ysk-server-shared 1.0.0 → 1.1.0

package/locales/zh-HK/errors.json

@@ -25,7 +25,7 @@
     "adminTotpStrict": "管理員必須先啟用 雙重驗證（strict）。請用已啟用 雙重驗證 的帳號，或關閉 strict 設定。",
     "totpReplay": "驗證碼已使用，請等下一個週期",
     "totpRequired": "需要有效的雙重驗證碼",
-    "mustEnrollTotp": "管理員政策：請立即啟用雙重驗證",
+    "mustEnrollTotp": "政策：請立即啟用雙重驗證",
     "userNotFound": "找不到用戶",
     "totpSetupNeedReauth": "設定 雙重驗證 需要重新輸入密碼（或近期 step-up 驗證碼）",
     "totpBeginFirst": "請先開始設定 雙重驗證",
@@ -37,7 +37,9 @@
     "sessionExpired": "登入已失效，請重新登入",
     "sessionIdle": "閒置逾時，請重新登入",
     "totpNotEnabled": "未啟用 雙重驗證",
-    "totpSecretNoDataDir": "TOTP secret 已加密但未設定 dataDir"
+    "totpSecretNoDataDir": "TOTP secret 已加密但未設定 dataDir",
+    "mustChangePassword": "請先設定新密碼才可繼續",
+    "policyNeedsOwn2fa": "請先為本帳號啟用 2FA，並以驗證碼確認，才可要求其他人啟用 2FA"
   },
   "http": {
     "notFoundRoute": "找不到：{{method}} {{path}}",
@@ -47,7 +49,8 @@
     "unprocessable": "操作無法完成（伺服器拒絕）",
     "requestFailed": "請求失敗（{{status}}）",
     "jsonInvalid": "JSON 無效",
-    "internal": "內部錯誤"
+    "internal": "內部錯誤",
+    "payloadTooLarge": "請求內容過大"
   },
   "YSK_HOST_BROWSE_SSRF": "主機瀏覽已被安全政策攔截",
   "YSK_HOST_BROWSE_SESSION": "主機瀏覽工作階段不存在或已過期",

package/locales/zh-HK/fail2ban.json

@@ -8,10 +8,10 @@
   "startService": "啟動服務",
   "notInstalled": "fail2ban 尚未安裝",
   "toolHintPrefix": "底層工具：",
-  "toolHintBody": "fail2ban = 掃 日誌 後",
-  "toolHintTemp": "臨時",
-  "toolHintBody2": "封鎖 · 攻擊應變請用",
-  "toolHintUfw": "UFW = 埠／永久規則",
+  "toolHintBody": "fail2ban 會掃日誌後臨時封鎖。攻擊應變請用",
+  "toolHintTemp": "",
+  "toolHintBody2": "",
+  "toolHintUfw": "負責埠與永久規則。",
   "tabs": {
     "bans": "封鎖列表",
     "whitelist": "白名單",
@@ -35,12 +35,16 @@
   "emptyBansTitle": "無封鎖中 IP",
   "emptyBansDesc": "或無權讀取 fail2ban-客戶端",
   "ignoreipTitle": "ignoreip 白名單",
-  "ignoreipDesc": "永不被 封鎖 的 IP（管理檔 + 可選 live fail2ban-客戶端）。建議加入你的辦公／家居 IP。",
+  "ignoreipDesc": "永不被封鎖的 IP（管理檔 + 可選 live fail2ban-client）。建議加入你的辦公／家居 IP。",
+  "whitelistEmptyWarn": "白名單為空，jail 可能把你自己封鎖。套用 ignoreip 前請先加入登入 IP。",
+  "suggestIgnoreLogin": "你目前的登入 IP {{ip}}",
+  "applyIgnoreEmptyWarn": "白名單為空時套用會清空 ignoreip",
+  "applyIgnoreNeedConfirm": "會重寫 jail ignoreip 並重新載入 fail2ban",
   "addIp": "新增 IP",
   "addWhitelist": "加入白名單",
   "applyPolicyIgnoreip": "套用策略（含 ignoreip）",
   "applyIgnoreipOk": "已把 ignoreip 寫入 jail.local 並套用",
-  "ignoreipHint": "無 系統變更權限 時只寫管理檔（apply_status=已寫入）；「套用策略」會重建 jail.local 的 ignoreip= 行並 重新載入。",
+  "ignoreipHint": "沒有系統變更權限時只寫面板檔。套用策略會重建 jail.local 的 ignoreip 並重新載入。",
   "whitelistTitle": "白名單 ({{count}})",
   "whitelistRemoved": "已移除白名單",
   "remove": "移除",
@@ -78,5 +82,26 @@
     "reload": "已重新載入 fail2ban",
     "restart": "已重啟 fail2ban",
     "stop": "已停止 fail2ban"
-  }
+  },
+  "statWhitelist": "白名單",
+  "invalidIp": "請輸入有效的 IPv4、IPv6 或 CIDR。",
+  "whitelistPendingApply": "已寫入面板名單。請按「套用策略」才會寫入 jail.local。",
+  "ignoreipFile": "dataDir/fail2ban/ignoreip.txt",
+  "jailsTabHint": "顯示作用中 Jail 狀態。要開關 Jail 請到「策略」分頁。",
+  "colJail": "監獄",
+  "colEnabled": "開啟",
+  "serviceStateLine": "單元 {{unit}} · {{state}} · 開機 {{boot}}",
+  "jail": {
+    "sshd": "遠端登入暴力破解",
+    "nginxHttpAuth": "Nginx HTTP 驗證",
+    "nginxBotsearch": "Nginx 掃描／機械人探測",
+    "nginxBadbots": "Nginx 已知惡意機械人",
+    "nginxLimitReq": "Nginx 限速 Jail",
+    "postfix": "Postfix 郵件暴力破解",
+    "dovecot": "Dovecot 郵件登入",
+    "recidive": "累犯"
+  },
+  "cannotBanSelf": "這是本機或你的登入 IP — 應加入 ignoreip，不要封鎖",
+  "suggestIgnoreHint": "建議的管理 IP（先寫入面板檔，套用政策後才生效）：",
+  "suggestIgnoreAdd": "加入 {{ip}}"
 }

