kgetho

Tlhaloso

boleng ba kamehla

kamehla['firezone']['external_url']

URL e sebelisitsoeng ho kena sebakeng sa marang-rang sa ketsahalo ena ea Firezone.

“https://#{node['fqdn'] || node['hostname']}"

kamehla['firezone']['config_directory']

Lenane la maemo a holimo bakeng sa tlhophiso ea Firezone.

/etc/firezone'

kamehla['firezone']['install_directory']

Lenane la maemo a holimo ho kenya Firezone ho.

/opt/firezone'

kamehla['firezone']['app_directory']

Lenane la maemo a holimo ho kenya ts'ebeliso ea webo ea Firezone.

“#{node['firezone']['install_directory']}/embedded/service/firezone”

kamehla['firezone']['log_directory']

Lenane la maemo a holimo bakeng sa li-log tsa Firezone.

/var/log/firezone'

kamehla['firezone']['var_directory']

Lenane la maemo a holimo bakeng sa lifaele tsa nako ea ho sebetsa ea Firezone.

/var/opt/firezone'

kamehla['firezone']['user']

Lebitso la basebelisi ba Linux ba se nang monyetla litšebeletso le lifaele tse ngata li tla ba tsa.

firezone'

kamehla['firezone']['group']

Lebitso la sehlopha sa Linux litšebeletso le lifaele tse ngata li tla ba tsa.

firezone'

kamehla['firezone']['admin_email']

Aterese ea lengolo-tsoibila bakeng sa mosebelisi oa pele oa Firezone.

"firezone@localhost"

kamehla['firezone']['max_devices_per_user']

Boholo ba lisebelisoa tseo mosebelisi a ka bang le tsona.

10

kamehla['firezone']['allow_unprivileged_device_management']

E lumella basebelisi bao e seng batsamaisi ho etsa le ho hlakola lisebelisoa.

'NETE

kamehla['firezone']['allow_unprivileged_device_configuration']

E lumella basebelisi bao e seng batsamaisi ho fetola litlhophiso tsa lisebelisoa. Ha e koaletsoe, e thibela basebelisi ba se nang tokelo ho fetola likarolo tsohle tsa lisebelisoa ntle le lebitso le tlhaloso.

'NETE

kamehla['firezone']['egress_interface']

Lebitso la sehokelo moo sephethe-phethe se tla tsoa. Haeba ho se na, ho tla sebelisoa mokhoa oa kamehla oa tsela.

nil

kamehla['firezone']['fips_enabled']

Numella kapa o tima mokhoa oa OpenSSL FIPs.

nil

kamehla['firezone']['regging']['enabled']

Dumella kapa o tima ho rema lifate ho pholletsa le Firezone. Beha leshano ho thibela ho rema lifate ka botlalo.

'NETE

kamehla['enterprise']['name']

Lebitso le sebelisitsoeng ke Chef 'enterprise' cookbook.

firezone'

kamehla['firezone']['install_path']

Kenya tsela e sebelisoang ke Chef 'enterprise' cookbook. E lokela ho hlophisoa ho tšoana le install_directory e ka holimo.

node['firezone']['install_directory']

kamehla['firezone']['sysvinit_id']

Sekhetho se sebelisitsoeng ho /etc/inittab. E tlameha ho ba le tatelano e ikhethang ea litlhaku tse 1-4.

SUP'

default['firezone']['authentication']['local']['enabled']

Numella kapa o tima netefatso ea lengolo-tsoibila / password.

'NETE

default['firezone']['authentication']['auto_create_oidc_users']

Iketsetse basebelisi ho saena ho tsoa ho OIDC lekhetlo la pele. E thibela ho lumella basebelisi ba seng ba ntse ba le teng feela ho kena ka OIDC.

'NETE

default['firezone']['authentication']['disable_vpn_on_oidc_error']

Tlosa VPN ea mosebelisi haeba ho fumanoa phoso ha a leka ho nchafatsa tokene ea bona ea OIDC.

