Docker container for nut server?
-
Is there a docker image for NUT Server including web dashboard(important)?
-
NUT is built in.
-
@elvisimprsntr I think i need to explain what i am asking for. I am fully aware if your netgate router is attached to an UPS you can configure netgate. Let us say you 5 UPS's in your home and you want nut server to read all the UPS's and show me a dasboard about the status of all the UPS's ? - Is there a ready made docker container for client server nut with dashboard functionality? something like this
-
@netboy said in Docker container for nut server?:
Let us say you 5 UPS's in your home and you want nut server to read all the UPS's and show me a dasboard about the status of all the UPS's ? - Is there a ready made docker container for client server nut with dashboard functionality?
No, and I believe most people would say that the type of thing you are asking for isn't something you want to run on your firewall. I recommend using a general purpose operating system behind the firewall instead.
-
@dennypage said in Docker container for nut server?:
something you want to run on your firewall
Can you please explaing this? The server is a isolated nut server whose ports are not exposed (becuase this runs on cloudflare tunnel if exposed by public domain and has access control from cloudflare) and this gathers the clients info and shows it in a dashboard. Kindly explain me how this is bad? I am not doubting your remarks (you "helped" me in this setup before) and fully aware you are the author of the nut sevices in netgate routers and "very knowlegeable" in nut and everthing nut related
-
@netboy https://github.com/DartSteven/Nutify
this is a good project to work with....of course as you've been suggested nothing to run on your pfsense machine but on a separate one. -
@netboy said in Docker container for nut server?:
@dennypage said in Docker container for nut server?:
something you want to run on your firewall
Can you please explaing this?
Basic security principles. Any additional services that you add to a system increases the available attack surface of that system. And the more critical the system is (cost of failure or compromise), the more important it is to minimize the attack surface.
Your firewall is a pretty critical system, and you want to avoid running random services on it unless necessary. Sometimes it is necessary due to the unique position of the firewall in the network, but you really want to avoid using the firewall as a general purpose server.
-
@latimeria I tried Nutify but it is rigth now works only with one physically "attached" UPS
-
@dennypage said in Docker container for nut server?:
Basic security principles. Any additional services that you add to a system increases the available attack surface of that system. And the more critical the system is (cost of failure or compromise), the more important it is to minimize the attack surface.
This is very general comment. Tell me clearly why it is security risk. I have 2 VLAN's 192.168.x.x and 172.16.x.x - Firewall rules prevent IoT (172.16.0.x.x) from talking to 192.168.x.x (secured network) - My nut server is in 192.168.x.x and all my clients of nut are in 192.x.x.x and "if I want to expose them to public" with subdomain like ups.mydomain.com i use "cloudflare tunnel" where it communicates directly with "cloudflared" in docker container in my nas and hence NO PORTS are open in the router. Why do you think this setup is a security risk? I really like to get your opinion!
-
@netboy said in Docker container for nut server?:
I tried Nutify but it is rigth now works only with one physically "attached" UPS
After further examination, I would not recommend use of Nutify. It's implemented as a stand-alone NUT controller for systems that not have NUT installed. It requires complete control of NUT, which is not desirable (at all). Much better to have used and external upsc command to get the information. Or even the NUT client protocol itself.
-
@netboy said in Docker container for nut server?:
This is very general comment. Tell me clearly why it is security risk.
Yes, it is a general comment about how you should approach security of a system like a firewall. If you are responsible for administrating a firewall, general security concepts are something worth reading up on. Alternatively, you can trust that there is a good reason that the people who do this for a living (Netgate) do not provide docker, or many other, services on pfSense. It isn't because they are lazy I assure you.
No, I can' give you a specific vector. That isn't the point.
-
@dennypage I am NOT installing docker in pfsense - offcourse this is a big security risk - I agree !!! I am installing a docker container in a seperate server in my network not in pfsense - Now tell me if this is a security risk
-
@netboy said in Docker container for nut server?:
I am NOT installing docker in pfsense - offcourse this is a big security risk - I agree !!!
My apologies. I interpreted your earlier question
I think i need to explain what i am asking for. I am fully aware if your netgate router is attached to an UPS you can configure netgate. Let us say you 5 UPS's in your home and you want nut server to read all the UPS's and show me a dasboard about the status of all the UPS's ? - Is there a ready made docker container for client server nut with dashboard functionality?
as a request to have something running on pfSense, which is why I responded
I believe most people would say that the type of thing you are asking for isn't something you want to run on your firewall. I recommend using a general purpose operating system behind the firewall instead.
Mutual misunderstanding I guess.
If you want to explore general NUT monitoring, and not something particular to pfSense, I would recommend the NUT Users list as a better place to seek information.
-
@dennypage I managed to create a docker container with some "custom" programming to work! here are some screen shots:
-
@netboy do you have this docker available - this is actually pretty slick.
I didn't think about monitoring the one connected to my nas.. It monitors it for shutdown of the nas, but it be nice to see such info off of it. I have one behind my tv I monitor with pi I have connected, that is my ntp server as well. I keep meaning to put another pi I have for the one in my av cab to monitor that one - just haven't gotten around to it.
I have 4 total in the house of the cyberpower ones.. Be nice to throw them all into 1 place to monitor.. One I monitor on my pc, with misc network gear plugged into that, one my nas monitors for its own use, pretty sure the pfsense is on that ups along with my APs I think - but didn't think of turning on its server function and point pfsense to it.
You have inspired me to to a better job of monitoring mine.. Mine are all cyber power 1500s, would have to double check models but I know at least 2 of them are the cCP1500PFCLCD
I think your docker would be perfect for my use as well.
-
@netboy Cool
-
Well I got my synology to be monitored. But not having any luck getting win-nut working on my windows machine.. I found a later version that suppose to work 2.8.4, and it finds my ups via nut-scanner.. But can't seem to get it to run, says no listening interface, etc. etc..
I think just going to throw some money at it, I can get the personal panel version to show up in cloud, so just going to their cloud card, found on amazon for 68$
Their cloud interface is not horrible - and the cost is like 10$ a year for lic per ups, and if you buy a card you can get 3 year lic for 1 card.. The only unit I have that doesn't support the cloud card is the one behind my tv. But that is one I have linux working on, and can use cyberpowers software vs nut to connect it to the cloud.
found a slick little docker, @netboy looks a bit more what I would like.. But - just going throw some money at vs dicking with the windows machine and nut. And just put them all up on the cloud.
