ysk-server-shared 1.0.0

package/locales/en/email.json

@@ -0,0 +1,477 @@
+{
+  "title": "Email",
+  "subtitle": "Domains, DNS, mailboxes, and relay",
+  "externalTodos": "Tasks you must handle outside the server",
+  "ptr": "Reverse DNS (PTR) must be set by your VPS/cloud provider",
+  "port25": "Outbound Port 25 may be blocked; request unblock or use a relay",
+  "create": "Create mail domain",
+  "createHint": "After create, review DNS, mailboxes, and health checks",
+  "domains": "Registered domains",
+  "empty": "No email domains yet",
+  "emptyHint": "Create a domain to get DNS records and external todos",
+  "searchPlaceholder": "Search domain…",
+  "domain": "Domain",
+  "serverIp": "Server IP",
+  "notFound": "Email domain not found",
+  "backToList": "Back to email domains",
+  "softwareNeeded": "Required email software is not installed",
+  "applyApplied": "Applied",
+  "applyWritten": "Written",
+  "applyFailed": "Failed",
+  "applyDraft": "Draft",
+  "queueMsgCount": "Queue {{count}} message(s)",
+  "queueLoadFailed": "Failed to load queue",
+  "queueFlushRequested": "Queue flush requested",
+  "queueFlushFailed": "Flush failed",
+  "queueDeleted": "Deleted {{id}}",
+  "queueDeleteFailed": "Delete failed",
+  "pillDomains": "{{count}} domain(s)",
+  "pillNoDomain": "No domains",
+  "statDomains": "Domains",
+  "statHealthy80": "Health ≥80",
+  "statApplied": "Applied",
+  "statDraft": "Draft",
+  "tabDomains": "Domains",
+  "tabWebmail": "Webmail",
+  "tabQueue": "Queue",
+  "tabStack": "Software",
+  "tabOps": "Roles",
+  "webmailGlobalDesc": "One webmail app for the whole panel — every mail domain signs in through the same URL.",
+  "webmailGlobalHint": "Needs system-change permission (YSK_EXECUTE) and outbound network to download Roundcube/SnappyMail. No half project is created without EXECUTE.",
+  "webmailMovedHint": "Webmail is configured globally (not per domain).",
+  "openGlobalWebmailSettings": "Open webmail settings",
+  "domainsTitle": "Domains ({{filtered}}/{{total}})",
+  "emptyFilterHint": "No domains match the search",
+  "emptyCreateHint": "Use Create in the toolbar to register a domain;",
+  "queueLocalTitle": "Mail queue",
+  "needExecute": "Needs YSK_EXECUTE",
+  "viewQueue": "View queue",
+  "flushQueue": "Flush queue",
+  "queueHint": "Click View queue to read the local Postfix queue",
+  "deleteThisId": "Delete this ID",
+  "queueEmpty": "No deferred mail",
+  "queueEmptyHint": "No deferred messages",
+  "mtaTitle": "MTA software",
+  "mtaBody": "Probe and one-click install are driven by the banner above",
+  "mtaSmtp": "SMTP outbound / inbound",
+  "mtaImap": "IMAP / POP3 mailboxes",
+  "mtaDkim": "Outbound DKIM signing",
+  "mtaMissingHint": "When software is missing the banner shows install / re-probe",
+  "pathTitle": "Domain setup path",
+  "path1": "Register a domain (top-right)",
+  "path2": "Open domain detail → one-click mail setup",
+  "path3": "Add MX / SPF / DKIM / DMARC on DNS page or external checklist",
+  "path4": "SSL for mail / webmail hostnames",
+  "viewDomainList": "View domain list",
+  "opsPanelTitle": "Panel vs external",
+  "opsThisPage": "This page: domain registry, queue view, software probe",
+  "opsDetail": "Domain detail: bootstrap, mailboxes, aliases, relay, webmail",
+  "opsHost": "Host provider: PTR, Port 25 outbound policy",
+  "opsRegistrar": "Registrar: publish MX / SPF / DKIM / DMARC",
+  "statusTitle": "Status",
+  "statusDraft": "draft: panel only",
+  "statusWritten": "written: management files written, may not be live",
+  "statusApplied": "applied: successfully applied before (still check service is-active)",
+  "statusReputation": "Inbox reputation can never be 100% automated",
+  "createModalDesc": "",
+  "registerDomain": "Create",
+  "domainApexHint": "No mail. prefix",
+  "serverIpv4Hint": "MX/A/SPF",
+  "serverIpv4Ph": "Public IPv4",
+  "serverIpv6": "IPv6 (optional)",
+  "serverIpv6Hint": "AAAA/SPF ip6",
+  "serverIpv6Ph": "Optional",
+  "registerNote": "",
+  "flushConfirmTitle": "Flush entire mail queue?",
+  "flushConfirmDesc": "Queued messages will be deleted. Cannot be undone.",
+  "flushConfirm": "Flush",
+  "tabMailbox": "Mailboxes",
+  "tabAliases": "Aliases / forward",
+  "tabHealth": "Health",
+  "tabRelay": "Relay",
+  "tabSieve": "Filter / SSO",
+  "tabAdvanced": "Advanced",
+  "pillApplied": "Applied",
+  "pillManaged": "Managed files",
+  "pillDraft": "Draft",
+  "statHealth": "Health",
+  "statApply": "Apply",
+  "statDomain": "Domain",
+  "pausedFlag": "Paused (flag)",
+  "normal": "Normal",
+  "statMailboxes": "Mailboxes",
+  "statDnsRecords": "DNS records",
+  "dnsTodosTitle": "DNS",
+  "copyAllRecords": "Copy all records",
+  "openDnsPage": "Open DNS page",
+  "healthScore": "Health score",
+  "suggestedRecords": "Suggested records",
+  "externalTodosCount": "External todos",
+  "colType": "Type",
+  "colName": "Name",
+  "colValue": "Value",
+  "colNote": "Note",
+  "copy": "Copy",
+  "noDnsRecords": "No DNS records",
+  "externalTodosHeading": "External todos (panel cannot do these)",
+  "externalTodosBody": "PTR, port 25, and registrar DNS are on you.",
+  "copyExternalTodos": "Copy external todo list",
+  "todoDone": "Done",
+  "todoPending": "Todo",
+  "refreshDnsHint": "Click Refresh to load DNS suggestions",
+  "mailboxListTitle": "Mailboxes ({{count}})",
+  "createMailbox": "+ Create mailbox",
+  "writeDovecot": "Write Dovecot password DB",
+  "noMailboxes": "No mailboxes yet — click Create mailbox",
+  "mailboxOpsResult": "Mailbox operation result",
+  "aliasesTitle": "Aliases / forward / catch-all",
+  "aliasType": "Type",
+  "aliasTypeAria": "Alias type",
+  "typeForward": "Forward",
+  "typeAlias": "Alias",
+  "localPart": "Local part",
+  "localPartHint": "e.g. sales",
+  "targetMailbox": "Target mailbox",
+  "targetMailboxHint": "Comma-separated for multiple",
+  "addAlias": "Add alias",
+  "noAliases": "No aliases / forwards yet",
+  "aliasResult": "Alias result",
+  "autoreplyTitle": "Autoreply / suspend",
+  "autoreplyDesc": "Autoreply",
+  "autoreplyBodyHint": "Optional apply to system",
+  "enableAutoreply": "Enable autoreply",
+  "enableAutoreplyDesc": "vacation.sieve; after system apply mounts .dovecot.sieve",
+  "applyToSystem": "Apply to system (Postfix / Dovecot)",
+  "applyToSystemDesc": "Needs YSK_EXECUTE=1 + root; failures are not faked as success",
+  "subject": "Subject",
+  "body": "Body",
+  "saveApplyAutoreply": "Save and apply autoreply",
+  "saveAutoreplyWritten": "Save autoreply (written)",
+  "suspendApply": "Suspend and apply REJECT",
+  "suspendWritten": "Suspend domain (written)",
+  "resumeApply": "Resume and update map",
+  "resumeWritten": "Resume domain (written)",
+  "flagsResult": "Flags / system apply result",
+  "defaultAutoreplySubject": "Autoreply",
+  "defaultAutoreplyBody": "We received your email and will reply later.",
+  "healthLiveTitle": "Delivery health (live DNS / port probes)",
+  "healthLiveDesc": "Live checks",
+  "serverIpLabel": "Server IP",
+  "liveCheck": "Live check",
+  "liveOk": "Mostly OK",
+  "liveBad": "Issues found",
+  "notTested": "Not tested",
+  "blacklist": "Blacklist",
+  "healthExternalNote": "PTR and port 25 must be set at the host provider.",
+  "runLiveCheck": "Run Live check",
+  "dnsblThisIp": "DNSBL (this IP)",
