gronis/seafile Docker 镜像 - 轩辕镜像

Seafile Server Docker容器

镜像概述

基于Ubuntu的Seafile Server Docker容器，源自GitHub仓库，用于快速部署Seafile文件同步与共享服务。该镜像提供自动化配置、版本升级和灵活的数据库支持，适合个人或组织搭建私有云存储系统。

!Docker Stars !Docker Pulls !Docker Build !Layers

核心功能与特性

• 重建时自动集成最新版Seafile
• 拉取新版本镜像后自动运行Seafile官方升级脚本
• 支持MySQL/MariaDB或SQLite数据库配置
• 初始运行时自动完成服务设置
• 多种启动模式支持：
  • garbage_collect: 运行垃圾回收器而非启动服务器
  • autorun: 默认模式，必要时设置服务器、升级数据库后启动服务
  • maintenance: 仅启动容器，可通过docker exec登录进行维护操作

文件结构

/seafile/
|-- ccnet
|-- conf
|-- seafile-data
`-- seahub-data
/opt/
`-- haiwen
    |-- ccnet -> /seafile/ccnet
    |-- conf -> /seafile/conf
    |-- logs
    |-- pids
    |-- seafile-data -> /seafile/seafile-data
    |-- seafile-server-5.1.3
    |-- seafile-server-latest -> seafile-server-5.1.3
    `-- seahub-data -> /seafile/seahub-data

所有重要数据存储在/seafile目录下，建议挂载该目录为卷（如示例配置所示），或分别挂载其子目录。

环境变量配置

自动设置必填环境变量

MySQL/MariaDB必填环境变量

使用MySQL/MariaDB时需配置：

MySQL/MariaDB可选环境变量

其他可选环境变量

部署示例

使用docker run

SQLite配置

bash
docker run -d -e SEAFILE_NAME=Seafile \
    -e SEAFILE_ADDRESS=seafile.example.com \
    -e SEAFILE_ADMIN=*** \
    -e SEAFILE_ADMIN_PW=SuperSecretPassword \
    -v /host/os/path:/seafile \
    gronis/seafile

MySQL配置

bash
docker run -d -e SEAFILE_NAME=Seafile \
    -e SEAFILE_ADDRESS=seafile.example.com \
    -e SEAFILE_ADMIN=*** \
    -e SEAFILE_ADMIN_PW=SuperSecretPassword \
    -e MYSQL_SERVER=seafile-db \
    -e MYSQL_USER=seafile \
    -e MYSQL_USER_PASSWORD=SuperSecretDatabasePassword \
    -e MYSQL_ROOT_PASSWORD=EvenMoreSuperSecretDatabasePassword \
    -v /host/os/path:/seafile \
    gronis/seafile

使用docker-compose

SQLite配置

yaml
version: '2'
services:
  seafile:
    image: gronis/seafile
    container_name: seafile
    restart: unless-stopped
    volumes:
      - ./seafile-container-data:/seafile:rw
    ports:
      - 8000:8000
      - 8082:8082
    environment:
      - SEAFILE_NAME=Seafile
      - SEAFILE_ADDRESS=seafile.example.com
      - SEAFILE_ADMIN=***
      - SEAFILE_ADMIN_PW=SuperSecretPassword

MySQL配置

yaml
version: '2'
services:
  seafile:
    image: gronis/seafile
    container_name: seafile
    restart: unless-stopped
    depends_on:
      - seafile-db
    links:
      - seafile-db
    volumes:
      - ./seafile-container-data:/seafile:rw
    ports:
      - 8000:8000
      - 8082:8082
    environment:
      - SEAFILE_NAME=Seafile
      - SEAFILE_ADDRESS=seafile.example.com
      - SEAFILE_ADMIN=***
      - SEAFILE_ADMIN_PW=SuperSecretPassword
      - MYSQL_SERVER=seafile-db
      - MYSQL_USER=seafile
      - MYSQL_USER_PASSWORD=SuperSecretDatabasePassword
      - MYSQL_ROOT_PASSWORD=EvenMoreSuperSecretDatabasePassword

  seafile-db:
    image: mariadb:latest
    container_name: seafile-db
    restart: unless-stopped
    volumes:
      - ./seafile-db-data:/var/lib/mysql
    environment:
      - MYSQL_ROOT_PASSWORD=EvenMoreSuperSecretDatabasePassword

