{% extends "base.html" %}
{% load i18n %}
{% block title %}{% translate "ClamAV Settings" %} - Eenos{% endblock %}
{% block content %}
    <div class="eenos-page-header flex-wrap">
        <div>
            <h1 class="eenos-page-title">{% translate "ClamAV Settings" %}</h1>
            <div class="eenos-page-subtitle">{% translate "Configure malware detection, scan engines, resource limits, and on-access protection." %}</div>
        </div>
        <div class="d-grid col-12 col-sm-auto d-sm-flex gap-2">
            <button type="button"
                    class="btn btn-outline-secondary btn-sm text-nowrap clamav-command"
                    data-action="restartClamd"><i data-lucide="refresh-cw"></i>{% translate "Restart Clamd" %}</button>
            {% if onaccess %}
                <button type="button"
                        class="btn btn-outline-warning btn-sm text-nowrap clamav-command"
                        data-action="restartOnaccess"><i data-lucide="shield-check"></i>{% translate "Restart On-Access" %}</button>
            {% endif %}
        </div>
    </div>
    <nav class="eenos-breadcrumb" aria-label="{% translate 'Breadcrumb' %}">
        <a href="{% url 'dashboard' %}">{% translate "Dashboard" %}</a>
        <span class="eenos-breadcrumb-separator" aria-hidden="true">
            <i data-lucide="chevron-right"></i>
        </span>
        <span>{% translate "Security" %}</span>
        <span class="eenos-breadcrumb-separator" aria-hidden="true">
            <i data-lucide="chevron-right"></i>
        </span>
        <a href="{% url 'clamav_settings' %}">{% translate "ClamAV" %}</a>
        <span class="eenos-breadcrumb-separator" aria-hidden="true">
            <i data-lucide="chevron-right"></i>
        </span>
        <span class="eenos-breadcrumb-current" aria-current="page">{% translate "Settings" %}</span>
    </nav>
    {% include "includes/form_alerts.html" %}
    <form method="post"
          id="clamavSettingsForm"
          class="eenos-form"
          data-parsley-validate>
        {% csrf_token %}
        <input type="hidden" name="savesettings" value="yes">
        <div class="eenos-card mb-4">
            <div class="mb-4">
                <div class="eenos-panel-title">{% translate "Daemon and Logging" %}</div>
                <div class="eenos-panel-subtitle">{% translate "Control Clamd logging, file traversal, health checks, and daemon timeouts." %}</div>
            </div>
            <div class="row g-4">
                {% include "includes/clamav_switch.html" with field_name="LogTime" field_value=settings.LogTime field_label=_("Timestamp Log Entries") field_help=_("Include the event time in every ClamAV log entry.") %}
                {% include "includes/clamav_switch.html" with field_name="LogRotate" field_value=settings.LogRotate field_label=_("Rotate Logs") field_help=_("Allow ClamAV to rotate its own log files.") %}
                {% include "includes/clamav_switch.html" with field_name="FollowDirectorySymlinks" field_value=settings.FollowDirectorySymlinks field_label=_("Follow Directory Symlinks") field_help=_("Follow symbolic links that point to directories during scans.") %}
                {% include "includes/clamav_switch.html" with field_name="FollowFileSymlinks" field_value=settings.FollowFileSymlinks field_label=_("Follow File Symlinks") field_help=_("Follow symbolic links that point to files during scans.") %}
                {% include "includes/clamav_number.html" with field_name="SelfCheck" field_value=settings.SelfCheck default_value="600" minimum="600" field_unit=_("seconds") field_label=_("Database Self-Check Interval") field_help=_("How often Clamd checks whether virus definitions changed.") required_message=_("Enter the database self-check interval.") minimum_message=_("The self-check interval must be at least 600 seconds.") %}
                {% include "includes/clamav_number.html" with field_name="IdleTimeout" field_value=settings.IdleTimeout default_value="30" minimum="30" field_unit=_("seconds") field_label=_("Idle Timeout") field_help=_("Maximum wait for data on an idle client connection.") required_message=_("Enter the Clamd idle timeout.") minimum_message=_("The idle timeout must be at least 30 seconds.") %}
