text
warda [serve] [flags] run the DNS server
warda healthcheck [-url URL] [-dns host:port]
exit 0 when the local instance is healthy; -dns also
asks the DNS of Warda a name it answers itself
(keepalived, high availability)
warda ha-notify ... record the state of VRRP given by keepalived
(high availability; run by keepalived)
warda lookup [-server host:port] [-type A] name
warda version
warda update [-check] install the latest signed release (.deb or .rpm package, as root);
-check only looks, also with Docker and the archive
warda backup-usb copy the nightly backups to a USB drive (as root)
warda system -service restart or power off the box, or update its system (Raspberry Pi
image), when asked (warda-system.service)
warda help every commandAdministration, on the machine that runs Warda (sudo warda … with the
Debian package, docker exec warda warda … with Docker):
text
warda status last 24 hours per device, learning progress
warda devices devices seen on the network
warda device -name "Living room TV" -kind server 3
name a device, say what it is (normal, phone, tablet,
computer, server, firewall, network, printer, tv,
console, speaker, camera, iot, nas, watch)
warda suggestions what Warda suggests to block, and why
warda accept 12 15 block these suggestions
warda reject 13 dismiss a suggestion for good
warda allow DOMAIN unblock a domain (and its subdomains), or '/regex/'
warda block DOMAIN block a domain (and its subdomains), or '/regex/'
warda unrule DOMAIN remove your rule
warda rules your rules
warda learn run the analysis now
warda people people of the household, their devices and the
devices they share (column SHARED DEVICES)
warda pause [-minutes 15] DEVICE_ID | -all
filtering off for a device (or all), 15 min at most
warda resume DEVICE_ID | -all
filtering back on
warda log administration log
warda token [-rotate] API token and HTTPS certificate fingerprint
warda diagnostic [-send] [-o FILE]
the diagnostic of the box, to a file, or sent to the
team of Warda with its code (see Diagnostic)
warda setup-info default password and first sign-in steps
warda https-redirect [on|off]
where the interface asked over HTTP is sent: to
https://NAME once the box has a name with a trusted
certificate (on, the default); off: to HTTPS at the
address typed, as before (when a browser cannot
reach the name); without argument, the state and why
warda accounts accounts of the web interface (with their role)
warda reset-password [-mfa] NAME
temporary password for an account (-mfa: second
step off too); admin: the emergency account