lucadruda475/increpo

•Updated 9 months ago

Image

lucadruda475/increpo repository overview

⁠WorkflowGen - Business Process Automation Platform

This image contains a WorkflowGen Server using IIS and WorkflowGen's Windows Services. Use this image to run WorkflowGen's web application, Windows services, or both.

⁠⚠️ Platform & Database Support

WorkflowGen application: Windows containers only (all versions)

Database options for production:

WorkflowGen Version	Production Database	Container Type
v10	PostgreSQL 17	Windows or Linux
v9.3.1+	SQL Server 2022	Linux only
v9.3.0 and earlier	SQL Server 2019	Linux only
v8	SQL Server 2019	Linux only

Development/Testing database options:

WorkflowGen Version	Dev/Test Database	Notes
All versions	SQL Server Express 2017 (Windows)	10GB limit, not for production
v10 only	SQL Server 2025 (Linux preview)	Preview software, not for production
v10 only	SQL Server 2025 (Windows preview)	Preview software, Evaluation Edition (180-day trial)

⁠🚨 IMPORTANT - Production Deployments

Production-ready combinations:

✅ v10: WorkflowGen Windows + PostgreSQL⁠ (Windows or Linux)

✅ v9.3.1+: WorkflowGen Windows + SQL Server 2022 Linux⁠

✅ v9.3.0 and earlier: WorkflowGen Windows + SQL Server 2019 Linux⁠

✅ v8: WorkflowGen Windows + SQL Server 2019 Linux⁠

Hybrid deployments (WorkflowGen Windows container + Database Linux container) are fully supported for production.

See advantys/workflowgen-sql⁠ and advantys/workflowgen-postgres⁠ for database details.

⁠Available Tags

Latest Dockerfiles:

Example tags:

10.0.5-win-ltsc2019 - WorkflowGen v10.0.5
9.3.3-win-ltsc2019 - WorkflowGen v9.3.3
8.3.5-win-ltsc2019 - WorkflowGen v8.3.5
latest - Latest version
-onbuild suffix - Customizable variant

⁠Requirements

Windows Server 2019 LTSC or Windows 10 Pro (with Hyper-V)
- Install Docker for Windows⁠ and switch to Windows Containers
Use exact Windows Server version matching the image tag
- Example: Windows Server 2019 (1809) with 10.0.5-win-ltsc2019
A WorkflowGen license to copy into the C:\\wfgen\\licenses volume
A serial number to set via WFGEN_APP_SETTING_ApplicationSerialNumber
A database: v10 uses PostgreSQL (recommended) or SQL Server 2025 (preview); v9/v8 use SQL Server

⁠Run the Container

Before running, ensure the database is initialized with provided SQL scripts.

docker run -it --env-file .\\workflowgen.env -v C:\\path\\to\\licenses:C:\\wfgen\\licenses --name wfgen advantys/workflowgen:{version}-win-ltsc2019

Replace {version} with your version (e.g., 10.0.5, 9.3.3).

⁠Quick Setup with Docker Compose

⁠v10 with PostgreSQL (Production-Ready) ✅

Prerequisites:

# Create volumes
docker volume create licenses
docker volume create wfgdata
docker volume create pgdata

# Copy license
$licensesPath = docker volume inspect --format \"{{.Mountpoint}}\" licenses
Copy-Item ~\\Desktop\\license.lic $licensesPath

# Generate symmetric encryption key (32 characters)
[guid]::NewGuid().ToString(\"N\")
# Example: ca8e4e2b04254aeeadbcfc0724e3b62a

docker-compose.yml:

services:
  workflowgen:
    image: advantys/workflowgen:10.0.5-win-ltsc2019
    depends_on:
      - database
    environment:
      - WFGEN_DATABASE_CONNECTION_STRING=Host=database;Port=5432;Database=wfgen;Username=wfgen_user;Password=yourStrong(!)Password;
      - WFGEN_DATABASE_CONNECTION_STRING_PROVIDER_NAME=Npgsql
      - WFGEN_APP_SETTING_ApplicationUrl=http://localhost:8888/wfgen
      - WFGEN_APP_SETTING_ApplicationSerialNumber=YOUR_WORKFLOWGEN_SERIAL_NUMBER
      - WFGEN_APP_SETTING_ApplicationSecurityPasswordSymmetricEncryptionKey=ca8e4e2b04254aeeadbcfc0724e3b62a
    ports:
      - 8888:80
    volumes:
      - licenses:C:\\wfgen\\licenses:RO
      - wfgdata:C:\\wfgen\\data
  database:
    image: advantys/workflowgen-postgres:10.0.5-postgres-win-ltsc2019
    container_name: database
    environment:
      - PGDATA=C:\\pgsql\\data
      - POSTGRES_INITDB_ARGS=--username=postgres
      - POSTGRES_PASSWORD=yourStrong(!)Password
      - WFGEN_DATABASE_USER_PASSWORD=yourStrong(!)Password
      - WFGEN_ADMIN_PASSWORD=yourStrong(!)Password
    volumes:
      - pgdata:C:\\pgsql\\data
    ports:
      - 5432:5432

volumes:
  licenses:
    external: true
  wfgdata:
  pgdata:

Run:

docker compose up -d

Access: http://localhost:8888/wfgen⁠ (username: wfgen_admin, password: yourStrong(!)Password)

⁠v9 with SQL Server (Development/Testing) ⚠️

Prerequisites:

# Create volumes
docker volume create licenses
docker volume create wfgdata
docker volume create sqldata

# Copy license
$licensesPath = docker volume inspect --format \"{{.Mountpoint}}\" licenses
Copy-Item ~\\Desktop\\license.lic $licensesPath

# Generate symmetric encryption key
[guid]::NewGuid().ToString(\"N\")
# Example: ca8e4e2b04254aeeadbcfc0724e3b62a

docker-compose.yml:

services:
  workflowgen:
    image: advantys/workflowgen:9.3.3-win-ltsc2019
    depends_on:
      - database
    environment:
      - WFGEN_DATABASE_CONNECTION_STRING=Data Source=database;Network Library=DBMSSOCN;Initial Catalog=WFGEN;User ID=WFGEN_USER;Password=yourStrong(!)Password;TrustServerCertificate=True;
      - WFGEN_APP_SETTING_ApplicationUrl=http://localhost:8888/wfgen
      - WFGEN_APP_SETTING_ApplicationSerialNumber=YOUR_WORKFLOWGEN_SERIAL_NUMBER
      - WFGEN_APP_SETTING_ApplicationSecurityPasswordSymmetricEncryptionKey=ca8e4e2b04254aeeadbcfc0724e3b62a
    ports:
      - 8888:80
    volumes:
      - licenses:C:\\wfgen\\licenses:RO
      - wfgdata:C:\\wfgen\\data
  database:
    image: advantys/workflowgen-sql:9.3.3-express-win-ltsc2019
    container_name: database
    environment:
      - SA_PASSWORD=yourStrong(!)Password
      - WFGEN_DATABASE_USER_PASSWORD=yourStrong(!)Password
      - WFGEN_ADMIN_PASSWORD=yourStrong(!)Password
    volumes:
      - sqldata:C:\\wfgen\\sql
    ports:
      - 1433:1433

volumes:
  licenses:
    external: true
  wfgdata:
  sqldata:

Run:

docker compose up -d

Access: http://localhost:8888/wfgen⁠ (username: wfgen_admin, password: yourStrong(!)Password)

⁠v10 with PostgreSQL on Linux (Database Only - Production-Ready) ✅

docker-compose.yml:

services:
  database:
    image: advantys/workflowgen-postgres:10.0.5-postgres-debian-bookworm
    container_name: database
    environment:
      - PGDATA=/var/lib/postgresql/data
      - POSTGRES_INITDB_ARGS=--username=postgres
      - POSTGRES_PASSWORD=yourStrong(!)Password
      - WFGEN_DATABASE_USER_PASSWORD=yourStrong(!)Password
      - WFGEN_ADMIN_PASSWORD=yourStrong(!)Password
    volumes:
      - pgdata:/var/lib/postgresql/data
    ports:
      - 5432:5432

volumes:
  pgdata:

Connection string for WorkflowGen:

WFGEN_DATABASE_CONNECTION_STRING=Host=database;Port=5432;Database=wfgen;Username=wfgen_user;Password=yourStrong(!)Password;
WFGEN_DATABASE_CONNECTION_STRING_PROVIDER_NAME=Npgsql

⁠v10 with SQL Server 2025 on Linux (Database Only - Development/Testing) ⚠️

⚠️ NOT FOR PRODUCTION - SQL Server 2025 is in preview. Use PostgreSQL for production.

docker-compose.yml:

services:
  database:
    image: advantys/workflowgen-sql:10.0.5-ubuntu-24.04
    container_name: database
    environment:
      - ACCEPT_EULA=Y
      - SA_PASSWORD=yourStrong(!)Password
      - WFGEN_DATABASE_USER_PASSWORD=yourStrong(!)Password
      - WFGEN_ADMIN_PASSWORD=yourStrong(!)Password
      - MSSQL_PID=Developer  # FREE for dev/test (default if not specified)
    volumes:
      - sqldata:/var/opt/mssql
    ports:
      - 1433:1433

volumes:
  sqldata:

Connection string for WorkflowGen:

WFGEN_DATABASE_CONNECTION_STRING=Data Source=database;Initial Catalog=WFGEN;User ID=WFGEN_USER;Password=yourStrong(!)Password;TrustServerCertificate=True

⁠Configuration

⁠Database Connection Strings

⁠v10: PostgreSQL (Recommended for Production)

WFGEN_DATABASE_CONNECTION_STRING=Host=database;Port=5432;Database=wfgen;Username=wfgen_user;Password=<password>;
WFGEN_DATABASE_CONNECTION_STRING_PROVIDER_NAME=Npgsql

⁠v10: SQL Server 2025 (Development/Testing Only)

WFGEN_DATABASE_CONNECTION_STRING=Data Source=database;Initial Catalog=WFGEN;User ID=WFGEN_USER;Password=<password>;TrustServerCertificate=True

Note:

TrustServerCertificate=True is required for SQL Server 2025 (both Linux and Windows) due to enforced SSL encryption with self-signed certificates

SQL Server provider is System.Data.SqlClient (default, no need to specify)

⁠v9, v8: SQL Server

WFGEN_DATABASE_CONNECTION_STRING=Data Source=database;Network Library=DBMSSOCN;Initial Catalog=WFGEN;User ID=WFGEN_USER;Password=<password>;TrustServerCertificate=True;

Note:

Network Library=DBMSSOCN forces TCP/IP protocol (required for containers)

TrustServerCertificate=True is recommended for forward compatibility (optional for SQL Server 2017/2019/2022, required for 2025)

For production: Use Linux SQL Server containers (v9.3.1+: SQL Server 2022, v8/v9.3.0 and earlier: SQL Server 2019)

For dev/test: Use Windows SQL Server Express 2017 containers

⁠web.config File

Configure settings via environment variables: WFGEN_APP_SETTING_<name>

Example:

WFGEN_APP_SETTING_ApplicationUrl=https://example.com/wfgen

⁠iisnode Configuration for Node Applications

Configure IISNode: WFGEN_IISNODE_<app name>_<setting name>

Example:

WFGEN_IISNODE_AUTH_loggingEnabled=true

⁠iisnode Special Options

WFGEN_ENABLE_IISNODE_OPTION_<app name> - exposelogs value exposes logs via HTTP (debugging only)

⁠Custom Connection Strings

Add custom connection strings: WFGEN_CUSTOM_CONNECTION_STRING_<name>=<connection_string>

This adds the connection string with default provider System.Data.SqlClient.

