Gestionar las claves de acceso en un entorno profesional suele ser un auténtico quebradero de cabeza. A pesar de que todos sabemos que la seguridad es vital, es tristemente común encontrar archivos llamados «passwords.txt» olvidados en carpetas compartidas o, peor aún, hojas de Excel que cualquiera puede abrir. Para poner orden en este caos, I-Passbolt ivela njengenye indlela eqinile futhi yakhelwe ngqo labo abangafuni ukushiya izimfihlo zabo ngengozi.
Ngokungafani namanye amathuluzi, lo mphathi wephasiwedi ovulekile wadalwa eYurophu ngamathimba obuchwepheshe kanye nezinhlangano ezithatha ukuphepha kwe-inthanethi ngokungathi sína engqondweni. Akuyona nje indawo yokugcina okhiye, kodwa futhi ipulatifomu yokubambisana esekelwe ku-OpenPGPLokhu kuqinisekisa ukuthi iseva ayikaze ibe nokufinyelela okhiye abacacile, okunikeza ukubethela kwangempela nokungahlolwa kusukela ekuqaleni kuya ekugcineni.
Yini eyenza iPassbolt ibe ukukhetha okuhle kwamaqembu?
I-Passbolt ayihloselwe umsebenzisi ngamunye ofuna nje ukugcina iphasiwedi yakhe ye-Netflix, kodwa kunalokho igxile ku- ukubambisana okuphephile phakathi kwamaqembu omsebenziIkuvumela ukuthi wabelane ngeziqinisekiso ze-router, ukufinyelela kwenethiwekhi ye-Wi-Fi yehhovisi, noma ukungena ngemvume ezinkundleni zokuxhumana zezinkampani ngaphandle kokuzithumela ngeziteshi ezingaphephile njengengxoxo noma i-imeyili. Ukwakheka kwayo kuqinisekisa ukuphepha okuqinile, okunamathela ku- ukuhlolwa kokungena okuqhubekayo ukugwema ubuthakathaka.
Ngaphezu kwalokho, amakhono ayo okuhlanganisa ayamangalisa, avumela ukuthi ixhumane namathuluzi afana ne-Remote Desktop Manager, okwenza kube lula ngabaphathi besistimu ukubuka iziqondisi zabo zamaphasiwedi kalula. umthombo ovulekile futhi okwazi ukuzisingathaIzinkampani zigcina ukulawula okugcwele kwedatha yazo, zigwema ukuncika kumasevisi efu lapho kungaziwa khona ukuthi ubani ngempela olawula iseva.
Umhlahlandlela onemininingwane wokufaka kuseva ye-Linux (Debian/Ubuntu)
Ukuze usethe i-Passbolt endaweni yasendaweni nge-Debian noma i-Ubuntu, isinyathelo sokuqala ukulungiselela uhlelo. Lokhu kubalulekile. buyekeza wonke amaphakheji futhi ulayishe ukuncika okuyisisekelo kwesistimu ukuze ugweme izingxabano ngesikhathi sokufakwa.
1. Ukulungiswa kwemvelo kanye nezinsizakalo eziyisisekelo
Isinyathelo sokuqala ukufaka nokulungisa iseva yewebhu ye-Nginx kanye nomphathi wedathabheyisi ye-MariaDB. Ngemva kokufaka i-Nginx, kufanele vikela i-instance ye-MariaDB Iskripthi sokuphepha sibe sesisetshenziswa ukususa abasebenzisi abangaziwa kanye nezizindalwazi zokuhlola. Ngemva kwalokho, kudalwa isizindalwazi esithile kanye nomsebenzisi onezimvume ezilinganiselwe, okuzosetshenziswa uhlelo lokusebenza ukusebenza.
Ngokuphathelene nolimi lokuhlela, i-Passbolt idinga I-PHP 8.2 kanye namamojula ayo Lokhu kuyadingeka ukuze ukubethela kusebenze kanye nokuxhumeka kwedatha kusebenze. Kubalulekile ukuqinisekisa ukuthi inguqulo efakiwe ilungile ngaphambi kokuqhubekela esinyathelweni esilandelayo.
2. Ukufakwa kwe-Passbolt kanye nokucushwa kokuqala
Ukuze ufake uhlelo lokusebenza, kungcono ukusebenzisa Indawo yokugcina esemthethweni ye-PassboltLokhu kufezwa ngokulanda iskripthi sokucushwa kusuka endaweni yokugcina, ukuqinisekisa ubuqotho baso kusetshenziswa i-SHA512 checksum ukugwema amafayela onakele noma anonya, nokusebenzisa ukufakwa kwephakheji. passbolt-ce-server.
