use Asciidoc headings in configuration files

not Markdown ones.  the output is slightly different.

perl -p -i -e 's/^#  # /#  = /;s/^#  ## /#  == /;s/^#  ### /#  === /;s/^#  #### /#  ==== /;' $(git grep -l '^#  #' raddb/)

Author: alandekok

doc/antora/modules/reference/pages/raddb/clients.conf.adoc

@@ -10,7 +10,7 @@ security, packets from other IP addresses are ignored.
 
 
 
-## Client subsection
+== Client subsection
 
 A client is defined via a section called `client NAME { ... }`.
 The NAME field is mandatory, and is used as the "short name" of the
@@ -249,7 +249,7 @@ We *strongly recommend* that you set an idle timeout.
 
 
 
-## Client examples
+== Client examples
 
 
 
@@ -312,5 +312,5 @@ client localhost_ipv6 {
 #}
 ```
 
-// Copyright (C) 2025 Network RADIUS SAS.  Licenced under CC-by-NC 4.0.
+// Copyright (C) 2026 Network RADIUS SAS.  Licenced under CC-by-NC 4.0.
 // This documentation was developed by Network RADIUS SAS.

doc/antora/modules/reference/pages/raddb/debug.conf.adoc

@@ -12,7 +12,7 @@ packaging system. It is only for developers.
 
 
 
-## The main configuration file.
+== The main configuration file.
 
 
 == Default Configuration
@@ -21,5 +21,5 @@ packaging system. It is only for developers.
 $INCLUDE ${confdir}/radiusd.conf
 ```
 
-// Copyright (C) 2025 Network RADIUS SAS.  Licenced under CC-by-NC 4.0.
+// Copyright (C) 2026 Network RADIUS SAS.  Licenced under CC-by-NC 4.0.
 // This documentation was developed by Network RADIUS SAS.

doc/antora/modules/reference/pages/raddb/dictionary.adoc

@@ -2,7 +2,7 @@
 
 
 
-# Local dictionary definitions
+= Local dictionary definitions
 
 This is the local dictionary file which can be
 edited by local administrators.  It will be loaded
@@ -26,7 +26,7 @@ This file exists for two purposes:
    process of migrating from version 3 to version 4.  We
    recommend using the new names where possible.
 
-## Dictionary loading order
+== Dictionary loading order
 
 FreeRADIUS will automatically load the main dictionary files from:
 
@@ -37,15 +37,15 @@ dictionaries from this file.  However, if the `$INCLUDE` line is
 here, nothing bad will happen.
 
 
-## Dictionaries per Virtual Server
+== Dictionaries per Virtual Server
 
 v4 also supports a `dictionary { ... }` subsection in a virtual
 server.  If the attributes are used only in one virtual server,
 they should be defined there.
 
 
 
-## Editing the dictionary
+== Editing the dictionary
 
 Any new/changed attributes *must* be placed in this file.
 The pre-defined dictionaries *should not* be edited.
@@ -73,15 +73,15 @@ See https://tools.ietf.org/html/rfc6158[RFC 6158] for more details:
   http://ietf.org/rfc/rfc6158.txt
 
 
-## Example attributes
+== Example attributes
 
 The attributes below are examples. You should edit them as
 required, or add your own.
 
 
 
 
-## v3 Compatibility and Migration
+== v3 Compatibility and Migration
 
 By default, the server does NOT load the v3 names.  While this
 behavior is done to simplify the server configuration, it can also
@@ -177,5 +177,5 @@ editor backup files, and others which are known to not be real files.
 $INCLUDE- dictionary.d/
 ```
 
-// Copyright (C) 2025 Network RADIUS SAS.  Licenced under CC-by-NC 4.0.
+// Copyright (C) 2026 Network RADIUS SAS.  Licenced under CC-by-NC 4.0.
 // This documentation was developed by Network RADIUS SAS.

doc/antora/modules/reference/pages/raddb/mods-available/always.adoc

@@ -13,7 +13,7 @@ specified, is 'fail'.
 
 
 
-## Syntax
+== Syntax
 
 
 rcode:: Return code.
@@ -52,7 +52,7 @@ simulates the user having multilink sessions.
 
 
 
-## xlat for peeking and poking the status
+== xlat for peeking and poking the status
 
 An xlat based on the instance name can be called to change the status
 returned by the instance.
@@ -77,7 +77,7 @@ current status without affecting it call the xlat with an empty argument:
 
 
 
-## Configuration Settings
+== Configuration Settings
 
 The following default instances allow the use of return codes like
 `reject` or `ok` in `unlang` policies.
@@ -120,5 +120,5 @@ always updated {
 }
 ```
 
