panel

type AutoSpeedLimitConfig struct {
	Limit         int `mapstructure:"Limit"`
	WarnTimes     int `mapstructure:"WarnTimes"`
	LimitSpeed    int `mapstructure:"LimitSpeed"`
	LimitDuration int `mapstructure:"LimitDuration"`
}

type CertConfig struct {
	CertMode   string            `mapstructure:"CertMode"`
	CertDomain string            `mapstructure:"CertDomain"`
	CertFile   string            `mapstructure:"CertFile"`
	KeyFile    string            `mapstructure:"KeyFile"`
	Provider   string            `mapstructure:"Provider"`
	Email      string            `mapstructure:"Email"`
	DNSEnv     map[string]string `mapstructure:"DNSEnv"`
}

type Config struct {
	Log   LogConfig    `mapstructure:"Log"`
	Nodes []NodeConfig `mapstructure:"Nodes"`
	// AccessLog is the process-level access-log reporting policy (doc/09 §4.3,
	// doc/11 §13.1). It is the billing/accesslog.Config directly; the Manager's
	// normalize() fills defaults. Enable=false (the zero value) leaves access
	// logging off, so existing configs without an AccessLog block load cleanly.
	AccessLog accesslog.Config `mapstructure:"AccessLog"`
}

type ConnLimitConfig struct {
	Enable         bool `mapstructure:"Enable"`
	MaxConnPerUser int  `mapstructure:"MaxConnPerUser"`
}

type Controller struct {
	// contains filtered or unexported fields
}

type ControllerConfig struct {
	ListenIP            string `mapstructure:"ListenIP"`
	SendIP              string `mapstructure:"SendIP"`
	UpdatePeriodic      int    `mapstructure:"UpdatePeriodic"`
	EnableDNS           bool   `mapstructure:"EnableDNS"`
	DNSType             string `mapstructure:"DNSType"`
	EnableProxyProtocol bool   `mapstructure:"EnableProxyProtocol"`
	EnableFallback      bool   `mapstructure:"EnableFallback"`

	// Node-local REALITY: legacy panels keep the private key node-side and do not
	// deliver reality-opts, so the Controller injects REALITYConfigs into the
	// NodeInfo before AddNode when EnableREALITY is set (unless the operator forces
	// the panel copy via DisableLocalREALITYConfig). doc/09 §5.3.
	EnableREALITY             bool          `mapstructure:"EnableREALITY"`
	DisableLocalREALITYConfig bool          `mapstructure:"DisableLocalREALITYConfig"`
	REALITYConfigs            RealityConfig `mapstructure:"REALITYConfigs"`

	// Local control sub-blocks, all consumed by the Controller: AutoSpeedLimit
	// drives the T7 dynamic throttle; GlobalDeviceLimit / ConnLimit are pushed to
	// the shared limiter before AddNode; Cert feeds the T10 inbound TLS build.
	AutoSpeedLimitConfig    AutoSpeedLimitConfig            `mapstructure:"AutoSpeedLimitConfig"`    // T7 dynamic speed limit
	GlobalDeviceLimitConfig limiter.GlobalDeviceLimitConfig `mapstructure:"GlobalDeviceLimitConfig"` // cross-node device cap (Redis)
	ConnLimitConfig         ConnLimitConfig                 `mapstructure:"ConnLimitConfig"`         // per-user concurrent conns
	CertConfig              CertConfig                      `mapstructure:"CertConfig"`              // T10 cert automation
}

type LogConfig struct {
	Level      string `mapstructure:"Level"`
	AccessPath string `mapstructure:"AccessPath"`
	ErrorPath  string `mapstructure:"ErrorPath"`
}

type NodeConfig struct {
	PanelType        string           `mapstructure:"PanelType"`
	ApiConfig        api.Config       `mapstructure:"ApiConfig"`
	ControllerConfig ControllerConfig `mapstructure:"ControllerConfig"`
}

type Panel struct {
	// contains filtered or unexported fields
}

type RealityConfig struct {
	Show             bool     `mapstructure:"Show"`
	Dest             string   `mapstructure:"Dest"`
	ProxyProtocolVer uint64   `mapstructure:"ProxyProtocolVer"`
	ServerNames      []string `mapstructure:"ServerNames"`
	PrivateKey       string   `mapstructure:"PrivateKey"`
	MinClientVer     string   `mapstructure:"MinClientVer"`
	MaxClientVer     string   `mapstructure:"MaxClientVer"`
	MaxTimeDiff      uint64   `mapstructure:"MaxTimeDiff"`
	ShortIds         []string `mapstructure:"ShortIds"`
}

type Service interface {
	Start() error
	Close() error
}