ysk-server-shared 1.0.0 → 1.1.0

package/locales/zh-HK/projects.json

@@ -20,14 +20,17 @@
   "runtime": "執行環境",
   "template": "範本（選填）",
   "templateNone": "— 無 —",
-  "searchPlaceholder": "搜尋名稱、域名或 識別碼…",
+  "searchPlaceholder": "搜尋名稱、域名或識別碼…",
+  "listDesc": "管理此主機上的網站專案。",
   "filterAll": "全部 運行時",
   "statTotal": "全部",
   "statRunning": "運行中",
   "statDegraded": "降級",
   "statUnhealthy": "異常",
   "statStopped": "停止 / 就緒",
-  "statPendingOs": "待 OS",
+  "statStoppedOnly": "已停止",
+  "statReadyOnly": "就緒",
+  "statPendingOs": "待系統用戶",
   "status": {
     "failed": "失敗",
     "failedHint": "部署或健康檢查失敗 — 請查看日誌",
@@ -72,7 +75,12 @@
     "httpStatus": "HTTP",
     "latency": "延遲",
     "error": "錯誤",
-    "at": "檢查時間"
+    "at": "檢查時間",
+    "deployMode": "部署模式",
+    "edgeKind": "邊緣",
+    "goLiveOk": "上線",
+    "goLiveAt": "上線時間",
+    "degraded": "降級"
   },
   "railPhp": "PHP / 站點",
   "railStatic": "靜態站",
@@ -87,8 +95,17 @@
   "created": "已建立 {{name}}",
   "backToList": "返回專案列表",
   "openUrl": "開啟網站",
+  "openUrlNeedDomain": "請先設定域名 — 不要在瀏覽器開啟 127.0.0.1",
+  "needOsUser": "請先到隔離分頁建立系統用戶",
+  "goIsolation": "前往隔離分頁",
+  "homeMissing": "主目錄不存在",
+  "homeMissingHint": "與遷移盤點同一探測 — 請到隔離分頁建立系統用戶",
+  "stopTitle": "停止此專案（systemd 單元與公開網站）",
+  "deployTitle": "部署此專案",
+  "httpStatsHint": "取自本專案 access log（最近樣本）",
+  "httpStatsNone": "尚無本專案 access log",
   "notFound": "找不到此專案",
-  "home": "主目錄 目錄",
+  "home": "主目錄",
   "env": "環境",
   "backup": "備份",
   "resources": "資源",
@@ -136,10 +153,10 @@
   "healthUnknown": "尚未檢查",
   "sectionRuntimeDeploy": "運行時 部署",
   "sectionRuntimeDeployDesc": "依專案 運行時 啟動行程（節點 / PHP）",
-  "sectionGit": "Git 部署",
-  "sectionGitDesc": "從 Git 拉取程式碼並重新部署",
+  "sectionGit": "git",
+  "sectionGitDesc": "Clone、同步、入站 push",
   "sectionEnv": "環境變數",
-  "sectionEnvDesc": "以 金鑰=value 寫入專案 .env",
+  "sectionEnvDesc": "以「名稱=值」寫入專案 .env",
   "gitUrl": "git 網址",
   "gitDeploy": "Git 部署",
   "envFile": "環境檔（.env）",
@@ -183,7 +200,7 @@
   "nginxValuePublished": "已發布",
   "nginxValueNone": "未發布",
   "osValueReady": "已建",
-  "osValuePending": "待建",
+  "osValuePending": "待建立系統用戶",
   "openFiles": "檔案",
   "enableCdn": "啟用 CDN",
   "openLogs": "日誌",
@@ -192,10 +209,11 @@
   "osUserIncomplete": "系統用戶建立未完成",
   "saveLogDirsFailed": "儲存 日誌 目錄失敗",
   "createName": "專案名稱",
+  "noPathSepHint": "名稱不可包含 / 或 \\。",
   "createRuntime": "執行環境",
   "createRuntimeHint": "之後可在詳情調整部署方式",
   "createVersion": "版本",
-  "createVersionHint": "寫入專案 運行時_version；部署／FPM 會參考此版本",
+  "createVersionHint": "會寫入專案的執行環境版本；部署／FPM 會參考此版本",
   "createVersionAria": "執行環境版本",
   "createPrimaryDomain": "主要域名",
   "createPrimaryDomainHint": "可稍後再填",
