config

type AppConfig struct {
	// Basic app settings
	Name        string `env:"APP_NAME" default:"Mithril App" required:"true" min:"1" max:"100"`
	Version     string `env:"APP_VERSION" default:"1.0.0" required:"true"`
	Environment string `env:"APP_ENV" default:"development" required:"true"`
	Debug       bool   `env:"APP_DEBUG" default:"false"`

	// Server settings
	Host string `env:"APP_HOST" default:"0.0.0.0" required:"true"`
	Port string `env:"APP_PORT" default:"3000" required:"true"`

	// Timezone
	Timezone string `env:"APP_TIMEZONE" default:"UTC" required:"true"`

	// Security
	SecretKey string `env:"APP_SECRET_KEY" required:"true" min:"32"`

	// CORS settings
	CORSAllowedOrigins []string `env:"CORS_ALLOWED_ORIGINS" default:"*"`
	CORSAllowedMethods []string `env:"CORS_ALLOWED_METHODS" default:"GET,POST,PUT,DELETE,OPTIONS"`
	CORSAllowedHeaders []string `env:"CORS_ALLOWED_HEADERS" default:"Content-Type,Authorization,X-Requested-With"`

	// Rate limiting
	RateLimitEnabled bool          `env:"RATE_LIMIT_ENABLED" default:"true"`
	RateLimitRPS     int           `env:"RATE_LIMIT_RPS" default:"100"`
	RateLimitBurst   int           `env:"RATE_LIMIT_BURST" default:"200"`
	RateLimitWindow  time.Duration `env:"RATE_LIMIT_WINDOW" default:"1m"`

	// File upload settings
	MaxUploadSize int64 `env:"MAX_UPLOAD_SIZE" default:"10485760"` // 10MB

	// Session settings
	SessionName     string        `env:"SESSION_NAME" default:"mithril_session"`
	SessionSecret   string        `env:"SESSION_SECRET" required:"true" min:"32"`
	SessionLifetime time.Duration `env:"SESSION_LIFETIME" default:"24h"`

	// Logging
	LogLevel  string `env:"LOG_LEVEL" default:"info"`
	LogFormat string `env:"LOG_FORMAT" default:"json"`

	// Health check settings
	HealthCheckPath string `env:"HEALTH_CHECK_PATH" default:"/health"`
	ReadyCheckPath  string `env:"READY_CHECK_PATH" default:"/ready"`

	// Metrics
	MetricsEnabled bool   `env:"METRICS_ENABLED" default:"true"`
	MetricsPath    string `env:"METRICS_PATH" default:"/metrics"`

	// Monitoring
	MonitoringEnabled bool   `env:"MONITORING_ENABLED" default:"true"`
	MonitoringPath    string `env:"MONITORING_PATH" default:"/monitor"`
}

type CORSConfig struct {
	// Basic CORS settings
	Enabled          bool     `env:"CORS_ENABLED" default:"true"`
	AllowedOrigins   []string `env:"CORS_ALLOWED_ORIGINS" default:"*"`
	AllowedMethods   []string `env:"CORS_ALLOWED_METHODS" default:"GET,POST,PUT,DELETE,OPTIONS"`
	AllowedHeaders   []string `env:"CORS_ALLOWED_HEADERS" default:"Content-Type,Authorization,X-Requested-With"`
	ExposedHeaders   []string `env:"CORS_EXPOSED_HEADERS" default:""`
	AllowCredentials bool     `env:"CORS_ALLOW_CREDENTIALS" default:"true"`
	MaxAge           int      `env:"CORS_MAX_AGE" default:"86400"` // 24 hours

	// Advanced settings
	AllowWildcard          bool `env:"CORS_ALLOW_WILDCARD" default:"true"`
	AllowBrowserExtensions bool `env:"CORS_ALLOW_BROWSER_EXTENSIONS" default:"false"`
	AllowWebSockets        bool `env:"CORS_ALLOW_WEB_SOCKETS" default:"true"`
	AllowFiles             bool `env:"CORS_ALLOW_FILES" default:"false"`

	// Security settings
	AllowPrivateNetwork bool   `env:"CORS_ALLOW_PRIVATE_NETWORK" default:"false"`
	VaryHeader          string `env:"CORS_VARY_HEADER" default:"Origin"`

	// Debug settings
	Debug    bool   `env:"CORS_DEBUG" default:"false"`
	LogLevel string `env:"CORS_LOG_LEVEL" default:"info"`

	// Custom settings
	CustomHeaders map[string]string `env:"CORS_CUSTOM_HEADERS" default:""`
	CustomMethods []string          `env:"CORS_CUSTOM_METHODS" default:""`
	CustomOrigins []string          `env:"CORS_CUSTOM_ORIGINS" default:""`

	// Rate limiting
	RateLimitEnabled bool `env:"CORS_RATE_LIMIT_ENABLED" default:"false"`
	RateLimitRPS     int  `env:"CORS_RATE_LIMIT_RPS" default:"100"`
	RateLimitBurst   int  `env:"CORS_RATE_LIMIT_BURST" default:"200"`

	// Health check
	HealthCheckEnabled bool   `env:"CORS_HEALTH_CHECK_ENABLED" default:"true"`
	HealthCheckPath    string `env:"CORS_HEALTH_CHECK_PATH" default:"/health"`
}

type CacheConfig struct {
	Driver   string
	Host     string
	Port     int
	Password string
	Database int
	Prefix   string
	TTL      time.Duration
}

type ConfigManager struct {
	// contains filtered or unexported fields
}

type DatabaseConfig struct {
	// Primary database connection
	Driver   string `env:"DB_DRIVER" default:"postgres" required:"true"`
	Host     string `env:"DB_HOST" default:"localhost" required:"true"`
	Port     int    `env:"DB_PORT" default:"5432" required:"true"`
	Username string `env:"DB_USERNAME" default:"mithril" required:"true"`
	Password string `env:"DB_PASSWORD" required:"true"`
	Database string `env:"DB_NAME" default:"mithril" required:"true"`

	// Connection pool settings
	MaxOpenConns    int           `env:"DB_MAX_OPEN_CONNS" default:"25"`
	MaxIdleConns    int           `env:"DB_MAX_IDLE_CONNS" default:"5"`
	ConnMaxLifetime time.Duration `env:"DB_CONN_MAX_LIFETIME" default:"5m"`
	ConnMaxIdleTime time.Duration `env:"DB_CONN_MAX_IDLE_TIME" default:"1m"`

	// SSL settings
	SSLMode string `env:"DB_SSL_MODE" default:"disable"`

	// Migration settings
	MigrationPath string `env:"DB_MIGRATION_PATH" default:"./database/migrations"`

	// Seeder settings
	SeederPath string `env:"DB_SEEDER_PATH" default:"./database/seeders"`

	// Backup settings
	BackupPath string `env:"DB_BACKUP_PATH" default:"./database/backups"`

	// Additional database connections
	RedisHost     string `env:"REDIS_HOST" default:"localhost"`
	RedisPort     int    `env:"REDIS_PORT" default:"6379"`
	RedisPassword string `env:"REDIS_PASSWORD" default:""`
	RedisDB       int    `env:"REDIS_DB" default:"0"`

	// MongoDB settings (if used)
	MongoURI      string `env:"MONGO_URI" default:""`
	MongoDatabase string `env:"MONGO_DATABASE" default:"mithril"`

	// MySQL settings (if used)
	MySQLCharset   string `env:"MYSQL_CHARSET" default:"utf8mb4"`
	MySQLParseTime bool   `env:"MYSQL_PARSE_TIME" default:"true"`
	MySQLLoc       string `env:"MYSQL_LOC" default:"Local"`

	// SQLite settings (if used)
	SQLitePath string `env:"SQLITE_PATH" default:"./database/sqlite.db"`
}

type JWTConfig struct {
	// Secret key for signing tokens
	Secret string `env:"JWT_SECRET" required:"true" min:"32"`

	// Token expiration times
	AccessTokenExpiry  time.Duration `env:"JWT_ACCESS_TOKEN_EXPIRY" default:"15m"`
	RefreshTokenExpiry time.Duration `env:"JWT_REFRESH_TOKEN_EXPIRY" default:"7d"`

	// Algorithm for signing tokens
	Algorithm string `env:"JWT_ALGORITHM" default:"HS256"`

	// Issuer and audience
	Issuer   string `env:"JWT_ISSUER" default:"mithril"`
	Audience string `env:"JWT_AUDIENCE" default:"mithril-users"`

	// Token refresh settings
	RefreshThreshold time.Duration `env:"JWT_REFRESH_THRESHOLD" default:"5m"`

