A simple instruction for security researchers.
|1 year ago|
|frontend||3 years ago|
|nginx||3 years ago|
|redis||6 years ago|
|search-driver||3 years ago|
|webrecorder||3 years ago|
|.gitignore||3 years ago|
|.gitmodules||6 years ago|
|.travis.yml||3 years ago|
|LICENSE||8 years ago|
|NOTICE||3 years ago|
|README.md||3 years ago|
|SECURITY.md||1 year ago|
|appveyor.yml||3 years ago|
|docker-compose.yml||2 years ago|
|init-default.sh||4 years ago|
|install-browsers.sh||3 years ago|
|migrating-4.0.md||3 years ago|
|recreate.sh||5 years ago|
Collect and revisit web pages.
Conifer provides an integrated platform for creating high-fidelity, ISO-compliant web archives in a user-friendly interface, providing access to archived content, and sharing collections.
This repository represents the hosted service running at https://conifer.rhizome.org/, which can also be deployed locally using Docker
This README refers to the 5.x version of Conifer, released in June, 2020. This release includes a new UI and the renaming of Webrecorder.io to Conifer. Other parts of the open source efforts remain at the Webrecorder Project. For more info about this momentous change, read our announcement blog post.
The previous UI is available on the legacy branch.
Frequently asked questions
If you have any questions about how to use Conifer, please see our User Guide.
If you have a question about your account on the hosted service (conifer.rhizome.org), please contact us via email at email@example.com
If you have a previous Conifer installation (version 3.x), see Migration Info for instructions on how to migrate to the latest version.
Using the Conifer Platform
Conifer and related tools are designed to make web archiving more portable and decentralized, as well as to serve users and developers with a broad range of skill levels and requirements. Here are a few ways that Conifer can be used (starting with what probably requires the least technical expertise).
1. Hosted Service
Using our hosted version of Conifer at https://conifer.rhizome.org/, users can sign up for a free account and create their own personal collections of web archives. Captures web content will be available online, either publicly or only privately, under each user account, and can be downloaded by the account owner at any time. Downloaded web archives are available as WARC files. (WARC is the ISO standard file format for web archives.) The hosted service can also be used anonymously and the captured content can be downloaded at the end of a temporary session.
2. Offline Capture and Browsing
The Webrecorder Project is a closely aligned effort that offers OSX/Windows/Linux Electron applications:
- Webrecorder Player browse WARCs created by Webrecorder (and other web archiving tools) locally on the desktop.
- Webrecorder Desktop a desktop version of the hosted Webrecorder service providing both capture and replay features.
3. Preconfigured Deployment
To deploy the full version of Conifer with Ansible on a Linux machine, the Conifer Deploy workbook can be used to install this repository, configure nginx and other dependencies, such as SSL (via Lets Encrypt). The workbook is used for the https://conifer.rhizome.org deployment.
4. Full Conifer Local Deployment
The Conifer system in this repository can be deployed directly by following the instructions below. Conifer runs entirely in Docker and also requires Docker Compose.
5. Standalone Python Wayback (pywb) Deployment
Finally, for users interested in the core "replay system" and very basic recording capabilities, deploying pywb could also make sense. Conifer is built on top of pywb (Python Wayback/Python Web Archive Toolkit), and the core recording and replay functionality is provided by pywb as a standalone Python library. pywb comes with a Docker image as well.
pywb can be used to deploy your own web archive access service. See the full pywb reference manual for further information on using and deploying pywb.
Conifer can be run on any system that has Docker and Docker Compose installed. To install manually, clone
git clone https://github.com/rhizome-conifer/conifer
cd conifer; bash init-default.sh.
docker-compose up -d
init-default.sh is a convenience script that copies wr_sample.env →
wr.env and creates keys for session encryption.)
Point your browser to
http://localhost:8089/ to access the locally running Conifer instance.
(Note: you may see a maintenance message briefly while Conifer is starting up. Refresh the page after a few seconds to see the Conifer home page).
Installing Remote Browsers
Remote Browsers are standard browsers like Google Chrome and Mozilla Firefox, encapsulated in Docker containers. This feature allows Conifer to directly use fixed versions of browsers for capturing and accessing web archives, with a more direct connection to the live web and web archives. Remote browsers in many cases can improve the quality of web archives during capture and access. They can be "remote controlled" by users and are launched as needed, and use the same amount of computing and memory resources as they would when just running as regular desktop apps.
Remote Browsers are optional, and can be installed as needed.
Remote Browsers are just Docker images which start with
oldweb-today/, and are part of
oldweb-today organization on GitHub.
Installing the browsers can be as simple as running
docker pull on each browser image each as well as
additional Docker images for the Remote Desktop system.
