config

type Config struct {
	// Top-level options (can also be set in [general] section)
	BindTo              string `toml:"bind-to"`
	LogLevel            string `toml:"log-level"`
	ProxyProtocol       bool   `toml:"proxy-protocol"`
	MaxConnectionsPerIP int    `toml:"max-connections-per-ip"`

	Secrets map[string]string `toml:"secrets"` // name = "secret"

	General     GeneralConfig     `toml:"general"`
	TLSFronting TLSFrontingConfig `toml:"tls-fronting"`
	Performance PerformanceConfig `toml:"performance"`
	Upstream    UpstreamConfig    `toml:"upstream"`
}

type Duration time.Duration

type GeneralConfig struct {
	BindTo              string `toml:"bind-to"`
	LogLevel            string `toml:"log-level"`              // trace, debug, info, warn, error
	ProxyProtocol       bool   `toml:"proxy-protocol"`         // Accept incoming PROXY protocol
	MaxConnectionsPerIP int    `toml:"max-connections-per-ip"` // Per IP+secret, 0 = unlimited
}

type PerformanceConfig struct {
	TCPBufferKB   int      `toml:"tcp-buffer-kb"`
	NumEventLoops int      `toml:"num-event-loops"` // gnet event loops (0 = auto, uses all cores)
	PreferIP      string   `toml:"prefer-ip"`
	IdleTimeout   Duration `toml:"idle-timeout"`
}

type TLSFrontingConfig struct {
	MaskHost string `toml:"mask-host"` // Domain to mimic (SNI validation, proxy links)
	MaskPort int    `toml:"mask-port"` // Default port (default: 443)

	// Certificate fetching - where to connect to get real TLS cert
	// Defaults to mask-host:mask-port if not set
	// Useful when cert must be fetched from local nginx bypassing front proxy
	CertHost string `toml:"cert-host"`
	CertPort int    `toml:"cert-port"`

	// Splice target - where to forward unrecognized clients
	// Defaults to mask-host:mask-port if not set
	SpliceHost          string `toml:"splice-host"`
	SplicePort          int    `toml:"splice-port"`
	SpliceProxyProtocol int    `toml:"splice-proxy-protocol"` // 0=off, 1=v1, 2=v2
}

type UpstreamConfig struct {
	Socks5 string `toml:"socks5"` // SOCKS5 proxy address (e.g., "127.0.0.1:1080")
}