sample-config-advanced.json 22 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658
  1. {
  2. "$schema": "https://raw.githubusercontent.com/Ylianst/MeshCentral/master/meshcentral-config-schema.json",
  3. "__comment__": "This is a sample configuration file, all values and sections that start with underscore (_) are ignored. Edit a section and remove the _ in front of the name. Refer to the user's guide for details.",
  4. "settings": {
  5. "_cert": "myserver.mydomain.com",
  6. "_SQLite3": true,
  7. "_acebase": { "_sponsor": true },
  8. "_mongoDb": "mongodb://127.0.0.1:27017",
  9. "_mongoDbName": "meshcentral",
  10. "_mongoDbChangeStream": true,
  11. "_mongoDbBulkOperations": true,
  12. "_WANonly": true,
  13. "_LANonly": true,
  14. "_maintenanceMode": true,
  15. "_certificatePrivateKeyPassword": [ "password1", "password2" ],
  16. "_sessionTime": 60,
  17. "_sessionKey": "MyReallySecretPassword1",
  18. "_sessionSameSite": "strict",
  19. "_dbEncryptKey": "MyReallySecretPassword2",
  20. "_dbRecordsEncryptKey": "MyReallySecretPassword",
  21. "_dbRecordsDecryptKey": "MyReallySecretPassword",
  22. "__dbExpire": "Amount of time to keep various events in the database, in seconds. Below are the default values.",
  23. "_dbExpire": {
  24. "events": 1728000,
  25. "powerevents": 864000,
  26. "statsevents": 2592000
  27. },
  28. "port": 443,
  29. "_portBind": "127.0.0.1",
  30. "_aliasPort": 444,
  31. "_redirPort": 80,
  32. "_redirPortBind": "127.0.0.1",
  33. "_redirAliasPort": 80,
  34. "_relayPort": 453,
  35. "_relayAliasPort": 463,
  36. "_relayDNS": "relay.myserver.mydomain.com",
  37. "_agentPort": 1234,
  38. "_agentPortBind": "127.0.0.1",
  39. "_agentAliasPort": 1234,
  40. "_agentAliasDNS": "agents.myserver.mydomain.com",
  41. "_agentPortTls": false,
  42. "_agentLogDump": true,
  43. "_agentCoreDump": true,
  44. "_agentCoreDumpUsers": "user1,user2",
  45. "_agentSignLock": true,
  46. "_agentTimeStampServer": "http://timestamp.digicert.com",
  47. "_agentTimeStampProxy": "http://1.2.3.4:80",
  48. "_ignoreAgentHashCheck": true,
  49. "_exactPorts": true,
  50. "_allowLoginToken": true,
  51. "_StrictTransportSecurity": true,
  52. "_allowFraming": true,
  53. "_cookieIpCheck": false,
  54. "_cookieEncoding": "hex",
  55. "_webRTC": false,
  56. "_nice404": false,
  57. "_selfUpdate": true,
  58. "_cleanNpmCacheOnUpdate": true,
  59. "_browserPing": 60,
  60. "_browserPong": 60,
  61. "_agentsInRam": false,
  62. "_agentPing": 60,
  63. "_agentPong": 60,
  64. "_orphanAgentUser": "admin",
  65. "_agentIdleTimeout": 150,
  66. "_webPageLengthRandomization": false,
  67. "_compression": true,
  68. "_wsCompression": false,
  69. "_agentWsCompression": true,
  70. "_noAgentUpdate": 1,
  71. "_agentUpdateSystem": 1,
  72. "_temporaryAgentUpdate": false,
  73. "_amtScanner": false,
  74. "_meshScanner": false,
  75. "_meshErrorLogPath": "c:\\tmp",
  76. "_npmPath": "c:\\npm.exe",
