ysk-server-shared 1.0.0

package/locales/zh-HK/security.json

@@ -0,0 +1,394 @@
+{
+  "title": "帳號安全",
+  "allowlist": "工具 允許清單",
+  "llmUntrusted": "LLM 輸出不可直接執行",
+  "pending": "待審批",
+  "runSysInfo": "執行 sys.info",
+  "none": "無待審批",
+  "pillPending": "{{count}} 待批",
+  "pillReady": "就緒",
+  "pill2faOff": "雙重驗證 未啟用",
+  "stat2fa": "2FA",
+  "statApi": "API",
+  "statSsh": "SSH",
+  "statPending": "待批",
+  "on": "開",
+  "off": "關",
+  "output": "輸出",
+  "tabAccount": "我的安全",
+  "tabApiKeys": "介面 金鑰",
+  "tabSsh": "SSH",
+  "tabApprovals": "審批",
+  "tabAllowlist": "允許清單",
+  "apiTokenOnce": "介面 權杖（只顯示一次）：",
+  "copiedToken": "已複製 權杖",
+  "totpTitle": "雙重驗證 (TOTP)",
+  "totpStatus": "狀態：",
+  "totpEnabled": "已啟用",
+  "totpEnrolledUnconfirmed": "進行中 — 請掃碼並確認",
+  "totpNotSet": "未設定",
+  "totpLead": "登入時需 App 6 位動態碼。",
+  "totpWhy1": "即使密碼洩露，沒有手機／App 動態碼都登入不到",
+  "totpWhy2": "高危操作可再要求一次 TOTP 確認（step-up）",
+  "totpWhy3": "支援 Google Authenticator、Authy、NordPass、1Password 等",
+  "totpAppsHint": "建議 App：Google Authenticator、Authy、Microsoft Authenticator、NordPass、1Password。",
+  "totpStepsLabel": "設定步驟",
+  "totpStepReauth": "驗證密碼",
+  "totpStepScan": "掃 QR／輸入密鑰",
+  "totpStepConfirm": "確認 6 位碼",
+  "totpStepBackup": "保存恢復碼",
+  "totpScanTitle": "掃描 QR Code",
+  "totpScanHint": "打開驗證器 App → 新增帳戶 → 掃描此 QR。",
+  "totpManualTitle": "或手動輸入密鑰",
+  "totpManualHint": "無法掃碼時，在 App 選擇「手動輸入」並貼上以下 Base32 密鑰。",
+  "totpShowOtpauth": "顯示 otpauth:// 連結（進階）",
+  "totpQrAlt": "TOTP 設定 QR Code",
+  "totpQrFailed": "無法產生 QR，請用下方密鑰手動加入",
+  "totpSecretCopied": "已複製密鑰",
+  "hideSecret": "隱藏密鑰",
+  "showSecret": "顯示密鑰",
+  "totpEnabledDesc": "已啟用。",
+  "totpRecoveryRemaining": "恢復碼剩餘 {{n}}",
+  "totpResetSummary": "重設或關閉 2FA…",
+  "totpResetHint": "重設會產生新 QR／密鑰（舊 App 條目失效）。關閉需輸入目前 App 碼或恢復碼。",
+  "totpDisableCodeHint": "App 6 位碼或恢復碼",
+  "disable2fa": "關閉 2FA",
+  "totpDisabledOk": "已關閉雙重驗證",
+  "reauthPassword": "重新驗證密碼",
+  "reauthPasswordHint": "開始／重設 雙重驗證 需要再輸入密碼（防 工作階段 被盜）",
+  "reauthPasswordRequired": "請先輸入登入密碼",
+  "totpSecretGenerated": "已產生密鑰 — 請掃 QR 或複製密鑰，再輸入 App 6 位碼確認",
+  "reset2fa": "重新設定 雙重驗證",
+  "start2fa": "開始設定 雙重驗證",
+  "secretLabel": "密鑰：",
+  "confirmCode": "App 顯示的 6 位碼",
+  "confirmCodeHint": "掃碼後，輸入驗證器 App 而家顯示的 6 位數字以確認綁定。",
+  "confirmCodeInvalid": "請輸入 6 位數字驗證碼",
+  "totpEnabledSaveCodes": "雙重驗證已啟用 — 請立即保存下方恢復碼（只顯示一次）",
+  "confirmEnable": "確認啟用",
+  "recoveryCodesHint": "恢復碼只顯示一次！請離線保存。每個碼只能用一次；手機丟失時可用恢復碼登入。",
+  "copiedRecoveryCodes": "已複製恢復碼",
+  "downloadRecovery": "下載 .txt",
+  "recoveryDownloaded": "已下載恢復碼檔案",
+  "copyAll": "複製全部",
+  "savedClose": "我已保存，完成",