package/locales/zh-HK/files.json

@@ -1,5 +1,7 @@
 {
   "pillFiles": "{{count}} 檔",
+  "pillTrash": "回收桶 {{count}} 項",
+  "pillSpace": "已用 {{used}}",
   "statFiles": "檔案",
   "statFolders": "資料夾",
   "statUsage": "用量",
@@ -58,11 +60,15 @@
   "selectAllAria": "全選",
   "selectAll": "全選",
   "folder": "資料夾",
+  "dirNamedLikeFile": "（資料夾殘留；名稱像檔案）",
   "dropToUpload": "放開以上傳",
   "trashTitle": "回收桶 ({{count}})",
   "trashDesc": "刪除的檔案可還原或永久清除",
   "emptyTrash": "清空回收桶",
+  "emptyTrashTitle": "清空回收桶？",
+  "emptyTrashDesc": "回收桶內所有檔案會永久刪除，無法還原。",
   "emptyTrashDone": "已清空回收桶",
+  "purgeForeverDesc": "此檔案會永久刪除，無法還原。",
   "colOrigPath": "原路徑",
   "colDeletedAt": "刪除時間",
   "restore": "還原",
@@ -89,12 +95,15 @@
   "enabledMount": "已啟用 · {{path}}",
   "notEnabled": "未啟用",
   "disable": "停用",
+  "webdavAlreadyOff": "WebDAV 已關閉",
   "webdavDisabled": "已停用 WebDAV",
   "webdavEnabledNoEcho": "已啟用（密碼不會再次顯示；需要時請重新簽發）",
   "webdavDefaultOff": "預設關閉 — 按「啟用並簽發權杖」開始",
+  "webdavAfterEnable": "啟用 WebDAV 並簽發權杖後才可用。",
   "webdavOn": "已啟用",
   "webdavOff": "已關閉",
   "webdavTokenId": "權杖 #{{id}}",
+  "webdavTokenInactive": "已停用，權杖 #{{id}} 不生效",
   "webdavUpdated": "更新於 {{at}}",
   "webdavTokenOnceTitle": "請立即複製密碼",
   "webdavTokenOnceHint": "此密碼只顯示一次；關掉此頁後無法再查看。",
@@ -115,7 +124,7 @@
   "webdavClientsDesc": "常見掛載方式（HTTPS 建議；自簽憑證需在客戶端信任）",
   "webdavClientFinder": "macOS 查找器",
   "webdavClientFinderHint": "前往 → 連接伺服器…（⌘K），貼上 URL，用戶 ysk，密碼為權杖。",
-  "webdavClientWin": "Windows",
+  "webdavClientWin": "視窗",
   "webdavClientWinHint": "此電腦 → 對應網絡磁碟機 → 選擇「使用其他認證」；或用 Cyberduck / WinSCP（WebDAV）。",
   "webdavNotesTitle": "注意事項",
   "webdavNote1": "WebDAV 對應公用檔案根，不是整個主機檔案系統。",
@@ -186,6 +195,9 @@
   "movedToTrash": "已移至回收桶",
   "moveToTrashTitle": "移至回收桶？",
   "moveToTrashDesc": "將刪除 {{count}} 個項目（可於回收桶還原）",
+  "deleteMore": "，以及另外 {{n}} 項",
+  "unshareTitle": "撤銷此分享？",
+  "unshareDesc": "撤銷 {{name}} 的連結（{{url}}）。連結會立即失效。",
   "preview": "預覽",
   "imagePreviewNeedLogin": "圖片預覽需要已登入；請改用下載",
   "pdfDownloadHint": "PDF 請按下載開啟（需授權標頭）",
@@ -239,7 +251,7 @@
   "shareExpire30d": "30 日",
