{{define "title"}}Backups - Email Server{{end}}

{{define "content"}}
<div class="container-fluid">
    <div class="d-flex justify-content-between align-items-center mb-4">
        <h2><i class="bi bi-cloud-arrow-down me-2"></i>Backups</h2>
    </div>

    <div class="card mb-4">
        <div class="card-header"><h5 class="mb-0"><i class="bi bi-server me-2"></i>Whole-server backup</h5></div>
        <div class="card-body">
            <p class="text-muted">Downloads a single archive of everything under <code>server_data/</code> — the database, every mailbox's encrypted mail, and the master key that decrypts it. The database is snapshotted consistently (SQLite's <code>VACUUM INTO</code>) so the backup is never caught mid-write, even while the server keeps running.</p>
            <div class="alert alert-warning">
                <i class="bi bi-exclamation-triangle me-2"></i>Losing the master key makes every mailbox's stored mail permanently unrecoverable, even for an admin. This one archive contains everything needed to restore the whole server — store it somewhere separate from this machine, and set a passphrase below if it might end up somewhere you don't fully trust.
            </div>
            <form method="post" action="/smtp-server/backups/download" class="row g-2 align-items-end">
                <div class="col-md-6">
                    <label class="form-label small">Passphrase (optional — encrypts the archive)</label>
                    <input type="password" name="passphrase" class="form-control" placeholder="Leave blank for an unencrypted archive" autocomplete="new-password">
                </div>
                <div class="col-auto">
                    <button type="submit" class="btn btn-primary"><i class="bi bi-download me-1"></i>Download whole-server backup now</button>
                </div>
            </form>
        </div>
    </div>

    <div class="card mb-4">
        <div class="card-header"><h5 class="mb-0"><i class="bi bi-calendar-check me-2"></i>Scheduled backups</h5></div>
        <div class="card-body">
            <p class="text-muted">Automatically writes an unencrypted whole-server backup straight to a folder on this machine (not the browser) on the interval below, and deletes the oldest ones once more than "keep" exist. Manual (the default) means nothing runs automatically — use "Run backup now" or the download button above whenever you want one.</p>
            <form method="post" action="/smtp-server/backups/schedule" class="row g-2 align-items-end mb-3">
                <div class="col-md-3">
                    <label class="form-label small">Interval</label>
                    <select class="form-select" name="schedule">
                        <option value="" {{if eq .schedule ""}}selected{{end}}>Manual (default)</option>
                        <option value="daily" {{if eq .schedule "daily"}}selected{{end}}>Daily</option>
                        <option value="weekly" {{if eq .schedule "weekly"}}selected{{end}}>Weekly</option>
                        <option value="monthly" {{if eq .schedule "monthly"}}selected{{end}}>Monthly</option>
                    </select>
                </div>
                <div class="col-md-5">
                    <label class="form-label small">Destination folder (on this server)</label>
                    <input type="text" class="form-control" name="dir" value="{{.backup_dir}}">
                </div>
                <div class="col-md-2">
                    <label class="form-label small">Keep</label>
                    <input type="number" min="1" class="form-control" name="keep" value="{{.keep}}">
                </div>
                <div class="col-auto">
                    <button type="submit" class="btn btn-outline-primary"><i class="bi bi-save me-1"></i>Save</button>
                </div>
            </form>
            <form method="post" action="/smtp-server/backups/run">
                <button type="submit" class="btn btn-primary"><i class="bi bi-play-fill me-1"></i>Run backup now</button>
            </form>
        </div>
    </div>

    <div class="card mb-4">
        <div class="card-header"><h6 class="mb-0"><i class="bi bi-folder2-open me-2"></i>Backups on disk ({{.backup_dir}})</h6></div>
        <div class="card-body">
            {{if .scheduled}}
            <table class="table table-sm mb-0">
                <thead><tr><th>File</th><th>Size</th><th>Written</th><th></th></tr></thead>
                <tbody>
                    {{range .scheduled}}
                    <tr>
                        <td><code>{{.Name}}</code></td>
                        <td>{{filesize .Size}}</td>
                        <td>{{strftime "%Y-%m-%d %H:%M:%S" .ModTime}}</td>
                        <td class="text-end"><a class="btn btn-sm btn-outline-secondary" href="/smtp-server/backups/scheduled/{{.Name}}"><i class="bi bi-download"></i></a></td>
                    </tr>
                    {{end}}
                </tbody>
            </table>
            {{else}}
            <p class="text-muted mb-0">No backups written to this folder yet.</p>
            {{end}}
        </div>
    </div>

    <div class="card mb-4">
        <div class="card-header"><h6 class="mb-0"><i class="bi bi-arrow-counterclockwise me-2"></i>Restoring</h6></div>
        <div class="card-body">
            <p class="text-muted mb-2">Restore is a command-line operation, not a button here — it replaces every file under <code>server_data/</code> wholesale, including the database this running process has open, which isn't safe to do to a live server from inside its own web UI. Stop the server, then run:</p>
            <pre class="bg-dark text-light p-3 rounded"><code>./mailgoserver -restore-server -in backup.tar.gz [-restore-passphrase "..."] [-force]</code></pre>
            <p class="text-muted mb-0"><code>-force</code> is required if <code>server_data/</code> isn't already empty. <code>-restore-passphrase</code> is only needed for an archive that was downloaded with a passphrase set.</p>
        </div>
    </div>
</div>
{{end}}