chore: release preparation

Resolves https://github.com/go-vikunja/frontend/issues/139

.dockerignore

@@ -0,0 +1,9 @@
+files/
+dist/
+logs/
+
+Dockerfile
+docker-manifest.tmpl
+docker-manifest-unstable.tmpl
+*.db
+*.zip

.drone.yml

@@ -1,5 +1,6 @@
 ---
 kind: pipeline
+type: docker
 name: testing
 
 workspace:
@@ -38,7 +39,7 @@ volumes:
 
 services:
   - name: test-mysql-unit
-    image: mariadb:10
+    image: mariadb:11
     environment:
       MYSQL_ROOT_PASSWORD: vikunjatest
       MYSQL_DATABASE: vikunjatest
@@ -46,7 +47,7 @@ services:
       - name: tmp-mysql-unit
         path: /var/lib/mysql
   - name: test-mysql-integration
-    image: mariadb:10
+    image: mariadb:11
     environment:
       MYSQL_ROOT_PASSWORD: vikunjatest
       MYSQL_DATABASE: vikunjatest
@@ -54,7 +55,7 @@ services:
       - name: tmp-mysql-integration
         path: /var/lib/mysql
   - name: test-mysql-migration
-    image: mariadb:10
+    image: mariadb:11
     environment:
       MYSQL_ROOT_PASSWORD: vikunjatest
       MYSQL_DATABASE: vikunjatest
@@ -62,7 +63,7 @@ services:
       - name: tmp-mysql-migration
         path: /var/lib/mysql
   - name: test-postgres-unit
-    image: postgres:13
+    image: postgres:16
     environment:
       POSTGRES_PASSWORD: vikunjatest
       POSTGRES_DB: vikunjatest
@@ -72,7 +73,7 @@ services:
     commands:
       - docker-entrypoint.sh -c fsync=off -c full_page_writes=off # turns of wal
   - name: test-postgres-integration
-    image: postgres:13
+    image: postgres:16
     environment:
       POSTGRES_PASSWORD: vikunjatest
       POSTGRES_DB: vikunjatest
@@ -82,7 +83,7 @@ services:
     commands:
       - docker-entrypoint.sh -c fsync=off -c full_page_writes=off # turns of wal
   - name: test-postgres-migration
-    image: postgres:13
+    image: postgres:16
     environment:
       POSTGRES_PASSWORD: vikunjatest
       POSTGRES_DB: vikunjatest
@@ -111,7 +112,7 @@ steps:
   # compiling the same magefile at the same time. It's also faster if each step does not need to compile it first.
   - name: mage
     image: vikunja/golang-build:latest
-    pull: true
+    pull: always
     environment:
       GOPROXY: 'https://goproxy.kolaente.de'
     commands:
@@ -122,7 +123,7 @@ steps:
 
   - name: build
     image: vikunja/golang-build:latest
-    pull: true
+    pull: always
     environment:
       GOPROXY: 'https://goproxy.kolaente.de'
     depends_on: [ mage ]
@@ -132,28 +133,28 @@ steps:
       event: [ push, tag, pull_request ]
 
   - name: lint
-    image: vikunja/golang-build:latest
-    pull: true
+    image: golangci/golangci-lint:v1.55.2
+    pull: always
     environment:
       GOPROXY: 'https://goproxy.kolaente.de'
     depends_on: [ build ]
     commands:
-      - wget -O - -q https://raw.githubusercontent.com/golangci/golangci-lint/master/install.sh | sh -s -- -b $(go env GOPATH)/bin v1.31.0
-      - ./mage-static check:all
+      - export "GOROOT=$(go env GOROOT)"
+      - ./mage-static check:golangci
     when:
       event: [ push, tag, pull_request ]
 
   - name: test-migration-prepare
     image: kolaente/toolbox:latest
-    pull: true
+    pull: always
     commands:
       # Get the latest version
       - wget https://dl.vikunja.io/api/unstable/vikunja-unstable-linux-amd64-full.zip -q -O vikunja-latest.zip
       - unzip vikunja-latest.zip vikunja-unstable-linux-amd64
 
   - name: test-migration-sqlite
-    image: kolaente/toolbox:latest
-    pull: true
+    image: vikunja/golang-build:latest
+    pull: always
     depends_on: [ test-migration-prepare, build ]
     environment:
       VIKUNJA_DATABASE_TYPE: sqlite
@@ -171,8 +172,8 @@ steps:
       event: [ push, tag, pull_request ]
 
   - name: test-migration-mysql
-    image: kolaente/toolbox:latest
-    pull: true
+    image: vikunja/golang-build:latest
+    pull: always
     depends_on: [ test-migration-prepare, build ]
     environment:
       VIKUNJA_DATABASE_TYPE: mysql
@@ -190,8 +191,8 @@ steps:
       event: [ push, tag, pull_request ]
 
   - name: test-migration-psql
-    image: kolaente/toolbox:latest
-    pull: true
+    image: vikunja/golang-build:latest
+    pull: always
     depends_on: [ test-migration-prepare, build ]
     environment:
       VIKUNJA_DATABASE_TYPE: postgres
@@ -211,7 +212,7 @@ steps:
 
   - name: test
     image: vikunja/golang-build:latest
-    pull: true
+    pull: always
     environment:
       GOPROXY: 'https://goproxy.kolaente.de'
     commands:
@@ -222,7 +223,7 @@ steps:
 
   - name: test-sqlite
     image: vikunja/golang-build:latest
-    pull: true
+    pull: always
     environment:
       GOPROXY: 'https://goproxy.kolaente.de'
       VIKUNJA_TESTS_USE_CONFIG: 1
@@ -239,7 +240,7 @@ steps:
 
   - name: test-mysql
     image: vikunja/golang-build:latest
-    pull: true
+    pull: always
     environment:
       GOPROXY: 'https://goproxy.kolaente.de'
       VIKUNJA_TESTS_USE_CONFIG: 1
@@ -256,7 +257,7 @@ steps:
 
   - name: test-postgres
     image: vikunja/golang-build:latest
-    pull: true
+    pull: always
     environment:
       GOPROXY: 'https://goproxy.kolaente.de'
       VIKUNJA_TESTS_USE_CONFIG: 1
@@ -274,7 +275,7 @@ steps:
 
   - name: integration-test
     image: vikunja/golang-build:latest
-    pull: true
+    pull: always
     environment:
       GOPROXY: 'https://goproxy.kolaente.de'
     commands:
@@ -285,7 +286,7 @@ steps:
 
   - name: integration-test-sqlite
     image: vikunja/golang-build:latest
-    pull: true
+    pull: always
     environment:
       GOPROXY: 'https://goproxy.kolaente.de'
       VIKUNJA_TESTS_USE_CONFIG: 1
@@ -302,7 +303,7 @@ steps:
 
   - name: integration-test-mysql
     image: vikunja/golang-build:latest
-    pull: true
+    pull: always
     environment:
       GOPROXY: 'https://goproxy.kolaente.de'
       VIKUNJA_TESTS_USE_CONFIG: 1
@@ -319,7 +320,7 @@ steps:
 
   - name: integration-test-postgres
     image: vikunja/golang-build:latest
-    pull: true
+    pull: always
     environment:
       GOPROXY: 'https://goproxy.kolaente.de'
       VIKUNJA_TESTS_USE_CONFIG: 1
@@ -336,12 +337,9 @@ steps:
       event: [ push, tag, pull_request ]
 
 ---
-########
-# Build a release when tagging
-########
-
 kind: pipeline
-name: release
+type: docker
+name: generate-swagger-docs
 
 depends_on:
   - testing
@@ -350,6 +348,54 @@ workspace:
   base: /go
   path: src/code.vikunja.io/api
 
+trigger:
+  branch:
+    include:
+      - main
+  event:
+    include:
+      - push
+
+steps:
+  - name: generate-swagger-docs
+    image: vikunja/golang-build:latest
+    pull: always
+    environment:
+      GOPROXY: 'https://goproxy.kolaente.de'
+    commands:
+      - mage do-the-swag
+
+  - name: push
+    pull: always
+    image: appleboy/drone-git-push
+    depends_on:
+      - generate-swagger-docs
+    settings:
+      author_email: "frederik@vikunja.io"
+      author_name: Frederick [Bot]
+      branch: main
+      commit: true
+      commit_message: "[skip ci] Updated swagger docs"
+      remote: "ssh://git@kolaente.dev:9022/vikunja/api.git"
+      ssh_key:
+        from_secret: git_push_ssh_key
+
+---
+########
+# Build a release when tagging
+########
+
+kind: pipeline
+type: docker
+name: release
+
+depends_on:
+  - testing
+
+workspace:
+  base: /source
+  path: /
+
 trigger:
   ref:
     - refs/heads/main
@@ -366,7 +412,7 @@ steps:
   # compiling the same magefile at the same time. It's also faster if each step does not need to compile it first.
   - name: mage
     image: vikunja/golang-build:latest
-    pull: true
+    pull: always
     environment:
       GOPROXY: 'https://goproxy.kolaente.de'
     commands:
@@ -376,7 +422,7 @@ steps:
 
   - name: before-static-build
     image: techknowlogick/xgo:latest
-    pull: true
+    pull: always
     commands:
       - export PATH=$PATH:$GOPATH/bin
       - go install github.com/magefile/mage
@@ -385,11 +431,12 @@ steps:
 
   - name: static-build-windows
     image: techknowlogick/xgo:latest
-    pull: true
+    pull: always
     environment:
       # This path does not exist. However, when we set the gopath to /go, the build fails. Not sure why.
       # Leaving this here until we know how to resolve this properly.
       GOPATH: /srv/app
+      GOPROXY: https://goproxy.kolaente.de
     commands:
       - export PATH=$PATH:$GOPATH/bin
       - go install github.com/magefile/mage
@@ -398,11 +445,12 @@ steps:
 
   - name: static-build-linux
     image: techknowlogick/xgo:latest
-    pull: true
+    pull: always
     environment:
       # This path does not exist. However, when we set the gopath to /go, the build fails. Not sure why.
       # Leaving this here until we know how to resolve this properly.
       GOPATH: /srv/app
+      GOPROXY: https://goproxy.kolaente.de
     commands:
       - export PATH=$PATH:$GOPATH/bin
       - go install github.com/magefile/mage
@@ -411,11 +459,12 @@ steps:
 
   - name: static-build-darwin
     image: techknowlogick/xgo:latest
-    pull: true
+    pull: always
     environment:
       # This path does not exist. However, when we set the gopath to /go, the build fails. Not sure why.
       # Leaving this here until we know how to resolve this properly.
       GOPATH: /srv/app
+      GOPROXY: https://goproxy.kolaente.de
     commands:
       - export PATH=$PATH:$GOPATH/bin
       - go install github.com/magefile/mage
@@ -424,7 +473,7 @@ steps:
 
   - name: after-build-compress
     image: kolaente/upx
-    pull: true
+    pull: always
     depends_on:
       - static-build-windows
       - static-build-linux
@@ -434,7 +483,7 @@ steps:
 
   - name: after-build-static
     image: techknowlogick/xgo:latest
-    pull: true
+    pull: always
     depends_on:
       - after-build-compress
     commands:
@@ -446,7 +495,7 @@ steps:
 
   - name: sign-release
     image: plugins/gpgsign:1
-    pull: true
+    pull: always
     depends_on: [ after-build-static ]
     settings:
       key:
@@ -459,8 +508,8 @@ steps:
 
   # Push the releases to our pseudo-s3-bucket
   - name: release-latest
-    image: plugins/s3:1
-    pull: true
+    image: plugins/s3
+    pull: always
     settings:
       bucket: vikunja-releases
       access_key:
@@ -481,8 +530,8 @@ steps:
     depends_on: [ sign-release ]
 
   - name: release-version
-    image: plugins/s3:1
-    pull: true
+    image: plugins/s3
+    pull: always
     settings:
       bucket: vikunja-releases
       access_key:
@@ -501,21 +550,40 @@ steps:
     depends_on: [ sign-release ]
 
   # Build os packages and push it to our bucket
-  - name: build-os-packages
-    image: goreleaser/nfpm
-    pull: true
+  - name: build-os-packages-unstable
+    image: goreleaser/nfpm:v2.35.2
+    pull: always
     commands:
       - apk add git go
       - ./mage-static release:packages
       - mv dist/os-packages/vikunja*.x86_64.rpm dist/os-packages/vikunja-unstable-x86_64.rpm
       - mv dist/os-packages/vikunja*_amd64.deb dist/os-packages/vikunja-unstable-amd64.deb
       - mv dist/os-packages/vikunja*_x86_64.apk dist/os-packages/vikunja-unstable-x86_64.apk
-    depends_on: [ static-build-linux ]
+    when:
+      branch:
+        - main
+      event:
+        - push
+    depends_on: [ after-build-compress ]
+
+  - name: build-os-packages-version
+    image: goreleaser/nfpm:v2.35.2
+    pull: always
+    commands:
+      - apk add git go
+      - ./mage-static release:packages
+      - mv dist/os-packages/vikunja*.x86_64.rpm dist/os-packages/vikunja-${DRONE_TAG##v}-x86_64.rpm
+      - mv dist/os-packages/vikunja*_amd64.deb dist/os-packages/vikunja-${DRONE_TAG##v}-amd64.deb
+      - mv dist/os-packages/vikunja*_x86_64.apk dist/os-packages/vikunja-${DRONE_TAG##v}-x86_64.apk
+    when:
+      event:
+        - tag
+    depends_on: [ after-build-compress ]
 
   # Push the os releases to our pseudo-s3-bucket
   - name: release-os-latest
-    image: plugins/s3:1
-    pull: true
+    image: plugins/s3
+    pull: always
     settings:
       bucket: vikunja-releases
       access_key:
@@ -533,11 +601,11 @@ steps:
         - main
       event:
         - push
-    depends_on: [ build-os-packages ]
+    depends_on: [ build-os-packages-unstable ]
 
   - name: release-os-version
-    image: plugins/s3:1
-    pull: true
+    image: plugins/s3
+    pull: always
     settings:
       bucket: vikunja-releases
       access_key:
@@ -553,47 +621,11 @@ steps:
     when:
       event:
         - tag
-    depends_on: [ build-os-packages ]
-
-  ### Broken, disabled until we figure out how to fix it
-  #  - name: deb-structure
-  #    image: kolaente/reprepro
-  #    pull: true
-  #    environment:
-  #      GPG_PRIVATE_KEY:
-  #        from_secret: gpg_privatekey
-  #    commands:
-  #      - export GPG_TTY=$(tty)
-  #      - gpg -qk
-  #      - echo "use-agent" >>  ~/.gnupg/gpg.conf
-  #      - gpgconf --kill gpg-agent
-  #      - echo $GPG_PRIVATE_KEY > ~/frederik.gpg
-  #      - gpg --import ~/frederik.gpg
-  #      - mkdir debian/conf -p
-  #      - cp build/reprepro-dist-conf debian/conf/distributions
-  #      - ./mage-static release:reprepro
-  #    depends_on: [ build-os-packages ]
-
-  # Push the releases to our pseudo-s3-bucket
-  - name: release-deb
-    image: plugins/s3:1
-    pull: true
-    settings:
-      bucket: vikunja-releases
-      access_key:
-        from_secret: aws_access_key_id
-      secret_key:
-        from_secret: aws_secret_access_key
-      endpoint: https://s3.fr-par.scw.cloud
-      region: fr-par
-      path_style: true
-      strip_prefix: debian
-      source: debian/*/*/*/*/*
-      target: /deb/
-#    depends_on: [ deb-structure ]
+    depends_on: [ build-os-packages-version ]
 
 ---
 kind: pipeline
+type: docker
 name: deploy-docs
 
 workspace:
@@ -612,8 +644,7 @@ trigger:
 steps:
   - name: theme
     image: kolaente/toolbox
-    pull: true
-    group: build-static
+    pull: always
     commands:
       - mkdir docs/themes/vikunja -p
       - cd docs/themes/vikunja
@@ -621,8 +652,8 @@ steps:
       - tar -xzf vikunja-theme.tar.gz
 
   - name: build
-    image: monachus/hugo:v0.75.1
-    pull: true
+    image: klakegg/hugo:0.111.3
+    pull: always
     commands:
       - cd docs
       - hugo
@@ -630,7 +661,7 @@ steps:
 
   - name: docker
     image: plugins/docker
-    pull: true
+    pull: always
     settings:
       username:
         from_secret: docker_username
@@ -643,99 +674,11 @@ steps:
 ---
 kind: pipeline
 type: docker
-name: docker-arm-release
+name: docker-release
 
 depends_on:
   - testing
 
-platform:
-  os: linux
-  arch: arm64
-
-trigger:
-  ref:
-    - refs/heads/main
-    - "refs/tags/**"
-
-steps:
-  - name: fetch-tags
-    image: docker:git
-    commands:
-      - git fetch --tags
-  - name: docker-arm-unstable
-    image: plugins/docker:linux-arm
-    pull: true
-    settings:
-      username:
-        from_secret: docker_username
-      password:
-        from_secret: docker_password
-      repo: vikunja/api
-      tags: unstable-linux-arm
-    depends_on: [ fetch-tags ]
-    when:
-      ref:
-        - refs/heads/main
-
-  - name: docker-arm
-    image: plugins/docker:linux-arm
-    pull: true
-    settings:
-      username:
-        from_secret: docker_username
-      password:
-        from_secret: docker_password
-      repo: vikunja/api
-      auto_tag: true
-      auto_tag_suffix: linux-arm
-    depends_on: [ fetch-tags ]
-    when:
-      ref:
-        - "refs/tags/**"
-
-  - name: docker-arm64-unstable
-    image: plugins/docker:linux-arm64
-    pull: true
-    settings:
-      username:
-        from_secret: docker_username
-      password:
-        from_secret: docker_password
-      repo: vikunja/api
-      tags: unstable-linux-arm64
-    depends_on: [ fetch-tags ]
-    when:
-      ref:
-        - refs/heads/main
-
-  - name: docker-arm64
-    image: plugins/docker:linux-arm64
-    pull: true
-    settings:
-      username:
-        from_secret: docker_username
-      password:
-        from_secret: docker_password
-      repo: vikunja/api
-      auto_tag: true
-      auto_tag_suffix: linux-arm64
-    depends_on: [ fetch-tags ]
-    when:
-      ref:
-        - "refs/tags/**"
-
----
-kind: pipeline
-type: docker
-name: docker-amd64-release
-
-depends_on:
-  - testing
-
-platform:
-  os: linux
-  arch: amd64
-
 trigger:
   ref:
     - refs/heads/main
@@ -748,94 +691,55 @@ steps:
       - git fetch --tags
 
   - name: docker-unstable
-    image: plugins/docker:linux-amd64
-    pull: true
-    settings:
-      username:
-        from_secret: docker_username
-      password:
-        from_secret: docker_password
-      repo: vikunja/api
-      tags: unstable-linux-amd64
-    depends_on: [ fetch-tags ]
-    when:
-      ref:
-        - refs/heads/main
-
-  - name: docker
-    image: plugins/docker:linux-amd64
-    pull: true
-    settings:
-      username:
-        from_secret: docker_username
-      password:
-        from_secret: docker_password
-      repo: vikunja/api
-      auto_tag: true
-      auto_tag_suffix: linux-amd64
-    depends_on: [ fetch-tags ]
-    when:
-      ref:
-        - "refs/tags/**"
-
----
-kind: pipeline
-type: docker
-name: docker-manifest
-
-trigger:
-  ref:
-    - refs/heads/main
-    - "refs/tags/**"
-
-depends_on:
-  - docker-amd64-release
-  - docker-arm-release
-
-steps:
-  - name: manifest-unstable
+    image: thegeeklab/drone-docker-buildx
+    privileged: true
     pull: always
-    image: plugins/manifest
     settings:
+      username:
+        from_secret: docker_username
+      password:
+        from_secret: docker_password
+      repo: vikunja/api
       tags: unstable
-      ignore_missing: true
-      spec: docker-manifest-unstable.tmpl
-      password:
-        from_secret: docker_password
-      username:
-        from_secret: docker_username
+      platforms:
+        - linux/386
+        - linux/amd64
+        - linux/arm/v6
+        - linux/arm/v7
+        - linux/arm64/v8
+    depends_on: [ fetch-tags ]
     when:
       ref:
         - refs/heads/main
 
-  - name: manifest-release
-    pull: always
-    image: plugins/manifest
-    settings:
-      auto_tag: true
-      ignore_missing: true
-      spec: docker-manifest.tmpl
-      password:
-        from_secret: docker_password
-      username:
-        from_secret: docker_username
+  - name: generate-tags
+    image: thegeeklab/docker-autotag
+    environment:
+      DOCKER_AUTOTAG_VERSION: ${DRONE_TAG}
+      DOCKER_AUTOTAG_EXTRA_TAGS: latest
+      DOCKER_AUTOTAG_OUTPUT_FILE: .tags
+    depends_on: [ fetch-tags ]
     when:
       ref:
         - "refs/tags/**"
 
-  - name: manifest-release-latest
+  - name: docker-release
+    image: thegeeklab/drone-docker-buildx
+    privileged: true
     pull: always
-    image: plugins/manifest
-    depends_on:
-      - clone
     settings:
-      tags: latest
-      ignore_missing: true
-      spec: docker-manifest.tmpl
-      password:
-        from_secret: docker_password
       username:
         from_secret: docker_username
+      password:
+        from_secret: docker_password
+      repo: vikunja/api
+      platforms:
+        - linux/386
+        - linux/amd64
+        - linux/arm/v6
+        - linux/arm/v7
+        - linux/arm64/v8
+    depends_on: [ generate-tags ]
     when:
       ref:
         - "refs/tags/**"
@@ -854,9 +758,7 @@ depends_on:
   - testing
   - release
   - deploy-docs
-  - docker-arm-release
-  - docker-amd64-release
-  - docker-manifest
+  - docker-release
 
 steps:
   - name: notify
@@ -874,6 +776,6 @@ steps:
         - failure
 ---
 kind: signature
-hmac: 110b782e9b704b4b3b3d618678383718c92262cf3c214f4fe6705d40cd3da367
+hmac: 1d4af2ab41b63cfe6de2ef2cc4bc8c5aea8acb9087b20f0d7674d3a3ce63fed5
 
 ...

.gitea/pull_request_template.md

@@ -1,11 +0,0 @@
-# Description
-
-
-
-# Checklist
-
-* [ ] I added or improved tests
-* [ ] I added or improved docs for my feature
-  * [ ] Swagger (including `mage do-the-swag`)
-  * [ ] Error codes
-  * [ ] New config options (including adding them to `config.yml.saml` and running `mage generate-docs`)

.github/FUNDING.yml

@@ -1,2 +1,3 @@
 github: kolaente
-custom: https://www.buymeacoffee.com/kolaente
+open_collective: vikunja
+custom: ["https://vikunja.cloud", "https://www.buymeacoffee.com/kolaente"]

.github/ISSUE_TEMPLATE/bug-report.yml

@@ -0,0 +1,58 @@
+name: Bug Report
+description: Found something you weren't expecting? Report it here!
+labels: kind/bug
+body:
+  - type: markdown
+    attributes:
+      value: |
+        NOTE: If your issue is a security concern, please send an email to security@vikunja.io instead of opening a public issue.
+  - type: markdown
+    attributes:
+      value: |
+        Please fill out this issue template to report a bug.
+        
+        1. If you want to propose a new feature, please open a discussion thread in the forum: https://community.vikunja.io
+        2. Please ask questions or configuration/deploy problems on our [Matrix Room](https://matrix.to/#/#vikunja:matrix.org) or forum (https://community.vikunja.io).
+        3. Make sure you are using the latest release and
+           take a moment to check that your issue hasn't been reported before.
+        4. Please give all relevant information below for bug reports, because
+           incomplete details will be handled as an invalid report and closed.
+  - type: textarea
+    id: description
+    attributes:
+      label: Description
+      description: |
+        Please provide a description of your issue here, with a URL if you were able to reproduce the issue (see below).
+  - type: input
+    id: frontend-version
+    attributes:
+      label: Vikunja Frontend Version
+      description: Vikunja frontend version (or commit reference) of your instance
+    validations:
+      required: true
+  - type: input
+    id: api-version
+    attributes:
+      label: Vikunja API Version
+      description: Vikunja API version (or commit reference) of your instance
+    validations:
+      required: true
+  - type: input
+    id: browser-version
+    attributes:
+      label: Browser and version
+      description: If your issue is related to a frontend problem, please provide the browser and version you used to reproduce it.
+  - type: dropdown
+    id: can-reproduce
+    attributes:
+      label: Can you reproduce the bug on the Vikunja demo site?
+      options:
+        - "Yes"
+        - "No"
+    validations:
+      required: true
+  - type: textarea
+    id: screenshots
+    attributes:
+      label: Screenshots
+      description: If this issue involves the Web Interface, please provide one or more screenshots

.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,17 @@
+blank_issues_enabled: false
+contact_links:
+  - name: Frontend issues
+    url: https://code.vikunja.io/frontend/issues
+    about: This is the API repo. Please open frontend-related bug reports and discussions in the frontend repo. Not sure if you issue is frontend or api? Ask in Matrix or the forum first.
+  - name: Forum
+    url: https://community.vikunja.io/
+    about: Feature Requests, Questions, configuration or deployment problems should be discussed in the forum.
+  - name: Security-related issues
+    url: https://vikunja.io/contact/#security
+    about: For security concerns, please send a mail to security@vikunja.io instead of opening a public issue.
+  - name: Chat on Matrix
+    url: https://matrix.to/#/#vikunja:matrix.org
+    about: Please ask any quick questions here.
+  - name: Translations
+    url: https://crowdin.com/project/vikunja
+    about: Any problems or requests for new languages about translations should be handled in crowdin.

.github/workflows/lockdown.yml

@@ -0,0 +1,23 @@
+name: 'Repo Lockdown'
+
+on:
+  pull_request_target:
+    types: opened
+
+permissions:
+  issues: write
+  pull-requests: write
+
+jobs:
+  action:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: dessant/repo-lockdown@v4
+        with:
+          pr-comment: 'Hi! Thank you for your contribution.
+
+          This repo is only a mirror and unfortunately we can''t accept PRs made here. Please re-submit your changes to [our Gitea instance](https://kolaente.dev/vikunja/api/pulls).
+
+          Also check out the [contribution guidelines](https://vikunja.io/docs/development/#pull-requests).
+
+          Thank you for your understanding.'

.gitignore

@@ -4,6 +4,8 @@
 config.yml
 config.yaml
 !docs/config.yml
+!.github/ISSUE_TEMPLATE/config.yml
+!.gitea/ISSUE_TEMPLATE/config.yml
 docs/themes/
 *.db
 Run
@@ -25,3 +27,4 @@ vikunja-dump*
 vendor/
 os-packages/
 mage_output_file.go
+mage-static

.golangci.yml

@@ -6,17 +6,18 @@ linters:
   enable:
     - megacheck
     - govet
-    - goconst
     - gocritic
     - gocyclo
     - goerr113
     - goheader
     - gofmt
     - goimports
-    - golint
+    - revive
     - misspell
   disable:
     - scopelint # Obsolete, using exportloopref instead
+    - durationcheck
+    - goconst
   presets:
     - bugs
     - unused
@@ -35,6 +36,7 @@ issues:
       linters:
         - gocyclo
         - deadcode
+        - errorlint
     - path: pkg/integrations/*
       linters:
         - gocyclo
@@ -52,7 +54,6 @@ issues:
     - path: pkg/migration/*
       linters:
         - exhaustive
-        - goconst
         - goerr113
     - path: pkg/models/task_collection_filter\.go
       linters:
@@ -77,6 +78,24 @@ issues:
     - path: pkg/routes/api/v1/docs.go
       linters:
         - goheader
+        - misspell
+        - gosmopolitan
     - text: "Missed string"
       linters:
         - goheader
+    - path: pkg/.*/error.go
+      linters:
+        - errorlint
+    - path: pkg/models/favorites\.go
+      linters:
+        - nilerr
+    - path: pkg/models/project\.go
+      text: "string `parent_project_id` has 3 occurrences, make it a constant"
+    - path: pkg/models/events\.go
+      linters:
+        - musttag
+    - path: pkg/models/task_collection.go
+      text: 'append result not assigned to the same slice'
+    - path: pkg/modules/migration/ticktick/ticktick_test.go
+      linters:
+        - testifylint

.vscode/settings.json

@@ -0,0 +1,5 @@
+{
+    "go.testEnvVars": {
+        "VIKUNJA_SERVICE_ROOTPATH": "${workspaceRoot}"
+    }
+}

CONTRIBUTING.md

@@ -0,0 +1,3 @@
+# Contribution Guidelines
+
+Please check out the guidelines on https://vikunja.io/docs/development/

Dockerfile

@@ -1,51 +1,44 @@
+# syntax=docker/dockerfile:1
+#  ┬─┐┬ ┐o┬  ┬─┐
+#  │─││ │││  │ │
+#  ┘─┘┘─┘┘┘─┘┘─┘
 
-##############
-# Build stage
-FROM golang:1-alpine3.12 AS build-env
+FROM --platform=$BUILDPLATFORM techknowlogick/xgo:go-1.21.x AS builder
 
-ARG VIKUNJA_VERSION
-ENV TAGS "sqlite"
-ENV GO111MODULE=on
+RUN go install github.com/magefile/mage@latest && \
+    mv /go/bin/mage /usr/local/go/bin
 
-# Build deps
-RUN apk --no-cache add build-base git
+WORKDIR /go/src/code.vikunja.io/api
+COPY . ./
 
-# Setup repo
-COPY . ${GOPATH}/src/code.vikunja.io/api
-WORKDIR ${GOPATH}/src/code.vikunja.io/api
+ARG TARGETOS TARGETARCH TARGETVARIANT
 
-# Checkout version if set
-RUN if [ -n "${VIKUNJA_VERSION}" ]; then git checkout "${VIKUNJA_VERSION}"; fi \
- && go install github.com/magefile/mage \
- && mage build:clean build
+ENV GOPROXY https://goproxy.kolaente.de
+RUN export PATH=$PATH:$GOPATH/bin && \
+	mage build:clean && \
+    mage release:xgo "${TARGETOS}/${TARGETARCH}/${TARGETVARIANT}"
+
+#  ┬─┐┬ ┐┌┐┐┌┐┐┬─┐┬─┐
+#  │┬┘│ │││││││├─ │┬┘
+#  ┘└┘┘─┘┘└┘┘└┘┴─┘┘└┘
 
-###################
 # The actual image
 # Note: I wanted to use the scratch image here, but unfortunatly the go-sqlite bindings require cgo and
 # because of this, the container would not start when I compiled the image without cgo.
-FROM alpine:3.12
+FROM alpine:3.19 AS runner
 LABEL maintainer="maintainers@vikunja.io"
+WORKDIR /app/vikunja
+ENTRYPOINT [ "/sbin/tini", "-g", "--", "/entrypoint.sh" ]
+EXPOSE 3456
 
-WORKDIR /app/vikunja/
-COPY --from=build-env /go/src/code.vikunja.io/api/vikunja .
 ENV VIKUNJA_SERVICE_ROOTPATH=/app/vikunja/
-
-# Dynamic permission changing stuff
 ENV PUID 1000
 ENV PGID 1000
-RUN apk --no-cache add shadow && \
-  addgroup -g ${PGID} vikunja && \
-  adduser -s /bin/sh -D -G vikunja -u ${PUID} vikunja -h /app/vikunja -H && \
-  chown vikunja -R /app/vikunja
-COPY run.sh /run.sh
 
-# Fix time zone settings not working
-RUN apk --no-cache add tzdata
+RUN apk --update --no-cache add tzdata tini shadow && \
+    addgroup vikunja && \
+    adduser -s /bin/sh -D -G vikunja vikunja -h /app/vikunja -H
+COPY docker/entrypoint.sh /entrypoint.sh
+RUN chmod 0755 /entrypoint.sh && mkdir files
 
-# Files permissions
-RUN mkdir /app/vikunja/files && \
-  chown -R vikunja /app/vikunja/files
-VOLUME /app/vikunja/files
-
-CMD ["/run.sh"]
-EXPOSE 3456
+COPY --from=builder /build/vikunja-* vikunja

README.md

@@ -2,7 +2,7 @@
 
 [![Build Status](https://drone.kolaente.de/api/badges/vikunja/api/status.svg)](https://drone.kolaente.de/vikunja/api)
 [![License: AGPL v3](https://img.shields.io/badge/License-AGPL%20v3-blue.svg)](LICENSE)
-[![Download](https://img.shields.io/badge/download-v0.18.0-brightgreen.svg)](https://dl.vikunja.io)
+[![Download](https://img.shields.io/badge/download-v0.22.1-brightgreen.svg)](https://dl.vikunja.io)
 [![Docker Pulls](https://img.shields.io/docker/pulls/vikunja/api.svg)](https://hub.docker.com/r/vikunja/api/)
 [![Swagger Docs](https://img.shields.io/badge/swagger-docs-brightgreen.svg)](https://try.vikunja.io/api/v1/docs)
 [![Go Report Card](https://goreportcard.com/badge/kolaente.dev/vikunja/api)](https://goreportcard.com/report/kolaente.dev/vikunja/api)
@@ -26,13 +26,7 @@ If you find any security-related issues you don't want to disclose publicly, ple
 
 ## Features
 
-* Create TODO lists with tasks
-  * Reminder for tasks
-* Namespaces: A "group" which bundles multiple lists
-* Share lists and namespaces with teams and users with granular permissions
-* Plenty of details for tasks
-
-See [the features page](https://vikunja.io/en/features/) on our website for a more exaustive list or 
+See [the features page](https://vikunja.io/features/) on our website for a more exaustive list or 
 try it on [try.vikunja.io](https://try.vikunja.io)!
 
 ## Docs
@@ -58,4 +52,4 @@ Fork -> Push -> Pull-Request. Also see the [dev docs](https://vikunja.io/docs/de
 
 ## License
 
-This project is licensed under the AGPLv3 License. See the [LICENSE](LICENSE) file for the full license text.
+This project is licensed under the AGPLv3 License. See the [LICENSE](LICENSE) file for the full license text.

REST-Tests/attachment_from_scratch.sh

@@ -1,12 +0,0 @@
-#!/usr/bin/env bash
-
-curl -X POST http://localhost:3456/api/v1/register -H 'Content-Type: application/json' -d '{"username":"demo","password":"demo","email":"demo@vikunja.io"}'
-BEARER=`curl -X POST -H 'Content-Type: application/json' -d '{"username": "demo", "password":"demo"}' localhost:3456/api/v1/login | jq -r '.token'`
-
-echo "Bearer: $BEARER"
-
-curl -X POST localhost:3456/api/v1/tokenTest -H "Authorization: Bearer $BEARER"
-
-curl -X PUT localhost:3456/api/v1/namespaces/1/lists  -H 'Content-Type: application/json' -H "Authorization: Bearer $BEARER" -d '{"title":"lorem"}'
-curl -X PUT localhost:3456/api/v1/lists/1  -H 'Content-Type: application/json' -H "Authorization: Bearer $BEARER" -d '{"text":"lorem"}'
-curl -X PUT -H "Authorization: Bearer $BEARER" localhost:3456/api/v1/tasks/1/attachments -F 'files=@/home/konrad/Pictures/Wallpaper/greg-rakozy-_Q4mepyyjMw-unsplash.jpg'

REST-Tests/auth.http

@@ -1,29 +0,0 @@
-### Authorization by token, part 1. Retrieve and save token.
-POST http://localhost:8080/api/v1/login
-Content-Type: application/json
-
-{
-  "username": "user3",
-  "password": "1234"
-}
-
-> {% client.global.set("auth_token", response.body.token); %}
-
-### Register
-
-POST http://localhost:8080/api/v1/register
-Content-Type: application/json
-
-{
-  "username": "user",
-  "password": "1234",
-  "email": "5@knt.li"
-}
-
-###
-# Token test
-POST http://localhost:8080/api/v1/tokenTest
-Authorization: Bearer {{auth_token}}
-Content-Type: application/json
-
-###

REST-Tests/labels.http

@@ -1,70 +0,0 @@
-# Get all labels
-GET http://localhost:8080/api/v1/labels
-Authorization: Bearer {{auth_token}}
-
-###
-# Add a new label
-PUT http://localhost:8080/api/v1/labels
-Authorization: Bearer {{auth_token}}
-Content-Type: application/json
-
-{
-  "title": "test5"
-}
-
-###
-# Delete a label
-DELETE http://localhost:8080/api/v1/labels/6
-Authorization: Bearer {{auth_token}}
-
-###
-# Update a label
-POST http://localhost:8080/api/v1/labels/1
-Authorization: Bearer {{auth_token}}
-Content-Type: application/json
-
-{
-  "title": "testschinkenbrot",
-  "description": "käsebrot"
-}
-
-###
-# Get one label
-GET http://localhost:8080/api/v1/labels/1
-Authorization: Bearer {{auth_token}}
-
-###
-# Get all labels on a task
-GET http://localhost:8080/api/v1/tasks/3565/labels
-Authorization: Bearer {{auth_token}}
-
-###
-# Add a new label to a task
-PUT http://localhost:8080/api/v1/tasks/35236365/labels
-Authorization: Bearer {{auth_token}}
-Content-Type: application/json
-
-{
-  "label_id": 1
-}
-
-###
-# Delete a label from a task
-DELETE http://localhost:8080/api/v1/tasks/3565/labels/1
-Authorization: Bearer {{auth_token}}
-
-###
-# Add a new label to a task
-POST http://localhost:8080/api/v1/tasks/3565/labels/bulk
-Authorization: Bearer {{auth_token}}
-Content-Type: application/json
-
-{
-  "labels": [
-    {"id": 1},
-    {"id": 2},
-    {"id": 3}
-  ]
-}
-
-###

REST-Tests/lists.http

@@ -1,177 +0,0 @@
-# Get all lists
-GET http://localhost:8080/api/v1/namespaces/35/lists
-Authorization: Bearer {{auth_token}}
-
-###
-
-# Get one list
-GET http://localhost:8080/api/v1/lists/3
-Authorization: Bearer {{auth_token}}
-
-###
-
-# Add a new list
-PUT http://localhost:8080/api/v1/namespaces/35/lists
-Authorization: Bearer {{auth_token}}
-Content-Type: application/json
-
-{
-  "title": "test"
-}
-
-###
-
-# Add a new item
-PUT http://localhost:8080/api/v1/lists/1
-Authorization: Bearer {{auth_token}}
-Content-Type: application/json
-
-{
-  "text": "Task",
-  "description": "Schinken"
-}
-
-###
-
-# Delete a task from a list
-DELETE http://localhost:8080/api/v1/lists/14
-Authorization: Bearer {{auth_token}}
-
-###
-
-# Get all teams who have access to that list
-GET http://localhost:8080/api/v1/lists/28/teams
-Authorization: Bearer {{auth_token}}
-
-###
-
-# Give a team access to that list
-PUT http://localhost:8080/api/v1/lists/1/teams
-Authorization: Bearer {{auth_token}}
-Content-Type: application/json
-
-{"team_id":2, "right": 1}
-
-###
-
-# Update a teams access to that list
-POST http://localhost:8080/api/v1/lists/1/teams/2
-Authorization: Bearer {{auth_token}}
-Content-Type: application/json
-
-{"right": 0}
-
-###
-
-# Delete a team from a list
-DELETE http://localhost:8080/api/v1/lists/10235/teams/1
-Authorization: Bearer {{auth_token}}
-
-###
-
-# Delete a team from a list
-DELETE http://localhost:8080/api/v1/lists/10235/teams/1
-Authorization: Bearer {{auth_token}}
-
-###
-
-# Get all users who have access to that list
-GET http://localhost:8080/api/v1/lists/28/users
-Authorization: Bearer {{auth_token}}
-
-###
-
-# Give a user access to that list
-PUT http://localhost:8080/api/v1/lists/3/users
-Authorization: Bearer {{auth_token}}
-Content-Type: application/json
-
-{"userID":"user4", "right":1}
-
-###
-
-# Update a users access to that list
-POST http://localhost:8080/api/v1/lists/30/users/3
-Authorization: Bearer {{auth_token}}
-Content-Type: application/json
-
-{"right":2}
-
-###
-
-# Delete a user from a list
-DELETE http://localhost:8080/api/v1/lists/28/users/3
-Authorization: Bearer {{auth_token}}
-
-###
-
-# Get all pending tasks
-GET http://localhost:8080/api/v1/tasks/all
-Authorization: Bearer {{auth_token}}
-
-###
-
-# Get all pending tasks with priorities
-GET http://localhost:8080/api/v1/tasks/all?sort=priorityasc
-Authorization: Bearer {{auth_token}}
-
-###
-
-# Get all pending tasks in a range
-GET http://localhost:8080/api/v1/tasks/all/dueadateasc/1546784000/1548784000
-Authorization: Bearer {{auth_token}}
-
-###
-
-# Get all pending tasks in caldav
-GET http://localhost:8080/api/v1/tasks/caldav
-#Authorization: Bearer {{auth_token}}
-
-###
-
-# Update a task
-POST http://localhost:8080/api/v1/tasks/3565
-Authorization: Bearer {{auth_token}}
-Content-Type: application/json
-
-{
-  "priority": 0
-}
-
-###
-
-# Bulk update multiple tasks at once
-POST http://localhost:8080/api/v1/tasks/bulk
-Authorization: Bearer {{auth_token}}
-Content-Type: application/json
-
-{
-  "task_ids": [3518,3519,3521],
-  "text":"bulkupdated"
-}
-
-###
-# Get all assignees
-GET http://localhost:8080/api/v1/tasks/3565/assignees
-Authorization: Bearer {{auth_token}}
-
-###
-
-# Add a bunch of assignees
-PUT http://localhost:8080/api/v1/tasks/3565/assignees/bulk
-Authorization: Bearer {{auth_token}}
-Content-Type: application/json
-
-{
-  "assignees": [
-    {"id": 17}
-  ]
-}
-
-###
-
-# Get all users who have access to a list
-GET http://localhost:8080/api/v1/lists/3/users
-Authorization: Bearer {{auth_token}}
-
-###