@@ -261,7 +279,7 @@
   "logsSaveScan": "儲存並掃描",
   "logsDefaultNote": "預設永遠掃描 日誌/ 與 日誌/。額外目錄只收入檔名像 *.日誌 / *.out / *.err 的檔。",
   "resOsTitle": "系統用戶隔離",
-  "resOsDesc": "每個專案獨立 Linux 用戶；意圖 主目錄：/主目錄/ysk-server-{專案 識別碼}",
+  "resOsDesc": "每個專案獨立 Linux 用戶；意圖主目錄：/home/ysk-server-{專案識別碼}",
   "resLinuxUser": "Linux 用戶",
   "resOsIsolation": "OS 隔離",
   "resOsReady": "已就緒",
@@ -281,7 +299,7 @@
   "resProvisionUser": "建立／修復系統用戶",
   "resRefreshStatus": "重新整理狀態",
   "resFixHome": "修復 主目錄 擁有權",
-  "resMigrateHome": "遷移到 /主目錄/ysk-server-…",
+  "resMigrateHome": "遷移到 /home/ysk-server-…",
   "resQuotaDesc": "軟配額（deploy 前 du 擋）+ 有 setquota 時可硬強制",
   "resQuotaHint": "例如 1024 = 1 GiB",
   "resSetSoftQuota": "儲存軟配額",
@@ -313,7 +331,7 @@
   "resMigrateDone": "遷移完成",
   "resMigrateIncomplete": "遷移未完成",
   "resMigrateTitle": "遷移系統用戶 主目錄？",
-  "resMigrateDesc": "將遷移到 /主目錄/ysk-server-{識別碼} 並建立／修復系統用戶。需要管理員權限。",
+  "resMigrateDesc": "將遷移到 /home/ysk-server-{識別碼} 並建立／修復系統用戶。需要管理員權限。",
   "resMigrate": "遷移",
   "resWrittenOnly": "已寫入控制面；OS 未套用（需要管理員權限）。{{notes}}",
   "resAppliedOs": "限制已套用到 OS。{{notes}}",
@@ -341,6 +359,7 @@
   "netForceHttpsDesc": "HTTP → HTTPS（301）；需已有 SSL 憑證並用 SSL 發布",
   "netHsts": "啟用 HSTS",
   "netHstsDesc": "瀏覽器記住只走 HTTPS（建議在強制 HTTPS 後開啟）",
+  "netHstsNeedHttps": "請先啟用強制 HTTPS",
   "netRedirectUrl": "整站重新導向網址",
   "netRedirectHint": "可留空。填寫後整站 301 到此網址（例如搬站／apex→www）",
   "netBasicAuthTitle": "HTTP 基本認證（瀏覽器登入保護）",
@@ -410,7 +429,7 @@
   "deployRustHint": "預設：cargo 建置 --release 後啟動 目標/release/{crate}；可略過建置。",
   "deployNodeHint": "依 節點 啟動行程（entry 預設 伺服器.js）；生產環境建議 系統服務。",
   "deployDefaultHint": "依 運行時 啟動；套用後才對外。",
-  "deployOsStep": "獨立 Linux 用戶 + /主目錄/ysk-server-{專案 識別碼}（資源分頁可建立）",
+  "deployOsStep": "獨立 Linux 用戶 + /home/ysk-server-{專案識別碼}（資源分頁可建立）",
   "deployPyReady": "Python 執行環境已就緒",
   "deployPipNet": "有 requirements.txt 時需外網 pip",
   "deployCheckPort": "部署後檢查埠與 /health",
@@ -461,8 +480,8 @@
   "deployPhpIniSaved": "已儲存專案 php.ini 覆寫；請再部署或套用 FPM",
   "deployHistory": "部署歷史（{{count}}）",
   "deployHistoryDesc": "來自操作稽核；newest first",
-  "deployGitUrlHint": "HTTPS 或 遠端登入 倉庫位址；同步後會依 運行時 自動 redeploy",
-  "deployEnvHint": "每行 金鑰=value；# 開頭為註解",
+  "deployGitUrlHint": "HTTPS 或 git@host:org/repo.git",
+  "deployEnvHint": "每行一項：名稱=值；# 開頭為註解",
   "resume": "恢復專案",
   "suspend": "暫停專案",
   "goFtpsApply": "前往 FTPS 服務套用",
@@ -506,11 +525,11 @@
     "node": "Node.js",
     "static": "靜態",
     "python": "Python",
-    "go": "Go",
+    "go": "去",
     "rust": "Rust",
     "java": "Java",
     "kotlin": "Kotlin",
-    "bun": "Bun"
+    "bun": "包子"
   },
   "netCacheTitle": "快取",
   "logsDeepAccess": "日誌中心 · access",
@@ -523,7 +542,7 @@
