From a24f0875146ac5f62fff79f9651c7ea36b583284 Mon Sep 17 00:00:00 2001
From: Stavros Kois <47820033+stavros-k@users.noreply.github.com>
Date: Tue, 29 Mar 2022 00:36:40 +0300
Subject: [PATCH] feat(wekan): add wekan (#2328)

* feat(wekan): add wekan

* db.. db

* dbname

* bump

* add some gui

* more options

* test

* wait for update

* more options

* common

* full options

* try rootless

* bump common

* mongodb 0.0.3

* update image ref
---
 charts/incubator/wekan/Chart.yaml            |   31 +
 charts/incubator/wekan/questions.yaml        | 1307 ++++++++++++++++++
 charts/incubator/wekan/templates/common.yaml |    1 +
 charts/incubator/wekan/values.yaml           |   41 +
 docs/_static/img/appicons/wekan.png          |  Bin 0 -> 8408 bytes
 docs/manual/default-ports.md                 |    1 +
 6 files changed, 1381 insertions(+)
 create mode 100644 charts/incubator/wekan/Chart.yaml
 create mode 100644 charts/incubator/wekan/questions.yaml
 create mode 100644 charts/incubator/wekan/templates/common.yaml
 create mode 100644 charts/incubator/wekan/values.yaml
 create mode 100644 docs/_static/img/appicons/wekan.png

