config

type CSPConfig struct {
	Disable         bool              `toml:"disable"`
	ReportOnly      bool              `toml:"report_only"`
	ScriptSrc       []string          `toml:"script_src"`
	StyleSrc        []string          `toml:"style_src"`
	ImgSrc          []string          `toml:"img_src"`
	FontSrc         []string          `toml:"font_src"`
	ConnectSrc      []string          `toml:"connect_src"`
	FrameSrc        []string          `toml:"frame_src"`
	MediaSrc        []string          `toml:"media_src"`
	ObjectSrc       []string          `toml:"object_src"`
	WorkerSrc       []string          `toml:"worker_src"`
	FrameAncestors  []string          `toml:"frame_ancestors"`
	ExtraDirectives map[string]string `toml:"extra_directives"`
	Policy          string            `toml:"policy"`
}

type CommentsConfig struct {
	Enabled *bool `toml:"enabled"`
}

type Config struct {
	Host           string
	Port           int
	DBPath         string
	DBDriver       string
	DBDSN          string
	DBPoolMaxConns int

	// StorageDriver selects the file storage backend: "local" (default) or "s3".
	// The "s3" driver works against AWS S3 AND MinIO (both speak the S3 API).
	// Read via STORAGE_DRIVER.
	StorageDriver string

	// StorageS3Endpoint is the S3-compatible endpoint URL (e.g. "http://minio:9000").
	// Leave empty to use the default AWS endpoints. Read via STORAGE_S3_ENDPOINT.
	StorageS3Endpoint string

	// StorageS3Region is the AWS region or MinIO region (MinIO uses "us-east-1" by
	// default). Read via STORAGE_S3_REGION.
	StorageS3Region string

	// StorageS3Bucket is the bucket media and profile pictures are stored in.
	// Read via STORAGE_S3_BUCKET.
	StorageS3Bucket string

	// StorageS3AccessKeyID is the access key for the S3-compatible backend.
	// Read via STORAGE_S3_ACCESS_KEY_ID.
	StorageS3AccessKeyID string

	// StorageS3SecretAccessKey is the secret key for the S3-compatible backend.
	// Read via STORAGE_S3_SECRET_ACCESS_KEY.
	StorageS3SecretAccessKey string

	// StorageS3UsePathStyle forces path-style addressing ("bucket.example.com/key"
	// vs "example.com/bucket/key"). Required for most MinIO deployments.
	// Read via STORAGE_S3_USE_PATH_STYLE.
	StorageS3UsePathStyle bool

	// StorageS3PublicBaseURL is the base URL served to clients (the bucket's public
	// URL or a CDN/CloudFront distribution, e.g. "https://cdn.example.com").
	// GetURL returns this prefix + object key. Read via STORAGE_S3_PUBLIC_BASE_URL.
	StorageS3PublicBaseURL string

	JWTSecret          string
	LogLevel           string
	SMTPHost           string
	SMTPPort           int
	SMTPUser           string
	SMTPPassword       string
	SMTPFrom           string
	ConfigDir          string
	ConfigFile         string
	CORSAllowedOrigins string
	SiteURL            string
	DevMode            bool
	AdminDevURL        string
	ThemeDir           string
	PostPerPage        int

	// ServerReadHeaderTimeout is the maximum duration to read request headers
	// (Slowloris protection). Read via SERVER_READ_HEADER_TIMEOUT.
	ServerReadHeaderTimeout time.Duration

	// ServerReadTimeout is the maximum duration to read the entire request
	// including the body. A zero value means no timeout — body size is capped
	// per-handler via MaxBytesReader / maxBodySizeMiddleware. Read via
	// SERVER_READ_TIMEOUT.
	ServerReadTimeout time.Duration

	// ServerWriteTimeout is the maximum duration to write the response after
	// the request headers have been read. A zero value means no timeout. Read
	// via SERVER_WRITE_TIMEOUT.
	ServerWriteTimeout time.Duration

	RateLimitEnabled         bool
	RateLimitAuthPerMinute   int
	RateLimitAPIPerMinute    int
	RateLimitPublicPerMinute int

	AIImageGenerationAPIKey      string
	AIImageGenerationModel       string
	AIImageGenerationSize        string
	AIImageGenerationAspectRatio string

	AITextGenerationAPIKey  string
	AITextGenerationBaseURL string
	AITextGenerationModel   string

	APIKeyPepper string

	// ImportMaxSizeMB is the ceiling (in megabytes) for any importer upload
	// (WordPress WXR now; future importers reuse the same cap). Read via
	// IMPORT_MAX_SIZE_MB. Use ImportMaxSize() for the byte value.
	ImportMaxSizeMB int

	// WordPressImportTimeout is the maximum duration a WordPress import job may
	// run after the HTTP response has been sent (the job runs in a background
	// goroutine). Read via WORDPRESS_IMPORT_TIMEOUT.
	WordPressImportTimeout time.Duration

	// HugoImportTimeout is the maximum duration a Hugo import job may run after
	// the HTTP response has been sent (the job runs in a background goroutine).
	// Read via HUGO_IMPORT_TIMEOUT.
	HugoImportTimeout time.Duration
}

type HeadlessConfig struct {
	Enabled bool `toml:"enabled"`
}

type HomepageSection struct {
	PostType string `toml:"post_type"`
	Limit    int    `toml:"limit"`
	Offset   int    `toml:"offset"`
	Title    string `toml:"title"`
}

type ModulesConfig struct {
	Disabled []string `toml:"disabled"`
}

type PublicField struct {
	Resource   string   `toml:"resource"`
	Field      string   `toml:"field"`
	PostType   string   `toml:"post_type"`
	Operations []string `toml:"operations"`
}

type PublicFieldRegistry struct {
	// contains filtered or unexported fields
}

type RegistrationConfig struct {
	Enabled       *bool
	DefaultRole   string
	AdminApproval bool
}

type SiteConfig struct {
	Name string `toml:"name"`
	Logo string `toml:"logo"`
}