ysk-server-shared 1.1.0 → 1.1.9

package/locales/zh-CN/translation.json

@@ -15,7 +15,9 @@
       "failed": "失败",
       "error": "失败",
       "unknown": "未探测",
-      "fallback": "未知"
+      "fallback": "未知",
+      "activating": "Starting",
+      "stuck": "Start stuck"
     },
     "liveN": "{{count}} 在线",
     "registeredOnly": "仅登记",
@@ -140,7 +142,10 @@
     "historyTitleShort": "打开命令历史记录（只读）",
     "expEdge": "在边缘：",
     "noteAllowlist": "Agent tool calls must pass the allowlist.",
-    "noteRbacCap": "Agent role is capped at write-low."
+    "noteRbacCap": "Agent role is capped at write-low.",
+    "journal": "journal",
+    "activatingStuckHint": "Activating longer than 5 minutes — treated as failed. Check journal.",
+    "noOnlineAgents": "No agents online"
   },
   "ai": {
     "status": {
@@ -262,7 +267,9 @@
     "sslTerminatedUpstream": "TLS 在 Nginx 前面结束",
     "removeArtifactHint": "只删除此残留磁盘 conf，不会删除项目。",
     "sourceOrphan": "Leftover",
-    "orphanSite": "Project gone"
+    "orphanSite": "Project gone",
+    "pillSitesSplit": "{{n}} sites · {{leftover}} leftover",
+    "stopSites": "{{n}} site(s) will stop answering HTTP."
   },
   "applyStatus": {
     "draft": "草稿",
@@ -455,7 +462,23 @@
     "goLogs": "Open logs",
     "goAbout": "Backup notes",
     "skippedPendingOs": "Skipped — OS user / home not provisioned",
-    "latestFile": "Latest archive"
+    "latestFile": "Latest archive",
+    "tabTrash": "Recycle bin",
+    "trashTitle": "Recycle bin ({{count}})",
+    "trashSub": "Deleted archives stay here for 7 days, then they are removed permanently.",
+    "trashEmpty": "Recycle bin is empty",
+    "trashEmptyDesc": "Deleted backup files appear here for 7 days.",
+    "trashRestore": "Restore",
+    "trashPurge": "Delete forever",
+    "trashEmptyAll": "Empty recycle bin",
+    "trashExpires": "Expires {{at}}",
+    "trashPurgeTitle": "Permanently delete this backup?",
+    "trashPurgeDesc": "Permanently delete {{name}}. This cannot be undone.",
+    "trashEmptyTitle": "Empty recycle bin?",
+    "trashEmptyDescConfirm": "Permanently delete {{count}} archive(s). Type the count to confirm.",
+    "trashRestored": "Restored from recycle bin",
+    "trashPurged": "Permanently deleted",
+    "trashedOk": "Moved to recycle bin"
   },
   "btTracker": {
     "title": "BT追踪器",
@@ -653,7 +676,10 @@
     "statsLibraryHint": "Torrents in the panel library / file shares",
     "statsTrackerLeftover": "Tracker leftover",
     "statsTrackerLeftoverHint": "Tracker announce hashes that are not library rows",
-    "statsAnnouncesHint": "Announce requests seen by the tracker process"
+    "statsAnnouncesHint": "Announce requests seen by the tracker process",
+    "leftoverHashesTitle": "Tracker leftover hashes",
+    "leftoverHashesHint": "Read-only. These announces are not library or share rows.",
+    "publicHostMissingLive": "Tracker is listening but public announce host is not set. Off-host peers cannot find this seed."
   },
   "catalog": {
     "sw": {
@@ -890,7 +916,9 @@
     "hitMiss": "Hits {{hits}} / misses {{misses}}",
     "cacheBytes": "Cache ≈ {{n}} B",
     "hitRateUnknown": "No access log with cache status and no cache directory, so hit rate cannot be estimated.",
-    "offlineHint": "Offline — probe failed. Remove the node if it is leftover."
