{{define "footleft"}}<a href="{{.Source}}">barerepo</a>{{end}}
{{define "body" -}}
<div class="bar">
  <span class="brand">barerepo</span>
  <span class="secondary"><a href="/signin">sign in</a></span>
</div>
<div class="pane loose">
  <div class="panetitle">new account</div>
  {{if .Error}}<div class="danger small formerror">{{.Error}}</div>{{end}}
  {{if .Nonce}}
  <form method="post" action="/signup">
    <input type="hidden" name="nonce" value="{{.Nonce}}">
    <div class="field">
      <div class="label">prove you hold the private half</div>
      <pre class="box">printf '%s' '{{.Nonce}}' | ssh-keygen -Y sign -f ~/.ssh/id_ed25519 -n barerepo-signup -</pre>
      <div class="hint">a public key is public, so anyone could paste yours. this is how the
        server knows it is yours. good for 10 minutes.</div>
    </div>
    <div class="field">
      <div class="label">signature</div>
      <textarea class="text tall" name="signature" spellcheck="false" autofocus
        placeholder="-----BEGIN SSH SIGNATURE-----"></textarea>
    </div>
    <div class="actions"><button class="btn" type="submit">create {{.Name}}</button></div>
  </form>
  {{else}}
  <form method="post" action="/signup">
    <div class="field">
      <div class="label">name</div>
      <input class="text" name="name" value="{{.Name}}" autofocus spellcheck="false" autocapitalize="off">
    </div>
    <div class="field">
      <div class="label">public key</div>
      <textarea class="text short" name="pubkey" spellcheck="false">{{.PubKey}}</textarea>
      <div class="hint">cat ~/.ssh/id_ed25519.pub</div>
    </div>
    <div class="actions"><button class="btn" type="submit">create</button></div>
  </form>
  {{end}}
  <div class="muted small stack">
    <div>your key is your account. there is no email and no password.</div>
    <div class="danger">losing every key loses the account, because there is no out-of-band recovery channel.</div>
    <div>add a second key from another machine today.</div>
  </div>
</div>
{{- end}}