{% extends "base.html" %}
{% load i18n %}
{% block title %}{% translate "Dovecot Settings" %} - Eenos{% endblock %}
{% block content %}
    <div class="eenos-page-header flex-wrap">
        <div>
            <h1 class="eenos-page-title">{% translate "Dovecot Settings" %}</h1>
            <div class="eenos-page-subtitle">{% translate "Tune mail client connections, authentication, service resources, LMTP delivery, and TLS security." %}</div>
        </div>
        <div class="d-grid col-12 col-sm-auto">
            <button type="button"
                    class="btn btn-outline-warning btn-sm text-nowrap dovecot-command"
                    data-action="restart"><i data-lucide="refresh-cw"></i>{% translate "Restart Dovecot" %}</button>
        </div>
    </div>
    <nav class="eenos-breadcrumb" aria-label="{% translate 'Breadcrumb' %}">
        <a href="{% url 'dashboard' %}">{% translate "Dashboard" %}</a>
        <span class="eenos-breadcrumb-separator" aria-hidden="true">
            <i data-lucide="chevron-right"></i>
        </span>
        <span>{% translate "Mail Services" %}</span>
        <span class="eenos-breadcrumb-separator" aria-hidden="true">
            <i data-lucide="chevron-right"></i>
        </span>
        <a href="{% url 'dovecot_settings' %}">Dovecot</a>
        <span class="eenos-breadcrumb-separator" aria-hidden="true">
            <i data-lucide="chevron-right"></i>
        </span>
        <span class="eenos-breadcrumb-current" aria-current="page">{% translate "Settings" %}</span>
    </nav>
    {% include "includes/form_alerts.html" %}
    <form method="post"
          id="dovecotSettingsForm"
          class="eenos-form"
          data-parsley-validate>
        {% csrf_token %}
        <input type="hidden" name="savesettings" value="yes">
        <div class="eenos-card mb-4">
            <div class="mb-4">
                <div class="eenos-panel-title">{% translate "Mail Client Connections" %}</div>
                <div class="eenos-panel-subtitle">{% translate "Control IMAP and POP3 connection capacity and idle behavior." %}</div>
            </div>
            <div class="row g-4">
                {% include "includes/dovecot_number_field.html" with field_name="imap_mail_max_userip_connections" field_value=settings.imap_mail_max_userip_connections default_value="20" minimum="20" field_label=_("IMAP Per-IP Connection Limit") field_help=_("Maximum simultaneous IMAP connections for one user from a single IP address.") required_message=_("Enter the IMAP per-IP connection limit.") minimum_message=_("The IMAP per-IP connection limit must be at least 20.") %}
                {% include "includes/dovecot_number_field.html" with field_name="imap_idle_notify_interval" field_value=settings.imap_idle_notify_interval default_value="30" minimum="30" field_unit=_("seconds") field_label=_("IMAP Idle Notification Interval") field_help=_("Interval between keep-alive notifications sent to idle IMAP clients.") required_message=_("Enter the IMAP idle notification interval.") minimum_message=_("The IMAP idle notification interval must be at least 30 seconds.") %}
                {% include "includes/dovecot_number_field.html" with field_name="imap_hibernate_timeout" field_value=settings.imap_hibernate_timeout default_value="30" minimum="20" field_unit=_("seconds") field_label=_("IMAP Hibernate Timeout") field_help=_("Move an idle IMAP connection into a lower-resource hibernation process.") required_message=_("Enter the IMAP hibernate timeout.") minimum_message=_("The IMAP hibernate timeout must be at least 20 seconds.") %}
                {% include "includes/dovecot_number_field.html" with field_name="pop_mail_max_userip_connections" field_value=settings.pop_mail_max_userip_connections default_value="3" minimum="3" field_label=_("POP3 Per-IP Connection Limit") field_help=_("Maximum simultaneous POP3 connections for one user from a single IP address.") required_message=_("Enter the POP3 per-IP connection limit.") minimum_message=_("The POP3 per-IP connection limit must be at least 3.") %}
                {% include "includes/dovecot_number_field.html" with field_name="mailbox_idle_check_interval" field_value=settings.mailbox_idle_check_interval default_value="30" minimum="10" field_unit=_("seconds") field_label=_("Mailbox Idle Check Interval") field_help=_("Frequency at which idle sessions check for newly delivered messages.") required_message=_("Enter the mailbox idle check interval.") minimum_message=_("The mailbox idle check interval must be at least 10 seconds.") %}
            </div>
        </div>
        <div class="eenos-card mb-4">
            <div class="mb-4">
                <div class="eenos-panel-title">{% translate "Authentication" %}</div>
                <div class="eenos-panel-subtitle">{% translate "Configure authentication workers and successful or failed login caching." %}</div>