	// Cookie settings for refresh tokens
	CookieName     string        `env:"JWT_COOKIE_NAME" default:"refresh_token"`
	CookiePath     string        `env:"JWT_COOKIE_PATH" default:"/"`
	CookieDomain   string        `env:"JWT_COOKIE_DOMAIN" default:""`
	CookieSecure   bool          `env:"JWT_COOKIE_SECURE" default:"false"`
	CookieHTTPOnly bool          `env:"JWT_COOKIE_HTTP_ONLY" default:"true"`
	CookieSameSite string        `env:"JWT_COOKIE_SAME_SITE" default:"Lax"`
	CookieMaxAge   time.Duration `env:"JWT_COOKIE_MAX_AGE" default:"604800"` // 7 days

	// Blacklist settings
	BlacklistEnabled bool          `env:"JWT_BLACKLIST_ENABLED" default:"true"`
	BlacklistTTL     time.Duration `env:"JWT_BLACKLIST_TTL" default:"24h"`

	// Rate limiting for token generation
	TokenRateLimitEnabled bool          `env:"JWT_RATE_LIMIT_ENABLED" default:"true"`
	TokenRateLimitRPS     int           `env:"JWT_RATE_LIMIT_RPS" default:"10"`
	TokenRateLimitBurst   int           `env:"JWT_RATE_LIMIT_BURST" default:"20"`
	TokenRateLimitWindow  time.Duration `env:"JWT_RATE_LIMIT_WINDOW" default:"1m"`

	// 2FA settings
	TwoFactorEnabled bool          `env:"JWT_2FA_ENABLED" default:"true"`
	TwoFactorExpiry  time.Duration `env:"JWT_2FA_EXPIRY" default:"5m"`

	// Password reset settings
	PasswordResetExpiry time.Duration `env:"JWT_PASSWORD_RESET_EXPIRY" default:"1h"`

	// Email verification settings
	EmailVerificationExpiry time.Duration `env:"JWT_EMAIL_VERIFICATION_EXPIRY" default:"24h"`
}

type MailConfig struct {
	// Driver settings
	Driver string `env:"MAIL_DRIVER" default:"smtp" required:"true"`

	// SMTP settings
	SMTPHost       string `env:"MAIL_HOST" default:"localhost"`
	SMTPPort       int    `env:"MAIL_PORT" default:"587"`
	SMTPUsername   string `env:"MAIL_USERNAME" default:""`
	SMTPPassword   string `env:"MAIL_PASSWORD" default:""`
	SMTPEncryption string `env:"MAIL_ENCRYPTION" default:"tls"`

	// From address
	FromAddress string `env:"MAIL_FROM_ADDRESS" default:"noreply@example.com" required:"true"`
	FromName    string `env:"MAIL_FROM_NAME" default:"Mithril App"`

	// SendGrid settings
	SendGridAPIKey string `env:"SENDGRID_API_KEY" default:""`

	// Mailgun settings
	MailgunDomain string `env:"MAILGUN_DOMAIN" default:""`
	MailgunAPIKey string `env:"MAILGUN_API_KEY" default:""`

	// Queue settings
	QueueEnabled bool          `env:"MAIL_QUEUE_ENABLED" default:"true"`
	QueueName    string        `env:"MAIL_QUEUE_NAME" default:"emails"`
	QueueTimeout time.Duration `env:"MAIL_QUEUE_TIMEOUT" default:"30s"`

	// Retry settings
	MaxRetries int           `env:"MAIL_MAX_RETRIES" default:"3"`
	RetryDelay time.Duration `env:"MAIL_RETRY_DELAY" default:"5s"`

	// Rate limiting
	RateLimitEnabled bool          `env:"MAIL_RATE_LIMIT_ENABLED" default:"true"`
	RateLimitRPS     int           `env:"MAIL_RATE_LIMIT_RPS" default:"10"`
	RateLimitBurst   int           `env:"MAIL_RATE_LIMIT_BURST" default:"20"`
	RateLimitWindow  time.Duration `env:"MAIL_RATE_LIMIT_WINDOW" default:"1m"`

	// Template settings
	TemplatePath string `env:"MAIL_TEMPLATE_PATH" default:"./templates/emails"`

	// Testing settings
	TestingEnabled bool   `env:"MAIL_TESTING_ENABLED" default:"false"`
	TestingEmail   string `env:"MAIL_TESTING_EMAIL" default:""`

	// Logging
	LogEnabled bool   `env:"MAIL_LOG_ENABLED" default:"true"`
	LogLevel   string `env:"MAIL_LOG_LEVEL" default:"info"`

