[global]
type = global
keep_alive_interval = 0

[nc_registration]
type = registration
transport = nc_transport
outbound_auth = nc_auth
client_uri = sip:+49xxxyyyyyy@pbx.sip-trunk.netcologne.de:5061
contact_user = +49xxxyyyyyy
server_uri = sip:pbx.sip-trunk.netcologne.de
line = yes
expiration = 3600
endpoint = nc_endpoint 

[nc_transport]
type = transport
protocol = tls
method = tlsv1_2
cos = 3
tos = cs5
bind = 0.0.0.0:5062
ca_list_path = /etc/ssl/certs/
cert_file = /etc/letsencrypt/live/fullchain.pem
priv_key_file = /etc/letsencrypt/live/myhostname/privkey.pem

[nc_endpoint]
type = endpoint
from_domain = pbx.sip-trunk.netcologne.de
from_user = +49xxxyyyyyy
context = NetCologne ; this is the context incoming calls will arrive at
language = de
outbound_auth = nc_auth
media_encryption = sdes
aors = nc_aor
cos_audio = 5
tos_audio = ef
direct_media_method = invite
dtmf_mode = rfc4733
direct_media = no
disallow = all
allow = alaw
allow = ulaw
transport = nc_transport

[nc_auth]
type = auth
auth_type = userpass
username = +49xxxyyyyyy ; as provided by NetCologne
password = the surprisingly short password provided by NetCologne
realm = pbx.sip-trunk.netcologne.de

[nc_aor]
type = aor
contact = sip:+49xxxyyyyyy@pbx.sip-trunk.netcologne.de
qualify_frequency = 30