software/mattermost: add initial support

software/mattermost/buildout.hash.cfg

+# THIS IS NOT A BUILDOUT FILE, despite purposedly using a compatible syntax.
+# The only allowed lines here are (regexes):
+# - "^#" comments, copied verbatim
+# - "^[" section beginings, copied verbatim
+# - lines containing an "=" sign which must fit in the following categorie.
+#   - "^\s*filename\s*=\s*path\s*$" where "path" is relative to this file
+#     Copied verbatim.
+#   - "^\s*hashtype\s*=.*" where "hashtype" is one of the values supported
+#     by the re-generation script.
+#     Re-generated.
+# - other lines are copied verbatim
+# Substitution (${...:...}), extension ([buildout] extends = ...) and
+# section inheritance (< = ...) are NOT supported (but you should really
+# not need these here).
+
+[template]
+filename = instance.cfg.in
+md5sum =
+
+[mattermost-config-file]
+filename = mattermost-config-file.json.in
+md5sum =
+
+[instance-profile]
+filename = instance.cfg.in

software/mattermost/instance.cfg.in

+[buildout]
+extends =
+  {{ template_monitor }}
+parts =
+  directory
+  publish-connection-parameter
+  service-postgresql
+
+eggs-directory = {{ buildout['eggs-directory'] }}
+develop-eggs-directory = {{ buildout['develop-eggs-directory'] }}
+offline = true
+
+[instance-parameter]
+recipe = slapos.cookbook:slapconfiguration
+computer = ${slap-connection:computer-id}
+partition = ${slap-connection:partition-id}
+url = ${slap-connection:server-url}
+key = ${slap-connection:key-file}
+cert = ${slap-connection:cert-file}
+
+[slap-configuration]
+# apache-frontend reads from from a part named [slap-configuration]
+recipe = slapos.cookbook:slapconfiguration.serialised
+computer = ${slap-connection:computer-id}
+partition = ${slap-connection:partition-id}
+url = ${slap-connection:server-url}
+key = ${slap-connection:key-file}
+cert = ${slap-connection:cert-file}
+
+[directory]
+recipe = slapos.cookbook:mkdirectory
+home = ${buildout:directory}
+etc = ${:home}/etc
+var = ${:home}/var
+srv = ${:home}/srv
+service = ${:etc}/service
+promise = ${:etc}/promise
+mattermost-dir = ${:srv}/mattermost
+mattermost-import-dir = ${:mattermost-dir}/import
+mattermost-export-dir = ${:mattermost-dir}/export
+mattermost-plugins-dir = ${:mattermost-dir}/plugins
+mattermost-client-plugins-dir = ${:mattermost-dir}/client-plugins
+mattermost-data-dir = ${:mattermost-dir}/data
+mattermost-logs-dir = ${:var}/log
+
+[mattermost]
+ipv6 = ${instance-parameter:ipv6-random}
+port = 8065
+url = http://[${:ipv6}]:${:port}
+
+import-dir = ${directory:mattermost-import-dir}
+export-dir = ${directory:mattermost-export-dir}
+plugins-dir = ${directory:mattermost-plugins-dir}
+client-plugins-dir = ${directory:mattermost-client-plugins-dir}
+data-dir = ${directory:mattermost-data-dir}
+logs-dir = ${directory:mattermost-logs-dir}
+
+recipe = slapos.cookbook:wrapper
+command-line =
+  bash -c "ulimit -n 49152; cd {{ mattermost_homepath }}/server; exec {{ mattermost_bin }} -c ${mattermost-config-file:output} server"
+wrapper-path = ${directory:service}/mattermost
+
+[config-file]
+recipe = slapos.recipe.template:jinja2
+url = {{ buildout['parts-directory'] }}/${:_buildout_section_name_}/${:_buildout_section_name_}.json.in
+output = ${directory:etc}/${:_buildout_section_name_}.json
+extensions = jinja2.ext.do
+
+[check-port-listening-promise]
+recipe = slapos.cookbook:check_port_listening
+path = ${directory:promise}/${:_buildout_section_name_}
+
+[mattermost-config-file]
+<= config-file
+#output = ${directory:etc}/mattermost.json
+context =
+  section mattermost mattermost
+  section pgsql service-postgresql
+
+[service-postgresql]
+recipe  = slapos.cookbook:postgres
+bin     = {{ postgresql_location }}/bin
+services= ${directory:service}
+
+dbname  = mattermost_production
+# NOTE db name must match to what was used in KVM on lab.nexedi.com (restore script grants access to this user)
+superuser = mattermost-psql
+# no password - pgsql will listen only on unix sockets (see below) thus access
+# is protected with filesystem-level permissions.
