ysk-server-shared 1.0.0 → 1.1.0

package/locales/zh-CN/email.json

@@ -47,7 +47,7 @@
   "needExecute": "需 YSK_EXECUTE",
   "viewQueue": "查看伫列",
   "flushQueue": "清空伫列",
-  "queueHint": "按“查看伫列”读取本机 Postfix 伫列。无 EXECUTE 或无 postqueue 时会显示失败原因。",
+  "queueHint": "本机 Postfix 队列。查看是读取探测；清空需要 YSK_EXECUTE。",
   "deleteThisId": "删除此 ID",
   "queueEmpty": "无待送邮件",
   "queueEmptyHint": "目前没有待送邮件",
@@ -101,10 +101,11 @@
   "normal": "正常",
   "statMailboxes": "邮箱",
   "statDnsRecords": "DNS 纪录",
-  "dnsTodosTitle": "DNS",
+  "dnsTodosTitle": "域名系统",
   "copyAllRecords": "复制全部纪录",
   "openDnsPage": "开启 DNS 页",
   "healthScore": "健康分",
+  "healthUnchecked": "尚未檢查",
   "suggestedRecords": "建议纪录数",
   "externalTodosCount": "外部待办",
   "colType": "类型",
@@ -316,7 +317,8 @@
     "dmarcMissing": "缺少 DMARC — 强烈建议设置",
     "ptrBad": "PTR 反向 DNS 缺失或不正确 — 请向 VPS 供应商申请",
     "port25Blocked": "外发 Port 25 似乎被封锁 — 请申请解封或改用 SMTP 中继",
-    "port25Unknown": "Port 25 状态未知 — 请执行连通性检查"
+    "port25Unknown": "Port 25 状态未知 — 请执行连通性检查",
+    "dmarcUnpublished": "DMARC 記錄已在面板產生，但公網尚未解析到"
   },
   "stack": {
     "tlsNote": "SMTP／IMAP 用 Let’s Encrypt TLS 证书",
@@ -357,7 +359,8 @@
     "postfixReloaded": "已重新加载 Postfix。",
     "postfixReloadFailed": "Postfix 重新加载失败：{{detail}}",
     "dovecotApplied": "已写入 Dovecot TLS 片段并尝试重新加载。",
-    "dovecotSkipped": "已跳过 Dovecot（未安装或 doveconf 不可用）。"
+    "dovecotSkipped": "已跳过 Dovecot（未安装或 doveconf 不可用）。",
+    "dovecotSslOmitted": "邮件证书不存在，已改写 Dovecot 为 ssl=no，避免单元因缺少证书而无法启动。"
   },
   "policyApplySystemHint": "勾选「套用到系统」才会写入 Postfix／Rspamd 映射并重新加载；否则只写控制面草稿。",
   "rateLimitAppliedNote": "已套用每小时外发限额与反垃圾标记（若启用系统套用）。",
@@ -396,12 +399,12 @@
   "deliverabilityDesc": "PTR／DNS／端口 25 检查",
   "dnsTodosDesc": "建议纪录可复制到外部 DNS 或到 DNS 页建 zone（写入 ≠ 权威上线）",
   "deliverabilityHonesty": "无法代设 PTR 或解除端口 25 封锁",
-  "warmupSuggest": "暖身建议",
-  "writeSsoSkeleton": "写入 Roundcube SSO 结构",
-  "rateLimitPerHour": "输出消息顶部",
-  "rateLimitGlobalHint": "全域享有各域名",