Specify custom provider:

WFGEN_CUSTOM_CONNECTION_STRING_<name>_PROVIDER_NAME=<provider_name>

Example (PostgreSQL):

WFGEN_CUSTOM_CONNECTION_STRING_MyCustomDB=Host=myserver;Port=5432;Database=mydb;Username=user;Password=pass;
WFGEN_CUSTOM_CONNECTION_STRING_MyCustomDB_PROVIDER_NAME=Npgsql

⁠Secrets Management

For Docker Secrets and Kubernetes Secrets, any environment variable can be suffixed with _FILE. Its value is a path to a file containing the real value.

Note: Variables with and without _FILE suffix are mutually exclusive.

Docker Swarm example:

# Create secrets
docker secret create ApplicationSecurityPasswordSymmetricEncryptionKey \"84c953d4eac14da2ba93c010e85c76e0\"
docker secret create WFGEN_DATABASE_CONNECTION_STRING \"Host=database;Port=5432;Database=wfgen;Username=wfgen_user;Password=secretPassword;\"
docker secret create ApplicationSerialNumber \"YOUR_SERIAL_NUMBER\"

# Create WorkflowGen service (v10 with PostgreSQL)
docker service create `
    --env WFGEN_APP_SETTING_ApplicationSecurityPasswordSymmetricEncryptionKey_FILE=C:\\ProgramData\\Docker\\secrets\\ApplicationSecurityPasswordSymmetricEncryptionKey `
    --env WFGEN_DATABASE_CONNECTION_STRING_FILE=C:\\ProgramData\\Docker\\secrets\\WFGEN_DATABASE_CONNECTION_STRING `
    --env WFGEN_DATABASE_CONNECTION_STRING_PROVIDER_NAME=Npgsql `
    --env WFGEN_APP_SETTING_ApplicationSerialNumber_FILE=C:\\ProgramData\\Docker\\secrets\\ApplicationSerialNumber `
    --secret ApplicationSecurityPasswordSymmetricEncryptionKey `
    --secret WFGEN_DATABASE_CONNECTION_STRING `
    --secret ApplicationSerialNumber `
    --mount \"type=volume,src=licenses,dst=C:\\wfgen\\licenses,readonly\" `
    advantys/workflowgen:10.0.5-win-ltsc2019

⁠Special Environment Variables

Name	Description
`WFGEN_ADMIN_USERNAME`	The username for the WorkflowGen administrator account. Useful when configuring with an OpenID provider. Set to a username that exists on the provider to authenticate with administrative access. Note: If you change this, update the database as well. Default: `wfgen_admin`
`WFGEN_DATABASE_CONNECTION_STRING`	Required. The connection string of the main database source. Container will exit with error if not present.
`WFGEN_DATABASE_CONNECTION_STRING_PROVIDER_NAME`	Required for PostgreSQL (v10). Database provider name. Set to `Npgsql` for PostgreSQL or `System.Data.SqlClient` for SQL Server. Default: `System.Data.SqlClient`
`WFGEN_DATABASE_READONLY_CONNECTION_STRING`	The connection string of the readonly database source for database setups with replicas.
`WFGEN_AUTH_MODE`	Authentication method to be used by WorkflowGen. Possible Values: `application`, `basic`, `windows`, `adfs`, `azure-v1`, `auth0`, `okta`. Default: `application`
`WFGEN_GEN_APP_SYM_ENCRYPT_KEY`	Indicates whether `ApplicationSecurityPasswordSymmetricEncryptionKey` should be auto-generated. If `Y`, key is re-generated on restart (not production-compatible). Use `Y` only for dev/testing. Possible Values: `Y`, `N`. Default: `Y`
`WFGEN_LICENSE_FILE_NAME`	License file name (including extension) in `C:\\wfgen\\licenses` volume. If not specified, first file found is used.
`WFGEN_START_SERVICE`	What the container should run. For clusters, run multiple containers in different modes. Possible Values: `win_services`, `web_apps`, `engine`, `dir_sync`, `all`. Default: `all`
`WFGEN_MACHINE_KEY_VALIDATION_KEY`	`validationKey` property of `machineKey` element in web.config. Recommended to share machine key between instances (e.g., web farm). See Microsoft docs⁠.
`WFGEN_MACHINE_KEY_DECRYPTION_KEY`	`decryptionKey` property of `machineKey` element in web.config. Recommended for web farms. See Microsoft docs⁠.
`WFGEN_MACHINE_KEY_VALIDATION_ALG`	Validation algorithm for machine key. Default: `HMACSHA256`
`WFGEN_MACHINE_KEY_DECRYPTION_ALG`	Decryption algorithm for machine key. Default: `AES`
`WFGEN_DEPENDENCY_CHECK_INTERVAL`	Time between dependency check retries in milliseconds. Default: `1000`
`WFGEN_DEPENDENCY_CHECK_RETRIES`	Number of retries for each dependency check. Default: `10`
`WFGEN_DEPENDENCY_CHECK_ENABLED`	Enable/disable dependency checks. Default: `Y`

