feat(memos): release memos

deployment notes:
- compare to Affine, maybe outline + memos can be substituted for affine

docs/services/app/memos.md

@@ -0,0 +1,74 @@
+# Memos
+
+## Prerequisite
+
+### Create database
+
+- Create the password with `openssl rand -base64 32`
+  - Save this value in secrets.yaml in `postgresql.password.memos`
+  - Access infra server to create memos_db with `podman exec -it postgresql psql -U postgres`
+
+```SQL
+CREATE USER memos WITH PASSWORD 'postgresql.password.memos';
+CREATE DATABASE memos_db;
+ALTER DATABASE memos_db OWNER TO memos;
+```
+
+### Create oidc secret and hash
+
+- Create the secret with `openssl rand -base64 32`
+- access to auth vm
+  - `podman exec -it authelia sh`
+  - `authelia crypto hash generate pbkdf2 --password 'memos.oidc.secret'`
+- Save this value in secrets.yaml in `memos.oidc.secret` and `memos.oidc.hash`
+
+### Add postgresql dump backup list
+
+- [set_postgresql.yaml](../../../ansible/roles/infra/tasks/services/set_postgresql.yaml)
+
+```yaml
+- name: Set connected services list
+  ansible.builtin.set_fact:
+    connected_services:
+      - ...
+      - "memos"
+```
+
+## Configuration
+
+### Access to memos
+
+- https://memos.ilnmors.com
+  - Create local-admin account
+
+### Set OIDC
+
+- Profile: Settings: Admin: SSO: Create
+  - Type: OAUTH2
+  - Template: Custom
+  - Provider ID: authelia
+  - Name: Authelia
+  - Client ID: memos
+  - Client secret: memos.oidc.secret
+  - Authorization endpoint: https://authelia.ilnmors.com/api/oidc/authorization
+  - Token endpoint: https://authelia.ilnmors.com/api/oidc/token
+  - User endpoint: https://authelia.ilnmors.com/api/oidc/userinfo
+  - Scopes: openid profile email
+  - Identifier: preferred_username
+  - Display Name: given_name
+  - Email: email
+- Create
+
+- Profile: Settings: Basic: My Account: SSO Accounts: Link
+  - Login with Authelia
+  - Accept
+
+### Disallow local login and signup
+
+- Profile: Settings: Admin: System
+  - Disallow password auth: toggle
+- Save
+
+### Change user name
+
+- Profile: Settings: Basic: My Account: Edit

docs/specifications/environments.md

@@ -128,7 +128,8 @@
             - budget and finance
         - [x] outline
             - Compare to affine, the whiteboard and canvas functions are not useful enough
-        - [ ] memos
+        - [x] memos
+            - Check outline and memos can be substituded for affine
         - WriteFreely or directus + frontend(Astro)
         - MediaCMS or PeerTube
         - Funkwhale or Navidrome or Jellyfin