{% extends "base.html" %}

{% block title %}Settings & DSM Config{% endblock %}

{% block content %}
<div class="section-card">
    <div class="card-header">
        <div>
            <h3>⚙️ DentiGrid &amp; IBM QRadar Integration Configuration</h3>
            <p class="text-muted">Configure API connectors, LEEF 2.0 Syslog ingestion receivers, and autonomous SOAR response thresholds.</p>
        </div>
    </div>

    <form id="settings-form" onsubmit="saveSettings(event)">
        <div class="form-grid">
            <div class="form-group">
                <label>DentiGrid API Gateway Endpoint:</label>
                <input type="text" class="carbon-input" id="cfg-endpoint" value="{{ config.api_endpoint }}">
                <small class="text-muted">Cloud or on-premise DentiGrid tenant management URL.</small>
            </div>

            <div class="form-group">
                <label>API Key / SEC Token:</label>
                <input type="password" class="carbon-input" id="cfg-token" value="{{ config.api_token }}">
                <small class="text-muted">Used for REST API synchronization and 1-click containment dispatch.</small>
            </div>

            <div class="form-group">
                <label>LEEF 2.0 Syslog Receiver Port:</label>
                <input type="number" class="carbon-input" id="cfg-port" value="{{ config.syslog_port }}">
                <small class="text-muted">Standard QRadar Syslog port (UDP/TCP/TLS 514).</small>
            </div>

            <div class="form-group">
                <label>Syslog Protocol Transport:</label>
                <select class="carbon-input" id="cfg-protocol">
                    <option value="TLS" {% if config.syslog_protocol == 'TLS' %}selected{% endif %}>TLS Encrypted (RFC 5425)</option>
                    <option value="TCP" {% if config.syslog_protocol == 'TCP' %}selected{% endif %}>TCP (RFC 5424)</option>
                    <option value="UDP" {% if config.syslog_protocol == 'UDP' %}selected{% endif %}>UDP (RFC 3164/5424)</option>
                </select>
            </div>

            <div class="form-group checkbox-group">
                <label>
                    <input type="checkbox" id="cfg-auto-quarantine" {% if config.auto_quarantine_enabled %}checked{% endif %}>
                    <strong>Enable Autonomous Host Isolation on Critical Deception Traps</strong>
                </label>
                <small class="text-muted">Automatically triggers EDR quarantine when Severity &gt;= 9 (Canary Encryption, Shadow Copy Tamper).</small>
            </div>

            <div class="form-group checkbox-group">
                <label>
                    <input type="checkbox" id="cfg-xforce" {% if config.xforce_sync_enabled %}checked{% endif %}>
                    <strong>Sync Threat Indicators with IBM X-Force Threat Intelligence Exchange</strong>
                </label>
                <small class="text-muted">Contributes verified zero-false-positive attacker IOCs to IBM Security X-Force.</small>
            </div>
        </div>

        <div class="form-actions">
            <button type="submit" class="btn btn-primary">Save Configuration</button>
            <button type="button" class="btn btn-secondary" onclick="testConnection()">Test Connection &amp; LEEF Pipeline</button>
        </div>
    </form>
</div>

<div class="section-card">
    <div class="card-header">
        <h3>📋 QRadar Log Source Configuration Quick Reference</h3>
    </div>
    <div class="code-box mono-text">
Log Source Identifier: DentiGrid-LEEF-Receiver
Log Source Type: DentiSystems DentiGrid Deception Platform (Log Source Type ID: 7050)
Protocol Type: Syslog (TLS)
Target QRadar Event Collector: Ingress EC-01 (10.0.100.10:514)
Payload Format: LEEF 2.0 (Delimiter: Tab '	')
Custom DSM XML: dsm.xml
Event Mapping XML: event-mapping.xml
Reference Sets: DentiGrid_Quarantined_Hosts, DentiGrid_Decoy_IP_List
    </div>
</div>
{% endblock %}