  77. "_npmProxy": "http://1.2.3.4:80",
  78. "_allowHighQualityDesktop": true,
  79. "_webPush": { "email": "xxxxx@xxxxx.com" },
  80. "_publicPushNotifications": true,
  81. "_desktopMultiplex": true,
  82. "_ipBlockedUserRedirect": "https://www.youtube.com/watch?v=dQw4w9WgXcQ",
  83. "_userAllowedIP": "127.0.0.1,192.168.1.0/24",
  84. "_userBlockedIP": "127.0.0.1,::1,192.168.0.100",
  85. "_agentAllowedIP": "192.168.0.100/24",
  86. "_agentBlockedIP": "127.0.0.1,::1",
  87. "_authLog": "c:\\temp\\auth.log",
  88. "_InterUserMessaging": [ "user//admin" ],
  89. "_manageAllDeviceGroups": [ "user//admin" ],
  90. "_manageCrossDomain": [ "user//admin" ],
  91. "_localDiscovery": {
  92. "name": "Local server name",
  93. "info": "Information about this server"
  94. },
  95. "_tlsOffload": "127.0.0.1,::1",
  96. "_trustedProxy": "127.0.0.1,::1",
  97. "_mpsPort": 44330,
  98. "_mpsPortBind": "127.0.0.1",
  99. "_mpsAliasPort": 4433,
  100. "_mpsAliasHost": "mps.mydomain.com",
  101. "_mpsTlsOffload": true,
  102. "_mpsHighSecurity": true,
  103. "_no2FactorAuth": true,
  104. "_lockAgentDownload": true,
  105. "_runOnServerStarted": "c:\\tmp\\mcstart.bat",
  106. "_runOnServerUpdated": "c:\\tmp\\mcupdate.bat",
  107. "_runOnServerError": "c:\\tmp\\mcerror.bat",
  108. "_log": "main,web,webrequest,cert",
  109. "_debug": "main,web,webrequest,cert",
  110. "_syslog": "meshcentral",
  111. "_syslogauth": "meshcentral-auth",
  112. "_syslogjson": "meshcentral-json",
  113. "_syslogtcp": "localhost:514",
  114. "_webrtcConfig": {
  115. "iceServers": [
  116. { "urls": "stun:stun.cloudflare.com:3478" },
  117. { "urls": "stun:stun.l.google.com:19302" }
  118. ]
  119. },
  120. "_autoBackup": {
  121. "_mongoDumpPath": "C:\\Program Files\\MongoDB\\Server\\4.2\\bin\\mongodump.exe",
  122. "backupIntervalHours": 24,
  123. "keepLastDaysBackup": 10,
  124. "zipPassword": "MyReallySecretPassword3",
  125. "_backupPath": "C:\\backups",
  126. "_googleDrive": {
  127. "folderName": "MeshCentral-Backups",
  128. "maxFiles": 10
  129. },
  130. "webdav": {
  131. "url": "https://server/remote.php/dav/files/xxxxx@server.com/",
  132. "username": "user",
  133. "password": "pass",
  134. "folderName": "MeshCentral-Backups",
  135. "maxFiles": 10
  136. },
  137. "_s3": {
  138. "accessKey": "MYLONGACCESSKEY",
  139. "secretKey": "MYLONGSECRETKEY",
  140. "endpoint": "myS3.myserver.com",
  141. "port": 9000,
  142. "ssl": false,
  143. "bucketName": "test",
  144. "folderName": "MeshCentral-Backups",
  145. "maxfiles": 10
  146. }
  147. },
  148. "_redirects": {
  149. "meshcommander": "https://www.meshcommander.com/"
  150. },
  151. "__maxInvalidLogin": "Time in minutes, max amount of bad logins from a source IP in the time before logins are rejected.",
  152. "_maxInvalidLogin": {
  153. "time": 10,
  154. "count": 10,
  155. "coolofftime": 10
  156. },
  157. "__maxInvalid2fa": "Time in minutes, max amount of bad two-factor authentication from a source IP in the time before 2FA's are rejected.",
