ysk-server-shared 1.0.0 → 1.1.9

package/locales/zh-CN/docker.json

@@ -0,0 +1,248 @@
+{
+  "title": "Docker",
+  "subtitle": "在这台服务器安装 Docker Engine，并管理容器、映像、Volume 与验证者 Compose 堆栈。",
+  "refresh": "刷新",
+  "notInstalled": "未安装 Docker Engine。请在此页安装 docker.io 及 docker-compose-v2。",
+  "protected": "受保护",
+  "pruneConfirm": "输入 PRUNE 以确认清理 volume 或系统",
+  "settingsHint": "只开放安全的 daemon.json 选项。应用会写入文件并重启 docker.service。",
+  "cli": {
+    "usage": "用法：ysk-server docker status|ps|images|volumes|networks|df|logs|inspect|exec|start|stop|restart|rm|pull|run|prune|engine|compose [--image IMG] [--name N] [--preset version|help|hostname] [--bin BIN] [--project P] [--execute] [--json]"
+  },
+  "tab": {
+    "overview": "概览",
+    "containers": "容器",
+    "images": "映像",
+    "compose": "Compose",
+    "volumes": "Volume",
+    "networks": "网络",
+    "prune": "清理",
+    "settings": "设置",
+    "about": "说明"
+  },
+  "col": {
+    "engine": "引擎",
+    "containers": "容器",
+    "version": "版本",
+    "dataRoot": "数据目录",
+    "disk": "磁盘",
+    "validators": "验证者堆栈",
+    "name": "名称",
+    "image": "映像",
+    "status": "状态",
+    "ports": "端口",
+    "managed": "由面板管理",
+    "size": "大小",
+    "driver": "驱动",
+    "type": "类型",
+    "reclaimable": "可回收"
+  },
+  "state": {
+    "up": "运行中",
+    "down": "已停止",
+    "running": "Running",
+    "exited": "Exited",
+    "restarting": "Restarting",
+    "restartingCount": "Restarting · {{n}} times",
+    "paused": "Paused",
+    "created": "Created",
+    "dead": "Dead",
+    "removing": "Removing",
+    "unknown": "Unknown",
+    "exitedCode": "Exited ({{n}})"
+  },
+  "actions": {
+    "start": "启动",
+    "stop": "停止",
+    "restart": "重启",
+    "remove": "删除",
+    "logs": "日志",
+    "inspect": "检查",
+    "exec": "执行（version）",
+    "run": "运行映像",
+    "pull": "拉取",
+    "up": "启动",
+    "down": "停止",
+    "createVolume": "创建 volume",
+    "createNetwork": "创建网络",
+    "pruneContainers": "清理容器",
+    "pruneImages": "清理映像",
+    "pruneVolumes": "清理 volume",
+    "pruneSystem": "系统清理",
+    "startEngine": "启动引擎",
+    "stopEngine": "停止引擎",
+    "restartEngine": "重启引擎",
+    "applyDaemon": "应用引擎设置"
+  },
+  "empty": {
+    "containers": "没有容器",
+    "images": "没有映像",
+    "compose": "没有 Compose 项目",
+    "volumes": "没有 volume",
+    "networks": "没有网络",
+    "composeDesc": "Projects come from validator nodes or Compose files already on this host. This page does not accept arbitrary YAML uploads.",
+    "composeCta": "Open validator nodes"
+  },
+  "logs": {
+    "empty": "没有日志",
+    "follow": "Follow"
+  },
+  "settings": {
+    "logMaxSize": "容器日志上限",
