1 #============================================================= -*-perl-*-
3 # Configuration file for BackupPC.
7 # This is the main configuration file for BackupPC.
9 # This file must be valid perl source, so make sure the punctuation,
10 # quotes, and other syntax are valid.
12 # This file is read by BackupPC at startup, when a HUP (-1) signal
13 # is sent to BackupPC and also at each wakeup time whenever the
14 # modification time of this file changes.
16 # The configuration parameters are divided into four general groups.
17 # The first group (general server configuration) provides general
18 # configuration for BackupPC. The next two groups describe what
19 # to backup, when to do it, and how long to keep it. The fourth
20 # group are settings for the CGI http interface.
22 # Configuration settings can also be specified on a per-PC basis.
23 # Simply put the relevant settings in a config.pl file in the
24 # PC's backup directory (ie: in __TOPDIR__/pc/hostName).
25 # All configuration settings in the second, third and fourth
26 # groups can be overridden by the per-PC config.pl file.
29 # Craig Barratt <cbarratt@users.sourceforge.net>
32 # Copyright (C) 2001-2003 Craig Barratt
34 # See http://backuppc.sourceforge.net.
36 #========================================================================
38 ###########################################################################
39 # General server configuration
40 ###########################################################################
42 # Host name on which the BackupPC server is running.
44 $Conf{ServerHost} = '';
47 # TCP port number on which the BackupPC server listens for and accepts
48 # connections. Normally this should be disabled (set to -1). The TCP
49 # port is only needed if apache runs on a different machine from BackupPC.
50 # In that case, set this to any spare port number over 1024 (eg: 2359).
51 # If you enable the TCP port, make sure you set $Conf{ServerMesgSecret}
54 $Conf{ServerPort} = -1;
57 # Shared secret to make the TCP port secure. Set this to a hard to guess
58 # string if you enable the TCP port (ie: $Conf{ServerPort} > 0).
60 # To avoid possible attacks via the TCP socket interface, every client
61 # message is protected by an MD5 digest. The MD5 digest includes four
63 # - a seed that is sent to the client when the connection opens
64 # - a sequence number that increments for each message
65 # - a shared secret that is stored in $Conf{ServerMesgSecret}
66 # - the message itself.
68 # The message is sent in plain text preceded by the MD5 digest. A
69 # snooper can see the plain-text seed sent by BackupPC and plain-text
70 # message from the client, but cannot construct a valid MD5 digest since
71 # the secret $Conf{ServerMesgSecret} is unknown. A replay attack is
72 # not possible since the seed changes on a per-connection and
75 $Conf{ServerMesgSecret} = '';
78 # PATH setting for BackupPC. An explicit value is necessary
79 # for taint mode. Value shouldn't matter too much since
80 # all execs use explicit paths. However, taint mode in perl
81 # will complain if this directory is world writable.
83 $Conf{MyPath} = '/bin';
86 # Permission mask for directories and files created by BackupPC.
87 # Default value prevents any access from group other, and prevents
90 $Conf{UmaskMode} = 027;
93 # Times at which we wake up, check all the PCs, and schedule necessary
94 # backups. Times are measured in hours since midnight. Can be
95 # fractional if necessary (eg: 4.25 means 4:15am).
97 # If the hosts you are backing up are always connected to the network
98 # you might have only one or two wakeups each night. This will keep
99 # the backup activity after hours. On the other hand, if you are backing
100 # up laptops that are only intermittently connected to the network you
101 # will want to have frequent wakeups (eg: hourly) to maximized the chance
102 # that each laptop is backed up.
105 # $Conf{WakeupSchedule} = [22.5]; # once per day at 10:30 pm.
106 # $Conf{WakeupSchedule} = [1..23]; # every hour except midnight
107 # $Conf{WakeupSchedule} = [2,4,6,8,10,12,14,16,18,20,22]; # every 2 hours
109 # The default value is every hour except midnight.
111 $Conf{WakeupSchedule} = [1..23];
114 # Maximum number of simultaneous backups to run. If there
115 # are no user backup requests then this is the maximum number
116 # of simultaneous backups.
118 $Conf{MaxBackups} = 4;
121 # Additional number of simultaneous backups that users can run.
122 # As many as $Conf{MaxBackups} + $Conf{MaxUserBackups} requests can
123 # run at the same time.
125 $Conf{MaxUserBackups} = 4;
128 # Maximum number of pending link commands. New backups will only be
129 # started if there are no more than $Conf{MaxPendingCmds} plus
130 # $Conf{MaxBackups} number of pending link commands, plus running jobs.
131 # This limit is to make sure BackupPC doesn't fall too far behind in
132 # running BackupPC_link commands.
134 $Conf{MaxPendingCmds} = 10;
137 # Maximum number of log files we keep around in log directory.
138 # These files are aged nightly. A setting of 14 means the log
139 # directory will contain about 2 weeks of old log files, in
140 # particular at most the files LOG, LOG.0, LOG.1, ... LOG.13
141 # (except today's LOG, these files will have a .z extension if
142 # compression is on).
144 # If you decrease this number after BackupPC has been running for a
145 # while you will have to manually remove the older log files.
147 $Conf{MaxOldLogFiles} = 14;
150 # Full path to the df command. Security caution: normal users
151 # should not allowed to write to this file or directory.
153 $Conf{DfPath} = '/bin/df';
156 # Command to run df. The following variables are substituted at run-time:
158 # $dfPath path to df ($Conf{DfPath})
159 # $topDir top-level BackupPC data directory
161 $Conf{DfCmd} = '$dfPath $topDir';
164 # Maximum threshold for disk utilization on the __TOPDIR__ filesystem.
165 # If the output from $Conf{DfPath} reports a percentage larger than
166 # this number then no new regularly scheduled backups will be run.
167 # However, user requested backups (which are usually incremental and
168 # tend to be small) are still performed, independent of disk usage.
169 # Also, currently running backups will not be terminated when the disk
170 # usage exceeds this number.
172 $Conf{DfMaxUsagePct} = 95;
175 # How long BackupPC_trashClean sleeps in seconds between each check
176 # of the trash directory. Once every 5 minutes should be reasonable.
