{% INCLUDE 'overall_header.html' %}

<a id="maincontent"></a>

<h1>{{ lang('ACP_CRYPTEDPMS_TITLE') }}</h1>

<form id="acp_cryptedpms" method="post" action="{{ U_ACTION }}" autocomplete="off">
	<input type="text" name="__fake_username" autocomplete="username" style="position:absolute; left:-9999px; width:1px; height:1px; opacity:0;" tabindex="-1" aria-hidden="true">
	<input type="password" name="__fake_password" autocomplete="new-password" style="position:absolute; left:-9999px; width:1px; height:1px; opacity:0;" tabindex="-1" aria-hidden="true">

	<fieldset>
		<legend>{{ lang('ACP_CRYPTEDPMS_CONFIG') }}</legend>

		{% if not CRYPTEDPMS_HAS_KEK %}
			<p class="small" style="color:#b33;">
				<strong>{{ lang('ACP_CRYPTEDPMS_ENABLE_DISABLED_HINT') }}</strong>
			</p>
		{% endif %}

		<dl>
			<dt>
				<label for="cryptedpms_enable">{{ lang('ACP_CRYPTEDPMS_ENABLE') ~ lang('COLON') }}</label><br>
				<span>{{ lang('ACP_CRYPTEDPMS_ENABLE_EXPLAIN') }}</span>
			</dt>
			<dd>
				<label>
					<input type="radio" class="radio" id="cryptedpms_enable" name="cryptedpms_enable" value="1"
						{% if CRYPTEDPMS_ENABLE %}checked="checked"{% endif %}
						{% if not CRYPTEDPMS_HAS_KEK %}disabled="disabled"{% endif %}>
					{{ lang('YES') }}
				</label>
				<label>
					<input type="radio" class="radio" name="cryptedpms_enable" value="0"
						{% if not CRYPTEDPMS_ENABLE %}checked="checked"{% endif %}>
					{{ lang('NO') }}
				</label>
			</dd>
		</dl>

		<dl>
			<dt><label for="cryptedpms_pwhash_opslimit">{{ lang('ACP_CRYPTEDPMS_PWHASH_OPSLIMIT') ~ lang('COLON') }}</label><br><span>{{ lang('ACP_CRYPTEDPMS_PWHASH_OPSLIMIT_EXPLAIN') }}</span></dt>
			<dd><input type="number" id="cryptedpms_pwhash_opslimit" name="cryptedpms_pwhash_opslimit" value="{{ CRYPTEDPMS_PWHASH_OPSLIMIT }}" size="10"></dd>
		</dl>
		<dl>
			<dt><label for="cryptedpms_pwhash_memlimit">{{ lang('ACP_CRYPTEDPMS_PWHASH_MEMLIMIT') ~ lang('COLON') }}</label><br><span>{{ lang('ACP_CRYPTEDPMS_PWHASH_MEMLIMIT_EXPLAIN') }}</span></dt>
			<dd><input type="number" id="cryptedpms_pwhash_memlimit" name="cryptedpms_pwhash_memlimit" value="{{ CRYPTEDPMS_PWHASH_MEMLIMIT }}" size="10"></dd>
		</dl>
		<dl>
			<dt>
				<label for="cryptedpms_session_ttl">{{ lang('ACP_CRYPTEDPMS_SESSION_TTL') ~ lang('COLON') }}</label><br>
				<span class="small">{{ lang('ACP_CRYPTEDPMS_SESSION_TTL_EXPLAIN', CRYPTEDPMS_SESSION_TTL_MIN/60, CRYPTEDPMS_SESSION_TTL_MAX/60) }}</span>
			</dt>
			<dd>
				<input type="number"
						id="cryptedpms_session_ttl"
						name="cryptedpms_session_ttl"
						min="{{ CRYPTEDPMS_SESSION_TTL_MIN }}"
						max="{{ CRYPTEDPMS_SESSION_TTL_MAX }}"
						step="60"
						value="{{ CRYPTEDPMS_SESSION_TTL }}">
				<span class="small">{{ lang('ACP_CRYPTEDPMS_SECONDS') }}</span>
			</dd>
		</dl>

