From cecbe8816c335f1a949ab2a3c95bff1c8b24b6a3 Mon Sep 17 00:00:00 2001
From: Heiko Pohl <h.pohl@opencloud.eu>
Date: Fri, 18 Jul 2025 15:10:38 +0200
Subject: [PATCH] rework admin welcome docs

---
 docs/admin/welcome/datasheet.md |  84 ++++++-------
 docs/admin/welcome/features.md  | 202 ++++++++++++++------------------
 docs/admin/welcome/index.md     |   8 +-
 3 files changed, 132 insertions(+), 162 deletions(-)

diff --git a/docs/admin/welcome/datasheet.md b/docs/admin/welcome/datasheet.md
index 2e6cbac4..ec4542b9 100644
--- a/docs/admin/welcome/datasheet.md
+++ b/docs/admin/welcome/datasheet.md
@@ -2,69 +2,71 @@
 sidebar_position: 2
 id: datasheet
 title: Datasheet
+description: Datasheet
+draft: false
 ---
 
 ## Deployment Options
 
-| Category                                  | Details                                                                                                                                                                                                                                                                                                                                |
-| :---------------------------------------- | :------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| **Types**                                 | <ul><li>On-Premises</li><li>Managed Service: Available through partners</li><li>SaaS: Available through partners</li></ul>                                                                                                                                                                                                             |
-| **Container (recommended)**               | <ul><li>Docker Compose or Podman</li><li>Kubernetes Helm Charts (Q2 / 2025)</li></ul>                                                                                                                                                                                                                                                  |
-| **Bare-Metal (not officially supported)** | <ul><li>OpenCloud can run as a single binary. However, integrating additional services like Collabora, Apache Tika for search, or antivirus is not documented. Bare-metal deployments are not officially supported by OpenCloud. They are great for quick evaluation but are undocumented and have a minimalist feature set.</li></ul> |
+| Category                              | Details                                                                                                                                                                                                                                                                                                                                |
+| :------------------------------------ | :------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| Types                                 | <ul><li>On-Premises</li><li>Managed Service: Available through partners</li><li>SaaS: Available through partners</li></ul>                                                                                                                                                                                                             |
+| Container (recommended)               | <ul><li>Docker Compose or Podman</li><li>Kubernetes Helm Charts (Q2 / 2025)</li></ul>                                                                                                                                                                                                                                                  |
+| Bare-Metal (not officially supported) | <ul><li>OpenCloud can run as a single binary. However, integrating additional services like Collabora, Apache Tika for search, or antivirus is not documented. Bare-metal deployments are not officially supported by OpenCloud. They are great for quick evaluation but are undocumented and have a minimalist feature set.</li></ul> |
 
 ## Backup
 
-| Category            | Details                                                                                                                                          |
-| :------------------ | :----------------------------------------------------------------------------------------------------------------------------------------------- |
-| **Backup strategy** | <ul><li>**Snapshots:** Backups can be easily done solely through storage snapshots, eliminating the need for complex database backups.</li></ul> |
+| Category        | Details                                                                                                                                      |
+| :-------------- | :------------------------------------------------------------------------------------------------------------------------------------------- |
+| Backup strategy | <ul><li>Snapshots: Backups can be easily done solely through storage snapshots, eliminating the need for complex database backups.</li></ul> |
 