   "railBun": "Bun 進程",
   "deployProcessManager": "進程管理",
   "deployProcessManagerSystemd": "systemd（推薦）",
-  "deployProcessManagerPm2": "顆粒物",
+  "deployProcessManagerPm2": "PM2",
   "proc_restart": "重啟",
   "proc_stop": "停止",
   "proc_reload": "重新載入",
@@ -547,14 +566,116 @@
   "netPublishMaint": "維護",
   "sslNeedDomain": "請先填寫網域，才能發佈 Nginx / SSL。",
   "createTemplateMissing": "未載入 {{v0}} 範本；請重新整理或選「— 無 —」空白專案。",
-  "deleteDialogDesc": "將銷毀「{{v0}}」。此操作無法還原。",
+  "deleteDialogDesc": "將銷毀「{{name}}」。此操作無法還原。",
   "deleteWillStop": "停止 systemd / PM2 / 本機進程",
   "deleteWillWeb": "移除 Nginx conf、PHP-FPM pool、Apache vhost（如有）",
   "deleteWillOs": "刪除 Linux 用戶與 home 目錄（安全路徑）",
   "deleteKeepOs": "保留 home 與 Linux 用戶（僅面板移除）",
   "deleteWillDb": "從控制面資料庫移除專案",
   "deleteRemoveFilesDesc": "取消勾選則只從面板移除，檔案與系統用戶保留",
-  "deleteTypeNameHint": "請輸入「{{v0}}」",
+  "deleteTypeNameHint": "請輸入「{{name}}」",
   "deleteDnsWarn": "共享 DNS zone / 郵箱 domain 不會自動刪除。",
-  "manageInNginx": "在 Nginx 管理"
+  "manageInNginx": "在 Nginx 管理",
+  "advFtpHomeApp": "網站 app 目錄",
+  "advFtpHomeRoot": "專案家目錄（全部）",
+  "advFtpManage": "開啟 FTP 頁",
+  "resShell": "登入 shell",
+  "resSaveHint": "「儲存並套用」會改主機。「僅存控制面」只記表單。「再套用」用已存值再寫入系統。",
+  "resBashConfirmTitle": "允許互動式 bash？",
+  "resBashConfirmDesc": "這會讓專案用戶有互動登入 shell。只在需要以該用戶 SSH 或終端機時才確認。",
+  "createGitHint": "可選。會記在專案；到部署分頁再 clone（建立時不會 clone）。",
+  "gitTokenLaterHint": "HTTPS token 與 clone depth 請在建立後於部署分頁設定。",
+  "gitBranch": "分支",
+  "gitBranchHint": "從遠端揀分支或 tag。",
+  "gitBranchAfterUrl": "請先填寫 Git 網址。留空則使用遠端預設分支。",
+  "gitLastRef": "上次同步：{{branch}} @ {{commit}}",
+  "gitConfirmTitle": "要 clone 到此專案？",
+  "gitConfirmBody": "若 app/ 仍是 Hello World 佔位會先清除再 clone。非 YSK 範本的自訂檔案會拒絕覆寫。",
+  "gitConfirmRemoteBody": "會把 origin 改為新網址再 pull。歷史無關則失敗；不會清除自訂檔案。",
+  "runtimeActual": "實際 binary {{path}}",
+  "runtimeFallback": "所選 {{version}} 並未安裝。行程實際使用 {{path}}。",
+  "gitSync": "同步",
+  "gitFetch": "抓取（fetch）",
+  "gitCheckout": "切換分支（checkout）",
+  "gitReset": "重設到遠端",
+  "gitResetNeedConfirm": "需確認 — 會捨棄本機提交",
+  "gitDeepen": "抓完整歷史",
+  "gitLogTitle": "最近 commit",
+  "gitDirtyTitle": "本機改動已阻止 pull",
+  "gitDirtyBody": "有 {{count}} 個檔與 Git 不同（Files 或應用改過）。請丟棄或取消。",
+  "gitDiscard": "丟棄本機檔",
+  "gitOpenFiles": "在 Files 開啟",
+  "gitNotCloned": "尚未 clone",
+  "gitClean": "乾淨",
+  "gitDirty": "有改動",
+  "gitBehind": "落後 {{count}}",
+  "gitAhead": "超前 {{count}}",
+  "gitDetached": "已釘選",
+  "gitShallow": "淺層",
+  "gitMissing": "沒有 git",
+  "gitResetConfirmTitle": "要 hard reset 到遠端？",
+  "gitResetConfirmBody": "會丟棄本機 Git 歷史及未追蹤檔（保留 .env），再用控制面資料還原 .env。",
+  "gitHeads": "遠端分支",
+  "gitToken": "HTTPS 令牌",
+  "gitTokenHint": "加密存放。不會寫入 remote URL。",