Uma isofthiwe isifakiwe, iwizadi yokusetha esebenzisanayoLe nqubo ibalulekile futhi izocela idatha efana ne-URL yeseva, iziqinisekiso zedathabheyisi ezidalwe ngaphambilini, kanye nokucushwa kweseva ye-SMTP. I-imeyili ibalulekileNjengoba iPassbolt iyisebenzisela ukuphatha izimemo nezaziso, ungakhetha iseva yendawo efana nePostfix noma izinsizakalo zangaphandle ezifana neGmail noma i-SendGrid.
3. Okhiye Bokuphepha, i-SSL kanye ne-GPG
Ukuze ukufakwa kusebenze kahle ekukhiqizweni, ukumisa i-HTTPS kuyimpoqo. Kunconywa ukuthi kusetshenziswe I-Certbot izothola izitifiketi ze-SSL zamahhala de Let’s Encrypt y programar su renovación automática. Sin cifrado SSL, los datos viajarían en texto plano por la red, anulando gran parte de la seguridad del sistema.
Iphuzu elibalulekile lobuchwepheshe yi- ukukhiqiza ukhiye we-GPG wesevaLesi sikhiye sivumela i-Passbolt API ukuthi iqinisekise kahle. Kubalulekile ukukhiqiza lesi sikhiye ngaphandle kwe-password, njengoba i-PHP module esetshenzisiwe ingasisekeli kulesi sinyathelo esithile.
Enye indlela esheshayo: Ukuthunyelwa kusetshenziswa i-Docker
Kulabo abakhetha ukungabhekani nokufaka izinto ezixhomeke ngesandla, i-Passbolt ingasethwa ngemizuzu embalwa besebenzisa I-Docker UkubhalaLe ndlela ilungele ukuhlola izindawo noma kulabo asebevele bephethe izinsizakalo zabo ezitsheni.
Kusetshenziswa ifayela le-YAML, kuchazwa izinsizakalo ezimbili: eyodwa yesizindalwazi se-MariaDB kanye nenye yesicelo se-Passbolt. Lokhu kubalulekile. Shintsha wonke amaphasiwedi azenzakalelayo bese ulungisa i-URL eyisisekelo ngaphambi kokuqalisa isitsha. Le ndlela yenza kube lula kakhulu ukwenza amakhophi agciniwe kanye nokufuduka phakathi kwamaseva, njengoba yonke indawo ihlanganiswe ezithombeni ezijwayelekile.
Ikhithi Yokucushwa Komsebenzisi Nokutakula
Ngemva kokuqeda ingxenye yobuchwepheshe, umphathi kumele adale i-akhawunti yakhe yokuqala. Kuleli qophelo, isiphequluli sizocela Ukufakwa kwesandiso sesiphequluli se-Passbolt, okuyithuluzi langempela lapho kwenzeka khona ukubethela nokususa ukubethela kwezinkinobho.
Isinyathelo esibaluleke kakhulu kuyo yonke inqubo yilesi ukulanda ikhithi yokutakulaUma usebenzisa ukubethela kusukela ekuqaleni kuya ekugcineni, uma ukufinyelela kukhiye oyimfihlo kulahleka noma iphasiwedi yomsebenzisi ikhohliwe, ayikho indlela yokubuyisa idatha. Gcina le khithi endaweni ephephile. Yisiqinisekiso kuphela sokungalahlekelwa yiwo wonke amaphasiwedi agciniwe uma kwenzeka ukwehluleka kwehadiwe noma ukulahleka kwesiphequluli.
Ekugcineni, ithokheni yokuphepha eyenziwe ngokwezifiso (umbala owodwa nezinhlamvu ezintathu) okusebenza njengesinyathelo sokulwa nobugebengu bokweba imininingwane ebucayi, okuphoqa umsebenzisi ukuthi angene kukho ngaphambi kokwenza noma yisiphi isenzo esibucayi ngaphakathi kwepulatifomu.
Sinethuluzi elinamandla kakhulu elikuvumela ukuthi uhlanganise ukuphepha kwenkampani ndawonye ngaphandle kokunikeza ubumfihlo kubantu besithathu. Kungakhathaliseki ukuthi ngokufakwa okuphelele kwe-Debian noma ngobuchule be-Docker, isihluthulelo ukubeka phambili ukuzibamba kanye nokubethela kwe-OpenPGP ukuvimbela iziqinisekiso zenkampani ukuthi zingagcini zisezandleni ezingafanele ngenxa yokuphathwa kabi noma ukwephulwa kokuphepha kwamafu.
