config

type CachingConf struct {
	// RedisAddr is the Redis server address.
	// Env: LH_CACHE_REDIS_ADDR
	RedisAddr string `yaml:"redis_addr" envconfig:"REDIS_ADDR"`
	// Username is the Redis username.
	// Env: LH_CACHE_USERNAME
	Username string `yaml:"username" envconfig:"USERNAME"`
	// Password is the Redis password.
	// Env: LH_CACHE_PASSWORD
	Password string `yaml:"password" envconfig:"PASSWORD"`
	// RedisDB is the Redis database number.
	// Env: LH_CACHE_REDIS_DB
	RedisDB int `yaml:"redis_db" envconfig:"REDIS_DB"`
	// Disabled disables caching.
	// Env: LH_CACHE_DISABLED
	Disabled bool `yaml:"disabled" envconfig:"DISABLED"`
	// MaxLifetime is the maximum cache lifetime.
	// Env: LH_CACHE_MAX_LIFETIME
	MaxLifetime duration.DurationOption `yaml:"max_lifetime" envconfig:"MAX_LIFETIME"`
}

type Config struct {
	// EntityID is the entity identifier URL.
	// Env: LH_ENTITY_ID
	EntityID string `yaml:"entity_id" envconfig:"ENTITY_ID"`
	// Server holds server configuration.
	// Env prefix: LH_SERVER_
	Server lighthouse.ServerConf `yaml:"server" envconfig:"SERVER"`
	// Logging holds logging configuration.
	// Env prefix: LH_LOGGING_
	Logging loggingConf `yaml:"logging" envconfig:"LOGGING"`
	// Storage holds storage configuration.
	// Env prefix: LH_SERVER_
	Storage StorageConf `yaml:"storage" envconfig:"STORAGE"`
	// Caching holds caching configuration.
	// Env prefix: LH_CACHE_
	Caching CachingConf `yaml:"cache" envconfig:"CACHE"`
	// Signing holds signing configuration.
	// Env prefix: LH_SIGNING_
	Signing SigningConf `yaml:"signing" envconfig:"SIGNING"`
	// Endpoints holds endpoints configuration.
	// Env prefix: LH_ENDPOINTS_
	Endpoints Endpoints `yaml:"endpoints" envconfig:"ENDPOINTS"`
	// API holds API configuration.
	// Env prefix: LH_API_
	API apiConf `yaml:"api" envconfig:"API"`
	// Stats holds statistics configuration.
	// Env prefix: LH_STATS_
	Stats StatsConf `yaml:"stats" envconfig:"STATS"`
}

type Endpoints struct {
	// FetchEndpoint configures the fetch endpoint.
	// Env prefix: LH_ENDPOINTS_FETCH_
	FetchEndpoint lighthouse.EndpointConf `yaml:"fetch" envconfig:"FETCH"`
	// ListEndpoint configures the list endpoint.
	// Env prefix: LH_ENDPOINTS_LIST_
	ListEndpoint lighthouse.EndpointConf `yaml:"list" envconfig:"LIST"`
	// ResolveEndpoint configures the resolve endpoint.
	// Env prefix: LH_ENDPOINTS_RESOLVE_
	ResolveEndpoint resolveEndpointConf `yaml:"resolve" envconfig:"RESOLVE"`
	// TrustMarkStatusEndpoint configures the trust mark status endpoint.
	// Env prefix: LH_ENDPOINTS_TRUST_MARK_STATUS_
	TrustMarkStatusEndpoint lighthouse.EndpointConf `yaml:"trust_mark_status" envconfig:"TRUST_MARK_STATUS"`
	// TrustMarkedEntitiesListingEndpoint configures the trust mark list endpoint.
	// Env prefix: LH_ENDPOINTS_TRUST_MARK_LIST_
	TrustMarkedEntitiesListingEndpoint lighthouse.EndpointConf `yaml:"trust_mark_list" envconfig:"TRUST_MARK_LIST"`
	// TrustMarkEndpoint configures the trust mark endpoint.
	// Env prefix: LH_ENDPOINTS_TRUST_MARK_
	TrustMarkEndpoint lighthouse.EndpointConf `yaml:"trust_mark" envconfig:"TRUST_MARK"`
	// HistoricalKeysEndpoint configures the historical keys endpoint.
	// Env prefix: LH_ENDPOINTS_HISTORICAL_KEYS_
	HistoricalKeysEndpoint lighthouse.EndpointConf `yaml:"historical_keys" envconfig:"HISTORICAL_KEYS"`

	// EnrollmentEndpoint configures the enrollment endpoint.
	// Env prefix: LH_ENDPOINTS_ENROLL_
	// Note: checker config is YAML-only
	EnrollmentEndpoint checkedEndpointConf `yaml:"enroll" envconfig:"ENROLL"`
	// EnrollmentRequestEndpoint configures the enrollment request endpoint.
	// Env prefix: LH_ENDPOINTS_ENROLL_REQUEST_
	EnrollmentRequestEndpoint lighthouse.EndpointConf `yaml:"enroll_request" envconfig:"ENROLL_REQUEST"`
	// TrustMarkRequestEndpoint configures the trust mark request endpoint.
	// Env prefix: LH_ENDPOINTS_TRUST_MARK_REQUEST_
	TrustMarkRequestEndpoint lighthouse.EndpointConf `yaml:"trust_mark_request" envconfig:"TRUST_MARK_REQUEST"`
	// EntityCollectionEndpoint configures the entity collection endpoint.
	// Env prefix: LH_ENDPOINTS_ENTITY_COLLECTION_
	EntityCollectionEndpoint collectionEndpointConf `yaml:"entity_collection" envconfig:"ENTITY_COLLECTION"`
}

