config

type Config struct {
	Server     ServerConfig     `yaml:"server"`
	Storage    StorageConfig    `yaml:"storage"`
	Identity   IdentityConfig   `yaml:"identity"`
	Protection ProtectionConfig `yaml:"protection"`
	Telemetry  TelemetryConfig  `yaml:"telemetry"`
	Scrambler  ScramblerConfig  `yaml:"scrambler"`
	Nano       NanoConfig       `yaml:"nano"`
}

type IdentityConfig struct {
	StateDirectory     string        `yaml:"stateDirectory"`
	EnrollmentTokenTTL time.Duration `yaml:"enrollmentTokenTTL"`
}

type NanoConfig struct {
	AutomaticRunInterval   time.Duration `yaml:"automaticRunInterval"`
	AutomaticRunProgramIDs []string      `yaml:"automaticRunProgramIds"`
}

type ProtectedActionPolicyConfig struct {
	NodeIDs             []string `yaml:"nodeIds"`
	ApplicationIDs      []string `yaml:"applicationIds"`
	ActionTypes         []string `yaml:"actionTypes"`
	DataClasses         []string `yaml:"dataClasses"`
	Sensitivities       []string `yaml:"sensitivities"`
	AllowedDestinations []string `yaml:"allowedDestinations"`
	ConsentRequired     bool     `yaml:"consentRequired"`
}

type ProtectionConfig struct {
	TelemetryStaleAfter    time.Duration                 `yaml:"telemetryStaleAfter"`
	RequireMeshOnUntrusted bool                          `yaml:"requireMeshOnUntrustedNetworks"`
	FailMode               string                        `yaml:"failMode"`
	AllowOneTimeBypass     bool                          `yaml:"allowOneTimeBypass"`
	OneTimeBypassTTL       time.Duration                 `yaml:"oneTimeBypassTTL"`
	ProtectedActions       []ProtectedActionPolicyConfig `yaml:"protectedActions"`
}

type ScramblerConfig struct {
	ExecutionEnabled  bool `yaml:"executionEnabled"`
	SimulationEnabled bool `yaml:"simulationEnabled"`
}

type ServerConfig struct {
	Listen            string   `yaml:"listen"`
	PublicBaseURL     string   `yaml:"publicBaseURL"`
	TrustedProxies    []string `yaml:"trustedProxies"`
	ApprovedBindCIDRs []string `yaml:"approvedBindCIDRs"`
	TLSCertFile       string   `yaml:"tlsCertFile"`
	TLSKeyFile        string   `yaml:"tlsKeyFile"`
}

type StorageConfig struct {
	Path           string        `yaml:"path"`
	EventRetention time.Duration `yaml:"eventRetention"`
	AuditRetention time.Duration `yaml:"auditRetention"`
}

type TelemetryConfig struct {
	CollectFlowMetadata bool `yaml:"collectFlowMetadata"`
	CollectPayloads     bool `yaml:"collectPayloads"`
}