bundles/paperless: PLEASE just import my files

bundles/paperless-ng/files/paperless.conf

@@ -30,7 +30,8 @@ PAPERLESS_CORS_ALLOWED_HOSTS=http://${node.metadata.get('paperless/domain')},htt
 PAPERLESS_OCR_LANGUAGE=${'+'.join(sorted(node.metadata.get('paperless/ocr_languages', {'deu', 'eng'})))}
 PAPERLESS_OCR_MODE=skip
 PAPERLESS_OCR_SKIP_ARCHIVE_FILE=never
-PAPERLESS_OCR_USER_ARGS='{"continue_on_soft_render_error": true}'
+PAPERLESS_OCR_USER_ARGS='{"invalidate_digital_signatures": true}'
+PAPERLESS_PRE_CONSUME_SCRIPT=/opt/paperless/pre-consume.sh
 #PAPERLESS_OCR_OUTPUT_TYPE=pdfa
 #PAPERLESS_OCR_PAGES=1
 #PAPERLESS_OCR_IMAGE_DPI=300

bundles/paperless-ng/files/pre-consume.sh

@@ -0,0 +1,11 @@
+#!/bin/bash
+
+[[ -n "$DEBUG" ]] && set -x
+set -euo pipefail
+
+pdfinfo "${DOCUMENT_WORKING_PATH}" | grep -q "Encrypted:"
+
+if pdfinfo "${DOCUMENT_WORKING_PATH}" | grep -q "Encrypted:       yes"
+then
+    qpdf --replace-input --decrypt "${DOCUMENT_WORKING_PATH}"
+fi

bundles/paperless-ng/items.py

@@ -15,6 +15,10 @@ files['/opt/paperless/paperless.conf'] = {
     },
 }
 
+files['/opt/paperless/pre-consume.sh'] = {
+    'mode': '0755',
+}
+
 actions['paperless_create_virtualenv'] = {
     'command': '/usr/bin/python3 -m virtualenv -p python3 /opt/paperless/venv/',
     'unless': 'test -d /opt/paperless/venv/',