authproxy

type Options struct {
	// Dir is where the files go: absolute, outside Project (resolved),
	// created 0700. Every ancestor must be a real directory (no symlink)
	// owned by root or the user and writable by no one else; Dir must not
	// exist yet, or be an empty real directory of the user's. The files are
	// created relative to Dir's descriptor (see writeFiles).
	Dir string
	// Project is the project root (agents may read it): Dir must not be
	// inside it.
	Project string
	// Host is the proxy's service name in the Compose network (the
	// certificate's name and the profile's url host).
	Host string
	// Port is the proxy's listening port.
	Port int
	// Upstream is the Loki service address in the network ("loki:3100").
	Upstream string
	// User is the basic-auth user name.
	User string
	// Validity of the certificates (default 2 years).
	Validity time.Duration
}

type Result struct {
	Token string
	// Files written (absolute paths).
	Caddyfile, ServerCert, ServerKey, CACert string
	// URL is the profile's url; Compose is the service snippet to add to
	// the user's compose file (it holds no secret).
	URL     string
	Compose string
}