Files
docker-novnc-baseimage/conf/turbovncserver-security.conf
T
2024-05-31 11:19:13 +02:00

98 lines
4.0 KiB
Plaintext

# the PAM User/Password authentication method is used.
# (Default: user ACL is disabled)
#enable-user-acl
# This specifies the maximum desktop size for all TurboVNC sessions started on
# this host. If a user attempts to start a session with a larger geometry than
# this or to use remote desktop resizing to increase the desktop size to a size
# larger than this, the desktop size will be clamped to this width/height.
#max-desktop-size = 3200x1800
# This specifies the maximum idle timeout (in seconds) for all TurboVNC
# sessions started on this host. The idle timeout is the amount of time that
# a TurboVNC session can remain idle (with no VNC viewer connections) before it
# will automatically exit. If this value is set to a number greater than 0,
# then all TurboVNC sessions on this host will use this idle timeout value by
# default, and the user will only be allowed to override it with a lower value.
#max-idle-timeout = 86400
# Uncomment the following to globally disable the automatic sending of
# clipboard changes to TurboVNC sessions from their connected viewers.
# (Default: clipboard receiving is allowed)
#no-clipboard-recv
# Uncomment the following to globally disable the automatic sending of
# clipboard changes from TurboVNC sessions to their connected viewers.
# (Default: clipboard sending is allowed)
#no-clipboard-send
# Uncomment the following to globally disable creating/opening PAM sessions in
# all TurboVNC sessions started on this host.
#no-pam-sessions
# Uncomment the following to globally disable inbound remote connections to all
# TurboVNC sessions started on this host. This effectively forces SSH
# tunneling to be used for all inbound TurboVNC connections.
# (Default: inbound remote connections are allowed)
#no-remote-connections
# Uncomment the following to globally disable remote desktop resizing.
# (Default: remote desktop resizing is allowed)
#no-remote-resize
# Uncomment the following to globally disable the ability to make reverse
# VNC connections.
# (Default: reverse connections are allowed)
#no-reverse-connections
# Uncomment the following to globally disable X11 TCP connections to all
# TurboVNC sessions started on this host.
#no-x11-tcp-connections
# Set pam-service-name to the name of the PAM service that you will use to
# to process PAM User/Password authentications from TurboVNC. This service
# name typically corresponds to a file in /etc/pam.d or to one or more lines in
# /etc/pam.conf.
# (Default: turbovnc)
#pam-service-name = turbovnc
# Set the following to a colon-separated list of permitted TLS cipher suites
# for the TLS* and X509* security types. (Run 'openssl ciphers aNULL' for a
# list of possible options for the TLS* security types, and 'openssl ciphers'
# for a list of possible options for the X509* security types.) This directive
# also controls the order in which the cipher suites are advertised to the VNC
# viewer.
# (Default: allow any cipher suite supported by the host's OpenSSL
# implementation)
#permitted-cipher-suites =
# Set the following to any combination of "TLSVnc", "TLSOtp", "TLSPlain",
# "TLSNone", "X509Vnc", "X509Otp", "X509Plain", "X509None", "VNC", "OTP",
# "UnixLogin", "Plain", or "None", separated by commas (security types are
# case-insensitive.) If the following directive is enabled and a particular
# security type is not listed in it, then users cannot enable that security
# type by using Xvnc command-line arguments. This directive also controls the
# order in which the corresponding authentication capabilities are advertised
# to the VNC viewer. See the man pages and User's Guide for more information.
# (Default: TLSVnc, TLSOtp, TLSPlain, TLSNone, X509Vnc, X509Otp, X509Plain, X509None, VNC, OTP, UnixLogin, Plain, None)
#permitted-security-types = TLSVnc, TLSOtp, TLSPlain, X509Vnc, X509Otp, X509Plain, VNC, OTP, UnixLogin, Plain
permitted-security-types = none
# This specifies the length of the key, in bits, that the TurboVNC Server will
# generate for any of the TLS* (anonymous TLS) security types.
# (Default: 2048)
#tls-key-length = 2048