Documents
model-reference
model-reference
Type
External
Status
Published
Created
Feb 27, 2026
Updated
Mar 29, 2026
Updated by
Dosu Bot

Model Reference#

Auto-generated documentation - Do not edit manually. Generated: 2026-03-27 23:07:43

This document provides a complete reference of all data fields available in the opnDossier configuration model. Use this reference when working with JSON/YAML exports or building custom integrations.

Table of Contents#


OpnSenseDocument (Root)#

The root configuration object parsed from OPNsense XML.

FieldTypeJSON PathDescription
VersionstringversionOptional
TriggerInitialWizardBoolFlagtriggerInitialWizard-
ThemestringthemeOptions: opnsense
Sysctl[]SysctlItemsysctlOptional
SystemSystemsystemRequired
InterfacesInterfacesinterfacesRequired
DhcpdDhcpddhcpd-
UnboundUnboundunbound-
SnmpdSnmpdsnmpd-
NatNatnat-
FilterFilterfilter-
RrdRrdrrd-
LoadBalancerLoadBalancerloadBalancer-
NtpdNtpdntpd-
WidgetsWidgetswidgets-
RevisionRevisionrevision-
GatewaysGatewaysgateways-
HighAvailabilitySyncHighAvailabilitySynchasync-
InterfaceGroupsInterfaceGroupsifgroups-
GIFInterfacesGIFInterfacesgifs-
GREInterfacesGREInterfacesgres-
LAGGInterfacesLAGGInterfaceslaggs-
VirtualIPVirtualIPvirtualip-
VLANsVLANsvlans-
OpenVPNOpenVPNopenvpn-
StaticRoutesStaticRoutesstaticroutes-
BridgesBridgesbridges-
PPPInterfacesPPPInterfacesppps-
WirelessWirelesswireless-
CAs[]CertificateAuthoritycaOptional
DHCPv6ServerDHCPv6Serverdhcpdv6-
Certs[]CertcertOptional
DNSMasqueradeDNSMasqdnsmasq-
SyslogSyslogsyslog-
OPNsenseOPNsenseopnsense-

System Configuration#

Core system settings including hostname, users, and SSH configuration.

System#

FieldTypeJSON PathDescription
Optimizationstringsystem.optimizationOptions: normal
Hostnamestringsystem.hostnameRequired
Domainstringsystem.domainRequired
DNSAllowOverrideintsystem.dnsAllowOverrideOptional
DNSServerstringsystem.dnsServerOptional
Languagestringsystem.languageOptional
FirmwareFirmwaresystem.firmware-
Group[]Groupsystem.groupsOptional
User[]Usersystem.usersOptional
WebGUIWebGUIConfigsystem.webgui-
SSHSSHConfigsystem.ssh-
Timezonestringsystem.timezoneOptional
TimeServersstringsystem.timeServersOptional
UseVirtualTerminalintsystem.useVirtualTerminalOptional
DisableVLANHWFilterintsystem.disableVlanHwFilterOptional
DisableChecksumOffloadingintsystem.disableChecksumOffloadingOptional
DisableSegmentationOffloadingintsystem.disableSegmentationOffloadingOptional
DisableLargeReceiveOffloadingintsystem.disableLargeReceiveOffloadingOptional
IPv6Allowstringsystem.ipv6AllowOptional
DisableNATReflectionstringsystem.disableNatReflectionOptional
DisableConsoleMenuBoolFlagsystem.disableConsoleMenu-
NextUIDintsystem.nextUidOptional
NextGIDintsystem.nextGidOptional
PowerdACModestringsystem.powerdAcModeOptions: hadp
PowerdBatteryModestringsystem.powerdBatteryModeOptions: hadp
PowerdNormalModestringsystem.powerdNormalModeOptions: hadp
Bogonsstructsystem.bogons-
PfShareForwardintsystem.pfShareForwardOptional
LbUseStickyintsystem.lbUseStickyOptional
RrdBackupintsystem.rrdBackupOptional
NetflowBackupintsystem.netflowBackupOptional
NTPDstructsystem.ntpd-
SNMPDstructsystem.snmpd-
RRDstructsystem.rrd-
LoadBalancerstructsystem.loadBalancer-
UnboundUnboundsystem.unbound-
Notes[]stringsystem.notesOptional