BA BOHATA

default['firezone']['authentication']['oidc']

OpenID Connect config, ka sebopeho sa {"mofani" => [config…]} - Bona Litokomane tsa OpenIDConnect bakeng sa mehlala ea config.

{}

kamehla['firezone']['nginx']['enabled']

Lumella kapa u tima seva sa nginx se bokelletsoeng.

'NETE

kamehla['firezone']['nginx']['ssl_port']

Boema-kepe ba ho mamela ba HTTPS.

443

kamehla['firezone']['nginx']['directory']

Lenane la ho boloka litlhophiso tse amanang le nginx tse amanang le Firezone.

“#{node['firezone']['var_directory']}/nginx/etc”

kamehla['firezone']['nginx']['log_directory']

Lenane la ho boloka lifaele tsa log tse amanang le Firezone.

“#{node['firezone']['log_directory']}/nginx”

kamehla['firezone']['nginx']['log_rotation']['file_maxbytes']

Saese ea faele eo ho eona o ka potolohang lifaele tsa log tsa Nginx.

104857600

kamehla['firezone']['nginx']['log_rotation']['num_to_keep']

Palo ea lifaele tsa log tsa Firezone nginx tseo u lokelang ho li boloka pele u li lahla.

10

kamehla['firezone']['nginx']['log_x_forwarded_for']

Hore na o ka kena Firezone nginx x-fetisetsoa-bakeng sa hlooho.

'NETE

default['firezone']['nginx']['hsts_header']['enabled']

Nolofatsa kapa oa e hlakola HSTS.

'NETE

default['firezone']['nginx']['hsts_header']['include_subdomains']

Numella kapa thibela kenyeletsaSubDomains bakeng sa hlooho ea HSTS.

'NETE

default['firezone']['nginx']['hsts_header']['max_age']

Lilemo tse phahameng bakeng sa hlooho ea HSTS.

31536000

kamehla['firezone']['nginx']['redirect_to_canonical']

Hore na li-URL li tla lebisoa ho li-canonical FQDN tse boletsoeng ka holimo

BA BOHATA

kamehla['firezone']['nginx']['cache']['enabled']

Numella kapa u tima "cache" ea Firezone nginx.

BA BOHATA

kamehla['firezone']['nginx']['cache']['directory']

Directory bakeng sa Firezone nginx cache.

“#{node['firezone']['var_directory']}/nginx/cache”

kamehla['firezone']['nginx']['user']

Mosebelisi oa Firezone nginx.

node['firezone']['user']

kamehla['firezone']['nginx']['group']

Sehlopha sa Firezone nginx.

node['firezone']['group']

kamehla['firezone']['nginx']['dir']

Lenane la tlhophiso ea nginx ea boemo bo holimo.

node['firezone']['nginx']['directory']

kamehla['firezone']['nginx']['log_dir']

Lenane la log ea nginx ea boemo bo holimo.

node['firezone']['nginx']['log_directory']

kamehla['firezone']['nginx']['pid']

Sebaka sa faele ea nginx pid.

“#{node['firezone']['nginx']['directory']}/nginx.pid”

kamehla['firezone']['nginx']['daemon_disable']

Tlosa nginx daemon mode hore re e shebelle.

'NETE

kamehla['firezone']['nginx']['gzip']

Bulela kapa u tima compression ea nginx gzip.

ka '

kamehla['firezone']['nginx']['gzip_static']

Bulela kapa u tima compression ea nginx gzip bakeng sa lifaele tse tsitsitseng.

theoha'

kamehla['firezone']['nginx']['gzip_http_version']

Mofuta oa HTTP o ka sebelisoang ho sebeletsa lifaele tse tsitsitseng.

1.0 '

kamehla['firezone']['nginx']['gzip_comp_level']

boemo ba compression ba nginx gzip.

