Dht issue (#211)

* Move .aria2/dht.dat file to /app folder to solve the issue failed to save dht.dat

* Add env CADDY_LOG_LEVEL to allow user override log levels

.github/workflows/dockerimage.yml

@@ -13,6 +13,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@master
+    -
+      name: Update APP VERSION
+      if: contains(github.ref, '/tags/v')
+      run: |
+        VERSION=${GITHUB_REF#refs/tags/v}
+        echo $VERSION > APP_VERSION
     -
       name: Prepare
       id: prepare
@@ -72,13 +78,25 @@ jobs:
       if: contains(github.ref, '/heads/master') || contains(github.ref, '/tags/v')
       run: |
         docker buildx imagetools inspect ${{ steps.prepare.outputs.docker_image }}:${{ steps.prepare.outputs.version }}
-
-    - name: Update tag
+    -
+      name: Commit changes
+      if: contains(github.ref, '/tags/v')
+      uses: EndBug/add-and-commit@v7
+      with:
+        author_name: junv-repo-bot
+        author_email: me@toozhao.com
+        message: 'Update version'
+        add: 'APP_VERSION'
+        push: true
+        branch: master
+    -
+      name: Update tag
       if: contains(github.ref, '/tags/v')
       env:
         API_KEY: ${{ secrets.BadgeAPIKey }}
       run: |
-        curl -XPUT -D- 'https://badges.toozhao.com/val/aria2-ui-docker' \
+        VERSION=${GITHUB_REF#refs/tags/v}
+        curl --max-time 6 -XPUT -D- 'https://badges.toozhao.com/val/aria2-ui-docker' \
         -H 'Content-Type: application/json' \
         -H 'API_KEY': ${API_KEY} \
-        -d '{"value": "${GITHUB_REF#refs/tags/v}"}'
+        -d '{"value": "'${VERSION}'"}' || true

APP_VERSION

@@ -0,0 +1 @@
+4.14.1

Caddyfile

@@ -1,9 +1,10 @@
-#{
-#  auto_https off
-#}
-
 {$DOMAIN}
 
+log {
+	level {env.CADDY_LOG_LEVEL}
+	output stderr
+}
+
 redir /ui / 301
 redir /ui/ / 301
 redir /rclone /rclone/ 301
@@ -12,19 +13,20 @@ redir /files /files/ 301
 reverse_proxy /jsonrpc 127.0.0.1:6800
 
 route /rclone/* {
-  uri strip_prefix /rclone
-  reverse_proxy 127.0.0.1:5572
+	uri strip_prefix /rclone
+	reverse_proxy 127.0.0.1:5572
 }
 
 route /files/* {
-  uri strip_prefix /files
-  reverse_proxy 127.0.0.1:8080
+	uri strip_prefix /files
+	reverse_proxy 127.0.0.1:8080
+}
+
+route /ping {
+	respond "app version: {env.APP_VERSION}"
 }
 
 root * /usr/local/www/aria2
 file_server
 
 encode gzip
-log {
-  output stderr
-}

Dockerfile

@@ -6,9 +6,7 @@ WORKDIR /app
 
 RUN git clone https://github.com/wahyd4/forego.git \
     && cd forego \
-    && git checkout 20180216151118 \
-    && go mod init \
-    && go mod vendor \
+    && git checkout fix-go-mod \
     && go mod download \
     && go build -o forego \
     && chmod +x forego
@@ -33,9 +31,12 @@ ENV CADDYPATH=/app
 ENV RCLONE_CONFIG=/app/conf/rclone.conf
 ENV XDG_DATA_HOME=/app/.caddy/data
 ENV XDG_CONFIG_HOME=/app/.caddy/config
+ENV XDG_CACHE_HOME=/app/.cache
 ENV RCLONE_CONFIG_BASE64=""
+ENV ENABLE_APP_CHECKER=true
+ENV CADDY_LOG_LEVEL=INFO
 
-ADD install.sh aria2c.sh caddy.sh Procfile init.sh start.sh rclone.sh /app/
+ADD install.sh aria2c.sh caddy.sh Procfile init.sh start.sh rclone.sh new-version-checker.sh APP_VERSION /app/
 ADD conf /app/conf
 ADD Caddyfile SecureCaddyfile HerokuCaddyfile /usr/local/caddy/
 
