{% extends "ui/_layout.html" %}
{% block title %}Log in - bty-web{% endblock %}
{% block content %}
<div class="row justify-content-center">
    <div class="col-md-6">
        <div class="text-center mb-3">
            <img src="/static/bty-mascot.png" alt="bty mascot"
                 width="160" height="160" class="img-fluid">
        </div>
        <div class="card">
            <div class="card-body">
                <h1 class="h4 mb-3"><i class="bi bi-shield-lock me-2"></i>Log in</h1>
                <p class="text-muted small">
                    Enter the admin password. The default is
                    <code>bty</code>; override via
                    <code>BTY_ADMIN_PASSWORD</code> on the server.
                </p>
                {% if using_default_password %}
                <div class="alert alert-warning small mb-3">
                    <i class="bi bi-exclamation-triangle me-1"></i>
                    This server still uses the well-known default
                    password <code>bty</code>. Set
                    <code>BTY_ADMIN_PASSWORD</code> on the host before
                    exposing it beyond localhost.
                </div>
                {% endif %}
                {% if error %}
                <div class="alert alert-danger">{{ error }}</div>
                {% endif %}
                <form action="/ui/login" method="post">
                    <div class="mb-3">
                        <label for="password" class="form-label">Password</label>
                        <input type="password" class="form-control" id="password"
                               name="password" autofocus required>
                    </div>
                    <button type="submit" class="btn btn-primary w-100">
                        <i class="bi bi-box-arrow-in-right me-1"></i>Log in
                    </button>
                </form>
            </div>
        </div>
    </div>
</div>
{% endblock %}