ysk-server-shared 1.0.0

package/locales/zh-CN/protection.json

@@ -0,0 +1,348 @@
+{
+  "levels": {
+    "low": {
+      "label": "正常",
+      "verb": "系统平稳",
+      "hint": "维持日常防护即可"
+    },
+    "elevated": {
+      "label": "偏高",
+      "verb": "有异常迹象",
+      "hint": "建议切到「加固」并留意可疑 IP"
+    },
+    "under_attack": {
+      "label": "受攻击",
+      "verb": "疑似正在受攻击",
+      "hint": "立即套用「受攻击」檔 + 批量封禁"
+    },
+    "critical": {
+      "label": "危急",
+      "verb": "威胁严重",
+      "hint": "考虑紧急档；确认白名单有你"
+    }
+  },
+  "presetsWhen": {
+    "daily": "日常运营",
+    "hardened": "扫描／暴力",
+    "under_attack": "L7 爆量",
+    "emergency": "最后手段"
+  },
+  "note": {
+    "notApplied": "未套用到系统（需 root + YSK_EXECUTE=1）— 已记到管理设置",
+    "nginxWritten": "已写入 Nginx 限速管理檔",
+    "f2bWritten": "已写入 fail2ban 管理設定"
+  },
+  "rel": {
+    "justNow": "刚刚",
+    "minutesAgo": "{{n}} 分钟前",
+    "hoursAgo": "{{n}} 小时前"
+  },
+  "apiUnreachable": "无法连线 API（Web proxy／后端可能未启动）",
+  "geoipLoadFailed": "加载 GeoIP 失敗",
+  "loadFailed": "加载失敗",
+  "previewDone": "预览完成（未写入）",
+  "presetApplied": "已套用防护档",
+  "manualBan": "手动封禁",
+  "banSent": "已送出封禁 {{ip}}",
+  "quickSelectBan": "快速选取封禁",
+  "bulkBan": "批量封禁 {{count}} 個",
+  "autoBanStatus": "自動 ban：{{onOff}} · {{mode}} · {{method}}",
+  "autoBanUpdated": "已更新自動 ban",
+  "automationMaster": "自动化主开关：{{onOff}}",
+  "autoPresetStatus": "自動防护档：{{onOff}}",
+  "autoBanAutomation": "自動 ban：{{onOff}}（{{mode}}）",
+  "automationSaved": "已保存自动化设置",
+  "statFirewall": "防火墙",
+  "statAutoBan": "自動 ban",
+  "statApply": "系统套用",
+  "statActiveBans": "活跃封禁",
+  "statPreset": "防护档",
+  "threatPill": "威胁 {{label}} · {{score}} 分",
+  "reprobed": "已重新探测",
+  "loadingStatus": "加载防護狀態…",
+  "tabs": {
+    "command": "应变",
+    "automation": "自动化",
+    "bans": "封禁",
+    "geo": "IP 准入",
+    "stack": "底层",
+    "intel": "情报",
+    "about": "说明"
+  },
+  "reapply": "重新套用",
+  "nginxLimits": "Nginx 限速",
+  "notWritten": "未写",
+  "mode": "模式",
+  "controlPlane": "控制面",
+  "canApply": "可套用",
+  "needRoot": "需 root",
+  "writeOnly": "只写文件",
+  "autoRunning": "运行中 · 间隔 {{sec}}s · 本小时 ban {{n}}",
+  "autoOffManual": "关闭 — 只人手操作",
+  "lastTick": "· 上次 {{t}}",
+  "nextTick": "· 下轮 {{t}}",
+  "on": "开",
+  "off": "关",
+  "open": "开啟",
+  "ranAutomationTick": "已跑一輪自动化",
+  "escalateHardened": "加固 ≥ 分数",
+  "escalateAttack": "受攻击 ≥ 分数",
+  "deescalateDaily": "回落日常 < 分数",
+  "zeroOff": "0 关",
+  "holdAfterEscalate": "升档后最少维持",
+  "min5": "5 分",
+  "min15": "15 分",
+  "min30": "30 分",
+  "hour1": "1 时",
+  "hour2": "2 时",
+  "hour6": "6 时",
+  "presetOrCustom": "预设档 / 自定义",
+  "autoBanMode": "自动封禁模式",