            </div>
            <div class="row g-4">
                {% include "includes/dovecot_number_field.html" with field_name="process_min_avail" field_value=settings.process_min_avail default_value="2" minimum="2" field_label=_("Spare Authentication Processes") field_help=_("Minimum idle authentication workers kept ready for new connections.") required_message=_("Enter the number of spare authentication processes.") minimum_message=_("At least 2 spare authentication processes are required.") %}
                {% include "includes/dovecot_number_field.html" with field_name="login_process_limit" field_value=settings.login_process_limit default_value="50" minimum="10" field_label=_("Login Process Limit") field_help=_("Maximum number of login processes Dovecot may create.") required_message=_("Enter the login process limit.") minimum_message=_("The login process limit must be at least 10.") %}
                {% include "includes/dovecot_number_field.html" with field_name="auth_cache_size" field_value=settings.auth_cache_size default_value="1" minimum="1" field_unit="MB" field_label=_("Authentication Cache Size") field_help=_("Maximum memory allocated to cached successful authentications.") required_message=_("Enter the authentication cache size.") minimum_message=_("The authentication cache size must be at least 1 MB.") %}
                {% include "includes/dovecot_number_field.html" with field_name="auth_cache_ttl" field_value=settings.auth_cache_ttl default_value="3600" minimum="60" field_unit=_("seconds") field_label=_("Successful Authentication TTL") field_help=_("How long successful authentication results remain cached.") required_message=_("Enter the successful authentication cache TTL.") minimum_message=_("The successful authentication cache TTL must be at least 60 seconds.") %}
                {% include "includes/dovecot_number_field.html" with field_name="auth_cache_negative_ttl" field_value=settings.auth_cache_negative_ttl default_value="3600" minimum="60" field_unit=_("seconds") field_label=_("Failed Authentication TTL") field_help=_("How long failed authentication results remain cached.") required_message=_("Enter the failed authentication cache TTL.") minimum_message=_("The failed authentication cache TTL must be at least 60 seconds.") %}
                <div class="col-12 col-md-6 col-xl-4">
                    <div class="d-flex align-items-start justify-content-between gap-3 h-100 py-2">
                        <div>
                            <label for="service_count_switch" class="form-label mb-1">{% translate "New Process Per Authentication" %}</label>
                            <div class="form-text mt-0">{% translate "Start a new worker for each authentication request. This can increase server load." %}</div>
                        </div>
                        <div class="form-check form-switch flex-shrink-0 mt-1">
                            <input type="hidden"
                                   name="service_count"
                                   id="service_count"
                                   value="{% if settings.service_count|stringformat:'s' == '1' %}1{% else %}0{% endif %}"><input class="form-check-input dovecot-value-switch"
       type="checkbox"
       role="switch"
       id="service_count_switch"
       data-value-target="#service_count"
       data-on-value="1"
       data-off-value="0"
       {% if settings.service_count|stringformat:'s' == '1' %}checked{% endif %}>
                        </div>
                    </div>
                </div>
            </div>
        </div>
        <div class="eenos-card mb-4">
            <div class="mb-4">
                <div class="eenos-panel-title">{% translate "Process and Storage Resources" %}</div>
                <div class="eenos-panel-subtitle">{% translate "Set process capacity, memory ceilings, and mdbox file rotation." %}</div>
            </div>
            <div class="row g-4">
                {% include "includes/dovecot_number_field.html" with field_name="login_vsz_limit" field_value=settings.login_vsz_limit default_value="128" minimum="128" field_unit="MB" field_label=_("Login Process Memory Limit") field_help=_("Maximum virtual memory available to IMAP and POP3 login processes.") required_message=_("Enter the login process memory limit.") minimum_message=_("The login process memory limit must be at least 128 MB.") %}
                {% include "includes/dovecot_number_field.html" with field_name="process_limit" field_value=settings.process_limit default_value="512" minimum="128" field_label=_("Mail Process Limit") field_help=_("Maximum number of mail service processes that may run concurrently.") required_message=_("Enter the mail process limit.") minimum_message=_("The mail process limit must be at least 128.") %}
