Update cs.py změna Organizační jednotky, Zařízení, Pobočky

- Split image to nginx and decidim
 - Make database migrations persistent, resolves #486

.gitlab/issue_templates/Issue.md

@@ -1,13 +0,0 @@
-### Steps to reproduce
-1. 
-2. 
-3. 
-
-### Expected behaviour
-
-
-### Observed behaviour
-
-
-### Additional data (ticket URL, log, timestamp, stack trace etc.)
-

.gitmodules

@@ -0,0 +1,6 @@
+[submodule "app-vmmgr"]
+	path = apk/vmmgr
+	url = ssh://git@git.spotter.cz:2222/Spotter-Cluster/vmmgr.git
+[submodule "spoc"]
+	path = apk/spoc
+	url = ssh://git@git.spotter.cz:2222/Spotter-Cluster/spoc.git

00-install.sh

@@ -1,32 +0,0 @@
-#!/bin/sh
-
-# For production builds change to DEBUG=0 or comment the line entirely
-export DEBUG=1
-
-SOURCE_DIR=$(realpath $(dirname "${0}"))
-
-# Install shared packages and perform OS customization
-${SOURCE_DIR}/basic.sh
-
-# Install applications
-${SOURCE_DIR}/ckan.sh
-# ${SOURCE_DIR}/crisiscleanup.sh
-# ${SOURCE_DIR}/cts.sh
-${SOURCE_DIR}/gnuhealth.sh
-${SOURCE_DIR}/kanboard.sh
-${SOURCE_DIR}/mifosx.sh
-${SOURCE_DIR}/motech.sh
-${SOURCE_DIR}/opendatakit-build.sh
-${SOURCE_DIR}/opendatakit.sh
-${SOURCE_DIR}/openmapkit.sh
-${SOURCE_DIR}/pandora.sh
-${SOURCE_DIR}/sahana.sh
-${SOURCE_DIR}/sambro.sh
-${SOURCE_DIR}/seeddms.sh
-${SOURCE_DIR}/sigmah.sh
-${SOURCE_DIR}/ushahidi.sh
-
-# Perform cleanup only if DEBUG environment variable is not set
-if [ ${DEBUG:-0} -eq 0 ]; then
-    ${SOURCE_DIR}/zz-cleanup.sh
-fi

README.md

@@ -1,87 +0,0 @@
-This is the main repository containing all installation scripts, configuration and customization of operating system all application present in Spotter Cluster virtual machine.
-
-## Virtual machine specifications
-- **Memory:** 4 GB
-- **CPU:** 1 processor, 2 cores
-- **Hard Disk:** SCSI, 60 GB
-
-## Operating system installation
-
-Download **Alpine Virtual 3.7.0 x86_64** from <https://alpinelinux.org/downloads/> and boot from it. At the login prompt, use the root user without password to log in.
-
-```
-# Set up interfaces (leave the default choices)
-setup-interfaces
-ifup eth0
-
-# Download and launch the setup script  
-wget dl.dasm.cz/alpine.sh
-sh alpine.sh
-```
-
-The script will perform the bare Alpine linux installation into VM using LUKS-on-LVM. The default disk encryption password is `password`. No root password is set.
-
-## Application installation
-
-### First time setup
-```
-# Install git
-apk --no-cache add git
-
-# Clone the repository
-git clone https://gitlab.dasm.cz:8443/Spotter-Cluster/Spotter-Cluster.git
-
-# Enter the repository directory
-cd Spotter-Cluster
-
-# Optional: Edit the install sequence script
-vi 00-install.sh
-
-# Launch the script
-./00-install.sh
-```
-
-### Resuming from a snapshot
-Assumes that the repository has already been cloned.
-```
-# Enter the repository directory
-cd Spotter-Cluster
-
-# Update repository
-git pull
-
-# Optional: Edit the install sequence script
-vi 00-install.sh
-
-# Launch the script
-./00-install.sh
-```
-
-## Port assignment
-
-| Application     |   Internal Port   | HTTP Port | HTTPS Port |
-|-----------------|------------------:|----------:|-----------:|
-| ActiveMQ        |  61616 (ActiveMQ) |       N/A |        N/A |
-| CKAN            |       8003 (HTTP) |      8803 |       8403 |
-| CKAN Datapusher |       8004 (HTTP) |       N/A |        N/A |
-| Crisis Cleanup  |       8005 (HTTP) |      8805 |       8405 |
-| CTS             |       8006 (HTTP) |      8806 |       8406 |
-| GNU Health      |       8008 (HTTP) |      8808 |       8408 |
-| KanBoard        |       8009 (HTTP) |      8809 |       8409 |
-| MariaDB         |      3306 (MySQL) |       N/A |        N/A |
-| Mifos X         |       8012 (HTTP) |      8812 |       8412 |
-| Motech          |       8013 (HTTP) |      8813 |       8413 |
-| ODK Aggregate   | 8015, 8016 (HTTP) |      8815 |       8415 |
-| ODK Build       |       8017 (HTTP) |      8817 |       8417 |
-| OpenMapKit      |       8007 (HTTP) |      8807 |       8407 |
-| Pan.do/ra       |       8002 (HTTP) |      8802 |       8402 |
-| Postfix         |         25 (SMTP) |       N/A |        N/A |
-| Postgres        |   5432 (Postgres) |       N/A |        N/A |
-| RabbitMQ        |       5672 (AMQP) |       N/A |        N/A |
-| Redis           |      6379 (Redis) |       N/A |        N/A |
-| Sahana          |       8001 (HTTP) |      8801 |       8401 |
-| SAMBRO          |       8001 (HTTP) |      8899 |       8499 |
-| SeedDMS         |       8010 (HTTP) |      8810 |       8410 |
-| Sigmah          |       8011 (HTTP) |      8811 |       8011 |
-| Solr            |       8983 (HTTP) |       N/A |        N/A |
-| Ushahidi        |       8014 (HTTP) |      8814 |       8414 |

activemq.sh

@@ -1,15 +0,0 @@
-#!/bin/sh
-
-SOURCE_DIR=$(realpath $(dirname "${0}"))/activemq
-
-# Build Docker container
-docker build -t activemq ${SOURCE_DIR}
-
-# Configure ActiveMQ
-mkdir -p /srv/activemq/data
-chown -R 61616:61616 /srv/activemq/data
-
-# Configure Solr service
-cp ${SOURCE_DIR}/etc/init.d/activemq /etc/init.d/activemq
-rc-update add activemq
-service activemq start

activemq/Dockerfile

@@ -1,35 +0,0 @@
-FROM alpine:3.7
-MAINTAINER Disassembler <disassembler@dasm.cz>
-
-RUN \
- # Install Java 1.8 JRE 
- apk --no-cache add openjdk8-jre-base paxctl \
- # Fix grsec attributes to loosen memory protection restrictions
- && paxctl -cm /usr/lib/jvm/java-1.8-openjdk/jre/bin/java \
- && paxctl -cm /usr/lib/jvm/java-1.8-openjdk/bin/java \
- # Cleanup
- && apk --no-cache del paxctl
-
-RUN \
- # Download and install ActiveMQ
- wget http://archive.apache.org/dist/activemq/5.15.2/apache-activemq-5.15.2-bin.tar.gz -O /tmp/activemq.tgz \
- && tar xf /tmp/activemq.tgz -C /srv \
- && mv /srv/apache-activemq-5.15.2 /srv/activemq \
- && rm -f /tmp/activemq.tgz \
- # Create OS user
- && addgroup -S -g 61616 activemq \
- && adduser -S -u 61616 -h /srv/activemq -s /bin/false -g activemq -G activemq activemq \
- && mkdir /srv/activemq/tmp \
- && chown activemq:activemq /srv/activemq/tmp \
- # Configure Java heap size
- && sed -i "s/-Xms64M -Xmx1G/-Xms32M -Xmx256M/" /srv/activemq/bin/env \
- # Make start/stop script visible globally
- && ln -s /srv/activemq/bin/activemq /usr/local/bin/activemq
-
-COPY docker/ /
-
-VOLUME ["/srv/activemq/data"]
-EXPOSE 61616
-
-USER activemq
-CMD ["activemq", "console"]

activemq/etc/init.d/activemq

@@ -1,20 +0,0 @@
-#!/sbin/openrc-run
-
-description="ActiveMQ docker container"
-
-depend() {
-	need docker net
-	use dns logger netmount
-}
-
-start() {
-	/usr/bin/docker run -d --rm \
-	--name activemq \
-	-h activemq \
-	-v /srv/activemq/data:/srv/activemq/data \
-	activemq
-}
-
-stop() {
-	/usr/bin/docker stop activemq
-}

alpine.sh

@@ -1,100 +0,0 @@
-#!/bin/sh
-
-# Prerequisites
-# setup-interfaces
-# ifup eth0
-
-# Set up repositories  
-cat <<EOF >/etc/apk/repositories
-http://dl-cdn.alpinelinux.org/alpine/v3.7/main
-http://dl-cdn.alpinelinux.org/alpine/v3.7/community
-#http://dl-cdn.alpinelinux.org/alpine/edge/main
-#http://dl-cdn.alpinelinux.org/alpine/edge/community
-#http://dl-cdn.alpinelinux.org/alpine/edge/testing
-EOF
-
-# Install disk management tools  
-apk --no-cache add lvm2 cryptsetup e2fsprogs syslinux
-
-# Create disk partitions
-cat <<EOF | fdisk /dev/sda
-n
-p
-1
-
-+100m
-a
-1
-n
-p
-2
-
-
-t
-2
-8e
-w
-EOF
-
-# Set up partition encryption
-echo -n 'password' | cryptsetup -q luksFormat /dev/sda2
-echo -n 'password' | cryptsetup open --type luks /dev/sda2 system
-
-# Set up LVM
-pvcreate /dev/mapper/system
-vgcreate vg0 /dev/mapper/system
-lvcreate -L 4G vg0 -n swap
-lvcreate -l 100%FREE vg0 -n root
-
-# Format
-mkfs.ext4 -m0 /dev/sda1
-mkfs.ext4 -m1 /dev/vg0/root
-mkswap /dev/vg0/swap
-
-# Mount
-mount -t ext4 /dev/vg0/root /mnt
-mkdir /mnt/boot
-mount -t ext4 /dev/sda1 /mnt/boot
-
-# Install Alpine linux
-setup-disk -m sys /mnt
-
-# Update boot-time volume information
-BOOT_UUID=$(blkid /dev/sda1 | awk '{print $2}' | tr -d '"')
-cat <<EOF >/mnt/etc/fstab
-/dev/vg0/root                               /       ext4    rw,noatime,data=ordered   0   1
-${BOOT_UUID}   /boot   ext4    rw,noatime,data=ordered   0   2
-/dev/vg0/swap                               swap    swap    defaults                  0   0
-EOF
-echo "system /dev/sda2 none luks" >/mnt/etc/crypttab
-
-# Rebuild initfs
-sed -i 's/lvm/lvm cryptsetup/' /mnt/etc/mkinitfs/mkinitfs.conf
-mkinitfs -c /mnt/etc/mkinitfs/mkinitfs.conf -b /mnt $(ls /mnt/lib/modules)
-
-# Update extlinux
-sed -i 's/rootfstype=ext4/rootfstype=ext4 cryptroot=\/dev\/sda2 cryptdm=system/' /mnt/etc/update-extlinux.conf
-chroot /mnt update-extlinux
-
-# Set time zone
-chroot /mnt setup-timezone -z Europe/Prague
-
-# Set hostname
-echo 'vm' >/mnt/etc/hostname
-sed -i 's/localhost/vm/' /mnt/etc/network/interfaces
-sed -i 's/localhost /vm localhost /' /mnt/etc/hosts
-
-# Enable services on boot
-ln -s /etc/init.d/networking /mnt/etc/runlevels/boot
-ln -s /etc/init.d/urandom /mnt/etc/runlevels/boot
-
-# Install bootloader to MBR
-dd bs=440 count=1 conv=notrunc if=/mnt/usr/share/syslinux/mbr.bin of=/dev/sda
-
-# Unmount and shut down
-umount /mnt/boot
-umount /mnt
-swapoff -a
-vgchange -a n
-cryptsetup luksClose system
-poweroff