		<dl>
			<dt>
				<label for="cryptedpms_kek_rotation_enabled">{{ lang('ACP_CRYPTEDPMS_KEK_ROTATION_ENABLE') ~ lang('COLON') }}</label><br>
				<span>{{ lang('ACP_CRYPTEDPMS_KEK_ROTATION_ENABLE_EXPLAIN') }}</span>
			</dt>
			<dd>
				<label>
					<input type="radio" class="radio" id="cryptedpms_kek_rotation_enabled" name="cryptedpms_kek_rotation_enabled" value="1"
						{% if CRYPTEDPMS_KEK_ROTATION_ENABLED %}checked="checked"{% endif %}>
					{{ lang('YES') }}
				</label>
				<label>
					<input type="radio" class="radio" name="cryptedpms_kek_rotation_enabled" value="0"
						{% if not CRYPTEDPMS_KEK_ROTATION_ENABLED %}checked="checked"{% endif %}>
					{{ lang('NO') }}
				</label>
			</dd>
		</dl>

		<dl>
			<dt>
				<label for="cryptedpms_kek_rotation_interval">{{ lang('ACP_CRYPTEDPMS_KEK_ROTATION_INTERVAL') ~ lang('COLON') }}</label><br>
				<span class="small">{{ lang('ACP_CRYPTEDPMS_KEK_ROTATION_INTERVAL_EXPLAIN', CRYPTEDPMS_KEK_ROTATION_MIN/60, CRYPTEDPMS_KEK_ROTATION_MAX/60) }}</span>
			</dt>
			<dd>
				<input type="number" id="cryptedpms_kek_rotation_interval" name="cryptedpms_kek_rotation_interval"
					min="{{ CRYPTEDPMS_KEK_ROTATION_MIN }}" max="{{ CRYPTEDPMS_KEK_ROTATION_MAX }}" step="60"
					value="{{ CRYPTEDPMS_KEK_ROTATION_INTERVAL }}"
					{% if not CRYPTEDPMS_KEK_ROTATION_ENABLED %}disabled="disabled"{% endif %}>
				<span class="small">{{ lang('ACP_CRYPTEDPMS_SECONDS') }}</span>
			</dd>
		</dl>

		<hr>
		<dl>
			<dt>{{ lang('ACP_CRYPTEDPMS_ROTATION_STATUS') }}</dt>
			<dd>
				{% if CRYPTEDPMS_KEK_ROTATION_ENABLED %}
					<span style="color:#2a8f2a;">{{ lang('ENABLED') }}</span>
				{% else %}
					<span style="color:#b33;">{{ lang('DISABLED') }}</span>
				{% endif %}
				{% if CRYPTEDPMS_ROT_RUNNING %}
					<span class="small" style="margin-left:0.5em;color:#2a8f2a;">● {{ lang('ACP_CRYPTEDPMS_ROTATION_RUNNING') }}</span>
				{% endif %}
			</dd>
		</dl>
		<dl>
			<dt>{{ lang('ACP_CRYPTEDPMS_ROTATION_LAST_RUN') }}</dt>
			<dd>{{ CRYPTEDPMS_ROT_LAST_HUMAN }}</dd>
		</dl>
		<dl>
			<dt>{{ lang('ACP_CRYPTEDPMS_ROTATION_NEXT_DUE') }}</dt>
			<dd>{{ CRYPTEDPMS_ROT_NEXT_HUMAN }}</dd>
		</dl>
		<dl>
			<dt>{{ lang('ACP_CRYPTEDPMS_ROTATION_LAST_KID') }}</dt>
			<dd><code>{{ CRYPTEDPMS_ROT_LAST_KID_MASK }}</code></dd>
		</dl>
		{% if CRYPTEDPMS_ROT_LAST_ERROR %}
		<dl>
			<dt>{{ lang('ACP_CRYPTEDPMS_ROTATION_LAST_ERROR') }}</dt>
			<dd><span style="color:#b33;">{{ CRYPTEDPMS_ROT_LAST_ERROR }}</span></dd>
		</dl>
		{% endif %}
	</fieldset>

