FiberGlass is a fork of Chris Miles' ([email protected]) Glass web UI for ISC DHCP. FiberGlass includes some additonal features like user authentication, user group authorization, additional configuration options, and more.

Features

See the original README for a full list of the original features of Glass.

FiberGlass adds the following features:

• User authentication (Passport.js and local SQLite): users must log in to use the app -- Note: this replaces the original Glass auth system
• RBAC: give users different levels of access based on groups
• Allow editing of more than one config file: for example, if you've broken out your IPv4 and IPv6 DHCP config files and are using them as includes in your main dhcp.conf
• Adds ability to control more settings through the admin UI in the application
• Minor style and theme changes

Installation

Only Debian-based distros are currently supported/tested/used. FiberGlass may work on other distros, but we have not tried and the instructions here only cover Debian-based systems.

NOTE: some of these instructions are copied from the original README.

Install NodeJS (If not installed)

FiberGlass runs on the following Node.js major versions:

• lts/dubnium -> v10.24.1
• lts/erbium -> v12.22.12
• lts/fermium -> v14.20.1
• lts/gallium -> v16.18.0

NOTE: Node.js v18 and later may work, but have not yet been tested.

Node.js v8 and earlier are no longer supported.

To install on Debian and Debian based distros, follow the instructions from nodesource, here.

Install isc-dhcp-server

Make sure the DHCP server is installed

apt install isc-dhcp-server

Install sqlite3 (optional)

You may want to install sqlite3 on the system to have a way of managing the user and session SQLite databases outside the application.

apt install sqlite3

Install FiberGlass (as root)

cd /opt
git clone https://github.com/mathewbishop/fiberglass.git
cd fiberglass
mkdir logs
chmod u+x ./bin/ -R
chmod u+x *.sh

sudo npm install
sudo npm install forever -g

Create the .env file and session secret

• Create a file named .env at the root of this directory (the application directory)
• add the following entry in the file SESSION_COOKIE_SECRET=
• add a session cookie secret after the equals sign; it can/should be any randomly generated long string, 20 or more characters recommended.

Create your glass_config.json file

glass_config.json is used to persist app settings and application config changes you make through the admin UI

Inside the config directory is a file named glass_config.example.json with a default config. Copy this file and rename it to glass_config.json for use in the app.

cp config/glass_config.example.json config/glass_config.json

Start the app

sudo npm start

• For Debian this is all that is needed and FiberGlass should start immediately, you can browse via http://server-ip:3000
• For Ubuntu users (or any system running Apparmor) - you will have additional Apparmor config to add
• Recommended to iptables port 3000 to close off FiberGlass if you are facing the public on your server
• Recommended to keep FiberGlass up through reboots, see Glass Process Keepalive or create a systemd service for FiberGlass. NOTE: if you use the Glass Process Keepalive method, replace the /opt/glass-isc-dhcp directory with /opt/fiberglass, or whatever you've named the application directory.

Apparmor

• Ubuntu uses AppArmor by default - you will most likely run into file access issues without exemptions

sed -i '/\/etc\/dhcp\/\*\*/a\ \ \/var\/lib\/dhcp\/\*\* lrw,' /etc/apparmor.d/usr.sbin.dhcpd
sed -i '/\/etc\/dhcp\/\*\*/a\ \ \/opt\/fiberglass\/\*\* lrw,' /etc/apparmor.d/usr.sbin.dhcpd
service apparmor restart

Glass Configuration

• Glass configuration is stored in ./config/glass_config.json
• All of these settings can be edited in both Glass Settings and Glass Alerts within the Web Interface, if you have custom file locations you will need to edit this config file before starting

Attribution/Credit

Scott Human

GitHub: https://github.com/ekko919

This project was Scott's idea and vision.

Chris Miles' ([email protected])

Author of original glass-isc-dhcp

AdminBSB UI

AdminBSB UI

Jared Hanson ([email protected], http://jaredhanson.net)

https://github.com/passport/todos-express-password -- example of implementing passport.js local auth with SQLite

https://www.passportjs.org/tutorials/password/ -- tutorial for implementing passport.js local auth with SQLite