Differences
This shows you the differences between two versions of the page.
| Next revision | Previous revision | ||
| services:grist [2025/01/22 14:51] – created willy | services:grist [2025/03/13 14:59] (current) – [Reverse Proxy] willy | ||
|---|---|---|---|
| Line 1: | Line 1: | ||
| ====== Grist ====== | ====== Grist ====== | ||
| - | [[https:// | + | [[https:// |
| ==== Installation ==== | ==== Installation ==== | ||
| Line 23: | Line 23: | ||
| - GRIST_SESSION_SECRET=here_write_a_secret_passcode | - GRIST_SESSION_SECRET=here_write_a_secret_passcode | ||
| - GRIST_DEFAULT_EMAIL=me@mydomain.com | - GRIST_DEFAULT_EMAIL=me@mydomain.com | ||
| - | - APP_HOME_URL=https:// | + | |
| + | - GRIST_PROXY_AUTH_HEADER=Remote-Email | ||
| + | | ||
| + | - APP_DOC_URL=https: | ||
| + | - GRIST_IGNORE_SESSION=true | ||
| stdin_open: true | stdin_open: true | ||
| tty: true | tty: true | ||
| Line 34: | Line 38: | ||
| </ | </ | ||
| - | Remember to set an available port (8484)! | + | Remember to set an available port (8484)! |
| Now pull it: | Now pull it: | ||
| Line 44: | Line 48: | ||
| ==== Single Sign On ==== | ==== Single Sign On ==== | ||
| - | ... | + | Grist will happily inherit your SSO authentication from the reverse proxy, the key point are the following settings in your docker compose: |
| + | < | ||
| + | - GRIST_FORWARD_AUTH_HEADER=Remote-Email | ||
| + | - GRIST_PROXY_AUTH_HEADER=Remote-Email | ||
| + | - GRIST_IGNORE_SESSION=true | ||
| + | </ | ||
| + | If you need // | ||
| ==== Reverse Proxy ==== | ==== Reverse Proxy ==== | ||
| Line 64: | Line 74: | ||
| error_log / | error_log / | ||
| - | location / { | + | include " |
| - | proxy_pass http:// | + | |
| - | } | + | location / { |
| + | include " | ||
| + | include " | ||
| + | |||
| + | proxy_pass http:// | ||
| + | | ||
| + | proxy_set_header X-Real-IP $remote_addr; | ||
| + | proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; | ||
| + | proxy_set_header X-Forwarded-Proto $scheme; | ||
| + | proxy_set_header Upgrade $http_upgrade; | ||
| + | proxy_set_header Connection " | ||
| + | | ||
| } | } | ||
| </ | </ | ||
| + | |||
| + | This will enable Authelia SSO (see [[selfhost: | ||
| Line 89: | Line 112: | ||
| rc-service user-containers.grist start | rc-service user-containers.grist start | ||
| </ | </ | ||
| - | |||
| - | |||
| - | ==== Reset password ==== | ||
| - | |||
| - | Actual budget relies on a single password for authentication. If you need to replace it, these are the commands. | ||
| - | |||
| - | You can find your container ID with: | ||
| - | <code bash> | ||
| - | podman ps | ||
| - | </ | ||
| - | |||
| - | < | ||
| - | su - actualbuget | ||
| - | podman exec -it << | ||
| - | </ | ||
| - | |||
| - | Then type: | ||
| - | < | ||
| - | node / | ||
| - | </ | ||
| - | |||