WikiSuite | ClearOS development

2021-07-20: WikiSuite will now support all major Linux distros. Thus, the information below is no longer updated. It may still be valid, or not. It will be eventually removed from this site, so anything relevant should be moved to the appropriate site. For anything related to ClearOS, please search among the following: ClearOS site, code base, Developer docs, Wiki or forum.

Please contact us if you would like to help out.

Big picture discussion

We want ClearOS to be a better platform to manage multiple PHP-powered websites, to be a more interesting platform to host websites and attract web developers (aka the ClearOS web server app). On a typical WikiSuite installation, there will be at least one Tiki instance and, most likely, another one for testing / development. We don't need to be an advanced platform to manage shared hosting (like ISPConfig is with billing, resellers, etc.) but some things should be better.
We want ClearOS to be a great development environment for all apps in WikiSuite, starting with Tiki Wiki CMS Groupware. So Tiki developers can develop on and go to production on the same platform.
See: ClearOS App Development
How to build a system to demo WikiSuite
Roadmap for the email / webmail system in WikiSuite
Make apps for each component (Elasticsearch and Kibana, FusionPBX (including FreeSWITCH), Kimchi (including KVM), Openfire Meetings (including Jitsi Meet), Syncthing, Tiki Wiki CMS Groupware, Xibo, and WikiSuite as a meta app)
Others issues listed below

Task tracker

	Description	Assigned to	Priority
	WikiSuite Orchestrator		4
	Test and document the Jitsi - Tiki provisionning in the context of WikiSuite		5 (low)
	Use Tiki categories and/ or tags outside of Tiki (ex.: Emails, Files, etc.)		5 (low)
	Tiki Newsletters and Cyrus IMAP interoperability		5 (low)
	Xibo support on CentOS 7.x (ex.: via Docker)		4
	Implement Multi-factor authentication (MFA) for all apps		2
	Investigate tools to facilitate management on the command line		5 (low)
	Look into https://reproducible-builds.org		5 (low)
	Test FusionPBX with SQLite		4

Closed

Description	Assigned to	Priority
Make development plan with ClearOS core team	Marc Laporte	1 (high)
Create ClearOS app for Openfire Meetings	guus.der.kinderen	2
Create ClearOS app for TRIM, from which to install Tiki		2
run mysql_secure_installation in unattended mode at wikisuite install time (after mariadb)		2
ClearOS Web Server: When creating or editing a web space, it should be possible to pick PHP versions (7.1 vs 7.0 vs 5.6)		2
Fail2ban should be checked in clearos (attack detector) to ensure the correct param are set to prevent more than just a few (<10) connection attempts		2
ClearOS: better segmentation of web spaces (permissions, data storage, etc.)		2
Make app-kimchi Check and Fix Missing KVM Settings		2
Picking PHP Version for Crontab Scripts		2
ClearOS in Gateway Mode Refuses to Route KVMs		2
Create ClearOS app for WikiSuite		3
Make sure ClearOS-Tiki-LDAP all play nice together (create a new LDAP bind type for ClearOS)		3
Files on disk (can be in ClearOS's FlexShare and or Syncthing) to be accessible to Elasticsearch and Tiki		3
IMAP folder tracker field type	Victor Emanouilov	3
Create ClearOS app for Syncthing		4
Create a Kolab app for ClearOS		4
Done: Create ClearOS app for Kimchi (incl. KVM)		4
Create ClearOS app for Matomo		5 (low)
Create ClearOS apps for FusionPBX and FreeSWITCH		5 (low)
Document how to configure Content Delivery Network for Tiki and ClearOS	Marc Laporte	5 (low)
FusionPBX / FreeSWITCH access to ClearOS OpenLDAP / Tiki address book		5 (low)
Users / groups / permissions for ClearOS interop with Kimchi		5 (low)
Attack detector (Fail2ban) for Clearos: add more info and options to admin panel		5 (low)

Questions

~~Should work for PHP-CLI. Or if too much work, should be quite recent (like PHP 5.6) because some of the PHP-CLI apps don't run on PHP 5.3~~ Solved in latest version of PHP engines.
How about override of php.ini? and httpd.conf?
/var/www/error
- Why do I have Content-language: cs Content-type: text/html; charset=ISO-8859-2 ?
- How to override for /var/www/virtual ?
How could Tiki Remote Instance Manager (TRIM) create new websites via the API (instead of GUI)

Tracked on ClearOS tracker

0001260: Add Global Address Book app
~~0007921: SSL / HTTPS: Generate Certificate Signing Request (CSR) certificates from the GUI~~ fixed
~~0007491: SSL / HTTPS: Certificate Manager add support for intermediate certificates~~ fixed via https://github.com/clearos/app-certificate-manager/commit/6bed4429f6143fc8691b0701bd2fd87fd3759f9a
0005242: Add ability to set / override php.ini settings such as upload_max_filesize through the GUI
~~0005232: Add ability to set MySQL settings such as max_allowed_packet through the GU~~ resolved
~~0007571: Default setting for PhpMyAdmin should permit much larger uploads~~ fixed
~~0002098: PHP: Setting default_charset to an empty value is not recommended.~~ fixed
0001855: How to deal with PHP apps which can be updated via the web interface by the admin user?
0000746: Add GUI to cron manager
- Alternative is to add app-specific cron jobs in each app, so the end user just picks the task and frequency. But this won't really work well when you want to install multiple instances of an app (because apps focus on the normal use case of just one instance).
- See also: https://github.com/clearos/app-tasks
0001830: Tiki and other web apps: make sure Incoming firewall ports are open
0002206: Check validity of domain name
0001761: DNS aliases should be visible in list mode
0001941: Title of admin panel reports "localhost.localdomain" even though a domain has been set (it's just a cosmetic issue, as the data is OK but just in cache)

Other ideas

HTTPS / SSL: Great results by default on http://ssl-checker.online-domain-tools.com/ and https://www.ssllabs.com/ssltest/
how can we tweak the params for the attack detector (fail2ban) through the ClearOS UI? I mean, indicate which number of attempts are the threshold, and for how long they are banned.
Make list of all subdomains in use, and by which application
- wildcard subdomain: do nothing or redirect to example.org Ref: http://en.wikipedia.org/wiki/Wildcard_DNS_record
OpenLDAP to integrate well with all apps
- Openfire: works well so far
- Tiki (some issues still)
- http://www.clearfoundation.com/docs/developer/framework/tutorials/hello_world
Add public SSH key in the GUI to provide login access
feature redirect:
- redirect subdomain to another or to a directory
- redirect directory (ex.: /webmail) to another ot a domain name (ex.: webmail.example.org)

Other notes

To participate to the ClearOS wiki
1. Go to https://www.clearos.com and click on the top right login and proceed to login to the Community Forums.
2. Once logged in, navigate here: https://www.clearos.com/dokuwiki2/doku.php?id=start It will get you the 'behind Joomla' Dokuwiki access where you can then edit/create pages.