{% extends "base.html" %}
{% load i18n %}
{% block title %}
    {% translate "Brute Force Detection Settings" %} - Eenos
{% endblock %}
{% block content %}
    <div class="eenos-page-header">
        <div>
            <h1 class="eenos-page-title">{% translate "Brute Force Detection Settings" %}</h1>
            <div class="eenos-page-subtitle">
                {% translate "Configure intrusion detection and automatic firewall protection for repeated login failures." %}
            </div>
        </div>
    </div>
    <nav class="eenos-breadcrumb" aria-label="{% translate 'Breadcrumb' %}">
        <a href="{% url 'dashboard' %}">{% translate "Dashboard" %}</a>
        <span class="eenos-breadcrumb-separator" aria-hidden="true">
            <i data-lucide="chevron-right"></i>
        </span>
        <span>{% translate "Security" %}</span>
        <span class="eenos-breadcrumb-separator" aria-hidden="true">
            <i data-lucide="chevron-right"></i>
        </span>
        <a href="{% url 'bfd_settings' %}">{% translate "Brute Force Detection" %}</a>
        <span class="eenos-breadcrumb-separator" aria-hidden="true">
            <i data-lucide="chevron-right"></i>
        </span>
        <span class="eenos-breadcrumb-current" aria-current="page">{% translate "Settings" %}</span>
    </nav>
    {% include "includes/form_alerts.html" %}
    <form method="POST" id="bfdSettingsForm" class="eenos-form">
        {% csrf_token %}
        <input type="hidden" name="savesettings" value="yes">
        <div class="row g-4 mb-4">
            <div class="col-12 col-lg-5">
                <div class="eenos-card h-100">
                    <div class="d-flex align-items-start justify-content-between gap-3 mb-4">
                        <div>
                            <div class="eenos-panel-title">{% translate "Protection Status" %}</div>
                            <div class="eenos-panel-subtitle">{% translate "Enable or disable brute force monitoring on this server." %}</div>
                        </div>
                        <i data-lucide="shield-check" class="eenos-card-action-icon"></i>
                    </div>
                    <fieldset class="border-0 p-0 m-0">
                        <legend class="form-label">{% translate "Brute Force Detection" %}</legend>
                        <div class="d-grid gap-3">
                            <label class="border rounded p-3 d-flex align-items-start gap-3"
                                   for="bfdStatusOn">
                                <input type="radio"
                                       class="form-check-input eenos-check-success mt-1"
                                       id="bfdStatusOn"
                                       name="status"
                                       value="on"
                                       required
                                       {% if settings.status != 'off' %}checked{% endif %}>
                                <span><span class="d-block fw-semibold">{% translate "Enabled" %}</span><span class="d-block text-muted small mt-1">{% translate "Detect failed logins and block attacking addresses automatically." %}</span></span>
                            </label>
                            <label class="border rounded p-3 d-flex align-items-start gap-3"
                                   for="bfdStatusOff">
                                <input type="radio"
                                       class="form-check-input eenos-check-danger mt-1"
                                       id="bfdStatusOff"
                                       name="status"
                                       value="off"
                                       required
                                       {% if settings.status == 'off' %}checked{% endif %}>
                                <span><span class="d-block fw-semibold">{% translate "Disabled" %}</span><span class="d-block text-muted small mt-1">{% translate "Stop monitoring authentication failures and automatic blocking." %}</span></span>
                            </label>
                        </div>
                    </fieldset>
                </div>
            </div>
            <div class="col-12 col-lg-7">
                <div class="eenos-card h-100">
                    <div class="d-flex align-items-start justify-content-between gap-3 mb-4">
                        <div>
                            <div class="eenos-panel-title">{% translate "Detection Threshold" %}</div>
                            <div class="eenos-panel-subtitle">{% translate "Choose how quickly BFD responds to repeated login failures." %}</div>
                        </div>
                        <i data-lucide="gauge" class="eenos-card-action-icon"></i>
                    </div>
                    <label for="failurecount" class="form-label">{% translate "Failure Count" %}</label>
                    <div class="input-group mb-3">
                        <span class="input-group-text"><i data-lucide="hash"></i></span>
                        <input type="number"
                               class="form-control"
                               id="failurecount"
                               name="failurecount"
                               min="1"
                               required
