blob: 0ae1e60a0f3f4d502fe89e7066879c45211d0816 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
|
package config
import (
"errors"
"io"
"github.com/hashicorp/go-multierror"
"github.com/spf13/viper"
)
// Config holds the server configuration.
type Config struct {
Server `mapstructure:"server"`
Auth `mapstructure:"auth"`
SSH `mapstructure:"ssh"`
AWS `mapstructure:"aws"`
}
// unmarshalled holds the raw config.
type unmarshalled struct {
Server []Server `mapstructure:"server"`
Auth []Auth `mapstructure:"auth"`
SSH []SSH `mapstructure:"ssh"`
AWS []AWS `mapstructure:"aws"`
}
// Server holds the configuration specific to the web server and sessions.
type Server struct {
UseTLS bool `mapstructure:"use_tls"`
TLSKey string `mapstructure:"tls_key"`
TLSCert string `mapstructure:"tls_cert"`
Port int `mapstructure:"port"`
CookieSecret string `mapstructure:"cookie_secret"`
}
// Auth holds the configuration specific to the OAuth provider.
type Auth struct {
OauthClientID string `mapstructure:"oauth_client_id"`
OauthClientSecret string `mapstructure:"oauth_client_secret"`
OauthCallbackURL string `mapstructure:"oauth_callback_url"`
Provider string `mapstructure:"provider"`
ProviderOpts map[string]string `mapstructure:"provider_opts"`
UsersWhitelist []string `mapstructure:"users_whitelist"`
}
// SSH holds the configuration specific to signing ssh keys.
type SSH struct {
SigningKey string `mapstructure:"signing_key"`
AdditionalPrincipals []string `mapstructure:"additional_principals"`
MaxAge string `mapstructure:"max_age"`
Permissions []string `mapstructure:"permissions"`
}
// AWS holds Amazon AWS configuration.
// AWS can also be configured using SDK methods.
type AWS struct {
Region string `mapstructure:"region"`
AccessKey string `mapstructure:"access_key"`
SecretKey string `mapstructure:"secret_key"`
}
func verifyConfig(u *unmarshalled) error {
var err error
if len(u.SSH) == 0 {
err = multierror.Append(errors.New("missing ssh config block"))
}
if len(u.Auth) == 0 {
err = multierror.Append(errors.New("missing auth config block"))
}
if len(u.Server) == 0 {
err = multierror.Append(errors.New("missing server config block"))
}
if len(u.AWS) == 0 {
// AWS config is optional
u.AWS = append(u.AWS, AWS{})
}
return err
}
// ReadConfig parses a JSON configuration file into a Config struct.
func ReadConfig(r io.Reader) (*Config, error) {
u := &unmarshalled{}
v := viper.New()
v.SetConfigType("hcl")
if err := v.ReadConfig(r); err != nil {
return nil, err
}
if err := v.Unmarshal(u); err != nil {
return nil, err
}
if err := verifyConfig(u); err != nil {
return nil, err
}
return &Config{
Server: u.Server[0],
Auth: u.Auth[0],
SSH: u.SSH[0],
AWS: u.AWS[0],
}, nil
}
|