apk/py3-secure-cookie/APKBUILD

@@ -0,0 +1,28 @@
+# Maintainer: Disassembler <disassembler@dasm.cz>
+pkgname=py3-secure-cookie
+_pkgname=secure-cookie
+pkgver=0.1.0
+pkgrel=0
+pkgdesc="Secure cookie and session interface for WSGI applications"
+url="https://secure-cookie.readthedocs.io/"
+arch="noarch"
+license="MIT"
+depends="python3"
+makedepends="py3-setuptools"
+checkdepends="py3-pytest py3-werkzeug"
+source="https://files.pythonhosted.org/packages/source/${_pkgname:0:1}/$_pkgname/$_pkgname-$pkgver.tar.gz"
+builddir="$srcdir/$_pkgname-$pkgver"
+
+build() {
+	python3 setup.py build
+}
+
+package() {
+	python3 setup.py install --prefix=/usr --root="$pkgdir"
+}
+
+check() {
+	PYTHONPATH=$PWD/build/lib pytest
+}
+
+sha512sums="2e57dba6f73ceb03eda33c804dbe2277c9fe700dd1be219bb3d8d43a5c9105c2323fb6b28d74d3a1dfc8fbbd938b91ab54d3e1bac1dc74490335b1d27e43b55a  secure-cookie-0.1.0.tar.gz"

apk/spoc

@@ -0,0 +1 @@
+Subproject commit 8c22df2e71de329a286e75af9bff69e82876db35

apk/vmmgr

@@ -0,0 +1 @@
+Subproject commit 1c810db9472f50bd9dbe1e0f38df72590b120124

basic.sh

@@ -1,55 +0,0 @@
-#!/bin/sh
-
-SOURCE_DIR=$(realpath $(dirname "${0}"))/basic
-
-# Install packages
-apk --no-cache add --virtual .useful curl git file htop libressl openssh-server openssh-sftp-server
-apk --no-cache add docker gettext kbd-misc python2 nginx
-
-# Copy profile files and settings
-mkdir -p /root/.config/htop /root/.ssh
-cp ${SOURCE_DIR}/root/.profile /root/.profile
-cp ${SOURCE_DIR}/root/.ssh/authorized_keys /root/.ssh/authorized_keys
-cp ${SOURCE_DIR}/root/.config/htop/htoprc /root/.config/htop/htoprc
-
-# Copy boot configuration
-cp ${SOURCE_DIR}/boot/extlinux.conf /boot/extlinux.conf
-cp ${SOURCE_DIR}/boot/spotter.txt /boot/spotter.txt
-cp ${SOURCE_DIR}/etc/inittab /etc/inittab
-
-# Enable support for Czech characters
-cp ${SOURCE_DIR}/etc/rc.conf /etc/rc.conf
-cp ${SOURCE_DIR}/etc/conf.d/consolefont /etc/conf.d/consolefont
-
-# Set legal banner with URL
-cp ${SOURCE_DIR}/etc/issue.template /etc/issue.template
-cp ${SOURCE_DIR}/sbin/issue-gen /sbin/issue-gen
->/etc/motd
-
-# Configure NTP client
-cp ${SOURCE_DIR}/etc/conf.d/ntpd /etc/conf.d/ntpd
-
-# Create a self-signed certificate
-mkdir /etc/ssl/private
-openssl req -x509 -new -out /etc/ssl/certs/services.pem -keyout /etc/ssl/private/services.key -nodes -days 3654 -subj "/C=CZ/CN=$(hostname -f)"
-chmod 640 /etc/ssl/private/services.key
-
-# Configure nginx
-mkdir /etc/nginx/apps
-cp ${SOURCE_DIR}/etc/nginx/nginx.conf /etc/nginx/nginx.conf
-cp ${SOURCE_DIR}/etc/nginx/conf.d/default.conf /etc/nginx/conf.d/default.conf
-
-# Copy Portal resources
-cp ${SOURCE_DIR}/usr/local/bin/portal-app-manager /usr/local/bin/portal-app-manager
-cp -r ${SOURCE_DIR}/srv/portal /srv/portal
-
-# Configure services
-for SERVICE in consolefont crond nginx ntpd sshd; do
-    rc-update add ${SERVICE} boot
-    service ${SERVICE} start
-done
-
-# Configure Docker service
-cp ${SOURCE_DIR}/etc/init.d/docker /etc/init.d/docker
-rc-update add docker
-service docker start

basic/boot/extlinux.conf

@@ -1,9 +0,0 @@
-DEFAULT vm
-PROMPT 0
-ALLOWOPTIONS 0
-NOESCAPE 1
-DISPLAY spotter.txt
-LABEL vm
-  LINUX vmlinuz-virthardened
-  INITRD initramfs-virthardened
-  APPEND root=/dev/vg0/root modules=sd-mod,usb-storage,ext4 pax_nouderef quiet rootfstype=ext4 cryptroot=/dev/sda2 cryptdm=system

basic/boot/spotter.txt

@@ -1,4 +0,0 @@
-
-
-Startuji SpotterVM...
-

basic/etc/conf.d/ntpd

@@ -1 +0,0 @@
-NTPD_OPTS="-N -p tik.cesnet.cz -p tak.cesnet.cz"

basic/etc/init.d/docker

@@ -1,42 +0,0 @@
-#!/sbin/openrc-run
-# Copyright 1999-2013 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-
-command="${DOCKERD_BINARY:-/usr/bin/dockerd}"
-pidfile="${DOCKER_PIDFILE:-/run/${RC_SVCNAME}.pid}"
-command_args="-p \"${pidfile}\" ${DOCKER_OPTS}"
-DOCKER_LOGFILE="${DOCKER_LOGFILE:-/var/log/${RC_SVCNAME}.log}"
-DOCKER_ERRFILE="${DOCKER_ERRFILE:-${DOCKER_LOGFILE}}"
-DOCKER_OUTFILE="${DOCKER_OUTFILE:-${DOCKER_LOGFILE}}"
-start_stop_daemon_args="--background \
-	--stderr \"${DOCKER_ERRFILE}\" --stdout \"${DOCKER_OUTFILE}\""
-
-grsecdir=/proc/sys/kernel/grsecurity
-
-depend() {
-	need sysfs
-}
-
-start_pre() {
-	checkpath -f -m 0644 -o root:docker "$DOCKER_LOGFILE"
-
-	for i in $disable_grsec; do
-		if [ -e "$grsecdir/$i" ]; then
-			einfo " Disabling $i"
-			echo 0 > "$grsecdir/$i"
-		fi
-	done
-	ulimit -n 1048576
-
-	# Having non-zero limits causes performance problems due to accounting overhead
-	# in the kernel. We recommend using cgroups to do container-local accounting.
-	ulimit -p unlimited
-
-	return 0
-}
-
-start_post() {
-	until [ -e /var/run/docker.sock ]; do
-		usleep 100000
-	done
-}

basic/etc/issue.template

@@ -1,36 +0,0 @@
-
-   _____             _   _         __      ____  __ 
-  / ____|           | | | |        \\ \\    / /  \\/  |
- | (___  _ __   ___ | |_| |_ ___ _ _\\ \\  / /| \\  / |
-  \\___ \\| '_ \\ / _ \\| __| __/ _ \\ '__\\ \\/ / | |\\/| |
-  ____) | |_) | (_) | |_| ||  __/ |   \\  /  | |  | |
- |_____/| .__/ \\___/ \\__|\\__\\___|_|    \\/   |_|  |_|
-        | |                                         
-        |_|
-
-
-
-
- UPOZORNĚNÍ: Neoprávněný přístup k tomuto zařízení je zakázán.
- Musíte mít výslovné oprávnění k přístupu nebo konfiguraci tohoto zařízení.
- Neoprávněné pokusy a kroky k přístupu nebo používání tohoto systému mohou mít
- za následek občanské nebo trestní sankce.
-
-
- CAUTION: Unauthozired access to this device is prohibited.
- You must have explicit, authorized permission to access or configure this
- device. Unauthorized attempts and actions to access or use this system may
- result in civil or criminal penalties.
-
-
-
-
- Pro přístup k aplikacím otevřete URL https://${URL}/ ve Vašem
- internetovém prohlížeči.
-
-
-
-
-
-
-

basic/etc/nginx/conf.d/default.conf

@@ -1,17 +0,0 @@
-server {
-    listen [::]:80 default_server ipv6only=off;
-    return 301 https://$host$request_uri;
-}
-
-server {
-    listen [::]:443 ssl http2 default_server ipv6only=off;
-
-    add_header Strict-Transport-Security "max-age=31536000;";
-
-    root /srv/portal;
-    index index.html;
-
-    location / {
-        try_files $uri $uri/ =404;
-    }
-}

basic/root/.profile

@@ -1,2 +0,0 @@
-alias ll="ls -la"
-alias view="vi"

basic/root/.ssh/authorized_keys

@@ -1,2 +0,0 @@
-ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILc3Mu7OlKrV7VqDQZ31vT3I3JJxtNNBiemUTRQVOZ3I Disassembler
-ssh-rsa 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 vampola.karel@gmail.com

basic/sbin/issue-gen

@@ -1,4 +0,0 @@
-#!/bin/sh
-
-export URL=$(ip route get 1 | awk '{print $NF;exit}')
-envsubst </etc/issue.template >/etc/issue

basic/srv/portal/css/style.css

@@ -1,85 +0,0 @@
-* {
-    margin: 0;
-    padding: 0;
-    border: 0;
-}
-
-body {
-    font-family: 'Calibri', 'Verdana', 'Tahoma', sans-serif;
-    background-color: silver;
-    color: black;
-    line-height: 150%;
-    margin: 25px 30px;
-}
-
-a {
-    text-decoration: none;
-}
-
-h1, h2 {
-    font-size: 150%;
-    font-weight: normal;
-}
-
-h2 a {
-    color: inherit;
-}
-
-h2 img {
-    float: right;
-    margin-left: 10px;
-    margin-bottom:10px;
-    width: 100px;
-    height: 100px;
-}
-
-ul {
-    margin-left: 30px;
-}
-
-header {
-    color: white;
-}
-
-header h1 {
-    font-weight: bold;
-}
-
-header p {
-    padding: 0px;
-    margin: 0px;
-}
-
-.c, .c2 {
-    background-color: white;
-    position: relative;
-    min-width: 365px;
-    max-width: 365px;
-    width: 90%;
-    float: left;
-    min-height: 175px;
-    margin-top: 13px;
-    margin-right: 13px;
-    border: solid 1px black;
-    padding: 10px;
-}
-
-.c {
-    display: none;
-}
-
-.c2 {
-    max-width: 765px;
-    width: 95%;
-}
-
-.ico {
-    margin-right: 5px;
-    width: 20px;
-    height: 20px;
-    vertical-align: top;
-}
-
-.cleaner {
-    clear: both;
-}

