Join the conversation

Sign in to join this conversation, and others like it, in the communities you care about.

Wekan

Wekan is an open-source kanban board (Trello like) which allows a card-based task and to-do management.

Wekan / Bugs

Update recently? deleting

Update recently? deleting

Wekan / Bugs · February 28, 2020 at 4:04pm (Edited 5 years ago)

was there an update last evening or the day before?

deleting archived cards do not stay deleted. Refreshing screen and they return in the list of archived things to delete

HOW do you clear out all cards from the system not using the GUI? Its suddenly happening on all three systems with no code changes.

Can we roll back to the last version. THis is broken

other issues: when updating with new cards from the api looking at the contents of the new cards put the GUI into some sort of wait mode. Until you refresh the screen several times you get this behavior that indicates its not connecting to Mongo or something

In fact the deleting the archived boards works and on screen refresh they are still there seems like its never deleting from Mongo at all

Another hint: in addition to the GUI thinking the archived card is deleted and when you refresh its not, the webhooks are not being sent out when the delete happens. So it seems that the GUI is disconnected from the mongo and webhook piece entirely.

Question: in addition to rolling back the code, using snap installed wekan, what is the correct way to get into mongo shell under snap wekan? I can at least see what is in the database then and perhaps clear it out

LMK

more hints, I can't delete archived cards but I can restore them. When I do I cannot disable or remove webhooks associated

HOw do I get into wekan under snap mongo to clear these out?

Load previous messages

February 28, 2020 at 10:20pm

yeah obviously no users

    • reply
    • like

    February 28, 2020 at 11:34pm

    Is there any reason why we cannot run Mongo ith authentication?

      • reply
      • like

      I mean mongo should not be exposed ever in this situation

        • reply
        • like

        but a corruption in the mongo db would not happen if mongo auth were alway used

          • reply
          • like

          February 29, 2020 at 12:46am

          @pvcon13 How auth would prevent corruption?

            • reply
            • like

            Auth is just adding auth

              • reply
              • like

              And setting MONGO_URL to have login credentials

                • reply
                • like

                Like when running without Snap, with bash script or systemd service https://github.com/wekan/wekan/wiki/Raspberry-Pi

                  • reply
                  • like

                  Corruption can happen if there is bad sectors at harddrive, or disk becomes full

                    • reply
                    • like

                    But I think adding auth can not prevent it

                      • reply
                      • like

                      MongoDB is only exposed to localhost

                        • reply
                        • like

                        it is not exposed to network when using snap

                          • reply
                          • like

                          only those that have SSH access to server can access mongodb

                            • reply
                            • like

                            like sysadmins etc

                              • reply
                              • like

                              usually ssh is protected with public key

                                • reply
                                • like

                                that is safer than using password login

                                  • reply
                                  • like

                                  and at server you can allow only http and https with ufw

                                    • reply
                                    • like

                                    if you login for example at AWS LightSail web interface

                                      • reply
                                      • like

                                      and don't expose ssh

                                        • reply
                                        • like

                                        or alternatively, only add access from your current IP address for the time you access server

                                          • reply
                                          • like

                                          For ssh it's also possible to use fwknop https://www.cipherdyne.org/fwknop/

                                            • reply
                                            • like

                                            At Snap it's also possible to set Wekan to use external mongo with sudo snap set wekan mongo-url='......'

                                              • reply
                                              • like

                                              and with docker and source/bundle too

                                                • reply
                                                • like

                                                Percona MongoDB also has encryption but I have not tried it https://www.percona.com/software/mongodb/feature-comparison

                                                  • reply
                                                  • like

                                                  Wekan also works with Percona MongoDB

                                                    • reply
                                                    • like