settings.coffee 19 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633
  1. Path = require('path')
  2. # These credentials are used for authenticating api requests
  3. # between services that may need to go over public channels
  4. httpAuthUser = "sharelatex"
  5. httpAuthPass = "CRYPTO_RANDOM" # Randomly generated for you
  6. httpAuthUsers = {}
  7. httpAuthUsers[httpAuthUser] = httpAuthPass
  8. parse = (option)->
  9. if option?
  10. try
  11. opt = JSON.parse(option)
  12. return opt
  13. catch err
  14. console.error "problem parsing #{option}, invalid JSON"
  15. return undefined
  16. DATA_DIR = '/var/lib/sharelatex/data'
  17. TMP_DIR = '/var/lib/sharelatex/tmp'
  18. settings =
  19. # Databases
  20. # ---------
  21. # ShareLaTeX's main persistant data store is MongoDB (http://www.mongodb.org/)
  22. # Documentation about the URL connection string format can be found at:
  23. #
  24. # http://docs.mongodb.org/manual/reference/connection-string/
  25. #
  26. # The following works out of the box with Mongo's default settings:
  27. mongo:
  28. url : process.env["SHARELATEX_MONGO_URL"] or 'mongodb://dockerhost/sharelatex'
  29. # Redis is used in ShareLaTeX for high volume queries, like real-time
  30. # editing, and session management.
  31. #
  32. # The following config will work with Redis's default settings:
  33. redis:
  34. web: redisConfig =
  35. host: process.env["SHARELATEX_REDIS_HOST"] or "dockerhost"
  36. port: process.env["SHARELATEX_REDIS_PORT"] or "6379"
  37. password: process.env["SHARELATEX_REDIS_PASS"] or ""
  38. fairy: redisConfig
  39. # The compile server (the clsi) uses a SQL database to cache files and
  40. # meta-data. sqllite is the default, and the load is low enough that this will
  41. # be fine in production (we use sqllite at sharelatex.com).
  42. #
  43. # If you want to configure a different database, see the Sequelize documentation
  44. # for available options:
  45. #
  46. # https://github.com/sequelize/sequelize/wiki/API-Reference-Sequelize#example-usage
  47. #
  48. mysql:
  49. clsi:
  50. database: "clsi"
  51. username: "clsi"
  52. password: ""
  53. dialect: "sqlite"
  54. storage: Path.join(DATA_DIR, "db.sqlite")
  55. # File storage
  56. # ------------
  57. # ShareLaTeX can store binary files like images either locally or in Amazon
  58. # S3. The default is locally:
  59. filestore:
  60. backend: "fs"
  61. stores:
  62. user_files: Path.join(DATA_DIR, "user_files")
  63. template_files: Path.join(DATA_DIR, "template_files")
  64. # To use Amazon S3 as a storage backend, comment out the above config, and
  65. # uncomment the following, filling in your key, secret, and bucket name:
  66. #
  67. # filestore:
  68. # backend: "s3"
  69. # stores:
  70. # user_files: "BUCKET_NAME"
  71. # s3:
  72. # key: "AWS_KEY"
  73. # secret: "AWS_SECRET"
  74. #
  75. # Local disk caching
  76. # ------------------
  77. path:
  78. # If we ever need to write something to disk (e.g. incoming requests
  79. # that need processing but may be too big for memory), then write
  80. # them to disk here:
  81. dumpFolder: Path.join(TMP_DIR, "dumpFolder")
  82. # Where to write uploads before they are processed
  83. uploadFolder: Path.join(TMP_DIR, "uploads")
  84. # Where to write the project to disk before running LaTeX on it
  85. compilesDir: Path.join(DATA_DIR, "compiles")
  86. # Where to cache downloaded URLs for the CLSI
  87. clsiCacheDir: Path.join(DATA_DIR, "cache")
  88. # Server Config
  89. # -------------
  90. # Where your instance of ShareLaTeX can be found publicly. This is used
  91. # when emails are sent out and in generated links:
  92. siteUrl: siteUrl = process.env["SHARELATEX_SITE_URL"] or 'http://localhost'
  93. # The name this is used to describe your ShareLaTeX Installation
  94. appName: process.env["SHARELATEX_APP_NAME"] or "ShareLaTeX (Community Edition)"
  95. restrictInvitesToExistingAccounts: process.env["SHARELATEX_RESTRICT_INVITES_TO_EXISTING_ACCOUNTS"] == 'true'
  96. nav:
  97. title: process.env["SHARELATEX_NAV_TITLE"] or process.env["SHARELATEX_APP_NAME"] or "ShareLaTeX Community Edition"
  98. # The email address which users will be directed to as the main point of
  99. # contact for this installation of ShareLaTeX.
