config

type Backend struct {
	Addr string `toml:"addr"`
}

type CAConf struct {
	Cert      string          `toml:"cert"`      // upstream CA cert for verifying targets
	Intercept InterceptCAConf `toml:"intercept"` // client-front: local MitM CA
}

type Config struct {
	Mode        string  `toml:"mode"`
	Listen      Listen  `toml:"listen"`
	Backend     Backend `toml:"backend"`
	Fingerprint FpConf  `toml:"fingerprint"`
	CA          CAConf  `toml:"ca"`
}

type FpConf struct {
	TLS TLSConf `toml:"tls"`
}

type InterceptCAConf struct {
	Cert string `toml:"cert"` // path to local CA cert (created if absent)
	Key  string `toml:"key"`  // path to local CA key  (created if absent)
}

type Listen struct {
	Addr string `toml:"addr"`
}

type TLSConf struct {
	JA4         string         `toml:"ja4"`
	Termination TLSTermination `toml:"termination"`
}

type TLSTermination struct {
	Cert string `toml:"cert"`
	Key  string `toml:"key"`
}