+  "soft": "宽松",
+  "normal": "标准",
+  "aggressive": "积极",
+  "custom": "自定义",
+  "method": "方式",
+  "banMethod": "封禁方式",
+  "both": "两者",
+  "scoreGte": "分数 ≥",
+  "hitsGte": "请求 hits ≥",
+  "hits429Gte": "429 相关 hits ≥",
+  "scanHitsGte": "扫描路径 hits ≥",
+  "cooldown": "冷却",
+  "maxPerHour": "每小时上限",
+  "scanInterval": "掃描间隔",
+  "schedulerDefault": "scheduler 默认 120s",
+  "collapse": "收起",
+  "expand": "展开",
+  "step": "步骤",
+  "mechanism": "机制",
+  "youCanTune": "你可调",
+  "probe": "探测",
+  "probeSignals": "外網／请求率／TCP／f2b／UFW",
+  "escalateThreshold": "升档门槛",
+  "emergency": "紧急",
+  "neverAuto": "永不自动",
+  "manualEmergency": "人手 EMERGENCY",
+  "signalNetworkDown": "外网断",
+  "signalHighReq": "高请求率",
+  "signalDdos": "DDoS 啟發式",
+  "signalTcp": "TCP 连接",
+  "signalUfwOff": "UFW 关閉",
+  "signalF2bBans": "fail2ban 封禁数",
+  "weightHint": "{{label}} 权重 0–3",
+  "detected": "（已检测）",
+  "notSet": "（未设置）",
+  "zonesComma": "Zones（逗号分隔）",
+  "underAttackRequested": "已请求 Under Attack",
+  "underAttackCleared": "已请求解除 UA",
+  "autoBanOpen": "已开 · {{mode}} · 本小时 {{n}}/{{max}}",
+  "autoBanClosed": "关閉 — 只靠手动／列表",
+  "pausedNoExecute": "· 暂停（無 EXECUTE）",
+  "circuitOpen": "· 已熔断",
+  "autoBanModeLabel": "自動 ban 模式",
+  "scanned": "已扫描",
+  "bulkOps": "批量操作",
+  "fromAccessLog": "来自 access log · 一键或批量封禁",
+  "noSuspectIps": "暫时無可疑 IP",
+  "noSuspectDesc": "有扫描／429 流量时会自动出现。亦可展开手动封禁。",
+  "whitelistPlus": "白名单 + {{ip}}",
+  "whitelistAdded": "已加入白名单",
+  "activeBansTitle": "活跃封禁 ({{count}})",
+  "activeBansDesc": "防護中心汇总 · 解封经 defense API（同 fail2ban-client）",
+  "source": "来源",
+  "unbanned": "已解封",
+  "noBans": "未有封禁",
+  "noBansDesc": "封禁后显示于此",
+  "collapseQuickAdd": "收起快加",
+  "quickAddOne": "快加一条",
+  "removeItem": "移除 {{w}}",
+  "updated": "已更新",
+  "ipOrCidr": "IPv4／IPv6 或 CIDR",
+  "autoBanWhitelistAdded": "已加入 auto-ban 白名单",
+  "added": "已加入",
+  "banIpPlaceholder": "要封禁的 IPv4 或 IPv6",
+  "reason": "原因",
+  "scanBrute": "扫描 / 暴力",
+  "noSignals": "尚无信号",
+  "pressReprobe": "按重新探测",
+  "points": "分",
+  "noTopIps": "暂无 Top IP",
+  "topIpsAfterLog": "有 log 后会显示",
+  "noManagedVhost": "无 managed vhost",
+  "afterPresetMarker": "套用防护档後会注入 marker",
+  "injected": "已注入 YSK_DEFENSE",
+  "notInjected": "未注入",
+  "noEvents": "暂无事件",
+  "eventsAfterOps": "套用／封禁后出现",
+  "geoipUpdated": "GeoIP 库已更新",
+  "dbReady": "库就绪",
+  "stale": "过旧",
+  "older7d": ">7 日",
+  "lastSuccess": "上次成功",
+  "downloaded": "已下载",
+  "missing": "缺失",
+  "geoMode": "Geo 准入模式",
+  "denyList": "封锁名单",
+  "allowListHighRisk": "允许名单 · 高危",
+  "autoUpdateDb": "自动更新库",
+  "countriesSelected": "国家（已选 {{n}}）",
