mirror of
https://github.com/overleaf/overleaf.git
synced 2024-11-14 20:40:17 -05:00
Merging docker-image to master
This commit is contained in:
commit
5e19658866
43 changed files with 1403 additions and 0 deletions
3
server-ce/docker-image/.dockerignore
Normal file
3
server-ce/docker-image/.dockerignore
Normal file
|
@ -0,0 +1,3 @@
|
|||
.DS_Store
|
||||
.git/
|
||||
node_modules/
|
9
server-ce/docker-image/.editorconfig
Normal file
9
server-ce/docker-image/.editorconfig
Normal file
|
@ -0,0 +1,9 @@
|
|||
root = true
|
||||
|
||||
[*]
|
||||
charset = utf-8
|
||||
indent_style = space
|
||||
indent_size = 2
|
||||
end_of_line = lf
|
||||
insert_final_newline = true
|
||||
trim_trailing_whitespace = true
|
4
server-ce/docker-image/.gitignore
vendored
Normal file
4
server-ce/docker-image/.gitignore
vendored
Normal file
|
@ -0,0 +1,4 @@
|
|||
.DS_Store
|
||||
node_modules/
|
||||
api-data
|
||||
versions/
|
95
server-ce/docker-image/Dockerfile
Normal file
95
server-ce/docker-image/Dockerfile
Normal file
|
@ -0,0 +1,95 @@
|
|||
# ---------------------------------------------
|
||||
# Overleaf Community Edition (overleaf/overleaf)
|
||||
# ---------------------------------------------
|
||||
|
||||
FROM sharelatex/sharelatex-base:latest
|
||||
|
||||
ENV SHARELATEX_CONFIG /etc/sharelatex/settings.coffee
|
||||
|
||||
|
||||
# Checkout Overleaf Community Edition repo
|
||||
# ----------------------------------------
|
||||
RUN git clone https://github.com/overleaf/overleaf.git \
|
||||
--depth 1 /var/www/sharelatex
|
||||
|
||||
|
||||
# Copy build dependencies
|
||||
# -----------------------
|
||||
ADD ${baseDir}/git-revision.sh /var/www/git-revision.sh
|
||||
ADD ${baseDir}/services.js /var/www/sharelatex/config/services.js
|
||||
|
||||
|
||||
# Checkout services
|
||||
# -----------------
|
||||
RUN cd /var/www/sharelatex \
|
||||
&& npm install \
|
||||
&& grunt install \
|
||||
\
|
||||
# Cleanup not needed artifacts
|
||||
# ----------------------------
|
||||
&& rm -rf /root/.cache /root/.npm $(find /tmp/ -mindepth 1 -maxdepth 1) \
|
||||
# Stores the version installed for each service
|
||||
# ---------------------------------------------
|
||||
&& cd /var/www \
|
||||
&& ./git-revision.sh > revisions.txt \
|
||||
\
|
||||
# Cleanup the git history
|
||||
# -------------------
|
||||
&& rm -rf $(find /var/www/sharelatex -name .git)
|
||||
|
||||
# Install npm dependencies
|
||||
# ------------------------
|
||||
RUN cd /var/www/sharelatex \
|
||||
&& bash ./bin/install-services \
|
||||
\
|
||||
# Cleanup not needed artifacts
|
||||
# ----------------------------
|
||||
&& rm -rf /root/.cache /root/.npm $(find /tmp/ -mindepth 1 -maxdepth 1)
|
||||
|
||||
# Compile CoffeeScript
|
||||
# --------------------
|
||||
RUN cd /var/www/sharelatex \
|
||||
&& bash ./bin/compile-services
|
||||
|
||||
# Links CLSI sycntex to its default location
|
||||
# ------------------------------------------
|
||||
RUN ln -s /var/www/sharelatex/clsi/bin/synctex /opt/synctex
|
||||
|
||||
|
||||
# Copy runit service startup scripts to its location
|
||||
# --------------------------------------------------
|
||||
ADD ${baseDir}/runit /etc/service
|
||||
|
||||
|
||||
# Configure nginx
|
||||
# ---------------
|
||||
ADD ${baseDir}/nginx/nginx.conf /etc/nginx/nginx.conf
|
||||
ADD ${baseDir}/nginx/sharelatex.conf /etc/nginx/sites-enabled/sharelatex.conf
|
||||
|
||||
|
||||
# Configure log rotation
|
||||
# ----------------------
|
||||
ADD ${baseDir}/logrotate/sharelatex /etc/logrotate.d/sharelatex
|
||||
|
||||
|
||||
# Copy Phusion Image startup scripts to its location
|
||||
# --------------------------------------------------
|
||||
COPY ${baseDir}/init_scripts/ /etc/my_init.d/
|
||||
|
||||
# Copy app settings files
|
||||
# -----------------------
|
||||
COPY ${baseDir}/settings.coffee /etc/sharelatex/settings.coffee
|
||||
|
||||
# Set Environment Variables
|
||||
# --------------------------------
|
||||
ENV WEB_API_USER "sharelatex"
|
||||
|
||||
ENV SHARELATEX_APP_NAME "Overleaf Community Edition"
|
||||
|
||||
|
||||
EXPOSE 80
|
||||
|
||||
WORKDIR /
|
||||
|
||||
ENTRYPOINT ["/sbin/my_init"]
|
||||
|
75
server-ce/docker-image/Dockerfile-base
Normal file
75
server-ce/docker-image/Dockerfile-base
Normal file
|
@ -0,0 +1,75 @@
|
|||
# --------------------------------------------------
|
||||
# Overleaf Base Image (sharelatex/sharelatex-base)
|
||||
# --------------------------------------------------
|
||||
|
||||
FROM phusion/baseimage:0.11
|
||||
|
||||
ENV baseDir .
|
||||
|
||||
|
||||
# Install dependencies
|
||||
# --------------------
|
||||
RUN apt-get update \
|
||||
&& apt-get install -y \
|
||||
build-essential wget net-tools unzip time imagemagick optipng strace nginx git python zlib1g-dev libpcre3-dev \
|
||||
qpdf \
|
||||
aspell aspell-en aspell-af aspell-am aspell-ar aspell-ar-large aspell-bg aspell-bn aspell-br aspell-ca aspell-cs aspell-cy aspell-da aspell-de aspell-el aspell-eo aspell-es aspell-et aspell-eu-es aspell-fa aspell-fo aspell-fr aspell-ga aspell-gl-minimos aspell-gu aspell-he aspell-hi aspell-hr aspell-hsb aspell-hu aspell-hy aspell-id aspell-is aspell-it aspell-kk aspell-kn aspell-ku aspell-lt aspell-lv aspell-ml aspell-mr aspell-nl aspell-nr aspell-ns aspell-pa aspell-pl aspell-pt aspell-pt-br aspell-ro aspell-ru aspell-sk aspell-sl aspell-ss aspell-st aspell-sv aspell-tl aspell-tn aspell-ts aspell-uk aspell-uz aspell-xh aspell-zu \
|
||||
\
|
||||
# install Node.JS 10
|
||||
&& curl -sSL https://deb.nodesource.com/setup_10.x | bash - \
|
||||
&& apt-get install -y nodejs \
|
||||
\
|
||||
&& rm -rf \
|
||||
# We are adding a custom nginx config in the main Dockerfile.
|
||||
/etc/nginx/nginx.conf \
|
||||
/etc/nginx/sites-enabled/default \
|
||||
/var/lib/apt/lists/*
|
||||
|
||||
# Install Grunt
|
||||
# ------------
|
||||
RUN npm install -g \
|
||||
grunt-cli \
|
||||
&& rm -rf /root/.npm
|
||||
|
||||
# Install TexLive
|
||||
# ---------------
|
||||
# CTAN mirrors occasionally fail, in that case install TexLive against an
|
||||
# specific server, for example http://ctan.crest.fr
|
||||
#
|
||||
# # docker build \
|
||||
# --build-arg TEXLIVE_MIRROR=http://ctan.crest.fr/tex-archive/systems/texlive/tlnet \
|
||||
# -f Dockerfile-base -t sharelatex/sharelatex-base .
|
||||
ARG TEXLIVE_MIRROR=http://mirror.ctan.org/systems/texlive/tlnet
|
||||
|
||||
ENV PATH "${PATH}:/usr/local/texlive/2019/bin/x86_64-linux"
|
||||
|
||||
RUN mkdir /install-tl-unx \
|
||||
&& curl -sSL \
|
||||
${TEXLIVE_MIRROR}/install-tl-unx.tar.gz \
|
||||
| tar -xzC /install-tl-unx --strip-components=1 \
|
||||
\
|
||||
&& echo "tlpdbopt_autobackup 0" >> /install-tl-unx/texlive.profile \
|
||||
&& echo "tlpdbopt_install_docfiles 0" >> /install-tl-unx/texlive.profile \
|
||||
&& echo "tlpdbopt_install_srcfiles 0" >> /install-tl-unx/texlive.profile \
|
||||
&& echo "selected_scheme scheme-basic" >> /install-tl-unx/texlive.profile \
|
||||
\
|
||||
&& /install-tl-unx/install-tl \
|
||||
-profile /install-tl-unx/texlive.profile \
|
||||
-repository ${TEXLIVE_MIRROR} \
|
||||
\
|
||||
&& tlmgr install --repository ${TEXLIVE_MIRROR} \
|
||||
latexmk \
|
||||
texcount \
|
||||
\
|
||||
&& rm -rf /install-tl-unx
|
||||
|
||||
|
||||
# Set up sharelatex user and home directory
|
||||
# -----------------------------------------
|
||||
RUN adduser --system --group --home /var/www/sharelatex --no-create-home sharelatex && \
|
||||
mkdir -p /var/lib/sharelatex && \
|
||||
chown www-data:www-data /var/lib/sharelatex && \
|
||||
mkdir -p /var/log/sharelatex && \
|
||||
chown www-data:www-data /var/log/sharelatex && \
|
||||
mkdir -p /var/lib/sharelatex/data/template_files && \
|
||||
chown www-data:www-data /var/lib/sharelatex/data/template_files
|
12
server-ce/docker-image/Makefile
Normal file
12
server-ce/docker-image/Makefile
Normal file
|
@ -0,0 +1,12 @@
|
|||
# Makefile
|
||||
|
||||
|
||||
build-base:
|
||||
docker build -f Dockerfile-base -t sharelatex/sharelatex-base .
