; PBX Monitor / MajorDom
; Asterisk 20 chan_sip and compatible AMI implementations.
; Add once to /etc/asterisk/manager.conf:
; #include "manager-pbx-monitor.conf"
;
; The installer generates a different secret on every PBX.
; Replace CHANGE_ME before installing this template manually.
; For a new, previously disabled AMI use in manager.conf [general]:
; enabled = yes
; bindaddr = 127.0.0.1
; port = 5038
; Do not overwrite an existing AMI listener used by other integrations.

[pbx-monitor]
secret = CHANGE_ME_UNIQUE_SECRET_FOR_THIS_PBX
deny = 0.0.0.0/0.0.0.0
permit = 127.0.0.1/255.255.255.255
read = system,call,agent,reporting,cdr
write = system,call,agent,reporting
displayconnects = no
;
; AMI class permissions are not an action allowlist.
; Use the bundled SSH bridge: it permits only status queries and Ping.
; Never expose TCP 5038 publicly and never give the AMI secret to frontend.