+    "offlineHint": "Offline — probe failed. Remove the node if it is leftover.",
+    "applyFailedNoNote": "No stored reason. Re-apply to capture the error.",
+    "statApplyFailed": "Apply failed"
   },
   "cli": {
     "unknownCommand": "未知命令：{{command}}\n执行 `{{cli}} help`",
@@ -2204,7 +2232,8 @@
     "hidePassword": "隐藏",
     "more": "更多的",
     "redirectedTo": "已转到 {{to}}（原为 {{from}}）",
-    "unavailable": "Not available right now"
+    "unavailable": "Not available right now",
+    "ok": "OK"
   },
   "cron": {
     "presetCdTrue": "cd app + true（测试）",
@@ -2372,7 +2401,10 @@
     "writtenOnHostHint": "Lines already written to the host crontab",
     "registeredJobsHint": "Jobs registered in the panel (including pending install)",
     "pendingInstallCount": "{{n}} pending install",
-    "systemJobBadge": "No project · system user"
+    "systemJobBadge": "No project · system user",
+    "willNotRun": "Not written to system crontab — will not run.",
+    "pendingStale": "Not written to system crontab for {{days}} day(s) — it will not run.",
+    "jobsTabPending": "Jobs ({{count}}) · pending {{pending}}"
   },
   "dashboard": {
     "title": "控制台",
@@ -2418,7 +2450,8 @@
     "mode": {
       "degraded": "降级",
       "production_capable": "可生产",
-      "normal": "正常"
+      "normal": "正常",
+      "blocked": "blocked"
     },
     "details": "详情",
     "certExpiryTitle": "证书到期：",
@@ -2502,7 +2535,8 @@
       "warn": "Warning",
       "bad": "Problem"
     },
-    "publicNo2fa": "This panel listens on all interfaces and your admin account has no 2FA."
+    "publicNo2fa": "This panel listens on all interfaces and your admin account has no 2FA.",
+    "readinessBlocked": "{{n}} blocker(s)"
   },
   "dataTable": {
     "empty": "没有数据",
@@ -2765,7 +2799,24 @@
       "fleetApplyTitle": "队列适用于车队成员吗？",
       "redirectedFromCluster": "You were redirected here from /cluster. This is the database cluster tab.",
       "roleUnassigned": "No role assigned",
-      "standaloneOtherEngines": "This engine is standalone. Other engines have clusters: {{names}}."
+      "standaloneOtherEngines": "This engine is standalone. Other engines have clusters: {{names}}.",
+      "notApplied": "Not applied",
+      "plannedAt": "Created {{when}}",
+      "clearStalePlans": "Clear stale plans",
+      "clearStalePlansTitle": "Delete stale planned clusters?",
+      "clearStalePlansDesc": "Deletes {{n}} planned/draft registration(s) older than 7 days. Does not apply or push. System conf is not touched.",
+      "landingTitle": "Database cluster",
+      "landingDesc": "No database engine is installed on this host. Open an engine page to install, then return here.",
+      "landingNoneInstalled": "MySQL, MariaDB, PostgreSQL, and Redis are not installed. /cluster does not open a MySQL tab when MySQL is missing.",
+      "openEngine": "Open {{engine}}",
+      "overviewPill": "Clusters {{n}}",
+      "enginesInstalled": "Engines",
+      "plannedCount": "Planned",
+      "overviewList": "Clusters ({{count}})",
+      "overviewEmpty": "No cluster registrations yet.",
+      "engine": "Engine",
+      "kind": "Kind",
+      "members": "Members"
     },
     "console": {
       "dataBrowse": "资料浏览",
@@ -3090,7 +3141,11 @@
     "installConfirmConsequence": "安装并启动后，PowerDNS 会绑定 53 端口。",
     "installPort53Busy": "53 端口已有程序在监听。未停止或修复该监听前，PowerDNS 可能无法绑定。",
     "installPort53BusyConsequence": "请先修复绑定或停止其他监听，才可预期 53 端口有响应。",
-    "createZoneNeedValid": "Enter a valid zone name and IPv4 address"
+    "createZoneNeedValid": "Enter a valid zone name and IPv4 address",
+    "startProbeFailed": "Could not re-check DNS health after start",
+    "startNotListening": "PowerDNS start returned, but the unit is not answering on port 53",
+    "goStartService": "Start DNS service",
+    "startBindHint": "If start returns to stopped, port 53 is often held by systemd-resolved. Use Heal bind below, then start again."
