{
  "general": {
    "platform": "generic",
    "mode": "manual"
  },
  "interfaces": {
    "external": "eth0",
    "internal": "eth1"
  },
  "wan": {
    "local_fqdn": "router.example.com"
  },
  "local": {
    "cidrs": ["10.0.0.0/24"],
    "int_addr": "10.1.1.4",
    "int_gateway_ip": "10.1.1.1"
  },
  "site_to_site": {
    "remote-site": {
      "addrs": ["peer.example.net"],
      "id": "peer.example.net",
      "cidrs": ["192.168.0.0/24"],
      "local_cidrs": ["10.0.0.0/24"],
      "local_id_mode": "fqdn",
      "auth": "psk",
      "psk": "change-me",
      "psk_file": "",
      "remote_ca": ""
    },
    "branch": {
      "addrs": ["branch.example.org"],
      "id": "branch.example.org",
      "cidrs": ["192.168.10.0/24"],
      "local_cidrs": ["10.0.0.0/24"],
      "local_id_mode": "fqdn",
      "auth": "certificate"
    }
  },
  "p2s": {
    "enabled": false,
    "address_pool": "172.16.0.0/24"
  },
  "wireguard": {
    "enabled": false,
    "address": "192.168.200.1/24",
    "listen_port": 51820
  },
  "openvpn": {
    "enabled": false,
    "address_pool": "172.16.1.0/24",
    "port": 1194,
    "protocol": "udp"
  },
  "docker": {
    "mode": "auto",
    "exposed_ports": ["443"]
  },
  "web": {
    "enabled": true,
    "listen": "both",
    "port": 7081,
    "database": "",
    "trusted_proxies": [],
    "status_content": "basic",
    "shell": false,
    "shell_user": "",
    "shell_idle_minutes": 15
  },
  "https": {
    "enabled": true,
    "email": "",
    "web_port": 7444,
    "manager_port": 7443,
    "caddy_source": "ubuntu"
  },
  "pki": {
    "root_name": "VPN Router Root CA",
    "root_days": 7300,
    "ca_days": 3650,
    "key": "rsa-4096",
    "crl_days": 7,
    "root_crl_days": 180,
    "publish": ["http"],
    "p2s_name": "VPN Router P2S CA",
    "s2s_name": "VPN Router Site-to-Site CA",
    "issuing_cas": {
      "servers": {
        "name": "VPN Router Server CA",
        "templates": ["server"],
        "acme": false
      }
    },
    "templates": {
      "server": {
        "days": 397
      }
    },
    "extended_key_usages": {
      "smartcard_logon": "1.3.6.1.4.1.311.20.2.2"
    },
    "root_key_warning": true
  },
  "metrics": {
    "enabled": true,
    "listen": "internal",
    "port": 9464,
    "https_port": 9465,
    "service_account": "metrics",
    "otlp_endpoint": "",
    "otlp_username": "",
    "otlp_password": "",
    "keep_details": "24 hours",
    "keep_hourly": "1 month",
    "keep_daily": "3 months",
    "keep_monthly": "1 year",
    "keep_yearly": "10 years"
  },
  "backup": {
    "enabled": false,
    "schedule": "daily",
    "target": "local",
    "path": "/var/backups/vpn-router",
    "keep_hourly": 24,
    "keep_daily": 7,
    "keep_weekly": 4,
    "keep_monthly": 12,
    "keep_yearly": 0,
    "metrics": false,
    "rclone_remote": "",
    "rclone_mode": "sync",
    "pbs_repository": "",
    "pbs_password": "",
    "pbs_fingerprint": "",
    "pbs_namespace": "",
    "pbs_keyfile": ""
  }
}