https://wiki.goedeke.de/api.php?action=feedcontributions&feedformat=atom&user=Michael AQUAPOOL - Benutzerbeiträge [de] 2026-09-01T09:52:00Z Benutzerbeiträge MediaWiki 1.46.0 https://wiki.goedeke.de/index.php?title=Ein_paar_Befehle&diff=329 Ein paar Befehle 2024-11-28T07:57:17Z <p>Michael: </p> <hr /> <div>Syslog speichern in *.txt (es gibt nur noch journalctl)<br /> <br /> journalctl -b &gt; /tmp/journal.txt</div> Michael https://wiki.goedeke.de/index.php?title=Ein_paar_Befehle&diff=328 Ein paar Befehle 2024-11-28T07:55:14Z <p>Michael: Die Seite wurde neu angelegt: „Syslog speichern in *.txt (es gibt nur noch journalctl) journalctl -b &gt; /tmp/journal.txt“</p> <hr /> <div>Syslog speichern in *.txt (es gibt nur noch journalctl)<br /> <br /> journalctl -b &gt; /tmp/journal.txt</div> Michael https://wiki.goedeke.de/index.php?title=Hauptseite&diff=327 Hauptseite 2024-11-28T07:52:33Z <p>Michael: /* HOWTOs */</p> <hr /> <div>== Dedicated Server Hosting by Hetzner (RZ Helsinki) ==<br /> <br /> [[AX41_NVMe #1380159|Server]] <br /> <br /> [[BX40 #145149|Storeage Box]]<br /> <br /> == Der Host und die Gäste ==<br /> <br /> [[Übersicht|Übersicht]]<br /> <br /> *[[AX41_NVMe 1380159|KVM]] <br /> **[[Router2|router2]] <br /> **[[Cloud (Owncloud)|cloud (owncloud)]]<br /> **[[CRM1|crm1]]<br /> **[[CRM|crm]]<br /> **[[Backup (Service)|Backup (Service)]]<br /> **[[web3|web]]<br /> **[[Web4|web4]] <br /> **[[db1|db1]] <br /> **[[Mail2|mail2]] <br /> **[[Om|om]]<br /> <br /> == Das Netzwerk ==<br /> <br /> ==== Interne IP´s mit Zuordnung ====<br /> <br /> [[IP´s_172.16.10.0/24|IP´s 172.16.10.0/24]]<br /> <br /> ==== Externe IP´s mit Zuordnung ====<br /> <br /> [[IP´s_78.47.239.0/29|IP´s 78.47.239.0/29]]<br /> <br /> ==== Links: Extern ====<br /> <br /> [https://mail.aquapool.de MailcowAdmin]<br /> <br /> [https://mail.aquapool.de/sogo/ Webmail]<br /> <br /> [https://crm.aquapool.de CRM]<br /> <br /> [https://cloud.aquapool.de Nextcloud]<br /> <br /> [https://wiki.aquapool.de Wiki]<br /> <br /> ==== Links: intern via VPN ====<br /> <br /> [http://172.16.10.12/backuppc/ BackupPC]<br /> <br /> [http://172.16.10.8/phpmyadmin/ phpMyAdmin]<br /> <br /> == HOWTOs ==<br /> <br /> [[Restart/Start/Shutdown_VMs_-_KVM|Restart/Start/Shutdown VMs - KVM]]<br /> <br /> [[Backup der VMs|Backup der VMs]]<br /> <br /> == Domain Hosting ==<br /> <br /> [[Schlundtech | Schlundtech]]<br /> <br /> == Büro 192.168.188.0/24==<br /> <br /> ==== Interne IP´s und Server ====<br /> <br /> [[IP´s_192.168.188.*|IP´s 192.168.188.0/24]]<br /> <br /> ==== Cisco Telefone ====<br /> <br /> [[Cisco Konfig|Konfiguration]]<br /> <br /> ==== Asterisk ====<br /> <br /> [[ Asterisk Konfiguration| Konfiguration]]<br /> <br /> == aquacaetum ==<br /> <br /> [[ Laufende Installationen| Laufende Installationen]]<br /> <br /> [[ Anleitungen| Anleitungen]]<br /> <br /> == Home 192.168.198.0/24 ==<br /> <br /> [[ Pi config| Wireguard Resolve DNS]]<br /> <br /> [[ Wireguard iptables| Wireguard iptables]]<br /> <br /> <br /> == Büro 192.168.188.0/24 ==<br /> <br /> [[ Ein paar Befehle|Ein paar Befehle]]</div> Michael https://wiki.goedeke.de/index.php?title=Pi_config&diff=326 Pi config 2024-10-01T08:05:04Z <p>Michael: </p> <hr /> <div>=== '''Wireguard Resolve DNS''' ===<br /> Nachdem Wireguard noch keine eingebaute Lösung dafür hat, braucht man ein Script, welches DNS Namen neu auflöst und dann anwendet. Ich verwende das Beispielskript reresolve-dns.sh aus den contrib Skripten.<br /> Die Installation ist relativ einfach:<br /> curl -LsS -o /usr/local/bin/wireguard-reresolve-dns &lt;nowiki&gt;https://github.com/WireGuard/wireguard-tools/raw/master/contrib/reresolve-dns/reresolve-dns.sh&lt;/nowiki&gt;<br /> chmod 0755 /usr/local/bin/wireguard-reresolve-dns<br /> Im Anschluss kann das Skript manuell oder per Cron (als root) ausgeführt werden:<br /> wireguard-reresolve-dns wg0<br /> Oder was ich bevorzuge, als Systemd Service und Timer wie folgt.<br /> <br /> '''/etc/systemd/system/wireguard-reresolve-dns.service'''<br /> [Unit]<br /> Description=Wireguard Re-Resolve DNS of endpoints<br /> <br /> [Service]<br /> Type=oneshot<br /> ExecStart=/usr/local/bin/wireguard-reresolve-dns wg0<br /> '''/etc/systemd/system/wireguard-reresolve-dns.timer'''<br /> [Unit]<br /> Description=Runs Wireguard Re-Resolve DNS every 5 Minutes<br /> <br /> [Timer]<br /> OnUnitActiveSec=300s<br /> OnActiveSec=300s<br /> <br /> [Install]<br /> WantedBy=multi-user.target<br /> Anschließend muss man den Timer nur aktivieren und kann den Status des Service jederzeit checken:<br /> # systemctl daemon-reload<br /> # systemctl enable wireguard-reresolve-dns.timer<br /> # systemctl start wireguard-reresolve-dns.timer<br /> <br /> <br /> # systemctl status wireguard-reresolve-dns.timer<br /> * wireguard-reresolve-dns.timer - Runs Wireguard Re-Resolve DNS every 5 Minutes<br /> Loaded: loaded (/etc/systemd/system/wireguard-reresolve-dns.timer; enabled; vendor preset: enabled)<br /> Active: active (waiting) since Thu 2021-12-30 15:40:09 CET; 6 days ago<br /> Trigger: Wed 2022-01-05 15:50:48 CET; 3min 1s left<br /> Triggers: * wireguard-reresolve-dns.service<br /> <br /> Dec 30 15:40:09 notebook systemd[1]: Started Runs Wireguard Re-Resolve DNS every 5 Minutes.<br /> <br /> # systemctl status wireguard-reresolve-dns.service<br /> * wireguard-reresolve-dns.service - Wireguard Re-Resolve DNS of endpoints<br /> Loaded: loaded (/etc/systemd/system/wireguard-reresolve-dns.service; static)<br /> Active: inactive (dead) since Wed 2022-01-05 15:45:48 CET; 2min 1s ago<br /> TriggeredBy: * wireguard-reresolve-dns.timer<br /> Process: 3600033 ExecStart=/usr/local/bin/wireguard-reresolve-dns wg0 (code=exited, status=0/SUCCESS)<br /> Main PID: 3600033 (code=exited, status=0/SUCCESS)<br /> CPU: 17ms<br /> <br /> Jan 05 15:45:48 notebook systemd[1]: Starting Wireguard Re-Resolve DNS of endpoints...<br /> Jan 05 15:45:48 notebook systemd[1]: wireguard-reresolve-dns.service: Succeeded.<br /> Jan 05 15:45:48 notebook systemd[1]: Finished Wireguard Re-Resolve<br /> Damit der wireguard-reresolve-dns.service wg0 erfolgreich seine Aufgabe erfüllt, muss ein erreichbarer öffentlicher DNS (z.B. 8.8.4.4) vorhanden sein, damit der Endpoint in der wg0, z.B. apd.spdns.de:51194, aufgelöst werden kann.</div> Michael https://wiki.goedeke.de/index.php?title=Hauptseite&diff=325 Hauptseite 2024-10-01T07:51:43Z <p>Michael: /* Büro Server 192.168.188.0/24 */</p> <hr /> <div>== Dedicated Server Hosting by Hetzner (RZ Helsinki) ==<br /> <br /> [[AX41_NVMe #1380159|Server]] <br /> <br /> [[BX40 #145149|Storeage Box]]<br /> <br /> == Der Host und die Gäste ==<br /> <br /> [[Übersicht|Übersicht]]<br /> <br /> *[[AX41_NVMe 1380159|KVM]] <br /> **[[Router2|router2]] <br /> **[[Cloud (Owncloud)|cloud (owncloud)]]<br /> **[[CRM1|crm1]]<br /> **[[CRM|crm]]<br /> **[[Backup (Service)|Backup (Service)]]<br /> **[[web3|web]]<br /> **[[Web4|web4]] <br /> **[[db1|db1]] <br /> **[[Mail2|mail2]] <br /> **[[Om|om]]<br /> <br /> == Das Netzwerk ==<br /> <br /> ==== Interne IP´s mit Zuordnung ====<br /> <br /> [[IP´s_172.16.10.0/24|IP´s 172.16.10.0/24]]<br /> <br /> ==== Externe IP´s mit Zuordnung ====<br /> <br /> [[IP´s_78.47.239.0/29|IP´s 78.47.239.0/29]]<br /> <br /> ==== Links: Extern ====<br /> <br /> [https://mail.aquapool.de MailcowAdmin]<br /> <br /> [https://mail.aquapool.de/sogo/ Webmail]<br /> <br /> [https://crm.aquapool.de CRM]<br /> <br /> [https://cloud.aquapool.de Nextcloud]<br /> <br /> [https://wiki.aquapool.de Wiki]<br /> <br /> ==== Links: intern via VPN ====<br /> <br /> [http://172.16.10.12/backuppc/ BackupPC]<br /> <br /> [http://172.16.10.8/phpmyadmin/ phpMyAdmin]<br /> <br /> == HOWTOs ==<br /> <br /> [[Restart/Start/Shutdown_VMs_-_KVM|Restart/Start/Shutdown VMs - KVM]]<br /> <br /> [[Backup der VMs|Backup der VMs]]<br /> <br /> == Domain Hosting ==<br /> <br /> [[Schlundtech | Schlundtech]]<br /> <br /> == Büro 192.168.188.0/24==<br /> <br /> ==== Interne IP´s und Server ====<br /> <br /> [[IP´s_192.168.188.*|IP´s 192.168.188.0/24]]<br /> <br /> ==== Cisco Telefone ====<br /> <br /> [[Cisco Konfig|Konfiguration]]<br /> <br /> ==== Asterisk ====<br /> <br /> [[ Asterisk Konfiguration| Konfiguration]]<br /> <br /> == aquacaetum ==<br /> <br /> [[ Laufende Installationen| Laufende Installationen]]<br /> <br /> [[ Anleitungen| Anleitungen]]<br /> <br /> == Home 192.168.198.0/24==<br /> <br /> [[ Pi config| Wireguard Resolve DNS]]<br /> <br /> [[ Wireguard iptables| Wireguard iptables]]</div> Michael https://wiki.goedeke.de/index.php?title=Hauptseite&diff=324 Hauptseite 2024-10-01T07:51:24Z <p>Michael: /* Home */</p> <hr /> <div>== Dedicated Server Hosting by Hetzner (RZ Helsinki) ==<br /> <br /> [[AX41_NVMe #1380159|Server]] <br /> <br /> [[BX40 #145149|Storeage Box]]<br /> <br /> == Der Host und die Gäste ==<br /> <br /> [[Übersicht|Übersicht]]<br /> <br /> *[[AX41_NVMe 1380159|KVM]] <br /> **[[Router2|router2]] <br /> **[[Cloud (Owncloud)|cloud (owncloud)]]<br /> **[[CRM1|crm1]]<br /> **[[CRM|crm]]<br /> **[[Backup (Service)|Backup (Service)]]<br /> **[[web3|web]]<br /> **[[Web4|web4]] <br /> **[[db1|db1]] <br /> **[[Mail2|mail2]] <br /> **[[Om|om]]<br /> <br /> == Das Netzwerk ==<br /> <br /> ==== Interne IP´s mit Zuordnung ====<br /> <br /> [[IP´s_172.16.10.0/24|IP´s 172.16.10.0/24]]<br /> <br /> ==== Externe IP´s mit Zuordnung ====<br /> <br /> [[IP´s_78.47.239.0/29|IP´s 78.47.239.0/29]]<br /> <br /> ==== Links: Extern ====<br /> <br /> [https://mail.aquapool.de MailcowAdmin]<br /> <br /> [https://mail.aquapool.de/sogo/ Webmail]<br /> <br /> [https://crm.aquapool.de CRM]<br /> <br /> [https://cloud.aquapool.de Nextcloud]<br /> <br /> [https://wiki.aquapool.de Wiki]<br /> <br /> ==== Links: intern via VPN ====<br /> <br /> [http://172.16.10.12/backuppc/ BackupPC]<br /> <br /> [http://172.16.10.8/phpmyadmin/ phpMyAdmin]<br /> <br /> == HOWTOs ==<br /> <br /> [[Restart/Start/Shutdown_VMs_-_KVM|Restart/Start/Shutdown VMs - KVM]]<br /> <br /> [[Backup der VMs|Backup der VMs]]<br /> <br /> == Domain Hosting ==<br /> <br /> [[Schlundtech | Schlundtech]]<br /> <br /> == Büro Server 192.168.188.0/24==<br /> <br /> ==== Interne IP´s und Server ====<br /> <br /> [[IP´s_192.168.188.*|IP´s 192.168.188.0/24]]<br /> <br /> ==== Cisco Telefone ====<br /> <br /> [[Cisco Konfig|Konfiguration]]<br /> <br /> ==== Asterisk ====<br /> <br /> [[ Asterisk Konfiguration| Konfiguration]]<br /> <br /> == aquacaetum ==<br /> <br /> [[ Laufende Installationen| Laufende Installationen]]<br /> <br /> [[ Anleitungen| Anleitungen]]<br /> <br /> == Home 192.168.198.0/24==<br /> <br /> [[ Pi config| Wireguard Resolve DNS]]<br /> <br /> [[ Wireguard iptables| Wireguard iptables]]</div> Michael https://wiki.goedeke.de/index.php?title=Wireguard_iptables&diff=323 Wireguard iptables 2024-10-01T07:48:44Z <p>Michael: </p> <hr /> <div>=== Postrouting ===<br /> Damit das Routing zwischen dem Wireguard Client und dem -Server funktioniert muss auf dem Client z.B. folgendes eingetragen werden:<br /> iptables -t nat -A POSTROUTING -o wg0 -j MASQUERADE<br /> Ggf. muss noch das Paket &quot;iptables-persistent&quot; installiert werden.<br /> <br /> Auf dem Wireguard Server (z.B. serv1) kommt folgendes rein:<br /> iptables -t nat -A POSTROUTING -s 10.9.0.0/24 -o tun0 -j MASQUERADE<br /> Damit auch die Adressen (das VPN) aus der wg1 erreichbar ist:<br /> iptables -t nat -A POSTROUTING -s 10.9.0.0/24 -o wg1 -j MASQUERADE<br /> Um die Regeln anzeigen zu lassen:<br /> iptables -t nat -L POSTROUTING</div> Michael https://wiki.goedeke.de/index.php?title=Wireguard_iptables&diff=322 Wireguard iptables 2024-10-01T07:40:57Z <p>Michael: Die Seite wurde neu angelegt: „=== Postrouting === Damit das Routing zwischen dem Wireguard Client und dem -Server funktioniert muss auf dem Client z.B. folgendes eingetragen werden:“</p> <hr /> <div>=== Postrouting ===<br /> Damit das Routing zwischen dem Wireguard Client und dem -Server funktioniert muss auf dem Client z.B. folgendes eingetragen werden:</div> Michael https://wiki.goedeke.de/index.php?title=Hauptseite&diff=321 Hauptseite 2024-10-01T07:36:45Z <p>Michael: /* Home */</p> <hr /> <div>== Dedicated Server Hosting by Hetzner (RZ Helsinki) ==<br /> <br /> [[AX41_NVMe #1380159|Server]] <br /> <br /> [[BX40 #145149|Storeage Box]]<br /> <br /> == Der Host und die Gäste ==<br /> <br /> [[Übersicht|Übersicht]]<br /> <br /> *[[AX41_NVMe 1380159|KVM]] <br /> **[[Router2|router2]] <br /> **[[Cloud (Owncloud)|cloud (owncloud)]]<br /> **[[CRM1|crm1]]<br /> **[[CRM|crm]]<br /> **[[Backup (Service)|Backup (Service)]]<br /> **[[web3|web]]<br /> **[[Web4|web4]] <br /> **[[db1|db1]] <br /> **[[Mail2|mail2]] <br /> **[[Om|om]]<br /> <br /> == Das Netzwerk ==<br /> <br /> ==== Interne IP´s mit Zuordnung ====<br /> <br /> [[IP´s_172.16.10.0/24|IP´s 172.16.10.0/24]]<br /> <br /> ==== Externe IP´s mit Zuordnung ====<br /> <br /> [[IP´s_78.47.239.0/29|IP´s 78.47.239.0/29]]<br /> <br /> ==== Links: Extern ====<br /> <br /> [https://mail.aquapool.de MailcowAdmin]<br /> <br /> [https://mail.aquapool.de/sogo/ Webmail]<br /> <br /> [https://crm.aquapool.de CRM]<br /> <br /> [https://cloud.aquapool.de Nextcloud]<br /> <br /> [https://wiki.aquapool.de Wiki]<br /> <br /> ==== Links: intern via VPN ====<br /> <br /> [http://172.16.10.12/backuppc/ BackupPC]<br /> <br /> [http://172.16.10.8/phpmyadmin/ phpMyAdmin]<br /> <br /> == HOWTOs ==<br /> <br /> [[Restart/Start/Shutdown_VMs_-_KVM|Restart/Start/Shutdown VMs - KVM]]<br /> <br /> [[Backup der VMs|Backup der VMs]]<br /> <br /> == Domain Hosting ==<br /> <br /> [[Schlundtech | Schlundtech]]<br /> <br /> == Büro Server 192.168.188.0/24==<br /> <br /> ==== Interne IP´s und Server ====<br /> <br /> [[IP´s_192.168.188.*|IP´s 192.168.188.0/24]]<br /> <br /> ==== Cisco Telefone ====<br /> <br /> [[Cisco Konfig|Konfiguration]]<br /> <br /> ==== Asterisk ====<br /> <br /> [[ Asterisk Konfiguration| Konfiguration]]<br /> <br /> == aquacaetum ==<br /> <br /> [[ Laufende Installationen| Laufende Installationen]]<br /> <br /> [[ Anleitungen| Anleitungen]]<br /> <br /> == Home ==<br /> <br /> [[ Pi config| Wireguard Resolve DNS]]<br /> <br /> [[ Wireguard iptables| Wireguard iptables]]</div> Michael https://wiki.goedeke.de/index.php?title=Hauptseite&diff=320 Hauptseite 2024-10-01T07:36:19Z <p>Michael: /* Home */</p> <hr /> <div>== Dedicated Server Hosting by Hetzner (RZ Helsinki) ==<br /> <br /> [[AX41_NVMe #1380159|Server]] <br /> <br /> [[BX40 #145149|Storeage Box]]<br /> <br /> == Der Host und die Gäste ==<br /> <br /> [[Übersicht|Übersicht]]<br /> <br /> *[[AX41_NVMe 1380159|KVM]] <br /> **[[Router2|router2]] <br /> **[[Cloud (Owncloud)|cloud (owncloud)]]<br /> **[[CRM1|crm1]]<br /> **[[CRM|crm]]<br /> **[[Backup (Service)|Backup (Service)]]<br /> **[[web3|web]]<br /> **[[Web4|web4]] <br /> **[[db1|db1]] <br /> **[[Mail2|mail2]] <br /> **[[Om|om]]<br /> <br /> == Das Netzwerk ==<br /> <br /> ==== Interne IP´s mit Zuordnung ====<br /> <br /> [[IP´s_172.16.10.0/24|IP´s 172.16.10.0/24]]<br /> <br /> ==== Externe IP´s mit Zuordnung ====<br /> <br /> [[IP´s_78.47.239.0/29|IP´s 78.47.239.0/29]]<br /> <br /> ==== Links: Extern ====<br /> <br /> [https://mail.aquapool.de MailcowAdmin]<br /> <br /> [https://mail.aquapool.de/sogo/ Webmail]<br /> <br /> [https://crm.aquapool.de CRM]<br /> <br /> [https://cloud.aquapool.de Nextcloud]<br /> <br /> [https://wiki.aquapool.de Wiki]<br /> <br /> ==== Links: intern via VPN ====<br /> <br /> [http://172.16.10.12/backuppc/ BackupPC]<br /> <br /> [http://172.16.10.8/phpmyadmin/ phpMyAdmin]<br /> <br /> == HOWTOs ==<br /> <br /> [[Restart/Start/Shutdown_VMs_-_KVM|Restart/Start/Shutdown VMs - KVM]]<br /> <br /> [[Backup der VMs|Backup der VMs]]<br /> <br /> == Domain Hosting ==<br /> <br /> [[Schlundtech | Schlundtech]]<br /> <br /> == Büro Server 192.168.188.0/24==<br /> <br /> ==== Interne IP´s und Server ====<br /> <br /> [[IP´s_192.168.188.*|IP´s 192.168.188.0/24]]<br /> <br /> ==== Cisco Telefone ====<br /> <br /> [[Cisco Konfig|Konfiguration]]<br /> <br /> ==== Asterisk ====<br /> <br /> [[ Asterisk Konfiguration| Konfiguration]]<br /> <br /> == aquacaetum ==<br /> <br /> [[ Laufende Installationen| Laufende Installationen]]<br /> <br /> [[ Anleitungen| Anleitungen]]<br /> <br /> == Home ==<br /> <br /> [[ Pi config| Wireguard Resolve DNS]]<br /> [[ Wireguard iptables| Wireguard iptables]]</div> Michael https://wiki.goedeke.de/index.php?title=Hauptseite&diff=319 Hauptseite 2024-10-01T07:31:32Z <p>Michael: /* Home */</p> <hr /> <div>== Dedicated Server Hosting by Hetzner (RZ Helsinki) ==<br /> <br /> [[AX41_NVMe #1380159|Server]] <br /> <br /> [[BX40 #145149|Storeage Box]]<br /> <br /> == Der Host und die Gäste ==<br /> <br /> [[Übersicht|Übersicht]]<br /> <br /> *[[AX41_NVMe 1380159|KVM]] <br /> **[[Router2|router2]] <br /> **[[Cloud (Owncloud)|cloud (owncloud)]]<br /> **[[CRM1|crm1]]<br /> **[[CRM|crm]]<br /> **[[Backup (Service)|Backup (Service)]]<br /> **[[web3|web]]<br /> **[[Web4|web4]] <br /> **[[db1|db1]] <br /> **[[Mail2|mail2]] <br /> **[[Om|om]]<br /> <br /> == Das Netzwerk ==<br /> <br /> ==== Interne IP´s mit Zuordnung ====<br /> <br /> [[IP´s_172.16.10.0/24|IP´s 172.16.10.0/24]]<br /> <br /> ==== Externe IP´s mit Zuordnung ====<br /> <br /> [[IP´s_78.47.239.0/29|IP´s 78.47.239.0/29]]<br /> <br /> ==== Links: Extern ====<br /> <br /> [https://mail.aquapool.de MailcowAdmin]<br /> <br /> [https://mail.aquapool.de/sogo/ Webmail]<br /> <br /> [https://crm.aquapool.de CRM]<br /> <br /> [https://cloud.aquapool.de Nextcloud]<br /> <br /> [https://wiki.aquapool.de Wiki]<br /> <br /> ==== Links: intern via VPN ====<br /> <br /> [http://172.16.10.12/backuppc/ BackupPC]<br /> <br /> [http://172.16.10.8/phpmyadmin/ phpMyAdmin]<br /> <br /> == HOWTOs ==<br /> <br /> [[Restart/Start/Shutdown_VMs_-_KVM|Restart/Start/Shutdown VMs - KVM]]<br /> <br /> [[Backup der VMs|Backup der VMs]]<br /> <br /> == Domain Hosting ==<br /> <br /> [[Schlundtech | Schlundtech]]<br /> <br /> == Büro Server 192.168.188.0/24==<br /> <br /> ==== Interne IP´s und Server ====<br /> <br /> [[IP´s_192.168.188.*|IP´s 192.168.188.0/24]]<br /> <br /> ==== Cisco Telefone ====<br /> <br /> [[Cisco Konfig|Konfiguration]]<br /> <br /> ==== Asterisk ====<br /> <br /> [[ Asterisk Konfiguration| Konfiguration]]<br /> <br /> == aquacaetum ==<br /> <br /> [[ Laufende Installationen| Laufende Installationen]]<br /> <br /> [[ Anleitungen| Anleitungen]]<br /> <br /> == Home ==<br /> <br /> [[ Pi config| Wireguard Resolve DNS]]</div> Michael https://wiki.goedeke.de/index.php?title=Hauptseite&diff=318 Hauptseite 2024-10-01T07:31:01Z <p>Michael: /* Home */</p> <hr /> <div>== Dedicated Server Hosting by Hetzner (RZ Helsinki) ==<br /> <br /> [[AX41_NVMe #1380159|Server]] <br /> <br /> [[BX40 #145149|Storeage Box]]<br /> <br /> == Der Host und die Gäste ==<br /> <br /> [[Übersicht|Übersicht]]<br /> <br /> *[[AX41_NVMe 1380159|KVM]] <br /> **[[Router2|router2]] <br /> **[[Cloud (Owncloud)|cloud (owncloud)]]<br /> **[[CRM1|crm1]]<br /> **[[CRM|crm]]<br /> **[[Backup (Service)|Backup (Service)]]<br /> **[[web3|web]]<br /> **[[Web4|web4]] <br /> **[[db1|db1]] <br /> **[[Mail2|mail2]] <br /> **[[Om|om]]<br /> <br /> == Das Netzwerk ==<br /> <br /> ==== Interne IP´s mit Zuordnung ====<br /> <br /> [[IP´s_172.16.10.0/24|IP´s 172.16.10.0/24]]<br /> <br /> ==== Externe IP´s mit Zuordnung ====<br /> <br /> [[IP´s_78.47.239.0/29|IP´s 78.47.239.0/29]]<br /> <br /> ==== Links: Extern ====<br /> <br /> [https://mail.aquapool.de MailcowAdmin]<br /> <br /> [https://mail.aquapool.de/sogo/ Webmail]<br /> <br /> [https://crm.aquapool.de CRM]<br /> <br /> [https://cloud.aquapool.de Nextcloud]<br /> <br /> [https://wiki.aquapool.de Wiki]<br /> <br /> ==== Links: intern via VPN ====<br /> <br /> [http://172.16.10.12/backuppc/ BackupPC]<br /> <br /> [http://172.16.10.8/phpmyadmin/ phpMyAdmin]<br /> <br /> == HOWTOs ==<br /> <br /> [[Restart/Start/Shutdown_VMs_-_KVM|Restart/Start/Shutdown VMs - KVM]]<br /> <br /> [[Backup der VMs|Backup der VMs]]<br /> <br /> == Domain Hosting ==<br /> <br /> [[Schlundtech | Schlundtech]]<br /> <br /> == Büro Server 192.168.188.0/24==<br /> <br /> ==== Interne IP´s und Server ====<br /> <br /> [[IP´s_192.168.188.*|IP´s 192.168.188.0/24]]<br /> <br /> ==== Cisco Telefone ====<br /> <br /> [[Cisco Konfig|Konfiguration]]<br /> <br /> ==== Asterisk ====<br /> <br /> [[ Asterisk Konfiguration| Konfiguration]]<br /> <br /> == aquacaetum ==<br /> <br /> [[ Laufende Installationen| Laufende Installationen]]<br /> <br /> [[ Anleitungen| Anleitungen]]<br /> <br /> == Home ==<br /> <br /> [[ Wireguard Resolve DNS| Pi config]]</div> Michael https://wiki.goedeke.de/index.php?title=Pi_config&diff=317 Pi config 2024-10-01T07:29:50Z <p>Michael: </p> <hr /> <div>=== '''Wireguard Resolve DNS''' ===<br /> Nachdem Wireguard noch keine eingebaute Lösung dafür hat, braucht man ein Script, welches DNS Namen neu auflöst und dann anwendet. Ich verwende das Beispielskript reresolve-dns.sh aus den contrib Skripten.<br /> Die Installation ist relativ einfach:<br /> curl -LsS -o /usr/local/bin/wireguard-reresolve-dns &lt;nowiki&gt;https://github.com/WireGuard/wireguard-tools/raw/master/contrib/reresolve-dns/reresolve-dns.sh&lt;/nowiki&gt;<br /> chmod 0755 /usr/local/bin/wireguard-reresolve-dns<br /> Im Anschluss kann das Skript manuell oder per Cron (als root) ausgeführt werden:<br /> wireguard-reresolve-dns wg0<br /> Oder was ich bevorzuge, als Systemd Service und Timer wie folgt.<br /> <br /> '''/etc/systemd/system/wireguard-reresolve-dns.service'''<br /> [Unit]<br /> Description=Wireguard Re-Resolve DNS of endpoints<br /> <br /> [Service]<br /> Type=oneshot<br /> ExecStart=/usr/local/bin/wireguard-reresolve-dns wg0<br /> '''/etc/systemd/system/wireguard-reresolve-dns.timer'''<br /> [Unit]<br /> Description=Runs Wireguard Re-Resolve DNS every 5 Minutes<br /> <br /> [Timer]<br /> OnUnitActiveSec=300s<br /> OnActiveSec=300s<br /> <br /> [Install]<br /> WantedBy=multi-user.target<br /> Anschließend muss man den Timer nur aktivieren und kann den Status des Service jederzeit checken:<br /> # systemctl daemon-reload<br /> # systemctl enable wireguard-reresolve-dns.timer<br /> # systemctl start wireguard-reresolve-dns.timer<br /> <br /> <br /> # systemctl status wireguard-reresolve-dns.timer<br /> * wireguard-reresolve-dns.timer - Runs Wireguard Re-Resolve DNS every 5 Minutes<br /> Loaded: loaded (/etc/systemd/system/wireguard-reresolve-dns.timer; enabled; vendor preset: enabled)<br /> Active: active (waiting) since Thu 2021-12-30 15:40:09 CET; 6 days ago<br /> Trigger: Wed 2022-01-05 15:50:48 CET; 3min 1s left<br /> Triggers: * wireguard-reresolve-dns.service<br /> <br /> Dec 30 15:40:09 notebook systemd[1]: Started Runs Wireguard Re-Resolve DNS every 5 Minutes.<br /> <br /> # systemctl status wireguard-reresolve-dns.service<br /> * wireguard-reresolve-dns.service - Wireguard Re-Resolve DNS of endpoints<br /> Loaded: loaded (/etc/systemd/system/wireguard-reresolve-dns.service; static)<br /> Active: inactive (dead) since Wed 2022-01-05 15:45:48 CET; 2min 1s ago<br /> TriggeredBy: * wireguard-reresolve-dns.timer<br /> Process: 3600033 ExecStart=/usr/local/bin/wireguard-reresolve-dns wg0 (code=exited, status=0/SUCCESS)<br /> Main PID: 3600033 (code=exited, status=0/SUCCESS)<br /> CPU: 17ms<br /> <br /> Jan 05 15:45:48 notebook systemd[1]: Starting Wireguard Re-Resolve DNS of endpoints...<br /> Jan 05 15:45:48 notebook systemd[1]: wireguard-reresolve-dns.service: Succeeded.