# See https://goteleport.com/docs/config-reference/
teleport:
  ca_pin: "sha256:df15ba56d56227e288ce183d7eee77a6bef552aaaa5dc25f0f5ea56494ce14c6"
  auth_servers:
    # Use the proxy address, to support running the app_service, which requires
    # a reverse tunnel.
    - teleport.zulipchat.net:443
<% if @is_ec2 -%>
  join_params:
    method: iam
    token_name: iam-token
<% else -%>
  join_params:
    method: token
    token_name: <%= @join_token %>
<% end %>
ssh_service:
  enabled: "yes"
  commands:
    - name: hostname
      command: ["/bin/hostname"]
      period: 1h0m0s
    - name: uname
      command: ["/usr/bin/uptrack-uname", "-r"]
      period: 1h0m0s
    - name: distro
      command:
        ["/bin/sh", "-c", '. /etc/os-release && printf "%s\n" "$PRETTY_NAME"']
      period: 1h0m0s
    - name: classes
      command:
        - /usr/bin/crudini
        - --get
        - /etc/zulip/zulip.conf
        - machine
        - puppet_classes
      period: 1h0m0s

proxy_service:
  enabled: no
auth_service:
  enabled: no