+  "searchCountry": "搜索中文名或 ISO",
+  "countryPlaceholder": "中国 / CN",
+  "regionsSelected": "省／州（已选 {{n}}）",
+  "regionsHint": "依已选国家顯示；可自定义 CN-GD",
+  "pickCountryFirst": "建議先選国家以收窄列表",
+  "customRegion": "自定义，例 CN-GD",
+  "regionPlaceholder": "广东 / CA / 东京",
+  "continentsSelected": "大陆（已选 {{n}}）",
+  "continentsHint": "洲际（可选）",
+  "continentPlaceholder": "亚洲 / EU",
+  "asnsSelected": "供应商 ASN（已选 {{n}}）",
+  "asnsHint": "雲／ISP；可自定义 ASN",
+  "customAsn": "自定义 ASN，例 13335",
+  "asnPlaceholder": "Cloudflare / 电信",
+  "cityExample": "例：CN|Shenzhen 或 US|Ashburn",
+  "policySaved": "政策已保存 · 国 {{c}} · 省 {{r}} · ASN {{a}}",
+  "ipPolicySaved": "IP 准入政策已保存",
+  "nginxGeoWritten": "已写入 nginx geo 片段",
+  "ipAddress": "IP 地址",
+  "lookupPlaceholder": "要查询的 IPv4 或 IPv6",
+  "wouldBlock": "会拦截 · {{reason}} · {{matched}}",
+  "wouldAllow": "放行 · {{reason}}",
+  "lookupDone": "Lookup 完成",
+  "item": "项目",
+  "value": "值",
+  "country": "国家",
+  "region": "省／州",
+  "city": "城市",
+  "continent": "大陆",
+  "coords": "坐标",
+  "provider": "供应商",
+  "policy": "政策",
+  "block": "拦截",
+  "allow": "放行",
+  "matched": "命中",
+  "applyStricterTitle": "套用較嚴防护档？",
+  "applyStricterDesc": "可能开啟自動 ban。請確認白名单有你的 IP。",
+  "confirmEmergencyTitle": "確認紧急防护档",
+  "confirmEmergencyDesc": "紧急檔會極度限速。請確認白名单有你的 IP，並輸入 EMERGENCY。",
+  "confirmString": "确认字符串",
+  "applyEmergency": "套用紧急檔",
+  "sectionPreset": "防护档",
+  "sectionAutoPreset": "① 自動防护档",
+  "sectionAutoBan": "② 自動封禁",
+  "unban": "解封",
+  "ban": "封禁",
+  "save": "保存",
+  "yes": "是",
+  "no": "否",
+  "oneClickSuggested": "一键套用建议档",
+  "viewPresets": "检视防护档",
+  "suspectIpsCount": "可疑 IP {{count}}",
+  "goBans": "去封禁",
+  "singleEntryPrefix": "单一入口：",
+  "singleEntryBody": " ",
+  "emergencyNeverAuto": "紧急档永不自动",
+  "writeOnlyBanner": "只写模式：系统套用需 EXECUTE=1 与 root。",
+  "readiness": "就绪探测",
+  "goTo": "前往",
+  "presetGuide": "",
+  "active": "作用中",
+  "recommended": "建议",
+  "useCarefully": "慎用",
+  "preview": "预览",
+  "stackToolsSee": "底层工具见「底層」分页 ·",
+  "readinessCheck": "就绪检查",
+  "automationMasterLabel": "自动化主开关",
+  "runOneTick": "立即执行一轮",
+  "suggestEmergencyBanner": "分数极高 — 系統建议緊急檔，但不会自动套用。请到应变人手确认。",
+  "autoPresetDesc": "依威胁分自动切 日常／加固／受攻擊。紧急档永不自动。",
+  "allowDeescalate": "允许自动回落（降档）",
+  "autoBanThresholdHint": "選 soft/normal/aggressive 会自动填阈值；選「自定义」先可改分数／hits。無 YSK_EXECUTE 時只会记录，不会真 ban。",
+  "sectionMechanism": "③ 机制说明",
+  "lastNotes": "上次：{{notes}}",
+  "sectionWeights": "④ 信号权重（0–3）",
+  "weightsDesc": "默认 1；加大会令该类信号更容易推高威胁分。细范围用单选，不用手填数字。",
+  "needCfToken": "需环境变量 CF_API_TOKEN",
+  "cfOnEscalate": "。升至「受攻擊」或人手套用該檔時可打 API。",
+  "ufwOnlyCf": "受攻击时 UFW 只放 CF 网段（+SSH）",
+  "ufwOnlyCfHint": "会重置 UFW 并只允许 Cloudflare IP；需系统变更权限。",
+  "saveZones": "保存 zones",
+  "uaNow": "立即 Under Attack",
+  "uaClear": "解除（→ high）",
+  "stackRoleNote": "UFW 與 fail2ban 是防护中心底下的工具页（不再占侧栏一级）。侧栏只保留本页。",
+  "fwUfwTitle": "防火墙 UFW",
+  "fwStats": "端口策略 · 永久 DENY · 允许 {{allow}} · 拒绝 {{deny}}",
+  "fwRulesProfiles": "UFW 规则与配置档",
+  "f2bStats": "日志临时 ban · {{jails}} jails · 封锁中 {{banned}}",
+  "jailsWhitelistPolicy": "Jail · 白名单 · 策略",
+  "divisionTitle": "分工一览",
+  "divisionUfw": "UFW = 开哪个端口、永久拒哪个 IP",
+  "divisionF2b": "fail2ban = 扫 log 之后临时 ban",
+  "divisionDefense": "本页应变／自動化 = 攻击时总控（限速档 + 自動 ban + 可疑列表）",
+  "autoBanLabel": "自動 ban",
+  "scanOnce": "扫一次",
+  "selectedIps": "已选 {{count}} 個 IP",
+  "banSelected": "封禁已选",
+  "suspectIps": "可疑 IP",
+  "selectAll": "全选",
+  "alreadyBanned": "已封",
+  "whitelist": "白名单",
+  "bansWorkflow": "攻击应变：可疑列表 → 封禁／解封。Jail 策略、ignoreip、服務生命周期见",
+  "f2bTool": "fail2ban 工具",
+  "noSecondJail": "（不在这里再做第二套 jail 編輯）。",
+  "autoBanWhitelistTitle": "自動 ban 白名单",
+  "autoBanWhitelistDesc": "防護中心 auto-ban 豁免（会同步 fail2ban ignoreip.txt）。完整 ignoreip 在 fail2ban 工具 → 白名单。",
+  "ignoreipWhitelist": "ignoreip 白名单",
+  "notSetSuggestAdmin": "未设置（建议加入你的管理 IP）",
+  "moreItems": "… 还有 {{n}} 项 · 見 fail2ban 白名单",
+  "add": "加入",
+  "manualBanTitle": "手动封禁",
+  "methodFollows": "方式沿用上方选择（fail2ban / UFW）",
+  "preferSuspectList": "多数情况用可疑列表即可。",
+  "threatSignals": "威胁信号",
+  "scoreSource": "分数來源 · 權重可調",
+  "accessAuthSample": "access + auth 样本",
+  "fullLogsAt": "完整 nginx／auth log 请到",
+  "logCenter": "日志中心",
+  "colScore": "分",
+  "banShort": "封",
+  "vhostLimits": "Vhost 限速",
+  "eventStream": "事件流",
+  "eventKind": {
+    "preset": "防护档",
+    "auto_preset": "自动切档",
+    "cloudflare_ua": "Cloudflare",
+    "ban": "封禁",
+    "unban": "解封"
+  },
+  "hours48": "48 小时",
+  "geoipDb": "GeoIP 数据库",
+  "refreshStatus": "刷新状态",
+  "updateDbNow": "立即更新库",
+  "geoipSourceHint": "默认本机 GeoIP 数据库；可选 IPinfo token。",
+  "retry": "重试",
+  "loadingGeoip": "加载 GeoIP 状态…",
+  "nextScheduledUpdate": "调度下次更新：{{at}}",
+  "statusNotLoaded": "尚未加载状态",
+  "load": "加载",
+  "accessPolicy": "准入政策",
+  "enable": "启用",
+  "freeGranularity": "免费最高细分：国家 + 省／州 + ASN；城市可选政策（默认关，准确率较低）。供應商 = ASN。Whitelist 永远豁免。点 chip 移除。",
+  "allowListDanger": "允许名單模式高危：不在名單的公網 IP（含未知 geo）會被擋。請確認管理端 IP 已加入封禁頁 whitelist。",
+  "dailySchedule": "每日调度",
+  "cityPolicy": "城市政策（低置信 · 可选）",
+  "useCityAccess": "用城市做准入",
+  "cityPolicyHint": "免费库城市准确率有限。格式 CN|Guangzhou；未勾选时城市只作查询展示。",
+  "noCitiesYet": "尚未加入城市",
+  "savePolicy": "保存政策",
+  "applyNginxSnippet": "套用 Nginx 片段",