diff --git a/charts/incubator/wekan/Chart.yaml b/charts/incubator/wekan/Chart.yaml
new file mode 100644
index 00000000000..315cfc5fef0
--- /dev/null
+++ b/charts/incubator/wekan/Chart.yaml
@@ -0,0 +1,31 @@
+apiVersion: v2
+appVersion: "10.6.2"
+dependencies:
+- name: common
+  repository: https://library-charts.truecharts.org
+  version: 9.2.3
+- condition: mongodb.enabled
+  name: mongodb
+  repository: https://truecharts.org/
+  version: 0.0.3
+description: WeKan - Open Source kanban
+home: https://github.com/truecharts/apps/tree/master/charts/stable/wekan
+icon: https://truecharts.org/_static/img/appicons/wekan.png
+keywords:
+- wekan
+- kanban
+kubeVersion: '>=1.16.0-0'
+maintainers:
+- email: info@truecharts.org
+  name: TrueCharts
+  url: https://truecharts.org
+name: wekan
+sources:
+- https://github.com/wekan/wekan
+- https://wekan.github.io/
+version: 0.0.1
+annotations:
+  truecharts.org/catagories: |
+    - productivity
+  truecharts.org/SCALE-support: "true"
+  truecharts.org/grade: U
diff --git a/charts/incubator/wekan/questions.yaml b/charts/incubator/wekan/questions.yaml
new file mode 100644
index 00000000000..378b6481b34
--- /dev/null
+++ b/charts/incubator/wekan/questions.yaml
@@ -0,0 +1,1307 @@
+# Include{groups}
+portals:
+  open:
+    protocols:
+      - "$kubernetes-resource_configmap_portal_protocol"
+    host:
+      - "$kubernetes-resource_configmap_portal_host"
+    ports:
+      - "$kubernetes-resource_configmap_portal_port"
+questions:
+  - variable: portal
+    group: "Container Image"
+    label: "Configure Portal Button"
+    schema:
+      type: dict
+      hidden: true
+      attrs:
+        - variable: enabled
+          label: "Enable"
+          description: "enable the portal button"
+          schema:
+            hidden: true
+            editable: false
+            type: boolean
+            default: true
+# Include{global}
+  - variable: controller
+    group: "Controller"
+    label: ""
+    schema:
+      additional_attrs: true
+      type: dict
+      attrs:
+        - variable: advanced
+          label: "Show Advanced Controller Settings"
+          schema:
+            type: boolean
+            default: false
+            show_subquestions_if: true
+            subquestions:
+              - variable: type
+                description: "Please specify type of workload to deploy"
+                label: "(Advanced) Controller Type"
+                schema:
+                  type: string
+                  default: "deployment"
+                  required: true
+                  enum:
+                    - value: "deployment"
+                      description: "Deployment"
+                    - value: "statefulset"
+                      description: "Statefulset"
+                    - value: "daemonset"
+                      description: "Daemonset"
+              - variable: replicas
+                description: "Number of desired pod replicas"
+                label: "Desired Replicas"
+                schema:
+                  type: int
+                  default: 1
+                  required: true
+              - variable: strategy
+                description: "Please specify type of workload to deploy"
+                label: "(Advanced) Update Strategy"
+                schema:
+                  type: string
+                  default: "Recreate"
+                  required: true
+                  enum:
+                    - value: "Recreate"
+                      description: "Recreate: Kill existing pods before creating new ones"
+                    - value: "RollingUpdate"
+                      description: "RollingUpdate: Create new pods and then kill old ones"
+                    - value: "OnDelete"
+                      description: "(Legacy) OnDelete: ignore .spec.template changes"
+# Include{controllerExpert}
+  - variable: env
+    group: "Container Configuration"
+    label: "Image Environment"
+    schema:
+      additional_attrs: true
+      type: dict
+      attrs:
+        - variable: ROOT_URL
+          label: "ROOT_URL"
+          schema:
+            type: string
+            default: ""
+            required: true
+        - variable: BROWSER_POLICY_ENABLED
+          label: "BROWSER_POLICY_ENABLED"
+          description: "Enable browser policy and allow one trusted URL that can have iframe that has Wekan embedded inside."
+          schema:
+            type: boolean
+            default: false
+        - variable: TRUSTED_URL
+          label: "TRUSTED_URL"
+          description: "When browser policy is enabled, HTML code at this Trusted URL can have iframe that embeds Wekan inside."
+          schema:
+            type: string
+            default: ""
+        - variable: logoutenabled
+          label: "Logout/Login Settings"
+          schema:
+            type: boolean
+            default: false
+            show_subquestions_if: true
+            subquestions:
+              - variable: LOGOUT_WITH_TIMER
+                label: "LOGOUT_WITH_TIMER"
+                schema:
+                  type: boolean
+                  default: false
+              - variable: LOGOUT_IN
+                label: "LOGOUT_IN (Days)"
+                schema:
+                  type: int
+                  default: 0
+              - variable: LOGOUT_ON_HOURS
+                label: "LOGOUT_ON_HOURS"
+                schema:
+                  type: int
+                  default: 0
+              - variable: LOGOUT_ON_MINUTES
+                label: "LOGOUT_ON_MINUTES"
+                schema:
+                  type: int
+                  default: 0
+              - variable: ACCOUNTS_COMMON_LOGIN_EXPIRATION_IN_DAYS
+                label: "ACCOUNTS_COMMON_LOGIN_EXPIRATION_IN_DAYS"
+                schema:
+                  type: int
+                  default: 90
+        - variable: passwordnabled
+          label: "Logout/Login Settings"
+          schema:
+            type: boolean
+            default: false
+            show_subquestions_if: true
+            subquestions:
+              - variable: ACCOUNTS_LOCKOUT_KNOWN_USERS_FAILURES_BEFORE
+                label: "ACCOUNTS_LOCKOUT_KNOWN_USERS_FAILURES_BEFORE"
+                schema:
+                  type: int
+                  default: 3
+              - variable: ACCOUNTS_LOCKOUT_KNOWN_USERS_PERIOD
+                label: "ACCOUNTS_LOCKOUT_KNOWN_USERS_PERIOD"
+                schema:
+                  type: int
+                  default: 60
+              - variable: ACCOUNTS_LOCKOUT_KNOWN_USERS_FAILURE_WINDOW
+                label: "ACCOUNTS_LOCKOUT_KNOWN_USERS_FAILURE_WINDOW"
+                schema:
+                  type: int
+                  default: 15
+              - variable: ACCOUNTS_LOCKOUT_UNKNOWN_USERS_FAILURES_BERORE
+                label: "ACCOUNTS_LOCKOUT_UNKNOWN_USERS_FAILURES_BERORE"
+                schema:
+                  type: int
+                  default: 3
+              - variable: ACCOUNTS_LOCKOUT_UNKNOWN_USERS_LOCKOUT_PERIOD
+                label: "ACCOUNTS_LOCKOUT_UNKNOWN_USERS_LOCKOUT_PERIOD"
+                schema:
+                  type: int
+                  default: 60
+              - variable: ACCOUNTS_LOCKOUT_UNKNOWN_USERS_FAILURE_WINDOW
+                label: "ACCOUNTS_LOCKOUT_UNKNOWN_USERS_FAILURE_WINDOW"
+                schema:
+                  type: int
+                  default: 15
+        - variable: imagenabled
+          label: "Image Settings"
+          schema:
+            type: boolean
+            default: false
+            show_subquestions_if: true
+            subquestions:
+              - variable: MAX_IMAGE_PIXEL
+                label: "MAX_IMAGE_PIXEL"
+                schema:
+                  type: int
+                  default: 1024
+              - variable: IMAGE_COMPRESS_RATIO
+                label: "IMAGE_COMPRESS_RATIO"
+                schema:
+                  type: int
+                  default: 80
+        - variable: mailenabled
+          label: "Mail Settings"
+          schema:
+            type: boolean
+            default: false
+            show_subquestions_if: true
+            subquestions:
+              - variable: MAIL_URL
+                label: "MAIL_URL"
+                schema:
+                  type: string
+                  default: ""
+              - variable: MAIL_SERVICE_USER
+                label: "MAIL_SERVICE_USER"
+                schema:
+                  type: string
+                  default: ""
+              - variable: MAIL_SERVICE_PASSWORD
+                label: "MAIL_SERVICE_PASSWORD"
+                schema:
+                  type: string
+                  private: true
+                  default: ""
+              - variable: MAIL_SERVICE
+                label: "MAIL_SERVICE"
+                schema:
+                  type: string
+                  default: ""
+        - variable: notificationsenabled
+          label: "Notifications Settings"
