Upload folder using huggingface_hub

.gitattributes

@@ -25,7 +25,6 @@
 *.safetensors filter=lfs diff=lfs merge=lfs -text
 saved_model/**/* filter=lfs diff=lfs merge=lfs -text
 *.tar.* filter=lfs diff=lfs merge=lfs -text
-*.tar filter=lfs diff=lfs merge=lfs -text
 *.tflite filter=lfs diff=lfs merge=lfs -text
 *.tgz filter=lfs diff=lfs merge=lfs -text
 *.wasm filter=lfs diff=lfs merge=lfs -text

Dockerfile

@@ -1,47 +1,105 @@
-# Minimal n8n Dockerfile for Hugging Face Space
-FROM ubuntu:22.04
+FROM nvidia/cuda:12.5.1-cudnn-devel-ubuntu20.04
 
-ARG DEBIAN_FRONTEND=noninteractive
+ENV DEBIAN_FRONTEND=noninteractive \
+	TZ=Europe/Paris
 
-RUN apt-get update && apt-get install -y curl wget gnupg sudo procps net-tools ca-certificates postgresql postgresql-contrib zstd && rm -rf /var/lib/apt/lists/*
+# Remove any third-party apt sources to avoid issues with expiring keys.
+# Install some basic utilities
+RUN rm -f /etc/apt/sources.list.d/*.list && \
+    apt-get update && apt-get install -y --no-install-recommends \
+    curl \
+    ca-certificates \
+    sudo \
+    git \
+    wget \
+    procps \
+    git-lfs \
+    zip \
+    unzip \
+    htop \
+    vim \
+    nano \
+    bzip2 \
+    libx11-6 \
+    build-essential \
+    libsndfile-dev \
+    software-properties-common \
+ && rm -rf /var/lib/apt/lists/*
 
-RUN curl -fsSL https://deb.nodesource.com/setup_20.x | bash - && apt-get install -y nodejs && rm -rf /var/lib/apt/lists/*
+RUN add-apt-repository ppa:flexiondotorg/nvtop && \
+    apt-get upgrade -y && \
+    apt-get install -y --no-install-recommends nvtop
 
-RUN npm install -g n8n
+RUN curl -sL https://deb.nodesource.com/setup_21.x  | bash - && \
+    apt-get install -y nodejs && \
+    npm install -g configurable-http-proxy
 
-ARG QDRANT_VERSION=v1.9.2
-RUN wget "https://github.com/qdrant/qdrant/releases/download/${QDRANT_VERSION}/qdrant-x86_64-unknown-linux-gnu.tar.gz" -O qdrant.tar.gz && tar -xzf qdrant.tar.gz && mv qdrant /usr/local/bin/qdrant && rm qdrant.tar.gz && mkdir -p /qdrant/storage && mkdir -p /qdrant/config
-COPY qdrant_config.yaml /qdrant/config/config.yaml
+# Create a working directory
+WORKDIR /app
 
-RUN curl -fsSL https://ollama.com/install.sh | sh
+# Create a non-root user and switch to it
+RUN adduser --disabled-password --gecos '' --shell /bin/bash user \
+ && chown -R user:user /app
+RUN echo "user ALL=(ALL) NOPASSWD:ALL" > /etc/sudoers.d/90-user
+USER user
 
-RUN useradd -m -s /bin/bash n8nuser
-RUN mkdir -p /home/n8nuser/.n8n /data/shared /home/n8nuser/.ollama /var/run/postgresql
-RUN chown -R n8nuser:n8nuser /home/n8nuser /data/shared /qdrant /var/run/postgresql
+# All users can use /home/user as their home directory
+ENV HOME=/home/user
+RUN mkdir $HOME/.cache $HOME/.config \
+ && chmod -R 777 $HOME
 
-# Environment variables - n8n will use these for OAuth callback validation
-ENV N8N_PORT="5678"
-ENV N8N_URL="https://n8n-clickup-oauth-proxy.vercel.app/"
-ENV N8N_PROTOCOL="https"
-ENV N8N_HOST="n8n-clickup-oauth-proxy.vercel.app"
-ENV N8N_EDITOR_BASE_URL="https://n8n-clickup-oauth-proxy.vercel.app/"
-ENV WEBHOOK_URL="https://n8n-clickup-oauth-proxy.vercel.app/"
-ENV N8N_TRUST_PROXY="true"
-ENV NODE_ENV="production"
-ENV DB_TYPE="postgresdb"
-ENV DB_POSTGRESDB_HOST="localhost"
-ENV DB_POSTGRESDB_PORT="5432"
-ENV DB_POSTGRESDB_DATABASE="n8n"
-ENV DB_POSTGRESDB_USER="n8n"
-ENV OLLAMA_HOST="0.0.0.0:11434"
+# Set up the Conda environment
+ENV CONDA_AUTO_UPDATE_CONDA=false \
+    PATH=$HOME/miniconda/bin:$PATH
+RUN curl -sLo ~/miniconda.sh https://repo.continuum.io/miniconda/Miniconda3-py39_4.10.3-Linux-x86_64.sh \
+ && chmod +x ~/miniconda.sh \
+ && ~/miniconda.sh -b -p ~/miniconda \
+ && rm ~/miniconda.sh \
+ && conda clean -ya
 
