summaryrefslogtreecommitdiffstats
path: root/etc/examples
AgeCommit message (Collapse)AuthorFilesLines
2020-05-17Change install images called *.fs to *.img. These are UFS filesystem images,deraadt1-2/+2
but additionally have a bootblock in the first 8K (since UFS does not use that space). There are some UEFI direct-from-internet bootloaders that require the name *.img. So this makes things more convenient for those, while keeping it consistant in all architectures. ok kettenis beck kn
2020-05-08less ugly upstream namesderaadt1-4/+4
2020-04-23"local-address" can be specified for both address families now, sosthen1-9/+6
no more need for separate v4/v6 groups. ok claudio@
2020-02-16Remove trailing backslasheskn1-4/+4
"prefix-set" blocks work with line breaks just fine, probably old macro leftover. OK job claudio
2019-12-14Fix comment: vmctl command options come before argumentskn1-2/+2
2019-11-30Tweak rpki-client to create all 4 output file formats from a singlederaadt1-2/+2
compute, based upon flags. OpenBGPD compatible format by default if no options, to integrate with bgpd.conf and bgpctl reload. Adapt mtree and stuff. This will receive further refactoring... ok benno job
2019-11-29Import /var/db/rpki-client/roa and filterderaadt1-1/+6
discussed at length with claudio and benno
2019-11-27Nuke http captive portal detection; something better is coming.florian1-35/+0
OK otto
2019-11-11change the nmea sensor to "trusted"deraadt1-2/+2
2019-11-11update ntpd example configurationderaadt1-2/+7
2019-09-18Correct sysctl section is 2solene1-2/+2
ok jmc millert
2019-06-07Switch to v02 api url.florian1-3/+3
2019-04-01Update radiusd.conf(5) man page and its example to recommend toyasuoka1-8/+8
surround words with double quote. Also fix a bug in the man page that module argument was missing for "module set".
2019-02-05Add an example unwind.conf.florian1-0/+35
Note that unwind(8) works without a config file in many (most?) cases. This provides an example on how to use the captive portal detection feature. Input benno Input & OK sthen
2019-01-08Move acme-client.conf to examples. Since we no longer store theflorian1-0/+19
agreement url in here we no longer need to updated it all the time. OK deraadt
2018-11-17make the bogon set competely or-longer, rather than having to manage itderaadt1-28/+27
or-longer at useage time. ok job benno
2018-09-10Adjust the config to -current bgpd which makes it a lot more readable.claudio1-22/+38
OK phessler@
2018-09-09update example bgpd.conf to use new config language features:benno1-14/+6
network prefix-set ... and filters with prefix-set ... or-longer. ok claudio@
2018-09-08Remove optional commas from example config. In the future these optionalclaudio1-13/+13
commas may become a syntax error.
2018-08-28Unclutter bgpd.conf example config filejob1-133/+91
We're aiming to work towards an examples/bgpd.conf file that is a good starting point for real world deployments rather than a showcase of all capabilities bgpd(8) has. OK deraadt@ claudio@
2018-08-07Similar to the ldpd.conf change don't use a macro of the secret.claudio1-5/+5
Macros get sometimes logged so we should not encurage to use them for sensitive data.
