{
  "schemaVersion": 1,
  "organization": {
    "name": "Example Internal IT",
    "supportEmail": "servicedesk@example.internal",
    "supportURL": "https://help.example.internal/remotenx"
  },
  "userInfo": {
    "username": "jdoe",
    "email": "jdoe@example.internal",
    "deviceName": "iPad-0421"
  },
  "policies": {
    "allowUnmanagedConnections": false,
    "allowSavingPasswords": false,
    "allowClipboard": true,
    "allowDriveRedirection": false,
    "allowMicrophone": true,
    "minimumTLSVersion": "1.2",
    "requireNLA": true,
    "requireAppLock": true,
    "appLockTimeoutSeconds": 300,
    "allowSessionPreviews": false,
    "hideHostnamesInLiveActivity": true,
    "telemetryAllowed": false,
    "reviewPromptAllowed": false,
    "allowKeyExport": false,
    "sessionIdleTimeoutMinutes": 60,
    "businessEntitlement": true
  },
  "groups": [
    {
      "id": "servers",
      "name": "Servers",
      "color": "blue",
      "symbol": "server.rack",
      "sortOrder": 1
    },
    {
      "id": "vdi",
      "name": "Virtual Desktops",
      "color": "green",
      "symbol": "desktopcomputer",
      "sortOrder": 2
    }
  ],
  "identities": [
    {
      "id": "ad-user",
      "name": "Windows sign-in",
      "username": "EXAMPLE\\{{username}}"
    },
    {
      "id": "ssh-ops",
      "name": "Ops SSH certificate",
      "username": "{{username}}",
      "managedIdentity": "ssh-ops-identity"
    },
    {
      "id": "gateway-service",
      "name": "Gateway service account",
      "username": "svc-gateway",
      "password": "gateway-service-password"
    }
  ],
  "tunnels": [
    {
      "id": "bastion",
      "name": "Bastion",
      "host": "bastion.example.internal",
      "port": 22,
      "identity": "ssh-ops",
      "keepAliveSeconds": 30
    },
    {
      "id": "lab-jump",
      "name": "Lab via bastion",
      "host": "lab-jump.example.internal",
      "identity": "ssh-ops",
      "viaTunnel": "bastion"
    }
  ],
  "horizonServers": [
    {
      "id": "uag",
      "name": "Horizon (UAG)",
      "kind": "uag",
      "host": "uag.example.internal",
      "domain": "EXAMPLE",
      "launch": "htmlAccess"
    },
    {
      "id": "access",
      "name": "Workspace (Access)",
      "kind": "access",
      "host": "access.example.internal",
      "portalPath": "/catalog-portal/ui"
    }
  ],
  "connections": [
    {
      "id": "rdp-fileserver",
      "name": "File server",
      "protocol": "rdp",
      "host": "rdp.example.internal",
      "port": 3389,
      "username": "{{username}}",
      "domain": "EXAMPLE",
      "group": "servers",
      "color": "blue",
      "identity": "ad-user",
      "rdp": {
        "gateway": "rdgw.example.internal",
        "nla": true,
        "clipboard": true,
        "driveRedirection": false,
        "audio": true,
        "colorDepth": 32,
        "kerberosRealm": "EXAMPLE.INTERNAL"
      }
    },
    {
      "id": "rdp-lab",
      "name": "Lab desktop (tunnel)",
      "protocol": "rdp",
      "host": "lab-desk.example.internal",
      "group": "servers",
      "tunnel": "lab-jump",
      "identity": "ad-user"
    },
    {
      "id": "ssh-web01",
      "name": "web01",
      "protocol": "ssh",
      "host": "ssh.example.internal",
      "group": "servers",
      "ssh": {
        "identity": "ssh-ops",
        "terminalType": "xterm-256color",
        "keepAliveSeconds": 30
      }
    },
    {
      "id": "vdi-win11",
      "name": "Windows 11 desktop",
      "protocol": "blast",
      "host": "uag.example.internal",
      "group": "vdi",
      "blast": {
        "server": "uag",
        "desktopName": "Win11-Pool",
        "launch": "htmlAccess"
      }
    }
  ],
  "snippets": [
    {
      "id": "disk",
      "name": "Disk usage",
      "script": "df -h",
      "sendReturn": true,
      "folder": "Diagnostics"
    },
    {
      "id": "journal",
      "name": "Recent errors",
      "script": "journalctl -p err -n 50 --no-pager",
      "sendReturn": true,
      "folder": "Diagnostics"
    }
  ],
  "knownHosts": [
    {
      "host": "bastion.example.internal",
      "port": 22,
      "keyType": "ssh-ed25519",
      "key": "AAAAC3NzaC1lZDI1NTE5AAAAIAs8uW25YUYuR26rRa3pRyhK3PsRe2E+XjwyXCCBs1Po"
    }
  ],
  "sshCertificateAuthorities": [
    {
      "name": "Example host CA",
      "publicKey": "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBhwBPG6QRcoS36KU1u1BfxhYzjzygon/8QuG1TF1RTw example-host-ca",
      "hostPatterns": [
        "*.example.internal"
      ]
    }
  ],
  "trust": {
    "anchorCertificates": [
      "example-root-ca"
    ],
    "clientIdentities": [
      {
        "hostPatterns": [
          "uag.example.internal",
          "access.example.internal"
        ],
        "managedIdentity": "vdi-client-identity"
      }
    ]
  }
}