+    "liveRestore": "即时还原（引擎重启时保留容器）",
+    "mirrors": "Registry 镜像（每行一个网址）",
+    "insecure": "未加密 Registry（每行一个主机）"
+  },
+  "about": {
+    "body": "Docker 是 YSK Server 的一级主机服务，与 Nginx 同级。由面板用 Ubuntu docker.io + docker-compose-v2 安装。验证者节点以 yskval-* Compose 项目运行。",
+    "honesty": "变更主机需要 root 及 YSK_EXECUTE=1。默认是试运行。此页不是 Kubernetes。",
+    "validators": "打开验证者节点"
+  },
+  "alerts": {
+    "daemonTitle": "Docker 引擎未运行",
+    "daemonBody": "已安装 Docker，但 docker.service 未启动。验证者堆栈无法启动。"
+  },
+  "errors": {
+    "notInstalled": "未安装 Docker",
+    "daemonDown": "Docker 引擎未运行",
+    "needCompose": "需要 docker compose（v2 插件）",
+    "badImage": "映像名称无效",
+    "badName": "名称无效",
+    "badPort": "端口映射无效",
+    "badEnv": "环境变量无效",
+    "badVolume": "磁盘挂载无效",
+    "badNetwork": "网络无效",
+    "protectedNetwork": "不可以删除内建 Docker 网络",
+    "badRestart": "重启策略无效",
+    "badPrune": "清理范围无效",
+    "needPruneConfirm": "清理 volume 或系统需要 confirm=PRUNE",
+    "badDaemon": "引擎设置无效",
+    "composeMissing": "找不到这个项目的 Compose 文件",
+    "logsFailed": "读不到容器日志",
+    "mutateFailed": "Docker 命令失败",
+    "engineFailed": "无法控制 docker.service",
+    "badExec": "exec 只限允许清单内的二进制与预设（不可用 shell，不可开 TTY）",
+    "uninstallBusy": "请先停止由面板管理的容器（包括验证者堆栈）再卸载 Docker"
+  },
+  "notes": {
+    "dryMutate": "此为试运行。要改主机请加 --execute 及 YSK_EXECUTE=1。",
+    "dryPrune": "清理预览（未应用）。",
+    "dryEngine": "引擎控制此为试运行。",
+    "dryDaemon": "将写入 /etc/docker/daemon.json 并重启 docker.service。",
+    "daemonWrote": "已写入 daemon.json",
+    "start": "已启动容器",
+    "stop": "已停止容器",
+    "restart": "已重启容器",
+    "remove": "已删除容器",
+    "ran": "已用映像启动容器",
+    "pulled": "已拉取映像",
+    "exec": "已执行允许清单内的 exec",
+    "imageRemoved": "已删除映像",
+    "volumeCreated": "已创建 volume",
+    "volumeRemoved": "已删除 volume",
+    "networkCreated": "已创建网络",
+    "networkRemoved": "已删除网络",
+    "pruned": "清理完成",
+    "compose": {
+      "up": "已启动 Compose 项目",
+      "down": "已停止 Compose 项目",
+      "restart": "已重启 Compose 项目",
+      "rm": "已删除 Compose 项目"
+    },
+    "engine": {
+      "start": "已启动 docker.service",
+      "stop": "已停止 docker.service",
+      "restart": "已重启 docker.service"
+    }
+  },
+  "needEngineTitle": "请先安装 Docker Engine",
+  "notInstalledValue": "未安装",
+  "nameHint": "字母、数字、下划线、点、连字符（最长 128）",
+  "volPlaceholder": "my-data",
+  "netPlaceholder": "my-net",
+  "runPorts": "发布端口",
+  "runPortsHint": "每行 host:container，例如 8080:80",
+  "runEnv": "环境变量",
+  "runEnvHint": "每行 KEY=value",
+  "runRestart": "重启策略",
+  "runNetwork": "网络",
+  "runVolumes": "Volume",
+  "runVolumesHint": "每行 volume:dest",
+  "runAdvancedHint": "多服务堆栈请用验证者节点，或主机上已有的 Compose 文件。",
