Name: rest-server
Owner: The restic backup program
Description: Rest Server is a high performance HTTP server that implements restic's REST backend API.
Created: 2016-11-05 16:12:22.0
Updated: 2018-01-18 19:13:49.0
Pushed: 2018-01-13 09:52:52.0
Size: 4195
Language: Go
GitHub Committers
| User | Most Recent Commit | # Commits |
|---|
Other Committers
| User | Most Recent Commit | # Commits |
|---|
Rest Server is a high performance HTTP server that implements restic's REST backend API. It provides secure and efficient way to backup data remotely, using restic backup client via the rest: URL.
Rest Server requires Go 1.7 or higher to build. The only tested compiler is the official Go compiler. Building server with gccgo may work, but is not supported.
The required version of restic backup client to use with Rest Server is v0.7.1 or higher.
If all goes well, you'll find the binary in the current directory.
Alternatively, you can compile and install it in your $GOBIN with a standard go install ./cmd/rest-server. But, beware, you won't have version info built into binary when compiled that way!
alls the binary as `/usr/local/bin/rest-server`.
rnatively, you can install it manually anywhere you want. It's a single binary, there are no dependencies.
Docker
Build image
sage
earn how to use restic backup client with REST backend, please consult [restic manual](http://restic.readthedocs.io/en/latest/030_preparing_a_new_repo.html#rest-server).
rest-server –help
Run a REST server for use with restic
Usage: rest-server [flags]
Flags:
--append-only enable append only mode
--cpuprofile string write CPU profile to file
--debug output debug messages
-h, –help help for rest-server
--listen string listen address (default ":8000")
--log string log HTTP requests in the combined log format
--path string data directory (default "/tmp/restic")
--prometheus enable Prometheus metrics
--tls turn on TLS support
--tls-cert string TLS certificate path
--tls-key string TLS key path
efault the server persists backup data in `/tmp/restic`. Start the server with a custom persistence directory:
rest-server –path /user/home/backup
server uses an `.htpasswd` file to specify users. You can create such a file at the root of the persistence directory by executing the following command. In order to append new user to the file, just omit the `-c` argument.
htpasswd -s -c .htpasswd username
efault the server uses HTTP protocol. This is not very secure since with Basic Authentication, username and passwords will travel in cleartext in every request. In order to enable TLS support just add the `-tls` argument and add a private and public key at the root of your persistence directory. You may also specify private and public keys by --tls-cert and --tls-key
ed certificate is required by the restic backend, but if you just want to test the feature you can generate unsigned keys with the following commands:
openssl genrsa -out private_key 2048 openssl req -new -x509 -key private_key -out public_key -days 365
nd only mode allows creation of new backups but prevents deletion and modification of existing backups. This can be useful when backing up systems that have a potential of being hacked.
Server uses exactly the same directory structure as local backend, so you should be able to access it both locally and via HTTP, even simultaneously.
Systemd
e's an example [systemd service file](https://github.com/restic/rest-server/blob/master/examples/systemd/rest-server.service) included with the source, so you can get Rest Server up & running as a proper Systemd service in no time. Before installing, adapt paths and options to your environment.
Docker
efault, image uses authentication. To turn it off, set environment variable `DISABLE_AUTHENTICATION` to any value.
istent data volume is located to `/data`.
Start server
docker run -p 8000:8000 -v /my/data:/data –name rest_server restic/rest-server
suggested to set a container name to more easily manage users (see next section).
can set environment variable `OPTIONS` to any extra flags you'd like to pass to rest-server.
Manage users
# Add user
docker exec -it rest_server create_user myuser
docker exec -it rest_server create_user myuser mypassword
# Delete user
docker exec -it rest_server delete_user myuser
rometheus support and Grafana dashboard
server can be started with `--prometheus` to expose [Prometheus](https://prometheus.io/) metrics at `/metrics`.
repository contains an example full stack Docker Compose setup with a Grafana dashboard in [examples/compose-with-grafana/](examples/compose-with-grafana/).
hy use Rest Server?
ared to the SFTP backend, the REST backend has better performance, especially so if you can skip additional crypto overhead by using plain HTTP transport (restic already properly encrypts all data it sends, so using HTTPS is mostly about authentication).
even if you use HTTPS transport, the REST protocol should be faster and more scalable, due to some inefficiencies of the SFTP protocol (everything needs to be transferred in chunks of 32 KiB at most, each packet needs to be acknowledged by the server).
lly, the Rest Server implementation is really simple and as such could be used on the low-end devices, no problem. Also, in some cases, for example behind corporate firewalls, HTTP/S might be the only protocol allowed. Here too REST backend might be the perfect option for your backup needs.
ontributors
ributors are welcome, just open a new issue / pull request.
icense
The BSD 2-Clause License
Copyright © 2015, Bertil Chapuis Copyright © 2016, Zlatko ?alu?i?, Alexander Neumann Copyright © 2017, The Rest Server Authors All rights reserved.
Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:
Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.
Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.
THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS “AS IS” AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.