ysk-server-shared 1.0.0

package/locales/en/files.json

@@ -0,0 +1,320 @@
+{
+  "pillFiles": "{{count}} files",
+  "statFiles": "Files",
+  "statFolders": "Folders",
+  "statUsage": "Usage",
+  "statSelected": "Selected",
+  "statTrash": "Trash",
+  "statShares": "Shares",
+  "publicSiteSettings": "Public site settings",
+  "opsResultTitle": "File operation result",
+  "closeResult": "Close result",
+  "tabBrowse": "Browse",
+  "tabTrash": "Trash",
+  "tabShares": "Shares",
+  "spaceLabel": "Space",
+  "publicFiles": "Public files",
+  "viewLabel": "View",
+  "allFiles": "All files",
+  "favorites": "Favorites",
+  "upload": "Upload",
+  "newFolder": "New folder",
+  "newTextFile": "New text file",
+  "download": "Download",
+  "copy": "Copy",
+  "move": "Move",
+  "zip": "Zip",
+  "unzip": "Unzip",
+  "unzipDone": "Unzipped {{path}}",
+  "unzipFailed": "Unzip failed",
+  "delete": "Delete",
+  "searchName": "Search…",
+  "sortAria": "Sort",
+  "sortNameAsc": "Name↑",
+  "sortNameDesc": "Name↓",
+  "sortSizeAsc": "Small↑",
+  "sortSizeDesc": "Large↓",
+  "sortMtimeDesc": "Newest",
+  "sortMtimeAsc": "Oldest",
+  "viewList": "List",
+  "viewIcons": "Icons",
+  "viewAria": "View mode",
+  "toolbarAria": "File actions",
+  "pathAria": "Path",
+  "rootPublic": "Public",
+  "rootProject": "Project",
+  "emptyFavorites": "No favorites yet",
+  "emptyFolder": "This folder is empty",
+  "emptyFolderHint": "Drop files or folders here to upload, or click Upload",
+  "selectItem": "Select {{name}}",
+  "colName": "Name",
+  "colSize": "Size",
+  "colMtime": "Modified",
+  "rename": "Rename",
+  "unfavorite": "Unfavorite",
+  "favorite": "Favorite",
+  "share": "Share",
+  "versions": "Versions",
+  "selectAllAria": "Select all",
+  "selectAll": "Select all",
+  "folder": "Folder",
+  "dropToUpload": "Drop to upload",
+  "trashTitle": "Trash ({{count}})",
+  "trashDesc": "Deleted files can be restored or permanently removed",
+  "emptyTrash": "Empty trash",
+  "emptyTrashDone": "Trash emptied",
+  "colOrigPath": "Original path",
+  "colDeletedAt": "Deleted at",
+  "restore": "Restore",
+  "restored": "Restored",
+  "purgeForever": "Delete forever",
+  "purged": "Permanently deleted",
+  "trashEmpty": "Trash is empty",
+  "sharesTitle": "Public share links ({{count}})",
+  "colPath": "Path",
+  "colLink": "Link",
+  "colDownloads": "Downloads",
+  "unshare": "Unshare",
+  "unshareDone": "Share cancelled",
+  "sharesEmpty": "No shares yet",
+  "sharesEmptyHint": "Click Share on a file row",
+  "webdavTitle": "WebDAV settings",
+  "webdavDesc": "Mount the public files root via HTTP Basic in Finder, Windows, or rclone. Token is shown once.",
+  "enableIssueToken": "Enable and issue token",
+  "webdavReissueToken": "Re-issue token",
+  "webdavReissueConfirm": "Re-issuing invalidates the old password immediately; mounted clients will disconnect. Continue?",
+  "webdavDisableConfirm": "Disabling will reject all /webdav connections. Continue?",
+  "tokenIssued": "Token issued",
+  "status": "Status",
+  "enabledMount": "Enabled · {{path}}",
+  "notEnabled": "Not enabled",
+  "disable": "Disable",
+  "webdavDisabled": "WebDAV disabled",
+  "webdavEnabledNoEcho": "Enabled (password will not be shown again; re-issue if needed)",
+  "webdavDefaultOff": "Off by default — click Enable and issue token to start",
+  "webdavOn": "Enabled",
+  "webdavOff": "Disabled",
+  "webdavTokenId": "Token #{{id}}",
+  "webdavUpdated": "Updated {{at}}",
+  "webdavTokenOnceTitle": "Copy the password now",
