DokuWiki

User Tools

Site Tools

Trace:
centos_nginx_backuppc4.x

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
centos_nginx_backuppc4.x [2018/02/15 17:50] – [CentOS / Fedora + Nginx + Backuppc] k2patelcentos_nginx_backuppc4.x [2020/08/10 02:35] (current) – external edit 127.0.0.1
Line 1: Line 1:
-====== CentOS / Fedora + Nginx + Backuppc ======+====== CentOS / RHEL7 / Fedora + Nginx + Backuppc ======
  
 This combination gave me no documentation online, Recently Backuppc is available as SCGI Script version.\\ This combination gave me no documentation online, Recently Backuppc is available as SCGI Script version.\\
Line 23: Line 23:
 ==== Configuration ==== ==== Configuration ====
  
-In configuration i've only changed few of the options to make it work under browser.+=== In configuration i've only changed few of the options to make it work under browser. === 
  
 <code diff| /etc/BackupPC/config.pl> <code diff| /etc/BackupPC/config.pl>
Line 113: Line 114:
  #  #
  # CSS stylesheet "skin" for the CGI interface.  It is stored  # CSS stylesheet "skin" for the CGI interface.  It is stored
 +</code>
 +
 +=== Nginx Configuration ===
 +<code bash | /etc/nginx/nginx.conf>
 +worker_processes  1;
 +
 +events {
 +    worker_connections  1024;
 +}
 +
 +http {
 +    include       mime.types;
 +    default_type  application/octet-stream;
 +
 +    sendfile        on; 
 +
 +    keepalive_timeout  65;
 +
 +    gzip  on;
 +
 +    server {
 +        listen       80;
 +        server_name  backup.k2patel.in;
 +
 +        return 302 https://backup.k2patel.in$request_uri;
 +
 +    }
 +
 +    server {
 +        listen       443 ssl http2;
 +        server_name  backup.k2patel.in;
 +
 +        ssl on;
 +        ssl_certificate      /etc/pki/tls/certs/k2patel.in.crt;
 +        ssl_certificate_key  /etc/pki/tls/private/k2patel.in.key;
 +        ssl_trusted_certificate /etc/pki/tls/certs/k2patel.in.int.ca;
 +
 +        # HSTS (ngx_http_headers_module is required) (15768000 seconds = 6 months)
 +        add_header Strict-Transport-Security max-age=63072000;
 +
 +        # OCSP Stapling ---
 +        # fetch OCSP records from URL in ssl_certificate and cache them
 +        ssl_stapling on;
 +        ssl_stapling_verify off;
 +        # modern configuration. tweak to your needs.
 +        ssl_protocols TLSv1.2;
 +        ssl_ciphers 'ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256';
 +        ssl_prefer_server_ciphers on;
 +
 +        ssl_session_timeout 1d;
 +        ssl_session_cache shared:SSL:50m;
 +        ssl_session_tickets off;
 +
 +        add_header Strict-Transport-Security max-age=63072000;
 +        add_header X-Frame-Options DENY;
 +        add_header X-Content-Type-Options nosniff;
 +
 +        error_page   500 502 503 504  /50x.html;
 +        location = /50x.html {
 +            root   /usr/share/nginx/html;
 +        }
 +
 +        access_log  /var/log/nginx/backuppc.access.log;
 +        error_log   /var/log/nginx/backuppc.error.log;
 +
 +        location / {
 +          auth_basic "Backup";
 +          auth_basic_user_file /usr/local/etc/nginx/backuppc.users;
 +          root /usr/share/BackupPC/html;
 +          return 302 http://backup.k2patel.in/cgi-bin/BackupPC_Admin;
 +          index BackupPC.html;
 +        }
 +
 +        location /BackupPC {
 +           alias /usr/share/BackupPC/html;
 +           index BackupPC.html;
 +        }
 +
 +        #location ~\.cgi$ {
 +        location ~ ^/cgi-bin/BackupPC_Admin(/|$) {
 +          auth_basic "Backup";
 +          auth_basic_user_file /etc/nginx/backuppc.users;
 +          gzip off;
 +          include /etc/nginx/fastcgi_params;
 +          fastcgi_pass localhost:8999;
 +
 +          fastcgi_param REMOTE_ADDR     $remote_addr;
 +          fastcgi_param REMOTE_USER     $remote_user;
 +          fastcgi_param SCRIPT_FILENAME /usr/share/BackupPC/sbin/BackupPC_Admin;
 +        }
 +
 +        location ~ /\.ht {
 +            deny  all;  
 +        }
 +    }
 +}
 </code> </code>
  
