v1alpha1

type AutoConfig struct {
	// Enabled is the flag to enable the autoconfig deployment
	// +optional
	// +kubebuilder:default=true
	Enabled *bool `json:"enabled,omitempty"`
	// Deployment is the autoconfig deployment configuration
	// +optional
	Deployment AutoConfigDeployment `json:"deployment,omitempty"`
	// Ingress is the optional ingress configuration
	// +optional
	Ingress IngressConfig `json:"ingress,omitempty"`
}

type AutoConfigDeployment struct {
	DeploymentConfig `json:",inline"`
	// Image is the github.com/linka-cloud/go-autoconfig image to use
	// +kubebuilder:validation:Required
	// +kubebuilder:default="docker.io/linkacloud/autoconfig:latest"
	Image string `json:"image,omitempty"`
}

type DeploymentConfig struct {
	// ServiceAccountName is the name of the service account to use for the deployment
	// +optional
	ServiceAccountName string `json:"serviceAccountName,omitempty"`
	// Annotations is the optional annotations to add to the deployment
	// +optional
	Annotations map[string]string `json:"annotations,omitempty"`
	// Labels is the optional labels to add to the deployment
	// +optional
	Labels map[string]string `json:"labels,omitempty"`
	// Affinity is the optional affinity configuration for the deployment
	// +optional
	Affinity *corev1.Affinity `json:"affinity,omitempty"`
	// Strategy is the deployment strategy to use to replace existing pods with new ones.
	// +optional
	Strategy appsv1.DeploymentStrategy `json:"strategy,omitempty"`
	// SecurityContext is the optional security context for the deployment
	// +optional
	SecurityContext *corev1.PodSecurityContext `json:"securityContext,omitempty"`
	// TopologySpreadConstraints is the optional topology spread constraints configuration for the deployment
	// +optional
	TopologySpreadConstraints []corev1.TopologySpreadConstraint `json:"topologySpreadConstraints,omitempty"`
	// Tolerations are the optional toleration configurations for the deployment
	// +optional
	Tolerations []corev1.Toleration `json:"toleration,omitempty"`
	// NodeSelector is the optional node selector configuration for the deployment
	// +optional
	NodeSelector map[string]string `json:"nodeSelector,omitempty"`
	// Resources is the optional resource configuration for the deployment
	// +optional
	Resources corev1.ResourceRequirements `json:"resources,omitempty"`
	// Env is extra environment variables to pass to the mail server container
	// It can be used to override the default configuration
	// +optional
	Env []corev1.EnvVar `json:"env,omitempty"`
	// VolumeMounts is the optional extra volume mounts configuration for the deployment
	VolumeMounts []corev1.VolumeMount `json:"volumeMounts,omitempty"`
	// Volumes is the optional extra volumes configuration for the deployment
	Volumes []corev1.Volume `json:"volumes,omitempty"`
}

type Features struct {
	// POP3 enables the POP3 protocol
	// +optional
	// +kubebuilder:default=false
	POP3 *bool `json:"pop3,omitempty"`
	// SpoofProtection enables the Spoof Protection feature
	// +optional
	// +kubebuilder:default=true
	SpoofProtection *bool `json:"spoofProtection,omitempty"`
	// Clamav enables clamav
	// +optional
	// +kubebuilder:default=false
	Clamav *bool `json:"clamav,omitempty"`
	// Amavis enables amaivs
	// +optional
	// +kubebuilder:default=true
	Amavis *bool `json:"amavis,omitempty"`
	// Fail2Ban enables fail2ban
	// +optional
	// +kubebuilder:default=true
	Fail2ban *bool `json:"fail2ban,omitempty"`
	// ManageSieve enables managesieve
	// +optional
	// +kubebuilder:default=true
	ManageSieve *bool `json:"manageSieve,omitempty"`
	// Quota enables quota
	// +optional
	// +kubebuilder:default=true
	Quotas *bool `json:"quotas,omitempty"`
	// Spamassassin enables spamassassin
	// +optional
	// +kubebuilder:default=true
	Spamassassin *bool `json:"spamassassin,omitempty"`
	// SpamassassinKam enables spamassassin kam
	// +optional
	// +kubebuilder:default=false
	SpamassassinKam *bool `json:"spamassassinKam,omitempty"`
	// Postgrey enables postgrey
	// +optional
	// +kubebuilder:default=false
	Postgrey *bool `json:"postgrey,omitempty"`
	// LDAP is the optional LDAP configuration
	// It expects an Active Directory like server
	// LDAP is not supported yet
	// +optional
	LDAP LDAPConfig `json:"ldap,omitempty"`
}

type IPv4 string

type IngressConfig struct {
	// Annotations is the optional annotations to add to the ingress
	// +optional
	Annotations map[string]string `json:"annotations,omitempty"`
}

type LDAPConfig struct {
	// Enabled enables the LDAP configuration
	// +optional
	Enabled bool `json:"enabled,omitempty"`
	// Host is the LDAP server host without ldap:// or ldaps://
	// Only TLS and StartTLS are supported
	// +kubebuilder:validation:Required
	Host string `json:"host,omitempty"`
	// Port is the LDAP server port
	// +kubebuilder:validation:Required
	Port int `json:"port,omitempty"`
	// StartTLS makes the connection should use StartTLS
	StartTLS bool `json:"startTLS,omitempty"`
	// Nameserver is the DNS server to use for the LDAP connection
	// +optional
	Nameserver *IPv4 `json:"nameserver,omitempty"`

