nginx

type Generator struct {
	// contains filtered or unexported fields
}

type NginxRoute struct {
	ServerName string // e.g. "auth.example.com"
	Location   string // e.g. "/" (always "/" in current templates)
	PluginName string // owning plugin name — used in conflict error messages
}

type ServiceRouteData struct {
	Route      string
	BaseDomain string
	Upstream   string
	// UpstreamName is the sanitized name of the generated `upstream {}` block.
	// Set automatically by the generator; callers do not populate it.
	UpstreamName string
	SSLDir       string
	RateZone     string
	Burst        int
	ConnLimit    int
	WebSocket    bool
	LazyResolve  bool
	// HasSSL controls whether ssl_certificate directives and the listen 443
	// directives are emitted. Set to false for letsencrypt/custom/none modes.
	HasSSL bool
	// HasTrustedChain controls whether ssl_trusted_certificate and OCSP
	// stapling are emitted.
	//
	// The template used to emit them unconditionally, pointing at a chain.pem
	// that `nself build` never writes — it emits only fullchain.pem and
	// privkey.pem. nginx then refused to start on every fresh project with
	// "cannot load certificate .../chain.pem: BIO_new_file() failed". Reported
	// by the ntask clean-fork self-host drill, 2026-08-24.
	//
	// Set by the generator from what is actually on disk; callers do not
	// populate it. Stapling is meaningless for a locally generated certificate
	// anyway — there is no OCSP responder for a cert nobody issued.
	HasTrustedChain bool
}

type UpstreamConfig struct {
	// UpstreamName is the nginx upstream block name. Default: "nself_api".
	UpstreamName string

	// BlueHost is the blue server address. Default: "127.0.0.1".
	BlueHost string

	// BluePort is the blue server port. Default: 8080.
	BluePort int

	// GreenHost is the green server address. Default: "127.0.0.1".
	GreenHost string

	// GreenPort is the green server port. Default: 8180.
	GreenPort int
}