iobroker.hassemu 1.35.3 → 1.37.0

package/README.md

@@ -55,7 +55,7 @@ Want to add a URL the adapter doesn't auto-detect? Set `manual` and paste it.
 ## Requirements
 
 - Node.js ≥ 22
-- ioBroker js-controller ≥ 7.1.2
+- ioBroker js-controller ≥ 7.2.2
 - ioBroker Admin ≥ 7.8.23
 
 ---
@@ -69,6 +69,21 @@ Want to add a URL the adapter doesn't auto-detect? Set `manual` and paste it.
 
 One instance per host. Port 8123 is HA-fixed. With multiple ioBroker hosts on the same LAN, only one of them runs hassemu.
 
+**All traffic is plain HTTP** — HA clients do not support HTTPS on this flow. Treat port 8123 as LAN-only and never forward it to the internet. With authentication on, the username, password and tokens travel unencrypted over your LAN, so Auth guards the HA API against other LAN devices — it is not internet-exposure protection.
+
+---
+
+## First steps
+
+1. Start the hassemu instance in ioBroker.
+2. On the display, add a Home Assistant server. With mDNS on it appears automatically; otherwise enter `http://<ioBroker-IP>:8123` by hand.
+3. Complete the HA onboarding on the display. With Auth off you can click through the login; with Auth on, enter the username and password from the instance settings.
+4. The display now shows the **landing page** with its own device ID — that means it is connected and waiting for a URL.
+5. In ioBroker, open the Object Browser and set `hassemu.0.clients.<id>.mode` for that device: pick a discovered URL from the dropdown, or choose `manual` and put any URL in `clients.<id>.manualUrl`.
+6. The display reloads within ~30 seconds and shows your URL.
+
+Want the same URL on every display? Set `global.mode` (plus `global.manualUrl` for a free URL) and turn on the `global.enabled` master switch instead of configuring each client.
+
 ---
 
 ## Configuration
@@ -78,8 +93,9 @@ One instance per host. Port 8123 is HA-fixed. With multiple ioBroker hosts on th
 | Bind                | Network interface                                                                 | 0.0.0.0   |
 | Service Name        | Name the display sees                                                             | ioBroker  |
 | mDNS                | LAN auto-discovery. Off → set `http://<ioBroker-IP>:8123` on the display by hand. | on        |
-| Auth                | Login required                                                                    | off       |
+| Auth                | Login required (guards the HA API on the LAN; credentials travel in plain HTTP)   | off       |
 | Username / Password | When Auth is on                                                                   | admin / — |
+| Trust Proxy         | Only behind a trusted reverse proxy that terminates TLS and strips X-Forwarded-*  | off       |
 
 ---
 
@@ -90,7 +106,7 @@ hassemu.0.
 ├── info.
 │   ├── connection      — server is running
 │   ├── serverUuid      — server identity (read-only)
-│   └── refresh_urls    — re-scan URL list (button, set to true)
+│   └── refreshUrls     — re-scan URL list (button, set to true)
 ├── global.
 │   ├── enabled         — master switch
 │   ├── mode            — URL choice used by every client whose mode is `global`
@@ -124,7 +140,9 @@ Master switch:
 
 The display reloads itself within ~30 seconds after a URL change.
 
-After adding or renaming a VIS-2 project or view, set `info.refresh_urls` to `true` so it shows up in the dropdown.
+After adding or renaming a VIS-2 project or view, set `info.refreshUrls` to `true` so it shows up in the dropdown.
+
+If hassemu goes offline while a display is running, the display switches to a clear offline page with a reload button after ~1.5 minutes and returns to your dashboard automatically once hassemu is back. Limitation: a display that cold-boots _while_ hassemu is down can't load that page and shows a connection error until the adapter is running again.
 
 ---
 
@@ -138,9 +156,9 @@ Set the instance log level to `debug` first — since v1.31.1 the adapter traces
 
 **Display lost its identity (new id on every visit)** — the display is not persisting the cookie. Common causes: aggressive privacy mode, factory reset, browser cache flush. The old `clients.<id>`-channels can be removed via their `remove` button, but the root cause is on the display side, not in hassemu.
 
-**HA Companion App says „Server is not Home Assistant"** — point the app at `http://<ioBroker-IP>:8123`, not at the ioBroker Admin port. If a reverse proxy is in front of hassemu, make sure `/manifest.json` is passed through unmodified — the App parses `name === "Home Assistant"` to verify the server.
+**HA Companion App says "Server is not Home Assistant"** — point the app at `http://<ioBroker-IP>:8123`, not at the ioBroker Admin port. If a reverse proxy is in front of hassemu, make sure `/manifest.json` is passed through unmodified — the App parses `name === "Home Assistant"` to verify the server.
 
-**Aura entry in the dropdown points at the wrong port** — `native.port` of the Aura instance must match its actually-listening port. Trigger `info.refresh_urls = true` to re-run discovery after fixing the Aura config.
+**Aura entry in the dropdown points at the wrong port** — `native.port` of the Aura instance must match its actually-listening port. Trigger `info.refreshUrls = true` to re-run discovery after fixing the Aura config.
 