   "shareExpireCustom": "自訂…",
   "shareExpireAt": "到期時間",
-  "shareExpireInvalid": "請選擇未來嘅日期時間",
+  "shareExpireInvalid": "請選擇未來的日期時間",
   "shareExpiresAt": "到期 {{at}}",
   "colExpires": "到期",
   "pdfInlineHint": "若瀏覽器未能內嵌顯示 PDF，請下載查看。",
@@ -293,7 +305,7 @@
   "shareBtStats": "BitTorrent 狀態",
   "btSeeds": "種子",
   "btLeechers": "下載者",
-  "btPeers": "Peers",
+  "btPeers": "同行",
   "btUploadSpeed": "上傳速度",
   "btDownloadSpeed": "下載速度",
   "btUploaded": "已上傳",
@@ -308,7 +320,7 @@
   "btError": "做種錯誤",
   "publicShareMethod": "請選擇下載方式",
   "publicShareDirect": "直接下載",
-  "publicShareBt": "BitTorrent",
+  "publicShareBt": "BT",
   "openBtTracker": "開啟 BT Tracker",
   "publicShareBtInBrowser": "在瀏覽器以 WebTorrent 下載",
   "publicShareBtProgress": "已下載 {{pct}}% · {{peers}} 個 peers · ↓ {{down}} · ↑ {{up}}",
@@ -316,5 +328,35 @@
   "publicShareBtFailed": "WebTorrent 失敗：{{detail}}",
   "publicShareBtNeedMagnet": "此分享沒有 magnet 連結",
   "publicShareBtUnsupported": "此瀏覽器無法執行 WebTorrent；請改用 magnet 或 .torrent",
-  "btNone": "—"
+  "btNone": "—",
+  "uploadStatusSkipped": "已略過",
+  "uploadStatusCancelled": "已取消",
+  "conflict": {
+    "titleFile": "已有名為「{{name}}」的項目",
+    "titleFolder": "已有名為「{{name}}」的資料夾",
+    "descFile": "請選擇處理方式。在選擇「取代」之前不會覆寫現有檔案。",
+    "descFolder": "請選擇處理方式。「合併」會保留現有資料夾，再處理其中的檔案。",
+    "incoming": "即將加入",
+    "existing": "已在此處",
+    "kindFile": "檔案",
+    "kindFolder": "資料夾",
+    "skip": "略過",
+    "skipHint": "不加入此項目",
+    "keepBoth": "兩者都保留",
+    "keepBothHint": "將新項目存成 {{name}}",
+    "replace": "取代",
+    "replaceHint": "覆寫現有檔案。可以時會保留版本快照。",
+    "replaceFolderHint": "覆寫資料夾內的同名檔案，其餘檔案會保留。",
+    "merge": "合併",
+    "mergeHint": "保留現有資料夾，並將新檔案加入其中",
+    "applyAll": "套用到其餘所有撞名",
+    "applyAllHint": "此次拖放或複製／移動的其餘項目都用同一做法",
+    "cancelRest": "取消其餘項目",
+    "progress": "第 {{current}}／{{total}} 項",
+    "typeMismatch": "此處已有名為「{{name}}」的{{destKind}}，即將加入的是{{incomingKind}}。",
+    "skipped": "已略過",
+    "cancelled": "已取消"
+  },
+  "webdavReissueUnchanged": "重新簽發後權杖編號未變——寫入可能未生效，請再試一次。",
+  "webdavDisableFailed": "停用後狀態仍為啟用——寫入可能未生效，請再試一次。"
 }

