v7.53

Updated Snap Candidate to MongoDB 6.0.16.
Thanks to MongoDB developers !
2024-08-03 22:16:18 +03:00 · 2024-08-03 22:13:08 +03:00 · 2024-08-03 21:52:34 +03:00 · 2024-08-03 21:50:27 +03:00 · 2024-08-03 21:49:12 +03:00 · 2024-08-03 21:47:10 +03:00
907 changed files with 321794 additions and 8550 deletions
@@ -1,25 +1,30 @@
-FROM ubuntu:21.10
-LABEL maintainer="sgr"
+FROM ubuntu:24.04
+LABEL maintainer="wekan"
+LABEL org.opencontainers.image.ref.name="ubuntu"
+LABEL org.opencontainers.image.version="24.04"
+LABEL org.opencontainers.image.source="https://github.com/wekan/wekan"

 # 2022-04-25:
 # - gyp does not yet work with Ubuntu 22.04 ubuntu:rolling,
 #   so changing to 21.10. https://github.com/wekan/wekan/issues/4488

-ENV BUILD_DEPS="gnupg gosu libarchive-tools wget curl bzip2 g++ build-essential python3 git ca-certificates iproute2"
-ENV DEBIAN_FRONTEND=noninteractive
+ENV BUILD_DEPS="apt-utils gnupg gosu wget bzip2 g++ iproute2 apt-transport-https libarchive-tools"
+ENV DEV_DEPS="curl python3 ca-certificates build-essential git"
+ARG DEBIAN_FRONTEND=noninteractive

 ENV \
    DEBUG=false \
    NODE_VERSION=v14.21.4 \
-    METEOR_RELEASE=METEOR@2.13 \
+    METEOR_RELEASE=METEOR@2.14 \
    USE_EDGE=false \
    METEOR_EDGE=1.5-beta.17 \
-    NPM_VERSION=latest \
+    NPM_VERSION=6.14.17 \
    FIBERS_VERSION=4.0.1 \
    ARCHITECTURE=linux-x64 \
    SRC_PATH=./ \
    WITH_API=true \
    RESULTS_PER_PAGE="" \
+    DEFAULT_BOARD_ID="" \
    ACCOUNTS_LOCKOUT_KNOWN_USERS_FAILURES_BEFORE=3 \
    ACCOUNTS_LOCKOUT_KNOWN_USERS_PERIOD=60 \
    ACCOUNTS_LOCKOUT_KNOWN_USERS_FAILURE_WINDOW=15 \
@@ -27,15 +32,14 @@ ENV \
    ACCOUNTS_LOCKOUT_UNKNOWN_USERS_LOCKOUT_PERIOD=60 \
    ACCOUNTS_LOCKOUT_UNKNOWN_USERS_FAILURE_WINDOW=15 \
    ACCOUNTS_COMMON_LOGIN_EXPIRATION_IN_DAYS=90 \
-    RICHER_CARD_COMMENT_EDITOR=false \
-    CARD_OPENED_WEBHOOK_ENABLED=false \
-    ATTACHMENTS_STORE_PATH="" \
    ATTACHMENTS_UPLOAD_EXTERNAL_PROGRAM="" \
    ATTACHMENTS_UPLOAD_MIME_TYPES="" \
    ATTACHMENTS_UPLOAD_MAX_SIZE=0 \
    AVATARS_UPLOAD_EXTERNAL_PROGRAM="" \
    AVATARS_UPLOAD_MIME_TYPES="" \
    AVATARS_UPLOAD_MAX_SIZE=0 \
+    RICHER_CARD_COMMENT_EDITOR=false \
+    CARD_OPENED_WEBHOOK_ENABLED=false \
    MAX_IMAGE_PIXEL="" \
    IMAGE_COMPRESS_RATIO="" \
    NOTIFICATION_TRAY_AFTER_READ_DAYS_BEFORE_REMOVE="" \
@@ -47,12 +51,15 @@ ENV \
    MATOMO_SITE_ID="" \
    MATOMO_DO_NOT_TRACK=true \
    MATOMO_WITH_USERNAME=false \
+    METRICS_ALLOWED_IP_ADDRESSES="" \
    BROWSER_POLICY_ENABLED=true \
    TRUSTED_URL="" \
    WEBHOOKS_ATTRIBUTES="" \
    OAUTH2_ENABLED=false \
+    OIDC_REDIRECTION_ENABLED=false \
    OAUTH2_CA_CERT="" \
    OAUTH2_ADFS_ENABLED=false \
+    OAUTH2_B2C_ENABLED=false \
    OAUTH2_LOGIN_STYLE=redirect \
    OAUTH2_CLIENT_ID="" \
    OAUTH2_SECRET="" \
@@ -69,6 +76,9 @@ ENV \
    LDAP_ENABLE=false \
    LDAP_PORT=389 \
    LDAP_HOST="" \
+    LDAP_AD_SIMPLE_AUTH="" \
+    LDAP_USER_AUTHENTICATION=false \
+    LDAP_USER_AUTHENTICATION_FIELD=uid \
    LDAP_BASEDN="" \
    LDAP_LOGIN_FALLBACK=false \
    LDAP_RECONNECT=true \
@@ -86,8 +96,6 @@ ENV \
    LDAP_ENCRYPTION=false \
    LDAP_CA_CERT="" \
    LDAP_REJECT_UNAUTHORIZED=false \
-    LDAP_USER_AUTHENTICATION=false \
-    LDAP_USER_AUTHENTICATION_FIELD=uid \
    LDAP_USER_SEARCH_FILTER="" \
    LDAP_USER_SEARCH_SCOPE="" \
    LDAP_USER_SEARCH_FIELD="" \
@@ -142,69 +150,32 @@ ENV \
    SAML_IDENTIFIER_FORMAT="" \
    SAML_LOCAL_PROFILE_MATCH_ATTRIBUTE="" \
    SAML_ATTRIBUTES="" \
-    DEFAULT_WAIT_SPINNER="" \
+    ORACLE_OIM_ENABLED=false \
+    WAIT_SPINNER="" \
+    WRITABLE_PATH=/data \
    S3=""
-# \
-#    NODE_OPTIONS="--max_old_space_size=4096"

-#---------------------------------------------------------------------
-# https://github.com/wekan/wekan/issues/3585#issuecomment-1021522132
-# Add more Node heap:
 #   NODE_OPTIONS="--max_old_space_size=4096"
-# Add more stack:
-#   bash -c "ulimit -s 65500; exec node --stack-size=65500 main.js"
+
+#---------------------------------------------
+# == at docker-compose.yml: AUTOLOGIN WITH OIDC/OAUTH2 ====
+# https://github.com/wekan/wekan/wiki/autologin
+#- OIDC_REDIRECTION_ENABLED=true
 #---------------------------------------------------------------------

-# Install OS
-RUN set -o xtrace \
-  && useradd --user-group -m --system --home-dir /home/wekan wekan \
-  && apt-get update \
-  && apt-get install --assume-yes --no-install-recommends apt-utils apt-transport-https ca-certificates 2>&1 \
-  && apt-get install --assume-yes --no-install-recommends ${BUILD_DEPS}
-
-# OLD:
-#  && curl -fsSLO --compressed "https://nodejs.org/dist/$NODE_VERSION/node-$NODE_VERSION-$ARCHITECTURE.tar.xz" \
-#  && curl -fsSLO --compressed "https://nodejs.org/dist/$NODE_VERSION/SHASUMS256.txt.asc" \
-
-# Install NodeJS
-RUN set -o xtrace \
-  && cd /tmp \
-  && curl -fsSLO --compressed "https://github.com/wekan/node-v14-esm/releases/download/${NODE_VERSION}/node-${NODE_VERSION}-${ARCHITECTURE}.tar.xz" \
-  && curl -fsSLO --compressed "https://github.com/wekan/node-v14-esm/releases/download/${NODE_VERSION}/SHASUMS256.txt" \
-  && grep " node-$NODE_VERSION-$ARCHITECTURE.tar.xz\$" SHASUMS256.txt | sha256sum -c - \
-  && tar -xJf "node-$NODE_VERSION-$ARCHITECTURE.tar.xz" -C /usr/local --strip-components=1 --no-same-owner \
-  && rm "node-$NODE_VERSION-$ARCHITECTURE.tar.xz" SHASUMS256.txt \
-  && ln -s /usr/local/bin/node /usr/local/bin/nodejs \
-  && mkdir -p /usr/local/lib/node_modules/fibers/.node-gyp /root/.node-gyp/${NODE_VERSION} /home/wekan/.config \
-  && npm install -g npm@${NPM_VERSION} \
-  && chown wekan:wekan --recursive /home/wekan/.config
-
-ENV DEBIAN_FRONTEND=dialog
-
-USER wekan
-
-# Install Meteor
-RUN set -o xtrace \
-  && cd /home/wekan \
-  && curl https://install.meteor.com/?release=$METEOR_VERSION --output /home/wekan/install-meteor.sh \
-  # Replace tar with bsdtar in the install script; https://github.com/jshimko/meteor-launchpad/issues/39
-  && sed --in-place "s/tar -xzf.*/bsdtar -xf \"\$TARBALL_FILE\" -C \"\$INSTALL_TMPDIR\"/g" /home/wekan/install-meteor.sh \
-  && sed --in-place 's/VERBOSITY="--silent"/VERBOSITY="--progress-bar"/' /home/wekan/install-meteor.sh \
-  && printf "\n[-] Installing Meteor $METEOR_VERSION...\n\n" \
-  && sh /home/wekan/install-meteor.sh
-
 ENV PATH=$PATH:/home/wekan/.meteor/

-USER root
-
-RUN echo "export PATH=$PATH" >> /etc/environment
-
-USER wekan
+RUN <<EOR
+echo "export PATH=$PATH" >> /etc/environment
+EOR

 # Copy source dir
-RUN set -o xtrace \
-  && mkdir -p /home/wekan/app/.meteor \
-  && mkdir -p /home/wekan/app/packages
+RUN <<EOR
+set -o xtrace
+
+mkdir -p /home/wekan/app/.meteor
+mkdir -p /home/wekan/app/packages
+EOR

 COPY \
    .meteor/.finished-upgraders \
@@ -229,44 +200,83 @@ COPY \
    packages \
    /home/wekan/app/packages/

-USER root
+# Install OS
+RUN <<EOR
+set -o xtrace

-RUN set -o xtrace \
-  && chown -R wekan:wekan /home/wekan/app /home/wekan/.meteor
+# Add non-root user wekan
+useradd --user-group --system --home-dir /home/wekan wekan
+# OS dependencies
+apt-get update --assume-yes
+apt-get install --assume-yes --no-install-recommends ${BUILD_DEPS} ${DEV_DEPS}

-USER wekan
+# Meteor installer doesn't work with the default tar binary, so using bsdtar while installing.
+# https://github.com/coreos/bugs/issues/1095#issuecomment-350574389
+cp $(which tar) $(which tar)~
+ln -sf $(which bsdtar) $(which tar)

-RUN \
-    set -o xtrace && \
-    # Build app
-    cd /home/wekan/app && \
-    /home/wekan/.meteor/meteor add standard-minifier-js && \
-    /home/wekan/.meteor/meteor npm install && \
-    /home/wekan/.meteor/meteor build --directory /home/wekan/app_build
+# Install NodeJS
+cd /tmp

-RUN \
-    set -o xtrace && \
-    cd /home/wekan/app_build/bundle/programs/server/ && \
-    chmod u+w package.json npm-shrinkwrap.json && \
-    npm install && \
-    cd node_modules/fibers && \
-    node build.js
+# Download nodejs
+wget "https://github.com/wekan/node-v14-esm/releases/download/${NODE_VERSION}/node-${NODE_VERSION}-${ARCHITECTURE}.tar.gz"
+wget "https://github.com/wekan/node-v14-esm/releases/download/${NODE_VERSION}/SHASUMS256.txt"
+
+# Verify nodejs authenticity
+grep "node-${NODE_VERSION}-${ARCHITECTURE}.tar.gz" "SHASUMS256.txt" | shasum -a 256 -c -
+rm -f "SHASUMS256.txt"
+
+# Install Node
+tar xzf "node-$NODE_VERSION-$ARCHITECTURE.tar.gz" -C /usr/local --strip-components=1 --no-same-owner
+rm "node-$NODE_VERSION-$ARCHITECTURE.tar.gz" "SHASUMS256.txt"
+ln -s "/usr/local/bin/node" "/usr/local/bin/nodejs"
+mkdir -p "/opt/nodejs/lib/node_modules/fibers/.node-gyp" "/root/.node-gyp/${NODE_VERSION} /home/wekan/.config"
+
+# Install node dependencies
+npm install -g npm@${NPM_VERSION}
+chown --recursive wekan:wekan /home/wekan/.config
+
+# Install Meteor
+cd /home/wekan
+chown --recursive wekan:wekan /home/wekan
+echo "Starting meteor ${METEOR_RELEASE} installation...   \n"
+gosu wekan:wekan curl https://install.meteor.com/ | /bin/sh
+mv /root/.meteor /home/wekan/
+chown --recursive wekan:wekan /home/wekan/.meteor
+
+# sed -i 's/api\.versionsFrom/\/\/api.versionsFrom/' /home/wekan/app/packages/meteor-useraccounts-core/package.js
+cd /home/wekan/.meteor
+gosu wekan:wekan /home/wekan/.meteor/meteor -- help
+
+# Build app (Development)
+cd /home/wekan/app
+gosu wekan:wekan /home/wekan/.meteor/meteor add standard-minifier-js
+gosu wekan:wekan /home/wekan/.meteor/meteor npm install
+
+# Put back the original tar
+mv $(which tar)~ $(which tar)

-USER root
 # Cleanup
-RUN \
-    set -o xtrace && \
-    apt-get clean -y && \
-    apt-get autoremove -y && \
-    rm -Rf /tmp/* && \
-    rm -Rf /home/wekan/app_build && \
-    rm -Rf /var/cache/apt /var/lib/apt/lists && \
-    rm -Rf /var/lib/apt/lists/*
+apt-get remove --purge --assume-yes ${BUILD_DEPS}
+apt-get install --assume-yes --no-install-recommends build-essential
+apt-get autoremove --assume-yes
+apt-get clean --assume-yes
+rm -Rf /tmp/*
+rm -Rf /var/lib/apt/lists/*
+rm -Rf /var/cache/apt
+rm -Rf /var/lib/apt/lists
+rm -Rf /home/wekan/app_build
+
+mkdir /data
+chown wekan --recursive /data
+EOR

 USER wekan

 ENV PORT=3000
 EXPOSE $PORT
+
+STOPSIGNAL SIGKILL
 WORKDIR /home/wekan/app

 #---------------------------------------------------------------------
@@ -276,7 +286,6 @@ WORKDIR /home/wekan/app
 # Add more stack:
 #   bash -c "ulimit -s 65500; exec node --stack-size=65500 main.js"
 #---------------------------------------------------------------------
-#TODO:
-#CMD ["bash", "-c", "ulimit -s 65500; exec node --stack-size=65500 /build/main.js"]
+#

 CMD ["/home/wekan/.meteor/meteor", "run", "--verbose", "--settings", "settings.json"]
@@ -1,18 +1,24 @@
 ## Issue
-<!--
-**[PLEASE UPGRADE](https://github.com/wekan/wekan/wiki/Backup)** to the newest WeKan ® before reporting an issue.
+
+Please report these issues elsewhere:
+
+- SECURITY ISSUES, PGP EMAIL: https://github.com/wekan/wekan/blob/main/SECURITY.md
+- UCS: https://github.com/wekan/univention/issues
+
+**[PLEASE UPGRADE](https://github.com/wekan/wekan/wiki/Backup)** to the newest
+WeKan ® before reporting an issue, if possible.
+
 Please search existing Open and Closed issues, most questions have already been answered.

 If you can not login for any reason: https://github.com/wekan/wekan/wiki/Forgot-Password
-Email settings, only SMTP MAIL_URL and MAIL_FROM are in use: https://github.com/wekan/wekan/wiki/Troubleshooting-Mail
-
-The following types of issues should be reported separately:
- SECURITY ISSUES: https://github.com/wekan/wekan/blob/master/SECURITY.md
- UCS: https://github.com/wekan/univention/issues
-->
+Email settings, only SMTP MAIL_URL and MAIL_FROM are in use:
+https://github.com/wekan/wekan/wiki/Troubleshooting-Mail

 ### Server Setup Information
-<!-- Please anonymize info, and do not any of your Wekan board URLs, passwords, API tokens etc to this public issue. -->
+
+Please anonymize info, and do not any of your Wekan board URLs, passwords,
+API tokens etc to this public issue.
+
 * Did you test in newest Wekan?:
 * Did you configure root-url correctly so Wekan cards open correctly (see https://github.com/wekan/wekan/wiki/Settings)?
 * Operating System:
@@ -23,13 +29,25 @@ The following types of issues should be reported separately:
 * What webbrowser version are you using (Wekan should work on all modern browsers that support Javascript)?

 ### Problem description
-<!-- Add a recorded animated gif (e.g. with https://github.com/phw/peek) about how it works currently, and screenshot mockups how it should work. -->
+
+Add a recorded animated gif (e.g. with https://github.com/phw/peek) about
+how it works currently, and screenshot mockups how it should work.
+
+
 #### Reproduction Steps

-#### Logs
-<!-- Check Right Click>Inspect>Console in you browser - generally Chrome shows more detailed info than Firefox. -->

-<!-- Please anonymize logs.
+
+#### Logs
+
+Check Right Click / Inspect / Console in you browser - generally Chromium
+based browsers show more detailed info than Firefox based browsers.
+
+Please anonymize logs.
+
 Snap: sudo snap logs wekan.wekan
+
 Docker: sudo docker logs wekan-app
-If logs are very long, attach them in .zip file -->
+
+If logs are very long, attach them in .zip file
+
@@ -1,69 +0,0 @@
-name: "CodeQL"
-
-on:
-  push:
-    branches: [master]
-  pull_request:
-    # The branches below must be a subset of the branches above
-    branches: [master]
-  schedule:
-    - cron: '0 16 * * 3'
-
-permissions:
-  contents: read
-
-jobs:
-  analyze:
-    permissions:
-      actions: read  # for github/codeql-action/init to get workflow details
-      contents: read  # for actions/checkout to fetch code
-      security-events: write  # for github/codeql-action/autobuild to send a status report
-    name: Analyze
-    runs-on: ubuntu-latest
-
-    strategy:
-      fail-fast: false
-      matrix:
-        # Override automatic language detection by changing the below list
-        # Supported options are ['csharp', 'cpp', 'go', 'java', 'javascript', 'python']
-        language: ['javascript', 'python']
-        # Learn more...
-        # https://docs.github.com/en/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-code-scanning#overriding-automatic-language-detection
-
-    steps:
-    - name: Checkout repository
-      uses: actions/checkout@v3
-      with:
-        # We must fetch at least the immediate parents so that if this is
-        # a pull request then we can checkout the head.
-        fetch-depth: 2
-
-    # If this run was triggered by a pull request event, then checkout
-    # the head of the pull request instead of the merge commit.
-    - run: git checkout HEAD^2
-      if: ${{ github.event_name == 'pull_request' }}
-
-    # Initializes the CodeQL tools for scanning.
-    - name: Initialize CodeQL
-      uses: github/codeql-action/init@v2
-      with:
-        languages: ${{ matrix.language }}
-
-    # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
-    # If this step fails, then you should remove it and run the build manually (see below)
-    - name: Autobuild
-      uses: github/codeql-action/autobuild@v2
-
-    # ℹ️ Command-line programs to run using the OS shell.
-    # 📚 https://git.io/JvXDl
-
-    # ✏️ If the Autobuild fails above, remove it and uncomment the following three lines
-    #    and modify them (or add more) to build your code if your project
-    #    uses a compiled language
-
-    #- run: |
-    #   make bootstrap
-    #   make release
-
-    - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v2
@@ -9,6 +9,6 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - name: 'Checkout Repository'
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
      - name: 'Dependency Review'
-        uses: actions/dependency-review-action@v3
+        uses: actions/dependency-review-action@v4
@@ -9,11 +9,11 @@ on:
  schedule:
    - cron: '28 23 * * *'
  push:
-    branches: [ master ]
+    branches: [ main ]
    # Publish semver tags as releases.
    tags: [ 'v*.*.*' ]
  pull_request:
-    branches: [ master ]
+    branches: [ main ]

 env:
  # Use docker.io for Docker Hub if empty
@@ -32,13 +32,13 @@ jobs:

    steps:
      - name: Checkout repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4

      # Login against a Docker registry except on PR
      # https://github.com/docker/login-action
      - name: Log into registry ${{ env.REGISTRY }}
        if: github.event_name != 'pull_request'
-        uses: docker/login-action@465a07811f14bebb1938fbed4728c6a1ff8901fc
+        uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567
        with:
          registry: ${{ env.REGISTRY }}
          username: ${{ github.actor }}
@@ -48,14 +48,14 @@ jobs:
      # https://github.com/docker/metadata-action
      - name: Extract Docker metadata
        id: meta
-        uses: docker/metadata-action@818d4b7b91585d195f67373fd9cb0332e31a7175
+        uses: docker/metadata-action@8e5442c4ef9f78752691e2d8f8d19755c6f78e81
        with:
          images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}

      # Build and push Docker image with Buildx (don't push on PR)
      # https://github.com/docker/build-push-action
      - name: Build and push Docker image
-        uses: docker/build-push-action@2eb1c1961a95fc15694676618e422e8ba1d63825
+        uses: docker/build-push-action@5176d81f87c23d6fc96624dfdbcd9f3830bbe445
        with:
          context: .
          push: ${{ github.event_name != 'pull_request' }}
@@ -3,7 +3,7 @@ name: Docker Image CI
 on:
  push:
    branches:
-      - master
+      - main

 permissions:
  contents: read
@@ -15,6 +15,6 @@ jobs:
    runs-on: ubuntu-latest

    steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
    - name: Build the Docker image
      run: docker build . --file Dockerfile --tag wekan:$(date +%s)
@@ -3,7 +3,7 @@ name: Release Charts
 on:
  push:
    branches:
-      - master
+      - main

 permissions:
  contents: read
@@ -15,7 +15,7 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
        with:
          fetch-depth: 0

@@ -25,6 +25,6 @@ jobs:
          git config user.email "$GITHUB_ACTOR@users.noreply.github.com"

      - name: Run chart-releaser
-        uses: helm/chart-releaser-action@v1.5.0
+        uses: helm/chart-releaser-action@v1.6.0
        env:
          CR_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
@@ -3,7 +3,7 @@ name: Test suite
 on:
  push:
    branches:
-      - master
+      - main
  pull_request:

 permissions:
@@ -18,7 +18,7 @@ jobs:
 #    runs-on: ubuntu-latest
 #    steps:
 #    - name: checkout
-#      uses: actions/checkout@v3
+#      uses: actions/checkout@v4
 #
 #    - name: setup node
 #      uses: actions/setup-node@v1
@@ -42,7 +42,7 @@ jobs:
 #    needs: [lintcode]
 #    steps:
 #    - name: checkout
-#      uses: actions/checkout@v3
+#      uses: actions/checkout@v4
 #
 #    - name: setup node
 #      uses: actions/setup-node@v1
@@ -65,7 +65,7 @@ jobs:
 #    needs: [lintcode,lintstyle]
 #    steps:
 #    - name: checkout
-#      uses: actions/checkout@v3
+#      uses: actions/checkout@v4
 #
 #    - name: setup node
 #      uses: actions/setup-node@v1
@@ -90,12 +90,12 @@ jobs:

      # CHECKOUTS
      - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4

      # CACHING
      - name: Install Meteor
        id: cache-meteor-install
-        uses: actions/cache@v3
+        uses: actions/cache@v4
        with:
          path: ~/.meteor
          key: v1-meteor-${{ hashFiles('.meteor/versions') }}
@@ -104,7 +104,7 @@ jobs:

      - name: Cache NPM dependencies
        id: cache-meteor-npm
-        uses: actions/cache@v3
+        uses: actions/cache@v4
        with:
          path: ~/.npm
          key: v1-npm-${{ hashFiles('package-lock.json') }}
@@ -113,7 +113,7 @@ jobs:

      - name: Cache Meteor build
        id: cache-meteor-build
-        uses: actions/cache@v3
+        uses: actions/cache@v4
        with:
          path: |
            .meteor/local/resolver-result-cache.json
@@ -125,7 +125,7 @@ jobs:
            v1-meteor_build_cache-

      - name: Setup meteor
-        uses: meteorengineer/setup-meteor@v1
+        uses: meteorengineer/setup-meteor@v2
        with:
          meteor-release: '2.2'

@@ -136,7 +136,7 @@ jobs:
        run: sh ./test-wekan.sh -cv

      - name: Upload coverage
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
        with:
          name: coverage-folder
          path: .coverage/
@@ -147,17 +147,17 @@ jobs:
    needs: [tests]
    steps:
      - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4

      - name: Download coverage
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4
        with:
          name: coverage-folder
          path: .coverage/


      - name: Coverage Report
-        uses: VeryGoodOpenSource/very_good_coverage@v2.1.0
+        uses: VeryGoodOpenSource/very_good_coverage@v3.0.0
        with:
          path: ".coverage/lcov.info"
          min_coverage: 1 # TODO add tests and increase to 95!
@@ -6,7 +6,7 @@
 meteor-base@1.5.1

 # Build system
-ecmascript@0.16.7
+ecmascript@0.16.8
 standard-minifier-js@2.8.1
 mquandalle:jade
 coffeescript@2.4.1!
@@ -16,16 +16,15 @@ es5-shim@4.8.0

 # Collections
 aldeed:collection2
-cfs:standard-packages
 cottz:publish-relations
 dburles:collection-helpers
 idmontie:migrations
 easy:search
-mongo@1.16.7
+mongo@1.16.8
 mquandalle:collection-mutations

 # Account system
-accounts-password@2.3.4
+accounts-password@2.4.0
 useraccounts:core
 useraccounts:flow-routing
 useraccounts:unstyled
@@ -43,7 +42,7 @@ jquery@3.0.0!
 random@1.2.1
 reactive-dict@1.3.1
 session@1.2.1
-tracker@1.3.2
+tracker@1.3.3
 underscore@1.0.13
 arillo:flow-router-helpers
 audit-argument-checks@1.0.7
@@ -54,91 +53,11 @@ raix:handlebar-helpers
 http@2.0.0! # force new http package

 # Datepicker
-rajit:bootstrap3-datepicker
-rajit:bootstrap3-datepicker-de
-rajit:bootstrap3-datepicker-tr
-rajit:bootstrap3-datepicker-ja
-rajit:bootstrap3-datepicker-fr
-rajit:bootstrap3-datepicker-it
-rajit:bootstrap3-datepicker-th
-rajit:bootstrap3-datepicker-nl
-rajit:bootstrap3-datepicker-es
-rajit:bootstrap3-datepicker-lv
-rajit:bootstrap3-datepicker-sv
-rajit:bootstrap3-datepicker-gl
-rajit:bootstrap3-datepicker-eu
-rajit:bootstrap3-datepicker-vi
-rajit:bootstrap3-datepicker-no
-rajit:bootstrap3-datepicker-en-gb
-rajit:bootstrap3-datepicker-ro
-rajit:bootstrap3-datepicker-rs
-rajit:bootstrap3-datepicker-ru
-rajit:bootstrap3-datepicker-bs
-rajit:bootstrap3-datepicker-mn
-rajit:bootstrap3-datepicker-id
-rajit:bootstrap3-datepicker-fa
-rajit:bootstrap3-datepicker-ko
-rajit:bootstrap3-datepicker-pt
-rajit:bootstrap3-datepicker-sl
-rajit:bootstrap3-datepicker-sq
-rajit:bootstrap3-datepicker-cy
-rajit:bootstrap3-datepicker-ka
-rajit:bootstrap3-datepicker-sr
-rajit:bootstrap3-datepicker-az
-rajit:bootstrap3-datepicker-cs
-rajit:bootstrap3-datepicker-me
-rajit:bootstrap3-datepicker-ta
-rajit:bootstrap3-datepicker-eo
-rajit:bootstrap3-datepicker-oc
-rajit:bootstrap3-datepicker-he
-rajit:bootstrap3-datepicker-sw
-rajit:bootstrap3-datepicker-rs-latin
-rajit:bootstrap3-datepicker-da
-rajit:bootstrap3-datepicker-pt-br
-rajit:bootstrap3-datepicker-br
-rajit:bootstrap3-datepicker-it-ch
-rajit:bootstrap3-datepicker-en-za
-rajit:bootstrap3-datepicker-en-ie
-rajit:bootstrap3-datepicker-en-ca
-rajit:bootstrap3-datepicker-uz-latn
-rajit:bootstrap3-datepicker-ms
-rajit:bootstrap3-datepicker-uk
-rajit:bootstrap3-datepicker-hu
-rajit:bootstrap3-datepicker-fo
-rajit:bootstrap3-datepicker-kr
-rajit:bootstrap3-datepicker-hi
-rajit:bootstrap3-datepicker-km
-rajit:bootstrap3-datepicker-fi
-rajit:bootstrap3-datepicker-is
-rajit:bootstrap3-datepicker-kh
-rajit:bootstrap3-datepicker-bg
-rajit:bootstrap3-datepicker-bn
-rajit:bootstrap3-datepicker-pl
-rajit:bootstrap3-datepicker-et
-rajit:bootstrap3-datepicker-ar
-rajit:bootstrap3-datepicker-ca
-rajit:bootstrap3-datepicker-kk
-rajit:bootstrap3-datepicker-sk
-rajit:bootstrap3-datepicker-el
-rajit:bootstrap3-datepicker-hy
-rajit:bootstrap3-datepicker-hr
-rajit:bootstrap3-datepicker-tg
-rajit:bootstrap3-datepicker-nb
-rajit:bootstrap3-datepicker-mk
-rajit:bootstrap3-datepicker-nl-be
-rajit:bootstrap3-datepicker-zh-cn
-rajit:bootstrap3-datepicker-ar-tn
-rajit:bootstrap3-datepicker-en-au
-rajit:bootstrap3-datepicker-fr-ch
-rajit:bootstrap3-datepicker-zh-tw
-rajit:bootstrap3-datepicker-uz-cyrl
-rajit:bootstrap3-datepicker-sr-latin
-rajit:bootstrap3-datepicker-en-nz
+wekan-bootstrap-datepicker

 # UI components
 ostrio:i18n
 reactive-var@1.0.12
-fortawesome:fontawesome
 mousetrap:mousetrap
 mquandalle:jquery-textcomplete
 mquandalle:mousetrap-bindglobal
@@ -147,8 +66,6 @@ meteor-autosize
 shell-server@0.5.0
 email@2.2.5
 dynamic-import@0.7.3
-cfs:gridfs
-rzymek:fullcalendar
 msavin:usercache
 # Keep stylus in 1.1.0, because building v2 takes extra 52 minutes.
 meteorhacks:subs-manager
@@ -156,7 +73,6 @@ meteorhacks:aggregate@1.3.0
 wekan-markdown
 konecty:mongo-counter
 percolate:synced-cron
-cfs:filesystem
 ostrio:cookies
 ostrio:files@2.3.0
 pascoual:pdfkit
@@ -167,10 +83,14 @@ matb33:collection-hooks
 simple:json-routes
 kadira:flow-router
 spacebars
-service-configuration@1.3.1
+service-configuration@1.3.2
 communitypackages:picker
 minifier-css@1.6.4
 blaze
 kadira:blaze-layout
 peerlibrary:blaze-components
-ejson
+ejson@1.1.3
+logging@1.3.3
+wekan-fullcalendar
+momentjs:moment@2.29.3
+wekan-fontawesome
@@ -1 +1 @@
-METEOR@2.13
+METEOR@2.14
@@ -1,6 +1,6 @@
-accounts-base@2.2.8
-accounts-oauth@1.4.2
-accounts-password@2.3.4
+accounts-base@2.2.10
+accounts-oauth@1.4.3
+accounts-password@2.4.0
 aldeed:collection2@2.10.0
 aldeed:collection2-core@1.2.0
 aldeed:schema-deny@1.1.0
@@ -10,34 +10,16 @@ allow-deny@1.1.1
 arillo:flow-router-helpers@0.5.2
 audit-argument-checks@1.0.7
 autoupdate@1.8.0
-babel-compiler@7.10.4
+babel-compiler@7.10.5
 babel-runtime@1.5.1
 base64@1.0.12
 binary-heap@1.0.11
 blaze@2.7.1
 blaze-tools@1.1.3
-boilerplate-generator@1.7.1
+boilerplate-generator@1.7.2
 caching-compiler@1.2.2
 caching-html-compiler@1.2.1
 callback-hook@1.5.1
-cfs:access-point@0.1.49
-cfs:base-package@0.0.30
-cfs:collection@0.5.5
-cfs:collection-filters@0.2.4
-cfs:data-man@0.0.6
-cfs:file@0.1.17
-cfs:filesystem@0.1.2
-cfs:gridfs@0.0.34
-cfs:http-methods@0.0.32
-cfs:http-publish@0.0.13
-cfs:power-queue@0.9.11
-cfs:reactive-list@0.0.9
-cfs:reactive-property@0.0.4
-cfs:standard-packages@0.5.10
-cfs:storage-adapter@0.2.4
-cfs:tempstore@0.1.6
-cfs:upload-http@0.0.20
-cfs:worker@0.1.5
 check@1.3.2
 coffeescript@2.7.0
 coffeescript-compiler@2.4.1
@@ -47,23 +29,22 @@ dburles:collection-helpers@1.1.0
 ddp@1.4.1
 ddp-client@2.6.1
 ddp-common@1.4.0
-ddp-rate-limiter@1.2.0
-ddp-server@2.6.2
+ddp-rate-limiter@1.2.1
+ddp-server@2.7.0
 deps@1.0.12
 diff-sequence@1.1.2
 dynamic-import@0.7.3
 easy:search@2.2.1
 easysearch:components@2.2.2
 easysearch:core@2.2.2
-ecmascript@0.16.7
+ecmascript@0.16.8
 ecmascript-runtime@0.8.1
 ecmascript-runtime-client@0.12.1
 ecmascript-runtime-server@0.11.0
 ejson@1.1.3
 email@2.2.5
 es5-shim@4.8.0
-fetch@0.1.3
-fortawesome:fontawesome@4.7.0
+fetch@0.1.4
 geojson-utils@1.0.11
 hot-code-push@1.0.4
 html-tools@1.1.3
@@ -77,13 +58,12 @@ kadira:blaze-layout@2.3.0
 kadira:dochead@1.5.0
 kadira:flow-router@2.12.1
 konecty:mongo-counter@0.0.5_3
-livedata@1.0.18
 lmieulet:meteor-coverage@1.1.4
 localstorage@1.2.0
-logging@1.3.2
-matb33:collection-hooks@1.2.2
+logging@1.3.3
+matb33:collection-hooks@1.3.0
 mdg:validation-error@0.5.1
-meteor@1.11.3
+meteor@1.11.5
 meteor-autosize@5.0.1
 meteor-base@1.5.1
 meteorhacks:aggregate@1.3.0
@@ -97,11 +77,11 @@ minifier-css@1.6.4
 minifier-js@2.7.5
 minifiers@1.1.8-faster-rebuild.0
 minimongo@1.9.3
-modern-browsers@0.1.9
-modules@0.19.0
+modern-browsers@0.1.10
+modules@0.20.0
 modules-runtime@0.13.1
 momentjs:moment@2.29.3
-mongo@1.16.7
+mongo@1.16.8
 mongo-decimal@0.1.3
 mongo-dev-server@1.1.0
 mongo-id@1.0.8
@@ -114,8 +94,8 @@ mquandalle:jade-compiler@0.4.5
 mquandalle:jquery-textcomplete@0.8.0_1
 mquandalle:mousetrap-bindglobal@0.0.1
 msavin:usercache@1.8.0
-npm-mongo@4.16.0
-oauth@2.2.0
+npm-mongo@4.17.2
+oauth@2.2.1
 oauth2@1.3.2
 observe-sequence@1.0.21
 ongoworks:speakingurl@1.1.0
@@ -131,100 +111,19 @@ peerlibrary:blaze-components@0.23.0
 peerlibrary:computed-field@0.10.0
 peerlibrary:data-lookup@0.3.0
 peerlibrary:reactive-field@0.6.0
-percolate:synced-cron@1.3.2
+percolate:synced-cron@1.5.2
 promise@0.12.2
 raix:eventemitter@0.1.3
 raix:handlebar-helpers@0.2.5
-rajit:bootstrap3-datepicker@1.7.1_1
-rajit:bootstrap3-datepicker-ar@1.7.1
-rajit:bootstrap3-datepicker-ar-tn@1.7.1
-rajit:bootstrap3-datepicker-az@1.7.1
-rajit:bootstrap3-datepicker-bg@1.7.1
-rajit:bootstrap3-datepicker-bn@1.7.1
-rajit:bootstrap3-datepicker-br@1.7.1
-rajit:bootstrap3-datepicker-bs@1.7.1
-rajit:bootstrap3-datepicker-ca@1.7.1
-rajit:bootstrap3-datepicker-cs@1.7.1
-rajit:bootstrap3-datepicker-cy@1.7.1
-rajit:bootstrap3-datepicker-da@1.7.1
-rajit:bootstrap3-datepicker-de@1.7.1
-rajit:bootstrap3-datepicker-el@1.7.1
-rajit:bootstrap3-datepicker-en-au@1.7.1
-rajit:bootstrap3-datepicker-en-ca@1.7.1
-rajit:bootstrap3-datepicker-en-gb@1.7.1
-rajit:bootstrap3-datepicker-en-ie@1.7.1
-rajit:bootstrap3-datepicker-en-nz@1.7.1
-rajit:bootstrap3-datepicker-en-za@1.7.1
-rajit:bootstrap3-datepicker-eo@1.7.1
-rajit:bootstrap3-datepicker-es@1.7.1
-rajit:bootstrap3-datepicker-et@1.7.1
-rajit:bootstrap3-datepicker-eu@1.7.1
-rajit:bootstrap3-datepicker-fa@1.7.1
-rajit:bootstrap3-datepicker-fi@1.7.1
-rajit:bootstrap3-datepicker-fo@1.7.1
-rajit:bootstrap3-datepicker-fr@1.7.1
-rajit:bootstrap3-datepicker-fr-ch@1.7.1
-rajit:bootstrap3-datepicker-gl@1.7.1
-rajit:bootstrap3-datepicker-he@1.7.1
-rajit:bootstrap3-datepicker-hi@1.7.1
-rajit:bootstrap3-datepicker-hr@1.7.1
-rajit:bootstrap3-datepicker-hu@1.7.1
-rajit:bootstrap3-datepicker-hy@1.7.1
-rajit:bootstrap3-datepicker-id@1.7.1
-rajit:bootstrap3-datepicker-is@1.7.1
-rajit:bootstrap3-datepicker-it@1.7.1
-rajit:bootstrap3-datepicker-it-ch@1.7.1
-rajit:bootstrap3-datepicker-ja@1.7.1
-rajit:bootstrap3-datepicker-ka@1.7.1
-rajit:bootstrap3-datepicker-kh@1.7.1
-rajit:bootstrap3-datepicker-kk@1.7.1
-rajit:bootstrap3-datepicker-km@1.7.1
-rajit:bootstrap3-datepicker-ko@1.7.1
-rajit:bootstrap3-datepicker-kr@1.7.1
-rajit:bootstrap3-datepicker-lv@1.7.1
-rajit:bootstrap3-datepicker-me@1.7.1
-rajit:bootstrap3-datepicker-mk@1.7.1
-rajit:bootstrap3-datepicker-mn@1.7.1
-rajit:bootstrap3-datepicker-ms@1.7.1
-rajit:bootstrap3-datepicker-nb@1.7.1
-rajit:bootstrap3-datepicker-nl@1.7.1
-rajit:bootstrap3-datepicker-nl-be@1.7.1
-rajit:bootstrap3-datepicker-no@1.7.1
-rajit:bootstrap3-datepicker-oc@1.7.1
-rajit:bootstrap3-datepicker-pl@1.7.1
-rajit:bootstrap3-datepicker-pt@1.7.1
-rajit:bootstrap3-datepicker-pt-br@1.7.1
-rajit:bootstrap3-datepicker-ro@1.7.1
-rajit:bootstrap3-datepicker-rs@1.7.1
-rajit:bootstrap3-datepicker-rs-latin@1.7.1
-rajit:bootstrap3-datepicker-ru@1.7.1
-rajit:bootstrap3-datepicker-sk@1.7.1
-rajit:bootstrap3-datepicker-sl@1.7.1
-rajit:bootstrap3-datepicker-sq@1.7.1
-rajit:bootstrap3-datepicker-sr@1.7.1
-rajit:bootstrap3-datepicker-sr-latin@1.7.1
-rajit:bootstrap3-datepicker-sv@1.7.1
-rajit:bootstrap3-datepicker-sw@1.7.1
-rajit:bootstrap3-datepicker-ta@1.7.1
-rajit:bootstrap3-datepicker-tg@1.7.1
-rajit:bootstrap3-datepicker-th@1.7.1
-rajit:bootstrap3-datepicker-tr@1.7.1
-rajit:bootstrap3-datepicker-uk@1.7.1
-rajit:bootstrap3-datepicker-uz-cyrl@1.7.1
-rajit:bootstrap3-datepicker-uz-latn@1.7.1
-rajit:bootstrap3-datepicker-vi@1.7.1
-rajit:bootstrap3-datepicker-zh-cn@1.7.1
-rajit:bootstrap3-datepicker-zh-tw@1.7.1
 random@1.2.1
 rate-limit@1.1.1
-react-fast-refresh@0.2.7
+react-fast-refresh@0.2.8
 reactive-dict@1.3.1
 reactive-var@1.0.12
 reload@1.3.1
 retry@1.1.0
 routepolicy@1.1.1
-rzymek:fullcalendar@3.8.0
-service-configuration@1.3.1
+service-configuration@1.3.3
 session@1.2.1
 sha@1.0.9
 shell-server@0.5.0
@@ -233,7 +132,7 @@ simple:json-routes@2.3.1
 simple:rest-accounts-password@1.2.2
 simple:rest-bearer-token-parser@1.1.1
 simple:rest-json-error-handler@1.1.1
-socket-stream-client@0.5.1
+socket-stream-client@0.5.2
 spacebars@1.4.1
 spacebars-compiler@1.3.1
 standard-minifier-js@2.8.1
@@ -242,22 +141,26 @@ templating@1.4.1
 templating-compiler@1.4.1
 templating-runtime@1.5.0
 templating-tools@1.2.2
-tracker@1.3.2
+tracker@1.3.3
+typescript@4.9.5
 ui@1.0.13
 underscore@1.0.13
 url@1.3.2
 useraccounts:core@1.16.2
 useraccounts:flow-routing@1.15.0
 useraccounts:unstyled@1.14.2
-webapp@1.13.5
+webapp@1.13.6
 webapp-hashing@1.1.1
 wekan-accounts-cas@0.1.0
 wekan-accounts-lockout@1.0.0
 wekan-accounts-oidc@1.0.10
 wekan-accounts-sandstorm@0.8.0
+wekan-bootstrap-datepicker@1.10.0
+wekan-fontawesome@6.4.2
+wekan-fullcalendar@3.10.5
 wekan-ldap@0.0.2
 wekan-markdown@1.0.9
 wekan-oidc@1.0.12
 yasaricli:slugify@0.0.7
 zimme:active-route@2.3.2
-zodern:types@1.0.9
+zodern:types@1.0.10
@@ -0,0 +1,22 @@
+# Code of Conduct
+
+For all code at WeKan GitHub Organization https://github.com/wekan
+
+- All code in pull requests need to have permission already to add it to WeKan with MIT license, and will become MIT license.
+- All code xet7 add is MIT license.
+- For any dependencies, permissive licenses like https://copyfree.org are preferred
+- For anything currently that is non-permissive (like GPL, AGPL, SSPL), those will be replaced with permissive-licensed alternatives
+
+# Reporting about violations or something else
+
+## Private reports
+
+- Email support (at) wekan.team using [this PGP public key](support-at-wekan.team_pgp-publickey.asc) if possible
+- Security issues: [SECURITY.md](SECURITY.md)
+- License violations
+- Anything private, sensitive or negative
+
+## Public
+
+- Feature Requests and Bug Reports https://github.com/wekan/wekan/issues
+- Anything happy, positive, encouraging, helping, at friendly WeKan Global FOSS Community
@@ -1,19 +1,35 @@
+## About money
+
+Not paid:
+
+- Money is not paid for these, everyone uses their own time at their own cost:
+  - Security reports, see [SECURITY.md](SECURITY.md)
+  - Pull requests
+  - xet7 checking pull requests
+- Public Community Support
+  - https://github.com/wekan/wekan/issues
+
+Paid by customers of WeKan Team:
+
+- Commercial Support at https://wekan.team/commercial-support/
+  - Support
+  - Private Chat
+  - Features
+  - Fixes
+  - Hosting
+
 ## Contributing Security related

 For responsible security disclosure, please follow this process:
-https://github.com/wekan/wekan/blob/master/SECURITY.md
+https://github.com/wekan/wekan/blob/main/SECURITY.md

 CVE Hall of Fame is at https://wekan.github.io/hall-of-fame/

 ## Contributing to Documentation Wiki

-Please clone wiki:
-```
-git clone https://github.com/wekan/wekan.wiki
-```
-Edit .md files, and add changed files in .zip attachment
-directly to comment of new issue at
-https://github.com/wekan/wekan/issues 
+Fork WeKan repo https://github.com/wekan/wekan ,
+edit `docs` directory content at GitHub web interface,
+and click send PR.

