REALM=EXAMPLE.COM
WORKGROUP=EXAMPLE
DOMAIN=example.com
JOIN_USER=FileShare_ServiceAcc
JOIN_PASSWORD=ReplaceWithLongRandomPassword
DOMAIN_USERS_SID=S-1-5-21-1111111111-2222222222-3333333333-513
DOMAIN_ADMINS_SID=S-1-5-21-1111111111-2222222222-3333333333-512
FSLOGIX_GROUP_SID=S-1-5-21-1111111111-2222222222-3333333333-513
# AD_DNS_IP=192.0.2.10
# AD_DNS_NAME=adsambafsrv.example.com
# AD_DNS_IP_AUTO=1
# SAMBA_HOSTNAME=adsambafsrv
# NETBIOS_NAME=ADSAMBAFSRV
WEB_ENABLED=true
WEB_HOSTNAME=files.example.com
WEB_HTTPS_PORT=443
WEB_JWT_SECRET=ReplaceWithAtLeast32RandomBytes
WEB_TLS_MODE=step
STEP_CA_URL=https://ca.example.com:9000
STEP_CA_FINGERPRINT=ReplaceWithStepRootFingerprint
STEP_CA_PROVISIONER=fileserver
STEP_CA_PROVISIONER_PASSWORD=ReplaceWithProvisionerPassword
# STEP_CA_TOKEN=single-use-bootstrap-token
# STEP_CA_PROVISIONER_PASSWORD_FILE=/run/secrets/step-ca-provisioner-password
# STEP_CA_REBOOTSTRAP=false
# WEB_TLS_CERT_FILE=/state/tls/web.crt
# WEB_TLS_KEY_FILE=/state/tls/web.key
# WEB_JWT_TTL_SECONDS=28800
# WEB_USAGE_SCAN_INTERVAL_SECONDS=900
# WEB_DIRECTORY_CACHE_SECONDS=300
# WEB_MAX_GROUP_NODES=10000
# WEB_LOGIN_ATTEMPTS_PER_5_MIN=10
# LDAP_URI=ldaps://example.com
# LDAP_BASE_DN=DC=example,DC=com
# PRIVATE_SKIP_USERS=svc_backup,svc_sql
# PRIVATE_SKIP_PREFIXES=svc_,sql_
# BACKUP_DESTINATION=rsync://user:pass@backup.example.com/samba-backups
# BACKUP_DESTINATION=smb://DOMAIN%5Cuser:pass@backup.example.com/Backups/samba
# BACKUP_DESTINATION=davfs://user:pass@webdav.example.com/remote.php/dav/files/backup
# BACKUP_DESTINATION=sftp://user:pass@sftp.example.com/exports/samba
# BACKUP_START_HOUR=2  # 0-23, UTC
# BACKUP_RETENTION_DAILY=3
# BACKUP_RETENTION_WEEKLY=2
# BACKUP_RETENTION_MONTHLY=2
# BACKUP_RETENTION_YEARLY=1
# BACKUP_LOG_FILE=/var/log/backup.log
# BACKUP_PROGRESS=auto
# BACKUP_PROGRESS_INTERVAL_SECONDS=10
# BACKUP_STATUS_FILE=/state/backup-status.json
# AUDIT_COMPRESS_AFTER_HOURS=24
# AUDIT_QUERY_MAX_DAYS=31