+  "warmupSuggest": "预热建议",
+  "writeSsoSkeleton": "写入 Roundcube SSO 骨架",
+  "rateLimitPerHour": "每小时讯息上限",
+  "rateLimitGlobalHint": "全域取各域名最小值",
   "savePolicyWritten": "只写入控制面",
-  "dnsblMultiIp": "多IP RBL",
+  "dnsblMultiIp": "多 IP RBL",
   "webmailTool": "网页邮件软件",
   "webmailToolRoundcube": "Roundcube（默认）",
   "webmailToolSnappy": "SnappyMail（轻量）",
@@ -473,5 +476,38 @@
   "mailboxEmptyTitle": "尚无邮箱",
   "passwordMismatch": "两次密码不一致",
   "passwordTooShort": "密码至少 8 个字符",
-  "mailboxUpdateNeedField": "请设置新密码或更改状态"
+  "mailboxUpdateNeedField": "请设置新密码或更改状态",
+  "catchallHint": "未对应的本地部分会送到目标信箱。只写草稿，须套用邮件才生效。",
+  "queueSearchPh": "搜索 ID、发件人或收件人…",
+  "queueId": "队列 ID",
+  "queueSender": "发件人",
+  "queueRecipients": "收件人",
+  "queueSize": "大小",
+  "queueReason": "原因",
+  "queueActive": "传送中",
+  "queueHeld": "已暂停",
+  "queueDeferred": "延迟",
+  "deleteQueueTitle": "删除此队列邮件？",
+  "deleteQueueDesc": "从本机 MTA 队列移除 {{id}}。需要 YSK_EXECUTE。",
+  "openQueuePage": "打开邮件队列",
+  "dovecotFailedHint": "Dovecot 服务失败。请先到软件分页查看状态；若邮件证书尚未签发，请先到 SSL 签发 mail 主机名。",
+  "domainsListDesc": "在此主机上注册的邮件域",
+  "healthChecklist": "检查清单 {{score}}/100",
+  "healthChecklistHint": "检查清单分数 — 尚未做 DNS／PTR／25 端口实测",
+  "healthLiveHint": "实测分数",
+  "installWebmailTitle": "创建共享网络邮件项目（首次安装）",
+  "reinstallWebmailTitle": "重建/升级现有的Webmail项目",
+  "reinstallNeedInstall": "首先安装网络邮件",
+  "dovecotFailedStatus": "鸽舍是{{status}}。打开设备摘要的“软件”选项卡。",
+  "mailCertMissing": "{{hosts}} 没有证书。在 SSL 页面上发布。",
+  "mailCertPresent": "邮件证书已颁发 - 这不是缺少证书的问题。",
+  "webmailNeedCert": "{{host}} 没有证书 — 在强制使用 HTTPS 之前在 SSL 上颁发证书。",
+  "flushQueueEmpty": "队列为空",
+  "flushQueueNeedExecute": "刷新队列需要YSK_EXECUTE（主机执行权限）",
+  "healthUncheckedHint": "尚未实测 DNS／PTR／25 端口。",
+  "deliverabilityScore": "送达能力检查包",
+  "opendkimNoReload": "OpenDKIM 不支持重载 — 更改密钥或对照表后请用重启。",
+  "opendkimNoReloadTitle": "此堆栈不支持 systemctl reload opendkim",
+  "tlsRequestLeFor": "Request LE for {{host}}",
+  "deliverabilityChecks": "Checks"
 }