-COPY start.sh /start.sh
-RUN chmod +x /start.sh
+WORKDIR $HOME/app
 
-EXPOSE 5678
-EXPOSE 11434
-EXPOSE 6333
-EXPOSE 5432
+#######################################
+# Start root user section
+#######################################
 
 USER root
-ENTRYPOINT ["/start.sh"]
+
+# User Debian packages
+## Security warning : Potential user code executed as root (build time)
+RUN --mount=target=/root/packages.txt,source=packages.txt \
+    apt-get update && \
+    xargs -r -a /root/packages.txt apt-get install -y --no-install-recommends \
+    && rm -rf /var/lib/apt/lists/*
+
+RUN --mount=target=/root/on_startup.sh,source=on_startup.sh,readwrite \
+	bash /root/on_startup.sh
+
+RUN mkdir /data && chown user:user /data
+
+#######################################
+# End root user section
+#######################################
+
+USER user
+
+# Python packages
+RUN --mount=target=requirements.txt,source=requirements.txt \
+    pip install --no-cache-dir --upgrade -r requirements.txt
+
+# Copy the current directory contents into the container at $HOME/app setting the owner to the user
+COPY --chown=user . $HOME/app
+
+RUN chmod +x start_server.sh
+
+COPY --chown=user login.html /home/user/miniconda/lib/python3.9/site-packages/jupyter_server/templates/login.html
+
+ENV PYTHONUNBUFFERED=1 \
+	GRADIO_ALLOW_FLAGGING=never \
+	GRADIO_NUM_PORTS=1 \
+	GRADIO_SERVER_NAME=0.0.0.0 \
+	GRADIO_THEME=huggingface \
+	SYSTEM=spaces \
+	SHELL=/bin/bash
+
+CMD ["./start_server.sh"]

README.md

@@ -1,76 +1,13 @@
 ---
-title: n8n Self-Hosted AI Starter Kit
-emoji: 🚀
-colorFrom: green
-colorTo: blue
+title: WebvoyagerResults
+emoji: 💻🐳
+colorFrom: gray
+colorTo: green
 sdk: docker
-app_port: 5678
-pinned: true
-# Add hardware requests if needed, e.g. for Ollama with larger models
-# hardware: cpu-upgrade # or gpu-small / gpu-a10g-small etc.
-# For GPU, Ollama should pick it up if drivers are compatible.
-# This Dockerfile is built for CPU by default for wider compatibility.
-persistent_storage:
-  # Request persistent storage. Adjust size as needed for models, db, etc.
-  # n8n data, postgres db, qdrant vectors, ollama models
-  # Example: 10Gi for models and data
-  data:
-    type: "disk"
-    size: 10 # GiB
-    mount_path: "/data" # This is where it will be mounted in the container
+pinned: false
+tags:
+- jupyterlab
+suggested_storage: small
 ---
 