2 '

kamehla['firezone']['nginx']['gzip_proxied']

E nolofaletsa kapa e tima likarabo tsa likarabo bakeng sa likopo tsa proxied ho latela kopo le karabo.

efe kapa efe'

kamehla['firezone']['nginx']['gzip_vary']

E nolofalletsa kapa e tima ho kenya sehlooho sa karabo sa "Vary: Accept-Encoding".

theoha'

kamehla['firezone']['nginx']['gzip_buffers']

E beha palo le boholo ba li-buffer tse sebelisoang ho hatella karabo. Haeba ho se na, nginx default e sebelisoa.

nil

kamehla['firezone']['nginx']['gzip_types']

Mefuta ea MIME ho nolofalletsa compression ea gzip bakeng sa.

['text/plain', 'text/css','application/x-javascript', 'text/xml', 'application/xml', 'application/rss+xml', 'application/atom+xml', ' text/javascript', 'application/javascript', 'application/json']

kamehla['firezone']['nginx']['gzip_min_length']

Bonyane bolelele ba faele ho nolofalletsa compression ea gzip bakeng sa.

1000

kamehla['firezone']['nginx']['gzip_disable']

Sebapi sa moemeli oa mosebelisi ho thibela khatello ea gzip bakeng sa.

MSIE [1-6]\.'

kamehla['firezone']['nginx']['keepalive']

E bula cache bakeng sa khokahanyo ho li-server tse holimo.

ka '

kamehla['firezone']['nginx']['keepalive_timeout']

Nako e felile ka metsotsoana bakeng sa khokahano ea Keepalive ho li-server tse holimo.

65

default['firezone']['nginx']['worker_processes']

Palo ea lits'ebetso tsa basebetsi ba nginx.

node['cpu'] && node['cpu']['total'] ? node['cpu']['kakaretso'] : 1

default['firezone']['nginx']['worker_connections']

Nomoro e kholo ea likhokahano tsa nako e le 'ngoe tse ka buloang ke ts'ebetso ea basebetsi.

1024

default['firezone']['nginx']['worker_rlimit_nofile']

E fetola moeli ho palo e kholo ea lifaele tse bulehileng bakeng sa lits'ebetso tsa basebetsi. E sebelisa default nginx haeba e le sieo.

nil

kamehla['firezone']['nginx']['multi_accept']

Hore na basebetsi ba lokela ho amohela khokahano e le 'ngoe ka nako kapa makhetlo a mangata.

'NETE

kamehla['firezone']['nginx']['ketsahalo']

E hlalosa mokhoa oa ts'ebetso oa khokahanyo o ka sebelisoang kahare ho liketsahalo tsa nginx.

epoll'

kamehla['firezone']['nginx']['server_tokens']

E nolofalletsa kapa e tima mofuta oa nginx maqepheng a liphoso le karolong ea hlooho ea karabo ea "Server".

nil

default['firezone']['nginx']['server_names_hash_bucket_size']

E beha boholo ba bakete bakeng sa litafole tsa li-server tsa hash.

64

kamehla['firezone']['nginx']['sendfile']

E nolofalletsa kapa e tima ts'ebeliso ea nginx's sendfile().

ka '

kamehla['firezone']['nginx']['access_log_options']

E beha likhetho tsa ho kena ho nginx.

nil

kamehla['firezone']['nginx']['error_log_options']

E beha likhetho tsa log ea liphoso tsa nginx.

nil

kamehla['firezone']['nginx']['disable_access_log']

E tima tlaleho ea phihlello ea nginx.

BA BOHATA

kamehla['firezone']['nginx']['types_hash_max_size']

mefuta ea nginx hash max size.

2048

kamehla['firezone']['nginx']['types_hash_bucket_size']

mefuta ea nginx boholo ba bakete ea hash.

64

kamehla['firezone']['nginx']['proxy_read_timeout']

nginx proxy bala nako e felile. Beha ho nil ho sebelisa nginx kamehla.

nil

kamehla['firezone']['nginx']['client_body_buffer_size']

nginx client buffer size size. Beha ho nil ho sebelisa nginx kamehla.

nil

kamehla['firezone']['nginx']['client_max_body_size']

nginx client boholo ba 'mele.

