Files
netbird-docs/public/docs-static/files/netbird-policy.reg
T
riccardom 182b1b9e87 docs: document the MDM keys added since the page was written, and iOS
The reference table listed 18 of the 23 keys the client recognises, and
claimed a count of 16. Six keys were missing from every downloadable
template as well, including lazyConnection, which the page already
documented:

- lazyConnection, disableAdvancedView, enableLocalMetrics,
  localMetricsAddress, allowRemoteJobs and debugBundleUploadURL are now
  in the reference table and in netbird.admx/.adml, io.netbird.client.plist,
  netbird-macos.mobileconfig, netbird-macos.sh and netbird-policy.reg.
- Notes call out the two pairs that read as related but are not:
  disableMetricsCollection (anonymous telemetry) versus
  enableLocalMetrics (the client's own Prometheus endpoint), and
  disableAdvancedView being UI-only, so unlike its neighbours it never
  causes a request to be rejected.

iOS and tvOS now have a section of their own. The channel is Apple's
Managed App Configuration against bundle id io.netbird.app
(io.netbird.app.tv on tvOS), with a new netbird-ios-appconfig.plist
template and per-provider instructions. The section states what the
policy reaches today: the app locks its interface and refuses
configuration changes, while the tunnel engine runs in a Network
Extension that does not receive the app configuration, so keys the
engine applies to the connection are not enforced there yet.

Two template defects found on the way:

- netbird-macos.mobileconfig was not well-formed XML. Its header
  comment contained a double hyphen, which XML forbids inside a
  comment, so plutil -lint and any strict parser rejected the file an
  admin downloaded.
- netbird-policy.reg had one LF-terminated line among CRLF ones;
  normalised, with the UTF-16LE encoding reg import requires preserved.

Verified with npm run build and npm run lint:mdx, plus XML well-formedness
on all five XML templates, bash -n on the shell template, and a
cross-reference check that every string and presentation the ADMX
references is defined in the ADML.
2026-09-17 09:17:25 +02:00

28 lines
1.9 KiB
Reg

Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\Software\Policies\NetBird]
"SplitTunnelMode"="allow"
"SplitTunnelApps"="my.fancy.app,or.something.else"
"AllowServerSSH"=dword:00000000
"AllowRemoteJobs"=dword:00000000
"BlockInbound"=dword:00000001
"DisableAutoConnect"=dword:00000001
"DisableAutostart"=dword:00000001
"DisableAdvancedView"=dword:00000001
"DisableClientRoutes"=dword:00000001
"DisableMetricsCollection"=dword:00000001
"DisableNetworks"=dword:00000001
"DisableProfiles"=dword:00000001
"DisableServerRoutes"=dword:00000001
"DisableUpdateSettings"=dword:00000001
"PreSharedKey"="RE9OJ1RVU0UgVEhJUyBQU0sAAAAAAAAAAAAAAAAAAAA="
"ManagementURL"="https://foo.bar.zoo:443"
"DebugBundleUploadURL"="https://uploads.example.com"
"LocalMetricsAddress"="127.0.0.1:9191"
"RosenpassEnabled"=dword:00000000
"RosenpassPermissive"=dword:00000000
"LazyConnection"=dword:00000001
"EnableLocalMetrics"=dword:00000001
"WireguardPort"=dword:0000ca6d