{
  "server": {
    "tls_key": "server.key",
    "tls_cert": "server.crt",
    "port": 443,
    "cookie_secret": "supersecret"
  },
  "auth": {
    "provider": "google",
    "oauth_client_id": "nnnnnnnnnnnnnnnn.apps.googleusercontent.com",
    "oauth_client_secret": "yyyyyyyyyyyyyyyyyyyyyy",
    "oauth_callback_url": "https://sshca.example.com/auth/callback",
    "google_opts": {
      "domain": "example.com"
    },
    "jwt_signing_key": "supersecret"
  },
  "ssh": {
    "signing_key": "signing_key",
    "additional_principals": ["ec2-user"],
    "max_age": "720h",
    "permissions": ["permit-pty"]
  }
}