cmd

type Options struct {
	Socket               string `env:"SOCKET"                 envDefault:"unix:///opt/kms/vaultkms.socket"`
	ForceSocketOverwrite bool   `env:"FORCE_SOCKET_OVERWRITE"`

	Debug bool `env:"DEBUG"`

	// vault server
	VaultAddress   string `env:"VAULT_ADDR"`
	VaultNamespace string `env:"VAULT_NAMESPACE"`

	// auth
	AuthMethod string `env:"AUTH_METHOD"`

	// token auth
	Token string `env:"TOKEN"`

	// approle auth
	AppRoleRoleID       string `env:"APPROLE_ROLE_ID"`
	AppRoleRoleSecretID string `env:"APPROLE_SECRET_ID"`
	AppRoleMount        string `env:"APPROLE_MOUNT"     envDefault:"approle"`

	// token refresh
	TokenRefreshInterval string `env:"TOKEN_REFRESH_INTERVAL" envDefault:"60s"`
	TokenRenewalSeconds  int    `env:"TOKEN_RENEWAL_SECONDS"  envDefault:"3600"`

	// transit
	TransitKey   string `env:"TRANSIT_KEY"   envDefault:"kms"`
	TransitMount string `env:"TRANSIT_MOUNT" envDefault:"transit"`

	// healthz check
	HealthPort string `env:"HEALTH_PORT" envDefault:"8080"`

	// Disable KMSv1 Plugin
	DisableV1 bool `env:"DISABLE_V1" envDefault:"false"`

	Version bool
}