#for auth mode 'credentials', add any number of the following config entry
#config credentials
#	option uspot 'example'
#	option username 'myuser'
#	option password 'mypass'

## Values provided for the options below reflect the defaults used when the option is not set.

#config uspot 'example'
#	option auth_mode ''		# REQUIRED - one of 'uam', 'radius', 'credentials', 'click-to-continue'
#	option idle_timeout '600'	# OPTIONAL - client is kicked when idle for more than N seconds, defaults to 600, option used if not provided by radius
#	option session_timeout '0'	# OPTIONAL - client is kicked if connected for more than N seconds, defaults to 0, option used if not provided by radius
#	option disconnect_delay '0'	# OPTIONAL - if set, a disconnected client will only be actually kicked after disconnect_delay seconds
#	option interface ''		# REQUIRED - dedicated network interface (from config/network) on which captive clients will be managed
#	option setname ''		# REQUIRED - firewall ipset name for client management
#	option ratelimit_def ''		# OPTIONAL - name of 'ratelimit' defaults to apply to all connected clients. No limit if not set. Overrides RADIUS attributes.
#	option debug '0'		# OPTIONAL - turn on debugging output in logs

# captive portal API (RFC8908) configuration:
#	option cpa_can_extend '0'	# OPTIONAL - 'can-extend-session' is true if this option is set to '1', false otherwise
#	option cpa_venue_url ''		# OPTIONAL - value is provided verbatim as 'venue-info-url'

# for auth mode 'uam' and 'radius':
#	option rad_serv_type 'udp'	# OPTIONAL - radius server type. Supported: udp, tcp, tls, dtls
#	option auth_server ''		# REQUIRED - radius authentication server name or address
#	option auth_port '1812'		# OPTIONAL - radius authentication server port - defaults to 1812 unless rad_serv_type is tls/dtls: 2083
#	option auth_secret ''		# REQUIRED - radius authentication server password. For tls/dtls with PSK auth, format is 'psk@username@hexkey'
#	option auth_server2 ''		# OPTIONAL - radius secondary authentication server name or address
#	option auth_port2 '1812'	# OPTIONAL - radius secondary authentication server port - defaults to 1812 unless rad_serv_type is tls/dtls: 2083
#	option auth_secret2 ''		# REQUIRED if auth_server2 is set - radius secondary authentication server password. For tls/dtls with PSK auth, format is 'psk@username@hexkey'
#	option auth_proxy ''		# OPTIONAL - radius authentication server proxy
#	option acct_server ''		# REQUIRED if RADIUS accounting is active and rad_serv_type is not tls/dtls, ignored otherwise - radius accounting server name or address
#	option acct_port '1813'		# OPTIONAL - radius accounting server port
#	option acct_secret ''		# REQUIRED if acct_server is set - radius accounting server password
#	option acct_server2 ''		# OPTIONAL if RADIUS accounting is active and rad_serv_type is not tls/dtls, ignored otherwise - radius secondary accounting server name or address
#	option acct_port2 '1813'	# OPTIONAL - radius secondary accounting server port
#	option acct_secret2 ''		# REQUIRED if acct_server2 is set - radius secondary accounting server password
#	option acct_proxy ''		# OPTIONAL - radius accounting server proxy
#	option acct_interval ''		# OPTIONAL - radius accounting interim interval override (seconds)
#	option swapio ''		# OPTIONAL - swap the meaning of RADIUS 'Input' and 'Output' attributes
#	option counters '0'		# OPTIONAL - enable traffic counters (for accounting and/or quota limits)
#	option das_secret ''		# OPTIONAL - radius DAS secret, enables RADIUS DAS
#	option das_port '3799'		# OPTIONAL - radius DAS listen port
#	option nasid ''			# REQUIRED - radius NAS-Identitifer, UAM '&nasid='
#	option nasmac ''		# REQUIRED - radius Called-Station, UAM '&called='
#	option mac_format ''		# OPTIONAL - MAC format specifier: 'aabbccddeeff', 'aa-bb-cc-dd-ee-ff', 'aa:bb:cc:dd:ee:ff' or the equivalent uppercase, defaults to 'aa:bb:cc:dd:ee:ff'
#	option location_name ''		# OPTIONAL - radius WISPr-Location-Name

# for auth_mode 'uam':
#	option uam_port '3990'		# OPTIONAL - local UAM server port
#	option uam_secret ''		# OPTIONAL - remote UAM server password
#	option uam_server ''		# REQUIRED - remote UAM server base url, e.g. "https://server.example.com/" - NB: trailing slash
#	option challenge ''		# OPTIONAL - UAM shared challenge used either to encode the PAP Password if uam_secret is set; or as the challenge in CHAP auth, depending on UAM backend operation
#	option mac_auth '0'		# OPTIONAL - Attempt MAC-authentication first
#	option mac_passwd ''		# OPTIONAL - Password sent for MAC-auth, defaults to formatted MAC address
#	option mac_suffix ''		# OPTIONAL - suffix appended to username for MAC-auth
#	option uam_sslurl ''		# OPTIONAL - base url to local UAM SSL (for HTTPS operation, requires valid SSL setup in uhttpd UAM config), e.g. "https://uspot.lan:3991/" - NB: trailing slash
