config

type Auth struct {
	// SessionServerURL is the base URL for the Mojang session server to authenticate online mode players.
	// Defaults to https://sessionserver.mojang.com/session/minecraft/hasJoined
	SessionServerURL *configutil.URL `yaml:"sessionServerUrl"` // TODO support multiple urls configutil.SingleOrMulti[URL]
	// PrivateKeyBits is the bit size of the RSA key Gate generates at startup to
	// encrypt the login handshake of online mode players.
	// Defaults to 1024 bits, the size vanilla Minecraft servers use.
	// Raise it to 2048 or 3072 if your clients and tools accept a larger key;
	// note the key is generated once at startup, so changing this requires a restart.
	PrivateKeyBits int `yaml:"privateKeyBits" json:"privateKeyBits,omitempty"`
}

type Compression struct {
	Threshold int `yaml:"threshold"`
	Level     int `yaml:"level"`
}

type Config struct {
	Bind string `yaml:"bind"` // The address to listen for connections.

	OnlineMode                    bool `yaml:"onlineMode,omitempty" json:"onlineMode,omitempty"`                                       // Whether to enable online mode.
	Auth                          Auth `yaml:"auth,omitempty" json:"auth,omitempty"`                                                   // Authentication settings.
	OnlineModeKickExistingPlayers bool `yaml:"onlineModeKickExistingPlayers,omitempty" json:"onlineModeKickExistingPlayers,omitempty"` // Kicks existing players when a premium player with the same name joins.
	// OfflineModeUsernameBlacklist reserves names only on login paths that are effectively
	// offline mode. Authenticated joins remain allowed to use the same names.
	// A login is effectively offline mode when the proxy runs offline mode or when the
	// session's identity is an unauthenticated offline identity (e.g. an offline/cracked
	// player arriving through Connect with the offline UUID of the requested name), so
	// the reservation also applies on an online-mode proxy for names claimed without
	// Mojang authentication.
	OfflineModeUsernameBlacklist       []string                          `yaml:"offlineModeUsernameBlacklist,omitempty" json:"offlineModeUsernameBlacklist,omitempty"`
	OfflineModeUsernameBlacklistScope  OfflineModeUsernameBlacklistScope `yaml:"offlineModeUsernameBlacklistScope,omitempty" json:"offlineModeUsernameBlacklistScope,omitempty"`
	OfflineModeUsernameBlacklistReason *configutil.TextComponent         `yaml:"offlineModeUsernameBlacklistReason,omitempty" json:"offlineModeUsernameBlacklistReason,omitempty"`

	Forwarding Forwarding `yaml:"forwarding,omitempty" json:"forwarding,omitempty"` // Player info forwarding settings.
	Status     Status     `yaml:"status,omitempty" json:"status,omitempty"`         // Status response settings.
	Query      Query      `yaml:"query,omitempty" json:"query,omitempty"`           // Query settings.
	// Whether the proxy should present itself as a
	// Forge/FML-compatible server. By default, this is disabled.
	AnnounceForge bool `yaml:"announceForge,omitempty" json:"announceForge,omitempty"`

	Servers                              map[string]string `yaml:"servers,omitempty" json:"servers,omitempty"` // name:address
	Try                                  []string          `yaml:"try,omitempty" json:"try,omitempty"`         // Try server names order
	ForcedHosts                          ForcedHosts       `yaml:"forcedHosts,omitempty" json:"forcedHosts,omitempty"`
	FailoverOnUnexpectedServerDisconnect bool              `yaml:"failoverOnUnexpectedServerDisconnect,omitempty" json:"failoverOnUnexpectedServerDisconnect,omitempty"`

	ConnectionTimeout configutil.Duration `yaml:"connectionTimeout,omitempty" json:"connectionTimeout,omitempty"` // Write timeout
	ReadTimeout       configutil.Duration `yaml:"readTimeout,omitempty" json:"readTimeout,omitempty"`             // Read timeout

