Un excellente comparatif des offres disponibles pour mettre en place une solution de eCommerce.

dossier wizishop ecommerce

source

When you apt-get apache2 and activate ssl, you get this strange error “-12263”.

Thanks to theatons.com where I found the solution.
The apt-get installation is indeed incomplete, you have to continue the process to make SSL effective :

wget  apache2-ssl.tar.gz
tar xzvf apache2-ssl.tar.gz
sudo mv ssleay.cnf /usr/share/apache2/
sudo mv apache2-ssl-certificate /usr/bin/
sudo mkdir /etc/apache2/ssl
sudo apache2-ssl-certificate

Then, you need to enable SSL in your apache config files :

sudo a2enmod ssl
sudo ln -s /etc/apache2/sites-available/ssl /etc/apache2/sites-enabled/ssl
sudo cp /etc/apache2/sites-available/default /etc/apache2/sites-available/ssl

sudo gedit /etc/apache2/sites-available/ssl

NameVirtualHost *:443

ServerAdmin webmaster@localhost

SSLEngine On
SSLCertificateFile /etc/apache2/ssl/apache.pem

DocumentRoot /var/www/

Options FollowSymLinks
AllowOverride None

Options Indexes FollowSymLinks MultiViews
AllowOverride None
Order allow,deny
allow from all
# This directive allows us to have apache2’s default start page
# in /apache2-default/, but still have / go to the right place
# Commented out for Ubuntu
#RedirectMatch ^/$ /apache2-default/

ScriptAlias /cgi-bin/ /usr/lib/cgi-bin/

AllowOverride None
Options ExecCGI -MultiViews +SymLinksIfOwnerMatch
Order allow,deny
Allow from all

ErrorLog /var/log/apache2/error.log

# Possible values include: debug, info, notice, warn, error, crit,
# alert, emerg.
LogLevel warn

CustomLog /var/log/apache2/access.log combined
ServerSignature On

Alias /doc/ “/usr/share/doc/”

Options Indexes MultiViews FollowSymLinks
AllowOverride None
Order deny,allow
Deny from all
Allow from 127.0.0.0/255.0.0.0 ::1/128

sudo gedit /etc/apache2/sites-available/default
and make sure the following lines say this:

NameVirtualHost *:80

You will also need to edit sites-available default, and ssl:

sudo gedit /etc/apache2/sites-available/default

And the same again for the ssl file.
Here you will need to change the section which says ‘AllowOverride None’ to:

AllowOverride All

Then, reload your config and that’s all !

/etc/init.d/apache2 force-reload

source

Un excellent point sur les différents logiciels et techniques pour mettre en place des sauvegardes de tout type… Plus d’excuse pour ne pas en faire !

Useful Links and Howtos

• Duplicity HowTo: www.debian-administration.org/articles/209
• Security issues: wiki.boum.org/TechStdOut/EncryptedBackupsForParanoiacs
• Caparison chart: www.fluffy.co.uk/boxbackup/comparison.html

A comparison of utilities for filesystem backup

incremental

glastree:

doesn’t work remotely, easy, limited options.

incremental and compressed

storebackup

incremental backups to a local disk. lots of options. space efficient (gzipped diffs).

remote and incremental

by hand: (‘rsync’ + ‘cp -al’)

www.mikerubel.org/computers/rsync_snapshots/

good overview of how and why. this has now been implented and is available in a debian package called rsnapshot

rsnapshot

based on mike rubel’s scripts. clean & easy configuration. push style backups.

snapback2

based on mike rubel’s scripts. clean & easy configuration. pull style backups.

mirrordir

MIRRORDIR mirrors a directory tree in every detail, including devices, ownerships, permissions, symlinks, hardlinks and access times, suitable for timed backups of disk drives. The minimal set of changes needed to make the original directory tree identical to the backup directory tree is executed. Can optionally create backup files before deleting, and store multiple revisions through any number of levels. A scripting language allows for custom excluding of special files. Works over ftp and mcfs. Also implements its own secure sockets for transparent strong encrypted file transfer, using a custom daemon.

dirvish

debian howto for dirvish: www.pegasys.ws/dirvish/debian.howto.html

robust configuration files. confusing terminology,

rlbackup

rlbackup provides a simple secure mechanism for generating linked backups over the network.

remote, incremental, and compressed

rdiff-backup

good for big files, because only the changes are transmitted and stores gzipped files and then gzipped diffs. includes meta data files, so that even if the backup user can’t change file ownership permissions, this information is retained and will restore correctly.

from the website: rdiff-backup backs up one directory to another, possibly over a network. The target directory ends up a copy of the source directory, but extra reverse diffs are stored in a special subdirectory of that target directory, so you can still recover files lost some time ago. The idea is to combine the best features of a mirror and an incremental backup. rdiff-backup also preserves subdirectories, hard links, dev files, permissions, uid/gid ownership, and modification times. Also, rdiff-backup can operate in a bandwidth efficient manner over a pipe, like rsync. Thus you can use rdiff-backup and ssh to securely back a hard drive up to a remote location, and only the differences will be transmitted.

backupninja

Backupninja allows you to coordinate system backup by dropping a few simple configuration files into /etc/backup.d/. Most programs you might use for making backups don’t have their own configuration file format. Backupninja provides a centralized way to configure and coordinate many different backup utilities (including rdiff-backup).

remote, incremental, and encrypted

Duplicity

Duplicity backs directories by producing encrypted tar-format volumes and uploading them to a remote or local file server. Because duplicity uses librsync, the incremental archives are space efficient and only record the parts of files that have changed since the last backup. Because duplicity uses GnuPG to encrypt and/or sign these archives, they will be safe from spying and/or modification by the server.

Here is a useful duplicity tutorial.

Box Backup

An open source, completely automatic on-line backup system for UNIX. All backed up data is stored on the server in files on a filesystem — no tape or archive devices are used. The server is trusted only to make files available when they are required — all data is encrypted. A backup daemon runs on systems to be backed up, and copies encrypted data to the server when it notices changes. Only changes within files are sent to the server, just like rsync. Old versions of files on the server are stored as changes from the current version. Behaves like tape — old versions and deleted files are available.

remote and encrypted

DIBS

Distributed Internet Backup System (DIBS). peer to peer distributed backup using encrypted chunks so that no one knows what they are backup up from other peers.

Recommendations

I tried them all, and I didn’t like any of them. So I wrote backupninja. Backupninja is not actually a backup program. Instead, it manages your entire backup scheme using easy ini style configurations files in /etc/backup.d/. Most programs you might use for making backups don’t have their own configuration file format. Backupninja provides a centralized way to configure and coordinate many different backup utilities. Features:

• easy to read ini style configuration files.
• you can drop in scripts to handle new types of backups.
• backup actions can be scheduled
• you can choose when status report emails are mailed to you (always, on warning, on error, never).
• console-based wizard (ninjahelper) makes it easy to create backup action configuration files.
• passwords are never sent via the command line to helper programs.
• works with Linux-Vservers.

Backup types:

• secure, remote, incremental filesytem backup (via rdiff-backup). incremental data is compressed. permissions are retained even with an unpriviledged backup user.
• backup of mysql databases (via mysqlhotcopy and/or mysqldump).
• backup of postgresql databases
• backup of ldap databases (via slapcat and/or ldapsearch).
• basic system and hardware info.
• encrypted remote backups (via duplicity).
• backup of subversion repositories.
• burn CD/DVDs or create ISOs.

It slices, it dices!

source