+  "webdavTokenOnceHint": "This password is shown only once; it cannot be retrieved after you leave this page.",
+  "webdavConnTitle": "Connection",
+  "webdavConnDesc": "Use this URL with HTTP Basic credentials in your client",
+  "webdavUrl": "Server URL",
+  "webdavUsername": "Username",
+  "webdavPassword": "Password (token)",
+  "webdavPasswordHidden": "Issued earlier and not re-shown — re-issue or use a saved password",
+  "webdavPasswordNone": "Not issued yet",
+  "webdavRoot": "Mount root",
+  "webdavRootValue": "Panel public files root",
+  "webdavAuth": "Authentication",
+  "webdavAuthValue": "HTTP Basic · user ysk · password = panel-issued token",
+  "webdavConnBundle": "connection details",
+  "webdavCopyAll": "Copy all connection details",
+  "webdavClientsTitle": "Client setup",
+  "webdavClientsDesc": "Common mount recipes (prefer HTTPS; trust self-signed certs in the client if needed)",
+  "webdavClientFinder": "macOS Finder",
+  "webdavClientFinderHint": "Go → Connect to Server… (⌘K), paste the URL, user ysk, password = token.",
+  "webdavClientWin": "Windows",
+  "webdavClientWinHint": "This PC → Map network drive → use different credentials; or Cyberduck / WinSCP (WebDAV).",
+  "webdavNotesTitle": "Notes",
+  "webdavNote1": "WebDAV maps the public files root only — not the whole host filesystem.",
+  "webdavNote2": "Expose the panel port via reverse proxy/firewall; prefer HTTPS only.",
+  "webdavNote3": "Re-issuing invalidates the old token immediately; disable rejects all /webdav requests.",
+  "webdavNote4": "Supports OPTIONS / PROPFIND / GET / PUT; full LOCK suite may be incomplete.",
+  "copiedLabel": "Copied “{{label}}”",
+  "newFolderTitle": "New folder",
+  "willCreateAt": "Will create under \"{{path}}\"",
+  "nameRequired": "Enter a name",
+  "folderCreated": "Folder created",
+  "create": "Create",
+  "folderName": "Folder name",
+  "noPathSepHint": "Must not contain path separators",
+  "newTextTitle": "New text file",
+  "fileNameRequired": "Enter a file name",
+  "textFileCreated": "Text file created",
+  "fileName": "File name",
+  "fileNameHint": "e.g. readme.md or notes.txt",
+  "versionsTitle": "Version history",
+  "versionsDesc": "",
+  "noVersions": "No version history yet",
+  "noVersionsHint": "",
+  "versionRestored": "Restored",
+  "renameTitle": "Rename",
+  "renameCurrent": "Current: {{name}}",
+  "renamed": "Renamed",
+  "newName": "New name",
+  "newNameHint": "Renames only; stays in the same directory",
+  "copyTo": "Copy to…",
+  "moveTo": "Move to…",
+  "copyMoveDesc": "{{action}} {{count}} item(s)",
+  "actionCopy": "Copy",
+  "actionMove": "Move",
+  "copied": "Copied",
+  "moved": "Moved",
+  "targetFolderPath": "Target folder path",
+  "targetFolderHint": "Relative to root, e.g. docs or docs/a; empty = root",
+  "shareCreateTitle": "Share file",
+  "shareCreateDesc": "Create a public download link. Optional password.",
+  "createLink": "Create link",
+  "sharePath": "Path: ",
+  "passwordOptional": "Password (optional)",
+  "passwordOptionalHint": "Leave empty for open access",
+  "passwordPlaceholder": "Optional",
+  "linkCreated": "Link created: ",
+  "chmodTitle": "Change permissions (chmod)",
+  "chmodDone": "chmod {{mode}} → {{count}} item(s)",
+  "chmodDoneShort": "chmod {{mode}} done",
+  "chmodFailed": "chmod failed",
+  "apply": "Apply",
+  "chmodApplyHint": "Apply to {{count}} selected item(s) (octal, e.g. 644 / 755)",
+  "chmod644": "644 file",
+  "chmod755": "755 executable",
