Join the conversation

Sign in to join this conversation, and others like it, in the communities you care about.

Wekan

Wekan is an open-source kanban board (Trello like) which allows a card-based task and to-do management.

Wekan / Bugs

Update recently? deleting

Update recently? deleting

Wekan / Bugs · February 28, 2020 at 4:04pm (Edited 5 years ago)

was there an update last evening or the day before?

deleting archived cards do not stay deleted. Refreshing screen and they return in the list of archived things to delete

HOW do you clear out all cards from the system not using the GUI? Its suddenly happening on all three systems with no code changes.

Can we roll back to the last version. THis is broken

other issues: when updating with new cards from the api looking at the contents of the new cards put the GUI into some sort of wait mode. Until you refresh the screen several times you get this behavior that indicates its not connecting to Mongo or something

In fact the deleting the archived boards works and on screen refresh they are still there seems like its never deleting from Mongo at all

Another hint: in addition to the GUI thinking the archived card is deleted and when you refresh its not, the webhooks are not being sent out when the delete happens. So it seems that the GUI is disconnected from the mongo and webhook piece entirely.

Question: in addition to rolling back the code, using snap installed wekan, what is the correct way to get into mongo shell under snap wekan? I can at least see what is in the database then and perhaps clear it out

LMK

more hints, I can't delete archived cards but I can restore them. When I do I cannot disable or remove webhooks associated

HOw do I get into wekan under snap mongo to clear these out?

Load previous messages

February 28, 2020 at 10:16pm

do I have to register again?

    • reply
    • like

    yeah obviously no users

      • reply
      • like

      February 28, 2020 at 11:34pm

      Is there any reason why we cannot run Mongo ith authentication?

        • reply
        • like

        I mean mongo should not be exposed ever in this situation

          • reply
          • like

          but a corruption in the mongo db would not happen if mongo auth were alway used

            • reply
            • like

            February 29, 2020 at 12:46am

            @pvcon13 How auth would prevent corruption?

              • reply
              • like

              Auth is just adding auth

                • reply
                • like

                And setting MONGO_URL to have login credentials

                  • reply
                  • like

                  Like when running without Snap, with bash script or systemd service https://github.com/wekan/wekan/wiki/Raspberry-Pi

                    • reply
                    • like

                    Corruption can happen if there is bad sectors at harddrive, or disk becomes full

                      • reply
                      • like

                      But I think adding auth can not prevent it

                        • reply
                        • like

                        MongoDB is only exposed to localhost

                          • reply
                          • like

                          it is not exposed to network when using snap

                            • reply
                            • like

                            only those that have SSH access to server can access mongodb

                              • reply
                              • like

                              like sysadmins etc

                                • reply
                                • like

                                usually ssh is protected with public key

                                  • reply
                                  • like

                                  that is safer than using password login

                                    • reply
                                    • like

                                    and at server you can allow only http and https with ufw

                                      • reply
                                      • like

                                      if you login for example at AWS LightSail web interface

                                        • reply
                                        • like

                                        and don't expose ssh

                                          • reply
                                          • like

                                          or alternatively, only add access from your current IP address for the time you access server

                                            • reply
                                            • like

                                            For ssh it's also possible to use fwknop https://www.cipherdyne.org/fwknop/

                                              • reply
                                              • like

                                              At Snap it's also possible to set Wekan to use external mongo with sudo snap set wekan mongo-url='......'

                                                • reply
                                                • like

                                                and with docker and source/bundle too

                                                  • reply
                                                  • like

                                                  Percona MongoDB also has encryption but I have not tried it https://www.percona.com/software/mongodb/feature-comparison

                                                    • reply
                                                    • like