileName,
           meta: Utils.getCommonAttachmentMetaFrom(card),
           chunkSize: 'dynamic',
         };

client/components/cards/cardDetails.css

@@ -196,6 +196,9 @@
   margin-right: 10px;
   padding: 10px;
 }
+.card-details .card-description i.fa.fa-pencil-square-o {
+  float: right;
+}
 .card-details .card-description textarea {
   min-height: 100px;
 }
@@ -247,7 +250,7 @@
 @media screen and (min-width: 801px) {
   .card-details {
     top: 97px;
-    left: 0;
+    left: calc(50% - (600px / 2));
     width: 600px;
     bottom: 0;
     position: fixed;
@@ -267,9 +270,8 @@
     box-shadow: 0 0 7px 0 #b3b3b3;
     transition: flex-basis 0.1s;
     box-sizing: border-box;
-    position: absolute;
-    top: 0;
-    left: 0;
+    top: 97px;
+    left: 0px;
     height: calc(100% - 20px);
     width: calc(100% - 20px);
     float: left;

client/components/cards/cardDetails.jade

@@ -2,6 +2,9 @@ template(name="cardDetailsPopup")
   +cardDetails(popupCard)
 
 template(name="cardDetails")
+
+  +attachmentViewer
+
   section.card-details.js-card-details(class='{{#if cardMaximized}}card-details-maximized{{/if}}' class='{{#if isPopup}}card-details-popup{{/if}}'): .card-details-canvas
     .card-details-header(class='{{#if colorClass}}card-details-{{colorClass}}{{/if}}')
       +inlinedForm(classNames="js-card-details-title")
@@ -10,11 +13,12 @@ template(name="cardDetails")
         unless isMiniScreen
           unless isPopup
             a.fa.fa-times-thin.close-card-details.js-close-card-details(title="{{_ 'close-card'}}")
-            if cardMaximized
-              a.fa.fa-window-minimize.minimize-card-details.js-minimize-card-details(title="{{_ 'minimize-card'}}")
-            else
-              a.fa.fa-window-maximize.maximize-card-details.js-maximize-card-details(title="{{_ 'maximize-card'}}")
-          if currentUser.isBoardMember
+            if canModifyCard
+              if cardMaximized
+                a.fa.fa-window-minimize.minimize-card-details.js-minimize-card-details(title="{{_ 'minimize-card'}}")
+              else
+                a.fa.fa-window-maximize.maximize-card-details.js-maximize-card-details(title="{{_ 'maximize-card'}}")
+          if canModifyCard
             a.fa.fa-navicon.card-details-menu.js-open-card-details-menu(title="{{_ 'cardDetailsActionsPopup-title'}}")
             a.fa.fa-link.card-copy-button.js-copy-link(
               id="cardURL_copy"
@@ -26,7 +30,7 @@ template(name="cardDetails")
         else
           unless isPopup
             a.fa.fa-times-thin.close-card-details.js-close-card-details(title="{{_ 'close-card'}}")
-          if currentUser.isBoardMember
+          if canModifyCard
             a.fa.fa-navicon.card-details-menu-mobile-web.js-open-card-details-menu(title="{{_ 'cardDetailsActionsPopup-title'}}")
             a.fa.fa-link.card-copy-mobile-button.js-copy-link(
               id="cardURL_copy"
@@ -521,12 +525,11 @@ template(name="cardDetails")
                 a.fa.fa-times-thin.js-close-inlined-form
             else
               if currentBoard.allowsDescriptionText
-                a.js-open-inlined-form
-                  if getDescription
-                    +viewer
-                      = getDescription
-                  else
-                    | {{_ 'edit'}}
+                a.js-open-inlined-form.right(title="{{_ 'edit'}}" value=title)
+                  i.fa.fa-pencil-square-o
+                if getDescription
+                  +viewer
+                    = getDescription
                 if (hasUnsavedValue 'cardDescription' _id)
                   p.quiet
                     | {{_ 'unsaved-description'}}
@@ -562,7 +565,6 @@ template(name="cardDetails")
             br
           | {{_ 'invalid-file'}}
           .card-checklist-attachmentGallery.card-attachmentGallery
-            +attachmentViewer
             +attachmentGallery
       hr
 

client/components/cards/cardDetails.js

@@ -76,62 +76,6 @@ BlazeComponent.extendComponent({
     return !Utils.getPopupCardId() && ReactiveCache.getCurrentUser().hasCardMaximized();
   },
 
-  scrollParentContainer() {
-    const cardPanelWidth = 600;
-    const parentComponent = this.parentComponent();
-
-    /*
-        // Incomplete fix about bug where opening card scrolls to wrong place
-        // https://github.com/wekan/wekan/issues/4572#issuecomment-1184149395
-        // TODO sometimes parentComponent is not available, maybe because it's not
-        // yet created?!
-        if (!parentComponent) return;
-        const bodyBoardComponent = parentComponent.parentComponent();
-    */
-
-    //On Mobile View Parent is Board, Not Board Body. I cant see how this funciton should work then.
-    if (bodyBoardComponent === null) return;
-    const $cardView = this.$(this.firstNode());
-    const $cardContainer = bodyBoardComponent.$('.js-swimlanes');
-
-    /*
-        // Incomplete fix about bug where opening card scrolls to wrong place
-        // https://github.com/wekan/wekan/issues/4572#issuecomment-1184149395
-        // TODO sometimes cardContainer is not available, maybe because it's not yet
-        // created?!
-        if (!$cardContainer) return;
-    */
-
-    const cardContainerScroll = $cardContainer.scrollLeft();
-    const cardContainerWidth = $cardContainer.width();
-
-    const cardViewStart = $cardView.offset().left;
-    const cardViewEnd = cardViewStart + cardPanelWidth;
-
-    let offset = false;
-    if (cardViewStart < 0) {
-      offset = cardViewStart;
-    } else if (cardViewEnd > cardContainerWidth) {
-      offset = cardViewEnd - cardContainerWidth;
-    }
-
-    if (offset) {
-      bodyBoardComponent.scrollLeft(cardContainerScroll + offset);
-    }
-
-    //Scroll top
-    const cardViewStartTop = $cardView.offset().top;
-    const cardContainerScrollTop = $cardContainer.scrollTop();
-
-    let topOffset = false;
-    if (cardViewStartTop !== 100) {
-      topOffset = cardViewStartTop - 100;
-    }
-    if (topOffset !== false) {
-      bodyBoardComponent.scrollTop(cardContainerScrollTop + topOffset);
-    }
-  },
-
   presentParentTask() {
     let result = this.currentBoard.presentParentTask;
     if (result === null || result === undefined) {
@@ -442,20 +386,10 @@ BlazeComponent.extendComponent({
         'click .js-maximize-card-details'() {
           Meteor.call('toggleCardMaximized');
           autosize($('.card-details'));
-          if (!Utils.isMiniScreen()) {
-            Meteor.setTimeout(() => {
-              this.scrollParentContainer();
-            }, 500);
-          }
         },
         'click .js-minimize-card-details'() {
           Meteor.call('toggleCardMaximized');
           autosize($('.card-details'));
-          if (!Utils.isMiniScreen()) {
-            Meteor.setTimeout(() => {
-              this.scrollParentContainer();
-            }, 500);
-          }
         },
         'click .js-vote'(e) {
           const forIt = $(e.target).hasClass('js-vote-positive');
@@ -742,7 +676,7 @@ Template.cardMembersPopup.events({
 
 Template.cardMembersPopup.helpers({
   members() {
-    return Template.instance().members.get();
+    return _.sortBy(Template.instance().members.get(),'fullname');
   },
 });
 
@@ -1604,7 +1538,7 @@ Template.cardAssigneesPopup.helpers({
   },
 
   members() {
-    return Template.instance().members.get();
+    return _.sortBy(Template.instance().members.get(),'fullname');
   },
 
   user() {

client/components/cards/checklists.css

@@ -8,6 +8,20 @@ textarea.js-edit-checklist-item {
   resize: none;
   height: 34px;
 }
+.card-details .text-show-at-minicard {
+  width: 350px;
+  text-align: left;
+}
+.minicard .text-show-at-minicard {
+  display: none;
+}
+.text-some-space {
+  width: 20px;
+}
+.text-hide-checked-items {
+  width: 400px;
+  text-align: left;
+}
 .delete-text,
 .js-delete-checklist-item,
 .js-convert-checklist-item-to-card {
@@ -26,6 +40,8 @@ textarea.js-edit-checklist-item {
   display: flex;
   justify-content: space-between;
 }
+
+
 .checklist-progress-bar-container {
   display: flex;
   flex-direction: row;

client/components/cards/checklists.jade

@@ -9,18 +9,10 @@ template(name="checklists")
         else
           a.add-checklist-top.js-open-inlined-form(title="{{_ 'add-checklist'}}")
             i.fa.fa-plus
-    if currentUser.isBoardMember
-      .material-toggle-switch(title="{{_ 'hide-checked-items'}}")
-        //span.toggle-switch-title
-        if hideCheckedItems
-          input.toggle-switch(type="checkbox" id="toggleHideCheckedItemsButton" checked="checked")
-        else
-          input.toggle-switch(type="checkbox" id="toggleHideCheckedItemsButton")
-        label.toggle-label(for="toggleHideCheckedItemsButton")
 
   .card-checklist-items
     each checklist in checklists
-      +checklistDetail(checklist = checklist)
+      +checklistDetail(checklist=checklist)
 
   if canModifyCard
     +inlinedForm(autoclose=false classNames="js-add-checklist" cardId = cardId)
@@ -130,6 +122,27 @@ template(name='checklistItemDetail')
           = item.title
 
 template(name="checklistActionsPopup")
+  if currentUser.isBoardMember
+    span.text-show-at-minicard
+      | {{_ 'show-at-minicard'}}
+    .material-toggle-switch(title="{{_ 'show-checklist-at-minicard'}}")
+      if showAtMinicard
+        input.toggle-switch(type="checkbox" id="toggleShowChecklistAtMinicardButton" checked="checked")
+      else
+        input.toggle-switch(type="checkbox" id="toggleShowChecklistAtMinicardButton")
+      label.toggle-label(for="toggleShowChecklistAtMinicardButton")
+    hr
+    span.text-hide-checked-items
+      | {{_ 'hide-checked-items'}}
+    .material-toggle-switch(title="{{_ 'hide-checked-items'}}")
+      //span.toggle-switch-title
+      //.check-square-icon.i.fa.fa-check-square-o
+      if hideCheckedItems
+        input.toggle-switch(type="checkbox" id="toggleHideCheckedItemsButton" checked="checked")
+      else
+        input.toggle-switch(type="checkbox" id="toggleHideCheckedItemsButton")
+      label.toggle-label(for="toggleHideCheckedItemsButton")
+    hr
   ul.pop-over-list
     li
       a.js-delete-checklist.delete-checklist

client/components/cards/checklists.js

@@ -202,9 +202,6 @@ BlazeComponent.extendComponent({
 
   events() {
     const events = {
-      'click #toggleHideCheckedItemsButton'() {
-        Meteor.call('toggleHideCheckedItems');
-      },
     };
 
     return [
@@ -274,6 +271,11 @@ Template.checklists.helpers({
     const ret = card.checklists();
     return ret;
   },
+  showAtMinicard() {
+    const card = ReactiveCache.getCard(this.cardId);
+    const ret = card.checklists({'showAtMinicard':1});
+    return ret;
+  },
   hideCheckedItems() {
     const currentUser = ReactiveCache.getCurrentUser();
     if (currentUser) return currentUser.hasHideCheckedItems();
@@ -301,9 +303,26 @@ BlazeComponent.extendComponent({
 }).register('addChecklistItemForm');
 
 BlazeComponent.extendComponent({
+  toggleItem() {
+    const checklist = this.currentData().checklist;
+    const item = this.currentData().item;
+    if (checklist && item && item._id) {
+      item.toggleItem();
+    }
+  },
   events() {
     return [
       {
+        'click .js-checklist-item .check-box-container': this.toggleItem,
+        'click #toggleShowChecklistAtMinicardButton'() {
+          const checklist = this.checklist;
+          if (checklist && checklist._id) {
+            Meteor.call('toggleShowChecklistAtMinicard', checklist._id);
+          }
+        },
+        'click #toggleHideCheckedItemsButton'() {
+          Meteor.call('toggleHideCheckedItems');
+        },
         'click .js-delete-checklist': Popup.afterConfirm('checklistDelete', function () {
           Popup.back(2);
           const checklist = this.checklist;

client/components/cards/labels.js

@@ -52,7 +52,8 @@ BlazeComponent.extendComponent({
       appendTo: '.edit-labels-pop-over',
       helper(element, currentItem) {
         let ret = currentItem.clone();
-        if (currentItem.closest('.popup-container-depth-0').size() == 0) { // only set css transform at every sub-popup, not at the main popup
+        if (currentItem.closest('.popup-container-depth-0').length == 0)
+        { // only set css transform at every sub-popup, not at the main popup
           const content = currentItem.closest('.content')[0]
           const offsetLeft = content.offsetLeft;
           const offsetTop = $('.pop-over > .header').height() * -1;

client/components/cards/minicard.css

@@ -1,3 +1,12 @@
+.minicard .checklists-title,
+.minicard .add-checklist,
+.minicard .add-checklist-item,
+.minicard .checklist-details-menu {
+  display: none;
+}
+.minicard .checklist-progress-bar-container {
+  width: 190px; /* TODO: Add adjustable width https://github.com/wekan/wekan/pull/4964 */
+}
 .minicard-wrapper {
   cursor: pointer;
   position: relative;
@@ -47,10 +56,12 @@
   float: right;
   font-size: 18px;
   padding-right: 30px;
+  padding-left: 5px;
 }
 .minicard-details-menu {
   float: right;
   font-size: 18px;
+  padding-left: 5px;
 }
 @media print {
   .minicard-details-menu,
@@ -90,7 +101,7 @@
   background-size: contain;
   height: 145px;
   user-select: none;
-  margin: -6px -8px 6px -8px;
+  margin: 6px -8px 6px -8px;
   border-radius: top 2px;
 }
 .minicard .minicard-labels {
@@ -127,6 +138,14 @@
   max-width: 100%;
   margin-right: 4px;
 }
+/*
+.minicard .checklists-title,
+.minicard .add-checklist,
+.minicard .add-checklist-item,
+.minicard .checklist-details-menu {
+  display: none;
+}
+*/
 .minicard .handle {
   width: 20px;
   height: 20px;
@@ -156,7 +175,6 @@
   .minicard .minicard-title .viewer {
     display: block;
     word-wrap: break-word;
-    max-width: 230px;
   }
 }
 .minicard .dates {
@@ -248,6 +266,7 @@
 }
 .minicard .minicard-description {
   padding: 6px 0 0 8px;
+  color: #000;
   background-color: #eee;
   width: 100%;
   margin-bottom: 2px;

client/components/cards/minicard.jade

@@ -3,12 +3,13 @@ template(name="minicard")
     class="{{#if isLinkedCard}}linked-card{{/if}}"
     class="{{#if isLinkedBoard}}linked-board{{/if}}"
     class="{{#if colorClass}}minicard-{{colorClass}}{{/if}}")
-    if isTouchScreenOrShowDesktopDragHandles
-      a.fa.fa-navicon.minicard-details-menu-with-handle.js-open-minicard-details-menu(title="{{_ 'cardDetailsActionsPopup-title'}}")
-      .handle
-        .fa.fa-arrows
-    else
-      a.fa.fa-navicon.minicard-details-menu.js-open-minicard-details-menu(title="{{_ 'cardDetailsActionsPopup-title'}}")
+    if canModifyCard
+      if isTouchScreenOrShowDesktopDragHandles
+        a.fa.fa-navicon.minicard-details-menu-with-handle.js-open-minicard-details-menu(title="{{_ 'cardDetailsActionsPopup-title'}}")
+        .handle
+          .fa.fa-arrows
+      else
+        a.fa.fa-navicon.minicard-details-menu.js-open-minicard-details-menu(title="{{_ 'cardDetailsActionsPopup-title'}}")
     .dates
       if getReceived
         unless getStart
@@ -111,6 +112,12 @@ template(name="minicard")
                     +viewer
                       = trueValue
 
+    .card-checklist-attachmentGalleries
+      .card-checklist-attachmentGallery.card-checklists
+        if currentBoard.allowsChecklists
+          //hr
+          //+checklists(cardId=_id showAtMinicard=true)
+
     if showAssignee
       if getAssignees
         .minicard-assignees.js-minicard-assignees
@@ -123,15 +130,15 @@ template(name="minicard")
           each getMembers
             +userAvatar(userId=this)
 
-    if showCreator
+    if showCreatorOnMinicard
       .minicard-creator
         +userAvatar(userId=this.userId noRemove=true)
 
     .badges
-      unless currentUser.isNoComments
+      if canModifyCard
         if comments.length
           .badge(title="{{_ 'card-comments-title' comments.length }}")
-            span.badge-icon.fa.fa-comment-o.badge-comment
+            span.badge-icon.fa.fa-comment-o.badge-comment.badge-text
               = ' '
               = comments.length
             //span.badge-comment.badge-text
@@ -183,12 +190,11 @@ template(name="editCardSortOrderPopup")
 
 template(name="minicardDetailsActionsPopup")
   ul.pop-over-list
-    if currentUser.isBoardAdmin
+    if canModifyCard
       li
         a.js-move-card
           i.fa.fa-arrow-right
           | {{_ 'moveCardPopup-title'}}
-    unless currentUser.isWorker
       li
         a.js-copy-card
           i.fa.fa-copy

client/components/cards/minicard.js

@@ -37,15 +37,15 @@ BlazeComponent.extendComponent({
     return ret;
   },
 
-  showCreator() {
+  showCreatorOnMinicard() {
     // cache "board" to reduce the mini-mongodb access
     const board = this.data().board();
     let ret = false;
     if (board) {
       ret =
-        board.allowsCreator === null ||
-        board.allowsCreator === undefined ||
-        board.allowsCreator
+        board.allowsCreatorOnMinicard === null ||
+        board.allowsCreatorOnMinicard === undefined ||
+        board.allowsCreatorOnMinicard
       ;
     }
     return ret;
@@ -92,6 +92,11 @@ BlazeComponent.extendComponent({
   events() {
     return [
       {
+        'click .minicard-checklists'() {
+          // Prevents clicking checklist at minicard from opening card details,
+          // while still allowing checking checlist items.
+          event.preventDefault();
+        },
         'click .js-linked-link'() {
           if (this.data().isLinkedCard()) Utils.goCardId(this.data().linkedId);
           else if (this.data().isLinkedBoard())

client/components/cards/subtasks.jade

@@ -26,8 +26,7 @@ template(name="subtaskDetail")
       .subtask-title
         span
         if canModifyCard
-          if currentUser.isBoardAdmin
-            a.fa.fa-navicon.subtask-details-menu.js-open-subtask-details-menu(title="{{_ 'subtaskActionsPopup-title'}}")
+          a.fa.fa-navicon.subtask-details-menu.js-open-subtask-details-menu(title="{{_ 'subtaskActionsPopup-title'}}")
         if canModifyCard
           h2.title.js-open-inlined-form.is-editable
             +viewer
@@ -95,7 +94,8 @@ template(name="subtaskActionsPopup")
       a.js-view-subtask(title="{{ subtask.title }}")
         i.fa.fa-eye
         | {{_ "view-it"}}
-      a.js-delete-subtask.delete-subtask
-        i.fa.fa-trash
-        | {{_ "delete"}} ...
+      if currentUser.isBoardAdmin
+        a.js-delete-subtask.delete-subtask
+          i.fa.fa-trash
+          | {{_ "delete"}} ...
 

client/components/cards/subtasks.js

@@ -68,6 +68,10 @@ BlazeComponent.extendComponent({
     }
   },
 
+  isBoardAdmin() {
+    return ReactiveCache.getCurrentUser().isBoardAdmin();
+  },
+
   editSubtask(event) {
     event.preventDefault();
     const textarea = this.find('textarea.js-edit-subtask-item');
@@ -104,6 +108,9 @@ BlazeComponent.extendComponent({
 }).register('subtaskItemDetail');
 
 BlazeComponent.extendComponent({
+  isBoardAdmin() {
+    return ReactiveCache.getCurrentUser().isBoardAdmin();
+  },
   events() {
     return [
       {
@@ -129,3 +136,14 @@ BlazeComponent.extendComponent({
     ]
   }
 }).register('subtaskActionsPopup');
+
+Template.editSubtaskItemForm.helpers({
+  user() {
+    return ReactiveCache.getUser(this.userId);
+  },
+  isBoardAdmin() {
+    return ReactiveCache.getCurrentUser().isBoardAdmin();
+  },
+});
+
+

client/components/lists/list.css

@@ -7,7 +7,7 @@
   border-left: 1px solid #ccc;
   padding: 0;
   float: left;
-  min-width: 100px; /* TODO(mark-i-m): hardcoded? */
+  /* min-width: 100px; TODO(mark-i-m): hardcoded? */
   /*max-width: 270px;*/
   /* Reverted incomplete change list width: */
   /* https://github.com/wekan/wekan/issues/4558 */
@@ -82,6 +82,16 @@
   text-overflow: ellipsis;
   word-wrap: break-word;
 }
+.list-rotated {
+  width: 10px;
+  margin-top: 10px;
+  margin-left: 0;
+  margin-right: 0;
+  transform: rotate(90deg);
+  position: relative;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+}
 .list-header .list-header-watch-icon {
   padding-left: 10px;
   color: #a6a6a6;
@@ -99,6 +109,23 @@
   color: #a6a6a6;
   margin-right: 15px;
 }
+.list-header .list-header-collapse-right {
+  color: #a6a6a6;
+}
+.list-header .list-header-collapse-left {
+  color: #a6a6a6;
+  margin-right: 15px;
+}
+.list-header .list-header-uncollapse-left {
+  color: #a6a6a6;
+}
+.list-header .list-header-uncollapse-right {
+  color: #a6a6a6;
+}
+.list-header .list-header-collapse {
+  color: #a6a6a6;
+  margin-right: 15px;
+}
 .list-header .highlight {
   color: #ce1414;
 }
@@ -297,7 +324,6 @@
 }
 .list-header-white {
   border-bottom: 6px solid #fff;
-  border: 1px solid #eee;
 }
 .list-header-green {
   border-bottom: 6px solid #3cb500;
@@ -330,7 +356,7 @@
   border-bottom: 6px solid #51e898;
 }
 .list-header-silver {
-  border-bottom: 6px solid unset;
+  border-bottom: 6px solid #e4e4e4;
 }
 .list-header-peachpuff {
   border-bottom: 6px solid #ffdab9;

client/components/lists/list.jade

@@ -1,6 +1,7 @@
 template(name='list')
   .list.js-list(id="js-list-{{_id}}"
-                style="width:{{listWidth}}px;")
+                style="{{#unless collapsed}}width:{{listWidth}}px;{{/unless}}"
+                class="{{#if collapsed}}list-collapsed{{/if}}")
     +listHeader
     +listBody
 

client/components/lists/listBody.jade

@@ -1,37 +1,38 @@
 template(name="listBody")
-  .list-body
-    .minicards.clearfix.js-minicards(class="{{#if reachedWipLimit}}js-list-full{{/if}}")
-      if cards.length
-        +inlinedForm(autoclose=false position="top")
-          +addCardForm(listId=_id position="top")
-      ul.sidebar-list
-        each customFieldsSum
-          li
-            +viewer
-              = name
-            if $eq customFieldsSum.type "number"
+  unless collapsed
+    .list-body
+      .minicards.clearfix.js-minicards(class="{{#if reachedWipLimit}}js-list-full{{/if}}")
+        if cards.length
+          +inlinedForm(autoclose=false position="top")
+            +addCardForm(listId=_id position="top")
+        ul.sidebar-list
+          each customFieldsSum
+            li
               +viewer
-                = value
-            if $eq customFieldsSum.type "currency"
-              +viewer
-                = formattedCurrencyCustomFieldValue(value)
-      each (cardsWithLimit (idOrNull ../../_id))
-        a.minicard-wrapper.js-minicard(href=originRelativeUrl
-          class="{{#if cardIsSelected}}is-selected{{/if}}"
-          class="{{#if MultiSelection.isSelected _id}}is-checked{{/if}}")
-          if MultiSelection.isActive
-            .materialCheckBox.multi-selection-checkbox.js-toggle-multi-selection(
-              class="{{#if MultiSelection.isSelected _id}}is-checked{{/if}}")
-          +minicard(this)
-      if (showSpinner (idOrNull ../../_id))
-        +spinnerList
+                = name
+              if $eq customFieldsSum.type "number"
+                +viewer
+                  = value
+              if $eq customFieldsSum.type "currency"
+                +viewer
+                  = formattedCurrencyCustomFieldValue(value)
+        each (cardsWithLimit (idOrNull ../../_id))
+          a.minicard-wrapper.js-minicard(href=originRelativeUrl
+            class="{{#if cardIsSelected}}is-selected{{/if}}"
+            class="{{#if MultiSelection.isSelected _id}}is-checked{{/if}}")
+            if MultiSelection.isActive
+              .materialCheckBox.multi-selection-checkbox.js-toggle-multi-selection(
+                class="{{#if MultiSelection.isSelected _id}}is-checked{{/if}}")
+            +minicard(this)
+        if (showSpinner (idOrNull ../../_id))
+          +spinnerList
 
-      if canSeeAddCard
-        +inlinedForm(autoclose=false position="bottom")
-          +addCardForm(listId=_id position="bottom")
-        else
-          a.open-minicard-composer.js-card-composer.js-open-inlined-form(title="{{_ 'add-card-to-bottom-of-list'}}")
-            i.fa.fa-plus
+        if canSeeAddCard
+          +inlinedForm(autoclose=false position="bottom")
+            +addCardForm(listId=_id position="bottom")
+          else
+            a.open-minicard-composer.js-card-composer.js-open-inlined-form(title="{{_ 'add-card-to-bottom-of-list'}}")
+              i.fa.fa-plus
 
 template(name="spinnerList")
   .sk-spinner.sk-spinner-list(
@@ -79,18 +80,18 @@ template(name="linkCardPopup")
     select.js-select-boards
       option(value="")
       each boards
-        option(value="{{_id}}") {{title}}
+        option(value="{{_id}}") {{isTitleDefault title}}
     input.primary.confirm.js-link-board(type="button" value="{{_ 'link'}}")
 
   label {{_ 'swimlanes'}}:
   select.js-select-swimlanes
     each swimlanes
-      option(value="{{_id}}") {{title}}
+      option(value="{{_id}}") {{isTitleDefault title}}
 
   label {{_ 'lists'}}:
   select.js-select-lists
     each lists
-      option(value="{{_id}}") {{title}}
+      option(value="{{_id}}") {{isTitleDefault title}}
 
   label {{_ 'cards'}}:
   select.js-select-cards

client/components/lists/listBody.js

@@ -593,6 +593,31 @@ BlazeComponent.extendComponent({
   },
 }).register('linkCardPopup');
 