+  "daemonConfirmTitle": "应用引擎设置？",
+  "daemonConfirmDesc": "会写入 daemon.json 并重启 docker.service。所有容器都会中断。",
+  "ui": {
+    "whatYouGet": "此页可以做什么",
+    "whatYouGetLead": "先安装 Docker Engine。之后可以运行单个容器、拉取映像，并查看本机已有的验证者 Compose 堆栈。",
+    "capEngine": "引擎",
+    "capEngineDesc": "一键安装 docker.io 及 docker-compose-v2。可在此页启动或停止 docker.service。",
+    "capWork": "容器与映像",
+    "capWorkDesc": "选择常用映像、拉取、运行，然后查看日志或检查容器。",
+    "capStacks": "验证者堆栈",
+    "capStacksDesc": "多服务堆栈是验证者 Compose 项目（yskval-*）。本页不接受上传 YAML。",
+    "cardEngine": "引擎",
+    "cardDisk": "磁盘",
+    "cardWork": "本机现况",
+    "compose": "Compose",
+    "cgroup": "cgroup",
+    "used": "已用",
+    "free": "可用",
+    "running": "运行中",
+    "images": "映像",
+    "volumes": "Volume",
+    "networks": "网络",
+    "goImages": "映像",
+    "goValidators": "验证者节点",
+    "imagePickHint": "请选择常用映像。只有需要其他参考名称时，才选「其他」。",
+    "imageCustom": "其他",
+    "driver": "驱动",
+    "driverLocalOnly": "本页只创建 local volume。",
+    "netDefaultDriver": "新建网络使用 Docker 默认的 bridge 驱动。",
+    "pruneWhat": "要清理什么",
+    "pruneAck": "我明白未使用的数据会被删除，并且无法还原",
+    "pruneAckDesc": "清理 volume 或整个系统无法还原。会按所选范围删除已停止的容器与未使用的映像。",
+    "pruneNow": "立即清理",
+    "useMirrors": "使用 Registry 源",
+    "useInsecure": "允许未加密 Registry",
+    "publishPorts": "向主机发布端口",
+    "attachVolume": "挂载 volume",
+    "setEnv": "设置环境变量",
+    "defaultNet": "默认",
+    "mountPath": "挂载路径",
+    "restartNo": "从不",
+    "restartUnless": "除非已停止",
+    "restartAlways": "始终",
+    "restartOnFail": "失败时",
+    "needAck": "清理前请先确认",
+    "scopeContainers": "已停止的容器",
+    "scopeImages": "未使用的映像",
+    "scopeVolumes": "未使用的 volume",
+    "scopeBuilder": "构建缓存",
+    "scopeSystem": "所有未使用项",
+    "noVolumesYet": "尚无 volume — 请先到 Volume 分页创建。",
+    "customPort": "其他主机端口",
+    "customPortHost": "主机端口",
+    "customPortContainer": "容器端口",
+    "pctUsed": "已用 {{n}}%",
+    "customPortHint": "1–65535。例如 9090 → 80。",
+    "pickBridge": "选择 bridge 网络"
+  },
+  "deleteTitle": "删除 {{id}}",
+  "deleteDesc": "此操作无法复原。",
+  "deleteC1": "会从这台主机移除该资源。",
+  "deleteComposeVal": "这是验证者堆栈 — 验证者实例会一并删除。",
+  "pruneTitle": "清理 Docker 资源",
+  "pruneDesc": "输入 PRUNE 以确认。已删除的数据无法复原。",
+  "pruneC1": "会删除所选范围内未使用的资源。",
+  "pruneC2": "Volume 与系统清理会永久删除未使用的数据卷。",
+  "pruneC3": "会移除此范围内已停止的容器或未使用映像。",
+  "df": {
+    "images": "Images",
+    "containers": "Containers",
+    "volumes": "Local volumes",
+    "builder": "Build cache",
+    "other": "Other"
+  },
+  "deleteRunningWarn": "This container is still running or restarting. It will be force-removed.",
+  "stopEngineDesc": "This stops the Docker engine and all {{n}} container(s) on this host."
+}

