/*
 * Hype Networks branding for the Authelia portal (auth.hype-networks.net).
 * nginx injects <link rel="stylesheet" href="/hn-branding.css"> into Authelia's HTML.
 * CSS only: no behaviour changes. Authelia's own styles sit in cascade layers, so these
 * unlayered rules win without !important. If an Authelia update renames anything,
 * the page simply falls back to Authelia's default look.
 */

/* Accent colour: brand red instead of Authelia blue (focused fields, links, focus rings).
   #e0475a is the brand red (#cc2233) lightened for 5:1 contrast on black.
   Authelia sets data-theme on both <html> and <body>, so override both. */
html[data-theme],
body[data-theme] {
  --primary: #e0475a;
  --ring: #e0475a;
}

/* Black buttons with a hairline border; red border on hover/focus. */
html[data-theme] .bg-primary {
  background-color: #000;
  color: #fff;
  border: 1px solid #3a3a3a;
}
html[data-theme] .bg-primary:hover,
html[data-theme] .bg-primary:focus-visible {
  background-color: #0d0d0d;
  border-color: #cc2233;
}

/* No "Sign in" heading on the first page (the shield says enough). */
#first-factor-stage h5 {
  display: none;
}

/* Footer: replace "Powered by Authelia" with a notice, as plain text rather than a link.
   (Authelia's text overrides must keep its name, so this is done in CSS.) */
a[href="https://www.authelia.com"] {
  pointer-events: none;
  cursor: default;
  text-decoration: none;
  font-size: 0;
  display: inline-block;   /* so the top margin applies */
  margin-top: 2rem;        /* breathing room below the buttons */
}
a[href="https://www.authelia.com"]::after {
  content: "Unauthorized access prohibited";
  font-size: 0.7rem;
  color: #9a9a9a;
  letter-spacing: 0.08em;
  text-transform: uppercase;
}