-# n8n Self-Hosted AI Starter Kit on Hugging Face Spaces
-
-This Space deploys the [n8n Self-Hosted AI Starter Kit](https://github.com/n8n-io/self-hosted-ai-starter-kit) in a single container environment. It includes:
-
-*   **n8n**: Low-code automation platform.
-*   **Ollama**: Run local LLMs.
-*   **Qdrant**: Vector database.
-*   **PostgreSQL**: Database for n8n.
-
-## Setup
-
-1.  **Secrets**:
-    Before this Space can run correctly, you **MUST** configure the following secrets in your Space settings:
-    *   `N8N_ENCRYPTION_KEY`: A long, random string for encrypting sensitive n8n data.
-        *   Generate one with: `openssl rand -hex 32`
-    *   `DB_POSTGRESDB_PASSWORD`: Password for the PostgreSQL `n8n` user and database.
-        *   Choose a strong password.
-
-2.  **Wait for Build**: The first time, the Docker image will build, and services will start. This can take a few minutes. The `start.sh` script will also pull a default Ollama model (`llama3.1:8b` or similar small model), which can take time.
-
-3.  **Access n8n**: Once the Space is running, click the "Open app" button or use the direct URL to access n8n on port 5678.
-
-## How to Use
-
-1.  **n8n First-Time Setup**: When you first access n8n, you'll be prompted to create an owner account.
-2.  **Local Services**:
-    *   **Ollama**: Running on `http://localhost:11434` (internally within the Space). The default model (`llama3.1:8b` or similar) should be available. You can use the "Ollama" node in n8n and set its "Base URL" to `http://localhost:11434`.
-    *   **Qdrant**: Running on `http://localhost:6333` (internally). Use the "Qdrant" node in n8n and set its "URL" to `http://localhost:6333`.
-    *   **PostgreSQL**: n8n is already configured to use the internal PostgreSQL instance.
-3.  **Persistent Storage**:
-    *   n8n workflows and credentials are stored in `/data/.n8n`.
-    *   PostgreSQL data is stored in `/data/postgres`.
-    *   Qdrant vector data is stored in `/data/qdrant_storage`.
-    *   Ollama models are stored in `/data/.ollama`.
-    This data will persist across Space restarts if you've configured persistent storage for `/data`.
-
-4.  **Accessing Local Files in n8n**:
-    The original starter kit mentions a `/data/shared` directory for n8n to access local files. This directory is available in this Space. When using n8n nodes like "Read/Write Files from Disk", use paths like `/data/shared/yourfile.txt`.
-
-## Important Notes & Limitations
-
-*   **Single Container**: All services (n8n, Postgres, Qdrant, Ollama) run in a single Docker container. This is less robust than a multi-container `docker-compose` setup but necessary for this Hugging Face Space deployment model.
-*   **Resource Usage**: Running all these services, especially Ollama with LLMs, can be resource-intensive. Ensure your Space has adequate CPU, RAM, and storage. Consider upgrading hardware if performance is slow.
-*   **Ollama Model Management**:
-    *   A default model is pulled on startup.
-    *   To pull other models, you would typically exec into the container (possible via `hf cli` or other tools, but not directly via the Space UI) and run `ollama pull <modelname>`. Alternatively, some n8n Ollama nodes might trigger a download if the model isn't present (behavior may vary).
-*   **Initial Startup Time**: The first startup might be slow due to database initialization and model download. Check the logs for progress.
-*   **WEBHOOK_URL / N8N_EDITOR_BASE_URL**: These are automatically configured by the `start.sh` script to use the Hugging Face Space URL.
-
-## Troubleshooting
-
-*   Check the Space logs for any errors during startup or operation.
-*   Ensure secrets are correctly set.
-*   If n8n is inaccessible, one of the backend services might have failed to start.
+Check out the configuration reference at https://huggingface.co/docs/hub/spaces-config-reference

login.html

@@ -0,0 +1,68 @@
+{% extends "page.html" %}
+
+
+{% block stylesheet %}
+{% endblock %}
+
+{% block site %}
+
+<div id="jupyter-main-app" class="container">
+    
+    <img src="https://huggingface.co/front/assets/huggingface_logo-noborder.svg" alt="Hugging Face Logo">
+    <h4>Welcome to JupyterLab</h4>
+    
+    <h5>The default token is <span style="color:orange;">huggingface</span></h5>
+  
+    {% if login_available %}
+    {# login_available means password-login is allowed. Show the form. #}
+    <div class="row">
+        <div class="navbar col-sm-8">
+            <div class="navbar-inner">
+                <div class="container">
+                    <div class="center-nav">
+                        <form action="{{base_url}}login?next={{next}}" method="post" class="navbar-form pull-left">
+                            {{ xsrf_form_html() | safe }}
+                            {% if token_available %}
+                            <label for="password_input"><strong>{% trans %}Jupyter token <span title="This is the secret you set up when deploying your JupyterLab space">ⓘ</span> {% endtrans
+                                    %}</strong></label>
+                            {% else %}
+                            <label for="password_input"><strong>{% trans %}Jupyter password:{% endtrans %}</strong></label>
+                            {% endif %}
+                            <input type="password" name="password" id="password_input" class="form-control">
+                            <button type="submit" class="btn btn-default" id="login_submit">{% trans %}Log in{% endtrans
+                                %}</button>
+                        </form>
+                    </div>
+                </div>
+            </div>
+        </div>
+    </div>
+    {% else %}
+    <p>{% trans %}No login available, you shouldn't be seeing this page.{% endtrans %}</p>
+    {% endif %}
+
+      <h5>If you don't have the credentials for this Jupyter space, <a target="_blank" href="https://huggingface.co/spaces/SpacesExamples/jupyterlab?duplicate=true">create your own.</a></h5>
+    <br>
+  
+    <p>This template was created by <a href="https://twitter.com/camenduru" target="_blank" >camenduru</a> and <a href="https://huggingface.co/nateraw" target="_blank" >nateraw</a>, with contributions of <a href="https://huggingface.co/osanseviero" target="_blank" >osanseviero</a> and <a href="https://huggingface.co/azzr" target="_blank" >azzr</a> </p>
+    {% if message %}
+    <div class="row">
+        {% for key in message %}
+        <div class="message {{key}}">
+            {{message[key]}}
+        </div>
+        {% endfor %}
+    </div>
+    {% endif %}
+    {% if token_available %}
+    {% block token_message %}
+    
+    {% endblock token_message %}
+    {% endif %}
+</div>
+
+{% endblock %}
+
+
+{% block script %}
+{% endblock %}