+Template.linkCardPopup.helpers({
+  isTitleDefault(title) {
+    // https://github.com/wekan/wekan/issues/4763
+    // https://github.com/wekan/wekan/issues/4742
+    // Translation text for "default" does not work, it returns an object.
+    // When that happens, try use translation "defaultdefault" that has same content of default, or return text "Default".
+    // This can happen, if swimlane does not have name.
+    // Yes, this is fixing the symptom (Swimlane title does not have title)
+    // instead of fixing the problem (Add Swimlane title when creating swimlane)
+    // because there could be thousands of swimlanes, adding name Default to all of them
+    // would be very slow.
+    if (title.startsWith("key 'default") && title.endsWith('returned an object instead of string.')) {
+      if (`${TAPi18n.__('defaultdefault')}`.startsWith("key 'default") && `${TAPi18n.__('defaultdefault')}`.endsWith('returned an object instead of string.')) {
+        return 'Default';
+      } else  {
+        return `${TAPi18n.__('defaultdefault')}`;
+      }
+    } else if (title === 'Default') {
+      return `${TAPi18n.__('defaultdefault')}`;
+    } else  {
+      return title;
+    }
+  },
+});
+
 BlazeComponent.extendComponent({
   mixins() {
     return [];
@@ -621,6 +646,7 @@ BlazeComponent.extendComponent({
     if (this.isTemplateSearch) {
       const boardId = (ReactiveCache.getCurrentUser().profile || {}).templatesBoardId;
       if (boardId) {
+        subManager.subscribe('board', boardId, false);
         this.board = ReactiveCache.getBoard(boardId);
       }
     } else {

client/components/lists/listHeader.jade

@@ -5,22 +5,43 @@ template(name="listHeader")
     +inlinedForm
       +editListTitleForm
     else
+      unless isMiniScreen
+        if collapsed
+          a.js-collapse(title="{{_ 'uncollapse'}}")
+            i.fa.fa-arrow-left.list-header-uncollapse-left
+            i.fa.fa-arrow-right.list-header-uncollapse-right
       if isMiniScreen
         if currentList
           a.list-header-left-icon.fa.fa-angle-left.js-unselect-list
-      h2.list-header-name(
-        title="{{ moment modifiedAt 'LLL' }}"
-        class="{{#if currentUser.isBoardMember}}{{#unless currentUser.isCommentOnly}}{{#unless currentUser.isWorker}}js-open-inlined-form is-editable{{/unless}}{{/unless}}{{/if}}")
-        +viewer
-          = title
-        if wipLimit.enabled
-         | (
-         span(class="{{#if exceededWipLimit}}highlight{{/if}}") {{cards.length}}
-         |/#{wipLimit.value})
-
-      if showCardsCountForList cards.length
-        span.cardCount {{cardsCount}} {{cardsCountForListIsOne cards.length}}
-
+      unless isMiniScreen
+        if collapsed
+          if showCardsCountForList cards.length
+            br
+            span.cardCount {{cardsCount}}
+      if isMiniScreen
+        h2.list-header-name(
+          title="{{ moment modifiedAt 'LLL' }}"
+          class="{{#if currentUser.isBoardMember}}{{#unless currentUser.isCommentOnly}}{{#unless currentUser.isWorker}}js-open-inlined-form is-editable{{/unless}}{{/unless}}{{/if}}")
+          +viewer
+            = title
+          if wipLimit.enabled
+           | (
+           span(class="{{#if exceededWipLimit}}highlight{{/if}}") {{cards.length}}
+           |/#{wipLimit.value})
+      unless isMiniScreen
+        div(class="{{#if collapsed}}list-rotated{{/if}}")
+          h2.list-header-name(
+            title="{{ moment modifiedAt 'LLL' }}"
+            class="{{#if currentUser.isBoardMember}}{{#unless currentUser.isCommentOnly}}{{#unless currentUser.isWorker}}js-open-inlined-form is-editable{{/unless}}{{/unless}}{{/if}}")
+            +viewer
+              = title
+            if wipLimit.enabled
+             | (
+             span(class="{{#if exceededWipLimit}}highlight{{/if}}") {{cards.length}}
+             |/#{wipLimit.value})
+        unless collapsed
+          if showCardsCountForList cards.length
+            span.cardCount {{cardsCount}} {{cardsCountForListIsOne cards.length}}
       if isMiniScreen
         if currentList
           if isWatching
@@ -36,16 +57,20 @@ template(name="listHeader")
       else if currentUser.isBoardMember
         if isWatching
           i.list-header-watch-icon.fa.fa-eye
-        div.list-header-menu
-          unless currentUser.isCommentOnly
-            //if isBoardAdmin
-            //  a.fa.js-list-star.list-header-plus-top(class="fa-star{{#unless starred}}-o{{/unless}}")
-            if canSeeAddCard
-              a.js-add-card.fa.fa-plus.list-header-plus-top(title="{{_ 'add-card-to-top-of-list'}}")
-            a.fa.fa-navicon.js-open-list-menu(title="{{_ 'listActionPopup-title'}}")
-          if currentUser.isBoardAdmin
-            if isTouchScreenOrShowDesktopDragHandles
-              a.list-header-handle.handle.fa.fa-arrows.js-list-handle
+        unless collapsed
+          div.list-header-menu
+            unless currentUser.isCommentOnly
+              //if isBoardAdmin
+              //  a.fa.js-list-star.list-header-plus-top(class="fa-star{{#unless starred}}-o{{/unless}}")
+              if canSeeAddCard
+                a.js-add-card.fa.fa-plus.list-header-plus-top(title="{{_ 'add-card-to-top-of-list'}}")
+                a.js-collapse(title="{{_ 'collapse'}}")
+                  i.fa.fa-arrow-right.list-header-collapse-right
+                  i.fa.fa-arrow-left.list-header-collapse-left
+                a.fa.fa-navicon.js-open-list-menu(title="{{_ 'listActionPopup-title'}}")
+            if currentUser.isBoardAdmin
+              if isTouchScreenOrShowDesktopDragHandles
+                a.list-header-handle.handle.fa.fa-arrows.js-list-handle
 
 template(name="editListTitleForm")
   .list-composer

client/components/lists/listHeader.js

@@ -31,6 +31,17 @@ BlazeComponent.extendComponent({
       return !status;
     }
   },
+  collapsed(check = undefined) {
+    const list = Template.currentData();
+    const status = list.isCollapsed();
+    if (check === undefined) {
+      // just check
+      return status;
+    } else {
+      list.collapse(!status);
+      return !status;
+    }
+  },
   editTitle(event) {
     event.preventDefault();
     const newTitle = this.childComponents('inlinedForm')[0]
@@ -104,6 +115,10 @@ BlazeComponent.extendComponent({
           event.preventDefault();
           this.starred(!this.starred());
         },
+        'click .js-collapse'(event) {
+          event.preventDefault();
+          this.collapsed(!this.collapsed());
+        },
         'click .js-open-list-menu': Popup.open('listAction'),
         'click .js-add-card.list-header-plus-top'(event) {
           const listDom = $(event.target).parents(

client/components/main/editor.css

@@ -1,7 +1,19 @@
+.new-comment a.fa.fa-brands.fa-markdown,
+.inlined-form a.fa.fa-brands.fa-markdown {
+  float: right;
+  position: absolute;
+  top: -20px;
+  right: 60px;
+}
 .new-comment a.fa.fa-copy,
 .inlined-form a.fa.fa-copy {
   float: right;
-  position: relative;
+  position: absolute;
+  top: -20px;
+  right: 6px;
+}
+.js-inlined-form.viewer.btn-sm {
+  position: absolute;
   top: 20px;
   right: 6px;
 }

client/components/main/editor.jade

@@ -1,4 +1,5 @@
 template(name="editor")
+  a.fa.fa-brands.fa-markdown(title="{{_ 'convert-to-markdown'}}")
   a.fa.fa-copy(title="{{_ 'copy-text-to-clipboard'}}")
   span.copied-tooltip {{_ 'copied'}}
   textarea.editor(

client/components/main/editor.js

@@ -1,4 +1,6 @@
 import { ReactiveCache } from '/imports/reactiveCache';
+import { TAPi18n } from '/imports/i18n';
+var converter = require('@wekanteam/html-to-markdown');
 
 const specialHandles = [
   {userId: 'board_members', username: 'board_members'},
@@ -9,6 +11,33 @@ const specialHandleNames = specialHandles.map(m => m.username);
 
 BlazeComponent.extendComponent({
   onRendered() {
+    // Start: Copy <pre> code https://github.com/wekan/wekan/issues/5149
+    // TODO: Try to make copyPre visible at Card Details after editing or closing editor or Card Details.
+    //       - Also this same TODO below at event, if someone gets it working.
+    var copy = function(target) {
+      var textArea = document.createElement('textarea');
+      textArea.setAttribute('style','width:1px;border:0;opacity:0;');
+      document.body.appendChild(textArea);
+      textArea.value = target.innerHTML;
+      textArea.select();
+      document.execCommand('copy');
+      document.body.removeChild(textArea);
+    }
+    var pres = document.querySelectorAll(".viewer > pre");
+    pres.forEach(function(pre){
+      var button = document.createElement("a");
+      button.className = "fa fa-copy btn btn-sm right";
+      // TODO: Translate text 'Copy text to clipboard'
+      button.setAttribute('title','Copy text to clipboard');
+      button.innerHTML = '';
+      pre.parentNode.insertBefore(button, pre);
+      button.addEventListener('click', function(e){
+        e.preventDefault();
+        copy(pre.childNodes[0]);
+      })
+    })
+    // End: Copy <pre> code
+
     const textareaSelector = 'textarea';
     const mentions = [
       // User mentions
@@ -44,12 +73,14 @@ BlazeComponent.extendComponent({
         index: 1,
       },
     ];
+
     const enableTextarea = function() {
       const $textarea = this.$(textareaSelector);
       autosize($textarea);
       $textarea.escapeableTextComplete(mentions);
     };
-    if (Meteor.settings.public.RICHER_CARD_COMMENT_EDITOR !== false) {
+/*
+    if (Meteor.settings.public.RICHER_CARD_COMMENT_EDITOR === true || Meteor.settings.public.RICHER_CARD_COMMENT_EDITOR === 'true') {
       const isSmall = Utils.isMiniScreen();
       const toolbar = isSmall
         ? [
@@ -269,6 +300,8 @@ BlazeComponent.extendComponent({
     } else {
       enableTextarea();
     }
+*/
+    enableTextarea();
   },
   events() {
     return [
@@ -280,6 +313,14 @@ BlazeComponent.extendComponent({
           const $tooltip = this.$('.copied-tooltip');
           Utils.showCopied(promise, $tooltip);
         },
+        'click a.fa.fa-brands.fa-markdown'(event) {
+          const $editor = this.$('textarea.editor');
+          $editor[0].value = converter.convert($editor[0].value);
+        },
+        // TODO: Try to make copyPre visible at Card Details after editing or closing editor or Card Details.
+        //'click .js-close-inlined-form'(event) {
+        //  Utils.copyPre();
+        //},
       }
     ]
   }

client/components/main/layouts.css

@@ -470,6 +470,7 @@ a:not(.disabled).is-active i.fa {
 .select-authentication {
   width: 100%;
 }
+.textBelowCustomLoginLogo,
 .auth-layout {
   display: flex;
   flex-direction: column;

client/components/main/layouts.jade

@@ -37,10 +37,13 @@ template(name="userFormsLayout")
       else
         img(src="{{pathFor '/wekan-logo.svg'}}" alt="" width="300" height="auto")
         br
-      if currentSetting.textBelowCustomLoginLogo
-        +viewer
-          | {{currentSetting.textBelowCustomLoginLogo}}
-        br
+  if currentSetting.textBelowCustomLoginLogo
+    hr
+    section.textBelowCustomLoginLogo
+      +viewer
+        | {{currentSetting.textBelowCustomLoginLogo}}
+    hr
+  section.auth-layout
     section.auth-dialog
       if isLoading
         +loader

client/components/main/layouts.js

@@ -26,36 +26,67 @@ Template.userFormsLayout.onCreated(function () {
   templateInstance.isLoading = new ReactiveVar(false);
 
   if (!ReactiveCache.getCurrentUser()?.profile) {
-      Meteor.call('isOidcRedirectionEnabled', (_, result) => {
-        if (result) {
-          AccountsTemplates.options.socialLoginStyle = 'redirect';
-          options = {
-            loginStyle: AccountsTemplates.options.socialLoginStyle,
-          };
-          Meteor.loginWithOidc(options);
-        }
-      });
+    Meteor.call('isOidcRedirectionEnabled', (_, result) => {
+      if (result) {
+        AccountsTemplates.options.socialLoginStyle = 'redirect';
+        options = {
+          loginStyle: AccountsTemplates.options.socialLoginStyle,
+        };
+        Meteor.loginWithOidc(options);
+      }
+    });
+
+    Meteor.subscribe('setting', {
+      onReady() {
+        templateInstance.currentSetting.set(ReactiveCache.getCurrentSetting());
+        return this.stop();
+      },
+    });
   }
-
-  Meteor.call('isDisableRegistration', (_, result) => {
-    if (result) {
-      $('.at-signup-link').hide();
-    }
-  });
-
-  Meteor.call('isDisableForgotPassword', (_, result) => {
-    if (result) {
-      $('.at-pwd-link').hide();
-    }
-  });
 });
 
 Template.userFormsLayout.onRendered(() => {
-  AccountsTemplates.state.form.keys = new Proxy(
-    AccountsTemplates.state.form.keys,
-    validator,
-  );
-  EscapeActions.executeAll();
+  Meteor.call('getAuthenticationsEnabled', (_, result) => {
+    let enabledAuthenticationMethods = [ 'password' ]; // we show/hide this based on isPasswordLoginEnabled
+
+    if (result) {
+      Object.keys(result).forEach((m) => {
+        if (result[m]) enabledAuthenticationMethods.push(m);
+      });
+    }
+
+    Meteor.call('isPasswordLoginEnabled', (_, result) => {
+      if (result) {
+        $('.at-pwd-form').show();
+      }
+    });
+
+    Meteor.call('isDisableRegistration', (_, result) => {
+      if (result) {
+        $('.at-signup-link').hide();
+      }
+    });
+
+    Meteor.call('isDisableForgotPassword', (_, result) => {
+      if (result) {
+        $('.at-pwd-link').hide();
+      }
+    });
+
+    if (enabledAuthenticationMethods.indexOf('oauth2') !== -1) {
+      // TODO find better way to run this code once the oauth2 UI is injected in the DOM
+      (function waitForElementAndShow() {
+        if (!$('.at-oauth')[0]) return setTimeout(waitForElementAndShow, 100);
+        $('.at-oauth').show();
+      })();
+    }
+
+    AccountsTemplates.state.form.keys = new Proxy(
+      AccountsTemplates.state.form.keys,
+      validator,
+    );
+    EscapeActions.executeAll();
+  });
 });
 
 Template.userFormsLayout.helpers({

client/components/main/myCards.jade

@@ -70,13 +70,14 @@ template(name="myCards")
                                 unless isMiniScreen
                                   .my-cards-board-badge(class=board.colorClass, id="header")
                                 .my-cards-card-title-table
-                                  a.minicard-wrapper(href=card.originRelativeUrl)
-                                    | {{card.title}}
+                                  | {{card.title}}
+                                  //a.minicard-wrapper(href=card.originRelativeUrl)
+                                  //  | {{card.title}}
                               td
                                 | {{list.title}}
                               td
-                                a(href=board.originRelativeUrl)
                                 | {{board.title}}
+                                //a(href=board.originRelativeUrl)
                               td
                                 | {{swimlane.title}}
 

client/components/main/popup.css

@@ -88,7 +88,7 @@
   height: 20px;
 }
 .pop-over .quiet {
-  padding: 6px 6px 4px;
+/*  padding: 6px 6px 4px;*/
 }
 .pop-over.search-over {
   background: #f0f0f0;
@@ -152,6 +152,14 @@
   text-decoration: none;
   overflow: hidden;
   line-height: 33px;
+  display:flex;
+/*  flex-wrap:wrap;*/
+  gap:5px;
+  align-items: center;
+}
+.pop-over-list li > a > .member{
+  align-self: flex-start;
+  flex:0 0 auto;
 }
 .pop-over-list li > a .item-name {
   display: block;

client/components/notifications/notificationsDrawer.jade

@@ -11,7 +11,7 @@ template(name='notificationsDrawer')
       a.fa.fa-times-thin.close
     ul.notifications
       each transformedProfile.notifications
-        +notification(activityData=activity index=dbIndex read=read)
+        +notification(activityData=activityObj index=dbIndex read=read)
     if($gt unreadNotifications 0)
       a.all-read {{_ 'mark-all-as-read'}}
     if ($and ($.Session.get 'showReadNotifications') ($gt readNotifications 0))

client/components/settings/adminReports.jade

@@ -58,18 +58,20 @@ template(name="rulesReport")
   h1 {{_ 'rulesReportTitle'}}
   if resultsCount
     table
-      tr
-        th Rule Title
-        th Board Title
-        th actionType
-        th activityType
+      thead
+        tr
+          th Rule Title
+          th Board Title
+          th actionType
+          th activityType
 
       each rule in results
-        tr
-          td {{ rule.title }}
-          td {{ rule.boardTitle }}
-          td {{ rule.action.actionType }}
-          td {{ rule.trigger.activityType }}
+        tbody
+          tr
+            td {{ rule.title }}
+            td {{ rule.boardTitle }}
+            td {{ rule.action.actionType }}
+            td {{ rule.trigger.activityType }}
   else
     div {{_ 'no-results' }}
 
@@ -77,22 +79,24 @@ template(name="filesReport")
   h1 {{_ 'filesReportTitle'}}
   if resultsCount
     table
-      tr
-        th Filename
-        th.right Size (kB)
-        th MIME Type
-        th Attachment ID
-        th Board ID
-        th Card ID
+      thead
+        tr
+          th Filename
+          th.right Size (kB)
+          th MIME Type
+          th Attachment ID
+          th Board ID
+          th Card ID
 
       each att in results
-        tr
-          td {{ att.name }}
-          td.right {{ fileSize att.size }}
-          td {{ att.type }}
-          td {{ att._id }}
-          td {{ att.meta.boardId }}
-          td {{ att.meta.cardId }}
+        tbody
+          tr
+            td {{ att.name }}
+            td.right {{ fileSize att.size }}
+            td {{ att.type }}
+            td {{ att._id }}
+            td {{ att.meta.boardId }}
+            td {{ att.meta.cardId }}
   else
     div {{_ 'no-results' }}
 
@@ -100,22 +104,24 @@ template(name="cardsReport")
   h1 {{_ 'cardsReportTitle'}}
   if resultsCount
     table.table
-      tr
-        th Card Title
-        th Board
-        th Swimlane
-        th List
-        th Members
-        th Assignees
+      thead
+        tr
+          th Card Title
+          th Board
+          th Swimlane
+          th List
+          th Members
+          th Assignees
 
       each card in results
-        tr
-          td {{abbreviate card.title }}
-          td {{abbreviate card.board.title }}
-          td {{abbreviate card.swimlane.title }}
-          td {{abbreviate card.list.title }}
-          td {{userNames card.members }}
-          td {{userNames card.assignees }}
+        tbody
+          tr
+            td {{abbreviate card.title }}
+            td {{abbreviate card.board.title }}
+            td {{abbreviate card.swimlane.title }}
+            td {{abbreviate card.list.title }}
+            td {{userNames card.members }}
+            td {{userNames card.assignees }}
   else
     div {{_ 'no-results' }}
 
@@ -123,22 +129,24 @@ template(name="boardsReport")
   h1 {{_ 'boardsReportTitle'}}
   if resultsCount
     table.table
-      tr
-        th Title
-        th Id
-        th Permission
-        th Archived?
-        th Members
-        th Organizations
-        th Teams
+      thead
+        tr
+          th Title
+          th Id
+          th Permission
+          th Archived?
+          th Members
+          th Organizations
+          th Teams
 
       each board in results
-        tr
-          td {{abbreviate board.title }}
-          td {{abbreviate board._id }}
-          td {{ board.permission }}
-          td
-            = yesOrNo(board.archived)
-          td {{userNames board.members }}
+        tbody
+          tr
+            td {{abbreviate board.title }}
+            td {{abbreviate board._id }}
+            td {{ board.permission }}
+            td
+              = yesOrNo(board.archived)
+            td {{userNames board.members }}
   else
     div {{_ 'no-results' }}

client/components/settings/connectionMethod.js

@@ -3,40 +3,22 @@ Template.connectionMethod.onCreated(function() {
 
   Meteor.call('getAuthenticationsEnabled', (_, result) => {
     if (result) {
+      // Only enabled auth methods without OAuth2/OpenID which is a separate button
+      const tmp = Object.keys(result).filter((k) => result[k]).filter((k) => k !== 'oauth2');
+
       // TODO : add a management of different languages
       // (ex {value: ldap, text: TAPi18n.__('ldap', {}, T9n.getLanguage() || 'en')})
-      this.authenticationMethods.set([
-        { value: 'password' },
-        // Gets only the authentication methods availables
-        ...Object.entries(result)
-          .filter(e => e[1])
-          .map(e => ({ value: e[0] })),
-      ]);
+      this.authenticationMethods.set([{ value: 'password' }].concat(tmp.map((k) => { return { value: k }; })));
     }
 
     // If only the default authentication available, hides the select boxe
     const content = $('.at-form-authentication');
-    // OAuth method is a separate button, so ignore it in the count
-    const formAuthenticationMethods = this.authenticationMethods.get().filter((method) => method.value !== 'oauth2');
-    if (formAuthenticationMethods > 1) {
+
+    if (this.authenticationMethods.get().length > 1) {
       content.show();
     } else {
       content.hide();
     }
-
-    if (this.authenticationMethods.get().some((method) => method.value === 'oauth2')) {
-      $('.at-oauth').show();
-    }
-
-    Meteor.call('isPasswordLoginEnabled', (_, result) => {
-      if (result) {
-        $('.at-pwd-form').show();
-      }
-
-      if (result && this.authenticationMethods.get().length > 1) {
-        $('.at-sep').show();
-      }
-    });
   });
 });
 

client/components/settings/peopleBody.jade

@@ -73,22 +73,25 @@ template(name="people")
 
 template(name="orgGeneral")
   table
-    tbody
+    thead
       tr
         th {{_ 'displayName'}}
         th {{_ 'description'}}
         th {{_ 'shortName'}}
+        th {{_ 'autoAddUsersWithDomainName'}}
         th {{_ 'website'}}
         th {{_ 'createdAt'}}
         th {{_ 'active'}}
         th
           +newOrgRow
-      each org in orgList
-        +orgRow(orgId=org._id)
+    tbody
+      tr
+        each org in orgList
+          +orgRow(orgId=org._id)
 
 template(name="teamGeneral")
   table
-    tbody
+    thead
       tr
         th {{_ 'displayName'}}
         th {{_ 'description'}}
@@ -98,14 +101,16 @@ template(name="teamGeneral")
         th {{_ 'active'}}
         th
           +newTeamRow
-      each team in teamList
-        +teamRow(teamId=team._id)
+    tbody
+      tr
+        each team in teamList
+          +teamRow(teamId=team._id)
 
 template(name="peopleGeneral")
   #divAddOrRemoveTeamContainer
     +modifyTeamsUsers
   table
-    tbody
+    thead
       tr
         th
           +selectAllUser
@@ -123,6 +128,8 @@ template(name="peopleGeneral")
         th {{_ 'teams'}}
         th
           +newUserRow
+    tbody
+      tr
       each user in peopleList
         +peopleRow(userId=user._id)
 
@@ -159,6 +166,10 @@ template(name="orgRow")
       td {{ orgData.orgShortName }}
     else
       td <s>{{ orgData.orgShortName }}</s>
+    if orgData.orgIsActive
+      td {{ orgData.orgAutoAddUsersWithDomainName }}
+    else
+      td <s>{{ orgData.orgAutoAddUsersWithDomainName }}</s>
     if orgData.orgIsActive
       td {{ orgData.orgWebsite }}
     else
@@ -307,9 +318,12 @@ template(name="editOrgPopup")
     label
       | {{_ 'shortName'}}
       input.js-orgShortName(type="text" value=org.orgShortName required)
+    label
+      | {{_ 'autoAddUsersWithDomainName'}}
+      input.js-orgAutoAddUsersWithDomainName(type="text" value=org.orgAutoAddUsersWithDomainName)
     label
       | {{_ 'website'}}
-      input.js-orgWebsite(type="text" value=org.orgWebsite required)
+      input.js-orgWebsite(type="text" value=org.orgWebsite)
     label
       | {{_ 'active'}}
       select.select-active.js-org-isactive
@@ -335,7 +349,7 @@ template(name="editTeamPopup")
       input.js-teamShortName(type="text" value=team.teamShortName required)
     label
       | {{_ 'website'}}
-      input.js-teamWebsite(type="text" value=team.teamWebsite required)
+      input.js-teamWebsite(type="text" value=team.teamWebsite)
     label
       | {{_ 'active'}}
       select.select-active.js-team-isactive
@@ -405,7 +419,7 @@ template(name="editUserPopup")
         each value in orgsDatas
           option(value="{{value._id}}") {{value.orgDisplayName}}
       input#jsUserOrgsInPut.js-userOrgs(type="text" value=user.orgsUserBelongs, disabled)
-      input#jsUserOrgIdsInPut.js-userOrgIds.hide(type="text" value=user.orgIdsUserBelongs)
+      input#jsUserOrgIdsInPut.js-userOrgIds.hide(type="hidden" value=user.orgIdsUserBelongs)
     label
       | {{_ 'teams'}}
       i.fa.fa-plus-square#addUserTeam
@@ -415,7 +429,7 @@ template(name="editUserPopup")
         each value in teamsDatas
           option(value="{{value._id}}") {{_ value.teamDisplayName}}
       input#jsUserTeamsInPut.js-userteams(type="text" value=user.teamsUserBelongs, disabled)
-      input#jsUserTeamIdsInPut.js-userteamIds.hide(type="text" value=user.teamIdsUserBelongs)
+      input#jsUserTeamIdsInPut.js-userteamIds.hide(type="hidden" value=user.teamIdsUserBelongs)
 
     hr
     label
@@ -436,6 +450,9 @@ template(name="newOrgPopup")
     label
       | {{_ 'shortName'}}
       input.js-orgShortName(type="text" value="" required)
+    label
+      | {{_ 'autoAddUsersWithDomainName'}}
+      input.js-orgAutoAddUsersWithDomainName(type="text" value="")
     label
       | {{_ 'website'}}
       input.js-orgWebsite(type="text" value="" required)
@@ -462,7 +479,7 @@ template(name="newTeamPopup")
       input.js-teamShortName(type="text" value="" required)
     label
       | {{_ 'website'}}
-      input.js-teamWebsite(type="text" value="" required)
+      input.js-teamWebsite(type="text" value="")
     label
       | {{_ 'active'}}
       select.select-active.js-team-isactive

client/components/settings/peopleBody.js

@@ -576,12 +576,14 @@ Template.editOrgPopup.events({
       .value.trim();
     const orgDesc = templateInstance.find('.js-orgDesc').value.trim();
     const orgShortName = templateInstance.find('.js-orgShortName').value.trim();
+    const orgAutoAddUsersWithDomainName = templateInstance.find('.js-orgAutoAddUsersWithDomainName').value.trim();
     const orgWebsite = templateInstance.find('.js-orgWebsite').value.trim();
     const orgIsActive = templateInstance.find('.js-org-isactive').value.trim() == 'true';
 
     const isChangeOrgDisplayName = orgDisplayName !== org.orgDisplayName;
     const isChangeOrgDesc = orgDesc !== org.orgDesc;
     const isChangeOrgShortName = orgShortName !== org.orgShortName;
+    const isChangeOrgAutoAddUsersWithDomainName = orgAutoAddUsersWithDomainName !== org.orgAutoAddUsersWithDomainName;
     const isChangeOrgWebsite = orgWebsite !== org.orgWebsite;
     const isChangeOrgIsActive = orgIsActive !== org.orgIsActive;
 
@@ -589,6 +591,7 @@ Template.editOrgPopup.events({
       isChangeOrgDisplayName ||
       isChangeOrgDesc ||
       isChangeOrgShortName ||
+      isChangeOrgAutoAddUsersWithDomainName ||
       isChangeOrgWebsite ||
       isChangeOrgIsActive
     ) {
@@ -598,6 +601,7 @@ Template.editOrgPopup.events({
         orgDisplayName,
         orgDesc,
         orgShortName,
+        orgAutoAddUsersWithDomainName,
         orgWebsite,
         orgIsActive,
       );
@@ -920,6 +924,7 @@ Template.newOrgPopup.events({
       .value.trim();
     const orgDesc = templateInstance.find('.js-orgDesc').value.trim();
     const orgShortName = templateInstance.find('.js-orgShortName').value.trim();
+    const orgAutoAddUsersWithDomainName = templateInstance.find('.js-orgAutoAddUsersWithDomainName').value.trim();
     const orgWebsite = templateInstance.find('.js-orgWebsite').value.trim();
     const orgIsActive =
       templateInstance.find('.js-org-isactive').value.trim() == 'true';
@@ -929,6 +934,7 @@ Template.newOrgPopup.events({
       orgDisplayName,
       orgDesc,
       orgShortName,
+      orgAutoAddUsersWithDomainName,
       orgWebsite,
       orgIsActive,
     );

client/components/settings/settingBody.css

@@ -7,11 +7,13 @@
   display: -moz-flex;
   display: -ms-flexbox;
   display: flex;
+  height: 100%;
 }
 .setting-content {
   color: #727479;
   background: #dedede;
   width: 100%;
+  height: 100%;
   position: absolute;
 }
 .setting-content .content-title {
@@ -56,6 +58,8 @@
   -moz-user-select: text;
   -ms-user-select: text;
   user-select: text;
+  max-height: 100%;
+  overflow: auto;
 }
 .setting-content .content-body .main-body ul li {
   padding: 0.5rem 0.5rem;

client/components/settings/settingHeader.jade

@@ -20,6 +20,10 @@ template(name="settingHeaderBar")
         i.fa(class="fa-paperclip")
         span {{_ 'attachments'}}
 
+      a.setting-header-btn.informations(href="{{pathFor 'translation'}}")
+        i.fa(class="fa-font")
+        span {{_ 'translation'}}
+
       a.setting-header-btn.informations(href="{{pathFor 'information'}}")
         i.fa(class="fa-info-circle")
         span {{_ 'info'}}

client/components/settings/translationBody.css

@@ -0,0 +1,67 @@
+.main-body {
+  overflow: scroll;
+}
+table {
+  color: #000;
+}
+table td,
+table th {
+  border: 1px solid #d2d0d0;
+  text-align: left;
+  padding: 8px;
+}
+table tr:nth-child(even) {
+  background-color: #ddd;
+}
+.ext-box {
+  display: flex;
+  flex-direction: row;
+  height: 34px;
+}
+.ext-box .ext-box-left {
+  display: flex;
+  width: 100%;
+  gap: 10px;
+}
+.ext-box span {
+  vertical-align: center;
+  line-height: 34px;
+}
+.ext-box input,
+.ext-box button {
+  padding: 0;
+}
+.ext-box button {
+  min-width: 90px;
+}
+.content-wrapper {
+  margin-top: 10px;
+}
+.buttonsContainer {
+  display: flex;
+}
+.buttonsContainer input {
+  margin: 0;
+}
+.buttonsContainer div {
+  margin: auto;
+}
+.more-settings-translation {
+  margin-left: 10px;
+}
+#cancelBtn {
+  margin-left: 5% !important;
+  background: #ffa500;
+  color: #fff;
+}
+#deleteAction {
+  margin-left: 5% !important;
+}
+p.js-translation-language {
+  font-weight: bold;
+  color: #000;
+}
+p.js-translation-text {
+  font-weight: bold;
+  color: #000;
+}

client/components/settings/translationBody.jade

@@ -0,0 +1,106 @@
+template(name="translation")
+  .setting-content
+    unless currentUser.isAdmin
+      | {{_ 'error-notAuthorized'}}
+    else
+      .content-title.ext-box
+        .ext-box-left
+          if loading.get
+            +spinner
+          else if translationSetting.get
+            span
+              i.fa.fa-font
+              unless isMiniScreen
+                | {{_ 'translation'}}
+            input#searchTranslationInput(placeholder="{{_ 'search'}}")
+            button#searchTranslationButton
+              i.fa.fa-search
+              | {{_ 'search'}}
+            .ext-box-right
+              span {{#unless isMiniScreen}}{{_ 'translation-number'}}{{/unless}} #{translationNumber}
+
+      .content-body
+        .side-menu
+          ul
+            li.active
+              a.js-translation-menu(data-id="translation-setting")
+                i.fa.fa-font
+                | {{_ 'translation'}}
+        .main-body
+          if loading.get
+            +spinner
+          else if translationSetting.get
+            +translationGeneral
+
+template(name="translationGeneral")
+  table
+    thead
+      tr
+        th {{_ 'language'}}
+        th {{_ 'text'}}
+        th {{_ 'translation-text'}}
+        th
+          +newTranslationRow
+    tbody
+      each translation in translationList
+        +translationRow(translationId=translation._id)
+
+template(name="newTranslationRow")
+  a.new-translation
+    i.fa.fa-plus-square
+    | {{_ 'new'}}
+
+template(name="translationRow")
+  tr
+    td {{translationData.language}}
+    td {{translationData.text}}
+    td {{translationData.translationText}}
+    td
+      a.edit-translation
+        i.fa.fa-edit
+        | {{_ 'edit'}}
+      a.more-settings-translation
+        i.fa.fa-ellipsis-h
+
+template(name="editTranslationPopup")
+  form
+    label
+      | {{_ 'language'}}
+      input.js-translation-language(type="text" value=translation.language required readonly)
+    label
+      | {{_ 'text'}}
+      input.js-translation-text(type="text" value=translation.text required readonly)
+    label
+      | {{_ 'translation-text'}}
+      input.js-translation-translation-text(type="text" value=translation.translationText)
+    hr
+    div.buttonsContainer
+      input.primary.wide(type="submit" value="{{_ 'save'}}")
+
+template(name="newTranslationPopup")
+  form
+    label
+      | {{_ 'language'}}
+      input.js-translation-language(type="text" value="en" required)
+    label
+      | {{_ 'text'}}
+      span.error.hide.text-taken
+        | {{_ 'error-text-taken'}}
+      input.js-translation-text(type="text" value="" required)
+    label
+      | {{_ 'translation-text'}}
+      input.js-translation-translation-text(type="text" value="")
+    hr
+    div.buttonsContainer
+      input.primary.wide(type="submit" value="{{_ 'save'}}")
+
+template(name="settingsTranslationPopup")
+  ul.pop-over-list
+    li
+      form
+        label
+          | {{_ 'delete-translation-confirm-popup'}}
+        br
+        label.hide.orgId(type="text" value=org._id)
+        div.buttonsContainer
+          input#deleteButton.card-details-red.right.wide(type="button" value="{{_ 'delete'}}")

client/components/settings/translationBody.js

@@ -0,0 +1,214 @@
+import { ReactiveCache } from '/imports/reactiveCache';
+
+const translationsPerPage = 25;
+
+BlazeComponent.extendComponent({
+  mixins() {
+    return [Mixins.InfiniteScrolling];
+  },
+  onCreated() {
+    this.error = new ReactiveVar('');
+    this.loading = new ReactiveVar(false);
+    this.translationSetting = new ReactiveVar(true);
+    this.findTranslationsOptions = new ReactiveVar({});
+    this.numberTranslations = new ReactiveVar(0);
+
+    this.page = new ReactiveVar(1);
+    this.loadNextPageLocked = false;
+    this.callFirstWith(null, 'resetNextPeak');
+    this.autorun(() => {
+      const limitTranslations = this.page.get() * translationsPerPage;
+
+      this.subscribe('translation', this.findTranslationsOptions.get(), 0, () => {
+        this.loadNextPageLocked = false;
+        const nextPeakBefore = this.callFirstWith(null, 'getNextPeak');
+        this.calculateNextPeak();
+        const nextPeakAfter = this.callFirstWith(null, 'getNextPeak');
+        if (nextPeakBefore === nextPeakAfter) {
+          this.callFirstWith(null, 'resetNextPeak');
+        }
+      });
+    });
+  },
+  events() {
+    return [
+      {
+        'click #searchTranslationButton'() {
+          this.filterTranslation();
+        },
+        'keydown #searchTranslationInput'(event) {
+          if (event.keyCode === 13 && !event.shiftKey) {
+            this.filterTranslation();
+          }
+        },
+        'click #newTranslationButton'() {
+          Popup.open('newTranslation');
+        },
+        'click a.js-translation-menu': this.switchMenu,
+      },
+    ];
+  },
+  filterTranslation() {
+    const value = $('#searchTranslationInput').first().val();
+    if (value === '') {
+      this.findTranslationsOptions.set({});
+    } else {
+      const regex = new RegExp(value, 'i');
+      this.findTranslationsOptions.set({
+        $or: [
+          { language: regex },
+          { text: regex },
+          { translationText: regex },
+        ],
+      });
+    }
+  },
+  loadNextPage() {
+    if (this.loadNextPageLocked === false) {
+      this.page.set(this.page.get() + 1);
+      this.loadNextPageLocked = true;
+    }
+  },
+  calculateNextPeak() {
+    const element = this.find('.main-body');
+    if (element) {
+      const altitude = element.scrollHeight;
+      this.callFirstWith(this, 'setNextPeak', altitude);
+    }
+  },
+  reachNextPeak() {
+    this.loadNextPage();
+  },
+  setError(error) {
+    this.error.set(error);
+  },
+  setLoading(w) {
+    this.loading.set(w);
+  },
+  translationList() {
+    const translations = ReactiveCache.getTranslations(this.findTranslationsOptions.get(), {
+      sort: { modifiedAt: 1 },
+      fields: { _id: true },
+    });
+    this.numberTranslations.set(translations.length);
+    return translations;
+  },
+  translationNumber() {
+    return this.numberTranslations.get();
+  },
+  switchMenu(event) {
+    const target = $(event.target);
+    if (!target.hasClass('active')) {
+      $('.side-menu li.active').removeClass('active');
+      target.parent().addClass('active');
+      const targetID = target.data('id');
+      this.translationSetting.set('translation-setting' === targetID);
+    }
+  },
+}).register('translation');
+
+Template.translationRow.helpers({
+  translationData() {
+    return ReactiveCache.getTranslation(this.translationId);
+  },
+});
+
+Template.editTranslationPopup.helpers({
+  translation() {
+    return ReactiveCache.getTranslation(this.translationId);
+  },
+  errorMessage() {
+    return Template.instance().errorMessage.get();
+  },
+});
+
+Template.newTranslationPopup.onCreated(function () {
+  this.errorMessage = new ReactiveVar('');
+});
+
+Template.newTranslationPopup.helpers({
+  translation() {
+    return ReactiveCache.getTranslation(this.translationId);
+  },
+  errorMessage() {
+    return Template.instance().errorMessage.get();
+  },
+});
+
+BlazeComponent.extendComponent({
+  onCreated() {},
+  translation() {
+    return ReactiveCache.getTranslation(this.translationId);
+  },
+  events() {
+    return [
+      {
+        'click a.edit-translation': Popup.open('editTranslation'),
+        'click a.more-settings-translation': Popup.open('settingsTranslation'),
+      },
+    ];
+  },
+}).register('translationRow');
+
+BlazeComponent.extendComponent({
+  events() {
+    return [
+      {
+        'click a.new-translation': Popup.open('newTranslation'),
+      },
+    ];
+  },
+}).register('newTranslationRow');
+
+Template.editTranslationPopup.events({
+  submit(event, templateInstance) {
+    event.preventDefault();
+    const translation = ReactiveCache.getTranslation(this.translationId);
+    const translationText = templateInstance.find('.js-translation-translation-text').value.trim();
+
+    Meteor.call(
+      'setTranslationText',
+      translation,
+      translationText
+    );
+
+    Popup.back();
+  },
+});
+
+Template.newTranslationPopup.events({
+  submit(event, templateInstance) {
+    event.preventDefault();
+    const language = templateInstance.find('.js-translation-language').value.trim();
+    const text = templateInstance.find('.js-translation-text').value.trim();
+    const translationText = templateInstance.find('.js-translation-translation-text').value.trim();
+
+    Meteor.call(
+      'setCreateTranslation',
+      language,
+      text,
+      translationText,
+      function(error) {
+        const textMessageElement = templateInstance.$('.text-taken');
+        if (error) {
+          const errorElement = error.error;
+          if (errorElement === 'text-already-taken') {
+            textMessageElement.show();
+          }
+        } else {
+          textMessageElement.hide();
+          Popup.back();
+        }
+      },
+    );
+    Popup.back();
+  },
+});
+
+Template.settingsTranslationPopup.events({
+  'click #deleteButton'(event) {
+    event.preventDefault();
+    Translation.remove(this.translationId);
+    Popup.back();
+  }
+});

client/components/sidebar/sidebar.jade

@@ -175,7 +175,7 @@ template(name="boardInfoOnMyBoardsPopup")
 
 template(name="boardCardSettingsPopup")
   form.board-card-settings
-    h3 {{_ 'show-on-card'}}
+    h3 {{_ 'show-on-card'}}, {{_ 'show-on-minicard'}}
     div.check-div
       a.flex.js-field-has-receiveddate(class="{{#if allowsReceivedDate}}is-checked{{/if}}")
         .materialCheckBox(class="{{#if allowsReceivedDate}}is-checked{{/if}}")
@@ -206,14 +206,18 @@ template(name="boardCardSettingsPopup")
         span
           i.fa.fa-users
           | {{_ 'members'}}
-
     div.check-div
       a.flex.js-field-has-creator(class="{{#if allowsCreator}}is-checked{{/if}}")
         .materialCheckBox(class="{{#if allowsCreator}}is-checked{{/if}}")
         span
           i.fa.fa-user
           | {{_ 'creator'}}
-
+    div.check-div
+      a.flex.js-field-has-creator-on-minicard(class="{{#if allowsCreatorOnMinicard}}is-checked{{/if}}")
+        .materialCheckBox(class="{{#if allowsCreatorOnMinicard}}is-checked{{/if}}")
+        span
+          i.fa.fa-user
+          | {{_ 'creator-on-minicard'}}
     div.check-div
       a.flex.js-field-has-assignee(class="{{#if allowsAssignee}}is-checked{{/if}}")
         .materialCheckBox(class="{{#if allowsAssignee}}is-checked{{/if}}")
@@ -238,6 +242,12 @@ template(name="boardCardSettingsPopup")
         span
           i.fa.fa-sort
           | {{_ 'card-sorting-by-number'}}
+    div.check-div
+      a.flex.js-field-has-card-sorting-by-number-on-minicard(class="{{#if allowsCardSortingByNumberOnMinicard}}is-checked{{/if}}")
+        .materialCheckBox(class="{{#if allowsCardSortingByNumberOnMinicard}}is-checked{{/if}}")
+        span
+          i.fa.fa-sort
+          | {{_ 'card-sorting-by-number-on-minicard'}}
     div.check-div
       a.flex.js-field-has-card-show-lists(class="{{#if allowsShowLists}}is-checked{{/if}}")
         .materialCheckBox(class="{{#if allowsShowLists}}is-checked{{/if}}")
@@ -271,6 +281,12 @@ template(name="boardCardSettingsPopup")
           i.fa.fa-align-left
           | {{_ 'description'}}
           | {{_ 'custom-field-text'}}
+    div.check-div
+      a.flex.js-field-has-description-text-on-minicard(class="{{#if allowsDescriptionTextOnMinicard}}is-checked{{/if}}")
+        .materialCheckBox(class="{{#if allowsDescriptionTextOnMinicard}}is-checked{{/if}}")
+        span
+          i.fa.fa-align-left
+          | {{_ 'description-on-minicard'}}
     div.check-div
       a.flex.js-field-has-checklists(class="{{#if allowsChecklists}}is-checked{{/if}}")
         .materialCheckBox(class="{{#if allowsChecklists}}is-checked{{/if}}")
@@ -289,6 +305,19 @@ template(name="boardCardSettingsPopup")
         span
           i.fa.fa-paperclip
           | {{_ 'attachments'}}
+    div.check-div
+      a.flex.js-field-has-badge-attachment-on-minicard(class="{{#if allowsBadgeAttachmentOnMinicard}}is-checked{{/if}}")
+        .materialCheckBox(class="{{#if allowsBadgeAttachmentOnMinicard}}is-checked{{/if}}")
+        span
+          i.fa.fa-paperclip
+          | {{_ 'badge-attachment-on-minicard'}}
+    div.check-div
+      a.flex.js-field-has-cover-attachment-on-minicard(class="{{#if allowsCoverAttachmentOnMinicard}}is-checked{{/if}}")
+        .materialCheckBox(class="{{#if allowsCoverAttachmentOnMinicard}}is-checked{{/if}}")
+        span
+          i.fa.fa-book
+          i.fa.fa-picture-o
+          | {{_ 'cover-attachment-on-minicard'}}
     //div.check-div
     //  a.flex.js-field-has-comments(class="{{#if allowsComments}}is-checked{{/if}}")
     //    .materialCheckBox(class="{{#if allowsComments}}is-checked{{/if}}")
@@ -302,35 +331,6 @@ template(name="boardCardSettingsPopup")
     //      i.fa.fa-history
     //      | {{_ 'activities'}}
 
-template(name="boardMinicardSettingsPopup")
-  form.board-minicard-settings
-    h3 {{_ 'show-on-minicard'}}
-    div.check-div
-      a.flex.js-field-has-description-text-on-minicard(class="{{#if allowsDescriptionTextOnMinicard}}is-checked{{/if}}")
-        .materialCheckBox(class="{{#if allowsDescriptionTextOnMinicard}}is-checked{{/if}}")
-        span
-          i.fa.fa-align-left
-          | {{_ 'description-on-minicard'}}
-    div.check-div
-      a.flex.js-field-has-cover-attachment-on-minicard(class="{{#if allowsCoverAttachmentOnMinicard}}is-checked{{/if}}")
-        .materialCheckBox(class="{{#if allowsCoverAttachmentOnMinicard}}is-checked{{/if}}")
-        span
-          i.fa.fa-book
-          i.fa.fa-picture-o
-          | {{_ 'cover-attachment-on-minicard'}}
-    div.check-div
-      a.flex.js-field-has-badge-attachment-on-minicard(class="{{#if allowsBadgeAttachmentOnMinicard}}is-checked{{/if}}")
-        .materialCheckBox(class="{{#if allowsBadgeAttachmentOnMinicard}}is-checked{{/if}}")
-        span
-          i.fa.fa-paperclip
-          | {{_ 'badge-attachment-on-minicard'}}
-    div.check-div
-      a.flex.js-field-has-card-sorting-by-number-on-minicard(class="{{#if allowsCardSortingByNumberOnMinicard}}is-checked{{/if}}")
-        .materialCheckBox(class="{{#if allowsCardSortingByNumberOnMinicard}}is-checked{{/if}}")
-        span
-          i.fa.fa-sort
-          | {{_ 'card-sorting-by-number-on-minicard'}}
-
 template(name="boardSubtaskSettingsPopup")
   form.board-subtask-settings
     h3 {{_ 'show-parent-in-minicard'}}
@@ -473,10 +473,6 @@ template(name="boardMenuPopup")
         a.js-card-settings
           i.fa.fa-id-card-o
           | {{_ 'card-settings'}}
-      li
-        a.js-minicard-settings
-          i.fa.fa-id-card-o
-          | {{_ 'minicard-settings'}}
       li
         a.js-subtask-settings
           i.fa.fa-sitemap

client/components/sidebar/sidebar.js

@@ -236,7 +236,6 @@ Template.boardMenuPopup.events({
   'click .js-import-board': Popup.open('chooseBoardSource'),
   'click .js-subtask-settings': Popup.open('boardSubtaskSettings'),
   'click .js-card-settings': Popup.open('boardCardSettings'),
-  'click .js-minicard-settings': Popup.open('boardMinicardSettings'),
   'click .js-export-board': Popup.open('exportBoard'),
 });
 
@@ -921,6 +920,14 @@ BlazeComponent.extendComponent({
     );
   },
 
+  allowsCreatorOnMinicard() {
+    return (
+      this.currentBoard.allowsCreatorOnMinicard === null ||
+      this.currentBoard.allowsCreatorOnMinicard === undefined ||
+      this.currentBoard.allowsCreatorOnMinicard
+    );
+  },
+
   allowsMembers() {
     return this.currentBoard.allowsMembers;
   },
@@ -984,6 +991,22 @@ BlazeComponent.extendComponent({
     );
   },
 
+  allowsDescriptionTextOnMinicard() {
+    return this.currentBoard.allowsDescriptionTextOnMinicard;
+  },
+
+  allowsCoverAttachmentOnMinicard() {
+    return this.currentBoard.allowsCoverAttachmentOnMinicard;
+  },
+
+  allowsBadgeAttachmentOnMinicard() {
+    return this.currentBoard.allowsBadgeAttachmentOnMinicard;
+  },
+
+  allowsCardSortingByNumberOnMinicard() {
+    return this.currentBoard.allowsCardSortingByNumberOnMinicard;
+  },
+
   boards() {
     const ret = ReactiveCache.getBoards(
       {
@@ -1106,6 +1129,19 @@ BlazeComponent.extendComponent({
             this.currentBoard.allowsCreator,
           );
         },
+        'click .js-field-has-creator-on-minicard'(evt) {
+          evt.preventDefault();
+          this.currentBoard.allowsCreatorOnMinicard = !this.currentBoard.allowsCreatorOnMinicard;
+          this.currentBoard.setAllowsCreatorOnMinicard(this.currentBoard.allowsCreatorOnMinicard);
+          $(`.js-field-has-creator-on-minicard ${MCB}`).toggleClass(
+            CKCLS,
+            this.currentBoard.allowsCreatorOnMinicard,
+          );
+          $('.js-field-has-creator-on-minicard').toggleClass(
+            CKCLS,
+            this.currentBoard.allowsCreatorOnMinicard,
+          );
+        },
         'click .js-field-has-members'(evt) {
           evt.preventDefault();
           this.currentBoard.allowsMembers = !this.currentBoard.allowsMembers;
@@ -1241,6 +1277,22 @@ BlazeComponent.extendComponent({
             this.currentBoard.allowsCardNumber,
           );
         },
+        'click .js-field-has-description-text-on-minicard'(evt) {
+          evt.preventDefault();
+          this.currentBoard.allowsDescriptionTextOnMinicard = !this.currentBoard
+            .allowsDescriptionTextOnMinicard;
+          this.currentBoard.setallowsDescriptionTextOnMinicard(
+            this.currentBoard.allowsDescriptionTextOnMinicard,
+          );
+          $(`.js-field-has-description-text-on-minicard ${MCB}`).toggleClass(
+            CKCLS,
+            this.currentBoard.allowsDescriptionTextOnMinicard,
+          );
+          $('.js-field-has-description-text-on-minicard').toggleClass(
+            CKCLS,
+            this.currentBoard.allowsDescriptionTextOnMinicard,
+          );
+        },
         'click .js-field-has-description-text'(evt) {
           evt.preventDefault();
           this.currentBoard.allowsDescriptionText = !this.currentBoard
@@ -1318,74 +1370,6 @@ BlazeComponent.extendComponent({
             this.currentBoard.allowsActivities,
           );
         },
-      },
-    ];
-  },
-}).register('boardCardSettingsPopup');
-
-
-BlazeComponent.extendComponent({
-  onCreated() {
-    this.currentBoard = Utils.getCurrentBoard();
-  },
-
-  allowsDescriptionTextOnMinicard() {
-    return this.currentBoard.allowsDescriptionTextOnMinicard;
-  },
-
-  allowsCoverAttachmentOnMinicard() {
-    return this.currentBoard.allowsCoverAttachmentOnMinicard;
-  },
-
-  allowsBadgeAttachmentOnMinicard() {
-    return this.currentBoard.allowsBadgeAttachmentOnMinicard;
-  },
-
-  allowsCardSortingByNumberOnMinicard() {
-    return this.currentBoard.allowsCardSortingByNumberOnMinicard;
-  },
-
- lists() {
-    return ReactiveCache.getLists(
-      {
-        boardId: this.currentBoard._id,
-        archived: false,
-      },
-      {
-        sort: ['title'],
-      },
-    );
-  },
-
-  hasLists() {
-    return this.lists().length > 0;
-  },
-
-  isListSelected() {
-    return (
-      this.currentBoard.dateSettingsDefaultBoardId === this.currentData()._id
-    );
-  },
-
-  events() {
-    return [
-      {
-        'click .js-field-has-description-text-on-minicard'(evt) {
-          evt.preventDefault();
-          this.currentBoard.allowsDescriptionTextOnMinicard = !this.currentBoard
-            .allowsDescriptionTextOnMinicard;
-          this.currentBoard.setallowsDescriptionTextOnMinicard(
-            this.currentBoard.allowsDescriptionTextOnMinicard,
-          );
-          $(`.js-field-has-description-text-on-minicard ${MCB}`).toggleClass(
-            CKCLS,
-            this.currentBoard.allowsDescriptionTextOnMinicard,
-          );
-          $('.js-field-has-description-text-on-minicard').toggleClass(
-            CKCLS,
-            this.currentBoard.allowsDescriptionTextOnMinicard,
-          );
-        },
         'click .js-field-has-cover-attachment-on-minicard'(evt) {
           evt.preventDefault();
           this.currentBoard.allowsCoverAttachmentOnMinicard = !this.currentBoard
@@ -1437,7 +1421,7 @@ BlazeComponent.extendComponent({
       },
     ];
   },
-}).register('boardMinicardSettingsPopup');
+}).register('boardCardSettingsPopup');
 
