{% extends "base.html" %}
{% from "macros.html" import csrf_field %}
{% block title %}Zugangsdaten{% endblock %}
{% block content %}
<h1>Zugangsdaten</h1>
<p class="muted small">Einmal hinterlegen, in beliebig vielen Anbindungen auswählen. Passwörter und private Schlüssel
  liegen verschlüsselt in der Datenbank und werden nie angezeigt.</p>

<h2>Passwörter <a class="legend-help" href="/help#zugangsdaten" title="Hilfe">?</a></h2>
<p class="muted small">Für SMB-Freigaben und SFTP-Server mit Passwort. Ein neues Passwort gilt sofort für alle Anbindungen, die es nutzen.</p>
{% if not passwords %}<p class="muted">Noch keine Passwörter gespeichert.</p>{% endif %}
<div class="stack">
{% for p in passwords %}
<div class="card" id="cred-{{ p.id }}">
  <div class="row spread">
    <div><strong>{{ p.name }}</strong> <span class="badge">{% if p.domain %}{{ p.domain }}\{% endif %}{{ p.username }}</span>
      {% if p.used_by %}<span class="badge ok">benutzt von {{ p.used_by|join(', ') }}</span>{% else %}<span class="badge">unbenutzt</span>{% endif %}</div>
    <div class="row">
      <details class="rename"><summary class="btn small">Ändern</summary>
        <form class="stack" method="post" action="/credentials/{{ p.id }}/password">{{ csrf_field(csrf) }}
          <input type="text" name="username" value="{{ p.username }}" aria-label="Benutzer" required>
          <input type="text" name="domain" value="{{ p.domain or '' }}" placeholder="Domäne (optional)" aria-label="Domäne">
          <input type="password" name="password" placeholder="neues Passwort (leer = unverändert)" aria-label="Passwort" autocomplete="new-password">
          <button class="small primary">Speichern</button></form></details>
      <details class="rename"><summary class="btn small">Umbenennen</summary>
        <form class="row" method="post" action="/credentials/{{ p.id }}/rename">{{ csrf_field(csrf) }}
          <input type="text" name="name" value="{{ p.name }}" aria-label="Neuer Name" required maxlength="100">
          <button class="small primary">Speichern</button></form></details>
      <form class="inline" method="post" action="/credentials/{{ p.id }}/delete" data-confirm="„{{ p.name }}“ löschen?">{{ csrf_field(csrf) }}
        <button class="small danger"{% if p.used_by %} disabled title="Wird noch benutzt"{% endif %}>Löschen</button></form>
    </div>
  </div>
  <div class="small muted">angelegt {{ p.created_at|localdt }}</div>
</div>
{% endfor %}
</div>
<form class="form card stack" method="post" action="/credentials/passwords">{{ csrf_field(csrf) }}
  <div class="fields">
    <div class="field"><label for="p-name">Name</label><input id="p-name" type="text" name="name" placeholder="z. B. NAS-Scanner" required maxlength="100"></div>
    <div class="field"><label for="p-user">Benutzer</label><input id="p-user" type="text" name="username" required autocomplete="off"></div>
    <div class="field"><label for="p-pass">Passwort</label><input id="p-pass" type="password" name="password" required autocomplete="new-password"></div>
    <div class="field"><label for="p-dom">Domäne (optional)</label><input id="p-dom" type="text" name="domain"></div>
  </div>
  <button class="primary">Passwort speichern</button>
</form>

<h2>SSH-Schlüssel</h2>
<p class="muted small">Für SFTP-Anbindungen. Ein Schlüssel kann von mehreren Anbindungen benutzt werden; den Benutzernamen legt jede Anbindung selbst fest.</p>

{% if not keys %}<p class="muted">Noch keine Schlüssel gespeichert.</p>{% endif %}
<div class="stack">
{% for k in keys %}
<div class="card" id="key-{{ k.id }}">
  <div class="row spread">
    <div><strong>{{ k.name }}</strong> <span class="badge">{{ k.key_type.removeprefix('ssh-') }}</span>
      {% if k.used_by %}<span class="badge ok">benutzt von {{ k.used_by|join(', ') }}</span>{% else %}<span class="badge">unbenutzt</span>{% endif %}</div>
    <div class="row">
      <details class="rename"><summary class="btn small">Umbenennen</summary>
        <form class="row" method="post" action="/credentials/{{ k.id }}/rename">{{ csrf_field(csrf) }}
          <input type="text" name="name" value="{{ k.name }}" aria-label="Neuer Name" required maxlength="100">
          <button class="small primary">Speichern</button></form></details>
      <form class="inline" method="post" action="/credentials/{{ k.id }}/delete" data-confirm="Schlüssel „{{ k.name }}“ löschen?">{{ csrf_field(csrf) }}
        <button class="small danger"{% if k.used_by %} disabled title="Wird noch benutzt"{% endif %}>Löschen</button></form>
    </div>
  </div>
  <div class="small muted">Fingerabdruck <span class="mono">{{ k.fingerprint }}</span> · angelegt {{ k.created_at|localdt }}</div>
  <details class="small"><summary>Öffentlicher Schlüssel / authorized_keys</summary>
    <div class="field"><label>Zeile für <code>~/.ssh/authorized_keys</code> (nur SFTP erlaubt, empfohlen)</label>
      <pre class="mono card" id="auth-{{ k.id }}">{{ k.authorized_keys_line }}</pre>
      <button class="small" type="button" data-copy="auth-{{ k.id }}">kopieren</button></div>
    <div class="field"><label>Öffentlicher Schlüssel</label>
      <pre class="mono card" id="pub-{{ k.id }}">{{ k.public_key }}</pre>
      <button class="small" type="button" data-copy="pub-{{ k.id }}">kopieren</button></div>
  </details>
</div>
{% endfor %}
</div>

<h3>Neuen Schlüssel erzeugen</h3>
<form class="form card row" method="post" action="/credentials/keys/generate">{{ csrf_field(csrf) }}
  <input class="w-auto" type="text" name="name" placeholder="Name, z. B. paperless-lxc" aria-label="Name" required maxlength="100">
  <button class="primary">Ed25519-Schlüssel erzeugen</button>
</form>

<h3>Vorhandenen Schlüssel importieren</h3>
<form class="form card stack" method="post" action="/credentials/keys/import">{{ csrf_field(csrf) }}
  <div class="fields">
    <div class="field"><label for="k-name">Name</label><input id="k-name" type="text" name="name" required maxlength="100"></div>
    <div class="field"><label for="k-pass">Passphrase (falls vorhanden)</label><input id="k-pass" type="password" name="passphrase" autocomplete="off"></div>
    <div class="field wide"><label for="k-priv">Privater Schlüssel</label>
      <textarea id="k-priv" name="private_key" class="mono" rows="8" autocomplete="off" spellcheck="false"
        placeholder="-----BEGIN OPENSSH PRIVATE KEY-----&#10;…&#10;-----END OPENSSH PRIVATE KEY-----" required></textarea>
      <span class="hint">Ed25519, ECDSA oder RSA (mind. 2048 Bit), OpenSSH- oder PEM-Format. Eine Passphrase wird nur zum Entschlüsseln benutzt.</span></div>
  </div>
  <button>Importieren</button>
</form>
{% endblock %}