summaryrefslogtreecommitdiff
path: root/config/openbsd/waagent.conf
diff options
context:
space:
mode:
Diffstat (limited to 'config/openbsd/waagent.conf')
-rw-r--r--config/openbsd/waagent.conf13
1 files changed, 11 insertions, 2 deletions
diff --git a/config/openbsd/waagent.conf b/config/openbsd/waagent.conf
index 09e7db7..a39a9a5 100644
--- a/config/openbsd/waagent.conf
+++ b/config/openbsd/waagent.conf
@@ -14,8 +14,8 @@ Provisioning.DeleteRootPassword=y
# Generate fresh host key pair.
Provisioning.RegenerateSshHostKeyPair=y
-# Supported values are "rsa", "dsa", "ecdsa", and "ed25519".
-Provisioning.SshHostKeyPairType=ed25519
+# Supported values are "rsa", "dsa", "ecdsa", "ed25519", and "auto".
+Provisioning.SshHostKeyPairType=auto
# Monitor host name changes and publish changes via DHCP requests.
Provisioning.MonitorHostName=y
@@ -103,3 +103,12 @@ OS.PasswordPath=/etc/master.passwd
# handling until inVMArtifactsProfile.OnHold is false.
# Default is disabled
# EnableOverProvisioning=n
+
+# Allow fallback to HTTP if HTTPS is unavailable
+# Note: Allowing HTTP (vs. HTTPS) may cause security risks
+# OS.AllowHTTP=n
+
+# Add firewall rules to protect access to Azure host node services
+# Note:
+# - The default is false to protect the state of exising VMs
+OS.EnableFirewall=y