package/locales/zh-CN/errors.json

@@ -37,7 +37,9 @@
     "sessionExpired": "登录已失效，请重新登录",
     "sessionIdle": "闲置超时，请重新登录",
     "totpNotEnabled": "未启用 2FA",
-    "totpSecretNoDataDir": "TOTP secret 已加密但未设置 dataDir"
+    "totpSecretNoDataDir": "TOTP secret 已加密但未设置 dataDir",
+    "mustChangePassword": "请先设定新密码才可继续",
+    "policyNeedsOwn2fa": "为此账户启用 2FA 并使用 TOTP 代码进行确认，然后再要求其他账户使用 2FA"
   },
   "http": {
     "notFoundRoute": "找不到：{{method}} {{path}}",
@@ -47,7 +49,8 @@
     "unprocessable": "操作无法完成（服务器拒绝）",
     "requestFailed": "请求失败（{{status}}）",
     "jsonInvalid": "JSON 无效",
-    "internal": "内部错误"
+    "internal": "内部错误",
+    "payloadTooLarge": "请求内容过大"
   },
   "YSK_HOST_BROWSE_SSRF": "主機瀏覽已被安全政策攔截",
   "YSK_HOST_BROWSE_SESSION": "主機瀏覽工作階段不存在或已過期",

package/locales/zh-CN/fail2ban.json

@@ -8,10 +8,10 @@
   "startService": "启动服务",
   "notInstalled": "fail2ban 尚未安装",
   "toolHintPrefix": "底层工具：",
-  "toolHintBody": "fail2ban = 扫 log 后",
-  "toolHintTemp": "临时",
-  "toolHintBody2": "ban · 攻击应变请用",
-  "toolHintUfw": "UFW = 端口／永久规则",
+  "toolHintBody": "fail2ban 会扫描日志后临时封锁。攻击应变请用",
+  "toolHintTemp": "",
+  "toolHintBody2": "",
+  "toolHintUfw": "负责端口与永久规则。",
   "tabs": {
     "bans": "封锁列表",
     "whitelist": "白名单",
@@ -40,7 +40,7 @@
   "addWhitelist": "加入白名单",
   "applyPolicyIgnoreip": "套用策略（含 ignoreip）",
   "applyIgnoreipOk": "已把 ignoreip 写入 jail.local 并套用",
-  "ignoreipHint": "无 YSK_EXECUTE 时只写管理文件（apply_status=written）；",
+  "ignoreipHint": "没有系统变更权限时只写面板档。套用策略会重建 jail.local 的 ignoreip 并重新载入。",
   "whitelistTitle": "白名单 ({{count}})",
   "whitelistRemoved": "已移除白名单",
   "remove": "移除",
@@ -78,5 +78,30 @@
     "reload": "已重新加载 fail2ban",
     "restart": "已重启 fail2ban",
     "stop": "已停止 fail2ban"
-  }
+  },
+  "statWhitelist": "白名单",
+  "invalidIp": "请输入有效的 IPv4、IPv6 或 CIDR。",
+  "whitelistPendingApply": "已写入面板名单。请按「套用策略」才会写入 jail.local。",
+  "ignoreipFile": "dataDir/fail2ban/ignoreip.txt",
+  "jailsTabHint": "显示作用中 Jail 状态。要开关 Jail 请到「策略」分页。",
+  "colJail": "监狱",
+  "colEnabled": "开启",
+  "serviceStateLine": "单元 {{unit}} · {{state}} · 开机 {{boot}}",
+  "jail": {
+    "sshd": "远程登录暴力破解",
+    "nginxHttpAuth": "Nginx HTTP 验证",
+    "nginxBotsearch": "Nginx 扫描／机器人探测",
+    "nginxBadbots": "Nginx 已知恶意机器人",
+    "nginxLimitReq": "Nginx 限速 Jail",
+    "postfix": "Postfix 邮件暴力破解",
+    "dovecot": "Dovecot 邮件登录",
+    "recidive": "累犯"
+  },
+  "cannotBanSelf": "这是主机或您的登录 IP — 将其添加到ignoreip而不是禁止",
+  "suggestIgnoreHint": "建议的管理 IP（仅在您应用策略之前为面板文件）：",
+  "suggestIgnoreAdd": "添加 {{ip}}",
+  "whitelistEmptyWarn": "白名单为空，jail 可能把你自己封锁。套用 ignoreip 前请先加入登录 IP。",
+  "suggestIgnoreLogin": "你的登录 IP {{ip}}",
+  "applyIgnoreEmptyWarn": "白名单为空时套用会清空 ignoreip",
+  "applyIgnoreNeedConfirm": "会重写 jail ignoreip 并重新载入 fail2ban"
 }