                {% include "includes/clamav_number.html" with field_name="MaxDirectoryRecursion" field_value=settings.MaxDirectoryRecursion default_value="15" minimum="15" field_label=_("Directory Recursion Limit") field_help=_("Maximum directory depth traversed during a scan.") required_message=_("Enter the directory recursion limit.") minimum_message=_("The directory recursion limit must be at least 15.") %}
                {% include "includes/clamav_number.html" with field_name="LogFileMaxSize" field_value=settings.LogFileMaxSize default_value="1" minimum="1" field_unit="MB" field_label=_("Maximum Log Size") field_help=_("Rotate or stop logging when the configured size is reached.") required_message=_("Enter the maximum log size.") minimum_message=_("The maximum log size must be at least 1 MB.") %}
            </div>
        </div>
        <div class="eenos-card mb-4">
            <div class="mb-4">
                <div class="eenos-panel-title">{% translate "Heuristic Alerts" %}</div>
                <div class="eenos-panel-subtitle">{% translate "Flag suspicious, malformed, encrypted, or evasive content using heuristic signatures." %}</div>
            </div>
            <div class="row g-3">
                {% include "includes/clamav_switch.html" with field_name="DetectPUA" field_value=settings.DetectPUA field_label=_("Detect Potentially Unwanted Applications") field_help=_("Detect software that may be unwanted without being traditional malware.") %}
                {% include "includes/clamav_switch.html" with field_name="AlertBrokenExecutables" field_value=settings.AlertBrokenExecutables field_label=_("Alert on Broken Executables") %}
                {% include "includes/clamav_switch.html" with field_name="AlertBrokenMedia" field_value=settings.AlertBrokenMedia field_label=_("Alert on Broken Media") %}
                {% include "includes/clamav_switch.html" with field_name="AlertEncryptedArchive" field_value=settings.AlertEncryptedArchive field_label=_("Alert on Encrypted Archives") %}
                {% include "includes/clamav_switch.html" with field_name="AlertEncryptedDoc" field_value=settings.AlertEncryptedDoc field_label=_("Alert on Encrypted Documents") %}
                {% include "includes/clamav_switch.html" with field_name="AlertOLE2Macros" field_value=settings.AlertOLE2Macros field_label=_("Alert on OLE2 Macros") %}
                {% include "includes/clamav_switch.html" with field_name="AlertPhishingSSLMismatch" field_value=settings.AlertPhishingSSLMismatch field_label=_("Alert on Phishing SSL Mismatch") %}
                {% include "includes/clamav_switch.html" with field_name="AlertPhishingCloak" field_value=settings.AlertPhishingCloak field_label=_("Alert on Cloaked Phishing URLs") %}
                {% include "includes/clamav_switch.html" with field_name="AlertPartitionIntersection" field_value=settings.AlertPartitionIntersection field_label=_("Alert on Partition Intersections") %}
            </div>
        </div>
        <div class="eenos-card mb-4">
            <div class="mb-4">
                <div class="eenos-panel-title">{% translate "Content Scanners" %}</div>
                <div class="eenos-panel-subtitle">{% translate "Choose which document, email, web, and archive formats ClamAV inspects." %}</div>
            </div>
            <div class="row g-3">
                {% include "includes/clamav_switch.html" with field_name="ScanOLE2" field_value=settings.ScanOLE2 field_label=_("Scan OLE2 Documents") %}
                {% include "includes/clamav_switch.html" with field_name="ScanPDF" field_value=settings.ScanPDF field_label=_("Scan PDF Documents") %}
                {% include "includes/clamav_switch.html" with field_name="ScanSWF" field_value=settings.ScanSWF field_label=_("Scan SWF Files") %}
                {% include "includes/clamav_switch.html" with field_name="ScanXMLDOCS" field_value=settings.ScanXMLDOCS field_label=_("Scan XML Documents") %}
                {% include "includes/clamav_switch.html" with field_name="ScanHWP3" field_value=settings.ScanHWP3 field_label=_("Scan HWP3 Documents") %}
                {% include "includes/clamav_switch.html" with field_name="ScanMail" field_value=settings.ScanMail field_label=_("Scan Email Messages") %}
                {% include "includes/clamav_switch.html" with field_name="PhishingSignatures" field_value=settings.PhishingSignatures field_label=_("Phishing Signatures") %}
                {% include "includes/clamav_switch.html" with field_name="PhishingScanURLs" field_value=settings.PhishingScanURLs field_label=_("Scan URLs for Phishing") %}