+# ( besides, if we use slapos.cookbook:generate.password and do `password = ...`
+#   the password is stored in plain text in .installed and thus becomes insecure )
+password=
+
+pgdata-directory = ${directory:srv}/postgresql
+
+# empty addresses - listen only on unix socket
+ipv4    =
+ipv6    =
+port    =
+
+depend  =
+    ${promise-postgresql:recipe}
+
+[promise-postgresql]
+<= monitor-promise-base
+promise = check_command_execute
+name = promise-postgresql.py
+config-command =
+    {{ postgresql_location }}/bin/psql \
+        -h ${service-postgresql:pgdata-directory} \
+        -U ${service-postgresql:superuser} \
+        -d ${service-postgresql:dbname} \
+        -c '\q'
+
+[publish-connection-parameter]
+recipe = slapos.cookbook:publish
+mattermost-url = ${mattermost:url}

software/mattermost/mattermost-config-file.json.in

+{
+  "ServiceSettings": {
+    "SiteURL": "",
+    "WebsocketURL": "",
+    "LicenseFileLocation": "",
+    "ListenAddress": ":8065",
+    "ConnectionSecurity": "",
+    "TLSCertFile": "",
+    "TLSKeyFile": "",
+    "TLSMinVer": "1.2",
+    "TLSStrictTransport": false,
+    "TLSStrictTransportMaxAge": 63072000,
+    "TLSOverwriteCiphers": [],
+    "UseLetsEncrypt": false,
+    "LetsEncryptCertificateCacheFile": "./config/letsencrypt.cache",
+    "Forward80To443": false,
+    "TrustedProxyIPHeader": [],
+    "ReadTimeout": 300,
+    "WriteTimeout": 300,
+    "IdleTimeout": 60,
+    "MaximumLoginAttempts": 10,
+    "GoroutineHealthThreshold": -1,
+    "EnableOAuthServiceProvider": true,
+    "EnableIncomingWebhooks": true,
+    "EnableOutgoingWebhooks": true,
+    "EnableOutgoingOAuthConnections": false,
+    "EnableCommands": true,
+    "OutgoingIntegrationRequestsTimeout": 30,
+    "EnablePostUsernameOverride": false,
+    "EnablePostIconOverride": false,
+    "GoogleDeveloperKey": "",
+    "EnableLinkPreviews": true,
+    "EnablePermalinkPreviews": true,
+    "RestrictLinkPreviews": "",
+    "EnableTesting": false,
+    "EnableDeveloper": false,
+    "DeveloperFlags": "",
+    "EnableClientPerformanceDebugging": false,
+    "EnableOpenTracing": false,
+    "EnableSecurityFixAlert": true,
+    "EnableInsecureOutgoingConnections": false,
+    "AllowedUntrustedInternalConnections": "",
+    "EnableMultifactorAuthentication": false,
+    "EnforceMultifactorAuthentication": false,
+    "EnableUserAccessTokens": false,
+    "AllowCorsFrom": "",
+    "CorsExposedHeaders": "",
+    "CorsAllowCredentials": false,
+    "CorsDebug": false,
+    "AllowCookiesForSubdomains": false,
+    "ExtendSessionLengthWithActivity": true,
+    "SessionLengthWebInDays": 30,
+    "SessionLengthWebInHours": 720,
+    "SessionLengthMobileInDays": 30,
+    "SessionLengthMobileInHours": 720,
+    "SessionLengthSSOInDays": 30,
+    "SessionLengthSSOInHours": 720,
+    "SessionCacheInMinutes": 10,
+    "SessionIdleTimeoutInMinutes": 43200,
+    "WebsocketSecurePort": 443,
+    "WebsocketPort": 80,
+    "WebserverMode": "gzip",
+    "EnableGifPicker": true,
+    "GiphySdkKey": "",
+    "EnableCustomEmoji": true,
+    "EnableEmojiPicker": true,
+    "PostEditTimeLimit": -1,
+    "TimeBetweenUserTypingUpdatesMilliseconds": 5000,
+    "EnablePostSearch": true,
+    "EnableFileSearch": true,
+    "MinimumHashtagLength": 3,
+    "EnableUserTypingMessages": true,
+    "EnableChannelViewedMessages": true,
+    "EnableUserStatuses": true,
+    "ExperimentalEnableAuthenticationTransfer": true,
