; Directives here are described in https://servnest.niv.re/back/configuration

[common]
public_domains[] = "servnest.test"
prefix = ""
service_name = "ServNest"
service_emoji = "🌳"
about_url = "https://about.servnest.test/"
services[auth] = "enabled"
services[reg] = "enabled"
services[ns] = "enabled"
services[ht] = "enabled"

[dns]
knotc_path = "/usr/sbin/knotc"
kdig_path = "/usr/bin/kdig"

[reg]
suffixes[servnest.test.] = "approved"
suffixes[test.servnest.test.] = "all"
suffixes[old.sernnest.test.] = "none"
suffixes_path = "/srv/servnest/reg"
ttl = 86400
address = "[::1]:42053"

[ns]
knot_zones_path = "/srv/servnest/ns"
servers[] = "ns1.servnest.test."
servers[] = "ns2.servnest.test."
kzonecheck_path = "/usr/bin/kzonecheck"
public_soa_email = "hostmaster.invalid."
local_only_check = false

[ht]
ht_path = "/srv/servnest/ht"
user_quota_testing = 20971520
user_quota_approved = 209715200

subpath_domain = "ht.servnest.test"

subdomain_domain = "ht.servnest.test"

tor_config_path = "/srv/servnest/tor-config"
tor_keys_path = "/srv/servnest/tor-keys"
tor_user = "tor"
tor_reload_cmd = "/usr/bin/systemctl reload tor"
onion_internal_host = "[::1]:9080"

certbot_path = "/usr/bin/certbot"
certbot_config_path = "/etc/letsencrypt/servnest.cli"

sudo_path = "/usr/bin/sudo"
chgrp_path = "/usr/bin/chgrp"
cat_path = "/usr/bin/cat"
rm_path = "/usr/bin/rm"
mkdir_path = "/usr/bin/mkdir"

sftpgo_group = "sftpgo"
sftpgo_user = "sftpgo"

; Will be shown to users
cname = "ht.servnest.test."
ipv6_address = "::1"
ipv4_address = "127.0.0.1"
caa_account_uris[testing] = "https://acme-staging-v02.api.letsencrypt.org/acme/acct/0123456789"
caa_account_uris[approved] = "https://acme-v02.api.letsencrypt.org/acme/acct/0123456789"
sftp_pub = "/etc/sftpgo/ed25519.pub"
sftp_fp = "/etc/sftpgo/ed25519.fp"
sftp_asciiart = "/etc/sftpgo/ed25519.asciiart"
sftp_domain = "sftp.servnest.test"
public_sftp_port = 2022

[check]
https_port = 42443
sftp_path = "/usr/bin/sftp"
sshpass_path = "/usr/bin/sshpass"
tor_proxy = "socks5h://127.0.0.1:9050"