web/settings-api.lp

<? --[[
*  Pi-hole: A black hole for Internet advertisements
*  (c) 2023 Pi-hole, LLC (https://pi-hole.net)
*  Network-wide ad blocking via your own hardware.
*
*  This file is copyright under the latest version of the EUPL.
*  Please see LICENSE file for your rights under this license.
--]]

mg.include('scripts/lua/header_authenticated.lp','r')

-- Page title and level selector
PageTitle = "Web Interface - API Settings"
mg.include('scripts/lua/settings_header.lp','r')
?>
<div class="row">
    <div class="col-md-6">
        <div class="box box-warning">
            <div class="box-header with-border">
                <h3 class="box-title" data-configkeys="webserver.interface.theme webserver.interface.boxed">Theme settings</h3>
            </div>
            <div class="box-body">
                <div class="row">
                    <div class="col-lg-12">
                        <div class="row form-group">
                            <div class="col-sm-3">
                                <label for="webserver.interface.theme">Theme:</label>
                            </div>
                            <div class="col-sm-9">
                                <select id="webserver.interface.theme" data-key="webserver.interface.theme" class="form-control" placeholder="">
                                    <option disabled selected>Loading...</option>
                                </select>
                            </div>
                        </div>
                    </div>
                    <div class="col-lg-12">
                        <div class="row form-group">
                            <div class="col-sm-12">
                                <div>
                                    <input type="checkbox" id="webserver.interface.boxed" data-key="webserver.interface.boxed">
                                    <label for="webserver.interface.boxed"><strong>Use the boxed layout</strong></label>
                                    <p class="help-block">The boxed layout is helpful when working on large screens because it prevents the site from stretching very wide.</p>
                                </div>
                            </div>
                        </div>
                    </div>
                </div>
            </div>
        </div>
    </div>

    <div class="col-md-6 settings-level-expert d-none">
        <div class="box box-warning">
            <div class="box-header with-border">
                <h3 class="box-title" data-configkeys="webserver.api.prettyJSON webserver.api.allow_destructive">Advanced Settings</h3>
            </div>
            <div class="box-body">
                <div class="row">
                    <div class="col-lg-12">
                        <div>
                            <input type="checkbox" id="webserver.api.prettyJSON" data-key="webserver.api.prettyJSON">
                            <label for="webserver.api.prettyJSON"><strong>Prettify API output for human-readability</strong></label>
                            <p class="help-block">This will make the API output more human-readable, but will increase the size of the output and make the API a bit slower.</p>
                        </div>
                    </div>
                    <div class="col-lg-12">
                        <div>
                            <input type="checkbox" id="webserver.api.allow_destructive" data-key="webserver.api.allow_destructive">
                            <label for="webserver.api.allow_destructive"><strong>Permit destructive actions via API</strong></label>
                            <p class="help-block">This will allow clients to perform destructive actions via the API, such as rebooting or shutting down the system Pi-hole is running on.</p>
                        </div>
                    </div>
                    <div class="col-lg-12 pt-3">
                        <button type="button" id="button-enable-totp" class="btn btn-success hidden" data-toggle="modal" data-target="#modal-totp">Enable 2FA</button>
                        <button type="button" id="button-disable-totp" class="btn btn-danger hidden" data-toggle="modal" data-target="#modal-totp-disable">Disable 2FA</button>
                        <button type="button" id="button-apppw" class="btn btn-default pull-right" data-toggle="modal" data-target="#modal-apppw">Configure app password</button>
                    </div>
                </div>
            </div>
        </div>
    </div>
</div>