+  "nginxSnippetHint": "需 nginx geoip2 模块才可在 HTTP 层拦截。",
+  "testIp": "测试 IP",
+  "lookup": "查询",
+  "plusCountry": "+ 国家 {{v}}",
+  "plusRegion": "+ 省 {{v}}",
+  "plusCity": "+ 城市 {{v}}",
+  "lastTickPrefix": "· 上次 {{t}}",
+  "nextTickPrefix": "· 下轮 {{t}}"
+}

package/locales/zh-CN/publicFiles.json

@@ -0,0 +1,32 @@
+{
+  "notSet": "未设置",
+  "quota": "配额",
+  "reloadOnApply": "套用时",
+  "path": "路径",
+  "fileManager": "文件管理",
+  "overview": "概览",
+  "overviewDesc": "即将套用的设置（只读摘要）",
+  "serverName": "服务器名称",
+  "reloadNginx": "重载 Nginx",
+  "reloadTry": "套用时尝试",
+  "siteSettings": "站点设置",
+  "siteSettingsDesc": "写入管理 conf；套用时可尝试 reload Nginx（套用后才可连）",
+  "serverNameHint": "Nginx server_name，例如 files.example.com",
+  "quotaMiB": "配额（MiB）",
+  "quotaHint": "可选；限制公开目录总量",
+  "unlimited": "不限",
+  "applyHint": "套用成功只代表设置已写入；DNS、SSL 与防火墙需另行就绪才会对外服务。",
+  "appliedOk": "已套用公开文件站点",
+  "applyReload": "套用并重载 Nginx",
+  "statusLive": "Nginx 已生效",
+  "statusManagedOnly": "仅管理档",
+  "statusNotApplied": "未套用",
+  "nginxLive": "已在 conf.d",
+  "nginxNotLive": "未进 conf.d",
+  "openSite": "打开网站",
+  "notLiveHint": "域名 404 多数是 conf 只写在 dataDir、未复制到 /etc/nginx/conf.d，或未 reload。请用 root + YSK_EXECUTE 再套用。未签发 SSL 前请用 http:// 打开。",
+  "diskRoot": "磁盘根目录",
+  "filesInRoot": "条目数",
+  "managedConf": "管理 conf",
+  "systemConf": "系统 conf.d"
+}

package/locales/zh-CN/rbac.json

@@ -0,0 +1,100 @@
+{
+  "permissions": "权限",
+  "permissionsDesc": "按角色加减能力；系统提供默认，可一键还原。",
+  "rolePolicy": "角色策略",
+  "dirty": "已自定义",
+  "factory": "系统默认",
+  "maxLevel": "最高等级",
+  "save": "保存策略",
+  "saved": "已保存 {{role}} 权限策略",
+  "restoreRole": "还原此角色默认",
+  "restoreAll": "还原全部角色",
+  "restoreRoleTitle": "将 {{role}} 还原为系统默认？",
+  "restoreRoleDesc": "将清除此角色的自定义能力，恢复出厂设置。",
+  "restoreAllTitle": "将全部角色还原为系统默认？",
+  "restoreAllDesc": "所有角色的自定义策略都会被清除。",
+  "restoredRole": "已还原 {{role}}",
+  "restoredAll": "已还原全部角色默认",
+  "bandAllOn": "全开",
+  "bandAllOff": "全关",
+  "diffFromFactory": "与默认不同",
+  "effectivePreview": "有效能力预览",
+  "userOverrides": "个人加减",
+  "extraGrants": "额外授予",
+  "extraRevokes": "额外撤销",
+  "restoreUserOverrides": "还原此用户覆盖",
+  "restoreUserOverridesTitle": "清除 {{name}} 的个人权限覆盖？",
+  "restoreUserOverridesDesc": "只清除额外授予/撤销，角色策略不变。",
+  "overridesBadge": "有覆盖",
+  "promoteAdminTitle": "提升为 Admin？",
+  "promoteAdminDesc": "Admin 默认可管理用户、改权限、模拟登录、还原备份等。请确认。",
+  "level": {
+    "read": "读取",
+    "write-low": "低危写入",
+    "write-high": "高危写入",
+    "destructive": "破坏性",
+    "privilege": "特权"
+  },
+  "cap": {
+    "dashboardRead": "总览",
+    "logsRead": "日志",
+    "metricsRead": "监控指标",
+    "projectsRead": "项目（读）",
+    "mailRead": "邮件（读）",
