export interface ICloudlyS3BackupTargetDescriptor {
    type: 's3';
    endpoint: string;
    bucket: string;
    region?: string;
    port?: number;
    useSsl?: boolean;
}
export interface ICloudlyNfsBackupTargetDescriptor {
    type: 'nfs';
    path: string;
}
export interface ICloudlySmbBackupTargetDescriptor {
    type: 'smb';
    host: string;
    share: string;
    domain?: string;
    port?: number;
}
export type TCloudlyBackupTargetDescriptor = ICloudlyS3BackupTargetDescriptor | ICloudlyNfsBackupTargetDescriptor | ICloudlySmbBackupTargetDescriptor;
/** Public runtime-configurable settings. No serialized credential belongs here. */
export interface ICloudlySettings {
    deploymentArchiveRetentionDays?: number;
    backupExternalTarget?: TCloudlyBackupTargetDescriptor;
    backupNodeCacheKeepDays?: number;
    dcrouterGatewayUrl?: string;
    dcrouterGatewayClientId?: string;
    dcrouterTargetHost?: string;
    dcrouterTargetPort?: number;
    dcrouterTargetHostsByNode?: Record<string, string>;
    dcrouterMailSubmissionHost?: string;
    dcrouterMailSubmissionPort?: number;
    dcrouterMailSubmissionTlsMode?: 'plain' | 'starttls' | 'implicitTls';
    dcrouterMailForwardTargetHost?: string;
    dcrouterMailForwardTargetHostsByNode?: Record<string, string>;
    corebuildWorkerUrl?: string;
    corebuildWorkerUrls?: string[];
}
export declare const cloudlySystemSecretOwner: Readonly<{
    readonly kind: "system";
    readonly systemId: "cloudly-settings";
}>;
export declare const cloudlySystemSecretManagementScope: "system:cloudly-settings";
/** Stable keys for values removed from serialized Cloudly settings. */
export declare const cloudlySystemSecretKeys: Readonly<{
    readonly hetznerToken: "HETZNER_TOKEN";
    readonly cloudflareToken: "CLOUDFLARE_TOKEN";
    readonly backupExternalTargetCredentials: "BACKUP_EXTERNAL_TARGET_CREDENTIALS";
    readonly dcrouterGatewayApiToken: "DCROUTER_GATEWAY_API_TOKEN";
    readonly baseosJoinToken: "BASEOS_JOIN_TOKEN";
    readonly corebuildWorkerToken: "COREBUILD_WORKER_TOKEN";
    readonly corebuildWorkers: "COREBUILD_WORKERS";
    readonly awsAccessKey: "AWS_ACCESS_KEY";
    readonly awsSecretKey: "AWS_SECRET_KEY";
    readonly awsRegion: "AWS_REGION";
    readonly digitalOceanToken: "DIGITALOCEAN_TOKEN";
    readonly azureClientId: "AZURE_CLIENT_ID";
    readonly azureClientSecret: "AZURE_CLIENT_SECRET";
    readonly azureTenantId: "AZURE_TENANT_ID";
    readonly azureSubscriptionId: "AZURE_SUBSCRIPTION_ID";
    readonly googleCloudKey: "GOOGLE_CLOUD_KEY";
    readonly googleCloudProjectId: "GOOGLE_CLOUD_PROJECT_ID";
    readonly vultrApiKey: "VULTR_API_KEY";
    readonly linodeToken: "LINODE_TOKEN";
    readonly ovhApplicationKey: "OVH_APPLICATION_KEY";
    readonly ovhApplicationSecret: "OVH_APPLICATION_SECRET";
    readonly ovhConsumerKey: "OVH_CONSUMER_KEY";
    readonly scalewayAccessKey: "SCALEWAY_ACCESS_KEY";
    readonly scalewaySecretKey: "SCALEWAY_SECRET_KEY";
    readonly scalewayOrganizationId: "SCALEWAY_ORGANIZATION_ID";
}>;