	Quota                Quota         `yaml:"quota,omitempty" json:"quota,omitempty"`                 // Rate limiting settings
	PacketLimiter        PacketLimiter `yaml:"packetLimiter,omitempty" json:"packetLimiter,omitempty"` // Per-connection serverbound packet rate limiting
	Compression          Compression   `yaml:"compression,omitempty" json:"compression,omitempty"`
	ProxyProtocol        bool          `yaml:"proxyProtocol,omitempty" json:"proxyProtocol,omitempty"`     // Enable HA-Proxy protocol mode
	ProxyProtocolBackend bool          `yaml:"proxyProtocolBackend" json:"proxyProtocolBackend,omitempty"` // Enable HA-Proxy protocol mode for backend servers
	// ProxyProtocolTrustedProxies lists the upstreams (IP addresses or CIDR
	// blocks) whose PROXY protocol header is trusted to carry the real client
	// address. A header sent by any other peer is rejected, so a client that can
	// reach the proxy directly cannot claim to connect from somebody else's IP.
	// When empty, DefaultProxyProtocolTrustedProxies is used.
	// Used for client connections when ProxyProtocol is enabled; entries are still
	// validated while it is disabled.
	ProxyProtocolTrustedProxies []string `yaml:"proxyProtocolTrustedProxies,omitempty" json:"proxyProtocolTrustedProxies,omitempty"`

	ShouldPreventClientProxyConnections bool `yaml:"shouldPreventClientProxyConnections" json:"shouldPreventClientProxyConnections,omitempty"` // Sends player IP to Mojang on login

	AcceptTransfers                  bool `yaml:"acceptTransfers,omitempty" json:"acceptTransfers,omitempty"`                                   // Whether to accept transfers from other hosts via transfer packet
	BungeePluginChannelEnabled       bool `yaml:"bungeePluginChannelEnabled,omitempty" json:"bungeePluginChannelEnabled,omitempty"`             // Whether to enable BungeeCord plugin messaging
	BuiltinCommands                  bool `yaml:"builtinCommands,omitempty" json:"builtinCommands,omitempty"`                                   // Whether to enable builtin commands
	RequireBuiltinCommandPermissions bool `yaml:"requireBuiltinCommandPermissions,omitempty" json:"requireBuiltinCommandPermissions,omitempty"` // Whether builtin commands require player permissions
	AnnounceProxyCommands            bool `yaml:"announceProxyCommands,omitempty" json:"announceProxyCommands,omitempty"`                       // Whether to announce proxy commands to players
	ForceKeyAuthentication           bool `yaml:"forceKeyAuthentication,omitempty" json:"forceKeyAuthentication,omitempty"`                     // Added in 1.19

	// Permissions configures Gate's built-in, file-backed permission provider:
	// it answers a player's PermissionsSetupEvent at login, so builtin commands
	// can be granted per player without a Go extension (see Permissions).
	Permissions Permissions `yaml:"permissions,omitempty" json:"permissions,omitempty"`

	Debug          bool                      `yaml:"debug,omitempty" json:"debug,omitempty"` // Enable debug mode
	ShutdownReason *configutil.TextComponent `yaml:"shutdownReason,omitempty" json:"shutdownReason,omitempty"`

	Lite liteconfig.Config `yaml:"lite,omitempty" json:"lite,omitempty"` // Lite mode settings
	Via  Via               `yaml:"via,omitempty" json:"via,omitempty"`   // Via backend compatibility settings