+    "dnsRead": "DNS（读）",
+    "sslRead": "SSL（读）",
+    "backupsRead": "备份（读）",
+    "updatesRead": "更新（读）",
+    "servicesRead": "服务（读）",
+    "firewallRead": "防火墙（读）",
+    "approvalsView": "审批（看）",
+    "usersSelf": "个人设置/2FA",
+    "projectsWrite": "项目创建改",
+    "mailWrite": "邮箱/别名",
+    "dbWrite": "数据库创建",
+    "sslUpload": "上传证书",
+    "filesProject": "项目文件",
+    "approvalsRespond": "审批处理",
+    "cronManage": "Cron 管理",
+    "servicesControl": "服务控制",
+    "updatesApply": "套件更新执行",
+    "dnsApply": "DNS 应用",
+    "sslIssue": "签发 SSL",
+    "publishApply": "发布/Nginx",
+    "firewallEdit": "防火墙编辑",
+    "mailApply": "邮件应用",
+    "runtimeTuning": "运行时调参",
+    "mysqlConsoleWrite": "MySQL 写入",
+    "projectsDelete": "删除项目",
+    "dbDrop": "删除数据库",
+    "backupsRun": "执行备份",
+    "backupsRestore": "备份还原",
+    "firewallFlush": "清空防火墙",
+    "logsPurge": "清除日志",
+    "usersManage": "用户管理",
+    "packagesManage": "方案管理",
+    "usersImpersonate": "模拟登录",
+    "securityPolicy": "安全策略",
+    "rbacPolicy": "权限策略",
+    "settingsSystem": "系统设置",
+    "auditExport": "审计导出",
+    "securityApiKeysAdmin": "API 密钥管理",
+    "networkBrowse": "主機代瀏覽",
+    "networkVnc": "VNC 远程桌面管理"
+  },
+  "aboutRoles": "角色说明（出厂默认）",
+  "aboutRolesBody": "角色决定默认权限；用户可再覆盖个别能力。",
+  "aboutQuota": "配额说明",
+  "aboutQuotaBody": "方案配额目前以面板/主机总量为主闸，并非完整多租户硬隔离。用量条若显示 host totals，即表示全机统计。",
+  "dangerPolicyTitle": "授予破坏性/特权能力？",
+  "dangerPolicyDesc": "你正在为该角色加入 destructive 或 privilege 能力，或提高 maxLevel。请确认风险后再保存。",
+  "needRbacPolicy": "需要 rbac.policy 才能编辑角色策略。",
+  "adminLockedFull": "Admin 全开（锁定）",
+  "adminLockedHint": "Admin 系统角色永远功能全开，不可削减。请改 Operator/Viewer/Agent，或对非 admin 用户做个人加减。",
+  "maxLevelHint": "高于此等级的能力组会自动锁定，无法开启。",
+  "capabilities": "能力清单",
+  "capabilitiesHint": "勾选此角色可用的功能。橙点表示与系统默认不同。",
+  "enabledCount": "已开 {{enabled}}／{{total}}",
+  "bandAboveMax": "高于最高等级",
+  "dirtyHint": "已自定义（与系统默认不同）"
+}

package/locales/zh-CN/readiness.json

@@ -0,0 +1,111 @@
+{
+  "cat": {
+    "core": "控制面",
+    "security": "权限与安全",
+    "binaries": "系统软件",
+    "hosting": "运行环境",
+    "dns": "DNS",
+    "email": "邮件",
+    "isolation": "项目隔离",
+    "ops": "运维"
+  },
+  "level": {
+    "ready": "就绪",
+    "degraded": "降级",
+    "missing": "缺少",
+    "unknown": "未知"
+  },
+  "severity": {
+    "critical": "关键",
+    "recommended": "建议",
+    "optional": "可选"
+  },
+  "fix": "修复",
+  "passed": "通过",
+  "checkFailed": "就绪检查失败",
+  "gatePass": "门槛通过 · {{pct}}%",
+  "gateFail": "尚未达标 · {{pct}}%",
+  "executeOn": "已开",
+  "executeOff": "未开",
+  "blockers": "阻挡",
+  "probing": "探测中…",
+  "reprobe": "重新探测",