type LoggerConf struct {
	// Dir is the directory for log files.
	// Env: LH_LOGGING_ACCESS_DIR or LH_LOGGING_INTERNAL_DIR
	Dir string `yaml:"dir" envconfig:"DIR"`
	// StdErr enables logging to stderr.
	// Env: LH_LOGGING_ACCESS_STDERR or LH_LOGGING_INTERNAL_STDERR
	StdErr bool `yaml:"stderr" envconfig:"STDERR"`
}

type SigningConf struct {
	lighthouse.SigningConf `yaml:",inline"`
}

type StatsBufferConf struct {
	// Size is the maximum number of entries in the ring buffer.
	// Default: 10000
	// Env: LH_STATS_BUFFER_SIZE
	Size int `yaml:"size" envconfig:"SIZE"`

	// FlushInterval is how often the buffer is flushed to the database.
	// Default: 5s
	// Env: LH_STATS_BUFFER_FLUSH_INTERVAL
	FlushInterval time.Duration `yaml:"flush_interval" envconfig:"FLUSH_INTERVAL"`

	// FlushThreshold triggers a flush when the buffer is this percentage full.
	// Value between 0 and 1. Default: 0.8
	// Env: LH_STATS_BUFFER_FLUSH_THRESHOLD
	FlushThreshold float64 `yaml:"flush_threshold" envconfig:"FLUSH_THRESHOLD"`
}

type StatsCaptureConf struct {
	// ClientIP records the client's IP address.
	// Env: LH_STATS_CAPTURE_CLIENT_IP
	ClientIP bool `yaml:"client_ip" envconfig:"CLIENT_IP"`

	// UserAgent records the User-Agent header.
	// Env: LH_STATS_CAPTURE_USER_AGENT
	UserAgent bool `yaml:"user_agent" envconfig:"USER_AGENT"`

	// QueryParams records URL query parameters as JSON.
	// Env: LH_STATS_CAPTURE_QUERY_PARAMS
	QueryParams bool `yaml:"query_params" envconfig:"QUERY_PARAMS"`

	// GeoIP enables country lookup from IP addresses.
	// Env prefix: LH_STATS_CAPTURE_GEO_IP_
	GeoIP StatsGeoIPConf `yaml:"geo_ip" envconfig:"GEO_IP"`
}

type StatsConf struct {
	// Enabled controls whether statistics collection is active.
	// Env: LH_STATS_ENABLED
	Enabled bool `yaml:"enabled" envconfig:"ENABLED"`

	// Buffer configures the in-memory ring buffer for request logs.
	// Env prefix: LH_STATS_BUFFER_
	Buffer StatsBufferConf `yaml:"buffer" envconfig:"BUFFER"`

	// Capture controls what data is collected from each request.
	// Env prefix: LH_STATS_CAPTURE_
	Capture StatsCaptureConf `yaml:"capture" envconfig:"CAPTURE"`

	// Retention defines how long data is kept.
	// Env prefix: LH_STATS_RETENTION_
	Retention StatsRetentionConf `yaml:"retention" envconfig:"RETENTION"`

	// Endpoints is a list of endpoint paths to track.
	// If empty, all federation endpoints are tracked.
	// Example: ["/.well-known/openid-federation", "/fetch", "/resolve"]
	// Env: LH_STATS_ENDPOINTS (comma-separated)
	Endpoints []string `yaml:"endpoints" envconfig:"ENDPOINTS"`
}

type StatsGeoIPConf struct {
	// Enabled turns on GeoIP country lookup.
	// Env: LH_STATS_CAPTURE_GEO_IP_ENABLED
	Enabled bool `yaml:"enabled" envconfig:"ENABLED"`

	// DatabasePath is the path to a MaxMind GeoLite2-Country.mmdb file.
	// Env: LH_STATS_CAPTURE_GEO_IP_DATABASE_PATH
	DatabasePath string `yaml:"database_path" envconfig:"DATABASE_PATH"`
}

type StatsRetentionConf struct {
	// DetailedDays is how many days to keep individual request logs.
	// Default: 90
	// Env: LH_STATS_RETENTION_DETAILED_DAYS
	DetailedDays int `yaml:"detailed_days" envconfig:"DETAILED_DAYS"`

	// AggregatedDays is how many days to keep daily aggregated statistics.
	// Default: 365
	// Env: LH_STATS_RETENTION_AGGREGATED_DAYS
	AggregatedDays int `yaml:"aggregated_days" envconfig:"AGGREGATED_DAYS"`
}

type StorageConf struct {
	// Deprecated: Only used for discovering a migration need
	BackendType string `yaml:"backend" envconfig:"-"`
	// Driver is the database driver type.
	// Env: LH_STORAGE_DRIVER
	Driver storage.DriverType `yaml:"driver" envconfig:"DRIVER"`
	// DataDir is the directory for SQLite database files.
	// Env: LH_STORAGE_DATA_DIR
	DataDir string `yaml:"data_dir" envconfig:"DATA_DIR"`
	// DSN is the database connection string.
	// Env: LH_STORAGE_DSN
	DSN string `yaml:"dsn" envconfig:"DSN"`
	// DSNConf provides individual connection parameters (embedded).
	// Env: LH_STORAGE_USER, LH_STORAGE_PASSWORD, LH_STORAGE_HOST, LH_STORAGE_PORT, LH_STORAGE_DB
	storage.DSNConf
	// Debug enables debug logging.
	// Env: LH_STORAGE_DEBUG
	Debug bool `yaml:"debug" envconfig:"DEBUG"`
}