ruby_cms 0.2.1.0 → 1.0.0

data/lib/generators/ruby_cms/templates/views/admin/redirects/_admin_table_content.html.erb

@@ -0,0 +1,77 @@
+<%
+  filters = [
+    { id: "all",      label: "Alle",   count: @counts[:all] },
+    { id: "active",   label: "Actief", count: @counts[:active] },
+    { id: "disabled", label: "Uit",    count: @counts[:disabled] },
+    { id: "external", label: "Extern", count: @counts[:external] }
+  ]
+  pill_path = ->(filter_id) {
+    admin_redirects_path(filter: filter_id, search: params[:search], sort: params[:sort], dir: params[:dir])
+  }
+%>
+
+<div class="flex flex-col gap-3">
+  <div class="flex flex-wrap items-center gap-2">
+    <% filters.each do |f| %>
+      <% active = (@active_filter == f[:id]) %>
+      <%= link_to pill_path.call(f[:id]),
+                  data: { turbo_frame: "admin_table_content" },
+                  class: "inline-flex items-center gap-2 px-3 py-1.5 rounded-full text-xs font-medium transition-colors border " +
+                         (active ? "bg-primary text-primary-foreground border-primary" :
+                                   "bg-background text-muted-foreground border-border hover:bg-muted hover:text-foreground") do %>
+        <%= f[:label] %>
+        <span class="<%= active ? "bg-primary-foreground/20 text-primary-foreground" : "bg-muted text-muted-foreground" %> rounded-full px-1.5 py-0.5 text-[10px] font-semibold">
+          <%= f[:count] %>
+        </span>
+      <% end %>
+    <% end %>
+
+    <%= form_with url: admin_redirects_path,
+                  method: :get,
+                  local: true,
+                  data: { turbo_frame: "admin_table_content" },
+                  class: "ml-auto flex items-center gap-2" do |f| %>
+      <%= hidden_field_tag :filter, @active_filter %>
+      <%= f.search_field :search,
+                         value: params[:search],
+                         placeholder: "Zoek op pad of doel…",
+                         class: "w-64 rounded-lg border border-border bg-background px-3 py-1.5 text-sm placeholder:text-muted-foreground focus:outline-none focus:ring-2 focus:ring-primary/30" %>
+    <% end %>
+  </div>
+
+  <% if @redirects.any? %>
+    <%= BulkActionTable(
+      turbo_frame: "admin_table_content",
+      pagination: @pagination,
+      pagination_path: ->(page) {
+        admin_redirects_path(page: page, filter: @active_filter, search: params[:search], sort: params[:sort], dir: params[:dir])
+      },
+      active_color: "blue",
+      bulk_actions_url: bulk_delete_admin_redirects_path,
+      bulk_actions_buttons: [
+        { label: "Inschakelen",  name: "enable",  url: bulk_enable_admin_redirects_path },
+        { label: "Uitschakelen", name: "disable", url: bulk_disable_admin_redirects_path }
+      ],
+      item_name: "redirect"
+    ) do %>
+      <%= BulkActionTableHeader(headers: [ "Bron pad", "Doel", "Code", "Hits", "Laatst", "Status", "" ]) %>
+      <%= BulkActionTableBody do %>
+        <% @redirects.each do |redirect| %>
+          <%= render "row", redirect: redirect %>
+        <% end %>
+      <% end %>
+    <% end %>
+  <% else %>
+    <%= turbo_frame_tag "admin_table_content", class: "flex-1 flex flex-col min-h-0", data: { turbo_action: "advance" } do %>
+      <%= EmptyState(
+        title: "Geen redirects gevonden",
+        description: (params[:search].present? || @active_filter != "all") ?
+                       "Probeer je filters aan te passen of voeg een nieuwe regel toe." :
+                       "Voeg je eerste 301/302/410 regel toe om bezoekers door te sturen.",
+        primary_label: "Nieuwe redirect",
+        primary_href: new_admin_redirect_path,
+        icon: "folder"
+      ) %>
+    <% end %>
+  <% end %>
+</div>

