{% extends "base.html" %}
{% import "_macros.html" as m %}
{% set editing = original_name is not none %}
{% set cur = (item.type if item and item.type else 'local') %}
{% block title %}{{ "Edit" if editing else "New" }} storage — rosbackup-ng{% endblock %}
{% block page_title %}{{ "Edit destination" if editing else "New destination" }}{% endblock %}
{% block head_actions %}<a class="btn" href="/storage">← Storage</a>{% endblock %}
{% block content %}
<div class="card">
  {% if error %}<div class="banner banner-warn">{{ error }}</div>{% endif %}
  <form class="run-form" method="post"
        action="{% if editing %}/ui/storage/{{ original_name|urlencode }}{% else %}/ui/storage{% endif %}">
    <input type="hidden" name="csrf_token" value="{{ request.state.session.csrf_token }}">

    <div class="form-rows">
      <label for="name">Name</label>
      <input type="text" id="name" name="name" value="{{ item.name if item else '' }}"
             autocomplete="off" required>
      <label for="type">Type</label>
      <select id="type" name="type" data-type-switch="storage-type">
        {% for t in types %}<option value="{{ t }}" {{ 'selected' if cur == t }}>{{ t }}</option>{% endfor %}
      </select>
    </div>

    <fieldset data-type-group="storage-type" data-type-value="local">
      <legend>📁 Local</legend>
      <div class="form-rows">
        <label for="path">Path</label>
        <input type="text" id="path" name="path" value="{{ item.path if item and item.path else '' }}" autocomplete="off" placeholder="defaults to the global backup path">
      </div>
    </fieldset>

    <fieldset data-type-group="storage-type" data-type-value="sftp">
      <legend>🔌 SFTP</legend>
      <div class="form-rows">
        <label for="host">Host</label>
        <input type="text" id="host" name="host" value="{{ item.host if item and item.host else '' }}" autocomplete="off">
        <label for="user">User</label>
        <input type="text" id="user" name="user" value="{{ item.user if item and item.user else '' }}" autocomplete="off">
        <label for="remote_path">Remote path</label>
        <input type="text" id="remote_path" name="remote_path" value="{{ item.remote_path if item and item.remote_path else '' }}" autocomplete="off">
        <label for="private_key">Private key path</label>
        <input type="text" id="private_key" name="private_key" value="{{ item.private_key if item and item.private_key else '' }}" autocomplete="off">
        <label for="password_env">Password env var</label>
        <input type="text" id="password_env" name="password_env" value="{{ item.password_env if item and item.password_env else '' }}" autocomplete="off" placeholder="name of the env var holding the password">
        {% if cred_secrets %}
        <label for="password_secret">Stored password</label>
        <select id="password_secret" name="password_secret">
          <option value="">— none —</option>
          {% for s in cred_secrets %}<option value="{{ s }}" {{ 'selected' if item and item.password_secret == s }}>{{ s }}</option>{% endfor %}
        </select>
        <p class="muted full">A password from the Vault overrides the env var.</p>
        {% endif %}
      </div>
    </fieldset>

    <fieldset data-type-group="storage-type" data-type-value="s3">
      <legend>☁️ S3 / S3-compatible</legend>
      <div class="form-rows">
        <label for="bucket">Bucket</label>
        <input type="text" id="bucket" name="bucket" value="{{ item.bucket if item and item.bucket else '' }}" autocomplete="off">
        <label for="prefix">Prefix</label>
        <input type="text" id="prefix" name="prefix" value="{{ item.prefix if item and item.prefix else '' }}" autocomplete="off">
        <label for="region">Region</label>
        <input type="text" id="region" name="region" value="{{ item.region if item and item.region else '' }}" autocomplete="off">
        <label for="endpoint">Endpoint</label>
        <input type="text" id="endpoint" name="endpoint" value="{{ item.endpoint if item and item.endpoint else '' }}" autocomplete="off" placeholder="for MinIO / B2 / …">
        <label for="access_key_env">Access-key env var</label>
        <input type="text" id="access_key_env" name="access_key_env" value="{{ item.access_key_env if item and item.access_key_env else '' }}" autocomplete="off">
        <label for="secret_key_env">Secret-key env var</label>
        <input type="text" id="secret_key_env" name="secret_key_env" value="{{ item.secret_key_env if item and item.secret_key_env else '' }}" autocomplete="off">
        <p class="muted full">Leave the env vars blank to use the standard AWS credential chain.</p>
      </div>
    </fieldset>

    <fieldset data-type-group="storage-type" data-type-value="nextcloud">
      <legend>🟦 Nextcloud (WebDAV)</legend>
      <div class="form-rows">
        <label for="url">URL</label>
        <input type="text" id="url" name="url" value="{{ item.url if item and item.url else '' }}" autocomplete="off">
        <label for="username">Username</label>
        <input type="text" id="username" name="username" value="{{ item.username if item and item.username else '' }}" autocomplete="off">
        <label for="nc_remote_path">Remote path</label>
        <input type="text" id="nc_remote_path" name="remote_path" value="{{ item.remote_path if item and item.remote_path else '' }}" autocomplete="off">
        <label for="nc_password_env">Password env var</label>
        <input type="text" id="nc_password_env" name="password_env" value="{{ item.password_env if item and item.password_env else '' }}" autocomplete="off" placeholder="use a Nextcloud app password">
        {% if cred_secrets %}
        <label for="nc_password_secret">Stored password</label>
        <select id="nc_password_secret" name="password_secret">
          <option value="">— none —</option>
          {% for s in cred_secrets %}<option value="{{ s }}" {{ 'selected' if item and item.password_secret == s }}>{{ s }}</option>{% endfor %}
        </select>
        <p class="muted full">A password from the Vault overrides the env var.</p>
        {% endif %}
      </div>
    </fieldset>

    <fieldset>
      <legend>🎯 Scope</legend>
      <div class="form-rows">
        <label for="groups">Limit to groups</label>
        {{ m.tag_input('groups', (item.groups | join(', ')) if item and item.groups else '', groups, 'add a group… (blank = all devices)') }}
        <label class="check full"><input type="checkbox" name="required" value="1"
               {{ 'checked' if item and item.required }}> Required <span class="muted">(a failure here fails the device's backup)</span></label>
      </div>
    </fieldset>

    <button type="submit" class="btn primary">{{ "Save changes" if editing else "Add destination" }}</button>
  </form>
</div>
{% if editing %}
<div class="card">
  <h2>Danger zone</h2>
  <p class="muted">Removing a destination only edits <span class="mono">global.yaml</span> — backups
    already written there are untouched.</p>
  <button type="button" class="btn danger-btn"
          hx-post="/ui/storage/{{ original_name|urlencode }}/delete"
          hx-confirm="Delete storage destination “{{ original_name }}”?">
    Delete {{ original_name }}
  </button>
</div>
{% endif %}
{% endblock %}