{
    "Stuns": [
        {
            "Proto": "udp",
            "URI": "stun:netbird.<redacted>.net:3478",
            "Username": "",
            "Password": ""
        }
    ],
    "TURNConfig": {
        "TimeBasedCredentials": false,
        "CredentialsTTL": "12h0m0s",
        "Secret": "secret",
        "Turns": [
            {
                "Proto": "udp",
                "URI": "turn:netbird.<redacted>.net:3478",
                "Username": "self",
                "Password": "<redacted>"
            }
        ]
    },
    "Relay": {
        "Addresses": [
            "rel://netbird.<redacted>.net:33080"
        ],
        "CredentialsTTL": "24h0m0s",
        "Secret": "<redacted>"
    },
    "Signal": {
        "Proto": "http",
        "URI": "netbird.<redacted>.net:10000",
        "Username": "",
        "Password": ""
    },
    "Datadir": "/var/lib/netbird/",
    "DataStoreEncryptionKey": "<redacted>",
    "HttpConfig": {
        "LetsEncryptDomain": "",
        "CertFile": "/etc/letsencrypt/live/netbird.<redacted>.net/fullchain.pem",
        "CertKey": "/etc/letsencrypt/live/netbird.<redacted>.net/privkey.pem",
        "AuthAudience": "netbird-client",
        "AuthIssuer": "https://kc.<redacted>.net/realms/<redacted>_sso",
        "AuthUserIDClaim": "",
        "AuthKeysLocation": "https://kc.<redacted>.net/realms/<redacted>_sso/protocol/openid-connect/certs",
        "OIDCConfigEndpoint": "https://kc.<redacted>.net/realms/<redacted>_sso/.well-known/openid-configuration",
        "IdpSignKeyRefreshEnabled": false,
        "ExtraAuthAudience": ""
    },
    "IdpManagerConfig": {
        "ManagerType": "keycloak",
        "ClientConfig": {
            "Issuer": "https://kc.<redacted>.net/realms/<redacted>_sso",
            "TokenEndpoint": "https://kc.<redacted>.net/realms/<redacted>_sso/protocol/openid-connect/token",
            "ClientID": "netbird-backend",
            "ClientSecret": "<redacted>",
            "GrantType": "client_credentials"
        },
        "ExtraConfig": {
            "AdminEndpoint": "https://kc.<redacted>.net/admin/realms/<redacted>_sso"
        },
        "Auth0ClientCredentials": null,
        "AzureClientCredentials": null,
        "KeycloakClientCredentials": null,
        "ZitadelClientCredentials": null
    },
    "DeviceAuthorizationFlow": {
        "Provider": "none",
        "ProviderConfig": {
            "ClientID": "",
            "ClientSecret": "",
            "Domain": "",
            "Audience": "netbird-client",
            "TokenEndpoint": "",
            "DeviceAuthEndpoint": "",
            "AuthorizationEndpoint": "",
            "Scope": "openid",
            "UseIDToken": false,
            "RedirectURLs": null,
            "DisablePromptLogin": false,
            "LoginFlag": 0
        }
    },
    "PKCEAuthorizationFlow": {
        "ProviderConfig": {
            "ClientID": "netbird-client",
            "ClientSecret": "",
            "Domain": "",
            "Audience": "netbird-client",
            "TokenEndpoint": "https://kc.<redacted>.net/realms/<redacted>_sso/protocol/openid-connect/token",
            "DeviceAuthEndpoint": "",
            "AuthorizationEndpoint": "https://kc.<redacted>.net/realms/<redacted>_sso/protocol/openid-connect/auth",
            "Scope": "openid profile email offline_access api",
            "UseIDToken": false,
            "RedirectURLs": [
                "http://localhost:53000"
            ],
            "DisablePromptLogin": false,
            "LoginFlag": 0
        }
    },
    "StoreConfig": {
        "Engine": "sqlite"
    },
    "ReverseProxy": {
        "TrustedHTTPProxies": [],
        "TrustedHTTPProxiesCount": 0,
        "TrustedPeers": [
            "0.0.0.0/0"
        ]
    },
    "DisableDefaultPolicy": false
}