|
---
|
|
# Put here the public ip for your organisation
|
|
public_ip: 0.0.0.0
|
|
# Put here the domain for your organisation
|
|
domain: "example.com"
|
|
# Put here an email address to receive Let's Encrypt communications.
|
|
letsencrypt_email: 'admin@example.com'
|
|
|
|
# Put the TLS X.509 Subject Prefix (before OU=)
|
|
x509_subject_prefix: '/C=IT/L=Firenze/O=Example'
|
|
# Here the same in LDAP (and reversed) format
|
|
x509_ldap_suffix: 'o=Example,l=Firenze,c=it'
|
|
|
|
# Put here the public key of the user CAs.
|
|
# The first one will be used also to check if host certificate are
|
|
# updated.
|
|
user_ca_keys:
|
|
- "ssh-ed25519 AAAA(...) Active Production key"
|
|
- "ssh-ed25519 AAAA(...) Older not-expired key"
|
|
# - "ssh-ed25519 AAAA(...) Revoked key"
|
|
|
|
# Put TLS Certificate of your Root Certification Authority
|
|
tls_root_ca: |
|
|
-----BEGIN CERTIFICATE-----
|
|
#########################
|
|
-----END CERTIFICATE-----
|
|
# Put TLS Certificate for OpenVPN Server Intermediate CA
|
|
tls_vpn_user_ca: |
|
|
-----BEGIN CERTIFICATE-----
|
|
#########################
|
|
-----END CERTIFICATE-----
|
|
# Put TLS Certificate for OpenVPN Users Intermediate CA
|
|
tls_vpn_server_ca: |
|
|
-----BEGIN CERTIFICATE-----
|
|
##########################
|
|
-----END CERTIFICATE-----
|
|
|