+          schema:
+            type: boolean
+            default: false
+            show_subquestions_if: true
+            subquestions:
+              - variable: BIGEVENTS_PATTERN
+                label: "BIGEVENTS_PATTERN"
+                schema:
+                  type: string
+                  default: "NONE"
+              - variable: NOTIFICATION_TRAY_AFTER_READ_DAYS_BEFORE_REMOVE
+                label: "NOTIFICATION_TRAY_AFTER_READ_DAYS_BEFORE_REMOVE"
+                description: "Number of days after a notification is read before we remove it."
+                schema:
+                  type: int
+                  default: 90
+              - variable: EMAIL_NOTIFICATION_TIMEOUT
+                label: "EMAIL_NOTIFICATION_TIMEOUT"
+                schema:
+                  type: int
+                  default: 30000
+              - variable: NOTIFY_DUE_DAYS_BEFORE_AND_AFTER
+                label: "NOTIFY_DUE_DAYS_BEFORE_AND_AFTER"
+                description: "Notify due days, default is None, 2 days before and on the event day"
+                schema:
+                  type: string
+                  default: "2,0"
+              - variable: NOTIFY_DUE_AT_HOUR_OF_DAY
+                label: "NOTIFY_DUE_AT_HOUR_OF_DAY"
+                description: "Notify due at hour of day."
+                schema:
+                  type: int
+                  default: 8
+        - variable: personalizationenabled
+          label: "UX Settings"
+          schema:
+            type: boolean
+            default: false
+            show_subquestions_if: true
+            subquestions:
+              - variable: RESULTS_PER_PAGE
+                label: "RESULTS_PER_PAGE"
+                schema:
+                  type: int
+                  default: 20
+                  required: true
+              - variable: RICHER_CARD_COMMENT_EDITOR
+                label: "RICHER_CARD_COMMENT_EDITOR"
+                schema:
+                  type: boolean
+                  default: false
+              - variable: CARD_OPENED_WEBHOOK_ENABLED
+                label: "CARD_OPENED_WEBHOOK_ENABLED"
+                schema:
+                  type: boolean
+                  default: false
+              - variable: PASSWORD_LOGIN_ENABLED
+                label: "PASSWORD_LOGIN_ENABLED"
+                schema:
+                  type: boolean
+                  default: false
+              - variable: WAIT_SPINNER
+                label: "WAIT_SPINNER"
+                description: "Sets the Wait Spinner animation"
+                schema:
+                  type: string
+                  default: "Bounce"
+                  enum:
+                    - value: "Bounce"
+                      description: "Bounce"
+                    - value: "Cube"
+                      description: "Cube"
+                    - value: "Cube-Grid"
+                      description: "Cube-Grid"
+                    - value: "Dot"
+                      description: "Dot"
+                    - value: "Double-Bounce"
+                      description: "Double-Bounce"
+                    - value: "Rotateplane"
+                      description: "Rotateplane"
+                    - value: "Scaleout"
+                      description: "Scaleout"
+                    - value: "Wave"
+                      description: "Wave"
+        - variable: backendenabled
+          label: "Backend Settings"
+          schema:
+            type: boolean
+            default: false
+            show_subquestions_if: true
+            subquestions:
+              - variable: WITH_API
+                label: "WITH_API"
+                schema:
+                  type: boolean
+                  default: true
+              - variable: WEBHOOKS_ATTRIBUTES
+                label: "WEBHOOKS_ATTRIBUTES"
+                description: "What to send to Outgoing Webhook."
+                schema:
+                  type: string
+                  default: "cardId,listId,oldListId,boardId,comment,user,card,commentId,swimlaneId,customerField,customFieldValue"
+        - variable: corsenabled
+          label: "CORS Settings"
+          schema:
+            type: boolean
+            default: false
+            show_subquestions_if: true
+            subquestions:
+              - variable: CORS
+                label: "CORS"
+                schema:
+                  type: string
+                  default: "*"
+              - variable: CORS_ALLOW_HEADERS
+                label: "CORS_ALLOW_HEADERS"
+                schema:
+                  type: string
+                  default: "Authorization,Content-Type"
+              - variable: CORS_EXPOSE_HEADERS
+                label: "CORS_EXPOSE_HEADERS"
+                schema:
+                  type: string
+                  default: "*"
+        - variable: matomoenabled
+          label: "CORS Settings"
+          schema:
+            type: boolean
+            default: false
+            show_subquestions_if: true
+            subquestions:
+              - variable: MATOMO_ADDRESS
+                label: "MATOMO_ADDRESS"
+                description: "The address of the server where Matomo is hosted."
+                schema:
+                  type: string
+                  default: ""
+              - variable: MATOMO_SITE_ID
+                label: "MATOMO_SITE_ID"
+                description: "The value of the site ID given in Matomo server for Wekan."
+                schema:
+                  type: int
+                  default: 1
+              - variable: MATOMO_DO_NOT_TRACK
+                label: "MATOMO_DO_NOT_TRACK"
+                description: "The option do not track which enables users to not be tracked by matomo."
+                schema:
+                  type: boolean
+                  default: true
+              - variable: MATOMO_WITH_USERNAME
+                label: "MATOMO_WITH_USERNAME"
+                description: "The option that allows matomo to retrieve the username."
+                schema:
+                  type: boolean
+                  default: true
+        - variable: ORACLE_OIM_ENABLED
+          label: "ORACLE_OIM_ENABLED"
+          description: "OAUTH2 ORACLE on premise identity manager OIM"
+          schema:
+            type: boolean
+            default: false
+        - variable: oatuhncenabled
+          label: "OAUTH2 Nextcloud Settings"
+          schema:
+            type: boolean
+            default: false
+            show_subquestions_if: true
+            subquestions:
+              - variable: OAUTH2_ENABLED
+                label: "OAUTH2_ENABLED"
+                schema:
+                  type: boolean
+                  default: false
+              - variable: OAUTH2_LOGIN_STYLE
+                label: "OAUTH2_LOGIN_STYLE"
+                description: "OAuth2 login style: popup or redirect."
+                schema:
+                  type: string
+                  default: "redirect"
+                  enum:
+                    - value: "redirect"
+                      description: "redirect"
+                    - value: "popup"
+                      description: "popup"
+              - variable: OAUTH2_CLIENT_ID
+                label: "OAUTH2_CLIENT_ID"
+                description: "Application GUID captured during app registration"
+                schema:
+                  type: string
+                  default: ""
+              - variable: OAUTH2_SECRET
+                label: "OAUTH2_SECRET"
+                description: "Secret key generated during app registration"
+                schema:
+                  type: string
+                  default: ""
+              - variable: OAUTH2_SERVER_URL
+                label: "OAUTH2_SERVER_URL"
+                schema:
+                  type: string
+                  default: ""
+              - variable: OAUTH2_AUTH_ENDPOINT
+                label: "OAUTH2_AUTH_ENDPOINT"
+                schema:
+                  type: string
+                  default: ""
+              - variable: OAUTH2_USERINFO_ENDPOINT
+                label: "OAUTH2_USERINFO_ENDPOINT"
+                schema:
+                  type: string
+                  default: ""
+              - variable: OAUTH2_TOKEN_ENDPOINT
+                label: "OAUTH2_TOKEN_ENDPOINT"
+                schema:
+                  type: string
+                  default: ""
+              - variable: OAUTH2_ID_MAP
+                label: "OAUTH2_ID_MAP"
+                description: "The claim name you want to map to the unique ID field."
+                schema:
+                  type: string
+                  default: ""
+              - variable: OAUTH2_USERNAME_MAP
+                label: "OAUTH2_USERNAME_MAP"
+                description: "The claim name you want to map to the username field."
+                schema:
+                  type: string
+                  default: ""
