将 ownCloud 迁移到 Docker 容器

1
2

sudo groupadd docker
sudo usermod -aG docker $USER

1
2

sudo systemctl enable docker.service
sudo systemctl enable containerd.service

1
2
3

sudo mkdir -p /srv/owncloud
sudo chown $USER /srv/owncloud
cd /srv/owncloud

1
2
3
4
5
6
7
8

wget https://raw.githubusercontent.com/owncloud/docs-server/master/modules/admin_manual/examples/installation/docker/docker-compose.yml
cat << EOF > .env
OWNCLOUD_VERSION=latest
OWNCLOUD_DOMAIN=localhost:8080
ADMIN_USERNAME=admin
ADMIN_PASSWORD=example（务必要修改这个）
HTTP_PORT=8080
EOF

1
2
3
4

services:
  owncloud:
    volumes:
      - files:/mnt/data

1
2
3

sudo mkdir -p /srv/traefik && sudo chown $USER /srv/traefik
touch /srv/traefik/compose.yml
touch /srv/traefik/acme.json && chmod 600 /srv/traefik/acme.json

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43

version: '3'

services:
  proxy:
    image: traefik:latest
    container_name: traefik
    restart: unless-stopped
    # Here's the network we created:
    networks:
      - traefik_proxy
    command:
      # Only for development environment
      # - "--log.level=DEBUG"
      - "--api.insecure=true"
      # Get Docker as the provider
      - "--providers.docker=true"
      # Avoid that all containers are exposed
      - "--providers.docker.exposedbydefault=false"
      # Settle the ports for the entry points
      - "--entrypoints.web.address
      - "--entrypoints.web-secure.address=:443"
      # Settle the autentification method to http challenge
      - "--certificatesresolvers.myhttpchallenge.acme.httpchallenge=true"
      - "--certificatesresolvers.myhttpchallenge.acme.httpchallenge.entrypoint=web"
      # Uncomment this to get a fake certificate when testing
      #- "--certificatesresolvers.myhttpchallenge.acme.caserver=https://acme-staging-v02.api.letsencrypt.org/directory"
      # Settle letsencrypt as the certificate provider
      - "--certificatesresolvers.myhttpchallenge.acme.email=example@contoso.com"
      - "--certificatesresolvers.myhttpchallenge.acme.storage=/acme.json"
    # The traefik entryPoints
    ports:
      - 80:80
      - 443:443
    volumes:
      # So that Traefik can listen to the Docker events
      - /var/run/docker.sock:/var/run/docker.sock
      - type: bind
        source: ${PWD}/acme.json
        target: /acme.json

networks: 
  traefik_proxy: 
    external: true

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96

version: '3'

volumes:
  files:
    driver: local
  mysql:
    driver: local
  redis:
    driver: local

services:
  owncloud:
    image: owncloud/server:${OWNCLOUD_VERSION}
    container_name: owncloud_server
    restart: unless-stopped
    ports:
      - ${HTTP_PORT}:8080
    depends_on:
      - db
      - redis
    environment:
      - OWNCLOUD_DOMAIN=${OWNCLOUD_DOMAIN}
      - OWNCLOUD_DB_TYPE=mysql
      - OWNCLOUD_DB_NAME=owncloud
      - OWNCLOUD_DB_USERNAME=owncloud
      - OWNCLOUD_DB_PASSWORD=owncloud
      - OWNCLOUD_DB_HOST=db
      - OWNCLOUD_ADMIN_USERNAME=${ADMIN_USERNAME}
      - OWNCLOUD_ADMIN_PASSWORD=${ADMIN_PASSWORD}
      - OWNCLOUD_MYSQL_UTF8MB4=true
      - OWNCLOUD_REDIS_ENABLED=true
      - OWNCLOUD_REDIS_HOST=redis
    healthcheck:
      test: ["CMD", "/usr/bin/healthcheck"]
      interval: 30s
      timeout: 10s
      retries: 5
    volumes:
      - files:/mnt/data
    networks:
      - traefik_proxy
      - owncloud_internal
    labels:
      - "traefik.enable=true"
      # Get the routes from http
      - "traefik.http.routers.owncloud.rule=Host(`owncloud.example.com`)"
      - "traefik.http.routers.owncloud.entrypoints=web"
      # Redirect these routes to https
      - "traefik.http.middlewares.redirect-to-https.redirectscheme.scheme=https"
      - "traefik.http.routers.owncloud.middlewares=redirect-to-https@docker"
      # Get the routes from https
      - "traefik.http.routers.owncloud-secured.rule=Host(`owncloud.example.com`)"
      - "traefik.http.routers.owncloud-secured.entrypoints=web-secure"
      # Apply autentificiation with http challenge
      - "traefik.http.routers.owncloud-secured.tls=true"
      - "traefik.http.routers.owncloud-secured.tls.certresolver=myhttpchallenge"

  db:
    image: mariadb:10.6
    container_name: owncloud_mariadb
    restart: unless-stopped
    environment:
      - MARIADB_ROOT_PASSWORD=owncloud
      - MARIADB_USERNAME=owncloud
      - MARIADB_PASSWORD=owncloud
      - MARIADB_DATABASE=owncloud
    command: ["--max-allowed-packet=128M", "--innodb-log-file-size=64M"]
    healthcheck:
      test: ["CMD", "mysqladmin", "ping", "-u", "root", "--password=owncloud"]
      interval: 10s
      timeout: 5s
      retries: 5
    volumes:
      - mysql:/var/lib/mysql
    networks:
      - owncloud_internal

  redis:
    image: redis:6
    container_name: owncloud_redis
    restart: unless-stopped
    command: ["--databases", "1"]
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 10s
      timeout: 5s
      retries: 5
    volumes:
      - redis:/data
    networks:
      - owncloud_internal

networks:
    traefik_proxy:
      external: true
    owncloud_internal: