MKY's wiki

Ta strona jest tylko do odczytu. Możesz wyświetlić źródła tej strony ale nie możesz ich zmienić.
====== Seafile ======
Instalujemy pakiety:
<code>
pkg install mysql56-server seahub seafile-server gettext-tools
</code>

Włączamy MySQL:
<code>
echo 'mysql_enable="YES"' > /etc/rc.conf.d/mysql
service mysql-server start
</code>

Ustawiamy hasło na root-a na MySQL:
<code>
mysqladmin -u root password
</code>

Jeśli baza jest zdalna (lub odpalana w jailu), trzeba przynajmniej na chwilę dać uprawnienia root-owi na pełną kontrolę zdalną:
<code>
mysql -u root -p
GRANT ALL PRIVILEGES ON *.* TO 'root'@'%' IDENTIFIED BY 'password' WITH GRANT OPTION;
</code>

Uruchamiamy setup seafile:
<code>
cd /usr/local/www/haiwen/seafile-server/
./setup-seafile-mysql.sh
</code>

Przykładowy output:
<code>
Checking python on this machine ...
  Checking python module: setuptools ... Done.
  Checking python module: python-imaging ... Done.
  Checking python module: python-mysqldb ... Done.

-----------------------------------------------------------------
This script will guide you to setup your seafile server using MySQL.
Make sure you have read seafile server manual at

        https://github.com/haiwen/seafile/wiki

Press ENTER to continue
-----------------------------------------------------------------


What is the name of the server? It will be displayed on the client.
3 - 15 letters or digits
[ server name ] Files

What is the ip or domain of the server?
For example: www.mycompany.com, 192.168.1.101
[ This server's ip or domain ] seafile.domain.com

Where do you want to put your seafile data?
Please use a volume with enough free space
[ default "/usr/local/www/haiwen/seafile-data" ] 

Which port do you want to use for the seafile fileserver?
[ default "8082" ] 

-------------------------------------------------------
Please choose a way to initialize seafile databases:
-------------------------------------------------------

[1] Create new ccnet/seafile/seahub databases
[2] Use existing ccnet/seafile/seahub databases

[ 1 or 2 ] 1

What is the host of mysql server?
[ default "localhost" ] 192.168.0.6

Which hosts should be able to use your MySQL Account?
[ default "%" ] 192.168.0.6

What is the port of mysql server?
[ default "3306" ] 

What is the password of the mysql root user?
[ root password ] 

verifying password of user root ...  done

Enter the name for mysql user of seafile. It would be created if not exists.
[ default "root" ] seafile

Enter the password for mysql user "seafile":
[ password for seafile ] 

Enter the database name for ccnet-server:
[ default "ccnet-db" ] 

Enter the database name for seafile-server:
[ default "seafile-db" ] 

Enter the database name for seahub:
[ default "seahub-db" ] 

---------------------------------
This is your configuration
---------------------------------

    server name:            Files
    server ip/domain:       seafile.domain.com

    seafile data dir:       /usr/local/www/haiwen/seafile-data
    fileserver port:        8082

    database:               create new
    ccnet database:         ccnet-db
    seafile database:       seafile-db
    seahub database:        seahub-db
    database user:          seafile



---------------------------------
Press ENTER to continue, or Ctrl-C to abort
---------------------------------

Generating ccnet configuration ...

done
Successly create configuration dir /usr/local/www/haiwen/ccnet.
Generating seafile configuration ...

Done.
done
Generating seahub configuration ...

----------------------------------------
Now creating seahub database tables ...