+  "sessionsTitle": "工作階段",
+  "sessionsDesc": "",
+  "revokeOtherSessions": "登出其他裝置",
+  "revokedOtherSessions": "已登出 {{count}} 個其他工作階段",
+  "noSessions": "沒有使用中的工作階段",
+  "currentSession": "本機",
+  "revoke": "登出",
+  "passkeyTitle": "密鑰/WebAuthn",
+  "passkeyDesc": "",
+  "passkeyRegistered": "Passkey 已登記",
+  "webauthnFailed": "WebAuthn 失敗",
+  "webauthnUnsupported": "瀏覽器未暴露 WebAuthn API。Brave／Chrome／Firefox 請確認非特殊模式；仍可用 NordPass 等 manager，並用「域名 + HTTPS」開面板。",
+  "webauthnInsecureContext": "而家頁面不是安全連線（{{origin}}）。瀏覽器規格要求 HTTPS 或 localhost 先可用 Passkey——同是否 Brave／NordPass 無關。請改用 https://你的域名 再開。",
+  "webauthnIpHost": "而家用 IP 開面板（{{origin}}）。WebAuthn 規格不接受 IP 做 RP ID，Brave／NordPass 都會失敗。請綁域名 + HTTPS（例如 https://panel.example.com）再試。",
+  "webauthnEnvOk": "Passkey 可用（{{origin}}）",
+  "webauthnEnvCurrent": "目前頁面：{{origin}}",
+  "webauthnCancelled": "已取消或逾時。請再試一次。",
+  "webauthnUnavailableHint": "Passkey 需 HTTPS + 域名。",
+  "registerPasskey": "登記 Passkey",
+  "noPasskey": "無 passkey",
+  "passkeyVerifyOk": "Passkey 驗證成功（已 step-up）",
+  "verifyFailed": "驗證失敗",
+  "verifyWithPasskey": "用 Passkey 驗證 (step-up)",
+  "passkeyHint": "高危 step-up 用；需 HTTPS + 域名。",
+  "devicesTitle": "裝置／備份",
+  "devicesDesc": "",
+  "viewTrustedDevices": "查看信任裝置",
+  "trustedDevicesCount": "信任裝置：{{count}} 個",
+  "revokeAllDevices": "撤銷全部裝置",
+  "revokedAllDevices": "已撤銷全部信任裝置",
+  "export2faBackup": "匯出 雙重驗證 加密備份",
+  "fail2banSnippetMsg": "Fail2ban 片段：{{已寫入}} — {{notes}}",
+  "generateFail2ban": "產生 Fail2ban 片段",
+  "adminPolicyTitle": "管理員 2FA 政策",
+  "adminPolicyDesc": "",
+  "requireAdmin2fa": "要求管理員啟用 2FA",
+  "strictAdmin2fa": "Strict：未開 2FA 拒絕登入",
+  "confirmTotpPolicy": "確認 TOTP（改政策時）",
+  "confirmTotpPolicyHint": "開啟政策需 step-up",
+  "totp6digitPlaceholder": "6 位碼",
+  "policyUpdated": "安全政策已更新",
+  "savePolicy": "儲存政策",
+  "recentProbe": "最近探測",
+  "apiKeysTitle": "介面 存取金鑰",
+  "apiKeysDesc": "",
+  "createKey": "+ 建立金鑰",
+  "colName": "名稱",
+  "colPrefix": "前綴",
+  "colCreated": "建立",
+  "apiKeysEmpty": "尚未有 介面 金鑰",
+  "apiKeysEmptyHint": "用列表右上角建立；建立後可用 Bearer 權杖 呼叫 介面",
+  "approve": "批准",
+  "allowlistTitle": "允許清單（{{count}}）",
+  "allowlistEmpty": "尚無 允許清單 工具",
+  "createApiKeyTitle": "建立 介面 金鑰",
+  "createApiKeyDesc": "建立後完整 權杖 只顯示一次",
+  "createKeyBtn": "建立金鑰",
+  "apiKeyNameHint": "方便辨識，例如 CI／備份腳本",
+  "apiKeyScope": "範圍",
+  "apiKeyScopeHint": "read = 只讀（no full mutate）",
+  "scopeFull": "full（完整 介面）",
+  "scopeRead": "read（只讀）",
+  "apiKey2faHint": "若已開 雙重驗證，建立金鑰會要求再輸入驗證碼（step-up）。",
+  "apiKeyCreated": "介面 金鑰已建立",
+  "export2faBackupTitle": "匯出 雙重驗證 備份",
+  "createApiKeyStepUp": "建立 介面 金鑰 · step-up",