<br /> Jan 05 15:45:48 notebook systemd[1]: Finished Wireguard Re-Resolve<br /> Damit der wireguard-reresolve-dns.service wg0 erfolgreich starten kann, muss ein erreichbarer öffentlicher DNS (z.B. 8.8.4.4) vorhanden sein, damit der Endpoint z.B. apd.spdns.de:51194 aufgelöst wird.</div> Michael https://wiki.goedeke.de/index.php?title=Pi_config&diff=316 Pi config 2024-09-26T10:47:37Z <p>Michael: /* Wireguard Resolve DNS */</p> <hr /> <div>=== '''Wireguard Resolve DNS''' ===<br /> Nachdem Wireguard noch keine eingebaute Lösung dafür hat, braucht man ein Script, welches DNS Namen neu auflöst und dann anwendet. Ich verwende das Beispielskript reresolve-dns.sh aus den contrib Skripten.<br /> Die Installation ist relativ einfach:<br /> curl -LsS -o /usr/local/bin/wireguard-reresolve-dns &lt;nowiki&gt;https://github.com/WireGuard/wireguard-tools/raw/master/contrib/reresolve-dns/reresolve-dns.sh&lt;/nowiki&gt;<br /> chmod 0755 /usr/local/bin/wireguard-reresolve-dns<br /> Im Anschluss kann das Skript manuell oder per Cron (als root) ausgeführt werden:<br /> wireguard-reresolve-dns wg0<br /> Oder was ich bevorzuge, als Systemd Service und Timer wie folgt.<br /> <br /> '''/etc/systemd/system/wireguard-reresolve-dns.service'''<br /> [Unit]<br /> Description=Wireguard Re-Resolve DNS of endpoints<br /> <br /> [Service]<br /> Type=oneshot<br /> ExecStart=/usr/local/bin/wireguard-reresolve-dns wg0<br /> '''/etc/systemd/system/wireguard-reresolve-dns.timer'''<br /> [Unit]<br /> Description=Runs Wireguard Re-Resolve DNS every 5 Minutes<br /> <br /> [Timer]<br /> OnUnitActiveSec=300s<br /> OnActiveSec=300s<br /> <br /> [Install]<br /> WantedBy=multi-user.target<br /> Anschließend muss man den Timer nur aktivieren und kann den Status des Service jederzeit checken:<br /> # systemctl daemon-reload<br /> # systemctl enable wireguard-reresolve-dns.timer<br /> # systemctl start wireguard-reresolve-dns.timer<br /> <br /> <br /> # systemctl status wireguard-reresolve-dns.timer<br /> * wireguard-reresolve-dns.timer - Runs Wireguard Re-Resolve DNS every 5 Minutes<br /> Loaded: loaded (/etc/systemd/system/wireguard-reresolve-dns.timer; enabled; vendor preset: enabled)<br /> Active: active (waiting) since Thu 2021-12-30 15:40:09 CET; 6 days ago<br /> Trigger: Wed 2022-01-05 15:50:48 CET; 3min 1s left<br /> Triggers: * wireguard-reresolve-dns.service<br /> <br /> Dec 30 15:40:09 notebook systemd[1]: Started Runs Wireguard Re-Resolve DNS every 5 Minutes.<br /> <br /> # systemctl status wireguard-reresolve-dns.service<br /> * wireguard-reresolve-dns.service - Wireguard Re-Resolve DNS of endpoints<br /> Loaded: loaded (/etc/systemd/system/wireguard-reresolve-dns.service; static)<br /> Active: inactive (dead) since Wed 2022-01-05 15:45:48 CET; 2min 1s ago<br /> TriggeredBy: * wireguard-reresolve-dns.timer<br /> Process: 3600033 ExecStart=/usr/local/bin/wireguard-reresolve-dns wg0 (code=exited, status=0/SUCCESS)<br /> Main PID: 3600033 (code=exited, status=0/SUCCESS)<br /> CPU: 17ms<br /> <br /> Jan 05 15:45:48 notebook systemd[1]: Starting Wireguard Re-Resolve DNS of endpoints...<br /> Jan 05 15:45:48 notebook systemd[1]: wireguard-reresolve-dns.service: Succeeded.<br /> Jan 05 15:45:48 notebook systemd[1]: Finished Wireguard Re-Resolve</div> Michael https://wiki.goedeke.de/index.php?title=Pi_config&diff=315 Pi config 2024-09-26T10:45:46Z <p>Michael: Die Seite wurde neu angelegt: „=== &#039;&#039;&#039;Wireguard Resolve DNS&#039;&#039;&#039; === Nachdem Wireguard noch keine eingebaute Lösung dafür hat, braucht man ein Script, welches DNS Namen neu auflöst und dann anwendet. Ich verwende das Beispielskript reresolve-dns.sh aus den contrib Skripten. Die Installation ist relativ einfach: curl -LsS -o /usr/local/bin/wireguard-reresolve-dns &lt;nowiki&gt;https://github.com/WireGuard/wireguard-tools/raw/master/contrib/reresolve-dns/reresolve-dns.sh&lt;/nowiki&gt; chmod 0755…“</p> <hr /> <div>=== '''Wireguard Resolve DNS''' ===<br /> Nachdem Wireguard noch keine eingebaute Lösung dafür hat, braucht man ein Script, welches DNS Namen neu auflöst und dann anwendet. Ich verwende das Beispielskript reresolve-dns.sh aus den contrib Skripten.<br /> Die Installation ist relativ einfach:<br /> curl -LsS -o /usr/local/bin/wireguard-reresolve-dns &lt;nowiki&gt;https://github.com/WireGuard/wireguard-tools/raw/master/contrib/reresolve-dns/reresolve-dns.sh&lt;/nowiki&gt;<br /> chmod 0755 /usr/local/bin/wireguard-reresolve-dns<br /> Im Anschluss kann das Skript manuell oder per Cron (als root) ausgeführt werden:<br /> wireguard-reresolve-dns wg0<br /> Oder was ich bevorzuge, als Systemd Service und Timer wie folgt.<br /> <br /> '''/etc/systemd/system/wireguard-reresolve-dns.service'''<br /> [Unit]<br /> Description=Wireguard Re-Resolve DNS of endpoints<br /> <br /> [Service]<br /> Type=oneshot<br /> ExecStart=/usr/local/bin/wireguard-reresolve-dns wg0<br /> '''/etc/systemd/system/wireguard-reresolve-dns.timer'''<br /> [Unit]<br /> Description=Runs Wireguard Re-Resolve DNS every 5 Minutes<br /> <br /> [Timer]<br /> OnUnitActiveSec=300s<br /> OnActiveSec=300s<br /> <br /> [Install]<br /> WantedBy=multi-user.target<br /> Anschließend muss man den Timer nur aktivieren und kann den Status des Service jederzeit checken:<br /> # systemctl daemon-reload<br /> # systemctl enable wireguard-reresolve-dns.timer<br /> <br /> # systemctl status wireguard-reresolve-dns.timer<br /> * wireguard-reresolve-dns.timer - Runs Wireguard Re-Resolve DNS every 5 Minutes<br /> Loaded: loaded (/etc/systemd/system/wireguard-reresolve-dns.timer; enabled; vendor preset: enabled)<br /> Active: active (waiting) since Thu 2021-12-30 15:40:09 CET; 6 days ago<br /> Trigger: Wed 2022-01-05 15:50:48 CET; 3min 1s left<br /> Triggers: * wireguard-reresolve-dns.service<br /> <br /> Dec 30 15:40:09 notebook systemd[1]: Started Runs Wireguard Re-Resolve DNS every 5 Minutes.<br /> <br /> # systemctl status wireguard-reresolve-dns.service<br /> * wireguard-reresolve-dns.service - Wireguard Re-Resolve DNS of endpoints<br /> Loaded: loaded (/etc/systemd/system/wireguard-reresolve-dns.service; static)<br /> Active: inactive (dead) since Wed 2022-01-05 15:45:48 CET; 2min 1s ago<br /> TriggeredBy: * wireguard-reresolve-dns.timer<br /> Process: 3600033 ExecStart=/usr/local/bin/wireguard-reresolve-dns wg0 (code=exited, status=0/SUCCESS)<br /> Main PID: 3600033 (code=exited, status=0/SUCCESS)<br /> CPU: 17ms<br /> <br /> Jan 05 15:45:48 notebook systemd[1]: Starting Wireguard Re-Resolve DNS of endpoints...<br /> Jan 05 15:45:48 notebook systemd[1]: wireguard-reresolve-dns.service: Succeeded.<br /> Jan 05 15:45:48 notebook systemd[1]: Finished Wireguard Re-Resolve</div> Michael https://wiki.goedeke.de/index.php?title=Hauptseite&diff=314 Hauptseite 2024-09-26T10:43:30Z <p>Michael: </p> <hr /> <div>== Dedicated Server Hosting by Hetzner (RZ Helsinki) ==<br /> <br /> [[AX41_NVMe #1380159|Server]] <br /> <br /> [[BX40 #145149|Storeage Box]]<br /> <br /> == Der Host und die Gäste ==<br /> <br /> [[Übersicht|Übersicht]]<br /> <br /> *[[AX41_NVMe 1380159|KVM]] <br /> **[[Router2|router2]] <br /> **[[Cloud (Owncloud)|cloud (owncloud)]]<br /> **[[CRM1|crm1]]<br /> **[[CRM|crm]]<br /> **[[Backup (Service)|Backup (Service)]]<br /> **[[web3|web]]<br /> **[[Web4|web4]] <br /> **[[db1|db1]] <br /> **[[Mail2|mail2]] <br /> **[[Om|om]]<br /> <br /> == Das Netzwerk ==<br /> <br /> ==== Interne IP´s mit Zuordnung ====<br /> <br /> [[IP´s_172.16.10.0/24|IP´s 172.16.10.0/24]]<br /> <br /> ==== Externe IP´s mit Zuordnung ====<br /> <br /> [[IP´s_78.47.239.0/29|IP´s 78.47.239.0/29]]<br /> <br /> ==== Links: Extern ====<br /> <br /> [https://mail.aquapool.de MailcowAdmin]<br /> <br /> [https://mail.aquapool.de/sogo/ Webmail]<br /> <br /> [https://crm.aquapool.de CRM]<br /> <br /> [https://cloud.aquapool.de Nextcloud]<br /> <br /> [https://wiki.aquapool.de Wiki]<br /> <br /> ==== Links: intern via VPN ====<br /> <br /> [http://172.16.10.12/backuppc/ BackupPC]<br /> <br /> [http://172.16.10.8/phpmyadmin/ phpMyAdmin]<br /> <br /> == HOWTOs ==<br /> <br /> [[Restart/Start/Shutdown_VMs_-_KVM|Restart/Start/Shutdown VMs - KVM]]<br /> <br /> [[Backup der VMs|Backup der VMs]]<br /> <br /> == Domain Hosting ==<br /> <br /> [[Schlundtech | Schlundtech]]<br /> <br /> == Büro Server 192.168.188.0/24==<br /> <br /> ==== Interne IP´s und Server ====<br /> <br /> [[IP´s_192.168.188.*|IP´s 192.168.188.0/24]]<br /> <br /> ==== Cisco Telefone ====<br /> <br /> [[Cisco Konfig|Konfiguration]]<br /> <br /> ==== Asterisk ====<br /> <br /> [[ Asterisk Konfiguration| Konfiguration]]<br /> <br /> == aquacaetum ==<br /> <br /> [[ Laufende Installationen| Laufende Installationen]]<br /> <br /> [[ Anleitungen| Anleitungen]]<br /> <br /> == Home ==<br /> <br /> [[ Pi config| Pi config]]</div> Michael https://wiki.goedeke.de/index.php?title=Hauptseite&diff=313 Hauptseite 2024-09-26T10:41:32Z <p>Michael: </p> <hr /> <div>== Dedicated Server Hosting by Hetzner (RZ Helsinki) ==<br /> <br /> [[AX41_NVMe #1380159|Server]] <br /> <br /> [[BX40 #145149|Storeage Box]]<br /> <br /> == Der Host und die Gäste ==<br /> <br /> [[Übersicht|Übersicht]]<br /> <br /> *[[AX41_NVMe 1380159|KVM]] <br /> **[[Router2|router2]] <br /> **[[Cloud (Owncloud)|cloud (owncloud)]]<br /> **[[CRM1|crm1]]<br /> **[[CRM|crm]]<br /> **[[Backup (Service)|Backup (Service)]]<br /> **[[web3|web]]<br /> **[[Web4|web4]] <br /> **[[db1|db1]] <br /> **[[Mail2|mail2]] <br /> **[[Om|om]]<br /> <br /> == Das Netzwerk ==<br /> <br /> ==== Interne IP´s mit Zuordnung ====<br /> <br /> [[IP´s_172.16.10.0/24|IP´s 172.16.10.0/24]]<br /> <br /> ==== Externe IP´s mit Zuordnung ====<br /> <br /> [[IP´s_78.47.239.0/29|IP´s 78.47.239.0/29]]<br /> <br /> ==== Links: Extern ====<br /> <br /> [https://mail.aquapool.de MailcowAdmin]<br /> <br /> [https://mail.aquapool.de/sogo/ Webmail]<br /> <br /> [https://crm.aquapool.de CRM]<br /> <br /> [https://cloud.aquapool.de Nextcloud]<br /> <br /> [https://wiki.aquapool.de Wiki]<br /> <br /> ==== Links: intern via VPN ====<br /> <br /> [http://172.16.10.12/backuppc/ BackupPC]<br /> <br /> [http://172.16.10.8/phpmyadmin/ phpMyAdmin]<br /> <br /> == HOWTOs ==<br /> <br /> [[Restart/Start/Shutdown_VMs_-_KVM|Restart/Start/Shutdown VMs - KVM]]<br /> <br /> [[Backup der VMs|Backup der VMs]]<br /> <br /> == Domain Hosting ==<br /> <br /> [[Schlundtech | Schlundtech]]<br /> <br /> == Büro Server 192.168.188.0/24==<br /> <br /> ==== Interne IP´s und Server ====<br /> <br /> [[IP´s_192.168.188.*|IP´s 192.168.188.0/24]]<br /> <br /> ==== Cisco Telefone ====<br /> <br /> [[Cisco Konfig|Konfiguration]]<br /> <br /> ==== Asterisk ====<br /> <br /> [[ Asterisk Konfiguration| Konfiguration]]<br /> <br /> == aquacaetum ==<br /> <br /> [[ Laufende Installationen| Laufende Installationen]]<br /> <br /> [[ Anleitungen| Anleitungen]]<br /> <br /> == Home ==<br /> <br /> [[ Anleitungen| Anleitungen]]</div> Michael https://wiki.goedeke.de/index.php?title=Hauptseite&diff=312 Hauptseite 2024-09-26T10:40:44Z <p>Michael: </p> <hr /> <div>== Dedicated Server Hosting by Hetzner (RZ Helsinki) ==<br /> <br /> [[AX41_NVMe #1380159|Server]] <br /> <br /> [[BX40 #145149|Storeage Box]]<br /> <br /> == Der Host und die Gäste ==<br /> <br /> [[Übersicht|Übersicht]]<br /> <br /> *[[AX41_NVMe 1380159|KVM]] <br /> **[[Router2|router2]] <br /> **[[Cloud (Owncloud)|cloud (owncloud)]]<br /> **[[CRM1|crm1]]<br /> **[[CRM|crm]]<br /> **[[Backup (Service)|Backup (Service)]]<br /> **[[web3|web]]<br /> **[[Web4|web4]] <br /> **[[db1|db1]] <br /> **[[Mail2|mail2]] <br /> **[[Om|om]]<br /> <br /> == Das Netzwerk ==<br /> <br /> ==== Interne IP´s mit Zuordnung ====<br /> <br /> [[IP´s_172.16.10.0/24|IP´s 172.16.10.0/24]]<br /> <br /> ==== Externe IP´s mit Zuordnung ====<br /> <br /> [[IP´s_78.47.239.0/29|IP´s 78.47.239.0/29]]<br /> <br /> ==== Links: Extern ====<br /> <br /> [https://mail.aquapool.de MailcowAdmin]<br /> <br /> [https://mail.aquapool.de/sogo/ Webmail]<br /> <br /> [https://crm.aquapool.de CRM]<br /> <br /> [https://cloud.aquapool.de Nextcloud]<br /> <br /> [https://wiki.aquapool.de Wiki]<br /> <br /> ==== Links: intern via VPN ====<br /> <br /> [http://172.16.10.12/backuppc/ BackupPC]<br /> <br /> [http://172.16.10.8/phpmyadmin/ phpMyAdmin]<br /> <br /> == HOWTOs ==<br /> <br /> [[Restart/Start/Shutdown_VMs_-_KVM|Restart/Start/Shutdown VMs - KVM]]<br /> <br /> [[Backup der VMs|Backup der VMs]]<br /> <br /> == Domain Hosting ==<br /> <br /> [[Schlundtech | Schlundtech]]<br /> <br /> == Büro Server 192.168.188.0/24==<br /> <br /> ==== Interne IP´s und Server ====<br /> <br /> [[IP´s_192.168.188.*|IP´s 192.168.188.0/24]]<br /> <br /> ==== Cisco Telefone ====<br /> <br /> [[Cisco Konfig|Konfiguration]]<br /> <br /> ==== Asterisk ====<br /> <br /> [[ Asterisk Konfiguration| Konfiguration]]<br /> <br /> == aquacaetum ==<br /> <br /> [[ Laufende Installationen| Laufende Installationen]]<br /> <br /> [[ Anleitungen| Anleitungen]]<br /> <br /> ==== Home ====<br /> <br /> [[ Anleitungen| Anleitungen]]</div> Michael https://wiki.goedeke.de/index.php?title=Datei:Serverlandschaft_.png&diff=305 Datei:Serverlandschaft .png 2024-03-29T16:53:06Z <p>Michael: Michael lud eine neue Version von Datei:Serverlandschaft .png hoch</p> <hr /> <div>Serverlandschaft_</div> Michael https://wiki.goedeke.de/index.php?title=IP%C2%B4s_78.47.239.0/29&diff=304 IP´s 78.47.239.0/29 2024-03-29T16:44:01Z <p>Michael: </p> <hr /> <div>{| class=&quot;wikitable&quot;<br /> |+ Externes /29er Subnet<br /> |-<br /> ! Extern !! Host !! Intern<br /> |-<br /> | 95.217.144.6 || kvm2.aquapool.de || <br /> |-<br /> | 78.47.239.0 || router.aquapool.de || 172.16.10.1<br /> |-<br /> | 78.47.239.1 || cloud.aquapool.de || 172.16.10.3<br /> |-<br /> | 78.47.239.2 || web4.aquapool.de || 172.16.10.5<br /> |-<br /> | 78.47.239.3 || mail.aquapool.de || 172.16.10.22<br /> |-<br /> | 78.47.239.4 || om.aquapool.de || 172.16.10.14<br /> |-<br /> | 78.47.239.5 || web.aquapool.de || 172.16.10.6<br /> |-<br /> | 78.47.239.6 || FREI || 172.16.10.20<br /> |-<br /> | 78.47.239.7 || crm.aquapool.de || 172.16.10.7<br /> |-<br /> | 78.47.239.7 || wiki.aquapool.de || 172.16.10.7<br /> |}</div> Michael https://wiki.goedeke.de/index.php?title=IP%C2%B4s_78.47.239.0/29&diff=303 IP´s 78.47.239.0/29 2024-03-23T10:46:14Z <p>Michael: </p> <hr /> <div>{| class=&quot;wikitable&quot;<br /> |+ Externes /29er Subnet<br /> |-<br /> ! Extern !! Host !! Intern<br /> |-<br /> | 95.217.144.6 || kvm2.aquapool.de || <br /> |-<br /> | 78.47.239.0 || router.aquapool.de || 172.16.10.1<br /> |-<br /> | 78.47.239.1 || cloud.aquapool.de || 172.16.10.3<br /> |-<br /> | 78.47.239.2 || web4.aquapool.de || 172.16.10.5<br /> |-<br /> | 78.47.239.3 || mail.aquapool.de || 172.16.10.22<br /> |-<br /> | 78.47.239.4 || om.aquapool.de || 172.16.10.14<br /> |-<br /> | 78.47.239.5 || web.aquapool.de || 172.16.10.6<br /> |-<br /> | 78.47.239.6 || web3.aquapool.de || 172.16.10.20<br /> |-<br /> | 78.47.239.7 || crm.aquapool.de || 172.16.10.7<br /> |-<br /> | 78.47.239.7 || wiki.aquapool.de || 172.16.10.7<br /> |}</div> Michael https://wiki.goedeke.de/index.php?title=CRM&diff=302 CRM 2023-11-22T07:40:54Z <p>Michael: </p> <hr /> <div>== Server ==<br /> <br /> Virtuelle Maschine auf [[AX41 NVMe 1380159|KVM]]<br /> <br /> &lt;pre&gt;Name: crm1<br /> Hipervisor: KVM<br /> Architecture: x86_64<br /> CPU´s: 2<br /> RAM: 2048<br /> VirtIO Disk 1: 15.86 GiB (Source path: /storage/vms/crm_vda.img)<br /> Emulator: /usr/bin/kvm<br /> Chipset: i440FX<br /> Firmware: Bios<br /> <br /> IP Adresse intern: 172.16.10.11 (2001:470:1f0b:563:5054:ff:feec:70ae/64)<br /> <br /> IP Adresse extern: 78.47.239.7<br /> <br /> &lt;/pre&gt;<br /> <br /> == Betriebssystem ==<br /> <br /> SMP Debian 11 Bullseye (2023-01-21)<br /> <br /> == Software ==<br /> <br /> vtiger 7.4 - Erreichbar extern unter https://crm.aquapool.de<br /> <br /> wiki 1.39 - Erreichbar unter https://wiki.aquapool.de</div> Michael https://wiki.goedeke.de/index.php?title=Hauptseite&diff=301 Hauptseite 2023-11-22T07:40:01Z <p>Michael: /* Der Host und die Gäste */</p> <hr /> <div>== Dedicated Server Hosting by Hetzner (RZ Helsinki) ==<br /> <br /> [[AX41_NVMe #1380159|Server]] <br /> <br /> [[BX40 #145149|Storeage Box]]<br /> <br /> == Der Host und die Gäste ==<br /> <br /> [[Übersicht|Übersicht]]<br /> <br /> *[[AX41_NVMe 1380159|KVM]] <br /> **[[Router2|router2]] <br /> **[[Cloud (Owncloud)|cloud (owncloud)]]<br /> **[[CRM1|crm1]]<br /> **[[CRM|crm]]<br /> **[[Backup (Service)|Backup (Service)]]<br /> **[[Web3|web3]] <br /> **[[Web4|web4]] <br /> **[[db1|db1]] <br /> **[[Mail2|mail2]] <br /> **[[Om|om]]<br /> <br /> == Das Netzwerk ==<br /> <br /> ==== Interne IP´s mit Zuordnung ====<br /> <br /> [[IP´s_172.16.10.0/24|IP´s 172.16.10.0/24]]<br /> <br /> ==== Externe IP´s mit Zuordnung ====<br /> <br /> [[IP´s_78.47.239.0/29|IP´s 78.47.239.0/29]]<br /> <br /> ==== Links: Extern ====<br /> <br /> [https://mail.aquapool.de MailcowAdmin]<br /> <br /> [https://mail.aquapool.de/sogo/ Webmail]<br /> <br /> [https://crm.aquapool.de CRM]<br /> <br /> [https://cloud.aquapool.de Nextcloud]<br /> <br /> [https://wiki.aquapool.de Wiki]<br /> <br /> ==== Links: intern via VPN ====<br /> <br /> [http://172.16.10.12/backuppc/ BackupPC]<br /> <br /> [http://172.16.10.8/phpmyadmin/ phpMyAdmin]<br /> <br /> == HOWTOs ==<br /> <br /> [[Restart/Start/Shutdown_VMs_-_KVM|Restart/Start/Shutdown VMs - KVM]]<br /> <br /> [[Backup der VMs|Backup der VMs]]<br /> <br /> == Domain Hosting ==<br /> <br /> [[Schlundtech | Schlundtech]]<br /> <br /> == Büro Server 192.168.188.0/24==<br /> <br /> ==== Interne IP´s und Server ====<br /> <br /> [[IP´s_192.168.188.*|IP´s 192.168.188.0/24]]<br /> <br /> ==== Cisco Telefone ====<br /> <br /> [[Cisco Konfig|Konfiguration]]<br /> <br /> ==== Asterisk ====<br /> <br /> [[ Asterisk Konfiguration| Konfiguration]]<br /> <br /> == aquacaetum ==<br /> <br /> [[ Laufende Installationen| Laufende Installationen]]<br /> <br /> [[ Anleitungen| Anleitungen]]</div> Michael https://wiki.goedeke.de/index.php?title=Hauptseite&diff=300 Hauptseite 2023-11-22T07:39:28Z <p>Michael: /* Der Host und die Gäste */</p> <hr /> <div>== Dedicated Server Hosting by Hetzner (RZ Helsinki) ==<br /> <br /> [[AX41_NVMe #1380159|Server]] <br /> <br /> [[BX40 #145149|Storeage Box]]<br /> <br /> == Der Host und die Gäste ==<br /> <br /> [[Übersicht|Übersicht]]<br /> <br /> *[[AX41_NVMe 1380159|KVM]] <br /> **[[Router2|router2]] <br /> **[[Cloud (Owncloud)|cloud (owncloud)]]<br /> **[[CRM|crm]]<br /> **[[CRM1|crm1]]<br /> **[[Backup (Service)|Backup (Service)]]<br /> **[[Web3|web3]] <br /> **[[Web4|web4]] <br /> **[[db1|db1]] <br /> **[[Mail2|mail2]] <br /> **[[Om|om]]<br /> <br /> == Das Netzwerk ==<br /> <br /> ==== Interne IP´s mit Zuordnung ====<br /> <br /> [[IP´s_172.16.10.0/24|IP´s 172.16.10.0/24]]<br /> <br /> ==== Externe IP´s mit Zuordnung ====<br /> <br /> [[IP´s_78.47.239.0/29|IP´s 78.47.239.0/29]]<br /> <br /> ==== Links: Extern ====<br /> <br /> [https://mail.aquapool.de MailcowAdmin]<br /> <br /> [https://mail.aquapool.de/sogo/ Webmail]<br /> <br /> [https://crm.aquapool.de CRM]<br /> <br /> [https://cloud.aquapool.de Nextcloud]<br /> <br /> [https://wiki.aquapool.de Wiki]<br /> <br /> ==== Links: intern via VPN ====<br /> <br /> [http://172.16.10.12/backuppc/ BackupPC]<br /> <br /> [http://172.16.10.8/phpmyadmin/ phpMyAdmin]<br /> <br /> == HOWTOs ==<br /> <br /> [[Restart/Start/Shutdown_VMs_-_KVM|Restart/Start/Shutdown VMs - KVM]]<br /> <br /> [[Backup der VMs|Backup der VMs]]<br /> <br /> == Domain Hosting ==<br /> <br /> [[Schlundtech | Schlundtech]]<br /> <br /> == Büro Server 192.168.188.0/24==<br /> <br /> ==== Interne IP´s und Server ====<br /> <br /> [[IP´s_192.168.188.*|IP´s 192.168.188.0/24]]<br /> <br /> ==== Cisco Telefone ====<br /> <br /> [[Cisco Konfig|Konfiguration]]<br /> <br /> ==== Asterisk ====<br /> <br /> [[ Asterisk Konfiguration| Konfiguration]]<br /> <br /> == aquacaetum ==<br /> <br /> [[ Laufende Installationen| Laufende Installationen]]<br /> <br /> [[ Anleitungen| Anleitungen]]</div> Michael https://wiki.goedeke.de/index.php?title=Hauptseite&diff=299 Hauptseite 2023-11-22T07:38:39Z <p>Michael: /* Der Host und die Gäste */</p> <hr /> <div>== Dedicated Server Hosting by Hetzner (RZ Helsinki) ==<br /> <br /> [[AX41_NVMe #1380159|Server]] <br /> <br /> [[BX40 #145149|Storeage Box]]<br /> <br /> == Der Host und die Gäste ==<br /> <br /> [[Übersicht|Übersicht]]<br /> <br /> *[[AX41_NVMe 1380159|KVM]] <br /> **[[Router2|router2]] <br /> **[[Cloud (Owncloud)|cloud (owncloud)]]<br /> **[[CRM1|crm1]]<br /> **[[CRM|crm]]<br /> **[[Backup (Service)|Backup (Service)]]<br /> **[[Web3|web3]] <br /> **[[Web4|web4]] <br /> **[[db1|db1]] <br /> **[[Mail2|mail2]] <br /> **[[Om|om]]<br /> <br /> == Das Netzwerk ==<br /> <br /> ==== Interne IP´s mit Zuordnung ====<br /> <br /> [[IP´s_172.16.10.0/24|IP´s 172.16.10.0/24]]<br /> <br /> ==== Externe IP´s mit Zuordnung ====<br /> <br /> [[IP´s_78.47.239.0/29|IP´s 78.47.239.0/29]]<br /> <br /> ==== Links: Extern ====<br /> <br /> [https://mail.aquapool.de MailcowAdmin]<br /> <br /> [https://mail.aquapool.de/sogo/ Webmail]<br /> <br /> [https://crm.aquapool.de CRM]<br /> <br /> [https://cloud.aquapool.de Nextcloud]<br /> <br /> [https://wiki.aquapool.de Wiki]<br /> <br /> ==== Links: intern via VPN ====<br /> <br /> [http://172.16.10.12/backuppc/ BackupPC]<br /> <br /> [http://172.16.10.8/phpmyadmin/ phpMyAdmin]<br /> <br /> == HOWTOs ==<br /> <br /> [[Restart/Start/Shutdown_VMs_-_KVM|Restart/Start/Shutdown VMs - KVM]]<br /> <br /> [[Backup der VMs|Backup der VMs]]<br /> <br /> == Domain Hosting ==<br /> <br /> [[Schlundtech | Schlundtech]]<br /> <br /> == Büro Server 192.168.188.0/24==<br /> <br /> ==== Interne IP´s und Server ====<br /> <br /> [[IP´s_192.168.188.*|IP´s 192.168.188.0/24]]<br /> <br /> ==== Cisco Telefone ====<br /> <br /> [[Cisco Konfig|Konfiguration]]<br /> <br /> ==== Asterisk ====<br /> <br /> [[ Asterisk Konfiguration| Konfiguration]]<br /> <br /> == aquacaetum ==<br /> <br /> [[ Laufende Installationen| Laufende Installationen]]<br /> <br /> [[ Anleitungen| Anleitungen]]</div> Michael https://wiki.goedeke.de/index.php?title=Hauptseite&diff=298 Hauptseite 2023-11-22T07:38:10Z <p>Michael: /* Der Host und die Gäste */</p> <hr /> <div>== Dedicated Server Hosting by Hetzner (RZ Helsinki) ==<br /> <br /> [[AX41_NVMe #1380159|Server]] <br /> <br /> [[BX40 #145149|Storeage Box]]<br /> <br /> == Der Host und die Gäste ==<br /> <br /> [[Übersicht|Übersicht]]<br /> <br /> *[[AX41_NVMe 1380159|KVM]] <br /> **[[Router2|router2]] <br /> **[[Cloud (Owncloud)|cloud (owncloud)]]<br /> **[[CRM|crm1]]<br /> **[[CRM1|crm]]<br /> **[[Backup (Service)|Backup (Service)]]<br /> **[[Web3|web3]] <br /> **[[Web4|web4]] <br /> **[[db1|db1]] <br /> **[[Mail2|mail2]] <br /> **[[Om|om]]<br /> <br /> == Das Netzwerk ==<br /> <br /> ==== Interne IP´s mit Zuordnung ====<br /> <br /> [[IP´s_172.16.10.0/24|IP´s 172.16.10.0/24]]<br /> <br /> ==== Externe IP´s mit Zuordnung ====<br /> <br /> [[IP´s_78.47.239.0/29|IP´s 78.47.239.0/29]]<br /> <br /> ==== Links: Extern ====<br /> <br /> [https://mail.aquapool.de MailcowAdmin]<br /> <br /> [https://mail.aquapool.de/sogo/ Webmail]<br /> <br /> [https://crm.aquapool.de CRM]<br /> <br /> [https://cloud.aquapool.de Nextcloud]<br /> <br /> [https://wiki.aquapool.de Wiki]<br /> <br /> ==== Links: intern via VPN ====<br /> <br /> [http://172.16.10.12/backuppc/ BackupPC]<br /> <br /> [http://172.16.10.8/phpmyadmin/ phpMyAdmin]<br /> <br /> == HOWTOs ==<br /> <br /> [[Restart/Start/Shutdown_VMs_-_KVM|Restart/Start/Shutdown VMs - KVM]]<br /> <br /> [[Backup der VMs|Backup der VMs]]<br /> <br /> == Domain Hosting ==<br /> <br /> [[Schlundtech | Schlundtech]]<br /> <br /> == Büro Server 192.168.188.0/24==<br /> <br /> ==== Interne IP´s und Server ====<br /> <br /> [[IP´s_192.168.188.