config

type Config struct {
	DataDir               string // root data directory (default: /var/lib/ah)
	DBPath                string // state database path (default: {DataDir}/ah.db)
	MeterDBPath           string // metering database path (default: {DataDir}/meter.db)
	MasterKeyPath         string // master encryption key (default: {DataDir}/master.key)
	BuildDir              string // nixpacks build work directory (default: {DataDir}/builds)
	NixpacksPath          string // path to nixpacks binary (default: /usr/local/bin/nixpacks)
	DockerDataDir         string // Docker data root for disk checks (default: /var/lib/docker)
	BaseDomain            string // base domain for public service URLs (default: "" = localhost fallback)
	ExternalTLSTerminated bool   // public TLS terminates before the local proxy (default: false)
	TraefikConfigDir      string // Traefik file provider dynamic config directory (default: /etc/traefik/dynamic)
	KanbanPortStart       int    // inclusive start of kanban port range (default: 7100)
	KanbanPortEnd         int    // inclusive end of kanban port range (default: 9100)

	AdminToken string // AH_ADMIN_TOKEN: operator token for recover/reactivate/quota (comma-separated for rotation; empty = fall back to bootstrap tokens)

	// Snapshot retention
	SnapshotMaxPerService int           // max snapshots kept per service (default: 10, 0 = unlimited)
	SnapshotMaxAge        time.Duration // max age before a snapshot is eligible for cleanup (default: 30d, 0 = unlimited)
}