#!KAMAILIO

####### Defined Values #########

#!define WITH_POSTGRES
#!define WITH_AUTH
#!define WITH_USRLOCDB
#!define WITH_PRESENCE
#!define WITH_MULTIDOMAIN
#!define WITH_NAT
#!define WITH_NATSIPPING
#!define WITH_TLS

# *** Value defines - IDs used later in config
#!ifdef WITH_POSTGRES
	# - database URL - used to connect to database server by modules such
	#       as: auth_db, acc, usrloc, a.s.o.
	#!ifndef DBURL
		#!define DBURL "postgres://username:password@localhost/dbname"
	#!endif
#!endif
#!ifdef WITH_MULTIDOMAIN
	# - the value for 'use_domain' parameters
	#!define MULTIDOMAIN 1
#!else
	#!define MULTIDOMAIN 0
#!endif

# - flags
#   FLT_ - per transaction (message) flags
#	FLB_ - per branch flags
#!define FLT_NATS 5
#!define FLT_DLG 9
#!define FLT_DLGINFO 10
#!define FLB_NATB 6
#!define FLB_NATSIPPING 7

####### Global Parameters #########

### LOG Levels: 3=DBG, 2=INFO, 1=NOTICE, 0=WARN, -1=ERR
#!ifdef WITH_DEBUG
	debug=4
	log_stderror=no
#!else
	debug=2
	log_stderror=no
#!endif

memdbg=5
memlog=5

log_facility=LOG_LOCAL0
log_prefix="{$mt $hdr(CSeq) $ci} "

children=8

listen=udp:77.77.77.77:5060 advertise 77.77.77.77:5060
listen=tcp:77.77.77.77:5060 advertise 77.77.77.77:5060
listen=tls:77.77.77.77:5061 advertise 77.77.77.77:5061

#!ifdef WITH_TLS
	enable_tls=yes
#!endif

/* life time of TCP connection when there is no traffic
 * - a bit higher than registration expires to cope with UA behind NAT */
tcp_connection_lifetime=3605

tcp_accept_no_cl=yes
tcp_rd_buf_size=16384

####### Modules Section ########

/* set paths to location of modules */
mpath="/usr/local/kamailio/lib64/kamailio/modules/"

#!ifdef WITH_POSTGRES
	loadmodule "db_postgres.so"
#!endif

loadmodule "kex.so"
loadmodule "corex.so"
loadmodule "tm.so"
loadmodule "tmx.so"
loadmodule "sl.so"
loadmodule "rr.so"
loadmodule "pv.so"
loadmodule "maxfwd.so"
loadmodule "usrloc.so"
loadmodule "registrar.so"
loadmodule "textops.so"
loadmodule "siputils.so"
loadmodule "xlog.so"
loadmodule "sanity.so"
loadmodule "ctl.so"
loadmodule "cfg_rpc.so"
loadmodule "acc.so"
loadmodule "counters.so"
loadmodule "regex.so"

#!ifdef WITH_AUTH
	loadmodule "auth.so"
	loadmodule "auth_db.so"
#!endif

#!ifdef WITH_MULTIDOMAIN
	loadmodule "domain.so"
#!endif

#!ifdef WITH_PRESENCE
	loadmodule "presence.so"
	loadmodule "presence_xml.so"
	loadmodule "presence_dialoginfo.so"
	loadmodule "presence_mwi.so"
	loadmodule "pua.so"
	loadmodule "pua_dialoginfo.so"
	loadmodule "dialog.so"
#!endif

#!ifdef WITH_NAT
	loadmodule "nathelper.so"
#!endif

#!ifdef WITH_TLS
loadmodule "tls.so"
#!endif

#!ifdef WITH_DEBUG
	loadmodule "debugger.so"
#!endif

# ----------------- setting module-specific parameters ---------------

# ----- ctl params -----
# modparam("ctl", "binrpc", "unix:/var/run/kamailio/kamailio_ctl")

# ----- tm params -----
modparam("tm", "failure_reply_mode", 3)
modparam("tm", "fr_timer", 30000)
modparam("tm", "fr_inv_timer", 120000)