 BlazeComponent.extendComponent({
   onCreated() {

client/components/swimlanes/swimlaneHeader.jade

@@ -17,14 +17,25 @@ template(name="swimlaneFixedHeader")
         | {{_ 'list-templates-swimlane'}}
       else if $eq title 'Board Templates'
         | {{_ 'board-templates-swimlane'}}
+      else if $eq title 'Default'
+        | {{_ 'defaultdefault'}}
       else
         +viewer
-          = title
+          | {{isTitleDefault title}}
   .swimlane-header-menu
     unless currentUser.isCommentOnly
       if currentUser.isBoardAdmin
         a.fa.fa-plus.js-open-add-swimlane-menu.swimlane-header-plus-icon(title="{{_ 'add-swimlane'}}")
-        a.fa.fa-navicon.js-open-swimlane-menu(title="{{_ 'swimlaneActionPopup-title'}}")
+      a.fa.fa-navicon.js-open-swimlane-menu(title="{{_ 'swimlaneActionPopup-title'}}")
+      //// TODO: Collapse Swimlane: make button working, etc.
+      //unless collapsed
+      //  a.js-collapse-swimlane(title="{{_ 'collapse'}}")
+      //    i.fa.fa-arrow-down.swimlane-header-collapse-down
+      //    i.fa.fa-arrow-up.swimlane-header-collapse-up
+      //if collapsed
+      //  a.js-collapse-swimlane(title="{{_ 'uncollapse'}}")
+      //    i.fa.fa-arrow-up.swimlane-header-collapse-up
+      //    i.fa.fa-arrow-down.swimlane-header-collapse-down
       unless isTouchScreen
         if isShowDesktopDragHandles
           a.swimlane-header-handle.handle.fa.fa-arrows.js-swimlane-header-handle
@@ -33,7 +44,7 @@ template(name="swimlaneFixedHeader")
 
 template(name="editSwimlaneTitleForm")
   .list-composer
-    input.list-name-input.full-line(type="text" value=title autofocus)
+    input.list-name-input.full-line(type="text" value="{{isTitleDefault title}}" autofocus)
     .edit-controls.clearfix
       button.primary.confirm(type="submit") {{_ 'save'}}
       a.fa.fa-times-thin.js-close-inlined-form
@@ -41,27 +52,29 @@ template(name="editSwimlaneTitleForm")
 template(name="swimlaneActionPopup")
   unless currentUser.isCommentOnly
     ul.pop-over-list
-       li: a.js-set-swimlane-color
-        i.fa.fa-paint-brush
-        | {{_ 'select-color'}}
+       if currentUser.isBoardAdmin
+         li: a.js-set-swimlane-color
+          i.fa.fa-paint-brush
+          | {{_ 'select-color'}}
        li: a.js-set-swimlane-height
         i.fa.fa-arrows-v
         |  {{_ 'set-swimlane-height'}}
-    unless this.isTemplateContainer
-      hr
-      ul.pop-over-list
-        li: a.js-close-swimlane
-          i.fa.fa-arrow-right
-          i.fa.fa-archive
-          | {{_ 'archive-swimlane'}}
-      ul.pop-over-list
-        li: a.js-copy-swimlane
-          i.fa.fa-copy
-          | {{_ 'copy-swimlane'}}
-      ul.pop-over-list
-        li: a.js-move-swimlane
-          i.fa.fa-arrow-up
-          | {{_ 'move-swimlane'}}
+    if currentUser.isBoardAdmin
+      unless this.isTemplateContainer
+        hr
+        ul.pop-over-list
+          li: a.js-close-swimlane
+            i.fa.fa-arrow-right
+            i.fa.fa-archive
+            | {{_ 'archive-swimlane'}}
+        ul.pop-over-list
+          li: a.js-copy-swimlane
+            i.fa.fa-copy
+            | {{_ 'copy-swimlane'}}
+        ul.pop-over-list
+          li: a.js-move-swimlane
+            i.fa.fa-arrow-up
+            | {{_ 'move-swimlane'}}
 
 template(name="swimlaneAddPopup")
   unless currentUser.isCommentOnly
@@ -87,7 +100,8 @@ template(name="setSwimlaneColorPopup")
 
 template(name="setSwimlaneHeightPopup")
   #js-swimlane-height-edit
-    label {{_ 'set-swimlane-height-value'}}
+    label a) {{_ 'set-swimlane-height-value'}}
+    label b) -1
       p
         input.swimlane-height-value(type="number" value="{{ swimlaneHeightValue }}" min="100")
         input.swimlane-height-apply(type="submit" value="{{_ 'apply'}}")

client/components/swimlanes/swimlaneHeader.js

@@ -1,3 +1,4 @@
+import { TAPi18n } from '/imports/i18n';
 import { ReactiveCache } from '/imports/reactiveCache';
 const { calculateIndexData } = Utils;
 
@@ -17,10 +18,25 @@ BlazeComponent.extendComponent({
       swimlane.rename(newTitle.trim());
     }
   },
+  collapsed(check = undefined) {
+    const swimlane = Template.currentData();
+    const status = swimlane.isCollapsed();
+    if (check === undefined) {
+      // just check
+      return status;
+    } else {
+      swimlane.collapse(!status);
+      return !status;
+    }
+  },
 
   events() {
     return [
       {
+        'click .js-collapse-swimlane'(event) {
+          event.preventDefault();
+          this.collapsed(!this.collapsed());
+        },
         'click .js-open-swimlane-menu': Popup.open('swimlaneAction'),
         'click .js-open-add-swimlane-menu': Popup.open('swimlaneAdd'),
         submit: this.editTitle,
@@ -33,6 +49,53 @@ Template.swimlaneFixedHeader.helpers({
   isBoardAdmin() {
     return ReactiveCache.getCurrentUser().isBoardAdmin();
   },
+  isTitleDefault(title) {
+    // https://github.com/wekan/wekan/issues/4763
+    // https://github.com/wekan/wekan/issues/4742
+    // Translation text for "default" does not work, it returns an object.
+    // When that happens, try use translation "defaultdefault" that has same content of default, or return text "Default".
+    // This can happen, if swimlane does not have name.
+    // Yes, this is fixing the symptom (Swimlane title does not have title)
+    // instead of fixing the problem (Add Swimlane title when creating swimlane)
+    // because there could be thousands of swimlanes, adding name Default to all of them
+    // would be very slow.
+    if (title.startsWith("key 'default") && title.endsWith('returned an object instead of string.')) {
+      if (`${TAPi18n.__('defaultdefault')}`.startsWith("key 'default") && `${TAPi18n.__('defaultdefault')}`.endsWith('returned an object instead of string.')) {
+        return 'Default';
+      } else  {
+        return `${TAPi18n.__('defaultdefault')}`;
+      }
+    } else if (title === 'Default') {
+      return `${TAPi18n.__('defaultdefault')}`;
+    } else  {
+      return title;
+    }
+  },
+});
+
+Template.editSwimlaneTitleForm.helpers({
+  isTitleDefault(title) {
+    // https://github.com/wekan/wekan/issues/4763
+    // https://github.com/wekan/wekan/issues/4742
+    // Translation text for "default" does not work, it returns an object.
+    // When that happens, try use translation "defaultdefault" that has same content of default, or return text "Default".
+    // This can happen, if swimlane does not have name.
+    // Yes, this is fixing the symptom (Swimlane title does not have title)
+    // instead of fixing the problem (Add Swimlane title when creating swimlane) 
+    // because there could be thousands of swimlanes, adding name Default to all of them
+    // would be very slow.
+    if (title.startsWith("key 'default") && title.endsWith('returned an object instead of string.')) {
+      if (`${TAPi18n.__('defaultdefault')}`.startsWith("key 'default") && `${TAPi18n.__('defaultdefault')}`.endsWith('returned an object instead of string.')) {
+        return 'Default';
+      } else  {
+        return `${TAPi18n.__('defaultdefault')}`;
+      }
+    } else if (title === 'Default') {
+      return `${TAPi18n.__('defaultdefault')}`;
+    } else  {
+      return title;
+    }
+  },
 });
 
 Template.swimlaneActionPopup.events({
@@ -147,7 +210,8 @@ BlazeComponent.extendComponent({
     );
 
     // FIXME(mark-i-m): where do we put constants?
-    if (height < 100 || !height) {
+    //                  also in imports/i18n/data/en.i18n.json
+    if (height != -1 && (height < 100 || !height)) {
       Template.instance()
         .$('.swimlane-height-error')
         .click();

client/components/swimlanes/swimlanes.css

@@ -1,38 +1,3 @@
-/*
-// Minimize swimlanes start https://www.w3schools.com/howto/howto_js_accordion.asp
-
-.accordion
-  cursor: pointer
-  width: 30px
-  height: 20px
-  border: none
-  outline: none
-  font-size: 18px
-  transition: 0.4s
-  padding-top: 0px
-  margin-top: 0px
-
-.accordion:after
-  // Unicode triagle right:
-  content: '\25B6'
-  color: #777
-  font-weight: bold
-  float: left
-
-.active:after
-  // Unicode triangle down:
-  content: '\25BC'
-
-.panel
-  width: 100%
-  max-height: 0
-  overflow: hidden
-  transition: max-height 0.2s ease-out
-  margin: 0px
-  padding: 0px
-
-// Minimize swimlanes end https://www.w3schools.com/howto/howto_js_accordion.asp
-*/
 @media screen and (min-width: 801px) {
   .swimlane.ui-sortable {
     width: max-content;
@@ -47,7 +12,28 @@
   display: flex;
   flex-direction: row;
   overflow: 0;
-  max-height: calc(100% - 26px);
+}
+.swimlane-header-menu .swimlane-header-collapse-down {
+  font-size: 50%;
+  color: #a6a6a6;
+  position: absolute;
+  top: 5px;
+  left: 100px;
+}
+.swimlane-header-menu .swimlane-header-collapse-up {
+  font-size: 50%;
+  color: #a6a6a6;
+  position: absolute;
+  bottom: 5px;
+  left: 100px;
+}
+.swimlane-header-menu .swimlane-header-uncollapse-up {
+  font-size: 50%;
+  color: #a6a6a6;
+}
+.swimlane-header-menu .swimlane-header-uncollapse-down {
+  font-size: 50%;
+  color: #a6a6a6;
 }
 .swimlane.placeholder {
   background-color: rgba(0,0,0,0.2);
@@ -171,7 +157,7 @@
   color: #4d4d4d !important;
 }
 .swimlane-silver {
-  background: unset !important;
+  background: #ccc !important;
   color: #4d4d4d !important;
 }
 .swimlane-peachpuff {

client/components/swimlanes/swimlanes.jade

@@ -3,7 +3,7 @@ template(name="swimlane")
     +swimlaneHeader
   unless collapseSwimlane
     .swimlane.js-lists.js-swimlane(id="swimlane-{{_id}}"
-                                   style="height:{{swimlaneHeight}}px;")
+                                   style="height:{{swimlaneHeight}};")
       if isMiniScreen
         if currentListIsInThisSwimlane _id
           +list(currentList)

client/components/swimlanes/swimlanes.js

@@ -227,7 +227,8 @@ BlazeComponent.extendComponent({
   swimlaneHeight() {
     const user = Meteor.user();
     const swimlane = Template.currentData();
-    return user.getSwimlaneHeight(swimlane.boardId, swimlane._id);
+    const height = user.getSwimlaneHeight(swimlane.boardId, swimlane._id);
+    return height == -1 ? "auto" : (height + "px");
   },
 }).register('swimlane');
 

client/components/users/userHeader.js

@@ -248,6 +248,7 @@ Template.editProfilePopup.events({
 // XXX For some reason the useraccounts autofocus isnt working in this case.
 // See https://github.com/meteor-useraccounts/core/issues/384
 Template.changePasswordPopup.onRendered(function() {
+  $('.at-pwd-form').show();
   this.find('#at-field-current_password').focus();
 });
 

client/config/blazeHelpers.js

@@ -47,7 +47,7 @@ Blaze.registerHelper('isTouchScreenOrShowDesktopDragHandles', () =>
 Blaze.registerHelper('moment', (...args) => {
   args.pop(); // hash
   const [date, format] = args;
-  return moment(date).format(format);
+  return moment(date).format(format ?? 'LLLL');
 });
 
 Blaze.registerHelper('canModifyCard', () =>

client/lib/datepicker.js

@@ -6,10 +6,11 @@ import moment from 'moment/min/moment-with-locales';
 function adjustedTimeFormat() {
   return moment
     .localeData()
-    .longDateFormat('LT')
-    .replace(/HH/i, 'H');
+    .longDateFormat('LT');
 }
 
+//   .replace(/HH/i, 'H');
+
 export class DatePicker extends BlazeComponent {
   template() {
     return 'datepicker';

client/lib/exportHTML.js

@@ -57,6 +57,9 @@ window.ExportHtml = Popup => {
     Array.from(
       document.querySelectorAll('#header-main-bar .board-header-btns'),
     ).forEach(elem => elem.remove());
+    Array.from(
+      document.querySelectorAll('.js-pop-over, .pop-over'),
+    ).forEach(elem => elem.remove());
     Array.from(document.querySelectorAll('.list-composer')).forEach(elem =>
       elem.remove(),
     );
@@ -152,6 +155,50 @@ window.ExportHtml = Popup => {
     );
   };
 
+  const getWebFonts = () => {
+    fontUrls = [];
+
+    for (let sheet of document.styleSheets) {
+      // Get the base URL of the stylesheet
+      let baseUrl = sheet.href ? new URL(sheet.href).origin : window.location.origin;
+
+      try {
+        for (let rule of sheet.cssRules) {
+          if (rule.type === CSSRule.FONT_FACE_RULE) {
+            let src = rule.style.getPropertyValue('src');
+            let urlMatch = src.match(/url\(["']?(.+?)["']?\)/);
+            if (urlMatch) {
+              let fontUrl = urlMatch[1];
+
+              // Resolve the URL relative to the stylesheet's base URL
+              let resolvedUrl = new URL(fontUrl, baseUrl);
+              fontUrls.push(resolvedUrl.href); // Using .href to get the absolute URL
+            }
+          }
+        }
+      } catch (e) {
+          console.log('Access to stylesheet blocked:', e);
+      }
+    }
+
+    return fontUrls;
+  };
+
+  const downloadFonts = async(elements, zip) => {
+    await asyncForEach(elements, async elem => {
+      const response = await fetch(elem);
+      const responseBody = await response.blob();
+      const filename = elem.split('/')
+        .pop()
+        .split('?')
+        .shift()
+        .split('#')
+        .shift();
+      const fileFullPath = `webfonts/${filename}`;
+        zip.file(fileFullPath, responseBody);
+    });
+  }
+
   const downloadCardCovers = async (elements, zip, boardSlug) => {
     await asyncForEach(elements, async elem => {
       const response = await fetch(
@@ -194,6 +241,7 @@ window.ExportHtml = Popup => {
     await downloadStylesheets(getStylesheetList(), zip);
     await downloadSrcAttached(getSrcAttached(), zip, boardSlug);
     await downloadCardCovers(getCardCovers(), zip, boardSlug);
+    await downloadFonts(getWebFonts(), zip);
 
     addBoardHTMLToZip(boardSlug, zip);
 

client/lib/keyboard.js

@@ -33,6 +33,14 @@ Mousetrap.bind('q', () => {
   }
 });
 
+Mousetrap.bind('a', () => {
+  const currentBoardId = Session.get('currentBoard');
+  const currentUserId = Meteor.userId();
+  if (currentBoardId && currentUserId) {
+    Filter.assignees.toggle(currentUserId);
+  }
+});
+
 Mousetrap.bind('x', () => {
   if (Filter.isActive()) {
     Filter.reset();
@@ -181,6 +189,10 @@ Template.keyboardShortcuts.helpers({
       keys: ['q'],
       action: 'shortcut-filter-my-cards',
     },
+    {
+      keys: ['a'],
+      action: 'shortcut-filter-my-assigned-cards',
+    },
     {
       keys: ['f'],
       action: 'shortcut-toggle-filterbar',

config/accounts.js

@@ -126,10 +126,9 @@ AccountsTemplates.configure({
 
 AccountsTemplates.configureRoute('changePwd', {
   redirect() {
-    // XXX We should emit a notification once we have a notification system.
-    // Currently the user has no indication that his modification has been
-    // applied.
-    Popup.back();
+    // We should go back with the popup but we don't since user feedback about the change is within the popup only.
+    // Once we have a global feedback popup mechanism we can use that here and close with the following:
+    // Popup.back();
   },
 });
 

config/router.js

@@ -381,6 +381,30 @@ FlowRouter.route('/attachments', {
   },
 });
 
+FlowRouter.route('/translation', {
+  name: 'translation',
+  triggersEnter: [
+    AccountsTemplates.ensureSignedIn,
+    () => {
+      Session.set('currentBoard', null);
+      Session.set('currentList', null);
+      Session.set('currentCard', null);
+      Session.set('popupCardId', null);
+      Session.set('popupCardBoardId', null);
+
+      Filter.reset();
+      Session.set('sortBy', '');
+      EscapeActions.executeAll();
+    },
+  ],
+  action() {
+    BlazeLayout.render('defaultLayout', {
+      headerBar: 'settingHeaderBar',
+      content: 'translation',
+    });
+  },
+});
+
 FlowRouter.notFound = {
   action() {
     BlazeLayout.render('defaultLayout', { content: 'notFound' });

docker-compose.yml

@@ -1,5 +1,3 @@
-version: '2'
-
 # Note: Do not add single quotes '' to variables. Having spaces still works without quotes where required.
 #---------------------------------------------------------------------------------------------------------
 # ==== CREATING USERS AND LOGGING IN TO WEKAN ====
@@ -105,9 +103,9 @@ services:
       - 27017
     volumes:
       - /etc/localtime:/etc/localtime:ro
-      - /etc/timezone:/etc/timezone:ro
       - wekan-db:/data/db
       - wekan-db-dump:/dump
+      #- /etc/timezone:/etc/timezone:ro # Do not use https://github.com/wekan/wekan/issues/5123
 
   wekan:
     #-------------------------------------------------------------------------------------
@@ -120,7 +118,10 @@ services:
     # image: quay.io/wekan/wekan:v6.89
     # image: wekanteam/wekan:v6.89
     # b) GitHub Container registry.
+    # b1) Latest release tag:
     image: ghcr.io/wekan/wekan:latest
+    # b2) Newest git commit automatic build:
+    #image: ghcr.io/wekan/wekan:main
     # c) Quay:
     #image: quay.io/wekan/wekan:latest
     # d) Docker Hub:
@@ -245,6 +246,10 @@ services:
       # ==== NUMBER OF SEARCH RESULTS PER PAGE BY DEFAULT ====
       #- RESULTS_PER_PAGE=20
       #---------------------------------------------------------------
+      # ==== AFTER OIDC LOGIN, ADD USERS AUTOMATICALLY TO THIS BOARD ID ====
+      # https://github.com/wekan/wekan/pull/5098
+      #- DEFAULT_BOARD_ID=abcd1234
+      #---------------------------------------------------------------
       # ==== WEKAN API AND EXPORT BOARD ====
       # Wekan Export Board works when WITH_API=true.
       # https://github.com/wekan/wekan/wiki/REST-API
@@ -361,7 +366,7 @@ services:
       #-----------------------------------------------------------------
       # ==== OUTGOING WEBHOOKS ====
       # What to send to Outgoing Webhook, or leave out. If commented out the default values will be: cardId,listId,oldListId,boardId,comment,user,card,commentId,swimlaneId,customerField,customFieldValue
-      #- WEBHOOKS_ATTRIBUTES=cardId,listId,oldListId,boardId,comment,user,card,commentId
+      #- WEBHOOKS_ATTRIBUTES=cardId,listId,oldListId,boardId,comment,user,card,board,list,swimlane,commentId
       #-----------------------------------------------------------------
       # ==== Debug OIDC OAuth2 etc ====
       #- DEBUG=true
@@ -384,6 +389,8 @@ services:
       #- OAUTH2_CA_CERT=ABCD1234
       # Use OAuth2 ADFS additional changes. Also needs OAUTH2_ENABLED=true setting.
       #- OAUTH2_ADFS_ENABLED=false
+      # Azure AD B2C. https://github.com/wekan/wekan/issues/5242
+      #- OAUTH2_B2C_ENABLED=false
       # OAuth2 login style: popup or redirect.
       #- OAUTH2_LOGIN_STYLE=redirect
       # Application GUID captured during app registration:

docker-compose.yml-arm64

@@ -0,0 +1,782 @@
+version: '2'
+
+#---------------------------------------------------------------------------------------------------------
+# ==== START ====
+# docker-compose up -d -f docker-compose.yml-arm64
+#---------------------------------------------------------------------------------------------------------
+# Note: Do not add single quotes '' to variables. Having spaces still works without quotes where required.
+#---------------------------------------------------------------------------------------------------------
+# ==== CREATING USERS AND LOGGING IN TO WEKAN ====
+# https://github.com/wekan/wekan/wiki/Adding-users
+#---------------------------------------------------------------------------------------------------------
+# ==== FORGOT PASSWORD ====
+# https://github.com/wekan/wekan/wiki/Forgot-Password
+#---------------------------------------------------------------------------------------------------------
+# ==== Upgrading Wekan to new version =====
+# NOTE: MongoDB has changed from 3.x to 4.x, in that case you need backup/restore with --noIndexRestore
+#       see https://github.com/wekan/wekan/wiki/Backup
+# 1) Stop Wekan:
+#      docker-compose stop
+# 2) Remove old Wekan app (wekan-app only, not that wekan-db container that has all your data)
+#      docker rm wekan-app
+# 3) Get newest docker-compose.yml from https://github.com/wekan/wekan to have correct image,
+#    for example: "image: quay.io/wekan/wekan" or version tag "image: quay.io/wekan/wekan:v4.52"
+# 4) Start Wekan:
+#      docker-compose up -d
+#----------------------------------------------------------------------------------
+# ==== OPTIONAL: DEDICATED DOCKER USER ====
+# 1) Optionally create a dedicated user for Wekan, for example:
+#      sudo useradd -d /home/wekan -m -s /bin/bash wekan
+# 2) Add this user to the docker group, then logout+login or reboot:
+#      sudo usermod -aG docker wekan
+# 3) Then login as user wekan.
+# 4) Create this file /home/wekan/docker-compose.yml with your modifications.
+#----------------------------------------------------------------------------------
+# ==== RUN DOCKER AS SERVICE ====
+# 1a) Running Docker as service, on Systemd like Debian 9, Ubuntu 16.04, CentOS 7:
+#      sudo systemctl enable docker
+#      sudo systemctl start docker
+# 1b) Running Docker as service, on init.d like Debian 8, Ubuntu 14.04, CentOS 6:
+#      sudo update-rc.d docker defaults
+#      sudo service docker start
+# ----------------------------------------------------------------------------------
+# ==== USAGE OF THIS docker-compose.yml ====
+# 1) For seeing does Wekan work, try this and check with your web browser:
+#      docker-compose up
+# 2) Stop Wekan and start Wekan in background:
+#     docker-compose stop
+#     docker-compose up -d
+# 3) See running Docker containers:
+#     docker ps
+# 4) Stop Docker containers:
+#     docker-compose stop
+# ----------------------------------------------------------------------------------
+# ===== INSIDE DOCKER CONTAINERS, AND BACKUP/RESTORE ====
+# https://github.com/wekan/wekan/wiki/Backup
+# If really necessary, repair MongoDB: https://github.com/wekan/wekan-mongodb/issues/6#issuecomment-424004116
+# 1) Going inside containers:
+#    a) Wekan app, does not contain data
+#         docker exec -it wekan-app bash
+#    b) MongoDB, contains all data
+#         docker exec -it wekan-db bash
+# 2) Copying database to outside of container:
+#      docker exec -it wekan-db bash
+#      cd /data
+#      mongodump
+#      exit
+#      docker cp wekan-db:/data/dump .
+# 3) Restoring database
+#      # 1) Stop wekan
+#             docker stop wekan-app
+#      # 2) Go inside database container
+#             docker exec -it wekan-db bash
+#      # 3) and data directory
+#             cd /data
+#      # 4) Remove previous dump
+#             rm -rf dump
+#      # 5) Exit db container
+#             exit
+#      # 6) Copy dump to inside docker container
+#             docker cp dump wekan-db:/data/
+#      # 7) Go inside database container
+#             docker exec -it wekan-db bash
+#      # 8) and data directory
+#             cd /data
+#      # 9) Restore
+#             mongorestore --drop
+#      # 10) Exit db container
+#             exit
+#      # 11) Start wekan
+#             docker start wekan-app
+#-------------------------------------------------------------------------
+
+services:
+
+  wekandb:
+    #-------------------------------------------------------------------------------------
+    # ==== MONGODB FROM DOCKER HUB ====
+    image: mongo:6
+    #-------------------------------------------------------------------------------------
+    container_name: wekan-db
+    restart: always
+    # command: mongod --oplogSize 128
+    # Syslog: mongod --syslog --oplogSize 128 --quiet
+    # Disable MongoDB logs:
+    command: mongod --logpath /dev/null --oplogSize 128 --quiet
+    networks:
+      - wekan-tier
+    expose:
+      - 27017
+    volumes:
+      - /etc/localtime:/etc/localtime:ro
+      - wekan-db:/data/db
+      - wekan-db-dump:/dump
+      #- /etc/timezone:/etc/timezone:ro # Do not use https://github.com/wekan/wekan/issues/5123
+
+  wekan:
+    #-------------------------------------------------------------------------------------
+    # ==== WEKAN FROM GITHUB/QUAY/DOCKER HUB ====
+    # All of GitHub, Quay and Docker Hub have latest, but because
+    # latest tag changes when is newest release,
+    # when upgrading would be better to use version tag.
+    # a) Using specific version tag is better:
+    # image: ghcr.io/wekan/wekan:v6.89
+    # image: quay.io/wekan/wekan:v6.89
+    # image: wekanteam/wekan:v6.89
+    # b) GitHub Container registry.
+    #image: ghcr.io/wekan/wekan:main
+    image: ghcr.io/wekan/wekan:v7.09-arm64
+    # c) Quay:
+    #image: quay.io/wekan/wekan:latest
+    # d) Docker Hub:
+    #image: wekanteam/wekan:latest
+    #-------------------------------------------------------------------------------------
+    container_name: wekan-app
+    # On CentOS 7 there is seccomp issue with glibc 6,
+    # so CentOS 7 users shoud use these security_opt seccomp:unconfined
+    # settings to get WeKan working. See:
+    #   - https://github.com/wekan/wekan/issues/4585
+    #   - https://github.com/wekan/wekan/issues/4587
+    #security_opt:
+    #  - seccomp:unconfined
+    restart: always
+    networks:
+      - wekan-tier
+    #-------------------------------------------------------------------------------------
+    # ==== BUILD wekan-app DOCKER CONTAINER FROM SOURCE, if you uncomment these ====
+    # ==== and use commands: docker-compose up -d --build
+    #build:
+    #  context: .
+    #  dockerfile: Dockerfile
+    #-------------------------------------------------------------------------------------
+    ports:
+      # Docker outsideport:insideport. Do not add anything extra here.
+      # For example, if you want to have wekan on port 3001,
+      # use 3001:8080 . Do not add any extra address etc here, that way it does not work.
+      # remove port mapping if you use nginx reverse proxy, port 8080 is already exposed to wekan-tier network
+      - 80:8080
+    environment:
+      #-----------------------------------------------------------------
+      # ==== WRITEABLE PATH FOR FILE UPLOADS ====
+      - WRITABLE_PATH=/data
+      #-----------------------------------------------------------------
+      # ==== AWS S3 FOR FILES ====
+      # Any region. For example:
+      #   us-standard,us-west-1,us-west-2,
+      #   eu-west-1,eu-central-1,
+      #   ap-southeast-1,ap-northeast-1,sa-east-1
+      #
+      #- S3='{"s3":{"key": "xxx", "secret": "xxx", "bucket": "xxx", "region": "xxx"}}'
+      #-----------------------------------------------------------------
+      # ==== MONGO_URL ====
+      - MONGO_URL=mongodb://wekandb:27017/wekan
+      #---------------------------------------------------------------
+      # ==== ROOT_URL SETTING ====
+      # Change ROOT_URL to your real Wekan URL, for example:
+      # If you have Caddy/Nginx/Apache providing SSL
+      #  - https://example.com
+      #  - https://boards.example.com
+      # This can be problematic with avatars https://github.com/wekan/wekan/issues/1776
+      #  - https://example.com/wekan
+      # If without https, can be only wekan node, no need for Caddy/Nginx/Apache if you don't need them
+      #  - http://example.com
+      #  - http://boards.example.com
+      #  - http://192.168.1.100    <=== using at local LAN
+      - ROOT_URL=http://localhost  #   <=== using only at same laptop/desktop where Wekan is installed
+      #---------------------------------------------------------------
+      # ==== EMAIL SETTINGS ====
+      # Email settings are only at MAIL_URL and MAIL_FROM.
+      # Admin Panel has test button, but it's not used for settings.
+      #   see https://github.com/wekan/wekan/wiki/Troubleshooting-Mail
+      #   For SSL in email, change smtp:// to smtps://
+      # NOTE: Special characters need to be url-encoded in MAIL_URL.
+      #       You can encode those characters for example at: https://www.urlencoder.org
+      #- MAIL_URL=smtp://user:pass@mailserver.example.com:25/
+      - MAIL_URL=smtp://<mail_url>:25/?ignoreTLS=true&tls={rejectUnauthorized:false}
+      - MAIL_FROM=Wekan Notifications <noreply.wekan@mydomain.com>
+      # Currently MAIL_SERVICE is not in use.
+      #- MAIL_SERVICE=Outlook365
+      #- MAIL_SERVICE_USER=firstname.lastname@hotmail.com
+      #- MAIL_SERVICE_PASSWORD=SecretPassword
+      #---------------------------------------------------------------
+      # https://github.com/wekan/wekan/issues/3585#issuecomment-1021522132
+      # Add more Node heap, this is done by default at Dockerfile:
+      #   - NODE_OPTIONS="--max_old_space_size=4096"
+      # Add more stack, this is done at Dockerfile:
+      #   bash -c "ulimit -s 65500; exec node --stack-size=65500 main.js"
+      #---------------------------------------------------------------
+      # ==== OPTIONAL: MONGO OPLOG SETTINGS =====
+      # https://github.com/wekan/wekan-mongodb/issues/2#issuecomment-378343587
+      # We've fixed our CPU usage problem today with an environment
+      # change around Wekan. I wasn't aware during implementation
+      # that if you're using more than 1 instance of Wekan
+      # (or any MeteorJS based tool) you're supposed to set
+      # MONGO_OPLOG_URL as an environment variable.
+      # Without setting it, Meteor will perform a poll-and-diff
+      # update of it's dataset. With it, Meteor will update from
+      # the OPLOG. See here
+      #   https://blog.meteor.com/tuning-meteor-mongo-livedata-for-scalability-13fe9deb8908
+      # After setting
+      # MONGO_OPLOG_URL=mongodb://<username>:<password>@<mongoDbURL>/local?authSource=admin&replicaSet=rsWekan
+      # the CPU usage for all Wekan instances dropped to an average
+      # of less than 10% with only occasional spikes to high usage
+      # (I guess when someone is doing a lot of work)
+      # - MONGO_OPLOG_URL=mongodb://<username>:<password>@<mongoDbURL>/local?authSource=admin&replicaSet=rsWekan
+      #---------------------------------------------------------------
+      # ==== OPTIONAL: KADIRA PERFORMANCE MONITORING FOR METEOR ====
+      # https://github.com/edemaine/kadira-compose
+      # https://github.com/meteor/meteor-apm-agent
+      # https://blog.meteor.com/kadira-apm-is-now-open-source-490469ffc85f
+      #- APM_OPTIONS_ENDPOINT=http://<kadira-ip>:11011
+      #- APM_APP_ID=
+      #- APM_APP_SECRET=
+      #---------------------------------------------------------------
+      # ==== OPTIONAL: LOGS AND STATS ====
+      # https://github.com/wekan/wekan/wiki/Logs
+      #
+      # Daily export of Wekan changes as JSON to Logstash and ElasticSearch / Kibana (ELK)
+      # https://github.com/wekan/wekan-logstash
+      #
+      # Statistics Python script for Wekan Dashboard
+      # https://github.com/wekan/wekan-stats
+      #
+      # Console, file, and zulip logger on database changes https://github.com/wekan/wekan/pull/1010
+      # with fix to replace console.log by winston logger https://github.com/wekan/wekan/pull/1033
+      # but there could be bug https://github.com/wekan/wekan/issues/1094
+      #
+      # There is Feature Request: Logging date and time of all activity with summary reports,
+      # and requesting reason for changing card to other column https://github.com/wekan/wekan/issues/1598
+      #---------------------------------------------------------------
+      # ==== NUMBER OF SEARCH RESULTS PER PAGE BY DEFAULT ====
+      #- RESULTS_PER_PAGE=20
+      #---------------------------------------------------------------
+      # ==== AFTER OIDC LOGIN, ADD USERS AUTOMATICALLY TO THIS BOARD ID ====
+      # https://github.com/wekan/wekan/pull/5098
+      #- DEFAULT_BOARD_ID=abcd1234
+      #---------------------------------------------------------------
+      # ==== WEKAN API AND EXPORT BOARD ====
+      # Wekan Export Board works when WITH_API=true.
+      # https://github.com/wekan/wekan/wiki/REST-API
+      # https://github.com/wekan/wekan-gogs
+      # If you disable Wekan API with false, Export Board does not work.
+      - WITH_API=true
+      #---------------------------------------------------------------
+      # ==== PASSWORD BRUTE FORCE PROTECTION ====
+      #https://atmospherejs.com/lucasantoniassi/accounts-lockout
+      #Defaults below. Uncomment to change. wekan/server/accounts-lockout.js
+      #- ACCOUNTS_LOCKOUT_KNOWN_USERS_FAILURES_BEFORE=3
+      #- ACCOUNTS_LOCKOUT_KNOWN_USERS_PERIOD=60
+      #- ACCOUNTS_LOCKOUT_KNOWN_USERS_FAILURE_WINDOW=15
+      #- ACCOUNTS_LOCKOUT_UNKNOWN_USERS_FAILURES_BERORE=3
+      #- ACCOUNTS_LOCKOUT_UNKNOWN_USERS_LOCKOUT_PERIOD=60
+      #- ACCOUNTS_LOCKOUT_UNKNOWN_USERS_FAILURE_WINDOW=15
+      #---------------------------------------------------------------
+      # ==== ACCOUNT OPTIONS ====
+      # https://docs.meteor.com/api/accounts-multi.html#AccountsCommon-config
+      # Defaults below. Uncomment to change. wekan/server/accounts-common.js
+      # - ACCOUNTS_COMMON_LOGIN_EXPIRATION_IN_DAYS=90
+      #---------------------------------------------------------------
+      # ==== RICH TEXT EDITOR IN CARD COMMENTS ====
+      # https://github.com/wekan/wekan/pull/2560
+      - RICHER_CARD_COMMENT_EDITOR=false
+      #---------------------------------------------------------------
+      # ==== CARD OPENED, SEND WEBHOOK MESSAGE ====
+      # https://github.com/wekan/wekan/issues/2518
+      - CARD_OPENED_WEBHOOK_ENABLED=false
+      #---------------------------------------------------------------
+      # ==== Allow configuration to validate uploaded attachments ====
+      #-ATTACHMENTS_UPLOAD_EXTERNAL_PROGRAM=/usr/local/bin/avscan {file}
+      #-ATTACHMENTS_UPLOAD_MIME_TYPES=image/*,text/*
+      #-ATTACHMENTS_UPLOAD_MAX_SIZE=5000000
+      #---------------------------------------------------------------
+      # ==== Allow configuration to validate uploaded avatars ====
+      #-AVATARS_UPLOAD_EXTERNAL_PROGRAM=/usr/local/bin/avscan {file}
+      #-AVATARS_UPLOAD_MIME_TYPES=image/*
+      #-AVATARS_UPLOAD_MAX_SIZE=500000
+      #---------------------------------------------------------------
+      # ==== Allow to shrink attached/pasted image ====
+      # https://github.com/wekan/wekan/pull/2544
+      #- MAX_IMAGE_PIXEL=1024
+      #- IMAGE_COMPRESS_RATIO=80
+      #---------------------------------------------------------------
+      # ==== NOTIFICATION TRAY AFTER READ DAYS BEFORE REMOVE =====
+      # Number of days after a notification is read before we remove it.
+      # Default: 2
+      #- NOTIFICATION_TRAY_AFTER_READ_DAYS_BEFORE_REMOVE=2
+      #---------------------------------------------------------------
+      # ==== BIGEVENTS DUE ETC NOTIFICATIONS =====
+      # https://github.com/wekan/wekan/pull/2541
+      # Introduced a system env var BIGEVENTS_PATTERN default as "NONE",
+      # so any activityType matches the pattern, system will send out
+      # notifications to all board members no matter they are watching
+      # or tracking the board or not. Owner of the wekan server can
+      # disable the feature by setting this variable to "NONE" or
+      # change the pattern to any valid regex. i.e. '|' delimited
+      # activityType names.
+      # a) Example
+      #- BIGEVENTS_PATTERN=due
+      # b) All
+      #- BIGEVENTS_PATTERN=received|start|due|end
+      # c) Disabled
+      - BIGEVENTS_PATTERN=NONE
+      #---------------------------------------------------------------
+      # ==== EMAIL DUE DATE NOTIFICATION =====
+      # https://github.com/wekan/wekan/pull/2536
+      # System timelines will be showing any user modification for
+      # dueat startat endat receivedat, also notification to
+      # the watchers and if any card is due, about due or past due.
+      #
+      # Notify due days, default is None, 2 days before and on the event day
+      #- NOTIFY_DUE_DAYS_BEFORE_AND_AFTER=2,0
+      #
+      # Notify due at hour of day. Default every morning at 8am. Can be 0-23.
+      # If env variable has parsing error, use default. Notification sent to watchers.
+      #- NOTIFY_DUE_AT_HOUR_OF_DAY=8
+      #-----------------------------------------------------------------
+      # ==== EMAIL NOTIFICATION TIMEOUT, ms =====
+      # Default: 30000 ms = 30s
+      #- EMAIL_NOTIFICATION_TIMEOUT=30000
+      #-----------------------------------------------------------------
+      # ==== CORS =====
+      # CORS: Set Access-Control-Allow-Origin header.
+      #- CORS=*
+      # CORS_ALLOW_HEADERS: Set Access-Control-Allow-Headers header.  "Authorization,Content-Type" is required for cross-origin use of the API.
+      #- CORS_ALLOW_HEADERS=Authorization,Content-Type
+      # CORS_EXPOSE_HEADERS: Set Access-Control-Expose-Headers header.  This is not needed for typical CORS situations
+      #- CORS_EXPOSE_HEADERS=*
+      #-----------------------------------------------------------------
+      # ==== MATOMO INTEGRATION ====
+      # Optional: Integration with Matomo https://matomo.org that is installed to your server
+      # The address of the server where Matomo is hosted.
+      #- MATOMO_ADDRESS=https://example.com/matomo
+      # The value of the site ID given in Matomo server for Wekan
+      #- MATOMO_SITE_ID=1
+      # The option do not track which enables users to not be tracked by matomo
+      #- MATOMO_DO_NOT_TRACK=true
+      # The option that allows matomo to retrieve the username:
+      #- MATOMO_WITH_USERNAME=true
+      #-----------------------------------------------------------------
+      # ==== BROWSER POLICY AND TRUSTED IFRAME URL ====
+      # Enable browser policy and allow one trusted URL that can have iframe that has Wekan embedded inside.
+      # Setting this to false is not recommended, it also disables all other browser policy protections
+      # and allows all iframing etc. See wekan/server/policy.js
+      - BROWSER_POLICY_ENABLED=true
+      # When browser policy is enabled, HTML code at this Trusted URL can have iframe that embeds Wekan inside.
+      #- TRUSTED_URL=https://intra.example.com
+      #-----------------------------------------------------------------
+      # ==== METRICS ALLOWED IP ADDRESSES ====
+      # https://github.com/wekan/wekan/wiki/Metrics
+      #- METRICS_ALLOWED_IP_ADDRESSES=192.168.0.100,192.168.0.200
+      #-----------------------------------------------------------------
+      # ==== OUTGOING WEBHOOKS ====
+      # What to send to Outgoing Webhook, or leave out. If commented out the default values will be: cardId,listId,oldListId,boardId,comment,user,card,commentId,swimlaneId,customerField,customFieldValue
+      #- WEBHOOKS_ATTRIBUTES=cardId,listId,oldListId,boardId,comment,user,card,commentId
+      #-----------------------------------------------------------------
+      # ==== Debug OIDC OAuth2 etc ====
+      #- DEBUG=true
+      #---------------------------------------------
+      # ==== AUTOLOGIN WITH OIDC/OAUTH2 ====
+      # https://github.com/wekan/wekan/wiki/autologin
+      #- OIDC_REDIRECTION_ENABLED=true
+      #-----------------------------------------------------------------
+      # ==== OAUTH2 ORACLE on premise identity manager OIM ====
+      #- ORACLE_OIM_ENABLED=true
+      #-----------------------------------------------------------------
+      # ==== OAUTH2 AZURE ====
+      # https://github.com/wekan/wekan/wiki/Azure
+      # 1) Register the application with Azure. Make sure you capture
+      #    the application ID as well as generate a secret key.
+      # 2) Configure the environment variables. This differs slightly
+      #     by installation type, but make sure you have the following:
+      #- OAUTH2_ENABLED=true
+      # Optional OAuth2 CA Cert, see https://github.com/wekan/wekan/issues/3299
+      #- OAUTH2_CA_CERT=ABCD1234
+      # Use OAuth2 ADFS additional changes. Also needs OAUTH2_ENABLED=true setting.
+      #- OAUTH2_ADFS_ENABLED=false
+      # OAuth2 login style: popup or redirect.
+      #- OAUTH2_LOGIN_STYLE=redirect
+      # Application GUID captured during app registration:
+      #- OAUTH2_CLIENT_ID=xxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxx
+      # Secret key generated during app registration:
+      #- OAUTH2_SECRET=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
+      #- OAUTH2_SERVER_URL=https://login.microsoftonline.com/
+      #- OAUTH2_AUTH_ENDPOINT=/oauth2/v2.0/authorize
+      #- OAUTH2_USERINFO_ENDPOINT=https://graph.microsoft.com/oidc/userinfo
+      #- OAUTH2_TOKEN_ENDPOINT=/oauth2/v2.0/token
+      # The claim name you want to map to the unique ID field:
+      #- OAUTH2_ID_MAP=email
+      # The claim name you want to map to the username field:
+      #- OAUTH2_USERNAME_MAP=email
+      # The claim name you want to map to the full name field:
+      #- OAUTH2_FULLNAME_MAP=name
+      # The claim name you want to map to the email field:
+      #- OAUTH2_EMAIL_MAP=email
+      #-----------------------------------------------------------------
+      # ==== OAUTH2 Nextcloud ====
+      # 1) Register the application with Nextcloud: https://your.nextcloud/index.php/settings/admin/security
+      #    Make sure you capture the application ID as well as generate a secret key.
+      #    Use https://your.wekan/_oauth/oidc for the redirect URI.
+      # 2) Configure the environment variables. This differs slightly
+      #     by installation type, but make sure you have the following:
+      #- OAUTH2_ENABLED=true
+      # OAuth2 login style: popup or redirect.
+      #- OAUTH2_LOGIN_STYLE=redirect
+      # Application GUID captured during app registration:
+      #- OAUTH2_CLIENT_ID=xxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxx
+      # Secret key generated during app registration:
+      #- OAUTH2_SECRET=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
+      #- OAUTH2_SERVER_URL=https://your-nextcloud.tld
+      #- OAUTH2_AUTH_ENDPOINT=/index.php/apps/oauth2/authorize
+      #- OAUTH2_USERINFO_ENDPOINT=/ocs/v2.php/cloud/user?format=json
+      #- OAUTH2_TOKEN_ENDPOINT=/index.php/apps/oauth2/api/v1/token
+      # The claim name you want to map to the unique ID field:
+      #- OAUTH2_ID_MAP=id
+      # The claim name you want to map to the username field:
+      #- OAUTH2_USERNAME_MAP=id
+      # The claim name you want to map to the full name field:
+      #- OAUTH2_FULLNAME_MAP=display-name
+      # The claim name you want to map to the email field:
+      #- OAUTH2_EMAIL_MAP=email
+      #-----------------------------------------------------------------
+      # ==== OAUTH2 KEYCLOAK ====
+      # https://github.com/wekan/wekan/wiki/Keycloak  <== MAPPING INFO, REQUIRED
+      #- OAUTH2_ENABLED=true
+      # OAuth2 login style: popup or redirect.
+      #- OAUTH2_LOGIN_STYLE=redirect
+      #- OAUTH2_CLIENT_ID=<Keycloak create Client ID>
+      #- OAUTH2_SERVER_URL=<Keycloak server name>/auth
+      #- OAUTH2_AUTH_ENDPOINT=/realms/<keycloak realm>/protocol/openid-connect/auth
+      #- OAUTH2_USERINFO_ENDPOINT=/realms/<keycloak realm>/protocol/openid-connect/userinfo
+      #- OAUTH2_TOKEN_ENDPOINT=/realms/<keycloak realm>/protocol/openid-connect/token
+      #- OAUTH2_SECRET=<keycloak client secret>
+      #-----------------------------------------------------------------
+      # ==== OAUTH2 DOORKEEPER ====
+      # https://github.com/wekan/wekan/issues/1874
+      # https://github.com/wekan/wekan/wiki/OAuth2
+      # Enable the OAuth2 connection
+      #- OAUTH2_ENABLED=true
+      # OAuth2 docs: https://github.com/wekan/wekan/wiki/OAuth2
+      # OAuth2 login style: popup or redirect.
+      #- OAUTH2_LOGIN_STYLE=redirect
+      # OAuth2 Client ID.
+      #- OAUTH2_CLIENT_ID=abcde12345
+      # OAuth2 Secret.
+      #- OAUTH2_SECRET=54321abcde
+      # OAuth2 Server URL.
+      #- OAUTH2_SERVER_URL=https://chat.example.com
+      # OAuth2 Authorization Endpoint.
+      #- OAUTH2_AUTH_ENDPOINT=/oauth/authorize
+      # OAuth2 Userinfo Endpoint.
+      #- OAUTH2_USERINFO_ENDPOINT=/oauth/userinfo
+      # OAuth2 Token Endpoint.
+      #- OAUTH2_TOKEN_ENDPOINT=/oauth/token
+      # OAUTH2 ID Token Whitelist Fields.
+      #- OAUTH2_ID_TOKEN_WHITELIST_FIELDS=""
+      # OAUTH2 Request Permissions.
+      #- OAUTH2_REQUEST_PERMISSIONS=openid profile email
+      # OAuth2 ID Mapping
+      #- OAUTH2_ID_MAP=
+      # OAuth2 Username Mapping
+      #- OAUTH2_USERNAME_MAP=
+      # OAuth2 Fullname Mapping
+      #- OAUTH2_FULLNAME_MAP=
+      # OAuth2 Email Mapping
+      #- OAUTH2_EMAIL_MAP=
+      #-----------------------------------------------------------------
+      # ==== LDAP: UNCOMMENT ALL TO ENABLE LDAP ====
+      # https://github.com/wekan/wekan/wiki/LDAP
+      # For Snap settings see https://github.com/wekan/wekan-snap/wiki/Supported-settings-keys
+      # Most settings work both on Snap and Docker below.
+      # Note: Do not add single quotes '' to variables. Having spaces still works without quotes where required.
+      #
+      # The default authentication method used if a user does not exist to create and authenticate. Can be set as ldap.
+      # (this is set properly in the Admin Panel, changing this item does not remove Password login option)
+      #- DEFAULT_AUTHENTICATION_METHOD=ldap
+      #
+      # Enable or not the connection by the LDAP
+      #- LDAP_ENABLE=true
+      #
+      # The port of the LDAP server
+      #- LDAP_PORT=389
+      #
+      # The host server for the LDAP server
+      #- LDAP_HOST=localhost
+      #
+      #-----------------------------------------------------------------
+      # ==== LDAP AD Simple Auth ====
+      #
+      # Set to true, if you want to connect with Active Directory by Simple Authentication.
+      # When using AD Simple Auth, LDAP_BASEDN is not needed.
+      #
+      # Example:
+      #- LDAP_AD_SIMPLE_AUTH=true
+      #
+      # === LDAP User Authentication ===
+      #
+      # a) Option to login to the LDAP server with the user's own username and password, instead of
+      #    an administrator key. Default: false (use administrator key).
+      #
+      # b) When using AD Simple Auth, set to true, when login user is used for binding,
+      #    and LDAP_BASEDN is not needed.
+      #
+      # Example:
+      #- LDAP_USER_AUTHENTICATION=true
+      #
+      # Which field is used to find the user for the user authentication. Default: uid.
+      #- LDAP_USER_AUTHENTICATION_FIELD=uid
+      #
+      # === LDAP Default Domain ===
+      #
+      # a) In case AD SimpleAuth is configured, the default domain is appended to the given
+      #    loginname for creating the correct username for the bind request to AD.
+      #
+      # b) The default domain of the ldap it is used to create email if the field is not map
+      #     correctly with the LDAP_SYNC_USER_DATA_FIELDMAP
+      #
+      # Example :
+      #- LDAP_DEFAULT_DOMAIN=mydomain.com
+      #
+      #-----------------------------------------------------------------
+      # ==== LDAP BASEDN Auth ====
+      #
+      # The base DN for the LDAP Tree
+      #- LDAP_BASEDN=ou=user,dc=example,dc=org
+      #
+      #-----------------------------------------------------------------
+      # Fallback on the default authentication method
+      #- LDAP_LOGIN_FALLBACK=false
+      #
+      # Reconnect to the server if the connection is lost
+      #- LDAP_RECONNECT=true
+      #
+      # Overall timeout, in milliseconds
+      #- LDAP_TIMEOUT=10000
+      #
+      # Specifies the timeout for idle LDAP connections in milliseconds
+      #- LDAP_IDLE_TIMEOUT=10000
+      #
+      # Connection timeout, in milliseconds
+      #- LDAP_CONNECT_TIMEOUT=10000
+      #
+      # If the LDAP needs a user account to search
+      #- LDAP_AUTHENTIFICATION=true
+      #
+      # The search user DN - You need quotes when you have spaces in parameters
+      # 2 examples:
+      #- LDAP_AUTHENTIFICATION_USERDN=CN=ldap admin,CN=users,DC=domainmatter,DC=lan
+      #- LDAP_AUTHENTIFICATION_USERDN=CN=wekan_adm,OU=serviceaccounts,OU=admin,OU=prod,DC=mydomain,DC=com
+      #
+      # The password for the search user
+      #- LDAP_AUTHENTIFICATION_PASSWORD=pwd
+      #
+      # Enable logs for the module
+      #- LDAP_LOG_ENABLED=true
+      #
+      # If the sync of the users should be done in the background
+      #- LDAP_BACKGROUND_SYNC=false
+      #
+      # At which interval does the background task sync.
+      # The format must be as specified in:
+      # https://bunkat.github.io/later/parsers.html#text
+      #- LDAP_BACKGROUND_SYNC_INTERVAL=every 1 hour
+      #
+      #- LDAP_BACKGROUND_SYNC_KEEP_EXISTANT_USERS_UPDATED=false
+      #
+      #- LDAP_BACKGROUND_SYNC_IMPORT_NEW_USERS=false
+      #
+      # If using LDAPS: LDAP_ENCRYPTION=ssl
+      #- LDAP_ENCRYPTION=false
+      #
+      # The certification for the LDAPS server. Certificate needs to be included in this docker-compose.yml file.
+      #- LDAP_CA_CERT=-----BEGIN CERTIFICATE-----MIIE+G2FIdAgIC...-----END CERTIFICATE-----
+      #
+      # Reject Unauthorized Certificate
+      #- LDAP_REJECT_UNAUTHORIZED=false
+      #
+      # Optional extra LDAP filters. Don't forget the outmost enclosing parentheses if needed
+      #- LDAP_USER_SEARCH_FILTER=
+      #
+      # base (search only in the provided DN), one (search only in the provided DN and one level deep), or sub (search the whole subtree)
+      #- LDAP_USER_SEARCH_SCOPE=one
+      #
+      # Which field is used to find the user, like uid / sAMAccountName
+      #- LDAP_USER_SEARCH_FIELD=sAMAccountName
+      #
+      # Used for pagination (0=unlimited)
+      #- LDAP_SEARCH_PAGE_SIZE=0
+      #
+      # The limit number of entries (0=unlimited)
+      #- LDAP_SEARCH_SIZE_LIMIT=0
+      #
+      # Enable group filtering. Note the authenticated ldap user must be able to query all relevant group data with own login data from ldap.
+      #- LDAP_GROUP_FILTER_ENABLE=false
+      #
+      # The object class for filtering. Example: group
+      #- LDAP_GROUP_FILTER_OBJECTCLASS=
+      #
+      # The attribute of a group identifying it. Example: cn
+      #- LDAP_GROUP_FILTER_GROUP_ID_ATTRIBUTE=
+      #
+      # The attribute inside a group object listing its members. Example: member
+      #- LDAP_GROUP_FILTER_GROUP_MEMBER_ATTRIBUTE=
+      #
+      # The format of the value of LDAP_GROUP_FILTER_GROUP_MEMBER_ATTRIBUTE. Example: 'dn' if the users dn is saved as value into the attribute.
+      #- LDAP_GROUP_FILTER_GROUP_MEMBER_FORMAT=
+      #
+      # The group name (id) that matches all users.
+      #- LDAP_GROUP_FILTER_GROUP_NAME=
+      #
+      # LDAP_UNIQUE_IDENTIFIER_FIELD : This field is sometimes class GUID (Globally Unique Identifier). Example: guid
+      #- LDAP_UNIQUE_IDENTIFIER_FIELD=
+      #
+      # LDAP_UTF8_NAMES_SLUGIFY : Convert the username to utf8
+      #- LDAP_UTF8_NAMES_SLUGIFY=true
+      #
+      # LDAP_USERNAME_FIELD : Which field contains the ldap username. username / sAMAccountName
+      #- LDAP_USERNAME_FIELD=sAMAccountName
+      #
+      # LDAP_FULLNAME_FIELD : Which field contains the ldap fullname. fullname / sAMAccountName
+      #- LDAP_FULLNAME_FIELD=fullname
+      #
+      #- LDAP_MERGE_EXISTING_USERS=false
+      #
+      # Allow existing account matching by e-mail address when username does not match
+      #- LDAP_EMAIL_MATCH_ENABLE=true
+      #
+      # LDAP_EMAIL_MATCH_REQUIRE : require existing account matching by e-mail address when username does match
+      #- LDAP_EMAIL_MATCH_REQUIRE=true
+      #
+      # LDAP_EMAIL_MATCH_VERIFIED : require existing account email address to be verified for matching
+      #- LDAP_EMAIL_MATCH_VERIFIED=true
+      #
+      # LDAP_EMAIL_FIELD : which field contains the LDAP e-mail address
+      #- LDAP_EMAIL_FIELD=mail
+      #-----------------------------------------------------------------
+      #- LDAP_SYNC_USER_DATA=false
+      #
+      #- LDAP_SYNC_USER_DATA_FIELDMAP={"cn":"name", "mail":"email"}
+      #
+      #- LDAP_SYNC_GROUP_ROLES=
+      #
+      # The default domain of the ldap it is used to create email if the field is not map correctly
+      # with the LDAP_SYNC_USER_DATA_FIELDMAP is defined in setting LDAP_DEFAULT_DOMAIN above.
+      #
+      # Enable/Disable syncing of admin status based on ldap groups:
+      #- LDAP_SYNC_ADMIN_STATUS=true
+      #
+      # Comma separated list of admin group names to sync.
+      #- LDAP_SYNC_ADMIN_GROUPS=group1,group2
+      #---------------------------------------------------------------------
+      # Login to LDAP automatically with HTTP header.
+      # In below example for siteminder, at right side of = is header name.
+      #- HEADER_LOGIN_ID=HEADERUID
+      #- HEADER_LOGIN_FIRSTNAME=HEADERFIRSTNAME
+      #- HEADER_LOGIN_LASTNAME=HEADERLASTNAME
+      #- HEADER_LOGIN_EMAIL=HEADEREMAILADDRESS
+      #---------------------------------------------------------------------
+      # ==== LOGOUT TIMER, probably does not work yet ====
+      # LOGOUT_WITH_TIMER : Enables or not the option logout with timer
+      # example : LOGOUT_WITH_TIMER=true
+      #- LOGOUT_WITH_TIMER=
+      #
+      # LOGOUT_IN : The number of days
+      # example : LOGOUT_IN=1
+      #- LOGOUT_IN=
+      #
+      # LOGOUT_ON_HOURS : The number of hours
+      # example : LOGOUT_ON_HOURS=9
+      #- LOGOUT_ON_HOURS=
+      #
+      # LOGOUT_ON_MINUTES : The number of minutes
+      # example : LOGOUT_ON_MINUTES=55
+      #- LOGOUT_ON_MINUTES=
+      #-------------------------------------------------------------------
+      # Hide password login form
+      # - PASSWORD_LOGIN_ENABLED=true
+      #-------------------------------------------------------------------
+      #- CAS_ENABLED=true
+      #- CAS_BASE_URL=https://cas.example.com/cas
+      #- CAS_LOGIN_URL=https://cas.example.com/login
+      #- CAS_VALIDATE_URL=https://cas.example.com/cas/p3/serviceValidate
+      #---------------------------------------------------------------------
+      #- SAML_ENABLED=true
+      #- SAML_PROVIDER=
+      #- SAML_ENTRYPOINT=
+      #- SAML_ISSUER=
+      #- SAML_CERT=
+      #- SAML_IDPSLO_REDIRECTURL=
+      #- SAML_PRIVATE_KEYFILE=
+      #- SAML_PUBLIC_CERTFILE=
+      #- SAML_IDENTIFIER_FORMAT=
+      #- SAML_LOCAL_PROFILE_MATCH_ATTRIBUTE=
+      #- SAML_ATTRIBUTES=
+      #---------------------------------------------------------------------
+      # Wait spinner to use
+      # - WAIT_SPINNER=Bounce
+      #---------------------------------------------------------------------
+    depends_on:
+      - wekandb
+    volumes:
+      - /etc/localtime:/etc/localtime:ro
+      - wekan-files:/data:rw
+
+#---------------------------------------------------------------------------------
+# ==== OPTIONAL: SHARE DATABASE TO OFFICE LAN AND REMOTE VPN ====
+#  When using Wekan both at office LAN and remote VPN:
+#    1) Have above Wekan docker container config with LAN IP address
+#    2) Copy all of above wekan container config below, look above of this part above and all config below it,
+#       before above depends_on: part:
+#
+#         wekan:
+#            #-------------------------------------------------------------------------------------
+#            # ==== MONGODB AND METEOR VERSION ====
+#            # a) For Wekan Meteor 1.8.x version at meteor-1.8 branch, .....
+#
+#
+#       and change name to different name like wekan2 or wekanvpn, and change ROOT_URL to server VPN IP
+#       address.
+#    3) This way both Wekan containers can use same MongoDB database
+#       and see the same Wekan boards.
+#    4) You could also add 3rd Wekan container for 3rd network etc.
+# EXAMPLE:
+#  wekan2:
+#    ....COPY CONFIG FROM ABOVE TO HERE...
+#    environment:
+#      - ROOT_URL='http://10.10.10.10'
+#      ...COPY CONFIG FROM ABOVE TO HERE...
+#---------------------------------------------------------------------------------
+
+# OPTIONAL NGINX CONFIG FOR REVERSE PROXY
+#  nginx:
+#    image: nginx
+#    container_name: nginx
+#    restart: always
+#    networks:
+#      - wekan-tier
+#    depends_on:
+#      - wekan
+#    ports:
+#      - 80:80
+#      - 443:443
+#    volumes:
+#      - ./nginx/ssl:/etc/nginx/ssl/:ro
+#      - ./nginx/nginx.conf:/etc/nginx/nginx.conf:ro
+## Alternative volume config:
+##   volumes:
+##     - ./nginx/nginx.conf:/etc/nginx/conf.d/default.conf:ro
+##     - ./nginx/ssl/ssl.conf:/etc/nginx/conf.d/ssl/ssl.conf:ro
+##     - ./nginx/ssl/testvm-ehu.crt:/etc/nginx/conf.d/ssl/certs/mycert.crt:ro
+##     - ./nginx/ssl/testvm-ehu.key:/etc/nginx/conf.d/ssl/certs/mykey.key:ro
+##     - ./nginx/ssl/pphrase:/etc/nginx/conf.d/ssl/pphrase:ro
+
+volumes:
+  wekan-files:
+    driver: local
+  wekan-db:
+    driver: local
+  wekan-db-dump:
+    driver: local
+
+networks:
+  wekan-tier:
+    driver: bridge