178 $Conf{TrashCleanSleepSec} = 300;
181 # List of DHCP address ranges we search looking for PCs to backup.
182 # This is an array of hashes for each class C address range.
183 # This is only needed if hosts in the conf/hosts file have the
187 # # to specify 192.10.10.20 to 192.10.10.250 as the DHCP address pool
188 # $Conf{DHCPAddressRanges} = [
190 # ipAddrBase => '192.10.10',
195 # # to specify two pools (192.10.10.20-250 and 192.10.11.10-50)
196 # $Conf{DHCPAddressRanges} = [
198 # ipAddrBase => '192.10.10',
203 # ipAddrBase => '192.10.11',
209 $Conf{DHCPAddressRanges} = [];
212 # These configuration settings aren't used by BackupPC, but simply
213 # remember a few settings used by configure.pl during installation.
214 # These are used by configure.pl when upgrading to new versions of
217 $Conf{BackupPCUser} = '';
219 $Conf{InstallDir} = '';
222 # Whether BackupPC and the CGI script BackupPC_Admin verify that they
223 # are really running as user $Conf{BackupPCUser}. If this flag is set
224 # and the effective user id (euid) differs from $Conf{BackupPCUser}
225 # then both scripts exit with an error. This catches cases where
226 # BackupPC might be accidently started as root or the wrong user,
227 # or if the CGI script is not installed correctly.
229 $Conf{BackupPCUserVerify} = 1;
232 # Maximum number of hardlinks supported by the $TopDir file system
233 # that BackupPC uses. Most linux or unix file systems should support
234 # at least 32000 hardlinks per file, or 64K in other cases. If a pool
235 # file already has this number of hardlinks, a new pool file is created
236 # so that new hardlinks can be accommodated. This limit will only
237 # be hit if an identical file appears at least this number of times
238 # across all the backups.
240 $Conf{HardLinkMax} = 31999;
242 ###########################################################################
243 # What to backup and when to do it
244 # (can be overridden in the per-PC config.pl)
245 ###########################################################################
247 # Name of the host share that is backed up when using SMB. This can be a
248 # string or an array of strings if there are multiple shares per host.
251 # $Conf{SmbShareName} = 'c'; # backup 'c' share
252 # $Conf{SmbShareName} = ['c', 'd']; # backup 'c' and 'd' shares
254 # This setting only matters if $Conf{XferMethod} = 'smb'.
256 $Conf{SmbShareName} = 'C$';
259 # Smbclient share user name. This is passed to smbclient's -U argument.
261 # This setting only matters if $Conf{XferMethod} = 'smb'.
263 $Conf{SmbShareUserName} = '';
266 # Smbclient share password. This is passed to smbclient via its PASSWD
267 # environment variable. There are several ways you can tell BackupPC
268 # the smb share password. In each case you should be very careful about
269 # security. If you put the password here, make sure that this file is
270 # not readable by regular users! See the "Setting up config.pl" section
271 # in the documentation for more information.
273 # This setting only matters if $Conf{XferMethod} = 'smb'.
275 $Conf{SmbSharePasswd} = '';
278 # Which host directories to backup when using tar transport. This can be a
279 # string or an array of strings if there are multiple directories to
280 # backup per host. Examples:
282 # $Conf{TarShareName} = '/'; # backup everything
283 # $Conf{TarShareName} = '/home'; # only backup /home
284 # $Conf{TarShareName} = ['/home', '/src']; # backup /home and /src
286 # The fact this parameter is called 'TarShareName' is for historical
287 # consistency with the Smb transport options. You can use any valid
288 # directory on the client: there is no need for it to correspond to
289 # any Smb share or device mount point.
291 # Note also that you can also use $Conf{BackupFilesOnly} to specify
292 # a specific list of directories to backup. It's more efficient to
293 # use this option instead of $Conf{TarShareName} since a new tar is
294 # run for each entry in $Conf{TarShareName}.
296 # On the other hand, if you add --one-file-system to $Conf{TarClientCmd}
297 # you can backup each file system separately, which makes restoring one
298 # bad file system easier. In this case you would list all of the mount
299 # points here, since you can't get the same result with
300 # $Conf{BackupFilesOnly}:
302 # $Conf{TarShareName} = ['/', '/var', '/data', '/boot'];
304 # This setting only matters if $Conf{XferMethod} = 'tar'.
306 $Conf{TarShareName} = '/';
309 # Minimum period in days between full backups. A full dump will only be
310 # done if at least this much time has elapsed since the last full dump,
311 # and at least $Conf{IncrPeriod} days has elapsed since the last
314 # Typically this is set slightly less than an integer number of days. The
315 # time taken for the backup, plus the granularity of $Conf{WakeupSchedule}
316 # will make the actual backup interval a bit longer.
318 # There are two special values for $Conf{FullPeriod}:
320 # -1 Don't do any regular backups on this machine. Manually
321 # requested backups (via the CGI interface) will still occur.
323 # -2 Don't do any backups on this machine. Manually requested
324 # backups (via the CGI interface) will be ignored.
326 # These special settings are useful for a client that is no longer
327 # being backed up (eg: a retired machine), but you wish to keep the
328 # last backups available for browsing or restoring to other machines.
330 # Also, you might create a virtual client (by setting $Conf{ClientNameAlias})
331 # for restoring to a DVD or permanent media and you would set
332 # $Conf{FullPeriod} to -2 so that it is never backed up.
334 $Conf{FullPeriod} = 6.97;
337 # Minimum period in days between incremental backups (a user requested
338 # incremental backup will be done anytime on demand).
340 # Typically this is set slightly less than an integer number of days. The
341 # time taken for the backup, plus the granularity of $Conf{WakeupSchedule}
342 # will make the actual backup interval a bit longer.
344 $Conf{IncrPeriod} = 0.97;
347 # Number of full backups to keep. Must be >= 1.
349 # In the steady state, each time a full backup completes successfully
350 # the oldest one is removed. If this number is decreased, the
351 # extra old backups will be removed.
353 # If filling of incremental dumps is off the oldest backup always
354 # has to be a full (ie: filled) dump. This might mean an extra full
355 # dump is kept until the second oldest (incremental) dump expires.