REST-Tests/namespaces.http

@@ -1,71 +0,0 @@
-# Get all namespaces
-GET http://localhost:8080/api/v1/namespaces
-Authorization: Bearer {{auth_token}}
-
-###
-
-# Get one namespaces
-GET http://localhost:8080/api/v1/namespaces/-1
-Authorization: Bearer {{auth_token}}
-
-###
-
-# Get all users who have access to that namespace
-GET http://localhost:8080/api/v1/namespaces/12/users
-Authorization: Bearer {{auth_token}}
-
-###
-
-# Give a user access to that namespace
-PUT http://localhost:8080/api/v1/namespaces/1/users
-Authorization: Bearer {{auth_token}}
-Content-Type: application/json
-
-{"user_id":3, "right": 0}
-
-###
-
-# Update a users access to that namespace
-POST http://localhost:8080/api/v1/namespaces/1/users/3
-Authorization: Bearer {{auth_token}}
-Content-Type: application/json
-
-{"right": 2}
-
-###
-
-# Delete a user from a namespace
-DELETE http://localhost:8080/api/v1/namespaces/1/users/2
-Authorization: Bearer {{auth_token}}
-
-###
-
-# Get all teams who have access to that namespace
-GET http://localhost:8080/api/v1/namespaces/1/teams
-Authorization: Bearer {{auth_token}}
-
-###
-
-# Give a team access to that namespace
-PUT http://localhost:8080/api/v1/namespaces/1/teams
-Authorization: Bearer {{auth_token}}
-Content-Type: application/json
-
-{"team_id":3, "right": 0}
-
-###
-
-# Update a teams access to that namespace
-POST http://localhost:8080/api/v1/namespaces/1/teams/1
-Authorization: Bearer {{auth_token}}
-Content-Type: application/json
-
-{"right": 0}
-
-###
-
-# Delete a team from a namespace
-DELETE http://localhost:8080/api/v1/namespaces/1/teams/2
-Authorization: Bearer {{auth_token}}
-
-###

REST-Tests/teams.http

@@ -1,29 +0,0 @@
-# Get all teams
-GET http://localhost:8080/api/v1/teams
-Authorization: Bearer {{auth_token}}
-
-###
-
-# Get one team
-GET http://localhost:8080/api/v1/teams/28
-Authorization: Bearer {{auth_token}}
-
-###
-
-# Add a new member to that team
-PUT http://localhost:8080/api/v1/teams/28/members
-Authorization: Bearer {{auth_token}}
-Content-Type: application/json
-
-{
-  "user_id": 2
-}
-
-###
-
-# Delete a member from a team
-DELETE http://localhost:8080/api/v1/teams/28/members/2
-Authorization: Bearer {{auth_token}}
-
-###
-

REST-Tests/users.http

@@ -1,53 +0,0 @@
-
-# Get all users
-GET http://localhost:8080/api/v1/user
-Authorization: Bearer {{auth_token}}
-
-######
-# Search for a user
-GET http://localhost:8080/api/v1/users?s=3
-Authorization: Bearer {{auth_token}}
-
-###
-
-## Update password
-
-POST http://localhost:8080/api/v1/user/password
-Authorization: Bearer {{auth_token}}
-Content-Type: application/json
-
-{
-  "old_password": "1234",
-  "new_password": "1234"
-}
-
-### Request a password to reset a password
-POST http://localhost:8080/api/v1/user/password/token
-Content-Type: application/json
-Accept: application/json
-
-{
-  "email": "k@knt.li"
-}
-
-### Request a token to reset a password
-POST http://localhost:8080/api/v1/user/password/reset
-Content-Type: application/json
-Accept: application/json
-
-{
-  "token": "eAsZzakgqARnjzXHqsHqZtSUKuiOhoJjHANhgTxUIDBSalhbtdpAdLeywGXzVDBuRQGNpHdMxoHXhLVSlzpJsFvuoJgMdkhRhkNhaQXfufuZCdtUlerZHSJQLgYMUryHIxIREcmZLtWoZVrYyARkCvkyFhcGtoCwQOEjAOEZMQQuxTVoGYfAqcfNggQnerUcXCiRIgRtkusXSnltomhaeyRwAbrckXFeXxUjslgplSGqSTOqJTYuhrSzAVTwNvuYyvuXLaZoNnJEyeVDWlRydnxfgUQjQZOKwCBRWVQPKpZhlslLUyUAMsRQkHITkruQCjDnOGCCRsSNplbNCEuDmMfpWYHSQAcQIDZtbQWkxzpfmHDMQvvKPPrxEnrTErlvTfKDKICFYPQxXNpNE",
-  "new_password": "1234"
-}
-
-### Confirm a users email address
-
-POST http://localhost:8080/api/v1/user/confirm
-Content-Type: application/json
-Accept: application/json
-
-{
-  "token": ""
-}
-
-###

cliff.toml

@@ -0,0 +1,59 @@
+[changelog]
+body = """
+{% if version %}\
+    ## [{{ version | trim_start_matches(pat="v") }}] - {{ timestamp | date(format="%Y-%m-%d") }}
+{% else %}\
+    ## [unreleased]
+{% endif %}\
+
+
+{% for group, commits in commits | group_by(attribute="group") %}
+    ### {{ group | upper_first }}
+    {% for commit in commits
+    | filter(attribute="scope")
+    | sort(attribute="scope") %}
+        * *({{commit.scope}})* {{ commit.message | upper_first }}
+        {%- if commit.breaking %}
+        {% raw %}  {% endraw %}- **BREAKING**: {{commit.breaking_description}}
+        {%- endif -%}
+    {%- endfor -%}
+    {%- for commit in commits %}
+        {%- if commit.scope -%}
+        {% else -%}
+            * {{ commit.message | upper_first }} ([{{ commit.id | truncate(length=7, end="") }}]({{ commit.id }}))
+            {% if commit.breaking -%}
+            {% raw %}  {% endraw %}- **BREAKING**: {{commit.breaking_description}}
+            {% endif -%}
+        {% endif -%}
+    {% endfor -%}
+    {% raw %}\n{% endraw %}\
+{% endfor %}\n
+
+"""
+#{% for group, commits in commits | group_by(attribute="group") %}
+#    ### {{ group | upper_first }}
+#    {% for commit in commits %}\
+#        - {% if commit.breaking %}[**breaking**] {% endif %}{{ commit.message | upper_first }} ([{{ commit.id | truncate(length=7, end="") }}]({{ commit.id }}))
+#    {% endfor %}\
+#{% endfor %}\n
+# remove the leading and trailing whitespace from the template
+trim = true
+
+[git]
+conventional_commits = true
+filter_unconventional = false
+commit_parsers = [
+    { message = ".*(deps).*", group = "Dependencies"},
+    { message = "^feat", group = "Features"},
+    { message = "^fix", group = "Bug Fixes"},
+    { message = "^doc", group = "Documentation"},
+    { message = "^perf", group = "Performance"},
+    { message = "^refactor", group = "Refactor"},
+    { message = "^style", group = "Styling"},
+    { message = "^test", group = "Testing"},
+    { message = "^chore\\(release\\): prepare for", skip = true},
+    { message = "^chore", group = "Miscellaneous Tasks"},
+    { body = ".*security", group = "Security"},
+    { message = ".*", group = "Other", default_scope = "other"}, # Everything that's not a conventional commit goes into the "Other" category
+]
+

code-header-template.txt

@@ -1,5 +1,5 @@
 Vikunja is a to-do list application to facilitate your life.
-Copyright 2018-2021 Vikunja and contributors. All rights reserved.
+Copyright 2018-present Vikunja and contributors. All rights reserved.
 
 This program is free software: you can redistribute it and/or modify
 it under the terms of the GNU Affero General Public Licensee as published by

config.yml.sample

@@ -3,6 +3,13 @@ service:
   # Default is a random token which will be generated at each startup of vikunja.
   # (This means all already issued tokens will be invalid once you restart vikunja)
   JWTSecret: "<jwt-secret>"
+  # The duration of the issued JWT tokens in seconds.
+  # The default is 259200 seconds (3 Days).
+  jwtttl: 259200
+  # The duration of the "remember me" time in seconds. When the login request is made with 
+  # the long param set, the token returned will be valid for this period.
+  # The default is 2592000 seconds (30 Days).
+  jwtttllong: 2592000
   # The interface on which to run the webserver
   interface: ":3456"
   # Path to Unix socket. If set, it will be created and used instead of tcp
@@ -15,13 +22,15 @@ service:
   # Vikunja will also look in this path for a config file, so you could provide only this variable to point to a folder
   # with a config file which will then be used.
   rootpath: <rootpath>
+  # Path on the file system to serve static files from. Set to the path of the frontend files to host frontend alongside the api.
+  staticpath: ""
   # The max number of items which can be returned per page
   maxitemsperpage: 50
   # Enable the caldav endpoint, see the docs for more details
   enablecaldav: true
   # Set the motd message, available from the /info endpoint
   motd: ""
-  # Enable sharing of lists via a link
+  # Enable sharing of project via a link
   enablelinksharing: true
   # Whether to let new users registering themselves or not
   enableregistration: true
@@ -37,7 +46,7 @@ service:
   sentrydsn: ''
   # If not empty, this will enable `/test/{table}` endpoints which allow to put any content in the database.
   # Used to reset the db before frontend tests. Because this is quite a dangerous feature allowing for lots of harm,
-  # each request made to this endpoint neefs to provide an `Authorization: <token>` header with the token from below. <br/>
+  # each request made to this endpoint needs to provide an `Authorization: <token>` header with the token from below. <br/>
   # **You should never use this unless you know exactly what you're doing**
   testingtoken: ''
   # If enabled, vikunja will send an email to everyone who is either assigned to a task or created it when a task reminder
@@ -47,17 +56,23 @@ service:
   # it may be required to coordinate with them in order to delete the account. This setting will not affect the cli commands
   # for user deletion.
   enableuserdeletion: true
+  # The maximum size clients will be able to request for user avatars.
+  # If clients request a size bigger than this, it will be changed on the fly.
+  maxavatarsize: 1024
+  # If set to true, the frontend will show a big red warning not to use this instance for real data as it will be cleared out.
+  # You probably don't need to set this value, it was created specifically for usage on [try](https://try.vikunja.io).
+  demomode: false
 
 database:
   # Database type to use. Supported types are mysql, postgres and sqlite.
   type: "sqlite"
   # Database user which is used to connect to the database.
   user: "vikunja"
-  # Databse password
+  # Database password
   password: ""
-  # Databse host
+  # Database host
   host: "localhost"
-  # Databse to use
+  # Database to use
   database: "vikunja"
   # When using sqlite, this is the path where to store the data
   path: "./vikunja.db"
@@ -65,37 +80,45 @@ database:
   maxopenconnections: 100
   # Sets the maximum number of idle connections to the db.
   maxidleconnections: 50
-  # The maximum lifetime of a single db connection in miliseconds.
+  # The maximum lifetime of a single db connection in milliseconds.
   maxconnectionlifetime: 10000
   # Secure connection mode. Only used with postgres.
   # (see https://pkg.go.dev/github.com/lib/pq?tab=doc#hdr-Connection_String_Parameters)
   sslmode: disable
+  # The path to the client cert. Only used with postgres.
+  sslcert: ""
+  # The path to the client key. Only used with postgres.
+  sslkey: ""
+  # The path to the ca cert. Only used with postgres.
+  sslrootcert: ""
   # Enable SSL/TLS for mysql connections. Options: false, true, skip-verify, preferred
   tls: false
 
-cache:
-  # If cache is enabled or not
+typesense:
+  # Whether to enable the Typesense integration. If true, all tasks will be synced to the configured Typesense
+  # instance and all search and filtering will run through Typesense instead of only through the database.
+  # Typesense allows fast fulltext search including fuzzy matching support. It may return different results than 
+  # what you'd get with a database-only search.
   enabled: false
-  # Cache type. Possible values are "keyvalue", "memory" or "redis".
-  # When choosing "keyvalue" this setting follows the one configured in the "keyvalue" section.
-  # When choosing "redis" you will need to configure the redis connection seperately.
-  type: keyvalue
-  # When using memory this defines the maximum size an element can take
-  maxelementsize: 1000
+  # The url to the Typesense instance you want to use. Can be hosted locally or in Typesense Cloud as long
+  # as Vikunja is able to reach it.
+  url: ''
+  # The Typesense API key you want to use.
+  apikey: ''
 
 redis:
   # Whether to enable redis or not
   enabled: false
   # The host of the redis server including its port.
   host: 'localhost:6379'
-  # The password used to authenicate against the redis server
+  # The password used to authenticate against the redis server
   password: ''
   # 0 means default database
   db: 0
 
 cors:
   # Whether to enable or disable cors headers.
-  # Note: If you want to put the frontend and the api on seperate domains or ports, you will need to enable this.
+  # Note: If you want to put the frontend and the api on separate domains or ports, you will need to enable this.
   #       Otherwise the frontend won't be able to make requests to the api through the browser.
   enable: true
   # A list of origins which may access the api. These need to include the protocol (`http://` or `https://`) and port, if any.
@@ -109,8 +132,11 @@ mailer:
   enabled: false
   # SMTP Host
   host: ""
-  # SMTP Host port
+  # SMTP Host port.
+  # **NOTE:** If you're unable to send mail and the only error you see in the logs is an `EOF`, try setting the port to `25`.
   port: 587
+  # SMTP Auth Type. Can be either `plain`, `login` or `cram-md5`.
+  authtype: "plain"
   # SMTP username
   username: "user"
   # SMTP password
@@ -141,12 +167,16 @@ log:
   databaselevel: "WARNING"
   # Whether to log http requests or not. Possible values are stdout, stderr, file or off to disable http logging.
   http: "stdout"
-  # Echo has its own logging which usually is unnessecary, which is why it is disabled by default. Possible values are stdout, stderr, file or off to disable standard logging.
+  # Echo has its own logging which usually is unnecessary, which is why it is disabled by default. Possible values are stdout, stderr, file or off to disable standard logging.
   echo: "off"
   # Whether or not to log events. Useful for debugging. Possible values are stdout, stderr, file or off to disable events logging.
-  events: "stdout"
+  events: "off"
   # The log level for event log messages. Possible values (case-insensitive) are ERROR, INFO, DEBUG.
   eventslevel: "info"
+  # Whether or not to log mail log messages. This will not log mail contents. Possible values are stdout, stderr, file or off to disable mail-related logging.
+  mail: "off"
+  # The log level for mail log messages. Possible values (case-insensitive) are ERROR, WARNING, INFO, DEBUG.
+  maillevel: "info"
 
 ratelimit:
   # whether or not to enable the rate limit
@@ -161,6 +191,10 @@ ratelimit:
   # Possible values are "keyvalue", "memory" or "redis".
   # When choosing "keyvalue" this setting follows the one configured in the "keyvalue" section.
   store: keyvalue
+  # The number of requests a user can make from the same IP to all unauthenticated routes (login, register, 
+  # password confirmation, email verification, password reset request) per minute. This limit cannot be disabled.
+  # You should only change this if you know what you're doing.
+  noauthlimit: 10
 
 files:
   # The path where files are stored
@@ -170,21 +204,6 @@ files:
   maxsize: 20MB
 
 migration:
-  # These are the settings for the wunderlist migrator
-  wunderlist:
-    # Wheter to enable the wunderlist migrator or not
-    enable: false
-    # The client id, required for making requests to the wunderlist api
-    # You need to register your vikunja instance at https://developer.wunderlist.com/apps/new to get this
-    clientid:
-    # The client secret, also required for making requests to the wunderlist api
-    clientsecret:
-    # The url where clients are redirected after they authorized Vikunja to access their wunderlist stuff.
-    # This needs to match the url you entered when registering your Vikunja instance at wunderlist.
-    # This is usually the frontend url where the frontend then makes a request to /migration/wunderlist/migrate
-    # with the code obtained from the wunderlist api.
-    # Note that the vikunja frontend expects this to be /migrate/wunderlist
-    redirecturl:
   todoist:
     # Wheter to enable the todoist migrator or not
     enable: false
@@ -200,7 +219,7 @@ migration:
     # Note that the vikunja frontend expects this to be /migrate/todoist
     redirecturl: <frontend url>/migrate/todoist
   trello:
-    # Wheter to enable the trello migrator or not
+    # Whether to enable the trello migrator or not
     enable: false
     # The client id, required for making requests to the trello api
     # You need to register your vikunja instance at https://trello.com/app-key (log in before you visit that link) to get this
@@ -216,7 +235,7 @@ migration:
     enable: false
     # The client id, required for making requests to the microsoft graph api
     # See https://docs.microsoft.com/en-us/azure/active-directory/develop/quickstart-register-app#register-an-application
-    # for information about how to register your vikuinja instance.
+    # for information about how to register your Vikunja instance.
     clientid:
     # The client secret, also required for making requests to the microsoft graph api
     clientsecret:
@@ -232,14 +251,14 @@ avatar:
   gravatarexpiration: 3600
 
 backgrounds:
-  # Whether to enable backgrounds for lists at all.
+  # Whether to enable backgrounds for projects at all.
   enabled: true
   providers:
     upload:
-      # Whethere to enable uploaded list backgrounds
+      # Whether to enable uploaded project backgrounds
       enabled: true
     unsplash:
-      # Whether to enable setting backgrounds from unsplash as list backgrounds
+      # Whether to enable setting backgrounds from unsplash as project backgrounds
       enabled: false
       # You need to create an application for your installation at https://unsplash.com/oauth/applications/new
       # and set the access token below.
@@ -259,7 +278,7 @@ legal:
 # Key Value Storage settings
 # The Key Value Storage is used for different kinds of things like metrics and a few cache systems.
 keyvalue:
-  # The type of the storage backend. Can be either "memory" or "redis". If "redis" is chosen it needs to be configured seperately.
+  # The type of the storage backend. Can be either "memory" or "redis". If "redis" is chosen it needs to be configured separately.
   type: "memory"
 
 auth:
@@ -273,21 +292,23 @@ auth:
   # **Note:** Some openid providers (like gitlab) only make the email of the user available through openid claims if they have set it to be publicly visible.
   # If the email is not public in those cases, authenticating will fail.
   # **Note 2:** The frontend expects to be redirected after authentication by the third party
-  # to <frontend-url>/auth/openid/<auth key>. Please make sure to configure the redirect url with your third party
-  # auth service accordingy if you're using the default vikunja frontend.
+  # to <frontend-url>/auth/openid/<auth key>. Please make sure to configure the redirect url in your third party
+  # auth service accordingly if you're using the default vikunja frontend.
+  # The frontend will automatically provide the api with the redirect url, composed from the current url where it's hosted.
+  # If you want to use the desktop client with openid, make sure to allow redirects to `127.0.0.1`.
   # Take a look at the [default config file](https://kolaente.dev/vikunja/api/src/branch/main/config.yml.sample) for more information about how to configure openid authentication.
   openid:
     # Enable or disable OpenID Connect authentication
     enabled: false
-    # The url to redirect clients to. Defaults to the configured frontend url. If you're using Vikunja with the official
-    # frontend, you don't need to change this value.
-    redirecturl: <frontend url>
     # A list of enabled providers
     providers:
       # The name of the provider as it will appear in the frontend.
       - name:
         # The auth url to send users to if they want to authenticate using OpenID Connect.
         authurl:
+        # The oidc logouturl that users will be redirected to on logout.
+        # Leave empty or delete key, if you do not want to be redirected.
+        logouturl:
         # The client ID used to authenticate Vikunja at the OpenID Connect provider.
         clientid:
         # The client secret used to authenticate Vikunja at the OpenID Connect provider.
@@ -295,9 +316,44 @@ auth:
 
 # Prometheus metrics endpoint
 metrics:
-  # If set to true, enables a /metrics endpoint for prometheus to collect metrics about Vikunja.
+  # If set to true, enables a /metrics endpoint for prometheus to collect metrics about Vikunja. You can query it from `/api/v1/metrics`.
   enabled: false
   # If set to a non-empty value the /metrics endpoint will require this as a username via basic auth in combination with the password below.
   username:
   # If set to a non-empty value the /metrics endpoint will require this as a password via basic auth in combination with the username below.
   password:
+
+# Provide default settings for new users. When a new user is created, these settings will automatically be set for the user. If you change them in the config file afterwards they will not be changed back for existing users.
+defaultsettings:
+  # The avatar source for the user. Can be `gravatar`, `initials`, `upload` or `marble`. If you set this to `upload` you'll also need to specify `defaultsettings.avatar_file_id`.
+  avatar_provider: initials
+  # The id of the file used as avatar.
+  avatar_file_id: 0
+  # If set to true users will get task reminders via email.
+  email_reminders_enabled: false
+  # If set to true will allow other users to find this user when searching for parts of their name.
+  discoverable_by_name: false
+  # If set to true will allow other users to find this user when searching for their exact email.
+  discoverable_by_email: false
+  # If set to true will send an email every day with all overdue tasks at a configured time.
+  overdue_tasks_reminders_enabled: true
+  # When to send the overdue task reminder email.
+  overdue_tasks_reminders_time: 9:00
+  # The id of the default project. Make sure users actually have access to this project when setting this value.
+  default_project_id: 0
+  # Start of the week for the user. `0` is sunday, `1` is monday and so on.
+  week_start: 0
+  # The language of the user interface. Must be an ISO 639-1 language code followed by an ISO 3166-1 alpha-2 country code. Check https://kolaente.dev/vikunja/frontend/src/branch/main/src/i18n/lang for a list of possible languages. Will default to the browser language the user uses when signing up.
+  language: <unset>
+  # The time zone of each individual user. This will affect when users get reminders and overdue task emails.
+  timezone: <time zone set at service.timezone>
+
+webhooks:
+  # Whether to enable support for webhooks
+  enabled: true
+  # The timout in seconds until a webhook request fails when no response has been received.
+  timoutseconds: 30
+  # The URL of [a mole instance](https://github.com/frain-dev/mole) to use to proxy outgoing webhook requests. You should use this and configure appropriately if you're not the only one using your Vikunja instance. More info about why: https://webhooks.fyi/best-practices/webhook-providers#implement-security-on-egress-communication. Must be used in combination with `webhooks.password` (see below).
+  proxyurl:
+  # The proxy password to use when authenticating against the proxy.
+  proxypassword:

docker-manifest-unstable.tmpl

@@ -1,17 +0,0 @@
-image: vikunja/api:unstable
-manifests:
-  -
-    image: vikunja/api:unstable-linux-amd64
-    platform:
-      architecture: amd64
-      os: linux
-  -
-    image: vikunja/api:unstable-linux-arm64
-    platform:
-      architecture: arm64
-      os: linux
-  -
-    image: vikunja/api:unstable-linux-arm
-    platform:
-      architecture: arm
-      os: linux

docker-manifest.tmpl

@@ -1,23 +0,0 @@
-image: vikunja/api:{{#if build.tag}}{{trimPrefix "v" build.tag}}{{else}}latest{{/if}}
-{{#if build.tags}}
-tags:
-{{#each build.tags}}
-  - {{this}}
-{{/each}}
-{{/if}}
-manifests:
-  -
-    image: vikunja/api:{{#if build.tag}}{{trimPrefix "v" build.tag}}-{{/if}}linux-amd64
-    platform:
-      architecture: amd64
-      os: linux
-  -
-    image: vikunja/api:{{#if build.tag}}{{trimPrefix "v" build.tag}}-{{/if}}linux-arm64
-    platform:
-      architecture: arm64
-      os: linux
-  -
-    image: vikunja/api:{{#if build.tag}}{{trimPrefix "v" build.tag}}-{{/if}}linux-arm
-    platform:
-      architecture: arm
-      os: linux

docker/entrypoint.sh

@@ -0,0 +1,15 @@
+#!/usr/bin/env sh
+set -e
+
+if [ -n "$PUID" ] && [ "$PUID" -ne 0 ] && \
+   [ -n "$PGID" ] && [ "$PGID" -ne 0 ] ; then
+  echo "info: creating the new user vikunja with $PUID:$PGID"
+  groupmod -g "$PGID" -o vikunja
+  usermod -u "$PUID" -o vikunja
+  chown -R vikunja:vikunja ./files/
+  chown vikunja:vikunja .
+  exec su vikunja -c /app/vikunja/vikunja "$@"
+else
+  echo "info: creation of non-root user is skipped"
+  exec /app/vikunja/vikunja "$@"
+fi

docs/config.yml

@@ -2,7 +2,7 @@ baseurl: https://vikunja.io/docs/
 title: Vikunja
 theme: vikunja
 enableRobotsTXT: true
-canonifyURLs: true
+canonifyURLs: false
 
 pygmentsUseClasses: true
 
@@ -28,7 +28,7 @@ markup:
 menu:
   page:
     - name: Home
-      url: https://vikunja.io/en/
+      url: https://vikunja.io/
       weight: 10
     - name: Features
       url: https://vikunja.io/features
@@ -36,6 +36,9 @@ menu:
     - name: Download
       url: https://vikunja.io/download
       weight: 30
+    - name: Blog
+      url: https://vikunja.io/blog/
+      weight: 35
     - name: Docs
       url: https://vikunja.io/docs
       weight: 40
@@ -45,6 +48,16 @@ menu:
     - name: Community
       url: https://community.vikunja.io/
       weight: 60
+    - name: Stickers
+      url: https://vikunja.cloud/stickers?utm_source=io&utm_medium=io&utm_campaign=menu
+      weight: 65
     - name: Get it Hosted
       url: https://vikunja.cloud/?utm_source=io&utm_medium=io&utm_campaign=menu
       weight: 70
+  sidebar:
+    - name: setup
+      weight: 10
+    - name: usage
+      weight: 20
+    - name: development
+      weight: 30

docs/content/doc/_index.md

@@ -22,4 +22,4 @@ and [available configuration options]({{< ref "./setup/config.md">}}).
 
 ## Developing
 
-If you want to start contributing to Vikunja, take a look at [the development docs]({{< ref "./development/development.md">}}).
+If you want to start contributing to Vikunja, take a look at [the development docs]({{< ref "./development/development.md">}}).

docs/content/doc/development/cli.md

@@ -12,10 +12,10 @@ menu:
 
 All cli-related functions are located in `pkg/cmd`.
 Each cli command usually calls a function in another package.
-For example, the `vikunja migrate` command calls `migration.Migrate()`. 
+For example, the `vikunja migrate` command calls `migration.Migrate()`.
 
 Vikunja uses the amazing [cobra](https://github.com/spf13/cobra) library for its cli.
-Please refer to its documentation for informations about how to use flags etc.
+Please refer to its documentation for information about how to use flags etc.
 
 To add a new cli command, add something like the following:
 

docs/content/doc/development/config.md

@@ -29,7 +29,7 @@ Then run `mage generate-docs` to generate the configuration docs from the sample
 
 ## Getting Configuration Values
 
-To retreive a configured value call the key with a getter for the type you need.
+To retrieve a configured value call the key with a getter for the type you need.
 For example:
 
 {{< highlight golang >}}

docs/content/doc/development/cron.md

@@ -12,9 +12,7 @@ menu:
 Cron jobs are tasks which run on a predefined schedule.
 Vikunja uses these through a light wrapper package around the excellent [github.com/robfig/cron](https://github.com/robfig/cron) package.
 
-The package exposes a `cron.Schedule` method with two arguments: The first one to define the schedule when the cron task 
-should run, and the second one with the actual function to run at the schedule.
-You would then create a new function to register your the actual cron task in your package.
+The package exposes a `cron.Schedule` method with two arguments: The first one to define the schedule when the cron task should run, and the second one with the actual function to run at the schedule. You would then create a new function to register your the actual cron task in your package.
 
 A basic function to register a cron task looks like this:
 

docs/content/doc/development/database.md

@@ -10,8 +10,8 @@ menu:
 
 # Database
 
-Vikunja uses [xorm](http://xorm.io/) as an abstraction layer to handle the database connection.
-Please refer to [their](http://xorm.io/docs/) documentation on how to exactly use it.
+Vikunja uses [xorm](https://xorm.io/) as an abstraction layer to handle the database connection.
+Please refer to [their](https://xorm.io/docs/) documentation on how to exactly use it.
 
 {{< table_of_contents >}}
 
@@ -24,10 +24,9 @@ In other packages, use the `db.NewSession()` method to get a new database sessio
 
 To add a new table to the database, create the struct and [add a migration for it]({{< ref "db-migrations.md" >}}).
 
-To learn more about how to configure your struct to create "good" tables, refer to [the xorm documentaion](http://xorm.io/docs/).
+To learn more about how to configure your struct to create "good" tables, refer to [the xorm documentaion](https://xorm.io/docs/).
 
-In most cases you will also need to implement the `TableName() string` method on the new struct to make sure the table 
-name matches the rest of the tables - plural.
+In most cases you will also need to implement the `TableName() string` method on the new struct to make sure the table name matches the rest of the tables - plural.
 
 ## Adding data to test fixtures
 
@@ -36,5 +35,4 @@ Adding data for test fixtures can be done via `yaml` files in `pkg/models/fixtur
 The name of the yaml file should match the table name in the database.
 Adding values to it is done via array definition inside it.
 
-**Note**: Table and column names need to be in snake_case as that's what is used internally in the database 
-and for mapping values from the database to xorm so your structs can use it.
+**Note**: Table and column names need to be in snake_case as that's what is used internally in the database and for mapping values from the database to xorm so your structs can use it.

docs/content/doc/development/db-migrations.md

@@ -25,7 +25,7 @@ All migrations are stored in `pkg/migrations` and files should have the same nam
 Each migration should have a function to apply and roll it back, as well as a numeric id (the datetime)
 and a more in-depth description of what the migration actually does.
 
-To easily get a new id, run the following on any unix system: 
+To easily get a new id, run the following on any unix system:
 
 {{< highlight bash >}}
 date +%Y%m%d%H%M%S
@@ -75,4 +75,4 @@ func init() {
 }
 {{< /highlight >}}
 
-You should always copy the changed parts of the struct you're changing when adding migraitons.
+You should always copy the changed parts of the struct you're changing when adding migrations.

docs/content/doc/development/development.md

@@ -1,5 +1,5 @@
 ---
-date: "2019-02-12:00:00+02:00"
+date: "2022-09-21:00:00+02:00"
 title: "Development"
 toc: true
 draft: false
@@ -12,11 +12,86 @@ menu:
 
 # Development
 
-We use go modules to manage third-party libraries for Vikunja, so you'll need at least go `1.11` to use these.
+{{< table_of_contents >}}
+
+## General
 
 To contribute to Vikunja, fork the project and work on the main branch.
+Once you feel like your changes are ready, open a PR in the respective repo [on our Gitea instance](https://kolaente.dev/vikunja).
+We cannot accept PRs on mirror sites.
+
+A maintainer will take a look and give you feedback. Once everyone is happy, the PR gets merged and released.
+
+If you plan to do a bigger change, it is better to open an issue for discussion first.
+
+## API
+
+The code for the api is located at [code.vikunja.io/api](https://code.vikunja.io/api).
+
+You'll need at least Go 1.21 to build Vikunja's api.
 
 A lot of developing tasks are automated using a Magefile, so make sure to [take a look at it]({{< ref "mage.md">}}).
 
-Make sure to check the other doc articles for specific development tasks like [testing]({{< ref "test.md">}}), 
+Make sure to check the other doc articles for specific development tasks like [testing]({{< ref "test.md">}}),
 [database migrations]({{< ref "db-migrations.md" >}}) and the [project structure]({{< ref "structure.md" >}}).
+
+## Frontend requirements
+
+The code for the frontend is located at [code.vikunja.io/frontend](https://code.vikunja.io/frontend).
+More instructions can be found in the repo's README.
+
+You need to have [pnpm](https://pnpm.io/) and Node.JS in version 18 or higher installed.
+
+## Pull Requests
+
+All Pull Requests must be made [on our Gitea instance](https://kolaente.dev/vikunja).
+We cannot accept PRs on mirror sites.
+
+Please try to make your pull request easy to review.
+For that, please read the [*Best Practices for Faster Reviews*](https://github.com/kubernetes/community/blob/261cb0fd089b64002c91e8eddceebf032462ccd6/contributors/guide/pull-requests.md#best-practices-for-faster-reviews) guide.
+It has lots of useful tips for any project you may want to contribute to.
+Some of the key points:
+
+- Make small pull requests.
+  The smaller, the faster to review and the more likely it will be merged soon.
+- Don't make changes unrelated to your PR.
+  Maybe there are typos on some comments, maybe refactoring would be welcome on a function…
+  but if that is not related to your PR, please make *another* PR for that.
+- Split big pull requests into multiple small ones.
+  An incremental change will be faster to review than a huge PR.
+- Allow edits by maintainers. This way, the maintainers will take care of merging the PR later on instead of you.
+
+### PR title and summary
+
+In the PR title, describe the problem you are fixing, not how you are fixing it.
+Use the first comment as a summary of your PR.
+In the PR summary, you can describe exactly how you are fixing this problem.
+Keep this summary up-to-date as the PR evolves.
+
+If your PR changes the UI, you must add **after** screenshots in the PR summary.
+If your PR closes an issue, you must note that in a way that both GitHub and Gitea understand, i.e. by appending a paragraph like
+
+```text
+Fixes/Closes/Resolves #<ISSUE_NR_X>.
+Fixes/Closes/Resolves #<ISSUE_NR_Y>.
+```
+
+to your summary.
+Each issue that will be closed must stand on a separate line.
+
+If your PR is related to a discussion in the forum, you must add a link to the forum discussion.
+
+### Git flow
+
+The `main` branch is the latest and bleeding edge branch with all changes. Unstable releases are automatically created from this branch.
+New Pull-Requests should be made against the `main` branch.
+
+A release gets tagged from the main branch with the version name as tag name.
+
+Backports and point-releases should go to a `release/version` branch, based on the tag they are building on top of.
+
+## Conventional Commits
+
+We're using [Conventional Commits](https://www.conventionalcommits.org/en/v1.0.0/) because they greatly simplify generating release notes.
+
+It is not required to use them when creating a PR, but appreciated.

docs/content/doc/development/errors.md

@@ -13,14 +13,14 @@ menu:
 All custom errors are defined in `pkg/models/errors.go`.
 You should add new ones in this file.
 
-Custom errors usually have fields for the http return code, a [vikunja-specific error code]({{< ref "../usage/errors.md">}}) 
+Custom errors usually have fields for the http return code, a [Vikunja-specific error code]({{< ref "../usage/errors.md">}}) 
 and a human-readable error message about what went wrong.
 
 An error consists of multiple functions and definitions:
 
 {{< highlight golang >}}
 // This struct holds any information about this specific error.
-// In this case, it contains the user ID of a nonexistand user.
+// In this case, it contains the user ID of a nonexistent user.
 // This type should always be a struct, even if it has no values in it.
 
 // ErrUserDoesNotExist represents a "UserDoesNotExist" kind of error.
@@ -44,21 +44,21 @@ func (err ErrUserDoesNotExist) Error() string {
 	return fmt.Sprintf("User does not exist [user id: %d]", err.UserID)
 }
 
-// This const holds the vikunja error code used to be able to identify this error without having to 
+// This const holds the Vikunja error code used to be able to identify this error without having to 
 // rely on an error string.
 // This needs to be unique, so you should check whether the error code exists or not.
 // The general convention for error codes is as follows:
 // * Every "group" errors lives in a thousend something. For example all user issues are 1000-something, all 
-//   list errors are 3000-something and so on.
+//   project errors are 3000-something and so on.
 // * New error codes should be the current max error code + 1. Don't take free numbers to prevent old errors
-//   which are depricated and removed from being "new ones". For example, if there are error codes 1001, 1002, 1004,
+//   which are deprecated and removed from being "new ones". For example, if there are error codes 1001, 1002, 1004,
 //   a new error should be 1005 and not 1003.
 
 // ErrCodeUserDoesNotExist holds the unique world-error code of this error
 const ErrCodeUserDoesNotExist = 1005
 
 // This is the implementation which returns an http error which is then passed to the client.
-// Here you define the http status code with which one the error will be returned, the vikunja error code and 
+// Here you define the http status code with which one the error will be returned, the Vikunja error code and 
 // a human-readable error message.
 
 // HTTPError holds the http error description

docs/content/doc/development/events-and-listeners.md

@@ -42,7 +42,7 @@ You then get the event with all its data back in the listener, see below.
 #### Naming Convention
 
 Event names should roughly have the entity they're dealing with on the left and the action on the right of the name, separated by `.`.
-There's no limit to how "deep" or specifig an event name can be.
+There's no limit to how "deep" or specific an event name can be.
 
 The name should have the most general concept it's describing at the left, getting more specific on the right of it.
 
@@ -104,7 +104,7 @@ func createTask(s *xorm.Session, t *Task, a web.Auth, updateAssignees bool) (err
 }
 {{< /highlight >}}
 
-As you can see, the curent task and doer are injected into it.
+As you can see, the current task and doer are injected into it.
 
 ### Special Events
 
@@ -133,7 +133,7 @@ type Listener interface {
 The `Handle` method is executed when the event this listener listens on is dispatched. 
 * As the single parameter, it gets the payload of the event, which is the event struct when it was dispatched decoded as json object and passed as a slice of bytes.
 To use it you'll need to unmarshal it. Unfortunately there's no way to pass an already populated event object to the function because we would not know what type it has when parsing it.
-* If the handler returns an error, the listener is retried 5 times, with an exponentional back-off period in between retries.
+* If the handler returns an error, the listener is retried 5 times, with an exponential back-off period in between retries.
 If it still fails after the fifth retry, the event is nack'd and it's up to the event dispatcher to resend it.
 You can learn more about this mechanism in the [watermill documentation](https://watermill.io/docs/middlewares/#retry).
 
