network

type Config struct {
	// Subnet is the IPv4 address range allocated to the machine. The machine's IP address is the first address
	// in the subnet. Other IP addresses are allocated to containers running on the machine.
	Subnet netip.Prefix
	// ManagementIP is the IPv6 address assigned to the machine within the WireGuard network. This address is used
	// for cluster management traffic, such as gRPC communication with the machine API server and Corrosion gossip.
	ManagementIP netip.Addr
	// WireGuardPort is the UDP port WireGuard listens on. Zero means the default port (51820).
	WireGuardPort int `json:",omitempty"`
	// MTU of the WireGuard interface. Use EffectiveMTU to get the default if not set (zero).
	MTU        int `json:",omitempty"`
	PrivateKey secret.Secret
	PublicKey  secret.Secret
	// Endpoints are this machine's own WireGuard endpoints advertised to other machines.
	Endpoints []netip.AddrPort `json:",omitempty"`
	Peers     []PeerConfig     `json:",omitempty"`
}

type EndpointChangeEvent struct {
	PublicKey secret.Secret
	// Endpoint is the new endpoint of the peer.
	Endpoint netip.AddrPort
}

type PeerConfig struct {
	Subnet *netip.Prefix `json:",omitempty"`
	// ManagementIP is the IPv6 address assigned to the peer within the WireGuard network. This address is used
	// for cluster management traffic, such as gRPC communication with the machine API server and Corrosion gossip.
	ManagementIP netip.Addr
	Endpoint     *netip.AddrPort  `json:",omitempty"`
	AllEndpoints []netip.AddrPort `json:",omitempty"`
	PublicKey    secret.Secret
}

type WireGuardNetwork struct {
	// contains filtered or unexported fields
}