X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ian/git?a=blobdiff_plain;f=example.conf;h=03e5f436bde0db63538dc81b782a04b2b962b008;hb=042a8da9053c205ea74ec1785c93ca4bcf4ea5e0;hp=3b4a32f60e4c8d66e682e89026d433b88f0bd51b;hpb=9d3a4132788b198345116624761c12ed7bc936b6;p=secnet.git diff --git a/example.conf b/example.conf index 3b4a32f..03e5f43 100644 --- a/example.conf +++ b/example.conf @@ -1,7 +1,21 @@ # secnet example configuration file # Log facility -log logfile("secnet","local2"); # Not yet implemented, goes to stderr +log syslog { + ident "secnet"; + facility "local0"; +}; + +# Alternatively you could log to a file: +# log logfile { +# filename "/var/log/secnet"; +# class "info","notice","warning","error","security","fatal"; +# # There are some useful message classes that could replace +# # this list: +# # 'default' -> warning,error,security,fatal +# # 'verbose' -> info,notice,default +# # 'quiet' -> fatal +# }; # Systemwide configuration (all other configuration is per-site): # log a log facility for program messages @@ -119,7 +133,7 @@ transform serpent256-cbc { max-sequence-skew 10; }; -include /etc/secnet/sites +include /etc/secnet/sites.conf # Here you must list all the VPN sites that you wish to communicate with. # The /etc/secnet/sites file contains information on all reachable sites; @@ -128,11 +142,15 @@ include /etc/secnet/sites # contains public keys for all sites. sites - site(example-vpn/some-site), - site(example-vpn/some-other-site), - site(example-vpn/a-third-site); + site(vpn-data/example/location1/site1), + site(vpn-data/example/location2/site1), + site(vpn-data/example/location2/site2); # If you want to communicate with all the VPN sites, you can use something # like the following instead: -# sites map(site,makelist(example-vpn)); +# sites map(site,vpn/example/all-sites); + +# If you want to communicate with a subset of locations, try the following: + +# sites map(site,vpn/example/location1,vpn/example/location2);