  100. adminEmail: process.env["SHARELATEX_ADMIN_EMAIL"] or "placeholder@example.com"
  101. # If provided, a sessionSecret is used to sign cookies so that they cannot be
  102. # spoofed. This is recommended.
  103. security:
  104. sessionSecret: process.env["SHARELATEX_SESSION_SECRET"] or "CRYPTO_RANDOM" # This was randomly generated for you
  105. # These credentials are used for authenticating api requests
  106. # between services that may need to go over public channels
  107. httpAuthUsers: httpAuthUsers
  108. # Should javascript assets be served minified or not. Note that you will
  109. # need to run `grunt compile:minify` within the web-sharelatex directory
  110. # to generate these.
  111. useMinifiedJs: true
  112. # Should static assets be sent with a header to tell the browser to cache
  113. # them. This should be false in development where changes are being made,
  114. # but should be set to true in production.
  115. cacheStaticAssets: true
  116. # If you are running ShareLaTeX over https, set this to true to send the
  117. # cookie with a secure flag (recommended).
  118. secureCookie: process.env["SHARELATEX_SECURE_COOKIE"]?
  119. # If you are running ShareLaTeX behind a proxy (like Apache, Nginx, etc)
  120. # then set this to true to allow it to correctly detect the forwarded IP
  121. # address and http/https protocol information.
  122. behindProxy: process.env["SHARELATEX_BEHIND_PROXY"] or false
  123. i18n:
  124. subdomainLang:
  125. www: {lngCode:process.env["SHARELATEX_SITE_LANGUAGE"] or "en", url: siteUrl}
  126. defaultLng: process.env["SHARELATEX_SITE_LANGUAGE"] or "en"
  127. # Spell Check Languages
  128. # ---------------------
  129. #
  130. # You must have the corresponding aspell dictionary installed to
  131. # be able to use a language. Run `grunt check:aspell` to check which
  132. # dictionaries you have installed. These should be set for the `code` for
  133. # each language.
  134. languages: [{
  135. "code":"en", "name":"English (American)"
  136. },{
  137. "code":"en_GB", "name":"English (British)"
  138. },{
  139. "code":"af", "name":"Africaans"
  140. },{
  141. "code":"am", "name":"Amharic"
  142. },{
  143. "code":"ar", "name":"Arabic"
  144. },{
  145. "code":"hy", "name":"Armenian"
  146. },{
  147. "code":"gl", "name":"Galician"
  148. },{
  149. "code":"eu", "name":"Basque"
  150. },{
  151. "code":"bn", "name":"Bengali"
  152. },{
  153. "code":"br", "name":"Breton"
  154. },{
  155. "code":"bg", "name":"Bulgarian"
  156. },{
  157. "code":"ca", "name":"Catalan"
  158. },{
  159. "code":"hr", "name":"Croatian"
  160. },{
  161. "code":"cs", "name":"Czech"
  162. },{
  163. "code":"da", "name":"Danish"
  164. },{
  165. "code":"nl", "name":"Dutch"
  166. },{
  167. "code":"eo", "name":"Esperanto"
  168. },{
  169. "code":"et", "name":"Estonian"
  170. },{
  171. "code":"fo", "name":"Faroese"
  172. },{
  173. "code":"fr", "name":"French"
  174. },{
  175. "code":"de", "name":"German"
  176. },{
  177. "code":"el", "name":"Greek"
  178. },{
  179. "code":"gu", "name":"Gujarati"
