]> git.proxmox.com Git - pve-docs.git/blame - datacenter.cfg.5-opts.adoc
attrs: update cephdocs template to quincy
[pve-docs.git] / datacenter.cfg.5-opts.adoc
CommitLineData
27a7acb2
DM
1`bwlimit`: `[clone=<LIMIT>] [,default=<LIMIT>] [,migration=<LIMIT>] [,move=<LIMIT>] [,restore=<LIMIT>]` ::
2
3Set bandwidth/io limits various operations.
4
5`clone`=`<LIMIT>` ;;
6
95895385 7bandwidth limit in KiB/s for cloning disks
27a7acb2
DM
8
9`default`=`<LIMIT>` ;;
10
95895385 11default bandwidth limit in KiB/s
27a7acb2
DM
12
13`migration`=`<LIMIT>` ;;
14
95895385 15bandwidth limit in KiB/s for migrating guests (including moving local disks)
27a7acb2
DM
16
17`move`=`<LIMIT>` ;;
18
95895385 19bandwidth limit in KiB/s for moving disks
27a7acb2
DM
20
21`restore`=`<LIMIT>` ;;
22
95895385 23bandwidth limit in KiB/s for restoring guests from backups
27a7acb2 24
a9a8e3d1 25`console`: `<applet | html5 | vv | xtermjs>` ::
c016ebb7 26
a9a8e3d1 27Select the default Console viewer. You can either use the builtin java applet (VNC; deprecated and maps to html5), an external virt-viewer comtatible application (SPICE), an HTML5 based vnc viewer (noVNC), or an HTML5 based console client (xtermjs). If the selected viewer is not available (e.g. SPICE not activated for the VM), the fallback is noVNC.
c016ebb7 28
81a3384d
TL
29`crs`: `ha=<basic|static>` ::
30
31Cluster resource scheduling settings.
32
33`ha`=`<basic | static>` ('default =' `basic`);;
34
35Configures how the HA manager should select nodes to start or recover services. With 'basic', only the number of services is used, with 'static', static CPU and memory configuration of services is considered.
36
5370fa8c
TL
37`description`: `<string>` ::
38
39Datacenter description. Shown in the web-interface datacenter notes panel. This is saved as comment inside the configuration file.
40
013dc89f 41`email_from`: `<string>` ::
c016ebb7
DM
42
43Specify email address to send notification from (default is root@$hostname)
44
013dc89f 45`fencing`: `<both | hardware | watchdog>` ('default =' `watchdog`)::
c016ebb7 46
c2993fe5 47Set the fencing mode of the HA cluster. Hardware mode needs a valid configuration of fence devices in /etc/pve/ha/fence.cfg. With both all two modes are used.
04ce4dfa
DM
48+
49WARNING: 'hardware' and 'both' are EXPERIMENTAL & WIP
c016ebb7 50
5c1699e5 51`ha`: `shutdown_policy=<enum>` ::
5f26e15b
TL
52
53Cluster wide HA settings.
54
5c1699e5 55`shutdown_policy`=`<conditional | failover | freeze | migrate>` ('default =' `conditional`);;
5f26e15b 56
e9cd3bd4 57Describes the policy for handling HA services on poweroff or reboot of a node. Freeze will always freeze services which are still located on the node on shutdown, those services won't be recovered by the HA manager. Failover will not mark the services as frozen and thus the services will get recovered to other nodes, if the shutdown node does not come up again quickly (< 1min). 'conditional' chooses automatically depending on the type of shutdown, i.e., on a reboot the service will be frozen but on a poweroff the service will stay as is, and thus get recovered after about 2 minutes. Migrate will try to move all running services to another node when a reboot or shutdown was triggered. The poweroff process will only continue once no running services are located on the node anymore. If the node comes up again, the service will be moved back to the previously powered-off node, at least if no other migration, reloaction or recovery took place.
5f26e15b 58
34450053 59`http_proxy`: `http://.*` ::
c016ebb7 60
c2993fe5 61Specify external http proxy which is used for downloads (example: 'http://username:password@host:port/')
c016ebb7 62
013dc89f 63`keyboard`: `<da | de | de-ch | en-gb | en-us | es | fi | fr | fr-be | fr-ca | fr-ch | hu | is | it | ja | lt | mk | nl | no | pl | pt | pt-br | sl | sv | tr>` ::
c016ebb7
DM
64
65Default keybord layout for vnc server.
66
1c532546 67`language`: `<ca | da | de | en | es | eu | fa | fr | he | it | ja | nb | nn | pl | pt_BR | ru | sl | sv | tr | zh_CN | zh_TW>` ::
c016ebb7
DM
68
69Default GUI language.
70
95895385 71`mac_prefix`: `<string>` ::
2c0dde61
DM
72
73Prefix for autogenerated MAC addresses.
