fix app.conf

Build aria2 ui docker image to integrate with nextcloud

.dockerignore

@@ -0,0 +1,3 @@
+README*.md
+LICENSE
+.github

.github/ISSUE_TEMPLATE/bug_report.md

@@ -0,0 +1,26 @@
+---
+name: Bug report
+about: Create a report to help us improve
+title: ''
+labels: ''
+assignees: ''
+
+---
+
+## Please try to use English to describe your question or issue.
+
+**Describe the bug**
+A clear and concise description of what the bug is.
+
+**To Reproduce**
+Steps to reproduce the behavior:
+1. Go to '...'
+2. Click on '....'
+3. Scroll down to '....'
+4. See error
+
+**Expected behavior**
+A clear and concise description of what you expected to happen.
+
+**Screenshots**
+If applicable, add screenshots to help explain your problem.

.github/workflows/dockerimage.yml

@@ -0,0 +1,14 @@
+name: Docker Image CI
+on: [push]
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@master
+    - name: Build and Publish main docker image to Registry
+      uses: elgohr/Publish-Docker-Github-Action@master
+      with:
+        name: wahyd4/aria2-ui
+        username: ${{ secrets.DOCKER_HUB_USER }}
+        password: ${{ secrets.DOCKER_HUB_PASS }}
+        snapshot: true

Caddyfile

@@ -0,0 +1,26 @@
+{$DOMAIN} {
+  proxy / file-manager {
+      transparent
+  }
+
+  proxy /jsonrpc localhost:6800 {
+    transparent
+    websocket
+  }
+
+  log stdout
+  errors stdout
+  gzip
+}
+
+{$DOMAIN}/ui {
+  redir / /ui/ 301
+}
+
+{$DOMAIN}/ui/ {
+  root /usr/local/www/aria2
+  timeouts none
+  gzip
+  log stdout
+  errors stdout
+}

Dockerfile

@@ -0,0 +1,50 @@
+FROM alpine:edge
+
+LABEL AUTHOR=Junv<wahyd4@gmail.com>
+
+WORKDIR /app
+
+ENV RPC_SECRET=""
+ENV ENABLE_AUTH=false
+ENV DOMAIN=0.0.0.0:80
+ENV ARIA2_USER=user
+ENV ARIA2_PWD=password
+ENV ARIA2_SSL=false
+ENV PUID=1000
+ENV PGID=1000
+
+RUN adduser -D -u 1000 junv \
+  && apk update \
+  && apk add runit shadow wget bash curl openrc gnupg aria2 tar --no-cache \
+  && curl https://getcaddy.com | bash -s personal \
+  && platform=linux-amd64 \
+  && wget -N https://bin.equinox.io/c/ekMN3bCZFUn/forego-stable-${platform}.tgz \
+  && tar -zxvf forego-stable-${platform}.tgz \
+  && rm -rf forego-stable-${platform}.tgz \
+  && mkdir -p /usr/local/www \
+  && mkdir -p /usr/local/www/aria2
+
+ADD aria2c.sh caddy.sh Procfile init.sh start.sh /app/
+ADD conf /app/conf
+ADD Caddyfile SecureCaddyfile /usr/local/caddy/
+
+# AriaNg
+RUN mkdir /usr/local/www/aria2/Download \
+  && cd /usr/local/www/aria2 \
+  && chmod +rw /app/conf/aria2.session \
+  && version=1.1.1 \
+  && wget -N --no-check-certificate https://github.com/mayswind/AriaNg/releases/download/${version}/AriaNg-${version}.zip \
+  && unzip AriaNg-${version}.zip \
+  && rm -rf AriaNg-${version}.zip \
+  && chmod -R 755 /usr/local/www/aria2 \
+  && sed -i 's/6800/80/g' /usr/local/www/aria2/js/aria-ng*.js
+
+# folder for storing ssl keys
+VOLUME /app/conf/key
+
+# file downloading folder
+VOLUME /data
+
+EXPOSE 80 443
+
+CMD ["./start.sh"]

LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [2019] [Junwei Zhao]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

