Skip to main content

Initial settings

Administration: https://server-address/admin/

Web (ssl) certificate

UCS uses Nginx by default. Replace the relevant files with your certificate:

  • /etc/ssl/ucs.key
  • /etc/ssl/ucs.crt

Load new settings:

systemctl reload nginx

SIP and STUN

___MENU Admin Menu → System → Parameters → (tab) Servers

Example settings:

  • SIP over WebSocket URL: wss://pbx.insoft.cz/sip
  • STUN servers: stun:pbx.insoft.cz:3478

Asterisk

___MENU Admin Menu → System → Parameters → (tab) Asterisk

In order for softphones to work, you need to fill in:

  • DTLS CA certificate
X509v3 Key Usage: critical
Digital Signature, Certificate Sign, CRL Sign
  • DTLS key and certificate
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
warning

DTLS key and certificate - here you need to enter a private key with a public part

"DTLS key and certificate" setup example:

-----BEGIN PRIVATE KEY-----
...
-----END PRIVATE KEY-----
-----BEGIN CERTIFICATE-----
...
-----END CERTIFICATE-----

Networking

___MENU Admin Menu → System → Parameters → (tab) Networking

warning

Set according to your network topology.

Example:

  • System hostname: pbx.insoft.cz
  • System internal IP: 192.168.123.123
  • System public IP: 31.7.242.2
  • NTP server: 192.168.123.124