Forti Backup Manager

A web-based SSH backup solution for FortiGate devices. Automatically backup device configurations via SSH and store them locally with version history.

• Default account admin : admin

• Local address : http://localhost:5147/

• WARNING : Time within the app is UTC based

Features

• Multi-vendor support: FortiGate, Cisco IOS, MikroTik, and generic Linux devices
• Scheduled backups: Automatic daily backups at configurable times
• Manual backups: On-demand backup for any device
• Version history: Keep multiple backup versions per device
• User management: Admin and regular user roles
• Web interface: Clean, responsive dashboard
• Docker-based: Easy deployment and portability

Requirements

• Docker and Docker Compose
• Network connectivity from container to target devices
• SSH access to target devices (port 22 or custom)

Quick Start

Using Docker Hub

docker pull eykthirnyr/forti-backup-manager:latest
docker-compose up -d

Using Offline Package

docker load -i forti-backup-manager-v1.0.tar
docker-compose up -d

Build from Source

docker-compose build
docker-compose up -d

Access

• URL: http://localhost:5147
• Default Username: admin
• Default Password: admin

⚠️ Change the default password immediately after first login!

Network Requirements

SSH Connectivity

This application connects to network devices via SSH. Ensure the following:

1. SSH port must be open from the Docker container toward each target device
2. Firewall rules must allow outbound SSH (default port 22) from the Docker host
3. Target devices must have SSH enabled and accessible

Required Device Access

Each device you want to backup requires:

• SSH account with sufficient privileges to run backup/export commands
• For FortiGate: User with at least read access to configuration
• For Cisco: User with privilege level to run show running-config
• For MikroTik: User with policy permissions for /export

Port Configuration

Service	Port	Description
Web Interface	5147	Main application access
SSH (outbound)	22	Default SSH port to devices (configurable per device)

Docker Compose Example

version: '3.8'
services:
  forti-backup-manager:
    image: eykthirnyr/forti-backup-manager:latest
    container_name: forti-backup-manager
    ports:
      - "5147:5147"
    volumes:
      - ./data:/app/data
      - ./backups:/app/backups
    restart: unless-stopped

Directory Structure

/app
├── data/
│   └── db.json          # Database (users, devices, schedules)
└── backups/
    └── <device-name>/   # Backup files per device
        └── <timestamp>.cfg

Adding Devices

1. Login to the web interface
2. Navigate to Devices section
3. Click Add Device
4. Enter device details:
   • Name: Friendly device name
   • IP Address: Device management IP
   • Port: SSH port (default 22)
   • Username: SSH username with backup privileges
   • Password: SSH password

Scheduled Backups

1. Navigate to Schedule section
2. Enable scheduling for all devices
3. Set backup time (24-hour format)
4. Backups run automatically at specified time

User Roles

Role	Permissions
Admin	Full access: manage users, devices, backups, settings
User	View devices, run manual backups, view backup history

Troubleshooting

Cannot connect to device

• Verify SSH port is open: telnet 22
• Check credentials are correct
• Ensure SSH is enabled on target device
• Verify no firewall blocking container to device

Container not starting

docker logs forti-backup-manager

Reset admin password

Delete data/db.json and restart container. Default credentials will be recreated.

Security Recommendations

1. Change default admin password immediately
2. Use strong SSH passwords
3. Restrict network access to management interfaces
4. Run container on isolated management network
5. Regularly backup the data/ directory

Other Screenshots