package/locales/zh-CN/email.json

@@ -47,7 +47,7 @@
   "needExecute": "需 YSK_EXECUTE",
   "viewQueue": "查看伫列",
   "flushQueue": "清空伫列",
-  "queueHint": "按“查看伫列”读取本机 Postfix 伫列。无 EXECUTE 或无 postqueue 时会显示失败原因。",
+  "queueHint": "本机 Postfix 队列。查看是读取探测；清空需要 YSK_EXECUTE。",
   "deleteThisId": "删除此 ID",
   "queueEmpty": "无待送邮件",
   "queueEmptyHint": "目前没有待送邮件",
@@ -101,10 +101,11 @@
   "normal": "正常",
   "statMailboxes": "邮箱",
   "statDnsRecords": "DNS 纪录",
-  "dnsTodosTitle": "DNS",
+  "dnsTodosTitle": "域名系统",
   "copyAllRecords": "复制全部纪录",
   "openDnsPage": "开启 DNS 页",
   "healthScore": "健康分",
+  "healthUnchecked": "尚未檢查",
   "suggestedRecords": "建议纪录数",
   "externalTodosCount": "外部待办",
   "colType": "类型",
@@ -316,7 +317,8 @@
     "dmarcMissing": "缺少 DMARC — 强烈建议设置",
     "ptrBad": "PTR 反向 DNS 缺失或不正确 — 请向 VPS 供应商申请",
     "port25Blocked": "外发 Port 25 似乎被封锁 — 请申请解封或改用 SMTP 中继",
-    "port25Unknown": "Port 25 状态未知 — 请执行连通性检查"
+    "port25Unknown": "Port 25 状态未知 — 请执行连通性检查",
+    "dmarcUnpublished": "DMARC 記錄已在面板產生，但公網尚未解析到"
   },
   "stack": {
     "tlsNote": "SMTP／IMAP 用 Let’s Encrypt TLS 证书",
@@ -357,7 +359,8 @@
     "postfixReloaded": "已重新加载 Postfix。",
     "postfixReloadFailed": "Postfix 重新加载失败：{{detail}}",
     "dovecotApplied": "已写入 Dovecot TLS 片段并尝试重新加载。",
-    "dovecotSkipped": "已跳过 Dovecot（未安装或 doveconf 不可用）。"
+    "dovecotSkipped": "已跳过 Dovecot（未安装或 doveconf 不可用）。",
+    "dovecotSslOmitted": "邮件证书不存在，已改写 Dovecot 为 ssl=no，避免单元因缺少证书而无法启动。"
   },
   "policyApplySystemHint": "勾选「套用到系统」才会写入 Postfix／Rspamd 映射并重新加载；否则只写控制面草稿。",
   "rateLimitAppliedNote": "已套用每小时外发限额与反垃圾标记（若启用系统套用）。",
@@ -396,12 +399,12 @@
   "deliverabilityDesc": "PTR／DNS／端口 25 检查",
   "dnsTodosDesc": "建议纪录可复制到外部 DNS 或到 DNS 页建 zone（写入 ≠ 权威上线）",
   "deliverabilityHonesty": "无法代设 PTR 或解除端口 25 封锁",
-  "warmupSuggest": "暖身建议",
-  "writeSsoSkeleton": "写入 Roundcube SSO 结构",
-  "rateLimitPerHour": "输出消息顶部",
-  "rateLimitGlobalHint": "全域享有各域名",
+  "warmupSuggest": "预热建议",
+  "writeSsoSkeleton": "写入 Roundcube SSO 骨架",
+  "rateLimitPerHour": "每小时讯息上限",
+  "rateLimitGlobalHint": "全域取各域名最小值",
   "savePolicyWritten": "只写入控制面",
-  "dnsblMultiIp": "多IP RBL",
+  "dnsblMultiIp": "多 IP RBL",
   "webmailTool": "网页邮件软件",
   "webmailToolRoundcube": "Roundcube（默认）",
   "webmailToolSnappy": "SnappyMail（轻量）",
@@ -473,5 +476,41 @@
   "mailboxEmptyTitle": "尚无邮箱",
   "passwordMismatch": "两次密码不一致",
   "passwordTooShort": "密码至少 8 个字符",
-  "mailboxUpdateNeedField": "请设置新密码或更改状态"
+  "mailboxUpdateNeedField": "请设置新密码或更改状态",
+  "catchallHint": "未对应的本地部分会送到目标信箱。只写草稿，须套用邮件才生效。",
+  "queueSearchPh": "搜索 ID、发件人或收件人…",
+  "queueId": "队列 ID",
+  "queueSender": "发件人",
+  "queueRecipients": "收件人",
+  "queueSize": "大小",
+  "queueReason": "原因",
+  "queueActive": "传送中",
+  "queueHeld": "已暂停",
+  "queueDeferred": "延迟",
+  "deleteQueueTitle": "删除此队列邮件？",
+  "deleteQueueDesc": "从本机 MTA 队列移除 {{id}}。需要 YSK_EXECUTE。",
+  "openQueuePage": "打开邮件队列",
+  "dovecotFailedHint": "Dovecot 服务失败。请先到软件分页查看状态；若邮件证书尚未签发，请先到 SSL 签发 mail 主机名。",
+  "domainsListDesc": "在此主机上注册的邮件域",
+  "healthChecklist": "检查清单 {{score}}/100",
+  "healthChecklistHint": "检查清单分数 — 尚未做 DNS／PTR／25 端口实测",
+  "healthLiveHint": "实测分数",
+  "installWebmailTitle": "创建共享网络邮件项目（首次安装）",
+  "reinstallWebmailTitle": "重建/升级现有的Webmail项目",
+  "reinstallNeedInstall": "首先安装网络邮件",
+  "dovecotFailedStatus": "鸽舍是{{status}}。打开设备摘要的“软件”选项卡。",
+  "mailCertMissing": "{{hosts}} 没有证书。在 SSL 页面上发布。",
+  "mailCertPresent": "邮件证书已颁发 - 这不是缺少证书的问题。",
+  "webmailNeedCert": "{{host}} 没有证书 — 在强制使用 HTTPS 之前在 SSL 上颁发证书。",
+  "flushQueueEmpty": "队列为空",
+  "flushQueueNeedExecute": "刷新队列需要YSK_EXECUTE（主机执行权限）",
+  "healthUncheckedHint": "尚未实测 DNS／PTR／25 端口。",
+  "deliverabilityScore": "送达能力检查包",
+  "opendkimNoReload": "OpenDKIM 不支持重载 — 更改密钥或对照表后请用重启。",
+  "opendkimNoReloadTitle": "此堆栈不支持 systemctl reload opendkim",
+  "tlsRequestLeFor": "Request LE for {{host}}",
+  "deliverabilityChecks": "Checks",
+  "healthPartialScore": "Partial {{n}}/100 (DNS only)",
+  "healthPartialHint": "DNS checklist only — live and blacklist not probed.",
+  "deleteImpact": "{{mailboxes}} mailboxes · {{records}} DNS records · {{aliases}} aliases"
 }