                {% include "includes/clamav_switch.html" with field_name="ScanPartialMessages" field_value=settings.ScanPartialMessages field_label=_("Scan Partial Messages") %}
                {% include "includes/clamav_switch.html" with field_name="ScanHTML" field_value=settings.ScanHTML field_label=_("Scan HTML Content") %}
                {% include "includes/clamav_switch.html" with field_name="ScanArchive" field_value=settings.ScanArchive field_label=_("Scan Archives") %}
            </div>
        </div>
        <div class="eenos-card mb-4">
            <div class="mb-4">
                <div class="eenos-panel-title">{% translate "Sensitive Data Detection" %}</div>
                <div class="eenos-panel-subtitle">{% translate "Detect payment-card and Social Security number patterns in scanned content." %}</div>
            </div>
            <div class="row g-4">
                {% include "includes/clamav_switch.html" with field_name="StructuredDataDetection" field_value=settings.StructuredDataDetection field_label=_("Structured Data Detection") %}
                {% include "includes/clamav_switch.html" with field_name="StructuredCCOnly" field_value=settings.StructuredCCOnly field_label=_("Credit Cards Only") %}
                {% include "includes/clamav_switch.html" with field_name="StructuredSSNFormatNormal" field_value=settings.StructuredSSNFormatNormal field_label=_("Normal SSN Format") %}
                {% include "includes/clamav_switch.html" with field_name="StructuredSSNFormatStripped" field_value=settings.StructuredSSNFormatStripped field_label=_("Stripped SSN Format") %}
                {% include "includes/clamav_number.html" with field_name="StructuredMinCreditCardCount" field_value=settings.StructuredMinCreditCardCount default_value="3" minimum="3" field_label=_("Minimum Credit Card Count") required_message=_("Enter the minimum credit card count.") minimum_message=_("The minimum credit card count must be at least 3.") %}
                {% include "includes/clamav_number.html" with field_name="StructuredMinSSNCount" field_value=settings.StructuredMinSSNCount default_value="3" minimum="3" field_label=_("Minimum SSN Count") required_message=_("Enter the minimum SSN count.") minimum_message=_("The minimum SSN count must be at least 3.") %}
            </div>
        </div>
        <div class="eenos-card mb-4">
            <div class="d-flex flex-wrap justify-content-between gap-3 mb-4">
                <div>
                    <div class="eenos-panel-title">{% translate "On-Access Protection" %}</div>
                    <div class="eenos-panel-subtitle">{% translate "Tune real-time scanning behavior, file limits, timeouts, and prevention mode." %}</div>
                </div>
                {% if onaccess %}
                    <button type="button"
                            class="btn btn-outline-warning btn-sm clamav-command"
                            data-action="restartOnaccess"><i data-lucide="refresh-cw"></i>{% translate "Restart On-Access" %}</button>
                {% else %}
                    <span class="badge eenos-badge-neutral"><i data-lucide="circle-off"></i>{% translate "On-Access Scanner Unavailable" %}</span>
                {% endif %}
            </div>
            {% if not onaccess %}
                <div class="eenos-notice mb-4">
                    <div class="eenos-notice-icon">
                        <i data-lucide="info"></i>
                    </div>
                    <div class="eenos-notice-content">
                        <div class="eenos-notice-title">{% translate "On-access scanning is not installed" %}</div>
                        <div class="eenos-notice-text">{% translate "These values can be configured now, but real-time protection and its restart action remain unavailable until clamonacc is installed." %}</div>
                    </div>
                </div>
            {% endif %}
            <div class="row g-4">
                {% include "includes/clamav_number.html" with field_name="OnAccessMaxFileSize" field_value=settings.OnAccessMaxFileSize default_value="10" minimum="10" field_unit="MB" field_label=_("Maximum On-Access File Size") required_message=_("Enter the maximum on-access file size.") minimum_message=_("The on-access file size must be at least 10 MB.") %}
