selfpost/internal/web/view/templates/settings.html

{{/* Wide enough for credentials and DMARC settings side by side (see .split
     in panel.css, as on a delivery's page). */}}
{{define "wide"}}wide{{end}}

{{/* The username/password fields are identical for a global administrator
     (split card, DMARC alongside) and a domain administrator (narrow card,
     no DMARC card) — only the surrounding form and card differ. */}}
{{define "credentials_fields"}}
<label for="username">Username</label>
<input id="username" name="username" autocomplete="username"
       autocapitalize="none" spellcheck="false" value="{{.FormUsername}}" required>

<label for="current_password">Current password</label>
<input id="current_password" name="current_password" type="password"
       autocomplete="current-password" required>

<label for="new_password">New password</label>
<input id="new_password" name="new_password" type="password" autocomplete="new-password">

<label for="new_password_confirm">Confirm new password</label>
<input id="new_password_confirm" name="new_password_confirm" type="password" autocomplete="new-password">
{{end}}

{{define "content"}}
<h1>Settings</h1>

{{if .Flash}}<div class="flash">{{.Flash}}</div>{{end}}
{{if .Error}}<p class="error">{{.Error}}</p>{{end}}

{{if .ShowDMARC}}
<form method="post" action="/settings">
<div class="split">
  <div class="card">
    <h2>Panel credentials</h2>
    <p class="muted">These are the credentials for this control panel only.
    Applications keep their own logins and passwords, which are not affected.</p>

    {{template "credentials_fields" .}}
  </div>

  <div class="card">
    <h2>DMARC aggregate reports</h2>
    <p class="muted">Optional default <code>rua=</code> address for every sending
    domain (can be overridden per domain). Use a mailbox on a domain that
    receives inbound mail. SelfPost does not receive inbound mail — point
    <code>rua=</code> at a mailbox elsewhere.</p>

    <label for="dmarc_report_email">Default report address</label>
    <input id="dmarc_report_email" name="dmarc_report_email" type="email"
           autocomplete="email" autocapitalize="none" spellcheck="false"
           value="{{.FormDMARCEmail}}" placeholder="reports@your-mail-domain.com">

    {{if .FormDMARCEmail}}
    <p class="muted">When <code>rua=</code> points at another domain, that hub
    domain must publish a report-authorisation record so receivers will deliver
    the XML aggregates.</p>

    <label>Report authorization — host / name</label>
    <div class="code-row">
      <span class="code">{{.ReportAuthName}}</span>
      <button type="button" class="copy">Copy</button>
    </div>

    <label>Report authorization — value</label>
    <div class="code-row">
      <span class="code">{{.ReportAuthExample}}</span>
      <button type="button" class="copy">Copy</button>
    </div>

    {{if .ReportAuthDNS.Status}}
    <label>Report authorization DNS <span class="st st-{{.ReportAuthDNS.Status}}">{{.ReportAuthDNS.Status}}</span></label>
    <p class="{{if eq .ReportAuthDNS.Status "ok"}}muted{{else}}error{{end}}">{{.ReportAuthDNS.Detail}}</p>
    {{if .ReportAuthDNS.Records}}<span class="code">{{range .ReportAuthDNS.Records}}{{.}}
{{end}}</span>{{end}}
    {{end}}
    {{end}}
  </div>
</div>

<button type="submit">Save changes</button>
<p class="muted">Leave both new-password fields empty to change the username
or DMARC address only. Changing the password signs out every other session;
this one stays signed in.</p>
</form>
{{else}}
<div class="card narrow">
  <h2>Panel credentials</h2>
  <p class="muted">These are the credentials for this control panel only.
  Applications keep their own logins and passwords, which are not affected.</p>
  <form method="post" action="/settings">
    {{template "credentials_fields" .}}

    <button type="submit">Save changes</button>
  </form>
  <p class="muted">Leave both new-password fields empty to change the username
  only. Changing the password signs out every other session;
  this one stays signed in.</p>
</div>
{{end}}

<div class="card" id="rate-limits">
  <h2>Sending rate limits</h2>
  <p class="muted">Configured in <code>.env</code> / Compose; restart the
  container to change level&nbsp;1. Domain and application ceilings are set on
  each domain's page.</p>

  <label>Level 1 — per client IP (Postfix)</label>
  <p class="code-row"><span class="code">{{.L1Messages}} messages / {{.L1Window}} seconds</span></p>
  <p class="muted"><code>RATE_LIMIT_MESSAGES_PER_IP</code> /
  <code>RATE_LIMIT_WINDOW_SECONDS</code>. Hard ceiling for every connecting IP;
  the panel cannot raise a domain or application limit above this.</p>

  <label>Level 2 — domain</label>
  <p class="muted">Optional ceiling for <em>all</em> senders on a domain. When
  unset, only level&nbsp;1 applies. Must be ≤ level&nbsp;1.</p>

  <label>Level 2 — application (trusted IPs)</label>
  <p class="muted">Optional override: list client IPs and a ceiling
  <em>strictly above</em> the domain limit (still ≤ level&nbsp;1). Those IPs
  skip the domain check; everyone else stays under the domain (or level&nbsp;1).</p>
</div>
{{end}}