configuration

type Alternatives struct {
	DownloadUrl template.Url    `yaml:"downloadUrl,omitempty"`
	Location    template.String `yaml:"location,omitempty"`
}

type Auditlog struct {
	Name                    AuditlogName          `yaml:"name"`
	Enabled                 bool                  `yaml:"enabled,omitempty"`
	FailurePolicy           AuditlogFailurePolicy `yaml:"failurePolicy,omitempty"`
	IdentityFile            string                `yaml:"identityFile,omitempty"`
	EncryptionPublicKey     crypto.PublicKeys     `yaml:"encryptionPublicKey,omitempty"`
	EncryptionPublicKeyFile crypto.PublicKeysFile `yaml:"encryptionPublicKeyFile,omitempty"`
	Directory               string                `yaml:"directory,omitempty"`
	MinimumFreeBytes        uint64                `yaml:"minimumFreeBytes,omitempty"`
	Recording               AuditlogRecording     `yaml:"recording,omitempty"`
	Targets                 AuditlogTargets       `yaml:"targets,omitempty"`
}

type AuditlogFailurePolicy uint8

type AuditlogName string

type AuditlogRecording struct {
	Enabled           bool                         `yaml:"enabled,omitempty"`
	Directory         string                       `yaml:"directory,omitempty"`
	Compression       AuditlogRecordingCompression `yaml:"compression,omitempty"`
	ChunkSizeBytes    uint64                       `yaml:"chunkSizeBytes,omitempty"`
	FlushInterval     common.Duration              `yaml:"flushInterval,omitempty"`
	FlushSizeBytes    uint64                       `yaml:"flushSizeBytes,omitempty"`
	MaximumSpoolBytes uint64                       `yaml:"maximumSpoolBytes,omitempty"`
	RetainFor         common.Duration              `yaml:"retainFor"`
	Notice            template.String              `yaml:"notice,omitempty"`
	Targets           AuditlogRecordingTargets     `yaml:"targets,omitempty"`
}

type AuditlogRecordingCompression struct {
	Level AuditlogRecordingCompressionLevel `yaml:"level,omitempty"`
}

type AuditlogRecordingCompressionLevel string

type AuditlogRecordingTargets struct {
	Mode    AuditlogRecordingTargetsMode `yaml:"-"`
	Targets AuditlogTargets              `yaml:"-"`
}

type AuditlogRecordingTargetsMode uint8

type AuditlogTarget struct {
	Name AuditlogTargetName `yaml:"name"`
	V    AuditlogTargetV    `yaml:"-"`
}

type AuditlogTargetCodecFactory func() AuditlogTargetV

type AuditlogTargetName string

type AuditlogTargetS3 struct {
	Bucket                string            `yaml:"bucket"`
	Region                template.String   `yaml:"region,omitempty"`
	Prefix                string            `yaml:"prefix,omitempty"`
	Endpoint              string            `yaml:"endpoint,omitempty"`
	PathStyle             bool              `yaml:"pathStyle,omitempty"`
	ExpectedBucketOwner   string            `yaml:"expectedBucketOwner,omitempty"`
	DestinationIdentity   string            `yaml:"destinationIdentity,omitempty"`
	AccessKeyId           template.String   `yaml:"accessKeyId,omitempty"`
	SecretAccessKey       template.String   `yaml:"secretAccessKey,omitempty"`
	SessionToken          template.String   `yaml:"sessionToken,omitempty"`
	PublishAttemptTimeout template.Duration `yaml:"publishAttemptTimeout,omitempty"`
	// contains filtered or unexported fields
}

type AuditlogTargetS3Values struct {
	Region                string
	AccessKeyId           string
	SecretAccessKey       string
	SessionToken          string
	PublishAttemptTimeout time.Duration
}

