1
1
<?xml version='1.0' encoding='UTF-8'?>
2
<?xml-stylesheet type="text/xsl"
3
href="http://docbook.sourceforge.net/release/xsl/current/manpages/docbook.xsl"?>
4
2
<!DOCTYPE refentry PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
5
3
"http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
6
4
<!ENTITY VERSION "1.0">
7
5
<!ENTITY CONFNAME "mandos.conf">
8
6
<!ENTITY CONFPATH "<filename>/etc/mandos/mandos.conf</filename>">
7
<!ENTITY OVERVIEW SYSTEM "overview.xml">
10
<refentry xmlns:xi="http://www.w3.org/2001/XInclude">
13
12
<title>&CONFNAME;</title>
14
<!-- NWalsh's docbook scripts use this to generate the footer: -->
13
<!-- NWalsh’s docbook scripts use this to generate the footer: -->
15
14
<productname>&CONFNAME;</productname>
16
15
<productnumber>&VERSION;</productnumber>
80
80
<refsect1 id="description">
81
81
<title>DESCRIPTION</title>
83
The file &CONFPATH; is a simple configuration file for mandos
84
and is looked on at startup of the service. The configuration
85
file must start with <literal>[server]</literal>. The format for
86
the rest is a simple VAR = VALUE pair. Values may not be empty.
83
The file &CONFPATH; is a simple configuration file for
84
<citerefentry><refentrytitle>mandos</refentrytitle>
85
<manvolnum>8</manvolnum></citerefentry>, and is read by it at
86
startup. The configuration file starts with
87
<quote><literal>[DEFAULT]</literal></quote> on a line by itself,
88
followed by any number of
89
<quote><varname><replaceable>option</replaceable></varname>=<replaceable>value</replaceable></quote>
90
entries, with continuations in the style of RFC 822.
91
<quote><varname><replaceable>option</replaceable></varname>:
92
<replaceable>value</replaceable></quote> is also accepted. Note
93
that leading whitespace is removed from values. Lines beginning
94
with <quote>#</quote> or <quote>;</quote> are ignored and may be
95
used to provide comments.
100
<title>OPTIONS</title>
95
<term><literal>interface</literal></term>
98
This option allows you to override the default network
99
interfaces. By default mandos will not bind to any
100
specific interface but instead use default avahi-server
107
<term><literal>address</literal></term>
110
This option allows you to override the default network
111
address. By default mandos will not bind to any
112
specific address but instead use default avahi-server
119
<term><literal>port</literal></term>
122
This option allows you to override the default port to
123
listen on. By default mandos will not specify any specific
124
port and instead use a random port given by the OS from
125
the use of INADDR_ANY.
131
<term><literal>debug</literal></term>
134
This option allows you to modify debug mode with a true/false
135
boolean value. By default is debug set to <literal>false</literal>.
141
<term><literal>priority</literal></term>
144
This option allows you to override the default gnutls
145
priority that will be used in gnutls session. See
146
<citerefentry><refentrytitle>gnutls_priority_init
147
</refentrytitle><manvolnum>3</manvolnum></citerefentry>for
148
more information on gnutls priority strings.
154
<term><literal>servicename</literal></term>
157
This option allows you to override the default Zeroconf
158
service name use to announce mandos as a avahi service. By
159
default mandos will use "Mandos".
104
<term><varname>interface</varname></term>
106
<synopsis><literal>interface = </literal><arg
107
choice="plain"><replaceable>IF</replaceable></arg>
109
<xi:include href="mandos-options.xml" xpointer="interface"/>
114
<term><varname>address</varname></term>
116
<synopsis><literal>address = </literal><arg
117
choice="plain"><replaceable>ADDRESS</replaceable></arg>
119
<xi:include href="mandos-options.xml" xpointer="address"/>
124
<term><varname>port</varname></term>
126
<synopsis><literal>port = </literal><arg
127
choice="plain"><replaceable>PORT</replaceable></arg>
129
<xi:include href="mandos-options.xml" xpointer="port"/>
134
<term><varname>debug</varname></term>
136
<synopsis><literal>debug =</literal><group choice="req">
137
<arg choice="plain">1</arg>
138
<arg choice="plain">yes</arg>
139
<arg choice="plain">true</arg>
140
<arg choice="plain">on</arg>
141
<arg choice="plain">0</arg>
142
<arg choice="plain">no</arg>
143
<arg choice="plain">false</arg>
144
<arg choice="plain">off</arg>
147
<xi:include href="mandos-options.xml" xpointer="debug"/>
152
<term><varname>priority</varname></term>
154
<synopsis><literal>priority = </literal><arg
155
choice="plain"><replaceable>PRIORITY</replaceable></arg>
157
<xi:include href="mandos-options.xml" xpointer="priority"/>
162
<term><varname>servicename</varname></term>
163
<synopsis><literal>servicename = </literal><arg
164
choice="plain"><replaceable>NAME</replaceable></arg>
167
<xi:include href="mandos-options.xml"
168
xpointer="servicename"/>
167
<refsect1 id="examples">
168
<title>EXAMPLES</title>
175
<refsect1 id="files">
178
The file described here is &CONFPATH;
185
The <literal>[DEFAULT]</literal> is necessary because the Python
186
module <systemitem class="library">ConfigParser</systemitem>
191
<refsect1 id="example">
192
<title>EXAMPLE</title>
169
193
<informalexample>
172
# A configuration example
177
priority = SECURE256:!CTYPE-X.509:+CTYPE-OPENPGP
196
# A configuration example
198
address = 2001:db8:f983:bd0b:30de:ae4a:71f2:f672
201
priority = SECURE256:!CTYPE-X.509:+CTYPE-OPENPGP
179
203
</programlisting>
180
204
</informalexample>
183
<refsect1 id="files">
186
The file described here is &CONFPATH;