package/locales/zh-CN/files.json

@@ -293,7 +293,7 @@
   "shareBtStats": "BitTorrent 状态",
   "btSeeds": "种子",
   "btLeechers": "下载者",
-  "btPeers": "Peers",
+  "btPeers": "同行",
   "btUploadSpeed": "上传速度",
   "btDownloadSpeed": "下载速度",
   "btUploaded": "已上传",
@@ -308,7 +308,7 @@
   "btError": "做种错误",
   "publicShareMethod": "请选择下载方式",
   "publicShareDirect": "直接下载",
-  "publicShareBt": "BitTorrent",
+  "publicShareBt": "BT",
   "openBtTracker": "打开 BT Tracker",
   "publicShareBtInBrowser": "在浏览器以 WebTorrent 下载",
   "publicShareBtProgress": "已下载 {{pct}}% · {{peers}} 个 peers · ↓ {{down}} · ↑ {{up}}",
@@ -316,5 +316,47 @@
   "publicShareBtFailed": "WebTorrent 失败：{{detail}}",
   "publicShareBtNeedMagnet": "此分享没有 magnet 链接",
   "publicShareBtUnsupported": "此浏览器无法运行 WebTorrent；请改用 magnet 或 .torrent",
-  "btNone": "—"
+  "btNone": "—",
+  "uploadStatusSkipped": "已跳过",
+  "uploadStatusCancelled": "已取消",
+  "conflict": {
+    "titleFile": "已有名为“{{name}}”的项目",
+    "titleFolder": "已有名为“{{name}}”的文件夹",
+    "descFile": "请选择处理方式。在选择“替换”之前不会覆盖现有文件。",
+    "descFolder": "请选择处理方式。“合并”会保留现有文件夹，再处理其中的文件。",
+    "incoming": "即将加入",
+    "existing": "已在此处",
+    "kindFile": "文件",
+    "kindFolder": "文件夹",
+    "skip": "跳过",
+    "skipHint": "不加入此项目",
+    "keepBoth": "保留两者",
+    "keepBothHint": "将新项目存为 {{name}}",
+    "replace": "替换",
+    "replaceHint": "覆盖现有文件。可能时会保留版本快照。",
+    "replaceFolderHint": "覆盖文件夹中的同名文件，其余文件会保留。",
+    "merge": "合并",
+    "mergeHint": "保留现有文件夹，并将新文件加入其中",
+    "applyAll": "应用到其余所有重名",
+    "applyAllHint": "本次拖放或复制／移动的其余项目都使用同一做法",
+    "cancelRest": "取消其余项目",
+    "progress": "第 {{current}}／{{total}} 项",
+    "typeMismatch": "此处已有名为“{{name}}”的{{destKind}}，即将加入的是{{incomingKind}}。",
+    "skipped": "已跳过",
+    "cancelled": "已取消"
+  },
+  "emptyTrashTitle": "清空垃圾箱？",
+  "emptyTrashDesc": "垃圾箱中的每个文件都将被永久删除。此操作无法撤消。",
+  "purgeForeverDesc": "该文件将被永久删除。此操作无法撤消。",
+  "webdavReissueUnchanged": "重新签发后令牌编号未变——写入可能未生效，请再试一次。",
+  "webdavDisableFailed": "停用后状态仍为启用——写入可能未生效，请再试一次。",
+  "dirNamedLikeFile": "（文件夹残留；名称像文件）",
+  "webdavAfterEnable": "启用 WebDAV 并签发令牌后才可用。",
+  "webdavAlreadyOff": "WebDAV is already off",
+  "deleteMore": " and {{n}} more",
+  "unshareTitle": "Revoke this share?",
+  "unshareDesc": "Revoke the link for {{name}} ({{url}}). The link stops working immediately.",
+  "pillTrash": "{{count}} in trash",
+  "pillSpace": "{{used}} used",
+  "webdavTokenInactive": "Disabled — token #{{id}} is not active"
 }

package/locales/zh-CN/firewall.json

@@ -29,7 +29,7 @@
   "notInstalled": "UFW 尚未安装",
   "toolHintPrefix": "底层工具：",
   "toolHintBody": "UFW = 端口／永久规则 · 攻击应变与自动 ban 请用",
-  "toolHintFail2ban": "fail2ban = 日志临时 ban",
+  "toolHintfail2ban": "fail2ban = 日志临时 ban",
   "executeOffHint": "系统变更未开 — 可看状态，改规则需 root + YSK_EXECUTE=1",
   "tabs": {
     "rules": "规则表",
@@ -89,6 +89,7 @@
   "deleteRuleDesc": "将从 UFW 移除该规则编号（需系统变更权限）。",
   "servicesTitle": "托管服务端口",
   "servicesHint": "YSK 托管服务的期望网络暴露。启动服务时会自动同步这些规则。",
+  "servicesUfwOff": "UFW 已關閉。此列表只是預期暴露，並非主機上已強制執行的規則。",
   "servicesEmpty": "尚无服务暴露数据",
   "servicesEmptyDesc": "启动托管服务（Web、FTPS、VPN、数据库…）后会出现在此列表。",
   "servicesManualHint": "手动开端口 chips 在「端口」分页 — 建议在此管理，规则会带 ysk-svc 标记。",
@@ -98,5 +99,13 @@
   "colPorts": "端口",
   "colSync": "状态",
   "synced": "已同步",
-  "syncNow": "立即同步"
+  "syncNow": "立即同步",
+  "disableConfirmTitle": "停用 UFW？",
+  "disableConfirmDesc": "主机防火墙将停止过滤流量。若主机在公众网络上，SSH 与面板可能直接暴露。",
+  "disableConfirmConsequence": "现有允许／拒绝规则仍会保留，但要重新启用 UFW 才会生效。",
+  "toolHintFail2ban": "fail2ban = 基于日志的临时禁令",
+  "desiredOnlyUfwOff": "设定：{{mode}} · UFW 关闭（未套用）",
+  "syncNotApplied": "UFW 关闭 · 未套用",
+  "defaultNotApplied": "不适用（UFW 关闭）",
+  "ufwOffHint": "UFW 关闭时不应用默认传入"
 }

