key_type: ca
algorithm_signer: rsa-sha2-256
ttl: 315360000  # 87600 * 3600
allow_host_certificates: true
allow_user_certificates: false
allowed_domains: "main.unkin.net,consul"
allow_subdomains: true
allow_bare_domains: false