1
1
<?xml version='1.0' encoding='UTF-8'?>
2
<?xml-stylesheet type="text/xsl"
3
href="http://docbook.sourceforge.net/release/xsl/current/manpages/docbook.xsl"?>
2
4
<!DOCTYPE refentry PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3
5
"http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4
6
<!ENTITY VERSION "1.0">
5
7
<!ENTITY CONFNAME "mandos.conf">
6
8
<!ENTITY CONFPATH "<filename>/etc/mandos/mandos.conf</filename>">
7
<!ENTITY OVERVIEW SYSTEM "overview.xml">
10
<refentry xmlns:xi="http://www.w3.org/2001/XInclude">
12
13
<title>&CONFNAME;</title>
13
<!-- NWalsh’s docbook scripts use this to generate the footer: -->
14
<!-- NWalsh's docbook scripts use this to generate the footer: -->
14
15
<productname>&CONFNAME;</productname>
15
16
<productnumber>&VERSION;</productnumber>
80
80
<refsect1 id="description">
81
81
<title>DESCRIPTION</title>
83
The file &CONFPATH; is a simple configuration file for
84
<citerefentry><refentrytitle>mandos</refentrytitle>
85
<manvolnum>8</manvolnum></citerefentry>, and is read by it at
86
startup. The configuration file starts with
87
<quote><literal>[DEFAULT]</literal></quote> on a line by itself,
88
followed by any number of
89
<quote><varname><replaceable>option</replaceable></varname>=<replaceable>value</replaceable></quote>
90
entries, with continuations in the style of RFC 822.
91
<quote><varname><replaceable>option</replaceable></varname>:
92
<replaceable>value</replaceable></quote> is also accepted. Note
93
that leading whitespace is removed from values. Lines beginning
94
with <quote>#</quote> or <quote>;</quote> are ignored and may be
95
used to provide comments.
100
<title>OPTIONS</title>
83
The file &CONFPATH; is a simple configuration file for mandos
84
and is looked on at startup of the service. The configuration
85
file must start with <literal>[server]</literal>. The format for
86
the rest is a simple VAR = VALUE pair. Values may not be empty.
104
<term><varname>interface</varname></term>
106
<synopsis><literal>interface = </literal><replaceable
109
<xi:include href="mandos-options.xml" xpointer="interface"/>
114
<term><varname>address</varname></term>
116
<synopsis><literal>address = </literal><replaceable
117
>ADDRESS</replaceable>
119
<xi:include href="mandos-options.xml" xpointer="address"/>
124
<term><varname>port</varname></term>
126
<synopsis><literal>port = </literal><replaceable
129
<xi:include href="mandos-options.xml" xpointer="port"/>
134
<term><varname>debug</varname></term>
136
<synopsis><literal>debug = </literal>{ <literal
137
>1</literal> | <literal>yes</literal> | <literal
138
>true</literal> | <literal>on</literal> | <literal
139
>0</literal> | <literal>no</literal> | <literal
140
>false</literal> | <literal>off</literal> }
142
<xi:include href="mandos-options.xml" xpointer="debug"/>
147
<term><varname>priority</varname></term>
149
<synopsis><literal>priority = </literal><replaceable
150
>PRIORITY</replaceable>
152
<xi:include href="mandos-options.xml" xpointer="priority"/>
157
<term><varname>servicename</varname></term>
159
<synopsis><literal>servicename = </literal><replaceable
162
<xi:include href="mandos-options.xml"
163
xpointer="servicename"/>
95
<term><literal>interface</literal></term>
98
This option allows you to override the default network
99
interfaces. By default mandos will not bind to any
100
specific interface but instead use default avahi-server
107
<term><literal>address</literal></term>
110
This option allows you to override the default network
111
address. By default mandos will not bind to any
112
specific address but instead use default avahi-server
119
<term><literal>port</literal></term>
122
This option allows you to override the default port to
123
listen on. By default mandos will not specify any specific
124
port and instead use a random port given by the OS from
125
the use of INADDR_ANY.
131
<term><literal>debug</literal></term>
134
This option allows you to modify debug mode with a true/false
135
boolean value. By default is debug set to <literal>false</literal>.
141
<term><literal>priority</literal></term>
144
This option allows you to override the default gnutls
145
priority that will be used in gnutls session. See
146
<citerefentry><refentrytitle>gnutls_priority_init
147
</refentrytitle><manvolnum>3</manvolnum></citerefentry>for
148
more information on gnutls priority strings.
154
<term><literal>servicename</literal></term>
157
This option allows you to override the default Zeroconf
158
service name use to announce mandos as a avahi service. By
159
default mandos will use "Mandos".
167
<refsect1 id="examples">
168
<title>EXAMPLES</title>
172
# A configuration example
177
priority = SECURE256:!CTYPE-X.509:+CTYPE-OPENPGP
170
183
<refsect1 id="files">
171
184
<title>FILES</title>
173
186
The file described here is &CONFPATH;
180
The <literal>[DEFAULT]</literal> is necessary because the Python
181
built-in module <systemitem class="library">ConfigParser</systemitem>
186
<refsect1 id="example">
187
<title>EXAMPLE</title>
190
No options are actually required:
198
An example using all the options:
202
# A configuration example
204
address = 2001:db8:f983:bd0b:30de:ae4a:71f2:f672
207
priority = SECURE256:!CTYPE-X.509:+CTYPE-OPENPGP
213
<refsect1 id="see_also">
214
<title>SEE ALSO</title>
217
<refentrytitle>mandos</refentrytitle>
218
<manvolnum>8</manvolnum></citerefentry>, <citerefentry>
219
<refentrytitle>mandos-clients.conf</refentrytitle>
220
<manvolnum>5</manvolnum></citerefentry>