alyx-local 3.1.2__tar.gz

alyx_local-3.1.2/.gitignore

@@ -0,0 +1,27 @@
+*.pyc
+*__pycache__*
+*.asv
+*.pkl
+*.patch
+*.sql
+*.html.py
+*.orig
+.venv*
+.idea/*
+.vscode/
+.DS_Store
+.pdm-python
+.pdm-build/
+.python-version
+/compose.yaml
+__pypackages__*
+/src/alyx/data/management/commands/*ibl*
+/src/alyx/templates/ibl_reports
+/src/alyx/alyx/settings_secret.py
+/src/alyx/alyx/settings_lab.py
+
+/config
+/data
+/legacy
+
+*secrets*

alyx_local-3.1.2/PKG-INFO

@@ -0,0 +1,47 @@
+Metadata-Version: 2.4
+Name: alyx-local
+Version: 3.1.2
+Summary: Local database for experimental neuroscience laboratories
+Project-URL: source, https://github.com/JostTim/alyx-local
+Project-URL: documentation, https://josttim.github.io/alyx-local/
+Author-email: JostTim <timothe.jost-mousseau@pasteur.fr>
+License: MIT
+Requires-Python: <3.13,>=3.12
+Requires-Dist: alyx-connector>=2.1.10
+Requires-Dist: colorlog>=6.9.0
+Requires-Dist: django-admin-list-filter-dropdown>=1.0.3
+Requires-Dist: django-admin-rangefilter>=0.13.2
+Requires-Dist: django-autocomplete-light>=3.11.0
+Requires-Dist: django-cleanup>=9.0.0
+Requires-Dist: django-crispy-forms>=2.3
+Requires-Dist: django-dbbackup>=4.2.1
+Requires-Dist: django-debug-toolbar>=6.0.0
+Requires-Dist: django-filter>=24.3
+Requires-Dist: django-jsoneditor>=0.2.4
+Requires-Dist: django-markdownx>=4.0.7
+Requires-Dist: django-mptt>=0.16.0
+Requires-Dist: django-password-eye>=1.1.4
+Requires-Dist: django-polymorphic>=3.1.0
+Requires-Dist: django-reversion>=5.1.0
+Requires-Dist: django-storages>=1.14.4
+Requires-Dist: django-structlog>=8.1.0
+Requires-Dist: django-stubs>=5.2.8
+Requires-Dist: django-test-without-migrations>=0.6
+Requires-Dist: django>=5.1.3
+Requires-Dist: djangorestframework>=3.15.2
+Requires-Dist: docutils>=0.21.2
+Requires-Dist: drf-spectacular[sidecar]>=0.27.2
+Requires-Dist: gunicorn>=23.0.0
+Requires-Dist: inotify>=0.2.10
+Requires-Dist: matplotlib>=3.9.2
+Requires-Dist: platformdirs>=4.3.8
+Requires-Dist: processing-pypelines[celery]>=0.0.66
+Requires-Dist: psycopg2-binary>=2.9.10
+Requires-Dist: pynwb>=3.1.2
+Requires-Dist: rich-click>=1.8.9
+Requires-Dist: structlog>=24.4.0
+Requires-Dist: tzlocal>=5.2
+Provides-Extra: celery
+Requires-Dist: celery>=5.4.0; extra == 'celery'
+Provides-Extra: docs
+Requires-Dist: mkdocs-material>=9.6.11; extra == 'docs'

