From 7d68dec709661721914f164fb57b19f1d3807a43 Mon Sep 17 00:00:00 2001
From: teutat3s <teutates@mailbox.org>
Date: Thu, 16 Nov 2023 22:04:09 +0100
Subject: [PATCH] feat: add docs for deletion requests

---
 docs/deletion-request.md | 61 ++++++++++++++++++++++++++++++++++++++++
 1 file changed, 61 insertions(+)
 create mode 100644 docs/deletion-request.md

diff --git a/docs/deletion-request.md b/docs/deletion-request.md
new file mode 100644
index 0000000..9af8009
--- /dev/null
+++ b/docs/deletion-request.md
@@ -0,0 +1,61 @@
+# Process for handling a deletion request
+
+### Keycloak
+Required:
+- auth.pub.solar ops user credentials
+- SSH access to host nachtigall
+```
+ssh barkeeper@nachtigall.pub.solar
+
+sudo --user keycloak kcadm.sh config credentials --config /tmp/kcadm.config --server http://localhost:8080 --realm pub.solar --user ops
+
+# Take note of user id in response from following command
+sudo --user keycloak kcadm.sh get --config /tmp/kcadm.config users --realm pub.solar --query email=<email-address>
+
+# To avoid impersonification, we deactivate the account by resetting the password and email address
+# Use user id from previous command, for example
+sudo --user keycloak kcadm.sh update --config /tmp/kcadm.config users/2ec6f173-3c10-4b82-9808-e2f2d393ff11/reset-password --realm pub.solar --set type=password --set value=<random-password> --no-merge
+sudo --user keycloak kcadm.sh update --config /tmp/kcadm.config users/2ec6f173-3c10-4b82-9808-e2f2d393ff11 --realm pub.solar --set email=<username>@deactivated.pub.solar
+```
+
+Docs: https://www.keycloak.org/docs/latest/server_admin/index.html#updating-a-user
+
+
+### Nextcloud
+```
+ssh barkeeper@nachtigall.pub.solar
+nextcloud-occ user:delete <username>
+```
+
+Docs: https://docs.nextcloud.com/server/latest/admin_manual/configuration_server/occ_command.html#user-commands-label
+
+
+### Mastodon
+```
+ssh barkeeper@nachtigall.pub.solar
+sudo -u mastodon mastodon-tootctl accounts delete --email <mail-address>
+```
+
+Docs: https://docs.joinmastodon.org/admin/tootctl/#accounts-delete
+
+
+### Forgejo
+```
+ssh barkeeper@nachtigall.pub.solar
+sudo -u gitea gitea admin user delete --config /var/lib/forgejo/custom/conf/app.ini --purge --email <mail-address>
+```
+
+Docs: https://forgejo.org/docs/latest/admin/command-line/#delete
+
+
+### Matrix
+```
+ssh bartender@matrix.pub.solar -p 2020
+curl --header "Authorization: Bearer <admin-access-token>" --request POST http://172.18.0.3:8008/_synapse/admin/v1/deactivate/@<username>:pub.solar --data '{"erase": true}'
+```
+
+Docs: https://matrix-org.github.io/synapse/latest/admin_api/user_admin_api.html#deactivate-account
+
+
+### OpenBikeSensor
+Not implemented, see: https://github.com/openbikesensor/portal/issues/95