Server settings
The service settings are in /etc/centrex-v3/centrex.env (root:centrex, 0640: it contains
passwords). On a VM installed from the image, the first boot fills them in. After a change:
sudo systemctl restart centrex.
Everything else (brand, language, time zone, email, transcription, SSO, assistant, license…) is set in the portal: see Instance settings.
Required
| Variable | Value |
|---|---|
CENTREX_BASE_URL | FusionPBX’s PostgreSQL database (postgres://user:password@127.0.0.1:5432/fusionpbx); the PBX creates its centrex schema in it. |
CENTREX_URL_PUBLIQUE | Public address of the portal (https://pbx.operator.example): links sent by email, phone links, passkeys. |
CENTREX_ESL_ADRESSE | FreeSWITCH event socket (127.0.0.1:8021). |
CENTREX_ESL_MOT_DE_PASSE | Its password. |
CENTREX_CDR_IDENTIFIANTS | username:password expected from mod_json_cdr; without them, no call reaches the log. |
CENTREX_TROUSSEAU | Keyring of the encryption keys (/etc/centrex-v3/cles). |
Optional
| Variable | Default | For |
|---|---|---|
CENTREX_PIPER, CENTREX_VOIX_PIPER | absent (set by the image) | Text-to-speech (Piper program and French voice model); without it, announcements are uploaded as audio files. |
CENTREX_VOIX_PIPER_EN | absent (set by the image) | English voice model, for customers set to English. |
CENTREX_HUB_URL | absent | The vendor’s Hub, which receives license reports; without it, the report is downloaded from the portal. |
CENTREX_PARE_FEU | nftables | Address banning (nftables) or nothing (aucun, bans only recorded in the database). |
CENTREX_ECOUTE | 127.0.0.1:8080 | Listening address of the portal and API, behind nginx. |
CENTREX_CDR_ECOUTE | 127.0.0.1:8085 | Listening address for FreeSWITCH CDRs. |
CENTREX_LOG | info | Log level (debug for troubleshooting: it may write signed links). |
Commands
They run on the VM with the service’s settings:
sudo sh -c 'set -a; . /etc/centrex-v3/centrex.env; centrex <command>'.
| Command | For |
|---|---|
initialiser --operateur … --admin-courriel … --admin-nom … | Create the operator and its first administrator, once. |
inviter --courriel … | Print a new link to choose one’s password (email not set up yet). |
reinitialiser-second-facteur --courriel … | Lost phone: remove an account’s two-step verification and close its sessions. |
sauvegarder, restaurer | Backup and restore. |
verifier | Check the machine: settings, keyring, database and schema, FusionPBX, FreeSWITCH (SIP profiles, CDRs), files, portal, service. Each item ok, attention or ÉCHEC; exit code 1 on failure. Read-only. |
migrate | Apply database migrations (the service does it on start). |
bascule … | Active/passive. |
acces-assistance ouvrir --heures …, fermer, etat | Vendor support access, closed by default, 7 days at most. |
audit verifier | Check that the audit log has not been tampered with (exit code 1 otherwise). |
secrets nouvelle-cle, rechiffrer, etat | Rotation of the secrets encryption key. |