	<fieldset>
		<legend>{{ lang('ACP_CRYPTEDPMS_KEK_MANAGEMENT') }}</legend>
		<p class="small">{{ lang('ACP_CRYPTEDPMS_KEK_MANAGEMENT_EXPLAIN') }}</p>

		<dl>
			<dt>
				<label for="cryptedpms_kek_id">{{ lang('ACP_CRYPTEDPMS_KEK_ID') ~ lang('COLON') }}</label><br>
				<span class="small">{{ lang('ACP_CRYPTEDPMS_KEK_ID_EXPLAIN') }}</span><br>
				{% if CRYPTEDPMS_KEK_ID_MASK %}
					<span class="small">{{ lang('ACP_CRYPTEDPMS_CURRENT_VALUE') ~ lang('COLON') }} <code>{{ CRYPTEDPMS_KEK_ID_MASK }}</code></span>
				{% else %}
					<span class="small"><em>{{ lang('ACP_CRYPTEDPMS_CURRENT_VALUE_EMPTY') }}</em></span>
				{% endif %}
			</dt>
			<dd>
				<input type="password" id="cryptedpms_kek_id" name="cryptedpms_kek_id" value="" size="24" autocomplete="new-password"
					readonly onfocus="this.removeAttribute('readonly')" onmousedown="this.removeAttribute('readonly')" ontouchstart="this.removeAttribute('readonly')">
				<br><span class="small">{{ lang('ACP_CRYPTEDPMS_KEK_ID_INPUT_HINT') }}</span>
			</dd>
		</dl>

		<dl>
			<dt>
				<label for="cryptedpms_kek_b64">{{ lang('ACP_CRYPTEDPMS_KEK_B64') ~ lang('COLON') }}</label><br>
				<span class="small">{{ lang('ACP_CRYPTEDPMS_KEK_B64_EXPLAIN') }}</span><br>
				{% if CRYPTEDPMS_KEK_B64_MASK %}
					<span class="small">{{ lang('ACP_CRYPTEDPMS_CURRENT_VALUE') ~ lang('COLON') }} <code>{{ CRYPTEDPMS_KEK_B64_MASK }}</code></span>
				{% else %}
					<span class="small"><em>{{ lang('ACP_CRYPTEDPMS_CURRENT_VALUE_EMPTY') }}</em></span>
				{% endif %}
			</dt>
			<dd>
				<input type="password" id="cryptedpms_kek_b64" name="cryptedpms_kek_b64" value="" size="72" autocomplete="new-password"
					readonly onfocus="this.removeAttribute('readonly')" onmousedown="this.removeAttribute('readonly')" ontouchstart="this.removeAttribute('readonly')">
				<br><span class="small">{{ lang('ACP_CRYPTEDPMS_KEK_B64_INPUT_HINT') }}</span>
			</dd>
		</dl>

		<div>
			<button class="button2" type="submit" name="generate_kek" value="1">{{ lang('ACP_CRYPTEDPMS_KEK_GENERATE') }}</button>
		</div>
	</fieldset>

	<fieldset class="submit-buttons">
		<input class="button1" type="submit" id="submit" name="submit" value="{{ lang('SUBMIT') }}">
		<input class="button2" type="reset" id="reset" name="reset" value="{{ lang('RESET') }}">
		{{ S_FORM_TOKEN }}
	</fieldset>
</form>

{% INCLUDE 'overall_footer.html' %}