Hướng dẫn cài đặt FileRun trên Ubuntu với Docker Compose

sudo apt-get update -y
sudo apt-get install curl git build-essential apt-transport-https ca-certificates software-properties-common -y

curl -fsSL https://download.docker.com/linux/ubuntu/gpg | gpg --dearmor -o /usr/share/keyrings/docker-archive-keyring.gpg
echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/docker-archive-keyring.gpg] https://download.docker.com/linux/ubuntu $(lsb_release -cs) stable" | sudo tee /etc/apt/sources.list.d/docker.list > /dev/null

sudo apt update -y
sudo apt install docker-ce docker-compose-plugin -y

docker compose version

sudo systemctl enable docker
sudo systemctl start docker

mkdir ~/filerun
cd ~/filerun
mkdir html user-files db

sudo mkdir /filerun /filerun/html /filerun/user-files /filerun/db

nano docker-compose.yml

version: '3.8'

services:
  db:
    image: mariadb:10.5
    container_name: filerun_mariadb
    environment:
      MYSQL_ROOT_PASSWORD: your_strong_root_password
      MYSQL_USER: filerun_user
      MYSQL_PASSWORD: your_strong_password
      MYSQL_DATABASE: filerundb
    volumes:
      - ./db:/var/lib/mysql
    restart: always

  web:
    image: filerun/filerun:8.1
    container_name: filerun_web
    environment:
      FR_DB_HOST: db
      FR_DB_PORT: 3306
      FR_DB_NAME: filerundb
      FR_DB_USER: filerun_user
      FR_DB_PASS: your_strong_password
      APACHE_RUN_USER: www-data
      APACHE_RUN_USER_ID: 33
      APACHE_RUN_GROUP: www-data
      APACHE_RUN_GROUP_ID: 33
    depends_on:
      - db
    links:
      - db
    ports:
      - "8080:80"
    volumes:
      - ./html:/var/www/html
      - ./user-files:/user-files
    restart: always

version: '3.8'

services:
  db:
    image: mariadb:10.5
    container_name: filerun_mariadb
    environment:
      MYSQL_ROOT_PASSWORD: your_strong_root_password
      MYSQL_USER: filerun_user
      MYSQL_PASSWORD: your_strong_password
      MYSQL_DATABASE: filerundb
    volumes:
      - ./db:/var/lib/mysql
    restart: always

  web:
    image: filerun/filerun:8.1
    container_name: filerun_web
    environment:
      FR_DB_HOST: db
      FR_DB_PORT: 3306
      FR_DB_NAME: filerundb
      FR_DB_USER: filerun_user
      FR_DB_PASS: your_strong_password
      APACHE_RUN_USER: www-data
      APACHE_RUN_USER_ID: 33
      APACHE_RUN_GROUP: www-data
      APACHE_RUN_GROUP_ID: 33
    depends_on:
      - db
    links:
      - db
      - tika
      - elasticsearch
    ports:
      - "8080:80"
    volumes:
      - ./html:/var/www/html
      - ./user-files:/user-files
    restart: always

  tika:
    image: apache/tika
    container_name: filerun_tika
    restart: always

  elasticsearch:
    image: docker.elastic.co/elasticsearch/elasticsearch:6.8.23
    container_name: filerun_search
    environment:
      - cluster.name=docker-cluster
      - bootstrap.memory_lock=true
      - "ES_JAVA_OPTS=-Xms512m -Xmx512m"
    ulimits:
      memlock:
        soft: -1
        hard: -1
      nofile:
        soft: 65535
        hard: 65535
    mem_limit: 1g
    volumes:
      - ./esearch:/usr/share/elasticsearch/data
    restart: always

mkdir esearch
chmod g+rwx esearch
sudo chgrp 1000 esearch

sudo nano /etc/sysctl.conf

vm.max_map_count = 262144

sudo sysctl -w vm.max_map_count=262144

sudo chown www-data:www-data -R ./html/system/data

docker compose up -d

docker compose ps

sudo nano /etc/nginx/sites-available/filerun

server {
    listen 80;
    server_name your-domain.com;
    return 301 https://$server_name$request_uri;
}

server {
    listen 443 ssl;
    server_name your-domain.com;

    ssl_certificate /path/to/your/certificate.crt;
    ssl_certificate_key /path/to/your/private.key;

    location / {
        proxy_pass http://localhost:8080;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto https;
    }
}

sudo ln -s /etc/nginx/sites-available/filerun /etc/nginx/sites-enabled/
sudo nginx -t
sudo systemctl reload nginx

# Backup database
docker exec filerun_mariadb mysqldump -u root -p filerundb > filerun_backup.sql

# Backup user files
tar -czf user-files-backup.tar.gz ./user-files

# Backup application files
tar -czf html-backup.tar.gz ./html

cd ~/filerun
docker compose down --remove-orphans
docker compose pull
docker compose up -d

# Khôi phục database
docker exec -i filerun_mariadb mysql -u root -p filerundb < filerun_backup.sql

# Khôi phục user files
tar -xzf user-files-backup.tar.gz

# Khôi phục application files
tar -xzf html-backup.tar.gz

sudo ufw allow 22/tcp
sudo ufw allow 80/tcp  
sudo ufw allow 443/tcp
sudo ufw enable

# Kiểm tra logs
docker compose logs

# Kiểm tra tài nguyên hệ thống
docker stats

# Thiết lập lại quyền
sudo chown -R www-data:www-data ./html
sudo chown -R www-data:www-data ./user-files

$config['system']['webdav']['skip_device_id_for_etag'] = true;