# =============================================================================
# TFM aInventory - Network Configuration Schema (v1.12.0)
# =============================================================================
# Purpose: Network ports, SSL settings, and proxy configuration.
# =============================================================================

# --- Port Assignments ---
ports:
  # Host-side port for HTTP backend
  # Default: 8916
  # Environment: NETWORK_PORTS_BACKEND_PORT or BACKEND_PORT
  backend_port: 8916

  # Host-side port for HTTP frontend
  # Default: 8917
  # Environment: NETWORK_PORTS_FRONTEND_PORT or FRONTEND_PORT
  frontend_port: 8917

  # Host-side port for HTTPS backend (via Caddy)
  # Default: 8918
  # Environment: NETWORK_PORTS_BACKEND_SSL_PORT or BACKEND_SSL_PORT
  backend_ssl_port: 8918

  # Host-side port for HTTPS frontend (via Caddy)
  # Default: 8919
  # Environment: NETWORK_PORTS_FRONTEND_SSL_PORT or FRONTEND_SSL_PORT
  frontend_ssl_port: 8919

# --- SSL & Security ---
ssl:
  # Enable SSL/TLS termination via reverse proxy?
  # Default: true
  # Environment: NETWORK_SSL_ENABLED
  ssl_enabled: true

  # Path to SSL certificate (if not using Caddy's auto-HTTPS)
  # Environment: NETWORK_SSL_CERTIFICATE_PATH
  certificate_path: ""

  # Path to SSL private key
  # Path to SSL private key
  key_path: ""

  # --- Master Infrastructure Settings ---
  # Establish this file as the SSOT for network topology.
  application:
  # The IP address or hostname of the server (Used for CORS and Frontend API)
  # Default: localhost
  # Environment: SERVER_IP
  server_ip: "localhost"

  # Comma-separated list of extra allowed CORS origins (IPs/FQDNs/Subnets)
  # Environment: EXTRA_ALLOWED_ORIGINS
  cors_origins: ""