{% extends 'core/base.html' %}
{% block title %}SMTP | Killian{% endblock %}
{% block content %}
<div class="page-head">
    <div>
        <h1>Email / SMTP</h1>
        <p>Configure outbound email for user invitations and Killian notifications.</p>
    </div>
    {% if smtp_ready %}
        <span class="status-good">Configured</span>
    {% else %}
        <span class="warn">Configuration incomplete</span>
    {% endif %}
</div>

<section>
    <div class="section-head">
        <div>
            <h2>SMTP configuration</h2>
            <p>Only Killian Admins can modify these settings. The SMTP password is encrypted with the Killian master key and is never returned to the browser.</p>
        </div>
    </div>

    <form method="post" class="form-card" autocomplete="off">
        {% csrf_token %}
        <input type="hidden" name="action" value="save">

        {% for field in settings_form %}
            <div class="form-field">
                <label for="{{ field.id_for_label }}">{{ field.label }}</label>
                {{ field }}
                {% if field.name == 'password' and smtp_config.password_configured %}
                    <div class="helptext">A password is currently stored. Leave this field blank to keep the existing encrypted password.</div>
                {% elif field.help_text %}
                    <div class="helptext">{{ field.help_text }}</div>
                {% endif %}
                {% for error in field.errors %}<div class="field-error">{{ error }}</div>{% endfor %}
            </div>
        {% endfor %}

        {% for error in settings_form.non_field_errors %}<div class="field-error">{{ error }}</div>{% endfor %}

        <div class="form-actions">
            <button type="submit">Save SMTP Settings</button>
        </div>
    </form>
</section>

<section>
    <div class="section-head">
        <div>
            <h2>Current security state</h2>
            <p>The password itself is intentionally never displayed.</p>
        </div>
    </div>

    <div class="two">
        <div class="secret-card">
            <label>SMTP host</label><code>{{ smtp_config.host|default:'Not configured' }}</code>
            <label>Port</label><code>{{ smtp_config.port }}</code>
            <label>Username</label><code>{{ smtp_config.username|default:'Not configured' }}</code>
            <label>Password</label><code>{% if smtp_config.password_configured %}Configured (encrypted){% else %}Not configured{% endif %}</code>
        </div>
        <div class="secret-card">
            <label>Transport security</label><code>{{ smtp_config.get_security_display }}</code>
            <label>From</label><code>{% if smtp_config.from_name %}{{ smtp_config.from_name }} &lt;{{ smtp_config.from_email|default:'not configured' }}&gt;{% else %}{{ smtp_config.from_email|default:'Not configured' }}{% endif %}</code>
            <label>Invitation base URL</label><code>{{ smtp_config.base_url|default:'Automatic from request' }}</code>
            <label>Timeout</label><code>{{ smtp_config.timeout }} seconds</code>
        </div>
    </div>
</section>

<section>
    <div class="section-head">
        <div>
            <h2>Send test email</h2>
            <p>Use this after saving to verify connectivity, authentication, encryption, relay permissions, and the sender address.</p>
        </div>
    </div>

    <form method="post" class="form-card">
        {% csrf_token %}
        <input type="hidden" name="action" value="test">
        {% for field in test_form %}
            <div class="form-field">
                <label for="{{ field.id_for_label }}">{{ field.label }}</label>
                {{ field }}
                {% if field.help_text %}<div class="helptext">{{ field.help_text }}</div>{% endif %}
                {% for error in field.errors %}<div class="field-error">{{ error }}</div>{% endfor %}
            </div>
        {% endfor %}
        <div class="form-actions"><button type="submit">Send Test Email</button></div>
    </form>
</section>
{% endblock %}