2 requests Id like to be in opnsense

[Dzioobasek]

1. local on server backup on demand or/and save file on client when accessed via web browser. I dont like google drive option its too complicated for noob like myself. As i was using ipfire there were nice backup options.
2. Visited websites by local IPs filter, so i could know whos bored at work :)

[Ciprian]

1. If I didn't misunderstand, there is exactly that: in [System: Configuration: Backups] You have "Download Configuration, and you have "Restore Configuration". Isn't this what you are looking for, a simple way to bkp && rstr your config (files)?

2. I don't use Web Proxy, isn't it able to do exactly that?

[Dzioobasek]

so #1 seems to be solved :P if i download this config today and will try to restore it in lets say 18.2 version, will that work?

as for 2 im not using proxy now, I would like to know if its possible to track web activity without proxy

[mimugmail]

There will be a SCP Backup in some time, it's in devel ...

[fabian]

so #1 seems to be solved :P if i download this config today and will try to restore it in lets say 18.2 version, will that work?

SCP and SFTP work great for configuration backups.

as for 2 im not using proxy now, I would like to know if its possible to track web activity without proxy

If you do not care about hostnames, you can enable the log option in your pass rule so you will get the target IP addresses and the source IP addresses. It should allow at least to count requests per user.

[Ciprian]

so #1 seems to be solved :P if i download this config today and will try to restore it in lets say 18.2 version, will that work?

Yes!
Still, as a best practice approach, I would suggest to do a backup and restore after each incremental update (eg. from 18.1.1 to 18.1.2) and without exception for major upgrades (eg. from 17.7 to 18.1). As a general rule, a backup must be tested, and OPNsense's backups are not an exception.

as for 2 im not using proxy now, I would like to know if its possible to track web activity without proxy

Yes!
Go to [Reporting:Insight], select your LAN interface, and from the right pie-chart (the one with traffic distribution over IP Addresses) click on a particular internal IP/ client and you will be served with details regarding all destinations that IP had traffic to, and the amount of traffic to each of the destinations. (See the two attachments).
You don't need to activate logs for fw rules just for that matter.