Pritunl: isimo sokulawula ngokumelene nephrofayili ekhiqiziwe

Isigcino esisodwa sibuyisela ukusetshenziswa kwePritunl okusebenzayo; esinye sibuyisela isithombe sayo kuphela. Iphrofayili yeklayenti, ikhophi yokuhlela kwehost kanye ne-tarball yedijithali yesimo konke kubukeka njengamakhophi wokugcinwa, futhi akekho noyedwa wazo eyedwa obuyisa izinhlangano, abasebenzisi kanye nezincazelo zeseva eziphethwe yiPritunl. Umehluko uwubunikazi: esinye isimo singesokugcinwa kwedatha, esinye singesekhost, futhi esinye siwumphumela okhiqizwe kabusha. Khetha ungqimba olungalungile futhi ukubuyisela kuzokhiqiza iseva eqalayo, elalelayo futhi engazi lutho. Lokhu kuqhathanisa kuhlukanisa izingqimba ezintathu ukuze isigcino osigcinayo sihambisane nokwehluleka obuyisela kukho.

Izinto ezimbili zibukeka njengamakhophi wokugcinwa futhi kunye kuphela okubuyisela insizakalo

Iphrofayili yeklayenti elandiwe iqukethe isitifiketi, ukhiye kanye nendawo yokuphela. Iphelele leyo divayisi eyodwa futhi ayinamsebenzi njengorekhodi lokusetshenziswa: ayithwali zinhlangano, abasebenzisi abakhutshaziwe, izindledlana zeseva noma ama-akhawunti okuphatha. Ukubuyisela kusuka kufolda yamaphrofayili kunikeza amaklayenti angeke akwazi ukuziqinisekisa nanoma yini.

Ikhophi yokuhlela kwehost nayo iyingxenye. /etc/pritunl.conf iqukethe izilungiselelo zezinga lehost, kuhlanganise nendlela yokufinyelela isizindalwazi, futhi ayiziqukethe izinto zeVPN ngokwazo.

Lokho okuphethwe isizindalwazi nalokho okuphethwe ihost

IPritunl igcina izincazelo zeseva, abasebenzisi, izinhlangano kanye nokhiye ku-MongoDB. Leso sizindalwazi siwuhlelo lokulawula olugunyaziwe, futhi yonke ifayela leOpenVPN elikhiqizwe kudiski liwumphumela osuselwe kulo. Ushintsho olwenziwe ngqo kufayela elikhiqiziwe luhlala kuze kube ukukhiqizwa kabusha okulandelayo bese linyamalala, yingakho ukuhlela amafayela esikhathi sokusebenza kungekona ukulungisa okuhlala njalo. Umthetho ofanayo usebenza emigwaqweni nasezixhumanisweni ezisebenzayo: zichaza lokho okukhiqizwe uhlelo lokulawula, hhayi lokho obekufanele ukukhiqiza.

Ihost inikela ngesethi encane kodwa engadluliseki yamanani. Elinye lawo i-/var/lib/pritunl/pritunl.uuid, ubunikazi bale node ethile.

Lobo bunikazi bubaluleke kakhulu kwiqoqo. Ihost esikhundleni idinga ukubhaliswa kwayo, hhayi ikhophi ye-UUID yendondo esebenzayo, ngaphandle kwalokho bobabili balwela ubunikazi obufanayo. Rekhoda ukuxhumana phakathi kwehost ngayinye, i-UUID yayo kanye nesizindalwazi esikhomba kuso, ngoba ukukhishwa kwesizindalwazi okukodwa akuchazi ukuthi iziphi izilungiselelo zehost ezazingeziphi imshini. Izinguqulo zesofthiwe namagama endawo yokuphela avumelekile asemarekodini afanayo.

Yenza ukukhishwa okungaguquki, hhayi ikhophi yedijithali

Ukukopa idijithali yedatha ye-MongoDB ngesikhathi insizakalo ibhala kukhiqiza amafayela okungenzeka angakhi isizindalwazi esisebenzisekayo. Sebenzisa indlela yokukhishwa esekelwayo yesizindalwazi esikhundleni salokho, isetshenziswa ngokumelene netopoloji onayo ngempela:

mongodump --uri="mongodb://127.0.0.1:27017/pritunl" --out=/var/backups/pritunl/db
sudo tar czf /var/backups/pritunl/host.tgz /etc/pritunl.conf /var/lib/pritunl/pritunl.uuid

Ihost ezimele ibekezelela leso simo esilula. Isethi yamakhophi idinga iphuzu lesikhathi elingaguquki, futhi ukukhishwa okusekelwe ku-oplog kunezidingo ukukhishwa okulula okungenazo. Inqubo esekelwayo incike kunguqulo yakho ye-MongoDB netopoloji, ngakho ungayiqondi ngokuba khona kwedijithali yedatha. Gcina ungqimba lwehost eduze nokukhishwa, ekusetshenzisweni okufanayo, ngesitembu sesikhathi esifanayo.

Zilolonge ukubuyisela ngaphambi kokuba ukudinga

Ikhophi yokugcinwa okungekho oyibuyiselile iwumbono nje. Yakha insizakalo kunethiwekhi ehlukanisiwe, buyisela ukukhishwa futhi ubuyisele amafayela ehost:

mongorestore --uri="mongodb://127.0.0.1:27017" --drop /var/backups/pritunl/db
sudo tar xzf /var/backups/pritunl/host.tgz -C /

Bese uqinisekisa izinto hhayi inqubo: ngena, qinisekisa ukuthi izinhlangano nabasebenzisi bakhona, futhi uqalise iklayenti elilodwa lokuhlola ngokumelene nencazelo yeseva oyaziyo. Vimbela ihost ebuyiselwe ekukhangiseni indawo yokuphela yokukhiqiza noma ekwamukeleni ukuxhumana kwangempela kuze kube amakheli nobunikazi kuyisinqumo. Lapha futhi uthola ukuthi isigcino sidinga imininingwane yokungena eyewayekhona kuphela kumshini ohlulekile, ngakho gcina imininingwane yokubuyisela endaweni ezimele. Ukubuyisela okuncike kuhost osanda kuyilahla akulona uhlelo lokubuyisela.

Ekugcineni, khumbula ukuthi isithombe esidala sibuyisela izinqumo ezindala. Uma umphathi evale ubunikazi ngemva kokuthathwa kokukhishwa, ukubuyisela kuyabuvula futhi. Ukubuyisana ngemva kokubuyisela kungokwenqubo, hhayi komcabango wamuva.