357 $Conf{FullKeepCnt} = 1;
360 # Very old full backups are removed after $Conf{FullAgeMax} days. However,
361 # we keep at least $Conf{FullKeepCntMin} full backups no matter how old
364 $Conf{FullKeepCntMin} = 1;
365 $Conf{FullAgeMax} = 60;
368 # Number of incremental backups to keep. Must be >= 1.
370 # In the steady state, each time an incr backup completes successfully
371 # the oldest one is removed. If this number is decreased, the
372 # extra old backups will be removed.
374 $Conf{IncrKeepCnt} = 6;
377 # Very old incremental backups are removed after $Conf{IncrAgeMax} days.
378 # However, we keep at least $Conf{IncrKeepCntMin} incremental backups no
379 # matter how old they are.
381 $Conf{IncrKeepCntMin} = 1;
382 $Conf{IncrAgeMax} = 30;
385 # Whether incremental backups are filled. "Filling" means that the
386 # most recent full (or filled) dump is merged into the new incremental
387 # dump using hardlinks. This makes an incremental dump look like a
388 # full dump. Prior to v1.03 all incremental backups were filled.
389 # In v1.4.0 and later the default is off.
391 # BackupPC, and the cgi interface in particular, do the right thing on
392 # un-filled incremental backups. It will correctly display the merged
393 # incremental backup with the most recent filled backup, giving the
394 # un-filled incremental backups a filled appearance. That means it
395 # invisible to the user whether incremental dumps are filled or not.
397 # Filling backups takes a little extra disk space, and it does cost
398 # some extra disk activity for filling, and later removal. Filling
399 # is no longer useful, since file mangling and compression doesn't
400 # make a filled backup very useful. It's likely the filling option
401 # will be removed from future versions: filling will be delegated to
402 # the display and extraction of backup data.
404 # If filling is off, BackupPC makes sure that the oldest backup is
405 # a full, otherwise the following incremental backups will be
406 # incomplete. This might mean an extra full backup has to be
407 # kept until the following incremental backups expire.
409 # The default is off. You can turn this on or off at any
410 # time without affecting existing backups.
415 # Number of restore logs to keep. BackupPC remembers information about
416 # each restore request. This number per client will be kept around before
417 # the oldest ones are pruned.
419 # Note: files/dirs delivered via Zip or Tar downloads don't count as
420 # restores. Only the first restore option (where the files and dirs
421 # are written to the host) count as restores that are logged.
423 $Conf{RestoreInfoKeepCnt} = 10;
426 # List of directories or files to backup. If this is defined, only these
427 # directories or files will be backed up.
429 # For Smb, only one of $Conf{BackupFilesExclude} and $Conf{BackupFilesOnly}
430 # can be specified per share. If both are set for a particular share, then
431 # $Conf{BackupFilesOnly} takes precedence and $Conf{BackupFilesExclude}
434 # This can be set to a string, an array of strings, or, in the case
435 # of multiple shares, a hash of strings or arrays. A hash is used
436 # to give a list of directories or files to backup for each share
437 # (the share name is the key). If this is set to just a string or
438 # array, and $Conf{SmbShareName} contains multiple share names, then
439 # the setting is assumed to apply to only the first share name.
442 # $Conf{BackupFilesOnly} = '/myFiles';
443 # $Conf{BackupFilesOnly} = ['/myFiles']; # same as first example
444 # $Conf{BackupFilesOnly} = ['/myFiles', '/important'];
445 # $Conf{BackupFilesOnly} = {
446 # 'c' => ['/myFiles', '/important'], # these are for 'c' share
447 # 'd' => ['/moreFiles', '/archive'], # these are for 'd' share
450 $Conf{BackupFilesOnly} = undef;
453 # List of directories or files to exclude from the backup. For Smb,
454 # only one of $Conf{BackupFilesExclude} and $Conf{BackupFilesOnly}
455 # can be specified per share. If both are set for a particular share,
456 # then $Conf{BackupFilesOnly} takes precedence and
457 # $Conf{BackupFilesExclude} is ignored.
459 # This can be set to a string, an array of strings, or, in the case
460 # of multiple shares, a hash of strings or arrays. A hash is used
461 # to give a list of directories or files to exclude for each share
462 # (the share name is the key). If this is set to just a string or
463 # array, and $Conf{SmbShareName} contains multiple share names, then
464 # the setting is assumed to apply to only the first share name.
466 # The exact behavior is determined by the underlying transport program,
467 # smbclient or tar. For smbclient the exlclude file list is passed into
468 # the X option. Simple shell wild-cards using "*" or "?" are allowed.
470 # For tar, if the exclude file contains a "/" it is assumed to be anchored
471 # at the start of the string. Since all the tar paths start with "./",
472 # BackupPC prepends a "." if the exclude file starts with a "/". Note
473 # that GNU tar version >= 1.13.7 is required for the exclude option to
474 # work correctly. For linux or unix machines you should add
475 # "/proc" to $Conf{BackupFilesExclude} unless you have specified
476 # --one-file-system in $Conf{TarClientCmd} or --one-file-system in
477 # $Conf{RsyncArgs}. Also, for tar, do not use a trailing "/" in
478 # the directory name: a trailing "/" causes the name to not match
479 # and the directory will not be excluded.
482 # $Conf{BackupFilesExclude} = '/temp';
483 # $Conf{BackupFilesExclude} = ['/temp']; # same as first example
484 # $Conf{BackupFilesExclude} = ['/temp', '/winnt/tmp'];
485 # $Conf{BackupFilesExclude} = {
486 # 'c' => ['/temp', '/winnt/tmp'], # these are for 'c' share
487 # 'd' => ['/junk', '/dont_back_this_up'], # these are for 'd' share
490 $Conf{BackupFilesExclude} = undef;
493 # PCs that are always or often on the network can be backed up after
494 # hours, to reduce PC, network and server load during working hours. For
495 # each PC a count of consecutive good pings is maintained. Once a PC has
496 # at least $Conf{BlackoutGoodCnt} consecutive good pings it is subject
497 # to "blackout" and not backed up during hours and days specified by
498 # $Conf{BlackoutWeekDays}, $Conf{BlackoutHourBegin} and
499 # $Conf{BlackoutHourEnd}.
