authdaemon

type Config struct {
	// DisableHTTPS: when true, Run() does not start the HTTPS server (for embedded use inside Newt). Call ProcessConnection directly for connection events.
	DisableHTTPS           bool
	Port                   int    // Required when DisableHTTPS is false. Listen port for the HTTPS server. No default.
	PresharedKey           string // Required when DisableHTTPS is false. HTTP auth (Authorization: Bearer <key> or X-Preshared-Key: <key>). No default.
	CACertPath             string // Required. Where to write the CA cert (e.g. /etc/ssh/ca.pem). No default.
	Force                  bool   // If true, overwrite existing CA cert (and other items) when content differs. Default false.
	PrincipalsFilePath     string // Required. Path to the principals data file (JSON: username -> array of principals). No default.
	GenerateRandomPassword bool   // If true, set a random password on users when they are provisioned (for SSH PermitEmptyPasswords no).
}

type ConnectionMetadata struct {
	SudoMode     string   `json:"sudoMode"`     // "none" | "full" | "commands"
	SudoCommands []string `json:"sudoCommands"` // used when sudoMode is "commands"
	Homedir      bool     `json:"homedir"`
	Groups       []string `json:"groups"` // system groups to add the user to
}

type ConnectionRequest struct {
	CaCert   string             `json:"caCert"`
	NiceId   string             `json:"niceId"`
	Username string             `json:"username"`
	Metadata ConnectionMetadata `json:"metadata"`
}

type Server struct {
	// contains filtered or unexported fields
}