{% extends "base.html" %}
{% block content %}
<div class="card">
  <h2>Initialize Vault</h2>
  <p class="muted" style="margin-top:-6px">
    No vault exists yet at this location. Create one by choosing a security tier
    and a passphrase. The passphrase is used to derive the encryption key and is
    <strong>never stored</strong> — if you lose it, the data is unrecoverable.
  </p>
  <form method="post" action="{{ url_for('setup') }}">
    <div class="row">
      <label for="tier">Security tier</label>
      <select id="tier" name="tier">
        {% for t in tiers %}
          <option value="{{ t.id }}">{{ t.name }} — {{ t.summary }}</option>
        {% endfor %}
      </select>
      <div class="hint">Higher tiers use stronger key-derivation parameters and more controls.</div>
    </div>
    <div class="row">
      <label for="passphrase">Passphrase</label>
      <input type="password" id="passphrase" name="passphrase" autocomplete="new-password" autofocus>
    </div>
    <div class="row">
      <label for="passphrase2">Confirm passphrase</label>
      <input type="password" id="passphrase2" name="passphrase2" autocomplete="new-password">
    </div>
    <button class="btn" type="submit">Create Vault</button>
  </form>
</div>
{% endblock %}