@@ -45,15 +46,18 @@ RUN ./install.sh
 
 RUN rm ./install.sh
 
-# folder for storing ssl keys
-VOLUME /app/conf/key
+# For config files
+VOLUME /app/conf/
 
-# file downloading folder
+# For file downloading
 VOLUME /data
 
-EXPOSE 80 443
+# For rclone cache and aria2 DHT files
+VOLUME /app/.cache
 
-HEALTHCHECK --interval=1m --timeout=3s \
-  CMD curl -f http://localhost || exit 1
+EXPOSE 80 443 6881
+
+HEALTHCHECK --interval=30s --timeout=3s \
+  CMD curl -f http://localhost/ping || exit 1
 
 CMD ["./start.sh"]

HerokuCaddyfile

@@ -1,13 +1,12 @@
 {
-  debug
-  admin off
-  auto_https off
+	admin off
+	auto_https off
 }
 
 :PORT
 
 basicauth / {
-  ARIA2_USER ARIA2_PWD_ENCRYPT
+	ARIA2_USER ARIA2_PWD_ENCRYPT
 }
 
 redir /ui / 301
@@ -18,13 +17,17 @@ redir /files /files/ 301
 reverse_proxy /jsonrpc 127.0.0.1:6800
 
 route /rclone/* {
-  uri strip_prefix /rclone
-  reverse_proxy 127.0.0.1:5572
+	uri strip_prefix /rclone
+	reverse_proxy 127.0.0.1:5572
 }
 
 route /files/* {
-  uri strip_prefix /files
-  reverse_proxy 127.0.0.1:8080
+	uri strip_prefix /files
+	reverse_proxy 127.0.0.1:8080
+}
+
+route /ping {
+	respond "app version: {env.APP_VERSION}"
 }
 
 root * /usr/local/www/aria2
@@ -32,5 +35,5 @@ file_server
 
 encode gzip
 log {
-  output stderr
+	output stderr
 }

Procfile

@@ -2,3 +2,4 @@ caddy: /app/caddy.sh
 filebrowser: /app/filebrowser -p 8080 -d /app/filebrowser.db -r /data -b /files
 aria2c: /app/aria2c.sh
 rclone: /app/rclone.sh
+newer_version_checker: /app/new-version-checker.sh

README.CN.md

@@ -6,11 +6,11 @@ Aria2 + AriaNg
 [![Docker Pulls](https://img.shields.io/docker/pulls/wahyd4/aria2-ui.svg)](https://hub.docker.com/r/wahyd4/aria2-ui/)
 [![Github Build](https://github.com/wahyd4/aria2-ariang-docker/workflows/Docker%20Image%20CI/badge.svg)](https://github.com/wahyd4/aria2-ariang-docker/actions)
 
-[![Deploy](https://www.herokucdn.com/deploy/button.svg)](https://heroku.com/deploy?template=https://github.com/wahyd4/aria2-ariang-docker/tree/master)
-
 
 [![Page Views Count](https://badges.toozhao.com/badges/01EJ791D8BB43PDS8D7PP7H0YE/green.svg)](https://badges.toozhao.com/stats/01EJ791D8BB43PDS8D7PP7H0YE "Get your own page views count badge on badges.toozhao.com")
 
+**如果你喜欢这个项目，请考虑微信打赏，让我更有动力来不断更新，谢谢！**
+
 <img src="https://raw.githubusercontent.com/wahyd4/work-in-australia/766592ac6318027d7b3c334d8c50ca80818eeff8/wepay.jpg" alt="buy me a drink" width="120"/>
 
 
@@ -27,6 +27,7 @@ Aria2 + AriaNg
 - [自动 SSL](#自动-ssl)
 - [自行构建镜像](#自行构建镜像)
 - [Docker Hub](#docker-hub)
+- [在 Kubernetes 里面运行 (我的最爱)](#在-kubernetes-里面运行-我的最爱)
 - [使用 Docker compose 来运行](#使用-docker-compose-来运行)
 - [常见问题](#常见问题)
 
@@ -44,7 +45,7 @@ File Browser
   * 自动 HTTPS （Let's Encrypt）
   * 支持绑定自定义用户ID，可以主机上的非`root`用户，也可以管理下载的文件
   * Basic Auth 用户认证
-  * 文件管理和视频播放 ([FileBrowser](https://filebrowser.xyz/)，注意默认情况下，只能访问和管理 `/data` 目录下的文件)
+  * 文件管理和视频播放 ([FileBrowser](https://filebrowser.org/)，注意默认情况下，只能访问和管理 `/data` 目录下的文件)
   * 支持ARM CPU 架构，因此可以在树莓派等设备上运行，
 
