ysk-server-shared 1.1.12 → 1.1.13

package/locales/bn/vpn.json

@@ -126,7 +126,9 @@
     "customHint": "শুধুমাত্র আপনার তালিকাভুক্ত CIDRs টানেলে প্রবেশ করুন৷ আবেদন করার পরে পুনরায় সংযোগ করুন।",
     "lanCidrs": "ল্যান নেটওয়ার্ক",
     "customCidr": "CIDR",
-    "addCidr": "যোগ করুন"
+    "addCidr": "যোগ করুন",
+    "cidrRequired": "Enter a CIDR (for example 192.168.1.0/24).",
+    "cidrInvalid": "Enter a valid CIDR, for example 192.168.1.0/24."
   },
   "engineNotInstalled": "এই VPN ইঞ্জিন হোস্টে ইনস্টল নেই।",
   "serverNotListening": "সার্ভার ইউনিট সক্রিয় নয়। UDP/TCP {{port}} বন্ধ থাকতে পারে।",
@@ -142,5 +144,17 @@
   "showPrivateKey": "Show private key",
   "hidePrivateKey": "Hide private key",
   "deletePeerTitle": "Delete peer {{name}}?",
-  "deletePeerDesc": "Remove {{name}} ({{address}}). The client disconnects immediately and the config cannot be restored."
+  "deletePeerDesc": "Remove {{name}} ({{address}}). The client disconnects immediately and the config cannot be restored.",
+  "peerNameHint": "Letters, digits, . _ - — no spaces, / or !",
+  "peerNameInvalid": "Spaces, / and ! are not allowed. Use {{preview}} or change the name.",
+  "deleteClientTitle": "Delete OpenVPN client {{name}}?",
+  "deleteClientDesc": "Remove {{name}} ({{address}}). The client disconnects immediately and the profile cannot be restored. The OpenVPN server stays up.",
+  "deleteKeyTitle": "Delete Shadowsocks key {{name}}?",
+  "deleteKeyDesc": "Remove access key {{name}} ({{address}}). Clients using this key disconnect. The Shadowsocks server stays up.",
+  "deleteResult": "Removed {{name}}.",
+  "portInvalid": "Listen port must be an integer from 1 to 65535.",
+  "portRequired": "Listen port is required.",
+  "importInvalid": "Could not detect a WireGuard or OpenVPN client conf.",
+  "qrFailed": "Could not generate a QR code for this config. Download or copy the text instead.",
+  "cfgTitle": "Config — {{name}}"
 }

package/locales/en/agents.json

@@ -15,9 +15,17 @@
     "unknown": "Not probed",
     "fallback": "Unknown"
   },
+  "cmdStatus": {
+    "queued": "Queued",
+    "acked": "Acked",
+    "done": "Done",
+    "error": "Error"
+  },
   "activatingStuckHint": "Activating longer than 5 minutes — treated as failed. Check journal.",
   "noOnlineAgents": "No agents online",
   "journal": "journal",
+  "writeUnit": "Write unit",
+  "writeUnitConfirm": "Write the systemd unit for {{kind}} under /etc/systemd. The service is not started or enabled.",
   "liveN": "{{count}} online",
   "registeredOnly": "Registered only",
   "awaitProbe": "Awaiting probe",
@@ -44,10 +52,10 @@
   "capStatus": "Status",
   "capStatusD": "Registered only → online (heartbeat) → stale (>60s without heartbeat) → offline (disconnected / no further heartbeat)",
   "statusFlowTitle": "Status flow",
-  "statusFlow": "Registered only → online → stale (>60s) → offline (disconnected). Filter “Offline” is disconnected.",
+  "statusFlow": "Registered only → online → stale (>60s) → offline. Filter “Offline” means disconnected.",
   "colSession": "Session UUID",
   "copySession": "Copy session UUID for cluster / CLI --session",
-  "staleFor": "Unseen {{age}}",
+  "staleFor": "Stale {{age}}",
   "commandTitle": "Queue a command for this session",
   "historyTitleShort": "Open command history (read-only)",
   "fleetTitle": "Fleet ({{count}})",
@@ -68,6 +76,7 @@
   "finishedAt": "Finished {{at}}",
   "colCommand": "Command",
   "colResult": "Result summary",
+  "colExit": "Exit",
   "hasResult": "Has result",
   "emptyCmds": "No commands yet",
   "emptyCmdsDesc": "Queue with “Command”; stays queued until the edge agent is online",
@@ -83,6 +92,7 @@
   "pathExists": "Exists",
   "pathMissing": "Not installed",
   "unitUnknown": "{{unit}} · unknown",
+  "unitFallback": "unit",
   "path": "Path",
   "probe": "Probe",
   "install": "Install",

