config

type Config struct {
	// Coolify deployment integration: operator-only environment, never editable by a web request.
	UpdateURL, UpdateToken, UpdateResource string
	// Update configures the staged update lifecycle (trusted release source,
	// verification policy, health links). Operator-only, like the Coolify fields.
	Update UpdateConfig

	Addons          map[string]string // Optional addon modes: enabled, disabled or auto.
	TrustedProxies  []string          // GORUN_TRUSTED_PROXIES; empty trusts no forwarded headers
	CSPScriptSrc    []string          // GORUN_CSP_SCRIPT_SRC: extra public-page script sources (see PublicScriptSources)
	Env             string            // "dev" | "prod"
	DataDir         string            // GORUN_DATA, default ./data
	BaseURL         string            // GORUN_BASE_URL
	Addr            string            // GORUN_ADDR default 127.0.0.1:8080 (dev), :8080 (prod)
	SecretKey       []byte            // GORUN_SECRET_KEY (32 bytes after base64 decode) — required in prod, generated+persisted in dev
	AllowPrivateNet bool              // GORUN_ALLOW_PRIVATE_NET
	// MCPSameOwnerApproval (GORUN_MCP_SAME_OWNER_APPROVAL) lets an API key
	// approve MCP calls requested by another key of the same owner. Off by
	// default: approvals by key need a different person.
	MCPSameOwnerApproval bool
	// HSTSIncludeSubdomains (GORUN_HSTS_INCLUDE_SUBDOMAINS) and HSTSPreload
	// (GORUN_HSTS_PRELOAD) extend the HSTS header sent on https requests.
	// Off by default; preload requires includeSubDomains.
	HSTSIncludeSubdomains, HSTSPreload bool
	// Metrics (GORUN_METRICS) serves GET /metrics in Prometheus text format.
	// Off by default. MetricsToken (GORUN_METRICS_TOKEN) optional Bearer for scrapers.
	Metrics      bool
	MetricsToken string
	Stripe       struct{ SecretKey, WebhookSecret string } // STRIPE_SECRET_KEY, STRIPE_WEBHOOK_SECRET
	Theme        string                                    // GORUN_THEME default "default"
	SetupToken   string                                    // GORUN_SETUP_TOKEN: honored in every environment; required for prod setup (≥ 16 chars)
	S3           S3                                        // [s3] / GORUN_S3_*: media in an S3-compatible bucket
}

type S3 struct {
	Endpoint, Region, Bucket, AccessKey, SecretKey, PublicURL string
}

type UpdateConfig struct {
	SourceURL   string   // GORUN_UPDATE_SOURCE_URL / [update] source_url: HTTPS release index (JSON)
	SourceToken string   // GORUN_UPDATE_SOURCE_TOKEN / [update] source_token: optional bearer for the index
	Artifact    string   // GORUN_UPDATE_ARTIFACT / [update] artifact: which artifact of a release to activate
	HealthLinks []string // GORUN_UPDATE_HEALTH_LINKS / [update] health_links: absolute URLs that must answer 2xx after activation
	// AllowDowngrade lets compatibility pass for a lower target version.
	AllowDowngrade bool // GORUN_UPDATE_ALLOW_DOWNGRADE / [update] allow_downgrade
	// AllowMissingDigest accepts releases whose source publishes no digest.
	AllowMissingDigest bool // GORUN_UPDATE_ALLOW_MISSING_DIGEST / [update] allow_missing_digest
	// ActivationTimeout bounds waiting for the provider or operator (default 15m).
	ActivationTimeout time.Duration // GORUN_UPDATE_ACTIVATION_TIMEOUT / [update] activation_timeout ("15m")
}