	// Timeout settings
	ConnectTimeout time.Duration `env:"MAIL_CONNECT_TIMEOUT" default:"10s"`
	SendTimeout    time.Duration `env:"MAIL_SEND_TIMEOUT" default:"30s"`

	// Authentication
	AuthEnabled bool   `env:"MAIL_AUTH_ENABLED" default:"true"`
	AuthMethod  string `env:"MAIL_AUTH_METHOD" default:"PLAIN"`

	// TLS settings
	TLSEnabled            bool `env:"MAIL_TLS_ENABLED" default:"true"`
	TLSInsecureSkipVerify bool `env:"MAIL_TLS_INSECURE_SKIP_VERIFY" default:"false"`

	// Keep alive
	KeepAlive        bool          `env:"MAIL_KEEP_ALIVE" default:"true"`
	KeepAliveTimeout time.Duration `env:"MAIL_KEEP_ALIVE_TIMEOUT" default:"30s"`
}

type Manager struct {
	App       *AppConfig
	Database  *DatabaseConfig
	JWT       *JWTConfig
	Mail      *MailConfig
	Queue     *QueueConfig
	Storage   *StorageConfig
	CORS      *CORSConfig
	RateLimit *RateLimitConfig
	Session   *SessionConfig
	// contains filtered or unexported fields
}

type QueueConfig struct {
	// Driver settings
	Driver string `env:"QUEUE_DRIVER" default:"memory" required:"true"`

	// Connection settings
	Connection string `env:"QUEUE_CONNECTION" default:"default"`

	// Redis settings
	RedisHost     string `env:"QUEUE_REDIS_HOST" default:"localhost"`
	RedisPort     int    `env:"QUEUE_REDIS_PORT" default:"6379"`
	RedisPassword string `env:"QUEUE_REDIS_PASSWORD" default:""`
	RedisDB       int    `env:"QUEUE_REDIS_DB" default:"1"`

	// RabbitMQ settings
	RabbitMQHost     string `env:"QUEUE_RABBITMQ_HOST" default:"localhost"`
	RabbitMQPort     int    `env:"QUEUE_RABBITMQ_PORT" default:"5672"`
	RabbitMQUsername string `env:"QUEUE_RABBITMQ_USERNAME" default:"guest"`
	RabbitMQPassword string `env:"QUEUE_RABBITMQ_PASSWORD" default:"guest"`
	RabbitMQVHost    string `env:"QUEUE_RABBITMQ_VHOST" default:"/"`

	// Kafka settings
	KafkaBrokers []string `env:"QUEUE_KAFKA_BROKERS" default:"localhost:9092"`

	// Queue settings
	DefaultQueue string `env:"QUEUE_DEFAULT" default:"default"`
	FailedQueue  string `env:"QUEUE_FAILED" default:"failed"`

	// Worker settings
	MaxWorkers    int           `env:"QUEUE_MAX_WORKERS" default:"10"`
	WorkerTimeout time.Duration `env:"QUEUE_WORKER_TIMEOUT" default:"30s"`
	WorkerSleep   time.Duration `env:"QUEUE_WORKER_SLEEP" default:"3s"`

	// Job settings
	MaxRetries    int           `env:"QUEUE_MAX_RETRIES" default:"3"`
	RetryDelay    time.Duration `env:"QUEUE_RETRY_DELAY" default:"5s"`
	RetryBackoff  bool          `env:"QUEUE_RETRY_BACKOFF" default:"true"`
	RetryMaxDelay time.Duration `env:"QUEUE_RETRY_MAX_DELAY" default:"1h"`

	// Job timeout
	JobTimeout time.Duration `env:"QUEUE_JOB_TIMEOUT" default:"5m"`

	// Dead letter queue
	DeadLetterEnabled bool   `env:"QUEUE_DEAD_LETTER_ENABLED" default:"true"`
	DeadLetterQueue   string `env:"QUEUE_DEAD_LETTER_QUEUE" default:"dead_letter"`

	// Monitoring
	MonitoringEnabled bool   `env:"QUEUE_MONITORING_ENABLED" default:"true"`
	MonitoringPath    string `env:"QUEUE_MONITORING_PATH" default:"/monitor/queue"`

	// Metrics
	MetricsEnabled bool   `env:"QUEUE_METRICS_ENABLED" default:"true"`
	MetricsPath    string `env:"QUEUE_METRICS_PATH" default:"/metrics/queue"`