 ==== Required Third party scripts ==== ==== Required Third party scripts ====
 +<code perl | /usr/local/sbin/fastcgi-wrapper | http://nginxlibrary.com/downloads/perl-fcgi/fastcgi-wrapper>
 +#!/usr/bin/perl
 +
 +use FCGI;
 +use Socket;
 +use POSIX qw(setsid);
 +
 +require 'syscall.ph';
 +
 +&daemonize;
 +
 +#this keeps the program alive or something after exec'ing perl scripts
 +END() { } BEGIN() { }
 +*CORE::GLOBAL::exit = sub { die "fakeexit\nrc=".shift()."\n"; }; 
 +eval q{exit}; 
 +if ($@) { 
 + exit unless $@ =~ /^fakeexit/; 
 +};
 +
 +&main;
 +
 +sub daemonize() {
 +    chdir '/'                 or die "Can't chdir to /: $!";
 +    defined(my $pid = fork)   or die "Can't fork: $!";
 +    exit if $pid;
 +    setsid                    or die "Can't start a new session: $!";
 +    umask 0;
 +}
 +
 +sub main {
 +        $socket = FCGI::OpenSocket( "127.0.0.1:8999", 10 ); #use IP sockets
 +        $request = FCGI::Request( \*STDIN, \*STDOUT, \*STDERR, \%req_params, $socket );
 +        if ($request) { request_loop()};
 +            FCGI::CloseSocket( $socket );
 +}
 +
 +sub request_loop {
 +        while( $request->Accept() >= 0 ) {
 +            
 +           #processing any STDIN input from WebServer (for CGI-POST actions)
 +           $stdin_passthrough ='';
 +           $req_len = 0 + $req_params{'CONTENT_LENGTH'};
 +           if (($req_params{'REQUEST_METHOD'} eq 'POST') && ($req_len != 0) ){ 
 +                my $bytes_read = 0;
 +                while ($bytes_read < $req_len) {
 +                        my $data = '';
 +                        my $bytes = read(STDIN, $data, ($req_len - $bytes_read));
 +                        last if ($bytes == 0 || !defined($bytes));
 +                        $stdin_passthrough .= $data;
 +                        $bytes_read += $bytes;
 +                }
 +            }
 +
 +            #running the cgi app
 +            if ( (-x $req_params{SCRIPT_FILENAME}) &&  #can I execute this?
 +                 (-s $req_params{SCRIPT_FILENAME}) &&  #Is this file empty?
 +                 (-r $req_params{SCRIPT_FILENAME})     #can I read this file?
 +            ){
 + pipe(CHILD_RD, PARENT_WR);
 + my $pid = open(KID_TO_READ, "-|");
 + unless(defined($pid)) {
 + print("Content-type: text/plain\r\n\r\n");
 +                        print "Error: CGI app returned no output - ";
 +                        print "Executing $req_params{SCRIPT_FILENAME} failed !\n";
 + next;
 + }
 + if ($pid > 0) {
 + close(CHILD_RD);
 + print PARENT_WR $stdin_passthrough;
 + close(PARENT_WR);
 +
 + while(my $s = <KID_TO_READ>) { print $s; }
 + close KID_TO_READ;
 + waitpid($pid, 0);
 + } else {
 +                 foreach $key ( keys %req_params){
 +                   $ENV{$key} = $req_params{$key};
 +                }
 +                # cd to the script's local directory
 +                 if ($req_params{SCRIPT_FILENAME} =~ /^(.*)\/[^\/]+$/) {
 +                        chdir $1;
 +                }
 +
 + close(PARENT_WR);
 + close(STDIN);
 + #fcntl(CHILD_RD, F_DUPFD, 0);
 + syscall(&SYS_dup2, fileno(CHILD_RD), 0);
 + #open(STDIN, "<&CHILD_RD");
 + exec($req_params{SCRIPT_FILENAME});
 + die("exec failed");
 + }
 +            } 
 +            else {
 +                print("Content-type: text/plain\r\n\r\n");
 +                print "Error: No such CGI app - $req_params{SCRIPT_FILENAME} may not ";
 +                print "exist or is not executable by this process.\n";
 +            }
 +
 +        }
 +}
 +</code>
 +
 +=== Systemd Script ===
 +<code bash | /etc/systemd/system/fcgiwrapper.service>
 +[Unit]
 +Description=Fast CGI wrapper
 +After=network.target
 +
 +[Service]
 +Type=forking
 +TimeoutStopSec=0
 +User=backuppc
 +Group=backuppc
 +ExecStart=/usr/local/sbin/fastcgi-wrapper
 +
 +[Install]
 +WantedBy=multi-user.target
 +</code>
  
 +==== Final Note ====
 +Once everything is configured you should be able to access your backuppc using user admin.\\
  
  
centos_nginx_backuppc4.x.1518717055.txt.gz · Last modified: 2020/08/10 02:28 (external edit)