migrate to luks
-- diese und die folgenden Zeilen werden ignoriert -- A https://svn.systemausfall.org/svn/cryptobox/branches/luks
This commit is contained in:
parent
e45dfa2ed8
commit
8d1c3aa9c4
364 changed files with 21139 additions and 0 deletions
43
luks/cbox-tree.d/etc/cryptobox/cryptobox.conf
Normal file
43
luks/cbox-tree.d/etc/cryptobox/cryptobox.conf
Normal file
|
@ -0,0 +1,43 @@
|
|||
# this file is directly sourced by some bash scripts
|
||||
# so there should be no space around the "="
|
||||
|
||||
LANGUAGE=de
|
||||
NET_IFACE=eth0
|
||||
SAMBA_USER=nobody
|
||||
SCAN_DEVICES="/dev/hda /dev/hdb /dev/hdc /dev/hde /dev/hdf /dev/hdg /dev/scd0 /dev/scd1 /dev/scd2 /dev/scd3 /dev/sg /dev/sda /dev/sdb /dev/sdc /dev/sdd"
|
||||
|
||||
# directories
|
||||
LANGUAGE_DIR=/usr/share/cryptobox/lang
|
||||
HTML_TEMPLATE_DIR=/usr/share/cryptobox/templates
|
||||
DOC_DIR=/usr/share/doc/cryptobox/html
|
||||
CONFIG_DEFAULTS_DIR=/usr/share/cryptobox/defaults
|
||||
CONFIG_DIR=/mnt/cb-etc
|
||||
CRYPTO_DIR=/mnt/crypto
|
||||
|
||||
# some files
|
||||
CB_SCRIPT=/usr/lib/cryptobox/cbox-manage.sh
|
||||
DEV_FEATURES_SCRIPT=/usr/lib/cryptobox/devel-features.sh
|
||||
FIREWALL_SCRIPT=/usr/lib/cryptobox/firewall.sh
|
||||
MAKE_CERT_SCRIPT=/usr/lib/cryptobox/make_stunnel_cert.sh
|
||||
LOG_FILE=/var/log/cryptobox.log
|
||||
CERT_FILE=/mnt/cb-etc/stunnel.pem
|
||||
OPENSSL_CONF_FILE=/etc/cryptobox/openssl.cnf
|
||||
IDLE_COUNTER_FILE=/tmp/cbox-idle-counter
|
||||
|
||||
# crypto settings
|
||||
# since 0.2.1 you find the default crypto settings in /usr/share/cryptobox/defaults
|
||||
CRYPTMAPPER_DEV=/dev/mapper/cryptobox-data
|
||||
|
||||
# some programs
|
||||
SFDISK=/sbin/sfdisk
|
||||
MKFS_DATA=/sbin/mkfs.ext3
|
||||
MKFS_CONFIG=/sbin/mkfs.ext2
|
||||
CRYPTSETUP=/sbin/cryptsetup
|
||||
IPTABLES=/sbin/iptables
|
||||
|
||||
# firewall setings
|
||||
# do not use multiports (iptables) as the timeout-script depends on
|
||||
# single port rules
|
||||
# ssh is allowed too, but the server is not started automatically
|
||||
ALLOW_TCP_PORTS="22 80 139 443 445"
|
||||
ALLOW_UDP_PORTS="137 138"
|
Loading…
Add table
Add a link
Reference in a new issue