chore: init

.dockerignore

@@ -0,0 +1,13 @@
+.git
+.github
+node_modules
+docs
+
+internal/web/static/styles.css
+internal/web/static/js/*.js
+Dockerfile
+README.md
+LICENSE
+.env*
+.prettier*
+.gitignore

.env

@@ -0,0 +1,14 @@
+# If a value is left empty, it will get set to the default during application startup.
+
+LDAP_SERVER=""
+LDAP_IS_AD=""
+LDAP_BASE_DN=""
+LDAP_READONLY_USER=""
+LDAP_READONLY_PASSWORD=""
+
+MIN_LENGTH=""
+MIN_NUMBERS=""
+MIN_SYMBOLS=""
+MIN_UPPERCASE=""
+MIN_LOWERCASE=""
+PASSWORD_CAN_INCLUDE_USERNAME=""

.github/dependabot.yml

@@ -0,0 +1,6 @@
+version: 2
+updates:
+  - package-ecosystem: "gomod"
+    directory: "/"
+    schedule:
+      interval: "weekly"

.github/workflows/check.yml

@@ -0,0 +1,135 @@
+name: Check
+
+on:
+  release:
+    types: [published]
+  pull_request:
+  push:
+    branches:
+      - main
+
+jobs:
+  go-test:
+    name: Run Go tests
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+
+      - name: Set up Go
+        uses: actions/setup-go@v4
+        with:
+          go-version: "1.20"
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v3
+        with:
+          node-version: "18"
+
+      - uses: pnpm/action-setup@v2
+        name: Install pnpm
+        id: pnpm-install
+        with:
+          version: 8
+          run_install: false
+
+      - name: Get pnpm store directory
+        id: pnpm-cache
+        shell: bash
+        run: |
+          echo "STORE_PATH=$(pnpm store path)" >> $GITHUB_OUTPUT
+
+      - uses: actions/cache@v3
+        name: Setup pnpm cache
+        with:
+          path: ${{ steps.pnpm-cache.outputs.STORE_PATH }}
+          key: ${{ runner.os }}-pnpm-store-${{ hashFiles('**/pnpm-lock.yaml') }}
+          restore-keys: |
+            ${{ runner.os }}-pnpm-store-
+
+      - name: Install dependencies
+        run: pnpm install && go mod download
+
+      - name: Check types
+        run: pnpm build:assets
+
+      - name: Build
+        run: go build -v ./...
+
+      - name: Test
+        run: go test -v ./...
+
+  types:
+    name: Check types
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v3
+        with:
+          node-version: "18"
+
+      - uses: pnpm/action-setup@v2
+        name: Install pnpm
+        id: pnpm-install
+        with:
+          version: 8
+          run_install: false
+
+      - name: Get pnpm store directory
+        id: pnpm-cache
+        shell: bash
+        run: |
+          echo "STORE_PATH=$(pnpm store path)" >> $GITHUB_OUTPUT
+
+      - uses: actions/cache@v3
+        name: Setup pnpm cache
+        with:
+          path: ${{ steps.pnpm-cache.outputs.STORE_PATH }}
+          key: ${{ runner.os }}-pnpm-store-${{ hashFiles('**/pnpm-lock.yaml') }}
+          restore-keys: |
+            ${{ runner.os }}-pnpm-store-
+
+      - name: Install dependencies
+        run: pnpm install
+
+      - name: Check types
+        run: pnpm js:build
+
+  formatting:
+    name: Check formatting
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v3
+        with:
+          node-version: "18"
+
+      - uses: pnpm/action-setup@v2
+        name: Install pnpm
+        id: pnpm-install
+        with:
+          version: 8
+          run_install: false
+
+      - name: Get pnpm store directory
+        id: pnpm-cache
+        shell: bash
+        run: |
+          echo "STORE_PATH=$(pnpm store path)" >> $GITHUB_OUTPUT
+
+      - uses: actions/cache@v3
+        name: Setup pnpm cache
+        with:
+          path: ${{ steps.pnpm-cache.outputs.STORE_PATH }}
+          key: ${{ runner.os }}-pnpm-store-${{ hashFiles('**/pnpm-lock.yaml') }}
+          restore-keys: |
+            ${{ runner.os }}-pnpm-store-
+
+      - name: Install dependencies
+        run: pnpm install
+
+      - name: Check formatting
+        run: pnpm prettier --check .

