base-de-connaissances/gnu-linux/serveurs/securisation/sauvegarde-yunohost.md

% Sauvegarde Yunohost

Voir proxy-jump.md

sudo yunohost user create backupmanager

Résultat

Full name: Backup Manager
Password: ***
Confirm password: *** 
Available domains:
- 13ft.aezi.fr
- cloud.aezi.fr
- excalidraw.aezi.fr
- joplin.aezi.fr
- notes.aezi.fr
- nu.aezi.fr
- wallabag.aezi.fr
Domain to use for the user's email address (default: nu.aezi.fr):
Info: The user 'backupmanager' will be added to the group 'all_users'
Warning: ./50-wallabag2: line 20: ynh_exec_as_app: command not found
Success! User created
fullname: Backup Manager
mail: backupmanager@nu.aezi.fr
username: backupmanager

Ajout groupe SSH

301 Moved Permanently

sudo yunohost user permission add ssh backupmanager
sudo yunohost user permission remove ssh backupmanager
sudo yunohost user ssh add-key backupmanager "<clef publique>"

DANGER: sécurité à vérifier

sudo setfacl -m u:backupmanager:rX /home/yunohost.*
sudo setfacl -d -m u:backupmanager:rX /home/yunohost.*

Références

• How to correctly proxy jump with SSH - Stack Overflow
• set up a ssh tunnel only user for ssh proxy jump
• 🛠️ SSH et la ligne de commande | Yunohost
• Sécurité | Yunohost
• Add a GNU/Linux standard user to ssh.main - Discuss / Advanced use case - YunoHost Forum
• Yunohost setup SSH key access only for user account · 🇬🇧 Andrea Bortolotti | Bortox 🇪🇺
• yunohost-Sauvegarder son serveur et ses apps - YannStatic