app

type Config struct {
	HTTPAddress            string
	GRPCAddress            string
	DatabaseURL            string
	JWTIssuer              string
	JWTPrivateKeyPath      string
	JWTPublicKeyPath       string
	RefreshTokenExpiration time.Duration
	AccessTokenExpiration  time.Duration
	PublicURL              string
	MailmanGRPCAddress     string
	EmailWebhookURL        string
	Environment            string
	EncryptionKey          string
	TrustedProxyMode       bool // Enable IP extraction from X-Forwarded-For when behind reverse proxy
	// ProxySecret, when set, requires a matching X-Proxy-Secret header on every request
	// except the health check, so only traffic through the trusted edge is served.
	ProxySecret        string
	CORSAllowedOrigins []string

	// OAuth provider configuration for individual logins
	GoogleClientID     string
	GoogleClientSecret string
	GoogleIssuerURL    string

	MicrosoftClientID     string
	MicrosoftClientSecret string
	MicrosoftTenantID     string
	MicrosoftIssuerURL    string

	GitHubClientID     string
	GitHubClientSecret string
	GitHubAuthURL      string
	GitHubTokenURL     string
	GitHubAPIBase      string

	TOTPPeriod uint // TOTP time window in seconds (default 30, use smaller value for tests)
}

type Server struct {
	// contains filtered or unexported fields
}