docs/wekan-snap.wiki/Automatic-update-schedule.md

@@ -0,0 +1,27 @@
+## a) Install all Snap updates automatically between 02:00AM and 04:00AM
+```
+snap set core refresh.schedule=02:00-04:00
+```
+## b) Update once a week at Sunday between 02:00AM and 04:00AM
+```
+snap set core refresh.schedule=sun,02:00-04:00
+```
+## c) Update last Sunday of the month between 02:00AM and 04:00AM
+```
+snap set core refresh.schedule=sun5,02:00-04:00
+```
+## [Update until specific day](https://snapcraft.io/docs/keeping-snaps-up-to-date#heading--refresh-hold) and other examples.
+
+## If required, you can disable all Snap updates
+at `/etc/hosts` by adding a line:
+```
+127.0.0.1 api.snapcraft.io
+```
+## No schedule set
+
+Automatic upgrades happen sometime after Wekan is released, usually quite soon. 
+
+## Manual update immediately
+
+`sudo snap refresh`
+

docs/wekan-snap.wiki/Backup-and-restore.md

@@ -0,0 +1,96 @@
+Also see [Docker Backup and Restore](https://github.com/wekan/wekan/wiki/Export-Docker-Mongo-Data)
+
+# MongoDB client based backup
+
+## Install MongoDB shell 3.2.x
+
+[MongoDB 3.2.x shell for Ubuntu](https://docs.mongodb.com/v3.2/tutorial/install-mongodb-on-ubuntu/)
+
+## Backup script for MongoDB Data, if running Snap MongoDB at port 27019
+
+```sh
+#!/bin/bash
+now=$(date +'%Y-%m-%d_%H.%M.%S')
+mkdir -p backups/$now
+cd backups/$now
+mongodump --port 27019
+# if running on source install, run for example: mongodump --port 27017)
+cd ..
+zip -r $now.zip $now
+cd ../..
+echo "\nBACKUP DONE."
+echo "Backup is at directory backups/${now}."
+echo "Backup is also archived to .zip file backups/${now}.zip"
+```
+
+# Manual Backup
+
+## Stop Wekan and Backup to directory called dump
+
+```
+sudo snap stop wekan.wekan
+
+mongodump --port 27019
+
+sudo snap start wekan.wekan
+```
+## Stop Wekan and Restore
+
+```
+sudo snap stop wekan.wekan
+
+## Only if you get errors about existing indexes, use this instead:
+## mongorestore -d wekan --drop --noIndexRestore --port 27019
+mongorestore -d wekan --drop --port 27019
+
+sudo snap start wekan.wekan
+```
+
+
+***
+
+
+# Snap based backup (less reliable, can disappear with snap remove wekan)
+
+## Setup backup directory
+
+Create backup directory and set permissions
+
+```
+$ sudo mkdir /var/snap/wekan/common/db-backups
+$ sudo chmod 777 /var/snap/wekan/common/db-backups
+```
+
+## Backup
+
+As normal user as archive:
+
+```
+$ wekan.database-backup
+```
+
+Backup is created in directory:
+
+```
+/var/snap/wekan/common/db-backups
+```
+
+There is optional Backup file is optional parameter `$ wekan.database-backup BACKUPFILENAME`, but probably it does not work.
+
+## List backups
+
+You need to first create one backup, otherwise this command shows error.
+
+To list existing backups in default directory, as normal user:
+
+```
+$ wekan.database-list-backups
+```
+
+## Restore backup
+
+As normal user:
+
+```
+$ wekan.database-restore FULL-PATH-TO-BACKUP-FILENAME
+```

docs/wekan-snap.wiki/Candidate-WeKan-Snap-Manual-Upgrade.md

@@ -0,0 +1,276 @@
+# NOTE: Using Candidate, that has MongoDB 6, that is newest version
+
+Required time: If your database size is 500 GB, maybe 4 to 8 hours, or more. So bring enough of pizza, party snacks, limonade etc.
+
+Warning: If you don't have enough disk space, you could get data loss.
+
+Warning2: When starting WeKan Candidate, it could temporarily save all attachments to `/var/snap/wekan/common/files/` or other directory below `common`. That's why xet7 is working on trying to create separate migration app that moves attachments to S3, and that WeKan could upload to S3. This upgrade experience could be improved later. It's just that there are some unknown unknows if there would be automatic upgrade, could it handle all upgrade and migration cases.
+
+If you are have time to try tro update Snap from WeKan Stable to newest WeKan Candidate, to see does update work or not.
+
+If you have problems, add comment to issue https://github.com/wekan/wekan/issues/4780
+
+## From WeKan Stable to Candidate
+
+### Preparation
+
+#### 1. Please read through all these below steps before starting, if possible.
+
+#### 2. Check your database size, and do you have enough disk space for upgrade:
+```
+sudo du -sh /var/snap/wekan/common
+
+df -h
+```
+For example, if your database size is 500 GB, and disk is nearly full, you need to stop WeKan and move to bigger disk. If disk gets full, there is possibility to MongoDB database corruption. Making mongodump could maybe take 2x of current size, or more.
+
+Some external disk related steps are at https://github.com/wekan/wekan/wiki/Repair-MongoDB
+
+#### 3. Problems usually are only, are attachments visible or not. Upgrade steps do not delete any files, if commands below are written correctly.
+
+Optional steps:
+
+a) Optionally, you could use [nosqlbooster](https://github.com/wekan/wekan/wiki/Backup#using-nosqlbooster-closed-source-mongodb-gui-with-wekan-snap-to-edit-mongodb-database) to save attachments to files, and export JSON to textfiles, before trying to update. There could also be files at `/var/snap/wekan/common/files` or other subdirectories. When saving attachments, note that there could be many files with same filename.
+
+b) Optinally, you can also save [all database content to JSON](https://github.com/wekan/wekan/wiki/Export-from-Wekan-Sandstorm-grain-.zip-file#11b-dump-database-to-json-text-files), but if your database is about 500 GB then it could be too much disk space required, because attachments are at base64 encoded text in JSON files. It's better ot save attachments with [nosqlbooster](https://github.com/wekan/wekan/wiki/Backup#using-nosqlbooster-closed-source-mongodb-gui-with-wekan-snap-to-edit-mongodb-database).
+
+#### 4. ssh to your server
+```
+ssh wekanserver
+```
+#### 5. Save snap settings and set it as executeable
+```
+sudo snap get wekan > snap-settings.sh
+
+chmod +x snap-settings.sh
+```
+#### 6. Edit `snap-settings.sh` to look like this, with nano or similar
+```
+sudo snap set wekan root-url='https://wekan.example.com'
+sudo snap set wekan port='80'
+```
+At nano, Save: Ctrl-o Enter
+
+At nano. Exit: Ctrl-x
+
+#### 7. Download newest MongoDB tools for your distro version that will work with MongoDB 5.x, but do not install it yet
+
+https://www.mongodb.com/try/download/database-tools
+
+For example, for Ubuntu 22.04, [mongodb-database-tools-ubuntu2204-x86_64-100.6.1.deb](https://fastdl.mongodb.org/tools/db/mongodb-database-tools-ubuntu2204-arm64-100.6.1.deb)
+
+#### 8. Remove old versions of MongoDB tools etc, if you have those
+
+List them:
+```
+dpkg -l | grep mongo
+```
+If that shows that you have old mongodb server also, check do you really use it, what is the size of database server files?
+```
+sudo du -sh /var/lib/mongodb
+```
+Do you have these files, or similar, that show where else mongodb raw database directory could be?
+```
+/etc/mongod.conf
+/etc/mongod/mongod.conf
+```
+Try to connect to it, and see if there is anything?
+```
+mongo
+```
+If it does not connect, maybe start MongoDB database, for example some of these commands:
+```
+sudo systemctl enable mongod
+sudo systemctl start mongod
+
+sudo systemctl enable mongodb
+sudo systemctl start mongod
+
+sudo /etc/init.d/mongod start
+```
+Try then again connect, and view what is there. In this example, if there is wekan database listed with `show dbs`:
+```
+mongo
+
+show dbs
+
+use wekan
+
+show collections
+
+db.users.count()
+
+db.users.find()
+```
+Also look is there `mongodb.list` packages repo?
+```
+sudo ls /etc/apt/sources.list.d/
+```
+If you have all of mongodb-org, try to remove all of them, with all related files:
+```
+sudo apt-get --purge remove mongo*
+```
+Delete mongodb repo:
+```
+sudo ls /etc/apt/sources.list.d/mongo*
+
+sudo apt update
+
+sudo apt clean
+
+sudo apt -y autoclean
+
+sudo apt -y autoremove
+```
+
+### Upgrade
+
+#### 9. Stop wekan app
+```
+sudo snap stop wekan.wekan
+```
+#### 10. Use WeKan Stable Snap mongodump version for dumping database
+```
+export LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/snap/wekan/current/lib/x86_64-linux-gnu
+
+export PATH="$PATH:/snap/wekan/current/bin"
+
+mongodump --port 27019
+```
+#### 11. Move common directory contents. There are raw database files and maybe some attachments.
+```
+sudo snap stop wekan
+
+sudo mkdir common
+
+sudo mv /var/snap/wekan/common/* common/
+
+sudo rm -rf /var/snap/wekan/common/*
+```
+#### 12. Change from Stable to Candidate
+```
+sudo snap refresh wekan --channel=latest/candidate
+```
+#### 13. Exit ssh and connect again, to not use old mongodump version anymore
+```
+exit
+
+ssh wekanserver
+```
+#### 14. Install mongodb tools for your distro version (from [step 7](#7-download-newest-mongodb-tools-for-your-distro-version-that-will-work-with-mongodb-5x-but-do-not-install-it-yet) above)
+```
+sudo dpkg -i mongodb-database-tools-ubuntu2204-x86_64-100.6.1.deb
+```
+If there is any errors, please copy all text from install process to comment to issue https://github.com/wekan/wekan/issues/4780
+
+When installing some package, if some dependendencies are missing, they can usually be installed with some of these commands, and installing continued with::
+```
+sudo apt-get -f install
+
+sudo dpkg --configure -a
+```
+If you get this kind of error, it means you have existing version of MongoDB Tools still installed, you should remove all those like at step 7 above:
+```
+Unpacking mongodb-database-tools (100.6.1) ...
+dpkg: error processing archive mongodb-database-tools-ubuntu2004-x86_64-100.6.1.deb (--install):
+ trying to overwrite '/usr/bin/bsondump', which is also in package mongo-tools 3.6.3-0ubuntu1
+```
+Sure there are options to force install this, for example this way, but not recommended:
+```
+sudo rm /usr/bin/bsondump
+
+sudo dpkg -i ...
+```
+Or other not recommended way, forcing overwrite:
+```
+sudo dpkg -i --force-overwrite mongodb-database-tools-ubuntu2004-x86_64-100.6.1.deb
+```
+But better would be to use that [step 7](#7-download-newest-mongodb-tools-for-your-distro-version-that-will-work-with-mongodb-5x-but-do-not-install-it-yet) above to remove all old mongodb packages and repo, and then install MongoDB tools.
+
+#### 15. Restore
+```
+sudo snap stop wekan
+
+sudo snap start wekan.mongodb
+
+mongorestore --drop --port 27019 --noIndexRestore
+```
+#### 16. Add back settings
+
+Recommended is to use [Caddy 2](https://github.com/wekan/wekan/wiki/Caddy-Webserver-Config) instead of Caddy1 that is included in WeKan Snap currently at 2022-12-21. Caddy 2 maybe will be included to WeKan Snap later.
+
+See if in your `snap-settings.sh` is this kind of command, are you using Caddy1 ?
+```
+sudo snap set wekan caddy-enabled='true'
+```
+If you use Caddy1, and have any domain settings in your `common/Caddyfile`, copy it back:
+```
+sudo cp common/Caddyfile /var/snap/wekan/common/
+```
+
+At [step 6](#6-edit-snap-settingssh-to-look-like-this-with-nano-or-similar) above, you did create script that adds back snap settings. Run it to restore those settings:
+```
+./snap-settings.sh
+```
+You could also copy that file to common directory, if you like, or just keep it in your current directory:
+```
+sudo cp snap-settings.sh /var/snap/wekan/common/
+```
+#### 17. Start WeKan
+```
+sudo snap start wekan
+```
+#### 18. Test are WeKan attachments visible
+
+#### 19. If you are using WeKan Snap Caddy1, if it does not work, change to Caddy2 https://github.com/wekan/wekan/wiki/Caddy-Webserver-Config
+
+#### 20. Backup and cleanup
+
+Create archive of old files, and transer it to your local laptop, save somewhere safe:
+```
+ssh wekanserver
+
+sudo su
+
+7z a old-wekan.7z snap-settings.sh common dump
+
+exit
+
+scp wekanserver:/root/old-wekan.7z .
+```
+And then delete old files from server. Do not delete `snap-settings.sh`.
+```
+ssh wekanserver
+
+rm -rf common dump
+```
+Also, keep [Daily Backups](https://github.com/wekan/wekan/wiki/Backup)
+
+
+## Oops it did not work. From WeKan Candidate back to Stable
+
+```
+sudo snap stop wekan
+
+sudo rm -rf /var/snap/wekan/common/*
+
+sudo snap refresh wekan --channel=latest/stable
+
+sudo snap stop wekan
+
+sudo rm -rf /var/snap/wekan/common/*
+
+sudo mv common/* /var/snap/wekan/common/
+
+sudo snap start wekan
+
+./snap-settings.sh
+```
+
+If you have problems, add comment to issue https://github.com/wekan/wekan/issues/4780
+
+## From WeKan Gantt GPL to WeKan Candidate
+
+- This is discontinued, Gantt features will be later added to WeKan MIT version.
+- Gantt version files are instead at `/var/snap/wekan-gantt-gpl/`
+- Gantt snap name is wekan-gantt-gpl

