{% extends "base.html" %}
{% block title %}FTP / SFTP{% endblock %}
{% block body %}
<div class="head"><div><small>TRANSFER · VSFTPD + OPENSSH</small><h1>FTP / SFTP</h1><p>Manage restricted transfer accounts, passwords, directories, quotas and SSH keys.</p></div><div class="action-row"><span class="task-status {{'completed' if status.vsftpd else 'failed'}}">FTP {{'READY' if status.vsftpd else 'NOT INSTALLED'}}</span><span class="task-status {{'completed' if status.sshd else 'failed'}}">SFTP {{'READY' if status.sshd else 'NOT READY'}}</span></div></div>
<section class="stats"><div class="card stat"><small>FTP ACCOUNTS</small><strong>{{ftp_accounts|length}}</strong><span>vsftpd restricted users</span></div><div class="card stat"><small>SFTP USERS</small><strong>{{sftp_accounts|length}}</strong><span>OpenSSH internal-sftp</span></div><div class="card stat"><small>VSFTPD</small><strong>{{'ONLINE' if status.vsftpd else 'MISSING'}}</strong><span>FTP service</span></div><div class="card stat"><small>OPENSSH</small><strong>{{'READY' if status.sshd else 'MISSING'}}</strong><span>SFTP service</span></div></section>
{% if not status.vsftpd or not status.sshd %}<div class="error">Install <b>vsftpd</b> for FTP and ensure the OpenSSH server is installed for SFTP. The manager will configure only SCpanel-managed users and SSH Match blocks.</div>{% endif %}
<div class="grid2">
<section class="card"><div class="cardhead"><div><small class="muted">FTP ACCOUNT</small><h2>Create FTP account</h2></div></div>
<form class="formgrid" method="post" action="{{'/admin/ftp/create' if admin_mode else '/user/ftp/create'}}"><input type="hidden" name="csrf_token" value="{{csrf_token}}">
{% if admin_mode %}<label>Hosting account<select name="account_id" required><option value="">Select account</option>{% for a in accounts %}<option value="{{a.id}}">{{a.username}}{% if a.domain %} · {{a.domain}}{% endif %}</option>{% endfor %}</select></label>{% endif %}
<label>Username<input name="username" pattern="[A-Za-z][A-Za-z0-9_-]{2,31}" placeholder="files" required></label><label>Directory<input name="directory" value="public_html" placeholder="public_html/uploads" required></label><label>Password<input type="password" name="password" minlength="10" required placeholder="10+ characters"></label><label>Quota (MB)<input type="number" name="quota_mb" value="0" min="0" max="1048576"><small class="muted">0 = unlimited. Filesystem user quotas are enforced when enabled.</small></label><div class="action-row" style="grid-column:1/-1"><button class="btn">Create FTP Account</button></div></form></section>
<section class="card"><div class="cardhead"><div><small class="muted">SFTP ACCOUNT</small><h2>Create SFTP user</h2></div></div>
<form class="formgrid" method="post" action="{{'/admin/ftp/sftp/create' if admin_mode else '/user/ftp/sftp/create'}}"><input type="hidden" name="csrf_token" value="{{csrf_token}}">
{% if admin_mode %}<label>Hosting account<select name="account_id" required><option value="">Select account</option>{% for a in accounts %}<option value="{{a.id}}">{{a.username}}{% if a.domain %} · {{a.domain}}{% endif %}</option>{% endfor %}</select></label>{% endif %}
<label>Username<input name="username" pattern="[A-Za-z][A-Za-z0-9_-]{2,31}" placeholder="deploy" required></label><label>Password<input type="password" name="password" minlength="10" required placeholder="10+ characters"></label><label>Quota (MB)<input type="number" name="quota_mb" value="0" min="0" max="1048576"></label><label style="grid-column:1/-1">SSH public key (optional)<textarea name="public_key" rows="4" placeholder="ssh-ed25519 AAAA..."></textarea></label><div class="action-row" style="grid-column:1/-1"><button class="btn">Create SFTP User</button></div></form></section>
