Import release 0.1.5

[secnet.git] / example.conf

diff --git a/example.conf b/example.conf
index 3b4a32f60e4c8d66e682e89026d433b88f0bd51b..03e5f436bde0db63538dc81b782a04b2b962b008 100644 (file)
--- a/example.conf
+++ b/example.conf
@@ -1,7 +1,21 @@
 # secnet example configuration file
 
 # Log facility
-log logfile("secnet","local2"); # Not yet implemented, goes to stderr
+log syslog {
+       ident "secnet";
+       facility "local0";
+};
+
+# Alternatively you could log to a file:
+# log logfile {
+#      filename "/var/log/secnet";
+#      class "info","notice","warning","error","security","fatal";
+#      # There are some useful message classes that could replace
+#      # this list:
+#      #  'default' -> warning,error,security,fatal
+#      #  'verbose' -> info,notice,default
+#      #  'quiet'   -> fatal
+# };
 
 # Systemwide configuration (all other configuration is per-site):
 # log          a log facility for program messages
@@ -119,7 +133,7 @@ transform serpent256-cbc {
        max-sequence-skew 10;
 };
 
-include /etc/secnet/sites
+include /etc/secnet/sites.conf
 
 # Here you must list all the VPN sites that you wish to communicate with.
 # The /etc/secnet/sites file contains information on all reachable sites;
@@ -128,11 +142,15 @@ include /etc/secnet/sites
 # contains public keys for all sites.
 
 sites
-       site(example-vpn/some-site),
-       site(example-vpn/some-other-site),
-       site(example-vpn/a-third-site);
+       site(vpn-data/example/location1/site1),
+       site(vpn-data/example/location2/site1),
+       site(vpn-data/example/location2/site2);
 
 # If you want to communicate with all the VPN sites, you can use something
 # like the following instead:
 
-# sites map(site,makelist(example-vpn));
+# sites map(site,vpn/example/all-sites);
+
+# If you want to communicate with a subset of locations, try the following:
+
+# sites map(site,vpn/example/location1,vpn/example/location2);