config

type CertPool struct {
	Files []string
	*x509.CertPool
}

type DFGetConfig struct {
	DfgetFlags  []string      `yaml:"dfget_flags"`
	SuperNodes  []string      `yaml:"supernodes"`
	RateLimit   string        `yaml:"ratelimit"`
	DFRepo      string        `yaml:"localrepo"`
	DFPath      string        `yaml:"dfpath"`
	HostsConfig []*HijackHost `yaml:"hosts" json:"hosts"`
	PeerPort    int           `yaml:"peerPort"`
	LocalIP     string        `yaml:"localIP"`
}

type HijackConfig struct {
	Cert  string        `yaml:"cert" json:"cert"`
	Key   string        `yaml:"key" json:"key"`
	Hosts []*HijackHost `yaml:"hosts" json:"hosts"`
}

type HijackHost struct {
	Regx     *Regexp   `yaml:"regx" json:"regx"`
	Insecure bool      `yaml:"insecure" json:"insecure"`
	Certs    *CertPool `yaml:"certs" json:"certs"`
}

type Properties struct {
	// Registry mirror settings
	RegistryMirror *RegistryMirror `yaml:"registry_mirror" json:"registry_mirror"`

	// Proxies is the list of rules for the transparent proxy. If no rules
	// are provided, all requests will be proxied directly. Request will be
	// proxied with the first matching rule.
	Proxies []*Proxy `yaml:"proxies" json:"proxies"`

	// HijackHTTPS is the list of hosts whose https requests should be hijacked
	// by dfdaemon. Dfdaemon will be able to proxy requests from them with dfget
	// if the url matches the proxy rules. The first matched rule will be used.
	HijackHTTPS *HijackConfig `yaml:"hijack_https" json:"hijack_https"`

	// https options
	Port    uint   `yaml:"port" json:"port"`
	HostIP  string `yaml:"hostIp" json:"hostIp"`
	CertPem string `yaml:"certpem" json:"certpem"`
	KeyPem  string `yaml:"keypem" json:"keypem"`

	Verbose bool `yaml:"verbose" json:"verbose"`

	MaxProcs int `yaml:"maxprocs" json:"maxprocs"`

	// dfget config
	DfgetFlags []string  `yaml:"dfget_flags" json:"dfget_flags"`
	SuperNodes []string  `yaml:"supernodes" json:"supernodes"`
	RateLimit  rate.Rate `yaml:"ratelimit" json:"ratelimit"`
	WorkHome   string    `yaml:"workHome" json:"workHome,omitempty"`
	DFRepo     string    `yaml:"localrepo" json:"localrepo"`
	DFPath     string    `yaml:"dfpath" json:"dfpath"`

	LogConfig  dflog.LogConfig `yaml:"logConfig" json:"logConfig"`
	LocalIP    string          `yaml:"localIP" json:"localIP"`
	PeerPort   int             `yaml:"peerPort" json:"peerPort"`
	StreamMode bool            `yaml:"streamMode" json:"streamMode"`
}

type Proxy struct {
	Regx     *Regexp `yaml:"regx" json:"regx"`
	UseHTTPS bool    `yaml:"use_https" json:"use_https"`
	Direct   bool    `yaml:"direct" json:"direct"`
	// Redirect is the host to redirect to, if not empty
	Redirect string `yaml:"redirect" json:"redirect"`
}

type Regexp struct {
	*regexp.Regexp
}

type RegistryMirror struct {
	// Remote url for the registry mirror, default is https://index.docker.io
	Remote *URL `yaml:"remote" json:"remote"`

	// Optional certificates if the mirror uses self-signed certificates
	Certs *CertPool `yaml:"certs" json:"certs"`

	// Whether to ignore certificates errors for the registry
	Insecure bool `yaml:"insecure" json:"insecure"`

	// Request the remote registry directly.
	Direct bool `yaml:"direct" json:"direct"`
}

type URL struct {
	*url.URL
}