{% extends "operator/base.html" %}
{% load i18n %}
{% block op_title %}{% translate "Certificate & DNS" %}{% endblock %}
{% block op_content %}
<h1>{% translate "Certificates &amp; DNS" %}</h1>
<div class="card">
  <h2>{% translate "Certificates of the customers" %}</h2>
  <p class="muted">{% blocktranslate trimmed with domain=zone.domain %}Two certificates per customer, each with its own key: the wildcard
  <code>*.&lt;customer&gt;.{{ domain }}</code> for its gateways and one only for its portal
  <code>&lt;customer&gt;.{{ domain }}</code>, which never leaves the server.{% endblocktranslate %}</p>
  <div class="table-wrap"><table class="list">
    <tr><th>{% translate "Customer" %}</th><th>{% translate "Wildcard (gateways)" %}</th><th>{% translate "Gateways" %}</th><th>{% translate "Portal" %}</th><th></th></tr>
    {% for r in org_certs %}
    <tr><td><strong>{{ r.org.name }}</strong><br><span class="muted">*.{{ r.org.domain }}</span></td>
      <td>{% if r.cert %}{% blocktranslate trimmed with version=r.cert.version date=r.cert.not_after|date:"SHORT_DATE_FORMAT" %}v{{ version }}, until {{ date }}{% endblocktranslate %}{% else %}<span class="badge off">{% translate "none" context "certificate" %}</span>{% endif %}</td>
      <td>{{ r.n_gateways }}{% if r.n_outdated %} · <strong>{{ r.n_outdated }}</strong> {% translate "outdated" %}{% endif %}</td>
      <td>{% if r.portal_not_after %}{% blocktranslate trimmed with date=r.portal_not_after|date:"SHORT_DATE_FORMAT" %}until {{ date }}{% endblocktranslate %}{% else %}<span class="badge off">{% translate "none" context "certificate" %}</span>{% endif %}</td>
      <td><form method="post" action="{% url 'betrieb:wildcard-issue' zone.id %}">{% csrf_token %}
        <input type="hidden" name="org" value="{{ r.org.id }}">
        <button class="secondary" type="submit">{% translate "Issue" %}</button></form></td></tr>
    {% empty %}<tr><td colspan="5" class="muted">{% translate "No customers yet." %}</td></tr>{% endfor %}
  </table></div>
  <dl class="facts"><dt>{% translate "Output" %}</dt><dd><code class="key">{{ log_path }}</code></dd></dl>
  <div class="row">
    <form method="post" action="{% url 'betrieb:wildcard-issue' zone.id %}">{% csrf_token %}
      <button type="submit">{% translate "Issue all" %}</button></form>
    <a class="btn secondary danger-link" href="{% url 'betrieb:rotation' zone.id %}">{% translate "Emergency rotation …" %}</a>
  </div>
  <p class="muted">{% blocktranslate trimmed %}Issuing runs in the background via DNS-01 (a good minute per certificate). The
  deploy hook imports the wildcard, the version increases, the gateways follow at their next heartbeat;
  the portal certificate takes effect without an nginx reload.{% endblocktranslate %}</p>
</div>