   },
   "docker": {
     "title": "Docker",
@@ -3142,7 +3197,8 @@
       "created": "Created",
       "dead": "Dead",
       "removing": "Removing",
-      "unknown": "Unknown"
+      "unknown": "Unknown",
+      "exitedCode": "Exited ({{n}})"
     },
     "actions": {
       "start": "启动",
@@ -3850,7 +3906,10 @@
     "opendkimNoReload": "OpenDKIM 不支持重载 — 更改密钥或对照表后请用重启。",
     "opendkimNoReloadTitle": "此堆栈不支持 systemctl reload opendkim",
     "tlsRequestLeFor": "Request LE for {{host}}",
-    "deliverabilityChecks": "Checks"
+    "deliverabilityChecks": "Checks",
+    "healthPartialScore": "Partial {{n}}/100 (DNS only)",
+    "healthPartialHint": "DNS checklist only — live and blacklist not probed.",
+    "deleteImpact": "{{mailboxes}} mailboxes · {{records}} DNS records · {{aliases}} aliases"
   },
   "errors": {
     "YSK_UNAUTHORIZED": "未授权",
@@ -4381,7 +4440,8 @@
     "unshareDesc": "Revoke the link for {{name}} ({{url}}). The link stops working immediately.",
     "pillTrash": "{{count}} in trash",
     "pillSpace": "{{used}} used",
-    "webdavTokenInactive": "Disabled — token #{{id}} is not active"
+    "webdavTokenInactive": "Disabled — token #{{id}} is not active",
+    "webdavOffNoToken": "Disabled (no active token)"
   },
   "firewall": {
     "profiles": {
@@ -4642,7 +4702,23 @@
     "detectPublicIpTitle": "填写来自该主机的第一个非环回 IPv4",
     "pasvIpRequired": "套用前请填写 PASV 公网 IP（NAT／云主机）。可探测或手动输入。",
     "vsftpdFailedGeneric": "vsftpd failed. Open the Service tab for live settings and journal.",
-    "stateFailed": "Failed to start"
+    "stateFailed": "Failed to start",
+    "plaintextInsecure": "Cleartext FTP (no TLS) — insecure. Enable FTPS before exposing port 21.",
+    "plaintextPublicLive": "vsftpd is listening on a public address without FTPS. Credentials travel in the clear. Enable FTPS, bind to this host only, or confirm PLAINTEXT to keep this posture.",
+    "bindAddress": "Listen scope",
+    "bindAddressHint": "New installs bind to this host only. Public listen without FTPS needs a typed confirmation.",
+    "bindLocal": "This host only",
+    "bindLocalHint": "127.0.0.1 — fine without TLS for local tests",
+    "bindPublic": "Public",
+    "bindPublicHint": "All interfaces — enable FTPS or confirm PLAINTEXT",
+    "enableFtpsAndStart": "Enable FTPS and start",
+    "publicPlainNeedConfirm": "Public cleartext FTP needs a PLAINTEXT confirmation",
+    "plainConfirmTitle": "Start public FTP without FTPS?",
+    "plainConfirmDesc": "Port 21 will accept logins and data in the clear on the public address.",
+    "plainConfirmC1": "Usernames and passwords are visible on the network.",
+    "plainConfirmC2": "PASV will advertise the configured public IP.",
+    "plainConfirmC3": "Host firewall and cloud security group are not opened for you.",
+    "plainConfirmAction": "Start cleartext FTP"
   },
   "geo": {
     "continents": {
@@ -4941,7 +5017,9 @@
     "engineBrowserNeedChrome": "Real browser (Chrome not installed)",
     "egressHint": "The target site sees this server’s outbound address ({{host}}), not your laptop. Cookies stay in the server session jar.",
     "closeNoSession": "No session yet",
-    "resumeHintDetail": "Resume previous session ({{count}} tabs) · {{url}} · {{when}}"
+    "resumeHintDetail": "Resume previous session ({{count}} tabs) · {{url}} · {{when}}",
+    "resumeHintOwned": "Resume last browse for {{user}} ({{count}} tabs) · {{url}} · {{when}}",
+    "clearSessionData": "Clear session data"
   },
   "listToolbar": {
     "searchPlaceholder": "搜索…",
@@ -5402,7 +5480,20 @@
     "expandAllWarnings": "Show all {{n}} warnings",
     "collapseWarnings": "Show fewer",
     "inventoriedWarn": "Inventoried · {{n}} warnings",
-    "orphanMtime": "Last modified {{at}}"
+    "orphanMtime": "Last modified {{at}}",
+    "inventoriedOrphans": "Inventoried · {{n}} leftover homes",
+    "inventoriedWarnAndOrphans": "Inventoried · {{w}} warnings · {{n}} leftover",
+    "orphanHomesTitle": "Leftover project homes ({{count}})",
+    "orphanHomesSummary": "{{count}} path(s) on disk are not in the store. Back up first if unsure, then remove unused paths.",
+    "orphanColHome": "Home",
+    "orphanColModified": "Modified",
+    "orphanKpi": "Leftover",
+    "sourceOs": "OS",
+    "sourceDataDir": "dataDir",
+    "sourceDbRedis": "Databases / Redis",
+    "sourceDbRedisValue": "{{db}} databases · {{redis}} Redis",
+    "orphanColEntries": "Entries",
+    "orphanEntries": "{{n}} top-level entries in the directory"
   },
   "multiCheck": {
     "customPlaceholder": "自定义代码",
@@ -5670,7 +5761,9 @@
       "up": "Up",
       "down": "Down",
       "unknown": "Unknown",
-      "other": "Other"
+      "other": "Other",
+      "loopback": "Always on",
+      "loopbackHint": "Loopback is always available and cannot be changed."
