1 | # Stolen from /sbin/dhclient-script using using no /usr based binaries.
|
---|
2 | # Converts an commented list into a SEP (default space) seperated list.
|
---|
3 | make_list() {
|
---|
4 | SEP=${2:-' '}
|
---|
5 | oldifs="$IFS"
|
---|
6 | IFS="
|
---|
7 | "
|
---|
8 | list=""
|
---|
9 | for line in $1; do
|
---|
10 | line=${line%%[ \t#]*}
|
---|
11 | [ -n "$line" ] && list="$list$SEP$line"
|
---|
12 | done
|
---|
13 | IFS=${oldifs}
|
---|
14 | echo ${list##$SEP}
|
---|
15 | }
|
---|
16 |
|
---|
17 | # No kernel dumps as we don't have a place to store them
|
---|
18 | dumpdev="NO"
|
---|
19 |
|
---|
20 | # We are an router/gateway (wireless to be precise) running the lvrouted
|
---|
21 | # routing daemon.
|
---|
22 | gateway_enable="YES"
|
---|
23 | lvrouted_enable="YES"
|
---|
24 | lvrouted_flags="-u -s s00p3rs3kr3t -m 28"
|
---|
25 |
|
---|
26 | # NTP server needs working config with WL network or internet on boot
|
---|
27 | # so some warnings might pop up, but no harm
|
---|
28 | ntpdate_enable="YES"
|
---|
29 | ntpd_enable="YES"
|
---|
30 | ntpd_sync_on_start="YES"
|
---|
31 | ntpd_flags="-p /var/run/ntpd.pid -f /var/db/ntp.drift"
|
---|
32 |
|
---|
33 | # We need no running mail server
|
---|
34 | sendmail_enable="NONE"
|
---|
35 |
|
---|
36 | # Don't let syslog accept input from other remote hosts
|
---|
37 | syslogd_enable="YES"
|
---|
38 | syslogd_flags="-s -A -c"
|
---|
39 |
|
---|
40 | # Remote login without DNS checking as it might not also be functionable
|
---|
41 | # -u0 prevent sshd from making DNS requests unless the authentication mechanism
|
---|
42 | # or configuration requires it.
|
---|
43 | sshd_enable="YES"
|
---|
44 | sshd_flags="-u0"
|
---|
45 |
|
---|
46 | # Monitoring deamons
|
---|
47 | nrpe2_enable="YES"
|
---|
48 | snmpd_enable="YES"
|
---|
49 | snmpd_flags="-LS w"
|
---|
50 |
|
---|
51 | # HTTP(S) proxy server
|
---|
52 | tinyproxy_enable="NO"
|
---|
53 |
|
---|
54 | # Make sure generated ssh keys are saved
|
---|
55 | nanobsd_save_sshkeys_enable="YES"
|
---|
56 |
|
---|
57 | # low-memory footprint DHCP and non-autoritive recursive DNS resolver
|
---|
58 | dnsmasq_enable="YES"
|
---|
59 |
|
---|
60 | # Explicitly disable the memory-hungry alternatives
|
---|
61 | dhcpd_enable="NO"
|
---|
62 | named_enable="NO"
|
---|
63 | named_chrootdir=""
|
---|
64 | named_auto_forward="YES"
|
---|
65 |
|
---|
66 | # WL Captive Portal and WL Web Config Overview
|
---|
67 | thttpd_enable="YES"
|
---|
68 | http302_enable="YES"
|
---|
69 |
|
---|
70 | # Hybrid setup, requires outgoing VPN Server
|
---|
71 | openvpn_enable="NO"
|
---|
72 | openvpn_if="tap"
|
---|
73 | openvpn_configfile="/usr/local/etc/openvpn/client.conf"
|
---|
74 |
|
---|
75 | # Enable the firewall by default
|
---|
76 | pf_enable="YES"
|
---|
77 | pf_rules="/etc/pf.open.conf"
|
---|
78 | pf_flags=''
|
---|
79 | # Used with Proxy Configuration
|
---|
80 | #pf_rules="/etc/pf.proxy.conf"
|
---|
81 | #pf_flags="-D ext_if=vr0 -D int_if=vr1 -D publicnat={80,443}"
|
---|
82 | # Used with Node Configuration
|
---|
83 | #pf_rules="/etc/pf.node.conf"
|
---|
84 | #pf_flags="-D captive_portal_interfaces=wlan0,wlan1"
|
---|
85 | # Used with Hybrid Configuration
|
---|
86 | #pf_rules="/etc/pf.hybrid.conf"
|
---|
87 | #pf_flags="-D ext_if=vr0 -D captive_portal_interfaces=wlan0 -D publicnat=80,443"
|
---|
88 |
|
---|
89 |
|
---|
90 | # Autogenerated flags are used during runtime
|
---|
91 | rc_conf_running='/etc/rc.conf.running'
|
---|
92 | if [ -r $rc_conf_running ]; then
|
---|
93 | . $rc_conf_running
|
---|
94 | else
|
---|
95 | : > $rc_conf_running
|
---|
96 | fi
|
---|