#!/bin/bash
set -e

# Load deploy-time variables. DollarDeploy makes the template `env` map available
# to docker compose — either as a ./.env file and/or as exported shell env. We
# source the .env (if present) so the configured values are usable here as real
# shell variables. Most app config lives in the template `env` map (visible and
# editable in .dollardeploy.yml); only secrets and values derived from reserved
# vars are computed below.
set -a
[ -f ./.env ] && . ./.env
set +a

# Persisted app storage + logs (bind-mounted into the containers, owned by the
# image's runtime user 1000:1000).
mkdir -p ./app-storage ./logs
sudo chown -R 1000:1000 ./app-storage ./logs || true

# Generate stable secrets ONCE and persist them in the project dir so they
# survive redeploys (otherwise OAuth tokens and encrypted data would break).
if [ ! -f ./app_key.txt ]; then
  echo "base64:$(openssl rand -base64 32)" > ./app_key.txt
fi
if [ ! -f ./oauth-private.key ]; then
  openssl genrsa -out ./oauth-private.key 4096
  openssl rsa -in ./oauth-private.key -pubout -out ./oauth-public.key
fi
chmod 600 ./app_key.txt ./oauth-private.key

# Fail loudly if the required values didn't arrive, instead of writing a broken
# laravel.env that silently misconfigures the app. APP_URL/APP_HOSTNAME/USER_EMAIL
# are DollarDeploy reserved vars, so the template passes them in via the
# non-reserved aliases PUBLIC_URL / PUBLIC_HOSTNAME / ADMIN_EMAIL.
: "${PUBLIC_URL:?PUBLIC_URL not set}"
: "${DB_DATABASE:?DB_DATABASE not set}"
: "${DB_USERNAME:?DB_USERNAME not set}"
: "${DB_PASSWORD:?DB_PASSWORD not set}"

# Build the application env file consumed by the app/scheduler/queue containers.
# Plain config comes from the template `env` map (with safe fallbacks); APP_URL
# and SUPER_ADMINS are derived from reserved vars; the keys are the generated
# secrets above.
cat > laravel.env <<EOF
APP_NAME="${APP_NAME:-solidtime}"
VITE_APP_NAME="${APP_NAME:-solidtime}"
APP_ENV="${APP_ENV:-production}"
APP_DEBUG="${APP_DEBUG:-false}"
APP_URL="${PUBLIC_URL}"
APP_FORCE_HTTPS="${APP_FORCE_HTTPS:-true}"
APP_ENABLE_REGISTRATION="${APP_ENABLE_REGISTRATION:-true}"
TRUSTED_PROXIES="${TRUSTED_PROXIES:-0.0.0.0/0,2000:0:0:0:0:0:0:0/3}"
LOG_CHANNEL="${LOG_CHANNEL:-stderr}"
LOG_LEVEL="${LOG_LEVEL:-error}"
AUTO_DB_MIGRATE="${AUTO_DB_MIGRATE:-true}"
DB_CONNECTION="${DB_CONNECTION:-pgsql}"
DB_HOST="${DB_HOST:-database}"
DB_PORT="${DB_PORT:-5432}"
DB_SSLMODE="${DB_SSLMODE:-disable}"
DB_DATABASE="${DB_DATABASE}"
DB_USERNAME="${DB_USERNAME}"
DB_PASSWORD="${DB_PASSWORD}"
QUEUE_CONNECTION="${QUEUE_CONNECTION:-database}"
FILESYSTEM_DISK="${FILESYSTEM_DISK:-local}"
PUBLIC_FILESYSTEM_DISK="${PUBLIC_FILESYSTEM_DISK:-public}"
GOTENBERG_URL="${GOTENBERG_URL:-http://gotenberg:3000}"
SUPER_ADMINS="${ADMIN_EMAIL}"
MAIL_MAILER="${MAIL_MAILER:-log}"
MAIL_HOST="${MAIL_HOST:-}"
MAIL_PORT="${MAIL_PORT:-}"
MAIL_USERNAME="${MAIL_USERNAME:-}"
MAIL_PASSWORD="${MAIL_PASSWORD:-}"
MAIL_ENCRYPTION="${MAIL_ENCRYPTION:-tls}"
MAIL_FROM_ADDRESS="${MAIL_FROM_ADDRESS:-no-reply@${PUBLIC_HOSTNAME:-localhost}}"
MAIL_FROM_NAME="${MAIL_FROM_NAME:-solidtime}"
APP_KEY="$(cat ./app_key.txt)"
PASSPORT_PRIVATE_KEY="$(cat ./oauth-private.key)"
PASSPORT_PUBLIC_KEY="$(cat ./oauth-public.key)"
EOF


#!/bin/bash
# Create the Laravel Passport OAuth clients Solidtime needs, after the stack is up.
# Passport 13 resolves clients from the database, so these just have to exist; the
# DB (persisted volume) + marker files (persisted project dir) make this run once.
set -e

run() { docker compose exec -T scheduler php artisan "$@"; }

# 1) Personal access client — enables the "Create API Token" feature.
if [ ! -f ./.passport_personal_done ]; then
  for i in $(seq 1 12); do
    if run passport:client --personal --name="solidtime" --no-interaction >/dev/null 2>&1; then
      touch ./.passport_personal_done
      echo "Created Passport personal access client."
      break
    fi
    sleep 5
  done
fi

# 2) Desktop / Instance OAuth client — used to connect the Solidtime desktop app
#    (and as the template for browser extensions). Public PKCE client.
if [ ! -f ./.passport_desktop_done ]; then
  if run passport:client --name="desktop" --redirect_uri="solidtime://oauth/callback" --public -n >/dev/null 2>&1; then
    # Read the generated client id back cleanly via delimited markers.
    out=$(run tinker --execute="echo 'CID:'.optional(\Laravel\Passport\Client::where('name','desktop')->latest('created_at')->first())->getKey().':END';" 2>/dev/null || true)
    cid=$(printf '%s' "$out" | sed -n 's/.*CID:$.*$:END.*/\1/p')
    if [ -n "$cid" ]; then
      echo "$cid" > ./instance-client-id.txt
      touch ./.passport_desktop_done
      echo "============================================================"
      echo " Solidtime Instance Client ID (desktop app / extension):"
      echo "   $cid"
      echo " (also saved to ./instance-client-id.txt)"
      echo "============================================================"
    fi
  fi
fi

# Best-effort: never fail the deploy over client setup — the app is still usable,
# and anything missing can be created manually.
exit 0


Version: 0.14.0. Solidtime is a modern open-source time
tracking application. Track time across projects and clients, manage teams and
organizations, set billable rates, and export detailed reports and invoices.
A privacy-friendly, self-hostable alternative to Toggl and Clockify, built on
Laravel + Vue. Ships as an all-in-one deployment with PostgreSQL, a queue
worker, a scheduler, and Gotenberg for PDF export.


About DollarDeploy