server

type AutocertTLS struct {
	Domains  []string `json:"domains"`
	Email    string   `json:"email"`
	CacheDir string   `json:"cache_dir" config:",optional"`
	Staging  bool     `json:"staging" config:",optional"`
}

type CORSConfig struct {
	Origins     []string
	Methods     []string
	Headers     []string
	Credentials bool
	MaxAge      int
}

type Config struct {
	Port            int
	Host            string
	Prefork         bool
	BodyLimit       int
	Timeout         time.Duration
	ReadTimeout     time.Duration
	WriteTimeout    time.Duration
	IdleTimeout     time.Duration
	MaxConns        int
	MaxBytes        int
	MetricsPath     string
	HealthPath      string
	ShutdownTimeout time.Duration
	RecoverStack    bool
	APIPrefix       string
	Routes          []RouteConfig

	Logger            bool
	LoadShedding      bool
	Breaker           bool
	Compression       bool
	StreamRequestBody bool
	ReduceMemoryUsage bool

	// Security
	SecurityHeaders *middleware.SecurityHeadersConfig
	CSRF            *middleware.CSRFConfig
	RateLimit       *middleware.RateLimitConfig
	TLS             *TLSConfig
	SSRF            *middleware.SSRFConfig
	// Correlation enables the X-Correlation-ID tracking middleware.
	Correlation *CorrelationConfig

	// Logger config
	LogSkipPaths  []string
	LogSampleRate float64
}

type ContentSecurityConf struct {
	Enabled   bool
	Strict    bool
	PublicKey string
}

type CorrelationConfig struct {
	Enabled        bool
	RequestHeader  string
	ResponseHeader string
	SkipPaths      []string
}

type CryptionConf struct {
	Enabled bool
	Key     string
}

type EncryptCookieConf struct {
	Enabled bool
	Key     string
	Except  []string
}

type ErrorResponse struct {
	Code    int    `json:"code"`
	Error   string `json:"error,omitempty"`
	Message string `json:"message"`
}

type LocalStorage struct {
	// contains filtered or unexported fields
}

type ManualTLS struct {
	CertFile string `json:"cert_file"`
	KeyFile  string `json:"key_file"`
}

type PoolConfig struct {
	MaxIdleConns        int
	MaxIdleConnsPerHost int
	MaxConnsPerHost     int
	IdleTimeout         time.Duration
}

type Presigner interface {
	PresignURL(ctx context.Context, key string, ttl time.Duration) (string, error)
}

type RouteConfig struct {
	Path       string
	Middleware []string // middleware names: logger, shedding, breaker, maxconns, maxbytes, gunzip, prometheus, trace, cors, jwt, content_security, cryption
}

type S3Config struct {
	Endpoint        string
	Region          string
	Bucket          string
	AccessKeyID     string
	SecretAccessKey string
	UseSSL          bool
	Pool            *PoolConfig
	PresignTTL      time.Duration
}

type S3Storage struct {
	// contains filtered or unexported fields
}

type SecurityConfig struct {
	ContentSecurity *ContentSecurityConf
	Cryption        *CryptionConf
	EncryptCookie   *EncryptCookieConf
}

type Server struct {
	// contains filtered or unexported fields
}

type StorageBackend interface {
	Upload(ctx context.Context, key string, reader io.Reader, size int64, contentType string) error
	Download(ctx context.Context, key string) (io.ReadCloser, error)
	Delete(ctx context.Context, key string) error
}

type TLSConfig struct {
	Enabled      bool         `json:"enabled"`
	Manual       *ManualTLS   `json:"manual" config:",optional"`
	Autocert     *AutocertTLS `json:"autocert" config:",optional"`
	MinVersion   string       `json:"min_version" config:",optional"`
	MaxVersion   string       `json:"max_version" config:",optional"`
	CurvePrefs   []string     `json:"curve_preferences" config:",optional"`
	CipherSuites []string     `json:"cipher_suites" config:",optional"`
	RedirectHTTP bool         `json:"redirect_http" config:",optional"`
	RedirectPort int          `json:"redirect_port" config:",optional"`
}

type TelemetryConfig struct {
	Enabled  bool
	Name     string
	Endpoint string
	Sampler  float64
	Batcher  string

	OtlpHeaders         map[string]string
	OtlpHttpPath        string
	OtlpHttpSecure      bool
	TraceResponseHeader string
	SkipPaths           []string
}