+    "ClusterLogTimeoutMilliseconds": 2000,
+    "EnablePreviewFeatures": true,
+    "EnableTutorial": true,
+    "EnableOnboardingFlow": true,
+    "ExperimentalEnableDefaultChannelLeaveJoinMessages": true,
+    "ExperimentalGroupUnreadChannels": "disabled",
+    "EnableAPITeamDeletion": false,
+    "EnableAPITriggerAdminNotifications": false,
+    "EnableAPIUserDeletion": false,
+    "ExperimentalEnableHardenedMode": false,
+    "ExperimentalStrictCSRFEnforcement": false,
+    "EnableEmailInvitations": false,
+    "DisableBotsWhenOwnerIsDeactivated": true,
+    "EnableBotAccountCreation": false,
+    "EnableSVGs": false,
+    "EnableLatex": false,
+    "EnableInlineLatex": true,
+    "PostPriority": true,
+    "AllowPersistentNotifications": true,
+    "AllowPersistentNotificationsForGuests": false,
+    "PersistentNotificationIntervalMinutes": 5,
+    "PersistentNotificationMaxCount": 6,
+    "PersistentNotificationMaxRecipients": 5,
+    "EnableAPIChannelDeletion": false,
+    "EnableLocalMode": false,
+    "LocalModeSocketLocation": "/var/tmp/mattermost_local.socket",
+    "EnableAWSMetering": false,
+    "SplitKey": "",
+    "FeatureFlagSyncIntervalSeconds": 30,
+    "DebugSplit": false,
+    "ThreadAutoFollow": true,
+    "CollapsedThreads": "always_on",
+    "ManagedResourcePaths": "",
+    "EnableCustomGroups": true,
+    "AllowSyncedDrafts": true,
+    "UniqueEmojiReactionLimitPerPost": 50,
+    "RefreshPostStatsRunTime": "00:00",
+    "MaximumPayloadSizeBytes": 300000
+  },
+  "TeamSettings": {
+    "SiteName": "Mattermost",
+    "MaxUsersPerTeam": 50,
+    "EnableJoinLeaveMessageByDefault": true,
+    "EnableUserCreation": true,
+    "EnableOpenServer": false,
+    "EnableUserDeactivation": false,
+    "RestrictCreationToDomains": "",
+    "EnableCustomUserStatuses": true,
+    "EnableCustomBrand": false,
+    "CustomBrandText": "",
+    "CustomDescriptionText": "",
+    "RestrictDirectMessage": "any",
+    "EnableLastActiveTime": true,
+    "UserStatusAwayTimeout": 300,
+    "MaxChannelsPerTeam": 2000,
+    "MaxNotificationsPerChannel": 1000,
+    "EnableConfirmNotificationsToChannel": true,
+    "TeammateNameDisplay": "username",
+    "ExperimentalViewArchivedChannels": true,
+    "ExperimentalEnableAutomaticReplies": false,
+    "LockTeammateNameDisplay": false,
+    "ExperimentalPrimaryTeam": "",
+    "ExperimentalDefaultChannels": []
+  },
+  "ClientRequirements": {
+    "AndroidLatestVersion": "",
+    "AndroidMinVersion": "",
+    "IosLatestVersion": "",
+    "IosMinVersion": ""
+  },
+  "SqlSettings": {
+    "DriverName": "postgres",
+    "DataSource": "postgres:///{{ pgsql.dbname }}?host={{ pgsql['pgdata-directory'] }}&user={{ pgsql.superuser }}",
+    "DataSourceReplicas": [],
+    "DataSourceSearchReplicas": [],
+    "MaxIdleConns": 20,
+    "ConnMaxLifetimeMilliseconds": 3600000,
+    "ConnMaxIdleTimeMilliseconds": 300000,
+    "MaxOpenConns": 300,
+    "Trace": false,
+    "AtRestEncryptKey": "",
+    "QueryTimeout": 30,
+    "DisableDatabaseSearch": false,
+    "MigrationsStatementTimeoutSeconds": 100000,
+    "ReplicaLagSettings": [],
+    "ReplicaMonitorIntervalSeconds": 5
+  },
+  "LogSettings": {
+    "EnableConsole": true,
+    "ConsoleLevel": "INFO",
+    "ConsoleJson": true,
+    "EnableColor": false,
+    "EnableFile": true,
+    "FileLevel": "INFO",
+    "FileJson": true,
+    "FileLocation": "{{ mattermost['logs-dir'] }}",
