{{define "title"}}Edit Domain{{end}}

{{define "content"}}
<div class="container-fluid">
    <div class="row">
        <div class="col-md-8 offset-md-2">
            <div class="card">
                <div class="card-header bg-primary text-white d-flex justify-content-between align-items-center">
                    <h4 class="mb-0"><i class="bi bi-pencil me-2"></i>Edit Domain</h4>
                    <a href="/smtp-server/domains" class="btn btn-light btn-sm"><i class="bi bi-arrow-left me-1"></i>Back to Domains</a>
                </div>
                <div class="card-body">
                    <form method="POST" class="needs-validation" novalidate>
                        <div class="mb-3">
                            <label for="domain_name" class="form-label"><i class="bi bi-globe me-1"></i>Domain Name</label>
                            <input type="text" class="form-control" id="domain_name" name="domain_name" value="{{.domain.DomainName}}" placeholder="example.com"
                                   pattern="^[a-zA-Z0-9]([a-zA-Z0-9\-]{0,61}[a-zA-Z0-9])?(\.[a-zA-Z0-9]([a-zA-Z0-9\-]{0,61}[a-zA-Z0-9])?)*$" required>
                            <div class="invalid-feedback">Please provide a valid domain name.</div>
                            <div class="form-text"><i class="bi bi-info-circle me-1"></i>Enter a fully qualified domain name (e.g., example.com)</div>
                        </div>

                        <div class="mb-3 form-check">
                            <input type="checkbox" class="form-check-input" id="mfa_exempt" name="mfa_exempt" {{if .domain.MFAExempt}}checked{{end}}>
                            <label class="form-check-label" for="mfa_exempt">Exempt this domain's mailboxes from mandatory MFA</label>
                            <div class="form-text">Only relevant if "Enforce MFA for Mailboxes" is turned on in Server Settings.</div>
                        </div>

                        <div class="mb-3">
                            <label for="catchall_mailbox_id" class="form-label"><i class="bi bi-inbox-fill me-1"></i>Catch-all mailbox</label>
                            <select class="form-select" id="catchall_mailbox_id" name="catchall_mailbox_id">
                                <option value="">Off — an unrecognized recipient bounces normally</option>
                                {{range .mailboxes}}
                                <option value="{{.ID}}" {{if eq .ID $.catchall_id}}selected{{end}}>{{.Email}}</option>
                                {{end}}
                            </select>
                            <div class="form-text">Mail to any address on this domain that doesn't match a real mailbox, alias, or +tag sub-address lands here instead of bouncing.</div>
                        </div>

                        <div class="mb-3">
                            <label for="send_rate_limit_per_hour" class="form-label"><i class="bi bi-speedometer2 me-1"></i>Outbound send rate limit</label>
                            <div class="input-group" style="max-width: 300px;">
                                <input type="number" min="0" class="form-control" id="send_rate_limit_per_hour" name="send_rate_limit_per_hour" placeholder="Unlimited" value="{{if .domain.SendRateLimitPerHour}}{{.domain.SendRateLimitPerHour}}{{end}}">
                                <span class="input-group-text">messages / hour</span>
                            </div>
                            <div class="form-text">Caps how many messages this domain's senders can hand off per rolling hour — in case an account gets compromised, it slows down instead of blasting out thousands of emails. Over-limit sends get a temporary (retryable) rejection, not a permanent bounce. Leave blank for unlimited.</div>
                        </div>

                        <div class="mb-3">
                            <label for="mta_sts_mode" class="form-label"><i class="bi bi-lock-fill me-1"></i>MTA-STS mode</label>
                            <select class="form-select" id="mta_sts_mode" name="mta_sts_mode" style="max-width: 300px;">
                                <option value="testing" {{if eq .domain.MTASTSMode "testing"}}selected{{end}}>Testing (default, report-only)</option>
                                <option value="enforce" {{if eq .domain.MTASTSMode "enforce"}}selected{{end}}>Enforce</option>
                            </select>
                            <div class="form-text">
                                Tells senders that respect MTA-STS to require a verified TLS certificate when delivering to this domain — "Testing" publishes the policy without changing anything; "Enforce" asks compliant senders to hard-fail rather than deliver over an unverified connection. This only takes effect once you also publish the required DNS records:
                                <ul class="mb-0 mt-1">
                                    <li><code>_mta-sts.{{.domain.DomainName}}</code> TXT <code>"v=STSv1; id=&lt;any-string-you-change-on-update&gt;"</code></li>
                                    <li><code>mta-sts.{{.domain.DomainName}}</code> pointed at this server, so <code>https://mta-sts.{{.domain.DomainName}}/.well-known/mta-sts.txt</code> resolves here</li>
                                </ul>
                            </div>
                        </div>

