dokumentation nachgeführt

docs/context/ansible_setup.md

@@ -16,6 +16,10 @@ timezone: "Europe/Berlin"
 fail2ban_bantime: 600
 fail2ban_findtime: 600
 fail2ban_maxretry: 3
+ufw_allowed_ports:
+  - { port: 22, proto: tcp }  # SSH
+  - { port: 80, proto: tcp }  # HTTP
+  - { port: 443, proto: tcp } # HTTPS
 ```
 
 ### Docker Role
@@ -25,7 +29,6 @@ fail2ban_maxretry: 3
 
 ```yaml
 # Docker Standardvariablen
-docker_version: "latest"
 docker_compose_version: "2.21.0"
 docker_users: ["{{ ansible_user }}"]
 ```
@@ -66,6 +69,14 @@ services:
   nextcloud: true
   paperless: true
   nodered: true
+
+# Ports
+keycloak_port: 8080
+nextcloud_port: 8081
+paperless_port: 8000
+nodered_port: 1880
+
+docker_compose_version: "2.21.0"
 ```
 
 ## Deployment Flow
@@ -78,9 +89,6 @@ services:
 ```bash
 # Staging Deployment
 ansible-playbook -i inventory/staging site.yml
-
-# Production Deployment
-ansible-playbook -i inventory/production site.yml
 ```
 
 ## Sicherheitsaspekte
@@ -97,4 +105,4 @@ ansible-playbook -i inventory/production site.yml
 ## Updates und Wartung
 - Regelmäßige Updates über Ansible
 - Backup-Integration
-- Monitoring-Setup
+- Monitoring-Setup

docs/context/current_state.md

@@ -16,7 +16,8 @@ Project to automate all administrative and commercial processes within the compa
 - NGINX running in WSL for development using NGINX Proxy Manager
 - Docker environment being set up
 - SSL certificates in place for development (self-signed)
-- Staging and Production environment will use NGINX Server Configs and letsencrypt SSL certificates
+- Staging and Production environment will use NGINX Server Config files and letsencrypt SSL certificates
+- Automated password generation and encrypted storage implemented using `setup_environment.sh`
 
 ### 3. Service Status
 
@@ -24,15 +25,18 @@ Project to automate all administrative and commercial processes within the compa
 - NGINX configuration complete
 - Docker setup complete
 - Keycloak is running behind a reverse proxy
-- Implemented setup_realm.js script for automated realm, client and user setup
+- Implemented `setup_realm.js` script for automated realm, client, and user setup
 - SSL certificates configured (self-signed)
 - `setup_realm.js` configures the `office-automation` realm, `nextcloud`, `paperless`, and `nodered` clients.
-- Test users `testadmin` and `testuser` are also created.
+- Test users `testadmin`, `testuser` and `testserviceuser` are also created with specific group assignments.
+- Client Secrets are now managed and set correctly.
+- The `groups-nextcloud` Client Scope is now created and managed by the `setup_realm.js` script.
 
 #### Nextcloud (cloud.mrx8086.com)
 - NGINX configuration complete
-- Docker setup pending
+- Docker setup complete
 - SSL certificates configured
+- Nextcloud is now configured to use Keycloak for authentication via OpenID Connect.
 
 #### Paperless (docs.mrx8086.com)
 - NGINX configuration complete
@@ -49,6 +53,7 @@ Project to automate all administrative and commercial processes within the compa
 - Automated password generation implemented
 - Encrypted credentials storage system in place
 - SSL certificates managed and deployed
+- Keycloak is used for central authentication
 
 ### 5. Development Decisions
 - Using WSL for development environment
@@ -59,18 +64,20 @@ Project to automate all administrative and commercial processes within the compa
 - Staging and Production will use Nginx Server Config files
 
 ## Next Steps
-1. Complete Nextcloud docker setup
-2. Test Nextcloud authentication against Keycloak
-3. Proceed with remaining service deployments
-4. Setup Letsencrypt SSL Certificates in the Staging Environment
+1.  Complete Paperless docker setup
+2.  Test Paperless authentication against Keycloak
+3.  Proceed with remaining service deployments
+4.  Setup Letsencrypt SSL Certificates in the Staging Environment
+5.  Implement automated backups
+6.  Implement monitoring
 
 ## Important Files Location
 - NGINX configs: /config/nginx/sites-available/
 - SSL certificates: /config/nginx/ssl/mrx8086.com/
 - Docker compose: /docker/docker-compose.yml
-- Environment variables: /config/.env
+- Environment variables: /docker/.env and /scripts/setup/keycloak/.env
 - Encrypted credentials: /config/credentials/
-- Keycloak setup script: /scripts/install/setup_realm.js
+- Keycloak setup script: /scripts/setup/keycloak/setup_realm.js
 
 ## Development Environment
 - Domain: mrx8086.com