74
013dc89f 75`max_workers`: `<integer> (1 - N)` ::
c016ebb7 76
c2993fe5 77Defines how many workers (per node) are maximal started on actions like 'stopall VMs' or task from the ha-manager.
c016ebb7 78
de0983cb
DM
79`migration`: `[type=]<secure|insecure> [,network=<CIDR>]` ::
80
81For cluster wide migration settings.
82
83`network`=`<CIDR>` ;;
84
85CIDR of the (sub) network that is used for migration.
86
013dc89f 87`type`=`<insecure | secure>` ('default =' `secure`);;
de0983cb
DM
88
89Migration traffic is encrypted using an SSH tunnel by default. On secure, completely private networks this can be disabled to increase performance.
90
013dc89f 91`migration_unsecure`: `<boolean>` ::
c016ebb7 92
de0983cb 93Migration is secure using SSH tunnel by default. For secure private networks you can disable it to speed up migration. Deprecated, use the 'migration' property instead!
c016ebb7 94
7af2edf9
TL
95`next-id`: `[lower=<integer>] [,upper=<integer>]` ::
96
97Control the range for the free VMID auto-selection pool.
98
99`lower`=`<integer>` ('default =' `100`);;
100
101Lower, inclusive boundary for free next-id API range.
102
103`upper`=`<integer>` ('default =' `1000000`);;
104
460359c5 105Upper, exclusive boundary for free next-id API range.
7af2edf9 106
81a3384d
TL
107`registered-tags`: `<tag>[;<tag>...]` ::
108
109A list of tags that require a `Sys.Modify` on '/' to set and delete. Tags set here that are also in 'user-tag-access' also require `Sys.Modify`.
110
e7e885f9 111`tag-style`: `[case-sensitive=<1|0>] [,color-map=<tag>:<hex-color>[:<hex-color-for-text>][;<tag>=...]] [,ordering=<config|alphabetical>] [,shape=<enum>]` ::
81a3384d
TL
112
113Tag style options.
114
e7e885f9
TL
115`case-sensitive`=`<boolean>` ('default =' `0`);;
116
117Controls if filtering for unique tags on update should check case-sensitive.
118
81a3384d
TL
119`color-map`=`<tag>:<hex-color>[:<hex-color-for-text>][;<tag>=...]` ;;
120
121Manual color mapping for tags (semicolon separated).
122
123`ordering`=`<alphabetical | config>` ('default =' `alphabetical`);;
124
e7e885f9 125Controls the sorting of the tags in the web-interface and the API update.
81a3384d
TL
126
127`shape`=`<circle | dense | full | none>` ('default =' `circle`);;
128
129Tag shape for the web ui tree. 'full' draws the full tag. 'circle' draws only a circle with the background color. 'dense' only draws a small rectancle (useful when many tags are assigned to each guest).'none' disables showing the tags.
130
95895385
TL
131`u2f`: `[appid=<APPID>] [,origin=<URL>]` ::
132
133u2f
134
135`appid`=`<APPID>` ;;
136
137U2F AppId URL override. Defaults to the origin.
138
139`origin`=`<URL>` ;;
140
141U2F Origin override. Mostly useful for single nodes with a single URL.
142
81a3384d
TL
143`user-tag-access`: `[user-allow=<enum>] [,user-allow-list=<tag>[;<tag>...]]` ::
144
145Privilege options for user-settable tags
146
147`user-allow`=`<existing | free | list | none>` ('default =' `free`);;
148
e7e885f9 149Controls which tags can be set or deleted on resources a user controls (such as guests). Users with the `Sys.Modify` privilege on `/` are always unrestricted. 'none' no tags are usable. 'list' tags from 'user-allow-list' are usable. 'existing' like list, but already existing tags of resources are also usable.'free' no tag restrictions.
81a3384d
TL
150
151`user-allow-list`=`<tag>[;<tag>...]` ;;
152
153List of tags users are allowed to set and delete (semicolon separated) for 'user-allow' values 'list' and 'existing'.
154
155`webauthn`: `[allow-subdomains=<1|0>] [,id=<DOMAINNAME>] [,origin=<URL>] [,rp=<RELYING_PARTY>]` ::
5370fa8c
TL
156
157webauthn configuration
158
81a3384d
TL
159`allow-subdomains`=`<boolean>` ('default =' `1`);;
160
161Whether to allow the origin to be a subdomain, rather than the exact URL.
162
5370fa8c
TL
163`id`=`<DOMAINNAME>` ;;
164
81a3384d 165Relying party ID. Must be the domain name without protocol, port or location. Changing this *will* break existing credentials.
5370fa8c
TL
166
167`origin`=`<URL>` ;;
168
169Site origin. Must be a `https://` URL (or `http://localhost`). Should contain the address users type in their browsers to access the web interface. Changing this *may* break existing credentials.
170
171`rp`=`<RELYING_PARTY>` ;;
172
173Relying party name. Any text identifier. Changing this *may* break existing credentials.
174