OpenProject¶
Project management.
| Runtime | Container (Docker Swarm), single all-in-one container |
| Tier | Experimental |
| Node | swarm-media |
| Image | openproject/openproject:17 |
| URL | https://openproject.lab.riversfamily.uk |
| Auth | Native OIDC |
| Source | ansible/stacks/experimental/openproject/ |
Self-contained: Postgres and memcached run inside the container, with all
state under /var/openproject on a local volume — similar in spirit to the
Nextcloud AIO appliance.
Configuration¶
OIDC wired via OPENPROJECT_OPENID__CONNECT_AUTHENTIK_* env vars pointing at
the openproject Authentik application. SMTP relay settings are the shared
cluster-wide vars.
Volumes¶
| Volume | Path | Backing | Contents |
|---|---|---|---|
pgdata |
/var/openproject/pgdata |
Local | Bundled Postgres data |
assets |
/var/openproject/assets |
Local | Uploaded attachments |
Secrets¶
None as Swarm secrets — self-contained, so it reads its app secrets inline from group_vars.
| Vault variable | Delivered as | Purpose |
|---|---|---|
vault_openproject_secret_key_base |
Plain env var (SECRET_KEY_BASE) |
Rails secret key base |
vault_openproject_oidc_client_secret |
Plain env var | OIDC client secret |
vault_openproject_admin_password |
Plain env var (OPENPROJECT_SEED__ADMIN__USER__PASSWORD) |
Initial admin password |
Gotchas¶
- Deferred tier: these
vault_*variables live in the[DEFERRED]block ofvault.yml.example, not yet part of the live deploy.