+              - variable: OAUTH2_FULLNAME_MAP
+                label: "OAUTH2_FULLNAME_MAP"
+                description: "The claim name you want to map to the full name field."
+                schema:
+                  type: string
+                  default: ""
+              - variable: OAUTH2_EMAIL_MAP
+                label: "OAUTH2_EMAIL_MAP"
+                description: "The claim name you want to map to the email field."
+                schema:
+                  type: string
+                  default: ""
+        - variable: oatuhkeycloackenabled
+          label: "OAUTH2 Keycloack Settings"
+          schema:
+            type: boolean
+            default: false
+            show_subquestions_if: true
+            subquestions:
+              - variable: OAUTH2_ENABLED
+                label: "OAUTH2_ENABLED"
+                schema:
+                  type: boolean
+                  default: false
+              - variable: OAUTH2_LOGIN_STYLE
+                label: "OAUTH2_LOGIN_STYLE"
+                description: "OAuth2 login style: popup or redirect."
+                schema:
+                  type: string
+                  default: "redirect"
+                  enum:
+                    - value: "redirect"
+                      description: "redirect"
+                    - value: "popup"
+                      description: "popup"
+              - variable: OAUTH2_CLIENT_ID
+                label: "OAUTH2_CLIENT_ID"
+                description: "Application GUID captured during app registration"
+                schema:
+                  type: string
+                  default: ""
+              - variable: OAUTH2_SECRET
+                label: "OAUTH2_SECRET"
+                description: "Secret key generated during app registration"
+                schema:
+                  type: string
+                  default: ""
+              - variable: OAUTH2_SERVER_URL
+                label: "OAUTH2_SERVER_URL"
+                schema:
+                  type: string
+                  default: ""
+              - variable: OAUTH2_AUTH_ENDPOINT
+                label: "OAUTH2_AUTH_ENDPOINT"
+                schema:
+                  type: string
+                  default: ""
+              - variable: OAUTH2_USERINFO_ENDPOINT
+                label: "OAUTH2_USERINFO_ENDPOINT"
+                schema:
+                  type: string
+                  default: ""
+              - variable: OAUTH2_TOKEN_ENDPOINT
+                label: "OAUTH2_TOKEN_ENDPOINT"
+                schema:
+                  type: string
+                  default: ""
+        - variable: oatuhdoorkeeperenabled
+          label: "OAUTH2 Doorkeeper Settings"
+          schema:
+            type: boolean
+            default: false
+            show_subquestions_if: true
+            subquestions:
+              - variable: OAUTH2_ENABLED
+                label: "OAUTH2_ENABLED"
+                schema:
+                  type: boolean
+                  default: false
+              - variable: OAUTH2_LOGIN_STYLE
+                label: "OAUTH2_LOGIN_STYLE"
+                description: "OAuth2 login style: popup or redirect."
+                schema:
+                  type: string
+                  default: "redirect"
+                  enum:
+                    - value: "redirect"
+                      description: "redirect"
+                    - value: "popup"
+                      description: "popup"
+              - variable: OAUTH2_CLIENT_ID
+                label: "OAUTH2_CLIENT_ID"
+                description: "Application GUID captured during app registration"
+                schema:
+                  type: string
+                  default: ""
+              - variable: OAUTH2_SECRET
+                label: "OAUTH2_SECRET"
+                description: "Secret key generated during app registration"
+                schema:
+                  type: string
+                  default: ""
+              - variable: OAUTH2_SERVER_URL
+                label: "OAUTH2_SERVER_URL"
+                schema:
+                  type: string
+                  default: ""
+              - variable: OAUTH2_AUTH_ENDPOINT
+                label: "OAUTH2_AUTH_ENDPOINT"
+                schema:
+                  type: string
+                  default: ""
+              - variable: OAUTH2_USERINFO_ENDPOINT
+                label: "OAUTH2_USERINFO_ENDPOINT"
+                schema:
+                  type: string
+                  default: ""
+              - variable: OAUTH2_TOKEN_ENDPOINT
+                label: "OAUTH2_TOKEN_ENDPOINT"
+                schema:
+                  type: string
+                  default: ""
+              - variable: OAUTH2_ID_TOKEN_WHITELIST_FIELDS
+                label: "OAUTH2_ID_TOKEN_WHITELIST_FIELDS"
+                schema:
+                  type: string
+                  default: ""
+              - variable: OAUTH2_REQUEST_PERMISSIONS
+                label: "OAUTH2_REQUEST_PERMISSIONS"
+                description: "The claim name you want to map to the unique ID field."
+                schema:
+                  type: string
+                  default: ""
+              - variable: OAUTH2_ID_MAP
+                label: "OAUTH2_ID_MAP"
+                description: "The claim name you want to map to the unique ID field."
+                schema:
+                  type: string
+                  default: ""
+              - variable: OAUTH2_USERNAME_MAP
+                label: "OAUTH2_USERNAME_MAP"
+                description: "The claim name you want to map to the username field."
+                schema:
+                  type: string
+                  default: ""
+              - variable: OAUTH2_FULLNAME_MAP
+                label: "OAUTH2_FULLNAME_MAP"
+                description: "The claim name you want to map to the full name field."
+                schema:
+                  type: string
+                  default: ""
+              - variable: OAUTH2_EMAIL_MAP
+                label: "OAUTH2_EMAIL_MAP"
+                description: "The claim name you want to map to the email field."
+                schema:
+                  type: string
+                  default: ""
+        - variable: oatuhazureenabled
+          label: "OAUTH2 Azure Settings"
+          schema:
+            type: boolean
+            default: false
+            show_subquestions_if: true
+            subquestions:
+              - variable: OAUTH2_ENABLED
+                label: "OAUTH2_ENABLED"
+                schema:
+                  type: boolean
+                  default: false
+              - variable: OAUTH2_CA_CERT
+                label: "OAUTH2_CA_CERT"
+                schema:
+                  type: string
+                  private: true
+                  default: ""
+              - variable: OAUTH2_ADFS_ENABLED
+                label: "OAUTH2_ADFS_ENABLED"
+                schema:
+                  type: boolean
+                  default: false
+              - variable: OAUTH2_LOGIN_STYLE
+                label: "OAUTH2_LOGIN_STYLE"
+                description: "OAuth2 login style: popup or redirect."
+                schema:
+                  type: string
+                  default: "redirect"
+                  enum:
+                    - value: "redirect"
+                      description: "redirect"
+                    - value: "popup"
+                      description: "popup"
+              - variable: OAUTH2_CLIENT_ID
+                label: "OAUTH2_CLIENT_ID"
+                description: "Application GUID captured during app registration"
+                schema:
+                  type: string
+                  default: ""
+              - variable: OAUTH2_SECRET
+                label: "OAUTH2_SECRET"
+                description: "Secret key generated during app registration"
+                schema:
+                  type: string
+                  default: ""
+              - variable: OAUTH2_SERVER_URL
+                label: "OAUTH2_SERVER_URL"
+                schema:
+                  type: string
+                  default: ""
+              - variable: OAUTH2_AUTH_ENDPOINT
+                label: "OAUTH2_AUTH_ENDPOINT"
+                schema:
+                  type: string
+                  default: ""
+              - variable: OAUTH2_USERINFO_ENDPOINT
+                label: "OAUTH2_USERINFO_ENDPOINT"
+                schema:
+                  type: string
+                  default: ""
+              - variable: OAUTH2_TOKEN_ENDPOINT
+                label: "OAUTH2_TOKEN_ENDPOINT"
+                schema:
+                  type: string
+                  default: ""
+              - variable: OAUTH2_ID_MAP
+                label: "OAUTH2_ID_MAP"
+                description: "The claim name you want to map to the unique ID field."
+                schema:
+                  type: string
+                  default: ""