<div class="row">
    <div class="col-md-12 settings-level-expert d-none">
        <div class="box box-warning">
            <div class="box-header with-border">
                <h3 class="box-title" data-configkeys="webserver.api.excludeDomains webserver.api.excludeClients">Exclusions</h3>
            </div>
            <div class="box-body">
                <div class="row">
                    <div class="col-md-6">
                        <p><strong>Domains to be excluded from Top Domain Lists and Query Log</strong></p>
                        <textarea class="form-control field-sizing-content" rows="4" id="webserver.api.excludeDomains" data-key="webserver.api.excludeDomains" placeholder="Enter regex domains, one per line" style="resize: vertical;"></textarea>
                        <p class="help-block">Domains may be described by their domain name (like <code>^example\.com$</code>)</p>
                    </div>
                    <div class="col-md-6">
                        <p><strong>Clients to be excluded from Top Client Lists and Query Log </strong></p>
                        <textarea class="form-control field-sizing-content" rows="4" id="webserver.api.excludeClients" data-key="webserver.api.excludeClients" placeholder="Enter regex clients, one per line" style="resize: vertical;"></textarea>
                        <p class="help-block">Clients may be described either by their IP addresses (IPv4 and IPv6 are supported), or hostnames (like <code>^laptop\.lan$</code>).</p>
                    </div>
                </div>
                <div class="row">
                    <div class="col-md-12">
                        <p><strong>Important</strong>:<br>Those input fields accept regex entries only.<br>Please refer to  <a href="https://docs.pi-hole.net/regex/tutorial/" rel="noopener" target="_blank">our guide</a> how to construct valid regex entries.</p>
                    </div>
                </div>
            </div>
        </div>
    </div>

    <!-- TODO: Why is this commented out?
    <div class="col-md-6">
        <div class="box box-warning">
            <div class="box-header with-border">
                <h3 class="box-title">Query Log</h3>
            </div>
            <div class="box-body">
                <div class="row">
                    <div class="col-lg-12">
                        <div>
                            <input type="checkbox" name="querylog-permitted" id="querylog-permitted" <? if queryLog == 'permittedonly' or queryLog == 'all' then ?>checked<? end ?>>
                            <label for="querylog-permitted"><strong>Show permitted domain entries</strong></label>
                            <p class="help-block"><span class="text-red">This will show all permitted domain entries in the query log.</span></p>
                        </div>
                        <div>
                            <input type="checkbox" name="querylog-blocked" id="querylog-blocked" <? if queryLog == 'blockedonly' or queryLog == 'all' then ?>checked<? end ?>>
                            <label for="querylog-blocked"><strong>Show blocked domain entries</strong></label>
                            <p class="help-block"><span class="text-red">This will show all blocked domain entries in the query log.</span></p>
                        </div>
                    </div>
                </div>
            </div>
        </div>
    </div>-->

    <div class="col-md-12 settings-level-expert d-none">
        <div class="box box-warning">
            <div class="box-header with-border">
                <h3 class="box-title">Currently active sessions</h3>
            </div>
            <div class="box-body">
                <div class="row">
                    <div class="col-md-12">
                        <table id="APISessionsTable" class="table table-striped table-bordered nowrap" width="100%">
                            <thead>
                                <tr>
                                    <td></td>
                                    <th title="Session ID used internally by our Pi-hole">ID</th>
                                    <th title="Session is still valid (neither expired nor closed)">Valid</th>
                                    <th title="Connection between client and Pi-hole is end-to-end encrypted">TLS</th>
                                    <th title="Session used application password during authentication"><i class="fas fa-robot"></i></th>
                                    <th title="Session used CLI password during authentication"><i class="fas fa-terminal"></i></th>
                                    <th title="Time at which the client created the session">Login at</th>
                                    <th title="Time at which the session expires (if not prolonged)">Valid until</th>
                                    <th title="The client that created this session (the current connection is highlighted in bold-face)">Client IP</th>
                                    <th title="User agent of the client to ease client identifiability (if available)">User Agent</th>
                                    <td></td>
                                </tr>
                            </thead>
                            <tbody>
                            </tbody>
                        </table>
                    </div>
                </div>
            </div>
        </div>
    </div>
    <div class="col-lg-12 save-button-container">
        <button type="button" class="btn btn-primary save-button"><i class="fa-solid fa-fw fa-floppy-disk"></i>&nbsp;Save & Apply</button>
    </div>
</div>