type AuditlogTargetSftp struct {
	Address               string                `yaml:"address"`
	User                  template.String       `yaml:"user"`
	Directory             string                `yaml:"directory"`
	KnownHosts            crypto.KnownHosts     `yaml:"knownHosts,omitempty"`
	KnownHostsFile        crypto.KnownHostsFile `yaml:"knownHostsFile,omitempty"`
	AcceptAllHostKeys     bool                  `yaml:"acceptAllHostKeys,omitempty"`
	IdentityFiles         []string              `yaml:"identityFiles,omitempty"`
	Password              template.String       `yaml:"password,omitempty"`
	ConnectTimeout        template.Duration     `yaml:"connectTimeout,omitempty"`
	PublishAttemptTimeout template.Duration     `yaml:"publishAttemptTimeout,omitempty"`
}

type AuditlogTargetSftpValues struct {
	User                  string
	Password              string
	ConnectTimeout        time.Duration
	PublishAttemptTimeout time.Duration
}

type AuditlogTargetV interface {
	UnmarshalYAML(*yaml.Node) error
	Types() []string
	FeatureFlags() []string
	// contains filtered or unexported methods
}

type AuditlogTargetWebdav struct {
	Endpoint              string            `yaml:"endpoint"`
	Username              template.String   `yaml:"username,omitempty"`
	Password              template.String   `yaml:"password,omitempty"`
	PublishAttemptTimeout template.Duration `yaml:"publishAttemptTimeout,omitempty"`
}

type AuditlogTargetWebdavValues struct {
	Username              string
	Password              string
	PublishAttemptTimeout time.Duration
}

type AuditlogTargets []AuditlogTarget

type Auditlogs []Auditlog

type Authorization struct {
	V AuthorizationV
}

type AuthorizationBifroest struct {
	UserCertificateAuthorityProperties `yaml:",inline"`
	Audiences                          BifroestAudiences `yaml:"audiences,omitempty"`
	MaxCertificateValidity             common.Duration   `yaml:"maxCertificateValidity,omitempty"`
}

type AuthorizationHtpasswd struct {
	File    crypto.HtpasswdFile `yaml:"file,omitempty"`
	Entries crypto.Htpasswd     `yaml:"entries,omitempty"`
}

type AuthorizationLocal struct {
	UserCertificateAuthorityProperties `yaml:",inline"`
	AuthorizedKeys                     template.Strings   `yaml:"authorizedKeys,omitempty"`
	Password                           PasswordProperties `yaml:"password,omitempty"`
	PamService                         string             `yaml:"pamService,omitempty"`
}

type AuthorizationNone struct{}

type AuthorizationOidcDeviceAuth struct {
	Issuer       template.Url     `yaml:"issuer"`
	ClientId     template.String  `yaml:"clientId"`
	ClientSecret template.String  `yaml:"clientSecret"`
	Scopes       template.Strings `yaml:"scopes"`

	RetrieveIdToken       bool                          `yaml:"retrieveIdToken,omitempty"`
	RetrieveUserInfo      bool                          `yaml:"retrieveUserInfo,omitempty"`
	ForceDisposeSessionOn string                        `yaml:"forceDisposeSessionOn,omitempty"`
	RefreshToken          AuthorizationOidcRefreshToken `yaml:"refreshToken,omitempty"`
}

type AuthorizationOidcRefreshToken struct {
	Mode              string          `yaml:"mode,omitempty"`
	AtLifetimePercent uint8           `yaml:"atLifetimePercent,omitempty"`
	FallbackEvery     common.Duration `yaml:"fallbackEvery,omitempty"`
	MaxUnverifiedFor  common.Duration `yaml:"maxUnverifiedFor,omitempty"`
}

type AuthorizationSimple struct {
	UserCertificateAuthorityProperties `yaml:",inline"`
	Entries                            AuthorizationSimpleEntries `yaml:"entries,omitempty"`
}

type AuthorizationSimpleEntries []AuthorizationSimpleEntry

type AuthorizationSimpleEntry struct {
	Name               string                    `yaml:"name"`
	AuthorizedKeys     crypto.AuthorizedKeys     `yaml:"authorizedKeys,omitempty"`
	AuthorizedKeysFile crypto.AuthorizedKeysFile `yaml:"authorizedKeysFile,omitempty"`
	Password           crypto.Password           `yaml:"password,omitempty"`
	PasswordFile       crypto.PasswordFile       `yaml:"passwordFile,omitempty"`

