MANDOS.CONF(5) | Mandos Manual | MANDOS.CONF(5) |
mandos.conf - Configuration file for the Mandos server
/etc/mandos/mandos.conf
The file /etc/mandos/mandos.conf is a simple configuration file for mandos(8), and is read by it at startup. The configuration file starts with “[DEFAULT]” on a line by itself, followed by any number of “option=value” entries, with continuations in the style of RFC 822. “option: value” is also accepted. Note that leading whitespace is removed from values. Lines beginning with “#” or “;” are ignored and may be used to provide comments.
interface = NAME
address = ADDRESS
port = NUMBER
debug = { 1 | yes | true | on | 0 | no | false | off }
priority = STRING
“SECURE128:!CTYPE-X.509:+CTYPE-RAWPK:!RSA:!VERS-ALL:+VERS-TLS1.3:%PROFILE_ULTRA” when using raw public keys in TLS, and “SECURE256:!CTYPE-X.509:+CTYPE-OPENPGP:!RSA:+SIGN-DSA-SHA256” when using OpenPGP keys in TLS,. See gnutls_priority_init(3) for the syntax. Warning: changing this may make the TLS handshake fail, making server-client communication impossible. Changing this option may also make the network traffic decryptable by an attacker.
servicename = NAME
use_dbus = { 1 | yes | true | on | 0 | no | false | off }
use_ipv6 = { 1 | yes | true | on | 0 | no | false | off }
restore = { 1 | yes | true | on | 0 | no | false | off }
statedir = DIRECTORY
socket = NUMBER
The file described here is /etc/mandos/mandos.conf
The [DEFAULT] is necessary because the Python built-in module ConfigParser requires it.
Please report bugs to the Mandos development mailing list: <mandos-dev@recompile.se> (subscription required). Note that this list is public. The developers can be reached privately at <mandos@recompile.se> (OpenPGP key fingerprint 153A 37F1 0BBA 0435 987F 2C4A 7223 2973 CA34 C2C4 for encrypted mail).
No options are actually required:
[DEFAULT]
An example using all the options:
[DEFAULT] # A configuration example interface = enp1s0 address = fe80::aede:48ff:fe71:f6f2 port = 1025 debug = True priority = SECURE128:!CTYPE-X.509:+CTYPE-RAWPK:!RSA:!VERS-ALL:+VERS-TLS1.3:%PROFILE_ULTRA servicename = Daena use_dbus = False use_ipv6 = True restore = True statedir = /var/lib/mandos
intro(8mandos), gnutls_priority_init(3), mandos(8), mandos-clients.conf(5)
RFC 4291: IP Version 6 Addressing Architecture
Section 2.2: Text Representation of Addresses
Section 2.5.5.2: IPv4-Mapped IPv6 Address
Section 2.5.6, Link-Local IPv6 Unicast Addresses
Zeroconf[1]
Copyright © 2008-2019 Teddy Hogeborn, Björn
Påhlsson
This manual page is part of Mandos.
Mandos is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.
Mandos is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.
You should have received a copy of the GNU General Public License along with Mandos. If not, see http://www.gnu.org/licenses/.
2019-06-20 | Mandos 1.8.14 |