501 # To allow for periodic rebooting of a PC or other brief periods when a
502 # PC is not on the network, a number of consecutive bad pings is allowed
503 # before the good ping count is reset. This parameter is
504 # $Conf{BlackoutBadPingLimit}.
506 # Note that bad and good pings don't occur with the same interval. If a
507 # machine is always on the network, it will only be pinged roughly once
508 # every $Conf{IncrPeriod} (eg: once per day). So a setting for
509 # $Conf{BlackoutGoodCnt} of 7 means it will take around 7 days for a
510 # machine to be subject to blackout. On the other hand, if a ping is
511 # failed, it will be retried roughly every time BackupPC wakes up, eg,
512 # every one or two hours. So a setting for $Conf{BlackoutBadPingLimit} of
513 # 3 means that the PC will lose its blackout status after 3-6 hours of
516 # To disable the blackout feature set $Conf{BlackoutGoodCnt} to a negative
517 # value. A value of 0 will make all machines subject to blackout. But
518 # if you don't want to do any backups during the day it would be easier
519 # to just set $Conf{WakeupSchedule} to a restricted schedule.
521 $Conf{BlackoutBadPingLimit} = 3;
522 $Conf{BlackoutGoodCnt} = 7;
525 # The default settings specify the blackout period from 7:00am to
526 # 7:30pm local time on Mon-Fri. For $Conf{BlackoutWeekDays},
527 # 0 is Sunday, 1 is Monday etc.
529 $Conf{BlackoutHourBegin} = 7.0;
530 $Conf{BlackoutHourEnd} = 19.5;
531 $Conf{BlackoutWeekDays} = [1, 2, 3, 4, 5];
534 # A backup of a share that has zero files is considered fatal. This is
535 # used to catch miscellaneous Xfer errors that result in no files being
536 # backed up. If you have shares that might be empty (and therefore an
537 # empty backup is valid) you should set this flag to 0.
539 $Conf{BackupZeroFilesIsFatal} = 1;
541 ###########################################################################
542 # General per-PC configuration settings
543 # (can be overridden in the per-PC config.pl)
544 ###########################################################################
546 # What transport method to use to backup each host. If you have
547 # a mixed set of WinXX and linux/unix hosts you will need to override
548 # this in the per-PC config.pl.
550 # The valid values are:
552 # - 'smb': backup and restore via smbclient and the SMB protocol.
553 # Best choice for WinXX.
555 # - 'rsync': backup and restore via rsync (via rsh or ssh).
556 # Best choice for linux/unix. Can also work on WinXX.
558 # - 'rsyncd': backup and restre via rsync daemon on the client.
559 # Best choice for linux/unix if you have rsyncd running on
560 # the client. Can also work on WinXX.
562 # - 'tar': backup and restore via tar, tar over ssh, rsh or nfs.
563 # Good choice for linux/unix.
565 $Conf{XferMethod} = 'smb';
568 # Full path for smbclient. Security caution: normal users should not
569 # allowed to write to this file or directory.
571 # smbclient is from the Samba distribution. smbclient is used to
572 # actually extract the incremental or full dump of the share filesystem
575 # This setting only matters if $Conf{XferMethod} = 'smb'.
577 $Conf{SmbClientPath} = '/usr/bin/smbclient';
580 # Commands to run smbclient for a full dump, incremental dump or a restore.
581 # This setting only matters if $Conf{XferMethod} = 'smb'.
583 # The following variables are substituted at run-time:
585 # $smbClientPath same as $Conf{SmbClientPath}
586 # $host host to backup/restore
587 # $hostIP host IP address
588 # $shareName share name
589 # $userName user name
590 # $fileList list of files to backup (based on exclude/include)
591 # $I_option optional -I option to smbclient
592 # $X_option exclude option (if $fileList is an exclude list)
593 # $timeStampFile start time for incremental dump
595 $Conf{SmbClientFullCmd} = '$smbClientPath \\\\$host\\$shareName'
596 . ' $I_option -U $userName -E -N -d 1'
597 . ' -c tarmode\\ full -Tc$X_option - $fileList';
599 $Conf{SmbClientIncrCmd} = '$smbClientPath \\\\$host\\$shareName'
600 . ' $I_option -U $userName -E -N -d 1'
601 . ' -c tarmode\\ full -TcN$X_option $timeStampFile - $fileList';
603 $Conf{SmbClientRestoreCmd} = '$smbClientPath \\\\$host\\$shareName'
604 . ' $I_option -U $userName -E -N -d 1'
605 . ' -c tarmode\\ full -Tx -';
608 # Full command to run tar on the client. GNU tar is required. You will
609 # need to fill in the correct paths for ssh2 on the local host (server)
610 # and GNU tar on the client. Security caution: normal users should not
611 # allowed to write to these executable files or directories.
613 # See the documentation for more information about setting up ssh2 keys.
615 # If you plan to use NFS then tar just runs locally and ssh2 is not needed.
616 # For example, assuming the client filesystem is mounted below /mnt/hostName,
617 # you could use something like:
619 # $Conf{TarClientCmd} = '$tarPath -c -v -f - -C /mnt/$host/$shareName'
622 # In the case of NFS or rsh you need to make sure BackupPC's privileges
623 # are sufficient to read all the files you want to backup. Also, you
624 # will probably want to add "/proc" to $Conf{BackupFilesExclude}.
626 # The following variables are substituted at run-time:
629 # $hostIP host's IP address
630 # $incrDate newer-than date for incremental backups
631 # $shareName share name to backup (ie: top-level directory path)
632 # $fileList specific files to backup or exclude
633 # $tarPath same as $Conf{TarClientPath}
634 # $sshPath same as $Conf{SshPath}
636 # If a variable is followed by a "+" it is shell escaped. This is
637 # necessary for the command part of ssh or rsh, since it ends up
638 # getting passed through the shell.
640 # This setting only matters if $Conf{XferMethod} = 'tar'.
642 $Conf{TarClientCmd} = '$sshPath -q -n -l root $host'
643 . ' $tarPath -c -v -f - -C $shareName+'
647 # Extra tar arguments for full backups. Several variables are substituted at
648 # run-time. See $Conf{TarClientCmd} for the list of variable substitutions.