<div class="card">
  <h2>{% translate "DNS (target/actual)" %}</h2>
  {% if not dns_configured %}
    <p>{% blocktranslate trimmed with domain=zone.domain %}No Hetzner token (<code>FORGEIEC_RIVET_HCLOUD_TOKEN</code> in portal.env). Set the records by hand:
    <code>*.{{ domain }}</code> and per customer <code>*.&lt;customer&gt;.{{ domain }}</code> A/AAAA
    → fixed IP of the server, CAA <code>0 issue "letsencrypt.org"</code>.{% endblocktranslate %}</p>
  {% elif dns_error %}
    <div class="msg error">{{ dns_error }}</div>
  {% else %}
  <div class="table-wrap"><table class="list">
    <tr><th>{% blocktranslate trimmed with zone=dns_zone %}Name ({{ zone }}){% endblocktranslate %}</th><th>{% translate "Type" context "dns" %}</th><th>{% translate "Target" context "dns" %}</th><th>{% translate "Actual" context "dns" %}</th><th>{% translate "State" %}</th></tr>
    {% for r in dns_rows %}
    <tr><td>{{ r.name }}</td><td>{{ r.type }}</td><td>{{ r.want|join:", " }}</td><td>{{ r.have|join:", "|default:"–" }}</td>
      <td>{% if r.state == "ok" %}<span class="badge on">ok</span>{% else %}<span class="badge off">{{ r.state }}</span>{% endif %}</td></tr>
    {% endfor %}
  </table></div>
  {% endif %}
  {% if dns_configured %}
  <form method="post" action="{% url 'betrieb:dns-sync' zone.id %}">{% csrf_token %}
    <div class="row">
      <button class="secondary" type="submit" name="mode" value="probe">{% translate "Dry run" %}</button>
      <button type="submit" name="mode" value="apply">{% translate "Sync DNS" %}</button>
    </div>
  </form>
  <p class="muted">{% blocktranslate trimmed %}Syncs the DNS of all organisations with the database. Only records
  with the Rivet label of this operator are touched; other records remain unchanged.{% endblocktranslate %}</p>
  {% endif %}
  {% if sync_lines is not None %}
  <h2>{% if sync_dry %}{% translate "Dry run: this would change" %}{% else %}{% translate "Result of the sync" %}{% endif %}</h2>
  {% if sync_lines %}<pre>{% for line in sync_lines %}{{ line }}
{% endfor %}</pre>{% else %}<p>{% translate "Everything matches, nothing to do." %}</p>{% endif %}
  {% endif %}
</div>

<div class="card">
  <h2>{% translate "Versions" %}</h2>
  <div class="table-wrap"><table class="list">
    <tr><th>{% translate "Wildcard" %}</th><th>{% translate "Version" %}</th><th>{% translate "valid until" %}</th><th>{% translate "Status" %}</th><th>{% translate "Fingerprint (SHA-256)" %}</th></tr>
    {% for c in certs %}
    <tr><td>{% if c.organisation %}*.{{ c.organisation.domain }}{% else %}*.{{ zone.domain }} <span class="muted">{% translate "(earlier)" %}</span>{% endif %}</td><td>{{ c.version }}</td><td>{{ c.not_after|date:"SHORT_DATE_FORMAT" }}</td>
      <td>{% if c.revoked %}<span class="badge off">{% translate "revoked" %}</span>{% else %}<span class="badge on">{% translate "valid" %}</span>{% endif %}</td>
      <td><code class="key">{{ c.fingerprint_sha256|truncatechars:24 }}</code></td></tr>
    {% empty %}<tr><td colspan="5" class="muted">{% translate "No certificate imported yet." %}</td></tr>{% endfor %}
  </table></div>
</div>

<div class="card">
  <h2>{% translate "Recent fetches" %}</h2>
  <div class="table-wrap"><table class="list">
    <tr><th>{% translate "Time" %}</th><th>{% translate "Gateway" %}</th><th>{% translate "Version" %}</th><th>{% translate "delivered" %}</th></tr>
    {% for f in fetches %}
    <tr><td>{{ f.fetched_at|date:"SHORT_DATETIME_FORMAT" }}</td><td>{{ f.gateway.slug }}</td><td>{{ f.cert_version|default:"–" }}</td>
      <td>{% if f.delivered %}{% translate "yes" %}{% else %}{% translate "no" %}{% if f.note %} <span class="muted">({{ f.note }})</span>{% endif %}{% endif %}</td></tr>
    {% empty %}<tr><td colspan="4" class="muted">{% translate "No fetches." %}</td></tr>{% endfor %}
  </table></div>
</div>
{% endblock %}