feat/wakatime integration- #249 plus tools/reference_stack_compose with wakapi

tools/reference_stack_compose/env.sample

@@ -0,0 +1,105 @@
+# ============================================================================
+# env.sample — template for /data_1/docker/compose/.env
+#
+# HOW TO USE:  cp env.sample .env   then fill in the <PLACEHOLDER> values.
+# .env is git-ignored and is the ONLY place where real secrets live; compose
+# injects these into the containers (no shell expansion in .env values —
+# ${VAR} references work between keys, $(cmd) does NOT).
+#
+# NOTE: some values are auto-maintained (marked below) — do not hand-edit
+# those or the change will be overwritten on the next up.
+#
+# THIS FILE CONTAINS NO SECRETS (it is committed). Never copy real values
+# from .env into here.
+# ============================================================================
+
+# Image versions
+OVERLEAF_VERSION=ext-ce-v6.3.1
+MONGO_VERSION=9.0
+REDIS_VERSION=8.10-alpine
+GIT_BRIDE_VERSION=6.3.1
+
+# Global
+# You need here the correct path (the compose.yaml is in /docker/compose_cep/overleaf)
+COMPOSE_DIRECTORY=/data_1/docker/compose
+TEX_LIVE_REPO=git.fb1.uni-bremen.de/davrot
+OVERLEAF_LEFT_FOOTER='[]'
+OVERLEAF_LOGIN_SUPPORT_TEXT="<img src=\"ub/logo.svg\" height=\"250\"></br><a href=\"https://sso.fb1.uni-bremen.de\"> University of Bremen Overleaf Wiki </a>"
+
+
+COMPILES_HOST_DIR=${COMPOSE_DIRECTORY}/overleaf/data/data/compiles
+COMPILES_HOST_DIR_CACHE=${COMPOSE_DIRECTORY}/overleaf/data/data/cache
+CONVERSION_SANDBOX_HOST_DIR=${COMPOSE_DIRECTORY}/overleaf/data/tmp/conversions
+OVERLEAF_OIDC_IS_ADMIN_FIELD_VALUE=davrot@uni-bremen.de
+
+# Nginx SSL
+SSL_KEY_FILE=/etc/letsencrypt/live/psintern.neuro.uni-bremen.de/privkey.pem
+SSL_CERT_FILE=/etc/letsencrypt/live/psintern.neuro.uni-bremen.de/fullchain.pem
+
+#S3 Buckets
+# openssl rand -base64 30 | tr -dc 'a-zA-Z0-9' | head -c 20; echo
+AWS_ACCESS_KEY_ID=<AWS_ACCESS_KEY_ID>
+# openssl rand -base64 60 | tr -dc 'a-zA-Z0-9' | head -c 40; echo
+AWS_SECRET_ACCESS_KEY=<AWS_SECRET_ACCESS_KEY>
+
+# Zotero
+# (credentials from your Zotero account: Settings -> Advanced -> Credentials)
+ZOTERO_CLIENT_KEY=<ZOTERO_CLIENT_KEY>
+ZOTERO_CLIENT_SECRET=<ZOTERO_CLIENT_SECRET>
+
+# Github
+# (from your GitHub App settings)
+GITHUB_SYNC_CLIENT_ID=<GITHUB_SYNC_CLIENT_ID>
+GITHUB_SYNC_CLIENT_SECRET=<GITHUB_SYNC_CLIENT_SECRET>
+
+# openssl rand -hex 32; echo
+OVERLEAF_INVITE_TOKEN_SECRET=<OVERLEAF_INVITE_TOKEN_SECRET>
+
+# Keycloak OpenID Connect Configuration
+OVERLEAF_OIDC_ISSUER=https://sso.fb1.uni-bremen.de/sso/realms/master
+# (from your SSO realm / client registration)
+OVERLEAF_OIDC_CLIENT_ID=<OVERLEAF_OIDC_CLIENT_ID>
+OVERLEAF_OIDC_CLIENT_SECRET=<OVERLEAF_OIDC_CLIENT_SECRET>
+OVERLEAF_OIDC_IDENTITY_SERVICE_NAME='Log in with SSO FB1 Uni Bremen'
+
+# eMail Account Configuration
+# (SMTP password for the user in OVERLEAF_EMAIL_SMTP_USER)
+OVERLEAF_EMAIL_PASSWORD=<OVERLEAF_EMAIL_PASSWORD>
+OVERLEAF_EMAIL_FROM_ADDRESS=overleaf@uni-bremen.de
+OVERLEAF_EMAIL_SMTP_HOST=smtp.uni-bremen.de
+OVERLEAF_EMAIL_SMTP_PORT=465
+OVERLEAF_EMAIL_SMTP_SECURE=true
+OVERLEAF_EMAIL_SMTP_USER=overleaf
+OVERLEAF_EMAIL_SMTP_IGNORE_TLS=false
+
+# Other Overleaf Configurations Configuration
+OVERLEAF_SITE_URL=https://psintern.neuro.uni-bremen.de
+OVERLEAF_ADMIN_EMAIL=overleaf@uni-bremen.de
+OVERLEAF_APP_NAME="University of Bremen -- Overleaf"
+OVERLEAF_NAV_TITLE="University of Bremen -- Overleaf"
+OVERLEAF_CUSTOM_EMAIL_FOOTER="University of Bremen -- Overleaf"
+
+##########
+# Wakapi #
+##########
+
+# openssl rand -base64 30 | tr -dc "a-zA-Z0-9" | head -c 24; echo
+PG_PASSWORD=<PG_PASSWORD>
+
+# HOST port for the wakapi web UI + API (3000 by convention; use 3001 if taken)
+WAKA_API_PORT=3000
+
+
+# image pins (bump + autoupdate on upgrade)
+WAKA_API_IMAGE=ghcr.io/muety/wakapi:2.18.2
+POSTGRES_IMAGE=postgres:18-alpine
+PROBE_IMAGE=busybox:1.36
+
+# overleaf container IP on this network (WAKAPI_TRUST_REVERSE_PROXY_IPS)
+# — AUTO-MAINTAINED: up.sh / up_wakapi.sh rewrite this line from
+#   `docker inspect overleaf` on every (re)start-adjacent run. Leave empty:
+OVERLEAF_IP=
+
+# wakapi SMTP implicit TLS (smtp.uni-bremen.de:465)
+WAKAPI_MAIL_SMTP_TLS=true
+