                {% include "includes/clamav_number.html" with field_name="OnAccessMaxThreads" field_value=settings.OnAccessMaxThreads default_value="5" minimum="5" field_label=_("On-Access Threads") required_message=_("Enter the on-access thread limit.") minimum_message=_("The on-access thread limit must be at least 5.") %}
                {% include "includes/clamav_number.html" with field_name="OnAccessCurlTimeout" field_value=settings.OnAccessCurlTimeout default_value="5000" minimum="5000" field_unit="ms" field_label=_("On-Access Request Timeout") required_message=_("Enter the on-access request timeout.") minimum_message=_("The request timeout must be at least 5,000 ms.") %}
                {% include "includes/clamav_number.html" with field_name="OnAccessRetryAttempts" field_value=settings.OnAccessRetryAttempts default_value="0" minimum="0" field_label=_("On-Access Retry Attempts") required_message=_("Enter the number of on-access retry attempts.") minimum_message=_("Retry attempts cannot be negative.") %}
                {% include "includes/clamav_switch.html" with field_name="OnAccessDisableDDD" field_value=settings.OnAccessDisableDDD field_label=_("Disable Dynamic Directory Determination") %}
                {% include "includes/clamav_switch.html" with field_name="OnAccessPrevention" field_value=settings.OnAccessPrevention field_label=_("Prevention Mode") field_help=_("Block access to files detected as malicious.") %}
            </div>
        </div>
        <div class="eenos-card mb-4">
            <div class="mb-4">
                <div class="eenos-panel-title">{% translate "Scan and Resource Limits" %}</div>
                <div class="eenos-panel-subtitle">{% translate "Protect the server from oversized files, archive bombs, excessive recursion, and expensive pattern matching." %}</div>
            </div>
            <div class="row g-4">
                {% include "includes/clamav_number.html" with field_name="MaxScanTime" field_value=settings.MaxScanTime default_value="120000" minimum="0" field_unit="ms" field_label=_("Maximum Scan Time") required_message=_("Enter the maximum scan time.") minimum_message=_("Maximum scan time cannot be negative.") %}
                {% include "includes/clamav_number.html" with field_name="MaxScanSize" field_value=settings.MaxScanSize default_value="100" minimum="0" field_unit="MB" field_label=_("Maximum Scan Size") required_message=_("Enter the maximum scan size.") minimum_message=_("Maximum scan size cannot be negative.") %}
                {% include "includes/clamav_number.html" with field_name="MaxFileSize" field_value=settings.MaxFileSize default_value="25" minimum="0" maximum="2048" field_unit="MB" field_label=_("Maximum File Size") required_message=_("Enter the maximum file size.") minimum_message=_("Maximum file size cannot be negative.") maximum_message=_("Maximum file size cannot exceed 2,048 MB.") %}
                {% include "includes/clamav_number.html" with field_name="MaxRecursion" field_value=settings.MaxRecursion default_value="16" minimum="16" field_label=_("Archive Recursion Limit") required_message=_("Enter the archive recursion limit.") minimum_message=_("Archive recursion must be at least 16.") %}
                {% include "includes/clamav_number.html" with field_name="MaxFiles" field_value=settings.MaxFiles default_value="10000" minimum="10000" field_label=_("Maximum Files per Scan") required_message=_("Enter the maximum files per scan.") minimum_message=_("Maximum files must be at least 10,000.") %}
                {% include "includes/clamav_number.html" with field_name="MaxEmbeddedPE" field_value=settings.MaxEmbeddedPE default_value="10" minimum="10" field_unit="MB" field_label=_("Maximum Embedded PE Size") required_message=_("Enter the maximum embedded PE size.") minimum_message=_("Embedded PE size must be at least 10 MB.") %}
                {% include "includes/clamav_number.html" with field_name="MaxHTMLNormalize" field_value=settings.MaxHTMLNormalize default_value="10" minimum="10" field_unit="MB" field_label=_("Maximum HTML Normalize Size") required_message=_("Enter the maximum HTML normalization size.") minimum_message=_("HTML normalization size must be at least 10 MB.") %}
                {% include "includes/clamav_number.html" with field_name="MaxHTMLNoTags" field_value=settings.MaxHTMLNoTags default_value="2" minimum="2" field_unit="MB" field_label=_("Maximum HTML No-Tags Size") required_message=_("Enter the maximum HTML no-tags size.") minimum_message=_("HTML no-tags size must be at least 2 MB.") %}