 ## Contributing code

@@ -22,7 +38,7 @@ https://github.com/wekan/wekan/issues
 WeKan code contributors Hall of Fame is at ChangeLog, where
 GitHub usernames are mentioned with changes added:

-https://github.com/wekan/wekan/blob/master/CHANGELOG.md
+https://github.com/wekan/wekan/blob/main/CHANGELOG.md

 Changes can be like typo fixes, bugfixes, features, or anything else
 like for example at open GitHub issues https://github.com/wekan/wekan/issues .
@@ -42,7 +58,7 @@ About 300 persons have contributed to WeKan, stats at:

 https://www.openhub.net/p/wekan

-WeKan maintainer xet7 checks PR for typos etc before accepting to WeKan,
+WeKan maintainer xet7 reviews PR for typos etc before accepting to WeKan,
 so that WeKan code will still work OK.

 ## Contributing translations
@@ -53,7 +69,7 @@ https://transifex.com/wekan/wekan
 When adding new features, in your PR to
 https://github.com/wekan/wekan/pulls
 only add new English source language strings
-to https://github.com/wekan/wekan/blob/master/imports/i18n/data/en.i18n.json
+to https://github.com/wekan/wekan/blob/main/imports/i18n/data/en.i18n.json

 Maintainer of WeKan xet7 downloads all newest
 translations from Transifex and adds
@@ -62,12 +78,10 @@ new release.

 ## About WeKan Organization https://github.com/wekan

-xet7 rarely adds any new members to GitHub Organization,
-because xet7 prefers to check PRs.
+Only xet7 has write access to WeKan Organization.

-For some repos (other than https://github.com/wekan/wekan ),
-some contributors have direct commit access.
+xet7 reviews all PRs before merging.

-Some contributors are mentioned at this outdated page:
+There has been over 300 contributors to WeKan, newest stats at:

-https://github.com/wekan/wekan/wiki/Team
+https://www.openhub.net/p/wekan
@@ -1,10 +1,8 @@
-FROM --platform=linux/amd64 ubuntu:23.04 as wekan
+FROM ubuntu:24.04
 LABEL maintainer="wekan"
-
-# 2022-09-04:
-# - above "--platform=linux/amd64 ubuntu:22.04 as wekan" is needed to build Dockerfile
-#   correctly on Mac M1 etc, to not get this error:
-#   https://stackoverflow.com/questions/71040681/qemu-x86-64-could-not-open-lib64-ld-linux-x86-64-so-2-no-such-file-or-direc
+LABEL org.opencontainers.image.ref.name="ubuntu"
+LABEL org.opencontainers.image.version="24.04"
+LABEL org.opencontainers.image.source="https://github.com/wekan/wekan"

 # 2022-04-25:
 # - gyp does not yet work with Ubuntu 22.04 ubuntu:rolling,
@@ -13,24 +11,23 @@ LABEL maintainer="wekan"
 # 2021-09-18:
 # - Above Ubuntu base image copied from Docker Hub ubuntu:hirsute-20210825
 #   to Quay to avoid Docker Hub rate limits.
-
-# Set the environment variables (defaults where required)
-# DOES NOT WORK: paxctl fix for alpine linux: https://github.com/wekan/wekan/issues/1303
-# ENV BUILD_DEPS="paxctl"
 ARG DEBIAN_FRONTEND=noninteractive

-ENV BUILD_DEPS="apt-utils libarchive-tools gnupg gosu wget curl bzip2 g++ build-essential git ca-certificates python3" \
+ENV BUILD_DEPS="apt-utils gnupg gosu wget bzip2 g++ curl libarchive-tools build-essential git ca-certificates python3"
+
+ENV \
    DEBUG=false \
    NODE_VERSION=v14.21.4 \
-    METEOR_RELEASE=METEOR@2.13 \
+    METEOR_RELEASE=METEOR@2.14 \
    USE_EDGE=false \
    METEOR_EDGE=1.5-beta.17 \
-    NPM_VERSION=latest \
+    NPM_VERSION=6.14.17 \
    FIBERS_VERSION=4.0.1 \
    ARCHITECTURE=linux-x64 \
    SRC_PATH=./ \
    WITH_API=true \
    RESULTS_PER_PAGE="" \
+    DEFAULT_BOARD_ID="" \
    ACCOUNTS_LOCKOUT_KNOWN_USERS_FAILURES_BEFORE=3 \
    ACCOUNTS_LOCKOUT_KNOWN_USERS_PERIOD=60 \
    ACCOUNTS_LOCKOUT_KNOWN_USERS_FAILURE_WINDOW=15 \
@@ -65,6 +62,7 @@ ENV BUILD_DEPS="apt-utils libarchive-tools gnupg gosu wget curl bzip2 g++ build-
    OIDC_REDIRECTION_ENABLED=false \
    OAUTH2_CA_CERT="" \
    OAUTH2_ADFS_ENABLED=false \
+    OAUTH2_B2C_ENABLED=false \
    OAUTH2_LOGIN_STYLE=redirect \
    OAUTH2_CLIENT_ID="" \
    OAUTH2_SECRET="" \
@@ -160,7 +158,7 @@ ENV BUILD_DEPS="apt-utils libarchive-tools gnupg gosu wget curl bzip2 g++ build-
    WRITABLE_PATH=/data \
    S3=""

-#   NODE_OPTIONS="--max_old_space_size=4096" \
+#   NODE_OPTIONS="--max_old_space_size=4096"

 #---------------------------------------------
 # == at docker-compose.yml: AUTOLOGIN WITH OIDC/OAUTH2 ====
@@ -171,99 +169,98 @@ ENV BUILD_DEPS="apt-utils libarchive-tools gnupg gosu wget curl bzip2 g++ build-
 # Copy the app to the image
 COPY ${SRC_PATH} /home/wekan/app

-RUN \
-    set -o xtrace && \
-    # Add non-root user wekan
-    useradd --user-group --system --home-dir /home/wekan wekan && \
-    \
-    # OS dependencies
-    apt-get update -y && apt-get install -y --no-install-recommends ${BUILD_DEPS} && \
-    \
-    # Meteor installer doesn't work with the default tar binary, so using bsdtar while installing.
-    # https://github.com/coreos/bugs/issues/1095#issuecomment-350574389
-    cp $(which tar) $(which tar)~ && \
-    ln -sf $(which bsdtar) $(which tar) && \
-    \
-    # Download nodejs
-    wget https://github.com/wekan/node-v14-esm/releases/download/${NODE_VERSION}/node-${NODE_VERSION}-${ARCHITECTURE}.tar.gz && \
-    wget https://github.com/wekan/node-v14-esm/releases/download/${NODE_VERSION}/SHASUMS256.txt && \
-    #wget https://nodejs.org/dist/${NODE_VERSION}/node-${NODE_VERSION}-${ARCHITECTURE}.tar.gz && \
-    #wget https://nodejs.org/dist/${NODE_VERSION}/SHASUMS256.txt.asc && \
-    #---------------------------------------------------------------------------------------------
-    \
-    # Verify nodejs authenticity
-    grep node-${NODE_VERSION}-${ARCHITECTURE}.tar.gz SHASUMS256.txt | shasum -a 256 -c - && \
-    rm -f SHASUMS256.txt && \
-    #grep ${NODE_VERSION}-${ARCHITECTURE}.tar.gz SHASUMS256.txt.asc | shasum -a 256 -c - && \
-    #rm -f SHASUMS256.txt.asc && \
-    \
-    # Install Node
-    tar xvzf node-${NODE_VERSION}-${ARCHITECTURE}.tar.gz && \
-    rm node-${NODE_VERSION}-${ARCHITECTURE}.tar.gz && \
-    mv node-${NODE_VERSION}-${ARCHITECTURE} /opt/nodejs && \
-    ln -s /opt/nodejs/bin/node /usr/bin/node && \
-    ln -s /opt/nodejs/bin/npm /usr/bin/npm && \
-    mkdir -p /opt/nodejs/lib/node_modules/fibers/.node-gyp /root/.node-gyp/${NODE_VERSION} /home/wekan/.config && \
-    chown wekan --recursive /home/wekan/.config && \
-    \
-    #DOES NOT WORK: paxctl fix for alpine linux: https://github.com/wekan/wekan/issues/1303
-    #paxctl -mC `which node` && \
-    \
-    # Install Node dependencies. Python path for node-gyp.
-    npm install -g npm@${NPM_VERSION} && \
-    \
-    # Change user to wekan and install meteor
-    cd /home/wekan/ && \
-    chown wekan --recursive /home/wekan && \
-    echo "Starting meteor ${METEOR_RELEASE} installation...   \n" && \
-    gosu wekan:wekan curl https://install.meteor.com/ | /bin/sh && \
-    mv /root/.meteor /home/wekan/ && \
-    chown wekan --recursive /home/wekan/.meteor && \
-    \
-    sed -i 's/api\.versionsFrom/\/\/api.versionsFrom/' /home/wekan/app/packages/meteor-useraccounts-core/package.js && \
-    cd /home/wekan/.meteor && \
-    gosu wekan:wekan /home/wekan/.meteor/meteor -- help; \
-    \
-    # Build app
-    cd /home/wekan/app && \
-    mkdir -p /home/wekan/.npm && \
-    chown wekan --recursive /home/wekan/.npm /home/wekan/.config /home/wekan/.meteor && \
-    chmod u+w *.json && \
-    gosu wekan:wekan npm install && \
-    gosu wekan:wekan /home/wekan/.meteor/meteor build --directory /home/wekan/app_build && \
-    cd /home/wekan/app_build/bundle/programs/server/ && \
-    chmod u+w *.json && \
-    gosu wekan:wekan npm install && \
-    cd node_modules/fibers && \
-    node build.js && \
-    cd ../.. && \
-    # Remove legacy webbroser bundle, so that Wekan works also at Android Firefox, iOS Safari, etc.
-    rm -rf /home/wekan/app_build/bundle/programs/web.browser.legacy && \
-    mv /home/wekan/app_build/bundle /build && \
-    \
-    # Put back the original tar
-    mv $(which tar)~ $(which tar) && \
-    \
-    # Cleanup
-    apt-get remove --purge -y ${BUILD_DEPS} && \
-    apt-get autoremove -y && \
-    npm uninstall -g api2html &&\
-    rm -R /tmp/* && \
-    rm -R /var/lib/apt/lists/* && \
-    rm -R /home/wekan/.meteor && \
-    rm -R /home/wekan/app && \
-    rm -R /home/wekan/app_build && \
-    mkdir /data && \
-    chown wekan --recursive /data
-    #cat /home/wekan/python/esprima-python/files.txt | xargs rm -R && \
-    #rm -R /home/wekan/python
-    #rm /home/wekan/install_meteor.sh
+# Install OS
+RUN <<EOR
+set -o xtrace
+
+# Add non-root user wekan
+useradd --user-group --system --home-dir /home/wekan wekan
+# OS dependencies
+apt-get update --assume-yes
+apt-get install --assume-yes --no-install-recommends ${BUILD_DEPS}
+
+# Meteor installer doesn't work with the default tar binary, so using bsdtar while installing.
+# https://github.com/coreos/bugs/issues/1095#issuecomment-350574389
+cp $(which tar) $(which tar)~
+ln -sf $(which bsdtar) $(which tar)
+
+# Install NodeJS
+cd /tmp
+
+# Download nodejs
+wget "https://github.com/wekan/node-v14-esm/releases/download/${NODE_VERSION}/node-${NODE_VERSION}-${ARCHITECTURE}.tar.gz"
+wget "https://github.com/wekan/node-v14-esm/releases/download/${NODE_VERSION}/SHASUMS256.txt"
+
+# Verify nodejs authenticity
+grep "node-${NODE_VERSION}-${ARCHITECTURE}.tar.gz" "SHASUMS256.txt" | shasum -a 256 -c -
+rm -f "SHASUMS256.txt"
+
+# Install Node
+tar xzf "node-$NODE_VERSION-$ARCHITECTURE.tar.gz" -C /usr/local --strip-components=1 --no-same-owner
+rm "node-$NODE_VERSION-$ARCHITECTURE.tar.gz" "SHASUMS256.txt"
+ln -s "/usr/local/bin/node" "/usr/local/bin/nodejs"
+mkdir -p "/opt/nodejs/lib/node_modules/fibers/.node-gyp" "/root/.node-gyp/${NODE_VERSION} /home/wekan/.config"
+
+# Install node dependencies
+npm install -g npm@${NPM_VERSION} --production
+chown --recursive wekan:wekan /home/wekan/.config
+
+# Install Meteor
+cd /home/wekan
+chown --recursive wekan:wekan /home/wekan
+echo "Starting meteor ${METEOR_RELEASE} installation...   \n"
+gosu wekan:wekan curl https://install.meteor.com/ | /bin/sh
+mv /root/.meteor /home/wekan/
+chown --recursive wekan:wekan /home/wekan/.meteor
+
+sed -i 's/api\.versionsFrom/\/\/api.versionsFrom/' /home/wekan/app/packages/meteor-useraccounts-core/package.js
+cd /home/wekan/.meteor
+gosu wekan:wekan /home/wekan/.meteor/meteor -- help
+
+# Build app (Production)
+cd /home/wekan/app
+mkdir -p /home/wekan/.npm
+chown --recursive wekan:wekan /home/wekan/.npm
+chmod u+w *.json
+gosu wekan:wekan meteor npm install --production
+gosu wekan:wekan /home/wekan/.meteor/meteor build --directory /home/wekan/app_build
+cd /home/wekan/app_build/bundle/programs/server/
+chmod u+w *.json
+gosu wekan:wekan meteor npm install --production
+cd node_modules/fibers
+node build.js
+cd ../..
+# Remove legacy webbroser bundle, so that Wekan works also at Android Firefox, iOS Safari, etc.
+rm -rf /home/wekan/app_build/bundle/programs/web.browser.legacy
+mv /home/wekan/app_build/bundle /build
+
+# Put back the original tar
+mv $(which tar)~ $(which tar)
+
+# Cleanup
+apt-get remove --purge --assume-yes ${BUILD_DEPS}
+npm uninstall -g api2html
+apt-get autoremove --assume-yes
+apt-get clean --assume-yes
+rm -Rf /tmp/*
+rm -Rf /var/lib/apt/lists/*
+rm -Rf /var/cache/apt
+rm -Rf /var/lib/apt/lists
+rm -Rf /home/wekan/app_build
+rm -Rf /home/wekan/app
+rm -Rf /home/wekan/.meteor
+
+mkdir /data
+chown wekan --recursive /data
+EOR
+
+USER wekan

 ENV PORT=8080
 EXPOSE $PORT
-USER wekan

 STOPSIGNAL SIGKILL
+WORKDIR /home/wekan/app

 #---------------------------------------------------------------------
 # https://github.com/wekan/wekan/issues/3585#issuecomment-1021522132
@@ -274,6 +271,5 @@ STOPSIGNAL SIGKILL
 #---------------------------------------------------------------------
 #
 # CMD ["node", "/build/main.js"]
-
-#CMD ["bash", "-c", "ulimit -s 65500; exec node --stack-size=65500 /build/main.js"]
+# CMD ["bash", "-c", "ulimit -s 65500; exec node --stack-size=65500 /build/main.js"]
 CMD ["bash", "-c", "ulimit -s 65500; exec node /build/main.js"]
@@ -1,24 +1,18 @@
-FROM amd64/alpine:3.7 AS builder
+FROM arm64v8/ubuntu:23.04 AS builder
+#FROM amd64/alpine:latest AS builder

 # Set the environment variables for builder
-ENV QEMU_VERSION=v4.2.0-6 \
+ENV QEMU_VERSION=v7.2.0-1 \
    QEMU_ARCHITECTURE=aarch64 \
    NODE_ARCHITECTURE=linux-arm64 \
    NODE_VERSION=v14.21.4 \
    WEKAN_VERSION=latest  \
-    WEKAN_ARCHITECTURE=arm64 \
-    NODE_OPTIONS="--max_old_space_size=4096"
-
-#---------------------------------------------------------------------
-# https://github.com/wekan/wekan/issues/3585#issuecomment-1021522132
-# Add more Node heap:
-#   NODE_OPTIONS="--max_old_space_size=4096"
-# Add more stack:
-#   bash -c "ulimit -s 65500; exec node --stack-size=65500 main.js"
-#---------------------------------------------------------------------
+    WEKAN_ARCHITECTURE=arm64

    # Install dependencies
-RUN apk update && apk add ca-certificates outils-sha1 && \
+#RUN apk update && apk add ca-certificates outils-sha1 && \
+RUN echo 'debconf debconf/frontend select Noninteractive' | debconf-set-selections
+RUN apt update && apt install ca-certificates wget unzip -y && \
    \
    # Download qemu static for our architecture
    wget https://github.com/multiarch/qemu-user-static/releases/download/${QEMU_VERSION}/qemu-${QEMU_ARCHITECTURE}-static.tar.gz -O - | tar -xz && \
@@ -33,25 +27,27 @@ RUN apk update && apk add ca-certificates outils-sha1 && \
    unzip wekan-${WEKAN_VERSION}-${WEKAN_ARCHITECTURE}.zip && \
    \
    # Download node and shasums
+    wget https://github.com/wekan/node-v14-esm/releases/download/${NODE_VERSION}/node-${NODE_VERSION}-${NODE_ARCHITECTURE}.tar.gz && \
+    wget https://github.com/wekan/node-v14-esm/releases/download/${NODE_VERSION}/SHASUMS256.txt && \
    #wget https://nodejs.org/dist/${NODE_VERSION}/node-${NODE_VERSION}-${NODE_ARCHITECTURE}.tar.gz && \
    #wget https://nodejs.org/dist/${NODE_VERSION}/SHASUMS256.txt.asc && \
    #wget https://nodejs.org/dist/${NODE_VERSION}/node-${NODE_VERSION}-${NODE_ARCHITECTURE}.tar.gz && \
    #wget https://nodejs.org/dist/${NODE_VERSION}/SHASUMS256.txt.asc && \
    \
    # Verify nodejs authenticity
-    grep node-${NODE_VERSION}-${NODE_ARCHITECTURE}.tar.gz SHASUMS256.txt.asc | sha256sum -c - && \
+    grep node-${NODE_VERSION}-${NODE_ARCHITECTURE}.tar.gz SHASUMS256.txt | sha256sum -c - && \
    \
    # Extract node and remove tar.gz
    tar xvzf node-${NODE_VERSION}-${NODE_ARCHITECTURE}.tar.gz

 # Build wekan dockerfile
-FROM arm64v8/ubuntu:19.10
+FROM --platform=linux/arm64 arm64v8/ubuntu:23.04
 LABEL maintainer="wekan"

 # Set the environment variables (defaults where required)
 ENV QEMU_ARCHITECTURE=aarch64 \
    NODE_ARCHITECTURE=linux-arm64 \
-    NODE_VERSION=v14.21.3 \
+    NODE_VERSION=v14.21.4 \
    NODE_ENV=production \
    NPM_VERSION=latest \
    WITH_API=true \
@@ -77,30 +73,20 @@ RUN \
    ln -s /opt/nodejs/bin/node /usr/bin/node && \
    ln -s /opt/nodejs/bin/npm /usr/bin/npm && \
    mkdir -p /opt/nodejs/lib/node_modules/fibers/.node-gyp /root/.node-gyp/8.16.1 /home/wekan/.config && \
-    chown wekan --recursive /home/wekan/.config && \
-    \
-    # Install Node dependencies
-    npm install -g npm@${NPM_VERSION} && \
-    \
-    # Install Health Check dependencies
-    apk add curl
+    chown wekan --recursive /home/wekan/.config

-HEALTHCHECK --start-period=30s --interval=30s --timeout=10s --retries=3 \
-  CMD curl --fail "http://localhost:$PORT" || exit 1
+#    \
+#    # Install Node dependencies
+#    #npm install -g npm@${NPM_VERSION} && \
+#    \
+#    # Install Health Check dependencies
+#    #apk add curl
+#
+#HEALTHCHECK --start-period=30s --interval=30s --timeout=10s --retries=3 \
+#  CMD curl --fail "http://localhost:$PORT" || exit 1

 EXPOSE $PORT
 USER wekan

-#---------------------------------------------------------------------
-# https://github.com/wekan/wekan/issues/3585#issuecomment-1021522132
-# Add more Node heap:
-#   NODE_OPTIONS="--max_old_space_size=4096"
-# Add more stack:
-#   bash -c "ulimit -s 65500; exec node --stack-size=65500 main.js"
-#---------------------------------------------------------------------
-#
-#CMD ["node", "/home/wekan/bundle/main.js"]
-
-#CMD ["bash", "-c", "ulimit -s 65500; exec node --stack-size=65500 /home/wekan/bundle/main.js"]
 CMD ["bash", "-c", "ulimit -s 65500; exec node /home/wekan/bundle/main.js"]

@@ -0,0 +1,94 @@
+FROM arm64v8/ubuntu:23.04 AS builder
+#FROM --platform=linux/amd64 amd64/ubuntu:23.04 AS builder
+#FROM --platform=linux/amd64 ghcr.io/wekan/wekan:main AS builder
+#FROM arm64v8/ubuntu:23.04 AS builder
+#FROM amd64/alpine:latest AS builder
+
+# Set the environment variables for builder
+ENV QEMU_VERSION=v7.2.0-1 \
+    QEMU_ARCHITECTURE=s390x \
+    NODE_ARCHITECTURE=linux-s390x \
+    NODE_VERSION=v14.21.4 \
+    WEKAN_VERSION=latest  \
+    WEKAN_ARCHITECTURE=s390x
+
+    # Install dependencies
+#RUN apk update && apk add ca-certificates outils-sha1 && \
+RUN echo 'debconf debconf/frontend select Noninteractive' | debconf-set-selections
+RUN apt update && apt install ca-certificates wget unzip -y && \
+    \
+    # Download qemu static for our architecture
+    wget https://github.com/multiarch/qemu-user-static/releases/download/${QEMU_VERSION}/qemu-${QEMU_ARCHITECTURE}-static.tar.gz -O - | tar -xz && \
+    \
+    # Download wekan and shasum
+    wget https://releases.wekan.team/${WEKAN_ARCHITECTURE}/wekan-${WEKAN_VERSION}-${WEKAN_ARCHITECTURE}.zip && \
+    wget https://releases.wekan.team/${WEKAN_ARCHITECTURE}/SHA256SUMS.txt && \
+    # Verify wekan
+    grep wekan-${WEKAN_VERSION}-${WEKAN_ARCHITECTURE}.zip SHA256SUMS.txt | sha256sum -c - && \
+    \
+    # Unzip wekan
+    unzip wekan-${WEKAN_VERSION}-${WEKAN_ARCHITECTURE}.zip && \
+    \
+    # Download node and shasums
+    wget https://github.com/wekan/node-v14-esm/releases/download/${NODE_VERSION}/node-${NODE_VERSION}-${NODE_ARCHITECTURE}.tar.gz && \
+    wget https://github.com/wekan/node-v14-esm/releases/download/${NODE_VERSION}/SHASUMS256.txt && \
+    #wget https://nodejs.org/dist/${NODE_VERSION}/node-${NODE_VERSION}-${NODE_ARCHITECTURE}.tar.gz && \
+    #wget https://nodejs.org/dist/${NODE_VERSION}/SHASUMS256.txt.asc && \
+    #wget https://nodejs.org/dist/${NODE_VERSION}/node-${NODE_VERSION}-${NODE_ARCHITECTURE}.tar.gz && \
+    #wget https://nodejs.org/dist/${NODE_VERSION}/SHASUMS256.txt.asc && \
+    \
+    # Verify nodejs authenticity
+    grep node-${NODE_VERSION}-${NODE_ARCHITECTURE}.tar.gz SHASUMS256.txt | sha256sum -c - && \
+    \
+    # Extract node and remove tar.gz
+    tar xvzf node-${NODE_VERSION}-${NODE_ARCHITECTURE}.tar.gz
+
+# Build wekan dockerfile
+FROM --platform=linux/s390x s390x/ubuntu:23.04
+LABEL maintainer="wekan"
+
+# Set the environment variables (defaults where required)
+ENV QEMU_ARCHITECTURE=s390x \
+    NODE_ARCHITECTURE=linux-s390x \
+    NODE_VERSION=v14.21.4 \
+    NODE_ENV=production \
+    NPM_VERSION=latest \
+    WITH_API=true \
+    PORT=8080 \
+    ROOT_URL=http://localhost \
+    MONGO_URL=mongodb://127.0.0.1:27017/wekan
+
+# Copy qemu-static to image
+COPY --from=builder qemu-${QEMU_ARCHITECTURE}-static /usr/bin
+
+# Copy the app to the image
+COPY --from=builder bundle /home/wekan/bundle
+
+# Copy
+COPY --from=builder node-${NODE_VERSION}-${NODE_ARCHITECTURE} /opt/nodejs
+
+RUN \
+    set -o xtrace && \
+    # Add non-root user wekan
+    useradd --user-group --system --home-dir /home/wekan wekan && \
+    \
+    # Install Node
+    ln -s /opt/nodejs/bin/node /usr/bin/node && \
+    ln -s /opt/nodejs/bin/npm /usr/bin/npm && \
+    mkdir -p /opt/nodejs/lib/node_modules/fibers/.node-gyp /root/.node-gyp/8.16.1 /home/wekan/.config && \
+    chown wekan --recursive /home/wekan/.config
+
+#    \
+#    # Install Node dependencies
+#    #npm install -g npm@${NPM_VERSION} && \
+#    \
+#    # Install Health Check dependencies
+#    #apk add curl
+#
+#HEALTHCHECK --start-period=30s --interval=30s --timeout=10s --retries=3 \
+#  CMD curl --fail "http://localhost:$PORT" || exit 1
+
+EXPOSE $PORT
+USER wekan
+
+CMD ["bash", "-c", "ulimit -s 65500; exec node /home/wekan/bundle/main.js"]
@@ -0,0 +1,40 @@
+# Future
+
+## Moved Import/Export/Sync issues to Big Picture Roadmap wiki page
+
+This change is limited to only Import/Export/Sync issues, while those are In Progress of being fixed.
+
+2023-11-21 xet7 closed 261 issues that are linked at https://github.com/wekan/wekan/wiki/Sync ,
+that is Roadmap of Import/Export/Sync in WeKan. It means, that those issues progress will be
+updated at that wiki page, when xet7 and other WeKan contributors fix those.
+Many of those issues are In Progress of being fixed and added.
+
+## Platform Updates
+
+Issues related to platforms are being closed, because only list of working platforms is mentioned now
+at WeKan website https://wekan.github.io Install section and at [ChangeLog](https://github.com/wekan/wekan/blob/main/CHANGELOG.md)
+where is this new text:
+
+> Newest WeKan at amd64 platforms: Linux bundle, Snap Candidate, Docker, Kubernetes. Fixing other platforms In Progress. 
+
+Platform support changes often, because:
+
+- There are many dependencies, that update or break or change often
+- Node.js segfaults at some CPU/OS
+- Some platforms have build errors
+
+Roadmap is to update all existing platforms, and add more platforms.
+
+Upcoming platform upgrades:
+
+- Fix migrations, so that newest WeKan can be released to Snap Stable. (Currently newest is at Snap Candidate).
+
+## WeKan features
+
+Most Meteor WeKan features are listed here:
+
+https://github.com/wekan/wekan/wiki/Deep-Dive-Into-WeKan
+
+Remaining features and all changes are listed here:
+
+https://github.com/wekan/wekan/blob/main/CHANGELOG.md
@@ -0,0 +1,10 @@
+# Governance
+
+Anyone can send pull request to https://github.com/wekan/wekan/wiki/pulls ,
+if there is permission to add code to WeKan with MIT license.
+
+As maintainer, xet7 checks all pull requests and merges them.
+
+Only xet7 has write access to repo https://github.com/wekan/wekan
+
+
@@ -1,6 +1,6 @@
 The MIT License (MIT)

-Copyright (c) 2014-2019 The Wekan Team
+Copyright (c) 2014-2023 The Wekan Team

 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
@@ -2,23 +2,34 @@

 # WeKan ® - Open Source kanban

+## Downloads
+
+https://wekan.github.io / Install WeKan ® Server
+
 ## Docker Containers

+- [GitHub](https://github.com/wekan/wekan/pkgs/container/wekan)
 - [Quay](https://quay.io/repository/wekan/wekan)
 - [Docker Hub](https://hub.docker.com/r/wekanteam/wekan)

-Other platforms and compatible software versions at https://wekan.github.io Download section.
+docker-compose.yml at https://github.com/wekan/wekan/blob/main/docker-compose.yml
+
+## Standards
+
+- [WeKan and Standard for Public Code](https://wekan.github.io/standard-for-public-code/) assessment was made at 2023-11.
+  Currently Wekan meets 8 out of 16 criteria out of the box.
+  Some others could be met with small changes.

 ## Code stats

+- [CII Best Practices](https://bestpractices.coreinfrastructure.org/projects/4619)
 - [Code Climate](https://codeclimate.com/github/wekan/wekan)
 - [Open Hub](https://www.openhub.net/p/wekan)
 - [OSS Insight](https://ossinsight.io/analyze/wekan/wekan)
- [CII Best Practices](https://bestpractices.coreinfrastructure.org/projects/4619)

 ## [Translate WeKan ® at Transifex](https://app.transifex.com/wekan/)

-Translations to non-English languages are accepted only at [Transifex](https://app.transifex.com/wekan/) using webbrowser.
+Translations to non-English languages are accepted only at [Transifex](https://app.transifex.com/wekan/wekan) using webbrowser.
 New English strings of new features can be added as PRs to master branch file wekan/imports/i18n/data/en.i18n.json .

 ## [WeKan ® feature requests and bugs](https://github.com/wekan/wekan/issues)
@@ -70,14 +81,14 @@ that by providing one-click installation on various platforms.
  [Mac](https://github.com/wekan/wekan/wiki/Mac) / [Windows](https://github.com/wekan/wekan/wiki/Install-Wekan-from-source-on-Windows).
  [More Platforms](https://github.com/wekan/wekan/wiki/Platforms), bundle for RasPi3 ARM and other CPUs where Node.js and MongoDB exists.
 - 1 GB RAM minimum free for WeKan ®. Production server should have minimum total 4 GB RAM.
-  For thousands of users, for example with [Docker](https://github.com/wekan/wekan/blob/master/docker-compose.yml): 3 frontend servers,
+  For thousands of users, for example with [Docker](https://github.com/wekan/wekan/blob/main/docker-compose.yml): 3 frontend servers,
  each having 2 CPU and 2 wekan-app containers. One backend wekan-db server with many CPUs.
 - Enough disk space and alerts about low disk space. If you run out disk space, MongoDB database gets corrupted.
 - SECURITY: Updating to newest WeKan ® version very often. Please check you do not have automatic updates of Sandstorm or Snap turned off.
  Old versions have security issues because of old versions Node.js etc. Only newest WeKan ® is supported.
  WeKan ® on Sandstorm is not usually affected by any Standalone WeKan ® (Snap/Docker/Source) security issues.
 - [Reporting all new bugs immediately](https://github.com/wekan/wekan/issues).
-  New features and fixes are added to WeKan ® [many times a day](https://github.com/wekan/wekan/blob/master/CHANGELOG.md).
+  New features and fixes are added to WeKan ® [many times a day](https://github.com/wekan/wekan/blob/main/CHANGELOG.md).
 - [Backups](https://github.com/wekan/wekan/wiki/Backup) of WeKan ® database once a day miminum.
  Bugs, updates, users deleting list or card, harddrive full, harddrive crash etc can eat your data. There is no undo yet.
  Some bug can cause WeKan ® board to not load at all, requiring manual fixing of database content.
@@ -89,7 +100,7 @@ that by providing one-click installation on various platforms.
 [Developer Documentation][dev_docs]

 - There is many companies and individuals contributing code to WeKan ®, to add features and bugfixes
-  [many times a day](https://github.com/wekan/wekan/blob/master/CHANGELOG.md).
+  [many times a day](https://github.com/wekan/wekan/blob/main/CHANGELOG.md).
 - [Please add Add new Feature Requests and Bug Reports immediately](https://github.com/wekan/wekan/issues).
 - [Commercial Support](https://wekan.team/commercial-support/).

@@ -109,7 +120,7 @@ with [Meteor](https://www.meteor.com).

 [platforms]: https://github.com/wekan/wekan/wiki/Platforms
 [dev_docs]: https://github.com/wekan/wekan/wiki/Developer-Documentation
-[screenshot_wekan]: https://wekan.github.io/wekan-markdown.png
+[screenshot_wekan]: https://wekan.github.io/wekan-dark-mode.png
 [features]: https://github.com/wekan/wekan/wiki/Features
 [roadmap_wekan]: https://boards.wekan.team/b/D2SzJKZDS4Z48yeQH/wekan-open-source-kanban-board-with-mit-license
 [wekan_issues]: https://github.com/wekan/wekan/issues
@@ -1,6 +1,7 @@
+About money, see [CONTRIBUTING.md](CONTRIBUTING.md)
+
 Security is very important to us. If you discover any issue regarding security, please disclose
-the information responsibly by sending an email to support (at) wekan.team using
-[this PGP public key](support-at-wekan.team_pgp-publickey.asc) and not by
+the information responsibly by sending an email to support@wekan.team and not by
 creating a GitHub issue. We will respond swiftly to fix verifiable security issues.

 We thank you with a place at our hall of fame page, that is
@@ -29,7 +30,7 @@ added to the Wekan Hall of Fame.
 ## Which domains are in scope?

 No public domains, because all those are donated to Wekan Open Source project,
-and we don't have any permissions to do security scans on those donated servers
+and we don't have any permissions to do security scans on those donated servers.

 Please don't perform research that could impact other users. Secondly, please keep
 the reports short and succinct. If we fail to understand the logics of your bug, we will tell you.
@@ -48,31 +49,132 @@ like Snap and Docker have their own specific sandboxing etc features.

 Standalone Wekan by default does not load any files from Internet, like fonts, CSS, etc.
 This also means all Standalone Wekan functionality works in offline local networks.
-Wekan is used by companies that have [thousands of users](https://github.com/wekan/wekan/wiki/AWS) and at healthcare.
+WeKan is used at most countries of the world https://snapcraft.io/wekan
+and by by companies that have 30k users.

-Wekan uses xss package for input fields like cards, as you can see from
-[package.json](https://github.com/wekan/wekan/blob/master/package.json). Other used versions can be seen from
-[Meteor versions file](https://github.com/wekan/wekan/blob/master/.meteor/versions).
-Forms can include markdown links, html, image tags etc like you see at https://wekan.github.io .
-It's possible to add attachments to cards, and markdown/html links to files.
+- Wekan private board attachments are not accessible without logging in.
+- There is feature to set board public, so that board is visible without logging in in readonly mode, with realtime updates.
+- Admin Panel has feature to disable all public boards, so all boards are private.

-Wekan attachments are not accessible without logging in. Import from Trello works by copying
-Trello export JSON to Wekan Trello import page, and in Trello JSON file there is direct links to all publicly
-accessible Trello attachment files, that Standalone Wekan downloads directly to Wekan MongoDB database in
-[CollectionFS](https://github.com/wekan/wekan/pull/875) format. When Wekan board is exported in
-Wekan JSON format, all board attachments are included in Wekan JSON file as base64 encoded text.
-That Wekan JSON format file can be imported to Sandstorm Wekan with all the attachments, when we get
-latest Wekan version working on Sandstorm, only couple of bugs are left before that. In Sandstorm it's not
-possible yet to import from Trello with attachments, because Wekan does not implement Sandstorm-compatible
-access to outside of Wekan grain.
+## SSL/TLS

-Standalone Wekan only has password auth currently, there is work in progress to add
-[oauth2](https://github.com/wekan/wekan/pull/1578), [Openid](https://github.com/wekan/wekan/issues/538),
-[LDAP](https://github.com/wekan/wekan/issues/119) etc. If you need more login security for Standalone Wekan now,
-it's possible add additional [Google Auth proxybouncer](https://github.com/wekan/wekan/wiki/Let's-Encrypt-and-Google-Auth) in front of password auth, and then use Google Authenticator for Google Auth. Standalone Wekan does have [brute force protection with eluck:accounts-lockout and browser-policy clickjacking protection](https://github.com/wekan/wekan/blob/master/CHANGELOG.md#v080-2018-04-04-wekan-release). You can also optionally use some [WAF](https://en.wikipedia.org/wiki/Web_application_firewall)
-like for example [AWS WAF](https://aws.amazon.com/waf/).
+- SSL/TLS encrypts traffic between webbrowser and webserver.
+- If you are thinking about TLS MITM, look at https://github.com/caddyserver/caddy/issues/2530
+- Let's Encrypt TLS requires publicly accessible webserver, that Let's Encrypt TLS validation servers check.
+- If firewall limits to only allowed IP addresses, you may need non-Let's Encrypt TLS cert.
+- For On Premise:
+  - https://caddyserver.com/docs/automatic-https#local-https
+  - https://github.com/wekan/wekan/wiki/Caddy-Webserver-Config
+  - https://github.com/wekan/wekan/wiki/Azure
+  - https://github.com/wekan/wekan/wiki/Traefik-and-self-signed-SSL-certs

-[All Wekan Platforms](https://github.com/wekan/wekan/wiki/Platforms)
+## XSS
+
+- Dompurify https://www.npmjs.com/package/dompurify
+  - WeKan uses dompurify npm package to filter for XSS at fields like cards, as you can see from
+    [package.json](https://github.com/wekan/wekan/blob/main/package.json). Other used versions can be seen from
+    [Meteor versions file](https://github.com/wekan/wekan/blob/main/.meteor/versions).
+  - Forms can include markdown links, html, image tags etc like you see at https://wekan.github.io .
+  - It's possible to add attachments to cards, and markdown/html links to files.
+  - Dompurify cleans up viewed code, so Javascript in input fields does not execute
+    - https://wekan.github.io/hall-of-fame/fieldbleed/
+- Reaction in comment is now checked, that it does not have extra added code
+  - https://wekan.github.io/hall-of-fame/reactionbleed/
+- https://github.com/wekan/wekan/blob/main/packages/markdown/src/template-integration.js#L76
+
+## QA about PubSub
+
+Q:
+
+Hello,
+I have just seen the Meteor DevTools Evolved extension and was wondering if anyone had asked themselves the question of security.
+Insofar as all data is shown in the minimongo tab in plain text.
+How can data be hidden from this extension?
+
+A:
+
+## PubSub
+
+- It is not security issue to show some text or image, that user has permission to see. It is a security issue, if browserside is some text or image that user should not see.
+- Meteor has browserside minimongo database, made with Javascript, updated with Publish/Subscribe, PubSub.
+- Publish/Subscribe means, that realtime web framework reads database changes stream, and then immediately updates webpage,
+  like like dashboards, chat, kanban. That is the point in any realtime web framework in any programming language.
+- Yes, you should check with Meteor DevTools Evolved Chromium/Firefox extension that at minimongo is only text that user has permission to see.
+- Do checking as logged in user, and logged out user.
+- Check permissions and sanitize before allowing some change, because someone could modify content of input field,
+  PubSub/websocket data (for example with Burp Suite Community Edition), etc.
+- If you have REST API, also check that only those that have login token, and have permission, can view or edit text
+- You should not include any data user is not allowed to see. Not to webpage text, not to websockets/PubSub, etc.
+- Minimongo should not have password hashes PubSub https://wekan.github.io/hall-of-fame/userbleed/
+- PubSub uses Websockets, so you need those to be enabled at webserver like Caddy/Nginx/Apache etc, examples of settings
+  at right menu of https://github.com/wekan/wekan/wiki
+- Clientside https://github.com/wekan/wekan/tree/main/client/components subscribes to 
+  PubSub https://github.com/wekan/wekan/tree/main/server/publications or calls meteor methods at https://github.com/wekan/wekan/tree/main/models
+- For Admin:
+  - You can have input field for password https://github.com/wekan/wekan/blob/main/client/components/cards/attachments.js#L303-L312
+  - You can save password to database https://github.com/wekan/wekan/blob/main/client/components/cards/attachments.js#L303-L312
+  - Check that only current user or Admin can change password https://github.com/wekan/wekan/blob/main/client/components/cards/attachments.js#L303-L312
+    - Note that currentUser uses code like Meteor.user() in .js file
+  - Do not have password hashes in PubSub https://github.com/wekan/wekan/blob/main/server/publications/users.js
+  - Only show Admin Panel to Admin https://github.com/wekan/wekan/blob/main/client/components/settings/settingBody.jade#L3
+- If there is a lot of data, use pagination https://github.com/wekan/wekan/blob/main/client/components/settings/peopleBody.js
+- Only have limited amount of data published in PubSub. Limit in MongoDB query in publications how much is published. Too much could make browser too slow.
+- Use Environment variables for any email etc passwords.
+- But what if you would like to remove minimongo? And only use Meteor methods for saving? In that case, you don't have realtime updates,
+  and you need to write much more code to load and save data yourself, handle any multi user data saving conflicts yourself,
+  and many Meteor Atmospherejs.com PubSub using packages would not work anymore https://github.com/wekan/we
+
+## PubSub: Fix that user can not change to Admin
+
+- With PubSub, there is checking, that someone modifying Websockets content, like permission isAdmin, can not change to Admin.
+- https://github.com/wekan/wekan/commit/cbad4cf5943d47b916f64b4582f8ca76a9dfd743
+- https://wekan.github.io/hall-of-fame/adminbleed/
+
+## Permissions and Roles
+
+- For any user permissions, it's best to use Meteor package package https://github.com/Meteor-Community-Packages/meteor-roles .
+- Currently WeKan has custom hardcoded permissions, WeKan does not yet use that meteor-roles package.
+  - Using permissions at WeKan sidebar https://github.com/wekan/wekan/blob/main/client/components/sidebar/sidebar.js#L1854-L1875
+  - List of roles https://github.com/wekan/wekan/wiki/REST-API-Role . Change at board or Admin Panel. Also Organizations/Teams.
+  - Worker role: https://github.com/wekan/wekan/issues/2788
+  - Not implemented yet: Granular Roles https://github.com/wekan/wekan/issues/3022
+- Check is user logged in, with `if (Meteor.user()) {`
+- Check is code running at server `if (Meteor.isServer()) {` or client `if Meteor.isClient()) {` .
+- Here is some authentication code https://github.com/wekan/wekan/blob/main/server/authentication.js
+
+## Environment variables
+
+- For any passwords, use environment variables, those are serverside
+- Do not copy environment variable to public variable that is visible browserside https://github.com/wekan/wekan/blob/main/server/max-size.js
+
+```
+Meteor.startup(() => {
+  if (process.env.HEADER_LOGIN_ID) {
+    Meteor.settings.public.attachmentsUploadMaxSize   = process.env.ATTACHMENTS_UPLOAD_MAX_SIZE;
+    Meteor.settings.public.attachmentsUploadMimeTypes = process.env.ATTACHMENTS_UPLOAD_MIME_TYPES;
+    Meteor.settings.public.avatarsUploadMaxSize       = process.env.AVATARS_UPLOAD_MAX_SIZE;
+```
+
+- For serverside, you can set Meteor.settings.variablename, without text public
+- For WeKan kanban, there is feature for setting board public, it can be viewed by anyone, there is realtime updates. But 
+- Some of those permissions are checked at users.js models at https://github.com/wekan/wekan/tree/main/models
+- Environment variables are used for email server passwords, etc, at all platforms https://github.com/wekan/wekan/commit/a781c0e7dcfdbe34c1483ee83cec12455b7026f7
+
+## Escape HTML comment tags so that HTML comments are visible
+
+- Someone reported, that it is problem that content of HTML comments in edit mode, are not visible at at view mode, so this makes HTML comments visible.
+- https://github.com/wekan/wekan/commit/167863d95711249e69bb3511175d73b34acbbdb3
+- https://wekan.github.io/hall-of-fame/invisiblebleed/
+
+## Attachments: XSS in filename is sanitized
+
+- https://github.com/wekan/wekan/blob/main/client/components/cards/attachments.js#L303-L312
+- https://wekan.github.io/hall-of-fame/filebleed/
+
+## Brute force login protection
+
+- https://github.com/wekan/wekan/commit/23e5e1e3bd081699ce39ce5887db7e612616014d
+- https://github.com/wekan/wekan/tree/main/packages/wekan-accounts-lockout

 ### Sandstorm Wekan Security

@@ -105,12 +207,6 @@ a security issue, we'd like to know about it, and also how to fix it:

 Typical already known or "no impact" bugs such as:

- Brute force password guessing. Currently there is
-  [brute force protection with eluck:accounts-lockout](https://github.com/wekan/wekan/blob/master/CHANGELOG.md#v080-2018-04-04-wekan-release).
- Security issues related to that Wekan uses Meteor 1.6.0.1 related packages, and upgrading to newer
-  Meteor 1.6.1 is complicated process that requires lots of changes to many dependency packages.
-  Upgrading [has been tried many times, spending a lot of time](https://github.com/meteor/meteor/issues/9609)
-  but there still is issues. Helping with package upgrades is very welcome.
 - [Wekan API old tokens not replaced correctly](https://github.com/wekan/wekan/issues/1437)
 - Missing Cookie flags on non-session cookies or 3rd party cookies
 - Logout CSRF
@@ -1,5 +1,5 @@
 appId: wekan-public/apps/77b94f60-dec9-0136-304e-16ff53095928
-appVersion: "v7.09.0"
+appVersion: "v7.53.0"
 files:
  userUploads:
    - README.md
@@ -37,9 +37,24 @@ If *nix:  chmod +x api.py => ./api.py users
    python3 api.py customfields BOARDID # Custom Fields of BOARDID
    python3 api.py customfield BOARDID CUSTOMFIELDID # Info of CUSTOMFIELDID
    python3 api.py addcustomfieldtoboard AUTHORID BOARDID NAME TYPE SETTINGS SHOWONCARD AUTOMATICALLYONCARD SHOWLABELONMINICARD SHOWSUMATTOPOFLIST # Add Custom Field to Board
-    python3 api.py editcustomfield BOARDID LISTID CARDID CUSTOMFIELDID NEWCUSTOMFIELDVALUE
+    python3 api.py editcustomfield BOARDID LISTID CARDID CUSTOMFIELDID NEWCUSTOMFIELDVALUE # Edit Custom Field
    python3 api.py listattachments BOARDID # List attachments
+    python3 api.py cardsbyswimlane SWIMLANEID LISTID # Retrieve cards list on a swimlane
+    python3 api.py getcard BOARDID LISTID CARDID # Get card info
+    python3 api.py addlabel BOARDID LISTID CARDID LABELID # Add label to a card
+    python3 api.py addcardwithlabel AUTHORID BOARDID SWIMLANEID LISTID CARDTITLE CARDDESCRIPTION LABELIDS # Add a card and a label
+    python3 api.py editboardtitle BOARDID NEWBOARDTITLE # Edit board title
+    python3 api.py copyboard BOARDID NEWBOARDTITLE # Copy a board
+    python3 api.py createlabel BOARDID LABELCOLOR LABELNAME (Color available: `white`, `green`, `yellow`, `orange`, `red`, `purple`, `blue`, `sky`, `lime`, `pink`, `black`, `silver`, `peachpuff`, `crimson`, `plum`, `darkgreen`, `slateblue`, `magenta`, `gold`, `navy`, `gray`, `saddlebrown`, `paleturquoise`, `mistyrose`, `indigo`) # Create a new label
+    python3 api.py editcardcolor BOARDID LISTID CARDID COLOR (Color available: `white`, `green`, `yellow`, `orange`, `red`, `purple`, `blue`, `sky`, `lime`, `pink`, `black`, `silver`, `peachpuff`, `crimson`, `plum`, `darkgreen`, `slateblue`, `magenta`, `gold`, `navy`, `gray`, `saddlebrown`, `paleturquoise`, `mistyrose`, `indigo`) # Edit card color
+    python3 api.py addchecklist BOARDID CARDID TITLE ITEM1 ITEM2 ITEM3 ITEM4 (You can add multiple items or just one, or also without any item, just TITLE works as well. * If items or Title contains spaces, you should add ' between them.) # Add checklist + item on a card
+    python3 api.py deleteallcards BOARDID SWIMLANEID ( * Be careful will delete ALL CARDS INSIDE the swimlanes automatically in every list * ) # Delete all cards on a swimlane
+    python3 api.py checklistid BOARDID CARDID # Retrieve Checklist ID attached to a card
+    python3 api.py checklistinfo BOARDID CARDID CHECKLISTID # Get checklist info
+    python3 api.py get_list_cards_count BOARDID LISTID # Retrieve how many cards in a list
+    python3 api.py get_board_cards_count BOARDID # Retrieve how many cards in a board

+    
  Admin API:
    python3 api.py users                # All users
    python3 api.py boards               # All Public Boards
@@ -179,6 +194,52 @@ if arguments == 10:
        print(body.text)
        # ------- ADD CUSTOM FIELD TO BOARD END -----------

+if arguments == 8:
+
+    if sys.argv[1] == 'addcardwithlabel':
+        # ------- ADD CARD WITH LABEL START -----------
+        authorid = sys.argv[2]
+        boardid = sys.argv[3]
+        swimlaneid = sys.argv[4]
+        listid = sys.argv[5]
+        cardtitle = sys.argv[6]
+        carddescription = sys.argv[7]
+        labelIds = sys.argv[8]  # Aggiunto labelIds
+
+        cardtolist = wekanurl + apiboards + boardid + s + l + s + listid + s + cs
+        # Add card
+        headers = {'Accept': 'application/json', 'Authorization': 'Bearer {}'.format(apikey)}
+        post_data = {
+            'authorId': '{}'.format(authorid),
+            'title': '{}'.format(cardtitle),
+            'description': '{}'.format(carddescription),
+            'swimlaneId': '{}'.format(swimlaneid),
+            'labelIds': labelIds
+        }
+
+        body = requests.post(cardtolist, data=post_data, headers=headers)
+        print(body.text)
+
+        # If ok id card
+        if body.status_code == 200:
+            card_data = body.json()
+            new_card_id = card_data.get('_id')
+
+            # Updating card
+            if new_card_id:
+                edcard = wekanurl + apiboards + boardid + s + l + s + listid + s + cs + s + new_card_id
+                put_data = {'labelIds': labelIds}
+                body = requests.put(edcard, data=put_data, headers=headers)
+                print("=== EDIT CARD ===\n")
+                body = requests.get(edcard, headers=headers)
+                data2 = body.text.replace('}', "}\n")
+                print(data2)
+            else:
+                print("Error obraining ID.")
+        else:
+            print("Error adding card.")
+        # ------- ADD CARD WITH LABEL END -----------
+
 if arguments == 7:

    if sys.argv[1] == 'addcard':
@@ -237,7 +298,53 @@ if arguments == 6:
        print(data2)
        # ------- EDIT CUSTOMFIELD END -----------

-if arguments == 4:
+if arguments == 5:
+
+    if sys.argv[1] == 'addlabel':
+
+        # ------- EDIT CARD ADD LABEL START -----------
+        boardid = sys.argv[2]
+        listid = sys.argv[3]
+        cardid = sys.argv[4]
+        labelIds = sys.argv[5]
+        edcard = wekanurl + apiboards + boardid + s + l + s + listid + s + cs + s + cardid
+        print(edcard)
+        headers = {'Accept': 'application/json', 'Authorization': 'Bearer {}'.format(apikey)}
+        put_data = {'labelIds': labelIds}
+        body = requests.put(edcard, data=put_data, headers=headers)
+        print("=== ADD LABEL ===\n")
+        body = requests.get(edcard, headers=headers)
+        data2 = body.text.replace('}',"}\n")
+        print(data2)
+        # ------- EDIT CARD ADD LABEL END -----------
+
+    if sys.argv[1] == 'editcardcolor':
+        # ------- EDIT CARD COLOR START -----------
+        boardid = sys.argv[2]
+        listid = sys.argv[3]
+        cardid = sys.argv[4]
+        newcolor = sys.argv[5]  
+
+        valid_colors = ['white', 'green', 'yellow', 'orange', 'red', 'purple', 'blue', 'sky', 'lime', 'pink', 'black',
+                    'silver', 'peachpuff', 'crimson', 'plum', 'darkgreen', 'slateblue', 'magenta', 'gold', 'navy',
+                    'gray', 'saddlebrown', 'paleturquoise', 'mistyrose', 'indigo']
+
+        if newcolor not in valid_colors:
+            print("Invalid color. Choose a color from the list.")
+            sys.exit(1)
+
+        edcard = wekanurl + apiboards + boardid + s + l + s + listid + s + cs + s + cardid
+        print(edcard)
+        headers = {'Accept': 'application/json', 'Authorization': 'Bearer {}'.format(apikey)}
+        put_data = {'color': '{}'.format(newcolor)}  
+        body = requests.put(edcard, data=put_data, headers=headers)
+        print("=== EDIT CARD COLOR ===\n")
+        body = requests.get(edcard, headers=headers)
+        data2 = body.text.replace('}', "}\n")
+        print(data2)
+        # ------- EDIT CARD COLOR END -----------
+
+if arguments >= 4:

    if sys.argv[1] == 'newuser':

@@ -251,9 +358,155 @@ if arguments == 4:
        print("=== CREATE NEW USER ===\n")
        print(body.text)
        # ------- CREATE NEW USER END -----------
+        
+    if sys.argv[1] == 'getcard':
+
+        # ------- LIST OF CARD START -----------
+        boardid = sys.argv[2]
+        listid = sys.argv[3]
+        cardid = sys.argv[4]
+        listone = wekanurl + apiboards + boardid + s + l + s + listid + s + cs + s + cardid
+        headers = {'Accept': 'application/json', 'Authorization': 'Bearer {}'.format(apikey)}
+        print("=== INFO OF ONE LIST ===\n")
+        print("URL:", listone)  # Stampa l'URL per debug
+        try:
+            response = requests.get(listone, headers=headers)
+            print("=== RESPONSE ===\n")
+            print("Status Code:", response.status_code)  # Stampa il codice di stato per debug
+
+            if response.status_code == 200:
+                data2 = response.text.replace('}', "}\n")
+                print(data2)
+            else:
+                print(f"Error: {response.status_code}")
+                print(f"Response: {response.text}")
+        except Exception as e:
+            print(f"Error in the GET request: {e}")
+        # ------- LISTS OF CARD END -----------
+
+    if sys.argv[1] == 'createlabel':
+
+        # ------- CREATE LABEL START -----------
+        boardid = sys.argv[2]
+        labelcolor = sys.argv[3]
+        labelname = sys.argv[4]
+        label_url = wekanurl + apiboards + boardid + s + 'labels'
+        print(label_url)
+        headers = {'Accept': 'application/json', 'Authorization': 'Bearer {}'.format(apikey)}
+        # Object to send
+        put_data = {'label': {'color': labelcolor, 'name': labelname}}
+        print("URL:", label_url)
+        print("Headers:", headers)
+        print("Data:", put_data)
+        try:
+          response = requests.put(label_url, json=put_data, headers=headers)
+          print("=== CREATE LABELS ===\n")
+          print("Response Status Code:", response.status_code)
+          print("Response Text:", response.text)
+        except Exception as e:
+          print("Error:", e)
+        # ------- CREATE LABEL END -----------
+
+    if sys.argv[1] == 'addchecklist':
+
+        # ------- ADD CHECKLIST START -----------
+        board_id = sys.argv[2]
+        card_id = sys.argv[3]
+        checklist_title = sys.argv[4]
+
+        # Aggiungi la checklist
+        checklist_url = wekanurl + apiboards + board_id + s + cs + s + card_id + '/checklists'
+        headers = {'Accept': 'application/json', 'Authorization': 'Bearer {}'.format(apikey)}
+        data = {'title': checklist_title}
+
+        response = requests.post(checklist_url, data=data, headers=headers)
+        response.raise_for_status()
+
+        result = json.loads(response.text)
+        checklist_id = result.get('_id')
+
+        print(f"Checklist '{checklist_title}' created. ID: {checklist_id}")
+
+        # Aggiungi gli items alla checklist
+        items_to_add = sys.argv[5:]  
+        for item_title in items_to_add:
+            checklist_item_url = wekanurl + apiboards + board_id + s + cs + s + card_id + s + 'checklists' + s + checklist_id + '/items'
+            item_data = {'title': item_title}
+
+            item_response = requests.post(checklist_item_url, data=item_data, headers=headers)
+            item_response.raise_for_status()
+
+            item_result = json.loads(item_response.text)
+            checklist_item_id = item_result.get('_id')
+
+            print(f"Item '{item_title}' added. ID: {checklist_item_id}")
+
+    if sys.argv[1] == 'checklistinfo':
+
+        # ------- ADD CHECKLIST START -----------
+        board_id = sys.argv[2]
+        card_id = sys.argv[3]
+        checklist_id = sys.argv[4]
+        checklist_url = wekanurl + apiboards + board_id + s + cs + s + card_id + '/checklists' + s + checklist_id
+        headers = {'Accept': 'application/json', 'Authorization': 'Bearer {}'.format(apikey)}
+        response = requests.get(checklist_url, headers=headers)
+
+        response.raise_for_status()
+
+        checklist_info = response.json()
+        print("Checklist Info:")
+        print(checklist_info)

 if arguments == 3:

+    if sys.argv[1] == 'editboardtitle':
+
+        # ------- EDIT BOARD TITLE START -----------
+        boardid = sys.argv[2]
+        boardtitle = sys.argv[3]
+        edboardtitle = wekanurl + apiboards + boardid + s + 'title'
+        print(edboardtitle)
+        headers = {'Accept': 'application/json', 'Authorization': 'Bearer {}'.format(apikey)}
+
+        post_data = {'title': boardtitle}
+
+        body = requests.put(edboardtitle, json=post_data, headers=headers)
+        print("=== EDIT BOARD TITLE ===\n")
+        #body = requests.get(edboardtitle, headers=headers)
+        data2 = body.text.replace('}',"}\n")
+        print(data2)
+        if body.status_code == 200:
+            print("Succesfull!")
+        else:
+            print(f"Error: {body.status_code}")
+            print(body.text)
+
+        # ------- EDIT BOARD TITLE END -----------
+
+    if sys.argv[1] == 'copyboard':
+
+        # ------- COPY BOARD START -----------
+        boardid = sys.argv[2]
+        boardtitle = sys.argv[3]
+        edboardcopy = wekanurl + apiboards + boardid + s + 'copy'
+        print(edboardcopy)
+        headers = {'Accept': 'application/json', 'Authorization': 'Bearer {}'.format(apikey)}
+
+        post_data = {'title': boardtitle}
+
+        body = requests.post(edboardcopy, json=post_data, headers=headers)
+        print("=== COPY BOARD ===\n")
+        #body = requests.get(edboardcopy, headers=headers)
+        data2 = body.text.replace('}',"}\n")
+        print(data2)
+        if body.status_code == 200:
+            print("Succesfull!")
+        else:
+            print(f"Error: {body.status_code}")
+            print(body.text)
+
+        # ------- COPY BOARD END -----------
+
    if sys.argv[1] == 'createlist':

        # ------- CREATE LIST START -----------
@@ -293,6 +546,90 @@ if arguments == 3:
        print(data2)
        # ------- INFO OF CUSTOM FIELD END -----------

+    if sys.argv[1] == 'cardsbyswimlane':
+    # ------- RETRIEVE CARDS BY SWIMLANE ID START -----------
+        boardid = sys.argv[2]
+        swimlaneid = sys.argv[3]
+        cardsbyswimlane = wekanurl + apiboards + boardid + s + sws + s + swimlaneid + s + cs
+        headers = {'Accept': 'application/json', 'Authorization': 'Bearer {}'.format(apikey)}
+        print("=== CARDS BY SWIMLANE ID ===\n")
+        print("URL:", cardsbyswimlane)  # Debug
+        try:
+            body = requests.get(cardsbyswimlane, headers=headers)
+            print("Status Code:", body.status_code)  # Debug
+            data = body.text.replace('}', "}\n")
+            print("Data:", data)
+        except Exception as e:
+            print("Error GET:", e)
+    # ------- RETRIEVE CARDS BY SWIMLANE ID END -----------
+
+    if sys.argv[1] == 'deleteallcards':
+        boardid = sys.argv[2]
+        swimlaneid = sys.argv[3]
+
+        # ------- GET SWIMLANE CARDS START -----------
+        get_swimlane_cards_url = wekanurl + apiboards + boardid + s + "swimlanes" + s + swimlaneid + s + "cards"
+        headers = {'Accept': 'application/json', 'Authorization': 'Bearer {}'.format(apikey)}
+
+        try:
+            response = requests.get(get_swimlane_cards_url, headers=headers)
+            response.raise_for_status()
+            cards_data = response.json()
+
+            # Print the details of each card
+            for card in cards_data:
+                # ------- DELETE CARD START -----------
+                delete_card_url = wekanurl + apiboards + boardid + s + "lists" + s + card['listId'] + s + "cards" + s + card['_id']
+                try:
+                    response = requests.delete(delete_card_url, headers=headers)
+                    if response.status_code == 404:
+                        print(f"Card not found: {card['_id']}")
+                    else:
+                        response.raise_for_status()
+                        deleted_card_data = response.json()
+                        print(f"Card Deleted Successfully. Card ID: {deleted_card_data['_id']}")
+                except requests.exceptions.RequestException as e:
+                    print(f"Error deleting card: {e}")
+                # ------- DELETE CARD END -----------
+
+        except requests.exceptions.RequestException as e:
+            print(f"Error getting swimlane cards: {e}")
+            sys.exit(1)
+        # ------- GET SWIMLANE CARDS END -----------
+
+    if sys.argv[1] == 'get_list_cards_count':
+        # ------- GET LIST CARDS COUNT START -----------
+        boardid = sys.argv[2]
+        listid = sys.argv[3]
+
+        get_list_cards_count_url = wekanurl + apiboards + boardid +  s + l + s + listid + s + "cards_count"
+        headers = {'Accept': 'application/json', 'Authorization': 'Bearer {}'.format(apikey)}
+
+        try:
+            response = requests.get(get_list_cards_count_url, headers=headers)
+            response.raise_for_status()
+            data = response.json()
+            print(f"List Cards Count: {data['list_cards_count']}")
+        except requests.exceptions.RequestException as e:
+            print(f"Error: {e}")
+        # ------- GET LIST CARDS COUNT END -----------
+
+    if sys.argv[1] == 'checklistid':
+
+        # ------- ADD CHECKLIST START -----------
+        board_id = sys.argv[2]
+        card_id = sys.argv[3]
+
+        checklist_url = wekanurl + apiboards + board_id + s + cs + s + card_id + '/checklists'
+        headers = {'Accept': 'application/json', 'Authorization': 'Bearer {}'.format(apikey)}
+        response = requests.get(checklist_url, headers=headers)
+
+        response.raise_for_status()
+        checklists = response.json()
+        print("Checklists:")
+        for checklist in checklists:
+          print(checklist)
+
 if arguments == 2:

    # ------- BOARDS LIST START -----------
@@ -364,6 +701,22 @@ if arguments == 2:
        print(data2)
        # ------- LISTS OF ATTACHMENTS END -----------

+    if sys.argv[1] == 'get_board_cards_count':
+        # ------- GET BOARD CARDS COUNT START -----------
+        boardid = sys.argv[2]
+
+        get_board_cards_count_url = wekanurl + apiboards + boardid + s + "cards_count"
+        headers = {'Accept': 'application/json', 'Authorization': 'Bearer {}'.format(apikey)}
+
+        try:
+            response = requests.get(get_board_cards_count_url, headers=headers)
+            response.raise_for_status()
+            data = response.json()
+            print(f"Board Cards Count: {data['board_cards_count']}")
+        except requests.exceptions.RequestException as e:
+            print(f"Error: {e}")
+        # ------- GET BOARD CARDS COUNT END -----------
+
 if arguments == 1:

    if sys.argv[1] == 'users':
@@ -16,7 +16,6 @@ template(name="cardActivities")
    +activity(activity=activityData card=card mode=mode)

 template(name="editOrDeleteComment")
-  = ' - '
  a.js-open-inlined-form {{_ "edit"}}
  = ' - '
  a.js-delete-comment {{_ "delete"}}
@@ -145,11 +144,10 @@ template(name="activity")
              +viewer
                = activity.comment.text
            +commentReactions(reactions=activity.comment.reactions commentId=activity.comment._id)
-            span(title=activity.createdAt).activity-meta {{ moment activity.createdAt }}
-              if($eq currentUser._id activity.comment.userId)
-                +editOrDeleteComment
-              else if currentUser.isBoardAdmin
-                +editOrDeleteComment
+            if($eq currentUser._id activity.comment.userId)
+              +editOrDeleteComment
+            else if currentUser.isBoardAdmin
+              +editOrDeleteComment

        if($eq activity.activityType 'deleteComment')
          | {{{_ 'activity-deleteComment' activity.commentId}}}.
@@ -243,4 +241,4 @@ template(name="activity")
      else if(currentData.timeValue)
        | {{_ activity.activityType currentData.timeValue}}

-      span(title=activity.createdAt).activity-meta {{ moment activity.createdAt }}
+      div(title=activity.createdAt).activity-meta {{ moment activity.createdAt }}
@@ -13,39 +13,41 @@ BlazeComponent.extendComponent({
    const sidebar = Sidebar;
    sidebar && sidebar.callFirstWith(null, 'resetNextPeak');
    this.autorun(() => {
-      let mode = this.data().mode;
-      const capitalizedMode = Utils.capitalize(mode);
-      let searchId;
-      if (mode === 'linkedcard' || mode === 'linkedboard') {
-        searchId = Utils.getCurrentCard().linkedId;
-        mode = mode.replace('linked', '');
-      } else if (mode === 'card') {
-        searchId = Utils.getCurrentCardId();
-      } else {
-        searchId = Session.get(`current${capitalizedMode}`);
-      }
-      const limit = this.page.get() * activitiesPerPage;
-      const user = ReactiveCache.getCurrentUser();
-      const hideSystem = user ? user.hasHiddenSystemMessages() : false;
-      if (searchId === null) return;
-
-      this.subscribe('activities', mode, searchId, limit, hideSystem, () => {
-        this.loadNextPageLocked = false;
-
-        // TODO the guard can be removed as soon as the TODO above is resolved
-        if (!sidebar) return;
-        // If the sibear peak hasn't increased, that mean that there are no more
-        // activities, and we can stop calling new subscriptions.
-        // XXX This is hacky! We need to know excatly and reactively how many
-        // activities there are, we probably want to denormalize this number
-        // dirrectly into card and board documents.
-        const nextPeakBefore = sidebar.callFirstWith(null, 'getNextPeak');
-        sidebar.calculateNextPeak();
-        const nextPeakAfter = sidebar.callFirstWith(null, 'getNextPeak');
-        if (nextPeakBefore === nextPeakAfter) {
-          sidebar.callFirstWith(null, 'resetNextPeak');
+      let mode = this.data()?.mode;
+      if (mode) {
+        const capitalizedMode = Utils.capitalize(mode);
+        let searchId;
+        if (mode === 'linkedcard' || mode === 'linkedboard') {
+          searchId = Utils.getCurrentCard().linkedId;
+          mode = mode.replace('linked', '');
+        } else if (mode === 'card') {
+          searchId = Utils.getCurrentCardId();
+        } else {
+          searchId = Session.get(`current${capitalizedMode}`);
        }
-      });
+        const limit = this.page.get() * activitiesPerPage;
+        const user = ReactiveCache.getCurrentUser();
+        const hideSystem = user ? user.hasHiddenSystemMessages() : false;
+        if (searchId === null) return;
+
+        this.subscribe('activities', mode, searchId, limit, hideSystem, () => {
+          this.loadNextPageLocked = false;
+
+          // TODO the guard can be removed as soon as the TODO above is resolved
+          if (!sidebar) return;
+          // If the sibear peak hasn't increased, that mean that there are no more
+          // activities, and we can stop calling new subscriptions.
+          // XXX This is hacky! We need to know excatly and reactively how many
+          // activities there are, we probably want to denormalize this number
+          // dirrectly into card and board documents.
+          const nextPeakBefore = sidebar.callFirstWith(null, 'getNextPeak');
+          sidebar.calculateNextPeak();
+          const nextPeakAfter = sidebar.callFirstWith(null, 'getNextPeak');
+          if (nextPeakBefore === nextPeakAfter) {
+            sidebar.callFirstWith(null, 'resetNextPeak');
+          }
+        });
+      }
    });
  },
  loadNextPage() {
@@ -19,7 +19,6 @@
 .board-wrapper .board-canvas.is-sibling-sidebar-open {
  margin-right: 248px;
 }
-.board-wrapper .board-canvas.overlayed {overflow:hidden}
 .board-wrapper .board-canvas .board-overlay {
  position: fixed;
  left: 0;
@@ -18,11 +18,10 @@ template(name="boardBody")
  else
    .board-wrapper(class=currentBoard.colorClass)
      +sidebar
-      .board-canvas.js-swimlanes(
+      .board-canvas.js-swimlanes.dragscroll(
        class="{{#if Sidebar.isOpen}}is-sibling-sidebar-open{{/if}}"
        class="{{#if MultiSelection.isActive}}is-multiselection-active{{/if}}"
-        class="{{#if draggingActive.get}}is-dragging-active{{/if}}"
-        class="{{#if showOverlay.get}}overlayed{{/if}}")
+        class="{{#if draggingActive.get}}is-dragging-active{{/if}}")
        if showOverlay.get
          .board-overlay
        if currentBoard.isTemplatesBoard
@@ -1,5 +1,6 @@
 import { ReactiveCache } from '/imports/reactiveCache';
 import { TAPi18n } from '/imports/i18n';
+import dragscroll from '@wekanteam/dragscroll';

 const subManager = new SubsManager();
 const { calculateIndex } = Utils;
@@ -219,6 +220,7 @@ BlazeComponent.extendComponent({
      boardComponent.openNewListForm();
    }

+    dragscroll.reset();
    Utils.setBackgroundImage();
  },

@@ -320,7 +322,7 @@ BlazeComponent.extendComponent({
  calendarOptions() {
    return {
      id: 'calendar-view',
-      defaultView: 'agendaDay',
+      defaultView: 'month',
      editable: true,
      selectable: true,
      timezone: 'local',
@@ -12,8 +12,9 @@ template(name="boardHeaderBar")
      if currentBoard
        if currentUser
          with currentBoard
-            a.board-header-btn(class="{{#if currentUser.isBoardAdmin}}js-edit-board-title{{else}}is-disabled{{/if}}" title="{{_ 'edit'}}" value=title)
-              i.fa.fa-pencil-square-o
+            if currentUser.isBoardAdmin
+              a.board-header-btn(class="{{#if currentUser.isBoardAdmin}}js-edit-board-title{{else}}is-disabled{{/if}}" title="{{_ 'edit'}}" value=title)
+                i.fa.fa-pencil-square-o

          a.board-header-btn.js-star-board(class="{{#if isStarred}}is-active{{/if}}"
            title="{{#if isStarred}}{{_ 'click-to-unstar'}}{{else}}{{_ 'click-to-star'}}{{/if}} {{_ 'starred-boards-description'}}")
@@ -6,37 +6,6 @@ const DOWNCLS = 'fa-sort-down';
 const UPCLS = 'fa-sort-up';
 */
 const sortCardsBy = new ReactiveVar('');
-Template.boardMenuPopup.events({
-  'click .js-rename-board': Popup.open('boardChangeTitle'),
-  'click .js-custom-fields'() {
-    Sidebar.setView('customFields');
-    Popup.back();
-  },
-  'click .js-open-archives'() {
-    Sidebar.setView('archives');
-    Popup.back();
-  },
-  'click .js-change-board-color': Popup.open('boardChangeColor'),
-  'click .js-change-language': Popup.open('changeLanguage'),
-  'click .js-archive-board ': Popup.afterConfirm('archiveBoard', function() {
-    const currentBoard = Utils.getCurrentBoard();
-    currentBoard.archive();
-    // XXX We should have some kind of notification on top of the page to
-    // confirm that the board was successfully archived.
-    FlowRouter.go('home');
-  }),
-  'click .js-delete-board': Popup.afterConfirm('deleteBoard', function() {
-    const currentBoard = Utils.getCurrentBoard();
-    Popup.back();
-    Boards.remove(currentBoard._id);
-    FlowRouter.go('home');
-  }),
-  'click .js-outgoing-webhooks': Popup.open('outgoingWebhooks'),
-  'click .js-import-board': Popup.open('chooseBoardSource'),
-  'click .js-subtask-settings': Popup.open('boardSubtaskSettings'),
-  'click .js-card-settings': Popup.open('boardCardSettings'),
-  'click .js-minicard-settings': Popup.open('boardMinicardSettings'),
-});

 Template.boardChangeTitlePopup.events({
  submit(event, templateInstance) {
@@ -24,7 +24,6 @@
  min-width: 150px;
  max-height: 150px;
  padding-right: 16px;
-
 }
 .attachment-thumbnail {
  max-width: 150px;
@@ -78,10 +77,10 @@
  width: 100%;
  height: 100vh;
  position: fixed;
-  top: 48px;  /* height of the navbar */
+  top: 0;
  left: 0;
  z-index: 9999 !important;
-  background: rgba(13,13,13,0.95);
+  background: rgba(13, 13, 13, 0.95);
 }
 #viewer-container {
  display: flex;
@@ -99,10 +98,12 @@
 #attachment-name {
  color: white;
  font-size: 1.5em;
-  max-width: calc(100% - 50px); /* Make sure the name does not overlap the close button */
+  max-width: calc(
+    100% - 50px
+  ); /* Make sure the name does not overlap the close button */
 }
 #viewer-close {
-  color:white;
+  color: white;
  cursor: pointer;
  font-size: 4em;
  top: 0;
@@ -111,26 +112,32 @@
 }
 .attachment-arrow {
  font-size: 4em;
-  color:white;
+  color: white;
  cursor: pointer;
  align-self: center;
  margin: 0 20px;
 }
+#viewer-content {
+  display: flex;
+  justify-content: center;
+  align-items: center;
+  width: 100%;
+  height: calc(100% - 50px);
+}
 #image-viewer {
-  background:
-    repeating-conic-gradient(#808080 0% 25%, transparent 0% 50%)
-      50% / 20px 20px; /* Checkerboard background for transparent images */
+  background: repeating-conic-gradient(#808080 0% 25%, transparent 0% 50%) 50% /
+    20px 20px; /* Checkerboard background for transparent images */
  max-width: 100%;
  max-height: 100%;
 }
 #pdf-viewer {
  width: 40vw;
-  height: 100vh;
+  height: 100%;
 }
-#txt-viewer{
+#txt-viewer {
  background-color: white;
  width: 40vw;
-  height: 100vh;
+  height: 100%;
 }
 .pdf-preview-error {
  margin-top: 20vh;
@@ -149,25 +156,29 @@
  #viewer-container {
    display: block;
  }
-  .attachment-arrow{
+  .attachment-arrow {
    position: absolute;
    bottom: 2.2em;
    font-size: 1.6em;
    padding: 16px;
  }
-  #prev-attachment{
+  #prev-attachment {
    left: 0;
  }
-  #next-attachment{
+  #next-attachment {
    right: 0;
  }
  #pdf-viewer {
    width: 100%;
-    height: calc(100vh - 155px);  /* Full height - height of top and bottom bars */
+    height: calc(
+      100vh - 155px
+    ); /* Full height - height of top and bottom bars */
  }
  #txt-viewer {
    width: 100%;
-    height: calc(100vh - 155px);  /* Full height - height of top and bottom bars */
+    height: calc(
+      100vh - 155px
+    ); /* Full height - height of top and bottom bars */
  }
  #audio-viewer {
    margin-top: 20%;
@@ -51,8 +51,9 @@ template(name="attachmentGallery")

  .attachment-gallery

-    a.attachment-item.add-attachment.js-add-attachment
-      i.fa.fa-plus.icon
+    if canModifyCard
+      a.attachment-item.add-attachment.js-add-attachment
+        i.fa.fa-plus.icon

    each attachments

@@ -196,6 +196,9 @@
  margin-right: 10px;
  padding: 10px;
 }
+.card-details .card-description i.fa.fa-pencil-square-o {
+  float: right;
+}
 .card-details .card-description textarea {
  min-height: 100px;
 }
@@ -245,10 +248,10 @@
  padding-top: 10px;
 }
@media screen and (min-width: 801px) {
-  .card-details-maximized {
+  .card-details {
    top: 97px;
-    left: 0;
-    right:0;
+    left: calc(50% - (600px / 2));
+    width: 600px;
    bottom: 0;
    position: fixed;
    resize: both;
@@ -267,6 +270,10 @@
    box-shadow: 0 0 7px 0 #b3b3b3;
    transition: flex-basis 0.1s;
    box-sizing: border-box;
+    top: 97px;
+    left: 0px;
+    height: calc(100% - 100px);
+    width: calc(100% - 20px);
    float: left;
  }
  .card-details-maximized .card-details-left {
@@ -5,7 +5,7 @@ template(name="cardDetails")

  +attachmentViewer

-  section.card-details.js-card-details(class='{{#if cardMaximized}}card-details-maximized{{/if}}' class='{{#if isPopup}}card-details-popup{{/if}}'): .card-details-canvas
+  section.card-details.js-card-details.nodragscroll(class='{{#if cardMaximized}}card-details-maximized{{/if}}' class='{{#if isPopup}}card-details-popup{{/if}}'): .card-details-canvas
    .card-details-header(class='{{#if colorClass}}card-details-{{colorClass}}{{/if}}')
      +inlinedForm(classNames="js-card-details-title")
        +editCardTitleForm
@@ -13,11 +13,12 @@ template(name="cardDetails")
        unless isMiniScreen
          unless isPopup
            a.fa.fa-times-thin.close-card-details.js-close-card-details(title="{{_ 'close-card'}}")
-            if cardMaximized
-              a.fa.fa-window-minimize.minimize-card-details.js-minimize-card-details(title="{{_ 'minimize-card'}}")
-            else
-              a.fa.fa-window-maximize.maximize-card-details.js-maximize-card-details(title="{{_ 'maximize-card'}}")
-          if currentUser.isBoardMember
+            if canModifyCard
+              if cardMaximized
+                a.fa.fa-window-minimize.minimize-card-details.js-minimize-card-details(title="{{_ 'minimize-card'}}")
+              else
+                a.fa.fa-window-maximize.maximize-card-details.js-maximize-card-details(title="{{_ 'maximize-card'}}")
+          if canModifyCard
            a.fa.fa-navicon.card-details-menu.js-open-card-details-menu(title="{{_ 'cardDetailsActionsPopup-title'}}")
            a.fa.fa-link.card-copy-button.js-copy-link(
              id="cardURL_copy"
@@ -29,7 +30,7 @@ template(name="cardDetails")
        else
          unless isPopup
            a.fa.fa-times-thin.close-card-details.js-close-card-details(title="{{_ 'close-card'}}")
-          if currentUser.isBoardMember
+          if canModifyCard
            a.fa.fa-navicon.card-details-menu-mobile-web.js-open-card-details-menu(title="{{_ 'cardDetailsActionsPopup-title'}}")
            a.fa.fa-link.card-copy-mobile-button.js-copy-link(
              id="cardURL_copy"
@@ -524,12 +525,11 @@ template(name="cardDetails")
                a.fa.fa-times-thin.js-close-inlined-form
            else
              if currentBoard.allowsDescriptionText
-                a.js-open-inlined-form
-                  if getDescription
-                    +viewer
-                      = getDescription
-                  else
-                    | {{_ 'edit'}}
+                a.js-open-inlined-form(title="{{_ 'edit'}}" value=title)
+                  i.fa.fa-pencil-square-o
+                if getDescription
+                  +viewer
+                    = getDescription
                if (hasUnsavedValue 'cardDescription' _id)
                  p.quiet
                    | {{_ 'unsaved-description'}}
@@ -76,66 +76,6 @@ BlazeComponent.extendComponent({
    return !Utils.getPopupCardId() && ReactiveCache.getCurrentUser().hasCardMaximized();
  },

