spec

type AccessControl struct {
	AccessAll  bool
	AccessOnly []string
}

type EndpointScorer func(endpoint string) (int, error)

type Network struct {
	Name    string
	Devices []NetworkDevice
}

type NetworkCensored struct {
	Name        string
	Devices     []NetworkDeviceCensored
	CensoredFor string
}

type NetworkDevice struct {
	NetworkDeviceCensored
	AccessControl
}

type NetworkDeviceCensored struct {
	Name string
	// Endpoints is a unordered list of endpoints on which the peer is available on.
	Endpoints []string
	// EndpointChosen is whether the endpoint was chosen.
	// This value should always be false on the server.
	ForwarderAndEndpointChosen bool
	UsesForwarder              bool
	// EndpointChosenIndex is the index of the chosen endpoint.
	// This value should always be zero on the server.
	EndpointChosenIndex int
	// ForwarderChosenIndex is the name of the chosen forwarder.
	// This value should always be zero on the server.
	ForwarderChosenIndex int
	// Addresses is a list of IP networks that this peer represents.
	Addresses []goal.IPNet

	// ListenPort is the port that WireGuard will listen on.
	// Set to 0 to not specify a port.
	// This can be set by this peer.
	ListenPort int
	// This can be set by this peer.
	PublicKey goal.Key
	// This can be set by this peer.
	PresharedKey *goal.Key
	// PersistentKeepalive specifies how often a packet is sent to keep a connection alive.
	// Set to 0 to disable persistent keepalive.
	// This can be set by this peer.
	PersistentKeepalive goal.Duration
	// TODO: forwarding (keep this commented out for now)
	// ForwardsFor is the list of devices (in the same network) that this peer has access to, and can fowrard packets to.
	// Note that IPv6 forwarding is not supported yet.
	// This can be set by this peer.
	ForwardsFor []string
}

type Spec struct {
	Networks []Network
}

type SpecCensored struct {
	Networks []NetworkCensored
}