+  "gitTokenPlaceholder": "ghp_… 或 glpat-…",
+  "gitTokenSet": "已設 token",
+  "gitSaveToken": "儲存 token",
+  "gitClearToken": "清除 token",
+  "gitDeployKey": "部署公鑰",
+  "gitDeployKeyHint": "請以唯讀 deploy key 加到 Git 主機。",
+  "gitDeployKeyOn": "部署金鑰",
+  "gitMakeKey": "建立 deploy key",
+  "gitCopyPub": "複製 public key",
+  "gitClearKey": "清除 deploy key",
+  "gitKeyCopied": "已複製 public key",
+  "gitPinHost": "釘選 host key",
+  "gitPinHostBody": "尚未釘選 {{host}}。請核對 fingerprint，再釘選後才用 SSH clone。",
+  "gitHostUnpinned": "未釘選 host key",
+  "gitHookTitle": "推鉤",
+  "gitHookHint": "自行把 URL 貼到 GitHub／Gitea／GitLab（只收 push）。不是 Slack。",
+  "gitHookOn": "已開",
+  "gitHookOff": "已關",
+  "gitHookEnable": "開啟",
+  "gitHookRotate": "更換 secret",
+  "gitHookDisable": "關閉",
+  "gitHookSecretOnce": "請立即複製此 secret——之後不會再顯示。",
+  "gitHookCopyUrl": "複製",
+  "gitHookCopySecret": "複製 secret",
+  "gitHookCopied": "已複製",
+  "gitHookSetup": "Payload URL 用上方網址。Content type：application/json。事件只選 push。Secret 用啟用時顯示的值。",
+  "gitHookGithub": "Settings → Webhooks → Add webhook。Content type：application/json。Events：Just the push event。GitHub.com 需要 HTTPS。",
+  "gitHookGitea": "Settings → Webhooks → Add Webhook → Gitea。方法 POST。事件：Push。",
+  "gitHookGitlab": "Settings → Webhooks。Trigger：Push events。Secret token 填 hook secret（X-Gitlab-Token）。",
+  "gitHookHonesty": "主機 unit 需 YSK_EXECUTE=1，否則 hook 只回計劃。",
+  "gitHookSkipOther": "其他分支會被忽略。",
+  "gitAuthHttps": "HTTPS 令牌",
+  "gitAuthSsh": "SSH 部署金鑰",
+  "gitLoadRefs": "載入分支",
+  "gitRefDefault": "遠端預設",
+  "gitRefBranches": "分支",
+  "gitRefTags": "標籤",
+  "gitRefOther": "其他 ref…",
+  "gitRefCustom": "Commit 或 ref",
+  "gitRefsNeedUrl": "請先填網址。",
+  "gitRefsNeedAuth": "請先儲存 token 或 deploy key，再載入分支。",
+  "gitRefsHint": "來自遠端清單，請選擇。",
+  "gitHookSetupToggle": "如何貼到 Git 平台",
+  "gitHookOneLiner": "HMAC 或 X-YSK-Git-Hook。只同步本專案 ref。",
+  "gitHookExecuteHint": "真正 clone／部署需 YSK_EXECUTE=1。",
+  "gitShowKey": "顯示金鑰",
+  "gitHideKey": "隱藏",
+  "gitBehindShort": "↓{{計數}}",
+  "gitAheadShort": "↑{{計數}}",
+  "gitDirtyShort": "有改動 · {{count}}",
+  "gitFilesLink": "文件",
+  "netForceHttpsOn": "發佈邊緣後，HTTP 會跳轉到 HTTPS。",
+  "netForceHttpsOff": "未儲存強制跳轉。",
+  "netBoundCert": "已綁定憑證",
+  "netBoundCertExpiry": "到期 {{at}}",
+  "netNoBoundCert": "此主機名磁碟上沒有憑證",
+  "netForceHttpsNeedCert": "強制 HTTPS 前，請先在 /ssl 為此域名簽發憑證。",
+  "netHttpsLiveNotForced": "已有邊緣設定檔，HTTPS 可能已生效。此項只控制是否強制 HTTP→HTTPS。",
+  "gitSyncBlockedDirty": "有本機改動時無法同步。請先檢視 diff，或以重設丟棄後再同步。",
+  "gitViewDiff": "檢視 diff"
 }

package/locales/zh-HK/protection.json

@@ -30,7 +30,9 @@
   "note": {
     "notApplied": "未套用到系統（需 管理員權限與系統變更權限已開啟）— 已記到管理設定",
     "nginxWritten": "已寫入 Nginx 限速管理檔",
-    "f2bWritten": "已寫入 fail2ban 管理設定"
+    "f2bWritten": "已寫入 fail2ban 管理設定",
+    "hintDropped": "已略過內部防護提示",
+    "nginxLimits": "將寫入 Nginx 限速片段"
   },
   "rel": {
     "justNow": "剛剛",
@@ -53,6 +55,10 @@
   "autoBanAutomation": "自動 封鎖：{{onOff}}（{{mode}}）",
   "automationSaved": "已儲存自動化設定",
   "statFirewall": "防火牆",
+  "statSuspects": "可疑 IP",
+  "statSuspectsSplit": "可操作 {{actionable}}／全部 {{total}}",
+  "suspectActionableCount": "可操作 IP {{count}}",
+  "scoreBasisHint": "威脅分計入防火牆、fail2ban 封禁量與請求速率，與情報分頁的可疑清單不是同一計數。",
   "statAutoBan": "自動 封鎖",
   "statApply": "系統套用",
   "statActiveBans": "活躍封禁",
@@ -72,6 +78,12 @@
   "reapply": "重新套用",
   "nginxLimits": "Nginx 限速",
   "notWritten": "未寫",
+  "modeValue": {
+    "normal": "正常",
+    "degraded": "降級",
+    "ddos-protection": "DDoS 防護",
+    "offline": "離線"
+  },
   "mode": "模式",
   "controlPlane": "控制面",
   "canApply": "可套用",
@@ -233,10 +245,19 @@
   "sectionAutoBan": "② 自動封禁",
   "unban": "解封",
   "ban": "封禁",
+  "banConfirmTitle": "封禁 {{ip}}？",
+  "banConfirmDesc": "此 IP 會在主機上被封鎖。請確認不是目前面板或工作階段來源。",
+  "wlRemovedUndo": "已從白名單移除 {{ip}}。5 秒內可復原。",
+  "undo": "復原",
+  "banSelectedConfirmTitle": "封禁已選 {{count}} 個 IP？",
+  "banSelectedConfirmDesc": "以下地址會在主機上被封鎖：{{ips}}",
   "save": "儲存",
   "yes": "是",
   "no": "否",
   "oneClickSuggested": "一鍵套用建議檔",
+  "stackApply": "套用防護組合（UFW、fail2ban、建議檔）",
+  "stackApplyDone": "已要求套用防護組合",
+  "stackApplyHint": "會啟用 UFW 並套用 fail2ban 與建議防護檔。遠端面板請先確認不會把自己鎖在外面。",
   "viewPresets": "檢視防護檔",
   "suspectIpsCount": "可疑 IP {{count}}",
   "goBans": "去封禁",
@@ -292,7 +313,12 @@
   "f2bTool": "fail2ban 工具",
   "noSecondJail": "（不在這裡再做第二套 jail 編輯）。",
   "autoBanWhitelistTitle": "自動 封鎖 白名單",
-  "autoBanWhitelistDesc": "防護中心 auto-封鎖 豁免（會同步 fail2ban ignoreip.txt）。完整 ignoreip 在 fail2ban 工具 → 白名單。",
+  "autoBanWhitelistDesc": "防護中心自動封鎖豁免（會同步 fail2ban ignoreip.txt）。完整 ignoreip 在 fail2ban 工具 → 白名單。",
+  "ufwOff": "UFW（未啟用）",
+  "ufwOffHint": "UFW 未運行 — 可用目標是 fail2ban。",
+  "whitelistSyncHint": "面板 {{n}} 條 · fail2ban ignoreip 同步：{{sync}}",
+  "whitelistSyncOn": "開",
+  "whitelistSyncOff": "關（兩邊清單可能不一致）",
   "ignoreipWhitelist": "ignoreip 白名單",
   "notSetSuggestAdmin": "未設定（建議加入你的管理 IP）",
   "moreItems": "… 還有 {{n}} 項 · 見 fail2ban 白名單",
@@ -306,6 +332,11 @@
   "fullLogsAt": "完整 nginx／auth 日誌 請到",
   "logCenter": "日誌中心",
   "colScore": "分",
+  "colHits": "次數",
+  "col429": "429",
+  "topIpsTitle": "熱點 IP",
+  "hitsCount": "{{n}} 次",
+  "sampleWindowHint": "計數來自目前 access 與 auth 樣本視窗，不是完整日誌檔。",
   "banShort": "封",
   "vhostLimits": "Vhost 限速",
   "eventStream": "事件流",
@@ -344,5 +375,36 @@
   "plusRegion": "+ 省 {{v}}",