 ## Security
 
-| Category                 | Details                                                                                                                                                              |
-| :----------------------- | :------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| **Encryption**           | <ul><li>Transport Encryption: TLS</li><li>Server-Side Encryption: S3 SSE</li><li>E2EE Client-Side Encryption: Handled exclusively via OS-native encryption</li></ul> |
-| **Access management**    | <ul><li>RBAC (Role-Based Access Control)</li><li>2FA / MFA</li><li>SSO (LDAP, SAML, OAuth)</li></ul>                                                                 |
-| **Auditing & Logging**   | <ul><li>Detailed logs, audit trails, monitoring APIs</li></ul>                                                                                                       |
-| **File Firewall**        | <ul><li>Prevent upload of restricted filetypes based on a allow- or denylist.</li></ul>                                                                              |
-| **Antivirus**            | <ul><li>ClamAV (default)</li><li>ICAP: Integrate 3rd party anti-virus scanner via Internet Content Adaptation Protocol (ICAP)</li></ul>                              |
-| **Data Loss Prevention** | <ul><li>Collabora Secure View</li></ul>                                                                                                                              |
+| Category             | Details                                                                                                                                                              |
+| :------------------- | :------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| Encryption           | <ul><li>Transport Encryption: TLS</li><li>Server-Side Encryption: S3 SSE</li><li>E2EE Client-Side Encryption: Handled exclusively via OS-native encryption</li></ul> |
+| Access management    | <ul><li>RBAC (Role-Based Access Control)</li><li>2FA / MFA</li><li>SSO (LDAP, SAML, OAuth)</li></ul>                                                                 |
+| Auditing & Logging   | <ul><li>Detailed logs, audit trails, monitoring APIs</li></ul>                                                                                                       |
+| File Firewall        | <ul><li>Prevent upload of restricted filetypes based on a allow- or denylist.</li></ul>                                                                              |
+| Antivirus            | <ul><li>ClamAV (default)</li><li>ICAP: Integrate 3rd party anti-virus scanner via Internet Content Adaptation Protocol (ICAP)</li></ul>                              |
+| Data Loss Prevention | <ul><li>Collabora Secure View</li></ul>                                                                                                                              |
 
 ## Identity Management
 
-| Category       | Details                                                                                                                                                                                                                      |
-| :------------- | :--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| **Integrated** | <ul><li>Integrated user and group management (LibreIDM) for up to 500 users. Designed for standalone or small-sized deployments that do not rely on third-party identity services, usually for friends and family.</li></ul> |
-| **External**   | <ul><li>OpenID Connect (OIDC): Integration of external identity providers via Keycloak.</li><li>Integration of Azure AD, EntraID, ADFS</li></ul>                                                                             |
+| Category   | Details                                                                                                                                                                                                                      |
+| :--------- | :--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| Integrated | <ul><li>Integrated user and group management (LibreIDM) for up to 500 users. Designed for standalone or small-sized deployments that do not rely on third-party identity services, usually for friends and family.</li></ul> |
+| External   | <ul><li>OpenID Connect (OIDC): Integration of external identity providers via Keycloak.</li><li>Integration of Azure AD, EntraID, ADFS</li></ul>                                                                             |
 
 ## Compliance
 
-| Regulation                                | Details                                                                                                                                                                                                 |
-| :---------------------------------------- | :------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
-| **EU-GDPR**                               | <ul><li>Compliant</li></ul>                                                                                                                                                                             |
-| **WCAG 2.1 / BITV 2.0 Web Accessibility** | <ul><li>Compliant. To prevent accessibility regressions, we treat any accessibility violation as a bug and continuously fix these issues as part of our daily software development lifecycle.</li></ul> |
+| Regulation                            | Details                                                                                                                                                                                                 |
+| :------------------------------------ | :------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
+| EU-GDPR                               | <ul><li>Compliant</li></ul>                                                                                                                                                                             |
+| WCAG 2.1 / BITV 2.0 Web Accessibility | <ul><li>Compliant. To prevent accessibility regressions, we treat any accessibility violation as a bug and continuously fix these issues as part of our daily software development lifecycle.</li></ul> |
 
 ## High Availability
 
-| Category                  | Details                                                                                                                                                                                                          |
-| :------------------------ | :--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| **Redundancy & Failover** | <ul><li>Supported in clustered environments to ensure high availability and system reliability.</li><li>Automatic failover mechanisms help minimize downtime in case of hardware or software failures.</li></ul> |
+| Category              | Details                                                                                                                                                                                                          |
+| :-------------------- | :--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| Redundancy & Failover | <ul><li>Supported in clustered environments to ensure high availability and system reliability.</li><li>Automatic failover mechanisms help minimize downtime in case of hardware or software failures.</li></ul> |
 
