Initial settings
Administration: https://server-address/admin/
Web (ssl) certificate
UCS uses Nginx by default. Replace the relevant files with your certificate:
- /etc/ssl/ucs.key
- /etc/ssl/ucs.crt
Load new settings:
systemctl reload nginx
SIP and STUN
___MENU Admin Menu → System → Parameters → (tab) Servers
Example settings:
- SIP over WebSocket URL: wss://pbx.insoft.cz/sip
- STUN servers: stun:pbx.insoft.cz:3478
Asterisk
___MENU Admin Menu → System → Parameters → (tab) Asterisk
In order for softphones to work, you need to fill in:
- DTLS CA certificate
X509v3 Key Usage: critical
Digital Signature, Certificate Sign, CRL Sign
- DTLS key and certificate
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
warning
DTLS key and certificate - here you need to enter a private key with a public part
"DTLS key and certificate" setup example:
-----BEGIN PRIVATE KEY-----
...
-----END PRIVATE KEY-----
-----BEGIN CERTIFICATE-----
...
-----END CERTIFICATE-----
Networking
___MENU Admin Menu → System → Parameters → (tab) Networking
warning
Set according to your network topology.
Example:
- System hostname: pbx.insoft.cz
- System internal IP: 192.168.123.123
- System public IP: 31.7.242.2
- NTP server: 192.168.123.124