User#

FieldTypeJSON PathDescription
Namestringsystem.users[].nameRequired
DisabledBoolFlagsystem.users[].disabled-
Descrstringsystem.users[].descriptionOptional
Scopestringsystem.users[].scopeRequired; Options: system
Groupnamestringsystem.users[].groupnameRequired
Passwordstringsystem.users[].passwordRequired
UIDstringsystem.users[].uidRequired
APIKeys[]APIKeysystem.users[].apiKeysOptional
ExpiresBoolFlagsystem.users[].expires-
AuthorizedKeysBoolFlagsystem.users[].authorizedKeys-
IPSecPSKBoolFlagsystem.users[].ipsecPsk-
OTPSeedBoolFlagsystem.users[].otpSeed-

Group#

FieldTypeJSON PathDescription
Namestringsystem.groups[].nameRequired
Descriptionstringsystem.groups[].descriptionOptional
Scopestringsystem.groups[].scopeRequired; Options: system
Gidstringsystem.groups[].gidRequired
Memberstringsystem.groups[].memberOptional
Privstringsystem.groups[].privilegesOptional

Network Interfaces#

Network interface configuration including VLANs and gateways.

Interface#

FieldTypeJSON PathDescription
Enablestringinterfaces.<name>.enableOptional
Ifstringinterfaces.<name>.ifOptional
Descrstringinterfaces.<name>.descrOptional
Spoofmacstringinterfaces.<name>.spoofmacOptional
InternalDynamicintinterfaces.<name>.internalDynamicOptional
Typestringinterfaces.<name>.typeOptional
Virtualintinterfaces.<name>.virtualOptional
Lockintinterfaces.<name>.lockOptional
MTUstringinterfaces.<name>.mtuOptional
IPAddrstringinterfaces.<name>.ipaddrOptional
IPAddrv6stringinterfaces.<name>.ipaddrv6Optional
Subnetstringinterfaces.<name>.subnetOptional
Subnetv6stringinterfaces.<name>.subnetv6Optional
Gatewaystringinterfaces.<name>.gatewayOptional
Gatewayv6stringinterfaces.<name>.gatewayv6Optional
BlockPrivstringinterfaces.<name>.blockprivOptional
BlockBogonsstringinterfaces.<name>.blockbogonsOptional
DHCPHostnamestringinterfaces.<name>.dhcphostnameOptional
Mediastringinterfaces.<name>.mediaOptional
MediaOptstringinterfaces.<name>.mediaoptOptional
DHCP6IaPdLenintinterfaces.<name>.dhcp6IaPdLenOptional
Track6Interfacestringinterfaces.<name>.track6InterfaceOptional
Track6PrefixIDstringinterfaces.<name>.track6PrefixIdOptional
AliasAddressstringinterfaces.<name>.aliasAddressOptional
AliasSubnetstringinterfaces.<name>.aliasSubnetOptional
DHCPRejectFromstringinterfaces.<name>.dhcprejectfromOptional
DDNSDomainAlgorithmstringinterfaces.<name>.ddnsdomainalgorithmOptional
NumberOptions[]DhcpOptioninterfaces.<name>.numberoptionsOptional
RangeDhcpRangeinterfaces.<name>.range-
Winsserverstringinterfaces.<name>.winsserverOptional
Dnsserverstringinterfaces.<name>.dnsserverOptional
Ntpserverstringinterfaces.<name>.ntpserverOptional
AdvDHCPRequestOptionsstringinterfaces.<name>.advDhcpRequestOptionsOptional
AdvDHCPRequiredOptionsstringinterfaces.<name>.advDhcpRequiredOptionsOptional
AdvDHCP6InterfaceStatementRequestOptionsstringinterfaces.<name>.advDhcp6InterfaceStatementRequestOptionsOptional
AdvDHCP6ConfigFileOverridestringinterfaces.<name>.advDhcp6ConfigFileOverrideOptional
AdvDHCP6IDAssocStatementPrefixPLTimestringinterfaces.<name>.advDhcp6IdAssocStatementPrefixPltimeOptional

