{% extends "base.html" %}
{% block content %}
<section class="card settings-section">
  <div class="panel-title"><h2>Account</h2></div>
  <div class="settings-grid">
    <form method="post" action="/settings/username" class="stack-form">
      <h3>Change username</h3>
      <label><span>Current password</span><input type="password" name="current_password" required></label>
      <label><span>New username</span><input name="new_username" required></label>
      <button class="button primary" type="submit">Save username</button>
    </form>
    <form method="post" action="/settings/password" class="stack-form">
      <h3>Change password</h3>
      <label><span>Current password</span><input type="password" name="current_password" required></label>
      <label><span>New password</span><input type="password" name="new_password" required></label>
      <label><span>Confirm new password</span><input type="password" name="confirm_password" required></label>
      <button class="button primary" type="submit">Save password</button>
    </form>
  </div>
</section>

<section class="card settings-section">
  <div class="panel-title"><h2>Tunnel Management</h2></div>
  <div class="action-list">
    <form method="post" action="/tunnel/restart"><button class="button secondary" type="submit"><i data-lucide="refresh-cw"></i>Restart</button></form>
    <form method="post" action="/tunnel/sync"><button class="button secondary" type="submit"><i data-lucide="cloud-cog"></i>Sync</button></form>
    {% if request_path == '/settings' and error == 'confirm-reenrol' %}
      <form method="post" action="/tunnel/reenrol"><button class="button warning" type="submit"><i data-lucide="rotate-ccw"></i>Confirm Force Re-enrol</button></form>
    {% else %}
      <a class="button warning" href="/settings?error=confirm-reenrol"><i data-lucide="rotate-ccw"></i>Force Re-enrol</a>
    {% endif %}
  </div>
</section>

<section class="card settings-section">
  <div class="panel-title"><h2>Migration Admin Access</h2></div>
  <div class="action-list">
    <span class="status-pill {{ 'healthy' if migration_admin.exists else 'offline' }}">
      {{ 'Admin config exists' if migration_admin.exists else 'No admin config' }}
    </span>
    {% if migration_admin.created_at %}
      <span class="muted">Created {{ migration_admin.created_at }}</span>
    {% endif %}
    {% if migration_admin.exists %}
      <a class="button secondary" href="/settings/migration-admin/download"><i data-lucide="download"></i>Download</a>
      <form method="post" action="/settings/migration-admin/revoke"><button class="button danger" type="submit"><i data-lucide="trash-2"></i>Revoke</button></form>
    {% else %}
      <button class="button secondary" type="button" disabled><i data-lucide="download"></i>Download</button>
      <button class="button danger" type="button" disabled><i data-lucide="trash-2"></i>Revoke</button>
    {% endif %}
  </div>
</section>

<section class="card settings-section">
  <div class="panel-title"><h2>DHCP Roaming Mode</h2></div>
  <form method="post" action="/settings/dhcp-roaming" class="stack-form compact-form">
    <label class="switch-row">
      <span>
        <strong>Auto-manage primary LAN route</strong>
        <small>Advertise the subnet on the primary DHCP interface and retire the previous auto-managed subnet when it changes.</small>
      </span>
      <input type="checkbox" name="dhcp_roaming_mode" {% if dhcp_roaming.enabled %}checked{% endif %}>
    </label>
    <label>
      <span>Interface override</span>
      <input name="dhcp_roaming_interface" value="{{ dhcp_roaming.interface or '' }}" placeholder="default route">
    </label>
    <button class="button primary" type="submit"><i data-lucide="route"></i>Save DHCP Roaming Mode</button>
  </form>
</section>

<section class="card danger-zone">
  <div class="panel-title"><h2>Danger Zone</h2></div>
  <p class="empty-copy">Deregister this instance from the edge and stop local services.</p>
  {% if error == 'confirm-deregister' %}
    <form method="post" action="/instance/deregister"><button class="button danger" type="submit"><i data-lucide="shield-x"></i>Confirm Deregister</button></form>
  {% else %}
    <a class="button danger" href="/settings?error=confirm-deregister"><i data-lucide="shield-x"></i>Deregister</a>
  {% endif %}
</section>
{% endblock %}