peter
815083bcc4
- The queue keeps a done job by when it became done (ready_at), not by its last write: renaming, keeping or moving an old file, or the GC's expiry warning, no longer brings it back as just finished. - GC expiry and eviction re-read each file under the asset→job locks the user routes take, and commit one file at a time: a delete, a re-download or a keep made while the GC runs is honoured, never a second release that frees a file another user still holds. - A file records the origin it was placed under (download_jobs.source_key, migration 0105): an edit whose parent expired still goes back to its folder, not to Uploads. - A folder a file is being put in is held (FOR SHARE) until it lands; a delete of it waits and takes that file home too, instead of failing on the foreign key. - The hash route reads at most two files at once (429 past that) and holds no connection meanwhile. - 0104's backfill dates old files by their request date only: no notice prod wrote names its job. - The old DOWNLOAD_ROOT still finds the files; a files root that is not a mounted volume stops the worker and is logged by the API; the volume-copy recipe looks the project-prefixed names up. - Stale comments about the /downloads mount and the Downloads page.
58 lines
2.1 KiB
Bash
Executable File
58 lines
2.1 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# Siftlode self-host installer (Linux/macOS). Generates secrets into .env, starts the stack from
|
|
# the prebuilt image, and prints the first-run setup-wizard URL. Re-running is safe: an existing
|
|
# .env is left untouched. Requires Docker (with the compose plugin) and openssl.
|
|
set -euo pipefail
|
|
|
|
COMPOSE="docker compose -f docker-compose.selfhost.yml"
|
|
PORT="${HTTP_PORT:-8080}"
|
|
|
|
if [ -f .env ]; then
|
|
echo ".env already exists — leaving it untouched (delete it to re-generate)."
|
|
else
|
|
printf "Public URL where this instance will be reached [http://localhost:%s]: " "$PORT"
|
|
read -r URL
|
|
URL="${URL:-http://localhost:$PORT}"
|
|
URL="${URL%/}"
|
|
|
|
# Secrets — openssl only, no Python needed. The Fernet key is urlsafe base64 of 32 bytes.
|
|
SECRET_KEY="$(openssl rand -hex 32)"
|
|
TOKEN_ENCRYPTION_KEY="$(openssl rand -base64 32 | tr '+/' '-_')"
|
|
POSTGRES_PASSWORD="$(openssl rand -hex 16)"
|
|
|
|
cat > .env <<EOF
|
|
# Generated by install.sh — keep secret (chmod 600), never commit. Re-run after deleting to reset.
|
|
POSTGRES_PASSWORD=$POSTGRES_PASSWORD
|
|
SECRET_KEY=$SECRET_KEY
|
|
TOKEN_ENCRYPTION_KEY=$TOKEN_ENCRYPTION_KEY
|
|
OAUTH_REDIRECT_URL=$URL/auth/callback
|
|
|
|
# Optional: keep the Files library in a host folder (e.g. one your Plex server reads) instead
|
|
# of a Docker volume. Must be writable by uid 1000 (sudo chown -R 1000:1000 <dir>).
|
|
# FILES_HOST_PATH=/mnt/media/youtube
|
|
EOF
|
|
chmod 600 .env
|
|
echo "Wrote .env (secrets generated)."
|
|
fi
|
|
|
|
echo "Pulling and starting Siftlode…"
|
|
$COMPOSE pull
|
|
$COMPOSE up -d
|
|
|
|
echo "Waiting for the app to come up…"
|
|
for _ in $(seq 1 30); do
|
|
curl -fsS -o /dev/null "http://localhost:$PORT/healthz" 2>/dev/null && break
|
|
sleep 2
|
|
done
|
|
|
|
echo
|
|
echo "==================================================================="
|
|
echo " Siftlode is up. Open the first-run setup wizard at:"
|
|
URL_LINE="$($COMPOSE logs api 2>/dev/null | grep -o 'http[s]*://[^ ]*setup?token=[A-Za-z0-9_-]*' | tail -1)"
|
|
if [ -n "$URL_LINE" ]; then
|
|
echo " $URL_LINE"
|
|
else
|
|
echo " (not found yet — run: $COMPOSE logs api | grep 'setup?token=')"
|
|
fi
|
|
echo "==================================================================="
|