v1

type App struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   AppSpec   `json:"spec,omitempty"`
	Status AppStatus `json:"status,omitempty"`
}

type AppList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []App `json:"items"`
}

type AppSpec struct {
	// Chart is the Helm chart which defines the App.
	Chart string `json:"chart"`
	// Repo is the URL for the chart repository.
	Repo string `json:"repo"`
	// Release is the name of the Helm release of the App.
	Release string `json:"release"`
	// Values optionally defines the values that will be applied to the Chart.
	Values string `json:"values,omitempty"`
	// Version is the version of the chart.
	Version string `json:"version"`
}

type AppStatus struct {
	// Version is the version of the Chart that is currently installed.
	Version string `json:"version"`
	// Values that were used for the current Chart install.
	Values string `json:"values,omitempty"`
}

type AppStore struct {
	// URL defines where the Helm chart index of the store is: e.g. https://apps.home-cloud.io/index.yaml
	URL string `json:"url"`
	// RawChartURL defines where to find README.md files that populate descriptions in the
	// App Store: e.g. https://raw.githubusercontent.com/home-cloud-io/store
	RawChartURL string `json:"rawChartURL"`
}

type BaseSpec struct {
	Values string `json:"values,omitempty"`
}

type CNISpec struct {
	Values string `json:"values,omitempty"`
}

type DaemonSpec struct {
	Disable    bool           `json:"disable,omitempty"`
	Image      string         `json:"image,omitempty"`
	Tag        string         `json:"tag,omitempty"`
	Address    string         `json:"address,omitempty"`
	System     SystemSpec     `json:"system,omitempty"`
	Kubernetes KubernetesSpec `json:"kubernetes,omitempty"`
}

type DaemonStatus struct {
	Image string `json:"image,omitempty"`
	Tag   string `json:"tag,omitempty"`
}

type GatewayAPISpec struct {
	// Disabling will not uninstall a previous installation. Since these CRDs are cluster-scoped, this is to avoid
	// breaking an existing installation from another source. You must uninstall manually after disabling.
	Disable bool   `json:"disable,omitempty"`
	Source  string `json:"source,omitempty"`
	Version string `json:"version,omitempty"`
}

type GatewayAPIStatus struct {
	URL     string `json:"url,omitempty"`
	Version string `json:"version,omitempty"`
}

type ImageVersion struct {
	Image string
	Tag   string
}

type Install struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   InstallSpec   `json:"spec,omitempty"`
	Status InstallStatus `json:"status,omitempty"`
}

type InstallList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Install `json:"items"`
}

type InstallSpec struct {
	Version    string         `json:"version"`
	GatewayAPI GatewayAPISpec `json:"gatewayApi,omitempty" yaml:"gatewayApi"`
	Istio      IstioSpec      `json:"istio,omitempty"`
	Server     ServerSpec     `json:"server,omitempty"`
	MDNS       MDNSSpec       `json:"mdns,omitempty"`
	Tunnel     TunnelSpec     `json:"tunnel,omitempty"`
	// TODO: document API
	Daemon   DaemonSpec   `json:"daemon,omitempty"`
	Settings SettingsSpec `json:"settings,omitempty"`
}

type InstallStatus struct {
	Version    string           `json:"version,omitempty"`
	GatewayAPI GatewayAPIStatus `json:"gatewayApi,omitempty"`
	Istio      IstioStatus      `json:"istio,omitempty"`
	Server     ServerStatus     `json:"server,omitempty"`
	Tunnel     TunnelStatus     `json:"tunnel,omitempty"`
	MDNS       MDNSStatus       `json:"mdns,omitempty"`
	Daemon     DaemonStatus     `json:"daemon,omitempty"`
}

type IstioSpec struct {
	Disable            bool   `json:"disable,omitempty"`
	Namespace          string `json:"istio,omitempty"`
	Version            string `json:"version,omitempty"`
	Source             string `json:"source,omitempty"`
	IngressGatewayName string `json:"ingressGatewayName,omitempty"`

	Base    BaseSpec    `json:"base,omitempty"`
	Istiod  IstiodSpec  `json:"istiod,omitempty"`
	CNI     CNISpec     `json:"cni,omitempty"`
	Ztunnel ZtunnelSpec `json:"ztunnel,omitempty"`
}

type IstioStatus struct {
	Version string `json:"version,omitempty"`
	Repo    string `json:"repo,omitempty"`
}

type IstiodSpec struct {
	Values string `json:"values,omitempty"`
}

type KubernetesSpec struct {
	Disable bool `json:"disable,omitempty"`
	// Version is the semver of the Kubernetes release: e.g. 1.34.2
	Version string `json:"version,omitempty"`
}

type MDNSSpec struct {
	Disable bool   `json:"disable,omitempty"`
	Image   string `json:"image,omitempty"`
	Tag     string `json:"tag,omitempty"`
}

type MDNSStatus struct {
	Image string `json:"image,omitempty"`
	Tag   string `json:"tag,omitempty"`
}

type PeerSpec struct {
	// PrivateKeySecret references a Secret which contains the private key for this peer.
	// +optional
	PrivateKeySecret *SecretReference `json:"privateKeySecret,omitempty"`

	// PublicKey specifies the public key of this peer.  PublicKey is a
	// mandatory field for all PeerConfigs.
	PublicKey string `json:"publicKey"`