   "plusCity": "+ 城市 {{v}}",
   "lastTickPrefix": "· 上次 {{t}}",
-  "nextTickPrefix": "· 下輪 {{t}}"
+  "nextTickPrefix": "· 下輪 {{t}}",
+  "cannotBanSelf": "不可封鎖 {{ip}} — 這是本機、你的登入 IP 或 ignoreip",
+  "selfIp": "本機",
+  "selfHostIp": "主機 IP",
+  "selfLoginIp": "你的登入 IP",
+  "showZeroScore": "顯示 0 分",
+  "hideZeroScore": "隱藏 0 分",
+  "freshnessNa": "不適用",
+  "freshnessMissing": "無庫",
+  "freshnessStale": "過舊",
+  "freshnessFresh": "最新",
+  "geoDraftOnly": "政策未啟用 — 儲存只寫草稿，Nginx 不會執行，直至你勾選啟用。",
+  "uaNeedZones": "請先設定 Cloudflare zone",
+  "geoNeedDb": "尚未有本地 GeoIP 庫 — 請先更新 MMDB 檔",
+  "selectAllCountriesWarn": "封鎖名單模式下全選全部國家？這可能把本機與你的登入所在地一併封鎖。",
+  "badgeRecommendPreset": "以目前威脅水平，建議改用更強預設",
+  "badgeAutomationOn": "自動化已開啟",
+  "badgeBanCount": "目前封鎖數",
+  "badgeGeoOn": "Geo 准入政策已啟用",
+  "badgeGeoNotReady": "GeoIP 資料庫尚未就緒",
+  "badgeIntelSignals": "目前計分的訊號數",
+  "signalActive": "運作中",
+  "signalInactive": "未啟用",
+  "signalJails": "{{n}} 個 jail",
+  "dbReadyHint": "已有 MMDB 檔",
+  "dbNotReadyHint": "請先下載 GeoIP 資料庫",
+  "staleHint": "上次成功更新是否已超過 7 日",
+  "draftBadge": "草稿",
+  "banIsSelf": "此 IP 是目前面板來源或本機。",
+  "banNotSelf": "此 IP 不是目前面板來源。",
+  "geoSourceLocal": "本機 GeoIP 庫（sapics + DB-IP）",
+  "nginxPreviewHint": "此預設會寫入的 Nginx 片段（僅預覽）："
 }

package/locales/zh-HK/publicFiles.json

@@ -11,7 +11,11 @@
   "reloadTry": "套用時嘗試",
   "siteSettings": "站點設定",
   "siteSettingsDesc": "寫入管理 設定檔；套用時可嘗試 重新載入 Nginx（套用後才可連）",
-  "serverNameHint": "Nginx server_name，例如 檔案.example.com",
+  "serverNameHint": "Nginx server_name，例如 files.example.com",
+  "notes": {
+    "noManagedConf": "尚未有受管 Nginx 設定 — 請按套用",
+    "notSynced": "管理檔已寫入，但未進入 /etc/nginx/conf.d — 需 root 與 YSK_EXECUTE 再套用並重載"
+  },
   "quotaMiB": "配額（MiB）",
   "quotaHint": "可選：限制公開目錄總量",
   "unlimited": "不限",
@@ -19,14 +23,23 @@
   "appliedOk": "已套用公開檔案站點",
   "applyReload": "套用並重載 Nginx",
   "statusLive": "Nginx 已生效",
+  "statusDraft": "草稿／待套用",
   "statusManagedOnly": "僅管理檔",
   "statusNotApplied": "未套用",
   "nginxLive": "已在 conf.d",
   "nginxNotLive": "未進 conf.d",
   "openSite": "開啟網站",
-  "notLiveHint": "域名 404 多數係 conf 只寫在 dataDir、未複製到 /etc/nginx/conf.d，或未 reload。請用 root + YSK_EXECUTE 再套用。未發 SSL 前請用 http:// 開啟。",
+  "notLiveHint": "域名 404 多數是 conf 只寫在 dataDir、未複製到 /etc/nginx/conf.d，或未 reload。請用 root + YSK_EXECUTE 再套用。未發 SSL 前請用 http:// 開啟。",
   "diskRoot": "磁碟根目錄",
+  "executeFlag": "執行",
+  "asRoot": "根目錄",
   "filesInRoot": "項目數",
   "managedConf": "管理 conf",
-  "systemConf": "系統 conf.d"
+  "systemConf": "系統 conf.d",
+  "autoindex": "目錄列表（autoindex）",
+  "liveSystemConf": "現行系統設定檔：{{path}}",
+  "publicRootNote": "公開根目錄：{{path}}",
+  "applyConfirmTitle": "套用公開檔案站點？",
