kratzersmz/teska-cloud

Alpha Code

ToDo

• Adding deny access for Klassenarbeits-User
• Adding loop over Schooltype to support multiple mandants
• More Docu
• Adding paedML Linux Support
• Adding LinuxMusterNet Support

Info

Goal of this project is to have an hybrid installer for paedml-linux/paedml-windows, serving a nextcloud installation best practice the docker way
This project is currently in developing. You'll find the prequisites for ubuntu server in the prerequisitsfile. Uses https://github.com/nextcloud/docker as best practice source.

Benefits:

• lets encrypt
• collabora/onlyoffice, can be choosen interactively
• best practice docker-compose way
• all automated in an interactive python script

Instructions paedml-windows

Add an A Record on your public Domain

In this example Octo/Sophos public IP is 37.22.22.111 e.g. cloud.hans-schule.de IN A 37.22.22.111 3600s (01:00:00)

if you want to use collabora/onlyoffice, please setup another domain e.g. office.hans-schule.de and point to same IP Pls wait until the domain records where spread to all Nameservers(mostly 24h)

Prepare your Octogate:

1. Add a Dummy switch without uplink and bind an portgroup to it (ESXi)

2. Edit Octo Settings and Add this portgroup to second network Adapter (ESXi)

3. Add a DMZ Interface: In ESXi add second network interface to a portgroup hanging on an vswitch without uplink

4. Add Portfreischaltungen(icmp, dns not needed anymore...):
   

5. Add Portweiterleitungen(SS NOT NEEDED):
   

Prepare your dockerhost(nextcloud):

IP: 192.168.201.7

Subnet: 255.255.255.0

Gateway: 192.168.201.1

DNS: 8.8.8.8

Prepare your Ldapbind user

Add an new ldapbinduser for nextcloud under _ServiceAccounts. Please copy ldapbinduser to it inherits its attributes.

Add Reverse Lookup zone

Add an ptr zone for 192.168.201.

Add a new forward Lookup Zone in your DNS Server:

e.g. cloud.hans-schule.de and Point the A record directly to 192.168.201.7

if using collabora/onlyoffice, point e.g. office.hans-schule.de directly with a A record to 192.168.201.7

HowTo run

use an linux distri you want. this stuff was build on ubuntu-server, but any other distro with docker+docker-compose + a few python moduls should do.

Install prerequisits metioned in the prerequists file in this repo

Install docker: https://docs.docker.com/engine/install/

Install docker-compose: https://docs.docker.com/compose/install/

git clone https://github.com/kratzersmz/teska-cloud.git

cd teska-cloud

start install script with: python3 setup.py

Parameters for setup.py

• -p, --pull -> get latest data from git repo
• -f, --fixupdate -> If after updates in webinterface is showing some Info about indices and Databases which need to fixed. This is done with this argument
• -l, ldapdisable -> Disables Ldap config, needful for debbuging Internal Server Error after login, Enable pls over webinterface
• -u, --update -> will update your installation to latest, currently not implemented

teska cloud VM

• if you get vmx-19 not supported edit *.ovf to vmx-13
• sudo su
• navigate to /home/docker/teska-cloud
• git pull
• git reset --hard
• python3 setup.py
• after setup please change teska pw, with "passwd teska"

Caveats

• if setup succeeds without errors and you'll get an Internal Server error when loggin into your new cloud, mostly ldapbinduser is wrong setup (no ldap query attributes or wrong pw or port is closed in firewall)
• if login succeeds to nextcloud and there are no shares visible, check the rights on Tausch. In some cases G_Lehrer seemed to missed

Instructions paedml-linux