refactor(server): migrate from bytemark/webdav to hacdias/webdav

- Replace unmaintained bytemark/webdav (Apache-based) with actively
  maintained ghcr.io/hacdias/webdav (lightweight Go binary)
- Credentials now in config.yml (gitignored) instead of .env
- Add config.yml.example as setup template
- Fix WEBDAV_PORT env var not being used (incorporates fix from #67)
- Set debug: false and clean CORS config for production use
- Update READMEs (DE + EN) with new setup instructions
- Keep notes-data/ volume path for backward compatibility
- Was production tested on long-term by me

Supersedes #67

Author: inventory69

server/.env.example

@@ -1,6 +1,2 @@
-# WebDAV Credentials
-WEBDAV_USERNAME=noteuser
-WEBDAV_PASSWORD=your_secure_password_here
-
-# Optional: Custom port
+# Optional: Custom port (default: 8080)
 # WEBDAV_PORT=8080

server/.gitignore

@@ -1,6 +1,9 @@
 # Environment
 .env
 
+# Config (contains credentials — copy from config.yml.example)
+config.yml
+
 # Data
 notes-data/
 logs/

server/README.en.md

@@ -2,14 +2,16 @@
 
 **🌍 Languages:** [Deutsch](README.md) · **English**
 
+> Based on [hacdias/webdav](https://github.com/hacdias/webdav) — a lightweight, actively maintained WebDAV server.
+
 ---
 
 ## Quick Start
 
 ```bash
-# 1. Adjust environment variables
-cp .env.example .env
-nano .env
+# 1. Create config and set credentials
+cp config.yml.example config.yml
+nano config.yml
 
 # 2. Start server
 docker-compose up -d
@@ -34,9 +36,20 @@ ip addr show | grep "inet " | grep -v 127.0.0.1
 
 ## Credentials
 
-Default (see `.env`):
-- Username: `noteuser`
-- Password: See `.env` file
+Credentials are set in `config.yml` (not committed to git):
+```yaml
+users:
+  - username: noteuser
+    password: your_secure_password
+```
+
+## Custom Port (optional)
+
+Default port is `8080`. To change it:
+```bash
+cp .env.example .env
+# Set WEBDAV_PORT in .env
+```
 
 ## Management
 
@@ -53,19 +66,18 @@ docker-compose restart
 # Stop
 docker-compose down
 
-# Update
-docker-compose pull
-docker-compose up -d
+# Update image
+docker-compose pull && docker-compose up -d
 ```
 
 ## Data Location
 
-Your notes are stored in: `./data/`
+Your notes are stored in: `./notes-data/`
 
 **Backup:**
 ```bash
 # Create backup
-tar -czf notes-backup-$(date +%Y%m%d).tar.gz data/
+tar -czf notes-backup-$(date +%Y%m%d).tar.gz notes-data/
 
 # Restore backup
 tar -xzf notes-backup-YYYYMMDD.tar.gz

server/README.md

@@ -2,14 +2,16 @@
 
 **🌍 Sprachen:** **Deutsch** · [English](README.en.md)
 
+> Basiert auf [hacdias/webdav](https://github.com/hacdias/webdav) — leichtgewichtiger, aktiv gewarteter WebDAV-Server.
+
 ---
 
 ## Quick Start
 
 ```bash
-# 1. Umgebungsvariablen anpassen
-cp .env.example .env
-nano .env
+# 1. Konfiguration anlegen und Zugangsdaten setzen
+cp config.yml.example config.yml
+nano config.yml
 
 # 2. Server starten
 docker-compose up -d
@@ -34,9 +36,20 @@ ip addr show | grep "inet " | grep -v 127.0.0.1
 
 ## Credentials
 
-Standard (siehe `.env`):
-- Username: `noteuser`
-- Password: Siehe `.env` Datei
+Zugangsdaten werden in `config.yml` gesetzt (wird nicht ins Git eingecheckt):
+```yaml
+users:
+  - username: noteuser
+    password: dein_sicheres_passwort
+```
+
+## Port anpassen (optional)
+
+Standardmäßig läuft der Server auf Port `8080`. Zum Ändern:
+```bash
+cp .env.example .env
+# WEBDAV_PORT in .env setzen
+```
 
 ## Management
 
@@ -53,6 +66,9 @@ docker-compose restart
 # Stoppen
 docker-compose down
 
+# Image aktualisieren
+docker-compose pull && docker-compose up -d
+
 # Komplett löschen (inkl. Daten)
 docker-compose down -v
 ```

server/config.yml.example

@@ -0,0 +1,49 @@
+address: 0.0.0.0
+port: 8080
+
+# Directory for WebDAV storage (mapped via docker-compose volume)
+directory: /data
+
+# Default permissions (R=Read, C=Create, U=Update, D=Delete)
+permissions: CRUD
+
+debug: false
+
+log:
+  format: console
+  colors: false
+  outputs:
+    - stderr
+
+# CORS configuration — only needed if accessing via a web browser/app
+# cors:
+#   enabled: true
+#   credentials: true
+#   allowed_headers:
+#     - Depth
+#     - Content-Type
+#     - Authorization
+#   allowed_hosts:
+#     - http://localhost:8080
+#   allowed_methods:
+#     - GET
+#     - HEAD
+#     - POST
+#     - PUT
+#     - DELETE
+#     - OPTIONS
+#     - PROPFIND
+#     - PROPPATCH
+#     - MKCOL
+#     - COPY
+#     - MOVE
+
+# Users — change username and password before starting!
+users:
+  - username: noteuser
+    password: your_secure_password_here
+    permissions: CRUD
+  # Add more users if needed:
+  # - username: user2
+  #   password: another_secure_password
+  #   permissions: CRUD

server/docker-compose.yml

@@ -2,21 +2,12 @@ version: '3.8'
 
 services:
   webdav:
-    image: bytemark/webdav
+    image: ghcr.io/hacdias/webdav:latest
     container_name: simple-notes-webdav
     restart: unless-stopped
     ports:
-      - "8080:80"
-    environment:
-      AUTH_TYPE: Basic
-      USERNAME: ${WEBDAV_USERNAME}
-      PASSWORD: ${WEBDAV_PASSWORD}
+      - "${WEBDAV_PORT:-8080}:8080"
     volumes:
-      - ./notes-data:/var/lib/dav/data
-      - ./logs:/var/log/apache2
-    networks:
-      - notes-network
-
-networks:
-  notes-network:
-    driver: bridge
+      - ./config.yml:/config.yml:ro
+      - ./notes-data:/data
+    command: -c /config.yml