 ## 推荐使用的docker image tag
@@ -116,6 +117,8 @@ services:
   * `RPC_SECRET` Aria2 RPC 加密 token
   * `DOMAIN` 绑定的域名, 当绑定的域名为`HTTPS`时，即为启用`HTTPS`， 例： `DOMAIN=https://toozhao.com`
   * `RCLONE_CONFIG_BASE64` 通过`base64` 字符串的形式配置rclone.conf。主要给在Heroku平台上运行时使用，请使用命令行 `cat /app/conf/rclone.conf | base64` 或者其他任何在线base64在线工具 [比如这个](https://www.base64encode.org/)来把`rclone.conf`的内容生成`base64`字符串。在使用本环境变量的同时，请确保`ENABLE_RCLONE`设置为`true`。
+  * `ENABLE_APP_CHECKER`，默认情况下本程序会每天向远程服务器发送一次GET请求，以检查是否有新版本的镜像。该功能可以让你及时获取新功能和相关安全隐患的修复的推送提醒。你也可以选择将该环境变量设置为`false`来禁用该功能。注意该功能启用下，依然需要手动更新镜像来完成升级。
+
 
 ### 支持的 Docker volume 属性
   * `/data` 用来放置所有下载的文件的目录
@@ -144,6 +147,16 @@ docker build -t aria2-ui .
 
   <https://hub.docker.com/r/wahyd4/aria2-ui/>
 
+## 在 Kubernetes 里面运行 (我的最爱)
+
+首先，在Kubernetes 里面运行本Docker 镜像比在Docker 里面更加复杂，需要更多的相关知识，但是也更加有意思，给你带来更多的折腾之后的满足。
+你可以使用`minikube`，Docker 桌面应用自带Kubernetes 或者 使用`kubeadm`来安装Kubernetes，然后你需要根据自己的需要修改 [k8s-manifest.yaml](k8s-manifest.yaml) 来满足你的需要的需求。比如：
+
+* NFS PV provider(使用NAS 作为容器存储)
+* Ingress 访问, Oauth 登录灯其他访问控制
+* VPN (让数据访问更加安全)
+* 其他的一些 Sidecars
+
 ## 使用 Docker compose 来运行
 
   请参考 <https://github.com/wahyd4/aria2-ariang-x-docker-compose>

README.md

@@ -6,13 +6,11 @@ English | [简体中文](https://github.com/wahyd4/aria2-ariang-docker/blob/mast
 [![Docker Pulls](https://img.shields.io/docker/pulls/wahyd4/aria2-ui.svg)](https://hub.docker.com/r/wahyd4/aria2-ui/)
 [![Github Build](https://github.com/wahyd4/aria2-ariang-docker/workflows/Docker%20Image%20CI/badge.svg)](https://github.com/wahyd4/aria2-ariang-docker/actions)
 
-[![Deploy](https://www.herokucdn.com/deploy/button.svg)](https://heroku.com/deploy?template=https://github.com/wahyd4/aria2-ariang-docker/tree/master)
-
 [![Page Views Count](https://badges.toozhao.com/svg/aria2-ariang-docker)](https://badges.toozhao.com/stats/aria2-ariang-docker "Page Views Count")
 
 
 
-**If you like this project, please consider support me / 如果喜欢本项目，请考虑打赏，谢谢！**
+**If you like this project, please consider [sponsoring me](https://github.com/sponsors/wahyd4) / 如果喜欢本项目，请考虑打赏，谢谢！**
 
 <img src="https://raw.githubusercontent.com/wahyd4/work-in-australia/766592ac6318027d7b3c334d8c50ca80818eeff8/wepay.jpg" alt="buy me a drink" width="120"/>
 
@@ -27,7 +25,8 @@ English | [简体中文](https://github.com/wahyd4/aria2-ariang-docker/blob/mast
 - [Auto HTTPS enabling](#auto-https-enabling)
 - [Build the image by yourself](#build-the-image-by-yourself)
 - [Docker Hub](#docker-hub)
-- [Usage it in Docker compose](#usage-it-in-docker-compose)
+- [Running it on Kubernetes (My favorite)](#running-it-on-kubernetes-my-favorite)
+- [Running it with Docker compose](#running-it-with-docker-compose)
 - [FAQ](#faq)
 