 ## Integrations
 
-| Category                    | Details                                                                                                                                                             |
-| :-------------------------- | :------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
-| **Plugins & Extensibility** | <ul><li>Web: Extension system for adding custom functionality.</li><li>Server: Microservices architecture for modular and scalable server-side extensions</li></ul> |
+| Category                | Details                                                                                                                                                             |
+| :---------------------- | :------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
+| Plugins & Extensibility | <ul><li>Web: Extension system for adding custom functionality.</li><li>Server: Microservices architecture for modular and scalable server-side extensions</li></ul> |
 
 ## APIs
 
-| API          | Description                                                                                                                                                                      |
-| :----------- | :------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| **WebDAV**   | <ul><li>Standard file API for remote file transfer over HTTP/HTTPS using TUS for resumable, interruption-tolerant transfers.</li></ul>                                           |
-| **GraphAPI** | <ul><li>Microsoft Graph API for managing cloud storage and collaboration spaces.</li></ul>                                                                                       |
-| **gRPC**     | <ul><li>High-performance RPC framework for microservice communication.</li></ul>                                                                                                 |
-| **OCS**      | <ul><li>API for programmatic file/folder sharing and management.</li></ul>                                                                                                       |
-| **OCM**      | <ul><li>Open Cloud Mesh API for federated file and folder sharing between different file cloud platforms like Cernbox, ownCloud, Nextcloud or Seafile .</li></ul>                |
-| **SSE**      | <ul><li>Server-sent event stream for real-time client notifications.</li></ul>                                                                                                   |
-| **WOPI**     | <ul><li>Microsoft API for integrating Office apps with third-party storage, e.g., Collabora.</li></ul>                                                                           |
-| **KQL**      | <ul><li>Keyword Query Language (KQL) is a search language to perform advanced searches by filtering and querying structured data, metadata, and documents efficiently.</li></ul> |
-| **ICAP**     | <ul><li>Network protocol for offloading content scanning (e.g., antivirus).</li></ul>                                                                                            |
+| API      | Description                                                                                                                                                                      |
+| :------- | :------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| WebDAV   | <ul><li>Standard file API for remote file transfer over HTTP/HTTPS using TUS for resumable, interruption-tolerant transfers.</li></ul>                                           |
+| GraphAPI | <ul><li>Microsoft Graph API for managing cloud storage and collaboration spaces.</li></ul>                                                                                       |
+| gRPC     | <ul><li>High-performance RPC framework for microservice communication.</li></ul>                                                                                                 |
+| OCS      | <ul><li>API for programmatic file/folder sharing and management.</li></ul>                                                                                                       |
+| OCM      | <ul><li>Open Cloud Mesh API for federated file and folder sharing between different file cloud platforms like Cernbox, ownCloud, Nextcloud or Seafile .</li></ul>                |
+| SSE      | <ul><li>Server-sent event stream for real-time client notifications.</li></ul>                                                                                                   |
+| WOPI     | <ul><li>Microsoft API for integrating Office apps with third-party storage, e.g., Collabora.</li></ul>                                                                           |
+| KQL      | <ul><li>Keyword Query Language (KQL) is a search language to perform advanced searches by filtering and querying structured data, metadata, and documents efficiently.</li></ul> |
+| ICAP     | <ul><li>Network protocol for offloading content scanning (e.g., antivirus).</li></ul>                                                                                            |
diff --git a/docs/admin/welcome/features.md b/docs/admin/welcome/features.md
index b0fee220..1bbd70c6 100644
--- a/docs/admin/welcome/features.md
+++ b/docs/admin/welcome/features.md
@@ -2,155 +2,123 @@
 sidebar_position: 1
 id: features
 title: Features
+description: Features
+draft: false
 ---
 
