Sakin uwar garken SFTP SFTPGo 2.2.0

An buga sakin uwar garken SFTPGo 2.2, wanda ke ba ku damar tsara damar shiga nesa zuwa fayiloli ta amfani da ka'idojin SFTP, SCP/SSH, Rsync, HTTP da WebDav. Daga cikin wasu abubuwa, ana iya amfani da SFTPGo don samar da dama ga wuraren ajiyar Git ta amfani da ka'idar SSH. Ana iya canja wurin bayanai duka daga tsarin fayil na gida kuma daga ma'ajiyar waje masu dacewa da Amazon S3, Google Cloud Storage da Azure Blob Storage. Yana yiwuwa a adana bayanai a cikin rufaffen tsari. Don adana bayanan mai amfani da metadata, ana amfani da DBMSs tare da goyan bayan SQL ko tsarin maɓalli / ƙima, kamar PostgreSQL, MySQL, SQLite, CockroachDB ko bbolt, amma kuma yana yiwuwa a adana metadata a cikin RAM, wanda baya buƙatar haɗawa waje database. An rubuta lambar aikin a cikin Go kuma an rarraba ta ƙarƙashin lasisin GPLv3.

A cikin sabon sigar:

• Ƙara goyon baya don tabbatar da abubuwa biyu ta amfani da kalmomin sirri na lokaci-lokaci (TOTP, RFC 6238). Aikace-aikace irin su Authy da Google Authenticator ana iya amfani da su azaman masu tantancewa.
• An aiwatar da ikon faɗaɗa ayyuka ta hanyar plugins. Daga cikin abubuwan da aka riga aka samu: goyan baya don ƙarin sabis na musayar maɓalli, haɗe-haɗe da makircin Buga/Biyan kuɗi, ajiya da neman bayanai game da abubuwan da suka faru a cikin DBMS.
• API ɗin REST ya ƙara goyon baya don tantancewa ta amfani da maɓalli, ban da alamun JWT, kuma yana ba da ikon saita manufofin adana bayanai (ƙayyade tsawon rayuwar bayanai) dangane da kundayen adireshi da masu amfani. Ta hanyar tsoho, an kunna Swagger UI don kewaya albarkatun API ba tare da amfani da abubuwan amfani na waje ba.
• An ƙara goyon baya don ayyukan rubutawa zuwa haɗin yanar gizon yanar gizon yanar gizon yanar gizon yanar gizon yanar gizon yanar gizon yanar gizon yanar gizon yanar gizon yanar gizon yanar gizon yanar gizon yanar gizon yanar gizon yanar gizon yanar gizon yanar gizon yanar gizon yanar gizon yanar gizon yanar gizon yanar gizon yanar gizon yanar gizon yanar gizon yanar gizon yanar gizon yanar gizon yanar gizon yanar gizon yanar gizon yanar gizon yanar gizon yanar gizon yanar gizon yanar gizon yanar gizon yanar gizon yanar gizon yanar gizon yanar gizon yanar gizon yanar gizon yanar gizon yanar gizon yanar gizon yanar gizon yanar gizon yanar gizon damú da kuma goyon baya ga ayyukan rubuce-rubucen da aka yi amfani da su don aikawa da fayiloli, ƙirƙirar kundin adireshi, sake suna da kuma sharewa), ikon sake saita kalmar sirri tare da tabbatarwa ta hanyar imel, an haɗa editan fayil ɗin rubutu da mai duba takardun PDF. Ƙara ikon ƙirƙirar hanyoyin haɗin HTTP don samar wa masu amfani da waje damar samun dama ga fayiloli da kundayen adireshi guda ɗaya, tare da ikon saita kalmar sirri daban, iyakance adiresoshin IP, saita hanyar haɗin rayuwa da iyakance adadin abubuwan zazzagewa.

Babban fasali na SFTPGo:

• An tsinke kowane asusu, yana iyakance isa ga kundin adireshin gida na mai amfani. Yana yiwuwa a ƙirƙira kundayen adireshi masu kama-da-wane waɗanda ke yin nuni da bayanai a wajen kundin adireshin gida na mai amfani.
• Ana adana asusu a cikin rumbun adana bayanai na mai amfani da ba zai zo tare da bayanan mai amfani da tsarin ba. Ana iya amfani da SQLite, MySQL, PostgreSQL, bbolt da ma'ajiyar ƙwaƙwalwar ajiya don adana bayanan mai amfani. An tanadar da kayan aiki don yin taswirar kama-da-wane da asusun tsarin - ko dai taswirar kai tsaye ko bazuwar abu ne mai yiwuwa (ana iya tsara mai amfani da tsarin zuwa wani mai amfani mai kama-da-wane).
• Ana tallafawa tabbaci ta amfani da maɓallan jama'a, maɓallan SSH da kalmomin shiga (ciki har da ingantaccen ma'amala tare da kalmar wucewa da aka shigar daga madannai). Yana yiwuwa a ɗaure maɓallai da yawa don kowane mai amfani, da kuma saita ingantaccen abubuwa da matakai masu yawa (misali, idan aka sami nasarar tantance maɓalli, ana iya buƙatar kalmar sirri kuma).
• Ga kowane mai amfani, yana yiwuwa a saita hanyoyin tabbatarwa daban-daban, da kuma ayyana hanyoyinku, aiwatarwa ta hanyar kiran shirye-shiryen tantancewa na waje (misali, don tantancewa ta LDAP) ko aika buƙatun ta HTTP API.
• Yana yiwuwa a haɗa masu kula da waje ko kiran HTTP API don canza sigogin mai amfani sosai, wanda ake kira kafin mai amfani ya shiga. Ƙirƙirar masu amfani mai ƙarfi akan haɗin gwiwa ana tallafawa.
• Yana goyan bayan ƙididdiga ɗaya don girman bayanai da adadin fayiloli.
• Taimako don ƙayyadaddun bandwidth tare da ƙayyadaddun ƙayyadaddun ƙuntatawa don zirga-zirga mai shigowa da mai fita, da kuma ƙuntatawa akan adadin haɗin lokaci guda.
• Samun damar sarrafa kayan aikin da ke aiki dangane da mai amfani ko kundin adireshi (zaka iya iyakance duba jerin fayiloli, hana lodawa, zazzagewa, sake rubutawa, sharewa, sake suna ko canza haƙƙin samun dama, hana ƙirƙirar kundayen adireshi ko hanyoyin haɗin gwiwa, da sauransu).
• Ga kowane mai amfani, zaku iya ayyana hane-hane na hanyar sadarwa guda ɗaya, misali, zaku iya ba da izinin shiga kawai daga wasu IPs ko netnets.
• Yana goyan bayan haɗa matattara don abun ciki da aka zazzage dangane da masu amfani da kundayen adireshi (misali, zaku iya toshe fayilolin zazzagewa tare da takamaiman tsawo).
• Yana yiwuwa a ɗaure masu sarrafa waɗanda aka ƙaddamar yayin ayyuka daban-daban tare da fayil (zazzagewa, sharewa, sake suna, da sauransu). Baya ga masu kula da kira, ana tallafawa aika sanarwa ta hanyar buƙatun HTTP.
• Kashewar haɗin kai ta atomatik.
• Sabunta daidaitawar atomatik ba tare da karya haɗin gwiwa ba.
• Samar da awo don saka idanu a cikin Prometheus.
• Ana goyan bayan ka'idar HAProxy PROXY don tsara ma'auni na kaya ko haɗin wakili zuwa sabis na SFTP/SCP ba tare da rasa bayani game da adireshin IP na tushen mai amfani ba.
• API ɗin REST don sarrafa masu amfani da kundayen adireshi, ƙirƙirar madogara da samar da rahotanni kan haɗin kai mai aiki.
• Yanar gizon yanar gizo (http://127.0.0.1:8080/web) don daidaitawa da saka idanu (tsari ta fayilolin sanyi na yau da kullun kuma ana tallafawa).
• Ikon ayyana saituna a cikin JSON, TOML, YAML, HCL da tsarin envfile.
• Taimako don haɗi ta hanyar SSH tare da iyakataccen damar yin amfani da umarnin tsarin. Misali, an ba da izinin gudanar da umarni da suka dace don Git (git-receive-pack, git-upload-pack, git-upload-archive) da rsync, da kuma umarni da yawa da aka gina (scp, md5sum, sha * sum). , cd, pwd, sftpgo-kwafi da sftpgo-cire).
• Yanayin šaukuwa don raba jagorar gama gari ɗaya tare da tsararrun bayanan haɗin kai ta atomatik wanda aka tallata ta hanyar multicast DNS.
• Ginin tsarin bayanin martaba don nazarin aiki.
• Sauƙaƙe tsari don ƙaura da asusun tsarin Linux.
• Ajiye rajistan ayyukan a cikin tsarin JSON.
• Taimako don kundayen adireshi (misali, abubuwan da ke cikin wani kundin adireshi za a iya ba da su ba daga FS na gida ba, amma daga ajiyar girgije na waje).
• Cryptfs suna goyan bayan ɓoye bayanan akan-da-tashi na zahiri lokacin adanawa zuwa FS da yankewa lokacin dawowa.
• Taimako don tura haɗin kai zuwa wasu sabar SFTP.
• Ikon amfani da SFTPGo azaman tsarin SFTP don OpenSSH.
• Ikon adana bayanan sirri da bayanan sirri a cikin rufaffen tsari ta amfani da sabar KMS (Sabis ɗin Gudanar da Maɓalli), kamar Vault, GCP KMS, AWS KMS.

source: budenet.ru