|
||||
|
||||
|
||||
build-community:
|
||||
docker build -f Dockerfile -t sharelatex/sharelatex .
|
||||
|
||||
|
||||
PHONY: build-base build-community
|
43
server-ce/docker-image/README.md
Normal file
43
server-ce/docker-image/README.md
Normal file
|
@ -0,0 +1,43 @@
|
|||
# Overleaf Docker Image
|
||||
|
||||
This is the source for building the Overleaf community-edition docker image.
|
||||
|
||||
|
||||
## End-User Install
|
||||
Please see the [offical wiki for install
|
||||
guides](https://github.com/overleaf/overleaf/wiki)
|
||||
|
||||
|
||||
## Development
|
||||
|
||||
This repo contains two dockerfiles, `Dockerfile-base`, which builds the
|
||||
`sharelatex/sharelatex-base` image, and `Dockerfile` which builds the
|
||||
`sharelatex/sharelatex` (or "community") image.
|
||||
|
||||
The Base image generally contains the basic dependencies like `wget` and
|
||||
`aspell`, plus `texlive`. We split this out because it's a pretty heavy set of
|
||||
dependencies, and it's nice to not have to rebuild all of that every time.
|
||||
|
||||
The `sharelatex/sharelatex` image extends the base image and adds the actual Overleaf code
|
||||
and services.
|
||||
|
||||
Use `make build-base` and `make build-community` to build these images.
|
||||
|
||||
|
||||
### How the Overleaf code gets here
|
||||
|
||||
This repo uses [the public Overleaf
|
||||
repository](https://github.com/overleaf/overleaf), which used to be the main
|
||||
public source for the Overleaf system.
|
||||
|
||||
That repo is cloned down into the docker image, and a script then installs all
|
||||
the services.
|
||||
|
||||
|
||||
### How services run inside the container
|
||||
|
||||
We use the [Phusion base-image](https://github.com/phusion/baseimage-docker)
|
||||
(which is extended by our `base` image) to provide us with a VM-like container
|
||||
in which to run the Overleaf services. Baseimage uses the `runit` service
|
||||
manager to manage services, and we add our init-scripts from the `./runit`
|
||||
folder.
|
6
server-ce/docker-image/git-revision.sh
Executable file
6
server-ce/docker-image/git-revision.sh
Executable file
|
@ -0,0 +1,6 @@
|
|||
#!/bin/sh
|
||||
|
||||
for gitDir in $(find "$PWD" -name .git); do
|
||||
echo -n "$(dirname ${gitDir}),"
|
||||
git --git-dir="$gitDir" rev-parse HEAD
|
||||
done
|
13
server-ce/docker-image/hotfix/2.0.1/Dockerfile
Normal file
13
server-ce/docker-image/hotfix/2.0.1/Dockerfile
Normal file
|
@ -0,0 +1,13 @@
|
|||
FROM sharelatex/sharelatex:2.0.0
|
||||
|
||||
|
||||
# Patch 1: Fixes project deletion (https://github.com/overleaf/overleaf/issues/644)
|
||||
ADD disable_project_history.patch /etc/sharelatex/disable_project_history.patch
|
||||
RUN cd /etc/sharelatex && \
|
||||
patch < disable_project_history.patch
|
||||
|
||||
|
||||
# Patch 2: Fixes admin creation via CLI (https://github.com/overleaf/overleaf/issues/647)
|
||||
ADD create_and_destroy_users.patch /var/www/sharelatex/tasks/create_and_destroy_users.patch
|
||||
RUN cd /var/www/sharelatex/tasks/ && \
|
||||
patch < create_and_destroy_users.patch
|
|
@ -0,0 +1,11 @@
|
|||
--- CreateAndDestoryUsers.coffee
|
||||
+++ CreateAndDestoryUsers.coffee
|
||||
@@ -21,7 +21,7 @@ module.exports = (grunt) ->
|
||||
user.save (error) ->
|
||||
throw error if error?
|
||||
ONE_WEEK = 7 * 24 * 60 * 60 # seconds
|
||||
- OneTimeTokenHandler.getNewToken user._id, { expiresIn: ONE_WEEK }, (err, token)->
|
||||
+ OneTimeTokenHandler.getNewToken "password", { expiresIn: ONE_WEEK, email:user.email, user_id: user._id.toString() }, (err, token)->
|
||||
return next(err) if err?
|
||||
|
||||
console.log ""
|
|
@ -0,0 +1,11 @@
|
|||
--- settings.coffee
|
||||
+++ settings.coffee
|
||||
@@ -200,6 +200,8 @@ settings =
|
||||
# is not available
|
||||
v1:
|
||||
url: ""
|
||||
+ project_history:
|
||||
+ enabled: false
|
||||
references:{}
|
||||
notifications:undefined
|
||||
|
60
server-ce/docker-image/hotfix/2.0.2/1-anon-upload.patch
Normal file
60
server-ce/docker-image/hotfix/2.0.2/1-anon-upload.patch
Normal file
|
@ -0,0 +1,60 @@
|
|||
--- UploadsRouter.js
|
||||
+++ UploadsRouter.js
|
||||
@@ -1,13 +1,3 @@
|
||||
-/* eslint-disable
|
||||
- no-unused-vars,
|
||||
-*/
|
||||
-// TODO: This file was created by bulk-decaffeinate.
|
||||
-// Fix any style issues and re-enable lint.
|
||||
-/*
|
||||
- * decaffeinate suggestions:
|
||||
- * DS102: Remove unnecessary code created because of implicit returns
|
||||
- * Full docs: https://github.com/decaffeinate/decaffeinate/blob/master/docs/suggestions.md
|
||||
- */
|
||||
const AuthorizationMiddleware = require('../Authorization/AuthorizationMiddleware')
|
||||
const AuthenticationController = require('../Authentication/AuthenticationController')
|
||||
const ProjectUploadController = require('./ProjectUploadController')
|
||||
@@ -28,18 +18,30 @@ module.exports = {
|
||||
ProjectUploadController.uploadProject
|
||||
)
|
||||
|
||||
- return webRouter.post(
|
||||
- '/Project/:Project_id/upload',
|
||||
- RateLimiterMiddleware.rateLimit({
|
||||
- endpointName: 'file-upload',
|
||||
- params: ['Project_id'],
|
||||
- maxRequests: 200,
|
||||
- timeInterval: 60 * 30
|
||||
- }),
|
||||
- AuthenticationController.requireLogin(),
|
||||
- AuthorizationMiddleware.ensureUserCanWriteProjectContent,
|
||||
- ProjectUploadController.multerMiddleware,
|
||||
- ProjectUploadController.uploadFile
|
||||
- )
|
||||
+ const fileUploadEndpoint = '/Project/:Project_id/upload'
|
||||
+ const fileUploadRateLimit = RateLimiterMiddleware.rateLimit({
|
||||
+ endpointName: 'file-upload',
|
||||
+ params: ['Project_id'],
|
||||
+ maxRequests: 200,
|
||||
+ timeInterval: 60 * 30
|
||||
+ })
|
||||
+ if (Settings.allowAnonymousReadAndWriteSharing) {
|
||||
+ webRouter.post(
|
||||
+ fileUploadEndpoint,
|
||||
+ fileUploadRateLimit,
|
||||
+ AuthorizationMiddleware.ensureUserCanWriteProjectContent,
|
||||
+ ProjectUploadController.multerMiddleware,
|
||||
+ ProjectUploadController.uploadFile
|
||||
+ )
|
||||
+ } else {
|
||||
+ webRouter.post(
|
||||
+ fileUploadEndpoint,
|
||||
+ fileUploadRateLimit,
|
||||
+ AuthenticationController.requireLogin(),
|
||||
+ AuthorizationMiddleware.ensureUserCanWriteProjectContent,
|
||||
+ ProjectUploadController.multerMiddleware,
|
||||
+ ProjectUploadController.uploadFile
|
||||
+ )
|
||||
+ }
|
||||
}
|
||||
}
|
11
server-ce/docker-image/hotfix/2.0.2/2-read-only-access.patch
Normal file
11
server-ce/docker-image/hotfix/2.0.2/2-read-only-access.patch
Normal file
|
@ -0,0 +1,11 @@
|
|||
--- TokenAccessHandler.js
|
||||
+++ TokenAccessHandler.js
|
||||
@@ -255,7 +255,7 @@ const TokenAccessHandler = {
|
||||
|
||||
getV1DocPublishedInfo(token, callback) {
|
||||
// default to allowing access
|
||||
- if (!Settings.apis || !Settings.apis.v1) {
|
||||
+ if (!Settings.apis.v1 || !Settings.apis.v1.url) {
|
||||
return callback(null, { allow: true })
|
||||
}
|
||||
V1Api.request(
|
11
server-ce/docker-image/hotfix/2.0.2/3-url-linking-1.patch
Normal file
11
server-ce/docker-image/hotfix/2.0.2/3-url-linking-1.patch
Normal file
|
@ -0,0 +1,11 @@
|
|||
--- Features.js
|
||||
+++ Features.js
|
||||
@@ -53,6 +53,8 @@ module.exports = Features = {
|
||||
return Settings.apis.references.url != null
|
||||
case 'saml':
|
||||
return Settings.enableSaml
|
||||
+ case 'link-url':
|
||||
+ return Settings.apis.linkedUrlProxy && Settings.apis.linkedUrlProxy.url
|
||||
default:
|
||||
throw new Error(`unknown feature: ${feature}`)
|
||||
}
|
20
server-ce/docker-image/hotfix/2.0.2/4-url-linking-2.patch
Normal file
20
server-ce/docker-image/hotfix/2.0.2/4-url-linking-2.patch
Normal file
|
@ -0,0 +1,20 @@
|
|||
--- new-file-modal.pug
|
||||
+++ new-file-modal.pug
|
||||
@@ -21,11 +21,12 @@ script(type='text/ng-template', id='newFileModalTemplate')
|
||||
i.fa.fa-fw.fa-folder-open
|
||||
|
|
||||
| From Another Project
|
||||
- li(ng-class="type == 'url' ? 'active' : null")
|
||||
- a(href, ng-click="type = 'url'")
|
||||
- i.fa.fa-fw.fa-globe
|
||||
- |
|
||||
- | From External URL
|
||||
+ if hasFeature('link-url')
|
||||
+ li(ng-class="type == 'url' ? 'active' : null")
|
||||
+ a(href, ng-click="type = 'url'")
|
||||
+ i.fa.fa-fw.fa-globe
|
||||
+ |
|
||||
+ | From External URL
|
||||
!= moduleIncludes("newFileModal:selector", locals)
|
||||
|
||||
td(class="modal-new-file--body modal-new-file--body-{{type}}")
|
|
@ -0,0 +1,26 @@
|
|||
--- AnalyticsController.js
|
||||
+++ AnalyticsController.js
|
||||
@@ -3,9 +3,13 @@ const Errors = require('../Errors/Errors')
|
||||
const AuthenticationController = require('../Authentication/AuthenticationController')
|
||||
const InstitutionsAPI = require('../Institutions/InstitutionsAPI')
|
||||
const GeoIpLookup = require('../../infrastructure/GeoIpLookup')
|
||||
+const Features = require('../../infrastructure/Features')
|
||||
|
||||
module.exports = {
|
||||
updateEditingSession(req, res, next) {
|
||||
+ if (!Features.hasFeature('analytics')) {
|
||||
+ return res.send(204)
|
||||
+ }
|
||||
const userId = AuthenticationController.getLoggedInUserId(req)
|
||||
const { projectId } = req.params
|
||||
let countryCode = null
|
||||
@@ -28,6 +32,9 @@ module.exports = {
|
||||
},
|
||||
|
||||
recordEvent(req, res, next) {
|
||||
+ if (!Features.hasFeature('analytics')) {
|
||||
+ return res.send(204)
|
||||
+ }
|
||||
const userId =
|
||||
AuthenticationController.getLoggedInUserId(req) || req.sessionID
|
||||
AnalyticsManager.recordEvent(userId, req.params.event, req.body, error =>
|
|
@ -0,0 +1,10 @@
|
|||
--- Features.js
|
||||
+++ Features.js
|
||||
@@ -41,6 +41,7 @@ module.exports = Features = {
|
||||
case 'templates-server-pro':
|
||||
return Settings.overleaf == null
|
||||
case 'affiliations':
|
||||
+ case 'analytics':
|
||||
// Checking both properties is needed for the time being to allow
|
||||
// enabling the feature in web-api and disabling in Server Pro
|
||||
// see https://github.com/overleaf/web-internal/pull/2127
|
31
server-ce/docker-image/hotfix/2.0.2/Dockerfile
Normal file
31
server-ce/docker-image/hotfix/2.0.2/Dockerfile
Normal file
|
@ -0,0 +1,31 @@
|
|||
FROM sharelatex/sharelatex:2.0.1
|
||||
|
||||
|
||||
# Patch 1: Fixes anonymous link sharing
|
||||
ADD 1-anon-upload.patch /var/www/sharelatex/web/app/src/Features/Uploads/1-anon-upload.patch
|
||||
RUN cd /var/www/sharelatex/web/app/src/Features/Uploads/ && \
|
||||
patch < 1-anon-upload.patch
|
||||
|
||||
|
||||
# Patch 2: Fixes read-only access
|
||||
ADD 2-read-only-access.patch /var/www/sharelatex/web/app/src/Features/TokenAccess/3-read-only-access.patch
|
||||
RUN cd /var/www/sharelatex/web/app/src/Features/TokenAccess/ && \
|
||||
patch < 3-read-only-access.patch
|
||||
|
||||
|
||||
# Patch 3: Fixes url linking
|
||||
ADD 3-url-linking-1.patch /var/www/sharelatex/web/app/src/infrastructure/6-url-linking-1.patch
|
||||
RUN cd /var/www/sharelatex/web/app/src/infrastructure/ && \
|
||||
patch < 6-url-linking-1.patch
|
||||
ADD 4-url-linking-2.patch /var/www/sharelatex/web/app/views/project/editor/7-url-linking-2.patch
|
||||
RUN cd /var/www/sharelatex/web/app/views/project/editor/ && \
|
||||
patch < 7-url-linking-2.patch
|
||||
|
||||
|
||||
# Patch 4: Disables analytics
|
||||
ADD 5-disable-analytics-1.patch /var/www/sharelatex/web/app/src/Features/Analytics/8-disable-analytics-1.patch
|
||||
RUN cd /var/www/sharelatex/web/app/src/Features/Analytics/ && \
|
||||
patch < 8-disable-analytics-1.patch
|
||||
ADD 6-disable-analytics-2.patch /var/www/sharelatex/web/app/src/infrastructure/9-disable-analytics-2.patch
|
||||
RUN cd /var/www/sharelatex/web/app/src/infrastructure/ && \
|
||||
patch < 9-disable-analytics-2.patch
|
8
server-ce/docker-image/hotfix/2.1.1/Dockerfile
Normal file
8
server-ce/docker-image/hotfix/2.1.1/Dockerfile
Normal file
|
@ -0,0 +1,8 @@
|
|||
FROM sharelatex/sharelatex:2.1.0
|
||||
|
||||
# Patch: defines recaptcha config to fix share-related issues
|
||||
# - https://github.com/overleaf/overleaf/issues/684
|
||||
ADD add-recaptcha-config.patch /etc/sharelatex/add-recaptcha-config.patch
|
||||
RUN cd /etc/sharelatex/ && \
|
||||
patch < add-recaptcha-config.patch
|
||||
|
|
@ -0,0 +1,14 @@
|
|||
--- a/settings.coffee
|
||||
+++ b/settings.coffee
|
||||
@@ -180,6 +180,11 @@ settings =
|
||||
# cookie with a secure flag (recommended).
|
||||
secureCookie: process.env["SHARELATEX_SECURE_COOKIE"]?
|
||||
|
||||
+ recaptcha:
|
||||
+ disabled:
|
||||
+ invite: true
|
||||
+ register: true
|
||||
+
|
||||
# If you are running ShareLaTeX behind a proxy (like Apache, Nginx, etc)
|
||||
# then set this to true to allow it to correctly detect the forwarded IP
|
||||
# address and http/https protocol information.
|
35
server-ce/docker-image/init_scripts/00_make_sharelatex_data_dirs.sh
Executable file
35
server-ce/docker-image/init_scripts/00_make_sharelatex_data_dirs.sh
Executable file
|
@ -0,0 +1,35 @@
|
|||
#!/bin/sh
|
||||
set -e
|
||||
|
||||
mkdir -p /var/lib/sharelatex/data
|
||||
chown www-data:www-data /var/lib/sharelatex/data
|
||||
|
||||
mkdir -p /var/lib/sharelatex/data/user_files
|
||||
chown www-data:www-data /var/lib/sharelatex/data/user_files
|
||||
|
||||
mkdir -p /var/lib/sharelatex/data/compiles
|
||||
chown www-data:www-data /var/lib/sharelatex/data/compiles
|
||||
|
||||
mkdir -p /var/lib/sharelatex/data/cache
|
||||
chown www-data:www-data /var/lib/sharelatex/data/cache
|
||||
|
||||
mkdir -p /var/lib/sharelatex/data/template_files
|
||||
chown www-data:www-data /var/lib/sharelatex/data/template_files
|
||||
|
||||
mkdir -p /var/lib/sharelatex/tmp/dumpFolder
|
||||
chown www-data:www-data /var/lib/sharelatex/tmp/dumpFolder
|
||||
|
||||
mkdir -p /var/lib/sharelatex/tmp
|
||||
chown www-data:www-data /var/lib/sharelatex/tmp
|
||||
|
||||
mkdir -p /var/lib/sharelatex/tmp/uploads
|
||||
chown www-data:www-data /var/lib/sharelatex/tmp/uploads
|
||||
|
||||
mkdir -p /var/lib/sharelatex/tmp/dumpFolder
|
||||
chown www-data:www-data /var/lib/sharelatex/tmp/dumpFolder
|
||||
|
||||
if [ ! -e "/var/lib/sharelatex/data/db.sqlite" ]; then
|
||||
touch /var/lib/sharelatex/data/db.sqlite
|
||||
fi
|
||||
|
||||
chown www-data:www-data /var/lib/sharelatex/data/db.sqlite
|
20
server-ce/docker-image/init_scripts/00_regen_sharelatex_secrets.sh
Executable file
20
server-ce/docker-image/init_scripts/00_regen_sharelatex_secrets.sh
Executable file
|
@ -0,0 +1,20 @@
|
|||
#!/bin/bash
|
||||
set -e -o pipefail
|
||||
|
||||
# generate secrets and defines them as environment variables
|
||||
# https://github.com/phusion/baseimage-docker#centrally-defining-your-own-environment-variables
|
||||
|
||||
WEB_API_PASSWORD_FILE=/etc/container_environment/WEB_API_PASSWORD
|
||||
CRYPTO_RANDOM_FILE=/etc/container_environment/CRYPTO_RANDOM
|
||||
|
||||