package/locales/zh-CN/ftp.json

@@ -131,5 +131,20 @@
   "sftpRegister": "登记公钥",
   "sftpAddedAt": "添加于 {{time}}",
   "sftpTechSummary": "技术细节（高级）",
-  "sftpTechNote": "公钥会写入管理路径"
+  "sftpTechNote": "公钥会写入管理路径",
+  "filterProject": "只显示此项目的 FTP 帐户",
+  "clearProjectFilter": "显示全部帐户",
+  "vsftpdFailedHint": "vsftpd 服务失败。请到服务分页查看设定与日志（listen 与 listen_ipv6 不可同时为 YES）。",
+  "tabService": "服务",
+  "listenConflictLive": "Live vsftpd.conf 有listen={{v4}} 和listen_ipv6={{v6}} — 两个YES 都将无法启动。",
+  "listenConflictNeedFix": "首先修复listen/listen_ipv6（它们不能同时为YES），然后应用。",
+  "fixListenIpv4": "仅使用 IPv4（listen=YES，listen_ipv6=NO）",
+  "liveFileValue": "立即归档：{{value}}",
+  "startBlockedFailed": "服务失败 - 在启动前应用有效的配置",
+  "ftpsNeedCert": "首先选择一个证书域",
+  "detectPublicIp": "检测公网IP",
+  "detectPublicIpTitle": "填写来自该主机的第一个非环回 IPv4",
+  "pasvIpRequired": "套用前请填写 PASV 公网 IP（NAT／云主机）。可探测或手动输入。",
+  "vsftpdFailedGeneric": "vsftpd failed. Open the Service tab for live settings and journal.",
+  "stateFailed": "Failed to start"
 }

package/locales/zh-CN/hostBrowse.json

@@ -82,6 +82,8 @@
   },
   "home": "主頁",
   "bookmark": "書籤",
+  "bookmarkAdd": "加入或移除書籤",
+  "bookmarkList": "書籤清單",
   "bookmarks": "書籤",
   "history": "瀏覽記錄",
   "bookmarkToggled": "已更新書籤",
@@ -124,5 +126,23 @@
   "mediaAudioLabel": "音频",
   "mediaAudioDesc": "可选自主机 Chrome 的桥接；可能需要解锁点击。",
   "mediaPolicyLabel": "策略",
-  "mediaPolicyDesc": "下载与自动播放遵循上方安全与下载设置。"
+  "mediaPolicyDesc": "下载与自动播放遵循上方安全与下载设置。",
+  "frameBlocked": "页面无法在面板框架内显示。",
+  "historyEmpty": "此工作阶段尚无浏览记录。",
+  "bookmarksEmpty": "尚未有书签。",
+  "closeSessionHint": "会清掉此浏览工作阶段的 Cookie；书签会保留。",
+  "envUnset": "未设置",
+  "envPanelValue": "面板：{{value}}",
+  "settingsNoSandboxWarn": "会关闭 Chromium 沙箱。只应在可信的 container 内使用。下次真实浏览器工作阶段才生效。",
+  "settingsDangerDlWarn": "允许经主机浏览器下载可执行文件与脚本。请确认确实需要。",
+  "settingsDangerConfirmTitle": "启用高风险浏览设置？",
+  "needUrl": "请先在上方输入网址开始会话。",
+  "envColVar": "变量",
+  "envColHost": "主机进程",
+  "envColPanel": "面板设置",
+  "envColEffective": "生效值",
+  "engineBrowserNeedChrome": "Real browser (Chrome not installed)",
+  "egressHint": "The target site sees this server’s outbound address ({{host}}), not your laptop. Cookies stay in the server session jar.",
+  "closeNoSession": "No session yet",
+  "resumeHintDetail": "Resume previous session ({{count}} tabs) · {{url}} · {{when}}"
 }

package/locales/zh-CN/listToolbar.json

@@ -8,5 +8,6 @@
   "activeFilters": "已应用 {{count}} 个筛选",
   "noResults": "无匹配结果",
   "noResultsHint": "试试其他关键词，或清除筛选。",
-  "searching": "搜索中…"
+  "searching": "搜索中…",
+  "emptyChip": "No items in this filter"
 }

package/locales/zh-CN/login.json

@@ -10,5 +10,10 @@
   "totpLabel": "双重验证码",
   "totpHint": "Authenticator 应用中的 6 位数字",
   "submitting": "登录中…",
-  "sessionExpired": "登录已失效，请重新登录"
+  "sessionExpired": "登录已失效，请重新登录",
+  "newPassword": "新密码",
+  "newPasswordAgain": "再次输入新密码",
+  "changePassword": "更改密码",
+  "passwordMismatch": "两次输入的密码不一致",
+  "passwordChanged": "密码已更新"
 }