  158. "_maxInvalid2fa": {
  159. "time": 10,
  160. "count": 10,
  161. "coolofftime": 10
  162. },
  163. "watchDog": {
  164. "interval": 100,
  165. "timeout": 400
  166. },
  167. "_AmtProvisioningServer": {
  168. "port": 9971,
  169. "deviceGroup": "mesh//xxxxxxxxxxxxxxxxxxxxx",
  170. "newMebxPassword": "amtpassword",
  171. "trustedFqdn": "sample.com",
  172. "ip": "192.168.1.1"
  173. },
  174. "_crowdsec": {
  175. "url": "http://localhost:8080",
  176. "apiKey": "BOUNCER_API_KEY"
  177. },
  178. "_plugins": { "enabled": true }
  179. },
  180. "_domaindefaults": {
  181. "__comment__": "Any settings in this section is used as default setting for all domains",
  182. "title": "MyDefaultTitle",
  183. "footer": "Default page footer",
  184. "newAccounts": false
  185. },
  186. "domains": {
  187. "": {
  188. "_siteStyle": 2,
  189. "title": "MyServer",
  190. "title2": "Servername",
  191. "_titlePicture": "title-sample.png",
  192. "_loginPicture": "title-sample.png",
  193. "_pwaLogo": "title-sample.png",
  194. "_rootRedirect": "https://www.youtube.com/watch?v=Gs069dndIYk",
  195. "_mobileSite": false,
  196. "_maxDeviceView": 1000,
  197. "_unknownUserRootRedirect": "https://www.youtube.com/watch?v=2Q_ZzBGPdqE",
  198. "_nightMode": 1,
  199. "_scrollToTop": true,
  200. "_userQuota": 1048576,
  201. "_meshQuota": 248576,
  202. "_loginKey": [ "abc", "123" ],
  203. "_agentKey": [ "abc", "123" ],
  204. "_ipkvm": false,
  205. "minify": true,
  206. "_hidePowerTimeline": true,
  207. "_showNotesPanel": true,
  208. "_userSessionsSort": "Username",
  209. "_newAccounts": true,
  210. "_newAccountsUserGroups": [ "ugrp//xxxxxxxxxxxxxxxxx" ],
  211. "_userNameIsEmail": true,
  212. "_newAccountEmailDomains": [ "sample.com" ],
  213. "_newAccountsRights": [ "nonewgroups", "notools" ],
  214. "_welcomeText": "Sample Text on Login Page.",
  215. "_welcomePicture": "mainwelcome.jpg",
  216. "_welcomePictureFullScreen": false,
  217. "_meshMessengerTitle": "MeshMessenger",
  218. "_meshMessengerPicture": "messenger.png",
  219. "___hide__": "Sum of: 1 = Hide header, 2 = Hide tab, 4 = Hide footer, 8 = Hide title, 16 = Hide left bar, 32 = Hide back buttons",
  220. "_hide": 4,
  221. "_footer": "<a href='https://twitter.com/mytwitter'>Twitter</a>",
  222. "_loginfooter": "This is a private server.",
  223. "_allowSavingDeviceCredentials": false,
  224. "_guestDeviceSharing": false,
  225. "_AutoRemoveInactiveDevices": 37,
  226. "_DeviceSearchBarServerAndClientName": false,
  227. "_agentSelfGuestSharing": {
  228. "expire": 120
  229. },
  230. "_certUrl": "https://192.168.2.106:443/",
  231. "_altMessenging": [
  232. {
  233. "name": "Jitsi",
  234. "url": "https://meet.jit.si/myserver-{0}",
  235. "localurl": "https://meet.jit.si/myserver-local-{0}",
  236. "type": "device"
  237. },
  238. {
  239. "name": "Jitsi",
