import { z } from 'zod';

export const configSchema = z.object({
  server: z
    .object({
      // port of web server
      port: z.coerce.number().default(8080),

      // space seperated list of allowed cors domains
      cors: z.string().default(''),

      // disable cross origin restrictions, allow any site.
      // overwrites the cors option above
      allowAnySite: z.coerce.boolean().default(false),

      // should it trust reverse proxy headers? (for ip gathering)
      trustProxy: z.coerce.boolean().default(false),

      // prefix for where the instance is run on. for example set it to /backend if you're hosting it on example.com/backend
      // if this is set, do not apply url rewriting before proxing
      basePath: z.string().default('/'),
    })
    .default({}),
  logging: z
    .object({
      // format of the logs, JSON is recommended for production
      format: z.enum(['json', 'pretty']).default('pretty'),

      // show debug logs?
      debug: z.coerce.boolean().default(false),
    })
    .default({}),
  postgres: z.object({
    // connection URL for postgres database
    connection: z.string(),

    // run all migrations on boot of the application
    migrateOnBoot: z.coerce.boolean().default(false),

    // try to sync the schema on boot, useful for development
    // will always keep the database schema in sync with the connected database
    // it is extremely destructive, do not use it EVER in production
    syncSchema: z.coerce.boolean().default(false),

    // Enable debug logging for MikroORM - Outputs queries and entity management logs
    // Do NOT use in production, leaks all sensitive data
    debugLogging: z.coerce.boolean().default(false),
  }),
  crypto: z.object({
    // session secret. used for signing session tokens
    sessionSecret: z.string().min(32),
  }),
  meta: z.object({
    // name and description of this backend
    // this is displayed to the client when making an account
    name: z.string().min(1),
    description: z.string().min(1).optional(),
  }),
  captcha: z
    .object({
      // enabled captchas on register
      enabled: z.coerce.boolean().default(false),

      // captcha secret
      secret: z.string().min(1).optional(),

      clientKey: z.string().min(1).optional(),
    })
    .default({}),
  ratelimits: z
    .object({
      // enabled captchas on register
      enabled: z.coerce.boolean().default(false),
      redisUrl: z.string().optional(),
    })
    .default({}),
});