notmain

type Config struct {
	MTCA struct {
		cmd.ServiceConfig

		GRPCMTCA *cmd.GRPCServerConfig

		DB cmd.DBConfig `validate:"required"`
		S3 bs3.Config   `validate:"required"`

		Issuance struct {
			CertProfiles map[string]issuance.ProfileConfig `validate:"required,dive,keys,alphanum,min=1,max=32,endkeys"`
			// Issuers holds the configuration for a single MTCA instance with a single mtcaID.
			// We run a separate process for each issuer.
			// TODO: the issuance package parses the CA certificate as a self-signed X.509
			// certificate, but per MTC draft, a CA SHOULD be represented by an RFC 9925
			// unsigned certificate: https://www.rfc-editor.org/rfc/rfc9925.html.
			Issuers []issuance.IssuerConfig `validate:"min=1,max=1,dive"`
		}

		// SequencingPeriod controls how frequently the MTCA sequences a batch and signs a checkpoint.
		SequencingPeriod config.Duration `validate:"required"`
	}

	Syslog        cmd.SyslogConfig
	OpenTelemetry cmd.OpenTelemetryConfig
}