central

type CanSee struct {
	Only []string `yaml:"only"`
}

type Config struct {
	Desynced int
	Networks map[string]*Network `yaml:"networks" json:"networks"`
}

type Duration time.Duration

type IPNet net.IPNet

type Network struct {
	Desynced   int
	Name       string
	IPs        []IPNet          `yaml:"ips" json:"ips"`
	Peers      map[string]*Peer `yaml:"peers" json:"peers"`
	Me         string           `yaml:"me" json:"me"`
	Keepalive  Duration         `yaml:"keepalive" json:"keepalive"`
	ListenPort int              `yaml:"listenPort" json:"listenPort"`

	// lock is only for myPrivKey.
	MyPrivKey *wgtypes.Key `json:"myPrivKey"`
}

type Peer struct {
	Desynced int
	// SyncedPeers is for internal use by the cs package.
	// In the cs package, it's used to track which peers have been synced with changes.
	SyncedPeers      []string
	Name             string   `yaml:"name" json:"name"`
	Host             string   `yaml:"host" json:"host"`
	AlternativeHosts []string `yaml:"hosts" json:"hosts"`
	AllowedIPs       []IPNet  `yaml:"allowedIPs" json:"allowedIPs"`
	CanForward       bool     `yaml:"canForward" json:"canForward"`
	// CanSee determines whether this Peer can see anything (nil) or specfic peers only (non-nil).
	CanSee      *CanSee        `yaml:"canSee" json:"canSee"`
	AllowedSRVs []SRVAllowance `yaml:"allowedSRVs" json:"allowedSRVs"`

	PubKey          wgtypes.Key
	ForwardingPeers []string
	SRVs            []SRV
}

type SRV struct {
	Service  string
	Protocol string
	Priority uint16
	Weight   uint16
	Port     uint16
}

type SRVAllowable interface {
	// AllowedBy returns nil this is allowed by the SRVAllowance, and a non-nil error otherwise.
	AllowedBy(SRVAllowance) error
}

type SRVAllowance struct {
	Service     string `yaml:"service"`
	ServiceAny  bool   `yaml:"serviceAny"`
	PriorityMin uint16 `yaml:"priorityMin"`
	PriorityMax uint16 `yaml:"priorityMax"`
	WeightMin   uint16 `yaml:"weightMin"`
	WeightMax   uint16 `yaml:"weightMax"`
}