----------------------------------------

creating seafile-server-latest symbolic link ...  done




-----------------------------------------------------------------
Your seafile server configuration has been finished successfully.
-----------------------------------------------------------------

run seafile server:     ./seafile.sh { start | stop | restart }
run seahub  server:     ./seahub.sh  { start <port> | stop | restart <port> }

-----------------------------------------------------------------
If you are behind a firewall, remember to allow input/output of these tcp ports:
-----------------------------------------------------------------

port of seafile fileserver:   8082
port of seahub:               8000

When problems occur, Refer to

        https://github.com/haiwen/seafile/wiki

for information.
</code>

Generujemy locale dla Seahub-a (port tego domyślnie nie robi):
<code>
cd /usr/local/www/haiwen/seafile-server/seahub
for i in locale/*/*/*.po thirdpart/captcha/locale/*/*/*.po thirdpart/registration/locale/*/*/*.po ; do echo Procesing: $i ; msgfmt -v -o ${i%.po}.mo $i ; done
</code>

Konfigurujemy domyślne locale dla Seahub. W pliku ''/usr/local/www/haiwen/seafile-server/seahub/seahub/settings.py'' ustawiamy:
<file>
TIME_ZONE = 'Europe/Warsaw'
LANGUAGE_CODE = 'pl'
</file>

Do pliku ''/usr/local/www/haiwen/conf/seahub_settings.py'' również dopisujemy locale, dodatkowo FILE_SERVER_ROOT (potrzebny do http) oraz konfigurację poczty:
<file>
FILE_SERVER_ROOT = 'https://seafile.domain.com/seafhttp'
TIME_ZONE = 'Europe/Warsaw'
LANGUAGE_CODE = 'pl'
LANGUAGE = 'pl'
SITE_NAME = 'Files'
SITE_TITLE = 'Private Seafile'
 
EMAIL_USE_TLS = True
EMAIL_HOST = 'smtp.domain.com'
EMAIL_HOST_USER = 'seafile@smtp.domain.com'
EMAIL_HOST_PASSWORD = 'xxxxxxxxxxxxxxxxxxxxxxxx'
EMAIL_PORT = 587
DEFAULT_FROM_EMAIL = EMAIL_HOST_USER
SERVER_EMAIL = EMAIL_HOST_USER
</file>

W pliku ''/usr/local/www/haiwen/conf/ccnet.conf'' ustawiamy SERVICE_URL:
<file>
SERVICE_URL = https://seafile.domain.com
</file>

W pliku ''/usr/local/www/haiwen/conf/seafdav.conf'' włączamy obsługę WEBDAV:
<file>
[WEBDAV]
enabled = true
port = 8080
fastcgi = true
share_name = /seafdav
</file>

Poprawiamy prawa dostępu do całego seafile-a:
<code>
cd /usr/local/www/
chown -R seafile:seafile haiwen
</code>

Konfiguracja nginx:
<file>
server {
  listen  80;
  listen  [::]:80;
  server_name seafile.domain.com;

  return 301 https://$server_name$request_uri;  # enforce https
}

server {
  listen  443 ssl http2;
  listen  [::]:443 ssl http2;
  server_name seafile.domain.com;

  access_log /var/log/nginx/seafile.domain.com-access.log;
  error_log /var/log/nginx/seafile.domain.com-error.log;

  ssl_certificate   /etc/ssl/www/seafile.domain.com.crt;
  ssl_certificate_key /etc/ssl/www/seafile.domain.com.key;

  proxy_set_header X-Forwarded-For $remote_addr;

  add_header Strict-Transport-Security "max-age=31536000; includeSubDomains";
  server_tokens off;

  location / {
    fastcgi_pass    127.0.0.1:8000;
    fastcgi_param   SCRIPT_FILENAME     $document_root$fastcgi_script_name;
    fastcgi_param   PATH_INFO           $fastcgi_script_name;

    fastcgi_param   SERVER_PROTOCOL        $server_protocol;
    fastcgi_param   QUERY_STRING        $query_string;
    fastcgi_param   REQUEST_METHOD      $request_method;
    fastcgi_param   CONTENT_TYPE        $content_type;
    fastcgi_param   CONTENT_LENGTH      $content_length;
    fastcgi_param   SERVER_ADDR         $server_addr;
    fastcgi_param   SERVER_PORT         $server_port;
    fastcgi_param   SERVER_NAME         $server_name;
    fastcgi_param   REMOTE_ADDR         $remote_addr;
    fastcgi_param   HTTPS               on;
    fastcgi_param   HTTP_SCHEME         https;