+    "EnableWebhookDebugging": true,
+    "EnableDiagnostics": true,
+    "VerboseDiagnostics": false,
+    "EnableSentry": true,
+    "AdvancedLoggingJSON": {},
+    "AdvancedLoggingConfig": "",
+    "MaxFieldSize": 2048
+  },
+  "ExperimentalAuditSettings": {
+    "FileEnabled": false,
+    "FileName": "",
+    "FileMaxSizeMB": 100,
+    "FileMaxAgeDays": 0,
+    "FileMaxBackups": 0,
+    "FileCompress": false,
+    "FileMaxQueueSize": 1000,
+    "AdvancedLoggingJSON": {},
+    "AdvancedLoggingConfig": ""
+  },
+  "NotificationLogSettings": {
+    "EnableConsole": true,
+    "ConsoleLevel": "INFO",
+    "ConsoleJson": true,
+    "EnableColor": false,
+    "EnableFile": true,
+    "FileLevel": "INFO",
+    "FileJson": true,
+    "FileLocation": "",
+    "AdvancedLoggingJSON": {},
+    "AdvancedLoggingConfig": ""
+  },
+  "PasswordSettings": {
+    "MinimumLength": 8,
+    "Lowercase": false,
+    "Number": false,
+    "Uppercase": false,
+    "Symbol": false,
+    "EnableForgotLink": true
+  },
+  "FileSettings": {
+    "EnableFileAttachments": true,
+    "EnableMobileUpload": true,
+    "EnableMobileDownload": true,
+    "MaxFileSize": 104857600,
+    "MaxImageResolution": 33177600,
+    "MaxImageDecoderConcurrency": -1,
+    "DriverName": "local",
+    "Directory": "{{ mattermost['data-dir'] }}",
+    "EnablePublicLink": false,
+    "ExtractContent": true,
+    "ArchiveRecursion": false,
+    "PublicLinkSalt": "",
+    "InitialFont": "nunito-bold.ttf",
+    "AmazonS3AccessKeyId": "",
+    "AmazonS3SecretAccessKey": "",
+    "AmazonS3Bucket": "",
+    "AmazonS3PathPrefix": "",
+    "AmazonS3Region": "",
+    "AmazonS3Endpoint": "s3.amazonaws.com",
+    "AmazonS3SSL": true,
+    "AmazonS3SignV2": false,
+    "AmazonS3SSE": false,
+    "AmazonS3Trace": false,
+    "AmazonS3RequestTimeoutMilliseconds": 30000,
+    "AmazonS3UploadPartSizeBytes": 5242880,
+    "DedicatedExportStore": false,
+    "ExportDriverName": "local",
+    "ExportDirectory": "{{ mattermost['data-dir'] }}",
+    "ExportAmazonS3AccessKeyId": "",
+    "ExportAmazonS3SecretAccessKey": "",
+    "ExportAmazonS3Bucket": "",
+    "ExportAmazonS3PathPrefix": "",
+    "ExportAmazonS3Region": "",
+    "ExportAmazonS3Endpoint": "s3.amazonaws.com",
+    "ExportAmazonS3SSL": true,
+    "ExportAmazonS3SignV2": false,
+    "ExportAmazonS3SSE": false,
+    "ExportAmazonS3Trace": false,
+    "ExportAmazonS3RequestTimeoutMilliseconds": 30000,
+    "ExportAmazonS3PresignExpiresSeconds": 21600,
+    "ExportAmazonS3UploadPartSizeBytes": 104857600
+  },
+  "EmailSettings": {
+    "EnableSignUpWithEmail": true,
+    "EnableSignInWithEmail": true,
+    "EnableSignInWithUsername": true,
+    "SendEmailNotifications": false,
+    "UseChannelInEmailNotifications": false,
+    "RequireEmailVerification": false,
+    "FeedbackName": "",
+    "FeedbackEmail": "",
+    "ReplyToAddress": "",
+    "FeedbackOrganization": "",
+    "EnableSMTPAuth": false,
+    "SMTPUsername": "",
+    "SMTPPassword": "",
+    "SMTPServer": "",
+    "SMTPPort": "10025",
+    "SMTPServerTimeout": 10,
+    "ConnectionSecurity": "",
+    "SendPushNotifications": true,
+    "PushNotificationServer": "https://push-test.mattermost.com",
+    "PushNotificationContents": "full",
+    "PushNotificationBuffer": 1000,
+    "EnableEmailBatching": false,
+    "EmailBatchingBufferSize": 256,
+    "EmailBatchingInterval": 30,
+    "EnablePreviewModeBanner": true,