-  scrollParentContainer() {
-    const cardPanelWidth = 600;
-    const parentComponent = this.parentComponent();
-    /*
-        // Incomplete fix about bug where opening card scrolls to wrong place
-        // https://github.com/wekan/wekan/issues/4572#issuecomment-1184149395
-        // TODO sometimes parentComponent is not available, maybe because it's not
-        // yet created?!
-        //
-	// uncommented again by chrisi51
-        // only with that, the autoscroll feature is working properly
-        // after my fixes, all scrollings where correct
-    */
-	if (!parentComponent) return;
-        const bodyBoardComponent = parentComponent.parentComponent();
-
-
-    //On Mobile View Parent is Board, Not Board Body. I cant see how this funciton should work then.
-    if (bodyBoardComponent === null) return;
-    const $cardView = this.$(this.firstNode());
-    const $cardContainer = bodyBoardComponent.$('.js-swimlanes');
-
-    /*
-        // Incomplete fix about bug where opening card scrolls to wrong place
-        // https://github.com/wekan/wekan/issues/4572#issuecomment-1184149395
-        // TODO sometimes cardContainer is not available, maybe because it's not yet
-        // created?!
-        if (!$cardContainer) return;
-    */
-
-    const cardContainerScroll = $cardContainer.scrollLeft();
-    const cardContainerWidth = $cardContainer.width();
-
-    const cardViewStart = $cardView.offset().left;
-    const cardViewEnd = cardViewStart + cardPanelWidth;
-
-    let offset = false;
-    if (cardViewStart < 0) {
-      offset = cardViewStart;
-    } else if (cardViewEnd > cardContainerWidth) {
-      offset = cardViewEnd - cardContainerWidth;
-    }
-
-    if (offset) {
-      bodyBoardComponent.scrollLeft(cardContainerScroll + offset);
-    }
-
-    //Scroll top
-    const cardViewStartTop = $cardView.offset().top;
-    const cardContainerScrollTop = $cardContainer.scrollTop();
-
-    let topOffset = false;
-    if (cardViewStartTop !== 100) {
-      topOffset = cardViewStartTop - 100;
-    }
-    if (topOffset !== false) {
-      bodyBoardComponent.scrollTop(cardContainerScrollTop + topOffset);
-    }
-  },
-
  presentParentTask() {
    let result = this.currentBoard.presentParentTask;
    if (result === null || result === undefined) {
@@ -221,12 +161,6 @@ BlazeComponent.extendComponent({
      //-------------
    }

-    if (!Utils.isMiniScreen()) {
-      Meteor.setTimeout(() => {
-        this.scrollParentContainer();
-      }, 500);
-    }
-
    const $checklistsDom = this.$('.card-checklist-items');

    $checklistsDom.sortable({
@@ -452,20 +386,10 @@ BlazeComponent.extendComponent({
        'click .js-maximize-card-details'() {
          Meteor.call('toggleCardMaximized');
          autosize($('.card-details'));
-//          if (!Utils.isMiniScreen()) {
-//            Meteor.setTimeout(() => {
-//              this.scrollParentContainer();
-//            }, 500);
-//          }
        },
        'click .js-minimize-card-details'() {
          Meteor.call('toggleCardMaximized');
          autosize($('.card-details'));
-          if (!Utils.isMiniScreen()) {
-            Meteor.setTimeout(() => {
-              this.scrollParentContainer();
-            }, 500);
-          }
        },
        'click .js-vote'(e) {
          const forIt = $(e.target).hasClass('js-vote-positive');
@@ -922,13 +846,15 @@ BlazeComponent.extendComponent({
        'click .js-palette-color'() {
          this.currentColor.set(this.currentData().color);
        },
-        'click .js-submit'() {
+        'click .js-submit'(event) {
+          event.preventDefault();
          this.currentCard.setColor(this.currentColor.get());
-          Popup.close();
+          Popup.back();
        },
-        'click .js-remove-color'() {
+        'click .js-remove-color'(event) {
+          event.preventDefault();
          this.currentCard.setColor(null);
-          Popup.close();
+          Popup.back();
        },
      },
    ];
@@ -8,6 +8,20 @@ textarea.js-edit-checklist-item {
  resize: none;
  height: 34px;
 }
+.card-details .text-show-at-minicard {
+  width: 350px;
+  text-align: left;
+}
+.minicard .text-show-at-minicard {
+  display: none;
+}
+.text-some-space {
+  width: 20px;
+}
+.text-hide-checked-items {
+  width: 400px;
+  text-align: left;
+}
 .delete-text,
 .js-delete-checklist-item,
 .js-convert-checklist-item-to-card {
@@ -26,6 +40,8 @@ textarea.js-edit-checklist-item {
  display: flex;
  justify-content: space-between;
 }
+
+
 .checklist-progress-bar-container {
  display: flex;
  flex-direction: row;
@@ -9,18 +9,10 @@ template(name="checklists")
        else
          a.add-checklist-top.js-open-inlined-form(title="{{_ 'add-checklist'}}")
            i.fa.fa-plus
-    if currentUser.isBoardMember
-      .material-toggle-switch(title="{{_ 'hide-checked-items'}}")
-        //span.toggle-switch-title
-        if hideCheckedItems
-          input.toggle-switch(type="checkbox" id="toggleHideCheckedItemsButton" checked="checked")
-        else
-          input.toggle-switch(type="checkbox" id="toggleHideCheckedItemsButton")
-        label.toggle-label(for="toggleHideCheckedItemsButton")

  .card-checklist-items
    each checklist in checklists
-      +checklistDetail(checklist = checklist)
+      +checklistDetail(checklist=checklist)

  if canModifyCard
    +inlinedForm(autoclose=false classNames="js-add-checklist" cardId = cardId)
@@ -30,7 +22,7 @@ template(name="checklists")
        i.fa.fa-plus

 template(name="checklistDetail")
-  .js-checklist.checklist
+  .js-checklist.checklist.nodragscroll
    +inlinedForm(classNames="js-edit-checklist-title" checklist = checklist)
      +editChecklistItemForm(checklist = checklist)
    else
@@ -130,6 +122,27 @@ template(name='checklistItemDetail')
          = item.title

 template(name="checklistActionsPopup")
+  if currentUser.isBoardMember
+    span.text-show-at-minicard
+      | {{_ 'show-at-minicard'}}
+    .material-toggle-switch(title="{{_ 'show-checklist-at-minicard'}}")
+      if showAtMinicard
+        input.toggle-switch(type="checkbox" id="toggleShowChecklistAtMinicardButton" checked="checked")
+      else
+        input.toggle-switch(type="checkbox" id="toggleShowChecklistAtMinicardButton")
+      label.toggle-label(for="toggleShowChecklistAtMinicardButton")
+    hr
+    span.text-hide-checked-items
+      | {{_ 'hide-checked-items'}}
+    .material-toggle-switch(title="{{_ 'hide-checked-items'}}")
+      //span.toggle-switch-title
+      //.check-square-icon.i.fa.fa-check-square-o
+      if hideCheckedItems
+        input.toggle-switch(type="checkbox" id="toggleHideCheckedItemsButton" checked="checked")
+      else
+        input.toggle-switch(type="checkbox" id="toggleHideCheckedItemsButton")
+      label.toggle-label(for="toggleHideCheckedItemsButton")
+    hr
  ul.pop-over-list
    li
      a.js-delete-checklist.delete-checklist
@@ -202,9 +202,6 @@ BlazeComponent.extendComponent({

  events() {
    const events = {
-      'click #toggleHideCheckedItemsButton'() {
-        Meteor.call('toggleHideCheckedItems');
-      },
    };

    return [
@@ -274,6 +271,11 @@ Template.checklists.helpers({
    const ret = card.checklists();
    return ret;
  },
+  showAtMinicard() {
+    const card = ReactiveCache.getCard(this.cardId);
+    const ret = card.checklists({'showAtMinicard':1});
+    return ret;
+  },
  hideCheckedItems() {
    const currentUser = ReactiveCache.getCurrentUser();
    if (currentUser) return currentUser.hasHideCheckedItems();
@@ -301,9 +303,26 @@ BlazeComponent.extendComponent({
 }).register('addChecklistItemForm');

 BlazeComponent.extendComponent({
+  toggleItem() {
+    const checklist = this.currentData().checklist;
+    const item = this.currentData().item;
+    if (checklist && item && item._id) {
+      item.toggleItem();
+    }
+  },
  events() {
    return [
      {
+        'click .js-checklist-item .check-box-container': this.toggleItem,
+        'click #toggleShowChecklistAtMinicardButton'() {
+          const checklist = this.checklist;
+          if (checklist && checklist._id) {
+            Meteor.call('toggleShowChecklistAtMinicard', checklist._id);
+          }
+        },
+        'click #toggleHideCheckedItemsButton'() {
+          Meteor.call('toggleHideCheckedItems');
+        },
        'click .js-delete-checklist': Popup.afterConfirm('checklistDelete', function () {
          Popup.back(2);
          const checklist = this.checklist;
@@ -37,5 +37,4 @@ template(name="cardLabelsPopup")
              = name
            if(isLabelSelected ../_id)
              i.card-label-selectable-icon.fa.fa-check
-  if currentUser.isBoardAdmin
-    a.quiet-button.full.js-add-label {{_ 'label-create'}}
+  a.quiet-button.full.js-add-label {{_ 'label-create'}}
@@ -1,3 +1,12 @@
+.minicard .checklists-title,
+.minicard .add-checklist,
+.minicard .add-checklist-item,
+.minicard .checklist-details-menu {
+  display: none;
+}
+.minicard .checklist-progress-bar-container {
+  width: 190px; /* TODO: Add adjustable width https://github.com/wekan/wekan/pull/4964 */
+}
 .minicard-wrapper {
  cursor: pointer;
  position: relative;
@@ -47,10 +56,12 @@
  float: right;
  font-size: 18px;
  padding-right: 30px;
+  padding-left: 5px;
 }
 .minicard-details-menu {
  float: right;
  font-size: 18px;
+  padding-left: 5px;
 }
@media print {
  .minicard-details-menu,
@@ -90,7 +101,7 @@
  background-size: contain;
  height: 145px;
  user-select: none;
-  margin: -6px -8px 6px -8px;
+  margin: 6px -8px 6px -8px;
  border-radius: top 2px;
 }
 .minicard .minicard-labels {
@@ -127,6 +138,14 @@
  max-width: 100%;
  margin-right: 4px;
 }
+/*
+.minicard .checklists-title,
+.minicard .add-checklist,
+.minicard .add-checklist-item,
+.minicard .checklist-details-menu {
+  display: none;
+}
+*/
 .minicard .handle {
  width: 20px;
  height: 20px;
@@ -156,7 +175,6 @@
  .minicard .minicard-title .viewer {
    display: block;
    word-wrap: break-word;
-    max-width: 230px;
  }
 }
 .minicard .dates {
@@ -248,6 +266,7 @@
 }
 .minicard .minicard-description {
  padding: 6px 0 0 8px;
+  color: #000;
  background-color: #eee;
  width: 100%;
  margin-bottom: 2px;
@@ -1,14 +1,15 @@
 template(name="minicard")
-  .minicard(
+  .minicard.nodragscroll(
    class="{{#if isLinkedCard}}linked-card{{/if}}"
    class="{{#if isLinkedBoard}}linked-board{{/if}}"
    class="{{#if colorClass}}minicard-{{colorClass}}{{/if}}")
-    if isTouchScreenOrShowDesktopDragHandles
-      a.fa.fa-navicon.minicard-details-menu-with-handle.js-open-minicard-details-menu(title="{{_ 'cardDetailsActionsPopup-title'}}")
-      .handle
-        .fa.fa-arrows
-    else
-      a.fa.fa-navicon.minicard-details-menu.js-open-minicard-details-menu(title="{{_ 'cardDetailsActionsPopup-title'}}")
+    if canModifyCard
+      if isTouchScreenOrShowDesktopDragHandles
+        a.fa.fa-navicon.minicard-details-menu-with-handle.js-open-minicard-details-menu(title="{{_ 'cardDetailsActionsPopup-title'}}")
+        .handle
+          .fa.fa-arrows
+      else
+        a.fa.fa-navicon.minicard-details-menu.js-open-minicard-details-menu(title="{{_ 'cardDetailsActionsPopup-title'}}")
    .dates
      if getReceived
        unless getStart
@@ -111,6 +112,12 @@ template(name="minicard")
                    +viewer
                      = trueValue

+    .card-checklist-attachmentGalleries
+      .card-checklist-attachmentGallery.card-checklists
+        if currentBoard.allowsChecklists
+          //hr
+          //+checklists(cardId=_id showAtMinicard=true)
+
    if showAssignee
      if getAssignees
        .minicard-assignees.js-minicard-assignees
@@ -123,15 +130,15 @@ template(name="minicard")
          each getMembers
            +userAvatar(userId=this)

-    if showCreator
+    if showCreatorOnMinicard
      .minicard-creator
        +userAvatar(userId=this.userId noRemove=true)

    .badges
-      unless currentUser.isNoComments
+      if canModifyCard
        if comments.length
          .badge(title="{{_ 'card-comments-title' comments.length }}")
-            span.badge-icon.fa.fa-comment-o.badge-comment
+            span.badge-icon.fa.fa-comment-o.badge-comment.badge-text
              = ' '
              = comments.length
            //span.badge-comment.badge-text
@@ -183,12 +190,11 @@ template(name="editCardSortOrderPopup")

 template(name="minicardDetailsActionsPopup")
  ul.pop-over-list
-    if currentUser.isBoardAdmin
+    if canModifyCard
      li
        a.js-move-card
          i.fa.fa-arrow-right
          | {{_ 'moveCardPopup-title'}}
-    unless currentUser.isWorker
      li
        a.js-copy-card
          i.fa.fa-copy
@@ -37,15 +37,15 @@ BlazeComponent.extendComponent({
    return ret;
  },

-  showCreator() {
+  showCreatorOnMinicard() {
    // cache "board" to reduce the mini-mongodb access
    const board = this.data().board();
    let ret = false;
    if (board) {
      ret =
-        board.allowsCreator === null ||
-        board.allowsCreator === undefined ||
-        board.allowsCreator
+        board.allowsCreatorOnMinicard === null ||
+        board.allowsCreatorOnMinicard === undefined ||
+        board.allowsCreatorOnMinicard
      ;
    }
    return ret;
@@ -92,6 +92,11 @@ BlazeComponent.extendComponent({
  events() {
    return [
      {
+        'click .minicard-checklists'() {
+          // Prevents clicking checklist at minicard from opening card details,
+          // while still allowing checking checlist items.
+          event.preventDefault();
+        },
        'click .js-linked-link'() {
          if (this.data().isLinkedCard()) Utils.goCardId(this.data().linkedId);
          else if (this.data().isLinkedBoard())
@@ -26,8 +26,7 @@ template(name="subtaskDetail")
      .subtask-title
        span
        if canModifyCard
-          if currentUser.isBoardAdmin
-            a.fa.fa-navicon.subtask-details-menu.js-open-subtask-details-menu(title="{{_ 'subtaskActionsPopup-title'}}")
+          a.fa.fa-navicon.subtask-details-menu.js-open-subtask-details-menu(title="{{_ 'subtaskActionsPopup-title'}}")
        if canModifyCard
          h2.title.js-open-inlined-form.is-editable
            +viewer
@@ -95,7 +94,8 @@ template(name="subtaskActionsPopup")
      a.js-view-subtask(title="{{ subtask.title }}")
        i.fa.fa-eye
        | {{_ "view-it"}}
-      a.js-delete-subtask.delete-subtask
-        i.fa.fa-trash
-        | {{_ "delete"}} ...
+      if currentUser.isBoardAdmin
+        a.js-delete-subtask.delete-subtask
+          i.fa.fa-trash
+          | {{_ "delete"}} ...

@@ -68,6 +68,10 @@ BlazeComponent.extendComponent({
    }
  },

+  isBoardAdmin() {
+    return ReactiveCache.getCurrentUser().isBoardAdmin();
+  },
+
  editSubtask(event) {
    event.preventDefault();
    const textarea = this.find('textarea.js-edit-subtask-item');
@@ -104,6 +108,9 @@ BlazeComponent.extendComponent({
 }).register('subtaskItemDetail');

 BlazeComponent.extendComponent({
+  isBoardAdmin() {
+    return ReactiveCache.getCurrentUser().isBoardAdmin();
+  },
  events() {
    return [
      {
@@ -129,3 +136,14 @@ BlazeComponent.extendComponent({
    ]
  }
 }).register('subtaskActionsPopup');
+
+Template.editSubtaskItemForm.helpers({
+  user() {
+    return ReactiveCache.getUser(this.userId);
+  },
+  isBoardAdmin() {
+    return ReactiveCache.getCurrentUser().isBoardAdmin();
+  },
+});
+
+
@@ -7,7 +7,7 @@
  border-left: 1px solid #ccc;
  padding: 0;
  float: left;
-  min-width: 100px; /* TODO(mark-i-m): hardcoded? */
+  /* min-width: 100px; TODO(mark-i-m): hardcoded? */
  /*max-width: 270px;*/
  /* Reverted incomplete change list width: */
  /* https://github.com/wekan/wekan/issues/4558 */
@@ -81,6 +81,20 @@
  overflow: hidden;
  text-overflow: ellipsis;
  word-wrap: break-word;
+}
+.list-rotated {
+  width: 10px;
+  height: 250px;
+  margin-top: -90px;
+  margin-left: -110px;
+  margin-right: 0;
+  transform: rotate(90deg);
+  position: relative;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+}
+.list-header .list-rotated {
+
 }
 .list-header .list-header-watch-icon {
  padding-left: 10px;
@@ -99,6 +113,23 @@
  color: #a6a6a6;
  margin-right: 15px;
 }
+.list-header .list-header-collapse-right {
+  color: #a6a6a6;
+}
+.list-header .list-header-collapse-left {
+  color: #a6a6a6;
+  margin-right: 15px;
+}
+.list-header .list-header-uncollapse-left {
+  color: #a6a6a6;
+}
+.list-header .list-header-uncollapse-right {
+  color: #a6a6a6;
+}
+.list-header .list-header-collapse {
+  color: #a6a6a6;
+  margin-right: 15px;
+}
 .list-header .highlight {
  color: #ce1414;
 }
@@ -297,7 +328,6 @@
 }
 .list-header-white {
  border-bottom: 6px solid #fff;
-  border: 1px solid #eee;
 }
 .list-header-green {
  border-bottom: 6px solid #3cb500;
@@ -330,7 +360,7 @@
  border-bottom: 6px solid #51e898;
 }
 .list-header-silver {
-  border-bottom: 6px solid unset;
+  border-bottom: 6px solid #e4e4e4;
 }
 .list-header-peachpuff {
  border-bottom: 6px solid #ffdab9;
@@ -1,6 +1,7 @@
 template(name='list')
  .list.js-list(id="js-list-{{_id}}"
-                style="width:{{listWidth}}px;")
+                style="{{#unless collapsed}}width:{{listWidth}}px;{{/unless}}"
+                class="{{#if collapsed}}list-collapsed{{/if}}")
    +listHeader
    +listBody

@@ -1,37 +1,38 @@
 template(name="listBody")
-  .list-body
-    .minicards.clearfix.js-minicards(class="{{#if reachedWipLimit}}js-list-full{{/if}}")
-      if cards.length
-        +inlinedForm(autoclose=false position="top")
-          +addCardForm(listId=_id position="top")
-      ul.sidebar-list
-        each customFieldsSum
-          li
-            +viewer
-              = name
-            if $eq customFieldsSum.type "number"
+  unless collapsed
+    .list-body
+      .minicards.clearfix.js-minicards(class="{{#if reachedWipLimit}}js-list-full{{/if}}")
+        if cards.length
+          +inlinedForm(autoclose=false position="top")
+            +addCardForm(listId=_id position="top")
+        ul.sidebar-list
+          each customFieldsSum
+            li
              +viewer
-                = value
-            if $eq customFieldsSum.type "currency"
-              +viewer
-                = formattedCurrencyCustomFieldValue(value)
-      each (cardsWithLimit (idOrNull ../../_id))
-        a.minicard-wrapper.js-minicard(href=originRelativeUrl
-          class="{{#if cardIsSelected}}is-selected{{/if}}"
-          class="{{#if MultiSelection.isSelected _id}}is-checked{{/if}}")
-          if MultiSelection.isActive
-            .materialCheckBox.multi-selection-checkbox.js-toggle-multi-selection(
-              class="{{#if MultiSelection.isSelected _id}}is-checked{{/if}}")
-          +minicard(this)
-      if (showSpinner (idOrNull ../../_id))
-        +spinnerList
+                = name
+              if $eq customFieldsSum.type "number"
+                +viewer
+                  = value
+              if $eq customFieldsSum.type "currency"
+                +viewer
+                  = formattedCurrencyCustomFieldValue(value)
+        each (cardsWithLimit (idOrNull ../../_id))
+          a.minicard-wrapper.js-minicard(href=originRelativeUrl
+            class="{{#if cardIsSelected}}is-selected{{/if}}"
+            class="{{#if MultiSelection.isSelected _id}}is-checked{{/if}}")
+            if MultiSelection.isActive
+              .materialCheckBox.multi-selection-checkbox.js-toggle-multi-selection(
+                class="{{#if MultiSelection.isSelected _id}}is-checked{{/if}}")
+            +minicard(this)
+        if (showSpinner (idOrNull ../../_id))
+          +spinnerList

-      if canSeeAddCard
-        +inlinedForm(autoclose=false position="bottom")
-          +addCardForm(listId=_id position="bottom")
-        else
-          a.open-minicard-composer.js-card-composer.js-open-inlined-form(title="{{_ 'add-card-to-bottom-of-list'}}")
-            i.fa.fa-plus
+        if canSeeAddCard
+          +inlinedForm(autoclose=false position="bottom")
+            +addCardForm(listId=_id position="bottom")
+          else
+            a.open-minicard-composer.js-card-composer.js-open-inlined-form(title="{{_ 'add-card-to-bottom-of-list'}}")
+              i.fa.fa-plus

 template(name="spinnerList")
  .sk-spinner.sk-spinner-list(
@@ -79,18 +80,18 @@ template(name="linkCardPopup")
    select.js-select-boards
      option(value="")
      each boards
-        option(value="{{_id}}") {{title}}
+        option(value="{{_id}}") {{isTitleDefault title}}
    input.primary.confirm.js-link-board(type="button" value="{{_ 'link'}}")

  label {{_ 'swimlanes'}}:
  select.js-select-swimlanes
    each swimlanes
-      option(value="{{_id}}") {{title}}
+      option(value="{{_id}}") {{isTitleDefault title}}

  label {{_ 'lists'}}:
  select.js-select-lists
    each lists
-      option(value="{{_id}}") {{title}}
+      option(value="{{_id}}") {{isTitleDefault title}}

  label {{_ 'cards'}}:
  select.js-select-cards
@@ -593,6 +593,31 @@ BlazeComponent.extendComponent({
  },
 }).register('linkCardPopup');

+Template.linkCardPopup.helpers({
+  isTitleDefault(title) {
+    // https://github.com/wekan/wekan/issues/4763
+    // https://github.com/wekan/wekan/issues/4742
+    // Translation text for "default" does not work, it returns an object.
+    // When that happens, try use translation "defaultdefault" that has same content of default, or return text "Default".
+    // This can happen, if swimlane does not have name.
+    // Yes, this is fixing the symptom (Swimlane title does not have title)
+    // instead of fixing the problem (Add Swimlane title when creating swimlane)
+    // because there could be thousands of swimlanes, adding name Default to all of them
+    // would be very slow.
+    if (title.startsWith("key 'default") && title.endsWith('returned an object instead of string.')) {
+      if (`${TAPi18n.__('defaultdefault')}`.startsWith("key 'default") && `${TAPi18n.__('defaultdefault')}`.endsWith('returned an object instead of string.')) {
+        return 'Default';
+      } else  {
+        return `${TAPi18n.__('defaultdefault')}`;
+      }
+    } else if (title === 'Default') {
+      return `${TAPi18n.__('defaultdefault')}`;
+    } else  {
+      return title;
+    }
+  },
+});
+
 BlazeComponent.extendComponent({
  mixins() {
    return [];
@@ -621,6 +646,7 @@ BlazeComponent.extendComponent({
    if (this.isTemplateSearch) {
      const boardId = (ReactiveCache.getCurrentUser().profile || {}).templatesBoardId;
      if (boardId) {
+        subManager.subscribe('board', boardId, false);
        this.board = ReactiveCache.getBoard(boardId);
      }
    } else {
@@ -1,26 +1,47 @@
 template(name="listHeader")
-  .list-header.js-list-header(
+  .list-header.js-list-header.nodragscroll(
    class="{{#if limitToShowCardsCount}}list-header-card-count{{/if}}"
    class=colorClass)
    +inlinedForm
      +editListTitleForm
    else
+      unless isMiniScreen
+        if collapsed
+          a.js-collapse(title="{{_ 'uncollapse'}}")
+            i.fa.fa-arrow-left.list-header-uncollapse-left
+            i.fa.fa-arrow-right.list-header-uncollapse-right
      if isMiniScreen
        if currentList
          a.list-header-left-icon.fa.fa-angle-left.js-unselect-list
-      h2.list-header-name(
-        title="{{ moment modifiedAt 'LLL' }}"
-        class="{{#if currentUser.isBoardMember}}{{#unless currentUser.isCommentOnly}}{{#unless currentUser.isWorker}}js-open-inlined-form is-editable{{/unless}}{{/unless}}{{/if}}")
-        +viewer
-          = title
-        if wipLimit.enabled
-         |&nbsp;(
-         span(class="{{#if exceededWipLimit}}highlight{{/if}}") {{cards.length}}
-         |/#{wipLimit.value})
-
-      if showCardsCountForList cards.length
-        span.cardCount {{cardsCount}} {{cardsCountForListIsOne cards.length}}
-
+      unless isMiniScreen
+        if collapsed
+          if showCardsCountForList cards.length
+            br
+            span.cardCount {{cardsCount}}
+      if isMiniScreen
+        h2.list-header-name(
+          title="{{ moment modifiedAt 'LLL' }}"
+          class="{{#if currentUser.isBoardMember}}{{#unless currentUser.isCommentOnly}}{{#unless currentUser.isWorker}}js-open-inlined-form is-editable{{/unless}}{{/unless}}{{/if}}")
+          +viewer
+            = title
+          if wipLimit.enabled
+           |&nbsp;(
+           span(class="{{#if exceededWipLimit}}highlight{{/if}}") {{cards.length}}
+           |/#{wipLimit.value})
+      unless isMiniScreen
+        div(class="{{#if collapsed}}list-rotated{{/if}}")
+          h2.list-header-name(
+            title="{{ moment modifiedAt 'LLL' }}"
+            class="{{#if currentUser.isBoardMember}}{{#unless currentUser.isCommentOnly}}{{#unless currentUser.isWorker}}js-open-inlined-form is-editable{{/unless}}{{/unless}}{{/if}}")
+            +viewer
+              = title
+            if wipLimit.enabled
+             |&nbsp;(
+             span(class="{{#if exceededWipLimit}}highlight{{/if}}") {{cards.length}}
+             |/#{wipLimit.value})
+        unless collapsed
+          if showCardsCountForList cards.length
+            span.cardCount {{cardsCount}} {{cardsCountForListIsOne cards.length}}
      if isMiniScreen
        if currentList
          if isWatching
@@ -36,16 +57,20 @@ template(name="listHeader")
      else if currentUser.isBoardMember
        if isWatching
          i.list-header-watch-icon.fa.fa-eye
-        div.list-header-menu
-          unless currentUser.isCommentOnly
-            //if isBoardAdmin
-            //  a.fa.js-list-star.list-header-plus-top(class="fa-star{{#unless starred}}-o{{/unless}}")
-            if canSeeAddCard
-              a.js-add-card.fa.fa-plus.list-header-plus-top(title="{{_ 'add-card-to-top-of-list'}}")
-            a.fa.fa-navicon.js-open-list-menu(title="{{_ 'listActionPopup-title'}}")
-          if currentUser.isBoardAdmin
-            if isTouchScreenOrShowDesktopDragHandles
-              a.list-header-handle.handle.fa.fa-arrows.js-list-handle
+        unless collapsed
+          div.list-header-menu
+            unless currentUser.isCommentOnly
+              //if isBoardAdmin
+              //  a.fa.js-list-star.list-header-plus-top(class="fa-star{{#unless starred}}-o{{/unless}}")
+              if canSeeAddCard
+                a.js-add-card.fa.fa-plus.list-header-plus-top(title="{{_ 'add-card-to-top-of-list'}}")
+                a.js-collapse(title="{{_ 'collapse'}}")
+                  i.fa.fa-arrow-right.list-header-collapse-right
+                  i.fa.fa-arrow-left.list-header-collapse-left
+                a.fa.fa-navicon.js-open-list-menu(title="{{_ 'listActionPopup-title'}}")
+            if currentUser.isBoardAdmin
+              if isTouchScreenOrShowDesktopDragHandles
+                a.list-header-handle.handle.fa.fa-arrows.js-list-handle

 template(name="editListTitleForm")
  .list-composer
@@ -31,6 +31,17 @@ BlazeComponent.extendComponent({
      return !status;
    }
  },
+  collapsed(check = undefined) {
+    const list = Template.currentData();
+    const status = list.isCollapsed();
+    if (check === undefined) {
+      // just check
+      return status;
+    } else {
+      list.collapse(!status);
+      return !status;
+    }
+  },
  editTitle(event) {
    event.preventDefault();
    const newTitle = this.childComponents('inlinedForm')[0]
@@ -104,6 +115,10 @@ BlazeComponent.extendComponent({
          event.preventDefault();
          this.starred(!this.starred());
        },
+        'click .js-collapse'(event) {
+          event.preventDefault();
+          this.collapsed(!this.collapsed());
+        },
        'click .js-open-list-menu': Popup.open('listAction'),
        'click .js-add-card.list-header-plus-top'(event) {
          const listDom = $(event.target).parents(
@@ -1,7 +1,19 @@
+.new-comment a.fa.fa-brands.fa-markdown,
+.inlined-form a.fa.fa-brands.fa-markdown {
+  float: right;
+  position: absolute;
+  top: -20px;
+  right: 60px;
+}
 .new-comment a.fa.fa-copy,
 .inlined-form a.fa.fa-copy {
  float: right;
-  position: relative;
+  position: absolute;
+  top: -20px;
+  right: 6px;
+}
+.js-inlined-form.viewer.btn-sm {
+  position: absolute;
  top: 20px;
  right: 6px;
 }
@@ -1,4 +1,5 @@
 template(name="editor")
+  a.fa.fa-brands.fa-markdown(title="{{_ 'convert-to-markdown'}}")
  a.fa.fa-copy(title="{{_ 'copy-text-to-clipboard'}}")
  span.copied-tooltip {{_ 'copied'}}
  textarea.editor(
@@ -1,4 +1,6 @@
 import { ReactiveCache } from '/imports/reactiveCache';
+import { TAPi18n } from '/imports/i18n';
+var converter = require('@wekanteam/html-to-markdown');

 const specialHandles = [
  {userId: 'board_members', username: 'board_members'},
@@ -9,6 +11,33 @@ const specialHandleNames = specialHandles.map(m => m.username);

 BlazeComponent.extendComponent({
  onRendered() {
+    // Start: Copy <pre> code https://github.com/wekan/wekan/issues/5149
+    // TODO: Try to make copyPre visible at Card Details after editing or closing editor or Card Details.
+    //       - Also this same TODO below at event, if someone gets it working.
+    var copy = function(target) {
+      var textArea = document.createElement('textarea');
+      textArea.setAttribute('style','width:1px;border:0;opacity:0;');
+      document.body.appendChild(textArea);
+      textArea.value = target.innerHTML;
+      textArea.select();
+      document.execCommand('copy');
+      document.body.removeChild(textArea);
+    }
+    var pres = document.querySelectorAll(".viewer > pre");
+    pres.forEach(function(pre){
+      var button = document.createElement("a");
+      button.className = "fa fa-copy btn btn-sm right";
+      // TODO: Translate text 'Copy text to clipboard'
+      button.setAttribute('title','Copy text to clipboard');
+      button.innerHTML = '';
+      pre.parentNode.insertBefore(button, pre);
+      button.addEventListener('click', function(e){
+        e.preventDefault();
+        copy(pre.childNodes[0]);
+      })
+    })
+    // End: Copy <pre> code
+
    const textareaSelector = 'textarea';
    const mentions = [
      // User mentions
@@ -44,12 +73,14 @@ BlazeComponent.extendComponent({
        index: 1,
      },
    ];
+
    const enableTextarea = function() {
      const $textarea = this.$(textareaSelector);
      autosize($textarea);
      $textarea.escapeableTextComplete(mentions);
    };
-    if (Meteor.settings.public.RICHER_CARD_COMMENT_EDITOR !== false) {
+/*
+    if (Meteor.settings.public.RICHER_CARD_COMMENT_EDITOR === true || Meteor.settings.public.RICHER_CARD_COMMENT_EDITOR === 'true') {
      const isSmall = Utils.isMiniScreen();
      const toolbar = isSmall
        ? [
@@ -269,6 +300,8 @@ BlazeComponent.extendComponent({
    } else {
      enableTextarea();
    }
+*/
+    enableTextarea();
  },
  events() {
    return [
@@ -280,6 +313,14 @@ BlazeComponent.extendComponent({
          const $tooltip = this.$('.copied-tooltip');
          Utils.showCopied(promise, $tooltip);
        },
+        'click a.fa.fa-brands.fa-markdown'(event) {
+          const $editor = this.$('textarea.editor');
+          $editor[0].value = converter.convert($editor[0].value);
+        },
+        // TODO: Try to make copyPre visible at Card Details after editing or closing editor or Card Details.
+        //'click .js-close-inlined-form'(event) {
+        //  Utils.copyPre();
+        //},
      }
    ]
  }
@@ -470,6 +470,7 @@ a:not(.disabled).is-active i.fa {
 .select-authentication {
  width: 100%;
 }
+.textBelowCustomLoginLogo,
 .auth-layout {
  display: flex;
  flex-direction: column;
@@ -37,10 +37,13 @@ template(name="userFormsLayout")
      else
        img(src="{{pathFor '/wekan-logo.svg'}}" alt="" width="300" height="auto")
        br
-      if currentSetting.textBelowCustomLoginLogo
-        +viewer
-          | {{currentSetting.textBelowCustomLoginLogo}}
-        br
+  if currentSetting.textBelowCustomLoginLogo
+    hr
+    section.textBelowCustomLoginLogo
+      +viewer
+        | {{currentSetting.textBelowCustomLoginLogo}}
+    hr
+  section.auth-layout
    section.auth-dialog
      if isLoading
        +loader
@@ -70,13 +70,14 @@ template(name="myCards")
                                unless isMiniScreen
                                  .my-cards-board-badge(class=board.colorClass, id="header")
                                .my-cards-card-title-table
-                                  a.minicard-wrapper(href=card.originRelativeUrl)
-                                    | {{card.title}}
+                                  | {{card.title}}
+                                  //a.minicard-wrapper(href=card.originRelativeUrl)
+                                  //  | {{card.title}}
                              td
                                | {{list.title}}
                              td
-                                a(href=board.originRelativeUrl)
                                | {{board.title}}
+                                //a(href=board.originRelativeUrl)
                              td
                                | {{swimlane.title}}

@@ -11,7 +11,7 @@ template(name='notificationsDrawer')
      a.fa.fa-times-thin.close
    ul.notifications
      each transformedProfile.notifications
-        +notification(activityData=activity index=dbIndex read=read)
+        +notification(activityData=activityObj index=dbIndex read=read)
    if($gt unreadNotifications 0)
      a.all-read {{_ 'mark-all-as-read'}}
    if ($and ($.Session.get 'showReadNotifications') ($gt readNotifications 0))
@@ -58,18 +58,20 @@ template(name="rulesReport")
  h1 {{_ 'rulesReportTitle'}}
  if resultsCount
    table
-      tr
-        th Rule Title
-        th Board Title
-        th actionType
-        th activityType
+      thead
+        tr
+          th Rule Title
+          th Board Title
+          th actionType
+          th activityType

      each rule in results
-        tr
-          td {{ rule.title }}
-          td {{ rule.boardTitle }}
-          td {{ rule.action.actionType }}
-          td {{ rule.trigger.activityType }}
+        tbody
+          tr
+            td {{ rule.title }}
+            td {{ rule.boardTitle }}
+            td {{ rule.action.actionType }}
+            td {{ rule.trigger.activityType }}
  else
    div {{_ 'no-results' }}

@@ -77,22 +79,24 @@ template(name="filesReport")
  h1 {{_ 'filesReportTitle'}}
  if resultsCount
    table
-      tr
-        th Filename
-        th.right Size (kB)
-        th MIME Type
-        th Attachment ID
-        th Board ID
-        th Card ID
+      thead
+        tr
+          th Filename
+          th.right Size (kB)
+          th MIME Type
+          th Attachment ID
+          th Board ID
+          th Card ID

      each att in results
-        tr
-          td {{ att.name }}
-          td.right {{ fileSize att.size }}
-          td {{ att.type }}
-          td {{ att._id }}
-          td {{ att.meta.boardId }}
-          td {{ att.meta.cardId }}
+        tbody
+          tr
+            td {{ att.name }}
+            td.right {{ fileSize att.size }}
+            td {{ att.type }}
+            td {{ att._id }}
+            td {{ att.meta.boardId }}
+            td {{ att.meta.cardId }}
  else
    div {{_ 'no-results' }}

@@ -100,22 +104,24 @@ template(name="cardsReport")
  h1 {{_ 'cardsReportTitle'}}
  if resultsCount
    table.table
-      tr
-        th Card Title
-        th Board
-        th Swimlane
-        th List
-        th Members
-        th Assignees
+      thead
+        tr
+          th Card Title
+          th Board
+          th Swimlane
+          th List
+          th Members
+          th Assignees

      each card in results
-        tr
-          td {{abbreviate card.title }}
-          td {{abbreviate card.board.title }}
-          td {{abbreviate card.swimlane.title }}
-          td {{abbreviate card.list.title }}
-          td {{userNames card.members }}
-          td {{userNames card.assignees }}
+        tbody
+          tr
+            td {{abbreviate card.title }}
+            td {{abbreviate card.board.title }}
+            td {{abbreviate card.swimlane.title }}
+            td {{abbreviate card.list.title }}
+            td {{userNames card.members }}
+            td {{userNames card.assignees }}
  else
    div {{_ 'no-results' }}

@@ -123,22 +129,25 @@ template(name="boardsReport")
  h1 {{_ 'boardsReportTitle'}}
  if resultsCount
    table.table
-      tr
-        th Title
-        th Id
-        th Permission
-        th Archived?
-        th Members
-        th Organizations
-        th Teams
-
-      each board in results
+      thead
        tr
-          td {{abbreviate board.title }}
-          td {{abbreviate board._id }}
-          td {{ board.permission }}
-          td
-            = yesOrNo(board.archived)
-          td {{userNames board.members }}
+          th Title
+          th Id
+          th Permission
+          th Archived?
+          th Members
+          th Organizations
+          th Teams
+      each board in results
+        tbody
+          tr
+            td {{abbreviate board.title }}
+            td {{abbreviate board._id }}
+            td {{ board.permission }}
+            td
+              = yesOrNo(board.archived)
+            td {{userNames board.members }}
+            td {{orgs board.orgs }}
+            td {{teams board.teams }}
  else
    div {{_ 'no-results' }}
@@ -170,8 +170,27 @@ class AdminReport extends BlazeComponent {
      .join(", ");
    return ret;
  }
+  teams(memberTeams) {
+    const ret = (memberTeams || [])
+      .map(_memberTeam => {
+        const _ret = ReactiveCache.getTeam(_memberTeam.teamId)?.teamDisplayName || _memberTeam.teamId;
+        return _ret;
+      })
+      .join(", ");
+    return ret;
+  }
+  orgs(orgs) {
+    const ret = (orgs || [])
+      .map(_orgs => {
+        const _ret = ReactiveCache.getOrg(_orgs.orgId)?.orgDisplayName || _orgs.orgId;
+        return _ret;
+      })
+      .join(", ");
+    return ret;
+  }
 }.register('boardsReport'));

+
 (class extends AdminReport {
  collection = Cards;

@@ -73,22 +73,25 @@ template(name="people")

 template(name="orgGeneral")
  table
-    tbody
+    thead
      tr
        th {{_ 'displayName'}}
        th {{_ 'description'}}
        th {{_ 'shortName'}}
+        th {{_ 'autoAddUsersWithDomainName'}}
        th {{_ 'website'}}
        th {{_ 'createdAt'}}
        th {{_ 'active'}}
        th
          +newOrgRow
+    tbody
+      tr
      each org in orgList
        +orgRow(orgId=org._id)

 template(name="teamGeneral")
  table
-    tbody
+    thead
      tr
        th {{_ 'displayName'}}
        th {{_ 'description'}}
@@ -98,6 +101,8 @@ template(name="teamGeneral")
        th {{_ 'active'}}
        th
          +newTeamRow
+    tbody
+      tr
      each team in teamList
        +teamRow(teamId=team._id)

@@ -105,7 +110,7 @@ template(name="peopleGeneral")
  #divAddOrRemoveTeamContainer
    +modifyTeamsUsers
  table
-    tbody
+    thead
      tr
        th
          +selectAllUser
@@ -123,6 +128,8 @@ template(name="peopleGeneral")
        th {{_ 'teams'}}
        th
          +newUserRow
+    tbody
+      tr
      each user in peopleList
        +peopleRow(userId=user._id)