	// Bedrock edition configuration
	Bedrock bconfig.BedrockConfig `yaml:"bedrock,omitempty" json:"bedrock,omitempty"`
}

type ForcedHosts map[string][]string // virtualhost:server names

type Forwarding struct {
	Mode              ForwardingMode `yaml:"mode"`
	VelocitySecret    string         `yaml:"velocitySecret"`    // Used with "velocity" mode
	BungeeGuardSecret string         `yaml:"bungeeGuardSecret"` // Used with "bungeeguard" mode
}

type ForwardingMode string

type OfflineModeUsernameBlacklistScope string

type PacketLimiter struct {
	Interval         configutil.Duration `yaml:"interval"`         // Sliding window the rates are measured over.
	PacketsPerSecond int                 `yaml:"packetsPerSecond"` // Max serverbound packets/s per connection (<=0 disables).
	BytesPerSecond   int                 `yaml:"bytesPerSecond"`   // Max serverbound bytes/s per connection (<=0 disables).
}

type PermissionSet struct {
	// contains filtered or unexported fields
}

type Permissions struct {
	// Default is granted to every player without an entry in Players.
	Default []string `yaml:"default,omitempty" json:"default,omitempty"`
	// Players maps a player UUID or username to the nodes granted to it.
	// A listed player replaces Default.
	Players map[string][]string `yaml:"players,omitempty" json:"players,omitempty"`
	// Deny maps a player UUID or username to explicitly denied nodes.
	Deny map[string][]string `yaml:"deny,omitempty" json:"deny,omitempty"`
}

type Query struct {
	Enabled     bool `yaml:"enabled"`
	Port        int  `yaml:"port"`
	ShowPlugins bool `yaml:"showPlugins"`
}

type Quota struct {
	Connections QuotaSettings `yaml:"connections"` // Limits new connections per second, per IP block.
	Logins      QuotaSettings `yaml:"logins"`      // Limits logins per second, per IP block.
}

type QuotaSettings struct {
	Enabled    bool    `yaml:"enabled"`    // If false, there is no such limiting.
	OPS        float32 `yaml:"ops"`        // Allowed operations/events per second, per IP block
	Burst      int     `yaml:"burst"`      // The maximum events per second, per block; the size of the token bucket
	MaxEntries int     `yaml:"maxEntries"` // Maximum number of IP blocks to keep track of in cache
}

type Status struct {
	ShowMaxPlayers  int                   `yaml:"showMaxPlayers"`
	Motd            *configutil.Component `yaml:"motd"`
	Favicon         favicon.Favicon       `yaml:"favicon"`
	LogPingRequests bool                  `yaml:"logPingRequests"`
}

type Via struct {
	// Enabled starts the managed ViaLite runtime for backend connections.
	Enabled bool `yaml:"enabled,omitempty" json:"enabled,omitempty"`
	// Mode is "subprocess" (portable default) or "embedded" (in-process
	// shared library). Empty means subprocess.
	Mode string `yaml:"mode,omitempty" json:"mode,omitempty"`
	// Bind is the runtime's internal loopback bind address. Empty picks a
	// free port on 127.0.0.1.
	Bind string `yaml:"bind,omitempty" json:"bind,omitempty"`
	// LibraryPath uses that shared library instead of resolving one.
	LibraryPath string `yaml:"libraryPath,omitempty" json:"libraryPath,omitempty"`
	// BinaryPath uses that vialite binary for subprocess mode.
	BinaryPath string `yaml:"binaryPath,omitempty" json:"binaryPath,omitempty"`
	// Version selects the runtime release. Empty, "auto" and "latest" all
	// mean the newest stable ViaLite release, resolved once at startup, so a
	// newly published runtime applies on the next Gate restart (there is no
	// hot swap). This is independent of the Go module version Gate links.
	// With Mirror set, the mirror's own latest release is used; a mirror that
	// cannot report one falls back to a compiled-in release and logs a
	// warning. Set an exact tag such as "v0.3.1" to pin a rollout.
	Version string `yaml:"version,omitempty" json:"version,omitempty"`
	// Mirror overrides the release download base (GitHub release URL layout,
	// optionally serving <mirror>/latest for version resolution).
	Mirror string `yaml:"mirror,omitempty" json:"mirror,omitempty"`
	// Offline disables runtime downloads entirely: BinaryPath/LibraryPath, an
	// embedded artifact, or one on $PATH must be present.
	Offline bool `yaml:"offline,omitempty" json:"offline,omitempty"`
}