{% extends "base.html" %}
{% import "_macros.html" as m %}
{% block title %}SSH Keys — rosbackup-ng{% endblock %}
{% block page_title %}SSH Keys{% endblock %}
{% block head_actions %}<a class="btn primary" href="/ssh-keys/new">+ Add key</a>{% endblock %}
{% block content %}
<div class="card">
  <p class="muted">Router host keys rosbackup-ng has <strong>pinned</strong> on first connect
    (trust-on-first-use). They live in its own store — <span class="mono">{{ path }}</span> —
    <strong>never</strong> your personal <span class="mono">~/.ssh/known_hosts</span>. A changed
    key is rejected automatically (possible MITM); after a legitimate reinstall/key change,
    <strong>Forget</strong> the old key so it re-pins on the next connect.</p>
  {% if keys %}
  <div class="filters stacked" data-row-filter="#sshkeys-rows tr">
    <div class="filter-row">
      <select name="group">
        <option value="">All groups</option>
        {% for g in groups %}<option value="{{ g.name }}">{{ g.name }} ({{ g.count }})</option>{% endfor %}
      </select>
      <select name="tag">
        <option value="">All tags</option>
        {% for t in tags %}<option value="{{ t.name }}">{{ t.name }} ({{ t.count }})</option>{% endfor %}
      </select>
      <select name="status">
        <option value="">All status</option>
        <option value="1">Enabled</option>
        <option value="0">Disabled</option>
      </select>
      <span class="daterange">Added
        <input type="date" name="added_from" aria-label="Added on or after">
        <span class="muted">–</span>
        <input type="date" name="added_to" aria-label="Added on or before"></span>
    </div>
    <div class="filter-row">
      <input type="search" name="q"
             placeholder="Filter {{ keys|length }} keys by device / host / fingerprint…">
    </div>
  </div>
  <form class="bulk-bar" data-bulk-bar hidden
        hx-post="/ui/ssh-keys/bulk-forget"
        hx-confirm="Forget the selected pinned host keys? They re-pin (TOFU) on the next connect.">
    <span class="bulk-count" data-bulk-count>0 selected</span>
    <input type="hidden" name="hosts" data-bulk-names value="">
    <span class="bulk-actions">
      <button type="submit" class="btn sm act-danger">Forget selected</button>
      <button type="button" class="btn sm act-ghost" data-bulk-clear>Clear</button>
    </span>
  </form>
  <table>
    <thead><tr><th class="cb-col"><input type="checkbox" data-bulk-all aria-label="Select all keys"></th><th>Device</th><th>Host</th><th>Added</th><th>Key type</th><th>Fingerprint (SHA256)</th><th class="actions-col"></th></tr></thead>
    <tbody id="sshkeys-rows">
      {% for k in keys %}
      <tr data-filter-text="{{ k.device }} {{ k.host }} {{ k.keytype }} {{ k.fingerprint }}"
          data-groups="{{ k.groups|join(' ') }}" data-tags="{{ k.tags|join(' ') }}" data-enabled="{{ k.enabled_flag }}"
          data-added="{{ k.added_at|int if k.added_at else '' }}">
        <td class="cb-col"><input type="checkbox" class="bulk-cb" data-bulk-cb value="{{ k.host }}" aria-label="Select {{ k.host }}"></td>
        <td class="mono">{% if k.device %}<a href="/targets/{{ k.device.split(',')[0]|trim|urlencode }}">{{ k.device }}</a>{% else %}<span class="muted">—</span>{% endif %}</td>
        <td class="mono">{{ k.host }}</td>
        <td>{% if k.added_at %}{{ k.added_at|datetime }}{% else %}<span class="muted">—</span>{% endif %}</td>
        <td><span class="chip">{{ k.keytype }}</span></td>
        <td>{% if k.fingerprint %}{{ m.copyval(k.fingerprint, 'fingerprint') }}{% else %}<span class="muted">—</span>{% endif %}</td>
        <td class="row-actions">{{ m.icon_delete('/ui/ssh-keys/' ~ (k.host|urlencode) ~ '/forget', 'Forget the pinned key for “' ~ k.host ~ '”? It will be re-pinned (TOFU) on the next connect.', 'Forget key') }}</td>
      </tr>
      {% endfor %}
    </tbody>
  </table>
  {% else %}
  <p class="muted">No host keys pinned yet. The first successful connection to each device
    records its key here automatically.</p>
  {% endif %}
</div>
{% endblock %}