host

type BootConfig struct {
	Loader BootConfigLoader `json:"loader"`
	BCache BootConfigBCache `json:"bcache"`
}

type BootConfigBCache struct {
	Enable bool `json:"enable"`
}

type BootConfigLoader struct {
	SystemdBoot BootConfigLoaderSystemdBoot `json:"systemd-boot"`
}

type BootConfigLoaderSystemdBoot struct {
	Enable bool `json:"enable"`
}

type DNSPublisher interface {
	AddHost(ctx context.Context, hostname string)
	RemoveHost(hostname string) error
	Start()
}

type LocatorController interface {
	Connect(ctx context.Context, wgInterface *sv1.WireguardInterface, locatorAddress string) error
	Close(wgInterface *sv1.WireguardInterface, locatorAddress string)
}

type Migrator interface {
	Migrate()
}

type NetworkingConfig struct {
	Hostname       string                         `json:"hostName"`
	Domain         string                         `json:"domain"`
	NetworkManager NetworkingConfigNetworkManager `json:"networkmanager"`
	Wireless       NetworkingConfigWireless       `json:"wireless"`
	Firewall       NetworkingConfigFirewall       `json:"firewall"`
	NAT            NetworkingConfigNAT            `json:"nat"`
	Wireguard      NetworkingConfigWireguard      `json:"wireguard"`
}

type NetworkingConfigFirewall struct {
	Enable bool `json:"enable"`
}

type NetworkingConfigNAT struct {
	Enable             bool     `json:"enable"`
	ExternalInterface  string   `json:"externalInterface,omitempty"`
	InternalInterfaces []string `json:"internalInterfaces,omitempty"`
}

type NetworkingConfigNetworkManager struct {
	Enable bool `json:"enable"`
}

type NetworkingConfigWireguard struct {
	Interfaces map[string]WireguardInterface `json:"interfaces,omitempty"`
}

type NetworkingConfigWireless struct {
	Enable bool `json:"enable"`
}

type NixConfig struct {
	GC NixConfigGC `json:"gc"`
}

type NixConfigGC struct {
	Automatic bool   `json:"automatic"`
	Dates     string `json:"dates"`
	Options   string `json:"options"`
}

type Replacer func(line string) string

type STUNController interface {
	// Bind creates a persistent connection to the given STUN server from the given port. All data received on this port will
	// be multiplexed between the STUN client and the upstream service listening on the given host port (e.g. Wireguard).
	Bind(port int, server string) error
	// Address returns the current STUN address for the given port (if there is one).
	Address(port int) (stun.XORMappedAddress, error)
	// Connect initializes a short period of connection attempts to the given STUN address of a peer from the
	// given port. This opens a hole in the NAT for inbound connection attempts from the peer.
	Connect(port int, address net.Addr)
	// Cancel destructs an existing STUN binding on the given port.
	Cancel(port int) error
}

type SecureTunnelingController interface {
	// Load is intended to be called at start up and will read secure tunneling configured resources and start
	// them (e.g. Wireguard interfaces and their respective STUN servers and Locator connections).
	Load()

	// AddInterface will add a Wireguard interface to the host.
	AddInterface(ctx context.Context, wireguardInterface *v1.WireguardInterface) (publicKey string, err error)
	// RemoveInterface will remove a Wireguard interface from the host and also remove any dependent
	// resources (STUN bindings and Locator connections).
	RemoveInterface(ctx context.Context, wgInterfaceName string) error
	// AddPeer will add a Wireguard peer to the given interface.
	AddPeer(ctx context.Context, wgInterfaceName string, peer *v1.WireguardPeer) (addresses []string, dnsServers []string, err error)

	// AddLocator will add a Locator conneciton to the given interface.
	AddLocator(ctx context.Context, wgInterfaceName string, locatorAddress string) error
	// RemoveLocator will remove a Locator connection from the given interface.
	RemoveLocator(ctx context.Context, wgInterfaceName string, locatorAddress string) error

	// BindSTUNServer will add (or replace) a STUN bunding to the given Wireguard interface.
	BindSTUNServer(ctx context.Context, wgInterfaceName string, stunServer string) error
}

type SecurityConfig struct {
	Sudo SecurityConfigSudo `json:"sudo"`
}

type SecurityConfigSudo struct {
	WheelNeedsPassword bool `json:"wheelNeedsPassword"`
}

type ServicesConfig struct {
	Resolved ServicesConfigResolved `json:"resolved"`
	K3s      ServicesConfigK3s      `json:"k3s"`
	OpenSSH  ServicesConfigOpenSSH  `json:"openssh"`
	Avahi    ServicesConfigAvahi    `json:"avahi"`
}

type ServicesConfigAvahi struct {
	Enable   bool                       `json:"enable"`
	IPv4     bool                       `json:"ipv4"`
	IPv6     bool                       `json:"ipv6"`
	NSSmDNS4 bool                       `json:"nssmdns4"`
	Publish  ServicesConfigAvahiPublish `json:"publish"`
}

type ServicesConfigAvahiPublish struct {
	Enable       bool `json:"enable"`
	Domain       bool `json:"domain"`
	Addresses    bool `json:"addresses"`
	UserServices bool `json:"userServices"`
}

type ServicesConfigK3s struct {
	Enable     bool   `json:"enable"`
	Role       string `json:"role"`
	ExtraFlags string `json:"extraFlags"`
}

type ServicesConfigOpenSSH struct {
	Enable bool `json:"enable"`
}

type ServicesConfigResolved struct {
	Enable  bool     `json:"enable"`
	Domains []string `json:"domains"`
}

type TimeConfig struct {
	TimeZone string `json:"timeZone"`
}

type User struct {
	IsNormalUser bool        `json:"isNormalUser"`
	ExtraGroups  []string    `json:"extraGroups"`
	OpenSSH      UserOpenSSH `json:"openssh"`
}

type UserOpenSSH struct {
	AuthorizedKeys UserOpenSSHAuthorizedKeys `json:"authorizedKeys"`
}

type UserOpenSSHAuthorizedKeys struct {
	Keys []string `json:"keys"`
}

type UsersConfig struct {
	Users map[string]User `json:"users"`
}

type WireGuardConfig struct {
	Id         string
	PrivateKey wgtypes.Key
	PublicKey  wgtypes.Key
	Peers      []wgtypes.Key
}

type WireguardController interface {
	AddInterface(ctx context.Context, logger chassis.Logger, wgInterface *v1.WireguardInterface) (publicKey string, err error)
	RemoveInterface(ctx context.Context, logger chassis.Logger, wgInterfaceName string) error
	AddPeer(ctx context.Context, logger chassis.Logger, wgInterfaceName string, peer *v1.WireguardPeer) (addresses []string, err error)
}

type WireguardInterface struct {
	IPs            []string        `json:"ips"`
	ListenPort     uint32          `json:"listenPort"`
	PrivateKeyFile string          `json:"privateKeyFile"`
	Peers          []WireguardPeer `json:"peers"`
}

type WireguardPeer struct {
	PublicKey  string   `json:"publicKey"`
	AllowedIPs []string `json:"allowedIPs"`
}