+              - variable: OAUTH2_USERNAME_MAP
+                label: "OAUTH2_USERNAME_MAP"
+                description: "The claim name you want to map to the username field."
+                schema:
+                  type: string
+                  default: ""
+              - variable: OAUTH2_FULLNAME_MAP
+                label: "OAUTH2_FULLNAME_MAP"
+                description: "The claim name you want to map to the full name field."
+                schema:
+                  type: string
+                  default: ""
+              - variable: OAUTH2_EMAIL_MAP
+                label: "OAUTH2_EMAIL_MAP"
+                description: "The claim name you want to map to the email field."
+                schema:
+                  type: string
+                  default: ""
+        - variable: ldapenabled
+          label: "LDAP Settings"
+          schema:
+            type: boolean
+            default: false
+            show_subquestions_if: true
+            subquestions:
+              - variable: LDAP_ENABLE
+                label: "LDAP_ENABLE"
+                schema:
+                  type: boolean
+                  default: false
+              - variable: DEFAULT_AUTHENTICATION_METHOD
+                label: "DEFAULT_AUTHENTICATION_METHOD"
+                schema:
+                  type: string
+                  default: "ldap"
+              - variable: LDAP_PORT
+                label: "LDAP_PORT"
+                schema:
+                  type: int
+                  default: 389
+              - variable: LDAP_HOST
+                label: "LDAP_HOST"
+                schema:
+                  type: string
+                  default: ""
+              - variable: LDAP_AD_SIMPLE_AUTH
+                label: "LDAP_AD_SIMPLE_AUTH"
+                schema:
+                  type: boolean
+                  default: false
+              - variable: LDAP_USER_AUTHENTICATION
+                label: "LDAP_USER_AUTHENTICATION"
+                schema:
+                  type: boolean
+                  default: false
+              - variable: LDAP_USER_AUTHENTICATION_FIELD
+                label: "LDAP_USER_AUTHENTICATION_FIELD"
+                schema:
+                  type: string
+                  default: "uid"
+              - variable: LDAP_DEFAULT_DOMAIN
+                label: "LDAP_DEFAULT_DOMAIN"
+                schema:
+                  type: string
+                  default: ""
+              - variable: LDAP_BASEDN
+                label: "LDAP_BASEDN"
+                schema:
+                  type: string
+                  default: ""
+              - variable: LDAP_LOGIN_FALLBACK
+                label: "LDAP_LOGIN_FALLBACK"
+                schema:
+                  type: boolean
+                  default: false
+              - variable: LDAP_RECONNECT
+                label: "LDAP_RECONNECT"
+                schema:
+                  type: boolean
+                  default: true
+              - variable: LDAP_TIMEOUT
+                label: "LDAP_TIMEOUT"
+                schema:
+                  type: int
+                  default: 10000
+              - variable: LDAP_IDLE_TIMEOUT
+                label: "LDAP_IDLE_TIMEOUT"
+                schema:
+                  type: int
+                  default: 10000
+              - variable: LDAP_CONNECT_TIMEOUT
+                label: "LDAP_CONNECT_TIMEOUT"
+                schema:
+                  type: int
+                  default: 10000
+              - variable: LDAP_AUTHENTIFICATION
+                label: "LDAP_AUTHENTIFICATION"
+                schema:
+                  type: boolean
+                  default: true
+              - variable: LDAP_AUTHENTIFICATION_USERDN
+                label: "LDAP_AUTHENTIFICATION_USERDN"
+                schema:
+                  type: string
+                  default: ""
+              - variable: LDAP_AUTHENTIFICATION_PASSWORD
+                label: "LDAP_AUTHENTIFICATION_PASSWORD"
+                schema:
+                  type: string
+                  private: true
+                  default: ""
+              - variable: LDAP_LOG_ENABLED
+                label: "LDAP_LOG_ENABLED"
+                schema:
+                  type: boolean
+                  default: true
+              - variable: LDAP_BACKGROUND_SYNC
+                label: "LDAP_BACKGROUND_SYNC"
+                schema:
+                  type: boolean
+                  default: true
+              - variable: LDAP_BACKGROUND_SYNC_INTERVAL
+                label: "LDAP_BACKGROUND_SYNC_INTERVAL"
+                schema:
+                  type: string
+                  default: "every 1 hour"
+              - variable: LDAP_BACKGROUND_SYNC_KEEP_EXISTANT_USERS_UPDATED
+                label: "LDAP_BACKGROUND_SYNC_KEEP_EXISTANT_USERS_UPDATED"
+                schema:
+                  type: boolean
+                  default: false
+              - variable: LDAP_BACKGROUND_SYNC_IMPORT_NEW_USERS
+                label: "LDAP_BACKGROUND_SYNC_IMPORT_NEW_USERS"
+                schema:
+                  type: boolean
+                  default: false
+              - variable: LDAP_ENCRYPTION
+                label: "LDAP_ENCRYPTION"
+                schema:
+                  type: string
+                  default: "false"
+              - variable: LDAP_CA_CERT
+                label: "LDAP_CA_CERT"
+                schema:
+                  type: string
+                  private: true
+                  default: ""
+              - variable: LDAP_REJECT_UNAUTHORIZED
+                label: "LDAP_REJECT_UNAUTHORIZED"
+                schema:
+                  type: boolean
+                  default: false
+              - variable: LDAP_USER_SEARCH_FILTER
+                label: "LDAP_USER_SEARCH_FILTER"
+                schema:
+                  type: string
+                  default: ""
+              - variable: LDAP_USER_SEARCH_SCOPE
+                label: "LDAP_USER_SEARCH_SCOPE"
+                schema:
+                  type: string
+                  default: "one"
+                  enum:
+                    - value: "one"
+                      description: "one"
+                    - value: "base"
+                      description: "base"
+                    - value: "sub"
+                      description: "sub"
+              - variable: LDAP_USER_SEARCH_FIELD
+                label: "LDAP_USER_SEARCH_FIELD"
+                schema:
+                  type: string
+                  default: ""
+              - variable: LDAP_SEARCH_PAGE_SIZE
+                label: "LDAP_SEARCH_PAGE_SIZE"
+                schema:
+                  type: int
+                  default: 0
+              - variable: LDAP_SEARCH_SIZE_LIMIT
+                label: "LDAP_SEARCH_SIZE_LIMIT"
+                schema:
+                  type: int
+                  default: 0
+              - variable: LDAP_GROUP_FILTER_ENABLE
+                label: "LDAP_GROUP_FILTER_ENABLE"
+                schema:
+                  type: boolean
+                  default: false
+              - variable: LDAP_GROUP_FILTER_OBJECTCLASS
+                label: "LDAP_GROUP_FILTER_OBJECTCLASS"
+                schema:
+                  type: string
+                  default: ""
+              - variable: LDAP_GROUP_FILTER_GROUP_ID_ATTRIBUTE
+                label: "LDAP_GROUP_FILTER_GROUP_ID_ATTRIBUTE"
+                schema:
+                  type: string
+                  default: ""
+              - variable: LDAP_GROUP_FILTER_GROUP_MEMBER_ATTRIBUTE
+                label: "LDAP_GROUP_FILTER_GROUP_MEMBER_ATTRIBUTE"
+                schema:
+                  type: string
+                  default: ""
+              - variable: LDAP_GROUP_FILTER_GROUP_MEMBER_FORMAT
+                label: "LDAP_GROUP_FILTER_GROUP_MEMBER_FORMAT"
+                schema:
+                  type: string
+                  default: ""
+              - variable: LDAP_GROUP_FILTER_GROUP_NAME
+                label: "LDAP_GROUP_FILTER_GROUP_NAME"
+                schema:
+                  type: string
+                  default: ""
+              - variable: LDAP_UNIQUE_IDENTIFIER_FIELD
+                label: "LDAP_UNIQUE_IDENTIFIER_FIELD"
+                schema:
+                  type: string
+                  default: ""
+              - variable: LDAP_UTF8_NAMES_SLUGIFY
+                label: "LDAP_UTF8_NAMES_SLUGIFY"
+                schema:
+                  type: boolean
+                  default: true
+              - variable: LDAP_USERNAME_FIELD
+                label: "LDAP_USERNAME_FIELD"
+                schema:
+                  type: string
+                  default: ""
+              - variable: LDAP_FULLNAME_FIELD
+                label: "LDAP_FULLNAME_FIELD"
+                schema:
+                  type: string
+                  default: "fullname"
+              - variable: LDAP_MERGE_EXISTING_USERS
