Site Settings

Read and write every site-level settings section from the terminal

The unifly settings command reads and writes site-level settings: the same sections the controller web UI scatters across its Settings screens (management, DPI, IPS, guest access, radio AI, and the rest). Every subcommand talks to the Session API, so an API key on UniFi OS or session credentials is required.

unifly settings list                 # Summary of every settings section
unifly settings get <KEY>            # One section in full
unifly settings set <KEY> <FIELD> <VALUE>
unifly settings set <KEY> --data '{"field": "value"}'
unifly settings export               # Raw JSON dump of everything

🔗Discovering Sections

settings list shows a summary table of all sections with their key, field count, enabled status, and notable values. Keys are the controller’s internal section names: mgmt, dpi, ips, usg, radio_ai, guest_access, and so on.

unifly settings list
unifly settings get dpi
unifly settings get ips -o json

In table mode, get masks fields prefixed with x_ — those hold credentials and internal secrets. Use -o json to see the real values when you actually need them.

🔗Writing a Field

set performs a read-modify-write: it fetches the current section, patches the one field you named, and PUTs the full section back. Values are parsed as booleans (true/false), then numbers, then fall back to strings.

unifly settings set dpi enabled true
unifly settings set mgmt advanced_feature_enabled false

For multiple fields at once, --data merges a JSON object into the section instead of a single field/value pair (the two forms are mutually exclusive):

unifly settings set usg --data '{"mss_clamp": "auto", "broadcast_ping": false}'

Because the PUT replaces the entire section, unifly strips the _id, site_id, and key metadata fields before sending, so the payload round-trips cleanly.

Settings sections control controller-wide behavior — IPS modes, management access, guest portals. A wrong value can lock you out of a surface or disrupt clients. Read the section with get first, and prefer patching single fields over replaying large --data blobs.

🔗Exporting Everything

settings export dumps every section as raw JSON, regardless of the --output flag — including x_-prefixed credential fields that the table view masks. Treat the output as secret material: never commit it to version control as-is. Strip the sensitive fields first if you want change tracking:

# One-off inspection
unifly settings export | jq '.[] | select(.key == "ips")'

# Sanitized snapshot safe for change tracking
unifly settings export | jq 'walk(if type == "object" then with_entries(select(.key | startswith("x_") | not)) else . end)' > settings-$(date +%F).json

🔗Relationship to Other Commands

Some commands are curated fronts over the same settings machinery: dpi status|enable|disable toggles the dpi section, and vpn settings manages the VPN-related sections with friendlier names. settings is the general-purpose surface for everything else.

🔗Next Steps