    access_log      /var/log/nginx/seahub.access.log;
    error_log       /var/log/nginx/seahub.error.log;
    fastcgi_read_timeout 36000;
  }

  location /seafhttp {
    rewrite ^/seafhttp(.*)$ $1 break;
    proxy_pass http://127.0.0.1:8082;
    client_max_body_size 0;
    proxy_request_buffering off;
    proxy_connect_timeout  36000s;
    proxy_read_timeout  36000s;
    proxy_send_timeout  36000s;
    send_timeout  36000s;
  }

  location /seafdav {
    fastcgi_pass    127.0.0.1:8080;
    fastcgi_param   SCRIPT_FILENAME     $document_root$fastcgi_script_name;
    fastcgi_param   PATH_INFO           $fastcgi_script_name;

    fastcgi_param   SERVER_PROTOCOL     $server_protocol;
    fastcgi_param   QUERY_STRING        $query_string;
    fastcgi_param   REQUEST_METHOD      $request_method;
    fastcgi_param   CONTENT_TYPE        $content_type;
    fastcgi_param   CONTENT_LENGTH      $content_length;
    fastcgi_param   SERVER_ADDR         $server_addr;
    fastcgi_param   SERVER_PORT         $server_port;
    fastcgi_param   SERVER_NAME         $server_name;
    fastcgi_param   REMOTE_ADDR         $remote_addr;
    fastcgi_param   HTTPS               on;
    fastcgi_param   HTTP_SCHEME         https;

    client_max_body_size 0;
    proxy_connect_timeout  36000s;
    proxy_read_timeout  36000s;
    proxy_send_timeout  36000s;
    send_timeout  36000s;

    # This option is only available for Nginx >= 1.8.0. See more details below.
    proxy_request_buffering off;

    access_log      /var/log/nginx/seafdav.access.log;
    error_log       /var/log/nginx/seafdav.error.log;
  }

  location /media {
        root /usr/local/www/haiwen/seafile-server-latest/seahub;
  }
}
</file>

Przed pierwszym uruchomieniem wywalamy z ''/tmp'' śmieci Seahub-a:
<code>
rm -rf /tmp/seahub_cache
</code>

Uruchamiamy serwisy:
<code>
echo 'nginx_enable="YES"' > /etc/rc.conf.d/nginx
echo 'seafile_enable="YES"' > /etc/rc.conf.d/seafile
echo 'seahub_enable="YES"' > /etc/rc.conf.d/seahub
echo 'seahub_fastcgi="YES"' >> /etc/rc.conf.d/seahub
service nginx start
service seafile start
service seahub start
</code>

Ustawiamy superadmina:
<code>
/usr/local/www/haiwen/seafile-server/reset-admin.sh 
</code>

Jeśli wszystko działa, wywalamy uprawnienia root-a by mógł się globalnie logować do MySQL-a:
<code>
mysql> show grants for root;
+------------------------------------------------------------------------------------------+
| Grants for root@%                                                                        |
+------------------------------------------------------------------------------------------+
| GRANT ALL PRIVILEGES ON *.* TO 'root'@'%' IDENTIFIED BY PASSWORD '*XX' WITH GRANT OPTION |
+------------------------------------------------------------------------------------------+
1 row in set (0.00 sec)

mysql> REVOKE ALL PRIVILEGES, GRANT OPTION FROM 'root'@'%';
Query OK, 0 rows affected (0.00 sec)

mysql> DROP USER 'root'@'%';
Query OK, 0 rows affected (0.00 sec)

mysql> FLUSH PRIVILEGES;
Query OK, 0 rows affected (0.00 sec)
</code>