  180. },{
  181. "code":"he", "name":"Hebrew"
  182. },{
  183. "code":"hi", "name":"Hindi"
  184. },{
  185. "code":"hu", "name":"Hungarian"
  186. },{
  187. "code":"is", "name":"Icelandic"
  188. },{
  189. "code":"id", "name":"Indonesian"
  190. },{
  191. "code":"ga", "name":"Irish"
  192. },{
  193. "code":"it", "name":"Italian"
  194. },{
  195. "code":"kn", "name":"Kannada"
  196. },{
  197. "code":"kk", "name":"Kazakh"
  198. },{
  199. "code":"ku", "name":"Kurdish"
  200. },{
  201. "code":"lv", "name":"Latvian"
  202. },{
  203. "code":"lt", "name":"Lithuanian"
  204. },{
  205. "code":"ml", "name":"Malayalam"
  206. },{
  207. "code":"mr", "name":"Marathi"
  208. },{
  209. "code":"nr", "name":"Ndebele"
  210. },{
  211. "code":"ns", "name":"Northern Sotho"
  212. },{
  213. "code":"no", "name":"Norwegian"
  214. },{
  215. "code":"or", "name":"Oriya"
  216. },{
  217. "code":"fa", "name":"Persian"
  218. },{
  219. "code":"pl", "name":"Polish"
  220. },{
  221. "code":"pt_BR", "name":"Portuguese (Brazilian)"
  222. },{
  223. "code":"pt_PT", "name":"Portuguese (European)"
  224. },{
  225. "code":"pa", "name":"Punjabi"
  226. },{
  227. "code":"ro", "name":"Romanian"
  228. },{
  229. "code":"ru", "name":"Russian"
  230. },{
  231. "code":"sk", "name":"Slovak"
  232. },{
  233. "code":"sl", "name":"Slovenian"
  234. },{
  235. "code":"st", "name":"Southern Sotho"
  236. },{
  237. "code":"es", "name":"Spanish"
  238. },{
  239. "code":"ss", "name":"Swazi"
  240. },{
  241. "code":"sv", "name":"Swedish"
  242. },{
  243. "code":"tl", "name":"Tagalog"
  244. },{
  245. "code":"ta", "name":"Tamil"
  246. },{
  247. "code":"te", "name":"Telugu"
  248. },{
  249. "code":"ts", "name":"Tsonga"
  250. },{
  251. "code":"tn", "name":"Tswana"
  252. },{
  253. "code":"uk", "name":"Ukrainian"
  254. },{
  255. "code":"hsb", "name":"Upper Sorbian"
  256. },{
  257. "code":"uz", "name":"Uzbek"
  258. },{
  259. "code":"cy", "name":"Welsh"
  260. },{
  261. "code":"xh", "name":"Xhosa"
  262. },{
  263. "code":"zu", "name":"Zulu"
  264. }
  265. ]
  266. apis:
  267. web:
  268. url: "http://localhost:3000"
  269. user: httpAuthUser
  270. pass: httpAuthPass
  271. references:{}
  272. notifications:undefined
  273. defaultFeatures:
  274. collaborators: -1
  275. dropbox: true
  276. versioning: true
  277. compileTimeout: 180
  278. compileGroup: "standard"
  279. references: true
  280. templates: true
  281. ## OPTIONAL CONFIGERABLE SETTINGS
  282. if process.env["SHARELATEX_LEFT_FOOTER"]?
  283. try
  284. settings.nav.left_footer = JSON.parse(process.env["SHARELATEX_LEFT_FOOTER"])
  285. catch e
  286. console.error("could not parse SHARELATEX_LEFT_FOOTER, not valid JSON")
  287. if process.env["SHARELATEX_RIGHT_FOOTER"]?
  288. settings.nav.right_footer = process.env["SHARELATEX_RIGHT_FOOTER"]
  289. try
  290. settings.nav.right_footer = JSON.parse(process.env["SHARELATEX_RIGHT_FOOTER"])
  291. catch e
  292. console.error("could not parse SHARELATEX_RIGHT_FOOTER, not valid JSON")
  293. if process.env["SHARELATEX_HEADER_IMAGE_URL"]?
