ysk-server-shared 1.1.0 → 1.1.9

package/locales/en/updates.json

@@ -13,6 +13,7 @@
   "hourAgo": "{{n}}h ago",
   "highRiskN": "{{count}} high-risk",
   "panelUpdate": "Panel update available",
+  "footerNewVersion": "New version {{version}}",
   "riskOk": "Risk manageable",
   "riskUnevaluated": "Not evaluated — run Scan + OSV",
   "pendingScan": "Awaiting scan",

package/locales/en/validators.json

@@ -5,6 +5,7 @@
   "tab": {
     "nodes": "Nodes",
     "disk": "Disk",
+    "stack": "Software",
     "about": "About"
   },
   "empty": {
@@ -12,18 +13,46 @@
     "desc": "Create a testnet node in a few clicks."
   },
   "refresh": "Refresh",
+  "software": {
+    "engine": "Docker Engine",
+    "engineDesc": "Validator nodes run as Compose projects. Install Docker here if it is missing. Image prune stays on the Docker page.",
+    "client": "Client",
+    "image": "Image",
+    "present": "Local",
+    "local": "Pulled",
+    "missing": "Not pulled",
+    "size": "Size",
+    "usedBy": "Used by",
+    "unused": "No instance",
+    "pull": "Pull",
+    "pulling": "Pull {{ref}}",
+    "empty": "No pinned client images",
+    "emptyDesc": "The catalog is empty. This should not happen.",
+    "daemonDown": "Docker Engine is not running"
+  },
   "disk": {
     "title": "Validator disk",
     "root": "Data directory",
     "free": "Free",
-    "used": "Used",
+    "used": "Validator data",
+    "fsUsed": "Filesystem used",
+    "leftoverTitle": "Leftover data ({{count}})",
+    "leftoverEmpty": "No leftover instance directories",
+    "leftoverDesc": "Directories under the validators root that are not a store instance. Remove only after you confirm they are unused.",
+    "leftoverRemove": "Remove",
+    "leftoverRemoveTitle": "Delete leftover validator data?",
+    "leftoverRemoveDesc": "Permanently delete {{path}} from disk. This is not a listed node.",
+    "browseRoot": "Open in file browser",
     "none": "No instance data yet",
     "warn": "Disk usage is high (70%+)",
     "danger": "Disk usage is critical (85%+)",
     "autoClear": "Auto-clear the largest stopped instance when disk is critical (off by default)",
     "autoClearRisk": "Destructive: the largest stopped instance is deleted without a further prompt. Default is off. Check audit / logs after it fires.",
     "autoClearConfirmTitle": "Enable auto-clear?",
-    "autoClearC1": "When disk is critical, the largest stopped instance is deleted without asking again."
+    "autoClearC1": "When disk is critical, the largest stopped instance is deleted without asking again.",
+    "autoClearThreshold": "Trigger: filesystem use at or above 85%.",
+    "autoClearCandidate": "Current candidate: {{id}}",
+    "autoClearNone": "No stopped instance is a candidate right now."
   },
   "chain": {
     "eth": "Ethereum",
@@ -58,6 +87,14 @@
     "validator-ready": "Validator-ready",
     "rpc": "RPC"
   },
+  "profileHelp": {
+    "title": "Profiles",
+    "desc": "The four choices on wizard step 3 are mainly disk budget and role. Each chain shows its recommended size in the wizard. The panel never holds staking keys.",
+    "minimal": "Smallest disk. Use for testnets or a first install. Not a full history, and not for a live staking validator.",
+    "pruned": "Keeps recent chain state and drops older blocks (Pruned). More disk than Minimal, less than a full node. Use to follow the tip long-term.",
+    "validatorReady": "Reserves more disk so you can later attest or propose as a validator. Generate keys offline yourself. Being offline or misconfigured can lose stake.",
+    "rpc": "For this host or other services to query the chain. RPC listens on 127.0.0.1 by default and is not published to the internet."
+  },
   "col": {
     "id": "ID",
     "chain": "Chain",
@@ -67,7 +104,7 @@
     "disk": "Disk"
   },
   "cli": {