+    "SkipServerCertificateVerification": false,
+    "EmailNotificationContentsType": "full",
+    "LoginButtonColor": "#0000",
+    "LoginButtonBorderColor": "#2389D7",
+    "LoginButtonTextColor": "#2389D7"
+  },
+  "RateLimitSettings": {
+    "Enable": false,
+    "PerSec": 10,
+    "MaxBurst": 100,
+    "MemoryStoreSize": 10000,
+    "VaryByRemoteAddr": true,
+    "VaryByUser": false,
+    "VaryByHeader": ""
+  },
+  "PrivacySettings": {
+    "ShowEmailAddress": true,
+    "ShowFullName": true
+  },
+  "SupportSettings": {
+    "TermsOfServiceLink": "https://mattermost.com/pl/terms-of-use/",
+    "PrivacyPolicyLink": "https://mattermost.com/pl/privacy-policy/",
+    "AboutLink": "https://mattermost.com/pl/about-mattermost",
+    "HelpLink": "https://mattermost.com/pl/help/",
+    "ReportAProblemLink": "https://mattermost.com/pl/report-a-bug",
+    "ForgotPasswordLink": "",
+    "SupportEmail": "",
+    "CustomTermsOfServiceEnabled": false,
+    "CustomTermsOfServiceReAcceptancePeriod": 365,
+    "EnableAskCommunityLink": true
+  },
+  "AnnouncementSettings": {
+    "EnableBanner": false,
+    "BannerText": "",
+    "BannerColor": "#f2a93b",
+    "BannerTextColor": "#333333",
+    "AllowBannerDismissal": true,
+    "AdminNoticesEnabled": true,
+    "UserNoticesEnabled": true,
+    "NoticesURL": "https://notices.mattermost.com/",
+    "NoticesFetchFrequency": 3600,
+    "NoticesSkipCache": false
+  },
+  "ThemeSettings": {
+    "EnableThemeSelection": true,
+    "DefaultTheme": "default",
+    "AllowCustomThemes": true,
+    "AllowedThemes": []
+  },
+  "GitLabSettings": {
+    "Enable": false,
+    "Secret": "",
+    "Id": "",
+    "Scope": "",
+    "AuthEndpoint": "",
+    "TokenEndpoint": "",
+    "UserAPIEndpoint": "",
+    "DiscoveryEndpoint": "",
+    "ButtonText": "",
+    "ButtonColor": ""
+  },
+  "GoogleSettings": {
+    "Enable": false,
+    "Secret": "",
+    "Id": "",
+    "Scope": "profile email",
+    "AuthEndpoint": "https://accounts.google.com/o/oauth2/v2/auth",
+    "TokenEndpoint": "https://www.googleapis.com/oauth2/v4/token",
+    "UserAPIEndpoint": "https://people.googleapis.com/v1/people/me?personFields=names,emailAddresses,nicknames,metadata",
+    "DiscoveryEndpoint": "",
+    "ButtonText": "",
+    "ButtonColor": ""
+  },
+  "Office365Settings": {
+    "Enable": false,
+    "Secret": "",
+    "Id": "",
+    "Scope": "User.Read",
+    "AuthEndpoint": "https://login.microsoftonline.com/common/oauth2/v2.0/authorize",
+    "TokenEndpoint": "https://login.microsoftonline.com/common/oauth2/v2.0/token",
+    "UserAPIEndpoint": "https://graph.microsoft.com/v1.0/me",
+    "DiscoveryEndpoint": "",
+    "DirectoryId": ""
+  },
+  "OpenIdSettings": {
+    "Enable": false,
+    "Secret": "",
+    "Id": "",
+    "Scope": "profile openid email",
+    "AuthEndpoint": "",
+    "TokenEndpoint": "",
+    "UserAPIEndpoint": "",
+    "DiscoveryEndpoint": "",
+    "ButtonText": "",
+    "ButtonColor": "#145DBF"
+  },
+  "LdapSettings": {
+    "Enable": false,
+    "EnableSync": false,
+    "LdapServer": "",
+    "LdapPort": 389,
+    "ConnectionSecurity": "",
+    "BaseDN": "",
+    "BindUsername": "",
+    "BindPassword": "",
+    "UserFilter": "",
+    "GroupFilter": "",
+    "GuestFilter": "",
+    "EnableAdminFilter": false,
+    "AdminFilter": "",
+    "GroupDisplayNameAttribute": "",
+    "GroupIdAttribute": "",
+    "FirstNameAttribute": "",
