{% extends "base.html" %}
{% set editing = original_name is not none %}
{% set essh = (entry.ssh if entry and entry.ssh else {}) %}
{% block title %}{{ "Edit" if editing else "New" }} device — rosbackup-ng{% endblock %}
{% block page_title %}{{ "Edit device" if editing else "New device" }}{% endblock %}
{% block head_actions %}<a class="btn" href="/targets">← Devices</a>{% endblock %}
{% block content %}
<div class="card">
  {% if error %}<div class="banner banner-warn">{{ error }}</div>{% endif %}
  <form class="run-form" method="post"
        action="{% if editing %}/ui/targets/{{ original_name|urlencode }}{% else %}/ui/targets{% endif %}">
    <input type="hidden" name="csrf_token" value="{{ request.state.session.csrf_token }}">
    {% import "_macros.html" as m %}

    <div class="form-rows">
      <label for="name">Name</label>
      <input type="text" id="name" name="name" value="{{ entry.name if entry else '' }}" autocomplete="off" required>
      <label for="host">Host</label>
      <input type="text" id="host" name="host" value="{{ entry.host if entry else '' }}" autocomplete="off" placeholder="IP or DNS name" required>
      <label for="description">Description</label>
      <input type="text" id="description" name="description" value="{{ entry.description if entry and entry.description else '' }}">
      <label for="tags">Tags</label>
      {{ m.tag_input('tags', tags_text, all_tags, 'type to search or create…') }}
      <label class="check full"><input type="checkbox" name="enabled" value="1"
             {{ 'checked' if (not editing) or entry.get('enabled', true) }}> Enabled</label>
    </div>

    <fieldset>
      <legend>📦 Backup content</legend>
      <div class="form-rows">
        <label class="check full"><input type="checkbox" name="enable_binary_backup" value="1"
               {{ 'checked' if (not editing) or entry.get('enable_binary_backup', true) }}> Binary backup (<span class="mono">.backup</span>)</label>
        <label class="check full"><input type="checkbox" name="enable_plaintext_backup" value="1"
               {{ 'checked' if (not editing) or entry.get('enable_plaintext_backup', true) }}> Plaintext export (<span class="mono">.rsc</span>)</label>
        <label class="check full"><input type="checkbox" name="keep_binary_backup" value="1"
               {{ 'checked' if editing and entry.get('keep_binary_backup') }}> Keep the binary backup on the router after download</label>
        <label class="check full"><input type="checkbox" name="keep_plaintext_backup" value="1"
               {{ 'checked' if editing and entry.get('keep_plaintext_backup') }}> Keep the plaintext export on the router after download</label>
        <label class="check full"><input type="checkbox" name="encrypted" value="1"
               {{ 'checked' if editing and entry.get('encrypted') }}> Encrypt the binary backup <span class="muted">(uses the global backup password)</span></label>
      </div>
    </fieldset>

    <fieldset>
      <legend>🗄️ Retention</legend>
      <div class="form-rows">
        <label for="backup_retention_days">Keep backups</label>
        <span class="unit"><input type="number" id="backup_retention_days" name="backup_retention_days" min="1"
               value="{{ entry.get('backup_retention_days', '') if entry else '' }}" placeholder="∞"> <span class="muted">days (blank inherits global)</span></span>
      </div>
    </fieldset>

    <fieldset>
      <legend>🗂️ Storage</legend>
      <div class="form-rows">
        {% set sel = (entry.get('storage') or []) if entry else [] %}
        <p class="muted full">Remote destinations for this device. Leave all unchecked to
          <strong>inherit</strong> (group, then the global default). Checking any <strong>replaces</strong>
          the inherited set. The local working copy is always kept unless you opt out below.</p>
        {% if storage_destinations %}
        {% for d in storage_destinations %}
        <label class="check full"><input type="checkbox" name="storage" value="{{ d }}"
               {{ 'checked' if d in sel }}> {{ d }}{% if d == default_storage %} <span class="muted">(default)</span>{% endif %}</label>
        {% endfor %}
        {% else %}
        <p class="muted full">No remote destinations defined yet. <a href="/storage/new">Add one →</a></p>
        {% endif %}
        <label class="check full"><input type="checkbox" name="keep_local" value="1"
               {{ 'checked' if not entry or entry.get('keep_local', True) }}> Keep local working copy (uncheck for remote-only)</label>
      </div>
    </fieldset>

    <fieldset>
      <legend>🔌 SSH connection</legend>
      <div class="form-rows">
        <p class="muted full">Leave blank to inherit the global SSH settings. Backups authenticate with an
          SSH <strong>key</strong>; password login isn't stored in config. Advanced ssh args and the
          tmpfs block, if any, are preserved on save.</p>
        <label for="ssh_user">User</label>
        <input type="text" id="ssh_user" name="ssh_user" autocomplete="off" value="{{ essh.get('user', '') }}" placeholder="inherit (rosbackup)">
        <label for="ssh_port">Port</label>
        <input type="number" id="ssh_port" name="ssh_port" min="1" max="65535" value="{{ essh.get('port', '') }}" placeholder="inherit (22)">
        {% if ssh_secrets %}
        <label for="ssh_key_secret">Stored key</label>
        <select id="ssh_key_secret" name="ssh_key_secret">
          <option value="">— inherit global default —</option>
          {% for s in ssh_secrets %}<option value="{{ s }}" {{ 'selected' if essh.get('key_secret') == s }}>{{ s }}</option>{% endfor %}
        </select>
        {% elif vault_unlocked %}
        <p class="muted full">No SSH keys in the vault yet. <a href="/vault/new">Store a key →</a> to reference it here.</p>
        {% else %}
        <p class="muted full">The <a href="/vault">vault</a> is locked — set <span class="mono">ROSBACKUP_SECRET_KEY</span> to reference stored keys.</p>
        {% endif %}
      </div>
    </fieldset>

    {% if editing %}
    <p class="muted">Want this device backed up automatically?
      <a href="/schedules/new">Create a schedule →</a></p>
    {% endif %}

    <button type="submit" class="btn primary">{{ "Save changes" if editing else "Add device" }}</button>
  </form>
</div>
{% if editing %}
<div class="card">
  <h2>Danger zone</h2>
  <p class="muted">Removing a device only edits <span class="mono">targets.yaml</span> — it
    never touches backups already stored for it.</p>
  <button type="button" class="btn danger-btn"
          hx-post="/ui/targets/{{ original_name|urlencode }}/delete"
          hx-confirm="Delete device “{{ original_name }}”? This removes it from targets.yaml.">
    Delete {{ original_name }}
  </button>
</div>
{% endif %}
{% endblock %}