An buga sakin uwar garken SFTPGo 2.5.0, wanda ke ba ku damar tsara damar yin amfani da nisa zuwa fayiloli ta amfani da ka'idojin SFTP, SCP/SSH, Rsync, HTTP da WebDav, da kuma samar da damar zuwa wuraren ajiyar Git ta amfani da ka'idar SSH. . Ana iya canja wurin bayanai duka daga tsarin fayil na gida kuma daga ma'ajiyar waje masu dacewa da Amazon S3, Google Cloud Storage da Azure Blob Storage. Yana yiwuwa a adana bayanai a cikin rufaffen tsari. Don adana bayanan mai amfani da metadata, ana amfani da DBMSs tare da goyan bayan SQL ko tsarin maɓalli / ƙima, kamar PostgreSQL, MySQL, SQLite, CockroachDB ko bbolt, amma kuma yana yiwuwa a adana metadata a cikin RAM, wanda baya buƙatar haɗawa waje database. An rubuta lambar aikin a cikin Go kuma an rarraba ta ƙarƙashin lasisin GPLv3.
A cikin sabon sigar:
- Gidan yanar gizon yana ba da damar rufe saƙonnin kuskure. A cikin mahallin yanar gizo don mai gudanarwa, an ƙara goyon baya don bincike a cikin lissafin duba da kuma fitar da bayanai daga gare ta, an aiwatar da ayyukan gudanar da jerin adiresoshin IP da cibiyoyin sadarwa, da kuma ikon daidaita SMTP da daidaitattun ACME da SFTP. bayar da. Shafin yanar gizo na abokin ciniki yana da hanyar shiga ta kansa (maimakon ainihin auth), ƙara ayyukan kwafi da cire iyakar girman zazzagewa.
- Ƙara goyon baya don manufofin kalmar sirri; misali, za ku iya ayyana buƙatun ƙarfin kalmar sirri da saita kalmar sirrin rayuwa.
- EventManager ya kara da ikon nuna sanarwa game da kalmomin shiga da suka ƙare, aiwatar da aikin kwafin, ƙarin tallafi don ayyukan da aka riga aka kira (pre-*) da masu gudanarwa da aka jawo akan wasu ayyuka (misali, mai kula da ake kira lokacin da mai amfani ya shiga ya kasance. kara).
- Ƙara ikon baiwa masu amfani haƙƙoƙin gudanarwa.
- An ƙara umarni zuwa ƙirar layin umarni don sake saita kalmar wucewar mai gudanarwa da duba ayyukan sabis ɗin.
- Ƙara goyon baya don maganganun sharadi yayin aiwatar da babban fayil ɗin sake suna a gefen masu samar da gajimare.
- Ƙara tallafi don bin diddigin da sake loda takaddun takaddun TLS ta atomatik.
- Ƙara ikon ayyana nau'ikan MIME naku don WebDAV.
- SSH yana da ingantaccen maɓalli na mu'amala wanda aka kunna ta tsohuwa.
- A cikin yanayin šaukuwa, ya zama mai yiwuwa a loda kalmomin shiga daga fayil.
- Ƙara goyan bayan gwaji don sabis na Terraform.
Babban fasali na SFTPGo:
- An tsinke kowane asusu, yana iyakance isa ga kundin adireshin gida na mai amfani. Yana yiwuwa a ƙirƙira kundayen adireshi masu kama-da-wane waɗanda ke yin nuni da bayanai a wajen kundin adireshin gida na mai amfani.
- Ana adana asusu a cikin rumbun adana bayanai na mai amfani da ba zai zo tare da bayanan mai amfani da tsarin ba. Ana iya amfani da SQLite, MySQL, PostgreSQL, bbolt da ma'ajiyar ƙwaƙwalwar ajiya don adana bayanan mai amfani. An tanadar da kayan aiki don yin taswirar kama-da-wane da asusun tsarin - ko dai taswirar kai tsaye ko bazuwar abu ne mai yiwuwa (ana iya tsara mai amfani da tsarin zuwa wani mai amfani mai kama-da-wane).
- Ana tallafawa tabbaci ta amfani da maɓallan jama'a, maɓallan SSH da kalmomin shiga (ciki har da ingantaccen ma'amala tare da kalmar wucewa da aka shigar daga madannai). Yana yiwuwa a ɗaure maɓallai da yawa don kowane mai amfani, da kuma saita ingantaccen abubuwa da matakai masu yawa (misali, idan aka sami nasarar tantance maɓalli, ana iya buƙatar kalmar sirri kuma).
- Ga kowane mai amfani, yana yiwuwa a saita hanyoyin tabbatarwa daban-daban, da kuma ayyana hanyoyinku, aiwatarwa ta hanyar kiran shirye-shiryen tantancewa na waje (misali, don tantancewa ta LDAP) ko aika buƙatun ta HTTP API.
