Posts by sbocquet

sbocquet · Dec 8th 2020

Quote from ryecoaaron

There is a plugin that does this but I stopped maintaining it because certbot is a moving target and the version in the Debian repo is rarely up to date enough for a lot of people. The wildcard feature that most people want is very difficult to automate as well.

And yes, I do tell people to use docker. I use certbot myself. Putting it in docker doesn't change that much. It actually makes it easier if the system you are generating the cert on does not have a web server or you do not want the current web server exposed to the internet (like OMV's web server).

I can totally understand that. I personnaly recompile the latest versions of handbrake, qbittorrent-nox to be up to date in debian 10, and this can be a real pain

Certificates are much more used and useful. As said just before, maybe a path to the automated certificat in the Certificates or General Settings tabs in OMV could be a huge help for a lot of people ?

Cheers.

sbocquet · Dec 7th 2020

Hi,

Will be very interested in a way to automaticaly renew LetsEncrypt certificates in OMV as, at the moment, it's really a pain in the ass every 3 months to :
1 - Renew the LetsEncrypt certificate by cron or CLI,
2 - Copy/Paste the info in OMV GUI to generate the OMV one,
3 - Copy/Paste the path to the new OMV certificate in every nginx site conf file (yes, I have some reverse proxy sites that use my wildcard certicate !)

So many sources of errors...

Why can OMV have the option to use directly the LetsEncrypt certificate (which is automatically renew) by simply giving its path ? It would be so easy !

OMV is mean to be easy on those things, no ?

P.S.: Please, don't tell me to use docker as it's a PERSONNAL NAS that don't need this complexity to automaticaly renew a certificat ! OMV is supposed to be a user friendly experience.

sbocquet · Sep 25th 2020

I hate ACLs too
Never used them... as it's always too complicated once they are set

Have a nice day

sbocquet · Sep 25th 2020

Yes.

But I also want them to be in the same group in order that they can all read/write in some other directory.
Well, I guest that not a big deal but I wanted to do it all in the GUI and not be forced to use CLI.

No problemo... but maybe this can be thinked to be done in a future update

sbocquet · Sep 25th 2020

My main goal is to have :
- familly users that can read/write on all folders.
- external (guests) users that can only read in some folders.

All the external users can access the NAS with SFTP to download files from musics and videos.

Code

root@home-server:/srv/dev-disk-by-label-Datas# ls -al
total 48
drwxr-xr-x  9 root root   4096 Aug  3 20:32 .
drwxr-xr-x  6 root root   4096 Aug  3 20:04 ..
drwxrws---  3 root users  4096 Aug  4 11:01 backups
drwxrws---  9 root users  4096 Aug  4 14:19 documents
drwx------  2 root root  16384 Aug  3 19:27 lost+found
drwxrwsr-x 99 root users  4096 Aug  3 21:16 musics
drwxrws--- 31 root users  4096 Aug  5 22:50 photos
drwxrws---  3 root users  4096 Aug  3 23:27 transfers
drwxrwsr-x  8 root users  4096 Aug  4 11:31 videos

Display More

With those rights, only the users in the "users" group can read and write.

At the moment, I just change the default group of the external users in /etc/passwd to match /etc/group.

Code

sbocquet:x:1000:100:Stéphane BOCQUET:/home/vbocquet:/usr/sbin/nologin
utest:x:1002:1000:User test:/home/utest:/bin/sh

Code

guests:x:1000:utest

Maybe there's a better way.

sbocquet · Sep 25th 2020

Hi,

My goal here is to link a user to a "guests" group so that he cannot access to some directories the internal users can.
I have successfully added the user to the group "guests".

I then was trying to remove a new created external user from the "users" group, and it seems not to work at all. The /etc/passwd file isn't modify too.

Is it a bug?

sbocquet · Sep 25th 2020

Quote from ryecoaaron

I don't think anything from the db needs to be loaded. So, I would remove line 29 + 30 from your class.

