backendapi

type Options struct {
	Addr        string
	TLSConfig   *tls.Config
	Token       string
	AllowedNets []*net.IPNet
	Dicts       map[string]dict.Dict

	Mailbox            mailbox.MailboxBackend
	Index              mailbox.IndexBackend
	Resolver           *mailbox.Resolver
	NamespaceMailboxes map[string]mailbox.MailboxBackend
	Namespaces         []config.NamespaceConfig
	Locker             locks.Locker
	SpecialUseDefaults map[string]string
	MetadataDict       dict.Dict
	QuotaDict          dict.Dict
	// SharedDict is the owner-discovery registry (#1168), same handle the IMAP
	// side writes through; nil disables discovery.
	SharedDict dict.Dict
	// QuotaCloneDicts names the dicts (subset of Dicts) that quota_clone mirrors
	// usage into. Exposed read-only via /api/backend/quota/clone/* for operators
	// to inspect the fan-out. From cfg.Quota.CloneDicts.
	QuotaCloneDicts []string

	// WardenAddr / WardenTLS configure the connection to yarilo-warden for the
	// WHO endpoint. Empty Addr disables /who (returns 501). Same TLS config the
	// rest of internal cluster traffic uses.
	WardenAddr string
	WardenTLS  *tls.Config

	// PodIP is this backend pod's IP (from the POD_IP env / status.podIP).
	// /who scopes to sessions routed to THIS backend by default, matching each
	// warden session's Backend field against it. Empty (env not injected)
	// disables the scoping; /who then behaves as if --all was set.
	PodIP string

	// Router says which pod keeps a user, to forward a request there (#2053);
	// nil runs every request where it lands, as without a director.
	Router UserRouter
	// PeerTLS and PeerPort reach another pod's backend-api for that forward.
	PeerTLS  *tls.Config
	PeerPort string

	// AuthClient is the live yarilo-auth master-protocol client. When nil,
	// /api/backend/user/info skips the userdb-enrichment block and
	// /api/backend/user/iterate returns 503. main.go owns the lifecycle
	// (Close on shutdown); the Server only reads through it.
	AuthClient *authclient.Client

	// MailboxByDriver, when set, constructs a MailboxBackend for a named driver
	// (e.g. "mdbox", "sdbox"). Used when a per-user mail_location specifies a
	// different driver than the global opts.Mailbox. Backends are cached; the
	// factory is called once per distinct driver string.
	MailboxByDriver func(driver string) mailbox.MailboxBackend

	// FTSClient dials the yarilo-fts service for the operator fts surface
	// (status / rescan / optimize). Nil disables those endpoints (501).
	FTSClient ftsproto.Client
	// FTSChain expands a lookup's text the way IMAP SEARCH does; nil refuses it.
	FTSChain ftsquery.Expander
}

type Server struct {
	// contains filtered or unexported fields
}

type UserRouter interface {
	Lookup(user string) (string, error)
}

type WardenEndpoint struct {
	Addr      string
	TLSConfig *tls.Config
}