     }
   },
   "nginx": {
@@ -5755,7 +5848,10 @@
     "setHsts": "HSTS",
     "setCfRealIp": "Cloudflare 真实 IP",
     "setIndexes": "目录列表",
-    "bodyInherit": "跟随全局"
+    "bodyInherit": "跟随全局",
+    "stopSites": "{{n}} site(s) will stop answering HTTP.",
+    "purgeCacheTitle": "Purge Nginx cache and reload?",
+    "purgeCacheDesc": "Clears the on-disk cache and reloads Nginx. Live sites stay up."
   },
   "notFound": {
     "title": "找不到页面",
@@ -5830,10 +5926,18 @@
       "sidecarPushed": "还推送了 SQL sidecar {{name}}",
       "controlPlaneDryRun": "仅预览 - 没有写任何东西。在面板中，使用“恢复”并确认要写入的短语。",
       "controlPlaneNeedConfirm": "完全控制平面恢复需要确认短语 RESTORE-CONTROL-PLANE。",
-      "controlPlaneRestartAfter": "恢复成功后重新启动API。"
+      "controlPlaneRestartAfter": "恢复成功后重新启动API。",
+      "movedToTrash": "Moved {{name}} to the recycle bin. Permanent delete after {{days}} days.",
+      "restoreNameExists": "Cannot restore {{name}} — a live archive with that name already exists.",
+      "restoredFromTrash": "Restored {{name}} from the recycle bin.",
+      "trashEmptied": "Permanently deleted {{n}} archive(s) from the recycle bin."
     },
     "redis": {
-      "cliMissing": "未安装 redis-cli"
+      "cliMissing": "未安装 redis-cli",
+      "requirepassAlreadySet": "Redis already has requirepass — not overwritten.",
+      "requirepassApplied": "requirepass applied at runtime",
+      "requirepassApplyFailed": "Could not CONFIG SET requirepass (will rely on restart + conf)",
+      "generatedRequirepass": "Generated Redis password (shown once): {{password}}"
     },
     "nginx": {
       "reloaded": "nginx 已 reload",
@@ -5856,7 +5960,8 @@
       "vsftpdStarted": "vsftpd 已启动",
       "openPortsStep": "防火墙端口（需手动）",
       "openPortsReminder": "请在主机防火墙和云安全组放行 TCP：{{ports}}。套用 FTPS 不会代你开端口。",
-      "openPortsPasvHint": "若登录成功但列目录 LIST 超时，多半是 PASV 数据端口被挡——要开齐 PASV 范围，不是只开 21。"
+      "openPortsPasvHint": "若登录成功但列目录 LIST 超时，多半是 PASV 数据端口被挡——要开齐 PASV 范围，不是只开 21。",
+      "publicPlaintextBlocked": "Refusing to start public FTP without FTPS. Bind to this host only, enable FTPS with a certificate, or confirm PLAINTEXT to expose cleartext on the public address."
     },
     "deploy": {
       "nodeMissingIsolated": "隔离部署找不到 Node：{{path}} — 请先安装 Node {{version}} toolchain 再部署。拒绝写入会 203/EXEC 的 unit。",
@@ -5911,7 +6016,17 @@
       "applyDigOk": "PowerDNS BIND：list-zones + dig OK",
       "applyDigFail": "conf 已注册但 dig 仍空/REFUSED — 不标 applied",
       "applySyncIncomplete": "PowerDNS bind 同步未完 — 仅写盘。请检查 EXECUTE/root 或 pdns 日志",
-      "writeOnlyHint": "仅写了 zone 文件 — 需 load/apply 挂 named.conf 才会应答"
+      "writeOnlyHint": "仅写了 zone 文件 — 需 load/apply 挂 named.conf 才会应答",
+      "noActiveUnit": "No active named/bind9/pdns unit",
+      "pdnsUnitRestarts": "pdns unit state/restarts: {{detail}}",
+      "port53LoopbackOnly": "Port 53 is only on loopback (systemd-resolved 127.0.0.53) — not a product authoritative nameserver",
+      "port53Closed": "Port 53 is not listening (UDP/TCP)",
+      "udp53NotPublic": "UDP/53 is not listening on a public address",
+      "tcp53NotPublic": "TCP/53 is not listening on a public address",
+      "noManagedZones": "No managed zone files under dataDir/dns/zones",
+      "pdnsListZones": "PowerDNS list-zones: {{n}}",
+      "lookupIgnoredAt": "dig is unavailable — @{{server}} was ignored. Not using the system resolver as that server’s answer.",
+      "localAOk": "local A {{name}} → {{ip}}"
     },
     "db": {
       "needExecuteCreate": "服务器未开启系统变更权限，无法在管理面板创建数据库",
@@ -8773,7 +8888,16 @@
       "linuxUserRolledBack": "VNC 密码失败后已删除遗留 Linux 用户 {{user}}。",
       "linuxUserOrphan": "VNC 密码失败后无法删除遗留 Linux 用户 {{user}}。",
       "sessionStartHostname": "Failed to start display :{{display}}: this host cannot resolve its own hostname. Add the hostname to /etc/hosts (or fix DNS) then start the session again.",
-      "userdelLeftover": "Panel account removed, but Linux user {{user}} is still on the host. Remove it from Users or the host."
