{% include 'admin/partials/header.html' %}{% include 'admin/partials/sidebar.html' %}
<div class="acp-page-head"><div><span class="eyebrow">System configuration</span><h1>Board Settings</h1><p>Control board identity, registration, posting, communication, security, and availability.</p></div><button class="acp-primary" type="submit" form="board-settings-form">Save all settings</button></div>
<form id="board-settings-form" method="post" action="{{ $baseUrl }}/admin/settings" class="settings-workspace"><input type="hidden" name="_token" value="{{ $csrfToken }}">
<nav class="settings-tabs" data-settings-tabs><button type="button" class="active" data-settings-tab="identity">Identity</button><button type="button" data-settings-tab="users">Users</button><button type="button" data-settings-tab="posting">Posting</button><button type="button" data-settings-tab="features">Features</button><button type="button" data-settings-tab="security">Security</button><button type="button" data-settings-tab="system">System</button><button type="button" data-settings-tab="debug">Debug</button></nav>
<section class="dash-card settings-panel active" data-settings-panel="identity"><div class="dash-card-head"><div><h2>Board identity</h2><p>Public naming and contact details.</p></div></div><div class="settings-grid"><label><span>Board name</span><input name="board_name" maxlength="100" value="{{ $settings['board_name'] }}"></label><label><span>Board email</span><input type="email" name="board_email" value="{{ $settings['board_email'] }}"></label><label class="wide"><span>Board description</span><textarea name="board_description" maxlength="500">{{ $settings['board_description'] }}</textarea></label></div></section>
<section class="dash-card settings-panel" data-settings-panel="users"><div class="dash-card-head"><div><h2>Registration & members</h2><p>Account creation and presence behavior.</p></div></div><div class="settings-switches"><label><span><b>Enable registration</b><small>Allow visitors to create accounts.</small></span><input type="checkbox" name="registration_enabled" value="1" {{ $settings['registration_enabled']?'checked':'' }}></label><label><span><b>Require email verification</b><small>Accounts must verify email before posting.</small></span><input type="checkbox" name="require_email_verification" value="1" {{ $settings['require_email_verification']?'checked':'' }}></label><label><span><b>Allow username changes</b><small>Members may rename their own accounts.</small></span><input type="checkbox" name="allow_username_changes" value="1" {{ $settings['allow_username_changes']?'checked':'' }}></label></div><div class="settings-grid"><label><span>Online timeout (minutes)</span><input type="number" min="1" max="1440" name="online_timeout_minutes" value="{{ $settings['online_timeout_minutes'] }}"></label></div></section>
<section class="dash-card settings-panel" data-settings-panel="posting"><div class="dash-card-head"><div><h2>Topics & posts</h2><p>Pagination and content limits.</p></div></div><div class="settings-grid"><label><span>Topics per page</span><input type="number" min="1" max="100" name="topics_per_page" value="{{ $settings['topics_per_page'] }}"></label><label><span>Posts per page</span><input type="number" min="1" max="100" name="posts_per_page" value="{{ $settings['posts_per_page'] }}"></label><label><span>Maximum post length</span><input type="number" min="100" max="100000" name="max_post_length" value="{{ $settings['max_post_length'] }}"></label></div><div class="settings-switches"><label><span><b>Allow polls</b><small>Globally enable poll creation and voting.</small></span><input type="checkbox" name="allow_polls" value="1" {{ $settings['allow_polls']?'checked':'' }}></label><label><span><b>Allow attachments</b><small>Globally permit post attachments.</small></span><input type="checkbox" name="allow_attachments" value="1" {{ $settings['allow_attachments']?'checked':'' }}></label></div></section>