package/locales/zh-CN/errors.json

@@ -37,7 +37,9 @@
     "sessionExpired": "登录已失效，请重新登录",
     "sessionIdle": "闲置超时，请重新登录",
     "totpNotEnabled": "未启用 2FA",
-    "totpSecretNoDataDir": "TOTP secret 已加密但未设置 dataDir"
+    "totpSecretNoDataDir": "TOTP secret 已加密但未设置 dataDir",
+    "mustChangePassword": "请先设定新密码才可继续",
+    "policyNeedsOwn2fa": "为此账户启用 2FA 并使用 TOTP 代码进行确认，然后再要求其他账户使用 2FA"
   },
   "http": {
     "notFoundRoute": "找不到：{{method}} {{path}}",
@@ -47,7 +49,8 @@
     "unprocessable": "操作无法完成（服务器拒绝）",
     "requestFailed": "请求失败（{{status}}）",
     "jsonInvalid": "JSON 无效",
-    "internal": "内部错误"
+    "internal": "内部错误",
+    "payloadTooLarge": "请求内容过大"
   },
   "YSK_HOST_BROWSE_SSRF": "主機瀏覽已被安全政策攔截",
   "YSK_HOST_BROWSE_SESSION": "主機瀏覽工作階段不存在或已過期",

package/locales/zh-CN/fail2ban.json

@@ -8,10 +8,10 @@
   "startService": "启动服务",
   "notInstalled": "fail2ban 尚未安装",
   "toolHintPrefix": "底层工具：",
-  "toolHintBody": "fail2ban = 扫 log 后",
-  "toolHintTemp": "临时",
-  "toolHintBody2": "ban · 攻击应变请用",
-  "toolHintUfw": "UFW = 端口／永久规则",
+  "toolHintBody": "fail2ban 会扫描日志后临时封锁。攻击应变请用",
+  "toolHintTemp": "",
+  "toolHintBody2": "",
+  "toolHintUfw": "负责端口与永久规则。",
   "tabs": {
     "bans": "封锁列表",
     "whitelist": "白名单",
@@ -40,7 +40,7 @@
   "addWhitelist": "加入白名单",
   "applyPolicyIgnoreip": "套用策略（含 ignoreip）",
   "applyIgnoreipOk": "已把 ignoreip 写入 jail.local 并套用",
-  "ignoreipHint": "无 YSK_EXECUTE 时只写管理文件（apply_status=written）；",
+  "ignoreipHint": "没有系统变更权限时只写面板档。套用策略会重建 jail.local 的 ignoreip 并重新载入。",
   "whitelistTitle": "白名单 ({{count}})",
   "whitelistRemoved": "已移除白名单",
   "remove": "移除",
@@ -78,5 +78,30 @@
     "reload": "已重新加载 fail2ban",
     "restart": "已重启 fail2ban",
     "stop": "已停止 fail2ban"
-  }
+  },
+  "statWhitelist": "白名单",
+  "invalidIp": "请输入有效的 IPv4、IPv6 或 CIDR。",
+  "whitelistPendingApply": "已写入面板名单。请按「套用策略」才会写入 jail.local。",
+  "ignoreipFile": "dataDir/fail2ban/ignoreip.txt",
+  "jailsTabHint": "显示作用中 Jail 状态。要开关 Jail 请到「策略」分页。",
+  "colJail": "监狱",
+  "colEnabled": "开启",
+  "serviceStateLine": "单元 {{unit}} · {{state}} · 开机 {{boot}}",
+  "jail": {
+    "sshd": "远程登录暴力破解",
+    "nginxHttpAuth": "Nginx HTTP 验证",
+    "nginxBotsearch": "Nginx 扫描／机器人探测",
+    "nginxBadbots": "Nginx 已知恶意机器人",
+    "nginxLimitReq": "Nginx 限速 Jail",
+    "postfix": "Postfix 邮件暴力破解",
+    "dovecot": "Dovecot 邮件登录",
+    "recidive": "累犯"
+  },
+  "cannotBanSelf": "这是主机或您的登录 IP — 将其添加到ignoreip而不是禁止",
+  "suggestIgnoreHint": "建议的管理 IP（仅在您应用策略之前为面板文件）：",
+  "suggestIgnoreAdd": "添加 {{ip}}",
+  "whitelistEmptyWarn": "白名单为空，jail 可能把你自己封锁。套用 ignoreip 前请先加入登录 IP。",
+  "suggestIgnoreLogin": "你的登录 IP {{ip}}",
+  "applyIgnoreEmptyWarn": "白名单为空时套用会清空 ignoreip",
+  "applyIgnoreNeedConfirm": "会重写 jail ignoreip 并重新载入 fail2ban"
 }

