##
##  teleport.yaml -- Teleport Server Configuration
##

#   for all servers
teleport:
    nodename:            localhost
    pid_file:            @l_prefix@/var/teleport/run/teleport.pid
    auth_token:          xxxx-token-xxxx
    auth_servers:
        -                127.0.0.1:3025
    connection_limits:
        max_connections: 1000
        max_users:       250
    log:
        output:          stderr
        severity:        INFO
    storage:
        type:            dir
    data_dir:            @l_prefix@/var/teleport/data

#   for servers with "auth" capability
auth_service:
    enabled:             "yes"
    cluster_name:        "example-cluster"
    listen_addr:         127.0.0.1:3025
    public_addr:         127.0.0.1:3025
    advertise_ip:        127.0.0.1
    oidc_connectors:     []
    authentication:
        type:            local
        second_factor:   off
    tokens:
        -                "node:xxxx-token-xxxx"

#   for servers with "node" capability
ssh_service:
    enabled:             "yes"
    listen_addr:         127.0.0.1:3022
    public_addr:         127.0.0.1:3022
    labels:
        example:         example
    commands:
        - name:          hostname
          command:       [ @cmd_hostname@ ]
          period:        1m0s
        - name:          arch
          command:       [ @cmd_uname@, -p ]
          period:        1h0m0s
        - name:          os
          command:       [ @cmd_uname@, -s ]
          period:        1h0m0s

#   for servers with "proxy" capability
proxy_service:
    enabled:             "yes"
    listen_addr:         127.0.0.1:3023
    ssh_public_addr:     127.0.0.1:3023
    tunnel_listen_addr:  127.0.0.1:3024
    web_listen_addr:     127.0.0.1:3080
    public_addr:         127.0.0.1:3080
    https_cert_file:     @l_prefix@/etc/teleport/server.crt
    https_key_file:      @l_prefix@/etc/teleport/server.key