Procfile

@@ -0,0 +1,2 @@
+caddy: /app/caddy.sh
+aria2c: /app/aria2c.sh

README.CN.md

@@ -0,0 +1,140 @@
+Aria2 + AriaNg
+
+[English](https://github.com/wahyd4/aria2-ariang-docker/blob/master/README.md) | 简体中文
+
+[![](https://images.microbadger.com/badges/image/wahyd4/aria2-ui.svg)](https://microbadger.com/images/wahyd4/aria2-ui "Get your own image badge on microbadger.com")
+[![Docker Pulls](https://img.shields.io/docker/pulls/wahyd4/aria2-ui.svg)](https://hub.docker.com/r/wahyd4/aria2-ui/)
+[![Github Build](https://github.com/wahyd4/aria2-ariang-docker/workflows/Docker%20Image%20CI/badge.svg)](https://github.com/wahyd4/aria2-ariang-docker/actions)
+
+<img src="https://raw.githubusercontent.com/wahyd4/work-in-australia/766592ac6318027d7b3c334d8c50ca80818eeff8/wepay.jpg" alt="buy me a drink" width="120"/>
+
+本镜像包含 Aria2、AriaNg 和File Manager，主要方便那些用户期望只运行一个镜像就能实现图形化下载文件和在线播放文件。（类似离线下载的功能），只使用一个 Docker 镜像也方便用户在群晖NAS 中运行本程序。
+
+- [功能特性](#功能特性)
+- [推荐使用的docker image tag](#推荐使用的docker-image-tag)
+- [安装于运行](#安装于运行)
+  - [快速运行](#快速运行)
+  - [开启所有功能](#开启所有功能)
+  - [使用docker-compose 运行](#使用docker-compose-运行)
+  - [支持的 Docker 环境变量](#支持的-docker-环境变量)
+  - [支持的 Docker volume 属性](#支持的-docker-volume-属性)
+- [自动 SSL](#自动-ssl)
+- [自行构建镜像](#自行构建镜像)
+- [Docker Hub](#docker-hub)
+- [使用 Docker compose 来运行](#使用-docker-compose-来运行)
+- [常见问题](#常见问题)
+
+AriaNG
+![Screenshot](https://github.com/wahyd4/aria2-ariang-x-docker-compose/raw/master/images/ariang.jpg)
+
+File Browser
+![File Browser](https://github.com/wahyd4/aria2-ariang-docker/raw/master/filemanager.png)
+
+## 功能特性
+
+  * Aria2 (SSL 支持)
+  * AriaNg 通过 UI 来操作，下载文件
+  * 自动 HTTPS （Let's Encrypt）
+  * 支持绑定自定义用户ID，可以主机上的非`root`用户，也可以管理下载的文件
+  * Basic Auth 用户认证
+  * 文件管理和视频播放 ([File Browser](https://filebrowser.xyz/)，注意默认情况下，只能访问和管理 `/data` 目录下的文件)
+  * 支持ARM CPU 架构，因此可以在树莓派中运行，请下载对应的[ARM TAG](https://cloud.docker.com/repository/docker/wahyd4/aria2-ui/tags) 版本, `arm32`或`arm64`
+
+## 推荐使用的docker image tag
+
+* wahyd4/aria2-ui:latest
+* wahyd4/aria2-ui:arm32
+* wahyd4/aria2-ui:arm64
+
+## 安装于运行
+
+### 快速运行
+
+```shell
+  docker run -d --name aria2-ui -p 80:80 wahyd4/aria2-ui
+```
+
+* Aria2: <http://yourip/ui/>
+* FileManger: <http://yourip>
+* 请使用 admin/admin 进行登录
+### 开启所有功能
+```bash
+  docker run -d --name ariang \
+  -p 80:80 \
+  -p 443:443 \
+  -e PUID=1000 \
+  -e PGID=1000 \
+  -e ENABLE_AUTH=true \
+  -e RPC_SECRET=Hello \