n8n/.gitattributes

@@ -0,0 +1,35 @@
+*.7z filter=lfs diff=lfs merge=lfs -text
+*.arrow filter=lfs diff=lfs merge=lfs -text
+*.bin filter=lfs diff=lfs merge=lfs -text
+*.bz2 filter=lfs diff=lfs merge=lfs -text
+*.ckpt filter=lfs diff=lfs merge=lfs -text
+*.ftz filter=lfs diff=lfs merge=lfs -text
+*.gz filter=lfs diff=lfs merge=lfs -text
+*.h5 filter=lfs diff=lfs merge=lfs -text
+*.joblib filter=lfs diff=lfs merge=lfs -text
+*.lfs.* filter=lfs diff=lfs merge=lfs -text
+*.mlmodel filter=lfs diff=lfs merge=lfs -text
+*.model filter=lfs diff=lfs merge=lfs -text
+*.msgpack filter=lfs diff=lfs merge=lfs -text
+*.npy filter=lfs diff=lfs merge=lfs -text
+*.npz filter=lfs diff=lfs merge=lfs -text
+*.onnx filter=lfs diff=lfs merge=lfs -text
+*.ot filter=lfs diff=lfs merge=lfs -text
+*.parquet filter=lfs diff=lfs merge=lfs -text
+*.pb filter=lfs diff=lfs merge=lfs -text
+*.pickle filter=lfs diff=lfs merge=lfs -text
+*.pkl filter=lfs diff=lfs merge=lfs -text
+*.pt filter=lfs diff=lfs merge=lfs -text
+*.pth filter=lfs diff=lfs merge=lfs -text
+*.rar filter=lfs diff=lfs merge=lfs -text
+*.safetensors filter=lfs diff=lfs merge=lfs -text
+saved_model/**/* filter=lfs diff=lfs merge=lfs -text
+*.tar.* filter=lfs diff=lfs merge=lfs -text
+*.tar filter=lfs diff=lfs merge=lfs -text
+*.tflite filter=lfs diff=lfs merge=lfs -text
+*.tgz filter=lfs diff=lfs merge=lfs -text
+*.wasm filter=lfs diff=lfs merge=lfs -text
+*.xz filter=lfs diff=lfs merge=lfs -text
+*.zip filter=lfs diff=lfs merge=lfs -text
+*.zst filter=lfs diff=lfs merge=lfs -text
+*tfevents* filter=lfs diff=lfs merge=lfs -text

n8n/Dockerfile

@@ -0,0 +1,47 @@
+# Minimal n8n Dockerfile for Hugging Face Space
+FROM ubuntu:22.04
+
+ARG DEBIAN_FRONTEND=noninteractive
+
+RUN apt-get update && apt-get install -y curl wget gnupg sudo procps net-tools ca-certificates postgresql postgresql-contrib zstd && rm -rf /var/lib/apt/lists/*
+
+RUN curl -fsSL https://deb.nodesource.com/setup_20.x | bash - && apt-get install -y nodejs && rm -rf /var/lib/apt/lists/*
+
+RUN npm install -g n8n
+
+ARG QDRANT_VERSION=v1.9.2
+RUN wget "https://github.com/qdrant/qdrant/releases/download/${QDRANT_VERSION}/qdrant-x86_64-unknown-linux-gnu.tar.gz" -O qdrant.tar.gz && tar -xzf qdrant.tar.gz && mv qdrant /usr/local/bin/qdrant && rm qdrant.tar.gz && mkdir -p /qdrant/storage && mkdir -p /qdrant/config
+COPY qdrant_config.yaml /qdrant/config/config.yaml
+
+RUN curl -fsSL https://ollama.com/install.sh | sh
+
+RUN useradd -m -s /bin/bash n8nuser
+RUN mkdir -p /home/n8nuser/.n8n /data/shared /home/n8nuser/.ollama /var/run/postgresql
+RUN chown -R n8nuser:n8nuser /home/n8nuser /data/shared /qdrant /var/run/postgresql
+
+# Environment variables - n8n will use these for OAuth callback validation
+ENV N8N_PORT="5678"
+ENV N8N_URL="https://n8n-clickup-oauth-proxy.vercel.app/"
+ENV N8N_PROTOCOL="https"
+ENV N8N_HOST="n8n-clickup-oauth-proxy.vercel.app"
+ENV N8N_EDITOR_BASE_URL="https://n8n-clickup-oauth-proxy.vercel.app/"
+ENV WEBHOOK_URL="https://n8n-clickup-oauth-proxy.vercel.app/"
+ENV N8N_TRUST_PROXY="true"
+ENV NODE_ENV="production"
+ENV DB_TYPE="postgresdb"
+ENV DB_POSTGRESDB_HOST="localhost"
+ENV DB_POSTGRESDB_PORT="5432"
+ENV DB_POSTGRESDB_DATABASE="n8n"
+ENV DB_POSTGRESDB_USER="n8n"
+ENV OLLAMA_HOST="0.0.0.0:11434"
+
+COPY start.sh /start.sh
+RUN chmod +x /start.sh
+
+EXPOSE 5678
+EXPOSE 11434
+EXPOSE 6333
+EXPOSE 5432
+
+USER root
+ENTRYPOINT ["/start.sh"]