250m'

kamehla['firezone']['nginx']['default']['modules']

Hlalosa li-module tse ling tsa nginx.

[]

kamehla['firezone']['nginx']['enable_rate_limiting']

Nolofatsa kapa o tima sekhahla sa sekhahla sa nginx.

'NETE

kamehla['firezone']['nginx']['rate_limiting_zone_name']

Lebitso la sebaka se fokotsang sekhahla sa Nginx.

firezone'

kamehla['firezone']['nginx']['rate_limiting_backoff']

Sekhahla sa Nginx se fokotsa ho khutla.

10m'

kamehla['firezone']['nginx']['rate_limit']

Sekhahla sa Nginx.

10r/s'

kamehla['firezone']['nginx']['ipv6']

Lumella nginx ho mamela likopo tsa HTTP tsa IPv6 ho kenyelletsa IPv4.

'NETE

default['firezone']['postgresql']['enabled']

Nolofatsa kapa o tima Postgresql e kopantsoeng. Beha leshano 'me u tlatse likhetho tsa database tse ka tlase ho sebelisa mohlala oa hau oa Postgresql.

'NETE

default['firezone']['postgresql']['username']

Username bakeng sa Postgresql.

node['firezone']['user']

default['firezone']['postgresql']['data_directory']

Lenane la data la Postgresql.

“#{node['firezone']['var_directory']}/postgresql/13.3/data”

default['firezone']['postgresql']['log_directory']

Buka ea Postgresql.

“#{node['firezone']['log_directory']}/postgresql”

default['firezone']['postgresql']['log_rotation']['file_maxbytes']

Postgresql log file boholo ba boholo pele e ka fetoloa.

104857600

kamehla['firezone']['postgresql']['log_rotation']['num_to_keep']

Palo ea lifaele tsa log tsa Postgresql tseo u lokelang ho li boloka.

10

kamehla['firezone']['postgresql']['checkpoint_completion_target']

Sepheo sa ho phethela sebaka sa postgresql.

0.5

kamehla['firezone']['postgresql']['checkpoint_segments']

Palo ea likarolo tsa tlhahlobo ea Postgresql.

3

default['firezone']['postgresql']['checkpoint_timeout']

Postgresql Checkpoint nako e felile.

5min'

kamehla['firezone']['postgresql']['checkpoint_temoso']

Nako ea temoso ea postgresql ka metsotsoana.

30s'

default['firezone']['postgresql']['effective_cache_size']

Postgresql e sebetsang ka boholo ba cache.

128MB

kamehla['firezone']['postgresql']['mamela_aterese']

Postgresql mamela aterese.

127.0.0.1 '

default['firezone']['postgresql']['max_connections']

Likhokahanyo tse ngata tsa Postgresql.

350

default['firezone']['postgresql']['md5_auth_cidr_addresses']

Postgresql CIDRs ho lumella md5 auth.

['127.0.0.1/32', ':1/128']

kamehla['firezone']['postgresql']['port']

Sebaka sa ho mamela sa Postgresql.

15432

kamehla['firezone']['postgresql']['shared_buffers']

Postgresql e arolelanoa ka boholo ba li-buffers.

“#{(node['memory']['total'].to_i / 4) / 1024}MB”

kamehla['firezone']['postgresql']['shmmax']

Postgresql shmmax ka li-byte.

17179869184

kamehla['firezone']['postgresql']['shmall']

Postgresql shmall ka li-byte.

4194304

kamehla['firezone']['postgresql']['work_mem']

Postgresql e sebetsa boholo ba memori.