                {% include "includes/dovecot_number_field.html" with field_name="conf_vsz_limit" field_value=settings.conf_vsz_limit default_value="2048" minimum="512" field_unit="MB" field_label=_("Configuration Process Memory") field_help=_("Maximum virtual memory available to Dovecot's configuration service.") required_message=_("Enter the configuration process memory limit.") minimum_message=_("The configuration process memory limit must be at least 512 MB.") %}
                {% include "includes/dovecot_number_field.html" with field_name="vsz_limit" field_value=settings.vsz_limit default_value="512" minimum="512" field_unit="MB" field_label=_("Service Memory Limit") field_help=_("Maximum virtual memory available to mail service processes.") required_message=_("Enter the service memory limit.") minimum_message=_("The service memory limit must be at least 512 MB.") %}
                {% include "includes/dovecot_number_field.html" with field_name="mdbox_rotate_size" field_value=settings.mdbox_rotate_size default_value="10" minimum="10" field_unit="MB" field_label=_("mdbox Rotation Size") field_help=_("Maximum mdbox file size before Dovecot rotates to a new file.") required_message=_("Enter the mdbox rotation size.") minimum_message=_("The mdbox rotation size must be at least 10 MB.") %}
            </div>
        </div>
        <div class="eenos-card mb-4">
            <div class="mb-4">
                <div class="eenos-panel-title">{% translate "LMTP and Transport Security" %}</div>
                <div class="eenos-panel-subtitle">{% translate "Control local delivery capacity, IPv6 listeners, and the protocols and ciphers accepted from clients." %}</div>
            </div>
            <div class="row g-4">
                {% include "includes/dovecot_number_field.html" with field_name="lmtp_process_limit" field_value=settings.lmtp_process_limit default_value="512" minimum="128" field_label=_("LMTP Process Limit") field_help=_("Maximum number of LMTP delivery processes that may run concurrently.") required_message=_("Enter the LMTP process limit.") minimum_message=_("The LMTP process limit must be at least 128.") %}
                {% include "includes/dovecot_number_field.html" with field_name="lmtp_user_concurrency_limit" field_value=settings.lmtp_user_concurrency_limit default_value="4" minimum="4" field_label=_("LMTP Per-User Delivery Limit") field_help=_("Maximum concurrent LMTP deliveries permitted for each mailbox user.") required_message=_("Enter the LMTP per-user delivery limit.") minimum_message=_("The LMTP per-user delivery limit must be at least 4.") %}
                <div class="col-12 col-md-6 col-xl-4">
                    <div class="d-flex align-items-start justify-content-between gap-3 h-100 py-2">
                        <div>
                            <label for="listen_ipv6_switch" class="form-label mb-1">{% translate "IPv6 Listener" %}</label>
                            <div class="form-text mt-0">{% translate "Accept IMAP, POP3, and LMTP connections over IPv6." %}</div>
                        </div>
                        <div class="form-check form-switch flex-shrink-0 mt-1">
                            <input type="hidden"
                                   name="listen_ipv6"
                                   id="listen_ipv6"
                                   value="{% if settings.listen_ipv6 == 'on' %}on{% else %}off{% endif %}"><input class="form-check-input dovecot-value-switch"
       type="checkbox"
       role="switch"
       id="listen_ipv6_switch"
       data-value-target="#listen_ipv6"
       data-on-value="on"
       data-off-value="off"
       {% if settings.listen_ipv6 == 'on' %}checked{% endif %}>
                        </div>
                    </div>
                </div>
                <div class="col-12 col-md-6 col-xl-4">
                    <label for="ssl_min_protocol" class="form-label">{% translate "Minimum TLS Protocol" %}</label>
                    <select class="form-select"
                            name="ssl_min_protocol"
                            id="ssl_min_protocol"
                            required
                            data-parsley-required-message="{% translate 'Select the minimum TLS protocol accepted by Dovecot.' %}"><option value="TLSv1.3"
        {% if settings.ssl_min_protocol == 'TLSv1.3' %}selected{% endif %}>TLSv1.3</option><option value="TLSv1.2"
        {% if settings.ssl_min_protocol == 'TLSv1.2' %}selected{% endif %}>TLSv1.2</option><option value="TLSv1.1"
        {% if settings.ssl_min_protocol == 'TLSv1.1' %}selected{% endif %}>TLSv1.1</option><option value="TLSv1"
        {% if settings.ssl_min_protocol == 'TLSv1' %}selected{% endif %}>TLSv1</option><option value="SSLv3"