	CreatePasswordFileIfAbsentOfType *crypto.PasswordType `yaml:"createPasswordFileIfAbsentOfType,omitempty"`
}

type AuthorizationV interface {
	Types() []string
	FeatureFlags() []string
	// contains filtered or unexported methods
}

type AuthorizationVFactory func() AuthorizationV

type BifroestAudiences []string

type Configuration struct {
	Auditlogs Auditlogs `yaml:"auditlog,omitempty"`

	Ssh Ssh `yaml:"ssh"`

	// Session defines how new and existing sessions (a connection relates to) should be treated by the service.
	// These session should not be mixed up with [ssh sessions].
	//
	// [ssh sessions]: https://datatracker.ietf.org/doc/html/rfc4254#section-6
	Session Session `yaml:"session"`

	Flows Flows `yaml:"flows"`

	HouseKeeping HouseKeeping `yaml:"housekeeping"`

	Alternatives Alternatives `yaml:"alternatives"`

	StartMessage template.String `yaml:"startMessage,omitempty"`
}

type Environment struct {
	Variables EnvironmentVariables `yaml:"variables,omitempty"`
	V         EnvironmentV         `yaml:"-"`
}

type EnvironmentDocker struct {
	LoginAllowed template.Bool `yaml:"loginAllowed,omitempty"`

	Host       template.String `yaml:"host,omitempty"`
	ApiVersion template.String `yaml:"apiVersion,omitempty"`
	CertPath   template.String `yaml:"certPath,omitempty"`
	TlsVerify  template.Bool   `yaml:"tlsVerify,omitempty"`

	Image                template.String  `yaml:"image"`
	ImagePullPolicy      PullPolicy       `yaml:"imagePullPolicy,omitempty"`
	ImagePullCredentials template.String  `yaml:"imagePullCredentials,omitempty"`
	Networks             template.Strings `yaml:"networks"`
	Volumes              template.Strings `yaml:"volumes,omitempty"`
	Mounts               template.Strings `yaml:"mounts,omitempty"`
	Capabilities         template.Strings `yaml:"capabilities,omitempty"`
	Privileged           template.Bool    `yaml:"privileged,omitempty"`
	DnsServers           template.Strings `yaml:"dnsServers,omitempty"`
	DnsSearch            template.Strings `yaml:"dnsSearch,omitempty"`

	ShellCommand template.Strings `yaml:"shellCommand,omitempty"`
	ExecCommand  template.Strings `yaml:"execCommand,omitempty"`
	SftpCommand  template.Strings `yaml:"sftpCommand,omitempty"`
	Directory    template.String  `yaml:"directory"`
	User         template.String  `yaml:"user,omitempty"`

	Banner template.String `yaml:"banner,omitempty"`

	PortForwardingAllowed template.Bool `yaml:"portForwardingAllowed,omitempty"`
	ImpPublishHost        net.Host      `yaml:"impPublishHost,omitempty"`

	CleanOrphan template.Bool `yaml:"cleanOrphan,omitempty"`
}

type EnvironmentDummy struct {
	ExitCode template.Int64  `yaml:"exitCode,omitempty"`
	Banner   template.String `yaml:"banner,omitempty"`
}

type EnvironmentKubernetes struct {
	LoginAllowed template.Bool `yaml:"loginAllowed,omitempty"`

	Config  template.TextMarshaller[kubernetes.Kubeconfig, *kubernetes.Kubeconfig] `yaml:"config,omitempty"`
	Context template.String                                                        `yaml:"context,omitempty"`

	Name                 template.String   `yaml:"name"`
	Namespace            template.String   `yaml:"namespace,omitempty"`
	Os                   sys.Os            `yaml:"os"`
	Arch                 sys.Arch          `yaml:"arch"`
	ServiceAccountName   template.String   `yaml:"serviceAccountName,omitempty"`
	Image                template.String   `yaml:"image"`
	ImagePullPolicy      PullPolicy        `yaml:"imagePullPolicy,omitempty"`
	ImagePullSecretName  template.String   `yaml:"imagePullSecretName,omitempty"`
	ImagePullCredentials template.String   `yaml:"imagePullCredentials,omitempty"`
	ReadyTimeout         template.Duration `yaml:"readyTimeout,omitempty"`
	RemoveTimeout        time.Duration     `yaml:"removeTimeout,omitempty"`
	Capabilities         template.Strings  `yaml:"capabilities,omitempty"`
	Privileged           template.Bool     `yaml:"privileged,omitempty"`
	DnsServers           template.Strings  `yaml:"dnsServers,omitempty"`
	DnsSearch            template.Strings  `yaml:"dnsSearch,omitempty"`

