{% extends "base.html" %}

{% block sidebar %}
<aside class="sidebar">
  <div class="sb-brand">
    <span class="mark">u</span>
    <div>
      <strong>upbox</strong>
      <small>127.0.0.1:8800</small>
    </div>
  </div>
  <div class="sb-section">Dashboard</div>
  <a href="/" class="sb-link">Live feed <span class="shortcut">F</span></a>
  <a href="/settings" class="sb-link">Rules</a>
  <a href="/transparency" class="sb-link">Transparency</a>
  <a href="/settings" class="sb-link active">Settings</a>
  <a href="/settings" class="sb-link">Doctor</a>
  <div class="sb-spacer"></div>
  <div class="sb-status">
    <span class="dot"></span>
    <span>proxy <b>:8888</b></span>
    <span style="margin-left: auto;">CA <b>3/3</b></span>
  </div>
</aside>
{% endblock %}

{% block main %}
<div class="settings">
  <h2>Settings</h2>

  {% if message %}<p class="msg-ok">{{ message }}</p>{% endif %}
  {% if error %}<p class="msg-err">{{ error }}</p>{% endif %}

  <details open class="rules-block">
    <summary><strong>Redaction patterns</strong> (<code>redact.yaml</code>)</summary>
    <form method="post" action="/settings/redact">
      <textarea name="content" rows="14">{{ redact_yaml }}</textarea>
      <button type="submit">Save</button>
    </form>
  </details>

  <details class="rules-block">
    <summary><strong>Per-tool allowlist</strong> (<code>allowlist.yaml</code>)</summary>
    <form method="post" action="/settings/allowlist">
      <textarea name="content" rows="14">{{ allowlist_yaml }}</textarea>
      <button type="submit">Save</button>
    </form>
  </details>

  <details class="rules-block">
    <summary><strong>Tool fingerprints</strong> (<code>tools.yaml</code>)</summary>
    <form method="post" action="/settings/tools">
      <textarea name="content" rows="14">{{ tools_yaml }}</textarea>
      <button type="submit">Save</button>
    </form>
  </details>

  <details class="rules-block">
    <summary><strong>Capture policy</strong> (<code>capture.yaml</code>)</summary>
    <p class="muted small">Set <code>bodies</code> and <code>headers</code> to <code>false</code> for metadata-only mode. Sizes, hashes, hosts and tools are always recorded.</p>
    <form method="post" action="/settings/capture">
      <textarea name="content" rows="8">{{ capture_yaml }}</textarea>
      <button type="submit">Save</button>
    </form>
  </details>

  <p class="muted small">Edits write to <code>~/.upbox/rules/</code>. The running proxy applies them within about two seconds; only a brand-new intercepted host needs a restart.</p>
</div>
{% endblock %}