listener
********

.. _node.listener.addr:

:kw:`addr`
==========

================= ================================================================
**scopable**      False
**required**      False
**default**       
**scope order**   specific > generic
================= ================================================================

The ip addr the daemon raw listener must listen on. The empty value used as default means: all ip4 and ip6.

.. _node.listener.crl:

:kw:`crl`
=========

================= ================================================================
**scopable**      False
**required**      False
**default**       /root/docs/opensvc/var/certs/ca_crl
**scope order**   specific > generic
================= ================================================================

The url serving the certificate revocation list. The default points to the path of the cluster ca crl in ``{var}/certs/ca_crl``.

.. _node.listener.dns_sock_gid:

:kw:`dns_sock_gid`
==================

================= ================================================================
**scopable**      False
**required**      False
**default**       953
**scope order**   specific > generic
================= ================================================================

The gid owning the unix socket serving the remote backend to the pdns authoritative server.

.. _node.listener.dns_sock_uid:

:kw:`dns_sock_uid`
==================

================= ================================================================
**scopable**      False
**required**      False
**default**       953
**scope order**   specific > generic
================= ================================================================

The uid owning the unix socket serving the remote backend to the pdns authoritative server.

.. _node.listener.openid_well_known:

:kw:`openid_well_known`
=======================

================= ================================================================
**scopable**      False
**required**      False
**default**       None
**scope order**   specific > generic
================= ================================================================

The url serving the well-known configuration of an openid provider. If set, the h2 listener will try to validate the Bearer token provided in the requests. If valid the user name is fetched from the 'preferred_username' claim (fallback on 'name'), and the user grants are fetched from the 'grant' claim. Grant can be a list, in which case a proper grant value is formatted via concatenation of the list elements.

.. _node.listener.port:

:kw:`port`
==========

================= ================================================================
**scopable**      False
**required**      False
**default**       1214
**scope order**   specific > generic
**convert**       integer
================= ================================================================

The port the daemon raw listener must listen on. In pull action mode, the collector sends a tcp packet to the server to notify there are actions to unqueue. The opensvc daemon executes the :c-action:`dequeue actions` node action upon receive. The :kw:`listener.port` parameter is sent to the collector upon :c-action:`pushasset`. The collector uses this port to notify the node.

.. _node.listener.tls_addr:

:kw:`tls_addr`
==============

================= ================================================================
**scopable**      False
**required**      False
**default**       
**scope order**   specific > generic
================= ================================================================

The ip addr the daemon tls listener must listen on. The empty value used as default means: all ip4 and ip6.

.. _node.listener.tls_port:

:kw:`tls_port`
==============

================= ================================================================
**scopable**      False
**required**      False
**default**       1215
**scope order**   specific > generic
**convert**       integer
================= ================================================================

The port the daemon tls listener must listen on.

.. _node.listener.ui:

:kw:`ui`
========

================= ================================================================
**scopable**      False
**required**      False
**default**       True
**scope order**   specific > generic
**convert**       boolean
================= ================================================================

Serve the ui webapp to browsers getting the api / path.