+    "LastNameAttribute": "",
+    "EmailAttribute": "",
+    "UsernameAttribute": "",
+    "NicknameAttribute": "",
+    "IdAttribute": "",
+    "PositionAttribute": "",
+    "LoginIdAttribute": "",
+    "PictureAttribute": "",
+    "SyncIntervalMinutes": 60,
+    "SkipCertificateVerification": false,
+    "PublicCertificateFile": "",
+    "PrivateKeyFile": "",
+    "QueryTimeout": 60,
+    "MaxPageSize": 0,
+    "LoginFieldName": "",
+    "LoginButtonColor": "#0000",
+    "LoginButtonBorderColor": "#2389D7",
+    "LoginButtonTextColor": "#2389D7",
+    "Trace": false
+  },
+  "ComplianceSettings": {
+    "Enable": false,
+    "Directory": "{{ mattermost['data-dir'] }}",
+    "EnableDaily": false,
+    "BatchSize": 30000
+  },
+  "LocalizationSettings": {
+    "DefaultServerLocale": "en",
+    "DefaultClientLocale": "en",
+    "AvailableLocales": ""
+  },
+  "SamlSettings": {
+    "Enable": false,
+    "EnableSyncWithLdap": false,
+    "EnableSyncWithLdapIncludeAuth": false,
+    "IgnoreGuestsLdapSync": false,
+    "Verify": true,
+    "Encrypt": true,
+    "SignRequest": false,
+    "IdpURL": "",
+    "IdpDescriptorURL": "",
+    "IdpMetadataURL": "",
+    "ServiceProviderIdentifier": "",
+    "AssertionConsumerServiceURL": "",
+    "SignatureAlgorithm": "RSAwithSHA1",
+    "CanonicalAlgorithm": "Canonical1.0",
+    "ScopingIDPProviderId": "",
+    "ScopingIDPName": "",
+    "IdpCertificateFile": "",
+    "PublicCertificateFile": "",
+    "PrivateKeyFile": "",
+    "IdAttribute": "",
+    "GuestAttribute": "",
+    "EnableAdminAttribute": false,
+    "AdminAttribute": "",
+    "FirstNameAttribute": "",
+    "LastNameAttribute": "",
+    "EmailAttribute": "",
+    "UsernameAttribute": "",
+    "NicknameAttribute": "",
+    "LocaleAttribute": "",
+    "PositionAttribute": "",
+    "LoginButtonText": "SAML",
+    "LoginButtonColor": "#34a28b",
+    "LoginButtonBorderColor": "#2389D7",
+    "LoginButtonTextColor": "#ffffff"
+  },
+  "NativeAppSettings": {
+    "AppCustomURLSchemes": [
+      "mmauth://",
+      "mmauthbeta://"
+    ],
+    "AppDownloadLink": "https://mattermost.com/pl/download-apps",
+    "AndroidAppDownloadLink": "https://mattermost.com/pl/android-app/",
+    "IosAppDownloadLink": "https://mattermost.com/pl/ios-app/"
+  },
+  "ClusterSettings": {
+    "Enable": false,
+    "ClusterName": "",
+    "OverrideHostname": "",
+    "NetworkInterface": "",
+    "BindAddress": "",
+    "AdvertiseAddress": "",
+    "UseIPAddress": true,
+    "EnableGossipCompression": true,
+    "EnableExperimentalGossipEncryption": false,
+    "ReadOnlyConfig": true,
+    "GossipPort": 8074
+  },
+  "MetricsSettings": {
+    "Enable": false,
+    "BlockProfileRate": 0,
+    "ListenAddress": ":8067",
+    "EnableClientMetrics": true,
+    "EnableNotificationMetrics": true
+  },
+  "ExperimentalSettings": {
+    "ClientSideCertEnable": false,
+    "ClientSideCertCheck": "secondary",
+    "LinkMetadataTimeoutMilliseconds": 5000,
+    "RestrictSystemAdmin": false,
+    "EnableSharedChannels": false,
+    "EnableRemoteClusterService": false,
+    "DisableAppBar": false,
+    "DisableRefetchingOnBrowserFocus": false,
+    "DelayChannelAutocomplete": false,
+    "DisableWakeUpReconnectHandler": false,
+    "UsersStatusAndProfileFetchingPollIntervalMilliseconds": 3000
+  },
+  "AnalyticsSettings": {
+    "MaxUsersForStatistics": 2500
+  },
+  "ElasticsearchSettings": {