@@ -148,7 +148,7 @@ The easiest way to create a new listener for an event is with mage:
 mage dev:make-listener <listener-name> <event-name> <package>
 ```
 
-This will create a new listener type in the `pkg/<package>/listners.go` file and implement the `Handle` and `Name` methods.
+This will create a new listener type in the `pkg/<package>/listeners.go` file and implement the `Handle` and `Name` methods.
 It will also pre-generate some boilerplate code to unmarshal the event from the payload.
 
 Furthermore, it will register the listener for its event in the `RegisterListeners()` method of the same file.
@@ -157,7 +157,7 @@ This function is called at startup and has to contain all events you want to lis
 ### Listening for Events
 
 To listen for an event, you need to register the listener for the event it should be called for.
-This usually happens in the `RegisterListeners()` method in `pkg/<package>/listners.go` which is called at start up.
+This usually happens in the `RegisterListeners()` method in `pkg/<package>/listeners.go` which is called at start up.
 
 The listener will never be executed if it hasn't been registered.
 
@@ -179,7 +179,7 @@ func (s *IncreaseTaskCounter) Name() string {
     return "task.counter.increase"
 }
 
-// Hanlde is executed when the event IncreaseTaskCounter listens on is fired
+// Handle is executed when the event IncreaseTaskCounter listens on is fired
 func (s *IncreaseTaskCounter) Handle(payload message.Payload) (err error) {
     return keyvalue.IncrBy(metrics.TaskCountKey, 1)
 }

docs/content/doc/development/feature.md

@@ -26,8 +26,8 @@ It returns the `limit` (max-length) and `offset` parameters needed for SQL-Queri
 You can feed this function directly into xorm's `Limit`-Function like so:
 
 {{< highlight golang >}}
-lists := []List{}
-err := x.Limit(getLimitFromPageIndex(pageIndex, itemsPerPage)).Find(&lists)
+projects := []*Project{}
+err := x.Limit(getLimitFromPageIndex(pageIndex, itemsPerPage)).Find(&projects)
 {{< /highlight >}}
 
 // TODO: Add a full example from start to finish, like a tutorial on how to create a new endpoint?

docs/content/doc/development/mage.md

@@ -11,9 +11,9 @@ menu:
 # Mage
 
 Vikunja uses [Mage](https://magefile.org/) to script common development tasks and even releasing.
-Mage is a pure go solution which allows for greater flexibility and things like better paralelization.
+Mage is a pure go solution which allows for greater flexibility and things like better parallelization.
 
-This document explains what taks are available and what they do.
+This document explains what tasks are available and what they do.
 
 {{< table_of_contents >}}
 
@@ -31,7 +31,7 @@ go install github.com/magefile/mage
 There are multiple categories of subcommands in the magefile:
 
 * `build`: Contains commands to build a single binary
-* `check`: Contains commands to statically check the source code 
+* `check`: Contains commands to statically check the source code
 * `release`: Contains commands to release Vikunja with everything that's required
 * `test`: Contains commands to run all kinds of tests
 * `dev`: Contains commands to run development tasks
@@ -114,7 +114,7 @@ binary to be able to use it.
 * `mage release:check` creates sha256 checksums for each binary which will be included in the zip file
 * `mage release:os-package` bundles a binary with the `sha256` checksum file, a sample `config.yml` and a copy of the license in a folder for each architecture
 * `mage release:compress` compresses all build binaries with `upx` to save space
-* `mage release:zip` paclages a zip file for the files created by `release:os-package`
+* `mage release:zip` packages a zip file for the files created by `release:os-package`
 
 ### Build os packages
 
@@ -168,7 +168,7 @@ Runs all integration tests.
 mage dev:create-migration
 {{< /highlight >}}
 
-Creates a new migration with the current date. 
+Creates a new migration with the current date.
 Will ask for the name of the struct you want to create a migration for.
 
 See also [migration docs]({{< ref "mage.md" >}}).

docs/content/doc/development/metrics.md

@@ -34,14 +34,13 @@ promauto.NewGaugeFunc(prometheus.GaugeOpts{
 })
 {{< /highlight >}}
 
-Then you'll need to set the metrics initial value on every startup of vikunja.
+Then you'll need to set the metrics initial value on every startup of Vikunja.
 This is done in `pkg/routes/routes.go` to avoid cyclic imports.
 If metrics are enabled, it checks if a redis connection is available and then sets the initial values.
 A convenience function is available if the metric is based on a database struct.
 
 Because metrics are stored in redis, you are responsible to increase or decrease these based on criteria you define.
-To do this, use `metrics.UpdateCount(value, key)` where `value` is the amount you want to cange it (you can pass
-negative values to decrease it) and `key` it the redis key used to define the metric.
+To do this, use `metrics.UpdateCount(value, key)` where `value` is the amount you want to change it (you can pass negative values to decrease it) and `key` it the redis key used to define the metric.
 
 ## Using it
 

docs/content/doc/development/migration.md

@@ -17,12 +17,9 @@ In general, each migrator implements a migrator interface which is then called f
 The interface makes it possible to use helper methods which handle http and focus only on the implementation of the migrator itself.
 
 There are two ways of migrating data from another service:
-1. Through the auth-based flow where the user gives you access to their data at the third-party service through an 
-   oauth flow. You can then call the service's api on behalf of your user to get all the data.
-   The Todoist, Trello and Microsoft To-Do Migrators use this pattern.
-2. A file migration where the user uploads a file obtained from some third-party service. In your migrator, you need 
-   to parse the file and create the lists, tasks etc.
-   The Vikunja File Import uses this pattern.
+
+1. Through the auth-based flow where the user gives you access to their data at the third-party service through an oauth flow. You can then call the service's api on behalf of your user to get all the data. The Todoist, Trello and Microsoft To-Do Migrators use this pattern.
+2. A file migration where the user uploads a file obtained from some third-party service. In your migrator, you need to parse the file and create the projects, tasks etc. The Vikunja File Import uses this pattern.
 
 To differentiate the two, there are two different interfaces you must implement.
 
@@ -43,7 +40,7 @@ type Migrator interface {
 	// Name holds the name of the migration.
 	// This is used to show the name to users and to keep track of users who already migrated.
 	Name() string
-	// Migrate is the interface used to migrate a user's tasks from another platform to vikunja.
+	// Migrate is the interface used to migrate a user's tasks from another platform to Vikunja.
 	// The user object is the user who's tasks will be migrated.
 	Migrate(user *models.User) error
 	// AuthURL returns a url for clients to authenticate against.
@@ -61,7 +58,7 @@ type FileMigrator interface {
 	// Name holds the name of the migration.
 	// This is used to show the name to users and to keep track of users who already migrated.
 	Name() string
-	// Migrate is the interface used to migrate a user's tasks, list and other things from a file to vikunja.
+	// Migrate is the interface used to migrate a user's tasks, projects and other things from a file to Vikunja.
 	// The user object is the user who's tasks will be migrated.
 	Migrate(user *user.User, file io.ReaderAt, size int64) error
 }
@@ -102,35 +99,33 @@ You should also document the routes with [swagger annotations]({{< ref "swagger-
 
 ## Insertion helper method
 
-There is a method available in the `migration` package which takes a fully nested Vikunja structure and creates it with all relations. 
-This means you start by adding a namespace, then add lists inside of that namespace, then tasks in the lists and so on.
+There is a method available in the `migration` package which takes a fully nested Vikunja structure and creates it with all relations.
+This means you start by adding a project, then add projects inside that project, then tasks in the lists and so on.
+In general, it is reccommended to have one root project with all projects of the other service as child projects.
 
-The root structure must be present as `[]*models.NamespaceWithListsAndTasks`. It allows to represent all of Vikunja's 
-hierachie as a single data structure.
+The root structure must be present as `[]*models.ProjectWithTasksAndBuckets`. It allows to represent all of Vikunja's hierarchy as a single data structure.
 
 Then call the method like so:
 
 ```go
-fullVikunjaHierachie, err := convertWunderlistToVikunja(wContent)
+fullVikunjaHierarchy, err := convertWunderlistToVikunja(wContent)
 if err != nil {
     return
 }
 
