From 2d2169d2a65e7e593bcc7015b07f9e4a21e5d56e Mon Sep 17 00:00:00 2001 From: Huang Junxiang Date: Fri, 27 Jun 2025 14:39:49 +0800 Subject: [PATCH] Merge 12.0 to 13.0 (#543) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit * Add changelog for 12.0.10 * Add changelog for 12.0.10 * fix: migrate from non-docker * fix: minimal install for mariadb in backup and recover * fix: fuse content missing in host * opt:adjusting migration strategy * Add changelog for pro 12.0.10 * Update security_features.md Update descriptions for encrypted library. * Update seahub_settings_py.md Update description for encrypted library versions. * docs: update Windows development setup instructions for vcpkg (#471) * Update drive-client-changelog.md 3.0.13 * update seasearch.yml * update * Update shibboleth_authentication.md * Update remote_user.md * fix: backup & restore command mysql -> mariadb * update backup and recovery commands and tip * opt: steps in recovering DB * update link of note of MDEV-30203 note from Mariadb * update link of note of MDEV-30203 note from Mariadb * opt: steps in recovering DB * Add changelog for 12.0.11-pro * Add changelog for v12.0.11 * fix: ce binary deployment format error * Update changelog-for-seafile-professional-server.md * feat: helm support custom storageClassName (#486) * docs(onlyoffice): syntax error (#489) * Custom set user role when shib login (#493) Co-authored-by: lian * Seahub customizing opt (#499) * update * Update seahub_customization.md * Update client-changelog.md 9.0.13 * Update upgrade_notes_for_12.0.x.md (#501) * Update upgrade_notes_for_12.0.x.md * Update upgrade_notes_for_12.0.x.md --------- Co-authored-by: Daniel Pan * Update upgrade_docker.md * update upgrade to 12.0: other configuration changes (#502) * Update changelog-for-seafile-professional-server.md * perf: Priority issues for S3_HOST and S3_AWS_REGION in 12.0 * perf: Priority issues for S3_HOST and S3_AWS_REGION in 12.0 * Update sending_email.md (#512) * Update sending_email.md * Update sending_email.md * Update drive-client-changelog.md 3.0.14 * Update drive-client-changelog.md 3.0.14 * code bar copy button (#517) * Update changelog-for-seafile-professional-server.md * 12.0 index master (#518) * add index-server * deploy index-server * deploy index-server * rm redis in env * Update distributed_indexing.md * update restore-all-repo command --------- Co-authored-by: Daniel Pan * wget index-server.yml * update index-server conf * update index-worker.conf * SeaDoc standalone Apache proxy (#519) * fix: typo error serve -> server (#522) * update 12.0 seasearch default image (#523) * fix: use nginx to proxy onlyoffice (#525) * fix: cluster by docker for es_host in init * Update changelog-for-seafile-professional-server.md * Update server-changelog.md * add usage of custom ca certificate with caddy (#530) * Update multi_institutions.md * Update client-changelog.md 9.0.14 * update old sdoc tag * Add fs_id_list_max_threads option (#538) Co-authored-by: yangheran * Update drive-client-changelog.md 3.0.15 * remove ce binary after merge --------- Co-authored-by: Daniel Pan Co-authored-by: Daniel Pan Co-authored-by: Jiaqiang Xu Co-authored-by: rumtid Co-authored-by: r350178982 <32759763+r350178982@users.noreply.github.com> Co-authored-by: lian Co-authored-by: seafile-dev <57566977+seafile-dev@users.noreply.github.com> Co-authored-by: 欢乐马 <38058090+SkywalkerSpace@users.noreply.github.com> Co-authored-by: skywalker Co-authored-by: feiniks <36756310+feiniks@users.noreply.github.com> Co-authored-by: yangheran --- ...angelog-for-seafile-professional-server.md | 5 ++ manual/changelog/client-changelog.md | 10 ++++ manual/changelog/drive-client-changelog.md | 9 +++ manual/changelog/server-changelog.md | 8 +++ manual/config/multi_institutions.md | 2 +- manual/config/seafile-conf.md | 6 ++ .../repo/docker/seadoc/0.8/docker-compose.yml | 22 +++++++ manual/setup/caddy.md | 58 +++++++++++++++++++ 8 files changed, 119 insertions(+), 1 deletion(-) create mode 100644 manual/repo/docker/seadoc/0.8/docker-compose.yml diff --git