ysk-server-shared 1.0.0

package/locales/en/db.json

@@ -0,0 +1,287 @@
+{
+  "serviceSettings": "Service settings",
+  "installedOk": "{{engine}} installed",
+  "startedOk": "{{engine}} started",
+  "installFirst": "Install {{engine}} first",
+  "softwareMissing": "{{engine}} software is not installed",
+  "serviceOverview": "Service overview",
+  "readonlyStatus": "Read-only status",
+  "readonlyProbe": "Read-only probe",
+  "systemChange": "System changes",
+  "opened": "Enabled",
+  "notOpened": "Disabled",
+  "admin": "Admin",
+  "client": "Client",
+  "hasClient": "Yes",
+  "noClient": "No",
+  "canProvision": "Can create DBs",
+  "dumpOk": "Dump complete",
+  "dumpFailed": "Dump failed",
+  "noDumpToImport": "No dump file to import",
+  "expiredTempUsersProcessed": "Expired temporary users processed",
+  "dumpFirstDb": "Dump first DB",
+  "importLatestDump": "Import latest dump",
+  "cleanupExpiredTempUsers": "Clean expired temp users",
+  "adminerEntry": "DB browser project",
+  "browserProjectTitle": "Create DB browser project",
+  "browserTool": "Tool",
+  "browserNameHint": "Creates a PHP project; name must be unique",
+  "browserNameTaken": "Project name already exists: {{name}}",
+  "browserProjectCreated": "DB browser project created",
+  "createBrowserProject": "Create project and deploy",
+  "downloadPhpMyAdmin": "Download phpMyAdmin (needs system-change + network)",
+  "createDatabase": "Create database",
+  "installBannerHint": "Use the banner above to install {{engine}}.",
+  "exclusiveMariaHint": "This host runs MariaDB. Use the MariaDB page or one-click switch (type SWITCH).",
+  "exclusiveMysqlHint": "This host runs MySQL. Use the MySQL page or one-click switch (type SWITCH).",
+  "openMaria": "MariaDB",
+  "openMysql": "MySQL",
+  "openMariaService": "MariaDB service",
+  "openMysqlService": "MySQL service",
+  "startService": "Start service",
+  "openServiceConsole": "Open service console",
+  "opsResult": "Ops result",
+  "tempPasswordOnce": "Temporary read-only password (shown once):",
+  "tabDatabases": "Databases ({{count}})",
+  "tabUsers": "Users ({{count}})",
+  "tabTemp": "Temp read-only ({{count}})",
+  "tabRemote": "Remote hosts ({{count}})",
+  "dbList": "Database list",
+  "charset": "Charset",
+  "noDatabasesYet": "No databases yet",
+  "emptyDbInstallFirst": "Install {{engine}} via the banner, then Create database",
+  "emptyDbCannotProvision": "Cannot create databases on the server right now",
+  "emptyDbCreateHint": "Use Create database, then Apply",
+  "userList": "Users",
+  "userListDesc": "Grant users access to databases",
+  "createUserBtn": "+ Create user",
+  "noUsersYet": "No users yet",
+  "tempReadonlyUsers": "Temporary read-only users",
+  "tempReadonlyDesc": "Control plane marks expired after TTL;",
+  "dbName": "Database name",
+  "ttlHours": "TTL (hours)",
+  "ttlHoursHint": "Marked invalid after expiry",
+  "createReadonlyUser": "Create read-only user",
+  "tempUserCreated": "Temporary read-only user created",
+  "expiresAt": "Expires",
+  "revokeRegistration": "Revoke registration",
+  "remoteDbHosts": "Remote database hosts",
+  "remoteDbHostsDesc": "Register connection targets (password not echoed back)",
+  "displayName": "Display name",
+  "prodReplicaPlaceholder": "Production replica",
+  "remoteHostSaved": "Remote host saved",
+  "createDbTitle": "Create {{engine}} database",