+  "applyConfirmDesc": "寫入 Nginx server_name {{name}} 並重載 Nginx。",
+  "serverNameMismatch": "現行設定檔為 {{live}}；表單為 {{draft}}。套用後會覆蓋。"
 }

package/locales/zh-HK/rbac.json

@@ -80,7 +80,13 @@
     "auditExport": "審計匯出",
     "securityApiKeysAdmin": "介面 金鑰管理",
     "networkBrowse": "主機代瀏覽",
-    "networkVnc": "VNC 遠端桌面管理"
+    "networkVnc": "VNC 遠端桌面管理",
+    "validatorsRead": "驗證者節點（讀取）",
+    "validatorsManage": "驗證者節點管理",
+    "validatorsWipe": "驗證者節點清空資料",
+    "dockerRead": "Docker（讀取）",
+    "dockerManage": "Docker 管理",
+    "dockerWipe": "Docker 刪除／清理"
   },
   "aboutRoles": "角色說明（出廠預設）",
   "aboutRolesBody": "角色決定預設權限；用戶可再覆寫個別能力。",
@@ -96,5 +102,12 @@
   "capabilitiesHint": "勾選此角色可用的功能。橙點表示與系統預設不同。",
   "enabledCount": "已開 {{enabled}}／{{total}}",
   "bandAboveMax": "高於最高等級",
-  "dirtyHint": "已自訂（與系統預設不同）"
+  "roleUnavailable": "此角色不可用",
+  "dirtyHint": "已自訂（與系統預設不同）",
+  "unsaved": "未儲存",
+  "unsavedHint": "此角色有未儲存變更",
+  "nothingToSave": "沒有要儲存的變更",
+  "saveRole": "儲存「{{role}}」政策",
+  "discardTitle": "放棄未儲存政策？",
+  "discardDesc": "轉去另一個角色會丟棄未儲存的權限變更。"
 }

package/locales/zh-HK/readiness.json

@@ -4,7 +4,7 @@
     "security": "權限與安全",
     "binaries": "系統軟件",
     "hosting": "執行環境",
-    "dns": "DNS",
+    "dns": "域名系統",
     "email": "郵件",
     "isolation": "專案隔離",
     "ops": "運維"
@@ -24,10 +24,21 @@
   "passed": "通過",
   "checkFailed": "就緒檢查失敗",
   "gatePass": "門檻通過 · {{pct}}%",
+  "gateBlocked": "未通過／有阻擋 {{n}}",
   "gateFail": "尚未達標 · {{pct}}%",
   "executeOn": "已開",
   "executeOff": "未開",
   "blockers": "阻擋",
+  "blockersHint": "「阻擋」是「缺少」中的關鍵項，不是額外檢查。",
+  "requireAdminTotp": "要求管理員雙重驗證政策",
+  "listenBind": "監聽位址",
+  "item": {
+    "admin2fa": "管理員雙重驗證"
+  },
+  "dataDirPerms": "面板資料目錄權限",
+  "mode750": "權限 750",
+  "totalChecks": "全部檢查",
+  "totalChecksHint": "就緒＋降級＋缺少＝此總數。阻擋是缺少項裡的關鍵子集。",
   "probing": "探測中…",
   "reprobe": "重新探測",
   "exportReport": "匯出報告",
@@ -93,10 +104,10 @@
   "itemStateStore": "控制平面狀態儲存",
   "itemStateStoreSqliteHint": "可選：YSK_STORE=sqlite 使用 WAL document store",
   "itemBackupFreshness": "最近完整備份",
-  "itemBackupNone": "未記錄 last_backup_run — 請執行 備份 all 或設定排程",
+  "itemBackupNone": "未記錄 last_backup_run — 請執行 backup all 或設定排程",
   "itemBackupFix": "ysk-server 全部備份 · 備份計畫 --install",
   "itemFleetSessions": "機群 代理 工作階段",
-  "itemFleetNone": "單機可選：多邊緣需 代理 run + 心跳",
+  "itemFleetNone": "單機可選：多邊緣需 agent run + 心跳",
   "itemFleetNoHb": "已註冊但無 心跳 — 請啟動邊緣 代理",
   "itemPdnsutil": "pdnsutil（PowerDNS）",
   "apachePort80Title": "Apache 與公開 80 埠",
@@ -107,5 +118,25 @@
   "fixNow": "立即修復",
   "fixFailed": "修復失敗",
   "fixDone": "已修復 dataDir 權限（chmod 750）",
-  "fixDoneWebUi": "已建置／安裝 Web 介面"
+  "fixDoneWebUi": "已建置／安裝 Web 介面",