@@ -159,6 +166,10 @@ template(name="orgRow")
      td {{ orgData.orgShortName }}
    else
      td <s>{{ orgData.orgShortName }}</s>
+    if orgData.orgIsActive
+      td {{ orgData.orgAutoAddUsersWithDomainName }}
+    else
+      td <s>{{ orgData.orgAutoAddUsersWithDomainName }}</s>
    if orgData.orgIsActive
      td {{ orgData.orgWebsite }}
    else
@@ -307,9 +318,12 @@ template(name="editOrgPopup")
    label
      | {{_ 'shortName'}}
      input.js-orgShortName(type="text" value=org.orgShortName required)
+    label
+      | {{_ 'autoAddUsersWithDomainName'}}
+      input.js-orgAutoAddUsersWithDomainName(type="text" value=org.orgAutoAddUsersWithDomainName)
    label
      | {{_ 'website'}}
-      input.js-orgWebsite(type="text" value=org.orgWebsite required)
+      input.js-orgWebsite(type="text" value=org.orgWebsite)
    label
      | {{_ 'active'}}
      select.select-active.js-org-isactive
@@ -335,7 +349,7 @@ template(name="editTeamPopup")
      input.js-teamShortName(type="text" value=team.teamShortName required)
    label
      | {{_ 'website'}}
-      input.js-teamWebsite(type="text" value=team.teamWebsite required)
+      input.js-teamWebsite(type="text" value=team.teamWebsite)
    label
      | {{_ 'active'}}
      select.select-active.js-team-isactive
@@ -405,7 +419,7 @@ template(name="editUserPopup")
        each value in orgsDatas
          option(value="{{value._id}}") {{value.orgDisplayName}}
      input#jsUserOrgsInPut.js-userOrgs(type="text" value=user.orgsUserBelongs, disabled)
-      input#jsUserOrgIdsInPut.js-userOrgIds.hide(type="text" value=user.orgIdsUserBelongs)
+      input#jsUserOrgIdsInPut.js-userOrgIds.hide(type="hidden" value=user.orgIdsUserBelongs)
    label
      | {{_ 'teams'}}
      i.fa.fa-plus-square#addUserTeam
@@ -415,7 +429,7 @@ template(name="editUserPopup")
        each value in teamsDatas
          option(value="{{value._id}}") {{_ value.teamDisplayName}}
      input#jsUserTeamsInPut.js-userteams(type="text" value=user.teamsUserBelongs, disabled)
-      input#jsUserTeamIdsInPut.js-userteamIds.hide(type="text" value=user.teamIdsUserBelongs)
+      input#jsUserTeamIdsInPut.js-userteamIds.hide(type="hidden" value=user.teamIdsUserBelongs)

    hr
    label
@@ -436,6 +450,9 @@ template(name="newOrgPopup")
    label
      | {{_ 'shortName'}}
      input.js-orgShortName(type="text" value="" required)
+    label
+      | {{_ 'autoAddUsersWithDomainName'}}
+      input.js-orgAutoAddUsersWithDomainName(type="text" value="")
    label
      | {{_ 'website'}}
      input.js-orgWebsite(type="text" value="" required)
@@ -462,7 +479,7 @@ template(name="newTeamPopup")
      input.js-teamShortName(type="text" value="" required)
    label
      | {{_ 'website'}}
-      input.js-teamWebsite(type="text" value="" required)
+      input.js-teamWebsite(type="text" value="")
    label
      | {{_ 'active'}}
      select.select-active.js-team-isactive
@@ -576,12 +576,14 @@ Template.editOrgPopup.events({
      .value.trim();
    const orgDesc = templateInstance.find('.js-orgDesc').value.trim();
    const orgShortName = templateInstance.find('.js-orgShortName').value.trim();
+    const orgAutoAddUsersWithDomainName = templateInstance.find('.js-orgAutoAddUsersWithDomainName').value.trim();
    const orgWebsite = templateInstance.find('.js-orgWebsite').value.trim();
    const orgIsActive = templateInstance.find('.js-org-isactive').value.trim() == 'true';

    const isChangeOrgDisplayName = orgDisplayName !== org.orgDisplayName;
    const isChangeOrgDesc = orgDesc !== org.orgDesc;
    const isChangeOrgShortName = orgShortName !== org.orgShortName;
+    const isChangeOrgAutoAddUsersWithDomainName = orgAutoAddUsersWithDomainName !== org.orgAutoAddUsersWithDomainName;
    const isChangeOrgWebsite = orgWebsite !== org.orgWebsite;
    const isChangeOrgIsActive = orgIsActive !== org.orgIsActive;

@@ -589,6 +591,7 @@ Template.editOrgPopup.events({
      isChangeOrgDisplayName ||
      isChangeOrgDesc ||
      isChangeOrgShortName ||
+      isChangeOrgAutoAddUsersWithDomainName ||
      isChangeOrgWebsite ||
      isChangeOrgIsActive
    ) {
@@ -598,6 +601,7 @@ Template.editOrgPopup.events({
        orgDisplayName,
        orgDesc,
        orgShortName,
+        orgAutoAddUsersWithDomainName,
        orgWebsite,
        orgIsActive,
      );
@@ -920,6 +924,7 @@ Template.newOrgPopup.events({
      .value.trim();
    const orgDesc = templateInstance.find('.js-orgDesc').value.trim();
    const orgShortName = templateInstance.find('.js-orgShortName').value.trim();
+    const orgAutoAddUsersWithDomainName = templateInstance.find('.js-orgAutoAddUsersWithDomainName').value.trim();
    const orgWebsite = templateInstance.find('.js-orgWebsite').value.trim();
    const orgIsActive =
      templateInstance.find('.js-org-isactive').value.trim() == 'true';
@@ -929,6 +934,7 @@ Template.newOrgPopup.events({
      orgDisplayName,
      orgDesc,
      orgShortName,
+      orgAutoAddUsersWithDomainName,
      orgWebsite,
      orgIsActive,
    );
@@ -7,11 +7,13 @@
  display: -moz-flex;
  display: -ms-flexbox;
  display: flex;
+  height: 100%;
 }
 .setting-content {
  color: #727479;
  background: #dedede;
  width: 100%;
+  height: 100%;
  position: absolute;
 }
 .setting-content .content-title {
@@ -56,6 +58,8 @@
  -moz-user-select: text;
  -ms-user-select: text;
  user-select: text;
+  max-height: 100%;
+  overflow: auto;
 }
 .setting-content .content-body .main-body ul li {
  padding: 0.5rem 0.5rem;
@@ -34,13 +34,14 @@ template(name="translation")

 template(name="translationGeneral")
  table
-    tbody
+    thead
      tr
        th {{_ 'language'}}
        th {{_ 'text'}}
        th {{_ 'translation-text'}}
        th
          +newTranslationRow
+    tbody
      each translation in translationList
        +translationRow(translationId=translation._id)

@@ -175,7 +175,7 @@ template(name="boardInfoOnMyBoardsPopup")

 template(name="boardCardSettingsPopup")
  form.board-card-settings
-    h3 {{_ 'show-on-card'}}
+    h3 {{_ 'show-on-card'}}, {{_ 'show-on-minicard'}}
    div.check-div
      a.flex.js-field-has-receiveddate(class="{{#if allowsReceivedDate}}is-checked{{/if}}")
        .materialCheckBox(class="{{#if allowsReceivedDate}}is-checked{{/if}}")
@@ -206,14 +206,18 @@ template(name="boardCardSettingsPopup")
        span
          i.fa.fa-users
          | {{_ 'members'}}
-
    div.check-div
      a.flex.js-field-has-creator(class="{{#if allowsCreator}}is-checked{{/if}}")
        .materialCheckBox(class="{{#if allowsCreator}}is-checked{{/if}}")
        span
          i.fa.fa-user
          | {{_ 'creator'}}
-
+    div.check-div
+      a.flex.js-field-has-creator-on-minicard(class="{{#if allowsCreatorOnMinicard}}is-checked{{/if}}")
+        .materialCheckBox(class="{{#if allowsCreatorOnMinicard}}is-checked{{/if}}")
+        span
+          i.fa.fa-user
+          | {{_ 'creator-on-minicard'}}
    div.check-div
      a.flex.js-field-has-assignee(class="{{#if allowsAssignee}}is-checked{{/if}}")
        .materialCheckBox(class="{{#if allowsAssignee}}is-checked{{/if}}")
@@ -238,6 +242,12 @@ template(name="boardCardSettingsPopup")
        span
          i.fa.fa-sort
          | {{_ 'card-sorting-by-number'}}
+    div.check-div
+      a.flex.js-field-has-card-sorting-by-number-on-minicard(class="{{#if allowsCardSortingByNumberOnMinicard}}is-checked{{/if}}")
+        .materialCheckBox(class="{{#if allowsCardSortingByNumberOnMinicard}}is-checked{{/if}}")
+        span
+          i.fa.fa-sort
+          | {{_ 'card-sorting-by-number-on-minicard'}}
    div.check-div
      a.flex.js-field-has-card-show-lists(class="{{#if allowsShowLists}}is-checked{{/if}}")
        .materialCheckBox(class="{{#if allowsShowLists}}is-checked{{/if}}")
@@ -271,6 +281,12 @@ template(name="boardCardSettingsPopup")
          i.fa.fa-align-left
          | {{_ 'description'}}
          | {{_ 'custom-field-text'}}
+    div.check-div
+      a.flex.js-field-has-description-text-on-minicard(class="{{#if allowsDescriptionTextOnMinicard}}is-checked{{/if}}")
+        .materialCheckBox(class="{{#if allowsDescriptionTextOnMinicard}}is-checked{{/if}}")
+        span
+          i.fa.fa-align-left
+          | {{_ 'description-on-minicard'}}
    div.check-div
      a.flex.js-field-has-checklists(class="{{#if allowsChecklists}}is-checked{{/if}}")
        .materialCheckBox(class="{{#if allowsChecklists}}is-checked{{/if}}")
@@ -289,6 +305,19 @@ template(name="boardCardSettingsPopup")
        span
          i.fa.fa-paperclip
          | {{_ 'attachments'}}
+    div.check-div
+      a.flex.js-field-has-badge-attachment-on-minicard(class="{{#if allowsBadgeAttachmentOnMinicard}}is-checked{{/if}}")
+        .materialCheckBox(class="{{#if allowsBadgeAttachmentOnMinicard}}is-checked{{/if}}")
+        span
+          i.fa.fa-paperclip
+          | {{_ 'badge-attachment-on-minicard'}}
+    div.check-div
+      a.flex.js-field-has-cover-attachment-on-minicard(class="{{#if allowsCoverAttachmentOnMinicard}}is-checked{{/if}}")
+        .materialCheckBox(class="{{#if allowsCoverAttachmentOnMinicard}}is-checked{{/if}}")
+        span
+          i.fa.fa-book
+          i.fa.fa-picture-o
+          | {{_ 'cover-attachment-on-minicard'}}
    //div.check-div
    //  a.flex.js-field-has-comments(class="{{#if allowsComments}}is-checked{{/if}}")
    //    .materialCheckBox(class="{{#if allowsComments}}is-checked{{/if}}")
@@ -302,35 +331,6 @@ template(name="boardCardSettingsPopup")
    //      i.fa.fa-history
    //      | {{_ 'activities'}}

-template(name="boardMinicardSettingsPopup")
-  form.board-minicard-settings
-    h3 {{_ 'show-on-minicard'}}
-    div.check-div
-      a.flex.js-field-has-description-text-on-minicard(class="{{#if allowsDescriptionTextOnMinicard}}is-checked{{/if}}")
-        .materialCheckBox(class="{{#if allowsDescriptionTextOnMinicard}}is-checked{{/if}}")
-        span
-          i.fa.fa-align-left
-          | {{_ 'description-on-minicard'}}
-    div.check-div
-      a.flex.js-field-has-cover-attachment-on-minicard(class="{{#if allowsCoverAttachmentOnMinicard}}is-checked{{/if}}")
-        .materialCheckBox(class="{{#if allowsCoverAttachmentOnMinicard}}is-checked{{/if}}")
-        span
-          i.fa.fa-book
-          i.fa.fa-picture-o
-          | {{_ 'cover-attachment-on-minicard'}}
-    div.check-div
-      a.flex.js-field-has-badge-attachment-on-minicard(class="{{#if allowsBadgeAttachmentOnMinicard}}is-checked{{/if}}")
-        .materialCheckBox(class="{{#if allowsBadgeAttachmentOnMinicard}}is-checked{{/if}}")
-        span
-          i.fa.fa-paperclip
-          | {{_ 'badge-attachment-on-minicard'}}
-    div.check-div
-      a.flex.js-field-has-card-sorting-by-number-on-minicard(class="{{#if allowsCardSortingByNumberOnMinicard}}is-checked{{/if}}")
-        .materialCheckBox(class="{{#if allowsCardSortingByNumberOnMinicard}}is-checked{{/if}}")
-        span
-          i.fa.fa-sort
-          | {{_ 'card-sorting-by-number-on-minicard'}}
-
 template(name="boardSubtaskSettingsPopup")
  form.board-subtask-settings
    h3 {{_ 'show-parent-in-minicard'}}
@@ -473,10 +473,6 @@ template(name="boardMenuPopup")
        a.js-card-settings
          i.fa.fa-id-card-o
          | {{_ 'card-settings'}}
-      li
-        a.js-minicard-settings
-          i.fa.fa-id-card-o
-          | {{_ 'minicard-settings'}}
      li
        a.js-subtask-settings
          i.fa.fa-sitemap
@@ -236,7 +236,6 @@ Template.boardMenuPopup.events({
  'click .js-import-board': Popup.open('chooseBoardSource'),
  'click .js-subtask-settings': Popup.open('boardSubtaskSettings'),
  'click .js-card-settings': Popup.open('boardCardSettings'),
-  'click .js-minicard-settings': Popup.open('boardMinicardSettings'),
  'click .js-export-board': Popup.open('exportBoard'),
 });

@@ -921,6 +920,14 @@ BlazeComponent.extendComponent({
    );
  },

+  allowsCreatorOnMinicard() {
+    return (
+      this.currentBoard.allowsCreatorOnMinicard === null ||
+      this.currentBoard.allowsCreatorOnMinicard === undefined ||
+      this.currentBoard.allowsCreatorOnMinicard
+    );
+  },
+
  allowsMembers() {
    return this.currentBoard.allowsMembers;
  },
@@ -984,6 +991,22 @@ BlazeComponent.extendComponent({
    );
  },

+  allowsDescriptionTextOnMinicard() {
+    return this.currentBoard.allowsDescriptionTextOnMinicard;
+  },
+
+  allowsCoverAttachmentOnMinicard() {
+    return this.currentBoard.allowsCoverAttachmentOnMinicard;
+  },
+
+  allowsBadgeAttachmentOnMinicard() {
+    return this.currentBoard.allowsBadgeAttachmentOnMinicard;
+  },
+
+  allowsCardSortingByNumberOnMinicard() {
+    return this.currentBoard.allowsCardSortingByNumberOnMinicard;
+  },
+
  boards() {
    const ret = ReactiveCache.getBoards(
      {
@@ -1106,6 +1129,19 @@ BlazeComponent.extendComponent({
            this.currentBoard.allowsCreator,
          );
        },
+        'click .js-field-has-creator-on-minicard'(evt) {
+          evt.preventDefault();
+          this.currentBoard.allowsCreatorOnMinicard = !this.currentBoard.allowsCreatorOnMinicard;
+          this.currentBoard.setAllowsCreatorOnMinicard(this.currentBoard.allowsCreatorOnMinicard);
+          $(`.js-field-has-creator-on-minicard ${MCB}`).toggleClass(
+            CKCLS,
+            this.currentBoard.allowsCreatorOnMinicard,
+          );
+          $('.js-field-has-creator-on-minicard').toggleClass(
+            CKCLS,
+            this.currentBoard.allowsCreatorOnMinicard,
+          );
+        },
        'click .js-field-has-members'(evt) {
          evt.preventDefault();
          this.currentBoard.allowsMembers = !this.currentBoard.allowsMembers;
@@ -1241,6 +1277,22 @@ BlazeComponent.extendComponent({
            this.currentBoard.allowsCardNumber,
          );
        },
+        'click .js-field-has-description-text-on-minicard'(evt) {
+          evt.preventDefault();
+          this.currentBoard.allowsDescriptionTextOnMinicard = !this.currentBoard
+            .allowsDescriptionTextOnMinicard;
+          this.currentBoard.setallowsDescriptionTextOnMinicard(
+            this.currentBoard.allowsDescriptionTextOnMinicard,
+          );
+          $(`.js-field-has-description-text-on-minicard ${MCB}`).toggleClass(
+            CKCLS,
+            this.currentBoard.allowsDescriptionTextOnMinicard,
+          );
+          $('.js-field-has-description-text-on-minicard').toggleClass(
+            CKCLS,
+            this.currentBoard.allowsDescriptionTextOnMinicard,
+          );
+        },
        'click .js-field-has-description-text'(evt) {
          evt.preventDefault();
          this.currentBoard.allowsDescriptionText = !this.currentBoard
@@ -1318,74 +1370,6 @@ BlazeComponent.extendComponent({
            this.currentBoard.allowsActivities,
          );
        },
-      },
-    ];
-  },
-}).register('boardCardSettingsPopup');
-
-
-BlazeComponent.extendComponent({
-  onCreated() {
-    this.currentBoard = Utils.getCurrentBoard();
-  },
-
-  allowsDescriptionTextOnMinicard() {
-    return this.currentBoard.allowsDescriptionTextOnMinicard;
-  },
-
-  allowsCoverAttachmentOnMinicard() {
-    return this.currentBoard.allowsCoverAttachmentOnMinicard;
-  },
-
-  allowsBadgeAttachmentOnMinicard() {
-    return this.currentBoard.allowsBadgeAttachmentOnMinicard;
-  },
-
-  allowsCardSortingByNumberOnMinicard() {
-    return this.currentBoard.allowsCardSortingByNumberOnMinicard;
-  },
-
- lists() {
-    return ReactiveCache.getLists(
-      {
-        boardId: this.currentBoard._id,
-        archived: false,
-      },
-      {
-        sort: ['title'],
-      },
-    );
-  },
-
-  hasLists() {
-    return this.lists().length > 0;
-  },
-
-  isListSelected() {
-    return (
-      this.currentBoard.dateSettingsDefaultBoardId === this.currentData()._id
-    );
-  },
-
-  events() {
-    return [
-      {
-        'click .js-field-has-description-text-on-minicard'(evt) {
-          evt.preventDefault();
-          this.currentBoard.allowsDescriptionTextOnMinicard = !this.currentBoard
-            .allowsDescriptionTextOnMinicard;
-          this.currentBoard.setallowsDescriptionTextOnMinicard(
-            this.currentBoard.allowsDescriptionTextOnMinicard,
-          );
-          $(`.js-field-has-description-text-on-minicard ${MCB}`).toggleClass(
-            CKCLS,
-            this.currentBoard.allowsDescriptionTextOnMinicard,
-          );
-          $('.js-field-has-description-text-on-minicard').toggleClass(
-            CKCLS,
-            this.currentBoard.allowsDescriptionTextOnMinicard,
-          );
-        },
        'click .js-field-has-cover-attachment-on-minicard'(evt) {
          evt.preventDefault();
          this.currentBoard.allowsCoverAttachmentOnMinicard = !this.currentBoard
@@ -1437,7 +1421,7 @@ BlazeComponent.extendComponent({
      },
    ];
  },
-}).register('boardMinicardSettingsPopup');
+}).register('boardCardSettingsPopup');

 BlazeComponent.extendComponent({
  onCreated() {
@@ -17,14 +17,24 @@ template(name="swimlaneFixedHeader")
        | {{_ 'list-templates-swimlane'}}
      else if $eq title 'Board Templates'
        | {{_ 'board-templates-swimlane'}}
+      else if $eq title 'Default'
+        | {{_ 'defaultdefault'}}
      else
        +viewer
-          = title
+          | {{isTitleDefault title}}
  .swimlane-header-menu
    unless currentUser.isCommentOnly
-      if currentUser.isBoardAdmin
-        a.fa.fa-plus.js-open-add-swimlane-menu.swimlane-header-plus-icon(title="{{_ 'add-swimlane'}}")
+      a.fa.fa-plus.js-open-add-swimlane-menu.swimlane-header-plus-icon(title="{{_ 'add-swimlane'}}")
      a.fa.fa-navicon.js-open-swimlane-menu(title="{{_ 'swimlaneActionPopup-title'}}")
+      //// TODO: Collapse Swimlane: make button working, etc.
+      //unless collapsed
+      //  a.js-collapse-swimlane(title="{{_ 'collapse'}}")
+      //    i.fa.fa-arrow-down.swimlane-header-collapse-down
+      //    i.fa.fa-arrow-up.swimlane-header-collapse-up
+      //if collapsed
+      //  a.js-collapse-swimlane(title="{{_ 'uncollapse'}}")
+      //    i.fa.fa-arrow-up.swimlane-header-collapse-up
+      //    i.fa.fa-arrow-down.swimlane-header-collapse-down
      unless isTouchScreen
        if isShowDesktopDragHandles
          a.swimlane-header-handle.handle.fa.fa-arrows.js-swimlane-header-handle
@@ -33,7 +43,7 @@ template(name="swimlaneFixedHeader")

 template(name="editSwimlaneTitleForm")
  .list-composer
-    input.list-name-input.full-line(type="text" value=title autofocus)
+    input.list-name-input.full-line(type="text" value="{{isTitleDefault title}}" autofocus)
    .edit-controls.clearfix
      button.primary.confirm(type="submit") {{_ 'save'}}
      a.fa.fa-times-thin.js-close-inlined-form
@@ -1,3 +1,4 @@
+import { TAPi18n } from '/imports/i18n';
 import { ReactiveCache } from '/imports/reactiveCache';
 const { calculateIndexData } = Utils;

@@ -17,10 +18,25 @@ BlazeComponent.extendComponent({
      swimlane.rename(newTitle.trim());
    }
  },
+  collapsed(check = undefined) {
+    const swimlane = Template.currentData();
+    const status = swimlane.isCollapsed();
+    if (check === undefined) {
+      // just check
+      return status;
+    } else {
+      swimlane.collapse(!status);
+      return !status;
+    }
+  },

  events() {
    return [
      {
+        'click .js-collapse-swimlane'(event) {
+          event.preventDefault();
+          this.collapsed(!this.collapsed());
+        },
        'click .js-open-swimlane-menu': Popup.open('swimlaneAction'),
        'click .js-open-add-swimlane-menu': Popup.open('swimlaneAdd'),
        submit: this.editTitle,
@@ -33,6 +49,53 @@ Template.swimlaneFixedHeader.helpers({
  isBoardAdmin() {
    return ReactiveCache.getCurrentUser().isBoardAdmin();
  },
+  isTitleDefault(title) {
+    // https://github.com/wekan/wekan/issues/4763
+    // https://github.com/wekan/wekan/issues/4742
+    // Translation text for "default" does not work, it returns an object.
+    // When that happens, try use translation "defaultdefault" that has same content of default, or return text "Default".
+    // This can happen, if swimlane does not have name.
+    // Yes, this is fixing the symptom (Swimlane title does not have title)
+    // instead of fixing the problem (Add Swimlane title when creating swimlane)
+    // because there could be thousands of swimlanes, adding name Default to all of them
+    // would be very slow.
+    if (title.startsWith("key 'default") && title.endsWith('returned an object instead of string.')) {
+      if (`${TAPi18n.__('defaultdefault')}`.startsWith("key 'default") && `${TAPi18n.__('defaultdefault')}`.endsWith('returned an object instead of string.')) {
+        return 'Default';
+      } else  {
+        return `${TAPi18n.__('defaultdefault')}`;
+      }
+    } else if (title === 'Default') {
+      return `${TAPi18n.__('defaultdefault')}`;
+    } else  {
+      return title;
+    }
+  },
+});
+
+Template.editSwimlaneTitleForm.helpers({
+  isTitleDefault(title) {
+    // https://github.com/wekan/wekan/issues/4763
+    // https://github.com/wekan/wekan/issues/4742
+    // Translation text for "default" does not work, it returns an object.
+    // When that happens, try use translation "defaultdefault" that has same content of default, or return text "Default".
+    // This can happen, if swimlane does not have name.
+    // Yes, this is fixing the symptom (Swimlane title does not have title)
+    // instead of fixing the problem (Add Swimlane title when creating swimlane) 
+    // because there could be thousands of swimlanes, adding name Default to all of them
+    // would be very slow.
+    if (title.startsWith("key 'default") && title.endsWith('returned an object instead of string.')) {
+      if (`${TAPi18n.__('defaultdefault')}`.startsWith("key 'default") && `${TAPi18n.__('defaultdefault')}`.endsWith('returned an object instead of string.')) {
+        return 'Default';
+      } else  {
+        return `${TAPi18n.__('defaultdefault')}`;
+      }
+    } else if (title === 'Default') {
+      return `${TAPi18n.__('defaultdefault')}`;
+    } else  {
+      return title;
+    }
+  },
 });

 Template.swimlaneActionPopup.events({
@@ -1,38 +1,3 @@
-/*
-// Minimize swimlanes start https://www.w3schools.com/howto/howto_js_accordion.asp
-
-.accordion
-  cursor: pointer
-  width: 30px
-  height: 20px
-  border: none
-  outline: none
-  font-size: 18px
-  transition: 0.4s
-  padding-top: 0px
-  margin-top: 0px
-
-.accordion:after
-  // Unicode triagle right:
-  content: '\25B6'
-  color: #777
-  font-weight: bold
-  float: left
-
-.active:after
-  // Unicode triangle down:
-  content: '\25BC'
-
-.panel
-  width: 100%
-  max-height: 0
-  overflow: hidden
-  transition: max-height 0.2s ease-out
-  margin: 0px
-  padding: 0px
-
-// Minimize swimlanes end https://www.w3schools.com/howto/howto_js_accordion.asp
-*/
@media screen and (min-width: 801px) {
  .swimlane.ui-sortable {
    width: max-content;
@@ -46,8 +11,30 @@
  background: #dedede;
  display: flex;
  flex-direction: row;
-  overflow: 0;
-  max-height: calc(100% - 26px);
+  overflow: auto;
+  max-height: 100%;
+}
+.swimlane-header-menu .swimlane-header-collapse-down {
+  font-size: 50%;
+  color: #a6a6a6;
+  position: absolute;
+  top: 5px;
+  left: 100px;
+}
+.swimlane-header-menu .swimlane-header-collapse-up {
+  font-size: 50%;
+  color: #a6a6a6;
+  position: absolute;
+  bottom: 5px;
+  left: 100px;
+}
+.swimlane-header-menu .swimlane-header-uncollapse-up {
+  font-size: 50%;
+  color: #a6a6a6;
+}
+.swimlane-header-menu .swimlane-header-uncollapse-down {
+  font-size: 50%;
+  color: #a6a6a6;
 }
 .swimlane.placeholder {
  background-color: rgba(0,0,0,0.2);
@@ -171,7 +158,7 @@
  color: #4d4d4d !important;
 }
 .swimlane-silver {
-  background: unset !important;
+  background: #ccc !important;
  color: #4d4d4d !important;
 }
 .swimlane-peachpuff {
@@ -1,5 +1,5 @@
 template(name="swimlane")
-  .swimlane
+  .swimlane.nodragscroll
    +swimlaneHeader
  unless collapseSwimlane
    .swimlane.js-lists.js-swimlane(id="swimlane-{{_id}}"
@@ -46,8 +46,8 @@ template(name="listsGroup")

 template(name="addListForm")
  unless currentUser.isWorker
-    .list.list-composer.js-list-composer(class="{{#if isMiniScreen}}mini-list{{/if}}")
-      if currentUser.isBoardAdmin
+    unless currentUser.isCommentOnly
+      .list.list-composer.js-list-composer(class="{{#if isMiniScreen}}mini-list{{/if}}")
        .list-header-add
          +inlinedForm(autoclose=false)
            input.list-name-input.full-line(type="text" placeholder="{{_ 'add-list'}}"
@@ -26,9 +26,9 @@ template(name="orgAvatar")
 template(name="boardOrgRow")
  tr
    if orgData.orgIsActive
-      td <s>{{ orgData.orgDisplayName }}</s>
-    else
      td {{ orgData.orgDisplayName }}
+    else
+      td <s>{{ orgData.orgDisplayName }}</s>
    td
      if currentUser.isBoardAdmin
        a.member.orgOrTeamMember.add-member.js-manage-board-removeOrg(title="{{_ 'remove-from-board'}}")
@@ -39,9 +39,9 @@ template(name="boardOrgRow")
 template(name="boardTeamRow")
  tr
    if teamData.teamIsActive
-      td <s>{{ teamData.teamDisplayName }}</s>
-    else
      td {{ teamData.teamDisplayName }}
+    else
+      td <s>{{ teamData.teamDisplayName }}</s>
    td
      if currentUser.isBoardAdmin
        a.member.orgOrTeamMember.add-member.js-manage-board-removeTeam(title="{{_ 'remove-from-board'}}")
@@ -248,6 +248,7 @@ Template.editProfilePopup.events({
 // XXX For some reason the useraccounts autofocus isnt working in this case.
 // See https://github.com/meteor-useraccounts/core/issues/384
 Template.changePasswordPopup.onRendered(function() {
+  $('.at-pwd-form').show();
  this.find('#at-field-current_password').focus();
 });

@@ -47,7 +47,7 @@ Blaze.registerHelper('isTouchScreenOrShowDesktopDragHandles', () =>
 Blaze.registerHelper('moment', (...args) => {
  args.pop(); // hash
  const [date, format] = args;
-  return moment(date).format(format);
+  return moment(date).format(format ?? 'LLLL');
 });

 Blaze.registerHelper('canModifyCard', () =>
@@ -6,10 +6,11 @@ import moment from 'moment/min/moment-with-locales';
 function adjustedTimeFormat() {
  return moment
    .localeData()
-    .longDateFormat('LT')
-    .replace(/HH/i, 'H');
+    .longDateFormat('LT');
 }

+//   .replace(/HH/i, 'H');
+
 export class DatePicker extends BlazeComponent {
  template() {
    return 'datepicker';
@@ -57,6 +57,9 @@ window.ExportHtml = Popup => {
    Array.from(
      document.querySelectorAll('#header-main-bar .board-header-btns'),
    ).forEach(elem => elem.remove());
+    Array.from(
+      document.querySelectorAll('.js-pop-over, .pop-over'),
+    ).forEach(elem => elem.remove());
    Array.from(document.querySelectorAll('.list-composer')).forEach(elem =>
      elem.remove(),
    );
@@ -152,6 +155,50 @@ window.ExportHtml = Popup => {
    );
  };

+  const getWebFonts = () => {
+    fontUrls = [];
+
+    for (let sheet of document.styleSheets) {
+      // Get the base URL of the stylesheet
+      let baseUrl = sheet.href ? new URL(sheet.href).origin : window.location.origin;
+
+      try {
+        for (let rule of sheet.cssRules) {
+          if (rule.type === CSSRule.FONT_FACE_RULE) {
+            let src = rule.style.getPropertyValue('src');
+            let urlMatch = src.match(/url\(["']?(.+?)["']?\)/);
+            if (urlMatch) {
+              let fontUrl = urlMatch[1];
+
+              // Resolve the URL relative to the stylesheet's base URL
+              let resolvedUrl = new URL(fontUrl, baseUrl);
+              fontUrls.push(resolvedUrl.href); // Using .href to get the absolute URL
+            }
+          }
+        }
+      } catch (e) {
+          console.log('Access to stylesheet blocked:', e);
+      }
+    }
+
+    return fontUrls;
+  };
+
+  const downloadFonts = async(elements, zip) => {
+    await asyncForEach(elements, async elem => {
+      const response = await fetch(elem);
+      const responseBody = await response.blob();
+      const filename = elem.split('/')
+        .pop()
+        .split('?')
+        .shift()
+        .split('#')
+        .shift();
+      const fileFullPath = `webfonts/${filename}`;
+        zip.file(fileFullPath, responseBody);
+    });
+  }
+
  const downloadCardCovers = async (elements, zip, boardSlug) => {
    await asyncForEach(elements, async elem => {
      const response = await fetch(
@@ -194,6 +241,7 @@ window.ExportHtml = Popup => {
    await downloadStylesheets(getStylesheetList(), zip);
    await downloadSrcAttached(getSrcAttached(), zip, boardSlug);
    await downloadCardCovers(getCardCovers(), zip, boardSlug);
+    await downloadFonts(getWebFonts(), zip);

    addBoardHTMLToZip(boardSlug, zip);

@@ -33,6 +33,14 @@ Mousetrap.bind('q', () => {
  }
 });

+Mousetrap.bind('a', () => {
+  const currentBoardId = Session.get('currentBoard');
+  const currentUserId = Meteor.userId();
+  if (currentBoardId && currentUserId) {
+    Filter.assignees.toggle(currentUserId);
+  }
+});
+
 Mousetrap.bind('x', () => {
  if (Filter.isActive()) {
    Filter.reset();
@@ -181,6 +189,10 @@ Template.keyboardShortcuts.helpers({
      keys: ['q'],
      action: 'shortcut-filter-my-cards',
    },
+    {
+      keys: ['a'],
+      action: 'shortcut-filter-my-assigned-cards',
+    },
    {
      keys: ['f'],
      action: 'shortcut-toggle-filterbar',
@@ -126,10 +126,9 @@ AccountsTemplates.configure({

 AccountsTemplates.configureRoute('changePwd', {
  redirect() {
-    // XXX We should emit a notification once we have a notification system.
-    // Currently the user has no indication that his modification has been
-    // applied.
-    Popup.back();
+    // We should go back with the popup but we don't since user feedback about the change is within the popup only.
+    // Once we have a global feedback popup mechanism we can use that here and close with the following:
+    // Popup.back();
  },
 });

@@ -16,6 +16,8 @@ export const ALLOWED_BOARD_COLORS = [
  'modern',
  'moderndark',
  'exodark',
+  'cleandark',
+  'cleanlight',
 ];
 export const ALLOWED_COLORS = [
  'white',
@@ -1,5 +1,3 @@
-version: '2'
-
 # Note: Do not add single quotes '' to variables. Having spaces still works without quotes where required.
 #---------------------------------------------------------------------------------------------------------
 # ==== CREATING USERS AND LOGGING IN TO WEKAN ====
@@ -105,9 +103,9 @@ services:
      - 27017
    volumes:
      - /etc/localtime:/etc/localtime:ro
-      - /etc/timezone:/etc/timezone:ro
      - wekan-db:/data/db
      - wekan-db-dump:/dump
+      #- /etc/timezone:/etc/timezone:ro # Do not use https://github.com/wekan/wekan/issues/5123

