{# templates/emails/security/suspicious_activity.html.twig #}
{% extends 'emails/admin/alert.html.twig' %}

{% block title %}Activité Suspecte Détectée{% endblock %}

{% block content %}
    <h2 style="color: {{ priority_color }}; margin: 0 0 20px 0;">
        <i class="fa {{ type_icon }}"></i> {{ type_label }}
    </h2>

    <div style="background: #FFFBEB; border-left: 4px solid #F59E0B; padding: 15px; margin: 20px 0; border-radius: 4px;">
        <p style="margin: 0; color: #92400E; font-weight: bold;">
            Une activité suspecte a été détectée sur {{ system_name }}.
        </p>
    </div>

    <table style="width: 100%; margin: 20px 0; border-collapse: collapse;">
        <tr style="background: #F9FAFB;">
            <td style="padding: 12px; font-weight: bold; border-bottom: 1px solid #E5E7EB; width: 30%;">Adresse IP</td>
            <td style="padding: 12px; border-bottom: 1px solid #E5E7EB;">
                <code style="background: #F3F4F6; padding: 4px 8px; border-radius: 4px;">{{ data.ip_address }}</code>
            </td>
        </tr>
        {% if data.threat_score %}
            <tr>
                <td style="padding: 12px; font-weight: bold; border-bottom: 1px solid #E5E7EB;">Score de Menace</td>
                <td style="padding: 12px; border-bottom: 1px solid #E5E7EB;">
                    <strong style="color: {{ data.threat_score >= 70 ? '#DC2626' : '#F97316' }}; font-size: 18px;">
                        {{ data.threat_score }}/100
                    </strong>
                </td>
            </tr>
        {% endif %}
        <tr style="background: #F9FAFB;">
            <td style="padding: 12px; font-weight: bold; border-bottom: 1px solid #E5E7EB;">Raison</td>
            <td style="padding: 12px; border-bottom: 1px solid #E5E7EB;">{{ data.reason }}</td>
        </tr>
        <tr>
            <td style="padding: 12px; font-weight: bold; border-bottom: 1px solid #E5E7EB;">Date de détection</td>
            <td style="padding: 12px; border-bottom: 1px solid #E5E7EB;">{{ data.timestamp }}</td>
        </tr>
        {% if data.geo_data %}
            <tr style="background: #F9FAFB;">
                <td style="padding: 12px; font-weight: bold; border-bottom: 1px solid #E5E7EB;">Localisation</td>
                <td style="padding: 12px; border-bottom: 1px solid #E5E7EB;">
                    {{ data.geo_data.city|default('Inconnu') }}, {{ data.geo_data.country|default('Inconnu') }}
                    {% if data.geo_data.is_proxy or data.geo_data.is_vpn or data.geo_data.is_tor %}
                        <br><span style="color: #DC2626; font-weight: bold;">
                            <i class="fa fa-exclamation-triangle"></i>
                            {% if data.geo_data.is_tor %}TOR{% elseif data.geo_data.is_vpn %}VPN{% else %}Proxy{% endif %}
                        </span>
                    {% endif %}
                </td>
            </tr>
        {% endif %}
    </table>

    {% if data.additional_data %}
        <h3 style="color: #374151; margin: 30px 0 15px 0;">Détails Additionnels</h3>
        <div style="background: #F9FAFB; padding: 15px; border-radius: 4px;">
            <pre style="margin: 0; white-space: pre-wrap; word-wrap: break-word; font-size: 12px;">{{ data.additional_data|json_encode(constant('JSON_PRETTY_PRINT')) }}</pre>
        </div>
    {% endif %}

    <div style="background: #FFFBEB; border: 1px solid #FCD34D; padding: 15px; margin: 30px 0; border-radius: 4px;">
        <p style="margin: 0 0 10px 0; color: #78350F; font-weight: bold;">
            <i class="fa fa-lightbulb"></i> Actions Recommandées:
        </p>
        <ul style="margin: 0; padding-left: 20px; color: #92400E;">
            <li>Analyser les logs détaillés de cette IP</li>
            <li>Vérifier si d'autres utilisateurs sont affectés</li>
            <li>Considérer un blocage temporaire si le score dépasse {{ 70 }}</li>
            <li>Surveiller l'activité future de cette IP</li>
        </ul>
    </div>
{% endblock %}