nameserver

type ACL struct {
	ID       string
	Actions  []Action
	Prefixes []netip.Prefix
	TSIGKeys tsig.KeySet
	Zone     dnse.Name
}

type Action string

type CDSCDNSKEYPublish string

type Config struct {
	// ACLs are added to the ACL section of knot configurations allowing the
	// specified action for the remote.
	ACLs []ACL

	// AllowUpdates is set when dynamic updates are allowed.
	AllowUpdates bool

	BackgroundWorkers uint

	DNSSEC *DNSSECConfig

	// ExpireMinInterval is the minimum expiration time for a zone. Will
	// override the value set in the SOA.
	ExpireMinInterval Duration

	// Downstreams are other name servers that receive NOTIFY queries and are
	// allowed to do XFRs.
	Downstreams []Remote

	IXFRFromAXFR   bool
	Identity       string
	JournalContent JournalContent
	JournalDepth   uint
	JournalMaxSize Size
	Listen         []netip.AddrPort
	NoIXFRIn       bool
	NoIXFROut      bool
	NSID           string
	Refresh        Range[Duration]

	// Retry limits the time between a failed (incoming) zone transfer and
	// retrying the same transfer, to a minimum and a maximum.
	Retry Range[Duration]

	SerialModulo Modulo
	Storage      string

	// TCPRemoteIOTimeout sets a round-trip timeout for when the name server is
	// a TCP client to a remote server.
	//
	// Translates to Knot’s [tcp-remote-io-timeout].
	//
	// [tcp-remote-io-timeout]: https://www.knot-dns.cz/docs/latest/singlehtml/index.html#tcp-remote-io-timeout
	TCPRemoteIOTimeout *Duration

	// Upstreams are other name servers that can send NOTIFY queries and respond
	// to XFRs.
	Upstreams []Remote

	Verify *Verify
	ZONEMD
	ZoneFiles     dnse.NameMap[string]
	ZoneFilesDir  string
	ZoneFileLoad  ZoneFileLoad
	ZoneFilesSync *Duration
}

type DNSSECConfig struct {
	CDSCDNSKEYPublish        CDSCDNSKEYPublish
	DNSKeyTTL                Duration
	DNSSECKeyLabel           bool
	KASPDir                  string
	KSK, ZSK                 KeyConfig
	ManualKeyGeneration      bool
	MaxZoneTTL               Duration
	PKCS11                   *PKCS11
	PublishSafety            Duration
	PurgeKeys                *Duration
	RetireSafety             Duration
	SignaturesRefresh        Range[Duration]
	SignaturesValidity       Duration
	SignaturesValidityDNSKey Duration
	Workers                  uint64
	ZonePropagationDelay     Duration
}

type Duration time.Duration

type JournalContent string

type KeyAlgorithm uint8

type KeyConfig struct {
	Lifetime  Duration
	Algorithm KeyAlgorithm
	Size      uint64
}

type Modulo struct {
	R, M uint8
}

type Nameserver interface {
	io.Closer
	Configure(ctx context.Context, config *Config) error
	ReloadZone(ctx context.Context, zone dnse.Name) error
	Run(ctx context.Context, notifyStarted func()) error
}

type PKCS11 struct {
	ID                  []byte            `path:"id"`
	LibraryDescription  string            `path:"library-description"`
	LibraryManufacturer string            `path:"library-manufacturer"`
	LibraryVersion      string            `path:"library-version"`
	Manufacturer        string            `path:"manufacturer"`
	Model               string            `path:"model"`
	Object              string            `path:"object"`
	Serial              string            `path:"serial"`
	SlotDescription     string            `path:"slot-description"`
	SlotID              string            `path:"slot-id"`
	SlotManufacturer    string            `path:"slot-manufacturer"`
	Token               string            `path:"token"`
	Type                string            `path:"type"`
	VendorPath          map[string]string `path:",remain"`

	PINSource   string              `query:"pin-source"`
	PINValue    string              `query:"pin-value"`
	ModuleName  string              `query:"module-name"`
	ModulePath  string              `query:"module-path"`
	VendorQuery map[string][]string `query:",remain"`
}

type Range[T cmp.Ordered] [2]T

type Remote struct {
	Addrs           []netip.AddrPort
	Prefixes        []netip.Prefix
	TSIGClientKey   *tsig.Key
	TSIGTrustedKeys tsig.KeySet
	Zone            dnse.Name
}

type Size struct {
	Size uint64
	Unit string
}

type Verify struct {
	Addresses []netip.AddrPort
	Command   []string
	Parallel  uint64
	Port      uint16
	Stdin     bool
	Timeout   Duration
}

type ZONEMD int

type ZoneFileLoad string