Paul Nothaft
1505775678
The fresh-install restart loop reported by @MrGabri (and confirmed by
@AloePacci with the user:0:0 workaround) had a clear root cause:
- Dockerfile pinned USER nodejs (UID 1001) before the entrypoint
ran, so the existing chown branch in init-production.sh:13 was
dead code.
- wait-for-db.sh (the actual entrypoint, not init-production.sh)
silently swallowed mkdir/EACCES on bind mounts with || true,
then a downstream migration error surfaced as the visible failure.
- Net effect on a typical Linux host where the bind-mount dir is
owned by UID 1000: container can't write, exits non-zero,
restarts forever with no clear error.
Switch to the standard Docker drop-privileges pattern:
1. Install su-exec, drop `USER nodejs` from the Dockerfile —
container now starts as root.
2. wait-for-db.sh: if running as root, chown /app/storage,
/app/data, /app/logs to nodejs and re-exec self via
su-exec nodejs:nodejs. App still ends up running as UID 1001.
3. Preflight check for non-root invocations (compose `user:`
overrides): verify the bind mounts are actually writable
before continuing. If not, exit 1 immediately with an
actionable error pointing at the docs — no more silent
restart loops.
Also:
- Delete backend/init-production.sh. It was an orphan — no caller
in the Dockerfile, compose, or anywhere else. Its chown logic
looked authoritative enough that @MrGabri ran it manually trying
to debug, which is what finally surfaced the EACCES.
- docker-compose.yml: drop user: + PUID/PGID env. The pattern-B
UID-matching workaround they implemented is obsolete now that
pattern A (root-then-drop) is in place.
- .env.example + README: drop PUID/PGID documentation.
- Add fresh-install smoke test workflow. Boots backend + postgres
against bind mounts owned by UID 1000 (the GitHub runner UID,
and the common-mismatch case on Linux hosts) and verifies:
+ container reaches healthy without restart-looping
+ chown happened (dirs now owned by 1001 inside the container)
+ node runs as nodejs, not root (su-exec drop worked)
+ /health returns status:ok
+ with --user 5005:5005 + unwritable mounts, preflight exits
loud with the expected error string
Verified locally end-to-end against a fresh Postgres + UID-501-owned
bind mount: backend reaches healthy in ~20s, chown applied, node
runs as nodejs, no restart loop. Docs in picpeak-docs cover the new
behavior + a Troubleshooting section for the install-path bugs
fixed in #484/#494/#511/#488.
Refs: #484
153 lines
6.1 KiB
Markdown
153 lines
6.1 KiB
Markdown
# PicPeak
|
|
|
|
<div align="center">
|
|
<img src="docs/picpeak-logo.png" alt="PicPeak Logo" width="300" />
|
|
|
|
**Self-hosted photo sharing for event photographers.**
|
|
|
|
[](https://opensource.org/licenses/MIT)
|
|
[](https://www.docker.com/)
|
|
[](https://nodejs.org/)
|
|
[](https://reactjs.org/)
|
|
|
|
[Live Demo](https://demo.picpeak.app) · [Deployment Guide](DEPLOYMENT_GUIDE.md) · [Homepage](https://www.picpeak.app)
|
|
</div>
|
|
|
|
---
|
|
|
|
PicPeak lets you create password-protected, time-limited photo galleries for your clients — hosted on your own server. No subscriptions, no storage limits, no third-party access to your photos.
|
|
|
|
|
|
|
|
## Demo
|
|
|
|
Try it out at [demo.picpeak.app](https://demo.picpeak.app).
|
|
|
|
Admin panel: [demo.picpeak.app/admin](https://demo.picpeak.app/admin) — login with `[email protected]` / `Demo2026!`
|
|
|
|
> The demo resets periodically.
|
|
|
|
## Features
|
|
|
|
**Gallery Management** — Create galleries, upload photos via drag & drop, set passwords and expiration dates. Galleries auto-archive when they expire. Events start as drafts so you can upload and prepare before notifying the client.
|
|
|
|
**Client Experience** — Responsive galleries that look great on any device. Guests can browse, download individual photos or everything at once. Optional guest uploads and feedback (likes, comments, ratings).
|
|
|
|
**Themes & Branding** — 11 built-in theme presets, custom CSS templates, configurable colors/fonts/layouts. White-label your admin panel and login page with your own logo and company name.
|
|
|
|
**Email Notifications** — Automated gallery creation, expiration warning, and archive emails. Multilingual templates (EN, DE, NL, PT, RU) editable from the admin UI.
|
|
|
|
**Photo Protection** — Watermarking, right-click prevention, canvas rendering, DevTools detection. Configurable per gallery.
|
|
|
|
**External Media** — Reference photos from a mounted folder instead of uploading. PicPeak reads originals in place and generates thumbnails on demand.
|
|
|
|
**Multi-Language** — Full UI translations for English, German, Dutch, Portuguese, and Russian. Email templates support all languages independently.