package/locales/zh-CN/files.json

@@ -293,7 +293,7 @@
   "shareBtStats": "BitTorrent 状态",
   "btSeeds": "种子",
   "btLeechers": "下载者",
-  "btPeers": "Peers",
+  "btPeers": "同行",
   "btUploadSpeed": "上传速度",
   "btDownloadSpeed": "下载速度",
   "btUploaded": "已上传",
@@ -308,7 +308,7 @@
   "btError": "做种错误",
   "publicShareMethod": "请选择下载方式",
   "publicShareDirect": "直接下载",
-  "publicShareBt": "BitTorrent",
+  "publicShareBt": "BT",
   "openBtTracker": "打开 BT Tracker",
   "publicShareBtInBrowser": "在浏览器以 WebTorrent 下载",
   "publicShareBtProgress": "已下载 {{pct}}% · {{peers}} 个 peers · ↓ {{down}} · ↑ {{up}}",
@@ -316,5 +316,48 @@
   "publicShareBtFailed": "WebTorrent 失败：{{detail}}",
   "publicShareBtNeedMagnet": "此分享没有 magnet 链接",
   "publicShareBtUnsupported": "此浏览器无法运行 WebTorrent；请改用 magnet 或 .torrent",
-  "btNone": "—"
+  "btNone": "—",
+  "uploadStatusSkipped": "已跳过",
+  "uploadStatusCancelled": "已取消",
+  "conflict": {
+    "titleFile": "已有名为“{{name}}”的项目",
+    "titleFolder": "已有名为“{{name}}”的文件夹",
+    "descFile": "请选择处理方式。在选择“替换”之前不会覆盖现有文件。",
+    "descFolder": "请选择处理方式。“合并”会保留现有文件夹，再处理其中的文件。",
+    "incoming": "即将加入",
+    "existing": "已在此处",
+    "kindFile": "文件",
+    "kindFolder": "文件夹",
+    "skip": "跳过",
+    "skipHint": "不加入此项目",
+    "keepBoth": "保留两者",
+    "keepBothHint": "将新项目存为 {{name}}",
+    "replace": "替换",
+    "replaceHint": "覆盖现有文件。可能时会保留版本快照。",
+    "replaceFolderHint": "覆盖文件夹中的同名文件，其余文件会保留。",
+    "merge": "合并",
+    "mergeHint": "保留现有文件夹，并将新文件加入其中",
+    "applyAll": "应用到其余所有重名",
+    "applyAllHint": "本次拖放或复制／移动的其余项目都使用同一做法",
+    "cancelRest": "取消其余项目",
+    "progress": "第 {{current}}／{{total}} 项",
+    "typeMismatch": "此处已有名为“{{name}}”的{{destKind}}，即将加入的是{{incomingKind}}。",
+    "skipped": "已跳过",
+    "cancelled": "已取消"
+  },
+  "emptyTrashTitle": "清空垃圾箱？",
+  "emptyTrashDesc": "垃圾箱中的每个文件都将被永久删除。此操作无法撤消。",
+  "purgeForeverDesc": "该文件将被永久删除。此操作无法撤消。",
+  "webdavReissueUnchanged": "重新签发后令牌编号未变——写入可能未生效，请再试一次。",
+  "webdavDisableFailed": "停用后状态仍为启用——写入可能未生效，请再试一次。",
+  "dirNamedLikeFile": "（文件夹残留；名称像文件）",
+  "webdavAfterEnable": "启用 WebDAV 并签发令牌后才可用。",
+  "webdavAlreadyOff": "WebDAV is already off",
+  "deleteMore": " and {{n}} more",
+  "unshareTitle": "Revoke this share?",
+  "unshareDesc": "Revoke the link for {{name}} ({{url}}). The link stops working immediately.",
+  "pillTrash": "{{count}} in trash",
+  "pillSpace": "{{used}} used",
+  "webdavTokenInactive": "Disabled — token #{{id}} is not active",
+  "webdavOffNoToken": "Disabled (no active token)"
 }