 ---
 
@@ -150,7 +168,7 @@ Migration runs automatically when the adapter starts.
 
 Got scripts that still write to `visUrl`? Update them — write to `manualUrl` instead and set `mode` to `manual`.
 
-**Coming from a Shelly Wall Display on firmware 2.6.0 or newer?** Make sure you're on hassemu **≥ 1.29.2**. The on-device HA app introduced in firmware 2.6.0 needs a server-identity probe, a mobile-app registration step and a WebView „connected" signal — all three came in with v1.29.0–v1.29.2. After upgrading, run the display through the on-device HA onboarding once more.
+**Coming from a Shelly Wall Display on firmware 2.6.0 or newer?** Make sure you're on hassemu **≥ 1.29.2**. The on-device HA app introduced in firmware 2.6.0 needs a server-identity probe, a mobile-app registration step and a WebView "connected" signal — all three came in with v1.29.0–v1.29.2. After upgrading, run the display through the on-device HA onboarding once more.
 
 ---
 
@@ -160,7 +178,23 @@ Got scripts that still write to `visUrl`? Update them — write to `manualUrl` i
     Placeholder for the next version (at the beginning of the line):
     ### **WORK IN PROGRESS**
 -->
+### 1.37.0 (2026-07-09)
+
+- A custom name you give a display now survives even when its network hostname resolves later — the name you set sticks.
+- A display that keeps losing its identity no longer fills ioBroker with unused entries over time.
+- A display connection that simply goes away (a panel powered off) is now cleaned up instead of lingering until the adapter restarts.
+- The manual URL-refresh datapoint is now `info.refreshUrls` (was `info.refresh_urls`); the old one is removed automatically on upgrade — update any script that wrote to the old name.
+- Corrected the configuration help texts and the README to match the current setup, documented the offline behaviour, and added a first-steps guide.
+
+### 1.36.0 (2026-06-22) — stable
+
+- Fixed a rare adapter crash and restart loop that a malformed connection message could trigger — it briefly took all connected displays offline until the adapter recovered.
+- A custom name you give a display (its channel name) is no longer overwritten with the device's IP address when that IP changes.
+- With authentication enabled, a display again reloads automatically after you change its target URL.
+- With authentication enabled, a password is now required — the settings can no longer be saved with an empty password.
+
 ### 1.35.3 (2026-06-15)
+
 - Fixed Home Assistant discovery pointing the display at the wrong address on multi-interface hosts; it now uses the address the adapter actually listens on.
 
 ### 1.35.2 (2026-06-12)
@@ -172,14 +206,6 @@ Got scripts that still write to `visUrl`? Update them — write to `manualUrl` i
 
 - Internal cleanup. No user-facing changes.
 
-### 1.35.0 (2026-06-07)
-
-- Added optional Sentry error reporting: crashes are sent to the developer so issues get fixed faster. Active only with ioBroker diagnostics enabled; anonymous.
-
-### 1.34.0 (2026-06-02)
-
-- Home Assistant Companion App and Shelly Wall Display (firmware 2.6.0+): sign-out and device registration now complete reliably.
-
 [Older changelogs can be found there](CHANGELOG_OLD.md)
 
