seafile

About

Seafile is an open-source, cross-platform file-hosting software system. Files are stored on a central server and can be synchronized with personal computers and mobile devices through apps or through the web interface.

• Github
• Documentation
• Docker Image

Table of Contents

• About
• Table of Contents
• Files structure
• Information
  • docker-compose
• Usage
  • Requirements
  • Configuration
• Update
• Security
• Backup

Files structure

.
|-- .env
|-- docker-compose.yml
|-- seafile-mysql/
`-- shared/

• .env - a file containing all the environment variables used in the docker-compose.yml
• docker-compose.yml - a docker-compose file, use to configure your application’s services
• seafile-mysql/ - a directory used to store the mysql data
• shared/ - a directory used to store seafile's data

Please make sure that all the files and directories are present.

Information

docker-compose

Links to the following docker-compose.yml and the corresponding .env.

• docker-compose.yml

  version: '3'
  
  services:
    db:
      image: mariadb:10.5
      container_name: seafile-mysql
      restart: unless-stopped
      volumes:
        - ./seafile-mysql/db:/var/lib/mysql
      environment:
        - MYSQL_ROOT_PASSWORD=${DB_ROOT_PASSWD}  # Requested, set the root's password of MySQL service.
        - MYSQL_LOG_CONSOLE=true
      networks:
        - seafile-net
      labels:
        # Watchtower Update
        - "com.centurylinklabs.watchtower.enable=true"
  
    memcached:
      image: memcached:latest
      container_name: seafile-memcached
      restart: unless-stopped
      entrypoint: memcached -m 256
      networks:
        - seafile-net
      labels:
        # Watchtower Update
        - "com.centurylinklabs.watchtower.enable=true"
  
    seafile:
      image: seafileltd/seafile-mc:latest
      container_name: seafile
      restart: unless-stopped
      volumes:
        - ./shared:/shared
      environment:
        - DB_HOST=db
        - DB_ROOT_PASSWD=${DB_ROOT_PASSWD}  # Requested, the value shuold be root's password of MySQL service.
        - SEAFILE_ADMIN_EMAIL=${SEAFILE_ADMIN_EMAIL} # Specifies Seafile admin user, default is 'me@example.com'.
        - SEAFILE_ADMIN_PASSWORD=${SEAFILE_ADMIN_PASSWORD}     # Specifies Seafile admin password, default is 'asecret'.
        - SEAFILE_SERVER_LETSENCRYPT=false   # Whether to use https or not.
        - SEAFILE_SERVER_HOSTNAME=${TRAEFIK_SEAFILE} # Specifies your host name if https is enabled.
        - SEAFILE_SERVICE_URL=https://${TRAEFIK_SEAFILE}
      networks:
        - proxy
        - seafile-net
      depends_on:
        - db
        - memcached
      labels:
        - "traefik.enable=true"
        - "traefik.http.routers.seafile.rule=Host(`${TRAEFIK_SEAFILE}`)"
        - "traefik.http.routers.seafile.entrypoints=https"
        - "traefik.http.routers.seafile.tls=true"
        - "traefik.http.routers.seafile.tls.certresolver=mydnschallenge"
        # Watchtower Update
        - "com.centurylinklabs.watchtower.enable=true"
        # Ip filtering
        - "traefik.http.routers.seafile.middlewares=whitelist@file"
  
  networks:
    seafile-net:
    proxy:
      external: true

• .env

  TRAEFIK_SEAFILE=seafile.example.com
  DB_ROOT_PASSWD=xxxxxxxxxxxxxxx 
  SEAFILE_ADMIN_EMAIL=admin@example.com 
  SEAFILE_ADMIN_PASSWORD=xxxxxxxxxxxxxxxx     

Usage

Requirements

• Traefik up and running.
• A subdomain of your choice, this example uses seafile.
  • You should be able to create a subdomain with your DNS provider, use a A record with the same IP address as your root domain.

Configuration

Replace the environment variables in .env with your own, then run :

sudo docker-compose up -d

You should then be able to access the seafile web-ui with the SEAFILE_ADMIN_EMAIL and SEAFILE_ADMIN_PASSWORD.

Update

The image is automatically updated with watchtower thanks to the following label :

  # Watchtower Update
  - "com.centurylinklabs.watchtower.enable=true"

Security

Seafile provides client-side end-to-end data encryption. You can create encrypted libraries to use this feature. Use this feature to add extra security to your documents.

Backup

Docker volumes are globally backed up using borg-backup.