if [ ! -f "$WEB_API_PASSWORD_FILE" ] || [ ! -f "$CRYPTO_RANDOM_FILE" ]; then
|
||||
|
||||
echo "generating random secrets"
|
||||
|
||||
SECRET=$(dd if=/dev/urandom bs=1 count=32 2>/dev/null | base64 -w 0 | rev | cut -b 2- | rev | tr -d '\n+/')
|
||||
echo ${SECRET} > ${WEB_API_PASSWORD_FILE}
|
||||
|
||||
SECRET=$(dd if=/dev/urandom bs=1 count=32 2>/dev/null | base64 -w 0 | rev | cut -b 2- | rev | tr -d '\n+/')
|
||||
echo ${SECRET} > ${CRYPTO_RANDOM_FILE}
|
||||
fi
|
||||
|
5
server-ce/docker-image/init_scripts/00_set_docker_host_ipaddress.sh
Executable file
5
server-ce/docker-image/init_scripts/00_set_docker_host_ipaddress.sh
Executable file
|
@ -0,0 +1,5 @@
|
|||
#!/bin/bash
|
||||
set -e -o pipefail
|
||||
|
||||
# See the bottom of http://stackoverflow.com/questions/24319662/from-inside-of-a-docker-container-how-do-i-connect-to-the-localhost-of-the-mach
|
||||
echo "`route -n | awk '/UG[ \t]/{print $2}'` dockerhost" >> /etc/hosts
|
7
server-ce/docker-image/init_scripts/98_check_db_access.sh
Executable file
7
server-ce/docker-image/init_scripts/98_check_db_access.sh
Executable file
|
@ -0,0 +1,7 @@
|
|||
#!/bin/sh
|
||||
set -e
|
||||
|
||||
echo "Checking can connect to mongo and redis"
|
||||
cd /var/www/sharelatex && grunt check:redis
|
||||
cd /var/www/sharelatex && grunt check:mongo
|
||||
echo "All checks passed"
|
8
server-ce/docker-image/init_scripts/99_migrate.sh
Executable file
8
server-ce/docker-image/init_scripts/99_migrate.sh
Executable file
|
@ -0,0 +1,8 @@
|
|||
#!/bin/sh
|
||||
set -e
|
||||
|
||||
which node
|
||||
which grunt
|
||||
ls -al /var/www/sharelatex/migrations
|
||||
cd /var/www/sharelatex && grunt migrate -v
|
||||
echo "All migrations finished"
|
9
server-ce/docker-image/logrotate/sharelatex
Normal file
9
server-ce/docker-image/logrotate/sharelatex
Normal file
|
@ -0,0 +1,9 @@
|
|||
/var/log/sharelatex/*.log {
|
||||
daily
|
||||
missingok
|
||||
rotate 5
|
||||
compress
|
||||
copytruncate
|
||||
notifempty
|
||||
create 644 root adm
|
||||
}
|
76
server-ce/docker-image/nginx/nginx.conf
Normal file
76
server-ce/docker-image/nginx/nginx.conf
Normal file
|
@ -0,0 +1,76 @@
|
|||
daemon off;
|
||||
user www-data;
|
||||
worker_processes 4;
|
||||
pid /run/nginx.pid;
|
||||
|
||||
events {
|
||||
worker_connections 768;
|
||||
# multi_accept on;
|
||||
}
|
||||
|
||||
http {
|
||||
|
||||
##
|
||||
# Basic Settings
|
||||
##
|
||||
|
||||
sendfile on;
|
||||
tcp_nopush on;
|
||||
tcp_nodelay on;
|
||||
keepalive_timeout 65;
|
||||
types_hash_max_size 2048;
|
||||
# server_tokens off;
|
||||
|
||||
# server_names_hash_bucket_size 64;
|
||||
# server_name_in_redirect off;
|
||||
|
||||
include /etc/nginx/mime.types;
|
||||
default_type application/octet-stream;
|
||||
|
||||
##
|
||||
# Logging Settings
|
||||
##
|
||||
|
||||
access_log /var/log/nginx/access.log;
|
||||
error_log /var/log/nginx/error.log;
|
||||
|
||||
##
|
||||
# Gzip Settings
|
||||
##
|
||||
|
||||
gzip on;
|
||||
gzip_disable "msie6";
|
||||
|
||||
client_max_body_size 50m;
|
||||
|
||||
# gzip_vary on;
|
||||
# gzip_proxied any;
|
||||
# gzip_comp_level 6;
|
||||
# gzip_buffers 16 8k;
|
||||
# gzip_http_version 1.1;
|
||||
# gzip_types text/plain text/css application/json application/x-javascript text/xml application/xml application/xml+rss text/javascript;
|
||||
|
||||
##
|
||||
# nginx-naxsi config
|
||||
##
|
||||
# Uncomment it if you installed nginx-naxsi
|
||||
##
|
||||
|
||||
#include /etc/nginx/naxsi_core.rules;
|
||||
|
||||
##
|
||||
# nginx-passenger config
|
||||
##
|
||||
# Uncomment it if you installed nginx-passenger
|
||||
##
|
||||
|
||||
#passenger_root /usr;
|
||||
#passenger_ruby /usr/bin/ruby;
|
||||
|
||||
##
|
||||
# Virtual Host Configs
|
||||
##
|
||||
|
||||
include /etc/nginx/conf.d/*.conf;
|
||||
include /etc/nginx/sites-enabled/*;
|
||||
}
|
41
server-ce/docker-image/nginx/sharelatex.conf
Normal file
41
server-ce/docker-image/nginx/sharelatex.conf
Normal file
|
@ -0,0 +1,41 @@
|
|||
server {
|
||||
listen 80;
|
||||
server_name _; # Catch all, see http://nginx.org/en/docs/http/server_names.html
|
||||
|
||||
root /var/www/sharelatex/web/public/;
|
||||
|
||||
location / {
|
||||
proxy_pass http://127.0.0.1:3000;
|
||||
proxy_http_version 1.1;
|
||||
proxy_set_header Upgrade $http_upgrade;
|
||||
proxy_set_header Connection "upgrade";
|
||||
proxy_set_header X-Forwarded-Host $host;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_read_timeout 3m;
|
||||
proxy_send_timeout 3m;
|
||||
}
|
||||
|
||||
location /socket.io {
|
||||
proxy_pass http://127.0.0.1:3026;
|
||||
proxy_http_version 1.1;
|
||||
proxy_set_header Upgrade $http_upgrade;
|
||||
proxy_set_header Connection "upgrade";
|
||||
proxy_set_header X-Forwarded-Host $host;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_read_timeout 3m;
|
||||
proxy_send_timeout 3m;
|
||||
}
|
||||
|
||||
location /stylesheets {
|
||||
expires 1y;
|
||||
}
|
||||
|
||||
location /minjs {
|
||||
expires 1y;
|
||||
}
|
||||
|
||||
location /img {
|
||||
expires 1y;
|
||||
}
|
||||
}
|
10
server-ce/docker-image/runit/chat-sharelatex/run
Executable file
10
server-ce/docker-image/runit/chat-sharelatex/run
Executable file
|
@ -0,0 +1,10 @@
|
|||
#!/bin/bash
|
||||
export SHARELATEX_CONFIG=/etc/sharelatex/settings.coffee
|
||||
|
||||
NODE_PARAMS=""
|
||||
if [ "$DEBUG_NODE" == "true" ]; then
|
||||
echo "running debug - chat"
|
||||
NODE_PARAMS="--inspect=0.0.0.0:30100"
|
||||
fi
|
||||
|
||||
exec /sbin/setuser www-data /usr/bin/node $NODE_PARAMS /var/www/sharelatex/chat/app.js >> /var/log/sharelatex/chat.log 2>&1
|
32
server-ce/docker-image/runit/clsi-sharelatex/run
Executable file
32
server-ce/docker-image/runit/clsi-sharelatex/run
Executable file
|
@ -0,0 +1,32 @@
|
|||
#!/bin/bash
|
||||
export SHARELATEX_CONFIG=/etc/sharelatex/settings.coffee
|
||||
|
||||
NODE_PARAMS=""
|
||||
if [ "$DEBUG_NODE" == "true" ]; then
|
||||
echo "running debug - clsi"
|
||||
NODE_PARAMS="--inspect=0.0.0.0:30130"
|
||||
fi
|
||||
|
||||
# Set permissions on docker.sock if present,
|
||||
# To enable sibling-containers (see entrypoint.sh in clsi project)
|
||||
if [ -e '/var/run/docker.sock' ]; then
|
||||
echo ">> Setting permissions on docker socket"
|
||||
DOCKER_GROUP=$(stat -c '%g' /var/run/docker.sock)
|
||||
groupadd --non-unique --gid ${DOCKER_GROUP} dockeronhost
|
||||
usermod -aG dockeronhost www-data
|
||||
fi
|
||||
|
||||
# Copies over CSLI synctex to the host mounted volume, so it
|
||||
# can be subsequently mounted in TexLive containers on Sandbox Compilation
|
||||
SYNCTEX=/var/lib/sharelatex/bin/synctex
|
||||
if [ ! -f "$SYNCTEX" ]; then
|
||||
if [ "$DISABLE_SYNCTEX_BINARY_COPY" == "true" ]; then
|
||||
echo ">> Copy of synctex executable disabled by DISABLE_SYNCTEX_BINARY_COPY flag, feature may not work"
|
||||
else
|
||||
echo ">> Copying synctex executable to the host"
|
||||
mkdir -p $(dirname $SYNCTEX )
|
||||
cp /var/www/sharelatex/clsi/bin/synctex $SYNCTEX
|
||||
fi
|
||||
fi
|
||||
|
||||
exec /sbin/setuser www-data /usr/bin/node $NODE_PARAMS /var/www/sharelatex/clsi/app.js >> /var/log/sharelatex/clsi.log 2>&1
|
10
server-ce/docker-image/runit/contacts-sharelatex/run
Executable file
10
server-ce/docker-image/runit/contacts-sharelatex/run
Executable file
|
@ -0,0 +1,10 @@
|
|||
#!/bin/bash
|
||||
export SHARELATEX_CONFIG=/etc/sharelatex/settings.coffee
|
||||
|
||||
NODE_PARAMS=""
|
||||
if [ "$DEBUG_NODE" == "true" ]; then