-    "usage": "Usage: ysk-server validators list|chains|disk|get|status|logs|create|start|stop|restart|clear|upgrade|policy|mithril|prune|switch-network|snapshot|compose|settings [--chain C] [--network N] [--profile P] [--el EL] [--cl CL] [--data-path P] [--rpc-port N] [--id ID] [--upgrade POLICY] [--confirm TOKEN] [--execute] [--json]"
+    "usage": "Usage: ysk-server validators list|chains|disk|get|status|logs|create|start|stop|restart|clear|upgrade|policy|mithril|prune|switch-network|snapshot|compose|settings [--chain C] [--network N] [--profile P] [--el EL] [--cl CL] [--data-path P] [--rpc-port N] [--id ID] [--upgrade POLICY] [--confirm TOKEN] [--accept-low-disk] [--execute] [--json]"
   },
   "clients": {
     "el": "Execution client",
@@ -133,7 +170,8 @@
     "snapshotNear": "Wiped NEAR data; compose will re-init official genesis and epoch sync",
     "nativePrune": "Ran the client-native prune command",
     "dryDelete": "Delete is dry-run. Pass --execute and YSK_EXECUTE=1.",
-    "deleted": "Node deleted"
+    "deleted": "Node deleted",
+    "leftoverRemoved": "Removed leftover {{path}}"
   },
   "create": "Create node",
   "wizard": {
@@ -145,12 +183,25 @@
     "stepSummary": "Summary",
     "needDocker": "Docker Engine is not installed. Install it first — this button stays disabled.",
     "diskNeed": "This profile needs about {{need}} · free {{free}}",
+    "diskNeedNetwork": "Default (Minimal) for this network needs about {{need}} · free {{free}}",
+    "profileHint": {
+      "minimal": "Smallest sync — light disk, not for staking.",
+      "pruned": "Keeps recent history only (Pruned). Smaller than archive, still usable for RPC.",
+      "validator-ready": "Sized for a staking validator. Needs more disk than Minimal.",
+      "rpc": "Public RPC node — not a staking validator."
+    },
     "diskShort": "Not enough free disk for this chain / network / profile",
+    "diskShortDetail": "Need {{need}} · free {{free}} · short {{short}}",
+    "needCustomPath": "Enter an absolute data path",
+    "previewId": "Node id",
+    "previewCompose": "Compose project",
+    "profileSeeAbout": "What each profile means is on the About tab.",
     "back": "Back",
     "next": "Next",
     "install": "Install",
     "mainnetWarn": "Mainnet needs a lot of free disk (ETH often 800 GiB+). Testnet is recommended.",
-    "mainnetAck": "I understand the disk and slashing risk. Continue with mainnet.",
+    "mainnetAck": "Create the mainnet node. I understand it needs a lot of disk, and a staking validator can lose stake if it is offline or misconfigured.",
+    "lowDiskAcked": "Free disk is below the recommended size. You confirmed create anyway; sync may stop if the disk fills.",
     "heavyWarn": "This chain is heavy (large disk and high IOPS). Mainnet Solana typically needs 2 TiB+.",
     "memory": "Memory limit",
     "cpus": "CPU limit",
@@ -162,7 +213,14 @@
     "installConfirmTitle": "Install this node?",
     "installConfirmDesc": "{{chain}} · {{network}} · {{profile}}. About {{disk}} of disk. The image pull can take a long time.",
     "installC1": "Several gigabytes of images may be downloaded.",
-    "installC2": "You can cancel the panel task; already-pulled images are not deleted automatically."
+    "installC2": "You can cancel the panel task; already-pulled images are not deleted automatically.",
+    "dockerAbout": "Docker Engine is required to install and start nodes.",
+    "dockerAboutOk": "Docker Engine is installed.",
+    "dockerAboutMissing": "Docker Engine is not installed. Open Docker to install it.",
+    "rewriteCompose": "Rewrite compose",
+    "rewriteComposeTitle": "Rewrite compose.yml from the current adapter?",
+    "rewriteComposeDesc": "Overwrites the generated compose for {{id}} using the shipped flags for this chain.",
+    "chainMeta": "{{disk}} min · {{clients}} clients"
   },
   "actions": {
     "detail": "Details",
@@ -259,6 +317,7 @@
   "state": {
     "unknown": "Unknown",
     "stopped": "Stopped",
+    "starting": "Starting",
     "running": "Running",
     "syncing": "Syncing",
     "error": "Error"

package/locales/en/vnc.json

@@ -173,6 +173,13 @@
   "start": "Start",
   "stop": "Stop",
   "startAfterCreate": "Start after create",
+  "hostnameBroken": "This host cannot resolve its own hostname ({{hostname}}). Session start will fail.",
+  "hostnameBrokenIdle": "No VNC sessions yet. Hostname {{hostname}} does not resolve — you can write /etc/hosts later if you create a session.",
+  "hostnameFix": "Write hostname to /etc/hosts",
+  "hostnameFixTitle": "Append this line to /etc/hosts?",
+  "hostnameFixDesc": "{{line}}",
+  "hostnameFixDone": "Hostname /etc/hosts updated",
+  "startAfterCreateBlocked": "Disabled until the hostname resolves",
   "colName": "Name",
   "colLinuxUser": "Linux user",
   "colDisplay": "Display / port",

package/locales/es/agents.json

@@ -11,7 +11,9 @@
     "failed": "Fallido",
     "error": "Error",
     "unknown": "No investigado",
-    "fallback": "Desconocido"
+    "fallback": "Desconocido",
+    "activating": "Starting",
+    "stuck": "Start stuck"
   },
   "liveN": "{{count}} en línea",
   "registeredOnly": "Sólo registrado",
@@ -136,5 +138,8 @@
   "historyTitleShort": "Abrir historial de comandos (solo lectura)",
   "expEdge": "En un borde:",
   "noteAllowlist": "Agent tool calls must pass the allowlist.",
-  "noteRbacCap": "Agent role is capped at write-low."
+  "noteRbacCap": "Agent role is capped at write-low.",
+  "journal": "journal",
+  "activatingStuckHint": "Activating longer than 5 minutes — treated as failed. Check journal.",
+  "noOnlineAgents": "No agents online"
 }

package/locales/es/apache.json

@@ -57,5 +57,7 @@
   "sslTerminatedUpstream": "TLS termina al frente de Nginx",
   "removeArtifactHint": "Borra solo este conf residual en disco. No elimina el proyecto.",
   "sourceOrphan": "Leftover",
-  "orphanSite": "Project gone"
+  "orphanSite": "Project gone",
+  "pillSitesSplit": "{{n}} sites · {{leftover}} leftover",
+  "stopSites": "{{n}} site(s) will stop answering HTTP."
 }

package/locales/es/backups.json

@@ -148,5 +148,21 @@
   "goLogs": "Open logs",
   "goAbout": "Backup notes",
   "skippedPendingOs": "Skipped — OS user / home not provisioned",
-  "latestFile": "Latest archive"
+  "latestFile": "Latest archive",
+  "tabTrash": "Recycle bin",
+  "trashTitle": "Recycle bin ({{count}})",
+  "trashSub": "Deleted archives stay here for 7 days, then they are removed permanently.",
+  "trashEmpty": "Recycle bin is empty",
+  "trashEmptyDesc": "Deleted backup files appear here for 7 days.",
+  "trashRestore": "Restore",
+  "trashPurge": "Delete forever",
+  "trashEmptyAll": "Empty recycle bin",
+  "trashExpires": "Expires {{at}}",
+  "trashPurgeTitle": "Permanently delete this backup?",
+  "trashPurgeDesc": "Permanently delete {{name}}. This cannot be undone.",
+  "trashEmptyTitle": "Empty recycle bin?",
+  "trashEmptyDescConfirm": "Permanently delete {{count}} archive(s). Type the count to confirm.",
+  "trashRestored": "Restored from recycle bin",
+  "trashPurged": "Permanently deleted",
+  "trashedOk": "Moved to recycle bin"
 }

package/locales/es/btTracker.json

@@ -194,5 +194,8 @@
   "statsLibraryHint": "Torrents in the panel library / file shares",
   "statsTrackerLeftover": "Tracker leftover",
   "statsTrackerLeftoverHint": "Tracker announce hashes that are not library rows",
-  "statsAnnouncesHint": "Announce requests seen by the tracker process"
+  "statsAnnouncesHint": "Announce requests seen by the tracker process",
+  "leftoverHashesTitle": "Tracker leftover hashes",
+  "leftoverHashesHint": "Read-only. These announces are not library or share rows.",
+  "publicHostMissingLive": "Tracker is listening but public announce host is not set. Off-host peers cannot find this seed."
 }

package/locales/es/cdn.json

@@ -201,5 +201,7 @@
   "hitMiss": "Hits {{hits}} / misses {{misses}}",
   "cacheBytes": "Cache ≈ {{n}} B",
   "hitRateUnknown": "No access log with cache status and no cache directory, so hit rate cannot be estimated.",
-  "offlineHint": "Offline — probe failed. Remove the node if it is leftover."
+  "offlineHint": "Offline — probe failed. Remove the node if it is leftover.",
+  "applyFailedNoNote": "No stored reason. Re-apply to capture the error.",
+  "statApplyFailed": "Apply failed"
 }

package/locales/es/common.json

@@ -128,5 +128,6 @@
   "hidePassword": "Esconder",
   "more": "Más",
   "redirectedTo": "Se abrió {{to}} (antes {{from}})",
-  "unavailable": "Not available right now"
+  "unavailable": "Not available right now",
+  "ok": "OK"
 }

