config

type ComposeSettings struct {
	Docker EngineSettings
	Podman EngineSettings
}

type EngineSettings struct {
	Binary string
	Socket string
}

type GitHubPolicy struct {
	Repository string
	BaseBranch string
	TokenFile  string
}

type HealthPolicy struct {
	Type           string
	Target         string
	AcceptedStatus []int
	TimeoutSeconds float64
}

type NotifierSettings struct {
	Webhook *WebhookSettings
	// HeartbeatIntervalSeconds, when set, makes the Notifier deliver
	// even a suppressed run.finished if nothing has been delivered for
	// that long, so silence stays distinguishable from failure.
	HeartbeatIntervalSeconds int
}

type Policy struct {
	Mode                       domain.Mode
	MaxUpdatesPerRun           int
	VerificationTimeoutSeconds int
	CandidateMinAgeSeconds     int
	LeaseTTLSeconds            int
	CheckIntervalSeconds       int
	ObservationConcurrency     int
	StateFile                  string
	Portainer                  *PortainerSettings
	Compose                    ComposeSettings
	Stacks                     []StackPolicy
	ExcludedStacks             []string
	GitHub                     *GitHubPolicy
	Notifier                   *NotifierSettings
	UI                         *UISettings
}

type PortainerSettings struct {
	BaseURL              string
	APIKeyFile           string
	ExpectedUsername     string
	TLSCAFile            string
	TLSFingerprintSHA256 string
}

type ServicePolicy struct {
	Name      string
	AutoApply bool
	Health    HealthPolicy
	Enabled   bool
}

type StackPolicy struct {
	Name             string
	Backend          domain.Backend
	Enabled          bool
	AutoApply        bool
	ExpectedServices []string
	Health           *HealthPolicy
	Services         []ServicePolicy
	GitPath          string
	// File and Project apply to compose backends only. File is the
	// symlink-resolved compose file path; Project defaults to Name.
	File    string
	Project string
}

type UISettings struct {
	Enabled bool
	Address string
	// TokenFile holds the bearer token for a non-loopback bind. Ripen
	// keeps every secret in a file, never in the policy document, and
	// RIPEN_UI_TOKEN is the other way to supply it.
	TokenFile string
}

type WebhookSettings struct {
	URLFile        string
	TokenFile      string
	Events         []event.Name
	TimeoutSeconds int
}