options

type ClientCertAuthenticationOptions struct {
	// ClientCA is the certificate bundle for all the signers that you'll recognize for incoming client certificates
	ClientCA string `json:"client-ca-file" mapstructure:"client-ca-file"`
}

type GRPCAclOptions struct {
	Enabled       bool   `json:"enabled"        mapstructure:"enabled"`
	ConfigFile    string `json:"config_file"    mapstructure:"config-file"`
	DefaultPolicy string `json:"default_policy" mapstructure:"default-policy"`
}

type GRPCAuditOptions struct {
	Enabled bool `json:"enabled" mapstructure:"enabled"`
}

type GRPCAuthOptions struct {
	Enabled               bool          `json:"enabled"                mapstructure:"enabled"`
	EnableBearer          bool          `json:"enable_bearer"          mapstructure:"enable-bearer"`
	EnableHMAC            bool          `json:"enable_hmac"            mapstructure:"enable-hmac"`
	EnableAPIKey          bool          `json:"enable_api_key"         mapstructure:"enable-api-key"`
	HMACTimestampValidity time.Duration `json:"hmac_timestamp_validity" mapstructure:"hmac-timestamp-validity"`
	RequireIdentityMatch  bool          `json:"require_identity_match" mapstructure:"require-identity-match"`
}

type GRPCConfig struct {
	Addr        string // 服务器地址
	HealthzAddr string // 健康检查地址
	MTLS        GRPCMTLSOptions
	Auth        GRPCAuthOptions
	ACL         GRPCAclOptions
	Audit       GRPCAuditOptions
	TLSCertFile string
	TLSKeyFile  string
	Insecure    bool
}

type GRPCMTLSOptions struct {
	Enabled           bool          `json:"enabled"             mapstructure:"enabled"`
	CAFile            string        `json:"ca_file"             mapstructure:"ca-file"`
	CADir             string        `json:"ca_dir"              mapstructure:"ca-dir"`
	CertFile          string        `json:"cert_file"           mapstructure:"cert-file"`
	KeyFile           string        `json:"key_file"            mapstructure:"key-file"`
	RequireClientCert bool          `json:"require_client_cert" mapstructure:"require-client-cert"`
	AllowedCNs        []string      `json:"allowed_cns"         mapstructure:"allowed-cns"`
	AllowedOUs        []string      `json:"allowed_ous"         mapstructure:"allowed-ous"`
	AllowedSANs       []string      `json:"allowed_sans"        mapstructure:"allowed-sans"`
	MinTLSVersion     string        `json:"min_tls_version"     mapstructure:"min-tls-version"`
	EnableAutoReload  bool          `json:"enable_auto_reload"  mapstructure:"enable-auto-reload"`
	ReloadInterval    time.Duration `json:"reload_interval"     mapstructure:"reload-interval"`
}

type GRPCOptions struct {
	BindAddress string            `json:"bind_address" mapstructure:"bind-address"` // 绑定地址
	BindPort    int               `json:"bind_port"    mapstructure:"bind-port"`    // 绑定端口
	HealthzPort int               `json:"healthz_port" mapstructure:"healthz-port"` // 健康检查端口
	MTLS        *GRPCMTLSOptions  `json:"mtls"         mapstructure:"mtls"`         // mTLS 选项
	Auth        *GRPCAuthOptions  `json:"auth"         mapstructure:"auth"`         // 应用层认证
	ACL         *GRPCAclOptions   `json:"acl"          mapstructure:"acl"`          // ACL
	Audit       *GRPCAuditOptions `json:"audit"        mapstructure:"audit"`        // 审计
	Insecure    bool              `json:"insecure"     mapstructure:"insecure"`     // 是否允许不安全（默认 true，启用 mTLS 时会强制为 false）
}

type InsecureServingConfig struct {
	Addr string // 服务器地址
}

type InsecureServingOptions struct {
	BindAddress string `json:"bind_address" mapstructure:"bind-address"` // 绑定地址
	BindPort    int    `json:"bind_port"    mapstructure:"bind-port"`    // 绑定端口
}

type MigrationOptions struct {
	Enabled  bool   `json:"enabled"  mapstructure:"enabled"`  // 是否启用自动迁移
	Database string `json:"database" mapstructure:"database"` // 数据库名称
}

type MySQLOptions struct {
	Host                  string        `json:"host,omitempty"                     mapstructure:"host"`
	Username              string        `json:"username,omitempty"                 mapstructure:"username"`
	Password              string        `json:"-"                                  mapstructure:"password"`
	Database              string        `json:"database"                           mapstructure:"database"`
	MaxIdleConnections    int           `json:"max-idle-connections,omitempty"     mapstructure:"max-idle-connections"`
	MaxOpenConnections    int           `json:"max-open-connections,omitempty"     mapstructure:"max-open-connections"`
	MaxConnectionLifeTime time.Duration `json:"max-connection-life-time,omitempty" mapstructure:"max-connection-life-time"`
	LogLevel              int           `json:"log-level"                          mapstructure:"log-level"`
}

type NSQOptions struct {
	// Enabled 是否启用 NSQ
	Enabled bool `json:"enabled" mapstructure:"enabled"`