650 # If you are running tar locally (ie: without rsh or ssh) then remove the
651 # "+" so that the argument is no longer shell escaped.
653 # This setting only matters if $Conf{XferMethod} = 'tar'.
655 $Conf{TarFullArgs} = '$fileList+';
658 # Extra tar arguments for incr backups. Several variables are substituted at
659 # run-time. See $Conf{TarClientCmd} for the list of variable substitutions.
661 # Note that GNU tar has several methods for specifying incremental backups,
664 # --newer-mtime $incrDate+
665 # This causes a file to be included if the modification time is
666 # later than $incrDate (meaning its contents might have changed).
667 # But changes in the ownership or modes will not qualify the
668 # file to be included in an incremental.
671 # This causes the file to be included if any attribute of the
672 # file is later than $incrDate, meaning either attributes or
673 # the modification time. This is the default method. Do
674 # not use --atime-preserve in $Conf{TarClientCmd} above,
675 # otherwise resetting the atime (access time) counts as an
676 # attribute change, meaning the file will always be included
677 # in each new incremental dump.
679 # If you are running tar locally (ie: without rsh or ssh) then remove the
680 # "+" so that the argument is no longer shell escaped.
682 # This setting only matters if $Conf{XferMethod} = 'tar'.
684 $Conf{TarIncrArgs} = '--newer=$incrDate+ $fileList+';
687 # Full command to run tar for restore on the client. GNU tar is required.
688 # This can be the same as $Conf{TarClientCmd}, with tar's -c replaced by -x
689 # and ssh's -n removed.
691 # See $Conf{TarClientCmd} for full details.
693 # This setting only matters if $Conf{XferMethod} = "tar".
695 $Conf{TarClientRestoreCmd} = '$sshPath -q -l root $host'
696 . ' $tarPath -x -p --numeric-owner --same-owner'
697 . ' -v -f - -C $shareName+';
700 # Full path for tar on the client. Security caution: normal users should not
701 # allowed to write to this file or directory.
703 # This setting only matters if $Conf{XferMethod} = 'tar'.
705 $Conf{TarClientPath} = '/bin/tar';
708 # Path to rsync executable on the client
710 $Conf{RsyncClientPath} = '/bin/rsync';
713 # Full command to run rsync on the client machine. The following variables
714 # are substituted at run-time:
716 # $host host name being backed up
717 # $hostIP host's IP address
718 # $shareName share name to backup (ie: top-level directory path)
719 # $rsyncPath same as $Conf{RsyncClientPath}
720 # $sshPath same as $Conf{SshPath}
721 # $argList argument list, built from $Conf{RsyncArgs},
722 # $shareName, $Conf{BackupFilesExclude} and
723 # $Conf{BackupFilesOnly}
725 # This setting only matters if $Conf{XferMethod} = 'rsync'.
727 $Conf{RsyncClientCmd} = '$sshPath -l root $host $rsyncPath $argList+';
730 # Full command to run rsync for restore on the client. The following
731 # variables are substituted at run-time:
733 # $host host name being backed up
734 # $hostIP host's IP address
735 # $shareName share name to backup (ie: top-level directory path)
736 # $rsyncPath same as $Conf{RsyncClientPath}
737 # $sshPath same as $Conf{SshPath}
738 # $argList argument list, built from $Conf{RsyncArgs},
739 # $shareName, $Conf{BackupFilesExclude} and
740 # $Conf{BackupFilesOnly}
742 # This setting only matters if $Conf{XferMethod} = 'rsync'.
744 $Conf{RsyncClientRestoreCmd} = '$sshPath -l root $host $rsyncPath $argList+';
747 # Share name to backup. For $Conf{XferMethod} = "rsync" this should
748 # be a file system path, eg '/' or '/home'.
750 # For $Conf{XferMethod} = "rsyncd" this should be the name of the module
751 # to backup (ie: the name from /etc/rsynd.conf).
753 # This can also be a list of multiple file system paths or modules.
754 # For example, by adding --one-file-system to $Conf{RsyncArgs} you
755 # can backup each file system separately, which makes restoring one
756 # bad file system easier. In this case you would list all of the mount
759 # $Conf{RsyncShareName} = ['/', '/var', '/data', '/boot'];
761 $Conf{RsyncShareName} = '/';
764 # Rsync daemon port on the client, for $Conf{XferMethod} = "rsyncd".
766 $Conf{RsyncdClientPort} = 873;
769 # Rsync daemon user name on client, for $Conf{XferMethod} = "rsyncd".
770 # The user name and password are stored on the client in whatever file
771 # the "secrets file" parameter in rsyncd.conf points to
772 # (eg: /etc/rsyncd.secrets).
774 $Conf{RsyncdUserName} = '';
777 # Rsync daemon user name on client, for $Conf{XferMethod} = "rsyncd".
778 # The user name and password are stored on the client in whatever file
779 # the "secrets file" parameter in rsyncd.conf points to
780 # (eg: /etc/rsyncd.secrets).
782 $Conf{RsyncdPasswd} = '';
785 # Whether authentication is mandatory when connecting to the client's
786 # rsyncd. By default this is on, ensuring that BackupPC will refuse to
787 # connect to an rsyncd on the client that is not password protected.
788 # Turn off at your own risk.
790 $Conf{RsyncdAuthRequired} = 1;
793 # Arguments to rsync for backup. Do not edit the first set unless you
794 # have a thorough understanding of how File::RsyncP works.
796 # Examples of additional arguments that should work are --exclude/--include,
799 # $Conf{RsyncArgs} = [
800 # # original arguments here
802 # '--exclude', '/proc',
803 # '--exclude', '*.tmp',
820 # Add additional arguments here
825 # Arguments to rsync for restore. Do not edit the first set unless you
826 # have a thorough understanding of how File::RsyncP works.
829 $Conf{RsyncRestoreArgs} = [
845 # Add additional arguments here
850 # Amount of verbosity in Rsync Xfer log files. 0 means be quiet,
851 # 1 will give will give one line per file, 2 will also show skipped
852 # files on incrementals, higher values give more output. 10 will
853 # include byte dumps of all data read/written, which will make the
856 $Conf{RsyncLogLevel} = 1;
859 # Full path for ssh. Security caution: normal users should not
860 # allowed to write to this file or directory.