data/lib/generators/ruby_cms/templates/views/admin/redirects/_form.html.erb

@@ -0,0 +1,97 @@
+<%= form_with model: [ :admin, redirect ], local: true do |form| %>
+    <div class="<%= RubyUI::AdminResourceCard::GRID_CLASS %>">
+      <div class="<%= RubyUI::AdminResourceCard::MAIN_CLASS %>">
+        <% if redirect.errors.any? %>
+          <div class="rounded-lg border border-destructive/30 bg-destructive/5 p-4">
+            <p class="text-sm font-medium text-destructive">Corrigeer de volgende fouten:</p>
+            <ul class="mt-1.5 text-sm text-destructive/80 list-disc list-inside">
+              <% redirect.errors.full_messages.each do |message| %>
+                <li><%= message %></li>
+              <% end %>
+            </ul>
+          </div>
+        <% end %>
+
+        <div>
+          <%= form.label :source_path, "Van", class: RubyUI::AdminResourceCard::LABEL_CLASS %>
+          <%= form.text_field :source_path,
+              class: "#{RubyUI::AdminResourceCard::INPUT_CLASS} font-mono",
+              placeholder: "/oude-pad",
+              autocomplete: "off" %>
+          <p class="<%= RubyUI::AdminResourceCard::HINT_CLASS %>">
+            Begin met <code class="font-mono">/</code>. Eindigen op <code class="font-mono">*</code> matcht alles eronder.
+          </p>
+        </div>
+
+        <div>
+          <%= form.label :target_path, "Naar", class: RubyUI::AdminResourceCard::LABEL_CLASS %>
+          <%= form.text_field :target_path,
+              class: "#{RubyUI::AdminResourceCard::INPUT_CLASS} font-mono",
+              placeholder: "/nieuwe-pad of https://…",
+              autocomplete: "off" %>
+          <p class="<%= RubyUI::AdminResourceCard::HINT_CLASS %>">
+            Niet vereist voor <strong>410 Gone</strong>.
+          </p>
+        </div>
+
+        <div>
+          <%= form.label :note, "Notitie (optioneel)", class: RubyUI::AdminResourceCard::LABEL_CLASS %>
+          <%= form.text_field :note,
+              class: RubyUI::AdminResourceCard::INPUT_CLASS,
+              placeholder: "Waarom bestaat deze regel?" %>
+        </div>
+      </div>
+
+      <div class="<%= RubyUI::AdminResourceCard::SIDEBAR_CLASS %>">
+        <div class="<%= RubyUI::AdminResourceCard::SECTION_CLASS %>">
+          <h3 class="<%= RubyUI::AdminResourceCard::SECTION_TITLE_CLASS %>">Type</h3>
+          <%= form.label :status_code, "HTTP-code", class: RubyUI::AdminResourceCard::LABEL_CLASS %>
+          <%= form.select :status_code,
+              [
+                [ "301 · Permanent", 301 ],
+                [ "302 · Tijdelijk", 302 ],
+                [ "410 · Gone",      410 ]
+              ],
+              {},
+              class: RubyUI::AdminResourceCard::INPUT_CLASS %>
+        </div>
+
+        <div class="<%= RubyUI::AdminResourceCard::SECTION_CLASS %>">
+          <h3 class="<%= RubyUI::AdminResourceCard::SECTION_TITLE_CLASS %>">Status</h3>
+          <%= form.label :enabled, class: "flex items-center gap-2 cursor-pointer" do %>
+            <%= form.check_box :enabled, class: "size-4 rounded border-[#e9e4d4] text-blue-600 focus:ring-blue-500/30" %>
+            <span class="text-[13px] font-medium text-[#1c1917]">Actief</span>
+          <% end %>
+        </div>
+
+        <% if redirect.persisted? %>
+          <div class="<%= RubyUI::AdminResourceCard::SECTION_CLASS %>">
+            <h3 class="<%= RubyUI::AdminResourceCard::SECTION_TITLE_CLASS %>">Statistieken</h3>
+            <dl class="space-y-3">
+              <div>
+                <dt class="<%= RubyUI::AdminResourceCard::DETAIL_LABEL_CLASS %>">Hits</dt>
+                <dd class="<%= RubyUI::AdminResourceCard::DETAIL_VALUE_CLASS %> font-mono tabular-nums">
+                  <%= number_with_delimiter(redirect.hits) %>
+                </dd>
+              </div>
+              <div>
+                <dt class="<%= RubyUI::AdminResourceCard::DETAIL_LABEL_CLASS %>">Laatste hit</dt>
+                <dd class="<%= RubyUI::AdminResourceCard::DETAIL_VALUE_CLASS %>">
+                  <%= redirect.last_hit_at ? l(redirect.last_hit_at, format: :long) : "nooit" %>
+                </dd>
+              </div>
+              <div>
+                <dt class="<%= RubyUI::AdminResourceCard::DETAIL_LABEL_CLASS %>">Aangemaakt</dt>
+                <dd class="<%= RubyUI::AdminResourceCard::DETAIL_VALUE_CLASS %>"><%= l(redirect.created_at, format: :long) %></dd>
+              </div>
+            </dl>
+          </div>
+        <% end %>
+      </div>
+    </div>
+
+    <div class="<%= RubyUI::AdminResourceCard::ACTIONS_CLASS %>">
+      <%= link_to "Annuleren", admin_redirects_path, class: RubyUI::AdminResourceCard::CANCEL_CLASS %>
+      <%= form.submit "Opslaan", class: RubyUI::AdminResourceCard::SUBMIT_CLASS %>
+    </div>
+<% end %>

data/lib/generators/ruby_cms/templates/views/admin/redirects/_row.html.erb

@@ -0,0 +1,82 @@
+<%
+  code      = redirect.status_code.to_i
+  is_ext    = redirect.target_path.to_s.start_with?("http")
+  code_text = { 301 => "301 · Permanent", 302 => "302 · Tijdelijk", 410 => "410 · Gone" }[code] || code.to_s
+  code_class = case code
+  when 301 then "bg-blue-50 text-blue-700 border-blue-100"
+  when 302 then "bg-amber-50 text-amber-700 border-amber-100"
+  when 410 then "bg-red-50 text-red-700 border-red-100"
+  else          "bg-gray-50 text-gray-700 border-gray-200"
+  end
+  toggle_label = redirect.enabled? ? "Uitschakelen" : "Inschakelen"
+  toggle_url   = redirect.enabled? ? bulk_disable_admin_redirects_path : bulk_enable_admin_redirects_path
+%>
+
+<%= BulkActionTableRow(
+  click_url: edit_admin_redirect_path(redirect),
+  data: { item_id: redirect.id }
+) do %>
+  <%= TableCell do %>
+    <span class="font-mono text-xs text-foreground"><%= redirect.source_path %></span>
+    <% if redirect.note.present? %>
+      <div class="text-xs text-muted-foreground truncate mt-0.5" title="<%= redirect.note %>"><%= redirect.note %></div>
+    <% end %>
+  <% end %>
+
+  <%= TableCell do %>
+    <div class="flex items-center gap-2 min-w-0">
+      <% if is_ext %>
+        <svg class="size-3 text-muted-foreground shrink-0" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+          <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2"
+                d="M14 5l7 7m0 0l-7 7m7-7H3"></path>
+        </svg>
+      <% end %>
+      <span class="font-mono text-xs text-muted-foreground truncate"><%= redirect.target_path.presence || "—" %></span>
+    </div>
+  <% end %>
+
+  <%= TableCell do %>
+    <span class="inline-flex items-center px-2 py-0.5 rounded-md text-xs font-medium border <%= code_class %>">
+      <%= code_text %>
+    </span>
+  <% end %>
+
+  <%= TableCell do %>
+    <span class="font-mono tabular-nums text-xs <%= redirect.hits > 0 ? "font-semibold text-foreground" : "text-muted-foreground" %>">
+      <%= number_with_delimiter(redirect.hits) %>
+    </span>
+  <% end %>
+
+  <%= TableCell do %>
+    <% if redirect.last_hit_at %>
+      <span class="text-xs text-muted-foreground" title="<%= l(redirect.last_hit_at, format: :long) %>">
+        <%= time_ago_in_words(redirect.last_hit_at) %> geleden
+      </span>
+    <% else %>
+      <span class="text-xs text-muted-foreground/60">nooit</span>
+    <% end %>
+  <% end %>
+
+  <%= TableCell do %>
+    <% if redirect.enabled? %>
+      <span class="inline-flex items-center gap-1.5 px-2 py-0.5 rounded-md text-xs font-medium border bg-green-50 text-green-700 border-green-100">
+        <span class="size-1.5 rounded-full bg-green-500"></span>
+        Actief
+      </span>
+    <% else %>
+      <span class="inline-flex items-center gap-1.5 px-2 py-0.5 rounded-md text-xs font-medium border bg-gray-50 text-gray-600 border-gray-200">
+        <span class="size-1.5 rounded-full bg-gray-400"></span>
+        Uit
+      </span>
+    <% end %>
+  <% end %>
+
+  <%= TableCell(class: "text-right") do %>
+    <%= BulkActionTableActions(
+      edit_path: edit_admin_redirect_path(redirect),
+      delete_path: admin_redirect_path(redirect),
+      delete_confirm: "Delete redirect #{redirect.source_path}?",
+      turbo_frame: "_top"
+    ) %>
+  <% end %>
+<% end %>

