{% extends 'base.html' %}
{% block title %}Settings – IT Asset Management{% endblock %}
{% block breadcrumb %}
  <li class="breadcrumb-item"><a href="{{ url_for('dashboard.index') }}">Home</a></li>
  <li class="breadcrumb-item active">Settings</li>
{% endblock %}

{% block content %}
<div class="page-header mb-4">
  <h1><i class="bi bi-gear me-2"></i>Settings</h1>
</div>

<div class="row g-4">
  <!-- Admin users -->
  <div class="col-md-7">
    <div class="card border-0 shadow-sm">
      <div class="card-header bg-white fw-semibold py-3">
        <i class="bi bi-person-gear me-2 text-primary"></i>Admin Users
      </div>
      <div class="table-responsive">
        <table class="table table-sm table-hover mb-0">
          <thead class="table-light">
            <tr><th>Username</th><th>Full Name</th><th>Email</th><th>Role</th><th>Last Login</th><th>Active</th><th></th></tr>
          </thead>
          <tbody>
            {% for a in admins %}
            <tr>
              <td><strong>{{ a.username }}</strong></td>
              <td>{{ a.full_name or '—' }}</td>
              <td>{{ a.email }}</td>
              <td><span class="badge bg-secondary">{{ a.role }}</span></td>
              <td>{{ a.last_login.strftime('%d/%m/%Y') if a.last_login else '—' }}</td>
              <td>
                {% if a.is_active %}
                  <span class="badge bg-success">Active</span>
                {% else %}
                  <span class="badge bg-secondary">Inactive</span>
                {% endif %}
              </td>
              <td>
                {% if a.id != current_user.id %}
                <form method="POST" action="{{ url_for('settings.toggle_admin', admin_id=a.id) }}" class="d-inline">
                  <button type="submit" class="btn btn-xs btn-sm btn-outline-{{ 'warning' if a.is_active else 'success' }} py-0 px-2">
                    {{ 'Deactivate' if a.is_active else 'Activate' }}
                  </button>
                </form>
                {% endif %}
              </td>
            </tr>
            {% endfor %}
          </tbody>
        </table>
      </div>

      <!-- Add admin form -->
      <div class="card-footer bg-white">
        <h6 class="fw-semibold mb-3 mt-1">Add Admin User</h6>
        <form method="POST" action="{{ url_for('settings.create_admin') }}">
          <div class="row g-2">
            <div class="col-md-3">
              <input type="text" name="username" class="form-control form-control-sm" placeholder="Username" required>
            </div>
            <div class="col-md-3">
              <input type="text" name="full_name" class="form-control form-control-sm" placeholder="Full Name">
            </div>
            <div class="col-md-3">
              <input type="email" name="email" class="form-control form-control-sm" placeholder="Email" required>
            </div>
            <div class="col-md-2">
              <input type="password" name="password" class="form-control form-control-sm" placeholder="Password" required minlength="8">
            </div>
            <div class="col-md-1">
              <button type="submit" class="btn btn-sm btn-primary w-100">Add</button>
            </div>
          </div>
        </form>
      </div>
    </div>
  </div>

  <!-- LDAP config info -->
  <div class="col-md-5">
    <div class="card border-0 shadow-sm">
      <div class="card-header bg-white fw-semibold py-3">
        <i class="bi bi-diagram-3 me-2 text-primary"></i>LDAP / AD Configuration
      </div>
      <div class="card-body">
        <p class="text-muted small mb-3">
          LDAP settings are managed via environment variables (see <code>.env</code> file).
          Restart the application after changing these values.
        </p>
        <table class="table table-sm table-bordered mb-0">
          <tbody>
            <tr><th class="bg-light">LDAP_SERVER</th><td><code>{{ config.LDAP_SERVER or '(not set)' }}</code></td></tr>
            <tr><th class="bg-light">LDAP_PORT</th><td>{{ config.LDAP_PORT }}</td></tr>
            <tr><th class="bg-light">LDAP_USE_SSL</th><td>{{ config.LDAP_USE_SSL }}</td></tr>
            <tr><th class="bg-light">LDAP_BASE_DN</th><td><code>{{ config.LDAP_BASE_DN or '(not set)' }}</code></td></tr>
            <tr><th class="bg-light">LDAP_BIND_USER</th><td>{{ config.LDAP_BIND_USER or '(not set)' }}</td></tr>
            <tr><th class="bg-light">Windows ID attr</th><td><code>{{ config.LDAP_WINDOWS_ID_ATTR }}</code></td></tr>
          </tbody>
        </table>
        <div class="mt-3">
          <a href="{{ url_for('users.import_page') }}" class="btn btn-sm btn-outline-primary">
            <i class="bi bi-arrow-repeat me-1"></i>Go to Import / Sync
          </a>
        </div>
      </div>
    </div>

    <div class="card border-0 shadow-sm mt-3">
      <div class="card-header bg-white fw-semibold py-3">
        <i class="bi bi-building me-2 text-primary"></i>Company Info (for PDFs)
      </div>
      <div class="card-body">
        <table class="table table-sm table-bordered mb-0">
          <tbody>
            <tr><th class="bg-light">COMPANY_NAME</th><td>{{ config.COMPANY_NAME or '(not set)' }}</td></tr>
            <tr><th class="bg-light">COMPANY_ADDRESS</th><td>{{ config.COMPANY_ADDRESS or '(not set)' }}</td></tr>
          </tbody>
        </table>
        <p class="small text-muted mt-2 mb-0">Edit these in <code>.env</code> and restart.</p>
      </div>
    </div>
  </div>
</div>
{% endblock %}