UpLoad Server - Revision history

Wikisailor: /* Samba Install & A ZFS Hard Drive */

2025-03-30T08:15:28Z

Samba Install & A ZFS Hard Drive

← Older revision		Revision as of 08:15, 30 March 2025
Line 132:		Line 132:
	net use T: /delete		net use T: /delete
	* A drive could also be added from the windows explorer. You must remember that it is Samba on Satsuma that is doing the authentication so it must be a user from Satsuma not the local machine (no Windows AD here, Samba is doing auth workgroups style)		* A drive could also be added from the windows explorer. You must remember that it is Samba on Satsuma that is doing the authentication so it must be a user from Satsuma not the local machine (no Windows AD here, Samba is doing auth workgroups style)
			* We will not be setting up SWAT or some similar web GUI for Samba because it will only be for a couple of users and for a couple of shares so it is not going to be overly difficult to manage.

	==Setting up the Scripts==		==Setting up the Scripts==

Wikisailor: /* Samba Install & A ZFS Hard Drive */

2025-03-30T08:11:00Z

Samba Install & A ZFS Hard Drive

← Older revision		Revision as of 08:11, 30 March 2025
Line 131:		Line 131:
	* If a different drive is desired a mapped drive can be dropped with the command net use <drive letter> /delete eg		* If a different drive is desired a mapped drive can be dropped with the command net use <drive letter> /delete eg
	net use T: /delete		net use T: /delete
	* A drive could also be added from the windows explorer.		* A drive could also be added from the windows explorer. You must remember that it is Samba on Satsuma that is doing the authentication so it must be a user from Satsuma not the local machine (no Windows AD here, Samba is doing auth workgroups style)

	==Setting up the Scripts==		==Setting up the Scripts==

Wikisailor: /* Satsuma Setup */

2025-03-30T08:04:49Z

Satsuma Setup

← Older revision		Revision as of 08:04, 30 March 2025
Line 129:		Line 129:
	* Open Windows Explorer		* Open Windows Explorer
	* Browse to This PC and you should see two new drives one called Import and the other called Export. You should be able to add files to Import but Export will be just for export so will not be readable.		* Browse to This PC and you should see two new drives one called Import and the other called Export. You should be able to add files to Import but Export will be just for export so will not be readable.
	* If a different drive is desired a mapped drive can be dropped with the command net use <drive letter> delete eg		* If a different drive is desired a mapped drive can be dropped with the command net use <drive letter> /delete eg
	net use T: delete		net use T: /delete
	* A drive could also be added from the windows explorer.		* A drive could also be added from the windows explorer.

Wikisailor: /* Samba Install & A ZFS Hard Drive */

2025-03-30T08:03:18Z

Samba Install & A ZFS Hard Drive

← Older revision		Revision as of 08:03, 30 March 2025
Line 129:		Line 129:
	* Open Windows Explorer		* Open Windows Explorer
	* Browse to This PC and you should see two new drives one called Import and the other called Export. You should be able to add files to Import but Export will be just for export so will not be readable.		* Browse to This PC and you should see two new drives one called Import and the other called Export. You should be able to add files to Import but Export will be just for export so will not be readable.
			* If a different drive is desired a mapped drive can be dropped with the command net use <drive letter> delete eg
			net use T: delete
			* A drive could also be added from the windows explorer.

