mirror of https://github.com/Aidaho12/haproxy-wi
Pavel Loginov
parent
2603acf846
commit
e0424af2e7
169
README.md
169
README.md
|
|
@ -54,193 +54,42 @@ Web interface(user-friendly web GUI, alerting, monitoring and secure) for managi
|
|||
# Install
|
||||
|
||||
## RPM
|
||||
Install repository:
|
||||
```
|
||||
yum install https://repo.haproxy-wi.org/haproxy-wi-release-7-1-0.noarch.rpm
|
||||
```
|
||||
After install HAProxy-WI:
|
||||
```
|
||||
yum install haproxy-wi
|
||||
```
|
||||
|
||||
Supports EL7 and EL8
|
||||
|
||||
#### Before uses RPM repository you should donate to support project on [Patreon](https://www.patreon.com/haproxy_wi/overview) or on [PayPal](https://www.paypal.me/loginovpavel) and I will send you credentials for access. Actual prices you can see on [Patreon](https://www.patreon.com/haproxy_wi/overview)
|
||||
|
||||
### More information on the official [site](https://haproxy-wi.org/installation.py#rpm)
|
||||
### Read instruction on the official [site](https://haproxy-wi.org/installation.py#rpm)
|
||||
|
||||
## Manual install
|
||||
For install just clone:
|
||||
```
|
||||
CentOS:
|
||||
$ sudo yum -y install git nmap-ncat net-tools python35u dos2unix python35u-pip mod_ssl httpd python35u-devel gcc-c++ openldap-devel python-devel python-jinja2 python35u-mod_wsgi ansible
|
||||
$ cd /var/www/
|
||||
$ git clone https://github.com/Aidaho12/haproxy-wi.git /var/www/haproxy-wi
|
||||
$ chown -R apache:apache haproxy-wi/
|
||||
|
||||
Or if use Debian/Ubuntu:
|
||||
|
||||
$ sudo apt-get install git net-tools lshw dos2unix apache2 gcc netcat python3.5 python3.5-mod_wsgi mod_ssl python3-pip g++ freetype2-demos libatlas-base-dev openldap-dev libpq-dev python-dev libxml2-dev libxslt1-dev libldap2-dev libsasl2-dev libffi-dev python3-dev libssl-dev ansible -y
|
||||
$ git clone https://github.com/Aidaho12/haproxy-wi.git /var/www/haproxy-wi
|
||||
$ chown -R www-data:www-data haproxy-wi/
|
||||
```
|
||||
|
||||
Both
|
||||
|
||||
```
|
||||
$ pip3 install -r haproxy-wi/requirements.txt
|
||||
$ chmod +x haproxy-wi/app/*.py
|
||||
$ sudo ln -s /usr/bin/python3.5 /usr/bin/python3
|
||||
$ sudo cp haproxy-wi/config_other/logrotate/* /etc/logrotate.d/
|
||||
$ sudo cp haproxy-wi/config_other/syslog/* /etc/rsyslog.d/
|
||||
$ sudo cp haproxy-wi/config_other/systemd/* /etc/systemd/system/
|
||||
$ sudo systemctl daemon-reload
|
||||
$ sudo systemctl restart httpd
|
||||
$ sudo systemctl restart rsyslog
|
||||
$ sudo systemctl restart metrics_haproxy.service
|
||||
$ sudo systemctl restart checker_haproxy.service
|
||||
$ sudo systemctl restart keep_alive.service
|
||||
$ sudo systemctl enable metrics_haproxy.service
|
||||
$ sudo systemctl enable checker_haproxy.service
|
||||
$ sudo systemctl enable keep_alive.service
|
||||
$ sudo mkdir /var/www/haproxy-wi/app/certs
|
||||
$ sudo mkdir /var/www/haproxy-wi/keys
|
||||
$ sudo mkdir /var/www/haproxy-wi/configs/
|
||||
$ sudo mkdir /var/www/haproxy-wi/configs/hap_config/
|
||||
$ sudo mkdir /var/www/haproxy-wi/configs/kp_config/
|
||||
$ sudo mkdir /var/www/haproxy-wi/log/
|
||||
|
||||
|
||||
```
|
||||
|
||||
For Apache do virtualhost with cgi-bin. Like this:
|
||||
```
|
||||
# vi /etc/httpd/conf.d/haproxy-wi.conf
|
||||
<VirtualHost *:8080>
|
||||
WSGIDaemonProcess api display-name=%{GROUP} user=apache group=apache processes=1 threads=5
|
||||
WSGIScriptAlias /api /var/www/haproxy-wi/api/app.wsgi
|
||||
|
||||
<Directory /var/www/haproxy-wi/api>
|
||||
WSGIProcessGroup api
|
||||
WSGIApplicationGroup %{GLOBAL}
|
||||
Order deny,allow
|
||||
Allow from all
|
||||
</Directory>
|
||||
|
||||
SSLEngine on
|
||||
SSLCertificateFile /var/www/haproxy-wi/app/certs/haproxy-wi.crt
|
||||
SSLCertificateKeyFile /var/www/haproxy-wi/app/certs/haproxy-wi.key
|
||||
|
||||
ServerName haproxy-wi
|
||||
ErrorLog /var/log/httpd/haproxy-wi.error.log
|
||||
CustomLog /var/log/httpd/haproxy-wi.access.log combined
|
||||
TimeOut 600
|
||||