+  "enterTotpCode": "請輸入目前 TOTP 驗證碼",
+  "export": "匯出",
+  "backupCopied": "加密備份已複製到剪貼簿（離線保存）",
+  "digit6Placeholder": "6 位數字",
+  "ssh": {
+    "workspaceTitle": "遠端登入 工作台",
+    "workspaceDesc": "先選你要完成的事。登入公鑰 ≠ 出站私鑰，兩邊分開管理更安全。",
+    "subOutbound": "出站身份",
+    "subOutboundHint": "面板／專案出去用的私鑰",
+    "subLogin": "登入授權",
+    "subLoginHint": "誰可以 SFTP／遠端登入 進來",
+    "sub2fa": "登入 雙重驗證",
+    "sub2faHint": "SSH TOTP（≠ panel 2FA）",
+    "subSshd": "系統 sshd",
+    "subSshdHint": "專案用戶 SFTP 設定",
+    "jobOutboundTitle": "我要連出去",
+    "jobOutboundDesc": "建立出站身份金鑰 · 面板 對等節點／專案 git",
+    "jobLoginTitle": "我要讓人登入",
+    "jobLoginDesc": "登記公鑰到專案 主目錄 · authorized_keys",
+    "job2faTitle": "遠端登入 登入要 雙重驗證",
+    "job2faDesc": "Linux 用戶 TOTP（與 面板 雙重驗證 分開）",
+    "jobSshdTitle": "系統要能 SFTP",
+    "jobSshdDesc": "安裝 sshd Match 片段（專案用戶）",
+    "purposePanel": "面板連其他機",
+    "purposeUser": "專案用戶出站",
+    "purposeUnbound": "尚未指定用途",
+    "purposePanelHint": "叢集 對等節點、備份 安全複製、遠端探測",
+    "purposeUserHint": "專案 Linux 用戶 git / 安全複製 / 腳本",
+    "purposeDefaultHint": "稍後再綁定",
+    "statusStored": "已入庫",
+    "statusInstalled": "已寫入磁碟",
+    "statusVerified": "連線通過",
+    "statusMissing": "磁碟檔案遺失",
+    "statusRetired": "已退役",
+    "statusError": "異常",
+    "actionInstall": "寫入磁碟",
+    "actionTest": "測試連線",
+    "actionCopyPub": "複製公鑰",
+    "pipelineStored": "已入庫",
+    "pipelineInstalled": "已寫磁碟",
+    "pipelineVerified": "連線通過",
+    "progressAria": "進度",
+    "loginTitle": "登入授權（公鑰）",
+    "loginDesc": "決定「誰可以進來」。只存公鑰，寫入專案 主目錄 的 authorized_keys。與出站私鑰無關。",
+    "loginAdd": "新增登入公鑰",
+    "loginEmpty": "還沒有允許登入的公鑰",
+    "loginEmptyHint": "把筆電或 CI 的公鑰貼上來，綁到專案用戶後即可 SFTP／遠端登入（需 sshd 片段）。",
+    "loginAddFirst": "新增第一把登入公鑰",
+    "boundProject": "專案",
+    "unboundProject": "未綁專案",
+    "loginRemoved": "已移除公鑰",
+    "remove": "移除",
+    "loginModalTitle": "允許一把公鑰登入",
+    "loginModalDesc": "選擇專案後，公鑰會寫入該 Linux 用戶 主目錄/.ssh/authorized_keys",
+    "addAuth": "加入授權",
+    "selectOption": "— 選擇 —",
+    "publicKey": "公鑰",
+    "publicKeyHint": "整行貼上，例如 ssh-ed25519 AAAA… comment",
+    "commentOptional": "備註（可選）",
+    "commentPlaceholder": "筆電 / CI",
+    "loginNeedProject": "請先建立專案。系統用戶就緒後再綁公鑰效果最佳。",
+    "loginNeedPub": "請選擇專案並貼上以 ssh- 開頭的公鑰",
+    "loginAdded": "已加入",
+    "sshdTitle": "專案用戶 SFTP（sshd）",
+    "sshdDesc": "讓 ysks_* / ysk_* 專案用戶可用公鑰 SFTP。未安裝時，登入授權可能無效。",
+    "sshdStep1": "在「登入授權」為專案加入公鑰",
+    "sshdStep2": "在此預覽並安裝系統 Match 片段",
+    "sshdStep3": "安裝需要系統執行權限；會嘗試 重新載入 sshd",
+    "sshdPreview": "設定預覽",
+    "loadingSnippet": "（載入中…）",
+    "reloadedCopied": "已重新載入；片段已複製到剪貼簿",
