Add Supabase config and HF webhook URL

start.sh

@@ -3,39 +3,18 @@ set -e # Exit immediately if a command exits with a non-zero status.
 
 echo "--- Script Start ---"
 echo "Running as user: $(whoami) (UID: $(id -u), GID: $(id -g))"
+# ... (rest of initial echos and directory setup remains the same) ...
 
 # --- Persistent Data Setup ---
 N8N_DATA_DIR="/data/.n8n"
-POSTGRES_DATA_DIR="/data/postgres"
-QDRANT_DATA_DIR="/data/qdrant_storage"
-OLLAMA_MODELS_DIR="/data/.ollama"
+POSTGRES_DATA_DIR="/data/postgres" # Should be owned by n8nuser (UID 1000)
+QDRANT_DATA_DIR="/data/qdrant_storage" # Should be owned by n8nuser
+OLLAMA_MODELS_DIR="/data/.ollama" # Should be owned by n8nuser
 
 echo "Ensuring application data directories exist..."
-
-# Create directories if they don't exist (may need root permissions)
-if [ ! -d "/data" ]; then
-    echo "Creating /data directory..."
-    mkdir -p /data
-fi
-
-# Try to create subdirectories, if we fail (permission denied), assume we're not root
-# and the directories should already exist with correct permissions from HF
-if ! mkdir -p "$N8N_DATA_DIR" "$POSTGRES_DATA_DIR" "$QDRANT_DATA_DIR" "$OLLAMA_MODELS_DIR" 2>/dev/null; then
-    echo "Note: Could not create directories (may already exist or permission denied). Continuing..."
-fi
-
-# Change ownership to n8nuser if we have permissions
-if [ "$(id -u)" -eq 0 ]; then
-    echo "Running as root. Changing ownership of /data to n8nuser..."
-    chown -R n8nuser:n8nuser /data
-    chmod -R u+rwx /data
-    echo "Ownership changed successfully."
-else
-    echo "Not running as root. Checking current permissions..."
-fi
-
-echo "Permissions of data directories in /data:"
-ls -ld "$N8N_DATA_DIR" "$POSTGRES_DATA_DIR" "$QDRANT_DATA_DIR" "$OLLAMA_MODELS_DIR" 2>/dev/null || echo "Some directories may not exist yet."
+mkdir -p "$N8N_DATA_DIR" "$POSTGRES_DATA_DIR" "$QDRANT_DATA_DIR" "$OLLAMA_MODELS_DIR"
+echo "Permissions of data directories in /data (should be owned by $(whoami)):"
+ls -ld "$N8N_DATA_DIR" "$POSTGRES_DATA_DIR" "$QDRANT_DATA_DIR" "$OLLAMA_MODELS_DIR"
 
 ln -sfn "$N8N_DATA_DIR" /home/n8nuser/.n8n
 export OLLAMA_MODELS="$OLLAMA_MODELS_DIR"
@@ -49,8 +28,8 @@ POSTGRES_PORT="${DB_POSTGRESDB_PORT:-5432}" # Define port for consistency
 chmod u+rwx "$POSTGRES_DATA_DIR"
 
 if [ ! -d "$POSTGRES_DATA_DIR/base" ]; then
-    echo "Initializing PostgreSQL database in $POSTGRES_DATA_DIR as user n8nuser..."
-    su - n8nuser -c "/usr/lib/postgresql/14/bin/initdb -D '$POSTGRES_DATA_DIR' --username=n8nuser --no-locale --encoding=UTF8"
+    echo "Initializing PostgreSQL database in $POSTGRES_DATA_DIR as user $(whoami)..."
+    /usr/lib/postgresql/14/bin/initdb -D "$POSTGRES_DATA_DIR" --username=$(whoami) --no-locale --encoding=UTF8
     if [ $? -ne 0 ]; then echo "ERROR: PostgreSQL initdb failed."; ls -ld "$POSTGRES_DATA_DIR"; exit 1; fi
     