</div>
<section class="card"><div class="cardhead"><div><small class="muted">FTP ACCOUNTS</small><h2>Managed FTP users</h2></div></div><div class="tablewrap"><table><thead><tr><th>USER</th><th>DIRECTORY</th><th>USAGE</th><th>QUOTA</th><th>STATUS</th><th>ACTIONS</th></tr></thead><tbody>
{% for r in ftp_accounts %}<tr><td><b>{{r.username}}</b><div class="muted">system: {{r.system_username}}</div></td><td><code>{{r.directory}}</code></td><td>{{(r.usage_bytes/1048576)|round(1)}} MB</td><td>{{r.quota_mb or 'Unlimited'}}{% if r.quota_mb %} MB{% endif %}</td><td><span class="task-status {{'completed' if r.enabled else 'failed'}}">{{'ENABLED' if r.enabled else 'DISABLED'}}</span></td><td><div class="action-row"><form method="post" action="{{'/admin/ftp/%d/action'%r.id if admin_mode else '/user/ftp/%d/action'%r.id}}"><input type="hidden" name="csrf_token" value="{{csrf_token}}"><input type="hidden" name="action" value="toggle"><button class="soft">{{'Disable' if r.enabled else 'Enable'}}</button></form><button class="ghost" type="button" onclick="openModal('ftp-pw-{{r.id}}')">Password</button><button class="ghost" type="button" onclick="openModal('ftp-dir-{{r.id}}')">Directory</button><button class="ghost" type="button" onclick="openModal('ftp-quota-{{r.id}}')">Quota</button><form method="post" action="{{'/admin/ftp/%d/delete'%r.id if admin_mode else '/user/ftp/%d/delete'%r.id}}" onsubmit="return confirm('Delete FTP account? User data will be retained.')"><input type="hidden" name="csrf_token" value="{{csrf_token}}"><button class="danger">Delete</button></form></div></td></tr>
{% else %}<tr><td colspan="6" class="empty">No FTP accounts yet.</td></tr>{% endfor %}</tbody></table></div></section>
<section class="card"><div class="cardhead"><div><small class="muted">SFTP USERS</small><h2>Restricted OpenSSH users</h2></div></div><div class="tablewrap"><table><thead><tr><th>USER</th><th>RESTRICTED HOME</th><th>USAGE</th><th>QUOTA</th><th>KEYS</th><th>STATUS / ACTIONS</th></tr></thead><tbody>
{% for r in sftp_accounts %}<tr><td><b>{{r.username}}</b><div class="muted">system: {{r.system_username}}</div></td><td><code>{{r.directory}}</code></td><td>{{(r.usage_bytes/1048576)|round(1)}} MB</td><td>{{r.quota_mb or 'Unlimited'}}{% if r.quota_mb %} MB{% endif %}</td><td>{{r.keys|length}}</td><td><div class="action-row"><span class="task-status {{'completed' if r.enabled else 'failed'}}">{{'ENABLED' if r.enabled else 'DISABLED'}}</span><form method="post" action="{{'/admin/ftp/sftp/%d/action'%r.id if admin_mode else '/user/ftp/sftp/%d/action'%r.id}}"><input type="hidden" name="csrf_token" value="{{csrf_token}}"><input type="hidden" name="action" value="toggle"><button class="soft">{{'Disable' if r.enabled else 'Enable'}}</button></form><button class="ghost" type="button" onclick="openModal('sftp-pw-{{r.id}}')">Password</button><button class="ghost" type="button" onclick="openModal('sftp-quota-{{r.id}}')">Quota</button><button class="ghost" type="button" onclick="openModal('sftp-key-{{r.id}}')">SSH Keys</button><form method="post" action="{{'/admin/ftp/sftp/%d/delete'%r.id if admin_mode else '/user/ftp/sftp/%d/delete'%r.id}}" onsubmit="return confirm('Delete SFTP account and its restricted home?')"><input type="hidden" name="csrf_token" value="{{csrf_token}}"><button class="danger">Delete</button></form></div></td></tr>
{% else %}<tr><td colspan="6" class="empty">No SFTP users yet.</td></tr>{% endfor %}</tbody></table></div></section>
{% for r in ftp_accounts %}