	// Logging
	LogEnabled bool   `env:"QUEUE_LOG_ENABLED" default:"true"`
	LogLevel   string `env:"QUEUE_LOG_LEVEL" default:"info"`

	// Batch processing
	BatchSize    int           `env:"QUEUE_BATCH_SIZE" default:"100"`
	BatchTimeout time.Duration `env:"QUEUE_BATCH_TIMEOUT" default:"1s"`

	// Priority queues
	PriorityEnabled bool `env:"QUEUE_PRIORITY_ENABLED" default:"false"`
	MaxPriority     int  `env:"QUEUE_MAX_PRIORITY" default:"10"`

	// Rate limiting
	RateLimitEnabled bool          `env:"QUEUE_RATE_LIMIT_ENABLED" default:"false"`
	RateLimitRPS     int           `env:"QUEUE_RATE_LIMIT_RPS" default:"100"`
	RateLimitBurst   int           `env:"QUEUE_RATE_LIMIT_BURST" default:"200"`
	RateLimitWindow  time.Duration `env:"QUEUE_RATE_LIMIT_WINDOW" default:"1m"`

	// Health check
	HealthCheckEnabled  bool          `env:"QUEUE_HEALTH_CHECK_ENABLED" default:"true"`
	HealthCheckInterval time.Duration `env:"QUEUE_HEALTH_CHECK_INTERVAL" default:"30s"`
}

type RateLimitConfig struct {
	// Global settings
	Enabled bool `env:"RATE_LIMIT_ENABLED" default:"true"`

	// Default rate limit settings
	DefaultRPS    int           `env:"RATE_LIMIT_DEFAULT_RPS" default:"100"`
	DefaultBurst  int           `env:"RATE_LIMIT_DEFAULT_BURST" default:"200"`
	DefaultWindow time.Duration `env:"RATE_LIMIT_DEFAULT_WINDOW" default:"1m"`

	// IP-based rate limiting
	IPEnabled bool          `env:"RATE_LIMIT_IP_ENABLED" default:"true"`
	IPRPS     int           `env:"RATE_LIMIT_IP_RPS" default:"100"`
	IPBurst   int           `env:"RATE_LIMIT_IP_BURST" default:"200"`
	IPWindow  time.Duration `env:"RATE_LIMIT_IP_WINDOW" default:"1m"`

	// User-based rate limiting
	UserEnabled bool          `env:"RATE_LIMIT_USER_ENABLED" default:"true"`
	UserRPS     int           `env:"RATE_LIMIT_USER_RPS" default:"50"`
	UserBurst   int           `env:"RATE_LIMIT_USER_BURST" default:"100"`
	UserWindow  time.Duration `env:"RATE_LIMIT_USER_WINDOW" default:"1m"`

	// Route-based rate limiting
	RouteEnabled bool          `env:"RATE_LIMIT_ROUTE_ENABLED" default:"true"`
	RouteRPS     int           `env:"RATE_LIMIT_ROUTE_RPS" default:"200"`
	RouteBurst   int           `env:"RATE_LIMIT_ROUTE_BURST" default:"400"`
	RouteWindow  time.Duration `env:"RATE_LIMIT_ROUTE_WINDOW" default:"1m"`

	// API rate limiting
	APIEnabled bool          `env:"RATE_LIMIT_API_ENABLED" default:"true"`
	APIRPS     int           `env:"RATE_LIMIT_API_RPS" default:"1000"`
	APIBurst   int           `env:"RATE_LIMIT_API_BURST" default:"2000"`
	APIWindow  time.Duration `env:"RATE_LIMIT_API_WINDOW" default:"1m"`

	// Auth rate limiting
	AuthEnabled bool          `env:"RATE_LIMIT_AUTH_ENABLED" default:"true"`
	AuthRPS     int           `env:"RATE_LIMIT_AUTH_RPS" default:"5"`
	AuthBurst   int           `env:"RATE_LIMIT_AUTH_BURST" default:"10"`
	AuthWindow  time.Duration `env:"RATE_LIMIT_AUTH_WINDOW" default:"1m"`

	// Upload rate limiting
	UploadEnabled bool          `env:"RATE_LIMIT_UPLOAD_ENABLED" default:"true"`
	UploadRPS     int           `env:"RATE_LIMIT_UPLOAD_RPS" default:"10"`
	UploadBurst   int           `env:"RATE_LIMIT_UPLOAD_BURST" default:"20"`
	UploadWindow  time.Duration `env:"RATE_LIMIT_UPLOAD_WINDOW" default:"1m"`