.github/workflows/docker.yml

@@ -0,0 +1,66 @@
+name: Docker
+
+on:
+  release:
+    types: [published]
+  schedule:
+    - cron: "0 0 * * 0"
+  pull_request:
+  push:
+    branches:
+      - main
+
+env:
+  REGISTRY: ghcr.io
+  IMAGE_NAME: "${{ github.repository_owner }}/ldap-selfservice-password-changer"
+
+jobs:
+  docker:
+    name: Build Images
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v2
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v2
+
+      - name: Cache docker layers
+        uses: actions/cache@v3
+        id: cache
+        with:
+          path: /tmp/.buildx-cache
+          key: ${{ runner.os }}-buildx-${{ github.sha }}
+          restore-keys: |
+            ${{ runner.os }}-buildx-
+
+      - name: Gather Docker metadata
+        id: meta
+        uses: docker/metadata-action@v4
+        with:
+          images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
+          tags: |
+            type=ref,event=branch
+            type=ref,event=pr
+            type=semver,pattern={{version}}
+            type=semver,pattern={{version}}.{{major}}
+          labels: |
+            cache-from=type=local,src=/tmp/.buildx-cache
+            cache-to=type=local,dest=/tmp/.buildx-cache
+
+      - name: Log in to the Container registry
+        uses: docker/login-action@v2
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Build and push Docker image
+        uses: docker/build-push-action@v4
+        with:
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          platforms: linux/amd64,linux/arm/v7,linux/arm64

.gitignore

@@ -0,0 +1,5 @@
+node_modules
+internal/web/static/js/*.js
+internal/web/static/styles.css
+.env.local
+*.bbolt

.prettierignore

@@ -0,0 +1,3 @@
+internal/web/static/styles.css
+internal/web/static/js/*.js
+pnpm-lock.yaml

.prettierrc.js

@@ -0,0 +1,16 @@
+module.exports = {
+  printWidth: 120,
+  trailingComma: "none",
+  tabWidth: 2,
+  semi: true,
+  singleQuote: false,
+  plugins: [require("prettier-plugin-tailwindcss"), require("prettier-plugin-go-template")],
+  overrides: [
+    {
+      files: ["*.html"],
+      options: {
+        parser: "go-template"
+      }
+    }
+  ]
+};

Dockerfile

@@ -0,0 +1,30 @@
+FROM --platform=amd64 node:18 AS frontend-builder
+WORKDIR /build
+RUN npm i -g pnpm
+
+COPY package.json .
+COPY pnpm-lock.yaml .
+RUN pnpm i
+
+COPY . .
+
+RUN pnpm build:assets
+
+FROM golang:1.20-alpine AS backend-builder
+WORKDIR /build
+RUN apk add git
+
+COPY ./go.mod .
+COPY ./go.sum .
+RUN go mod download
+
+COPY . .
+COPY --from=frontend-builder /build/internal/web/static/styles.css /build/internal/web/static/styles.css
+COPY --from=frontend-builder /build/internal/web/static/js/*.js /build/internal/web/static/js
+RUN CGO_ENABLED=0 go build -o /build/ldap-passwd
+
+FROM alpine:3 AS runner
+
+COPY --from=backend-builder /build/ldap-passwd /usr/local/bin/ldap-passwd
+
+ENTRYPOINT [ "/usr/local/bin/ldap-passwd" ]

LICENSE

@@ -0,0 +1,21 @@
+The MIT License (MIT)
+
+Copyright (c) 2023 Netresearch DTT GmbH
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.