/etc/onak.ini is in onak 0.5.0-1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 | ;
; Configuration for onak, an OpenPGP compatible keyserver
;
[main]
backend=defaultdb4
backends_dir=/usr/lib/x86_64-linux-gnu/onak/backends
logfile=/var/log/onak.log
; Loglevel : 0 is highest debug, default is 3, nothing is 7+
loglevel=3
; Should we use the keyd backend?
use_keyd=false
sock_dir=/run
; Maximum number of keys to return in a reply to an index, verbose index or
; get. Setting it to -1 will allow any size of reply.
max_reply_keys=128
; Settings related to key verification options available.
[verification]
; Verify signature hashes - verify that the hash a signature claims to be
; over matches the hash of the data. Does not actually verify the signature.
check_sighash=true
; Settings related to the email interface to onak.
[mail]
maintainer_email=PGP Key Server Administrator <pgp-keyserver-admin@the.earth.li>
mail_dir=/var/spool/onak
; Specify the envelope sender address as the -f argument to
; sendmail. This is the address which will receive any bounces.
; If you don't use sendmail, then change this to an equivalent command.
; If you do not want to process mail requests, leave this unset.
mta=/usr/sbin/sendmail -t -oi -fmailer-daemon
; Where the main onak binary lives, so the script that handles incoming
; email knows where to find it.
bin_dir=/usr/bin
; Email address outgoing incremental messages will come from.
; Needs to match the syncsite entries others sites have for this site.
this_site=pgp-public-keys@the.earth.li
; Include a syncsite line for each site with which you are exchanging
; incremental requests.
;syncsite=pgp-public-keys@keys.nl.pgp.net
;syncsite=pgp-public-keys@blackhole.pca.dfn.de
;syncsite=pgp-public-keys@pgp.es.net
;syncsite=pgp-public-keys@keyserver.linux.it
;syncsite=pgp-public-keys@pgp.dtype.org
;syncsite=pgp-public-keys@kjsl.com
; Database backend configurations below here
[backend:defaultdb4]
; The default DB4 backend. Recommended.
type=db4
location=/var/lib/onak
[backend:examplehkp]
; An example HKP backend; all operations will be done against the
; provided keyserver, with no local storage.
type=hkp
location=hkp://the.earth.li/
[backend:examplestacked]
; A stacked set of backends. All fetch operations will be tried against
; the provided list of backends, from left to right, until one succeeds.
; All store operations are against the first backend.
; If a fetch does not succeed against the first backend, but against a
; later one, then the returned keys are also stored in the first backend.
; This example configuration essentially produces a caching keyserver,
; with any key fetched from the HKP backend being stored in the DB4
; backend.
; Note keys are not expired from the DB4 backend, so without any other
; update mechanism configured this will result in stale data eventually.
type=stacked
location=defaultdb4:examplehkp
|