version: v2
teleport:
  nodename: example
  data_dir: /var/lib/teleport
  log:
    output: stdout
    severity: INFO
    format:
      output: text
  ca_pin: ""
  diag_addr: ""
auth_service:
  enabled: "yes"
  listen_addr: 0.0.0.0:3025
  public_addr: teleport.example.de:3025
  cluster_name: teleport.example.de
  authentication:
    type: github
    second_factor: on
    webauthn:
      rp_id: tp.unjx.de
  proxy_listener_mode: multiplex
  session_recording: "off"
  client_idle_timeout: "10m"
  client_idle_timeout_message: "10 minutes idle... you have been logged out"
  web_idle_timeout: 10m
ssh_service:
  enabled: "yes"
  permit_user_env: true
  commands:
    - name: Compose
      command: ["/bin/sh", "-c", "docker compose version --short"]
      period: "168h"
    - name: Docker
      command: ["/bin/sh", "-c", "docker system info | grep Running | cut -d' ' -f4"]
      period: "30m"
    - name: Engine
      command: ["/bin/sh", "-c", "docker version --format '{{.Server.Version}}'"]
      period: "168h"
    - name: Kernel
      command: ["/bin/uname", "-r"]
      period: "168h"
    - name: Teleport
      command: ["/bin/sh", "-c", "teleport version | cut -d' ' -f2"]
      period: "168h"
    - name: Restic
      command: ["/bin/sh", "-c", "restic version | cut -d ' ' -f2"]
      period: "168h"
    - name: Rclone
      command: ["/bin/sh", "-c", "rclone version | head -1 | cut -d ' ' -f2"]
      period: "168h"
proxy_service:
  enabled: "yes"
  web_listen_addr: 0.0.0.0:3080
  public_addr: teleport.example.de:443
  ssh_public_addr: teleport.example.de:3023
  tunnel_public_addr: teleport.example.de:3024
  https_keypairs: []
  acme:
    enabled: "yes"
    email: "mail@example.de"
app_service:
  enabled: "yes"
  apps:
    - name: "proxy"
      description: "Traefik"
      uri: "http://localhost:8080"