yggdrasil for Debian
--------------------

BASIC INFORMATION
=================

All binaries for this package are installed into /usr/sbin:

  yggdrasil - daemon started by systemd

  yggdrasilctl - control utility

  yggdrasil-genkeys - key generation utility (usually not needed)

INITIAL CONFIGURATION
=====================

You need to create a configuration file in order to use Yggdrasil.  To
do that, run:

yggdrasil -genconf > /etc/yggdrasil/yggdrasil.conf

By default, Yggdrasil is not set up to run.  To enable it, run:

systemctl enable yggdrasil
systemctl start yggdrasil

OPERATIONAL NOTES
=================

The systemd configuration for Yggdrasil drops as many privileges as possible.
It runs as an unprivileged dynamic user (yggdrasil-dyn).  It simply needs
group-read access to the config file.

UPGRADES
========

Because you may be using something like ssh over Yggdrasil to update
your system, the Yggdrasil package will not automatically restart the
service after an upgrade.

To do so, you can run:

systemctl daemon-reload
systemctl restart yggdrasil

Please also note that newer versions of Yggdrasil may require updating the
configuration.  For instance:

cp /etc/yggdrasil/yggdrasil.conf /etc/yggdrasil/yggdrasil.conf.old

/usr/sbin/yggdrasil -useconf -normaliseconf \
  < /etc/yggdrasil/yggdrasil.conf.old > /etc/yggdrasil/yggdrasil.conf


-- John Goerzen <jgoerzen@complete.org>

