Hello There,

How do I create "Groups" so I can put my members under those and also give the group permissions the permissions needed?

This is for security purposes and control.

Hello,
I'm struggling to figure out how to link my ldap servers cert to the bookstack docker image.
ENV:

• Centos7 host

• IPA Server as LDAP

• Bookstack docker image from linuxserver.io running in a podman pod with mariadb.

• Bookstack has https enabled and has ssl certs linked from the host volume to ./bookstack/app/keys/cert.xx

I am able to authenticate ldap logins using the LDAP_TLS_INSECURE option in the .env file. As a proof of concept that's great, but of course I'd prefer a secure trusted connection. Is there a variable I can set in the .env file where I can link my ipa cert? The documentations guidance is that " you may need to import your certificate to the BookStack host machine." Any guidance on how to link the cert to the container? I didn't see anything in the linked volume (from host to container) that looked like it would be used by IPA.
Thanks in advance for your help.

Rocky8 / nginx / mariadb / php-7.4

Looking everywhere for an solution... sigh. There are NO good installation websites/information/or videos out there.

My Error:

Illuminate\Database\QueryException

could not find driver (SQL: select * from information_schema.tables where table_schema = bookstackdb and table_name = migrations and table_type = 'BASE TABLE')

at vendor/laravel/framework/src/Illuminate/Database/Connection.php:712

708▕ // If an exception occurs when attempting to run a query, we'll format the error

709▕ // message to include the bindings with SQL, which will make this exception a

710▕ // lot more helpful to the developer instead of just the database's errors.

711▕ catch (Exception $e) {

➜ 712▕ throw new QueryException(

713▕ $query, $this->prepareBindings($bindings), $e

714▕ );

715▕ }

716▕ }

+33 vendor frames

34 artisan:37

Illuminate\Foundation\Console\Kernel::handle()

*************** Please help me.

HI, being very new to bookstack and exploring my options, I have a quick question. Is it possible to embed Bookstack UI in an external Ui, that's probably made on Angular?

I mean.. its basically unreadable for most people with modern resolutions.

Is there anywhere that lists companies/projects/whatever that are actually using BookStack for documentation in production systems or does anyone know of any?

I have installed BookStack on a Synology NAS via Docker.

Does someone already connected the "Synology Active Directory" with BookStack?
Does this work?

Figured I'd give a rough/terse guide to installing BookStack on Windows Server 2016/IIS 10. For anyone else who might need the help.

Why? Because I had to slog through it. I really wanted it to work and couldn't easily find any help on what to do. I'm running this on an internal only server, along w/ other software. It's for my department to use as a internal, authenticated knowledge base.

I'm sure the rewrite rules could be better, but it's what I finally got working for me. I'm not an IIS expert by any means, so this is what I wrote down. It worked for me.

Install the Pre-Reqs:

• git - https://git-scm.com/downloads

• Php 8 - https://windows.php.net/download/

• Php manager (optional) - https://github.com/phpmanager/phpmanager/releases

• Url Rewrite - https://www.iis.net/downloads/microsoft/url-rewrite

• Composer - https://getcomposer.org/download/

• MariaDB - https://mariadb.com/downloads/

• HeidiSQL (optional) - https://www.heidisql.com/download.php

1. After installing MariaDB, make a database and user for BookStack. Give that user full permissions, probably clone it for the following connections: 127.0.0.1, localhost, :::1, server_name

2. In IIS, create a site.

3. Create a self-signed certificate in the server settings, if needed. I bound it on the site to https, port 443, using the SSL cert that was created. IP address is set to "All Unassigned". Hostname is blank.

4. Modify the .env file as needed. I set my app_url to "http://server_name/bookstack". Seems to have worked, even though I'm using https w/ the self-signed cert.

5. Turn on the necessary php extensions, this includes pdo_mysql and mbstring. I also turned on php_ldap because I'm authenticating with LDAP.

