From d766a3403c2fccfc03e64da5c87dd14c386cb336 Mon Sep 17 00:00:00 2001 From: Okke Harsta Date: Wed, 25 Mar 2026 09:30:42 +0100 Subject: [PATCH 1/2] Clean up expired invitations See https://github.com/OpenConext/OpenConext-Invite/issues/681 --- roles/invite/templates/serverapplication.yml.j2 | 2 ++ 1 file changed, 2 insertions(+) diff --git a/roles/invite/templates/serverapplication.yml.j2 b/roles/invite/templates/serverapplication.yml.j2 index 441b7b658..0f012bda5 100644 --- a/roles/invite/templates/serverapplication.yml.j2 +++ b/roles/invite/templates/serverapplication.yml.j2 @@ -84,6 +84,8 @@ cron: metadata-resolver-url: "https://metadata.{{ base_domain }}/idps-metadata.xml" # A value of 0 means no logs will be deleted purge-audit-log-days: 365 + # A value of 0 means no invitations will be deleted + purge-expired-invitations-days: 365 myconext: uri: "https://login.{{ myconext_base_domain }}/myconext/api/invite/provision-eduid" From 18153854d4db5d3bd0f83e99f341d1f85e80bad2 Mon Sep 17 00:00:00 2001 From: Okke Harsta Date: Tue, 31 Mar 2026 14:28:06 +0200 Subject: [PATCH 2/2] Configurable shedlock settings invite --- roles/invite/templates/serverapplication.yml.j2 | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/roles/invite/templates/serverapplication.yml.j2 b/roles/invite/templates/serverapplication.yml.j2 index 0f012bda5..26c97d432 100644 --- a/roles/invite/templates/serverapplication.yml.j2 +++ b/roles/invite/templates/serverapplication.yml.j2 @@ -75,10 +75,14 @@ crypto: cron: user-cleaner-expression: "0 0/30 * * * *" + user-cleaner-lock-at-least-for: "PT5M" + user-cleaner-lock-at-most-for: "PT28M" last-activity-duration-days: 1000 role-expiration-notifier-expression: "0 0/30 * * * *" # Set to -1 to suppress role expiry notifications role-expiration-notifier-duration-days: 5 + role-expiration-notifier-lock-at-least-for: "PT5M" + role-expiration-notifier-lock-at-most-for: "PT28M" metadata-resolver-initial-delay-milliseconds: 1 metadata-resolver-fixed-rate-milliseconds: 86_400_000 metadata-resolver-url: "https://metadata.{{ base_domain }}/idps-metadata.xml"