{
  "cert_dir": "~/.ssl-certs",
  "default_port": 443,
  "connection_timeout": 3.0,
  "default_validity_days": 365,
  "key_size": 2048,
  "debug": false,
  "unifi": {
    "host": "udm-se.mgeppert.com",
    "username": "SSLCertificate",
    "password": "cYu2E1OWt0XseVf9j5ML",
    "site": "default",
    "ssh_port": 22,
    "ssh_username": "root",
    "ssh_password": "RH6X64FAAiE7CrcV84lQ",
    "ssh_key_path": "~/.ssh/id_rsa"
  },
  "letsencrypt": {
    "email": "mgeppert1@gmail.com",
    "validation_method": "standalone",
    "use_staging": false,
    "agree_tos": true
  },
  "comments": {
    "cert_dir": "Directory where certificates and keys will be stored",
    "default_port": "Default port to use when checking certificate expiration",
    "connection_timeout": "Timeout in seconds for SSL connections",
    "default_validity_days": "Default validity period in days for generated certificates",
    "key_size": "Key size in bits for generated certificates",
    "debug": "Enable debug logging with line numbers and file names (default: false)",
    "unifi": "UniFi device connection parameters",
    "unifi.host": "Hostname or IP address of the UniFi device",
    "unifi.username": "Username for authenticating with the UniFi device",
    "unifi.password": "Password for authenticating with the UniFi device",
    "unifi.site": "Site name for the UniFi device (default: 'default')",
    "unifi.ssh_port": "SSH port for the UniFi device (default: 22)",
    "unifi.ssh_username": "Username for SSH authentication with the UniFi device",
    "unifi.ssh_password": "Password for SSH authentication (leave empty to use SSH key)",
    "unifi.ssh_key_path": "Path to the SSH private key file for authentication",
    "letsencrypt": "Let's Encrypt certificate settings",
    "letsencrypt.email": "Email address for Let's Encrypt registration and important notifications",
    "letsencrypt.validation_method": "Method to use for domain validation (standalone, webroot, dns)",
    "letsencrypt.use_staging": "Whether to use Let's Encrypt's staging environment for testing (true/false)",
    "letsencrypt.agree_tos": "Whether to automatically agree to the Terms of Service (true/false)"
  }
}