	==Setting up the Scripts==		==Setting up the Scripts==

Wikisailor: /* Satsuma Setup */

2025-03-30T07:57:59Z

Satsuma Setup

← Older revision		Revision as of 07:57, 30 March 2025
Line 123:		Line 123:
	* from the Start menu type cmd and open as administrator		* from the Start menu type cmd and open as administrator
	* The command net use will map a network drive to T: the share will be at photo and the directory will be Export it will be case sensitive and must match the [Export] block in Samba.conf), Photo will be whatever you put in hosts or could be changed to the IP address of the WAN port of Pfsense the user will be the Samba user and that must be on satsuma the password will also come from satsuma, if the hostname is less desirable then satsuma's ip address could be used, Persistent:Yes means the drive will be persevered on reboot of the PC.		* The command net use will map a network drive to T: the share will be at photo and the directory will be Export it will be case sensitive and must match the [Export] block in Samba.conf), Photo will be whatever you put in hosts or could be changed to the IP address of the WAN port of Pfsense the user will be the Samba user and that must be on satsuma the password will also come from satsuma, if the hostname is less desirable then satsuma's ip address could be used, Persistent:Yes means the drive will be persevered on reboot of the PC.
	net use T: \\Photo\Export /user:satsuma\photoup photoupsPassword /~~persistant~~:yes		net use T: \\Photo\Export /user:satsuma\photoup photoupsPassword /persistent:yes
	The command net use will map a network drive to T: the share will be at photo and the directory will be Export it will be case sensitive and must match the [Export] block in Samba.conf), Photo will be whatever you put in hosts or could be changed to the IP address of the WAN port of Pfsense the user will be the Samba user and that must be on satsuma the password will also come from satsuma, if the hostname is less desirable then satsuma's ip address could be used, Persistent:Yes means the drive will be persevered on reboot of the PC.		The command net use will map a network drive to T: the share will be at photo and the directory will be Export it will be case sensitive and must match the [Export] block in Samba.conf), Photo will be whatever you put in hosts or could be changed to the IP address of the WAN port of Pfsense the user will be the Samba user and that must be on satsuma the password will also come from satsuma, if the hostname is less desirable then satsuma's ip address could be used, Persistent:Yes means the drive will be persevered on reboot of the PC.
	* The next command will be case sensitive and must match the [Import] block in Samba.conf), Photo will be whatever you put in hosts or could be changed to the IP address of the WAN port of Pfsense the user will be the Samba user and that must be on satsuma the password will also come from satsuma, if the hostname is less desirable then satsuma's ip address could be used, Persistent:Yes means the drive will be persevered on reboot of the PC.		* The next command will be case sensitive and must match the [Import] block in Samba.conf), Photo will be whatever you put in hosts or could be changed to the IP address of the WAN port of Pfsense the user will be the Samba user and that must be on satsuma the password will also come from satsuma, if the hostname is less desirable then satsuma's ip address could be used, Persistent:Yes means the drive will be persevered on reboot of the PC.
	net use S: \\Photo\Import /user:satsuma\photoup photoupsPassword /~~persistant~~:yes ( this will map a network drive to T: the share will be at photo and the directory will be Export		net use S: \\Photo\Import /user:satsuma\photoup photoupsPassword /persistent:yes ( this will map a network drive to T: the share will be at photo and the directory will be Export
	* Open Windows Explorer		* Open Windows Explorer
	* Browse to This PC and you should see two new drives one called Import and the other called Export. You should be able to add files to Import but Export will be just for export so will not be readable.		* Browse to This PC and you should see two new drives one called Import and the other called Export. You should be able to add files to Import but Export will be just for export so will not be readable.

