{
  "listen": ":8080",
  "public_url": "https://sessionguard.example.org",
  "data_file": "/var/lib/sessionguard/master.json",
  "database_url": "",
  "enrollment_token": "SET-BY-SESSIONGUARD_ENROLLMENT_TOKEN",
  "offline_after_seconds": 30,
  "history_limit": 50000,
  "oidc": {
    "issuer": "https://auth.example.org",
    "client_id": "SESSIONGUARD-POCKETID-CLIENT-ID",
    "client_secret": "SET-BY-SESSIONGUARD_OIDC_CLIENT_SECRET",
    "redirect_url": "https://sessionguard.example.org/oidc/callback",
    "logout_redirect_url": "https://sessionguard.example.org/",
    "admin_groups": [],
    "secure_cookie": true
  },
  "access_auth": {
    "enabled": false,
    "issuer": "",
    "client_id": "",
    "client_secret": "SET-BY-SESSIONGUARD_ACCESS_OIDC_CLIENT_SECRET",
    "redirect_url": "https://guacamole.example.org/_sessionguard/auth/oidc/callback",
    "logout_redirect_url": "https://guacamole.example.org/",
    "cookie_name": "sg_access_session",
    "cookie_domain": "",
    "secure_cookie": true,
    "session_hours": 8,
    "username_claim": "preferred_username",
    "allowed_groups": [],
    "allowed_hosts": [
      "guacamole.example.org"
    ]
  },
  "rbac": {
    "default_role": "viewer",
    "groups": {
      "sessionguard-admins": [
        "admin"
      ],
      "sessionguard-helpdesk": [
        "helpdesk"
      ],
      "sessionguard-operators": [
        "operator"
      ],
      "sessionguard-auditors": [
        "auditor"
      ]
    }
  },
  "broker": {
    "enabled": true,
    "api_key": "SET-BY-SESSIONGUARD_BROKER_API_KEY",
    "lease_seconds": 900,
    "min_health_score": 60,
    "reconnect_existing": true,
    "single_session_per_user": true,
    "default_farm_id": ""
  },
  "alerts": {
    "enabled": true,
    "webhook_url": "",
    "cpu_percent": 90,
    "memory_percent": 90,
    "disk_free_gb": 10,
    "health_score": 50,
    "offline_seconds": 120,
    "profile_failures": 3,
    "disconnected_sessions": 20,
    "logon_duration_seconds": 30,
    "notification_min_interval_seconds": 900
  }
}