-// Copyright (C) 2025 Network RADIUS SAS.  Licenced under CC-by-NC 4.0.
+// Copyright (C) 2026 Network RADIUS SAS.  Licenced under CC-by-NC 4.0.
 // This documentation was developed by Network RADIUS SAS.

doc/antora/modules/reference/pages/raddb/mods-available/attr_filter.adoc

@@ -51,7 +51,7 @@ them, which should be rare). The value field uses standard regular expression sy
 | !~       | Regular Expression Not Equal
 |===
 
-## Syntax
+== Syntax
 
 The configuration items are:
 
@@ -69,13 +69,13 @@ filename:: The `filename` with the attributes to filter.
 
 
 
-## Configuration Settings
+== Configuration Settings
 
 The following default instances.
 
 
 
-### pre-proxy
+=== pre-proxy
 
 Filters the attributes in the packets we send to
 the RADIUS home servers.
@@ -84,7 +84,7 @@ Add this before calling rlm_radius for proxying.
 
 
 
-### post-proxy
+=== post-proxy
 
 Filters the attributes received in replies from proxied
 servers, to make sure we send back to our RADIUS client
@@ -94,21 +94,21 @@ Add this after calling `rlm_radius` for proxying.
 
 
 
-### access_reject
+=== access_reject
 
 Enforce RFC requirements on the contents of `link:https://freeradius.org/rfc/rfc2865.html#Access-Reject[Access-Reject]`
 packets. This should be called from `send Access-Reject`.
 
 
 
-### access_challenge
+=== access_challenge
 
 Enforce RFC requirements on the contents of `link:https://freeradius.org/rfc/rfc2865.html#Access-Challenge[Access-Challenge]`
 packets. This is called from `send Access-Challenge`.
 
 
 
-### accounting_response
+=== accounting_response
 
 Enforce RFC requirements on the contents of the
 `link:https://freeradius.org/rfc/rfc2866.html#Accounting-Response[Accounting-Response]` packets. Called from the
@@ -145,5 +145,5 @@ attr_filter attr_filter.accounting_response {
 }
 ```
 
-// Copyright (C) 2025 Network RADIUS SAS.  Licenced under CC-by-NC 4.0.
+// Copyright (C) 2026 Network RADIUS SAS.  Licenced under CC-by-NC 4.0.
 // This documentation was developed by Network RADIUS SAS.

doc/antora/modules/reference/pages/raddb/mods-available/brotli.adoc

@@ -9,11 +9,11 @@ decompressing data using the Brotli algorithm.
 
 
 
-## Configuration Settings
+== Configuration Settings
 
 
 
-### An example configuration
+=== An example configuration
 
 
 mode:: The compression mode to use.
@@ -66,11 +66,11 @@ The default is `no`.
 
 
 
-## Expansions
+== Expansions
 
 The rlm_ldap provides the below xlat's functions.
 
-### %<inst>.compress(...)
+=== %<inst>.compress(...)
 
 Ingests uncomprssed data and returns the compressed data.
 
@@ -89,7 +89,7 @@ Ingests uncomprssed data and returns the compressed data.
 \0332\000\210\304&G(ɋ\031]\372l\265`\003\016\330\023L\002\332\375\344\b^\241\003\177YԜ浣D\254\223\230\002
 ```
 
-### %<inst>.decompress(...)
+=== %<inst>.decompress(...)
 
 Ingests compressed data and emits the uncompressed data.
 
