{
  "serverSetup": {
    "server": {
      "type": "first",
      "name": "{{ SERVERSETUP_SERVER_NAME }}",
      "domainName": "{{ SERVERSETUP_SERVER_DOMAINNAME }}",
      "title": "{{ SERVERSETUP_SERVER_TITLE }}",
      "password": null,
      "minPasswordLength": 0,
      "serverTasks": "replica,router,update,amgr,adminp,http,nomad"
    },

    "network": {
      "hostName": "{{ SERVERSETUP_NETWORK_HOSTNAME }}",
      "enablePortEncryption": true,
      "enablePortCompression": true
    },

    "org": {
      "orgName": "{{ SERVERSETUP_ORG_ORGNAME }}",
      "certifierPassword": "{{ SERVERSETUP_ORG_CERTIFIERPASSWORD }}"
    },

    "admin": {
      "firstName": "{{ SERVERSETUP_ADMIN_FIRSTNAME }}",
      "lastName": "{{ SERVERSETUP_ADMIN_LASTNAME }}",
      "password": "{{ SERVERSETUP_ADMIN_PASSWORD }}",
      "IDFilePath": "{{ SERVERSETUP_ADMIN_IDFILEPATH }}"
    },

    "notesINI": {
      "Create_R85_log": "1",
      "LOG_REPLICATION": "0",
      "LOG_SESSIONS": "0",
      "HTTPPublicURLs": "/iwaredir.nsf/*:/.well-known*:/homepage.nsf/*",
      "ENABLE_SNI": "1",
      "HTTPEnableMethods": "GET,POST,PUT,DELETE,HEAD",
      "ADMIN_CLIENT_SKIP_DOMINO": "1",
      "COMPRESS_LZ1_CREATE": "1",
      "CREATE_NIFNSF_DATABASES": "1",
      "NIFNSFENABLE": "1",
      "NIFBASEPATH": "/local/nif",
      "FTBASEPATH": "/local/ft",
      "DAOS_ENCRYPT_NLO": "0",
      "DAOS_MAX_FILES_PER_SUBCONTAINER": "10000",
      "EVENT_POOL_SIZE": "41943040",
      "SETUPLEAVESERVERTASKS": "1",
      "SSL_DISABLE_EXTENDED_MASTER_SECRET": "1",
      "Server_MinPossibleTransTime": "1500",
      "Server_MaxPossibleTransTime": "20000000",
      "NSF_BUFFER_POOL_SIZE_MB": "256",
      "FT_FLY_INDEX_OFF": "1",
      "UPDATE_FULLTEXT_THREAD": "1",
      "FTG_USE_SYS_MEMORY": "1",
      "NOMAD_WEB_HOST": "{{ SERVERSETUP_NOMAD_HOSTNAME }}"
    },

    "security": {
      "ACL": {
        "prohibitAnonymousAccess": true,
        "addLocalDomainAdmins": true
      },

      "TLSSetup": {
        "method": "import",
        "importFilePath" : "{{ SERVERSETUP_SECURITY_TLSSETUP_IMPORTFILEPATH }}"
      }
    },

    "registerUsers": {
      "defaults": {
        "saveIDToPersonDocument": false,
        "password": "{{ SERVERSETUP_ADMIN_PASSWORD }}",
        "enableFullTextIndex": true,
        "certificateExpirationMonths": 42
      },

      "users": [
        {
          "firstName": "Junior",
          "lastName": "Admin",
          "shortName": "junioradmin",
          "saveIDToPersonDocument": false,
          "internetAddress": "junior.admin@{{ SERVERSETUP_INET_DOMAIN }}",
          "password": "{{ SERVERSETUP_ADMIN_PASSWORD }}",
          "mailFilePath": "mail/junioradmin.nsf"
        },
        {
          "firstName": "Senior",
          "lastName": "Admin",
          "shortName": "senioradmin",
          "saveIDToPersonDocument": false,
          "internetAddress": "senior.admin@{{ SERVERSETUP_INET_DOMAIN }}",
          "password": "{{ SERVERSETUP_ADMIN_PASSWORD }}",
          "mailFilePath": "mail/senioradmin.nsf"
        }
      ]
    }

  },

  "IDVault": {
    "name": "O={{ SERVERSETUP_ORG_ORGNAME }}_vault",
    "description": "{{ SERVERSETUP_ORG_ORGNAME }} Vault",
    "IDFile": "vault.id",
    "IDPassword": "{{ SERVERSETUP_IDVAULT_IDPASSWORD }}",
    "path": "IBM_ID_VAULT/{{ SERVERSETUP_ORG_ORGNAME }}_vault.nsf",
    "passwordReset": {
      "helpText": "See Roy or Moss for a password reset. Good luck!"
    },

    "securitySettingsPolicy": {
      "name": "{{ SERVERSETUP_ORG_ORGNAME }} Vault Security Settings Policy",
      "description": "{{ SERVERSETUP_ORG_ORGNAME }} Vault Security Settings"
    },

