pbs pull

[TErxleben]

I would like to duplicate a pbs offsite via pull.
To do this, I have to expose the basic pbs to be secured to the Internet via port 8007. Correct? Can I somehow elegantly limit which API functions are available via port 8007?

 

[weehooey-bh]

I would like to duplicate a pbs offsite via pull.
To do this, I have to expose the basic pbs to be secured to the Internet via port 8007. Correct? Can I somehow elegantly limit which API functions are available via port 8007?

Yes, the remote PBS needs to access port 8007. It would be a good idea to only allow traffic to port 8007 from the IP address where you have the remote PBS.

You cannot limit what API functions are available via port 8007, but you can limit what the API token can do.

I usually create a user only for API access and then hang all the API tokens on it. Both the API user and API token only get the bare minimum privileges required to pull to the remote site.