{% extends "baseTemplate/index.html" %}
{% load static %}
{# fail2ban: jail list with thresholds, and the currently banned addresses. #}

{% block title %}fail2ban{% endblock %}

{% block styles %}
<style>
  .cp-mono   { font-family:var(--cp-font-mono); font-size:.82rem; }
  .cp-num    { max-width:7rem; }
  .cp-you    { background:var(--cp-primary-soft); }
</style>
{% endblock %}

{% block content %}
<div ng-controller="fail2banController">

  <div class="d-flex flex-wrap align-items-center justify-content-between gap-2 mb-4">
    <div>
      <h1 class="h4 mb-1">fail2ban</h1>
      <p class="text-muted mb-0 small">
        Watches the service logs and bans addresses that keep failing to authenticate.
      </p>
    </div>
    <div class="d-flex align-items-center gap-2">
      <span class="badge {% if status.running %}text-bg-success{% else %}text-bg-danger{% endif %}">
        {% if status.running %}Running{% else %}Not running{% endif %}
      </span>
      <button type="button" class="btn btn-outline-secondary btn-sm"
              ng-click="load()" ng-disabled="busy">
        <i class="fas fa-rotate me-1"></i>Refresh
      </button>
    </div>
  </div>

  {% if not status.running %}
    <div class="alert alert-warning">
      <i class="fas fa-triangle-exclamation me-1"></i>
      fail2ban is not running, so nothing is being banned. Start it from
      <a href="/serverstatus/services">Services</a>.
    </div>
  {% endif %}

  <div class="alert alert-danger py-2 px-3" ng-show="errorMessage" ng-cloak role="alert">
    <i class="fas fa-triangle-exclamation me-1"></i><span ng-bind="errorMessage"></span>
  </div>

  <div class="card mb-3">
    <div class="card-header fw-semibold">Jails</div>
    <div class="table-responsive">
      <table class="table table-hover align-middle mb-0">
        <thead>
          <tr>
            <th scope="col">Jail</th>
            <th scope="col" class="text-end">Banned now</th>
            <th scope="col" class="text-end">Total bans</th>
            <th scope="col">Max retries</th>
            <th scope="col">Find window (s)</th>
            <th scope="col">Ban time (s)</th>
            <th scope="col" class="text-end">Enabled</th>
          </tr>
        </thead>
        <tbody ng-cloak>
          <tr ng-repeat="jail in jails">
            <td>
              <div class="cp-mono" ng-bind="jail.name"></div>
              <div class="small text-muted" ng-show="jail.logPath" ng-bind="jail.logPath"></div>
            </td>
            <td class="text-end">
              <span class="badge" ng-class="jail.currentlyBanned ? 'text-bg-danger' : 'text-bg-light border'"
                    ng-bind="jail.currentlyBanned"></span>
            </td>
            <td class="text-end text-muted" ng-bind="jail.totalBanned"></td>
            <td><input type="number" min="1" max="1000" class="form-control form-control-sm cp-num"
                       ng-model="jail.maxretry" ng-change="markDirty(jail)"
                       ng-attr-aria-label="Max retries for {$ jail.name $}"></td>
            <td><input type="number" min="30" max="604800" class="form-control form-control-sm cp-num"
                       ng-model="jail.findtime" ng-change="markDirty(jail)"
                       ng-attr-aria-label="Find time in seconds for {$ jail.name $}"></td>
            <td><input type="number" min="60" max="31536000" class="form-control form-control-sm cp-num"
                       ng-model="jail.bantime" ng-change="markDirty(jail)"
                       ng-attr-aria-label="Ban time in seconds for {$ jail.name $}"></td>
            <td class="text-end">
              <div class="d-flex align-items-center justify-content-end gap-2">
                <button type="button" class="btn btn-sm btn-outline-primary"
                        ng-show="jail.dirty && jail.enabled" ng-disabled="jail.busy"
                        ng-click="save(jail)">Save</button>
                <div class="form-check form-switch m-0">
                  <input class="form-check-input" type="checkbox"
                         ng-model="jail.enabled" ng-change="toggle(jail)"
                         ng-disabled="jail.busy"
                         ng-attr-aria-label="{$ 'Toggle jail ' + jail.name $}">
                </div>
              </div>
            </td>
          </tr>
          <tr ng-show="!jails.length && !busy">
            <td colspan="7" class="text-center text-muted py-5">
              <i class="fas fa-shield-halved fa-2x mb-2 d-block"></i>
              No jails are defined in /etc/fail2ban/jail.d.
            </td>
          </tr>
        </tbody>
      </table>
    </div>
    <div class="card-footer small text-muted">
      Thresholds are applied when a jail is enabled or saved. A ban time of
      31536000 seconds is one year; fail2ban itself treats -1 as permanent, which
      the panel does not offer because a permanent ban on a shared address is
      almost always a mistake.
    </div>
  </div>

  <div class="card">
    <div class="card-header d-flex flex-wrap align-items-center justify-content-between gap-2">
      <span class="fw-semibold">Banned addresses</span>
      <span class="text-muted small">
        Your address is <span class="cp-mono">{{ callerIP }}</span>
      </span>
    </div>
    <div class="table-responsive">
      <table class="table table-hover align-middle mb-0">
        <thead>
          <tr><th scope="col">Address</th><th scope="col">Jail</th><th scope="col" class="text-end"></th></tr>
        </thead>
        <tbody ng-cloak>
          <tr ng-repeat="ban in banned" ng-class="{'cp-you': ban.isCaller}">
            <td class="cp-mono">
              <span ng-bind="ban.address"></span>
              <span class="badge text-bg-warning ms-1" ng-show="ban.isCaller">this is you</span>
            </td>
            <td class="cp-mono" ng-bind="ban.jail"></td>
            <td class="text-end">
              <button type="button" class="btn btn-sm btn-outline-secondary"
                      ng-click="unban(ban)" ng-disabled="busy">
                <i class="fas fa-unlock me-1"></i>Unban
              </button>
            </td>
          </tr>
          <tr ng-show="!banned.length">
            <td colspan="3" class="text-center text-muted py-4">Nothing is banned right now.</td>
          </tr>
        </tbody>
      </table>
    </div>
  </div>
</div>
{% endblock %}

{% block scripts %}
<script src="{% static 'firewallManager/firewallManager.js' %}"></script>
{% endblock %}