package/locales/zh-CN/logs.json

@@ -108,8 +108,8 @@
   "lines": "{{n}} 行",
   "followingSseDyn": " · 跟随中{{sse}}",
   "ipBan": "IP → 封禁",
-  "vacuumNote": "释放 systemd-journal 磁盘。无 EXECUTE 会 blocked，不假成功。",
-  "vacuumTime": "Vacuum 时间",
+  "vacuumNote": "释放 systemd-journald 占用的磁盘。没有系统变更权限时会封锁，不会假装成功。",
+  "vacuumTime": "依保留时间清理",
   "vacuumHint": "建议保留 ≥7 日；操作后重新探测磁盘用量。",
   "logrotateStatus": "系统 logrotate 状态（只读探测）",
   "logrotateMissing": "无 status 档或不可读 — 可于服务矩阵检查 logrotate 套件",
@@ -117,13 +117,13 @@
   "relatedOpsDesc": "日志观测 vs 攻击应变分工",
   "scLogsLine": "观测 journal／文件／项目",
   "scProtLine": "攻击应变、自动 ban（点 IP）",
-  "journalVacuumTitle": "Journal 清理（vacuum）",
+  "journalVacuumTitle": "清理 journald 磁盘",
   "journalSection": "杂志",
-  "sseLabel": "上证所",
-  "logrotateLabel": "logrotate",
+  "sseLabel": "SSE",
+  "logrotateLabel": "对数旋转",
   "srcNginx": "nginx",
   "srcSsh": "ssh",
-  "srcFail2ban": "fail2ban",
+  "srcfail2ban": "fail2ban",
   "srcAuthLog": "验证日志",
   "srcNginxError": "nginx 错误",
   "srcLetsEncrypt": "让我们加密",
@@ -131,5 +131,34 @@
   "groupVarLog": "/var/log",
   "prioErr": "错误+",
   "prioWarn": "警告+",
-  "prioInfo": "信息+"
+  "prioInfo": "信息+",
+  "srcFail2ban": "fail2ban",
+  "vacuumSize": "限制至 500 MB",
+  "logrotateNoStatus": "尚未有 logrotate 状态档（从未跑过时属常见）。",
+  "autoVacuumOff": "自动清理未启用。启用前时间设定不会执行。",
+  "aboutAllowlist": "探索只可读允许清单内的 journal 单元与 /var/log 路径，不会提供任意主机路径。",
+  "aboutCustomPath": "请在「设置」加入自定义路径（仅限 /var/log 或 /run/log），再到「探索」开启。",
+  "noRowsInWindow": "该时间窗口内没有记录",
+  "showInactiveUnits": "显示非活动单位",
+  "sseNeedFollow": "先开启关注——SSE仅用于实时尾随",
+  "vacuumNeedRetention": "请先填写保留时间（例如 14d）",
+  "vacuumNeedConfirm": "需确认 — 会删除旧 journal 日志",
+  "vacuumSizeNeedConfirm": "需确认 — 会限制 journal 磁盘用量",
+  "vacuumSizeAlreadyBelow": "目前用量已低于上限，此操作通常无动作",
+  "vacuumSizeNoopDesc": "journal 已低于 500 MB。仍会执行 vacuum --size=500M，通常不会删除任何内容。",
+  "journalDiskHint": "目前 systemd-journald 用量（作用中 journal）。不含 /var/log 下的轮替档。",
+  "varLogDiskHint": "/var/log 的估算用量（含轮替档）。",
+  "queryFirst": "请先查询",
+  "projectSourcesTitle": "{{n}} 个来源（文件 + journal）",
+  "logrotatePath": "小路",
+  "logrotateLast": "上次旋转",
+  "logrotateExpand": "显示另外 {{n}} 个",
+  "logrotateCollapse": "显示更少",
+  "logrotateVersion": "状态版本 {{v}}",
+  "errorsWindowHint": "Recent errors from the last overview probe (not live-updating when you switch tabs)",
+  "sourceCount": "{{shown}} shown",
+  "sourceUnavailable": "This source has not produced a log yet",
+  "sourceNoLog": "No log yet",
+  "exportJsonl": "JSONL export",
+  "sseLive": " (live stream)"
 }

package/locales/zh-CN/metrics.json

@@ -128,5 +128,40 @@
   "usageNoteFull": "用量来自本机 du（非估算）。配额为控制面 soft limit；硬 setquota 需「套用限制到系统」。",
   "sseNeedLogin": "未登录，无法开启 SSE",
   "sseSessionExpired": "未登录或 session 失效，无法开启 SSE",
-  "sseHttpError": "流 HTTP {{status}}"
+  "sseHttpError": "流 HTTP {{status}}",
+  "colFilesystem": "文件系统",
+  "colMount": "挂载点",
+  "colSize": "容量",
+  "colUsed": "已用",
+  "colAvail": "可用",
+  "colUsePct": "使用率",
+  "colHome": "主目录",
+  "usageNoteLink": "配额是控制面软上限。要套用硬限制请到专案「隔离」分页。",
+  "alertsBuiltinOnly": "仅内置 CPU/内存/磁盘阈值。没有电子邮件、网络钩子或 Slack 通道。",
+  "lastEvaluated": "最后检查",
+  "shareNoQuotaHint": "未设配额，故无占比。请到项目「隔离」分页设定配额。",
+  "setQuotaLink": "设定配额",
+  "unusualHome": "非标准路径",
+  "unusualHomeHint": "不是 /home/... 项目主页。规范隔离是 /home/ysk-server-{id}。",
+  "protectedPid": "无法从面板发出 PID 1 / init / systemd 信号",
+  "sigTermTitle": "发送SIGTERM（要求进程退出）",
+  "sigKillTitle": "发送SIGKILL（强制杀死——无法被捕获）",
+  "batchTerm": "TERM",
+  "batchKill": "杀",
+  "rawTopLabel": "原始上衣（未翻译）",
+  "followSseLabel": "关注（直播）",
+  "alertsReadOnly": "仅内置 CPU/内存/磁盘阈值。没有电子邮件、网络钩子或 Slack 通道。",
+  "alertsGoNotifications": "打开通知中心",
+  "lastCheck": "最后检查",
+  "rawTopHint": "未翻译的 top(1) 输出",
+  "load1m": "Load 1m",
+  "uptime": "Uptime",
+  "filterCpu5": "≥5% CPU",
+  "filterMem5": "≥5% memory",
+  "signalHint": "Select a process, then send TERM or KILL.",
+  "signalFromRow": "Select this process for TERM / KILL",
+  "selectForSignal": "Select",
+  "forceKillTitleNamed": "KILL PID {{pid}} ({{cmd}})?",
+  "sendSigTitleNamed": "Send TERM to PID {{pid}} ({{cmd}})?",
+  "controlPlaneNoSignal": "The control-plane process cannot be signalled"
 }

package/locales/zh-CN/migrate.json

@@ -66,6 +66,10 @@
   "restartApiHint": "若刚部署新版本，请重启 API（",
   "afterRestart": "）后再按「刷新」。",
   "inventoryWarnings": "盘点警告（{{count}}）",
+  "orphanHomesHint": "孤立项目主目录（store 无对应）。确认无用途后再删。",
+  "orphanRemove": "删除孤立主目录",
+  "orphanRemoveTitle": "删除此孤立项目主目录？",
+  "orphanRemoveDesc": "将永久删除磁盘上的 {{path}}。这不是 store 内项目。需 YSK_EXECUTE=1。",
   "moreWarnings": "…另有 {{n}} 則",
   "authPassword": "root 密码（安装临时密钥后改用 key）",
   "authIdentity": "SSH 身份庫 identityId",
@@ -78,5 +82,14 @@
   "dryRunOnlyDesc": "· 只做盘点 + 预检，不 rsync、不写目标",
   "executeNote": "本机需 YSK_EXECUTE=1 且以 root 执行 API。迁移完成后请改 DNS A/AAAA，并检查雲防火墙与邮件 PTR。",
   "dnsCutover": "DNS cutover（需人工）",
-  "dnsCutoverDesc": "将下列主机名的 A / AAAA 指到新机公网 IP；并确认 80/443/25/587 等防火墙与邮件 rDNS。"
+  "dnsCutoverDesc": "将下列主机名的 A / AAAA 指到新机公网 IP；并确认 80/443/25/587 等防火墙与邮件 rDNS。",
+  "orphanRemovePhrase": "请输入 DELETE 确认。",
+  "orphanRemoveNeedConfirm": "需确认",
+  "passwordNotStored": "Password is used for this SSH session only and is not saved on disk.",
+  "overwriteDanger": "Overwrite will replace existing YSK data on the target. This cannot be undone from the panel.",
+  "orphanBackupFirst": "Back up first (open Backups)",
+  "expandAllWarnings": "Show all {{n}} warnings",
+  "collapseWarnings": "Show fewer",
+  "inventoriedWarn": "Inventoried · {{n}} warnings",
+  "orphanMtime": "Last modified {{at}}"
 }

