Use a simple config file for configuring the client.

1 files changed, 24 insertions, 0 deletions

diff --git a/example-server.json b/example-server.json
new file mode 100644
index 0000000..1ac84f2
--- /dev/null
+++ b/example-server.json
@@ -0,0 +1,24 @@
+{
+  "server": {
+    "use_tls": true,
+    "tls_key": "server.key",
+    "tls_cert": "server.crt",
+    "port": 443,
+    "cookie_secret": "supersecret"
+  },
+  "auth": {
+    "provider": "google",
+    "oauth_client_id": "nnnnnnnnnnnnnnnn.apps.googleusercontent.com",
+    "oauth_client_secret": "yyyyyyyyyyyyyyyyyyyyyy",
+    "oauth_callback_url": "https://sshca.example.com/auth/callback",
+    "provider_opts": {
+      "domain": "example.com"
+    }
+  },
+  "ssh": {
+    "signing_key": "signing_key",
+    "additional_principals": ["ec2-user", "ubuntu"],
+    "max_age": "720h",
+    "permissions": ["permit-pty", "permit-X11-forwarding", "permit-agent-forwarding", "permit-port-forwarding", "permit-user-rc"]
+  }
+}