{
  "type": "object",
  "$schema": "http://json-schema.org/draft-04/schema#",
  "extends": "./schema-definitions.json#",
  "title": "Input Parameters",
  "properties": {
    "base-port": {
      "title": "Base TCP port",
      "description": "If 80, caucase will also listen on 443. Otherwise, caucase will listen on port and port + 1.",
      "type": "integer",
      "default": 8009
    },
    "external-url": {
      "$comment": "(deprecated)"
    },
    "external-netloc": {
      "title": "External netloc",
      "description": "When provided, this is used as netloc in the CRL distribution point extension in issued certificates. Setting up that domain and routing accesses to the IP and ports caucased binds to is outside the scope of this software-release. Otherwise, instead of the caucased bind IP and port are used (preventing caucased relocation).",
      "type": "string",
      "format": "uri"
    },
    "service-auto-approve-amount": {
      "title": "Number of service certificate requests to automatically approve",
      "description": "Once that number has been reached, a user must validate further requests. Renewals do not count toward this number. Cannot be changed once set.",
      "type": "integer",
      "default": 0
    },
    "user-auto-approve-amount": {
      "title": "Number of user certificate requests to automatically approve",
      "description": "Once that number has been reached, a user must validate further requests. Renewals do not count toward this number. Cannot be changed once set.",
      "type": "integer",
      "default": 1
    },
    "backup-period": {
      "title": "Backup period",
      "description": "Number of days between consecutive backups (0 to disable backup creation).",
      "type": "number",
      "default": 0
    },
    "key-length": {
      "title": "Key length",
      "description": "Size, in bits, of the SSL CAs (users and services) private keys generated by caucased.",
      "default": 2048,
      "type": "integer"
    }
  }
}