+    "ConnectionURL": "http://localhost:9200",
+    "Username": "elastic",
+    "Password": "changeme",
+    "EnableIndexing": false,
+    "EnableSearching": false,
+    "EnableAutocomplete": false,
+    "Sniff": true,
+    "PostIndexReplicas": 1,
+    "PostIndexShards": 1,
+    "ChannelIndexReplicas": 1,
+    "ChannelIndexShards": 1,
+    "UserIndexReplicas": 1,
+    "UserIndexShards": 1,
+    "AggregatePostsAfterDays": 365,
+    "PostsAggregatorJobStartTime": "03:00",
+    "IndexPrefix": "",
+    "LiveIndexingBatchSize": 1,
+    "BatchSize": 10000,
+    "RequestTimeoutSeconds": 30,
+    "SkipTLSVerification": false,
+    "CA": "",
+    "ClientCert": "",
+    "ClientKey": "",
+    "Trace": "",
+    "IgnoredPurgeIndexes": ""
+  },
+  "BleveSettings": {
+    "IndexDir": "",
+    "EnableIndexing": false,
+    "EnableSearching": false,
+    "EnableAutocomplete": false,
+    "BatchSize": 10000
+  },
+  "DataRetentionSettings": {
+    "EnableMessageDeletion": false,
+    "EnableFileDeletion": false,
+    "EnableBoardsDeletion": false,
+    "MessageRetentionDays": 365,
+    "MessageRetentionHours": 0,
+    "FileRetentionDays": 365,
+    "FileRetentionHours": 0,
+    "BoardsRetentionDays": 365,
+    "DeletionJobStartTime": "02:00",
+    "BatchSize": 3000,
+    "TimeBetweenBatchesMilliseconds": 100,
+    "RetentionIdsBatchSize": 100
+  },
+  "MessageExportSettings": {
+    "EnableExport": false,
+    "ExportFormat": "actiance",
+    "DailyRunTime": "01:00",
+    "ExportFromTimestamp": 0,
+    "BatchSize": 10000,
+    "DownloadExportResults": false,
+    "GlobalRelaySettings": {
+      "CustomerType": "A9",
+      "SMTPUsername": "",
+      "SMTPPassword": "",
+      "EmailAddress": "",
+      "SMTPServerTimeout": 1800,
+      "CustomSMTPServerName": "",
+      "CustomSMTPPort": "25"
+    }
+  },
+  "JobSettings": {
+    "RunJobs": true,
+    "RunScheduler": true,
+    "CleanupJobsThresholdDays": -1,
+    "CleanupConfigThresholdDays": -1
+  },
+  "ProductSettings": {},
+  "PluginSettings": {
+    "Enable": true,
+    "EnableUploads": false,
+    "AllowInsecureDownloadURL": false,
+    "EnableHealthCheck": true,
+    "Directory": "{{ mattermost['plugins-dir'] }}",
+    "ClientDirectory": "{{ mattermost['client-plugins-dir'] }}",
+    "Plugins": {},
+    "PluginStates": {
+      "com.mattermost.calls": {
+        "Enable": true
+      },
+      "com.mattermost.nps": {
+        "Enable": true
+      },
+      "playbooks": {
+        "Enable": true
+      }
+    },
+    "EnableMarketplace": true,
+    "EnableRemoteMarketplace": true,
+    "AutomaticPrepackagedPlugins": true,
+    "RequirePluginSignature": false,
+    "MarketplaceURL": "https://api.integrations.mattermost.com",
+    "SignaturePublicKeyFiles": [],
+    "ChimeraOAuthProxyURL": ""
+  },
+  "DisplaySettings": {
+    "CustomURLSchemes": [],
+    "MaxMarkdownNodes": 0
+  },
+  "GuestAccountsSettings": {
+    "Enable": false,
+    "HideTags": false,
+    "AllowEmailAccounts": true,
+    "EnforceMultifactorAuthentication": false,
+    "RestrictCreationToDomains": ""
+  },
+  "ImageProxySettings": {
+    "Enable": false,
+    "ImageProxyType": "local",
+    "RemoteImageProxyURL": "",
+    "RemoteImageProxyOptions": ""
+  },
+  "CloudSettings": {
+    "CWSURL": "https://portal.test.cloud.mattermost.com",
+    "CWSAPIURL": "https://api.internal.test.cloud.mattermost.com",
+    "CWSMock": false,
+    "Disable": false
+  },
+  "FeatureFlags": {