+  -e DOMAIN=https://example.com \
+  -e ARIA2_SSL=false \
+  -e ARIA2_USER=user \
+  -e ARIA2_PWD=pwd \
+  -v /yourdata:/data \
+  -v /app/a.db:/app/filebrowser.db \
+  -v /yoursslkeys/:/app/conf/key \
+  -v <the folder of aria2.conf and aria2.session>:/app/conf \
+  wahyd4/aria2-ui
+```
+### 使用docker-compose 运行
+
+如果你不想记住那些命令行，你也可以使用docker-compose来将配置放在`docker-compose.yaml`文件中
+```yaml
+version: "3.5"
+services:
+  aria2-ui:
+    restart: unless-stopped
+    image: wahyd4/aria2-ui:latest
+    environment:
+      - ENABLE_AUTH=true
+      - ARIA2_USER=hello
+      - ARIA2_PWD=world
+      - DOMAIN=toozhao.com
+    volumes:
+      - ./data:/data
+```
+然后使用 `docker-compose up -d` 运行即可
+
+### 支持的 Docker 环境变量
+
+  * ENABLE_AUTH 启用 Basic auth(网页简单认证) 用户认证
+  * ARIA2_USER Basic Auth 用户认证用户名
+  * ARIA2_PWD Basic Auth 密码
+  * PUID 需要绑定主机的Linux用户ID，可以通过`cat /etc/passwd` 查看用户列表， 默认UID 是`1000`
+  * PGID 需要绑定的主机的Linux 用户组ID，默认GID 是`1000`
+  * RPC_SECRET Aria2 RPC 加密 token
+  * DOMAIN 绑定的域名, 当绑定的域名为`HTTPS`时，即为启用`HTTPS`， 例： `DOMAIN=https://toozhao.com`
+
+
+### 支持的 Docker volume 属性
+  * `/data` 用来放置所有下载的文件的目录
+  * `/app/conf/key` 用户来放置 Aria2 SSL `certificate`证书和 `key` 文件. `注意`: 证书的名字必须是 `aria2.crt`， Key 文件的名字必须是 `aria2.key`
+  * `/app/conf` 该目录下可以放置你的自定义`aria2.conf`配置文件，`aria2.session`，且必须包含这两个文件。第一次使用`aria2.session`时，创建一个空文件即可，该文件会包含aria2当前的下载列表，这样即使容器被销毁也不用担心文件列表丢失了。你也可以直接拷贝当前项目下`conf`目录中的两个文件并使用。
+  * `/app/filebrowser.db` File Browser 的内嵌数据库，升级Docker 镜像也不用担心之前的设置丢失。请确保在宿主机先创建一个空文件再使用。
+
+## 自动 SSL
+
+请在绑定域名前，设置`DNS`的一条`A`记录，将运行docker的主机IP绑定到该域名。然后你仅仅需要在运行时添加`e`设置即可。
+
+```bash
+docker run -d --name aria2-ui -p 80:80 -p 443:443 -e DOMAIN=https://toozhao.com wahyd4/aria2-ui
+```
+
+## 自行构建镜像
+
+```
+docker build -t aria2-ui .
+```
+
+## Docker Hub
+
+  <https://hub.docker.com/r/wahyd4/aria2-ui/>
+
+## 使用 Docker compose 来运行
+
+  请参考 <https://github.com/wahyd4/aria2-ariang-x-docker-compose>
+
+## 常见问题
+  1. 当你以非其他`80` 端口或以启用了HTTPS`443`端口运行程序时，会出现`Aria2 状态 未连接`的错误，这是因为在最新版本里面，我们去掉aria2的独立6800端口，转而使用和网站同一个端口。因为你需要渠道 `AriaNg设置` -> 页面顶端的 `RPC`页面，将你的Aria2 RPC 地址中的端口从`80`改成你使用的正确端口。因为 AriaNg 仅仅将设置保存在浏览器中，因为当你使用不同的浏览器，或者将浏览器清除缓存后，你都需要重新设置一次。
+  2. 下载的BT或者磁力完全没有速度怎么办？ 建议先下载一个热门的BT种子文件，而不是磁力链接。这样可以帮助缓存DHT文件，渐渐地，速度就会起来了。比如试试下载树莓派操作系统的BT种子？[前往下载](https://www.raspberrypi.org/downloads/raspbian/)
+  3. 如果你遇到了和 `setcap` 相关的错误，很大程度说明你说运行的Linux不支持使用非`root`用户来运行本Docker 镜像，因此请显式地设置环境变量`PUID`  `PGID` 为 `0` ，也就是使用`root` 来运行

