{
  "domain": "REQUIRED",
  "domain_internal": "= domain.sub(/\\..*$/,'.i')",
  "name": {
    "en": "REQUIRED"
  },
  "description": {
    "en": "REQUIRED"
  },
  "contacts": {
    "default": "REQUIRED"
  },
  "languages": ["en"],
  "default_language": "en",
  "enrollment_policy": "open",
  "service_levels": [
    {"name": "free", "bandwidth":102400, "storage":50},
    {"name": "basic", "bandwidth":null, "storage":1000},
    {"name": "premium", "bandwidth":null, "storage":10000}
  ],
  "service_allow_free": false,
  "ca": {
    "name": "= global.provider.ca.organization + ' Root CA'",
    "organization": "= global.provider.name[global.provider.default_language]",
    "organizational_unit": "= 'https://' + global.common.domain.full_suffix",
    "bit_size": 4096,
    "digest": "SHA256",
    "life_span": "10y",
    "server_certificates": {
      "bit_size": 3248,
      "digest": "SHA256",
      "life_span": "1y"
    },
    "client_certificates": {
      "bit_size": 2024,
      "digest": "SHA256",
      "life_span": "2m",
      "free_prefix": "FREE"
    }
  },
  "hiera_sync_destination": "/etc/leap"
}