<div class="modal fade" id="modal-totp" style="display: none;">
    <div class="modal-dialog">
        <div class="modal-content">
            <div class="modal-header">
                <button type="button" class="close" data-dismiss="modal" aria-label="Close">
                <span aria-hidden="true">×</span></button>
                <h4 class="modal-title">Enable two-factor authentication</h4>
            </div>
            <div class="modal-body">
                <p>Use a phone app like Google Authenticator, 2FA Authenticator, FreeOTP or BitWarden, etc. to get 2FA codes when prompted during login.</p>
                <p>1. Scan the QR code below with your app or enter the secret manually.</p>
                <div class="text-center">
                    <i id="qrcode-spinner" class="fas fa-spinner fa-pulse fa-5x"></i>
                </div>
                <div class="text-center">
                    <canvas id="qrcode" class="qrcode" title="QR Code" hidden="true"></canvas>
                </div>
                <p class="text-center"><code id="totp_secret"></code></p>
                <p>2. Enter the 2FA code from your app below to confirm that you have set up 2FA correctly.</p>
                <div class="row">
                    <div class="col-md-6 col-md-offset-3">
                        <div id="totp_div" class="has-feedback has-error">
                            <div class="pwd-field form-group">
                                <input type="text" size="6" maxlength="6" class="form-control totp_token" id="totp_code" placeholder="">
                            </div>
                            <i class="fa-solid fa-clock-rotate-left pwd-field form-control-feedback"></i>
                        </div>
                    </div>
                </div>
                <p>IMPORTANT: If you lose your 2FA token, you will not be able to login. You will need to disable 2FA on the command line and re-enable 2FA to generate a new secret.</p>
            </div>
            <div class="modal-footer">
                <button type="button" class="btn btn-default pull-left" data-dismiss="modal">Close</button>
                <button type="button" id="totp_submit" class="btn btn-default" disabled>Enable 2FA</button>
            </div>
        </div>
    </div>
</div>

<div class="modal fade" id="modal-apppw" style="display: none;">
    <div class="modal-dialog">
        <div class="modal-content">
            <div class="modal-header">
                <button type="button" class="close" data-dismiss="modal" aria-label="Close">
                <span aria-hidden="true">×</span></button>
                <h4 class="modal-title">Configure application password</h4>
            </div>
            <div class="modal-body">
                <p>After you turn on two-factor (2FA) verification and set up an
                Authenticator app, you may run into issues if you use apps or
                other services that don't support two-step verification. In this
                case, you can create and use an app password to sign in.</p>
                <p>An app password is a long, randomly generated password that
                can be used instead of your regular password + 2FA token when
                signing in to the API. You can revoke the app password at any
                time. The app password can also be used when 2FA is not enabled.</p>
                <div class="text-center">
                    <i id="password-spinner" class="fas fa-spinner fa-pulse fa-5x"></i>
                </div>
                <p id="password_display" class="text-center hidden">&#x1F510;<br><strong>Your new app password is:</strong><br><code class="password_background m-5" id="password_code"></code></p>
                <p>IMPORTANT: The app password generated here will only be shown
                once and cannot be recovered. Make sure to store it in a safe
                place!</p>
                <div class="callout callout-warning" style="display: none;" id="existing_apppw_warning">
                    <h4>Application password already configured</h4>Enabling the new app password will forcefully log out all existing applications.
                </div>
            </div>
            <div class="modal-footer">
                <button type="button" id="apppw_clear" class="btn btn-danger pull-left">Remove currently set app password</button>
                <button type="button" id="apppw_submit" class="btn btn-success">Enable new app password</button>
            </div>
        </div>
    </div>
</div>

<script src="<?=pihole.fileversion('vendor/bootstrap-toggle/bootstrap-toggle.min.js')?>"></script>
<script src="<?=pihole.fileversion('vendor/jquery-confirm/jquery.confirm.min.js')?>"></script>
<script src="<?=pihole.fileversion('vendor/qrious/qrious.min.js')?>"></script>
<script src="<?=pihole.fileversion('scripts/js/settings-api.js')?>"></script>
<script src="<?=pihole.fileversion('scripts/js/settings.js')?>"></script>

<? mg.include('scripts/lua/footer.lp','r')?>