auto msg

Dockerfile

@@ -22,12 +22,25 @@ COPY entrypoint.sh /app/entrypoint.sh
 # Set the entrypoint script as executable
 RUN chmod +x /app/entrypoint.sh
 
+RUN mkdir -p /var/lib/nginx/body /var/lib/nginx/fastcgi \
+             /var/lib/nginx/proxy /var/lib/nginx/scgi \
+             /var/lib/nginx/uwsgi /var/log/nginx \
+    && chown -R ${NB_UID}:${NB_GID} /var/lib/nginx /var/log/nginx /var/run /run \
+    && chmod 755 /var/lib/nginx /var/run /run
+
+# Ensure Nginx has permissions to write to log directory and PID file
+RUN touch /var/log/nginx/error.log /var/log/nginx/access.log /run/nginx.pid \
+    && chown -R ${NB_UID}:${NB_GID} /var/log/nginx /run/nginx.pi
+    
 # Set the permissions for the app directory to the existing user
 RUN chown -R ${NB_UID}:${NB_GID} /app
 
 # Switch back to the original user
 USER ${NB_UID}
 
+# Mount the secret
+RUN --mount=type=secret,id=JUPYTER_TOKEN,mode=0444,required=true
+
 # Set the working directory for the user
 WORKDIR /home/${NB_USER}/app
 

entrypoint.sh

@@ -1,7 +1,7 @@
 #!/bin/bash
 
 # Read the JupyterLab token from the HF secret
-JUPYTERLAB_TOKEN=$(cat /run/secrets/JUPYTER_TOKEN)
+#JUPYTERLAB_TOKEN=$(cat /run/secrets/JUPYTER_TOKEN)
 
 # Start JupyterLab in the background
 jupyter lab --ip=0.0.0.0 --port=${JUPYTERLAB_PORT} --no-browser --allow-root --NotebookApp.base_url=/jupyter --NotebookApp.token=${JUPYTERLAB_TOKEN} &

jupyter_config.py

@@ -1,5 +1,7 @@
+import os
+
 c.NotebookApp.ip = '0.0.0.0'
 c.NotebookApp.port = 8888
 c.NotebookApp.open_browser = False
 c.NotebookApp.allow_root = True
-c.NotebookApp.token = 'your_secret_token'
+c.NotebookApp.token = os.environ.get("JUPYTER_TOKEN")

nginx.conf

@@ -1,17 +1,42 @@
+pid /tmp/nginx.pid;
+worker_processes 1;
+
+events {
+    worker_connections 1024;
+}
+
 http {
+    include       mime.types;
+    default_type  application/octet-stream;
+
+    sendfile        on;
+    keepalive_timeout  65;
+
     server {
-        listen 7860;
-        server_name _;
+        listen       7860;
+        server_name  localhost;
 
+        # Serve static files from /app/public
         location / {
             root /app/public;
-            index index.html;
+            try_files $uri $uri/ =404;
         }
 
+        # Proxy JupyterLab to /jupyter/
         location /jupyter/ {
-            proxy_pass http://localhost:8888;
+            proxy_pass http://127.0.0.1:8888;
             proxy_set_header Host $host;
             proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+
+            # WebSocket support
+            proxy_http_version 1.1;
+            proxy_set_header Upgrade $http_upgrade;
+            proxy_set_header Connection "upgrade";
         }
+
+        error_log /tmp/nginx_error.log;
+        access_log /tmp/nginx_access.log;
     }
-}
+}