Gateway#

FieldTypeJSON PathDescription
XMLNameNamegateways.item[].xmlname-
Interfacestringgateways.item[].interface-
Gatewaystringgateways.item[].gateway-
Namestringgateways.item[].name-
Weightstringgateways.item[].weight-
IPProtocolstringgateways.item[].ipprotocol-
Intervalstringgateways.item[].interval-
Descrstringgateways.item[].descr-
Monitorstringgateways.item[].monitor-
DisabledBoolFlaggateways.item[].disabled-
Createdstringgateways.item[].created-
Updatedstringgateways.item[].updated-
DefaultGWstringgateways.item[].defaultgw-
MonitorDisablestringgateways.item[].monitordisable-
FarGWstringgateways.item[].fargw-

Firewall & Security#

Firewall rules and NAT configuration.

Rule (Firewall)#

FieldTypeJSON PathDescription
XMLNameNamefilter.rule[].xmlname-
Typestringfilter.rule[].type-
Descrstringfilter.rule[].descr-
Interface[]stringfilter.rule[].interface-
IPProtocolstringfilter.rule[].ipprotocol-
StateTypestringfilter.rule[].statetype-
Directionstringfilter.rule[].direction-
Floatingstringfilter.rule[].floating-
QuickBoolFlagfilter.rule[].quick-
Protocolstringfilter.rule[].protocol-
SourceSourcefilter.rule[].source-
DestinationDestinationfilter.rule[].destination-
Targetstringfilter.rule[].target-
Gatewaystringfilter.rule[].gateway-
SourcePortstringfilter.rule[].sourceport-
LogBoolFlagfilter.rule[].log-
DisabledBoolFlagfilter.rule[].disabled-
Trackerstringfilter.rule[].tracker-
MaxSrcNodesstringfilter.rule[].maxsrcnodes-
MaxSrcConnstringfilter.rule[].maxsrcconn-
MaxSrcConnRatestringfilter.rule[].maxsrcconnrate-
MaxSrcConnRatesstringfilter.rule[].maxsrcconnrates-
TCPFlags1stringfilter.rule[].tcpflags1-
TCPFlags2stringfilter.rule[].tcpflags2-
TCPFlagsAnyBoolFlagfilter.rule[].tcpflagsany-
ICMPTypestringfilter.rule[].icmptype-
ICMP6Typestringfilter.rule[].icmp6type-
StateTimeoutstringfilter.rule[].statetimeout-
AllowOptsBoolFlagfilter.rule[].allowopts-
DisableReplyToBoolFlagfilter.rule[].disablereplyto-
NoPfSyncBoolFlagfilter.rule[].nopfsync-
NoSyncBoolFlagfilter.rule[].nosync-
Updated*Updatedfilter.rule[].updated-
Created*Createdfilter.rule[].created-
UUIDstringfilter.rule[].uuid-