README.md

@@ -1 +1,145 @@
-Aria2 + AriaNg
+Aria2 + AriaNg + Filebrowser
+
+English | [简体中文](https://github.com/wahyd4/aria2-ariang-docker/blob/master/README.CN.md)
+
+[![](https://images.microbadger.com/badges/image/wahyd4/aria2-ui.svg)](https://microbadger.com/images/wahyd4/aria2-ui "Get your own image badge on microbadger.com")
+[![Docker Pulls](https://img.shields.io/docker/pulls/wahyd4/aria2-ui.svg)](https://hub.docker.com/r/wahyd4/aria2-ui/)
+[![Github Build](https://github.com/wahyd4/aria2-ariang-docker/workflows/Docker%20Image%20CI/badge.svg)](https://github.com/wahyd4/aria2-ariang-docker/actions)
+
+<img src="https://raw.githubusercontent.com/wahyd4/work-in-australia/766592ac6318027d7b3c334d8c50ca80818eeff8/wepay.jpg" alt="buy me a drink" width="120"/>
+
+- [Features](#features)
+- [Recommended versions](#recommended-versions)
+- [How to run](#how-to-run)
+  - [Quick run](#quick-run)
+  - [Full features run](#full-features-run)
+  - [Run with docker-compose](#run-with-docker-compose)
+  - [Supported Environment Variables](#supported-environment-variables)
+  - [Supported Volumes](#supported-volumes)
+- [Auto SSL enabling](#auto-ssl-enabling)
+- [Build the image by yourself](#build-the-image-by-yourself)
+- [Docker Hub](#docker-hub)
+- [Usage it in Docker compose](#usage-it-in-docker-compose)
+- [FAQ](#faq)
+
+One Docker image for all file downloading, managing, playing and evening sharing platforms!
+
+Besides, it's pretty small and ARM CPU supported which means you can run it on Raspberry Pi🍓.
+
+Last but not least, SSL enabling so easy!
+
+AriaNG
+![Screenshot](https://github.com/wahyd4/aria2-ariang-x-docker-compose/raw/master/images/ariang.jpg)
+
+File Browser
+![File Browser](https://github.com/wahyd4/aria2-ariang-docker/raw/master/filemanager.png)
+
+## Features
+
+  * Aria2 (SSL support)
+  * AriaNg
+  * Auto HTTPS （Let's Encrypt）
+  * Bind non root user into container, so non root user can also manage downloaded files.
+  * Basic Auth
+  * File indexing and video playing ([File Browser](https://filebrowser.xyz/))
+  * Add support for ARM CPUs, please choose correct [docker image TAG](https://cloud.docker.com/repository/docker/wahyd4/aria2-ui/tags)
+
+## Recommended versions
+
+* wahyd4/aria2-ui:latest
+* wahyd4/aria2-ui:arm32
+* wahyd4/aria2-ui:arm64
+
+## How to run
+
+### Quick run
+
+```shell
+  docker run -d --name aria2-ui -p 80:80 wahyd4/aria2-ui
+```
+
+* Aria2: <http://yourip/ui/>
+* FileManger: <http://yourip>
+* Please use `admin`/`admin` as username and password to login for the first time.
+
+### Full features run
+
+```bash
+  docker run -d --name ariang \
+  -p 80:80 \
+  -p 443:443 \
+  -e PUID=1000 \
+  -e PGID=1000 \
+  -e ENABLE_AUTH=true \
+  -e RPC_SECRET=Hello \
+  -e DOMAIN=https://example.com \
+  -e ARIA2_SSL=false \
+  -e ARIA2_USER=user \
+  -e ARIA2_PWD=pwd \
+  -v /yourdata:/data \
+  -v /app/a.db:/app/filebrowser.db \
+  -v /yoursslkeys/:/app/conf/key \
+  -v <the folder of aria2.conf and aria2.session>:/app/conf \
+  wahyd4/aria2-ui
+```
+### Run with docker-compose
+
+If you wanna get rid of those annoying command line things, just put the following sample content into `docker-compose.yaml`
+```yaml
+version: "3.5"
+services:
+  aria2-ui:
+    restart: unless-stopped
+    image: wahyd4/aria2-ui:latest
+    environment:
+      - ENABLE_AUTH=true
+      - ARIA2_USER=hello
+      - ARIA2_PWD=world
+      - DOMAIN=toozhao.com
+    volumes:
+      - ./data:/data
+```
+Then just run `docker-compose up -d`, that's it!
+
+### Supported Environment Variables
+
+  * ENABLE_AUTH whether to enable Basic auth
+  * ARIA2_USER Basic Auth username
+  * ARIA2_PWD Basic Auth password
+  * PUID Bind Linux UID into container which means you can use non `root` user to manage downloaded files, default UID is `1000`
+  * PGID Bind Linux GID into container, default GID is 1000
+  * RPC_SECRET The Aria2 RPC secret token
+  * DOMAIN The domain you'd like to bind, when domain is a `https://` thing, then auto SSL feature will be enabled
+
+
+### Supported Volumes
+  * `/data` The folder which contains all the files you download.
+  * `/app/conf/key` The folder which stored Aria2 SSL `certificate` and `key` file. `Notice`: The certificate file should be named `aria2.crt` and the key file should be named `aria2.key`
+  * `/app/conf` The Aria2 configuration and file session folder. Make sure you have `aria2.conf` and `aria2.session` file. For the first time `aria2.session` just need to be a empty file can be appended. You can also user the templates for these two file in the `conf` folder of this project.
+  * `/app/filebrowser.db` File Browser settings database, make sure you make a empty file first on your host.
+
+## Auto SSL enabling
+
+Make sure you have add proper `A` record point to the host you running to your domain `DNS` record list, then just add `e` option to bind the `https` domain when you run the image
+
+```bash
+docker run -d --name aria2-ui -p 80:80 -p 443:443 -e DOMAIN=https://toozhao.com wahyd4/aria2-ui
+```
+## Build the image by yourself
+
+```
+docker build -t aria2-ui .
+```
+
+## Docker Hub
+
+  <https://hub.docker.com/r/wahyd4/aria2-ui/>
+
+## Usage it in Docker compose
+
+  Please refer <https://github.com/wahyd4/aria2-ariang-x-docker-compose>
+
+## FAQ
+  1. When you running the docker image with non `80` port or you have HTTPS enabled, you will meet the error says `Aria2 Status Disconnected`, then you will need to go to `AriaNg Settings` -> RPC (at the top of the page) to modify the port value in `Aria2 RPC Address` field. Due to AriaNg store all configurations in local browser, so you need to do this per browser.
+  2. If there is no speed at all when you downloading a BitTorrent file, please try to use a popular torrent file first to help the application to cache `DHT` file. Then the speed should get fast and fast, as well as downloading other links.
+  3. If you see any errors related to `setcap` which probably means the Linux you are running doesn't support running this application with `non-root` user. So please specify the `PUID` and `PGID` to `0` explicitly to use `root` user to run it.