8MB

kamehla['firezone']['database']['user']

E hlakisa lebitso la mosebelisi Firezone e tla le sebelisa ho hokela DB.

node['firezone']['postgresql']['lebitso la mosebedisi']

kamehla['firezone']['database']['password']

Haeba o sebelisa DB e kantle, e hlalosa password eo Firezone e tla e sebelisa ho hokela DB.

fetola_nna'

kamehla['firezone']['database']['lebitso']

Database eo Firezone e tla e sebelisa. E tla etsoa haeba e le sieo.

firezone'

kamehla['firezone']['database']['host']

Sebaka sa polokelo ea polokelo eo Firezone e tla hokela ho eona.

node['firezone']['postgresql']['mamela_aterese']

kamehla['firezone']['database']['port']

Boema-kepe ba polokelo eo Firezone e tla hokela ho eona.

node['firezone']['postgresql']['port']

kamehla['firezone']['database']['pool']

Boholo ba letamo la polokelo ea data Firezone e tla sebelisa.

[10, Etc.nprocessors].max

kamehla['firezone']['database']['ssl']

Hore na o hokela polokelong ea litaba ka SSL.

BA BOHATA

kamehla['firezone']['database']['ssl_opts']

Hash ea likhetho tseo u ka li romellang ho :ssl_opts khetho ha u hokela ka SSL. Bona Litokomane tsa Ecto.Adapters.Postgres.

{}

kamehla['firezone']['database']['parameters']

Hash ea li-parameter tseo u lokelang ho li romela ho :parameters khetho ha u hokahanya le database. Bona Litokomane tsa Ecto.Adapters.Postgres.

{}

kamehla['firezone']['database']['extensions']

Li-extensions tsa polokelo ea data ho bulela.

{'plpgsql' => nnete, 'pg_trgm' => nnete }

kamehla['firezone']['phoenix']['enabled']

Numella kapa o tima ts'ebeliso ea webo ea Firezone.

'NETE

kamehla['firezone']['phoenix']['mamela_aterese']

Sebaka sa marang-rang sa Firezone ho mamela aterese. Ena e tla ba aterese ea ho mamela e holimo eo li-proxies tsa nginx.

127.0.0.1 '

kamehla['firezone']['phoenix']['port']

Firezone web application listen port. Ena e tla ba boema-kepe bo ka holimo boo nginx proxies.

13000

kamehla['firezone']['phoenix']['log_directory']

Lenane la tlaleho ea kopo ea webo ea Firezone.

“#{node['firezone']['log_directory']}/phoenix”

default['firezone']['phoenix']['log_rotation']['file_maxbytes']

Boholo ba faele ea polokelo ea kopo ea webo ea Firezone.

104857600

kamehla['firezone']['phoenix']['log_rotation']['num_to_keep']

Palo ea lifaele tsa marang-rang tsa Firezone tse lokelang ho bolokoa.

10

kamehla['firezone']['phoenix']['crash_detection']['enabled']

Dumella kapa o thibele ho theola sesebediswa sa webo sa Firezone ha ho lemohuwa kotsi.

'NETE

kamehla['firezone']['phoenix']['external_trusted_proxies']

Lethathamo la li-proxies tse tšeptjoang tse hlophisitsoeng e le Array of IPs le/kapa li-CIDR.

[]

kamehla['firezone']['phoenix']['private_clients']

Lethathamo la bareki ba marang-rang ba HTTP, ba hlophisitsoeng ka mefuta e mengata ea li-IP le/kapa li-CIDR.

[]

kamehla['firezone']['wireguard']['enabled']

Numella kapa o tima taolo ea WireGuard e kopaneng.

'NETE

kamehla['firezone']['wireguard']['log_directory']

Lenane la li-log bakeng sa taolo e kopaneng ea WireGuard.

“#{node['firezone']['log_directory']}/wireguard”

kamehla['firezone']['wireguard']['log_rotation']['file_maxbytes']

WireGuard log file boholo ba boholo.

104857600

kamehla['firezone']['wireguard']['log_rotation']['num_to_keep']

Palo ea lifaele tsa log tsa WireGuard tse lokelang ho bolokoa.