basic/srv/portal/index.html

@@ -1,306 +0,0 @@
-<!DOCTYPE html>
-<html lang="cs">
-    <head>
-        <meta charset="utf-8">
-        <meta name="author" content="TS">
-        <meta name="copyright" content="page is under CC BY-NC-ND 3.0 CZ">
-        <meta name="generator" content="Spotter.ngo">
-        <meta name="viewport" content="width=device-width, initial-scale=1">
-        <title>Cluster NGO</title>
-        <link rel="icon" href="img/cluster_spotter.png" type="image/png">
-        <link rel="stylesheet" href="css/style.css" type="text/css" media="screen">
-        <script src="js/jquery-3.3.1.min.js" type="text/javascript"></script>
-        <script src="js/script.js" type="text/javascript"></script>
-    </head>
-    <body>
-        <header>
-            <h1>CLUSTER NGO</h1>
-            <p>Sada softwarových nástrojů určená pro krizový management.</p>
-        </header>
-
-        <div class="c c2" id="sahana-eden">
-            <h2><a href="#"><img src="img/EDEN.png" alt="Sahana EDEN" title="Sahana EDEN">Sahana EDEN</a></h2>
-            <p><strong>Registr kontaktů</strong> asociací, organizací, jednotek zaměstnanců, dobrovolníků, <strong>Registr prostředků</strong>, materiálních zdrojů určených pro činnost v krizových situacích, <strong>logistika</strong> krizového zboží ve skladištích, úkrytech, <strong>organizace lidských zdrojů</strong>, diobrovolníků, <strong>mapová vizualizace</strong> pro lokalizaci a popis krizové události a <strong>mnoho dalších funkcí</strong>.</p>
-            <ul>
-                <li><strong>Login:</strong> <span class="login"></span></li>
-                <li><strong>Heslo:</strong> <span class="password"></span></li>
-            </ul>
-        </div>
-
-        <div class="c" id="sahana-eden-demo">
-            <h2><a href="#"><img src="img/EDEN.png" alt="Sahana EDEN DEMO" title="Sahana EDEN DEMO">Sahana EDEN DEMO</a></h2>
-            <p>Přístup určený k bezpečnému vyzkoušení aplikace. Zde můžete přidávat i mazat testovací data.</p>
-            <ul>
-                <li><strong>Login:</strong> <span class="login"></span></li>
-                <li><strong>Heslo:</strong> <span class="password"></span></li>
-            </ul>
-        </div>
-
-        <div class="c" id="sambro">
-            <h2><a href="#"><img src="img/EDEN.png" alt="Sahana EDEN SAMBRO" title="Sahana EDEN SAMBRO">Sahana EDEN SAMBRO</a></h2>
-            <p>Samostatná instance Sahana EDEN s šablonou SAMBRO.</p>
-            <ul>
-                <li><strong>Login:</strong> <span class="login"></span></li>
-                <li><strong>Heslo:</strong> <span class="password"></span></li>
-            </ul>
-        </div>
-
-        <div class="c" id="sambro-mobile">
-            <h2><a href="#"><img src="img/EDEN.png" alt="SAMBRO Mobile" title="SAMBRO Mobile">SAMBRO Mobile</a></h2>
-            <p>Mobilní klient k aplikaci Sahana EDEN.<br>
-                <a href="https://itunes.apple.com/us/app/sambro-mobile/id1127251669"><img src="img/ios.png" class="ico" alt="IOS">IOS 6.0 a vyšší</a><br>
-                <a href="https://play.google.com/store/apps/details?id=io.sahana.sambro.mobile"><img src="img/android.png" class="ico" alt="Android">Android 4.0 a vyšší</a>
-            </p>
-            <ul>
-                <li><strong>URL:</strong> <span class="clienturl"></span></li>
-            </ul>
-        </div>
-
-        <div class="c" id="crisis-cleanup">
-            <h2><a href="#"><img src="img/Crisis_Cleanup.png" alt="Crisis Cleanup" title="Crisis Cleanup">Crisis Cleanup</a></h2>
-            <p><strong>Mapování krizové pomoci</strong> při odstraňování následků katastrof a koordinaci práce. Jde o majetek, ne o lidi.</p>
-            <ul>
-                <li><strong>Login:</strong> <span class="login"></span></li>
-                <li><strong>Heslo:</strong> <span class="password"></span></li>
-            </ul>
-        </div>
-
-        <div class="c" id="ckan">
-            <h2><a href="#"><img src="img/CKAN.png" alt="CKAN" title="CKAN">CKAN</a></h2>
-            <p><strong>Repository</strong> management a datová analýza pro vytváření otevřených dat.</p>
-            <ul>
-                <li><strong>Login:</strong> <span class="login"></span></li>
-                <li><strong>Heslo:</strong> <span class="password"></span></li>
-            </ul>
-        </div>
-
-        <div class="c" id="opendatakit-build">
-            <h2><a href="#"><img src="img/ODK.png" alt="Open Data Kit" title="Open Data Kit">ODK Build</a></h2>
-            <p><strong>Sběr dat s pomocí smartphone</strong>.<br>Aplikace pro návrh formulářů<br>
-                <a href="http://opendatakit.org/xiframe/">XLSForm</a> - online konverter XLS.
-            </p>
-        </div>
-
-        <div class="c" id="opendatakit-clients">
-            <h2><a href="#"><img src="img/ODK_Collect.png" alt="Open Data Kit" title="Open Data Kit">ODK Collect</a></h2>
-            <p>Mobilní aplikace<br>
-                <a href="https://play.google.com/store/apps/details?id=org.odk.collect.android"><img src="img/android.png" class="ico" alt="ODK Collect">ODK Collect pro Android</a><br>
-            </p>
-            <ul>
-                <li><strong>URL:</strong> <span class="clienturl"></span></li>
-            </ul>
-        </div>
-
-        <div class="c" id="opendatakit">
-            <h2><a href="#"><img src="img/ODK.png" alt="Open Data Kit" title="Open Data Kit">ODK Aggregate</a></h2>
-            <p><strong>Sběr dat s pomocí smartphone</strong>.<br>
-                <a href="http://geoodk.com">GeoODK Collect</a> - náhrada papírových dotazníků smartphonem.
-            </p>
-            <ul>
-                <li><strong>Login:</strong> <span class="login"></span></li>
-                <li><strong>Heslo:</strong> <span class="password"></span></li>
-            </ul>
-        </div>
-
-        <div class="c" id="openmapkit">
-            <h2><a href="#"><img src="img/OMK.png" alt="Open Map Kit" title="Open Map Kit">OpenMapKit Server</a></h2>
-            <p><strong>Sběr dat s pomocí smartphone</strong>.<br>
-            <ul>
-                <li><strong>Login:</strong> <span class="login"></span></li>
-                <li><strong>Heslo:</strong> <span class="password"></span></li>
-            </ul>
-        </div>
-
-        <div class="c" id="geoodk-clients">
-            <h2><a href="#"><img src="img/GeoODK_Collect.png" alt="GeoODK Collect" title="GeoODK Collect">GeoODK Collect</a></h2>
-            <p>Mobilní aplikace<br>
-                <a href="https://play.google.com/store/apps/details?id=com.geoodk.collect.android"><img src="img/android.png" class="ico" alt="GeoODK Collect">GeoODK Collect pro Android</a>
-            </p>
-            <ul>
-                <li><strong>URL:</strong> <span class="clienturl"></span></li>
-            </ul>
-        </div>
-
-        <div class="c" id="openmapkit-clients">
-            <h2><a href="#"><img src="img/OMK.png" alt="Open Map Kit" title="Open Map Kit">OpenMapKit</a></h2>
-            <p>Mobilní aplikace<br>
-                <a href="https://play.google.com/store/apps/details?id=org.odk.collect.android"><img src="img/android.png" class="ico" alt="ODK Collect">ODK Collect pro Android</a><br>
-                <a href="https://play.google.com/store/apps/details?id=org.redcross.openmapkit"><img src="img/android.png" class="ico" alt="Android">OpenMapKit pro Android 4.1 a vyšší</a>
-            </p>
-            <ul>
-                <li><strong>URL:</strong> <span class="clienturl"></span></li>
-            </ul>
-        </div>
-
-        <div class="c" id="frontlinesms">
-            <h2><a href="#"><img src="img/FrontlineSMS.png" alt="FrontlineSMS" title="FrontlineSMS">FrontlineSMS</a></h2>
-            <p><strong>SMS messaging</strong> přes veřejné datové brány</p>
-            <ul>
-                <li><strong>Login:</strong> <span class="login"></span></li>
-                <li><strong>Heslo:</strong> <span class="password"></span></li>
-            </ul>
-        </div>
-
-        <div class="c" id="seeddms">
-            <h2><a href="#"><img src="img/SeedDMS.png" alt="SeedDMS" title="SeedDMS">SeedDMS</a></h2>
-            <p><strong>Dokument management</strong> na dokumentaci a projektovou dokumentaci</p>
-            <ul>
-                <li><strong>Login:</strong> <span class="login"></span></li>
-                <li><strong>Heslo:</strong> <span class="password"></span></li>
-            </ul>
-        </div>
-
-        <div class="c" id="pandora">
-            <h2><a href="#"><img src="img/Pandora.png" alt="Pan.do/ra" title="Pan.do/ra">Pan.do/ra</a></h2>
-            <p><strong>Media management</strong> na foto a video z krizové události. Tvorba metadat, komentářů, lokalizace v čase a na mapě.</p>
-            <ul>
-                <li><strong>Login:</strong> <span class="login"></span></li>
-                <li><strong>Heslo:</strong> <span class="password"></span></li>
-            </ul>
-        </div>
-
-        <div class="c" id="ushahidi">
-            <h2><a href="#"><img src="img/Ushahidi.png" alt="Ushahidi" title="Ushahidi">Ushahidi</a></h2>
-            <p>Reakce na krizovou událost. Shromažďujte zprávy od obětí a pracovníků v terénu prostřednictvím SMS, e-mailu, webu, Twitteru.</p>
-            <ul>
-                <li><strong>Login:</strong> <span class="login"></span></li>
-                <li><strong>Heslo:</strong> <span class="password"></span></li>
-            </ul>
-        </div>
-
-        <div class="c" id="ushahidi-mobile">
-            <h2><a href="#"><img src="img/Ushahidi_mobile.png" alt="Ushahidi" title="Ushahidi">Ushahidi Mobile</a></h2>
-            <p>Mobilní aplikace Ushahidi pro<br>
-                <a href="https://itunes.apple.com/us/app/ushahidi-mobile/id1205994516?mt=8"><img src="img/ios.png" class="ico" alt="IOS">IOS 9.0 a vyšší</a><br>
-                <a href="https://play.google.com/store/apps/details?id=com.ushahidi.mobile"><img src="img/android.png" class="ico" alt="Android">Android 4.4 a vyšší</a>
-            </p>
-            <ul>
-                <li><strong>URL:</strong> <span class="clienturl"></span></li>
-            </ul>
-        </div>
-
-        <div class="c" id="sms-sync-gateway">
-            <h2><a href="#"><img src="img/SMS_Sync.png" alt="SMS Sync Gateway" title="SMS Sync Gateway">SMS Sync Gateway</a></h2>
-            <p>Mobilní aplikace pro<br>
-                <a href="https://play.google.com/store/apps/details?id=org.addhen.smssync"><img src="img/android.png" class="ico" alt="Android">Android 2.3 a vyšší</a>
-            </p>
-        </div>
-
-        <div class="c" id="kanboard">
-            <h2><a href="#"><img src="img/Kanboard.png" alt="Kanboard" title="Kanboard">Kanboard</a></h2>
-            <p>Usnadňuje tvorbu a řízení projektů s pomocí Kanban metodiky.</p>
-            <ul>
-                <li><strong>Login:</strong> <span class="login"></span></li>
-                <li><strong>Heslo:</strong> <span class="password"></span></li>
-            </ul>
-        </div>
-
-        <div class="c" id="kanboard-mobile">
-            <h2><a href="#"><img src="img/Kanboard.png" alt="Kanboard" title="Kanboard">Kanboard Mobile</a></h2>
-            <p>Mobilní aplikace<br>
-                <a href="https://play.google.com/store/apps/details?id=eu.it_quality.kanboard"><img src="img/android.png" class="ico" alt="KanBoard">KanBoard client pro Android 4.1 a vyšší</a><br>
-                <a href="https://f-droid.org/packages/in.andres.kandroid/"><img src="img/android.png" class="ico" alt="Android">Kandroid pro Android 4.2 a vyšší</a>
-            </p>
-            <ul>
-                <li><strong>URL:</strong> <span class="clienturl"></span></li>
-            </ul>
-        </div>
-
-        <div class="c" id="cts">
-            <h2><a href="#"><img src="img/CTS.png" alt="CTS" title="CTS">CTS</a></h2>
-            <p>Logistika hmotné pomoci pro humanitární potřeby.</p>
-            <ul>
-                <li><strong>Login:</strong> <span class="login"></span></li>
-                <li><strong>Heslo:</strong> <span class="password"></span></li>
-            </ul>
-        </div>
-
-        <div class="c" id="gnuhealth">
-            <h2><a href="#"><img src="img/GNU_Health.png" alt="GNU Health" title="GNU Health">GNU Health</a></h2>
-            <p>Zdravotní a nemocniční informační systém.</p>
-            <ul>
-                <li><strong>Login:</strong> <span class="login"></span></li>
-                <li><strong>Heslo:</strong> <span class="password"></span></li>
-                <li><strong>Heslo k demu:</strong> <span class="demopassword">gnusolidario</span></li>
-            </ul>
-        </div>
-
-        <div class="c" id="gnuhealth-clients">
-            <h2><a href="#"><img src="img/GNU_Health.png" alt="GNU Health" title="GNU Health">GNU Health klienti</a></h2>
-            <p>Klientské aplikace platformy Tryton GNU Health pro<br>
-                <a href="https://downloads.tryton.org/4.2/tryton-last.exe"><img src="img/Windows.png" class="ico" alt="Windows">Windows</a><br>
-                <a href="https://downloads.tryton.org/4.2/tryton-last.dmg"><img src="img/MacOS.png" class="ico" alt="MacOS">MacOS</a><br>
-                <a href="https://downloads.tryton.org/4.2/tryton-last.tar.gz"><img src="img/Linux.png" class="ico" alt="Linux">Linux</a>
-            </p>
-            <ul>
-                <li><strong>URL:</strong> <span class="clienturl"></span></li>
-            </ul>
-        </div>
-
-        <div class="c" id="sigmah">
-            <h2><a href="#"><img src="img/Sigmah.png" alt="Sigmah" title="Sigmah">Sigmah</a></h2>
-            <p>Rozpočtování získávání finančních prostředků.</p>
-            <ul>
-                <li><strong>Login:</strong> <span class="login"></span></li>
-                <li><strong>Heslo:</strong> <span class="password"></span></li>
-            </ul>
-        </div>
-
-        <div class="c" id="motech">
-            <h2><a href="#"><img src="img/Motech.png" alt="Motech" title="Motech">Motech</a></h2>
-            <p>Integrace zdravotnických a komunikačních služeb.</p>
-            <ul>
-                <li><strong>Login:</strong> <span class="login"></span></li>
-                <li><strong>Heslo:</strong> <span class="password"></span></li>
-            </ul>
-        </div>
-
-        <div class="c" id="mifosx">
-            <h2><a href="#"><img src="img/MifosX.png" alt="Mifos X" title="Mifos X">Mifos X</a></h2>
-            <p>Nástroj na rozvojovou, humanitární pomoc a mikrofinancování.</p>
-            <ul>
-                <li><strong>Login:</strong> <span class="login"></span></li>
-                <li><strong>Heslo:</strong> <span class="password"></span></li>
-            </ul>
-        </div>
-
-        <div class="c" id="mifosx-mobile">
-            <h2><a href="#"><img src="img/MifosX_Mobile.png" alt="Mifos X" title="Mifos X">Mifos X</a></h2>
-            <p>Mobilní aplikace<br>
-                <a href="https://play.google.com/store/apps/details?id=com.mifos.mifosxdroid"><img src="img/android.png" class="ico" alt="KanBoard">Mifos X client pro Android 3.0 a vyšší</a><br>
-            </p>
-            <ul>
-                <li><strong>URL:</strong> <span class="clienturl"></span></li>
-                <li><strong>Tenant ID:</strong> <span>default</span></li>
-            </ul>
-        </div>
-
-        <div class="c" id="diaspora">
-            <h2><a href="#"><img src="img/Diaspora.png" alt="diaspora*" title="diaspora*">diaspora*</a></h2>
-            <p>Autonomní sociání síť s možností propojení do cizích sociálních sítí.</p>
-            <ul>
-                <li><strong>Login:</strong> <span class="login"></span></li>
-                <li><strong>Heslo:</strong> <span class="password"></span></li>
-            </ul>
-        </div>
-
-        <div class="c" id="openid">
-            <h2><a href="http://openid.net"><img src="img/OpenID.png" alt="OpenID" title="OpenID">OpenID</a></h2>
-            <p>Pro ověření identity budete potřebovat účet OpenID. Zaregistrujte se. Registraci využijete v software Sahana EDEN.</p>
-        </div>
-
-        <div class="c" id="posm">
-            <h2><a href="#"><img src="img/POSM.png" alt="POSM" title="POSM">POSM</a></h2>
-            <p><strong>Portable Open Street Map</strong> - softwarový balík na offline používání OpenStreet Map v samostatné virtuální image.</p>
-        </div>
-
-        <div class="c" id="cluster-spotter">
-            <h2><a href="http://spotter.ngo"><img src="img/cluster_spotter.png" alt="Cluster Spotter" title="Cluster Spotter">Cluster Spotter</a></h2>
-            <p>Info o Misi a Vizi projektu, včetně kontaktu. Zachovejte data bezpečná a neposkytujte je nepovolaným osobám.<br>
-                <small>CC 4.0 CZ by <a href="http://trendspotter.cz">TS</a>. Content is based on PD, CC, GNU/GPL. Brand names, trademarks belong to their respective holders.</small>
-            </p>
-        </div>
-
-        <div class="cleaner"></div>
-    </body>
-</html>