 ## Support Development

package/admin/i18n/de.json

@@ -1,59 +1,59 @@
 {
-    "aboutInfo": "Dieser Adapter ist kostenlos und Open Source. Wenn er dir nützlich ist, unterstütze die Entwicklung gerne mit einer kleinen Spende.",
-    "authInfo": "Hinweis: Authentifizierung ist optional. Das Display durchläuft immer den Authentifizierungsablauf, aber die Anmeldedaten werden nur geprüft, wenn diese Option aktiviert ist.",
-    "authRequired": "Authentifizierung erforderlich",
-    "authRequiredTooltip": "Wenn aktiviert, müssen Geräte gültige Anmeldedaten eingeben",
-    "bindAddress": "Interface binden",
-    "bindAddressTooltip": "Netzwerk-Interface auswählen (0.0.0.0 = alle Interfaces)",
-    "donateKofi": "Unterstützen auf Ko-fi",
-    "donatePaypal": "Über PayPal spenden",
-    "header_auth": "Authentifizierung",
-    "header_mdns": "mDNS-Erkennung",
-    "header_proxy": "Reverse Proxy",
-    "header_server": "Server",
-    "mdnsEnabled": "mDNS-Erkennung aktivieren",
-    "mdnsEnabledTooltip": "Service per mDNS broadcasten damit Geräte ihn automatisch finden (funktioniert auf allen Plattformen)",
-    "mdnsInfo": "mDNS sendet den Service im lokalen Netzwerk, damit Geräte ihn automatisch finden können.\n\nWenn mDNS deaktiviert oder nicht funktioniert, geben Sie die URL manuell am Display ein:\n`http://IHRE_IP:8123`",
-    "password": "Passwort",
-    "proxyInfo": "Nur einschalten wenn der Adapter HINTER einem vertrauenswürdigen Reverse-Proxy mit TLS-Terminierung läuft (z.B. nginx, Traefik). Der Proxy muss eingehende X-Forwarded-*-Header entfernen — sonst können Clients ihre IP fälschen und den Brute-Force-Lockout umgehen. Mit dieser Option an wird der Cookie als `Secure` markiert wenn X-Forwarded-Proto `https` ist.",
-    "redirectInfo": "Weiterleitungs-Ziele werden über Datenpunkte gesetzt, nicht hier. Entweder `global.visUrl` + `global.enabled` für alle Clients zusammen, oder pro Gerät unter `clients.<id>.visUrl`. Beide Felder bieten ein Dropdown aller bekannten ioBroker-URLs.",
-    "serviceName": "Service-Name",
-    "serviceNameTooltip": "Name der auf dem Display während der Erkennung angezeigt wird",
-    "supportHeader": "Unterstützung",
-    "trustProxy": "Reverse-Proxy-Header vertrauen",
-    "trustProxyTooltip": "Wenn an, kommen req.ip / req.protocol aus X-Forwarded-*-Headern. Nur einschalten wenn der Adapter hinter einem vertrauenswürdigen Reverse-Proxy läuft.",
-    "username": "Benutzername",
-    "info": "Information",
-    "connection": "Server läuft",
-    "serverUuid": "HA-Server-UUID (bleibt über Neustarts hinweg)",
-    "refreshUrls": "URL-Erkennung neu laden",
-    "clients": "Bekannte Display-Clients",
-    "global": "Globaler Weiterleitungs-Override",
-    "globalEnabled": "Globale URL für alle Clients anwenden",
-    "globalMode": "Globaler Weiterleitungs-Modus",
-    "globalManualUrl": "Globale manuelle URL (genutzt wenn mode='manual')",
-    "clientMode": "Weiterleitungs-Modus",
-    "clientManualUrl": "Manuelle URL",
-    "clientIp": "Client-IP",
-    "clientRemove": "Diesen Client entfernen",
-    "serverUuidDesc": "Persistente UUID, broadcastet via mDNS und /api/discovery_info. Wird beim ersten Start einmal erzeugt und über Neustarts hinweg wiederverwendet, sodass HA-Clients nicht jeden Neustart als neuen Server behandeln (was die gecachte Identität ungültig machen, Re-Onboarding erzwingen und Tokens verwerfen würde).",
-    "refreshUrlsDesc": "Auf true setzen, um den Broker nach VIS/VIS-2-Projekten, Admin-Kacheln und weiteren URLs neu zu durchsuchen. Sinnvoll nach Anlegen einer neuen VIS-View ohne Adapter-Neustart.",
-    "noChoice": "---",
-    "globalUrl": "Globale URL",
-    "manualUrl": "Manuelle URL",
-    "pageConnectedTitle": "Verbunden · ioBroker",
-    "pageConnectedHeading": "Display verbunden",
-    "pageConnectedSubhead": "Dieses Display ist mit ioBroker verbunden. Wähle noch eine Weiterleitungs-URL aus.",
-    "pageSetupTitle": "Einrichtung abschließen",
-    "pageSetupIntro": "Lege fest, welche URL das Display beim nächsten Refresh öffnen soll:",
-    "pageStep1": "Öffne im ioBroker-Admin die Ansicht „Objekte\".",
-    "pageStep2": "Navigiere zu diesem Datenpunkt:",
-    "pageStep3": "Trage hier die gewünschte URL ein (VIS-Projekt, Grafana, Dashboard, …).",
-    "pageAutoRefresh": "Diese Seite aktualisiert sich automatisch alle 15 Sekunden.",
-    "pageOfflineTitle": "hassemu offline · ioBroker",
-    "pageOfflineHeading": "hassemu offline",
-    "pageOfflineSubhead": "Die Seite oben ist die letzte Ansicht, die das Display erhalten hat. Sobald hassemu wieder erreichbar ist, aktualisiert sich die Anzeige automatisch.",
-    "pageReload": "Jetzt neu laden",
-    "pageDeviceId": "Geräte-ID",
-    "pageIpAddress": "IP-Adresse"