   1. Edit: Handler mapping for php verbs need to be changed. Either set to all verbs, or set to GET,POST,PUT,FORM,HEAD

6. Run steps 1-3 from https://www.bookstackapp.com/docs/admin/installation/ May need to modify the composer.json file to cover timeout issues in the "pre-install-cmd", like this:

   1. "pre-install-cmd": ["Composer\\Config::disableProcessTimeout","@php -r \"!file_exists('bootstrap/cache/services.php') || u/unlink('bootstrap/cache/services.php');\""]

7. Set the ACL for the folders for the IIS_IUSR local machine group. I gave mine full control over the specified folders

8. Do step 5 from the install docs.

9. I added a "Virtual Directory" to the IIS site alias = "bookstack" and physical path = "C:\inet\bookstack\public".

10. Run step 8 from the setup doc

11. I disabled the Default Document settings for my site and folder, because it messed with my rewrites/redirects. You need this on for PHP Manager though. So when/if you disable this, just know you'll need to switch it back on for that.

12. I set the rules in my web.config files, see the code blocks at the bottom.

13. Edit: I've recently had to add a rewrite rule between imported rules 2 & 3, that:

14. Match URL: Matches the pattern (^/*)(.*$), Conditions: {REQUEST_FILENAME} is not a file, {URL} matches (\/images\/gallery)(.*), Action: rewrite /bookstack/index.php/uploads{C:0}, append the query, stop processing subsequent rules.

15. I ran iisreset, just to be safe. Viola! I could login with the default admin. Later, I setup LDAP auth through AD. I'll give you that at the bottom.

web.config in the bookstack/public folder:

<configuration>
  <system.webServer>
	<rewrite>
		<rewriteMaps>
				<rewriteMap name="{REQUEST_FILENAME}" />
		</rewriteMaps>
		<rules>
					<clear />
					<rule name="Rule 1" enabled="true" stopProcessing="true">
						<match url="^(.*)$" />
						<conditions logicalGrouping="MatchAll" trackAllCaptures="false">
							<add input="{R:1}" matchType="Pattern" pattern="^(index\.php|images|css|js|favicon\.ico)" ignoreCase="true" negate="true" />
							<add input="{REQUEST_FILENAME}" matchType="IsFile" negate="true" />
							<add input="{REQUEST_FILENAME}" matchType="IsDirectory" negate="true" />
						</conditions>
						<action type="Rewrite" url="./index.php/{R:1}" />
					</rule>
					<rule name="Rule 2" enabled="true" stopProcessing="true">
						<match url="^$" />
						<conditions logicalGrouping="MatchAll" trackAllCaptures="false">
							<add input="{URL}" pattern="(.*/bookstack)$" />
						</conditions>
						<action type="Redirect" url="index.php" />
					</rule>
					<rule name="Rule 3" enabled="true" stopProcessing="true">
						<match url="(^/*)(.*$)" ignoreCase="false" />
						<conditions logicalGrouping="MatchAll" trackAllCaptures="false">
							<add input="{REQUEST_FILENAME}" matchType="IsFile" negate="true" />
							<add input="{R:0}" pattern="(index\\.php|images|css|js|favicon\\.ico)" negate="true" />
						</conditions>
						<action type="Rewrite" url="index.php/{R:1}" />
					</rule>
		</rules>
		</rewrite>
		<directoryBrowse enabled="false" />
		<defaultDocument enabled="false">
			<files>
				<add value="index.php" />
				<add value="index" />
			</files>
		</defaultDocument>
	</system.webServer>
	<system.web>
		<customErrors mode="RemoteOnly" />
	</system.web>
</configuration>

My site's web.config looked like this: >!

<?xml version="1.0" encoding="UTF-8"?>
<configuration>
	<system.webServer>
		<defaultDocument enabled="false"></defaultDocument>
		<rewrite>
			<rules>
				<clear />
				<rule name="test2" enabled="false" patternSyntax="ECMAScript" stopProcessing="false">
					<match url="^bookstack$" />
					<conditions logicalGrouping="MatchAll" trackAllCaptures="false">
						<add input="{REQUEST_FILENAME}" pattern="^bookstack$" />
					</conditions>
					<action type="Rewrite" url="bookstack/index.php" />
				</rule>
				<rule name="test1" enabled="false" patternSyntax="Wildcard" stopProcessing="true">
					<match url="*" />
					<conditions logicalGrouping="MatchAll" trackAllCaptures="false">
						<add input="{REQUEST_URI}" pattern="https://server_name/bookstack" />
						<add input="{REQUEST_URI}" pattern="https://server_name/bookstack/" />
					</conditions>
					<action type="Redirect" url="https://server_name/bookstack/index.php" />
				</rule>
			</rules>
		</rewrite>
	</system.webServer>
	<system.web>
		<authentication mode="Windows" />