-err = migration.InsertFromStructure(fullVikunjaHierachie, user)
+err = migration.InsertFromStructure(fullVikunjaHierarchy, user)
 ```
 
 ## Configuration
 
 If your migrator is an oauth-based one, you should add at least an option to enable or disable it.
-Chances are, you'll need some more options for things like client ID and secret 
-(if the other service uses oAuth as an authentication flow).
+Chances are, you'll need some more options for things like client ID and secret (if the other service uses oAuth as an authentication flow).
 
-The easiest way to implement an on/off switch is to check whether your migration service is enabled or not when 
-registering the routes, and then simply don't registering the routes in case it is disabled.
+The easiest way to implement an on/off switch is to check whether your migration service is enabled or not when registering the routes, and then simply don't registering the routes in case it is disabled.
 
 File based migrators can always be enabled.
 
-### Making the migrator public in `/info` 
+### Making the migrator public in `/info`
 
 You should make your migrator available in the `/info` endpoint so that frontends can display options to enable them or not.
 To do this, add an entry to the `AvailableMigrators` field in `pkg/routes/api/v1/info.go`.

docs/content/doc/development/notifications.md

@@ -10,7 +10,7 @@ menu:
 
 # Notifications
 
-Vikunjs provides a simple abstraction to send notifications per mail and in the database.
+Vikunja provides a simple abstraction to send notifications per mail and in the database.
 
 {{< table_of_contents >}}
 
@@ -39,7 +39,7 @@ A list of chainable functions is available to compose a mail:
 mail := NewMail(). 
     // The optional sender of the mail message.
     From("test@example.com").
-	// The optional receipient of the mail message. Uses the mail address of the notifiable if omitted.
+	// The optional recipient of the mail message. Uses the mail address of the notifiable if omitted.
     To("test@otherdomain.com").
 	// The subject of the mail to send.
     Subject("Testmail").
@@ -49,7 +49,7 @@ mail := NewMail().
     Line("This is a line of text").
 	// An action can contain a title and a url. It gets rendered as a big button in the mail.
 	// Note that you can have only one action per mail.
-	// All lines added before an action will appearr in the mail before the button, all lines 
+	// All lines added before an action will appear in the mail before the button, all lines
 	// added afterwards will appear after it.
     Action("The Action", "https://example.com").
 	// Another line of text.
@@ -60,8 +60,7 @@ If not provided, the `from` field of the mail contains the value configured in [
 
 ### Database notifications
 
-All data returned from the `ToDB()` method is serialized to json and saved into the database, along with the id of the 
-notifiable, the name of the notification and a time stamp.
+All data returned from the `ToDB()` method is serialized to json and saved into the database, along with the id of the notifiable, the name of the notification and a time stamp.
 If you don't use the database notification, the `Name()` function can return an empty string.
 
 ## Creating a new notification

docs/content/doc/development/releasing.md

@@ -0,0 +1,38 @@
+---
+title: "Releasing a new Vikunja version"
+date: 2022-10-28T13:06:05+02:00
+draft: false
+menu:
+  sidebar:
+    parent: "development"
+---
+
+# Releasing a new Vikunja version
+
+This checklist is a collection of all steps usually involved when releasing a new version of Vikunja.
+Not all steps are necessary for every release.
+
+* Website update
+	* New Features: If there are new features worth mentioning the feature page should be updated.
+	* New Screenshots: If an overhaul of an existing feature happened so that it now looks different from the existing screenshot, a new one is required.
+* Generate changelogs (with git-cliff)
+	* Frontend
+	* API
+	* Desktop
+* Tag a new version: Include the changelog for that version as the tag message
+	* Frontend
+	* API
+	* Desktop
+	* Once built: Prune the cloudflare cache so that the new versions show up at [dl.vikunja.io](https://dl.vikunja.io/)
+* Release Highlights Blogpost
+	* Include a section about Vikunja in general (totally fine to copy one from the earlier blog posts)
+	* New Features & Improvements: Mention bigger features, potentially with screenshots. Things like refactoring are sometimes also worth mentioning.
+* Publish
+	* Reddit
+	* Twitter
+	* Mastodon
+	* Chat
+	* Newsletter
+	* Forum
+	* If features in the release were sponsored, send an email to relevant stakeholders
+* Update Vikunja Cloud version and other instances

docs/content/doc/development/structure.md

@@ -64,7 +64,7 @@ See [integration tests]({{< ref "test.md" >}}#integration-tests) for more detail
 
 ### log
 
-Similar to `config`, this will set up the logging, based on differen logging backends.
+Similar to `config`, this will set up the logging, based on different logging backends.
 This init is called in `main.go` after the config init is done.
 
 ### mail
@@ -108,7 +108,7 @@ Contains all possible avatar providers a user can choose to set their avatar.
 
 #### background
 
-All list background providers are in sub-packages of this package.
+All project background providers are in sub-packages of this package.
 
 #### dump
 
@@ -126,7 +126,7 @@ See [writing a migrator]({{< ref "migration.md" >}}).
 ### red (redis)
 
 This package initializes a connection to a redis server.
-This inizialization is automatically done at the startup of vikunja.
+This initialization is automatically done at the startup of Vikunja.
 
 It also has a function (`GetRedis()`) which returns a redis client object you can then use in your package 
 to talk to redis.
@@ -138,7 +138,7 @@ In most cases, using the `keyvalue` package is a better fit.
 
 ### routes
 
-This package defines all routes which are available for vikunja clients to use.
+This package defines all routes which are available for Vikunja clients to use.
 To add a new route, see [adding a new route]({{< ref "feature.md">}}).
 
 #### api/v1
@@ -148,7 +148,7 @@ Every handler function which does not use the standard web handler should live h
 
 ### swagger
 
-This is where the [generated]({{< ref "mage.md#generate-swagger-definitions-from-code-comments">}} [api docs]({{< ref "../usage/api.md">}}) live. 
+This is where the [generated]({{< ref "mage.md#generate-swagger-definitions-from-code-comments">}}) [api docs]({{< ref "../usage/api.md">}}) live. 
 You usually don't need to touch this package.
 
 ### user
@@ -162,10 +162,9 @@ A small package, containing some helper functions:
 * `MakeRandomString`: Generates a random string of a given length.
 * `Sha256`: Calculates a sha256 hash from a given string.
 
-See their function definitions for instructions on how to use them. 
+See their function definitions for instructions on how to use them.
 
 ### version
 
-The single purpouse of this package is to hold the current vikunja version which gets overridden through build flags 
-each time `mage release` or `mage build` is run.
-It is a seperate package to avoid import cycles with other packages.
+The single purpose of this package is to hold the current Vikunja version which gets overridden through build flags each time `mage release` or `mage build` is run.
+It is a separate package to avoid import cycles with other packages.

docs/content/doc/development/swagger-docs.md

@@ -19,29 +19,52 @@ The api documentation is generated using [swaggo](https://github.com/swaggo/swag
 You should always comment every field which will be exposed as a json in the api.
 These comments will show up in the documentation, it'll make it easier for developers using the api.
 
-As an example, this is the definition of a list with all comments:
+As an example, this is the definition of a project with all comments:
 
 {{< highlight golang >}}
-// List represents a list of tasks
-type List struct {
-	// The unique, numeric id of this list.
-	ID int64 `xorm:"bigint autoincr not null unique pk" json:"id" param:"list"`
-	// The title of the list. You'll see this in the namespace overview.
-	Title string `xorm:"varchar(250)" json:"title" valid:"required,runelength(3|250)" minLength:"3" maxLength:"250"`
-	// The description of the list.
-	Description string `xorm:"varchar(1000)" json:"description" valid:"runelength(0|1000)" maxLength:"1000"`
-	OwnerID     int64  `xorm:"bigint INDEX" json:"-"`
-	NamespaceID int64  `xorm:"bigint INDEX" json:"-" param:"namespace"`
+type Project struct {
+	// The unique, numeric id of this project.
+	ID int64 `xorm:"bigint autoincr not null unique pk" json:"id" param:"project"`
+	// The title of the project. You'll see this in the overview.
+	Title string `xorm:"varchar(250) not null" json:"title" valid:"required,runelength(1|250)" minLength:"1" maxLength:"250"`
+	// The description of the project.
+	Description string `xorm:"longtext null" json:"description"`
+	// The unique project short identifier. Used to build task identifiers.
+	Identifier string `xorm:"varchar(10) null" json:"identifier" valid:"runelength(0|10)" minLength:"0" maxLength:"10"`
+	// The hex color of this project
+	HexColor string `xorm:"varchar(6) null" json:"hex_color" valid:"runelength(0|6)" maxLength:"6"`
 
-	// The user who created this list.
-	Owner User `xorm:"-" json:"owner" valid:"-"`
-	// An array of tasks which belong to the list.
-	Tasks []*ListTask `xorm:"-" json:"tasks"`
+	OwnerID         int64    `xorm:"bigint INDEX not null" json:"-"`
+	ParentProjectID int64    `xorm:"bigint INDEX null" json:"parent_project_id"`
+	ParentProject   *Project `xorm:"-" json:"-"`
 
-	// A unix timestamp when this list was created. You cannot change this value.
-	Created int64 `xorm:"created" json:"created"`
-	// A unix timestamp when this list was last updated. You cannot change this value.
-	Updated int64 `xorm:"updated" json:"updated"`
+	// The user who created this project.
+	Owner *user.User `xorm:"-" json:"owner" valid:"-"`
+
+	// Whether a project is archived.
+	IsArchived bool `xorm:"not null default false" json:"is_archived" query:"is_archived"`
+
+	// The id of the file this project has set as background
+	BackgroundFileID int64 `xorm:"null" json:"-"`
+	// Holds extra information about the background set since some background providers require attribution or similar. If not null, the background can be accessed at /projects/{projectID}/background
+	BackgroundInformation interface{} `xorm:"-" json:"background_information"`
+	// Contains a very small version of the project background to use as a blurry preview until the actual background is loaded. Check out https://blurha.sh/ to learn how it works.
+	BackgroundBlurHash string `xorm:"varchar(50) null" json:"background_blur_hash"`
+
+	// True if a project is a favorite. Favorite projects show up in a separate parent project. This value depends on the user making the call to the api.
+	IsFavorite bool `xorm:"-" json:"is_favorite"`
+
+	// The subscription status for the user reading this project. You can only read this property, use the subscription endpoints to modify it.
+	// Will only returned when retrieving one project.
+	Subscription *Subscription `xorm:"-" json:"subscription,omitempty"`
+
+	// The position this project has when querying all projects. See the tasks.position property on how to use this.
+	Position float64 `xorm:"double null" json:"position"`
+
+	// A timestamp when this project was created. You cannot change this value.
+	Created time.Time `xorm:"created not null" json:"created"`
+	// A timestamp when this project was last updated. You cannot change this value.
+	Updated time.Time `xorm:"updated not null" json:"updated"`
 
 	web.CRUDable `xorm:"-" json:"-"`
 	web.Rights   `xorm:"-" json:"-"`

docs/content/doc/development/test.md

@@ -10,32 +10,31 @@ menu:
 
 # Testing
 
-You can run unit tests with [mage]({{< ref "mage.md">}}) with
+{{< table_of_contents >}}
+
+## API Tests
+
+The following parts are about the kinds of tests in the API package and how to run them.
+
+### Prerequesites
+
+To run any kind of test, you need to specify Vikunja's [root path](https://vikunja.io/docs/config-options/#rootpath).
+This is required to make sure all test fixtures are correctly loaded.
+
+The easies way to do that is to set the environment variable `VIKUNJA_SERVICE_ROOTPATH` to the path where you cloned the working directory.
+
+### Unit tests
+
+To run unit tests with [mage]({{< ref "mage.md">}}), execute
 
 {{< highlight bash >}}
 mage test:unit
 {{< /highlight >}}
 
-{{< table_of_contents >}}
+In Vikunja, everything that is not an integration test counts as unit test - even if it accesses the db.
+This definition is a bit blurry, but we haven't found a better one yet.
 
-## Running tests with config
-
-You can run tests with all available config variables if you want, enabeling you to run tests for a lot of scenarios.
-
-To use the normal config set the enviroment variable `VIKUNJA_TESTS_USE_CONFIG=1`.
-
-## Show sql queries
-
-When `UNIT_TESTS_VERBOSE=1` is set, all sql queries will be shown when tests are run.
-
-## Fixtures
-
-All tests are run against a set of db fixtures.
-These fixtures are defined in `pkg/models/fixtures` in YAML-Files which represent the database structure.
-
-When you add a new test case which requires new database entries to test against, update these files.
-
-## Integration tests
+### Integration tests
 
 All integration tests live in `pkg/integrations`.
 You can run them by executing `mage test:integration`.
@@ -45,7 +44,25 @@ see at the beginning of this document.
 
 To run integration tests, use `mage test:integration`.
 
-## Initializing db fixtures when writing tests
+### Running tests with config
+
+You can run tests with all available config variables if you want, enabling you to run tests for a lot of scenarios.
+We use this in CI to run all tests with different databases.
+
+To use the normal config set the environment variable `VIKUNJA_TESTS_USE_CONFIG=1`.
+
+### Showing sql queries
+
+When the environment variable `UNIT_TESTS_VERBOSE=1` is set, all sql queries will be shown during the test run.
+
+### Fixtures
+
+All tests are run against a set of db fixtures.
+These fixtures are defined in `pkg/models/fixtures` in YAML-Files which represent the database structure.
+
+When you add a new test case which requires new database entries to test against, update these files.
+
+#### Initializing db fixtures when writing tests
 
 All db fixtures for all tests live in the `pkg/db/fixtures/` folder as yaml files.
 Each file has the same name as the table the fixtures are for.
@@ -54,19 +71,39 @@ You should put new fixtures in this folder.
 When initializing db fixtures, you are responsible for defining which tables your package needs in your test init function.
 Usually, this is done as follows (this code snippet is taken from the `user` package):
 
-```go
+{{< highlight go >}}
 err = db.InitTestFixtures("users")
 if err != nil {
 	log.Fatal(err)
 }
-```
+{{< /highlight >}}
 
 In your actual tests, you then load the fixtures into the in-memory db like so:
 
-```go
+{{< highlight go >}}
 db.LoadAndAssertFixtures(t)
-```
+{{< /highlight >}}
 
 This will load all fixtures you defined in your test init method.
 You should always use this method to load fixtures, the only exception is when your package tests require extra test 
 fixtures other than db fixtures (like files).
+
+## Frontend tests
+
+The frontend has end to end tests with Cypress that use a Vikunja instance and drive a browser against it.
+Check out the docs [in the frontend repo](https://kolaente.dev/vikunja/frontend/src/branch/main/cypress/README.md) about how they work and how to get them running.
+
+### Unit Tests
+
+To run the frontend unit tests, run
+
+{{< highlight bash >}}
+pnpm run test:unit
+{{< /highlight >}}
+
+The frontend also has a watcher available that re-runs all unit tests every time you change something.
+To use it, simply run
+
+{{< highlight bash >}}
+pnpm run test:unit-watch
+{{< /highlight >}}

docs/content/doc/development/translation-instructions-german.md

@@ -67,10 +67,9 @@ Beispiel: „Benutzer:in“
 | Englisches Original | Verwendung in deutscher Übersetzung |
 | ------------------- | -------------------- |
 | Bucket | Spalte |
-| Namespace | Namespace |
 | Link Share | Linkfreigabe |
 | Username | Anmeldename |
 
 ## Weiterführende Links
 
-* http://docs.translatehouse.org/projects/localization-guide/en/latest/guide/translation_guidelines_german.html
+* https://docs.translatehouse.org/projects/localization-guide/en/latest/guide/translation_guidelines_german.html

docs/content/doc/development/translations.md

@@ -21,7 +21,7 @@ Currently, only the frontend (and by extension, the desktop app) is translatable
 
 ## Translation Instructions
 
-> These are the instructions for translating Vikunja in another language. 
+> These are the instructions for translating Vikunja in another language.
 > For information about how to add new translation strings, see below.
 
 For all languages these translation guidelines should be applied when translating:
@@ -44,7 +44,7 @@ Instead, translate it to reflect the original meaning in the translated string b
 
 All translation strings are stored in `src/i18n/lang/`.
 New strings should be added only in the `en.json` file.
-Strings in other languages will be synced through weblate and should not be added directly as a PR/commit in the frontend repo.
+Strings in other languages will be synced through [crowdin](https://crowdin.com/project/vikunja) and should not be added directly as a PR/commit in the frontend repo.
 
 ## Requesting a new language
 

docs/content/doc/setup/backups.md

@@ -10,12 +10,17 @@ menu:
 
 # What to backup
 
-Vikunja does not store any data outside of the database.
-So, all you need to backup are the contents of that database and maybe the config file.
+There are two parts you need to back up: The database and attachment files.
 
 {{< table_of_contents >}}
 
-## MySQL
+## Files
+
+To back up attachments and other files, it is enough to copy them [from the attachments folder]({{< ref "config.md" >}}#basepath) to some other place.
+
+## Database
+
+### MySQL
 
 To create a backup from mysql use the `mysqldump` command:
 
@@ -31,7 +36,7 @@ To restore it, simply pipe it back into the `mysql` command:
 mysql -u <user> -p -h <db-host> <database> < vkunja-backup.sql
 {{< /highlight >}}
 
-## PostgreSQL
+### PostgreSQL
 
 To create a backup from PostgreSQL use the `pg_dump` command:
 
@@ -49,6 +54,6 @@ psql -U <user> -h <db-host> <database> < vikunja-backup.sql
 
 For more information, please visit the [relevant PostgreSQL documentation](https://www.postgresql.org/docs/12/backup-dump.html).
 
-## SQLite
+### SQLite
 
-To backup sqllite databases, it is enough to copy the database elsewhere.
+To back up sqllite databases, it is enough to copy the [database file]({{< ref "config.md" >}}#path) to somewhere else.

docs/content/doc/setup/build-from-source.md

@@ -1,5 +1,5 @@
 ---
-date: "2019-02-12:00:00+02:00"
+date: "2022-09-21:00:00+02:00"
 title: "Build from sources"
 draft: false
 type: "doc"
@@ -10,20 +10,31 @@ menu:
 
 # Build Vikunja from source
 
-Vikunja being a go application, has no other dependencies than go itself. 
-All libraries are bundeled inside the repo in the `vendor/` folder, so all it boils down to are these steps:
+To completely build Vikunja from source, you need to build the api and frontend.
 
-1. Make sure [Go](https://golang.org/doc/install) is properly installed on your system. You'll need at least Go `1.9`.
-2. Make sure [Mage](https://magefile) is properly installed on your system.
-3. Clone the repo with `git clone https://code.vikunja.io/api`
-3. Run `mage build:build` in the source of this repo. This will build a binary in the root of the repo which will be able to run on your system.
+{{< table_of_contents >}}
 
-*Note:* Static ressources such as email templates are built into the binary.
-For these to work, you may need to run `mage build:generate` before building the vikunja binary.
-When builing entirely with `mage`, you dont need to do this, `mage build:generate` will be run automatically when running `mage build:build`.
+## API
 
-# Build for different architectures
+The Vikunja API has no other dependencies than go itself.
+That means compiling it boils down to these steps:
+
+1. Make sure [Go](https://golang.org/doc/install) is properly installed on your system. You'll need at least Go `1.21`.
+2. Make sure [Mage](https://magefile.org) is properly installed on your system.
+3. Clone the repo with `git clone https://code.vikunja.io/api` and switch into the directory.
+4. Run `mage build` in the source of this repo. This will build a binary in the root of the repo which will be able to run on your system.
+
+### Build for different architectures
 
 To build for other platforms and architectures than the one you're currently on, simply run `mage release:release` or `mage release:{linux|windows|darwin}`.
 
-More options are available, please refer to the [magefile docs]({{< ref "../development/mage.md">}}) for more details.
+More options are available, please refer to the [magefile docs]({{< ref "../development/mage.md">}}) for more details.
+
+## Frontend
+
+The code for the frontend is located at [code.vikunja.io/frontend](https://code.vikunja.io/frontend).
+
+1. Make sure you have [pnpm](https://pnpm.io/installation) properly installed on your system.
+2. Clone the repo with `git clone https://code.vikunja.io/frontend` and switch into the directory.
+3. Install all dependencies with `pnpm install`
+4. Build the frontend with `pnpm run build`. This will result in a static js bundle in the `dist/` folder which you can deploy.

docs/content/doc/setup/config.md

@@ -10,8 +10,8 @@ menu:
 
 # Configuration options
 
-You can either use a `config.yml` file in the root directory of vikunja or set all config option with 
-environment variables. If you have both, the value set in the config file is used.
+You can either use a `config.yml` file in the root directory of vikunja or set almost all config option with environment variables. If you have both, the value set in the config file is used.
+Right now it is not possible to configure openid authentication via environment variables.
 
 Variables are nested in the `config.yml`, these nested variables become `VIKUNJA_FIRST_CHILD` when configuring via
 environment variables. So setting
@@ -30,7 +30,7 @@ first:
 # Formats
 
 Vikunja supports using `toml`, `yaml`, `hcl`, `ini`, `json`, envfile, env variables and Java Properties files.
-We reccomend yaml or toml, but you're free to use whatever you want.
+We recommend yaml or toml, but you're free to use whatever you want.
 
 Vikunja provides a default [`config.yml`](https://kolaente.dev/vikunja/api/src/branch/main/config.yml.sample) file which you can use as a starting point.
 
@@ -55,7 +55,7 @@ If you don't provide a value in your config file, their default will be used.
 Most config variables are nested under some "higher-level" key.
 For example, the `interface` config variable is a child of the `service` key.
 
-The docs below aim to reflect that leveling, but please also have a lookt at [the default config](https://code.vikunja.io/api/src/branch/main/config.yml.sample) file
+The docs below aim to reflect that leveling, but please also have a look at [the default config](https://code.vikunja.io/api/src/branch/main/config.yml.sample) file
 to better grasp how the nesting looks like.
 
 <!-- Generated config will be injected here -->
@@ -76,7 +76,32 @@ Default: `<jwt-secret>`
 
 Full path: `service.JWTSecret`
 
-Environment path: `VIKUNJA_SERVICE_JWT_SECRET`
+Environment path: `VIKUNJA_SERVICE_JWTSECRET`
+
+
+### jwtttl
+
+The duration of the issued JWT tokens in seconds.
+The default is 259200 seconds (3 Days).
+
+Default: `259200`
+
+Full path: `service.jwtttl`
+
+Environment path: `VIKUNJA_SERVICE_JWTTTL`
+
+
+### jwtttllong
+
+The duration of the "remember me" time in seconds. When the login request is made with 
+the long param set, the token returned will be valid for this period.
+The default is 2592000 seconds (30 Days).
+
+Default: `2592000`
+
+Full path: `service.jwtttllong`
+
+Environment path: `VIKUNJA_SERVICE_JWTTTLLONG`
 
 
 ### interface
@@ -136,6 +161,17 @@ Full path: `service.rootpath`
 Environment path: `VIKUNJA_SERVICE_ROOTPATH`
 
 
+### staticpath
+
+Path on the file system to serve static files from. Set to the path of the frontend files to host frontend alongside the api.
+
+Default: `<empty>`
+
+Full path: `service.staticpath`
+
+Environment path: `VIKUNJA_SERVICE_STATICPATH`
+
+
 ### maxitemsperpage
 
 The max number of items which can be returned per page
@@ -171,7 +207,7 @@ Environment path: `VIKUNJA_SERVICE_MOTD`
 
 ### enablelinksharing
 
-Enable sharing of lists via a link
+Enable sharing of project via a link
 
 Default: `true`
 
@@ -250,7 +286,7 @@ Environment path: `VIKUNJA_SERVICE_SENTRYDSN`
 
 If not empty, this will enable `/test/{table}` endpoints which allow to put any content in the database.
 Used to reset the db before frontend tests. Because this is quite a dangerous feature allowing for lots of harm,
-each request made to this endpoint neefs to provide an `Authorization: <token>` header with the token from below. <br/>
+each request made to this endpoint needs to provide an `Authorization: <token>` header with the token from below. <br/>
 **You should never use this unless you know exactly what you're doing**
 
 Default: `<empty>`
@@ -285,6 +321,30 @@ Full path: `service.enableuserdeletion`
 Environment path: `VIKUNJA_SERVICE_ENABLEUSERDELETION`
 
 
+### maxavatarsize
+
+The maximum size clients will be able to request for user avatars.
+If clients request a size bigger than this, it will be changed on the fly.
+
+Default: `1024`
+
+Full path: `service.maxavatarsize`
+
+Environment path: `VIKUNJA_SERVICE_MAXAVATARSIZE`
+
+
+### demomode
+
+If set to true, the frontend will show a big red warning not to use this instance for real data as it will be cleared out.
+You probably don't need to set this value, it was created specifically for usage on [try](https://try.vikunja.io).
+
+Default: `false`
+
+Full path: `service.demomode`
+
+Environment path: `VIKUNJA_SERVICE_DEMOMODE`
+
+
 ---
 
 ## database
@@ -315,7 +375,7 @@ Environment path: `VIKUNJA_DATABASE_USER`
 
 ### password
 
-Databse password
+Database password
 
 Default: `<empty>`
 
@@ -326,7 +386,7 @@ Environment path: `VIKUNJA_DATABASE_PASSWORD`
 
 ### host
 
-Databse host
+Database host
 
 Default: `localhost`
 
@@ -337,7 +397,7 @@ Environment path: `VIKUNJA_DATABASE_HOST`
 
 ### database
 
-Databse to use
+Database to use
 
 Default: `vikunja`
 
@@ -381,7 +441,7 @@ Environment path: `VIKUNJA_DATABASE_MAXIDLECONNECTIONS`
 
 ### maxconnectionlifetime
 
-The maximum lifetime of a single db connection in miliseconds.
+The maximum lifetime of a single db connection in milliseconds.
 
 Default: `10000`
 
@@ -402,6 +462,39 @@ Full path: `database.sslmode`
 Environment path: `VIKUNJA_DATABASE_SSLMODE`
 
 
+### sslcert
+
+The path to the client cert. Only used with postgres.
+
+Default: `<empty>`
+
+Full path: `database.sslcert`
+
+Environment path: `VIKUNJA_DATABASE_SSLCERT`
+
+
+### sslkey
+
+The path to the client key. Only used with postgres.
+
+Default: `<empty>`
+
+Full path: `database.sslkey`
+
+Environment path: `VIKUNJA_DATABASE_SSLKEY`
+
+
+### sslrootcert
+
+The path to the ca cert. Only used with postgres.
+
+Default: `<empty>`
+
+Full path: `database.sslrootcert`
+
+Environment path: `VIKUNJA_DATABASE_SSLROOTCERT`
+
+
 ### tls
 
 Enable SSL/TLS for mysql connections. Options: false, true, skip-verify, preferred
@@ -415,43 +508,45 @@ Environment path: `VIKUNJA_DATABASE_TLS`
 
 ---
 
-## cache
+## typesense
 
 
 
 ### enabled
 
-If cache is enabled or not
+Whether to enable the Typesense integration. If true, all tasks will be synced to the configured Typesense
+instance and all search and filtering will run through Typesense instead of only through the database.
+Typesense allows fast fulltext search including fuzzy matching support. It may return different results than 
+what you'd get with a database-only search.
 
 Default: `false`
 
-Full path: `cache.enabled`
+Full path: `typesense.enabled`
 
-Environment path: `VIKUNJA_CACHE_ENABLED`
+Environment path: `VIKUNJA_TYPESENSE_ENABLED`
 
 
-### type
+### url
 
-Cache type. Possible values are "keyvalue", "memory" or "redis".
-When choosing "keyvalue" this setting follows the one configured in the "keyvalue" section.
-When choosing "redis" you will need to configure the redis connection seperately.
+The url to the Typesense instance you want to use. Can be hosted locally or in Typesense Cloud as long
+as Vikunja is able to reach it.
 
-Default: `keyvalue`
+Default: `<empty>`
 
-Full path: `cache.type`
+Full path: `typesense.url`
 
-Environment path: `VIKUNJA_CACHE_TYPE`
+Environment path: `VIKUNJA_TYPESENSE_URL`
 
 
-### maxelementsize
+### apikey
 
-When using memory this defines the maximum size an element can take
+The Typesense API key you want to use.
 
-Default: `1000`
+Default: `<empty>`
 
-Full path: `cache.maxelementsize`
+Full path: `typesense.apikey`
 
-Environment path: `VIKUNJA_CACHE_MAXELEMENTSIZE`
+Environment path: `VIKUNJA_TYPESENSE_APIKEY`
 
 
 ---
@@ -484,7 +579,7 @@ Environment path: `VIKUNJA_REDIS_HOST`
 
 ### password
 
-The password used to authenicate against the redis server
+The password used to authenticate against the redis server
 
 Default: `<empty>`
 
@@ -513,7 +608,7 @@ Environment path: `VIKUNJA_REDIS_DB`
 ### enable
 
 Whether to enable or disable cors headers.
-Note: If you want to put the frontend and the api on seperate domains or ports, you will need to enable this.
+Note: If you want to put the frontend and the api on separate domains or ports, you will need to enable this.
       Otherwise the frontend won't be able to make requests to the api through the browser.
 
 Default: `true`
@@ -575,7 +670,8 @@ Environment path: `VIKUNJA_MAILER_HOST`
 
 ### port
 
-SMTP Host port
+SMTP Host port.
+**NOTE:** If you're unable to send mail and the only error you see in the logs is an `EOF`, try setting the port to `25`.
 
 Default: `587`
 
@@ -584,6 +680,17 @@ Full path: `mailer.port`
 Environment path: `VIKUNJA_MAILER_PORT`
 
 
+### authtype
+
+SMTP Auth Type. Can be either `plain`, `login` or `cram-md5`.
+
+Default: `plain`
+
+Full path: `mailer.authtype`
+
+Environment path: `VIKUNJA_MAILER_AUTHTYPE`
+
+
 ### username
 
 SMTP username
@@ -746,7 +853,7 @@ Environment path: `VIKUNJA_LOG_HTTP`
 
 ### echo
 
-Echo has its own logging which usually is unnessecary, which is why it is disabled by default. Possible values are stdout, stderr, file or off to disable standard logging.
+Echo has its own logging which usually is unnecessary, which is why it is disabled by default. Possible values are stdout, stderr, file or off to disable standard logging.
 
 Default: `off`
 
@@ -759,7 +866,7 @@ Environment path: `VIKUNJA_LOG_ECHO`
 
 Whether or not to log events. Useful for debugging. Possible values are stdout, stderr, file or off to disable events logging.
 
-Default: `stdout`
+Default: `off`
 
 Full path: `log.events`
 
@@ -777,6 +884,28 @@ Full path: `log.eventslevel`
 Environment path: `VIKUNJA_LOG_EVENTSLEVEL`
 
 
+### mail
+
+Whether or not to log mail log messages. This will not log mail contents. Possible values are stdout, stderr, file or off to disable mail-related logging.
+
+Default: `off`
+
+Full path: `log.mail`
+
+Environment path: `VIKUNJA_LOG_MAIL`
+
+
+### maillevel
+
+The log level for mail log messages. Possible values (case-insensitive) are ERROR, WARNING, INFO, DEBUG.
+
+Default: `info`
+
+Full path: `log.maillevel`
+
+Environment path: `VIKUNJA_LOG_MAILLEVEL`
+
+
 ---
 
 ## ratelimit
@@ -840,6 +969,19 @@ Full path: `ratelimit.store`
 Environment path: `VIKUNJA_RATELIMIT_STORE`
 
 
+### noauthlimit
+
+The number of requests a user can make from the same IP to all unauthenticated routes (login, register, 
+password confirmation, email verification, password reset request) per minute. This limit cannot be disabled.
+You should only change this if you know what you're doing.
+
+Default: `10`
+
+Full path: `ratelimit.noauthlimit`
+
+Environment path: `VIKUNJA_RATELIMIT_NOAUTHLIMIT`
+
+
 ---
 
 ## files
@@ -875,17 +1017,6 @@ Environment path: `VIKUNJA_FILES_MAXSIZE`
 
 
 
-### wunderlist
-
-These are the settings for the wunderlist migrator
-
-Default: `<empty>`
-
-Full path: `migration.wunderlist`
-
-Environment path: `VIKUNJA_MIGRATION_WUNDERLIST`
-
-
 ### todoist
 
 Default: `<empty>`
@@ -938,7 +1069,7 @@ Environment path: `VIKUNJA_AVATAR_GRAVATAREXPIRATION`
 
 ### enabled
 
-Whether to enable backgrounds for lists at all.
+Whether to enable backgrounds for projects at all.
 
 Default: `true`
 
@@ -994,7 +1125,7 @@ The Key Value Storage is used for different kinds of things like metrics and a f
 
 ### type
 
-The type of the storage backend. Can be either "memory" or "redis". If "redis" is chosen it needs to be configured seperately.
+The type of the storage backend. Can be either "memory" or "redis". If "redis" is chosen it needs to be configured separately.
 
 Default: `memory`
 
@@ -1029,7 +1160,7 @@ The provider needs to support the `openid`, `profile` and `email` scopes.<br/>
 If the email is not public in those cases, authenticating will fail.
 **Note 2:** The frontend expects to be redirected after authentication by the third party
 to <frontend-url>/auth/openid/<auth key>. Please make sure to configure the redirect url with your third party
-auth service accordingy if you're using the default vikunja frontend.
+auth service accordingly if you're using the default vikunja frontend.
 Take a look at the [default config file](https://kolaente.dev/vikunja/api/src/branch/main/config.yml.sample) for more information about how to configure openid authentication.
 
 Default: `<empty>`
@@ -1049,7 +1180,7 @@ Prometheus metrics endpoint
 
 ### enabled
 
-If set to true, enables a /metrics endpoint for prometheus to collect metrics about Vikunja.
+If set to true, enables a /metrics endpoint for prometheus to collect metrics about Vikunja. You can query it from `/api/v1/metrics`.
 
 Default: `false`
 
@@ -1080,3 +1211,182 @@ Full path: `metrics.password`
 Environment path: `VIKUNJA_METRICS_PASSWORD`
 
 
+---
+
+## defaultsettings
+
+Provide default settings for new users. When a new user is created, these settings will automatically be set for the user. If you change them in the config file afterwards they will not be changed back for existing users.
+
+
+
+### avatar_provider
+
+The avatar source for the user. Can be `gravatar`, `initials`, `upload` or `marble`. If you set this to `upload` you'll also need to specify `defaultsettings.avatar_file_id`.
+
+Default: `initials`
+
+Full path: `defaultsettings.avatar_provider`
+
+Environment path: `VIKUNJA_DEFAULTSETTINGS_AVATAR_PROVIDER`
+
+
+### avatar_file_id
+
+The id of the file used as avatar.
+
+Default: `0`
+
+Full path: `defaultsettings.avatar_file_id`
+
+Environment path: `VIKUNJA_DEFAULTSETTINGS_AVATAR_FILE_ID`
+
+
+### email_reminders_enabled
+
+If set to true users will get task reminders via email.
+
+Default: `false`
+
+Full path: `defaultsettings.email_reminders_enabled`
+
+Environment path: `VIKUNJA_DEFAULTSETTINGS_EMAIL_REMINDERS_ENABLED`
+
+
+### discoverable_by_name
+
+If set to true will allow other users to find this user when searching for parts of their name.
+
+Default: `false`
+
+Full path: `defaultsettings.discoverable_by_name`
+
+Environment path: `VIKUNJA_DEFAULTSETTINGS_DISCOVERABLE_BY_NAME`
+
+
+### discoverable_by_email
+
+If set to true will allow other users to find this user when searching for their exact email.
+
+Default: `false`
+
+Full path: `defaultsettings.discoverable_by_email`
+
+Environment path: `VIKUNJA_DEFAULTSETTINGS_DISCOVERABLE_BY_EMAIL`
+
+
+### overdue_tasks_reminders_enabled
+
+If set to true will send an email every day with all overdue tasks at a configured time.
+
+Default: `true`
+
+Full path: `defaultsettings.overdue_tasks_reminders_enabled`
+
+Environment path: `VIKUNJA_DEFAULTSETTINGS_OVERDUE_TASKS_REMINDERS_ENABLED`
+
+
+### overdue_tasks_reminders_time
+
+When to send the overdue task reminder email.
+
+Default: `9:00`
+
+Full path: `defaultsettings.overdue_tasks_reminders_time`
+
+Environment path: `VIKUNJA_DEFAULTSETTINGS_OVERDUE_TASKS_REMINDERS_TIME`
+
+
+### default_project_id
+
+The id of the default project. Make sure users actually have access to this project when setting this value.
+
+Default: `0`
+
+Full path: `defaultsettings.default_project_id`
+
+Environment path: `VIKUNJA_DEFAULTSETTINGS_DEFAULT_PROJECT_ID`
+
+
+### week_start
+
+Start of the week for the user. `0` is sunday, `1` is monday and so on.
+
+Default: `0`
+
+Full path: `defaultsettings.week_start`
+
+Environment path: `VIKUNJA_DEFAULTSETTINGS_WEEK_START`
+
+
+### language
+
+The language of the user interface. Must be an ISO 639-1 language code followed by an ISO 3166-1 alpha-2 country code. Check https://kolaente.dev/vikunja/frontend/src/branch/main/src/i18n/lang for a list of possible languages. Will default to the browser language the user uses when signing up.
+
+Default: `<unset>`
+
+Full path: `defaultsettings.language`
+
+Environment path: `VIKUNJA_DEFAULTSETTINGS_LANGUAGE`
+
+
+### timezone
+
+The time zone of each individual user. This will affect when users get reminders and overdue task emails.
+
+Default: `<time zone set at service.timezone>`
+
+Full path: `defaultsettings.timezone`
+
+Environment path: `VIKUNJA_DEFAULTSETTINGS_TIMEZONE`
+
+
+---
+
+## webhooks
+
+
+
+### enabled
+
+Whether to enable support for webhooks
+
+Default: `true`
+
+Full path: `webhooks.enabled`
+
+Environment path: `VIKUNJA_WEBHOOKS_ENABLED`
+
+
+### timoutseconds
+
+The timout in seconds until a webhook request fails when no response has been received.
+
+Default: `30`
+
+Full path: `webhooks.timoutseconds`
+
+Environment path: `VIKUNJA_WEBHOOKS_TIMOUTSECONDS`
+
+
+### proxyurl
+
+The URL of [a mole instance](https://github.com/frain-dev/mole) to use to proxy outgoing webhook requests. You should use this and configure appropriately if you're not the only one using your Vikunja instance. More info about why: https://webhooks.fyi/best-practices/webhook-providers#implement-security-on-egress-communication. Must be used in combination with `webhooks.password` (see below).
+
+Default: `<empty>`
+
+Full path: `webhooks.proxyurl`
+
+Environment path: `VIKUNJA_WEBHOOKS_PROXYURL`
+
+
+### proxypassword
+
+The proxy password to use when authenticating against the proxy.
+
+Default: `<empty>`
+
+Full path: `webhooks.proxypassword`
+
+Environment path: `VIKUNJA_WEBHOOKS_PROXYPASSWORD`
+
+

docs/content/doc/setup/docker-start-to-finish.md

@@ -50,6 +50,8 @@ services:
       VIKUNJA_DATABASE_TYPE: mysql
       VIKUNJA_DATABASE_USER: vikunja
       VIKUNJA_DATABASE_DATABASE: vikunja
+      VIKUNJA_SERVICE_JWTSECRET: <a super secure random secret>
+      VIKUNJA_SERVICE_FRONTENDURL: https://<your public frontend url with slash>/
     volumes: 
       - ./files:/app/vikunja/files
     depends_on:
@@ -74,7 +76,7 @@ This defines four services, each with their own container:
 
 * An api service which runs the vikunja api. Most of the core logic lives here.
 * The frontend which will make vikunja actually usable for most people.
-* A database container which will store all lists, tasks, etc. We're using mariadb here, but you're free to use mysql or postgres if you want.
+* A database container which will store all projects, tasks, etc. We're using mariadb here, but you're free to use mysql or postgres if you want.
 * A proxy service which makes the frontend and api available on the same port, redirecting all requests to `/api` to the api container. 
 If you already have a proxy on your host, you may want to check out the [reverse proxy examples]() to use that.
 By default, it uses port 80 on the host.
@@ -199,7 +201,6 @@ You should see something like this:
   "max_file_size": "20MB",
   "registration_enabled": true,
   "available_migrators": [
-    "wunderlist",
     "todoist"
   ],
   "task_attachments_enabled": true

docs/content/doc/setup/full-docker-example.md

@@ -10,13 +10,13 @@ menu:
 
 # Full docker example
 
-This docker compose configuration will run Vikunja with backend and frontend with a mariadb as database.
+This docker compose configuration will run Vikunja with backend and frontend with a mariadb database.
 It uses an nginx container or traefik on the host to proxy backend and frontend into a single port.
 
 For all available configuration options, see [configuration]({{< ref "config.md">}}).
 
 <div class="notification is-warning">
-<b>NOTE:</b> If you intend to run Vikunja with mysql and/or to use non-latin characters 
+<b>NOTE:</b> If you intend to run Vikunja with mysql and/or to use non-latin characters
 <a href="{{< ref "utf-8.md">}}">make sure your db is utf-8 compatible</a>.<br/>
 All examples on this page already reflect this and do not require additional work.
 </div>
@@ -25,6 +25,8 @@ All examples on this page already reflect this and do not require additional wor
 
 ## Redis
 
+While Vikunja has support to use redis as a caching backend, you'll probably not need it unless you're using Vikunja with more than a handful of users.
+
 To use redis, you'll need to add this to the config examples below:
 
 {{< highlight yaml >}}
@@ -44,11 +46,111 @@ services:
     image: redis
 {{< /highlight >}}
 
+## PostgreSQL
+
+Vikunja supports postgres, mysql and sqlite as a database backend. The examples on this page use mysql with a mariadb container.
+To use postgres as a database backend, change the `db` section of the examples to this:
+
+{{< highlight yaml >}}
+db:
+  image: postgres:13
+  environment:
+    POSTGRES_PASSWORD: secret
+    POSTGRES_USER: vikunja
+  volumes:
+    - ./db:/var/lib/postgresql/data
+  restart: unless-stopped
+{{< /highlight >}}
+
+You'll also need to change the `VIKUNJA_DATABASE_TYPE` to `postgres` on the api container declaration.
+
+<div class="notification is-warning">
+<b>NOTE:</b> The mariadb container can sometimes take a while to initialize, especially on the first run. During this time, the api container will fail to start at all. It will automatically restart every few seconds.
+</div>
+
+## Sqlite
+
+Vikunja supports postgres, mysql and sqlite as a database backend. The examples on this page use mysql with a mariadb container.
+To use sqlite as a database backend, change the `api` section of the examples to this:
+
+{{< highlight yaml >}}
+api:
+  image: vikunja/api
+  environment:
+    VIKUNJA_SERVICE_JWTSECRET: <a super secure random secret>
+    VIKUNJA_SERVICE_FRONTENDURL: http://<your public frontend url with slash>/
+    # Note the default path is /app/vikunja/vikunja.db This moves to a different folder so you can use a volume and store this outside of the container so state is persisted even if container destroyed.
+    VIKUNJA_DATABASE_PATH: /db/vikunja.db
+  ports:
+    - 3456:3456
+  volumes:
+    - ./files:/app/vikunja/files
+    - ./db:/db
+  restart: unless-stopped
+{{< /highlight >}}
+
+The default path Vikunja uses for sqlite is relative to the binary, which in the docker container would be `/app/vikunja/vikunja.db`. This config moves to a different folder using `VIKUNJA_DATABASE_PATH` so you can use a volume at `/db` and store this outside of the container so state is persisted even if container destroyed.
+
+You'll also need to remove or change the `VIKUNJA_DATABASE_TYPE` to `sqlite` on the api container declaration.
+
+You can also remove the db section.
+
+<div class="notification is-warning">
+<b>NOTE:</b> If you'll use your instance with more than a handful of users, we recommend using mysql or postgres.
+</div>
+
+## Example without any proxy
+
+This example lets you host Vikunja without any reverse proxy in front of it. This is the absolute minimum configuration you need to get something up and running. If you want to host Vikunja on one single port instead of two different ones or need tls termination, check out one of the other examples.
+
+Note that you need to change the `VIKUNJA_API_URL` environment variable to the ip (the docker host you're running this on) is reachable at. Because the browser you'll use to access the Vikunja frontend uses that url to make the requests, it has to be able to reach that ip + port from the outside. Putting everything in a private network won't work.
+
+{{< highlight yaml >}}
+version: '3'
+
+services:
+  db:
+    image: mariadb:10
+    command: --character-set-server=utf8mb4 --collation-server=utf8mb4_unicode_ci
+    environment:
+      MYSQL_ROOT_PASSWORD: supersecret
+      MYSQL_USER: vikunja
+      MYSQL_PASSWORD: secret
+      MYSQL_DATABASE: vikunja
+    volumes:
+      - ./db:/var/lib/mysql
+    restart: unless-stopped
+  api:
+    image: vikunja/api
+    environment:
+      VIKUNJA_DATABASE_HOST: db
+      VIKUNJA_DATABASE_PASSWORD: secret
+      VIKUNJA_DATABASE_TYPE: mysql
+      VIKUNJA_DATABASE_USER: vikunja
+      VIKUNJA_DATABASE_DATABASE: vikunja
+      VIKUNJA_SERVICE_JWTSECRET: <a super secure random secret>
+      VIKUNJA_SERVICE_FRONTENDURL: http://<your public frontend url with slash>/
+    ports:
+      - 3456:3456
+    volumes:
+      - ./files:/app/vikunja/files
+    depends_on:
+      - db
+    restart: unless-stopped
+  frontend:
+    image: vikunja/frontend
+    ports:
+      - 80:80
+    environment:
+      VIKUNJA_API_URL: http://<your-ip-here>:3456/api/v1
+    restart: unless-stopped
+{{< /highlight >}}
+
 ## Example with traefik 2
 
 This example assumes [traefik](https://traefik.io) version 2 installed and configured to [use docker as a configuration provider](https://docs.traefik.io/providers/docker/).
 
-We also make a few assumtions here which you'll most likely need to adjust for your traefik setup:
+We also make a few assumptions here which you'll most likely need to adjust for your traefik setup:
 
 * Your domain is `vikunja.example.com`
 * The entrypoint you want to make vikunja available from is called `https`
@@ -66,6 +168,8 @@ services:
       VIKUNJA_DATABASE_TYPE: mysql
       VIKUNJA_DATABASE_USER: vikunja
       VIKUNJA_DATABASE_DATABASE: vikunja
+      VIKUNJA_SERVICE_JWTSECRET: <a super secure random secret>
+      VIKUNJA_SERVICE_FRONTENDURL: https://<your public frontend url with slash>/
     volumes: 
       - ./files:/app/vikunja/files
     networks:
@@ -76,7 +180,7 @@ services:
     restart: unless-stopped
     labels:
       - "traefik.enable=true"
-      - "traefik.http.routers.vikunja-api.rule=Host(`vikunja.example.com`) && PathPrefix(`/api/v1`, `/dav/`, `/.well-known/`)"
+      - "traefik.http.routers.vikunja-api.rule=Host(`vikunja.example.com`) && (PathPrefix(`/api/v1`) || PathPrefix(`/dav/`) || PathPrefix(`/.well-known/`))"
       - "traefik.http.routers.vikunja-api.entrypoints=https"
       - "traefik.http.routers.vikunja-api.tls.certResolver=acme"
   frontend:
@@ -124,6 +228,8 @@ services:
       VIKUNJA_DATABASE_TYPE: mysql
       VIKUNJA_DATABASE_USER: vikunja
       VIKUNJA_DATABASE_DATABASE: vikunja
+      VIKUNJA_SERVICE_JWTSECRET: <a super secure random secret>
+      VIKUNJA_SERVICE_FRONTENDURL: https://<your public frontend url with slash>/
     volumes: 
       - ./files:/app/vikunja/files
     networks:
@@ -154,7 +260,7 @@ services:
     image: mariadb:10
     command: --character-set-server=utf8mb4 --collation-server=utf8mb4_unicode_ci
     environment:
-      MYSQL_ROOT_PASSWORD: supersupersecret 
+      MYSQL_ROOT_PASSWORD: supersupersecret
       MYSQL_USER: vikunja
       MYSQL_PASSWORD: supersecret
       MYSQL_DATABASE: vikunja
@@ -217,6 +323,8 @@ services:
       VIKUNJA_DATABASE_TYPE: mysql
       VIKUNJA_DATABASE_USER: vikunja
       VIKUNJA_DATABASE_DATABASE: vikunja
+      VIKUNJA_SERVICE_JWTSECRET: <a super secure random secret>
+      VIKUNJA_SERVICE_FRONTENDURL: https://<your public frontend url with slash>/
     volumes: 
       - ./files:/app/vikunja/files
     depends_on:
@@ -260,7 +368,7 @@ services:
     image: mariadb:10
     command: --character-set-server=utf8mb4 --collation-server=utf8mb4_unicode_ci
     environment:
-      MYSQL_ROOT_PASSWORD: supersecret 
+      MYSQL_ROOT_PASSWORD: supersecret
       MYSQL_USER: vikunja
       MYSQL_PASSWORD: secret
       MYSQL_DATABASE: vikunja
@@ -275,7 +383,9 @@ services:
       VIKUNJA_DATABASE_TYPE: mysql
       VIKUNJA_DATABASE_USER: vikunja
       VIKUNJA_DATABASE_DATABASE: vikunja
-    volumes: 
+      VIKUNJA_SERVICE_JWTSECRET: <a super secure random secret>
+      VIKUNJA_SERVICE_FRONTENDURL: https://<your public frontend url with slash>/
+    volumes:
       - ./files:/app/vikunja/files
     depends_on:
       - db
@@ -295,3 +405,82 @@ services:
     volumes:
         - ./Caddyfile:/etc/caddy/Caddyfile:ro
 {{< /highlight >}}
+
+## Setup on a Synology NAS
+
+There is a proxy preinstalled in DSM, so if you want to access vikunja from outside,
+you can prepare 2 proxy rules:
+
+* a redirection rule for vikunja's api (see example screenshot using port 3456)
+* a similar redirection rule for vikunja's frontend (using port 4321)
+
+![Synology Proxy Settings](/docs/synology-proxy-1.png)
+
+You should also add 2 empty folders for mariadb and vikunja inside Synology's
+docker main folders:
+
+* Docker
+  * vikunja
+  * mariadb
+
+Synology has its own GUI for managing Docker containers... But it's easier via docker compose.
+
+To do that, you can
+
+* either activate SSH and paste the adapted compose file in a terminal (using Putty or similar)
+* without activating SSH as a "custom script" (go to Control Panel / Task Scheduler / Create / Scheduled Task / User-defined script)
+* without activating SSH, by using Portainer (you have to install first, check out [this tutorial](https://www.portainer.io/blog/how-to-install-portainer-on-a-synology-nas) for exmple):
+  1. Go to **Dashboard / Stacks** click the button **"Add Stack"**
+  2. Give it the name Vikunja and paste the adapted docker compose file
+  3. Deploy the Stack with the "Deploy Stack" button:
+
+![Portainer Stack deploy](/docs/synology-proxy-2.png)
+
+The docker-compose file we're going to use is very similar to the [example without any proxy](#example-without-any-proxy) above:
+
+{{< highlight yaml >}}
+version: '3'
+
+services:
+  db:
+    image: mariadb:10
+    command: --character-set-server=utf8mb4 --collation-server=utf8mb4_unicode_ci
+    environment:
+      MYSQL_ROOT_PASSWORD: supersecret
+      MYSQL_USER: vikunja
+      MYSQL_PASSWORD: secret
+      MYSQL_DATABASE: vikunja
+    volumes:
+      - ./db:/var/lib/mysql
+    restart: unless-stopped
+  api:
+    image: vikunja/api
+    environment:
+      VIKUNJA_DATABASE_HOST: db
+      VIKUNJA_DATABASE_PASSWORD: secret
+      VIKUNJA_DATABASE_TYPE: mysql
+      VIKUNJA_DATABASE_USER: vikunja
+      VIKUNJA_DATABASE_DATABASE: vikunja
+      VIKUNJA_SERVICE_JWTSECRET: <a super secure random secret>
+      VIKUNJA_SERVICE_FRONTENDURL: https://<your public frontend url with slash>/
+    ports:
+      - 3456:3456
+    volumes:
+      - ./files:/app/vikunja/files
+    depends_on:
+      - db
+    restart: unless-stopped
+  frontend:
+    image: vikunja/frontend
+    ports:
+      - 4321:80
+    environment:
+      VIKUNJA_API_URL: http://vikunja-api-domain.tld/api/v1
+    restart: unless-stopped
+{{< /highlight >}}
+
+You may want to change the volumes to match the rest of your setup.
+
+Once deployed, you might want to change the [`PUID` and `GUID` settings]({{< ref "install-backend.md">}}#setting-user-and-group-id-of-the-user-running-vikunja) or [set the time zone]({{< ref "config.md">}}#timezone).
+
+After registering all your users, you might also want to [disable the user registration]({{<ref "config.md">}}#enableregistration).

docs/content/doc/setup/install-backend.md

@@ -52,7 +52,7 @@ ln -s /opt/vikunja/vikunja /usr/bin/vikunja
 
 ### Systemd service
 
-Take the following `service` file and adapt it to your needs:
+Save the following service file to `/etc/systemd/system/vikunja.service` and adapt it to your needs:
 
 {{< highlight service >}}
 [Unit]
@@ -83,9 +83,7 @@ WantedBy=multi-user.target
 
 If you've installed Vikunja to a directory other than `/opt/vikunja`, you need to adapt `WorkingDirectory` accordingly.
 
-Save the file to `/etc/systemd/system/vikunja.service`
-
-After you made all nessecary modifications, it's time to start the service:
+After you made all necessary modifications, it's time to start the service:
 
 {{< highlight bash >}}
 sudo systemctl enable vikunja
@@ -99,12 +97,12 @@ To build vikunja from source, see [building from source]({{< ref "build-from-sou
 ### Updating
 
 Simply replace the binary and templates with the new version, then restart Vikunja.
-It will automatically run all nessecary database migrations.
+It will automatically run all necessary database migrations.
 **Make sure to take a look at the changelog for the new version to not miss any manual steps the update may involve!**
 
 ## Docker
 
-(Note: this assumes some familarity with docker)
+(Note: this assumes some familiarity with docker)
 
 Usage with docker is pretty straightforward:
 
@@ -121,7 +119,7 @@ You can mount a local configuration like so:
 docker run -p 3456:3456 -v /path/to/config/on/host.yml:/app/vikunja/config.yml:ro vikunja/api
 {{< /highlight >}}
 
-Though it is recommended to use eviroment variables or `.env` files to configure Vikunja in docker.
+Though it is recommended to use environment variables or `.env` files to configure Vikunja in docker.
 See [config]({{< ref "config.md">}}) for a list of available configuration options.
 
 ### Files volume
@@ -131,7 +129,7 @@ You should mount the volume somewhere to the host to permanently store the files
 
 ### Setting user and group id of the user running vikunja
 
-You can set the user and group id of the user running vikunja with the `PUID` and `PGID` evironment variables.
+You can set the user and group id of the user running vikunja with the `PUID` and `PGID` environment variables.
 This follows the pattern used by [the linuxserver.io](https://docs.linuxserver.io/general/understanding-puid-and-pgid) docker images.
 
 This is useful to solve general permission problems when host-mounting volumes such as the volume used for task attachments.
@@ -151,6 +149,7 @@ services:
       VIKUNJA_DATABASE_TYPE: mysql
       VIKUNJA_DATABASE_USER: vikunja
       VIKUNJA_SERVICE_JWTSECRET: <generated secret>
+      VIKUNJA_SERVICE_FRONTENDURL: https://<your public frontend url with slash>/
     volumes:
       - ./files:/app/vikunja/files
   db:
@@ -165,7 +164,7 @@ services:
       - ./db:/var/lib/mysql
 {{< /highlight >}}
 
-See [full docker example]({{< ref "full-docker-example.md">}}) for more varations of this config.
+See [full docker example]({{< ref "full-docker-example.md">}}) for more variations of this config.
 
 ## Debian packages
 

docs/content/doc/setup/install-frontend.md

@@ -24,8 +24,7 @@ You also need to configure a rewrite condition to internally redirect all reques
 By default, the frontend assumes it can reach the api at `/api/v1` relative to the frontend url.
 This means that if you make the frontend available at, say `https://vikunja.example.com`, it tries to reach the api
 at `https://vikunja.example.com/api/v1`.
-In this scenario it is not possible for the frontend and the api to live on seperate servers or even just seperate 
-ports on the same server with [the use of a reverse proxy]({{< ref "reverse-proxies.md">}}).
+In this scenario it is not possible for the frontend and the api to live on separate servers or even just separate ports on the same server with [the use of a reverse proxy]({{< ref "reverse-proxies.md">}}).
 
 To make configurations like this possible, the api url can be set in the `index.html` file of the frontend releases.
 Just open the file with a text editor - there are comments which will explain how to set the url.
@@ -35,7 +34,7 @@ Just open the file with a text editor - there are comments which will explain ho
 
 ## Docker
 
-The docker image is based on nginx and just contains all nessecary files for the frontend.
+The docker image is based on nginx and just contains all necessary files for the frontend.
 
 To run it, all you need is
 
@@ -45,12 +44,9 @@ docker run -p 80:80 vikunja/frontend
 
 which will run the docker image and expose port 80 on the host.
 
-See [full docker example]({{< ref "full-docker-example.md">}}) for more varations of this config.
+See [full docker example]({{< ref "full-docker-example.md">}}) for more variations of this config.
 
-### Setting user and group id of the user running vikunja
-
-You can set the user and group id of the user running vikunja with the `PUID` and `PGID` evironment variables.
-This follows the pattern used by [the linuxserver.io](https://docs.linuxserver.io/general/understanding-puid-and-pgid) docker images.
+The docker container runs as an unprivileged user and does not mount anything.
 
 ### API URL configuration in docker
 

docs/content/doc/setup/install.md

@@ -11,16 +11,20 @@ menu:
 
 # Installing
 
-Vikunja consists of two parts: [Backend](https://code.vikunja.io/api) and [frontend](https://code.vikunja.io/frontend).
-While the backend is required, the frontend is not.
-You don't neccesarily need to have a web-frontend, using Vikunja via the [mobile app](https://code.vikunja.io/app) is totally fine.
+Vikunja consists of two parts: [API](https://code.vikunja.io/api) and [frontend](https://code.vikunja.io/frontend).
 
-However, using the web frontend is highly reccommended.
+You will always need to install at least the API.
+To actually use Vikunja you'll also need to somehow install a frontend to use it.
+You can either:
 
-Vikunja can be installed in various forms. 
+* [Install the web frontend]({{< ref "install-frontend.md">}})
+* Use the desktop app, which is essentially a web frontend packaged for easy installation on desktop devices
+* Use the mobile app only, but as of right now it only supports the very basic features of Vikunja
+
+Vikunja can be installed in various ways. 
 This document provides an overview and instructions for the different methods.
 
-* [Backend]({{< ref "install-backend.md">}})
+* [API]({{< ref "install-backend.md">}})
   * [Installing from binary]({{< ref "install-backend.md#install-from-binary">}})
     * [Verify the GPG signature]({{< ref "install-backend.md#verify-the-gpg-signature">}})
     * [Set it up]({{< ref "install-backend.md#set-it-up">}})
@@ -49,3 +53,7 @@ A third-party Helm Chart is available from the k8s-at-home project [here](https:
 * [Docker Compose is MUCH Easier Than you Think - Let's Install Vikunja](https://www.youtube.com/watch?v=fGlz2PkXjuo) (Youtube)
 * [Setup Vikunja using Docker Compose - Homelab Wiki](https://thehomelab.wiki/books/docker/page/setup-vikunja-using-docker-compose)
 * [A Closer look at Vikunja - Email Notifications - Enable or Disable Registrations - Allow Attachments](https://www.youtube.com/watch?v=47wj9pRT6Gw) (Youtube)
+* [Install Vikunja in Docker for self-hosted Task Tracking](https://smarthomepursuits.com/install-vikunja-in-docker-for-self-hosted-task-tracking/)
+* [Self-Hosted To-Do List with Vikunja in Docker](https://www.youtube.com/watch?v=DqyqDWpEvKI) (Youtube)
+* [Vikunja self-hosted (step by step)](https://nguyenminhhung.com/vikunja-self-hosted-step-by-step/)
+* [How to Install Vikunja on Your Synology NAS](https://mariushosting.com/how-to-install-vikunja-on-your-synology-nas/)

docs/content/doc/setup/k8s.md

@@ -0,0 +1,22 @@
+---
+title: "Hosting Vikunja with k8s"
+date: 2022-08-12T13:41:48+02:00
+draft: false
+type: "doc"
+menu:
+  sidebar:
+    parent: "setup"
+---
+
+# Hosting Vikunja with k8s
+
+We have an official Helm Chart for Vikunja.
+
+Check out [the repo](https://kolaente.dev/vikunja/helm-chart/) for more information about how to use it.
+
+## Third-party Helm Charts
+
+There are two third-party Helm-Charts which can be used to host Vikunja with k8s:
+
+* [Truecharts](https://truecharts.org/charts/stable/vikunja/)
+* [k8s at Home](https://github.com/k8s-at-home/charts)

docs/content/doc/setup/openid-examples.md

@@ -0,0 +1,114 @@
+---
+date: "2022-08-09:00:00+02:00"
+title: "OpenID example configurations"
+draft: false
+type: "doc"
+menu:
+  sidebar:
+    parent: "setup"
+---
+
+# OpenID example configurations
+
+On this page you will find examples about how to set up Vikunja with a third-party OpenID provider.
+To add another example, please [edit this document](https://kolaente.dev/vikunja/api/src/branch/main/docs/content/doc/setup/openid-examples.md) and send a PR.
+
+{{< table_of_contents >}}
+
+## Authelia
+
+Vikunja Config:
+
+```yaml
+openid:
+    enabled: true
+    redirecturl: https://vikunja.mydomain.com/auth/openid/  <---- slash at the end is important
+    providers:
+      - name: Authelia
+        authurl: https://login.mydomain.com
+        clientid: <vikunja-id>
+        clientsecret: <vikunja secret>
+```
+
+Authelia config:
+
+```yaml
+- id: <vikunja-id>
+description: Vikunja
+secret: <vikunja secret>
+redirect_uris:
+  - https://vikunja.mydomain.com/auth/openid/authelia
+scopes:
+  - openid
+  - email
+  - profile
+```
+
+## Google / Google Workspace
+
+Vikunja Config:
+
+```yaml
+openid:
+    enabled: true
+    redirecturl: https://vikunja.mydomain.com/auth/openid/  <---- slash at the end is important
+    providers:
+      - name: Google
+        authurl: https://accounts.google.com
+        clientid: <google-oauth-client-id>
+        clientsecret: <google-oauth-client-secret>
+```
+
+Google config:
+
+- Navigate to `https://console.cloud.google.com/apis/credentials` in the target project
+- Create a new OAuth client ID
+- Configure an authorized redirect URI of `https://vikunja.mydomain.com/auth/openid/google`
+
+Note that there currently seems to be no way to stop creation of new users, even when `enableregistration` is `false` in the configuration. This means that this approach works well only with an "Internal Organization" app for Google Workspace, which limits the allowed users to organizational accounts only. External / public applications will potentially allow every Google user to register.
+
+## Keycloak 
+
+Vikunja Config:
+```yaml
+openid:
+    enabled: true
+    redirecturl: https://vikunja.mydomain.com/auth/openid/  <---- slash at the end is important
+    providers:
+      - name: Keycloak
+        authurl: https://keycloak.mydomain.com/realms/<relam-name>
+        logouturl: https://keycloak.mydomain.com/realms/<relam-name>/protocol/openid-connect/logout
+        clientid: <vikunja-id>
+        clientsecret: <vikunja secret>
+```
+Keycloak Config:
+- Navigate to the keycloak instance
+- Create a new client with the type `OpenID Connect` and a unique ID.
+- Set `Client authentication` to On
+- Set `Root Url` to `https://vikunja.mydomain.com`
+- Set `Valid redirect URIs` to `/auth/openid/keycloak`
+- Create the client the navigate to the credentials tab and copy the `Client secret`
+
+## Authentik
+
+Authentik Config:
+- Create a new Provider called "Vikunja" in Authentik
+- Set the `Redirect URIs/Origins (RegEx)` to `https://vikunja.mydomain.com/auth/openid/authentik`
+- Copy the Client ID and Client Secret
+
+Vikunja Config:
+
+```yaml
+auth:
+  openid:
+    enabled: true
+    redirecturl: "https://vikunja.mydomain.com/auth/openid/"
+    providers:
+      - name: authentik
+        authurl: "https://authentik.mydomain.com/application/o/vikunja"
+        logouturl: "https://authentik.mydomain.com/application/o/vikunja/end-session/"
+        clientid: "" # copy from Authetik
+        clientsecret: "" # copy from Authentik
+```
+
+**Note:** The `authurl` that Vikunja requires is not the `Authorize URL` that you can see in the Provider. Vikunja uses Open ID Discovery to find the correct endpoint to use. Vikunja does this by automatically accessing the `OpenID Configuration URL` (usually `https://authentik.mydomain.com/application/o/vikunja/.well-known/openid-configuration`). Use this URL without the `.well-known/openid-configuration` as the `authurl`.

docs/content/doc/setup/reverse-proxies.md

@@ -1,111 +1,316 @@
----
-date: "2019-02-12:00:00+02:00"
-title: "Reverse Proxy"
-draft: false
-type: "doc"
-menu:
-  sidebar:
-    parent: "setup"
----
-
-# Setup behind a reverse proxy which also serves the frontend
-
-These examples assume you have an instance of the backend running on your server listening on port `3456`.
-If you've changed this setting, you need to update the server configurations accordingly.
-
-{{< table_of_contents >}}
-
-## NGINX
-
-Below are two example configurations which you can put in your `nginx.conf`:
-
-You may need to adjust `server_name` and `root` accordingly.
-
-### with gzip enabled (recommended)
-
-{{< highlight conf >}}
-gzip  on;
-gzip_disable "msie6";
-
-gzip_vary on;
-gzip_proxied any;
-gzip_comp_level 6;
-gzip_buffers 16 8k;
-gzip_http_version 1.1;
-gzip_min_length 256;
-gzip_types text/plain text/css application/json application/x-javascript text/xml application/xml application/xml+rss text/javascript application/vnd.ms-fontobject application/x-font-ttf font/opentype image/svg+xml;
-
-server {
-    listen       80;
-    server_name  localhost;
-
-    location / {
-        root   /path/to/vikunja/static/frontend/files;
-        try_files $uri $uri/ /;
-        index  index.html index.htm;
-    }
-    
-    location ~* ^/(api|dav|\.well-known)/ {
-        proxy_pass http://localhost:3456;
-        client_max_body_size 20M;
-    }
-}
-{{< /highlight >}}
-
-<div class="notification is-warning">
-<b>NOTE:</b> If you change the max upload size in Vikunja's settings, you'll need to also change the <code>client_max_body_size</code> in the nginx proxy config.
-</div>
-
-### without gzip
-
-{{< highlight conf >}}
-server {
-    listen       80;
-    server_name  localhost;
-
-    location / {
-        root   /path/to/vikunja/static/frontend/files;
-        try_files $uri $uri/ /;
-        index  index.html index.htm;
-    }
-    
-    location ~* ^/(api|dav|\.well-known)/ {
-        proxy_pass http://localhost:3456;
-        client_max_body_size 20M;
-    }
-}
-{{< /highlight >}}
-
-<div class="notification is-warning">
-<b>NOTE:</b> If you change the max upload size in Vikunja's settings, you'll need to also change the <code>client_max_body_size</code> in the nginx proxy config.
-</div>
-
-## Apache
-
-Put the following config in `cat /etc/apache2/sites-available/vikunja.conf`:
-
-{{< highlight aconf >}}
-<VirtualHost *:80>
-    ServerName localhost
-   
-    <Proxy *>
-      Order Deny,Allow
-      Allow from all
-    </Proxy>
-    ProxyPass /api http://localhost:3456/api
-    ProxyPassReverse /api http://localhost:3456/api
-    ProxyPass /dav http://localhost:3456/dav
-    ProxyPassReverse /dav http://localhost:3456/dav
-    ProxyPass /.well-known http://localhost:3456/.well-known
-    ProxyPassReverse /.well-known http://localhost:3456/.well-known
-
-    DocumentRoot /var/www/html
-    RewriteEngine On
- 	RewriteRule ^\/?(favicon\.ico|assets|audio|fonts|images|manifest\.webmanifest|robots\.txt|sw\.js|workbox-.*|api|dav|\.well-known) - [L]
-    RewriteRule ^(.*)$ /index.html [QSA,L]
-</VirtualHost>
-{{< /highlight >}}
-
-**Note:** The apache modules `proxy`, `proxy_http` and `rewrite` must be enabled for this.
-
-For more details see the [frontend apache configuration]({{< ref "install-frontend.md#apache">}}).
+---
+date: "2019-02-12:00:00+02:00"
+title: "Reverse Proxy"
+draft: false
+type: "doc"
+menu:
+  sidebar:
+    parent: "setup"
+---
+
+# Setup behind a reverse proxy which also serves the frontend
+
+These examples assume you have an instance of the backend running on your server listening on port `3456`.
+If you've changed this setting, you need to update the server configurations accordingly.
+
+{{< table_of_contents >}}
+
+## NGINX
+
+Below are two example configurations which you can put in your `nginx.conf`:
+
+You may need to adjust `server_name` and `root` accordingly.
+
+### with gzip enabled (recommended)
+
+{{< highlight conf >}}
+gzip  on;
+gzip_disable "msie6";
+
+gzip_vary on;
+gzip_proxied any;
+gzip_comp_level 6;
+gzip_buffers 16 8k;
+gzip_http_version 1.1;
+gzip_min_length 256;
+gzip_types text/plain text/css application/json application/x-javascript text/xml application/xml application/xml+rss text/javascript application/vnd.ms-fontobject application/x-font-ttf font/opentype image/svg+xml;
+
+server {
+    listen       80;
+    server_name  localhost;
+
+    location / {
+        root   /path/to/vikunja/static/frontend/files;
+        try_files $uri $uri/ /;
+        index  index.html index.htm;
+    }
+    
+    location ~* ^/(api|dav|\.well-known)/ {
+        proxy_pass http://localhost:3456;
+        client_max_body_size 20M;
+    }
+}
+{{< /highlight >}}
+
+<div class="notification is-warning">
+<b>NOTE:</b> If you change the max upload size in Vikunja's settings, you'll need to also change the <code>client_max_body_size</code> in the nginx proxy config.
+</div>
+
+### without gzip
+
+{{< highlight conf >}}
+server {
+    listen       80;
+    server_name  localhost;
+
+    location / {
+        root   /path/to/vikunja/static/frontend/files;
+        try_files $uri $uri/ /;
+        index  index.html index.htm;
+    }
+    
+    location ~* ^/(api|dav|\.well-known)/ {
+        proxy_pass http://localhost:3456;
+        client_max_body_size 20M;
+    }
+}
+{{< /highlight >}}
+
+<div class="notification is-warning">
+<b>NOTE:</b> If you change the max upload size in Vikunja's settings, you'll need to also change the <code>client_max_body_size</code> in the nginx proxy config.
+</div>
+
+## NGINX Proxy Manager (NPM)
+
+### Method 1
+
+Following the [Docker Walkthrough]({{< ref "docker-start-to-finish.md" >}}) guide, you should be able to get Vikunja to work via HTTP connection to your server IP.
+
+From there, all you have to do is adjust the following things:
+
+#### In `docker-compose.yml`
+
+Under `api:`, 
+
+1. Change `VIKUNJA_SERVICE_FRONTENDURL:` to your desired domain with `https://` and `/`.
+
+2. Expose your desired port on host under `ports:`.
+
+example:
+
+```yaml
+  api:
+    image: vikunja/api
+    environment:
+      VIKUNJA_DATABASE_HOST: db
+      VIKUNJA_DATABASE_PASSWORD: secret
+      VIKUNJA_DATABASE_TYPE: mysql
+      VIKUNJA_DATABASE_USER: vikunja
+      VIKUNJA_DATABASE_DATABASE: vikunja
+      VIKUNJA_SERVICE_JWTSECRET: <your-random-secret>
+      VIKUNJA_SERVICE_FRONTENDURL: https://vikunja.your-domain.com/ # change vikunja.your-domain.com to your desired domain/subdomain.
+    ports:
+      - 3456:3456 # Change 3456 on the left to the port of your choice.
+    volumes: 
+      - ./files:/app/vikunja/files
+    depends_on:
+      - db
+    restart: unless-stopped
+```
+
+Under `frontend:`,
+
+1. Add `VIKUNJA_API_URL:` under `environment:` and input your desired `API` domain with `https://` and `/api/v1/`. The `API` domain should be different from the one in `VIKUNJA_SERVICE_FRONTENDURL:`.
+
+example:
+
+```yaml
+frontend:
+    image: vikunja/frontend
+    environment:
+      VIKUNJA_API_URL: https://api.your-domain.com/api/v1/ # change api.your-domain.com to your desired domain/subdomain, it should be different from your frontend domain
+    restart: unless-stopped
+```
+
+Under `proxy:`,
+
+1. Since we'll be using Nginx Proxy Manager, it should by default uses the port `80` and thus you should change `ports:` to expose another port not occupied by any service.
+
+example:
+
+```yaml
+  proxy:
+      image: nginx
+      ports: 
+        - 1078:80 # change the number infront (host port) to whatever you desire, but make sure it's not 80 which will be used by Nginx Proxy Manager
+      volumes:
+        - ./nginx.conf:/etc/nginx/conf.d/default.conf:ro
+      depends_on:
+        - api
+        - frontend
+      restart: unless-stopped
+```
+
+#### In your DNS provider
+
+Add two `A` records that points to your server IP. 
+
+1. `vikunja` for accessing the frontend
+
+2. `api` for accessing the api
+
+You are of course free to change them to whatever domain/subdomain you desire and modify the `docker-compose.yml` accordingly but the two should be different.
+
+(Tested on Cloudflare DNS. Settings are different for different DNS provider, in this case the end result should bei `vikunja.your-domain.com` and `api.your-domain.com` respectively.)
+
+#### In Nginx Proxy Manager
+
+Add two Proxy Host as you normally would, and you don't have to add anything extra in Advanced.
+
+##### Frontend
+
+Under `Details`:
+
+```
+Domain Names:
+    vikunja.your-domain.com
+Scheme:
+    http
+Forward Hostname/IP:
+    your-server-ip
+Forward Port:
+    1078
+Cached Assets:
+    Optional.
+Block Common Exploits:
+    Toggled.
+Websockets Support:
+    Toggled.
+```
+
+Under `SSL`:
+
+```
+SSL Certificate:
+    However you prefer.
+Force SSL:
+    Toggled.
+HTTP/2 Support:
+    Toggled.
+HSTS Enabled:
+    Toggled.
+HSTS Subdomains:
+    Toggled.
+Use a DNS Challenge:
+    Not toggled.
+Email Address for Let's Encrypt:
+    your-email@email.com
+```
+
+##### API
+
+Under `Details`:
+
+```
+Domain Names:
+    api.your-domain.com
+Scheme:
+    http
+Forward Hostname/IP:
+    your-server-ip
+Forward Port:
+    3456
+Cached Assets:
+    Optional.
+Block Common Exploits:
+    Toggled.
+Websockets Support:
+    Toggled.
+```
+
+Under `SSL`:
+
+```
+SSL Certificate:
+    However you prefer.
+Force SSL:
+    Toggled.
+HTTP/2 Support:
+    Toggled.
+HSTS Enabled:
+    Toggled.
+HSTS Subdomains:
+    Toggled.
+Use a DNS Challenge:
+    Not toggled.
+Email Address for Let's Encrypt:
+    your-email@email.com
+```
+
+Your Vikunja service should now work and your HTTPS frontend should be able to reach the API after `docker-compose`.
+
+### Method 2
+
+1. Create a standard Proxy Host for the Vikunja Frontend within NPM and point it to the URL you plan to use. The next several steps will enable the Proxy Host to successfully navigate to the API (on port 3456).
+2. Verify that the page will pull up in your browser. (Do not bother trying to log in. It won't work. Trust me.)
+3. Now, we'll work with the NPM container, so you need to identify the container name for your NPM installation. e.g. NGINX-PM
+4. From the command line, enter `sudo docker exec -it [NGINX-PM container name] /bin/bash` and navigate to the proxy hosts folder where the `.conf` files are stashed. Probably `/data/nginx/proxy_host`. (This folder is a persistent folder created in the NPM container and mounted by NPM.)
+5. Locate the `.conf` file where the server_name inside the file matches your Vikunja Proxy Host. Once found, add the following code, unchanged, just above the existing location block in that file. (They are listed by number, not name.)
+```nginx
+location ~* ^/(api|dav|\.well-known)/ {
+		proxy_pass http://api:3456;
+		client_max_body_size 20M;
+	}
+```
+6. After saving the edited file, return to NPM's UI browser window and refresh the page to verify your Proxy Host for Vikunja is still online.
+7. Now, switch over to your Vikunja browser window and hit refresh. If you configured your URL correctly in original Vikunja container, you should be all set and the browser will correctly show Vikunja. If not, you'll need to adjust the address in the top of the login subscreen to match your proxy address.
+
+## Apache
+
+Put the following config in `cat /etc/apache2/sites-available/vikunja.conf`:
+
+{{< highlight aconf >}}
+<VirtualHost *:80>
+    ServerName localhost
+   
+    <Proxy *>
+      Order Deny,Allow
+      Allow from all
+    </Proxy>
+    ProxyPass /api http://localhost:3456/api
+    ProxyPassReverse /api http://localhost:3456/api
+    ProxyPass /dav http://localhost:3456/dav
+    ProxyPassReverse /dav http://localhost:3456/dav
+    ProxyPass /.well-known http://localhost:3456/.well-known
+    ProxyPassReverse /.well-known http://localhost:3456/.well-known
+
+    DocumentRoot /var/www/html
+    RewriteEngine On
+ 	RewriteRule ^\/?(favicon\.ico|assets|audio|fonts|images|manifest\.webmanifest|robots\.txt|sw\.js|workbox-.*|api|dav|\.well-known) - [L]
+    RewriteRule ^(.*)$ /index.html [QSA,L]
+</VirtualHost>
+{{< /highlight >}}
+
+**Note:** The apache modules `proxy`, `proxy_http` and `rewrite` must be enabled for this.
+
+For more details see the [frontend apache configuration]({{< ref "install-frontend.md#apache">}}).
+
+## Caddy
+
+{{< highlight conf >}}
+vikunja.domainname.tld {
+	@paths {
+		path /api/* /.well-known/* /dav/*
+	}
+	handle @paths {
+		reverse_proxy 127.0.0.1:3456
+	}
+
+	handle {
+		encode zstd gzip
+		root * /var/www/html/vikunja
+		try_files {path} index.html
+		file_server
+	}
+}
+{{< /highlight >}}

docs/content/doc/setup/subdirectory.md

@@ -0,0 +1,51 @@
+---
+title: "Running Vikunja in a subdirectory"
+date: 2022-09-23T12:15:04+02:00
+draft: false
+menu:
+  sidebar:
+    parent: "setup"
+---
+
+# Running Vikunja in a subdirectory
+
+Running Vikunja in a subdirectory is not supported out of the box.
+However, you can still run it in a subdirectory but need to build the frontend yourself.
+
+## Frontend
+
+First, make sure you're able to build the frontend from source.
+Check [the guide about building from source]({{< ref "build-from-source.md">}}#frontend) about that.
+
+### Dynamicly set with build command
+
+Run the build with the `VIKUNJA_FRONTEND_BASE` variable specified.
+
+```
+VIKUNJA_FRONTEND_BASE=/SUBPATH/ pnpm run build
+```
+
+Where `SUBPATH` is the subdirectory you want to run Vikunja on.
+
+### Set via .env.local
+
+* Copy `.env.local.example` to `.env.local`
+* Uncomment `VIKUNJA_FRONTEND_BASE` and set `/subpath/` to the desired path.
+
+After saving, build Vikunja as normal.
+
+```
+pnpm run build
+```
+
+Once you have the build files you can deploy them as usual.
+Note that when deploying in docker you'll need to put the files in a web container yourself, you 
+can't use the `Dockerfile` in the repo without modifications.
+
+## API
+
+If you're not using a reverse proxy you're good to go.
+Simply configure the api url in the frontend as you normally would.
+
+If you're using a reverse proxy you'll need to adjust the paths so that the api is available at `/SUBPATH/api/v1`.
+You can check if everything is working correctly by opening `/SUBPATH/api/v1/info` in a browser.

docs/content/doc/setup/typesense.md

@@ -0,0 +1,23 @@
+---
+title: "Typesense"
+date: 2023-09-29T12:23:55+02:00
+draft: false
+menu:
+  sidebar:
+    parent: "setup"
+---
+
+# Use Typesense for enhanced search capabilities
+
+Vikunja supports using [Typesense](https://typesense.org/) for a better search experience.
+Typesense allows fast fulltext search including fuzzy matching support. 
+It may return different results than what you'd get with a database-only search, but generally, the results are more relevant to what you're looking for.
+
+This document explains how to set up and use Typesense with Vikunja.
+
+## Setup
+
+1. First, install Typesense on your system. Refer to [their documentation](https://typesense.org/docs/guide/install-typesense.html) for specific instructions.
+2. Once Typesense is available on your system and reachable by Vikunja, add the relevant configuration keys to your Vikunja config. [Check out the docs article about this]({{< ref "config.md#typesense">}}).
+3. Index all tasks currently in Vikunja. To do that, run the `vikunja index` command with the api binary. This may take a while, depending on the size of your instance.
+4. Restart the api. From now on, all task changes will be automatically indexed in Typesense.

docs/content/doc/setup/utf-8.md

@@ -11,11 +11,9 @@ menu:
 # UTF-8 Settings
 
 Vikunja itself is always fully capable of handling utf-8 characters.
-However, your database might be not. 
-Vikunja itself will work just fine until you want to use non-latin characters in your tasks/lists/etc.
+However, your database might be not. Vikunja itself will work just fine until you want to use non-latin characters in your tasks/projects/etc.
 
-On this page, you will find information about how to fully ensure non-latin characters like aüäß or emojis work 
-with your installation.
+On this page, you will find information about how to fully ensure non-latin characters like *aüäß* or emojis work with your installation.
 
 {{< table_of_contents >}}
 
@@ -57,8 +55,7 @@ Before attempting any conversion, please [back up your database]({{< ref "backup
 
 ### 1. Create a pre-conversion script
 
-Copy the following sql statements in a file called `preAlterTables.sql` and replace all occurences of `vikunja` with 
-the name of your database:
+Copy the following sql statements in a file called `preAlterTables.sql` and replace all occurrences of `vikunja` with the name of your database:
 
 {{< highlight sql >}}
 use information_schema;

docs/content/doc/setup/versions.md

@@ -0,0 +1,45 @@
+---
+date: "2022-07-07:00:00+02:00"
+title: "Versions"
+draft: false
+type: "doc"
+menu:
+  sidebar:
+    parent: "setup"
+---
+
+# Vikunja Versions
+
+The Vikunja api and frontend are available in two different release flavors.
+
+{{< table_of_contents >}}
+
+## Stable
+
+Stable releases have a fixed version number like `0.18.2` and are published at irregular intervals whenever a new version is ready.
+They receive few bugfixes and security patches.
+
+We use [Semantic Versioning](https://semver.org) for these releases.
+
+## Unstable
+
+Unstable versions are build every time a PR is merged or a commit to the main development branch is made.
+As such, they contain the current development code and are more likely to have bugs.
+There might be multiple new such builds a day.
+
+Versions contain the last stable version, the number of commits since then and the commit the currently running binary was built from.
+They look like this: `v0.18.1+269-5cc4927b9e`
+
+The demo instance at [try.vikunja.io](https://try.vikunja.io) automatically updates and always runs the last unstable build.
+
+## Switching between versions
+
+First you should create a backup of your current setup!
+
+Switching between versions is the same process as [upgrading]({{< ref install-backend.md >}}#updating).
+Simply replace the stable binary with an unstable one or vice-versa.
+
+For installations using docker, it is as simple as using the `unstable` or `latest` tag to switch between versions.
+
+**Note:** While switching from stable to unstable should work without any problem, switching back might work but is not recommended and might break your instance.
+To switch from unstable back to stable the best way is to wait for the next stable release after the used unstable build and then upgrade to that.

docs/content/doc/usage/api.md

@@ -10,10 +10,10 @@ menu:
 
 # API Documentation
 
-You can find the api docs under `http://vikunja.tld/api/v1/docs` of your instance. 
-A public instance is available on [try.vikunja.io](http://try.vikunja.io/api/v1/docs).
+You can find the api docs under `http://vikunja.tld/api/v1/docs` of your instance.<br  />
+A public instance is available on [try.vikunja.io](https://try.vikunja.io/api/v1/docs).
 
-These docs are autgenerated from annotations in the code with swagger.
+These docs are autogenerated from annotations in the code with swagger.
 
 The specification is hosted at `http://vikunja.tld/api/v1/docs.json`.
-You can use this to embed it into other openapi compatible applications if you want.
+You can use this to embed it into other OpenAPI compatible applications if you want.

docs/content/doc/usage/caldav.md

@@ -1,6 +1,6 @@
 ---
 date: "2019-05-12:00:00+01:00"
-title: "Caldav"
+title: "CalDAV"
 draft: false
 type: "doc"
 menu:
@@ -8,11 +8,11 @@ menu:
     parent: "usage"
 ---
 
-# Caldav
+# CalDAV
 
-> **Warning:** The caldav integration is in an early alpha stage and has bugs. 
+> **Warning:** The CalDAV integration is in an early alpha stage and has bugs.
 > It works well with some clients while having issues with others.
-> If you encounter issues, please [report them](https://code.vikunja.io/api/issues/new?body=[caldav]) 
+> If you encounter issues, please [report them](https://code.vikunja.io/api/issues/new?body=[caldav])
 
 Vikunja supports managing tasks via the [caldav VTODO](https://tools.ietf.org/html/rfc5545#section-3.6.2) extension.
 
@@ -24,10 +24,10 @@ All urls are located under the `/dav` subspace.
 
 Urls are:
 
-* `/principals/<username>/`: Returns urls for list discovery. *Use this url to initially make connections to new clients.*
-* `/lists/`: Used to manage lists
-* `/lists/<List ID>/`: Used to manage a single list
-* `/lists/<List ID>/<Task UID>`: Used to manage a task on a list
+* `/principals/<username>/`: Returns urls for project discovery. *Use this url to initially make connections to new clients.*
+* `/projects/`: Used to manage projects
+* `/projects/<Project ID>/`: Used to manage a single project
+* `/projects/<Project ID>/<Task UID>`: Used to manage a task on a project
 
 ## Supported properties
 
@@ -37,49 +37,50 @@ Vikunja currently supports the following properties:
 * `SUMMARY`
 * `DESCRIPTION`
 * `PRIORITY`
+* `CATEGORIES`
 * `COMPLETED`
+* `CREATED` (only Vikunja → Client)
 * `DUE`
-* `DTSTART`
 * `DURATION`
-* `ORGANIZER`
-* `RELATED-TO`
-* `CREATED`
 * `DTSTAMP`
-* `LAST-MODIFIED`
+* `DTSTART`
+* `LAST-MODIFIED` (only Vikunja → Client)
+* `RRULE` (Recurrence) (only Vikunja → Client)
+* `VALARM` (Reminders)
 
 Vikunja **currently does not** support these properties:
 
 * `ATTACH`
-* `CATEGORIES`
 * `CLASS`
 * `COMMENT`
+* `CONTACT`
 * `GEO`
 * `LOCATION`
+* `ORGANIZER` (disabled)
 * `PERCENT-COMPLETE`
-* `RESOURCES`
-* `STATUS`
-* `CONTACT`
 * `RECURRENCE-ID`
-* `URL`
-* Recurrence
+* `RELATED-TO`
+* `RESOURCES`
 * `SEQUENCE`
+* `STATUS`
+* `URL`
 
 ## Tested Clients
 
 ### Working
 
 * [Evolution](https://wiki.gnome.org/Apps/Evolution/)
-* [OpenTasks](https://opentasks.app/) + [DAVx⁵](https://www.davx5.com/)
+* [OpenTasks](https://opentasks.app/) & [DAVx⁵](https://www.davx5.com/)
 * [Tasks (Android)](https://tasks.org/)
 
 ### Not working
 
 * [Thunderbird (68)](https://www.thunderbird.net/)
-* iOS calDAV Sync (See [#753](https://kolaente.dev/vikunja/api/issues/753))
+* iOS CalDAV Sync (See [#753](https://kolaente.dev/vikunja/api/issues/753))
 
 ## Dev logs
 
-The whole thing is not optimized at all and probably pretty inefficent.
+The whole thing is not optimized at all and probably pretty inefficient.
 
 Request body and headers are logged if the debug output is enabled.
 
@@ -140,6 +141,4 @@ Requests from the app:::
 And then it just stops.
 ... and complains about not being able to find the home set
 ... without even requesting it...
-
-
 ```