-## **🚀 Key Features at a Glance**
+## Key Features at a Glance
 
-- **Seamless File Synchronization**: Access your files across all devices.
-- **Secure & Flexible File Sharing**: Share files with granular roles, expiration dates, and password protection.
-- **Spaces - Collaborative Team Folders**: Ensure continuity even if team members leave.
-- **Real-Time Collaboration**: Work on documents simultaneously with Collabora Web Office.
-- **Advanced Search & Organization**: Use full-text search, tags, and filters for quick access.
-- **Unlimited Storage & Uploads**: No file size restrictions.
-- **Privacy-First Design**: Zero-Knowledge principle ensures admins can't access user content.
-- **Cross-Client Availability**: Works on Windows, Mac, Linux, Android (soon), iOS (soon), and Web.
+- Seamless File Synchronization: Access your files across all devices.
+- Secure & Flexible File Sharing: Share files with granular roles, expiration dates, and password protection.
+- Spaces - Collaborative Team Folders: Ensure continuity even if team members leave.
+- Real-Time Collaboration: Work on documents simultaneously with Collabora Web Office.
+- Advanced Search & Organization: Use full-text search, tags, and filters for quick access.
+- Unlimited Storage & Uploads: No file size restrictions.
+- Privacy-First Design: Zero-Knowledge principle ensures admins can't access user content.
+- Cross-Client Availability: Works on Windows, Mac, Linux, Android (soon), iOS (soon), and Web.
 
----
-
-## **🔄 Cross-Device Synchronization**
-
-- **Automatic Sync**: Keep files up to date across all devices.
-- **File Manager Integration**: OpenCloud appears as a native drive in your file explorer.
-- **Offline Access**: Work without an internet connection; sync updates when back online.
-
----
-
-## **🔐 Secure File & Link Sharing**
-
-### **File Sharing**
-
-- **Granular Access Roles**: Assign users as Viewers, Editors, or Uploaders.
-- **One-Click Sharing**: Generate share links instantly.
-- **Expiration Dates**: Set automatic revocation of shared access.
-- **Transparency**: Keep track of who made changes to files and when.
-- **Unlimited Sharing**: Share with as many users or groups as needed.
-
-### **Link Sharing**
-
-- **Public Links**: Secure external sharing - no login or account needed.
-- **Enforced Password Protection**: Custom rules for password strength.
-- **Link Expiry**: Auto-disable links after a set period.
-- **Multiple Links per File**: Unique links for different recipients; revoke links individually.
-- **Anonymous File Drop**: Secure uploads without access to other files.
-- **Built-in Password Generator**: Creates strong passwords automatically.
-
----
-
-## **📂 Spaces - Collaborative Team Folders**
-
-- **Project-Based Team Folders**: Designed for teams to store, access, and manage files collectively. Files in Spaces belong to **multiple** users, ensuring continuity even if team members leave.
-- **Self-Service Admin Transfer**: Easily reassign space owners and assign multiple owners for shared responsibility.
-- **Easy Permission Control**: Manage user access based on the roles Viewers, Editors, Managers.
-
----
-
-## **📝 Real-Time Collaboration – Web Office (Collabora)**
+## Cross-Device Synchronization
 
-- **Real-Time Editing**: Multiple users can work on documents at the same time.
-- **No File Transfers**: Edit directly in the browser always on the latest version.
-- **No Software Installation**: Works entirely online, reducing costs and complexity.
+- Automatic Sync: Keep files up to date across all devices.
+- File Manager Integration: OpenCloud appears as a native drive in your file explorer.
+- Offline Access: Work without an internet connection; sync updates when back online.
 
----
+## Secure File & Link Sharing
 
-## **🔎 Smart Search & Organization**
+- File Sharing
+  - Granular Access Roles: Assign users as Viewers, Editors, or Uploaders.
+  - One-Click Sharing: Generate share links instantly.
+  - Expiration Dates: Set automatic revocation of shared access.
+  - Transparency: Keep track of who made changes to files and when.
+  - Unlimited Sharing: Share with as many users or groups as needed.
 