data/lib/generators/ruby_cms/templates/views/admin/redirects/edit.html.erb

@@ -0,0 +1,21 @@
+<%= AdminPage do %>
+  <%= AdminPageHeader(
+    title: @redirect.source_path,
+    breadcrumbs: [
+      { label: "Admin", url: admin_root_path },
+      { label: "Redirects", url: admin_redirects_path },
+      { label: truncate(@redirect.source_path, length: 40) }
+    ]
+  ) do %>
+    <%= link_to admin_redirect_path(@redirect),
+        data: { turbo_method: :delete, turbo_confirm: "Weet je zeker dat je deze redirect wilt verwijderen?" },
+        class: "inline-flex items-center justify-center w-8 h-8 rounded-md text-[#78716c] hover:text-red-600 hover:bg-red-50 transition-colors no-underline" do %>
+      <svg class="w-4 h-4" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+        <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2"
+              d="M19 7l-.867 12.142A2 2 0 0116.138 21H7.862a2 2 0 01-1.995-1.858L5 7m5 4v6m4-6v6m1-10V4a1 1 0 00-1-1h-4a1 1 0 00-1 1v3M4 7h16"></path>
+      </svg>
+    <% end %>
+  <% end %>
+
+  <%= render "form", redirect: @redirect %>
+<% end %>

data/lib/generators/ruby_cms/templates/views/admin/redirects/index.html.erb

@@ -0,0 +1,40 @@
+<%= AdminPage do %>
+  <%= AdminPageHeader(
+    title: "Redirects",
+    subtitle: "#{@counts[:active]} actieve regels · #{number_with_delimiter(@total_hits || 0)} hits totaal",
+    breadcrumbs: [
+      { label: "Admin", url: admin_root_path },
+      { label: "Redirects" }
+    ]
+  ) do %>
+    <%= form_with url: import_csv_admin_redirects_path,
+                  method: :post,
+                  multipart: true,
+                  local: true,
+                  class: "inline-flex" do |f| %>
+      <%= f.file_field :file,
+                       accept: ".csv,text/csv",
+                       id: "redirects-import-csv",
+                       class: "hidden",
+                       onchange: "this.form.requestSubmit()" %>
+      <label for="redirects-import-csv"
+             class="inline-flex items-center gap-1.5 h-8 px-3 rounded-md border border-[#e9e4d4] bg-white text-[#1c1917] text-[12.5px] font-medium hover:bg-[#faf8f3] transition-colors cursor-pointer">
+        <svg class="w-3.5 h-3.5" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+          <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2"
+                d="M4 16v1a3 3 0 003 3h10a3 3 0 003-3v-1m-4-8l-4-4m0 0L8 8m4-4v12"></path>
+        </svg>
+        Importeer CSV
+      </label>
+    <% end %>
+
+    <%= link_to new_admin_redirect_path,
+                class: "inline-flex items-center gap-1.5 h-8 px-3 rounded-md bg-blue-600 text-white text-[12.5px] font-medium hover:bg-blue-700 transition-colors no-underline" do %>
+      <svg class="w-3.5 h-3.5" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+        <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M12 6v6m0 0v6m0-6h6m-6 0H6"></path>
+      </svg>
+      Nieuwe redirect
+    <% end %>
+  <% end %>
+
+  <%= render "admin_table_content" %>
+<% end %>

data/lib/generators/ruby_cms/templates/views/admin/redirects/new.html.erb

@@ -0,0 +1,12 @@
+<%= AdminPage do %>
+  <%= AdminPageHeader(
+    title: "Nieuwe redirect",
+    breadcrumbs: [
+      { label: "Admin", url: admin_root_path },
+      { label: "Redirects", url: admin_redirects_path },
+      { label: "Nieuw" }
+    ]
+  ) %>
+
+  <%= render "form", redirect: @redirect %>
+<% end %>