+  "chmod600": "600 private",
+  "chmod700": "700 private dir",
+  "chmod775": "775 group write",
+  "chmodCustomPh": "Custom 0644…",
+  "mode": "Mode",
+  "zipTitle": "Compress to zip",
+  "zipCreated": "Created {{path}}",
+  "zipDone": "Zipped → {{path}}",
+  "zipFailed": "zip failed",
+  "compress": "Compress",
+  "zipHint": "Zip {{count}} selected item(s) into current folder (needs zip on host)",
+  "destFileName": "Destination file name",
+  "destPathHint": "Path: {{path}}",
+  "movedToTrash": "Moved to trash",
+  "moveToTrashTitle": "Move to trash?",
+  "moveToTrashDesc": "Delete {{count}} item(s) (restorable from trash)",
+  "preview": "Preview",
+  "imagePreviewNeedLogin": "Image preview needs login; use download instead",
+  "pdfDownloadHint": "Download PDF to open (needs auth headers)",
+  "noEmbedPreview": "This type cannot be embedded; please download.",
+  "uploadDone": "Uploaded {{count}} file(s)",
+  "downloadFailedStatus": "Download failed ({{status}})",
+  "downloadFailed": "Download failed",
+  "uploadFolder": "Upload folder",
+  "dropFolderOrFile": "Drop files or folders to upload",
+  "uploadPanelTitle": "Uploads",
+  "uploadPanelStats": "{{done}}/{{total}} done · {{err}} failed",
+  "uploadClearDone": "Clear finished",
+  "uploadInFolder": "Folder {{folder}}",
+  "uploadStatusDone": "Done",
+  "uploadStatusError": "Failed",
+  "uploadStatusQueued": "Queued",
+  "uploadNoFile": "No file data",
+  "uploadSomeFailed": "{{count}} item(s) failed",
+  "uploadTruncated": "Upload limited to {{max}} items ({{total}} selected; rest skipped)",
+  "previewFailed": "Preview failed",
+  "videoNotSupported": "Your browser cannot play this video.",
+  "audioNotSupported": "Your browser cannot play this audio.",
+  "edit": "Edit",
+  "editorTitle": "Edit · {{name}}",
+  "editorSave": "Save",
+  "editorSavedIdle": "Saved",
+  "editorSaved": "Saved {{name}}",
+  "editorSaveFailed": "Save failed",
+  "editorDirty": "Unsaved",
+  "editorClean": "Saved",
+  "editorChars": "{{count}} chars",
+  "editorAria": "Editor for {{name}}",
+  "editorDiscardConfirm": "Discard unsaved changes?",
+  "shareReadyTitle": "Link ready",
+  "shareReadyDesc": "Copy and send this link. Anyone with it can download.",
+  "shareReadyBadge": "Created",
+  "shareProtected": "Password protected",
+  "shareOpenAccess": "No password",
+  "shareLinkLabel": "Public link",
+  "shareCopyHint": "Select the field or use Copy.",
+  "shareAgain": "New link",
+  "shareCreatedToast": "Share link created",
+  "linkCopied": "Link copied",
+  "linkCopyFailed": "Could not copy — select and copy manually",
+  "shareExpireLabel": "Link expiry",
+  "shareExpireHint": "After this time the link stops working",
+  "shareExpireNever": "Never",
+  "shareExpire1h": "1 hour",
+  "shareExpire1d": "1 day",
+  "shareExpire7d": "7 days",
+  "shareExpire30d": "30 days",
+  "shareExpireCustom": "Custom…",
+  "shareExpireAt": "Expires at",
+  "shareExpireInvalid": "Pick a future date and time",
+  "shareExpiresAt": "Expires {{at}}",
+  "colExpires": "Expires",
+  "pdfInlineHint": "If the PDF does not display, download it.",
+  "publicShareTitle": "Someone shared a file with you",
+  "publicShareSub": "Download securely from this link — no account needed",
+  "publicShareChecking": "Checking link…",
+  "publicShareDownloading": "Downloading…",
+  "publicShareWait": "Please wait",
+  "publicShareNeedPassword": "This link requires a password to download",
+  "publicSharePasswordPh": "Share password",
+  "publicShareDownload": "Download",