862 $Conf{SshPath} = '/usr/bin/ssh';
865 # Full path for nmblookup. Security caution: normal users should not
866 # allowed to write to this file or directory.
868 # nmblookup is from the Samba distribution. nmblookup is used to get the
869 # netbios name, necessary for DHCP hosts.
871 $Conf{NmbLookupPath} = '/usr/bin/nmblookup';
874 # NmbLookup command. Given an IP address, does an nmblookup on that
875 # IP address. The following variables are substituted at run-time:
877 # $nmbLookupPath path to nmblookup ($Conf{NmbLookupPath})
880 # This command is only used for DHCP hosts: given an IP address, this
881 # command should try to find its NetBios name.
883 $Conf{NmbLookupCmd} = '$nmbLookupPath -A $host';
886 # NmbLookup command. Given a netbios name, finds that host by doing
887 # a NetBios lookup. Several variables are substituted at run-time:
889 # $nmbLookupPath path to nmblookup ($Conf{NmbLookupPath})
892 # In some cases you might need to change the broadcast address, for
893 # example if nmblookup uses 192.168.255.255 by default and you find
894 # that doesn't work, try 192.168.1.255 (or your equivalent class C
895 # address) using the -B option:
897 # $Conf{NmbLookupFindHostCmd} = '$nmbLookupPath -B 192.168.1.255 $host';
899 # If you use a WINS server and your machines don't respond to
900 # multicast NetBios requests you can use this (replace 1.2.3.4
901 # with the IP address of your WINS server):
903 # $Conf{NmbLookupFindHostCmd} = '$nmbLookupPath -R -U 1.2.3.4 $host';
905 # This is preferred over multicast since it minimizes network traffic.
907 # Experiment manually for your site to see what form of nmblookup command
910 $Conf{NmbLookupFindHostCmd} = '$nmbLookupPath $host';
913 # For fixed IP address hosts, BackupPC_dump can also verify the netbios
914 # name to ensure it matches the host name. An error is generated if
915 # they do not match. Typically this flag is off. But if you are going
916 # to transition a bunch of machines from fixed host addresses to DHCP,
917 # setting this flag is a great way to verify that the machines have
918 # their netbios name set correctly before turning on DCHP.
920 $Conf{FixedIPNetBiosNameCheck} = 0;
923 # Full path to the ping command. Security caution: normal users
924 # should not be allowed to write to this file or directory.
926 # If you want to disable ping checking, set this to some program
927 # that exits with 0 status, eg:
929 # $Conf{PingPath} = '/bin/echo';
931 $Conf{PingPath} = '/bin/ping';
934 # Ping command. The following variables are substituted at run-time:
936 # $pingPath path to ping ($Conf{PingPath})
939 # Wade Brown reports that on solaris 2.6 and 2.7 ping -s returns the wrong
940 # exit status (0 even on failure). Replace with "ping $host 1", which
941 # gets the correct exit status but we don't get the round-trip time.
943 $Conf{PingCmd} = '$pingPath -c 1 $host';
946 # Compression level to use on files. 0 means no compression. Compression
947 # levels can be from 1 (least cpu time, slightly worse compression) to
948 # 9 (most cpu time, slightly better compression). The recommended value
949 # is 3. Changing to 5, for example, will take maybe 20% more cpu time
950 # and will get another 2-3% additional compression. See the zlib
951 # documentation for more information about compression levels.
953 # Changing compression on or off after backups have already been done
954 # will require both compressed and uncompressed pool files to be stored.
955 # This will increase the pool storage requirements, at least until all
956 # the old backups expire and are deleted.
958 # It is ok to change the compression value (from one non-zero value to
959 # another non-zero value) after dumps are already done. Since BackupPC
960 # matches pool files by comparing the uncompressed versions, it will still
961 # correctly match new incoming files against existing pool files. The
962 # new compression level will take effect only for new files that are
963 # newly compressed and added to the pool.
965 # If compression was off and you are enabling compression for the first
966 # time you can use the BackupPC_compressPool utility to compress the
967 # pool. This avoids having the pool grow to accommodate both compressed
968 # and uncompressed backups. See the documentation for more information.
970 # Note: compression needs the Compress::Zlib perl library. If the
971 # Compress::Zlib library can't be found then $Conf{CompressLevel} is
972 # forced to 0 (compression off).
974 $Conf{CompressLevel} = 0;
977 # Maximum round-trip ping time in milliseconds. This threshold is set
978 # to avoid backing up PCs that are remotely connected through WAN or
979 # dialup connections. The output from ping -s (assuming it is supported
980 # on your system) is used to check the round-trip packet time. On your
981 # local LAN round-trip times should be much less than 20msec. On most
982 # WAN or dialup connections the round-trip time will be typically more
983 # than 20msec. Tune if necessary.
985 $Conf{PingMaxMsec} = 20;
988 # Timeout in seconds when listening for the transport program's
989 # (smbclient, tar etc) stdout. If no output is received during this
990 # time, then it is assumed that something has wedged during a backup,
991 # and the backup is terminated.
993 # Note that stdout buffering combined with huge files being backed up
994 # could cause longish delays in the output from smbclient that
995 # BackupPC_dump sees, so in rare cases you might want to increase
998 # Despite the name, this parameter sets the timeout for all transport
999 # methods (tar, smb etc).
1001 $Conf{ClientTimeout} = 7200;
1004 # Maximum number of log files we keep around in each PC's directory
1005 # (ie: pc/$host). These files are aged monthly. A setting of 12
1006 # means there will be at most the files LOG, LOG.0, LOG.1, ... LOG.11
1007 # in the pc/$host directory (ie: about a years worth). (Except this
1008 # month's LOG, these files will have a .z extension if compression
1011 # If you decrease this number after BackupPC has been running for a
1012 # while you will have to manually remove the older log files.
1014 $Conf{MaxOldPerPCLogFiles} = 12;
1017 # Optional commands to run before and after dumps and restores.