alyx_local-3.1.2/pyproject.toml

@@ -0,0 +1,121 @@
+[project]
+name = "alyx-local"
+description = "Local database for experimental neuroscience laboratories"
+requires-python = ">=3.12,<3.13"
+dependencies = [
+  "django>=5.1.3",
+  "django-admin-list-filter-dropdown>=1.0.3",
+  "django-admin-rangefilter>=0.13.2",
+  "django-autocomplete-light>=3.11.0",
+  "django-cleanup>=9.0.0",
+  "django-filter>=24.3",
+  "django-jsoneditor>=0.2.4",
+  "django-markdownx>=4.0.7",
+  "django-password-eye>=1.1.4",
+  "django-mptt>=0.16.0",
+  "django-polymorphic>=3.1.0",
+  "django-reversion>=5.1.0",
+  "django-storages>=1.14.4",
+  "django-structlog>=8.1.0",
+  "django-test-without-migrations>=0.6",
+  "djangorestframework>=3.15.2",
+  "drf-spectacular[sidecar]>=0.27.2",
+  "django-dbbackup>=4.2.1",
+  "django-crispy-forms>=2.3",
+  "docutils>=0.21.2",
+  "gunicorn>=23.0.0",
+  "inotify>=0.2.10",
+  "tzlocal>=5.2",
+  "colorlog>=6.9.0",
+  "processing-pypelines[celery]>=0.0.66",
+  "structlog>=24.4.0",
+  "psycopg2-binary>=2.9.10",
+  "matplotlib>=3.9.2",
+  "alyx-connector>=2.1.10",
+  "rich-click>=1.8.9",
+  "platformdirs>=4.3.8",
+  "django-debug-toolbar>=6.0.0",
+  "pynwb>=3.1.2",
+  "django-stubs>=5.2.8",
+]
+dynamic = ["version"]
+
+[project.urls]
+"source" = "https://github.com/JostTim/alyx-local"
+"documentation" = "https://josttim.github.io/alyx-local/"
+
+[project.license]
+text = "MIT"
+
+[[project.authors]]
+name = "JostTim"
+email = "timothe.jost-mousseau@pasteur.fr"
+
+[project.optional-dependencies] # For actual installations
+celery = ["celery>=5.4.0"]
+docs = ["mkdocs-material>=9.6.11"]
+
+[dependency-groups] # to use with CLI tools (for dev/CI only) https://packaging.python.org/en/latest/specifications/dependency-groups/
+docs = ["mkdocs-material>=9.6.11"]
+celery = ["celery>=5.4.0"]
+
+[build-system]
+requires = ["hatchling"]
+build-backend = "hatchling.build"
+
+[tool.hatch.version]
+path = "src/alyx/__init__.py"
+variable = "__version__"
+
+[tool.hatch.build.targets.wheel]
+packages = ["src/alyx"]
+
+[tool.hatch.build]
+include = ["src/alyx/ressources/*"]
+
+[tool.wheel]
+universal = true
+
+[tool.flake8]
+ignore = [
+  "E203",
+  "E117",
+  "E265",
+  "E266",
+  "E401",
+  "E704",
+  "E712",
+  "E731",
+  "E741",
+  "E722",
+  "F401",
+  "F403",
+  "F841",
+  "W504",
+  "W503",
+  "W605",
+]
+max-line-length = 99
+exclude = ["migrations"]
+
+[tool.black]
+preview = true
+line-length = 99
+
+[tool.coverage.run]
+branch = false
+source = ["src/alyx"]
+omit = []
+
+[tool.coverage.report]
+exclude_lines = [
+  "pragma: no cover",
+  "raise AssertionError",
+  "raise NotImplementedError",
+  "pass",
+  "return$",
+]
+show_missing = true
+
+[project.scripts]
+alyx = "alyx.installation.cli:alyx"

alyx_local-3.1.2/src/alyx/ressources/docker/celery_server/Dockerfile

@@ -0,0 +1,12 @@
+FROM python:3.12-slim AS base
+
+# install uv for installing other python packages faster
+RUN pip install uv
+
+# Install flower and celery with uv (faster than pip) at system level (no venv)
+RUN uv pip install flower pyamqp --system
+
+CMD ["sh", \
+    "-c", \
+    "celery --broker=pyamqp://${RABBITMQ_USER}:${RABBITMQ_PASSWORD}@rabbitmq:5672// \
+    flower --port=5001 --address=0.0.0.0 --basic_auth=${FLOWER_USER}:${FLOWER_PASSWORD} --url_prefix=services/celery"]

alyx_local-3.1.2/src/alyx/ressources/docker/celery_server/celery.env

@@ -0,0 +1,4 @@
+RABBITMQ_USER=%%RABBITMQ_USER%%
+RABBITMQ_PASSWORD=%%RABBITMQ_PASSWORD%%
+FLOWER_USER=%%RABBITMQ_USER%%
+FLOWER_PASSWORD=%%RABBITMQ_PASSWORD%%

alyx_local-3.1.2/src/alyx/ressources/docker/compose.yaml

@@ -0,0 +1,115 @@
+services:
+
+  django_server:
+    restart: on-failure:5
+    build:
+      context: .
+      dockerfile: ./django_server/Dockerfile
+    image: alyx_django_server:latest
+    container_name: django_server
+    hostname: 'django_server'
+    volumes :
+      - uploaded-data:/app/uploaded
+      - ./postgres_db/db-secure-password:/run/secrets/db-secure-password:ro
+      - "%%ALYX_SRC_PATH%%:/app/src/alyx:rw"
+      - "%%DJANGO_DATA_PATH%%:/app/data:rw"
+    environment : 
+      - POSTGRES_PASSWORD_FILE=/run/secrets/db-secure-password
+    expose:
+      - 8000 # this is redirected through nginx, it is not directly exposed outside the docker network
+    cap_add:
+      - SYS_ADMIN
+      - DAC_READ_SEARCH
+      - CAP_DAC_READ_SEARCH
+    depends_on:
+      nginx_server:
+        condition: service_started
+      db:
+        condition: service_healthy
+      
+
+  nginx_server:
+    image: nginx:latest
+    container_name: nginx_server
+    hostname: 'nginx_server'
+    ports:
+      - "0.0.0.0:%%NGINX_OUT_PORT%%:80"
+    volumes:
+      - uploaded-data:/app/uploaded
+      - ./nginx_server/nginx.conf:/etc/nginx/nginx.conf:ro
+      - ./nginx_server/502.html:/etc/nginx/errorpages/502.html:ro
+
+
+  db:
+    image: postgres:17
+    container_name: postgres_db
+    hostname: 'postgres_db'
+    restart: unless-stopped
+    user: postgres
+    volumes:
+      - db-data:/var/lib/postgresql/data
+      - ./postgres_db/db-secure-password:/run/secrets/db-secure-password:ro
+    environment:
+      - POSTGRES_DB=alyx
+      - POSTGRES_PASSWORD_FILE=/run/secrets/db-secure-password
+    expose:
+      - 5432 # this is for the access to postgres by django service, it is not exposed outside the docker network
+    healthcheck:
+      test: [ "CMD", "pg_isready" ]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+
+  pgadmin:
+    image: dpage/pgadmin4
+    container_name: pgadmin
+    hostname: 'pgadmin'
+    environment:
+      - SCRIPT_NAME=/services/pgadmin
+      - PGADMIN_SERVER_JSON_FILE=/pgadmin4/servers.json
+    env_file:
+      - ./pgadmin/pgadmin.env
+    expose:
+      - 80 # this is for the management web interface of pgadmin to nginx, it is not exposed outside the docker network
+    volumes:
+      - pgadmin-data:/var/lib/pgadmin
+      - ./pgadmin/servers.json:/pgadmin4/servers.json:ro
+    depends_on:
+      db:
+        condition: service_healthy
+
+  rabbitmq:
+    image: rabbitmq:4-management
+    container_name: rabbitmq
+    hostname: 'rabbitmq'
+    ports: 
+      - "0.0.0.0:%%RABBITMQ_OUT_PORT%%:5672"
+    expose :
+      - 15672 # this is for the management web interface of rabbitmq to nginx, it is not exposed outside the docker network
+    environment:
+      - RABBITMQ_MANAGEMENT_PATH_PREFIX=/services/rabbitmq
+    volumes: 
+      - rabbitmq-data:/var/lib/rabbitmq
+      - ./rabbitmq/rabbitmq.conf:/etc/rabbitmq/rabbitmq.conf
+
+  celery_server:
+    build:
+        context: .
+        dockerfile: ./celery_server/Dockerfile
+    image: celery_flower:latest
+    container_name: celery_server
+    hostname: 'celery_server'
+    expose:
+      - 5001 # this is for the management web interface of celery to nginx, it is not exposed outside the docker network
+      - 5555 # this is for the management web interface of flower to nginx, it is not exposed outside the docker network
+    env_file:
+      - ./celery_server/celery.env
+    depends_on:
+      - rabbitmq
+
+
+volumes:
+  pgadmin-data:
+  db-data:
+  rabbitmq-data:
+  uploaded-data:

alyx_local-3.1.2/src/alyx/ressources/docker/django_server/Dockerfile

@@ -0,0 +1,113 @@
+# syntax=docker/dockerfile:1
+ARG PYTHON_VERSION=3.12.3
+ARG DEGUG=0
+FROM python:${PYTHON_VERSION}-slim AS base
+
+ARG APP_USER=%%PERMISIONED_USERNAME%%
+ARG UID=%%PERMISSIONED_UID%%
+ARG GID=%%PERMISSIONED_GID%%
+ARG APP_GROUP=%%PERMISSIONED_GROUPNAME%%
+
+RUN echo "Building the Docker image..."
+
+# Prevents Python from writing pyc files.
+ENV PYTHONDONTWRITEBYTECODE=${DEBUG}
+
+# Keeps Python from buffering stdout and stderr to avoid situations where
+# the application crashes without emitting any logs due to buffering.
+ENV PYTHONUNBUFFERED=1
+
+#########################################
+# Create a non-root user to run the app #
+RUN if ! getent group "${APP_GROUP}"; then \
+    addgroup --gid "${GID}" "${APP_GROUP}"; fi
+
+RUN adduser \
+    --disabled-password \
+    --gecos "" \
+    --shell "/sbin/nologin" \
+    --home "/${APP_USER}" \
+    --uid "${UID}" \
+    --ingroup "${APP_GROUP}" \
+    "${APP_USER}"
+
+
+# get pg_restore and other database tools #
+# 
+RUN apt-get update && \
+    apt-get install -y --no-install-recommends \
+    # The list of packages that we install here :
+    ca-certificates wget gnupg2 lsb-release sudo iputils-ping curl dos2unix cifs-utils && \
+    # End of the list of packages
+    apt-get clean && \
+    rm -rf /var/lib/apt/lists/*
+
+# Add postgresql repos to the keyring (to be able to install postgresql client connector with the right stable version)
+RUN install -d -m 0755 /etc/apt/keyrings
+
+RUN cat /etc/os-release >&2
+RUN set -eux; . /etc/os-release; echo "ID=$ID VERSION_CODENAME=$VERSION_CODENAME" >&2
+
+RUN wget -qO /etc/apt/keyrings/postgresql.asc https://www.postgresql.org/media/keys/ACCC4CF8.asc; \
+    echo "deb [signed-by=/etc/apt/keyrings/postgresql.asc] https://apt.postgresql.org/pub/repos/apt bookworm-pgdg main" \
+      > /etc/apt/sources.list.d/pgdg.list
+
+RUN rm -rf /var/lib/apt/lists/* && apt-get update
+
+RUN apt-get install -y --no-install-recommends \
+    postgresql-client-17 \
+    && apt-get clean \
+    && rm -rf /var/lib/apt/lists/*
+
+########################################################
+# Install UV that will manage the python dependancies #
+RUN pip install uv
+
+#################################################################
+## Copy the django application source code into the container. ##
+RUN mkdir -p /app/uploaded/static && \
+    mkdir -p /app/uploaded/media && \
+    mkdir -p /mnt/external_data
+
+COPY ./pyproject.toml /app/pyproject.toml
+COPY ./uv.lock /app/uv.lock
+# copying uv.lock is to ensure that while we install dependancies, they are not updated
+# (if the version pinning is "loose") compared to the lockfile, to avoid potential code break
+# when using these dependancies in alyx's implementation
+
+################################################
+## ENSURE WE ACCESS THE ENTRYPOINT CORRECTLY  ##
+COPY ./django_server/entrypoint.sh /app/entrypoint.sh
+COPY ./django_server/gunicorn.conf.py /app/gunicorn.conf.py
+
+#############################################################################
+## ENSURE WE COPY CONFIG FILES GENERATED WITH INSTALL, IN PROPER LOCATIONS ##
+COPY ./django_server/custom_settings.py /app/extra_configuration/custom_settings.py
+
+##################################################################
+## SET USER PERMISSIONS ON THE APP FOLDER AND ENTRYPOINT SCRIPT ##
+RUN chown -R ${APP_USER}:${APP_GROUP} /app/
+
+RUN dos2unix -o /app/entrypoint.sh
+RUN chown ${APP_USER}:${APP_GROUP} /app/entrypoint.sh
+RUN chmod +x /app/entrypoint.sh
+
+##########################################################################
+## Permissions to access the external_data folder on the mount location ##
+RUN chown -R ${APP_USER}:${APP_GROUP} /mnt/external_data
+RUN chmod -R 700 /mnt/external_data
+
+#############################################################
+RUN echo "${APP_USER} ALL=(ALL) NOPASSWD:ALL" >> /etc/sudoers
+
+#############################################################
+# Switch to the non-privileged user to run the application. #
+USER ${APP_USER}
+
+WORKDIR /app
+
+# Expose the port that the application listens on.
+EXPOSE 80
+
+RUN echo "Launching the entrypoint script..."
+CMD ["./entrypoint.sh"]

alyx_local-3.1.2/src/alyx/ressources/docker/django_server/custom_settings.py

@@ -0,0 +1,17 @@
+ALLOWED_HOSTS = [%%MACHINE_ALLOWED_HOSTS%%]
+
+CSRF_TRUSTED_ORIGINS = [%%MACHINE_CSRF_TRUSTED_ORIGINS%%]
+
+DEFAULT_LAB_NAME = "defaultlab"
+
+SECRET_KEY = "%%DJANGO_SECRET_KEY%%"
+
+NARRATIVE_TEMPLATES = {}
+
+DBBACKUP_HOSTNAME = "%%DB_BACKUP_HOSTNAME%%"
+
+TIME_ZONE = "%%TIMEZONE%%"
+
+DEBUG = %%DJANGO_DEBUG_MODE%%
+
+AUTO_RESTORE_ON_STARTUP = %%AUTORESTORE_DJANGO_ON_STARTUP%%

alyx_local-3.1.2/src/alyx/ressources/docker/django_server/entrypoint.sh

@@ -0,0 +1,19 @@
+#!/bin/bash
+echo -n "Django version: " && echo -n $(uv run python -m django --version) && echo " is installed"
+
+# pdm install --prod --frozen-lockfile
+uv sync --all-groups
+
+# Collect static files
+echo "Collecting static files..."
+uv run alyx manage collectstatic --noinput --clear --verbosity 0
+
+uv run alyx manage auto_restore --use_settings --migrate_new_db
+
+# Restore mounts
+echo "Restoring all mounts if any"
+uv run alyx manage mounts
+
+# Start Gunicorn
+echo "Starting Gunicorn to serve django alyx..."
+uv run gunicorn 'alyx.base.wsgi' --config '/app/gunicorn.conf.py'

alyx_local-3.1.2/src/alyx/ressources/docker/django_server/gunicorn.conf.py

@@ -0,0 +1,7 @@
+from pathlib import Path
+
+bind = "0.0.0.0:8000"
+workers = 3
+reload = True
+reload_engine = "inotify"
+reload_extra_file = [str(dir / file) for dir, folders, files in Path("/app/src").walk() for file in files]

alyx_local-3.1.2/src/alyx/ressources/docker/nginx_server/502.html

@@ -0,0 +1,79 @@
+<!DOCTYPE html>
+<html>
+    <head>
+        <title>Service Unavailable</title>
+        <style>
+                @import url('https://fonts.googleapis.com/css?family=Roboto:300,400,500,700&display=swap');
+            *:focus {
+            outline: none;
+            }
+            h1 {
+                text-align: center;
+                font-family: 'Roboto', sans-serif;
+                color: rgb(0, 164, 109);
+            }
+            h2 {
+                text-align: center;
+                font-family: 'Roboto', sans-serif;
+                font-weight: 600;
+            }
+            p {
+                text-align: center;
+                font-family: 'Roboto', sans-serif;
+            }
+            .icon {
+                display: block;
+                margin: 0 auto;
+                width: 50px;
+                height: 50px;
+                animation: spin 2s linear infinite;
+                color:rgb(0, 164, 109);
+                margin-top: 50px;
+            }
+            .block {
+                max-width:50vw;
+                box-shadow: 0px 0px 5px 5px rgba(185, 185, 185, 0.422);
+                border-radius: 5px;
+                padding : 50px;
+                padding-top: 30px;
+                cursor: pointer;
+            }
+            .block:active {
+                box-shadow: 0px 0px 4px 4px rgba(218, 218, 218, 0.422);
+                background-color: rgb(248, 248, 248);
+            }
+            body {
+                /* rest of your CSS */
+                display: flex;
+                justify-content: center;
+                align-items: center;
+                min-height: 100vh;
+                margin: 0;
+            }
+            @keyframes spin {
+                0% { transform: rotate(0deg); }
+                100% { transform: rotate(360deg); }
+            }
+        </style>
+    </head>
+    <body>
+    <div class="block" onclick="location.reload();">
+        <h2 >Error 502</h2>
+        <h1 >Alyx's Django server container is not yet fully started</h1>
+        <p>Please wait a bit and refresh this page, or look at logs or console to see if an error is preventing django's correct launch.</p>
+        <svg class="icon" fill="#007850" height="200px" width="200px" version="1.1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 235.319 235.319" xmlns:xlink="http://www.w3.org/1999/xlink">
+            <g id="SVGRepo_bgCarrier" stroke-width="0"></g>
+            <g id="SVGRepo_tracerCarrier" stroke-linecap="round" stroke-linejoin="round"></g>
+            <g id="SVGRepo_iconCarrier">
+                <g>
+                    <path d="m201.094,29.997c2.649-0.623 4.623-2.996 4.623-5.835v-18.162c0-3.313-2.687-6-6-6h-164.114c-3.313,0-6,2.687-6,6v18.163c0,2.839 1.974,5.212 4.623,5.835 1.812,32.314 18.594,61.928 45.682,80.076l11.324,7.586-11.324,7.586c-27.089,18.147-43.871,47.762-45.682,80.076-2.649,0.623-4.623,2.996-4.623,5.835v18.163c0,3.313 2.687,6 6,6h164.114c3.313,0 6-2.687 6-6v-18.163c0-2.839-1.974-5.212-4.623-5.835-1.812-32.314-18.594-61.928-45.683-80.076l-11.324-7.586 11.324-7.586c27.089-18.148 43.871-47.763 45.683-80.077zm-159.491-17.997h152.114v6.163h-152.114v-6.163zm152.114,211.319h-152.114v-6.163h152.114v6.163zm-63.749-110.644c-1.663,1.114-2.661,2.983-2.661,4.985s0.998,3.871 2.661,4.985l18.765,12.571c23.71,15.883 38.49,41.705 40.333,69.941h-142.812c1.843-28.235 16.623-54.057 40.333-69.941l18.765-12.571c1.663-1.114 2.661-2.983 2.661-4.985s-0.998-3.871-2.661-4.985l-18.765-12.571c-23.71-15.884-38.49-41.706-40.333-69.941h142.812c-1.843,28.236-16.623,54.057-40.333,69.941l-18.765,12.571z"></path>
+                    <path d="m133.307,82.66h-31.295c-2.487,0-4.717,1.535-5.605,3.858-0.888,2.324-0.25,4.955 1.604,6.613l15.647,14c1.139,1.019 2.57,1.528 4,1.528s2.862-0.509 4-1.528l15.647-14c1.854-1.659 2.492-4.29 1.604-6.613-0.885-2.323-3.115-3.858-5.602-3.858z"></path>
+                    <path d="m117.414,140.581l-15.218,9.775c-13.306,8.914-21.292,23.876-21.292,39.892h76.511c0-16.016-7.986-30.978-21.292-39.892l-15.218-9.775c-1.074-0.644-2.416-0.644-3.491,0z"></path>
+                </g>
+            </g>
+        </svg>
+    </div>
+    </body>
+</html>
+
+