docs/content/doc/usage/cli.md

@@ -10,7 +10,7 @@ menu:
 
 # Command line interface
 
-You can interact with Vikunja using its `cli` interface. 
+You can interact with Vikunja using its `cli` interface.<br />
 The following commands are available:
 
 * [dump](#dump)
@@ -26,6 +26,15 @@ If you don't specify a command, the [`web`](#web) command will be executed.
 
 All commands use the same standard [config file]({{< ref "../setup/config.md">}}).
 
+## Using the cli in docker
+
+When running Vikunja in docker, you'll need to execute all commands in the `api` container.
+Instead of running the `vikunja` binary directly, run it like this:
+
+```sh
+docker exec <name of the vikunja api container> /app/vikunja/vikunja <subcommand>
+```
+
 ### `dump`
 
 Creates a zip file with all vikunja-related files.
@@ -71,12 +80,12 @@ Roll migrations back until a certain point.
 
 Usage:
 {{< highlight bash >}}
-$ vikunja migrate rollback [flags]    
+$ vikunja migrate rollback [flags]
 {{< /highlight >}}
 
 Flags:
 * `-n`, `--name` string: The id of the migration you want to roll back until.
- 
+
 ### `restore`
 
 Restores a previously created dump from a zip file, see `dump`.
@@ -127,6 +136,21 @@ Flags:
 * `-p`, `--password`: The password of the new user. You will be asked to enter it if not provided through the flag.
 * `-u`, `--username`: The username of the new user.
 
+#### `user delete`
+
+Start the user deletion process.
+If called without the `--now` flag, this command will only trigger an email to the user in order for them to confirm and start the deletion process (this is the same behavoir as if the user requested their deletion via the web interface).
+With the flag the user is deleted **immediately**.
+
+**USE WITH CAUTION.**
+
+{{< highlight bash >}}
+$ vikunja user delete <id> <flags>
+{{< /highlight >}}
+
+Flags:
+* `-n`, `--now` If provided, deletes the user immediately instead of emailing them first.
+
 #### `user list`
 
 Shows a list of all users.
@@ -170,7 +194,7 @@ This is either the semantic version (something like `0.7`) or version + git comm
 
 Usage:
 {{< highlight bash >}}
-$ vikunja version    
+$ vikunja version
 {{< /highlight >}}
 
 ### `web`
@@ -179,5 +203,5 @@ Starts Vikunja's REST api server.
 
 Usage:
 {{< highlight bash >}}
-$ vikunja web    
+$ vikunja web
 {{< /highlight >}}

docs/content/doc/usage/errors.md

@@ -4,8 +4,8 @@ title: "Errors"
 draft: false
 type: "doc"
 menu:
-  sidebar:
-    parent: "usage"
+sidebar:
+parent: "usage"
 ---
 
 # Errors
@@ -24,24 +24,26 @@ This document describes the different errors Vikunja can return.
 
 | ErrorCode | HTTP Status Code | Description |
 |-----------|------------------|-------------|
-| 1001 | 400 | A user with this username already exists. |
-| 1002 | 400 | A user with this email address already exists. |
-| 1004 | 400 | No username and password specified. |
-| 1005 | 404 | The user does not exist. |
-| 1006 | 400 | Could not get the user id. |
-| 1008 | 412 | No password reset token provided. |
-| 1009 | 412 | Invalid password reset token. |
-| 1010 | 412 | Invalid email confirm token. |
-| 1011 | 412 | Wrong username or password. |
-| 1012 | 412 | Email address of the user not confirmed. |
-| 1013 | 412 | New password is empty. |
-| 1014 | 412 | Old password is empty. |
-| 1015 | 412 | Totp is already enabled for this user. |
-| 1016 | 412 | Totp is not enabled for this user. |
-| 1017 | 412 | The provided Totp passcode is invalid. |
-| 1018 | 412 | The provided user avatar provider type setting is invalid. |
-| 1019 | 412 | No openid email address was provided. |
-| 1020 | 412 | This user account is disabled. |
+| 1001      | 400 | A user with this username already exists. |
+| 1002      | 400 | A user with this email address already exists. |
+| 1004      | 400 | No username and password specified. |
+| 1005      | 404 | The user does not exist. |
+| 1006      | 400 | Could not get the user id. |
+| 1008      | 412 | No password reset token provided. |
+| 1009      | 412 | Invalid password reset token. |
+| 1010      | 412 | Invalid email confirm token. |
+| 1011      | 412 | Wrong username or password. |
+| 1012      | 412 | Email address of the user not confirmed. |
+| 1013      | 412 | New password is empty. |
+| 1014      | 412 | Old password is empty. |
+| 1015      | 412 | Totp is already enabled for this user. |
+| 1016      | 412 | Totp is not enabled for this user. |
+| 1017      | 412 | The provided Totp passcode is invalid. |
+| 1018      | 412 | The provided user avatar provider type setting is invalid. |
+| 1019      | 412 | No openid email address was provided. |
+| 1020      | 412 | This user account is disabled. |
+| 1021      | 412 | This account is managed by a third-party authentication provider. |
+| 1021      | 412 | The username must not contain spaces. |
 
 ## Validation
 
@@ -50,70 +52,66 @@ This document describes the different errors Vikunja can return.
 | 2001 | 400 | ID cannot be empty or 0. |
 | 2002 | 400 | Some of the request data was invalid. The response contains an aditional array with all invalid fields. |
 
-## List
+## Project
 
-| ErrorCode | HTTP Status Code | Description |
-|-----------|------------------|-------------|
-| 3001 | 404 | The list does not exist. |
-| 3004 | 403 | The user needs to have read permissions on that list to perform that action. |
-| 3005 | 400 | The list title cannot be empty. |
-| 3006 | 404 | The list share does not exist. |
-| 3007 | 400 | A list with this identifier already exists. |
-| 3008 | 412 | The list is archived and can therefore only be accessed read only. This is also true for all tasks associated with this list. |
+| ErrorCode | HTTP Status Code | Description                                                                                                                         |
+|-----------|------------------|-------------------------------------------------------------------------------------------------------------------------------------|
+| 3001      | 404 | The project does not exist.                                                                                                         |
+| 3004      | 403 | The user needs to have read permissions on that project to perform that action.                                                     |
+| 3005      | 400 | The project title cannot be empty.                                                                                                  |
+| 3006      | 404 | The project share does not exist.                                                                                                   |
+| 3007      | 400 | A project with this identifier already exists.                                                                                      |
+| 3008      | 412 | The project is archived and can therefore only be accessed read only. This is also true for all tasks associated with this project. |
+| 3009      | 412 | The project cannot belong to a dynamically generated parent project like "Favorites".                                               |
+| 3010      | 412 | This project cannot be a child of itself.                                                                                           |
+| 3011      | 412 | This project cannot have a cyclic relationship to a parent project.                                                                 |
+| 3012      | 412 | This project cannot be deleted because a user has set it as their default project.                                                  |
+| 3013      | 412 | This project cannot be archived because a user has set it as their default project.                                                 |
 
 ## Task
 
 | ErrorCode | HTTP Status Code | Description |
 |-----------|------------------|-------------|
-| 4001 | 400 | The list task text cannot be empty. |
-| 4002 | 404 | The list task does not exist. |
-| 4003 | 403 | All bulk editing tasks must belong to the same list. |
+| 4001 | 400 | The project task text cannot be empty. |
+| 4002 | 404 | The project task does not exist. |
+| 4003 | 403 | All bulk editing tasks must belong to the same project. |
 | 4004 | 403 | Need at least one task when bulk editing tasks. |
 | 4005 | 403 | The user does not have the right to see the task. |
 | 4006 | 403 | The user tried to set a parent task as the task itself. |
 | 4007 | 400 | The user tried to create a task relation with an invalid kind of relation. |
 | 4008 | 409 | The user tried to create a task relation which already exists. |
-| 4009 | 404 | The task relation does not exist. | 
+| 4009 | 404 | The task relation does not exist. |
 | 4010 | 400 | Cannot relate a task with itself. |
 | 4011 | 404 | The task attachment does not exist. |
 | 4012 | 400 | The task attachment is too large. |
 | 4013 | 400 | The task sort param is invalid. |
 | 4014 | 400 | The task sort order is invalid. |
 | 4015 | 404 | The task comment does not exist. |
-| 4016 | 403 | Invalid task field. |
-| 4017 | 403 | Invalid task filter comparator. |
-| 4018 | 403 | Invalid task filter concatinator. |
-| 4019 | 403 | Invalid task filter value. |
-
-## Namespace
-
-| ErrorCode | HTTP Status Code | Description |
-|-----------|------------------|-------------|
-| 5001 | 404 | The namspace does not exist. | 
-| 5003 | 403 | The user does not have access to the specified namespace. |
-| 5006 | 400 | The namespace name cannot be empty. |
-| 5009 | 403 | The user needs to have namespace read access to perform that action. |
-| 5010 | 403 | This team does not have access to that namespace. |
-| 5011 | 409 | This user has already access to that namespace. |
-| 5012 | 412 | The namespace is archived and can therefore only be accessed read only. |
+| 4016 | 400 | Invalid task field. |
+| 4017 | 400 | Invalid task filter comparator. |
+| 4018 | 400 | Invalid task filter concatinator. |
+| 4019 | 400 | Invalid task filter value. |
+| 4020 | 400 | The provided attachment does not belong to that task. |
+| 4021 | 400 | This user is already assigned to that task. |
+| 4022 | 400 | The task has a relative reminder which does not specify relative to what. |
 
 ## Team
 
-| ErrorCode | HTTP Status Code | Description |
-|-----------|------------------|-------------|
-| 6001 | 400 | The team name cannot be emtpy. |
-| 6002 | 404 | The team does not exist. |
-| 6004 | 409 | The team already has access to that namespace or list. |
-| 6005 | 409 | The user is already a member of that team. |
-| 6006 | 400 | Cannot delete the last team member. |
-| 6007 | 403 | The team does not have access to the list to perform that action. |
+| ErrorCode | HTTP Status Code | Description                                                          |
+|-----------|------------------|----------------------------------------------------------------------|
+| 6001 | 400 | The team name cannot be empty.                                       |
+| 6002 | 404 | The team does not exist.                                             |
+| 6004 | 409 | The team already has access to that project.                         |
+| 6005 | 409 | The user is already a member of that team.                           |
+| 6006 | 400 | Cannot delete the last team member.                                  |
+| 6007 | 403 | The team does not have access to the project to perform that action. |
 
-## User List Access
+## User Project Access
 
 | ErrorCode | HTTP Status Code | Description |
 |-----------|------------------|-------------|
-| 7002 | 409 | The user already has access to that list. |
-| 7003 | 403 | The user does not have access to that list. |
+| 7002 | 409 | The user already has access to that project. |
+| 7003 | 403 | The user does not have access to that project. |
 
 ## Label
 
@@ -127,24 +125,24 @@ This document describes the different errors Vikunja can return.
 
 | ErrorCode | HTTP Status Code | Description |
 |-----------|------------------|-------------|
-| 9001 | 403 | The right is invalid. | 
+| 9001 | 403 | The right is invalid. |
 
 ## Kanban
 
 | ErrorCode | HTTP Status Code | Description |
 |-----------|------------------|-------------|
 | 10001 | 404 | The bucket does not exist. |
-| 10002 | 400 | The bucket does not belong to that list. |
-| 10003 | 412 | You cannot remove the last bucket on a list. |
+| 10002 | 400 | The bucket does not belong to that project. |
+| 10003 | 412 | You cannot remove the last bucket on a project. |
 | 10004 | 412 | You cannot add the task to this bucket as it already exceeded the limit of tasks it can hold. |
-| 10005 | 412 | There can be only one done bucket per list. |
+| 10005 | 412 | There can be only one done bucket per project. |
 
 ## Saved Filters
 
 | ErrorCode | HTTP Status Code | Description |
 |-----------|------------------|-------------|
 | 11001 | 404 | The saved filter does not exist. |
-| 11002 | 412 | Saved filters are not available for link shares. | 
+| 11002 | 412 | Saved filters are not available for link shares. |
 
 ## Subscriptions
 
@@ -155,7 +153,8 @@ This document describes the different errors Vikunja can return.
 
 ## Link Shares
 
-| ErrorCode | HTTP Status Code | Description |
-|-----------|------------------|-------------|
+| ErrorCode | HTTP Status Code | Description                                                                    |
+|-----------|------------------|--------------------------------------------------------------------------------|
 | 13001 | 412 | This link share requires a password for authentication, but none was provided. |
-| 13002 | 403 | The provided link share password was invalid. |
+| 13002 | 403 | The provided link share password is invalid.                                   |
+| 13003 | 400 | The provided link share token is invalid.                                      |

docs/content/doc/usage/n8n.md

@@ -0,0 +1,43 @@
+---
+title: "n8n"
+date: 2023-10-24T19:31:35+02:00
+draft: false
+menu:
+    sidebar:
+        parent: "usage"
+---
+
+# Using Vikunja with n8n
+
+Vikunja maintains a [community node](https://github.com/go-vikunja/n8n-vikunja-nodes) for [n8n](https://n8n.io),
+allowing you to easily integrate Vikunja with all kinds of other tools and services.
+
+{{< table_of_contents >}}
+
+## Installation
+
+To install the node in your n8n installation:
+
+1. In your n8n instance, go to **Settings > Community Nodes**.
+2. Select Install.
+3. Enter `n8n-nodes-vikunja` as the npm Package Name
+4. Agree to the risks of using community nodes: select I understand the risks of installing unverified code from a
+   public source.
+5. Select Install. n8n installs the node, and returns to the Community Nodes list in Settings.
+6. Vikunja actions and triggers are now available in n8n.
+
+[Official n8n docs about the installation](https://docs.n8n.io/integrations/community-nodes/installation/)
+
+## Authentication
+
+To authenticate your automation against Vikunja:
+
+1. In Vikunja, go to **Settings > API Tokens** and create a new token. Use all scopes for the kind of task you want to
+   do. \
+   *Note:* If you want to use the webhook trigger node, the api token should have permissions to create, read and delete
+   webhooks.
+2. Now in n8n, go to **Credentials** and then click on **Add Credential**.
+3. Search for `Vikunja API` and click *Continue*
+4. Enter the API key you created in step 1.
+5. Enter the API URL of your Vikunja instance, with `/api/v1` suffix.
+6. When you now create a Vikunja node, select the created credentials.

docs/content/doc/usage/relation_kinds.md

@@ -10,16 +10,16 @@ menu:
 
 # Available task relation kinds
 
-| Code | Description |
-|------|-------------|
-| subtask | Task is a subtask of the other task. This is the opposite of `parenttask`. |
-| parenttask | Task is a parent task of the other task. This is the opposite of `subtask`. |
-| related | Both tasks are related to each other. How is not more specified. |
-| duplicateof | Task is a duplicate of the other task. This is the opposite of `duplicates`. |
-| duplicates | Task duplicates the other task. This is the opposite of `duplicateof`. |
-| blocking | Task is blocking the other task. This is the opposite of `blocked`. |
-| blocked | Task is blocked by the other task. This is the opposite of `blocking`. |
-| precedes | Task precedes the other task. This is the opposite of `follows`. |
-| follows | Task follows the other task. This is the opposite of `precedes`. |
-| copiedfrom | Task is copied from the other task. This is the opposite of `copiedto`. |
-| copiedto | Task is copied to the other task. This is the opposite of `copiedfrom`. |
+| Code | Description | Opposite of |
+|------|-------------|-------------|
+| `subtask` | Task is a subtask of the other task.       | `parenttask` |
+| `parenttask` | Task is a parent task of the other task. | `subtask` |
+| `related` | Both tasks are related to each other.<br  /> How is not more specified. | ⸺ |
+| `duplicateof` | Task is a duplicate of the other task. | `duplicates` |
+| `duplicates` | Task duplicates the other task. | `duplicateof` |
+| `blocking` | Task is blocking the other task. | `blocked` |
+| `blocked` | Task is blocked by the other task. | `blocking` |
+| `precedes` | Task precedes the other task. | `follows` |
+| `follows` | Task follows the other task. | `precedes` |
+| `copiedfrom` | Task is copied from the other task. | `copiedto` |
+| `copiedto` | Task is copied to the other task. | `copiedfrom` |

docs/content/doc/usage/rights.md

@@ -8,22 +8,22 @@ menu:
     parent: "usage"
 ---
 
-# List and namespace rights for teams and users
+# Project rights for teams and users
 
-Whenever you share a list or namespace with a user or team, you can specify a `rights` parameter. 
+Whenever you share a project with a user or team, you can specify a `rights` parameter.
 This parameter controls the rights that team or user is going to have (or has, if you request the current sharing status).
 
 Rights are being specified using integers.
 
 The following values are possible:
 
-| Right (int) | Meaning |
-|-------------|---------|
-| 0 (Default) | Read only. Anything which is shared with this right cannot be edited. |
-| 1 | Read and write. Namespaces or lists shared with this right can be read and written to by the team or user. |
-| 2 | Admin. Can do anything like read and write, but can additionally manage sharing options. |
+| Right (int) | Meaning                                                                                         |
+|-------------|-------------------------------------------------------------------------------------------------|
+| 0 (Default) | Read only. Anything which is shared with this right cannot be edited.                           |
+| 1           | Read and write. Projects shared with this right can be read and written to by the team or user. |
+| 2           | Admin. Can do anything like read and write, but can additionally manage sharing options.        |
 
 ## Team admins
 
 When adding or querying a team, every member has an additional boolean value stating if it is admin or not.
-A team admin can also add and remove team members and also change whether a user in the team is admin or not.
+A team admin can also add and remove team members and also change whether a user in the team is admin or not.

docs/content/doc/usage/webhooks.md

@@ -0,0 +1,58 @@
+---
+title: "Webhooks"
+date: 2023-10-17T19:51:32+02:00
+draft: false
+type: doc
+menu:
+  sidebar:
+    parent: "usage"
+---
+
+# Webhooks
+
+Starting with version 0.22.0, Vikunja allows you to define webhooks to notify other services of events happening within Vikunja.
+
+{{< table_of_contents >}}
+
+## How to create webhooks
+
+To create a webhook, in the project options select "Webhooks". The form will allow you to create and modify webhooks.
+
+Check out [the api docs](https://try.vikunja.io/api/v1/docs#tag/webhooks) for information about how to create webhooks programatically.
+
+## Available events and their payload
+
+All events registered as webhook events in [the event listeners definition](https://kolaente.dev/vikunja/api/src/branch/main/pkg/models/listeners.go#L69) can be used as webhook target.
+
+A webhook payload will look similar to this:
+
+```json
+{
+	"event_name": "task.created",
+	"time": "2023-10-17T19:39:32.924194436+02:00",
+	"data": {}
+}
+```
+
+The `data` property will contain the raw event data as it was registered in the `listeners.go` file.
+
+The `time` property holds the time when the webhook payload data was sent.
+It always uses the ISO 8601 format with date, time and time zone offset.
+
+## Security considerations
+
+### Signing
+
+Vikunja allows you to provide a secret when creating the webhook.
+If you set a secret, all outgoing webhook requests will contain an `X-Vikunja-Signature` header with an HMAC signature over the webhook json payload.
+
+Check out [webhooks.fyi](https://webhooks.fyi/security/hmac) for more information about how to validate the HMAC signature.
+
+### Hosting webhook infrastructure
+
+Vikunja has support to use [mole](https://github.com/frain-dev/mole) as a proxy for outgoing webhook requests.
+This allows you to prevent SSRF attacts on your own infrastructure.
+
+You should use this and [configure it appropriately]({{< ref "../setup/config.md">}}#webhooks) if you're not the only one using your Vikunja instance.
+
+Check out [webhooks.fyi](https://webhooks.fyi/best-practices/webhook-providers#implement-security-on-egress-communication) for more information about the attack vector and reasoning to prevent this.

docs/nginx.conf

@@ -18,4 +18,8 @@ server {
     location /docs/contact {
         return 301 $scheme://vikunja.io/en/contact;
     }
+    
+    location /docs/docs {
+        return 301 $scheme://vikunja.io/docs;
+    }
 }

go.mod

@@ -18,74 +18,173 @@ module code.vikunja.io/api
 
 require (
 	code.vikunja.io/web v0.0.0-20210706160506-d85def955bd3
-	gitea.com/xorm/xorm-redis-cache v0.2.0
-	github.com/ThreeDotsLabs/watermill v1.1.1
-	github.com/adlio/trello v1.9.0
-	github.com/alecthomas/template v0.0.0-20190718012654-fb15b899a751
-	github.com/asaskevich/govalidator v0.0.0-20200907205600-7a23bdc65eef
-	github.com/beevik/etree v1.1.0 // indirect
-	github.com/c2h5oh/datasize v0.0.0-20200825124411-48ed595a09d2
-	github.com/coreos/go-oidc/v3 v3.0.0
+	dario.cat/mergo v1.0.0
+	github.com/ThreeDotsLabs/watermill v1.3.5
+	github.com/adlio/trello v1.10.0
+	github.com/arran4/golang-ical v0.2.3
+	github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2
+	github.com/bbrks/go-blurhash v1.1.1
+	github.com/c2h5oh/datasize v0.0.0-20231215233829-aa82cc1e6500
+	github.com/coreos/go-oidc/v3 v3.9.0
 	github.com/cweill/gotests v1.6.0
 	github.com/d4l3k/messagediff v1.2.1
 	github.com/disintegration/imaging v1.6.2
-	github.com/dustinkirkland/golang-petname v0.0.0-20191129215211-8e5a1ed0cff0
-	github.com/gabriel-vasile/mimetype v1.3.1
-	github.com/getsentry/sentry-go v0.11.0
-	github.com/go-errors/errors v1.1.1 // indirect
-	github.com/go-redis/redis/v8 v8.11.3
-	github.com/go-sql-driver/mysql v1.6.0
-	github.com/go-testfixtures/testfixtures/v3 v3.6.1
-	github.com/golang-jwt/jwt/v4 v4.0.0
+	github.com/dustinkirkland/golang-petname v0.0.0-20231002161417-6a283f1aaaf2
+	github.com/gabriel-vasile/mimetype v1.4.3
+	github.com/getsentry/sentry-go v0.26.0
+	github.com/go-sql-driver/mysql v1.7.1
+	github.com/go-testfixtures/testfixtures/v3 v3.9.0
+	github.com/gocarina/gocsv v0.0.0-20231116093920-b87c2d0e983a
+	github.com/golang-jwt/jwt/v5 v5.2.0
 	github.com/golang/freetype v0.0.0-20170609003504-e2365dfdc4a0
-	github.com/golang/snappy v0.0.4 // indirect
-	github.com/iancoleman/strcase v0.2.0
-	github.com/imdario/mergo v0.3.12
-	github.com/labstack/echo/v4 v4.5.0
-	github.com/labstack/gommon v0.3.0
-	github.com/laurent22/ical-go v0.1.1-0.20181107184520-7e5d6ade8eef
-	github.com/lib/pq v1.10.3
-	github.com/magefile/mage v1.11.0
-	github.com/mattn/go-isatty v0.0.13 // indirect
-	github.com/mattn/go-sqlite3 v1.14.8
+	github.com/google/uuid v1.6.0
+	github.com/hashicorp/go-version v1.6.0
+	github.com/iancoleman/strcase v0.3.0
+	github.com/jinzhu/copier v0.4.0
+	github.com/jszwedko/go-datemath v0.1.1-0.20230526204004-640a500621d6
+	github.com/labstack/echo-jwt/v4 v4.2.0
+	github.com/labstack/echo/v4 v4.11.4
+	github.com/labstack/gommon v0.4.2
+	github.com/lib/pq v1.10.9
+	github.com/magefile/mage v1.15.0
+	github.com/mattn/go-sqlite3 v1.14.20
 	github.com/olekukonko/tablewriter v0.0.5
 	github.com/op/go-logging v0.0.0-20160315200505-970db520ece7
-	github.com/pquerna/otp v1.3.0
-	github.com/prometheus/client_golang v1.11.0
+	github.com/pquerna/otp v1.4.0
+	github.com/prometheus/client_golang v1.18.0
+	github.com/redis/go-redis/v9 v9.4.0
 	github.com/robfig/cron/v3 v3.0.1
 	github.com/samedi/caldav-go v3.0.0+incompatible
-	github.com/spf13/afero v1.6.0
-	github.com/spf13/cobra v1.2.1
-	github.com/spf13/viper v1.8.1
-	github.com/stretchr/testify v1.7.0
-	github.com/swaggo/swag v1.7.1
-	github.com/ulule/limiter/v3 v3.8.0
-	github.com/yuin/goldmark v1.4.0
-	golang.org/x/crypto v0.0.0-20210817164053-32db794688a5
-	golang.org/x/image v0.0.0-20210628002857-a66eb6448b8d
-	golang.org/x/net v0.0.0-20210614182718-04defd469f4e // indirect
-	golang.org/x/oauth2 v0.0.0-20210819190943-2bc19b11175f
-	golang.org/x/sync v0.0.0-20210220032951-036812b2e83c
-	golang.org/x/sys v0.0.0-20210903071746-97244b99971b
-	golang.org/x/term v0.0.0-20210615171337-6886f2dfbf5b
-	gopkg.in/alexcesaro/quotedprintable.v3 v3.0.0-20150716171945-2caba252f4dc // indirect
+	github.com/spf13/afero v1.11.0
+	github.com/spf13/cobra v1.8.0
+	github.com/spf13/viper v1.18.2
+	github.com/stretchr/testify v1.8.4
+	github.com/swaggo/swag v1.16.2
+	github.com/tkuchiki/go-timezone v0.2.2
+	github.com/typesense/typesense-go v1.0.0
+	github.com/ulule/limiter/v3 v3.11.2
+	github.com/wneessen/go-mail v0.4.0
+	github.com/yuin/goldmark v1.6.0
+	golang.org/x/crypto v0.18.0
+	golang.org/x/image v0.15.0
+	golang.org/x/oauth2 v0.16.0
+	golang.org/x/sync v0.6.0
+	golang.org/x/sys v0.16.0
+	golang.org/x/term v0.16.0
+	golang.org/x/text v0.14.0
 	gopkg.in/d4l3k/messagediff.v1 v1.2.1
-	gopkg.in/gomail.v2 v2.0.0-20160411212932-81ebce5c23df
-	gopkg.in/yaml.v3 v3.0.0-20210107192922-496545a6307b
-	src.techknowlogick.com/xgo v1.4.1-0.20210311222705-d25c33fcd864
-	src.techknowlogick.com/xormigrate v1.4.0
-	xorm.io/builder v0.3.9
-	xorm.io/core v0.7.3
-	xorm.io/xorm v1.1.2
+	gopkg.in/yaml.v3 v3.0.1
+	mvdan.cc/xurls/v2 v2.5.0
+	src.techknowlogick.com/xgo v1.7.1-0.20240124202215-77ac23f331fe
+	src.techknowlogick.com/xormigrate v1.7.1
+	xorm.io/builder v0.3.13
+	xorm.io/xorm v1.3.7
 )
 
-replace (
-	github.com/adlio/trello => github.com/kolaente/trello v1.7.1-0.20201216234312-5c4ef79b531e
-	github.com/coreos/bbolt => go.etcd.io/bbolt v1.3.4
-	github.com/coreos/go-systemd => github.com/coreos/go-systemd/v22 v22.0.0
-	github.com/hpcloud/tail => github.com/jeffbean/tail v1.0.1 // See https://github.com/hpcloud/tail/pull/159
-	github.com/samedi/caldav-go => github.com/kolaente/caldav-go v3.0.1-0.20190524174923-9e5cd1688227+incompatible // Branch: feature/dynamic-supported-components, PR: https://github.com/samedi/caldav-go/pull/6 and https://github.com/samedi/caldav-go/pull/7
-	gopkg.in/fsnotify.v1 => github.com/kolaente/fsnotify v1.4.10-0.20200411160148-1bc3c8ff4048 // See https://github.com/fsnotify/fsnotify/issues/328 and https://github.com/golang/go/issues/26904
+require (
+	github.com/ClickHouse/ch-go v0.55.0 // indirect
+	github.com/ClickHouse/clickhouse-go/v2 v2.9.1 // indirect
+	github.com/KyleBanks/depth v1.2.1 // indirect
+	github.com/andybalholm/brotli v1.0.5 // indirect
+	github.com/apapsch/go-jsonmerge/v2 v2.0.0 // indirect
+	github.com/beevik/etree v1.1.0 // indirect
+	github.com/beorn7/perks v1.0.1 // indirect
+	github.com/boombuler/barcode v1.0.1-0.20190219062509-6c824513bacc // indirect
+	github.com/bytedance/sonic v1.10.0 // indirect
+	github.com/cenkalti/backoff/v3 v3.2.2 // indirect
+	github.com/cespare/xxhash/v2 v2.2.0 // indirect
+	github.com/chenzhuoyu/base64x v0.0.0-20230717121745-296ad89f973d // indirect
+	github.com/chenzhuoyu/iasm v0.9.0 // indirect
+	github.com/cpuguy83/go-md2man/v2 v2.0.3 // indirect
+	github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
+	github.com/deepmap/oapi-codegen v1.13.4 // indirect
+	github.com/dgryski/go-rendezvous v0.0.0-20200823014737-9f7001d12a5f // indirect
+	github.com/fsnotify/fsnotify v1.7.0 // indirect
+	github.com/gin-contrib/sse v0.1.0 // indirect
+	github.com/gin-gonic/gin v1.9.1 // indirect
+	github.com/go-chi/chi/v5 v5.0.10 // indirect
+	github.com/go-faster/city v1.0.1 // indirect
+	github.com/go-faster/errors v0.6.1 // indirect
+	github.com/go-jose/go-jose/v3 v3.0.1 // indirect
+	github.com/go-openapi/jsonpointer v0.20.1 // indirect
+	github.com/go-openapi/jsonreference v0.20.3 // indirect
+	github.com/go-openapi/spec v0.20.4 // indirect
+	github.com/go-openapi/swag v0.22.5 // indirect
+	github.com/go-playground/locales v0.14.1 // indirect
+	github.com/go-playground/universal-translator v0.18.1 // indirect
+	github.com/go-playground/validator/v10 v10.15.1 // indirect
+	github.com/goccy/go-json v0.10.2 // indirect
+	github.com/golang-jwt/jwt v3.2.2+incompatible // indirect
+	github.com/golang/protobuf v1.5.3 // indirect
+	github.com/golang/snappy v0.0.4 // indirect
+	github.com/hashicorp/errwrap v1.1.0 // indirect
+	github.com/hashicorp/go-multierror v1.1.1 // indirect
+	github.com/hashicorp/hcl v1.0.0 // indirect
+	github.com/inconshreveable/mousetrap v1.1.0 // indirect
+	github.com/josharian/intern v1.0.0 // indirect
+	github.com/json-iterator/go v1.1.12 // indirect
+	github.com/klauspost/compress v1.17.0 // indirect
+	github.com/klauspost/cpuid/v2 v2.2.5 // indirect
+	github.com/laurent22/ical-go v0.1.1-0.20181107184520-7e5d6ade8eef // indirect
+	github.com/leodido/go-urn v1.2.4 // indirect
+	github.com/lithammer/shortuuid/v3 v3.0.7 // indirect
+	github.com/magiconair/properties v1.8.7 // indirect
+	github.com/mailru/easyjson v0.7.7 // indirect
+	github.com/mattn/go-colorable v0.1.13 // indirect
+	github.com/mattn/go-isatty v0.0.20 // indirect
+	github.com/mattn/go-runewidth v0.0.15 // indirect
+	github.com/matttproud/golang_protobuf_extensions v1.0.4 // indirect
+	github.com/matttproud/golang_protobuf_extensions/v2 v2.0.0 // indirect
+	github.com/mitchellh/mapstructure v1.5.0 // indirect
+	github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
+	github.com/modern-go/reflect2 v1.0.2 // indirect
+	github.com/oklog/ulid v1.3.1 // indirect
+	github.com/onsi/ginkgo v1.16.4 // indirect
+	github.com/onsi/gomega v1.16.0 // indirect
+	github.com/paulmach/orb v0.9.0 // indirect
+	github.com/pelletier/go-toml/v2 v2.1.0 // indirect
+	github.com/pierrec/lz4/v4 v4.1.17 // indirect
+	github.com/pkg/errors v0.9.1 // indirect
+	github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
+	github.com/prometheus/client_model v0.5.0 // indirect
+	github.com/prometheus/common v0.45.0 // indirect
+	github.com/prometheus/procfs v0.12.0 // indirect
+	github.com/rivo/uniseg v0.4.4 // indirect
+	github.com/russross/blackfriday/v2 v2.1.0 // indirect
+	github.com/sagikazarmark/locafero v0.4.0 // indirect
+	github.com/sagikazarmark/slog-shim v0.1.0 // indirect
+	github.com/segmentio/asm v1.2.0 // indirect
+	github.com/shopspring/decimal v1.3.1 // indirect
+	github.com/sony/gobreaker v0.5.0 // indirect
+	github.com/sourcegraph/conc v0.3.0 // indirect
+	github.com/spf13/cast v1.6.0 // indirect
+	github.com/spf13/pflag v1.0.5 // indirect
+	github.com/subosito/gotenv v1.6.0 // indirect
+	github.com/syndtr/goleveldb v1.0.0 // indirect
+	github.com/twitchyliquid64/golang-asm v0.15.1 // indirect
+	github.com/ugorji/go/codec v1.2.11 // indirect
+	github.com/urfave/cli/v2 v2.3.0 // indirect
+	github.com/valyala/bytebufferpool v1.0.0 // indirect
+	github.com/valyala/fasttemplate v1.2.2 // indirect
+	github.com/yosssi/gohtml v0.0.0-20201013000340-ee4748c638f4 // indirect
+	go.opentelemetry.io/otel v1.15.0 // indirect
+	go.opentelemetry.io/otel/trace v1.15.0 // indirect
+	go.uber.org/multierr v1.11.0 // indirect
+	golang.org/x/arch v0.4.0 // indirect
+	golang.org/x/exp v0.0.0-20230905200255-921286631fa9 // indirect
+	golang.org/x/mod v0.12.0 // indirect
+	golang.org/x/net v0.20.0 // indirect
+	golang.org/x/time v0.5.0 // indirect
+	golang.org/x/tools v0.13.0 // indirect
+	google.golang.org/appengine v1.6.8 // indirect
+	google.golang.org/protobuf v1.31.0 // indirect
+	gopkg.in/ini.v1 v1.67.0 // indirect
+	gopkg.in/yaml.v2 v2.4.0 // indirect
+	sigs.k8s.io/yaml v1.3.0 // indirect
 )
 
-go 1.15
+replace github.com/samedi/caldav-go => github.com/kolaente/caldav-go v3.0.1-0.20190610114120-2a4eb8b5dcc9+incompatible // Branch: feature/dynamic-supported-components, PR: https://github.com/samedi/caldav-go/pull/6 and https://github.com/samedi/caldav-go/pull/7
+
+go 1.21
+
+toolchain go1.21.2

magefile.go

@@ -1,5 +1,5 @@
 // Vikunja is a to-do list application to facilitate your life.
-// Copyright 2018-2021 Vikunja and contributors. All rights reserved.
+// Copyright 2018-present Vikunja and contributors. All rights reserved.
 //
 // This program is free software: you can redistribute it and/or modify
 // it under the terms of the GNU Affero General Public Licensee as published by
@@ -14,6 +14,7 @@
 // You should have received a copy of the GNU Affero General Public Licensee
 // along with this program.  If not, see <https://www.gnu.org/licenses/>.
 
