model

type Certificate struct {
	ID     string
	Secret string

	// Domains is a list of domains valid for this domain.
	Domains []string
	// Main domain for "Common Name" field of cert.
	CommonName string

	// Let's Encrypt CertURL
	CertURL string
	// Let's Encrypt StableCertURL
	CertStableURL string

	PrivateKey        []byte
	Certificate       []byte
	IssuerCertificate []byte

	// Has this cert been issued yet?
	Issued bool

	// NotAfter
	Expiry time.Time

	// RewnewAt specifies the number of days before expiration a cert should be
	// renewed by.
	RenewAt int

	LastError error

	ModTime time.Time

	ACMEEmail        string
	ACMERegistration *registration.Resource
	ACMEKey          *ecdsa.PrivateKey
}

type ChallengeConfig struct {
	// AuthEmail is the Cloudflare account email
	AuthEmail string

	// AuthKey is the API key to use to then retrieve a Cloudflare API token.
	AuthKey string
}

type Config struct {
	// If JWTSecret is ever invalid, we generate a new one randomly.
	JWTSecret *auth.JWTSecret
	// SuperAdmin is the username of the SA account. If this is "" we allow
	// generation of a new one from the superadmin endpoint. (first time running)
	SuperAdmin string

	SessionKey []byte
}

type User struct {
	Name string
	Role string // RBAC role

	Hash string // Will always be an encoding of a password hash
}