config

type API struct {
	Enabled    bool       `yaml:"enabled"`
	Host       string     `yaml:"host"`
	Port       int        `yaml:"port"`
	TLS        *TLSConfig `yaml:"tls"`
	Insecure   bool       `yaml:"insecure"`
	AllowedIPs []string   `yaml:"allowed_ips"`
}

type APIConfig struct {
	AdminAPI      API            `yaml:"api"`
	AdminDatabase DatabaseConfig `yaml:"database"`
	AdminAuth     AuthConfig     `yaml:"auth"`
}

type AlertingConfig struct {
	Enabled   bool     `json:"enabled"`
	SMTPHost  string   `json:"smtp_host"`
	SMTPPort  int      `json:"smtp_port"`
	FromEmail string   `json:"from_email"`
	FromPass  string   `json:"from_password"`
	ToEmails  []string `json:"to_emails"`
}

type AuthConfig struct {
	JWTSecret            string `yaml:"jwt_secret"`
	PasswordMinLength    int    `yaml:"password_min_length"`
	PasswordExpiryDays   int    `yaml:"password_expiry_days"`
	PasswordHistoryLimit int    `yaml:"password_history_limit"`
	TokenCleanupInterval string `yaml:"token_cleanup_interval"`
}

type BackendConfig struct {
	URL            string             `yaml:"url"`                    // The URL of the backend service.
	Weight         int                `yaml:"weight"`                 // The weight for load balancing purposes.
	MaxConnections int32              `yaml:"max_connections"`        // Maximum number of concurrent connections to the backend.
	SkipTLSVerify  bool               `yaml:"skip_tls_verify"`        // Whether to skip TLS certificate verification for the backend.
	HealthCheck    *HealthCheckConfig `yaml:"health_check,omitempty"` // Optional health check configuration specific to the backend.
}

type CORS struct {
	AllowedOrigins   []string `yaml:"allowed_origins"`   // List of origins allowed to access the resources.
	AllowedMethods   []string `yaml:"allowed_methods"`   // HTTP methods allowed for CORS requests.
	AllowedHeaders   []string `yaml:"allowed_headers"`   // HTTP headers allowed in CORS requests.
	ExposedHeaders   []string `yaml:"exposed_headers"`   // HTTP headers exposed to the browser.
	AllowCredentials bool     `yaml:"allow_credentials"` // Indicates whether credentials are allowed in CORS requests.
	MaxAge           int      `yaml:"max_age"`           // Duration (in seconds) for which the results of a preflight request can be cached.
}

type CertManagerConfig struct {
	CertDir          string         `json:"cert_dir"`
	Alerting         AlertingConfig `json:"alerting"`
	CheckInterval    time.Duration  `yaml:"check_interval"`
	ExpirationThresh time.Duration  `yaml:"expiration_threshold"`
}

type CircuitBreaker struct {
	FailureThreshold int           `yaml:"failure_threshold"` // Number of consecutive failures to trigger the circuit breaker.
	ResetTimeout     time.Duration `yaml:"reset_timeout"`     // Duration to wait before attempting to reset the circuit after it has been tripped.
}

type Config struct {
	Port        int                `yaml:"port"`            // The port on which the main server listens.
	Host        string             `yaml:"host"`            // The host on which the main server listens.
	HTTPPort    int                `yaml:"http_port"`       // The port for handling HTTP (non-TLS) traffic.
	HTTPSPort   int                `yaml:"https_port"`      // The port for handling HTTPS (TLS) traffic.
	TLS         TLSConfig          `yaml:"tls"`             // TLS configuration settings.
	Algorithm   string             `yaml:"algorithm"`       // The load balancing algorithm to use (e.g., "round-robin").
	ConnPool    PoolConfig         `yaml:"connection_pool"` // Configuration for the connection pool.
	Backends    []BackendConfig    `yaml:"backends"`        // A list of backend services.
	HealthCheck *HealthCheckConfig `yaml:"health_check"`    // Global health check configuration.
	Services    []Service          `yaml:"services"`        // A list of services with their specific configurations.
	Middleware  []Middleware       `yaml:"middleware"`      // Global middleware configurations.
	CertManager CertManagerConfig  `json:"cert_manager"`    // Configuration for the certificate manager.
}

type DatabaseConfig struct {
	Path string `yaml:"path"`
}

type HeaderConfig struct {
	RequestHeaders        map[string]string `yaml:"request_headers,omitempty"`         // Request headers to be added/modified when forwarding to backend
	ResponseHeaders       map[string]string `yaml:"response_headers,omitempty"`        // Response headers to be added/modified before sending back to client
	RemoveRequestHeaders  []string          `yaml:"remove_request_headers,omitempty"`  // Headers to be removed from the request before forwarding
	RemoveResponseHeaders []string          `yaml:"remove_response_headers,omitempty"` // Headers to be removed from the response before sending back
}