<section class="dash-card settings-panel" data-settings-panel="features"><div class="dash-card-head"><div><h2>Community features</h2><p>Enable or disable major board modules.</p></div></div><div class="settings-switches"><label><span><b>Private messages</b><small>Member-to-member threaded messages.</small></span><input type="checkbox" name="private_messages_enabled" value="1" {{ $settings['private_messages_enabled']?'checked':'' }}></label><label><span><b>Live chat</b><small>Near-real-time direct conversations.</small></span><input type="checkbox" name="live_chat_enabled" value="1" {{ $settings['live_chat_enabled']?'checked':'' }}></label><label><span><b>Calendar</b><small>Events, holidays, and birthdays.</small></span><input type="checkbox" name="calendar_enabled" value="1" {{ $settings['calendar_enabled']?'checked':'' }}></label><label><span><b>Member directory</b><small>Public member-list access.</small></span><input type="checkbox" name="member_list_enabled" value="1" {{ $settings['member_list_enabled']?'checked':'' }}></label></div></section>
<section class="dash-card settings-panel" data-settings-panel="security"><div class="dash-card-head"><div><h2>Security defaults</h2><p>Session, authentication, and local anti-automation protections.</p></div><a class="acp-secondary" href="{{ $baseUrl }}/admin/nexus-shield">Open NexusShield</a></div><div class="settings-grid"><label><span>Session lifetime (minutes)</span><input type="number" min="1" max="10080" name="session_lifetime_minutes" value="{{ $settings['session_lifetime_minutes'] }}"></label><label><span>Login attempt limit</span><input type="number" min="1" max="100" name="login_attempt_limit" value="{{ $settings['login_attempt_limit'] }}"></label><label><span>Login lock duration</span><input type="number" min="1" max="1440" name="login_lock_minutes" value="{{ $settings['login_lock_minutes'] }}"></label><label><span>Challenge after failed logins</span><input type="number" min="1" max="20" name="nexus_shield_login_failures" value="{{ $settings['nexus_shield_login_failures'] }}"></label><label><span>Minimum form time (seconds)</span><input type="number" min="1" max="30" name="nexus_shield_min_seconds" value="{{ $settings['nexus_shield_min_seconds'] }}"></label><label><span>Requests per 10 minutes</span><input type="number" min="1" max="500" name="nexus_shield_rate_limit" value="{{ $settings['nexus_shield_rate_limit'] }}"></label><label><span>Challenge score</span><input type="number" min="1" max="100" name="nexus_shield_challenge_score" value="{{ $settings['nexus_shield_challenge_score'] }}"></label><label><span>Block score</span><input type="number" min="1" max="200" name="nexus_shield_block_score" value="{{ $settings['nexus_shield_block_score'] }}"></label></div><div class="settings-switches"><label><span><b>Content Security Policy</b><small>Send baseline browser security headers.</small></span><input type="checkbox" name="enable_csp" value="1" {{ $settings['enable_csp']?'checked':'' }}></label><label><span><b>Enable NexusShield</b><small>Use locally hosted risk checks, honeypots, rate limits, and one-time challenges.</small></span><input type="checkbox" name="nexus_shield_enabled" value="1" {{ $settings['nexus_shield_enabled']?'checked':'' }}></label><label><span><b>Protect registration</b><small>Require a local challenge when visitors create accounts.</small></span><input type="checkbox" name="nexus_shield_register_enabled" value="1" {{ $settings['nexus_shield_register_enabled']?'checked':'' }}></label><label><span><b>Protect login</b><small>Step up verification after repeated failed sign-in attempts.</small></span><input type="checkbox" name="nexus_shield_login_enabled" value="1" {{ $settings['nexus_shield_login_enabled']?'checked':'' }}></label></div><div class="settings-grid"><label><span>Minimum password length</span><input type="number" min="8" max="128" name="password_min_length" value="{{ $settings['password_min_length'] }}"></label></div><div class="settings-switches"><label><span><b>Require administrator MFA</b><small>Administrators without MFA are directed to account security before ACP access.</small></span><input type="checkbox" name="require_mfa_admin" value="1" {{ $settings['require_mfa_admin']?'checked':'' }}></label><label><span><b>HTTP Strict Transport Security</b><small>Enable only after HTTPS works correctly for the entire domain.</small></span><input type="checkbox" name="enable_hsts" value="1" {{ $settings['enable_hsts']?'checked':'' }}></label></div><input type="hidden" name="nexus_shield_registration_mode" value="always"></section>