1018 # Stdout from these commands will be written to the Xfer (or Restore)
1019 # log file. One example of using these commands would be to
1020 # shut down and restart a database server, or to dump a database
1021 # to files for backup. Example:
1023 # $Conf{DumpPreUserCmd} = '$sshPath -l root $host /usr/bin/dumpMysql';
1025 # The following variable substitutions are made at run time for
1026 # $Conf{DumpPreUserCmd} and $Conf{DumpPostUserCmd}:
1028 # $type type of dump (incr or full)
1029 # $xferOK 1 if the dump succeeded, 0 if it didn't
1030 # $client client name being backed up
1031 # $host host name (could be different from client name if
1032 # $Conf{ClientNameAlias} is set)
1033 # $hostIP IP address of host
1034 # $user user name from the hosts file
1035 # $moreUsers list of additional users from the hosts file
1036 # $share the first share name
1037 # $shares list of all the share names
1038 # $XferMethod value of $Conf{XferMethod} (eg: tar, rsync, smb)
1039 # $sshPath value of $Conf{SshPath},
1041 # The following variable substitutions are made at run time for
1042 # $Conf{RestorePreUserCmd} and $Conf{RestorePostUserCmd}:
1044 # $client client name being backed up
1045 # $xferOK 1 if the restore succeeded, 0 if it didn't
1046 # $host host name (could be different from client name if
1047 # $Conf{ClientNameAlias} is set)
1048 # $hostIP IP address of host
1049 # $user user name from the hosts file
1050 # $moreUsers list of additional users from the hosts file
1051 # $share the first share name
1052 # $XferMethod value of $Conf{XferMethod} (eg: tar, rsync, smb)
1053 # $sshPath value of $Conf{SshPath},
1054 # $type set to "restore"
1055 # $bkupSrcHost host name of the restore source
1056 # $bkupSrcShare share name of the restore source
1057 # $bkupSrcNum backup number of the restore source
1058 # $pathHdrSrc common starting path of restore source
1059 # $pathHdrDest common starting path of destination
1060 # $fileList list of files being restored
1062 $Conf{DumpPreUserCmd} = undef;
1063 $Conf{DumpPostUserCmd} = undef;
1064 $Conf{RestorePreUserCmd} = undef;
1065 $Conf{RestorePostUserCmd} = undef;
1068 # Override the client's host name. This allows multiple clients
1069 # to all refer to the same physical host. This should only be
1070 # set in the per-PC config file and is only used by BackupPC at
1071 # the last moment prior to generating the command used to backup
1072 # that machine (ie: the value of $Conf{ClientNameAlias} is invisible
1073 # everywhere else in BackupPC). The setting can be a host name or
1076 # $Conf{ClientNameAlias} = 'realHostName';
1077 # $Conf{ClientNameAlias} = '192.1.1.15';
1079 # will cause the relevant smb/tar/rsync backup/restore commands to be
1080 # directed to realHostName, not the client name.
1082 # Note: this setting doesn't work for hosts with DHCP set to 1.
1084 $Conf{ClientNameAlias} = undef;
1087 # Advanced option for asking BackupPC to load additional perl modules.
1088 # Can be a list (array ref) of module names to load at startup.
1090 $Conf{PerlModuleLoad} = undef;
1092 ###########################################################################
1093 # Email reminders, status and messages
1094 # (can be overridden in the per-PC config.pl)
1095 ###########################################################################
1097 # Full path to the sendmail command. Security caution: normal users
1098 # should not allowed to write to this file or directory.
1100 $Conf{SendmailPath} = '/usr/sbin/sendmail';
1103 # Minimum period between consecutive emails to a single user.
1104 # This tries to keep annoying email to users to a reasonable
1105 # level. Email checks are done nightly, so this number is effectively
1106 # rounded up (ie: 2.5 means a user will never receive email more
1107 # than once every 3 days).
1109 $Conf{EMailNotifyMinDays} = 2.5;
1112 # Name to use as the "from" name for email. Depending upon your mail
1113 # handler this is either a plain name (eg: "admin") or a fully-qualified
1114 # name (eg: "admin@mydomain.com").
1116 $Conf{EMailFromUserName} = '';
1119 # Destination address to an administrative user who will receive a
1120 # nightly email with warnings and errors. If there are no warnings
1121 # or errors then no email will be sent. Depending upon your mail
1122 # handler this is either a plain name (eg: "admin") or a fully-qualified
1123 # name (eg: "admin@mydomain.com").
1125 $Conf{EMailAdminUserName} = '';
1128 # Destination domain name for email sent to users. By default
1129 # this is empty, meaning email is sent to plain, unqualified
1130 # addresses. Otherwise, set it to the destintation domain, eg:
1132 # $Cong{EMailUserDestDomain} = '@mydomain.com';
1134 # With this setting user email will be set to 'user@mydomain.com'.
1136 $Conf{EMailUserDestDomain} = '';
1139 # This subject and message is sent to a user if their PC has never been
1142 # These values are language-dependent. The default versions can be
1143 # found in the language file (eg: lib/BackupPC/Lang/en.pm). If you
1144 # need to change the message, copy it here and edit it, eg:
1146 # $Conf{EMailNoBackupEverMesg} = <<'EOF';
1153 # This is a site-specific email message.
1156 $Conf{EMailNoBackupEverSubj} = undef;
1157 $Conf{EMailNoBackupEverMesg} = undef;
1160 # How old the most recent backup has to be before notifying user.
1161 # When there have been no backups in this number of days the user
1164 $Conf{EMailNotifyOldBackupDays} = 7.0;
1167 # This subject and message is sent to a user if their PC has not recently
1168 # been backed up (ie: more than $Conf{EMailNotifyOldBackupDays} days ago).
1170 # These values are language-dependent. The default versions can be
1171 # found in the language file (eg: lib/BackupPC/Lang/en.pm). If you
1172 # need to change the message, copy it here and edit it, eg:
1174 # $Conf{EMailNoBackupRecentMesg} = <<'EOF';
1181 # This is a site-specific email message.
