feat: initial

Dockerfile

@@ -0,0 +1,102 @@
+FROM php:8.1-apache
+
+RUN apt-get update && apt-get install -y \
+  libfreetype6-dev \
+  libjpeg62-turbo-dev \
+  libpng-dev \
+  libzip-dev \
+  unzip \
+  git \
+  libmagickwand-dev \
+  wget \
+  python3 \
+  python3-venv \
+  python3-pip \
+  build-essential \
+  libssl-dev \
+  libffi-dev \
+  python3-dev \
+  cargo \
+  pkg-config \
+  && docker-php-ext-configure gd --with-freetype --with-jpeg \
+  && docker-php-ext-install -j$(nproc) gd pdo pdo_mysql zip exif fileinfo bcmath \
+  && apt-get clean \
+  && rm -rf /var/lib/apt/lists/*
+
+RUN pecl install imagick && \
+  docker-php-ext-enable imagick
+
+RUN a2enmod rewrite mime
+
+WORKDIR /var/www/html
+
+RUN curl -L https://github.com/lsky-org/lsky-pro/releases/download/2.1/lsky-pro-2.1.zip -o lsky-pro.zip \
+  && unzip lsky-pro.zip \
+  && rm lsky-pro.zip \
+  && chmod -R 777 /var/www/html/storage \
+  && chmod -R 777 /var/www/html/bootstrap/cache
+
+RUN mkdir -p /var/www/html/storage/app/public/images \
+  && chmod -R 777 /var/www/html/storage \
+  && chown -R www-data:www-data /var/www/html/storage
+
+RUN echo 'ServerName 127.0.0.1' >> /etc/apache2/apache2.conf
+
+RUN echo '<VirtualHost *:7860>\n\
+  DocumentRoot /var/www/html/public\n\
+  ErrorLog ${APACHE_LOG_DIR}/error.log\n\
+  CustomLog ${APACHE_LOG_DIR}/access.log combined\n\
+  <Directory /var/www/html/public>\n\
+  Options Indexes FollowSymLinks\n\
+  AllowOverride All\n\
+  Require all granted\n\
+  </Directory>\n\
+  <Directory /var/www/html>\n\
+  Options Indexes FollowSymLinks\n\
+  AllowOverride All\n\
+  Require all granted\n\
+  </Directory>\n\
+  </VirtualHost>' > /etc/apache2/sites-available/000-default.conf
+
+RUN echo '<IfModule mod_mime.c>\n\
+  AddType image/jpeg .jpg .jpeg\n\
+  AddType image/png .png\n\
+  AddType image/gif .gif\n\
+  </IfModule>' >> /etc/apache2/apache2.conf
+
+RUN sed -i 's/80/7860/g' /etc/apache2/ports.conf
+
+RUN { \
+  echo 'open_basedir = /var/www/html:/tmp:/usr/local/lib/php'; \
+  echo 'session.save_path = "/var/lib/php/sessions"'; \
+  echo 'session.gc_maxlifetime = 14400'; \
+  echo 'session.cookie_lifetime = 14400'; \
+  echo 'display_errors = On'; \
+  echo 'log_errors = On'; \
+  echo 'error_log = /var/log/php_errors.log'; \
+  echo 'memory_limit = 256M'; \
+  echo 'max_execution_time = 300'; \
+  echo 'upload_max_filesize = 100M'; \
+  echo 'post_max_size = 100M'; \
+  } > /usr/local/etc/php/conf.d/custom.ini
+
+RUN mkdir -p /var/lib/php/sessions \
+  && chmod 777 /var/lib/php/sessions \
+  && chown -R www-data:www-data /var/lib/php/sessions
+
+ENV VIRTUAL_ENV=/opt/venv
+RUN python3 -m venv $VIRTUAL_ENV
+ENV PATH="$VIRTUAL_ENV/bin:$PATH"
+
+RUN pip install --upgrade pip && \
+  pip install huggingface_hub cryptography
+
+ENV APACHE_DOCUMENT_ROOT /var/www/html/public
+ENV APACHE_LOG_DIR /var/log/apache2
+
+COPY sync_data.sh /
+RUN chmod +x /sync_data.sh
+
+EXPOSE 7860
+
+CMD ["/sync_data.sh"]

sync_data.sh

@@ -0,0 +1,200 @@
+#!/bin/bash
+
+# 检查环境变量
