mirror of
https://github.com/netbirdio/docs.git
synced 2026-10-17 02:59:04 +02:00
The reference table listed 18 of the 23 keys the client recognises, and claimed a count of 16. Six keys were missing from every downloadable template as well, including lazyConnection, which the page already documented: - lazyConnection, disableAdvancedView, enableLocalMetrics, localMetricsAddress, allowRemoteJobs and debugBundleUploadURL are now in the reference table and in netbird.admx/.adml, io.netbird.client.plist, netbird-macos.mobileconfig, netbird-macos.sh and netbird-policy.reg. - Notes call out the two pairs that read as related but are not: disableMetricsCollection (anonymous telemetry) versus enableLocalMetrics (the client's own Prometheus endpoint), and disableAdvancedView being UI-only, so unlike its neighbours it never causes a request to be rejected. iOS and tvOS now have a section of their own. The channel is Apple's Managed App Configuration against bundle id io.netbird.app (io.netbird.app.tv on tvOS), with a new netbird-ios-appconfig.plist template and per-provider instructions. The section states what the policy reaches today: the app locks its interface and refuses configuration changes, while the tunnel engine runs in a Network Extension that does not receive the app configuration, so keys the engine applies to the connection are not enforced there yet. Two template defects found on the way: - netbird-macos.mobileconfig was not well-formed XML. Its header comment contained a double hyphen, which XML forbids inside a comment, so plutil -lint and any strict parser rejected the file an admin downloaded. - netbird-policy.reg had one LF-terminated line among CRLF ones; normalised, with the UTF-16LE encoding reg import requires preserved. Verified with npm run build and npm run lint:mdx, plus XML well-formedness on all five XML templates, bash -n on the shell template, and a cross-reference check that every string and presentation the ADMX references is defined in the ADML.
28 lines
1.9 KiB
Reg
28 lines
1.9 KiB
Reg
Windows Registry Editor Version 5.00
|
|
|
|
[HKEY_LOCAL_MACHINE\Software\Policies\NetBird]
|
|
"SplitTunnelMode"="allow"
|
|
"SplitTunnelApps"="my.fancy.app,or.something.else"
|
|
"AllowServerSSH"=dword:00000000
|
|
"AllowRemoteJobs"=dword:00000000
|
|
"BlockInbound"=dword:00000001
|
|
"DisableAutoConnect"=dword:00000001
|
|
"DisableAutostart"=dword:00000001
|
|
"DisableAdvancedView"=dword:00000001
|
|
"DisableClientRoutes"=dword:00000001
|
|
"DisableMetricsCollection"=dword:00000001
|
|
"DisableNetworks"=dword:00000001
|
|
"DisableProfiles"=dword:00000001
|
|
"DisableServerRoutes"=dword:00000001
|
|
"DisableUpdateSettings"=dword:00000001
|
|
"PreSharedKey"="RE9OJ1RVU0UgVEhJUyBQU0sAAAAAAAAAAAAAAAAAAAA="
|
|
"ManagementURL"="https://foo.bar.zoo:443"
|
|
"DebugBundleUploadURL"="https://uploads.example.com"
|
|
"LocalMetricsAddress"="127.0.0.1:9191"
|
|
"RosenpassEnabled"=dword:00000000
|
|
"RosenpassPermissive"=dword:00000000
|
|
"LazyConnection"=dword:00000001
|
|
"EnableLocalMetrics"=dword:00000001
|
|
"WireguardPort"=dword:0000ca6d
|
|
|