Skip to content

Instantly share code, notes, and snippets.

@BenMatheja
Last active August 29, 2015 13:58
Show Gist options
  • Save BenMatheja/10068241 to your computer and use it in GitHub Desktop.
Save BenMatheja/10068241 to your computer and use it in GitHub Desktop.
CUPS Configuration for RaspberryPI
#
# "$Id: cupsd.conf.in 9407 2010-12-09 21:24:51Z mike $"
#
# Sample configuration file for the CUPS scheduler. See "man cupsd.conf" for a
# complete description of this file.
#
# Log general information in error_log - change "warn" to "debug"
# for troubleshooting...
LogLevel warn
# Deactivate CUPS' internal logrotating, as we provide a better one, especially
# LogLevel debug2 gets usable now
MaxLogSize 0
# Only listen for connections from the local machine.
# Hier habe ich statt Listen <IP> einfach den Port eingetragen -
# somit horcht der CUPS Server auf allen verfügbaren interfaces an Port 631
Port 631
Listen /var/run/cups/cups.sock
# Show shared printers on the local network.
Browsing On
BrowseOrder allow,deny
BrowseAllow all
BrowseLocalProtocols CUPS dnssd
# Default authentication type, when authentication is required...
# Ändert hier auf "Basic"
DefaultAuthType Basic
# Web interface setting...
WebInterface Yes
# Restrict access to the server...
# Per Allow all kann jeder, der den PI erreicht auf CUPS zugreifen
<Location />
Order allow,deny
Allow all
</Location>
# Restrict access to the admin pages...
# hier ebenfalls gucken, dass ihr die Maschine erlaubt, die CUPS administrieren soll
# bei mir sind es mehrere Netzwerkgeräte, daher habe ich die Range 192.168.1.1 - 254 auf allow gesetzt
<Location /admin>
Order allow,deny
Allow localhost
Allow 192.168.1.*
</Location>
# Restrict access to configuration files...
# Vice Versa - hier ebenfalls die Allow anpassen
<Location /admin/conf>
AuthType Basic
Require user @SYSTEM
Order allow,deny
Allow localhost
Allow 192.168.1.*
</Location>
# Set the default printer/job policies...
<Policy default>
# Job/subscription privacy...
JobPrivateAccess default
JobPrivateValues default
SubscriptionPrivateAccess default
SubscriptionPrivateValues default
# Job-related operations must be done by the owner or an administrator...
<Limit Create-Job Print-Job Print-URI Validate-Job>
Order deny,allow
</Limit>
<Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cance
l-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job Cancel-My-Jobs Close-Job CUPS-Move-Job CUPS-Ge
t-Document>
Require user @OWNER @SYSTEM
Order deny,allow
</Limit>
# All administration operations require an administrator to authenticate...
<Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default CUPS-Get-Devices>
AuthType Default
Require user @SYSTEM
Order deny,allow
</Limit>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment