## Setup Asterisk SIP
1. **Settings -> Asterisk SIP Settings -> SIP Settings [chan_pjsip] :
	-  TLS/SSL/SRTP Settings
		- **Certificate Manager**: `Let's Encrypt certificate generated from the Web UI`
		- **Transports**: `Yes` for `0.0.0.0 - All` for `udp`, `tcp`, & `tls`
	- **0.0.0.0 (udp):
		- **Port to Listen On: ** `5621`
		- **Domain the transport comes from:** `pbx.supernets.org`
	- **0.0.0.0 (tcp):
		- **Port to Listen On: ** `5620`
		- **Domain the transport comes from:** `pbx.supernets.org`
	- **0.0.0.0 (tls):
		- **Port to Listen On: ** `5623`
		- **Domain the transport comes from:** `pbx.supernets.org`

___
## Enable text messages:
1. `nano /etc/asterisk/extensions_custom.conf`:
```json
[astsms]
exten => _.,1,MessageSend(pjsip:${EXTEN},${MESSAGE(from)})
 same => n,Hangup()
```
2. Restart the service: `fwconsole reload`

___
## Create a Group
1. **Admin -> User Manager -> Groups -> PBX Internal Directory -> ADD:** `SuperNETs`

___
## Create an extension:
1. **Connectivity -> Extensions -> Add Extension -> Add New SIP [chan_pjsip] Extension:
	- **General**
		-  **User Extension** = `1337`
		- **Display Name** = `acidvegas`
		- **Secret** = `CHANGE ME`
		- **Link to a Default User:** `Create New User`
		- **Groups**: `All Users`, `Custom Group Name Here`
	- **Voicemail** 
		- **Enabled:** `yes`
		- **Voicemail Password:** `CHANGE ME`
		- **Disable (*) in Voicemail Menu**: `Yes`
	- **Advanced**
		- **Media Encryption:** `SRTP via in-SDP (recommeded)`
		- **Direct Media:** `No` *(Keep user IP addresses private)*
		- **Message Context:**  `astsms`

___
###### Create a conference extension:
1. **Applications -> Conferences -> Add



## Extra scratch notes
Caller-id sources?
Feature codes (custom star codes)

learn groups and directories for separation


applications, cert manager, generate lesudo nano /etc/asterisk/pjsip_custom.conf

or

`sudo nano /etc/asterisk/pjsip.transports_custom.conf`
```
[0.0.0.0-tls]
cert_file=/etc/letsencrypt/live/sip.supernets.org/fullchain.pem
priv_key_file=/etc/letsencrypt/live/sip.supernets.org/privkey.pem
method=tlsv1
```

or.


pjsip.transports.conf
```
[0.0.0.0-tls]
type=transport
protocol=tls
bind=0.0.0.0:5263
external_media_address=209.141.41.57
external_signaling_address=209.141.41.57
ca_list_file=/etc/ssl/certs/ca-certificates.crt
cert_file=/etc/letsencrypt/live/sip.supernets.org/fullchain.pem
priv_key_file=/etc/letsencrypt/live/sip.supernets.org/privkey.pem
method=sslv23
verify_client=no
verify_server=no
allow_reload=no
tos=cs3
cos=3
local_net=209.141.41.0/24

```