  294. settings.nav.custom_logo = process.env["SHARELATEX_HEADER_IMAGE_URL"]
  295. if process.env["SHARELATEX_HEADER_NAV_LINKS"]?
  296. console.error """
  297. # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
  298. #
  299. # WARNING: SHARELATEX_HEADER_NAV_LINKS is no longer supported
  300. # See https://github.com/sharelatex/sharelatex/wiki/Configuring-Headers,-Footers-&-Logo
  301. #
  302. # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
  303. """
  304. if process.env["SHARELATEX_HEADER_EXTRAS"]?
  305. try
  306. settings.nav.header_extras = JSON.parse(process.env["SHARELATEX_HEADER_EXTRAS"])
  307. catch e
  308. console.error("could not parse SHARELATEX_HEADER_EXTRAS, not valid JSON")
  309. # Sending Email
  310. # -------------
  311. #
  312. # You must configure a mail server to be able to send invite emails from
  313. # ShareLaTeX. The config settings are passed to nodemailer. See the nodemailer
  314. # documentation for available options:
  315. #
  316. # http://www.nodemailer.com/docs/transports
  317. if process.env["SHARELATEX_EMAIL_FROM_ADDRESS"]?
  318. settings.email =
  319. fromAddress: process.env["SHARELATEX_EMAIL_FROM_ADDRESS"]
  320. replyTo: process.env["SHARELATEX_EMAIL_REPLY_TO"] or ""
  321. parameters:
  322. #AWS Creds
  323. AWSAccessKeyID: process.env["SHARELATEX_EMAIL_AWS_SES_ACCESS_KEY_ID"]
  324. AWSSecretKey: process.env["SHARELATEX_EMAIL_AWS_SES_SECRET_KEY"]
  325. #SMTP Creds
  326. host: process.env["SHARELATEX_EMAIL_SMTP_HOST"]
  327. port: process.env["SHARELATEX_EMAIL_SMTP_PORT"],
  328. secure: parse(process.env["SHARELATEX_EMAIL_SMTP_SECURE"])
  329. ignoreTLS: parse(process.env["SHARELATEX_EMAIL_SMTP_IGNORE_TLS"])
  330. textEncoding: process.env["SHARELATEX_EMAIL_TEXT_ENCODING"]
  331. templates:
  332. customFooter: process.env["SHARELATEX_CUSTOM_EMAIL_FOOTER"]
  333. if process.env["SHARELATEX_EMAIL_SMTP_USER"]? or process.env["SHARELATEX_EMAIL_SMTP_PASS"]?
  334. settings.email.parameters.auth =
  335. user: process.env["SHARELATEX_EMAIL_SMTP_USER"]
  336. pass: process.env["SHARELATEX_EMAIL_SMTP_PASS"]
  337. if process.env["SHARELATEX_EMAIL_SMTP_TLS_REJECT_UNAUTH"]?
  338. settings.email.parameters.tls =
  339. rejectUnauthorized: parse(process.env["SHARELATEX_EMAIL_SMTP_TLS_REJECT_UNAUTH"])
  340. # i18n
  341. if process.env["SHARELATEX_LANG_DOMAIN_MAPPING"]?