n8n/README.md

@@ -0,0 +1,76 @@
+---
+title: n8n Self-Hosted AI Starter Kit
+emoji: 🚀
+colorFrom: green
+colorTo: blue
+sdk: docker
+app_port: 5678
+pinned: true
+# Add hardware requests if needed, e.g. for Ollama with larger models
+# hardware: cpu-upgrade # or gpu-small / gpu-a10g-small etc.
+# For GPU, Ollama should pick it up if drivers are compatible.
+# This Dockerfile is built for CPU by default for wider compatibility.
+persistent_storage:
+  # Request persistent storage. Adjust size as needed for models, db, etc.
+  # n8n data, postgres db, qdrant vectors, ollama models
+  # Example: 10Gi for models and data
+  data:
+    type: "disk"
+    size: 10 # GiB
+    mount_path: "/data" # This is where it will be mounted in the container
+---
+
+# n8n Self-Hosted AI Starter Kit on Hugging Face Spaces
+
+This Space deploys the [n8n Self-Hosted AI Starter Kit](https://github.com/n8n-io/self-hosted-ai-starter-kit) in a single container environment. It includes:
+
+*   **n8n**: Low-code automation platform.
+*   **Ollama**: Run local LLMs.
+*   **Qdrant**: Vector database.
+*   **PostgreSQL**: Database for n8n.
+
+## Setup
+
+1.  **Secrets**:
+    Before this Space can run correctly, you **MUST** configure the following secrets in your Space settings:
+    *   `N8N_ENCRYPTION_KEY`: A long, random string for encrypting sensitive n8n data.
+        *   Generate one with: `openssl rand -hex 32`
+    *   `DB_POSTGRESDB_PASSWORD`: Password for the PostgreSQL `n8n` user and database.
+        *   Choose a strong password.
+
+2.  **Wait for Build**: The first time, the Docker image will build, and services will start. This can take a few minutes. The `start.sh` script will also pull a default Ollama model (`llama3.1:8b` or similar small model), which can take time.
+
+3.  **Access n8n**: Once the Space is running, click the "Open app" button or use the direct URL to access n8n on port 5678.
+
+## How to Use
+
+1.  **n8n First-Time Setup**: When you first access n8n, you'll be prompted to create an owner account.
+2.  **Local Services**:
+    *   **Ollama**: Running on `http://localhost:11434` (internally within the Space). The default model (`llama3.1:8b` or similar) should be available. You can use the "Ollama" node in n8n and set its "Base URL" to `http://localhost:11434`.
+    *   **Qdrant**: Running on `http://localhost:6333` (internally). Use the "Qdrant" node in n8n and set its "URL" to `http://localhost:6333`.
+    *   **PostgreSQL**: n8n is already configured to use the internal PostgreSQL instance.
+3.  **Persistent Storage**:
+    *   n8n workflows and credentials are stored in `/data/.n8n`.
+    *   PostgreSQL data is stored in `/data/postgres`.
+    *   Qdrant vector data is stored in `/data/qdrant_storage`.
+    *   Ollama models are stored in `/data/.ollama`.
+    This data will persist across Space restarts if you've configured persistent storage for `/data`.
+
+4.  **Accessing Local Files in n8n**:
+    The original starter kit mentions a `/data/shared` directory for n8n to access local files. This directory is available in this Space. When using n8n nodes like "Read/Write Files from Disk", use paths like `/data/shared/yourfile.txt`.
+
+## Important Notes & Limitations
+
+*   **Single Container**: All services (n8n, Postgres, Qdrant, Ollama) run in a single Docker container. This is less robust than a multi-container `docker-compose` setup but necessary for this Hugging Face Space deployment model.
+*   **Resource Usage**: Running all these services, especially Ollama with LLMs, can be resource-intensive. Ensure your Space has adequate CPU, RAM, and storage. Consider upgrading hardware if performance is slow.
+*   **Ollama Model Management**:
+    *   A default model is pulled on startup.
+    *   To pull other models, you would typically exec into the container (possible via `hf cli` or other tools, but not directly via the Space UI) and run `ollama pull <modelname>`. Alternatively, some n8n Ollama nodes might trigger a download if the model isn't present (behavior may vary).
+*   **Initial Startup Time**: The first startup might be slow due to database initialization and model download. Check the logs for progress.
+*   **WEBHOOK_URL / N8N_EDITOR_BASE_URL**: These are automatically configured by the `start.sh` script to use the Hugging Face Space URL.
+
+## Troubleshooting
+
+*   Check the Space logs for any errors during startup or operation.
+*   Ensure secrets are correctly set.
+*   If n8n is inaccessible, one of the backend services might have failed to start.