+  "exportReport": "导出报告",
+  "firstBlocker": "处理首个阻挡",
+  "viewRecommended": "查看建议项",
+  "loadingProbe": "正在探测主机能力…",
+  "priorityTab": "优先修复",
+  "checklistTab": "完整清单",
+  "summaryTab": "摘要与快捷",
+  "priorityTitle": "优先修复",
+  "prioritySub": "按建议顺序处理；修好阻挡后再重新探测",
+  "nItems": "{{count}} 项",
+  "noHardBlockers": "无硬阻挡",
+  "noHardBlockersTitle": "没有硬阻挡项",
+  "prodGate": "生产门槛",
+  "gatePassed": "已通过",
+  "gateMaybePerm": "仍可能因权限未达标",
+  "viewDegradedHint": "可查看「降级」建议项（邮件、DNS、可选 runtime）。",
+  "viewDegraded": "查看降级项",
+  "fullChecklist": "完整检查清单",
+  "showing": "显示 {{shown}} / {{total}} 项",
+  "filterAria": "状态筛选",
+  "all": "全部",
+  "category": "类别",
+  "allCategories": "全部类别",
+  "searchPh": "标题、说明、id、修复提示…",
+  "quickCatAria": "快速类别",
+  "noMatchTitle": "没有符合的项目",
+  "noMatchDesc": "请清除搜索或更改筛选条件。",
+  "resetFilters": "重置筛选",
+  "summary": "摘要",
+  "shortcuts": "快捷入口",
+  "opsShortcutsAria": "运维捷径",
+  "scHost": "主机设置",
+  "scHostD": "hostname · 电源 · NTP",
+  "scUnit": "控制面 unit",
+  "scUnitD": "systemd 安装／启用",
+  "scServices": "服务矩阵",
+  "scServicesD": "nginx · DB · 生命周期",
+  "scMetrics": "主机指标",
+  "scMetricsD": "负载 · 内存 · 告警",
+  "scProtection": "防护中心",
+  "scProtectionD": "应变 · UFW · fail2ban",
+  "policyNote": "政策：邮件 PTR／Port 25／域名商 DNS 永不自动宣称完成。HTTP 503 = 未达标但仍有完整报告（非假成功）。",
+  "notProbedTitle": "尚未探测",
+  "notProbedDesc": "按「重新探测」开始只读就绪检查。",
+  "runCheck": "执行就绪检查",
+  "reportFormatError": "就绪报告格式错误",
+  "checkFailedHttp": "就绪检查失败（{{status}}）",
+  "itemAdminPassword": "管理员密码强度",
+  "itemAdminPasswordWeak": "{{count}} 个管理员仍标记 must_change_password／不安全 bootstrap — 上线前请更改",
+  "itemAdminPasswordOk": "管理员账户无 bootstrap／弱密码标记",
+  "itemAdminPasswordFix": "请到账号安全或用户页更改管理员密码",
+  "itemListenBind": "控制平面监听绑定",
+  "itemListenBindPublic": "可能对外监听（0.0.0.0/::）。建议 127.0.0.1 + 反向代理／防火墙",
+  "itemListenBindLoopback": "建议 loopback 绑定（默认 127.0.0.1）",
+  "itemDataDirPerms": "dataDir 权限",
+  "itemDataDirWorldW": "请将 dataDir chmod 750（或 700），并 chown 给面板用户",
+  "itemDataDirOtherR": "建议 dataDir chmod 750，避免其他用户读取控制平面 JSON",
+  "itemRustToolchain": "Rust 工具链",
+  "itemWebBuildFix": "按「立即修复」构建 Web 界面（本机需有 monorepo），或执行：pnpm --filter ysk-server-web build",
+  "itemWebBuildManual": "本机无 monorepo／无已打包 SPA，无法一键修复。请在有源码的机器执行 pnpm --filter ysk-server-web build，再将 apps/web/dist/* 复制到 dataDir/web（例如 /var/lib/ysk-server/web），或设置 YSK_WEB_ROOT 后重启控制面。",
+  "itemStateStore": "控制平面状态存储",
+  "itemStateStoreSqliteHint": "可选：YSK_STORE=sqlite 使用 WAL document store",
+  "itemBackupFreshness": "最近完整备份",
+  "itemBackupNone": "未记录 last_backup_run — 请执行 backup all 或设置排程",
+  "itemBackupFix": "ysk-server 全部备份 · 备份计划 --install",