# ----- rr params -----
# set next param to 1 to add value to ;lr param (helps with some UAs)
modparam("rr", "enable_full_lr", 0)
# do not append from tag to the RR (no need for this script)
modparam("rr", "append_fromtag", 0)

# ----- registrar params -----
modparam("registrar", "method_filtering", 1)
modparam("registrar", "append_branches", 1)
modparam("registrar", "max_contacts", 30)
modparam("registrar", "default_expires", 900)
modparam("registrar", "default_expires_range", 40)
modparam("registrar", "expires_range", 40) 
modparam("registrar", "min_expires", 500)
modparam("registrar", "max_expires", 1300)
modparam("registrar", "gruu_enabled", 0)

# ----- usrloc params -----
/* enable DB persistency for location entries */
#!ifdef WITH_USRLOCDB
	modparam("usrloc", "db_url", DBURL)
	modparam("usrloc", "db_mode", 2)
	modparam("usrloc", "use_domain", MULTIDOMAIN)
#!endif

# ----- auth_db params -----
#!ifdef WITH_AUTH
modparam("auth_db", "db_url", DBURL)
modparam("auth_db", "calculate_ha1", 0)
modparam("auth_db", "password_column", "ha1")
modparam("auth_db", "load_credentials", "")
modparam("auth_db", "use_domain", MULTIDOMAIN)
modparam("auth", "nonce_count", 1) # enable nonce_count support
modparam("auth", "qop", "auth")    # enable qop=auth
modparam("auth", "algorithm", "MD5")
modparam("auth", "nonce_expire", 60)
modparam("auth", "nonce_auth_max_drift", 2)
#!endif

# ----- domain params -----
#!ifdef WITH_MULTIDOMAIN
	modparam("domain", "db_url", DBURL)
	modparam("domain", "register_myself", 1)
#!endif

#!ifdef WITH_PRESENCE
	# ----- presence params -----
	modparam("presence", "db_url", DBURL)
	modparam("presence", "server_address", "sip:77.77.77.77:5060" )
	modparam("presence", "send_fast_notify", 0)
	modparam("presence", "db_update_period", 20)
	modparam("presence", "clean_period", 40)
	modparam("presence", "subs_db_mode", 2)
	modparam("presence", "fetch_rows", 1000)

	# ----- presence_xml params -----
	modparam("presence_xml", "db_url", DBURL)
	modparam("presence_xml", "force_active", 1)

	# ----- presence_dialoginfo params -----
	modparam("presence_dialoginfo", "force_single_dialog", 0)
	modparam("presence_dialoginfo", "force_dummy_dialog", 1)

	# ----- pua params -----
	modparam("pua", "db_url", DBURL)
	modparam("pua", "db_mode", 2)
	modparam("pua", "update_period", 60)
	modparam("pua", "dlginfo_increase_version", 0)
	modparam("pua", "reginfo_increase_version", 0)
	modparam("pua", "check_remote_contact", 1)
	modparam("pua", "fetch_rows", 1000)

	# ----- pua_dialoginfo params -----
	modparam("pua_dialoginfo", "include_callid", 1)
	modparam("pua_dialoginfo", "send_publish_flag", FLT_DLGINFO)
	modparam("pua_dialoginfo", "caller_confirmed", 0)
	modparam("pua_dialoginfo", "include_tags", 1)
	modparam("pua_dialoginfo", "override_lifetime", 124)

	# ----- dialog params -----
	modparam("dialog", "db_url", DBURL)
	modparam("dialog", "enable_stats", 1)
	modparam("dialog", "db_mode", 1)
	modparam("dialog", "dlg_flag", FLT_DLG)	
#!endif

#!ifdef WITH_NAT
	# ----- nathelper params -----
	modparam("nathelper", "natping_interval", 30)
	modparam("nathelper", "ping_nated_only", 1)
	modparam("nathelper", "sipping_bflag", FLB_NATSIPPING)
	modparam("nathelper", "sipping_from", "sip:pinger@kamailio.org")