*|IP´s 192.168.188.0/24]]<br /> <br /> ==== Cisco Telefone ====<br /> <br /> [[Cisco Konfig|Konfiguration]]<br /> <br /> ==== Asterisk ====<br /> <br /> [[ Asterisk Konfiguration| Konfiguration]]<br /> <br /> == aquacaetum ==<br /> <br /> [[ Laufende Installationen| Laufende Installationen]]<br /> <br /> [[ Anleitungen| Anleitungen]]</div> Michael https://wiki.goedeke.de/index.php?title=CRM1&diff=297 CRM1 2023-11-22T07:36:46Z <p>Michael: /* Software */</p> <hr /> <div>== Server ==<br /> <br /> Virtuelle Maschine auf [[AX41 NVMe 1380159|KVM]]<br /> <br /> &lt;pre&gt;Name: crm1<br /> Hipervisor: KVM<br /> Architecture: x86_64<br /> CPU´s: 2<br /> RAM: 2048<br /> VirtIO Disk 1: 20 GiB (Source path: /storage/vms/crm1.qcow2)<br /> Emulator: /usr/bin/kvm<br /> Chipset: pc-q35-7.2<br /> Firmware: Bios<br /> <br /> IP Adresse intern: 172.16.10.7 (2001:470:1f0b:563:5054:ff:feec:70ae/64)<br /> <br /> IP Adresse extern: 78.47.239.7<br /> <br /> &lt;/pre&gt;<br /> <br /> == Betriebssystem ==<br /> <br /> SMP Debian 12.2 Bookworm (2023-01-21)<br /> <br /> == Software ==<br /> <br /> vtiger 8.0 - Erreichbar extern unter https://crm.aquapool.de<br /> &lt;pre&gt;Folgende Änderungen wurden nach der Installation vorgenommen:<br /> <br /> chown www-data:www-data -R /var/www/html/vtigercrm/<br /> <br /> aus der alten Installation müssen folgende Verzeichnisse/Dateien in die neue Installation kopiert bzw. migriert werden:<br /> <br /> Verzeichnisse<br /> 'user_privileges' und dann 'chmod -R 755 /var/www/html/vtigercrm/user_privileges/', '640', 'storeage'<br /> <br /> Dateien<br /> 'layouts/v7/modules/Users/Login.tpl', 'layouts/v7/resources/Images/login-background.jpg', 'layouts/v7/resources/Images/vtiger.jpg', 'layouts/v7/resources/Images/vtiger.png', 'test/logo/apd_logo.jpg', 'test/logo/aquapool_logo.png', 'languages/de_de/vtiger.php', 'layouts/v7/modules/Inventory/partials/LineItemsContents.tpl'<br /> <br /> vtiger8 läuft z.Zt. nur vernünftig unter PHP7.4. Zum testen von PHP8.2 sind hier die Befehle zum Umschalten erklärt: https://ostechnix.com/how-to-switch-between-multiple-php-versions-in-ubuntu/<br /> &lt;/pre&gt;<br /> <br /> wiki 1.39 - Erreichbar unter https://wiki.aquapool.de</div> Michael https://wiki.goedeke.de/index.php?title=CRM1&diff=296 CRM1 2023-11-17T14:21:40Z <p>Michael: /* Software */</p> <hr /> <div>== Server ==<br /> <br /> Virtuelle Maschine auf [[AX41 NVMe 1380159|KVM]]<br /> <br /> &lt;pre&gt;Name: crm1<br /> Hipervisor: KVM<br /> Architecture: x86_64<br /> CPU´s: 2<br /> RAM: 2048<br /> VirtIO Disk 1: 20 GiB (Source path: /storage/vms/crm1.qcow2)<br /> Emulator: /usr/bin/kvm<br /> Chipset: pc-q35-7.2<br /> Firmware: Bios<br /> <br /> IP Adresse intern: 172.16.10.7 (2001:470:1f0b:563:5054:ff:feec:70ae/64)<br /> <br /> IP Adresse extern: 78.47.239.7<br /> <br /> &lt;/pre&gt;<br /> <br /> == Betriebssystem ==<br /> <br /> SMP Debian 12.2 Bookworm (2023-01-21)<br /> <br /> == Software ==<br /> <br /> vtiger 8.0 - Erreichbar extern unter https://crm.aquapool.de<br /> &lt;pre&gt;Folgende Änderungen wurden nach der Installation vorgenommen:<br /> <br /> chown www-data:www-data -R /var/www/html/vtigercrm/<br /> <br /> aus der alten Installation müssen folgende Verzeichnisse/Dateien in die neue Installation kopiert bzw. migriert werden:<br /> <br /> Verzeichnisse<br /> 'user_privileges' und dann 'chmod -R 755 /var/www/html/vtigercrm/user_privileges/', '640', 'storeage'<br /> <br /> Dateien<br /> 'layouts/v7/modules/Users/Login.tpl', 'layouts/v7/resources/Images/login-background.jpg', 'layouts/v7/resources/Images/vtiger.jpg', 'layouts/v7/resources/Images/vtiger.png', 'test/logo/apd_logo.jpg', 'test/logo/aquapool_logo.png', 'languages/de_de/vtiger.php', 'layouts/v7/modules/Inventory/partials/LineItemsContents.tpl'<br /> <br /> &lt;/pre&gt;<br /> <br /> wiki 1.39 - Erreichbar unter https://wiki.aquapool.de</div> Michael https://wiki.goedeke.de/index.php?title=CRM1&diff=295 CRM1 2023-11-17T14:19:55Z <p>Michael: /* Software */</p> <hr /> <div>== Server ==<br /> <br /> Virtuelle Maschine auf [[AX41 NVMe 1380159|KVM]]<br /> <br /> &lt;pre&gt;Name: crm1<br /> Hipervisor: KVM<br /> Architecture: x86_64<br /> CPU´s: 2<br /> RAM: 2048<br /> VirtIO Disk 1: 20 GiB (Source path: /storage/vms/crm1.qcow2)<br /> Emulator: /usr/bin/kvm<br /> Chipset: pc-q35-7.2<br /> Firmware: Bios<br /> <br /> IP Adresse intern: 172.16.10.7 (2001:470:1f0b:563:5054:ff:feec:70ae/64)<br /> <br /> IP Adresse extern: 78.47.239.7<br /> <br /> &lt;/pre&gt;<br /> <br /> == Betriebssystem ==<br /> <br /> SMP Debian 12.2 Bookworm (2023-01-21)<br /> <br /> == Software ==<br /> <br /> vtiger 8.0 - Erreichbar extern unter https://crm.aquapool.de<br /> &lt;pre&gt;Folgende Änderungen wurden nach der Installation vorgenommen:<br /> <br /> chown www-data:www-data -R /var/www/html/vtigercrm/<br /> <br /> aus der alten Installation müssen folgende Verzeichnisse/Dateien in die neue Installation kopiert bzw. migriert werden:<br /> <br /> Verzeichnisse<br /> 'user_privileges' und dann 'chmod -R 755 /var/www/html/vtigercrm/user_privileges/', '640', 'storeage'<br /> <br /> Dateien<br /> 'layouts/v7/modules/Users/Login.tpl', 'layouts/v7/resources/Images/login-background.jpg', 'layouts/v7/resources/Images/vtiger.jpg', 'layouts/v7/resources/Images/vtiger.png', 'test/logo/apd_logo.jpg', 'test/logo/aquapool_logo.png' 'languages/de_de/vtiger.php' 'layouts/v7/modules/Inventory/partials/LineItemsContents.tpl'<br /> <br /> &lt;/pre&gt;<br /> <br /> wiki 1.39 - Erreichbar unter https://wiki.aquapool.de</div> Michael https://wiki.goedeke.de/index.php?title=%C3%9Cbersicht&diff=294 Übersicht 2023-11-17T07:32:46Z <p>Michael: </p> <hr /> <div>[[Datei:Serverlandschaft .png|mini|server]]</div> Michael https://wiki.goedeke.de/index.php?title=%C3%9Cbersicht&diff=293 Übersicht 2023-11-17T07:31:54Z <p>Michael: Die Seite wurde geleert.</p> <hr /> <div></div> Michael https://wiki.goedeke.de/index.php?title=%C3%9Cbersicht&diff=292 Übersicht 2023-11-17T07:31:35Z <p>Michael: </p> <hr /> <div>[[Datei:Serverlandschaft .png|mini]]<br /> [[Datei:Serverlandschaft_.png|rahmenlos]]</div> Michael https://wiki.goedeke.de/index.php?title=%C3%9Cbersicht&diff=291 Übersicht 2023-11-17T06:53:02Z <p>Michael: </p> <hr /> <div>[[Datei:Serverlandschaft_.png|rahmenlos]]</div> Michael https://wiki.goedeke.de/index.php?title=Datei:Serverlandschaft_.png&diff=290 Datei:Serverlandschaft .png 2023-11-17T06:46:15Z <p>Michael: </p> <hr /> <div>Serverlandschaft_</div> Michael https://wiki.goedeke.de/index.php?title=IP%C2%B4s_78.47.239.0/29&diff=289 IP´s 78.47.239.0/29 2023-11-09T07:47:26Z <p>Michael: </p> <hr /> <div>{| class=&quot;wikitable&quot;<br /> |+ Externes /29er Subnet<br /> |-<br /> ! Extern !! Host !! Intern<br /> |-<br /> | 95.217.144.6 || kvm2.aquapool.de || <br /> |-<br /> | 78.47.239.0 || router.aquapool.de || 172.16.10.1<br /> |-<br /> | 78.47.239.1 || cloud.aquapool.de || 172.16.10.3<br /> |-<br /> | 78.47.239.2 || web4.aquapool.de || 172.16.10.5<br /> |-<br /> | 78.47.239.3 || mail.aquapool.de || 172.16.10.22<br /> |-<br /> | 78.47.239.4 || om.aquapool.de || 172.16.10.14<br /> |-<br /> | 78.47.239.5 || web3.aquapool.de || 172.16.10.6<br /> |-<br /> | 78.47.239.6 || web3.aquapool.de || 172.16.10.20<br /> |-<br /> | 78.47.239.7 || crm.aquapool.de || 172.16.10.7<br /> |-<br /> | 78.47.239.7 || wiki.aquapool.de || 172.16.10.7<br /> |}</div> Michael https://wiki.goedeke.de/index.php?title=IP%C2%B4s_78.47.239.0/29&diff=288 IP´s 78.47.239.0/29 2023-11-09T07:46:23Z <p>Michael: </p> <hr /> <div>{| class=&quot;wikitable&quot;<br /> |+ Externes /29er Subnet<br /> |-<br /> ! Extern !! Host !! Intern<br /> |-<br /> | 95.217.144.6 || kvm2.aquapool.de || <br /> |-<br /> | 78.47.239.0 || router.aquapool.de || 172.16.10.1<br /> |-<br /> | 78.47.239.1 || cloud.aquapool.de || 172.16.10.3<br /> |-<br /> | 78.47.239.2 || web4.aquapool.de || 172.16.10.5<br /> |-<br /> | 78.47.239.3 || mail.aquapool.de || 172.16.10.22<br /> |-<br /> | 78.47.239.4 || om.aquapool.de || 172.16.10.14<br /> |-<br /> | 78.47.239.5 || web3.aquapool.de || 172.16.10.6<br /> |-<br /> | 78.47.239.6 || web3.aquapool.de || 172.16.10.20<br /> |-<br /> | 78.47.239.7 || crm.aquapool.de || 172.16.10.7<br /> |}</div> Michael https://wiki.goedeke.de/index.php?title=CRM1&diff=287 CRM1 2023-11-07T18:42:17Z <p>Michael: /* Software */</p> <hr /> <div>== Server ==<br /> <br /> Virtuelle Maschine auf [[AX41 NVMe 1380159|KVM]]<br /> <br /> &lt;pre&gt;Name: crm1<br /> Hipervisor: KVM<br /> Architecture: x86_64<br /> CPU´s: 2<br /> RAM: 2048<br /> VirtIO Disk 1: 20 GiB (Source path: /storage/vms/crm1.qcow2)<br /> Emulator: /usr/bin/kvm<br /> Chipset: pc-q35-7.2<br /> Firmware: Bios<br /> <br /> IP Adresse intern: 172.16.10.7 (2001:470:1f0b:563:5054:ff:feec:70ae/64)<br /> <br /> IP Adresse extern: 78.47.239.7<br /> <br /> &lt;/pre&gt;<br /> <br /> == Betriebssystem ==<br /> <br /> SMP Debian 12.2 Bookworm (2023-01-21)<br /> <br /> == Software ==<br /> <br /> vtiger 8.0 - Erreichbar extern unter https://crm.aquapool.de<br /> &lt;pre&gt;Folgende Änderungen wurden nach der Installation vorgenommen:<br /> <br /> chown www-data:www-data -R /var/www/html/vtigercrm/<br /> <br /> aus der alten Installation müssen folgende Verzeichnisse/Dateien in die neue Installation kopiert bzw. migriert werden:<br /> <br /> Verzeichnisse<br /> 'user_privileges' und dann 'chmod -R 755 /var/www/html/vtigercrm/user_privileges/', '640', 'storeage'<br /> <br /> Dateien<br /> 'layouts/v7/modules/Users/Login.tpl', 'layouts/v7/resources/Images/login-background.jpg', 'layouts/v7/resources/Images/vtiger.jpg', 'layouts/v7/resources/Images/vtiger.png', 'test/logo/apd_logo.jpg', 'test/logo/aquapool_logo.png' 'languages/de_de/vtiger.php'<br /> <br /> &lt;/pre&gt;<br /> <br /> wiki 1.39 - Erreichbar unter https://wiki.aquapool.de</div> Michael https://wiki.goedeke.de/index.php?title=CRM1&diff=286 CRM1 2023-11-07T18:24:16Z <p>Michael: /* Software */</p> <hr /> <div>== Server ==<br /> <br /> Virtuelle Maschine auf [[AX41 NVMe 1380159|KVM]]<br /> <br /> &lt;pre&gt;Name: crm1<br /> Hipervisor: KVM<br /> Architecture: x86_64<br /> CPU´s: 2<br /> RAM: 2048<br /> VirtIO Disk 1: 20 GiB (Source path: /storage/vms/crm1.qcow2)<br /> Emulator: /usr/bin/kvm<br /> Chipset: pc-q35-7.2<br /> Firmware: Bios<br /> <br /> IP Adresse intern: 172.16.10.7 (2001:470:1f0b:563:5054:ff:feec:70ae/64)<br /> <br /> IP Adresse extern: 78.47.239.7<br /> <br /> &lt;/pre&gt;<br /> <br /> == Betriebssystem ==<br /> <br /> SMP Debian 12.2 Bookworm (2023-01-21)<br /> <br /> == Software ==<br /> <br /> vtiger 8.0 - Erreichbar extern unter https://crm.aquapool.de<br /> &lt;pre&gt;Folgende Änderungen wurden nach der Installation vorgenommen:<br /> <br /> chown www-data:www-data -R /var/www/html/vtigercrm/<br /> <br /> aus der alten Installation müssen folgende Verzeichnisse/Dateien in die neue Installation kopiert werden:<br /> <br /> Verzeichnisse<br /> 'user_privileges' und dann 'chmod -R 755 /var/www/html/vtigercrm/user_privileges/', '640', 'storeage'<br /> <br /> Dateien<br /> 'layouts/v7/modules/Users/Login.tpl', 'layouts/v7/resources/Images/login-background.jpg', 'layouts/v7/resources/Images/vtiger.jpg', 'layouts/v7/resources/Images/vtiger.png', 'test/logo/apd_logo.jpg', 'test/logo/aquapool_logo.png' 'languages/de_de/vtiger.php'<br /> <br /> &lt;/pre&gt;<br /> <br /> wiki 1.39 - Erreichbar unter https://wiki.aquapool.de</div> Michael https://wiki.goedeke.de/index.php?title=CRM1&diff=285 CRM1 2023-11-07T17:51:23Z <p>Michael: Die Seite wurde neu angelegt: „== Server == Virtuelle Maschine auf KVM &lt;pre&gt;Name: crm1 Hipervisor: KVM Architecture: x86_64 CPU´s: 2 RAM: 2048 VirtIO Disk 1: 20 GiB (Source path: /storage/vms/crm1.qcow2) Emulator: /usr/bin/kvm Chipset: pc-q35-7.2 Firmware: Bios IP Adresse intern: 172.16.10.7 (2001:470:1f0b:563:5054:ff:feec:70ae/64) IP Adresse extern: 78.47.239.7 &lt;/pre&gt; == Betriebssystem == SMP Debian 12.2 Bookworm (2023-01-21) == Software == vtiger 8.0 -…“</p> <hr /> <div>== Server ==<br /> <br /> Virtuelle Maschine auf [[AX41 NVMe 1380159|KVM]]<br /> <br /> &lt;pre&gt;Name: crm1<br /> Hipervisor: KVM<br /> Architecture: x86_64<br /> CPU´s: 2<br /> RAM: 2048<br /> VirtIO Disk 1: 20 GiB (Source path: /storage/vms/crm1.qcow2)<br /> Emulator: /usr/bin/kvm<br /> Chipset: pc-q35-7.2<br /> Firmware: Bios<br /> <br /> IP Adresse intern: 172.16.10.7 (2001:470:1f0b:563:5054:ff:feec:70ae/64)<br /> <br /> IP Adresse extern: 78.47.239.7<br /> <br /> &lt;/pre&gt;<br /> <br /> == Betriebssystem ==<br /> <br /> SMP Debian 12.2 Bookworm (2023-01-21)<br /> <br /> == Software ==<br /> <br /> vtiger 8.0 - Erreichbar extern unter https://crm.aquapool.de<br /> <br /> wiki 1.39 - Erreichbar unter https://wiki.aquapool.de</div> Michael https://wiki.goedeke.de/index.php?title=Hauptseite&diff=284 Hauptseite 2023-11-07T17:40:55Z <p>Michael: /* Der Host und die Gäste */</p> <hr /> <div>== Dedicated Server Hosting by Hetzner (RZ Helsinki) ==<br /> <br /> [[AX41_NVMe #1380159|Server]] <br /> <br /> [[BX40 #145149|Storeage Box]]<br /> <br /> == Der Host und die Gäste ==<br /> <br /> [[Übersicht|Übersicht]]<br /> <br /> *[[AX41_NVMe 1380159|KVM]] <br /> **[[Router2|router2]] <br /> **[[Cloud (Owncloud)|cloud (owncloud)]]<br /> **[[CRM|crm]]<br /> **[[CRM1|crm1]]<br /> **[[Backup (Service)|Backup (Service)]]<br /> **[[Web3|web3]] <br /> **[[Web4|web4]] <br /> **[[db1|db1]] <br /> **[[Mail2|mail2]] <br /> **[[Om|om]]<br /> <br /> == Das Netzwerk ==<br /> <br /> ==== Interne IP´s mit Zuordnung ====<br /> <br /> [[IP´s_172.16.10.0/24|IP´s 172.16.10.0/24]]<br /> <br /> ==== Externe IP´s mit Zuordnung ====<br /> <br /> [[IP´s_78.47.239.0/29|IP´s 78.47.239.0/29]]<br /> <br /> ==== Links: Extern ====<br /> <br /> [https://mail.aquapool.de MailcowAdmin]<br /> <br /> [https://mail.aquapool.de/sogo/ Webmail]<br /> <br /> [https://crm.aquapool.de CRM]<br /> <br /> [https://cloud.aquapool.de Nextcloud]<br /> <br /> [https://wiki.aquapool.de Wiki]<br /> <br /> ==== Links: intern via VPN ====<br /> <br /> [http://172.16.10.12/backuppc/ BackupPC]<br /> <br /> [http://172.16.10.8/phpmyadmin/ phpMyAdmin]<br /> <br /> == HOWTOs ==<br /> <br /> [[Restart/Start/Shutdown_VMs_-_KVM|Restart/Start/Shutdown VMs - KVM]]<br /> <br /> [[Backup der VMs|Backup der VMs]]<br /> <br /> == Domain Hosting ==<br /> <br /> [[Schlundtech | Schlundtech]]<br /> <br /> == Büro Server 192.168.188.0/24==<br /> <br /> ==== Interne IP´s und Server ====<br /> <br /> [[IP´s_192.168.188.*|IP´s 192.168.188.0/24]]<br /> <br /> ==== Cisco Telefone ====<br /> <br /> [[Cisco Konfig|Konfiguration]]<br /> <br /> ==== Asterisk ====<br /> <br /> [[ Asterisk Konfiguration| Konfiguration]]<br /> <br /> == aquacaetum ==<br /> <br /> [[ Laufende Installationen| Laufende Installationen]]<br /> <br /> [[ Anleitungen| Anleitungen]]</div> Michael https://wiki.goedeke.de/index.php?title=AX41_NVMe_1380159&diff=282 AX41 NVMe 1380159 2023-11-06T07:34:10Z <p>Michael: /* Netzwerkkonfiguration */</p> <hr /> <div><br /> == Server ==<br /> <br /> KVM &quot;Kernel-based Virtual Machine&quot; zur Virtualisierung von VM´s<br /> <br /> == Betriebssystem ==<br /> <br /> Debian 10.0 (Buster) 64Bit<br /> <br /> === Netzwerkkonfiguration ===<br /> <br /> /etc/network/interfaces<br /> <br /> &lt;pre&gt;### Hetzner Online GmbH installimage<br /> <br /> source /etc/network/interfaces.d/*<br /> <br /> auto lo<br /> iface lo inet loopback<br /> iface lo inet6 loopback<br /> <br /> auto enp34s0<br /> iface enp34s0 inet static<br /> address 95.217.144.66<br /> netmask 255.255.255.192<br /> gateway 95.217.144.65<br /> # route 95.217.144.64/26 via 95.217.144.65<br /> up route add -net 95.217.144.64 netmask 255.255.255.192 gw 95.217.144.65 dev enp34s0<br /> <br /> iface enp34s0 inet6 static<br /> address 2a01:4f9:4a:4ce3::2<br /> netmask 64<br /> gateway fe80::1<br /> <br /> auto br0<br /> <br /> iface br0 inet static<br /> address 10.12.3.2<br /> netmask 255.255.255.252<br /> bridge_stp off<br /> bridge_waitport 0<br /> bridge_fd 0<br /> pre-up /sbin/brctl addbr br0<br /> pre-up /sbin/brctl addbr br1<br /> pre-up /sbin/ip link set br1 up<br /> post-up /sbin/ip route add 78.47.239.0/29 via 10.12.3.1<br /> post-up /usr/sbin/iptables -t nat -A POSTROUTING -s 10.12.3.2/30 -j MASQUERADE <br /> &lt;/pre&gt;<br /> <br /> Virtuelle Maschinen werden automatisch auf KVM gebridged. Dadurch können diese vom [[Router|router]] mit Netz versorgt werden.<br /> <br /> === Bestandteil QEMU ===<br /> <br /> Quick Emulator (Virtualisierungssoftware)<br /> <br /> == Sonstiges ==<br /> <br /> Kommandozeilen Tool für die KVM-Verwaltung:<br /> <br /> virsh<br /> <br /> oder via ui mit dem<br /> <br /> virt-manager<br /> Der Remote-Aufruf des virt-manager erfolgt folgendermaßen: Auf dem Mac XQuarz starten, dann via Konsole &quot;ssh -X root@kvm2.aquapool.de&quot;. Danach starten des virt-managers mit &quot;virt-manager -c qemu:///system&quot;. Der Screen wird vom KVM auf den Mac übertragen. Beim Setup einer neuen VM muss bei Network Interface als Bridge unter &quot;shared device&quot; (im Menü ganz unten) &quot;br1&quot; eingetragen werden!<br /> <br /> === Apparmor ===<br /> <br /> BUGFIX<br /> <br /> Da apparmor verhindert, dass keine snapshots der VM´s via backup erstellt werden können, wurde folgender fix eingebaut:<br /> <br /> &lt;pre&gt;/etc/apparmor.d/abstractions/libvirt-qemu<br /> <br /> # access to snapshots vm´s<br /> /storeage/vms/* rwk,<br /> /storeage/vms/ rwk,<br /> <br /> &lt;/pre&gt;<br /> Dieser Fix funktioniert allerdings nicht für das erste Backup einer VM. Hier muss vorab folgendes ausgeführt werden um Apparmor für die Session zu deaktivieren:&lt;pre&gt;aa-teardown&lt;/pre&gt;<br /> Nach Beendigung des Backups prüfen, ob Apparmor wieder enabled ist. &lt;pre&gt;aa-status&lt;/pre&gt; <br /> <br /> Ggf. folgendes ausführen: &lt;pre&gt;aa-enabled&lt;/pre&gt;</div> Michael https://wiki.goedeke.de/index.php?title=Router2&diff=280 Router2 2023-11-03T07:34:09Z <p>Michael: /* Betriebssystem */</p> <hr /> <div><br /> == Server ==<br /> <br /> Virtuelle Maschine auf [[AX41 NVMe 1380159|KVM]]<br /> <br /> &lt;pre&gt;Hipervisor: KVM<br /> Architecture: x86_64<br /> CPU: 1<br /> RAM: 1024<br /> Virtual Disk: 10.00 GiB<br /> Source path: /storage/vms/router2.qcow2<br /> &lt;/pre&gt;<br /> <br /> == Betriebssystem ==<br /> <br /> &lt;pre&gt;mg@router.aquapool.de:~$ show version<br /> Version: VyOS 1.4-rolling-202303030317<br /> Release train: current<br /> <br /> Built by: autobuild@vyos.net<br /> Built on: Fri 03 Mar 2023 03:17 UTC<br /> Build UUID: 0ce89af1-6db9-4940-9ee6-6be3f1d7a079<br /> Build commit ID: afdaac1012d7b1<br /> <br /> Architecture: x86_64<br /> Boot via: installed image<br /> System type: guest<br /> <br /> Hardware vendor: QEMU<br /> Hardware model: Standard PC (Q35 + ICH9, 2009)<br /> Hardware S/N: <br /> Hardware UUID: f7fddb6d-e8b9-4cfd-81d6-1bbe2e58bb54<br /> <br /> Copyright: VyOS maintainers and contributors<br /> &lt;/pre&gt;<br /> <br /> === Netzwerkkonfiguration in /config/config.boot ===<br /> &lt;pre&gt;<br /> firewall {<br /> all-ping enable<br /> broadcast-ping disable<br /> config-trap disable<br /> interface tun2 {<br /> in {<br /> ipv6-name tun2_in<br /> }<br /> }<br /> ipv6-name tun2_in {<br /> default-action reject<br /> rule 1 {<br /> action accept<br /> protocol ipv6-icmp<br /> }<br /> rule 2 {<br /> action accept<br /> protocol all<br /> state {<br /> established enable<br /> related enable<br /> }<br /> }<br /> rule 3 {<br /> action accept<br /> destination {<br /> address 2001:470:1f0b:563::15<br /> port 80<br /> }<br /> protocol tcp<br /> state {<br /> new enable<br /> }<br /> }<br /> rule 4 {<br /> action accept<br /> destination {<br /> address 2001:470:1f0b:563::15<br /> port 443<br /> }<br /> protocol tcp<br /> state {<br /> new enable<br /> }<br /> }<br /> }<br /> ipv6-receive-redirects disable<br /> ipv6-src-route disable<br /> ip-src-route disable<br /> log-martians enable<br /> receive-redirects disable<br /> send-redirects enable<br /> source-validation disable<br /> syn-cookies enable<br /> twa-hazards-protection disable<br /> }<br /> interfaces {<br /> ethernet eth0 {<br /> address 10.12.3.1/29<br /> duplex auto<br /> hw-id 52:54:00:64:19:ea<br /> offload {<br /> gro<br /> gso<br /> sg<br /> tso<br /> }<br /> }<br /> ethernet eth1 {<br /> address 172.16.10.1/24<br /> address 2001:470:1f0b:563::1/64<br /> hw-id 52:54:00:c1:6f:c2<br /> ipv6 {<br /> dup-addr-detect-transmits 1<br /> }<br /> offload {<br /> gro<br /> gso<br /> sg<br /> tso<br /> }<br /> speed auto<br /> }<br /> loopback lo {<br /> address 78.47.239.0/32<br /> address 78.47.239.1/32<br /> address 78.47.239.2/32<br /> address 78.47.239.3/32<br /> address 78.47.239.4/32<br /> address 78.47.239.5/32<br /> address 78.47.239.6/32<br /> address 78.47.239.7/32<br /> }<br /> openvpn vtun0 {<br /> mode server<br /> openvpn-option duplicate-cn<br /> protocol tcp-passive<br /> server {<br /> push-route 172.16.10.0/24 {<br /> }<br /> subnet 172.16.11.0/25<br /> }<br /> tls {<br /> ca-certificate openvpn_vtun0_1<br /> certificate openvpn_vtun0<br /> dh-params openvpn_vtun0<br /> }<br /> }<br /> tunnel tun0 {<br /> address 172.16.43.8/32<br /> address 172.16.43.8/31<br /> encapsulation gre<br /> remote 188.40.111.111<br /> source-address 78.47.239.0<br /> }<br /> tunnel tun1 {<br /> address 172.16.91.1/30<br /> encapsulation gre<br /> remote 78.46.79.155<br /> source-address 78.47.239.0<br /> }<br /> tunnel tun2 {<br /> address 2001:470:1f0a:563::2/64<br /> description &quot;HE.NET IPv6 Tunnel&quot;<br /> encapsulation sit<br /> remote 216.66.80.30<br /> source-address 78.47.239.0<br /> }<br /> wireguard wg0 {<br /> address 172.16.12.1/24<br /> peer michael {<br /> allowed-ips 192.168.178.0/24<br /> allowed-ips 192.168.188.0/24<br /> allowed-ips 172.16.12.2/32<br /> public-key 0G3hmNjYbE9/fcbqZGF+LG5r/uaZ5r1CJFyEkrEOSQc=<br /> }<br /> peer njk {<br /> allowed-ips 192.168.0.0/24<br /> allowed-ips 172.16.12.3/32<br /> public-key ugz2GJdirFGMCcI6pdTdEjca19LWIY3rzO+xwplbGzo=<br /> }<br /> port 51280<br /> private-key SBnPetaY1+xY7WAj5UvgbTq8uRdE4e3baedepnwS7GA=<br /> }<br /> }<br /> nat {<br /> destination {<br /> rule 2 {<br /> description mail2<br /> destination {<br /> address 78.47.239.3<br /> port 443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.22<br /> port 443<br /> }<br /> }<br /> rule 3 {<br /> description &quot;owncloud http&quot;<br /> destination {<br /> address 78.47.239.1<br /> port 80<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.3<br /> port 80<br /> }<br /> }<br /> rule 4 {<br /> description &quot;owncloud https&quot;<br /> destination {<br /> address 78.47.239.1<br /> port 443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.3<br /> port 443<br /> }<br /> }<br /> rule 5 {<br /> destination {<br /> address 78.47.239.5<br /> port 80<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.6<br /> port 80<br /> }<br /> }<br /> rule 6 {<br /> destination {<br /> address 78.47.239.5<br /> port 22222<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.6<br /> port 22<br /> }<br /> }<br /> rule 7 {<br /> destination {<br /> address 78.47.239.5<br /> port 443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.6<br /> port 443<br /> }<br /> }<br /> rule 8 {<br /> destination {<br /> address 78.47.239.5<br /> port 9443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.6<br /> port 9443<br /> }<br /> }<br /> rule 9 {<br /> destination {<br /> address 78.47.239.5<br /> port 8443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.6<br /> port 8443<br /> }<br /> }<br /> rule 10 {<br /> destination {<br /> address 78.47.239.5<br /> port 20<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.6<br /> port 20<br /> }<br /> }<br /> rule 11 {<br /> destination {<br /> address 78.47.239.5<br /> port 21<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.6<br /> port 21<br /> }<br /> }<br /> rule 12 {<br /> destination {<br /> address 78.47.239.5<br /> port 12000-13000<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.6<br /> port 12000-13000<br /> }<br /> }<br /> rule 13 {<br /> destination {<br /> address 78.47.239.2<br /> port 80<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.5<br /> port 80<br /> }<br /> }<br /> rule 14 {<br /> destination {<br /> address 78.47.239.2<br /> port 443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.5<br /> port 443<br /> }<br /> }<br /> rule 15 {<br /> destination {<br /> address 78.47.239.2<br /> port 6922<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.5<br /> port 22<br /> }<br /> }<br /> rule 16 {<br /> destination {<br /> address 78.47.239.3<br /> port 993<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.22<br /> port 993<br /> }<br /> }<br /> rule 17 {<br /> destination {<br /> address 78.47.239.3<br /> port 587<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.22<br /> port 587<br /> }<br /> }<br /> rule 18 {<br /> destination {<br /> address 78.47.239.4<br /> port 25<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.10<br /> port 25<br /> }<br /> }<br /> rule 19 {<br /> destination {<br /> address 78.47.239.4<br /> port 110<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.10<br /> port 110<br /> }<br /> }<br /> rule 20 {<br /> destination {<br /> address 78.47.239.4<br /> port 443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.10<br /> port 443<br /> }<br /> }<br /> rule 21 {<br /> destination {<br /> address 78.47.239.4<br /> port 80<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.10<br /> port 80<br /> }<br /> }<br /> rule 22 {<br /> destination {<br /> address 78.47.239.4<br /> port 143<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.10<br /> port 143<br /> }<br /> }<br /> rule 23 {<br /> destination {<br /> address 78.47.239.4<br /> port 993<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.10<br /> port 993<br /> }<br /> }<br /> rule 24 {<br /> destination {<br /> address 78.47.239.4<br /> port 995<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.10<br /> port 995<br /> }<br /> }<br /> rule 25 {<br /> destination {<br /> address 78.47.239.7<br /> port 443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.11<br /> port 443<br /> }<br /> }<br /> rule 26 {<br /> destination {<br /> address 78.47.239.3<br /> port 7080<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.22<br /> port 80<br /> }<br /> }<br /> rule 27 {<br /> destination {<br /> address 78.47.239.6<br /> port 80<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.20<br /> port 80<br /> }<br /> }<br /> rule 28 {<br /> destination {<br /> address 78.47.239.6<br /> port 443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.20<br /> port 443<br /> }<br /> }<br /> rule 29 {<br /> destination {<br /> address 78.47.239.0<br /> port 80<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.13<br /> port 80<br /> }<br /> }<br /> rule 30 {<br /> destination {<br /> address 78.47.239.0<br /> port 443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.13<br /> port 443<br /> }<br /> }<br /> rule 31 {<br /> destination {<br /> address 78.47.239.0<br /> port 2223<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.13<br /> port 22<br /> }<br /> }<br /> rule 32 {<br /> description mail2<br /> destination {<br /> address 78.47.239.3<br /> port 80<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.22<br /> port 80<br /> }<br /> }<br /> rule 33 {<br /> description &quot;crm http&quot;<br /> destination {<br /> address 78.47.239.7<br /> port 80<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.11<br /> port 80<br /> }<br /> }<br /> rule 34 {<br /> description mail2<br /> destination {<br /> address 78.47.239.3<br /> port 25<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.22<br /> port 25<br /> }<br /> }<br /> rule 35 {<br /> description mail2<br /> destination {<br /> address 78.47.239.3<br /> port 143<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.22<br /> port 143<br /> }<br /> }<br /> rule 36 {<br /> description mail2<br /> destination {<br /> address 78.47.239.3<br /> port 465<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.22<br /> port 465<br /> }<br /> }<br /> rule 40 {<br /> description swimflow<br /> destination {<br /> address 78.47.239.4<br /> port 443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.14<br /> port 443<br /> }<br /> }<br /> rule 41 {<br /> description swimflow<br /> destination {<br /> address 78.47.239.4<br /> port 80<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.14<br /> port 80<br /> }<br /> }<br /> }<br /> source {<br /> rule 100 {<br /> outbound-interface eth0<br /> source {<br /> address 172.16.10.22/32<br /> }<br /> translation {<br /> address 78.47.239.3<br /> }<br /> }<br /> rule 200 {<br /> outbound-interface eth0<br /> source {<br /> address 172.16.10.0/24<br /> }<br /> translation {<br /> address 78.47.239.1<br /> }<br /> }<br /> rule 201 {<br /> outbound-interface eth0<br /> source {<br /> address 172.16.11.128/25<br /> }<br /> translation {<br /> address 78.47.239.1<br /> }<br /> }<br /> }<br /> }<br /> pki {<br /> ca openvpn_vtun0_1 {<br /> certificate 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<br /> }<br /> certificate openvpn_vtun0 {<br /> certificate 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<br /> private {<br /> key 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<br /> }<br /> }<br /> dh openvpn_vtun0 {<br /> parameters MIIBCAKCAQEAiPNa/hPGzwM1ZEJAL5JrIUrYRPdD4vMa38q5Fph6xobWmZA+ysg0tsROFAnBxD9a5J13NWumIVyZ7Mslgr+FfuE/tAyMpZ2roi4+0Ge4YdWeR0hfRC+qqLJuOXHc2q4PI6EnbYdG5/47AipmTVhy50MDfvZxRBkz1o/zgKUQwMuRYfISPT+/4utL/qJ34XIyqndvZ8rWjJ6B9hHwFNAZpS4AHiUSu81nccw2T1GJiMkCRXwYIr3Kcp73YpZVg+zTGyV4rdkOoAOtjDTAgNs7BzekuhMeSlrHiDMfOpv5/WqDJbnjvOSpzdvUEz2NwP4oPTmRn+E5P+p3D7IIn7LXEwIBAg==<br /> }<br /> }<br /> protocols {<br /> static {<br /> route 0.0.0.0/0 {<br /> next-hop 10.12.3.2 {<br /> }<br /> }<br /> route 172.16.41.0/24 {<br /> next-hop 172.16.91.2 {<br /> }<br /> }<br /> route 172.16.42.0/24 {<br /> next-hop 172.16.43.9 {<br /> }<br /> }<br /> route 192.168.0.0/16 {<br /> interface wg0 {<br /> }<br /> }<br /> route6 ::/0 {<br /> next-hop 2001:470:1f0a:563::1 {<br /> }<br /> }<br /> }<br /> }<br /> service {<br /> dns {<br /> forwarding {<br /> allow-from 172.16.0.0/12<br /> cache-size 150<br /> listen-address 172.16.10.1<br /> name-server 8.8.8.8<br /> }<br /> }<br /> ntp {<br /> allow-client {<br /> address 0.0.0.0/0<br /> address ::/0<br /> }<br /> server 0.pool.ntp.org {<br /> }<br /> server 0.vyatta.pool.ntp.org {<br /> }<br /> server 1.pool.ntp.org {<br /> }<br /> server 1.vyatta.pool.ntp.org {<br /> }<br /> server 2.pool.ntp.org {<br /> }<br /> server 2.vyatta.pool.ntp.org {<br /> }<br /> }<br /> router-advert {<br /> interface eth1 {<br /> prefix 2001:470:1f0b:563::/64 {<br /> }<br /> }<br /> }<br /> snmp {<br /> community aquapool {<br /> authorization ro<br /> network 172.16.10.0/24<br /> }<br /> listen-address 172.16.10.1 {<br /> port 161<br /> }<br /> }<br /> ssh {<br /> disable-password-authentication<br /> listen-address 78.47.239.0<br /> port 22<br /> }<br /> }<br /> system {<br /> config-management {<br /> commit-revisions 20<br /> }<br /> conntrack {<br /> modules {<br /> ftp<br /> h323<br /> nfs<br /> pptp<br /> sip<br /> sqlnet<br /> tftp<br /> }<br /> }<br /> console {<br /> device ttyS0 {<br /> speed 9600<br /> }<br /> }<br /> host-name router.aquapool.de<br /> login {<br /> user falk {<br /> authentication {<br /> encrypted-password $1$voX2XI/s$4LcZVA.PZRcHJlS2T7Q5w/<br /> plaintext-password &quot;&quot;<br /> public-keys fstern@nb-stern {<br /> key AAAAB3NzaC1yc2EAAAABIwAAAQEAzAMO7qr+wTBJy5koRY/1QMbK/GyEttp1DE0VimrqCG7yF3kyMPhMj0Pc2pLBEFbsh9Boec54hGUBnT4+1xC6I5sHxbxnkWpImTyF1KnNDAwh4qYHZby3iJu08xLgsG1XCaeoX8vyzyrXU0n2iH6TjRycgi63jYz+F4vcYKn9tT3ijciFdxMHz82kCpbCa+AfqUex902MB2PhFu2ymKJHQSdT2PmIUqmeEdSPBcmGyhFtTBgpGc+9ZjEFZd34Y0kgXbYNYSnG7lycLY9tWKq379uL3gBBNScuKMJHldjC7KVe8lkvHY563OZ9Y0OvdBXRGKL06+Xl9ZHIRqXa4tC/FQ==<br /> type ssh-rsa<br /> }<br /> }<br /> }<br /> user mg {<br /> authentication {<br /> public-keys mg {<br /> key AAAAB3NzaC1yc2EAAAADAQABAAACAQC8nakviS7pW6x8Guw0/+qqngJNJfqZdjfsZEDfDtaHMPmGlUAo30kWMXQdzBT8B0WgPBjy66vqKPoZJTQ9d0XGElMcaR1lEWS6eRB7ND4sEHO3wNCFL74rwetu4I2nzpIZxJ4ctXhrXS34RVPS0YksiVltoRBVAORETqesgiuQIQtBzZCtKxymD6BjbX/lkE5YPoyszahkKFSVbHeRbiIS0yPpAu6LaJ0Lmpk+o3Fi8xB4Ouc9VL3yqbtb7yVnF4HRzeF3W56ntkAjeEkl8ZW2Hs+pRQSdh/NEsqs2vX0f+FA6RRGYy5SRQonyUVhNPYP8O8BRM71CLXJFOSZ+c4mTy1aLgbRTuf6ipETpdhvcXnKN4Bx1Ph7uOhkvQFOmtEo7DJCvTQG5VkNKkmHFxrGlpHXyJsjbBf4WKog8fNzxSWBcKr6Z7mc0a5pplXILjgRWO0BZUHk9I7ZuXP9ZBe5/LtNENjyFgXtjeNhyyZNTtNl5RVeXsvJYPHn23+W9++lZeIXrZDUF5iHhcD2v8aRWzIBGNKZw6pNONG2S7MumfeCJnkJl2piS1xaEgPo2es/g9p9jHTC/vRUPzGiACSq+8KrBPSIqookK8XdK4w7kPzoizLnTmd8CbXih5qFsJOTuAlVdyzeAzqVh3zOakUxzRQLrfe7IHEQN2HOYMObtUQ==<br /> type ssh-rsa<br /> }<br /> }<br /> }<br /> user njk {<br /> authentication {<br /> encrypted-password $1$QmEAxU4/$AZZjjd2fA9QxQxbN1yrQt/<br /> plaintext-password &quot;&quot;<br /> public-keys me@njk {<br /> key AAAAB3NzaC1yc2EAAAABIwAAAQEAvLKBzTArq91swhxmS8UDCaEIhX1CDD35aeubyUnU3WSM8rguHTxbDjY4XWfPGO38uABmt5GEk1DqNcqOXG9XwSH523jxaG/2KsJpuBHBngM2rxZmR7LL9Gxy4GNPNuRsVk8R9iqJU7DD4N+g1WJZC/mM3so12YjKE+dfPGJhimUt0wWYqkU6fBX7COZb0p56g02AO5ovVmDQTfqJ9qSXLumWnvt0eGN8us4g/+cNO9RqJBMj+hsXfkbi6bnYVy6fhHVan9B4tLllzSCfxli5Q+NfzIu5rpIR63TiheSQNlvPEqrVs44OkOPLFhBX8McSUlWebwofbPhck+DLrBwz1Q==<br /> type ssh-rsa<br /> }<br /> }<br /> }<br /> }<br /> name-server 213.133.100.100<br /> static-host-mapping {<br /> host-name app1.aquapool.de {<br /> inet 172.16.10.7<br /> }<br /> host-name crm.aquapool.de {<br /> alias wiki.aquapool.de<br /> alias ttcrm.aquapool.de<br /> inet 172.16.10.11<br /> }<br /> host-name db1.aquapool.de {<br /> inet 172.16.10.8<br /> }<br /> host-name mail.aquapool.de {<br /> inet 172.16.10.10<br /> }<br /> host-name owncloud.aquapool.de {<br /> alias cloud.aquapool.de<br /> inet 172.16.10.3<br /> }<br /> host-name service.aquapool.de {<br /> inet 172.16.10.12<br /> }<br /> host-name web3.aquapool.de {<br /> alias aquacaetum.aquapool.de<br /> inet 172.16.10.6<br /> }<br /> host-name web4.aquapool.de {<br /> alias www.aquapool.de<br /> inet 172.16.10.5<br /> }<br /> }<br /> syslog {<br /> global {<br /> facility all {<br /> level notice<br /> }<br /> facility protocols {<br /> level debug<br /> }<br /> }<br /> }<br /> time-zone GMT<br /> }<br /> <br /> <br /> // Warning: Do not remove the following line.<br /> // vyos-config-version: &quot;bgp@3:broadcast-relay@1:cluster@1:config-management@1:conntrack@3:conntrack-sync@2:container@1:dhcp-relay@2:dhcp-server@6:dhcpv6-server@1:dns-forwarding@3:firewall@9:flow-accounting@1:https@4:ids@1:interfaces@28:ipoe-server@1:ipsec@12:isis@2:l2tp@4:lldp@1:mdns@1:monitoring@1:nat@5:nat66@1:ntp@2:openconnect@2:ospf@1:policy@5:pppoe-server@6:pptp@2:qos@2:quagga@10:rpki@1:salt@1:snmp@3:ssh@2:sstp@4:system@25:vrf@3:vrrp@3:vyos-accel-ppp@2:wanloadbalance@3:webproxy@2&quot;<br /> // Release version: 1.4-rolling-202303030317<br /> &lt;/pre&gt;</div> Michael https://wiki.goedeke.de/index.php?title=Router2&diff=279 Router2 2023-11-03T07:30:21Z <p>Michael: /* Betriebssystem */</p> <hr /> <div><br /> == Server ==<br /> <br /> Virtuelle Maschine auf [[AX41 NVMe 1380159|KVM]]<br /> <br /> &lt;pre&gt;Hipervisor: KVM<br /> Architecture: x86_64<br /> CPU: 1<br /> RAM: 1024<br /> Virtual Disk: 10.00 GiB<br /> Source path: /storage/vms/router2.qcow2<br /> &lt;/pre&gt;<br /> <br /> == Betriebssystem ==<br /> <br /> &lt;pre&gt;Version: VyOS 1.4-rolling-202303030317<br /> Release Train: sagitta<br /> <br /> Built by: autobuild@vyos.net<br /> Built on: Sat 13 Feb 2021 02:18 UTC<br /> Build UUID: 45d96b0a-59a2-4d5b-8596-1c2cdc4d4a1e<br /> Build Commit ID: aec60effa4e36e<br /> <br /> Architecture: x86_64<br /> Boot via: installed image<br /> System type: KVM guest<br /> <br /> Hardware vendor: QEMU<br /> Hardware model: Standard PC (Q35 + ICH9, 2009)<br /> Hardware S/N: <br /> Hardware UUID: f7fddb6d-e8b9-4cfd-81d6-1bbe2e58bb54<br /> &lt;/pre&gt;<br /> <br /> === Netzwerkkonfiguration in /config/config.boot ===<br /> &lt;pre&gt;<br /> firewall {<br /> all-ping enable<br /> broadcast-ping disable<br /> config-trap disable<br /> interface tun2 {<br /> in {<br /> ipv6-name tun2_in<br /> }<br /> }<br /> ipv6-name tun2_in {<br /> default-action reject<br /> rule 1 {<br /> action accept<br /> protocol ipv6-icmp<br /> }<br /> rule 2 {<br /> action accept<br /> protocol all<br /> state {<br /> established enable<br /> related enable<br /> }<br /> }<br /> rule 3 {<br /> action accept<br /> destination {<br /> address 2001:470:1f0b:563::15<br /> port 80<br /> }<br /> protocol tcp<br /> state {<br /> new enable<br /> }<br /> }<br /> rule 4 {<br /> action accept<br /> destination {<br /> address 2001:470:1f0b:563::15<br /> port 443<br /> }<br /> protocol tcp<br /> state {<br /> new enable<br /> }<br /> }<br /> }<br /> ipv6-receive-redirects disable<br /> ipv6-src-route disable<br /> ip-src-route disable<br /> log-martians enable<br /> receive-redirects disable<br /> send-redirects enable<br /> source-validation disable<br /> syn-cookies enable<br /> twa-hazards-protection disable<br /> }<br /> interfaces {<br /> ethernet eth0 {<br /> address 10.12.3.1/29<br /> duplex auto<br /> hw-id 52:54:00:64:19:ea<br /> offload {<br /> gro<br /> gso<br /> sg<br /> tso<br /> }<br /> }<br /> ethernet eth1 {<br /> address 172.16.10.1/24<br /> address 2001:470:1f0b:563::1/64<br /> hw-id 52:54:00:c1:6f:c2<br /> ipv6 {<br /> dup-addr-detect-transmits 1<br /> }<br /> offload {<br /> gro<br /> gso<br /> sg<br /> tso<br /> }<br /> speed auto<br /> }<br /> loopback lo {<br /> address 78.47.239.0/32<br /> address 78.47.239.1/32<br /> address 78.47.239.2/32<br /> address 78.47.239.3/32<br /> address 78.47.239.4/32<br /> address 78.47.239.5/32<br /> address 78.47.239.6/32<br /> address 78.47.239.7/32<br /> }<br /> openvpn vtun0 {<br /> mode server<br /> openvpn-option duplicate-cn<br /> protocol tcp-passive<br /> server {<br /> push-route 172.16.10.0/24 {<br /> }<br /> subnet 172.16.11.0/25<br /> }<br /> tls {<br /> ca-certificate openvpn_vtun0_1<br /> certificate openvpn_vtun0<br /> dh-params openvpn_vtun0<br /> }<br /> }<br /> tunnel tun0 {<br /> address 172.16.43.8/32<br /> address 172.16.43.8/31<br /> encapsulation gre<br /> remote 188.40.111.111<br /> source-address 78.47.239.0<br /> }<br /> tunnel tun1 {<br /> address 172.16.91.1/30<br /> encapsulation gre<br /> remote 78.46.79.155<br /> source-address 78.47.239.0<br /> }<br /> tunnel tun2 {<br /> address 2001:470:1f0a:563::2/64<br /> description &quot;HE.NET IPv6 Tunnel&quot;<br /> encapsulation sit<br /> remote 216.66.80.30<br /> source-address 78.47.239.0<br /> }<br /> wireguard wg0 {<br /> address 172.16.12.1/24<br /> peer michael {<br /> allowed-ips 192.168.178.0/24<br /> allowed-ips 192.168.188.0/24<br /> allowed-ips 172.16.12.2/32<br /> public-key 0G3hmNjYbE9/fcbqZGF+LG5r/uaZ5r1CJFyEkrEOSQc=<br /> }<br /> peer njk {<br /> allowed-ips 192.168.0.0/24<br /> allowed-ips 172.16.12.3/32<br /> public-key ugz2GJdirFGMCcI6pdTdEjca19LWIY3rzO+xwplbGzo=<br /> }<br /> port 51280<br /> private-key SBnPetaY1+xY7WAj5UvgbTq8uRdE4e3baedepnwS7GA=<br /> }<br /> }<br /> nat {<br /> destination {<br /> rule 2 {<br /> description mail2<br /> destination {<br /> address 78.47.239.3<br /> port 443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.22<br /> port 443<br /> }<br /> }<br /> rule 3 {<br /> description &quot;owncloud http&quot;<br /> destination {<br /> address 78.47.239.1<br /> port 80<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.3<br /> port 80<br /> }<br /> }<br /> rule 4 {<br /> description &quot;owncloud https&quot;<br /> destination {<br /> address 78.47.239.1<br /> port 443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.3<br /> port 443<br /> }<br /> }<br /> rule 5 {<br /> destination {<br /> address 78.47.239.5<br /> port 80<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.6<br /> port 80<br /> }<br /> }<br /> rule 6 {<br /> destination {<br /> address 78.47.239.5<br /> port 22222<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.6<br /> port 22<br /> }<br /> }<br /> rule 7 {<br /> destination {<br /> address 78.47.239.5<br /> port 443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.6<br /> port 443<br /> }<br /> }<br /> rule 8 {<br /> destination {<br /> address 78.47.239.5<br /> port 9443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.6<br /> port 9443<br /> }<br /> }<br /> rule 9 {<br /> destination {<br /> address 78.47.239.5<br /> port 8443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.6<br /> port 8443<br /> }<br /> }<br /> rule 10 {<br /> destination {<br /> address 78.47.239.5<br /> port 20<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.6<br /> port 20<br /> }<br /> }<br /> rule 11 {<br /> destination {<br /> address 78.47.239.5<br /> port 21<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.6<br /> port 21<br /> }<br /> }<br /> rule 12 {<br /> destination {<br /> address 78.47.239.5<br /> port 12000-13000<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.6<br /> port 12000-13000<br /> }<br /> }<br /> rule 13 {<br /> destination {<br /> address 78.47.239.2<br /> port 80<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.5<br /> port 80<br /> }<br /> }<br /> rule 14 {<br /> destination {<br /> address 78.47.239.2<br /> port 443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.5<br /> port 443<br /> }<br /> }<br /> rule 15 {<br /> destination {<br /> address 78.47.239.2<br /> port 6922<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.5<br /> port 22<br /> }<br /> }<br /> rule 16 {<br /> destination {<br /> address 78.47.239.3<br /> port 993<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.22<br /> port 993<br /> }<br /> }<br /> rule 17 {<br /> destination {<br /> address 78.47.239.3<br /> port 587<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.22<br /> port 587<br /> }<br /> }<br /> rule 18 {<br /> destination {<br /> address 78.47.239.4<br /> port 25<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.10<br /> port 25<br /> }<br /> }<br /> rule 19 {<br /> destination {<br /> address 78.47.239.4<br /> port 110<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.10<br /> port 110<br /> }<br /> }<br /> rule 20 {<br /> destination {<br /> address 78.47.239.4<br /> port 443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.10<br /> port 443<br /> }<br /> }<br /> rule 21 {<br /> destination {<br /> address 78.47.239.4<br /> port 80<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.10<br /> port 80<br /> }<br /> }<br /> rule 22 {<br /> destination {<br /> address 78.47.239.4<br /> port 143<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.10<br /> port 143<br /> }<br /> }<br /> rule 23 {<br /> destination {<br /> address 78.47.239.4<br /> port 993<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.10<br /> port 993<br /> }<br /> }<br /> rule 24 {<br /> destination {<br /> address 78.47.239.4<br /> port 995<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.10<br /> port 995<br /> }<br /> }<br /> rule 25 {<br /> destination {<br /> address 78.47.239.7<br /> port 443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.11<br /> port 443<br /> }<br /> }<br /> rule 26 {<br /> destination {<br /> address 78.47.239.3<br /> port 7080<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.22<br /> port 80<br /> }<br /> }<br /> rule 27 {<br /> destination {<br /> address 78.47.239.6<br /> port 80<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.20<br /> port 80<br /> }<br /> }<br /> rule 28 {<br /> destination {<br /> address 78.47.239.6<br /> port 443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.20<br /> port 443<br /> }<br /> }<br /> rule 29 {<br /> destination {<br /> address 78.47.239.0<br /> port 80<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.13<br /> port 80<br /> }<br /> }<br /> rule 30 {<br /> destination {<br /> address 78.47.239.0<br /> port 443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.13<br /> port 443<br /> }<br /> }<br /> rule 31 {<br /> destination {<br /> address 78.47.239.0<br /> port 2223<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.13<br /> port 22<br /> }<br /> }<br /> rule 32 {<br /> description mail2<br /> destination {<br /> address 78.47.239.3<br /> port 80<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.22<br /> port 80<br /> }<br /> }<br /> rule 33 {<br /> description &quot;crm http&quot;<br /> destination {<br /> address 78.47.239.7<br /> port 80<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.11<br /> port 80<br /> }<br /> }<br /> rule 34 {<br /> description mail2<br /> destination {<br /> address 78.47.239.3<br /> port 25<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.22<br /> port 25<br /> }<br /> }<br /> rule 35 {<br /> description mail2<br /> destination {<br /> address 78.47.239.3<br /> port 143<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.22<br /> port 143<br /> }<br /> }<br /> rule 36 {<br /> description mail2<br /> destination {<br /> address 78.47.239.3<br /> port 465<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.22<br /> port 465<br /> }<br /> }<br /> rule 40 {<br /> description swimflow<br /> destination {<br /> address 78.47.239.4<br /> port 443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.14<br /> port 443<br /> }<br /> }<br /> rule 41 {<br /> description swimflow<br /> destination {<br /> address 78.47.239.4<br /> port 80<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.14<br /> port 80<br /> }<br /> }<br /> }<br /> source {<br /> rule 100 {<br /> outbound-interface eth0<br /> source {<br /> address 172.16.10.22/32<br /> }<br /> translation {<br /> address 78.47.239.3<br /> }<br /> }<br /> rule 200 {<br /> outbound-interface eth0<br /> source {<br /> address 172.16.10.0/24<br /> }<br /> translation {<br /> address 78.47.239.1<br /> }<br /> }<br /> rule 201 {<br /> outbound-interface eth0<br /> source {<br /> address 172.16.11.128/25<br /> }<br /> translation {<br /> address 78.47.239.1<br /> }<br /> }<br /> }<br /> }<br /> pki {<br /> ca openvpn_vtun0_1 {<br /> certificate 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<br /> }<br /> certificate openvpn_vtun0 {<br /> certificate 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<br /> private {<br /> key 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<br /> }<br /> }<br /> dh openvpn_vtun0 {<br /> parameters MIIBCAKCAQEAiPNa/hPGzwM1ZEJAL5JrIUrYRPdD4vMa38q5Fph6xobWmZA+ysg0tsROFAnBxD9a5J13NWumIVyZ7Mslgr+FfuE/tAyMpZ2roi4+0Ge4YdWeR0hfRC+qqLJuOXHc2q4PI6EnbYdG5/47AipmTVhy50MDfvZxRBkz1o/zgKUQwMuRYfISPT+/4utL/qJ34XIyqndvZ8rWjJ6B9hHwFNAZpS4AHiUSu81nccw2T1GJiMkCRXwYIr3Kcp73YpZVg+zTGyV4rdkOoAOtjDTAgNs7BzekuhMeSlrHiDMfOpv5/WqDJbnjvOSpzdvUEz2NwP4oPTmRn+E5P+p3D7IIn7LXEwIBAg==<br /> }<br /> }<br /> protocols {<br /> static {<br /> route 0.0.0.0/0 {<br /> next-hop 10.12.3.2 {<br /> }<br /> }<br /> route 172.16.41.0/24 {<br /> next-hop 172.16.91.2 {<br /> }<br /> }<br /> route 172.16.42.0/24 {<br /> next-hop 172.16.43.9 {<br /> }<br /> }<br /> route 192.168.0.0/16 {<br /> interface wg0 {<br /> }<br /> }<br /> route6 ::/0 {<br /> next-hop 2001:470:1f0a:563::1 {<br /> }<br /> }<br /> }<br /> }<br /> service {<br /> dns {<br /> forwarding {<br /> allow-from 172.16.0.0/12<br /> cache-size 150<br /> listen-address 172.16.10.1<br /> name-server 8.8.8.8<br /> }<br /> }<br /> ntp {<br /> allow-client {<br /> address 0.0.0.0/0<br /> address ::/0<br /> }<br /> server 0.pool.ntp.org {<br /> }<br /> server 0.vyatta.pool.ntp.org {<br /> }<br /> server 1.pool.ntp.org {<br /> }<br /> server 1.vyatta.pool.ntp.org {<br /> }<br /> server 2.pool.ntp.org {<br /> }<br /> server 2.vyatta.pool.ntp.org {<br /> }<br /> }<br /> router-advert {<br /> interface eth1 {<br /> prefix 2001:470:1f0b:563::/64 {<br /> }<br /> }<br /> }<br /> snmp {<br /> community aquapool {<br /> authorization ro<br /> network 172.16.10.0/24<br /> }<br /> listen-address 172.16.10.1 {<br /> port 161<br /> }<br /> }<br /> ssh {<br /> disable-password-authentication<br /> listen-address 78.47.239.0<br /> port 22<br /> }<br /> }<br /> system {<br /> config-management {<br /> commit-revisions 20<br /> }<br /> conntrack {<br /> modules {<br /> ftp<br /> h323<br /> nfs<br /> pptp<br /> sip<br /> sqlnet<br /> tftp<br /> }<br /> }<br /> console {<br /> device ttyS0 {<br /> speed 9600<br /> }<br /> }<br /> host-name router.aquapool.de<br /> login {<br /> user falk {<br /> authentication {<br /> encrypted-password $1$voX2XI/s$4LcZVA.PZRcHJlS2T7Q5w/<br /> plaintext-password &quot;&quot;<br /> public-keys fstern@nb-stern {<br /> key AAAAB3NzaC1yc2EAAAABIwAAAQEAzAMO7qr+wTBJy5koRY/1QMbK/GyEttp1DE0VimrqCG7yF3kyMPhMj0Pc2pLBEFbsh9Boec54hGUBnT4+1xC6I5sHxbxnkWpImTyF1KnNDAwh4qYHZby3iJu08xLgsG1XCaeoX8vyzyrXU0n2iH6TjRycgi63jYz+F4vcYKn9tT3ijciFdxMHz82kCpbCa+AfqUex902MB2PhFu2ymKJHQSdT2PmIUqmeEdSPBcmGyhFtTBgpGc+9ZjEFZd34Y0kgXbYNYSnG7lycLY9tWKq379uL3gBBNScuKMJHldjC7KVe8lkvHY563OZ9Y0OvdBXRGKL06+Xl9ZHIRqXa4tC/FQ==<br /> type ssh-rsa<br /> }<br /> }<br /> }<br /> user mg {<br /> authentication {<br /> public-keys mg {<br /> key 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<br /> type ssh-rsa<br /> }<br /> }<br /> }<br /> user njk {<br /> authentication {<br /> encrypted-password $1$QmEAxU4/$AZZjjd2fA9QxQxbN1yrQt/<br /> plaintext-password &quot;&quot;<br /> public-keys me@njk {<br /> key AAAAB3NzaC1yc2EAAAABIwAAAQEAvLKBzTArq91swhxmS8UDCaEIhX1CDD35aeubyUnU3WSM8rguHTxbDjY4XWfPGO38uABmt5GEk1DqNcqOXG9XwSH523jxaG/2KsJpuBHBngM2rxZmR7LL9Gxy4GNPNuRsVk8R9iqJU7DD4N+g1WJZC/mM3so12YjKE+dfPGJhimUt0wWYqkU6fBX7COZb0p56g02AO5ovVmDQTfqJ9qSXLumWnvt0eGN8us4g/+cNO9RqJBMj+hsXfkbi6bnYVy6fhHVan9B4tLllzSCfxli5Q+NfzIu5rpIR63TiheSQNlvPEqrVs44OkOPLFhBX8McSUlWebwofbPhck+DLrBwz1Q==<br /> type ssh-rsa<br /> }<br /> }<br /> }<br /> }<br /> name-server 213.133.100.100<br /> static-host-mapping {<br /> host-name app1.aquapool.de {<br /> inet 172.16.10.7<br /> }<br /> host-name crm.aquapool.de {<br /> alias wiki.aquapool.de<br /> alias ttcrm.aquapool.de<br /> inet 172.16.10.11<br /> }<br /> host-name db1.aquapool.de {<br /> inet 172.16.10.8<br /> }<br /> host-name mail.aquapool.de {<br /> inet 172.16.10.10<br /> }<br /> host-name owncloud.aquapool.de {<br /> alias cloud.aquapool.de<br /> inet 172.16.10.3<br /> }<br /> host-name service.aquapool.de {<br /> inet 172.16.10.12<br /> }<br /> host-name web3.aquapool.de {<br /> alias aquacaetum.aquapool.de<br /> inet 172.16.10.6<br /> }<br /> host-name web4.aquapool.de {<br /> alias www.aquapool.de<br /> inet 172.16.10.5<br /> }<br /> }<br /> syslog {<br /> global {<br /> facility all {<br /> level notice<br /> }<br /> facility protocols {<br /> level debug<br /> }<br /> }<br /> }<br /> time-zone GMT<br /> }<br /> <br /> <br /> // Warning: Do not remove the following line.<br /> // vyos-config-version: &quot;bgp@3:broadcast-relay@1:cluster@1:config-management@1:conntrack@3:conntrack-sync@2:container@1:dhcp-relay@2:dhcp-server@6:dhcpv6-server@1:dns-forwarding@3:firewall@9:flow-accounting@1:https@4:ids@1:interfaces@28:ipoe-server@1:ipsec@12:isis@2:l2tp@4:lldp@1:mdns@1:monitoring@1:nat@5:nat66@1:ntp@2:openconnect@2:ospf@1:policy@5:pppoe-server@6:pptp@2:qos@2:quagga@10:rpki@1:salt@1:snmp@3:ssh@2:sstp@4:system@25:vrf@3:vrrp@3:vyos-accel-ppp@2:wanloadbalance@3:webproxy@2&quot;<br /> // Release version: 1.4-rolling-202303030317<br /> &lt;/pre&gt;</div> Michael https://wiki.goedeke.de/index.php?title=Router2&diff=278 Router2 2023-11-03T07:19:57Z <p>Michael: /* Netzwerkkonfiguration in /config/config.boot */</p> <hr /> <div><br /> == Server ==<br /> <br /> Virtuelle Maschine auf [[AX41 NVMe 1380159|KVM]]<br /> <br /> &lt;pre&gt;Hipervisor: KVM<br /> Architecture: x86_64<br /> CPU: 1<br /> RAM: 1024<br /> Virtual Disk: 10.00 GiB<br /> Source path: /storage/vms/router2.qcow2<br /> &lt;/pre&gt;<br /> <br /> == Betriebssystem ==<br /> <br /> &lt;pre&gt;Version: VyOS 1.4-rolling-202102130218<br /> Release Train: sagitta<br /> <br /> Built by: autobuild@vyos.net<br /> Built on: Sat 13 Feb 2021 02:18 UTC<br /> Build UUID: 45d96b0a-59a2-4d5b-8596-1c2cdc4d4a1e<br /> Build Commit ID: aec60effa4e36e<br /> <br /> Architecture: x86_64<br /> Boot via: installed image<br /> System type: KVM guest<br /> <br /> Hardware vendor: QEMU<br /> Hardware model: Standard PC (Q35 + ICH9, 2009)<br /> Hardware S/N: <br /> Hardware UUID: f7fddb6d-e8b9-4cfd-81d6-1bbe2e58bb54<br /> &lt;/pre&gt;<br /> <br /> === Netzwerkkonfiguration in /config/config.boot ===<br /> &lt;pre&gt;<br /> firewall {<br /> all-ping enable<br /> broadcast-ping disable<br /> config-trap disable<br /> interface tun2 {<br /> in {<br /> ipv6-name tun2_in<br /> }<br /> }<br /> ipv6-name tun2_in {<br /> default-action reject<br /> rule 1 {<br /> action accept<br /> protocol ipv6-icmp<br /> }<br /> rule 2 {<br /> action accept<br /> protocol all<br /> state {<br /> established enable<br /> related enable<br /> }<br /> }<br /> rule 3 {<br /> action accept<br /> destination {<br /> address 2001:470:1f0b:563::15<br /> port 80<br /> }<br /> protocol tcp<br /> state {<br /> new enable<br /> }<br /> }<br /> rule 4 {<br /> action accept<br /> destination {<br /> address 2001:470:1f0b:563::15<br /> port 443<br /> }<br /> protocol tcp<br /> state {<br /> new enable<br /> }<br /> }<br /> }<br /> ipv6-receive-redirects disable<br /> ipv6-src-route disable<br /> ip-src-route disable<br /> log-martians enable<br /> receive-redirects disable<br /> send-redirects enable<br /> source-validation disable<br /> syn-cookies enable<br /> twa-hazards-protection disable<br /> }<br /> interfaces {<br /> ethernet eth0 {<br /> address 10.12.3.1/29<br /> duplex auto<br /> hw-id 52:54:00:64:19:ea<br /> offload {<br /> gro<br /> gso<br /> sg<br /> tso<br /> }<br /> }<br /> ethernet eth1 {<br /> address 172.16.10.1/24<br /> address 2001:470:1f0b:563::1/64<br /> hw-id 52:54:00:c1:6f:c2<br /> ipv6 {<br /> dup-addr-detect-transmits 1<br /> }<br /> offload {<br /> gro<br /> gso<br /> sg<br /> tso<br /> }<br /> speed auto<br /> }<br /> loopback lo {<br /> address 78.47.239.0/32<br /> address 78.47.239.1/32<br /> address 78.47.239.2/32<br /> address 78.47.239.3/32<br /> address 78.47.239.4/32<br /> address 78.47.239.5/32<br /> address 78.47.239.6/32<br /> address 78.47.239.7/32<br /> }<br /> openvpn vtun0 {<br /> mode server<br /> openvpn-option duplicate-cn<br /> protocol tcp-passive<br /> server {<br /> push-route 172.16.10.0/24 {<br /> }<br /> subnet 172.16.11.0/25<br /> }<br /> tls {<br /> ca-certificate openvpn_vtun0_1<br /> certificate openvpn_vtun0<br /> dh-params openvpn_vtun0<br /> }<br /> }<br /> tunnel tun0 {<br /> address 172.16.43.8/32<br /> address 172.16.43.8/31<br /> encapsulation gre<br /> remote 188.40.111.111<br /> source-address 78.47.239.0<br /> }<br /> tunnel tun1 {<br /> address 172.16.91.1/30<br /> encapsulation gre<br /> remote 78.46.79.155<br /> source-address 78.47.239.0<br /> }<br /> tunnel tun2 {<br /> address 2001:470:1f0a:563::2/64<br /> description &quot;HE.NET IPv6 Tunnel&quot;<br /> encapsulation sit<br /> remote 216.66.80.30<br /> source-address 78.47.239.0<br /> }<br /> wireguard wg0 {<br /> address 172.16.12.1/24<br /> peer michael {<br /> allowed-ips 192.168.178.0/24<br /> allowed-ips 192.168.188.0/24<br /> allowed-ips 172.16.12.2/32<br /> public-key 0G3hmNjYbE9/fcbqZGF+LG5r/uaZ5r1CJFyEkrEOSQc=<br /> }<br /> peer njk {<br /> allowed-ips 192.168.0.0/24<br /> allowed-ips 172.16.12.3/32<br /> public-key ugz2GJdirFGMCcI6pdTdEjca19LWIY3rzO+xwplbGzo=<br /> }<br /> port 51280<br /> private-key SBnPetaY1+xY7WAj5UvgbTq8uRdE4e3baedepnwS7GA=<br /> }<br /> }<br /> nat {<br /> destination {<br /> rule 2 {<br /> description mail2<br /> destination {<br /> address 78.47.239.3<br /> port 443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.22<br /> port 443<br /> }<br /> }<br /> rule 3 {<br /> description &quot;owncloud http&quot;<br /> destination {<br /> address 78.47.239.1<br /> port 80<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.3<br /> port 80<br /> }<br /> }<br /> rule 4 {<br /> description &quot;owncloud https&quot;<br /> destination {<br /> address 78.47.239.1<br /> port 443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.3<br /> port 443<br /> }<br /> }<br /> rule 5 {<br /> destination {<br /> address 78.47.239.5<br /> port 80<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.6<br /> port 80<br /> }<br /> }<br /> rule 6 {<br /> destination {<br /> address 78.47.239.5<br /> port 22222<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.6<br /> port 22<br /> }<br /> }<br /> rule 7 {<br /> destination {<br /> address 78.47.239.5<br /> port 443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.6<br /> port 443<br /> }<br /> }<br /> rule 8 {<br /> destination {<br /> address 78.47.239.5<br /> port 9443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.6<br /> port 9443<br /> }<br /> }<br /> rule 9 {<br /> destination {<br /> address 78.47.239.5<br /> port 8443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.6<br /> port 8443<br /> }<br /> }<br /> rule 10 {<br /> destination {<br /> address 78.47.239.5<br /> port 20<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.6<br /> port 20<br /> }<br /> }<br /> rule 11 {<br /> destination {<br /> address 78.47.239.5<br /> port 21<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.6<br /> port 21<br /> }<br /> }<br /> rule 12 {<br /> destination {<br /> address 78.47.239.5<br /> port 12000-13000<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.6<br /> port 12000-13000<br /> }<br /> }<br /> rule 13 {<br /> destination {<br /> address 78.47.239.2<br /> port 80<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.5<br /> port 80<br /> }<br /> }<br /> rule 14 {<br /> destination {<br /> address 78.47.239.2<br /> port 443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.5<br /> port 443<br /> }<br /> }<br /> rule 15 {<br /> destination {<br /> address 78.47.239.2<br /> port 6922<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.5<br /> port 22<br /> }<br /> }<br /> rule 16 {<br /> destination {<br /> address 78.47.239.3<br /> port 993<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.22<br /> port 993<br /> }<br /> }<br /> rule 17 {<br /> destination {<br /> address 78.47.239.3<br /> port 587<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.22<br /> port 587<br /> }<br /> }<br /> rule 18 {<br /> destination {<br /> address 78.47.239.4<br /> port 25<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.10<br /> port 25<br /> }<br /> }<br /> rule 19 {<br /> destination {<br /> address 78.47.239.4<br /> port 110<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.10<br /> port 110<br /> }<br /> }<br /> rule 20 {<br /> destination {<br /> address 78.47.239.4<br /> port 443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.10<br /> port 443<br /> }<br /> }<br /> rule 21 {<br /> destination {<br /> address 78.47.239.4<br /> port 80<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.10<br /> port 80<br /> }<br /> }<br /> rule 22 {<br /> destination {<br /> address 78.47.239.4<br /> port 143<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.10<br /> port 143<br /> }<br /> }<br /> rule 23 {<br /> destination {<br /> address 78.47.239.4<br /> port 993<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.10<br /> port 993<br /> }<br /> }<br /> rule 24 {<br /> destination {<br /> address 78.47.239.4<br /> port 995<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.10<br /> port 995<br /> }<br /> }<br /> rule 25 {<br /> destination {<br /> address 78.47.239.7<br /> port 443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.11<br /> port 443<br /> }<br /> }<br /> rule 26 {<br /> destination {<br /> address 78.47.239.3<br /> port 7080<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.22<br /> port 80<br /> }<br /> }<br /> rule 27 {<br /> destination {<br /> address 78.47.239.6<br /> port 80<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.20<br /> port 80<br /> }<br /> }<br /> rule 28 {<br /> destination {<br /> address 78.47.239.6<br /> port 443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.20<br /> port 443<br /> }<br /> }<br /> rule 29 {<br /> destination {<br /> address 78.47.239.0<br /> port 80<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.13<br /> port 80<br /> }<br /> }<br /> rule 30 {<br /> destination {<br /> address 78.47.239.0<br /> port 443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.13<br /> port 443<br /> }<br /> }<br /> rule 31 {<br /> destination {<br /> address 78.47.239.0<br /> port 2223<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.13<br /> port 22<br /> }<br /> }<br /> rule 32 {<br /> description mail2<br /> destination {<br /> address 78.47.239.3<br /> port 80<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.22<br /> port 80<br /> }<br /> }<br /> rule 33 {<br /> description &quot;crm http&quot;<br /> destination {<br /> address 78.47.239.7<br /> port 80<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.11<br /> port 80<br /> }<br /> }<br /> rule 34 {<br /> description mail2<br /> destination {<br /> address 78.47.239.3<br /> port 25<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.22<br /> port 25<br /> }<br /> }<br /> rule 35 {<br /> description mail2<br /> destination {<br /> address 78.47.239.3<br /> port 143<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.22<br /> port 143<br /> }<br /> }<br /> rule 36 {<br /> description mail2<br /> destination {<br /> address 78.47.239.3<br /> port 465<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.22<br /> port 465<br /> }<br /> }<br /> rule 40 {<br /> description swimflow<br /> destination {<br /> address 78.47.239.4<br /> port 443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.14<br /> port 443<br /> }<br /> }<br /> rule 41 {<br /> description swimflow<br /> destination {<br /> address 78.47.239.4<br /> port 80<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.14<br /> port 80<br /> }<br /> }<br /> }<br /> source {<br /> rule 100 {<br /> outbound-interface eth0<br /> source {<br /> address 172.16.10.22/32<br /> }<br /> translation {<br /> address 78.47.239.3<br /> }<br /> }<br /> rule 200 {<br /> outbound-interface eth0<br /> source {<br /> address 172.16.10.0/24<br /> }<br /> translation {<br /> address 78.47.239.1<br /> }<br /> }<br /> rule 201 {<br /> outbound-interface eth0<br /> source {<br /> address 172.16.11.128/25<br /> }<br /> translation {<br /> address 78.47.239.1<br /> }<br /> }<br /> }<br /> }<br /> pki {<br /> ca openvpn_vtun0_1 {<br /> certificate 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<br /> }<br /> certificate openvpn_vtun0 {<br /> certificate MIIDtjCCAx+gAwIBAgIBATANBgkqhkiG9w0BAQUFADB+MQswCQYDVQQGEwJERTELMAkGA1UECBMCU0gxETAPBgNVBAcTCEVsbXNob3JuMREwDwYDVQQKEwhhcXVhcG9vbDEbMBkGA1UEAxMScm91dGVyLmFxdWFwb29sLmRlMR8wHQYJKoZIhvcNAQkBFhBmYWxrQGZvdXJlY2tzLmRlMB4XDTExMDgwNDA4MDEyOVoXDTIxMDgwMTA4MDEyOVowcjELMAkGA1UEBhMCREUxCzAJBgNVBAgTAlNIMREwDwYDVQQHEwhFbG1zaG9ybjERMA8GA1UEChMIYXF1YXBvb2wxDzANBgNVBAMTBnNlcnZlcjEfMB0GCSqGSIb3DQEJARYQZmFsa0Bmb3VyZWNrcy5kZTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAvkLUSYtl7RbplTdC3CiwzPkSSV7o2fkHIgJWbFNZm8yMAVQqClSov/8Myuh8flLCGBtsWL5QhCZygUM0NoIHyvhcJQDT0K7WO5DOVuzoLJRd+peZ9DP2zjeSLrO1wu4B/LD7SkGypSw6L3MDGiPyA5SXGPARtL8ahhQSLh1t9MkCAwEAAaOCAU4wggFKMAkGA1UdEwQCMAAwEQYJYIZIAYb4QgEBBAQDAgZAMDQGCWCGSAGG+EIBDQQnFiVFYXN5LVJTQSBHZW5lcmF0ZWQgU2VydmVyIENlcnRpZmljYXRlMB0GA1UdDgQWBBT2xjA9KMSN9x78fg2z9Oz9Q8Ic3DCBsgYDVR0jBIGqMIGngBTFXub/aXLY892FOvOtxozD6mcbJqGBg6SBgDB+MQswCQYDVQQGEwJERTELMAkGA1UECBMCU0gxETAPBgNVBAcTCEVsbXNob3JuMREwDwYDVQQKEwhhcXVhcG9vbDEbMBkGA1UEAxMScm91dGVyLmFxdWFwb29sLmRlMR8wHQYJKoZIhvcNAQkBFhBmYWxrQGZvdXJlY2tzLmRlggkA0XDH7uM/Z2gwEwYDVR0lBAwwCgYIKwYBBQUHAwEwCwYDVR0PBAQDAgWgMA0GCSqGSIb3DQEBBQUAA4GBAEHyrWEzTMk9Q6SsquGX6Ue2YQmxE3YPEP0puoH0gWwQs20av1gxgzGWOceX9j1ljSR45+zN0foHaIhzP1peGpvcbr/uqKt2HIH8pAszrchgR925yVAJuAb9PyymVFaLAdjI3iVggn/kTx/2NZ5N9K2snPevJJwLQE0MwoxN3onC<br /> private {<br /> key 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<br /> }<br /> }<br /> dh openvpn_vtun0 {<br /> parameters MIIBCAKCAQEAiPNa/hPGzwM1ZEJAL5JrIUrYRPdD4vMa38q5Fph6xobWmZA+ysg0tsROFAnBxD9a5J13NWumIVyZ7Mslgr+FfuE/tAyMpZ2roi4+0Ge4YdWeR0hfRC+qqLJuOXHc2q4PI6EnbYdG5/47AipmTVhy50MDfvZxRBkz1o/zgKUQwMuRYfISPT+/4utL/qJ34XIyqndvZ8rWjJ6B9hHwFNAZpS4AHiUSu81nccw2T1GJiMkCRXwYIr3Kcp73YpZVg+zTGyV4rdkOoAOtjDTAgNs7BzekuhMeSlrHiDMfOpv5/WqDJbnjvOSpzdvUEz2NwP4oPTmRn+E5P+p3D7IIn7LXEwIBAg==<br /> }<br /> }<br /> protocols {<br /> static {<br /> route 0.0.0.0/0 {<br /> next-hop 10.12.3.2 {<br /> }<br /> }<br /> route 172.16.41.0/24 {<br /> next-hop 172.16.91.2 {<br /> }<br /> }<br /> route 172.16.42.0/24 {<br /> next-hop 172.16.43.9 {<br /> }<br /> }<br /> route 192.168.0.0/16 {<br /> interface wg0 {<br /> }<br /> }<br /> route6 ::/0 {<br /> next-hop 2001:470:1f0a:563::1 {<br /> }<br /> }<br /> }<br /> }<br /> service {<br /> dns {<br /> forwarding {<br /> allow-from 172.16.0.0/12<br /> cache-size 150<br /> listen-address 172.16.10.1<br /> name-server 8.8.8.8<br /> }<br /> }<br /> ntp {<br /> allow-client {<br /> address 0.0.0.0/0<br /> address ::/0<br /> }<br /> server 0.pool.ntp.org {<br /> }<br /> server 0.vyatta.pool.ntp.org {<br /> }<br /> server 1.pool.ntp.org {<br /> }<br /> server 1.vyatta.pool.ntp.org {<br /> }<br /> server 2.pool.ntp.org {<br /> }<br /> server 2.vyatta.pool.ntp.org {<br /> }<br /> }<br /> router-advert {<br /> interface eth1 {<br /> prefix 2001:470:1f0b:563::/64 {<br /> }<br /> }<br /> }<br /> snmp {<br /> community aquapool {<br /> authorization ro<br /> network 172.16.10.0/24<br /> }<br /> listen-address 172.16.10.1 {<br /> port 161<br /> }<br /> }<br /> ssh {<br /> disable-password-authentication<br /> listen-address 78.47.239.0<br /> port 22<br /> }<br /> }<br /> system {<br /> config-management {<br /> commit-revisions 20<br /> }<br /> conntrack {<br /> modules {<br /> ftp<br /> h323<br /> nfs<br /> pptp<br /> sip<br /> sqlnet<br /> tftp<br /> }<br /> }<br /> console {<br /> device ttyS0 {<br /> speed 9600<br /> }<br /> }<br /> host-name router.aquapool.de<br /> login {<br /> user falk {<br /> authentication {<br /> encrypted-password $1$voX2XI/s$4LcZVA.PZRcHJlS2T7Q5w/<br /> plaintext-password &quot;&quot;<br /> public-keys fstern@nb-stern {<br /> key AAAAB3NzaC1yc2EAAAABIwAAAQEAzAMO7qr+wTBJy5koRY/1QMbK/GyEttp1DE0VimrqCG7yF3kyMPhMj0Pc2pLBEFbsh9Boec54hGUBnT4+1xC6I5sHxbxnkWpImTyF1KnNDAwh4qYHZby3iJu08xLgsG1XCaeoX8vyzyrXU0n2iH6TjRycgi63jYz+F4vcYKn9tT3ijciFdxMHz82kCpbCa+AfqUex902MB2PhFu2ymKJHQSdT2PmIUqmeEdSPBcmGyhFtTBgpGc+9ZjEFZd34Y0kgXbYNYSnG7lycLY9tWKq379uL3gBBNScuKMJHldjC7KVe8lkvHY563OZ9Y0OvdBXRGKL06+Xl9ZHIRqXa4tC/FQ==<br /> type ssh-rsa<br /> }<br /> }<br /> }<br /> user mg {<br /> authentication {<br /> public-keys mg {<br /> key AAAAB3NzaC1yc2EAAAADAQABAAACAQC8nakviS7pW6x8Guw0/+qqngJNJfqZdjfsZEDfDtaHMPmGlUAo30kWMXQdzBT8B0WgPBjy66vqKPoZJTQ9d0XGElMcaR1lEWS6eRB7ND4sEHO3wNCFL74rwetu4I2nzpIZxJ4ctXhrXS34RVPS0YksiVltoRBVAORETqesgiuQIQtBzZCtKxymD6BjbX/lkE5YPoyszahkKFSVbHeRbiIS0yPpAu6LaJ0Lmpk+o3Fi8xB4Ouc9VL3yqbtb7yVnF4HRzeF3W56ntkAjeEkl8ZW2Hs+pRQSdh/NEsqs2vX0f+FA6RRGYy5SRQonyUVhNPYP8O8BRM71CLXJFOSZ+c4mTy1aLgbRTuf6ipETpdhvcXnKN4Bx1Ph7uOhkvQFOmtEo7DJCvTQG5VkNKkmHFxrGlpHXyJsjbBf4WKog8fNzxSWBcKr6Z7mc0a5pplXILjgRWO0BZUHk9I7ZuXP9ZBe5/LtNENjyFgXtjeNhyyZNTtNl5RVeXsvJYPHn23+W9++lZeIXrZDUF5iHhcD2v8aRWzIBGNKZw6pNONG2S7MumfeCJnkJl2piS1xaEgPo2es/g9p9jHTC/vRUPzGiACSq+8KrBPSIqookK8XdK4w7kPzoizLnTmd8CbXih5qFsJOTuAlVdyzeAzqVh3zOakUxzRQLrfe7IHEQN2HOYMObtUQ==<br /> type ssh-rsa<br /> }<br /> }<br /> }<br /> user njk {<br /> authentication {<br /> encrypted-password $1$QmEAxU4/$AZZjjd2fA9QxQxbN1yrQt/<br /> plaintext-password &quot;&quot;<br /> public-keys me@njk {<br /> key AAAAB3NzaC1yc2EAAAABIwAAAQEAvLKBzTArq91swhxmS8UDCaEIhX1CDD35aeubyUnU3WSM8rguHTxbDjY4XWfPGO38uABmt5GEk1DqNcqOXG9XwSH523jxaG/2KsJpuBHBngM2rxZmR7LL9Gxy4GNPNuRsVk8R9iqJU7DD4N+g1WJZC/mM3so12YjKE+dfPGJhimUt0wWYqkU6fBX7COZb0p56g02AO5ovVmDQTfqJ9qSXLumWnvt0eGN8us4g/+cNO9RqJBMj+hsXfkbi6bnYVy6fhHVan9B4tLllzSCfxli5Q+NfzIu5rpIR63TiheSQNlvPEqrVs44OkOPLFhBX8McSUlWebwofbPhck+DLrBwz1Q==<br /> type ssh-rsa<br /> }<br /> }<br /> }<br /> }<br /> name-server 213.133.100.100<br /> static-host-mapping {<br /> host-name app1.aquapool.de {<br /> inet 172.16.10.7<br /> }<br /> host-name crm.aquapool.de {<br /> alias wiki.aquapool.de<br /> alias ttcrm.aquapool.de<br /> inet 172.16.10.11<br /> }<br /> host-name db1.aquapool.de {<br /> inet 172.16.10.8<br /> }<br /> host-name mail.aquapool.de {<br /> inet 172.16.10.10<br /> }<br /> host-name owncloud.aquapool.de {<br /> alias cloud.aquapool.de<br /> inet 172.16.10.3<br /> }<br /> host-name service.aquapool.de {<br /> inet 172.16.10.12<br /> }<br /> host-name web3.aquapool.de {<br /> alias aquacaetum.aquapool.de<br /> inet 172.16.10.6<br /> }<br /> host-name web4.aquapool.de {<br /> alias www.aquapool.de<br /> inet 172.16.10.5<br /> }<br /> }<br /> syslog {<br /> global {<br /> facility all {<br /> level notice<br /> }<br /> facility protocols {<br /> level debug<br /> }<br /> }<br /> }<br /> time-zone GMT<br /> }<br /> <br /> <br /> // Warning: Do not remove the following line.<br /> // vyos-config-version: &quot;bgp@3:broadcast-relay@1:cluster@1:config-management@1:conntrack@3:conntrack-sync@2:container@1:dhcp-relay@2:dhcp-server@6:dhcpv6-server@1:dns-forwarding@3:firewall@9:flow-accounting@1:https@4:ids@1:interfaces@28:ipoe-server@1:ipsec@12:isis@2:l2tp@4:lldp@1:mdns@1:monitoring@1:nat@5:nat66@1:ntp@2:openconnect@2:ospf@1:policy@5:pppoe-server@6:pptp@2:qos@2:quagga@10:rpki@1:salt@1:snmp@3:ssh@2:sstp@4:system@25:vrf@3:vrrp@3:vyos-accel-ppp@2:wanloadbalance@3:webproxy@2&quot;<br /> // Release version: 1.4-rolling-202303030317<br /> &lt;/pre&gt;</div> Michael https://wiki.goedeke.de/index.php?title=Backup_der_VMs&diff=277 Backup der VMs 2023-11-03T07:05:44Z <p>Michael: </p> <hr /> <div>Die VM´s werden via zwei Backup-scripte (auf dem [[KVM]]) automatisch mit einem Crontab monatlich inkrementell auf die [[BX40|Storeage Box]] gesichert:<br /> &lt;pre&gt;crontab -e<br /> 20 1 1 */2 * /storage/vms/backup-part1.sh 2&gt;&amp;1 | msmtp michael@goedeke.de<br /> 20 1 2 */2 * /storage/vms/backup-part2.sh 2&gt;&amp;1 | msmtp michael@goedeke.de<br /> 20 1 3 */2 * /storage/vms/backup-part3.sh 2&gt;&amp;1 | msmtp michael@goedeke.de&lt;/pre&gt;<br /> <br /> /storage/vms/backup-vms.sh<br /> &lt;pre&gt;<br /> #!