pjsip.conf

; deployment/asterisk-server/asterisk-config/pjsip.conf

; global settings
[global]
type=global
user_agent=Asterisk

[transport-tls]
type=transport
protocol=tls
bind=0.0.0.0:5061
; using FQDN, which resolves to EC2 VM's EIP
external_signaling_address=sip.client0.vectorly.app
external_media_address=sip.client0.vectorly.app
local_net=172.31.0.0/16                                ; ensure this matches VPC CIDR
method=tlsv1_2
verify_server=no                                      ; do not verify Chime's server cert on OUTBOUND
cert_file=/etc/letsencrypt/live/sip.client0.vectorly.app/fullchain.pem  ; what Asterisk presents to Chime during TLS handshake
priv_key_file=/etc/letsencrypt/live/sip.client0.vectorly.app/privkey.pem  ; Asterisk's private key, used to complete TLS handshake

; -------- Inbound from AWS Chime Voice Connector (no registration) --------
[chime-in]
type=endpoint
transport=transport-tls
context=from-chime
disallow=all
allow=ulaw
direct_media=no
rtp_symmetric=yes
force_rport=yes
rewrite_contact=yes
media_encryption=sdes

[chime-in-identify]
type=identify
endpoint=chime-in
match=0.0.0.0/0  ; allow all traffic; let EC2 VM's Security Group worry about this

; -------- Outbound to AWS Chime Voice Connector --------
[chime-out]
type=endpoint
transport=transport-tls
context=from-internal
disallow=all
allow=ulaw
aors=chime-out
from_user=+13126205190  ; phone number of Voice Connector
callerid=+13126205190   ; phone number of Voice Connector
direct_media=no
rtp_symmetric=yes
force_rport=yes
rewrite_contact=yes
media_encryption=sdes
; no outbound_auth; Chime uses IP allow list; only PSTN can connect to Voice Connector

; AOR for outbound calls to AWS Chime
[chime-out]
type=aor
contact=sip:chax6zffpv0zyn3fts1yyc.voiceconnector.chime.aws:5061  ; Chime Voice Connector host:5061 TLS