+  "publicShareDownloadAgain": "Download again",
+  "publicShareDone": "Download started",
+  "publicShareDoneHint": "Check your browser downloads; tap again if nothing appears",
+  "publicShareNotFound": "Share not found or expired",
+  "publicShareDenied": "Cannot access this share",
+  "publicShareBadPassword": "Wrong password",
+  "publicShareMissing": "Invalid share link",
+  "publicShareFailed": "Download failed ({{status}})",
+  "publicShareFailedGeneric": "Download failed",
+  "publicShareDefaultName": "download",
+  "publicSharePanelLogin": "Panel sign-in",
+  "publicShareLang": "Language",
+  "publicShareProgress": "{{loaded}} / {{total}} ({{pct}}%)",
+  "publicShareProgressIndeterminate": "Received {{loaded}}…",
+  "publicShareCancel": "Cancel",
+  "publicShareCancelled": "Download cancelled",
+  "publicSharePoweredBy": "Powered by {{company}}",
+  "publicSharePoweredPrefix": "Powered by ",
+  "publicSharePoweredSuffix": "",
+  "publicShareHasAccount": "Have an account? Sign in",
+  "password": "Password",
+  "editorLines": "{{count}} lines",
+  "editorLargeHint": "Large file — editing may feel slow. Prefer download for multi‑MB files (server cap ~2 MB).",
+  "editorLnCol": "Ln {{line}}, Col {{col}}",
+  "editorSpaces": "Spaces: {{n}}",
+  "copyLink": "Copy link",
+  "versionsTitleShort": "Version history",
+  "versionsCount": "{{count}} / {{max}}",
+  "versionN": "v{{n}}",
+  "versionLatest": "Latest",
+  "shareModeLabel": "Download method",
+  "shareModeDirect": "Direct download",
+  "shareModeBt": "BitTorrent (WebTorrent)",
+  "shareModeBoth": "Direct + BitTorrent",
+  "shareModeHint": "BT needs a running tracker (Files → BT Tracker). Magnet links can be used by anyone who has the link.",
+  "shareModeBtBlocked": "Tracker is not running — start it before creating BT shares, or choose Direct only.",
+  "shareMagnet": "Magnet link",
+  "shareTorrentFile": "Download .torrent",
+  "shareSeedStatus": "Seeding status",
+  "shareBtStats": "BitTorrent status",
+  "btSeeds": "Seeds",
+  "btLeechers": "Leechers",
+  "btPeers": "Peers",
+  "btUploadSpeed": "Upload speed",
+  "btDownloadSpeed": "Download speed",
+  "btUploaded": "Uploaded",
+  "btDownloaded": "Downloaded",
+  "btRatio": "Ratio",
+  "btUpdatedAt": "Updated",
+  "btServerStats": "Server seeder",
+  "btClientStats": "Your client",
+  "btSeeding": "Seeding",
+  "btPending": "Seeding pending",
+  "btStopped": "Seed stopped",
+  "btError": "Seed error",
+  "publicShareMethod": "How do you want to download?",
+  "publicShareDirect": "Direct download",
+  "publicShareBt": "BitTorrent",
+  "openBtTracker": "Open BT Tracker",
+  "publicShareBtInBrowser": "Download in browser (WebTorrent)",
+  "publicShareBtProgress": "Downloaded {{pct}}% · {{peers}} peers · ↓ {{down}} · ↑ {{up}}",
+  "publicShareBtStarting": "Connecting to peers…",
+  "publicShareBtFailed": "WebTorrent failed: {{detail}}",
+  "publicShareBtNeedMagnet": "No magnet URI for this share",
+  "publicShareBtUnsupported": "This browser cannot run WebTorrent; use magnet or .torrent instead",
+  "btNone": "—"
+}

package/locales/en/firewall.json

@@ -0,0 +1,102 @@
+{
+  "profiles": {
+    "web": {
+      "label": "Web host",
+      "short": "SSH · 80 · 443"
+    },
+    "mail": {
+      "label": "Web + mail",
+      "short": "Also 25/465/587/993"
+    },
+    "ftps": {
+      "label": "Web + FTPS",
+      "short": "21 + PASV 30000–30100"
+    }
+  },
+  "appliedProfile": "Applied profile: {{label}}",
+  "backToProtection": "Protection",