/bin/bash<br /> <br /> #################### config variables########################<br /> <br /> #Uncomment to backup domains myVMa and myVMb<br /> DOMAINS=&quot;&lt;alle in part1 bzw. in part2&gt;&quot;<br /> <br /> #Alternatively list all VMs and back them all up<br /> #DOMAINS=$(virsh list --all | tail -n +3 | awk '{print $2}')<br /> <br /> BACKUPROOT=/var/backups/kvms/backup_vms/$(hostname)<br /> <br /> LOG=&quot;$BACKUPROOT/logs/qemu-backup.$(date +%Y-%m-%d).log&quot;<br /> SNAPPREFIX=snaptemp-<br /> <br /> # Path to XML files for stopped VM...<br /> PATH_LIBVIRT_QEMU=&quot;/etc/libvirt/qemu&quot;<br /> <br /> #pause before blockcommit<br /> pause_domain_bc=false<br /> #pause after blockcommit fail. if pause_domain_bc is set to true, this option is skiped<br /> pause_domain_after_bc_fail=true<br /> #on fail blockcommit try blockjob<br /> enable_bj_attemts=true<br /> blockjob_retrycount=1<br /> blockjob_delay=&quot;30s&quot;<br /> pause_while_bj_attemtps=true<br /> #if blockjob attempts fail, try pause domain? (if pause_while_bj_attemtps is set to true, script ignore this option)<br /> pause_domain_after_bj_fail=true<br /> <br /> EMR=&quot;michael@goedeke.de&quot;<br /> #****************************<br /> #you can create conf file with variables which overwrite those above<br /> #fo example if name of yours script is backup_vms.sh,create file in location wher is your script and name him-&gt; backup_vms.conf<br /> #if you want other name and path, you need to find and change value for variable below (outsite config variables block) named-&gt; confFile<br /> #it is usefull if we work with many hypervisiors and make some changes in script<br /> #****************************<br /> <br /> #################### end of config variables#################<br /> <br /> SHCMD=&quot;$(basename -- $0)&quot;<br /> SHCMD_path=$(dirname $(readlink -f $0))<br /> confFile=&quot;$SHCMD_path/${SHCMD%.*}.conf&quot;<br /> if [ -f &quot;$confFile&quot; ]; then<br /> source &quot;$confFile&quot;<br /> echo &quot;overwrite vars from config file&quot;<br /> else<br /> echo &quot;no config file, but if you set variables on begining it is not necessary&quot;<br /> fi<br /> <br /> [ ! -f $BACKUPROOT/logs ] &amp;&amp; mkdir -p $BACKUPROOT/logs<br /> DATE=&quot;$(date +%Y-%m-%d.%H%M%S)&quot;<br /> <br /> ERRORED=0<br /> COMMITSNAPTAB[0]=false<br /> BREAK=false<br /> <br /> <br /> <br /> <br /> <br /> <br /> # extract the date coding in FILEFULLNAME (note: filename format must be YYYY-MM-DD)<br /> dtmatch () { sed -n -e 's/.*\(2[0-1][0-9][0-9]-[0-1][0-9]-[0-3][0-9]\).*/\1/p'; }<br /> #check if previous instance of script is not running, it's mandatory for blockcommit after interput script from some reason<br /> if pidof -x &quot;$SHCMD&quot; -o $$ &gt;/dev/null;then<br /> ERR=&quot;An another instance of this script is already running, please clear all the sessions of this script before starting a new one<br /> If you are sure to stop previous instance, try command: kill -9 \$(pidof -x \&quot;$SHCMD\&quot;)&quot;<br /> echo &quot;$ERR&quot; &gt;&gt; $LOG<br /> echo &quot;$ERR&quot;<br /> exit 1<br /> fi<br /> echo &quot;$SHCMD: Starting backups on $(date +'%d-%m-%Y %H:%M:%S')&quot; &gt;&gt; $LOG<br /> for DOMAIN in $DOMAINS; do<br /> BREAK=false<br /> #check if domain exists<br /> VMSRC=$(virsh list --all | grep [[:space:]]$DOMAIN[[:space:]] | awk '{print $3}')<br /> VMSRC=${#VMSRC}<br /> if [[ $VMSRC -eq 0 ]]; then<br /> ERR=&quot;Domain $DOMAIN on this hypervisior not exists&quot;<br /> echo &quot;$ERR&quot; &gt;&gt; $LOG<br /> echo &quot;$ERR&quot; <br /> continue<br /> fi<br /> <br /> echo &quot;---- VM Backup start $DOMAIN ---- $(date +'%d-%m-%Y %H:%M:%S')&quot; &gt;&gt; $LOG<br /> <br /> VM_RUNNING=1<br /> <br /> VMSTATE=$(LC_ALL=en_EN virsh list --all | grep [[:space:]]$DOMAIN[[:space:]] | awk '{print $3}')<br /> echo &quot;$VMSTATE&quot;<br /> if [[ $VMSTATE == &quot;running&quot; || $VMSTATE == &quot;paused&quot; ]]; then<br /> MSG=&quot;-&gt; VM $DOMAIN running or paused.&quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot; <br /> else<br /> <br /> MSG=&quot;-&gt; VM $DOMAIN not running. No snapshot and blockcommit. Only copy.&quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> VM_RUNNING=0<br /> fi<br /> <br /> BACKUPFOLDER=$BACKUPROOT/$DOMAIN<br /> [ ! -d $BACKUPFOLDER ] &amp;&amp; mkdir -p $BACKUPFOLDER<br /> TARGETS=$(virsh domblklist $DOMAIN --details | grep disk | awk '{print $3}')<br /> IMAGES=$(virsh domblklist $DOMAIN --details | grep disk | awk '{print $4}')<br /> <br /> # check to make sure the VM is running on a standard image, not<br /> # a snapshot that may be from a backup that previously failed<br /> unset COMMITSNAPTAB[*]<br /> i=0<br /> COMMITSNAP=false<br /> for IMAGE in $IMAGES; do<br /> set -o noglob<br /> if [[ $IMAGE == *${SNAPPREFIX}* ]]; then<br /> set +o noglob<br /> if [[ $VM_RUNNING -eq 0 ]]; then<br /> ERR=&quot;$SHCMD: Error VM $DOMAIN is not running but is on a snapshot disk image: $IMAGE&quot;<br /> echo $ERR &gt;&gt; $LOG<br /> echo &quot;$ERR&quot;<br /> echo &quot;$ERR<br /> Host: $HOST<br /> Disk Image: $IMAGE<br /> Domain: $DOMAIN<br /> Command: virsh domblklist $DOMAIN --details&quot; | mail -s &quot;$SHCMD snapshot Exception for $DOMAIN&quot; $EMR<br /> BREAK=true<br /> ERRORED=$(($ERRORED+1))<br /> break<br /> else<br /> COMMITSNAPTAB[$i]=true<br /> COMMITSNAP=true<br /> MSG=&quot;VM $DOMAIN is running but is on snapshot image $IMAGE so mark him for blockcommit first&quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> fi<br /> else<br /> # if not running on snapshot still must check if ther is no tmp file, if is presents, must be deleted before start new snapshot<br /> FILEPATH=&quot;${IMAGE%/*}&quot;<br /> FILEFULLNAME=`basename &quot;$IMAGE&quot;`<br /> FILENAME=&quot;${FILEFULLNAME%.*}&quot;<br /> #FILEEXT=&quot;${FILEFULLNAME#*.}<br /> TMPFILE=&quot;$FILEPATH/$FILENAME.$SNAPPREFIX$DOMAIN&quot;<br /> if [ -f &quot;$TMPFILE&quot; ]; then<br /> CMD=&quot;rm -f $TMPFILE &gt;&gt; $LOG 2&gt;&amp;1&quot;<br /> MSG=&quot; Deleting temporary image $TMPFILE after making snapshot&quot;<br /> echo &quot;$MSG&quot; &gt;&gt;$LOG<br /> echo &quot;$MSG&quot;<br /> echo &quot;Command: $CMD&quot; &gt;&gt; $LOG<br /> echo &quot;Command: $CMD&quot;<br /> eval &quot;$CMD&quot;<br /> fi<br /> fi<br /> set +o noglob<br /> i=$i+1<br /> done<br /> [ $BREAK == true ] &amp;&amp; continue<br /> <br /> if [[ $VM_RUNNING -eq 1 ]]; then<br /> #if vm running on snap, first i need to merge<br /> #i=0<br /> if [[ $COMMITSNAP == true ]]; then<br /> i=0<br /> for TARGET in $TARGETS; do<br /> if [[ ${COMMITSNAPTAB[$i]} == true ]]; then<br /> if [[ $VMSTATE == &quot;paused&quot; ]]; then<br /> pause_enabled=true<br /> else<br /> pause_enabled=false<br /> fi<br /> if [[ $pause_domain_bc == true &amp;&amp; $pause_enabled == false ]]; then<br /> MSG=&quot;Try to pause domain $DOMAIN first&quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> CMDst=&quot;virsh suspend $DOMAIN&quot;<br /> echo &quot;Command: $CMDst&quot; &gt;&gt; $LOG<br /> echo &quot;Command: $CMDst&quot;<br /> eval &quot;$CMDst&quot;<br /> if [ $? -ne 0 ]; then<br /> ERR=&quot;can't pause domain $DOMAIN, continue anyway&quot;<br /> echo &quot;$ERR&quot; &gt;&gt; $LOG<br /> echo &quot;$ERR&quot;<br /> else<br /> pause_enabled=true<br /> fi<br /> fi<br /> MSG=&quot;$TARGET BLOCKCOMMIT previous snapshot &quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> CMD=&quot;virsh blockcommit $DOMAIN $TARGET --active --pivot &gt;&gt; $LOG 2&gt;&amp;1&quot;<br /> echo &quot;Command: $CMD&quot; &gt;&gt; $LOG<br /> echo &quot;Command: $CMD&quot;<br /> eval &quot;$CMD&quot;<br /> if [ $? -ne 0 ]; then<br /> ERR=&quot;Could not merge changes for disk $TARGET of $DOMAIN with blockcommit. VM may be in an invalid state.&quot;<br /> echo &quot;$ERR&quot; &gt;&gt; $LOG<br /> echo &quot;$ERR&quot;<br /> echo &quot;$ERR<br /> Host: $HOST<br /> Domain: $DOMAIN<br /> Command: $CMD&quot; | mail -s &quot;$SHCMD blockcommit Exception for $DOMAIN&quot; $EMR<br /> if [[ $pause_domain_after_bc_fail == true &amp;&amp; $pause_enabled == false ]]; then<br /> MSG=&quot;Try to pause domain $DOMAIN and retry bc&quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> CMDst=&quot;virsh suspend $DOMAIN&quot;<br /> echo &quot;Command: $CMDst&quot; &gt;&gt; $LOG<br /> echo &quot;Command: $CMDst&quot;<br /> eval &quot;$CMDst&quot;<br /> if [ $? -ne 0 ]; then<br /> ERR=&quot;can't pause domain $DOMAIN, continue anyway&quot;<br /> echo &quot;$ERR&quot; &gt;&gt; $LOG<br /> echo &quot;$ERR&quot;<br /> else<br /> pause_enabled=true<br /> fi<br /> MSG=&quot;$TARGET BLOCKCOMMIT previous snapshot &quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> CMD=&quot;virsh blockcommit $DOMAIN $TARGET --active --pivot &gt;&gt; $LOG 2&gt;&amp;1&quot;<br /> echo &quot;Command: $CMD&quot; &gt;&gt; $LOG<br /> echo &quot;Command: $CMD&quot;<br /> eval &quot;$CMD&quot;<br /> if [ $? -ne 0 ]; then<br /> ERR=&quot;Could not merge changes for disk $TARGET of $DOMAIN (paused) with blockcommit. VM may be in an invalid state.&quot;<br /> echo &quot;$ERR&quot; &gt;&gt; $LOG<br /> echo &quot;$ERR&quot;<br /> echo &quot;$ERR<br /> Host: $HOST<br /> Domain: $DOMAIN<br /> Command: $CMD&quot; | mail -s &quot;$SHCMD blockcommit Exception for $DOMAIN&quot; $EMR<br /> else<br /> #if bc succes need to disable bj, so set to false<br /> enable_bj_attemts=false<br /> fi<br /> fi <br /> if [ $enable_bj_attemts == true ]; then<br /> if [[ $pause_while_bj_attemtps == true ]]; then<br /> MSG=&quot;Try to pause domain $DOMAIN first&quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> CMDst=&quot;virsh suspend $DOMAIN&quot;<br /> echo &quot;Command: $CMDst&quot; &gt;&gt; $LOG<br /> echo &quot;Command: $CMDst&quot;<br /> eval &quot;$CMDst&quot;<br /> if [ $? -ne 0 ]; then<br /> ERR=&quot;can't pause domain $DOMAIN, continue anyway&quot;<br /> echo &quot;$ERR&quot; &gt;&gt; $LOG<br /> echo &quot;$ERR&quot;<br /> else<br /> pause_enabled=true<br /> fi<br /> else<br /> if [[ $pause_enabled == true &amp;&amp; $VMSTATE == &quot;running&quot; ]]; then<br /> MSG=&quot;Resume domain $DOMAIN&quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> CMDst=&quot;virsh resume $DOMAIN&quot;<br /> echo &quot;Command: $CMDst&quot; &gt;&gt; $LOG<br /> echo &quot;Command: $CMDst&quot;<br /> eval &quot;$CMDst&quot;<br /> if [ $? -ne 0 ]; then<br /> ERR=&quot;can't resume domain $DOMAIN, continue anyway&quot;<br /> echo &quot;$ERR&quot; &gt;&gt; $LOG<br /> echo &quot;$ERR&quot;<br /> else<br /> pause_enabled=false<br /> fi<br /> fi<br /> fi<br /> <br /> for (( j=1; j&lt;=$blockjob_retrycount; j++ )) do<br /> CMD=&quot;virsh blockjob --domain $DOMAIN --pivot $TARGET&quot;<br /> echo &quot;Command: $CMD&quot; &gt;&gt; $LOG<br /> echo &quot;Command: $CMD&quot;<br /> eval &quot;$CMD&quot;<br /> if [ $? -ne 0 ]; then<br /> ERR=&quot;virsh blockjob attempt no $j --domain $DOMAIN --pivot $TARGET failed&quot;<br /> echo &quot;$ERR&quot; &gt;&gt; $LOG<br /> echo &quot;$ERR&quot;<br /> if [[ $j -eq $blockjob_retrycount ]]; then<br /> ERR=&quot;all blockjob attempts --domain $DOMAIN --pivot $TARGET failed.&quot;<br /> echo &quot;$ERR&quot; &gt;&gt; $LOG<br /> echo &quot;$ERR&quot;<br /> echo &quot;$ERR<br /> Host: $HOST<br /> Domain: $DOMAIN<br /> Command: $CMD&quot; | mail -s &quot;$SHCMD blockjob Exception for $DOMAIN&quot; $EMR<br /> if [[ $pause_domain_after_bj_fail == true &amp;&amp; $pause_enabled == false &amp;&amp; $VMSTATE == &quot;running&quot; ]]; then<br /> MSG=&quot;Try to pause domain $DOMAIN first&quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> CMDst=&quot;virsh suspend $DOMAIN&quot;<br /> echo &quot;Command: $CMDst&quot; &gt;&gt; $LOG<br /> echo &quot;Command: $CMDst&quot;<br /> eval &quot;$CMDst&quot;<br /> if [ $? -ne 0 ]; then<br /> ERR=&quot;can't pause domain $DOMAIN&quot;<br /> echo &quot;$ERR&quot; &gt;&gt; $LOG<br /> echo &quot;$ERR&quot;<br /> else<br /> echo &quot;Command: $CMD&quot; &gt;&gt; $LOG<br /> echo &quot;Command: $CMD&quot;<br /> eval &quot;$CMD&quot;<br /> if [ $? -ne 0 ]; then<br /> ERR=&quot;can't blockjob --piovot $TARGET anyway, I'm giving up&quot;<br /> echo &quot;$ERR&quot; &gt;&gt; $LOG<br /> echo &quot;$ERR&quot;<br /> echo &quot;$ERR<br /> Host: $HOST<br /> Domain: $DOMAIN<br /> Command: $CMD&quot; | mail -s &quot;$SHCMD blockjob Exception for $DOMAIN&quot; $EMR<br /> echo &quot;$ERR&quot; &gt;&gt; $LOG<br /> echo &quot;$ERR&quot;<br /> BREAK=true<br /> ERRORORED=$(($ERRORED+1))<br /> fi<br /> MSG=&quot;Resume domain $DOMAIN&quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> CMDst=&quot;virsh resume $DOMAIN&quot;<br /> echo &quot;Command: $CMDst&quot; &gt;&gt; $LOG<br /> echo &quot;Command: $CMDst&quot;<br /> eval &quot;$CMDst&quot;<br /> if [ $? -ne 0 ]; then<br /> ERR=&quot;can't resume domain $DOMAIN, continue anyway&quot;<br /> echo &quot;$ERR&quot; &gt;&gt; $LOG<br /> echo &quot;$ERR&quot;<br /> else<br /> pause_enabled=false<br /> fi<br /> fi<br /> else<br /> BREAK=true<br /> ERRORORED=$(($ERRORED+1))<br /> break<br /> fi<br /> fi<br /> sleep $blockjob_delay<br /> else<br /> MSG=&quot;virsh blockjob attempt no $j --domain $DOMAIN --pivot $TARGET success&quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> break<br /> fi<br /> done<br /> [ $BREAK == true ] &amp;&amp; break<br /> fi<br /> fi<br /> if [[ $pause_enabled == true &amp;&amp; $VMSTATE == &quot;running&quot; ]]; then<br /> MSG=&quot;Resume domain $DOMAIN&quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> CMDst=&quot;virsh resume $DOMAIN&quot;<br /> echo &quot;Command: $CMDst&quot; &gt;&gt; $LOG<br /> echo &quot;Command: $CMDst&quot;<br /> eval &quot;$CMDst&quot;<br /> if [ $? -ne 0 ]; then<br /> ERR=&quot;can't resume domain $DOMAIN, continue anyway&quot;<br /> echo &quot;$ERR&quot; &gt;&gt; $LOG<br /> echo &quot;$ERR&quot;<br /> else<br /> pause_enabled=false<br /> fi<br /> fi<br /> fi<br /> i=$i+1<br /> done<br /> [ $BREAK == true ] &amp;&amp; continue<br /> #delete tmp images after blockcommit<br /> for IMAGE in $IMAGES; do<br /> set -o noglob<br /> if [[ $IMAGE == *${SNAPPREFIX}* ]]; then<br /> set +o noglob<br /> CMD=&quot;rm -f $IMAGE &gt;&gt; $LOG 2&gt;&amp;1&quot;<br /> MSG=&quot; Deleting temporary image $IMAGE&quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> echo &quot;Command: $CMD&quot; &gt;&gt; $LOG<br /> echo &quot;Command: $CMD&quot;<br /> eval &quot;$CMD&quot;<br /> fi<br /> set +o noglob<br /> done<br /> #Reload images after blockcommit<br /> IMAGES=$(virsh domblklist $DOMAIN --details | grep disk | awk '{print $4}')<br /> fi<br /> DISKSPEC=&quot;&quot;<br /> for TARGET in $TARGETS; do<br /> DISKSPEC=&quot;$DISKSPEC --diskspec $TARGET,snapshot=external&quot;<br /> done<br /> <br /> # transfer the VM to snapshot disk image(s)<br /> CMD=&quot;virsh snapshot-create-as --domain $DOMAIN --name ${SNAPPREFIX}$DOMAIN --no-metadata --atomic --disk-only --quiesce $DISKSPEC &gt;&gt; $LOG 2&gt;&amp;1&quot;<br /> echo &quot;Command: $CMD&quot; &gt;&gt; $LOG 2&gt;&amp;1<br /> echo &quot;Command: $CMD&quot;<br /> eval &quot;$CMD&quot;<br /> if [ $? -ne 0 ]; then<br /> MSG=&quot;Error create snapshot with --quiesce mode (it's require qemu-guest-agent), try without&quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> CMD=&quot;virsh snapshot-create-as --domain $DOMAIN --name ${SNAPPREFIX}$DOMAIN --no-metadata --atomic --disk-only $DISKSPEC &gt;&gt; $LOG 2&gt;&amp;1&quot;<br /> echo &quot;Command: $CMD&quot; &gt;&gt; $LOG 2&gt;&amp;1<br /> echo &quot;Command: $CMD&quot;<br /> eval &quot;$CMD&quot;<br /> fi<br /> if [ $? -ne 0 ]; then<br /> ERR=&quot;Failed to create snapshot for $DOMAIN&quot;<br /> echo &quot;$ERR&quot; &gt;&gt; $LOG<br /> echo &quot;$ERR&quot;<br /> echo &quot;$ERR<br /> Host: $HOST<br /> Domain: $DOMAIN<br /> Command: $CMD&quot; | mail -s &quot;$SHCMD snapshot Exception for $DOMAIN&quot; $EMR<br /> ERRORED=$(($ERRORED+1))<br /> continue<br /> fi<br /> #i=$i+1<br /> <br /> fi<br /> <br /> <br /> ####################################<br /> #Rsync #<br /> ####################################<br /> MSG=&quot;Rsync&quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> for IMAGE in $IMAGES; do<br /> FILEFULLNAME=`basename &quot;$IMAGE&quot;`<br /> if test -f &quot;$BACKUPFOLDER/$FILEFULLNAME&quot;; then<br /> MSG=&quot;Backup exists, merging only changes to image $BACKUPFOLDER/$FILEFULLNAME&quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> #CMD=&quot;rsync -apvhz --inplace --progress $IMAGE $BACKUPFOLDER/$FILEFULLNAME &quot;<br /> CMD=&quot;rsync -apvhz --inplace --progress $IMAGE $BACKUPFOLDER/$FILEFULLNAME &quot;<br /> else<br /> MSG=&quot;Backup does not exist, creating a full sparse copy of image $IMAGE&quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> #CMD=&quot;rsync -apvhz --sparse --progress $IMAGE $BACKUPFOLDER/$FILEFULLNAME &quot;<br /> CMD=&quot;rsync -apvhz --sparse --progress $IMAGE $BACKUPFOLDER/$FILEFULLNAME &quot;<br /> fi<br /> echo &quot;Command: $CMD&quot; &gt;&gt; $LOG<br /> echo &quot;Command: $CMD&quot;<br /> eval &quot;$CMD&quot;<br /> done<br /> ########################################<br /> # After sync file merge snapshots back #<br /> ########################################<br /> <br /> if [[ $VM_RUNNING -eq 1 ]]; then<br /> # Update the VM's disk image(s) with any changes recorded in the snapshot<br /> # while the copy process was running. In qemu lingo this is called a &quot;pivot&quot;<br /> BACKUPIMAGES=$(virsh domblklist $DOMAIN --details | grep disk | awk '{print $4}')<br /> for TARGET in $TARGETS; do<br /> #if [[ ${COMMITSNAPTAB[$i]} == true ]]; then<br /> #rsync can tak long time and state could changed so check once again <br /> #if state shut there will simple error becouse blockcommi and blockjob can't be done on shutdown domain.<br /> VMSTATE=$(LC_ALL=en_EN virsh list --all | grep [[:space:]]$DOMAIN[[:space:]] | awk '{print $3}')<br /> if [[ $VMSTATE == &quot;paused&quot; ]]; then<br /> pause_enabled=true<br /> else<br /> pause_enabled=false<br /> fi<br /> if [[ $pause_domain_bc == true &amp;&amp; $pause_enabled == false ]]; then<br /> MSG=&quot;Try to pause domain $DOMAIN first&quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> CMDst=&quot;virsh suspend $DOMAIN&quot;<br /> echo &quot;Command: $CMDst&quot; &gt;&gt; $LOG<br /> echo &quot;Command: $CMDst&quot;<br /> eval &quot;$CMDst&quot;<br /> if [ $? -ne 0 ]; then<br /> ERR=&quot;can't pause domain $DOMAIN, continue anyway&quot;<br /> echo &quot;$ERR&quot; &gt;&gt; $LOG<br /> echo &quot;$ERR&quot;<br /> else<br /> pause_enabled=true<br /> fi<br /> fi<br /> MSG=&quot;$TARGET BLOCKCOMMIT previous snapshot &quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> CMD=&quot;virsh blockcommit $DOMAIN $TARGET --active --pivot &gt;&gt; $LOG 2&gt;&amp;1&quot;<br /> echo &quot;Command: $CMD&quot; &gt;&gt; $LOG<br /> echo &quot;Command: $CMD&quot;<br /> eval &quot;$CMD&quot;<br /> if [ $? -ne 0 ]; then<br /> ERR=&quot;Could not merge changes for disk $TARGET of $DOMAIN with blockcommit. VM may be in an invalid state.&quot;<br /> echo &quot;$ERR&quot; &gt;&gt; $LOG<br /> echo &quot;$ERR&quot;<br /> echo &quot;$ERR<br /> Host: $HOST<br /> Domain: $DOMAIN<br /> Command: $CMD&quot; | mail -s &quot;$SHCMD blockcommit Exception for $DOMAIN&quot; $EMR<br /> if [[ $pause_domain_after_bc_fail == true &amp;&amp; $pause_enabled == false ]]; then<br /> MSG=&quot;Try to pause domain $DOMAIN and retry bc&quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> CMDst=&quot;virsh suspend $DOMAIN&quot;<br /> echo &quot;Command: $CMDst&quot; &gt;&gt; $LOG<br /> echo &quot;Command: $CMDst&quot;<br /> eval &quot;$CMDst&quot;<br /> if [ $? -ne 0 ]; then<br /> ERR=&quot;can't pause domain $DOMAIN, continue anyway&quot;<br /> echo &quot;$ERR&quot; &gt;&gt; $LOG<br /> echo &quot;$ERR&quot;<br /> else<br /> pause_enabled=true<br /> fi<br /> MSG=&quot;$TARGET BLOCKCOMMIT previous snapshot &quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> CMD=&quot;virsh blockcommit $DOMAIN $TARGET --active --pivot &gt;&gt; $LOG 2&gt;&amp;1&quot;<br /> echo &quot;Command: $CMD&quot; &gt;&gt; $LOG<br /> echo &quot;Command: $CMD&quot;<br /> eval &quot;$CMD&quot;<br /> if [ $? -ne 0 ]; then<br /> ERR=&quot;Could not merge changes for disk $TARGET of $DOMAIN (paused) with blockcommit. VM may be in an invalid state.&quot;<br /> echo &quot;$ERR&quot; &gt;&gt; $LOG<br /> echo &quot;$ERR&quot;<br /> echo &quot;$ERR<br /> Host: $HOST<br /> Domain: $DOMAIN<br /> Command: $CMD&quot; | mail -s &quot;$SHCMD blockcommit Exception for $DOMAIN&quot; $EMR<br /> else<br /> #if bc succes need to disable bj, so set to false<br /> enable_bj_attemts=false<br /> fi<br /> fi <br /> if [ $enable_bj_attemts == true ]; then<br /> if [[ $pause_while_bj_attemtps == true ]]; then<br /> MSG=&quot;Try to pause domain $DOMAIN first&quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> CMDst=&quot;virsh suspend $DOMAIN&quot;<br /> echo &quot;Command: $CMDst&quot; &gt;&gt; $LOG<br /> echo &quot;Command: $CMDst&quot;<br /> eval &quot;$CMDst&quot;<br /> if [ $? -ne 0 ]; then<br /> ERR=&quot;can't pause domain $DOMAIN, continue anyway&quot;<br /> echo &quot;$ERR&quot; &gt;&gt; $LOG<br /> echo &quot;$ERR&quot;<br /> else<br /> pause_enabled=true<br /> fi<br /> else<br /> if [[ $pause_enabled == true &amp;&amp; $VMSTATE == &quot;running&quot; ]]; then<br /> MSG=&quot;Resume domain $DOMAIN&quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> CMDst=&quot;virsh resume $DOMAIN&quot;<br /> echo &quot;Command: $CMDst&quot; &gt;&gt; $LOG<br /> echo &quot;Command: $CMDst&quot;<br /> eval &quot;$CMDst&quot;<br /> if [ $? -ne 0 ]; then<br /> ERR=&quot;can't resume domain $DOMAIN, continue anyway&quot;<br /> echo &quot;$ERR&quot; &gt;&gt; $LOG<br /> echo &quot;$ERR&quot;<br /> else<br /> pause_enabled=false<br /> fi<br /> fi<br /> fi<br /> <br /> for (( j=1; j&lt;=$blockjob_retrycount; j++ )) do<br /> CMD=&quot;virsh blockjob --domain $DOMAIN --pivot $TARGET&quot;<br /> echo &quot;Command: $CMD&quot; &gt;&gt; $LOG<br /> echo &quot;Command: $CMD&quot;<br /> eval &quot;$CMD&quot;<br /> if [ $? -ne 0 ]; then<br /> ERR=&quot;virsh blockjob attempt no $j --domain $DOMAIN --pivot $TARGET failed&quot;<br /> echo &quot;$ERR&quot; &gt;&gt; $LOG<br /> echo &quot;$ERR&quot;<br /> if [[ $j -eq $blockjob_retrycount ]]; then<br /> ERR=&quot;all blockjob attempt --domain $DOMAIN --pivot $TARGET failed.