<section class="dash-card settings-panel" data-settings-panel="system"><div class="dash-card-head"><div><h2>System & availability</h2><p>Timezone, formats, and maintenance mode.</p></div></div><div class="settings-grid"><label><span>Default timezone</span><input name="default_timezone" value="{{ $settings['default_timezone'] }}"></label><label><span>Date format</span><select name="date_format"><option value="M j, Y" {{ $settings['date_format']==='M j, Y'?'selected':'' }}>Jul 14, 2026</option><option value="F j, Y" {{ $settings['date_format']==='F j, Y'?'selected':'' }}>July 14, 2026</option><option value="m/d/Y" {{ $settings['date_format']==='m/d/Y'?'selected':'' }}>07/14/2026</option><option value="d/m/Y" {{ $settings['date_format']==='d/m/Y'?'selected':'' }}>14/07/2026</option><option value="Y-m-d" {{ $settings['date_format']==='Y-m-d'?'selected':'' }}>2026-07-14</option><option value="D, M j Y" {{ $settings['date_format']==='D, M j Y'?'selected':'' }}>Tue, Jul 14 2026</option></select></label><label><span>Time format</span><select name="time_format"><option value="g:i A" {{ $settings['time_format']==='g:i A'?'selected':'' }}>8:42 PM</option><option value="g:i a" {{ $settings['time_format']==='g:i a'?'selected':'' }}>8:42 pm</option><option value="H:i" {{ $settings['time_format']==='H:i'?'selected':'' }}>20:42</option><option value="H:i:s" {{ $settings['time_format']==='H:i:s'?'selected':'' }}>20:42:18</option></select></label><label><span>Activity timestamps</span><select name="date_display_mode"><option value="relative" {{ $settings['date_display_mode']==='relative'?'selected':'' }}>Relative (12 minutes ago)</option><option value="absolute" {{ $settings['date_display_mode']==='absolute'?'selected':'' }}>Absolute date and time</option><option value="hybrid" {{ $settings['date_display_mode']==='hybrid'?'selected':'' }}>Relative, with full date tooltip</option></select></label><label class="wide"><span>Maintenance message</span><textarea name="maintenance_message" maxlength="1000">{{ $settings['maintenance_message'] }}</textarea></label></div><div class="settings-switches danger-zone"><label><span><b>Maintenance mode</b><small>Hide the public board while administrators perform work.</small></span><input type="checkbox" name="maintenance_mode" value="1" {{ $settings['maintenance_mode']?'checked':'' }}></label></div></section>
<section class="dash-card settings-panel" data-settings-panel="debug"><div class="dash-card-head"><div><h2>Debug & diagnostics</h2><p>Developer instrumentation for administrators. Disable on production boards when not actively troubleshooting.</p></div><a class="acp-secondary" href="{{ $baseUrl }}/admin/debug">Open developer tools</a></div><div class="settings-switches danger-zone"><label><span><b>Debug mode</b><small>Collect query timing and page-performance details for administrators.</small></span><input type="checkbox" name="debug_mode" value="1" {{ $settings['debug_mode']?'checked':'' }}></label><label><span><b>Debug toolbar</b><small>Display a collapsible diagnostics bar at the bottom of rendered pages.</small></span><input type="checkbox" name="debug_toolbar" value="1" {{ $settings['debug_toolbar']?'checked':'' }}></label></div><div class="settings-grid"><label><span>Slow query threshold (ms)</span><input type="number" min="1" max="5000" name="debug_slow_query_ms" value="{{ $settings['debug_slow_query_ms'] }}"></label></div></section><footer class="settings-savebar"><span><b>Board-wide configuration</b><small>Changes are logged to the audit trail.</small></span><button class="acp-primary" type="submit">Save all settings</button></footer></form>
{% include 'admin/partials/footer.html' %}