{% extends "base.html" %}
{% block title %}SSL Manager{% endblock %}
{% block body %}
<div class="head"><div><small>SECURITY / LET'S ENCRYPT</small><h1>SSL Manager</h1><p>Issue, renew, revoke and remove certificates with Certbot. Track expiry and enforce HTTPS.</p></div><div class="action-row"><span class="task-status {{'completed' if certbot else 'failed'}}">Certbot {{'READY' if certbot else 'NOT INSTALLED'}}</span>{% if not certbot and admin_mode %}<a class="btn" href="/admin/store">Install Certbot</a>{% endif %}</div></div>
<section class="stats"><div class="card stat"><small>CERTIFICATES</small><strong>{{certificates|length}}</strong><span>Managed websites</span></div><div class="card stat"><small>VALID</small><strong>{{certificates|selectattr('status','equalto','valid')|list|length}}</strong><span>Healthy certificates</span></div><div class="card stat"><small>EXPIRING</small><strong>{{certificates|selectattr('status','equalto','expiring')|list|length}}</strong><span>30 days or less</span></div><div class="card stat"><small>AUTO RENEW</small><strong>{{certificates|selectattr('auto_renew','equalto',1)|list|length}}</strong><span>Automatic renewal enabled</span></div></section>
{% if not certbot %}<div class="error">Certbot is required for Let's Encrypt issue, renew and revoke operations. Install <b>Certbot</b> from App Store first. The manager remains safe and read-only until it is available.</div>{% endif %}
<section class="card"><div class="cardhead"><div><small>LET'S ENCRYPT</small><h2>Managed certificates</h2></div><span class="tag">Automatic renewal twice daily</span></div>
<div class="tablewrap"><table><thead><tr><th>DOMAIN</th><th>STATUS</th><th>EXPIRY</th><th>AUTO RENEW</th><th>HTTPS</th><th>ACTIONS</th></tr></thead><tbody>
{% for r in certificates %}<tr>
<td><b>{{r.domain}}</b><div class="muted">{{r.webserver|upper}} · {{r.username}}</div></td>
<td><span class="task-status {{'completed' if r.status=='valid' else ('failed' if r.status in ['expired','error','revoked'] else 'running')}}">{{r.status|upper}}</span></td>
<td>{% if r.expires_at %}<b>{{r.days_left}} days</b><div class="muted">{{r.expires_at}}</div>{% else %}<span class="muted">No certificate</span>{% endif %}</td>
<td><form method="post" action="{{'/admin/ssl/%d/auto-renew'%r.website_id if admin_mode else '/user/ssl/%d/auto-renew'%r.website_id}}"><input type="hidden" name="csrf_token" value="{{csrf_token}}"><input type="hidden" name="enabled" value="{{0 if r.auto_renew else 1}}"><button class="soft">{{'Disable' if r.auto_renew else 'Enable'}}</button></form></td>
<td><form method="post" action="{{'/admin/ssl/%d/https'%r.website_id if admin_mode else '/user/ssl/%d/https'%r.website_id}}"><input type="hidden" name="csrf_token" value="{{csrf_token}}"><button class="soft">{{'Disable HTTPS' if r.force_https else 'Force HTTPS'}}</button></form></td>
<td><div class="action-row">
{% if r.status in ['missing','expired','revoked','error'] %}<form method="post" action="{{'/admin/ssl/%d/issue'%r.website_id if admin_mode else '/user/ssl/%d/issue'%r.website_id}}"><input type="hidden" name="csrf_token" value="{{csrf_token}}"><button class="btn" {% if not certbot %}disabled{% endif %}>Issue</button></form>{% else %}<form method="post" action="{{'/admin/ssl/%d/renew'%r.website_id if admin_mode else '/user/ssl/%d/renew'%r.website_id}}"><input type="hidden" name="csrf_token" value="{{csrf_token}}"><button class="soft" {% if not certbot %}disabled{% endif %}>Renew</button></form>{% endif %}
<form method="post" action="{{'/admin/ssl/%d/revoke'%r.website_id if admin_mode else '/user/ssl/%d/revoke'%r.website_id}}" onsubmit="return confirm('Revoke this certificate at Let\'s Encrypt?')"><input type="hidden" name="csrf_token" value="{{csrf_token}}"><button class="soft" {% if not certbot or not r.exists %}disabled{% endif %}>Revoke</button></form>
<form method="post" action="{{'/admin/ssl/%d/delete'%r.website_id if admin_mode else '/user/ssl/%d/delete'%r.website_id}}" onsubmit="return confirm('Delete this certificate from Certbot and SCpanel?')"><input type="hidden" name="csrf_token" value="{{csrf_token}}"><button class="danger">Delete</button></form>
</div></td></tr>
{% else %}<tr><td colspan="6" class="empty">No managed SSL certificates yet. Add a website first, then issue a Let's Encrypt certificate.</td></tr>{% endfor %}</tbody></table></div></section>
<section class="card"><div class="cardhead"><div><small>ISSUE CERTIFICATE</small><h2>Websites without SSL</h2></div><span class="tag">Webroot validation</span></div><div class="tablewrap"><table><thead><tr><th>DOMAIN</th><th>ACCOUNT</th><th>WEBROOT</th><th>ACTION</th></tr></thead><tbody>{% for w in websites %}{% set found = certificates|selectattr('website_id','equalto',w.id)|list %}{% if not found or found[0].status in ['missing','expired','revoked','error'] %}<tr><td><b>{{w.domain}}</b></td><td>{{w.username if w.username is defined else ''}}</td><td><code>{{w.document_root}}</code></td><td><form method="post" action="{{'/admin/ssl/%d/issue'%w.id if admin_mode else '/user/ssl/%d/issue'%w.id}}"><input type="hidden" name="csrf_token" value="{{csrf_token}}"><button class="btn" {% if not certbot %}disabled{% endif %}>Issue Let's Encrypt</button></form></td></tr>{% endif %}{% else %}<tr><td colspan="4" class="empty">All enabled websites already have a managed certificate.</td></tr>{% endfor %}</tbody></table></div></section>
{% endblock %}