SecureCaddyfile

@@ -0,0 +1,28 @@
+{$DOMAIN} {
+  proxy / file-manager {
+      transparent
+  }
+
+  proxy /jsonrpc localhost:6800 {
+    transparent
+    websocket
+  }
+
+  gzip
+  log stdout
+  errors stdout
+}
+
+{$DOMAIN}/ui {
+  redir / /ui/ 301
+}
+
+{$DOMAIN}/ui/ {
+  root /usr/local/www/aria2
+  timeouts none
+  gzip
+  log stdout
+  errors stdout
+
+  basicauth / {$ARIA2_USER} {$ARIA2_PWD}
+}

aria2c.sh

@@ -0,0 +1,17 @@
+#! /bin/bash -eu
+
+if [ "$ARIA2_SSL" = "true" ]; then
+echo "Start aria2 with secure config"
+
+/usr/bin/aria2c --conf-path="/app/conf/aria2.conf" \
+--enable-rpc --rpc-listen-all \
+--rpc-certificate=/app/conf/key/aria2.crt \
+--rpc-private-key=/app/conf/key/aria2.key \
+--rpc-secret="$RPC_SECRET" --rpc-secure \
+
+else
+
+echo "Start aria2 with standard mode"
+/usr/bin/aria2c --conf-path="/app/conf/aria2.conf" --enable-rpc --rpc-listen-all
+
+fi

arm32.Dockerfile

@@ -0,0 +1,50 @@
+FROM arm32v6/alpine:edge
+
+LABEL AUTHOR=Junv<wahyd4@gmail.com>
+
+WORKDIR /app
+
+ENV RPC_SECRET=""
+ENV ENABLE_AUTH=false
+ENV DOMAIN=0.0.0.0:80
+ENV ARIA2_USER=user
+ENV ARIA2_PWD=password
+ENV ARIA2_SSL=false
+ENV PUID=1000
+ENV PGID=1000
+
+RUN adduser -D -u 1000 junv \
+  && apk update \
+  && apk add runit shadow wget bash curl openrc gnupg aria2 tar --no-cache \
+  && curl https://getcaddy.com | bash -s personal \
+  && platform=linux-armv6 \
+  && wget -N https://bin.equinox.io/c/ekMN3bCZFUn/forego-stable-linux-arm.tgz \
+  && tar -zxvf forego-stable-linux-arm.tgz \
+  && rm -rf forego-stable-linux-arm.tgz \
+  && mkdir -p /usr/local/www \
+  && mkdir -p /usr/local/www/aria2
+
+ADD aria2c.sh caddy.sh Procfile init.sh start.sh /app/
+ADD conf /app/conf
+ADD Caddyfile SecureCaddyfile /usr/local/caddy/
+
+# AriaNg
+
+RUN mkdir /usr/local/www/aria2/Download \
+  && cd /usr/local/www/aria2 \
+  && chmod +rw /app/conf/aria2.session \
+  && version=1.1.1 \
+  && wget -N --no-check-certificate https://github.com/mayswind/AriaNg/releases/download/${version}/AriaNg-${version}.zip \
+  && unzip AriaNg-${version}.zip \
+  && rm -rf AriaNg-${version}.zip \
+  && chmod -R 755 /usr/local/www/aria2 \
+  && sed -i 's/6800/80/g' /usr/local/www/aria2/js/aria-ng*.js
+
+#The folder to store ssl keys
+VOLUME /app/conf/key
+# User downloaded files
+VOLUME /data
+
+EXPOSE 80 443
+
+CMD ["./start.sh"]

