From 05556552635cdf03dd70dde1a8416b3daf93f2c3 Mon Sep 17 00:00:00 2001 From: SkywalkerSpace Date: Thu, 20 Nov 2025 16:26:27 +0800 Subject: [PATCH] thumbnail-server support NON_ROOT --- manual/extension/thumbnail-server.md | 1 + manual/repo/docker/thumbnail-server.yml | 2 ++ manual/repo/docker/thumbnail-server/thumbnail-server.yml | 2 ++ 3 files changed, 5 insertions(+) diff --git a/manual/extension/thumbnail-server.md b/manual/extension/thumbnail-server.md index ffe7050e..9c86fc6e 100644 --- a/manual/extension/thumbnail-server.md +++ b/manual/extension/thumbnail-server.md @@ -68,6 +68,7 @@ Then modify the `.env` file according to your environment. The following fields | `S3_USE_V4_SIGNATURE` | Use the v4 protocol of S3 if enabled | | `S3_PATH_STYLE_REQUEST` | This option asks Seafile to use URLs like `https://192.168.1.123:8080/bucketname/object` to access objects. In *Amazon S3*, the default URL format is in virtual host style, such as `https://bucketname.s3.amazonaws.com/object`. But this style relies on advanced DNS server setup. So most self-hosted storage systems only implement the path style format. | | `S3_SSE_C_KEY` | A string of 32 characters can be generated by openssl rand -base64 24. It can be any 32-character long random string. It's required to use V4 authentication protocol and https if you enable SSE-C. | +| `NON_ROOT` | Run container without a root user | `false` | Then you can run thumbnail server with the following command: diff --git a/manual/repo/docker/thumbnail-server.yml b/manual/repo/docker/thumbnail-server.yml index b7ac9a79..4840811c 100644 --- a/manual/repo/docker/thumbnail-server.yml +++ b/manual/repo/docker/thumbnail-server.yml @@ -16,7 +16,9 @@ services: - SEAFILE_MYSQL_DB_PASSWORD=${SEAFILE_MYSQL_DB_PASSWORD:?Variable is not set or empty} - SEAFILE_MYSQL_DB_CCNET_DB_NAME=${SEAFILE_MYSQL_DB_CCNET_DB_NAME:-ccnet_db} - SEAFILE_MYSQL_DB_SEAFILE_DB_NAME=${SEAFILE_MYSQL_DB_SEAFILE_DB_NAME:-seafile_db} + - NON_ROOT=${NON_ROOT:-false} - JWT_PRIVATE_KEY=${JWT_PRIVATE_KEY:?Variable is not set or empty} + - SEAFILE_LOG_TO_STDOUT=${SEAFILE_LOG_TO_STDOUT:-false} - SITE_ROOT=${SITE_ROOT:-/} - INNER_SEAHUB_SERVICE_URL=${INNER_SEAHUB_SERVICE_URL:-http://seafile} - THUMBNAIL_IMAGE_ORIGINAL_SIZE_LIMIT=${THUMBNAIL_IMAGE_ORIGINAL_SIZE_LIMIT:-256} diff --git a/manual/repo/docker/thumbnail-server/thumbnail-server.yml b/manual/repo/docker/thumbnail-server/thumbnail-server.yml index 65bc6dd1..2e4c9efa 100644 --- a/manual/repo/docker/thumbnail-server/thumbnail-server.yml +++ b/manual/repo/docker/thumbnail-server/thumbnail-server.yml @@ -16,7 +16,9 @@ services: - SEAFILE_MYSQL_DB_PASSWORD=${SEAFILE_MYSQL_DB_PASSWORD:?Variable is not set or empty} - SEAFILE_MYSQL_DB_CCNET_DB_NAME=${SEAFILE_MYSQL_DB_CCNET_DB_NAME:-ccnet_db} - SEAFILE_MYSQL_DB_SEAFILE_DB_NAME=${SEAFILE_MYSQL_DB_SEAFILE_DB_NAME:-seafile_db} + - NON_ROOT=${NON_ROOT:-false} - JWT_PRIVATE_KEY=${JWT_PRIVATE_KEY:?Variable is not set or empty} + - SEAFILE_LOG_TO_STDOUT=${SEAFILE_LOG_TO_STDOUT:-false} - SITE_ROOT=${SITE_ROOT:-/} - INNER_SEAHUB_SERVICE_URL=${INNER_SEAHUB_SERVICE_URL:?Variable is not set or empty} - THUMBNAIL_IMAGE_ORIGINAL_SIZE_LIMIT=${THUMBNAIL_IMAGE_ORIGINAL_SIZE_LIMIT:-256}