"use strict";

function deepFreeze(obj) {
  for (const name of Reflect.ownKeys(obj)) {
    const value = obj[name];
    if ((value && typeof value === "object") ||
        typeof value === "function") deepFreeze(value);
  } return Object.freeze(obj);
}

Math.clamp ||= ((x,l,h) => Math.max(l,Math.min(x,h)));
const PORT = Math.clamp(+process.env.PORT||8080, 1, 65535);
const HOST = process.env.HOST||"0.0.0.0";

module.exports = deepFreeze({
  PORT: Math.clamp(+process.env.PORT||8080, 1, 65535),
  HOST: process.env.HOST||"0.0.0.0",
  DOMAIN: "localhost",
  SECURE: false, // i.e. served over https

  auth: {
    TOKEN_RENEW_AGE: 15*60, // 15 mins
    TOKEN_MAX_AGE: 30*86400, // 30 days
    TOKEN_LENGTH: 24, // bytes
    SESSION_ID_LENGTH: 12,
    USERNAME_MAX_LENGTH: 128,
    PASSWORD_MIN_LENGTH: 8,
    PASSWORD_MAX_LENGTH: 512, // Avoid DDOS
    RATE_LIMIT_MAX_LEVEL: 16,
    RATE_LIMIT_MAX_WAITING: 512,
    fingerprintIP: req =>
      //req.headers["cf-connecting-ip"] ||
      //req.headers["x-forwarded-for"] ||
      req.socket.remoteAddress,
  },
});