  240. "url": "https://meet.jit.si/myserver-{0}-{1}-{2}-{3}",
  241. "localurl": "https://meet.jit.si/myserver-local-{0}-{1}-{2}-{3}",
  242. "type": "user"
  243. }
  244. ],
  245. "_deviceMeshRouterLinks": {
  246. "rdp": true,
  247. "ssh": true,
  248. "scp": true,
  249. "extralinks": [
  250. {
  251. "name": "HTTP",
  252. "protocol": "http",
  253. "port": 80,
  254. "_ip": "192.168.1.100",
  255. "_filter": [ "mesh/(domainid)/(meshid)", "node/(domainid)/(nodeid)" ]
  256. },
  257. {
  258. "name": "HTTPS",
  259. "protocol": "https",
  260. "port": 443
  261. }
  262. ]
  263. },
  264. "_assistantTypeAgentInvite": 2,
  265. "PreconfiguredScripts": [
  266. {
  267. "name": "Run NotePad as user",
  268. "file": "scripts/notepad.bat",
  269. "type": "bat",
  270. "runas": "user"
  271. },
  272. {
  273. "name": "Run NotePad as agent",
  274. "cmd": "notepad.exe",
  275. "type": "bat",
  276. "runas": "agent"
  277. },
  278. {
  279. "name": "Run echo",
  280. "cmd": "echo \"hello world\"",
  281. "type": "sh",
  282. "runas": "agent"
  283. },
  284. {
  285. "name": "Agent Update",
  286. "cmd": "agentupdate",
  287. "type": "agent"
  288. }
  289. ],
  290. "PreconfiguredRemoteInput": [
  291. {
  292. "name": "CompanyUrl",
  293. "value": "https://help.mycompany.com/"
  294. },
  295. {
  296. "name": "Any Text",
  297. "value": "Any text\r"
  298. },
  299. {
  300. "name": "Welcome",
  301. "value": "Default welcome text"
  302. }
  303. ],
  304. "myServer": {
  305. "Backup": false,
  306. "Restore": false,
  307. "Upgrade": false,
  308. "ErrorLog": false,
  309. "Console": false,
  310. "Trace": false,
  311. "Config": false
  312. },
  313. "_passwordRequirements": {
  314. "min": 8,
  315. "max": 128,
  316. "upper": 1,
  317. "lower": 1,
  318. "numeric": 1,
  319. "nonalpha": 1,
  320. "reset": 90,
  321. "force2factor": true,
  322. "skip2factor": "127.0.0.1,192.168.2.0/24",
  323. "oldPasswordBan": 5,
  324. "banCommonPasswords": false,
  325. "twoFactorTimeout": 300
  326. },
  327. "_twoFactorCookieDurationDays": 30,
  328. "_agentInviteCodes": true,
  329. "_agentNoProxy": true,
  330. "_lockAgentDownload": true,
  331. "_geoLocation": true,
  332. "_ipLocation": true,
  333. "_novnc": false,
  334. "_mstsc": false,
  335. "_ssh": true,
  336. "_WebEmailsPath": "/myserver/email-templates",
  337. "_consentMessages": {
  338. "title": "MeshCentral",
  339. "desktop": "{0} requesting remote desktop access. Grant access?",
  340. "terminal": "{0} requesting remote terminal access. Grant access?",
  341. "files": "{0} requesting remote files access. Grant access?",
  342. "consentTimeout": 30,
  343. "autoAcceptOnTimeout": false,
  344. "oldStyle": true
  345. },
  346. "_notificationMessages": {
  347. "title": "MeshCentral",
  348. "desktop": "{0} started a remote desktop session.",
  349. "terminal": "{0} started a remote terminal session.",
  350. "files": "{0} started a remote files session."