package/locales/es/cron.json

@@ -164,5 +164,8 @@
   "writtenOnHostHint": "Lines already written to the host crontab",
   "registeredJobsHint": "Jobs registered in the panel (including pending install)",
   "pendingInstallCount": "{{n}} pending install",
-  "systemJobBadge": "No project · system user"
+  "systemJobBadge": "No project · system user",
+  "willNotRun": "Not written to system crontab — will not run.",
+  "pendingStale": "Not written to system crontab for {{days}} day(s) — it will not run.",
+  "jobsTabPending": "Jobs ({{count}}) · pending {{pending}}"
 }

package/locales/es/dashboard.json

@@ -42,7 +42,8 @@
   "mode": {
     "degraded": "degradado",
     "production_capable": "listo para la producción",
-    "normal": "normal"
+    "normal": "normal",
+    "blocked": "blocked"
   },
   "details": "Detalles",
   "certExpiryTitle": "Caducidad del certificado:",
@@ -126,5 +127,6 @@
     "warn": "Warning",
     "bad": "Problem"
   },
-  "publicNo2fa": "This panel listens on all interfaces and your admin account has no 2FA."
+  "publicNo2fa": "This panel listens on all interfaces and your admin account has no 2FA.",
+  "readinessBlocked": "{{n}} blocker(s)"
 }

package/locales/es/db.json

@@ -247,7 +247,24 @@
     "fleetApplyTitle": "¿Se aplica la cola a los miembros de la flota?",
     "redirectedFromCluster": "You were redirected here from /cluster. This is the database cluster tab.",
     "roleUnassigned": "No role assigned",
-    "standaloneOtherEngines": "This engine is standalone. Other engines have clusters: {{names}}."
+    "standaloneOtherEngines": "This engine is standalone. Other engines have clusters: {{names}}.",
+    "notApplied": "Not applied",
+    "plannedAt": "Created {{when}}",
+    "clearStalePlans": "Clear stale plans",
+    "clearStalePlansTitle": "Delete stale planned clusters?",
+    "clearStalePlansDesc": "Deletes {{n}} planned/draft registration(s) older than 7 days. Does not apply or push. System conf is not touched.",
+    "landingTitle": "Database cluster",
+    "landingDesc": "No database engine is installed on this host. Open an engine page to install, then return here.",
+    "landingNoneInstalled": "MySQL, MariaDB, PostgreSQL, and Redis are not installed. /cluster does not open a MySQL tab when MySQL is missing.",
+    "openEngine": "Open {{engine}}",
+    "overviewPill": "Clusters {{n}}",
+    "enginesInstalled": "Engines",
+    "plannedCount": "Planned",
+    "overviewList": "Clusters ({{count}})",
+    "overviewEmpty": "No cluster registrations yet.",
+    "engine": "Engine",
+    "kind": "Kind",
+    "members": "Members"
   },
   "console": {
     "dataBrowse": "Explorar datos",

package/locales/es/dns.json

@@ -230,5 +230,9 @@
   "installConfirmConsequence": "Tras instalar e iniciar, PowerDNS usará el puerto 53.",
   "installPort53Busy": "Algo ya escucha en el puerto 53. PowerDNS puede fallar al enlazar hasta detener o reparar ese proceso.",
   "installPort53BusyConsequence": "Repare el enlace o detenga el otro oyente antes de esperar respuestas en 53.",
-  "createZoneNeedValid": "Enter a valid zone name and IPv4 address"
+  "createZoneNeedValid": "Enter a valid zone name and IPv4 address",
+  "startProbeFailed": "Could not re-check DNS health after start",
+  "startNotListening": "PowerDNS start returned, but the unit is not answering on port 53",
+  "goStartService": "Start DNS service",
+  "startBindHint": "If start returns to stopped, port 53 is often held by systemd-resolved. Use Heal bind below, then start again."
 }

package/locales/es/docker.json

@@ -48,7 +48,8 @@
     "created": "Created",
     "dead": "Dead",
     "removing": "Removing",
-    "unknown": "Unknown"
+    "unknown": "Unknown",
+    "exitedCode": "Exited ({{n}})"
   },
   "actions": {
     "start": "Iniciar",

package/locales/es/email.json

@@ -509,5 +509,8 @@
   "opendkimNoReload": "OpenDKIM no admite recarga — use reinicio tras cambiar claves o tablas.",
   "opendkimNoReloadTitle": "systemctl reload opendkim no está soportado en este conjunto",
   "tlsRequestLeFor": "Request LE for {{host}}",
-  "deliverabilityChecks": "Checks"
+  "deliverabilityChecks": "Checks",
+  "healthPartialScore": "Partial {{n}}/100 (DNS only)",
+  "healthPartialHint": "DNS checklist only — live and blacklist not probed.",
+  "deleteImpact": "{{mailboxes}} mailboxes · {{records}} DNS records · {{aliases}} aliases"
 }

package/locales/es/files.json

@@ -358,5 +358,6 @@
   "unshareDesc": "Revoke the link for {{name}} ({{url}}). The link stops working immediately.",
   "pillTrash": "{{count}} in trash",
   "pillSpace": "{{used}} used",
-  "webdavTokenInactive": "Disabled — token #{{id}} is not active"
+  "webdavTokenInactive": "Disabled — token #{{id}} is not active",
+  "webdavOffNoToken": "Disabled (no active token)"
 }

package/locales/es/ftp.json

@@ -146,5 +146,21 @@
   "detectPublicIpTitle": "Complete el primer IPv4 sin bucle invertido de este host",
   "pasvIpRequired": "Defina una IP pública PASV antes de aplicar (NAT/nube). Detecte o escriba una dirección.",
   "vsftpdFailedGeneric": "vsftpd failed. Open the Service tab for live settings and journal.",
-  "stateFailed": "Failed to start"
+  "stateFailed": "Failed to start",
+  "plaintextInsecure": "Cleartext FTP (no TLS) — insecure. Enable FTPS before exposing port 21.",
+  "plaintextPublicLive": "vsftpd is listening on a public address without FTPS. Credentials travel in the clear. Enable FTPS, bind to this host only, or confirm PLAINTEXT to keep this posture.",
+  "bindAddress": "Listen scope",
+  "bindAddressHint": "New installs bind to this host only. Public listen without FTPS needs a typed confirmation.",
+  "bindLocal": "This host only",
+  "bindLocalHint": "127.0.0.1 — fine without TLS for local tests",
+  "bindPublic": "Public",
+  "bindPublicHint": "All interfaces — enable FTPS or confirm PLAINTEXT",
+  "enableFtpsAndStart": "Enable FTPS and start",
+  "publicPlainNeedConfirm": "Public cleartext FTP needs a PLAINTEXT confirmation",
+  "plainConfirmTitle": "Start public FTP without FTPS?",
+  "plainConfirmDesc": "Port 21 will accept logins and data in the clear on the public address.",
+  "plainConfirmC1": "Usernames and passwords are visible on the network.",
+  "plainConfirmC2": "PASV will advertise the configured public IP.",
+  "plainConfirmC3": "Host firewall and cloud security group are not opened for you.",
+  "plainConfirmAction": "Start cleartext FTP"
 }

package/locales/es/hostBrowse.json

@@ -144,5 +144,7 @@
   "engineBrowserNeedChrome": "Real browser (Chrome not installed)",
   "egressHint": "The target site sees this server’s outbound address ({{host}}), not your laptop. Cookies stay in the server session jar.",
   "closeNoSession": "No session yet",
-  "resumeHintDetail": "Resume previous session ({{count}} tabs) · {{url}} · {{when}}"
+  "resumeHintDetail": "Resume previous session ({{count}} tabs) · {{url}} · {{when}}",
+  "resumeHintOwned": "Resume last browse for {{user}} ({{count}} tabs) · {{url}} · {{when}}",
+  "clearSessionData": "Clear session data"
 }

package/locales/es/migrate.json

@@ -91,5 +91,18 @@
   "expandAllWarnings": "Show all {{n}} warnings",
   "collapseWarnings": "Show fewer",
   "inventoriedWarn": "Inventoried · {{n}} warnings",
-  "orphanMtime": "Last modified {{at}}"
+  "orphanMtime": "Last modified {{at}}",
+  "inventoriedOrphans": "Inventoried · {{n}} leftover homes",
+  "inventoriedWarnAndOrphans": "Inventoried · {{w}} warnings · {{n}} leftover",
+  "orphanHomesTitle": "Leftover project homes ({{count}})",
+  "orphanHomesSummary": "{{count}} path(s) on disk are not in the store. Back up first if unsure, then remove unused paths.",
+  "orphanColHome": "Home",
+  "orphanColModified": "Modified",
+  "orphanKpi": "Leftover",
+  "sourceOs": "OS",
+  "sourceDataDir": "dataDir",
+  "sourceDbRedis": "Databases / Redis",
+  "sourceDbRedisValue": "{{db}} databases · {{redis}} Redis",
+  "orphanColEntries": "Entries",
+  "orphanEntries": "{{n}} top-level entries in the directory"
 }

package/locales/es/network.json

@@ -160,6 +160,8 @@
     "up": "Up",
     "down": "Down",
     "unknown": "Unknown",
-    "other": "Other"
+    "other": "Other",
+    "loopback": "Always on",
+    "loopbackHint": "Loopback is always available and cannot be changed."
   }
 }

package/locales/es/nginx.json

@@ -80,5 +80,8 @@
   "setHsts": "HSTS",
   "setCfRealIp": "IP real de Cloudflare",
   "setIndexes": "listado de directorio",
-  "bodyInherit": "Global"
+  "bodyInherit": "Global",
+  "stopSites": "{{n}} site(s) will stop answering HTTP.",
+  "purgeCacheTitle": "Purge Nginx cache and reload?",
+  "purgeCacheDesc": "Clears the on-disk cache and reloads Nginx. Live sites stay up."
 }

package/locales/es/notes.json

@@ -65,10 +65,18 @@
     "sidecarPushed": "También se impulsó el sidecar SQL {{name}}",
     "controlPlaneDryRun": "Solo vista previa, nada escrito. En el panel, use Restaurar y confirme la frase a escribir.",
     "controlPlaneNeedConfirm": "La restauración total del plano de control necesita la frase de confirmación RESTAURAR-PLANO-CONTROL.",
-    "controlPlaneRestartAfter": "Reinicie la API después de una restauración exitosa."
+    "controlPlaneRestartAfter": "Reinicie la API después de una restauración exitosa.",
+    "movedToTrash": "Moved {{name}} to the recycle bin. Permanent delete after {{days}} days.",
+    "restoreNameExists": "Cannot restore {{name}} — a live archive with that name already exists.",
+    "restoredFromTrash": "Restored {{name}} from the recycle bin.",
+    "trashEmptied": "Permanently deleted {{n}} archive(s) from the recycle bin."
   },
   "redis": {
-    "cliMissing": "redis-cli no está instalado"
+    "cliMissing": "redis-cli no está instalado",
+    "requirepassAlreadySet": "Redis already has requirepass — not overwritten.",
+    "requirepassApplied": "requirepass applied at runtime",
+    "requirepassApplyFailed": "Could not CONFIG SET requirepass (will rely on restart + conf)",
+    "generatedRequirepass": "Generated Redis password (shown once): {{password}}"
   },
   "nginx": {
     "reloaded": "nginx recargado",
@@ -91,7 +99,8 @@
     "vsftpdStarted": "vsftpd iniciado",
     "openPortsStep": "Puertos de firewall (manual)",
     "openPortsReminder": "Abra los puertos TCP en el firewall del host y el grupo de seguridad de la nube: {{ports}}. La aplicación FTPS no abre puertos para usted.",
-    "openPortsPasvHint": "Si el inicio de sesión funciona pero el directorio LIST se agota, el rango de datos PASV está bloqueado: abra la página completa"
+    "openPortsPasvHint": "Si el inicio de sesión funciona pero el directorio LIST se agota, el rango de datos PASV está bloqueado: abra la página completa",
+    "publicPlaintextBlocked": "Refusing to start public FTP without FTPS. Bind to this host only, enable FTPS with a certificate, or confirm PLAINTEXT to expose cleartext on the public address."
   },
   "deploy": {
     "nodeMissingIsolated": "Falta el binario del nodo para la implementación aislada: {{path}}: instale la cadena de herramientas del Nodo {{version}} y luego vuelva a implementarlo. Negarse a escribir una unidad que sería 203/EXEC.",
@@ -146,7 +155,17 @@
     "applyDigOk": "PowerDNS BIND: listar zonas + excavar OK",
     "applyDigFail": "Zona registrada en conf pero la excavación aún está vacía/RECHAZADA: no se aplicó la marca",
     "applySyncIncomplete": "Sincronización de enlace de PowerDNS incompleta: archivo de zona solo en el disco (no aplicado). Repare los registros EXECUTE/root o pdns.",
-    "writeOnlyHint": "Archivo de zona escrito únicamente: PowerDNS no responderá hasta que cargue/aplique los registros nombrados"
+    "writeOnlyHint": "Archivo de zona escrito únicamente: PowerDNS no responderá hasta que cargue/aplique los registros nombrados",
+    "noActiveUnit": "No active named/bind9/pdns unit",
+    "pdnsUnitRestarts": "pdns unit state/restarts: {{detail}}",
+    "port53LoopbackOnly": "Port 53 is only on loopback (systemd-resolved 127.0.0.53) — not a product authoritative nameserver",
+    "port53Closed": "Port 53 is not listening (UDP/TCP)",
+    "udp53NotPublic": "UDP/53 is not listening on a public address",
+    "tcp53NotPublic": "TCP/53 is not listening on a public address",
+    "noManagedZones": "No managed zone files under dataDir/dns/zones",
+    "pdnsListZones": "PowerDNS list-zones: {{n}}",
+    "lookupIgnoredAt": "dig is unavailable — @{{server}} was ignored. Not using the system resolver as that server’s answer.",
+    "localAOk": "local A {{name}} → {{ip}}"
   },
   "db": {
     "needExecuteCreate": "La ejecución del host está desactivada; No se puede crear una base de datos desde el panel.",
@@ -3008,7 +3027,16 @@
     "linuxUserRolledBack": "Se eliminó el usuario restante de Linux {{user}} después de que falló la contraseña de VNC.",
     "linuxUserOrphan": "No se pudo eliminar el usuario de Linux restante {{user}} después de que falló la contraseña de VNC.",
     "sessionStartHostname": "Failed to start display :{{display}}: this host cannot resolve its own hostname. Add the hostname to /etc/hosts (or fix DNS) then start the session again.",
-    "userdelLeftover": "Panel account removed, but Linux user {{user}} is still on the host. Remove it from Users or the host."
+    "userdelLeftover": "Panel account removed, but Linux user {{user}} is still on the host. Remove it from Users or the host.",
+    "hostnameResolves": "Hostname {{hostname}} resolves.",
+    "hostnameUnresolvable": "This host cannot resolve its own hostname ({{hostname}}). VNC session start will fail until /etc/hosts is fixed.",
+    "hostnameAlreadyResolves": "Hostname {{hostname}} already resolves — /etc/hosts unchanged.",
+    "hostnameWouldAppend": "Would append to /etc/hosts: {{line}}",
+    "hostnameAppended": "Appended to /etc/hosts: {{line}}",
+    "hostnameAppendFailed": "Could not write /etc/hosts: {{detail}}",
+    "skipStartHostname": "Did not start the display — fix hostname resolution first.",
+    "hostnameAliasPresent": "Hostname {{hostname}} is already an exact /etc/hosts alias — not appended again.",
+    "hostnameStillUnresolvable": "Wrote /etc/hosts but {{hostname}} still does not resolve. Confirm nsswitch hosts includes files."
   },
   "apache": {
     "needServerName": "Nombre del servidor requerido",
@@ -3093,7 +3121,15 @@
     "staleCliRemoved": "Se eliminó el CLI residual {{path}}.",
     "staleCliRemoveFailed": "No se pudo eliminar el CLI residual {{path}}: {{detail}}",
     "vsftpdSslOff": "Sin certificado FTPS: se puso ssl_enable=NO en vsftpd y se reinició.",
-    "dovecotSslOff": "Falta {{path}}: Dovecot con ssl=no y reinicio."
+    "dovecotSslOff": "Falta {{path}}: Dovecot con ssl=no y reinicio.",
+    "nginxRemoved": "Removed leftover nginx conf {{path}}.",
+    "nginxNotLeftover": "Not a leftover public-files conf — refuse delete.",
+    "nginxUnusedKeep": "000-default is unused, not leftover — not deleted.",
+    "nginxSystemCopy": "System copy still present: {{path}}. Needs YSK_EXECUTE + root to remove.",
+    "nginxReloadFailed": "nginx -t or reload failed after removing {{path}}.",
+    "executeStaleCli": "Pass --execute (root + YSK_EXECUTE=1) to remove stale CLI bins.",
+    "executeMissingTls": "Pass --execute (root + YSK_EXECUTE=1) to disable missing-cert TLS so vsftpd/Dovecot can start.",
+    "executeGeneric": "Pass --execute (root + YSK_EXECUTE=1) to apply leftover cleanup for the findings above."
   },
   "git": {
     "missingBin": "git no está en la RUTA",

