diff --git a/docs/deletion-request.md b/docs/deletion-request.md new file mode 100644 index 00000000..9af80094 --- /dev/null +++ b/docs/deletion-request.md @@ -0,0 +1,61 @@ +# Process for handling a deletion request + +### Keycloak +Required: +- auth.pub.solar ops user credentials +- SSH access to host nachtigall +``` +ssh barkeeper@nachtigall.pub.solar + +sudo --user keycloak kcadm.sh config credentials --config /tmp/kcadm.config --server http://localhost:8080 --realm pub.solar --user ops + +# Take note of user id in response from following command +sudo --user keycloak kcadm.sh get --config /tmp/kcadm.config users --realm pub.solar --query email= + +# To avoid impersonification, we deactivate the account by resetting the password and email address +# Use user id from previous command, for example +sudo --user keycloak kcadm.sh update --config /tmp/kcadm.config users/2ec6f173-3c10-4b82-9808-e2f2d393ff11/reset-password --realm pub.solar --set type=password --set value= --no-merge +sudo --user keycloak kcadm.sh update --config /tmp/kcadm.config users/2ec6f173-3c10-4b82-9808-e2f2d393ff11 --realm pub.solar --set email=@deactivated.pub.solar +``` + +Docs: https://www.keycloak.org/docs/latest/server_admin/index.html#updating-a-user + + +### Nextcloud +``` +ssh barkeeper@nachtigall.pub.solar +nextcloud-occ user:delete +``` + +Docs: https://docs.nextcloud.com/server/latest/admin_manual/configuration_server/occ_command.html#user-commands-label + + +### Mastodon +``` +ssh barkeeper@nachtigall.pub.solar +sudo -u mastodon mastodon-tootctl accounts delete --email +``` + +Docs: https://docs.joinmastodon.org/admin/tootctl/#accounts-delete + + +### Forgejo +``` +ssh barkeeper@nachtigall.pub.solar +sudo -u gitea gitea admin user delete --config /var/lib/forgejo/custom/conf/app.ini --purge --email +``` + +Docs: https://forgejo.org/docs/latest/admin/command-line/#delete + + +### Matrix +``` +ssh bartender@matrix.pub.solar -p 2020 +curl --header "Authorization: Bearer " --request POST http://172.18.0.3:8008/_synapse/admin/v1/deactivate/@:pub.solar --data '{"erase": true}' +``` + +Docs: https://matrix-org.github.io/synapse/latest/admin_api/user_admin_api.html#deactivate-account + + +### OpenBikeSensor +Not implemented, see: https://github.com/openbikesensor/portal/issues/95