|
||||
echo "running debug - contacts"
|
||||
NODE_PARAMS="--inspect=0.0.0.0:30360"
|
||||
fi
|
||||
|
||||
exec /sbin/setuser www-data /usr/bin/node $NODE_PARAMS /var/www/sharelatex/contacts/app.js >> /var/log/sharelatex/contacts 2>&1
|
10
server-ce/docker-image/runit/docstore-sharelatex/run
Executable file
10
server-ce/docker-image/runit/docstore-sharelatex/run
Executable file
|
@ -0,0 +1,10 @@
|
|||
#!/bin/bash
|
||||
export SHARELATEX_CONFIG=/etc/sharelatex/settings.coffee
|
||||
|
||||
NODE_PARAMS=""
|
||||
if [ "$DEBUG_NODE" == "true" ]; then
|
||||
echo "running debug - docstore"
|
||||
NODE_PARAMS="--inspect=0.0.0.0:30160"
|
||||
fi
|
||||
|
||||
exec /sbin/setuser www-data /usr/bin/node $NODE_PARAMS /var/www/sharelatex/docstore/app.js >> /var/log/sharelatex/docstore.log 2>&1
|
10
server-ce/docker-image/runit/document-updater-sharelatex/run
Executable file
10
server-ce/docker-image/runit/document-updater-sharelatex/run
Executable file
|
@ -0,0 +1,10 @@
|
|||
#!/bin/bash
|
||||
export SHARELATEX_CONFIG=/etc/sharelatex/settings.coffee
|
||||
|
||||
NODE_PARAMS=""
|
||||
if [ "$DEBUG_NODE" == "true" ]; then
|
||||
echo "running debug - document updater"
|
||||
NODE_PARAMS="--inspect=0.0.0.0:30030"
|
||||
fi
|
||||
|
||||
exec /sbin/setuser www-data /usr/bin/node $NODE_PARAMS /var/www/sharelatex/document-updater/app.js >> /var/log/sharelatex/document-updater.log 2>&1
|
3
server-ce/docker-image/runit/filestore-sharelatex/run
Executable file
3
server-ce/docker-image/runit/filestore-sharelatex/run
Executable file
|
@ -0,0 +1,3 @@
|
|||
#!/bin/bash
|
||||
export SHARELATEX_CONFIG=/etc/sharelatex/settings.coffee
|
||||
exec /sbin/setuser www-data /usr/bin/node /var/www/sharelatex/filestore/app.js >> /var/log/sharelatex/filestore.log 2>&1
|
2
server-ce/docker-image/runit/nginx/run
Executable file
2
server-ce/docker-image/runit/nginx/run
Executable file
|
@ -0,0 +1,2 @@
|
|||
#!/bin/bash
|
||||
exec nginx
|
10
server-ce/docker-image/runit/notifications-sharelatex/run
Executable file
10
server-ce/docker-image/runit/notifications-sharelatex/run
Executable file
|
@ -0,0 +1,10 @@
|
|||
#!/bin/bash
|
||||
export SHARELATEX_CONFIG=/etc/sharelatex/settings.coffee
|
||||
|
||||
NODE_PARAMS=""
|
||||
if [ "$DEBUG_NODE" == "true" ]; then
|
||||
echo "running debug - notifications"
|
||||
NODE_PARAMS="--inspect=0.0.0.0:30420"
|
||||
fi
|
||||
|
||||
exec /sbin/setuser www-data /usr/bin/node $NODE_PARAMS /var/www/sharelatex/notifications/app.js >> /var/log/sharelatex/notifications.log 2>&1
|
3
server-ce/docker-image/runit/real-time-sharelatex/run
Executable file
3
server-ce/docker-image/runit/real-time-sharelatex/run
Executable file
|
@ -0,0 +1,3 @@
|
|||
#!/bin/bash
|
||||
export SHARELATEX_CONFIG=/etc/sharelatex/settings.coffee
|
||||
exec /sbin/setuser www-data /usr/bin/node /var/www/sharelatex/real-time/app.js >> /var/log/sharelatex/real-time.log 2>&1
|
10
server-ce/docker-image/runit/spelling-sharelatex/run
Executable file
10
server-ce/docker-image/runit/spelling-sharelatex/run
Executable file
|
@ -0,0 +1,10 @@
|
|||
#!/bin/bash
|
||||
export SHARELATEX_CONFIG=/etc/sharelatex/settings.coffee
|
||||
|
||||
NODE_PARAMS=""
|
||||
if [ "$DEBUG_NODE" == "true" ]; then
|
||||
echo "running debug - spelling"
|
||||
NODE_PARAMS="--inspect=0.0.0.0:30050"
|
||||
fi
|
||||
|
||||
exec /sbin/setuser www-data /usr/bin/node $NODE_PARAMS /var/www/sharelatex/spelling/app.js >> /var/log/sharelatex/spelling.log 2>&1
|
10
server-ce/docker-image/runit/tags-sharelatex/run
Executable file
10
server-ce/docker-image/runit/tags-sharelatex/run
Executable file
|
@ -0,0 +1,10 @@
|
|||
#!/bin/bash
|
||||
export SHARELATEX_CONFIG=/etc/sharelatex/settings.coffee
|
||||
|
||||
NODE_PARAMS=""
|
||||
if [ "$DEBUG_NODE" == "true" ]; then
|
||||
echo "running debug - tags"
|
||||
NODE_PARAMS="--inspect=0.0.0.0:30120"
|
||||
fi
|
||||
|
||||
exec /sbin/setuser www-data /usr/bin/node $NODE_PARAMS /var/www/sharelatex/tags/app.js >> /var/log/sharelatex/tags.log 2>&1
|
10
server-ce/docker-image/runit/track-changes-sharelatex/run
Executable file
10
server-ce/docker-image/runit/track-changes-sharelatex/run
Executable file
|
@ -0,0 +1,10 @@
|
|||
#!/bin/bash
|
||||
export SHARELATEX_CONFIG=/etc/sharelatex/settings.coffee
|
||||
|
||||
NODE_PARAMS=""
|
||||
if [ "$DEBUG_NODE" == "true" ]; then
|
||||
echo "running debug - track-changes"
|
||||
NODE_PARAMS="--inspect=0.0.0.0:30150"
|
||||
fi
|
||||
|
||||
exec /sbin/setuser www-data /usr/bin/node $NODE_PARAMS /var/www/sharelatex/track-changes/app.js >> /var/log/sharelatex/track-changes.log 2>&1
|
10
server-ce/docker-image/runit/web-sharelatex/run
Executable file
10
server-ce/docker-image/runit/web-sharelatex/run
Executable file
|
@ -0,0 +1,10 @@
|
|||
#!/bin/bash
|
||||
export SHARELATEX_CONFIG=/etc/sharelatex/settings.coffee
|
||||
|
||||
NODE_PARAMS=""
|
||||
if [ "$DEBUG_NODE" == "true" ]; then
|
||||
echo "running debug - web"
|
||||
NODE_PARAMS="--inspect=0.0.0.0:40000"
|
||||
fi
|
||||
|
||||
exec /sbin/setuser www-data /usr/bin/node $NODE_PARAMS /var/www/sharelatex/web/app.js >> /var/log/sharelatex/web.log 2>&1
|
51
server-ce/docker-image/services.js
Normal file
51
server-ce/docker-image/services.js
Normal file
|
@ -0,0 +1,51 @@
|
|||
module.exports =
|
||||
|
||||
[{
|
||||
name: "web",
|
||||
repo: "https://github.com/sharelatex/web-sharelatex.git",
|
||||
version: "master"
|
||||
}, {
|
||||
name: "real-time",
|
||||
repo: "https://github.com/sharelatex/real-time-sharelatex.git",
|
||||
version: "master"
|
||||
}, {
|
||||
name: "document-updater",
|
||||
repo: "https://github.com/sharelatex/document-updater-sharelatex.git",
|
||||
version: "master"
|
||||
}, {
|
||||
name: "clsi",
|
||||
repo: "https://github.com/sharelatex/clsi-sharelatex.git",
|
||||
version: "master"
|
||||
}, {
|
||||
name: "filestore",
|
||||
repo: "https://github.com/sharelatex/filestore-sharelatex.git",
|
||||
version: "master"
|
||||
}, {
|
||||
name: "track-changes",
|
||||
repo: "https://github.com/sharelatex/track-changes-sharelatex.git",
|
||||
version: "master"
|
||||
}, {
|
||||
name: "docstore",
|
||||
repo: "https://github.com/sharelatex/docstore-sharelatex.git",
|
||||
version: "master"
|
||||
}, {
|
||||
name: "chat",
|
||||
repo: "https://github.com/sharelatex/chat-sharelatex.git",
|
||||
version: "master"
|
||||
}, {
|
||||
name: "tags",
|
||||
repo: "https://github.com/sharelatex/tags-sharelatex.git",
|
||||
version: "master"
|
||||
}, {
|
||||
name: "spelling",
|
||||
repo: "https://github.com/sharelatex/spelling-sharelatex.git",
|
||||
version: "master"
|
||||
}, {
|
||||
name: "contacts",
|
||||
repo: "https://github.com/sharelatex/contacts-sharelatex.git",
|
||||
version: "sk-update-mongojs"
|
||||
}, {
|
||||
name: "notifications",
|
||||
repo: "https://github.com/sharelatex/notifications-sharelatex.git",
|
||||
version: "master"
|
||||
}]
|
548
server-ce/docker-image/settings.coffee
Normal file
548
server-ce/docker-image/settings.coffee
Normal file
|
@ -0,0 +1,548 @@
|
|||
Path = require('path')
|
||||
|
||||
# These credentials are used for authenticating api requests
|
||||
# between services that may need to go over public channels
|
||||
httpAuthUser = "sharelatex"
|
||||
httpAuthPass = process.env["WEB_API_PASSWORD"]
|
||||
httpAuthUsers = {}
|
||||
httpAuthUsers[httpAuthUser] = httpAuthPass
|
||||
|
||||
parse = (option)->
|
||||
if option?