package/locales/zh-HK/firewall.json

@@ -20,6 +20,8 @@
   "statAllow": "允許",
   "statDeny": "拒絕",
   "statDefaultIn": "入站預設",
+  "defaultNotApplied": "未套用（UFW 關閉）",
+  "ufwOffHint": "UFW 關閉時入站預設不會生效",
   "executeOn": "開",
   "executeOff": "關",
   "ufwDisabled": "已停用 UFW",
@@ -28,8 +30,9 @@
   "enableUfw": "啟用 UFW",
   "notInstalled": "UFW 尚未安裝",
   "toolHintPrefix": "底層工具：",
-  "toolHintBody": "UFW = 埠／永久規則 · 攻擊應變與自動 封鎖 請用",
-  "toolHintFail2ban": "fail2ban = 日誌臨時 封鎖",
+  "toolHintBody": "UFW 管埠同永久規則。攻擊應變與自動封鎖請用防護中心。",
+  "toolHintfail2ban": "日誌臨時封鎖",
+  "toolHintFail2ban": "日誌臨時封鎖",
   "executeOffHint": "系統變更未開 — 可看狀態，改規則需 管理員權限與系統變更權限已開啟",
   "tabs": {
     "rules": "規則表",
@@ -88,7 +91,8 @@
   "deleteRuleTitle": "刪規則 #{{n}}？",
   "deleteRuleDesc": "將從 UFW 移除該規則編號（需系統變更權限）。",
   "servicesTitle": "受管服務埠",
-  "servicesHint": "YSK 管理服務嘅期望網絡暴露。開服務時會自動同步呢啲規則。",
+  "servicesHint": "YSK 管理服務的預期網絡暴露。開啟服務時會自動同步這些規則。",
+  "servicesUfwOff": "UFW 已關閉。此列表只是預期暴露，並非主機上已強制執行的規則。",
   "servicesEmpty": "尚未有服務暴露資料",
   "servicesEmptyDesc": "啟動受管服務（Web、FTPS、VPN、資料庫…）後會出現在此列表。",
   "servicesManualHint": "手動開埠 chips 在「埠」分頁 — 建議在此管理，規則會帶 ysk-svc 標記。",
@@ -98,5 +102,10 @@
   "colPorts": "埠",
   "colSync": "狀態",
   "synced": "已同步",
-  "syncNow": "立即同步"
+  "syncNow": "立即同步",
+  "disableConfirmTitle": "停用 UFW？",
+  "disableConfirmDesc": "主機防火牆將停止過濾流量。若主機在公眾網絡上，SSH 與面板可能直接暴露。",
+  "disableConfirmConsequence": "現有允許／拒絕規則仍會保留，但要重新啟用 UFW 才會生效。",
+  "desiredOnlyUfwOff": "設定：{{mode}} · UFW 關閉（未套用）",
+  "syncNotApplied": "UFW 關閉 · 未套用"
 }

package/locales/zh-HK/ftp.json

@@ -61,7 +61,13 @@
   "listenPortHint": "預設 21；若防火牆另開埠請一併放行",
   "customPort": "自訂埠",
   "ipStack": "IP 棧",
-  "ipStackHint": "vsftpd 多數版本 listen 與 listen_ipv6 互斥；IPv6 用 listen_ipv6=YES",
+  "ipStackHint": "vsftpd 多數版本 listen 與 listen_ipv6 互斥；IPv6 用 listen_ipv6=YES。",
+  "listenConflictLive": "現行 vsftpd.conf 為 listen={{v4}}、listen_ipv6={{v6}} — 兩者同時 YES 無法啟動。",
+  "listenConflictNeedFix": "請先修正 listen／listen_ipv6（不可同時 YES），再套用。",
+  "fixListenIpv4": "只用 IPv4（listen=YES，listen_ipv6=NO）",
+  "liveFileValue": "檔案現值：{{value}}",
+  "startBlockedFailed": "服務已失敗 — 請先套用有效設定再啟動",
+  "ftpsNeedCert": "請先選擇憑證網域",
   "ipv4Only": "僅 IPv4",
   "ipv6Mapped": "IPv6（可 mapped）",
   "bannerHint": "連線成功後客戶端可見的歡迎字串",
@@ -73,7 +79,10 @@
   "openFirewallPage": "打開防火牆頁",
   "customEnd": "自訂結束",
   "pasvPublicIp": "PASV 公網 IP",
+  "detectPublicIp": "偵測公網 IP",
+  "detectPublicIpTitle": "填入本機第一個非回環 IPv4",
   "pasvPublicIpHint": "NAT／雲主機可填公網 IP；本機可留空",
+  "pasvIpRequired": "套用前請填 PASV 公網 IP（NAT／雲主機）。可偵測或人手輸入。",
   "optionalEmpty": "（可留空）",
   "securityTitle": "安全設定",
   "securityDesc": "TLS、寫入權限與 chroot；變更後請套用並重啟才會生效",
@@ -95,7 +104,7 @@
   "opsResult": "操作結果",
   "saved": "已儲存",
   "accountsList": "帳戶列表",
-  "accountsListDesc": "建立後按「套用」同步到 vsftpd。服務未裝時請先用上方安裝，再到",
+  "accountsListDesc": "建立後按「套用」同步到 vsftpd。若尚未安裝，請到「軟件」分頁安裝 vsftpd。",
   "startService": "啟動。",
   "createAccountPlus": "+ 建立帳戶",
   "noFtpAccounts": "尚未有 FTP 帳戶",
@@ -131,5 +140,11 @@
   "sftpRegister": "登記公鑰",
   "sftpAddedAt": "新增於 {{time}}",
   "sftpTechSummary": "技術細節（進階）",
-  "sftpTechNote": "公鑰會寫入管理路徑"
+  "sftpTechNote": "公鑰會寫入管理路徑",
+  "filterProject": "只顯示此專案的 FTP 帳戶",
+  "clearProjectFilter": "顯示全部帳戶",
+  "vsftpdFailedHint": "vsftpd 服務失敗。請到服務分頁查看設定與日誌（listen 與 listen_ipv6 不可同時為 YES）。",
+  "vsftpdFailedGeneric": "vsftpd 服務失敗。請到服務分頁查看現行設定與日誌。",
+  "stateFailed": "啟動失敗",
+  "tabService": "服務"
 }