LimitRequestLine 16380
|
||||
|
||||
DocumentRoot /var/www/haproxy-wi
|
||||
ScriptAlias /cgi-bin/ "/var/www/haproxy-wi/app/"
|
||||
|
||||
<Directory /var/www/haproxy-wi/app>
|
||||
DirectoryIndex overview.py
|
||||
Options +ExecCGI
|
||||
AddHandler cgi-script .py
|
||||
Order deny,allow
|
||||
Allow from all
|
||||
</Directory>
|
||||
|
||||
<Directory /var/www/haproxy-wi/app/certs>
|
||||
Options +ExecCGI -Indexes +MultiViews
|
||||
Order Deny,Allow
|
||||
Deny from all
|
||||
</Directory>
|
||||
|
||||
<Directory /var/www/haproxy-wi/keys>
|
||||
Options +ExecCGI -Indexes +MultiViews
|
||||
Order Deny,Allow
|
||||
Deny from all
|
||||
</Directory>
|
||||
|
||||
<FilesMatch "\.cfg$">
|
||||
Order Deny,Allow
|
||||
Deny from all
|
||||
</FilesMatch>
|
||||
|
||||
<FilesMatch "\.db$">
|
||||
Order Deny,Allow
|
||||
Deny from all
|
||||
</FilesMatch>
|
||||
|
||||
<IfModule mod_headers.c>
|
||||
Header set X-XSS-Protection: 1;
|
||||
Header set X-Frame-Options: deny
|
||||
Header set X-Content-Type-Options: nosniff
|
||||
Header set Strict-Transport-Security: max-age=3600;
|
||||
Header set Cache-Control no-cache
|
||||
Header set Expires: 0
|
||||
|
||||
<filesMatch ".(ico|css|js|gif|jpeg|jpg|png|svg|woff|ttf|eot)$">
|
||||
Header set Cache-Control "max-age=86400, public"
|
||||
</filesMatch>
|
||||
</IfModule>
|
||||
</VirtualHost>
|
||||
```
|
||||
|
||||
### More information on the official [site](https://haproxy-wi.org/installation.py#manual)
|
||||
### Read instruction on the official [site](https://haproxy-wi.org/installation.py#manual)
|
||||
|
||||
# OS support
|
||||
HAProxy-WI was tested on EL7, EL8 and all scripts too. Debian/Ubuntu OS support at 'beta' stage, may work not correct
|
||||
|
||||
|
||||
|
||||
# Database support
|
||||
|
||||
Default HAProxy-WI use Sqlite, if you want use MySQL enable in config, and create database:
|
||||
|
||||
### For MySQL support:
|
||||
```
|
||||
MariaDB [(none)]> create user 'haproxy-wi'@'%';
|
||||
MariaDB [(none)]> create database haproxywi;
|
||||
MariaDB [(none)]> grant all on haproxywi.* to 'haproxy-wi'@'%' IDENTIFIED BY 'haproxy-wi';
|
||||
MariaDB [(none)]> grant all on haproxywi.* to 'haproxy-wi'@'localhost' IDENTIFIED BY 'haproxy-wi';
|
||||
```
|
||||
|
||||
### More information on the official [site](https://haproxy-wi.org/settings.py#db_settings)
|
||||
### Read instruction on the official [site](https://haproxy-wi.org/settings.py#db_settings)
|
||||
|
||||
|
||||
|
||||
# Settings
|
||||
```
|
||||
Edit $HOME_HAPROXY-WI/app/haproxy-wi.cfg with your env
|
||||
```
|
||||
|
||||
|
||||
Login https://haproxy-wi-server/users.py, and add: users, groups and servers. Default: admin/admin
|
||||
|
||||
### Read instruction on the official [site](https://haproxy-wi.org/settings.py)
|
||||
|
||||
|
||||
|
||||
For Runtime API, Metrics and Alerting enable state file and stat socket on HAproxt servers and need install socat on all haproxy servers, and configre HAProxy:
|
||||
```
|
||||
global
|
||||
stats socket *:1999 level admin
|
||||
stats socket /var/run/haproxy.sock mode 600 level admin
|
||||
server-state-file /etc/haproxy/haproxy.state
|
||||
|
||||
defaults
|
||||
load-server-state-from-file global
|
||||
|
||||
listen stats
|
||||
bind *:8085
|
||||
stats enable
|
||||
stats uri /stats
|
||||
stats realm HAProxy-04\ Statistics
|
||||
stats auth admin:password
|
||||
stats admin if TRUE
|
||||
```
|
||||
|
||||
|
||||
|
||||
# Create and update DB
|
||||
```
|
||||
$ cd /var/www/haproxy-wi/app
|
||||
$ ./create_db.py
|
||||
```
|
||||
|
||||
# Troubleshooting
|
||||
If you have error:
|
||||
```
|
||||
|
|
|
|||
|
|
@ -1,4 +1,7 @@
|
|||
<VirtualHost *:443>
|
||||
AddDefaultCharset UTF-8
|
||||
SetEnv PYTHONIOENCODING utf8
|
||||
|
||||
WSGIDaemonProcess api display-name=%{GROUP} user=apache group=apache processes=1 threads=5
|
||||
WSGIScriptAlias /api /var/www/haproxy-wi/api/app.wsgi
|
||||
|
||||
|
|
|
|||
Loading…
Reference in New Issue