Differences

This shows you the differences between two versions of the page.

--- centos_nginx_backuppc4.x [2018/02/15 17:58]
k2patel [Required Third party scripts]
+++ centos_nginx_backuppc4.x [2020/08/10 02:35] (current)
@@ Line 1: / Line 1: @@
-====== CentOS / Fedora + Nginx + Backuppc ======
+====== CentOS / RHEL7 / Fedora + Nginx + Backuppc ======
 This combination gave me no documentation online, Recently Backuppc is available as SCGI Script version.\\
@@ Line 23: / Line 23: @@
 ==== Configuration ====
-In configuration i've only changed few of the options to make it work under browser.
+=== In configuration i've only changed few of the options to make it work under browser. ===
 <code diff| /etc/BackupPC/config.pl>
@@ Line 113: / Line 114: @@
  #
  # CSS stylesheet "skin" for the CGI interface.  It is stored
+</code>
+=== Nginx Configuration ===
+<code bash | /etc/nginx/nginx.conf>
+worker_processes  1;
+events {
+    worker_connections  1024;
+}
+http {
+    include       mime.types;
+    default_type  application/octet-stream;
+    sendfile        on;
+    keepalive_timeout  65;
+    gzip  on;
+    server {
+        listen       80;
+        server_name  backup.k2patel.in;
+        return 302 https://backup.k2patel.in$request_uri;
+    }
+    server {
+        listen       443 ssl http2;
+        server_name  backup.k2patel.in;
+        ssl on;
+        ssl_certificate      /etc/pki/tls/certs/k2patel.in.crt;
+        ssl_certificate_key  /etc/pki/tls/private/k2patel.in.key;
+        ssl_trusted_certificate /etc/pki/tls/certs/k2patel.in.int.ca;
+        # HSTS (ngx_http_headers_module is required) (15768000 seconds = 6 months)
+        add_header Strict-Transport-Security max-age=63072000;
+        # OCSP Stapling ---
+        # fetch OCSP records from URL in ssl_certificate and cache them
+        ssl_stapling on;
+        ssl_stapling_verify off;
+        # modern configuration. tweak to your needs.
+        ssl_protocols TLSv1.2;
+        ssl_ciphers 'ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256';
+        ssl_prefer_server_ciphers on;
+        ssl_session_timeout 1d;
+        ssl_session_cache shared:SSL:50m;
+        ssl_session_tickets off;
+        add_header Strict-Transport-Security max-age=63072000;
+        add_header X-Frame-Options DENY;
+        add_header X-Content-Type-Options nosniff;
+        error_page   500 502 503 504  /50x.html;
+        location = /50x.html {
+            root   /usr/share/nginx/html;
+        }
+        access_log  /var/log/nginx/backuppc.access.log;
+        error_log   /var/log/nginx/backuppc.error.log;
+        location / {
+          auth_basic "Backup";
+          auth_basic_user_file /usr/local/etc/nginx/backuppc.users;
+          root /usr/share/BackupPC/html;
+          return 302 http://backup.k2patel.in/cgi-bin/BackupPC_Admin;
+          index BackupPC.html;
+        }
+        location /BackupPC {
+           alias /usr/share/BackupPC/html;
+           index BackupPC.html;
+        }
+        #location ~\.cgi$ {
+        location ~ ^/cgi-bin/BackupPC_Admin(/|$) {
+          auth_basic "Backup";
+          auth_basic_user_file /etc/nginx/backuppc.users;
+          gzip off;
+          include /etc/nginx/fastcgi_params;
+          fastcgi_pass localhost:8999;
+          fastcgi_param REMOTE_ADDR     $remote_addr;
+          fastcgi_param REMOTE_USER     $remote_user;
+          fastcgi_param SCRIPT_FILENAME /usr/share/BackupPC/sbin/BackupPC_Admin;
+        }
+        location ~ /\.ht {
+            deny  all;
+        }
+    }
+}
 </code>
 ==== Required Third party scripts ====
-<code perl | fcgi wrapper script | http://nginxlibrary.com/downloads/perl-fcgi/fastcgi-wrapper>
+<code perl | /usr/local/sbin/fastcgi-wrapper | http://nginxlibrary.com/downloads/perl-fcgi/fastcgi-wrapper>
 #!/usr/bin/perl
@@ Line 217: / Line 314: @@
 }
 </code>
+=== Systemd Script ===
+<code bash | /etc/systemd/system/fcgiwrapper.service>
+[Unit]
+Description=Fast CGI wrapper
+After=network.target
+[Service]
+Type=forking
+TimeoutStopSec=0
+User=backuppc
+Group=backuppc
+ExecStart=/usr/local/sbin/fastcgi-wrapper
+[Install]
+WantedBy=multi-user.target
+</code>
+==== Final Note ====
+Once everything is configured you should be able to access your backuppc using user admin.\\

Daily *Nix

User Tools

Site Tools

Differences

Page Tools