basic/srv/portal/js/apps.json

@@ -1 +0,0 @@
-{"cluster-spotter": {}}

basic/srv/portal/js/script.js

@@ -1,12 +0,0 @@
-$(function() {
-    $.getJSON('js/apps.json', function(data) {
-        $.each(data, function(id, props) {
-            var div = $('#'+id).show();
-            if (props.hasOwnProperty('url'))
-                div.find('h2 a').attr('href', props.url.replace('{host}', window.location.hostname));
-            $.each(props, function(key, value) {
-                div.find('.'+key).text(value.replace('{host}', window.location.hostname));
-            });
-        });
-    });
-});

basic/usr/local/bin/portal-app-manager

@@ -1,33 +0,0 @@
-#!/usr/bin/python
-
-import argparse
-import json
-
-def main(args):
-    jsonfile = '/srv/portal/js/apps.json'
-
-    data = {}
-    with open(jsonfile, 'r') as f:
-        data = json.load(f)
-    if not args.app in data:
-        data[args.app] = {}
-    if args.url:
-        data[args.app]['url'] = args.url
-    if args.login:
-        data[args.app]['login'] = args.login
-    if args.password:
-        data[args.app]['password'] = args.password
-    if args.property:
-        for key, value in args.property:
-            data[args.app][key] = value
-    with open(jsonfile, 'w') as f:
-        json.dump(data, f)
-
-if __name__ == '__main__':
-    parser = argparse.ArgumentParser(description='Spotter Cluster portal application manager')
-    parser.add_argument('app', help='Application ID.')
-    parser.add_argument('url', nargs='?', help='URL to the application. Use "{host}" as a host placeholder.')
-    parser.add_argument('login', nargs='?', help='Administrative login.')
-    parser.add_argument('password', nargs='?', help='Administrative password.')
-    parser.add_argument('-p', '--property', nargs=2, action='append', help='Add arbitrary key-value to the application properties')
-    main(parser.parse_args())

build/build-all.sh

@@ -0,0 +1,117 @@
+#!/bin/sh
+set -ev
+
+ROOT=$(dirname $(dirname $(realpath "${0}")))
+
+# Build documentation
+cd ${ROOT}/doc
+make html
+
+# Build basic tar
+cd ${ROOT}/vm
+tar czpf /srv/build/vm.tar.gz *
+
+# Build native apps
+cd ${ROOT}/apk/py3-secure-cookie
+apk add -U py3-setuptools py3-pytest py3-werkzeug
+abuild -F
+
+cd ${ROOT}/apk/spoc
+abuild -F
+
+cd ${ROOT}/apk/vmmgr
+abuild -F
+
+# Build runtimes
+cd ${ROOT}/lxc-shared
+spoc-image build -p alpine3.8/image
+spoc-image build -p alpine3.8-java8/image
+spoc-image build -p alpine3.8-ruby2.4/image
+spoc-image build -p alpine3.10/image
+spoc-image build -p alpine3.10-nodejs10/image
+spoc-image build -p alpine3.11/image
+spoc-image build -p alpine3.11-python2.7/image
+spoc-image build -p alpine3.12/image
+spoc-image build -p alpine3.12-java8/image
+spoc-image build -p alpine3.12-php7.3/image
+spoc-image build -p alpine3.12-python3.8/image
+spoc-image build -p alpine3.12-ruby2.4/image
+spoc-image build -p alpine3.12-ruby2.7/image
+spoc-image build -p alpine3.12-tomcat7/image
+spoc-image build -p alpine3.12-tomcat8.5/image
+spoc-image build -p debian10/image
+
+# Build services
+cd ${ROOT}/lxc-services
+spoc-image build -p activemq/image
+spoc-image build -p mariadb/image
+spoc-image build -p mongodb/image
+spoc-image build -p postgres/image
+spoc-image build -p postgis/image
+spoc-image build -p rabbitmq/image
+spoc-image build -p redis/image
+spoc-image build -p solr6/image
+
+# Build applications
+cd ${ROOT}/lxc-apps
+
+spoc-image build -p ckan/ckan.image
+spoc-image build -p ckan/ckan-datapusher.image
+spoc-app publish ckan/app
+
+spoc-image build -p crisiscleanup/image
+spoc-app publish crisiscleanup/app
+
+spoc-image build -p cts/image
+spoc-app publish cts/app
+
+spoc-image build -p decidim/decidim-nginx.image
+spoc-image build -p decidim/decidim.image
+spoc-app publish decidim/app
+
+spoc-image build -p dhis2/image
+spoc-app publish dhis2/app
+
+spoc-image build -p frontlinesms/image
+spoc-app publish frontlinesms/app
+
+spoc-image build -p gnuhealth/image
+spoc-app publish gnuhealth/app
+
+spoc-image build -p kanboard/image
+spoc-app publish kanboard/app
+
+spoc-image build -p mifosx/image
+spoc-app publish mifosx/app
+
+spoc-image build -p motech/image
+spoc-app publish motech/app
+
+spoc-image build -p odoo/image
+spoc-app publish odoo/app
+
+spoc-image build -p opendatakit/opendatakit.image
+spoc-image build -p opendatakit/opendatakit-build.image
+spoc-app publish opendatakit/app
+
+spoc-image build -p openmapkit/image
+spoc-app publish openmapkit/app
+
+spoc-image build -p pandora/image
+spoc-app publish pandora/app
+
+spoc-image build -p sahana/image
+spoc-app publish sahana/app
+spoc-app publish sahana-demo/app
+spoc-app publish sambro/app
+spoc-app publish safire/app
+spoc-app publish share/app
+
+spoc-image build -p seeddms/image
+spoc-app publish seeddms/app
+
+spoc-image build -p taarifa/image
+spoc-app publish taarifa/app
+
+spoc-image build -p ushahidi/image
+spoc-app publish ushahidi/app

build/clean-all.sh

@@ -0,0 +1,29 @@
+#!/bin/sh
+set -ev
+
+# Clean documentation
+rm -rf /srv/build/doc/*
+
+# Clean basic tar
+rm -f /srv/build/vm.tar.gz
+
+# Clean native apps
+rm -rf /srv/build/alpine/*
+
+# Clean built LXC packages
+rm -rf /srv/build/spoc
+
+# Remove nginx configs
+for CONF in $(find /etc/nginx/conf.d -name '*.conf' -a ! -name repo.conf -a ! -name default.conf); do
+    rm -f ${CONF}
+done
+service nginx reload
+
+# Stop running containers
+for APP in $(spoc-container list); do
+    spoc-container stop ${APP}
+done
+
+# Remove data
+rm -rf /var/lib/spoc
+rm -rf /var/log/spoc

build/etc/abuild.conf

@@ -0,0 +1,32 @@
+export CFLAGS="-Os -fomit-frame-pointer"
+export CXXFLAGS="$CFLAGS"
+export CPPFLAGS="$CFLAGS"
+export LDFLAGS="-Wl,--as-needed"
+
+export JOBS=2
+export MAKEFLAGS=-j$JOBS
+
+# remove line below to disable colors
+USE_COLORS=1
+
+# uncomment line below to enable ccache support.
+#USE_CCACHE=1
+
+SRCDEST=/var/cache/distfiles
+
+# uncomment line below to store built packages in other location
+# The package will be stored as $REPODEST/$repo/$pkgname-$pkgver-r$pkgrel.apk
+# where $repo is the name of the parent directory of $startdir.
+REPODEST=/srv/build/alpine/v3.12
+
+# PACKAGER and MAINTAINER are used by newapkbuild when creating new aports for
+# the APKBUILD's "Contributor:" and "Maintainer:" comments, respectively.
+#PACKAGER="Your Name <your@email.address>"
+#MAINTAINER="$PACKAGER"
+PACKAGER_PRIVKEY="/root/repo.spotter.cz.rsa"
+
+# what to clean up after a successful build
+CLEANUP="srcdir bldroot pkgdir deps"
+
+# what to cleanup after a failed build
+ERROR_CLEANUP="bldroot deps"

build/etc/nginx/conf.d/repo.conf

@@ -0,0 +1,8 @@
+server {
+    listen [::]:80;
+    server_name repo.build.vm;
+
+    location / {
+        root /srv/build;
+    }
+}

build/install-toolchain.sh

@@ -0,0 +1,36 @@
+#!/bin/sh
+set -ev
+
+cd $(realpath $(dirname "${0}"))
+
+# Install basic build tools
+apk update
+apk add git file htop less openssh-client tree
+# Install Alpine SDK (for APK builds)
+apk add alpine-sdk
+# Install Sphinx support (for documentation builds)
+apk add py3-sphinx py3-sphinx_rtd_theme
+
+# Copy root profile files and settings
+mkdir -p /root/.config/htop
+cp root/.profile /root/.profile
+cp root/.config/htop/htoprc /root/.config/htop/htoprc
+
+# Prepare abuild toolchain
+adduser root abuild
+cp etc/abuild.conf /etc/abuild.conf
+
+# Prepare local APK repository
+cp etc/nginx/conf.d/repo.conf /etc/nginx/conf.d/repo.conf
+echo "172.17.0.1 repo.build.vm" >>/etc/hosts
+service nginx reload
+
+# Change SPOC repository
+sed -i 's/https:\/\/repo\.spotter\.cz/http:\/\/repo.build.vm/' /etc/spoc/spoc.conf
+
+# Supply abuild key
+# echo '/root/repo.spotter.cz.rsa' | abuild-keygen
+
+# Supply SPOC key
+# openssl ecparam -genkey -name secp384r1 -out /etc/spoc/publish.key
+# openssl ec -in /etc/spoc/publish.key -pubout -out /tmp/repository.pub

build/root/.profile

@@ -0,0 +1,2 @@
+alias ll="ls -la"
+alias view="vi -R"