package/locales/zh-CN/nav.json

@@ -53,7 +53,9 @@
     "runtimes": "运行环境",
     "security": "安全",
     "system": "系统",
-    "ai": "人工智能"
+    "ai": "人工智能",
+    "validators": "验证者节点",
+    "containers": "容器"
   },
   "java": "Java",
   "kotlin": "Kotlin",
@@ -72,6 +74,11 @@
   "bookmarkPinned": "已固定",
   "bookmarkAdded": "已固定到侧栏",
   "bookmarkRemoved": "已从侧栏移除",
-  "btTracker": "BT追踪器",
-  "support": "支持"
+  "btTracker": "BT Tracker",
+  "support": "支持",
+  "noAccessTitle": "没有权限",
+  "noAccessDesc": "你的角色不能开启此页。如需使用，请向管理员申请。",
+  "backToDashboard": "返回仪表板",
+  "validators": "验证者节点 (Beta)",
+  "docker": "Docker"
 }

package/locales/zh-CN/network.json

@@ -11,7 +11,7 @@
   "tabs": {
     "ifaces": "接口",
     "routes": "路由",
-    "dns": "DNS",
+    "dns": "域名系统",
     "advanced": "高级",
     "about": "说明",
     "realip": "真实 IP / CDN"
@@ -103,6 +103,8 @@
   "applyDnsNotes": "套用后会 nmcli connection modify + up；短暂断线属正常。stub 127.0.0.53 不会写入（本机 resolved 内部用）。",
   "testResolve": "测试解析",
   "loadRaw": "加载 raw 输出",
+  "hideRaw": "隐藏 raw 输出",
+  "rawLoadedAt": "加载时间 {{time}}",
   "confirmDown": "确认 Down",
   "defaultRouteDownWarn": "此接口是默认路由出口，down 后可能无法连上管理面板。",
   "deleteDefaultMayDrop": " — 删除 default 可能断线。",
@@ -135,8 +137,29 @@
       "azure_frontdoor": "蔚蓝前门",
       "gcore": "国核CDN",
       "custom": "自定义代理"
-    }
+    },
+    "needProvider": "请先选择 CDN 供应商，才可更新 IP 列表。",
+    "spoofWarn": "信任错误的 CIDR 会让客户端伪造 X-Forwarded-For／CDN 标头，假装成真实来源 IP。"
   },
   "linkUp": "向上",
-  "linkDown": "断开"
+  "linkDown": "断开",
+  "linkDownTitle": "將 {{name}} 離線",
+  "linkDownNeedConfirm": "需輸入介面名稱確認",
+  "persistNmHint": "可持久化代表经 NetworkManager 写入后，重启后设定仍然有效。",
+  "deleteDefaultPanelWarn": "删除默认路由可以删除此面板会话。键入 DEFAULT 进行确认。",
+  "typeDefaultToConfirm": "输入 DEFAULT 进行确认",
+  "deleteDefaultNeedConfirm": "需确认 — 请输入 DEFAULT（可能中断本面板）",
+  "deleteRouteNeedConfirm": "需确认",
+  "nmUnavailable": "NetworkManager 未运行 — 只能添加实时路由",
+  "defaultRouteDownNeedName": "这是默认路由出口。输入接口名称进行确认 - 面板可能会断开连接。",
+  "linkDownDefault": "Down default route",
+  "loopbackImmutable": "Loopback cannot be changed",
+  "operUnknownHint": "Kernel did not report UP/DOWN (common for lo). The interface is still usable.",
+  "statUp": "Up",
+  "oper": {
+    "up": "Up",
+    "down": "Down",
+    "unknown": "Unknown",
+    "other": "Other"
+  }
 }

package/locales/zh-CN/nginx.json

@@ -66,7 +66,7 @@
   "siteSettings": "站点设置",
   "saveApply": "保存并应用",
   "settingsSaved": "已保存",
-  "setGzip": "Gzip",
+  "setGzip": "压缩包",
   "setShowVersion": "显示版本号",
   "setShowVersionDesc": "关 = server_tokens off",
   "setHttp2": "HTTP/2（SSL）",

package/locales/zh-CN/notFound.json

@@ -0,0 +1,6 @@
+{
+  "title": "找不到页面",
+  "body": "{{path}} 处没有面板页面。",
+  "hint": "未知 URL 不再将您发送至仪表板。",
+  "home": "仪表板"
+}