	// Storage settings
	StorageDriver string `env:"RATE_LIMIT_STORAGE_DRIVER" default:"memory"`
	StoragePath   string `env:"RATE_LIMIT_STORAGE_PATH" default:"./storage/ratelimit"`

	// Redis settings (if using Redis storage)
	RedisHost     string `env:"RATE_LIMIT_REDIS_HOST" default:"localhost"`
	RedisPort     int    `env:"RATE_LIMIT_REDIS_PORT" default:"6379"`
	RedisPassword string `env:"RATE_LIMIT_REDIS_PASSWORD" default:""`
	RedisDB       int    `env:"RATE_LIMIT_REDIS_DB" default:"2"`

	// Cleanup settings
	CleanupEnabled  bool          `env:"RATE_LIMIT_CLEANUP_ENABLED" default:"true"`
	CleanupInterval time.Duration `env:"RATE_LIMIT_CLEANUP_INTERVAL" default:"5m"`

	// Monitoring
	MonitoringEnabled bool   `env:"RATE_LIMIT_MONITORING_ENABLED" default:"true"`
	MonitoringPath    string `env:"RATE_LIMIT_MONITORING_PATH" default:"/monitor/ratelimit"`

	// Metrics
	MetricsEnabled bool   `env:"RATE_LIMIT_METRICS_ENABLED" default:"true"`
	MetricsPath    string `env:"RATE_LIMIT_METRICS_PATH" default:"/metrics/ratelimit"`

	// Logging
	LogEnabled bool   `env:"RATE_LIMIT_LOG_ENABLED" default:"true"`
	LogLevel   string `env:"RATE_LIMIT_LOG_LEVEL" default:"info"`

	// Health check
	HealthCheckEnabled  bool          `env:"RATE_LIMIT_HEALTH_CHECK_ENABLED" default:"true"`
	HealthCheckInterval time.Duration `env:"RATE_LIMIT_HEALTH_CHECK_INTERVAL" default:"30s"`

	// Whitelist settings
	WhitelistEnabled bool     `env:"RATE_LIMIT_WHITELIST_ENABLED" default:"false"`
	WhitelistIPs     []string `env:"RATE_LIMIT_WHITELIST_IPS" default:""`

	// Blacklist settings
	BlacklistEnabled bool     `env:"RATE_LIMIT_BLACKLIST_ENABLED" default:"false"`
	BlacklistIPs     []string `env:"RATE_LIMIT_BLACKLIST_IPS" default:""`

	// Custom rules
	CustomRulesEnabled bool `env:"RATE_LIMIT_CUSTOM_RULES_ENABLED" default:"false"`
}

type SessionConfig struct {
	// Basic settings
	Enabled        bool          `env:"SESSION_ENABLED" default:"true"`
	Driver         string        `env:"SESSION_DRIVER" default:"database" required:"true"`
	Lifetime       time.Duration `env:"SESSION_LIFETIME" default:"24h"`
	IdleTimeout    time.Duration `env:"SESSION_IDLE_TIMEOUT" default:"30m"`
	RefreshTimeout time.Duration `env:"SESSION_REFRESH_TIMEOUT" default:"5m"`

	// Cookie settings
	CookieName     string `env:"SESSION_COOKIE_NAME" default:"mithril_session"`
	CookiePath     string `env:"SESSION_COOKIE_PATH" default:"/"`
	CookieDomain   string `env:"SESSION_COOKIE_DOMAIN" default:""`
	CookieSecure   bool   `env:"SESSION_COOKIE_SECURE" default:"false"`
	CookieHTTPOnly bool   `env:"SESSION_COOKIE_HTTP_ONLY" default:"true"`
	CookieSameSite string `env:"SESSION_COOKIE_SAME_SITE" default:"Lax"`

	// Security settings
	SecretKey     string `env:"SESSION_SECRET_KEY" required:"true" min:"32"`
	EncryptionKey string `env:"SESSION_ENCRYPTION_KEY" default:""`
	HashKey       string `env:"SESSION_HASH_KEY" default:""`

	// Database settings (if using database driver)
	DBTable       string        `env:"SESSION_DB_TABLE" default:"sessions"`
	DBMaxIdle     int           `env:"SESSION_DB_MAX_IDLE" default:"10"`
	DBMaxOpen     int           `env:"SESSION_DB_MAX_OPEN" default:"100"`
	DBMaxLifetime time.Duration `env:"SESSION_DB_MAX_LIFETIME" default:"1h"`