ckan-datapusher.sh

@@ -1,17 +0,0 @@
-#!/bin/sh
-
-SOURCE_DIR=$(realpath $(dirname "${0}"))/ckan-datapusher
-
-# Build Docker container
-docker build -t ckan-datapusher ${SOURCE_DIR}
-
-# Configure CKAN DataPusher
-mkdir -p /srv/ckan-datapusher/conf /srv/ckan-datapusher/data
-cp ${SOURCE_DIR}/srv/ckan-datapusher/conf/datapusher.wsgi /srv/ckan-datapusher/conf/datapusher.wsgi
-cp ${SOURCE_DIR}/srv/ckan-datapusher/conf/datapusher_settings.py /srv/ckan-datapusher/conf/datapusher_settings.py
-chown -R 8004:8004 /srv/ckan-datapusher/data
-
-# Configure CKAN DataPusher service
-cp ${SOURCE_DIR}/etc/init.d/ckan-datapusher /etc/init.d/ckan-datapusher
-rc-update add ckan-datapusher
-service ckan-datapusher start

ckan-datapusher/Dockerfile

@@ -1,47 +0,0 @@
-FROM alpine:3.7
-MAINTAINER Disassembler <disassembler@dasm.cz>
-
-RUN \
- # Install Python2 runtime
- apk --no-cache add python2
-
-RUN \
- # Install runtime XML dependencies
- apk --no-cache add libxml2 libxslt
-
-RUN \
- # Install runtime dependencies
- apk --no-cache add libffi libressl uwsgi-python
-
-RUN \
- # Install build dependencies
- apk --no-cache add --virtual .deps build-base git libffi-dev libressl-dev libxml2-dev libxslt-dev py2-pip python2-dev \
- # Install CKAN DataPusher
- && mkdir -p /srv/ckan-datapusher \
- && cd /srv/ckan-datapusher \
- && pip install -U setuptools \
- && pip install -e 'git+https://github.com/ckan/datapusher.git#egg=datapusher' \
- # Hackfix the X509_STORE_CTX wrapper
- && sed -i 's/\[security\]//' /srv/ckan-datapusher/src/datapusher/requirements.txt \
- && pip install -r /srv/ckan-datapusher/src/datapusher/requirements.txt \
- # Create OS user
- && addgroup -S -g 8004 ckan-datapusher \
- && adduser -S -u 8004 -h /srv/ckan-datapusher -s /bin/false -g ckan-datapusher -G ckan-datapusher ckan-datapusher \
- && chown -R ckan-datapusher:ckan-datapusher /srv/ckan-datapusher \
- # Cleanup
- && apk --no-cache del .deps \
- && find /srv/ckan-datapusher/src -name '.git*' -exec rm -rf {} + \
- && rm -rf /root/.cache
-
-COPY docker/ /
-
-RUN \
- # Hackfix the self-signed certificate verification
- cd /usr/lib/python2.7/site-packages \
- && patch -p0 </srv/ckan-datapusher/ssl_verify.patch
-
-VOLUME ["/etc/ckan-datapusher", "/srv/ckan-datapusher/data"]
-EXPOSE 8004
-
-USER ckan-datapusher
-CMD ["uwsgi", "--plugin", "python", "--http-socket", "0.0.0.0:8004", "--wsgi-file", "/etc/ckan-datapusher/datapusher.wsgi", "--enable-threads"]

ckan-datapusher/docker/srv/ckan-datapusher/ssl_verify.patch

@@ -1,10 +0,0 @@
---- orig/web.py
-+++ ckanserviceprovider/web.py
-@@ -733,6 +733,7 @@
-     try:
-         result = requests.post(
-             result_url,
-+            verify=False,
-             data=json.dumps(job_dict, cls=DatetimeJsonEncoder),
-             headers=headers)
- 

ckan-datapusher/etc/init.d/ckan-datapusher

@@ -1,21 +0,0 @@
-#!/sbin/openrc-run
-
-description="CKAN DataPusher docker container"
-
-depend() {
-	need docker net
-	use dns logger netmount
-}
-
-start() {
-	/usr/bin/docker run -d --rm \
-	--name ckan-datapusher \
-	-h ckan-datapusher \
-	-v /srv/ckan-datapusher/conf:/etc/ckan-datapusher \
-	-v /srv/ckan-datapusher/data:/srv/ckan-datapusher/data \
-	ckan-datapusher
-}
-
-stop() {
-	/usr/bin/docker stop ckan-datapusher
-}

ckan.sh

@@ -1,69 +0,0 @@
-#!/bin/sh
-
-SOURCE_DIR=$(realpath $(dirname "${0}"))/ckan
-
-# Check prerequisites
-docker image ls | grep -q ckan-datapusher || $(realpath $(dirname "${0}"))/ckan-datapusher.sh
-docker image ls | grep -q postfix || $(realpath $(dirname "${0}"))/postfix.sh
-docker image ls | grep -q postgres || $(realpath $(dirname "${0}"))/postgres.sh
-docker image ls | grep -q redis || $(realpath $(dirname "${0}"))/redis.sh
-docker image ls | grep -q solr || $(realpath $(dirname "${0}"))/solr.sh
-
-# Build Docker container
-docker build -t ckan ${SOURCE_DIR}
-
-# Create database
-export CKAN_PWD=$(head -c 18 /dev/urandom | base64)
-export CKAN_DS_PWD=$(head -c 18 /dev/urandom | base64)
-envsubst <${SOURCE_DIR}/createdb.sql | docker exec -i postgres psql
-
-# Configure CKAN Solr core
-docker exec solr solr create -p 8983 -c ckan
-cp ${SOURCE_DIR}/srv/solr/data/ckan/conf/schema.xml /srv/solr/data/ckan/conf/schema.xml
-cp ${SOURCE_DIR}/srv/solr/data/ckan/conf/solrconfig.xml /srv/solr/data/ckan/conf/solrconfig.xml
-chown 8983:8983 /srv/solr/data/ckan/conf/schema.xml
-service solr restart
-
-# Configure CKAN
-mkdir -p /srv/ckan/conf /srv/ckan/data
-chown -R 8003:8003 /srv/ckan/data
-export CKAN_SECRET=$(head -c 18 /dev/urandom | base64)
-export CKAN_UUID=$(cat /proc/sys/kernel/random/uuid)
-envsubst <${SOURCE_DIR}/srv/ckan/conf/ckan.ini >/srv/ckan/conf/ckan.ini
-cp ${SOURCE_DIR}/srv/ckan/conf/who.ini /srv/ckan/conf/who.ini
-cp ${SOURCE_DIR}/srv/ckan/update-ip.sh /srv/ckan/update-ip.sh
-/srv/ckan/update-ip.sh
-
-# Set "production values" (increases performance) only if the DEBUG environment variable is not set
-if [ ${DEBUG:-0} -eq 0 ]; then
-    sed -i 's/debug = true/debug = false/' /srv/ckan/conf/ckan.ini
-fi
-
-# Populate database
-docker run --rm -h ckan --link postgres --link redis --link solr -v /srv/ckan/conf:/etc/ckan -v /srv/ckan/data:/srv/ckan/storage ckan paster --plugin=ckan db init -c /etc/ckan/ckan.ini
-docker run --rm -h ckan --link postgres --link redis --link solr -v /srv/ckan/conf:/etc/ckan -v /srv/ckan/data:/srv/ckan/storage ckan paster --plugin=ckanext-spatial spatial initdb -c /etc/ckan/ckan.ini
-docker run --rm -h ckan --link postgres --link redis --link solr -v /srv/ckan/conf:/etc/ckan -v /srv/ckan/data:/srv/ckan/storage ckan paster --plugin=ckan datastore set-permissions -c /etc/ckan/ckan.ini | docker exec -i postgres psql
-
-# Create admin account
-export CKAN_ADMIN_USER="admin"
-export CKAN_ADMIN_UUID=$(cat /proc/sys/kernel/random/uuid)
-export CKAN_ADMIN_APIKEY=$(cat /proc/sys/kernel/random/uuid)
-export CKAN_ADMIN_PWD=$(head -c 12 /dev/urandom | base64)
-export CKAN_ADMIN_HASH=$(docker run --rm ckan python -c "from passlib.hash import pbkdf2_sha512;print pbkdf2_sha512.encrypt('${CKAN_ADMIN_PWD}')")
-export CKAN_ADMIN_EMAIL="admin@example.com"
-envsubst <${SOURCE_DIR}/adminpwd.sql | docker exec -i postgres psql ckan
-
-# Configure CKAN service
-cp ${SOURCE_DIR}/etc/init.d/ckan /etc/init.d/ckan
-rc-update add ckan
-service ckan start
-
-# Create nginx app definition
-cp ${SOURCE_DIR}/etc/nginx/conf.d/ckan.conf /etc/nginx/conf.d/ckan.conf
-service nginx reload
-
-# Install cron job
-cp ${SOURCE_DIR}/etc/periodic/hourly/ckan /etc/periodic/hourly/ckan
-
-# Add portal application definition
-portal-app-manager ckan "https://{host}:8403/" "${CKAN_ADMIN_USER}" "${CKAN_ADMIN_PWD}"

ckan/Dockerfile

@@ -1,54 +0,0 @@
-FROM alpine:3.7
-MAINTAINER Disassembler <disassembler@dasm.cz>
-
-RUN \
- # Install Python2 runtime
- apk --no-cache add python2
-
-RUN \
- # Install runtime XML dependencies
- apk --no-cache add libxml2 libxslt
-
-RUN \
- # Add edge/testing repository
- echo '@edge http://dl-cdn.alpinelinux.org/alpine/edge/testing' >>/etc/apk/repositories \
- # Install runtime dependencies
- && apk --no-cache add geos@edge libjpeg-turbo libmagic libpq py2-pip zlib
-
-RUN \
- # Install build dependencies
- apk --no-cache add --virtual .deps build-base git libjpeg-turbo-dev libxml2-dev libxslt-dev postgresql-dev python2-dev zlib-dev \
- # Hackfix for python find_library('c') call
- && ln -s /lib/ld-musl-x86_64.so.1 /lib/libc.so.1 \
- # Install CKAN
- && mkdir -p /srv/ckan \
- && cd /srv/ckan \
- && pip install -U setuptools \
- && pip install -e 'git+https://github.com/ckan/ckan.git#egg=ckan' \
- # Force psycopg2 version update for compatibility with PostgreSQL 10
- && sed -i 's/psycopg2==2.4.5/psycopg2==2.7.1/' /srv/ckan/src/ckan/requirements.txt \
- && pip install -r /srv/ckan/src/ckan/requirements.txt \
- # Install CKAN extensions
- && pip install -e 'git+https://github.com/ckan/ckanext-basiccharts#egg=ckanext_basiccharts' \
- && pip install -e 'git+https://github.com/ckan/ckanext-spatial#egg=ckanext_spatial' \
- && pip install -e 'git+https://github.com/ckan/ckanext-geoview#egg=ckanext_geoview' \
- && pip install -e 'git+https://github.com/ckan/ckanext-mapviews#egg=ckanext_mapviews' \
- && pip install -e 'git+https://github.com/XVTSolutions/ckanext-spatialUI#egg=ckanext_spatialui' \
- && pip install -e 'git+https://github.com/aptivate/ckanext-datasetthumbnail#egg=ckanext_datasetthumbnail' \
- && pip install -e 'git+https://github.com/datagvat/ckanext-dgvat_xls#egg=ckanext_dgvat_xls' \
- && pip install -r /srv/ckan/src/ckanext-spatial/pip-requirements.txt \
- && pip install -r /srv/ckan/src/ckanext-dgvat-xls/requirements.txt \
- # Create OS user
- && addgroup -S -g 8003 ckan \
- && adduser -S -u 8003 -h /srv/ckan -s /bin/false -g ckan -G ckan ckan \
- && chown -R ckan:ckan /srv/ckan \
- # Cleanup
- && apk --no-cache del .deps \
- && find /srv/ckan/src -name '.git*' -exec rm -rf {} + \
- && rm -rf /root/.cache
-
-VOLUME ["/etc/ckan", "/srv/ckan/storage"]
-EXPOSE 8003
-
-USER ckan
-CMD ["paster", "serve", "/etc/ckan/ckan.ini"]

ckan/etc/init.d/ckan

@@ -1,33 +0,0 @@
-#!/sbin/openrc-run
-
-description="CKAN docker container"
-
-depend() {
-	need docker net postgres
-	use dns logger netmount postfix
-	after ckan-datapusher redis solr
-}
-
-start_pre() {
-	/srv/ckan/update-ip.sh
-}
-
-start() {
-	/usr/bin/docker run -d --rm \
-	--name ckan \
-	-h ckan \
-	--link ckan-datapusher \
-	--link postfix \
-	--link postgres \
-	--link redis \
-	--link solr \
-	--link ckan-datapusher \
-	-p 127.0.0.1:8003:8003 \
-	-v /srv/ckan/conf:/etc/ckan \
-	-v /srv/ckan/data:/srv/ckan/storage \
-	ckan
-}
-
-stop() {
-	/usr/bin/docker stop ckan
-}