alyx_local-3.1.2/src/alyx/ressources/docker/nginx_server/nginx.conf

@@ -0,0 +1,95 @@
+events {
+}
+
+
+http {
+    include /etc/nginx/mime.types;
+    # include /etc/nginx/conf.d/default.conf;
+    default_type application/octet-stream;
+
+    resolver 127.0.0.11 valid=30s; # Docker's internal DNS server
+
+    server {
+        listen %%NGINX_OUT_PORT%%;
+        listen [::]:%%NGINX_OUT_PORT%%;
+        server_name nginx_server;
+
+        location /static/ {
+            alias /app/uploaded/static/;
+            expires 30d;
+        }
+
+        location /media/ {
+            alias /app/uploaded/media/;
+            expires 30d;
+        }
+
+        location / {
+            set $upstream_django http://django_server:8000;
+            proxy_pass $upstream_django;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+        }
+
+        error_page 502 /502.html;
+        location = /502.html {
+            root /etc/nginx/errorpages;
+            internal;
+        }
+
+        location /services/celery/ {
+
+            # using set variable allows this to make route to upstream_celery optional,
+            # and work even if it is not available at config time, but later on.
+            set $upstream_celery http://celery_server:5001/services/celery/;
+            rewrite ^/services/celery(.*) $1 break;
+            proxy_pass $upstream_celery;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+
+            proxy_redirect / /services/celery/;
+
+            sub_filter_once off;
+            sub_filter_types text/html application/javascript;
+            sub_filter 'href="/' 'href="/services/celery/';
+            sub_filter 'src="/' 'src="/services/celery/';
+            sub_filter 'action="/' 'action="/services/celery/';
+            sub_filter 'url: "/' 'url: "/services/celery/';
+
+        }
+
+        location /services/rabbitmq/ {
+            set $upstream_rabbitmq http://rabbitmq:15672;
+            # rewrite ^/services/rabbitmq(.*) $1 break;
+            proxy_pass $upstream_rabbitmq;
+            proxy_set_header Host $host;
+            # proxy_set_header X-Forwarded-Prefix /services/rabbitmq;
+            # proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            # proxy_set_header X-Script-Name /services/rabbitmq;
+            proxy_set_header X-Forwarded-Proto $scheme;
+
+            # proxy_redirect / /services/rabbitmq/;
+
+            # sub_filter_once off;
+            # sub_filter_types text/html application/javascript;
+            # sub_filter 'href="/' 'href="/services/rabbitmq/';
+            # sub_filter 'src="/' 'src="/services/rabbitmq/';
+            # sub_filter 'action="/' 'action="/services/rabbitmq/';
+            # sub_filter 'url: "/' 'url: "/services/rabbitmq/';
+        }
+
+        location /services/pgadmin/ {
+            set $upstream_rabbitmq http://pgadmin:80;
+            proxy_set_header X-Script-Name /services/pgadmin;
+            proxy_set_header Host $host;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_pass $upstream_rabbitmq;
+            proxy_redirect off;
+        }
+    }
+}

alyx_local-3.1.2/src/alyx/ressources/docker/pgadmin/pgadmin.env

@@ -0,0 +1,2 @@
+PGADMIN_DEFAULT_EMAIL=%%PGADMIN_DEFAULT_EMAIL%%
+PGADMIN_DEFAULT_PASSWORD=%%PGADMIN_DEFAULT_PASSWORD%%

alyx_local-3.1.2/src/alyx/ressources/docker/pgadmin/servers.json

@@ -0,0 +1,13 @@
+{
+    "Servers": {
+        "1": {
+            "Name": "PostgreSQL Database",
+            "Group": "Servers",
+            "Host": "postgres_db",
+            "Port": 5432,
+            "Username": "%%POSTGRES_DB_USERNAME%%",
+            "SSLMode": "prefer",
+            "MaintenanceDB": "alyx"
+        }
+    }
+}