# See https://goteleport.com/docs/config-reference/ and
# https://goteleport.com/docs/admin-guide/#configuration

version: v3
teleport:
  ca_pin: "sha256:062db37249ea74c450579da8f02043b317cb8a174d653bb5090a89752d68efe7"
  data_dir: /var/lib/teleport-server

auth_service:
  enabled: "yes"
  proxy_listener_mode: multiplex
  listen_addr: 127.0.0.1:3025
  cluster_name: teleport.zulipchat.net
  authentication:
    type: local
    second_factor: on
    signature_algorithm_suite: balanced-v1
    u2f:
      app_id: https://teleport.zulipchat.net
    webauthn:
      rp_id: teleport.zulipchat.net

proxy_service:
  enabled: "yes"
  web_listen_addr: "[::]:443"
  public_addr: teleport.zulipchat.net:443
  acme:
    enabled: "yes"
    email: zulip-ops@zulip.com

ssh_service:
  enabled: no