There IS light at the end of the tunnel! I got almost everything working (apart from parking and recording).
And to shed some light rather than keeping this a mystery, here’s exactly what I did after several attempts:
-
get ISO-installer
-
install latest, bleeding edge version (asterisk 19 as of now)
-
installer sees two disks and automatically configures them as RAID 1 array, neat!
-
give the box a local address at first to enter admin data via GUI
-
change root pw!!! , useradd [user], tweak and reload sshd.conf (port 2200, PermitRootLogin no, just saying)
-
yum update
-
fwconsole ma upgradeall
-
fwconsole chown
-
System / System Admin / Activation: activate for EPM to work
-
Admin / Certificate Manager / Cert / Let’s Encrypt
-
Admin / System Admin / HTTPS Setup: Use your cert and restart apache
-
Admin / System Admin / Ports: set to all the recommended ports + Restful Phoneapps to something else (5443)
-
fwconsole chown
-
fwconsole ma updateinstall sanogomartapi
-
End Point Manager / Global Settings / External Address: FQDN (not IP!)
-
End Point Manager / Global Settings / Use DPMA
-
End Point Manager / Template / [digium_default] / General / PhoneApps + Provisioning Protocol: HTTPS
-
End Point Manager / Template / [digium_default] / General / Distination Address + Provisioning Server Address: External
-
End Point Manager / Template / [digium_default] / Options: Use DPMA-Apps
-
End Point Manager / Template / [digium_default] / Options: Voicemail Key Type to “Voicemail Application”
-
End Point Manager / Template / [digium_default] / Models / D80: populate line keys with something (for some unfathomable reason, only then contacts appear on the phone)
-
Connectivity / Firewall / Services / Extra Services: HTTPS Provisioning + Rest Apps HTTPS to “Internet”
-
Settings / Asterisk SIP Settings / PJSIP Settings [chan_pjsip]: In TLS/SSL/SRTP Settings choose your cert, set Transports TLS to “Yes”
-
Applications / Extensions [extension] / Advanced : Set Transport to “0.0.0.0-tls” and Media Encryption to “SRTP via in-SDP (Recommended)”
-
Application / Conferences: Add conference
-
Admin / User Management / [user] / Phone Apps: Allow Access to “Yes”
-
Admin / User Management / [user] / Phone Apps / Each Tab: Allow Access to “Yes”
-
Admin / User Management / [user] / Phone Apps / Conferences: choose one from Applications / Conferences
-
fwconsole restart restapps
-
On D80, Configuration Server: Hostname (not IP), TLS, Port 5061