feat: change zammad domain

hosts/AZ-CLD-1/services/containers/default.nix

@@ -7,7 +7,7 @@
     ./litellm.nix
     ./librechat-dev.nix
     ./netbird.nix
-    ./portainer.nix
+    # ./portainer.nix
     ./zammad-hr.nix
   ];
   system.activationScripts.createPodmanNetworkWeb = lib.mkAfter ''

hosts/AZ-CLD-1/services/containers/homarr.nix

@@ -13,6 +13,7 @@ in {
       AUTH_OIDC_CLIENT_NAME = "Azure";
       AUTH_OIDC_SCOPE_OVERWRITE = "openid email profile";
       AUTH_OIDC_GROUPS_ATTRIBUTE = "roles";
+      AUTH_OIDC_GROUPS_LOCAL_MANAGEMENT = "true";
     };
     environmentFiles = [config.age.secrets.homarr-env.path];
     ports = ["127.0.0.1:${toString servicePort}:7575"];

hosts/AZ-CLD-1/services/containers/zammad-hr.nix

@@ -21,7 +21,9 @@
   ipOffset = 40;
 
   # Domain-Konfiguration
-  zammadDomain = "hr-ticket.az-gruppe.com";
+  zammadDomain = "tickets.az-gruppe.com";
+  # Alte Domain wird per 301 auf zammadDomain weitergeleitet (siehe Traefik-Config unten)
+  zammadDomainOld = "hr-ticket.az-gruppe.com";
 
   sharedEnvironment = {
     MEMCACHE_SERVERS = "zammad-memcached:11211";
@@ -29,7 +31,12 @@
     POSTGRESQL_HOST = "10.89.0.1";
     POSTGRESQL_USER = "zammad_${instanceName}";
     POSTGRESQL_PORT = "6433";
-    POSTGRESQL_OPTIONS = "?pool=5";
+    # pool=50 entspricht dem Zammad-Default (config/database/database.yml).
+    # Der Scheduler startet mehrere BackgroundServices-Threads gleichzeitig
+    # (ProcessSessions/Scheduled/Delayed/DelayedAI + Cleanup/fetch); pool=5
+    # war zu klein -> ActiveRecord::ConnectionTimeoutError beim Start.
+    # Wird durch PgBouncer-Session (default_pool_size=30) server-seitig gedeckelt.
+    POSTGRESQL_OPTIONS = "?pool=50";
     REDIS_URL = "redis://zammad-redis:6379";
     TZ = "Europe/Berlin";
     BACKUP_DIR = "/var/tmp/zammad";
@@ -232,7 +239,7 @@ in {
         --env POSTGRESQL_HOST=10.89.0.1 \
         --env POSTGRESQL_USER=zammad_${instanceName} \
         --env POSTGRESQL_PORT=6433 \
-        --env POSTGRESQL_OPTIONS='?pool=5' \
+        --env POSTGRESQL_OPTIONS='?pool=50' \
         --env REDIS_URL=redis://zammad-redis:6379 \
         --env TZ=Europe/Berlin \
         --env ELASTICSEARCH_ENABLED=true \
@@ -305,6 +312,13 @@ in {
       };
     };
 
+    # Permanenter Redirect von der alten Domain auf die neue
+    middlewares."${serviceName}-redirect-old-domain".redirectRegex = {
+      permanent = true;
+      regex = "^https?://${lib.replaceStrings ["."] ["\\."] zammadDomainOld}/(.*)";
+      replacement = "https://${zammadDomain}/\${1}";
+    };
+
     routers.${serviceName} = {
       rule = "Host(`${zammadDomain}`)";
       tls = {
@@ -314,5 +328,15 @@ in {
       entrypoints = "websecure";
       middlewares = ["${serviceName}-headers"];
     };
+
+    routers."${serviceName}-old-domain-redirect" = {
+      rule = "Host(`${zammadDomainOld}`)";
+      tls = {
+        certResolver = "ionos";
+      };
+      service = serviceName;
+      entrypoints = "websecure";
+      middlewares = ["${serviceName}-redirect-old-domain"];
+    };
   };
 }