; AMI (Asterisk Manager Interface).
; NUNCA exposto à LAN/Internet: bind em 0.0.0.0 apenas porque o container usa
; network_mode: host, mas o acesso externo é bloqueado pelo nftables
; (infrastructure/nftables/b2bcall.nft) — só loopback e a rede interna dos
; containers Docker (172.16.0.0/12) alcançam a porta 5038.
[general]
enabled = yes
port = 5038
bindaddr = 0.0.0.0
displayconnects = no
webenabled = no

[${AMI_USERNAME}]
secret = ${AMI_SECRET}
deny = 0.0.0.0/0.0.0.0
permit = 127.0.0.1/255.255.255.255
permit = 172.16.0.0/255.240.0.0
read = system,call,agent,user,config,command,dtmf,reporting,cdr,dialplan,originate
write = system,call,agent,user,config,command,dtmf,reporting,originate