2018-08-06Correct example file since reserved words cannot be used as macros. Not onlymestre1-4/+4
that, the macro used was password and if we changed it to something like pass="secret" it would log it if the daemon was ran in verbose mode. Hint and OK claudio@
2018-07-25s/resolver/nameserver/ to match parse.y -r1.4jasper1-2/+2
2018-07-24add rad.conf examplejasper1-0/+14
ok florian@
2018-07-10we were refering to 10k states by default here as well, pt out by claudiohenning1-3/+3
2018-06-21Add 6to4 anycast prefixes to bogon filterjob1-1/+3
Globally anycasted 6to4 has outlived its usefulness. Operational discussion: http://seclists.org/nanog/2018/Jun/268 OK deraadt@
2018-06-13Rename httpd.conf "root strip" option to "request strip".reyk1-3/+3
"root strip" was semantically incorrect and did cause some confusion as it never stripped the root but the client's request path. Discussed with many. Heads up: this is a grammar change that also affects acme-client(1) configurations (see current.html). OK claudio@
2018-06-13Adjust example after the announce (all|self|...) change.claudio1-13/+28
Adjust filters and comment them to explain the basic operation. Use large-community and a prefix-set to ensure no bad prefixes are leaked to eBGP speakers. With and OK job@
2018-05-06don't put options in here that should not be needed in the majority ofbenno1-3/+3
cases and will just be copied by users without thinking. ok claudio@
2018-04-11"listen on * port 80" means all v4 and v6 addresses these days.florian1-3/+1
OK benno
2018-03-23Provide an example httpd.conf that's actually useful.florian1-73/+21
With & OK deraadt input sthen looks better to beck OK benno
2018-03-23Since a while relayd switched from the TLS session cache to using only TLSclaudio1-2/+2
session tickets instead. Adjust example relayd.conf file. From Matt Schwartz, reminded by jmc@ OK deraadt@
2018-01-20Provide a simpler example ifstated.conf.mpf1-57/+37
The existing example was written over a decade ago, when carp(4) was not supporting carpdemote and did not track it's interfaces link state itself. OK jmc@, rob@
2017-11-29Document NAT and DNS forwarding rules for vmd(8)mlarkin1-1/+6
discussed at length with benno, beck, deraadt, and florian
2017-11-11update switch handling in vmd(8). vmd now gets switch information (rdomain,mlarkin1-6/+5
etc) from underlying switch interface instead of handling this on its own. Diff from carlos cardenas, Thanks! ok reyk@
2017-10-16Remove stray, pointless and potentially confusing line.krw1-2/+1
2017-09-29SPI values 0-255 are reserved, so change the example to use a valid one.phessler1-3/+3
fixes parsing of the example configuration OK benno@
2017-09-22fix the example neighbor configurationsphessler1-1/+3
noticed by Alex Holst OK henning@
2017-08-12Add manpage update for new grouping feature '{from,to} {i,e}bgp'job1-2/+10
OK phessler@
2017-07-04Add GRACEFUL_SHUTDOWN example to bgpd.confjob1-1/+5
OK phessler@
2017-04-16Remove /etc/ssl/acme/. We don't need it now that we have a default acme-conf(5)ajacoutot1-3/+3
that direclty uses /etc/ssl/{,private} by default. Adapt the httpd.conf example accordingly. ok florian@ benno@ millert@
2017-03-25Boot using BIOS from /etc/firmware/vmm-bios by default.reyk1-4/+2
Instead of using the internal "vmboot", VMs will now be booted using the external BIOS firmware in /etc/firmware/vmm-bios (which is subject to a LGPLv3 license). Direct booting of OpenBSD kernels or non-default BIOS images is still supported for now using the -b/boot option that is replacing the -k/kernel option. As requested by Theo, vmd(8) fails if neither the default BIOS is found nor a kernel has been specified in the VM configuration. The "vmm" BIOS has to be installed using fw_update(1), which will be done automatically in most cases where the OpenBSD can fetch it after install/upgrade. OK mlarkin@
2017-02-27Remove support for pkg.conf in light of the consolidation towardsrpe1-146/+0
a single configuration file for the OpenBSD repository location. The pkg_* tools now use installurl(5) to find the package repository. NOTE: /etc/installurl only contains a single URL pointing to a mirror. Use the PKG_PATH environment variable to specify more than one package repository. prodded by and OK deraadt@ aja@
2017-02-23syncsthen1-2/+2
2017-02-23syncsthen1-2/+2
2017-02-20syncsthen1-1/+3
2017-01-05syncsthen1-2/+1
2016-11-17syncsthen1-2/+1
2016-10-05Change switch "wireless" to another example - bridging from VM toreyk1-7/+7
wireless in station mode is not supported.
2016-10-05Add support for enhanced networking configuration and virtual switches.reyk1-4/+23
See vm.conf(5) for more details. OK mlarkin@
Copyright © 1996 – 2026 Jason A. Donenfeld. All Rights Reverse Engineered.