	// PresharedKey specifies a peer's preshared key configuration, if not nil.
	//
	// Setting to nil will clear the preshared key.
	// +optional
	PresharedKey *SecretReference `json:"presharedKey,omitempty"`

	// Endpoint specifies the endpoint of this peer entry, if not nil.
	// +optional
	Endpoint *string `json:"endpoint,omitempty"`

	// PersistentKeepaliveInterval specifies the persistent keepalive interval
	// for this peer, if not nil.
	//
	// A non-nil value of 0 will clear the persistent keepalive interval.
	// +optional
	PersistentKeepaliveInterval *time.Duration `json:"persistentKeepaliveInterval,omitempty"`

	// AllowedIPs specifies a list of allowed IP addresses in CIDR notation.
	// for this peer.
	AllowedIPs []string `json:"allowedIPs"`
}

type SecretReference struct {
	// Name specifies name of the Secret object.
	Name string `json:"name"`

	// Namespace specifies the namespace of the Secret object.
	// If not set, will search within the same namespace as the Wireguard object.
	// +optional
	Namespace *string `json:"namespace,omitempty"`

	// DataKey specifies the data key to find the requested value in.
	DataKey string `json:"dataKey"`
}

type ServerSpec struct {
	Disable bool   `json:"disable,omitempty"`
	Image   string `json:"image,omitempty"`
	Tag     string `json:"tag,omitempty"`
}

type ServerStatus struct {
	Image string `json:"image,omitempty"`
	Tag   string `json:"tag,omitempty"`
}

type SettingsSpec struct {
	// AutoUpdateApps (default: true)
	AutoUpdateApps bool `json:"autoUpdateApps,omitempty"`
	// AutoUpdateSystem (default: true)
	AutoUpdateSystem bool `json:"autoUpdateSystem,omitempty"`
	// Hostname defines the base hostname for the install (default: home-cloud.local)
	Hostname string `json:"hostname,omitempty"`
	// AppStores defines the app stores to install apps from
	AppStores []AppStore `json:"appStores,omitempty"`
	// AutoUpdateAppsSchedule is a cron string that defines the freqency with which the server
	// will automatically update installed Apps: e.g. (default: "0 3 * * *")
	//
	// You must restart the server after changing this value for it to take
	// effect if updating the Kuberenetes resource directly.
	AutoUpdateAppsSchedule string `json:"autoUpdateAppsSchedule,omitempty"`
}

type SystemSpec struct {
	Disable bool `json:"disable,omitempty"`
	// Source represents the source URL of the system image. For example, for Talos
	// this is the installer image: ghcr.io/siderolabs/installer
	Source string `json:"source,omitempty"`
	// Version represents the version of the system to install. For example, for Talos
	// this is the tag of the installer image: e.g. v1.11.2
	Version string `json:"version,omitempty"`
}

type TunnelSpec struct {
	Disable bool   `json:"disable,omitempty"`
	Image   string `json:"image,omitempty"`
	Tag     string `json:"tag,omitempty"`
}

type TunnelStatus struct {
	Image string `json:"image,omitempty"`
	Tag   string `json:"tag,omitempty"`
}

type Wireguard struct {
	metav1.TypeMeta `json:",inline"`

	// metadata is a standard object metadata
	// +optional
	metav1.ObjectMeta `json:"metadata,omitempty,omitzero"`

	// spec defines the desired state of Wireguard
	// +required
	Spec WireguardSpec `json:"spec"`

	// status defines the observed state of Wireguard
	// +optional
	Status WireguardStatus `json:"status,omitempty,omitzero"`
}

type WireguardList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Wireguard `json:"items"`
}

type WireguardSpec struct {
	// ID specifies the universally unique (UUID v4) identity of this interface. This is a public
	// value that is used to lookup this Wireguard interface (server) via the defined Locator servers. It can
	// be rotated independently of the private key (e.g. if the ID gets leaked and someone tries to DDOS
	// the server with connection requests through a public Locator).
	ID string `json:"id"`

	// Locators specifies the addresses of Locator servers to connect to this Wireguard interface.
	Locators []string `json:"locators"`

	// STUNServer specifies the address of the STUN server to bind the ListenPort to and perform
	// multiplexing of traffic between STUN and Wireguard.
	STUNServer string `json:"stunServer"`

	// Name specifies the name of the interface.
	Name string `json:"name"`

	// PrivateKeySecret references a Secret which contains the private key for this interface.
	PrivateKeySecret SecretReference `json:"privateKeySecret"`

	// Address specifies the address of the interface in CIDR notation.
	Address string `json:"address"`

	// ListenPort specifies an interface's listening port.
	ListenPort int `json:"listenPort"`

	// NATInterface specifies the interface to configure NAT masquerade on for forwarding
	// external traffic through (eth0, ens18, etc.).
	NATInterface string `json:"natInterface"`

	// Peers specifies a list of peer configurations to apply to an interface.
	Peers []PeerSpec `json:"peers"`
}

type WireguardStatus struct {

	// conditions represent the current state of the Wireguard resource.
	// Each condition has a unique type and reflects the status of a specific aspect of the resource.
	//
	// Standard condition types include:
	// - "Available": the resource is fully functional
	// - "Progressing": the resource is being created or updated
	// - "Degraded": the resource failed to reach or maintain its desired state
	//
	// The status of each condition is one of True, False, or Unknown.
	// +listType=map
	// +listMapKey=type
	// +optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

type ZtunnelSpec struct {
	Values string `json:"values,omitempty"`
}