config

type Config struct {
	// Database configuration
	DatabaseDSN string

	// Authentication
	JWTSecret    string
	JWTExpiry    time.Duration
	APIKeyHeader string

	// External services
	AtticEndpoint string
	AtticToken    string // JWT token for Attic binary cache authentication
	RegistryURL   string

	// Server configuration
	APIPort  int
	GRPCPort int
	APIHost  string

	// Graceful shutdown timeout
	// **Validates: Requirements 15.2, 15.3**
	ShutdownTimeout time.Duration

	// Scheduler configuration
	Scheduler SchedulerConfig

	// Worker configuration
	Worker WorkerConfig

	// SOPS configuration for secrets encryption
	SOPS SOPSConfig
}

type SOPSConfig struct {
	// AgePublicKey is the age public key for encryption (required for API server).
	// Format: age1... (Bech32 encoded)
	AgePublicKey string
	// AgePrivateKey is the age private key for decryption (required for node agents).
	// Format: AGE-SECRET-KEY-1... (Bech32 encoded)
	AgePrivateKey string
}

type SchedulerConfig struct {
	HealthThreshold   time.Duration
	MaxRetries        int
	RetryBackoff      time.Duration
	DeploymentTimeout time.Duration // Timeout for deployments waiting to be scheduled
}

type WorkerConfig struct {
	WorkDir        string
	PodmanSocket   string
	BuildTimeout   time.Duration
	MaxConcurrency int
}