config

type Config struct {
	ConfigFile string  `koanf:"config"`
	Debug      Debug   `koanf:"debug"`
	Log        Log     `koanf:"log"`
	HTTP       HTTP    `koanf:"http"`
	OpenVpn    OpenVpn `koanf:"openvpn"`
	OAuth2     OAuth2  `koanf:"oauth2"`
}

type Debug struct {
	Pprof  bool   `koanf:"pprof"`
	Listen string `koanf:"listen"`
}

type HTTP struct {
	Listen             string             `koanf:"listen"`
	CertFile           string             `koanf:"cert"`
	KeyFile            string             `koanf:"key"`
	TLS                bool               `koanf:"tls"`
	Ciphers            string             `koanf:"ciphers"`
	BaseURL            *url.URL           `koanf:"baseurl"`
	Secret             Secret             `koanf:"secret"`
	CallbackTemplate   *template.Template `koanf:"template"`
	Check              HTTPCheck          `koanf:"check"`
	EnableProxyHeaders bool               `koanf:"enable-proxy-headers"`
	AssetPath          string             `koanf:"assets-path"`
}

type HTTPCheck struct {
	IPAddr bool `koanf:"ipaddr"`
}

type Log struct {
	Format      string     `koanf:"format"`
	Level       slog.Level `koanf:"level"`
	VPNClientIP bool       `koanf:"vpn-client-ip"`
}

type OAuth2 struct {
	AuthStyle       OAuth2AuthStyle `koanf:"auth-style"`
	AuthorizeParams string          `koanf:"authorize-params"`
	Client          OAuth2Client    `koanf:"client"`
	Endpoints       OAuth2Endpoints `koanf:"endpoint"`
	Issuer          *url.URL        `koanf:"issuer"`
	Nonce           bool            `koanf:"nonce"`
	PKCE            bool            `koanf:"pkce"`
	Provider        string          `koanf:"provider"`
	Refresh         OAuth2Refresh   `koanf:"refresh"`
	Scopes          StringSlice     `koanf:"scopes"`
	Validate        OAuth2Validate  `koanf:"validate"`
}

type OAuth2AuthStyle oauth2.AuthStyle

type OAuth2Client struct {
	ID     string `koanf:"id"`
	Secret Secret `koanf:"secret"`
}

type OAuth2Endpoints struct {
	Discovery *url.URL `koanf:"discovery"`
	Auth      *url.URL `koanf:"auth"`
	Token     *url.URL `koanf:"token"`
}

type OAuth2Refresh struct {
	Enabled      bool          `koanf:"enabled"`
	Expires      time.Duration `koanf:"expires"`
	Secret       Secret        `koanf:"secret"`
	UseSessionID bool          `koanf:"use-session-id"`
	ValidateUser bool          `koanf:"validate-user"`
}

type OAuth2Validate struct {
	Acr                     StringSlice `koanf:"acr"`
	Groups                  StringSlice `koanf:"groups"`
	Roles                   StringSlice `koanf:"roles"`
	IPAddr                  bool        `koanf:"ipaddr"`
	Issuer                  bool        `koanf:"issuer"`
	CommonName              string      `koanf:"common-name"`
	CommonNameCaseSensitive bool        `koanf:"common-name-case-sensitive"`
}

type OpenVPNCommonName struct {
	EnvironmentVariableName string                `koanf:"environment-variable-name"`
	Mode                    OpenVPNCommonNameMode `koanf:"mode"`
}

type OpenVPNCommonNameMode int

type OpenVPNPassthrough struct {
	Enabled     bool     `koanf:"enabled"`
	Address     *url.URL `koanf:"address"`
	Password    Secret   `koanf:"password"`
	SocketMode  uint     `koanf:"socket-mode"`
	SocketGroup string   `koanf:"socket-group"`
}

type OpenVpn struct {
	Addr               *url.URL           `koanf:"addr"`
	Password           Secret             `koanf:"password"`
	Bypass             OpenVpnBypass      `koanf:"bypass"`
	AuthTokenUser      bool               `koanf:"auth-token-user"`
	AuthPendingTimeout time.Duration      `koanf:"auth-pending-timeout"`
	CommonName         OpenVPNCommonName  `koanf:"common-name"`
	Passthrough        OpenVPNPassthrough `koanf:"pass-through"`
}

type OpenVpnBypass struct {
	CommonNames StringSlice `koanf:"common-names"`
}

type Secret string

type StringSlice []string