|
||||
try
|
||||
opt = JSON.parse(option)
|
||||
return opt
|
||||
catch err
|
||||
console.error "problem parsing #{option}, invalid JSON"
|
||||
return undefined
|
||||
|
||||
|
||||
DATA_DIR = '/var/lib/sharelatex/data'
|
||||
TMP_DIR = '/var/lib/sharelatex/tmp'
|
||||
|
||||
settings =
|
||||
|
||||
brandPrefix: ""
|
||||
|
||||
allowAnonymousReadAndWriteSharing:
|
||||
process.env['SHARELATEX_ALLOW_ANONYMOUS_READ_AND_WRITE_SHARING'] == 'true'
|
||||
|
||||
# Databases
|
||||
# ---------
|
||||
|
||||
# ShareLaTeX's main persistant data store is MongoDB (http://www.mongodb.org/)
|
||||
# Documentation about the URL connection string format can be found at:
|
||||
#
|
||||
# http://docs.mongodb.org/manual/reference/connection-string/
|
||||
#
|
||||
# The following works out of the box with Mongo's default settings:
|
||||
mongo:
|
||||
url : process.env["SHARELATEX_MONGO_URL"] or 'mongodb://dockerhost/sharelatex'
|
||||
|
||||
# Redis is used in ShareLaTeX for high volume queries, like real-time
|
||||
# editing, and session management.
|
||||
#
|
||||
# The following config will work with Redis's default settings:
|
||||
redis:
|
||||
web: redisConfig =
|
||||
host: process.env["SHARELATEX_REDIS_HOST"] or "dockerhost"
|
||||
port: process.env["SHARELATEX_REDIS_PORT"] or "6379"
|
||||
password: process.env["SHARELATEX_REDIS_PASS"] or ""
|
||||
key_schema:
|
||||
# document-updater
|
||||
blockingKey: ({doc_id}) -> "Blocking:#{doc_id}"
|
||||
docLines: ({doc_id}) -> "doclines:#{doc_id}"
|
||||
docOps: ({doc_id}) -> "DocOps:#{doc_id}"
|
||||
docVersion: ({doc_id}) -> "DocVersion:#{doc_id}"
|
||||
docHash: ({doc_id}) -> "DocHash:#{doc_id}"
|
||||
projectKey: ({doc_id}) -> "ProjectId:#{doc_id}"
|
||||
docsInProject: ({project_id}) -> "DocsIn:#{project_id}"
|
||||
ranges: ({doc_id}) -> "Ranges:#{doc_id}"
|
||||
# document-updater:realtime
|
||||
pendingUpdates: ({doc_id}) -> "PendingUpdates:#{doc_id}"
|
||||
# document-updater:history
|
||||
uncompressedHistoryOps: ({doc_id}) -> "UncompressedHistoryOps:#{doc_id}"
|
||||
docsWithHistoryOps: ({project_id}) -> "DocsWithHistoryOps:#{project_id}"
|
||||
# document-updater:lock
|
||||
blockingKey: ({doc_id}) -> "Blocking:#{doc_id}"
|
||||
# track-changes:lock
|
||||
historyLock: ({doc_id}) -> "HistoryLock:#{doc_id}"
|
||||
historyIndexLock: ({project_id}) -> "HistoryIndexLock:#{project_id}"
|
||||
# track-chanegs:history
|
||||
uncompressedHistoryOps: ({doc_id}) -> "UncompressedHistoryOps:#{doc_id}"
|
||||
docsWithHistoryOps: ({project_id}) -> "DocsWithHistoryOps:#{project_id}"
|
||||
# realtime
|
||||
clientsInProject: ({project_id}) -> "clients_in_project:#{project_id}"
|
||||
connectedUser: ({project_id, client_id})-> "connected_user:#{project_id}:#{client_id}"
|
||||
fairy: redisConfig
|
||||
# track-changes and document-updater
|
||||
realtime: redisConfig
|
||||
documentupdater: redisConfig
|
||||
lock: redisConfig
|
||||
history: redisConfig
|
||||
websessions: redisConfig
|
||||
api: redisConfig
|
||||
pubsub: redisConfig
|
||||
project_history: redisConfig
|
||||
|
||||
# The compile server (the clsi) uses a SQL database to cache files and
|
||||
# meta-data. sqllite is the default, and the load is low enough that this will
|
||||
# be fine in production (we use sqllite at sharelatex.com).
|
||||
#
|
||||
# If you want to configure a different database, see the Sequelize documentation
|
||||
# for available options:
|
||||
#
|
||||
# https://github.com/sequelize/sequelize/wiki/API-Reference-Sequelize#example-usage
|
||||
#
|
||||
mysql:
|
||||
clsi:
|
||||
database: "clsi"
|
||||
username: "clsi"
|
||||
password: ""
|
||||
dialect: "sqlite"
|
||||
storage: Path.join(DATA_DIR, "db.sqlite")
|
||||
|
||||
# File storage
|
||||
# ------------
|
||||
|
||||
# ShareLaTeX can store binary files like images either locally or in Amazon
|
||||
# S3. The default is locally:
|
||||
filestore:
|
||||
backend: "fs"
|
||||
stores:
|
||||
user_files: Path.join(DATA_DIR, "user_files")
|
||||
template_files: Path.join(DATA_DIR, "template_files")
|
||||
|
||||
# To use Amazon S3 as a storage backend, comment out the above config, and
|
||||
# uncomment the following, filling in your key, secret, and bucket name:
|
||||
#
|
||||
# filestore:
|
||||
# backend: "s3"
|
||||
# stores:
|
||||
# user_files: "BUCKET_NAME"
|
||||
# s3:
|
||||
# key: "AWS_KEY"
|
||||
# secret: "AWS_SECRET"
|
||||
#
|
||||
|
||||
trackchanges:
|
||||
continueOnError: true
|
||||
|
||||
# Local disk caching
|
||||
# ------------------
|
||||
path:
|
||||
# If we ever need to write something to disk (e.g. incoming requests
|
||||
# that need processing but may be too big for memory), then write
|
||||
# them to disk here:
|
||||
dumpFolder: Path.join(TMP_DIR, "dumpFolder")
|
||||
# Where to write uploads before they are processed
|
||||
uploadFolder: Path.join(TMP_DIR, "uploads")
|
||||
# Where to write the project to disk before running LaTeX on it
|
||||
compilesDir: Path.join(DATA_DIR, "compiles")
|
||||
# Where to cache downloaded URLs for the CLSI
|
||||
clsiCacheDir: Path.join(DATA_DIR, "cache")
|
||||
|
||||
# Server Config
|
||||
# -------------
|
||||
|
||||
# Where your instance of ShareLaTeX can be found publicly. This is used
|
||||
# when emails are sent out and in generated links:
|
||||
siteUrl: siteUrl = process.env["SHARELATEX_SITE_URL"] or 'http://localhost'
|
||||
|
||||
# The name this is used to describe your ShareLaTeX Installation
|
||||
appName: process.env["SHARELATEX_APP_NAME"] or "ShareLaTeX (Community Edition)"
|
||||
|
||||
restrictInvitesToExistingAccounts: process.env["SHARELATEX_RESTRICT_INVITES_TO_EXISTING_ACCOUNTS"] == 'true'
|
||||
|
||||
nav:
|
||||
title: process.env["SHARELATEX_NAV_TITLE"] or process.env["SHARELATEX_APP_NAME"] or "ShareLaTeX Community Edition"
|
||||
|
||||
|
||||
# The email address which users will be directed to as the main point of
|
||||
# contact for this installation of ShareLaTeX.
|
||||
adminEmail: process.env["SHARELATEX_ADMIN_EMAIL"] or "placeholder@example.com"
|
||||
|
||||
# If provided, a sessionSecret is used to sign cookies so that they cannot be
|
||||
# spoofed. This is recommended.
|
||||
security:
|
||||
sessionSecret: process.env["SHARELATEX_SESSION_SECRET"] or process.env["CRYPTO_RANDOM"]
|
||||
|
||||
# These credentials are used for authenticating api requests
|
||||
# between services that may need to go over public channels
|
||||
httpAuthUsers: httpAuthUsers
|
||||
|
||||
# Should javascript assets be served minified or not.
|
||||
useMinifiedJs: true
|
||||
|
||||
# Should static assets be sent with a header to tell the browser to cache
|
||||
# them. This should be false in development where changes are being made,
|
||||
# but should be set to true in production.
|
||||
cacheStaticAssets: true
|
||||
|
||||
# If you are running ShareLaTeX over https, set this to true to send the
|
||||
# cookie with a secure flag (recommended).
|
||||
secureCookie: process.env["SHARELATEX_SECURE_COOKIE"]?
|
||||
|
||||
# If you are running ShareLaTeX behind a proxy (like Apache, Nginx, etc)
|
||||
# then set this to true to allow it to correctly detect the forwarded IP
|
||||
# address and http/https protocol information.
|
||||
|
||||
behindProxy: process.env["SHARELATEX_BEHIND_PROXY"] or false
|
||||
|
||||
i18n:
|
||||
subdomainLang:
|
||||
www: {lngCode:process.env["SHARELATEX_SITE_LANGUAGE"] or "en", url: siteUrl}
|
||||
defaultLng: process.env["SHARELATEX_SITE_LANGUAGE"] or "en"
|
||||
|
||||
apis:
|
||||
web:
|
||||
url: "http://localhost:3000"
|
||||
user: httpAuthUser
|
||||
pass: httpAuthPass
|
||||
project_history:
|
||||
enabled: false
|
||||
references:{}
|
||||
notifications:undefined
|
||||
|
||||
defaultFeatures:
|
||||
collaborators: -1
|
||||
dropbox: true
|
||||
versioning: true
|
||||
compileTimeout: 180
|
||||
compileGroup: "standard"
|
||||
trackChanges: true
|
||||
templates: true
|
||||
references: true
|
||||
|
||||
## OPTIONAL CONFIGERABLE SETTINGS
|
||||
|
||||
if process.env["SHARELATEX_LEFT_FOOTER"]?
