MeshCentral/sample-config.json

167 lines
6.0 KiB
JSON
Raw Normal View History

2018-01-26 03:12:53 +03:00
{
"__comment__" : "This is a sample configuration file, edit a section and remove the _ in front of the name. Refer to the user's guide for details.",
"settings": {
"_Cert": "myserver.mydomain.com",
2019-07-30 04:21:52 +03:00
"_MongoDb": "mongodb://127.0.0.1:27017",
"_MongoDbName": "meshcentral",
2019-05-29 03:42:11 +03:00
"_MongoDbChangeStream": true,
"_WANonly": true,
"_LANonly": true,
"_Minify": 1,
"_SessionTime": 30,
"_SessionKey": "MyReallySecretPassword1",
"_SessionSameSite": "strict",
"_DbEncryptKey": "MyReallySecretPassword2",
"_DbRecordsEncryptKey": "MyReallySecretPassword",
"_DbRecordsDecryptKey": "MyReallySecretPassword",
"_DbExpire": {
"events": 1728000,
"powerevents": 864000
},
"_Port": 443,
"_RedirPort": 80,
"_AllowLoginToken": true,
"_AllowFraming": true,
"_WebRTC": false,
"_Nice404": false,
"_ClickOnce": false,
2018-09-19 19:15:31 +03:00
"_SelfUpdate": true,
"_AgentPing": 60,
"_AgentPong": 60,
2019-06-18 01:20:47 +03:00
"_AgentIdleTimeout": 150,
"_MeshErrorLogPath": "c:\\tmp",
2019-07-18 01:57:42 +03:00
"_NpmPath": "c:\\npm.exe",
"_NpmProxy": "http://1.2.3.4:80",
2019-05-28 20:10:56 +03:00
"_AllowHighQualityDesktop": true,
"_UserAllowedIP": "127.0.0.1,192.168.1.0/24",
"_UserBlockedIP": "127.0.0.1,::1,192.168.0.100",
"_AgentAllowedIP": "192.168.0.100/24",
"_AgentBlockedIP": "127.0.0.1,::1",
"_LocalDiscovery": {
"name": "Local server name",
"info": "Information about this server"
},
2018-11-07 06:41:21 +03:00
"_TlsOffload": true,
2019-12-01 23:52:32 +03:00
"_MpsPort": 44330,
"_MpsAliasPort": 4433,
"_MpsAliasHost": "mps.mydomain.com",
2018-12-20 23:12:24 +03:00
"_MpsTlsOffload": true,
"_No2FactorAuth": true,
2019-11-20 22:12:35 +03:00
"_Log": "main,web,webrequest,cert",
"_WebRtConfig": {
"iceServers": [
{ "urls": "stun:stun.services.mozilla.com" },
{ "urls": "stun:stun.l.google.com:19302" }
]
2019-05-17 22:40:15 +03:00
},
"_AutoBackup": {
2019-05-29 03:42:11 +03:00
"backupIntervalHours": 24,
2019-05-17 22:40:15 +03:00
"keepLastDaysBackup": 10,
2019-05-23 01:22:10 +03:00
"zipPassword": "MyReallySecretPassword3",
"_backupPath": "C:\\backups"
},
"_Redirects": {
"meshcommander": "https://www.meshcommander.com/"
2019-11-19 04:31:42 +03:00
},
"__MaxInvalidLogin": "Time in minutes, max amount of bad logins from a source IP in the time before logins are rejected.",
"MaxInvalidLogin": { "time": 10, "count": 10, "coolofftime": 10 },
"_Plugins": {
"enabled": true
}
2018-01-26 03:12:53 +03:00
},
"_domains": {
"": {
2018-12-21 01:14:37 +03:00
"Title": "MyServer",
"Title2": "Servername",
"_TitlePicture": "title-sample.png",
"_UserQuota": 1048576,
"_MeshQuota": 248576,
"_NewAccounts": true,
"_UserNameIsEmail": true,
"_NewAccountEmailDomains": [ "sample.com" ],
"_NewAccountsRights": [ "nonewgroups", "notools" ],
2018-12-21 01:14:37 +03:00
"Footer": "<a href='https://twitter.com/mytwitter'>Twitter</a>",
"_CertUrl": "https://192.168.2.106:443/",
"_PasswordRequirements": { "min": 8, "max": 128, "upper": 1, "lower": 1, "numeric": 1, "nonalpha": 1, "reset": 90, "force2factor": true, "skip2factor": "127.0.0.1,192.168.2.0/24" },
"_AgentNoProxy": true,
"_GeoLocation": true,
"_UserAllowedIP": "127.0.0.1,192.168.1.0/24",
"_UserBlockedIP": "127.0.0.1,::1,192.168.0.100",
"_AgentAllowedIP": "192.168.0.100/24",
"_AgentBlockedIP": "127.0.0.1,::1",
"___UserSessionIdleTimeout__" : "Number of user idle minutes before auto-disconnect",
"_UserSessionIdleTimeout" : 30,
2019-04-13 00:19:03 +03:00
"__UserConsentFlags__" : "Set to: 1 for desktop, 2 for terminal, 3 for files, 7 for all",
"_UserConsentFlags" : 7,
"_Limits": {
"_MaxDevices": 100,
"_MaxUserAccounts": 100,
"_MaxUserSessions": 100,
"_MaxAgentSessions": 100,
"MaxSingleUserSessions": 10
},
"_AmtAcmActivation": {
"log": "amtactivation.log",
"certs": {
"mycertname": {
"certfiles": [ "amtacm-leafcert.crt", "amtacm-intermediate1.crt", "amtacm-intermediate2.crt", "amtacm-rootcert.crt" ],
"keyfile": "amtacm-leafcert.key"
}
}
},
"_Redirects": {
"meshcommander": "https://www.meshcommander.com/"
},
"_yubikey": { "id": "0000", "secret": "xxxxxxxxxxxxxxxxxxxxx", "_proxy": "http://myproxy.domain.com:80" },
2019-09-13 01:12:40 +03:00
"_httpheaders": {
"Strict-Transport-Security": "max-age=360000",
"x-frame-options": "SAMEORIGIN",
"Content-Security-Policy": "default-src 'none'; script-src 'self' 'unsafe-inline'; connect-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; frame-src 'self'; media-src 'self'"
},
2019-08-06 23:27:24 +03:00
"_agentConfig": [ "webSocketMaskOverride=1" ],
"_SessionRecording": {
"_filepath": "C:\\temp",
2019-08-08 02:07:12 +03:00
"__protocols__": "Is an array: 1 = Terminal, 2 = Desktop, 5 = Files, 100 = Intel AMT WSMAN, 101 = Intel AMT Redirection",
"protocols": [ 1, 2, 101 ]
2019-08-06 23:27:24 +03:00
}
2018-01-26 03:12:53 +03:00
},
"_customer1": {
"_DNS": "customer1.myserver.com",
"_Title": "Customer1",
"_Title2": "TestServer",
"_NewAccounts": 1,
"_Auth": "sspi",
"_Footer": "Test",
2018-12-21 01:14:37 +03:00
"_CertUrl": "https://192.168.2.106:443/"
2018-01-26 03:12:53 +03:00
},
"_info": {
"_share": "C:\\ExtraWebSite"
2018-01-26 03:12:53 +03:00
}
},
"_letsencrypt": {
2019-11-26 21:54:45 +03:00
"__comment__": "Requires NodeJS 10.12 or better, Go to https://letsdebug.net/ first before trying Let's Encrypt.",
2018-01-26 03:12:53 +03:00
"email": "myemail@myserver.com ",
"names": "myserver.com,customer1.myserver.com",
"rsaKeySize": 3072,
"production": false
},
"_peers": {
"serverId": "server1",
"servers": {
"server1": { "url": "wss://192.168.2.133:443/" },
"server2": { "url": "wss://192.168.1.106:443/" }
}
},
"_smtp": {
"host": "smtp.myserver.com",
"port": 25,
"from": "myemail@myserver.com",
2019-09-16 20:49:35 +03:00
"__tls__": "When 'tls' is set to true, TLS is used immidiatly when connecting. For SMTP servers that use TLSSTART, set this to 'false' and TLS will still be used.",
"tls": false,
"___tlscertcheck__": "When set to false, the TLS certificate of the SMTP server is not checked.",
"_tlscertcheck": false,
"__tlsstrict__": "When set to true, TLS cypher setup is more limited, SSLv2 and SSLv3 are not allowed.",
"_tlsstrict": true
2018-01-26 03:12:53 +03:00
}
}