+    "reloadAndCopy": "重新載入並複製",
+    "installedOk": "已安裝",
+    "installToSystem": "安裝到系統",
+    "sshdManualHint": "若提示無法執行，請以具備權限的方式執行控制面，或手動將片段放入",
+    "outboundTitle": "出站身份金鑰",
+    "outboundDesc": "私鑰加密保存在控制面。列表永不顯示私鑰。寫入磁碟 ≠ 對方已授權你登入。",
+    "outboundAdd": "新增出站身份",
+    "filterActive": "使用中",
+    "filterPanel": "面板",
+    "filterUser": "專案用戶",
+    "filterRetired": "已退役",
+    "filterAll": "全部",
+    "searchIdentity": "搜尋名稱或 fingerprint…",
+    "searchIdentityAria": "搜尋身份",
+    "identityCount": "{{count}} 個身份",
+    "identityList": "身份列表",
+    "outboundEmpty": "還沒有出站身份",
+    "outboundEmptyFilter": "沒有符合條件的項目",
+    "outboundEmptyHint": "30 秒建立一把金鑰：選用途 → 命名 → 完成。之後可用於 對等節點 / 備份 / git。",
+    "outboundEmptyFilterHint": "試下改篩選或清空搜尋",
+    "outboundAddFirst": "新增第一個出站身份",
+    "userPrefix": "用戶 {{user}}",
+    "createFailed": "建立失敗",
+    "identityCreatedOnce": "身份已建立（私鑰只顯示一次）",
+    "writtenToDisk": "已寫入磁碟",
+    "cannotWriteNeedExecute": "無法寫入系統：需開啟執行權限（系統變更權限）",
+    "notDone": "未完成",
+    "installFailed": "安裝失敗",
+    "testPassed": "連線通過",
+    "testFailed": "連線失敗",
+    "testError": "測試失敗",
+    "copiedPubPaste": "已複製公鑰 — 貼到對方 authorized_keys 或 Git 部署金鑰",
+    "deletedNamed": "已刪除「{{name}}」",
+    "rotated": "已輪替：舊金鑰退役，新金鑰已建立",
+    "detailStatus": "狀態",
+    "detailPurpose": "用途",
+    "detailLinuxUser": "Linux 用戶",
+    "detailDiskPath": "磁碟路徑",
+    "detailLastTest": "最近測試",
+    "suggestFlow": "建議流程：入庫 → 寫入磁碟 → 把公鑰放到對方 → 測試連線",
+    "suggestFlowPrefix": "建議流程：入庫 → 寫入磁碟 → 把",
+    "suggestFlowSuffix": "放到對方 → 測試連線",
+    "publicKeyStrong": "公鑰",
+    "copiedPub": "已複製公鑰",
+    "allowLocalLogin": "允許本機用此鑰登入",
+    "localLoginOk": "已把公鑰加入本機登入授權",
+    "testingConnection": "測試連線…",
+    "rotateKey": "輪替金鑰",
+    "wizStepPurpose": "這把金鑰用來做什麼？",
+    "wizStepProject": "綁定哪個專案？",
+    "wizStepPanelConfirm": "確認面板出站",
+    "wizStepName": "命名與選項",
+    "wizStepPurposeDesc": "選對用途，之後列表與安裝路徑會自動對齊",
+    "wizStepProjectDesc": "金鑰會綁定該專案的 Linux 用戶與 主目錄",
+    "wizStepPanelDesc": "私鑰只放在控制面 secrets，用於 安全複製／ssh 到其他主機",
+    "wizStepNameDesc": "名稱方便你辨識；進階選項可稍後再改",
+    "prevStep": "上一步",
+    "nextStep": "下一步",
+    "createIdentity": "建立身份",
+    "purposePanelTitle": "面板連其他機",
+    "purposePanelSub": "叢集 對等節點、遠端備份、探測",
+    "purposePanelRec": "推薦大多數管理操作",
+    "purposeUserTitle": "專案用戶出站",
+    "purposeUserSub": "git 提取、專案腳本 安全複製",
+    "purposeUserPath": "寫入專案 主目錄/.ssh",
+    "selectProject": "— 選擇專案 —",
+    "noProjectsHint": "尚未有專案 — 請先建立專案與系統用戶",
+    "afterCreatePub": "建立後請把",
+    "afterCreatePubMid": "放到目標機的",
+    "afterCreatePubEnd": "，再用「測試連線」確認。",