  351. },
  352. "_agentCustomization": {
  353. "displayName": "Company® Product™",
  354. "description": "Company® Product™ agent for remote monitoring, management and assistance.",
  355. "companyName": "Company®",
  356. "serviceName": "companyagent",
  357. "image": "agent-logo.png",
  358. "fileName": "compagnyagent"
  359. },
  360. "_agentFileInfo": {
  361. "icon": "agent.ico",
  362. "filedescription": "sample_filedescription",
  363. "fileversion": "0.1.2.3",
  364. "internalname": "sample_internalname",
  365. "legalcopyright": "sample_legalcopyright",
  366. "originalfilename": "sample_originalfilename",
  367. "productname": "sample_productname",
  368. "productversion": "v0.1.2.3"
  369. },
  370. "_assistantCustomization": {
  371. "title": "Company® Product™",
  372. "image": "assistant-logo.png",
  373. "fileName": "compagny"
  374. },
  375. "_androidCustomization": {
  376. "title": "Company® Product™",
  377. "subtitle": "Product Subtitle™",
  378. "image": "assistant-logo.png"
  379. },
  380. "_userAllowedIP": "127.0.0.1,192.168.1.0/24",
  381. "_userBlockedIP": "127.0.0.1,::1,192.168.0.100",
  382. "_agentAllowedIP": "192.168.0.100/24",
  383. "_agentBlockedIP": "127.0.0.1,::1",
  384. "___userSessionIdleTimeout__": "Number of user idle minutes before auto-disconnect",
  385. "_userSessionIdleTimeout": 30,
  386. "userConsentFlags": {
  387. "desktopnotify": true,
  388. "terminalnotify": true,
  389. "filenotify": true,
  390. "desktopprompt": true,
  391. "terminalprompt": true,
  392. "fileprompt": true,
  393. "desktopprivacybar": true
  394. },
  395. "_urlSwitching": false,
  396. "_desktopPrivacyBarText": "Privacy bar: {0}, {1}",
  397. "_limits": {
  398. "_maxDevices": 100,
  399. "_maxUserAccounts": 100,
  400. "_maxUserSessions": 100,
  401. "_maxAgentSessions": 100,
  402. "maxSingleUserSessions": 10
  403. },
  404. "_terminal": {
  405. "_linuxshell": "login",
  406. "launchCommand": {
  407. "linux": "clear\necho \"Hello Linux\"\n",
  408. "darwin": "clear\necho \"Hello MacOS\"\n",
  409. "freebsd": "clear\necho \"Hello FreeBSD\"\n"
  410. }
  411. },
  412. "_amtScanOptions": [
  413. "LabNetwork 192.168.15.0/23",
  414. "SalesNetwork 192.168.8.0/24"
  415. ],
  416. "_amtAcmActivation": {
  417. "log": "amtactivation.log",
  418. "strictCommonName": false,
  419. "certs": {
  420. "mycertname": {
  421. "certfiles": [
  422. "amtacm-leafcert.crt",
  423. "amtacm-intermediate1.crt",
  424. "amtacm-intermediate2.crt",
  425. "amtacm-rootcert.crt"
  426. ],
  427. "keyfile": "amtacm-leafcert.key"
  428. }
  429. }
  430. },
  431. "_amtManager": {
  432. "adminAccounts": [
  433. {
  434. "user": "admin",
  435. "pass": "MyP@ssw0rd"
  436. }
  437. ],
  438. "environmentDetection": [
  439. "domain1.com",
  440. "domain2.com",
  441. "domain3.com",
  442. "domain4.com"
  443. ],
  444. "wifiProfiles": [
  445. {
  446. "name": "Profile1",
  447. "ssid": "MyStation1",
  448. "authentication": "wpa2-psk",
  449. "encryption": "ccmp-aes",
  450. "password": "MyP@ssw0rd"
  451. }
  452. ]
  453. },
  454. "_redirects": {
  455. "meshcommander": "https://www.meshcommander.com/"
  456. },
  457. "_yubikey": {
  458. "id": "0000",
  459. "secret": "xxxxxxxxxxxxxxxxxxxxx",
  460. "_proxy": "http://myproxy.domain.com:80"
  461. },
  462. "_httpHeaders": {
  463. "Strict-Transport-Security": "max-age=360000",
  464. "x-frame-options": "SAMEORIGIN"
  465. },
  466. "_agentConfig": [ "coreDumpEnabled=1" ],