|
|
|
|
**Analytics** — Built-in view/download tracking plus optional Umami integration for privacy-focused analytics.
|
|
|
|
**Video Support** — Upload and stream MP4, WebM, MOV alongside photos. FFmpeg bundled via npm.
|
|
|
|
**Multiple Admins** — Role-based access control with super admin, admin, and editor roles.
|
|
|
|
## Quick Start
|
|
|
|
```bash
|
|
git clone https://github.com/the-luap/picpeak.git
|
|
cd picpeak
|
|
cp .env.example .env
|
|
# Edit .env — set at least JWT_SECRET and passwords
|
|
docker compose up -d
|
|
```
|
|
|
|
Open `http://localhost:3000` and log in with the credentials from your `.env`.
|
|
|
|
> **Permissions:** Set `PUID` and `PGID` in `.env` to match your host user (`id -u` / `id -g`) so Docker volumes are writable.
|
|
|
|
See the [Deployment Guide](DEPLOYMENT_GUIDE.md) for reverse proxy setup, SSL, external media, and production configuration.
|
|
|
|
## Screenshots
|
|
|
|
<details>
|
|
<summary>Admin Dashboard</summary>
|
|
|
|
<img src="docs/screenshot-dashboard.png" alt="Admin Dashboard" width="800" />
|
|
</details>
|
|
|
|
<details>
|
|
<summary>Event Management</summary>
|
|
|
|
<img src="docs/screenshots-events.png" alt="Event Management" width="800" />
|
|
</details>
|
|
|
|
<details>
|
|
<summary>Analytics</summary>
|
|
|
|
<img src="docs/screenshot-analytics.png" alt="Analytics" width="800" />
|
|
</details>
|
|
|
|
## Comparison
|
|
|
|
| | PicPeak | PicDrop | Scrapbook.de |
|
|
|---|---|---|---|
|
|
| Self-hosted | Yes | No | No |
|
|
| Monthly cost | $0 | $29-199 | 19-99 EUR |
|
|
| Storage | Unlimited | 50-500 GB | 100-1000 GB |
|
|
| Custom branding | Full | Limited | Limited |
|
|
| Open source | Yes | No | No |
|
|
| API | Yes | Paid | No |
|
|
|
|
## Tech Stack
|
|
|
|
- **Backend:** Node.js, Express, PostgreSQL (or SQLite)
|
|
- **Frontend:** React, TypeScript, Tailwind CSS
|
|
- **Infrastructure:** Docker, Nginx, Redis
|
|
- **Processing:** Sharp (images), FFmpeg (video)
|
|
|
|
## Release Channels
|
|
|
|
**Stable** (`stable` / `latest`) — Production-ready. Use this for real deployments.
|
|
|
|
**Beta** (`beta`) — Early access to new features. May have rough edges.
|
|
|
|
```bash
|
|
# Set in .env
|
|
PICPEAK_CHANNEL=stable # or beta
|
|
|
|
# Update
|
|
docker compose -f docker-compose.production.yml pull
|
|
docker compose -f docker-compose.production.yml up -d
|
|
```
|
|
|
|
The admin dashboard notifies you when updates are available.
|
|
|
|
## Contributing
|
|
|
|
We welcome contributions — bug fixes, features, translations, documentation. See [CONTRIBUTING.md](CONTRIBUTING.md) for setup instructions.
|
|
|
|
## Documentation
|
|
|
|
- [Deployment Guide](DEPLOYMENT_GUIDE.md) — Installation, configuration, reverse proxy, external media
|
|
- [Admin API (OpenAPI)](docs/picpeak-admin-api.openapi.yaml) — Machine-readable API spec
|
|
- [Admin API Quickstart](docs/admin-api-quickstart.md) — Authentication and testing guide
|
|
- [Security Policy](SECURITY.md)
|
|
|
|
## Contributors
|
|
|
|
Thanks to the people whose code, reports, and feedback have shaped PicPeak:
|
|
|
|
- [**@Luca-Timo**](https://github.com/Luca-Timo) — native Apple Silicon multi-arch images, external-URL toggle for legal CMS pages, lazy-loaded folder tree picker, admin-email picker, self-hosted webfont system, gallery header/banner decoupling, and several typed-API refactors.
|
|
- [**@Rekoo-PS**](https://github.com/Rekoo-PS) — sharp-eyed bug reporter and product feedback. Filed the issues that drove the login-loop fix, gallery-loading skeleton work, mobile-lightbox overhaul, admin-events search-counter fix, photo-count column, and bulk-delete workflow. Also a [BuyMeACoffee](https://buymeacoffee.com/theluap) supporter.
|
|
|
|
If you've contributed and aren't listed here, please open a PR.
|
|
|
|
|
|
## License
|
|
|
|
MIT — use it for personal or commercial projects.
|
|
|
|
---
|
|
|
|
<p align="center">
|
|
<a href="https://www.picpeak.app">Homepage</a> · <a href="https://demo.picpeak.app">Live Demo</a> · <a href="DEPLOYMENT_GUIDE.md">Docs</a> · <a href="https://github.com/the-luap/picpeak/issues">Issues</a>
|
|
</p>
|