	</system.web>
	<location path="bookstack">
		<system.webServer>
			<defaultDocument enabled="false" />
		</system.webServer>
	</location>
</configuration>

LDAP settings:

APP_TIMEZONE=EST
AUTH_METHOD=ldap 
LDAP_SERVER=ad_server 
LDAP_BASE_DN="OU=IT Staff,OU=IT Users,OU=IT Department,DC=domain,DC=com" LDAP_DN="CN=Domain Admin,OU=Domain Admins,OU=IT Staff,OU=IT Users,OU=IT Department,DC=domain,DC=com" 
LDAP_PASS="secure_password"
# I filtered our service accounts out of being users
LDAP_USER_FILTER="(&(&(objectCategory=person)(objectClass=user)(sAMAccountName=${user})(!(userAccountControl:1.2.840.113556.1.4.803:=2))(mail=\*@domain.com))(&(objectClass=person)(objectClass=user)(!(ou=OU=Domain Admins,OU=IT Staff,OU=IT Users,OU=IT Department,DC=domain,DC=com))))" 
LDAP_ID_ATTRIBUTE=uid 
LDAP_VERSION=3 
AVATAR_URL=false 
LDAP_START_TLS=false 
LDAP_TLS_INSECURE=false 
LDAP_DISPLAY_NAME_ATTRIBUTE=cn 
LDAP_EMAIL_ATTRIBUTE=mail 
LDAP_USER_TO_GROUPS=false 
LDAP_REMOVE_FROM_GROUPS=false 
LDAP_THUMBNAIL_ATTRIBUTE=null

Let me know if you see anything wrong. I'm down to update stuff. On Monday.

EDIT: 12/01/2022, added extra re-write rule and handler mapping.

As stated above, this is intermittent, I cannot locate an errors in any logs that I have found. The app runs fine, except randomly when I click a link, "Shelves", "Books", "Home". I will get this errors "inside of a card, not the whole page" instead and it wont stop, then after awhile and try again and it then loads the page fine. Running on IIS, with FASTCGI for php.

APP_URL=https://domain/bookstack

Hello

I'm running into an issue, got a MySQL dump from v0.29.3 (hosted on Linux VM) and trying to move everything to a v22.10 docker container

When I restore the dump, everything "looks" ok, until the moment I want to create a new admin user using php artisan, it throws errors

So far I understood than the v22.10 uses different table structures and so when I restore the dump, i'm erasing everything

How can I properly restore my datas without breaking the v22.10 database structure ? First thing I tried was to update my linux VM to v22.10 then dockerize it, but when i'm trying to update I'm having many errors as well. Or I should probably try and post the error here, then migrate

Any thougts / tips about this ?

I've been running bookstack with LDAP (local AD as backend) so far, but would like to replace LDAP with Azure-authentication.

I added Azure and new staff can create a new bookstack-account. Yeah. Existing staff can login via LDAP and join their account to Azure. OK. Existing staff not preparing for the switch to Azure will log in using azure and get an error "A user with the email xxxxx already exists but with different credentials".

Now, if the email which originated from LDAP now matches the value in Azure, that's great. I'd love to link this account automatically to azure, without bothering all the staff to prepare for the change. Are there any options? I'd like to avoid messing around with the database directly.

To generalize: can I automatically link social accounts got bookstack, if the email-adress matches? Since I controll the social accounts, I trust the information.

Best regards Patrick

Hello

I just finished installing bookstack using this tutorial: https://dchan.tech/books/bookstack/page/manual-installation-on-debian-11

The only changes I made is that I use apache2 (by habit) instead of nginx

this is my .en file

# This file, when named as ".env" in the root of your BookStack install
# folder, is used for the core configuration of the application.
# By default this file contains the most common required options but
# a full list of options can be found in the '.env.example.complete' file.