<div class="modal-backdrop" id="ftp-pw-{{r.id}}" hidden><div class="modal-card"><button class="modal-close" data-modal-close>×</button><h2>FTP password</h2><form method="post" action="{{'/admin/ftp/%d/action'%r.id if admin_mode else '/user/ftp/%d/action'%r.id}}"><input type="hidden" name="csrf_token" value="{{csrf_token}}"><input type="hidden" name="action" value="password"><label>New password<input type="password" name="password" minlength="10" required></label><button class="btn">Save password</button></form></div></div>
<div class="modal-backdrop" id="ftp-dir-{{r.id}}" hidden><div class="modal-card"><button class="modal-close" data-modal-close>×</button><h2>FTP directory</h2><form method="post" action="{{'/admin/ftp/%d/action'%r.id if admin_mode else '/user/ftp/%d/action'%r.id}}"><input type="hidden" name="csrf_token" value="{{csrf_token}}"><input type="hidden" name="action" value="directory"><label>Relative directory inside hosting root<input name="directory" value="{{r.directory.replace(account.home_dir ~ '/', '') if account and account.home_dir and r.directory.startswith(account.home_dir) else 'public_html'}}" required></label><button class="btn">Save directory</button></form></div></div>
<div class="modal-backdrop" id="ftp-quota-{{r.id}}" hidden><div class="modal-card"><button class="modal-close" data-modal-close>×</button><h2>FTP quota</h2><form method="post" action="{{'/admin/ftp/%d/action'%r.id if admin_mode else '/user/ftp/%d/action'%r.id}}"><input type="hidden" name="csrf_token" value="{{csrf_token}}"><input type="hidden" name="action" value="quota"><label>Quota (MB)<input type="number" name="quota_mb" min="0" max="1048576" value="{{r.quota_mb}}"></label><button class="btn">Save quota</button></form></div></div>
{% endfor %}
{% for r in sftp_accounts %}
<div class="modal-backdrop" id="sftp-pw-{{r.id}}" hidden><div class="modal-card"><button class="modal-close" data-modal-close>×</button><h2>SFTP password</h2><form method="post" action="{{'/admin/ftp/sftp/%d/action'%r.id if admin_mode else '/user/ftp/sftp/%d/action'%r.id}}"><input type="hidden" name="csrf_token" value="{{csrf_token}}"><input type="hidden" name="action" value="password"><label>New password<input type="password" name="password" minlength="10" required></label><button class="btn">Save password</button></form></div></div>
<div class="modal-backdrop" id="sftp-quota-{{r.id}}" hidden><div class="modal-card"><button class="modal-close" data-modal-close>×</button><h2>SFTP quota</h2><form method="post" action="{{'/admin/ftp/sftp/%d/action'%r.id if admin_mode else '/user/ftp/sftp/%d/action'%r.id}}"><input type="hidden" name="csrf_token" value="{{csrf_token}}"><input type="hidden" name="action" value="quota"><label>Quota (MB)<input type="number" name="quota_mb" min="0" max="1048576" value="{{r.quota_mb}}"></label><button class="btn">Save quota</button></form></div></div>
<div class="modal-backdrop" id="sftp-key-{{r.id}}" hidden><div class="modal-card"><button class="modal-close" data-modal-close>×</button><h2>SSH keys</h2>{% for k in r.keys %}<div class="card" style="margin-bottom:8px"><code>{{k.fingerprint}}</code><form method="post" action="{{'/admin/ftp/sftp/%d/action'%r.id if admin_mode else '/user/ftp/sftp/%d/action'%r.id}}"><input type="hidden" name="csrf_token" value="{{csrf_token}}"><input type="hidden" name="action" value="key_delete"><input type="hidden" name="public_key" value="{{k.public_key}}"><button class="danger">Remove</button></form></div>{% else %}<p class="muted">No SSH keys.</p>{% endfor %}<form method="post" action="{{'/admin/ftp/sftp/%d/action'%r.id if admin_mode else '/user/ftp/sftp/%d/action'%r.id}}"><input type="hidden" name="csrf_token" value="{{csrf_token}}"><input type="hidden" name="action" value="key_add"><label>Public key<textarea name="public_key" rows="4" required placeholder="ssh-ed25519 AAAA..."></textarea></label><button class="btn">Add key</button></form></div></div>
{% endfor %}
{% endblock %}