+                label: "LDAP_MERGE_EXISTING_USERS"
+                schema:
+                  type: boolean
+                  default: false
+              - variable: LDAP_EMAIL_MATCH_ENABLE
+                label: "LDAP_EMAIL_MATCH_ENABLE"
+                schema:
+                  type: boolean
+                  default: true
+              - variable: LDAP_EMAIL_MATCH_REQUIRE
+                label: "LDAP_EMAIL_MATCH_REQUIRE"
+                schema:
+                  type: boolean
+                  default: true
+              - variable: LDAP_EMAIL_MATCH_VERIFIED
+                label: "LDAP_EMAIL_MATCH_VERIFIED"
+                schema:
+                  type: boolean
+                  default: true
+              - variable: LDAP_EMAIL_FIELD
+                label: "LDAP_EMAIL_FIELD"
+                schema:
+                  type: string
+                  default: "mail"
+              - variable: LDAP_SYNC_USER_DATA
+                label: "LDAP_SYNC_USER_DATA"
+                schema:
+                  type: boolean
+                  default: false
+              - variable: LDAP_SYNC_USER_DATA_FIELDMAP
+                label: "LDAP_SYNC_USER_DATA_FIELDMAP"
+                schema:
+                  type: string
+                  default: ""
+              - variable: LDAP_SYNC_GROUP_ROLES
+                label: "LDAP_SYNC_GROUP_ROLES"
+                schema:
+                  type: string
+                  default: ""
+              - variable: LDAP_SYNC_ADMIN_STATUS
+                label: "LDAP_SYNC_ADMIN_STATUS"
+                schema:
+                  type: boolean
+                  default: true
+              - variable: LDAP_SYNC_ADMIN_GROUPS
+                label: "LDAP_SYNC_ADMIN_GROUPS"
+                schema:
+                  type: string
+                  default: ""
+        - variable: headerenabled
+          label: "LDAP Header Settings"
+          schema:
+            type: boolean
+            default: false
+            show_subquestions_if: true
+            subquestions:
+              - variable: HEADER_LOGIN_ID
+                label: "HEADER_LOGIN_ID"
+                schema:
+                  type: string
+                  default: ""
+              - variable: HEADER_LOGIN_FIRSTNAME
+                label: "HEADER_LOGIN_FIRSTNAME"
+                schema:
+                  type: string
+                  default: ""
+              - variable: HEADER_LOGIN_LASTNAME
+                label: "HEADER_LOGIN_LASTNAME"
+                schema:
+                  type: string
+                  default: ""
+              - variable: HEADER_LOGIN_EMAIL
+                label: "HEADER_LOGIN_EMAIL"
+                schema:
+                  type: string
+                  default: ""
+        - variable: casenabled
+          label: "CAS Settings"
+          schema:
+            type: boolean
+            default: false
+            show_subquestions_if: true
+            subquestions:
+              - variable: CAS_ENABLED
+                label: "CAS_ENABLED"
+                schema:
+                  type: boolean
+                  default: false
+              - variable: CAS_BASE_URL
+                label: "CAS_BASE_URL"
+                schema:
+                  type: string
+                  default: ""
+              - variable: CAS_LOGIN_URL
+                label: "CAS_LOGIN_URL"
+                schema:
+                  type: string
+                  default: ""
+              - variable: CAS_VALIDATE_URL
+                label: "CAS_VALIDATE_URL"
+                schema:
+                  type: string
+                  default: ""
+        - variable: samlenabled
+          label: "SAML Settings"
+          schema:
+            type: boolean
+            default: false
+            show_subquestions_if: true
+            subquestions:
+              - variable: SAML_ENABLED
+                label: "SAML_ENABLED"
+                schema:
+                  type: boolean
+                  default: false
+              - variable: SAML_PROVIDER
+                label: "SAML_PROVIDER"
+                schema:
+                  type: string
+                  default: ""
+              - variable: SAML_ENTRYPOINT
+                label: "SAML_ENTRYPOINT"
+                schema:
+                  type: string
+                  default: ""
+              - variable: SAML_ISSUER
+                label: "SAML_ISSUER"
+                schema:
+                  type: string
+                  default: ""
+              - variable: SAML_CERT
+                label: "SAML_CERT"
+                schema:
+                  type: string
+                  private: true
+                  default: ""
+              - variable: SAML_IDPSLO_REDIRECTURL
+                label: "SAML_IDPSLO_REDIRECTURL"
+                schema:
+                  type: string
+                  default: ""
+              - variable: SAML_PRIVATE_KEYFILE
+                label: "SAML_PRIVATE_KEYFILE"
+                schema:
+                  type: string
+                  default: ""
+              - variable: SAML_PUBLIC_CERTFILE
+                label: "SAML_PUBLIC_CERTFILE"
+                schema:
+                  type: string
+                  default: ""
+              - variable: SAML_IDENTIFIER_FORMAT
+                label: "SAML_IDENTIFIER_FORMAT"
+                schema:
+                  type: string
+                  default: ""
+              - variable: SAML_LOCAL_PROFILE_MATCH_ATTRIBUTE
+                label: "SAML_LOCAL_PROFILE_MATCH_ATTRIBUTE"
+                schema:
+                  type: string
+                  default: ""
+              - variable: SAML_ATTRIBUTES
+                label: "SAML_ATTRIBUTES"
+                schema:
+                  type: string
+                  default: ""
+
+# Include{containerConfig}
+
+  - variable: service
+    group: "Networking and Services"
+    label: "Configure Service(s)"
+    schema:
+      additional_attrs: true
+      type: dict
+      attrs:
+        - variable: main
+          label: "Main Service"
+          description: "The Primary service on which the healthcheck runs, often the webUI"
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{serviceSelector}
+                    - variable: main
+                      label: "Main Service Port Configuration"
+                      schema:
+                        additional_attrs: true
+                        type: dict
+                        attrs:
+                          - variable: port
+                            label: "Port"
+                            description: "This port exposes the container port on the service"
+                            schema:
+                              type: int
+                              default: 10204
+                              required: true
+                          - variable: advanced
+                            label: "Show Advanced settings"
+                            schema:
+                              type: boolean
+                              default: false
+                              show_subquestions_if: true
+                              subquestions:
+                                - variable: protocol
+                                  label: "Port Type"
+                                  schema:
+                                    type: string
+                                    default: "HTTP"
+                                    enum:
+                                      - value: HTTP
+                                        description: "HTTP"
+                                      - value: "HTTPS"
+                                        description: "HTTPS"
+                                      - value: TCP
+                                        description: "TCP"
+                                      - value: "UDP"
+                                        description: "UDP"
+                                - variable: nodePort
+                                  label: "Node Port (Optional)"
+                                  description: "This port gets exposed to the node. Only considered when service type is NodePort, Simple or LoadBalancer"
+                                  schema:
+                                    type: int
+                                    min: 9000
+                                    max: 65535
+                                - variable: targetPort
+                                  label: "Target Port"
+                                  description: "The internal(!) port on the container the Application runs on"
+                                  schema:
+                                    type: int
+                                    default: 8080
+
+  - variable: serviceexpert
+    group: "Networking and Services"
+    label: "Show Expert Config"
+    schema:
+      type: boolean
+      default: false
