serve

type Config struct {
	ListenAddr string `flags:"listen-addr,server listen host:addr (:34680)"`
	ReusePort  bool   `flags:"reuse-port,set SO_REUSEPORT on listener socket"`

	Names san.Names `flags:"subject-alt-name,set subjectAltNames to use on server certificate,san"`

	IssueHttp int `flags:"issue-http,enable certificate issue via HTTP API"`

	AutoShutdown time.Duration `flags:"auto-shutdown,auto shutdown server after specified time"`

	// Enable node bootstrapping with the given auth provider.
	Bootstrap TokenAuthProvider
}

type FixedTokenAuthProvider struct {
	Token    string
	NotAfter time.Time
	Logger   *zap.Logger
}

type Server struct {
	Shutdown func(ctx context.Context) error
}

type TokenAuthProvider interface {
	Authenticate(token string, now time.Time) error
	LogHelpMessage(listenAddr, pubkeyhash string)
}