+  "createDbDesc": "After control-plane registration, Apply to write on the server",
+  "dbNameHint": "Lowercase alnum and underscore; apply to system after create",
+  "alsoCreateUser": "Also create user",
+  "alsoCreateUserDesc": "Create a login that can connect to this database",
+  "passwordMin8": "At least 8 characters",
+  "passwordMin8chars": "At least 8 characters",
+  "allowConnectHost": "Allowed host",
+  "allowConnectHostHint": "Often % (any) or localhost",
+  "allowConnectHostHintShort": "Often % or localhost",
+  "createDbHint": "Writes control-plane only; Apply runs CREATE DATABASE on the server.",
+  "createUserTitle": "Create {{engine}} user",
+  "createUserDesc": "Apply after create",
+  "bindDatabase": "Bind database",
+  "bindDatabaseHint": "Optional; grant privileges on this DB",
+  "noneOption": "— none —",
+  "importDumpTitle": "Import dump?",
+  "importDumpDesc": "Import {{dump}} into {{db}}",
+  "import": "Import",
+  "importOk": "Import complete",
+  "importFailed": "Import failed",
+  "deleteDbTitle": "Delete database registration?",
+  "deleteDbDesc": "Removes control-plane record only; does not DROP the server database.",
+  "deleteUserTitle": "Delete user registration?",
+  "deleteUserDesc": "Removes control-plane record only.",
+  "adminerTitle": "Adminer database browser",
+  "adminerDesc": "Download Adminer + write Nginx conf; apply to system runs nginx -t + reload",
+  "adminerWritten": "Adminer written to management files",
+  "adminerApplied": "Adminer applied",
+  "writeOnly": "Write only (written)",
+  "applyToSystem": "Apply to system",
+  "adminerRisk": "Public Adminer is risky — restrict source IPs or add HTTP auth. Needs PHP-FPM socket (default php8.2).",
+  "vhostName": "Virtual host name",
+  "vhostHint": "Point DNS A to this host for external access",
+  "downloadAdminer": "Download Adminer PHP (needs YSK_EXECUTE + outbound net)",
+  "downloadAdminerDesc": "Off = use already downloaded file only",
+  "adminerWriteHint": "Write only = management written;",
+  "pgInstallBanner": "Install PostgreSQL via the banner first",
+  "pgEmptyCreateHint": "After create, Apply to system to write on the server",
+  "pgNoDbs": "No PostgreSQL databases yet",
+  "pgCreateTitle": "Create PostgreSQL database",
+  "pgCreateDesc": "Control-plane registration; Apply to system runs CREATE DATABASE",
+  "pgAlsoCreateRole": "Also create role",
+  "pgAlsoCreateRoleDesc": "Create a login role and grant this database",
+  "roleName": "Role name",
+  "roleHint": "PostgreSQL role / login user",
+  "pgDeleteDbDesc": "Removes control-plane record (does not auto DROP unless a revoke apply is run).",
+  "update": "Update",
+  "alsoCreateRole": "Also create role",
+  "cluster": {
+    "title": "Cluster",
+    "description": "Plan → write management → apply → probe → peer distribute / fleet. Default dry-run.",
+    "kindGalera": "Simple Galera",
+    "kindMysqlReplica": "MySQL primary/replica",
+    "kindPgReplica": "PostgreSQL streaming replica",
+    "kindRedisReplica": "Redis primary/replica",
+    "createGalera": "Create simple Galera",
+    "createMysqlReplica": "Create primary/replica",
+    "createPgReplica": "Create streaming replica",
+    "createSentinel": "Create Sentinel",
+    "createRedisReplica": "Create Redis replica",
+    "needRealIps": "Enter real local and peer IPs/hostnames",
+    "statusNote": "Status: {{status}} (plan success ≠ cluster health)",
+    "artifactNote": "Artifacts: {{dir}}",
+    "planGenerated": "Plan generated (dry-run)",
+    "planUpdated": "Plan updated",
+    "manageWritten": "Management files written (dry-run)",
+    "bootstrapTried": "Bootstrap attempted",
+    "applyTried": "System conf apply attempted",
+    "localOk": "Local OK",
+    "localProbeFail": "Local probe failed",
+    "probedWithPeers": "Probed (incl. peers)",
+    "probedLocal": "Probed local",
+    "peerTarNote": "Peer bundle downloaded (.tar.gz) — extract and install conf on peer",
+    "downloaded": "Downloaded",
+    "peerPushed": "Pushed to peer",
+    "pushPlanGenerated": "Push plan generated",
+    "registrationDeleted": "Registration deleted",
+    "nodes": "Nodes",
+    "remoteInstallPlan": "Remote install plan",
+    "fleetSyncPlan": "Fleet sync plan",
+    "standaloneTitle": "Currently: standalone",
+    "standaloneRepl": "No replica registered. Set primary/master + replica to generate conf and scripts.",
+    "standaloneHa": "No HA registered. Add peer nodes to generate conf plan, then bootstrap / join.",
+    "recentProbe": "Recent probe (local wsrep)",
+    "probeRequired": "healthy requires a passing probe",
+    "planPreview": "Plan preview",
+    "planPreviewDesc": "dry-run · success only means steps/conf generated",
+    "files": "Files",
+    "systemChangeNeed": "Required on apply",
+    "planModalDesc": "Pick nodes → generate plan (does not change peer systems)",
+    "generatePlan": "Generate plan",
+    "clusterName": "Cluster name",
+    "localIp": "Local IP / host",
+    "primaryIpHint": "Control-plane host (primary/master + access=local)",
+    "localIpHint": "Control-plane host (access=local)",
+    "ipExample1": "e.g. 10.0.0.1",
+    "ipExample2": "e.g. 10.0.0.2",
+    "ipExample3": "e.g. 10.0.0.3",
+    "replicaIp": "Replica IP / host",
+    "peerIp": "Peer IP / host",
+    "replicaHint": "Replica node",
+    "peerHint": "Second node (Galera prefers 3)",
+    "thirdNode": "3rd node (optional)",
+    "thirdNodeHint": "Recommended for Galera / multi-replica",
+    "sstMethod": "SST method",
+    "forbidDemoIp": "No demo IPs (203.0.113.x).",
+    "fwGalera": "Open internal 3306 / 4567 / 4444 / 4568.",
+    "fwPg": "Streaming needs internal 5432; change CHANGE_ME passwords in scripts.",
+    "fwRedis": "Redis internal 6379 (sentinel 26379).",
+    "fwRepl": "Replicas need matching internal ports; change CHANGE_ME passwords.",
+    "needExecuteRoot": "Applying system conf needs YSK_EXECUTE=1 + root.",
+    "topology": "Topology: {{kind}}",
+    "applyLocalTitle": "Apply local system conf?",
+    "applyBootstrapDesc": "Installs Galera drop-in and bootstrap (galera_new_cluster)",
+    "applyJoinDesc": "Installs Galera drop-in and systemctl restart mariadb",
+    "confirmApply": "Confirm apply",
+    "deleteClusterTitle": "Delete cluster registration?",
+    "remoteInstallTitle": "Remote-install peer?",
+    "pushTitle": "Push to peer?",
+    "fleetSyncTitle": "Fleet sync?",
+    "confirmOp": "Confirm",
+    "deleteClusterDesc": "System conf is not auto-cleared (v1).",
+    "remoteInstallDesc": "Install conf + restart on peer. Needs YSK_EXECUTE + SSH.",
+    "pushDesc": "scp files to peer /tmp?",
+    "fleetSyncDesc": "Sync cluster snapshot to fleet edge, then apply.",
+    "fleetApplyDesc": "Enqueue apply to fleet members.",
+    "remoteInstalled": "Remote installed",
+    "fleetSynced": "Fleet sync queued",
+    "fleetApplyQueued": "Fleet apply queued",
+    "plan": "Plan",
+    "writeFile": "Write files",
+    "applyLocal": "Apply local",
+    "probeAll": "Probe all nodes",
+    "remoteInstall": "Remote install",
+    "downloadBundle": "Download bundle",
+    "pushPlan": "Push plan",
+    "pushExecute": "Push execute",
+    "fleetSync": "Fleet sync",
+    "localConfPreview": "Local conf preview",
+    "refresh": "Refresh",
+    "close": "Close",
+    "cancel": "Cancel",
+    "delete": "Delete",
+    "probe": "Probe",
+    "name": "Name",
+    "type": "Type",
+    "status": "Status"
+  },
+  "console": {
+    "dataBrowse": "Browse data",
+    "dbManage": "Database admin",
+    "realtime": "Live",
+    "reload": "Reload",
+    "needRestart": "Restart required",
+    "lifecycle": "Lifecycle",
+    "overview": "Overview",
+    "actionDone": "{{action}} done",
+    "installDone": "Install complete",
+    "noChanges": "Nothing to apply",
+    "settingsApplied": "Settings applied",
+    "notReadFromService": "Not read from service",
+    "applyMode": "Apply mode: {{mode}}",
+    "dirtyNotApplied": "Modified, not applied",
+    "highRisk": "High-risk settings",
+    "engine": "Engine",
+    "bootEnabled": "Start on boot",
+    "uptimeSec": "Uptime (s)",
+    "currentConnections": "Connections",
+    "changes": "Changes",
+    "serviceTitle": "{{title}} service",
+    "softwareMissing": "{{title}} software is not installed",
+    "overviewDesc": "Read-only info from probe (not form fields)",
+    "lifecycleDesc": "Install, start, stop, and enable on boot",
+    "about": "About",
+    "cluster": "Cluster",
+    "noSettings": "No settings in this category (or unsupported in this version)",
+    "applyHint": "Live can change online;",
+    "applyCategory": "Apply category",
+    "applyAll": "Apply all changes",
+    "applyCatCount": "Apply category ({{n}})",
+    "applyAllCount": "Apply all ({{n}})",
+    "lifecycleNote": "On Settings, Live changes online; restart-required needs Lifecycle restart after apply.",
+    "installEngine": "Use the banner above to install {{title}}.",
+    "reloadConfig": "Reload config",
+    "disableBoot": "Disable on boot",
+    "needRights": "Needs system-change rights and admin. Failures show reasons — never fake success.",
+    "noneFetched": "— none —"
+  },
+  "expiresLabel": "Expires",
+  "importEntry": "Entry: {{url}}",
+  "adminerRiskFull": "Public Adminer is risky — restrict source IPs or add HTTP auth. Needs PHP-FPM socket (default php8.2).",
+  "adminerWriteHintFull": "Write only = management written;",
+  "pgInstalled": "PostgreSQL installed",
+  "pgStarted": "PostgreSQL started",
+  "notInstalledShort": "Not installed",
+  "serviceConsole": "Service console",
+  "installPgFirst": "Install PostgreSQL first",
+  "pgSoftwareMissing": "PostgreSQL software is not installed",
+  "installPgBanner": "Use the banner above to install PostgreSQL.",
+  "createPlus": "+ Create",
+  "dbNameHintPg": "Lowercase alnum and underscore; apply after create",
+  "deleteNotePg": "Deleting registration does not DROP the server DB; apply success means DDL ran on host.",
+  "tabDatabasesSimple": "Databases ({{count}})",
+  "frozenTitle": "Database service needs repair",
+  "frozenBody": "Issues detected (freeze mode: {{mode}};",
+  "unfreezeBtn": "Diagnose and repair",
+  "unfreezeConfirmTitle": "Repair {{engine}}?",
+  "unfreezeConfirmDesc": "Runs a generic repair plan from diagnostics (stop, clear freeze, sanitize config, init emp",
+  "unfreezeConfirmBtn": "Confirm repair",
+  "unfreezeOk": "{{engine}} repair complete",
+  "startAfterUnfreeze": "Start service (auto-runs repair plan on failure)",
+  "serviceDownTitle": "Database service is down",
+  "serviceDownBody": "Service is unhealthy"
+}

package/locales/en/dialogs.json

@@ -0,0 +1,8 @@
+{
+  "confirmDefault": "Confirm",
+  "cancelDefault": "Cancel",
+  "severity": {
+    "consequencesTitle": "This will:",
+    "typeToConfirm": "Type \"{{text}}\" to confirm"
+  }
+}

package/locales/en/dns.json

@@ -0,0 +1,216 @@
+{
+  "templates": {
+    "minimal": "Minimal — apex A only",
+    "web": "Web — apex + www",
+    "mail": "Mail — apex + mail + MX + SPF",
+    "full": "Full — web + mail + ftp + SPF",
+    "cdn": "CDN — apex + www + cdn (multi-edge ready)"
+  },
+  "dnssecOk": "DNSSEC keys generated (written — zone not signed / not on registrar)",
+  "dnssecNotOk": "DNSSEC keys not generated (notes only or tools unavailable — no false success)",
+  "dnssecFailed": "DNSSEC failed",
+  "blocked": "Blocked (needs system-change permission)",
+  "clusterDone": "Done ({{status}})",
+  "clusterPartial": "Not fully successful ({{status}}) — see details below",
+  "clusterFailed": "Cluster operation failed",
+  "validateFailed": "Record validation failed",
+  "validateRequestFailed": "Validation request failed",
+  "lookupFailed": "Lookup failed",
+  "statRecords": "Records",
+  "statSelected": "Selected",
+  "notInstalled": "Required DNS software is not installed",
+  "dsForRegistrar": "DS (for registrar; not auto-published):",
+  "tabs": {
+    "zones": "Zones",
+    "records": "Records",
+    "cluster": "Cluster",
+    "dnssec": "DNSSEC",
+    "tools": "Tools",
+    "about": "About"
+  },
+  "recentWrite": "Recent write result",
+  "zonesTitle": "Zones ({{count}})",
+  "zonesDesc": "After create, write/apply the zone",
+  "createZone": "+ Create zone",
+  "colZoneName": "Zone name",
+  "colServerIp": "Server IP",
+  "colTemplate": "Template",
+  "colStatus": "Status",
+  "emptyZonesTitle": "No DNS zones yet",
+  "emptyZonesDesc": "Use “Create zone” in the list toolbar",
+  "applyZoneTitle": "Write zone file and register into PowerDNS named.conf + rediscover (write ≠ dig answers)",
+  "applyZone": "Write / apply",
+  "recordsFor": "Records — {{zone}}",
+  "recordsNeedSelect": "Records (select a zone first)",
+  "statusLabel": "Status",
+  "addRecord": "+ Add record",
+  "writeZoneFile": "Write & load zone",
+  "healthLoaded": "Loaded",
+  "stateLoaded": "Loaded",
+  "healthPublicNs": "Public NS",
+  "statePublicNs": "Public NS",
+  "publicNsHere": "→ this host",
+  "requestLeTitle": "Request Let’s Encrypt for {{zone}}",
+  "requestZoneSsl": "Request SSL for zone",
+  "soaTitle": "SOA / default TTL",
+  "soaDesc": "SOA nameserver and $TTL when writing the zone file;",
+  "soaBlockNs": "Nameservers",
+  "soaBlockTiming": "TTL & timers",
+  "recordsListTitle": "DNS records ({{count}})",
+  "recordsListDesc": "After edits, use “Write zone file” above so named’s on-disk file updates.",
+  "soaNsLabel": "SOA nameserver",
+  "soaNsHint": "Leave empty → default ns1.zone.",
+  "defaultTtl": "Default TTL (seconds)",
+  "min1": "1 min",
+  "min5": "5 min",
+  "min10": "10 min",
+  "hour1": "1 hour",
+  "day1": "1 day",
+  "customSeconds": "Custom seconds",
+  "soaSaved": "SOA saved (control plane) — “Write zone file” to apply",
+  "soaSaveFailed": "Failed to save SOA",
