Skip to content

Update dev hocuspocus compose image version and env#22019

Merged
akabiru merged 1 commit intodevfrom
maintenance/hocuspocus
Mar 10, 2026
Merged

Update dev hocuspocus compose image version and env#22019
akabiru merged 1 commit intodevfrom
maintenance/hocuspocus

Conversation

@akabiru
Copy link
Copy Markdown
Member

@akabiru akabiru commented Feb 17, 2026

  • Remove deprecated ALLOWED_DOMAINS
  • Point to openproject/hocuspocus:dev-lates by default

@akabiru akabiru requested a review from a team February 17, 2026 11:55
@akabiru akabiru self-assigned this Feb 17, 2026
@akabiru akabiru force-pushed the maintenance/hocuspocus branch from c56d6c1 to 01dd9cd Compare February 17, 2026 12:49
Copy link
Copy Markdown
Contributor

@judithroth judithroth left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

There's one more thing that we can probably also remove - would be nice if you could check that (see comment).

- gateway
environment:
- ALLOWED_DOMAINS=openproject.${OPENPROJECT_DOCKER_DEV_TLD:-local},localhost
- NODE_TLS_REJECT_UNAUTHORIZED=0
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Do we still need the NODE_TLS_REJECT_UNAUTHORIZED? I thought this was legacy as well, but I could be mistaken.

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ah, good eye- I'll double check as I recall it was needed at some point. Unless @brunopagno can answer. 😅

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Screenshot 2026-02-23 at 11 24 40 AM

AFAICT, this is still needed to workaround TLS in dev- I reckon we should be able to resolve this somehow with step/traefik? Not sure cc @NobodysNightmare @Kharonus

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

So let me take a guess on what your problem might have been: A typical problem for our dev stack is that we work with self-signed certificates. Since these are not globally trusted, you need to tell your clients to trust them.

If I had to guess, then maybe you didn't manage to convince Hocuspocus to trust those self-signed certificates.

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

If I had to guess, then maybe you didn't manage to convince Hocuspocus to trust those self-signed certificates.

This sounds like it Jan, thanks! I'll see if it's a "quick" fix or not 👍🏾

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I could not find time to address this yet. Merging the current refinement.

@judithroth
Copy link
Copy Markdown
Contributor

Thanks for taking care to improve this!

* Remove deprecated `ALLOWED_DOMAINS`
* Point to `openproject/hocuspocus:dev-lates` by default
@akabiru akabiru force-pushed the maintenance/hocuspocus branch from 01dd9cd to f1a8906 Compare March 10, 2026 13:12
@akabiru akabiru merged commit 338bb59 into dev Mar 10, 2026
14 of 15 checks passed
@akabiru akabiru deleted the maintenance/hocuspocus branch March 10, 2026 19:00
@github-actions github-actions Bot locked and limited conversation to collaborators Mar 10, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Development

Successfully merging this pull request may close these issues.

3 participants