config

type Admin struct {
	Email    string `yaml:"email"`
	Password string `yaml:"password"`
	TotpKey  string `yaml:"totp"`
}

type Agent struct {
	VaultAddr string     `yaml:"vaultServer"`
	ThorAddr  string     `yaml:"thorServer"`
	Paths     []string   `yaml:"paths"`
	Namespace string     `yaml:"namespace"`
	TLS       *TlsConfig `yaml:"tls"`
	Edge      bool       `yaml:"edge" default:"false"`
	ApiKey    string     `yaml:"-"`
}

type Config struct {
	TLS            *TlsConfig   `yaml:"tls"`
	Vault          *VaultConfig `yaml:"vault"`
	Loki           *LokiConfig  `yaml:"loki"`
	Ldap           *LdapConfig  `yaml:"ldap"`
	Saml           *SamlConfig  `yaml:"saml"`
	Admin          *Admin       `yaml:"admin"`
	Agent          *Agent       `yaml:"agent"`
	Configured     bool         `yaml:"configured"`
	TrustedInbound []string     `yaml:"trustedInbound"`
	AdminOTP       *otp.Key     `yaml:"-"`
	// contains filtered or unexported fields
}

type LdapConfig struct {
	Server      string `yaml:"server"`
	Port        int    `yaml:"port"`
	BindAccount string `yaml:"bindAccount"`
	Password    string `yaml:"password"`
	BaseDN      string `yaml:"baseDn"`
	FilterDN    string `yaml:"filterDn"`
}

type LokiConfig struct {
	Server   string `yaml:"server"`
	Port     int    `yaml:"port"`
	Username string `yaml:"username"`
	Password string `yaml:"password"`
}

type Policy struct {
	ExcludeCharacters string `yaml:"excludeCharacters"`
	Length            int    `yaml:"length"`
}

type SamlConfig struct {
	IDPMetadata string             `yaml:"idpMetadata"`
	PrivateKey  []byte             `yaml:"privateKey"`
	Certificate []byte             `yaml:"certificate"`
	SamlSP      *samlsp.Middleware `yaml:"-"`
}

type TlsConfig struct {
	HostName    string `yaml:"hostname"`
	Port        int    `yaml:"port"`
	Cacert      string `yaml:"cacert"`
	Cakey       string `yaml:"cakey"`
	LetsEncrypt bool   `yaml:"letsencrypt"`
}

type User struct {
	Admin  bool
	Email  string
	Groups []string
}

type VaultConfig struct {
	Address string `yaml:"address"`
	AppRole *struct {
		RoleId              string `yaml:"roleId"`
		SecretId            string `yaml:"secretId"`
		ResponseWrapped     bool   `yaml:"wrapped"`
		InitialisationToken string `yaml:"InitialisationToken"`
	} `yaml:"appRole,omitempty"`
	AzureRole *struct {
		RoleName string `yaml:"role"`
	} `yaml:"azureRole,omitempty"`
	AwsRole *struct {
		RoleName string `yaml:"role"`
	} `yaml:"awsRole,omitempty"`
	Namespace       string  `yaml:"namespace"`
	SecureTokenPath string  `yaml:"securePath"`
	EncryptionKey   string  `yaml:"encryptionkey"`
	PasswordPolicy  *Policy `yaml:"passwordPolicy"`
	//
	// Replaceable is a list of keys likely to be found under
	// a given vault path whose value can/should be replaced by
	// automation.
	//
	// This is only relevant to an Ex-Employee search type.
	Replaceable []string      `yaml:"replaceableKeys"`
	VaultConfig *vault.Config `yaml:"-"`
	TokenPolicy *Policy       `yaml:"-"`
}