auto msg

Dockerfile

@@ -37,11 +37,12 @@ USER ${NB_UID}
 # Set the working directory for the user
 WORKDIR /data
 
+# Mount the secret and expose it as an environment variable
+RUN --mount=type=secret,id=JUPYTER_TOKEN,mode=0444,required=true \
+    export JUPYTER_TOKEN=$(cat /run/secrets/JUPYTER_TOKEN)
+
 # Expose the port for Nginx
 EXPOSE 7860
 
-# Set the environment variables
-ENV JUPYTERLAB_PORT=8888
-
 # Run the entrypoint script when the container starts
 ENTRYPOINT ["/app/entrypoint.sh"]

entrypoint.sh

@@ -17,8 +17,10 @@ if [ ! -w "/data" ]; then
     echo "Warning: No write permissions for /data. Some data may not be persistent."
 fi
 
-# Read JupyterLab token from HF secret
-JUPYTER_TOKEN=$(cat /run/secrets/JUPYTER_TOKEN)
+# Use the AUX_TOKEN environment variable if JUPYTER_TOKEN is not set
+if [ -z "$JUPYTER_TOKEN" ]; then
+    export JUPYTER_TOKEN=${AUX_TOKEN:-}
+fi
 
 # Verify if the token is empty
 if [ -z "$JUPYTER_TOKEN" ]; then
@@ -40,4 +42,4 @@ jupyter lab --ip=0.0.0.0 --port=${JUPYTERLAB_PORT} --no-browser --allow-root \
     --notebook-dir=/data &
 
 # Start Nginx in the foreground
-nginx -g "daemon off;" || handle_error "Failed to start Nginx"
+nginx -g "daemon off;" || handle_error "Failed to start Nginx"

jupyter_config.py

@@ -7,5 +7,5 @@ c.NotebookApp.port = 8888
 c.NotebookApp.open_browser = False
 c.NotebookApp.notebook_dir = '/data'
 c.NotebookApp.allow_root = True
-c.NotebookApp.token = os.environ.get('JUPYTER_TOKEN', '')
+c.NotebookApp.token = os.environ.get('JUPYTER_TOKEN')
 c.NotebookApp.base_url = '/jupyter'