From dbc37c958dedb103cff6a232bd5affa3a26a14df Mon Sep 17 00:00:00 2001
From: Thomas MICHEL <12149036+michel-thomas@users.noreply.github.com>
Date: Fri, 5 Sep 2025 12:11:02 +0200
Subject: [PATCH] fix(nginx): `ssl_stapling` should be `off` with Let's Encrypt

Signed-off-by: Thomas MICHEL <12149036+michel-thomas@users.noreply.github.com>
---
 admin_manual/installation/nginx.rst                         | 2 ++
 .../app_upgrade_guide/upgrade_to_32.rst                     | 2 +-
 developer_manual/digging_deeper/task_processing.rst         | 6 +++++-
 3 files changed, 8 insertions(+), 2 deletions(-)

diff --git a/admin_manual/installation/nginx.rst b/admin_manual/installation/nginx.rst
index 4d8580be7..3dbe6f923 100644
--- a/admin_manual/installation/nginx.rst
+++ b/admin_manual/installation/nginx.rst
@@ -20,6 +20,8 @@ NGINX configuration
 - Adjust the :code:`ssl_certificate` and :code:`ssl_certificate_key` directives to the real paths for your signed 
   certificate and private key. Make sure your SSL certificates are readable by the nginx server process (see `nginx HTTPS SSL 
   Module documentation <https://wiki.nginx.org/HttpSslModule>`_).
+- If using Let's Encrypt as TLS certificate and nginx as webserver, set `ssl_stapling` and `ssl_stapling_verify` to `off`
+  in main nginx config (see [Let's Encrypt blog post](https://letsencrypt.org/2024/12/05/ending-ocsp)).
 - Be careful about line breaks if you copy the examples, as long lines may be
   broken for page display and result in an invalid configuration files.
 - Some environments might need a ``cgi.fix_pathinfo`` set to ``1`` in their
diff --git a/developer_manual/app_publishing_maintenance/app_upgrade_guide/upgrade_to_32.rst b/developer_manual/app_publishing_maintenance/app_upgrade_guide/upgrade_to_32.rst
index c7733216d..ea8d92201 100644
--- a/developer_manual/app_publishing_maintenance/app_upgrade_guide/upgrade_to_32.rst
+++ b/developer_manual/app_publishing_maintenance/app_upgrade_guide/upgrade_to_32.rst
@@ -125,7 +125,7 @@ Added APIs
 
   - New task processing task type ``OCP\TaskProcessing\TextToSpeech`` to convert text to speech.
   - New task processing task type ``OCP\TaskProcessing\AnalyzeImages`` to ask questions about images.
-
+  - New method ``OCP\TaskProcessing\Manager::getAvailableTaskTypeIds`` to list only task type IDs without meta-data (faster than ``OCP\TaskProcessing\Manager::getAvailableTaskTypes``)
 
 Changed APIs
 ^^^^^^^^^^^^
diff --git a/developer_manual/digging_deeper/task_processing.rst b/developer_manual/digging_deeper/task_processing.rst
index f182a502d..b6bb33b02 100644
--- a/developer_manual/digging_deeper/task_processing.rst
+++ b/developer_manual/digging_deeper/task_processing.rst
@@ -15,6 +15,7 @@ To consume the  Task Processing API, you will need to :ref:`inject<dependency-in
 
  * ``hasProviders()`` This method returns a boolean which indicates if any providers have been registered. If this is false you cannot use the TextProcessing feature.
  * ``getAvailableTaskTypes(bool $showDisabled = false)`` This method returns an array of enabled task types indexed by their ID with their names and additional metadata. If you set ``$showdisabled`` to ``true`` (available since NC31), it will include disabled task types.
+ * ``getAvailableTaskTypeIds()`` This method (available since NC32) returns a list of available task type IDs. It uses the same logic as ``getAvailableTaskTypes()`` but is faster because it does not compute the task types metadata (which can be slow when getting default field values or multiselect value lists). If you just want to check if a feature is available, prefer using this method rather than ``getAvailableTaskTypes()``.
  * ``scheduleTask(Task $task)`` This method provides the actual scheduling functionality. The task is defined using the Task class. This method runs the task asynchronously in a background job.
  * ``getTask(int $id)`` This method fetches a task specified by its id.
  * ``deleteTask(Task $task)`` This method deletes a task
@@ -210,7 +211,10 @@ To create a task we use the ``\OCP\TaskProcessing\Task`` class. Its constructor
 
 .. code-block:: php
 
-    if (isset($textprocessingManager->getAvailableTaskTypes()[TextToTextSummary::ID]) {
+    // getAvailableTaskTypeIds is faster than getAvailableTaskTypes
+    // if (isset($textprocessingManager->getAvailableTaskTypes()[TextToTextSummary::ID]) {
+    // if you don't need the task type metadata, prefer this:
+    if (in_array(TextToTextSummary::ID, $textprocessingManager->getAvailableTaskTypeIds(), true) {
         $summaryTask = new Task(TextToTextSummary::ID, $emailText, "my_app", $userId, (string) $emailId);
     } else {
         // cannot use summarization