  wekan:
    #-------------------------------------------------------------------------------------
@@ -120,7 +118,10 @@ services:
    # image: quay.io/wekan/wekan:v6.89
    # image: wekanteam/wekan:v6.89
    # b) GitHub Container registry.
+    # b1) Latest release tag:
    image: ghcr.io/wekan/wekan:latest
+    # b2) Newest git commit automatic build:
+    #image: ghcr.io/wekan/wekan:main
    # c) Quay:
    #image: quay.io/wekan/wekan:latest
    # d) Docker Hub:
@@ -245,6 +246,10 @@ services:
      # ==== NUMBER OF SEARCH RESULTS PER PAGE BY DEFAULT ====
      #- RESULTS_PER_PAGE=20
      #---------------------------------------------------------------
+      # ==== AFTER OIDC LOGIN, ADD USERS AUTOMATICALLY TO THIS BOARD ID ====
+      # https://github.com/wekan/wekan/pull/5098
+      #- DEFAULT_BOARD_ID=abcd1234
+      #---------------------------------------------------------------
      # ==== WEKAN API AND EXPORT BOARD ====
      # Wekan Export Board works when WITH_API=true.
      # https://github.com/wekan/wekan/wiki/REST-API
@@ -361,7 +366,7 @@ services:
      #-----------------------------------------------------------------
      # ==== OUTGOING WEBHOOKS ====
      # What to send to Outgoing Webhook, or leave out. If commented out the default values will be: cardId,listId,oldListId,boardId,comment,user,card,commentId,swimlaneId,customerField,customFieldValue
-      #- WEBHOOKS_ATTRIBUTES=cardId,listId,oldListId,boardId,comment,user,card,commentId
+      #- WEBHOOKS_ATTRIBUTES=cardId,listId,oldListId,boardId,comment,user,card,board,list,swimlane,commentId
      #-----------------------------------------------------------------
      # ==== Debug OIDC OAuth2 etc ====
      #- DEBUG=true
@@ -384,6 +389,8 @@ services:
      #- OAUTH2_CA_CERT=ABCD1234
      # Use OAuth2 ADFS additional changes. Also needs OAUTH2_ENABLED=true setting.
      #- OAUTH2_ADFS_ENABLED=false
+      # Azure AD B2C. https://github.com/wekan/wekan/issues/5242
+      #- OAUTH2_B2C_ENABLED=false
      # OAuth2 login style: popup or redirect.
      #- OAUTH2_LOGIN_STYLE=redirect
      # Application GUID captured during app registration:
@@ -0,0 +1,782 @@
+version: '2'
+
+#---------------------------------------------------------------------------------------------------------
+# ==== START ====
+# docker-compose up -d -f docker-compose.yml-arm64
+#---------------------------------------------------------------------------------------------------------
+# Note: Do not add single quotes '' to variables. Having spaces still works without quotes where required.
+#---------------------------------------------------------------------------------------------------------
+# ==== CREATING USERS AND LOGGING IN TO WEKAN ====
+# https://github.com/wekan/wekan/wiki/Adding-users
+#---------------------------------------------------------------------------------------------------------
+# ==== FORGOT PASSWORD ====
+# https://github.com/wekan/wekan/wiki/Forgot-Password
+#---------------------------------------------------------------------------------------------------------
+# ==== Upgrading Wekan to new version =====
+# NOTE: MongoDB has changed from 3.x to 4.x, in that case you need backup/restore with --noIndexRestore
+#       see https://github.com/wekan/wekan/wiki/Backup
+# 1) Stop Wekan:
+#      docker-compose stop
+# 2) Remove old Wekan app (wekan-app only, not that wekan-db container that has all your data)
+#      docker rm wekan-app
+# 3) Get newest docker-compose.yml from https://github.com/wekan/wekan to have correct image,
+#    for example: "image: quay.io/wekan/wekan" or version tag "image: quay.io/wekan/wekan:v4.52"
+# 4) Start Wekan:
+#      docker-compose up -d
+#----------------------------------------------------------------------------------
+# ==== OPTIONAL: DEDICATED DOCKER USER ====
+# 1) Optionally create a dedicated user for Wekan, for example:
+#      sudo useradd -d /home/wekan -m -s /bin/bash wekan
+# 2) Add this user to the docker group, then logout+login or reboot:
+#      sudo usermod -aG docker wekan
+# 3) Then login as user wekan.
+# 4) Create this file /home/wekan/docker-compose.yml with your modifications.
+#----------------------------------------------------------------------------------
+# ==== RUN DOCKER AS SERVICE ====
+# 1a) Running Docker as service, on Systemd like Debian 9, Ubuntu 16.04, CentOS 7:
+#      sudo systemctl enable docker
+#      sudo systemctl start docker
+# 1b) Running Docker as service, on init.d like Debian 8, Ubuntu 14.04, CentOS 6:
+#      sudo update-rc.d docker defaults
+#      sudo service docker start
+# ----------------------------------------------------------------------------------
+# ==== USAGE OF THIS docker-compose.yml ====
+# 1) For seeing does Wekan work, try this and check with your web browser:
+#      docker-compose up
+# 2) Stop Wekan and start Wekan in background:
+#     docker-compose stop
+#     docker-compose up -d
+# 3) See running Docker containers:
+#     docker ps
+# 4) Stop Docker containers:
+#     docker-compose stop
+# ----------------------------------------------------------------------------------
+# ===== INSIDE DOCKER CONTAINERS, AND BACKUP/RESTORE ====
+# https://github.com/wekan/wekan/wiki/Backup
+# If really necessary, repair MongoDB: https://github.com/wekan/wekan-mongodb/issues/6#issuecomment-424004116
+# 1) Going inside containers:
+#    a) Wekan app, does not contain data
+#         docker exec -it wekan-app bash
+#    b) MongoDB, contains all data
+#         docker exec -it wekan-db bash
+# 2) Copying database to outside of container:
+#      docker exec -it wekan-db bash
+#      cd /data
+#      mongodump
+#      exit
+#      docker cp wekan-db:/data/dump .
+# 3) Restoring database
+#      # 1) Stop wekan
+#             docker stop wekan-app
+#      # 2) Go inside database container
+#             docker exec -it wekan-db bash
+#      # 3) and data directory
+#             cd /data
+#      # 4) Remove previous dump
+#             rm -rf dump
+#      # 5) Exit db container
+#             exit
+#      # 6) Copy dump to inside docker container
+#             docker cp dump wekan-db:/data/
+#      # 7) Go inside database container
+#             docker exec -it wekan-db bash
+#      # 8) and data directory
+#             cd /data
+#      # 9) Restore
+#             mongorestore --drop
+#      # 10) Exit db container
+#             exit
+#      # 11) Start wekan
+#             docker start wekan-app
+#-------------------------------------------------------------------------
+
+services:
+
+  wekandb:
+    #-------------------------------------------------------------------------------------
+    # ==== MONGODB FROM DOCKER HUB ====
+    image: mongo:6
+    #-------------------------------------------------------------------------------------
+    container_name: wekan-db
+    restart: always
+    # command: mongod --oplogSize 128
+    # Syslog: mongod --syslog --oplogSize 128 --quiet
+    # Disable MongoDB logs:
+    command: mongod --logpath /dev/null --oplogSize 128 --quiet
+    networks:
+      - wekan-tier
+    expose:
+      - 27017
+    volumes:
+      - /etc/localtime:/etc/localtime:ro
+      - wekan-db:/data/db
+      - wekan-db-dump:/dump
+      #- /etc/timezone:/etc/timezone:ro # Do not use https://github.com/wekan/wekan/issues/5123
+
+  wekan:
+    #-------------------------------------------------------------------------------------
+    # ==== WEKAN FROM GITHUB/QUAY/DOCKER HUB ====
+    # All of GitHub, Quay and Docker Hub have latest, but because
+    # latest tag changes when is newest release,
+    # when upgrading would be better to use version tag.
+    # a) Using specific version tag is better:
+    # image: ghcr.io/wekan/wekan:v6.89
+    # image: quay.io/wekan/wekan:v6.89
+    # image: wekanteam/wekan:v6.89
+    # b) GitHub Container registry.
+    #image: ghcr.io/wekan/wekan:main
+    image: ghcr.io/wekan/wekan:v7.09-arm64
+    # c) Quay:
+    #image: quay.io/wekan/wekan:latest
+    # d) Docker Hub:
+    #image: wekanteam/wekan:latest
+    #-------------------------------------------------------------------------------------
+    container_name: wekan-app
+    # On CentOS 7 there is seccomp issue with glibc 6,
+    # so CentOS 7 users shoud use these security_opt seccomp:unconfined
+    # settings to get WeKan working. See:
+    #   - https://github.com/wekan/wekan/issues/4585
+    #   - https://github.com/wekan/wekan/issues/4587
+    #security_opt:
+    #  - seccomp:unconfined
+    restart: always
+    networks:
+      - wekan-tier
+    #-------------------------------------------------------------------------------------
+    # ==== BUILD wekan-app DOCKER CONTAINER FROM SOURCE, if you uncomment these ====
+    # ==== and use commands: docker-compose up -d --build
+    #build:
+    #  context: .
+    #  dockerfile: Dockerfile
+    #-------------------------------------------------------------------------------------
+    ports:
+      # Docker outsideport:insideport. Do not add anything extra here.
+      # For example, if you want to have wekan on port 3001,
+      # use 3001:8080 . Do not add any extra address etc here, that way it does not work.
+      # remove port mapping if you use nginx reverse proxy, port 8080 is already exposed to wekan-tier network
+      - 80:8080
+    environment:
+      #-----------------------------------------------------------------
+      # ==== WRITEABLE PATH FOR FILE UPLOADS ====
+      - WRITABLE_PATH=/data
+      #-----------------------------------------------------------------
+      # ==== AWS S3 FOR FILES ====
+      # Any region. For example:
+      #   us-standard,us-west-1,us-west-2,
+      #   eu-west-1,eu-central-1,
+      #   ap-southeast-1,ap-northeast-1,sa-east-1
+      #
+      #- S3='{"s3":{"key": "xxx", "secret": "xxx", "bucket": "xxx", "region": "xxx"}}'
+      #-----------------------------------------------------------------
+      # ==== MONGO_URL ====
+      - MONGO_URL=mongodb://wekandb:27017/wekan
+      #---------------------------------------------------------------
+      # ==== ROOT_URL SETTING ====
+      # Change ROOT_URL to your real Wekan URL, for example:
+      # If you have Caddy/Nginx/Apache providing SSL
+      #  - https://example.com
+      #  - https://boards.example.com
+      # This can be problematic with avatars https://github.com/wekan/wekan/issues/1776
+      #  - https://example.com/wekan
+      # If without https, can be only wekan node, no need for Caddy/Nginx/Apache if you don't need them
+      #  - http://example.com
+      #  - http://boards.example.com
+      #  - http://192.168.1.100    <=== using at local LAN
+      - ROOT_URL=http://localhost  #   <=== using only at same laptop/desktop where Wekan is installed
+      #---------------------------------------------------------------
+      # ==== EMAIL SETTINGS ====
+      # Email settings are only at MAIL_URL and MAIL_FROM.
+      # Admin Panel has test button, but it's not used for settings.
+      #   see https://github.com/wekan/wekan/wiki/Troubleshooting-Mail
+      #   For SSL in email, change smtp:// to smtps://
+      # NOTE: Special characters need to be url-encoded in MAIL_URL.
+      #       You can encode those characters for example at: https://www.urlencoder.org
+      #- MAIL_URL=smtp://user:pass@mailserver.example.com:25/
+      - MAIL_URL=smtp://<mail_url>:25/?ignoreTLS=true&tls={rejectUnauthorized:false}
+      - MAIL_FROM=Wekan Notifications <noreply.wekan@mydomain.com>
+      # Currently MAIL_SERVICE is not in use.
+      #- MAIL_SERVICE=Outlook365
+      #- MAIL_SERVICE_USER=firstname.lastname@hotmail.com
+      #- MAIL_SERVICE_PASSWORD=SecretPassword
+      #---------------------------------------------------------------
+      # https://github.com/wekan/wekan/issues/3585#issuecomment-1021522132
+      # Add more Node heap, this is done by default at Dockerfile:
+      #   - NODE_OPTIONS="--max_old_space_size=4096"
+      # Add more stack, this is done at Dockerfile:
+      #   bash -c "ulimit -s 65500; exec node --stack-size=65500 main.js"
+      #---------------------------------------------------------------
+      # ==== OPTIONAL: MONGO OPLOG SETTINGS =====
+      # https://github.com/wekan/wekan-mongodb/issues/2#issuecomment-378343587
+      # We've fixed our CPU usage problem today with an environment
+      # change around Wekan. I wasn't aware during implementation
+      # that if you're using more than 1 instance of Wekan
+      # (or any MeteorJS based tool) you're supposed to set
+      # MONGO_OPLOG_URL as an environment variable.
+      # Without setting it, Meteor will perform a poll-and-diff
+      # update of it's dataset. With it, Meteor will update from
+      # the OPLOG. See here
+      #   https://blog.meteor.com/tuning-meteor-mongo-livedata-for-scalability-13fe9deb8908
+      # After setting
+      # MONGO_OPLOG_URL=mongodb://<username>:<password>@<mongoDbURL>/local?authSource=admin&replicaSet=rsWekan
+      # the CPU usage for all Wekan instances dropped to an average
+      # of less than 10% with only occasional spikes to high usage
+      # (I guess when someone is doing a lot of work)
+      # - MONGO_OPLOG_URL=mongodb://<username>:<password>@<mongoDbURL>/local?authSource=admin&replicaSet=rsWekan
+      #---------------------------------------------------------------
+      # ==== OPTIONAL: KADIRA PERFORMANCE MONITORING FOR METEOR ====
+      # https://github.com/edemaine/kadira-compose
+      # https://github.com/meteor/meteor-apm-agent
+      # https://blog.meteor.com/kadira-apm-is-now-open-source-490469ffc85f
+      #- APM_OPTIONS_ENDPOINT=http://<kadira-ip>:11011
+      #- APM_APP_ID=
+      #- APM_APP_SECRET=
+      #---------------------------------------------------------------
+      # ==== OPTIONAL: LOGS AND STATS ====
+      # https://github.com/wekan/wekan/wiki/Logs
+      #
+      # Daily export of Wekan changes as JSON to Logstash and ElasticSearch / Kibana (ELK)
+      # https://github.com/wekan/wekan-logstash
+      #
+      # Statistics Python script for Wekan Dashboard
+      # https://github.com/wekan/wekan-stats
+      #
+      # Console, file, and zulip logger on database changes https://github.com/wekan/wekan/pull/1010
+      # with fix to replace console.log by winston logger https://github.com/wekan/wekan/pull/1033
+      # but there could be bug https://github.com/wekan/wekan/issues/1094
+      #
+      # There is Feature Request: Logging date and time of all activity with summary reports,
+      # and requesting reason for changing card to other column https://github.com/wekan/wekan/issues/1598
+      #---------------------------------------------------------------
+      # ==== NUMBER OF SEARCH RESULTS PER PAGE BY DEFAULT ====
+      #- RESULTS_PER_PAGE=20
+      #---------------------------------------------------------------
+      # ==== AFTER OIDC LOGIN, ADD USERS AUTOMATICALLY TO THIS BOARD ID ====
+      # https://github.com/wekan/wekan/pull/5098
+      #- DEFAULT_BOARD_ID=abcd1234
+      #---------------------------------------------------------------
+      # ==== WEKAN API AND EXPORT BOARD ====
+      # Wekan Export Board works when WITH_API=true.
+      # https://github.com/wekan/wekan/wiki/REST-API
+      # https://github.com/wekan/wekan-gogs
+      # If you disable Wekan API with false, Export Board does not work.
+      - WITH_API=true
+      #---------------------------------------------------------------
+      # ==== PASSWORD BRUTE FORCE PROTECTION ====
+      #https://atmospherejs.com/lucasantoniassi/accounts-lockout
+      #Defaults below. Uncomment to change. wekan/server/accounts-lockout.js
+      #- ACCOUNTS_LOCKOUT_KNOWN_USERS_FAILURES_BEFORE=3
+      #- ACCOUNTS_LOCKOUT_KNOWN_USERS_PERIOD=60
+      #- ACCOUNTS_LOCKOUT_KNOWN_USERS_FAILURE_WINDOW=15
+      #- ACCOUNTS_LOCKOUT_UNKNOWN_USERS_FAILURES_BERORE=3
+      #- ACCOUNTS_LOCKOUT_UNKNOWN_USERS_LOCKOUT_PERIOD=60
+      #- ACCOUNTS_LOCKOUT_UNKNOWN_USERS_FAILURE_WINDOW=15
+      #---------------------------------------------------------------
+      # ==== ACCOUNT OPTIONS ====
+      # https://docs.meteor.com/api/accounts-multi.html#AccountsCommon-config
+      # Defaults below. Uncomment to change. wekan/server/accounts-common.js
+      # - ACCOUNTS_COMMON_LOGIN_EXPIRATION_IN_DAYS=90
+      #---------------------------------------------------------------
+      # ==== RICH TEXT EDITOR IN CARD COMMENTS ====
+      # https://github.com/wekan/wekan/pull/2560
+      - RICHER_CARD_COMMENT_EDITOR=false
+      #---------------------------------------------------------------
+      # ==== CARD OPENED, SEND WEBHOOK MESSAGE ====
+      # https://github.com/wekan/wekan/issues/2518
+      - CARD_OPENED_WEBHOOK_ENABLED=false
+      #---------------------------------------------------------------
+      # ==== Allow configuration to validate uploaded attachments ====
+      #-ATTACHMENTS_UPLOAD_EXTERNAL_PROGRAM=/usr/local/bin/avscan {file}
+      #-ATTACHMENTS_UPLOAD_MIME_TYPES=image/*,text/*
+      #-ATTACHMENTS_UPLOAD_MAX_SIZE=5000000
+      #---------------------------------------------------------------
+      # ==== Allow configuration to validate uploaded avatars ====
+      #-AVATARS_UPLOAD_EXTERNAL_PROGRAM=/usr/local/bin/avscan {file}
+      #-AVATARS_UPLOAD_MIME_TYPES=image/*
+      #-AVATARS_UPLOAD_MAX_SIZE=500000
+      #---------------------------------------------------------------
+      # ==== Allow to shrink attached/pasted image ====
+      # https://github.com/wekan/wekan/pull/2544
+      #- MAX_IMAGE_PIXEL=1024
+      #- IMAGE_COMPRESS_RATIO=80
+      #---------------------------------------------------------------
+      # ==== NOTIFICATION TRAY AFTER READ DAYS BEFORE REMOVE =====
+      # Number of days after a notification is read before we remove it.
+      # Default: 2
+      #- NOTIFICATION_TRAY_AFTER_READ_DAYS_BEFORE_REMOVE=2
+      #---------------------------------------------------------------
+      # ==== BIGEVENTS DUE ETC NOTIFICATIONS =====
+      # https://github.com/wekan/wekan/pull/2541
+      # Introduced a system env var BIGEVENTS_PATTERN default as "NONE",
+      # so any activityType matches the pattern, system will send out
+      # notifications to all board members no matter they are watching
+      # or tracking the board or not. Owner of the wekan server can
+      # disable the feature by setting this variable to "NONE" or
+      # change the pattern to any valid regex. i.e. '|' delimited
+      # activityType names.
+      # a) Example
+      #- BIGEVENTS_PATTERN=due
+      # b) All
+      #- BIGEVENTS_PATTERN=received|start|due|end
+      # c) Disabled
+      - BIGEVENTS_PATTERN=NONE
+      #---------------------------------------------------------------
+      # ==== EMAIL DUE DATE NOTIFICATION =====
+      # https://github.com/wekan/wekan/pull/2536
+      # System timelines will be showing any user modification for
+      # dueat startat endat receivedat, also notification to
+      # the watchers and if any card is due, about due or past due.
+      #
+      # Notify due days, default is None, 2 days before and on the event day
+      #- NOTIFY_DUE_DAYS_BEFORE_AND_AFTER=2,0
+      #
+      # Notify due at hour of day. Default every morning at 8am. Can be 0-23.
+      # If env variable has parsing error, use default. Notification sent to watchers.
+      #- NOTIFY_DUE_AT_HOUR_OF_DAY=8
+      #-----------------------------------------------------------------
+      # ==== EMAIL NOTIFICATION TIMEOUT, ms =====
+      # Default: 30000 ms = 30s
+      #- EMAIL_NOTIFICATION_TIMEOUT=30000
+      #-----------------------------------------------------------------
+      # ==== CORS =====
+      # CORS: Set Access-Control-Allow-Origin header.
+      #- CORS=*
+      # CORS_ALLOW_HEADERS: Set Access-Control-Allow-Headers header.  "Authorization,Content-Type" is required for cross-origin use of the API.
+      #- CORS_ALLOW_HEADERS=Authorization,Content-Type
+      # CORS_EXPOSE_HEADERS: Set Access-Control-Expose-Headers header.  This is not needed for typical CORS situations
+      #- CORS_EXPOSE_HEADERS=*
+      #-----------------------------------------------------------------
+      # ==== MATOMO INTEGRATION ====
+      # Optional: Integration with Matomo https://matomo.org that is installed to your server
+      # The address of the server where Matomo is hosted.
+      #- MATOMO_ADDRESS=https://example.com/matomo
+      # The value of the site ID given in Matomo server for Wekan
+      #- MATOMO_SITE_ID=1
+      # The option do not track which enables users to not be tracked by matomo
+      #- MATOMO_DO_NOT_TRACK=true
+      # The option that allows matomo to retrieve the username:
+      #- MATOMO_WITH_USERNAME=true
+      #-----------------------------------------------------------------
+      # ==== BROWSER POLICY AND TRUSTED IFRAME URL ====
+      # Enable browser policy and allow one trusted URL that can have iframe that has Wekan embedded inside.
+      # Setting this to false is not recommended, it also disables all other browser policy protections
+      # and allows all iframing etc. See wekan/server/policy.js
+      - BROWSER_POLICY_ENABLED=true
+      # When browser policy is enabled, HTML code at this Trusted URL can have iframe that embeds Wekan inside.
+      #- TRUSTED_URL=https://intra.example.com
+      #-----------------------------------------------------------------
+      # ==== METRICS ALLOWED IP ADDRESSES ====
+      # https://github.com/wekan/wekan/wiki/Metrics
+      #- METRICS_ALLOWED_IP_ADDRESSES=192.168.0.100,192.168.0.200
+      #-----------------------------------------------------------------
+      # ==== OUTGOING WEBHOOKS ====
+      # What to send to Outgoing Webhook, or leave out. If commented out the default values will be: cardId,listId,oldListId,boardId,comment,user,card,commentId,swimlaneId,customerField,customFieldValue
+      #- WEBHOOKS_ATTRIBUTES=cardId,listId,oldListId,boardId,comment,user,card,commentId
+      #-----------------------------------------------------------------
+      # ==== Debug OIDC OAuth2 etc ====
+      #- DEBUG=true
+      #---------------------------------------------
+      # ==== AUTOLOGIN WITH OIDC/OAUTH2 ====
+      # https://github.com/wekan/wekan/wiki/autologin
+      #- OIDC_REDIRECTION_ENABLED=true
+      #-----------------------------------------------------------------
+      # ==== OAUTH2 ORACLE on premise identity manager OIM ====
+      #- ORACLE_OIM_ENABLED=true
+      #-----------------------------------------------------------------
+      # ==== OAUTH2 AZURE ====
+      # https://github.com/wekan/wekan/wiki/Azure
+      # 1) Register the application with Azure. Make sure you capture
+      #    the application ID as well as generate a secret key.
+      # 2) Configure the environment variables. This differs slightly
+      #     by installation type, but make sure you have the following:
+      #- OAUTH2_ENABLED=true
+      # Optional OAuth2 CA Cert, see https://github.com/wekan/wekan/issues/3299
+      #- OAUTH2_CA_CERT=ABCD1234
+      # Use OAuth2 ADFS additional changes. Also needs OAUTH2_ENABLED=true setting.
+      #- OAUTH2_ADFS_ENABLED=false
+      # OAuth2 login style: popup or redirect.
+      #- OAUTH2_LOGIN_STYLE=redirect
+      # Application GUID captured during app registration:
+      #- OAUTH2_CLIENT_ID=xxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxx
+      # Secret key generated during app registration:
+      #- OAUTH2_SECRET=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
+      #- OAUTH2_SERVER_URL=https://login.microsoftonline.com/
+      #- OAUTH2_AUTH_ENDPOINT=/oauth2/v2.0/authorize
+      #- OAUTH2_USERINFO_ENDPOINT=https://graph.microsoft.com/oidc/userinfo
+      #- OAUTH2_TOKEN_ENDPOINT=/oauth2/v2.0/token
+      # The claim name you want to map to the unique ID field:
+      #- OAUTH2_ID_MAP=email
+      # The claim name you want to map to the username field:
+      #- OAUTH2_USERNAME_MAP=email
+      # The claim name you want to map to the full name field:
+      #- OAUTH2_FULLNAME_MAP=name
+      # The claim name you want to map to the email field:
+      #- OAUTH2_EMAIL_MAP=email
+      #-----------------------------------------------------------------
+      # ==== OAUTH2 Nextcloud ====
+      # 1) Register the application with Nextcloud: https://your.nextcloud/index.php/settings/admin/security
+      #    Make sure you capture the application ID as well as generate a secret key.
+      #    Use https://your.wekan/_oauth/oidc for the redirect URI.
+      # 2) Configure the environment variables. This differs slightly
+      #     by installation type, but make sure you have the following:
+      #- OAUTH2_ENABLED=true
+      # OAuth2 login style: popup or redirect.
+      #- OAUTH2_LOGIN_STYLE=redirect
+      # Application GUID captured during app registration:
+      #- OAUTH2_CLIENT_ID=xxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxx
+      # Secret key generated during app registration:
+      #- OAUTH2_SECRET=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
+      #- OAUTH2_SERVER_URL=https://your-nextcloud.tld
+      #- OAUTH2_AUTH_ENDPOINT=/index.php/apps/oauth2/authorize
+      #- OAUTH2_USERINFO_ENDPOINT=/ocs/v2.php/cloud/user?format=json
+      #- OAUTH2_TOKEN_ENDPOINT=/index.php/apps/oauth2/api/v1/token
+      # The claim name you want to map to the unique ID field:
+      #- OAUTH2_ID_MAP=id
+      # The claim name you want to map to the username field:
+      #- OAUTH2_USERNAME_MAP=id
+      # The claim name you want to map to the full name field:
+      #- OAUTH2_FULLNAME_MAP=display-name
+      # The claim name you want to map to the email field:
+      #- OAUTH2_EMAIL_MAP=email
+      #-----------------------------------------------------------------
+      # ==== OAUTH2 KEYCLOAK ====
+      # https://github.com/wekan/wekan/wiki/Keycloak  <== MAPPING INFO, REQUIRED
+      #- OAUTH2_ENABLED=true
+      # OAuth2 login style: popup or redirect.
+      #- OAUTH2_LOGIN_STYLE=redirect
+      #- OAUTH2_CLIENT_ID=<Keycloak create Client ID>
+      #- OAUTH2_SERVER_URL=<Keycloak server name>/auth
+      #- OAUTH2_AUTH_ENDPOINT=/realms/<keycloak realm>/protocol/openid-connect/auth
+      #- OAUTH2_USERINFO_ENDPOINT=/realms/<keycloak realm>/protocol/openid-connect/userinfo
+      #- OAUTH2_TOKEN_ENDPOINT=/realms/<keycloak realm>/protocol/openid-connect/token
+      #- OAUTH2_SECRET=<keycloak client secret>
+      #-----------------------------------------------------------------
+      # ==== OAUTH2 DOORKEEPER ====
+      # https://github.com/wekan/wekan/issues/1874
+      # https://github.com/wekan/wekan/wiki/OAuth2
+      # Enable the OAuth2 connection
+      #- OAUTH2_ENABLED=true
+      # OAuth2 docs: https://github.com/wekan/wekan/wiki/OAuth2
+      # OAuth2 login style: popup or redirect.
+      #- OAUTH2_LOGIN_STYLE=redirect
+      # OAuth2 Client ID.
+      #- OAUTH2_CLIENT_ID=abcde12345
+      # OAuth2 Secret.
+      #- OAUTH2_SECRET=54321abcde
+      # OAuth2 Server URL.
+      #- OAUTH2_SERVER_URL=https://chat.example.com
+      # OAuth2 Authorization Endpoint.
+      #- OAUTH2_AUTH_ENDPOINT=/oauth/authorize
+      # OAuth2 Userinfo Endpoint.
+      #- OAUTH2_USERINFO_ENDPOINT=/oauth/userinfo
+      # OAuth2 Token Endpoint.
+      #- OAUTH2_TOKEN_ENDPOINT=/oauth/token
+      # OAUTH2 ID Token Whitelist Fields.
+      #- OAUTH2_ID_TOKEN_WHITELIST_FIELDS=""
+      # OAUTH2 Request Permissions.
+      #- OAUTH2_REQUEST_PERMISSIONS=openid profile email
+      # OAuth2 ID Mapping
+      #- OAUTH2_ID_MAP=
+      # OAuth2 Username Mapping
+      #- OAUTH2_USERNAME_MAP=
+      # OAuth2 Fullname Mapping
+      #- OAUTH2_FULLNAME_MAP=
+      # OAuth2 Email Mapping
+      #- OAUTH2_EMAIL_MAP=
+      #-----------------------------------------------------------------
+      # ==== LDAP: UNCOMMENT ALL TO ENABLE LDAP ====
+      # https://github.com/wekan/wekan/wiki/LDAP
+      # For Snap settings see https://github.com/wekan/wekan-snap/wiki/Supported-settings-keys
+      # Most settings work both on Snap and Docker below.
+      # Note: Do not add single quotes '' to variables. Having spaces still works without quotes where required.
+      #
+      # The default authentication method used if a user does not exist to create and authenticate. Can be set as ldap.
+      # (this is set properly in the Admin Panel, changing this item does not remove Password login option)
+      #- DEFAULT_AUTHENTICATION_METHOD=ldap
+      #
+      # Enable or not the connection by the LDAP
+      #- LDAP_ENABLE=true
+      #
+      # The port of the LDAP server
+      #- LDAP_PORT=389
+      #
+      # The host server for the LDAP server
+      #- LDAP_HOST=localhost
+      #
+      #-----------------------------------------------------------------
+      # ==== LDAP AD Simple Auth ====
+      #
+      # Set to true, if you want to connect with Active Directory by Simple Authentication.
+      # When using AD Simple Auth, LDAP_BASEDN is not needed.
+      #
+      # Example:
+      #- LDAP_AD_SIMPLE_AUTH=true
+      #
+      # === LDAP User Authentication ===
+      #
+      # a) Option to login to the LDAP server with the user's own username and password, instead of
+      #    an administrator key. Default: false (use administrator key).
+      #
+      # b) When using AD Simple Auth, set to true, when login user is used for binding,
+      #    and LDAP_BASEDN is not needed.
+      #
+      # Example:
+      #- LDAP_USER_AUTHENTICATION=true
+      #
+      # Which field is used to find the user for the user authentication. Default: uid.
+      #- LDAP_USER_AUTHENTICATION_FIELD=uid
+      #
+      # === LDAP Default Domain ===
+      #
+      # a) In case AD SimpleAuth is configured, the default domain is appended to the given
+      #    loginname for creating the correct username for the bind request to AD.
+      #
+      # b) The default domain of the ldap it is used to create email if the field is not map
+      #     correctly with the LDAP_SYNC_USER_DATA_FIELDMAP
+      #
+      # Example :
+      #- LDAP_DEFAULT_DOMAIN=mydomain.com
+      #
+      #-----------------------------------------------------------------
+      # ==== LDAP BASEDN Auth ====
+      #
+      # The base DN for the LDAP Tree
+      #- LDAP_BASEDN=ou=user,dc=example,dc=org
+      #
+      #-----------------------------------------------------------------
+      # Fallback on the default authentication method
+      #- LDAP_LOGIN_FALLBACK=false
+      #
+      # Reconnect to the server if the connection is lost
+      #- LDAP_RECONNECT=true
+      #
+      # Overall timeout, in milliseconds
+      #- LDAP_TIMEOUT=10000
+      #
+      # Specifies the timeout for idle LDAP connections in milliseconds
+      #- LDAP_IDLE_TIMEOUT=10000
+      #
+      # Connection timeout, in milliseconds
+      #- LDAP_CONNECT_TIMEOUT=10000
+      #
+      # If the LDAP needs a user account to search
+      #- LDAP_AUTHENTIFICATION=true
+      #
+      # The search user DN - You need quotes when you have spaces in parameters
+      # 2 examples:
+      #- LDAP_AUTHENTIFICATION_USERDN=CN=ldap admin,CN=users,DC=domainmatter,DC=lan
+      #- LDAP_AUTHENTIFICATION_USERDN=CN=wekan_adm,OU=serviceaccounts,OU=admin,OU=prod,DC=mydomain,DC=com
+      #
+      # The password for the search user
+      #- LDAP_AUTHENTIFICATION_PASSWORD=pwd
+      #
+      # Enable logs for the module
+      #- LDAP_LOG_ENABLED=true
+      #
+      # If the sync of the users should be done in the background
+      #- LDAP_BACKGROUND_SYNC=false
+      #
+      # At which interval does the background task sync.
+      # The format must be as specified in:
+      # https://bunkat.github.io/later/parsers.html#text
+      #- LDAP_BACKGROUND_SYNC_INTERVAL=every 1 hour
+      #
+      #- LDAP_BACKGROUND_SYNC_KEEP_EXISTANT_USERS_UPDATED=false
+      #
+      #- LDAP_BACKGROUND_SYNC_IMPORT_NEW_USERS=false
+      #
+      # If using LDAPS: LDAP_ENCRYPTION=ssl
+      #- LDAP_ENCRYPTION=false
+      #
+      # The certification for the LDAPS server. Certificate needs to be included in this docker-compose.yml file.
+      #- LDAP_CA_CERT=-----BEGIN CERTIFICATE-----MIIE+G2FIdAgIC...-----END CERTIFICATE-----
+      #
+      # Reject Unauthorized Certificate
+      #- LDAP_REJECT_UNAUTHORIZED=false
+      #
+      # Optional extra LDAP filters. Don't forget the outmost enclosing parentheses if needed
+      #- LDAP_USER_SEARCH_FILTER=
+      #
+      # base (search only in the provided DN), one (search only in the provided DN and one level deep), or sub (search the whole subtree)
+      #- LDAP_USER_SEARCH_SCOPE=one
+      #
+      # Which field is used to find the user, like uid / sAMAccountName
+      #- LDAP_USER_SEARCH_FIELD=sAMAccountName
+      #
+      # Used for pagination (0=unlimited)
+      #- LDAP_SEARCH_PAGE_SIZE=0
+      #
+      # The limit number of entries (0=unlimited)
+      #- LDAP_SEARCH_SIZE_LIMIT=0
+      #
+      # Enable group filtering. Note the authenticated ldap user must be able to query all relevant group data with own login data from ldap.
+      #- LDAP_GROUP_FILTER_ENABLE=false
+      #
+      # The object class for filtering. Example: group
+      #- LDAP_GROUP_FILTER_OBJECTCLASS=
+      #
+      # The attribute of a group identifying it. Example: cn
+      #- LDAP_GROUP_FILTER_GROUP_ID_ATTRIBUTE=
+      #
+      # The attribute inside a group object listing its members. Example: member
+      #- LDAP_GROUP_FILTER_GROUP_MEMBER_ATTRIBUTE=
+      #
+      # The format of the value of LDAP_GROUP_FILTER_GROUP_MEMBER_ATTRIBUTE. Example: 'dn' if the users dn is saved as value into the attribute.
+      #- LDAP_GROUP_FILTER_GROUP_MEMBER_FORMAT=
+      #
+      # The group name (id) that matches all users.
+      #- LDAP_GROUP_FILTER_GROUP_NAME=
+      #
+      # LDAP_UNIQUE_IDENTIFIER_FIELD : This field is sometimes class GUID (Globally Unique Identifier). Example: guid
+      #- LDAP_UNIQUE_IDENTIFIER_FIELD=
+      #
+      # LDAP_UTF8_NAMES_SLUGIFY : Convert the username to utf8
+      #- LDAP_UTF8_NAMES_SLUGIFY=true
+      #
+      # LDAP_USERNAME_FIELD : Which field contains the ldap username. username / sAMAccountName
+      #- LDAP_USERNAME_FIELD=sAMAccountName
+      #
+      # LDAP_FULLNAME_FIELD : Which field contains the ldap fullname. fullname / sAMAccountName
+      #- LDAP_FULLNAME_FIELD=fullname
+      #
+      #- LDAP_MERGE_EXISTING_USERS=false
+      #
+      # Allow existing account matching by e-mail address when username does not match
+      #- LDAP_EMAIL_MATCH_ENABLE=true
+      #
+      # LDAP_EMAIL_MATCH_REQUIRE : require existing account matching by e-mail address when username does match
+      #- LDAP_EMAIL_MATCH_REQUIRE=true
+      #
+      # LDAP_EMAIL_MATCH_VERIFIED : require existing account email address to be verified for matching
+      #- LDAP_EMAIL_MATCH_VERIFIED=true
+      #
+      # LDAP_EMAIL_FIELD : which field contains the LDAP e-mail address
+      #- LDAP_EMAIL_FIELD=mail
+      #-----------------------------------------------------------------
+      #- LDAP_SYNC_USER_DATA=false
+      #
+      #- LDAP_SYNC_USER_DATA_FIELDMAP={"cn":"name", "mail":"email"}
+      #
+      #- LDAP_SYNC_GROUP_ROLES=
+      #
+      # The default domain of the ldap it is used to create email if the field is not map correctly
+      # with the LDAP_SYNC_USER_DATA_FIELDMAP is defined in setting LDAP_DEFAULT_DOMAIN above.
+      #
+      # Enable/Disable syncing of admin status based on ldap groups:
+      #- LDAP_SYNC_ADMIN_STATUS=true
+      #
+      # Comma separated list of admin group names to sync.
+      #- LDAP_SYNC_ADMIN_GROUPS=group1,group2
+      #---------------------------------------------------------------------
+      # Login to LDAP automatically with HTTP header.
+      # In below example for siteminder, at right side of = is header name.
+      #- HEADER_LOGIN_ID=HEADERUID
+      #- HEADER_LOGIN_FIRSTNAME=HEADERFIRSTNAME
+      #- HEADER_LOGIN_LASTNAME=HEADERLASTNAME
+      #- HEADER_LOGIN_EMAIL=HEADEREMAILADDRESS
+      #---------------------------------------------------------------------
+      # ==== LOGOUT TIMER, probably does not work yet ====
+      # LOGOUT_WITH_TIMER : Enables or not the option logout with timer
+      # example : LOGOUT_WITH_TIMER=true
+      #- LOGOUT_WITH_TIMER=
+      #
+      # LOGOUT_IN : The number of days
+      # example : LOGOUT_IN=1
+      #- LOGOUT_IN=
+      #
+      # LOGOUT_ON_HOURS : The number of hours
+      # example : LOGOUT_ON_HOURS=9
+      #- LOGOUT_ON_HOURS=
+      #
+      # LOGOUT_ON_MINUTES : The number of minutes
+      # example : LOGOUT_ON_MINUTES=55
+      #- LOGOUT_ON_MINUTES=
+      #-------------------------------------------------------------------
+      # Hide password login form
+      # - PASSWORD_LOGIN_ENABLED=true
+      #-------------------------------------------------------------------
+      #- CAS_ENABLED=true
+      #- CAS_BASE_URL=https://cas.example.com/cas
+      #- CAS_LOGIN_URL=https://cas.example.com/login
+      #- CAS_VALIDATE_URL=https://cas.example.com/cas/p3/serviceValidate
+      #---------------------------------------------------------------------
+      #- SAML_ENABLED=true
+      #- SAML_PROVIDER=
+      #- SAML_ENTRYPOINT=
+      #- SAML_ISSUER=
+      #- SAML_CERT=
+      #- SAML_IDPSLO_REDIRECTURL=
+      #- SAML_PRIVATE_KEYFILE=
+      #- SAML_PUBLIC_CERTFILE=
+      #- SAML_IDENTIFIER_FORMAT=
+      #- SAML_LOCAL_PROFILE_MATCH_ATTRIBUTE=
+      #- SAML_ATTRIBUTES=
+      #---------------------------------------------------------------------
+      # Wait spinner to use
+      # - WAIT_SPINNER=Bounce
+      #---------------------------------------------------------------------
+    depends_on:
+      - wekandb
+    volumes:
+      - /etc/localtime:/etc/localtime:ro
+      - wekan-files:/data:rw
+
+#---------------------------------------------------------------------------------
+# ==== OPTIONAL: SHARE DATABASE TO OFFICE LAN AND REMOTE VPN ====
+#  When using Wekan both at office LAN and remote VPN:
+#    1) Have above Wekan docker container config with LAN IP address
+#    2) Copy all of above wekan container config below, look above of this part above and all config below it,
+#       before above depends_on: part:
+#
+#         wekan:
+#            #-------------------------------------------------------------------------------------
+#            # ==== MONGODB AND METEOR VERSION ====
+#            # a) For Wekan Meteor 1.8.x version at meteor-1.8 branch, .....
+#
+#
+#       and change name to different name like wekan2 or wekanvpn, and change ROOT_URL to server VPN IP
+#       address.
+#    3) This way both Wekan containers can use same MongoDB database
+#       and see the same Wekan boards.
+#    4) You could also add 3rd Wekan container for 3rd network etc.
+# EXAMPLE:
+#  wekan2:
+#    ....COPY CONFIG FROM ABOVE TO HERE...
+#    environment:
+#      - ROOT_URL='http://10.10.10.10'
+#      ...COPY CONFIG FROM ABOVE TO HERE...
+#---------------------------------------------------------------------------------
+
+# OPTIONAL NGINX CONFIG FOR REVERSE PROXY
+#  nginx:
+#    image: nginx
+#    container_name: nginx
+#    restart: always
+#    networks:
+#      - wekan-tier
+#    depends_on:
+#      - wekan
+#    ports:
+#      - 80:80
+#      - 443:443
+#    volumes:
+#      - ./nginx/ssl:/etc/nginx/ssl/:ro
+#      - ./nginx/nginx.conf:/etc/nginx/nginx.conf:ro
+## Alternative volume config:
+##   volumes:
+##     - ./nginx/nginx.conf:/etc/nginx/conf.d/default.conf:ro
+##     - ./nginx/ssl/ssl.conf:/etc/nginx/conf.d/ssl/ssl.conf:ro
+##     - ./nginx/ssl/testvm-ehu.crt:/etc/nginx/conf.d/ssl/certs/mycert.crt:ro
+##     - ./nginx/ssl/testvm-ehu.key:/etc/nginx/conf.d/ssl/certs/mykey.key:ro
+##     - ./nginx/ssl/pphrase:/etc/nginx/conf.d/ssl/pphrase:ro
+
+volumes:
+  wekan-files:
+    driver: local
+  wekan-db:
+    driver: local
+  wekan-db-dump:
+    driver: local
+
+networks:
+  wekan-tier:
+    driver: bridge
@@ -0,0 +1,41 @@
+Wekan provides a python script to ease the call of the REST API from command line interface.
+
+# Context
+