+      "userdelLeftover": "Panel account removed, but Linux user {{user}} is still on the host. Remove it from Users or the host.",
+      "hostnameResolves": "Hostname {{hostname}} resolves.",
+      "hostnameUnresolvable": "This host cannot resolve its own hostname ({{hostname}}). VNC session start will fail until /etc/hosts is fixed.",
+      "hostnameAlreadyResolves": "Hostname {{hostname}} already resolves — /etc/hosts unchanged.",
+      "hostnameWouldAppend": "Would append to /etc/hosts: {{line}}",
+      "hostnameAppended": "Appended to /etc/hosts: {{line}}",
+      "hostnameAppendFailed": "Could not write /etc/hosts: {{detail}}",
+      "skipStartHostname": "Did not start the display — fix hostname resolution first.",
+      "hostnameAliasPresent": "Hostname {{hostname}} is already an exact /etc/hosts alias — not appended again.",
+      "hostnameStillUnresolvable": "Wrote /etc/hosts but {{hostname}} still does not resolve. Confirm nsswitch hosts includes files."
     },
     "apache": {
       "needServerName": "需要域名",
@@ -8866,7 +8990,15 @@
       "staleCliRemoved": "已移除残留 CLI {{path}}。",
       "staleCliRemoveFailed": "无法移除残留 CLI {{path}}：{{detail}}",
       "vsftpdSslOff": "因 FTPS 证书文件不存在，已将 vsftpd 设为 ssl_enable=NO 并重新启动。",
-      "dovecotSslOff": "因 {{path}} 不存在，已将 Dovecot 设为 ssl=no 并重新启动。"
+      "dovecotSslOff": "因 {{path}} 不存在，已将 Dovecot 设为 ssl=no 并重新启动。",
+      "nginxRemoved": "Removed leftover nginx conf {{path}}.",
+      "nginxNotLeftover": "Not a leftover public-files conf — refuse delete.",
+      "nginxUnusedKeep": "000-default is unused, not leftover — not deleted.",
+      "nginxSystemCopy": "System copy still present: {{path}}. Needs YSK_EXECUTE + root to remove.",
+      "nginxReloadFailed": "nginx -t or reload failed after removing {{path}}.",
+      "executeStaleCli": "Pass --execute (root + YSK_EXECUTE=1) to remove stale CLI bins.",
+      "executeMissingTls": "Pass --execute (root + YSK_EXECUTE=1) to disable missing-cert TLS so vsftpd/Dovecot can start.",
+      "executeGeneric": "Pass --execute (root + YSK_EXECUTE=1) to apply leftover cleanup for the findings above."
     },
     "git": {
       "missingBin": "git 不在路径上",
@@ -9110,7 +9242,8 @@
       "deployTitle": "下一步：部署",
       "deployBody": "按上方「部署 PHP／部署」启动 runtime，或到「部署」分页用 Git。",
       "nginxTitle": "下一步：发布 Nginx",
-      "nginxBody": "到「网絡」分页或总览快捷操作发布 Nginx（可选 SSL）。"
+      "nginxBody": "到「网絡」分页或总览快捷操作发布 Nginx（可选 SSL）。",
+      "provisionOsAction": "Create system user"
     },
     "healthDetail": {
       "none": "尚未执行健康检查",
@@ -10135,7 +10268,9 @@
     "banSelectedConfirmDesc": "These addresses will be blocked on the host: {{ips}}",
     "freshnessMissing": "No database",
     "freshnessStale": "Stale",
-    "freshnessFresh": "Current"
+    "freshnessFresh": "Current",
+    "banConfirmMethod": "Method: {{method}}",
+    "banConfirmUntilUnban": "Stays banned until you unban it (or fail2ban expiry)."