+    "privKeyStayLocal": "私鑰只留在本機控制面；不會出現在列表或日誌。",
+    "displayName": "顯示名稱",
+    "displayNameHint": "例如 對等節點-prod、myapp-git",
+    "algorithm": "演算法",
+    "algoSuggested": "建議",
+    "algoLegacy": "舊系統",
+    "installImmediately": "建立後立即寫入磁碟",
+    "installImmediatelyHint": "（需系統執行權限；否則會提示無法套用）",
+    "savePrivTitle": "請立即保存私鑰",
+    "savePrivDesc": "關閉後面板不會再顯示私鑰全文。公鑰可隨時複製。",
+    "copiedPriv": "已複製私鑰",
+    "copyPriv": "複製私鑰",
+    "nextInstallDisk": "下一步：寫入磁碟",
+    "savedCloseBtn": "我已保存，關閉",
+    "privKeyOnce": "Private 金鑰（僅此一次）",
+    "privSavedConfirm": "我已把私鑰存到安全位置（密碼管理器／離線備份）",
+    "testConnTitle": "測試連線",
+    "testConnDesc": "用此身份嘗試 ssh … 是。成功只代表這個目標可登入。",
+    "startTest": "開始測試",
+    "testTarget": "目標",
+    "testTargetHint": "格式 用戶@主機 或 用戶@主機:埠",
+    "deleteIdentityTitle": "刪除身份？",
+    "rotateKeyTitle": "輪替金鑰？",
+    "deleteIdentityDesc": "將刪除「{{name}}」並嘗試清除磁碟上的私鑰檔。此操作無法復原。",
+    "rotateKeyDesc": "「{{name}}」會標記為已退役，並產生一把新金鑰。請更新對方 authorized_keys。",
+    "rotate": "輪替",
+    "enrollStatusSecret": "已產生密鑰",
+    "enrollStatusConfirmed": "已確認 App",
+    "enrollStatusWritten": "已寫入 主目錄",
+    "enrollStatusRetired": "已退役",
+    "needProjectOrUser": "請選專案或填 Linux 用戶名",
+    "enrollFailed": "登記失敗",
+    "totpGenerated": "已產生 遠端登入 專用 TOTP（與 面板 雙重驗證 分開，除非勾選同步）",
+    "confirmed": "已確認",
+    "codeWrong": "碼錯誤",
+    "gaWritten": "已寫入 .google_authenticator",
+    "needExecute": "需開啟系統執行權限",
+    "ssh2faTitle": "遠端登入 登入第二因素",
+    "ssh2faDesc": "保護 ssh 登入 Linux 用戶。與「我的安全」的 面板 雙重驗證 分開；預設獨立 secret。",
+    "ssh2faStep1": "為 Linux 用戶登記 TOTP（掃碼）",
+    "ssh2faStep2": "確認 App 6 位碼",
+    "ssh2faStep3": "寫入 主目錄",
+    "ssh2faStep4": "系統安裝 PAM 模組並合併片段（下方）",
+    "pkgLabel": "套件 {{name}}",
+    "enrollForUser": "為用戶登記 遠端登入 雙重驗證",
+    "ssh2faEmpty": "尚未為任何 Linux 用戶開啟 遠端登入 雙重驗證",
+    "ssh2faEmptyHint": "建議先用金鑰登入；雙重驗證 作第二道門。專案 SFTP-only 用戶通常不需要 keyboard-interactive。",
+    "startEnroll": "開始登記",
+    "fromPanelBadge": "與 面板 同源",
+    "enterCode": "輸入驗證碼",
+    "rewriteHome": "重寫 主目錄 檔",
+    "writeHome": "寫入 主目錄",
+    "retiredOk": "已退役",
+    "retire": "退役",
+    "pamTitle": "系統：PAM / sshd（手動或有權限時套用）",
+    "pamDesc": "nullok 避免未寫檔用戶被鎖死。寫檔 ≠ 已要求 TOTP。",
+    "pamSnippet": "PAM 片段（建議併入 /etc/pam.d/sshd）",
+    "sshdHint": "sshd 提示",
+    "rescueUsers": "救援用戶（逗號分隔，永不進 strict Match）",
+    "strictPreview": "Strict Match 預覽（publickey+TOTP、關 密碼）",
+    "copiedPam": "已複製 PAM 片段",
+    "copyPam": "複製 PAM",
+    "applyStrict": "套用 Strict 到系統",
+    "pamPkgHint": "套件：",
+    "pamRescueHint": "。保留至少一名未寫 雙重驗證 檔的救援管理員（預設 管理員）。",
+    "enrollModalTitle": "登記 遠端登入 雙重驗證",
+    "enrollModalDesc": "預設產生獨立 secret（不共用 面板）。進階才可同步 面板 TOTP。",