                               value="{{ settings.failurecount|default:3 }}"
                               data-parsley-min-message="{% translate 'Failure count must be at least 1.' %}">
                        <span class="input-group-text">{% translate "attempts" %}</span>
                    </div>
                    <div class="form-text mb-4">{% translate "An IP address is blocked when it reaches this number of failed authentication attempts." %}</div>
                    <div class="eenos-notice eenos-notice-warning">
                        <div class="eenos-notice-icon">
                            <i data-lucide="triangle-alert"></i>
                        </div>
                        <div class="eenos-notice-content">
                            <div class="eenos-notice-title">{% translate "Choose the threshold carefully" %}</div>
                            <div class="eenos-notice-text">{% translate "A very low value may block legitimate users who enter an incorrect password." %}</div>
                        </div>
                    </div>
                </div>
            </div>
        </div>
        <div class="eenos-card">
            <div class="d-flex align-items-start justify-content-between gap-3 mb-4">
                <div>
                    <div class="eenos-panel-title">{% translate "Firewall Integration" %}</div>
                    <div class="eenos-panel-subtitle">{% translate "Select the firewall service BFD will use to block detected attackers." %}</div>
                </div>
                <i data-lucide="shield" class="eenos-card-action-icon"></i>
            </div>
            <fieldset class="border-0 p-0 m-0">
                <legend class="visually-hidden">{% translate "Firewall Service" %}</legend>
                <div class="row g-3">
                    <div class="col-12 col-md-6">
                        <label class="border rounded p-3 d-flex align-items-start gap-3 h-100"
                               for="firewallCsf">
                            <input type="radio"
                                   class="form-check-input eenos-check-info mt-1"
                                   id="firewallCsf"
                                   name="firewall"
                                   value="csf"
                                   required
                                   {% if settings.firewall == 'csf' %}checked{% endif %}>
                            <span><span class="d-block fw-semibold">{% translate "ConfigServer Security & Firewall" %}</span><span class="d-block text-muted small mt-1">CSF</span></span>
                        </label>
                    </div>
                    <div class="col-12 col-md-6">
                        <label class="border rounded p-3 d-flex align-items-start gap-3 h-100"
                               for="firewallApf">
                            <input type="radio"
                                   class="form-check-input eenos-check-info mt-1"
                                   id="firewallApf"
                                   name="firewall"
                                   value="apf"
                                   required
                                   {% if settings.firewall == 'apf' %}checked{% endif %}>
                            <span><span class="d-block fw-semibold">{% translate "Advanced Policy Firewall" %}</span><span class="d-block text-muted small mt-1">APF</span></span>
                        </label>
                    </div>
                    <div class="col-12 col-md-6">
                        <label class="border rounded p-3 d-flex align-items-start gap-3 h-100"
                               for="firewallUfw">
                            <input type="radio"
                                   class="form-check-input eenos-check-info mt-1"
                                   id="firewallUfw"
                                   name="firewall"
                                   value="ufw"
                                   required
                                   {% if settings.firewall == 'ufw' %}checked{% endif %}>
                            <span><span class="d-block fw-semibold">{% translate "Uncomplicated Firewall" %}</span><span class="d-block text-muted small mt-1">UFW</span></span>
                        </label>
                    </div>
                    <div class="col-12 col-md-6">
                        <label class="border rounded p-3 d-flex align-items-start gap-3 h-100"
                               for="firewallIptables">
                            <input type="radio"
                                   class="form-check-input eenos-check-info mt-1"
                                   id="firewallIptables"
                                   name="firewall"
                                   value="iptables"
                                   required
                                   {% if settings.firewall == 'iptables' %}checked{% endif %}>
                            <span><span class="d-block fw-semibold">{% translate "Iptables" %}</span><span class="d-block text-muted small mt-1">{% translate "Linux packet filtering firewall" %}</span></span>
                        </label>
                    </div>
                </div>
            </fieldset>
        </div>