+- [API Login to get Bearer token](REST-API#example-call---as-form-data)
+- [API docs and examples for various programming languages](https://wekan.github.io/api/), there is Boards / Export for exporting board with API
+- In the right menu, scroll down REST API Docs etc links =====>
+- Wekan-Gogs integration with Node.js https://github.com/wekan/wekan-gogs
+
+# Install
+
+You need python3.
+
+Windows
+```
+choco install python3
+# REBOOT
+pip3 install pip --upgrade
+pip3 install json
+python3 wekan.py
+```
+Debian/Ubuntu
+```
+sudo apt-get -y install python3 python3-pip python3-simplejson
+sudo pip3 install pip --upgrade
+chmod +x wekan.py
+./wekan.py
+```
+
+# Usage
+
+Copy the api.py script to you machine. [Newest Wekan Python CLI api.py here](https://raw.githubusercontent.com/wekan/wekan/master/api.py).
+
+Then, in this script, look for and change:
+- wekanurl: https://boards.example.com => Your Wekan URL
+- username (could be username or username@example.com)
+- Only works with password login admin user. Does not work with LDAP, OAuth2 etc.
+
+Keep in mind your Wekan credentials are potentially accessible in this file.
+
+Then call it without any argument to see if everything is all right. You should just get usage examples.
@@ -0,0 +1,56 @@
+# Disclaimer
+
+This page tries to be as up to date as possible. If you see something wrong here, feel free to update the page and help other people like you, that greatly depends on our APIs. If you don't feel comfortable doing this kind of changes, please contact us by creating an [issue](https://github.com/wekan/wekan/issues/new).
+
+## Information about boards of user
+```
+curl -H "Authorization: Bearer a6DM_gOPRwBdynfXaGBaiiEwTiAuigR_Fj_81QmNpnf" \
+      http://localhost:3000/api/users/XQMZgynx9M79qTtQc/boards
+```
+
+## Add/Remove Board Member and Change Role
+
+[Add/Remove Board Member and Change Role admin/normal/nocomments/commentonly](REST-API-Role).
+
+## The admin takes the ownership of ALL boards of the user (archived and not archived) where the user is admin on.
+
+| URL | Requires Admin Auth | HTTP Method |
+| :--- | :--- | :--- |
+| `/api/users/:id` | `yes` | `PUT` |
+
+```shell
+curl -H "Authorization: Bearer t7iYB86mXoLfP_XsMegxF41oKT7iiA9lDYiKVtXcctl" \
+     -H "Content-type:application/json" \
+     -X PUT \
+     http://localhost:3000/api/users/ztKvBTzCqmyJ77on8 \
+     -d '{ "action": "takeOwnership" }'
+```
+
+## Create board
+
+Required:
+- "title":"Board title here"
+- "owner":"ABCDE12345"   <= User ID in Wekan. Not username or email.
+
+Optional, and defaults:
+- "isAdmin":"true"
+- "isActive":"true"
+- "isNoComments":"false"
+- "isCommentOnly":"false"
+- "permission":"private"   <== Set to "public" if you want public Wekan board
+- "color":"belize"        <== Board color: belize, nephritis, pomegranate, pumpkin, wisteria, midnight.
+
+<img src="https://wekan.github.io/board-colors.png" width="40%" alt="Wekan logo" />
+
+Example:
+```
+curl  -H "Authorization: Bearer t7iYB86mXoLfP_XsMegxF41oKT7iiA9lDYiKVtXcctl" \
+      -H "Content-type:application/json" \
+      -X POST \
+      http://localhost:3000/api/boards \
+      -d '{"title":"Board title here","owner":"ABCDE12345","permission":"private","color":"nephritis"}'
+```
+
+## In Wekan code
+
+If you believe that code is the best documentation, be our guest: [models/cards.js](https://github.com/wekan/wekan/blob/main/models/boards.js "Board API code")
@@ -0,0 +1,94 @@
+# Disclaimer
+
+This page tries to be as up to date as possible. If you see something wrong here, feel free to update the page and help other people like you, that greatly depends on our APIs. If you don't feel comfortable doing this kind of changes, please contact us by creating an [issue](https://github.com/wekan/wekan/issues/new).
+
+# Retrieve cards by swimlane id
+
+| API URL / Code Link | Requires Admin Auth | HTTP Method |
+| :--- | :--- | :--- |
+| [/api/boards/:boardId/swimlanes/:swimlaneId/cards](https://github.com/wekan/wekan/blob/c115046a7c86b30ab5deb8762d3ef7a5ea3f4f90/models/cards.js#L487) | `yes` | `GET` |
+
+```shell
+curl -H "Authorization: Bearer t7iYB86mXoLfP_XsMegxF41oKT7iiA9lDYiKVtXcctl" \
+     -X GET \
+     http://localhost:3000/api/boards/YRgy7Ku6uLFv2pYwZ/swimlanes/PgTuf6sFJsaxto5dC/cards
+```
+## Result example
+
+```shell
+{
+    "_id": "AzEeHS7KAGeYZCcak",
+    "title": "Create Auth Code",
+    "description": "Create Auth Code for application.",
+    "listId": "RPRtDTQMKpShpgqoj"
+  },
+  {
+...
+```
+
+# Add Card to List-Board-Swimlane
+
+| API URL / Code Link | Requires Admin Auth | HTTP Method |
+| :--- | :--- | :--- |
+| [/api/boards/:boardId/lists/:listId/cards](https://github.com/wekan/wekan/blob/c115046a7c86b30ab5deb8762d3ef7a5ea3f4f90/models/cards.js#L487) | `yes` | `POST` |
+
+```shell
+curl -H "Authorization: Bearer t7iYB86mXoLfP_XsMegxF41oKT7iiA9lDYiKVtXcctl" \
+     -H "Content-type:application/json" \
+     -X POST \
+     http://localhost:3000/api/boards/YRgy7Ku6uLFv2pYwZ/lists/PgTuf6sFJsaxto5dC/cards \
+     -d '{ "title": "Card title text", "description": "Card description text", "authorId": "The appropriate existing userId", "swimlaneId": "The destination swimlaneId" }'
+```
+## Result example
+The new card's ID is returned in the format:
+```json
+{
+    "_id": "W9m9YxQKT6zZrKzRW"
+}
+```
+
+# Update a card
+You can change (any of) the card's title, list, and description.
+
+| API URL / Code Link | Requires Admin Auth | HTTP Method |
+| :--- | :--- | :--- |
+| [/api/boards/:boardId/lists/:fromListId/cards/:cardId](https://github.com/wekan/wekan/blob/c115046a7c86b30ab5deb8762d3ef7a5ea3f4f90/models/cards.js#L520) | `yes` | `PUT` |
+
+```shell
+curl -H "Authorization: Bearer t7iYB86mXoLfP_XsMegxF41oKT7iiA9lDYiKVtXcctl" \
+     -H "Content-type:application/json" \
+     -X PUT \
+     http://localhost:3000/api/boards/YRgy7Ku6uLFv2pYwZ/lists/PgTuf6sFJsaxto5dC/cards/ssrNX9CvXvPxuC5DE \
+     -d '{ "title": "New title text", "listId": "New destination listId", "description": "New description text" }'
+```
+## Result example
+The card's ID is returned in the format:
+```json
+{
+    "_id": "W9m9YxQKT6zZrKzRW"
+}
+```
+# Delete a card
+
+| API URL / Code Link | Requires Admin Auth | HTTP Method |
+| :--- | :--- | :--- |
+| [/api/boards/:boardId/lists/:listId/cards/:cardId](https://github.com/wekan/wekan/blob/c115046a7c86b30ab5deb8762d3ef7a5ea3f4f90/models/cards.js#L554) | `yes` | `DELETE` |
+
+```shell
+curl -H "Authorization: Bearer t7iYB86mXoLfP_XsMegxF41oKT7iiA9lDYiKVtXcctl" \
+     -H "Content-type:application/json" \
+     -X DELETE \
+     http://localhost:3000/api/boards/YRgy7Ku6uLFv2pYwZ/lists/PgTuf6sFJsaxto5dC/cards/ssrNX9CvXvPxuC5DE \
+     -d '{ "authorId": "the appropriate existing userId"}'
+```
+## Result example
+The card's ID is returned in the format:
+```json
+{
+    "_id": "W9m9YxQKT6zZrKzRW"
+}
+```
+
+# In Wekan code
+
+If you believe that code is the best documentation, be our guest: [models/cards.js](https://github.com/wekan/wekan/blob/main/models/cards.js "Card API code")
@@ -0,0 +1,148 @@
+## In Wekan code
+
+## 1) Checklists
+
+wekan/models/checklists.js at bottom:
+
+```
+  JsonRoutes.add('GET', '/api/boards/:boardId/cards/:cardId/checklists', function (req, res) {
+    Authentication.checkUserId( req.userId);
+    const paramCardId = req.params.cardId;
+    const checklists = Checklists.find({ cardId: paramCardId }).map(function (doc) {
+      return {
+        _id: doc._id,
+        title: doc.title,
+      };
+    });
+    if (checklists) {
+      JsonRoutes.sendResult(res, {
+        code: 200,
+        data: checklists,
+      });
+    } else {
+      JsonRoutes.sendResult(res, {
+        code: 500,
+      });
+    }
+  });
+
+  JsonRoutes.add('GET', '/api/boards/:boardId/cards/:cardId/checklists/:checklistId', function (req, res) {
+    Authentication.checkUserId( req.userId);
+    const paramChecklistId = req.params.checklistId;
+    const paramCardId = req.params.cardId;
+    const checklist = Checklists.findOne({ _id: paramChecklistId, cardId: paramCardId });
+    if (checklist) {
+      checklist.items = ChecklistItems.find({checklistId: checklist._id}).map(function (doc) {
+        return {
+          _id: doc._id,
+          title: doc.title,
+          isFinished: doc.isFinished,
+        };
+      });
+      JsonRoutes.sendResult(res, {
+        code: 200,
+        data: checklist,
+      });
+    } else {
+      JsonRoutes.sendResult(res, {
+        code: 500,
+      });
+    }
+  });
+
+  JsonRoutes.add('POST', '/api/boards/:boardId/cards/:cardId/checklists', function (req, res) {
+    Authentication.checkUserId( req.userId);
+
+    const paramCardId = req.params.cardId;
+    const id = Checklists.insert({
+      title: req.body.title,
+      cardId: paramCardId,
+      sort: 0,
+    });
+    if (id) {
+      req.body.items.forEach(function (item, idx) {
+        ChecklistItems.insert({
+          cardId: paramCardId,
+          checklistId: id,
+          title: item.title,
+          sort: idx,
+        });
+      });
+      JsonRoutes.sendResult(res, {
+        code: 200,
+        data: {
+          _id: id,
+        },
+      });
+    } else {
+      JsonRoutes.sendResult(res, {
+        code: 400,
+      });
+    }
+  });
+
+  JsonRoutes.add('DELETE', '/api/boards/:boardId/cards/:cardId/checklists/:checklistId', function (req, res) {
+    Authentication.checkUserId( req.userId);
+    const paramChecklistId = req.params.checklistId;
+    Checklists.remove({ _id: paramChecklistId });
+    JsonRoutes.sendResult(res, {
+      code: 200,
+      data: {
+        _id: paramChecklistId,
+      },
+    });
+  });
+```
+
+### 2) Checklist Items
+
+wekan/models/checklistItems.js at bottom:
+
+```
+JsonRoutes.add('GET', '/api/boards/:boardId/cards/:cardId/checklists/:checklistId/items/:itemId', function (req, res) {
+    Authentication.checkUserId( req.userId);
+    const paramItemId = req.params.itemId;
+    const checklistItem = ChecklistItems.findOne({ _id: paramItemId });
+    if (checklistItem) {
+      JsonRoutes.sendResult(res, {
+        code: 200,
+        data: checklistItem,
+      });
+    } else {
+      JsonRoutes.sendResult(res, {
+        code: 500,
+      });
+    }
+  });
+
+  JsonRoutes.add('PUT', '/api/boards/:boardId/cards/:cardId/checklists/:checklistId/items/:itemId', function (req, res) {
+    Authentication.checkUserId( req.userId);
+
+    const paramItemId = req.params.itemId;
+
+    if (req.body.hasOwnProperty('isFinished')) {
+      ChecklistItems.direct.update({_id: paramItemId}, {$set: {isFinished: req.body.isFinished}});
+    }
+    if (req.body.hasOwnProperty('title')) {
+      ChecklistItems.direct.update({_id: paramItemId}, {$set: {title: req.body.title}});
+    }
+
+    JsonRoutes.sendResult(res, {
+      code: 200,
+      data: {
+        _id: paramItemId,
+      },
+    });
+  });
+
+  JsonRoutes.add('DELETE', '/api/boards/:boardId/cards/:cardId/checklists/:checklistId/items/:itemId', function (req, res) {
+    Authentication.checkUserId( req.userId);
+    const paramItemId = req.params.itemId;
+    ChecklistItems.direct.remove({ _id: paramItemId });
+    JsonRoutes.sendResult(res, {
+      code: 200,
+      data: {
+        _id: paramItemId,
+      },
+    });
+```
@@ -0,0 +1,33 @@
+## Using Meteor with REST API
+
+### 1) Adding API
+
+```
+meteor add simple:json-routes
+```
+
+https://atmospherejs.com/simple/json-routes
+
+https://github.com/wekan/wekan/blob/main/.meteor/packages#L139
+
+### 2) API code
+
+At models directory:
+
+https://github.com/wekan/wekan/blob/main/models/users.js#L2018
+
+### 3) Login to API as JSON
+
+https://github.com/wekan/wekan/wiki/REST-API#example-call---as-json
+
+Also see at wiki right menu about REST API.
+
+### 4) Use Python3 CLI to login to API and do REST API action
+
+https://github.com/wekan/wekan/blob/main/api.py
+
+### 4) API Docs
+
+https://wekan.github.io/api/
+
+Building API Docs: https://github.com/wekan/wekan/blob/main/releases/rebuild-docs.sh
@@ -0,0 +1,78 @@
+1) Login as Admin user as Form Data to get Bearer token
+https://github.com/wekan/wekan/wiki/REST-API#example-call---as-form-data
+
+2) There needs to be Custom Field added to board
+https://wekan.github.io/api/v4.42/#wekan-rest-api-customfields
+
+3) Custom Field at board and card will have same `_id`
+https://wekan.github.io/api/v4.42/#put_board_list_card
+
+4) When writing Custom Field value to card, like text field, content type needs to be "application/json" and the string needs to be an array:
+```
+-d '{ "customFields" : [ { "_id" : "oZHkpcaxDHnbkbqGo", "value" : "foobar" } ] }'
+```
+5) For other types of Custom Fields, you can look at Custom Field structure from MongoDB database with [nosqlbooster](https://nosqlbooster.com/downloads) that can also login through ssh to server Wekan snap MongoDB port 27019
+
+
+## In Wekan code (old)
+
+wekan/models/customFields.js , at bottom
+
+```
+//CUSTOM FIELD REST API
+if (Meteor.isServer) {
+  JsonRoutes.add('GET', '/api/boards/:boardId/custom-fields', function (req, res) {
+    Authentication.checkUserId( req.userId);
+    const paramBoardId = req.params.boardId;
+    JsonRoutes.sendResult(res, {
+      code: 200,
+      data: CustomFields.find({ boardId: paramBoardId }),
+    });
+  });
+
+  JsonRoutes.add('GET', '/api/boards/:boardId/custom-fields/:customFieldId', function (req, res) {
+    Authentication.checkUserId( req.userId);
+    const paramBoardId = req.params.boardId;
+    const paramCustomFieldId = req.params.customFieldId;
+    JsonRoutes.sendResult(res, {
+      code: 200,
+      data: CustomFields.findOne({ _id: paramCustomFieldId, boardId: paramBoardId }),
+    });
+  });
+
+  JsonRoutes.add('POST', '/api/boards/:boardId/custom-fields', function (req, res) {
+    Authentication.checkUserId( req.userId);
+    const paramBoardId = req.params.boardId;
+    const id = CustomFields.direct.insert({
+      name: req.body.name,
+      type: req.body.type,
+      settings: req.body.settings,
+      showOnCard: req.body.showOnCard,
+      boardId: paramBoardId,
+    });
+
+    const customField = CustomFields.findOne({_id: id, boardId: paramBoardId });
+    customFieldCreation(req.body.authorId, customField);
+
+    JsonRoutes.sendResult(res, {
+      code: 200,
+      data: {
+        _id: id,
+      },
+    });
+  });
+
+  JsonRoutes.add('DELETE', '/api/boards/:boardId/custom-fields/:customFieldId', function (req, res) {
+    Authentication.checkUserId( req.userId);
+    const paramBoardId = req.params.boardId;
+    const id = req.params.customFieldId;
+    CustomFields.remove({ _id: id, boardId: paramBoardId });
+    JsonRoutes.sendResult(res, {
+      code: 200,
+      data: {
+        _id: id,
+      },
+    });
+  });
+}
+```
@@ -0,0 +1,191 @@
+## In Wekan code
+
+wekan/models/integrations.js at bottom
+
+```
+  // Get all integrations in board
+  JsonRoutes.add('GET', '/api/boards/:boardId/integrations', function(req, res) {
+    try {
+      const paramBoardId = req.params.boardId;
+      Authentication.checkBoardAccess(req.userId, paramBoardId);
+
+      const data = Integrations.find({ boardId: paramBoardId }, { fields: { token: 0 } }).map(function(doc) {
+        return doc;
+      });
+
+      JsonRoutes.sendResult(res, {code: 200, data});
+    }
+    catch (error) {
+      JsonRoutes.sendResult(res, {
+        code: 200,
+        data: error,
+      });
+    }
+  });
+
+  // Get a single integration in board
+  JsonRoutes.add('GET', '/api/boards/:boardId/integrations/:intId', function(req, res) {
+    try {
+      const paramBoardId = req.params.boardId;
+      const paramIntId = req.params.intId;
+      Authentication.checkBoardAccess(req.userId, paramBoardId);
+
+      JsonRoutes.sendResult(res, {
+        code: 200,
+        data: Integrations.findOne({ _id: paramIntId, boardId: paramBoardId }, { fields: { token: 0 } }),
+      });
+    }
+    catch (error) {
+      JsonRoutes.sendResult(res, {
+        code: 200,
+        data: error,
+      });
+    }
+  });
+
+  // Create a new integration
+  JsonRoutes.add('POST', '/api/boards/:boardId/integrations', function(req, res) {
+    try {
+      const paramBoardId = req.params.boardId;
+      Authentication.checkBoardAccess(req.userId, paramBoardId);
+
+      const id = Integrations.insert({
+        userId: req.userId,
+        boardId: paramBoardId,
+        url: req.body.url,
+      });
+
+      JsonRoutes.sendResult(res, {
+        code: 200,
+        data: {
+          _id: id,
+        },
+      });
+    }
+    catch (error) {
+      JsonRoutes.sendResult(res, {
+        code: 200,
+        data: error,
+      });
+    }
+  });
+
+  // Edit integration data
+  JsonRoutes.add('PUT', '/api/boards/:boardId/integrations/:intId', function (req, res) {
+    try {
+      const paramBoardId = req.params.boardId;
+      const paramIntId = req.params.intId;
+      Authentication.checkBoardAccess(req.userId, paramBoardId);
+
+      if (req.body.hasOwnProperty('enabled')) {
+        const newEnabled = req.body.enabled;
+        Integrations.direct.update({_id: paramIntId, boardId: paramBoardId},
+          {$set: {enabled: newEnabled}});
+      }
+      if (req.body.hasOwnProperty('title')) {
+        const newTitle = req.body.title;
+        Integrations.direct.update({_id: paramIntId, boardId: paramBoardId},
+          {$set: {title: newTitle}});
+      }
+      if (req.body.hasOwnProperty('url')) {
+        const newUrl = req.body.url;
+        Integrations.direct.update({_id: paramIntId, boardId: paramBoardId},
+          {$set: {url: newUrl}});
+      }
+      if (req.body.hasOwnProperty('token')) {
+        const newToken = req.body.token;
+        Integrations.direct.update({_id: paramIntId, boardId: paramBoardId},
+          {$set: {token: newToken}});
+      }
+      if (req.body.hasOwnProperty('activities')) {
+        const newActivities = req.body.activities;
+        Integrations.direct.update({_id: paramIntId, boardId: paramBoardId},
+          {$set: {activities: newActivities}});
+      }
+
+      JsonRoutes.sendResult(res, {
+        code: 200,
+        data: {
+          _id: paramIntId,
+        },
+      });
+    }
+    catch (error) {
+      JsonRoutes.sendResult(res, {
+        code: 200,
+        data: error,
+      });
+    }
+  });
+
+  // Delete subscribed activities
+  JsonRoutes.add('DELETE', '/api/boards/:boardId/integrations/:intId/activities', function (req, res) {
+    try {
+      const paramBoardId = req.params.boardId;
+      const paramIntId = req.params.intId;
+      const newActivities = req.body.activities;
+      Authentication.checkBoardAccess(req.userId, paramBoardId);
+
+      Integrations.direct.update({_id: paramIntId, boardId: paramBoardId},
+        {$pullAll: {activities: newActivities}});
+
+      JsonRoutes.sendResult(res, {
+        code: 200,
+        data: Integrations.findOne({_id: paramIntId, boardId: paramBoardId}, { fields: {_id: 1, activities: 1}}),
+      });
+    }
+    catch (error) {
+      JsonRoutes.sendResult(res, {
+        code: 200,
+        data: error,
+      });
+    }
+  });
+
+  // Add subscribed activities
+  JsonRoutes.add('POST', '/api/boards/:boardId/integrations/:intId/activities', function (req, res) {
+    try {
+      const paramBoardId = req.params.boardId;
+      const paramIntId = req.params.intId;
+      const newActivities = req.body.activities;
+      Authentication.checkBoardAccess(req.userId, paramBoardId);
+
+      Integrations.direct.update({_id: paramIntId, boardId: paramBoardId},
+        {$addToSet: {activities: { $each: newActivities}}});
+
+      JsonRoutes.sendResult(res, {
+        code: 200,
+        data: Integrations.findOne({_id: paramIntId, boardId: paramBoardId}, { fields: {_id: 1, activities: 1}}),
+      });
+    }
+    catch (error) {
+      JsonRoutes.sendResult(res, {
+        code: 200,
+        data: error,
+      });
+    }
+  });
+
+  // Delete integration
+  JsonRoutes.add('DELETE', '/api/boards/:boardId/integrations/:intId', function (req, res) {
+    try {
+      const paramBoardId = req.params.boardId;
+      const paramIntId = req.params.intId;
+      Authentication.checkBoardAccess(req.userId, paramBoardId);
+
+      Integrations.direct.remove({_id: paramIntId, boardId: paramBoardId});
+      JsonRoutes.sendResult(res, {
+        code: 200,
+        data: {
+          _id: paramIntId,
+        },
+      });
+    }
+    catch (error) {
+      JsonRoutes.sendResult(res, {
+        code: 200,
+        data: error,
+      });
+    }
+  });
+```
@@ -0,0 +1,89 @@
+## In Wekan code
+
+wekan/models/lists.js at bottom:
+```
+  JsonRoutes.add('GET', '/api/boards/:boardId/lists', function (req, res) {
+    try {
+      const paramBoardId = req.params.boardId;
+      Authentication.checkBoardAccess( req.userId, paramBoardId);
+
+      JsonRoutes.sendResult(res, {
+        code: 200,
+        data: Lists.find({ boardId: paramBoardId, archived: false }).map(function (doc) {
+          return {
+            _id: doc._id,
+            title: doc.title,
+          };
+        }),
+      });
+    }
+    catch (error) {
+      JsonRoutes.sendResult(res, {
+        code: 200,
+        data: error,
+      });
+    }
+  });
+
+  JsonRoutes.add('GET', '/api/boards/:boardId/lists/:listId', function (req, res) {
+    try {
+      const paramBoardId = req.params.boardId;
+      const paramListId = req.params.listId;
+      Authentication.checkBoardAccess( req.userId, paramBoardId);
+      JsonRoutes.sendResult(res, {
+        code: 200,
+        data: Lists.findOne({ _id: paramListId, boardId: paramBoardId, archived: false }),
+      });
+    }
+    catch (error) {
+      JsonRoutes.sendResult(res, {
+        code: 200,
+        data: error,
+      });
+    }
+  });
+
+  JsonRoutes.add('POST', '/api/boards/:boardId/lists', function (req, res) {
+    try {
+      Authentication.checkUserId( req.userId);
+      const paramBoardId = req.params.boardId;
+      const id = Lists.insert({
+        title: req.body.title,
+        boardId: paramBoardId,
+      });
+      JsonRoutes.sendResult(res, {
+        code: 200,
+        data: {
+          _id: id,
+        },
+      });
+    }
+    catch (error) {
+      JsonRoutes.sendResult(res, {
+        code: 200,
+        data: error,
+      });
+    }
+  });
+
+  JsonRoutes.add('DELETE', '/api/boards/:boardId/lists/:listId', function (req, res) {
+    try {
+      Authentication.checkUserId( req.userId);
+      const paramBoardId = req.params.boardId;
+      const paramListId = req.params.listId;
+      Lists.remove({ _id: paramListId, boardId: paramBoardId });
+      JsonRoutes.sendResult(res, {
+        code: 200,
+        data: {
+          _id: paramListId,
+        },
+      });
+    }
+    catch (error) {
+      JsonRoutes.sendResult(res, {
+        code: 200,
+        data: error,
+      });
+    }
+  });
+```
@@ -0,0 +1,82 @@
+# Change Role at Web UI
+
+BoardAdmin can change role of user at right sidebar / click avatar / select role like Admin, Normal, etc.
+
+# Change Role with API
+
+- https://wekan.github.io/api/
+- api.py at https://github.com/wekan/wekan
+- Login to API https://github.com/wekan/wekan/wiki/REST-API#example-call---as-json
+
+# Disclaimer
+
+This page tries to be as up to date as possible. If you see something wrong here, feel free to update the page and help other people like you, that greatly depends on our APIs. If you don't feel comfortable doing this kind of changes, please contact us by creating an [issue](https://github.com/wekan/wekan/issues/new).
+
+## Add New Board Member with Role
+This example adds with normal role. See examples below for other roles.
+```
+curl -H "Authorization: Bearer a6DM_gOPRwBdynfXaGBaiiEwTiAuigR_Fj_81QmNpnf" \
+     -H "Content-type:application/json" \
+     -X POST \
+     http://localhost:3000/api/boards/BOARD-ID-HERE/members/USER-ID-HERE/add \
+     -d '{"action": "add","isAdmin": "false", "isNoComments":"false", "isCommentOnly": "false", "isWorker": "false" }'
+```
+like
+```
+/api/boards/{boardid}/members/{MEMBERID}/add Body{ "action" : add, "isadmin" : false ...........
+```
+
+## Remove Member from Board
+```
+curl -H "Authorization: Bearer a6DM_gOPRwBdynfXaGBaiiEwTiAuigR_Fj_81QmNpnf" \
+     -H "Content-type:application/json" \
+     -X POST \
+     http://localhost:3000/api/boards/BOARD-ID-HERE/members/USER-ID-HERE/remove \
+     -d '{"action": "remove"}'
+```
+
+# Change Role of Existing Board Member
+
+## Admin
+```
+curl -H "Authorization: Bearer a6DM_gOPRwBdynfXaGBaiiEwTiAuigR_Fj_81QmNpnf" \
+     -H "Content-type:application/json" \
+     -X POST \
+     http://localhost:3000/api/boards/BOARD-ID-HERE/members/USER-ID-HERE \
+     -d '{"isAdmin": "true", "isNoComments":"false", "isCommentOnly": "false", "isWorker": "false"}'
+```
+## Normal
+```
+curl -H "Authorization: Bearer a6DM_gOPRwBdynfXaGBaiiEwTiAuigR_Fj_81QmNpnf" \
+     -H "Content-type:application/json" \
+     -X POST \
+     http://localhost:3000/api/boards/BOARD-ID-HERE/members/USER-ID-HERE \
+     -d '{"isAdmin": "false", "isNoComments":"false", "isCommentOnly": "false", "isWorker": "false"}'
+```
+## No Comments
+```
+curl -H "Authorization: Bearer a6DM_gOPRwBdynfXaGBaiiEwTiAuigR_Fj_81QmNpnf" \
+     -H "Content-type:application/json" \
+     -X POST \
+     http://localhost:3000/api/boards/BOARD-ID-HERE/members/USER-ID-HERE \
+     -d '{"isAdmin": "false", "isNoComments":"true", "isCommentOnly": "false", "isWorker": "false"}'
+```
+## Comment Only
+```
+curl -H "Authorization: Bearer a6DM_gOPRwBdynfXaGBaiiEwTiAuigR_Fj_81QmNpnf" \
+     -H "Content-type:application/json" \
+     -X POST \
+     http://localhost:3000/api/boards/BOARD-ID-HERE/members/USER-ID-HERE \
+     -d '{"isAdmin": "false", "isNoComments":"false", "isCommentOnly": "true", "isWorker": "false"}'
+```
+## Worker
+- Can: move cards, can assign himself to card, can comment.
+- Cannot: anything else including revoke card, change settings, create/delete/edit cards/tags and so on...
+```
+curl -H "Authorization: Bearer a6DM_gOPRwBdynfXaGBaiiEwTiAuigR_Fj_81QmNpnf" \
+     -H "Content-type:application/json" \
+     -X POST \
+     http://localhost:3000/api/boards/BOARD-ID-HERE/members/USER-ID-HERE \
+     -d '{"isAdmin": "false", "isNoComments":"false", "isCommentOnly": "false", "isWorker": "true"}'
+```
+
@@ -0,0 +1,54 @@
+# Disclaimer
+
+This page tries to be as up to date as possible. If you see something wrong here, feel free to update the page and help other people like you, that greatly depends on our APIs. If you don't feel comfortable doing this kind of changes, please contact us by creating an [issue](https://github.com/wekan/wekan/issues/new).
+
+# Retrieve cards by swimlane id
+
+Please somebody add example by looking this:
+
+[Issue](https://github.com/wekan/wekan/issues/1934) and [code](https://github.com/wekan/wekan/pull/1944/commits/be42b8d4cbdfa547ca019ab2dc9a590a115cc0e2). Also add to [Cards page](REST-API-Cards)
+
+# Add Swimlane to Board
+
+| API URL / Code Link | Requires Admin Auth | HTTP Method |
+| :--- | :--- | :--- |
+| [/api/boards/:boardId/swimlanes](https://github.com/wekan/wekan/blob/main/models/swimlanes.js#L223) | `yes` | `POST` |
+
+```shell
+curl -H "Authorization: Bearer t7iYB86mXoLfP_XsMegxF41oKT7iiA9lDYiKVtXcctl" \
+     -H "Content-type:application/json" \
+     -X POST \
+     http://localhost:3000/api/boards/YRgy7Ku6uLFv2pYwZ/swimlanes \
+     -d '{ "title": "Swimlane title text" }'
+```
+## Result example
+The new swimlane's ID is returned in the format:
+```json
+{
+    "_id": "W9m9YxQKT6zZrKzRW"
+}
+```
+
+# Delete a swimlane
+
+| API URL / Code Link | Requires Admin Auth | HTTP Method |
+| :--- | :--- | :--- |
+| [/api/boards/:boardId/swimlanes/:swimlaneId](https://github.com/wekan/wekan/blob/main/models/swimlanes.js#L257) | `yes` | `DELETE` |
+
+```shell
+curl -H "Authorization: Bearer t7iYB86mXoLfP_XsMegxF41oKT7iiA9lDYiKVtXcctl" \
+     -H "Content-type:application/json" \
+     -X DELETE \
+     http://localhost:3000/api/boards/YRgy7Ku6uLFv2pYwZ/lists/PgTuf6sFJsaxto5dC/cards/ssrNX9CvXvPxuC5DE
+```
+## Result example
+The swimlane's ID is returned in the format:
+```json
+{
+    "_id": "W9m9YxQKT6zZrKzRW"
+}
+```
+
+# In Wekan code
+
+If you believe that code is the best documentation, be our guest: [models/cards.js](https://github.com/wekan/wekan/blob/main/models/swimlanes.js "Swimlane API code")
@@ -0,0 +1,335 @@
+# Disclaimer
+
+This page tries to be as up to date as possible. If you see something wrong here, feel free to update the page and help other people like you, that greatly depends on our APIs. If you don't feel comfortable doing this kind of changes, please contact us by creating an [issue](https://github.com/wekan/wekan/issues/new).
+
+# User Register
+| URL | Requires Auth | HTTP Method |
+| :--- | :--- | :--- |
+| `/users/register` | `no` | `POST` |
+
+## Payload
+
+| Argument | Example | Required | Description |
+| :--- | :--- | :--- | :--- |
+| `username` | `myusername` | Required | Your username |
+| `password` | `my$up3erP@ssw0rd` | Required | Your password |
+| `email` | `my@email.com` | Required | Your email |
+
+* Notes:
+ * **You will need to provide the `token` for any of the authenticated methods.**
+
+## Example Call - As Form Data
+```bash
+curl http://localhost:3000/users/register \
+     -d "username=myusername&password=mypassword&email=my@email.com"
+```
+
+
+## Example Call - As JSON
+```bash
+curl -H "Content-type:application/json" \
+      http://localhost:3000/users/register \
+      -d '{ "username": "myusername", "password": "mypassword", "email": "my@email.com" }'
+```
+
+
+## Result
+```json
+{
+  "id": "user id",
+  "token": "string",
+  "tokenExpires": "ISO encoded date string"
+}
+```
+
+## Result example
+```json
+{
+  "id": "XQMZgynx9M79qTtQc",
+  "token": "ExMp2s9ML1JNp_l11sIfINPT3wykZ1SsVwg-cnxKdc8",
+  "tokenExpires": "2017-12-15T00:47:26.303Z"
+}
+```
+
+# User Create
+| URL | Requires Admin Auth | HTTP Method |
+| :--- | :--- | :--- |
+| `/api/users` | `yes` | `POST` |
+
+## Payload
+
+| Argument | Example | Required | Description |
+| :--- | :--- | :--- | :--- |
+| `username` | `myusername` | Required | Your username |
+| `password` | `my$up3erP@ssw0rd` | Required | Your password |
+| `email` | `my@email.com` | Required | Your email |
+
+* Notes:
+ * **You will need to provide the `token` for any of the authenticated methods.**
+
+## Example Call - As Form Data
+```bash
+curl  -H "Authorization: Bearer a6DM_gOPRwBdynfXaGBaiiEwTiAuigR_Fj_81QmNpnf" \
+      -X POST \
+      http://localhost:3000/api/users \
+      -d "username=myusername&password=mypassword&email=my@email.com"
+```
+
+## Example Call - As JSON
+```bash
+curl  -H "Authorization: Bearer a6DM_gOPRwBdynfXaGBaiiEwTiAuigR_Fj_81QmNpnf" \
+      -H "Content-type:application/json" \
+      -X POST \
+      http://localhost:3000/api/users \
+      -d '{ "username": "myusername", "password": "mypassword", "email": "my@email.com" }'
+```
+
+## Example of all steps of create user
+
+1) Login
+
+```
+curl http://example.com/users/login \
+     -d "username=YOUR-USERNAME-HERE&password=YOUR-PASSWORD-HERE"
+```
+
+As response you get your id and token:
+
+```
+"id":"YOUR-ID-HERE","token":"YOUR-TOKEN-HERE","tokenExpires":"2017-12-23T21:07:10.395Z"}
+```
+
+2) Create user. Works both when serf-register enabled and disabled.
+
+```
+curl  -H "Authorization: Bearer YOUR-TOKEN-HERE" \
+      -H "Content-type:application/json" \
+      -X POST \
+      http://example.com/api/users \
+      -d '{ "username": "tester", "password": "tester", "email": "tester@example.com", "fromAdmin": "true" }'
+```
+
+As reply you get new user's id.
+
+```
+{"id":"NEW-USER-ID-HERE"}
+```
+
+3) You can get user details with your new user's id:
+
+```
+curl -H "Authorization: Bearer YOUR-TOKEN-HERE" \
+      http://example.com/api/users/NEW-USER-ID-HERE
+```
+
+## Result
+
+Returns the id of the created user.
+
+
+```json
+{
+  "_id": "user id"
+}
+```
+
+## Result example
+```json
+{
+  "_id": "EnhMbvxh65Hr7YvtG"
+}
+```
+
+# User Delete
+
+> IMPORTANT : Should not be used as long as [this bug](https://github.com/wekan/wekan/issues/1289) exists. 
+
+| URL | Requires Admin Auth | HTTP Method |
+| :--- | :--- | :--- |
+| `/api/users/:id` | `yes` | `DELETE` |
+
+## Parameters
+| Argument | Example | Required | Description |
+| :--- | :--- | :--- | :--- |
+| `id` | `BsNr28znDkG8aeo7W` | Required | The id of the user to delete. |
+
+## Example Call
+```bash
+curl -H "Authorization: Bearer a6DM_gOPRwBdynfXaGBaiiEwTiAuigR_Fj_81QmNpnf" \
+      -X DELETE \
+      http://localhost:3000/api/users/EnhMbvxh65Hr7YvtG    
+```
+
+## Example Result
+
+Returns the id of the deleted user.
+
+```json
+{
+  "_id": "EnhMbvxh65Hr7YvtG"
+}
+```
+
+# User Information
+Retrieves information about a user.
+
+| URL | Requires Admin Auth | HTTP Method |
+| :--- | :--- | :--- |
+| `/api/users/:id` | `yes` | `GET` |
+
+* Notes:
+ * **You will need to provide the `token` for any of the authenticated methods.**
+ * **Only the admin user (the first user) can call the REST API.**
+
+## Example Call
+```bash
+curl -H "Authorization: Bearer a6DM_gOPRwBdynfXaGBaiiEwTiAuigR_Fj_81QmNpnf" \
+      http://localhost:3000/api/users/XQMZgynx9M79qTtQc
+```
+
+## Result example
+```json
+{
+  "_id": "XQMZgynx9M79qTtQc",
+  "createdAt": "2017-09-13T06:45:53.127Z",
+  "services": {
+    "password": {
+      "bcrypt": "$2a$10$CRZrpT4x.VpG2FdJxR3rN.9m0NbQb0OPsSPBDAZukggxrskMtWA8."
+    },
+    "email": {
+      "verificationTokens": [
+        {
+          "token": "8rzwpq_So2PVYHVSfrcc5f5QZnuV2wEtu7QRQGwOJx8",
+          "address": "my@email.com",
+          "when": "2017-09-13T06:45:53.157Z"
+        }
+      ]
+    },
+    "resume": {
+      "loginTokens": [
+        {
+          "when": "2017-09-13T06:45:53.265Z",
+          "hashedToken": "CY/PWeDa3fAkl+k94+GWzCtpB5nPcVxLzzzjXs4kI3A="
+        },
+        {
+          "when": "2017-09-16T06:06:19.741Z",
+          "hashedToken": "74MQNXfsgjkItx/gpgPb29Y0MSNAvBrsnSGQmr4YGvQ="
+        }
+      ]
+    }
+  },
+  "username": "john",
+  "emails": [
+    {
+      "address": "my@email.com",
+      "verified": false
+    }
+  ],
+  "isAdmin": true,
+  "profile": {}
+}
+```
+# User List
+Retrieves the user list.
+
+| URL | Requires Admin Auth | HTTP Method |
+| :--- | :--- | :--- |
+| `/api/users` | `yes` | `GET` |
+
+* Notes:
+ * **You will need to provide the `token` for any of the authenticated methods.**
+ * **Only the admin user (the first user) can call the REST API.**
+
+## Example Call
+```bash
+curl -H "Authorization: Bearer cwUZ3ZsTaE6ni2R3ppSkYd-KrDvxsLcBIkSVfOCfIkA" \
+      http://localhost:3000/api/users
+```
+
+## Result
+```json
+[
+  {
+    "_id": "user id",
+    "username": "string"
+  }
+]
+```
+
+## Result example
+```json
+[
+  {
+    "_id": "XQMZgynx9M79qTtQc",
+    "username": "admin"
+  },
+  {
+    "_id": "vy4WYj7k7NBhf3AFc",
+    "username": "john"
+  }
+]
+```
+
+# User Logged-in
+Retrieves information about a logged-in user with his auth token.
+
+| URL | Requires Auth | HTTP Method |
+| :--- | :--- | :--- |
+| `/api/user` | `yes` | `GET` |
+
+* Notes:
+ * **You will need to provide the `token` for any of the authenticated methods.**
+
+## Example Call
+```bash
+curl -H "Authorization: Bearer a6DM_gOPRwBdynfXaGBaiiEwTiAuigR_Fj_81QmNpnf" \
+      http://localhost:3000/api/user
+```
+
+## Result example
+```json
+{
+  "_id": "vy4WYj7k7NBhf3AFc",
+  "createdAt": "2017-09-16T05:51:30.339Z",
+  "username": "john",
+  "emails": [
+    {
+      "address": "me@mail.com",
+      "verified": false
+    }
+  ],
+  "profile": {}
+}
+```
+
+# Disable a user (the user is not allowed to login and his login tokens are purged)
+
+| URL | Requires Admin Auth | HTTP Method |
+| :--- | :--- | :--- |
+| `/api/users/:id` | `yes` | `PUT` |
+
+```shell
+curl -H "Authorization: Bearer t7iYB86mXoLfP_XsMegxF41oKT7iiA9lDYiKVtXcctl" \
+     -H "Content-type:application/json" \
+     -X PUT \
+     http://localhost:3000/api/users/ztKvBTzCqmyJ77on8 \
+     -d '{ "action": "disableLogin" }'
+```
+
+# Enable a user
+
+| URL | Requires Admin Auth | HTTP Method |
+| :--- | :--- | :--- |
+| `/api/users/:id` | `yes` | `PUT` |
+
+```shell
+curl -H "Authorization: Bearer t7iYB86mXoLfP_XsMegxF41oKT7iiA9lDYiKVtXcctl" \
+     -H "Content-type:application/json" \
+     -X PUT \
+     http://localhost:3000/api/users/ztKvBTzCqmyJ77on8 \
+     -d '{ "action": "enableLogin" }'
+```
+
+# In Wekan code
+
+If you believe that code is the best documentation, be our guest: [models/cards.js](https://github.com/wekan/wekan/blob/main/models/users.js "User API code")
@@ -0,0 +1,126 @@
+REST API is not complete yet, please add missing functionality with pull requests to devel branch.
+
+If you are in a hurry, you can use these to have more functionality:
+* https://restheart.org
+* http://vulcanjs.org
+
+For workflows see [If-this-then-that issue](https://github.com/wekan/wekan/issues/1160) than mentions Huginn, Flogo etc.
+
+# Wekan REST API
+
+The REST API allows you to control and extend Wekan with ease.
+
+If you are an end-user and not a dev or a tester, [create an issue](https://github.com/wekan/wekan/issues/new) to request new APIs.
+
+> All API calls in the documentation are made using `curl`.  However, you are free to use Java / Python / PHP / Golang / Ruby / Swift / Objective-C / Rust / Scala / C# or any other programming languages.
+
+## Production Security Concerns
+When calling a production Wekan server, ensure it is running via HTTPS and has a valid SSL Certificate. The login method requires you to post your username and password in plaintext, which is why we highly suggest only calling the REST login api over HTTPS. Also, few things to note:
+
+* Only call via HTTPS
+* Implement a timed authorization token expiration strategy
+* Ensure the calling user only has permissions for what they are calling and no more
+
+# Summary
+
+### Authentication
+| HTTP Method | Url | Short Description |
+| :--- | :--- | :--- |
+| `POST` | `/users/login` | [Authenticate with the REST API.](#login) |
+
+### Users
+| HTTP Method | Url | Short Description |
+| :--- | :--- | :--- |
+| `POST` | `/users/register` | [Register a new user.](REST-API-User#user-register) |
+| `POST` | `/api/users` | [Create a new user.](REST-API-User#user-create) |
+| `PUT` | `/api/users/:id` | [Disable an existing user.](REST-API-User#disable-a-user-the-user-is-not-allowed-to-login-and-his-login-tokens-are-purged) |
+| `PUT` | `/api/users/:id` | [Enable an existing user.](REST-API-User#enable-a-user) |
+| `PUT` | `/api/users/:id` | [Admin takes the ownership.](REST-API-User#the-admin-takes-the-ownership-of-all-boards-of-the-user-archived-and-not-archived-where-the-user-is-admin-on) |
+| `DELETE` | `/api/users/:id` | [Delete an existing user.](REST-API-User#user-delete) ([Warning](https://github.com/wekan/wekan/issues/1289))|
+| `GET` | `/api/users/:id` | [Gets a user's information.](REST-API-User#user-information) |
+| `GET` | `/api/users` | [All of the users.](REST-API-User#user-list) |
+| `GET` | `/api/user` | [Gets a logged-in user.](REST-API-User#user-logged-in) |
+### Cards
+| HTTP Method | Url | Short Description |
+| :--- | :--- | :--- |
+| `POST` | `/api/boards/:boardId/lists/:listId/cards` | [Add a card to a list, board, and swimlane.](REST-API-Cards#add-card-to-list-board-swimlane) |
+| `PUT` | `/api/boards/:boardId/lists/:fromListId/cards/:cardId` | [Update a card.](REST-API-Cards#update-a-card) |
+| `DELETE` | `/api/boards/:boardId/lists/:listId/cards/:cardId` | [Delete a card.](REST-API-Cards#update-a-card) |
+
+
+---
+
+# Login
+| URL | Requires Auth | HTTP Method |
+| :--- | :--- | :--- |
+| `/users/login` | `no` | `POST` |
+
+## Payload
+
+### Authentication with username
+| Argument | Example | Required | Description |
+| :--- | :--- | :--- | :--- |
+| `username` | `myusername` | Required | Your username |
+| `password` | `my$up3erP@ssw0rd` | Required | Your password |
+
+### Authentication with email
+| Argument | Example | Required | Description |
+| :--- | :--- | :--- | :--- |
+| `email` | `my@email.com` | Required | Your email |
+| `password` | `my$up3erP@ssw0rd` | Required | Your password |
+
+* Notes:
+ * **You will need to provide the `token` for any of the authenticated methods.**
+
+## Example Call - As Form Data
+
+DOES NOT WORK ! Please use As JSON example below !
+https://github.com/wekan/wekan/issues/4807
+
+```bash
+curl http://localhost:3000/users/login \
+     -d "username=myusername&password=mypassword"
+```
+
+```bash
+curl http://localhost:3000/users/login \
+     -d "email=my@email.com&password=mypassword"
+```
+
+
+## Example Call - As JSON
+
+THIS WORKS !! Alternatively, look at api.py example at https://github.com/wekan/wekan
+
+NOTE: Username and password is case sensitive. So type BIG and small letters correctly.
+
+```bash
+curl -H "Content-type:application/json" \
+      http://localhost:3000/users/login \
+      -d '{ "username": "myusername", "password": "mypassword" }'
+```
+
+```bash
+curl -H "Content-type:application/json" \
+      http://localhost:3000/users/login \
+      -d '{ "email": "my@email.com", "password": "mypassword" }'
+```
+
+
+## Result
+```json
+{
+  "id": "user id",
+  "token": "string",
+  "tokenExpires": "ISO encoded date string"
+}
+```
+
+## Result example
+```json
+{
+  "id": "XQMZgynx9M79qTtQc",
+  "token": "ExMp2s9ML1JNp_l11sIfINPT3wykZ1SsVwg-cnxKdc8",
+  "tokenExpires": "2017-12-15T00:47:26.303Z"
+}
+```
@@ -0,0 +1,8 @@
+Admin Panel / People / Click at right side of usename `...` button that is User Settings / Impersonate user.
+
+You will be switched to logged in as that user.
+
+To switch back to your original user, at your webbrowser click `Reload open webpage` round arrow button.
+
+This feature was added to Wekan v4.39 at https://github.com/wekan/wekan/pull/3280
+
@@ -0,0 +1,784 @@
+[Sandstorm](Sandstorm) - [Sandstorm Backup](Export-from-Wekan-Sandstorm-grain-.zip-file)
+
+# Upcoming
+
+[Transferring to Minio and SQLite](https://github.com/wekan/minio-metadata)
+
+# Backup Docker
+
+[Also see: Upgrading Synology with Wekan quay images](https://github.com/wekan/wekan/issues/3874#issuecomment-867526249)
+
+Note: Do not run `docker-compose down` without verifying your docker-compose file, it does not delete the data by default but caution is advised. Refer to https://docs.docker.com/compose/reference/down/.
+
+[docker-compose.yml](https://raw.githubusercontent.com/wekan/wekan/master/docker-compose.yml)
+
+This presumes your Wekan Docker is currently running with:
+```bash
+docker-compose up -d
+```
+Backup to directory dump:
+```bash
+docker stop wekan-app
+docker exec wekan-db rm -rf /data/dump
+docker exec wekan-db mongodump -o /data/dump
+docker cp wekan-db:/data/dump .
+docker start wekan-app
+```
+Copy dump directory to other server or to your backup.
+
+# Restore Docker
+```bash
+docker stop wekan-app
+docker exec wekan-db rm -rf /data/dump
+docker cp dump wekan-db:/data/
+docker exec wekan-db mongorestore --drop --dir=/data/dump
+docker start wekan-app
+```
+# Upgrade Docker Wekan version
+
+## Newest info
+
+https://github.com/wekan/wekan/discussions/5367
+
+## Old info
+
+Note: Do not run `docker-compose down` without verifying your docker-compose file, it does not delete the data by default but caution is advised. Refer to https://docs.docker.com/compose/reference/down/.
+```bash
+docker-compose stop
+docker rm wekan-app
+```
+a) For example, if you in docker-compose.yml use `image: wekanteam/wekan` or `image: quay.io/wekan/wekan` for latest development version
+
+b) Or in docker-compose.yml change version tag, or use version tag like `image: wekanteam/wekan:v5.50` or `image: quay.io/wekan/wekan:v5.50`
+```bash
+docker-compose up -d
+```
+
+# Backup Wekan Snap to directory dump
+```bash
+sudo snap stop wekan.wekan
+export LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/snap/wekan/current/lib/x86_64-linux-gnu
+export PATH="/snap/wekan/current/bin:$PATH"
+mongodump --port 27019
+sudo snap get wekan > snap-settings.sh
+```
+NOTE for Arch Linux: Use this path instead. [Source](https://github.com/wekan/wekan/issues/3941).
+```bash
+export LD_LIBRARY_PATH=${LD_LIBRARY_PATH-}:/var/lib/snapd/snap/wekan/current/lib/x86_64-linux-gnu
+```
+username is your /home/username
+```bash
+sudo chown username:username snap-settings.sh
+sudo snap start wekan.wekan
+```
+Modify snap-settings.sh so that it has commands like:
+```bash
+sudo snap set wekan root-url='http://localhost'
+```
+Set snap-settings.sh executeable:
+```bash
+chmod +x snap-settings.sh
+```
+
+# Restore Wekan Snap
+```bash
+sudo snap stop wekan.wekan
+export LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/snap/wekan/current/lib/x86_64-linux-gnu
+export PATH="$PATH:/snap/wekan/current/bin"
+mongorestore --drop --port 27019
+sudo snap start wekan.wekan
+./snap-settings.sh
+```
+# Upgrade Snap manually immediately (usually it updates automatically)
+
+```bash
+sudo snap refresh
+```
+
+# Backup Wekan Gantt GPLv2 Snap to directory dump
+```bash
+sudo snap stop wekan-gantt-gpl.wekan
+export LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/snap/wekan-gantt-gpl/current/lib/x86_64-linux-gnu
+export PATH="$PATH:/snap/wekan-gantt-gpl/current/bin"
+mongodump --port 27019
+sudo snap get wekan-gantt-gpl > snap-settings.sh
+```
+username is your /home/username
+```bash
+sudo chown username:username snap-settings.sh
+sudo snap start wekan-gantt-gpl.wekan
+```
+Modify snap-settings.sh so that it has command like:
+```bash
+sudo snap set wekan-gantt-gpl root-url='http://localhost'
+```
+Set snap-settings.sh executeable:
+```bash
+chmod +x snap-settings.sh
+```
+
+# Restore Wekan Gantt GPLv2 Snap
+```bash
+sudo snap stop wekan-gantt-gpl.wekan
+export LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/snap/wekan-gantt-gpl/current/lib/x86_64-linux-gnu
+export PATH="$PATH:/snap/wekan-gantt-gpl/current/bin"
+mongorestore --drop --port 27019
+sudo snap start wekan-gantt-gpl.wekan
+./snap-settings.sh
+```
+
+# DBGate, Open Source MongoDB GUI
+
+https://dbgate.org - https://github.com/dbgate/dbgate
+
+# Using nosqlbooster closed source MongoDB GUI with Wekan Snap to edit MongoDB database
+
+https://nosqlbooster.com/downloads
+
+### At server where Wekan Snap is installed, MongoDB is running at localhost port 27019
+
+<img src="https://wekan.github.io/nosqlbooster-basic-connection.png" width="60%" alt="Wekan logo" />
+
+### You can tunnel via SSH to server, using password auth or private key auth dropdown selection
+
+<img src="https://wekan.github.io/nosqlbooster-ssh-tunnel.png" width="60%" alt="Wekan logo" />
+
+# Scheduled backups to local or remote server
+
+For below scheduled backup scripts, no info from above of this wiki page is required. Backup scripts below have the required settings.
+
+This does backup of [Wekan+RocketChat snap databases](OAuth2) and php website etc.
+
+If you need to backup some remote server or cloud, you can use scp, or read [rclone docs](https://rclone.org/docs/) about how to configure saving to some other remote server or cloud.
+
+The following .sh bash scripts are added as root user to your `/root/` directory.
+
+Backups are created to subdirectories of `/root/backups/`.
+
+Cron is used to schedule backups, for example once a day.
+
+1. To add bash scripts, you change to root user with this command, and your sudo or root password.
+```bash
+sudo su
+```
+2. Use nano editor for editing cron. If you don't have it installed, type:
+```bash
+apt install nano
+```
+3. Then we set text editor to be nano. Otherwise it probably uses vi, that is harder to use.
+```bash
+export EDITOR=nano
+```
+4. Now we start editing cron scheduler. 
+```bash
+crontab -e
+```
+For more info how to make cron time, see https://crontab.guru
+
+In this example, we set backups every day at 04:00, then it runs backup.sh script, and saves output of the backup commands to the bottom of textfile backup.log.txt
+```bash
+# m h  dom mon dow   command
+0 4 * * * /root/backup.sh >> /root/backup.log.txt 2>&1
+```
+- For changing to `/root` directory, type: `cd /root`
+- for editing backup.sh file, type: `nano backup.sh`
+- For saving in nano, press Ctrl-o Enter
+- For exiting nano, press Ctrl-x Enter
+- Set every .sh file as executeable, for example: `chmod +x backup.sh`
+
+This is content of `backup.sh` script. It runs all the other backup scripts.
+If you do not need to backup rocketchat or website, or do not need to use rclone,
+you don't need to add those command lines at all.
+```bash
+cd /root
+./backup-wekan.sh
+./backup-rocketchat.sh
+./backup-website.sh
+rclone move backups cloudname:backup.example.com
+```
+More about rclone:
+
+/root/rclone-ls-all.sh , shows directory contests at cloud:
+```bash
+rclone lsd cloudname:
+```
+In this example, cron does run backup scripts as root.
+This is if you edit cron with command `crontab -e` as root user,
+so it edits the cron of root user.
+
+If mongodump command works as normal user for you, you could instead
+run backups as normal user, by exiting root user with `exit` and
+then as normal user editing cron with `crontab -e`.
+You can also list current cron with command `crontab -l`.
+
+If you like to backup Wekan snap settings with this command, then it
+only works with sudo at front, or as a root user without sudo at front.
+```bash
+sudo snap get wekan > snap-settings.txt
+```
+
+This below is backup script for backing up Wekan.
+
+/root/backup-wekan.sh
+```bash
+#!/bin/bash
+
+makeDump()
+{
+
+    # Backups will be created below this directory.
+    backupdir="/root/backups/wekan"
+
+    # Gets the version of the snap.
+    version=$(snap list | grep wekan | awk -F ' ' '{print $3}')
+
+    # Gets current time to variable "now"
+    now=$(date +'%Y-%m-%d_%H.%M.%S')
+
+    # Creates new backup directory like BACKUPDIR/BACKUPVERSIO-TIMENOW
+    mkdir -p $backupdir/$version-$now
+
+    # Targets the dump file.
+    #dump=$"/snap/wekan/$version/bin/mongodump"
+
+    # Changes to backup directory
+    cd $backupdir/$version-$now
+
+    # Backup Caddy settings
+    snap get wekan > snap-settings.txt
+
+    # Show text that database backup is in progress
+    printf "\nThe database backup is in progress.\n\n"
+
+    # Backup to current directory, creates subdirectory called "dump"
+    # with database dump files
+    mongodump --port 27019
+
+    # Change diretory (=cd) to parent directory
+    cd ..
+
+    # Show text "Makes the tar.gz archive file"
+    printf "\nMakes the tar.gz archive file.\n"
+
+    # Creates tar.gz archive file. This works similarly like creating .zip file.
+    tar -zcvf $version-$now.tar.gz $version-$now
+
+    # Delete temporary files that have already been
+    # compressed to above tar.gz file
+    rm -rf $version-$now
+
+    # Shows text "Backup done."
+    printf "\nBackup done.\n"
+
+    # Show where backup archive file is.
+    echo "Backup is archived to .tar.gz file at $backupdir/${version}-${now}.tar.gz"
+}
+
+# Checks is the user is sudo/root
+if [ "$UID" -ne "0" ]
+then
+    echo "This program must be launched with sudo/root."
+    exit 1
+fi
+
+# Starts
+makeDump
+```bash
+/root/backup-rocketchat.sh
+```bash
+#!/bin/bash
+
+makeDump()
+{
+
+    backupdir="/root/backups/rocketchat"
+
+    # Gets the version of the snap.
+    version=$(snap list | grep wekan | awk -F ' ' '{print $3}')
+
+    # Prepares.
+    now=$(date +'%Y-%m-%d_%H.%M.%S')
+    mkdir -p $backupdir/$version-$now
+
+    # Targets the dump file.
+    dump=$"/snap/wekan/$version/bin/mongodump"
+
+    # Makes the backup.
+    cd $backupdir/$version-$now
+    printf "\nThe database backup is in progress.\n\n"
+    $dump --port 27017
+
+    # Makes the tar.gz file.
+    cd ..
+    printf "\nMakes the tar.gz file.\n"
+    tar -zcvf $version-$now.tar.gz $version-$now
+
+    # Cleanups
+    rm -rf $version-$now
+
+    # End.
+    printf "\nBackup done.\n"
+    echo "Backup is archived to .tar.gz file at $backupdir/${version}-${now}.tar.gz"
+}
+
+# Checks is the user is sudo/root
+if [ "$UID" -ne "0" ]
+then
+    echo "This program must be launched with sudo/root."
+    exit 1
+fi
+
+# Starts
+makeDump
+```
+/root/backup-website.sh
+```bash
+#!/bin/bash
+
+makeDump()
+{
+
+    backupdir="/root/backups/example.com"
+
+    # Gets the version of the snap.
+    version=$(snap list | grep wekan | awk -F ' ' '{print $3}')
+
+    # Prepares.
+    now=$(date +'%Y-%m-%d_%H.%M.%S')
+    mkdir -p $backupdir/$version-$now
+
+    # Makes the backup.
+    cd $backupdir/$version-$now
+    printf "\nThe file backup is in progress.\n\n"
+
+    # Makes the tar.gz file.
+    cd ..
+    printf "\nMakes the tar.gz file.\n"
+    cp -pR /var/snap/wekan/common/example.com $version-$now
+    tar -zcvf $version-$now.tar.gz $version-$now
+
+    # Cleanups
+    rm -rf $version-$now
+
+    # End.
+    printf "\nBackup done.\n"
+    echo "Backup is archived to .tar.gz file at $backupdir/${version}-${now}.tar.gz"
+}
+
+# Checks is the user is sudo/root
+if [ "$UID" -ne "0" ]
+then
+    echo "This program must be launched with sudo/root."
+    exit 1
+fi
+
+# Starts
+makeDump
+```
+/var/snap/wekan/common/Caddyfile
+```bash
+chat.example.com {
+	proxy / localhost:3000 {
+	  websocket
+	  transparent
+	}
+}
+
+https://boards.example.com {
+	proxy / localhost:3001 {
+	  websocket
+	  transparent
+	}
+}
+
+example.com {
+	root /var/snap/wekan/common/example.com
+	fastcgi / /var/run/php/php7.0-fpm.sock php
+}
+
+matomo.example.com {
+        root /var/snap/wekan/common/matomo.example.com
+        fastcgi / /var/run/php/php7.0-fpm.sock php
+}
+
+# Example CloudFlare free wildcard SSL Origin Certificate, there is example.com.pem at certificates directory with private key at to and cert at bottom.
+http://example.com https://example.com {
+        tls {
+            load /var/snap/wekan/common/certificates
+            alpn http/1.1
+        }
+        root /var/snap/wekan/common/example.com
+        browse
+}
+
+static.example.com {
+	root /var/snap/wekan/common/static.example.com
+}
+```
+
+## Related talk about MongoDB backup
+
+Related talk, search for "mongodb" this page:
+https://fosdem.org/2020/schedule/events/
+
+There is this:
+
+Percona Backup for MongoDB: Status and Plans
+
+Open Source solution for consistent backups of multi-shard MongoDB
+
+- [Slides](https://fosdem.org/2020/schedule/event/perconamongodb/attachments/slides/3768/export/events/attachments/perconamongodb/slides/3768/Percona_Backup_for_MongoDB.pdf)
+- [Video webm](https://video.fosdem.org/2020/UD2.119/perconamongodb.webm)
+- [Same Video mp4](https://video.fosdem.org/2020/UD2.119/perconamongodb.mp4)
+
+## Related Sandstorm issue
+
+[Creating a backup while the grain is running could cause corruption](https://github.com/sandstorm-io/sandstorm/issues/3186).
+
+## Combining old and new Wekan version data
+
+Note: Do mongodump/mongorestore only when Wekan is stopped: wekan.wekan (Snap) or wekan-app (Docker).
+
+1. From new Wekan export all boards to Wekan JSON.
+2. Backup new Wekan with mongodump.
+3. Backup old Wekan with mongodump.
+4. Restore old Wekan data to new Wekan with mongorestore.
+5. Restore new Wekan JSON exported boards by importing them.
+
+## Rescuing board that does not load
+
+Wekan web UI Import/Export JSON does not have all content currently. To upgrade from old Wekan version, use mongodump/mongorestore to newest Wekan, like described below.
+
+To import big JSON file, on Linux you can use xclip to copy textfile to clipboard:
+```bash
+sudo apt-get install xclip
+cat board.json | xclip -se c
+```
+Then paste to webbrowser Wekan Add Board / Import / From previous export.
+
+You can [save all MongoDB database content as JSON files](Export-from-Wekan-Sandstorm-grain-.zip-file). Files are base64 encoded in JSON files.
+
+Export board to Wekan JSON, and import as Wekan JSON can make some part of board to load, but you should check is some data missing.
+
+With Wekan Snap, you can use [nosqlbooster GUI](https://nosqlbooster.com/downloads) to login through SSH to Wekan server localhost port 27019 and browse data.
+
+You could use [daff](https://github.com/paulfitz/daff) to compare tables.
+
+## Using Snap Mongo commands on your bash CLI
+
+Add to your `~/.bashrc`
+```bash
+export LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/snap/wekan/current/lib/x86_64-linux-gnu
+export PATH="$PATH:/snap/wekan/current/bin"
+```
+Then you can backup:
+```bash
+mongodump --port 27019
+```
+And restore:
+```bash
+mongorestore --drop --port 27019
+```
+
+## MongoDB shell on Wekan Snap
+
+mongoshell.sh
+```bash
+#/bin/bash
+export LC_ALL=C
+export LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/snap/wekan/current/lib/x86_64-linux-gnu
+version=$(snap list | grep wekan | awk -F ' ' '{print $3}')
+mongo=$"/snap/wekan/$version/bin/mongo"
+$mongo --port 27019
+```
+
+***
+
+# Snap backup-restore v2
+
+Originally from https://github.com/wekan/wekan-snap/issues/62#issuecomment-470622601
+
+## Backup
+
+wekan-backup.sh
+```bash
+#!/bin/bash
+export LC_ALL=C
+export LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/snap/wekan/current/lib/x86_64-linux-gnu
+
+version=$(snap list | grep wekan | awk -F ' ' '{print $3}')
+now=$(date +"%Y%m%d-%H%M%S")
+parent_dir="/data/backups/wekan"
+backup_dir="${parent_dir}/${now}"
+log_file="${parent_dir}/backup-progress.log.${now}"
+
+error () {
+  printf "%s: %s\n" "$(basename "${BASH_SOURCE}")" "${1}" >&2
+  exit 1
+}
+
+trap 'error "An unexpected error occurred."' ERR
+
+take_backup () {
+  mkdir -p "${backup_dir}"
+
+  cd "${backup_dir}"
+
+  /snap/wekan/$version/bin/mongodump --quiet --port 27019
+
+  cd ..
+
+  tar -zcf "${now}.tar.gz" "${now}"
+
+  rm -rf "${now}"
+}
+
+printf "\n======================================================================="
+printf "\nWekan Backup"
+printf "\n======================================================================="
+printf "\nBackup in progress..."
+
+take_backup 2> "${log_file}"
+
+if [[ -s "${log_file}" ]]
+then
+  printf "\nBackup failure! Check ${log_file} for more information."
+  printf "\n=======================================================================\n\n"
+else
+  rm "${log_file}"
+  printf "...SUCCESS!\n"
+  printf "Backup created at ${backup_dir}.tar.gz"
+  printf "\n=======================================================================\n\n"
+fi
+```
+wekan-restore.sh
+```bash
+#!/bin/bash
+export LC_ALL=C
+export LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/snap/wekan/current/lib/x86_64-linux-gnu
+
+makesRestore()
+{
+    file=$1
+
+    ext=$"$(basename $file)"
+    parentDir=$"${file:0:${#file}-${#ext}}"
+    cd "${parentDir}"
+
+    printf "\nMakes the untar of the archive.\n"
+
+    tar -zxvf "${file}"
+    file="${file:0:${#file}-7}"
+
+    version=$(snap list | grep wekan | awk -F ' ' '{print $3}')
+
+    restore=$"/snap/wekan/${version}/bin/mongorestore"
+
+    printf "\nThe database restore is in progress.\n\n"
+
+    ## Only if you get errors about existing indexes, use this below instead:
+    ## $restore --quiet --drop --noIndexRestore -d wekan --port 27019 "${file}/dump/wekan"
+
+    $restore --quiet --drop -d wekan --port 27019 "${file}/dump/wekan"
+
+    rm -rf "${file}"
+
+    printf "\nRestore done.\n"
+}
+
+makesRestore $1
+```
+
+***
+
+# Snap backup-restore v1
+
+## Backup script for MongoDB Data, if running Snap MongoDB at port 27019
+
+```bash
+#!/bin/bash
+
+makeDump()
+{
+    # Gets the version of the snap.
+    version=$(snap list | grep wekan | awk -F ' ' '{print $3}')
+
+    # Prepares.
+    now=$(date +'%Y-%m-%d_%H.%M.%S')
+    mkdir -p /var/backups/wekan/$version-$now
+
+    # Targets the dump file.
+    dump=$"/snap/wekan/$version/bin/mongodump"
+
+    # Makes the backup.
+    cd /var/backups/wekan/$version-$now
+    printf "\nThe database backup is in progress.\n\n"
+    $dump --port 27019
+
+    # Makes the tar.gz file.
+    cd ..
+    printf "\nMakes the tar.gz file.\n"
+    tar -zcvf $version-$now.tar.gz $version-$now
+
+    # Cleanups
+    rm -rf $version-$now
+
+    # End.
+    printf "\nBackup done.\n"
+    echo "Backup is archived to .tar.gz file at /var/backups/wekan/${version}-${now}.tar.gz"
+}
+
+# Checks is the user is sudo/root
+if [ "$UID" -ne "0" ]
+then
+    echo "This program must be launched with sudo/root."
+    exit 1
+fi
+
+
+# Starts
+makeDump
+
+```
+
+## Restore script for MongoDB Data, if running Snap MongoDB at port 27019 with a tar.gz archive.
+
+```bash
+#!/bin/bash
+
+makesRestore()
+{
+    # Prepares the folder used for the backup.
+    file=$1
+    if [[ "$file" != *tar.gz* ]]
+    then
+        echo "The backup archive must be a tar.gz."
+        exit -1
+    fi
+
+    # Goes into the parent directory.
+    ext=$"$(basename $file)"
+    parentDir=$"${file:0:${#file}-${#ext}}"
+    cd $parentDir
+
+    # Untar the archive.
+    printf "\nMakes the untar of the archive.\n"
+    tar -zxvf $file
+    file="${file:0:${#file}-7}"
+    
+    # Gets the version of the snap.
+    version=$(snap list | grep wekan | awk -F ' ' '{print $3}')
+
+    # Targets the dump file.
+    restore=$"/snap/wekan/$version/bin/mongorestore"
+
+    # Restores.
+    printf "\nThe database restore is in progress.\n\n"
+    ## Only if you get errors about existing indexes, use this below instead:
+    ## $restore --drop --noIndexRestore wekan --port 27019 $file/dump/wekan
+    $restore --drop wekan --port 27019 $file/dump/wekan
+    printf "\nRestore done.\n"
+
+    # Cleanups
+    rm -rf $file
+}
+
+# Checks is the user is sudo/root.
+if [ "$UID" -ne "0" ]
+then
+    echo "This program must be launched with sudo/root."
+    exit 1
+fi
+
+
+# Start.
+makesRestore $1
+
+```
+
+## Docker Backup and Restore
+
+[Docker Backup and Restore](Export-Docker-Mongo-Data)
+
+[Wekan Docker Upgrade](https://github.com/wekan/wekan-mongodb#backup-before-upgrading)
+
+## Snap Backup
+
+[Snap Backup and Restore](https://github.com/wekan/wekan-snap/wiki/Backup-and-restore)
+
+[Wekan Snap upgrade](https://github.com/wekan/wekan-snap/wiki/Install#5-install-all-snap-updates-automatically-between-0200am-and-0400am)
+
+## Sandstorm Backup
+
+Download Wekan grain with arrow down download button to .zip file. You can restore it later.
+
+[Export data from Wekan Sandstorm grain .zip file](Export-from-Wekan-Sandstorm-grain-.zip-file)
+
+## <a name="cloudron">Cloudron
+
+If those [Backup](Backup) ways are not easily found at [Cloudron](Cloudron), one way is to install [Redash](https://redash.io/) and then backup this way:
+
+Redash works with this kind of queries:
+```json
+{
+	"collection": "accountSettings",
+	"query": {
+		"type": 1
+	},
+	"fields": {
+		"_id": 1,
+		"booleanValue": 1,
+		"createdAt": 1,
+		"modifiedAt": 1,		
+	}
+}
+```
+So:
+
+1) Create this kind of query:
+```json
+{
+	"collection": "boards"
+}
+```
+
+Later when you modify query, you can remove text like boards with double-click-with-mouse and delete-key-at-keyboard (or select characters with mouse and delete-key-at-keyboard), and then click collection/table >> button to insert name of next collection/table.
+
+2) Click Save
+
+3) Click Execute. This will cache query for use with REST API.
+
+4) Click at right top `[...]` => `Show API key`
+
+It looks like this:
+
+https://redash.example.com/api/queries/1/results.json?api_key=...
+
+5) Only when saving first collection/table, Save API key to text file script like this `dl.sh` 
+```bash
+#!/bin/bash
+
+# Example: ./dl.sh boards
+
+export APIKEY=https://redash.example.com/api/queries/1/results.json?api_key=...
+
+curl -o $1.json $APIKEY
+```
+
+6) Run save script like:
+```bash
+./dl.sh boards
+```
+Note: 1) Save 2) Execute => webbrowser can give this kind of timeout,
+but downloading with API script still works:
+
+> wekan
+> Error running query: failed communicating with server. Please check your Internet connection and try again.
+
+7) Repeat steps 1-4 and 6 for every collection/table like boards,cards, etc
+
+8) Remove from downloaded .json files extra query related data, so that it is similar like [any other Wekan database backup JSON files](Export-from-Wekan-Sandstorm-grain-.zip-file)
+
+9) Insert data to some other Wekan install with nosqlbooster like mentioned at page [Backup](Backup)
+
+
@@ -0,0 +1,155 @@
+# Upgrading
+
+Newest WeKan uses MongoDB 6.0.3.
+
+Current working way to upgrade is:
+
+## Docker
+
+1. Create Mongodump of your database like at [Backup page](https://github.com/wekan/wekan/wiki/Backup)
+2. Use newest WeKan docker-compose.yml from https://github.com/wekan/wekan with WRITABLE_PATH setup to Rclone/MinIO like below this page
+3. Mongorestore to MongoDB 6.0.3 database
+4. Use WeKan Admin Panel `Move all attachments to filesystem` button to move all attachments to MinIO.
+5. Create Mongodump, that this time does not have any attachments, and is much smaller.
+6. Mongorestore to MongoDB 6.0.3 database.
+7. Start WeKan.
+
+## Snap
+
+Similar Mongodump and Mongorestore above, with these info:
+- https://github.com/wekan/wekan-snap/wiki/Candidate-WeKan-Snap-Manual-Upgrade
+- https://github.com/wekan/wekan/issues/4780
+
+# Introduction
+
+With Rclone https://rclone.org , it's possible to use many cloud filesystems, like AWS S3, MinIO https://min.io , etc.
+
+Newest WeKan has features to move files between MongoDB GridFS and filesystem.
+
+Instead of filesystem, Rclone mounted cloud filesystem directory can be used, like MinIO.
+
+## Screenshot 1: Move to filesystem button moves to cloud filesystem like MinIO. S3 button does not work yet.
+
+Note: In some cases, only buttons `Move all attachments` at top are visible. In some other cases, there is more visible, like moving all attachments of board, etc, maybe when some have been already moved.
+
+<img src="https://wekan.github.io/rclone/wekan-admin-panel.png" width="100%" alt="Wekan Admin Panel file move" />
+
+## Screenshot 2: Files at MinIO after moving all to filesystem
+
+<img src="https://wekan.github.io/rclone/minio1.png" width="100%" alt="MinIO 1" />
+
+## Screenshot 3: Files at MinIO after moving all to filesystem
+
+<img src="https://wekan.github.io/rclone/minio2.png" width="100%" alt="MinIO 2" />
+
+## Rclone config
+
+Create config for example with command:
+```
+rclone config
+```
+At S3 providers, there is MinIO at https://rclone.org/s3/#minio
+
+`/root/.config/rclone/rclone.conf`
+
+```
+[aws]
+type = s3
+provider = AWS
+access_key_id = ACCESS-KEY-HERE
+secret_access_key = SECRET-KEY-HERE
+region = eu-north-1
+location_constraint = eu-north-1
+acl = private
+
+[minio]
+type = s3
+provider = Minio
+access_key_id = ACCESS-KEY-HERE
+secret_access_key = SECRET-KEY-HERE
+endpoint = http://192.168.0.100:9000
+acl = private
+```
+## Listing files with Rclone
+```
+rclone ls aws:
+
+rclone ls minio:
+```
+## MinIO config
+
+https://min.io
+
+Running MinIO server binary, storing files at `/home/wekan/minio/data`
+```
+MINIO_ROOT_USER=admin MINIO_ROOT_PASSWORD=password ./minio server /home/wekan/minio/data --console-address ":9001"
+```
+Create bucket, access key, secret key. Then connect them with `mc` command installed from https://min.io website, here bucket wekan:
+```
+mc config host add wekan http://192.168.0.100:9000 ACCESS-KEY-HERE SECRET-KEY-HERE
+```
+## Snap
+This uses minimal cache to make it work. Note that Rclone stays at foreground running, showing related messages, it does not daemonize to background.
+```
+sudo su
+
+rclone mount minio:wekan/files /var/snap/wekan/common/files --vfs-cache-mode minimal
+```
+Sometimes it shows this kind of message:
+```
+2022/12/27 10:22:13 NOTICE: S3 bucket wekan path files: Streaming uploads using chunk size 5Mi will have maximum file size of 48.828Gi
+```
+## Docker
+
+Rclone, short story:
+```
+sudo su
+
+rclone mount minio:wekan/files /var/lib/docker/volumes/wekan_wekan-files/_data --vfs-cache-mode minimal
+```
+Longer story:
+
+`docker-compose.yml` at https://github.com/wekan/wekan
+```
+- WRITABLE_PATH=/data
+```
+Docker volumes are there:
+```
+sudo ls /var/lib/docker/volumes/
+
+wekan_wekan-db-dump
+wekan_wekan-db 
+wekan_wekan-files
+```
+Directories there are:
+```
+/var/lib/docker/volumes/_data/attachments
+/var/lib/docker/volumes/_data/avatars
+```
+## Bundle or Source
+
+Set `WRITABLE_PATH`like in Docker example above.
+
+## Development
+
+In Progress direct support without Rclone, if getting it working sometime.
+
+Meteor-Files currently uses official AWS-SDK that does not yet directly support custom endpoint like MinIO:
+- https://github.com/veliovgroup/Meteor-Files/issues/862
+- https://github.com/veliovgroup/Meteor-Files/blob/master/docs/aws-s3-integration.md
+- https://github.com/wekan/wekan/issues/142#issuecomment-1365249290
+
+MinIO code examples:
+- https://github.com/minio/minio-js/tree/master/examples
+
+Related RocketChat docs about MinIO:
+- https://docs.rocket.chat/guides/administration/admin-panel/settings/file-upload/minio
+- https://github.com/RocketChat/Rocket.Chat/tree/develop/apps/meteor/app/file-upload
+- https://github.com/RocketChat/Rocket.Chat/pulls?q=is%3Apr+minio+is%3Aclosed
+
+Storage path during developing WeKan, for example:
+```
+./rebuild-wekan.sh
+
+rclone mount minio:wekan/files /home/wekan/repos/wekan/.meteor/local/.build-garbage-uslyxi.uokel/programs --vfs-cache-mode minimal
+```
@@ -0,0 +1,165 @@
+## Repair Snap WeKan
+
+```
+sudo su
+
+snap stop wekan
+
+export LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/snap/wekan/current/lib/x86_64-linux-gnu
+
+export PATH="/snap/wekan/current/bin:$PATH"
+
+mongod --dbpath "/var/snap/wekan/common" --repair >> /root/repairlog.txt
+
+snap start wekan
+
+exit
+```
+
+Logs from Snap:
+
+https://github.com/wekan/wekan/issues/5073
+
+## Repair Docker WeKan
+
+At step 12 below is actual repair MongoDB command.
+
+Some customer of [WeKan Commercial Support](https://wekan.team/commercial-support/) ordered restore and repair of WeKan MongoDB database at UCS appliance. This was needed when changing back to previous UCS 4.x major version, when in new major UCS 5.x version Docker containers were all the time crashing and restarting, or something else got broken. Here are commands that were used while repairing.
+
+Similarly, MongoDB may require repair, if:
+- MongoDB does not recover from sudden power failure cleanly
+- Disk comes full, that is worst case. Recommended are daily backups, in this case sometimes repair does not work well enough.
+
+1. SSH to UCS appliance as root:
+```
+ssh root@192.168.0.100
+```
+2. If backup or raw database files is at external USB harddrive, look where it is inserted:
+```
+ls /dev
+
+fdisk -l /dev/sdb
+
+fdisk -l /dev/sdc
+
+fdisk -l /dev/sdd
+```
+2. If external USB drive has NTFS file format, and mount complains about not having NTFS support, install NTFS support to Linux:
+```
+apt install ntfs-3g
+```
+3. Mount USB drive to /mnt
+```
+mount /dev/sdd1 /mnt
+```
+4. Stop WeKan Docker containers. If copying raw database files, WeKan and MongoDB should not be running, so that MongoDB would not be even more corrupted. (If MongoDB is running, and you have mongodump backup, you can [Backup with mongorestore](Backup)
+```
+docker stop wekan-db wekan-app
+```
+5. Find WeKan database raw files. MongoDB has various database engines, like WiredTiger, how to save raw data compressed, or other formats. WiredTiger is file format to save compressed MongoDB data. Similar like MySQL has ISAM, InnoDB etc.
+```
+apt -y install mlocate
+updatedb
+locate WiredTiger.wt
+```
+It can show for example USB drive and Docker container directory:
+```
+root@ucs:/mnt/wekan/data/db# locate WiredTiger.wt
+/mnt/wekan/data/db/WiredTiger.wt
+/var/lib/univention-appcenter/apps/wekan/data/db/WiredTiger.wt
+```
+6. Change to newly installed MongoDB data directory:
+```
+cd /var/lib/univention-appcenter/apps/wekan/data/db/
+```
+7. Look at directory files owner permissions:
+```
+ls -lah
+```
+There could be like this:
+```
+-rw-r--r-- 1 tss  tss  1004 Jan 25 13:09 WiredTiger.turtle
+-rw-r--r-- 1 tss  tss  392K Jan 25 13:09 WiredTiger.wt
+```
+8. Move that probably empty newly installed MongoDB data elsewhere:
+```
+mkdir /root/new-empty-wekan-data
+mv * /root/new-empty-wekan-data
+```
+9. Copy MongoDB raw database files from USB harddrive to docker container directory:
+```
+root@ucs-bdc:/var/lib/univention-appcenter/apps/wekan/data/db# cp -pR /mnt/wekan/data/db/* .
+```
+10. Like looked at step 7, change file owner permissions to be correct, and change directory
+```
+chown -R tss:tss *
+cd /root
+```
+11. Find mongod command:
+```
+locate /usr/bin/mongod
+```
+12. Repair Docker WeKan with version of Docker MongoDB that WeKan uses, change mongod path to below. Repairing logged to textfile.
+```
+root@ucs:~# /var/lib/docker/overlay2/7b58483a16a2f67ee50486c00ec669940f7a95d460ee8188966fee0096e81fa2/diff/usr/bin/mongod --dbpath "/var/lib/univention-appcenter/apps/wekan/data/db" --repair >> repairlog.txt
+```
+13. Look what containers are running:
+```
+docker ps
+```
+14. Look what containers are not running:
+```
+docker ps -a
+```
+15. Start MongoDB first:
+```
+docker start wekan-db
+```
+16. Look what happends at MongoDB container:
+```
+docker logs wekan-db
+```
+17. Start WeKan next.
+```
+docker start wekan-app
+```
+18. Look what happends at MongoDB container.
+```
+docker logs wekan-app
+```
+19. Check are both wekan-db and wekan-app containers running, and not restarting:
+```
+docker ps
+```
+20. Try to login to WeKan with webbrowser.
+21. Backup WeKan database now after repair:
+```
+docker exec -it wekan-db bash
+cd /data
+rm -rf dump
+mongodump
+exit
+docker cp wekan-db:/data/dump .
+zip -r wekan-backup-YEAR-MONTH-DATE-TIME-HERE.zip dump
+```
+Now backup is at wekan-backup-YEAR-MONTH-DATE-TIME-HERE.zip file.
+
+22. At your local computer terminal (not at UCS server), transfer file to your local computer with scp:
+```
+scp root@192.168.0.100:/root/wekan-backup-YEAR-MONTH-DATE-TIME-HERE.zip .
+```
+23. Copy backup to external USB harddrive, change YEAR-MONTH-DATE-TIME-HERE to current date and time:
+```
+cp /root/wekan-backup-YEAR-MONTH-DATE-TIME-HERE.zip /mnt/
+```
+24. Look what drives are mounted:
+```
+df -h
+```
+25. Sync and save unwritted data to disk, and unmount external USB harddrive safely:
+```
+sync
+umount /dev/sdd1
+```
+26. Remove external USB harddisk from server.
+27. Login to WeKan, check do all WeKan boards work. In this case, all did work.
@@ -0,0 +1,15 @@
+
+```
+sudo snap stop wekan.wekan
+export LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/snap/wekan/current/lib/x86_64-linux-gnu
+export PATH2=$PATH
+export PATH=/snap/wekan/current/bin:$PATH
+mongodump --port 27019
+sudo snap get wekan > snap-settings.txt
+sudo snap stop wekan.mongodb
+sudo mv /var/snap/wekan/common .
+sudo mkdir /var/snap/wekan/common
+sudo snap refresh wekan --channel=latest/candidate
+```
+
+To be continued...
@@ -0,0 +1,73 @@
+If you know updates to this, please add new issue about it. Make changes to this page by cloning wiki:
+
+```
+git clone https://github.com/wekan/wekan.wiki
+```
+There edit Browser-compatibility-matrix.md and attach it with .txt extension or in .zip file to https://github.com/wekan/wekan/wiki/issues
+
+## Webkit based
+
+Browser | [PWA](PWA) | Mobile | Desktop | OS
+------- | ----| ------ | ------- | -------
+Safari | iOS Yes | iOS Newest | Newest | iOS, macOS
+
+## Firefox based
+
+Any telemetry at any Firefox based browser can be additionally most locked down with arkenfox user JS.
+
+Browser | [PWA](PWA) | Mobile | Desktop | OS
+------- | ----| ------ | ------- | -------
+[Mypal](https://releases.wekan.team/mypal/) | No | No | Newest | For 32bit ReactOS/WinXP/Win7/etc [issue](https://github.com/wekan/wekan/issues/3132), Other 32bit browsers probably not
+Firefox | Android Yes | Android Newest | Newest | Win/Mac/Linux/RasPi
+Morph Browser | No | Yes | Yes | [Ubuntu Touch](https://ubports.com) (based on Ubuntu 16.04) on PinePhone, OnePlus 3, [RasPi3](https://ci.ubports.com/job/rootfs/job/rootfs-rpi/) (not RasPi4 yet). Works best with bluetooth or USB mouse and keyboard.
+[OpenStore App](https://open-store.io/app/wekan.wekanteam) | Yes | Yes | Yes | Based on [Wekan PWA](https://boards.wekan.team/b/D2SzJKZDS4Z48yeQH/wekan-open-source-kanban-board-with-mit-license/s7SkzYviC2e963FkT), [Ubuntu Touch](https://ubports.com) app at [OpenStore](https://open-store.io/app/wekan.wekanteam) using Morph browser with Wekan demo & development server https://boards.wekan.team . Tested on [RasPi3](https://ci.ubports.com/job/rootfs/job/rootfs-rpi/). PWA URL is configured here https://github.com/wekan/wekan-openstore/blob/master/wekan.desktop#L3
+[Waterfox](https://www.waterfox.net) | No | No | Yes | Win/Mac/Linux, more private than Firefox, no tracking
+[Floorp](https://floorp.app) | No | No | Yes | [Win/Mac/Linux](https://github.com/Floorp-Projects/Floorp/releases), more private than Firefox, [Repo](https://github.com/Floorp-Projects/Floorp)
+[Mercury](https://thorium.rocks/mercury) | No | No | Yes | [Win/Linux](https://github.com/Alex313031/Mercury/releases), more private than Firefox, [Repo](https://github.com/Alex313031/Mercury)
+[SeaLion](https://github.com/wicknix/SeaLion) | No | No | Yes | [MacOS 10.7-14.1 x32,x64,ppc,ppc64/Linux x64](https://github.com/wicknix/SeaLion/releases), [Repo](https://github.com/wicknix/SeaLion)
+[LibreWolf](https://librewolf.net) | No | No | Yes | [Win/Mac/Linux](https://librewolf.net/installation/)
+
+## Chromium based
+
+Browser | [PWA](PWA) | Mobile | Desktop | OS
+------- | ----| ------ | ------- | -------
+Chrome | Android Yes | Android Newest | Newest | Win/Mac/Linux
+Chromium | Android Yes | Android Newest | Newest | Win/Mac/Linux/RasPi
+Brave | Android Yes | Android Newest | Newest | Win/Mac/Linux/RasPi
+Vivaldi | Android Yes | Android Newest | Newest | Win/Mac/Linux
+Opera | Android Yes | Android Newest | Newest | Win/Mac/Linux
+Credge, Chromium Edge | Android Yes | Android | Newest | Win/Mac/Linux/Mobile
+[Microsoft Store App](https://www.microsoft.com/fi-fi/p/wekan/9p2mrxvd087r#activetab=pivot:overviewtab) | Yes | Yes | Yes | At Microsoft Store of Windows 10/11 desktop, made with [PWABuilder](https://www.pwabuilder.com/). Based on [Wekan PWA](https://boards.wekan.team/b/D2SzJKZDS4Z48yeQH/wekan-open-source-kanban-board-with-mit-license/s7SkzYviC2e963FkT), changed app from EdgeHTML to Credge based with Wekan demo & development server https://boards.wekan.team
+[Android Play Store App](https://play.google.com/store/apps/details?id=team.wekan.boards.twa) | Yes | Yes | Yes | Based on [Wekan PWA](https://boards.wekan.team/b/D2SzJKZDS4Z48yeQH/wekan-open-source-kanban-board-with-mit-license/s7SkzYviC2e963FkT), made with [PWABuilder](https://www.pwabuilder.com/), uses Android Chrome browser with Wekan demo & development server https://boards.wekan.team
+[Thorium](https://thorium.rocks) | No | Yes | Yes | [Win/Win7/Mac/Linux/Android/RasPi](https://thorium.rocks), speed optimized
+[Supermium](https://github.com/win32ss/supermium) | No | No | Yes | 32bit: Windows XP, Windows 2003
+
+## EdgeHTML based
+
+Browser | [PWA](PWA) | Mobile | Desktop | OS
+------- | ----| ------ | ------- | -------
+Legacy Edge | No | No | Not | Not compatible with newest WeKan. Worked with Wekan v4.19 and before.
+
+## MSHTML based
+
+Browser | [PWA](PWA) | Mobile | Desktop | OS
+------- | ----| ------ | ------- | -------
+Internet Explorer | No | No | No | No | No
+
+## Other ways to create Mobile App with Meteor
+
+https://guide.meteor.com/cordova
+
+Benefits:
+- Can be faster, more stored at mobile
+- Native features integration possibilities
+
+## Desktop app with Meteor
+
+https://forums.meteor.com/t/desktop-electron-meteor-app-with-todesktop/60904
+
+## Optional Payments
+
+- If there is sometime a need to develop payment feature, that does not exist yet
+- https://forums.meteor.com/t/need-help-adding-in-app-purchases-to-a-meteor-app-specifically-adding-subscription-support-for-android-play-store/40510
+- https://www.npmjs.com/package/cordova-plugin-purchase
@@ -0,0 +1,11 @@
+## FerretDB
+
+Replacing MongoDB with FerretDB/SQLite or FerretDB/PostgreSQL. Needs testing, what are correct settings.
+
+https://forums.meteor.com/t/ferretdb-1-18-now-has-oplog-support-trying-replace-mongodb-6-x-with-ferretdb-postgresql-or-ferretdb-sqlite/61092
+
+## ToroDB
+
+ToroDB is not developed anymore. ToroDB was about adding MongoDB proxy to PostgreSQL or MySQL.
+
+https://github.com/wekan/wekan/tree/main/torodb-postgresql