@@ -125,5 +125,5 @@ brotli {
 }
 ```
 
-// Copyright (C) 2025 Network RADIUS SAS.  Licenced under CC-by-NC 4.0.
+// Copyright (C) 2026 Network RADIUS SAS.  Licenced under CC-by-NC 4.0.
 // This documentation was developed by Network RADIUS SAS.

doc/antora/modules/reference/pages/raddb/mods-available/cache.adoc

@@ -26,7 +26,7 @@ via `cache <nameN> { ... }`.
 
 
 
-## Configuration Settings
+== Configuration Settings
 
 
 driver::
@@ -59,7 +59,7 @@ Driver specific options are:
 
 
 
-### Htrie cache driver
+=== Htrie cache driver
 
 
 type:: Htrie backend type
@@ -74,7 +74,7 @@ type:: Htrie backend type
 |===
 
 
-### Memcached cache driver
+=== Memcached cache driver
 
 
 options:: Memcached configuration options.
@@ -88,7 +88,7 @@ pool:: Connection pool.
 
 
 
-### Redis cache driver
+=== Redis cache driver
 
 
 server:: Redis Server name.
@@ -249,6 +249,7 @@ control.Cache-TTL:: Sets the TTL of an entry to be created, or
 | `Cache-TTL` of `0`   | Expire the existing entry and create a new one.
 |===
 
+
 control.Cache-Status-Only:: If present and set to `yes` will
 prevent a new entry from being created, and existing entries from
 being merged. It will also alter the module's return codes.
@@ -437,5 +438,5 @@ cache {
 }
 ```
 
-// Copyright (C) 2025 Network RADIUS SAS.  Licenced under CC-by-NC 4.0.
+// Copyright (C) 2026 Network RADIUS SAS.  Licenced under CC-by-NC 4.0.
 // This documentation was developed by Network RADIUS SAS.

doc/antora/modules/reference/pages/raddb/mods-available/cache_eap.adoc

@@ -50,7 +50,7 @@ IP/port), but with the same contents.
 
 
 
-## Configuration Settings
+== Configuration Settings
 
 
 key:: Cache key.
@@ -77,5 +77,5 @@ cache cache_eap {
 }
 ```
 
-// Copyright (C) 2025 Network RADIUS SAS.  Licenced under CC-by-NC 4.0.
+// Copyright (C) 2026 Network RADIUS SAS.  Licenced under CC-by-NC 4.0.
 // This documentation was developed by Network RADIUS SAS.

doc/antora/modules/reference/pages/raddb/mods-available/cache_tls.adoc

@@ -25,11 +25,11 @@ configuration.
 
 
 
-## Configuration Settings
+== Configuration Settings
 
 
 
-### TLS Session Configuration
+=== TLS Session Configuration
 
 
 driver:: `cache` driver.
@@ -48,7 +48,7 @@ update { ... }::
 
 
 
-### OCSP Session Configuration
+=== OCSP Session Configuration
 
 In addition to TLS sessions, the OCSP queries can be cached.
 
@@ -85,5 +85,5 @@ cache cache_ocsp {
 }
 ```
 
-// Copyright (C) 2025 Network RADIUS SAS.  Licenced under CC-by-NC 4.0.
+// Copyright (C) 2026 Network RADIUS SAS.  Licenced under CC-by-NC 4.0.
 // This documentation was developed by Network RADIUS SAS.

doc/antora/modules/reference/pages/raddb/mods-available/chap.adoc

@@ -11,7 +11,7 @@ CHAP authentication requires access to the Password.Cleartext for the user.
 Standard Unix system authentication or passwords encrypted via `crypt()`
 are not compatible with CHAP.
 
-## Configuration Settings
+== Configuration Settings
 
 This module takes no configuration.
 
@@ -24,5 +24,5 @@ chap {
 }
 ```
 
-// Copyright (C) 2025 Network RADIUS SAS.  Licenced under CC-by-NC 4.0.
+// Copyright (C) 2026 Network RADIUS SAS.  Licenced under CC-by-NC 4.0.
 // This documentation was developed by Network RADIUS SAS.