Seafile社区版安装与Caddy反代配置

## 使用docker內部网络安装
### 创建docker网络
```bash
sudo docker network create --driver=bridge --subnet=10.10.10.0/24 --gateway=10.10.10.1 seafile_net
```
### Caddyfile
```bash
seafile.YOURSEVER.net {
    reverse_proxy 10.10.10.4:80
}
seafile.YOURSEVER.net/seafhttp* {
    uri strip_prefix seafhttp
    reverse_proxy 10.10.10.4:8082
}
seafile.YOURSEVER.net/seafdav* {
    uri strip_prefix seafdav
    reverse_proxy 10.10.10.4:8899
}
```
### dock-compose.yml
```bash
version: '2'
services:
  db:
    image: mariadb:10.5
    container_name: seafile-mysql
    environment:
      - MYSQL_ROOT_PASSWORD=SOMESUPERSECRETPASSWORD  # Requested, set the root's password of MySQL service.
      - MYSQL_LOG_CONSOLE=true
    volumes:
      - ./db:/var/lib/mysql  # Requested, specifies the path to MySQL data persistent store.
    networks:
      default:
        ipv4_address: 10.10.10.2

memcached:
    image: memcached:1.6
    container_name: seafile-memcached
    entrypoint: memcached -m 256
    networks:
      default:
        ipv4_address: 10.10.10.3

seafile:
    image: seafileltd/seafile-mc:11.0-latest
    container_name: seafile
#    ports:       # Commented out since we use our own docker network and don't need these ports on the host directly
#     - "80:80"
#     - "443:443"  # If https is enabled, cancel the comment.
    volumes:
      - ./data:/shared   # Requested, specifies the path to Seafile data persistent store.
    environment:
      - DB_HOST=db
      - DB_ROOT_PASSWD=SOMESUPERSECRETPASSWORD  # Requested, the value shuold be root's password of MySQL service.
      - TIME_ZONE=Asia/Shanghai  # Optional, default is UTC. Should be uncomment and set to your local time zone.
      - SEAFILE_ADMIN_EMAIL=your@email-address.com # Specifies Seafile admin user, default is 'me@example.com'.
      - SEAFILE_ADMIN_PASSWORD=your-user-password     # Specifies Seafile admin password, default is 'asecret'.
      - SEAFILE_SERVER_LETSENCRYPT=false   # Whether to use https or not.
      - SEAFILE_SERVER_HOSTNAME=seafile.YOURSEVER.net # Specifies your host name if https is enabled.
    depends_on:
      - db
      - memcached
    networks:
      default:
        ipv4_address: 10.10.10.4

networks:
  default:
    name: seafile_net
    external: true
```
### 解决CSRF认证错误
在本地映射目录修改
`vim ./data/seafile/conf/seahub_settings.py`
添加下面语句到最后
```bash
FILE_SERVER_ROOT = "https://seafile.domain.com/seafhttp" #原本是http，改为https
CSRF_TRUSTED_ORIGINS = ["https://seafile.domain.com"]
CSRF_COOKIE_SECURE = True
ALLOWED_HOSTS = ['.domain.com']
CSRF_COOKIE_SAMESITE = 'Strict'
```
最后重启容器
`docker compose restart`
## 普通安装
### compose
```bash
# 服务定义
services:
  # 数据库服务
  db:
    image: mariadb:10.11                                # 拉取 mariadb:10.11 镜像
    restart: always
    container_name: seafile-mysql                       # 自定义容器名称
    environment:                                        # 环境变量
      - MYSQL_ROOT_PASSWORD=db_dev                      # 设置MySQL的root密码
      - MYSQL_LOG_CONSOLE=true                          # 日志输出到控制台
      - MARIADB_AUTO_UPGRADE=1                          # 允许自动升级
    volumes:                                            # 卷挂载
      - ./db:/var/lib/mysql           # MySQL数据持久化目录是 /data/seafile-mysql/db
    networks:                                           # 网络模式
      - seafile-net

# Memcached缓存服务
  memcached:
    image: memcached:1.6.18                             # 拉取 memcached:1.6.18 镜像
    restart: always
    container_name: seafile-memcached                   # 自定义容器名称
    entrypoint: memcached -m 256                        # 入口点指令：设置内存限制为256MB
    networks:                                           # 网络模式
      - seafile-net

# Seafile应用服务
  seafile:
    image: seafileltd/seafile-mc:11.0-latest            # 拉取 seafileltd/seafile-mc:11.0-latest 镜像
    restart: always
    container_name: seafile                             # 自定义容器名称
    ports:                                              # 端口映射
      - "80:80"                                         # 映射HTTP端口
#    - "443:443"                                      # 如果启用HTTPS，取消注释并映射HTTPS端口
    volumes:                                            # 卷挂载
      - ./data:/shared                      # Seafile数据持久化目录是 /data/seafile-data
    environment:                                        # 环境变量
      - DB_HOST=db                                      # 数据库主机
      - DB_ROOT_PASSWD=db_dev                           # 数据库root用户密码
      - TIME_ZONE=Asia/Shanghai                         # 时区设置
      - SEAFILE_ADMIN_EMAIL=admin@domain.cn             # Seafile管理员邮箱
      - SEAFILE_ADMIN_PASSWORD=password01               # Seafile管理员密码
      - SEAFILE_SERVER_LETSENCRYPT=false                # 是否使用Let's Encrypt生成证书
      - SEAFILE_SERVER_HOSTNAME=seafile.duckrun.de     # Seafile服务器主机名
    depends_on:                                         # 依赖的服务
      - db                                              # 依赖数据库服务
      - memcached                                       # 依赖Memcached服务
    networks:                                           # 网络模式
      - seafile-net

# 整体网络定义
networks:
  seafile-net:                                          # Seafile专用网络

```
### caddy反代
```bash
seafile.duckrun.de {
import cloudflare
reverse_proxy 10.0.0.12:80
}
```