caddy.sh

@@ -0,0 +1,12 @@
+#! /bin/bash -eu
+
+echo "Run aria2c and ariaNG"
+if [ "$ENABLE_AUTH" = "true" ]; then
+  echo "Using Basic Auth config file "
+  export CADDY_FILE=/usr/local/caddy/SecureCaddyfile
+else
+  echo "Using caddy without Basic Auth"
+  export CADDY_FILE=/usr/local/caddy/Caddyfile
+fi
+
+/usr/local/bin/caddy -quic --conf ${CADDY_FILE}

caddy/Caddyfile

@@ -1,16 +0,0 @@
-{$DOMAIN} {
-    proxy / file-manager:80 {
-        transparent
-    }
-    gzip
-    log stdout
-    errors stdout
-}
-
-{$DOMAIN}/aria2 {
-  root /usr/local/www/aria2
-  timeouts none
-  gzip
-  log stdout
-  errors stdout
-}

caddy/Dockerfile

@@ -1,40 +0,0 @@
-FROM abiosoft/caddy
-MAINTAINER Junv<wahyd4@gmail.com>
-
-WORKDIR /root
-
-ENV RPC_SECRET=Hello
-ENV ENABLE_AUTH=false
-ENV DOMAIN=localhost:80
-ENV ARIA2_USER=user
-ENV ARIA2_PWD=password
-
-# For build image in local quickly
-RUN sed -i 's/dl-cdn.alpinelinux.org/mirrors.ustc.edu.cn/g' /etc/apk/repositories
-
-RUN apk update && apk add wget bash curl openrc screen aria2 tar --no-cache
-
-ADD conf /root/conf
-
-COPY Caddyfile /usr/local/caddy/Caddyfile
-COPY SecureCaddyfile /usr/local/caddy/SecureCaddyfile
-
-RUN mkdir -p /usr/local/www && mkdir -p /usr/local/www/aria2
-
-#AriaNg
-RUN mkdir /usr/local/www/aria2/Download && cd /usr/local/www/aria2 \
- && wget -N --no-check-certificate https://github.com/mayswind/AriaNg/releases/download/0.2.0/aria-ng-0.2.0.zip && unzip aria-ng-0.2.0.zip && rm -rf aria-ng-0.2.0.zip \
- && chmod -R 755 /usr/local/www/aria2 \
- && chmod +x /root/conf/aria2c.sh
-
-#The folder to store ssl keys
-VOLUME /root/conf/key
-
-EXPOSE 6800 80 443
-
-
-
-ENTRYPOINT ["/bin/sh", "/root/conf/aria2c.sh"]
-# CMD ["/bin/sh", "/root/aria2c.sh" ]
-
-

caddy/SecureCaddyfile

@@ -1,21 +0,0 @@
-{$DOMAIN} {
-    proxy / file-manager:80 {
-        transparent
-    }
-    gzip
-    log stdout
-    errors stdout
-
-    basicauth / {$ARIA2_USER} {$ARIA2_PWD}
-}
-
-{$DOMAIN}/aria2 {
-  root /usr/local/www/aria2
-  timeouts none
-  gzip
-  log stdout
-  errors stdout
-
-  basicauth / {$ARIA2_USER} {$ARIA2_PWD}
-
-}

