btcpayserver/BTCPayServer/Views/UIServer/Policies.cshtml

@using BTCPayServer.Payments;
@using BTCPayServer.Services
@using BTCPayServer.Services.Mails;
@model BTCPayServer.Services.PoliciesSettings
@inject SettingsRepository _SettingsRepository
@inject TransactionLinkProviders TransactionLinkProviders
@{
    ViewData.SetActivePage(ServerNavPages.Policies);
    var linkProviders = TransactionLinkProviders.ToArray();
}

@section PageHeadContent {
    <style>
        #AllowLightningInternalNodeForAll ~ .info-note,
        #AllowHotWalletRPCImportForAll ~ .info-note,
        #AllowHotWalletForAll ~ .info-note,
        #DisableNonAdminCreateUserApi:checked ~ .info-note,
        #LockSubscription:checked ~ .info-note { display: none; }
        
        #AllowLightningInternalNodeForAll:checked ~ .info-note,
        #AllowHotWalletRPCImportForAll:checked ~ .info-note,
        #AllowHotWalletForAll:checked ~ .info-note { display: inline-flex; }
    </style>
}

<h3 class="mb-4">@ViewData["Title"]</h3>

@if (!ViewContext.ModelState.IsValid)
{
    <div asp-validation-summary="All" class="text-danger"></div>
}

<div class="row">
    <div class="col-xl-8 col-xxl-constrain">
        <form method="post" class="d-flex flex-column">
            <div class="form-group mb-5">
                <h4 class="mb-3">Existing User Settings</h4>
                <div class="form-check my-3">
                    <input asp-for="AllowLightningInternalNodeForAll" type="checkbox" class="form-check-input"/>
                    <label asp-for="AllowLightningInternalNodeForAll" class="form-check-label"></label>
                    <a href="https://docs.btcpayserver.org/FAQ/LightningNetwork/#how-many-users-can-use-lightning-network-in-btcpay" target="_blank" rel="noreferrer noopener">
                        <vc:icon symbol="info" />
                    </a>
                    <span asp-validation-for="AllowLightningInternalNodeForAll" class="text-danger"></span>
                    <div class="info-note mt-2 text-warning" role="alert">
                        <vc:icon symbol="warning"/>
                        Caution: Enabling this option, may simplify the onboarding for third-parties but carries liabilities and security risks associated with sharing the lightning node with other users.
                    </div>
                </div>
                <div class="form-check my-3">
                    <input asp-for="AllowHotWalletForAll" type="checkbox" class="form-check-input"/>
                    <label asp-for="AllowHotWalletForAll" class="form-check-label"></label>
                    <a href="https://docs.btcpayserver.org/CreateWallet/#requirements-to-create-wallets" target="_blank" rel="noreferrer noopener">
                        <vc:icon symbol="info" />
                    </a>
                    <span asp-validation-for="AllowHotWalletForAll" class="text-danger"></span>
                    <div class="info-note mt-2 text-warning" role="alert">
                        <vc:icon symbol="warning"/>
                        Caution: Enabling this option, may simplify the onboarding and spending for third-parties but carries liabilities and security risks associated to storing private keys of third parties on a server.
                    </div>
                </div>
                <div class="form-check my-3">
                    <input asp-for="AllowHotWalletRPCImportForAll" type="checkbox" class="form-check-input"/>
                    <label asp-for="AllowHotWalletRPCImportForAll" class="form-check-label"></label>
                    <span asp-validation-for="AllowHotWalletRPCImportForAll" class="text-danger"></span>
                    <div class="info-note mt-2 text-warning" role="alert">
                        <vc:icon symbol="warning"/>
                        Caution: Enabling this option, may simplify the onboarding and spending for third-parties but carries liabilities and security risks associated to storing private keys of third parties on a server.
                    </div>
                </div>
            </div>

            <div class="form-group mb-5">
                <h4 class="mb-3">New User Settings</h4>
                <div class="form-check my-3">
                    @{
                        var emailSettings = (await _SettingsRepository.GetSettingAsync<EmailSettings>()) ?? new EmailSettings();
                        /* The "|| Model.RequiresConfirmedEmail" check is for the case when a user had checked
                           the checkbox without first configuring the e-mail settings so that they can uncheck it. */
                        var isEmailConfigured = emailSettings.IsComplete() || Model.RequiresConfirmedEmail;
                    }
                    <input asp-for="RequiresConfirmedEmail" type="checkbox" class="form-check-input" disabled="@(isEmailConfigured ? null : "disabled")"/>
                    <label asp-for="RequiresConfirmedEmail" class="form-check-label"></label>
                    <a href="https://docs.btcpayserver.org/FAQ/ServerSettings/#how-to-allow-registration-on-my-btcpay-server" target="_blank" rel="noreferrer noopener">
                        <vc:icon symbol="info" />
                    </a>
                    <span asp-validation-for="RequiresConfirmedEmail" class="text-danger"></span>
                    @if (!isEmailConfigured)
                    {
                        <div class="mb-2">
                            <span class="text-secondary">Your email server has not been configured. <a asp-controller="UIServer" asp-action="Emails">Please configure it first.</a></span>
                        </div>
                    }
                </div>
                <div class="form-check my-3">
                    <input asp-for="LockSubscription" type="checkbox" class="form-check-input"/>
                    <label asp-for="LockSubscription" class="form-check-label"></label>
                    <span asp-validation-for="LockSubscription" class="text-danger"></span>
                    <div class="info-note mt-2 text-warning" role="alert">
                        <vc:icon symbol="warning"/>
                        Caution: Enabling public user registration means anyone can register to your server and may expose your BTCPay Server instance to potential security risks from unknown users.
                    </div>
                </div>

                <div class="form-check my-3">
                    <input asp-for="DisableNonAdminCreateUserApi" type="checkbox" class="form-check-input"/>
                    <label asp-for="DisableNonAdminCreateUserApi" class="form-check-label"></label>
                    <span asp-validation-for="DisableNonAdminCreateUserApi" class="text-danger"></span>
                    <div class="info-note mt-2 text-warning" role="alert">
                        <vc:icon symbol="warning"/>
                        Caution: Allowing non-admins to have access to API endpoints may expose your BTCPay Server instance to potential security risks from unknown users.
                    </div>
                </div>
            </div>

            <div class="form-group mb-5">
                <h4 class="mb-3">Notification Settings</h4>
                <div class="form-check my-3">
                    <input asp-for="DisableInstantNotifications" type="checkbox" class="form-check-input"/>
                    <label asp-for="DisableInstantNotifications" class="form-check-label"></label>
                    <a href="https://docs.btcpayserver.org/Notifications/#notifications" target="_blank" rel="noreferrer noopener">
                        <vc:icon symbol="info" />
                    </a>
                    <span asp-validation-for="DisableInstantNotifications" class="text-danger"></span>
                </div>
                <div class="form-check my-3">
                    <input asp-for="DisableStoresToUseServerEmailSettings" type="checkbox" class="form-check-input"/>
                    <label asp-for="DisableStoresToUseServerEmailSettings" class="form-check-label"></label>
                    <a href="https://docs.btcpayserver.org/Notifications/#server-emails" target="_blank" rel="noreferrer noopener">
                        <vc:icon symbol="info" />
                    </a>
                    <span asp-validation-for="DisableStoresToUseServerEmailSettings" class="text-danger"></span>
                </div>
            </div>

            <div class="form-group mb-5">
                <h4 class="mb-3">Maintenance Settings</h4>
                @if (ViewBag.UpdateUrlPresent)
                {
                    <div class="form-check my-3">
                        <input asp-for="CheckForNewVersions" type="checkbox" class="form-check-input"/>
                        <label asp-for="CheckForNewVersions" class="form-check-label"></label>
                        <span asp-validation-for="CheckForNewVersions" class="text-danger"></span>
                    </div>
                }
                <div class="form-check my-3">
                    <input asp-for="DiscourageSearchEngines" type="checkbox" class="form-check-input"/>
                    <label asp-for="DiscourageSearchEngines" class="form-check-label"></label>
                    <a href="https://docs.btcpayserver.org/FAQ/ServerSettings/#how-to-hide-my-btcpay-server-from-search-engines" target="_blank" rel="noreferrer noopener">
                        <vc:icon symbol="info" />
                    </a>
                    <span asp-validation-for="DiscourageSearchEngines" class="text-danger"></span>
                </div>
                <div class="form-check my-3">
                    <input asp-for="Experimental" type="checkbox" class="form-check-input"/>
                    <label asp-for="Experimental" class="form-check-label"></label>
                </div>
            </div>

            <h4 class="mb-3">Plugins</h4>
            <div class="form-group">
                <label asp-for="PluginSource" class="form-label"></label>
                <input asp-for="PluginSource" placeholder="@PoliciesSettings.DefaultPluginSource" class="form-control"/>
                <span asp-validation-for="PluginSource" class="text-danger"></span>
            </div>
            <div class="form-check">
                <input asp-for="PluginPreReleases" type="checkbox" class="form-check-input"/>
                <label asp-for="PluginPreReleases" class="form-check-label"></label>
            </div>

            @* To handle the multiple submit buttons on this page: Give this button
               a specific order to put it last, but keep it first in the markup *@
            <div class="order-1">
                <button id="SaveButton" type="submit" class="btn btn-primary" name="command" value="Save">Save</button>
            </div>

            <h4 class="mt-5">Customization Settings</h4>
            <div class="form-group mb-5">
                <label asp-for="RootAppId" class="form-label"></label>
                <select asp-for="RootAppId" asp-items="@(new SelectList(ViewBag.AppsList, nameof(SelectListItem.Value), nameof(SelectListItem.Text), Model.RootAppId))" class="form-select w-auto"></select>
                @if (!Model.DomainToAppMapping.Any())
                {
                    <button id="AddDomainButton" type="submit" name="command" value="add-domain" class="btn btn-link px-0">Map specific domains to specific apps</button>
                }
            </div>

            @if (Model.DomainToAppMapping.Any())
            {
                <h5 class="d-flex align-items-center justify-content-between mt-5 gap-3">
                    Domain to app mapping
                    <button id="AddDomainButton" type="submit" name="command" value="add-domain" class="d-inline-block btn text-primary btn-link p-0">
                        Add domain mapping
                    </button>
                </h5>
                <div class="list-group list-group-flush mb-2">
                    @for (var index = 0; index < Model.DomainToAppMapping.Count; index++)
                    {
                        <div class="list-group-item px-0 pt-3">
                            <div class="form-group">
                                <div class="d-flex align-items-center justify-content-between">
                                    <label asp-for="DomainToAppMapping[index].Domain" class="form-label"></label>
                                    <button type="submit" title="Remove domain mapping" name="command" value="@($"remove-domain:{index}")" class="d-inline-block ms-2 btn text-danger btn-link p-0 mb-2">
                                        <span class="fa fa-times"></span> Remove Mapping
                                    </button>
                                </div>
                                <input asp-for="DomainToAppMapping[index].Domain" class="form-control"/>
                                <span asp-validation-for="DomainToAppMapping[index].Domain" class="text-danger"></span>
                            </div>
                            <div class="form-group">
                                <label asp-for="DomainToAppMapping[index].AppId" class="form-label"></label>
                                <select asp-for="DomainToAppMapping[index].AppId"
                                        asp-items="@(new SelectList(ViewBag.AppsList, nameof(SelectListItem.Value), nameof(SelectListItem.Text), Model.DomainToAppMapping[index].AppId))"
                                        class="form-select w-auto">
                                </select>
                                <span asp-validation-for="DomainToAppMapping[index].AppId" class="text-danger"></span>
                            </div>
                        </div>
                    }
                </div>
            }

            <h4>Block Explorers</h4>

            @for (var lpi = 0; lpi < linkProviders.Length; lpi++)
            {
                var pmi = linkProviders[lpi].Key;
                var defaultLink = linkProviders[lpi].Value.BlockExplorerLinkDefault;
                var existingOverride = Model.BlockExplorerLinks?.SingleOrDefault(tuple => PaymentMethodId.Parse(tuple.CryptoCode) == pmi);
                if (existingOverride is null)
                {
                    existingOverride = new PoliciesSettings.BlockExplorerOverrideItem { CryptoCode = pmi.ToStringNormalized(), Link = null };
                    Model.BlockExplorerLinks ??= new ();
                    Model.BlockExplorerLinks.Add(existingOverride);
                }
                var i = Model.BlockExplorerLinks.IndexOf(existingOverride);
                var linkValue = existingOverride.Link ?? defaultLink;
                <div class="form-group" data-default="@defaultLink">
                    <div class="d-flex flex-wrap align-items-center justify-content-between gap-3">
                        <label asp-for="BlockExplorerLinks[i].Link" class="form-label">@pmi.ToPrettyString()</label>
                        <button type="button" class="btn btn-link p-0 only-for-js revert-default" title="Revert to default">
                            Set to default
                        </button>
                    </div>
                    <input type="hidden" asp-for="BlockExplorerLinks[i].CryptoCode" value="@pmi.ToStringNormalized()" />
                    <input type="text" class="form-control block-explorer-link" asp-for="BlockExplorerLinks[i].Link" value="@linkValue" rel="noreferrer noopener" />
                </div>
            }
        </form>
    </div>
</div>

@section PageFootContent {
    <script>
        delegate('click', '.revert-default', e => {
            const $row = e.target.closest('[data-default]');
            $row.querySelector('input.block-explorer-link').value = $row.dataset.default;
        })
        for (let element of document.getElementsByClassName("collapse-on-js")){
            if (element.classList.contains("show")){
                element.classList.remove("show");
            }    
        }
    </script>
}