I ended with that:

Code

"enabled" => $systemCtl->isActive(),

And here is the result.

Once agan, thanks a lot for your help.

sbocquet · Sep 25th 2020

My only concern is

Code

$object = $db->get("conf.service.plexmediaserver");

because I think that this info is taken from config.xml. I can add the required line but it will be overwriten at the next conf update (or no?)...

Any idea or should I always return the value 1 ?

sbocquet · Sep 25th 2020

Thank for the tip.

I have writen the new class.

PHP

<?php
/**
 * This file is part of OpenMediaVault.
 *
 * @license   http://www.gnu.org/licenses/gpl.html GPL Version 3
 * @author    Volker Theile <volker.theile@openmediavault.org>
 * @copyright Copyright (c) 2009-2020 Volker Theile
 *
 * OpenMediaVault is free software: you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation, either version 3 of the License, or
 * any later version.
 *
 * OpenMediaVault is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with OpenMediaVault. If not, see <http://www.gnu.org/licenses/>.
 */
class Plexmediaserver extends \OMV\Engine\Module\ServiceAbstract
        implements \OMV\Engine\Module\IServiceStatus {
    public function getName() {
        return "plexmediaserver";
    }

    public function getStatus() {
        $db = \OMV\Config\Database::getInstance();
        $object = $db->get("conf.service.plexmediaserver");
        $systemCtl = new \OMV\System\SystemCtl("plexmediaserver");
        return [
            "name" => $this->getName(),
            "title" => gettext("PlexMediaServer"),
            "enabled" => $object->get("enable"),
            "running" => $systemCtl->isActive()
        ];
    }
}

Display More

Is there an easy way to "reload" the conf in order to test it ?

sbocquet · Sep 25th 2020

Hi,

I want to add some custom services (Plex, QBittorrent-nox, etc) watching in the dashboard part of OMV5.

I have installed those services by CLI as theres no more plugin for them, but it would be helpful to me to see if they are running in OMV dashboard.

I have already custom some OMV dashboard graph with disks and CPU temp and so on, so I'm not new to OMV tweaking.

Can someone give me some clue on what file I have to search/modify to include those services in the dashboard, and the best way to do it?

P.S: I already have checked /var/www/openmediavault/js/omv/module/admin/dashboard/part/ServiceStatus.js but that's not here Maybe more in the back engine ?

Thx a lot for helping.

sbocquet · Aug 8th 2020

I will have a look at both next week

sbocquet · Aug 7th 2020

Hi,

For those who want to have fun...

- Connect via SSH to your server...

Code

cd /var/www/openmediavault/css
cp defaults.scss defaults.sav
vi defaults.scss

- Modify those line with what colors you want:

Code

$omv-color-more-lighter: #404040;
$omv-color-lighter: #303030;
$omv-color-default: #202020;
$omv-color-darker: #101010;
$omv-color-more-darker: #000000;

Save and exit.

- Compile the new CSS file:

Code

root@home-server:/var/www/openmediavault/css# apt install sassc
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following additional packages will be installed:
libsass1
The following NEW packages will be installed:
libsass1 sassc
0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.
Need to get 785 kB of archives.
After this operation, 2,832 kB of additional disk space will be used.
Do you want to continue? [Y/n] Y
Get:1 http://deb.debian.org/debian buster/main amd64 libsass1 amd64 3.5.5-4 [772 kB]
Get:2 http://deb.debian.org/debian buster/main amd64 sassc amd64 3.5.0-1 [12.7 kB]
Fetched 785 kB in 0s (4,902 kB/s)
Selecting previously unselected package libsass1:amd64.
(Reading database ... 63357 files and directories currently installed.)
Preparing to unpack .../libsass1_3.5.5-4_amd64.deb ...
Unpacking libsass1:amd64 (3.5.5-4) ...
Selecting previously unselected package sassc.
Preparing to unpack .../sassc_3.5.0-1_amd64.deb ...
Unpacking sassc (3.5.0-1) ...
Setting up libsass1:amd64 (3.5.5-4) ...
Setting up sassc (3.5.0-1) ...
Processing triggers for man-db (2.8.5-2) ...
Processing triggers for libc-bin (2.28-10) ...

