config

type AdminAPI struct {
	TLS *ServerTLS `json:"tls,omitempty"`
}

type AdminConfig struct {
	SuperUser *SuperUser `json:"superUser"`
	API       *AdminAPI  `json:"api,omitempty"`
}

type AuthConfig struct {
	Methods *AuthMethods `json:"methods"`
	Scheme  *AuthScheme  `json:"scheme"`
	Order   int          `json:"order"`
}

type AuthMapping struct {
	Backend       string   `json:"backend"`
	Method        string   `json:"method"`
	Exempt        []string `json:"exempt"`
	Authorization *AuthZ   `json:"authorization"`
}

type AuthMethodBasic struct{}

type AuthMethods struct {
	Basic *AuthMethodBasic `json:"basic"`
}

type AuthScheme struct {
	Mappings []*AuthMapping `json:"mappings"`
}

type AuthZ struct {
	Groups []string            `json:"groups"`
	Paths  map[string][]string `json:"paths"`
}

type BackendTLS struct {
	// RootCAFile is the path to a PEM-encoded CA bundle used to verify the backend's certificate.
	// When empty, the system certificate pool is used.
	RootCAFile string `json:"rootCAFile,omitempty"`
	// ClientCertFile and ClientKeyFile enable mTLS.
	// Both must be set together.
	ClientCertFile string `json:"clientCertFile,omitempty"`
	ClientKeyFile  string `json:"clientKeyFile,omitempty"`
	// InsecureSkipVerify disables server certificate verification.
	// Must only be used in non-production environments.
	InsecureSkipVerify bool `json:"insecureSkipVerify,omitempty"`
}

type GatewayConfig struct {
	Router *Router    `json:"router"`
	TLS    *ServerTLS `json:"tls,omitempty"`
}

type OASBackendMapping struct {
	Backend       string                 `json:"backend"`
	Specification string                 `json:"specification"`
	Options       *OASBackendMappingOpts `json:"options"`
}

type OASBackendMappingOpts struct {
	ValidateBody bool `json:"validateBody"`
}

type OASConfig struct {
	Order    int                  `json:"order"`
	Mappings []*OASBackendMapping `json:"mappings"`
}

type ObservabilityConfig struct {
	Enabled        bool `json:"enabled"`
	RuntimeMetrics bool `json:"runtimeMetrics"`
}

type PersistenceConfig struct {
	// Driver selects the database backend: "sqlite" or "postgres".
	Driver string `json:"driver"`
	// Address is the database address. For postgres: host. For sqlite: file path.
	Address string `json:"address"`

	// Postgres contains specific configuration for the postgres driver. Ignored for other drivers.
	*Postgres `json:"postgres,omitempty"`
}

type Postgres struct {
	// Database is the database name (postgres only).
	Database string `json:"database"`
	// Username is the database user (postgres only).
	Username *string `json:"username,omitempty"`
	// Password is the database password (postgres only).
	Password *string `json:"password,omitempty"`
	// SSLMode controls TLS for postgres connections (e.g. "disable", "require", "verify-full").
	SSLMode *string `json:"sslMode,omitempty"`
}

type RootConfig struct {
	*GatewayConfig       `json:"gateway"`
	*ObservabilityConfig `json:"observability"`
	*AdminConfig         `json:"admin"`
	*OASConfig           `json:"oas,omitempty"`
	*AuthConfig          `json:"auth,omitempty"`
	*PersistenceConfig   `json:"persistence,omitempty"`
	// contains filtered or unexported fields
}

type Router struct {
	Backends []*RouterBackend `json:"backends"`
}

type RouterBackend struct {
	Name      string      `json:"name"`
	Host      string      `json:"host"`
	Port      int         `json:"port"`
	TimeoutMs int         `json:"timeout,omitempty"`
	TLS       *BackendTLS `json:"tls,omitempty"`
}

type ServerTLS struct {
	CertFile string `json:"serverCertFile"`
	KeyFile  string `json:"serverKeyFile"`
}

type SuperUser struct {
	ClientID     string `json:"clientId"`
	ClientSecret string `json:"clientSecret"`
}