+  "multiIpRbl": "Multi-IP RBL",
+  "warmupAdvice": "Warm-up tips",
+  "probeMatrix": "Probe results",
+  "colItem": "Item",
+  "colStatus": "Status",
+  "pass": "Pass",
+  "fail": "Fail",
+  "unknown": "Unknown",
+  "colDetail": "Detail",
+  "outboundPort25": "Outbound port 25",
+  "noProbeResults": "No probe results yet",
+  "noLiveYet": "Live check not run yet",
+  "noLiveYetHint": "Run a live check first",
+  "mailSslTitle": "Certificates & TLS",
+  "mailSslHint": "Real issue is on SSL page; jump to mail / webmail / domain hostnames here",
+  "openSslPage": "Open SSL page",
+  "webmailSsoSkeleton": "Webmail SSO skeleton",
+  "writeRoundcubeSso": "Write Roundcube SSO skeleton",
+  "ssoSkeletonSymlink": "SSO skeleton + system symlink",
+  "rateLimitTitle": "Outbound rate / antispam",
+  "rateLimitDesc": "Writes Postfix anvil and Rspamd settings (applied only with YSK_EXECUTE + root)",
+  "hourlyMsgCap": "Hourly message cap",
+  "hourlyMsgCapHint": "Global uses the minimum across domains",
+  "enableAntispam": "Enable antispam mark (Rspamd multimap)",
+  "enableAntispamDesc": "Off marks domain antispam off",
+  "writeControlOnly": "Write panel only",
+  "applyToSystemBtn": "Apply to system",
+  "dnsblResult": "DNSBL result",
+  "warmupResult": "Warm-up result",
+  "policyResult": "Policy result",
+  "relayTitle": "SMTP outbound relay",
+  "relayHost": "Relay host",
+  "applyRelaySystem": "Apply to system Postfix",
+  "applyRelaySystemDesc": "Write system Postfix relay",
+  "saveApplyRelay": "Save and apply to system",
+  "saveOnly": "Save settings only",
+  "relayResult": "Relay result",
+  "webmailSsoTitle": "Webmail single sign-on",
+  "webmailSsoDesc": "Issue one-time token;",
+  "mailboxPasswordOptional": "Mailbox password (optional)",
+  "mailboxPasswordHint": "Optional",
+  "mailboxPasswordPh": "With password, token can auto-login Roundcube",
+  "ssoTokenHint": "Issue a short-lived login token",
+  "issueSsoToken": "Issue SSO token",
+  "sieveTitle": "Sieve filters",
+  "sieveDesc": "Filters",
+  "sieveTemplateHint": "Default filter template",
+  "writeDefaultSieve": "Write default Sieve",
+  "listWrittenFiles": "List written files",
+  "result": "Result",
+  "domainSslTitle": "SSL for this domain",
+  "domainSslDesc": "Mail host SSL",
+  "requestCert": "Request cert for {{domain}}",
+  "clientAutoTitle": "Client autoconfig",
+  "clientAutoDesc": "Client autoconfig",
+  "clientAutoHint": "Generate autodiscover/autoconfig",
+  "generateCopyXml": "Generate and copy config XML",
+  "queueTitle": "Mail queue",
+  "queueDesc": "Local queue",
+  "publicAutoconfig": "Public config",
+  "bootstrapTitle": "One-click mail setup",
+  "bootstrapDesc": "One-click setup",
+  "adminPassword": "Admin password",
+  "adminPasswordHint": "Admin mailbox password",
+  "adminPasswordPh": "At least 8 characters",
+  "adminPasswordRequired": "Set an admin password of at least 8 characters",
+  "bootstrapBtn": "One-click mail setup",
+  "webmailInstallDesc": "Download / apply Roundcube",
+  "webmailHostname": "Webmail hostname",
+  "webmailHostnameHint": "vhost server_name, e.g. webmail.example.com",
+  "installWebmail": "Install / apply Webmail",
+  "bootstrapResult": "Bootstrap / Webmail result",
+  "createMailboxTitle": "Create mailbox",
+  "createMailboxDesc": "Full address will be {{local}}@{{domain}}",
+  "createMailboxBtn": "Create mailbox",
+  "localPartLabel": "Local part",
+  "localPartFullHint": "Full address will be {{local}}@{{domain}}",
+  "passwordOptionalHint8": "Optional; hash written only if at least 8 chars",
+  "live": {
+    "noMx": "no MX",
+    "mxLookupFailed": "MX lookup failed",
+    "noSpf": "no SPF TXT",
+    "spfLookupFailed": "SPF lookup failed",
+    "noDkim": "no DKIM TXT",
+    "dkimLookupFailed": "DKIM lookup failed",
+    "noDmarc": "no DMARC",
+    "dmarcLookupFailed": "DMARC lookup failed",
+    "noPtr": "no PTR",
+    "ptrLookupFailed": "PTR lookup failed",
+    "port25Open": "Outbound TCP 25 appears open (probe to gmail-smtp-in.l.google.com)",
+    "port25Blocked": "Outbound TCP 25 probe failed — may be blocked; request unblock or use relay",
+    "dnsblListed": "LISTED: {{list}}",
+    "dnsblClean": "clean on {{list}}"
+  },
+  "deliv": {
+    "mx": "MX record",
+    "mxFix": "Add MX at DNS provider pointing to mail host",
+    "spf": "SPF TXT",
+    "spfFix": "Publish v=spf1 including this IP",
+    "dkim": "DKIM TXT",
+    "dkimFix": "Publish selector._domainkey TXT from panel",
+    "dmarc": "DMARC TXT",
+    "dmarcFix": "Publish _dmarc policy (start with p=none)",
+    "ptr": "Reverse DNS (PTR)",
+    "ptrFix": "Set PTR at VPS/cloud console to match mail hostname — panel cannot set this",
+    "port25": "Outbound Port 25",
+    "port25Fix": "Request Port 25 unlock from hoster, or configure SMTP relay (submission 587)",
+    "dnsbl": "DNSBL reputation",
+    "dnsblFix": "Delist at listed services; stop sending until clean",
+    "relay": "SMTP relay (when Port 25 blocked)",
+    "relayOptional": "Port 25 probe open — relay optional",
+    "relayPresent": "Relay config present under dataDir (apply may still need EXECUTE)",
+    "relayMissing": "No relay configured — required if Port 25 stays blocked",
+    "relayFix": "Panel Email → Relay, or ysk-server hosting email-bootstrap with relay",
+    "warmup": "Warm-up plan",
+    "warmupDetail": "{{phases}} phases · day1 max {{day1}} msgs",
+    "warmupFix": "Follow phase limits; do not blast cold lists from a new IP",
+    "honesty1": "Panel never guarantees worldwide inbox delivery (Gmail/Outlook filtering is external).",
+    "honesty2": "PTR and Port 25 are owned by the VPS/network provider — not by YSK control plane.",
+    "honesty3": "DNS MX/SPF/DKIM/DMARC must be published at the authoritative DNS provider.",
+    "honestyPortBlocked": "Port 25 appears blocked — use relay or request unlock before high volume.",
+    "honestyPortOk": "Port 25 probe succeeded — still monitor bounces and DNSBL."
+  },
+  "catchall": "Catch-all",
+  "webmailRoundcube": "Webmail",
+  "warmup": {
+    "p1g1": "Send only transactional / known-good recipients",
+    "p1g2": "Monitor bounces; keep complaint rate near zero",
+    "p1g3": "Ensure SPF/DKIM/DMARC/PTR are live before volume",
+    "p2g1": "Expand slowly to engaged contacts only",
+    "p2g2": "Check DNSBL daily; pause if listed",
+    "p2g3": "Prefer 587 submission over bulk on port 25 if restricted",
+    "p3g1": "Double volume only if metrics stay clean",
+    "p3g2": "Segment lists; remove hard bounces immediately",
+    "p4g1": "Approach normal volume if no blocks",
+    "p4g2": "Keep DMARC rua monitored",
+    "c1": "PTR matches HELO/EHLO (mail hostname)",
+    "c2": "SPF + DKIM + DMARC published and aligned",
+    "c3": "DNSBL clean on Spamhaus / SpamCop / Barracuda",
+    "c4": "Outbound port 25 open or relay configured",
+    "c5": "No purchased “bulk email” IP ranges",
+    "c6": "Domain age / history considered (new domains = slower ramp)",
+    "noteNewIp": "Treat this IP as new — start at phase day 1–3 limits",
+    "noteOldIp": "Existing IP still benefits from gradual ramp after config changes",
+    "noteProcess": "Warm-up is operator process; YSK tracks tips + DNSBL, not marketing ESP volume"
+  },
+  "health": {
+    "dnsUnconfirmed": "DNS records (MX/SPF/DKIM) not yet confirmed",
+    "dmarcMissing": "DMARC missing — strongly recommended",
+    "ptrBad": "PTR reverse DNS missing or incorrect — request at VPS provider",
+    "port25Blocked": "Outbound Port 25 appears blocked — request unblock or use SMTP relay",
+    "port25Unknown": "Port 25 status unknown — run connectivity check"
+  },
+  "stack": {
+    "tlsNote": "TLS certs via Let’s Encrypt for SMTP/IMAP",
+    "externalNote": "External DNS/PTR/Port25 still required for deliverability"
+  },
+  "test": {
+    "defaultSubject": "YSK Server mail test",
+    "needMta": "Requires local MTA (Postfix) installed and Port 25/relay configured",
+    "checkSpam": "Check recipient spam folder and server mail logs after send",
+    "hintDeferred": "If deferred: check Port 25 block or relay credentials",
+    "hintSpam": "If accepted but spam: improve SPF/DKIM/DMARC/PTR and warm-up",
+    "hintLogs": "Inspect /var/log/mail.log or journalctl -u postfix"
+  },
+  "leMailHost": "Request cert · {{host}}",
+  "leWebmailHost": "Request cert · {{host}} (webmail)",
+  "leApexHost": "Request cert · {{host}} (apex)",
+  "applyMailTls": "Apply mail TLS paths",
+  "applyMailTlsHint": "Certificate must exist; writes mail service paths and reloads.",
+  "probeMx": "MX",
+  "probeSpf": "SPF",
+  "probeDkim": "DKIM",
+  "probeDmarc": "DMARC",
+  "probePtr": "PTR",
+  "probeDnsbl": "DNSBL",
+  "dnsAuthRepairTitle": "DNS auth needs fix",
+  "dnsAuthRepairHint": "Copy records from the DNS tab and publish.",
+  "fixHintSpf": "SPF failed: publish a v=spf1 TXT at @.",
+  "fixHintDkim": "DKIM failed: publish selector._domainkey TXT.",
+  "fixHintDmarc": "DMARC failed: publish _dmarc TXT.",
+  "fixHintMx": "MX failed: point MX to mail.<domain>.",
+  "mailTls": {
+    "needRootExecute": "Applying mail TLS needs root and YSK_EXECUTE.",
+    "certMissing": "No cert files for {{host}} ({{path}}).",
+    "getCertFirst": "Issue a Let’s Encrypt cert for {{host}} on the SSL page first.",
+    "certFound": "Found cert for {{host}}.",
+    "postconfFailed": "postconf failed: {{detail}}",
+    "postfixPathsSet": "Postfix TLS cert paths set.",
+    "postfixReloaded": "Postfix reloaded.",
+    "postfixReloadFailed": "Postfix reload failed: {{detail}}",
+    "dovecotApplied": "Wrote Dovecot TLS snippet and attempted reload.",
+    "dovecotSkipped": "Skipped Dovecot (not installed or doveconf unavailable)."
+  },
+  "policyApplySystemHint": "Check “apply to system” to write Postfix/Rspamd maps and reload;",
+  "rateLimitAppliedNote": "Hourly outbound rate and antispam flag applied (when system apply is on).",
+  "bootstrapHonesty": "One-click writes panel files; apply to system needs rights. DNS/PTR/port 25 are manual.",
+  "bootstrapAfterSteps": "Next: ① publish DNS (MX/SPF/DKIM/DMARC) ② issue mail SSL ③ Apply mail TLS paths.",
+  "bootstrapThenSsl": "Next: issue mail SSL",
+  "bootstrap": {
+    "mtaOk": "MTA configs written ({{count}} files)",
+    "mtaIncomplete": "MTA incomplete: {{detail}}",
+    "seeNotes": "see notes",
+    "mailboxOk": "Mailbox {{address}} (status {{status}})",
+    "mailboxExists": "Mailbox already exists (skipped): {{detail}}",
+    "passdbOk": "Dovecot passdb written ({{count}} mailboxes)",
+    "webmailOk": "Webmail plan {{mode}} for {{host}}",
+    "mailTlsTodo": "Mail TLS: issue a cert for {{mailHost}}, then use Apply mail TLS paths on the health tab.",
+    "externalDns": "External (operator-owned): set MX/SPF/DKIM/DMARC at DNS; PTR at VPS; Port 25 or SMTP relay.",
+    "healthScore": "Health score {{score}}/{{max}} (DNS/PTR/Port25 not auto-complete)",
+    "webmailProjectOk": "Webmail project {{tool}} @ {{host}} ({{status}})",
+    "dovecotApplyOk": "Dovecot virtual auth applied"
+  },
+  "tabDeliverability": "Delivery",
+  "pendingCount": "Pending",
+  "externalTodosOneLiner": "PTR, port 25, and registrar DNS must be done by you.",
+  "runDeliverabilityPack": "Run delivery check",
+  "deliverabilityTitle": "Delivery check",
+  "deliverabilityEmpty": "Not checked yet",
+  "deliverabilityEmptyDesc": "Run delivery check for DNS, PTR, and port 25.",
+  "panelReady": "Panel-checkable",
+  "gaps": "Gaps",
+  "checkOk": "OK",
+  "checkExternal": "External",
+  "checkFail": "Fail",
+  "mailboxListDesc": "Write password DB after create",
+  "aliasesDesc": "Aliases and forwards",
+  "relayDesc": "SMTP relay",
+  "deliverabilityDesc": "PTR / DNS / port 25 checks",
+  "dnsTodosDesc": "Copy then add at your DNS host",
+  "deliverabilityHonesty": "Cannot set PTR or unlock port 25 for you",
+  "warmupSuggest": "暖身建議",
+  "writeSsoSkeleton": "寫入 Roundcube SSO 骨架",
+  "rateLimitPerHour": "每小時訊息上限",
+  "rateLimitGlobalHint": "全域取各域名最小值",
+  "savePolicyWritten": "只寫入控制面",
+  "dnsblMultiIp": "多 IP RBL",
+  "webmailTool": "Webmail software",
+  "webmailToolRoundcube": "Roundcube (default)",
+  "webmailToolSnappy": "SnappyMail (lightweight)",
+  "webmailProjectName": "Project name",
+  "installWebmailProject": "Create & go live",
+  "openWebmail": "Open webmail",
+  "webmailRisk": "Public webmail is risky — enable HTTPS soon.",
+  "webmailForceHttps": "Force HTTPS (Roundcube; SSL required)",
+  "reinstallWebmail": "Reinstall / upgrade",
+  "webmailSsoAdvanced": "Advanced · SSO plugin",
+  "tlsRoleMail": "mail (IMAP/SMTP)",
+  "tlsRoleMailHint": "Mail server hostname",
+  "tlsRoleWebmail": "webmail",
+  "tlsRoleWebmailHint": "Webmail virtual host",
+  "tlsRoleApex": "Apex domain",
+  "tlsRoleApexHint": "Web / apex certificate",
+  "tlsRequestLe": "Request LE",
+  "advancedToolsTitle": "Queue & clients",
+  "flushQueueConfirm": "Flush the local MTA queue? This cannot be undone.",
+  "mailSslTitleShort": "Certificates & TLS",
+  "deleteDomain": "Delete domain",
+  "deleteDomainConfirmTitle": "Delete email domain?",
+  "deleteDomainConfirm": "Deletes {{domain}} and its mailboxes, aliases, and control-plane data. System Postfix/Dovecot config may still need cleanup.",
+  "deleteDomainBtn": "Delete",
+  "deleteMailbox": "Delete mailbox",
+  "deleteMailboxTitle": "Delete mailbox?",
+  "deleteMailboxDesc": "Deletes {{address}}, control-plane data, and local Maildir if present.",
+  "deleteMailboxC1": "Mailbox login and mail files",
+  "deleteMailboxC2": "Rewrite domain virtual map (control plane)",
+  "deleteMailboxC3": "System Dovecot/Postfix may still need cleanup",
+  "deleteAliasTitle": "Delete alias/forward?",
+  "deleteAliasDesc": "Deletes {{source}}.",
+  "deleteDomainC1": "All mailboxes and aliases",
+  "deleteDomainC2": "Control-plane DKIM, DNS suggestions, and flags",
+  "deleteDomainC3": "Local dataDir/email directory if present",
+  "deleteDomainC4": "System MTA maps may remain; clean separately if needed",
+  "deleteDialogTitle": "Permanently delete mail domain",
+  "deleteDialogDesc": "About to delete {{domain}}. This cannot be undone.",
+  "deletePermanent": "Delete permanently",
+  "deleteRemoveData": "Also remove local mail data",
+  "deleteRemoveDataDesc": "Uncheck to remove from panel only; Maildir stays on disk",
+  "deleteTypeName": "Type the domain to confirm",
+  "deleteTypeNameHint": "Must match exactly: {{name}}",
+  "deleteWillData": "Local dataDir/email directory if present",
+  "deleteKeepData": "Keep local dataDir mail data",
+  "deleteSystemWarn": "System Postfix/Dovecot maps are not auto-cleaned; clean separately if needed.",