package/locales/zh-CN/firewall.json

@@ -29,7 +29,7 @@
   "notInstalled": "UFW 尚未安装",
   "toolHintPrefix": "底层工具：",
   "toolHintBody": "UFW = 端口／永久规则 · 攻击应变与自动 ban 请用",
-  "toolHintFail2ban": "fail2ban = 日志临时 ban",
+  "toolHintfail2ban": "fail2ban = 日志临时 ban",
   "executeOffHint": "系统变更未开 — 可看状态，改规则需 root + YSK_EXECUTE=1",
   "tabs": {
     "rules": "规则表",
@@ -89,6 +89,7 @@
   "deleteRuleDesc": "将从 UFW 移除该规则编号（需系统变更权限）。",
   "servicesTitle": "托管服务端口",
   "servicesHint": "YSK 托管服务的期望网络暴露。启动服务时会自动同步这些规则。",
+  "servicesUfwOff": "UFW 已關閉。此列表只是預期暴露，並非主機上已強制執行的規則。",
   "servicesEmpty": "尚无服务暴露数据",
   "servicesEmptyDesc": "启动托管服务（Web、FTPS、VPN、数据库…）后会出现在此列表。",
   "servicesManualHint": "手动开端口 chips 在「端口」分页 — 建议在此管理，规则会带 ysk-svc 标记。",
@@ -98,5 +99,13 @@
   "colPorts": "端口",
   "colSync": "状态",
   "synced": "已同步",
-  "syncNow": "立即同步"
+  "syncNow": "立即同步",
+  "disableConfirmTitle": "停用 UFW？",
+  "disableConfirmDesc": "主机防火墙将停止过滤流量。若主机在公众网络上，SSH 与面板可能直接暴露。",
+  "disableConfirmConsequence": "现有允许／拒绝规则仍会保留，但要重新启用 UFW 才会生效。",
+  "toolHintFail2ban": "fail2ban = 基于日志的临时禁令",
+  "desiredOnlyUfwOff": "设定：{{mode}} · UFW 关闭（未套用）",
+  "syncNotApplied": "UFW 关闭 · 未套用",
+  "defaultNotApplied": "不适用（UFW 关闭）",
+  "ufwOffHint": "UFW 关闭时不应用默认传入"
 }

package/locales/zh-CN/ftp.json

@@ -131,5 +131,36 @@
   "sftpRegister": "登记公钥",
   "sftpAddedAt": "添加于 {{time}}",
   "sftpTechSummary": "技术细节（高级）",
-  "sftpTechNote": "公钥会写入管理路径"
+  "sftpTechNote": "公钥会写入管理路径",
+  "filterProject": "只显示此项目的 FTP 帐户",
+  "clearProjectFilter": "显示全部帐户",
+  "vsftpdFailedHint": "vsftpd 服务失败。请到服务分页查看设定与日志（listen 与 listen_ipv6 不可同时为 YES）。",
+  "tabService": "服务",
+  "listenConflictLive": "Live vsftpd.conf 有listen={{v4}} 和listen_ipv6={{v6}} — 两个YES 都将无法启动。",
+  "listenConflictNeedFix": "首先修复listen/listen_ipv6（它们不能同时为YES），然后应用。",
+  "fixListenIpv4": "仅使用 IPv4（listen=YES，listen_ipv6=NO）",
+  "liveFileValue": "立即归档：{{value}}",
+  "startBlockedFailed": "服务失败 - 在启动前应用有效的配置",
+  "ftpsNeedCert": "首先选择一个证书域",
+  "detectPublicIp": "检测公网IP",
+  "detectPublicIpTitle": "填写来自该主机的第一个非环回 IPv4",
+  "pasvIpRequired": "套用前请填写 PASV 公网 IP（NAT／云主机）。可探测或手动输入。",
+  "vsftpdFailedGeneric": "vsftpd failed. Open the Service tab for live settings and journal.",
+  "stateFailed": "Failed to start",
+  "plaintextInsecure": "Cleartext FTP (no TLS) — insecure. Enable FTPS before exposing port 21.",
+  "plaintextPublicLive": "vsftpd is listening on a public address without FTPS. Credentials travel in the clear. Enable FTPS, bind to this host only, or confirm PLAINTEXT to keep this posture.",
+  "bindAddress": "Listen scope",
+  "bindAddressHint": "New installs bind to this host only. Public listen without FTPS needs a typed confirmation.",
+  "bindLocal": "This host only",
+  "bindLocalHint": "127.0.0.1 — fine without TLS for local tests",
+  "bindPublic": "Public",
+  "bindPublicHint": "All interfaces — enable FTPS or confirm PLAINTEXT",
+  "enableFtpsAndStart": "Enable FTPS and start",
+  "publicPlainNeedConfirm": "Public cleartext FTP needs a PLAINTEXT confirmation",
+  "plainConfirmTitle": "Start public FTP without FTPS?",
+  "plainConfirmDesc": "Port 21 will accept logins and data in the clear on the public address.",
+  "plainConfirmC1": "Usernames and passwords are visible on the network.",
+  "plainConfirmC2": "PASV will advertise the configured public IP.",
+  "plainConfirmC3": "Host firewall and cloud security group are not opened for you.",
+  "plainConfirmAction": "Start cleartext FTP"
 }