	// LookupdAddrs NSQLookupd 地址列表
	LookupdAddrs []string `json:"lookupd-addrs" mapstructure:"lookupd-addrs"`

	// NSQdAddr NSQd 地址（用于发布）
	NSQdAddr string `json:"nsqd-addr" mapstructure:"nsqd-addr"`

	// MaxAttempts 最大消息重试次数
	MaxAttempts uint16 `json:"max-attempts" mapstructure:"max-attempts"`

	// MaxInFlight 最大消息处理并发数
	MaxInFlight int `json:"max-in-flight" mapstructure:"max-in-flight"`

	// MsgTimeout 消息超时时间（秒）
	MsgTimeout int `json:"msg-timeout" mapstructure:"msg-timeout"`

	// RequeueDelay 重新入队延迟（秒）
	RequeueDelay int `json:"requeue-delay" mapstructure:"requeue-delay"`
}

type RedisOptions struct {
	// Cache Redis - 用于缓存、会话、限流等临时数据
	Cache *SingleRedisOptions `json:"cache" mapstructure:"cache"`
}

type SecureServingConfig struct {
	Addr     string // 服务器地址
	CertFile string // 证书文件
	KeyFile  string // 密钥文件
}

type SecureServingOptions struct {
	BindAddress string `json:"bind_address" mapstructure:"bind-address"` // 绑定地址
	BindPort    int    `json:"bind_port"    mapstructure:"bind-port"`    // 绑定端口
	TLS         struct {
		CertFile string `json:"cert_file"    mapstructure:"cert-file"`        // 证书文件
		KeyFile  string `json:"key_file"     mapstructure:"private-key-file"` // 密钥文件
	} `json:"tls" mapstructure:"tls"`
}

type ServerConfig struct {
	Insecure *InsecureServingConfig // 不安全服务器配置
	Secure   *SecureServingConfig   // 安全服务器配置
	GRPC     *GRPCConfig            // GRPC 服务器配置
}

type ServerRunOptions struct {
	Mode                 string   `json:"mode" mapstructure:"mode"`
	Healthz              bool     `json:"healthz" mapstructure:"healthz"`
	Middlewares          []string `json:"middlewares" mapstructure:"middlewares"`
	AllowDegradedStartup bool     `json:"allowDegradedStartup" mapstructure:"allow-degraded-startup"`
}

type SingleRedisOptions struct {
	Host                  string   `json:"host,omitempty"                         mapstructure:"host"`
	Port                  int      `json:"port,omitempty"                         mapstructure:"port"`
	Addrs                 []string `json:"addrs,omitempty"                        mapstructure:"addrs"`
	Username              string   `json:"username,omitempty"                     mapstructure:"username"`
	Password              string   `json:"-"                                      mapstructure:"password"`
	Database              int      `json:"database"                               mapstructure:"database"`
	MaxIdle               int      `json:"max-idle,omitempty"                     mapstructure:"max-idle"`
	MaxActive             int      `json:"max-active,omitempty"                   mapstructure:"max-active"`
	Timeout               int      `json:"timeout,omitempty"                      mapstructure:"timeout"`
	MinIdleConns          int      `json:"min-idle-conns,omitempty"               mapstructure:"min-idle-conns"`
	PoolTimeout           int      `json:"pool-timeout,omitempty"                 mapstructure:"pool-timeout"`
	DialTimeout           int      `json:"dial-timeout,omitempty"                 mapstructure:"dial-timeout"`
	ReadTimeout           int      `json:"read-timeout,omitempty"                 mapstructure:"read-timeout"`
	WriteTimeout          int      `json:"write-timeout,omitempty"                mapstructure:"write-timeout"`
	EnableCluster         bool     `json:"enable-cluster,omitempty"               mapstructure:"enable-cluster"`
	UseSSL                bool     `json:"use-ssl,omitempty"                      mapstructure:"use-ssl"`
	SSLInsecureSkipVerify bool     `json:"ssl-insecure-skip-verify,omitempty"     mapstructure:"ssl-insecure-skip-verify"`
	EnableLogging         bool     `json:"enable-logging,omitempty"               mapstructure:"enable-logging"`
}