domain

type Access struct {
	Policies []Policy `yaml:"policies,omitempty"`
}

type AccessConfig struct {
	Providers []string       `yaml:"providers,omitempty" json:"providers,omitempty"`
	Raw       map[string]any `yaml:",remain" json:"-"`
}

type AppConfig struct {
	Target   TargetConfig  `yaml:"target" json:"target" validate:"required"`
	Expose   ExposeConfig  `yaml:"expose" json:"expose" validate:"required"`
	Access   *AccessConfig `yaml:"access,omitempty" json:"access,omitempty" validate:"omitempty"`
	Policies []string      `yaml:"policies,omitempty" json:"policies,omitempty"`
}

type ExposeConfig struct {
	Subdomain string `yaml:"subdomain" json:"subdomain" validate:"required"`
}

type Ingress struct {
	Zone string      `yaml:"zone" json:"zone" validate:"required"`
	Apps []AppConfig `yaml:"apps" json:"apps" validate:"required,dive"`
	Mode IngressMode `yaml:"mode" json:"mode" validate:"required,oneof=wildcard subdomain"`
}

type IngressMode string

type Policy struct {
	Name  string         `yaml:"name"    json:"name"  validate:"required"`
	Extra map[string]any `yaml:",remain" json:"-"`
}

type TargetConfig struct {
	Port     int            `yaml:"port" json:"port" validate:"required,min=1,max=65535"`
	Hostname string         `yaml:"hostname" json:"hostname" validate:"required"`
	Protocol TargetProtocol `yaml:"protocol" json:"protocol" validate:"required,oneof=http https tcp"`
}

type TargetProtocol string

type Tunnel struct {
	// Deprecated: Use Name instead.
	ID         string `yaml:"id" json:"-" validate:"-"`
	Name       string `yaml:"name" json:"name" validate:"-"`
	Persistent bool   `yaml:"persistent" json:"persistent" validate:"-"`
}