central

type Config struct {
	DataDir     string // holds the CA
	DatabaseURL string

	GatewayListen string // e.g. ":8443"
	STUNListen    string // e.g. ":3478"
	AdminListen   string // e.g. "127.0.0.1:8080"

	// Gateway URL as seen by edges.
	PublicURL string
	// Extra names or IPs for the server certificate.
	ExtraHosts []string
	// STUN address as seen by edges (default: PublicURL host).
	STUNPublic string

	// ASN database in MaxMind DB format, optional.
	ASNPath string

	EdgeCertValidity  time.Duration
	HeartbeatInterval time.Duration
	STUNInterval      time.Duration

	UI      http.Handler // serves the web UI on every path the API does not use
	Version string       // sent in the User-Agent of webhooks

	// Bearer token of GET /metrics (Prometheus). Empty: no endpoint.
	MetricsToken string
	// Password of the "grafana" SQL login, read-only on the grafana views.
	// Empty: the login is left as it is.
	GrafanaPassword string

	// Webhooks may target private or local addresses. Off: the central
	// could otherwise be used to reach its own network.
	WebhookAllowPrivate bool

	// Reverse proxies in front of the admin API, as addresses or prefixes:
	// their X-Forwarded-For gives the client address, for login throttling
	// and the audit log. Empty: the connection address is the client.
	TrustedProxies []string

	// Session cookie without the Secure flag, for plain HTTP outside
	// localhost. Never in production.
	InsecureCookie bool
}