Join the conversation

Wekan

General

Wekan is an open-source kanban board (Trello like) which allows a card-based task and to-do management.

More active conversations

Wekan / General

Mongo access and setup parameters

Wekan/General · January 7, 2020 at 5:09pm

Mongo access and setup parameters

Wekan / General · January 7, 2020 at 5:09pm (Edited 4 years ago)

If I want to get access to mongodb database I might have to change a few parameters (right now it binds to 127.0.0.1 and port 27019 etc. Will not blow things up but have a few simple questions.

When I start and stop wekan ... does that start and stop mongo (can't find that in the scripts), meaning I stop wekan, make an edit in mongo and then restart wekan and if it works , great, and if not rollback and try again?

I see the process running mongo and see mongo-control scripting and its all referencing env variables in that script and its is in /snap/wekan/714/bin. I see a file called "config" where it appears all those env values are set. Is that where I do minor editing, and when I restart wekan, itsrestarts mongodb and rereads those variables?

All I want to do is to be able to read the mongodb directly on occasion (not change anything) through a local vpc secure server to one IP address while doing api development. I suspect that if I open up port 27019 to a single ip address and add a login. or use the wekan login, which I believe is documented in the installation notes, I probably would not be able to see that mongodb remotely as bound.

Oh another question. I logged into Mongo locally on the terminal (on the wekan server) and it let me in without auth. Is that correct? You run mongo without authentication enabled and leave it away from everything else for security?

If so, if I did want to expose Mongo inside of wekan even with a single ip and only for a short while, I would want to enable auth in mongo. If so where can I edit the wekan config to use/add creds?

If it is already under auth then disregard my question. I wanted to confirm that the binding was why I could not log in remotely which made me want to confirm the creds locally first..... Assumed 0 or no bind vs 127.

Load previous messages

January 8, 2020 at 8:47pm

Lauri Ojansivu@xet7

Team

8:47pm

You should use REST API

8:48pm

Or access mongodb with some programming language, but remember that mongodb database structure can change in new Wekan versions, that would most likely break your code

8:48pm

REST API will stay the same

8:49pm

or alternatively, you could have check in your code about has database structure changed

8:49pm

You can search Wekan open and closed issues at https://github.com/wekan/wekan/issues about mongodb auth

8:50pm

I think it's already possible to change mongo-url if really necessary

8:50pm

But I don't know why local mongodb would need auth

8:51pm

only server admins with ssh access can access files at server

8:52pm

normal users use webbrowser or REST API

8:53pm

Yes Wekan node+mongodb both start with sudo snap start wekan

8:53pm

If you only stop wekan, do it with sudo snap stop wekan.wekan

8:53pm

and later start it again with sudo snap start wekan.wekan

8:55pm

Likewise with mongodb, sudo snap start wekan.mongodb

8:55pm

There is different setting for Caddy, sudo snap set wekan caddy-enabled='false'

Edited

8:55pm

or true

9:00pm

I don't know why would it be necessary to expose mongodb. You can run that script directly at server that Wekan Snap installed. Or connect with MongoDB GUI like nosqlbooster though ssh and run with GUI. or install SaltStack and use it's remote commands to run some script or code at that Wekan Snap server.

9:02pm

Well sure, if that feature is required, you could develop it and send pull request

9:02pm

Or pay me to develop it https://wekan.team/commercial-support/

9:02pm

You see current snap commands with wekan.help | less