nftbanconf

type CommandPaths struct {
	// contains filtered or unexported fields
}

type Config struct {
	// Version
	Version       string
	ConfigVersion string

	// Binary paths (from nftban.conf PATHS section)
	Bin     string // NFTBAN_BIN - main CLI
	CoreBin string // NFTBAN_CORE_BIN - Go core binary

	// Directory paths
	LibDir    string // NFTBAN_LIB_DIR
	ConfigDir string // NFTBAN_CONFIG_DIR
	DataDir   string // NFTBAN_DATA_DIR
	LogDir    string // NFTBAN_LOG_DIR
	CacheDir  string // NFTBAN_CACHE_DIR
	RunDir    string // NFTBAN_RUN_DIR

	// Feature flags
	MetricsEnabled          bool   // NFTBAN_METRICS_ENABLED
	MetricsBackend          string // NFTBAN_METRICS_BACKEND
	MetricsSamplingInterval int    // NFTBAN_METRICS_SAMPLING_INTERVAL (seconds)
	MetricsMaxSamples       int    // NFTBAN_METRICS_MAX_SAMPLES
	PrometheusDir           string // NFTBAN_PROMETHEUS_DIR (node_exporter textfile dir)
	MetricsPrometheusAddr   string // NFTBAN_METRICS_PROMETHEUS_ADDR
	MetricsNodeExporterAddr string // NFTBAN_METRICS_NODE_EXPORTER_ADDR
	MetricsVictoriaAddr     string // NFTBAN_METRICS_VICTORIA_ADDR
	GeoIPEnabled            bool   // NFTBAN_GEOIP_ENABLED
	GeoIPLicenseKey         string // NFTBAN_GEOIP_LICENSE_KEY
	FeedsEnabled            bool   // NFTBAN_FEEDS_ENABLED
	FeedsAutoUpdate         bool   // NFTBAN_FEEDS_AUTO_UPDATE
	SuricataEnabled         bool   // NFTBAN_SURICATA_ENABLED
	GUIEnabled              bool   // NFTBAN_GUI_ENABLED
	GUIAddr                 string // NFTBAN_GUI_ADDR
	APIAddr                 string // NFTBAN_API_ADDR (daemon HTTP API address)
	PortscanEnabled         bool   // PORTSCAN_ENABLED (canonical; v1.103 PR-C3-C) / NFTBAN_PORTSCAN_ENABLED (compatibility alias)
	DDoSEnabled             bool   // DDOS_ENABLED (canonical; v1.103 PR-C3-C) / NFTBAN_DDOS_ENABLED (compatibility alias)
	LoginMonitorEnabled     bool   // NFTBAN_LOGIN_MONITOR_ENABLED

	// Suricata settings
	SuricataEveLog              string // NFTBAN_SURICATA_EVE_LOG
	SuricataLogDir              string // NFTBAN_SURICATA_LOG_DIR
	SuricataBanThreshold        int    // NFTBAN_SURICATA_BAN_THRESHOLD
	SuricataScoreDecay          int    // NFTBAN_SURICATA_SCORE_DECAY
	SuricataCloudflareWhitelist bool   // NFTBAN_SURICATA_CLOUDFLARE_WHITELIST

	// Grafana settings
	GrafanaEnabled bool   // NFTBAN_GRAFANA_ENABLED
	GrafanaURL     string // NFTBAN_GRAFANA_URL
	GrafanaAPIKey  string // NFTBAN_GRAFANA_API_KEY

	// Logging
	LogLevel      string // NFTBAN_LOG_LEVEL
	ColorOutput   bool   // NFTBAN_COLOR_OUTPUT
	DebugTrace    bool   // NFTBAN_DEBUG_TRACE
	DebugTraceLog string // NFTBAN_DEBUG_TRACE_LOG

	// Distro config
	DistroConfDir string // NFTBAN_DISTRO_CONF_DIR
}

type EndpointInfo struct {
	Path        string   // URL path (relative to API prefix)
	Methods     []string // HTTP methods supported
	Description string   // Human-readable description
	Auth        bool     // Requires authentication
	Admin       bool     // Requires admin privileges
	Deprecated  bool     // Marked for deprecation
}

type LockFiles struct {
	Sync        string // sync operations
	Feeds       string // feed updates
	Maintenance string // maintenance tasks
	GeoIP       string // geoip updates
}

type LogCategory string

type LogFileInfo struct {
	Category    LogCategory
	Path        string
	Description string
	Rotation    string // logrotate frequency: daily, weekly, monthly
	Retain      int    // number of rotated files to keep
}

type LogPolicy struct {
	Name     string      // path relative to LogDir(), e.g. "ddos-classic.log" or "suricata/fast.log"
	Category LogCategory // logical category
	Rotation string      // expected logrotate frequency: daily | weekly | monthly
	Retain   int         // expected logrotate "rotate N"
	Template LogTemplate // packaged template that must cover it
}

type LogTemplate string

type NFTables struct {
	TableIPv4     string
	TableIPv6     string
	BlacklistIPv4 string
	BlacklistIPv6 string
	WhitelistIPv4 string
	WhitelistIPv6 string
}

type PIDFiles struct {
	Main   string // nftban main process
	Daemon string // nftband daemon
}

type Paths struct {
	// Data subdirectories
	FeedsDir     string
	GeoIPDir     string
	MetricsDir   string
	SnapshotsDir string
	ReportsDir   string
	ExportsDir   string

	// Config subdirectories
	ConfD      string
	WhitelistD string
	BlacklistD string
	PortsD     string
	GeobanD    string
	DistrosD   string

	// Log files
	MainLog        string
	AuditLog       string
	BansLog        string
	PortscanLog    string
	DDoSLog        string
	LoginAlertLog  string
	FeedsLog       string
	GeobanLog      string
	CronLog        string
	MaintenanceLog string
	CLIErrorsLog   string

	// Botguard log files
	BotguardLog          string
	BotguardDecisionsLog string

	// Suricata log files
	SuricataEveLog   string
	SuricataFastLog  string
	SuricataStatsLog string
	SuricataMainLog  string

	// Runtime files
	PIDFile    string
	SocketFile string

	// Metrics files
	PrometheusFile          string // nftban.prom
	PrometheusBandwidthFile string // nftban_bandwidth.prom
	MetricsJSON             string
}

type ServiceNames struct {
	// Main services
	MainService   string // nftban.service
	CoreService   string // nftban-core.service (Go daemon)
	DaemonService string // nftband.service (unified daemon)

	// Timers
	SyncTimer        string // nftban-sync.timer
	MaintenanceTimer string // nftban-maintenance.timer
	FeedsTimer       string // nftban-feeds.timer
	GeoIPTimer       string // nftban-geoip.timer
	MetricsTimer     string // nftban-metrics.timer
	HealthTimer      string // nftban-health.timer

	// Detection services
	PortscanService string // nftban-portscan.service
	DDoSService     string // nftban-ddos.service
	LoginMonService string // nftban-loginmon.service
	SuricataService string // nftban-suricata.service

	// Integration services
	Fail2banService string // fail2ban.service (external)
	NFTablesService string // nftables.service (external)
	NodeExporter    string // node_exporter.service (external)
	Prometheus      string // prometheus.service (external)
	Grafana         string // grafana-server.service (external)
}

type SocketPaths struct {
	CLI     string // /run/nftban/nftban.sock - CLI communication
	Daemon  string // /run/nftban/nftband.sock - daemon socket
	Metrics string // /run/nftban/metrics.sock - metrics socket
}

type Timeouts struct {
	Fast   time.Duration // status, simple queries
	Medium time.Duration // ban, unban, search
	Slow   time.Duration // sync, health check, feed updates
}