   },
   "publicFiles": {
     "notSet": "未设置",
@@ -10180,7 +10315,11 @@
     "serverNameMismatch": "现行配置为 {{live}}；表单为 {{draft}}。套用后会覆盖。",
     "executeFlag": "Execute",
     "asRoot": "Root",
-    "statusDraft": "Draft / not applied"
+    "statusDraft": "Draft / not applied",
+    "liveName": "Live name",
+    "draftName": "Draft name",
+    "draftUnapplied": "This draft is not applied. Nginx still serves the live name.",
+    "discardDraft": "Discard draft"
   },
   "rbac": {
     "permissions": "权限",
@@ -10521,7 +10660,12 @@
     "scanCapped": "Showing the first {{n}} matches.",
     "dbOptionKeys": "DB {{i}} · {{n}} keys",
     "dbOptionEmpty": "DB {{i}} · empty",
-    "insecureShort": "No password"
+    "insecureShort": "No password",
+    "generateRequirepass": "Generate and apply password",
+    "generateRequirepassTitle": "Generate a Redis password?",
+    "generateRequirepassDesc": "Writes requirepass and restarts Redis. The password is shown once. Host change needs EXECUTE.",
+    "generateRequirepassDone": "Redis password applied",
+    "generatedOnce": "Generated password (shown once): {{password}}"
   },
   "resources": {
     "created": "已创建",
@@ -11571,7 +11715,9 @@
     "policyNeedSelf2fa": "首先在此帐户上启用 2FA，然后使用 TOTP 代码进行确认",
     "revokeAllDevicesTitle": "撤销每个记住的设备 - 您和其他管理员必须再次验证 2FA",
     "statSshValue": "{{keys}} keys · {{auth}} authorized",
-    "statSshHint": "Outbound identities / authorized login keys"
+    "statSshHint": "Outbound identities / authorized login keys",
+    "needCurrentPassword": "Enter the current password first",
+    "passwordMin8": "New password must be at least 8 characters"
   },
   "serviceExposure": {
     "title": "网络访问",
@@ -11712,7 +11858,15 @@
       "tool": "Tool",
       "activating": "Starting"
     },
-    "sshdBootOffWarn": "sshd is not enabled on boot. After reboot this host will have no SSH rescue path."
+    "sshdBootOffWarn": "sshd is not enabled on boot. After reboot this host will have no SSH rescue path.",
+    "restartConfirmTitle": "Restart {{label}}?",
+    "restartConfirmDesc": "Restart {{label}} now. Active connections may drop.",
+    "startVerifyFailed": "{{label}} start did not stay healthy.",
+    "stopNeedConfirmImpact": "Stop {{label}}? Active connections to this service will drop.",
+    "reloadTitle": "Reload {{label}} configuration without a full restart",
+    "stopConfirmPanelSshdOffDesc": "The panel and API will go offline. sshd is not enabled on boot, so SSH may not be a rescue path after reboot.",
+    "stopConfirmPanelSshdOffConsequence": "sshd is not enabled on boot. After reboot you may have no SSH rescue path.",
+    "ufwNoLifecycle": "UFW is not started or stopped from this matrix."
