Add Cryptpad support

[luixxiul]

This does not work yet: see mother-of-all-self-hosting/ansible-role-cryptpad#7.

Any helps are appreciated!

[moan0s]

Hi @luixxiul,
I fixed the role and tested it successfully. Maybe you can check as well? I also added some basic documentation.

Basically, the issue was, that Cryptpad needs one certificate, that covers both domains. Back when I created that role, I didn't know how to do this, however I now found a solution (see 63d6bc91199c18745c79b9d1af80a83ba2c51bfb).

[luixxiul]

I'll check and get back to you soon!

[luixxiul]

Seemingly its UI works, but /checkup/ page (cryptpad.example.com/checkup/) returns three critical errors related to Content-Security-Policy headers.

Also note that unlike other services it does not seem to possible to create a first admin account with cryptpad_admin_keys on vars.yml as it is against the core concept of E2EE; you'd need to visit the URL generated during the installation to create the account manually on a web browser. The URL can be checked by running this command:

$ sudo journalctl -u mash-cryptpad | grep "Create your first admin account" -A 1

Per Slavi the process can be automated with slurp but I am not quite sure how to.

[moan0s]

Seemingly its UI works, but /checkup/ page (cryptpad.example.com/checkup/) returns three critical errors related to Content-Security-Policy headers.

I tried various things to fix it, so far I'm not successful. any help is appreciated. I'll also continue to try.

[moan0s]

FYI: I run my instance since my last comment. The CSP errors seem to "only" affect security, not stability/function