  342. settings.i18n.subdomainLang = parse(process.env["SHARELATEX_LANG_DOMAIN_MAPPING"])
  343. # Password Settings
  344. # -----------
  345. # These restrict the passwords users can use when registering
  346. # opts are from http://antelle.github.io/passfield
  347. if process.env["SHARELATEX_PASSWORD_VALIDATION_PATTERN"] or process.env["SHARELATEX_PASSWORD_VALIDATION_MIN_LENGTH"] or process.env["SHARELATEX_PASSWORD_VALIDATION_MAX_LENGTH"]
  348. settings.passwordStrengthOptions =
  349. pattern: process.env["SHARELATEX_PASSWORD_VALIDATION_PATTERN"] or "aA$3"
  350. length: {min:process.env["SHARELATEX_PASSWORD_VALIDATION_MIN_LENGTH"] or 8, max: process.env["SHARELATEX_PASSWORD_VALIDATION_MAX_LENGTH"] or 150}
  351. #######################
  352. # ShareLaTeX Server Pro
  353. #######################
  354. if parse(process.env["SHARELATEX_IS_SERVER_PRO"]) == true
  355. settings.apis.references =
  356. url: "http://localhost:3040"
  357. # LDAP - SERVER PRO ONLY
  358. # ----------
  359. if process.env["SHARELATEX_LDAP_HOST"]
  360. console.error """
  361. # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
  362. #
  363. # WARNING: The LDAP configuration format has changed in version 0.5.1
  364. # See https://github.com/sharelatex/sharelatex/wiki/Server-Pro:-LDAP-Config
  365. #
  366. # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
  367. """
  368. if process.env["SHARELATEX_LDAP_URL"]
  369. settings.externalAuth = true
  370. settings.ldap =
  371. emailAtt: process.env["SHARELATEX_LDAP_EMAIL_ATT"]
  372. nameAtt: process.env["SHARELATEX_LDAP_NAME_ATT"]
  373. lastNameAtt: process.env["SHARELATEX_LDAP_LAST_NAME_ATT"]
  374. updateUserDetailsOnLogin: process.env["SHARELATEX_LDAP_UPDATE_USER_DETAILS_ON_LOGIN"] == 'true'
  375. placeholder: process.env["SHARELATEX_LDAP_PLACEHOLDER"]
  376. server:
  377. url: process.env["SHARELATEX_LDAP_URL"]
  378. bindDn: process.env["SHARELATEX_LDAP_BIND_DN"]
  379. bindCredentials: process.env["SHARELATEX_LDAP_BIND_CREDENTIALS"]
  380. bindProperty: process.env["SHARELATEX_LDAP_BIND_PROPERTY"]
  381. searchBase: process.env["SHARELATEX_LDAP_SEARCH_BASE"]
  382. searchScope: process.env["SHARELATEX_LDAP_SEARCH_SCOPE"]
  383. searchFilter: process.env["SHARELATEX_LDAP_SEARCH_FILTER"]
  384. searchAttributes: (
  385. if _ldap_search_attribs = process.env["SHARELATEX_LDAP_SEARCH_ATTRIBUTES"]
  386. try
  387. JSON.parse(_ldap_search_attribs)
  388. catch e
  389. console.error "could not parse SHARELATEX_LDAP_SEARCH_ATTRIBUTES"
  390. else
  391. undefined
  392. )
  393. groupDnProperty: process.env["SHARELATEX_LDAP_GROUP_DN_PROPERTY"]
  394. groupSearchBase: process.env["SHARELATEX_LDAP_GROUP_SEARCH_BASE"]
  395. groupSearchScope: process.env["SHARELATEX_LDAP_GROUP_SEARCH_SCOPE"]
  396. groupSearchFilter: process.env["SHARELATEX_LDAP_GROUP_SEARCH_FILTER"]
  397. groupSearchAttributes: (
  398. if _ldap_group_search_attribs = process.env["SHARELATEX_LDAP_GROUP_SEARCH_ATTRIBUTES"]
  399. try
  400. JSON.parse(_ldap_group_search_attribs)
  401. catch e
  402. console.error "could not parse SHARELATEX_LDAP_GROUP_SEARCH_ATTRIBUTES"
  403. else
  404. undefined
  405. )
  406. cache: process.env["SHARELATEX_LDAP_CACHE"] == 'true'
  407. timeout: (
  408. if _ldap_timeout = process.env["SHARELATEX_LDAP_TIMEOUT"]
  409. try
  410. parseInt(_ldap_timeout)
  411. catch e
  412. console.error "Cannot parse SHARELATEX_LDAP_TIMEOUT"
  413. else
  414. undefined
  415. )
  416. connectTimeout: (
  417. if _ldap_connect_timeout = process.env["SHARELATEX_LDAP_CONNECT_TIMEOUT"]
  418. try
  419. parseInt(_ldap_connect_timeout)
  420. catch e
  421. console.error "Cannot parse SHARELATEX_LDAP_CONNECT_TIMEOUT"
  422. else
  423. undefined
  424. )
  425. if process.env["SHARELATEX_LDAP_TLS_OPTS_CA_PATH"]
  426. try
  427. ca = JSON.parse(process.env["SHARELATEX_LDAP_TLS_OPTS_CA_PATH"])
  428. catch e
  429. console.error "could not parse SHARELATEX_LDAP_TLS_OPTS_CA_PATH, invalid JSON"
  430. if typeof(ca) == 'string'
  431. ca_paths = [ca]
  432. else if typeof(ca) == 'object' && ca?.length?
