<profile name="internal">
  <!--
      This is a sofia sip profile/user agent.  This will service exactly one ip and port.
      In FreeSWITCH you can run multiple sip user agents on their own ip and port.

      When you hear someone say "sofia profile" this is what they are talking about.
  -->

  <!-- http://wiki.freeswitch.org/wiki/Sofia_Configuration_Files -->
  <!--aliases are other names that will work as a valid profile name for this profile-->
  <aliases>

  </aliases>

  <gateways>
  </gateways>

  <domains>

    <domain name="all" alias="true" parse="false"/>
  </domains>

  <settings>



    <param name="debug" value="0"/>
    <param name="sip-trace" value="no"/>
    <param name="sip-capture" value="no"/>

    <param name="watchdog-enabled" value="no"/>
    <param name="watchdog-step-timeout" value="30000"/>
    <param name="watchdog-event-timeout" value="30000"/>

    <param name="log-auth-failures" value="false"/>
    <param name="forward-unsolicited-mwi-notify" value="false"/>

    <param name="context" value="public"/>
    <param name="rfc2833-pt" value="101"/>
    <!-- port to bind to for sip traffic -->
    <param name="sip-port" value="$${internal_sip_port}"/>
    <param name="dialplan" value="XML"/>
    <param name="dtmf-duration" value="2000"/>
    <param name="inbound-codec-prefs" value="$${global_codec_prefs}"/>
    <param name="outbound-codec-prefs" value="$${global_codec_prefs}"/>
    <param name="rtp-timer-name" value="soft"/>
    <!-- ip address to use for rtp, DO NOT USE HOSTNAMES ONLY IP ADDRESSES -->
    <param name="rtp-ip" value="$${local_ip_v4}"/>
    <!-- ip address to bind to, DO NOT USE HOSTNAMES ONLY IP ADDRESSES -->
    <param name="sip-ip" value="$${local_ip_v4}"/>
    <param name="hold-music" value="$${hold_music}"/>
    <param name="apply-nat-acl" value="nat.auto"/>

    <param name="apply-inbound-acl" value="domains"/>

    <param name="local-network-acl" value="localnet.auto"/>

    <param name="record-path" value="$${recordings_dir}"/>
    <param name="record-template" value="${caller_id_number}.${target_domain}.${strftime(%Y-%m-%d-%H-%M-%S)}.wav"/>
    <param name="manage-presence" value="true"/>

    <param name="presence-hosts" value="$${domain},$${local_ip_v4}"/>
    <param name="presence-privacy" value="$${presence_privacy}"/>
    <!-- ************************************************* -->

    <param name="inbound-codec-negotiation" value="generous"/>
    <param name="tls" value="$${internal_ssl_enable}"/>

    <param name="tls-only" value="false"/>

    <param name="tls-bind-params" value="transport=tls"/>

    <param name="tls-sip-port" value="$${internal_tls_port}"/>
    <param name="tls-passphrase" value=""/>

    <param name="tls-verify-date" value="true"/>
    <param name="tls-verify-policy" value="none"/>
 
    <param name="tls-verify-depth" value="2"/>
 
    <param name="tls-verify-in-subjects" value=""/>
 
    <param name="tls-version" value="$${sip_tls_version}"/>

    <param name="tls-ciphers" value="$${sip_tls_ciphers}"/>

    <param name="inbound-late-negotiation" value="true"/>

    <param name="inbound-zrtp-passthru" value="true"/>

    <param name="nonce-ttl" value="60"/>

    <param name="auth-calls" value="$${internal_auth_calls}"/>

    <param name="inbound-reg-force-matching-username" value="true"/>

    <param name="auth-all-packets" value="false"/>

    <!-- external_sip_ip
         Used as the public IP address for SDP.
         Can be an one of:
         ip address            - "12.34.56.78"
         a stun server lookup  - "stun:stun.server.com"
         a DNS name            - "host:host.server.com"
         auto                  - Use guessed ip.
         auto-nat              - Use ip learned from NAT-PMP or UPNP
    -->
    <param name="ext-rtp-ip" value="$${external_rtp_ip}"/>
    <param name="ext-sip-ip" value="$${external_sip_ip}"/>

    <!--<param name="ext-rtp-ip" value="auto-nat"/>
    <param name="ext-sip-ip" value="auto-nat"/>-->

    <param name="rtp-timeout-sec" value="300"/>
    <param name="rtp-hold-timeout-sec" value="1800"/>

    <param name="force-register-domain" value="$${domain}"/>

    <param name="force-subscription-domain" value="$${domain}"/>

    <param name="force-register-db-domain" value="$${domain}"/>


    <!-- for sip over websocket support -->
    <param name="ws-binding"  value=":5066"/>

    <!-- for sip over secure websocket support -->
    <!-- You need wss.pem in $${certs_dir} for wss or one will be created for you -->
    <param name="wss-binding" value=":7443"/>


    <param name="challenge-realm" value="auto_from"/>

  </settings>
</profile>
