mirror of
https://github.com/Pacerino/CaddyProxyManager.git
synced 2026-08-04 03:05:30 -04:00
7ff0949067
Introduce a Provider interface selectable via CPM_CADDY_MODE: - CaddyfileProvider renders per-host snippets (template whitespace fixed) - APIProvider manages Caddy's JSON config via the admin API Add configurable reload strategy (systemd/exec/api/none) and a configurable listen address for the bootstrapped server in API mode. Includes unit tests for the JSON builder, provider factory and the API provider (httptest).
84 lines
3.8 KiB
Go
84 lines
3.8 KiB
Go
package config
|
|
|
|
import "github.com/Pacerino/CaddyProxyManager/internal/logger"
|
|
|
|
// IsSetup defines whether we have an admin user or not
|
|
var IsSetup bool
|
|
|
|
var logLevel logger.Level
|
|
|
|
type log struct {
|
|
Level string `json:"level" envconfig:"optional,default=debug"`
|
|
Format string `json:"format" envconfig:"optional,default=nice"`
|
|
}
|
|
|
|
// caddy holds the configuration for how CPM talks to Caddy.
|
|
type caddy struct {
|
|
// Mode selects the provider used to apply host configuration.
|
|
// Valid values: "caddyfile" (render per-host Caddyfiles) or "api"
|
|
// (manage Caddy's JSON config via the admin API).
|
|
Mode string `json:"mode" envconfig:"optional,default=caddyfile"`
|
|
// AdminURL is the base URL of the Caddy admin API (used by the api
|
|
// provider and the "api" reload strategy).
|
|
AdminURL string `json:"admin_url" envconfig:"optional,default=http://localhost:2019"`
|
|
// ServerName is the name of the http server in Caddy's JSON config
|
|
// that the api provider manages routes under.
|
|
ServerName string `json:"server_name" envconfig:"optional,default=srv0"`
|
|
// Listen are the addresses the bootstrapped server listens on when the
|
|
// api provider has to create it. Defaults to the standard HTTP/HTTPS
|
|
// ports; use e.g. :8080 for local non-root testing.
|
|
Listen []string `json:"listen" envconfig:"optional,default=:80;:443"`
|
|
// ReloadStrategy controls how the caddyfile provider triggers a reload.
|
|
// Valid values: "systemd", "exec", "api" or "none".
|
|
ReloadStrategy string `json:"reload_strategy" envconfig:"optional,default=systemd"`
|
|
// Binary is the caddy executable used by the "exec" reload strategy.
|
|
Binary string `json:"binary" envconfig:"optional,default=caddy"`
|
|
// Service is the systemd unit reloaded by the "systemd" strategy.
|
|
Service string `json:"service" envconfig:"optional,default=caddy.service"`
|
|
}
|
|
|
|
// oidc holds the OpenID Connect / OAuth2 configuration used when the auth
|
|
// mode is set to "oidc".
|
|
type oidc struct {
|
|
// Issuer is the OIDC issuer URL (used for provider discovery).
|
|
Issuer string `json:"issuer" envconfig:"optional"`
|
|
// ClientID and ClientSecret identify CPM to the provider.
|
|
ClientID string `json:"client_id" envconfig:"optional"`
|
|
ClientSecret string `json:"client_secret" envconfig:"optional"`
|
|
// RedirectURL is the CPM callback URL registered with the provider,
|
|
// e.g. https://cpm.example.com/api/auth/oidc/callback.
|
|
RedirectURL string `json:"redirect_url" envconfig:"optional"`
|
|
// Scopes requested from the provider.
|
|
Scopes []string `json:"scopes" envconfig:"optional,default=openid;profile;email"`
|
|
// AllowedDomains optionally restricts JIT provisioning to email domains.
|
|
// Empty means any successfully authenticated user is allowed.
|
|
AllowedDomains []string `json:"allowed_domains" envconfig:"optional"`
|
|
}
|
|
|
|
// auth holds the authentication configuration.
|
|
type auth struct {
|
|
// Mode selects the authentication method: "local" (email + password)
|
|
// or "oidc" (external identity provider).
|
|
Mode string `json:"mode" envconfig:"optional,default=local"`
|
|
OIDC oidc `json:"oidc"`
|
|
}
|
|
|
|
// admin holds the seed credentials for the default local admin user, created
|
|
// on first startup when the database is empty.
|
|
type admin struct {
|
|
Email string `json:"email" envconfig:"optional,default=admin@example.com"`
|
|
Password string `json:"password" envconfig:"optional,default=changeme"`
|
|
}
|
|
|
|
// Configuration is the main configuration object
|
|
var Configuration struct {
|
|
DataFolder string `json:"data_folder" envconfig:"optional,default=/etc/caddy/"`
|
|
LogFolder string `json:"log_folder" envconfig:"optional,default=/var/log/caddy"`
|
|
CaddyFile string `json:"caddy_file" envconfig:"optional,default=/etc/caddy/Caddyfile"`
|
|
FrontendDir string `json:"frontend_dir" envconfig:"optional"`
|
|
Caddy caddy `json:"caddy"`
|
|
Auth auth `json:"auth"`
|
|
Admin admin `json:"admin"`
|
|
Log log `json:"log"`
|
|
}
|