+if [[ -z "$HF_TOKEN" ]] || [[ -z "$DATASET_ID" ]]; then
+    echo "Starting without backup functionality - missing HF_TOKEN or DATASET_ID"
+    exec apache2-foreground
+    exit 0
+fi
+
+# 设置解密密钥 (非常长的随机字符串以增强安全性)
+ENCRYPTION_KEY=${ENCRYPTION_KEY:-"a1b2c3d4e5f6g7h8i9j0k1l2m3n4o5p6q7r8s9t0u1v2w3x4y5z6A7B8C9D0E1F2G3H4I5J6K7L8M9N0O1P2Q3R4S5T6U7V8W9X0Y1Z2"}
+
+# 激活虚拟环境
+source /opt/venv/bin/activate
+
+# 上传备份
+upload_backup() {
+    file_path="$1"
+    file_name="$2"
+    token="$HF_TOKEN"
+    repo_id="$DATASET_ID"
+    encryption_key="$ENCRYPTION_KEY"
+
+    python3 -c "
+from huggingface_hub import HfApi
+import sys
+import os
+import base64
+from cryptography.fernet import Fernet
+from cryptography.hazmat.primitives import hashes
+from cryptography.hazmat.primitives.kdf.pbkdf2 import PBKDF2HMAC
+import io
+def generate_key(password, salt=b'lsky_pro_salt'):
+    kdf = PBKDF2HMAC(
+        algorithm=hashes.SHA256(),
+        length=32,
+        salt=salt,
+        iterations=100000,
+    )
+    key = base64.urlsafe_b64encode(kdf.derive(password.encode()))
+    return key
+def encrypt_file(file_path, key):
+    f = Fernet(key)
+    with open(file_path, 'rb') as file:
+        file_data = file.read()
+    encrypted_data = f.encrypt(file_data)
+    encrypted_file_path = file_path + '.enc'
+    with open(encrypted_file_path, 'wb') as file:
+        file.write(encrypted_data)
+    return encrypted_file_path
+def manage_backups(api, repo_id, max_files=10):
+    files = api.list_repo_files(repo_id=repo_id, repo_type='dataset')
+    backup_files = [f for f in files if f.startswith('lsky_backup_') and f.endswith('.tar.gz.enc')]
+    backup_files.sort()
+    
+    if len(backup_files) >= max_files:
+        files_to_delete = backup_files[:(len(backup_files) - max_files + 1)]
+        for file_to_delete in files_to_delete:
+            try:
+                api.delete_file(path_in_repo=file_to_delete, repo_id=repo_id, repo_type='dataset')
+                print(f'Deleted old backup: {file_to_delete}')
+            except Exception as e:
+                print(f'Error deleting {file_to_delete}: {str(e)}')
+api = HfApi(token='$token')
+try:
+    # 生成加密密钥
+    key = generate_key('$encryption_key')
+    
+    # 加密文件
+    encrypted_file_path = encrypt_file('$file_path', key)
+    
+    # 上传加密文件
+    api.upload_file(
+        path_or_fileobj=encrypted_file_path,
+        path_in_repo='$file_name.enc',
+        repo_id='$repo_id',
+        repo_type='dataset'
+    )
+    print(f'Successfully uploaded encrypted $file_name')
+    
+    # 删除临时加密文件
+    os.remove(encrypted_file_path)
+    
+    # 管理备份文件数量
+    manage_backups(api, '$repo_id')
+except Exception as e:
+    print(f'Error uploading file: {str(e)}')
+"
+}
+
+# 下载最新备份
+download_latest_backup() {
+    token="$HF_TOKEN"
+    repo_id="$DATASET_ID"
+    encryption_key="$ENCRYPTION_KEY"
+
+    python3 -c "
+from huggingface_hub import HfApi
+import sys
+import os
+import tarfile
+import tempfile
+import base64
+from cryptography.fernet import Fernet
