{% extends "base.html" %}
{% block title %}Seguranca{% endblock %}
{% set active = "security" %}
{% block content %}
<style>
.status-dot {
  display: inline-block;
  width: 10px; height: 10px;
  border-radius: 50%;
  margin-right: 6px;
}
.status-dot.active { background: #28a745; box-shadow: 0 0 6px rgba(40,167,69,0.5); }
.status-dot.inactive { background: #dc3545; box-shadow: 0 0 6px rgba(220,53,69,0.5); }
</style>

<h4 class="mb-3 fw-bold">🔒 Seguranca</h4>

<div class="row g-4 mb-4">

  <!-- Card GeoIP -->
  <div class="col-md-6">
    <div class="card shadow-sm h-100 border-0">
      <div class="card-header bg-white d-flex justify-content-between align-items-center border-bottom-0 pt-3 px-4">
        <div>
          <h6 class="mb-0 fw-bold">GeoIP &mdash; Bloqueio por Pais</h6>
          <small class="text-muted">Restringe acesso por localizacao geografica</small>
        </div>
        <span class="badge fs-6 px-3 py-2 rounded-pill {% if geo_active and geo_rules %}bg-success bg-opacity-10 text-success{% else %}bg-secondary bg-opacity-10 text-secondary{% endif %}">
          <span class="status-dot {% if geo_active and geo_rules %}active{% else %}inactive{% endif %}"></span>
          {% if geo_active and geo_rules %}ATIVO{% else %}INATIVO{% endif %}
        </span>
      </div>
      <div class="card-body px-4 pt-2">
        <div class="d-flex align-items-center gap-3 mb-3">
          <div class="rounded-3 bg-light p-3 text-center" style="min-width:80px">
            <div class="fw-bold fs-4 text-dark">{{ geo_entries }}</div>
            <small class="text-muted">Blocos BR</small>
          </div>
          {% if iptables_stats %}
          <div class="rounded-3 bg-light p-3 text-center" style="min-width:80px">
            <div class="fw-bold fs-4 text-dark">{{ iptables_stats.total }}</div>
            <small class="text-muted">Pacotes bloqueados</small>
          </div>
          {% endif %}
        </div>
        {% if iptables_stats %}
        <div class="row g-2 mb-3 small text-center">
          <div class="col-3">
            <div class="bg-danger bg-opacity-10 text-danger rounded-2 py-1 fw-bold">{{ iptables_stats.sip }}</div>
            <span class="text-muted">SIP</span>
          </div>
          <div class="col-3">
            <div class="bg-danger bg-opacity-10 text-danger rounded-2 py-1 fw-bold">{{ iptables_stats.http }}</div>
            <span class="text-muted">HTTP</span>
          </div>
          <div class="col-3">
            <div class="bg-danger bg-opacity-10 text-danger rounded-2 py-1 fw-bold">{{ iptables_stats.https }}</div>
            <span class="text-muted">HTTPS</span>
          </div>
          <div class="col-3">
            <div class="bg-danger bg-opacity-10 text-danger rounded-2 py-1 fw-bold">{{ iptables_stats.rtp }}</div>
            <span class="text-muted">RTP</span>
          </div>
        </div>
        {% endif %}
        <form action="/app/security/geoip/toggle" method="post">
          <button type="submit" class="btn w-100 py-2 {% if geo_active and geo_rules %}btn-outline-danger{% else %}btn-success{% endif %}">
            {% if geo_active and geo_rules %}
              🔴 Desativar GeoIP
            {% else %}
              🟢 Ativar GeoIP
            {% endif %}
          </button>
        </form>
      </div>
    </div>
  </div>

