mirror of
https://github.com/opnsense/docs
synced 2024-11-09 01:10:33 +00:00
119 lines
4.0 KiB
ReStructuredText
119 lines
4.0 KiB
ReStructuredText
|
==========================
|
|||
|
|
Configuration Cloud Backup
|
|||
|
|
==========================
|
|||
|
|
|
|||
|
|
------------
|
|||
|
|
Google Drive
|
|||
|
|
------------
|
|||
|
|
|
|||
|
|
**Google Drive** is a digital file storage and management service by the
|
|||
|
|
information technology company Google. Amongst other features, like
|
|||
|
|
collaborative editing of documents, spreadsheets, and presentations, it
|
|||
|
|
allows signed up users with an account to store and share files in the
|
|||
|
|
digital cloud.
|
|||
|
|
|
|||
|
|
The OPNsense configuration can be stored as a backup file in XML format,
|
|||
|
|
to your PC on an USB stick or remotely in the digital Google Drive
|
|||
|
|
cloud.
|
|||
|
|
|
|||
|
|
-------------------
|
|||
|
|
Free online storage
|
|||
|
|
-------------------
|
|||
|
|
|
|||
|
|
Because Google officially offers a free storage of 15 GB and nearly
|
|||
|
|
unlimited traffic, a remote backup of an OPNsense configuration file is
|
|||
|
|
free of charge, the only thing you need is an account at google
|
|||
|
|
(`Google Drive Signup <https://accounts.google.com/signup?hl=en>`__) .
|
|||
|
|
|
|||
|
|
--------
|
|||
|
|
Easy API
|
|||
|
|
--------
|
|||
|
|
|
|||
|
|
An application programming interfaces (API) for Google Drive was
|
|||
|
|
released in 2013. This API empowers third-party developers to easily
|
|||
|
|
write apps for Google Drive.
|
|||
|
|
|
|||
|
|
-------------
|
|||
|
|
Remote backup
|
|||
|
|
-------------
|
|||
|
|
In OPNsense\ :sup:`1` you can **backup** your configuration directly and
|
|||
|
|
automatically to **Google Drive**, using the new backup feature. Every
|
|||
|
|
backup will be encrypted with the same algorithm used in the manual
|
|||
|
|
backup so it's quite easy to restore to a new installed machine.
|
|||
|
|
|
|||
|
|
After set-up, the backup feature will do first store of the OPNsense
|
|||
|
|
config file and subsequently a daily new backup of changed config
|
|||
|
|
content.
|
|||
|
|
|
|||
|
|
----------------------
|
|||
|
|
Setup Google API usage
|
|||
|
|
----------------------
|
|||
|
|
|
|||
|
|
First we need to have a project in the google developer console:
|
|||
|
|
|
|||
|
|
- Go to https://console.developers.google.com/project
|
|||
|
|
- Create a project and give it a name, you may leave it default it
|
|||
|
|
doesn't really matter for this.
|
|||
|
|
- Enable the Drive API
|
|||
|
|
|
|||
|
|
- In the left menu APIs -> "Drive API" -> Enable
|
|||
|
|
|
|||
|
|
- Open the project and start to create an api key
|
|||
|
|
|
|||
|
|
- In the left menu : APIs & auth -> Credentials
|
|||
|
|
- Click on the button "Create new Client ID"
|
|||
|
|
- Choose "Service account", followed by "Create Client ID"
|
|||
|
|
|
|||
|
|
- Download the key and save it (for your own use)
|
|||
|
|
- Click "Generate new P12 key" and download the key (for your own
|
|||
|
|
use, you need this one later)
|
|||
|
|
- Copy Email Address, you need it later.
|
|||
|
|
|
|||
|
|
.. rubric:: Create a Google Drive folder
|
|||
|
|
:name: create-a-google-drive-folder
|
|||
|
|
|
|||
|
|
Next thing is to create a folder in Google Drive and share it to the
|
|||
|
|
"service user" you've just created.
|
|||
|
|
|
|||
|
|
- Go to https://drive.google.com
|
|||
|
|
- Choose "NEW" and the folder to create a new folder, the name doesn't
|
|||
|
|
really matter (for example type OPNsense).
|
|||
|
|
- right click the newly created folder and choose share
|
|||
|
|
|
|||
|
|
- paste the email address from the service account and "send"
|
|||
|
|
|
|||
|
|
- Now open the folder and copy the folder ID ( in the url, the last
|
|||
|
|
piece after #/folders/, it's quite long)
|
|||
|
|
|
|||
|
|
.. rubric:: Setup the account in OPNsense
|
|||
|
|
:name: setup-the-account-in-opnsense
|
|||
|
|
|
|||
|
|
Now we can put it all together, login to your OPNsense firewall and go
|
|||
|
|
to the backup feature (default : https://192.168.1.1/diag_backup.php )
|
|||
|
|
|
|||
|
|
.. image:: ./images/600px-Google_Drive_Backup_screenshot.png
|
|||
|
|
:scale: 100%
|
|||
|
|
|
|||
|
|
On the bottom of the page are the options for the Google Drive backup,
|
|||
|
|
enable the feature and fill in the parameters. Email address is acquired
|
|||
|
|
in step 2, the key in step 1. Choose a strong password to protect your
|
|||
|
|
data and fill in a number of backups you want to keep.
|
|||
|
|
|
|||
|
|
When you click Setup/Test Google Drive, the firewall will automatically
|
|||
|
|
save and test your settings and you will receive either an error
|
|||
|
|
(connectivity issues) or a list of config files currently in the backup.
|
|||
|
|
|
|||
|
|
The moment the feature is enabled, it will do a daily compare of the
|
|||
|
|
last file in backup and the current configuration and creates a new
|
|||
|
|
backup when something has changed.
|
|||
|
|
|
|||
|
|
.. rubric:: References
|
|||
|
|
:name: references
|
|||
|
|
|
|||
|
|
- `Official website of Google Drive <https://www.google.com/drive/>`__
|
|||
|
|
|
|||
|
|
.. rubric:: Notes
|
|||
|
|
:name: notes
|
|||
|
|
|
|||
|
|
:sup:`1` As of OPNsense version 1.15.8 .2 (25 March 2015)
|