n8n/qdrant_config.yaml

@@ -0,0 +1,24 @@
+# Basic Qdrant configuration
+storage:
+  # Storage path for segment snapshots
+  # actual data will be in /qdrant/storage/
+  storage_path: /qdrant/storage 
+  # Path to snapshot, used for backup and recovery
+  snapshots_path: /qdrant/snapshots 
+  # If true - point value requests are served from RocksDB, default: false
+  # If false - point values are served from RAM. Significant speedup for small vectors
+  on_disk_payload: true 
+  # Path to WAL, default: "{storage_path}/wal"
+  # wal:
+  #   wal_capacity_mb: 32
+  #   wal_segments_ahead: 0
+
+# Service configuration
+service:
+  host: 0.0.0.0 # Listen on all interfaces
+  http_port: 6333
+  grpc_port: 6334
+  # Max number of concurrent requests, default 2 * N_CPU
+  # max_request_size_mb: 32 # Max total size of POST body in MB, default 32MB
+  # enable_cors: true # default
+  # enable_tls: false # default

n8n/start.sh

@@ -0,0 +1,201 @@
+#!/bin/bash
+set -e # Exit immediately if a command exits with a non-zero status.
+
+echo "--- Script Start ---"
+echo "Running as user: $(whoami) (UID: $(id -u), GID: $(id -g))"
+
+# --- Persistent Data Setup ---
+N8N_DATA_DIR="/data/.n8n"
+POSTGRES_DATA_DIR="/data/postgres"
+QDRANT_DATA_DIR="/data/qdrant_storage"
+OLLAMA_MODELS_DIR="/data/.ollama"
+
+echo "Ensuring application data directories exist..."
+
+# Create directories if they don't exist (may need root permissions)
+if [ ! -d "/data" ]; then
+    echo "Creating /data directory..."
+    mkdir -p /data
+fi
+
+# Try to create subdirectories, if we fail (permission denied), assume we're not root
+# and the directories should already exist with correct permissions from HF
+if ! mkdir -p "$N8N_DATA_DIR" "$POSTGRES_DATA_DIR" "$QDRANT_DATA_DIR" "$OLLAMA_MODELS_DIR" 2>/dev/null; then
+    echo "Note: Could not create directories (may already exist or permission denied). Continuing..."
+fi
+
+# Change ownership to n8nuser if we have permissions
+if [ "$(id -u)" -eq 0 ]; then
+    echo "Running as root. Changing ownership of /data to n8nuser..."
+    chown -R n8nuser:n8nuser /data
+    chmod -R u+rwx /data
+    echo "Ownership changed successfully."
+else
+    echo "Not running as root. Checking current permissions..."
+fi
+
+echo "Permissions of data directories in /data:"
+ls -ld "$N8N_DATA_DIR" "$POSTGRES_DATA_DIR" "$QDRANT_DATA_DIR" "$OLLAMA_MODELS_DIR" 2>/dev/null || echo "Some directories may not exist yet."
+
+ln -sfn "$N8N_DATA_DIR" /home/n8nuser/.n8n
+export OLLAMA_MODELS="$OLLAMA_MODELS_DIR"
+
+# --- PostgreSQL Setup & Start (as n8nuser) ---
+echo "--- PostgreSQL Setup (running as $(whoami)) ---"
+echo "PGDATA is set to: $POSTGRES_DATA_DIR"
+POSTGRES_PORT="${DB_POSTGRESDB_PORT:-5432}" # Define port for consistency
+
+# Ensure n8nuser has rwx permissions on its own PGDATA.
+chmod u+rwx "$POSTGRES_DATA_DIR"
+
+if [ ! -d "$POSTGRES_DATA_DIR/base" ]; then
+    echo "Initializing PostgreSQL database in $POSTGRES_DATA_DIR as user n8nuser..."
+    su - n8nuser -c "/usr/lib/postgresql/14/bin/initdb -D '$POSTGRES_DATA_DIR' --username=n8nuser --no-locale --encoding=UTF8"
+    if [ $? -ne 0 ]; then echo "ERROR: PostgreSQL initdb failed."; ls -ld "$POSTGRES_DATA_DIR"; exit 1; fi
+    
+    echo "PostgreSQL Initialized. Ownership/permissions of $POSTGRES_DATA_DIR after initdb:"
+    ls -ld "$POSTGRES_DATA_DIR"
+
+    echo "Temporarily starting PostgreSQL to create database role and database..."
+    # For pg_ctl, it's good practice to point to the PGDATA explicitly.
+    # pg_ctl will find postgresql.conf within PGDATA.
+    su - n8nuser -c "/usr/lib/postgresql/14/bin/pg_ctl -D '$POSTGRES_DATA_DIR' -o \"-p $POSTGRES_PORT -c listen_addresses='localhost'\" -w start"
+    
+    PG_ROLE_NAME="${DB_POSTGRESDB_USER:-n8n}"
+    PG_PASSWORD="${DB_POSTGRESDB_PASSWORD}"
+    PG_DB_NAME="${DB_POSTGRESDB_DATABASE:-n8n}"
+
+    if [ -z "$PG_PASSWORD" ]; then echo "ERROR: DB_POSTGRESDB_PASSWORD is not set."; exit 1; fi
+
+    echo "Creating PostgreSQL role '$PG_ROLE_NAME' and database '$PG_DB_NAME'..."
+    su - n8nuser -c "psql -v ON_ERROR_STOP=1 --username=n8nuser --port='$POSTGRES_PORT' --host=localhost postgres <<-EOSQL
+        CREATE ROLE \"$PG_ROLE_NAME\" WITH LOGIN PASSWORD '$PG_PASSWORD';
+        CREATE DATABASE \"$PG_DB_NAME\" OWNER \"$PG_ROLE_NAME\";
+EOSQL
+"
+    echo "PostgreSQL role and database created."
+    su - n8nuser -c "/usr/lib/postgresql/14/bin/pg_ctl -D '$POSTGRES_DATA_DIR' -m fast -w stop"
+    echo "Temporary PostgreSQL server stopped."
+else
+    echo "PostgreSQL database found in $POSTGRES_DATA_DIR."
+fi
+
+echo "Starting PostgreSQL server for application use (as n8nuser)..."