     echo "PostgreSQL Initialized. Ownership/permissions of $POSTGRES_DATA_DIR after initdb:"
@@ -59,7 +38,7 @@ if [ ! -d "$POSTGRES_DATA_DIR/base" ]; then
     echo "Temporarily starting PostgreSQL to create database role and database..."
     # For pg_ctl, it's good practice to point to the PGDATA explicitly.
     # pg_ctl will find postgresql.conf within PGDATA.
-    su - n8nuser -c "/usr/lib/postgresql/14/bin/pg_ctl -D '$POSTGRES_DATA_DIR' -o \"-p $POSTGRES_PORT -c listen_addresses='localhost'\" -w start"
+    /usr/lib/postgresql/14/bin/pg_ctl -D "$POSTGRES_DATA_DIR" -o "-p $POSTGRES_PORT -c listen_addresses='localhost'" -w start
     
     PG_ROLE_NAME="${DB_POSTGRESDB_USER:-n8n}"
     PG_PASSWORD="${DB_POSTGRESDB_PASSWORD}"
@@ -68,26 +47,27 @@ if [ ! -d "$POSTGRES_DATA_DIR/base" ]; then
     if [ -z "$PG_PASSWORD" ]; then echo "ERROR: DB_POSTGRESDB_PASSWORD is not set."; exit 1; fi
 
     echo "Creating PostgreSQL role '$PG_ROLE_NAME' and database '$PG_DB_NAME'..."
-    su - n8nuser -c "psql -v ON_ERROR_STOP=1 --username=n8nuser --port='$POSTGRES_PORT' --host=localhost postgres <<-EOSQL
-        CREATE ROLE \"$PG_ROLE_NAME\" WITH LOGIN PASSWORD '$PG_PASSWORD';
-        CREATE DATABASE \"$PG_DB_NAME\" OWNER \"$PG_ROLE_NAME\";
+    psql -v ON_ERROR_STOP=1 --username=$(whoami) --port="$POSTGRES_PORT" --host=localhost postgres <<-EOSQL
+        CREATE ROLE "$PG_ROLE_NAME" WITH LOGIN PASSWORD '$PG_PASSWORD';
+        CREATE DATABASE "$PG_DB_NAME" OWNER "$PG_ROLE_NAME";
 EOSQL
-"
     echo "PostgreSQL role and database created."
-    su - n8nuser -c "/usr/lib/postgresql/14/bin/pg_ctl -D '$POSTGRES_DATA_DIR' -m fast -w stop"
+    /usr/lib/postgresql/14/bin/pg_ctl -D "$POSTGRES_DATA_DIR" -m fast -w stop
     echo "Temporary PostgreSQL server stopped."
 else
     echo "PostgreSQL database found in $POSTGRES_DATA_DIR."
 fi
 
-echo "Starting PostgreSQL server for application use (as n8nuser)..."
-# Switch to n8nuser for running services
-su - n8nuser -c "/usr/lib/postgresql/14/bin/postgres -D '$POSTGRES_DATA_DIR' -p '$POSTGRES_PORT'" &
+echo "Starting PostgreSQL server for application use (as $(whoami))..."
+# The postgres command will use the postgresql.conf found within $POSTGRES_DATA_DIR
+# We don't need to specify -c config_file if it's inside PGDATA.
+# Just ensure the port is correctly passed if not default.
+/usr/lib/postgresql/14/bin/postgres -D "$POSTGRES_DATA_DIR" -p "$POSTGRES_PORT" &
 PG_PID=$!
 echo "Waiting for PostgreSQL to start (PID: $PG_PID)..."
 max_wait=30
 count=0
-until pg_isready -h localhost -p "$POSTGRES_PORT" -U n8nuser -q || [ $count -eq $max_wait ]; do
+until pg_isready -h localhost -p "$POSTGRES_PORT" -U $(whoami) -q || [ $count -eq $max_wait ]; do
   echo -n "."
   sleep 1
   count=$((count+1))
@@ -115,8 +95,8 @@ QDRANT_CONFIG_DIR="/qdrant/config"
 QDRANT_STORAGE_PATH_IN_CONFIG="/qdrant/storage"
 ln -sfn "$QDRANT_DATA_DIR" "$QDRANT_STORAGE_PATH_IN_CONFIG"
 