+  "hostIpPick": "Host IPv4",
+  "hostIpPickV6": "Host IPv6",
+  "editMailboxTitle": "Edit mailbox",
+  "editMailboxDesc": "Change password or login settings for {{address}}",
+  "editMailboxSave": "Save changes",
+  "newPassword": "New password",
+  "newPasswordHint": "Leave blank to keep the current password (min. 8 characters if set)",
+  "confirmPassword": "Confirm password",
+  "mailboxStatus": "Status",
+  "mailboxStatusActive": "Active (login allowed)",
+  "mailboxStatusDisabled": "Disabled (login blocked)",
+  "mailboxStatusHint": "Disabled exports * to Dovecot passdb so login is denied",
+  "colAddress": "Address",
+  "colLocalPart": "Local part",
+  "colPassword": "Password",
+  "colCreated": "Created",
+  "hasPassword": "Set",
+  "noPassword": "Not set",
+  "mailboxPager": "Mailbox pages",
+  "prevPage": "Previous",
+  "nextPage": "Next",
+  "pageOf": "Page {{page}} / {{total}} · {{count}}",
+  "mailboxEmptyTitle": "No mailboxes yet",
+  "passwordMismatch": "Passwords do not match",
+  "passwordTooShort": "Password must be at least 8 characters",
+  "mailboxUpdateNeedField": "Set a new password or change status"
+}

package/locales/en/errors.json

@@ -0,0 +1,56 @@
+{
+  "YSK_UNAUTHORIZED": "Unauthorized",
+  "YSK_FORBIDDEN": "Forbidden",
+  "YSK_NOT_FOUND": "Not found",
+  "YSK_VALIDATION": "Invalid input",
+  "YSK_ALLOWLIST_DENIED": "Not on allowlist",
+  "YSK_APPROVAL_REQUIRED": "Approval required",
+  "YSK_APPROVAL_PENDING": "Approval pending",
+  "YSK_APPROVAL_REJECTED": "Approval rejected",
+  "YSK_SANDBOX_VIOLATION": "Sandbox violation",
+  "YSK_LLM_UNTRUSTED": "Untrusted LLM output",
+  "YSK_CONFIG_INVALID": "Invalid configuration",
+  "YSK_SETUP_INCOMPLETE": "Setup incomplete",
+  "YSK_UPDATE_FAILED": "Update failed",
+  "YSK_INTERNAL": "Internal error",
+  "YSK_NEED_EXECUTE": "Host execute permission required",
+  "YSK_NEED_ROOT": "Root required",
+  "YSK_RATE_LIMITED": "Too many attempts; try again later",
+  "YSK_TOTP_REQUIRED": "Authentication code required",
+  "auth": {
+    "needCredentials": "Enter username and password",
+    "rateLimited": "Too many sign-in attempts; try again later",
+    "badCredentials": "Incorrect username or password",
+    "accountSuspended": "Account suspended",
+    "adminTotpStrict": "Admins must enable 2FA (strict). Use an enrolled account or disable strict mode.",
+    "totpReplay": "Code already used; wait for the next period",
+    "totpRequired": "A valid authentication code is required",
+    "mustEnrollTotp": "Admin policy: enable two-factor authentication now",
+    "userNotFound": "User not found",
+    "totpSetupNeedReauth": "Enabling 2FA requires your password (or a recent step-up code)",
+    "totpBeginFirst": "Start 2FA setup first",
+    "totpInvalid": "Invalid authentication code",
+    "stepUpRequired": "This action requires a fresh authentication code",
+    "missingCredential": "Missing credentials",
+    "apiKeyUserMissing": "API key owner not found",
+    "apiKeyInvalid": "Invalid API key",
+    "sessionExpired": "Session expired; sign in again",
+    "sessionIdle": "Idle timeout; sign in again",
+    "totpNotEnabled": "2FA is not enabled",
+    "totpSecretNoDataDir": "TOTP secret is encrypted but dataDir is not set"
+  },
+  "http": {
+    "notFoundRoute": "Not found: {{method}} {{path}}",
+    "unauthorized": "Not signed in or session expired",
+    "forbidden": "You do not have permission for this action",
+    "notFound": "Resource not found",
+    "unprocessable": "Request rejected by server",
+    "requestFailed": "Request failed ({{status}})",
+    "jsonInvalid": "Invalid JSON",
+    "internal": "Internal error"