+//go:build mage
 // +build mage
 
 package main
@@ -26,7 +27,6 @@ import (
 	"fmt"
 	"github.com/iancoleman/strcase"
 	"io"
-	"io/ioutil"
 	"os"
 	"os/exec"
 	"path/filepath"
@@ -74,9 +74,21 @@ var (
 	}
 )
 
+func runCmdWithOutput(name string, arg ...string) (output []byte, err error) {
+	cmd := exec.Command(name, arg...)
+	output, err = cmd.Output()
+	if err != nil {
+		if ee, is := err.(*exec.ExitError); is {
+			return nil, fmt.Errorf("error running command: %s, %s", string(ee.Stderr), err)
+		}
+		return nil, fmt.Errorf("error running command: %s", err)
+	}
+
+	return output, nil
+}
+
 func setVersion() {
-	versionCmd := exec.Command("git", "describe", "--tags", "--always", "--abbrev=10")
-	version, err := versionCmd.Output()
+	version, err := runCmdWithOutput("git", "describe", "--tags", "--always", "--abbrev=10")
 	if err != nil {
 		fmt.Printf("Error getting version: %s\n", err)
 		os.Exit(1)
@@ -117,8 +129,7 @@ func setExecutable() {
 }
 
 func setApiPackages() {
-	cmd := exec.Command("go", "list", "all")
-	pkgs, err := cmd.Output()
+	pkgs, err := runCmdWithOutput("go", "list", "all")
 	if err != nil {
 		fmt.Printf("Error getting packages: %s\n", err)
 		os.Exit(1)
@@ -145,8 +156,7 @@ func setRootPath() {
 
 func setGoFiles() {
 	// GOFILES := $(shell find . -name "*.go" -type f ! -path "*/bindata.go")
-	cmd := exec.Command("find", ".", "-name", "*.go", "-type", "f", "!", "-path", "*/bindata.go")
-	files, err := cmd.Output()
+	files, err := runCmdWithOutput("find", ".", "-name", "*.go", "-type", "f", "!", "-path", "*/bindata.go")
 	if err != nil {
 		fmt.Printf("Error getting go files: %s\n", err)
 		os.Exit(1)
@@ -170,7 +180,6 @@ func initVars() {
 	setVersion()
 	setBinLocation()
 	setPkgVersion()
-	setApiPackages()
 	setGoFiles()
 	Ldflags = `-X "` + PACKAGE + `/pkg/version.Version=` + VersionNumber + `" -X "main.Tags=` + Tags + `"`
 }
@@ -186,7 +195,11 @@ func runAndStreamOutput(cmd string, args ...string) {
 	stdout, _ := c.StdoutPipe()
 	errbuf := bytes.Buffer{}
 	c.Stderr = &errbuf
-	c.Start()
+	err := c.Start()
+	if err != nil {
+		fmt.Printf("Could not start: %s\n", err)
+		os.Exit(1)
+	}
 
 	reader := bufio.NewReader(stdout)
 	line, err := reader.ReadString('\n')
@@ -328,9 +341,12 @@ func Fmt() {
 	runAndStreamOutput("gofmt", args...)
 }
 
+const swaggerDocsFolderLocation = `./pkg/swagger/`
+
 // Generates the swagger docs from the code annotations
 func DoTheSwag() {
 	mg.Deps(initVars)
+
 	checkAndInstallGoTool("swag", "github.com/swaggo/swag/cmd/swag")
 	runAndStreamOutput("swag", "init", "-g", "./pkg/routes/routes.go", "--parseDependency", "-d", RootPath, "-o", RootPath+"/pkg/swagger")
 }
@@ -340,8 +356,9 @@ type Test mg.Namespace
 // Runs all tests except integration tests
 func (Test) Unit() {
 	mg.Deps(initVars)
+	setApiPackages()
 	// We run everything sequentially and not in parallel to prevent issues with real test databases
-	args := append([]string{"test", Goflags[0], "-p", "1", "-timeout", "20m"}, ApiPackages...)
+	args := append([]string{"test", Goflags[0], "-p", "1", "-coverprofile", "cover.out", "-timeout", "45m"}, ApiPackages...)
 	runAndStreamOutput("go", args...)
 }
 
@@ -356,7 +373,7 @@ func (Test) Coverage() {
 func (Test) Integration() {
 	mg.Deps(initVars)
 	// We run everything sequentially and not in parallel to prevent issues with real test databases
-	runAndStreamOutput("go", "test", Goflags[0], "-p", "1", "-timeout", "20m", PACKAGE+"/pkg/integrations")
+	runAndStreamOutput("go", "test", Goflags[0], "-p", "1", "-timeout", "45m", PACKAGE+"/pkg/integrations")
 }
 
 type Check mg.Namespace
@@ -395,7 +412,7 @@ func checkGolangCiLintInstalled() {
 	mg.Deps(initVars)
 	if err := exec.Command("golangci-lint").Run(); err != nil && strings.Contains(err.Error(), "executable file not found") {
 		fmt.Println("Please manually install golangci-lint by running")
-		fmt.Println("curl -sSfL https://raw.githubusercontent.com/golangci/golangci-lint/master/install.sh | sh -s -- -b $(go env GOPATH)/bin v1.31.0")
+		fmt.Println("curl -sSfL https://raw.githubusercontent.com/golangci/golangci-lint/master/install.sh | sh -s -- -b $(go env GOPATH)/bin v1.55.2")
 		os.Exit(1)
 	}
 }
@@ -536,6 +553,20 @@ func (Release) Darwin() error {
 	return runXgo("darwin-10.15/*")
 }
 
+func (Release) Xgo(target string) error {
+	parts := strings.Split(target, "/")
+	if len(parts) < 2 {
+		return fmt.Errorf("invalid target")
+	}
+
+	variant := ""
+	if len(parts) > 2 && parts[2] != "" {
+		variant = "-" + strings.ReplaceAll(parts[2], "v", "")
+	}
+
+	return runXgo(parts[0] + "/" + parts[1] + variant)
+}
+
 // Compresses the built binaries in dist/binaries/ to reduce their filesize
 func (Release) Compress(ctx context.Context) error {
 	// $(foreach file,$(filter-out $(wildcard $(wildcard $(DIST)/binaries/$(EXECUTABLE)-*mips*)),$(wildcard $(DIST)/binaries/$(EXECUTABLE)-*)), upx -9 $(file);)
@@ -548,7 +579,9 @@ func (Release) Compress(ctx context.Context) error {
 			return nil
 		}
 		// No mips or s390x for you today
-		if strings.Contains(info.Name(), "mips") || strings.Contains(info.Name(), "s390x") {
+		if strings.Contains(info.Name(), "mips") ||
+			strings.Contains(info.Name(), "s390x") ||
+			strings.Contains(info.Name(), "riscv64") { // not supported by upx
 			return nil
 		}
 
@@ -652,7 +685,7 @@ func (Release) Zip() error {
 
 		fmt.Printf("Zipping %s...\n", info.Name())
 
-		c := exec.Command("zip", "-r", RootPath+"/"+DIST+"/zip/"+info.Name(), ".", "-i", "*")
+		c := exec.Command("zip", "-r", RootPath+"/"+DIST+"/zip/"+info.Name()+".zip", ".", "-i", "*")
 		c.Dir = path
 		out, err := c.Output()
 		fmt.Print(string(out))
@@ -677,7 +710,7 @@ func (Release) Packages() error {
 	binpath := "nfpm"
 	err = exec.Command(binpath).Run()
 	if err != nil && strings.Contains(err.Error(), "executable file not found") {
-		binpath = "/nfpm"
+		binpath = "/usr/bin/nfpm"
 		err = exec.Command(binpath).Run()
 	}
 	if err != nil && strings.Contains(err.Error(), "executable file not found") {
@@ -686,16 +719,16 @@ func (Release) Packages() error {
 		os.Exit(1)
 	}
 
-	// Because nfpm does not  support templating, we replace the values in the config file and restore it after running
+	// Because nfpm does not support templating, we replace the values in the config file and restore it after running
 	nfpmConfigPath := RootPath + "/nfpm.yaml"
-	nfpmconfig, err := ioutil.ReadFile(nfpmConfigPath)
+	nfpmconfig, err := os.ReadFile(nfpmConfigPath)
 	if err != nil {
 		return err
 	}
 
 	fixedConfig := strings.ReplaceAll(string(nfpmconfig), "<version>", VersionNumber)
 	fixedConfig = strings.ReplaceAll(fixedConfig, "<binlocation>", BinLocation)
-	if err := ioutil.WriteFile(nfpmConfigPath, []byte(fixedConfig), 0); err != nil {
+	if err := os.WriteFile(nfpmConfigPath, []byte(fixedConfig), 0); err != nil {
 		return err
 	}
 
@@ -708,7 +741,7 @@ func (Release) Packages() error {
 	runAndStreamOutput(binpath, "pkg", "--packager", "rpm", "--target", releasePath)
 	runAndStreamOutput(binpath, "pkg", "--packager", "apk", "--target", releasePath)
 
-	return ioutil.WriteFile(nfpmConfigPath, nfpmconfig, 0)
+	return os.WriteFile(nfpmConfigPath, nfpmconfig, 0)
 }
 
 type Dev mg.Namespace
@@ -724,7 +757,7 @@ func (Dev) MakeMigration() error {
 	date := time.Now().Format("20060102150405")
 
 	migration := `// Vikunja is a to-do list application to facilitate your life.
-// Copyright 2018-2021 Vikunja and contributors. All rights reserved.
+// Copyright 2018-present Vikunja and contributors. All rights reserved.
 //
 // This program is free software: you can redistribute it and/or modify
 // it under the terms of the GNU Affero General Public Licensee as published by
@@ -872,7 +905,7 @@ func (s *` + name + `) Handle(msg *message.Message) (err error) {
 	if _, err := f.Seek(idx, 0); err != nil {
 		return err
 	}
-	remainder, err := ioutil.ReadAll(f)
+	remainder, err := io.ReadAll(f)
 	if err != nil {
 		return err
 	}
@@ -1042,7 +1075,7 @@ func printConfig(config []*configOption, level int, parent string) (rendered str
 				fullPath := parent + "." + option.key
 
 				rendered += "Full path: `" + fullPath + "`\n\n"
-				rendered += "Environment path: `VIKUNJA_" + strcase.ToScreamingSnake(fullPath) + "`\n\n"
+				rendered += "Environment path: `VIKUNJA_" + strcase.ToScreamingSnake(strings.ToUpper(fullPath)) + "`\n\n"
 			}
 		}
 
@@ -1061,7 +1094,7 @@ const (
 // Generates the config docs from a commented config.yml.sample file in the repo root.
 func GenerateDocs() error {
 
-	config, err := ioutil.ReadFile("config.yml.sample")
+	config, err := os.ReadFile("config.yml.sample")
 	if err != nil {
 		return err
 	}
@@ -1111,7 +1144,7 @@ func GenerateDocs() error {
 
 	// We write the full file to prevent old content leftovers at the end
 	// I know, there are probably better ways to do this.
-	if err := ioutil.WriteFile(configDocPath, []byte(fullConfig), 0); err != nil {
+	if err := os.WriteFile(configDocPath, []byte(fullConfig), 0); err != nil {
 		return err
 	}
 

main.go

@@ -1,5 +1,5 @@
 // Vikunja is a to-do list application to facilitate your life.
-// Copyright 2018-2021 Vikunja and contributors. All rights reserved.
+// Copyright 2018-present Vikunja and contributors. All rights reserved.
 //
 // This program is free software: you can redistribute it and/or modify
 // it under the terms of the GNU Affero General Public Licensee as published by

pkg/caldav/caldav.go

@@ -1,5 +1,5 @@
 // Vikunja is a to-do list application to facilitate your life.
-// Copyright 2018-2021 Vikunja and contributors. All rights reserved.
+// Copyright 2018-present Vikunja and contributors. All rights reserved.
 //
 // This program is free software: you can redistribute it and/or modify
 // it under the terms of the GNU Affero General Public Licensee as published by
@@ -17,13 +17,13 @@
 package caldav
 
 import (
-	"fmt"
 	"regexp"
 	"strconv"
 	"strings"
 	"time"
 
-	"code.vikunja.io/api/pkg/config"
+	"code.vikunja.io/api/pkg/models"
+
 	"code.vikunja.io/api/pkg/user"
 	"code.vikunja.io/api/pkg/utils"
 )
@@ -31,19 +31,6 @@ import (
 // DateFormat is the caldav date format
 const DateFormat = `20060102T150405`
 
-// Event holds a single caldav event
-type Event struct {
-	Summary     string
-	Description string
-	UID         string
-	Alarms      []Alarm
-	Color       string
-
-	Timestamp time.Time
-	Start     time.Time
-	End       time.Time
-}
-
 // Todo holds a single VTODO
 type Todo struct {
 	// Required
@@ -51,18 +38,21 @@ type Todo struct {
 	UID       string
 
 	// Optional
-	Summary      string
-	Description  string
-	Completed    time.Time
-	Organizer    *user.User
-	Priority     int64 // 0-9, 1 is highest
-	RelatedToUID string
-	Color        string
-
-	Start    time.Time
-	End      time.Time
-	DueDate  time.Time
-	Duration time.Duration
+	Summary     string
+	Description string
+	Completed   time.Time
+	Organizer   *user.User
+	Priority    int64 // 0-9, 1 is highest
+	Relations   []Relation
+	Color       string
+	Categories  []string
+	Start       time.Time
+	End         time.Time
+	DueDate     time.Time
+	Duration    time.Duration
+	RepeatAfter int64
+	RepeatMode  models.TaskRepeatMode
+	Alarms      []Alarm
 
 	Created time.Time
 	Updated time.Time // last-mod
@@ -71,9 +61,16 @@ type Todo struct {
 // Alarm holds infos about an alarm from a caldav event
 type Alarm struct {
 	Time        time.Time
+	Duration    time.Duration
+	RelativeTo  models.ReminderRelation
 	Description string
 }
 
+type Relation struct {
+	Type models.RelationKind
+	UID  string
+}
+
 // Config is the caldav calendar config
 type Config struct {
 	Name   string
@@ -98,56 +95,13 @@ X-OUTLOOK-COLOR:` + color + `
 X-FUNAMBOL-COLOR:` + color
 }
 
-// ParseEvents parses an array of caldav events and gives them back as string
-func ParseEvents(config *Config, events []*Event) (caldavevents string) {
-	caldavevents += `BEGIN:VCALENDAR
-VERSION:2.0
-METHOD:PUBLISH
-X-PUBLISHED-TTL:PT4H
-X-WR-CALNAME:` + config.Name + `
-PRODID:-//` + config.ProdID + `//EN` + getCaldavColor(config.Color)
+func formatDuration(duration time.Duration) string {
+	seconds := duration.Seconds() - duration.Minutes()*60
+	minutes := duration.Minutes() - duration.Hours()*60
 
-	for _, e := range events {
-
-		if e.UID == "" {
-			e.UID = makeCalDavTimeFromTimeStamp(e.Timestamp) + utils.Sha256(e.Summary)
-		}
-
-		formattedDescription := ""
-		if e.Description != "" {
-			re := regexp.MustCompile(`\r?\n`)
-			formattedDescription = re.ReplaceAllString(e.Description, "\\n")
-		}
-
-		caldavevents += `
-BEGIN:VEVENT
-UID:` + e.UID + `
-SUMMARY:` + e.Summary + getCaldavColor(e.Color) + `
-DESCRIPTION:` + formattedDescription + `
-DTSTAMP:` + makeCalDavTimeFromTimeStamp(e.Timestamp) + `
-DTSTART:` + makeCalDavTimeFromTimeStamp(e.Start) + `
-DTEND:` + makeCalDavTimeFromTimeStamp(e.End)
-
-		for _, a := range e.Alarms {
-			if a.Description == "" {
-				a.Description = e.Summary
-			}
-
-			caldavevents += `
-BEGIN:VALARM
-TRIGGER:` + calcAlarmDateFromReminder(e.Start, a.Time) + `
-ACTION:DISPLAY
-DESCRIPTION:` + a.Description + `
-END:VALARM`
-		}
-		caldavevents += `
-END:VEVENT`
-	}
-
-	caldavevents += `
-END:VCALENDAR` // Need a line break
-
-	return
+	return strconv.FormatFloat(duration.Hours(), 'f', 0, 64) + `H` +
+		strconv.FormatFloat(minutes, 'f', 0, 64) + `M` +
+		strconv.FormatFloat(seconds, 'f', 0, 64) + `S`
 }
 
 // ParseTodos returns a caldav vcalendar string with todos
@@ -172,11 +126,15 @@ SUMMARY:` + t.Summary + getCaldavColor(t.Color)
 
 		if t.Start.Unix() > 0 {
 			caldavtodos += `
-DTSTART: ` + makeCalDavTimeFromTimeStamp(t.Start)
+DTSTART:` + makeCalDavTimeFromTimeStamp(t.Start)
+			if t.Duration != 0 && t.DueDate.Unix() == 0 {
+				caldavtodos += `
+DURATION:PT` + formatDuration(t.Duration)
+			}
 		}
 		if t.End.Unix() > 0 {
 			caldavtodos += `
-DTEND: ` + makeCalDavTimeFromTimeStamp(t.End)
+DTEND:` + makeCalDavTimeFromTimeStamp(t.End)
 		}
 		if t.Description != "" {
 			re := regexp.MustCompile(`\r?\n`)
@@ -194,11 +152,6 @@ STATUS:COMPLETED`
 ORGANIZER;CN=:` + t.Organizer.Username
 		}
 
-		if t.RelatedToUID != "" {
-			caldavtodos += `
-RELATED-TO:` + t.RelatedToUID
-		}
-
 		if t.DueDate.Unix() > 0 {
 			caldavtodos += `
 DUE:` + makeCalDavTimeFromTimeStamp(t.DueDate)
@@ -209,19 +162,30 @@ DUE:` + makeCalDavTimeFromTimeStamp(t.DueDate)
 CREATED:` + makeCalDavTimeFromTimeStamp(t.Created)
 		}
 
-		if t.Duration != 0 {
-			caldavtodos += `
-DURATION:PT` + fmt.Sprintf("%.6f", t.Duration.Hours()) + `H` + fmt.Sprintf("%.6f", t.Duration.Minutes()) + `M` + fmt.Sprintf("%.6f", t.Duration.Seconds()) + `S`
-		}
-
 		if t.Priority != 0 {
 			caldavtodos += `
 PRIORITY:` + strconv.Itoa(mapPriorityToCaldav(t.Priority))
 		}
 
+		if t.RepeatAfter > 0 || t.RepeatMode == models.TaskRepeatModeMonth {
+			if t.RepeatMode == models.TaskRepeatModeMonth {
+				caldavtodos += `
+RRULE:FREQ=MONTHLY;BYMONTHDAY=` + t.DueDate.Format("02") // Day of the month
+			} else {
+				caldavtodos += `
+RRULE:FREQ=SECONDLY;INTERVAL=` + strconv.FormatInt(t.RepeatAfter, 10)
+			}
+		}
+
+		if len(t.Categories) > 0 {
+			caldavtodos += `
+CATEGORIES:` + strings.Join(t.Categories, ",")
+		}
+
 		caldavtodos += `
 LAST-MODIFIED:` + makeCalDavTimeFromTimeStamp(t.Updated)
-
+		caldavtodos += ParseAlarms(t.Alarms, t.Summary)
+		caldavtodos += ParseRelations(t.Relations)
 		caldavtodos += `
 END:VTODO`
 	}
@@ -232,19 +196,83 @@ END:VCALENDAR` // Need a line break
 	return
 }
 
-func makeCalDavTimeFromTimeStamp(ts time.Time) (caldavtime string) {
-	return ts.In(config.GetTimeZone()).Format(DateFormat)
+func ParseAlarms(alarms []Alarm, taskDescription string) (caldavalarms string) {
+	for _, a := range alarms {
+		if a.Description == "" {
+			a.Description = taskDescription
+		}
+
+		caldavalarms += `
+BEGIN:VALARM`
+		switch a.RelativeTo {
+		case models.ReminderRelationStartDate:
+			caldavalarms += `
+TRIGGER;RELATED=START:` + makeCalDavDuration(a.Duration)
+		case models.ReminderRelationEndDate, models.ReminderRelationDueDate:
+			caldavalarms += `
+TRIGGER;RELATED=END:` + makeCalDavDuration(a.Duration)
+		default:
+			caldavalarms += `
+TRIGGER;VALUE=DATE-TIME:` + makeCalDavTimeFromTimeStamp(a.Time)
+		}
+		caldavalarms += `
+ACTION:DISPLAY
+DESCRIPTION:` + a.Description + `
+END:VALARM`
+	}
+	return caldavalarms
 }
 
-func calcAlarmDateFromReminder(eventStart, reminder time.Time) (alarmTime string) {
-	diff := reminder.Sub(eventStart)
-	diffStr := strings.ToUpper(diff.String())
-	if diff < 0 {
-		alarmTime += `-`
-		// We append the - at the beginning of the caldav flag, that would get in the way if the minutes
-		// themselves are also containing it
-		diffStr = diffStr[1:]
+func ParseRelations(relations []Relation) (caldavrelatedtos string) {
+
+	for _, r := range relations {
+		switch r.Type {
+		case models.RelationKindParenttask:
+			caldavrelatedtos += `
+RELATED-TO;RELTYPE=PARENT:`
+		case models.RelationKindSubtask:
+			caldavrelatedtos += `
+RELATED-TO;RELTYPE=CHILD:`
+		case models.RelationKindUnknown:
+			continue
+		case models.RelationKindRelated:
+			continue
+		case models.RelationKindDuplicateOf:
+			continue
+		case models.RelationKindDuplicates:
+			continue
+		case models.RelationKindBlocking:
+			continue
+		case models.RelationKindBlocked:
+			continue
+		case models.RelationKindPreceeds:
+			continue
+		case models.RelationKindFollows:
+			continue
+		case models.RelationKindCopiedFrom:
+			continue
+		case models.RelationKindCopiedTo:
+			continue
+		default:
+			caldavrelatedtos += `
+RELATED-TO:`
+		}
+
+		caldavrelatedtos += r.UID
 	}
-	alarmTime += `PT` + diffStr
+
+	return caldavrelatedtos
+}
+
+func makeCalDavTimeFromTimeStamp(ts time.Time) (caldavtime string) {
+	return ts.In(time.UTC).Format(DateFormat) + "Z"
+}
+
+func makeCalDavDuration(duration time.Duration) (caldavtime string) {
+	if duration < 0 {
+		duration = duration.Abs()
+		caldavtime = "-"
+	}
+	caldavtime += "PT" + strings.ToUpper(duration.Truncate(time.Millisecond).String())
 	return
 }

pkg/caldav/caldav_test.go

@@ -1,5 +1,5 @@
 // Vikunja is a to-do list application to facilitate your life.
-// Copyright 2018-2021 Vikunja and contributors. All rights reserved.
+// Copyright 2018-present Vikunja and contributors. All rights reserved.
 //
 // This program is free software: you can redistribute it and/or modify
 // it under the terms of the GNU Affero General Public Licensee as published by
@@ -20,279 +20,12 @@ import (
 	"testing"
 	"time"
 
+	"code.vikunja.io/api/pkg/models"
+
 	"code.vikunja.io/api/pkg/config"
 	"github.com/stretchr/testify/assert"
 )
 
-func TestParseEvents(t *testing.T) {
-	type args struct {
-		config *Config
-		events []*Event
-	}
-	tests := []struct {
-		name             string
-		args             args
-		wantCaldavevents string
-	}{
-		{
-			name: "Test caldavparsing without reminders",
-			args: args{
-				config: &Config{
-					Name:   "test",
-					ProdID: "RandomProdID which is not random",
-					Color:  "ffffff",
-				},
-				events: []*Event{
-					{
-						Summary:     "Event #1",
-						Description: "Lorem Ipsum",
-						UID:         "randommduid",
-						Timestamp:   time.Unix(1543626724, 0).In(config.GetTimeZone()),
-						Start:       time.Unix(1543626724, 0).In(config.GetTimeZone()),
-						End:         time.Unix(1543627824, 0).In(config.GetTimeZone()),
-						Color:       "affffe",
-					},
-					{
-						Summary:   "Event #2",
-						UID:       "randommduidd",
-						Timestamp: time.Unix(1543726724, 0).In(config.GetTimeZone()),
-						Start:     time.Unix(1543726724, 0).In(config.GetTimeZone()),
-						End:       time.Unix(1543738724, 0).In(config.GetTimeZone()),
-					},
-					{
-						Summary:   "Event #3 with empty uid",
-						UID:       "20181202T0600242aaef4a81d770c1e775e26bc5abebc87f1d3d7bffaa83",
-						Timestamp: time.Unix(1543726824, 0).In(config.GetTimeZone()),
-						Start:     time.Unix(1543726824, 0).In(config.GetTimeZone()),
-						End:       time.Unix(1543727000, 0).In(config.GetTimeZone()),
-					},
-				},
-			},
-			wantCaldavevents: `BEGIN:VCALENDAR
-VERSION:2.0
-METHOD:PUBLISH
-X-PUBLISHED-TTL:PT4H
-X-WR-CALNAME:test
-PRODID:-//RandomProdID which is not random//EN
-X-APPLE-CALENDAR-COLOR:#ffffffFF
-X-OUTLOOK-COLOR:#ffffffFF
-X-FUNAMBOL-COLOR:#ffffffFF
-BEGIN:VEVENT
-UID:randommduid
-SUMMARY:Event #1
-X-APPLE-CALENDAR-COLOR:#affffeFF
-X-OUTLOOK-COLOR:#affffeFF
-X-FUNAMBOL-COLOR:#affffeFF
-DESCRIPTION:Lorem Ipsum
-DTSTAMP:20181201T011204
-DTSTART:20181201T011204
-DTEND:20181201T013024
-END:VEVENT
-BEGIN:VEVENT
-UID:randommduidd
-SUMMARY:Event #2
-DESCRIPTION:
-DTSTAMP:20181202T045844
-DTSTART:20181202T045844
-DTEND:20181202T081844
-END:VEVENT
-BEGIN:VEVENT
-UID:20181202T0600242aaef4a81d770c1e775e26bc5abebc87f1d3d7bffaa83
-SUMMARY:Event #3 with empty uid
-DESCRIPTION:
-DTSTAMP:20181202T050024
-DTSTART:20181202T050024
-DTEND:20181202T050320
-END:VEVENT
-END:VCALENDAR`,
-		},
-		{
-			name: "Test caldavparsing with reminders",
-			args: args{
-				config: &Config{
-					Name:   "test2",
-					ProdID: "RandomProdID which is not random",
-				},
-				events: []*Event{
-					{
-						Summary:     "Event #1",
-						Description: "Lorem Ipsum",
-						UID:         "randommduid",
-						Timestamp:   time.Unix(1543626724, 0).In(config.GetTimeZone()),
-						Start:       time.Unix(1543626724, 0).In(config.GetTimeZone()),
-						End:         time.Unix(1543627824, 0).In(config.GetTimeZone()),
-						Alarms: []Alarm{
-							{Time: time.Unix(1543626524, 0).In(config.GetTimeZone())},
-							{Time: time.Unix(1543626224, 0).In(config.GetTimeZone())},
-							{Time: time.Unix(1543626024, 0)},
-						},
-					},
-					{
-						Summary:   "Event #2",
-						UID:       "randommduidd",
-						Timestamp: time.Unix(1543726724, 0).In(config.GetTimeZone()),
-						Start:     time.Unix(1543726724, 0).In(config.GetTimeZone()),
-						End:       time.Unix(1543738724, 0).In(config.GetTimeZone()),
-						Alarms: []Alarm{
-							{Time: time.Unix(1543626524, 0).In(config.GetTimeZone())},
-							{Time: time.Unix(1543626224, 0).In(config.GetTimeZone())},
-							{Time: time.Unix(1543626024, 0).In(config.GetTimeZone())},
-						},
-					},
-					{
-						Summary:   "Event #3 with empty uid",
-						Timestamp: time.Unix(1543726824, 0).In(config.GetTimeZone()),
-						Start:     time.Unix(1543726824, 0).In(config.GetTimeZone()),
-						End:       time.Unix(1543727000, 0).In(config.GetTimeZone()),
-						Alarms: []Alarm{
-							{Time: time.Unix(1543626524, 0).In(config.GetTimeZone())},
-							{Time: time.Unix(1543626224, 0).In(config.GetTimeZone())},
-							{Time: time.Unix(1543626024, 0).In(config.GetTimeZone())},
-							{Time: time.Unix(1543826824, 0).In(config.GetTimeZone())},
-						},
-					},
-					{
-						Summary:   "Event #4 without any",
-						Timestamp: time.Unix(1543726824, 0),
-						Start:     time.Unix(1543726824, 0),
-						End:       time.Unix(1543727000, 0),
-					},
-				},
-			},
-			wantCaldavevents: `BEGIN:VCALENDAR
-VERSION:2.0
-METHOD:PUBLISH
-X-PUBLISHED-TTL:PT4H
-X-WR-CALNAME:test2
-PRODID:-//RandomProdID which is not random//EN
-BEGIN:VEVENT
-UID:randommduid
-SUMMARY:Event #1
-DESCRIPTION:Lorem Ipsum
-DTSTAMP:20181201T011204
-DTSTART:20181201T011204
-DTEND:20181201T013024
-BEGIN:VALARM
-TRIGGER:-PT3M20S
-ACTION:DISPLAY
-DESCRIPTION:Event #1
-END:VALARM
-BEGIN:VALARM
-TRIGGER:-PT8M20S
-ACTION:DISPLAY
-DESCRIPTION:Event #1
-END:VALARM
-BEGIN:VALARM
-TRIGGER:-PT11M40S
-ACTION:DISPLAY
-DESCRIPTION:Event #1
-END:VALARM
-END:VEVENT
-BEGIN:VEVENT
-UID:randommduidd
-SUMMARY:Event #2
-DESCRIPTION:
-DTSTAMP:20181202T045844
-DTSTART:20181202T045844
-DTEND:20181202T081844
-BEGIN:VALARM
-TRIGGER:-PT27H50M0S
-ACTION:DISPLAY
-DESCRIPTION:Event #2
-END:VALARM
-BEGIN:VALARM
-TRIGGER:-PT27H55M0S
-ACTION:DISPLAY
-DESCRIPTION:Event #2
-END:VALARM
-BEGIN:VALARM
-TRIGGER:-PT27H58M20S
-ACTION:DISPLAY
-DESCRIPTION:Event #2
-END:VALARM
-END:VEVENT
-BEGIN:VEVENT
-UID:20181202T0500242aaef4a81d770c1e775e26bc5abebc87f1d3d7bffaa83
-SUMMARY:Event #3 with empty uid
-DESCRIPTION:
-DTSTAMP:20181202T050024
-DTSTART:20181202T050024
-DTEND:20181202T050320
-BEGIN:VALARM
-TRIGGER:-PT27H51M40S
-ACTION:DISPLAY
-DESCRIPTION:Event #3 with empty uid
-END:VALARM
-BEGIN:VALARM
-TRIGGER:-PT27H56M40S
-ACTION:DISPLAY
-DESCRIPTION:Event #3 with empty uid
-END:VALARM
-BEGIN:VALARM
-TRIGGER:-PT28H0M0S
-ACTION:DISPLAY
-DESCRIPTION:Event #3 with empty uid
-END:VALARM
-BEGIN:VALARM
-TRIGGER:PT27H46M40S
-ACTION:DISPLAY
-DESCRIPTION:Event #3 with empty uid
-END:VALARM
-END:VEVENT
-BEGIN:VEVENT
-UID:20181202T050024ae7548ce9556df85038abe90dc674d4741a61ce74d1cf
-SUMMARY:Event #4 without any
-DESCRIPTION:
-DTSTAMP:20181202T050024
-DTSTART:20181202T050024
-DTEND:20181202T050320
-END:VEVENT
-END:VCALENDAR`,
-		},
-		{
-			name: "Test caldavparsing with multiline description",
-			args: args{
-				config: &Config{
-					Name:   "test",
-					ProdID: "RandomProdID which is not random",
-				},
-				events: []*Event{
-					{
-						Summary: "Event #1",
-						Description: `Lorem Ipsum
-Dolor sit amet`,
-						UID:       "randommduid",
-						Timestamp: time.Unix(1543626724, 0).In(config.GetTimeZone()),
-						Start:     time.Unix(1543626724, 0).In(config.GetTimeZone()),
-						End:       time.Unix(1543627824, 0).In(config.GetTimeZone()),
-					},
-				},
-			},
-			wantCaldavevents: `BEGIN:VCALENDAR
-VERSION:2.0
-METHOD:PUBLISH
-X-PUBLISHED-TTL:PT4H
-X-WR-CALNAME:test
-PRODID:-//RandomProdID which is not random//EN
-BEGIN:VEVENT
-UID:randommduid
-SUMMARY:Event #1
-DESCRIPTION:Lorem Ipsum\nDolor sit amet
-DTSTAMP:20181201T011204
-DTSTART:20181201T011204
-DTEND:20181201T013024
-END:VEVENT
-END:VCALENDAR`,
-		},
-	}
-	for _, tt := range tests {
-		t.Run(tt.name, func(t *testing.T) {
-			gotCaldavevents := ParseEvents(tt.args.config, tt.args.events)
-			assert.Equal(t, gotCaldavevents, tt.wantCaldavevents)
-		})
-	}
-}
-
 func TestParseTodos(t *testing.T) {
 	type args struct {
 		config *Config
@@ -333,13 +66,13 @@ X-OUTLOOK-COLOR:#ffffffFF
 X-FUNAMBOL-COLOR:#ffffffFF
 BEGIN:VTODO
 UID:randommduid
-DTSTAMP:20181201T011204
+DTSTAMP:20181201T011204Z
 SUMMARY:Todo #1
 X-APPLE-CALENDAR-COLOR:#affffeFF
 X-OUTLOOK-COLOR:#affffeFF
 X-FUNAMBOL-COLOR:#affffeFF
 DESCRIPTION:Lorem Ipsum\nDolor sit amet
-LAST-MODIFIED:00010101T000000
+LAST-MODIFIED:00010101T000000Z
 END:VTODO
 END:VCALENDAR`,
 		},
@@ -368,12 +101,12 @@ X-WR-CALNAME:test
 PRODID:-//RandomProdID which is not random//EN
 BEGIN:VTODO
 UID:randommduid
-DTSTAMP:20181201T011204
+DTSTAMP:20181201T011204Z
 SUMMARY:Todo #1
 DESCRIPTION:Lorem Ipsum
-COMPLETED:20181201T013024
+COMPLETED:20181201T013024Z
 STATUS:COMPLETED
-LAST-MODIFIED:00010101T000000
+LAST-MODIFIED:00010101T000000Z
 END:VTODO
 END:VCALENDAR`,
 		},
@@ -402,11 +135,239 @@ X-WR-CALNAME:test
 PRODID:-//RandomProdID which is not random//EN
 BEGIN:VTODO
 UID:randommduid
-DTSTAMP:20181201T011204
+DTSTAMP:20181201T011204Z
 SUMMARY:Todo #1
 DESCRIPTION:Lorem Ipsum
 PRIORITY:9
-LAST-MODIFIED:00010101T000000
+LAST-MODIFIED:00010101T000000Z
+END:VTODO
+END:VCALENDAR`,
+		},
+		{
+			name: "with repeating monthly",
+			args: args{
+				config: &Config{
+					Name:   "test",
+					ProdID: "RandomProdID which is not random",
+				},
+				todos: []*Todo{
+					{
+						Summary:     "Todo #1",
+						Description: "Lorem Ipsum",
+						UID:         "randommduid",
+						Timestamp:   time.Unix(1543626724, 0).In(config.GetTimeZone()),
+						RepeatMode:  models.TaskRepeatModeMonth,
+						DueDate:     time.Unix(1543626724, 0).In(config.GetTimeZone()),
+					},
+				},
+			},
+			wantCaldavtasks: `BEGIN:VCALENDAR
+VERSION:2.0
+METHOD:PUBLISH
+X-PUBLISHED-TTL:PT4H
+X-WR-CALNAME:test
+PRODID:-//RandomProdID which is not random//EN
+BEGIN:VTODO
+UID:randommduid
+DTSTAMP:20181201T011204Z
+SUMMARY:Todo #1
+DESCRIPTION:Lorem Ipsum
+DUE:20181201T011204Z
+RRULE:FREQ=MONTHLY;BYMONTHDAY=01
+LAST-MODIFIED:00010101T000000Z
+END:VTODO
+END:VCALENDAR`,
+		},
+		{
+			name: "with repeat mode default",
+			args: args{
+				config: &Config{
+					Name:   "test",
+					ProdID: "RandomProdID which is not random",
+				},
+				todos: []*Todo{
+					{
+						Summary:     "Todo #1",
+						Description: "Lorem Ipsum",
+						UID:         "randommduid",
+						Timestamp:   time.Unix(1543626724, 0).In(config.GetTimeZone()),
+						RepeatMode:  models.TaskRepeatModeDefault,
+						DueDate:     time.Unix(1543626724, 0).In(config.GetTimeZone()),
+						RepeatAfter: 435,
+					},
+				},
+			},
+			wantCaldavtasks: `BEGIN:VCALENDAR
+VERSION:2.0
+METHOD:PUBLISH
+X-PUBLISHED-TTL:PT4H
+X-WR-CALNAME:test
+PRODID:-//RandomProdID which is not random//EN
+BEGIN:VTODO
+UID:randommduid
+DTSTAMP:20181201T011204Z
+SUMMARY:Todo #1
+DESCRIPTION:Lorem Ipsum
+DUE:20181201T011204Z
+RRULE:FREQ=SECONDLY;INTERVAL=435
+LAST-MODIFIED:00010101T000000Z
+END:VTODO
+END:VCALENDAR`,
+		},
+		{
+			name: "with categories",
+			args: args{
+				config: &Config{
+					Name:   "test",
+					ProdID: "RandomProdID which is not random",
+					Color:  "ffffff",
+				},
+				todos: []*Todo{
+					{
+						Summary:    "Todo #1",
+						UID:        "randommduid",
+						Timestamp:  time.Unix(1543626724, 0).In(config.GetTimeZone()),
+						Color:      "affffe",
+						Categories: []string{"label1", "label2"},
+					},
+				},
+			},
+			wantCaldavtasks: `BEGIN:VCALENDAR
+VERSION:2.0
+METHOD:PUBLISH
+X-PUBLISHED-TTL:PT4H
+X-WR-CALNAME:test
+PRODID:-//RandomProdID which is not random//EN
+X-APPLE-CALENDAR-COLOR:#ffffffFF
+X-OUTLOOK-COLOR:#ffffffFF
+X-FUNAMBOL-COLOR:#ffffffFF
+BEGIN:VTODO
+UID:randommduid
+DTSTAMP:20181201T011204Z
+SUMMARY:Todo #1
+X-APPLE-CALENDAR-COLOR:#affffeFF
+X-OUTLOOK-COLOR:#affffeFF
+X-FUNAMBOL-COLOR:#affffeFF
+CATEGORIES:label1,label2
+LAST-MODIFIED:00010101T000000Z
+END:VTODO
+END:VCALENDAR`,
+		},
+		{
+			name: "with alarm",
+			args: args{
+				config: &Config{
+					Name:   "test",
+					ProdID: "RandomProdID which is not random",
+				},
+				todos: []*Todo{
+					{
+						Summary:   "Todo #1",
+						UID:       "randommduid",
+						Timestamp: time.Unix(1543626724, 0).In(config.GetTimeZone()),
+						Alarms: []Alarm{
+							{
+								Time: time.Unix(1543626724, 0).In(config.GetTimeZone()),
+							},
+							{
+								Time:        time.Unix(1543626724, 0).In(config.GetTimeZone()),
+								Description: "alarm description",
+							},
+							{
+								Duration:   -2 * time.Hour,
+								RelativeTo: "due_date",
+							},
+							{
+								Duration:   1 * time.Hour,
+								RelativeTo: "start_date",
+							},
+							{
+								Duration:   time.Duration(0),
+								RelativeTo: "end_date",
+							},
+						},
+					},
+				},
+			},
+			wantCaldavtasks: `BEGIN:VCALENDAR
+VERSION:2.0
+METHOD:PUBLISH
+X-PUBLISHED-TTL:PT4H
+X-WR-CALNAME:test
+PRODID:-//RandomProdID which is not random//EN
+BEGIN:VTODO
+UID:randommduid
+DTSTAMP:20181201T011204Z
+SUMMARY:Todo #1
+LAST-MODIFIED:00010101T000000Z
+BEGIN:VALARM
+TRIGGER;VALUE=DATE-TIME:20181201T011204Z
+ACTION:DISPLAY
+DESCRIPTION:Todo #1
+END:VALARM
+BEGIN:VALARM
+TRIGGER;VALUE=DATE-TIME:20181201T011204Z
+ACTION:DISPLAY
+DESCRIPTION:alarm description
+END:VALARM
+BEGIN:VALARM
+TRIGGER;RELATED=END:-PT2H0M0S
+ACTION:DISPLAY
+DESCRIPTION:Todo #1
+END:VALARM
+BEGIN:VALARM
+TRIGGER;RELATED=START:PT1H0M0S
+ACTION:DISPLAY
+DESCRIPTION:Todo #1
+END:VALARM
+BEGIN:VALARM
+TRIGGER;RELATED=END:PT0S
+ACTION:DISPLAY
+DESCRIPTION:Todo #1
+END:VALARM
+END:VTODO
+END:VCALENDAR`,
+		},
+		{
+			name: "with related-to",
+			args: args{
+				config: &Config{
+					Name:   "test",
+					ProdID: "RandomProdID which is not random",
+				},
+				todos: []*Todo{
+					{
+						Summary:     "Todo #1",
+						Description: "Lorem Ipsum",
+						UID:         "randommduid",
+						Relations: []Relation{
+							{
+								Type: models.RelationKindParenttask,
+								UID:  "parentuid",
+							},
+							{
+								Type: models.RelationKindSubtask,
+								UID:  "subtaskuid",
+							},
+						},
+						Timestamp: time.Unix(1543626724, 0).In(config.GetTimeZone()),
+					},
+				},
+			},
+			wantCaldavtasks: `BEGIN:VCALENDAR
+VERSION:2.0
+METHOD:PUBLISH
+X-PUBLISHED-TTL:PT4H
+X-WR-CALNAME:test
+PRODID:-//RandomProdID which is not random//EN
+BEGIN:VTODO
+UID:randommduid
+DTSTAMP:20181201T011204Z
+SUMMARY:Todo #1
+DESCRIPTION:Lorem Ipsum
+LAST-MODIFIED:00010101T000000Z
+RELATED-TO;RELTYPE=PARENT:parentuid
+RELATED-TO;RELTYPE=CHILD:subtaskuid
 END:VTODO
 END:VCALENDAR`,
 		},
@@ -414,7 +375,7 @@ END:VCALENDAR`,
 	for _, tt := range tests {
 		t.Run(tt.name, func(t *testing.T) {
 			gotCaldavtasks := ParseTodos(tt.args.config, tt.args.todos)
-			assert.Equal(t, gotCaldavtasks, tt.wantCaldavtasks)
+			assert.Equal(t, tt.wantCaldavtasks, gotCaldavtasks)
 		})
 	}
 }

pkg/caldav/parsing.go

@@ -1,5 +1,5 @@
 // Vikunja is a to-do list application to facilitate your life.
-// Copyright 2018-2021 Vikunja and contributors. All rights reserved.
+// Copyright 2018-present Vikunja and contributors. All rights reserved.
 //
 // This program is free software: you can redistribute it and/or modify
 // it under the terms of the GNU Affero General Public Licensee as published by
@@ -17,22 +17,48 @@
 package caldav
 
 import (
+	"errors"
 	"strconv"
 	"strings"
 	"time"
 