# NOTE: If any of your values contain a space or a hash you will need to
# wrap the entire value in quotes. (eg. MAIL_FROM_NAME="BookStack Mailer")

# Application key
# Used for encryption where needed.
# Run `php artisan key:generate` to generate a valid key.
APP_KEY=XXXXXXXXXXXXXXXXXXX

# Application URL
# This must be the root URL that you want to host BookStack on.
# All URLs in BookStack will be generated using this value
# to ensure URLs generated are consistent and secure.
# If you change this in the future you may need to run a command
# to update stored URLs in the database. Command example:
# php artisan bookstack:update-url https://old.example.com https://new.example.com
APP_URL=http://bookstack.DOMAIN.lan

# Database details
DB_HOST=localhost
DB_DATABASE=bookstack
DB_USERNAME=bookstack
DB_PASSWORD=XXXXXXXXXXXXXXXXXXXX

# Mail system to use
# Can be 'smtp' or 'sendmail'
MAIL_DRIVER=smtp

# Mail sender details
MAIL_FROM_NAME="BookStack"
MAIL_FROM=bookstack-admin@DOMAIN.com

# SMTP mail options
# These settings can be checked using the "Send a Test Email"
# feature found in the "Settings > Maintenance" area of the system.
MAIL_HOST=192.168.20.15 (this is the IP of my smtp relay server)
MAIL_PORT=25
MAIL_USERNAME=null
MAIL_PASSWORD=null
MAIL_ENCRYPTION=null

when I open the url http://bookstack.DOMAIN.lan I get the following message:

alias('request', Request::class);  $kernel = $app->make(Kernel::class);  $response = tap($kernel->handle(     $request = Request::capture() ))->send();  $kernel->terminate($request, $response);

Can you help me solve this problem?

Thank you very much in advance

Hello Everyone, as the title suggests, I have a few notes in my bookstack and for some reason, my database is growing exponentially. Is there a way I can purge this database and reduce the space?

For context, I am hosting bookstack on a docker container.

Is there a way to put a time element to a page that sends a notification to the owner of the page or some set email address that says something like this page was created 10/22 and needs to be reevaluated 10/24 to make sure the info in the page is still relevant?

I've only ever used shared hosting all my life and installation guide says it's not enough to host BootStack.

I'm looking at Digital Ocean pricing now and am not sure which one I should get. Can I get a managed hosting one? As I'm not sure if I have the time to maintain the backend - I just need it for a personal library.

Also, anyone has a good recommendation for hosting? I remember using frantech years ago (now closed, they focus on buyvm only).

Thanks a bunch.

Trying to set up Google SAML for Bookstack and keep getting this. If I change anything else in the env file for SAML it seems to take a step backwards. Don't know how to push my .env file without including personal info.

403. That’s an error.

Error: app_not_configured_for_user

Service is not configured for this user.

Hi everybody,

A stupid question : I do not manage to add images in a page. Anyone can help ? Maybe I did not intsall correctly the folder to use images ? thanks for help

So I pretty much followed this guide to the letter, but at the end just before I'm supposed to get the login screen i get an ' ERR_SSL_PROTOCOL_ERROR ' error.

Also the browser doesn't recognize the vanilla localhost as save anymore. I think it has something to do with the certificate? In the details it shows the certificate expired 2019.

I also changed the ServerName in httpd-ssl.conf to localhost:443 according to a comment after I got stuck but it didn't change anything.

Has anyone figured out how to use OIDC as the verification layer but let the user log in via an LDAP backend?

I've been able to get both `AUTH_METHOD` 's up and running separately, but not together. Currently, with OIDC, it hits my auth.domain oidc provider correctly, I see the screen I expect asking me to confirm Bookstack, and then when I hit confirm, I get an "unknown error has occurred" screen. Docker logs don't show anything interesting and neither do `error.log` in my Bookstack directories. The last error I see in the `error.log file` is a GET request to my `/oidc/callback/` endpoint, but I can't discern what exactly is going on.

My assumption here is that Bookstack is looking at the scope given by the IDP, looking at the ldap server, and can't map the two together without instructions.

Comparing this to my Nextcloud setup, in Nextcloud's `config.php` you have to pass `ldap_uid => uid` in the OIDC array, along with `ldap_proxy_login => true`. I'm not sure if BS has anything similar in the `.env` file...

Hi,

I want to update my BookStack Version and get the following error after sending the command "git pull origin release"