FIPSModeOff=false

[debug]
#Defines the level of logs that will be printed by the VMC
#Possible values are: "trace", "debug", "info", "warn", "error", "fatal", "panic"
#Default value is "info"
#logLevel="info"

#Managers of the VMC can be allowed to run sudo commands. This is disabled by default.
#enableManagerSudo = false


[terminal]
# Whether or not the terminal service is enabled.
enabled = true

# The default command to use when running terminals.
# Default is platform-specific.
#command = "/bin/bash"
#command = "powershell.exe"

# Default number of lines of scrollback history kept.
#scrollback = 10000
#maxScrollback = 100000

[fileSystem]
#secureTransfer = true
#allowedTransferProtocols = ["zip"]


# A TunnelConfig contains configuration parameters for TLS-tunneled TCP
# connections to configured applications.
[tunnel]
# Whether or not the tunnel service is enabled.
enabled = true

# TCP port on which to bind the tunneling service.
#serverPort = 22

# List of allowed ports for tunneling.
# May be a single port, a range of ports, or an array of ports.
#allowedPorts = []  # default
#allowedPorts = 5901
#allowedPorts = "5901-5905"
#allowedPorts = [ 14500, 5901 ]

# If specified, the log level to use for tunls log messages. Messages will
# only be logged if the log level is <= the configured value.
#
# Valid values are:
#   - None     = 0
# 	- Errors   = 1
#   - Warnings = 2
#   - Info     = 3
#   - Debug    = 4
#
# If no log level is specified, the Errors log level will be used
# tunlsLogLevel = "info"  # default

# List of additional system groups that users with tunneling permissions will be
# added to.
#addGroups = []     # default
#addGroups = [ "Remote Desktop Users" ]  # Windows: allow access to RDP

# Timeout for idle tunnels.
# If set to positive duration, tunnels without active forwarded connections
# will be killed after the specified timeout.
#
# The minimum non-zero idle timeout is 1 second.
#
# Default: 15 minutes
#idleTimeout = "15m"

# Whether SFTP support is enabled.
# If enabled, an SSH daemon will be run that is configured to only allow
# SFTP connections.
sftpEnabled = true

# The local port on which the SFTP SSH daemon runs.
# This will be automatically added to the allowed tunnel ports.
sftpPort = 2022

# The path to the directory containing the sshd(.exe) and ssh-keygen(.exe) executables.
# If not set, the following will be checked for the executable:
#
#   1. The assets archive at bin/ssh/
#   2. The system path
#sshDirPath = ""

# Optional names for ports, which may be referred to in the connection
# instructions for the VM.
[tunnel.services]
#vnc = 5901
#xpra = 14500

# Options for the self-signed TLS certificate generated by the tunneling
# service.
[tunnel.cert]
# If specified, country MUST be a two-letter country code.
#country = "US"
#organization = "unspecified"

[stats]
# How often to poll system stats in nanoseconds. Default is 1 second.
# systemInterval = 

# User configuration
[users]
# If true, the VMC will not attempt to change the admin password at startup.
dontChangeAdminPassword = true

# Change to true if you want managers to automatically become VM
# administrators.
#managersAsAdmin = false

# Uncomment and add names of directories to be automatically created in the
# user's home on their encrypted drive if they do not already exist.
# This will allow for the directories to be automatically linked into the user's
# profile on the C: drive even if they did not originally exist.
#createDirs = []
#createHiddenDirs = []

# Password Length of the random password created for the users.
#passwordLength = 32

# Link type only applicable for Windows
# Possible values are "junction" and "softlink"
# Default value is "junction"
#userProfileLinkType = "junction"

# Commands
[commands]
# Commands to be run by root
[commands.rootCommands]
# Only once
[commands.rootCommands.runOnlyOnceCommands]
# ...
#Every Time
[commands.rootCommands.runEveryTimeCommands]

# This feature enables the creator of the VM Image to define certain commands or scripts they want to run in certain stages of the VM
# Dynamic parameters can also be passed to these scripts using the @:parameterName: syntax
# We support the following events and tags:
#   "on_login" : {@:user:}
#   "on_homeDriveAttached" : {}
#   "on_driveAttached" : {@:driveName:, @:driveSlot:, @:driveType:}
#   "on_vpnConnected" : {}

# When a home drive is attached, both the events on_homeDriveAttached & on_driveAttached are triggered in that order

# Syntax
# event_name = {command0_name = "command0", command1_name = "command1"} 
# Examples:
# on_login = {setXdgRuntimeDir = "install -o @:user: -m 700 -d /run/user/$(id -u @:user:)", dockerGroup = "usermod -aG docker @:user:"}
# on_driveAttached = {setENV = "export DRIVE=@:driveName:"}

# To run a command in async mode, add "-async" to the event name
# Example: on_driveAttached-async = {setENV = "export DRIVEASYNC=@:driveSlot:"}

# Commands to be run by the user
[commands.userCommands]
# Only once
[commands.userCommands.runOnlyOnceCommands]
# ...
# Every Time
[commands.userCommands.runEveryTimeCommands]
# ...