                        <div class="mb-3">
                            <label class="form-label"><i class="bi bi-calendar-check me-1"></i>Calendar/Contacts sync (CalDAV/CardDAV)</label>
                            <div class="form-check">
                                <input type="checkbox" class="form-check-input" id="caldav_enabled" name="caldav_enabled" {{if .domain.CalDAVEnabled}}checked{{end}}>
                                <label class="form-check-label" for="caldav_enabled">Allow CalDAV (Calendar sync)</label>
                            </div>
                            <div class="form-check">
                                <input type="checkbox" class="form-check-input" id="carddav_enabled" name="carddav_enabled" {{if .domain.CardDAVEnabled}}checked{{end}}>
                                <label class="form-check-label" for="carddav_enabled">Allow CardDAV (Contacts sync)</label>
                            </div>
                            <div class="form-text">Off by default for every domain. Turning one on here only makes it available — each mailbox owner still has to turn it on for themselves from their own webmail Account settings before it actually works for them.</div>
                        </div>

                        <div class="row">
                            <div class="col-md-6">
                                <div class="alert alert-info">
                                    <h6><i class="bi bi-info-circle me-1"></i>Current Status</h6>
                                    <p class="mb-1"><strong>Status:</strong>
                                        {{if .domain.IsActive}}<span class="badge bg-success">Active</span>{{else}}<span class="badge bg-danger">Inactive</span>{{end}}
                                    </p>
                                    <p class="mb-0"><strong>Created:</strong> {{strftime "%Y-%m-%d %H:%M:%S" .domain.CreatedAt}}</p>
                                </div>
                            </div>
                            <div class="col-md-6">
                                <div class="alert alert-warning">
                                    <h6><i class="bi bi-exclamation-triangle me-1"></i>Note</h6>
                                    <p class="mb-0">Changing the domain name will affect all associated users, IP addresses, and DKIM keys. Make sure to update your DNS records accordingly.</p>
                                </div>
                            </div>
                        </div>

                        <div class="d-flex justify-content-between">
                            <a href="/smtp-server/domains" class="btn btn-secondary"><i class="bi bi-x me-1"></i>Cancel</a>
                            <button type="submit" class="btn btn-primary"><i class="bi bi-save me-1"></i>Update Domain</button>
                        </div>
                    </form>
                </div>
            </div>

            <div class="card mt-4">
                <div class="card-header"><h5 class="mb-0"><i class="bi bi-box-seam me-2"></i>Export / import this domain's mail</h5></div>
                <div class="card-body">
                    <p class="text-muted">Exports every mailbox in this domain — messages, contacts, calendar, filter rules, and signatures — into one passphrase-encrypted archive, portable to a different server. MFA/passkeys/app-passwords aren't included; an imported mailbox starts with none enrolled. Importing skips (doesn't overwrite) any mailbox whose email address already exists on this server.</p>
                    <div class="row g-4">
                        <div class="col-md-6">
                            <h6>Export</h6>
                            <form method="post" action="/smtp-server/domains/{{.domain.ID}}/export" class="row g-2 align-items-end">
                                <div class="col-auto flex-grow-1">
                                    <label class="form-label small">Passphrase (required)</label>
                                    <input type="password" name="passphrase" class="form-control" required autocomplete="new-password">
                                </div>
                                <div class="col-auto">
                                    <button type="submit" class="btn btn-primary"><i class="bi bi-download me-1"></i>Export domain</button>
                                </div>
                            </form>
                        </div>
                        <div class="col-md-6">
                            <h6>Import</h6>
                            <form method="post" action="/smtp-server/domains/{{.domain.ID}}/import" enctype="multipart/form-data" class="row g-2 align-items-end">
                                <div class="col-auto">
                                    <label class="form-label small">Archive file</label>
                                    <input type="file" name="archive" class="form-control" required>
                                </div>
                                <div class="col-auto">
                                    <label class="form-label small">Passphrase</label>
                                    <input type="password" name="passphrase" class="form-control" required autocomplete="new-password">
                                </div>
                                <div class="col-auto">
                                    <button type="submit" class="btn btn-outline-primary" data-confirm="Import into {{.domain.DomainName}}? Mailboxes whose email already exists here are skipped, everything else is added.">
                                        <i class="bi bi-upload me-1"></i>Import into this domain
                                    </button>
                                </div>
                            </form>
                        </div>
                    </div>
                </div>
            </div>
        </div>
    </div>
</div>

<script>
(function() {
    'use strict';
    window.addEventListener('load', function() {
        var forms = document.getElementsByClassName('needs-validation');
        Array.prototype.filter.call(forms, function(form) {
            form.addEventListener('submit', function(event) {
                if (form.checkValidity() === false) { event.preventDefault(); event.stopPropagation(); }
                form.classList.add('was-validated');
            }, false);
        });
    }, false);
})();
document.getElementById('domain_name').addEventListener('input', function(e) {
    const value = e.target.value.toLowerCase();
    e.target.value = value;
    const domainRegex = /^[a-zA-Z0-9]([a-zA-Z0-9\-]{0,61}[a-zA-Z0-9])?(\.[a-zA-Z0-9]([a-zA-Z0-9\-]{0,61}[a-zA-Z0-9])?)*$/;
    if (value && !domainRegex.test(value)) { e.target.setCustomValidity('Invalid domain format'); } else { e.target.setCustomValidity(''); }
});
</script>
{{end}}