	// BindSecret is the name of the secret containing the bind DN and password
	// It expects the following keys:
	// - bindDN: the DN of the LDAP lookup account
	// - bindPW: the password of the LDAP lookup account
	// +kubebuilder:validation:Required
	BindSecret string `json:"bindSecret,omitempty"`

	// SearchBase is the LDAP base where to search for users
	// +kubebuilder:validation:Required
	SearchBase string `json:"searchBase,omitempty"`
	// SearchFilter is the LDAP filter to use to search for users
	// +kubebuilder:validation:Required
	UserFilter string `json:"userFilter,omitempty"`
}

type MailServer struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   MailServerSpec   `json:"spec,omitempty"`
	Status MailServerStatus `json:"status,omitempty"`
}

type MailServerList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []MailServer `json:"items"`
}

type MailServerSpec struct {
	// Domain is the mail server domain name
	// +kubebuilder:validation:Required
	Domain string `json:"domain,omitempty"`
	// TODO(adphi): add DisableDNS option
	// DNSTTL is the TTL for the all the mail server's dns records
	// +kubebuilder:validation:Optional
	// +kubebuilder:default:=60
	DNSTTL uint32 `json:"dnsTTL,omitempty"`
	// SPF is the optional SPF configuration
	// If empty, the SPF record will be set to "v=spf1 mx ip4:$PUBLIC_IP -all"
	// $PUBLIC_IP will be replaced by the public IP of the mail server using `curl ifconfig.me`
	// +optional
	SPF string `json:"spf,omitempty"`
	// DMARC is the optional DMARC configuration
	// +optional
	// +kubebuilder:default="v=DMARC1; p=reject; rua=mailto:postmaster@{{ .Domain }}; ruf=mailto:postmaster@{{ .Domain }}; fo=0; adkim=r; aspf=r; pct=100; rf=afrf; ri=86400; sp=quarantine"
	DMARC string `json:"dmarc,omitempty"`
	// Image is the docker-mailserver image to use
	// +kubebuilder:validation:Required
	// +kubebuilder:default="docker.io/mailserver/docker-mailserver:9.1.0"
	Image            string `json:"image,omitempty"`
	DeploymentConfig `json:",inline"`

	// AutoConfig is the autoconfig deployment configuration
	// +optional
	AutoConfig AutoConfig `json:"autoconfig,omitempty"`
	// LoadBalancerClass is the optional load balancer class to use ofr the service
	// +optional
	LoadBalancerClass *string `json:"loadBalancerClass,omitempty"`
	// LoadBalancerIP is the optional IP address to request for the load balancer
	// +optional
	LoadBalancerIP *IPv4 `json:"loadBalancerIP,omitempty"`
	// OverrideIP is the optional IP address to use for the domain A record
	// +optional
	OverrideIP *IPv4 `json:"overrideIP,omitempty"`
	// Replicas is the number of replicas of the mail server
	// +kubebuilder:validation:Minimum=0
	// +kubebuilder:default=1
	Replicas *int32 `json:"replicas,omitempty"`
	// IssuerRef is the reference to the Cert Manager issuer to use for the certificate
	// +kubebuilder:validation:Required
	IssuerRef cmmeta.ObjectReference `json:"issuerRef"`

	// Features is the list of features to enable
	// By default all features are enabled
	// +optional
	Features Features `json:"features,omitempty"`

	// TODO(adphi): add custom config mounts support for the MailServer Deployment
	// Volume is the optional volume configuration
	// +optional
	Volume VolumeConfig `json:"volume,omitempty"`

	// Traefik is the optional Traefik configuration
	// +optional
	Traefik *TraefikConfig `json:"traefik,omitempty"`
}

type MailServerStatus struct {
	Domain         string `json:"domain,omitempty"`
	Replicas       int32  `json:"replicas,omitempty"`
	Selector       string `json:"selector"`
	VolumeSize     string `json:"volumeSize,omitempty"`
	LoadBalancerIP string `json:"loadBalancerIP,omitempty"`
	Traefik        *bool  `json:"traefik"`
	AutoConfig     *bool  `json:"autoconfig"`
}

type TraefikConfig struct {
	// CRDs enables the Traefik IngressRoute and Middleware Custom Resource Definitions usage
	// +optional
	CRDs bool `json:"crds,omitempty"`
	// EntryPoints is the list of entry points to use for the Traefik IngressRoute
	Entrypoints TraefikEntrypoints `json:"entrypoints,omitempty"`
}

type TraefikEntrypoints struct {
	// HTTP is the optional HTTP entrypoint configuration
	// +optional
	// +kubebuilder:default="web"
	HTTP string `json:"http,omitempty"`
	// HTTPS is the optional HTTPS entrypoint configuration
	// +optional
	// +kubebuilder:default="websecure"
	HTTPS string `json:"https,omitempty"`
}

type VolumeConfig struct {
	// StorageClass is the name of the storage class to use
	// +optional
	// +kubebuilder:default=""
	StorageClass string `json:"storageClass,omitempty"`
	// Size is the size of the volume, defaults to 1Gi
	// +optional
	// +kubebuilder:default="1Gi"
	Size string `json:"size,omitempty"`
	// AccessModes is the access modes to use, defaults to ReadWriteMany
	// +optional
	// +kubebuilder:default="ReadWriteMany"
	AccessMode corev1.PersistentVolumeAccessMode `json:"accessMode,omitempty"`
}