package/locales/en/backups.json

@@ -164,5 +164,9 @@
   "skippedListHint": "These projects were skipped:",
   "skippedPendingOs": "Skipped — OS user / home not provisioned",
   "goLogs": "Open logs",
-  "goAbout": "Backup notes"
+  "goAbout": "Backup notes",
+  "previewListingTitle": "Archive contents",
+  "restoreNamedDesc": "Restore {{name}} into project {{project}}.",
+  "overwriteNamedDesc": "Overwrite files of project {{project}} from snapshot {{snapshot}}.",
+  "resticSafeNamed": "Restore snapshot {{snapshot}} of project {{project}} into a safe directory."
 }

package/locales/en/btTracker.json

@@ -127,6 +127,12 @@
   "startedOk": "Started",
   "stoppedOk": "Stopped",
   "restoredOk": "Re-seed done",
+  "restoredCount": "Re-seeded {{seeded}} of {{attempted}} torrents",
+  "portInvalid": "Enter a port from 1 to 65535.",
+  "extraTrackerRequired": "Enter an announce URL.",
+  "stopPort": "Tracker port {{port}} will stop listening.",
+  "stopPid": "Process PID {{pid}} will exit.",
+  "swarmLeftoverUnlisted": "{{count}} extra leftover announce(s) have no hash in this list.",
   "httpPortHint": "",
   "udpPortHint": "",
   "udpPortOff": "Off",
@@ -137,7 +143,7 @@
   "tabTrackers": "Trackers",
   "addTorrent": "Add torrent",
   "addTorrentTitle": "Add torrent",
-  "addTorrentHint": "Upload a .torrent or paste a magnet. Choose a Files folder. WebTorrent downloads missing files and seeds when complete.",
+  "addTorrentHint": "Upload a .torrent or paste a magnet. After the file is read, pick where to save. WebTorrent downloads missing files and seeds when complete.",
   "dropTorrent": "Drop a .torrent here",
   "chooseFile": "or choose a file",
   "magnetLabel": "Magnet",
@@ -153,7 +159,7 @@
   "filterPaused": "Paused",
   "filterError": "Error",
   "emptyDrop": "Drop a .torrent here, or choose a file",
-  "emptyHint": "Files go in the folder you pick. If they are already complete, this host seeds. Engine: WebTorrent — no extra download software.",
+  "emptyHint": "Drop a .torrent or paste a magnet. After it is read, the dialog asks where to save. Complete files seed on this host. Engine: WebTorrent.",
   "pause": "Pause",
   "resume": "Resume",
   "openFolder": "Open folder",

package/locales/en/cdn.json

@@ -43,6 +43,14 @@
     "partial": "Partial"
   },
   "statSites": "Sites",
+  "statSitesCount": "{{n}} sites",
+  "cacheMethod": {
+    "none": "No estimate",
+    "access_log": "Access log",
+    "cache_dir": "Cache directory",
+    "log_format": "Need log format"
+  },
+  "geoMapLabel": "Geo map (JSON)",
   "statApplyFailed": "Apply failed",
   "pillNodesSites": "{{n}} nodes · {{s}} sites",
   "statOnline": "Online",

package/locales/en/common.json

@@ -40,6 +40,7 @@
   "noData": "No data",
   "input": "Input",
   "pleaseEnter": "Enter {{value}}",
+  "pleaseFill": "Please fill in this field",
   "required": "Required",
   "about": "About",
   "more": "More",

package/locales/en/dashboard.json

@@ -89,6 +89,7 @@
   "wizardDesc": "Create a project and optionally draft DNS / mail / database (apply on each feature page)",
   "projectName": "Project name",
   "projectNameHint": "Display name; creates a matching directory",
+  "nameRequired": "Enter a project name",
   "domainOptional": "Domain (optional)",
   "domainHint": "Required to enable DNS and mail options",
   "runtime": "Runtime",