⁠Example Configuration Using Environment File

When you have multiple environment variables, use --env-file with docker run.

Example with Azure AD authentication (v10 with PostgreSQL):

WFGEN_AUTH_MODE=azure-v1
WFGEN_APP_SETTING_ApplicationUrl=https://example.com/wfgen
WFGEN_APP_SETTING_ApplicationSecurityAuthProvider=azure-v1
WFGEN_APP_SETTING_ApplicationSecurityAuthMetadataUrl=https://login.microsoftonline.com/<Directory ID>/.well-known/openid-configuration
WFGEN_APP_SETTING_ApplicationSecurityAuthClientId=SomeClientId
WFGEN_APP_SETTING_ApplicationSecurityAuthClientSecret=SomeClientSecret
WFGEN_APP_SETTING_ApplicationSecurityAuthUsernameClaim=upn
WFGEN_APP_SETTING_ApplicationSecurityAuthAppIdClaim=appid
WFGEN_APP_SETTING_ApplicationSecurityAuthSessionTokenSigningSecret=SomethingVerySecret
WFGEN_APP_SETTING_ApplicationSecurityPasswordSymmetricEncryptionKey=84c953d4eac14da2ba93c010e85c76e0
WFGEN_DATABASE_CONNECTION_STRING=Host=database;Port=5432;Database=wfgen;Username=wfgen_user;Password=secretPassword;
WFGEN_DATABASE_CONNECTION_STRING_PROVIDER_NAME=Npgsql

For v9, v8 with SQL Server:

WFGEN_AUTH_MODE=azure-v1
WFGEN_APP_SETTING_ApplicationUrl=https://example.com/wfgen
WFGEN_APP_SETTING_ApplicationSecurityAuthProvider=azure-v1
WFGEN_APP_SETTING_ApplicationSecurityAuthMetadataUrl=https://login.microsoftonline.com/<Directory ID>/.well-known/openid-configuration
WFGEN_APP_SETTING_ApplicationSecurityAuthClientId=SomeClientId
WFGEN_APP_SETTING_ApplicationSecurityAuthClientSecret=SomeClientSecret
WFGEN_APP_SETTING_ApplicationSecurityAuthUsernameClaim=upn
WFGEN_APP_SETTING_ApplicationSecurityAuthAppIdClaim=appid
WFGEN_APP_SETTING_ApplicationSecurityAuthSessionTokenSigningSecret=SomethingVerySecret
WFGEN_APP_SETTING_ApplicationSecurityPasswordSymmetricEncryptionKey=84c953d4eac14da2ba93c010e85c76e0
WFGEN_DATABASE_CONNECTION_STRING=Data Source=database;Network Library=DBMSSOCN;Initial Catalog=WFGEN;User ID=WFGEN_USER;Password=secretPassword;

⁠Authentication Methods

⁠OpenID Connect Providers

Supports Azure Active Directory, Auth0, ADFS, and Okta. See WorkflowGen docs⁠ for provider configuration.

