tenant

type ACMELimits struct {
	OrdersPerAccount int // new orders per account
	FailedPerName    int // failed validations per name
	AccountsPerIP    int // new accounts per client address (IPv6: per /64)
}

type Settings struct {
	AllowServerKeygen  bool
	Organization       string
	OrganizationalUnit string
	Locality           string
	State              string
	Country            string
	// ACME: the rate limits of the ACME server. Get always fills it; in
	// Set, nil keeps the stored limits (a v0.1 client doesn't send them).
	ACME *ACMELimits
	// TrustPage: the public listener serves the trust page at / (v0.2.2,
	// default on). Get always fills it; in Set, nil keeps the stored value
	// (a v0.2 client doesn't send it).
	TrustPage *bool
	// AgentEnrollment: how agents are admitted (v0.3.0, ADR-18) – auto,
	// verified (default) or manual. Get always fills it; in Set, nil keeps
	// the stored value.
	AgentEnrollment *string
	// StepUpMinutes is the lifetime of new second-factor proofs (v0.3.1).
	// Get always fills it; in Set, nil keeps the stored value.
	StepUpMinutes *int
	// Separate predecessor defaults for agent deployments and other renewals.
	// In Set, nil keeps the corresponding stored policy.
	AgentPredecessor *predecessor.Policy
	OtherPredecessor *predecessor.Policy
}

type Store struct {
	DB    *sql.DB // system.db writer
	Clock clock.Clock
	Wake  func()
}