caddy/conf/aria2.conf

@@ -1,51 +0,0 @@
-#用户名
-#rpc-user=user
-#密码
-#rpc-passwd=passwd
-#上面的认证方式不建议使用,建议使用下面的token方式
-#设置加密的密钥
-#rpc-secret=token
-#允许rpc
-enable-rpc=true
-#允许所有来源, web界面跨域权限需要
-rpc-allow-origin-all=true
-#允许外部访问，false的话只监听本地端口
-rpc-listen-all=true
-#RPC端口, 仅当默认端口被占用时修改
-#rpc-listen-port=6800
-#最大同时下载数(任务数), 路由建议值: 3
-max-concurrent-downloads=5
-#断点续传
-continue=true
-#同服务器连接数
-max-connection-per-server=5
-#最小文件分片大小, 下载线程数上限取决于能分出多少片, 对于小文件重要
-min-split-size=10M
-#单文件最大线程数, 路由建议值: 5
-split=10
-#下载速度限制
-max-overall-download-limit=0
-#单文件速度限制
-max-download-limit=0
-#上传速度限制
-max-overall-upload-limit=0
-#单文件速度限制
-max-upload-limit=0
-#断开速度过慢的连接
-#lowest-speed-limit=0
-#验证用，需要1.16.1之后的release版本
-#referer=*
-#文件保存路径, 默认为当前启动位置
-# dir=/user-files/superuser/
-dir=/var/www
-#文件缓存, 使用内置的文件缓存, 如果你不相信Linux内核文件缓存和磁盘内置缓存时使用, 需要1.16及以上版本
-#disk-cache=0
-#另一种Linux文件缓存方式, 使用前确保您使用的内核支持此选项, 需要1.15及以上版本(?)
-#enable-mmap=true
-#文件预分配, 能有效降低文件碎片, 提高磁盘性能. 缺点是预分配时间较长
-#所需时间 none < falloc ? trunc « prealloc, falloc和trunc需要文件系统和内核支持
-file-allocation=prealloc
-
-# General Options
-log=var/log/aria2.log
-log-level=info

caddy/conf/aria2c.sh

@@ -1,24 +0,0 @@
-#!/bin/sh
-echo "Run aria2c and ariaNG"
-echo $ENABLE_AUTH
-if [ "$ENABLE_AUTH" = "true" ]; then
-  echo "using basic auth config file "
-  CADDY_FILE=/usr/local/caddy/SecureCaddyfile
-else
-  CADDY_FILE=/usr/local/caddy/Caddyfile
-fi
-
-if [ "$SSL" = "true" ]; then
-echo "Start aria2 with secure config"
-
-/usr/bin/aria2c --conf-path="/root/conf/aria2.conf" -D --enable-rpc --rpc-listen-all --rpc-certificate=/root/conf/key/aria2.crt --rpc-private-key=/root/conf/key/aria2.key --rpc-secret="$RPC_SECRET" --rpc-secure \
-&& caddy -quic --conf ${CADDY_FILE}
-
-else
-echo "Start aria2 with standard mode"
-/usr/bin/aria2c --conf-path="/root/conf/aria2.conf" -D --enable-rpc --rpc-listen-all \
-&& caddy -quic --conf ${CADDY_FILE}
-
-fi
-
-

conf/aria2.conf

@@ -35,8 +35,9 @@ max-upload-limit=0
 #lowest-speed-limit=0
 #验证用，需要1.16.1之后的release版本
 #referer=*
-#文件保存路径, 默认为当前启动位置
-dir=/user-files/superuser/
+
+# File downloading folder
+dir=/data
 #文件缓存, 使用内置的文件缓存, 如果你不相信Linux内核文件缓存和磁盘内置缓存时使用, 需要1.16及以上版本
 #disk-cache=0
 #另一种Linux文件缓存方式, 使用前确保您使用的内核支持此选项, 需要1.15及以上版本(?)
@@ -45,6 +46,22 @@ dir=/user-files/superuser/
 #所需时间 none < falloc ? trunc « prealloc, falloc和trunc需要文件系统和内核支持
 file-allocation=prealloc
 
+# disable IPV6 by default
+disable-ipv6=true
+
 # General Options
-# log=var/log/aria2.log
-# log-level=info
+log=/var/log/aria2.log
+#You can set either debug, info, notice, warn or error.
+log-level=notice
+
+
+## 进度保存相关 ##
+# 从会话文件中读取下载任务
+input-file=/app/conf/aria2.session
+# 在Aria2退出时保存`错误/未完成`的下载任务到会话文件
+save-session=/app/conf/aria2.session
+# 定时保存会话, 0为退出时才保存, 需1.16.1以上版本, 默认:0
+save-session-interval=10
+
+# BT trackers from https://raw.githubusercontent.com/ngosang/trackerslist/master/trackers_best_ip.txt
+bt-tracker=udp://62.138.0.158:6969/announce,udp://188.241.58.209:6969/announce,udp://188.241.58.209:6969/announce,udp://185.225.17.100:1337/announce,udp://62.210.79.110:1337/announce,udp://151.80.120.114:2710/announce,udp://151.80.120.112:2710/announce,udp://208.83.20.20:6969/announce,udp://176.113.68.67:8080/announce,udp://184.105.151.164:6969/announce,udp://176.113.68.66:6961/announce,http://176.113.71.19:6961/announce,udp://51.15.40.114:80/announce,udp://89.234.156.205:451/announce,udp://5.206.58.23:6969/announce,udp://176.31.106.35:80/announce,udp://188.246.227.212:80/announce,udp://5.2.79.219:1337/announce,udp://5.2.79.22:6969/announce,http://95.107.48.115:80/announce

init.sh

@@ -0,0 +1,19 @@
+#! /bin/bash -eu
+
+echo "**** update uid and gid to ${PUID}:${PGID} ****"
+groupmod -o -g "$PGID" junv
+usermod -o -u "$PUID" junv
+
+chown -R junv:junv \
+         /app \
+         /usr/local \
+         /var/log \
+         /data
+
+chmod +x /app/caddy.sh \
+         /app/aria2c.sh
+
+echo "**** give caddy permissions to use low ports ****"
+setcap cap_net_bind_service=+ep /usr/local/bin/caddy
+
+"${@-sh}"

nginx/Dockerfile

@@ -1,29 +0,0 @@
-FROM nginx:alpine
-MAINTAINER junv<wahyd4@gmail.com>
-
-# For build image in local quickly
-RUN sed -i 's/dl-cdn.alpinelinux.org/mirrors.ustc.edu.cn/g' /etc/apk/repositories
-
-RUN apk update && apk add wget bash curl openrc screen aria2 tar --no-cache
-
-COPY aria2.conf /root
-COPY aria2c.sh /root
-
-COPY nginx.conf /etc/nginx/nginx.conf
-COPY conf.d/ /etc/nginx/conf.d/
-
-RUN mkdir -p /usr/local/www && mkdir -p /usr/local/www/aria2
-
-#AriaNg
-RUN mkdir /usr/local/www/aria2/Download && cd /usr/local/www/aria2 \
- && wget -N --no-check-certificate https://github.com/mayswind/AriaNg/releases/download/0.2.0/aria-ng-0.2.0.zip && unzip aria-ng-0.2.0.zip && rm -rf aria-ng-0.2.0.zip \
- && chmod -R 755 /usr/local/www/aria2 \
- && chmod +x /root/aria2c.sh
-
- # forward request and error logs to docker log collector
-RUN ln -sf /dev/stdout /var/log/nginx/access.log && ln -sf /dev/stderr /var/log/nginx/error.log
-
-EXPOSE 6800 80
-
-CMD ["sh", "/root/aria2c.sh" ]
-

nginx/aria2c.sh

@@ -1,4 +0,0 @@
-#!/bin/sh
-echo "Run aria2c and ariaNG"
-/usr/bin/aria2c --conf-path="/root/aria2.conf" -D --enable-rpc --rpc-listen-all \
-&& nginx -g 'daemon off;'

nginx/conf.d/default.conf

@@ -1,32 +0,0 @@
-server{
-    # server_name localhost;
-    listen 80;
-    client_max_body_size 10240M;
-
-
-    location  / {
-        proxy_pass http://file-manager-server;
-        proxy_set_header Host $http_host;
-        client_max_body_size 10240M;
-    }
-
-   location /aria2 {
-      # try_files $uri $uri/ /index.html;
-        root /usr/local/www/;
-        index index.html index.htm;
-        proxy_set_header Host $http_host;
-    }
-
-    # location ~* \.(?:jpg|jpeg|gif|png|ico|cur|gz|svg|svgz|mp4|ogg|ogv|webm|htc|css|js|woff2)$ {
-    #   expires 24h;
-    #   access_log off;
-    #   add_header Cache-Control "public";
-    # }
-
-
-}
-
-
-upstream file-manager-server {
-  server file-manager;
-}

nginx/nginx.conf

@@ -1,30 +0,0 @@
-user  nginx;
-worker_processes  1;
-
-error_log  /var/log/nginx/error.log warn;
-pid        /var/run/nginx.pid;
-
-
-events {
-    worker_connections  1024;
-}
-
-http {
-    include       /etc/nginx/mime.types;
-    default_type  application/octet-stream;
-
-    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
-                      '$status $body_bytes_sent "$http_referer" '
-                      '"$http_user_agent" "$http_x_forwarded_for"';
-
-    access_log  /var/log/nginx/access.log  main;
-
-    sendfile        on;
-    #tcp_nopush     on;
-
-    keepalive_timeout  65;
-
-    #gzip  on;
-    server_names_hash_bucket_size 128;
-    include /etc/nginx/conf.d/*.conf;
-}

start.sh

@@ -0,0 +1,6 @@
+#!/bin/bash -eu
+if [ "$PGID" != "0" ]; then
+  $(dirname $0)/init.sh chpst -u junv ./forego start
+else
+  ./forego start
+fi