{
  "$schema": "http://json-schema.org/draft-07/schema",
  "properties": {
    "-frontend-quantity": {
      "description": "Quantity of Frontends Replicate.",
      "title": "Frontend Replication Quantity",
      "type": "integer"
    },
    "apache-certificate": {
      "description": "SSL Certificate used by the server. By appending to it CA certificate it is possible to use this field to replace not implemented apache-ca-certificate. Deprecated, please use master-key-upload-url.",
      "textarea": true,
      "title": "[DEPRECATED] SSL Certificate, with optional CA certificate",
      "type": "string"
    },
    "apache-key": {
      "description": "SSL Key used by the server. Deprecated, please use master-key-upload-url.",
      "textarea": true,
      "title": "[DEPRECATED] SSL Key",
      "type": "string"
    },
    "domain": {
      "description": "Domain used to generate automatic hostnames for slaves. For example 'example.com' will result with slave hostname 'slaveref.example.com'.",
      "format": "idn-hostname",
      "title": "Domain",
      "type": "string"
    },
    "enable-http2-by-default": {
      "default": "true",
      "description": "Use HTTP2 as default Protocol",
      "enum": [
        "true",
        "false"
      ],
      "title": "Enable HTTP2 by Default",
      "type": "string"
    },
    "enable-http3": {
      "default": "false",
      "title": "Enable HTTP3",
      "description": "Globally enable HTTP3 protocol. Can be precisely set on each node by -frontend-i-config-enable-http3",
      "enum": [
        "true",
        "false"
      ],
      "type": "string"
    },
    "http3-port": {
      "default": 443,
      "title": "Real advertised HTTP3 port",
      "description": "As most common deloyment is using iptables for port redirection and in case of udp it is advertising to the process it's bind port instead of the really connected to, it's required to manually set this port for the whole cluster. Can be precisely set on each node by -frontend-i-config-http3-port",
      "type": "integer"
    },
    "re6st-verification-url": {
      "description": "Url to verify if the internet and/or re6stnet is working.",
      "title": "Test Verification URL",
      "type": "string"
    },
    "backend-connect-timeout": {
      "default": 5,
      "description": "Time in seconds for establishing connection to the backend.",
      "title": "Timeout for backend connection (seconds)",
      "type": "integer"
    },
    "backend-connect-retries": {
      "default": 3,
      "description": "Amount of retries to connect to the backend. The amount of backend-connect-timeout*backend-connect-retries seconds will be spent to connect to the backend.",
      "title": "Amount of retries to connect to the backend.",
      "type": "integer"
    },
    "automatic-internal-kedifa-caucase-csr": {
      "default": "true",
      "description": "Automatically signs CSRs sent to KeDiFa's caucase, based on CSR comparison.",
      "enum": [
        "true",
        "false"
      ],
      "title": "Automatic Internal KeDiFa's Caucase CSR",
      "type": "string"
    },
    "automatic-internal-backend-client-caucase-csr": {
      "default": "true",
      "description": "Automatically signs CSRs sent to Backend Client's caucase, based on CSR comparison.",
      "enum": [
        "true",
        "false"
      ],
      "title": "Automatic Internal Backend Client's Caucase CSR",
      "type": "string"
    },
    "ciphers": {
      "title": "Ordered space separated list of ciphers",
      "type": "string",
      "default": "ECDHE-ECDSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-GCM-SHA384 ECDHE-ECDSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-GCM-SHA256 ECDHE-ECDSA-AES256-SHA ECDHE-ECDSA-CHACHA20-POLY1305 ECDHE-RSA-CHACHA20-POLY1305 ECDHE-RSA-AES256-SHA ECDHE-RSA-AES128-SHA ECDHE-ECDSA-AES256-SHA ECDHE-ECDSA-AES128-SHA AES256-SHA AES128-SHA ECDHE-RSA-DES-CBC3-SHA DES-CBC3-SHA"
    },
    "request-timeout": {
      "default": 600,
      "description": "Timeout for HTTP requests.",
      "title": "HTTP Request timeout in seconds",
      "type": "integer"
    },
    "authenticate-to-backend": {
      "default": "false",
      "description": "If set to true the frontend certificate will be used as authentication certificate to the backend. Note: backend might have to know the frontend CA, available with 'backend-client-caucase-url'.",
      "enum": [
        "false",
        "true"
      ],
      "title": "Authenticate to backend",
      "type": "string"
    },
    "ram-cache-size": {
      "default": "1G",
      "title": "Default size of RAM cache on each node (bytes)",
      "description": "The value can be provided with suffix 'K', 'M', 'G'",
      "type": "string"
    },
    "disk-cache-size": {
      "default": "8G",
      "title": "Default size of disk cache on each node (bytes)",
      "description": "The value can be provided with suffix 'K', 'M', 'G'",
      "type": "string"
    }
  },
  "title": "Input Parameters",
  "type": "object"
}
