edge

type Admin struct {
	// contains filtered or unexported fields
}

type BaseConfig struct {
	AdminListen    string   // "unix//run/mooring/caddy-admin.sock" or "127.0.0.1:2019"
	ACMEEmail      string   // pinned ACME contact
	ACMECA         string   // pinned default issuer directory URL
	CAs            []CA     // extra named issuers (private CAs) a subject can opt into
	AdminHostname  string   // "" = NO admin vhost (reach the UI via SSH tunnel)
	AdminAllowlist []string // IP-allowlist CIDRs for the admin vhost (typed, mandatory if AdminHostname set)
	AdminUpstream  string   // the ONLY loopback upstream, identity-pinned (e.g. 127.0.0.1:9000)
	// Wildcards enable OPTIONAL *.<Domain> wildcard certs via ACME DNS-01 — one entry per
	// operator-declared subdomain namespace (the default base_domain and each edge.base_domains)
	// that sets dns01. Any default-CA subject at/under a wildcard's Domain is served by that
	// wildcard (dropped from per-name HTTP-01 issuance). Empty slice = all per-name HTTP-01.
	Wildcards []WildcardCert
	// AccessLog, when true, makes the edge emit a per-request JSON access log to STDOUT (captured
	// in-process by the supervisor for the latency aggregator) while keeping Caddy's own logs +
	// errors on STDERR (→ journald). Enabled only when a scaled service opts into an edge metric,
	// so most edges pay nothing for it.
	AccessLog bool
}

type CA struct {
	Name         string
	DirectoryURL string
	Email        string   // "" → falls back to BaseConfig.ACMEEmail
	TrustedRoots []string // PEM file paths Caddy trusts for the CA's own https ("" → system roots)
}

type CertHost struct {
	Hostname string
	CA       string
}

type Reconciler struct {
	// contains filtered or unexported fields
}

type Route struct {
	AppID           string
	Hostname        string
	Upstream        string   // host:port of the app endpoint (single-replica)
	Pool            []string // host:port of each live replica (M14 auto-scaling); overrides Upstream when set
	UpstreamScheme  string   // http | https
	PathPrefix      string
	RedirectHTTP    bool
	HSTS            bool
	SecurityHeaders bool
	Enabled         bool
	CA              string // "" = default issuer (BaseConfig.ACMECA); else a BaseConfig.CAs name
	// contains filtered or unexported fields
}

type RouteStore struct {
	// contains filtered or unexported fields
}

type Supervisor struct {
	CaddyBin    string
	AdminListen string
	InitialCfg  []byte // the typed base render (Layer 0) — the recovery floor
	Log         *slog.Logger
	// AccessLine, when set, captures Caddy's STDOUT line-by-line and hands each raw line here (the
	// per-request JSON access log, when the render opted into it — see BaseConfig.AccessLog). It
	// feeds the in-process latency aggregator for edge-measured autoscaling. The callback MUST NOT
	// retain the slice and MUST NOT block (it runs on the single stdout-drain goroutine). nil keeps
	// stdout on os.Stdout as before. Caddy's own logs + errors always stay on STDERR (→ journald),
	// so nothing here affects error visibility.
	AccessLine func(line []byte)
}

type WildcardCert struct {
	Domain        string
	DNS01Provider string // caddy DNS module name
	DNS01Token    string // provider credential (secret)
}