package/locales/zh-HK/hostBrowse.json

@@ -18,6 +18,7 @@
   "viaHost": "經主機",
   "emptyTitle": "主機代瀏覽",
   "emptyBody": "請輸入網址。DNS、TLS 與出站由本伺服器處理，而非你的桌面瀏覽器。Cookie 僅存於伺服器 jar。",
+  "needUrl": "請先於上方輸入網址開始工作階段。",
   "ssrfBlocked": "已由安全政策攔截（SSRF／模式）",
   "loadFailed": "主機擷取失敗",
   "sessionReady": "工作階段就緒",
@@ -36,12 +37,15 @@
   "engineBrowser": "真實瀏覽器",
   "engineSwitchHint": "切換引擎會開啟新工作階段。",
   "needChrome": "真實瀏覽器需要系統 Chrome／Chromium（或於設定指定路徑）。否則請使用代理模式。",
+  "engineBrowserNeedChrome": "真實瀏覽器（未安裝 Chrome）",
+  "egressHint": "目標站會看見此伺服器的出站位址（{{host}}），不是你本機。Cookie 留在伺服器工作階段。",
   "needChromeFallback": "Chrome 不可用 — 已切換至代理引擎。",
   "liveError": "即時串流失敗",
   "liveWaiting": "正在連線至主機瀏覽器…",
   "tabSettings": "設定",
   "softwareNeeded": "真實瀏覽器引擎需要 Chromium／Chrome",
-  "softwareHint": "一鍵經 apt 安裝發行版 Chromium。若已安裝 Google Chrome 亦會自動偵測。需要 root 與 YSK_EXECUTE=1。",
+  "softwareHint": "一鍵經 apt 安裝發行版 Chromium。若已安裝 Google Chrome 亦會自動偵測。需要超級用戶與系統變更權限。",
+  "closeNoSession": "尚未建立工作階段",
   "goInstallChrome": "前往軟件分頁",
   "settingsIntro": "以下面板設定會覆寫主機瀏覽相關環境變數。",
   "settingsEngine": "預設引擎",
@@ -82,6 +86,8 @@
   },
   "home": "主頁",
   "bookmark": "書籤",
+  "bookmarkAdd": "加入或移除書籤",
+  "bookmarkList": "書籤清單",
   "bookmarks": "書籤",
   "history": "瀏覽記錄",
   "bookmarkToggled": "已更新書籤",
@@ -90,6 +96,7 @@
   "mediaNote": "真實瀏覽器：視訊會串流到面板。在設定啟用音訊橋接即可聽到頁面聲音（需使用者操作）。",
   "isolationNote": "真實瀏覽器會建立臨時 Linux 用戶隔離 Chrome；離開頁面或逾時會結束並刪除該用戶。",
   "resumeHint": "可恢復上次瀏覽（{{count}} 個分頁）",
+  "resumeHintDetail": "可恢復上次瀏覽（{{count}} 個分頁）· {{url}} · {{when}}",
   "resume": "恢復",
   "resumeDismiss": "關閉",
   "resumeDone": "已恢復工作階段",
@@ -124,5 +131,18 @@
   "mediaAudioLabel": "音訊",
   "mediaAudioDesc": "可選用來自主機 Chrome 的橋接；可能需要解鎖點選。",
   "mediaPolicyLabel": "政策",
-  "mediaPolicyDesc": "下載與自動播放遵循上方安全與下載設定。"
+  "mediaPolicyDesc": "下載與自動播放遵循上方安全與下載設定。",
+  "frameBlocked": "頁面無法在面板框架內顯示。",
+  "historyEmpty": "此工作階段尚無瀏覽記錄。",
+  "bookmarksEmpty": "尚未有書籤。",
+  "closeSessionHint": "會清掉此瀏覽工作階段的 Cookie；書籤會保留。",
+  "envUnset": "未設定",
+  "envPanelValue": "面板：{{value}}",
+  "envColVar": "變數",
+  "envColHost": "主機程序",
+  "envColPanel": "面板設定",
+  "envColEffective": "生效值",
+  "settingsNoSandboxWarn": "會關閉 Chromium 沙箱。只應在可信的 container 內使用。下次真實瀏覽器工作階段才生效。",
+  "settingsDangerDlWarn": "允許經主機瀏覽器下載執行檔與腳本。請確認確實需要。",
+  "settingsDangerConfirmTitle": "啟用高風險瀏覽設定？"
 }

package/locales/zh-HK/listToolbar.json

@@ -8,5 +8,6 @@
   "activeFilters": "已套用 {{count}} 個篩選",
   "noResults": "無符合結果",
   "noResultsHint": "試下其他關鍵字，或者清除篩選。",
-  "searching": "搜尋中…"
+  "searching": "搜尋中…",
+  "emptyChip": "此篩選沒有項目"
 }

