New to itflow!

Mydsi

Hello! The project looks awesome! And might be what we JUST need.

BUT! I have a few concerns

1. Password management. Is it possible to lock them behind a 2fa?

2. Sharepoint, is it integrated if not, how is all the data stored? Because essentially i want everything hosted on as much Microsoft as possible.

3. Is it possible to disable features like invoices etc?

How does backup work and is it easy to recover etc?

QLVR-IT

Mydsi

I'm not sure or it is what you're looking for but i'm maintaining two ITFlow instances. What i have done is using tools like restic and autorestic to automaticly create backups of all the files (web and uploaded files) and the database. Those backups can be synced to, for example, SharePoint or OneDrive with Rclone.

wrongecho

Hello and welcome!

Not currently, but this has been a proposed feature, see: https://forum.itflow.org/d/424-login-entries-require-techs-enter-a-justification-to-access-passwords
No integration with SharePoint. Docs created in ITFlow are stored in the database, uploaded files are on disk. You could potentially do some sort of manual sync if you really wanted to but we have no plans to integrate into SP.
You can disable billing features in Admin Settings > Modules
We recently added a zip folder backup/restore option to make this easier (not mentioned in docs yet), but otherwise I'd recommend VM backups. See here: https://docs.itflow.org/backups

Mydsi

Thank you so much for the explanation.

Some follow up questions. We use Datto RMM where have a bunch of devices and assets etc, is there any integration for that atm?

Is there a time schedule for the password thing? As we need to have that before we could use that function because of our obligation.

In regards to sharepoint, that's perfect. The files are they saved in a configurable folder? Potentially i could just make a sync between sharepoint and itflow. And in regards to the database convert the whole database into a file and save it in intervals. It's mostly for data integrity purposes.

In regards to the zip folder backup/restore is that something that could be triggered through the API? (To start backup etc) Or is it something i could just make a script to run some commands on the machine it self?

wrongecho

You're welcome!

We use Datto RMM where have a bunch of devices and assets etc, is there any integration for that atm?

Being open-source, our general philosophy will be to expand the API as required and only develop direct integrations where it is absolutely required. Currently this is just authentication for AAD/Entra and Stripe for payments. I know we have some people using the API for Tactical RMM, but it's very much write and host your own middleware. Example scripts here. If you want something turn-key, there are plenty of other (usually paid) products on the market.

Is there a time schedule for the password thing? As we need to have that before we could use that function because of our obligation.

There is not, but the major blocker around this has been mostly overcome now. Please feel free to add a like/comment on the post - the Forum is our main way of gauging community interest in a feature.

The files are they saved in a configurable folder?

Uploaded file will just be in the uploads folder, but it is then further split into sub-folders. You'd need something that queries the database to get a useful file name, but that's relatively straight-forward.

Docs can just be exported using the API or directly from the database with a select statement - document_content is the field.

In regards to the zip folder backup/restore is that something that could be triggered through the API? (To start backup etc) Or is it something i could just make a script to run some commands on the machine it self?

Not currently, but this would be nice to add in the future, both for the API and CLI scripts.

Mydsi

Just as a follow up.

Is it possible to make a portal for the client to see all the information etc for that one customer?

Mydsi

QLVR-IT That could be very interesting, mind sharing some of it? 🙂

QLVR-IT

I'll try my best (sorry for my bad English 😉 )

I'll try to make a summary, if you need more info, let me know.

1. Install RClone

First Install en config RClone to sync to onedrive or sharepoint. I followed these instructions: https://rclone.org/onedrive/
Keep in mind that is you want to use autorestic, you should not us a configpassword because autorestic can't handle that.
In my case I sync to a private SharePoint folder.

2. Install Restic

Then you need to install restic. In my case (for this purpose) it just needs to be installed on your server and doesn't need any further config. See: https://restic.net/#installation

3. Install autorestic

With Autorestic it is easier to (automaticly) create and restore backups. Use this to install: https://autorestic.vercel.app/installation

4. Config autorestic

In my case I create a .autorestic.yaml (see my example below) file as the root user (on /root/.autorestic.yml) because I backup the complete SQL folder (including database) and to do that I first stop MariaDB and after that I start it back up. I also run the commands as root. You might also create a user with the neede right to do so if you don't want to use root.

my .autorestic.yaml file.

version: 2

global:
  forget:
    keep-within: '14d'


locations:
  itflow_files:
    from: /var/www
    to: remote
  apache2:
    from: /etc/apache2
    to: remote
  php:
    from: /etc/php
    to: remote
  mariadb:
    from: /var/lib/mysql
    to: remote
    hooks:
      before:
        - systemctl stop mariadb
      after:
        - systemctl start mariadb
      failure:
        - systemctl start mariadb


backends:
  remote:
    type: rclone
    path: backups:onedrive
    key: <your secret password>

5. Use autorestic

To check (or initialize) you can use: autorestic --verbose check (from the location where the .autorestic.yaml is)

To manually create a backup (snapshot) you can use: autorestic --verbose backup -a

In my Cron (crontab -e as root user) I have this:

0 6 * * * autorestic -c /root/.autorestic.yml backup -a
0 18 * * * autorestic -c /root/.autorestic.yml backup -a

This automaticly starts the job at 6.00 an 18.00.

To restore you can do something like: autorestic -c .autorestic.yml exec -av -- restore <snapshot_id> --target /tmp/

where <snapshot_id> can be found when listing youre snapshots using: autorestic exec -av -- snapshots

I hope this will give you a kickstart. If you have any questions please ask, i'll try my best to answer,