For Docker deployments:

Set authentication method: WFGEN_AUTH_MODE (e.g., azure-v1, auth0, okta)
Set provider: WFGEN_APP_SETTING_ApplicationSecurityAuthProvider
Pass provider information via corresponding WFGEN_APP_SETTING_* environment variables

⁠Application Authentication

No special setup required. WFGEN_AUTH_MODE=application (default).

⁠Windows Integrated / Basic

Set WFGEN_AUTH_MODE=windows or basic. Requires Active Directory environment (container host must be domain joined).

⁠Volumes

Container Path	Description
`C:\\wfgen\\data`	All WorkflowGen data including App_Data and workflow applications
`C:\\wfgen\\licenses`	License files. Container uses first file found.

Example:

docker run ... -v C:\\Path\\To\\Licenses:C:\\wfgen\\licenses ... advantys/workflowgen:10.0.5-win-ltsc2019

Note: Map all volumes to persist data. Unmapped volumes lose data when container is removed.

⁠Site Offline/Online

# Set offline
docker container exec -i wfgen powershell C:\\set-state.ps1 Offline

# Set online
docker container exec -i wfgen powershell C:\\set-state.ps1 Online

Customize offline page:

Add your HTML file at <wfgen appdata>\\Templates\\server\\offline.htm:

$offlinePath = \".\\offline.htm\"
$serverTemplatePath = [io.path]::Combine(
    $(docker volume inspect --format \"{{ .Mountpoint }}\" appdata),
    \"Template\", \"server\"
)
if (-not (Test-Path $serverTemplatePath)) {
    New-Item $serverTemplatePath -ItemType Directory -Force
}
Copy-Item $offlinePath $serverTemplatePath

⁠Default Container State

When no environment variables are supplied:

ApplicationUrl defaults to localhost/wfgen
Authentication method is applicative (handled by WorkflowGen)
No SSL certificate (HTTP by default)
Password symmetric encryption key is generated randomly
- For production: use a fixed 32-character key via WFGEN_APP_SETTING_ApplicationSecurityPasswordSymmetricEncryptionKey

⁠Customize Files and Libraries

Use the onbuild variant to customize files in C:\\inetpub\\wwwroot or C:\\Program Files\\Advantys\\WorkflowGen.

Example: Customize web.config, banner, and add custom library

File structure:

context-dir\\
    inetpub\\
        wwwroot\\
            wfgen\\
                web.config
                bin\\MyCustomLib.dll
                App_Themes\\Default\\portal\\banner\\banner.htm
    Program Files\\
        Advantys\\WorkflowGen\\Services\\Bin\\MyCustomLib.dll

Dockerfile:

#escape=`
FROM advantys/workflowgen:10.0.5-win-ltsc2019-onbuild

Build:

docker build -t mycorporation/workflowgen:10.0.5-win-ltsc2019 .

⁠Updates

Update by changing the version in your Dockerfile and rebuilding:

- FROM advantys/workflowgen:10.0.4-win-ltsc2019-onbuild
+ FROM advantys/workflowgen:10.0.5-win-ltsc2019-onbuild

docker build -t mycorporation/workflowgen:10.0.4-win-ltsc2019 .

⁠Support and Documentation

WorkflowGen Docker Guide: https://docs.workflowgen.com/docker⁠
WorkflowGen Documentation: https://docs.workflowgen.com⁠
Database Images:
- PostgreSQL (v10 production): advantys/workflowgen-postgres⁠
- SQL Server (v8, v9, v10): advantys/workflowgen-sql⁠

⁠License

By using this image, you agree to the WorkflowGen End User License Agreement. Visit workflowgen.com⁠ for details.

Tag summary

Recent tags

Content type

Image

Digest

sha256:00abdbfd0…

Size

3 kB

Last updated

9 months ago

docker pull lucadruda475/increpo:test3