xref: /openbsd/etc/rc.conf (revision 2555728f)
1*2555728fSflorian#	$OpenBSD: rc.conf,v 1.224 2021/07/16 15:21:41 florian Exp $
2001137a0Sderaadt
3001137a0Sderaadt# DO NOT EDIT THIS FILE!!
4001137a0Sderaadt#
5001137a0Sderaadt# This file defines the default service selection as shipped in a
6001137a0Sderaadt# release.  Upgrades of your system will modify this file.
7001137a0Sderaadt#
8001137a0Sderaadt# To select the service options you desire, please override these
9001137a0Sderaadt# options in the file /etc/rc.conf.local
10001137a0Sderaadt#
11001137a0Sderaadt# DO NOT EDIT THIS FILE!!
12bad82733Sderaadt
13123f8490Sschwarze# Set these variables to "NO" to turn the respective service off.
14123f8490Sschwarze# Set them to "" to run them with the default flags.
15123f8490Sschwarze# Otherwise, these variables override the default flags.
16123f8490Sschwarzeapmd_flags=NO
17123f8490Sschwarzebgpd_flags=NO
18123f8490Sschwarzebootparamd_flags=NO
19123f8490Sschwarzecron_flags=
20123f8490Sschwarzedhcpd_flags=NO
21*2555728fSfloriandhcpleased_flags=
2295d52386Snorbydhcrelay_flags=NO	# for normal use: "-i interface [server]"
23123f8490Sschwarzedvmrpd_flags=NO
24354b290bSrenatoeigrpd_flags=NO
25123f8490Sschwarzeftpd_flags=NO		# set to NO if ftpd is running out of inetd
26123f8490Sschwarzeftpproxy_flags=NO
27de442913Ssthenftpproxy6_flags=NO
28123f8490Sschwarzehostapd_flags=NO
29123f8490Sschwarzehotplugd_flags=NO
30123f8490Sschwarzehttpd_flags=NO
31123f8490Sschwarzeidentd_flags=NO
32123f8490Sschwarzeifstated_flags=NO
33123f8490Sschwarzeiked_flags=NO
34123f8490Sschwarzeinetd_flags=NO
35123f8490Sschwarzeisakmpd_flags=NO
36123f8490Sschwarzeiscsid_flags=NO
37123f8490Sschwarzeldapd_flags=NO
38123f8490Sschwarzeldattach_flags=NO	# for normal use: "[options] linedisc cua-device"
39123f8490Sschwarzeldomd_flags=NO
40123f8490Sschwarzeldpd_flags=NO
41123f8490Sschwarzelpd_flags=NO		# for normal use: "" (or "-l" for debugging)
42123f8490Sschwarzemopd_flags=NO
43b972e7e4Sajacoutotmrouted_flags=NO	# be sure to enable multicast below
44123f8490Sschwarzenpppd_flags=NO
45123f8490Sschwarzensd_flags=NO
46ef4d236fSderaadtntpd_flags=
47123f8490Sschwarzeospfd_flags=NO
48123f8490Sschwarzeospf6d_flags=NO
49123f8490Sschwarzepflogd_flags=		# add more flags, e.g. "-s 256"
50651da8daSflorianrad_flags=NO
51fb4d67d5Syasuokaradiusd_flags=NO
52123f8490Sschwarzerarpd_flags=NO
53123f8490Sschwarzerbootd_flags=NO
54123f8490Sschwarzerelayd_flags=NO
55*2555728fSflorianresolvd_flags=
56123f8490Sschwarzeripd_flags=NO
57123f8490Sschwarzeroute6d_flags=NO	# be sure to set net.inet6.ip6.forwarding=1
58123f8490Sschwarzesasyncd_flags=NO
59123f8490Sschwarzesensorsd_flags=NO
60f1bb0883Sflorianslaacd_flags=
61123f8490Sschwarzeslowcgi_flags=NO
62123f8490Sschwarzesmtpd_flags=
63123f8490Sschwarzesndiod_flags=
64123f8490Sschwarzesnmpd_flags=NO
65123f8490Sschwarzespamd_flags=NO		# also see spamd_black below
668799e9c8Srobertspamlogd_flags=		# use eg. "-i interface" and see spamlogd(8)
67123f8490Sschwarzesshd_flags=
68bb0982dfSreykswitchd_flags=NO
69123f8490Sschwarzesyslogd_flags=		# add more flags, e.g. "-u -a /chroot/dev/log"
70123f8490Sschwarzetftpd_flags=NO
71123f8490Sschwarzetftpproxy_flags=NO
72123f8490Sschwarzeunbound_flags=NO
73e81982beSflorianunwind_flags=NO
7489b08587Sjaspervmd_flags=NO
75123f8490Sschwarzewatchdogd_flags=NO
76123f8490Sschwarzewsmoused_flags=NO	# for enabling console mouse support (i386 alpha amd64)
77123f8490Sschwarze			# for ps/2 or usb mice: "", serial: "-p /dev/cua00"
780e79390dSmatthieuxenodm_flags=NO		# on some architectures, you must also
79123f8490Sschwarze			# disable console getty in /etc/ttys
80a6896192Smillert
81123f8490Sschwarze# services related to RPC, NFS, and YP
82123f8490Sschwarzeamd_flags=NO		# also see amd_master below
83123f8490Sschwarzelockd_flags=NO
84123f8490Sschwarzemountd_flags=NO
85123f8490Sschwarzenfsd_flags=NO
86123f8490Sschwarzeportmap_flags=NO	# note: inetd(8) rpc services need portmap too
87123f8490Sschwarzestatd_flags=NO
88123f8490Sschwarzeypbind_flags=NO
89123f8490Sschwarzeypldap_flags=NO
90123f8490Sschwarzeypserv_flags=NO
9196ac2838Saaron
92bad82733Sderaadt# set the following to "YES" to turn them on
93d5012373Shenningpf=YES			# Packet filter / NAT
9479ec6e47Shshoexeripsec=NO		# IPsec
95e39651abSkrwcheck_quotas=YES	# NO may be desirable in some YP environments
96f0d9a157Sajacoutotaccounting=NO		# process accounting (using /var/account/acct)
97fde3f312Shin
98745634aaSniklas# Multicast routing configuration
9983c454c2Sdavid# Please look at netstart(8) for a detailed description if you change these
1007758ab7eSmpimulticast=NO		# Reject IPv4 multicast packets by default
101745634aaSniklas
102bad82733Sderaadt# miscellaneous other flags
103bad82733Sderaadtamd_master=/etc/amd/master	# AMD 'master' map
10467c6ae01Stblibrary_aslr=YES		# set to NO to disable library randomization
105123f8490Sschwarzesavecore_flags=			# "-z" to compress
106123f8490Sschwarzespamd_black=NO			# set to YES to run spamd without greylisting
107eb761689Spvalchevshlib_dirs=			# extra directories for ldconfig, separated
108eb761689Spvalchev				# by space
109abca3f75Sderaadt
110b3b5af78Sajacoutot# rc.d(8) packages scripts
111aa82f476Sajacoutot# started in the specified order and stopped in reverse order
112931d9abfSajacoutotpkg_scripts=
113