From ffa781d8c9d5ed2b27967b45aa66d39f84851bc4 Mon Sep 17 00:00:00 2001 From: furyhawk Date: Mon, 30 Jun 2025 16:30:59 +0800 Subject: [PATCH] fix: rename db service to mariadb and update references in configuration --- swarm/seafile/seafile-server.yml | 6 +- swarm/seafile/seafile.yml | 217 +++++++++++++++++++++++++++++++ 2 files changed, 220 insertions(+), 3 deletions(-) create mode 100644 swarm/seafile/seafile.yml diff --git a/swarm/seafile/seafile-server.yml b/swarm/seafile/seafile-server.yml index add4465..38986bd 100644 --- a/swarm/seafile/seafile-server.yml +++ b/swarm/seafile/seafile-server.yml @@ -1,5 +1,5 @@ services: - db: + mariadb: image: ${SEAFILE_DB_IMAGE:-mariadb:10.11} container_name: seafile-mysql environment: @@ -39,7 +39,7 @@ services: volumes: - ${SEAFILE_VOLUME:-/opt/seafile-data}:/shared environment: - - DB_HOST=${SEAFILE_MYSQL_DB_HOST:-db} + - DB_HOST=${SEAFILE_MYSQL_DB_HOST:-mariadb} - DB_PORT=${SEAFILE_MYSQL_DB_PORT:-3306} - DB_USER=${SEAFILE_MYSQL_DB_USER:-seafile} - DB_ROOT_PASSWD=${INIT_SEAFILE_MYSQL_ROOT_PASSWORD:-} @@ -62,7 +62,7 @@ services: caddy: ${SEAFILE_SERVER_PROTOCOL:-http}://${SEAFILE_SERVER_HOSTNAME:?Variable is not set or empty} caddy.reverse_proxy: "{{upstreams 80}}" depends_on: - db: + mariadb: condition: service_healthy memcached: condition: service_started diff --git a/swarm/seafile/seafile.yml b/swarm/seafile/seafile.yml new file mode 100644 index 0000000..35f4677 --- /dev/null +++ b/swarm/seafile/seafile.yml @@ -0,0 +1,217 @@ +networks: + seafile-network: + {} + traefik-public: + external: true + +volumes: + mariadb-data: + seafile-data: + seafile-mariadb-backup: + seafile-data-backups: + seafile-database-backups: + +services: + # seafile-init: + # image: ${SEAFILE_IMAGE} + # user: "0:0" + # command: > + # sh -c " + # echo 'Fixing permissions for seafile data directory...' && + # mkdir -p ${DATA_PATH}/seafile && + # chmod -R a+rwx ${DATA_PATH}/seafile/ && + # chown -R 8000:8000 ${DATA_PATH} && + # echo 'Permissions fixed successfully - seafile directory has full permissions' + # " + # volumes: + # - seafile-data:${DATA_PATH} + # networks: + # - seafile-network + # restart: "no" + + mariadb: + image: ${SEAFILE_DB_IMAGE:-mariadb:10.11} + container_name: seafile-mysql + environment: + MARIADB_USER: ${SEAFILE_MYSQL_DB_USER} + MARIADB_PASSWORD: ${SEAFILE_MYSQL_DB_PASSWORD} + MARIADB_ROOT_PASSWORD: ${INIT_SEAFILE_MYSQL_ROOT_PASSWORD} + MARIADB_DATABASE: seafile + MARIADB_AUTO_UPGRADE: 1 + # volumes: + # - mariadb-data:/var/lib/mysql + volumes: + - "${SEAFILE_MYSQL_VOLUME:-/opt/seafile-mysql/db}:/var/lib/mysql" + networks: + - seafile-network + healthcheck: + test: ["CMD", "/usr/local/bin/healthcheck.sh", "--connect", "--mariadbupgrade", "--innodb_initialized"] + interval: 30s + timeout: 5s + retries: 3 + start_period: 60s + restart: unless-stopped + + memcached: + image: ${SEAFILE_MEMCACHED_IMAGE:-memcached:1.6.29} + container_name: seafile-memcached + entrypoint: memcached -m 256 + networks: + - seafile-network + healthcheck: + test: ["CMD", "nc", "-z", "localhost", "11211"] + interval: 30s + timeout: 5s + retries: 3 + start_period: 30s + restart: unless-stopped + + seafile: + image: ${SEAFILE_IMAGE:-seafileltd/seafile-mc:12.0-latest} + container_name: seafile + ports: + - "8000:80" + volumes: + - ${SEAFILE_VOLUME:-/opt/seafile-data}:/shared + environment: + - DB_HOST=${SEAFILE_MYSQL_DB_HOST:-mariadb} + - DB_PORT=${SEAFILE_MYSQL_DB_PORT:-3306} + - DB_USER=${SEAFILE_MYSQL_DB_USER:-seafile} + - DB_ROOT_PASSWD=${INIT_SEAFILE_MYSQL_ROOT_PASSWORD:?Variable