+	"code.vikunja.io/api/pkg/config"
 	"code.vikunja.io/api/pkg/log"
 	"code.vikunja.io/api/pkg/models"
-	"github.com/laurent22/ical-go"
+	"code.vikunja.io/api/pkg/utils"
+
+	ics "github.com/arran4/golang-ical"
 )
 
-func GetCaldavTodosForTasks(list *models.ListWithTasksAndBuckets, listTasks []*models.TaskWithComments) string {
+func GetCaldavTodosForTasks(project *models.ProjectWithTasksAndBuckets, projectTasks []*models.TaskWithComments) string {
 
 	// Make caldav todos from Vikunja todos
 	var caldavtodos []*Todo
-	for _, t := range listTasks {
+	for _, t := range projectTasks {
 
 		duration := t.EndDate.Sub(t.StartDate)
+		var categories []string
+		for _, label := range t.Labels {
+			categories = append(categories, label.Title)
+		}
+		var alarms []Alarm
+		for _, reminder := range t.Reminders {
+			alarms = append(alarms, Alarm{
+				Time:       reminder.Reminder,
+				Duration:   time.Duration(reminder.RelativePeriod) * time.Second,
+				RelativeTo: reminder.RelativeTo,
+			})
+		}
+
+		var relations []Relation
+		for reltype, tasks := range t.RelatedTasks {
+			for _, r := range tasks {
+				relations = append(relations, Relation{
+					Type: reltype,
+					UID:  r.UID,
+				})
+			}
+		}
 
 		caldavtodos = append(caldavtodos, &Todo{
 			Timestamp:   t.Updated,
@@ -41,18 +67,23 @@ func GetCaldavTodosForTasks(list *models.ListWithTasksAndBuckets, listTasks []*m
 			Description: t.Description,
 			Completed:   t.DoneAt,
 			// Organizer:     &t.CreatedBy, // Disabled until we figure out how this works
-			Priority: t.Priority,
-			Start:    t.StartDate,
-			End:      t.EndDate,
-			Created:  t.Created,
-			Updated:  t.Updated,
-			DueDate:  t.DueDate,
-			Duration: duration,
+			Categories:  categories,
+			Priority:    t.Priority,
+			Start:       t.StartDate,
+			End:         t.EndDate,
+			Created:     t.Created,
+			Updated:     t.Updated,
+			DueDate:     t.DueDate,
+			Duration:    duration,
+			RepeatAfter: t.RepeatAfter,
+			RepeatMode:  t.RepeatMode,
+			Alarms:      alarms,
+			Relations:   relations,
 		})
 	}
 
 	caldavConfig := &Config{
-		Name:   list.Title,
+		Name:   project.Title,
 		ProdID: "Vikunja Todo App",
 	}
 
@@ -60,27 +91,28 @@ func GetCaldavTodosForTasks(list *models.ListWithTasksAndBuckets, listTasks []*m
 }
 
 func ParseTaskFromVTODO(content string) (vTask *models.Task, err error) {
-	parsed, err := ical.ParseCalendar(content)
+	parsed, err := ics.ParseCalendar(strings.NewReader(content))
 	if err != nil {
 		return nil, err
 	}
-
-	// We put the task details in a map to be able to handle them more easily
-	task := make(map[string]string)
-	for _, c := range parsed.Children {
-		if c.Name == "VTODO" {
-			for _, entry := range c.Children {
-				task[entry.Name] = entry.Value
-			}
-			// Breaking, to only process the first task
-			break
+	vTodo, ok := parsed.Components[0].(*ics.VTodo)
+	if !ok {
+		return nil, errors.New("VTODO element not found")
+	}
+	// We put the vTodo details in a map to be able to handle them more easily
+	task := make(map[string]ics.IANAProperty)
+	var relations []ics.IANAProperty
+	for _, c := range vTodo.UnknownPropertiesIANAProperties() {
+		task[c.IANAToken] = c
+		if strings.HasPrefix(c.IANAToken, "RELATED-TO") {
+			relations = append(relations, c)
 		}
 	}
 
 	// Parse the priority
 	var priority int64
 	if _, ok := task["PRIORITY"]; ok {
-		priorityParsed, err := strconv.ParseInt(task["PRIORITY"], 10, 64)
+		priorityParsed, err := strconv.ParseInt(task["PRIORITY"].Value, 10, 64)
 		if err != nil {
 			return nil, err
 		}
@@ -89,20 +121,64 @@ func ParseTaskFromVTODO(content string) (vTask *models.Task, err error) {
 	}
 
 	// Parse the enddate
-	duration, _ := time.ParseDuration(task["DURATION"])
+	duration, _ := time.ParseDuration(task["DURATION"].Value)
+
+	description := strings.ReplaceAll(task["DESCRIPTION"].Value, "\\,", ",")
+	description = strings.ReplaceAll(description, "\\n", "\n")
+
+	var labels []*models.Label
+	if val, ok := task["CATEGORIES"]; ok {
+		categories := strings.Split(val.Value, ",")
+		labels = make([]*models.Label, 0, len(categories))
+		for _, category := range categories {
+			labels = append(labels, &models.Label{
+				Title: category,
+			})
+		}
+	}
 
 	vTask = &models.Task{
-		UID:         task["UID"],
-		Title:       task["SUMMARY"],
-		Description: task["DESCRIPTION"],
+		UID:         task["UID"].Value,
+		Title:       task["SUMMARY"].Value,
+		Description: description,
 		Priority:    priority,
+		Labels:      labels,
 		DueDate:     caldavTimeToTimestamp(task["DUE"]),
 		Updated:     caldavTimeToTimestamp(task["DTSTAMP"]),
 		StartDate:   caldavTimeToTimestamp(task["DTSTART"]),
 		DoneAt:      caldavTimeToTimestamp(task["COMPLETED"]),
 	}
 
-	if task["STATUS"] == "COMPLETED" {
+	for _, c := range relations {
+		var relTypeStr string
+		if _, ok := c.ICalParameters["RELTYPE"]; ok {
+			if len(c.ICalParameters["RELTYPE"]) != 1 {
+				continue
+			}
+
+			relTypeStr = c.ICalParameters["RELTYPE"][0]
+		}
+
+		var relationKind models.RelationKind
+		switch relTypeStr {
+		case "PARENT":
+			relationKind = models.RelationKindParenttask
+		case "CHILD":
+			relationKind = models.RelationKindSubtask
+		default:
+			relationKind = models.RelationKindParenttask
+		}
+
+		if vTask.RelatedTasks == nil {
+			vTask.RelatedTasks = make(map[models.RelationKind][]*models.Task)
+		}
+
+		vTask.RelatedTasks[relationKind] = append(vTask.RelatedTasks[relationKind], &models.Task{
+			UID: c.Value,
+		})
+	}
+
+	if task["STATUS"].Value == "COMPLETED" {
 		vTask.Done = true
 	}
 
@@ -110,11 +186,66 @@ func ParseTaskFromVTODO(content string) (vTask *models.Task, err error) {
 		vTask.EndDate = vTask.StartDate.Add(duration)
 	}
 
+	for _, vAlarm := range vTodo.SubComponents() {
+		if vAlarm, ok := vAlarm.(*ics.VAlarm); ok {
+			vTask = parseVAlarm(vAlarm, vTask)
+		}
+	}
+
 	return
 }
 
+func parseVAlarm(vAlarm *ics.VAlarm, vTask *models.Task) *models.Task {
+	for _, property := range vAlarm.UnknownPropertiesIANAProperties() {
+		if property.IANAToken != "TRIGGER" {
+			continue
+		}
+
+		if contains(property.ICalParameters["VALUE"], "DATE-TIME") {
+			// Example: TRIGGER;VALUE=DATE-TIME:20181201T011210Z
+			vTask.Reminders = append(vTask.Reminders, &models.TaskReminder{
+				Reminder: caldavTimeToTimestamp(property),
+			})
+			continue
+		}
+
+		duration := utils.ParseISO8601Duration(property.Value)
+
+		if contains(property.ICalParameters["RELATED"], "END") {
+			// Example: TRIGGER;RELATED=END:-P2D
+			if vTask.EndDate.IsZero() {
+				vTask.Reminders = append(vTask.Reminders, &models.TaskReminder{
+					RelativePeriod: int64(duration.Seconds()),
+					RelativeTo:     models.ReminderRelationDueDate})
+			} else {
+				vTask.Reminders = append(vTask.Reminders, &models.TaskReminder{
+					RelativePeriod: int64(duration.Seconds()),
+					RelativeTo:     models.ReminderRelationEndDate})
+			}
+			continue
+		}
+
+		// Example: TRIGGER;RELATED=START:-P2D
+		// Example: TRIGGER:-PT60M
+		vTask.Reminders = append(vTask.Reminders, &models.TaskReminder{
+			RelativePeriod: int64(duration.Seconds()),
+			RelativeTo:     models.ReminderRelationStartDate})
+	}
+	return vTask
+}
+
+func contains(array []string, str string) bool {
+	for _, value := range array {
+		if value == str {
+			return true
+		}
+	}
+	return false
+}
+
 // https://tools.ietf.org/html/rfc5545#section-3.3.5
-func caldavTimeToTimestamp(tstring string) time.Time {
+func caldavTimeToTimestamp(ianaProperty ics.IANAProperty) time.Time {
+	tstring := ianaProperty.Value
 	if tstring == "" {
 		return time.Time{}
 	}
@@ -125,7 +256,28 @@ func caldavTimeToTimestamp(tstring string) time.Time {
 		format = `20060102T150405Z`
 	}
 
-	t, err := time.Parse(format, tstring)
+	if len(tstring) == 8 {
+		format = `20060102`
+	}
+
+	var t time.Time
+	var err error
+	tzParameter := ianaProperty.ICalParameters["TZID"]
+	if len(tzParameter) > 0 {
+		loc, err := time.LoadLocation(tzParameter[0])
+		if err != nil {
+			log.Warningf("Error while parsing caldav timezone %s: %s", tzParameter[0], err)
+		} else {
+			t, err = time.ParseInLocation(format, tstring, loc)
+			if err != nil {
+				log.Warningf("Error while parsing caldav time %s to TimeStamp: %s at location %s", tstring, loc, err)
+			} else {
+				t = t.In(config.GetTimeZone())
+				return t
+			}
+		}
+	}
+	t, err = time.Parse(format, tstring)
 	if err != nil {
 		log.Warningf("Error while parsing caldav time %s to TimeStamp: %s", tstring, err)
 		return time.Time{}

pkg/caldav/parsing_test.go

@@ -1,5 +1,5 @@
 // Vikunja is a to-do list application to facilitate your life.
-// Copyright 2018-2021 Vikunja and contributors. All rights reserved.
+// Copyright 2018-present Vikunja and contributors. All rights reserved.
 //
 // This program is free software: you can redistribute it and/or modify
 // it under the terms of the GNU Affero General Public Licensee as published by
@@ -85,6 +85,274 @@ END:VCALENDAR`,
 				Updated:     time.Unix(1543626724, 0).In(config.GetTimeZone()),
 			},
 		},
+		{
+			name: "With categories",
+			args: args{content: `BEGIN:VCALENDAR
+VERSION:2.0
+METHOD:PUBLISH
+X-PUBLISHED-TTL:PT4H
+X-WR-CALNAME:test
+PRODID:-//RandomProdID which is not random//EN
+BEGIN:VTODO
+UID:randomuid
+DTSTAMP:20181201T011204
+SUMMARY:Todo #1
+DESCRIPTION:Lorem Ipsum
+CATEGORIES:cat1,cat2
+LAST-MODIFIED:00010101T000000
+END:VTODO
+END:VCALENDAR`,
+			},
+			wantVTask: &models.Task{
+				Title:       "Todo #1",
+				UID:         "randomuid",
+				Description: "Lorem Ipsum",
+				Labels: []*models.Label{
+					{
+						Title: "cat1",
+					},
+					{
+						Title: "cat2",
+					},
+				},
+				Updated: time.Unix(1543626724, 0).In(config.GetTimeZone()),
+			},
+		},
+		{
+			name: "With alarm (time trigger)",
+			args: args{content: `BEGIN:VCALENDAR
+VERSION:2.0
+METHOD:PUBLISH
+X-PUBLISHED-TTL:PT4H
+X-WR-CALNAME:test
+PRODID:-//RandomProdID which is not random//EN
+BEGIN:VTODO
+UID:randomuid
+DTSTAMP:20181201T011204
+SUMMARY:Todo #1
+DESCRIPTION:Lorem Ipsum
+BEGIN:VALARM
+TRIGGER;VALUE=DATE-TIME:20181201T011210Z
+ACTION:DISPLAY
+END:VALARM
+END:VTODO
+END:VCALENDAR`,
+			},
+			wantVTask: &models.Task{
+				Title:       "Todo #1",
+				UID:         "randomuid",
+				Description: "Lorem Ipsum",
+				Reminders: []*models.TaskReminder{
+					{
+						Reminder: time.Date(2018, 12, 1, 1, 12, 10, 0, config.GetTimeZone()),
+					},
+				},
+				Updated: time.Unix(1543626724, 0).In(config.GetTimeZone()),
+			},
+		},
+		{
+			name: "With alarm (relative trigger)",
+			args: args{content: `BEGIN:VCALENDAR
+VERSION:2.0
+METHOD:PUBLISH
+X-PUBLISHED-TTL:PT4H
+X-WR-CALNAME:test
+PRODID:-//RandomProdID which is not random//EN
+BEGIN:VTODO
+UID:randomuid
+DTSTAMP:20181201T011204
+SUMMARY:Todo #1
+DESCRIPTION:Lorem Ipsum
+DTSTART:20230228T170000Z
+DUE:20230304T150000Z
+BEGIN:VALARM
+TRIGGER:PT0S
+ACTION:DISPLAY
+END:VALARM
+BEGIN:VALARM
+TRIGGER;VALUE=DURATION:-PT60M
+ACTION:DISPLAY
+END:VALARM
+BEGIN:VALARM
+TRIGGER:-PT61M
+ACTION:DISPLAY
+END:VALARM
+BEGIN:VALARM
+TRIGGER;RELATED=START:-P1D
+ACTION:DISPLAY
+END:VALARM
+BEGIN:VALARM
+TRIGGER;RELATED=END:-PT30M
+ACTION:DISPLAY
+END:VALARM
+END:VTODO
+END:VCALENDAR`,
+			},
+			wantVTask: &models.Task{
+				Title:       "Todo #1",
+				UID:         "randomuid",
+				Description: "Lorem Ipsum",
+				StartDate:   time.Date(2023, 2, 28, 17, 0, 0, 0, config.GetTimeZone()),
+				DueDate:     time.Date(2023, 3, 4, 15, 0, 0, 0, config.GetTimeZone()),
+				Reminders: []*models.TaskReminder{
+					{
+						RelativeTo:     models.ReminderRelationStartDate,
+						RelativePeriod: 0,
+					},
+					{
+						RelativeTo:     models.ReminderRelationStartDate,
+						RelativePeriod: -3600,
+					},
+					{
+						RelativeTo:     models.ReminderRelationStartDate,
+						RelativePeriod: -3660,
+					},
+					{
+						RelativeTo:     models.ReminderRelationStartDate,
+						RelativePeriod: -86400,
+					},
+					{
+						RelativeTo:     models.ReminderRelationDueDate,
+						RelativePeriod: -1800,
+					},
+				},
+				Updated: time.Unix(1543626724, 0).In(config.GetTimeZone()),
+			},
+		},
+		{
+			name: "With parent",
+			args: args{content: `BEGIN:VCALENDAR
+VERSION:2.0
+METHOD:PUBLISH
+X-PUBLISHED-TTL:PT4H
+X-WR-CALNAME:test
+PRODID:-//RandomProdID which is not random//EN
+BEGIN:VTODO
+UID:randomuid
+DTSTAMP:20181201T011204
+SUMMARY:SubTask #1
+DESCRIPTION:Lorem Ipsum
+LAST-MODIFIED:00010101T000000
+RELATED-TO;RELTYPE=PARENT:randomuid_parent
+END:VTODO
+END:VCALENDAR`,
+			},
+			wantVTask: &models.Task{
+				Title:       "SubTask #1",
+				UID:         "randomuid",
+				Description: "Lorem Ipsum",
+				Updated:     time.Unix(1543626724, 0).In(config.GetTimeZone()),
+				RelatedTasks: map[models.RelationKind][]*models.Task{
+					models.RelationKindParenttask: {
+						{
+							UID: "randomuid_parent",
+						},
+					},
+				},
+			},
+		},
+		{
+			name: "With subtask",
+			args: args{content: `BEGIN:VCALENDAR
+VERSION:2.0
+METHOD:PUBLISH
+X-PUBLISHED-TTL:PT4H
+X-WR-CALNAME:test
+PRODID:-//RandomProdID which is not random//EN
+BEGIN:VTODO
+UID:randomuid
+DTSTAMP:20181201T011204
+SUMMARY:Parent
+DESCRIPTION:Lorem Ipsum
+LAST-MODIFIED:00010101T000000
+RELATED-TO;RELTYPE=CHILD:randomuid_child
+END:VTODO
+END:VCALENDAR`,
+			},
+			wantVTask: &models.Task{
+				Title:       "Parent",
+				UID:         "randomuid",
+				Description: "Lorem Ipsum",
+				Updated:     time.Unix(1543626724, 0).In(config.GetTimeZone()),
+				RelatedTasks: map[models.RelationKind][]*models.Task{
+					models.RelationKindSubtask: {
+						{
+							UID: "randomuid_child",
+						},
+					},
+				},
+			},
+		},
+		{
+			name: "example task from tasks.org app",
+			args: args{content: `BEGIN:VCALENDAR
+VERSION:2.0
+PRODID:+//IDN tasks.org//android-130102//EN
+BEGIN:VTODO
+DTSTAMP:20230402T074158Z
+UID:4290517349243274514
+CREATED:20230402T060451Z
+LAST-MODIFIED:20230402T074154Z
+SUMMARY:Test with tasks.org
+PRIORITY:9
+CATEGORIES:Vikunja
+X-APPLE-SORT-ORDER:697384109
+DUE;TZID=Europe/Berlin:20230402T170001
+DTSTART;TZID=Europe/Berlin:20230401T090000
+BEGIN:VALARM
+TRIGGER;RELATED=END:PT0S
+ACTION:DISPLAY
+DESCRIPTION:Default Tasks.org description
+END:VALARM
+BEGIN:VALARM
+TRIGGER;VALUE=DATE-TIME:20230402T100000Z
+ACTION:DISPLAY
+DESCRIPTION:Default Tasks.org description
+END:VALARM
+END:VTODO
+BEGIN:VTIMEZONE
+TZID:Europe/Berlin
+LAST-MODIFIED:20220816T024022Z
+BEGIN:DAYLIGHT
+TZNAME:CEST
+TZOFFSETFROM:+0100
+TZOFFSETTO:+0200
+DTSTART:19810329T020000
+RRULE:FREQ=YEARLY;BYMONTH=3;BYDAY=-1SU
+END:DAYLIGHT
+BEGIN:STANDARD
+TZNAME:CET
+TZOFFSETFROM:+0200
+TZOFFSETTO:+0100
+DTSTART:19961027T030000
+RRULE:FREQ=YEARLY;BYMONTH=10;BYDAY=-1SU
+END:STANDARD
+END:VTIMEZONE
+END:VCALENDAR`,
+			},
+			wantVTask: &models.Task{
+				Updated:  time.Date(2023, 4, 2, 7, 41, 58, 0, config.GetTimeZone()),
+				UID:      "4290517349243274514",
+				Title:    "Test with tasks.org",
+				Priority: 1,
+				Labels: []*models.Label{
+					{
+						Title: "Vikunja",
+					},
+				},
+				DueDate:   time.Date(2023, 4, 2, 15, 0, 1, 0, config.GetTimeZone()),
+				StartDate: time.Date(2023, 4, 1, 7, 0, 0, 0, config.GetTimeZone()),
+				Reminders: []*models.TaskReminder{
+					{
+						RelativeTo:     models.ReminderRelationDueDate,
+						RelativePeriod: 0,
+					},
+					{
+						Reminder: time.Date(2023, 4, 2, 10, 0, 0, 0, config.GetTimeZone()),
+					},
+				},
+			},
+		},
 	}
 	for _, tt := range tests {
 		t.Run(tt.name, func(t *testing.T) {
@@ -94,7 +362,226 @@ END:VCALENDAR`,
 				return
 			}
 			if diff, equal := messagediff.PrettyDiff(got, tt.wantVTask); !equal {
-				t.Errorf("ParseTaskFromVTODO() gotVTask = %v, want %v, diff = %s", got, tt.wantVTask, diff)
+				t.Errorf("ParseTaskFromVTODO()\n gotVTask = %v\n want %v\n diff = %s", got, tt.wantVTask, diff)
+			}
+		})
+	}
+}
+
+func TestGetCaldavTodosForTasks(t *testing.T) {
+	type args struct {
+		list  *models.ProjectWithTasksAndBuckets
+		tasks []*models.TaskWithComments
+	}
+	tests := []struct {
+		name       string
+		args       args
+		wantCaldav string
+	}{
+		{
+			name: "Format single Task as CalDAV",
+			args: args{
+				list: &models.ProjectWithTasksAndBuckets{
+					Project: models.Project{
+						Title: "List title",
+					},
+				},
+				tasks: []*models.TaskWithComments{
+					{
+						Task: models.Task{
+							Title:       "Task 1",
+							UID:         "randomuid",
+							Description: "Description",
+							Priority:    3,
+							Created:     time.Unix(1543626721, 0).In(config.GetTimeZone()),
+							DueDate:     time.Unix(1543626722, 0).In(config.GetTimeZone()),
+							StartDate:   time.Unix(1543626723, 0).In(config.GetTimeZone()),
+							EndDate:     time.Unix(1543626724, 0).In(config.GetTimeZone()),
+							Updated:     time.Unix(1543626725, 0).In(config.GetTimeZone()),
+							DoneAt:      time.Unix(1543626726, 0).In(config.GetTimeZone()),
+							RepeatAfter: 86400,
+							Labels: []*models.Label{
+								{
+									ID:    1,
+									Title: "label1",
+								},
+								{
+									ID:    2,
+									Title: "label2",
+								},
+							},
+							Reminders: []*models.TaskReminder{
+								{
+									Reminder: time.Unix(1543626730, 0).In(config.GetTimeZone()),
+								},
+								{
+									Reminder:       time.Unix(1543626731, 0).In(config.GetTimeZone()),
+									RelativePeriod: -3600,
+									RelativeTo:     models.ReminderRelationDueDate,
+								},
+							},
+						},
+					},
+				},
+			},
+			wantCaldav: `BEGIN:VCALENDAR
+VERSION:2.0
+METHOD:PUBLISH
+X-PUBLISHED-TTL:PT4H
+X-WR-CALNAME:List title
+PRODID:-//Vikunja Todo App//EN
+BEGIN:VTODO
+UID:randomuid
+DTSTAMP:20181201T011205Z
+SUMMARY:Task 1
+DTSTART:20181201T011203Z
+DTEND:20181201T011204Z
+DESCRIPTION:Description
+COMPLETED:20181201T011206Z
+STATUS:COMPLETED
+DUE:20181201T011202Z
+CREATED:20181201T011201Z
+PRIORITY:3
+RRULE:FREQ=SECONDLY;INTERVAL=86400
+CATEGORIES:label1,label2
+LAST-MODIFIED:20181201T011205Z
+BEGIN:VALARM
+TRIGGER;VALUE=DATE-TIME:20181201T011210Z
+ACTION:DISPLAY
+DESCRIPTION:Task 1
+END:VALARM
+BEGIN:VALARM
+TRIGGER;RELATED=END:-PT1H0M0S
+ACTION:DISPLAY
+DESCRIPTION:Task 1
+END:VALARM
+END:VTODO
+END:VCALENDAR`,
+		},
+		{
+			name: "Format Task with Related Tasks as CalDAV",
+			args: args{
+				list: &models.ProjectWithTasksAndBuckets{
+					Project: models.Project{
+						Title: "List title",
+					},
+				},
+				tasks: []*models.TaskWithComments{
+					{
+						Task: models.Task{
+							Title:       "Parent Task",
+							UID:         "randomuid_parent",
+							Description: "A parent task",
+							Priority:    3,
+							Created:     time.Unix(1543626721, 0).In(config.GetTimeZone()),
+							Updated:     time.Unix(1543626725, 0).In(config.GetTimeZone()),
+							RelatedTasks: map[models.RelationKind][]*models.Task{
+								models.RelationKindSubtask: {
+									{
+										Title:       "Subtask 1",
+										UID:         "randomuid_child_1",
+										Description: "The first child task",
+										Created:     time.Unix(1543626724, 0).In(config.GetTimeZone()),
+										Updated:     time.Unix(1543626724, 0).In(config.GetTimeZone()),
+									},
+									{
+										Title:       "Subtask 2",
+										UID:         "randomuid_child_2",
+										Description: "The second child task",
+										Created:     time.Unix(1543626724, 0).In(config.GetTimeZone()),
+										Updated:     time.Unix(1543626724, 0).In(config.GetTimeZone()),
+									},
+								},
+							},
+						},
+					},
+					{
+						Task: models.Task{
+							Title:       "Subtask 1",
+							UID:         "randomuid_child_1",
+							Description: "The first child task",
+							Created:     time.Unix(1543626724, 0).In(config.GetTimeZone()),
+							Updated:     time.Unix(1543626724, 0).In(config.GetTimeZone()),
+							RelatedTasks: map[models.RelationKind][]*models.Task{
+								models.RelationKindParenttask: {
+									{
+										Title:       "Parent task",
+										UID:         "randomuid_parent",
+										Description: "A parent task",
+										Priority:    3,
+										Created:     time.Unix(1543626721, 0).In(config.GetTimeZone()),
+										Updated:     time.Unix(1543626725, 0).In(config.GetTimeZone()),
+									},
+								},
+							},
+						},
+					},
+					{
+						Task: models.Task{
+							Title:       "Subtask 2",
+							UID:         "randomuid_child_2",
+							Description: "The second child task",
+							Created:     time.Unix(1543626724, 0).In(config.GetTimeZone()),
+							Updated:     time.Unix(1543626724, 0).In(config.GetTimeZone()),
+							RelatedTasks: map[models.RelationKind][]*models.Task{
+								models.RelationKindParenttask: {
+									{
+										Title:       "Parent task",
+										UID:         "randomuid_parent",
+										Description: "A parent task",
+										Priority:    3,
+										Created:     time.Unix(1543626721, 0).In(config.GetTimeZone()),
+										Updated:     time.Unix(1543626725, 0).In(config.GetTimeZone()),
+									},
+								},
+							},
+						},
+					},
+				},
+			},
+			wantCaldav: `BEGIN:VCALENDAR
+VERSION:2.0
+METHOD:PUBLISH
+X-PUBLISHED-TTL:PT4H
+X-WR-CALNAME:List title
+PRODID:-//Vikunja Todo App//EN
+BEGIN:VTODO
+UID:randomuid_parent
+DTSTAMP:20181201T011205Z
+SUMMARY:Parent Task
+DESCRIPTION:A parent task
+CREATED:20181201T011201Z
+PRIORITY:3
+LAST-MODIFIED:20181201T011205Z
+RELATED-TO;RELTYPE=CHILD:randomuid_child_1
+RELATED-TO;RELTYPE=CHILD:randomuid_child_2
+END:VTODO
+BEGIN:VTODO
+UID:randomuid_child_1
+DTSTAMP:20181201T011204Z
+SUMMARY:Subtask 1
+DESCRIPTION:The first child task
+CREATED:20181201T011204Z
+LAST-MODIFIED:20181201T011204Z
+RELATED-TO;RELTYPE=PARENT:randomuid_parent
+END:VTODO
+BEGIN:VTODO
+UID:randomuid_child_2
+DTSTAMP:20181201T011204Z
+SUMMARY:Subtask 2
+DESCRIPTION:The second child task
+CREATED:20181201T011204Z
+LAST-MODIFIED:20181201T011204Z
+RELATED-TO;RELTYPE=PARENT:randomuid_parent
+END:VTODO
+END:VCALENDAR`,
+		},
+	}
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			got := GetCaldavTodosForTasks(tt.args.list, tt.args.tasks)
+			if diff, equal := messagediff.PrettyDiff(got, tt.wantCaldav); !equal {
+				t.Errorf("GetCaldavTodosForTasks() gotVTask = %v, want %v, diff = %s", got, tt.wantCaldav, diff)
 			}
 		})
 	}

pkg/caldav/priority.go

@@ -1,5 +1,5 @@
 // Vikunja is a to-do list application to facilitate your life.
-// Copyright 2018-2021 Vikunja and contributors. All rights reserved.
+// Copyright 2018-present Vikunja and contributors. All rights reserved.
 //
 // This program is free software: you can redistribute it and/or modify
 // it under the terms of the GNU Affero General Public Licensee as published by

pkg/caldav/priority_test.go

@@ -1,5 +1,5 @@
 // Vikunja is a to-do list application to facilitate your life.
-// Copyright 2018-2021 Vikunja and contributors. All rights reserved.
+// Copyright 2018-present Vikunja and contributors. All rights reserved.
 //
 // This program is free software: you can redistribute it and/or modify
 // it under the terms of the GNU Affero General Public Licensee as published by

pkg/cmd/cmd.go

@@ -1,5 +1,5 @@
 // Vikunja is a to-do list application to facilitate your life.
-// Copyright 2018-2021 Vikunja and contributors. All rights reserved.
+// Copyright 2018-present Vikunja and contributors. All rights reserved.
 //
 // This program is free software: you can redistribute it and/or modify
 // it under the terms of the GNU Affero General Public Licensee as published by

pkg/cmd/dump.go

@@ -1,5 +1,5 @@
 // Vikunja is a to-do list application to facilitate your life.
-// Copyright 2018-2021 Vikunja and contributors. All rights reserved.
+// Copyright 2018-present Vikunja and contributors. All rights reserved.
 //
 // This program is free software: you can redistribute it and/or modify
 // it under the terms of the GNU Affero General Public Licensee as published by
@@ -33,7 +33,7 @@ var dumpCmd = &cobra.Command{
 	Use:   "dump",
 	Short: "Dump all vikunja data into a zip file. Includes config, files and db.",
 	PreRun: func(cmd *cobra.Command, args []string) {
-		initialize.FullInit()
+		initialize.FullInitWithoutAsync()
 	},
 	Run: func(cmd *cobra.Command, args []string) {
 		filename := "vikunja-dump_" + time.Now().Format("2006-01-02_15-03-05") + ".zip"

pkg/cmd/index.go

@@ -0,0 +1,88 @@
+// Vikunja is a to-do list application to facilitate your life.
+// Copyright 2018-present Vikunja and contributors. All rights reserved.
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public Licensee as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+// GNU Affero General Public Licensee for more details.
+//
+// You should have received a copy of the GNU Affero General Public Licensee
+// along with this program.  If not, see <https://www.gnu.org/licenses/>.
+
+package cmd
+
+import (
+	"code.vikunja.io/api/pkg/config"
+	"code.vikunja.io/api/pkg/initialize"
+	"code.vikunja.io/api/pkg/log"
+	"code.vikunja.io/api/pkg/models"
+	"github.com/spf13/cobra"
+)
+
+func init() {
+	rootCmd.AddCommand(indexCmd)
+	rootCmd.AddCommand(partialReindexCmd)
+}
+
+var indexCmd = &cobra.Command{
+	Use:   "index",
+	Short: "Reindex all of Vikunja's data into Typesense. This will remove any existing index.",
+	PreRun: func(cmd *cobra.Command, args []string) {
+		initialize.FullInitWithoutAsync()
+	},
+	Run: func(cmd *cobra.Command, args []string) {
+		if config.TypesenseURL.GetString() == "" {
+			log.Error("Typesense not configured")
+			return
+		}
+
+		log.Infof("Indexing… This may take a while.")
+
+		err := models.CreateTypesenseCollections()
+		if err != nil {
+			log.Criticalf("Could not create Typesense collections: %s", err.Error())
+			return
+		}
+		err = models.ReindexAllTasks()
+		if err != nil {
+			log.Criticalf("Could not reindex all tasks into Typesense: %s", err.Error())
+			return
+		}
+
+		log.Infof("Done!")
+	},
+}
+
+var partialReindexCmd = &cobra.Command{
+	Use:   "partial-index",
+	Short: "Reindex any tasks which were not indexed yet into Typesense. This will not remove any existing index.",
+	PreRun: func(cmd *cobra.Command, args []string) {
+		initialize.FullInitWithoutAsync()
+	},
+	Run: func(cmd *cobra.Command, args []string) {
+		if config.TypesenseURL.GetString() == "" {
+			log.Error("Typesense not configured")
+			return
+		}
+
+		log.Infof("Indexing… This may take a while.")
+
+		err := models.CreateTypesenseCollections()
+		if err != nil {
+			log.Criticalf("Could not create Typesense collections: %s", err.Error())
+			return
+		}
+		err = models.SyncUpdatedTasksIntoTypesense()
+		if err != nil {
+			log.Criticalf("Could not reindex all changed tasks into Typesense: %s", err.Error())
+			return
+		}
+
+		log.Infof("Done!")
+	},
+}

pkg/cmd/migrate.go

@@ -1,5 +1,5 @@
 // Vikunja is a to-do list application to facilitate your life.
-// Copyright 2018-2021 Vikunja and contributors. All rights reserved.
+// Copyright 2018-present Vikunja and contributors. All rights reserved.
 //
 // This program is free software: you can redistribute it and/or modify
 // it under the terms of the GNU Affero General Public Licensee as published by

pkg/cmd/restore.go

@@ -1,5 +1,5 @@
 // Vikunja is a to-do list application to facilitate your life.
-// Copyright 2018-2021 Vikunja and contributors. All rights reserved.
+// Copyright 2018-present Vikunja and contributors. All rights reserved.
 //
 // This program is free software: you can redistribute it and/or modify
 // it under the terms of the GNU Affero General Public Licensee as published by
@@ -32,7 +32,7 @@ var restoreCmd = &cobra.Command{
 	Short: "Restores all vikunja data from a vikunja dump.",
 	Args:  cobra.ExactArgs(1),
 	PreRun: func(cmd *cobra.Command, args []string) {
-		initialize.FullInit()
+		initialize.FullInitWithoutAsync()
 	},
 	Run: func(cmd *cobra.Command, args []string) {
 		if err := dump.Restore(args[0]); err != nil {

pkg/cmd/testmail.go

@@ -1,5 +1,5 @@
 // Vikunja is a to-do list application to facilitate your life.
-// Copyright 2018-2021 Vikunja and contributors. All rights reserved.
+// Copyright 2018-present Vikunja and contributors. All rights reserved.
 //
 // This program is free software: you can redistribute it and/or modify
 // it under the terms of the GNU Affero General Public Licensee as published by

pkg/cmd/user.go

@@ -1,5 +1,5 @@
 // Vikunja is a to-do list application to facilitate your life.
-// Copyright 2018-2021 Vikunja and contributors. All rights reserved.
+// Copyright 2018-present Vikunja and contributors. All rights reserved.
 //
 // This program is free software: you can redistribute it and/or modify
 // it under the terms of the GNU Affero General Public Licensee as published by
@@ -24,6 +24,8 @@ import (
 	"strings"
 	"time"
 
+	"github.com/asaskevich/govalidator"
+
 	"code.vikunja.io/api/pkg/db"
 	"code.vikunja.io/api/pkg/initialize"
 	"code.vikunja.io/api/pkg/log"
@@ -44,6 +46,7 @@ var (
 	userFlagEnableUser            bool
 	userFlagDisableUser           bool
 	userFlagDeleteNow             bool
+	userFlagDeleteConfirm         bool
 )
 
 func init() {
@@ -65,13 +68,16 @@ func init() {
 	userResetPasswordCmd.Flags().StringVarP(&userFlagPassword, "password", "p", "", "The new password of the user. Only used in combination with --direct. You will be asked to enter it if not provided through the flag.")
 
 	// Change status flags
-	userChangeEnabledCmd.Flags().BoolVarP(&userFlagDisableUser, "disable", "d", false, "Disable the user.")
-	userChangeEnabledCmd.Flags().BoolVarP(&userFlagEnableUser, "enable", "e", false, "Enable the user.")
+	userChangeStatusCmd.Flags().BoolVarP(&userFlagDisableUser, "disable", "d", false, "Disable the user.")
+	userChangeStatusCmd.Flags().BoolVarP(&userFlagEnableUser, "enable", "e", false, "Enable the user.")
 
 	// User deletion flags
 	userDeleteCmd.Flags().BoolVarP(&userFlagDeleteNow, "now", "n", false, "If provided, deletes the user immediately instead of sending them an email first.")
 
