From 879a3f64b3ceea2f9c69eb8baac7ce594f82fb71 Mon Sep 17 00:00:00 2001
From: Daniel Meiburg <key@dmeiburg.de>
Date: Wed, 15 Feb 2023 22:20:40 +0100
Subject: [PATCH] Add grist

---
 grist/.env.asc           | 18 ++++++++++++++++++
 grist/docker-compose.yml | 34 ++++++++++++++++++++++++++++++++++
 grist/enabled            |  0
 3 files changed, 52 insertions(+)
 create mode 100644 grist/.env.asc
 create mode 100644 grist/docker-compose.yml
 create mode 100644 grist/enabled

diff --git a/grist/.env.asc b/grist/.env.asc
new file mode 100644
index 0000000..090628c
--- /dev/null
+++ b/grist/.env.asc
@@ -0,0 +1,18 @@
+-----BEGIN PGP MESSAGE-----
+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+=kEjB
+-----END PGP MESSAGE-----
diff --git a/grist/docker-compose.yml b/grist/docker-compose.yml
new file mode 100644
index 0000000..4216627
--- /dev/null
+++ b/grist/docker-compose.yml
@@ -0,0 +1,34 @@
+version: "2"
+
+services:
+  app:
+    image: gristlabs/grist
+    restart: always
+    volumes:
+      - grist:/persist
+      - certs:/certs
+    environment:
+      VIRTUAL_HOST: grist.dmeiburg.de
+      LETSENCRYPT_EMAIL: ${EMAIL}
+      LETSENCRYPT_HOST: grist.dmeiburg.de
+      APP_HOME_URL: https://grist.dmeiburg.de
+      GRIST_SESSION_SECRET: ${SECRET}
+      GRIST_SANDBOX_FLAVOR: gvisor
+      GRIST_SAML_IDP_UNENCRYPTED: 1
+      GRIST_SAML_SP_HOST: https://grist.dmeiburg.de
+      GRIST_SAML_IDP_LOGIN: https://sso.dmeiburg.de/application/saml/grist/sso/binding/redirect/
+      GRIST_SAML_IDP_LOGOUT: https://sso.dmeiburg.de/if/session-end/grist/
+      GRIST_SAML_IDP_CERTS: /certs/authentik.pem
+      GRIST_SAML_SP_KEY: /certs/grist_private_key.pem
+      GRIST_SAML_SP_CERT: /certs/grist_certificate.pem
+      GRIST_FORCE_LOGIN: true
+    expose: 
+        - 8484
+networks:
+  default:
+      name: nginx-proxy
+      external: true
+
+volumes:
+  grist:
+  certs:
diff --git a/grist/enabled b/grist/enabled
new file mode 100644
index 0000000..e69de29