+    "TestFeature": "off",
+    "TestBoolFeature": false,
+    "EnableRemoteClusterService": false,
+    "AppsEnabled": true,
+    "PermalinkPreviews": false,
+    "CallsEnabled": true,
+    "NormalizeLdapDNs": false,
+    "WysiwygEditor": false,
+    "OnboardingTourTips": true,
+    "DeprecateCloudFree": false,
+    "CloudReverseTrial": false,
+    "EnableExportDirectDownload": false,
+    "MoveThreadsEnabled": false,
+    "StreamlinedMarketplace": true,
+    "CloudIPFiltering": false,
+    "ConsumePostHook": false,
+    "CloudAnnualRenewals": false,
+    "CloudDedicatedExportUI": false,
+    "ChannelBookmarks": false,
+    "WebSocketEventScope": false,
+    "NotificationMonitoring": true,
+    "ExperimentalAuditSettingsSystemConsoleUI": false
+  },
+  "ImportSettings": {
+    "Directory": "{{ mattermost['import-dir'] }}",
+    "RetentionDays": 30
+  },
+  "ExportSettings": {
+    "Directory": "{{ mattermost['export-dir'] }}",
+    "RetentionDays": 30
+  },
+  "WranglerSettings": {
+    "PermittedWranglerRoles": [],
+    "AllowedEmailDomain": [],
+    "MoveThreadMaxCount": 100,
+    "MoveThreadToAnotherTeamEnable": false,
+    "MoveThreadFromPrivateChannelEnable": false,
+    "MoveThreadFromDirectMessageChannelEnable": false,
+    "MoveThreadFromGroupMessageChannelEnable": false
+  }
+}

software/mattermost/software.cfg

+[buildout]
+extends =
+  ../../component/golang/buildout.cfg
+  ../../component/openssl/buildout.cfg
+  ../../component/postgresql/buildout.cfg
+  ../../stack/monitor/buildout.cfg
+  ../../stack/slapos.cfg
+  ../../component/defaults.cfg
+  buildout.hash.cfg
+
+parts =
+  slapos-cookbook
+  instance-profile
+  mattermost-config-file
+  postgresql
+  gowork
+
+[nodejs]
+<= nodejs-18.18.0
+
+[gowork]
+mattermost-bin = ${:bin}/mattermost
+mattermost-homepath = ${mattermost:homepath}
+
+[go_github.com_mattermost_mattermost]
+<= go-git-package
+go.importpath = github.com/mattermost/mattermost
+repository = https://github.com/mattermost/mattermost
+revision = v9.5.6
+
+[mattermost]
+recipe = plone.recipe.command
+command = bash -c "
+  ulimit -n 8096 &&
+  . ${gowork:env.sh} &&
+  mkdir -p ${gowork:bin} &&
+  cd ${:homepath}/webapp &&
+  make dist &&
+  cd ${:homepath}/server &&
+  export MM_NO_DOCKER=true &&
+  make setup-go-work prepackaged-binaries validate-go-version client &&
+  make build-linux-amd64
+  "
+#command = bash -c "
+#  ulimit -n 8096 &&
+#  . ${gowork:env.sh} &&
+#  mkdir -p ${gowork:bin} &&
+#  cd ${:homepath}/webapp &&
+#  make dist &&
+#  cd ${:homepath}/server &&
+#  export MM_NO_DOCKER=true &&
+#  make setup-go-work prepackaged-binaries validate-go-version client &&
+#  make build-linux-amd64 &&
+#  make package-linux-amd64 &&
+#  tar -xvzf dist/mattermost*.tar.gz
+#  "
+homepath = ${go_github.com_mattermost_mattermost:location}
+stop-on-error = true
+
+[download-file-base]
+recipe = slapos.recipe.build:download
+url = ${:_profile_base_location_}/${:filename}
+
+[mattermost-config-file]
+<= download-file-base
+
+[instance-profile]
+recipe = slapos.recipe.template:jinja2
+url = ${:_profile_base_location_}/${:filename}
+output = ${buildout:directory}/instance.cfg
+extensions = jinja2.ext.do
+context =
+  section buildout buildout
+  key mattermost_bin gowork:mattermost-bin
+  key mattermost_homepath gowork:mattermost-homepath
+  key template_monitor monitor2-template:output
+  key postgresql_location postgresql:location
+