db

type Certificate struct {
	ID             uuid.UUID `gorm:"primaryKey;->;<-:create;type:uuid;"`
	CreatedAt      time.Time `gorm:"->;<-:create;"`
	CommonName     string
	CAType         string
	KeyType        string
	CertificatePEM string
	PrivateKeyPEM  string
}

type Config struct {
	Dialect  string `json:"dialect"`
	Database string `json:"database"`
	Username string `json:"username"`
	Password string `json:"password"`
	Host     string `json:"host"`
	Port     uint16 `json:"port"`

	Params map[string]string `json:"params"`

	MaxIdleConns int `json:"max_idle_conns"`
	MaxOpenConns int `json:"max_open_conns"`

	LogLevel string `json:"log_level"`

	// EncryptionKey, when set, enables transparent encryption-at-rest for
	// on-disk SQLite databases through the pure-Go adiantum VFS (available on
	// the default and wasm_sqlite builds). It is deliberately NOT serialized:
	// persisting the key next to the database it protects would defeat the
	// purpose. Applications supply it out-of-band (option, env, KMS, prompt).
	EncryptionKey string `json:"-"`
}

type User struct {
	ID        uuid.UUID `gorm:"primaryKey;->;<-:create;type:uuid;"`
	CreatedAt time.Time `gorm:"->;<-:create;"`
	LastSeen  time.Time
	Name      string
	Token     string `gorm:"uniqueIndex"`
}