	// Redis settings (if using Redis driver)
	RedisHost     string `env:"SESSION_REDIS_HOST" default:"localhost"`
	RedisPort     int    `env:"SESSION_REDIS_PORT" default:"6379"`
	RedisPassword string `env:"SESSION_REDIS_PASSWORD" default:""`
	RedisDB       int    `env:"SESSION_REDIS_DB" default:"3"`
	RedisPrefix   string `env:"SESSION_REDIS_PREFIX" default:"session:"`

	// File settings (if using file driver)
	FilePath string `env:"SESSION_FILE_PATH" default:"./storage/sessions"`

	// Memory settings (if using memory driver)
	MemoryMaxSessions int `env:"SESSION_MEMORY_MAX_SESSIONS" default:"10000"`

	// Cleanup settings
	CleanupEnabled   bool          `env:"SESSION_CLEANUP_ENABLED" default:"true"`
	CleanupInterval  time.Duration `env:"SESSION_CLEANUP_INTERVAL" default:"1h"`
	CleanupOlderThan time.Duration `env:"SESSION_CLEANUP_OLDER_THAN" default:"24h"`

	// Monitoring
	MonitoringEnabled bool   `env:"SESSION_MONITORING_ENABLED" default:"true"`
	MonitoringPath    string `env:"SESSION_MONITORING_PATH" default:"/monitor/session"`

	// Metrics
	MetricsEnabled bool   `env:"SESSION_METRICS_ENABLED" default:"true"`
	MetricsPath    string `env:"SESSION_METRICS_PATH" default:"/metrics/session"`

	// Logging
	LogEnabled bool   `env:"SESSION_LOG_ENABLED" default:"true"`
	LogLevel   string `env:"SESSION_LOG_LEVEL" default:"info"`

	// Health check
	HealthCheckEnabled  bool          `env:"SESSION_HEALTH_CHECK_ENABLED" default:"true"`
	HealthCheckInterval time.Duration `env:"SESSION_HEALTH_CHECK_INTERVAL" default:"30s"`

	// CSRF protection
	CSRFEnabled     bool   `env:"SESSION_CSRF_ENABLED" default:"true"`
	CSRFTokenLength int    `env:"SESSION_CSRF_TOKEN_LENGTH" default:"32"`
	CSRFHeaderName  string `env:"SESSION_CSRF_HEADER_NAME" default:"X-CSRF-Token"`

	// Flash messages
	FlashEnabled bool `env:"SESSION_FLASH_ENABLED" default:"true"`

	// Session regeneration
	RegenerateOnLogin  bool `env:"SESSION_REGENERATE_ON_LOGIN" default:"true"`
	RegenerateOnLogout bool `env:"SESSION_REGENERATE_ON_LOGOUT" default:"true"`

	// Session hijacking protection
	HijackingProtection bool `env:"SESSION_HIJACKING_PROTECTION" default:"true"`

	// Session fixation protection
	FixationProtection bool `env:"SESSION_FIXATION_PROTECTION" default:"true"`
}

type StorageConfig struct {
	// Driver settings
	Driver string `env:"STORAGE_DRIVER" default:"local" required:"true"`

	// Local storage settings
	LocalPath string `env:"STORAGE_LOCAL_PATH" default:"./storage"`

	// S3 settings
	S3Region         string `env:"S3_REGION" default:"us-east-1"`
	S3Bucket         string `env:"S3_BUCKET" default:""`
	S3AccessKey      string `env:"S3_ACCESS_KEY" default:""`
	S3SecretKey      string `env:"S3_SECRET_KEY" default:""`
	S3Endpoint       string `env:"S3_ENDPOINT" default:""`
	S3PathStyle      bool   `env:"S3_PATH_STYLE" default:"false"`
	S3DisableSSL     bool   `env:"S3_DISABLE_SSL" default:"false"`
	S3ForcePathStyle bool   `env:"S3_FORCE_PATH_STYLE" default:"false"`

