config

type BeaconStaticCfg struct {
	Enabled                 bool `yaml:"Enabled" default:"true"`
	DefaultConnectionThresh int  `yaml:"DefaultConnectionThresh" default:"20"`
}

type BeaconTableCfg struct {
	BeaconTable string `default:"beacon"`
}

type BlacklistedStaticCfg struct {
	Enabled            bool     `yaml:"Enabled" default:"true"`
	UseIPms            bool     `yaml:"myIP.ms" default:"true"`
	UseDNSBH           bool     `yaml:"MalwareDomains.com" default:"true"`
	UseMDL             bool     `yaml:"MalwareDomainList.com" default:"true"`
	BlacklistDatabase  string   `yaml:"BlacklistDatabase" default:"rita-bl"`
	IPBlacklists       []string `yaml:"CustomIPBlacklists" default:"[]"`
	HostnameBlacklists []string `yaml:"CustomHostnameBlacklists" default:"[]"`
}

type BroStaticCfg struct {
	MetaDB string `yaml:"MetaDB"` // kept in for backwards compatibility
}

type CertificateTableCfg struct {
	CertificateTable string `default:"cert"`
}

type Config struct {
	R RunningCfg
	S StaticCfg
	T TableCfg
}

type DNSStaticCfg struct {
	Enabled bool `yaml:"Enabled" default:"true"`
}

type DNSTableCfg struct {
	ExplodedDNSTable string `default:"explodedDns"`
	HostnamesTable   string `default:"hostnames"`
}

type FilteringStaticCfg struct {
	AlwaysInclude   []string `yaml:"AlwaysInclude" default:"[]"`
	NeverInclude    []string `` /* 166-byte string literal not displayed */
	InternalSubnets []string `yaml:"InternalSubnets" default:"[\"10.0.0.0/8\", \"172.16.0.0/12\", \"192.168.0.0/16\"]"`
}

type LogStaticCfg struct {
	LogLevel    int    `yaml:"LogLevel" default:"2"`
	RitaLogPath string `yaml:"RitaLogPath" default:"/var/lib/rita/logs"`
	LogToFile   bool   `yaml:"LogToFile" default:"true"`
	LogToDB     bool   `yaml:"LogToDB" default:"true"`
}

type LogTableCfg struct {
	RitaLogTable string `default:"logs"`
}

type MetaTableCfg struct {
	FilesTable     string `default:"files"`
	DatabasesTable string `default:"databases"`
}

type MongoDBRunningCfg struct {
	AuthMechanismParsed mgosec.AuthMechanism
	TLS                 struct {
		TLSConfig *tls.Config
	}
}

type MongoDBStaticCfg struct {
	ConnectionString string        `yaml:"ConnectionString" default:"mongodb://localhost:27017"`
	AuthMechanism    string        `yaml:"AuthenticationMechanism" default:""`
	SocketTimeout    time.Duration `yaml:"SocketTimeout" default:"2"`
	TLS              TLSStaticCfg  `yaml:"TLS"`
	MetaDB           string        `yaml:"MetaDB" default:"MetaDatabase"`
}

type RollingStaticCfg struct {
	DefaultChunks int `yaml:"DefaultChunks" default:"24"`
	Rolling       bool
	CurrentChunk  int
	TotalChunks   int
}

type RunningCfg struct {
	MongoDB MongoDBRunningCfg
	Version semver.Version
}

type StaticCfg struct {
	UserConfig   UserCfgStaticCfg     `yaml:"UserConfig"`
	MongoDB      MongoDBStaticCfg     `yaml:"MongoDB"`
	Rolling      RollingStaticCfg     `yaml:"Rolling"`
	Log          LogStaticCfg         `yaml:"LogConfig"`
	Blacklisted  BlacklistedStaticCfg `yaml:"BlackListed"`
	Beacon       BeaconStaticCfg      `yaml:"Beacon"`
	DNS          DNSStaticCfg         `yaml:"DNS"`
	UserAgent    UserAgentStaticCfg   `yaml:"UserAgent"`
	Bro          BroStaticCfg         `yaml:"Bro"` // kept in for MetaDB backwards compatibility
	Filtering    FilteringStaticCfg   `yaml:"Filtering"`
	Strobe       StrobeStaticCfg      `yaml:"Strobe"`
	Version      string
	ExactVersion string
}

type StrobeStaticCfg struct {
	ConnectionLimit int `yaml:"ConnectionLimit" default:"250000"`
}

type StructureTableCfg struct {
	ConnTable       string `default:"conn"`
	HTTPTable       string `default:"http"`
	DNSTable        string `default:"dns"`
	SSLTable        string `default:"ssl"`
	UniqueConnTable string `default:"uconn"`
	HostTable       string `default:"host"`
}

type TLSStaticCfg struct {
	Enabled           bool   `yaml:"Enable" default:"false"`
	VerifyCertificate bool   `yaml:"VerifyCertificate" default:"false"`
	CAFile            string `yaml:"CAFile" default:""`
}

type TableCfg struct {
	Log       LogTableCfg
	DNS       DNSTableCfg
	Structure StructureTableCfg
	Beacon    BeaconTableCfg
	UserAgent UserAgentTableCfg
	Cert      CertificateTableCfg
	Meta      MetaTableCfg
}

type UserAgentStaticCfg struct {
	Enabled bool `yaml:"Enabled" default:"true"`
}

type UserAgentTableCfg struct {
	UserAgentTable string `default:"useragent"`
}

type UserCfgStaticCfg struct {
	UpdateCheckFrequency int `yaml:"UpdateCheckFrequency" default:"14"`
}