package/locales/es/projects.json

@@ -62,7 +62,8 @@
     "deployTitle": "Siguiente: Implementar",
     "deployBody": "Utilice Implementar en el encabezado o la pestaña Implementar para Git.",
     "nginxTitle": "Siguiente: Publicar Nginx",
-    "nginxBody": "Abra la pestaña Red para publicar Nginx (SSL opcional)."
+    "nginxBody": "Abra la pestaña Red para publicar Nginx (SSL opcional).",
+    "provisionOsAction": "Create system user"
   },
   "healthDetail": {
     "none": "Aún no hay control de salud",

package/locales/es/protection.json

@@ -406,5 +406,7 @@
   "banSelectedConfirmDesc": "These addresses will be blocked on the host: {{ips}}",
   "freshnessMissing": "No database",
   "freshnessStale": "Stale",
-  "freshnessFresh": "Current"
+  "freshnessFresh": "Current",
+  "banConfirmMethod": "Method: {{method}}",
+  "banConfirmUntilUnban": "Stays banned until you unban it (or fail2ban expiry)."
 }

package/locales/es/publicFiles.json

@@ -41,5 +41,9 @@
   "serverNameMismatch": "La conf. en vivo usa {{live}}; el formulario tiene {{draft}}. Aplique para reemplazar.",
   "executeFlag": "Execute",
   "asRoot": "Root",
-  "statusDraft": "Draft / not applied"
+  "statusDraft": "Draft / not applied",
+  "liveName": "Live name",
+  "draftName": "Draft name",
+  "draftUnapplied": "This draft is not applied. Nginx still serves the live name.",
+  "discardDraft": "Discard draft"
 }

package/locales/es/redis.json

@@ -82,5 +82,10 @@
   "scanCapped": "Showing the first {{n}} matches.",
   "dbOptionKeys": "DB {{i}} · {{n}} keys",
   "dbOptionEmpty": "DB {{i}} · empty",
-  "insecureShort": "No password"
+  "insecureShort": "No password",
+  "generateRequirepass": "Generate and apply password",
+  "generateRequirepassTitle": "Generate a Redis password?",
+  "generateRequirepassDesc": "Writes requirepass and restarts Redis. The password is shown once. Host change needs EXECUTE.",
+  "generateRequirepassDone": "Redis password applied",
+  "generatedOnce": "Generated password (shown once): {{password}}"
 }

package/locales/es/security.json

@@ -449,5 +449,7 @@
   "policyNeedSelf2fa": "Primero habilite 2FA en esta cuenta, luego confirme con un código TOTP",
   "revokeAllDevicesTitle": "Revocar todos los dispositivos recordados: usted y otros administradores deben verificar 2FA nuevamente",
   "statSshValue": "{{keys}} keys · {{auth}} authorized",
-  "statSshHint": "Outbound identities / authorized login keys"
+  "statSshHint": "Outbound identities / authorized login keys",
+  "needCurrentPassword": "Enter the current password first",
+  "passwordMin8": "New password must be at least 8 characters"
 }

package/locales/es/services.json

@@ -94,5 +94,13 @@
     "tool": "Tool",
     "activating": "Starting"
   },
-  "sshdBootOffWarn": "sshd is not enabled on boot. After reboot this host will have no SSH rescue path."
+  "sshdBootOffWarn": "sshd is not enabled on boot. After reboot this host will have no SSH rescue path.",
+  "restartConfirmTitle": "Restart {{label}}?",
+  "restartConfirmDesc": "Restart {{label}} now. Active connections may drop.",
+  "startVerifyFailed": "{{label}} start did not stay healthy.",
+  "stopNeedConfirmImpact": "Stop {{label}}? Active connections to this service will drop.",
+  "reloadTitle": "Reload {{label}} configuration without a full restart",
+  "stopConfirmPanelSshdOffDesc": "The panel and API will go offline. sshd is not enabled on boot, so SSH may not be a rescue path after reboot.",
+  "stopConfirmPanelSshdOffConsequence": "sshd is not enabled on boot. After reboot you may have no SSH rescue path.",
+  "ufwNoLifecycle": "UFW is not started or stopped from this matrix."
 }

package/locales/es/system.json

@@ -87,7 +87,8 @@
     "cliNoSocket": "CLI no tiene un socket HTTP activo; serverHttps se infiere de los sockets de configuración y escucha (ss).",
     "listenHost": "Escuchar dirección",
     "currentHost": "Esta sesión",
-    "replaceCert": "Reemplazar con un certificado confiable"
+    "replaceCert": "Reemplazar con un certificado confiable",
+    "needFqdn": "Need a FQDN (example.com), not a bare hostname"
   },
   "timeNtp": "Tiempo y NTP",
   "clockStatus": "Estado del reloj del sistema",
@@ -206,5 +207,9 @@
   "noScheduledPower": "No está programado ningún reinicio o apagado",
   "timezoneNow": "Host time now: {{time}} ({{tz}})",
   "timezoneBrowserDiff": "This host uses {{host}}; your browser uses {{browser}}. Changing timezone here changes the host clock, not the browser.",
-  "notExported": "Not exported yet"
+  "notExported": "Not exported yet",
+  "nginxRemoveLeftover": "Remove leftover",
+  "nginxRemoveLeftoverTitle": "Remove leftover nginx conf?",
+  "nginxRemoveLeftoverDesc": "Deletes {{name}} from the panel inventory. The live /etc/nginx copy is removed only with YSK_EXECUTE + root. 000-default is not leftover and cannot be deleted here.",
+  "needExecuteRoot": "Needs YSK_EXECUTE + root"
 }