To install the Remote Desktop System and all of the officially supported Remote Browsers, run install-browsers.sh
Conifer reads its configuration from two files:
wr.env, and less-commonly changed system settings in
wr.env file contains numerous deployment-specific customization options. In particular, the following options may be useful:
By default, Conifer assumes its running on localhost or a single domain, but on different ports for application (the Conifer user interface) and content (material rendered from web archives). This is a security feature preventing archived web sites accessing and possibly changing Conifer's user interface, and other unwanted interactions.
To run Conifer on different domains, the
CONTENT_HOST environment variables should be set.
For best results, the two domains should be two subdomains, both with https enabled.
SCHEME env var should also be set to
SCHEME=https when deploying via https.
By default Conifer disallows anonymous recording. To enable this feature, set ANON_DISABLED=false to the wr.env file and restart.
Note: Previously the default setting was anonymous recording enabled (
Conifer uses the
./data/ directory for local storage, or an external backend, currently supporting S3.
DEFAULT_STORAGE option in
wr.env configures storage options, which can be
Conifer uses a temporary storage directory for data while it is actively being captured, and temporary collections. Data is moved into the 'permanent' storage when the capturing process is completed or a temporary collection is imported into a user account.
The temporary storage directory is:
The permanent storage directory is either
STORAGE_DIR=./data/storage or local storage.
When using s3, the value of
STORAGE_DIR is ignored and data gets placed into
S3_ROOT which is an
s3:// bucket URL.
Additional s3 auth environment settings must also be set in
wr.env or externally.
All data related to Conifer that is not web archive data (WARC and CDXJ) is stored in the Redis instance, which persists data to
./data/dump.rdb. (See Conifer Architecture below.)
Conifer can send confirmation and password recovery emails. By default, a local SMTP server is run in Docker, but can be configured to use a remote server by changing the environment variables
The react frontend includes a number of additional options useful for debugging. Setting
NODE_ENV=development will switch react to development mode with hot reloading on port 8096.
Additional frontend configuration can be found in frontend/src/config.js
admin.py provides easy low level management of users. Adding, modifying, or removing users can be done via the command line.
To interactively create a user:
docker exec -it app python -m webrecorder.admin -c
or programmatically add users by supplying the appropriate positional values:
docker exec -it app python -m webrecorder.admin \ -c <email> <username> <passwd> <role> '<full name>'
-mmodify a user
-ddelete a user
-icreate and send a new invite
-llist invited users
-bsend backlogged invites
docker exec -it app python -m webrecorder.admin --help for full details.
When making changes to the Conifer backend app, running
docker-compose kill app; docker-compose up -d app
will stop and restart the container.
To integrate changes to the frontend app, either set
NODE_ENV=development and utilize hot reloading. If you're running production (
docker-compose kill frontend; docker-compose up -d frontend
To fully recreate Conifer, deleting old containers (but not the data!) use the
This repository contains the Docker Compose setup for Conifer, and is the exact system deployed on https://conifer.rhizome.org. The full setup consists of the following components:
/app- The Conifer backend system includes the API, recording and WARC access layers, split into 3 containers:
app-- The API and data model and rewriting system are found in this container.
recorder-- The WARC writer is found in this container.
warcserver-- The WARC loading and lookup is found in this container.
The backend containers run different tools from pywb, the core web archive replay toolkit library.
/frontend- A React-based frontend application, running in Node.js. The frontend is a modern interface for Conifer and uses the backend api. All user access goes through frontend (after nginx).
/nginx- A custom nginx deployment to provide routing and caching.
redis- A Redis instance that stores all of the Conifer state (other than WARC and CDXJ).
dat-share- An experimental component for sharing collections via the Dat protocol
shepherd- An instance of OldWebToday Browser Shepherd for managing remote browsers.
mailserver- A simple SMTP mail server for sending user account management mail
behaviors- Custom automation behaviors
browsertrix- Automated crawling system
Conifer is built using both Python (for backend) and Node.js (for frontend) using a variety of Python and Node open source libraries.
Conifer relies on a few separate repositories in this organization:
The remote browser system uses https://github.com/oldweb-today/ repositories, including:
Conifer is a project of Rhizome, made possible with generous past support from the Andrew W. Mellon Foundation.
For more info on using Conifer, you can consult our user guide at: https://guide.conifer.rhizome.org
For any general questions/concerns regarding the project or https://conifer.rhizome.org you can:
Open issues on GitHub
Tweet to us at https://twitter.com/rhizomeconifer
Contact us at firstname.lastname@example.org
Conifer is Licensed under the Apache 2.0 License. See NOTICE and LICENSE for details.