ckan/etc/nginx/conf.d/ckan.conf

@@ -1,11 +0,0 @@
-server {
-    listen [::]:8803 ipv6only=off;
-    listen [::]:8403 ssl http2 ipv6only=off;
-
-    access_log /var/log/nginx/ckan.access.log;
-    error_log /var/log/nginx/ckan.error.log;
-
-    location / {
-        proxy_pass http://127.0.0.1:8003;
-    }
-}

ckan/etc/periodic/hourly/ckan

@@ -1,4 +0,0 @@
-#!/bin/sh
-
-docker exec ckan paster --plugin=ckan tracking update -c /etc/ckan/ckan.ini >/dev/null
-docker exec ckan paster --plugin=ckan search-index rebuild -r -c /etc/ckan/ckan.ini >/dev/null

ckan/srv/ckan/update-ip.sh

@@ -1,4 +0,0 @@
-#!/bin/sh
-
-URL=$(ip route get 1 | awk '{print $NF;exit}')
-sed -i "s|^ckan\.site_url.*|ckan.site_url = https://${URL}:8403|" /srv/ckan/conf/ckan.ini

crisiscleanup.sh

@@ -1,48 +0,0 @@
-#!/bin/sh
-
-SOURCE_DIR=$(realpath $(dirname "${0}"))/crisiscleanup
-
-# Check prerequisites
-docker image ls | grep -q postfix || $(realpath $(dirname "${0}"))/postfix.sh
-docker image ls | grep -q postgres || $(realpath $(dirname "${0}"))/postgres.sh
-docker image ls | grep -q ruby || $(realpath $(dirname "${0}"))/ruby.sh
-
-# Build Docker container
-docker build -t crisiscleanup ${SOURCE_DIR}
-
-# Create database
-export CRISISCLEANUP_PWD=$(head -c 18 /dev/urandom | base64)
-envsubst <${SOURCE_DIR}/createdb.sql | docker exec -i postgres psql
-
-# Copy existing config files into persistent storage
-mkdir -p /srv/crisiscleanup/conf
-chown 8005:8005 /srv/crisiscleanup/conf
-docker run --rm -v /srv/crisiscleanup/conf:/mnt/conf crisiscleanup cp -rp /srv/crisiscleanup/config/. /mnt/conf
-chown root:root /srv/crisiscleanup/conf
-
-# Configure CrisisCleanup
-export CRISISCLEANUP_ADMIN_USER="Admin"
-export CRISISCLEANUP_ADMIN_EMAIL="admin@example.com"
-export CRISISCLEANUP_ADMIN_PWD=$(head -c 12 /dev/urandom | base64)
-envsubst <${SOURCE_DIR}/srv/crisiscleanup/conf/database.yml >/srv/crisiscleanup/conf/database.yml
-cp ${SOURCE_DIR}/srv/crisiscleanup/conf/boot.rb /srv/crisiscleanup/conf/boot.rb
-cp ${SOURCE_DIR}/srv/crisiscleanup/conf/initializers/devise.rb /srv/crisiscleanup/conf/initializers/devise.rb
-cp ${SOURCE_DIR}/srv/crisiscleanup/conf/environments/production.rb /srv/crisiscleanup/conf/environments/production.rb
-
-# Populate database
-envsubst <${SOURCE_DIR}/srv/crisiscleanup/db/seeds.rb >/tmp/seeds.rb
-docker run --rm -h crisiscleanup --link postgres -v /srv/crisiscleanup/conf:/srv/crisiscleanup/config crisiscleanup rake db:schema:load
-docker run --rm -h crisiscleanup --link postgres -v /srv/crisiscleanup/conf:/srv/crisiscleanup/config -v /tmp/seeds.rb:/srv/crisiscleanup/db/seeds.rb crisiscleanup rake db:seed
-rm /tmp/seeds.rb
-
-# Create CrisisCleanup service
-cp ${SOURCE_DIR}/etc/init.d/crisiscleanup /etc/init.d/crisiscleanup
-rc-update add crisiscleanup
-service crisiscleanup start
-
-# Create nginx app definition
-cp ${SOURCE_DIR}/etc/nginx/conf.d/crisiscleanup.conf /etc/nginx/conf.d/crisiscleanup.conf
-service nginx reload
-
-# Add portal application definition
-portal-app-manager crisis-cleanup "https://{host}:8405/" "${CRISISCLEANUP_ADMIN_EMAIL}" "${CRISISCLEANUP_ADMIN_PWD}"

crisiscleanup/Dockerfile

@@ -1,51 +0,0 @@
-FROM ruby
-MAINTAINER Disassembler <disassembler@dasm.cz>
-
-RUN \
- # Install NodeJS runtime
- apk --no-cache add nodejs paxctl \
- # Fix grsec attributes to loosen memory protection restrictions
- && paxctl -cm /usr/bin/node \
- # Cleanup
- && apk --no-cache del paxctl
-
-RUN \
- # Install runtime dependencies
- apk --no-cache add libpq libxml2 libxslt tzdata
-
-ENV RAILS_ENV production
-
-RUN \
- # Install build dependencies
- apk --no-cache add --virtual .deps build-base git libxml2-dev libxslt-dev linux-headers postgresql-dev yarn zlib-dev \
- # Clone CrisisCleanup
- && git clone --depth 1 https://github.com/CrisisCleanup/crisiscleanup /srv/crisiscleanup \
- # Hackfix ruby dependency versions
- && sed -i 's/2\.2\.5/2.3.6/' /srv/crisiscleanup/Gemfile \
- && sed -i 's/rdoc (4\.2\.0)/rdoc (4.3.0)/' /srv/crisiscleanup/Gemfile.lock \
- # Install Ruby and NodeJS dependencies
- && cd /srv/crisiscleanup \
- && bundle config build.nokogiri --use-system-libraries \
- && bundle install \
- && npm install \
- && yarn \
- # Create CrisisCleanup secret
- && echo -e "production:\n  secret_key_base: $(rake secret)" >/srv/crisiscleanup/config/secrets.yml \
- # Generate static resources
- && rake assets:precompile \
- # Create OS user
- && addgroup -S -g 8005 crisiscleanup \
- && adduser -S -u 8005 -h /srv/crisiscleanup -s /bin/false -g crisiscleanup -G crisiscleanup crisiscleanup \
- && chown -R crisiscleanup:crisiscleanup /srv/crisiscleanup \
- # Cleanup
- && apk --no-cache del .deps \
- && find /srv/crisiscleanup -name '.git*' -exec rm -rf {} + \
- && rm -rf /usr/local/share/.cache \
- && rm -rf /root/.bundle /root/.config /root/.npm
-
-VOLUME ["/srv/crisiscleanup/config"]
-EXPOSE 8005
-
-USER crisiscleanup
-WORKDIR /srv/crisiscleanup
-CMD ["rails", "server"]

crisiscleanup/etc/nginx/conf.d/crisiscleanup.conf

@@ -1,11 +0,0 @@
-server {
-    listen [::]:8805 ipv6only=off;
-    listen [::]:8405 ssl http2 ipv6only=off;
-    
-    access_log /var/log/nginx/crisiscleanup.access.log;
-    error_log /var/log/nginx/crisiscleanup.error.log;
-
-    location / {
-        proxy_pass http://127.0.0.1:8005;
-    }
-}

cts.sh

@@ -1,49 +0,0 @@
-#!/bin/sh
-
-SOURCE_DIR=$(realpath $(dirname "${0}"))/cts
-
-# Check prerequisites
-docker image ls | grep -q postgres || $(realpath $(dirname "${0}"))/postgres.sh
-
-# Build Docker container
-docker build -t cts ${SOURCE_DIR}
-
-# Create database
-export CTS_PWD=$(head -c 18 /dev/urandom | base64)
-envsubst <${SOURCE_DIR}/createdb.sql | docker exec -i postgres psql
-
-# Copy existing config files into persistent storage
-mkdir -p /srv/cts/conf
-docker run --rm -v /srv/cts/conf:/mnt/conf cts cp /srv/cts/cts/settings/base.py /mnt/conf/
-
-# Configure CTS
-export CTS_SECRET=$(head -c 26 /dev/urandom | base64)
-envsubst <${SOURCE_DIR}/srv/cts/conf/spotter.py >/srv/cts/conf/spotter.py
-touch /srv/cts/conf/__init__.py
-
-# Set "production values" (increases performance) only if the DEBUG environment variable is not set
-if [ ${DEBUG:-0} -eq 0 ]; then
-    sed -i 's/DEBUG = True/DEBUG = False/' /srv/cts/conf/spotter.py
-fi
-
-# Populate database
-docker run --rm -h cts --link postgres -v /srv/cts/conf:/srv/cts/cts/settings cts manage.py migrate
-
-# Create admin account
-export CTS_ADMIN_EMAIL=admin@example.com
-export CTS_ADMIN_PWD=$(head -c 12 /dev/urandom | base64)
-export CTS_ADMIN_HASH=$(docker run --rm -h cts -v /srv/cts/conf:/srv/cts/cts/settings cts python -c "from django.contrib.auth.hashers import make_password; print make_password('${CTS_ADMIN_PWD}')")
-export CTS_ADMIN_SECRET=$(head -c 12 /dev/urandom | sha256sum | cut -c1-13)
-envsubst <${SOURCE_DIR}/adminpwd.sql | docker exec -i postgres psql cts
-
-# Create CTS service
-cp ${SOURCE_DIR}/etc/init.d/cts /etc/init.d/cts
-rc-update add cts
-service cts start
-
-# Create nginx app definition
-cp ${SOURCE_DIR}/etc/nginx/conf.d/cts.conf /etc/nginx/conf.d/cts.conf
-service nginx reload
-
-# Add portal application definition
-portal-app-manager cts "https://{host}:8406/" "${CTS_ADMIN_EMAIL}" "${CTS_ADMIN_PWD}"

cts/Dockerfile

@@ -1,46 +0,0 @@
-FROM alpine:3.7
-MAINTAINER Disassembler <disassembler@dasm.cz>
-
-RUN \
- # Install Python2 runtime
- apk --no-cache add python2
-
-RUN \
- # Add edge/testing repository
- echo '@edge http://dl-cdn.alpinelinux.org/alpine/edge/testing' >>/etc/apk/repositories \
- # Install runtime dependencies
- && apk --no-cache add geos@edge libpq nginx s6 zlib
-
-RUN \
- # Install build dependencies
- apk --no-cache add --virtual .deps build-base git postgresql-dev python2-dev py2-pip zlib-dev \
- # Install CTS
- && git clone --depth 1 https://github.com/theirc/CTS /srv/cts \
- # Force psycopg2 version update for compatibility with PostgreSQL 10
- && sed -i 's/psycopg2==2.5.2/psycopg2==2.7.1/' /srv/cts/requirements/base.txt \
- && pip install -r /srv/cts/requirements/production.txt \
- # Hackfix geos version detection
- && sed -i 's/\$//' /usr/lib/python2.7/site-packages/django/contrib/gis/geos/libgeos.py \
- # Make manage.py globally executable
- && chmod +x /srv/cts/manage.py \
- && ln -s /srv/cts/manage.py /usr/local/bin/manage.py \
- # Compile static files
- && sed -i '/debug_toolbar/d' /srv/cts/cts/settings/dev.py \
- && DJANGO_SETTINGS_MODULE=cts.settings.dev manage.py collectstatic -l --noinput \
- # Create OS user
- && addgroup -S -g 8006 cts \
- && adduser -S -u 8006 -h /srv/cts -s /bin/false -g cts -G cts cts \
- && chown -R cts:cts /srv/cts \
- # Cleanup
- && apk --no-cache del .deps \
- && find /srv/cts -name '.git*' -exec rm -rf {} + \
- && rm -rf /root/.cache
-
-COPY docker/ /
-
-VOLUME ["/srv/cts/cts/settings"]
-EXPOSE 8006
-
-ENV DJANGO_SETTINGS_MODULE cts.settings.spotter
-WORKDIR /srv/cts
-CMD ["s6-svscan", "/etc/services.d"]

cts/etc/init.d/cts

@@ -1,22 +0,0 @@
-#!/sbin/openrc-run
-
-description="CTS docker container"
-
-depend() {
-	need docker net postgres
-	use dns logger netmount
-}
-
-start() {
-	/usr/bin/docker run -d --rm \
-	--name cts \
-	-h cts \
-	--link postgres \
-	-p 127.0.0.1:8006:8006 \
-	-v /srv/cts/conf:/srv/cts/cts/settings \
-	cts
-}
-
-stop() {
-	/usr/bin/docker stop cts
-}

cts/etc/nginx/conf.d/cts.conf

@@ -1,11 +0,0 @@
-server {
-    listen [::]:8806 ipv6only=off;
-    listen [::]:8406 ssl http2 ipv6only=off;
-
-    access_log /var/log/nginx/cts.access.log;
-    error_log /var/log/nginx/cts.error.log;
-
-    location / {
-        proxy_pass http://127.0.0.1:8006;
-    }
-}