Wikisailor: /* Samba Install & A ZFS Hard Drive */

2025-03-30T07:38:15Z

Samba Install & A ZFS Hard Drive

← Older revision		Revision as of 07:38, 30 March 2025
Line 122:		Line 122:
	* save as the file then change the file type to All files (.)		* save as the file then change the file type to All files (.)
	* from the Start menu type cmd and open as administrator		* from the Start menu type cmd and open as administrator
	* ~~type~~ net use ~~T: \\Photo\Export /user:satsuma\photoup photoupsPassword /persistant:yes ( this~~ will map a network drive to T: the share will be at photo and the directory will be Export (it will be case sensitive and must match the [Export] block in Samba.conf), Photo will be whatever you put in hosts or could be changed to the IP address of the WAN port of Pfsense the user will be the Samba user and that must be on satsuma the password will also come from satsuma, if the hostname is less desirable then satsuma's ip address could be used, Persistent:Yes means the drive will be persevered on reboot of the PC.		* The command net use will map a network drive to T: the share will be at photo and the directory will be Export it will be case sensitive and must match the [Export] block in Samba.conf), Photo will be whatever you put in hosts or could be changed to the IP address of the WAN port of Pfsense the user will be the Samba user and that must be on satsuma the password will also come from satsuma, if the hostname is less desirable then satsuma's ip address could be used, Persistent:Yes means the drive will be persevered on reboot of the PC.
	* type net use S: \\Photo\~~Import~~ /user:satsuma\photoup photoupsPassword /persistant:yes ~~( this~~ will map a network drive to T: the share will be at photo and the directory will be Export (it will be case sensitive and must match the [Export] block in Samba.conf), Photo will be whatever you put in hosts or could be changed to the IP address of the WAN port of Pfsense the user will be the Samba user and that must be on satsuma the password will also come from satsuma, if the hostname is less desirable then satsuma's ip address could be used, Persistent:Yes means the drive will be persevered on reboot of the PC.		net use T: \\Photo\Export /user:satsuma\photoup photoupsPassword /persistant:yes
			The command net use will map a network drive to T: the share will be at photo and the directory will be Export it will be case sensitive and must match the [Export] block in Samba.conf), Photo will be whatever you put in hosts or could be changed to the IP address of the WAN port of Pfsense the user will be the Samba user and that must be on satsuma the password will also come from satsuma, if the hostname is less desirable then satsuma's ip address could be used, Persistent:Yes means the drive will be persevered on reboot of the PC.
			* The next command will be case sensitive and must match the [Import] block in Samba.conf), Photo will be whatever you put in hosts or could be changed to the IP address of the WAN port of Pfsense the user will be the Samba user and that must be on satsuma the password will also come from satsuma, if the hostname is less desirable then satsuma's ip address could be used, Persistent:Yes means the drive will be persevered on reboot of the PC.
			net use S: \\Photo\Import /user:satsuma\photoup photoupsPassword /persistant:yes ( this will map a network drive to T: the share will be at photo and the directory will be Export
	* Open Windows Explorer		* Open Windows Explorer
	* Browse to This PC and you should see two new drives one called Import and the other called Export. You should be able to add files to Import but Export will be just for export so will not be readable.		* Browse to This PC and you should see two new drives one called Import and the other called Export. You should be able to add files to Import but Export will be just for export so will not be readable.

Sailor at 09:07, 17 March 2025

2025-03-17T09:07:04Z

← Older revision		Revision as of 09:07, 17 March 2025
Line 177:		Line 177:

	There are two options for allowing a client outside the firewall to connect to Mandarin's MySQL one is to forward the port directly but that has some security implications in that exposing MySQL to outside the LAN is not advisable. The other possibility is to share a SSH session between the inside and outside. There is still a small security consideration in that we will allow an SSH session through the firewall but that is an acceptable risk, given that we are already allowing SSH connections from outside and the firewall already has port forwarding in place. As noted on the external connections page we port forward xxxx01 for mandarin.		There are two options for allowing a client outside the firewall to connect to Mandarin's MySQL one is to forward the port directly but that has some security implications in that exposing MySQL to outside the LAN is not advisable. The other possibility is to share a SSH session between the inside and outside. There is still a small security consideration in that we will allow an SSH session through the firewall but that is an acceptable risk, given that we are already allowing SSH connections from outside and the firewall already has port forwarding in place. As noted on the external connections page we port forward xxxx01 for mandarin.


			==Importing and procesing==

Sailor: /* Install MySQL on Satsuma */

2025-03-13T00:13:44Z

Install MySQL on Satsuma

← Older revision		Revision as of 00:13, 13 March 2025
Line 158:		Line 158:
	at the end of the questions it will logout the root user so Log in to the MySQL server:		at the end of the questions it will logout the root user so Log in to the MySQL server:
	sudo mysql -u root -p		sudo mysql -u root -p
	~~Create a database for Digikam:~~
	~~CREATE DATABASE digikam;~~
	Create a user for Digikam:		Create a user for Digikam:
	CREATE USER 'digikam_user'@'localhost' IDENTIFIED BY 'your_password'		CREATE USER 'digikam_user'@'localhost' IDENTIFIED BY 'your_password'
	~~Grant privileges~~ to ~~the Digikam user:~~		Create some databases for digikam to use
			CREATE DATABASE digikam;
			CREATE DATABASE digikam_core;
			CREATE DATABASE digikam_thumbs;
			CREATE DATABASE digikam_faces;
			CREATE DATABASE digikam_similarity;
	GRANT ALL PRIVILEGES ON digikam.* TO 'digikam_user'@'localhost';		GRANT ALL PRIVILEGES ON digikam.* TO 'digikam_user'@'localhost';
	~~Flush privileges:~~		GRANT ALL PRIVILEGES ON digikam_core.* TO 'digikam_user'@'localhost';
			GRANT ALL PRIVILEGES ON digikam_thumbs.* TO 'digikam_user'@'localhost';
			GRANT ALL PRIVILEGES ON digikam_faces.* TO 'digikam_user'@'localhost';
			GRANT ALL PRIVILEGES ON digikam_similarity.* TO 'digikam_user'@'localhost';
	FLUSH PRIVILEGES;		FLUSH PRIVILEGES;
	EXIT;		EXIT;
	~~Now we can use the digikam_user for the local install of~~