  433. ca_paths = ca
  434. else
  435. console.error "problem parsing SHARELATEX_LDAP_TLS_OPTS_CA_PATH"
  436. settings.ldap.server.tlsOptions =
  437. rejectUnauthorized: process.env["SHARELATEX_LDAP_TLS_OPTS_REJECT_UNAUTH"] == "true"
  438. ca:ca_paths # e.g.'/etc/ldap/ca_certs.pem'
  439. if process.env["SHARELATEX_SAML_ENTRYPOINT"]
  440. # NOTE: see https://github.com/bergie/passport-saml/blob/master/README.md for docs of `server` options
  441. settings.externalAuth = true
  442. settings.saml =
  443. updateUserDetailsOnLogin: process.env["SHARELATEX_SAML_UPDATE_USER_DETAILS_ON_LOGIN"] == 'true'
  444. identityServiceName: process.env["SHARELATEX_SAML_IDENTITY_SERVICE_NAME"]
  445. emailField: process.env["SHARELATEX_SAML_EMAIL_FIELD"] || process.env["SHARELATEX_SAML_EMAIL_FIELD_NAME"]
  446. firstNameField: process.env["SHARELATEX_SAML_FIRST_NAME_FIELD"]
  447. lastNameField: process.env["SHARELATEX_SAML_LAST_NAME_FIELD"]
  448. server:
  449. # strings
  450. entryPoint: process.env["SHARELATEX_SAML_ENTRYPOINT"]
  451. callbackUrl: process.env["SHARELATEX_SAML_CALLBACK_URL"]
  452. issuer: process.env["SHARELATEX_SAML_ISSUER"]
  453. cert: process.env["SHARELATEX_SAML_CERT"]
  454. privateCert: process.env["SHARELATEX_SAML_PRIVATE_CERT"]
  455. decryptionPvk: process.env["SHARELATEX_SAML_DECRYPTION_PVK"]
  456. signatureAlgorithm: process.env["SHARELATEX_SAML_SIGNATURE_ALGORITHM"]
  457. identifierFormat: process.env["SHARELATEX_SAML_IDENTIFIER_FORMAT"]
  458. attributeConsumingServiceIndex: process.env["SHARELATEX_SAML_ATTRIBUTE_CONSUMING_SERVICE_INDEX"]
  459. authnContext: process.env["SHARELATEX_SAML_AUTHN_CONTEXT"]
  460. authnRequestBinding: process.env["SHARELATEX_SAML_AUTHN_REQUEST_BINDING"]
  461. validateInResponseTo: process.env["SHARELATEX_SAML_VALIDATE_IN_RESPONSE_TO"]
  462. cacheProvider: process.env["SHARELATEX_SAML_CACHE_PROVIDER"]
  463. logoutUrl: process.env["SHARELATEX_SAML_LOGOUT_URL"]
  464. logoutCallbackUrl: process.env["SHARELATEX_SAML_LOGOUT_CALLBACK_URL"]
  465. disableRequestedAuthnContext: process.env["SHARELATEX_SAML_DISABLE_REQUESTED_AUTHN_CONTEXT"] == 'true'
  466. forceAuthn: process.env["SHARELATEX_SAML_FORCE_AUTHN"] == 'true'
  467. skipRequestCompression: process.env["SHARELATEX_SAML_SKIP_REQUEST_COMPRESSION"] == 'true'
  468. acceptedClockSkewMs: (
  469. if _saml_skew = process.env["SHARELATEX_SAML_ACCEPTED_CLOCK_SKEW_MS"]
  470. try
  471. parseInt(_saml_skew)
  472. catch e
  473. console.error "Cannot parse SHARELATEX_SAML_ACCEPTED_CLOCK_SKEW_MS"
  474. else
  475. undefined
  476. )
  477. requestIdExpirationPeriodMs: (
  478. if _saml_exiration = process.env["SHARELATEX_SAML_REQUEST_ID_EXPIRATION_PERIOD_MS"]