+    "generateShowSecret": "產生並顯示密鑰",
+    "projectSuggested": "專案（建議）",
+    "orManualUser": "— 或手動填用戶 —",
+    "linuxUser": "Linux 用戶",
+    "advancedSharePanel": "進階：使用目前 面板 操作員的 TOTP secret（需輸入 SHARED 確認）",
+    "setupAuthTitle": "設定 Authenticator",
+    "setupAuthDesc": "掃碼或輸入密鑰後，用 App 的 6 位碼確認。確認後才寫 主目錄 檔。",
+    "later": "稍後",
+    "confirmCodeBtn": "確認驗證碼",
+    "secretBase32": "密鑰（base32）",
+    "copiedSecret": "已複製 secret",
+    "copySecret": "複製 secret",
+    "scanThenCode": "若已掃碼，直接輸入目前 6 位碼即可。",
+    "verifyCode": "驗證碼",
+    "applyStrictStepUp": "套用 Strict · step-up",
+    "enterPanelTotp": "輸入目前 面板 TOTP 驗證碼",
+    "applyBtn": "套用",
+    "appliedOk": "已套用",
+    "sharePanelTitle": "共用 面板 TOTP secret？",
+    "sharePanelDesc": "風險高。請輸入 SHARED 確認。",
+    "confirmString": "確認字串",
+    "enableShare": "啟用共用"
+  },
+  "sessionsActive": "使用中",
+  "sessionsOther": "其他裝置",
+  "sessionsHint": "",
+  "noSessionsHint": "再次登入後，此裝置會顯示於此。",
+  "sessionOtherBadge": "其他",
+  "sessionThisDevice": "你在這裡",
+  "sessionDeviceOn": "{{browser}} · {{os}}",
+  "sessionIpUnknown": "IP 未知",
+  "sessionLastActive": "最近活動 {{when}}",
+  "sessionStarted": "登入於 {{when}}",
+  "sessionIdShort": "ID {{id}}...",
+  "sessionJustNow": "剛剛",
+  "sessionMinAgo": "{{n}} 分鐘前",
+  "sessionHourAgo": "{{n}} 小時前",
+  "sessionDayAgo": "{{n}} 日前",
+  "revokeSessionTitle": "登出此裝置？",
+  "revokeSessionDesc": "結束 {{device}}（{{ip}}）的階段，該裝置需重新登入。",
+  "revokeOthersTitle": "登出所有其他裝置？",
+  "revokeOthersDesc": "將結束 {{count}} 個其他工作階段。目前瀏覽器保持登入。",
+  "sessionRevoked": "已登出該工作階段",
+  "mySecurityHint": "",
+  "policyTotpHint": "全站政策：要求 admin 角色各自啟用 2FA（每人自己掃碼），不是共用同一組驗證碼。"
+}

package/locales/zh-HK/serviceExposure.json

@@ -0,0 +1,31 @@
+{
+  "title": "網絡存取",
+  "manage": "管理存取",
+  "manageTitle": "服務網絡存取",
+  "manageDesc": "控制 {{service}} 在主機防火牆的可達性。",
+  "mode": "存取模式",
+  "modePrivate": "僅本機",
+  "modePublic": "公網",
+  "modeRestricted": "受限",
+  "summaryPrivate": "未對外開放防火牆埠。",
+  "summaryPublic": "公網開放 · {{ports}}",
+  "summaryRestricted": "受限 · {{count}} 個來源",
+  "summaryFirewallOff": "主機防火牆：{{detail}} — UFW 未啟用時規則不會生效。",
+  "outOfSync": "未同步",
+  "firewallOff": "防火牆關閉",
+  "ufwMissing": "未安裝 UFW",
+  "ufwInactive": "已關閉",
+  "firewallLink": "防火牆",
+  "portsLabel": "埠",
+  "allowFrom": "允許來源（IP／網段）",
+  "allowCountries": "允許國家（ISO）",
+  "hintPrivate": "服務仍可本機監聽；不會寫入公網 UFW 允許規則。",
+  "hintPublic": "警告：對整個互聯網開放此埠。資料庫請優先用受限模式。",
+  "hintRestricted": "逗號分隔 IP 或 CIDR；僅允許這些來源連線。",
+  "hintCountries": "L2 best-effort：ipset + 國家網段。需 root、EXECUTE、ipset。雲安全組須另行設定。",
+  "restrictedNeedIp": "受限模式請至少加入一個 IP 或網段。",
