internal

type AccessControl struct {
	AllowedUsers []string `yaml:"allowedUsers" env-default:""`
	AllowedRoles []string `yaml:"allowedRoles" env-default:""`
}

type Header struct {
	Name  string `yaml:"name"`
	Value string `yaml:"value"`
}

type MetricsConfig struct {
	Enabled        bool   `yaml:"enabled" env:"METRICS_ENABLED" env-default:"true"`
	ListenAddr     string `yaml:"listenAddr" env:"METRICS_LISTEN_ADDR" env-default:"0.0.0.0:9090"`
	Endpoint       string `yaml:"endpoint" env:"METRICS_ENDPOINT" env-default:"/metrics"`
	HealthEndpoint string `yaml:"healthEndpoint" env:"HEALTH_ENDPOINT" env-default:"/health"`
}

type Proxy struct {
	http.Handler

	Logger *zap.SugaredLogger
	Config *ProxyConfig

	Target *url.URL
	// contains filtered or unexported fields
}

type ProxyConfig struct {
	Upstream string `yaml:"upstream" env:"UPSTREAM" env-required:""`
	Debug    bool   `yaml:"debug" env:"DEBUG" env-default:"false"`

	Metrics MetricsConfig `yaml:"metrics"`

	Server            ServerConfig   `yaml:"server"`
	Teleport          TeleportConfig `yaml:"teleport"`
	AccessControl     AccessControl  `yaml:"accessControl"`
	Token             TokenConfig    `yaml:"token"`
	AdditionalHeaders []Header       `yaml:"additionalHeaders"`
}

type ServerConfig struct {
	RequireTls bool   `yaml:"requireTls" env:"REQUIRE_TLS" env-default:"false"`
	KeyFile    string `yaml:"keyFile" env:"KEY_FILE" env-default:"/cert/tls.key"`
	CertFile   string `yaml:"certFile" env:"CERT_FILE" env-default:"/cert/tls.crt"`

	ListenHttp  string `yaml:"listenHttp" env:"LISTEN_HTTP" env-default:"0.0.0.0:8081"`
	ListenHttps string `yaml:"listenHttps" env:"LISTEN_HTTPS" env-default:"0.0.0.0:8444"`
	TlsProfile  string `yaml:"tlsProfile" env:"TLS_PROFILE" env-default:"modern"`

	AppendProxyHeaders bool `yaml:"appendProxyHeaders" env:"PROXY_APPEND_HEADERS" env-default:"true"`
}

type TeleportConfig struct {
	ProxyAddr        string        `yaml:"proxyAddr" env:"TELEPORT_HOST" env-required:""`
	Insecure         bool          `yaml:"insecure" env:"TELEPORT_INSECURE" env-default:"false"`
	OverrideJwksPath string        `yaml:"overrideJwksPath" env:"TELEPORT_JWKS_PATH" env-default:""`
	TokenHeader      string        `yaml:"tokenHeader" env:"TELEPORT_TOKEN_HEADER" env-default:"Teleport-Jwt-Assertion"`
	RefreshInternal  time.Duration `yaml:"refreshInternal" env:"TELEPORT_REFRESH_INTERVAL" env-default:"15m"`
}

type TokenConfig struct {
	PassToken         bool   `yaml:"passToken" env:"PASS_TOKEN" env-default:"false"`
	PassTokenAsHeader string `yaml:"passTokenAsHeader" env:"PASS_TOKEN_AS_HEADER" env-default:""`
	PassAsBearer      bool   `yaml:"passAsBearer" env:"PASS_TOKEN_AS_BEARER" env-default:"false"`
	UsernameHeader    string `yaml:"usernameHeader" env:"PASS_USERNAME_HEADER" env-default:""`
	RolesHeader       string `yaml:"rolesHeader" env:"PASS_ROLES_HEADER" env-default:""`
}