NATRule (Outbound)#

FieldTypeJSON PathDescription
XMLNameNamenat.outbound.rule[].xmlname-
Interface[]stringnat.outbound.rule[].interfaceOptional
IPProtocolstringnat.outbound.rule[].ipProtocolOptional
Protocolstringnat.outbound.rule[].protocolOptional
SourceSourcenat.outbound.rule[].source-
DestinationDestinationnat.outbound.rule[].destination-
Targetstringnat.outbound.rule[].targetOptional
SourcePortstringnat.outbound.rule[].sourcePortOptional
NatPortstringnat.outbound.rule[].natPortOptional
PoolOptsstringnat.outbound.rule[].poolOptsOptional
PoolOptsSrcHashKeystringnat.outbound.rule[].poolOptsSrcHashKeyOptional
StaticNatPortBoolFlagnat.outbound.rule[].staticNatPortOptional
NoNatBoolFlagnat.outbound.rule[].noNatOptional
DisabledBoolFlagnat.outbound.rule[].disabledOptional
LogBoolFlagnat.outbound.rule[].logOptional
Descrstringnat.outbound.rule[].descriptionOptional
Categorystringnat.outbound.rule[].categoryOptional
Tagstringnat.outbound.rule[].tagOptional
Taggedstringnat.outbound.rule[].taggedOptional
Updated*Updatednat.outbound.rule[].updatedOptional
Created*Creatednat.outbound.rule[].createdOptional
UUIDstringnat.outbound.rule[].uuidOptional

Services#

System services configuration.

Unbound (DNS)#

FieldTypeJSON PathDescription
Enablestringunbound.enable-
Dnssecstringunbound.dnssecOptional
Dnssecstrippedstringunbound.dnssecstrippedOptional

