
**Section type** '``medium``':  Configuration entry for an external medium.


*Required properties:*

``mirrors`` : ``<string>``
  IDs of the mirrors to sync to the medium. Can be specified more than once.
``mountpoint`` : ``<string>``
  Mountpoint where medium is available on mirroring system.
``sync`` : ``<boolean>``
  Whether to write new files using FSYNC.
``verify-mode`` : ``<string>``
  How to check files already in the pool: none, size, or full (checksum). Also
  accepts true (full) and false (none) for compatibility.

**Section type** '``mirror``':  Configuration entry for a mirrored repository.


*Required properties:*

``architectures`` : ``<string>``
  List of architectures that should be mirrored. Can be specified more than
  once.
``base-dir`` : ``<string>``
  Path to directory containing mirrored repository pool. Can be shared by
  multiple mirrors.
``key-path`` : ``<string>``
  Path to public key file for verifying repository integrity.
``repository`` : ``<string>``
  Single repository definition in sources.list format.
``sync`` : ``<boolean>``
  Whether to write new files using FSYNC.
``verify-mode`` : ``<string>``
  How to check files already in the pool: none, size, or full (checksum). Also
  accepts true (full) and false (none) for compatibility.

*Optional properties:*

``ignore-errors`` : ``<boolean>   (default=false)``
  Whether to downgrade download errors to warnings.
``latest-symlink`` : ``<boolean>   (default=true)``
  Whether to maintain a symlink pointing to the last successful snapshot.
``latest-symlink-name`` : ``<string>   (default=last)``
  Name of the latest-snapshot symlink.
``request-timeout`` : ``<integer> (0 - 604800)``
  Maximum duration of a repository request in seconds, or 0 for no limit. By
  default, allow 15 minutes plus the transfer time at 64 KiB/s when the expected
  file size is known.
``use-subscription`` : ``pve|pbs|pmg|pom``
  Access the repository with the active subscription key of this product
  (required for Proxmox enterprise repositories).
``weak-crypto`` : ``[[allow-sha1=<1|0>] [,min-dsa-key-size=<integer>] [,min-rsa-key-size=<integer>]]``
  Whether to allow using weak cryptography algorithms or parameters, deviating
  from the default policy.

  ``allow-sha1`` = ``<boolean>   (default=false)``
    Whether to allow SHA-1 based signatures
  ``min-dsa-key-size`` = ``<integer>``
    Whether to lower the key size cutoff for DSA-based signatures
  ``min-rsa-key-size`` = ``<integer>``
    Whether to lower the key size cutoff for RSA-based signatures

``skip-packages`` : ``<string>``
  Package names to skip. Supports glob patterns. Can be specified more than
  once.
``skip-sections`` : ``<string>``
  Sections which should be skipped. Can be specified more than once.

**Section type** '``subscription``':  Subscription key used for accessing enterprise repositories and for offline
subscription activation/renewal.


*Required properties:*

``server-id`` : ``<string>``
  Server ID.

*Optional properties:*

``description`` : ``<string>``
  Description, e.g. which system this key is deployed on
``info`` : ``<string>``
  base64 encoded subscription info - update with 'refresh' command.