+  "soaSavedAndWritten": "Saved and wrote zone file",
+  "soaWriteFailed": "SOA write failed",
+  "failed": "Failed",
+  "colType": "Type",
+  "colName": "Name",
+  "colValue": "Value",
+  "emptyRecords": "No records",
+  "noZoneSelectedTitle": "No zone selected",
+  "noZoneSelectedDesc": "Pick a zone on the Zones tab",
+  "clusterTitle": "DNS cluster",
+  "clusterDesc": "After SCP of zone files, remote reload (rndc / named / bind9 / pdns)",
+  "peerHost": "Peer host",
+  "peerHostHint": "Secondary NS hostname or IP (SSH key login)",
+  "sshUser": "SSH user",
+  "sshUserHint": "Needs write to target path and reload permission",
+  "labelOptional": "Label (optional)",
+  "labelPlaceholder": "e.g. ns2 / hkg-edge-dns",
+  "opPerPeer": "This operation (per peer)",
+  "registeredPeers": "Registered peers ({{count}})",
+  "lastProbeHint": "lastProbe updates after probe or push",
+  "noPeers": "No peers registered yet",
+  "zoneDirMissing": "· zone directory missing",
+  "generateKeys": "Generate keys; does not go live automatically",
+  "selectZoneFirst": "Select a zone first",
+  "lookupTitle": "DNS lookup (dig)",
+  "lookupDesc": "Query public resolvers; verify multi-A / CDN. Does not invent answers.",
+  "lookupNamePlaceholder": "e.g. example.com or www.example.com",
+  "lookupType": "Query type",
+  "lookupResults": "Results ({{count}})",
+  "lookupNoAnswerFail": "No answers / failed",
+  "method": "Method: {{method}}",
+  "noAnswers": "No answers",
+  "noAnswersDesc": "NXDOMAIN, empty RRset, or resolve failure",
+  "lookupOkHint": "Live query results",
+  "lookupFailHint": "Lookup failed or empty. Check name, type, and upstream resolvers.",
+  "validateTitle": "Record validation",
+  "validateDesc": "Create/edit auto-validates (CNAME clashes, A/AAAA format, etc.).",
+  "createZoneTitle": "Create DNS zone",
+  "createZoneDesc": "Generate records from a template",
+  "zoneNameHint": "e.g. example.com (no trailing dot)",
+  "serverIpv4": "Server IPv4",
+  "serverIpv4Hint": "Address used for template A records",
+  "thisHostIpv4": "This host public IPv4",
+  "serverIpv6Optional": "Server IPv6 (optional)",
+  "serverIpv6Hint": "Writes AAAA when public v6 exists; can leave empty",
+  "thisHostIpv6": "This host public IPv6 (optional)",
+  "soaNsCreateHint": "Leave empty for ns1.zone-name",
+  "defaultTtlLabel": "Default TTL",
+  "defaultTtlHint": "Default for SOA and new records",
+  "recordTemplate": "Record template",
+  "editRecord": "Edit record",
+  "addRecordTitle": "Add record",
+  "recordModalDesc": "Zone {{zone}} · write zone file after save",
+  "recordType": "DNS record type",
+  "nameHint": "@ = apex; www = subdomain",
+  "mxPlaceholder": "e.g. 10 mail.example.com.",
+  "spfPlaceholder": "e.g. v=spf1 a mx ip4:… ip6:… ~all",
+  "needIpv6": "Enter an IPv6 address",
+  "needIpv4": "Enter an IPv4 address",
+  "valueHint": "IP, hostname, or record content",
+  "ipv6Address": "IPv6 address",
+  "ipv4Address": "IPv4 address",
+  "cacheTime": "Cache time",
+  "deleteZoneTitle": "Delete zone?",
+  "deleteZoneDesc": "Also removes its DNS record registrations.",
+  "deleteRecordTitle": "Delete record?",
+  "deleteRecordDesc": "Write the zone file after removal",
+  "addPeer": "Add peer",
+  "probe": "Probe",
+  "pushZones": "Push zones",
+  "reloadRemote": "Remote reload",
+  "generateDnssec": "Generate DNSSEC keys",
+  "lookup": "Lookup",
+  "saveSoa": "Save SOA",