root@home-server:/var/www/openmediavault/css# make all; chown openmediavault-webgui:openmediavault-webgui *; chmod 664 *;
rm -f theme-all-rtl.min.css theme-all.min.css theme-triton.min.css theme-all-rtl.min.css.map theme-all.min.css.map theme-triton.min.css.map
sassc -t compressed --sourcemap theme-all-rtl.scss theme-all-rtl.min.css
sassc -t compressed --sourcemap theme-all.scss theme-all.min.css
sassc -t compressed --sourcemap theme-triton.scss theme-triton.min.css

Display More

- Refresh your web browser with CTRL+F5 and enjoy

Note : This have to be done after each OMV update... or maybe you can use the theme-custom.css file possibility to override the default CSS?

sbocquet · Aug 7th 2020

NAS updated !

See my signature

sbocquet · Aug 5th 2020

Quick update...

I manage to get it work with HTTP with that conf file...

Code

server {
server_name torrent.mydomain.com;
listen [::]:80;
listen [::]:443 ssl;
ssl_certificate /etc/ssl/certs/openmediavault-0e5a4bc0-4754-40ca-b31a-e55f79f57621.crt;
ssl_certificate_key /etc/ssl/private/openmediavault-0e5a4bc0-4754-40ca-b31a-e55f79f57621.key;


access_log /var/log/nginx/qbittorrent-webgui_access.log;
error_log /var/log/nginx/qbittorrent-webgui_error.log;


location / {
proxy_pass              http://127.0.0.1:8080;
proxy_hide_header       Referer;
proxy_hide_header       Origin;
proxy_set_header        Referer                 '';
proxy_set_header        Origin                  '';
proxy_set_header        Host                    $host;
proxy_set_header        X-Forwarded-Host        $server_name:$server_port;
proxy_set_header        X-Real-IP               $remote_addr;
proxy_set_header        X-Forwarded-For         $proxy_add_x_forwarded_for;
proxy_set_header        X-Forwarded-Proto       $scheme;
add_header              Front-End-Https         on;
}
}

Display More

Unfortunatly, when I try to use https://torrent.mydomain.com, I'm still redirected to OMV web UI
Any idea ?

EDIT : After some web browser cleaning (cookies, etc...), this qbittorrent.conf file seems to work !

sbocquet · Aug 5th 2020

Hi,

I currently have an OMV5 server with a LetsEncrypt wildcard certificate configured.
It can be acceded by https://home-server.mydomain.com from the internet.

I also have a qBittorrent web UI that I can access from the internet with http://torrent.mydomain.com:8080

I'm trying to have a reverse proxy set in nginx for my qBittorrent web UI with the following URL at first : http://torrent.mydomain.com
Will try to set it to HTTPS in a second time with my wildcard certificate.

I have created a nginx conf file for qbittorrent.

Code

root@home-server:/etc/nginx/sites-enabled# ls -al
total 8
drwxr-xr-x 2 root root 4096 Aug  5 10:13 .
drwxr-xr-x 9 root root 4096 Aug  1 15:47 ..
lrwxrwxrwx 1 root root   40 Jul 30 22:05 openmediavault-webgui -> ../sites-available/openmediavault-webgui
lrwxrwxrwx 1 root root   37 Aug  5 10:11 qbittorrent-webgui -> ../sites-available/qbittorrent-webgui

root@home-server:/etc/nginx/sites-enabled# cat qbittorrent-webgui
server {
listen 80;
server_name torrent.mydomain.com;


access_log /var/log/nginx/qbittorrent-webgui_access.log;
error_log /var/log/nginx/qbittorrent-webgui_error.log;


location / {
proxy_pass              http://localhost:8080/;
proxy_set_header        X-Forwarded-Host        $server_name:$server_port;
proxy_hide_header       Referer;
proxy_hide_header       Origin;
proxy_set_header        Referer                 '';
proxy_set_header        Origin                  '';
add_header              X-Frame-Options         "SAMEORIGIN";
}
}