+  "statRules": "Rules",
+  "statDenyIps": "Permanent deny IPs",
+  "statAllow": "Allow",
+  "statDeny": "Deny",
+  "statDefaultIn": "Default incoming",
+  "executeOn": "On",
+  "executeOff": "Off",
+  "ufwDisabled": "UFW disabled",
+  "ufwEnabled": "UFW enabled",
+  "disableUfw": "Disable UFW",
+  "enableUfw": "Enable UFW",
+  "notInstalled": "UFW is not installed",
+  "toolHintPrefix": "Underlying tools:",
+  "toolHintBody": "UFW = ports / permanent rules · for attack response and auto-ban use",
+  "toolHintFail2ban": "fail2ban = temporary log-based bans",
+  "executeOffHint": "System changes off — status is readable;",
+  "tabs": {
+    "rules": "Rules",
+    "ports": "Open ports",
+    "deny": "Permanent deny IP",
+    "profiles": "Profiles",
+    "about": "About",
+    "services": "Services"
+  },
+  "currentRules": "Current rules",
+  "rulesSourceHint": "UFW numbered rules (ufw status numbered)",
+  "colAction": "Action",
+  "colTo": "To",
+  "colFrom": "From",
+  "deleteShort": "Delete",
+  "denyBadge": "DENY",
+  "emptyRulesTitle": "No rules or no permission to read",
+  "emptyRulesInstalled": "UFW inactive or needs root to read",
+  "emptyRulesNotInstalled": "Install UFW then refresh",
+  "allowPortTitle": "Allow port",
+  "protocol": "Protocol",
+  "protoBoth": "Both",
+  "protoBothLabel": "TCP+UDP",
+  "port": "Port",
+  "portHint": "Pick a common port, or custom below",
+  "portHintYsk": "All YSK service ports (Panel, Web, SSH, mail, FTP, DNS, DB, Redis);",
+  "privatePortWarn": "{{service}} should usually stay private; public allow is risky. Prefer a source IP/CIDR.",
+  "privatePortWarnWithFrom": "{{service}} will only allow the given source; double-check the IP/CIDR.",
+  "allowFrom": "Source IP/CIDR (optional)",
+  "allowFromHint": "Empty = anywhere; set an IP or CIDR to allow only that source on this port",
+  "allowFromPlaceholder": "e.g. 203.0.113.10 or 10.0.0.0/8",
+  "customPort": "Custom port (e.g. 8080 or 30000:30100)",
+  "allowedPort": "Allowed {{proto}}/{{port}}",
+  "allowedPortFrom": "Allowed {{proto}}/{{port}} from {{from}}",
+  "allowThisPort": "Allow this port",
+  "allowPortHint": "Keep 22/80/443 for a web host;",
+  "denyTitle": "Permanent deny IP",
+  "denySub": "UFW DENY · different from temporary fail2ban bans",
+  "denyPlaceholder": "IPv4 or IPv6 to deny",
+  "deniedOk": "Permanently denied",
+  "removedDeny": "DENY removed",
+  "remove": "Remove",
+  "noDenyRules": "No permanent deny IP rules",
+  "oneClickProfiles": "One-click profiles",
+  "oneClickDesc": "Write panel script and apply UFW (does not install fail2ban — use the fail2ban page)",
+  "customApply": "Custom apply",
+  "allowSmtp": "Allow SMTP/IMAP ports",
+  "extraTcp": "Extra TCP ports",
+  "extraTcpHint": "Pick a preset; or custom comma/ranges",
+  "noExtra": "None extra",
+  "mailGroup": "Mail set",
+  "customExtraPlaceholder": "Custom: 8080,9000:9010",
+  "appliedCustom": "Custom rules applied",
+  "applyToSystem": "Apply to system",
+  "deletedRule": "Deleted #{{n}}",
+  "deleteRuleTitle": "Delete rule #{{n}}?",
+  "deleteRuleDesc": "Removes that UFW rule number (needs system-change permission).",
+  "servicesTitle": "Managed services",
+  "servicesHint": "Desired network exposure for YSK services. Opening a service syncs these rules automatically.",
+  "servicesEmpty": "No service exposure data yet",
+  "servicesEmptyDesc": "Start a managed service (web, FTPS, VPN, DB…) to populate this list.",