	# params needed for NAT traversal in other modules
	modparam("nathelper|registrar", "received_avp", "$avp(RECEIVED)")
	modparam("usrloc", "nat_bflag", FLB_NATB)
#!endif

#!ifdef WITH_TLS
	# ----- tls params -----
	modparam("tls", "config", "/usr/local/kamailio/etc/kamailio/tls.cfg")
#!endif

#!ifdef WITH_DEBUG
	# ----- debugger params -----
	modparam("debugger", "cfgtrace", 1)
	modparam("debugger", "log_level_name", "exec")
#!endif

####### Routing Logic ########

request_route {

	# NAT detection
	route(NATDETECT);

	# CANCEL processing
	if (is_method("CANCEL")) {
		if (t_check_trans()) {
			route(RELAY);
		}
		exit;
	}

	# handle requests within SIP dialogs
	route(WITHINDLG);

	### only initial requests (no To tag)
	# handle retransmissions
	if (!is_method("ACK")) {
		if(t_precheck_trans()) {
			t_check_trans();
			exit;
		}
		t_check_trans();
	}
	
	# authentication
	route(AUTH);

	# record routing for dialog forming requests (in case they are routed)
	# - remove preloaded route headers
	remove_hf("Route");
	if (is_method("INVITE|SUBSCRIBE")) {
		record_route();
	}
	
	# handle presence related requests
	route(PRESENCE);

	# handle registrations
	route(REGISTRAR);

	if ($rU==$null) {
		# request with no Username in RURI
		sl_send_reply("484","Address Incomplete");
		exit;
	}
	
	# user location service
	route(LOCATION);
	route(RELAY);
	
}

# Wrapper for relaying requests
route[RELAY] {

	# enable additional event routes for forwarded requests
	# - serial forking, RTP relaying handling, a.s.o.
	if (is_method("INVITE|BYE|SUBSCRIBE|UPDATE")) {
		if(!t_is_set("branch_route")) t_on_branch("MANAGE_BRANCH");
	}
	if (is_method("INVITE|SUBSCRIBE|UPDATE")) {
		if(!t_is_set("onreply_route")) t_on_reply("MANAGE_REPLY");
	}
	if (is_method("INVITE")) {
		if(!t_is_set("failure_route")) t_on_failure("MANAGE_FAILURE");
	}
	
	if(is_method("INVITE|BYE|UPDATE|CANCEL|ACK")) {
		setflag(FLT_DLGINFO);
		dlg_manage();
	}

	if (!t_relay()) {
		sl_reply_error();
	}
	exit;
}

# Handle requests within SIP dialogs
route[WITHINDLG] {
	if (!has_totag()) return;

	# sequential request withing a dialog should
	# take the path determined by record-routing
	if (loose_route()) {
		route(DLGURI);
		if ( is_method("ACK") ) {
			# ACK is forwarded statelessly
			route(NATMANAGE);
		} else if ( is_method("NOTIFY") ) {
			# Add Record-Route for in-dialog NOTIFY as per RFC 6665.
			record_route();
		}
		route(RELAY);
		exit;
	} else {
		if (is_method("SUBSCRIBE") && uri == myself) {
			# in-dialog subscribe requests
			route(PRESENCE);
			exit;
		}
		if ( is_method("ACK") ) {
			if ( t_check_trans() ) {
				# no loose-route, but stateful ACK;
				# must be an ACK after a 487
				# or e.g. 404 from upstream server
				route(RELAY);
				exit;
			} else {
				# ACK without matching transaction ... ignore and discard
				exit;
			}
			sl_send_reply("404","Not here");
		}
		exit;
	}
}

# Handle SIP registrations
route[REGISTRAR] {
	if (is_method("REGISTER")) {
		if(isflagset(FLT_NATS)) {
			setbflag(FLB_NATB);
			#!ifdef WITH_NATSIPPING
			# do SIP NAT pinging
				setbflag(FLB_NATSIPPING);
			#!endif
		}
		if (!save("location")) {
			sl_reply_error();
		}
		exit;
	}
}