package/locales/zh-HK/login.json

@@ -1,5 +1,5 @@
 {
-  "title": "登入 YSK 伺服器",
+  "title": "登入 YSK Server",
   "subtitle": "伺服器控制台",
   "username": "用戶名",
   "password": "密碼",
@@ -10,5 +10,10 @@
   "totpLabel": "雙重驗證碼",
   "totpHint": "Authenticator 應用程式中的 6 位數字",
   "submitting": "登入中…",
-  "sessionExpired": "登入已失效，請重新登入"
+  "sessionExpired": "登入已失效，請重新登入",
+  "newPassword": "新密碼",
+  "newPasswordAgain": "再次輸入新密碼",
+  "changePassword": "更改密碼",
+  "passwordMismatch": "兩次輸入的密碼不一致",
+  "passwordChanged": "密碼已更新"
 }

package/locales/zh-HK/logs.json

@@ -80,7 +80,7 @@
   "retentionAlertsDesc": "清理 預設、系統日誌 磁碟告警、自動清理時間窗",
   "dailyNeedRoot": "每日（需要管理員權限 + 執行）",
   "customAllow": "自訂 allow 路徑",
-  "customAllowDesc": "僅 /var/日誌 或 /run/日誌 · 拒絕 .ssh、金鑰、/etc",
+  "customAllowDesc": "僅 /var/log 或 /run/log · 拒絕 .ssh、金鑰、/etc",
   "pathsCount": "{{n}} 條",
   "noCustomPaths": "尚未加入自訂路徑",
   "bookmarks": "書籤",
@@ -90,7 +90,7 @@
   "saveSettings": "儲存設定",
   "vacuumDaysQ": "清理 時間 {{days}}？",
   "vacuumSizeQ": "清理 大小 500M？",
-  "vacuumDesc": "系統日誌ctl 清理 會刪除舊日誌，不可復原。",
+  "vacuumDesc": "journalctl 清理會刪除舊日誌，不可復原。",
   "vacuumRequested": "已請求 清理",
   "vacuumSizeRequested": "已請求 清理 size",
   "scLogs": "觀測 系統日誌／檔案／專案",
@@ -108,8 +108,11 @@
   "lines": "{{n}} 行",
   "followingSseDyn": "· 跟隨中{{sse}}",
   "ipBan": "IP → 封禁",
-  "vacuumNote": "釋放 系統服務-系統日誌 磁碟。無 執行 會 已封鎖，不假成功。",
-  "vacuumTime": "清理 時間",
+  "vacuumNote": "釋放 systemd-journald 佔用的磁碟。沒有系統變更權限時會封鎖，不會假裝成功。",
+  "vacuumTime": "依保留時間清理",
+  "vacuumNeedRetention": "請先填寫保留時間（例如 14d）",
+  "vacuumNeedConfirm": "需確認 — 會刪除舊 journal 日誌",
+  "vacuumSizeNeedConfirm": "需確認 — 會限制 journal 磁碟用量",
   "vacuumHint": "建議保留 ≥7 日；操作後重新探測磁碟用量。",
   "logrotateStatus": "系統 logrotate 狀態（唯讀探測）",
   "logrotateMissing": "無 狀態 檔或不可讀 — 可於服務矩陣檢查 logrotate 套件",
@@ -117,19 +120,45 @@
   "relatedOpsDesc": "日誌觀測 vs 攻擊應變分工",
   "scLogsLine": "觀測 系統日誌／檔案／專案",
   "scProtLine": "攻擊應變、自動 封鎖（點 IP）",
-  "journalVacuumTitle": "系統日誌 清理（清理）",
-  "journalSection": "雜誌",
-  "sseLabel": "上證所",
+  "journalVacuumTitle": "清理 journald 磁碟",
+  "journalSection": "journal",
+  "sseLabel": "SSE",
   "logrotateLabel": "對數旋轉",
   "srcNginx": "nginx",
   "srcSsh": "ssh",
+  "srcfail2ban": "fail2ban",
   "srcFail2ban": "fail2ban",
   "srcAuthLog": "驗證日誌",
-  "srcNginxError": "nginx 錯誤",
-  "srcLetsEncrypt": "讓我們加密",
-  "groupJournal": "雜誌",
+  "srcNginxError": "Nginx 錯誤日誌",
+  "srcLetsEncrypt": "Let’s Encrypt 憑證日誌",
+  "groupJournal": "journal",
   "groupVarLog": "/var/log",
   "prioErr": "錯誤+",
   "prioWarn": "警告+",
-  "prioInfo": "資訊+"
+  "prioInfo": "資訊+",
+  "vacuumSize": "限制至 500 MB",
+  "logrotateNoStatus": "尚未有 logrotate 狀態檔（從未跑過時屬常見）。",
+  "autoVacuumOff": "自動清理未啟用。啟用前時間設定不會執行。",
+  "aboutAllowlist": "探索只可讀取允許清單內的 journal 單元與 /var/log 路徑，不會提供任意主機路徑。",
+  "aboutCustomPath": "請在「設定」加入自訂路徑（僅限 /var/log 或 /run/log），再到「探索」開啟。",
+  "noRowsInWindow": "此時間窗內無記錄",
+  "showInactiveUnits": "顯示未啟動的服務單元",
+  "sseNeedFollow": "請先開啟跟隨 — SSE 只用於即時尾隨",
+  "vacuumSizeAlreadyBelow": "目前用量已低於上限，此操作不會刪除任何內容",
+  "vacuumSizeNoopDesc": "journal 已低於 500 MB。確認後仍會執行 vacuum --size=500M，通常不會刪除任何內容。",
+  "journalDiskHint": "systemd-journald 目前用量（現行 journal）。不包括 /var/log 下已輪轉的檔案。",
+  "varLogDiskHint": "/var/log 估計用量（含已輪轉檔），屬約數。",
+  "queryFirst": "請先查詢",
+  "errorsWindowHint": "上次概覽探測的近期錯誤（切換分頁不會重算）",
+  "sourceCount": "顯示 {{shown}}",
+  "sourceUnavailable": "此來源尚未產生日誌",
+  "sourceNoLog": "尚無日誌",
+  "projectSourcesTitle": "{{n}} 個來源（檔案 + journal）",
+  "logrotatePath": "路徑",
+  "logrotateLast": "上次輪轉",
+  "exportJsonl": "匯出 JSONL",
+  "sseLive": "（即時串流）",
+  "logrotateExpand": "再顯示 {{n}} 項",
+  "logrotateCollapse": "收合",
+  "logrotateVersion": "狀態版本 {{v}}"
 }