10

kamehla['firezone']['wireguard']['interface_name']

Lebitso la sebopeho sa WireGuard. Ho fetola paramente ena ho ka baka tahlehelo ea nakoana khokahanong ea VPN.

wg-firezone'

kamehla['firezone']['wireguard']['port']

WireGuard mamela koung.

51820

kamehla['firezone']['wireguard']['mtu']

WireGuard interface MTU bakeng sa seva sena le bakeng sa litlhophiso tsa lisebelisoa.

1280

kamehla['firezone']['wireguard']['endpoint']

WireGuard Endpoint e ka sebelisoang ho etsa litlhophiso tsa sesebelisoa. Haeba ho se na, e ea ho aterese ea IP ea sechaba.

nil

kamehla['firezone']['wireguard']['dns']

WireGuard DNS eo u ka e sebelisang bakeng sa tlhophiso ea lisebelisoa tse hlahisitsoeng.

1.1.1.1, 1.0.0.1′

kamehla['firezone']['wireguard']['allowed_ips']

WireGuard AllowedIPs ho sebelisoa bakeng sa tlhophiso ea lisebelisoa tse hlahisitsoeng.

0.0.0.0/0, ::/0′

kamehla['firezone']['wireguard']['persistent_keepalive']

Litlhophiso tsa kamehla tsa PersistentKeepalive bakeng sa litlhophiso tsa lisebelisoa tse hlahisitsoeng. Boleng ba 0 bo tima.

0

default['firezone']['wireguard']['ipv4']['enabled']

Numella kapa o tima IPv4 bakeng sa marang-rang a WireGuard.

'NETE

kamehla['firezone']['wireguard']['ipv4']['masquerade']

Lumella kapa u tima masquerade bakeng sa lipakete tse tlohang kotopong ea IPv4.

'NETE

kamehla['firezone']['wireguard']['ipv4']['network']

Letamo la aterese la WireGuard la IPv4.

10.3.2.0/24 '

kamehla['firezone']['wireguard']['ipv4']['aterese']

WireGuard interface IPv4 aterese. E tlameha ho ba ka har'a letamo la liaterese la WireGuard.

10.3.2.1 '

default['firezone']['wireguard']['ipv6']['enabled']

Numella kapa o tima IPv6 bakeng sa marang-rang a WireGuard.

'NETE

kamehla['firezone']['wireguard']['ipv6']['masquerade']

Lumella kapa u tima masquerade bakeng sa lipakete tse tlohang kotopong ea IPv6.

'NETE

kamehla['firezone']['wireguard']['ipv6']['network']

Letamo la aterese la WireGuard la IPv6.

fd00::3:2:0/120′

kamehla['firezone']['wireguard']['ipv6']['aterese']

WireGuard interface IPv6 aterese. E tlameha ho ba ka har'a letamo la liaterese tsa IPv6.

fd00::3:2:1′

kamehla['firezone']['runit']['svlogd_bin']

Runit svlogd bin sebaka.

“#{node['firezone']['install_directory']}/embedded/bin/svlogd”

kamehla['firezone']['ssl']['directory']

Sengoloa sa SSL bakeng sa ho boloka li-cert tse hlahisitsoeng.

/var/opt/firezone/ssl'

kamehla['firezone']['ssl']['email_address']

Aterese ea lengolo-tsoibila eo u ka e sebelisang bakeng sa li-cert tse saenneng le litsebiso tsa nchafatso ea protocol ea ACME.

you@mohlala.com'

default['firezone']['ssl']['acme']['enabled']

Numella ACME bakeng sa ho fana ka setifikeiti sa SSL ka boiketsetso. Thibela sena ho thibela Nginx ho mamela ho port 80. Bona Mona bakeng sa litaelo tse ling.