        <div class="d-flex flex-wrap justify-content-start gap-2 mt-4">
            <button type="button" class="btn btn-primary" id="saveBfdSettings"><i data-lucide="save"></i>{% translate "Save Settings" %}</button>
            <button type="button"
                    class="btn btn-outline-secondary"
                    data-bs-toggle="modal"
                    data-bs-target="#resetBfdModal"><i data-lucide="rotate-ccw"></i>{% translate "Reset to Default" %}</button>
        </div>
    </form>
    <form method="POST" id="resetBfdForm" class="d-none">
        {% csrf_token %}
        <input type="hidden" name="reset" value="yes">
    </form>
    <div class="modal fade"
         id="saveBfdModal"
         tabindex="-1"
         aria-labelledby="saveBfdModalLabel"
         aria-hidden="true">
        <div class="modal-dialog modal-dialog-centered">
            <div class="modal-content">
                <div class="modal-header">
                    <div>
                        <h5 class="modal-title d-flex align-items-center gap-2"
                            id="saveBfdModalLabel"><i data-lucide="save"></i>{% translate "Save BFD Settings" %}</h5>
                        <div class="text-muted small mt-1">{% translate "Apply the current brute force detection configuration." %}</div>
                    </div>
                    <button type="button"
                            class="btn-close"
                            data-bs-dismiss="modal"
                            aria-label="{% translate 'Close' %}"></button>
                </div>
                <div class="modal-body">
                    <div class="eenos-notice eenos-notice-info">
                        <div class="eenos-notice-icon">
                            <i data-lucide="shield-check"></i>
                        </div>
                        <div class="eenos-notice-content">
                            <div class="eenos-notice-title">{% translate "Confirm Settings" %}</div>
                            <div class="eenos-notice-text">{% translate "The updated BFD settings will be applied to this server." %}</div>
                        </div>
                    </div>
                </div>
                <div class="modal-footer">
                    <button type="button"
                            class="btn btn-outline-secondary"
                            data-bs-dismiss="modal">{% translate "Cancel" %}</button><button type="button" class="btn btn-primary" id="confirmSaveBfd"><i data-lucide="check"></i>{% translate "Save Settings" %}</button>
                </div>
            </div>
        </div>
    </div>
    <div class="modal fade"
         id="resetBfdModal"
         tabindex="-1"
         aria-labelledby="resetBfdModalLabel"
         aria-hidden="true">
        <div class="modal-dialog modal-dialog-centered">
            <div class="modal-content">
                <div class="modal-header">
                    <div>
                        <h5 class="modal-title d-flex align-items-center gap-2"
                            id="resetBfdModalLabel"><i data-lucide="rotate-ccw"></i>{% translate "Reset BFD Settings" %}</h5>
                        <div class="text-muted small mt-1">{% translate "Restore the default brute force detection configuration." %}</div>
                    </div>
                    <button type="button"
                            class="btn-close"
                            data-bs-dismiss="modal"
                            aria-label="{% translate 'Close' %}"></button>
                </div>
                <div class="modal-body">
                    <div class="eenos-notice eenos-notice-warning">
                        <div class="eenos-notice-icon">
                            <i data-lucide="triangle-alert"></i>
                        </div>
                        <div class="eenos-notice-content">
                            <div class="eenos-notice-title">{% translate "Reset all BFD settings?" %}</div>
                            <div class="eenos-notice-text">{% translate "Your current configuration will be replaced with the default settings." %}</div>
                        </div>
                    </div>
                </div>
                <div class="modal-footer">
                    <button type="button"
                            class="btn btn-outline-secondary"
                            data-bs-dismiss="modal">{% translate "Cancel" %}</button><button type="button" class="btn btn-warning" id="confirmResetBfd"><i data-lucide="rotate-ccw"></i>{% translate "Reset Settings" %}</button>
                </div>
            </div>
        </div>
    </div>
{% endblock %}
{% block extra_js %}
    <script>
      $(function () {
        const settingsForm = $("#bfdSettingsForm");
        $("#saveBfdSettings").on("click", function () {
          const parsleyForm = settingsForm.parsley();
          parsleyForm.validate();
          if (!parsleyForm.isValid()) return;
          bootstrap.Modal.getOrCreateInstance(document.getElementById("saveBfdModal")).show();
        });
        $("#confirmSaveBfd").on("click", function () { document.getElementById("bfdSettingsForm").submit(); });
        $("#confirmResetBfd").on("click", function () { document.getElementById("resetBfdForm").submit(); });
      });
    </script>
{% endblock %}