DHCP Interface#

FieldTypeJSON PathDescription
Enablestringdhcpd.<interface>.enable-
RangeRangedhcpd.<interface>.range-
Gatewaystringdhcpd.<interface>.gateway-
DdnsDomainAlgorithmstringdhcpd.<interface>.ddnsdomainalgorithm-
NumberOptions[]DHCPNumberOptiondhcpd.<interface>.numberoptions-
Winsserverstringdhcpd.<interface>.winsserver-
Dnsserverstringdhcpd.<interface>.dnsserver-
Ntpserverstringdhcpd.<interface>.ntpserver-
Staticmap[]DHCPStaticLeasedhcpd.<interface>.staticmap-
AliasAddressstringdhcpd.<interface>.aliasaddress-
AliasSubnetstringdhcpd.<interface>.aliassubnet-
DHCPRejectFromstringdhcpd.<interface>.dhcprejectfrom-
AdvDHCPPTTimeoutstringdhcpd.<interface>.advdhcppttimeout-
AdvDHCPPTRetrystringdhcpd.<interface>.advdhcpptretry-
AdvDHCPPTSelectTimeoutstringdhcpd.<interface>.advdhcpptselecttimeout-
AdvDHCPPTRebootstringdhcpd.<interface>.advdhcpptreboot-
AdvDHCPPTBackoffCutoffstringdhcpd.<interface>.advdhcpptbackoffcutoff-
AdvDHCPPTInitialIntervalstringdhcpd.<interface>.advdhcpptinitialinterval-
AdvDHCPPTValuesstringdhcpd.<interface>.advdhcpptvalues-
AdvDHCPSendOptionsstringdhcpd.<interface>.advdhcpsendoptions-
AdvDHCPRequestOptionsstringdhcpd.<interface>.advdhcprequestoptions-
AdvDHCPRequiredOptionsstringdhcpd.<interface>.advdhcprequiredoptions-
AdvDHCPOptionModifiersstringdhcpd.<interface>.advdhcpoptionmodifiers-
AdvDHCPConfigAdvancedstringdhcpd.<interface>.advdhcpconfigadvanced-
AdvDHCPConfigFileOverridestringdhcpd.<interface>.advdhcpconfigfileoverride-
AdvDHCPConfigFileOverridePathstringdhcpd.<interface>.advdhcpconfigfileoverridepath-
Track6Interfacestringdhcpd.<interface>.track6interface-
Track6PrefixIDstringdhcpd.<interface>.track6prefixid-
AdvDHCP6InterfaceStatementSendOptionsstringdhcpd.<interface>.advdhcp6interfacestatementsendoptions-
AdvDHCP6InterfaceStatementRequestOptionsstringdhcpd.<interface>.advdhcp6interfacestatementrequestoptions-
AdvDHCP6InterfaceStatementInformationOnlyEnablestringdhcpd.<interface>.advdhcp6interfacestatementinformationonlyenable-
AdvDHCP6InterfaceStatementScriptstringdhcpd.<interface>.advdhcp6interfacestatementscript-
AdvDHCP6IDAssocStatementAddressEnablestringdhcpd.<interface>.advdhcp6idassocstatementaddressenable-
AdvDHCP6IDAssocStatementAddressstringdhcpd.<interface>.advdhcp6idassocstatementaddress-
AdvDHCP6IDAssocStatementAddressIDstringdhcpd.<interface>.advdhcp6idassocstatementaddressid-
AdvDHCP6IDAssocStatementAddressPLTimestringdhcpd.<interface>.advdhcp6idassocstatementaddresspltime-
AdvDHCP6IDAssocStatementAddressVLTimestringdhcpd.<interface>.advdhcp6idassocstatementaddressvltime-
AdvDHCP6IDAssocStatementPrefixEnablestringdhcpd.<interface>.advdhcp6idassocstatementprefixenable-
AdvDHCP6IDAssocStatementPrefixstringdhcpd.<interface>.advdhcp6idassocstatementprefix-
AdvDHCP6IDAssocStatementPrefixIDstringdhcpd.<interface>.advdhcp6idassocstatementprefixid-
AdvDHCP6IDAssocStatementPrefixPLTimestringdhcpd.<interface>.advdhcp6idassocstatementprefixpltime-
AdvDHCP6IDAssocStatementPrefixVLTimestringdhcpd.<interface>.advdhcp6idassocstatementprefixvltime-
AdvDHCP6PrefixInterfaceStatementSLALenstringdhcpd.<interface>.advdhcp6prefixinterfacestatementslalen-
AdvDHCP6AuthenticationStatementAuthNamestringdhcpd.<interface>.advdhcp6authenticationstatementauthname-
AdvDHCP6AuthenticationStatementProtocolstringdhcpd.<interface>.advdhcp6authenticationstatementprotocol-
AdvDHCP6AuthenticationStatementAlgorithmstringdhcpd.<interface>.advdhcp6authenticationstatementalgorithm-
AdvDHCP6AuthenticationStatementRDMstringdhcpd.<interface>.advdhcp6authenticationstatementrdm-
AdvDHCP6KeyInfoStatementKeyNamestringdhcpd.<interface>.advdhcp6keyinfostatementkeyname-
AdvDHCP6KeyInfoStatementRealmstringdhcpd.<interface>.advdhcp6keyinfostatementrealm-
AdvDHCP6KeyInfoStatementKeyIDstringdhcpd.<interface>.advdhcp6keyinfostatementkeyid-
AdvDHCP6KeyInfoStatementSecretstringdhcpd.<interface>.advdhcp6keyinfostatementsecret-
AdvDHCP6KeyInfoStatementExpirestringdhcpd.<interface>.advdhcp6keyinfostatementexpire-
AdvDHCP6ConfigAdvancedstringdhcpd.<interface>.advdhcp6configadvanced-
AdvDHCP6ConfigFileOverridestringdhcpd.<interface>.advdhcp6configfileoverride-
AdvDHCP6ConfigFileOverridePathstringdhcpd.<interface>.advdhcp6configfileoverridepath-

VPN Configuration#

VPN service configuration including OpenVPN and WireGuard.