+  "restrictedNeedSource": "受限模式請至少加入 IP／網段或國家代碼。",
+  "privateStartTitle": "要對外開放 {{service}} 嗎？",
+  "confirmAndStart": "確認並啟動",
+  "cloudSgNote": "僅主機防火牆 — 不會改雲安全組（AWS／GCP／Azure）。"
+}

package/locales/zh-HK/services.json

@@ -0,0 +1,40 @@
+{
+  "enabledBoot": "自啟",
+  "action": {
+    "start": "啟動",
+    "stop": "停止",
+    "restart": "重啟",
+    "reload": "重載"
+  },
+  "actionDone": "已{{action}}",
+  "runningOf": "{{running}}/{{total}} 運行中",
+  "canMutate": "可變更",
+  "locked": "鎖定",
+  "controlUnit": "控制面 服務單元",
+  "logs": "日誌",
+  "dbHa": "資料庫 HA",
+  "clusterCount": "{{count}} 個叢集",
+  "mariadbCluster": "MariaDB 叢集",
+  "probing": "探測服務矩陣…",
+  "lifecycleLocked": "生命週期操作已鎖定：需 管理員權限與系統變更權限。探測仍可用。見",
+  "hostSettings": "主機設定",
+  "matrixTab": "服務矩陣 ({{count}})",
+  "stackTab": "軟件套餐",
+  "stackTitle": "主機軟件套餐",
+  "stackHint": "按方案一鍵安裝或移除主機組件；SQL 伺服器互斥。",
+  "protectionTab": "保護探測",
+  "knownServices": "已知服務",
+  "showing": "顯示 {{shown}} / {{total}}",
+  "all": "全部",
+  "searchPh": "名稱 / 服務單元 / 類別",
+  "noMatch": "沒有符合的服務",
+  "bootPrefix": "開機 {{state}}",
+  "controlPage": "控制頁",
+  "manageRuntime": "安裝／更新",
+  "protectionTitle": "保護探測",
+  "protectionSub": "唯讀；不改防火牆／fail2ban",
+  "protectionDoneNote": "保護探測完成",
+  "probeDone": "探測完成",
+  "runProtection": "執行保護探測",
+  "notProbedYet": "尚未探測"
+}

package/locales/zh-HK/software.json

@@ -0,0 +1,122 @@
+{
+  "title": "軟件中心",
+  "desc": "全部可管理軟件一覽：安裝狀態、服務健康、新版本提示；可進入管理頁或用於專案。",
+  "tabs": {
+    "overview": "總覽",
+    "runtimes": "執行環境",
+    "databases": "資料庫",
+    "edge": "域名與邊緣",
+    "mailFiles": "郵件與檔案",
+    "host": "主機服務"
+  },
+  "stat": {
+    "catalog": "目錄項目",
+    "runtimesInstalled": "執行環境已裝",
+    "updates": "有新版本／可擴充",
+    "attention": "需關注"
+  },
+  "quickTitle": "快捷",
+  "quickDesc": "常用分區與主機服務入口",
+  "updatesTitle": "可更新／可安裝版本",
+  "updatesDesc": "上游或面板支援較新版本。安裝後可在專案選擇對應 runtime。",
+  "allSoftware": "全部軟件",
+  "status": {
+    "unknown": "—",
+    "installed": "已安裝",
+    "notInstalled": "未安裝",
+    "running": "運行中",
+    "missing": "未偵測",
+    "failed": "失敗",
+    "stopped": "已停止"
+  },
+  "badge": {
+    "update": "有新版本",
+    "upToDate": "已是最新"
+  },
+  "meta": {
+    "installed": "已裝：{{list}}",
+    "default": "預設 {{v}}",
+    "remote": "上游約 {{v}}",
+    "openManage": "開啟管理頁安裝或設定",
+    "aptCurrentLatest": "已裝 {{v}} · 已是倉庫最新",
+    "aptVersion": "已裝 {{v}}",
+    "aptUpgrade": "{{from}} → {{to}} 可升級",
+    "aptUpgradeMulti": "{{n}} 個套件可升級：{{list}}",
+    "aptNotInstalled": "系統未安裝此套件（可到管理頁安裝）",
+    "hostUpgradable": "主機約 {{n}} 個可升級套件",
+    "checking": "正在檢查版本…或開啟管理頁設定"
+  },
+  "action": {