-- **Full-Text Search**: Find files quickly, even in scanned documents.
-- **Live Search**: Instant results as you type.
-- **Image-to-Text Recognition**: Extract text from images and scanned files (OCR - Optical Character Recognition).
-- **Advanced Filters**: Search by document type, tags, date, or storage location.
+- Link Sharing
+  - Public Links: Secure external sharing - no login or account needed.
+  - Enforced Password Protection: Custom rules for password strength.
+  - Link Expiry: Auto-disable links after a set period.
+  - Multiple Links per File: Unique links for different recipients; revoke links individually.
+  - Anonymous File Drop: Secure uploads without access to other files.
+  - Built-in Password Generator: Creates strong passwords automatically.
 
-### **Tags**
+## Spaces - Collaborative Team Folders
 
-- **Flexible Organization**: Categorize files beyond folder structures.
-- **Quick Search**: Find files faster using keywords.
-- **Audit & Compliance**: Ensure traceability of important documents.
+- Project-Based Team Folders: Designed for teams to store, access, and manage files collectively. Files in Spaces belong to multiple users, ensuring continuity even if team members leave.
+- Self-Service Admin Transfer: Easily reassign space owners and assign multiple owners for shared responsibility.
+- Easy Permission Control: Manage user access based on the roles Viewers, Editors, Managers.
 
----
+## Real-Time Collaboration – Web Office (Collabora)
 
-## **📜 File Versioning & Recovery**
+- Real-Time Editing: Multiple users can work on documents at the same time.
+- No File Transfers: Edit directly in the browser always on the latest version.
+- No Software Installation: Works entirely online, reducing costs and complexity.
 
-- **Easy Recovery**: Roll back to previous file versions.
-- **Accidental Change Protection**: Recover files in case of unintended edits.
-- **Deleted File Recovery**: Restore files from the trash bin.
+## Smart Search & Organization
 
----
+- Full-Text Search: Find files quickly, even in scanned documents.
+- Live Search: Instant results as you type.
+- Image-to-Text Recognition: Extract text from images and scanned files (OCR - Optical Character Recognition).
+- Advanced Filters: Search by document type, tags, date, or storage location.
 
-## **⚡ High-Performance, User-Friendly Interface**
+- Tags
+  - Flexible Organization: Categorize files beyond folder structures.
+  - Quick Search: Find files faster using keywords.
+  - Audit & Compliance: Ensure traceability of important documents.
 
-- **Familiar Desktop Features**:
-  - **Right-click** context menus.
-  - **Drag & Drop** support between web and desktop.
-  - **Keyboard Shortcuts**: (Ctrl + C, Ctrl + X, Ctrl + V).
-  - **Multi-Selection**: (Ctrl + Click, Shift + Click).
-- **Instant UI Updates**: No need to refresh when a file is modified.
+## File Versioning & Recovery
 
----
+- Easy Recovery: Roll back to previous file versions.
+- Accidental Change Protection: Recover files in case of unintended edits.
+- Deleted File Recovery: Restore files from the trash bin.
 
-## **🛡️ Security & Compliance**
+## High-Performance, User-Friendly Interface
 
-### **File Firewall**
+- Familiar Desktop Features:
+  - Right-click context menus.
+  - Drag & Drop support between web and desktop.
+  - Keyboard Shortcuts: (Ctrl + C, Ctrl + X, Ctrl + V).
+  - Multi-Selection: (Ctrl + Click, Shift + Click).
+- Instant UI Updates: No need to refresh when a file is modified.
 
-- **Block Malicious Uploads**: Prevent unwanted file types like **.exe or macro files**.
-- **Allowlist & Denylist Support**: Define permitted and blocked file types.
+## Security & Compliance
 
-### **ICAP Antivirus Interface**
+- File Firewall
+  - Block Malicious Uploads: Prevent unwanted file types like .exe or macro files.
+  - Allowlist & Denylist Support: Define permitted and blocked file types.
 