        {% if settings.ssl_min_protocol == 'SSLv3' %}selected{% endif %}>SSLv3</option></select>
                    <div class="form-text">{% translate "Older protocols remain available for compatibility but provide weaker security." %}</div>
                </div>
                <div class="col-12">
                    <label for="ssl_cipher_list" class="form-label">{% translate "TLS Cipher Suites" %}</label>
                    <textarea name="ssl_cipher_list"
                              class="form-control font-monospace"
                              rows="4"
                              id="ssl_cipher_list"
                              maxlength="2000"
                              required
                              data-parsley-required-message="{% translate 'Enter at least one TLS cipher suite.' %}"
                              data-parsley-maxlength-message="{% translate 'The TLS cipher list cannot exceed 2,000 characters.' %}">{% if settings.ssl_cipher_list %}{{ settings.ssl_cipher_list }}{% else %}ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384{% endif %}</textarea>
                </div>
            </div>
        </div>
        <div class="d-flex gap-2 mb-4">
            <button type="submit" class="btn btn-primary"><i data-lucide="save"></i>{% translate "Save Settings" %}</button><button type="button"
        class="btn btn-outline-secondary dovecot-command"
        data-action="reset"><i data-lucide="rotate-ccw"></i>{% translate "Reset to Default" %}</button>
        </div>
    </form>
    <form method="post" id="dovecotCommandForm" class="d-none">
        {% csrf_token %}
        <input type="hidden" name="reset" id="dovecotReset" disabled><input type="hidden" name="restart" id="dovecotRestart" disabled>
    </form>
    <div class="modal fade"
         id="dovecotConfirmModal"
         tabindex="-1"
         aria-hidden="true">
        <div class="modal-dialog modal-dialog-centered">
            <div class="modal-content">
                <div class="modal-header">
                    <h2 class="modal-title fs-5" id="dovecotConfirmTitle"></h2>
                    <button type="button"
                            class="btn-close"
                            data-bs-dismiss="modal"
                            aria-label="{% translate 'Close' %}"></button>
                </div>
                <div class="modal-body">
                    <div class="eenos-notice eenos-notice-warning">
                        <div class="eenos-notice-icon">
                            <i data-lucide="triangle-alert"></i>
                        </div>
                        <div class="eenos-notice-content">
                            <div class="eenos-notice-title" id="dovecotConfirmHeading"></div>
                            <div class="eenos-notice-text" id="dovecotConfirmText"></div>
                        </div>
                    </div>
                </div>
                <div class="modal-footer">
                    <button type="button"
                            class="btn btn-outline-secondary"
                            data-bs-dismiss="modal">{% translate "Cancel" %}</button><button type="button" class="btn btn-warning" id="confirmDovecotCommand"></button>
                </div>
            </div>
        </div>
    </div>
{% endblock %}
{% block extra_js %}
    <script>
$(function(){
    $('.dovecot-value-switch').each(function(){const $s=$(this);$($s.data('value-target')).val($s.prop('checked')?$s.data('on-value'):$s.data('off-value'));}).on('change',function(){const $s=$(this);$($s.data('value-target')).val($s.prop('checked')?$s.data('on-value'):$s.data('off-value'));});
    const modal=bootstrap.Modal.getOrCreateInstance(document.getElementById('dovecotConfirmModal'));let command='';
    $('.dovecot-command').on('click',function(){command=$(this).data('action');const restart=command==='restart';$('#dovecotConfirmTitle').text(restart?"{% translate 'Restart Dovecot' %}":"{% translate 'Reset Dovecot Settings' %}");$('#dovecotConfirmHeading').text(restart?"{% translate 'Active sessions may reconnect' %}":"{% translate 'Restore default configuration' %}");$('#dovecotConfirmText').text(restart?"{% translate 'Mail clients may disconnect briefly while the Dovecot service restarts.' %}":"{% translate 'Your current Dovecot configuration will be replaced by the server defaults.' %}");$('#confirmDovecotCommand').text(restart?"{% translate 'Restart Dovecot' %}":"{% translate 'Reset Settings' %}");modal.show();});
    $('#confirmDovecotCommand').on('click',function(){$('#dovecotReset,#dovecotRestart').prop('disabled',true);$(command==='restart'?'#dovecotRestart':'#dovecotReset').prop('disabled',false).val('yes');document.getElementById('dovecotCommandForm').submit();});
});
    </script>
{% endblock %}