   },
   "software": {
     "title": "软件中心",
@@ -12308,7 +12462,8 @@
       "cliNoSocket": "CLI 没有实时 HTTP 套接字； servingHttps 是从配置和监听套接字 (ss) 推断出来的。",
       "listenHost": "收听地址",
       "currentHost": "本次会议",
-      "replaceCert": "替换为受信任的证书"
+      "replaceCert": "替换为受信任的证书",
+      "needFqdn": "Need a FQDN (example.com), not a bare hostname"
     },
     "timeNtp": "时间与 NTP",
     "clockStatus": "系统时钟状态",
@@ -12427,7 +12582,11 @@
     "noScheduledPower": "未安排重新启动或关机",
     "timezoneNow": "Host time now: {{time}} ({{tz}})",
     "timezoneBrowserDiff": "This host uses {{host}}; your browser uses {{browser}}. Changing timezone here changes the host clock, not the browser.",
-    "notExported": "Not exported yet"
+    "notExported": "Not exported yet",
+    "nginxRemoveLeftover": "Remove leftover",
+    "nginxRemoveLeftoverTitle": "Remove leftover nginx conf?",
+    "nginxRemoveLeftoverDesc": "Deletes {{name}} from the panel inventory. The live /etc/nginx copy is removed only with YSK_EXECUTE + root. 000-default is not leftover and cannot be deleted here.",
+    "needExecuteRoot": "Needs YSK_EXECUTE + root"
   },
   "systemd": {
     "enabled": "已启用",
@@ -13022,7 +13181,8 @@
     "panelRestartWait": "已套用更新。若本页未刷新，请数秒后重新加载。",
     "cveNotChecked": "Not checked",
     "cveLabel": "CVE",
-    "riskUnevaluated": "Not evaluated — run Scan + OSV"
+    "riskUnevaluated": "Not evaluated — run Scan + OSV",
+    "footerNewVersion": "New version {{version}}"
   },
   "users": {
     "userCount": "{{count}} 用户",
@@ -13171,7 +13331,8 @@
     "tab": {
       "nodes": "节点",
       "disk": "磁盘",
-      "about": "说明"
+      "about": "说明",
+      "stack": "Software"
     },
     "empty": {
       "title": "尚未建立验证者节点",
@@ -13189,7 +13350,18 @@
       "autoClear": "磁盘危急时自动清空最大的已停止实例（默认关闭）",
       "autoClearRisk": "Destructive: the largest stopped instance is deleted without a further prompt. Default is off. Check audit / logs after it fires.",
       "autoClearConfirmTitle": "Enable auto-clear?",
-      "autoClearC1": "When disk is critical, the largest stopped instance is deleted without asking again."
+      "autoClearC1": "When disk is critical, the largest stopped instance is deleted without asking again.",
+      "fsUsed": "Filesystem used",
+      "leftoverTitle": "Leftover data ({{count}})",
+      "leftoverDesc": "Directories under the validators root that are not a store instance. Remove only after you confirm they are unused.",
+      "leftoverRemove": "Remove",
+      "leftoverRemoveTitle": "Delete leftover validator data?",
+      "leftoverRemoveDesc": "Permanently delete {{path}} from disk. This is not a listed node.",
+      "autoClearThreshold": "Trigger: filesystem use at or above 85%.",
+      "autoClearCandidate": "Current candidate: {{id}}",
+      "autoClearNone": "No stopped instance is a candidate right now.",
+      "browseRoot": "Open in file browser",
+      "leftoverEmpty": "No leftover instance directories"
     },
     "chain": {
       "eth": "Ethereum",
@@ -13224,6 +13396,14 @@
       "validator-ready": "验证者就绪",
       "rpc": "RPC"
     },
+    "profileHelp": {
+      "title": "配置档说明",
+      "desc": "创建向导第三步的四个选项，主要差别是磁盘预算与用途。各链建议容量会在向导显示；面板不会保管质押私钥。",
+      "minimal": "占用磁盘最少。适合测试网或先试安装。不是完整历史，也不适合作为正式验证者。",
+      "pruned": "保留近期链状态，删除过旧区块数据（Pruned）。磁盘多于精简、少于完整节点。适合长期跟随链头。",
+      "validatorReady": "预留较大磁盘，供日后以验证者身份出块。密钥须自行离线生成；离线或设置错误可能损失质押金。",
+      "rpc": "供本机或其他服务查询链数据。RPC 默认只监听 127.0.0.1，不会公开到互联网。"
+    },
     "col": {
       "id": "标识",
       "chain": "链",
@@ -13299,7 +13479,8 @@
       "snapshotNear": "已清空 NEAR 数据；compose 会重新用官方 genesis 与 epoch sync 初始化",
       "nativePrune": "已执行客户端原生清理命令",
       "dryDelete": "删除属预演。真正套用须 --execute 与 YSK_EXECUTE=1。",
-      "deleted": "已删除节点"
+      "deleted": "已删除节点",
+      "leftoverRemoved": "Removed leftover {{path}}"
     },
     "create": "建立节点",
     "wizard": {
@@ -13308,7 +13489,8 @@
       "next": "下一步",
       "install": "安装",
       "mainnetWarn": "主网需要大量可用磁盘（ETH 常达 800 GiB 或以上）。建议先用测试网。",
-      "mainnetAck": "我明白磁盘与罚没风险，仍要建立主网节点。",
+      "mainnetAck": "确认建立主网节点。我已了解主网会占用大量磁盘；若以验证者身份出块，离线或设置错误可能损失质押金。",
+      "lowDiskAcked": "可用磁盘低于建议值。你已确认仍要建立；空间不足时同步可能中断。",
       "heavyWarn": "此链负载很重（大量磁盘与高 IOPS）。Solana 主网通常需要 2 TiB 或以上。",
       "memory": "内存上限（例如 4g）",
       "cpus": "CPU 上限（例如 2.0）",
@@ -13328,7 +13510,26 @@
       "installConfirmTitle": "Install this node?",
       "installConfirmDesc": "{{chain}} · {{network}} · {{profile}}. About {{disk}} of disk. The image pull can take a long time.",
       "installC1": "Several gigabytes of images may be downloaded.",
-      "installC2": "You can cancel the panel task; already-pulled images are not deleted automatically."