  467. "_assistantConfig": [ "disableUpdate=1" ],
  468. "_sessionRecording": {
  469. "_onlySelectedUsers": true,
  470. "_onlySelectedUserGroups": true,
  471. "_onlySelectedDeviceGroups": true,
  472. "_filepath": "C:\\temp",
  473. "_index": true,
  474. "_maxRecordings": 10,
  475. "_maxRecordingDays": 15,
  476. "_maxRecordingSizeMegabytes": 3,
  477. "__protocols__": "Is an array: 1 = Terminal, 2 = Desktop, 5 = Files, 100 = Intel AMT WSMAN, 101 = Intel AMT Redirection, 200 = Messenger",
  478. "protocols": [ 1, 2, 101 ]
  479. },
  480. "_authStrategies": {
  481. "__comment__": "This section is used to allow users to login using other accounts. You will need to get an API key from the services and register callback URL's",
  482. "twitter": {
  483. "_callbackurl": "https://server/auth-twitter-callback",
  484. "newAccounts": true,
  485. "_newAccountsUserGroups": [ "ugrp//xxxxxxxxxxxxxxxxx" ],
  486. "clientid": "xxxxxxxxxxxxxxxxxxxxxxx",
  487. "clientsecret": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
  488. },
  489. "google": {
  490. "_callbackurl": "https://server/auth-google-callback",
  491. "newAccounts": true,
  492. "_newAccountsUserGroups": [ "ugrp//xxxxxxxxxxxxxxxxx" ],
  493. "clientid": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.apps.googleusercontent.com",
  494. "clientsecret": "xxxxxxxxxxxxxxxxxxxxxxx"
  495. },
  496. "github": {
  497. "_callbackurl": "https://server/auth-github-callback",
  498. "newAccounts": true,
  499. "_newAccountsUserGroups": [ "ugrp//xxxxxxxxxxxxxxxxx" ],
  500. "clientid": "xxxxxxxxxxxxxxxxxxxxxxx",
  501. "clientsecret": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
  502. },
  503. "azure": {
  504. "_callbackurl": "https://server/auth-azure-callback",
  505. "newAccounts": true,
  506. "_newAccountsUserGroups": [ "ugrp//xxxxxxxxxxxxxxxxx" ],
  507. "clientid": "00000000-0000-0000-0000-000000000000",
  508. "clientsecret": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx",
  509. "tenantid": "00000000-0000-0000-0000-000000000000"
  510. },
  511. "jumpcloud": {
  512. "_callbackurl": "https://server/auth-jumpcloud-callback",
  513. "newAccounts": true,
  514. "_newAccountsUserGroups": [ "ugrp//xxxxxxxxxxxxxxxxx" ],
  515. "entityid": "meshcentral",
  516. "idpurl": "https://sso.jumpcloud.com/saml2/saml2",
  517. "cert": "jumpcloud-saml.pem"
  518. },
  519. "saml": {
  520. "_callbackurl": "https://server/auth-saml-callback",
  521. "_disableRequestedAuthnContext": true,
  522. "newAccounts": true,
  523. "_newAccountsUserGroups": [ "ugrp//xxxxxxxxxxxxxxxxx" ],
  524. "_newAccountsRights": [ "nonewgroups", "notools" ],
  525. "entityid": "meshcentral",
  526. "idpurl": "https://server/saml2",
  527. "cert": "saml.pem"
  528. },
  529. "oidc": {
  530. "issuer": {
  531. "issuer": "https://sso.server.com",
  532. "end_session_endpoint": "https://sso.server.com/logout"
  533. },
  534. "client": {
  535. "client_id": "00000000-0000-0000-0000-000000000000",
  536. "client_secret": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
  537. },
  538. "groups": {
  539. "required": [ "groupA", "groupB", "groupC" ],
  540. "siteadmin": [ "groupA" ],
  541. "sync": {
  542. "enable": true,
  543. "filter": [ "groupB", "groupC" ]
  544. }
  545. },
  546. "newAccounts": true
  547. }
  548. }
  549. },
  550. "_customer1": {
  551. "_dns": "customer1.myserver.com",
  552. "_title": "Customer1",
  553. "_title2": "TestServer",
  554. "_newAccounts": 1,
  555. "_auth": "sspi",
  556. "__auth": "ldap",