data/lib/generators/ruby_cms/templates/views/admin/security/index.html.erb

@@ -0,0 +1,88 @@
+<%
+  events       = @security_events || []
+  total_events = events.size
+  high_risk    = events.count { |e| SecurityTracker.risk_color(e.name) == "red" }
+  by_type      = events.group_by(&:name).transform_values(&:size).sort_by { |_, c| -c }
+  threat_ips   = events.reject { |e| e.ip_address.blank? }.group_by(&:ip_address)
+                       .transform_values(&:size).sort_by { |_, c| -c }
+  blocked_count = @pagination ? @pagination[:total_count].to_i : (@blocked_ips.respond_to?(:size) ? @blocked_ips.size : 0)
+
+  stats = [
+    { label: t("admin.pages.security.recent_events", default: "Events"), value: total_events, accent: "#1c1917" },
+    { label: t("admin.pages.security.high_risk", default: "Hoog risico"), value: high_risk, accent: "#dc2626" },
+    { label: t("admin.pages.security.blocked_ips", default: "Geblokkeerde IPs"), value: blocked_count, accent: "#1c1917" },
+    { label: t("admin.pages.security.threat_ips", default: "Unieke IPs"), value: threat_ips.size, accent: "#b45309" }
+  ]
+%>
+<%= AdminPage do %>
+  <%= AdminPageHeader(
+    title: t("admin.pages.security.title"),
+    breadcrumbs: [
+      { label: t("admin.pages.common.admin"), url: admin_root_path },
+      { label: t("admin.navigation.security_monitor") }
+    ]
+  ) do %>
+    <div class="flex items-center gap-2 flex-wrap justify-end">
+      <%# Period segmented toggle %>
+      <div class="inline-flex h-8 items-center rounded-md border border-[#e9e4d4] bg-[#faf8f3] p-0.5">
+        <% [[t("admin.pages.security.today", default: "Vandaag"), "today"], [t("admin.pages.security.this_week", default: "Week"), "week"], [t("admin.pages.security.this_month", default: "Maand"), "month"]].each do |label, value| %>
+          <% is_active = params[:time_period] == value || (params[:time_period].blank? && value == "week") %>
+          <%= link_to label, main_app.admin_security_index_path({ time_period: value, event_type: params[:event_type] }.compact),
+              class: "inline-flex h-7 items-center justify-center rounded px-2.5 text-[12px] font-medium transition-colors no-underline #{is_active ? 'bg-white text-[#1c1917] shadow-sm' : 'text-[#78716c] hover:text-[#1c1917]'}" %>
+        <% end %>
+      </div>
+
+      <%= form_with url: main_app.admin_security_index_path, method: :get, local: true, class: "flex items-center gap-2" do |form| %>
+        <%= form.hidden_field :time_period, value: params[:time_period] %>
+        <div class="relative">
+          <%= form.select :event_type, options_for_select([
+            [t("admin.pages.security.all_events", default: "Alle events"), ""],
+            [t("admin.pages.security.failed_logins", default: "Mislukte logins"), "failed_login"],
+            [t("admin.pages.security.successful_logins", default: "Geslaagde logins"), "successful_login"],
+            [t("admin.pages.security.logouts", default: "Logouts"), "logout"],
+            [t("admin.pages.security.admin_access_denied", default: "Admin toegang geweigerd"), "admin_access_denied"],
+            [t("admin.pages.security.suspicious_user_agents", default: "Verdachte user agents"), "suspicious_user_agent"],
+            [t("admin.pages.security.unusual_request_patterns", default: "Ongebruikelijke requests"), "unusual_request_pattern"],
+            [t("admin.pages.security.session_hijack_attempts", default: "Session hijack"), "session_hijack_attempt"],
+            [t("admin.pages.security.rate_limit_exceeded", default: "Rate limit"), "rate_limit_exceeded"],
+            [t("admin.pages.security.csrf_token_mismatches", default: "CSRF mismatch"), "csrf_token_mismatch"],
+            [t("admin.pages.security.unauthorized_admin_attempts", default: "Ongeautoriseerde admin"), "unauthorized_admin_attempt"],
+            [t("admin.pages.security.contact_honeypot_triggers", default: "Honeypot"), "contact_honeypot_triggered"],
+            [t("admin.pages.security.blocked_contact_emails", default: "Geblokkeerde e-mails"), "contact_blocked_email_attempt"]
+          ], params[:event_type]), {}, { class: "h-8 appearance-none rounded-md border border-[#e9e4d4] bg-white pl-2.5 pr-8 text-[12.5px] text-[#1c1917] shadow-sm focus:outline-none focus:border-blue-500 focus:ring-1 focus:ring-blue-500 cursor-pointer" } %>
+          <svg class="pointer-events-none absolute right-2 top-1/2 -translate-y-1/2 h-3 w-3 text-[#a8a29e]" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2.5" d="M19 9l-7 7-7-7" /></svg>
+        </div>
+        <%= form.submit t("admin.pages.common.apply", default: "Toepassen"), class: "h-8 inline-flex items-center justify-center rounded-md bg-blue-600 px-3 text-[12.5px] font-medium text-white shadow-sm hover:bg-blue-700 transition-colors cursor-pointer" %>
+      <% end %>
+    </div>
+  <% end %>
+
+  <div class="p-4 sm:p-5 space-y-5">
+    <%# Stat tiles %>
+    <div class="grid grid-cols-2 lg:grid-cols-4 gap-3">
+      <% stats.each do |s| %>
+        <div class="rounded-xl border border-[#e9e4d4] bg-white px-4 py-3.5">
+          <div class="text-[11px] font-semibold uppercase tracking-wider text-[#a8a29e]"><%= s[:label] %></div>
+          <div class="mt-1 text-[24px] font-semibold tracking-tight" style="color: <%= s[:accent] %>"><%= number_with_delimiter(s[:value]) %></div>
+        </div>
+      <% end %>
+    </div>
+
+    <div class="grid grid-cols-1 lg:grid-cols-5 gap-5">
+      <div class="lg:col-span-2 space-y-5">
+        <%= render "admin/security/partials/events_by_type", rows: by_type %>
+        <%= render "admin/security/partials/top_threat_ips", rows: threat_ips %>
+      </div>
+      <div class="lg:col-span-3">
+        <%= render "admin/security/partials/ip_blocklist",
+            ip_blocklist_entry: @ip_blocklist_entry,
+            blocked_ips: @blocked_ips %>
+      </div>
+    </div>
+
+    <div>
+      <h2 class="text-[11px] font-semibold uppercase tracking-wider text-[#a8a29e] mb-2.5"><%= t("admin.pages.security.recent_events", default: "Recente events") %></h2>
+      <%= render "admin/security/partials/recent_events" %>
+    </div>
+  </div>
+<% end %>

data/lib/generators/ruby_cms/templates/views/admin/security/ip_blocklist_content.html.erb

@@ -0,0 +1,3 @@
+<%= turbo_frame_tag "ip_blocklist_content" do %>
+  <%= render "admin/security/partials/ip_blocklist_content", blocked_ips: @blocked_ips %>
+<% end %>

data/lib/generators/ruby_cms/templates/views/admin/security/partials/_events_by_type.html.erb

@@ -0,0 +1,24 @@
+<%
+  rows ||= []
+  dot = { "red" => "bg-red-500", "yellow" => "bg-amber-500", "green" => "bg-emerald-500", "blue" => "bg-blue-500" }
+%>
+<div class="rounded-xl border border-[#e9e4d4] bg-white overflow-hidden">
+  <div class="px-4 py-3 border-b border-[#f0ebe0]">
+    <h2 class="text-[11px] font-semibold uppercase tracking-wider text-[#a8a29e]">Events per type</h2>
+  </div>
+  <% if rows.any? %>
+    <div class="divide-y divide-[#f0ebe0]">
+      <% rows.first(6).each do |event_type, count| %>
+        <div class="flex items-center justify-between px-4 py-2.5">
+          <div class="flex items-center gap-2.5 min-w-0">
+            <span class="w-1.5 h-1.5 rounded-full flex-shrink-0 <%= dot[SecurityTracker.risk_color(event_type)] || 'bg-[#cdc4b0]' %>"></span>
+            <span class="text-[13px] text-[#57534e] truncate"><%= event_type.humanize %></span>
+          </div>
+          <span class="ml-3 flex-shrink-0 text-[13px] font-semibold text-[#1c1917] tabular-nums"><%= number_with_delimiter(count) %></span>
+        </div>
+      <% end %>
+    </div>
+  <% else %>
+    <p class="text-[13px] text-[#a8a29e] text-center py-8">Geen events</p>
+  <% end %>
+</div>

data/lib/generators/ruby_cms/templates/views/admin/security/partials/_ip_blocklist.html.erb

@@ -0,0 +1,37 @@
+<div id="ip-blocklist" class="rounded-xl border border-[#e9e4d4] bg-white overflow-hidden">
+  <div class="px-4 py-3 border-b border-[#f0ebe0]">
+    <h2 class="text-[11px] font-semibold uppercase tracking-wider text-[#a8a29e]">IP Blocklist</h2>
+  </div>
+
+  <div class="p-4">
+    <%= form_with model: ip_blocklist_entry,
+                  url: main_app.ip_blocklist_admin_security_index_path,
+                  method: :post,
+                  local: true,
+                  data: { turbo_frame: "ip_blocklist_content" },
+                  class: "mb-4" do |form| %>
+      <div class="grid grid-cols-1 md:grid-cols-3 gap-3">
+        <div class="md:col-span-2">
+          <%= form.label :ip_address, "IP-adres", class: "block text-[12px] font-medium text-[#57534e] mb-1" %>
+          <%= form.text_field :ip_address,
+              placeholder: "192.168.1.1",
+              class: "block w-full rounded-md border border-[#e9e4d4] bg-white px-3 py-2 text-[13px] text-[#1c1917] focus:outline-none focus:border-blue-500 focus:ring-1 focus:ring-blue-500" %>
+        </div>
+        <div>
+          <%= form.label :note, "Notitie", class: "block text-[12px] font-medium text-[#57534e] mb-1" %>
+          <%= form.text_field :note,
+              placeholder: "bv. 'Spam bot'",
+              class: "block w-full rounded-md border border-[#e9e4d4] bg-white px-3 py-2 text-[13px] text-[#1c1917] focus:outline-none focus:border-blue-500 focus:ring-1 focus:ring-blue-500" %>
+        </div>
+      </div>
+      <div class="mt-3">
+        <%= form.submit "Blokkeer IP",
+            class: "inline-flex items-center h-8 px-3 rounded-md bg-red-600 text-white text-[12.5px] font-medium hover:bg-red-700 transition-colors cursor-pointer" %>
+      </div>
+    <% end %>
+
+    <%= turbo_frame_tag "ip_blocklist_content" do %>
+      <%= render "admin/security/partials/ip_blocklist_content", blocked_ips: blocked_ips %>
+    <% end %>
+  </div>
+</div>

data/lib/generators/ruby_cms/templates/views/admin/security/partials/_ip_blocklist_content.html.erb

@@ -0,0 +1,41 @@
+<div>
+  <% if blocked_ips.any? %>
+    <% if @pagination %>
+      <div class="mb-3 text-[12px] text-[#78716c]">
+        Toon <%= @pagination[:start_item] %>–<%= @pagination[:end_item] %> van <%= pluralize(@pagination[:total_count], "IP-adres") %>
+        <% if @pagination[:total_pages] > 1 %>
+          · pagina <%= @pagination[:current_page] %>/<%= @pagination[:total_pages] %>
+        <% end %>
+      </div>
+    <% end %>
+
+    <ul role="list" class="divide-y divide-[#f0ebe0] rounded-lg border border-[#e9e4d4] max-h-[560px] overflow-y-auto">
+      <% blocked_ips.each do |entry| %>
+        <li class="flex items-center justify-between gap-3 px-3 py-2.5">
+          <div class="min-w-0 flex-1">
+            <p class="font-mono text-[12.5px] font-semibold text-[#1c1917] truncate"><%= entry.ip_address %></p>
+            <div class="flex items-center gap-2 mt-0.5 text-[11.5px] text-[#a8a29e]">
+              <% if entry.note.present? %><span class="text-[#78716c] truncate"><%= entry.note %></span><span>·</span><% end %>
+              <span class="whitespace-nowrap">Toegevoegd <%= time_ago_in_words(entry.created_at) %> geleden</span>
+            </div>
+          </div>
+          <%= button_to "Verwijderen",
+              main_app.ip_blocklist_entry_admin_security_index_path(entry),
+              method: :delete,
+              data: { turbo_frame: "ip_blocklist_content", confirm: "Verwijder dit IP-adres van de blocklist?" },
+              class: "flex-shrink-0 inline-flex items-center h-7 px-2 rounded-md border border-red-100 text-red-600 text-[12px] font-medium hover:bg-red-50 transition-colors cursor-pointer" %>
+        </li>
+      <% end %>
+    </ul>
+
+    <%= render "admin/shared/turbo_pagination",
+         pagination: @pagination,
+         path_helper: ->(page) { main_app.admin_security_index_path(page: page) },
+         turbo_frame: "ip_blocklist_content",
+         active_color: "blue" %>
+  <% else %>
+    <div class="rounded-lg border border-dashed border-[#e9e4d4] p-4 text-[13px] text-[#a8a29e] text-center">
+      Nog geen IP-adressen geblokkeerd.
+    </div>
+  <% end %>
+</div>

data/lib/generators/ruby_cms/templates/views/admin/security/partials/_ip_management.html.erb

@@ -0,0 +1,11 @@
+<div class="grid grid-cols-1 lg:grid-cols-2 gap-6">
+  <div>
+    <%= render "admin/security/partials/top_threat_ips" %>
+  </div>
+
+  <div>
+    <%= render "admin/security/partials/ip_blocklist",
+        ip_blocklist_entry: ip_blocklist_entry,
+        blocked_ips: blocked_ips %>
+  </div>
+</div>

data/lib/generators/ruby_cms/templates/views/admin/security/partials/_recent_events.html.erb

@@ -0,0 +1,59 @@
+<%
+  risk_badge = {
+    "red"    => "bg-red-50 text-red-700 border-red-100",
+    "yellow" => "bg-amber-50 text-amber-700 border-amber-100",
+    "green"  => "bg-emerald-50 text-emerald-700 border-emerald-100",
+    "blue"   => "bg-blue-50 text-blue-700 border-blue-100"
+  }
+%>
+<% if @security_events.any? %>
+  <div class="rounded-xl border border-[#e9e4d4] bg-white overflow-hidden">
+    <table class="min-w-full">
+      <thead class="bg-[#faf8f3] border-b border-[#e9e4d4]">
+        <tr>
+          <th class="px-4 py-2.5 text-left text-[11px] font-semibold uppercase tracking-wider text-[#a8a29e]">Event</th>
+          <th class="px-4 py-2.5 text-left text-[11px] font-semibold uppercase tracking-wider text-[#a8a29e] w-24">Risico</th>
+          <th class="px-4 py-2.5 text-left text-[11px] font-semibold uppercase tracking-wider text-[#a8a29e] w-44">IP / Gebruiker</th>
+          <th class="px-4 py-2.5 text-left text-[11px] font-semibold uppercase tracking-wider text-[#a8a29e] w-32">Tijd</th>
+        </tr>
+      </thead>
+      <tbody class="divide-y divide-[#f0ebe0]">
+        <% @security_events.first(30).each do |event| %>
+          <% color = SecurityTracker.risk_color(event.name) %>
+          <tr class="hover:bg-[#faf8f3] transition-colors">
+            <td class="px-4 py-2.5">
+              <p class="text-[13px] text-[#1c1917]"><%= SecurityTracker.formatted_description(event) %></p>
+              <% if event.request_path.present? %>
+                <p class="text-[11.5px] text-[#a8a29e] font-mono truncate max-w-sm"><%= event.request_path %></p>
+              <% end %>
+            </td>
+            <td class="px-4 py-2.5 whitespace-nowrap">
+              <span class="inline-flex px-2 py-0.5 text-[11px] font-medium rounded-full border <%= risk_badge[color] || 'bg-[#faf8f3] text-[#78716c] border-[#e9e4d4]' %>">
+                <%= SecurityTracker.risk_level(event.name).upcase %>
+              </span>
+            </td>
+            <td class="px-4 py-2.5 whitespace-nowrap">
+              <span class="font-mono text-[12px] text-[#57534e]"><%= event.ip_address %></span>
+              <% if event.user %>
+                <p class="text-[11.5px] text-[#a8a29e] truncate max-w-[160px]"><%= event.user.email_address %></p>
+              <% end %>
+            </td>
+            <td class="px-4 py-2.5 whitespace-nowrap text-[12px] text-[#78716c]">
+              <%= event.time.strftime("%-d %b %H:%M") %>
+            </td>
+          </tr>
+        <% end %>
+      </tbody>
+    </table>
+  </div>
+<% else %>
+  <div class="rounded-xl border border-[#e9e4d4] bg-white py-12 text-center">
+    <div class="w-11 h-11 bg-emerald-50 rounded-full flex items-center justify-center mx-auto mb-3">
+      <svg class="w-5 h-5 text-emerald-600" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+        <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9 12l2 2 4-4m6 2a9 9 0 11-18 0 9 9 0 0118 0z"></path>
+      </svg>
+    </div>
+    <p class="text-[13px] font-medium text-[#1c1917]">Geen security events</p>
+    <p class="text-[12px] text-[#a8a29e] mt-0.5">Systeem is schoon.</p>
+  </div>
+<% end %>

data/lib/generators/ruby_cms/templates/views/admin/security/partials/_top_threat_ips.html.erb

@@ -0,0 +1,21 @@
+<% rows ||= [] %>
+<div class="rounded-xl border border-[#e9e4d4] bg-white overflow-hidden">
+  <div class="px-4 py-3 border-b border-[#f0ebe0]">
+    <h2 class="text-[11px] font-semibold uppercase tracking-wider text-[#a8a29e]">Top dreigende IPs</h2>
+  </div>
+  <% if rows.any? %>
+    <div class="divide-y divide-[#f0ebe0]">
+      <% rows.first(6).each_with_index do |(ip, count), index| %>
+        <div class="flex items-center justify-between px-4 py-2.5">
+          <div class="flex items-center gap-2.5 min-w-0">
+            <span class="w-5 h-5 rounded-md bg-red-50 text-red-600 border border-red-100 grid place-items-center font-semibold text-[11px] flex-shrink-0"><%= index + 1 %></span>
+            <span class="font-mono text-[12.5px] text-[#57534e] truncate"><%= ip %></span>
+          </div>
+          <span class="ml-3 flex-shrink-0 text-[13px] font-semibold text-[#1c1917] tabular-nums"><%= number_with_delimiter(count) %></span>
+        </div>
+      <% end %>
+    </div>
+  <% else %>
+    <p class="text-[13px] text-[#a8a29e] text-center py-8">Geen dreigende IPs</p>
+  <% end %>
+</div>