&quot;<br /> echo &quot;$ERR&quot; &gt;&gt; $LOG<br /> echo &quot;$ERR&quot;<br /> echo &quot;$ERR<br /> Host: $HOST<br /> Domain: $DOMAIN<br /> Command: $CMD&quot; | mail -s &quot;$SHCMD blockjob Exception for $DOMAIN&quot; $EMR<br /> if [[ $pause_domain_after_bj_fail == true &amp;&amp; $pause_enabled == false &amp;&amp; $VMSTATE == &quot;running&quot; ]]; then<br /> MSG=&quot;Try to pause domain $DOMAIN first&quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> CMDst=&quot;virsh suspend $DOMAIN&quot;<br /> echo &quot;Command: $CMDst&quot; &gt;&gt; $LOG<br /> echo &quot;Command: $CMDst&quot;<br /> eval &quot;$CMDst&quot;<br /> if [ $? -ne 0 ]; then<br /> ERR=&quot;can't pause domain $DOMAIN&quot;<br /> echo &quot;$ERR&quot; &gt;&gt; $LOG<br /> echo &quot;$ERR&quot;<br /> else<br /> echo &quot;Command: $CMD&quot; &gt;&gt; $LOG<br /> echo &quot;Command: $CMD&quot;<br /> eval &quot;$CMD&quot;<br /> if [ $? -ne 0 ]; then<br /> ERR=&quot;can't blockjob --piovot $TARGET anyway, I'm giving up&quot;<br /> echo &quot;$ERR&quot; &gt;&gt; $LOG<br /> echo &quot;$ERR&quot;<br /> echo &quot;$ERR<br /> Host: $HOST<br /> Domain: $DOMAIN<br /> Command: $CMD&quot; | mail -s &quot;$SHCMD blockjob Exception for $DOMAIN&quot; $EMR<br /> echo &quot;$ERR&quot; &gt;&gt; $LOG<br /> echo &quot;$ERR&quot;<br /> BREAK=true<br /> ERRORORED=$(($ERRORED+1))<br /> fi<br /> MSG=&quot;Resume domain $DOMAIN&quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> CMDst=&quot;virsh resume $DOMAIN&quot;<br /> echo &quot;Command: $CMDst&quot; &gt;&gt; $LOG<br /> echo &quot;Command: $CMDst&quot;<br /> eval &quot;$CMDst&quot;<br /> if [ $? -ne 0 ]; then<br /> ERR=&quot;can't resume domain $DOMAIN, continue anyway&quot;<br /> echo &quot;$ERR&quot; &gt;&gt; $LOG<br /> echo &quot;$ERR&quot;<br /> else<br /> pause_enabled=false<br /> fi<br /> fi<br /> else<br /> BREAK=true<br /> ERRORORED=$(($ERRORED+1))<br /> break<br /> fi<br /> fi<br /> sleep $blockjob_delay<br /> else<br /> MSG=&quot;virsh blockjob attempt no $j --domain $DOMAIN --pivot $TARGET success&quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> break<br /> fi<br /> done<br /> [ $BREAK == true ] &amp;&amp; break<br /> fi<br /> fi<br /> if [[ $pause_enabled == true &amp;&amp; $VMSTATE == &quot;running&quot; ]]; then<br /> MSG=&quot;Resume domain $DOMAIN&quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> CMDst=&quot;virsh resume $DOMAIN&quot;<br /> echo &quot;Command: $CMDst&quot; &gt;&gt; $LOG<br /> echo &quot;Command: $CMDst&quot;<br /> eval &quot;$CMDst&quot;<br /> if [ $? -ne 0 ]; then<br /> ERR=&quot;can't resume domain $DOMAIN, continue anyway&quot;<br /> echo &quot;$ERR&quot; &gt;&gt; $LOG<br /> echo &quot;$ERR&quot;<br /> else<br /> pause_enabled=false<br /> fi<br /> fi<br /> #fi<br /> i=$i+1<br /> done<br /> [ $BREAK == true ] &amp;&amp; continue<br /> <br /> # Now that the VM's disk image(s) have been successfully committed/pivoted to<br /> # back to the main disk image, remove the temporary snapshot image file(s)<br /> for BACKUP in $BACKUPIMAGES; do<br /> set -o noglob<br /> if [[ $BACKUP == *${SNAPPREFIX}* ]]; then<br /> set +o noglob<br /> CMD=&quot;rm -f $BACKUP &gt;&gt; $LOG 2&gt;&amp;1&quot;<br /> MSG=&quot; Deleting temporary image $BACKUP&quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> MSG=&quot;Command: $CMD&quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> eval &quot;$CMD&quot;<br /> fi<br /> set +o noglob<br /> done<br /> <br /> # capture the VM's definition in use at the time the backup was done<br /> CMD=&quot;virsh dumpxml $DOMAIN &gt; $BACKUPFOLDER/$DOMAIN.xml 2&gt;&gt; $LOG&quot;<br /> MSG=&quot;Command: $CMD&quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> eval &quot;$CMD&quot;<br /> else<br /> # copy the VM's definition<br /> CMD=&quot;cp $PATH_LIBVIRT_QEMU/$DOMAIN.xml $BACKUPFOLDER/$DOMAIN.xml 2&gt;&gt; $LOG&quot;<br /> MSG=&quot;Command: $CMD&quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> eval &quot;$CMD&quot;<br /> fi<br /> <br /> <br /> MSG=&quot;---- Backup done $DOMAIN ---- $(date +'%d-%m-%Y %H:%M:%S') ----&quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> done<br /> MSG=&quot;$SHCMD: Finished backups at $(date +'%d-%m-%Y %H:%M:%S')<br /> ====================&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> <br /> exit $ERRORED<br /> <br /> &lt;/pre&gt;</div> Michael https://wiki.goedeke.de/index.php?title=Router2&diff=276 Router2 2023-11-02T07:20:32Z <p>Michael: /* Netzwerkkonfiguration in /config/config.boot */</p> <hr /> <div><br /> == Server ==<br /> <br /> Virtuelle Maschine auf [[AX41 NVMe 1380159|KVM]]<br /> <br /> &lt;pre&gt;Hipervisor: KVM<br /> Architecture: x86_64<br /> CPU: 1<br /> RAM: 1024<br /> Virtual Disk: 10.00 GiB<br /> Source path: /storage/vms/router2.qcow2<br /> &lt;/pre&gt;<br /> <br /> == Betriebssystem ==<br /> <br /> &lt;pre&gt;Version: VyOS 1.4-rolling-202102130218<br /> Release Train: sagitta<br /> <br /> Built by: autobuild@vyos.net<br /> Built on: Sat 13 Feb 2021 02:18 UTC<br /> Build UUID: 45d96b0a-59a2-4d5b-8596-1c2cdc4d4a1e<br /> Build Commit ID: aec60effa4e36e<br /> <br /> Architecture: x86_64<br /> Boot via: installed image<br /> System type: KVM guest<br /> <br /> Hardware vendor: QEMU<br /> Hardware model: Standard PC (Q35 + ICH9, 2009)<br /> Hardware S/N: <br /> Hardware UUID: f7fddb6d-e8b9-4cfd-81d6-1bbe2e58bb54<br /> &lt;/pre&gt;<br /> <br /> === Netzwerkkonfiguration in /config/config.boot ===<br /> &lt;pre&gt;<br /> firewall {<br /> all-ping enable<br /> broadcast-ping disable<br /> config-trap disable<br /> ipv6-name tun2_in {<br /> default-action reject<br /> rule 1 {<br /> action accept<br /> protocol icmpv6<br /> }<br /> rule 2 {<br /> action accept<br /> protocol all<br /> state {<br /> established enable<br /> related enable<br /> }<br /> }<br /> rule 3 {<br /> action accept<br /> destination {<br /> address 2001:470:1f0b:563::15<br /> port 80<br /> }<br /> protocol tcp<br /> state {<br /> new enable<br /> }<br /> }<br /> rule 4 {<br /> action accept<br /> destination {<br /> address 2001:470:1f0b:563::15<br /> port 443<br /> }<br /> protocol tcp<br /> state {<br /> new enable<br /> }<br /> }<br /> }<br /> ipv6-receive-redirects disable<br /> ipv6-src-route disable<br /> ip-src-route disable<br /> log-martians enable<br /> receive-redirects disable<br /> send-redirects enable<br /> source-validation disable<br /> syn-cookies enable<br /> twa-hazards-protection disable<br /> }<br /> interfaces {<br /> ethernet eth0 {<br /> address 10.12.3.1/29<br /> duplex auto<br /> hw-id 52:54:00:64:19:ea<br /> }<br /> ethernet eth1 {<br /> address 172.16.10.1/24<br /> address 2001:470:1f0b:563::1/64<br /> hw-id 52:54:00:c1:6f:c2<br /> ipv6 {<br /> dup-addr-detect-transmits 1<br /> }<br /> speed auto<br /> }<br /> loopback lo {<br /> address 78.47.239.0/32<br /> address 78.47.239.1/32<br /> address 78.47.239.2/32<br /> address 78.47.239.3/32<br /> address 78.47.239.4/32<br /> address 78.47.239.5/32<br /> address 78.47.239.6/32<br /> address 78.47.239.7/32<br /> }<br /> openvpn vtun0 {<br /> mode server<br /> openvpn-option duplicate-cn<br /> protocol tcp-passive<br /> server {<br /> push-route 172.16.10.0/24<br /> subnet 172.16.11.0/25<br /> }<br /> tls {<br /> ca-cert-file /config/auth/ca.crt<br /> cert-file /config/auth/server.crt<br /> dh-file /config/auth/dh2048.pem<br /> key-file /config/auth/server.key<br /> }<br /> }<br /> tunnel tun2 {<br /> address 2001:470:1f0a:563::2/64<br /> description &quot;HE.NET IPv6 Tunnel&quot;<br /> encapsulation sit<br /> firewall {<br /> in {<br /> ipv6-name tun2_in<br /> }<br /> }<br /> local-ip 78.47.239.0<br /> multicast disable<br /> remote-ip 216.66.80.30<br /> }<br /> wireguard wg0 {<br /> address 172.16.12.1/24<br /> peer michael {<br /> allowed-ips 192.168.188.0/24<br /> allowed-ips 172.16.12.2/32<br /> allowed-ips 192.168.198.0/24<br /> pubkey 0G3hmNjYbE9/fcbqZGF+LG5r/uaZ5r1CJFyEkrEOSQc=<br /> }<br /> peer njk {<br /> allowed-ips 192.168.0.0/24<br /> allowed-ips 172.16.12.3/32<br /> pubkey ugz2GJdirFGMCcI6pdTdEjca19LWIY3rzO+xwplbGzo=<br /> }<br /> port 51280<br /> private-key wg-key<br /> }<br /> }<br /> nat {<br /> destination {<br /> rule 2 {<br /> description mail2<br /> destination {<br /> address 78.47.239.3<br /> port 443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.22<br /> port 443<br /> }<br /> }<br /> rule 3 {<br /> description &quot;owncloud http&quot;<br /> destination {<br /> address 78.47.239.1<br /> port 80<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.3<br /> port 80<br /> }<br /> }<br /> rule 4 {<br /> description &quot;owncloud https&quot;<br /> destination {<br /> address 78.47.239.1<br /> port 443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.3<br /> port 443<br /> }<br /> }<br /> rule 5 {<br /> destination {<br /> address 78.47.239.5<br /> port 80<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.6<br /> port 80<br /> }<br /> }<br /> rule 6 {<br /> destination {<br /> address 78.47.239.5<br /> port 22222<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.6<br /> port 22<br /> }<br /> }<br /> rule 7 {<br /> destination {<br /> address 78.47.239.5<br /> port 443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.6<br /> port 443<br /> }<br /> }<br /> rule 8 {<br /> destination {<br /> address 78.47.239.5<br /> port 9443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.6<br /> port 9443<br /> }<br /> }<br /> rule 9 {<br /> destination {<br /> address 78.47.239.5<br /> port 8443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.6<br /> port 8443<br /> }<br /> }<br /> rule 10 {<br /> destination {<br /> address 78.47.239.5<br /> port 20<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.6<br /> port 20<br /> }<br /> }<br /> rule 11 {<br /> destination {<br /> address 78.47.239.5<br /> port 21<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.6<br /> port 21<br /> }<br /> }<br /> rule 12 {<br /> destination {<br /> address 78.47.239.5<br /> port 12000-13000<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.6<br /> port 12000-13000<br /> }<br /> }<br /> rule 13 {<br /> destination {<br /> address 78.47.239.2<br /> port 80<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.5<br /> port 80<br /> }<br /> }<br /> rule 14 {<br /> destination {<br /> address 78.47.239.2<br /> port 443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.5<br /> port 443<br /> }<br /> }<br /> rule 15 {<br /> destination {<br /> address 78.47.239.2<br /> port 6922<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.5<br /> port 22<br /> }<br /> }<br /> rule 16 {<br /> description mail2<br /> destination {<br /> address 78.47.239.3<br /> port 993<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.22<br /> port 993<br /> }<br /> }<br /> rule 17 {<br /> description mail2<br /> destination {<br /> address 78.47.239.3<br /> port 587<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.22<br /> port 587<br /> }<br /> }<br /> rule 25 {<br /> destination {<br /> address 78.47.239.7<br /> port 443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.11<br /> port 443<br /> }<br /> }<br /> rule 26 {<br /> destination {<br /> address 78.47.239.3<br /> port 7080<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.22<br /> port 80<br /> }<br /> }<br /> rule 27 {<br /> destination {<br /> address 78.47.239.6<br /> port 80<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.20<br /> port 80<br /> }<br /> }<br /> rule 28 {<br /> destination {<br /> address 78.47.239.6<br /> port 443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.20<br /> port 443<br /> }<br /> }<br /> rule 29 {<br /> destination {<br /> address 78.47.239.0<br /> port 80<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.13<br /> port 80<br /> }<br /> }<br /> rule 30 {<br /> destination {<br /> address 78.47.239.0<br /> port 443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.13<br /> port 443<br /> }<br /> }<br /> rule 31 {<br /> destination {<br /> address 78.47.239.0<br /> port 2223<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.13<br /> port 22<br /> }<br /> }<br /> rule 32 {<br /> description mail2<br /> destination {<br /> address 78.47.239.3<br /> port 80<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.22<br /> port 80<br /> }<br /> }<br /> rule 33 {<br /> description &quot;crm http&quot;<br /> destination {<br /> address 78.47.239.7<br /> port 80<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.11<br /> port 80<br /> }<br /> }<br /> rule 34 {<br /> description mail2<br /> destination {<br /> address 78.47.239.3<br /> port 25<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.22<br /> port 25<br /> }<br /> }<br /> rule 35 {<br /> description mail2<br /> destination {<br /> address 78.47.239.3<br /> port 143<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.22<br /> port 143<br /> }<br /> }<br /> rule 36 {<br /> description mail2<br /> destination {<br /> address 78.47.239.3<br /> port 465<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.22<br /> port 465<br /> }<br /> }<br /> rule 40 {<br /> description swimflow<br /> destination {<br /> address 78.47.239.4<br /> port 80<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.14<br /> port 80<br /> }<br /> }<br /> rule 41 {<br /> description swimflow<br /> destination {<br /> address 78.47.239.4<br /> port 443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.14<br /> port 443<br /> }<br /> }<br /> }<br /> source {<br /> rule 110 {<br /> outbound-interface eth0<br /> source {<br /> address 172.16.10.22/32<br /> }<br /> translation {<br /> address 78.47.239.3<br /> }<br /> }<br /> rule 200 {<br /> outbound-interface eth0<br /> source {<br /> address 172.16.10.0/24<br /> }<br /> translation {<br /> address 78.47.239.1<br /> }<br /> }<br /> rule 201 {<br /> outbound-interface eth0<br /> source {<br /> address 172.16.11.128/25<br /> }<br /> translation {<br /> address 78.47.239.1<br /> }<br /> }<br /> }<br /> }<br /> protocols {<br /> static {<br /> route 0.0.0.0/0 {<br /> next-hop 10.12.3.2 {<br /> }<br /> }<br /> route 172.16.41.0/24 {<br /> next-hop 172.16.91.2 {<br /> }<br /> }<br /> route 172.16.42.0/24 {<br /> next-hop 172.16.43.9 {<br /> }<br /> }<br /> route 192.168.0.0/16 {<br /> interface wg0 {<br /> }<br /> }<br /> route6 ::/0 {<br /> next-hop 2001:470:1f0a:563::1 {<br /> }<br /> }<br /> }<br /> }<br /> service {<br /> dns {<br /> forwarding {<br /> allow-from 172.16.0.0/12<br /> cache-size 150<br /> listen-address 172.16.10.1<br /> name-server 8.8.8.8<br /> }<br /> }<br /> router-advert {<br /> interface eth1 {<br /> prefix 2001:470:1f0b:563::/64 {<br /> }<br /> }<br /> }<br /> snmp {<br /> community aquapool {<br /> authorization ro<br /> network 172.16.10.0/24<br /> }<br /> listen-address 172.16.10.1 {<br /> port 161<br /> }<br /> }<br /> ssh {<br /> disable-password-authentication<br /> listen-address 78.47.239.0<br /> port 22<br /> }<br /> }<br /> system {<br /> config-management {<br /> commit-revisions 20<br /> }<br /> console {<br /> device ttyS0 {<br /> speed 9600<br /> }<br /> }<br /> host-name router.aquapool.de<br /> login {<br /> user falk {<br /> authentication {<br /> encrypted-password $1$voX2XI/s$4LcZVA.PZRcHJlS2T7Q5w/<br /> plaintext-password &quot;&quot;<br /> public-keys fstern@nb-stern {<br /> key AAAAB3NzaC1yc2EAAAABIwAAAQEAzAMO7qr+wTBJy5koRY/1QMbK/GyEttp1DE0VimrqCG7yF3kyMPhMj0Pc2pLBEFbsh9Boec54hGUBnT4+1xC6I5sHxbxnkWpImTyF1KnNDAwh4qYHZby3iJu08xLgsG1XCaeoX8vyzyrXU0n2iH6TjRycgi63jYz+F4vcYKn9tT3ijciFdxMHz82kCpbCa+AfqUex902MB2PhFu2ymKJHQSdT2PmIUqmeEdSPBcmGyhFtTBgpGc+9ZjEFZd34Y0kgXbYNYSnG7lycLY9tWKq379uL3gBBNScuKMJHldjC7KVe8lkvHY563OZ9Y0OvdBXRGKL06+Xl9ZHIRqXa4tC/FQ==<br /> type ssh-rsa<br /> }<br /> }<br /> }<br /> user mg {<br /> authentication {<br /> public-keys mg {<br /> key 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<br /> type ssh-rsa<br /> }<br /> }<br /> }<br /> user njk {<br /> authentication {<br /> encrypted-password $1$QmEAxU4/$AZZjjd2fA9QxQxbN1yrQt/<br /> plaintext-password &quot;&quot;<br /> public-keys me@njk {<br /> key AAAAB3NzaC1yc2EAAAABIwAAAQEAvLKBzTArq91swhxmS8UDCaEIhX1CDD35aeubyUnU3WSM8rguHTxbDjY4XWfPGO38uABmt5GEk1DqNcqOXG9XwSH523jxaG/2KsJpuBHBngM2rxZmR7LL9Gxy4GNPNuRsVk8R9iqJU7DD4N+g1WJZC/mM3so12YjKE+dfPGJhimUt0wWYqkU6fBX7COZb0p56g02AO5ovVmDQTfqJ9qSXLumWnvt0eGN8us4g/+cNO9RqJBMj+hsXfkbi6bnYVy6fhHVan9B4tLllzSCfxli5Q+NfzIu5rpIR63TiheSQNlvPEqrVs44OkOPLFhBX8McSUlWebwofbPhck+DLrBwz1Q==<br /> type ssh-rsa<br /> }<br /> }<br /> }<br /> }<br /> name-server 213.133.100.100<br /> ntp {<br /> server 0.pool.ntp.org {<br /> }<br /> server 0.vyatta.pool.ntp.org {<br /> }<br /> server 1.pool.ntp.org {<br /> }<br /> server 1.vyatta.pool.ntp.org {<br /> }<br /> server 2.pool.ntp.org {<br /> }<br /> server 2.vyatta.pool.ntp.org {<br /> }<br /> }<br /> static-host-mapping {<br /> host-name app1.aquapool.de {<br /> inet 172.16.10.7<br /> }<br /> host-name crm.aquapool.de {<br /> alias wiki.aquapool.de<br /> alias wiki2.aquapool.de<br /> alias vtiger.aquapool.de<br /> inet 172.16.10.11<br /> }<br /> host-name db1.aquapool.de {<br /> inet 172.16.10.8<br /> }<br /> host-name mail2.aquapool.de {<br /> alias mail.aquapool.de<br /> inet 172.16.10.22<br /> }<br /> host-name om.aquapool.de {<br /> alias swimflow.de<br /> alias trainingpool.de<br /> inet 172.16.10.14<br /> }<br /> host-name owncloud.aquapool.de {<br /> alias cloud.aquapool.de<br /> inet 172.16.10.3<br /> }<br /> host-name service.aquapool.de {<br /> inet 172.16.10.12<br /> }<br /> host-name web3.aquapool.de {<br /> alias aquacaetum.aquapool.de<br /> inet 172.16.10.6<br /> }<br /> host-name web4.aquapool.de {<br /> alias www.aquapool.de<br /> inet 172.16.10.5<br /> }<br /> }<br /> syslog {<br /> global {<br /> facility all {<br /> level notice<br /> }<br /> facility protocols {<br /> level debug<br /> }<br /> }<br /> }<br /> time-zone GMT<br /> }<br /> <br /> <br /> // Warning: Do not remove the following line.<br /> // vyos-config-version: &quot;broadcast-relay@1:cluster@1:config-management@1:conntrack@2:conntrack-sync@1:dhcp-relay@2:dhcp-server@5:dhcpv6-server@1:dns-forwarding@3:firewall@5:https@2:interfaces@19:ipoe-server@1:ipsec@5:l2tp@3:lldp@1:mdns@1:nat@5:nat66@1:ntp@1:pppoe-server@5:pptp@2:qos@1:quagga@8:rpki@1:salt@1:snmp@2:ssh@2:sstp@3:system@20:vrrp@2:vyos-accel-ppp@2:wanloadbalance@3:webproxy@2:zone-policy@1&quot;<br /> // Release version: 1.4-rolling-202102130218<br /> <br /> &lt;/pre&gt;</div> Michael https://wiki.goedeke.de/index.php?title=Backup_der_VMs&diff=275 Backup der VMs 2023-11-02T07:17:57Z <p>Michael: xxx</p> <hr /> <div>Die VM´s werden via zwei Backup-scripte (auf dem [[KVM]]) automatisch mit einem Crontab monatlich inkrementell auf die [[BX40|Storeage Box]] gesichert:<br /> &lt;pre&gt;crontab -e<br /> 20 1 1 */2 * /storage/vms/backup-part1.sh 2&gt;&amp;1 | msmtp michael@goedeke.de<br /> 20 1 2 */2 * /storage/vms/backup-part2.sh 2&gt;&amp;1 | msmtp michael@goedeke.de<br /> 20 1 3 */2 * /storage/vms/backup-service.sh 2&gt;&amp;1 | msmtp michael@goedeke.de&lt;/pre&gt;<br /> <br /> /storage/vms/backup-vms.sh<br /> &lt;pre&gt;<br /> #!/bin/bash<br /> <br /> #################### config variables########################<br /> <br /> #Uncomment to backup domains myVMa and myVMb<br /> DOMAINS=&quot;&lt;alle in part1 bzw. in part2&gt;&quot;<br /> <br /> #Alternatively list all VMs and back them all up<br /> #DOMAINS=$(virsh list --all | tail -n +3 | awk '{print $2}')<br /> <br /> BACKUPROOT=/var/backups/kvms/backup_vms/$(hostname)<br /> <br /> LOG=&quot;$BACKUPROOT/logs/qemu-backup.$(date +%Y-%m-%d).log&quot;<br /> SNAPPREFIX=snaptemp-<br /> <br /> # Path to XML files for stopped VM...<br /> PATH_LIBVIRT_QEMU=&quot;/etc/libvirt/qemu&quot;<br /> <br /> #pause before blockcommit<br /> pause_domain_bc=false<br /> #pause after blockcommit fail. if pause_domain_bc is set to true, this option is skiped<br /> pause_domain_after_bc_fail=true<br /> #on fail blockcommit try blockjob<br /> enable_bj_attemts=true<br /> blockjob_retrycount=1<br /> blockjob_delay=&quot;30s&quot;<br /> pause_while_bj_attemtps=true<br /> #if blockjob attempts fail, try pause domain? (if pause_while_bj_attemtps is set to true, script ignore this option)<br /> pause_domain_after_bj_fail=true<br /> <br /> EMR=&quot;michael@goedeke.de&quot;<br /> #****************************<br /> #you can create conf file with variables which overwrite those above<br /> #fo example if name of yours script is backup_vms.sh,create file in location wher is your script and name him-&gt; backup_vms.conf<br /> #if you want other name and path, you need to find and change value for variable below (outsite config variables block) named-&gt; confFile<br /> #it is usefull if we work with many hypervisiors and make some changes in script<br /> #****************************<br /> <br /> #################### end of config variables#################<br /> <br /> SHCMD=&quot;$(basename -- $0)&quot;<br /> SHCMD_path=$(dirname $(readlink -f $0))<br /> confFile=&quot;$SHCMD_path/${SHCMD%.*}.conf&quot;<br /> if [ -f &quot;$confFile&quot; ]; then<br /> source &quot;$confFile&quot;<br /> echo &quot;overwrite vars from config file&quot;<br /> else<br /> echo &quot;no config file, but if you set variables on begining it is not necessary&quot;<br /> fi<br /> <br /> [ ! -f $BACKUPROOT/logs ] &amp;&amp; mkdir -p $BACKUPROOT/logs<br /> DATE=&quot;$(date +%Y-%m-%d.%H%M%S)&quot;<br /> <br /> ERRORED=0<br /> COMMITSNAPTAB[0]=false<br /> BREAK=false<br /> <br /> <br /> <br /> <br /> <br /> <br /> # extract the date coding in FILEFULLNAME (note: filename format must be YYYY-MM-DD)<br /> dtmatch () { sed -n -e 's/.*\(2[0-1][0-9][0-9]-[0-1][0-9]-[0-3][0-9]\).*/\1/p'; }<br /> #check if previous instance of script is not running, it's mandatory for blockcommit after interput script from some reason<br /> if pidof -x &quot;$SHCMD&quot; -o $$ &gt;/dev/null;then<br /> ERR=&quot;An another instance of this script is already running, please clear all the sessions of this script before starting a new one<br /> If you are sure to stop previous instance, try command: kill -9 \$(pidof -x \&quot;$SHCMD\&quot;)&quot;<br /> echo &quot;$ERR&quot; &gt;&gt; $LOG<br /> echo &quot;$ERR&quot;<br /> exit 1<br /> fi<br /> echo &quot;$SHCMD: Starting backups on $(date +'%d-%m-%Y %H:%M:%S')&quot; &gt;&gt; $LOG<br /> for DOMAIN in $DOMAINS; do<br /> BREAK=false<br /> #check if domain exists<br /> VMSRC=$(virsh list --all | grep [[:space:]]$DOMAIN[[:space:]] | awk '{print $3}')<br /> VMSRC=${#VMSRC}<br /> if [[ $VMSRC -eq 0 ]]; then<br /> ERR=&quot;Domain $DOMAIN on this hypervisior not exists&quot;<br /> echo &quot;$ERR&quot; &gt;&gt; $LOG<br /> echo &quot;$ERR&quot; <br /> continue<br /> fi<br /> <br /> echo &quot;---- VM Backup start $DOMAIN ---- $(date +'%d-%m-%Y %H:%M:%S')&quot; &gt;&gt; $LOG<br /> <br /> VM_RUNNING=1<br /> <br /> VMSTATE=$(LC_ALL=en_EN virsh list --all | grep [[:space:]]$DOMAIN[[:space:]] | awk '{print $3}')<br /> echo &quot;$VMSTATE&quot;<br /> if [[ $VMSTATE == &quot;running&quot; || $VMSTATE == &quot;paused&quot; ]]; then<br /> MSG=&quot;-&gt; VM $DOMAIN running or paused.&quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot; <br /> else<br /> <br /> MSG=&quot;-&gt; VM $DOMAIN not running. No snapshot and blockcommit. Only copy.&quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> VM_RUNNING=0<br /> fi<br /> <br /> BACKUPFOLDER=$BACKUPROOT/$DOMAIN<br /> [ ! -d $BACKUPFOLDER ] &amp;&amp; mkdir -p $BACKUPFOLDER<br /> TARGETS=$(virsh domblklist $DOMAIN --details | grep disk | awk '{print $3}')<br /> IMAGES=$(virsh domblklist $DOMAIN --details | grep disk | awk '{print $4}')<br /> <br /> # check to make sure the VM is running on a standard image, not<br /> # a snapshot that may be from a backup that previously failed<br /> unset COMMITSNAPTAB[*]<br /> i=0<br /> COMMITSNAP=false<br /> for IMAGE in $IMAGES; do<br /> set -o noglob<br /> if [[ $IMAGE == *${SNAPPREFIX}* ]]; then<br /> set +o noglob<br /> if [[ $VM_RUNNING -eq 0 ]]; then<br /> ERR=&quot;$SHCMD: Error VM $DOMAIN is not running but is on a snapshot disk image: $IMAGE&quot;<br /> echo $ERR &gt;&gt; $LOG<br /> echo &quot;$ERR&quot;<br /> echo &quot;$ERR<br /> Host: $HOST<br /> Disk Image: $IMAGE<br /> Domain: $DOMAIN<br /> Command: virsh domblklist $DOMAIN --details&quot; | mail -s &quot;$SHCMD snapshot Exception for $DOMAIN&quot; $EMR<br /> BREAK=true<br /> ERRORED=$(($ERRORED+1))<br /> break<br /> else<br /> COMMITSNAPTAB[$i]=true<br /> COMMITSNAP=true<br /> MSG=&quot;VM $DOMAIN is running but is on snapshot image $IMAGE so mark him for blockcommit first&quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> fi<br /> else<br /> # if not running on snapshot still must check if ther is no tmp file, if is presents, must be deleted before start new snapshot<br /> FILEPATH=&quot;${IMAGE%/*}&quot;<br /> FILEFULLNAME=`basename &quot;$IMAGE&quot;`<br /> FILENAME=&quot;${FILEFULLNAME%.