docs/wekan-snap.wiki/CentOS-7.md

@@ -0,0 +1,249 @@
+## CentOS 7 and RHEL7 and newer
+
+Alternatives:
+
+- Snap install like below. Automatic updates. Some time ago there were problems with [Snap on CentOS 7](https://github.com/wekan/wekan-snap/issues/103#issuecomment-571223099), that can result in updating not working properly, but that is a long time ago, and Snap version is currently 2020-04-29 installed at about 400 servers worldwide, according to Snap statistics that show only wordwide and per-country stats, not any more specific info. Please keep [daily backups](https://github.com/wekan/wekan/wiki/Backup).
+- Docker or Bash/SystemD install from https://wekan.github.io
+
+***
+
+[Wekan snap bug reports and feature requests](https://github.com/wekan/wekan-snap/issues)
+
+# Distro specific info how to install Snap on 64bit Linux
+
+https://snapcraft.io
+
+- CentOS 7, RHEL7 and newer, instructions below
+
+# Install Wekan
+
+### 1) Use root
+```
+sudo su
+```
+
+### 2) Install snap
+
+2019-11-12 If instead of Caddy you use Nginx in front of Wekan on CentOS 7, you should
+[disable selinux to prevent Nginx permission denied error](https://github.com/wekan/wekan/issues/2792).
+
+2018-11-05 Also see [new snapd on EPEL](https://forum.snapcraft.io/t/snapd-updates-in-fedora-epel-for-enterprise-linux/8310).
+
+Source: [Experimental CentOS7 snap](https://copr.fedorainfracloud.org/coprs/ngompa/snapcore-el7/) and [Forum post](https://forum.snapcraft.io/t/install-snapd-on-centos/1495/21)
+
+```
+yum makecache fast
+
+yum install yum-plugin-copr epel-release
+
+yum copr enable ngompa/snapcore-el7
+
+yum install snapd
+
+systemctl enable --now snapd.socket
+```
+
+### 3) Install Wekan. Set URL like (subdomain.)example.com(/suburl)
+```
+snap install wekan
+
+snap set wekan root-url='https://boards.example.com'
+```
+
+[MORE ROOT-URL EXAMPLES](https://github.com/wekan/wekan/wiki/Settings)
+
+### 4) Set port where Wekan runs, for example 80 if http, or local port 3001, if running behing proxy like Caddy
+```
+snap set wekan port='3001'
+
+systemctl restart snap.wekan.wekan
+```
+
+### 5) Install all Snap updates automatically between 02:00AM and 04:00AM
+```
+snap set core refresh.schedule=02:00-04:00
+```
+
+Automatic upgrades happen sometime after Wekan is released, or at scheduled time, or with `sudo snap refresh`
+
+### 6) Email and Other Settings
+
+```
+sudo snap set wekan mail-url='smtps://user:pass@mailserver.example.com:453'
+sudo snap set wekan mail-from='Wekan Boards <support@example.com>'
+```
+
+[Troubleshooting Email](https://github.com/wekan/wekan/wiki/Troubleshooting-Mail)
+
+## LDAP
+
+See [Supported Settings Keys](Supported-settings-keys#ldap)
+
+## [Matomo Web Analytics integration](Supported-settings-keys#matomo-web-analytics-integration)
+
+See [Supported Settings Keys](Supported-settings-keys#matomo-web-analytics-integration)
+
+## [Rocket.Chat providing OAuth2 login to Wekan](https://github.com/wekan/wekan/wiki/OAuth2)
+
+Also, if you have Rocket.Chat using LDAP/SAML/Google/etc for logging into Rocket.Chat, then same users can login to Wekan when Rocket.Chat is providing OAuth2 login to Wekan. 
+
+# Optional: Install Caddy - Every Site on HTTPS
+
+a) Personal non-commercial use only, included
+
+b) Commercial use: see https://caddyserver.com/products/licenses
+   and [commercial usage issue](https://github.com/wekan/wekan-snap/issues/39),
+   contact Wekan maintainer x@xet7.org about how to enable commercial version
+   of caddy.
+
+
+### 7) Add domain to Caddy config
+```
+nano /var/snap/wekan/common/Caddyfile
+```
+
+### 8) Replace first top line of text with (subdomain.)example.com(/suburl), without any beginning of http/https
+
+Example Caddyfile config.
+
+"alpn http/1.1" is because Firefox Inspect Console does not support http/2, so [turning it off](https://github.com/wekan/wekan/issues/934) so that Firefox would not show wss websocket errors. Chrome console supports http/2.
+
+This uses free Let's Encrypt SSL. You can also use [free CloudFlare wildcard SSL or any other SSL cert](https://github.com/wekan/wekan/wiki/Caddy-Webserver-Config).
+```
+boards.example.com {
+	tls {
+	  alpn http/1.1
+	}
+
+	proxy / localhost:3001 {
+	  websocket
+	  transparent
+	}
+}
+```
+Caddyfile example of static directory listing:
+```
+# Files have these permissions:
+#   chown root:root /var/snap/wekan/common/download.example.com
+download.example.com {
+	root /var/snap/wekan/common/download.example.com
+	browse
+}
+```
+[MORE Caddyfile EXAMPLES](https://github.com/caddyserver/examples)
+
+### 9) Enable Caddy automatic https
+```
+snap set wekan caddy-enabled='true'
+```
+## 10) Reboot
+
+## 11) Disable and enable wekan
+
+```
+$ sudo snap disable wekan
+$ sudo snap enable wekan
+```
+If you use the mongodb port for another app, then, change it too:
+```
+$ sudo snap set wekan mongodb-port=27019
+```
+
+## 12) Add users
+
+[Add users](https://github.com/wekan/wekan/wiki/Adding-users)
+
+[Forgot Password](https://github.com/wekan/wekan/wiki/Forgot-Password)
+
+## MongoDB CLI
+
+1) Install MongoDB 3.2.x tools, and run on CLI:
+
+`mongo --port 27019`
+
+***
+
+
+# Older install docs
+
+```
+$ sudo snap install wekan
+```
+
+IMPORTANT: SETUP [URL SETTINGS](#url-settings) BELOW, SO OPENING CARDS ETC WORKS CORRECTLY. More info at [Supported settings keys](Supported-settings-keys).
+
+**IMPORTANT: Wekan Snap is bleeding edge, so any commits made to the wekan repository are pushed to the snap directly. Decide for yourself if you want to run wekan snap in production**  
+
+Make sure you have connected all interfaces, check more by calling
+
+```
+$ snap interfaces
+```
+
+Wekan has two services, to check status/restart/stop use systemd commands:
+
+You can use these service commands:
+- status
+- start
+- stop
+- restart
+
+MongoDB service:
+
+```
+$ sudo systemctl status snap.wekan.mongodb
+```
+
+Wekan service:
+
+```
+$ sudo systemctl status snap.wekan.wekan
+```
+
+## URL settings
+
+[Nginx and Snap settings for https://example.com/wekan sub-url](https://github.com/wekan/wekan/wiki/Nginx-Webserver-Config)
+
+Full URL to your Wekan, for example:
+
+### Run Wekan on local network on selected port on computer IP address
+
+```
+$ sudo snap set wekan root-url='http://192.168.10.100:5000'
+```
+
+### Run Wekan only locally on selected port
+
+```
+$ sudo snap set wekan root-url='http://localhost:5000'
+```
+
+### Nginx or Caddy webserver in front of Wekan
+
+[Nginx](https://github.com/wekan/wekan/wiki/Nginx-Webserver-Config) or [Caddy](https://github.com/wekan/wekan/wiki/Caddy-Webserver-Config) is in front, full URL to real web address URL of Nginx or Caddy.
+
+```
+$ sudo snap set wekan root-url='https://example.com'
+```
+
+or
+
+```
+$ sudo snap set wekan root-url='https://example.com/wekan'
+```
+
+## Port settings
+
+Localhost port where Wekan is running. This does not need to be exposed to Internet when running behind Nginx or Caddy.
+
+```
+$ sudo snap set wekan port='<your_port>'
+```
+
+## Restart Wekan after changes
+
+```
+$ sudo systemctl restart snap.wekan.wekan
+```
+
+When running without any additional settings, Wekan is at http://localhost:8080

docs/wekan-snap.wiki/CentOS8.md

@@ -0,0 +1,20 @@
+Using CentOS 8 Stream.
+
+1. Install Snap https://snapcraft.io/docs/installing-snap-on-centos
+
+2. Reboot
+
+3. With terminal, test latest release candidate, to your server IP address:
+
+```
+su
+snap install wekan --channel=latest/candidate
+snap set wekan root-url='http://YOUR-IP-ADDRESS'
+snap set wekan port='80'
+```
+
+4. For additional server options, see https://github.com/wekan/wekan/wiki/Settings
+
+5. For adding users, see https://github.com/wekan/wekan/wiki/Adding-users
+
+6. For other login option, see right menu at https://github.com/wekan/wekan/wiki

docs/wekan-snap.wiki/Home.md

@@ -0,0 +1,14 @@
+Welcome to the wekan-snap documentation wiki!
+
+## Wekan snap at web
+
+https://uappexplorer.com/snap/ubuntu/wekan
+
+## Help command after installing
+```
+$ wekan.help
+```
+
+**All of commandline help is also in this wiki, categorized to their own wiki pages.**
+
+See also [Wekan documentation](https://github.com/wekan/wekan/wiki)

docs/wekan-snap.wiki/Install-snap-with-Ansible.md

@@ -0,0 +1,15 @@
+## Ansible install by Pavel Stratil
+
+[Info source](https://github.com/wekan/wekan/issues/1106)
+
+## Original repos, please add feature requests there
+
+https://github.com/Vaizard/mage-wekan
+
+https://github.com/vaizard/mage-snapd
+
+## Wekan's forked version
+
+https://github.com/wekan/mage-wekan
+
+https://github.com/wekan/mage-snapd

docs/wekan-snap.wiki/Install.md

@@ -0,0 +1,261 @@
+Snap for Linux, install to your own server or laptop. Automatic Updates. Only Standalone Wekan.
+
+If on Snap Stable automatic update breaks something, [report Wekan for Snap bugs and feature requests here](https://github.com/wekan/wekan-snap/issues), so it can be fixed on some automatic update. If security is critical, keep behind firewall, without any ports open to Internet.
+
+# Distro specific info how to install Snap on 64bit Linux
+
+https://snapcraft.io
+
+- Recommended: Newest 1) Ubuntu 2) Debian based distro
+- Arch
+- Fedora
+- Solus
+- OpenSUSE
+- Gentoo
+- Manjaro
+- Elementary OS
+- [CentOS 7, RHEL7 and newer](CentOS-7)
+- [CentOS 8](CentOS8)
+
+How ROOT_URL is set:
+https://github.com/wekan/wekan/wiki/Settings
+
+Here is how to add users:
+https://github.com/wekan/wekan/wiki/Adding-users
+
+How to switch between WeKan and WeKan Gantt GPL:
+https://github.com/wekan/wekan/issues/2870#issuecomment-721364824
+
+Newest Snap WeKan does not yet have migration to newest MongoDB. Here is how to try newer WeKan test candidate version, and migrate database manually:
+https://github.com/wekan/wekan/issues/4505#issuecomment-1158380746
+
+Below is how to install Snap.
+
+# Install Wekan
+
+### 1) Use root
+```
+sudo su
+```
+
+### 2) Install snap
+
+a) Debian or Ubuntu
+```
+apt install snapd
+```
+
+b) Other distros
+
+See [Snapcraft website](https://snapcraft.io).
+
+### 3) Install Wekan. Set URL like (subdomain.)example.com(/suburl)
+```
+snap install wekan
+
+snap set wekan root-url='https://wekan.example.com'
+```
+
+[MORE ROOT-URL EXAMPLES](https://github.com/wekan/wekan/wiki/Settings)
+
+### 4) Set port where Wekan runs, for example 80 if http, or local port 3001, if running behing proxy like Caddy
+```
+snap set wekan port='3001'
+
+systemctl restart snap.wekan.wekan
+```
+
+### 5) Install all Snap updates automatically between 02:00AM and 04:00AM
+```
+snap set core refresh.schedule=02:00-04:00
+```
+Update once a week at Sunday between 02:00AM and 04:00AM
+```
+snap set core refresh.schedule=sun,02:00-04:00
+```
+Update last Sunday of the month between 02:00AM and 04:00AM
+```
+snap set core refresh.schedule=sun5,02:00-04:00
+```
+[Update until specific day](https://snapcraft.io/docs/keeping-snaps-up-to-date#heading--refresh-hold) and other examples.
+
+If required, you can disable all Snap updates at `/etc/hosts` by adding a line:
+```
+127.0.0.1 api.snapcraft.io
+```
+
+Automatic upgrades happen sometime after Wekan is released, or at scheduled time, or with `sudo snap refresh`
+
+### 6) Email and Other Settings
+
+```
+sudo snap set wekan mail-url='smtps://user:pass@mailserver.example.com:453'
+sudo snap set wekan mail-from='Wekan Boards <support@example.com>'
+```
+
+[Troubleshooting Email](https://github.com/wekan/wekan/wiki/Troubleshooting-Mail)
+
+## LDAP
+
+See [Supported Settings Keys](Supported-settings-keys#ldap)
+
+## [Matomo Web Analytics integration](Supported-settings-keys#matomo-web-analytics-integration)
+
+See [Supported Settings Keys](Supported-settings-keys#matomo-web-analytics-integration)
+
+## [Rocket.Chat providing OAuth2 login to Wekan](https://github.com/wekan/wekan/wiki/OAuth2)
+
+Also, if you have Rocket.Chat using LDAP/SAML/Google/etc for logging into Rocket.Chat, then same users can login to Wekan when Rocket.Chat is providing OAuth2 login to Wekan. 
+
+# Optional: Install Caddy - Every Site on HTTPS
+
+### 7) Add domain to Caddy config
+```
+nano /var/snap/wekan/common/Caddyfile
+```
+
+### 8) Replace first top line of text with (subdomain.)example.com(/suburl), without any beginning of http/https
+
+Example Caddyfile config.
+
+"alpn http/1.1" is because Firefox Inspect Console does not support http/2, so [turning it off](https://github.com/wekan/wekan/issues/934) so that Firefox would not show wss websocket errors. Chrome console supports http/2.
+
+This uses free Let's Encrypt SSL. You can also use [free CloudFlare wildcard SSL or any other SSL cert](https://github.com/wekan/wekan/wiki/Caddy-Webserver-Config).
+```
+boards.example.com {
+	tls {
+	  alpn http/1.1
+	}
+
+	proxy / localhost:3001 {
+	  websocket
+	  transparent
+	}
+}
+```
+Caddyfile example of static directory listing:
+```
+# Files have these permissions:
+#   chown root:root /var/snap/wekan/common/download.example.com
+download.example.com {
+	root /var/snap/wekan/common/download.example.com
+	browse
+}
+```
+[MORE Caddyfile EXAMPLES](https://github.com/caddyserver/examples)
+
+### 9) Enable Caddy automatic https
+```
+snap set wekan caddy-enabled='true'
+```
+## 10) Reboot
+
+## 11) Disable and enable wekan
+
+```
+$ sudo snap disable wekan
+$ sudo snap enable wekan
+```
+If you use the mongodb port for another app, then, change it too:
+```
+$ sudo snap set wekan mongodb-port=27019
+```
+
+## 12) Add users
+
+[Add users](https://github.com/wekan/wekan/wiki/Adding-users)
+
+[Forgot Password](https://github.com/wekan/wekan/wiki/Forgot-Password)
+
+## MongoDB CLI
+
+1) Install MongoDB 3.2.x tools, and run on CLI:
+
+`mongo --port 27019`
+
+***
+
+
+# Older install docs
+
+```
+$ sudo snap install wekan
+```
+
+IMPORTANT: SETUP [URL SETTINGS](#url-settings) BELOW, SO OPENING CARDS ETC WORKS CORRECTLY. More info at [Supported settings keys](Supported-settings-keys).
+
+**IMPORTANT: Wekan Snap is bleeding edge, so any commits made to the wekan repository are pushed to the snap directly. Decide for yourself if you want to run wekan snap in production**  
+
+Make sure you have connected all interfaces, check more by calling
+
+```
+$ snap interfaces
+```
+
+Wekan has two services, to check status/restart/stop use systemd commands:
+
+You can use these service commands:
+- status
+- start
+- stop
+- restart
+
+MongoDB service:
+
+```
+$ sudo systemctl status snap.wekan.mongodb
+```
+
+Wekan service:
+
+```
+$ sudo systemctl status snap.wekan.wekan
+```
+
+## URL settings
+
+[Nginx and Snap settings for https://example.com/wekan sub-url](https://github.com/wekan/wekan/wiki/Nginx-Webserver-Config)
+
+Full URL to your Wekan, for example:
+
+### Run Wekan on local network on selected port on computer IP address
+
+```
+$ sudo snap set wekan root-url='http://192.168.10.100:5000'
+```
+
+### Run Wekan only locally on selected port
+
+```
+$ sudo snap set wekan root-url='http://localhost:5000'
+```
+
+### Nginx or Caddy webserver in front of Wekan
+
+[Nginx](https://github.com/wekan/wekan/wiki/Nginx-Webserver-Config) or [Caddy](https://github.com/wekan/wekan/wiki/Caddy-Webserver-Config) is in front, full URL to real web address URL of Nginx or Caddy.
+
+```
+$ sudo snap set wekan root-url='https://example.com'
+```
+
+or
+
+```
+$ sudo snap set wekan root-url='https://example.com/wekan'
+```
+
+## Port settings
+
+Localhost port where Wekan is running. This does not need to be exposed to Internet when running behind Nginx or Caddy.
+
+```
+$ sudo snap set wekan port='<your_port>'
+```
+
+## Restart Wekan after changes
+
+```
+$ sudo systemctl restart snap.wekan.wekan
+```
+
+When running without any additional settings, Wekan is at http://localhost:8080

docs/wekan-snap.wiki/Limit-snap-to-root-user-only.md

@@ -0,0 +1,31 @@
+If you have some users logging to your server, that don't have root access, and you want to limit snap to root user only, you can do the following:
+
+## 1) Set snap refresh schedule, for example
+
+```
+sudo snap set core refresh.schedule=02:00-03:00
+```
+
+## 2) Set cron to limit permissions to root users after updates
+
+For example, sudo to root, and edit root cron with nano:
+
+```
+sudo su
+export EDITOR=nano
+crontab -e
+```
+
+and add there that at 03:10 permissions are limited to root again:
+```
+10 3 * * * chmod og-rwx /usr/bin/snap
+10 3 * * * chmod -R og-rwx /var/snap
+```
+You can see crontab syntax help at https://crontab.guru
+
+`snap` is the command, and `/var/snap` is where data is stored.
+
+## Future snap features for permissions
+
+For more advanced user permission control in snap, sometime new features will be added:<br />
+https://forum.snapcraft.io/t/multiple-users-and-groups-in-snaps/1461/3

docs/wekan-snap.wiki/Making-releases-from-source.md

@@ -0,0 +1,54 @@
+# Installing snapcraft from source
+
+This is old and already fixed, was only needed when [snap build servers were broken](https://github.com/wekan/wekan-snap/issues/58) and [snapcraft had bug](https://forum.snapcraft.io/t/permission-denied-when-building-with-snapcore-snapcraft/7186/14?u=xet7) that has [fix that was not released to snap channel yet](https://github.com/snapcore/snapcraft/pull/2240). All this is fixed now.
+
+So I removed snap version, and installed snapcraft from source, and it seems to work for me.
+
+## Snapcraft source install on Ubuntu 16.04 64bit
+
+Add to /root/.bashrc:
+```
+export PATH="$PATH:/home/user/repos/snapcraft/bin"
+```
+## Install dependencies
+```
+sudo apt install python3-yaml python3-tabulate python3-pymacaroons \
+python3-progressbar python3-requests-unixsocket python3-petname \
+python3-pyelftools python3-click python3-simplejson \
+python3-requests-toolbelt python3-jsonschema xdelta3
+```
+## Install snapcraft
+```
+cd ~/repos
+git clone https://github.com/snapcore/snapcraft.git
+cd snapcraft
+sudo python3 setup.py install
+```
+## [Workaround bug](https://bugs.launchpad.net/snapcraft/+bug/1656884/comments/1)
+```
+sudo ln -s /usr/local/lib/python3.5/dist-packages/snapcraft-2.43-py3.5.egg/share/snapcraft/ /usr/share/snapcraft
+```
+## Build package
+```
+cd ~/repos/wekan
+sudo snapcraft
+```
+## Install snap package locally to test it
+```
+sudo snap install --dangerous wekan_1.*_amd64.snap
+```
+## Changing back to stable or edge snap
+
+https://github.com/wekan/wekan-snap/wiki/Snap-Developer-Docs
+
+## Login to snapcraft
+
+If you have access to publishing snaps.
+
+## Push package to snap store
+```
+sudo snapcraft push wekan_1.*_amd64.snap
+```
+## Publish at snap store
+
+https://dashboard.snapcraft.io/dev/snaps/7867

docs/wekan-snap.wiki/Making-releases.md

@@ -0,0 +1,9 @@
+## Triggering git import process manually
+
+https://code.launchpad.net/~wekan-team/wekan/+git/wekan
+
+## When ready, uploaded to store. Check and release.
+
+Once you snap is uploaded you should see it here:
+
+https://dashboard.snapcraft.io/dev/snaps/7867

