@php
    $h = 'font-display text-base font-semibold text-ink';
    $p = 'text-sm leading-relaxed text-ink-2';
    $li = 'text-sm leading-relaxed text-ink-2';
@endphp

<div class="space-y-3">
    <h3 class="{{ $h }}">Audit log</h3>
    <p class="{{ $p }}">The <span class="text-ink">Audit</span> log records security- and configuration-relevant actions — who, when, what, from which IP. Every change stays traceable and attributed to a user.</p>
    <ul class="ml-4 list-disc space-y-1.5">
        <li class="{{ $li }}">Captures, among others: logins, 2FA changes, domain/TLS changes, update triggers, server hardening and SSH actions.</li>
        <li class="{{ $li }}"><span class="text-ink">Retention:</span> the keep duration is configurable; older entries are pruned automatically afterwards.</li>
    </ul>
    <p class="{{ $p }}">Note: behind an external proxy the audit log shows the real visitor IP only when <code class="font-mono text-accent-text">TRUSTED_PROXY_CIDR</code> is set (see "Domain, TLS &amp; reverse proxy").</p>
</div>