+  "rootLabel": "超級用戶",
+  "exportStarted": "正在下載 {{name}}",
+  "techDetails": "技術詳情",
+  "missingOwner": "未指定面板擁有者（套餐配額歸屬）",
+  "notOsProvisioned": "待建立系統用戶",
+  "isolationPendingOs": "與專案狀態相同：待建立系統用戶。請到隔離分頁建立系統用戶與主目錄。",
+  "ondrejNone": "未偵測到 ondrej Launchpad PHP 來源",
+  "ondrejFound": "發現與 packages.sury.org 衝突的舊 ondrej/php 來源：{{paths}}",
+  "ondrejTitle": "PHP apt 來源（ondrej 殘留）",
+  "systemctlActive": "服務運行中",
+  "systemctlStatus": "服務狀態：{{status}}",
+  "binInPath": "路徑中的 {{bin}}",
+  "leftoverApache": "Apache 預設站殘留",
+  "leftoverVsftpd": "vsftpd 單元失敗",
+  "leftoverCli": "殘留舊 CLI",
+  "leftoverNginx": "Nginx catch-all 缺失",
+  "leftoverDovecot": "Dovecot TLS 憑證缺失",
+  "leftoverOther": "主機殘留",
+  "leftoverApply": "套用殘留修復",
+  "isolationOwnerDegrades": "缺少擁有者會影響套餐配額歸屬 — 狀態為降級，不是就緒。"
 }

package/locales/zh-HK/redis.json

@@ -26,8 +26,10 @@
   "installThenStart": "請先使用上方橫幅一鍵安裝 Redis，再啟動服務。",
   "installedNotConnected": "服務已安裝但未連上，請啟動服務後即可瀏覽鍵與內容。",
   "keysCountSuffix": "· {{n}} 個鍵",
-  "searchPlaceholder": "搜尋鍵名，例如 用戶:* 或 *",
+  "searchPlaceholder": "搜尋鍵名，例如 user:* 或 *",
   "searchKeys": "搜尋鍵",
+  "scanHint": "使用 SCAN，不是 KEYS。最多回傳 {{n}} 個鍵 — 大型庫勿用 *。",
+  "scanCapped": "只顯示首 {{n}} 個符合項。",
   "rows": "{{n}} 筆",
   "content": "內容",
   "noMatchingKeys": "沒有符合的鍵",
@@ -37,7 +39,7 @@
   "addStringKey": "新增字串鍵",
   "writeToDb": "寫入 Redis 資料庫 {{db}}（即時生效，請謹慎）",
   "keyName": "鍵名",
-  "keyNameHint": "建議用冒號分層，例如 工作階段:用戶:1",
+  "keyNameHint": "建議用冒號分層，例如 session:user:1",
   "ttlLabel": "過期時間（秒）",
   "ttlHint": "可留空表示永不過期",
   "m1": "1 分",
@@ -55,7 +57,9 @@
   "memory": "記憶體",
   "addKey": "新增鍵",
   "dbLabel": "資料庫 {{i}}",
-  "keysInDb": "· {{n}} 個鍵",
+  "keysInDb": " · {{n}} 個鍵",
+  "dbOptionKeys": "資料庫 {{i}} · {{n}} 個鍵",
+  "dbOptionEmpty": "資料庫 {{i}} · 空",
   "dbRange": "共 {{n}} 個庫（0–{{max}}）。",
   "serviceLink": "在服務設定加減數量",
   "dbsWithData": "有資料的庫（快捷）",
@@ -64,5 +68,19 @@
   "pickKey": "從左側選擇一個鍵，即可查看內容。",
   "ttlPrefix": "過期：{{ttl}}",
   "writeLiveHint": "此操作直接寫入執行中的 Redis，無法從面板一鍵還原。",
-  "refPath": "參考：{{path}}"
+  "refPath": "參考：{{path}}",
+  "dbEmptyMark": " · 空",
+  "noRequirepass": "已開保護模式，但 requirepass 為空或未能讀取，目前沒有密碼。",
+  "insecureShort": "不安全（無密碼）",
+  "setRequirepass": "設定密碼",
+  "rdbOnlyLossHint": "AOF 已關、RDB 仍開：重啟或崩潰可能丟失最近寫入。",
+  "dirDataContainer": "/data（容器）",
+  "dirHostDefault": "/var/lib/redis",
+  "dirDefaultInstance": "/var/lib/redis/default",
+  "dirDataWarn": "/data 多用於容器；面板無法確認此主機是否存在該路徑。",
+  "saveOff": "關閉快照（不建議）",
+  "saveOffWarn": "空的 save 字串會關閉 RDB 快照。若 AOF 亦關，崩潰可能丟失全部資料。",
+  "dirMoveWarn": "更改資料目錄不會搬移 dump.rdb／AOF。下次啟動會直接用新路徑。",
+  "passwordUnset": "服務未設定",
+  "passwordSetHidden": "已設定（不顯示）"
 }