Function renderAdminEncryptionSection

public/js/adminPanel.js:906–1110

({ config, dark })

}

function renderAdminEncryptionSection({ config, dark }) {
  const host = document.getElementById("encryptionContent");
  if (!host) return;

  const enc = (config && config.encryption && typeof config.encryption === 'object') ? config.encryption : {};
  const supported = !!enc.supported;
  const hasMasterKey = !!enc.hasMasterKey;
  const source = String(enc.source || 'missing');
  const lockedByEnv = !!enc.lockedByEnv;
  const envPresent = !!enc.envPresent;
  const filePresent = !!enc.filePresent;
  const canGenerateKey = !lockedByEnv && !filePresent;

  const statusPill = (ok, label) => `
    <span class="badge badge-pill ${ok ? 'badge-success' : 'badge-secondary'}" style="margin-left:6px;">
      ${label}
    </span>
  `;

  const sourceLabel = (() => {
    if (source === 'env') return 'Env (FR_ENCRYPTION_MASTER_KEY)';
    if (source === 'env_invalid') return 'Env present but invalid';
    if (source === 'file') return 'Key file (META_DIR/encryption_master.key)';
    if (source === 'file_invalid') return 'Key file present but invalid';
    return 'Missing';
  })();

  host.innerHTML = `
    <div class="card" style="border:1px solid ${dark ? '#3a3a3a' : '#eaeaea'}; border-radius:10px; padding:12px; background:${dark ? '#1f1f1f' : '#fdfdfd'};">
      <div class="d-flex align-items-center" style="gap:10px; margin-bottom:6px;">
        <i class="material-icons" aria-hidden="true">enhanced_encryption</i>
        <div style="font-weight:600;">
          ${tf("encryption_at_rest", "Encryption at rest")}
          ${statusPill(supported, supported ? tf("supported", "Supported") : tf("not_supported", "Not supported"))}
          ${statusPill(hasMasterKey, hasMasterKey ? tf("configured", "Configured") : tf("missing", "Missing"))}
        </div>
      </div>

      <div class="small text-muted" style="margin-bottom:8px;">
        ${tf("encryption_help_short", "Folder encryption requires a server master key. Env overrides the key file.")}
      </div>

      <div class="small" style="line-height:1.5;">
        <div><strong>${tf("master_key_source", "Master key source")}:</strong> ${escapeHTML(sourceLabel)}</div>
        <div><strong>${tf("env_present", "Env present")}:</strong> ${envPresent ? 'Yes' : 'No'}${lockedByEnv ? ' (locked)' : ''}</div>
        <div><strong>${tf("key_file_present", "Key file present")}:</strong> ${filePresent ? 'Yes' : 'No'}</div>
      </div>

      <hr class="admin-divider" style="margin:10px 0;">

      <div class="d-flex flex-wrap" style="gap:8px; align-items:center;">
        <button type="button" class="btn btn-sm btn-secondary" id="frEncGenerateKeyBtn" ${canGenerateKey ? '' : 'disabled'}>
          ${tf("generate_key_file", "Generate key file")}
        </button>
        <button type="button" class="btn btn-sm btn-outline-danger" id="frEncClearKeyBtn" ${lockedByEnv ? 'disabled' : ''}>
          ${tf("clear_key_file", "Clear key file")}
        </button>
        ${lockedByEnv ? `<div class="small text-warning">${tf("locked_by_env", "Locked by FR_ENCRYPTION_MASTER_KEY env override.")}</div>` : ''}