selfhosted:seafile [NetGeekery]

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
====== Seafile ======

See [[linux:misc|Common Linux Commands]] for [start | stop | status] systemctl commands for seafile and seahub

===== Installation =====
    ## download
    ${shell}:~$ wget https://bintray.com/artifact/download/seafile-org/seafile/seafile-server_6.0.9_x86-64.tar.gz
    ${shell}:~$ tar -xzf seafile-server_6.0.9_x86-64.tar.gz
    ${shell}:~$ mkdir /opt/seafile
    ${shell}:~$ mv seafile-server-6.0.9/ /opt/seafile/seafile-server/
    ${shell}:~$ tree
    ├── installed
    │   └── seafile-server_1.4.0_x86-64.tar.gz
    └── seafile-server-1.4.0
            ├── check_init_admin.py
            ├── reset-admin.sh
            ├── runtime
            ├── seaf-fsck.sh
            ├── seaf-fuse.sh
            ├── seaf-gc.sh
            ├── seafile
            ├── seafile.sh
            ├── seahub
            ├── seahub.sh
            ├── setup-seafile-mysql.py
            ├── setup-seafile-mysql.sh
            ├── setup-seafile.sh
            ├── upgrade

    ## to upgrade, untar the latest package into /opt/seafile

    ## install dependencies
    ${shell}:~$ apt-get update
    ${shell}:~$ apt-get install openjdk-8-jre poppler-utils libreoffice python libreoffice-script-provider-python libpython2.7 python-pip python-setuptools python-imaging python-mysqldb python-memcache ttf-wqy-microhei ttf-wqy-zenhei xfonts-wqy python-pip wget python-ldap python-urllib3 sqlite3
    ${shell}:~$ PATH=$PATH:/usr/local/sbin:/usr/sbin:/sbin

    ${shell}:~$ pip install --upgrade pip
    ${shell}:~$ pip install boto

    ## run seafile script
    ${shell}:~$ ./opt/seafile/seafile-server/setup-seafile.sh
    #   This is your config information:
    #   server name:        ${server}
    #   server ip/domain:   ${domain}
    #   seafile data dir:   /opt/seafile/seafile-data
    #   fileserver port:    8082
    #   port of seafile fileserver:   8082
    #   port of seahub:               8000

===== Setup =====

==== MySQL ====

See [[selfhosted:mysql|MYSQL]] to:
  - install
  - create user
  - create databases (ccnet_db, seafile_db, seahub_db)
  - grant user privileges to the databases
  - flush privileges

    # run seafile mysql script
    ${shell}:~$ ./opt/seafile/seafile-server/setup-seafile-mysql.sh
    #    [ server name ] ${server}
    #    [ This server's ip or domain ] 127.0.0.1
    #    [ default "/opt/seafile/seafile-data" ]
    #    [ default "8082" ]
    #    [2] Use existing ccnet/seafile/seahub databases
    #    [ default "localhost" ]
    #    [ default "3306" ]
    #    [ mysql user for seafile ] ${mysql:user}
    #    [ password for ${mysql:user} ]
    #    verifying password of user ${mysql:user} ...  done
    #    [ ccnet database ] ccnet_db
    #    verifying user "${mysql:user}" access to database ccnet_db ...  done
    #    [ seafile database ] seafile_db
    #    verifying user "${mysql:user}" access to database seafile_db ...  done
    #    [ seahub database ] seahub_db
    #    verifying user "${mysql:user}" access to database seahub_db ...  done
    #    ---------------------------------
    #    This is your configuration
    #    ---------------------------------
    #    server name:            ${server}
    #    server ip/domain:       127.0.0.1
    #    seafile data dir:       /opt/seafile/seafile-data
    #    fileserver port:        8082
    #    database:               use existing
    #    ccnet database:         ccnet_db
    #    seafile database:       seafile_db
    #    seahub database:        seahub_db
    #    database user:          ${mysql:user}
    #    ---------------------------------
    #    port of seafile fileserver:   8082
    #    port of seahub:               8000

==== ccnet ====
    ${shell}:~$ vi /opt/seafile/conf/ccnet.conf
        < /opt/seafile/conf/ccnet.conf >
            [General]
            USER_NAME = ${server}
            ID = xxxxxxxxxxxxxxxxxxxxxx
            NAME = ${server}
            SERVICE_URL = https://${domain}
            [Client]
            PORT = 13419
            [Database]
            ENGINE = mysql
            HOST = 127.0.0.1
            PORT = 3306
            USER = ${mysql:user}
            PASSWD = ${mysql:password}
            DB = ccnet_db
            CONNECTION_CHARSET = utf8