|
||||
try
|
||||
settings.nav.left_footer = JSON.parse(process.env["SHARELATEX_LEFT_FOOTER"])
|
||||
catch e
|
||||
console.error("could not parse SHARELATEX_LEFT_FOOTER, not valid JSON")
|
||||
|
||||
if process.env["SHARELATEX_RIGHT_FOOTER"]?
|
||||
settings.nav.right_footer = process.env["SHARELATEX_RIGHT_FOOTER"]
|
||||
try
|
||||
settings.nav.right_footer = JSON.parse(process.env["SHARELATEX_RIGHT_FOOTER"])
|
||||
catch e
|
||||
console.error("could not parse SHARELATEX_RIGHT_FOOTER, not valid JSON")
|
||||
|
||||
if process.env["SHARELATEX_HEADER_IMAGE_URL"]?
|
||||
settings.nav.custom_logo = process.env["SHARELATEX_HEADER_IMAGE_URL"]
|
||||
|
||||
if process.env["SHARELATEX_HEADER_NAV_LINKS"]?
|
||||
console.error """
|
||||
# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
|
||||
#
|
||||
# WARNING: SHARELATEX_HEADER_NAV_LINKS is no longer supported
|
||||
# See https://github.com/sharelatex/sharelatex/wiki/Configuring-Headers,-Footers-&-Logo
|
||||
#
|
||||
# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
|
||||
"""
|
||||
|
||||
if process.env["SHARELATEX_HEADER_EXTRAS"]?
|
||||
try
|
||||
settings.nav.header_extras = JSON.parse(process.env["SHARELATEX_HEADER_EXTRAS"])
|
||||
catch e
|
||||
console.error("could not parse SHARELATEX_HEADER_EXTRAS, not valid JSON")
|
||||
|
||||
|
||||
|
||||
# Sending Email
|
||||
# -------------
|
||||
#
|
||||
# You must configure a mail server to be able to send invite emails from
|
||||
# ShareLaTeX. The config settings are passed to nodemailer. See the nodemailer
|
||||
# documentation for available options:
|
||||
#
|
||||
# http://www.nodemailer.com/docs/transports
|
||||
|
||||
|
||||
if process.env["SHARELATEX_EMAIL_FROM_ADDRESS"]?
|
||||
|
||||
settings.email =
|
||||
fromAddress: process.env["SHARELATEX_EMAIL_FROM_ADDRESS"]
|
||||
replyTo: process.env["SHARELATEX_EMAIL_REPLY_TO"] or ""
|
||||
driver: process.env["SHARELATEX_EMAIL_DRIVER"]
|
||||
parameters:
|
||||
#AWS Creds
|
||||
AWSAccessKeyID: process.env["SHARELATEX_EMAIL_AWS_SES_ACCESS_KEY_ID"]
|
||||
AWSSecretKey: process.env["SHARELATEX_EMAIL_AWS_SES_SECRET_KEY"]
|
||||
|
||||
#SMTP Creds
|
||||
host: process.env["SHARELATEX_EMAIL_SMTP_HOST"]
|
||||
port: process.env["SHARELATEX_EMAIL_SMTP_PORT"],
|
||||
secure: parse(process.env["SHARELATEX_EMAIL_SMTP_SECURE"])
|
||||
ignoreTLS: parse(process.env["SHARELATEX_EMAIL_SMTP_IGNORE_TLS"])
|
||||
|
||||
textEncoding: process.env["SHARELATEX_EMAIL_TEXT_ENCODING"]
|
||||
templates:
|
||||
customFooter: process.env["SHARELATEX_CUSTOM_EMAIL_FOOTER"]
|
||||
|
||||
if process.env["SHARELATEX_EMAIL_SMTP_USER"]? or process.env["SHARELATEX_EMAIL_SMTP_PASS"]?
|
||||
settings.email.parameters.auth =
|
||||
user: process.env["SHARELATEX_EMAIL_SMTP_USER"]
|
||||
pass: process.env["SHARELATEX_EMAIL_SMTP_PASS"]
|
||||
|
||||
if process.env["SHARELATEX_EMAIL_SMTP_TLS_REJECT_UNAUTH"]?
|
||||
settings.email.parameters.tls =
|
||||
rejectUnauthorized: parse(process.env["SHARELATEX_EMAIL_SMTP_TLS_REJECT_UNAUTH"])
|
||||
|
||||
|
||||
# i18n
|
||||
if process.env["SHARELATEX_LANG_DOMAIN_MAPPING"]?
|
||||
|
||||
settings.i18n.subdomainLang = parse(process.env["SHARELATEX_LANG_DOMAIN_MAPPING"])
|
||||
|
||||
# Password Settings
|
||||
# -----------
|
||||
# These restrict the passwords users can use when registering
|
||||
# opts are from http://antelle.github.io/passfield
|
||||
if process.env["SHARELATEX_PASSWORD_VALIDATION_PATTERN"] or process.env["SHARELATEX_PASSWORD_VALIDATION_MIN_LENGTH"] or process.env["SHARELATEX_PASSWORD_VALIDATION_MAX_LENGTH"]
|
||||
|
||||
settings.passwordStrengthOptions =
|
||||
pattern: process.env["SHARELATEX_PASSWORD_VALIDATION_PATTERN"] or "aA$3"
|
||||
length: {min:process.env["SHARELATEX_PASSWORD_VALIDATION_MIN_LENGTH"] or 8, max: process.env["SHARELATEX_PASSWORD_VALIDATION_MAX_LENGTH"] or 150}
|
||||
|
||||
|
||||
|
||||
|
||||
#######################
|
||||
# ShareLaTeX Server Pro
|
||||
#######################
|
||||
|
||||
if parse(process.env["SHARELATEX_IS_SERVER_PRO"]) == true
|
||||
settings.bypassPercentageRollouts = true
|
||||
settings.apis.references =
|
||||
url: "http://localhost:3040"
|
||||
|
||||
|
||||
# LDAP - SERVER PRO ONLY
|
||||
# ----------
|
||||
|
||||
if process.env["SHARELATEX_LDAP_HOST"]
|
||||
console.error """
|
||||
# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
|
||||
#
|
||||
# WARNING: The LDAP configuration format has changed in version 0.5.1
|
||||
# See https://github.com/sharelatex/sharelatex/wiki/Server-Pro:-LDAP-Config
|
||||
#
|
||||
# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
|
||||
"""
|
||||
|
||||
if process.env["SHARELATEX_LDAP_URL"]
|
||||
settings.externalAuth = true
|
||||
settings.ldap =
|
||||
emailAtt: process.env["SHARELATEX_LDAP_EMAIL_ATT"]
|
||||
nameAtt: process.env["SHARELATEX_LDAP_NAME_ATT"]
|
||||
lastNameAtt: process.env["SHARELATEX_LDAP_LAST_NAME_ATT"]
|
||||
updateUserDetailsOnLogin: process.env["SHARELATEX_LDAP_UPDATE_USER_DETAILS_ON_LOGIN"] == 'true'
|
||||
placeholder: process.env["SHARELATEX_LDAP_PLACEHOLDER"]
|
||||
server:
|
||||
url: process.env["SHARELATEX_LDAP_URL"]
|
||||
bindDn: process.env["SHARELATEX_LDAP_BIND_DN"]
|
||||
bindCredentials: process.env["SHARELATEX_LDAP_BIND_CREDENTIALS"]
|
||||
bindProperty: process.env["SHARELATEX_LDAP_BIND_PROPERTY"]
|
||||
searchBase: process.env["SHARELATEX_LDAP_SEARCH_BASE"]
|
||||
searchScope: process.env["SHARELATEX_LDAP_SEARCH_SCOPE"]
|
||||
searchFilter: process.env["SHARELATEX_LDAP_SEARCH_FILTER"]
|
||||
searchAttributes: (
|
||||
if _ldap_search_attribs = process.env["SHARELATEX_LDAP_SEARCH_ATTRIBUTES"]
|
||||
try
|
||||
JSON.parse(_ldap_search_attribs)
|
||||
catch e
|
||||
console.error "could not parse SHARELATEX_LDAP_SEARCH_ATTRIBUTES"
|
||||
else
|
||||
undefined
|
||||
)
|
||||
groupDnProperty: process.env["SHARELATEX_LDAP_GROUP_DN_PROPERTY"]
|
||||
groupSearchBase: process.env["SHARELATEX_LDAP_GROUP_SEARCH_BASE"]
|
||||
groupSearchScope: process.env["SHARELATEX_LDAP_GROUP_SEARCH_SCOPE"]
|
||||
groupSearchFilter: process.env["SHARELATEX_LDAP_GROUP_SEARCH_FILTER"]
|
||||
groupSearchAttributes: (
|
||||
if _ldap_group_search_attribs = process.env["SHARELATEX_LDAP_GROUP_SEARCH_ATTRIBUTES"]
|
||||
try
|
||||
JSON.parse(_ldap_group_search_attribs)
|
||||
catch e
|
||||
console.error "could not parse SHARELATEX_LDAP_GROUP_SEARCH_ATTRIBUTES"
|
||||
else
|
||||
undefined
|
||||
)
|
||||
cache: process.env["SHARELATEX_LDAP_CACHE"] == 'true'
|
||||
timeout: (
|
||||
if _ldap_timeout = process.env["SHARELATEX_LDAP_TIMEOUT"]
|
||||
try
|
||||
parseInt(_ldap_timeout)
|
||||
catch e
|
||||
console.error "Cannot parse SHARELATEX_LDAP_TIMEOUT"
|
||||
else
|
||||
undefined
|
||||
)
|
||||
connectTimeout: (
|
||||
if _ldap_connect_timeout = process.env["SHARELATEX_LDAP_CONNECT_TIMEOUT"]
|
||||
try
|
||||
parseInt(_ldap_connect_timeout)
|
||||
catch e
|
||||
console.error "Cannot parse SHARELATEX_LDAP_CONNECT_TIMEOUT"
|
||||
else
|
||||
undefined
|
||||
)
|
||||
|
||||
if process.env["SHARELATEX_LDAP_TLS_OPTS_CA_PATH"]
|
||||
try
|
||||
ca = JSON.parse(process.env["SHARELATEX_LDAP_TLS_OPTS_CA_PATH"])
|
||||
catch e
|
||||
console.error "could not parse SHARELATEX_LDAP_TLS_OPTS_CA_PATH, invalid JSON"
|
||||
|
||||
if typeof(ca) == 'string'
|
||||
ca_paths = [ca]
|
||||
else if typeof(ca) == 'object' && ca?.length?