is not set or empty} + - DB_PASSWORD=${SEAFILE_MYSQL_DB_PASSWORD:?Variable is not set or empty} + - SEAFILE_MYSQL_DB_CCNET_DB_NAME=${SEAFILE_MYSQL_DB_CCNET_DB_NAME:-ccnet_db} + - SEAFILE_MYSQL_DB_SEAFILE_DB_NAME=${SEAFILE_MYSQL_DB_SEAFILE_DB_NAME:-seafile_db} + - SEAFILE_MYSQL_DB_SEAHUB_DB_NAME=${SEAFILE_MYSQL_DB_SEAHUB_DB_NAME:-seahub_db} + - TIME_ZONE=${SEAFILE_TIMEZONE:-Etc/UTC} + - INIT_SEAFILE_ADMIN_EMAIL=${INIT_SEAFILE_ADMIN_EMAIL:-me@example.com} + - INIT_SEAFILE_ADMIN_PASSWORD=${INIT_SEAFILE_ADMIN_PASSWORD:-asecret} + - SEAFILE_SERVER_HOSTNAME=${SEAFILE_SERVER_HOSTNAME:?Variable is not set or empty} + - SEAFILE_SERVER_PROTOCOL=${SEAFILE_SERVER_PROTOCOL:-http} + - SITE_ROOT=${SITE_ROOT:-/} + - NON_ROOT=${NON_ROOT:-false} + - JWT_PRIVATE_KEY=${JWT_PRIVATE_KEY:?Variable is not set or empty} + - SEAFILE_LOG_TO_STDOUT=${SEAFILE_LOG_TO_STDOUT:-false} + - ENABLE_SEADOC=${ENABLE_SEADOC:-false} + - SEADOC_SERVER_URL=${SEAFILE_SERVER_PROTOCOL:-http}://${SEAFILE_SERVER_HOSTNAME:?Variable is not set or empty}/sdoc-server + - MEMCACHED_SERVER_HOST=memcached + - MEMCACHED_SERVER_PORT=11211 + - FORCE_HTTPS_IN_CONF=${FORCE_HTTPS_IN_CONF:-true} + networks: + - seafile-network + - traefik-public + healthcheck: + test: timeout 10s bash -c ':> /dev/tcp/127.0.0.1/8000' || exit 1 + interval: 30s + timeout: 5s + retries: 3 + start_period: 90s + labels: + # Enable Traefik for this container + - "traefik.enable=true" + # Global settings for compression middleware + - "traefik.http.middlewares.compresstraefik.compress=true" + # Match incoming requests on the specific hostname for Seafile/Seahub + - "traefik.http.routers.seafile.rule=Host(`${SEAFILE_SERVER_HOSTNAME}`)" + # Assign the router to a named Traefik service + - "traefik.http.routers.seafile.service=seafile" + # Use the 'websecure' (HTTPS) entry point + - "traefik.http.routers.seafile.entrypoints=https" + # Define the internal container port for routing + - "traefik.http.services.seafile.loadbalancer.server.port=8000" + # Enable TLS on this router + - "traefik.http.routers.seafile.tls=true" + # Use Let's Encrypt for certificate management + - "traefik.http.routers.seafile.tls.certresolver=le" + # Pass the original Host header to the container + - "traefik.http.services.seafile.loadbalancer.passhostheader=true" + # Apply middlewares for security headers and compression + - "traefik.http.routers.seafile.middlewares=sec-headers,compresstraefik" + # Match incoming requests on the specific hostname for Seafdav + - "traefik.http.routers.seafile-dav.rule=Host(`${SEAFILE_SERVER_HOSTNAME}`) && PathPrefix(`/seafdav`)" + # Assign the router to a named Traefik service + - "traefik.http.routers.seafile-dav.service=seafile-dav" + # Use the 'websecure' (HTTPS) entry point + - "traefik.http.routers.seafile-dav.entrypoints=https" + # Define the internal container port for routing + - "traefik.http.services.seafile-dav.loadbalancer.server.port=8080" + # Enable TLS on this router + - "traefik.http.routers.seafile-dav.tls=true" + # Use Let's Encrypt for certificate management + - "traefik.http.routers.seafile-dav.tls.certresolver=le" + # Pass the original Host header to the container + - "traefik.http.services.seafile-dav.loadbalancer.passhostheader=true" + # Apply compression middleware + - "traefik.http.routers.seafile-dav.middlewares=compresstraefik" + # Match incoming requests on the specific hostname for Seafhttp + - "traefik.http.routers.seafile-http.rule=Host(`${SEAFILE_SERVER_HOSTNAME}`) && PathPrefix(`/seafhttp`)" + # Assign