-echo "Starting Qdrant (as n8nuser)..."
-su - n8nuser -c "/usr/local/bin/qdrant --config-path '$QDRANT_CONFIG_DIR/config.yaml'" &
+echo "Starting Qdrant..."
+/usr/local/bin/qdrant --config-path "$QDRANT_CONFIG_DIR/config.yaml" &
 QDRANT_PID=$!
 echo "Waiting for Qdrant to start (PID: $QDRANT_PID)..."
 until curl -sf http://localhost:6333/readyz > /dev/null; do
@@ -131,8 +111,8 @@ echo "Qdrant started."
 echo "--- Ollama Setup (running as $(whoami)) ---"
 echo "Ollama models will be stored in: $OLLAMA_MODELS_DIR"
 
-echo "Starting Ollama server (as n8nuser)..."
-su - n8nuser -c "ollama serve" &
+echo "Starting Ollama server..."
+ollama serve &
 OLLAMA_PID=$!
 echo "Waiting for Ollama to start (PID: $OLLAMA_PID)..."
 until curl -sf http://localhost:11434/api/tags > /dev/null 2>&1 ; do
@@ -177,25 +157,26 @@ export N8N_USER_FOLDER="/home/n8nuser/.n8n"
 export GENAI_MODELS_N8N_DEFAULT_MODEL="$DEFAULT_MODEL" 
 export DB_POSTGRESDB_PORT="$POSTGRES_PORT" 
 
-# URLs are already set in Dockerfile ENV, but we can override if needed
-echo "N8N URLs configured:"
-echo "  N8N_EDITOR_BASE_URL: $N8N_EDITOR_BASE_URL"
-echo "  WEBHOOK_URL: $WEBHOOK_URL"
-echo "  N8N_HOST: $N8N_HOST"
-echo "  N8N_PORT: $N8N_PORT"
-echo "  N8N_PROTOCOL: $N8N_PROTOCOL"
+# --- MOST PERMISSIVE EMBEDDING CONFIGURATION FOR DIAGNOSIS ---
+echo "WARNING: USING HIGHLY PERMISSIVE (INSECURE) EMBEDDING SETTINGS FOR DIAGNOSIS!"
+export N8N_SEC_EMBEDDER_HEADER_MODE="allowAll" 
+# The mode "allowAll" should theoretically make n8n send headers that allow embedding from anywhere.
+# This is a simpler way to test than just relying on the regex if there's any doubt.
+# If "allowAll" doesn't work, then N8N_SEC_EMBEDDER_HEADER_ALLOW_FROM_REGEX=".*" is the next most forceful.
+# We'll also set the regex to ".*" just in case "allowAll" isn't picked up or is deprecated.
+export N8N_SEC_EMBEDDER_HEADER_ALLOW_FROM_REGEX=".*"
+# --- End Embedding Configuration ---
 
-# OAuth callback configuration for ClickUp compatibility
-# n8n's OAuth callback URL is constructed from WEBHOOK_URL + /rest/oauth2-credential/callback
-# ClickUp trims the path, so we need to ensure the base URL is correctly configured
-# In ClickUp's app settings, register: https://leon4gr45-n8n.hf.space/
-# n8n will automatically handle the full callback path internally
+export N8N_SEC_ALLOW_ALL_ORIGINS_FOR_WEBHOOKS="true" 
+export N8N_RUNNERS_ENABLED="true" # As per n8n deprecation warning
+
+N8N_SPACE_URL="https://leon4gr45-n8n.hf.space/"
+export N8N_EDITOR_BASE_URL="$N8N_SPACE_URL"
+export WEBHOOK_URL="$N8N_SPACE_URL"
+echo "N8N URLs set to: $N8N_EDITOR_BASE_URL"
 
 # Optional: Increase n8n log level for more startup details
 # export N8N_LOG_LEVEL="debug" 
 
-echo "Before su: environment variables"
-env | grep N8N
-
-echo "Starting n8n (as n8nuser) with highly permissive (INSECURE) embedding rules for diagnosis..."
-su n8nuser -c "echo 'Inside su:' && env | grep N8N && n8n start"
+echo "Starting n8n with highly permissive (INSECURE) embedding rules for diagnosis..."
+exec n8n start