 One Docker image for file downloading, managing, sharing, as well as video playing and evening cloud storage synchronization.
@@ -47,7 +46,7 @@ File Browser
   * [Aria2 (SSL support)](https://aria2.github.io)
   * [AriaNg](https://github.com/mayswind/AriaNg)
   * [Rclone](https://rclone.org/)
-  * [File Browser](https://filebrowser.xyz/): Files mangement and videos playing
+  * [File Browser](https://filebrowser.org/): Files mangement and videos playing
   * Auto HTTPS （Let's Encrypt）
   * Bind non root user into container, so non root user can also manage downloaded files.
   * Basic Auth
@@ -127,6 +126,7 @@ Then simply run `docker-compose up -d`, that's it!
   * `RPC_SECRET` The Aria2 RPC secret token
   * `DOMAIN` The domain you'd like to bind, when domain is a `https://` thing, then auto TLS feature will be enabled
   * `RCLONE_CONFIG_BASE64` Inject and config Rclone through `base64` string, which is the only way to use Rclone on Heroku. Please use `cat /app/conf/rclone.conf | base64` or any base64 online tools such as [this](https://www.base64encode.org/) to encode your `rclone.conf` as bse64 string. Note, you need to set `ENABLE_RCLONE` to true as well.
+  * `ENABLE_APP_CHECKER`, by default it's set to `true` to check if any new docker image version release on daily basis, which can help you get notification when new features released as well as some security vulnerabilities get fixed. You can set it to `false` to disable this feature. Note: you still need to manually pull the new image version and re run the docker container to complete upgrading.
 
 
 ### Supported Volumes
@@ -157,10 +157,22 @@ docker run -d --name aria2-ui -p 80:80 -p 443:443 -e DOMAIN=https://toozhao.com
 
   <https://hub.docker.com/r/wahyd4/aria2-ui/>
 
-## Usage it in Docker compose
+## Running it on Kubernetes (My favorite)
+
+First of all, I have to say running this docker image on Kubernetes is more challenging and requires more knowledges than running it in raw Docker, but which is more powerful.
+I couldn't tell you how to run it in Kubernetes step by step, but once you have a running Kubernetes cluster(You can install Kubernetes via `minikube`, `Docker desktop app`, `kubeadm` and many other tools.), then you can modify the [k8s-manifest.yaml](k8s-manifest.yaml) to satisfy all your requirements. Such as:
+
+* NFS PV provider(Use your NAS as storage)
+* Ingress access, Oauth login, more access controls via Nginx etc.
+* VPN tunnel (Secure your traffic)
+* Sidecars and so on.
+
+## Running it with Docker compose
 
   Please refer <https://github.com/wahyd4/aria2-ariang-x-docker-compose>
 
+
+
 ## FAQ
   1. When you running the docker image with non `80` port or you have HTTPS enabled, you will meet the error says `Aria2 Status Disconnected`, then you will need to set `ARIA2_EXTERNAL_PORT` and recreate your container.
   2. If there is no speed at all when you downloading a BitTorrent file, please try to use a popular torrent file first to help the application to cache `DHT` file. Then the speed should get fast and fast, as well as downloading other links.

SecureCaddyfile

@@ -1,8 +1,12 @@
-
 {$DOMAIN}
 
+log {
+	level {env.CADDY_LOG_LEVEL}
+	output stderr
+}
+
 basicauth / {
-  ARIA2_USER ARIA2_PWD_ENCRYPT
+	ARIA2_USER ARIA2_PWD_ENCRYPT
 }
 
 redir /ui / 301
@@ -13,19 +17,20 @@ redir /files /files/ 301
 reverse_proxy /jsonrpc 127.0.0.1:6800
 
 route /rclone/* {
-  uri strip_prefix /rclone
-  reverse_proxy 127.0.0.1:5572
+	uri strip_prefix /rclone
+	reverse_proxy 127.0.0.1:5572
 }
 
 route /files/* {
-  uri strip_prefix /files
-  reverse_proxy 127.0.0.1:8080
+	uri strip_prefix /files
+	reverse_proxy 127.0.0.1:8080
+}
+
+route /ping {
+	respond "app version: {env.APP_VERSION}"
 }
 