+    "manage": "管理",
+    "useInProject": "用到專案",
+    "useInProjectTitle": "到專案頁設定此 runtime",
+    "update": "更新",
+    "updateTitle": "前往安裝／切換至 {{v}}",
+    "updateTo": "更新至 {{v}}",
+    "installVersion": "安裝 {{v}}",
+    "applyAptTitle": "確認後更新 {{pkg}}",
+    "updateN": "更新 {{n}} 項",
+    "installTitle": "安裝 {{list}}",
+    "install": "安裝",
+    "updateAptTitle": "前往更新中心處理 {{pkg}}"
+  },
+  "apply": {
+    "blockedShort": "被阻擋",
+    "failedShort": "失敗",
+    "failed": "更新失敗",
+    "blocked": "被阻擋",
+    "confirm": "確認更新",
+    "confirmTitle": "確認更新軟件？",
+    "confirmBody": "將更新 {{pkg}}：{{from}} → {{to}}。需系統變更權限。",
+    "ok": "已套用 {{pkg}}",
+    "progress": "更新中 {{n}}/{{total}}：{{pkg}}",
+    "okMulti": "已更新：{{list}}",
+    "okMultiTitle": "{{label}} 更新完成",
+    "partial": "部分成功",
+    "partialTitle": "部分更新失敗",
+    "failedTitle": "{{label}} 更新失敗",
+    "progressDetail": "{{從}} → {{到}}",
+    "confirmBodyMulti": "將更新 {{label}}：{{list}}"
+  },
+  "version": {
+    "loading": "載入版本中…",
+    "installed": "已裝",
+    "latest": "最新",
+    "upToDate": "已是最新／倉庫最新",
+    "refresh": "重新檢查最新",
+    "pick": "選擇版本",
+    "noTarget": "沒有可更新版本",
+    "needRuntimePage": "請在執行環境頁安裝此版本",
+    "noAptCandidate": "沒有可用的 apt 候選版本"
+  },
+  "install": {
+    "progress": "正在安裝：{{list}}…",
+    "progressHint": "可能需要一兩分鐘",
+    "blockedTitle": "{{label}} 未能安裝",
+    "ok": "已提交安裝：{{list}}",
+    "okTitle": "{{label}} 安裝完成／已提交",
+    "failedTitle": "{{label}} 安裝失敗",
+    "confirmTitle": "確認安裝軟件？",
+    "confirmBody": "將安裝 {{label}}：{{list}}。需系統變更權限。",
+    "confirm": "確認安裝"
+  },
+  "runtime": {
+    "installing": "正在安裝／更新 {{kind}} {{v}}…",
+    "installingHint": "可能需要一兩分鐘",
+    "blockedTitle": "{{kind}} {{v}} 未能安裝",
+    "installed": "已安裝／更新 {{kind}} {{v}}",
+    "installedDetail": "可在專案選擇此版本",
+    "failedTitle": "{{kind}} {{v}} 安裝失敗",
+    "installingShort": "安裝中…"
+  },
+  "aptSummaryTitle": "系統倉庫可升級",
+  "aptSummaryDesc": "目錄與主機套件分開統計；可在更新中心或卡片確認套用。",
+  "aptSummary": {
+    "catalog": "目錄軟件 {{n}}",
+    "host": "主機套件 {{n}}",
+    "openUpdates": "開啟更新中心"
+  },
+  "navBadgeTitle": "目錄軟件可升級：{{n}}",
+  "projectHint": "已預填 runtime {{runtime}}，可建立專案",
+  "projectHintWithVersion": "已預填 runtime {{runtime}} {{version}}，可建立專案"
+}

package/locales/zh-HK/softwareBanner.json

@@ -0,0 +1,14 @@
+{
+  "titleDefault": "尚未安裝所需軟件",
+  "missing": "缺少：{{names}}",
+  "nameSep": "、",
+  "installOneClick": "一鍵安裝",
+  "installing": "安裝中…",
+  "reprobe": "重新探測",
+  "close": "關閉",
+  "resultTitle": "安裝結果",
+  "probeFailed": "探測失敗",
+  "installIncomplete": "安裝未完成",
+  "installedOne": "已安裝 {{name}}",
+  "allInstalled": "所需軟件已安裝"
+}