+  "itemFleetSessions": "Fleet agent 会话",
+  "itemFleetNone": "单机可选；多边缘需 agent run + heartbeat",
+  "itemFleetNoHb": "已注册但无 heartbeat — 请启动边缘 agent",
+  "itemPdnsutil": "pdnsutil（PowerDNS）",
+  "apachePort80Title": "Apache 与公开 80 端口",
+  "apachePort80Detail": "Apache 正在监听 :80，Nginx 未占用公开 HTTP — 与「Nginx 作边缘」拓扑冲突。",
+  "apachePort80Both": "Apache 与 Nginx 同时出现在 :80 — 请将 Apache 改绑 127.0.0.1:8080。",
+  "apachePort80Ok": "Apache 运行中但未独占公开 :80（拓扑可接受）。",
+  "apachePort80Fix": "安装脚本已有 rebind；可停用占用 80 的 Apache vhost，或 reload 后用 ss -lntp 确认。",
+  "fixNow": "立即修复",
+  "fixFailed": "修复失败",
+  "fixDone": "已修复 dataDir 权限（chmod 750）",
+  "fixDoneWebUi": "已构建／安装 Web 界面"
+}

package/locales/zh-CN/redis.json

@@ -0,0 +1,68 @@
+{
+  "neverExpire": "永不过期",
+  "ttlSeconds": "{{ttl}} 秒",
+  "ttlMinutes": "{{n}} 分钟",
+  "ttlHours": "{{n}} 小时",
+  "ttlDays": "{{n}} 天",
+  "typeString": "字符串",
+  "typeHash": "哈希",
+  "typeList": "列表",
+  "typeSet": "集合",
+  "typeZset": "有序集合",
+  "keysLoadFailed": "无法加载鍵列表",
+  "writeFailed": "写入失败",
+  "saved": "已保存",
+  "deleted": "已删除",
+  "offline": "离线",
+  "connections": "连接数",
+  "totalKeys": "总键数",
+  "writable": "写入",
+  "connected": "已连接",
+  "notConnected": "未连接",
+  "keys": "鍵",
+  "selected": "选中",
+  "softwareMissing": "Redis 所需软件尚未安装",
+  "notConnectedTitle": "尚未连上 Redis",
+  "installThenStart": "请先使用上方横幅一键安装 Redis，再启动服务。",
+  "installedNotConnected": "服务已安装但未连上，请启动服务后即可浏览鍵与内容。",
+  "keysCountSuffix": " · {{n}} 个鍵",
+  "searchPlaceholder": "搜索鍵名，例如 user:* 或 *",
+  "searchKeys": "搜索鍵",
+  "rows": "{{n}} 筆",
+  "content": "内容",
+  "noMatchingKeys": "沒有符合的鍵",
+  "dbEmpty": "数据库 {{db}} 目前是空的。",
+  "noMatchPattern": "沒有符合「{{pattern}}」的鍵。",
+  "opsResult": "操作结果",
+  "addStringKey": "新增字符串鍵",
+  "writeToDb": "写入 Redis 数据库 {{db}}（实时生效，请謹慎）",
+  "keyName": "鍵名",
+  "keyNameHint": "建议用冒号分层，例如 session:user:1",
+  "ttlLabel": "过期时间（秒）",
+  "ttlHint": "可留空表示永不过期",
+  "m1": "1 分",
+  "m5": "5 分",
+  "h1": "1 时",
+  "d1": "1 日",
+  "d7": "7 日",
+  "customSeconds": "自定义秒数",
+  "stringValue": "字符串值，会以 SET 写入",
+  "stringContent": "字符串内容",
+  "deleteKeyTitle": "删除此鍵？",
+  "deleteKeyDesc": "确定从数据库 {{db}} 删除「{{key}}」？此操作无法复原。",
+  "installedOk": "Redis 已安装",
+  "startedOk": "Redis 已启动",
+  "memory": "内存",
+  "addKey": "新增鍵",
+  "dbLabel": "数据库 {{i}}",
+  "keysInDb": " · {{n}} 个鍵",
+  "dbRange": "共 {{n}} 个庫（0–{{max}}）。",
+  "serviceLink": "在服务设置加減数量",
+  "dbsWithData": "有资料的庫（快捷）",
+  "keysShort": "{{k}} 鍵",
+  "keyList": "鍵列表",
+  "pickKey": "从左側选擇一个鍵，即可查看内容。",
+  "ttlPrefix": "过期：{{ttl}}",
+  "writeLiveHint": "此操作直接写入执行中的 Redis，无法从面板一鍵还原。",
+  "refPath": "参考：{{path}}"
+}