	ShellCommand template.Strings `yaml:"shellCommand,omitempty"`
	ExecCommand  template.Strings `yaml:"execCommand,omitempty"`
	SftpCommand  template.Strings `yaml:"sftpCommand,omitempty"`
	Directory    template.String  `yaml:"directory"`
	User         template.String  `yaml:"user,omitempty"`
	Group        template.String  `yaml:"group,omitempty"`

	Banner                template.String `yaml:"banner,omitempty"`
	PortForwardingAllowed template.Bool   `yaml:"portForwardingAllowed,omitempty"`

	CleanOrphan template.Bool `yaml:"cleanOrphan,omitempty"`
}

type EnvironmentLocal struct {
	User                   UserRequirementTemplate `yaml:",inline"`
	EnvironmentLocalCommon `yaml:",inline"`
}

type EnvironmentLocalCommon struct {
	LoginAllowed               template.Bool           `yaml:"loginAllowed,omitempty"`
	CreateIfAbsent             template.Bool           `yaml:"createIfAbsent,omitempty"`
	UpdateIfDifferent          template.Bool           `yaml:"updateIfDifferent,omitempty"`
	ManagedGroup               string                  `yaml:"managedGroup,omitempty"`
	ManageSystemUsers          template.Bool           `yaml:"manageSystemUsers,omitempty"`
	DeleteOnDispose            template.Bool           `yaml:"deleteOnDispose,omitempty"`
	DeleteHomeTogetherWithUser template.Bool           `yaml:"deleteHomeTogetherWithUser,omitempty"`
	KillProcessesOnDispose     template.Bool           `yaml:"killProcessesOnDispose,omitempty"`
	Dispose                    EnvironmentLocalDispose `yaml:"dispose,omitempty"`
	Banner                     template.String         `yaml:"banner,omitempty"`
	PortForwardingAllowed      template.Bool           `yaml:"portForwardingAllowed,omitempty"`
	ShellCommand               template.Strings        `yaml:"shellCommand,omitempty"`
	ExecCommandPrefix          template.Strings        `yaml:"execCommandPrefix,omitempty"`
	Directory                  template.String         `yaml:"directory,omitempty"`
}

type EnvironmentLocalDispose struct {
	DeleteOnDispose          template.Bool `yaml:"deleteOnDispose,omitempty"`
	DeleteManagedUser        template.Bool `yaml:"deleteManagedUser,omitempty"`
	DeleteManagedUserHomeDir template.Bool `yaml:"deleteManagedUserHomeDir,omitempty"`
	KillManagedUserProcesses template.Bool `yaml:"killManagedUserProcesses,omitempty"`
}

type EnvironmentSsh struct {
	Address template.String `yaml:"address"`
	User    template.String `yaml:"user"`
	Os      sys.Os          `yaml:"os,omitempty"`

	KnownHosts        crypto.KnownHosts     `yaml:"knownHosts,omitempty"`
	KnownHostsFile    crypto.KnownHostsFile `yaml:"knownHostsFile,omitempty"`
	AcceptAllHostKeys bool                  `yaml:"acceptAllHostKeys,omitempty"`

	IdentityFiles  template.Strings           `yaml:"identityFiles,omitempty"`
	Certificate    *EnvironmentSshCertificate `yaml:"certificate,omitempty"`
	ConnectTimeout template.Duration          `yaml:"connectTimeout,omitempty"`