a/manual/changelog/changelog-for-seafile-professional-server.md b/manual/changelog/changelog-for-seafile-professional-server.md index 0c40c145..5eed11c9 100644 --- a/manual/changelog/changelog-for-seafile-professional-server.md +++ b/manual/changelog/changelog-for-seafile-professional-server.md @@ -8,6 +8,11 @@ Please check our document for how to upgrade to [12.0](../upgrade/upgrade_notes_for_12.0.x.md) +### 12.0.14 (2025-05-28) + +* [fix] Fix two stored XSS issues (In rendering terms and conditions and in institution admin page) +* [fix] Do not close the search popover when click a result + ### 12.0.13 (2025-05-09) * Add S/MIME support for emails diff --git a/manual/changelog/client-changelog.md b/manual/changelog/client-changelog.md index 2215fa0b..382fb20a 100644 --- a/manual/changelog/client-changelog.md +++ b/manual/changelog/client-changelog.md @@ -2,6 +2,16 @@ ## 9.0 +### 9.0.14 (2025/06/16) + +* Improve cloud file browser dialog +* Improve icons for system notification area +* Add link to FAQ in file sync error dialog +* Check and notify when client uses wrong key for encryption +* Update some seahub APIs +* Update grandparent modification time when file is updated +* \[win] Skip syncing special legacy folders under Documents ("My Music", "My Pictures" and "My Videos"), to avoid permission errors + ### 9.0.13 (2025/04/02) * \[win] Fix bug that some items of context menu in Windows Explorer don't show up diff --git a/manual/changelog/drive-client-changelog.md b/manual/changelog/drive-client-changelog.md index 7eb2ae20..818f9976 100644 --- a/manual/changelog/drive-client-changelog.md +++ b/manual/changelog/drive-client-changelog.md @@ -1,5 +1,14 @@ # SeaDrive Client Changelog +### 3.0.15 (2025/06/26) + +* Persist file sync errors over restart +* Save encryption keys for encrypted libraries after delete confirmation "No" +* Increase fs-id-list request timeout to 30 minutes +* Update parent folder modification time when file are updated +* \[mac] Fix memory leaks when removing downloaded items from cache +* \[linux] Add Nautilus extension for GNOME + ### 3.0.14 (2025/05/07) * \[win] Avoid potential file overwriting issue after internal metadata is removed by Anti-virus diff --git a/manual/changelog/server-changelog.md b/manual/changelog/server-changelog.md index 6555e119..75ba39a1 100644 --- a/manual/changelog/server-changelog.md +++ b/manual/changelog/server-changelog.md @@ -9,6 +9,14 @@ Please check our document for how to upgrade to [12.0](../upgrade/upgrade_notes_for_12.0.x.md) +### 12.0.14 (2025-05-29) + +* [fix] Fix two stored XSS issues (In rendering terms and conditions and in institution admin page) +* Add S/MIME support for emails +* [fix] Fix a UI bug in "share admin -> share links" +* [fix] Fix a bug in rendering "system admin -> users" +* Update translations + ### 12.0.11 (2025-03-19) * [fix] Fix a stored XSS issue diff --git a/manual/config/multi_institutions.md b/manual/config/multi_institutions.md index 7af0db0d..1298c29e 100644 --- a/manual/config/multi_institutions.md +++ b/manual/config/multi_institutions.md @@ -12,7 +12,7 @@ In `seahub_settings.py`, add `MULTI_INSTITUTION = True` to enable multi-institut ) ``` -!!! tip "Please replease `+=` to `=` if `EXTRA_MIDDLEWARE_CLASSES` or `EXTRA_MIDDLEWARE` is not defined" +!!! tip "Please replease `+=` to `=` if `EXTRA_MIDDLEWARE` is not defined" ## Add institutions and institution admins diff --git a/manual/config/seafile-conf.md b/manual/config/seafile-conf.md index 298e3a79..e12ba1f8 100644 --- a/manual/config/seafile-conf.md +++ b/manual/config/seafile-conf.md @@ -370,6 +370,12 @@ Go fileserver caches fs objects in memory. On the one hand, it avoids repeated c fs_cache_limit = 100 ``` +Since Pro 12.0.10 version, you can set the max threads of fs-id-list requests. When you download a repo, Seafile client will request fs id list, and you can control the maximum concurrency for handling fs-id-list requests in the go fileserver through `fs_id_list_max_threads` configuration, which defaults to 10. +``` +[fileserver] +fs_id_list_max_threads = 20 +``` + ## Profiling Go Fileserver Performance Since Seafile 9.0.7, you can enable the profile function of go fileserver by adding the following configuration options: diff --git a/manual/repo/docker/seadoc/0.8/docker-compose.yml b/manual/repo/docker/seadoc/0.8/docker-compose.yml new file mode 100644 index 00000000..726e086f --- /dev/null +++ b/manual/repo/docker/seadoc/0.8/docker-compose.yml @@ -0,0 +1,22 @@ +services: + + sdoc-server: + image: seafileltd/sdoc-server:0.8.0 + container_name: sdoc-server + ports: + - 80:80 + # - 443:443 + # - 7070:7070 + # - 8888:8888 + volumes: + - /opt/seadoc-data/:/shared + environment: + - DB_HOST=192.168.0.2 + - DB_PORT=3306 + - DB_USER=user + - DB_PASSWD=password # Required, password of MySQL service. + - DB_NAME=sdoc_db + - TIME_ZONE=Etc/UTC # Optional, default is UTC. Should be uncomment and set to your local time zone. + - SDOC_SERVER_LETSENCRYPT=false # Whether to use https or not. + - SDOC_SERVER_HOSTNAME=sdoc-server.example.com # Specifies your host name if https is enabled. + - SEAHUB_SERVICE_URL=http://seafile.example.com diff --git a/manual/setup/caddy.md b/manual/setup/caddy.md index ea52274b..c6c804b2 100644 --- a/manual/setup/caddy.md +++ b/manual/setup/caddy.md @@ -5,6 +5,15 @@ Caddy is a modern open source web server that mainly binds external traffic and internal services in [seafile docker](./overview.md). In addition to the advantages of traditional proxy components (e.g., *nginx*), Caddy also makes it easier for users to complete the acquisition and update of HTTPS certificates by providing simpler configurations. +## Engage HTTPS by caddy + +We provide two options for enabling HTTPS via *Caddy*, which mainly rely on The caddy docker proxy container from [Lucaslorentz](https://github.com/lucaslorentz/caddy-docker-proxy) supports dynamic configuration with labels: + +- With a automatically generated certificate +- Using a custom (existing) certificate + +### With a automatically generated certificate + To engage HTTPS, users only needs to correctly configure the following fields in `.env`: ```shell @@ -17,3 +26,52 @@ After Seafile Docker startup, you can use following command to access the logs o ```sh docker logs seafile-caddy -f ``` + +### Using a custom (existing) certificate + +With the `caddy.yml`, a default volume-mount is created: `/opt/seafile-caddy` (as you can change it by modifying `SEAFILE_CADDY_VOLUME` in `.env`). By convention you should provide your certificate & key files in the container host filesystem under `/opt/seafile-caddy/certs/` to make it available to caddy: + +```sh +/opt/seafile-caddy/certs/ +├── cert.pem # xxx.crt in some case +├── key.pem # xxx.key in some case +``` + +!!! tip "Command to generate custom certificates" + With this command, you can generate your own custom certificates: + + ```sh + cd /opt/seafile-caddy/certs + openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout ./key.pem -out ./cert.pem + ``` + + **Please be aware that custom certicates can not be used for ip-adresses** + +Then modify `seafile-server.yml` to enable your custom certificate, by the way, we strongly recommend you to make a backup of `seafile-server.yml` before doing this: + +```sh +cp seafile-server.yml seafile-server.yml.bak +nano seafile-server.yml +``` + +and + +```yml +services: + ... + seafile: + ... + volumes: + ... + # If you use a self-generated certificate, please add it to the Seafile server trusted directory (i.e. remove the comment symbol below) + # - "/opt/seafile-caddy/certs/cert.pem:/usr/local/share/ca-certificates/cert.crt" + labels: + caddy: ${SEAFILE_SERVER_HOSTNAME:?Variable is not set or empty} # leave this variables only + caddy.tls: "/data/caddy/certs/cert.pem /data/caddy/certs/key.pem" + ... +``` + +!!! warning "DNS resolution must work inside the container" + + If you're using a ***non-public url*** like `my-custom-setup.local`, you have to make sure, that the docker container can resolve this DNS query. If you don't run your own DNS servers, you have to add extras_hosts to your `.yml` file. +