 root * /usr/local/www/aria2
 file_server
 
 encode gzip
-log {
-  output stderr
-}

conf/aria2-sample-hook.sh

@@ -0,0 +1,5 @@
+#! /bin/bash -eu
+
+# For more details about how to use this feature, see: https://aria2.github.io/manual/en/html/aria2c.html#event-hook
+
+echo "[INFO] $(date -u +'%Y-%m-%dT%H:%M:%SZ') Aria2 hook triggered with parameters: GID [$1], Files Count: [$2], Files Path: [$3]"

conf/aria2.conf

@@ -54,10 +54,10 @@ disable-ipv6=true
 # General Options
 log=/var/log/aria2.log
 #You can set either debug, info, notice, warn or error.
-log-level=notice
+log-level=warn
 
 
-## 进度保存相关 ##
+## Related to save downloading progress ##
 # 从会话文件中读取下载任务
 input-file=/app/conf/aria2.session
 # 在Aria2退出时保存`错误/未完成`的下载任务到会话文件
@@ -67,3 +67,15 @@ save-session-interval=10
 
 # BT trackers from https://trackerslist.com/best.txt updated on 2021-06-06
 bt-tracker=http://1337.abcvg.info:80/announce,http://nyaa.tracker.wf:7777/announce,http://opentracker.xyz:80/announce,http://rt.tace.ru:80/announce,http://share.camoe.cn:8080/announce,http://t.nyaatracker.com:80/announce,http://torrentsmd.com:8080/announce,http://tr.cili001.com:8070/announce,http://tracker-cdn.moeking.me:2095/announce,http://tracker.anirena.com:80/announce,http://tracker.anirena.com:80/b16a15d9a238d1f59178d3614b857290/announce,http://tracker.anonwebz.xyz:8080/announce,http://tracker.bt4g.com:2095/announce,http://tracker.files.fm:6969/announce,http://tracker.gbitt.info:80/announce,http://tracker.ipv6tracker.ru:80/announce,http://tracker.noobsubs.net:80/announce,http://tracker.shittyurl.org:80/announce,http://tracker.tfile.co:80/announce,http://tracker.tfile.me:80/announce,http://tracker.trackerfix.com:80/announce,http://vps02.net.orel.ru:80/announce,https://1337.abcvg.info:443/announce,https://tr.torland.ga:443/announce,https://tracker.coalition.space:443/announce,https://tracker.gbitt.info:443/announce,https://tracker.lilithraws.cf:443/announce,https://tracker.nanoha.org:443/announce,https://tracker.nitrix.me:443/announce,https://tracker.parrotsec.org:443/announce,https://tracker.shittyurl.org:443/announce,https://tracker.tamersunion.org:443/announce,https://w.wwwww.wtf:443/announce,udp://6rt.tace.ru:80/announce,udp://9.rarbg.com:2830/announce,udp://9.rarbg.me:2710/announce,udp://9.rarbg.to:2710/announce,udp://app.icon256.com:8000/announce,udp://bubu.mapfactor.com:6969/announce,udp://discord.heihachi.pw:6969/announce,udp://exodus.desync.com:6969/announce,udp://explodie.org:6969/announce,udp://fe.dealclub.de:6969/announce,udp://inferno.demonoid.is:3391/announce,udp://ipv6.tracker.zerobytes.xyz:16661/announce,udp://mail.realliferpg.de:6969/announce,udp://movies.zsw.ca:6969/announce,udp://mts.tvbit.co:6969/announce,udp://open.demonii.com:1337/announce,udp://open.stealth.si:80/announce,udp://opentor.org:2710/announce,udp://opentracker.i2p.rocks:6969/announce,udp://p4p.arenabg.ch:1337/announce,udp://p4p.arenabg.com:1337/announce,udp://pow7.com:80/announce,udp://retracker.hotplug.ru:2710/announce,udp://retracker.lanta-net.ru:2710/announce,udp://retracker.netbynet.ru:2710/announce,udp://retracker01-msk-virt.corbina.net:80/announce,udp://t1.leech.ie:1337/announce,udp://t2.leech.ie:1337/announce,udp://thetracker.org:80/announce,udp://torrentclub.online:54123/announce,udp://tracker-de.ololosh.space:6969/announce,udp://tracker.0x.tf:6969/announce,udp://tracker.altrosky.nl:6969/announce,udp://tracker.army:6969/announce,udp://tracker.beeimg.com:6969/announce,udp://tracker.birkenwald.de:6969/announce,udp://tracker.blacksparrowmedia.net:6969/announce,udp://tracker.breizh.pm:6969/announce,udp://tracker.ccp.ovh:6969/announce,udp://tracker.cyberia.is:6969/announce,udp://tracker.dler.com:6969/announce,udp://tracker.internetwarriors.net:1337/announce,udp://tracker.moeking.me:6969/announce,udp://tracker.nrx.me:6969/announce,udp://tracker.ololosh.space:6969/announce,udp://tracker.openbittorrent.com:6969/announce,udp://tracker.opentrackr.org:1337/announce,udp://tracker.shkinev.me:6969/announce,udp://tracker.theoks.net:6969/announce,udp://tracker.tiny-vps.com:6969/announce,udp://tracker.torrent.eu.org:451/announce,udp://tracker.uw0.xyz:6969/announce,udp://tracker.zerobytes.xyz:1337/announce,udp://tracker0.ufibox.com:6969/announce,udp://tracker1.bt.moack.co.kr:80/announce,udp://tracker1.itzmx.com:8080/announce,udp://tracker2.dler.com:80/announce,udp://tracker2.dler.org:80/announce,udp://tracker2.itzmx.com:6961/announce,udp://tracker3.itzmx.com:6961/announce,udp://tracker4.itzmx.com:2710/announce,udp://u.wwwww.wtf:1/announce,udp://valakas.rollo.dnsabr.com:2710/announce,udp://vibe.community:6969/announce,udp://wassermann.online:6969/announce,udp://www.torrent.eu.org:451/announce
+
+# The script to be run when download completes
+on-download-complete=/app/conf/aria2-sample-hook.sh
+
+# The script to be run when download fails
+on-download-error=/app/conf/aria2-sample-hook.sh
+
+## DHT
+dht-entry-point=dht.transmissionbt.com:6881
+dht-entry-point=dht.vuze.com:6881
+dht-entry-point=dht.libtorrent.org:25401
+dht-listen-port=6881

