{% extends "pobsync_backend/base.html" %}

{% block title %}{% if credential %}SSH Key | {{ credential.name }}{% else %}New SSH Key{% endif %} | pobsync{% endblock %}

{% block content %}
  <header class="page-header">
    <div class="page-title">
      <div class="page-kicker">Access</div>
      <h1>{% if credential %}SSH Key: {{ credential.name }}{% else %}New SSH Key{% endif %}</h1>
      <div class="page-subtitle">{% if credential %}Review key metadata, known hosts, and deletion safety for this credential.{% else %}Register an existing private key for use by pobsync backups.{% endif %}</div>
    </div>
    <section class="actions" aria-label="SSH key form actions">
      <a class="button-link" href="{% url 'ssh_credentials' %}">Back to SSH keys</a>
    </section>
  </header>

  <section class="panel">
    <h2>{% if credential %}Edit SSH Credential{% else %}Create SSH Credential{% endif %}</h2>
    {% if credential and credential.public_key %}
      <div class="field">
        <label>Public key</label>
        <pre><code>{{ credential.public_key }}</code></pre>
      </div>
    {% endif %}
    {% if credential and credential.key_path %}
      <p class="muted">Private key path: <code>{{ credential.key_path }}</code></p>
    {% endif %}
    {% if credential and credential.fingerprint %}
      <p class="muted">Fingerprint: <code>{{ credential.fingerprint }}</code></p>
    {% endif %}
    <form method="post" enctype="multipart/form-data" class="form-grid">
      {% csrf_token %}
      {{ form.non_field_errors }}

      {% for field in form %}
        <div class="field">
          {{ field.errors }}
          <label for="{{ field.id_for_label }}">{{ field.label }}</label>
          {{ field }}
          {% if field.help_text %}<div class="helptext">{{ field.help_text }}</div>{% endif %}
        </div>
      {% endfor %}

      <div class="form-actions">
        <button type="submit">{% if credential %}Save SSH key{% else %}Create SSH key{% endif %}</button>
        <a class="button-link secondary" href="{% url 'ssh_credentials' %}">Cancel</a>
      </div>
    </form>
  </section>

  {% if credential %}
    <section class="panel">
      <h2>Delete SSH Key</h2>
      {% if credential.hosts.exists or credential.global_configs.exists %}
        <p class="muted">
          This SSH key is still selected by {{ credential.hosts.count }} host(s) or
          {{ credential.global_configs.count }} global config(s). Select another key there before deleting it.
        </p>
      {% else %}
        <p class="muted">Type <strong>{{ credential.name }}</strong> to confirm deletion.</p>
      {% endif %}
      <form method="post" action="{% url 'delete_ssh_credential' credential.id %}">
        {% csrf_token %}
        <div class="field">
          <label for="confirm_name">Confirm key name</label>
          <input id="confirm_name" name="confirm_name" type="text" {% if credential.hosts.exists or credential.global_configs.exists %}disabled{% endif %}>
        </div>
        <div class="form-actions">
          <button type="submit" class="danger" {% if credential.hosts.exists or credential.global_configs.exists %}disabled{% endif %}>Delete SSH key</button>
          <a class="button-link secondary" href="{% url 'ssh_credentials' %}">Cancel</a>
        </div>
      </form>
    </section>
  {% endif %}
{% endblock %}