xref: /openbsd/etc/rc.conf (revision 68aa8910)
1*68aa8910Skn#	$OpenBSD: rc.conf,v 1.227 2022/09/26 00:29:55 kn Exp $
2001137a0Sderaadt
3001137a0Sderaadt# DO NOT EDIT THIS FILE!!
4001137a0Sderaadt#
5001137a0Sderaadt# This file defines the default service selection as shipped in a
6001137a0Sderaadt# release.  Upgrades of your system will modify this file.
7001137a0Sderaadt#
8001137a0Sderaadt# To select the service options you desire, please override these
9001137a0Sderaadt# options in the file /etc/rc.conf.local
10001137a0Sderaadt#
11001137a0Sderaadt# DO NOT EDIT THIS FILE!!
12bad82733Sderaadt
13123f8490Sschwarze# Set these variables to "NO" to turn the respective service off.
14123f8490Sschwarze# Set them to "" to run them with the default flags.
15123f8490Sschwarze# Otherwise, these variables override the default flags.
16123f8490Sschwarzeapmd_flags=NO
17123f8490Sschwarzebgpd_flags=NO
18c2691defSclaudiobgplgd_flags=NO
19123f8490Sschwarzebootparamd_flags=NO
20123f8490Sschwarzecron_flags=
21123f8490Sschwarzedhcpd_flags=NO
222555728fSfloriandhcpleased_flags=
2395d52386Snorbydhcrelay_flags=NO	# for normal use: "-i interface [server]"
24123f8490Sschwarzedvmrpd_flags=NO
25354b290bSrenatoeigrpd_flags=NO
26123f8490Sschwarzeftpd_flags=NO		# set to NO if ftpd is running out of inetd
27123f8490Sschwarzeftpproxy_flags=NO
28de442913Ssthenftpproxy6_flags=NO
29123f8490Sschwarzehostapd_flags=NO
30123f8490Sschwarzehotplugd_flags=NO
31123f8490Sschwarzehttpd_flags=NO
32123f8490Sschwarzeidentd_flags=NO
33123f8490Sschwarzeifstated_flags=NO
34123f8490Sschwarzeiked_flags=NO
35123f8490Sschwarzeinetd_flags=NO
36123f8490Sschwarzeisakmpd_flags=NO
37123f8490Sschwarzeiscsid_flags=NO
38123f8490Sschwarzeldapd_flags=NO
39123f8490Sschwarzeldattach_flags=NO	# for normal use: "[options] linedisc cua-device"
40123f8490Sschwarzeldomd_flags=NO
41123f8490Sschwarzeldpd_flags=NO
42123f8490Sschwarzelpd_flags=NO		# for normal use: "" (or "-l" for debugging)
43123f8490Sschwarzemopd_flags=NO
44b972e7e4Sajacoutotmrouted_flags=NO	# be sure to enable multicast below
45123f8490Sschwarzenpppd_flags=NO
46123f8490Sschwarzensd_flags=NO
47ef4d236fSderaadtntpd_flags=
48123f8490Sschwarzeospfd_flags=NO
49123f8490Sschwarzeospf6d_flags=NO
50123f8490Sschwarzepflogd_flags=		# add more flags, e.g. "-s 256"
51651da8daSflorianrad_flags=NO
52fb4d67d5Syasuokaradiusd_flags=NO
53123f8490Sschwarzerarpd_flags=NO
54123f8490Sschwarzerbootd_flags=NO
55123f8490Sschwarzerelayd_flags=NO
562555728fSflorianresolvd_flags=
57123f8490Sschwarzeripd_flags=NO
58123f8490Sschwarzeroute6d_flags=NO	# be sure to set net.inet6.ip6.forwarding=1
59123f8490Sschwarzesasyncd_flags=NO
60123f8490Sschwarzesensorsd_flags=NO
61f1bb0883Sflorianslaacd_flags=
62123f8490Sschwarzeslowcgi_flags=NO
63123f8490Sschwarzesmtpd_flags=
64123f8490Sschwarzesndiod_flags=
65123f8490Sschwarzesnmpd_flags=NO
66123f8490Sschwarzespamd_flags=NO		# also see spamd_black below
678799e9c8Srobertspamlogd_flags=		# use eg. "-i interface" and see spamlogd(8)
68123f8490Sschwarzesshd_flags=
69123f8490Sschwarzesyslogd_flags=		# add more flags, e.g. "-u -a /chroot/dev/log"
70123f8490Sschwarzetftpd_flags=NO
71123f8490Sschwarzetftpproxy_flags=NO
72123f8490Sschwarzeunbound_flags=NO
73e81982beSflorianunwind_flags=NO
7489b08587Sjaspervmd_flags=NO
75123f8490Sschwarzewatchdogd_flags=NO
76*68aa8910Sknwsmoused_flags=NO	# for enabling console mouse support
77123f8490Sschwarze			# for ps/2 or usb mice: "", serial: "-p /dev/cua00"
780e79390dSmatthieuxenodm_flags=NO		# on some architectures, you must also
79123f8490Sschwarze			# disable console getty in /etc/ttys
80a6896192Smillert
81123f8490Sschwarze# services related to RPC, NFS, and YP
82123f8490Sschwarzeamd_flags=NO		# also see amd_master below
83123f8490Sschwarzelockd_flags=NO
84123f8490Sschwarzemountd_flags=NO
85123f8490Sschwarzenfsd_flags=NO
86123f8490Sschwarzeportmap_flags=NO	# note: inetd(8) rpc services need portmap too
87123f8490Sschwarzestatd_flags=NO
88123f8490Sschwarzeypbind_flags=NO
89123f8490Sschwarzeypldap_flags=NO
90123f8490Sschwarzeypserv_flags=NO
9196ac2838Saaron
92bad82733Sderaadt# set the following to "YES" to turn them on
93d5012373Shenningpf=YES			# Packet filter / NAT
9479ec6e47Shshoexeripsec=NO		# IPsec
95e39651abSkrwcheck_quotas=YES	# NO may be desirable in some YP environments
96f0d9a157Sajacoutotaccounting=NO		# process accounting (using /var/account/acct)
97fde3f312Shin
98745634aaSniklas# Multicast routing configuration
9983c454c2Sdavid# Please look at netstart(8) for a detailed description if you change these
1007758ab7eSmpimulticast=NO		# Reject IPv4 multicast packets by default
101745634aaSniklas
102bad82733Sderaadt# miscellaneous other flags
103bad82733Sderaadtamd_master=/etc/amd/master	# AMD 'master' map
10467c6ae01Stblibrary_aslr=YES		# set to NO to disable library randomization
105123f8490Sschwarzesavecore_flags=			# "-z" to compress
106123f8490Sschwarzespamd_black=NO			# set to YES to run spamd without greylisting
107eb761689Spvalchevshlib_dirs=			# extra directories for ldconfig, separated
108eb761689Spvalchev				# by space
109abca3f75Sderaadt
110b3b5af78Sajacoutot# rc.d(8) packages scripts
111aa82f476Sajacoutot# started in the specified order and stopped in reverse order
112931d9abfSajacoutotpkg_scripts=
113