config

type Config struct {
	Extends      string   `toml:"extends"`
	Runtime      string   `toml:"runtime"`
	Mounts       []Mount  `toml:"mounts"`
	BlockedPaths []string `toml:"blocked_paths"`
	Environ      Environ  `toml:"environ"`
	Net          Net      `toml:"net"`
}

type DefaultMount struct {
	Entry   string
	Comment string
}

type EnvVar struct {
	Name  string
	Value string
}

type Environ struct {
	ExposedVars []string `toml:"exposed_vars"`
	SetVars     []EnvVar `toml:"set_vars"`
}

type Firewall struct {
	// ToggleUnset when no config file sets it, which leaves the firewall
	// enabled if the [net.firewall] table is present.
	Enabled Toggle `toml:"enabled"`
	// An action when no rule matches: "allow", "deny" or "ask".
	DefaultAction string `toml:"default_action"`
	// What to do with if "ask" prompt cannot be shown: "allow" or
	// "deny".
	AskFallback string `toml:"ask_fallback"`
	// Files with rules. Relative paths are resolved relative to the
	// directory where config file which includes the rules is placed.
	RuleFiles []string `toml:"rule_files"`
	// File where "always allow" and "always deny" decisions are
	// saved. Used as a rule file automatically (no need to list it in
	// rule_files).
	SavedRulesFile string `toml:"saved_rules_file"`
	// Inline rules.
	Rules []string `toml:"rules"`
}

type HostPort struct {
	Auto      bool
	HostPort  int
	GuestPort int
}

type Mount struct {
	Source  string
	Target  string
	RW      bool
	Overlay bool
}

type Net struct {
	Mode              string          `toml:"mode"`
	Firewall          *Firewall       `toml:"firewall"`
	TCPPublishedPorts []PublishedPort `toml:"tcp_published_ports"`
	TCPHostPorts      []HostPort      `toml:"tcp_host_ports"`
	UDPPublishedPorts []PublishedPort `toml:"udp_published_ports"`
	UDPHostPorts      []HostPort      `toml:"udp_host_ports"`
}

type PublishedPort struct {
	Auto      bool
	HostIP    string
	HostPort  int
	GuestPort int
}

type Toggle uint8