# User location service
route[LOCATION] {
	if (is_method("MESSAGE|SUBSCRIBE|NOTIFY|PUBLISH")) {
		$avp(oexten) = $rU;
		if (!lookup("location")) {
			$var(rc) = $rc;
			t_newtran();
			switch ($var(rc)) {
				case -1:
					send_reply("410", "USER_NOT_REGISTERED");
					exit;
				case -3:
					send_reply("404", "User Not Found");
					exit;
				case -2:
					send_reply("405", "Method Not Allowed");
					exit;
			}
		}
		route(RELAY);
	}
	exit;
}

# Presence server processing
route[PRESENCE] {
	if(!is_method("PUBLISH|SUBSCRIBE")) return;

	if(is_method("SUBSCRIBE") && $hdr(Event)=="message-summary") {
		# returns here if no voicemail server is configured
		sl_send_reply("404", "No voicemail service");
		exit;
	}

	#!ifdef WITH_PRESENCE
		if (!t_newtran()) {
			sl_reply_error();
			exit;
		}

		if(is_method("PUBLISH")) {
			handle_publish();
			t_release();
		} else if(is_method("SUBSCRIBE")) {
			handle_subscribe();
			t_release();
		}
		exit;
	#!endif

	# if presence enabled, this part will not be executed
	if (is_method("PUBLISH") || $rU==$null) {
		sl_send_reply("404", "Not here");
		exit;
	}
	return;
}

# IP authorization and user authentication
route[AUTH] {
	#!ifdef WITH_AUTH
		if (is_method("REGISTER")) {
			# authenticate requests		
			if ($adu==$null || $au==$null || $fd==$null) {
				if (is_method("REGISTER")) {
					xlog("L_INFO", "$ci|user [$Au] from ip $si issued authentication challenge");
				}
				auth_challenge("$fd", "0");
				exit;
			}
			if (!auth_check("$fd", "subscriber", "1")) {
				xlog("L_INFO", "$ci|auth_check|user [$au@$fd] from ip $si authentication failed - issued authentication challenge");
				auth_challenge("$fd", "0");
				exit;
			}
			consume_credentials();
		}

	#!endif
	return;
}

# Caller NAT detection
route[NATDETECT] {
	#!ifdef WITH_NAT
		force_rport();
		if (nat_uac_test("19")) {
			if (is_method("REGISTER")) {
				fix_nated_register();
			}
			setflag(FLT_NATS);
		}
	#!endif
	return;
}

# NAT traversal
route[NATMANAGE] {
	#!ifdef WITH_NAT
		if (is_request()) {
			if (has_totag()) {
				if (check_route_param("nat=yes")) {
					setbflag(FLB_NATB);
				}
			}
		}
		if (!(isflagset(FLT_NATS) || isbflagset(FLB_NATB))) return;

		if (is_request()) {
			if (!has_totag()) {
				if (t_is_branch_route()) {
					add_rr_param(";nat=yes");
				}
			}
		}
		if (is_reply()) {
			if (isbflagset(FLB_NATB)) {
				if(is_first_hop())
					set_contact_alias();
			}
		}
	#!endif
	return;
}

# URI update for dialog requests
route[DLGURI] {
	#!ifdef WITH_NAT
		if(!isdsturiset()) {
			handle_ruri_alias();
		}
	#!endif
	return;
}

# Manage outgoing branches
branch_route[MANAGE_BRANCH] {
	xdbg("new branch [$T_branch_idx] to $ru\n");
	route(NATMANAGE);
}

# Manage incoming replies
onreply_route[MANAGE_REPLY] {
	xdbg("incoming reply\n");
	if(status=~"[12][0-9][0-9]") {
		route(NATMANAGE);
	}
}

# Manage failure routing cases
failure_route[MANAGE_FAILURE] {
	route(NATMANAGE);

	if (t_is_canceled()) {
		exit;
	}
}