*}&quot;<br /> #FILEEXT=&quot;${FILEFULLNAME#*.}<br /> TMPFILE=&quot;$FILEPATH/$FILENAME.$SNAPPREFIX$DOMAIN&quot;<br /> if [ -f &quot;$TMPFILE&quot; ]; then<br /> CMD=&quot;rm -f $TMPFILE &gt;&gt; $LOG 2&gt;&amp;1&quot;<br /> MSG=&quot; Deleting temporary image $TMPFILE after making snapshot&quot;<br /> echo &quot;$MSG&quot; &gt;&gt;$LOG<br /> echo &quot;$MSG&quot;<br /> echo &quot;Command: $CMD&quot; &gt;&gt; $LOG<br /> echo &quot;Command: $CMD&quot;<br /> eval &quot;$CMD&quot;<br /> fi<br /> fi<br /> set +o noglob<br /> i=$i+1<br /> done<br /> [ $BREAK == true ] &amp;&amp; continue<br /> <br /> if [[ $VM_RUNNING -eq 1 ]]; then<br /> #if vm running on snap, first i need to merge<br /> #i=0<br /> if [[ $COMMITSNAP == true ]]; then<br /> i=0<br /> for TARGET in $TARGETS; do<br /> if [[ ${COMMITSNAPTAB[$i]} == true ]]; then<br /> if [[ $VMSTATE == &quot;paused&quot; ]]; then<br /> pause_enabled=true<br /> else<br /> pause_enabled=false<br /> fi<br /> if [[ $pause_domain_bc == true &amp;&amp; $pause_enabled == false ]]; then<br /> MSG=&quot;Try to pause domain $DOMAIN first&quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> CMDst=&quot;virsh suspend $DOMAIN&quot;<br /> echo &quot;Command: $CMDst&quot; &gt;&gt; $LOG<br /> echo &quot;Command: $CMDst&quot;<br /> eval &quot;$CMDst&quot;<br /> if [ $? -ne 0 ]; then<br /> ERR=&quot;can't pause domain $DOMAIN, continue anyway&quot;<br /> echo &quot;$ERR&quot; &gt;&gt; $LOG<br /> echo &quot;$ERR&quot;<br /> else<br /> pause_enabled=true<br /> fi<br /> fi<br /> MSG=&quot;$TARGET BLOCKCOMMIT previous snapshot &quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> CMD=&quot;virsh blockcommit $DOMAIN $TARGET --active --pivot &gt;&gt; $LOG 2&gt;&amp;1&quot;<br /> echo &quot;Command: $CMD&quot; &gt;&gt; $LOG<br /> echo &quot;Command: $CMD&quot;<br /> eval &quot;$CMD&quot;<br /> if [ $? -ne 0 ]; then<br /> ERR=&quot;Could not merge changes for disk $TARGET of $DOMAIN with blockcommit. VM may be in an invalid state.&quot;<br /> echo &quot;$ERR&quot; &gt;&gt; $LOG<br /> echo &quot;$ERR&quot;<br /> echo &quot;$ERR<br /> Host: $HOST<br /> Domain: $DOMAIN<br /> Command: $CMD&quot; | mail -s &quot;$SHCMD blockcommit Exception for $DOMAIN&quot; $EMR<br /> if [[ $pause_domain_after_bc_fail == true &amp;&amp; $pause_enabled == false ]]; then<br /> MSG=&quot;Try to pause domain $DOMAIN and retry bc&quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> CMDst=&quot;virsh suspend $DOMAIN&quot;<br /> echo &quot;Command: $CMDst&quot; &gt;&gt; $LOG<br /> echo &quot;Command: $CMDst&quot;<br /> eval &quot;$CMDst&quot;<br /> if [ $? -ne 0 ]; then<br /> ERR=&quot;can't pause domain $DOMAIN, continue anyway&quot;<br /> echo &quot;$ERR&quot; &gt;&gt; $LOG<br /> echo &quot;$ERR&quot;<br /> else<br /> pause_enabled=true<br /> fi<br /> MSG=&quot;$TARGET BLOCKCOMMIT previous snapshot &quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> CMD=&quot;virsh blockcommit $DOMAIN $TARGET --active --pivot &gt;&gt; $LOG 2&gt;&amp;1&quot;<br /> echo &quot;Command: $CMD&quot; &gt;&gt; $LOG<br /> echo &quot;Command: $CMD&quot;<br /> eval &quot;$CMD&quot;<br /> if [ $? -ne 0 ]; then<br /> ERR=&quot;Could not merge changes for disk $TARGET of $DOMAIN (paused) with blockcommit. VM may be in an invalid state.&quot;<br /> echo &quot;$ERR&quot; &gt;&gt; $LOG<br /> echo &quot;$ERR&quot;<br /> echo &quot;$ERR<br /> Host: $HOST<br /> Domain: $DOMAIN<br /> Command: $CMD&quot; | mail -s &quot;$SHCMD blockcommit Exception for $DOMAIN&quot; $EMR<br /> else<br /> #if bc succes need to disable bj, so set to false<br /> enable_bj_attemts=false<br /> fi<br /> fi <br /> if [ $enable_bj_attemts == true ]; then<br /> if [[ $pause_while_bj_attemtps == true ]]; then<br /> MSG=&quot;Try to pause domain $DOMAIN first&quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> CMDst=&quot;virsh suspend $DOMAIN&quot;<br /> echo &quot;Command: $CMDst&quot; &gt;&gt; $LOG<br /> echo &quot;Command: $CMDst&quot;<br /> eval &quot;$CMDst&quot;<br /> if [ $? -ne 0 ]; then<br /> ERR=&quot;can't pause domain $DOMAIN, continue anyway&quot;<br /> echo &quot;$ERR&quot; &gt;&gt; $LOG<br /> echo &quot;$ERR&quot;<br /> else<br /> pause_enabled=true<br /> fi<br /> else<br /> if [[ $pause_enabled == true &amp;&amp; $VMSTATE == &quot;running&quot; ]]; then<br /> MSG=&quot;Resume domain $DOMAIN&quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> CMDst=&quot;virsh resume $DOMAIN&quot;<br /> echo &quot;Command: $CMDst&quot; &gt;&gt; $LOG<br /> echo &quot;Command: $CMDst&quot;<br /> eval &quot;$CMDst&quot;<br /> if [ $? -ne 0 ]; then<br /> ERR=&quot;can't resume domain $DOMAIN, continue anyway&quot;<br /> echo &quot;$ERR&quot; &gt;&gt; $LOG<br /> echo &quot;$ERR&quot;<br /> else<br /> pause_enabled=false<br /> fi<br /> fi<br /> fi<br /> <br /> for (( j=1; j&lt;=$blockjob_retrycount; j++ )) do<br /> CMD=&quot;virsh blockjob --domain $DOMAIN --pivot $TARGET&quot;<br /> echo &quot;Command: $CMD&quot; &gt;&gt; $LOG<br /> echo &quot;Command: $CMD&quot;<br /> eval &quot;$CMD&quot;<br /> if [ $? -ne 0 ]; then<br /> ERR=&quot;virsh blockjob attempt no $j --domain $DOMAIN --pivot $TARGET failed&quot;<br /> echo &quot;$ERR&quot; &gt;&gt; $LOG<br /> echo &quot;$ERR&quot;<br /> if [[ $j -eq $blockjob_retrycount ]]; then<br /> ERR=&quot;all blockjob attempts --domain $DOMAIN --pivot $TARGET failed.&quot;<br /> echo &quot;$ERR&quot; &gt;&gt; $LOG<br /> echo &quot;$ERR&quot;<br /> echo &quot;$ERR<br /> Host: $HOST<br /> Domain: $DOMAIN<br /> Command: $CMD&quot; | mail -s &quot;$SHCMD blockjob Exception for $DOMAIN&quot; $EMR<br /> if [[ $pause_domain_after_bj_fail == true &amp;&amp; $pause_enabled == false &amp;&amp; $VMSTATE == &quot;running&quot; ]]; then<br /> MSG=&quot;Try to pause domain $DOMAIN first&quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> CMDst=&quot;virsh suspend $DOMAIN&quot;<br /> echo &quot;Command: $CMDst&quot; &gt;&gt; $LOG<br /> echo &quot;Command: $CMDst&quot;<br /> eval &quot;$CMDst&quot;<br /> if [ $? -ne 0 ]; then<br /> ERR=&quot;can't pause domain $DOMAIN&quot;<br /> echo &quot;$ERR&quot; &gt;&gt; $LOG<br /> echo &quot;$ERR&quot;<br /> else<br /> echo &quot;Command: $CMD&quot; &gt;&gt; $LOG<br /> echo &quot;Command: $CMD&quot;<br /> eval &quot;$CMD&quot;<br /> if [ $? -ne 0 ]; then<br /> ERR=&quot;can't blockjob --piovot $TARGET anyway, I'm giving up&quot;<br /> echo &quot;$ERR&quot; &gt;&gt; $LOG<br /> echo &quot;$ERR&quot;<br /> echo &quot;$ERR<br /> Host: $HOST<br /> Domain: $DOMAIN<br /> Command: $CMD&quot; | mail -s &quot;$SHCMD blockjob Exception for $DOMAIN&quot; $EMR<br /> echo &quot;$ERR&quot; &gt;&gt; $LOG<br /> echo &quot;$ERR&quot;<br /> BREAK=true<br /> ERRORORED=$(($ERRORED+1))<br /> fi<br /> MSG=&quot;Resume domain $DOMAIN&quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> CMDst=&quot;virsh resume $DOMAIN&quot;<br /> echo &quot;Command: $CMDst&quot; &gt;&gt; $LOG<br /> echo &quot;Command: $CMDst&quot;<br /> eval &quot;$CMDst&quot;<br /> if [ $? -ne 0 ]; then<br /> ERR=&quot;can't resume domain $DOMAIN, continue anyway&quot;<br /> echo &quot;$ERR&quot; &gt;&gt; $LOG<br /> echo &quot;$ERR&quot;<br /> else<br /> pause_enabled=false<br /> fi<br /> fi<br /> else<br /> BREAK=true<br /> ERRORORED=$(($ERRORED+1))<br /> break<br /> fi<br /> fi<br /> sleep $blockjob_delay<br /> else<br /> MSG=&quot;virsh blockjob attempt no $j --domain $DOMAIN --pivot $TARGET success&quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> break<br /> fi<br /> done<br /> [ $BREAK == true ] &amp;&amp; break<br /> fi<br /> fi<br /> if [[ $pause_enabled == true &amp;&amp; $VMSTATE == &quot;running&quot; ]]; then<br /> MSG=&quot;Resume domain $DOMAIN&quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> CMDst=&quot;virsh resume $DOMAIN&quot;<br /> echo &quot;Command: $CMDst&quot; &gt;&gt; $LOG<br /> echo &quot;Command: $CMDst&quot;<br /> eval &quot;$CMDst&quot;<br /> if [ $? -ne 0 ]; then<br /> ERR=&quot;can't resume domain $DOMAIN, continue anyway&quot;<br /> echo &quot;$ERR&quot; &gt;&gt; $LOG<br /> echo &quot;$ERR&quot;<br /> else<br /> pause_enabled=false<br /> fi<br /> fi<br /> fi<br /> i=$i+1<br /> done<br /> [ $BREAK == true ] &amp;&amp; continue<br /> #delete tmp images after blockcommit<br /> for IMAGE in $IMAGES; do<br /> set -o noglob<br /> if [[ $IMAGE == *${SNAPPREFIX}* ]]; then<br /> set +o noglob<br /> CMD=&quot;rm -f $IMAGE &gt;&gt; $LOG 2&gt;&amp;1&quot;<br /> MSG=&quot; Deleting temporary image $IMAGE&quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> echo &quot;Command: $CMD&quot; &gt;&gt; $LOG<br /> echo &quot;Command: $CMD&quot;<br /> eval &quot;$CMD&quot;<br /> fi<br /> set +o noglob<br /> done<br /> #Reload images after blockcommit<br /> IMAGES=$(virsh domblklist $DOMAIN --details | grep disk | awk '{print $4}')<br /> fi<br /> DISKSPEC=&quot;&quot;<br /> for TARGET in $TARGETS; do<br /> DISKSPEC=&quot;$DISKSPEC --diskspec $TARGET,snapshot=external&quot;<br /> done<br /> <br /> # transfer the VM to snapshot disk image(s)<br /> CMD=&quot;virsh snapshot-create-as --domain $DOMAIN --name ${SNAPPREFIX}$DOMAIN --no-metadata --atomic --disk-only --quiesce $DISKSPEC &gt;&gt; $LOG 2&gt;&amp;1&quot;<br /> echo &quot;Command: $CMD&quot; &gt;&gt; $LOG 2&gt;&amp;1<br /> echo &quot;Command: $CMD&quot;<br /> eval &quot;$CMD&quot;<br /> if [ $? -ne 0 ]; then<br /> MSG=&quot;Error create snapshot with --quiesce mode (it's require qemu-guest-agent), try without&quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> CMD=&quot;virsh snapshot-create-as --domain $DOMAIN --name ${SNAPPREFIX}$DOMAIN --no-metadata --atomic --disk-only $DISKSPEC &gt;&gt; $LOG 2&gt;&amp;1&quot;<br /> echo &quot;Command: $CMD&quot; &gt;&gt; $LOG 2&gt;&amp;1<br /> echo &quot;Command: $CMD&quot;<br /> eval &quot;$CMD&quot;<br /> fi<br /> if [ $? -ne 0 ]; then<br /> ERR=&quot;Failed to create snapshot for $DOMAIN&quot;<br /> echo &quot;$ERR&quot; &gt;&gt; $LOG<br /> echo &quot;$ERR&quot;<br /> echo &quot;$ERR<br /> Host: $HOST<br /> Domain: $DOMAIN<br /> Command: $CMD&quot; | mail -s &quot;$SHCMD snapshot Exception for $DOMAIN&quot; $EMR<br /> ERRORED=$(($ERRORED+1))<br /> continue<br /> fi<br /> #i=$i+1<br /> <br /> fi<br /> <br /> <br /> ####################################<br /> #Rsync #<br /> ####################################<br /> MSG=&quot;Rsync&quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> for IMAGE in $IMAGES; do<br /> FILEFULLNAME=`basename &quot;$IMAGE&quot;`<br /> if test -f &quot;$BACKUPFOLDER/$FILEFULLNAME&quot;; then<br /> MSG=&quot;Backup exists, merging only changes to image $BACKUPFOLDER/$FILEFULLNAME&quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> #CMD=&quot;rsync -apvhz --inplace --progress $IMAGE $BACKUPFOLDER/$FILEFULLNAME &quot;<br /> CMD=&quot;rsync -apvhz --inplace --progress $IMAGE $BACKUPFOLDER/$FILEFULLNAME &quot;<br /> else<br /> MSG=&quot;Backup does not exist, creating a full sparse copy of image $IMAGE&quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> #CMD=&quot;rsync -apvhz --sparse --progress $IMAGE $BACKUPFOLDER/$FILEFULLNAME &quot;<br /> CMD=&quot;rsync -apvhz --sparse --progress $IMAGE $BACKUPFOLDER/$FILEFULLNAME &quot;<br /> fi<br /> echo &quot;Command: $CMD&quot; &gt;&gt; $LOG<br /> echo &quot;Command: $CMD&quot;<br /> eval &quot;$CMD&quot;<br /> done<br /> ########################################<br /> # After sync file merge snapshots back #<br /> ########################################<br /> <br /> if [[ $VM_RUNNING -eq 1 ]]; then<br /> # Update the VM's disk image(s) with any changes recorded in the snapshot<br /> # while the copy process was running. In qemu lingo this is called a &quot;pivot&quot;<br /> BACKUPIMAGES=$(virsh domblklist $DOMAIN --details | grep disk | awk '{print $4}')<br /> for TARGET in $TARGETS; do<br /> #if [[ ${COMMITSNAPTAB[$i]} == true ]]; then<br /> #rsync can tak long time and state could changed so check once again <br /> #if state shut there will simple error becouse blockcommi and blockjob can't be done on shutdown domain.<br /> VMSTATE=$(LC_ALL=en_EN virsh list --all | grep [[:space:]]$DOMAIN[[:space:]] | awk '{print $3}')<br /> if [[ $VMSTATE == &quot;paused&quot; ]]; then<br /> pause_enabled=true<br /> else<br /> pause_enabled=false<br /> fi<br /> if [[ $pause_domain_bc == true &amp;&amp; $pause_enabled == false ]]; then<br /> MSG=&quot;Try to pause domain $DOMAIN first&quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> CMDst=&quot;virsh suspend $DOMAIN&quot;<br /> echo &quot;Command: $CMDst&quot; &gt;&gt; $LOG<br /> echo &quot;Command: $CMDst&quot;<br /> eval &quot;$CMDst&quot;<br /> if [ $? -ne 0 ]; then<br /> ERR=&quot;can't pause domain $DOMAIN, continue anyway&quot;<br /> echo &quot;$ERR&quot; &gt;&gt; $LOG<br /> echo &quot;$ERR&quot;<br /> else<br /> pause_enabled=true<br /> fi<br /> fi<br /> MSG=&quot;$TARGET BLOCKCOMMIT previous snapshot &quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> CMD=&quot;virsh blockcommit $DOMAIN $TARGET --active --pivot &gt;&gt; $LOG 2&gt;&amp;1&quot;<br /> echo &quot;Command: $CMD&quot; &gt;&gt; $LOG<br /> echo &quot;Command: $CMD&quot;<br /> eval &quot;$CMD&quot;<br /> if [ $? -ne 0 ]; then<br /> ERR=&quot;Could not merge changes for disk $TARGET of $DOMAIN with blockcommit. VM may be in an invalid state.&quot;<br /> echo &quot;$ERR&quot; &gt;&gt; $LOG<br /> echo &quot;$ERR&quot;<br /> echo &quot;$ERR<br /> Host: $HOST<br /> Domain: $DOMAIN<br /> Command: $CMD&quot; | mail -s &quot;$SHCMD blockcommit Exception for $DOMAIN&quot; $EMR<br /> if [[ $pause_domain_after_bc_fail == true &amp;&amp; $pause_enabled == false ]]; then<br /> MSG=&quot;Try to pause domain $DOMAIN and retry bc&quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> CMDst=&quot;virsh suspend $DOMAIN&quot;<br /> echo &quot;Command: $CMDst&quot; &gt;&gt; $LOG<br /> echo &quot;Command: $CMDst&quot;<br /> eval &quot;$CMDst&quot;<br /> if [ $? -ne 0 ]; then<br /> ERR=&quot;can't pause domain $DOMAIN, continue anyway&quot;<br /> echo &quot;$ERR&quot; &gt;&gt; $LOG<br /> echo &quot;$ERR&quot;<br /> else<br /> pause_enabled=true<br /> fi<br /> MSG=&quot;$TARGET BLOCKCOMMIT previous snapshot &quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> CMD=&quot;virsh blockcommit $DOMAIN $TARGET --active --pivot &gt;&gt; $LOG 2&gt;&amp;1&quot;<br /> echo &quot;Command: $CMD&quot; &gt;&gt; $LOG<br /> echo &quot;Command: $CMD&quot;<br /> eval &quot;$CMD&quot;<br /> if [ $? -ne 0 ]; then<br /> ERR=&quot;Could not merge changes for disk $TARGET of $DOMAIN (paused) with blockcommit. VM may be in an invalid state.&quot;<br /> echo &quot;$ERR&quot; &gt;&gt; $LOG<br /> echo &quot;$ERR&quot;<br /> echo &quot;$ERR<br /> Host: $HOST<br /> Domain: $DOMAIN<br /> Command: $CMD&quot; | mail -s &quot;$SHCMD blockcommit Exception for $DOMAIN&quot; $EMR<br /> else<br /> #if bc succes need to disable bj, so set to false<br /> enable_bj_attemts=false<br /> fi<br /> fi <br /> if [ $enable_bj_attemts == true ]; then<br /> if [[ $pause_while_bj_attemtps == true ]]; then<br /> MSG=&quot;Try to pause domain $DOMAIN first&quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> CMDst=&quot;virsh suspend $DOMAIN&quot;<br /> echo &quot;Command: $CMDst&quot; &gt;&gt; $LOG<br /> echo &quot;Command: $CMDst&quot;<br /> eval &quot;$CMDst&quot;<br /> if [ $? -ne 0 ]; then<br /> ERR=&quot;can't pause domain $DOMAIN, continue anyway&quot;<br /> echo &quot;$ERR&quot; &gt;&gt; $LOG<br /> echo &quot;$ERR&quot;<br /> else<br /> pause_enabled=true<br /> fi<br /> else<br /> if [[ $pause_enabled == true &amp;&amp; $VMSTATE == &quot;running&quot; ]]; then<br /> MSG=&quot;Resume domain $DOMAIN&quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> CMDst=&quot;virsh resume $DOMAIN&quot;<br /> echo &quot;Command: $CMDst&quot; &gt;&gt; $LOG<br /> echo &quot;Command: $CMDst&quot;<br /> eval &quot;$CMDst&quot;<br /> if [ $? -ne 0 ]; then<br /> ERR=&quot;can't resume domain $DOMAIN, continue anyway&quot;<br /> echo &quot;$ERR&quot; &gt;&gt; $LOG<br /> echo &quot;$ERR&quot;<br /> else<br /> pause_enabled=false<br /> fi<br /> fi<br /> fi<br /> <br /> for (( j=1; j&lt;=$blockjob_retrycount; j++ )) do<br /> CMD=&quot;virsh blockjob --domain $DOMAIN --pivot $TARGET&quot;<br /> echo &quot;Command: $CMD&quot; &gt;&gt; $LOG<br /> echo &quot;Command: $CMD&quot;<br /> eval &quot;$CMD&quot;<br /> if [ $? -ne 0 ]; then<br /> ERR=&quot;virsh blockjob attempt no $j --domain $DOMAIN --pivot $TARGET failed&quot;<br /> echo &quot;$ERR&quot; &gt;&gt; $LOG<br /> echo &quot;$ERR&quot;<br /> if [[ $j -eq $blockjob_retrycount ]]; then<br /> ERR=&quot;all blockjob attempt --domain $DOMAIN --pivot $TARGET failed.&quot;<br /> echo &quot;$ERR&quot; &gt;&gt; $LOG<br /> echo &quot;$ERR&quot;<br /> echo &quot;$ERR<br /> Host: $HOST<br /> Domain: $DOMAIN<br /> Command: $CMD&quot; | mail -s &quot;$SHCMD blockjob Exception for $DOMAIN&quot; $EMR<br /> if [[ $pause_domain_after_bj_fail == true &amp;&amp; $pause_enabled == false &amp;&amp; $VMSTATE == &quot;running&quot; ]]; then<br /> MSG=&quot;Try to pause domain $DOMAIN first&quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> CMDst=&quot;virsh suspend $DOMAIN&quot;<br /> echo &quot;Command: $CMDst&quot; &gt;&gt; $LOG<br /> echo &quot;Command: $CMDst&quot;<br /> eval &quot;$CMDst&quot;<br /> if [ $? -ne 0 ]; then<br /> ERR=&quot;can't pause domain $DOMAIN&quot;<br /> echo &quot;$ERR&quot; &gt;&gt; $LOG<br /> echo &quot;$ERR&quot;<br /> else<br /> echo &quot;Command: $CMD&quot; &gt;&gt; $LOG<br /> echo &quot;Command: $CMD&quot;<br /> eval &quot;$CMD&quot;<br /> if [ $? -ne 0 ]; then<br /> ERR=&quot;can't blockjob --piovot $TARGET anyway, I'm giving up&quot;<br /> echo &quot;$ERR&quot; &gt;&gt; $LOG<br /> echo &quot;$ERR&quot;<br /> echo &quot;$ERR<br /> Host: $HOST<br /> Domain: $DOMAIN<br /> Command: $CMD&quot; | mail -s &quot;$SHCMD blockjob Exception for $DOMAIN&quot; $EMR<br /> echo &quot;$ERR&quot; &gt;&gt; $LOG<br /> echo &quot;$ERR&quot;<br /> BREAK=true<br /> ERRORORED=$(($ERRORED+1))<br /> fi<br /> MSG=&quot;Resume domain $DOMAIN&quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> CMDst=&quot;virsh resume $DOMAIN&quot;<br /> echo &quot;Command: $CMDst&quot; &gt;&gt; $LOG<br /> echo &quot;Command: $CMDst&quot;<br /> eval &quot;$CMDst&quot;<br /> if [ $? -ne 0 ]; then<br /> ERR=&quot;can't resume domain $DOMAIN, continue anyway&quot;<br /> echo &quot;$ERR&quot; &gt;&gt; $LOG<br /> echo &quot;$ERR&quot;<br /> else<br /> pause_enabled=false<br /> fi<br /> fi<br /> else<br /> BREAK=true<br /> ERRORORED=$(($ERRORED+1))<br /> break<br /> fi<br /> fi<br /> sleep $blockjob_delay<br /> else<br /> MSG=&quot;virsh blockjob attempt no $j --domain $DOMAIN --pivot $TARGET success&quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> break<br /> fi<br /> done<br /> [ $BREAK == true ] &amp;&amp; break<br /> fi<br /> fi<br /> if [[ $pause_enabled == true &amp;&amp; $VMSTATE == &quot;running&quot; ]]; then<br /> MSG=&quot;Resume domain $DOMAIN&quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> CMDst=&quot;virsh resume $DOMAIN&quot;<br /> echo &quot;Command: $CMDst&quot; &gt;&gt; $LOG<br /> echo &quot;Command: $CMDst&quot;<br /> eval &quot;$CMDst&quot;<br /> if [ $? -ne 0 ]; then<br /> ERR=&quot;can't resume domain $DOMAIN, continue anyway&quot;<br /> echo &quot;$ERR&quot; &gt;&gt; $LOG<br /> echo &quot;$ERR&quot;<br /> else<br /> pause_enabled=false<br /> fi<br /> fi<br /> #fi<br /> i=$i+1<br /> done<br /> [ $BREAK == true ] &amp;&amp; continue<br /> <br /> # Now that the VM's disk image(s) have been successfully committed/pivoted to<br /> # back to the main disk image, remove the temporary snapshot image file(s)<br /> for BACKUP in $BACKUPIMAGES; do<br /> set -o noglob<br /> if [[ $BACKUP == *${SNAPPREFIX}* ]]; then<br /> set +o noglob<br /> CMD=&quot;rm -f $BACKUP &gt;&gt; $LOG 2&gt;&amp;1&quot;<br /> MSG=&quot; Deleting temporary image $BACKUP&quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> MSG=&quot;Command: $CMD&quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> eval &quot;$CMD&quot;<br /> fi<br /> set +o noglob<br /> done<br /> <br /> # capture the VM's definition in use at the time the backup was done<br /> CMD=&quot;virsh dumpxml $DOMAIN &gt; $BACKUPFOLDER/$DOMAIN.xml 2&gt;&gt; $LOG&quot;<br /> MSG=&quot;Command: $CMD&quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> eval &quot;$CMD&quot;<br /> else<br /> # copy the VM's definition<br /> CMD=&quot;cp $PATH_LIBVIRT_QEMU/$DOMAIN.xml $BACKUPFOLDER/$DOMAIN.xml 2&gt;&gt; $LOG&quot;<br /> MSG=&quot;Command: $CMD&quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> eval &quot;$CMD&quot;<br /> fi<br /> <br /> <br /> MSG=&quot;---- Backup done $DOMAIN ---- $(date +'%d-%m-%Y %H:%M:%S') ----&quot;<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> done<br /> MSG=&quot;$SHCMD: Finished backups at $(date +'%d-%m-%Y %H:%M:%S')<br /> ====================&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot; &gt;&gt; $LOG<br /> echo &quot;$MSG&quot;<br /> <br /> exit $ERRORED<br /> <br /> &lt;/pre&gt;</div> Michael https://wiki.goedeke.de/index.php?title=Hauptseite&diff=274 Hauptseite 2023-10-30T07:59:39Z <p>Michael: </p> <hr /> <div>== Dedicated Server Hosting by Hetzner (RZ Helsinki) ==<br /> <br /> [[AX41_NVMe #1380159|Server]] <br /> <br /> [[BX40 #145149|Storeage Box]]<br /> <br /> == Der Host und die Gäste ==<br /> <br /> [[Übersicht|Übersicht]]<br /> <br /> *[[AX41_NVMe 1380159|KVM]] <br /> **[[Router2|router2]] <br /> **[[Cloud (Owncloud)|cloud (owncloud)]]<br /> **[[CRM|crm]]<br /> **[[Backup (Service)|Backup (Service)]]<br /> **[[Web3|web3]] <br /> **[[Web4|web4]] <br /> **[[db1|db1]] <br /> **[[Mail2|mail2]] <br /> **[[Om|om]]<br /> <br /> == Das Netzwerk ==<br /> <br /> ==== Interne IP´s mit Zuordnung ====<br /> <br /> [[IP´s_172.16.10.0/24|IP´s 172.16.10.0/24]]<br /> <br /> ==== Externe IP´s mit Zuordnung ====<br /> <br /> [[IP´s_78.47.239.0/29|IP´s 78.47.239.0/29]]<br /> <br /> ==== Links: Extern ====<br /> <br /> [https://mail.aquapool.de MailcowAdmin]<br /> <br /> [https://mail.aquapool.de/sogo/ Webmail]<br /> <br /> [https://crm.aquapool.de CRM]<br /> <br /> [https://cloud.aquapool.de Nextcloud]<br /> <br /> [https://wiki.aquapool.de Wiki]<br /> <br /> ==== Links: intern via VPN ====<br /> <br /> [http://172.16.10.12/backuppc/ BackupPC]<br /> <br /> [http://172.16.10.8/phpmyadmin/ phpMyAdmin]<br /> <br /> == HOWTOs ==<br /> <br /> [[Restart/Start/Shutdown_VMs_-_KVM|Restart/Start/Shutdown VMs - KVM]]<br /> <br /> [[Backup der VMs|Backup der VMs]]<br /> <br /> == Domain Hosting ==<br /> <br /> [[Schlundtech | Schlundtech]]<br /> <br /> == Büro Server 192.168.188.0/24==<br /> <br /> ==== Interne IP´s und Server ====<br /> <br /> [[IP´s_192.168.188.*|IP´s 192.168.188.0/24]]<br /> <br /> ==== Cisco Telefone ====<br /> <br /> [[Cisco Konfig|Konfiguration]]<br /> <br /> ==== Asterisk ====<br /> <br /> [[ Asterisk Konfiguration| Konfiguration]]<br /> <br /> == aquacaetum ==<br /> <br /> [[ Laufende Installationen| Laufende Installationen]]<br /> <br /> [[ Anleitungen| Anleitungen]]</div> Michael https://wiki.goedeke.de/index.php?title=%C3%9Cbersicht&diff=273 Übersicht 2023-10-30T07:58:24Z <p>Michael: </p> <hr /> <div>[[Datei:Serverlandschaft.jpg|rahmenlos]]</div> Michael https://wiki.goedeke.de/index.php?title=Datei:Serverlandschaft.jpg&diff=272 Datei:Serverlandschaft.jpg 2023-10-30T07:57:52Z <p>Michael: </p> <hr /> <div>Schema</div> Michael