  <!-- Card Fail2ban -->
  <div class="col-md-6">
    <div class="card shadow-sm h-100 border-0">
      <div class="card-header bg-white d-flex justify-content-between align-items-center border-bottom-0 pt-3 px-4">
        <div>
          <h6 class="mb-0 fw-bold">🛡️ Fail2ban</h6>
          <small class="text-muted">Protecao contra tentativas de invasao</small>
        </div>
        <span class="badge fs-6 px-3 py-2 rounded-pill {% if fail2ban_active %}bg-success bg-opacity-10 text-success{% else %}bg-secondary bg-opacity-10 text-secondary{% endif %}">
          <span class="status-dot {% if fail2ban_active %}active{% else %}inactive{% endif %}"></span>
          {% if fail2ban_active %}ATIVO{% else %}INATIVO{% endif %}
        </span>
      </div>
      <div class="card-body px-4 pt-2">
        <div class="d-flex align-items-center gap-3 mb-3">
          <div class="rounded-3 bg-light p-3 text-center" style="min-width:80px">
            <div class="fw-bold fs-4 text-dark">{{ jails|length }}</div>
            <small class="text-muted">Jails</small>
          </div>
          <div class="rounded-3 bg-light p-3 text-center" style="min-width:80px">
            {% set ns = namespace(t=0) %}
            {% for j in jails %}{% set ns.t = ns.t + j.total_banned %}{% endfor %}
            <div class="fw-bold fs-4 text-dark">{{ ns.t }}</div>
            <small class="text-muted">Total bans</small>
          </div>
          <div class="rounded-3 bg-light p-3 text-center" style="min-width:80px">
            {% set ns = namespace(a=0) %}
            {% for j in jails %}{% set ns.a = ns.a + j.banned %}{% endfor %}
            <div class="fw-bold fs-4 text-dark">{{ ns.a }}</div>
            <small class="text-muted">Bans ativos</small>
          </div>
        </div>
        <form action="/app/security/fail2ban/toggle" method="post">
          <button type="submit" class="btn w-100 py-2 {% if fail2ban_active %}btn-outline-danger{% else %}btn-success{% endif %}">
            {% if fail2ban_active %}
              🔴 Desativar Fail2ban
            {% else %}
              🟢 Ativar Fail2ban
            {% endif %}
          </button>
        </form>
      </div>
    </div>
  </div>
</div>

<!-- Whitelist -->
<div class="row g-4 mb-4">
  <div class="col-md-12">
    <div class="card shadow-sm border-0">
      <div class="card-header bg-white d-flex justify-content-between align-items-center border-bottom-0 pt-3 px-4">
        <div>
          <h6 class="mb-0 fw-bold">📋 Lista de Excecao</h6>
          <small class="text-muted">IPs liberados do bloqueio</small>
        </div>
        <button class="btn btn-sm btn-outline-primary rounded-pill px-3" onclick="toggleAddWhitelist()">+ Adicionar IP</button>
      </div>
      <div class="card-body px-4">
        {% if whitelist %}
        <div class="table-responsive">
          <table class="table table-hover align-middle mb-0">
            <thead class="table-light">
              <tr>
                <th class="fw-semibold small text-uppercase text-muted">IP / Rede</th>
                <th class="text-end fw-semibold small text-uppercase text-muted">Acao</th>
              </tr>
            </thead>
            <tbody>
              {% for ip in whitelist %}
              <tr>
                <td><code class="bg-light px-2 py-1 rounded">{{ ip }}</code></td>
                <td class="text-end">
                  <form method="post" action="/app/security/whitelist/remove" style="display:inline">
                    <input type="hidden" name="ip" value="{{ ip }}">
                    <button type="submit" class="btn btn-sm btn-outline-danger rounded-pill px-3">Remover</button>
                  </form>
                </td>
              </tr>
              {% endfor %}
            </tbody>
          </table>
        </div>
        {% else %}
        <p class="text-muted mb-0 py-2">Nenhum IP na whitelist. Redes locais (172.27.x.x, 10.x.x.x, 192.168.x.x) ja sao liberadas automaticamente.</p>
        {% endif %}
        <div id="addWhitelistForm" class="mt-3" >
          <form method="post" action="/app/security/whitelist/add" class="input-group">
            <input type="text" name="ip" class="form-control rounded-start" placeholder="IP ou rede (ex: 10.0.23.0/24)" required>
            <button type="submit" class="btn btn-primary rounded-end">Adicionar</button>
          </form>
        </div>
      </div>
    </div>
  </div>
</div>

<!-- Jails -->
<h5 class="fw-bold mb-3 mt-2">Detalhes das Jails</h5>

<div class="row g-4 mb-4">
  {% for jail in jails %}
  <div class="col-md-4">
    <div class="card shadow-sm h-100 border-0">
      <div class="card-header bg-white d-flex justify-content-between align-items-center border-bottom-0 pt-3 px-4">
        <h6 class="mb-0 fw-bold">{{ jail.jail }}</h6>
        <span class="badge rounded-pill px-3 {% if jail.banned > 0 %}bg-danger bg-opacity-10 text-danger{% else %}bg-success bg-opacity-10 text-success{% endif %}">
          {{ jail.banned }} banido{% if jail.banned != 1 %}s{% endif %}
        </span>
      </div>
      <div class="card-body px-4 pt-2">
        <div class="d-flex align-items-center gap-3 mb-3">
          <div class="rounded-3 bg-light p-2 text-center flex-fill">
            <div class="fw-bold fs-5">{{ jail.total_banned }}</div>
            <small class="text-muted">Total</small>
          </div>
          <div class="rounded-3 bg-light p-2 text-center flex-fill">
            <div class="fw-bold fs-5">{{ jail.maxretry }}</div>
            <small class="text-muted">Max tentativas</small>
          </div>
          <div class="rounded-3 bg-light p-2 text-center flex-fill">
            <div class="fw-bold fs-5">{{ jail.bantime_display }}</div>
            <small class="text-muted">Banimento</small>
          </div>
        </div>

        <form method="post" action="/app/security/jail/config" class="row g-2 small">
          <input type="hidden" name="jail" value="{{ jail.jail }}">
          <div class="col-4">
            <label class="form-label fw-semibold" style="font-size:0.75rem">Tentativas</label>
            <input type="number" name="maxretry" class="form-control form-control-sm" value="{{ jail.maxretry }}" min="1">
          </div>
          <div class="col-4">
            <label class="form-label fw-semibold" style="font-size:0.75rem">Ban (seg)</label>
            <input type="number" name="bantime" class="form-control form-control-sm" value="{{ jail.bantime }}" min="60">
          </div>
          <div class="col-4">
            <label class="form-label fw-semibold" style="font-size:0.75rem">Janela (seg)</label>
            <input type="number" name="findtime" class="form-control form-control-sm" value="{{ jail.findtime }}" min="60">
          </div>
          <div class="col-12 mt-2">
            <button type="submit" class="btn btn-sm btn-outline-secondary w-100 rounded-pill">Salvar config</button>
          </div>
        </form>

        {% if jail.banlist %}
        <hr class="my-2">
        <small class="text-muted fw-semibold">Banidos ativos:</small>
        <ul class="list-unstyled small mb-0 mt-1">
          {% for ip in jail.banlist %}
          <li class="d-flex justify-content-between align-items-center py-1">
            <code class="bg-light px-2 py-1 rounded">{{ ip }}</code>
            <form method="post" action="/app/security/unban" style="display:inline">
              <input type="hidden" name="jail" value="{{ jail.jail }}">
              <input type="hidden" name="ip" value="{{ ip }}">
              <button type="submit" class="btn btn-sm btn-outline-success rounded-pill px-2" style="font-size:0.7rem">Liberar</button>
            </form>
          </li>
          {% endfor %}
        </ul>
        {% endif %}
      </div>
    </div>
  </div>
  {% endfor %}
</div>

<!-- Logs -->
<h5 class="fw-bold mb-3">📜 Ultimos Eventos</h5>
<div class="card shadow-sm border-0">
  <div class="card-body px-4 py-3" style="max-height:280px;overflow-y:auto;">
    {% if fail2ban_log %}
    {% for line in fail2ban_log %}
    <code class="d-block small py-1 border-bottom border-light">{{ line }}</code>
    {% endfor %}
    {% else %}
    <p class="text-muted small mb-0">Nenhum evento registrado ainda.</p>
    {% endif %}
  </div>
</div>

{% endblock %}

{% block extra_js %}
<script>
function toggleAddWhitelist() {
  var f = document.getElementById("addWhitelistForm");
  f.style.display = f.style.display === "none" ? "block" : "none";
}
</script>
{% endblock %}