{% extends "base.html" %}
{% block title %}New secret — rosbackup-ng{% endblock %}
{% block page_title %}New secret{% endblock %}
{% block head_actions %}<a class="btn" href="/vault">← Vault</a>{% endblock %}
{% block content %}
<div class="card">
  {% if error %}<div class="banner banner-warn">{{ error }}</div>{% endif %}
  <p class="muted">Stored encrypted at rest. You won't be able to view the value again after saving
    — keep your own copy if you need one.</p>
  <form class="run-form" method="post" action="/ui/vault">
    <input type="hidden" name="csrf_token" value="{{ request.state.session.csrf_token }}">

    <div class="form-rows">
      <label for="name">Name</label>
      <input type="text" id="name" name="name" autocomplete="off" placeholder="referenced from devices" required>
      <label for="kind">Kind</label>
      <select id="kind" name="kind" data-type-switch="secret-kind">
        <option value="ssh_key" selected>SSH private key</option>
        <option value="password">Password</option>
      </select>
    </div>

    <fieldset data-type-group="secret-kind" data-type-value="ssh_key">
      <legend>🔑 SSH private key</legend>
      <label for="private_key">Private key <span class="muted">(PEM / OpenSSH format)</span></label>
      <textarea id="private_key" name="private_key" rows="8" autocomplete="off"
                spellcheck="false" placeholder="-----BEGIN OPENSSH PRIVATE KEY-----"></textarea>
      <label for="passphrase">Passphrase <span class="muted">(if encrypted)</span></label>
      <input type="password" id="passphrase" name="passphrase" autocomplete="new-password">
    </fieldset>

    <fieldset data-type-group="secret-kind" data-type-value="password">
      <legend>🔒 Password</legend>
      <div class="form-rows">
        <label for="password">Password</label>
        <input type="password" id="password" name="password" autocomplete="new-password" maxlength="256">
      </div>
    </fieldset>

    <button type="submit" class="btn primary">Store secret</button>
  </form>
</div>
{% endblock %}