# -*- text -*-
##
## radiusd.conf -- FreeRADIUS server configuration
##
## Managed by Ansible — do not edit manually.
##

prefix = /usr
exec_prefix = /usr
sysconfdir = /etc
localstatedir = /var
sbindir = /usr/sbin
logdir = ${localstatedir}/log/freeradius
raddbdir = ${sysconfdir}/freeradius/3.0
radacctdir = ${logdir}/radacct

name = radiusd

confdir = ${raddbdir}
modconfdir = ${confdir}/mods-config
certdir = ${confdir}/certs
cadir   = ${confdir}/certs
run_dir = ${localstatedir}/run/${name}

db_dir = ${localstatedir}/lib/radiusd

libdir = /usr/lib/freeradius

pidfile = ${run_dir}/${name}.pid

max_request_time = 30
cleanup_delay = 5
max_requests = 16384

hostname_lookups = no

unlang {
}

log {
	destination = files
	colourise = yes
	msg_denied = "You are already logged in - access denied"
	file = ${logdir}/radius.log
	syslog_facility = daemon
	stripped_names = no
	auth = yes
	auth_badpass = no
	auth_goodpass = no
	msg_goodpass = ""
	msg_badpass = ""
}

checkrad = ${sbindir}/checkrad

ENV {
}

security {
	max_attributes = 200
	reject_delay = 1
	status_server = yes
	allow_vulnerable_openssl = "CVE-2016-6304"
}

proxy_requests  = yes

$INCLUDE clients.conf
$INCLUDE proxy.conf

thread pool {
	start_servers = 5
	max_servers = 32
	min_spare_servers = 3
	max_spare_servers = 10
	max_requests_per_server = 0
	auto_limit_acct = no
}

modules {
	$INCLUDE mods-enabled/
}

instantiate {
}

policy {
	$INCLUDE policy.d/
}

$INCLUDE sites-enabled/