+from cryptography.hazmat.primitives import hashes
+from cryptography.hazmat.primitives.kdf.pbkdf2 import PBKDF2HMAC
+def generate_key(password, salt=b'lsky_pro_salt'):
+    kdf = PBKDF2HMAC(
+        algorithm=hashes.SHA256(),
+        length=32,
+        salt=salt,
+        iterations=100000,
+    )
+    key = base64.urlsafe_b64encode(kdf.derive(password.encode()))
+    return key
+def decrypt_file(encrypted_file_path, key):
+    f = Fernet(key)
+    with open(encrypted_file_path, 'rb') as file:
+        encrypted_data = file.read()
+    decrypted_data = f.decrypt(encrypted_data)
+    decrypted_file_path = encrypted_file_path[:-4]  # 移除 .enc 后缀
+    with open(decrypted_file_path, 'wb') as file:
+        file.write(decrypted_data)
+    return decrypted_file_path
+api = HfApi(token='$token')
+try:
+    files = api.list_repo_files(repo_id='$repo_id', repo_type='dataset')
+    backup_files = [f for f in files if f.startswith('lsky_backup_') and f.endswith('.tar.gz.enc')]
+    
+    if not backup_files:
+        print('No backup files found')
+        sys.exit()
+        
+    latest_backup = sorted(backup_files)[-1]
+    
+    with tempfile.TemporaryDirectory() as temp_dir:
+        # 下载加密的备份文件
+        encrypted_filepath = api.hf_hub_download(
+            repo_id='$repo_id',
+            filename=latest_backup,
+            repo_type='dataset',
+            local_dir=temp_dir
+        )
+        
+        if encrypted_filepath and os.path.exists(encrypted_filepath):
+            # 生成解密密钥
+            key = generate_key('$encryption_key')
+            
+            # 解密文件
+            decrypted_filepath = decrypt_file(encrypted_filepath, key)
+            
+            # 解压缩到目标目录
+            with tarfile.open(decrypted_filepath, 'r:gz') as tar:
+                tar.extractall('/var/www/html')
+            
+            print(f'Successfully restored backup from {latest_backup}')
+            
+            # 清理临时文件
+            os.remove(decrypted_filepath)
+        
+except Exception as e:
+    print(f'Error downloading backup: {str(e)}')
+"
+}
+
+# 首次启动时下载最新备份
+echo "Checking for latest backup from HuggingFace..."
+download_latest_backup
+
+# 同步函数
+sync_data() {
+    while true; do
+        echo "Starting sync process at $(date)"
+        
+        if [ -d /var/www/html ]; then
+            timestamp=$(date +%Y%m%d_%H%M%S)
+            backup_file="lsky_backup_${timestamp}.tar.gz"
+            
+            # 压缩数据目录
+            tar -czf "/tmp/${backup_file}" -C /var/www/html .
+            
+            echo "Uploading backup to HuggingFace..."
+            upload_backup "/tmp/${backup_file}" "${backup_file}"
+            
+            rm -f "/tmp/${backup_file}"
+        else
+            echo "Application directory does not exist yet, waiting for next sync..."
+        fi
+        
+        SYNC_INTERVAL=${SYNC_INTERVAL:-7200}
+        echo "Next sync in ${SYNC_INTERVAL} seconds..."
+        sleep $SYNC_INTERVAL
+    done
+}
+
+# 后台启动同步进程
+sync_data &
+
+# 启动 Apache
+exec apache2-foreground