+      "installC2": "You can cancel the panel task; already-pulled images are not deleted automatically.",
+      "diskNeedNetwork": "Default (Minimal) for this network needs about {{need}} · free {{free}}",
+      "diskShortDetail": "Need {{need}} · free {{free}} · short {{short}}",
+      "needCustomPath": "Enter an absolute data path",
+      "previewId": "Node id",
+      "previewCompose": "Compose project",
+      "profileSeeAbout": "What each profile means is on the About tab.",
+      "dockerAbout": "Docker Engine is required to install and start nodes.",
+      "dockerAboutOk": "Docker Engine is installed.",
+      "dockerAboutMissing": "Docker Engine is not installed. Open Docker to install it.",
+      "rewriteCompose": "Rewrite compose",
+      "rewriteComposeTitle": "Rewrite compose.yml from the current adapter?",
+      "rewriteComposeDesc": "Overwrites the generated compose for {{id}} using the shipped flags for this chain.",
+      "chainMeta": "{{disk}} min · {{clients}} clients",
+      "profileHint": {
+        "minimal": "Smallest sync — light disk, not for staking.",
+        "pruned": "Keeps recent history only (Pruned). Smaller than archive, still usable for RPC.",
+        "validator-ready": "Sized for a staking validator. Needs more disk than Minimal.",
+        "rpc": "Public RPC node — not a staking validator."
+      }
     },
     "actions": {
       "detail": "详情",
@@ -13425,9 +13626,27 @@
     "state": {
       "unknown": "未知",
       "stopped": "已停止",
+      "starting": "启动中",
       "running": "运行中",
       "syncing": "同步中",
       "error": "错误"
+    },
+    "software": {
+      "engine": "Docker Engine",
+      "engineDesc": "Validator nodes run as Compose projects. Install Docker here if it is missing. Image prune stays on the Docker page.",
+      "client": "Client",
+      "image": "Image",
+      "present": "Local",
+      "local": "Pulled",
+      "missing": "Not pulled",
+      "size": "Size",
+      "usedBy": "Used by",
+      "unused": "No instance",
+      "pull": "Pull",
+      "pulling": "Pull {{ref}}",
+      "empty": "No pinned client images",
+      "emptyDesc": "The catalog is empty. This should not happen.",
+      "daemonDown": "Docker Engine is not running"
     }
   },
   "vnc": {
@@ -13683,7 +13902,14 @@
     "deleteKeepUserWarn": "The Linux user will stay on the host as an orphan. You must clean it up later.",
     "bindRfbLine": "RFB {{bind}} :{{port}}",
     "bindNovncLine": "noVNC 127.0.0.1:{{port}}",
-    "bindNovncHint": "noVNC listens on localhost. The desktop is reached through this panel, not the public internet, unless RFB bind is all interfaces."
+    "bindNovncHint": "noVNC listens on localhost. The desktop is reached through this panel, not the public internet, unless RFB bind is all interfaces.",
+    "hostnameBroken": "This host cannot resolve its own hostname ({{hostname}}). Session start will fail.",
+    "hostnameFix": "Write hostname to /etc/hosts",
+    "hostnameFixTitle": "Append this line to /etc/hosts?",
+    "hostnameFixDesc": "{{line}}",
+    "hostnameFixDone": "Hostname /etc/hosts updated",
+    "startAfterCreateBlocked": "Disabled until the hostname resolves",
+    "hostnameBrokenIdle": "Hostname {{hostname}} does not resolve on this host. Fix /etc/hosts before you create a session."
   },
   "vpn": {
     "pageDesc": "VPN 服务器／客户端",

package/locales/zh-CN/updates.json

@@ -235,5 +235,6 @@
   "panelRestartWait": "已套用更新。若本页未刷新，请数秒后重新加载。",
   "cveNotChecked": "Not checked",
   "cveLabel": "CVE",
-  "riskUnevaluated": "Not evaluated — run Scan + OSV"
+  "riskUnevaluated": "Not evaluated — run Scan + OSV",
+  "footerNewVersion": "New version {{version}}"
 }