  479. try
  480. parseInt(_saml_expiration)
  481. catch e
  482. console.error "Cannot parse SHARELATEX_SAML_REQUEST_ID_EXPIRATION_PERIOD_MS"
  483. else
  484. undefined
  485. )
  486. additionalParams: (
  487. if _saml_additionalParams = process.env["SHARELATEX_SAML_ADDITIONAL_PARAMS"]
  488. try
  489. JSON.parse(_saml_additionalParams)
  490. catch e
  491. console.error "Cannot parse SHARELATEX_SAML_ADDITIONAL_PARAMS"
  492. else
  493. undefined
  494. )
  495. additionalAuthorizeParams: (
  496. if _saml_additionalAuthorizeParams = process.env["SHARELATEX_SAML_ADDITIONAL_AUTHORIZE_PARAMS"]
  497. try
  498. JSON.parse(_saml_additionalAuthorizeParams )
  499. catch e
  500. console.error "Cannot parse SHARELATEX_SAML_ADDITIONAL_AUTHORIZE_PARAMS"
  501. else
  502. undefined
  503. )
  504. additionalLogoutParams: (
  505. if _saml_additionalLogoutParams = process.env["SHARELATEX_SAML_ADDITIONAL_LOGOUT_PARAMS"]
  506. try
  507. JSON.parse(_saml_additionalLogoutParams )
  508. catch e
  509. console.error "Cannot parse SHARELATEX_SAML_ADDITIONAL_LOGOUT_PARAMS"
  510. else
  511. undefined
  512. )
  513. # Compiler
  514. # --------
  515. if process.env["SANDBOXED_COMPILES"] == "true"
  516. settings.clsi =
  517. commandRunner: "docker-runner-sharelatex"
  518. docker:
  519. image: process.env["TEX_LIVE_DOCKER_IMAGE"]
  520. env:
  521. HOME: "/tmp"
  522. PATH: process.env["COMPILER_PATH"] or "/usr/local/texlive/2015/bin/x86_64-linux:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
  523. user: "www-data"
  524. if !settings.path?
  525. settings.path = {}
  526. settings.path.synctexBaseDir = () -> "/compile"
  527. # Templates
  528. # ---------
  529. if process.env["SHARELATEX_TEMPLATES_USER_ID"]
  530. settings.templates =
  531. mountPointUrl: "/templates"
  532. user_id: process.env["SHARELATEX_TEMPLATES_USER_ID"]
  533. settings.templateLinks = parse(process.env["SHARELATEX_NEW_PROJECT_TEMPLATE_LINKS"])
  534. # /Learn
  535. # -------
  536. if process.env["SHARELATEX_PROXY_LEARN"]?
  537. settings.proxyLearn = parse(process.env["SHARELATEX_PROXY_LEARN"])
  538. # /References
  539. # -----------
  540. if process.env["SHARELATEX_ELASTICSEARCH_URL"]?
  541. settings.references.elasticsearch =
  542. host: process.env["SHARELATEX_ELASTICSEARCH_URL"]
  543. # With lots of incoming and outgoing HTTP connections to different services,
  544. # sometimes long running, it is a good idea to increase the default number
  545. # of sockets that Node will hold open.
  546. http = require('http')
  547. http.globalAgent.maxSockets = 300
  548. https = require('https')
  549. https.globalAgent.maxSockets = 300
  550. module.exports = settings