Add grist

grist/.env.asc

@@ -0,0 +1,18 @@
+-----BEGIN PGP MESSAGE-----
+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+=kEjB
+-----END PGP MESSAGE-----

grist/docker-compose.yml

@@ -0,0 +1,34 @@
+version: "2"
+
+services:
+  app:
+    image: gristlabs/grist
+    restart: always
+    volumes:
+      - grist:/persist
+      - certs:/certs
+    environment:
+      VIRTUAL_HOST: grist.dmeiburg.de
+      LETSENCRYPT_EMAIL: ${EMAIL}
+      LETSENCRYPT_HOST: grist.dmeiburg.de
+      APP_HOME_URL: https://grist.dmeiburg.de
+      GRIST_SESSION_SECRET: ${SECRET}
+      GRIST_SANDBOX_FLAVOR: gvisor
+      GRIST_SAML_IDP_UNENCRYPTED: 1
+      GRIST_SAML_SP_HOST: https://grist.dmeiburg.de
+      GRIST_SAML_IDP_LOGIN: https://sso.dmeiburg.de/application/saml/grist/sso/binding/redirect/
+      GRIST_SAML_IDP_LOGOUT: https://sso.dmeiburg.de/if/session-end/grist/
+      GRIST_SAML_IDP_CERTS: /certs/authentik.pem
+      GRIST_SAML_SP_KEY: /certs/grist_private_key.pem
+      GRIST_SAML_SP_CERT: /certs/grist_certificate.pem
+      GRIST_FORCE_LOGIN: true
+    expose: 
+        - 8484
+networks:
+  default:
+      name: nginx-proxy
+      external: true
+
+volumes:
+  grist:
+  certs: