website • docs • community • demo

Welcome to Rdiffweb

Rdiffweb is a web application that allows you to view repositories generated by rdiff-backup. The purpose of this application is to ease the management of backups and quickly restore your data with a rich and powerful web interface.

Rdiffweb is written in Python and is released as open source project under the GNU GENERAL PUBLIC LICENSE (GPL). All source code and documentation are Copyright Rdiffweb contributors.

Rdiffweb is actively developed by IKUS Soft since November 2014.

The Rdiffweb source code is hosted on Gitlab and mirrored to Github.

The Rdiffweb website is https://rdiffweb.org/.

Features

With its rich web interface Rdiffweb provide a notable list of features:

Browse your backup
Restore single file or multiple files as an archived
Users authentication via local database and LDAP
Users authorization
Email notification when backup is not successful
Configurable repository encoding
Configurable retention period
Backup statistics visualization using graphs
SSH Keys management
Disk quota visualization
File and folder deletion

Demo

If you quickly want to check how Rdiffweb is behaving, you may try our demo server hosted on:

https://rdiffweb-demo.ikus-soft.com/

Use the following credential to login:

Username: admin
Password: admin123

Installation & Docker usage

For detailed installation steps, read the Installation documentation.

Current Build Status

Download

You should read the Documentation to properly install Rdiffweb in your environment.

Docker

docker pull ikus060/rdiffweb

Debian

apt install lsb-release
curl -L https://www.ikus-soft.com/archive/rdiffweb/public.key | gpg --dearmor > /usr/share/keyrings/rdiffweb-keyring.gpg
echo "deb [arch=amd64 signed-by=/usr/share/keyrings/rdiffweb-keyring.gpg] https://nexus.ikus-soft.com/repository/apt-release-$(lsb_release -sc)/ $(lsb_release -sc) main" > /etc/apt/sources.list.d/rdiffweb.list
apt update
apt install rdiffweb

Pypi

pip install rdiffweb

Newsletter

Subscribing to our newsletter is an effective way to stay up-to-date on the latest news about Rdiffweb. By signing up for, you will receive regular updates and notifications about new features, updates, and releases related to Rdiffweb.

Rdiffweb Newsletter.

Google Group

Join our growing community to get answers to your technical questions.

Rdiffweb users should use the Rdiffweb Google Group.

Documentation

Want to know more about Rdiffweb and learn it thoroughly? Read our complete documentation.

Rdiffweb Documentation.

Bug Reports

Bug reports should be reported on the Rdiffweb Gitlab at https://gitlab.com/ikus-soft/rdiffweb/-/issues

Professional support

Professional support for Rdiffweb is available by contacting IKUS Soft.

Support Us Through Github Sponsorship

We are passionate about developing and maintaining this open-source project to make it better with each update. Your support can help us continue our efforts and enhance the project for the entire community. By becoming a Github Sponsor, you directly contribute to the project's sustainability and growth.

Becoming a Sponsor

Changelog

Remove Ubuntu Mantic

2.9.5 (2024-11-05)

Add support for Ubuntu Noble 24.04 LTS & Oracular 24.10 #317

2.9.4 (2024-10-24)

Complete french translation #315

2.9.3 (2024-08-02)

Provide default encoding value to support old database with NOT NULL contrains

2.9.2 (2024-07-03)

Use default language to send notification if user doesn't have a "Preferred Language" #306

2.9.1 (2024-06-11)

Add "Preferred Language" to Admin view to allow administrator to update the value
Improve DockerImage by removing cache files
Upgrade rdiff-backup to v2.2.6 in DockerFile

2.9.0 (2024-04-22)

Add API entry point to create and list access token
Add access token scope #298
Add user's quota to Rdiffweb API #299
Change Debian and Ubuntu version numbering
Drop support for Debian Buster

2.8.9 (2023-02-19)

Fix display of page settings for user with role "user"

2.8.8 (2023-01-08)

Fix usage of session-idle-timeout in config file #296

2.8.7 (2024-01-04)

Adjust the session idle and absolute timeouts to 10 and 30 minutes, respectively.
Fix date calculation when generating report in January #295

2.8.6 (2023-11-24)

Fix broken URL to https://ikus-soft.com
Fix "Remember me" check box to allow cliking on label to ease usability #293
Fix translation of backup status in email report #291
Adding German translation file - credit to Michael Nitzsche

2.8.5 (2023-10-10)

Fix reported version in Debian package #289
Add support for WTForms v3.1.0
Add last backup date to email notification

2.8.4 (2023-09-29)

Add ratelimit to Access Token, SSH Keys and User creation CVE-2023-5289

2.8.3 (2023-08-22)

Drop support of Ubuntu Kinetic

2.8.2 (2023-08-22)

Add Ubuntu Mantic Support
Use Multi-Step to build Docker image
Update layout of file statistics to display a single day
Stop sending notification for ignored days #284
Handle warning exit code 2 return by rdiff-backup version 2.2

2.8.1 (2023-08-01)

Pin version of selenium to v4.10

2.8.0 (2023-07-31)

Log detailed error message when restore command failed to help debugging
Update interface used to manage users to be more user friendly #237
Disable Disk Quota in users view when quota command is not configured #237
Hide LDAP label in users view when LDAP is not configured #237
Allow administrator to change user's reporting preferences
Add support for Ubuntu Lunar
Add support for SQLAlchemy v2.0 for forward compatibility
When reaching 100% disk usage, show quota in red to improve visibility
Send notification when user's quota reach 90% #46
Add ratelimit to "send me a status report" to avoid email flooding #272 - credit to Nehal Pillai
Fix creation of access token with expiration time #277
Allow user to disable notification for selected day of week #278
Add detailed file statistics to show created, modified and deleted files #103
Trim spaces on verification code to improve usability #279
Determine default username when user get redirected to login page #283
Sort repository by dates in administration view #282
Document how to configure fail2ban to improve server hardening
Document how to configure certbot for automatic SSL certificate generation
Update installation steps to include arch=amd64
Update french translation

2.7.1 (2023-04-27)

Fix encoding problem with older Outlook 2007 client #273

2.7.0 (2023-04-20)

Support Python 3.11
Provide a Monthly, Weekly or Daily repport for user #71
Fix MFA verification code email's subjet #270
Add translation for footer not in email layout
Send email to administrator when a new version is available #266
Improve automatic testing

2.6.1 (2023-03-22)

Refused to start if rdiff-backup executable is not found #267

2.6.0 (2023-03-15)

Review the application layout to use Fluid container to use all the space available on the screen
Rename status view to Dashboard
Display more useful data in Dashboard view: Backups per days, Oldest backup, Storage Usage, Average duration, Least Active, Most active
Fix deletion confirmation of repositories within subdirectory #250
Properly clean-up plain text email from HTML tags
Send notification for inactive backup based on statistics
Send notification using a new template following the web interface branding
Send notification to user when repository get added or removed
Send all notification to an optional "catch-all" email address configured using --email-catch-all option #258
Redistribute logos in PNG format for better compatibility
Disable error page logs for 4xx errors
Add username and IP address to logs only for HTTP Request
Fix LDAP integration to support non-list attributes - credit to Shane Robinson
Add support of multiple required-group for LDAP integration
Improve System Logs view to identify "User Activity", "Threats" and "User Login"
Fix display of "* minutes ago" #264
Add default-lang option to configure default language #263
Allow user to select a preferred language #263
Use user's preferred language when sending notifications #263

2.5.8 (2023-02-19)

Support Setuptools v66 for compatibility with Debian Bookworm
Fix execution of rdiffweb remove-older job to clean-up repository history #262

2.5.7 (2023-01-27)

Enforce SQLAlchemy version between 1.2 or 1.4

2.5.6 (2023-01-11)

Fixed display of Hamburger menu on mobiles (minarca#192)
Change wording for interupted backup

2.5.5 (2022-12-23)

Fix loading of Charts in Status page
Ensure Gmail and other mail client doesn't create hyperlink automatically for any nodification sent by Rdiffweb to avoid phishing - credit to Nehal Pillai
Sent email notification to user when a new SSH Key get added - credit to Nehal Pillai
Ratelimit "Resend code to my email" in Two-Factor Authentication view - credit to Nehal Pillai
Username are not case-insensitive - credits to raiders0786
Make sure that all ssh keys are unique, regardless of the user - credit to Nehal Pillai
Disable translation caching

Breaking changes:

Username with different cases (e.g.: admin vs Ammin) are not supported. If your database contains such username make sure to remove them before upgrading otherwise Rdiffweb will not start.

2.5.4 (2022-12-19)

Discard X-Forwarded-Host headers credit to Anishka Shukla
Create proper symbolic link of chartkick.js on Ubuntu Jammy to fix loading of Charts in web interface
Add CSRF verification on /logout credits to reza.duty

2.5.3 (2022-12-05)

Add support for WTForms v3 to support Debian Bookworm
Fix strange behavior in access token management #247

2.5.2 (2022-11-28)

Block repository access when user_root directory is empty or relative path CVE-2022-4314 credit to neverjunior
Replace admin password only when --admin-password option is provided #246
Invalidate browser cache for logo, headerlogo and favicon on restart #245

2.5.1 (2022-11-11)

Add support for Ubuntu Kinetic #240
Disable filesize for deleted files to improve page loading #241

2.5.0 (2022-11-09)

This next release focus on two-factor-authentication as a measure to increase security of user's account.

Store User's session information into database
Update ldap plugin to load additional attributes from LDAP server
Improve /status page error handling when session_statistics cannot be read
Add support for Ubuntu Jammy
Upgrade from Bootstrap v3 to v4 #204
Replace Fontello by Font-Awesome v4
Use CSS variables var() to customize themes using --branding-X options #239
Remove usage of Jquery.validate
Replace custom timsort by jquery DataTables #205
Add Active Session managements #203
- Active session should be visible in user's profiles
- Active session may be revoked by user
- Active session should be visible in administration view
- Action session may be revoke by administrator
- Show number of active users within the last 24 hours in dashboard
Handle migration of older Rdiffweb database by adding the missing repos.Encoding, repos.keepdays and users.role columns #185
Replace deprecated references of disutils.spawn.find_executable() by shutil.which() #208
Add two-factor authentication with email verification #201
Generate a new session on login and 2FA #220
Enforce permission on /etc/rdiffweb configuration folder
Enforce validation on fullname, username and email
Limit incorrect attempts to change the user's password to prevent brute force attacks #225 CVE-2022-3273 credit to Nehal Pillai
Enforce password policy new password cannot be set as new password CVE-2022-3376 credit to Nehal Pillai
Enforce better rate limit on login, mfa, password change and API CVE-2022-3439 CVE-2022-3456 credit to Nehal Pillai
Enforce 'Origin' validation CVE-2022-3457 credit to Nithissh12
Define idle and absolute session timeout with agressive default to protect usage on public computer CVE-2022-3327 credit to Nehal Pillai
Send email notification when enabling or disabling MFA CVE-2022-3363 credit to Nehal Pillai
Use Argon2id to store password hash #231
Fixed plugin priorities to ensure that jobs are scheduled at each startup #232
Revoke previous user's sessions on password change CVE-2022-3362 credit to Nehal Pillai

Breaking changes:

Drop Ubuntu Hirsute & Impish (End-of-life)
session-dir is deprecated and should be replace by rate-limit-dir. User's session are stored in database.
previous .css customization are not barkward compatible. Make usage of the --branding-X options.

Thanks to Nehal Pillai with whom I collaborate to improve the security of this project.