+      show_subquestions_if: true
+      subquestions:
+        - variable: hostNetwork
+          group: "Networking and Services"
+          label: "Host-Networking (Complicated)"
+          schema:
+            type: boolean
+            default: false
+
+# Include{serviceExpert}
+
+# Include{serviceList}
+
+  - variable: persistence
+    label: "Integrated Persistent Storage"
+    description: "Integrated Persistent Storage"
+    group: "Storage and Persistence"
+    schema:
+      additional_attrs: true
+      type: dict
+      attrs:
+        - variable: data
+          label: "App Data Storage"
+          description: "Stores the Application Data."
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: type
+                label: "Type of Storage"
+                description: "Sets the persistence type, Anything other than PVC could break rollback!"
+                schema:
+                  type: string
+                  default: "simplePVC"
+                  enum:
+                    - value: "simplePVC"
+                      description: "PVC (simple)"
+                    - value: "simpleHP"
+                      description: "HostPath (simple)"
+                    - value: "emptyDir"
+                      description: "emptyDir"
+                    - value: "pvc"
+                      description: "pvc"
+                    - value: "hostPath"
+                      description: "hostPath"
+# Include{persistenceBasic}
+              - variable: hostPath
+                label: "hostPath"
+                description: "Path inside the container the storage is mounted"
+                schema:
+                  show_if: [["type", "=", "hostPath"]]
+                  type: hostpath
+              - variable: medium
+                label: "EmptyDir Medium"
+                schema:
+                  show_if: [["type", "=", "emptyDir"]]
+                  type: string
+                  default: ""
+                  enum:
+                    - value: ""
+                      description: "Default"
+                    - value: "Memory"
+                      description: "Memory"
+# Include{persistenceAdvanced}
+
+# Include{persistenceList}
+
+  - variable: ingress
+    label: ""
+    group: "Ingress"
+    schema:
+      additional_attrs: true
+      type: dict
+      attrs:
+        - variable: main
+          label: "Main Ingress"
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{ingressDefault}
+
+# Include{ingressTLS}
+
+# Include{ingressTraefik}
+
+# Include{ingressExpert}
+
+# Include{ingressList}
+
+# Include{security}
+
+  - variable: advancedSecurity
+    label: "Show Advanced Security Settings"
+    group: "Security and Permissions"
+    schema:
+      type: boolean
+      default: false
+      show_subquestions_if: true
+      subquestions:
+        - variable: securityContext
+          label: "Security Context"
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: privileged
+                label: "Privileged mode"
+                schema:
+                  type: boolean
+                  default: false
+              - variable: readOnlyRootFilesystem
+                label: "ReadOnly Root Filesystem"
+                schema:
+                  type: boolean
+                  default: false
+              - variable: allowPrivilegeEscalation
+                label: "Allow Privilege Escalation"
+                schema:
+                  type: boolean
+                  default: false
+              - variable: runAsNonRoot
+                label: "runAsNonRoot"
+                schema:
+                  type: boolean
+                  default: false
+# Include{securityContextAdvanced}
+
+  - variable: podSecurityContext
+    group: "Security and Permissions"
+    label: "Pod Security Context"
+    schema:
+      additional_attrs: true
+      type: dict
+      attrs:
+        - variable: runAsUser
+          label: "runAsUser"
+          description: "The UserID of the user running the application"
+          schema:
+            type: int
+            default: 0
+        - variable: runAsGroup
+          label: "runAsGroup"
+          description: The groupID this App of the user running the application"
+          schema:
+            type: int
+            default: 0
+        - variable: fsGroup
+          label: "fsGroup"
+          description: "The group that should own ALL storage."
+          schema:
+            type: int
+            default: 568
+# Include{podSecurityContextAdvanced}
+
+# Include{resources}
+
+# Include{advanced}
+
+# Include{addons}
diff --git a/charts/incubator/wekan/templates/common.yaml b/charts/incubator/wekan/templates/common.yaml
new file mode 100644
index 00000000000..a6613c2ce21
--- /dev/null
+++ b/charts/incubator/wekan/templates/common.yaml
@@ -0,0 +1 @@
+{{ include "common.all" . }}
diff --git a/charts/incubator/wekan/values.yaml b/charts/incubator/wekan/values.yaml
new file mode 100644
index 00000000000..5670ae7f06d
--- /dev/null
+++ b/charts/incubator/wekan/values.yaml
@@ -0,0 +1,41 @@
+image:
+  repository: tccr.io/truecharts/wekan
+  tag: v6.11@sha256:4d36ca29c2bf2775903d94e72b5ed55dc2893331ecced6a7ffd01164633e8df4
+  pullPolicy: IfNotPresent
+
+# securityContext:
+#   readOnlyRootFilesystem: false
+#   runAsNonRoot: false
+
+# podSecurityContext:
+#   runAsUser: 0
+#   runAsGroup: 0
+
+env:
+  WRITABLE_PATH: "/data"
+  # User Defined
+  ROOT_URL: "http://localhost"
+
+envValueFrom:
+  MONGO_URL:
+    secretKeyRef:
+      name: mongodbcreds
+      key: url
+
+service:
+  main:
+    ports:
+      main:
+        port: 10204
+        targetPort: 8080
+
+mongodb:
+  enabled: true
+  mongodbUsername: wekan
+  mongodbDatabase: wekan
+  existingSecret: "mongodbcreds"
+
+persistence:
+  data:
+    enabled: true
+    mountPath: "/data"
diff --git a/docs/_static/img/appicons/wekan.png b/docs/_static/img/appicons/wekan.png
new file mode 100644
index 0000000000000000000000000000000000000000..5b7bc629f342fbaf22e16df774f532e576fd6063
GIT binary patch
literal 8408
zcmbuEWl&sAx3-6nAi)XlZUH8EfWh4zf(;=^aF>B0z!NlRa0?PV*x*412`<59aDuzf
z;E<2!{pzjr>-;)<SM9y4y4UKi?z?xby00(Vno4*tsa^sA06Z0Cd0hYi4fymuiG}g>
zq%Kk{e|lkjP*aiz{QdXNYb!|t02pFb<Yn|B3rE?Q0s1zxePe|pvJ9cb&q4`_{qZKB
zr*Q3anY%ehw(<BFE<aRPR|W1b7~LOwlWG&C@iJhAvawDR%3`sE5>G-iPQGQSr~h6O
zXJyL}AH28{Nwl^-UJ|`n`8X<i;y0%D{Au|A%N5+$o7XB}Qr#JXPo|_J>di**2qVHe
z#Y29Hr4+Q&>e_}3-^qTKLvQtpI;uJOGrLT|yB``_kG((1$2OZ9i*ZFSvEI2>DXywI
zJZ#D5y^dkV$G<k7dgLJNu*_d!Bj4|0enlU(y2!z<H~802hYNM7w(VG}8-IB|Ig+8C
zAr%gaCD4_fke^8EOQ_r*8`M^zUGUDAz*a23i@CSR8owOUl18^;4Qp(4E;zkR=pm;&
zv<ty^Drm!OEL|Arp3-Y)p&ARMiwY*Phz}Dy`XOZfrd>`Ae50Usc|P82tPVXVC9Cpg
zvOL7W;CRf-aVf03nAnJY-_7PA*G$KLLEvbAn*@`E|IXn1>%$KL{p#b}_1q+^g8R3g
zzwd8Z9N%i(`0EE!oZ4B%KI8vHl@k7u=ndcxFXyvc@sad3?6XWUsW_`W7YZUk6E?=a
zJn2L?(v7Q1V-7kgogKi?@Rv1~1M{t`l#uDO9p}x`Sn917p&{?qB0nhjv<2X%lusl~
zC1LWO2Jpw0LWLYr>DaB95k3<_@APK+(P+d%gkhzI@_>S-I)VQ?uK4VTBK|^?yW}wg
z1dNeAoq+~eQW8OW5d#2!z?KEZ`o(FxN*At?K8K5Vb+ITbwYGS<?26ORJ1+pzhfn$)
zVR1r^e<5&ysgk-guPgS%5&|2>&=+Pv^*BCGR0~B(V}zE>fKHx&AZP$W;aL^2gmVW;
zOJ-fL2D4M>Qxd@OzTe(<dC&Wu*95$B%jOtOV2v@<q*4kO=;=g&fIofUSaC)na|Cfl
z52DrnHT0>NXaGPD4j{O?CL=5+E;QC(%qTQ=M8HWttZlRhXa5E2ndY1_@N%mEV`McE
z;7_VF8~|{^R%Jbumr$I7zsaXv#1N!#UQn*dk3jSBvSwg{qK%bHa&Qlo06G}jkKc3g
ze17)%M;-@a+v;W1MRGry_k93*X>IMdq1Qw2aU+c$7((`zdcF2v(e}4${xVCwzED62
zI51>`JeRgNbjMh9R$bgTkG9YYjQ{NIDLhz(>pCbB$E*ok7DQ;?zYjTTqr9S7R+RIP
zE&jq>tmCtyz)$s>&x67hXz|j1A~UY|uq5X9l<*aay5y(iXZNPncqMv<$1flh#cIJF
zgr*I+dhHAZ*>fe%av^b-1T!jOZRFwcpHzoc?S|VMNCwC)hVu+hJIgp<11%YcHiOh?
zDNYns-!>)@Yq3@T2}?{X5y2hM*Vi9k>49)@afb3Sfbo=MbaFh<y-Nz~(?@NKe-U<$
z^r~qIm6hf`_s1Z;oMjYIeA=g+v_%K@C_8`|uwO<%765QF8jD7*#*BNBYw0L??aP06
zUO4Uk^ZlROg8KU8NzL5i!$a=74H7vmrS&b0>$|%tB(*DxlvI$amefefc<IG6R75U}
zKDNXES+8sC&LSDb^L2xunCv$>qq*Wr<wjMT&kUGxpY3Pok@4&{if?QCFL0_#WV{U7
z1;dvZEymV9T&2Iey=pzt=a~#&#HR|rzXvTeSh4pacV&M3_%Rwg(f2fWHq_)*Rh{HY
z`{vr3Os_((^4nkxR(AFXF-3VolOHW<C+GkGArK%v)sGSdN^EsZJjdU)#AR~$SDDgt
zSO5SPwPS0Zzn!Aph8eDynASK_PSHjR5aN0D>*5&z5J?UI{41|cVlQ1GDS~8GKwF&L
z)M^a~E9a>thujPZ$eejQ-QN)W5^6_2o)sw5N+|qUYBZ(^ELioCBn;yQao~>WyC?0b
zh@ZFHSZQhfC(e?2Tp))I;}#M7>W7swPT3|~3{=ZzybQg6@8AgA>&-(zcD#6vuZYP_
zn$&Al>e*n4{k0l>_gp7luiA;kVb)nr94Ys^cpzAAbxA1pXOYNw-Y9MIqMlKF;ZMX#
zo)S5%xJ5AaliTmFnX+e7#?3B{i(dg!jU)O|_S9wmL4hiq5;fMem7-oWdpHnqUX3yQ
zj<5~nOyljcT$`#S?7E~a=FS+s@`1=RTv!I}&`$wzpYzpc)Y+MN4LM_bq7aK&73FCL
z57vV;J#OKNHS5rxIKoYFq%8L7CvpPdaH=Dr*AQ4j3g$FW@~jgi@$C-xV;_pmbxf`M
z_%uVEHWqEiWhE!aM+q`xl{x$NX(woGt-aV=9H*r-`I^XITtoEsdujX~_JGKvs*q`l
zyMH*oXTMzghI25_7=!<IO=1~T;aa&GZ*A6ziMyl?*WNBtQ46xj6!;L#WYYGI;dcU|
zrU%cJ1*KBZjgQdLn!LYUqLFUCpGCQ}RD|=ZnPO7B11g;ZS5ES}tU$W{KkXaZq)we^
z)4L07p>%Yflq0mFU%Tb$v*KxI+60dLw>ABbcQlZoRlyhGuZDRZ9ynM9TH_Eom!x`z
zI%}uyY^XiM@&Ywm8KN!Hv~@Ym<MfMXY_|&a1-)15C00O?@<kth12M0PldG6*8*A$C
zXOhqnjx7rwGEF+UesDlA*>XT7@xEv@%Y4JzG}GNv_devV$-z~UH;Enqx#rg__d^~%
zrzA8Kr;1u*3KOM!B=D2(jD^RnIU`Wi<FldE{l^(AW&8?VD=n1_%5VH{QsHlF0<TJC
zye`Juk+&_7+ns$LeQn+CYLQYdGrt$f-!itoI?J2EV)k?oTub(w)tS=S1^w#@woIv6
z5An}Yj21adU$3%E12~aw-tVMZs$8#3#zwffi#r~ha(HV+=H9R66~xcnbvdE;lpB|)