==== seafile ====
    ${shell}:~$ vi /opt/seafile/conf/seafile.conf
        < /opt/seafile/conf/seafile.conf >
            [fileserver]
            port = 8082
            [database]
            type = mysql
            host = 127.0.0.1
            port = 3306
            user = ${mysql:user}
            password = ${mysql:password}
            db_name = seafile_db
            connection_charset = utf8

==== seahub ====
    ${shell}:~$ vi /opt/seafile/conf/seahub_settings.py
        < /opt/seafile/conf/seahub_settings.py >
            # -*- coding: utf-8 -*-
            SECRET_KEY = "xxxxxxxxxxxxxxxxxxx"
            DATABASES = {
                    'default': {
                            'ENGINE': 'django.db.backends.mysql',
                            'NAME': 'seahub_db',
                            'USER': '${mysql:user}',
                            'PASSWORD': '${mysql:password}',
                            'HOST': '127.0.0.1',
                            'PORT': '3306'
                    }
            }

==== webdav ====
        ${shell}:~$ vi /opt/seafile/conf/seafdav.conf
            < /opt/seafile/conf/seafdav.conf >
                [WEBDAV]
                # enabled = false
                enabled = true
                port = 8080
                fastcgi = false
                # host = 0.0.0.0
                share_name = /

==== email ====
        ${shell}~$ vi /opt/seafile/conf/seahub_settings.py
            < /opt/seafile/conf/seahub_settings.py >
                EMAIL_USE_TLS = True
                EMAIL_HOST = '${server}'
                EMAIL_HOST_USER = '${email}'
                EMAIL_HOST_PASSWORD = '${password}'
                EMAIL_PORT = ${port}
                DEFAULT_FROM_EMAIL = EMAIL_HOST_USER
                SERVER_EMAIL = EMAIL_HOST_USER

==== services ====

See [[linux:misc|Common Linux Commands]] for [start | restart | stop | enable | status] systemctl commands

    set up service for seafile:
        servicename: seafile
        description: "Seafile Server"
        after: network.target mariadb.service
        type: oneshot
        execstart: /opt/seafile/seafile-server/seafile.sh start
        execstop: /opt/seafile/seafile-server/seafile.sh stop
        remain: yes
        user: root
        group: root

    set up service for seahub:
        servicename: seahub
        description: "Seafile Hub"
        after: network.target seafile.target
        type: oneshot
        execstart: /opt/seafile/seafile-server/seahub.sh start
        execstop: /opt/seafile/seafile-server/seahub.sh stop
        remain: yes
        user: root
        group: root

==== netstat ====
    # Active Internet connections (only servers)
    # Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name
    # tcp        0      0 127.0.0.1:3306          0.0.0.0:*               LISTEN      177/mysqld
    # tcp        0      0 0.0.0.0:8080            0.0.0.0:*               LISTEN      9300/python2.7
    # tcp        0      0 0.0.0.0:8082            0.0.0.0:*               LISTEN      9301/seaf-server
    # tcp        0      0 0.0.0.0:8000            0.0.0.0:*               LISTEN      9386/python2.7
    # udp        0      0 0.0.0.0:68              0.0.0.0:*                           144/dhclient

