{% extends "admin/base.html" %}{% block title %}Proxy & Clone Protection{% endblock %}{% block content %}
<div class="admin-page-head"><div><p class="eyebrow-dark">Proxy and clone protection</p><h1>Security rules & blocked requests</h1><p class="mt-2 text-sm text-zinc-600">Manage blocked IPs/CIDR ranges, blocked domains, and approved hosts directly from admin.</p></div><a class="btn-outline" href="{{ url_for('admin_analytics') }}">Back to Analytics</a></div>
<section class="mt-6 admin-panel"><h2>Add security rule</h2><form class="mt-4 grid gap-4 lg:grid-cols-5" method="post"><input type="hidden" name="security_action" value="add_rule"><label><span class="form-label">Rule type</span><select class="form-input" name="rule_type"><option value="blocked_ip">Blocked IP / CIDR</option><option value="blocked_domain">Blocked domain</option><option value="approved_host">Approved host</option></select></label><label class="lg:col-span-2"><span class="form-label">IP, CIDR or domain</span><textarea class="form-input min-h-24" name="rule_value" required placeholder="One per line, comma, or semicolon:&#10;216.252.233.168&#10;216.252.233.0/24&#10;example.com"></textarea></label><label><span class="form-label">Reason</span><input class="form-input" name="reason"></label><label><span class="form-label">Expires (optional)</span><input class="form-input" type="datetime-local" name="expires_at"></label><div class="lg:col-span-5"><button class="btn-primary" type="submit">Add / enable rule</button></div></form></section>
<form class="mt-6 admin-panel overflow-x-auto" method="post"><div class="flex flex-wrap items-center justify-between gap-3"><h2>Configured rules</h2><div class="flex gap-2"><button class="btn-outline" name="security_action" value="enable_rules">Enable selected</button><button class="btn-outline" name="security_action" value="disable_rules">Disable selected</button><button class="btn-outline" name="security_action" value="delete_rules" onclick="return confirm('Delete selected security rules?')">Delete selected</button></div></div><table class="mt-4 min-w-full divide-y divide-zinc-200"><thead><tr><th class="table-heading"><input type="checkbox" data-check-all="rule_ids"></th><th class="table-heading">Type</th><th class="table-heading">Value</th><th class="table-heading">Reason</th><th class="table-heading">Status</th><th class="table-heading">Hits</th><th class="table-heading">Last hit</th></tr></thead><tbody>{% for row in rules %}<tr><td class="table-cell"><input type="checkbox" name="rule_ids" value="{{ row.id }}"></td><td class="table-cell">{{ row.rule_type }}</td><td class="table-cell font-bold break-all">{{ row.rule_value }}</td><td class="table-cell">{{ row.reason }}</td><td class="table-cell">{{ 'Enabled' if row.is_enabled else 'Disabled' }}</td><td class="table-cell">{{ row.hit_count or 0 }}</td><td class="table-cell">{{ row.last_hit_at or '—' }}</td></tr>{% else %}<tr><td class="table-cell" colspan="7">No database rules yet. Environment defaults still apply.</td></tr>{% endfor %}</tbody></table></form>
<form class="mt-6 admin-panel overflow-x-auto" method="post"><div class="flex flex-wrap items-center justify-between gap-3"><div><h2>Blocked request log</h2><p class="mt-1 text-xs text-zinc-500">{{ 'Full IPs shown' if show_full_ip else 'Masked IPs shown' }}. Change this from Analytics.</p></div><div class="flex flex-wrap gap-2"><button class="btn-outline" name="security_action" value="block_event_ips">Block selected IPs</button><button class="btn-outline" name="security_action" value="block_event_domains">Block selected domains</button><button class="btn-outline" name="security_action" value="delete_events">Delete selected logs</button></div></div><table class="mt-4 min-w-full divide-y divide-zinc-200"><thead><tr><th class="table-heading"><input type="checkbox" data-check-all="event_ids"></th><th class="table-heading">Time</th><th class="table-heading">Reason</th><th class="table-heading">IP</th><th class="table-heading">Host / Origin</th><th class="table-heading">Path</th></tr></thead><tbody>{% for row in rows %}<tr><td class="table-cell"><input type="checkbox" name="event_ids" value="{{ row.id }}"></td><td class="table-cell">{{ row.created_at }}</td><td class="table-cell font-bold">{{ row.reason }}</td><td class="table-cell">{{ row.source_ip_full if show_full_ip and row.source_ip_full else row.source_ip_masked }}</td><td class="table-cell max-w-sm break-all">{{ row.request_host }}<br>{{ row.origin or row.referrer }}</td><td class="table-cell break-all">{{ row.method }} {{ row.path }}</td></tr>{% else %}<tr><td class="table-cell" colspan="6">No blocked requests recorded.</td></tr>{% endfor %}</tbody></table></form>
<script>document.querySelectorAll('[data-check-all]').forEach(x=>x.addEventListener('change',()=>document.querySelectorAll(`input[name="${x.dataset.checkAll}"]`).forEach(c=>c.checked=x.checked)));</script>
{% endblock %}