/* Branding for the Authelia portal (zottels realm, kerberos). Same mechanism
 * as svk/svk.css: kerberos's nginx injects this as a same-origin <link>
 * before </head> (sub_filter in roles/nginx/templates/nginx-authelia.conf.j2),
 * which Authelia's CSP (style-src 'self') allows. No logo or favicon here —
 * this realm keeps Authelia's own; only the background and the card differ.
 *
 * Authelia's login layout: <body> > #root > MuiContainer (max-width xs)
 * holding logo, "Sign in" heading and the form. Emotion injects its styles
 * at runtime after this sheet, so rules carry extra specificity. */

/* background.jpg is not a file: nginx answers that URL with today's pick
 * from the rotating set (authelia_backgrounds_src, assets/authelia-kerberos/). */
body {
    background: #1b1b1b url("/static-branding/background.jpg") center center / cover no-repeat fixed;
}

/* The centred column becomes a translucent card. */
body #root .MuiContainer-root {
    background: rgba(255, 255, 255, 0.88);
    border-radius: 12px;
    padding: 32px 24px;
    box-shadow: 0 8px 32px rgba(0, 0, 0, 0.35);
}

/* theme: auto follows the browser; keep the card readable in dark mode. */
@media (prefers-color-scheme: dark) {
    body #root .MuiContainer-root {
        background: rgba(30, 30, 30, 0.9);
    }
}
