config

type Config struct {
	Database     *dbConfig           `json:"database,omitempty"`
	Service      *svcConfig          `json:"service,omitempty"`
	KV           *kvConfig           `json:"kv,omitempty"`
	Alertmanager *alertmanagerConfig `json:"alertmanager,omitempty"`
	Auth         *authConfig         `json:"auth,omitempty"`
	Prometheus   *prometheusConfig   `json:"prometheus,omitempty"`
	CA           *ca.Config          `json:"ca,omitempty"`
	Tracing      *tracingConfig      `json:"tracing,omitempty"`
	GitOps       *gitOpsConfig       `json:"gitOps,omitempty"`
}

type ConfigOption func(*Config)

type EnrollmentService struct {
	client.Config

	// EnrollmentUIEndpoint is the address of the device enrollment UI
	EnrollmentUIEndpoint string `json:"enrollment-ui-endpoint,omitempty"`
}

type ManagementService struct {
	client.Config
}

type RateLimitConfig struct {
	Requests     int           `json:"requests,omitempty"`     // max requests per window
	Window       util.Duration `json:"window,omitempty"`       // e.g. "1m" for one minute
	AuthRequests int           `json:"authRequests,omitempty"` // max auth requests per window
	AuthWindow   util.Duration `json:"authWindow,omitempty"`   // e.g. "1h" for one hour
	// TrustedProxies specifies IP addresses/networks that are allowed to set proxy headers
	// If empty, proxy headers are ignored for security (only direct connection IPs are used)
	TrustedProxies []string `json:"trustedProxies,omitempty"`
}

type SecureString string

type ServiceConfig struct {
	// EnrollmentService is the client configuration for connecting to the device enrollment server
	EnrollmentService EnrollmentService `json:"enrollment-service,omitempty"`
	// ManagementService is the client configuration for connecting to the device management server
	ManagementService ManagementService `json:"management-service,omitempty"`
}