	LoginAllowed                 template.Bool   `yaml:"loginAllowed,omitempty"`
	Banner                       template.String `yaml:"banner,omitempty"`
	PortForwardingAllowed        template.Bool   `yaml:"portForwardingAllowed,omitempty"`
	ReversePortForwardingAllowed template.Bool   `yaml:"reversePortForwardingAllowed,omitempty"`
	AllowedSubsystems            common.Regexp   `yaml:"allowedSubsystems"`
}

type EnvironmentSshCertificate struct {
	IdentityFile          template.String                     `yaml:"identityFile,omitempty"`
	AuthorityIdentityFile template.String                     `yaml:"authorityIdentityFile,omitempty"`
	Validity              template.Duration                   `yaml:"validity"`
	ValidAfterSkew        template.Duration                   `yaml:"validAfterSkew,omitempty"`
	Audience              template.String                     `yaml:"audience,omitempty"`
	Principals            template.Strings                    `yaml:"principals,omitempty"`
	Extensions            EnvironmentSshCertificateExtensions `yaml:"extensions,omitempty"`
}

type EnvironmentSshCertificateExtensions map[string]template.String

type EnvironmentV interface {
	Types() []string
	FeatureFlags() []string
	// contains filtered or unexported methods
}

type EnvironmentVFactory func() EnvironmentV

type EnvironmentVariableName string

type EnvironmentVariables map[EnvironmentVariableName]template.String

type EnvironmentVariablesAware interface {
	SupportsEnvironmentVariables() bool
}

type Flow struct {
	// Name unique name within the while configuration which identifies the Flow.
	Name FlowName `yaml:"name"`

	// Auditlog references the audit log used by this flow.
	Auditlog AuditlogName `yaml:"auditlog,omitempty"`

	// Requirement represents all rules the connection has to meet to be able to be accepted by this flow.
	Requirement Requirement `yaml:"requirement,omitempty"`

	// Authorization defines how a connection can be authorized to get access to this flow.
	Authorization Authorization `yaml:"authorization"`

	// Environment defines to which Environment the connection will be connected ones every step before was successful.
	Environment Environment `yaml:"environment"`
}

type FlowName string

type Flows []Flow

type GroupRequirementTemplate struct {
	Gid  *template.TextMarshaller[user.GroupId, *user.GroupId] `yaml:"gid,omitempty"`
	Name template.String                                       `yaml:"name,omitempty"`
}

type GroupRequirementTemplates []GroupRequirementTemplate

type HouseKeeping struct {
	Every        common.Duration `yaml:"every"`
	InitialDelay common.Duration `yaml:"initialDelay"`

	// AutoRepair tells the housekeeping service to repair/cleanup broken or
	// unwanted stuff automatically, if possible. Defaults to DefaultHouseKeepingAutoRepair.
	AutoRepair bool `yaml:"autoRepair"`

	// KeepExpiredFor defines for how long a session should be kept before it will finally delete, although it
	// is already expired. In case of 0 it will be deleted immediately.
	// Defaults to DefaultHouseKeepingKeepExpiredFor
	KeepExpiredFor common.Duration `yaml:"keepExpiredFor"`
}

type Keys struct {
	HostKeys               template.Strings          `yaml:"hostKeys"`
	Exchanges              ssh.KeyExchanges          `yaml:"exchanges"`
	RsaRestriction         crypto.RsaRestriction     `yaml:"rsaRestriction"`
	DsaRestriction         crypto.DsaRestriction     `yaml:"dsaRestriction"`
	EcdsaRestriction       crypto.EcdsaRestriction   `yaml:"ecdsaRestriction"`
	Ed25519Restriction     crypto.Ed25519Restriction `yaml:"ed25519Restriction"`
	RememberMeNotification template.String           `yaml:"rememberMeNotification"`
}

type LocationError struct {
	File   string
	Line   int
	Column int
	Cause  error
}

type Messages struct {
	Authentications ssh.MessageAuthentications `yaml:"authentications"`
	Ciphers         ssh.Ciphers                `yaml:"ciphers"`
}

type PasswordProperties struct {
	Allowed            template.Bool `yaml:"allowed"`
	InteractiveAllowed template.Bool `yaml:"interactiveAllowed"`
	EmptyAllowed       template.Bool `yaml:"emptyAllowed"`
}

type PreparationMessage struct {
	Id   common.Regexp `yaml:"id,omitempty"`
	Flow common.Regexp `yaml:"flow,omitempty"`