+  "servicesManualHint": "Manual port chips are under the Ports tab — prefer managing access here so rules stay tagged (ysk-svc).",
+  "portsManualHint": "Advanced manual rules. Prefer the Services tab for managed software.",
+  "colService": "Service",
+  "colMode": "Mode",
+  "colPorts": "Ports",
+  "colSync": "Status",
+  "synced": "Synced",
+  "syncNow": "Sync"
+}

package/locales/en/ftp.json

@@ -0,0 +1,135 @@
+{
+  "title": "FTPS accounts",
+  "accountsCount": "{{count}} account(s)",
+  "accounts": "Accounts",
+  "applied": "Applied",
+  "pendingApply": "Pending apply",
+  "sftpKeys": "SFTP keys",
+  "softwareMissing": "FTPS service software is not installed",
+  "ftpAccounts": "FTP accounts",
+  "sftpPubkeys": "SFTP public keys",
+  "homeDir": "Home directory",
+  "domain": "Domain",
+  "user": "User",
+  "keyFingerprint": "Key fingerprint (prefix)",
+  "createHint": "Create an FTP account on the Accounts tab first, then return here to register keys.",
+  "pubkeyHint": "Use “+ Add public key”, choose an FTP user, and paste a full ssh-ed25519 or ssh-rsa line.",
+  "quickSelect": "Quick-select account",
+  "quickSelectHint": "Click a username to fill the new-key form",
+  "editAccount": "Edit FTP account",
+  "createAccount": "Create FTP account",
+  "accountModalDesc": "Pick domain and home from lists, or type freely. Save then Apply to write vsftpd",
+  "usernameHintCreate": "Alnum, dot, underscore, hyphen; immutable after create",
+  "usernameHint": "Alnum, dot, underscore, hyphen",
+  "newPasswordOptional": "New password (optional)",
+  "passwordKeepHint": "Empty keeps current",
+  "passwordMin8": "At least 8 characters",
+  "domainHint": "Site or mail domain for grouping and path hints",
+  "domainPh": "Create site/mail domain first, or type temporarily",
+  "homeHint": "Root after login (chroot visible scope)",
+  "addPubkey": "Add SFTP public key",
+  "addPubkeyDesc": "Choose an account, optional note, and paste one full public key line. Writing the file does not prove login works.",
+  "pubkeyAdded": "Public key added",
+  "ftpUsername": "FTP username",
+  "ftpUsernameHint": "Must match a registered FTP account",
+  "ftpUsernamePh": "Same as FTP account",
+  "note": "Note",
+  "noteHint": "Device label, e.g. laptop / office",
+  "notePh": "Laptop / office host",
+  "sshPubkey": "SSH public key",
+  "sshPubkeyHint": "Usually from ~/.ssh/id_ed25519.pub, paste whole line",
+  "deleteAccountTitle": "Delete FTP account?",
+  "deleteAccountDesc": "Apply again after remove",
+  "deleteKeyTitle": "Delete SFTP public key?",
+  "deleteKeyDesc": "Removes from management file; system authorized_keys may need reload.",
+  "serviceTitle": "vsftpd service",
+  "softwareMissingService": "FTPS software is not installed",
+  "lifecycle": "Lifecycle",
+  "overview": "Overview",
+  "network": "Network",
+  "security": "Security",
+  "installStart": "Install and start",
+  "listenPort": "Listen port",
+  "accountCount": "Accounts",
+  "loginBanner": "Login banner",
+  "sslDomain": "SSL domain",
+  "pasvRange": "PASV range",
+  "forceTls": "Force TLS",
+  "allowWrite": "Allow write",
+  "networkTitle": "Network settings",
+  "networkDesc": "Listen port and PASV;",
+  "listenPortHint": "Default 21; open firewall if using another port",
+  "customPort": "Custom port",
+  "ipStack": "IP stack",
+  "ipStackHint": "Most vsftpd builds: listen and listen_ipv6 are mutually exclusive;",
+  "ipv4Only": "IPv4 only",
+  "ipv6Mapped": "IPv6 (mapped OK)",
+  "bannerHint": "Welcome string clients see after connect",
+  "pasvStart": "PASV start port",