+  "aboutInfo": "Dieser Adapter ist kostenlos und Open Source. Wenn er dir nützlich ist, unterstütze die Entwicklung gerne mit einer kleinen Spende.",
+  "authInfo": "Hinweis: Authentifizierung ist optional. Das Display durchläuft immer den Authentifizierungsablauf, aber die Anmeldedaten werden nur geprüft, wenn diese Option aktiviert ist.",
+  "authRequired": "Authentifizierung erforderlich",
+  "authRequiredTooltip": "Wenn aktiviert, müssen Geräte gültige Anmeldedaten eingeben",
+  "bindAddress": "Interface binden",
+  "bindAddressTooltip": "Netzwerk-Interface auswählen (0.0.0.0 = alle Interfaces)",
+  "donateKofi": "Unterstützen auf Ko-fi",
+  "donatePaypal": "Über PayPal spenden",
+  "header_auth": "Authentifizierung",
+  "header_mdns": "mDNS-Erkennung",
+  "header_proxy": "Reverse Proxy",
+  "header_server": "Server",
+  "mdnsEnabled": "mDNS-Erkennung aktivieren",
+  "mdnsEnabledTooltip": "Service per mDNS broadcasten damit Geräte ihn automatisch finden (funktioniert auf allen Plattformen)",
+  "mdnsInfo": "mDNS sendet den Service im lokalen Netzwerk, damit Geräte ihn automatisch finden können.\n\nWenn mDNS deaktiviert oder nicht funktioniert, geben Sie die URL manuell am Display ein:\n`http://IHRE_IP:8123`",
+  "password": "Passwort",
+  "proxyInfo": "Nur einschalten wenn der Adapter HINTER einem vertrauenswürdigen Reverse-Proxy mit TLS-Terminierung läuft (z.B. nginx, Traefik). Der Proxy muss eingehende X-Forwarded-*-Header entfernen — sonst können Clients ihre IP fälschen, was die Client-Erkennung und die per-IP-Schutzlimits verfälscht. Mit dieser Option an wird der Cookie als `Secure` markiert wenn X-Forwarded-Proto `https` ist.",
+  "redirectInfo": "Weiterleitungs-Ziele werden über Datenpunkte gesetzt, nicht hier. `global.mode` + `global.enabled` schickt alle Displays auf dieselbe URL, oder pro Gerät unter `clients.<id>.mode`. Im `mode`-Dropdown eine erkannte URL wählen, oder `manual` setzen und im passenden `manualUrl`-Datenpunkt eine beliebige URL eintragen.",
+  "serviceName": "Service-Name",
+  "serviceNameTooltip": "Name der auf dem Display während der Erkennung angezeigt wird",
+  "supportHeader": "Unterstützung",
+  "trustProxy": "Reverse-Proxy-Header vertrauen",
+  "trustProxyTooltip": "Wenn an, kommen req.ip / req.protocol aus X-Forwarded-*-Headern. Nur einschalten wenn der Adapter hinter einem vertrauenswürdigen Reverse-Proxy läuft.",
+  "username": "Benutzername",
+  "info": "Information",
+  "connection": "Server läuft",
+  "serverUuid": "HA-Server-UUID (bleibt über Neustarts hinweg)",
+  "refreshUrls": "URL-Erkennung neu laden",
+  "clients": "Bekannte Display-Clients",
+  "global": "Globaler Weiterleitungs-Override",
+  "globalEnabled": "Globale URL für alle Clients anwenden",
+  "globalMode": "Globaler Weiterleitungs-Modus",
+  "globalManualUrl": "Globale manuelle URL (genutzt wenn mode='manual')",
+  "clientMode": "Weiterleitungs-Modus",
+  "clientManualUrl": "Manuelle URL",
+  "clientIp": "Client-IP",
+  "clientRemove": "Diesen Client entfernen",
+  "serverUuidDesc": "Persistente UUID, broadcastet via mDNS und /api/discovery_info. Wird beim ersten Start einmal erzeugt und über Neustarts hinweg wiederverwendet, sodass HA-Clients nicht jeden Neustart als neuen Server behandeln (was die gecachte Identität ungültig machen, Re-Onboarding erzwingen und Tokens verwerfen würde).",
+  "refreshUrlsDesc": "Auf true setzen, um den Broker nach VIS/VIS-2-Projekten, Admin-Kacheln und weiteren URLs neu zu durchsuchen. Sinnvoll nach Anlegen einer neuen VIS-View ohne Adapter-Neustart.",
+  "globalUrl": "Globale URL",
+  "manualUrl": "Manuelle URL",
+  "pageConnectedTitle": "Verbunden · ioBroker",
+  "pageConnectedHeading": "Display verbunden",
+  "pageConnectedSubhead": "Dieses Display ist mit ioBroker verbunden. Wähle noch eine Weiterleitungs-URL aus.",
+  "pageSetupTitle": "Einrichtung abschließen",
+  "pageSetupIntro": "Lege fest, welche URL das Display beim nächsten Refresh öffnen soll:",
+  "pageStep1": "Öffne im ioBroker-Admin die Ansicht „Objekte\".",
+  "pageStep2": "Navigiere zu diesem Datenpunkt:",
+  "pageStep3": "Trage hier die gewünschte URL ein (VIS-Projekt, Grafana, Dashboard, …).",
+  "pageAutoRefresh": "Diese Seite aktualisiert sich automatisch alle 15 Sekunden.",
+  "pageOfflineTitle": "hassemu offline · ioBroker",
+  "pageOfflineHeading": "hassemu offline",
+  "pageOfflineSubhead": "Die Seite oben ist die letzte Ansicht, die das Display erhalten hat. Sobald hassemu wieder erreichbar ist, aktualisiert sich die Anzeige automatisch.",
+  "pageReload": "Jetzt neu laden",
+  "pageDeviceId": "Geräte-ID",
+  "pageIpAddress": "IP-Adresse",
+  "passwordRequiredWhenAuth": "Bei aktivierter Authentifizierung ist ein Passwort erforderlich."
 }