+# Switch to n8nuser for running services
+su - n8nuser -c "/usr/lib/postgresql/14/bin/postgres -D '$POSTGRES_DATA_DIR' -p '$POSTGRES_PORT'" &
+PG_PID=$!
+echo "Waiting for PostgreSQL to start (PID: $PG_PID)..."
+max_wait=30
+count=0
+until pg_isready -h localhost -p "$POSTGRES_PORT" -U n8nuser -q || [ $count -eq $max_wait ]; do
+  echo -n "."
+  sleep 1
+  count=$((count+1))
+done
+if [ $count -eq $max_wait ]; then
+    echo "ERROR: PostgreSQL timed out waiting to start."
+    PG_LOG_DIR_GUESS="$POSTGRES_DATA_DIR/log"
+    if [ -d "$PG_LOG_DIR_GUESS" ]; then
+      echo "PostgreSQL logs from $PG_LOG_DIR_GUESS:"
+      # List log files before cat'ing, and cat only the latest ones if possible or just one
+      ls -lt "$PG_LOG_DIR_GUESS"
+      cat "$PG_LOG_DIR_GUESS"/postgresql-*.log 2>/dev/null || echo "No standard log files found or readable."
+    else
+      echo "$PG_LOG_DIR_GUESS not found."
+    fi
+    exit 1
+fi
+echo "PostgreSQL started successfully on port $POSTGRES_PORT."
+
+
+# --- Qdrant Setup & Start (as n8nuser) ---
+# (This section remains the same)
+echo "--- Qdrant Setup (running as $(whoami)) ---"
+QDRANT_CONFIG_DIR="/qdrant/config"
+QDRANT_STORAGE_PATH_IN_CONFIG="/qdrant/storage"
+ln -sfn "$QDRANT_DATA_DIR" "$QDRANT_STORAGE_PATH_IN_CONFIG"
+
+echo "Starting Qdrant (as n8nuser)..."
+su - n8nuser -c "/usr/local/bin/qdrant --config-path '$QDRANT_CONFIG_DIR/config.yaml'" &
+QDRANT_PID=$!
+echo "Waiting for Qdrant to start (PID: $QDRANT_PID)..."
+until curl -sf http://localhost:6333/readyz > /dev/null; do
+    echo -n "."
+    sleep 1
+    if ! ps -p $QDRANT_PID > /dev/null; then echo "Qdrant process died."; exit 1; fi
+done
+echo "Qdrant started."
+
+# --- Ollama Start (as n8nuser) ---
+# (This section remains the same)
+echo "--- Ollama Setup (running as $(whoami)) ---"
+echo "Ollama models will be stored in: $OLLAMA_MODELS_DIR"
+
+echo "Starting Ollama server (as n8nuser)..."
+su - n8nuser -c "ollama serve" &
+OLLAMA_PID=$!
+echo "Waiting for Ollama to start (PID: $OLLAMA_PID)..."
+until curl -sf http://localhost:11434/api/tags > /dev/null 2>&1 ; do
+    echo -n "."
+    sleep 1
+    if ! ps -p $OLLAMA_PID > /dev/null; then echo "Ollama process died."; exit 1; fi
+done
+echo "Ollama started."
+
+# --- Supabase PostgreSQL Configuration ---
+export SUPABASE_URL="https://wyohprbjfxgrxlrrvnhh.supabase.co"
+export SUPABASE_KEY="sb_publishable_rxpUncZDI55WgW8F9F3log_Ea05sjxl"
+export DBPOSTGRESDB_HOST="db.wyohprbjfxgrxlrrvnhh.supabase.co"
+export DBPOSTGRESDB_PORT="5432"
+export DBPOSTGRESDB_USER="postgres"
+export DBPOSTGRESDB_DATABASE="postgres"
+export DBPOSTGRESDB_PASSWORD="CHANGE_ME_SET_YOUR_SUPABASE_PASSWORD"
+
+DEFAULT_MODEL="${DEFAULT_OLLAMA_MODEL:-llama3.1:8b}"
+echo "Checking for default Ollama model: $DEFAULT_MODEL"
+if ! ollama show "$DEFAULT_MODEL" > /dev/null 2>&1; then
+    echo "Pulling $DEFAULT_MODEL... This may take a while."
+    ollama pull "$DEFAULT_MODEL"
+    if [ $? -ne 0 ]; then echo "Warning: Failed to pull $DEFAULT_MODEL"; else echo "$DEFAULT_MODEL pulled."; fi
+else
+    echo "$DEFAULT_MODEL already present."
+fi
+
+# --- n8n Start (as n8nuser) ---
+echo "--- n8n Setup (running as $(whoami)) ---"
+
+if [ -z "$N8N_ENCRYPTION_KEY" ]; then 
+    echo "ERROR: N8N_ENCRYPTION_KEY is not set. Please set it as a Space secret."
+    exit 1
+fi
+if [ -z "$DB_POSTGRESDB_PASSWORD" ]; then 
+    echo "ERROR: DB_POSTGRESDB_PASSWORD is not set. Please set it as a Space secret."
+    exit 1
+fi
+
+export N8N_USER_FOLDER="/home/n8nuser/.n8n"
+export GENAI_MODELS_N8N_DEFAULT_MODEL="$DEFAULT_MODEL" 
+export DB_POSTGRESDB_PORT="$POSTGRES_PORT" 
+
+# URLs are already set in Dockerfile ENV, but we can override if needed
+echo "N8N URLs configured:"
+echo "  N8N_EDITOR_BASE_URL: $N8N_EDITOR_BASE_URL"
+echo "  WEBHOOK_URL: $WEBHOOK_URL"
+echo "  N8N_HOST: $N8N_HOST"
+echo "  N8N_PORT: $N8N_PORT"
+echo "  N8N_PROTOCOL: $N8N_PROTOCOL"
+
+# OAuth callback configuration for ClickUp compatibility
+# n8n's OAuth callback URL is constructed from WEBHOOK_URL + /rest/oauth2-credential/callback
+# ClickUp trims the path, so we need to ensure the base URL is correctly configured
+# In ClickUp's app settings, register: https://leon4gr45-n8n.hf.space/
+# n8n will automatically handle the full callback path internally
+
+# Optional: Increase n8n log level for more startup details
+# export N8N_LOG_LEVEL="debug" 
+
+echo "Before su: environment variables"
+env | grep N8N
+
+echo "Starting n8n (as n8nuser) with highly permissive (INSECURE) embedding rules for diagnosis..."
+su n8nuser -c "echo 'Inside su:' && env | grep N8N && n8n start"