type HealthCheckConfig struct {
	Type       string        `yaml:"type"`           // "http" or "tcp"
	Path       string        `yaml:"path,omitempty"` // Applicable for HTTP health checks
	Interval   time.Duration `yaml:"interval"`       // e.g., "10s"
	Timeout    time.Duration `yaml:"timeout"`        // e.g., "2s"
	Thresholds Thresholds    `yaml:"thresholds"`     // Healthy and Unhealthy thresholds
}

type Location struct {
	Path         string          `yaml:"path"`      // URL path that this location handles.
	Rewrite      string          `yaml:"rewrite"`   // URL rewrite rule applied to incoming requests.
	Redirect     string          `yaml:"redirect"`  // URL to redirect to, if applicable.
	LoadBalancer string          `yaml:"lb_policy"` // Load balancing policy (e.g., "round-robin").
	Backends     []BackendConfig `yaml:"backends"`  // List of backend configurations for this location.
}

type Middleware struct {
	RateLimit      *RateLimitConfig `yaml:"rate_limit"`      // Rate limiting configuration.
	CircuitBreaker *CircuitBreaker  `yaml:"circuit_breaker"` // Circuit breaker configuration.
	Security       *SecurityConfig  `yaml:"security"`        // Security headers configuration.
	CORS           *CORS            `yaml:"cors"`            // CORS (Cross-Origin Resource Sharing) configuration.
	Compression    bool             `yaml:"compression"`     // Enables compression if true.
}

type PoolConfig struct {
	MaxIdle     int           `yaml:"max_idle"`     // Maximum number of idle connections in the pool.
	MaxOpen     int           `yaml:"max_open"`     // Maximum number of open connections allowed.
	IdleTimeout time.Duration `yaml:"idle_timeout"` // Duration after which idle connections are closed. e.g., "90s"
}

type RateLimitConfig struct {
	RequestsPerSecond float64 `yaml:"requests_per_second"` // Number of allowed requests per second.
	Burst             int     `yaml:"burst"`               // Maximum number of burst requests allowed.
}

type SecurityConfig struct {
	HSTS                  bool   `yaml:"hsts"`                    // Enables HTTP Strict Transport Security (HSTS).
	HSTSMaxAge            int    `yaml:"hsts_max_age"`            // Duration (in seconds) for the HSTS policy.
	HSTSIncludeSubDomains bool   `yaml:"hsts_include_subdomains"` // Applies HSTS policy to all subdomains if true.
	HSTSPreload           bool   `yaml:"hsts_preload"`            // Includes the site in browsers' HSTS preload lists if true.
	FrameOptions          string `yaml:"frame_options"`           // Value for the X-Frame-Options header.
	ContentTypeOptions    bool   `yaml:"content_type_options"`    // Enables the X-Content-Type-Options header to prevent MIME type sniffing.
	XSSProtection         bool   `yaml:"xss_protection"`          // Enables the X-XSS-Protection header to activate the browser's XSS protection.
}

type Service struct {
	Name         string             `yaml:"name"`                   // Unique name of the service.
	Host         string             `yaml:"host"`                   // Host address where the service is accessible.
	Port         int                `yaml:"port"`                   // Port number on which the service listens.
	TLS          *TLSConfig         `yaml:"tls"`                    // Optional TLS configuration for the service.
	HTTPRedirect bool               `yaml:"http_redirect"`          // Indicates whether HTTP requests should be redirected to HTTPS.
	RedirectPort int                `yaml:"redirect_port"`          // Custom port for redirection if applicable.
	HealthCheck  *HealthCheckConfig `yaml:"health_check,omitempty"` // Optional Per-Service Health Check
	Middleware   []Middleware       `yaml:"middleware"`             // Middleware configurations specific to the service.
	Locations    []Location         `yaml:"locations"`              // Routing paths and backend configurations for the service.
	LogName      string             `yaml:"log_name,omitempty"`     // Name of the logger to use for this service.
	Headers      *HeaderConfig      `yaml:"headers,omitempty"`      // Custom headers configuration for request and response objects
}

type ServiceConfig struct {
	Services []Service `yaml:"services"`
}

type TLSConfig struct {
	Enabled                bool     `yaml:"enabled"`                  // Indicates whether TLS is enabled.
	CertFile               string   `yaml:"cert_file"`                // Path to the TLS certificate file.
	KeyFile                string   `yaml:"key_file"`                 // Path to the TLS private key file.
	CipherSuites           []uint16 `yaml:"cipher_suites"`            // List of supported cipher suites.
	SessionTicketsDisabled bool     `yaml:"session_tickets_disabled"` // Disables session ticket support if true.
	NextProtos             []string `yaml:"next_protos"`              // List of supported application protocols.
}

type Thresholds struct {
	Healthy   int `yaml:"healthy"`   // Number of consecutive successful health checks required to mark the backend as healthy.
	Unhealthy int `yaml:"unhealthy"` // Number of consecutive failed health checks required to mark the backend as unhealthy.
}