Display More

Here is the OMV5 conf file for nginx :

Code

root@home-server:/etc/nginx/sites-enabled# cat openmediavault-webgui
# This file is auto-generated by openmediavault (https://www.openmediavault.org)
# WARNING: Do not edit this file, your changes will get lost.


server {
server_name openmediavault-webgui;
root /var/www/openmediavault;
index index.php;
autoindex off;
server_tokens off;
sendfile on;
large_client_header_buffers 4 32k;
client_max_body_size 25M;
error_log /var/log/nginx/openmediavault-webgui_error.log error;
access_log /var/log/nginx/openmediavault-webgui_access.log combined;
error_page 404 = /404.php;
location /404.html {
internal;
}
location /extjs6/ {
alias /usr/share/javascript/extjs6/;
expires 2d;
}
location ~ ^/(css|js|images)/ {
expires 2d;
}
location /favicon {
expires 14d;
}
location ~ \.php$ {
try_files $uri =404;
fastcgi_split_path_info ^(.+\.php)(/.+)$;
fastcgi_pass unix:/run/php/php7.3-fpm-openmediavault-webgui.sock;
fastcgi_index index.php;
fastcgi_read_timeout 60s;
include fastcgi.conf;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
fastcgi_param PHP_ADMIN_VALUE session.cookie_secure=On;
}
listen [::]:80 default_server ipv6only=off;
listen [::]:443 default_server ipv6only=off ssl deferred;
ssl_certificate /etc/ssl/certs/openmediavault-0e5a4bc0-4754-40ca-b31a-e55f79f57621.crt;
ssl_certificate_key /etc/ssl/private/openmediavault-0e5a4bc0-4754-40ca-b31a-e55f79f57621.key;
include /etc/nginx/openmediavault-webgui.d/*.conf;
}

Display More

Anyway, it doesn't work but I can't see what I'm doing wrong here.

Any idea ? Thx a lot.

sbocquet · Aug 3rd 2020

Thx a lot. I think it will do the job for me.

sbocquet · Aug 3rd 2020

Hi,

I've just setup a new OMV with OMV5 and just realized that there's no more links created in the /sharefolders directory.
Also, I have noticed that I have no sharedfolders-xxxxxx.mount file generated in /etc/systemd/system each time I create a new one.

Is it a bug or not ? Seems strange to me.

Thx

sbocquet · Aug 3rd 2020

Yes, I can... if I can make it work

sbocquet · Aug 3rd 2020

Yep. I just installed it.

Strangely, openIPMI needs mysql-common and mariadb-common ! Can't understand why as they are not listed in this page
https://packages.debian.org/buster/openipmi

