chore: allow JupyterLab config

Author: bpmct

registry/coder/modules/jupyterlab/README.md

@@ -20,3 +20,77 @@ module "jupyterlab" {
   agent_id = coder_agent.example.id
 }
 ```
+
+## Configuration
+
+You can customize JupyterLab server settings by providing a JSON configuration:
+
+```tf
+module "jupyterlab" {
+  count    = data.coder_workspace.me.start_count
+  source   = "registry.coder.com/coder/jupyterlab/coder"
+  version  = "1.1.1"
+  agent_id = coder_agent.example.id
+  config = {
+    ServerApp = {
+      port = 8888
+      token = ""
+      password = ""
+      allow_origin = "*"
+      base_url = "/lab"
+    }
+  }
+}
+```
+
+The `config` parameter accepts a map of configuration settings that will be written to `~/.jupyter/jupyter_server_config.json` before JupyterLab starts. This allows you to configure any JupyterLab server settings according to the [JupyterLab configuration documentation](https://jupyter-server.readthedocs.io/en/latest/users/configuration.html).
+
+### Common Configuration Examples
+
+**Disable authentication:**
+```tf
+config = {
+  ServerApp = {
+    token = ""
+    password = ""
+  }
+}
+```
+
+**Set custom port and allow all origins:**
+```tf
+config = {
+  ServerApp = {
+    port = 9999
+    allow_origin = "*"
+  }
+}
+```
+
+**Configure notebook directory:**
+```tf
+config = {
+  ServerApp = {
+    root_dir = "/workspace/notebooks"
+  }
+}
+```
+
+**Set Content-Security-Policy for iframe embedding in Coder:**
+```tf
+module "jupyterlab" {
+  count    = data.coder_workspace.me.start_count
+  source   = "registry.coder.com/coder/jupyterlab/coder"
+  version  = "1.1.1"
+  agent_id = coder_agent.example.id
+  config = {
+    ServerApp = {
+      tornado_settings = {
+        headers = {
+          "Content-Security-Policy" = "frame-ancestors 'self' ${data.coder_workspace.me.access_url}"
+        }
+      }
+    }
+  }
+}
+```

registry/coder/modules/jupyterlab/main.test.ts

@@ -3,6 +3,8 @@ import {
   execContainer,
   executeScriptInContainer,
   findResourceInstance,
+  readFileContainer,
+  removeContainer,
   runContainer,
   runTerraformApply,
   runTerraformInit,
@@ -104,4 +106,55 @@ describe("jupyterlab", async () => {
   //   const output = await executeScriptInContainerWithPip(state, "alpine");
   //   ...
   // });
+
+  it("writes ~/.jupyter/jupyter_server_config.json when config provided", async () => {
+    const id = await runContainer("alpine");
+    try {
+      const config = {
+        ServerApp: {
+          port: 8888,
+          token: "test-token",
+          password: "",
+          allow_origin: "*"
+        }
+      };
+      const expectedJson = JSON.stringify(config);
+      const state = await runTerraformApply(import.meta.dir, {
+        agent_id: "foo",
+        config,
+      });
+      const script = findResourceInstance(state, "coder_script", "jupyterlab_config").script;
+      const resp = await execContainer(id, ["sh", "-c", script]);
+      if (resp.exitCode !== 0) {
+        console.log(resp.stdout);
+        console.log(resp.stderr);
+      }
+      expect(resp.exitCode).toBe(0);
+      const content = await readFileContainer(id, "/root/.jupyter/jupyter_server_config.json");
+      expect(content).toBe(expectedJson);
+    } finally {
+      await removeContainer(id);
+    }
+  });
+
+  it("does not create config script when config is empty", async () => {
+    const state = await runTerraformApply(import.meta.dir, {
+      agent_id: "foo",
+      config: {},
+    });
+    const configScripts = state.resources.filter(
+      (res) => res.type === "coder_script" && res.name === "jupyterlab_config"
+    );
+    expect(configScripts.length).toBe(0);
+  });
+
+  it("does not create config script when config is not provided", async () => {
+    const state = await runTerraformApply(import.meta.dir, {
+      agent_id: "foo",
+    });
+    const configScripts = state.resources.filter(
+      (res) => res.type === "coder_script" && res.name === "jupyterlab_config"
+    );
+    expect(configScripts.length).toBe(0);
+  });
 });

registry/coder/modules/jupyterlab/main.tf

@@ -12,6 +12,11 @@ terraform {
 data "coder_workspace" "me" {}
 data "coder_workspace_owner" "me" {}
 
+locals {
+  config_json = jsonencode(var.config)
+  config_b64 = length(var.config) > 0 ? base64encode(local.config_json) : ""
+}
+
 # Add required variables for your modules and remove any unneeded variables
 variable "agent_id" {
   type        = string
@@ -57,6 +62,27 @@ variable "group" {
   default     = null
 }
 
+variable "config" {
+  type        = any
+  description = "A map of JupyterLab server configuration settings. When set, writes ~/.jupyter/jupyter_server_config.json."
+  default     = {}
+}
+
+resource "coder_script" "jupyterlab_config" {
+  count              = length(var.config) > 0 ? 1 : 0
+  agent_id           = var.agent_id
+  display_name       = "JupyterLab Config"
+  icon               = "/icon/jupyter.svg"
+  run_on_start       = true
+  start_blocks_login = false
+  script             = <<-EOT
+    #!/bin/sh
+    set -eu
+    mkdir -p "$HOME/.jupyter"
+    echo -n "${local.config_b64}" | base64 -d > "$HOME/.jupyter/jupyter_server_config.json"
+  EOT
+}
+
 resource "coder_script" "jupyterlab" {
   agent_id     = var.agent_id
   display_name = "jupyterlab"