    "masterPolicy": {
      "description": "{{ SERVERSETUP_ORG_ORGNAME }} Vault Master Policy Description"
    }
  },

  "autoConfigPreferences": {
    "startServerAfterConfiguration": true 
  },

  "appConfiguration": {

    "databases": [
      {
        "filePath": "names.nsf",
        "action": "update",
        "documents": [
          {
            "action": "update",
            "findDocument": {
              "Type": "Server",
              "ServerName": "CN={{ SERVERSETUP_SERVER_NAME }}/O={{ SERVERSETUP_ORG_ORGNAME }}"
            },
                  "items": {
              "LdISite": "1",
              "HTTP_SSLKeyFile": "{{ SERVERSETUP_DOMINO_HOSTNAME }}",
              "HTTP_MaxActiveThreads": 40,
              "HTTP_HomeURL": "homepage.nsf",
              "FullAdmin": "LocalDomainAdmins",
              "CreateAccess": "LocalDomainAdmins",
              "ReplicaAccess": "LocalDomainAdmins",
              "UnrestrictedList": "LocalDomainAdmins",
              "OnBehalfOfLst": "LocalDomainAdmins",
              "RestrictedList": "LocalDomainAdmins",

              "TRANSLOG_AutoFixup": "",
              "TRANSLOG_MaxSize": 512,
              "TRANSLOG_Path": "/local/translog",
              "TRANSLOG_Performance": "2",
              "TRANSLOG_Status": "1",
              "TRANSLOG_Style": "0",
              "TRANSLOG_UseAll": "0",

              "HTTP_EnableSessionAuth": "1",
              "HTTP_TCPNP": "1",
              "HTTP_AllowAnonymous": "1",
              "HTTP_NormalMode": "1",
              "HTTP_SSLMode": "1",
              "HTTP_SSLAnonymous": "1",
              "HTTP_SSLCert": "1",
              "HTTP_SSLBearerToken": "1",

              "SMTPListenerEnabled": "1",
              "Router_PortStatus": "2",
              "LDAP_SSLStatus": "1",
              "IMAP_SSLStatus": "1",
              "POP3_SSLStatus": "1",

              "HTTP_EnforceAccess": "1",
              "LDAP_EnforceAccess": "1",
              "IMAP_EnforceAccess": "1",
              "POP3_EnforceAccess": "1",

              "NSDEnbld": "1",
              "FREnbld": "1",
              "FltRcvryNot": "LocalDomainAdmins"
            }
          },

          {
          "action": "create",
            "computeWithForm": true,
            "items": {
              "Form": "ServerConfig",
              "UseAsDefault": "1",
              "ServerName": "*",

              "SMTP_NegotiatedSSL": "1",

              "ILEnforce": "1",
              "ILLockIP": "0",
              "ILCountAgainstIP": "0",
              "ILLogLockouts": "1",
              "ILLogFailures": "1",
              "ILMaxTries": 7,
              "ILExpMinutes": 10,
              "ILExpNum": 10,
              "ILTimeFormat": ",minutes",
              "ILClearNum": 10,
              "ILClearMinutes": 10,
              "ILTimeFormat2": ",minutes",
              "PwdCheckInVault": "2",

              "DCLoc": "CN=HCL Notes/O=Domino Fault Reports",
              "DCMsgSize": 50,
              "DCNSDSize": 40,
              "DCDO": 10000,
              "FAEnabled": "1",
              "FADBs": "1"
            }
          },

          {
            "action": "update",
            "findDocument": {
              "Type": "Group",
              "ListName": "LocalDomainAdmins"
            },
            "items": {
              "Members": [ "CN={{ SERVERSETUP_ADMIN_FIRSTNAME }} {{ SERVERSETUP_ADMIN_LASTNAME }}/O={{ SERVERSETUP_ORG_ORGNAME }}", "CN=Senior Admin/O={{ SERVERSETUP_ORG_ORGNAME }}", "CN=Junior Admin/O={{ SERVERSETUP_ORG_ORGNAME }}"]
            }
          },

          {
            "action": "create",
            "computeWithForm": true,
            "items": {
              "Form": "WebSite",
              "WSIsDflt"           : "1",
              "ISiteAdrs"          : [ "127.0.0.1", "{{ SERVERSETUP_DOMINO_HOSTNAME }}" ],
              "ISiteName"          : "Default HTTP Site",
              "ISiteOrg"           : "{{ SERVERSETUP_ORG_ORGNAME }}",
              "WSHostingSrvrs"     : "*",
              "TCPAnonymous"       : "0",
              "TCPNameAndPwd"      : "1",
              "SSLAnonymous"       : "0",
              "SSLNameAndPwd"      : "1",
              "HTTP_SSLBearerToken": "1",
              "HTTP_EnableSessionAuth": "1",
              "SSLKeyFile"         : "{{ SERVERSETUP_DOMINO_HOSTNAME }}"
            }
          },

