-
Notifications
You must be signed in to change notification settings - Fork 0
Add Redis queue system for online mode and parameter presets #63
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: develop
Are you sure you want to change the base?
Changes from all commits
e613138
8695f86
e9a8367
89e26a0
dbdbb00
b17c73d
1f212dd
4d3e286
6e266f4
6fd1a91
8b681f6
f2ad2b1
546e091
fc4823e
8ab28ad
5884583
2ee6466
f83ad8c
ec4f41c
20c399e
79ac017
1699472
8de5612
9078bc3
ae49ff3
f62b9f3
4328fbf
231df8d
ebc7ebb
3fa4498
a2b98f5
98b147f
b9f7a99
8e405d6
e97c415
a0b3f7e
e5d9480
9674791
5711f10
d9cd52f
7ce5995
22fbf35
39d9fa5
7c3c91c
427acda
d36bf02
56d8b46
8e2a34d
e1df1a7
45518a1
ae20b2c
8cb8b57
b8bd2c2
a784301
19efd4f
42aabb6
0820681
eb9c205
126a74b
affe68f
68a9a59
1f2267c
de0458a
44415ba
c65d503
bcfb03f
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -29,3 +29,4 @@ run_app.bat | |
| python* | ||
| gdpr_consent/node_modules/ | ||
| *~ | ||
| .streamlit/secrets.toml | ||
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -5,8 +5,12 @@ gatherUsageStats = false | |
| developmentMode = false | ||
|
|
||
| [server] | ||
| address = "0.0.0.0" | ||
| maxUploadSize = 2000 #MB | ||
| port = 8501 # should be same as configured in deployment repo | ||
| enableCORS = false | ||
| enableXsrfProtection = false | ||
|
Comment on lines
+11
to
+12
Contributor
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. 🧩 Analysis chain🏁 Script executed: # First, let's read the .streamlit/config.toml file to see the full context
cat -n .streamlit/config.tomlRepository: OpenMS/FLASHApp Length of output: 1035 🏁 Script executed: # Also check if there are any comments or documentation in the file
head -30 .streamlit/config.tomlRepository: OpenMS/FLASHApp Length of output: 697 🌐 Web query:
💡 Result: What these flags actually do
The key security/behavior constraint (important behind proxies too)
Security implications of disabling them
Reverse proxy guidance (what to do instead of disabling)
Special cases to be aware of
Rule of thumb: behind a reverse proxy, treat CORS/XSRF errors as a signal that your public origin/path doesn’t match what Streamlit expects—fix with Sources[1] Streamlit docs — Citations:
Do not disable Streamlit's request-forgery protections in production deployments. Lines 11-12 disable both CORS and XSRF protection. Combined with Line 8 exposing the server to all interfaces (0.0.0.0), this creates a cross-site request forgery vulnerability for state-changing operations—particularly concerning given the app's file upload and admin flow capabilities. The correct approach for reverse-proxy setups is to keep these protections enabled and configure 🤖 Prompt for AI Agents |
||
|
|
||
|
|
||
| [theme] | ||
| # The preset Streamlit theme that your custom theme inherits from. One of "light" or "dark". | ||
|
|
||
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,8 @@ | ||
| # Streamlit Secrets Configuration | ||
| # Copy this file to secrets.toml and fill in your values. | ||
| # IMPORTANT: Never commit secrets.toml to version control! | ||
|
|
||
| [admin] | ||
| # Password required to save workspaces as demo workspaces (online mode only) | ||
| # Set a strong, unique password here | ||
| password = "your-secure-admin-password-here" |
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -12,6 +12,9 @@ services: | |
| - 8501:8501 | ||
| volumes: | ||
| - workspaces-streamlit-template:/workspaces-streamlit-template | ||
| command: streamlit run openms-streamlit-template/app.py | ||
| environment: | ||
| # Number of Streamlit server instances (default: 1 = no load balancer). | ||
| # Set to >1 to enable nginx load balancing across multiple Streamlit instances. | ||
| - STREAMLIT_SERVER_COUNT=1 | ||
|
Comment on lines
+15
to
+18
Contributor
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. Persist Redis alongside workspaces if job recovery is expected. This service now runs Redis locally, but the compose setup still only persists the workspace volume. Recreating the container wipes 🤖 Prompt for AI Agents |
||
| volumes: | ||
| workspaces-streamlit-template: | ||
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Line 290 overwrites the batch-file header.
The second redirection recreates
${{ env.APP_NAME }}.bat, so the@echo offwritten on the previous line is lost. Use>>here if you want both directives to stay in the file.💡 Minimal fix
echo '@echo off' > ${{ env.APP_NAME }}.bat - echo 'setlocal EnableDelayedExpansion' > ${{ env.APP_NAME }}.bat + echo 'setlocal EnableDelayedExpansion' >> ${{ env.APP_NAME }}.bat📝 Committable suggestion
🤖 Prompt for AI Agents