package/locales/zh-HK/metrics.json

@@ -27,6 +27,15 @@
     "alerts": "告警"
   },
   "load": "負載",
+  "load1m": "負載 1 分鐘",
+  "uptime": "運行時間",
+  "filterCpu5": "≥5% CPU",
+  "filterMem5": "≥5% 記憶體",
+  "signalHint": "先勾選進程，再送 TERM 或 KILL。",
+  "signalFromRow": "選取此進程以便送訊號",
+  "selectForSignal": "選取",
+  "forceKillTitleNamed": "KILL PID {{pid}}（{{cmd}}）？",
+  "sendSigTitleNamed": "向 PID {{pid}}（{{cmd}}）送 TERM？",
   "min1": "1 分",
   "min5": "5 分",
   "min15": "15 分",
@@ -82,6 +91,8 @@
   "noProjectsDesc": "建立專案後可在此看真實 主目錄 用量",
   "usageNote": "用量來自本機 du（非估算）。配額為控制面 soft limit；硬 setquota 需「套用限制到系統」。",
   "thresholdAlerts": "閾值告警",
+  "alertsBuiltinOnly": "只有內建 CPU／記憶體／磁碟閾值。沒有電郵、webhook 或 Slack 渠道。",
+  "lastEvaluated": "上次檢查",
   "alertsOkTitle": "目前正常",
   "alertsOkDesc": "沒有記憶體／負載／磁碟閾值告警。",
   "cpu": "中央處理器",
@@ -98,6 +109,18 @@
   "selectAllAria": "全選篩選結果",
   "selectPidAria": "選取 PID {{pid}}",
   "controlPlane": "控制面",
+  "controlPlaneNoSignal": "不可對控制面進程送出訊號",
+  "protectedPid": "面板不可向 PID 1／init／systemd 發送訊號",
+  "sigTermTitle": "發送 SIGTERM（請進程自行結束）",
+  "sigKillTitle": "發送 SIGKILL（強制結束，無法攔截）",
+  "batchTerm": "TERM",
+  "batchKill": "殺",
+  "rawTopLabel": "原始 top（未翻譯）",
+  "followSseLabel": "跟隨（即時串流）",
+  "alertsReadOnly": "只有內建 CPU／記憶體／磁碟閾值。沒有電郵、webhook 或 Slack 渠道。",
+  "alertsGoNotifications": "前往通知中心",
+  "lastCheck": "上次檢查",
+  "rawTopHint": "未翻譯的 top(1) 輸出",
   "detailShort": "詳",
   "procUnavailable": "無法取得進程",
   "noProcData": "尚無進程資料",
@@ -116,10 +139,10 @@
   "reniceHint": "-20 最高優先 · 19 最低（需 執行）",
   "noData": "無資料",
   "mountsTitle": "磁碟 mounts ({{count}})",
-  "mountsDesc": "真實 df -P -B1（已過濾 tmpfs 等）",
+  "mountsDesc": "真實磁碟用量（已過濾暫存檔系統）",
   "noMounts": "無 mount 列表",
   "noMountsDesc": "df 不可用或被過濾。主磁碟仍見於概覽。",
-  "seeProjectUsage": "專案 主目錄 用量見「專案用量」分頁（真實 du · 共 {{size}}）",
+  "seeProjectUsage": "專案主目錄用量見「專案用量」分頁（真實 du · 共 {{size}}）",
   "measuringDu": "量測專案 主目錄（du）…",
   "projectUsageTitle": "專案磁碟用量 ({{count}})",
   "projectUsageDesc": "真實 du · 合計 {{total}} · {{at}}",
@@ -128,5 +151,17 @@
   "usageNoteFull": "用量來自本機 du（非估算）。配額為控制面 soft limit；硬 setquota 需「套用限制到系統」。",
   "sseNeedLogin": "未登入，無法開啟 SSE",
   "sseSessionExpired": "未登入或 工作階段 失效，無法開啟 SSE",
-  "sseHttpError": "串流 HTTP {{status}}"
+  "sseHttpError": "串流 HTTP {{status}}",
+  "colFilesystem": "檔案系統",
+  "colMount": "掛載點",
+  "colSize": "容量",
+  "colUsed": "已用",
+  "colAvail": "可用",
+  "colUsePct": "使用率",
+  "colHome": "主目錄",
+  "usageNoteLink": "配額是控制面軟上限。要套用硬限制請到專案「隔離」分頁。",
+  "shareNoQuotaHint": "未設配額，故無佔比。請到專案「隔離」分頁設定配額。",
+  "setQuotaLink": "設定配額",
+  "unusualHome": "非標準路徑",
+  "unusualHomeHint": "不是 /home/… 專案主目錄。標準隔離路徑為 /home/ysk-server-{id}。"
 }