完整HTTPS配置

建议将容器部署在反向代理后，以下是使用Nginx反向代理和Let's Encrypt实现HTTPS的完整配置（假设域名为seafile.example.com）：

yaml
version: '2'
services:
  seafile:
    image: gronis/seafile
    container_name: seafile
    restart: unless-stopped
    depends_on:
      - seafile-db
    links:
      - seafile-db
    volumes:
      - ./seafile-container-data:/seafile:rw
    environment:
      - VIRTUAL_HOST=seafile.example.com
      - VIRTUAL_PORT=8000
      - LETSENCRYPT_HOST=seafile.example.com
      - LETSENCRYPT_EMAIL=***
      - SEAFILE_NAME=Seafile
      - SEAFILE_ADDRESS=seafile.example.com
      - SEAFILE_ADMIN=***
      - SEAFILE_ADMIN_PW=SuperSecretPassword
      - SERVICE_URL=[***]
      - FILE_SERVER_ROOT=[***]
      - MYSQL_SERVER=seafile-db
      - MYSQL_USER=seafile
      - MYSQL_USER_PASSWORD=SuperSecretDatabasePassword
      - MYSQL_ROOT_PASSWORD=EvenMoreSuperSecretDatabasePassword

  seafile-db:
    image: mariadb:latest
    container_name: seafile-db
    restart: unless-stopped
    volumes:
      - ./seafile-db-data:/var/lib/mysql
    environment:
      - MYSQL_ROOT_PASSWORD=EvenMoreSuperSecretDatabasePassword

  nginx:
    image: nginx:alpine
    container_name: nginx
    restart: always
    ports:
      - 80:80
      - 443:443
    volumes:
      - ./nginx/conf.d:/etc/nginx/conf.d:ro
      - ./nginx/vhost.d:/etc/nginx/vhost.d:ro
      - ./nginx/html:/usr/share/nginx/html
      - ./nginx/certs:/etc/nginx/certs:ro
      - ./nginx/htpasswd:/etc/nginx/htpasswd:ro

  nginx-gen:
    image: jwilder/docker-gen:0.7.3
    container_name: nginx-gen
    restart: always
    depends_on:
      - nginx
    volumes_from:
      - nginx
    volumes:
      - /var/run/docker.sock:/tmp/docker.sock:ro
      - ./nginx.tmpl:/etc/docker-gen/templates/nginx.tmpl:ro
      - ./nginx/conf.d:/etc/nginx/conf.d:rw
    networks:
      - proxy-tier
    entrypoint: /usr/local/bin/docker-gen -notify-sighup nginx -watch -wait 5s:30s /etc/docker-gen/templates/nginx.tmpl /etc/nginx/conf.d/default.conf

  letsencrypt-nginx-proxy-companion:
    image: nginxproxy/acme-companion
    container_name: letsencrypt-nginx-proxy-companion
    restart: unless-stopped
    depends_on:
      - nginx
      - nginx-gen
    volumes_from:
      - nginx
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - ./nginx/vhost.d:/etc/nginx/vhost.d:rw
      - ./nginx/certs:/etc/nginx/certs:rw
    environment:
      - NGINX_DOCKER_GEN_CONTAINER=nginx-gen

Nginx额外配置

Seafile使用8082端口进行文件同步，需在Nginx中添加以下配置（保存至./nginx/vhost.d/seafile.example.com）：

conf
location /seafhttp {
    rewrite               ^/seafhttp(.*)$ $1 break;
    proxy_pass            [***]
    client_max_body_size  0;
    proxy_connect_timeout 36000s;
    proxy_read_timeout    36000s;
    proxy_send_timeout    36000s;
    send_timeout          36000s;
}

同时在Seafile服务的环境变量中添加：

yaml
environment:
  - SERVICE_URL=[***]
  - FILE_SERVER_ROOT=[***]