doc/Makefile

@@ -0,0 +1,19 @@
+# Minimal makefile for Sphinx documentation
+#
+
+# You can set these variables from the command line.
+SPHINXOPTS    =
+SPHINXBUILD   = sphinx-build-3
+SOURCEDIR     = .
+BUILDDIR      = /srv/build/doc
+
+# Put it first so that "make" without argument is like "make help".
+help:
+	@$(SPHINXBUILD) -M help "$(SOURCEDIR)" "$(BUILDDIR)" $(SPHINXOPTS) $(O)
+
+.PHONY: help Makefile
+
+# Catch-all target: route all unknown targets to Sphinx using the new
+# "make mode" option.  $(O) is meant as a shortcut for $(SPHINXOPTS).
+%: Makefile
+	@$(SPHINXBUILD) -M $@ "$(SOURCEDIR)" "$(BUILDDIR)" $(SPHINXOPTS) $(O)

doc/applications/attachments/images-list-apps.csv

@@ -0,0 +1,21 @@
+Application,Container,Host
+CKAN,ckan,ckan
+Crisis Cleanup,crisiscleanup,cc
+CTS,cts,cts
+EcoGIS,ecogis,ecogis
+FrontlineSMS,frontlinesms,sms
+GNU Health,gnuhealth,gh
+Kanboard,kanboard,kb
+Mifos X,mifosx,mifosx
+Motech,motech,motech
+ODK Aggregate,opendatakit,odk
+ODK Build,opendatakit-build,odkbuild
+Odoo,odoo,odoo
+OpenMapKit,openmapkit,omk
+Pan.do/ra,pandora,pandora
+Sahana,sahana,sahana
+Sahana - Demo,sahana-demo,sahana-demo
+SAMBRO,sambro,sambro
+SeedDMS,seeddms,dms
+Sigmah,sigmah,sigmah
+Ushahidi,ushahidi,ush

doc/applications/attachments/images-list-basic.csv

@@ -0,0 +1,13 @@
+Product,Layer
+Alpine 3.8,alpine3.8
+Alpine 3.8 - PHP 5.6,alpine3.8-php5.6
+Alpine 3.9 - Ruby 2.4,alpine3.8-ruby2.4
+Alpine 3.9,alpine3.9
+Alpine 3.9 - Java 8,alpine3.9-java8
+Alpine 3.9 - PHP 7.2,alpine3.9-php7.2
+Alpine 3.9 - Python 2.7,alpine3.9-python2.7
+Alpine 3.9 - Python 3.6,alpine3.9-python3.6
+Alpine 3.9 - Ruby 2.4,alpine3.9-ruby2.4
+Alpine 3.9 - Ruby 2.6,alpine3.9-ruby2.6
+Alpine 3.9 - Tomcat 7,alpine3.9-tomcat7
+Alpine 3.9 - Tomcat 8.5,alpine3.9-tomcat8.5

doc/applications/attachments/images-list-services.csv

@@ -0,0 +1,8 @@
+Product,Layer,UID/GID,Internal Port
+ActiveMQ,activemq,61616,61616 (ActiveMQ)
+MariaDB,mariadb,3306,3306 (MySQL)
+Postgres,postgres,5432,5432 (Postgres)
+PostGIS,postgis,5432,5432 (Postgres)
+RabbitMQ,rabbitmq,5672,5672 (AMQP)
+Redis,redis,6379,6379 (Redis)
+Solr 6,solr6,8983,8983 (HTTP)

doc/applications/attachments/map-services.csv

@@ -0,0 +1,12 @@
+Application,Data sources,Map viewer,Configurable,Notes
+CKAN,OSM (`Stamen <http://maps.stamen.com>`_),Leaflet,No,[1]
+CrisisCleanup v2,Google Maps,Google Maps,No,
+CrisisCleanup v3,OSM,Leaflet,No,
+Crismapp,OSM,Leaflet,,
+CTS,"OSM, `ArcGIS <http://server.arcgisonline.com/arcgis/rest/services>`_",Leaflet,No,
+EcoGIS,,FreeGIS + OpenLayers 2,Probably,[2]
+Odoo,Google Maps,Google Maps,No,[3]
+OpenMapKit,OSM,N/A,Yes,[4]
+Pan.do/ra,Google Maps,Google Maps + OxMap,No,
+Sahana Eden,OSM (`HOT <https://www.hotosm.org/>`_),OpenLayers 2,"Yes, very",[5]
+Ushahidi,"OSM (`Mapbox <https://www.mapbox.com/about/maps/>`_, `HOT`_)",Leaflet,No,

doc/applications/ckan.rst

@@ -0,0 +1,78 @@
+CKAN
+====
+
+Overview
+--------
+
+CKAN is an open-source DMS (data management system) for powering data hubs and data portals. CKAN makes it easy to publish, share and use data. It is written in python, has Flask-based web interface and uses Postgres database with PostGIS extension. CKAN exposes API which allows third parties to create extensions.
+
+The project is split to several components. The most important ones are:
+
+- **ckan** - https://github.com/ckan/ckan - The main DMS component with Flask frontend.
+- **datapusher** - https://github.com/ckan/datapusher - A standalone web service that pushes data files from a CKAN site's resources into its DataStore.
+- **ckan-service-provider** - https://github.com/ckan/ckan-service-provider - A library for making web services that make functions available as synchronous or asynchronous jobs.
+
+Apart from that, CKAN requires a *Redis* in-memory data store and *Solr* search platform instance. Note that CKAN is shipped with Solr schemas which don't work well with up-to-date versions of Solr, therefore we use older Solr 6.5.1.
+
+DataPusher
+----------
+
+DataPusher is running as a separate service. Its development is a bit out of sync with the core ckan component. SKAN has already moved to python 3, however datapusher is still working only with python 2.7. Due to that, DataPusher has its own image and is running as a separate container.
+
+Alpine, being a progressive linux distribution, stopped supporting uwsgi connector for python 2.7 in Alpine 3.11, therefore the container needs to be based on older Alpine 3.10 which still ships with *uwsgi-python2*.
+
+The connection between CKAN and DataPusher is done via HTTPS endpoints. There is a possibility to disable TLS certificate verification, but a better solution seems to be import any self-signed certificate into the DataPusher's trust store. There is a script which automatically handles the import whenever the DataPusher container starts.
+
+Extensions
+----------
+
+CKAN container comes with several preinstalled and preconfigured extensions. Historically, there were more extensions, but over the time CKAN's API evolved and the development has moved to python 3, so majority of the historical extensions are no longer operational.
+
+ckan/ckanext-basiccharts
+^^^^^^^^^^^^^^^^^^^^^^^^
+
+- URL: https://github.com/ckan/ckanext-basiccharts
+
+Adds Line, Bar and Pie charts. It uses Flot Charts, which is compatible with all major browsers (including IE6+).
+
+ckan/ckanext-spatial
+^^^^^^^^^^^^^^^^^^^^
+
+- URL: https://github.com/ckan/ckanext-spatial
+
+Contains plugins that add geospatial capabilities to CKAN. E.g. a spatial field on the default CKAN dataset schema which allows to perform spatial queries and to display the dataset extent on the frontend.
+
+ckan/ckanext-geoview
+^^^^^^^^^^^^^^^^^^^^
+
+- URL: https://github.com/ckan/ckanext-geoview
+
+Contains view plugins to display geospatial files and services in CKAN. It contains an OpenLayers based viewer and other view plugins that used to be part of ckanext-spatial.
+
+ckan/ckanext-mapviews
+^^^^^^^^^^^^^^^^^^^^^
+
+- URL: https://github.com/ckan/ckanext-mapviews
+
+Adds regular and choropleth maps to CKAN, using the new CKAN Resource View. It uses LeafletJS, which is compatible with all major browsers (including IE7+).
+
+XVTSolutions/ckanext-spatialUI
+^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
+
+- URL: https://github.com/XVTSolutions/ckanext-spatialUI
+
+Provides the UI elements for spatial search. Spatial search widget and dataset extent map.
+
+aptivate/ckanext-datasetthumbnail
+^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
+
+- URL: https://github.com/aptivate/ckanext-datasetthumbnail
+
+Adds support for generation and display of thumbnail images.
+
+datagvat/ckanext-dgvat_xls
+^^^^^^^^^^^^^^^^^^^^^^^^^^
+
+- URL: https://github.com/datagvat/ckanext-dgvat_xls
+
+Allows group admin to export datasets from their organizations to export all datasets to a .xls worksheet. Sysadmins may choose to export datasets from any organization they want or to export all datasets of all groups.

doc/applications/crisiscleanup.rst

@@ -0,0 +1,21 @@
+CrisisCleanup
+=============
+
+Overview
+--------
+
+Crisis Cleanup is a collaboration platform that connects disaster recovery organization volunteers with people who need help after a disaster. It is a Ruby on Rails application written for Ruby 2.6 with NodeJS-dependent web frontend.
+
+Upstream URL: https://github.com/CrisisCleanup/crisiscleanup-2
+
+Version 2 maintenance
+---------------------
+
+As of 2020-03-27, CrisisCleanup v2 is no longer maintained. The maintenance has been discontinued in favor of CrisisCleanup v3, which splits the backend and frontend into two separate projects. Unfortunately the source of the backend part hasn't been opened and the creator has no plants to do so, so currently only the frontend application as available on https://github.com/CrisisCleanup/crisiscleanup-3-web.
+
+Version 3 uses OpenStreetMap and Leaflet, whereas version 2 used Google Maps.
+
+NodeJS compatibility
+--------------------
+
+The application uses NodeJS to generate and pack assets, however due to its age, yarn dependencies installation fails on NodeJS versions newer than 8, therefore the NodeJS version has been frozen on 8.14.0 provided by Alpine 3.8.

doc/applications/decidim.rst

@@ -0,0 +1,26 @@
+Decidim
+=======
+
+Overview
+--------
+
+Decidim is a participatory democracy platform for cities and organizations. Decidim is written and runs on Ruby 2.6, where it is installed as Ruby Gem. Incoming HTTP requests are handled via passenger nginx plugin.
+
+Upstream URL: https://github.com/decidim/decidim
+
+Passenger nginx plugin
+----------------------
+
+The passenger plugin work as application proxy between HTTP server and Ruby on Rails applications. Nginix doesn't have modules API like Apache does, so all nginx module must be present at compile time and only then they can be loaded and unloaded at runtime. Passenger plugin is not present in the standard Alpine nginx packages, therefore for passenger to work, a custom version of nginx including the passenger plugin needs to be compiled. Passenger sources contain ``passenger-install-nginx-module`` script which eases and semi-automates the compilation.
+
+Database upgrades
+-----------------
+
+Decidim creates a series of database migration scripts under ``db/migrate`` directory. Unfortunately, these script are not created deterministically as their file names are always created with current build's timestamp. The same script using the same Decidim version therefore always ends up with different database migration scripts. Newly added scripts in a new version of Decidim are not sorted at the end, so it's impossible to determine which scripts need to applied from the filenames alone.
+
+During manual upgrade, the workaround is to compare the directories between the old and the new image, stripping the timestamp and running only the scripts which don't exist in the old directory, however this is impossible to be done during automatic upgrade, as the old image is removed before the upgrade script is executed.
+
+Additional site creation
+------------------------
+
+Decidim allows to create managed sites using the superadmin interface on ``https://<Decidim URL>/system/``. The sites require their own (sub)domains, therefore some additional considerations must be taken when setting up HTTP reverse proxies and TLS certificates.

