{{define "footleft"}}<a href="{{.Source}}">barerepo</a>{{end}}

{{define "body" -}}

<div class="bar">

<span class="brand">barerepo</span>

<span class="secondary"><a href="/signin">sign in</a></span>

</div>

<div class="pane loose">

<div class="panetitle">new account</div>

{{if .Error}}<div class="danger small formerror">{{.Error}}</div>{{end}}

{{if .Nonce}}

<form method="post" action="/signup">

<input type="hidden" name="nonce" value="{{.Nonce}}">

<div class="field">

<div class="label">prove you hold the private half</div>

<pre class="box">printf '%s' '{{.Nonce}}' | ssh-keygen -Y sign -f ~/.ssh/id_ed25519 -n barerepo-signup -</pre>

<div class="hint">a public key is public, so anyone could paste yours. this is how the

server knows it is yours. good for 10 minutes.</div>

</div>

<div class="field">

<div class="label">signature</div>

<textarea class="text tall" name="signature" spellcheck="false" autofocus

placeholder="-----BEGIN SSH SIGNATURE-----"></textarea>

</div>

<div class="actions"><button class="btn" type="submit">create {{.Name}}</button></div>

</form>

{{else}}

<form method="post" action="/signup">

<div class="field">

<div class="label">name</div>

<input class="text" name="name" value="{{.Name}}" autofocus spellcheck="false" autocapitalize="off">

</div>

<div class="field">

<div class="label">public key</div>

<textarea class="text short" name="pubkey" spellcheck="false">{{.PubKey}}</textarea>

<div class="hint">cat ~/.ssh/id_ed25519.pub</div>

</div>

<div class="actions"><button class="btn" type="submit">create</button></div>

</form>

{{end}}

<div class="muted small stack">

<div>your key is your account. there is no email and no password.</div>

<div class="danger">losing every key loses the account, because there is no out-of-band recovery channel.</div>

<div>add a second key from another machine today.</div>

</div>

</div>

{{- end}}