{% extends "operator/base.html" %}
{% load i18n %}
{% block op_title %}{% translate "Routing (server)" %}{% endblock %}
{% block op_content %}
<h1>{% translate "Routing (server)" %}</h1>
<p class="muted">{% blocktranslate trimmed %}Phones connect to the server (interface “phones”); the server forwards
only the released ports to the devices of their customer (SNAT into the uplink). The service forgeiec-rivet-wg
reports the state below.{% endblocktranslate %}</p>

<div class="card">
  <h2>{% translate "Phone access" %}</h2>
  <dl class="facts">
    <dt>{% translate "Endpoint" context "WireGuard app" %}</dt><dd><code>{{ phones_endpoint }}</code></dd>
    <dt>{% translate "Public key" %}</dt><dd>{% if phones_public_key %}<code class="key">{{ phones_public_key }}</code>{% else %}<span class="badge off">{% translate "not set" %}</span> <span class="muted">{% translate "FORGEIEC_RIVET_PHONES_PUBLIC_KEY is empty: phones are still shown the old path via the gateway." %}</span>{% endif %}</dd>
    <dt>{% translate "According to the portal" %}</dt><dd>{% blocktranslate trimmed with peers=payload.peers|length rules=payload.access|length %}{{ peers }} active phone(s) · {{ rules }} access rule(s){% endblocktranslate %}</dd>
  </dl>
</div>

{% if not configured %}
<p class="msg error">{% translate "WG service not configured (FORGEIEC_RIVET_WG_SOCKET is empty)." %}</p>
{% elif error %}
<p class="msg error">{% blocktranslate trimmed %}The state of the server cannot be read: {{ error }}{% endblocktranslate %}</p>
{% else %}
<div class="card">
  <h2>{% translate "Interface “phones”" %}</h2>
  {% if status.phones %}
  <dl class="facts">
    <dt>{% translate "UDP port" %}</dt><dd>{{ status.phones.listen_port|default:"–" }}</dd>
    <dt>{% translate "Public key" %}</dt><dd><code class="key">{{ status.phones.public_key|default:"–" }}</code></dd>
  </dl>
  <div class="table-wrap"><table class="list">
    <tr><th>{% translate "Phone" %}</th><th>{% translate "Address" %}</th><th>{% translate "Last handshake" %}</th><th>{% translate "Data volume" %}</th></tr>
    {% for p in status.phone_peers %}
    <tr><td>{% if p.phone %}<a href="{% url 'betrieb:phone' p.phone.id %}">{{ p.phone.name }}</a><br><span class="muted">{{ p.phone.gateway.name }}</span>{% else %}<code>{{ p.public_key|truncatechars:12 }}</code> <span class="muted">{% translate "(unknown)" %}</span>{% endif %}</td>
      <td>{{ p.allowed_ip|default:"–" }}{% if p.endpoint %}<br><span class="muted">{% blocktranslate trimmed with endpoint=p.endpoint %}from {{ endpoint }}{% endblocktranslate %}</span>{% endif %}</td>
      <td>{% if p.seen %}{{ p.seen|date:"SHORT_DATETIME_FORMAT" }}{% else %}{% translate "never connected" %}{% endif %}</td>
      <td>{% blocktranslate trimmed with rx=p.rx_bytes|filesizeformat tx=p.tx_bytes|filesizeformat %}received {{ rx }} · sent {{ tx }}{% endblocktranslate %}</td></tr>
    {% empty %}<tr><td colspan="4" class="muted">{% translate "No phone peers." %}</td></tr>{% endfor %}
  </table></div>
  {% else %}
  <p class="muted">{% translate "The service does not report an interface “phones” (older version?)." %}</p>
  {% endif %}
</div>

<div class="card">
  <h2>{% translate "Firewall of the server (nftables)" %}</h2>
  {% if status.firewall %}<pre class="firewall">{{ status.firewall }}</pre>
  {% else %}<p class="muted">{% translate "The service does not report a firewall table." %}</p>{% endif %}
  <p class="muted">{% blocktranslate trimmed with n=status.n_uplink_peers %}Uplink: {{ n }} gateway peer(s).{% endblocktranslate %}</p>
</div>
{% endif %}
{% endblock %}
{% block op_head %}<style>
  code.key { word-break:break-all; font-size:.85rem; }
  pre.firewall { overflow-x:auto; font-size:.8rem; max-height:60vh; }
</style>{% endblock %}