package/locales/zh-HK/migrate.json

@@ -10,6 +10,7 @@
   "subtitle": "來源控制面 → 新機全量複製。完成後只改公網 IP／DNS，帳號、路徑與專案保持一致。",
   "inventorying": "盤點中",
   "inventoried": "已盤點",
+  "inventoriedWarn": "已盤點 · {{n}} 警告",
   "inventoryFailed": "盤點失敗",
   "pendingInventory": "待盤點",
   "projects": "專案",
@@ -38,6 +39,8 @@
   "authMethod": "認證方式",
   "rootPassword": "管理員 密碼",
   "notPersisted": "不會持久化",
+  "passwordNotStored": "密碼只用於今次 SSH，不會寫入磁碟。",
+  "overwriteDanger": "覆寫會取代目標機現有 YSK 資料，面板無法復原。",
   "outboundIdentity": "vault 內 外連 identity",
   "dryRun": "執行預檢（預覽試行）",
   "startMigrate": "開始整機遷移",
@@ -66,6 +69,16 @@
   "restartApiHint": "若剛部署新版本，請重啟 介面（",
   "afterRestart": "）後再按「重新整理」。",
   "inventoryWarnings": "盤點警告（{{count}}）",
+  "orphanHomesHint": "孤立專案主目錄（store 無對應）。確認無用途後先刪。",
+  "orphanRemove": "刪除孤立主目錄",
+  "orphanRemoveTitle": "刪除此孤立專案主目錄？",
+  "orphanRemoveDesc": "將永久刪除磁碟上的 {{path}}。這不是 store 內專案。需超級用戶與系統變更權限。",
+  "orphanRemovePhrase": "請輸入 DELETE 確認。",
+  "orphanRemoveNeedConfirm": "需確認",
+  "orphanBackupFirst": "請先到備份頁備份",
+  "orphanMtime": "最後修改 {{at}}",
+  "expandAllWarnings": "展開全部 {{n}} 則警告",
+  "collapseWarnings": "收合",
   "moreWarnings": "…另有 {{n}} 則",
   "authPassword": "管理員 密碼（安裝臨時金鑰後改用 金鑰）",
   "authIdentity": "遠端登入 身份庫 identityId",

package/locales/zh-HK/nav.json

@@ -1,13 +1,13 @@
 {
   "dashboard": "儀表板",
-  "ai": "人工智能 任務",
+  "ai": "AI 任務",
   "projects": "專案",
   "security": "帳號安全",
   "email": "郵件",
   "files": "檔案",
   "system": "系統套用",
   "updates": "更新",
-  "agents": "人工智能 代理（實驗）",
+  "agents": "AI 代理（實驗）",
   "login": "登入",
   "logout": "登出",
   "publicFiles": "公用檔案",
@@ -53,7 +53,9 @@
     "runtimes": "執行環境",
     "security": "安全",
     "system": "系統",
-    "ai": "人工智慧"
+    "ai": "人工智慧",
+    "validators": "驗證者節點",
+    "containers": "容器"
   },
   "java": "Java",
   "kotlin": "Kotlin",
@@ -72,6 +74,11 @@
   "bookmarkPinned": "已釘選",
   "bookmarkAdded": "已釘到側欄",
   "bookmarkRemoved": "已從側欄移除",
-  "btTracker": "BT追蹤器",
-  "support": "支持"
+  "btTracker": "BT Tracker",
+  "support": "支持",
+  "noAccessTitle": "沒有權限",
+  "noAccessDesc": "你的角色不能開啟此頁。如需使用，請向管理員申請。",
+  "backToDashboard": "返回儀表板",
+  "validators": "驗證者節點 (Beta)",
+  "docker": "Docker"
 }