on_startup.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+# Write some commands here that will run on root user before startup.
+# For example, to clone transformers and install it in dev mode:
+# git clone https://github.com/huggingface/transformers.git
+# cd transformers && pip install -e ".[dev]"

opencode.json

@@ -0,0 +1,18 @@
+{
+  "$schema": "https://opencode.ai/config.json",
+  "model": "alias-code",
+  "provider": {
+    "blablador": {
+      "npm": "@ai-sdk/openai-compatible",
+      "name": "Blablador",
+      "options": {
+        "baseURL": "https://api.helmholtz-blablador.fz-juelich.de/v1"
+      },
+      "models": {
+        "alias-code": {
+          "name": "Code Model"
+        }
+      }
+    }
+  }
+}

packages.txt

@@ -0,0 +1 @@
+tree

requirements.txt

@@ -0,0 +1,3 @@
+jupyterlab==4.2.5
+tornado==6.2
+ipywidgets

start_server.sh

@@ -0,0 +1,19 @@
+#!/bin/bash
+JUPYTER_TOKEN="${JUPYTER_TOKEN:=huggingface}"
+
+NOTEBOOK_DIR="/data"
+
+jupyter labextension disable "@jupyterlab/apputils-extension:announcements"
+
+jupyter-lab \
+    --ip 0.0.0.0 \
+    --port 7860 \
+    --no-browser \
+    --allow-root \
+    --ServerApp.token="$JUPYTER_TOKEN" \
+    --ServerApp.tornado_settings="{'headers': {'Content-Security-Policy': 'frame-ancestors *'}}" \
+    --ServerApp.cookie_options="{'SameSite': 'None', 'Secure': True}" \
+    --ServerApp.disable_check_xsrf=True \
+    --LabApp.news_url=None \
+    --LabApp.check_for_updates_class="jupyterlab.NeverCheckForUpdate" \
+    --notebook-dir=$NOTEBOOK_DIR