doc/applications/frontlinesms.rst

@@ -0,0 +1,97 @@
+FrontlineSMS
+============
+
+Overview
+--------
+
+FrontlineSMS is a system for both manual and automatic processing of SMS, supporting creation of various SMS workflows. The application is written in Java (resp. Groovy) and uses Grails layout engine. It has its own installer which deploys single-tenant Jetty lightweight applicaiton server. To work efficiently, FrontlineSMS requires a device with SMS capabilities or a connection to third-party service such as Twilio.
+
+The version of FrontlineSMS is no longer maintained by the original developers and no new updates are expected to appear. The manufacturer currently offers and supports only a cloud version of FrontlineSMS.
+
+Upstream URL: https://github.com/frontlinesms/frontlinesms2
+
+Fork URL: https://github.com/trendspotter/frontlinesms2 - the fork contains the last known working version of installer as a release.
+
+Modem capabilities
+------------------
+
+There are special considerations to be taken whenever an application witch direct access to hardware is run in a container. Currently FrontlineSMS has not been tested with such device and it is expected that some extra work or container configuration not present in any other application needs to be done in order to make the hardware device available and usable by the container.
+
+Localization
+------------
+
+FrontlineSMS is localized to Czech only locally on SpoterVM. Upstream doesn't contain the localization as the application is not developed anymore. The localization is supplied as a Java property file ``WEB-INF/grails-app/i18n/messages_cs.properties`` and then once again as the same file packed and minifies as ``assets/i18n/frontlinesms-core_messages_cs.js``. The minified file can be created using ``frontlinesms-lang-js.py`` helper script in SpotterVM repository.
+
+Java support
+------------
+
+Due to the age of the application (latest release somewhere in 2014), FrontlineSMS doesn't work well with current versions of Java runtime. The last know working version is Java 8.222.10 supplied by Alpine 3.8. More recent version, e.g. Java 8.242 cause HTTP connection accept failures.
+
+X server
+--------
+
+Although FrontlineSMS is a web application, it requires X server as it attempts to install a systray icon. On a headless server, this requirement can be worked around using ``xf86-video-dummy`` package which works as a *blackhole* display driver.
+
+The X server is then started as
+
+.. code-block:: bash
+
+    Xorg -noreset +extension GLX +extension RANDR +extension RENDER -config dummy.conf :10
+
+Where the ``dummy.conf`` looks as follows
+
+.. code-block:: xorg.conf
+
+    Section "ServerFlags"
+      Option "DontVTSwitch" "true"
+      Option "AllowMouseOpenFail" "true"
+      Option "PciForceNone" "true"
+      Option "AutoEnableDevices" "false"
+      Option "AutoAddDevices" "false"
+    EndSection
+
+    Section "InputDevice"
+      Identifier "dummy_mouse"
+      Option "CorePointer" "true"
+      Driver "void"
+    EndSection
+
+    Section "InputDevice"
+      Identifier "dummy_keyboard"
+      Option "CoreKeyboard" "true"
+      Driver "void"
+    EndSection
+
+    Section "Device"
+      Identifier "dummy_videocard"
+      Driver "dummy"
+      Option "ConstantDPI" "true"
+      VideoRam 192000
+    EndSection
+
+    Section "Monitor"
+      Identifier "dummy_monitor"
+      HorizSync   5.0 - 1000.0
+      VertRefresh 5.0 - 200.0
+      Modeline "1280x720" 27.41 1280 1312 1416 1448 720 737 740 757
+    EndSection
+
+    Section "Screen"
+      Identifier "dummy_screen"
+      Device "dummy_videocard"
+      Monitor "dummy_monitor"
+      DefaultDepth 24
+      SubSection "Display"
+        Viewport 0 0
+        Depth 24
+        Modes "1280x720"
+        Virtual 8192 4096
+      EndSubSection
+    EndSection
+
+    Section "ServerLayout"
+      Identifier   "dummy_layout"
+      Screen       "dummy_screen"
+      InputDevice  "dummy_mouse"
+      InputDevice  "dummy_keyboard"
+    EndSection

doc/applications/images-list.rst

@@ -0,0 +1,25 @@
+List of existing container images
+=================================
+
+Basic and runtime images
+------------------------
+
+.. csv-table::
+   :file: attachments/images-list-basic.csv
+   :header-rows: 1
+
+Common service images
+---------------------
+
+.. csv-table::
+   :file: attachments/images-list-services.csv
+   :header-rows: 1
+
+List of application images
+--------------------------
+
+All application images have the application user UID/GID 8080 and listen on internal port 8080 (HTTP).
+
+.. csv-table::
+   :file: attachments/images-list-apps.csv
+   :header-rows: 1

doc/applications/index.rst

@@ -0,0 +1,21 @@
+Applications and containers
+===========================
+
+.. toctree::
+   :maxdepth: 2
+
+   images-list
+   tech-knowledge
+   map-services
+   ckan
+   crisiscleanup
+   decidim
+   frontlinesms
+   kanboard
+   opendatakit
+   openmapkit
+   pandora
+   sahana
+   sahana-configuration-report
+   seeddms
+   taarifa

doc/applications/kanboard.rst

@@ -0,0 +1,121 @@
+Kanboard
+========
+
+Overview
+--------
+
+Kanboard is a Kanban project management tool written in PHP. It supports creation of projects and their population with tasks, provides Kanban boards with swimlanes, charts etc. It is extensile via plugins.
+
+Upstream URL: https://github.com/kanboard/kanboard
+
+Localization
+------------
+
+Kanboard is localized via PHP files containing associative arrays with original English string and the translation in the respective language. Every plugin has its own localization files. Due to this, we currently maintain forks or 4 repositories with plugins where the original maintainer decided to discontinue support.
+
+Plugins
+-------
+
+Following list summarizes state of Kanboard plugins used or requested in our container as of 05/2020.
+
+BlueTeck/kanboard_plugin_overwrite_translation
+^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
+
+- URL: https://github.com/BlueTeck/kanboard_plugin_overwrite_translation
+
+Supplies translation strings via additional configuration file for other plugins which are missing or have incorrect translations. Not updated anymore, however the maintainer is active on GitHub. This plugin has initially been requested to be included in our installation, but due to its purpose, it's mostly useless as all translations were done in the respective plugin localization files.
+
+BlueTeck/kanboard_plugin_coverimage
+^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
+
+- URL: https://github.com/BlueTeck/kanboard_plugin_coverimage
+
+This plugin adds a cover image function to tasks on the board, and allows you to set a project image to use as a logo for projects. Development is active.
+
+BlueTeck/kanboard_plugin_metadata
+^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
+
+- URL: https://github.com/BlueTeck/kanboard_plugin_metadata
+
+This plugin adds a basic GUI for Plugin Metadata. Not updated anymore, however the maintainer is active on GitHub.
+
+eSkiSo/Subtaskdate
+^^^^^^^^^^^^^^^^^^
+
+- URL: https://github.com/eSkiSo/Subtaskdate
+
+Adds a new due date field for subtasks, including events, API and search functions. Development is active.
+
+kanboard/plugin-budget
+^^^^^^^^^^^^^^^^^^^^^^
+
+- URL: https://github.com/kanboard/plugin-budget
+- Fork URL: https://github.com/trendspotter/kanboard-plugin-budget
+
+Allows to create budget lines, see expenses based on sub-task time tracking and manage user hourly rates. Repository has been forked. The original repository is archived.
+
+kanboard/plugin-calendar
+^^^^^^^^^^^^^^^^^^^^^^^^
+
+- URL: https://github.com/kanboard/plugin-calendar
+
+Adds embedded calendar view for Kanboard. Development is active.
+
+kanboard/plugin-chat
+^^^^^^^^^^^^^^^^^^^^
+
+- URL: https://github.com/kanboard/plugin-chat
+- Fork URL: https://github.com/trendspotter/kanboard-plugin-chat
+
+Minimalist internal chat for Kanboard. Allows only one room for all users. Repository has been forked. The original repository is archived.
+
+kanboard/plugin-gantt
+^^^^^^^^^^^^^^^^^^^^^
+
+- URL: https://github.com/kanboard/plugin-gantt
+
+Adds Gantt charts for Kanboard. Development is active.
+
+kanboard/plugin-gravatar
+^^^^^^^^^^^^^^^^^^^^^^^^
+
+- URL: https://github.com/kanboard/plugin-gravatar
+
+Enables Gravatar icons for Kanboard users. Repository is archived. There are no strings for translation, so it hasn't been forked.
+
+kanboard/plugin-registration
+^^^^^^^^^^^^^^^^^^^^^^^^^^^^
+
+- URL: https://github.com/kanboard/plugin-registration
+
+Allows new user to sign up to Kanboard. Development is active.
+
+kanboard/plugin-sms-2fa
+^^^^^^^^^^^^^^^^^^^^^^^
+
+- URL: https://github.com/kanboard/plugin-sms-2fa
+- Fork URL: https://github.com/trendspotter/kanboard-plugin-sms-2fa
+
+Allows to use text messages (SMS) instead of the default TOTP system (Time-based One-time Password Algorithm). Works with Twilio service. Repository has been forked. The original repository is archived.
+
+kanboard/plugin-task-board-date
+^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
+
+- URL: https://github.com/kanboard/plugin-task-board-date
+
+Adds new date field for tasks to define the visibility on the board and dashboard. Repository is archived. There are no strings for translation, so it hasn't been forked.
+
+oliviermaridat/kanboard-milestone-plugin
+^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
+
+- URL: https://github.com/oliviermaridat/kanboard-milestone-plugin
+
+Adds section for milestones to show their related tasks. Development is active.
+
+xavividal/kanboard-plugin-relationgraph
+^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
+
+- URL: https://github.com/xavividal/kanboard-plugin-relationgraph
+- Fork URL: https://github.com/trendspotter/kanboard-plugin-relationgraph
+
+Shows relations between tasks using a graph library. Repository has been forked. The original repository is inactive.

doc/applications/map-services.rst

@@ -0,0 +1,12 @@
+Map services used in applications
+=================================
+
+.. csv-table::
+   :file: attachments/map-services.csv
+   :header-rows: 1
+
+1. Used by CKAN extensions *reclineview*, *spatial* and *geoview*.
+2. Untested as the EcoGIS source code is not fully open. Looks like the data sources are configurable, but the full documentation is only in Italian.
+3. Used by Odoo *Google Maps* module to display company/partner address on map.
+4. Map is used by OMK and ODK Android clients. OMK Server only offers API.
+5. Sahana Eden supports multitude of connectors and protocols to process map and feature data. ArcGIS REST, Bing maps, GeoJSON, GeoRSS, Google Maps, GPX, KML, MGRS, OSM, OWM, Shapefile, TMS, WFS, WMS and XYZ.

doc/applications/opendatakit.rst

@@ -0,0 +1,24 @@
+OpenDataKit
+===========
+
+Overview
+--------
+
+OpenDataKit is a suite of tools that help organizations collect and manage data, typically via mobile application. The most interesting components used on SpotterVM are
+
+- **ODK Aggregate** - Main data storage server and analysis tool, written in Java, running on Apache Tomcat using PostgreSQL database.
+- **ODK Build** - Drag-and-drop form designer, written in Ruby 2.4, requires NodeJS for frontend assets.
+- **build2xlsform** - Service to convert ODK Build forms to xlsform-compliant XLSX, written in LiveScript (NodeJS).
+
+Upstream URLs:
+
+- **ODK Aggregate** - https://github.com/getodk/build
+- **ODK Build** - https://github.com/getodk/build
+- **build2xlsform** - https://github.com/getodk/build2xlsform
+
+ODK Build exports
+-----------------
+
+ODK Build runs in a container separate from ODK Aggregate and doesn't use any database engine for its persistent storage. ODK Build can however export the designed form to ODK Aggregate via HTTP endpoint. In case HTTPS is used with self-signed certificate, it needs to be imported to OpenSSL trust store prior to first communication attempt. In our container, this is ensured by ``add-ca-cert`` script.
+
+build2xlsform lives in the same container as ODK Build and allows for export of ODK Build JSON forms to XLSX files editable via any modern office suite.

doc/applications/openmapkit.rst

@@ -0,0 +1,12 @@
+OpenMapKit
+==========
+
+Overview
+--------
+
+OpenMapKit is a standalone extension to OpenDataKit providing mapping features and handles collection and aggregation of OpenStreetMap and OpenDataKit data generated via mobile applications.
+
+NodeJS compatibility
+--------------------
+
+OpenMapKit is purely NodeJS application. Unfortunately it depends on a libxmljs module in version incompatible with NodeJS version newer that 10. Due to that OpenMapKit is currently frozen on NodeJS 10.19.0 provided by Alpine 3.10.

doc/applications/pandora.rst

@@ -0,0 +1,25 @@
+Pan.do/ra
+=========
+
+Overview
+--------
+
+Pan.do/ra is a free, open source media archive platform. It allows to manage large, decentralized collections of video and collaboratively create metadata and time-based annotations. Pan.do/ra is a Django-based application written in python and is split to several components, most notably OxJS javascript framework and oxtimelines. It heavily relies on *ffmpeg* and uses *RabbitMQ* to pass messages between the components.
+
+Upstream URLs
+^^^^^^^^^^^^^
+
+- Pan.do/ra: https://code.0x2620.org/0x2620/pandora
+- OxJS: https://code.0x2620.org/0x2620/oxjs
+- python-ox: https://code.0x2620.org/0x2620/python-ox
+- oxtimelines: https://code.0x2620.org/0x2620/oxtimelines
+
+Localization
+------------
+
+Czech localtization for Pan.do/ra currently exists only in SpotterVM repository. Separate localization is required for Pan.do/ra and OxJS framework which it uses. Moreover, the list of supported languages is hardcoded, so localization entails also modification of this fixed list of languages.
+
+Python 3.8 compatibility
+------------------------
+
+Pandora uses Celery message broker, however depends on a version with known incompatibility with python 3.8, see https://github.com/celery/celery/issues/5761. This can be worked around by setting environment variable ``COLUMNS`` to value ``80`` prior to launching the celery process. The affected services run by container's s6 daemon supervisor are currently configured to use this workaround.