init.sh

@@ -6,6 +6,7 @@ usermod -o -u "$PUID" junv
 
 mkdir -p /app/.caddy
 mkdir -p /app/.cache
+mkdir -p /app/.cache/aria2
 
 chown -R junv:junv \
          /app \

install.sh

@@ -2,10 +2,10 @@
 
 echo "[INFO] Set variables for $(arch)"
 
-caddy_version=2.4.5
-filebrowser_version=v2.17.2
-rclone_version=v1.56.2
-ariang_version=1.2.2
+caddy_version=2.4.6
+filebrowser_version=v2.21.1
+rclone_version=v1.58.0
+ariang_version=1.2.3
 
 case "$(arch)" in
 

k8s-manifest.yaml

@@ -0,0 +1,161 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: files
+spec:
+  revisionHistoryLimit: 2
+  selector:
+    matchLabels:
+      app: files
+  replicas: 1
+  template:
+    metadata:
+      labels:
+        app: files
+    spec:
+      volumes:
+        # - name: config
+        #   persistentVolumeClaim:
+        #     claimName: configs-pv
+        - name: downloads
+          persistentVolumeClaim:
+            claimName: downloads-pv
+      containers:
+        - name: files
+          image: wahyd4/aria2-ui:latest
+          imagePullPolicy: Always
+          ports:
+            - containerPort: 80
+              name: files-port
+              protocol: TCP
+          env:
+           ## Update this to the final port you would use in the browser
+            - name: ARIA2_EXTERNAL_PORT
+              value: "443"
+            - name: PUID
+              value: "1000"
+            - name: PGID
+              value: "1000"
+          volumeMounts:
+            # - name: config
+            #   subPath: aria
+            #   mountPath: /app/conf
+            # - name: config
+            #   subPath: files/filebrowser.db
+            #   mountPath: /app/filebrowser.db
+            - name: downloads
+              mountPath: /data
+          resources:
+            requests:
+              cpu: 150m
+              memory: 256Mi
+            limits:
+              cpu: 400m
+              memory: 1024Mi
+        # An example of encrypting the traffic with some vpn providerm, please update the configurations accordingly
+        # - name: openvpn
+        #   image: qmcgaw/gluetun:latest
+        #   securityContext:
+        #     runAsUser: 0
+        #     privileged: true
+        #     capabilities:
+        #       add: ["NET_ADMIN"]
+        #   imagePullPolicy: Always
+        #   env:
+        #     - name: OPENVPN_USER
+        #       value: xxxx
+        #     - name: OPENVPN_PASSWORD
+        #       valueFrom:
+        #         secretKeyRef:
+        #           name: openvpn-password
+        #           key: password
+        #     - name: VPNSP
+        #       value: "private internet access"
+        #     - name: PIA_ENCRYPTION
+        #       value: normal
+        #     - name: REGION
+        #       value: "AU Sydney"
+        #     - name: TZ
+        #       value: Australia/Melbourne
+        #   resources:
+        #     requests:
+        #       cpu: 100m
+        #       memory: 126Mi
+        #     limits:
+        #       cpu: 100m
+        #       memory: 126Mi
+---
+
+apiVersion: v1
+kind: Service
+metadata:
+  name: files
+  labels:
+    app: files
+spec:
+  type: ClusterIP
+  ports:
+    - port: 80
+      targetPort: files-port
+      protocol: TCP
+      name: web
+  selector:
+    app: files
+
+---
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: downloads-pv
+  labels:
+    type: local
+spec:
+  storageClassName: manual
+  capacity:
+    storage: 100Gi
+  accessModes:
+    - ReadWriteMany
+  hostPath:
+    path: "/mnt/data"
+
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: "downloads-pv"
+spec:
+  storageClassName: "manual"
+  accessModes:
+    - ReadWriteMany
+  resources:
+    requests:
+      storage: 100Gi
+
+
+# ---
+# ingress example
+# apiVersion: networking.k8s.io/v1
+# kind: Ingress
+# metadata:
+#   name: files-ingress
+#   annotations:
+#     kubernetes.io/ingress.class: "nginx"
+#     kubernetes.io/tls-acme: "true"
+#     cert-manager.io/cluster-issuer: "letsencrypt-prod"
+#     nginx.ingress.kubernetes.io/proxy-body-size: 10240m
+# spec:
+#   tls:
+#   - hosts:
+#     - xx.example.com
+#     secretName: files-tls
+#   rules:
+#   - host: xx.example.com
+#     http:
+#       paths:
+#       - path: /
+#         pathType: Prefix
+#         backend:
+#           service:
+#             name: files
+#             port:
+#               number: 80

new-version-checker.sh

@@ -0,0 +1,31 @@
+#! /bin/bash -u
+sleep 5
+
+if [ "$ENABLE_APP_CHECKER" = "false" ]; then
+  echo "[INFO] Skip checking new version"
+  # Do nothing and just sleep 10 years
+  sleep 315360000
+  exit 0
+fi
+
+set -e
+APP_VERSION=$(cat APP_VERSION)
+set +e
+while true; do
+  echo "[INFO] $(date -u +'%Y-%m-%dT%H:%M:%SZ') Checking for new version against ${APP_VERSION} ..."
+  newer_version=$(curl --max-time 6 -s "https://badges.toozhao.com/val/aria2-ui-docker?version=${APP_VERSION}&arch=$(arch)")
+  if [[ -z ${newer_version} ]]; then
+    echo "[WARN] $(date -u +'%Y-%m-%dT%H:%M:%SZ') Failed to check new version."
+    sleep 86400
+    continue
+  fi
+
+  if [[ ${newer_version} > ${APP_VERSION} ]]; then
+    echo "[INFO] $(date -u +'%Y-%m-%dT%H:%M:%SZ') Found newer Docker image version wahyd4/aria2-ui:${newer_version}, please consider to upgrade by using docker pull command to have better user experience."
+    # check new version daily
+    sleep 86400
+    continue
+  fi
+  echo "[INFO] $(date -u +'%Y-%m-%dT%H:%M:%SZ') Congrats, you are using the latest version docker image"
+  sleep 86400
+done

start.sh

@@ -1,4 +1,7 @@
 #!/bin/bash -eu
+
+export APP_VERSION=$(cat /app/APP_VERSION)
+
 if [ "$PGID" != "0" ]; then
   $(dirname $0)/init.sh chpst -u junv ./forego start
 else