package/admin/i18n/en.json

@@ -1,59 +1,59 @@
 {
-    "aboutInfo": "This adapter is free and open source. If you find it useful, please consider supporting its development with a small donation.",
-    "authInfo": "Note: Authentication is optional. The display will always go through the authentication flow, but credentials are only validated if this option is enabled.",
-    "authRequired": "Require Authentication",
-    "authRequiredTooltip": "If enabled, devices must enter valid credentials to authenticate",
-    "bindAddress": "Bind to Interface",
-    "bindAddressTooltip": "Select the network interface to listen on (0.0.0.0 = all interfaces)",
-    "donateKofi": "Support on Ko-fi",
-    "donatePaypal": "Donate via PayPal",
-    "header_auth": "Authentication",
-    "header_mdns": "mDNS Discovery",
-    "header_proxy": "Reverse Proxy",
-    "header_server": "Server",
-    "mdnsEnabled": "Enable mDNS Discovery",
-    "mdnsEnabledTooltip": "Broadcast the service via mDNS so devices can find it automatically (works on all platforms)",
-    "mdnsInfo": "mDNS broadcasts the service on the local network so devices can discover it automatically.\n\nIf mDNS is disabled or not working, enter the URL manually on the display:\n`http://YOUR_IP:8123`",
-    "password": "Password",
-    "proxyInfo": "Only enable when running BEHIND a trusted reverse proxy that terminates TLS (e.g. nginx, Traefik). The proxy must strip incoming X-Forwarded-* headers — otherwise clients can spoof their IP and bypass the brute-force lockout. With this on, cookies are marked `Secure` when X-Forwarded-Proto is `https`.",
-    "redirectInfo": "Redirect targets are configured via datapoints, not here. Use `global.visUrl` + `global.enabled` to send every client to the same URL, or set each display individually under `clients.<id>.visUrl`. Both fields provide a dropdown of known ioBroker URLs.",
-    "serviceName": "Service Name",
-    "serviceNameTooltip": "Name shown on the display during discovery",
-    "supportHeader": "Support",
-    "trustProxy": "Trust Reverse Proxy Headers",
-    "trustProxyTooltip": "If on, req.ip / req.protocol come from X-Forwarded-* headers. Only enable when behind a trusted reverse proxy.",
-    "username": "Username",
-    "info": "Information",
-    "connection": "Server is running",
-    "serverUuid": "HA-server UUID (stable across restarts)",
-    "refreshUrls": "Refresh URL discovery",
-    "clients": "Known display clients",
-    "global": "Global redirect override",
-    "globalEnabled": "Apply global URL to all clients",
-    "globalMode": "Global redirect mode",
-    "globalManualUrl": "Global manual URL (used when mode='manual')",
-    "clientMode": "Redirect mode",
-    "clientManualUrl": "Manual URL",
-    "clientIp": "Client IP",
-    "clientRemove": "Forget this client",
-    "serverUuidDesc": "Persistent UUID broadcast via mDNS and /api/discovery_info. Generated once on first start and re-used across restarts so HA-Clients don't treat each restart as a new server (which would invalidate cached identity, force re-onboarding and drop tokens).",
-    "refreshUrlsDesc": "Write true to re-scan the broker for VIS/VIS-2 projects, Admin tiles and other discovered URLs. Useful after creating a new VIS view without restarting the adapter.",
-    "noChoice": "---",
-    "globalUrl": "Global URL",
-    "manualUrl": "Manual URL",
-    "pageConnectedTitle": "Connected · ioBroker",
-    "pageConnectedHeading": "Display connected",
-    "pageConnectedSubhead": "This display is linked to ioBroker. Choose a redirect URL to finish setup.",
-    "pageSetupTitle": "Finish setup",
-    "pageSetupIntro": "Set the URL that this display should open on next refresh:",
-    "pageStep1": "Open the ioBroker admin and switch to the Objects view.",
-    "pageStep2": "Go to this datapoint:",
-    "pageStep3": "Enter the URL you want to show here (VIS project, Grafana, dashboard, …).",
-    "pageAutoRefresh": "This page refreshes automatically every 15 seconds.",
-    "pageOfflineTitle": "hassemu offline · ioBroker",
-    "pageOfflineHeading": "hassemu offline",
-    "pageOfflineSubhead": "The page above is the last view this display received. As soon as hassemu is reachable again, the display updates by itself.",
-    "pageReload": "Reload now",
-    "pageDeviceId": "Device ID",
-    "pageIpAddress": "IP address"
