Working on audit

internal/config/config.go

@@ -12,10 +12,23 @@ import (
 type Config struct {
 	Server     ServerConfig     `toml:"server"`
 	Datasource DatasourceConfig `toml:"datasource"`
+	Audit      AuditConfig      `toml:"audit"`
 	// Groups are named sets of users, referenced by panel sharing rules.
 	Groups []GroupDef `toml:"groups"`
 }
 
+// AuditConfig controls the audit trail. When enabled, every user and automated
+// action that could affect the controlled system (signal writes, control-logic
+// changes) is recorded to a SQLite database for later review by audit staff.
+type AuditConfig struct {
+	Enabled bool   `toml:"enabled"`
+	DBPath  string `toml:"db_path"` // SQLite file; default {storage_dir}/audit.db
+	// Readers lists users or group names allowed to view the audit log. Empty
+	// leaves viewing unrestricted (any caller with read access). Anonymous /
+	// trusted-LAN callers are always permitted.
+	Readers []string `toml:"readers"`
+}
+
 // GroupDef is a named set of users defined as [[groups]] in the config file.
 type GroupDef struct {
 	Name    string   `toml:"name"`
@@ -141,6 +154,15 @@ func applyEnv(cfg *Config) {
 	if v := env("UOPI_SERVER_LOGIC_EDITORS"); v != "" {
 		cfg.Server.LogicEditors = strings.Fields(v)
 	}
+	if v := env("UOPI_AUDIT_ENABLED"); v != "" {
+		cfg.Audit.Enabled = (v == "true" || v == "YES")
+	}
+	if v := env("UOPI_AUDIT_DB_PATH"); v != "" {
+		cfg.Audit.DBPath = v
+	}
+	if v := env("UOPI_AUDIT_READERS"); v != "" {
+		cfg.Audit.Readers = strings.Fields(v)
+	}
 	if v := env("UOPI_EPICS_CA_ADDR_LIST"); v != "" {
 		cfg.Datasource.EPICS.CAAddrList = v
 	}