	// MinIO settings
	MinIOEndpoint  string `env:"MINIO_ENDPOINT" default:"localhost:9000"`
	MinIOAccessKey string `env:"MINIO_ACCESS_KEY" default:"minioadmin"`
	MinIOSecretKey string `env:"MINIO_SECRET_KEY" default:"minioadmin"`
	MinIOBucket    string `env:"MINIO_BUCKET" default:"mithril"`
	MinIOUseSSL    bool   `env:"MINIO_USE_SSL" default:"false"`
	MinIOPathStyle bool   `env:"MINIO_PATH_STYLE" default:"true"`
	MinIORegion    string `env:"MINIO_REGION" default:"us-east-1"`

	// CDN settings
	CDNURL string `env:"CDN_URL" default:""`

	// File settings
	MaxFileSize     int64    `env:"STORAGE_MAX_FILE_SIZE" default:"10485760"` // 10MB
	AllowedTypes    []string `env:"STORAGE_ALLOWED_TYPES" default:"image/jpeg,image/png,image/gif,application/pdf"`
	DisallowedTypes []string `env:"STORAGE_DISALLOWED_TYPES" default:""`

	// Upload settings
	UploadPath  string `env:"STORAGE_UPLOAD_PATH" default:"uploads"`
	TempPath    string `env:"STORAGE_TEMP_PATH" default:"temp"`
	PublicPath  string `env:"STORAGE_PUBLIC_PATH" default:"public"`
	PrivatePath string `env:"STORAGE_PRIVATE_PATH" default:"private"`

	// Backup settings
	BackupEnabled  bool   `env:"STORAGE_BACKUP_ENABLED" default:"true"`
	BackupPath     string `env:"STORAGE_BACKUP_PATH" default:"./storage/backups"`
	BackupSchedule string `env:"STORAGE_BACKUP_SCHEDULE" default:"0 2 * * *"` // Daily at 2 AM

	// Cleanup settings
	CleanupEnabled       bool          `env:"STORAGE_CLEANUP_ENABLED" default:"true"`
	CleanupSchedule      string        `env:"STORAGE_CLEANUP_SCHEDULE" default:"0 3 * * *"`  // Daily at 3 AM
	CleanupOlderThan     time.Duration `env:"STORAGE_CLEANUP_OLDER_THAN" default:"720h"`     // 30 days
	CleanupTempOlderThan time.Duration `env:"STORAGE_CLEANUP_TEMP_OLDER_THAN" default:"24h"` // 1 day

	// Security settings
	VirusScanEnabled bool   `env:"STORAGE_VIRUS_SCAN_ENABLED" default:"false"`
	VirusScanPath    string `env:"STORAGE_VIRUS_SCAN_PATH" default:"/usr/bin/clamscan"`

	// Encryption settings
	EncryptionEnabled bool   `env:"STORAGE_ENCRYPTION_ENABLED" default:"false"`
	EncryptionKey     string `env:"STORAGE_ENCRYPTION_KEY" default:""`

	// Compression settings
	CompressionEnabled bool `env:"STORAGE_COMPRESSION_ENABLED" default:"false"`

	// Caching settings
	CacheEnabled bool          `env:"STORAGE_CACHE_ENABLED" default:"true"`
	CacheTTL     time.Duration `env:"STORAGE_CACHE_TTL" default:"1h"`

	// Monitoring
	MonitoringEnabled bool   `env:"STORAGE_MONITORING_ENABLED" default:"true"`
	MonitoringPath    string `env:"STORAGE_MONITORING_PATH" default:"/monitor/storage"`

	// Metrics
	MetricsEnabled bool   `env:"STORAGE_METRICS_ENABLED" default:"true"`
	MetricsPath    string `env:"STORAGE_METRICS_PATH" default:"/metrics/storage"`

	// Logging
	LogEnabled bool   `env:"STORAGE_LOG_ENABLED" default:"true"`
	LogLevel   string `env:"STORAGE_LOG_LEVEL" default:"info"`

	// Rate limiting
	RateLimitEnabled bool          `env:"STORAGE_RATE_LIMIT_ENABLED" default:"true"`
	RateLimitRPS     int           `env:"STORAGE_RATE_LIMIT_RPS" default:"10"`
	RateLimitBurst   int           `env:"STORAGE_RATE_LIMIT_BURST" default:"20"`
	RateLimitWindow  time.Duration `env:"STORAGE_RATE_LIMIT_WINDOW" default:"1m"`

	// Health check
	HealthCheckEnabled  bool          `env:"STORAGE_HEALTH_CHECK_ENABLED" default:"true"`
	HealthCheckInterval time.Duration `env:"STORAGE_HEALTH_CHECK_INTERVAL" default:"30s"`
}