-	userCmd.AddCommand(userListCmd, userCreateCmd, userUpdateCmd, userResetPasswordCmd, userChangeEnabledCmd, userDeleteCmd)
+	// Bypass confirm prompt
+	userDeleteCmd.Flags().BoolVarP(&userFlagDeleteConfirm, "confirm", "c", false, "Bypasses any prompts confirming the deletion request, use with caution!")
+
+	userCmd.AddCommand(userListCmd, userCreateCmd, userUpdateCmd, userResetPasswordCmd, userChangeStatusCmd, userDeleteCmd)
 	rootCmd.AddCommand(userCmd)
 }
 
@@ -98,12 +104,16 @@ func getPasswordFromFlagOrInput() (pw string) {
 }
 
 func getUserFromArg(s *xorm.Session, arg string) *user.User {
+	filter := user.User{}
 	id, err := strconv.ParseInt(arg, 10, 64)
 	if err != nil {
-		log.Fatalf("Invalid user id: %s", err)
+		log.Infof("Invalid user ID [%s], assuming username instead", arg)
+		filter.Username = arg
+	} else {
+		filter.ID = id
 	}
 
-	u, err := user.GetUserByID(s, id)
+	u, err := user.GetUserWithEmail(s, &filter)
 	if err != nil {
 		log.Fatalf("Could not get user: %s", err)
 	}
@@ -175,16 +185,21 @@ var userCreateCmd = &cobra.Command{
 			Email:    userFlagEmail,
 			Password: getPasswordFromFlagOrInput(),
 		}
+
+		if !govalidator.IsEmail(userFlagEmail) {
+			log.Fatalf("Provided email is invalid.")
+		}
+
 		newUser, err := user.CreateUser(s, u)
 		if err != nil {
 			_ = s.Rollback()
 			log.Fatalf("Error creating new user: %s", err)
 		}
 
-		err = models.CreateNewNamespaceForUser(s, newUser)
+		err = models.CreateNewProjectForUser(s, newUser)
 		if err != nil {
 			_ = s.Rollback()
-			log.Fatalf("Error creating new namespace for user: %s", err)
+			log.Fatalf("Error creating new project for user: %s", err)
 		}
 
 		if err := s.Commit(); err != nil {
@@ -218,7 +233,7 @@ var userUpdateCmd = &cobra.Command{
 			u.AvatarProvider = userFlagAvatar
 		}
 
-		_, err := user.UpdateUser(s, u)
+		_, err := user.UpdateUser(s, u, false)
 		if err != nil {
 			_ = s.Rollback()
 			log.Fatalf("Error updating the user: %s", err)
@@ -268,7 +283,7 @@ var userResetPasswordCmd = &cobra.Command{
 	},
 }
 
-var userChangeEnabledCmd = &cobra.Command{
+var userChangeStatusCmd = &cobra.Command{
 	Use:   "change-status [user id]",
 	Short: "Enable or disable a user. Will toggle the current status if no flag (--enable or --disable) is provided.",
 	PreRun: func(cmd *cobra.Command, args []string) {
@@ -281,18 +296,19 @@ var userChangeEnabledCmd = &cobra.Command{
 
 		u := getUserFromArg(s, args[0])
 
+		var status user.Status
 		if userFlagEnableUser {
-			u.Status = user.StatusActive
+			status = user.StatusActive
 		} else if userFlagDisableUser {
-			u.Status = user.StatusDisabled
+			status = user.StatusDisabled
 		} else {
 			if u.Status == user.StatusActive {
-				u.Status = user.StatusDisabled
+				status = user.StatusDisabled
 			} else {
-				u.Status = user.StatusActive
+				status = user.StatusActive
 			}
 		}
-		_, err := user.UpdateUser(s, u)
+		err := user.SetUserStatus(s, u, status)
 		if err != nil {
 			_ = s.Rollback()
 			log.Fatalf("Could not enable the user")
@@ -302,7 +318,7 @@ var userChangeEnabledCmd = &cobra.Command{
 			log.Fatalf("Error saving everything: %s", err)
 		}
 
-		fmt.Printf("User status successfully changed, status is now \"%s\"\n", u.Status)
+		fmt.Printf("User status successfully changed, status is now \"%s\"\n", status)
 	},
 }
 
@@ -315,7 +331,7 @@ var userDeleteCmd = &cobra.Command{
 		initialize.FullInit()
 	},
 	Run: func(cmd *cobra.Command, args []string) {
-		if userFlagDeleteNow {
+		if userFlagDeleteNow && !userFlagDeleteConfirm {
 			fmt.Println("You requested to delete the user immediately. Are you sure?")
 			fmt.Println(`To confirm, please type "yes, I confirm" in all uppercase:`)
 

pkg/cmd/version.go

@@ -1,5 +1,5 @@
 // Vikunja is a to-do list application to facilitate your life.
-// Copyright 2018-2021 Vikunja and contributors. All rights reserved.
+// Copyright 2018-present Vikunja and contributors. All rights reserved.
 //
 // This program is free software: you can redistribute it and/or modify
 // it under the terms of the GNU Affero General Public Licensee as published by

pkg/cmd/web.go

@@ -1,5 +1,5 @@
 // Vikunja is a to-do list application to facilitate your life.
-// Copyright 2018-2021 Vikunja and contributors. All rights reserved.
+// Copyright 2018-present Vikunja and contributors. All rights reserved.
 //
 // This program is free software: you can redistribute it and/or modify
 // it under the terms of the GNU Affero General Public Licensee as published by
@@ -23,15 +23,14 @@ import (
 	"os/signal"
 	"time"
 
-	"code.vikunja.io/api/pkg/cron"
-
 	"code.vikunja.io/api/pkg/config"
+	"code.vikunja.io/api/pkg/cron"
 	"code.vikunja.io/api/pkg/initialize"
 	"code.vikunja.io/api/pkg/log"
 	"code.vikunja.io/api/pkg/routes"
-	"code.vikunja.io/api/pkg/swagger"
 	"code.vikunja.io/api/pkg/utils"
 	"code.vikunja.io/api/pkg/version"
+
 	"github.com/labstack/echo/v4"
 	"github.com/spf13/cobra"
 )
@@ -76,9 +75,6 @@ var webCmd = &cobra.Command{
 		// Version notification
 		log.Infof("Vikunja version %s", version.Version)
 
-		// Additional swagger information
-		swagger.SwaggerInfo.Version = version.Version
-
 		// Start the webserver
 		e := routes.NewEcho()
 		routes.RegisterRoutes(e)

pkg/config/config.go

@@ -1,5 +1,5 @@
 // Vikunja is a to-do list application to facilitate your life.
-// Copyright 2018-2021 Vikunja and contributors. All rights reserved.
+// Copyright 2018-present Vikunja and contributors. All rights reserved.
 //
 // This program is free software: you can redistribute it and/or modify
 // it under the terms of the GNU Affero General Public Licensee as published by
@@ -19,14 +19,16 @@ package config
 import (
 	"crypto/rand"
 	"fmt"
-	"log"
 	"os"
+	"os/exec"
 	"path"
 	"path/filepath"
+	"runtime"
 	"strings"
 	"time"
 	_ "time/tzdata" // Imports time zone data instead of relying on the os
 
+	"code.vikunja.io/api/pkg/log"
 	"github.com/spf13/viper"
 )
 
@@ -37,14 +39,18 @@ type Key string
 const (
 	// #nosec
 	ServiceJWTSecret       Key = `service.JWTSecret`
+	ServiceJWTTTL          Key = `service.jwtttl`
+	ServiceJWTTTLLong      Key = `service.jwtttllong`
 	ServiceInterface       Key = `service.interface`
 	ServiceUnixSocket      Key = `service.unixsocket`
 	ServiceUnixSocketMode  Key = `service.unixsocketmode`
 	ServiceFrontendurl     Key = `service.frontendurl`
 	ServiceEnableCaldav    Key = `service.enablecaldav`
 	ServiceRootpath        Key = `service.rootpath`
+	ServiceStaticpath      Key = `service.staticpath`
 	ServiceMaxItemsPerPage Key = `service.maxitemsperpage`
-	// Deprecated. Use metrics.enabled
+	ServiceDemoMode        Key = `service.demomode`
+	// Deprecated: Use metrics.enabled
 	ServiceEnableMetrics         Key = `service.enablemetrics`
 	ServiceMotd                  Key = `service.motd`
 	ServiceEnableLinkSharing     Key = `service.enablelinksharing`
@@ -57,11 +63,11 @@ const (
 	ServiceTestingtoken          Key = `service.testingtoken`
 	ServiceEnableEmailReminders  Key = `service.enableemailreminders`
 	ServiceEnableUserDeletion    Key = `service.enableuserdeletion`
+	ServiceMaxAvatarSize         Key = `service.maxavatarsize`
 
-	AuthLocalEnabled      Key = `auth.local.enabled`
-	AuthOpenIDEnabled     Key = `auth.openid.enabled`
-	AuthOpenIDRedirectURL Key = `auth.openid.redirecturl`
-	AuthOpenIDProviders   Key = `auth.openid.providers`
+	AuthLocalEnabled    Key = `auth.local.enabled`
+	AuthOpenIDEnabled   Key = `auth.openid.enabled`
+	AuthOpenIDProviders Key = `auth.openid.providers`
 
 	LegalImprintURL Key = `legal.imprinturl`
 	LegalPrivacyURL Key = `legal.privacyurl`
@@ -76,17 +82,21 @@ const (
 	DatabaseMaxIdleConnections    Key = `database.maxidleconnections`
 	DatabaseMaxConnectionLifetime Key = `database.maxconnectionlifetime`
 	DatabaseSslMode               Key = `database.sslmode`
+	DatabaseSslCert               Key = `database.sslcert`
+	DatabaseSslKey                Key = `database.sslkey`
+	DatabaseSslRootCert           Key = `database.sslrootcert`
 	DatabaseTLS                   Key = `database.tls`
 
-	CacheEnabled        Key = `cache.enabled`
-	CacheType           Key = `cache.type`
-	CacheMaxElementSize Key = `cache.maxelementsize`
+	TypesenseEnabled Key = `typesense.enabled`
+	TypesenseURL     Key = `typesense.url`
+	TypesenseAPIKey  Key = `typesense.apikey`
 
 	MailerEnabled       Key = `mailer.enabled`
 	MailerHost          Key = `mailer.host`
 	MailerPort          Key = `mailer.port`
 	MailerUsername      Key = `mailer.username`
 	MailerPassword      Key = `mailer.password`
+	MailerAuthType      Key = `mailer.authtype`
 	MailerSkipTLSVerify Key = `mailer.skiptlsverify`
 	MailerFromEmail     Key = `mailer.fromemail`
 	MailerQueuelength   Key = `mailer.queuelength`
@@ -108,20 +118,19 @@ const (
 	LogPath          Key = `log.path`
 	LogEvents        Key = `log.events`
 	LogEventsLevel   Key = `log.eventslevel`
+	LogMail          Key = `log.mail`
+	LogMailLevel     Key = `log.maillevel`
 
-	RateLimitEnabled Key = `ratelimit.enabled`
-	RateLimitKind    Key = `ratelimit.kind`
-	RateLimitPeriod  Key = `ratelimit.period`
-	RateLimitLimit   Key = `ratelimit.limit`
-	RateLimitStore   Key = `ratelimit.store`
+	RateLimitEnabled           Key = `ratelimit.enabled`
+	RateLimitKind              Key = `ratelimit.kind`
+	RateLimitPeriod            Key = `ratelimit.period`
+	RateLimitLimit             Key = `ratelimit.limit`
+	RateLimitStore             Key = `ratelimit.store`
+	RateLimitNoAuthRoutesLimit Key = `ratelimit.noauthlimit`
 
 	FilesBasePath Key = `files.basepath`
 	FilesMaxSize  Key = `files.maxsize`
 
-	MigrationWunderlistEnable          Key = `migration.wunderlist.enable`
-	MigrationWunderlistClientID        Key = `migration.wunderlist.clientid`
-	MigrationWunderlistClientSecret    Key = `migration.wunderlist.clientsecret`
-	MigrationWunderlistRedirectURL     Key = `migration.wunderlist.redirecturl`
 	MigrationTodoistEnable             Key = `migration.todoist.enable`
 	MigrationTodoistClientID           Key = `migration.todoist.clientid`
 	MigrationTodoistClientSecret       Key = `migration.todoist.clientsecret`
@@ -151,6 +160,23 @@ const (
 	MetricsEnabled  Key = `metrics.enabled`
 	MetricsUsername Key = `metrics.username`
 	MetricsPassword Key = `metrics.password`
+
+	DefaultSettingsAvatarProvider              Key = `defaultsettings.avatar_provider`
+	DefaultSettingsAvatarFileID                Key = `defaultsettings.avatar_file_id`
+	DefaultSettingsEmailRemindersEnabled       Key = `defaultsettings.email_reminders_enabled`
+	DefaultSettingsDiscoverableByName          Key = `defaultsettings.discoverable_by_name`
+	DefaultSettingsDiscoverableByEmail         Key = `defaultsettings.discoverable_by_email`
+	DefaultSettingsOverdueTaskRemindersEnabled Key = `defaultsettings.overdue_tasks_reminders_enabled`
+	DefaultSettingsDefaultProjectID            Key = `defaultsettings.default_project_id`
+	DefaultSettingsWeekStart                   Key = `defaultsettings.week_start`
+	DefaultSettingsLanguage                    Key = `defaultsettings.language`
+	DefaultSettingsTimezone                    Key = `defaultsettings.timezone`
+	DefaultSettingsOverdueTaskRemindersTime    Key = `defaultsettings.overdue_tasks_reminders_time`
+
+	WebhooksEnabled        Key = `webhooks.enabled`
+	WebhooksTimeoutSeconds Key = `webhooks.timeoutseconds`
+	WebhooksProxyURL       Key = `webhooks.proxyurl`
+	WebhooksProxyPassword  Key = `webhooks.proxypassword`
 )
 
 // GetString returns a string config value
@@ -215,6 +241,39 @@ func (k Key) setDefault(i interface{}) {
 	viper.SetDefault(string(k), i)
 }
 
+// Tries different methods to figure out the binary folder.
+// Copied and adopted from https://github.com/speedata/publisher/commit/3b668668d57edef04ea854d5bbd58f83eb1b799f
+func getBinaryDirLocation() string {
+	// First, check if the standard library gives us the path. This will work 99% of the time.
+	ex, err := os.Executable()
+	if err == nil {
+		return filepath.Dir(ex)
+	}
+
+	// Then check if the binary was run with a full path and use that if that's the case.
+	if strings.Contains(os.Args[0], "/") {
+		binDir, err := filepath.Abs(filepath.Dir(os.Args[0]))
+		if err != nil {
+			log.Fatal(err)
+		}
+		return binDir
+	}
+
+	exeSuffix := ""
+	if runtime.GOOS == "windows" {
+		exeSuffix = ".exe"
+	}
+
+	// All else failing, search for a vikunja binary in the current $PATH.
+	// This can give wrong results.
+	exeLocation, err := exec.LookPath("vikunja" + exeSuffix)
+	if err != nil {
+		log.Fatal(err)
+	}
+
+	return filepath.Dir(exeLocation)
+}
+
 // InitDefaultConfig sets default config values
 // This is an extra function so we can call it when initializing tests without initializing the full config
 func InitDefaultConfig() {
@@ -226,17 +285,15 @@ func InitDefaultConfig() {
 
 	// Service
 	ServiceJWTSecret.setDefault(random)
+	ServiceJWTTTL.setDefault(259200)      // 72 hours
+	ServiceJWTTTLLong.setDefault(2592000) // 30 days
 	ServiceInterface.setDefault(":3456")
 	ServiceUnixSocket.setDefault("")
 	ServiceFrontendurl.setDefault("")
 	ServiceEnableCaldav.setDefault(true)
 
-	ex, err := os.Executable()
-	if err != nil {
-		panic(err)
-	}
-	exPath := filepath.Dir(ex)
-	ServiceRootpath.setDefault(exPath)
+	ServiceRootpath.setDefault(getBinaryDirLocation())
+	ServiceStaticpath.setDefault("")
 	ServiceMaxItemsPerPage.setDefault(50)
 	ServiceEnableMetrics.setDefault(false)
 	ServiceMotd.setDefault("")
@@ -248,6 +305,8 @@ func InitDefaultConfig() {
 	ServiceEnableTotp.setDefault(true)
 	ServiceEnableEmailReminders.setDefault(true)
 	ServiceEnableUserDeletion.setDefault(true)
+	ServiceMaxAvatarSize.setDefault(1024)
+	ServiceDemoMode.setDefault(false)
 
 	// Auth
 	AuthLocalEnabled.setDefault(true)
@@ -264,23 +323,26 @@ func InitDefaultConfig() {
 	DatabaseMaxIdleConnections.setDefault(50)
 	DatabaseMaxConnectionLifetime.setDefault(10000)
 	DatabaseSslMode.setDefault("disable")
+	DatabaseSslCert.setDefault("")
+	DatabaseSslKey.setDefault("")
+	DatabaseSslRootCert.setDefault("")
 	DatabaseTLS.setDefault("false")
 
-	// Cacher
-	CacheEnabled.setDefault(false)
-	CacheType.setDefault("memory")
-	CacheMaxElementSize.setDefault(1000)
+	// Typesense
+	TypesenseEnabled.setDefault(false)
+
 	// Mailer
 	MailerEnabled.setDefault(false)
 	MailerHost.setDefault("")
 	MailerPort.setDefault("587")
-	MailerUsername.setDefault("user")
+	MailerUsername.setDefault("")
 	MailerPassword.setDefault("")
 	MailerSkipTLSVerify.setDefault(false)
 	MailerFromEmail.setDefault("mail@vikunja")
 	MailerQueuelength.setDefault(100)
 	MailerQueueTimeout.setDefault(30)
 	MailerForceSSL.setDefault(false)
+	MailerAuthType.setDefault("plain")
 	// Redis
 	RedisEnabled.setDefault(false)
 	RedisHost.setDefault("localhost:6379")
@@ -295,14 +357,17 @@ func InitDefaultConfig() {
 	LogHTTP.setDefault("stdout")
 	LogEcho.setDefault("off")
 	LogPath.setDefault(ServiceRootpath.GetString() + "/logs")
-	LogEvents.setDefault("stdout")
+	LogEvents.setDefault("off")
 	LogEventsLevel.setDefault("INFO")
+	LogMail.setDefault("off")
+	LogMailLevel.setDefault("INFO")
 	// Rate Limit
 	RateLimitEnabled.setDefault(false)
 	RateLimitKind.setDefault("user")
 	RateLimitLimit.setDefault(100)
 	RateLimitPeriod.setDefault(60)
 	RateLimitStore.setDefault("memory")
+	RateLimitNoAuthRoutesLimit.setDefault(10)
 	// Files
 	FilesBasePath.setDefault("files")
 	FilesMaxSize.setDefault("20MB")
@@ -311,13 +376,12 @@ func InitDefaultConfig() {
 	CorsOrigins.setDefault([]string{"*"})
 	CorsMaxAge.setDefault(0)
 	// Migration
-	MigrationWunderlistEnable.setDefault(false)
 	MigrationTodoistEnable.setDefault(false)
 	MigrationTrelloEnable.setDefault(false)
 	MigrationMicrosoftTodoEnable.setDefault(false)
 	// Avatar
 	AvatarGravaterExpiration.setDefault(3600)
-	// List Backgrounds
+	// Project Backgrounds
 	BackgroundsEnabled.setDefault(true)
 	BackgroundsUploadEnabled.setDefault(true)
 	BackgroundsUnsplashEnabled.setDefault(false)
@@ -325,6 +389,13 @@ func InitDefaultConfig() {
 	KeyvalueType.setDefault("memory")
 	// Metrics
 	MetricsEnabled.setDefault(false)
+	// Settings
+	DefaultSettingsAvatarProvider.setDefault("initials")
+	DefaultSettingsOverdueTaskRemindersEnabled.setDefault(true)
+	DefaultSettingsOverdueTaskRemindersTime.setDefault("9:00")
+	// Webhook
+	WebhooksEnabled.setDefault(true)
+	WebhooksTimeoutSeconds.setDefault(30)
 }
 
 // InitConfig initializes the config, sets defaults etc.
@@ -338,28 +409,37 @@ func InitConfig() {
 	viper.SetEnvKeyReplacer(strings.NewReplacer(".", "_"))
 	viper.AutomaticEnv()
 
+	// Just load environment variables
+	_ = viper.ReadInConfig()
+	log.ConfigureLogger(LogEnabled.GetBool(), LogStandard.GetString(), LogPath.GetString(), LogLevel.GetString())
+
 	// Load the config file
 	viper.AddConfigPath(ServiceRootpath.GetString())
 	viper.AddConfigPath("/etc/vikunja/")
 
 	homeDir, err := os.UserHomeDir()
 	if err != nil {
-		log.Printf("No home directory found, not using config from ~/.config/vikunja/. Error was: %s\n", err.Error())
+		log.Debugf("No home directory found, not using config from ~/.config/vikunja/. Error was: %s\n", err.Error())
 	} else {
 		viper.AddConfigPath(path.Join(homeDir, ".config", "vikunja"))
 	}
 
 	viper.AddConfigPath(".")
 	viper.SetConfigName("config")
-	err = viper.ReadInConfig()
-	if err != nil {
-		log.Println(err.Error())
-		log.Println("Using default config.")
-		return
-	}
 
-	if CacheType.GetString() == "keyvalue" {
-		CacheType.Set(KeyvalueType.GetString())
+	err = viper.ReadInConfig()
+
+	if viper.ConfigFileUsed() != "" {
+		log.Infof("Using config file: %s", viper.ConfigFileUsed())
+
+		if err != nil {
+			log.Warning(err.Error())
+			log.Warning("Using default config.")
+		} else {
+			log.ConfigureLogger(LogEnabled.GetBool(), LogStandard.GetString(), LogPath.GetString(), LogLevel.GetString())
+		}
+	} else {
+		log.Info("No config file found, using default or config from environment variables.")
 	}
 
 	if RateLimitStore.GetString() == "keyvalue" {
@@ -370,10 +450,6 @@ func InitConfig() {
 		ServiceFrontendurl.Set(ServiceFrontendurl.GetString() + "/")
 	}
 
-	if AuthOpenIDRedirectURL.GetString() == "" {
-		AuthOpenIDRedirectURL.Set(ServiceFrontendurl.GetString() + "auth/openid/")
-	}
-
 	if MigrationTodoistRedirectURL.GetString() == "" {
 		MigrationTodoistRedirectURL.Set(ServiceFrontendurl.GetString() + "migrate/todoist")
 	}
@@ -386,12 +462,14 @@ func InitConfig() {
 		MigrationMicrosoftTodoRedirectURL.Set(ServiceFrontendurl.GetString() + "migrate/microsoft-todo")
 	}
 
-	if ServiceEnableMetrics.GetBool() {
-		log.Println("WARNING: service.enablemetrics is deprecated and will be removed in a future release. Please use metrics.enable.")
-		MetricsEnabled.Set(true)
+	if DefaultSettingsTimezone.GetString() == "" {
+		DefaultSettingsTimezone.Set(ServiceTimeZone.GetString())
 	}
 
-	log.Printf("Using config file: %s", viper.ConfigFileUsed())
+	if ServiceEnableMetrics.GetBool() {
+		log.Warning("service.enablemetrics is deprecated and will be removed in a future release. Please use metrics.enable.")
+		MetricsEnabled.Set(true)
+	}
 }
 
 func random(length int) (string, error) {

pkg/cron/cron.go

@@ -1,5 +1,5 @@
 // Vikunja is a to-do list application to facilitate your life.
-// Copyright 2018-2021 Vikunja and contributors. All rights reserved.
+// Copyright 2018-present Vikunja and contributors. All rights reserved.
 //
 // This program is free software: you can redistribute it and/or modify
 // it under the terms of the GNU Affero General Public Licensee as published by

pkg/db/db.go

@@ -1,5 +1,5 @@
 // Vikunja is a to-do list application to facilitate your life.
-// Copyright 2018-2021 Vikunja and contributors. All rights reserved.
+// Copyright 2018-present Vikunja and contributors. All rights reserved.
 //
 // This program is free software: you can redistribute it and/or modify
 // it under the terms of the GNU Affero General Public Licensee as published by
@@ -17,7 +17,6 @@
 package db
 
 import (
-	"encoding/gob"
 	"fmt"
 	"net/url"
 	"os"
@@ -27,10 +26,8 @@ import (
 
 	"code.vikunja.io/api/pkg/config"
 	"code.vikunja.io/api/pkg/log"
-	xrc "gitea.com/xorm/xorm-redis-cache"
-	"xorm.io/core"
 	"xorm.io/xorm"
-	"xorm.io/xorm/caches"
+	"xorm.io/xorm/names"
 	"xorm.io/xorm/schemas"
 
 	_ "github.com/go-sql-driver/mysql" // Because.
@@ -81,42 +78,27 @@ func CreateDBEngine() (engine *xorm.Engine, err error) {
 		log.Fatalf("Error parsing time zone: %s", err)
 	}
 	engine.SetTZDatabase(loc)
-	engine.SetMapper(core.GonicMapper{})
-	logger := log.NewXormLogger("")
+	engine.SetMapper(names.GonicMapper{})
+	logger := log.NewXormLogger(config.LogEnabled.GetBool(), config.LogDatabase.GetString(), config.LogDatabaseLevel.GetString())
 	engine.SetLogger(logger)
 
-	// Cache
-	// We have to initialize the cache here to avoid import cycles
-	if config.CacheEnabled.GetBool() {
-		switch config.CacheType.GetString() {
-		case "memory":
-			cacher := caches.NewLRUCacher(caches.NewMemoryStore(), config.CacheMaxElementSize.GetInt())
-			engine.SetDefaultCacher(cacher)
-		case "redis":
-			cacher := xrc.NewRedisCacher(config.RedisHost.GetString(), config.RedisPassword.GetString(), xrc.DEFAULT_EXPIRATION, engine.Logger())
-			engine.SetDefaultCacher(cacher)
-		default:
-			log.Info("Did not find a valid cache type. Caching disabled. Please refer to the docs for poosible cache types.")
-		}
-	}
-
 	x = engine
 	return
 }
 
-// RegisterTableStructsForCache registers tables in gob encoding for redis cache
-func RegisterTableStructsForCache(val interface{}) {
-	gob.Register(val)
-}
-
 func initMysqlEngine() (engine *xorm.Engine, err error) {
 	// We're using utf8mb here instead of just utf8 because we want to use non-BMP characters.
 	// See https://stackoverflow.com/a/30074553/10924593 for more info.
+	host := fmt.Sprintf("tcp(%s)", config.DatabaseHost.GetString())
+	if config.DatabaseHost.GetString()[0] == '/' { // looks like a unix socket
+		host = fmt.Sprintf("unix(%s)", config.DatabaseHost.GetString())
+	}
+
 	connStr := fmt.Sprintf(
-		"%s:%s@tcp(%s)/%s?charset=utf8mb4&parseTime=true&tls=%s",
+		"%s:%s@%s/%s?charset=utf8mb4&parseTime=true&tls=%s",
 		config.DatabaseUser.GetString(),
 		config.DatabasePassword.GetString(),
-		config.DatabaseHost.GetString(),
+		host,
 		config.DatabaseDatabase.GetString(),
 		config.DatabaseTLS.GetString())
 	engine, err = xorm.NewEngine("mysql", connStr)
@@ -148,15 +130,33 @@ func parsePostgreSQLHostPort(info string) (string, string) {
 	return host, port
 }
 
+// Copied and adopted from https://github.com/go-gitea/gitea/blob/f337c32e868381c6d2d948221aca0c59f8420c13/modules/setting/database.go#L176-L186
+func getPostgreSQLConnectionString(dbHost, dbUser, dbPasswd, dbName, dbSslMode, dbSslCert, dbSslKey, dbSslRootCert string) (connStr string) {
+	dbParam := "?"
+	if strings.Contains(dbName, dbParam) {
+		dbParam = "&"
+	}
+	host, port := parsePostgreSQLHostPort(dbHost)
+	if host[0] == '/' { // looks like a unix socket
+		connStr = fmt.Sprintf("postgres://%s:%s@:%s/%s%ssslmode=%s&sslcert=%s&sslkey=%s&sslrootcert=%s&host=%s",
+			url.PathEscape(dbUser), url.PathEscape(dbPasswd), port, dbName, dbParam, dbSslMode, dbSslCert, dbSslKey, dbSslRootCert, host)
+	} else {
+		connStr = fmt.Sprintf("postgres://%s:%s@%s:%s/%s%ssslmode=%s&sslcert=%s&sslkey=%s&sslrootcert=%s",
+			url.PathEscape(dbUser), url.PathEscape(dbPasswd), host, port, dbName, dbParam, dbSslMode, dbSslCert, dbSslKey, dbSslRootCert)
+	}
+	return connStr
+}
+
 func initPostgresEngine() (engine *xorm.Engine, err error) {
-	host, port := parsePostgreSQLHostPort(config.DatabaseHost.GetString())
-	connStr := fmt.Sprintf("host=%s port=%s user=%s password=%s dbname=%s sslmode=%s",
-		host,
-		port,
-		url.PathEscape(config.DatabaseUser.GetString()),
-		url.PathEscape(config.DatabasePassword.GetString()),
+	connStr := getPostgreSQLConnectionString(
+		config.DatabaseHost.GetString(),
+		config.DatabaseUser.GetString(),
+		config.DatabasePassword.GetString(),
 		config.DatabaseDatabase.GetString(),
 		config.DatabaseSslMode.GetString(),
+		config.DatabaseSslCert.GetString(),
+		config.DatabaseSslKey.GetString(),
+		config.DatabaseSslRootCert.GetString(),
 	)
 
 	engine, err = xorm.NewEngine("postgres", connStr)
@@ -186,7 +186,7 @@ func initSqliteEngine() (engine *xorm.Engine, err error) {
 	}
 	file, err := os.OpenFile(path, os.O_RDWR|os.O_CREATE, 0)
 	if err != nil {
-		return nil, fmt.Errorf("could not open database file [uid=%d, gid=%d]: %s", os.Getuid(), os.Getgid(), err)
+		return nil, fmt.Errorf("could not open database file [uid=%d, gid=%d]: %w", os.Getuid(), os.Getgid(), err)
 	}
 	_ = file.Close() // We directly close the file because we only want to check if it is writable. It will be reopened lazily later by xorm.
 

pkg/db/dump.go

@@ -1,5 +1,5 @@
 // Vikunja is a to-do list application to facilitate your life.
-// Copyright 2018-2021 Vikunja and contributors. All rights reserved.
+// Copyright 2018-present Vikunja and contributors. All rights reserved.
 //
 // This program is free software: you can redistribute it and/or modify
 // it under the terms of the GNU Affero General Public Licensee as published by
@@ -18,6 +18,9 @@ package db
 
 import (
 	"encoding/json"
+	"strings"
+
+	"code.vikunja.io/api/pkg/log"
 
 	"xorm.io/xorm/schemas"
 )
@@ -51,12 +54,49 @@ func Restore(table string, contents []map[string]interface{}) (err error) {
 		return err
 	}
 
+	meta, err := x.DBMetas()
+	if err != nil {
+		return err
+	}
+
+	var metaForCurrentTable *schemas.Table
+	for _, m := range meta {
+		if m.Name == table {
+			metaForCurrentTable = m
+			break
+		}
+	}
+
+	if metaForCurrentTable == nil {
+		log.Fatalf("Could not find table definition for table %s", table)
+	}
+
 	for _, content := range contents {
+		for colName, value := range content {
+			// Date fields might get restored as 0001-01-01 from null dates. This can have unintended side-effects like
+			// users being scheduled for deletion after a restore.
+			// To avoid this, we set these dates to nil so that they'll end up as null in the db.
+			col := metaForCurrentTable.GetColumn(colName)
+			strVal, is := value.(string)
+			if is && col.SQLType.IsTime() && (strVal == "" || strings.HasPrefix(strVal, "0001-")) {
+				content[colName] = nil
+			}
+		}
+
 		if _, err := x.Table(table).Insert(content); err != nil {
 			return err
 		}
 	}
 
+	if Type() == schemas.POSTGRES {
+		idSequence := table + "_id_seq"
+		_, err = x.Query("SELECT setval('" + idSequence + "', COALESCE(MAX(id), 1) )")
+		if err != nil {
+			log.Warningf("Could not reset id sequence for %s: %s", idSequence, err)
+			err = nil
+		}
+	}
+
 	return
 }
 

pkg/db/fixtures/api_tokens.yml

@@ -0,0 +1,30 @@
+- id: 1
+  title: 'test token 1'
+  token_salt: iC1Qbpf7H1
+  token_hash: a1813a558185d99f5197d2d549e4dd91292376aa00210229d70f77b57e165f6613fd12c1f790aa6493548cb9bceff33b45b4
+  token_last_eight: 75f29d2e
+  permissions: '{"tasks":["read_all","update"]}'
+  expires_at: 2099-01-01 00:00:00
+  owner_id: 1
+  created: 2023-09-01 07:00:00
+  # token in plaintext is tk_2eef46f40ebab3304919ab2e7e39993f75f29d2e
+- id: 2
+  title: 'test token 2'
+  token_salt: EtwMsqDfOA
+  token_hash: 5c4d80c58947f21295064d473937709f1159ab09085eb59e38783da6032181069ec2e1d236486533b66999f9f4ac375b45f5
+  token_last_eight: 235008c8
+  permissions: '{"tasks":["read_all","update"]}'
+  expires_at: 2023-01-01 00:00:00
+  owner_id: 1
+  created: 2023-09-01 07:00:00
+  # token in plaintext is tk_a5e6f92ddbad68f49ee2c63e52174db0235008c8
+- id: 3
+  title: 'test token 3'
+  token_salt: AHeetyp1aB
+  token_hash: da4b9c3aa72633274c37ab3419fbfbe4c5b79310b76027ac36f85e4c5ad0c2342a1d9e1c9b72ca07ec0a66ad2ee3505539af
+  token_last_eight: 0b8dcb7c
+  permissions: '{"tasks":["read_all","update"]}'
+  expires_at: 2099-01-01 00:00:00
+  owner_id: 2
+  created: 2023-09-01 07:00:00
+  # token in plaintext is tk_5e29ae2ae079781ff73b0a3e0fe4d75a0b8dcb7c

pkg/db/fixtures/buckets.yml

@@ -1,220 +1,244 @@
 - id: 1
   title: testbucket1
-  list_id: 1
+  project_id: 1
   created_by_id: 1
   limit: 9999999 # This bucket has a limit we will never exceed in the tests to make sure the logic allows for buckets with limits
-  position: 2
+  position: 1
   created: 2020-04-18 21:13:52
   updated: 2020-04-18 21:13:52
 - id: 2
   title: testbucket2
-  list_id: 1
+  project_id: 1
   created_by_id: 1
   limit: 3
-  position: 1
+  position: 2
   created: 2020-04-18 21:13:52
   updated: 2020-04-18 21:13:52
 - id: 3
   title: testbucket3
-  list_id: 1
+  project_id: 1
   created_by_id: 1
-  is_done_bucket: 1
   position: 3
   created: 2020-04-18 21:13:52
   updated: 2020-04-18 21:13:52
 - id: 4
-  title: testbucket4 - other list
-  list_id: 2
+  title: testbucket4 - other project
+  project_id: 2
   created_by_id: 1
-  is_done_bucket: 1
   created: 2020-04-18 21:13:52
   updated: 2020-04-18 21:13:52
 # The following are not or only partly owned by user 1
 - id: 5
   title: testbucket5
-  list_id: 20
+  project_id: 20
   created_by_id: 1
   created: 2020-04-18 21:13:52
   updated: 2020-04-18 21:13:52
 - id: 6
   title: testbucket6
-  list_id: 6
+  project_id: 6
   created_by_id: 1
+  position: 1
   created: 2020-04-18 21:13:52
   updated: 2020-04-18 21:13:52
 - id: 7
   title: testbucket7
-  list_id: 7
+  project_id: 7
   created_by_id: 1
   created: 2020-04-18 21:13:52
   updated: 2020-04-18 21:13:52
 - id: 8
   title: testbucket8
-  list_id: 8
+  project_id: 8
   created_by_id: 1
   created: 2020-04-18 21:13:52
   updated: 2020-04-18 21:13:52
 - id: 9
   title: testbucket9
-  list_id: 9
+  project_id: 9
   created_by_id: 1
   created: 2020-04-18 21:13:52
   updated: 2020-04-18 21:13:52
 - id: 10
   title: testbucket10
-  list_id: 10
+  project_id: 10
   created_by_id: 1
   created: 2020-04-18 21:13:52
   updated: 2020-04-18 21:13:52
 - id: 11
   title: testbucket11
-  list_id: 11
+  project_id: 11
   created_by_id: 1
   created: 2020-04-18 21:13:52
   updated: 2020-04-18 21:13:52
 - id: 12
   title: testbucket13
-  list_id: 12
+  project_id: 12
   created_by_id: 1
   created: 2020-04-18 21:13:52
   updated: 2020-04-18 21:13:52
 - id: 13
   title: testbucket13
-  list_id: 13
+  project_id: 13
   created_by_id: 1
   created: 2020-04-18 21:13:52
   updated: 2020-04-18 21:13:52
 - id: 14
   title: testbucket14
-  list_id: 14
+  project_id: 14
   created_by_id: 1
   created: 2020-04-18 21:13:52
   updated: 2020-04-18 21:13:52
 - id: 15
   title: testbucket15
-  list_id: 15
+  project_id: 15
   created_by_id: 1
   created: 2020-04-18 21:13:52
   updated: 2020-04-18 21:13:52
 - id: 16
   title: testbucket16
-  list_id: 16
+  project_id: 16
   created_by_id: 1
   created: 2020-04-18 21:13:52
   updated: 2020-04-18 21:13:52
 - id: 17
   title: testbucket17
-  list_id: 17
+  project_id: 17
   created_by_id: 1
   created: 2020-04-18 21:13:52
   updated: 2020-04-18 21:13:52
 - id: 18
   title: testbucket18
-  list_id: 5
+  project_id: 5
   created_by_id: 1
   created: 2020-04-18 21:13:52
   updated: 2020-04-18 21:13:52
 - id: 19
   title: testbucket19
-  list_id: 21
+  project_id: 21
   created_by_id: 1
   created: 2020-04-18 21:13:52
   updated: 2020-04-18 21:13:52
 - id: 20
   title: testbucket20
-  list_id: 22
+  project_id: 22
   created_by_id: 1
   created: 2020-04-18 21:13:52
   updated: 2020-04-18 21:13:52
 - id: 21
   title: testbucket21
-  list_id: 3
+  project_id: 3
   created_by_id: 1
   created: 2020-04-18 21:13:52
   updated: 2020-04-18 21:13:52
 # Duplicate buckets to make deletion of one of them possible
 - id: 22
   title: testbucket22
-  list_id: 6
+  project_id: 6
   created_by_id: 1
+  position: 2
   created: 2020-04-18 21:13:52
   updated: 2020-04-18 21:13:52
 - id: 23
   title: testbucket23
-  list_id: 7
+  project_id: 7
   created_by_id: 1
   created: 2020-04-18 21:13:52
   updated: 2020-04-18 21:13:52
 - id: 24
   title: testbucket24
-  list_id: 8
+  project_id: 8
   created_by_id: 1
   created: 2020-04-18 21:13:52
   updated: 2020-04-18 21:13:52
 - id: 25
   title: testbucket25
-  list_id: 9
+  project_id: 9
   created_by_id: 1
   created: 2020-04-18 21:13:52
   updated: 2020-04-18 21:13:52
 - id: 26
   title: testbucket26
-  list_id: 10
+  project_id: 10
   created_by_id: 1
   created: 2020-04-18 21:13:52
   updated: 2020-04-18 21:13:52
 - id: 27
   title: testbucket27
-  list_id: 11
+  project_id: 11
   created_by_id: 1
   created: 2020-04-18 21:13:52
   updated: 2020-04-18 21:13:52
 - id: 28
   title: testbucket28
-  list_id: 12
+  project_id: 12
   created_by_id: 1
   created: 2020-04-18 21:13:52
   updated: 2020-04-18 21:13:52
 - id: 29
   title: testbucket29
-  list_id: 13
+  project_id: 13
   created_by_id: 1
   created: 2020-04-18 21:13:52
   updated: 2020-04-18 21:13:52
 - id: 30
   title: testbucket30
-  list_id: 14
+  project_id: 14
   created_by_id: 1
   created: 2020-04-18 21:13:52
   updated: 2020-04-18 21:13:52
 - id: 31
   title: testbucket31
-  list_id: 15
+  project_id: 15
   created_by_id: 1
   created: 2020-04-18 21:13:52
   updated: 2020-04-18 21:13:52
 - id: 32
   title: testbucket32
-  list_id: 16
+  project_id: 16
   created_by_id: 1
   created: 2020-04-18 21:13:52
   updated: 2020-04-18 21:13:52
 - id: 33
   title: testbucket33
-  list_id: 17
+  project_id: 17
   created_by_id: 1
   created: 2020-04-18 21:13:52
   updated: 2020-04-18 21:13:52
-# This bucket is the last one in its list
+# This bucket is the last one in its project
 - id: 34
   title: testbucket34
-  list_id: 18
+  project_id: 18
   created_by_id: 1
   created: 2020-04-18 21:13:52
   updated: 2020-04-18 21:13:52
 - id: 35
   title: testbucket35
-  list_id: 23
+  project_id: 23
   created_by_id: -2
   created: 2020-04-18 21:13:52
   updated: 2020-04-18 21:13:52
+- id: 36
+  title: testbucket36
+  project_id: 33
+  created_by_id: 6
+  created: 2020-04-18 21:13:52
+  updated: 2020-04-18 21:13:52
+- id: 37
+  title: testbucket37
+  project_id: 34
+  created_by_id: 6
+  created: 2020-04-18 21:13:52
+  updated: 2020-04-18 21:13:52
+- id: 38
+  title: testbucket36
+  project_id: 36
+  created_by_id: 15
+  created: 2020-04-18 21:13:52
+  updated: 2020-04-18 21:13:52
+- id: 39
+  title: testbucket38
+  project_id: 38
+  created_by_id: 15
+  created: 2020-04-18 21:13:52
+  updated: 2020-04-18 21:13:52