	Start  template.String `yaml:"start,omitempty"`
	Update template.String `yaml:"update,omitempty"`
	End    template.String `yaml:"end,omitempty"`
	Error  template.String `yaml:"error,omitempty"`
}

type PreparationMessages []PreparationMessage

type PullPolicy uint8

type Ref struct {
	// contains filtered or unexported fields
}

type Requirement struct {
	IncludedRequestingName common.Regexp `yaml:"includedRequestingName,omitempty"`
	ExcludedRequestingName common.Regexp `yaml:"excludedRequestingName,omitempty"`
}

type Session struct {
	V SessionV
}

type SessionFs struct {
	// IdleTimeout represents the duration a session can be idle until it will be forcibly closed,
	// cleaned up and no new access is possible. 0 means no limitation at all.
	// Defaults to DefaultSessionIdleTimeout
	IdleTimeout common.Duration `yaml:"idleTimeout"`

	// MaxTimeout represents the maximum duration a whole session can last, regardless if it is idle
	// or active until it will be forcibly closed, cleaned up and no new access is possible. 0 means
	// no limitation at all. Defaults to DefaultSessionMaxTimeout
	MaxTimeout common.Duration `yaml:"maxTimeout"`

	// MaxConnections represents the maximum amount of connections that are related to one session. More than
	// this amount means that all new connections will be forcibly closed while connection process.
	// 0 means no limitation at all. Defaults to DefaultSessionMaxConnections
	MaxConnections uint16 `yaml:"maxConnections"`

	// Storage defines where are session.Fs are stored. Defaults to DefaultSessionFsStorage
	Storage string `yaml:"storage"`

	// FileMode defines with which permissions the files should be stored. Defaults to DefaultSessionFsFileMode.
	FileMode sys.FileMode `yaml:"fileMode"`
}

type SessionV interface {
	Types() []string
	FeatureFlags() []string
	// contains filtered or unexported methods
}

type SessionVFactory func() SessionV

type Ssh struct {
	// Addresses which the service will bind to. This can be more than one but at least one.
	// Defaults to DefaultSshAddresses.
	Addresses net.NetAddresses `yaml:"addresses"`

	// Keys represents all key related settings of the service.
	Keys Keys `yaml:"keys"`

	// Messages represents all message related settings of the service.
	Messages Messages `yaml:"messages"`

	// IdleTimeout represents the duration a connection can be idle until it will be forcibly closed.
	// 0 means no limitation at all. Defaults to DefaultSshIdleTimeout.
	IdleTimeout common.Duration `yaml:"idleTimeout"`

	// MaxTimeout represents the maximum duration a whole connection can last, regardless if it is idle or active
	// until it will be forcibly closed. 0 means no limitation at all. Defaults to DefaultSshMaxTimeout.
	MaxTimeout common.Duration `yaml:"maxTimeout"`

	// GracefulShutdownTimeout represents how long active connections may finish during a graceful shutdown before
	// they are forcibly closed. 0 disables graceful shutdown. Defaults to DefaultSshGracefulShutdownTimeout.
	GracefulShutdownTimeout common.Duration `yaml:"gracefulShutdownTimeout"`

	// HandshakeTimeout represents the maximum duration until a connection has authenticated successfully.
	// 0 means no limitation at all. Defaults to DefaultSshHandshakeTimeout.
	HandshakeTimeout common.Duration `yaml:"handshakeTimeout"`

	// SessionRequestTimeout represents how long an accepted session channel may wait for its initial shell, exec or
	// subsystem request. 0 means no limitation at all. Defaults to DefaultSshSessionRequestTimeout.
	SessionRequestTimeout common.Duration `yaml:"sessionRequestTimeout"`

	// MaxAuthTries represents the maximum amount of tries a client can do while a connection with different
	// authorizations before the connection will be forcibly closed. 0 means no limitation at all.
	// Defaults to DefaultSshMaxAuthTries.
	MaxAuthTries uint8 `yaml:"maxAuthTries"`

