SFTPGo 部署教程：独立账号、文件上传与目录权限

mkdir -p ~/services/sftpgo/data ~/services/sftpgo/home
cd ~/services/sftpgo
sudo chown -R 1000:1000 data home

services:
  sftpgo:
    image: drakkan/sftpgo:v2.7.6
    ports:
      - "127.0.0.1:8086:8080"
      - "127.0.0.1:2022:2022"
    volumes:
      - ./data:/srv/sftpgo
      - ./home:/var/lib/sftpgo
    environment:
      SFTPGO_GRACE_TIME: "32"
    stop_grace_period: 40s
    restart: unless-stopped

docker compose config --quiet
docker compose up -d
docker compose logs --tail=80 sftpgo

ssh -L 18086:127.0.0.1:8086 -L 12022:127.0.0.1:2022 user@your-server

sftp -P 12022 handoff@127.0.0.1

pwd
ls
put sample.txt
get sample.txt received.txt

#!/usr/bin/env bash
set -euo pipefail
umask 077
set -o noclobber
cd "$HOME/services/sftpgo"
test -d data
test ! -L data
test -d home
test ! -L home
test -f compose.yaml
test ! -L compose.yaml
sudo test -s home/sftpgo.db
backup_dir="$HOME/sftpgo-backups"
install -d -m 700 "$backup_dir"
stamp=$(date -u +%Y%m%dT%H%M%SZ)
archive_name="sftpgo-$stamp.tar"
archive="$backup_dir/$archive_name"
test ! -e "$archive"
test ! -e "$archive.partial"
test ! -e "$archive.sha256"
members=(data home compose.yaml)
for file in .env sftpgo.json; do
  if test -e "$file"; then
    test -f "$file"
    test ! -L "$file"
    members+=("$file")
  fi
done
docker compose config --quiet
cid=$(docker compose ps -q sftpgo)
[[ "$cid" =~ ^[0-9a-f]{64}$ ]]
test "$(docker inspect --format '{{.State.Running}}' "$cid")" = true
if ! docker compose stop sftpgo; then
  echo '停止未确认成功：检查原容器状态，先不要复制数据库。' >&2
  exit 1
fi
test "$(docker inspect --format '{{.State.Running}}' "$cid")" = false
test "$(docker inspect --format '{{.State.ExitCode}}' "$cid")" = 0
if sudo tar --numeric-owner -cpf - -- "${members[@]}" > "$archive.partial"    && test -s "$archive.partial"    && tar -tf "$archive.partial" > /dev/null; then
  mv -n -- "$archive.partial" "$archive"
  test ! -e "$archive.partial"
  (cd "$backup_dir" && sha256sum "$archive_name" > "$archive_name.sha256")
else
  echo '归档失败，保留 partial；原目录未改动，恢复原服务。' >&2
  docker compose start sftpgo
  exit 1
fi
docker compose start sftpgo
printf '归档：%s\n校验文件：%s.sha256\n' "$archive" "$archive"

#!/usr/bin/env bash
set -euo pipefail
umask 077
set -o noclobber
backup_dir="$HOME/sftpgo-backups"
archive_name='sftpgo-替换为实际UTC时间.tar'
cd "$backup_dir"
sha256sum -c "$archive_name.sha256"
restore_dir="$HOME/services/sftpgo-restore-check"
test ! -L "$restore_dir"
if test -e "$restore_dir"; then
  test -d "$restore_dir"
  test ! -L "$restore_dir"
  existing_entries=$(find "$restore_dir" -mindepth 1 -maxdepth 1 -print -quit)
  test -z "$existing_entries"
else
  install -d -m 700 "$restore_dir"
fi
sudo tar --numeric-owner --same-owner -xpf "$backup_dir/$archive_name" -C "$restore_dir"
cd "$restore_dir"
sudo test -s home/sftpgo.db
test -f compose.yaml
sudo find data home -printf '%U:%G %m %p\n'

(
set -euo pipefail
restore_dir="$HOME/services/sftpgo-restore-check"
test -d "$restore_dir"
test ! -L "$restore_dir"
cd -- "$restore_dir" || exit 1
test -d data
test ! -L data
test -d home
test ! -L home
# 仅适用于本教程原配置：data/home 预期全部属于 1000:1000。
# 先核对上方输出；使用过其他 UID/GID 或外部挂载时，不执行此修正。
sudo find data home -xdev   \( -type f -o -type d \) \( ! -uid 1000 -o ! -gid 1000 \)   -exec chown --no-dereference 1000:1000 -- {} +
sudo find data home -printf '%U:%G %m %p\n'
)

services:
  sftpgo:
    image: drakkan/sftpgo:v2.7.6
    ports:
      - "127.0.0.1:18087:8080"
      - "127.0.0.1:12023:2022"
    volumes:
      - ./data:/srv/sftpgo
      - ./home:/var/lib/sftpgo
    environment:
      SFTPGO_GRACE_TIME: "32"
    stop_grace_period: 40s
    restart: "no"

cd "$HOME/services/sftpgo-restore-check"
docker compose -p sftpgo-restore-check -f compose.restore.yaml config --quiet
docker compose -p sftpgo-restore-check -f compose.restore.yaml up -d

ssh -L 18087:127.0.0.1:18087 -L 12023:127.0.0.1:12023 user@your-server