the router to a named Traefik service + - "traefik.http.routers.seafile-http.service=seafile-http" + # Use the 'websecure' (HTTPS) entry point + - "traefik.http.routers.seafile-http.entrypoints=https" + # Define the internal container port for routing + - "traefik.http.services.seafile-http.loadbalancer.server.port=8082" + # Enable TLS on this router + - "traefik.http.routers.seafile-http.tls=true" + # Use Let's Encrypt for certificate management + - "traefik.http.routers.seafile-http.tls.certresolver=le" + # Pass the original Host header to the container + - "traefik.http.services.seafile-http.loadbalancer.passhostheader=true" + # Apply middlewares for stripping prefix and compression + - "traefik.http.middlewares.seafile-strip.stripprefix.prefixes=/seafhttp" + - "traefik.http.routers.seafile-http.middlewares=seafile-strip,compresstraefik" + # Security headers settings + - "traefik.http.middlewares.sec-headers.headers.sslredirect=true" + - "traefik.http.middlewares.sec-headers.headers.browserXssFilter=true" + - "traefik.http.middlewares.sec-headers.headers.contentTypeNosniff=true" + - "traefik.http.middlewares.sec-headers.headers.forceSTSHeader=true" + - "traefik.http.middlewares.sec-headers.headers.stsIncludeSubdomains=true" + - "traefik.http.middlewares.sec-headers.headers.stsPreload=true" + - "traefik.http.middlewares.sec-headers.headers.referrerPolicy=same-origin" + # Specify which Docker network Traefik should use for routing + - "traefik.docker.network=traefik-public" + + restart: unless-stopped + depends_on: + mariadb: + condition: service_healthy + memcached: + condition: service_started + + # backups: + # image: ${SEAFILE_DB_IMAGE:-mariadb:10.11} + # command: >- + # sh -c "sleep $$BACKUP_INIT_SLEEP && + # while true; do + # until mariadb -h mariadb -u $$SEAFILE_MYSQL_DB_USER -p\"$$SEAFILE_MYSQL_DB_PASSWORD\" -e 'SELECT 1' > /dev/null 2>&1; do + # echo 'Waiting for MariaDB to be ready...' + # sleep 10 + # done && + # mariadb-dump -h mariadb -u $$SEAFILE_MYSQL_DB_USER -p\"$$SEAFILE_MYSQL_DB_PASSWORD\" --all-databases | gzip > \"$$MARIADB_BACKUPS_PATH/$$MARIADB_BACKUP_NAME-$$(date '+%Y-%m-%d_%H-%M').gz\" && + # tar -zcpf $$DATA_BACKUPS_PATH/$$DATA_BACKUP_NAME-$$(date \"+%Y-%m-%d_%H-%M\").tar.gz --exclude-from=/dev/null -C $$(dirname $$DATA_PATH) $$(basename $$DATA_PATH) && + # find $$MARIADB_BACKUPS_PATH -type f -mtime +$$MARIADB_BACKUP_PRUNE_DAYS | xargs rm -f && + # find $$DATA_BACKUPS_PATH -type f -mtime +$$DATA_BACKUP_PRUNE_DAYS | xargs rm -f; + # sleep $$BACKUP_INTERVAL; done" + # volumes: + # - seafile-mariadb-backup:/var/lib/mysql + # - seafile-data:${DATA_PATH} + # - seafile-data-backups:${DATA_BACKUPS_PATH} + # - seafile-database-backups:${MARIADB_BACKUPS_PATH} + # environment: + # SEAFILE_MYSQL_DB_USER: ${SEAFILE_MYSQL_DB_USER} + # SEAFILE_MYSQL_DB_PASSWORD: ${SEAFILE_MYSQL_DB_PASSWORD} + # MARIADB_ROOT_PASSWORD: ${INIT_SEAFILE_MYSQL_ROOT_PASSWORD} + # BACKUP_INIT_SLEEP: ${BACKUP_INIT_SLEEP} + # BACKUP_INTERVAL: ${BACKUP_INTERVAL} + # MARIADB_BACKUP_PRUNE_DAYS: ${MARIADB_BACKUP_PRUNE_DAYS} + # DATA_BACKUP_PRUNE_DAYS: ${DATA_BACKUP_PRUNE_DAYS} + # MARIADB_BACKUPS_PATH: ${MARIADB_BACKUPS_PATH} + # DATA_BACKUPS_PATH: ${DATA_BACKUPS_PATH} + # DATA_PATH: ${DATA_PATH} + # MARIADB_BACKUP_NAME: ${MARIADB_BACKUP_NAME} + # DATA_BACKUP_NAME: ${DATA_BACKUP_NAME} + # networks: + # - seafile-network + # restart: unless-stopped + # depends_on: + # mariadb: + # condition: service_healthy