+  "aboutInfo": "This adapter is free and open source. If you find it useful, please consider supporting its development with a small donation.",
+  "authInfo": "Note: Authentication is optional. The display will always go through the authentication flow, but credentials are only validated if this option is enabled.",
+  "authRequired": "Require Authentication",
+  "authRequiredTooltip": "If enabled, devices must enter valid credentials to authenticate",
+  "bindAddress": "Bind to Interface",
+  "bindAddressTooltip": "Select the network interface to listen on (0.0.0.0 = all interfaces)",
+  "donateKofi": "Support on Ko-fi",
+  "donatePaypal": "Donate via PayPal",
+  "header_auth": "Authentication",
+  "header_mdns": "mDNS Discovery",
+  "header_proxy": "Reverse Proxy",
+  "header_server": "Server",
+  "mdnsEnabled": "Enable mDNS Discovery",
+  "mdnsEnabledTooltip": "Broadcast the service via mDNS so devices can find it automatically (works on all platforms)",
+  "mdnsInfo": "mDNS broadcasts the service on the local network so devices can discover it automatically.\n\nIf mDNS is disabled or not working, enter the URL manually on the display:\n`http://YOUR_IP:8123`",
+  "password": "Password",
+  "proxyInfo": "Only enable when running BEHIND a trusted reverse proxy that terminates TLS (e.g. nginx, Traefik). The proxy must strip incoming X-Forwarded-* headers — otherwise clients can spoof their IP, which corrupts client identification and the per-IP protection limits. With this on, cookies are marked `Secure` when X-Forwarded-Proto is `https`.",
+  "redirectInfo": "Redirect targets are set via datapoints, not here. Use `global.mode` + `global.enabled` to send every display to the same URL, or set each display under `clients.<id>.mode`. In the `mode` dropdown pick a discovered URL, or choose `manual` and enter any URL in the matching `manualUrl` datapoint.",
+  "serviceName": "Service Name",
+  "serviceNameTooltip": "Name shown on the display during discovery",
+  "supportHeader": "Support",
+  "trustProxy": "Trust Reverse Proxy Headers",
+  "trustProxyTooltip": "If on, req.ip / req.protocol come from X-Forwarded-* headers. Only enable when behind a trusted reverse proxy.",
+  "username": "Username",
+  "info": "Information",
+  "connection": "Server is running",
+  "serverUuid": "HA-server UUID (stable across restarts)",
+  "refreshUrls": "Refresh URL discovery",
+  "clients": "Known display clients",
+  "global": "Global redirect override",
+  "globalEnabled": "Apply global URL to all clients",
+  "globalMode": "Global redirect mode",
+  "globalManualUrl": "Global manual URL (used when mode='manual')",
+  "clientMode": "Redirect mode",
+  "clientManualUrl": "Manual URL",
+  "clientIp": "Client IP",
+  "clientRemove": "Forget this client",
+  "serverUuidDesc": "Persistent UUID broadcast via mDNS and /api/discovery_info. Generated once on first start and re-used across restarts so HA-Clients don't treat each restart as a new server (which would invalidate cached identity, force re-onboarding and drop tokens).",
+  "refreshUrlsDesc": "Write true to re-scan the broker for VIS/VIS-2 projects, Admin tiles and other discovered URLs. Useful after creating a new VIS view without restarting the adapter.",
+  "globalUrl": "Global URL",
+  "manualUrl": "Manual URL",
+  "pageConnectedTitle": "Connected · ioBroker",
+  "pageConnectedHeading": "Display connected",
+  "pageConnectedSubhead": "This display is linked to ioBroker. Choose a redirect URL to finish setup.",
+  "pageSetupTitle": "Finish setup",
+  "pageSetupIntro": "Set the URL that this display should open on next refresh:",
+  "pageStep1": "Open the ioBroker admin and switch to the Objects view.",
+  "pageStep2": "Go to this datapoint:",
+  "pageStep3": "Enter the URL you want to show here (VIS project, Grafana, dashboard, …).",
+  "pageAutoRefresh": "This page refreshes automatically every 15 seconds.",
+  "pageOfflineTitle": "hassemu offline · ioBroker",
+  "pageOfflineHeading": "hassemu offline",
+  "pageOfflineSubhead": "The page above is the last view this display received. As soon as hassemu is reachable again, the display updates by itself.",
+  "pageReload": "Reload now",
+  "pageDeviceId": "Device ID",
+  "pageIpAddress": "IP address",
+  "passwordRequiredWhenAuth": "A password is required when authentication is enabled."
 }