OpenVPN Server#

FieldTypeJSON PathDescription
XMLNameNameopenvpn.server[].xmlname-
VPN_IDstringopenvpn.server[].vpn_id-
Modestringopenvpn.server[].mode-
Protocolstringopenvpn.server[].protocol-
Dev_modestringopenvpn.server[].dev_mode-
Interfacestringopenvpn.server[].interface-
Local_portstringopenvpn.server[].local_port-
Descriptionstringopenvpn.server[].description-
Custom_optionsstringopenvpn.server[].custom_options-
TLSstringopenvpn.server[].tls-
TLS_typestringopenvpn.server[].tls_type-
Cert_refstringopenvpn.server[].cert_ref-
CA_refstringopenvpn.server[].ca_ref-
CRL_refstringopenvpn.server[].crl_ref-
DH_lengthstringopenvpn.server[].dh_length-
Ecdh_curvestringopenvpn.server[].ecdh_curve-
Cert_depthstringopenvpn.server[].cert_depth-
StrictusercnBoolFlagopenvpn.server[].strictusercn-
Tunnel_networkstringopenvpn.server[].tunnel_network-
Tunnel_networkv6stringopenvpn.server[].tunnel_networkv6-
Remote_networkstringopenvpn.server[].remote_network-
Remote_networkv6stringopenvpn.server[].remote_networkv6-
GwredirBoolFlagopenvpn.server[].gwredir-
Local_networkstringopenvpn.server[].local_network-
Local_networkv6stringopenvpn.server[].local_networkv6-
Maxclientsstringopenvpn.server[].maxclients-
Compressionstringopenvpn.server[].compression-
PasstosBoolFlagopenvpn.server[].passtos-
Client2clientBoolFlagopenvpn.server[].client2client-
Dynamic_ipBoolFlagopenvpn.server[].dynamic_ip-
Topologystringopenvpn.server[].topology-
Serverbridge_dhcpBoolFlagopenvpn.server[].serverbridge_dhcp-
DNS_domainstringopenvpn.server[].dns_domain-
DNS_server1stringopenvpn.server[].dns_server1-
DNS_server2stringopenvpn.server[].dns_server2-
DNS_server3stringopenvpn.server[].dns_server3-
DNS_server4stringopenvpn.server[].dns_server4-
Push_register_dnsBoolFlagopenvpn.server[].push_register_dns-
NTP_server1stringopenvpn.server[].ntp_server1-
NTP_server2stringopenvpn.server[].ntp_server2-
Netbios_enableBoolFlagopenvpn.server[].netbios_enable-
Netbios_ntypestringopenvpn.server[].netbios_ntype-
Netbios_scopestringopenvpn.server[].netbios_scope-
Verbosity_levelstringopenvpn.server[].verbosity_level-
Createdstringopenvpn.server[].created-
Updatedstringopenvpn.server[].updated-

OpenVPN Client#

FieldTypeJSON PathDescription
XMLNameNameopenvpn.client[].xmlname-
VPN_IDstringopenvpn.client[].vpn_id-
Modestringopenvpn.client[].mode-
Protocolstringopenvpn.client[].protocol-
Dev_modestringopenvpn.client[].dev_mode-
Interfacestringopenvpn.client[].interface-
Server_addrstringopenvpn.client[].server_addr-
Server_portstringopenvpn.client[].server_port-
Descriptionstringopenvpn.client[].description-
Custom_optionsstringopenvpn.client[].custom_options-
Cert_refstringopenvpn.client[].cert_ref-
CA_refstringopenvpn.client[].ca_ref-
Compressionstringopenvpn.client[].compression-
Verbosity_levelstringopenvpn.client[].verbosity_level-
Createdstringopenvpn.client[].created-
Updatedstringopenvpn.client[].updated-

Usage Examples#

Accessing Fields in JSON Export#

# Export configuration to JSON
opndossier convert config.xml --format json -o config.json

# Extract hostname using jq
jq '.system.hostname' config.json

# List all interfaces
jq '.interfaces | keys' config.json

# Get firewall rules
jq '.filter.rule[]' config.json

Accessing Fields in YAML Export#

# Export configuration to YAML
opndossier convert config.xml --format yaml -o config.yaml

# Extract hostname using yq
yq '.system.hostname' config.yaml