/**
 * ACME configuration for automated TLS certificate issuance via Let's Encrypt.
 *
 * Persisted as a singleton `AcmeConfigDoc` in the DcRouterDb.
 *
 * Managed via the OpsServer UI at **Domains > Certificates > Settings**.
 */
export interface IAcmeConfig {
    /** Contact email used for Let's Encrypt account registration. */
    accountEmail: string;
    /** Whether ACME is enabled. If false, no certs are issued via ACME. */
    enabled: boolean;
    /** True = Let's Encrypt production, false = staging. */
    useProduction: boolean;
    /** Whether to automatically renew certs before expiry. */
    autoRenew: boolean;
    /** Renew when a cert has fewer than this many days of validity left. */
    renewThresholdDays: number;
    /** Unix ms timestamp of last config change. */
    updatedAt: number;
    /** Who last updated the config (userId or 'seed' / 'system'). */
    updatedBy: string;
}