package/admin/i18n/es.json

@@ -1,59 +1,59 @@
 {
-    "aboutInfo": "Este adaptador es gratuito y de código abierto. Si te resulta útil, considera apoyar su desarrollo con una pequeña donación.",
-    "authInfo": "Nota: La autenticación es opcional. La pantalla siempre pasará por el flujo de autenticación, pero las credenciales solo se validan si esta opción está habilitada.",
-    "authRequired": "Requerir Autenticación",
-    "authRequiredTooltip": "Si está habilitado, los dispositivos deben ingresar credenciales válidas para autenticarse",
-    "bindAddress": "Vincular a la Interfaz",
-    "bindAddressTooltip": "Seleccione la interfaz de red en la que escuchar (0.0.0.0 = todas las interfaces)",
-    "donateKofi": "Apoyar en Ko-fi",
-    "donatePaypal": "Donar vía PayPal",
-    "header_auth": "Autenticación",
-    "header_mdns": "Descubrimiento de mDNS",
-    "header_proxy": "Reverse Proxy",
-    "header_server": "Servidor",
-    "mdnsEnabled": "Habilitar Descubrimiento mDNS",
-    "mdnsEnabledTooltip": "Difundir el servicio via mDNS para que los dispositivos lo encuentren automáticamente (funciona en todas las plataformas)",
-    "mdnsInfo": "mDNS difunde el servicio en la red local para que los dispositivos puedan descubrirlo automáticamente.\n\nSi mDNS está deshabilitado o no funciona, ingrese la URL manualmente en la pantalla:\n`http://YOUR_IP:8123`",
-    "password": "Contraseña",
-    "proxyInfo": "Activar solo cuando el adapter corre DETRAS de un reverse proxy de confianza con terminacion TLS (nginx, Traefik). El proxy debe eliminar headers X-Forwarded-* entrantes — de lo contrario los clients pueden falsificar su IP y eludir el brute-force lockout. Con esta opcion la cookie se marca `Secure` cuando X-Forwarded-Proto es `https`.",
-    "redirectInfo": "Los destinos de redirección se configuran mediante datapoints, no aquí. Usa `global.visUrl` + `global.enabled` para enviar todos los clientes al mismo URL, o configura cada display individualmente en `clients.<id>.visUrl`. Ambos campos ofrecen un desplegable con las URL de ioBroker conocidas.",
-    "serviceName": "Nombre del Servicio",
-    "serviceNameTooltip": "Nombre mostrado en la pantalla durante el descubrimiento",
-    "supportHeader": "Apoyo",
-    "trustProxy": "Confiar en headers del reverse proxy",
-    "trustProxyTooltip": "Si activo, req.ip / req.protocol vienen de headers X-Forwarded-*. Activar solo detras de un reverse proxy de confianza.",
-    "username": "Nombre de usuario",
-    "info": "Información",
-    "connection": "Servidor en ejecución",
-    "serverUuid": "UUID del servidor HA (estable entre reinicios)",
-    "refreshUrls": "Refrescar detección de URLs",
-    "clients": "Clientes de pantalla conocidos",
-    "global": "Sobrescritura global de redirección",
-    "globalEnabled": "Aplicar URL global a todos los clientes",
-    "globalMode": "Modo de redirección global",
-    "globalManualUrl": "URL manual global (se usa cuando mode='manual')",
-    "clientMode": "Modo de redirección",
-    "clientManualUrl": "URL manual",
-    "clientIp": "IP del cliente",
-    "clientRemove": "Olvidar este cliente",
-    "serverUuidDesc": "UUID persistente difundido vía mDNS y /api/discovery_info. Se genera una vez en el primer arranque y se reutiliza entre reinicios para que los clientes HA no traten cada reinicio como un servidor nuevo.",
-    "refreshUrlsDesc": "Escribe true para volver a escanear el broker en busca de proyectos VIS/VIS-2, mosaicos Admin y otras URLs. Útil tras crear una nueva vista VIS sin reiniciar el adaptador.",
-    "noChoice": "---",
-    "globalUrl": "URL global",
-    "manualUrl": "URL manual",
-    "pageConnectedTitle": "Conectado · ioBroker",
-    "pageConnectedHeading": "Pantalla conectada",
-    "pageConnectedSubhead": "Esta pantalla está vinculada a ioBroker. Elige una URL de redirección para terminar la configuración.",
-    "pageSetupTitle": "Completar configuración",
-    "pageSetupIntro": "Indica la URL que esta pantalla abrirá en la próxima actualización:",
-    "pageStep1": "Abre el admin de ioBroker y cambia a la vista Objetos.",
-    "pageStep2": "Navega hasta este datapoint:",
-    "pageStep3": "Introduce aquí la URL deseada (proyecto VIS, Grafana, panel, …).",
-    "pageAutoRefresh": "Esta página se actualiza automáticamente cada 15 segundos.",
-    "pageOfflineTitle": "hassemu sin conexión · ioBroker",
-    "pageOfflineHeading": "hassemu sin conexión",
-    "pageOfflineSubhead": "La página de arriba es la última vista que recibió esta pantalla. En cuanto hassemu vuelva a estar disponible, la pantalla se actualizará automáticamente.",
-    "pageReload": "Recargar",
-    "pageDeviceId": "ID del dispositivo",
-    "pageIpAddress": "Dirección IP"
+  "aboutInfo": "Este adaptador es gratuito y de código abierto. Si te resulta útil, considera apoyar su desarrollo con una pequeña donación.",
+  "authInfo": "Nota: La autenticación es opcional. La pantalla siempre pasará por el flujo de autenticación, pero las credenciales solo se validan si esta opción está habilitada.",
+  "authRequired": "Requerir Autenticación",
+  "authRequiredTooltip": "Si está habilitado, los dispositivos deben ingresar credenciales válidas para autenticarse",
+  "bindAddress": "Vincular a la Interfaz",
+  "bindAddressTooltip": "Seleccione la interfaz de red en la que escuchar (0.0.0.0 = todas las interfaces)",
+  "donateKofi": "Apoyar en Ko-fi",
+  "donatePaypal": "Donar vía PayPal",
+  "header_auth": "Autenticación",
+  "header_mdns": "Descubrimiento de mDNS",
+  "header_proxy": "Reverse Proxy",
+  "header_server": "Servidor",
+  "mdnsEnabled": "Habilitar Descubrimiento mDNS",
+  "mdnsEnabledTooltip": "Difundir el servicio via mDNS para que los dispositivos lo encuentren automáticamente (funciona en todas las plataformas)",
+  "mdnsInfo": "mDNS difunde el servicio en la red local para que los dispositivos puedan descubrirlo automáticamente.\n\nSi mDNS está deshabilitado o no funciona, ingrese la URL manualmente en la pantalla:\n`http://YOUR_IP:8123`",
+  "password": "Contraseña",
+  "proxyInfo": "Activar solo cuando el adapter corre DETRAS de un reverse proxy de confianza con terminacion TLS (nginx, Traefik). El proxy debe eliminar headers X-Forwarded-* entrantes — de lo contrario los clients pueden falsificar su IP, lo que corrompe la identificacion de clientes y los limites de proteccion por IP. Con esta opcion la cookie se marca `Secure` cuando X-Forwarded-Proto es `https`.",
+  "redirectInfo": "Los destinos de redirección se configuran mediante datapoints, no aquí. Usa `global.mode` + `global.enabled` para enviar todas las pantallas al mismo URL, o configura cada pantalla en `clients.<id>.mode`. En el desplegable `mode` elige un URL detectado, o selecciona `manual` e introduce cualquier URL en el datapoint `manualUrl` correspondiente.",
+  "serviceName": "Nombre del Servicio",
+  "serviceNameTooltip": "Nombre mostrado en la pantalla durante el descubrimiento",
+  "supportHeader": "Apoyo",
+  "trustProxy": "Confiar en headers del reverse proxy",
+  "trustProxyTooltip": "Si activo, req.ip / req.protocol vienen de headers X-Forwarded-*. Activar solo detras de un reverse proxy de confianza.",
+  "username": "Nombre de usuario",
+  "info": "Información",
+  "connection": "Servidor en ejecución",
+  "serverUuid": "UUID del servidor HA (estable entre reinicios)",
+  "refreshUrls": "Refrescar detección de URLs",
+  "clients": "Clientes de pantalla conocidos",
+  "global": "Sobrescritura global de redirección",
+  "globalEnabled": "Aplicar URL global a todos los clientes",
+  "globalMode": "Modo de redirección global",
+  "globalManualUrl": "URL manual global (se usa cuando mode='manual')",
+  "clientMode": "Modo de redirección",
+  "clientManualUrl": "URL manual",
+  "clientIp": "IP del cliente",
+  "clientRemove": "Olvidar este cliente",
+  "serverUuidDesc": "UUID persistente difundido vía mDNS y /api/discovery_info. Se genera una vez en el primer arranque y se reutiliza entre reinicios para que los clientes HA no traten cada reinicio como un servidor nuevo.",
+  "refreshUrlsDesc": "Escribe true para volver a escanear el broker en busca de proyectos VIS/VIS-2, mosaicos Admin y otras URLs. Útil tras crear una nueva vista VIS sin reiniciar el adaptador.",
+  "globalUrl": "URL global",
+  "manualUrl": "URL manual",
+  "pageConnectedTitle": "Conectado · ioBroker",
+  "pageConnectedHeading": "Pantalla conectada",
+  "pageConnectedSubhead": "Esta pantalla está vinculada a ioBroker. Elige una URL de redirección para terminar la configuración.",
+  "pageSetupTitle": "Completar configuración",
+  "pageSetupIntro": "Indica la URL que esta pantalla abrirá en la próxima actualización:",
+  "pageStep1": "Abre el admin de ioBroker y cambia a la vista Objetos.",
+  "pageStep2": "Navega hasta este datapoint:",
+  "pageStep3": "Introduce aquí la URL deseada (proyecto VIS, Grafana, panel, …).",
+  "pageAutoRefresh": "Esta página se actualiza automáticamente cada 15 segundos.",
+  "pageOfflineTitle": "hassemu sin conexión · ioBroker",
+  "pageOfflineHeading": "hassemu sin conexión",
+  "pageOfflineSubhead": "La página de arriba es la última vista que recibió esta pantalla. En cuanto hassemu vuelva a estar disponible, la pantalla se actualizará automáticamente.",
+  "pageReload": "Recargar",
+  "pageDeviceId": "ID del dispositivo",
+  "pageIpAddress": "Dirección IP",
+  "passwordRequiredWhenAuth": "Se requiere una contraseña cuando la autenticación está habilitada."
 }