# params class for glauth
class glauth::params (
  Boolean $debug                             = true,
  Boolean $syslog                            = true,
  Boolean $structuredlog                     = true,
  Boolean $watchconfig                       = true,
  Array   $packages                          = [
    'openldap-clients',
  ],

  Boolean $ldap_enabled                      = true,
  Stdlib::IP::Address $ldap_address          = '0.0.0.0',
  Stdlib::Port $ldap_port                    = 389,
  Boolean $ldap_tls                          = false,
  Stdlib::Absolutepath $ldap_tlscertpath     = '/etc/glauth/glauth.crt',
  Stdlib::Absolutepath $ldap_tlskeypath      = '/etc/glauth/glauth.key',

  Boolean $ldaps_enabled                     = false,
  Stdlib::IP::Address $ldaps_address         = '0.0.0.0',
  Stdlib::Port $ldaps_port                   = 636,
  Stdlib::Absolutepath $ldaps_cert           = '/etc/glauth/glauth.crt',
  Stdlib::Absolutepath $ldaps_key            = '/etc/glauth/glauth.key',

  String $backend_datastore                  = 'config',
  String $backend_basedn                     = 'dc=main,dc=unkin,dc=net',
  String $backend_nameformat                 = 'cn',
  String $backend_groupformat                = 'ou',
  Boolean $backend_anonymousdse              = true,
  String $backend_sshkeyattr                 = 'sshPublicKey',

  Boolean $behaviors_ignorecapabilities      = true,
  Boolean $behaviors_limitfailedbinds        = true,
  Integer $behaviors_numberoffailedbinds     = 3,
  Integer $behaviors_periodoffailedbinds     = 10,
  Integer $behaviors_blockfailedbindsfor     = 60,
  Integer $behaviors_prunesourcetableevery   = 600,
  Integer $behaviors_prunesourcesolderthan   = 600,

  Boolean $api_enabled                       = true,
  Boolean $api_internals                     = true,
  Boolean $api_tls                           = true,
  Stdlib::IP::Address $api_address           = '0.0.0.0',
  Stdlib::Port $api_port                     = 5555,
  Stdlib::Absolutepath $api_cert             = '/etc/glauth/cert.pem',
  Stdlib::Absolutepath $api_key              = '/etc/glauth/key.pem',

  String               $user                 = 'glauth',
  String               $group                = 'glauth',
  Stdlib::Absolutepath $bin_dir              = '/usr/local/bin',
  Stdlib::Absolutepath $bin_path             = "${bin_dir}/glauth",
  Stdlib::Absolutepath $config_dir           = '/etc/glauth',
  Stdlib::Absolutepath $config_path          = "${config_dir}/glauth.conf",
  Boolean              $service_enable       = true,
  String               $service_name         = 'glauth',
  String               $download_version     = '2.3.2',
  String               $download_url         = "https://git.query.consul/api/packages/unkinben/generic/glauth/${download_version}/glauth-linux-amd64",
  Boolean              $manage_defaults      = true,
){}