1184 $Conf{EMailNoBackupRecentSubj} = undef;
1185 $Conf{EMailNoBackupRecentMesg} = undef;
1188 # How old the most recent backup of Outlook files has to be before
1191 $Conf{EMailNotifyOldOutlookDays} = 5.0;
1194 # This subject and message is sent to a user if their Outlook files have
1195 # not recently been backed up (ie: more than $Conf{EMailNotifyOldOutlookDays}
1198 # These values are language-dependent. The default versions can be
1199 # found in the language file (eg: lib/BackupPC/Lang/en.pm). If you
1200 # need to change the message, copy it here and edit it, eg:
1202 # $Conf{EMailOutlookBackupMesg} = <<'EOF';
1209 # This is a site-specific email message.
1212 $Conf{EMailOutlookBackupSubj} = undef;
1213 $Conf{EMailOutlookBackupMesg} = undef;
1215 ###########################################################################
1216 # CGI user interface configuration settings
1217 # (can be overridden in the per-PC config.pl)
1218 ###########################################################################
1220 # Normal users can only access information specific to their host.
1221 # They can start/stop/browse/restore backups.
1223 # Administrative users have full access to all hosts, plus overall
1224 # status and log information.
1226 # The administrative users are the union of the unix/linux group
1227 # $Conf{CgiAdminUserGroup} and the manual list of users, separated
1228 # by spaces, in $Conf{CgiAdminUsers}. If you don't want a group or
1229 # manual list of users set the corresponding configuration setting
1230 # to undef or an empty string.
1232 # If you want every user to have admin privileges (careful!), set
1233 # $Conf{CgiAdminUsers} = '*'.
1236 # $Conf{CgiAdminUserGroup} = 'admin';
1237 # $Conf{CgiAdminUsers} = 'craig celia';
1238 # --> administrative users are the union of group admin, plus
1241 # $Conf{CgiAdminUserGroup} = '';
1242 # $Conf{CgiAdminUsers} = 'craig celia';
1243 # --> administrative users are only craig and celia'.
1245 $Conf{CgiAdminUserGroup} = '';
1246 $Conf{CgiAdminUsers} = '';
1249 # URL of the BackupPC_Admin CGI script. Used for email messages.
1251 $Conf{CgiURL} = undef;
1254 # Language to use. See lib/BackupPC/Lang for the list of supported
1255 # languages, which include English (en), French (fr), Spanish (es),
1258 # Currently the Language setting applies to the CGI interface and email
1259 # messages sent to users. Log files and other text is still in English.
1261 $Conf{Language} = 'en';
1264 # User names that are rendered by the CGI interface can be turned
1265 # into links into their home page or other information about the
1266 # user. To set this up you need to create two sprintf() strings,
1267 # that each contain a single '%s' that will be replaced by the user
1268 # name. The default is a mailto: link.
1270 # $Conf{CgiUserHomePageCheck} should be an absolute file path that
1271 # is used to check (via "-f") that the user has a valid home page.
1272 # Set this to undef or an empty string to turn off this check.
1274 # $Conf{CgiUserUrlCreate} should be a full URL that points to the
1275 # user's home page. Set this to undef or an empty string to turn
1276 # off generation of URLs for user names.
1279 # $Conf{CgiUserHomePageCheck} = '/var/www/html/users/%s.html';
1280 # $Conf{CgiUserUrlCreate} = 'http://myhost/users/%s.html';
1281 # --> if /var/www/html/users/craig.html exists, then 'craig' will
1282 # be rendered as a link to http://myhost/users/craig.html.
1284 $Conf{CgiUserHomePageCheck} = '';
1285 $Conf{CgiUserUrlCreate} = 'mailto:%s';
1288 # Date display format for CGI interface. True for US-style dates (MM/DD)
1289 # and zero for international dates (DD/MM).
1291 $Conf{CgiDateFormatMMDD} = 1;
1294 # If set, the complete list of hosts appears in the left navigation
1295 # bar for administrators. Otherwise, just the hosts for which the
1296 # user is listed in the host file (as either the user or in moreUsers)
1299 $Conf{CgiNavBarAdminAllHosts} = 0;
1302 # Header font and size for CGI interface
1304 $Conf{CgiHeaderFontType} = 'arial';
1305 $Conf{CgiHeaderFontSize} = '3';
1308 # Color scheme for CGI interface. Default values give a very light blue
1309 # for the background navigation color, green for the header background,
1310 # and white for the body background. (You call tell I should stick to
1311 # programming and not graphical design.)
1313 $Conf{CgiNavBarBgColor} = '#ddeeee';
1314 $Conf{CgiHeaderBgColor} = '#99cc33';
1315 $Conf{CgiBodyBgColor} = '#ffffff';
1318 # Hilight colors based on status that are used in the PC summary page.
1320 $Conf{CgiStatusHilightColor} = {
1321 Reason_backup_failed => '#ffcccc',
1322 Reason_backup_done => '#ccffcc',
1323 Reason_no_ping => '#ffff99',
1324 Reason_backup_canceled_by_user => '#ff9900',
1325 Status_backup_in_progress => '#66cc99',
1329 # Additional CGI header text. For example, if you wanted each CGI page
1330 # to auto refresh every 900 seconds, you could add this text:
1332 # <meta http-equiv="refresh" content="900">
1334 $Conf{CgiHeaders} = '<meta http-equiv="pragma" content="no-cache">';
1337 # Directory where images are stored. This directory should be below
1338 # Apache's DocumentRoot. This value isn't used by BackupPC but is
1339 # used by configure.pl when you upgrade BackupPC.
1342 # $Conf{CgiImageDir} = '/usr/local/apache/htdocs/BackupPC';
1344 $Conf{CgiImageDir} = '';
1347 # Additional mappings of file name extenions to Content-Type for
1348 # individual file restore. See $Ext2ContentType in BackupPC_Admin
1349 # for the default setting. You can add additional settings here,
1350 # or override any default settings. Example:
1352 # $Conf{CgiExt2ContentType} = {
1353 # 'pl' => 'text/plain',
1356 $Conf{CgiExt2ContentType} = { };
1359 # URL (without the leading http://host) for BackupPC's image directory.
1360 # The CGI script uses this value to serve up image files.
1363 # $Conf{CgiImageDirURL} = '/BackupPC';
1365 $Conf{CgiImageDirURL} = '';