                {% include "includes/clamav_number.html" with field_name="MaxScriptNormalize" field_value=settings.MaxScriptNormalize default_value="5" minimum="5" field_unit="MB" field_label=_("Maximum Script Normalize Size") required_message=_("Enter the maximum script normalization size.") minimum_message=_("Script normalization size must be at least 5 MB.") %}
                {% include "includes/clamav_number.html" with field_name="MaxZipTypeRcg" field_value=settings.MaxZipTypeRcg default_value="1" minimum="1" field_unit="MB" field_label=_("Maximum ZIP Recognition Size") required_message=_("Enter the maximum ZIP recognition size.") minimum_message=_("ZIP recognition size must be at least 1 MB.") %}
                {% include "includes/clamav_number.html" with field_name="MaxPartitions" field_value=settings.MaxPartitions default_value="50" minimum="50" field_label=_("Maximum Partitions") required_message=_("Enter the maximum partition count.") minimum_message=_("Maximum partitions must be at least 50.") %}
                {% include "includes/clamav_number.html" with field_name="MaxIconsPE" field_value=settings.MaxIconsPE default_value="100" minimum="100" field_label=_("Maximum PE Icons") required_message=_("Enter the maximum PE icon count.") minimum_message=_("Maximum PE icons must be at least 100.") %}
                {% include "includes/clamav_number.html" with field_name="MaxRecHWP3" field_value=settings.MaxRecHWP3 default_value="16" minimum="16" field_label=_("Maximum HWP3 Recursion") required_message=_("Enter the maximum HWP3 recursion.") minimum_message=_("HWP3 recursion must be at least 16.") %}
                {% include "includes/clamav_number.html" with field_name="PCREMatchLimit" field_value=settings.PCREMatchLimit default_value="100000" minimum="100000" field_label=_("PCRE Match Limit") required_message=_("Enter the PCRE match limit.") minimum_message=_("The PCRE match limit must be at least 100,000.") %}
                {% include "includes/clamav_number.html" with field_name="PCRERecMatchLimit" field_value=settings.PCRERecMatchLimit default_value="2000" minimum="2000" field_label=_("PCRE Recursive Match Limit") required_message=_("Enter the PCRE recursive match limit.") minimum_message=_("The PCRE recursive match limit must be at least 2,000.") %}
                {% include "includes/clamav_number.html" with field_name="PCREMaxFileSize" field_value=settings.PCREMaxFileSize default_value="25" minimum="0" field_unit="MB" field_label=_("Maximum PCRE File Size") required_message=_("Enter the maximum PCRE file size.") minimum_message=_("Maximum PCRE file size cannot be negative.") %}
                {% include "includes/clamav_switch.html" with field_name="AlertExceedsMax" field_value=settings.AlertExceedsMax field_label=_("Alert When Limits Are Exceeded") field_help=_("Report files that cannot be fully scanned because a configured limit was reached.") %}
            </div>
        </div>
        <div class="eenos-card mb-4">
            <div class="mb-4">
                <div class="eenos-panel-title">{% translate "Virus Event Command" %}</div>
                <div class="eenos-panel-subtitle">{% translate "Optionally execute a command when malware is detected. Use %v for the virus name and %f for the file path." %}</div>
            </div>
            <div class="row g-4">
                {% include "includes/clamav_switch.html" with field_name="VirusEventAlert" field_value=settings.VirusEventAlert field_label=_("Enable Virus Event Command") field_help=_("Run the configured command after a malware detection.") detail_target="virusEventCommand" %}
                <div class="col-12" id="virusEventCommand">
                    <label for="VirusEvent" class="form-label">{% translate "Command" %}</label>
                    <input type="text"
                           class="form-control font-monospace"
                           id="VirusEvent"
                           name="VirusEvent"
                           value="{{ settings.VirusEvent|default:'' }}"
                           maxlength="2000"
                           data-required-when-active="true"
                           data-parsley-required-message="{% translate 'Enter the command to execute when malware is detected.' %}"