-- **Automated Malware Scanning**: Scan all uploaded files before they reach user devices.
-- **Early Threat Detection**: Prevent infections before they spread.
-- **Compliance Assurance**: Meets security standards for home and enterprise storage.
+- ICAP Antivirus Interface
+  - Automated Malware Scanning: Scan all uploaded files before they reach user devices.
+  - Early Threat Detection: Prevent infections before they spread.
+  - Compliance Assurance: Meets security standards for home and enterprise storage.
 
-### **Zero-Knowledge Principle**
+- Zero-Knowledge Principle
+  - Admin Privacy Controls: Admins manage spaces without accessing file content.
+  - User-Owned Data: Only designated users can access stored files.
 
-- **Admin Privacy Controls**: Admins manage spaces without accessing file content.
-- **User-Owned Data**: Only designated users can access stored files.
+- Access Control
+  - Granular Permission Management: Role-Based Access Control.
 
-### **Access Control**
+- GDPR & Accessibility Compliance
+  - GDPR Compliant: Fully meets EU data protection regulations.
+  - BITV 2.0 / WCAG 2.1 Compliance: Ensures accessible web usage for all users.
 
-- **Granular Permission Management**: Role-Based Access Control.
+## Unlimited File Size
 
-### **GDPR & Accessibility Compliance**
+- No File Size Limits: Upload large files without restrictions.
 
-- **GDPR Compliant**: Fully meets **EU data protection regulations**.
-- **BITV 2.0 / WCAG 2.1 Compliance**: Ensures **accessible** web usage for all users.
+## Web Extension System
 
----
+- Extension System: Add new features and third-party integrations.
+- Custom UI Adjustments: Modify the interface based on specific needs.
+- Simple Installation & Management: Easily install and manage extensions.
 
-## **📦 Unlimited File Size**
+## On-Premise
 
-- **No File Size Limits**: Upload large files without restrictions.
+- On-Premise: Fully self-hosted deployment for maximum control.
 
----
-
-## **🛠️ Web Extension System**
+## Built-in File Preview
 
-- **Extension System**: Add new features and third-party integrations.
-- **Custom UI Adjustments**: Modify the interface based on specific needs.
-- **Simple Installation & Management**: Easily install and manage extensions.
-
----
-
-## **🏗️ On-Premise**
-
-- **On-Premise**: Fully self-hosted deployment for maximum control.
-
----
-
-## **🖼️ Built-in File Preview**
-
-- **Supports Common Formats**: Preview images and browser-compatible videos directly in OpenCloud.
-
----
+- Supports Common Formats: Preview images and browser-compatible videos directly in OpenCloud.
 
-## **🌐 Multi-Platform Availability**
+## Multi-Platform Availability
 
-- **Compatible with**: Windows, Mac, Linux, **Android (soon), iOS (soon),** and Web.
+- Compatible with: Windows, Mac, Linux, Android (soon), iOS (soon), and Web.
diff --git a/docs/admin/welcome/index.md b/docs/admin/welcome/index.md
index f9758378..c2fb46e5 100644
--- a/docs/admin/welcome/index.md
+++ b/docs/admin/welcome/index.md
@@ -5,7 +5,7 @@ slug: /admin/intro
 
 # 🙋🏻‍♀️ Welcome to OpenCloud Admin Docs
 
-Welcome to **OpenCloud**, your self-hosted file sharing platform: Secure, simple and reliable. This documentation helps you to **get started, configure, and maintain** OpenCloud.
+Welcome to OpenCloud, your self-hosted file sharing platform: Secure, simple and reliable. This documentation helps you to get started, configure, and maintain OpenCloud.
 
 ## Quick start
 
@@ -15,9 +15,9 @@ curl -L https://opencloud.eu/install | /bin/bash
 
 ## What’s Inside?
 
-1. **Getting Started** – Set up and deploy OpenCloud
-2. **Configuration** – Customize and integrate with existing systems and storage
-3. **Maintenance** – Learn how to update, backup and migrate
+- Getting Started – Set up and deploy OpenCloud
+- Configuration – Customize and integrate with existing systems and storage
+- Maintenance – Learn how to update, backup and migrate
 
 ## Need Help?