zVRhjkEL7?ukcOzt%N((CGxc(O!x7|-A9QMKBHJLoL6p<r;=U?oPxUAy#33*(v;*QG
zf{ZVE4ZbsLwmTw1u$rMx&e$hu8izYIX-mEHI>L6h9~oPtq&0R)6<#%2TXI9aO_-oH
z)sbpqKC}0{J|e(}H#LuTFSS0?cwD0h+`hZm`@I-@bQlvm)*LBiN6CIq!|zqYq`*7;
zDL9&Uy7kXvPv{yFSvWkny0~zkh<>}MMZK3DE8eWWrfchE{Zq3np8PTEYvGN59mFr5
z>XUe5krXQW``E_SBFKWM{g_G(l6s`!#bg~*f4j&T`&1p^#z*Br=c2#yHI*>+U53@Q
zg^85q@YLMj*(9t@vre0A@?S*T$$f|-9#WFH)2swyda8=jLm1iu_vd1Uu)^GA;N0D@
z!S9EFqmHMDjJa~^HVMc4VhX1}u8*ct4=N3UmfsZG2jq2(MJqw2ykHMYHNP-2<FHG)
zLdQGB^6<Le`xdn;8lUU7cmpC>z0;19WWMS1wgK>zK}~|Dgx3DXw<2E%MX!{1gzfM(
z=LxWw{)*0EC8X}8fOp^;_uTQ<PPaw9A~Ubaq?{2p`NqzX)+aH7!onD4yzNRg$i-!>
z(G-u|UD=8S*jNPz(s){AV45rx>HrgJH!{-r^_qi6?^7Iv?R>#u;J|6kJM3}=fqJmg
z|NH3K#W$1yN<{Y|LaXL}I))#`Q!id_V26l&)YO+fZ26jyb>bCR<{T}Z1vRh7!LRs>
zHQM*?H7BsR;&U{}5Oe$=Jt*V*Dl*t(f_t0kHD>D}N&+v3<Zv}HuEwnh{C0u?#<(_L
z3;pP@Z8f@0HeM0mZbW=x66#Skz>nmsS?HTgYUQQ36R@xXit^-SrS@O_a)r_~%KQ|r
zG*Cc#rGARv!XO(XaBUymjwz8y^rKALN(-A!i_DqNrqOcO>9(Kjq~?HeXkoLO%gE?}
zVG?515o*1!c?5(;y8nm{7{Dxaj5S5W=0SGDgO?;)%Vx0GP56#C4<Zh;j<jN)|FE?`
zXn3cWe!AzYF&9!}G^ABG{Nw_|cTNUnkQvyJH?B@K(dm?l7KMBqooZobr)m6B-=V`S
z!ESLu!LP=}xUTm~@on2;T4;U0adj<@+OBLM<EOR_?Mj5-HzW3#6Jyh4&nVUFXoie$
zo)c6PDB_dyiqJ-yW#vc7M;cj-R&LC`{EXQ{2^h}J4oYX&s`LUfDPMdT)Dl!&?51LH
z|D24sx#^JBl*dAUOUGJo{U*9>tiu)gKC6FeUwYuJvo^s@N5`OmuOhn>e`#F<f}`$R
z@77jX|5ue*;Leit6y{|;)QQt8#dz$9GeA5+Gs3SqA+*3yCuRPCd(CW_xH2HSAlG-p
z(Fjk$Mqy~gh5}D?z)#3>C6iC*hxjCMw#vz4iE0zg`xwQ~Ca<kYe!)`^ghNh6kT(ua
z;_eIEj;aQaF*393i~^w+hsth4WFh*pU{->n&-7!Zysf_Bx{rAZlQ-PA|0Hcm9g62;
z8M2;BjSxo~p)=_1n5-lw%bIm}u{QH6MPgyke#<s13KgAQ@-Vhgc>8M1d=soUJ0{V+
zW};er1RPt8KpF9jKmvPhS-CyuGTxL%BQj_l&k|)9Tz52eNUMmeN^Zl+^E=us*&kLq
z9YxFYKQoD6k$=b&fu2o5_f%=S`ZOy;ggo^L0$QWua)!OGAx6DEIuB6FtFn1F?%w^k
z=d}c8L?w}h6*l^>fKbK)nvEQt*}*`fZmlBT-`J+g*~vEUWlUf$f#8#o_ROjiaw}G1
z*S{^%WX_M-quZo{3+XCvJ>wMH9!0(F?9IDVhHq+wloF|rK}%bi!8<d^@t0p%29KNu
zib(lY<CL6rE)4h*RBOTV+e63Z`y~8vTiBoHd}fzr=uKNj_b8jui1zCW_sDV(p9(Oh
z%$b4M#rjnpHI|qUA!&Rn{L7^GKKCRT0wAC_Q+Gad0Q{5L<*n{(=DOIObAG4#8@Cmd
zST8G}mfN~oA^&y+Pdxi^p@mD)Jb2dO_oc)eG0huaQH15PaD8q#q-YTouhfs*aJv|P
zN4&R#uA-USk%`5%p7P1QxP~335Rl#4komRx^l~hyI5czLs~@b_HJa{I`NLT|FA;N?
zlWW_!->HbUF4LEj(GM|BShe?3J4y=Y+P&kPyFypw<JlY|Twb-yBEx?9+q8DRZBT_D
z^j7;Wm3ClNq|*kW;iq5^@$e)E9`o;QZS0AiC88~I=1cA9`HweRWkEU-7TIG-a9;N#
zxjM%#r9n<tpYtqGlw)^GX~i$So`Y&{bCVLoUo<}6MnlhgO!-R5#0{&fb0z{t*388x
zSymXjX^Nt9*)b)X_NaJ;@r=&x`6(GtAMYkdC)Zcw$NLvAbu53NWKSq!1I$e{4Pw*O
zIRZR}y;bwU*CG)S7pWBnAfQslfG9t<XTPULCU>9YAkK`2&nu!u?{i#<j&qS)U^Fa%
z&UKUm_S?EKO;#`ZYX0^M!tu-O5j^tF6`rgnule<Ad2jxwfu|3ihO+c)s+CV9=D#~S
zWljIo9)zp0dJ)w$BU$3I#ko|nbgJ-H@dOJO-J<YL6e6YwrqxE(-i<k~=4=Z^{e`cU
z?c)^uUW@X2k|)-bCJ{rl)$;JcL(kp2o)?7=Obca_Myi6Ug_vo5exQC@UhagRhy3}Z
zGD!j6k=?(O5hTM|nodFMK2#&oy<3-9R}5LGL4x{=P0Ie>=&`jk_ij557$b>$P^1VF
z;ydLMakQM#YZB_J{+m@?qAq~>Qx~J>ZC6CfszQZz?0PNKc03XxsW-$y2WQemK}-|1
zW|Cbau>u7?@|z>r7tXti?k6Y12k++g>$z7frr#_CIS>@tG=sir%!ELM?gGL56t4vE
z_3pl&`b%97JN}#)$$cpF64J&oKjbqhhz`XnusK!%rHLycjclK7t<#RzWbb=k&D+g`
zqM}Xu9rdTPnl8#oqaY^2j3hw!qYx2eKLL~Vl+kt8^}1kjvq-n)hmk0?t}Q?kBzrff
zW3-ahETXCJAf@4KI=Wk1t*5&+Tw-Wk`pE6T_juEi_#nm1%!$*iYh~)A`J^=80DC0v
zeQzQ9+9aNxqOxv+`ET^u4w<-znNf6-yL%@8%N>jCz+)S#l)Zx<%ZB&(5hAs8u4g&S
zL%7+gc85PFw*G`2R8{*)G6iHM>X!GGrOZ6kJ|BQr>pS#reyi||H7Ft`j{CCP-n1`r
z>vjN+IO30ECkfo_i>*X=2(l&ih$_80C_VNbGIaU=&qD6S+J4~e$yla*nq!5gT~k1s
zvo&5-j9y++wa!!VFhfqY56PwFB_WyoJJ`F|!?)RmSRl|I%+8=ylkH{iCol>ObiHud
zYCmr5QQHDN(jb(KN3ElQzHHMVUwM6{nSKs&bOR~H#2p9gS_vl62$q||nTRBNG!av;
zX<_23N4G1%^P0J4rE>!d{oLGU5!+ET&Bn!ro4bK|^-O+-RF|1|(y%$n8~yGy<-CYC
zaR_+sR{cP@(6h;*%RF_42ITpD*2?w6+Lz7eD8(GkXf2hGYZpeSH$5BkxjrlV4JMe+
z#}D-SMZfl|Rr<wcN-K9gF0K+FK#FPsMe6HkHQmXCS2=$x@>L70E>p0{&Z1c8ZN8{;
zY?7p$o2b+CqN*iDengv&MXx&hf!Ukfu14%PQb-9M)*9wqlh*y3Kj7}$9|)lL;LN?G
zobhxsZB`r(5RKXN*fxTi1KqA!<s%w&KUE!0Tdm+Xvx)R4z0~D>k3*y}c!ky09Ooo0
zFJ6vw_jqE6C|ix1A%uZO|BkHtNYwJ`u<_H_sCK-oGS|DpXEm#O$;oVBgrVH@x>=0p
zEHQsR15Tql#D2VfZyKr!3p!ik9}#m8JuPOVKgX?zN52z!7HM=r1XD%@AYA($$<tRx
z8_Xp9h?*i7Zuc9-CY+~x%ZCoiVp;Zf@K0Q?0({O6i&X@3-@^uJGQOri?8PJJFV$W&
ztqW-$m#pA$S9xOgLK8j0Nw3@ycozLbHpg_L(x?++e#4nOA`SYy_VoL^Pf964i*_uB
z@i}eE@n<o6`8-gPe{^3pTO{dLp2wUw>9YH1Khscw6AG2BusG?H0`*42T+!NBkV_2)
zDQsizv`Kp>%Yq<SW`Ge&gUl_cOZ=tiq(|R$o9y`q5rVyfdktG{i*?GGV-Vw6rI-C1
z@y6d6Q4z)AFypbSUuM^wqTCj)T3MHNtNhxYZ2BI-y6p`8O*ta7O?DHEhVobaq4HaA
zEve{i$-$GXNjQJ&Jd$jWwTNK*7iaI|uOzE@?!F!@X3qB=wYdBJ@!KQBhH|UnKj(b2
zY;X8p>|}^>y2b{_WQdk*mZn+1zHCNfCZJg7xg*g|e2W3p-s7L3j|G)=n<XsPcaNh#
zysi&luny9pmOA$AtIBIhaIg!&S^TqWS5MXNM~fwowvnSn+p}X;lPg$d;0Zqt=gETw
zwa;uzQ2!t@(@j{t;Kz58?}5Jrx_8cBl8$NftlEIBLH~qJ$NRFGcwfK8sEF=dP^6vI
zEP{8kNV3kP?9euO_9oG^tI+MN6**S)XyIMp0m1OgmzmD9tB(mM2+lfZ0U>`o74|8P
z_D&`Eqryy=2Q_>ktZJv(tN{AXaU>O#`kP`dq&BLm7}{ZOKNJ1>8@UoNz0iCZUgTd{
zOe4p}!|k{q$akPiZCk*6VA^5$1+10As&Ss<NEU7sF*@cMHxZCTGX4z&ykVOe9+|xn
zJZ~nek^a$8D&`|uzRh>C{8s0Tf4gociTB9+cTR3XNxK(I?niVyZZ@EK5UIont*Qp-
zZdC(GMjq+1k)c|7uMt$0eVguSqLgx~bGKw8QM9@C*!7{5)y(AR=P?~$uw=`g3I1QW
zL)=a;c&S9>?+*v>&o9^c*iH`}->{FduA+u+A^Ua-POGJ%P=o%d%=EWIv;z3H)`lI$
zD4Uw>Hjyd5LZQYv@S#qJ)wnio=AIRe!zzdYEKPe8zFIbU^Gk3Fg%uH<bl1nxTSi|>
z;v3j6;OfA{LcWCfxgvehk5^8VpcHr=MpiXncF$WEeB$xFgzBMdk&E<9_|-nQB<%cn
z3Bi3kTC7wXnuX<}u4`e*9}(u-Z}s!+_Xk|m8lE5dDqlv+=>hoS(YH(kla+=<%Ml-8
z`^C3D>YxwK-S}oP#boBMqo9^%C}#NyMLYM}q_9gf7b$WQUm4rrdJbpak<?xBm3$<*
z_S*L%$I2FJ-1tLfR}YC<$E1Fbl`nFjoHf1H;7wU*xG!_9b+3egsINXLnX1Mtj|Fdu
zi16$v!58vN9H3M!6~}$-U57}Fj>hqD%%V~q?0biWL?Rpfie7=+$r+y!8%k6_|B6^B
z?EJ1-kJIwejEaa-CP~U{2t4t^U&-d?>u>!iqibAf;)Ng2kMxb6UbR><g`T?R*3i&(
zm?xd)Fts27Pl|a8H%B=*4#j^pv+4yhK=A?AU!+Tz>7hypQaP}#U%4-R*s%oba~rG_
ztlm#<yC7gyt5pyKR@-Gt^)CT~*?3!uPz(2ux@z*%Rp#~S7ow&W@Shpq^i0MM$Xz$#
z>C<{&(vW-z(QGp}Dc{WZM1D6`TksdA%Z5c}GDFnG=T#~Myv7Ch6@Az)#c#K>VWi*5
z=qws@+UGwF3}r3dZPL<Q9_KgA3>R<m72}ih`<-IoJUZ|WHeIzEl);$6>y59{E|b4f
z$`4=U4rkkRY=kZ7;@%^+Iz9yN0}zG?JbDp@NzSUAThuvnd%l=sl#|tDd1o*rXgBZe
zLL(GfkZbf3N|<{*2MhI_WU?jq4TU7g!P$crq+i(B_~g=$`DMbkWVicO!)`P$BOhyA
z%GYPIM}Xr2ITdKh)yH+Tm?UVgV7>ZREab4wRF^FeZ2Mg1XPzR_pErM#5S2-W-*cNQ
zqc?w(g9{T8O*vUoMflS@ua?|%*Ola+)zY1%v*_?9;hitVuU}16jHT+7*}E#q83a1+
zJr)QFRP}y%6{yAJK%XH7Ki61+ZB{2!%1GuwOn(NT1dgmGQo)uxetx=KT43dYjGQbb
zsY9*8ty*_i)J5H#-ra*&_~cPneIWl=UmcTQ0?`ELn~}8~?P!uG!r#A>kWnc{B*mF5
zlmB_8Z28N%d08t8e<%t!!tSo6w~7pin7tW;?s>-Xy0|wGSx+3Kr@Pm$|M4ilD>Po0
z^E@d+tOS)C2Mw$2DI#VWhZMM1mPE;<emr=v9Wl!?p=%CL5xXZL5|+R!H}t@Jl3&Ts
zANHiG3mTHOpP%|g&uyg$I*ELto8X&%UCjQe<3mQ&Pb$T>uDjDzZ)!6sikNU#<m^3V
zl_VZ*vg)p7c5-V)q&F>PbJ);Pe1K1{4XJQ0yXYhG+h_keUruONN!`WY@fywPh0>ls
zUGB<-CEj8F0BSes)?lz(ntN%IBN{do5N!JF?Ad=z;=CF+=TSAFAB#9O{qDY*%oN53
z;eTvmBY|;E=oBbDAH%KfkKcdk#>5O!R!)H;<N&a7N<4Rq`^5ji|Km94$+$Upf%k-}
zLJlo7`1M(-9oo;(0C-~f&apyuBce!;oKrYb!`P2fWJw?q7Ecg^MwQ$dEX~Ei9n8o8
zMulJ*o&O-Aq7)(N1K@@K{3(LBznq(>tJO*2LL}UR?HIJETnEciCDIeuHR+=~zBWcH
z2=<TZ!X=@e$&M>xnL0}%1V$Q3Fjd{NtF;%qn78P*3R`Y&ZDBukD~R-!uxRvoQItCp
z%(tWnM@|#>kKX84|4d0wEL;NEArH`AOH@dY;s5|oEAt-@eGYIZJS&FDLJ|!AMKO~L
zX-@FDf!u0WyAEeMA7qIakrpMJCUzGw$H5X$k*9^JPI5p3buS!#qGY{qa$6}|#|7qM
z_FqDXHUTSiD}ryH5E-7+0kU@?`RwfUJ0KSz=5`DyvM!oyyY{c&lUX+PErCyh?#LYl
zWO_hz?CH9mx}0lH&*CdpDPBB52;|AQMf02?OI7EeT807fuZoIs`CXIG#Ejg)7w!o>
z%s=F`p(aW7;i_D!@84cTk55JO9zZgfjw43tKg-ZO$A&^zV=#dG<N4@E5_RNVMY4g$
zXta{PkuCN64o?Xxne3&YWQ4qqPdv$fEJK2Xk{H{nDR!qwWKVyP{rN41wvI88!FkX?
zN?DR=rrLz$gz(X;%~yq?(beC@6t)ziFt>Xxt(zCl1thlMUgwlu7qwTS?j9@31Mc&E
zcE0k|$x6TC8Y>4b&w^Xzp5O!)br$^Zm!lA>@xavh5ZVJ<<`_B1lawG}6jQdpa!BXd
z=ZzvI=m(mvC#3N&&3O6~|9>h{_spF2_t>wzi;L;kqby05N_Urh(`)U0&&^rY<LHa2
zv*P_NTWah}$%V6@BL0OT|3<c8-U(;sV(NlXu2RGOzv8^>h)mWypK>!eJ#pp#A`=Zd
z+WMXenai<yf`Wy>7>vnwg1Mi$TN_V&bbdgGy8FL)MUd}|pNi}B3FP_gerWY1hl2ZL
zW6%LhxaeDZYl3FxmbsNl1l>M10$km+KiB9#;U4bdlU}woxtM2PsP@>s=p1=7DHCaA
zv!xmH9I!MZj*N_ev>~q<CBq~dtOO)hB9TFH)jCr@ztcJW?n14@3kYFc+h=%nae!U=
z9GeP=Jdl0E|IFmA>#M(ig~?C>%Yl2pe%MiIhKMhYqb`Tntr7Yr*Y7|*<*C6E=cImq
zz2{nE=gtDFwb+0^4!q~i64A2-n>I1UVe!0(slg}IsZIt;=H)m1w6VI1mp@r6ea?p=
zj8vn3axyuaOBU*cCb>__k&Gwx_ekw_Ai9-t_RBH;Tx5Q|p;JMfNxaIC6y@5QrScAJ
zSoNKHx1t|AGe`n7Ic(r$Etq;;ypxMpW3%C3Fs<E*086&r%A-k={$D`;{}wB#_DB!n
WjkHU|xV`(gkBWk(e3k6`&;JjRQbHmC

literal 0
HcmV?d00001

diff --git a/docs/manual/default-ports.md b/docs/manual/default-ports.md
index e1538052d4b..5b2487fe52c 100644
--- a/docs/manual/default-ports.md
+++ b/docs/manual/default-ports.md
@@ -365,6 +365,7 @@ These defaults can of course be changed, but as we guarantee "sane, working defa
 | technitium                 |    dns-cert     |    dns-cert     | 10202 |   TCP    |                                                 |
 | technitium                 |    dns-https    |    dns-https    | 10203 |   TCP    |                                                 |
 | technitium                 | dns-https-proxy | dns-https-proxy | 10204 |   TCP    |                                                 |
+| wekan                      |      main       |      main       | 10204 |   TCP    |                                                 |
 | storj-node                 |      main       |      main       | 14002 |   TCP    |                                                 |
 | satisfactory               |     beacon      |     beacon      | 15000 |   UDP    |                                                 |
 | satisfactory               |      query      |      query      | 15777 |   UDP    |                                                 |