+  "saveSoaAndWrite": "Save and write zone file",
+  "saveSoaSettings": "Save SOA settings",
+  "saveSoaAndWriteBtn": "Save and write zone file",
+  "goToZones": "Go to zones",
+  "refresh": "Refresh",
+  "pushReload": "Push + reload",
+  "pushOnly": "Push only (no reload)",
+  "reloadOnly": "Remote reload only",
+  "probePeers": "Probe peers",
+  "clusterDefaultHint": "Default: push then reload DNS on peers; needs system-change rights.",
+  "notProbed": "Not probed yet",
+  "probeHealthy": "Probe: {{status}}",
+  "pushReloadShort": "Push+reload",
+  "dnssecCardDesc": "Generate keys/DS;",
+  "currentZone": "Current zone:",
+  "generateAndSign": "Generate keys and try signing zone",
+  "lookupName": "Name",
+  "fillCurrentZone": "Fill current zone",
+  "lookupToolHint": "Prefers host dig;",
+  "validateExtra": "Errors block save; warns (e.g. apex CNAME) only notify.",
+  "createAfterHint": "After create, review on Records tab and write the zone file to disk.",
+  "valueLabel": "Value",
+  "ttlHint": "Cache time",
+  "soaSavedControl": "SOA saved (control plane) — write zone file to apply",
+  "soaNs2Label": "Secondary NS (optional)",
+  "soaNs2Hint": "Second nameserver FQDN, e.g. ns2.example.com.",
+  "soaHostmaster": "SOA hostmaster (RNAME)",
+  "soaHostmasterHint": "Use dots instead of @, e.g. hostmaster.example.com.",
+  "soaRefresh": "Refresh (seconds)",
+  "soaRetry": "Retry (seconds)",
+  "soaExpire": "Expire (seconds)",
+  "soaMinimum": "Minimum / negative cache TTL (seconds)",
+  "soaTimingHint": "SOA timing parameters in seconds.",
+  "healthTitle": "DNS service health",
+  "healthDesc": "Host truth: unit / port 53 / written zone files / local dig answers (written ≠ reloaded ≠",
+  "healthPillOk": "DNS OK",
+  "healthPillBad": "DNS issues",
+  "healthService": "Service",
+  "healthServiceDown": "down",
+  "healthListen": "Port 53",
+  "healthWritten": "Zone files",
+  "healthAnswering": "Local answer",
+  "healthAnsweringYes": "yes",
+  "healthAnsweringNo": "no/refused",
+  "healthRefresh": "Re-probe",
+  "healthProbeLocal": "Probe health again",
+  "healthOpen53": "Open firewall 53 (TCP+UDP)",
+  "healthOpened53": "Requested open 53 TCP+UDP",
+  "healthOpen53Failed": "Failed to open 53",
+  "healthPortClosed": "not listening",
+  "healthPortOpenAlready": "53 appears open",
+  "healthHint": "If dig is refused, fix PowerDNS, open port 53, then write zones.",
+  "stateService": "Service",
+  "stateListen": "Listen",
+  "stateWritten": "Written",
+  "stateAnswering": "Local answering",
+  "lookupServer": "Server (@)",
+  "lookupServerHint": "127.0.0.1 = local auth; public IP tests external; empty = system resolver",
+  "healthHealPdns": "Heal PowerDNS bind",
+  "healthHealPdnsHint": "Set local-address to public IP to avoid clashing with systemd-resolved on 0",
+  "healthHealPdnsOk": "PowerDNS bound to {{ip}} and start attempted",
+  "healthHealPdnsFailed": "PowerDNS heal failed",
+  "aboutTitle": "DNS essentials",
+  "aboutSub": "Zones first; records, cluster, and DNSSEC need a selected domain.",
+  "aboutZonesTitle": "Zones and scope",
+  "aboutZonesBody": "Pick a zone under Zones, then manage records, cluster, and DNSSEC for that domain.",
+  "aboutHealthTitle": "Service health",
+  "aboutHealthBody": "Use Tools to probe PowerDNS, heal bind, and open port 53.",
+  "aboutStackTitle": "Software",
+  "aboutStackBody": "Check/update the PowerDNS package under Software."
+}