+  "pasvStartHint": "Passive data channel start",
+  "customStart": "Custom start",
+  "pasvEnd": "PASV end port",
+  "pasvEndHint": "Must be ≥ start; firewall must allow the range",
+  "openFirewallPage": "Open firewall page",
+  "customEnd": "Custom end",
+  "pasvPublicIp": "PASV public IP",
+  "pasvPublicIpHint": "NAT/cloud: set public IP; local can leave empty",
+  "optionalEmpty": "(optional)",
+  "securityTitle": "Security settings",
+  "securityDesc": "TLS, write access, chroot; Apply and restart to take effect",
+  "sslCertDomain": "SSL certificate domain",
+  "sslCertDomainHint": "Pick an uploaded/issued cert domain",
+  "enableFtps": "Enable FTPS (SSL/TLS)",
+  "enableFtpsDesc": "TLS on control channel; recommended",
+  "forceTlsLogin": "Force TLS login",
+  "forceTlsLoginDesc": "Reject plain FTP; clients need FTPS",
+  "allowWriteDesc": "Off = download/list only",
+  "chrootUsers": "Chroot users",
+  "chrootUsersDesc": "Jail to home after login",
+  "writableChroot": "Allow writable chroot",
+  "writableChrootDesc": "Keep chroot even when home is writable (common vsftpd need)",
+  "settingsSaved": "Settings saved",
+  "installIncomplete": "Install could not complete",
+  "ftpsReady": "FTPS ready",
+  "settingsApplied": "Settings applied",
+  "opsResult": "Ops result",
+  "saved": "Saved",
+  "accountsList": "Account list",
+  "accountsListDesc": "After create, Apply to sync vsftpd. If service missing, install above then ",
+  "startService": " start.",
+  "createAccountPlus": "+ Create account",
+  "noFtpAccounts": "No FTP accounts yet",
+  "noFtpAccountsDesc": "Create account (list top-right); set home and domain, then apply.",
+  "applyHint": "Note: Apply writes management only; listening needs vsftpd active.",
+  "sshdMatchNote": "; system sshd Match must be configured to take effect.",
+  "addPubkeyPlus": "+ Add public key",
+  "noPubkeys": "No public keys registered",
+  "pickDomain": "— pick domain —",
+  "currentDomain": "{{domain}} (current)",
+  "pickHome": "— pick home —",
+  "currentHome": "{{path}} (current)",
+  "fullPath": "Full path: ",
+  "emptyHomes": "If the list is empty, create a project or site first for home options.",
+  "pickAccount": "— pick account —",
+  "installFtpsBanner": "Use the banner above to install FTPS, then start the service.",
+  "applyRestart": "Apply and restart",
+  "afterInstall": "After install you can log in with FTPS accounts. Admin rights needed to install.",
+  "saveSettings": "Save settings",
+  "saveApplyHint": "Save updates panel only; Apply and restart writes vsftpd.conf and reloads.",
+  "installAndStart": "Install & start",
+  "manageAccounts": "Accounts",
+  "openFirewallPorts": "Open firewall ports",
+  "firewallPortsApplied": "Firewall allowed TCP {{ports}}",
+  "sftpTabDesc": "Register SSH public keys for FTP accounts so clients can use SFTP key login. Pick an account, paste one key line, then save.",
+  "sftpNeedAccountTitle": "No FTP accounts yet",
+  "sftpNeedAccount": "Create at least one FTP account first, then register a public key for that user.",
+  "sftpFilterLabel": "Account",
+  "sftpFilterAll": "All accounts",
+  "sftpKeyCount": "{{count}} key(s)",
+  "sftpEmptyFiltered": "No keys for this account",
+  "sftpEmptyFilteredDesc": "“{{user}}” has no registered SSH public keys yet.",
+  "sftpRegister": "Register key",
+  "sftpAddedAt": "Added {{time}}",
+  "sftpTechSummary": "Technical details (advanced)",
+  "sftpTechNote": "Keys are written under the managed path"
+}