Files
SealShare/Dockerfile
T
Andreas Reinhold / reiniandClaude Opus 5 c1906d2009 Stop the SQLite volume from hiding new migrations
Uploads on share.kadenpartner.ch failed with 409 on every chunk after
the update to 2.1. The example docker-compose.yml mounts the SQLite
volume over all of /app/database. Docker fills a volume from the image
only when it is created, so the container kept the 2.0 migrations and
never saw the 2.1 one. share_files.uploaded_chunks was never created,
so the chunk endpoint read null and answered 409. SQLite takes the
unknown "completed_at" in whereNull() as a string, so nothing failed
earlier.

- The image keeps a copy of its migrations in docker/migrations. On
  startup the entrypoint adds the ones missing from database/migrations
  before migrating, so installs with the old mount recover by pulling
  the new image.
- docker-compose.example.yml and docker-compose.yml mount
  sealshare_database at /app/database/sqlite and set DB_DATABASE to the
  file in it. An existing volume can be moved there without losing
  data: its database.sqlite lands at exactly that path.
- Tested with a locally built image: a volume created by 2.0.1 with the
  old mount gets the migration once (not again on restart) and keeps
  its settings; the same volume moved to the new path keeps its data;
  a fresh volume with the new layout starts healthy.
- README and CHANGELOG (Unreleased) describe the new path and how to
  switch.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
2026-09-17 10:53:27 +02:00

111 lines
3.4 KiB
Docker

# ============================================
# Stage 1: Install PHP dependencies
# ============================================
# Built on the build machine's own platform: vendor/ is plain PHP, the same for every target, so a
# multi-arch build runs it once and never under emulation.
FROM --platform=$BUILDPLATFORM composer:2 AS vendor
WORKDIR /app
COPY composer.json composer.lock* ./
RUN composer install \
--no-dev \
--no-interaction \
--no-autoloader \
--no-scripts \
--prefer-dist
COPY . .
RUN composer dump-autoload --optimize --no-dev
# ============================================
# Stage 2: Build frontend assets
# ============================================
# After Composer: the stylesheet and script import Livewire Material from vendor/. On the build
# machine's platform too: the output is CSS and JavaScript, whatever the target.
FROM --platform=$BUILDPLATFORM node:24-alpine AS assets
WORKDIR /app
COPY package.json package-lock.json* ./
RUN npm ci --prefer-offline
COPY vite.config.js ./
COPY resources/ ./resources/
COPY --from=vendor /app/vendor/nonameweb ./vendor/nonameweb
RUN npm run build
# ============================================
# Stage 3: Production image (FrankenPHP/Octane)
# ============================================
FROM dunglas/frankenphp:php8.5-alpine AS production
LABEL maintainer="surtic86"
LABEL org.opencontainers.image.source="https://gitea.nonameweb.ch/noNameWEB/SealShare"
LABEL org.opencontainers.image.description="Self-hosted encrypted file sharing"
# Install required PHP extensions
RUN install-php-extensions \
intl \
pcntl \
zip
# Laravel environment defaults
ENV APP_NAME="SealShare" \
APP_ENV="production" \
APP_DEBUG="false" \
APP_URL="http://localhost" \
LOG_CHANNEL="stderr" \
LOG_LEVEL="warning" \
DB_CONNECTION="sqlite" \
SESSION_DRIVER="database" \
QUEUE_CONNECTION="database" \
CACHE_STORE="database" \
FILESYSTEM_DISK="local" \
BROADCAST_CONNECTION="log" \
BCRYPT_ROUNDS="12" \
OCTANE_SERVER="frankenphp"
WORKDIR /app
# Copy PHP ini for upload limits
COPY docker/php/uploads.ini /usr/local/etc/php/conf.d/99-uploads.ini
# Copy application code
COPY . .
# Copy vendor dependencies from composer stage
COPY --from=vendor /app/vendor ./vendor
# Copy built frontend assets from node stage
COPY --from=assets /app/public/build ./public/build
# Remove dev/build files and stale cache not needed in production
RUN rm -rf node_modules tests .gitea docker/dev.Dockerfile docker/dev-entrypoint.sh .env .env.example \
bootstrap/cache/*.php \
&& mkdir -p storage/app/shares storage/app/public storage/framework/cache \
storage/framework/sessions storage/framework/testing storage/framework/views \
storage/logs database/sqlite \
&& chmod -R 777 storage database bootstrap/cache
# A docker-compose.yml from before 2.1.1 mounts the SQLite volume over all of database/, which hides
# the migrations of every later image; the entrypoint adds the ones the volume is missing from here.
RUN cp -R database/migrations docker/migrations
# Create SQLite database file if it doesn't exist
RUN touch database/database.sqlite \
&& chmod 666 database/database.sqlite
# Make entrypoint and healthcheck executable
RUN chmod +x docker/entrypoint.sh docker/healthcheck.sh
EXPOSE 80 443 443/udp
HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 \
CMD /app/docker/healthcheck.sh
ENTRYPOINT ["docker/entrypoint.sh"]