==== nginx ====
    root@nginx:~$ vi /etc/nginx/sites-available/seafile
        < /etc/nginx/sites-available/seafile >
            upstream seahub {
                server 10.0.4.199:8082;
            }
            upstream seafile {
                server 10.0.4.199:8000;
            }
            proxy_cache_path /var/cache/nginx/seafile levels=1:2 keys_zone=seafile_cache:10m max_size=3g inactive=120m use_temp_path=off;
            server {
                listen 80;
                server_name    sea.somedomain.com;
                return 301 https://$server_name$request_uri;
            }
            server {
                listen 443 ssl;
                server_name    sea.somedomain.com;
                #proxy_set_header X-Forwarded-For $remote_addr;
                ssl on;
                ssl_certificate /etc/letsencrypt/live/sea.somedomain.com/fullchain.pem;
                ssl_certificate_key /etc/letsencrypt/live/sea.somedomain.com/privkey.pem;
                ssl_session_timeout 5m;
                ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
                ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';
                ssl_prefer_server_ciphers on;
                ssl_session_cache shared:SSL:10m;
                location /api/v3/users/websocket {
                    proxy_set_header Upgrade $http_upgrade;
                    proxy_set_header Connection "upgrade";
                    client_max_body_size 50M;
                    proxy_set_header Host $http_host;
                    proxy_set_header X-Real-IP $remote_addr;
                    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                    proxy_set_header X-Forwarded-Proto $scheme;
                    proxy_set_header X-Frame-Options SAMEORIGIN;
                    proxy_buffers 256 16k;
                    proxy_buffer_size 16k;
                    proxy_read_timeout 600s;
                    proxy_pass http://seafile;
                }
                location / {
                    access_log      /var/log/nginx/seahub.access.log;
                    error_log       /var/log/nginx/seahub.error.log;
                    client_max_body_size 50M;
                    proxy_set_header Connection "";
                    proxy_set_header Host $http_host;
                    proxy_set_header X-Real-IP $remote_addr;
                    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                    proxy_set_header X-Forwarded-Proto $scheme;
                    proxy_set_header X-Frame-Options SAMEORIGIN;
                    proxy_buffers 256 16k;
                    proxy_buffer_size 16k;
                    proxy_read_timeout 600s;
                    proxy_cache mattermost_cache;
                    proxy_cache_revalidate on;
                    proxy_cache_min_uses 2;
                    proxy_cache_use_stale timeout;
                    proxy_cache_lock on;
                    proxy_pass http://seafile;
                }
                # Reverse proxy for seafile
                #location / {
                #fastcgi_pass    seafile;
                #fastcgi_param   SCRIPT_FILENAME     $document_root$fastcgi_script_name;
                #fastcgi_param   PATH_INFO           $fastcgi_script_name;
                #fastcgi_param   SERVER_PROTOCOL     $server_protocol;
                #fastcgi_param   QUERY_STRING        $query_string;
                #fastcgi_param   REQUEST_METHOD      $request_method;
                #fastcgi_param   CONTENT_TYPE        $content_type;
                #fastcgi_param   CONTENT_LENGTH      $content_length;
                #fastcgi_param   SERVER_ADDR         $server_addr;
                #fastcgi_param   SERVER_PORT         $server_port;
                #fastcgi_param   SERVER_NAME         $server_name;
                #fastcgi_param   REMOTE_ADDR         $remote_addr;
                #access_log      /var/log/nginx/seahub.access.log;
                #error_log       /var/log/nginx/seahub.error.log;
                #fastcgi_read_timeout 36000;
                #}
                # Reverse Proxy for seahub
                location /seafhttp {
                    rewrite ^/seafhttp(.*)$ $1 break;
                    proxy_pass http://seahub;
                    client_max_body_size 0;
                    proxy_connect_timeout  36000s;
                    proxy_read_timeout  36000s;
                    proxy_send_timeout  36000s;
                    send_timeout  36000s;
                }
            }
    
==== storage ====
    # garbage collection when storage is getting full
    ./seaf-gc.sh