Code

root@home-server:/etc/collectd/collectd.conf.d# apt install openipmi
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following additional packages will be installed:
libmariadb3 libsnmp-base libsnmp30 mariadb-common mysql-common
Suggested packages:
snmp-mibs-downloader
The following NEW packages will be installed:
libmariadb3 libsnmp-base libsnmp30 mariadb-common mysql-common openipmi
0 upgraded, 6 newly installed, 0 to remove and 0 not upgraded.
Need to get 4,428 kB of archives.
After this operation, 8,490 kB of additional disk space will be used.
Do you want to continue? [Y/n] Y
Get:1 http://deb.debian.org/debian buster/main amd64 mysql-common all 5.8+1.0.5 [7,324 B]
Get:2 http://deb.debian.org/debian buster/main amd64 mariadb-common all 1:10.3.23-0+deb10u1 [32.0 kB]
Get:3 http://deb.debian.org/debian buster/main amd64 libmariadb3 amd64 1:10.3.23-0+deb10u1 [171 kB]
Get:4 http://deb.debian.org/debian buster/main amd64 libsnmp-base all 5.7.3+dfsg-5 [1,595 kB]
Get:5 http://deb.debian.org/debian buster/main amd64 libsnmp30 amd64 5.7.3+dfsg-5 [2,324 kB]
Get:6 http://deb.debian.org/debian buster/main amd64 openipmi amd64 2.0.25-2.1 [299 kB]
Fetched 4,428 kB in 0s (19.1 MB/s)
Selecting previously unselected package mysql-common.
(Reading database ... 61100 files and directories currently installed.)
Preparing to unpack .../0-mysql-common_5.8+1.0.5_all.deb ...
Unpacking mysql-common (5.8+1.0.5) ...
Selecting previously unselected package mariadb-common.
Preparing to unpack .../1-mariadb-common_1%3a10.3.23-0+deb10u1_all.deb ...
Unpacking mariadb-common (1:10.3.23-0+deb10u1) ...
Selecting previously unselected package libmariadb3:amd64.
Preparing to unpack .../2-libmariadb3_1%3a10.3.23-0+deb10u1_amd64.deb ...
Unpacking libmariadb3:amd64 (1:10.3.23-0+deb10u1) ...
Selecting previously unselected package libsnmp-base.
Preparing to unpack .../3-libsnmp-base_5.7.3+dfsg-5_all.deb ...
Unpacking libsnmp-base (5.7.3+dfsg-5) ...
Selecting previously unselected package libsnmp30:amd64.
Preparing to unpack .../4-libsnmp30_5.7.3+dfsg-5_amd64.deb ...
Unpacking libsnmp30:amd64 (5.7.3+dfsg-5) ...
Selecting previously unselected package openipmi.
Preparing to unpack .../5-openipmi_2.0.25-2.1_amd64.deb ...
Unpacking openipmi (2.0.25-2.1) ...
Setting up mysql-common (5.8+1.0.5) ...
update-alternatives: using /etc/mysql/my.cnf.fallback to provide /etc/mysql/my.cnf (my.cnf) in auto mode
Setting up libsnmp-base (5.7.3+dfsg-5) ...
Setting up mariadb-common (1:10.3.23-0+deb10u1) ...
update-alternatives: using /etc/mysql/mariadb.cnf to provide /etc/mysql/my.cnf (my.cnf) in auto mode
Setting up libmariadb3:amd64 (1:10.3.23-0+deb10u1) ...
Setting up libsnmp30:amd64 (5.7.3+dfsg-5) ...
Setting up openipmi (2.0.25-2.1) ...
Processing triggers for systemd (241-7~deb10u4) ...
Processing triggers for man-db (2.8.5-2) ...
Processing triggers for libc-bin (2.28-10) ...

Display More

sbocquet · Aug 3rd 2020

So far... the one from the collectd site

https://collectd.org/wiki/index.php/Plugin:IPMI

Posts by sbocquet

Omv5 and Letsencrypt plugin

Omv5 and Letsencrypt plugin

Impossible to remove a user from the "users" group

Impossible to remove a user from the "users" group

Impossible to remove a user from the "users" group

Impossible to remove a user from the "users" group

Add custom service watch in OMV dashboard Services part

Add custom service watch in OMV dashboard Services part

Add custom service watch in OMV dashboard Services part

Add custom service watch in OMV dashboard Services part

[GUIDE] Change OMV look ;)

[GUIDE] Change OMV look ;)

[SBOCQUET] My NAS

Qbittorrent-nox web UI and nginx reverse proxy

Qbittorrent-nox web UI and nginx reverse proxy

Sharedfolders link not auto-generated in OMV5 ?

Sharedfolders link not auto-generated in OMV5 ?

Collectd IPMI plugin not loading

Collectd IPMI plugin not loading

Collectd IPMI plugin not loading