	===Configure MySQL Over SSH===		===Configure MySQL Over SSH===

	There are two options for allowing a client outside the firewall to connect to Mandarin's MySQL one is to forward the port directly but that has some security implications in that exposing MySQL to outside the LAN is not advisable. The other possibility is to share a SSH session between the inside and outside. There is still a small security consideration in that we will allow an SSH session through the firewall but that is an acceptable risk, given that we are already allowing SSH connections from outside and the firewall already has port forwarding in place. As noted on the external connections page we port forward xxxx01 for mandarin.		There are two options for allowing a client outside the firewall to connect to Mandarin's MySQL one is to forward the port directly but that has some security implications in that exposing MySQL to outside the LAN is not advisable. The other possibility is to share a SSH session between the inside and outside. There is still a small security consideration in that we will allow an SSH session through the firewall but that is an acceptable risk, given that we are already allowing SSH connections from outside and the firewall already has port forwarding in place. As noted on the external connections page we port forward xxxx01 for mandarin.

Sailor: /* Directories and their uses */

2025-03-13T00:08:23Z

Directories and their uses

← Older revision		Revision as of 00:08, 13 March 2025
Line 138:		Line 138:
	* duplicates be a dumping ground for duplicates found prior to them being discarded.		* duplicates be a dumping ground for duplicates found prior to them being discarded.
	* working will be a where each file will be moved to while it is being processed this dir will only ever have one file in it.		* working will be a where each file will be moved to while it is being processed this dir will only ever have one file in it.
	* ~~digkam_in~~ this will be ~~where~~ Digikam imports ~~images~~ from~~. By the time it files get here they will be known to be non duplicates. There~~ will ~~potentially~~ be ~~a lot of files here all with unique name but all in~~ the ~~same dir so a listing here could be of thousands of files~~		* digikam this will be the base Digikam directory
			* /digikam/dk_import will be the directory that Digikam imports from
			* /digikam/dk_thumbs will be the storage for digikam's thumb nails

	==Processing with Digikam==		==Processing with Digikam==

Sailor: /* Processing with Digikam */

2025-03-12T23:13:27Z

Processing with Digikam

@@ Line 142: / Line 142: @@
 ==Processing with Digikam==
-I will process the images with Digikam either with the VM or with the desktop to make the two have synchronised databases we will share a database on Mandarin.
+I will process the images with Digikam either with the VM or with the desktop to make the two have synchronised databases we would have had a DB on on Mandarin but the is a security risk of allowing remote connections that we would have mitigated by limiting connections to localhost but that would have broken the connections to the webservers so the next best thing is to have a dedicated instance of MySQL on Satsuma (this host).
 ===Configure MySQL Over SSH===
-There are two options for allowing a client outside the firewall to connect to Mandarin's MySQL one is to forward the port directly but that has some security implications in that exposing MySQL to outside the LAN is not advisable. The other possibility is to share a SSH session between the inside and outside. There is still a small security consideration in that we will allow an SSH session through the firewall but that is an acceptable risk, given that we are already allowing SSH connections from outside and the firewall already has port forwarding in place. As noted on the external conections page  we port forward xxxx01 for  mandarin.
+There are two options for allowing a client outside the firewall to connect to Mandarin's MySQL one is to forward the port directly but that has some security implications in that exposing MySQL to outside the LAN is not advisable. The other possibility is to share a SSH session between the inside and outside. There is still a small security consideration in that we will allow an SSH session through the firewall but that is an acceptable risk, given that we are already allowing SSH connections from outside and the firewall already has port forwarding in place. As noted on the external connections page  we port forward xxxx01 for  mandarin.