docs/wekan-snap.wiki/Many-Snaps-on-LXC.md

@@ -0,0 +1,466 @@
+https://github.com/wekan/wekan-snap/wiki/Many-Snaps-on-LXC#lxd-init-cidr
+
+# NEW WAY: Parallel Snap Installs
+
+Note: This presumes that your laptop runs newest Ubuntu or Kubuntu, and that server is Ubuntu.
+
+1) Install Caddy2 https://github.com/wekan/wekan/wiki/Caddy-Webserver-Config
+
+2) Optional, recommended: Encrypted VM. Idea: Bare Metal Caddy => Proxy to encrypted VM ports => Each customer separate Snap WeKan port. Snap sandbox files at /common, snap code can not access files outside of it's /common directories. Newest WeKan is Snap Candidate. Snap has automatic updates.
+
+2.1) If your server has additional harddrives, format them:
+
+```
+ls /dev
+mkfs.ext4 /dev/nvme0n1
+```
+2.2) Look at that above command text output, what is created disk UUID. Add those to /etc/fstab:
+```
+UUID=12345-678-90	/data	ext4	errors=remount-ro	0	1
+```
+2.3) Create directories for mounting disk, and mount all drives:
+```
+sudo su
+cd /
+mkdir /data
+mount -a
+```
+2.4) Install to your laptop and bare metal server packages for using remote desktop with KVM:
+```
+sudo apt install virt-manager qemu-system
+```
+2.5) Check that you can ssh to server with ssh public key as root. For that, create ssh key on your laptop, press enter many times until it's done:
+```
+ssh-keygen
+```
+2.6) copy laptop .ssh/id_rsa.pub content to server /root/.ssh/authorized_keys .
+
+2.7) At server disable password login at /etc/ssh/sshd_config , password login enabled false. And `sudo systemctl restart ssh`
+
+2.8) At your laptop edit .ssh/config , there add your server IP address etc. This server here is named x1.
+
+```
+Host x1
+  Hostname 123.123.123.123
+  User root
+  IdentityFile ~/.ssh/id_rsa
+```
+
+2.9) Check that you can ssh from laptop to server as root without prompts.
+
+2.10) Start virt-manager GUI at your laptop:
+
+- File / Add connection
+- Hypervisor: QEMU/KVM
+- [X] Connect to remote host via SSH
+- Username: root
+- Machine name: x1
+- Connect automatically: [X]
+- Click [Connect]
+
+2.11) AT SERVER: Create harddrive image: `qemu-img create -f qcow2 web.qcow2 700G`
+
+2.12) Download newest Kubuntu desktop iso with wget. 
+
+2.13) Install kubuntu with full disk encryption. Modify amount of RAM (here 32 GB), file locations etc. Do not select to allocate encrypted disk image immediately, let image size grow.
+
+2.14) Create growing disk with max size:
+```
+qemu-img create -f qcow2 web.qcow2 700G
+```
+2.15) Start install from .iso image. Here RAM -r 32 GB, name web, change disk and iso locations below, vcpu 20 (check your server with nproc, should be less that all):
+```
+sudo virt-install -r 32000 -n web --os-type=linux --os-variant=ubuntu16.04 \
+--disk /data/VMs/web.qcow2,device=disk,format=qcow2 \
+-c /data/VMs/iso/kubuntu-22.10-desktop-amd64.iso \
+--vcpus=20 --vnc --noautoconsole
+```
+It will appear to your laptop virt-manager GUI.
+
+If you have shutdown KVM VM, you can start it from virt-manager, or this way without .iso image:
+```
+sudo virt-install -r 32000 -n web --boot hd --video=vga --os-type=linux --os-variant=ubuntu16.04 \
+--disk /data/VMs/web.qcow2,device=disk,format=qcow2 \
+--vcpus=20 --vnc --noautoconsole
+```
+
+3) Use Parallel Snap installs https://snapcraft.io/docs/parallel-installs
+
+For example:
+```
+sudo snap set system experimental.parallel-instances=true
+```
+
+4) With newest WeKan Candidate like https://github.com/wekan/wekan-snap/wiki/CentOS8 . Note: Each user has different wekan port and mongodb port.
+```
+sudo snap install wekan --channel=latest/candidate
+sudo snap install wekan wekan_customer1 --channel=latest/candidate
+sudo snap disable wekan
+sudo snap set wekan_customer1 caddy-enabled='false'
+```
+Check that each WeKan uses candidate:
+```
+sudo snap list
+```
+If not, change to candidate:
+```
+sudo snap refresh wekan_customer1 --channel=latest/candidate
+```
+If it complains about old database version (was at stable), stop it, move old files somewhere safe, and start again.
+WARNING: this deletes 
+```
+sudo su
+mkdir old_customer1_common
+snap stop wekan_customer1
+mv /var/snap/wekan_customer1/common/* old_customer1_common/
+snap start wekan_customer1
+```
+
+5) Add some settings, for example Google login and [AWS SES email sending](https://github.com/wekan/wekan/wiki/Troubleshooting-Mail#example-aws-ses):
+
+For each customer, node and mongodb needs to be in different ports, for example:
+```
+sudo snap set wekan_customer1 port='5001'
+sudo snap set wekan_customer1 mongodb-port='25001'
+sudo snap set wekan_customer2 port='5002'
+sudo snap set wekan_customer2 mongodb-port='25002'
+```
+For customer1:
+```
+sudo snap set wekan_customer1 port='5001'
+sudo snap set wekan_customer1 mongodb-port='25001'
+sudo snap set wekan_customer1 root-url='https://wekan.customer1.com'
+sudo snap set wekan_customer1 mail-url='smtp://username:password@email-smtp.eu-west-1.amazonaws.com:587?tls={ciphers:"SSLv3"}&secureConnection=false'
+sudo snap set wekan_customer1 mail-from='Wekan Customer1 Support <board@customer1.com>'
+sudo snap set wekan_customer1 oauth2-auth-endpoint='https://accounts.google.com/o/oauth2/v2/auth'
+sudo snap set wekan_customer1 oauth2-client-id='YOUR-GOOGLE-LOGIN-CLIENT_ID.apps.googleusercontent.com'
+sudo snap set wekan_customer1 oauth2-secret='YOUR-GOOGLE-LOGIN-SECRET'
+sudo snap set wekan_customer1 oauth2-email-map='email'
+sudo snap set wekan_customer1 oauth2-enabled='true'
+sudo snap set wekan_customer1 oauth2-fullname-map='name'
+sudo snap set wekan_customer1 oauth2-id-map='sub'
+sudo snap set wekan_customer1 oauth2-request-permissions='openid https://www.googleapis.com/auth/userinfo.profile https://www.googleapis.com/auth/userinfo.email'
+sudo snap set wekan_customer1 oauth2-token-endpoint='https://oauth2.googleapis.com/token'
+sudo snap set wekan_customer1 oauth2-userinfo-endpoint='https://openidconnect.googleapis.com/v1/userinfo'
+sudo snap set wekan_customer1 oauth2-username-map='nickname'
+```
+You can check with [nosqlbooster](https://github.com/wekan/wekan/wiki/Backup#using-nosqlbooster-closed-source-mongodb-gui-with-wekan-snap-to-edit-mongodb-database) that each database has correct data.
+
+When restoring data, stop that wekan, and restore to that port, when you have subdirectory dump:
+```
+sudo snap stop wekan_customer2.wekan
+mongorestore --drop --port 25002
+sudo snap start wekan_customer2.wekan
+```
+If there is errors, try again without restoring indexes:
+```
+mongorestore --drop --noIndexRestore --port 25002
+```
+To empty database, use [mongodb shell](https://www.mongodb.com/try/download/shell):
+```
+mongosh --port 25002
+show dbs
+use wekan
+db.dropDatabase()
+```
+To see is settings written correctly, use:
+```
+sudo snap get wekan_customer1
+sudo snap get wekan_customer2
+```
+And that at `Caddyfile` each subdomain is proxied to correct port like 3001 etc.
+
+And that if there is snap called wekan, it's not in use:
+```
+sudo snap disable wekan
+```
+or has different port:
+```
+sudo snap get wekan
+sudo snap set wekan port='6001'
+sudo snap set wekan mongodb-port='28001'
+```
+
+6) Example backup script, that backups MongoDB databases. Although, maybe files directories needed to be added too.
+
+Note: Here customer1 likes to get backup copy of backups, so this copies customer1 backup to separate directory that is synced only to that customer with Syncthing. Via email was asked customer syncthing ID, and added sync.
+
+Set it as executeable:
+```
+chmod +x backup.sh
+```
+To run it:
+```
+sudo su
+cd backup
+./backup.sh
+```
+
+Here is backup.sh, using [mongodb tools](https://www.mongodb.com/try/download/database-tools) for mongodump/mongorestore etc:
+```
+#!/bin/bash
+
+# Backup all MongoDB databases from different ports.
+# Note: You may need to check also is there files directory,
+#       and also backup that, like /var/snap/wekan/common/files etc
+
+function backup {
+  cd /home/wekan/backup
+  # >> /home/wekan/backup/backup-log.txt
+  mkdir -p /home/wekan/backup/new/$1
+  cd /home/wekan/backup/new/$1
+  mongodump --port $2
+  sudo snap get wekan_$1 > snap-settings.txt
+  cd ..
+  7z a $(date -u +$1-wekan-backup-%Y-%m-%d_%H.%M_UTC.7z) $1
+  mkdir /home/wekan/$3
+  chown wekan:wekan *.7z
+  mv *.7z /home/wekan/$3/
+  rm -rf $1
+  cd /home/wekan/backup
+}
+
+function backupchat {
+  cd /home/wekan/backup >> /home/wekan/backup/backup-log.txt
+  mkdir -p /home/wekan/backup/new/$1 >> /home/wekan/backup/backup-log.txt
+  cd /home/wekan/backup/new/$1 >> /home/wekan/backup/backup-log.txt
+  mongodump >> /home/wekan/backup/backup-log.txt
+  cd ..
+  7z a $(date -u +$1-backup-%Y-%m-%d_%H.%M_UTC.7z) $1
+  mkdir /home/wekan/$3
+  chown wekan:wekan *.7z
+  mv *.7z /home/wekan/$3/
+  rm -rf $1
+  cd /home/wekan/backup
+}
+
+# Syntax:
+# backup customername port backupdir
+
+function websync {
+  # Backup WeKan Kanban Snaps to different Syncthing sync directories
+  backup "customer1" "25001" "backup-wekan-customer1"
+  backup "customer1" "25001" "websync"
+  backup "customer2" "25002" "websync"
+  backup "customer3" "25003" "websync"
+  backup "customer4" "25004" "websync"
+  backup "customer5" "25005" "websync"
+  # Backup RocketChat Snap
+  backupchat "chat" "27027" "websync"
+  cd ~/websync
+  ## backup the backup scripts
+  # 7z a $(date -u +wekan-backup-scripts-%Y-%m-%d_%H.%M_UTC.7z) ~/backup
+}
+
+(websync) >> /home/wekan/backup/backup-log.txt 2>&1
+```
+
+7. At bare metal server is installed [Caddy2](https://github.com/wekan/wekan/wiki/Caddy-Webserver-Config).
+
+Each customer has set in their nameserver to WeKan hosting server IP address:
+```
+A 123.123.123.123  
+```
+After that, when ping wekan.company1.com shows 123.123.123.123 correctly, it's possible to get
+automatic Let's Encrypt SSL/TLS cert with Caddy2.
+
+At encrypted KVM VM type `ip address`, it shows what is KVM VM internal IP address.
+
+Caddy2 proxies with Let's Encrypt TLS HTTPS to encrypted VM HTTP IP address and port where WeKan (Node.js) is running.
+
+
+/etc/caddy/Caddyfile . Examples when in /etc/caddy directory as root: `caddy start`, `caddy stop`, `caddy validate`, `caddy --help`
+```
+(redirect) {
+        @http {
+                protocol http
+        }
+        redir @http https://{host}{uri}
+}
+
+kanban.customer1.com {
+        tls {
+                alpn http/1.1
+        }
+
+        reverse_proxy 192.168.123.23:5001
+}
+
+kanban.customer2.com {
+        tls {
+                alpn http/1.1
+        }
+
+        reverse_proxy 192.168.123.23:5002
+}
+```
+Other non-kanban examples:
+```
+# Static website that uses free CloudFlare TLS certificates
+company.com {
+        tls {
+                load /data/websites/certificates/company
+                alpn http/1.1
+        }
+        root * /data/websites/company.com
+        file_server
+}
+
+# RocketChat
+chat.company.com {
+        tls {
+                alpn http/1.1
+        }
+
+        reverse_proxy 192.168.123.23:3000
+}
+
+# Browseable files listing static website
+files.company.com {
+        tls {
+                alpn http/1.1
+        }
+        root * /data/websites/files.company.com
+        file_server browse
+}
+```
+
+***
+
+# OLD WAY: Many Snaps on LXC
+
+## LXD init CIDR
+
+IPv4 CIDR: 10.1.1.1/24
+
+```
+sudo apt install snapd
+
+sudo reboot
+
+sudo snap install lxd
+
+lxd init
+
+Would you like to use LXD clustering? (yes/no) [default=no]: 
+Do you want to configure a new storage pool? (yes/no) [default=yes]: 
+Name of the new storage pool [default=default]: 
+Name of the storage backend to use (dir, lvm, btrfs, ceph) [default=btrfs]: dir
+Would you like to connect to a MAAS server? (yes/no) [default=no]: 
+Would you like to create a new local network bridge? (yes/no) [default=yes]: 
+What should the new bridge be called? [default=lxdbr0]: 
+What IPv4 address should be used? (CIDR subnet notation, “auto” or “none”) [default=auto]: 10.1.1.1/24
+Would you like LXD to NAT IPv4 traffic on your bridge? [default=yes]: 
+What IPv6 address should be used? (CIDR subnet notation, “auto” or “none”) [default=auto]:
+Would you like the LXD server to be available over the network? (yes/no) [default=no]: 
+Would you like stale cached images to be updated automatically? (yes/no) [default=yes]: 
+Would you like a YAML "lxd init" preseed to be printed? (yes/no) [default=no]:
+```
+> The value you have specified is the “network address”, i.e “.0” is the network address of the subnet “10.1.1.0/24”. Instead you need to specify an IP in that network, such as “.1”, e.g. “10.1.1.1/24”
+
+https://discuss.linuxcontainers.org/t/failed-lxd-init-what-is-cidr/7181/2
+
+## 1) Main Snap on bare metal
+
+[Install Wekan Snap](Install) to newest Ubuntu bare metal server. Snaps have automatic updates.
+
+For example:
+```
+sudo apt-get install snapd
+reboot
+sudo snap install wekan
+```
+For Let's Encrypt SSL, like this to `/var/snap/wekan/common/Caddyfile`. We will be proxying to inside LXD container:
+```
+boards.example.com {
+	tls {
+	    alpn http/1.1
+	}
+
+	proxy / 10.10.10.231:3001 {
+	  websocket
+	  transparent
+	}
+}
+```
+For [CloudFlare SSL](https://github.com/wekan/wekan/wiki/Caddy-Webserver-Config), like this to `/var/snap/wekan/common/Caddyfile`:
+```
+http://boards.example.com https://boards.example.com {
+	tls {
+	    load /var/snap/wekan/common/certificates
+	    alpn http/1.1
+	}
+
+	proxy / 10.10.10.231:3001 {
+	  websocket
+	  transparent
+	}
+}
+```
+## 2) New LXC container
+So when I start new lxc container:
+```
+lxc launch images:ubuntu/20.04 lxccontainername
+```
+## 3) Snapd and Wekan
+Then I go inside container and install snapd:
+```
+lxc exec lxccontainername -- /bin/bash
+apt -y install snapd
+reboot
+lxc exec lxccontainername -- /bin/bash
+snap install wekan
+snap set wekan root-url='https://boards.example.com'
+sudo snap set wekan port='3001'
+sudo snap set wekan mail-from='Wekan Team Boards <info@example.com>'
+sudo snap set wekan mail-url='smtps://username:password@email-smtp.eu-west-1.amazonaws.com:587'
+ip address
+exit
+```
+That `ip address` command does show current IP address of container, that you can then add to bare metal `/var/snap/wekan/common/Caddyfile`.
+
+You can also add more lxc containers to different subdomains and proxy to them in main Caddyfile.
+
+## 4) Some LXC commands
+
+### New Ubuntu container
+```
+lxc launch images:ubuntu/20.04 lxccontainername
+```
+### Inside LXC container
+```
+lxc exec lxccontainername -- /bin/bash
+```
+### Running command in LXC
+```
+lxc exec lxccontainername -- apt install p7zip-full
+```
+### Limit RAM available to LXC
+```
+lxc config set lxccontainername limits.memory 4GB
+```
+### New Debian container
+```
+lxc launch images:debian/buster mydebiancontainername
+```
+### New CentOS 7 container
+```
+lxc launch images:centos/7/amd64 centos
+```
+### List containers
+```
+lxc list -cns
+```
+Result:
+```
++---------------+---------+
+|     NAME      |  STATE  |
++---------------+---------+
+| mycontainer   | RUNNING |
++---------------+---------+
+```
+### Stop and delete container
+```
+lxc stop mycontainer
+lxc delete mycontainer
+```

docs/wekan-snap.wiki/Old-Making-releases.md

@@ -0,0 +1,78 @@
+# Older way to make releases, does not work.
+
+***
+
+
+## Triggering git import process manually
+
+[Info source](https://github.com/wekan/wekan-snap/issues/2#issuecomment-311324364)
+
+To make build quicker, it's possible to trigger git import process manually in launchpad, so you don't need to wait for next sync.
+
+https://code.launchpad.net/~wekan-team/wekan/+git/wekan
+
+
+
+## Launchpad project
+
+[Info source](https://github.com/wekan/wekan-snap/pull/3#issuecomment-310764751)
+
+kubiko created launchpad wekan project and wekan team where xet7 is admin in and contributor. xet7 can feel free to add other people on the list.
+
+Wekan project has wekan-snap repo mirrored from github one:
+
+https://code.launchpad.net/~wekan-team/wekan/+git/wekan-snap
+
+Sync happens every ~5 hours
+
+There is snap package enabled for this repo which has automatic build upon change in repo enabled, you can see there also build queue:
+
+https://code.launchpad.net/~wekan-team/+snap/wekan-devel
+
+It has also auto push to store enabled, so once built snap is uploaded to candidate channel.
+
+Once you snap is uploaded you should see it here:
+
+https://dashboard.snapcraft.io/dev/snaps/7867
+
+kubiko got email from launchpad account and added xet7 as collaborator list, so xet7 can control promotion to stable channel once candidate version is tested. There xet7 can see there some other interesting stats about snap adoption.
+
+For the future once xet7 makes change in wekan-snap build and upload should happen automatically, no need for additional interaction.
+
+Next thing for kubiko would be to move people from wekan-ondra to wekan, not quite sure how to announce this though….. From stats kubiko did see there are ~320 downloads/installs of version 0.23.
+
+kubiko also created pull request to wekan repo, which enabled continuous integration from master, typically this would be pushing builds to edge channel, from where xet7 can do testing, or more adventures users can use edge channel to track Wekan master branch….
+
+## Snapcraft build support from source
+
+[Info source](https://github.com/wekan/wekan/pull/1091)
+
+Adding snapcraft build support. This can be used together with launchpad build system for continuous integration.
+
+Intention is to push snaps build from devel branch to edge channel, which can be installed by calling:
+
+```
+$ snap install -edge wekan
+```
+
+device will keep automatically updating to revisions as they are released to edge channel
+
+@xet7 Snap build job is now created, you can see it here:
+
+https://code.launchpad.net/~wekan-team/+snap/wekan-devel
+
+It's building from devel branch, fee free to change that if you prefer it to build from different branch.
+Same as for release apply here, auto builds on change, only resulting snap is pushed to edge channel instead.
+Also check please version name if you want it to be something different than:
+
+```
+0.26-SNAPSHOT
+```
+
+## Old links, not in use
+
+( Old trigger git import https://code.launchpad.net/~wekan-team/wekan/+git/wekan-snap )
+
+( Old build queue, not in use: https://code.launchpad.net/~wekan-team/+snap/wekan-release )
+
+( Old build queue, not in use: https://code.launchpad.net/~ondrak/+snap/wekan-devel )

docs/wekan-snap.wiki/OpenSuse.md

@@ -0,0 +1 @@
+https://github.com/wekan/wekan/wiki/OpenSuse

docs/wekan-snap.wiki/Sharing-MongoDB.md

@@ -0,0 +1,14 @@
+## Share MongoDB to other snaps
+
+- connect mongodb-slot with plug from corresponding snap(s)
+- configure corresponding service to use mongodb unix socket in shared directory, socket file name is: mongodb-.sock
+
+## Sharing MongoDB from other snap to wekan
+- connect mongodb-plug with slot from snap providing mongodb
+- disable mongodb in wekan by calling:
+
+```
+$ snap set wekan set disable-mongodb='true'
+```
+
+- set mongodb-bind-unix-socket to point to serving mongodb. Use relative path inside shared directory, e.g run/mongodb-27017.sock

docs/wekan-snap.wiki/Supported-settings-keys.md

@@ -0,0 +1,125 @@
+Wekan supports settings key values:
+
+```
+$ snap set wekan <key name>='<key value>'
+
+```
+## List all possible settings
+```
+$ wekan.help | less
+```
+
+## List your current snap settings
+```
+sudo snap get wekan
+```
+## LDAP
+
+- Settings can be seen with command `wekan.help` and [this config file](https://raw.githubusercontent.com/wekan/wekan/master/snap-src/bin/config).
+- LDAP repo https://github.com/wekan/wekan-ldap
+- Bugs and Feature Requests LDAP repo https://github.com/wekan/wekan-ldap/issues
+
+Example from setting listed at [this config file](https://raw.githubusercontent.com/wekan/wekan/master/snap-src/bin/config):
+```
+sudo snap set wekan ldap-enable='true'
+
+sudo snap set wekan default-authentication-method='ldap'
+
+sudo snap set wekan ldap-fullname-field='CN'
+```
+
+## List of supported keys
+
+```
+mongodb-bind-unix-socket:   mongodb binding unix socket:
+		 Default behaviour will preffer binding over unix socket, to
+		 disable unix socket binding set value to 'nill' string
+		 To bind to instance of mongodb provided through content
+		 interface, set value to relative path to the socket inside
+		 'shared' directory.
+		 Default value: set to use unix socket binding
+mongodb-bind-ip: mongodb binding ip address: eg 127.0.0.1 for localhost
+	 	 If not defined default unix socket binding is used instead
+		 Default value: ''
+mongodb-port:    mongodb binding port: eg 27017 when using localhost
+		 Default value: '27019'
+mail-url:	 wekan mail binding
+		 Example: 'smtps://user:pass@mailserver.examples.com:453/'
+		 Default value: 'smtp://user:pass@mailserver.examples.com:25/'
+mail-from:	 wekan's admin mail from name email address
+		 For example: 'Boards Support <support@example.com>'
+		 Default value: 'wekan-admin@example.com'
+root-url:	 wekan's root url, eg http://127.0.0.1, https://example.com,
+		 https://wekan.example.com, http://example.com/wekan
+		 Default value: 'http://127.0.0.1'
+port:		 port wekan is exposed at
+		 Default value: '8080'
+disable-mongodb: Disable mongodb service: use only if binding to
+		 database outside of Wekan snap. Valid values: [true,false]
+		 Default value: 'false'
+caddy-enabled:   Enable caddy service (caddy - Every Site on HTTPS).
+                 see https://caddyserver.com/products/licenses and
+                 https://github.com/wekan/wekan-snap/issues/39 ,
+                 use personal non-commercial license or
+                 contact Wekan maintainer x@xet7.org about enabling
+                 commercial license for Caddy.
+                 Set to 'true' to enable caddy.
+		 caddy settings are handled through
+                 /var/snap/wekan/common/Caddyfile
+		 Default value: 'false'
+caddy-bind-port: Port on which caddy will expect proxy, same value
+                 will be also set in Caddyfile
+		 Default value: '3001'
+with-api:        To enable the API of wekan. If API is disabled,
+                 exporting board to JSON does not work.
+                 Default value: 'true'
+cors:            Set Access-Control-Allow-Origin header. Example:
+                 snap set wekan cors='*'
+                 Default value, disabled: ''
+browser-policy-enabled: Enable browser policy and allow one
+                 trusted URL that can have iframe that has
+                 Wekan embedded inside.
+                 Setting this to false is not recommended,
+                 it also disables all other browser policy protections
+                 and allows all iframing etc. See wekan/server/policy.js
+                 Default value: 'true'
+trusted-url:     When browser policy is enabled, HTML code at this URL
+                 can have iframe that embeds Wekan inside.
+                 Example: trusted-url='https://example.com'
+                 Default value: ''
+webhooks-attributes: What to send to Outgoing Webhook, or leave out.
+                 Example, that includes all that are default: 
+                 cardId,listId,oldListId,boardId,comment,user,card,commentId .
+                 To enable the Webhooks Attributes of Wekan:
+                 snap set wekan webhooks-attributes=cardId,listId,oldListId,boardId,comment,user,card,commentId
+                 Disable the Webhooks Attributest of Wekan to send all default ones:
+                 snap set wekan webhooks-attributes=''
+```
+## Rocket.Chat providing OAuth2 login to Wekan
+
+Also, if you have Rocket.Chat using LDAP/SAML/Google/etc for logging into Rocket.Chat, then same users can login to Wekan when Rocket.Chat is providing OAuth2 login to Wekan.
+
+[OAuth2 Login Docs](https://github.com/wekan/wekan/wiki/OAuth2)
+
+## [Matomo web analytics](https://matomo.org) integration
+Example:
+```
+sudo snap set wekan matomo-address='https://matomo.example.com/'
+sudo snap set wekan matomo-site-id='25'
+sudo snap set wekan matomo-with-username='true'
+sudo snap set wekan matomo-do-not-track='false'
+```
+Matomo settings keys:
+```
+matomo-address:  The address of the server where matomo is hosted
+                 No value set, using default value: ''
+matomo-site-id:  The value of the site ID given in matomo server for wekan
+                 No value set, using default value: ''
+matomo-do-not-track: The option do not track which enables users to not be tracked by matomo
+		 Current value set to: 'true', (default value: 'true')
+matomo-with-username: The option that allows matomo to retrieve the username
+		 Current value set to: 'false', (default value: 'false')
+```
+
+
+**When settings are changed, wekan/mongo/caddy services are automatically restarted for changes to take effect.**

docs/wekan-snap.wiki/Testing-new-WeKan-Snap-versions.md

@@ -0,0 +1,81 @@
+Please:
+- Test does WeKan on some non-stable channel work, [add a new issue](https://github.com/wekan/wekan-snap/issues) about can it be added to stable channel.
+- Check [is there PR about fixing some bug already](https://github.com/wekan/wekan/pulls)
+- Please report bugs [by adding a new issue](https://github.com/wekan/wekan-snap/issues).
+- Make backups first, so you are not using your only copy of production data
+- Have time to test
+- Have enough disk space. For example, some update migration could write all attachments from database to some subdirectory of `/var/snap/wekan/common` or `/var/snap/wekan-gantt-gpl/common`.
+- You can try bleeding edge versions of Wekan Snap, that contains cool new features, and could be broken in many ways.
+- Sometimes Snap builds fail, so then there is no package file to upload to Snap store at all, only successfully built are visible at Snap store. Successfully built does not mean that every feature works.
+
+[Changing between WeKan and WeKan Gantt GPL](https://github.com/wekan/wekan/issues/2870#issuecomment-721364824)
+
+## 1) Stop WeKan
+
+```
+sudo snap stop wekan
+```
+or 
+```
+sudo snap stop wekan-gantt-gpl
+```
+
+## 2) Create Backup
+
+2.1 Backup settings:
+
+```
+sudo snap get wekan > snap-settings.txt
+```
+or
+```
+sudo snap get wekan-gantt-gpl > snap-settings.txt
+```
+
+2.2 https://github.com/wekan/wekan/wiki/Backup
+
+2.3 Copy files to safe place from /var/snap/wekan/common or /var/snap/wekan-gantt-gpl/common . There could be some board attachments etc.
+
+## 3) Check what is available at various channels
+
+https://snapcraft.io/wekan
+
+https://snapcraft.io/wekan-gantt-gpl
+
+- Stable: Current working version
+- Beta: Maybe work, or not
+- Edge: Newest that did build, no idea does it work or not
+
+This is how you can try snap beta channel:
+```
+sudo snap refresh wekan --beta --amend
+```
+This is how to change back to snap stable channel, that most Wekan users have installed:
+```
+sudo snap refresh wekan --stable --amend
+```
+Wekan stable versions are numbered v1.x
+
+## 4) Update all Snaps to newest on that channel
+
+[Check you don't have Snap updates disabled](Automatic-update-schedule#if-required-you-can-disable-all-snap-updates)
+
+```
+sudo snap refresh
+
+```
+
+## 5) Start WeKan
+
+```
+sudo snap stop wekan
+```
+or 
+```
+sudo snap stop wekan-gantt-gpl
+```
+
+## Other docs
+
+* [Adding Snap settings to code](https://github.com/wekan/wekan/wiki/Adding-new-Snap-settings-to-code)
+* [Wekan Developer Docs](https://github.com/wekan/wekan/wiki/Developer-Documentation)

docs/wekan-snap.wiki/Troubleshooting.md

@@ -0,0 +1,65 @@
+[Info source](https://github.com/wekan/wekan-snap/issues/4#issuecomment-311355296)
+
+1) All you need to do is
+
+```
+$ snap install wekan
+```
+
+2) Enable/disable is not needed, it is there for cases when for example you want to stop wekan, but do not want to uninstall it (uninstall will delete also all user data)
+
+3) Wekan is service, so apart of help, it does not have any "user executables"
+
+4) You can check status of wekan with:
+
+```
+$ sudo systemctl status snap.wekan.*
+```
+
+there should be two services, mongodb and wekan running, of either of them is showing error, that would be place to look first. To get detailed look, use
+
+```
+$ sudo journalctl -u snap.wekan.*
+```
+
+or detailed look of one of services:
+
+```
+$ sudo journalctl -u snap.wekan.wekan.service
+```
+
+or
+
+```
+$ snap.wekan.mongodb.service
+```
+
+5) Content interface for mongodb (wekan:mongodb-slot, wekan:mongodb-plug) is there only for more complex cases where for reason you want to:
+
+a) share wekan's mongodb instance with other services, use wekan:mongodb-slot
+
+b) you want to use mongodb instance from some other service, use wekan:mongodb-plug
+so connecting wekan:mongodb-plug to wekan:mongodb-slot really makes no sense :)
+
+As @xet7 suggested, first thing to make sure is that update your machine, so you are running up to date snapd. You can check your version with
+
+```
+$ snap version
+```
+
+Currently we are on 2.26
+
+Otherwise shared folders are created under:
+
+```
+/var/snap/wekan/current where writable data lives
+```
+
+Databases and other settings live under:
+
+```
+/var/snap/wekan/common/
+/snap/wekan/current is read only mount of squashfs wekan's image.
+```
+
+[Troubleshooting Email](https://github.com/wekan/wekan/wiki/Troubleshooting-Mail)

docs/wekan-snap.wiki/Uninstall.md

@@ -0,0 +1,54 @@
+List what snaps you have installed. Core is part of snap itself.
+```
+sudo snap list
+```
+List what snap services are running:
+```
+sudo snap services
+```
+Uninstall Wekan snap and delete all Wekan data. If you have other snaps installed, you can remove them too. Don't remove core, it's part of snap itself.
+```
+sudo snap stop wekan
+
+sudo snap disable wekan
+
+sudo snap remove wekan
+```
+OPTIONAL ALTERNATIVE WAY, NOT REQUIRED: Disable some services of wekan using systemd:
+```
+sudo systemctl stop snap.wekan.wekan
+
+sudo systemctl stop snap.wekan.mongodb
+
+sudo systemctl stop snap.wekan.caddy
+
+sudo systemctl disable snap.wekan.wekan
+
+sudo systemctl disable snap.wekan.mongodb
+
+sudo systemctl disable snap.wekan.caddy
+```
+Uninstall snap at CentOS:
+```
+sudo systemctl disable --now snapd.socket
+
+sudo yum copr disable ngompa/snapcore-el7
+
+sudo yum remove yum-plugin-copr snapd
+```
+Uninstall snap at Debian/Ubuntu/Mint:
+```
+sudo systemctl stop snapd
+
+sudo systemctl disable snapd
+
+sudo apt --purge remove snapd
+```
+Uninstall snap at [Ubuntu 14.04](https://github.com/wekan/wekan-snap/issues/34#issuecomment-378295168):
+```
+sudo service snapd stop
+
+sudo update-rc.d -f snapd remove
+
+sudo apt-get --purge remove snapd
+```