	// MaxConnections defines how many connection can be connected to this service in parallel. If there is a new
	// connection created which exceeds this number, this will be closed immediately.
	// Defaults to DefaultSshMaxConnections.
	MaxConnections uint32 `yaml:"maxConnections"`

	// MaxStartupsStart defines how many unauthenticated connections per listener are accepted before random early drop starts.
	// Defaults to DefaultSshMaxStartupsStart.
	MaxStartupsStart uint16 `yaml:"maxStartupsStart"`

	// MaxStartupsRate defines the initial drop probability in percent once MaxStartupsStart is reached.
	// Defaults to DefaultSshMaxStartupsRate.
	MaxStartupsRate uint8 `yaml:"maxStartupsRate"`

	// MaxStartupsFull defines the maximum amount of unauthenticated connections. 0 disables the complete
	// pre-authentication connection limit. Defaults to DefaultSshMaxStartupsFull.
	MaxStartupsFull uint16 `yaml:"maxStartupsFull"`

	// MaxSessionsPerConnection defines the maximum amount of active session channels per connection.
	// 0 means no limitation at all. Defaults to DefaultSshMaxSessionsPerConnection.
	MaxSessionsPerConnection uint16 `yaml:"maxSessionsPerConnection"`

	// MaxChannelsPerConnection defines the maximum amount of active channels per connection.
	// 0 means no limitation at all. Defaults to DefaultSshMaxChannelsPerConnection.
	MaxChannelsPerConnection uint16 `yaml:"maxChannelsPerConnection"`

	// MaxReverseForwardsPerConnection defines the maximum amount of active reverse forwards per connection.
	// 0 means no limitation at all. Defaults to DefaultSshMaxReverseForwardsPerConnection.
	MaxReverseForwardsPerConnection uint16 `yaml:"maxReverseForwardsPerConnection"`

	// MaxChannels defines the maximum amount of active channels per SSH listener.
	// 0 means no limitation at all. Defaults to DefaultSshMaxChannels.
	MaxChannels uint16 `yaml:"maxChannels"`

	// MaxReverseForwards defines the maximum amount of active reverse forwards per SSH listener.
	// 0 means no limitation at all. Defaults to DefaultSshMaxReverseForwards.
	MaxReverseForwards uint16 `yaml:"maxReverseForwards"`

	// UnauthenticatedAudit limits detailed audit records produced before authentication has been proven.
	UnauthenticatedAudit SshUnauthenticatedAudit `yaml:"unauthenticatedAudit,omitempty"`

	// ProxyProtocol defines if the proxy protocol should be respected.
	ProxyProtocol bool `yaml:"proxyProtocol,omitempty"`

	// Banner will be displayed if the clients connects to the server before any other action takes place.
	Banner template.String `yaml:"banner,omitempty"`

	// PreparationMessages will be displayed if any kind of preparation is required before the ssh session can
	// finally be used.
	PreparationMessages PreparationMessages `yaml:"preparationMessages,omitempty"`
}

type SshUnauthenticatedAudit struct {
	Interval       common.Duration `yaml:"interval"`
	PerSourceLimit uint16          `yaml:"perSourceLimit"`
	GlobalLimit    uint16          `yaml:"globalLimit"`
}

type UserCertificateAuthorityProperties struct {
	TrustedUserCAs     crypto.PublicKeys     `yaml:"trustedUserCAs,omitempty"`
	TrustedUserCAsFile crypto.PublicKeysFile `yaml:"trustedUserCAsFile,omitempty"`
}

type UserRequirementTemplate struct {
	Name        template.String                             `yaml:"name,omitempty"`
	DisplayName template.String                             `yaml:"displayName,omitempty"`
	Uid         *template.TextMarshaller[user.Id, *user.Id] `yaml:"uid,omitempty"`
	Group       GroupRequirementTemplate                    `yaml:"group,omitempty"`
	Groups      GroupRequirementTemplates                   `yaml:"groups,omitempty"`
	Shell       template.String                             `yaml:"shell,omitempty"`
	HomeDir     template.String                             `yaml:"homeDir,omitempty"`
	Skel        template.String                             `yaml:"skel,omitempty"`
}