  557. "_LDAPUserName": "gecos",
  558. "_LDAPUserKey": "uid",
  559. "_LDAPUserEmail": "otherMail",
  560. "_LDAPUserGroups": "memberOf",
  561. "_LDAPSiteAdminGroups": [ "CN=Domain Admins,CN=Users,DC=sample,DC=com" ],
  562. "_LDAPUserRequiredGroupMembership": [ "CN=Domain Admins,CN=Users,DC=sample,DC=com" ],
  563. "_LDAPSyncWithUserGroups": { "filter": [ "CN=Domain Admins" ] },
  564. "_LDAPOptions": {
  565. "URL": "ldap://1.2.3.4:389",
  566. "BindDN": "CN=svc_meshcentral,CN=Users,DC=meshcentral,DC=local",
  567. "BindCredentials": "Password.1",
  568. "SearchBase": "DC=meshcentral,DC=local",
  569. "SearchFilter": "(sAMAccountName={{username}})"
  570. },
  571. "_footer": "Test",
  572. "_certUrl": "https://192.168.2.106:443/"
  573. },
  574. "_info": {
  575. "_share": "C:\\ExtraWebSite"
  576. }
  577. },
  578. "_letsencrypt": {
  579. "__comment__": "Requires NodeJS 8.x or better, Go to https://letsdebug.net/ first before trying Let's Encrypt.",
  580. "email": "myemail@myserver.com",
  581. "names": "myserver.com,customer1.myserver.com",
  582. "skipChallengeVerification": false,
  583. "production": false,
  584. "zerossl": {
  585. "kid": "a1b2c3d4e5",
  586. "hmacKey": "a1b2c3d4e5"
  587. }
  588. },
  589. "_peers": {
  590. "serverId": "server1",
  591. "servers": {
  592. "server1": { "url": "wss://192.168.2.133:443/" },
  593. "server2": { "url": "wss://192.168.1.106:443/" }
  594. }
  595. },
  596. "_smtp": {
  597. "host": "smtp.myserver.com",
  598. "port": 25,
  599. "from": "myemail@myserver.com",
  600. "__tls__": "When 'tls' is set to true, TLS is used immidiatly when connecting. For SMTP servers that use TLSSTART, set this to 'false' and TLS will still be used.",
  601. "tls": false,
  602. "___tlscertcheck__": "When set to false, the TLS certificate of the SMTP server is not checked.",
  603. "_tlscertcheck": false,
  604. "__tlsstrict__": "When set to true, TLS cypher setup is more limited, SSLv2 and SSLv3 are not allowed.",
  605. "_tlsstrict": true,
  606. "_emailDelaySeconds": 300
  607. },
  608. "_sendgrid": {
  609. "from": "myemail@myserver.com",
  610. "apikey": "***********",
  611. "_emailDelaySeconds": 300
  612. },
  613. "_sendmail": {
  614. "newline": "unix",
  615. "path": "/usr/sbin/sendmail",
  616. "_args": [ "-f", "foo@example.com" ],
  617. "_emailDelaySeconds": 300
  618. },
  619. "_sms": {
  620. "provider": "twilio",
  621. "sid": "ACxxxxxxxxx",
  622. "auth": "xxxxxxx",
  623. "from": "+1-555-555-5555"
  624. },
  625. "__sms": {
  626. "provider": "plivo",
  627. "id": "xxxxxxx",
  628. "token": "xxxxxxx",
  629. "from": "1-555-555-5555"
  630. },
  631. "___sms": {
  632. "provider": "telnyx",
  633. "apikey": "xxxxxxx",
  634. "from": "1-555-555-5555"
  635. },
  636. "____sms": {
  637. "provider": "url",
  638. "url": "http://example.com/sms.ashx?phone={{phone}}&message={{message}}"
  639. },
  640. "_messaging": {
  641. "_telegram": {
  642. "apiid": 0,
  643. "apihash": "xxxxxxxxxxxxxxxxxxxxxxxxxxxx",
  644. "session": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx",
  645. "useWSS": "false",
  646. "connectionRetries": 60
  647. },
  648. "_discord": {
  649. "serverurl": "https://discord.gg/xxxxxxxxx",
  650. "token": "xxxxxxxxxxxxxxxxxxxxxxxxxxxx.xxxxxxxxxxxxxxxxxxxxxxxxxxxx"
  651. },
  652. "_ntfy": {
  653. "host": "https://[my]ntfy.sh",
  654. "userurl": "https://[my]ntfy.sh/userhelp",
  655. "authorization": "Basic xxxxxxxxxxxxxxxxxxxx"
  656. }
  657. }
  658. }