Seafile на TrueNAS: Полное руководство по развертыванию и настройке

# Рекомендуемая структура Datasets:
# tank/apps/seafile
#   ├── data          # Основное хранилище файлов
#   ├── databases     # MySQL/PostgreSQL data
#   ├── config        # Конфигурационные файлы
#   └── backups       # Резервные копии

# Настройки Dataset для data:
# Compression: lz4
# Recordsize: 1M (для больших файлов)
# ACL Type: POSIX

version: '3.9'

services:
  db:
    image: mariadb:10.11
    container_name: seafile-mysql
    environment:
      - MYSQL_ROOT_PASSWORD=strong_root_password_here
      - MYSQL_LOG_CONSOLE=true
    volumes:
      - /mnt/tank/apps/seafile/databases:/var/lib/mysql:Z
    networks:
      - seafile-net
    restart: unless-stopped
    healthcheck:
      test: ["CMD", "mysqladmin", "ping", "-pstrong_root_password_here"]
      interval: 10s
      timeout: 5s
      retries: 3

  memcached:
    image: memcached:1.6
    container_name: seafile-memcached
    entrypoint: memcached -m 256
    networks:
      - seafile-net
    restart: unless-stopped

  seafile:
    image: seafileltd/seafile-mc:latest
    container_name: seafile
    ports:
      - "8000:8000"
      - "8082:8082"
    environment:
      - DB_HOST=db
      - DB_ROOT_PASSWD=strong_root_password_here
      - TIME_ZONE=Europe/Moscow
      - SEAFILE_ADMIN_EMAIL=admin@yourdomain.com
      - SEAFILE_ADMIN_PASSWORD=admin_secure_password
      - SEAFILE_SERVER_LETSENCRYPT=false
      - SEAFILE_SERVER_HOSTNAME=seafile.yourdomain.com
    volumes:
      - /mnt/tank/apps/seafile/data:/shared:Z
    networks:
      - seafile-net
    depends_on:
      db:
        condition: service_healthy
      memcached:
        condition: service_started
    restart: unless-stopped

networks:
  seafile-net:
    driver: bridge
    ipam:
      config:
        - subnet: 172.20.0.0/24

server {
    listen 443 ssl http2;
    server_name seafile.yourdomain.com;

    ssl_certificate /path/to/fullchain.pem;
    ssl_certificate_key /path/to/privkey.pem;

    # Seafile fileserver
    location /seafhttp {
        rewrite ^/seafhttp(.*)$ $1 break;
        proxy_pass http://localhost:8082;
        client_max_body_size 0;
        proxy_connect_timeout 3600s;
        proxy_read_timeout 3600s;
        proxy_send_timeout 3600s;
    }

    # Web interface
    location / {
        proxy_pass http://localhost:8000;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Host $server_name;
        proxy_set_header X-Forwarded-Proto $scheme;
        client_max_body_size 0;
    }

    # WebDAV support
    location /seafdav {
        proxy_pass http://localhost:8000/seafdav;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        client_max_body_size 0;
    }
}

# Добавь в основной compose файл
  traefik:
    image: traefik:v3.0
    container_name: traefik
    command:
      - "--api.dashboard=true"
      - "--providers.docker=true"
      - "--providers.docker.exposedbydefault=false"
      - "--entrypoints.web.address=:80"
      - "--entrypoints.websecure.address=:443"
    ports:
      - "80:80"
      - "443:443"
      - "8080:8080"  # Dashboard
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - ./traefik/certs:/certs
    networks:
      - seafile-net

# И добавь labels к сервису seafile:
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.seafile.rule=Host(`seafile.yourdomain.com`)"
      - "traefik.http.routers.seafile.entrypoints=websecure"
      - "traefik.http.routers.seafile.tls=true"
      - "traefik.http.services.seafile.loadbalancer.server.port=8000"

{
  "enable_virtual_server": true,
  "fileserver_root": "/shared/seafile-data",
  "external_storage": {
    "enabled": true,
    "samba_mounts": [
      {
        "name": "NAS_Share",
        "path": "/mnt/smb/nas_share",
        "server": "truenas.local",
        "share": "documents",
        "username": "seafile_user",
        "password": "smb_password",
        "domain": "WORKGROUP"
      }
    ]
  }
}

#!/bin/bash
BACKUP_DIR="/mnt/tank/apps/seafile/backups/$(date +%Y%m%d_%H%M%S)"
CONTAINER_NAME="seafile"

mkdir -p $BACKUP_DIR

# 1. Останавливаем синхронизацию
docker exec $CONTAINER_NAME /opt/seafile/seafile-server-latest/seafile.sh stop

# 2. Бэкап базы данных
docker exec seafile-mysql mysqldump \
  -u root -p"$MYSQL_ROOT_PASSWORD" \
  --databases ccnet_db seafile_db seahub_db \
  > $BACKUP_DIR/seafile-db.sql

# 3. Копируем данные
rsync -av /mnt/tank/apps/seafile/data/ $BACKUP_DIR/data/

# 4. Запускаем обратно
docker exec $CONTAINER_NAME /opt/seafile/seafile-server-latest/seafile.sh start

# 5. Создаем ZFS снапшот
zfs snapshot tank/apps/seafile@backup_$(date +%Y%m%d)

# 6. Чистим старые бэкапы (храним 30 дней)
find /mnt/tank/apps/seafile/backups -type d -mtime +30 -exec rm -rf {} \;

[fileserver]
# Увеличиваем лимиты для больших файлов
max_upload_size = 2000   # в MB
max_download_dir_size = 100000  # в MB

[quota]
# Квоты по умолчанию для новых пользователей
default = 10737418240  # 10GB

[database]
# Оптимизация для MariaDB/MySQL
max_connections = 200
connection_params = wait_timeout=28800

[performance]
# Кэширование в memcached
memcached_options = --SERVER=memcached --POOL-MIN=10 --POOL-MAX=100