===== Untested =====
    # fastcgi
        ${shell}:~$ vi /opt/seafile/conf/seafdav.conf
        </opt/seafile/conf/seafdav.conf>
            [WEBDAV]
            fastcgi = true
            host=0.0.0.0
        ${shell}:~$ vi /opt/seafile/seafile-server-latest/seahub.sh
        < /opt/seafile/seafile-server-latest/seahub.sh >
            function start_seahub_fastcgi() {
                before_start;
                export SEAFILE_FASTCGI_HOST=0.0.0.0
            }
        root@nginx:~$ vi /etc/nginx/sites-available/seafile
        < /etc/nginx/sites-available/seafile >
            upstream seahub {
                server 10.0.4.199:8082;
            }
            upstream seafile {
                server 10.0.4.199:8000;
            }
            proxy_cache_path /var/cache/nginx/seafile levels=1:2 keys_zone=seafile_cache:10m max_size=3g inactive=120m use_temp_path=off;
            server {
            listen 80;
            server_name    sea.somedomain.com;
            return 301 https://$server_name$request_uri;
            }
            server {
                listen 443 ssl;
                server_name    sea.somedomain.com;
                #proxy_set_header X-Forwarded-For $remote_addr;
                ssl on;
                ssl_certificate /etc/letsencrypt/live/sea.somedomain.com/fullchain.pem;
                ssl_certificate_key /etc/letsencrypt/live/sea.somedomain.com/privkey.pem;
                ssl_session_timeout 5m;
                ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
                ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';
                ssl_prefer_server_ciphers on;
                ssl_session_cache shared:SSL:10m;
                access_log      /var/log/nginx/seahub.access.log;
                error_log       /var/log/nginx/seahub.error.log;
                # Reverse proxy for seafile
                location / {
                    fastcgi_pass    SEAFILE_REMOTE_IP:8000;
                    fastcgi_param   SCRIPT_FILENAME     $document_root$fastcgi_script_name;
                    fastcgi_param   PATH_INFO           $fastcgi_script_name;
                    fastcgi_param   SERVER_PROTOCOL     $server_protocol;
                    fastcgi_param   QUERY_STRING        $query_string;
                    fastcgi_param   REQUEST_METHOD      $request_method;
                    fastcgi_param   CONTENT_TYPE        $content_type;
                    fastcgi_param   CONTENT_LENGTH      $content_length;
                    fastcgi_param   SERVER_ADDR         $server_addr;
                    fastcgi_param   SERVER_PORT         $server_port;
                    fastcgi_param   SERVER_NAME         $server_name;
                    fastcgi_param   REMOTE_ADDR         $remote_addr;
                    fastcgi_param   HTTPS on;
                    fastcgi_param   HTTP_SCHEME https;
                    fastcgi_read_timeout 36000;
                    proxy_set_header X-Forwarded-For $remote_addr;
                }
                # Reverse Proxy for seahub
                location /seafhttp {
                    rewrite ^/seafhttp(.*)$ $1 break;
                    #proxy_pass http://seahub;
                    proxy_pass http://SEAFILE_REMOTE_IP:8082;
                    proxy_connect_timeout  36000s;
                    proxy_read_timeout  36000s;
                    proxy_send_timeout  36000s;
                    send_timeout  36000s;
                }
                location /webdav {
                    fastcgi_pass    SEAFILE_REMOTE_IP:8080;
                    fastcgi_param   SCRIPT_FILENAME     $document_root$fastcgi_script_name;
                    fastcgi_param   PATH_INFO           $fastcgi_script_name;
                    fastcgi_param   SERVER_PROTOCOL     $server_protocol;
                    fastcgi_param   QUERY_STRING        $query_string;
                    fastcgi_param   REQUEST_METHOD      $request_method;
                    fastcgi_param   CONTENT_TYPE        $content_type;
                    fastcgi_param   CONTENT_LENGTH      $content_length;
                    fastcgi_param   SERVER_ADDR         $server_addr;
                    fastcgi_param   SERVER_PORT         $server_port;
                    fastcgi_param   SERVER_NAME         $server_name;
                    fastcgi_param   HTTPS               on;
                    fastcgi_param   HTTP_SCHEME         https;
                    client_max_body_size 0;
                    proxy_connect_timeout  36000s;
                    proxy_read_timeout  36000s;
                    proxy_send_timeout  36000s;
                    send_timeout  36000s;
                    proxy_request_buffering off;
                }
            }

        root@nginx:~$ ln -s /etc/nginx/sites-available/seafile /etc/nginx/sites-enabled/
        root@nginx:~$ nginx -t
        root@nginx:~$ systemctl restart nginx

        # start-fastcgi uses localhost by default and is not configurable
        root@nginx:~$ curl 10.0.4.199:8000
        curl: (7) Failed to connect to 10.0.4.199 port 8000: Connection refused

        ${shell}:~$ tcpdump -ani eth0
        tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
        listening on eth0, link-type EN10MB (Ethernet), capture size 262144 bytes
        14:03:42.793455 IP 10.0.4.79.58826 > 10.0.4.199.8000: Flags [S], seq 2157979588, win 29200, options [mss 1460,sackOK,TS val 3237124001 ecr 0,nop,wscale 6], length 0
        14:03:42.793568 IP 10.0.4.199.8000 > 10.0.4.79.58826: Flags [R.], seq 0, ack 2157979589, win 0, length 0
        14:03:48.010556 ARP, Request who-has 10.0.4.79 tell 10.0.4.199, length 28
        14:03:48.010797 ARP, Request who-has 10.0.4.199 tell 10.0.4.79, length 28
        14:03:48.010841 ARP, Reply 10.0.4.199 is-at 00:16:3e:f9:c8:1e, length 28
        14:03:48.010877 ARP, Reply 10.0.4.79 is-at 00:16:3e:94:8d:b6, length 28


        ${shell}:~$ vi /lib/systemd/system/seahub.service
            < /lib/systemd/system/seahub.service >
                ...
                [Service]
                ExecStart=/opt/seafile/seafile-server/seahub.sh start-fastcgi
                ...

        ${shell}:~$ systemctl daemon-reload
        ${shell}:~$ systemctl stop seahub
        ${shell}:~$ systemctl start seahub