BA BOHATA

kamehla['firezone']['ssl']['acme']['server']

Seva ea ACME e ka sebelisoang bakeng sa ho fana ka setifikeiti / nchafatso. E ka ba efe kapa efe seva e sebetsang ea acme.sh

letsencrypt

kamehla['firezone']['ssl']['acme']['keylength']

Hlalosa mofuta oa senotlolo le bolelele ba setifikeiti sa SSL. Bona Mona

ec-256

default['firezone']['ssl']['certificate']

Tsela e eang faeleng ea setifikeiti bakeng sa FQDN ea hau. E fetisa litlhophiso tsa ACME ka holimo haeba ho boletsoe. Haeba ka bobeli ACME le sena ha se setifikeiti se ingoletseng se tla hlahisoa.

nil

kamehla['firezone']['ssl']['certificate_key']

Tsela e eang faeleng ea setifikeiti.

nil

kamehla['firezone']['ssl']['ssl_dhparam']

nginx ssl dh_param.

nil

kamehla['firezone']['ssl']['naha_name']

Lebitso la naha bakeng sa setifikeiti se ingoletseng.

US'

kamehla['firezone']['ssl']['state_name']

Lebitso la naha bakeng sa setifikeiti se ingodisitseng.

CA '

default['firezone']['ssl']['locality_name']

Lebitso la sebaka bakeng sa setifikeiti se ingodisitseng.

San Francisco'

default['firezone']['ssl']['company_name']

Setifikeiti se itekenetseng lebitso la khamphani.

Khampani ea ka'

default['firezone']['ssl']['organizational_unit_name']

Lebitso la yuniti ya mokgatlo bakeng sa setifikeiti se ingodisitseng.

Ts'ebetso'

kamehla['firezone']['ssl']['ciphers']

Li-ciphers tsa SSL bakeng sa nginx ho sebelisoa.

ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA’

kamehla['firezone']['ssl']['fips_ciphers']

Li-ciphers tsa SSL bakeng sa mokhoa oa FIPs.

FIPS@STRENGTH:!aNULL:!eNULL'

kamehla['firezone']['ssl']['protocols']

TLS protocols ho sebelisoa.

TLSv1 TLSv1.1 TLSv1.2′

kamehla['firezone']['ssl']['session_cache']

Cache ea seboka sa SSL.

e arolelanoeng:SSL:4m'

kamehla['firezone']['ssl']['session_timeout']

SSL nako e felile.

5m'

kamehla['firezone']['robots_allow']

liroboto tsa nginx li lumella.

/'

kamehla['firezone']['robots_disallow']

liroboto tsa nginx ha li lumelle.

nil

kamehla['firezone']['outbound_email']['from']

Lengolo-tsoibila le tsoang atereseng.

nil

default['firezone']['outbound_email']['provider']

Mofani oa litšebeletso tsa imeile tse tsoang.

nil

kamehla['firezone']['outbound_email']['configs']

Litlhophiso tsa mofani oa lengolo-tsoibila le tsoang kantle.

bona omnibus/cookbooks/firezone/attributes/default.rb

kamehla['firezone']['telemetry']['enabled']

Lumella kapa o tima telemetry ea sehlahisoa se sa tsejoeng.

'NETE

default['firezone']['connectivity_checks']['enabled']

Lumella kapa u tima litšebeletso tsa tlhahlobo ea khokahanyo ea Firezone.

'NETE

default['firezone']['connectivity_checks']['interval']

Karohano pakeng tsa ho hlahloba khokahanyo ka metsotsoana.

3_600

tsela

Tlhaloso

/var/opt/firezone

Lenane la maemo a holimo le nang le lintlha le litlhophiso tse hlahisitsoeng bakeng sa lits'ebeletso tse kopaneng tsa Firezone.

/opt/firezone

Lenane la maemo a holimo le nang le lilaeborari tse hahiloeng, li-binaries le lifaele tsa nako ea ho sebetsa tse hlokoang ke Firezone.

/usr/bin/firezone-ctl

firezone-ctl utility bakeng sa ho laola ho kenya Firezone ea hau.

/etc/systemd/system/firezone-runsvdir-start.service

systemd unit file bakeng sa ho qala ts'ebetso ea mookameli oa Firezone runsvdir.

/etc/firezone

Lifaele tsa tlhophiso ea Firezone.