Containerized Seafile Deployment

A fully containerized deployment of Seafile for Docker and Docker Swarm.

Features

• Complete redesign of the official Docker deployment with container virtualization best-practices in mind.
• Runs Seahub (frontend) and Seafile Server (backend) in separate containers.
• Frontend Clustering without Professional edition.
• Completely removed self-implemented Nginx and Let's Encrypt and replaced it with two caddy services. The first one functioning as a reverse proxy, which forwards traffic to the respective endpoints. The second one functioning as a webserver for static content (/media path).
• Seahub and Seafile Server normally communicate over a UNIX socket. This deployment contains socat, which basically translates the UNIX socket to a TCP stream.
• Increased Security:
  • The caddy reverse proxy serves as a single entry point to the stack. Everything else runs in an isolated network.
  • Using Alpine Linux based images for the frontend, which is designed with security in mind and comes with proactive security features.
• Reworked Dockerfiles featuring multi-stage builds, allowing for smaller images and faster builds.