- Yana yiwuwa a haɗa masu kula da waje ko kiran HTTP API don canza sigogin mai amfani sosai, wanda ake kira kafin mai amfani ya shiga. Ƙirƙirar masu amfani mai ƙarfi akan haɗin gwiwa ana tallafawa.
- Yana goyan bayan ƙididdiga ɗaya don girman bayanai da adadin fayiloli.
- Taimako don ƙayyadaddun bandwidth tare da ƙayyadaddun ƙayyadaddun ƙuntatawa don zirga-zirga mai shigowa da mai fita, da kuma ƙuntatawa akan adadin haɗin lokaci guda.
- Samun damar sarrafa kayan aikin da ke aiki dangane da mai amfani ko kundin adireshi (zaka iya iyakance duba jerin fayiloli, hana lodawa, zazzagewa, sake rubutawa, sharewa, sake suna ko canza haƙƙin samun dama, hana ƙirƙirar kundayen adireshi ko hanyoyin haɗin gwiwa, da sauransu).
- Ga kowane mai amfani, zaku iya ayyana hane-hane na hanyar sadarwa guda ɗaya, misali, zaku iya ba da izinin shiga kawai daga wasu IPs ko netnets.
- Yana goyan bayan haɗa matattara don abun ciki da aka zazzage dangane da masu amfani da kundayen adireshi (misali, zaku iya toshe fayilolin zazzagewa tare da takamaiman tsawo).
- Yana yiwuwa a ɗaure masu sarrafa waɗanda aka ƙaddamar yayin ayyuka daban-daban tare da fayil (zazzagewa, sharewa, sake suna, da sauransu). Baya ga masu kula da kira, ana tallafawa aika sanarwa ta hanyar buƙatun HTTP.
- Kashewar haɗin kai ta atomatik.
- Sabunta daidaitawar atomatik ba tare da karya haɗin gwiwa ba.
- Samar da awo don saka idanu a cikin Prometheus.
- Ana goyan bayan ka'idar HAProxy PROXY don tsara ma'auni na kaya ko haɗin wakili zuwa sabis na SFTP/SCP ba tare da rasa bayani game da adireshin IP na tushen mai amfani ba.
- API ɗin REST don sarrafa masu amfani da kundayen adireshi, ƙirƙirar madogara da samar da rahotanni kan haɗin kai mai aiki.
- Yanar gizon yanar gizo (http://127.0.0.1:8080/web) don daidaitawa da saka idanu (tsari ta fayilolin sanyi na yau da kullun kuma ana tallafawa).
- Ikon ayyana saituna a cikin JSON, TOML, YAML, HCL da tsarin envfile.
- Taimako don haɗi ta hanyar SSH tare da iyakataccen damar yin amfani da umarnin tsarin. Misali, an ba da izinin gudanar da umarni da suka dace don Git (git-receive-pack, git-upload-pack, git-upload-archive) da rsync, da kuma umarni da yawa da aka gina (scp, md5sum, sha * sum). , cd, pwd, sftpgo-kwafi da sftpgo-cire).
- Yanayin šaukuwa don raba jagorar gama gari ɗaya tare da tsararrun bayanan haɗin kai ta atomatik wanda aka tallata ta hanyar multicast DNS.
- Ginin tsarin bayanin martaba don nazarin aiki.
- Sauƙaƙe tsari don ƙaura da asusun tsarin Linux.
- Ajiye rajistan ayyukan a cikin tsarin JSON.
- Taimako don kundayen adireshi (misali, abubuwan da ke cikin wani kundin adireshi za a iya ba da su ba daga FS na gida ba, amma daga ajiyar girgije na waje).
- Cryptfs suna goyan bayan ɓoye bayanan akan-da-tashi na zahiri lokacin adanawa zuwa FS da yankewa lokacin dawowa.
- Taimako don tura haɗin kai zuwa wasu sabar SFTP.
- Ikon amfani da SFTPGo azaman tsarin SFTP don OpenSSH.
- Ikon adana bayanan sirri da bayanan sirri a cikin rufaffen tsari ta amfani da sabar KMS (Sabis ɗin Gudanar da Maɓalli), kamar Vault, GCP KMS, AWS KMS.
- Taimako don tabbatar da abubuwa biyu ta amfani da kalmomin sirri na lokaci-lokaci (TOTP, RFC 6238). Aikace-aikace irin su Authy da Google Authenticator ana iya amfani da su azaman masu tantancewa.
- Ƙaddamar da ayyuka ta hanyar plugins. Misali, akwai plugins waɗanda ke goyan bayan ƙarin sabis na musayar maɓalli, haɗe-haɗe da makircin Buga/Subbis, ajiya da dawo da bayanai game da abubuwan da suka faru a cikin DBMS.
source: budenet.ru