package/locales/zh-CN/hostBrowse.json

@@ -82,6 +82,8 @@
   },
   "home": "主頁",
   "bookmark": "書籤",
+  "bookmarkAdd": "加入或移除書籤",
+  "bookmarkList": "書籤清單",
   "bookmarks": "書籤",
   "history": "瀏覽記錄",
   "bookmarkToggled": "已更新書籤",
@@ -124,5 +126,25 @@
   "mediaAudioLabel": "音频",
   "mediaAudioDesc": "可选自主机 Chrome 的桥接；可能需要解锁点击。",
   "mediaPolicyLabel": "策略",
-  "mediaPolicyDesc": "下载与自动播放遵循上方安全与下载设置。"
+  "mediaPolicyDesc": "下载与自动播放遵循上方安全与下载设置。",
+  "frameBlocked": "页面无法在面板框架内显示。",
+  "historyEmpty": "此工作阶段尚无浏览记录。",
+  "bookmarksEmpty": "尚未有书签。",
+  "closeSessionHint": "会清掉此浏览工作阶段的 Cookie；书签会保留。",
+  "envUnset": "未设置",
+  "envPanelValue": "面板：{{value}}",
+  "settingsNoSandboxWarn": "会关闭 Chromium 沙箱。只应在可信的 container 内使用。下次真实浏览器工作阶段才生效。",
+  "settingsDangerDlWarn": "允许经主机浏览器下载可执行文件与脚本。请确认确实需要。",
+  "settingsDangerConfirmTitle": "启用高风险浏览设置？",
+  "needUrl": "请先在上方输入网址开始会话。",
+  "envColVar": "变量",
+  "envColHost": "主机进程",
+  "envColPanel": "面板设置",
+  "envColEffective": "生效值",
+  "engineBrowserNeedChrome": "Real browser (Chrome not installed)",
+  "egressHint": "The target site sees this server’s outbound address ({{host}}), not your laptop. Cookies stay in the server session jar.",
+  "closeNoSession": "No session yet",
+  "resumeHintDetail": "Resume previous session ({{count}} tabs) · {{url}} · {{when}}",
+  "resumeHintOwned": "Resume last browse for {{user}} ({{count}} tabs) · {{url}} · {{when}}",
+  "clearSessionData": "Clear session data"
 }

package/locales/zh-CN/listToolbar.json

@@ -8,5 +8,6 @@
   "activeFilters": "已应用 {{count}} 个筛选",
   "noResults": "无匹配结果",
   "noResultsHint": "试试其他关键词，或清除筛选。",
-  "searching": "搜索中…"
+  "searching": "搜索中…",
+  "emptyChip": "No items in this filter"
 }

package/locales/zh-CN/login.json

@@ -10,5 +10,10 @@
   "totpLabel": "双重验证码",
   "totpHint": "Authenticator 应用中的 6 位数字",
   "submitting": "登录中…",
-  "sessionExpired": "登录已失效，请重新登录"
+  "sessionExpired": "登录已失效，请重新登录",
+  "newPassword": "新密码",
+  "newPasswordAgain": "再次输入新密码",
+  "changePassword": "更改密码",
+  "passwordMismatch": "两次输入的密码不一致",
+  "passwordChanged": "密码已更新"
 }