                           data-parsley-maxlength-message="{% translate 'The virus event command cannot exceed 2,000 characters.' %}">
                    <div class="form-text">{% translate "Ensure the command is trusted and safe to run with the ClamAV service permissions." %}</div>
                </div>
            </div>
        </div>
        <div class="d-flex gap-2 mb-4">
            <button type="submit" class="btn btn-primary"><i data-lucide="save"></i>{% translate "Save Settings" %}</button><button type="button"
        class="btn btn-outline-secondary clamav-command"
        data-action="reset"><i data-lucide="rotate-ccw"></i>{% translate "Reset to Default" %}</button>
        </div>
    </form>
    <form method="post" id="clamavCommandForm" class="d-none">
        {% csrf_token %}
        <input type="hidden" name="reset" id="clamavReset" disabled><input type="hidden" name="restartClamd" id="clamavRestart" disabled><input type="hidden"
       name="restartOnaccess"
       id="clamavOnAccessRestart"
       disabled>
    </form>
    <div class="modal fade"
         id="clamavCommandModal"
         tabindex="-1"
         aria-hidden="true">
        <div class="modal-dialog modal-dialog-centered">
            <div class="modal-content">
                <div class="modal-header">
                    <h2 class="modal-title fs-5" id="clamavCommandTitle"></h2>
                    <button type="button"
                            class="btn-close"
                            data-bs-dismiss="modal"
                            aria-label="{% translate 'Close' %}"></button>
                </div>
                <div class="modal-body">
                    <div class="eenos-notice eenos-notice-warning">
                        <div class="eenos-notice-icon">
                            <i data-lucide="triangle-alert"></i>
                        </div>
                        <div class="eenos-notice-content">
                            <div class="eenos-notice-title" id="clamavCommandHeading"></div>
                            <div class="eenos-notice-text" id="clamavCommandText"></div>
                        </div>
                    </div>
                </div>
                <div class="modal-footer">
                    <button type="button"
                            class="btn btn-outline-secondary"
                            data-bs-dismiss="modal">{% translate "Cancel" %}</button><button type="button" class="btn btn-warning" id="confirmClamavCommand"></button>
                </div>
            </div>
        </div>
    </div>
{% endblock %}
{% block extra_js %}
    <script>
$(function(){function sync($s){const on=$s.prop('checked'),target=$s.data('value-target'),detail=$s.data('detail-target');$(target).val(on?'yes':'no');if(detail){const $d=$(detail);$d.toggle(on);$d.find('[data-required-when-active]').prop('required',on).prop('disabled',!on);}}$('.clamav-setting-switch').each(function(){sync($(this));}).on('change',function(){sync($(this));});const modal=bootstrap.Modal.getOrCreateInstance(document.getElementById('clamavCommandModal'));let action='';$('.clamav-command').on('click',function(){action=$(this).data('action');const reset=action==='reset',onaccess=action==='restartOnaccess';$('#clamavCommandTitle').text(reset?"{% translate 'Reset ClamAV Settings' %}":onaccess?"{% translate 'Restart On-Access Protection' %}":"{% translate 'Restart Clamd' %}");$('#clamavCommandHeading').text(reset?"{% translate 'Restore default configuration' %}":"{% translate 'Brief service interruption' %}");$('#clamavCommandText').text(reset?"{% translate 'Your current ClamAV configuration will be replaced by the server defaults.' %}":onaccess?"{% translate 'Real-time file protection may pause briefly while the on-access service restarts.' %}":"{% translate 'Active scan requests may be interrupted while the Clamd service restarts.' %}");$('#confirmClamavCommand').text(reset?"{% translate 'Reset Settings' %}":"{% translate 'Restart Service' %}");modal.show();});$('#confirmClamavCommand').on('click',function(){$('#clamavReset,#clamavRestart,#clamavOnAccessRestart').prop('disabled',true);$({reset:'#clamavReset',restartClamd:'#clamavRestart',restartOnaccess:'#clamavOnAccessRestart'}[action]).prop('disabled',false).val('yes');document.getElementById('clamavCommandForm').submit();});});
    </script>
{% endblock %}