+  },
+  "YSK_HOST_BROWSE_SSRF": "Host browse blocked by security policy",
+  "YSK_HOST_BROWSE_SESSION": "Host browse session not found or expired",
+  "YSK_HOST_BROWSE_UPSTREAM": "Host browse upstream fetch failed",
+  "YSK_HOST_BROWSE_NEED_CHROME": "Real browser engine requires Chrome/Chromium on the host"
+}

package/locales/en/fail2ban.json

@@ -0,0 +1,82 @@
+{
+  "backToProtection": "Protection",
+  "statCurrentBan": "Current bans",
+  "statTotal": "Total banned",
+  "statBanList": "Ban list",
+  "statBoot": "On boot",
+  "startedOk": "fail2ban started",
+  "startService": "Start service",
+  "notInstalled": "fail2ban is not installed",
+  "toolHintPrefix": "Underlying tools:",
+  "toolHintBody": "fail2ban = after scanning logs,",
+  "toolHintTemp": "temporary",
+  "toolHintBody2": "bans · for attack response use",
+  "toolHintUfw": "UFW = ports / permanent rules",
+  "tabs": {
+    "bans": "Ban list",
+    "whitelist": "Whitelist",
+    "jails": "Jails",
+    "policy": "Policy",
+    "service": "Service",
+    "about": "About"
+  },
+  "manualBanTitle": "Manual ban (temporary)",
+  "ipPlaceholder": "IPv4 or IPv6",
+  "banipOk": "banip done",
+  "manualBanHint": "Temporary block;",
+  "currentBans": "Currently banned",
+  "bannedTableTitle": "Banned IPs (live fail2ban-client)",
+  "bannedTableDesc": "Needs client access; unban needs YSK_EXECUTE",
+  "unbanOk": "Unbanned",
+  "unban": "Unban",
+  "addWhitelistTitle": "Add to ignoreip whitelist",
+  "whitelistAdded": "Added to whitelist",
+  "addWhitelistShort": "+Whitelist",
+  "emptyBansTitle": "No banned IPs",
+  "emptyBansDesc": "Or no permission to read fail2ban-client",
+  "ignoreipTitle": "ignoreip whitelist",
+  "ignoreipDesc": "IPs never banned (panel file + optional live fail2ban-client)",
+  "addIp": "Add IP",
+  "addWhitelist": "Add to whitelist",
+  "applyPolicyIgnoreip": "Apply policy (incl. ignoreip)",
+  "applyIgnoreipOk": "Wrote ignoreip into jail.local and applied",
+  "ignoreipHint": "Without YSK_EXECUTE only panel file is written (apply_status=written);",
+  "whitelistTitle": "Whitelist ({{count}})",
+  "whitelistRemoved": "Removed from whitelist",
+  "remove": "Remove",
+  "emptyWhitelistTitle": "No whitelist IPs yet",
+  "emptyWhitelistDesc": "Add admin IPs so you are not banned",
+  "activeJails": "Active jails",
+  "colCurrent": "Current",
+  "colTotal": "Total",
+  "colDesc": "Description",
+  "emptyJailsTitle": "No jails",
+  "emptyJailsDesc": "Service not running or jail.local not applied",
+  "policyTitle": "Jail policy",
+  "policyDesc": "Writes panel jail.local; apply copies + reloads (not via UFW)",
+  "bantimeHint": "Ban duration",
+  "findtimeHint": "Counting window",
+  "maxretryHint": "Max failures in window",
+  "customExample2h": "Custom, e.g. 2h",
+  "customExample15m": "Custom, e.g. 15m",
+  "customMaxretry": "Custom 1–50",
+  "min": "{{n}} min",
+  "hour": "{{n}} h",
+  "week": "{{n}} wk",
+  "enableJailsHint": "Enable jails (check then apply):",
+  "writtenOnlyMsg": "Wrote panel file (not applied on host)",
+  "writeOnly": "Write panel file only",
+  "appliedOk": "fail2ban applied",
+  "applyToSystem": "Apply to system",
+  "systemdTitle": "systemd control",
+  "enableAndStart": "Enable and start",
+  "serviceHint": "For attack response use",
+  "serviceHintSuffix": "(calls this page’s jails + Nginx rate limits;",
+  "actionOk": {
+    "enable": "fail2ban enabled and started",
+    "start": "fail2ban started",
+    "reload": "fail2ban reloaded",
+    "restart": "fail2ban restarted",
+    "stop": "fail2ban stopped"
+  }
+}

package/locales/en/featurePage.json

@@ -0,0 +1,3 @@
+{
+  "back": "Back"
+}