          {
            "action": "create",
            "computeWithForm": true,
            "items": {
              "Form": "SMTPInboundSite",
              "ISiteAdrs"         : [ "127.0.0.1", "{{ SERVERSETUP_DOMINO_HOSTNAME }}" ],
              "ISiteName"         : "SMTP Inbound Site",
              "ISiteOrg"          : "{{ SERVERSETUP_ORG_ORGNAME }}",
              "WSHostingSrvrs"    : "*",
              "TCPAnonymous"      : "1",
              "TCPNameAndPwd"     : "1",
              "SSLAnonymous"      : "1",
              "SSLNameAndPwd"     : "1"
            }
          },

          {
            "action": "create",
            "computeWithForm": true,
            "items": {
              "Form": "DirectorySite",
              "ISiteAdrs"         : [ "127.0.0.1", "{{ SERVERSETUP_DOMINO_HOSTNAME }}" ],
              "ISiteName"         : "LDAP Site",
              "ISiteOrg"          : "{{ SERVERSETUP_ORG_ORGNAME }}",
              "WSHostingSrvrs"    : "*",
              "TCPAnonymous"      : "0",
              "TCPNameAndPwd"     : "1",
              "SSLAnonymous"      : "0",
              "SSLNameAndPwd"     : "1"
            }
          },

          {
           "action": "create",
            "computeWithForm": true,
            "items": {
              "Form": "IMAPSite",
              "ISiteAdrs"         : [ "127.0.0.1", "{{ SERVERSETUP_DOMINO_HOSTNAME }}" ],
              "ISiteName"         : "IMAP Site",
              "ISiteOrg"          : "{{ SERVERSETUP_ORG_ORGNAME }}",
              "WSHostingSrvrs"    : "*",
              "TCPAnonymous"      : "0",
              "TCPNameAndPwd"     : "1",
              "SSLAnonymous"      : "0",
              "SSLNameAndPwd"     : "1"
            }
          },

          {
            "action": "create",
            "computeWithForm": true,
            "items": {
              "Form": "POP3Site",
              "ISiteAdrs"         : [ "127.0.0.1", "{{ SERVERSETUP_DOMINO_HOSTNAME }}" ],
              "ISiteName"         : "POP3 Site",
              "ISiteOrg"          : "{{ SERVERSETUP_ORG_ORGNAME }}",
              "WSHostingSrvrs"    : "*",
              "TCPAnonymous"      : "0",
              "TCPNameAndPwd"     : "1",
              "SSLAnonymous"      : "0",
              "SSLNameAndPwd"     : "1"
            }
          },

          {
            "action": "create",
            "computeWithForm": true,
            "items": {
              "Form": "Domain",
              "DomainType"        : "GlobalDomain",
              "GlobalDomainTasks" : "SMTP",
              "DomainName"        : "GlobalDomain",
              "NotesDomainList"   : "{{ SERVERSETUP_SERVER_DOMAINNAME }}",
              "LocalPrimaryInternetDomain" : "{{ SERVERSETUP_INET_DOMAIN }}"
            }
          }
        ]
      },

      {
        "action": "create",
        "filePath": "domcfg.nsf",
        "title": "Domino Web Server Configuration",
        "templatePath": "domcfg5.ntf",
        "signUsingAdminp": true,

        "documents": [
          {
            "action": "create",
            "items": {
              "Form": "LoginMap",
              "LF_LoginForm": "DWALoginForm",
              "LF_LoginFormDB": "iwaredir.nsf",
              "LF_ServerType": "0",
              "LF_IP": "",
              "$PublicAccess": "1"
            }
          }
        ]
      },

      {
        "action": "create",
        "filePath": "iwaredir.nsf",
        "title": "Redirect",
        "templatePath": "iwaredir.ntf",
        "signUsingAdminp": true,

        "documents": [
          {
            "action": "create",
            "computeWithForm": true,
            "items": {
              "Form": "AutoLogin",
              "ServerNameSelect": "1",
              "RedirectMessageWebView": "Redirecting...",
              "$LANGUAGE": "en",
              "$ServerSettingsTable": "Select",
              "EnableUltraliteRadioButton": "0",
              "MobileAgentKeywords": "ipod,iphone,android,ipad",
              "SSLPort": "443",
              "RedirectionTime": "1",
              "RedirectionMessageText": "Redirecting...",
              "WMRGlobalProfileURL": "/",
              "ServerNameChange": "0",
              "ForceSSL": "1",
              "OmitProtocol": "0",
              "UseHomeMailServer": "0",
              "LoginOptions": "0",
              "EncryptPassword": "0",
              "WebMailRedirectEnableDebug": "0",
              "WebMailRedirectProfileEnable": "0",
              "WMRVersion": "650",
              "WMRAttachmentNames": "BLANK",
              "MailServerDomainName": "",
              "RevProxyServerName": "",
              "ForcePath": ""
            }
          }
        ]
      },

      {
        "action": "create",
        "filePath": "autoupdate.nsf",
        "title": "Domino Auto Update",
        "templatePath": "autoupdate.ntf"
      }
    ]
  }
}