|
||||
ca_paths = ca
|
||||
else
|
||||
console.error "problem parsing SHARELATEX_LDAP_TLS_OPTS_CA_PATH"
|
||||
|
||||
settings.ldap.server.tlsOptions =
|
||||
rejectUnauthorized: process.env["SHARELATEX_LDAP_TLS_OPTS_REJECT_UNAUTH"] == "true"
|
||||
ca:ca_paths # e.g.'/etc/ldap/ca_certs.pem'
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
if process.env["SHARELATEX_SAML_ENTRYPOINT"]
|
||||
# NOTE: see https://github.com/bergie/passport-saml/blob/master/README.md for docs of `server` options
|
||||
settings.externalAuth = true
|
||||
settings.saml =
|
||||
updateUserDetailsOnLogin: process.env["SHARELATEX_SAML_UPDATE_USER_DETAILS_ON_LOGIN"] == 'true'
|
||||
identityServiceName: process.env["SHARELATEX_SAML_IDENTITY_SERVICE_NAME"]
|
||||
emailField: process.env["SHARELATEX_SAML_EMAIL_FIELD"] || process.env["SHARELATEX_SAML_EMAIL_FIELD_NAME"]
|
||||
firstNameField: process.env["SHARELATEX_SAML_FIRST_NAME_FIELD"]
|
||||
lastNameField: process.env["SHARELATEX_SAML_LAST_NAME_FIELD"]
|
||||
server:
|
||||
# strings
|
||||
entryPoint: process.env["SHARELATEX_SAML_ENTRYPOINT"]
|
||||
callbackUrl: process.env["SHARELATEX_SAML_CALLBACK_URL"]
|
||||
issuer: process.env["SHARELATEX_SAML_ISSUER"]
|
||||
decryptionPvk: process.env["SHARELATEX_SAML_DECRYPTION_PVK"]
|
||||
signatureAlgorithm: process.env["SHARELATEX_SAML_SIGNATURE_ALGORITHM"]
|
||||
identifierFormat: process.env["SHARELATEX_SAML_IDENTIFIER_FORMAT"]
|
||||
attributeConsumingServiceIndex: process.env["SHARELATEX_SAML_ATTRIBUTE_CONSUMING_SERVICE_INDEX"]
|
||||
authnContext: process.env["SHARELATEX_SAML_AUTHN_CONTEXT"]
|
||||
authnRequestBinding: process.env["SHARELATEX_SAML_AUTHN_REQUEST_BINDING"]
|
||||
validateInResponseTo: process.env["SHARELATEX_SAML_VALIDATE_IN_RESPONSE_TO"]
|
||||
cacheProvider: process.env["SHARELATEX_SAML_CACHE_PROVIDER"]
|
||||
logoutUrl: process.env["SHARELATEX_SAML_LOGOUT_URL"]
|
||||
logoutCallbackUrl: process.env["SHARELATEX_SAML_LOGOUT_CALLBACK_URL"]
|
||||
disableRequestedAuthnContext: process.env["SHARELATEX_SAML_DISABLE_REQUESTED_AUTHN_CONTEXT"] == 'true'
|
||||
forceAuthn: process.env["SHARELATEX_SAML_FORCE_AUTHN"] == 'true'
|
||||
skipRequestCompression: process.env["SHARELATEX_SAML_SKIP_REQUEST_COMPRESSION"] == 'true'
|
||||
acceptedClockSkewMs: (
|
||||
if _saml_skew = process.env["SHARELATEX_SAML_ACCEPTED_CLOCK_SKEW_MS"]
|
||||
try
|
||||
parseInt(_saml_skew)
|
||||
catch e
|
||||
console.error "Cannot parse SHARELATEX_SAML_ACCEPTED_CLOCK_SKEW_MS"
|
||||
else
|
||||
undefined
|
||||
)
|
||||
requestIdExpirationPeriodMs: (
|
||||
if _saml_exiration = process.env["SHARELATEX_SAML_REQUEST_ID_EXPIRATION_PERIOD_MS"]
|
||||
try
|
||||
parseInt(_saml_expiration)
|
||||
catch e
|
||||
console.error "Cannot parse SHARELATEX_SAML_REQUEST_ID_EXPIRATION_PERIOD_MS"
|
||||
else
|
||||
undefined
|
||||
)
|
||||
additionalParams: (
|
||||
if _saml_additionalParams = process.env["SHARELATEX_SAML_ADDITIONAL_PARAMS"]
|
||||
try
|
||||
JSON.parse(_saml_additionalParams)
|
||||
catch e
|
||||
console.error "Cannot parse SHARELATEX_SAML_ADDITIONAL_PARAMS"
|
||||
else
|
||||
undefined
|
||||
)
|
||||
additionalAuthorizeParams: (
|
||||
if _saml_additionalAuthorizeParams = process.env["SHARELATEX_SAML_ADDITIONAL_AUTHORIZE_PARAMS"]
|
||||
try
|
||||
JSON.parse(_saml_additionalAuthorizeParams )
|
||||
catch e
|
||||
console.error "Cannot parse SHARELATEX_SAML_ADDITIONAL_AUTHORIZE_PARAMS"
|
||||
else
|
||||
undefined
|
||||
)
|
||||
additionalLogoutParams: (
|
||||
if _saml_additionalLogoutParams = process.env["SHARELATEX_SAML_ADDITIONAL_LOGOUT_PARAMS"]
|
||||
try
|
||||
JSON.parse(_saml_additionalLogoutParams )
|
||||
catch e
|
||||
console.error "Cannot parse SHARELATEX_SAML_ADDITIONAL_LOGOUT_PARAMS"
|
||||
else
|
||||
undefined
|
||||
)
|
||||
|
||||
# SHARELATEX_SAML_CERT cannot be empty
|
||||
# https://github.com/bergie/passport-saml/commit/f6b1c885c0717f1083c664345556b535f217c102
|
||||
if process.env["SHARELATEX_SAML_CERT"]
|
||||
settings.saml.server.cert = process.env["SHARELATEX_SAML_CERT"]
|
||||
settings.saml.server.privateCert = process.env["SHARELATEX_SAML_PRIVATE_CERT"]
|
||||
|
||||
# Compiler
|
||||
# --------
|
||||
if process.env["SANDBOXED_COMPILES"] == "true"
|
||||
settings.clsi =
|
||||
dockerRunner: true
|
||||
docker:
|
||||
image: process.env["TEX_LIVE_DOCKER_IMAGE"]
|
||||
env:
|
||||
HOME: "/tmp"
|
||||
PATH: process.env["COMPILER_PATH"] or "/usr/local/texlive/2015/bin/x86_64-linux:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
|
||||
user: "www-data"
|
||||
|
||||
if !settings.path?
|
||||
settings.path = {}
|
||||
settings.path.synctexBaseDir = () -> "/compile"
|
||||
if process.env['SANDBOXED_COMPILES_SIBLING_CONTAINERS'] == 'true'
|
||||
console.log("Using sibling containers for sandboxed compiles")
|
||||
if process.env['SANDBOXED_COMPILES_HOST_DIR']
|
||||
settings.path.sandboxedCompilesHostDir = process.env['SANDBOXED_COMPILES_HOST_DIR']
|
||||
else
|
||||
console.error('Sibling containers, but SANDBOXED_COMPILES_HOST_DIR not set')
|
||||
|
||||
|
||||
# Templates
|
||||
# ---------
|
||||
if process.env["SHARELATEX_TEMPLATES_USER_ID"]
|
||||
settings.templates =
|
||||
mountPointUrl: "/templates"
|
||||
user_id: process.env["SHARELATEX_TEMPLATES_USER_ID"]
|
||||
|
||||
settings.templateLinks = parse(process.env["SHARELATEX_NEW_PROJECT_TEMPLATE_LINKS"])
|
||||
|
||||
|
||||
# /Learn
|
||||
# -------
|
||||
if process.env["SHARELATEX_PROXY_LEARN"]?
|
||||
settings.proxyLearn = parse(process.env["SHARELATEX_PROXY_LEARN"])
|
||||
|
||||
|
||||
# /References
|
||||
# -----------
|
||||
if process.env["SHARELATEX_ELASTICSEARCH_URL"]?
|
||||
settings.references.elasticsearch =
|
||||
host: process.env["SHARELATEX_ELASTICSEARCH_URL"]
|
||||
|
||||
|
||||
# With lots of incoming and outgoing HTTP connections to different services,
|
||||
# sometimes long running, it is a good idea to increase the default number
|
||||
# of sockets that Node will hold open.
|
||||
http = require('http')
|
||||
http.globalAgent.maxSockets = 300
|
||||
https = require('https')
|
||||
https.globalAgent.maxSockets = 300
|
||||
|
||||
module.exports = settings
|
||||
|
Loading…
Reference in a new issue