package/locales/en/db.json

@@ -255,12 +255,12 @@
     "applyBootstrapDesc": "Installs Galera drop-in and bootstrap (galera_new_cluster)",
     "applyJoinDesc": "Installs Galera drop-in and systemctl restart mariadb",
     "confirmApply": "Confirm apply",
-    "deleteClusterTitle": "Delete cluster registration?",
+    "deleteClusterTitle": "Delete cluster registration {{name}} ({{engine}})?",
     "remoteInstallTitle": "Remote-install peer?",
     "pushTitle": "Push to peer?",
     "fleetSyncTitle": "Fleet sync?",
     "confirmOp": "Confirm",
-    "deleteClusterDesc": "System conf is not auto-cleared (v1).",
+    "deleteClusterDesc": "Delete the {{engine}} cluster registration “{{name}}”. System conf is not auto-cleared (v1).",
     "remoteInstallDesc": "Install conf + restart on peer. Needs YSK_EXECUTE + SSH.",
     "pushDesc": "scp files to peer /tmp?",
     "fleetSyncDesc": "Sync cluster snapshot to fleet edge, then apply.",
@@ -356,5 +356,12 @@
   "serviceDownBody": "Service is unhealthy",
   "adoptHostDb": "Register in panel (no create): {{name}}",
   "adoptHostDbTitle": "Registers the name in the control plane only — does not change host data",
-  "cleanupExpiredTempUsersTitle": "Drops panel-issued temporary users that have expired"
+  "cleanupExpiredTempUsersTitle": "Drops panel-issued temporary users that have expired",
+  "invalidSqlIdent": "Use a lowercase identifier: start with a letter, then letters, digits, or underscore.",
+  "remoteHostRequired": "Enter a remote host.",
+  "remoteTestUnsaved": "Save this host first, then Test connection. Or fill host and save.",
+  "serverNotInstalled": "This engine is not installed on the server.",
+  "dumpNeedEngine": "Install the engine before exporting a database.",
+  "unboundDatabase": "Database registration removed",
+  "userGoneRefresh": "That user is gone. The list was refreshed."
 }

package/locales/en/dns.json

@@ -101,6 +101,8 @@
   "lookupType": "Query type",
   "lookupResults": "Results ({{count}})",
   "lookupNoAnswerFail": "No answers / failed",
+  "digNotInstalled": "dig is not installed",
+  "digNotInstalledHint": "This tab needs the dig binary (bind9-dnsutils). That is not NXDOMAIN. Install bind9-dnsutils from the host package manager; this page does not auto-install it.",
   "method": "Method: {{method}}",
   "noAnswers": "No answers",
   "noAnswersDesc": "NXDOMAIN, empty RRset, or resolve failure",

package/locales/en/docker.json

@@ -147,7 +147,11 @@
     "mutateFailed": "Docker command failed",
     "engineFailed": "Could not control docker.service",
     "badExec": "Exec is limited to allowlisted binaries and presets (no shell, no TTY)",
-    "uninstallBusy": "Stop YSK-managed containers (including validator stacks) before uninstalling Docker"
+    "uninstallBusy": "Stop YSK-managed containers (including validator stacks) before uninstalling Docker",
+    "badCommand": "Invalid command or entrypoint",
+    "portBusy": "Host port {{bind}}:{{port}} is already in use",
+    "nameInUse": "A container named {{name}} already exists. Remove it or pick another name.",
+    "unpublished": "Container did not attach to a network or publish ports. Not treating this as started."
   },
   "notes": {
     "dryMutate": "Dry-run only. Pass --execute and YSK_EXECUTE=1 to change the host.",
@@ -160,6 +164,7 @@
     "restart": "Container restarted",
     "remove": "Container removed",
     "ran": "Container started from image",
+    "leftoverRemoved": "Removed leftover container {{name}} after bind failure",
     "pulled": "Image pulled",
     "exec": "Ran allowlisted exec",
     "imageRemoved": "Image removed",
@@ -229,6 +234,17 @@
     "scopeBuilder": "Build cache",
     "scopeSystem": "Everything unused",
     "noVolumesYet": "No volumes yet — create one on the Volumes tab first.",
+    "command": "Command",
+    "commandHint": "Optional. Tokens after the image. Leave blank to use the image CMD.",
+    "entrypoint": "Entrypoint",
+    "entrypointHint": "Optional single binary. Leave blank to use the image ENTRYPOINT.",
+    "portMap": "host:container",
+    "portOccupied": "This host port is already in use",
+    "validatorImage": "Managed by validator nodes",
+    "newVolume": "New named volume",
+    "loopbackUrl": "Local test URL",
+    "nginxProxy": "Create Nginx reverse proxy",
+    "intentPorts": "Requested (not published)",
     "customPort": "Another host port",
     "customPortHost": "Host port",
     "customPortContainer": "Container port",

package/locales/en/email.json

@@ -160,7 +160,7 @@
   "subject": "Subject",
   "body": "Body",
   "saveApplyAutoreply": "Save and apply autoreply",
-  "saveAutoreplyWritten": "Save autoreply (written)",
+  "saveAutoreplyWritten": "Save autoreply",
   "suspendApply": "Suspend and apply REJECT",
   "suspendWritten": "Suspend domain (written)",
   "resumeApply": "Resume and update map",
@@ -256,7 +256,7 @@
   "createMailboxBtn": "Create mailbox",
   "localPartLabel": "Local part",
   "localPartFullHint": "Full address will be {{local}}@{{domain}}",
-  "passwordOptionalHint8": "Optional; hash written only if at least 8 chars",
+  "passwordOptionalHint8": "Optional; if set, must be at least 8 characters",
   "live": {
     "noMx": "no MX",
     "mxLookupFailed": "MX lookup failed",
@@ -512,5 +512,26 @@
   "dovecotFailedStatus": "Dovecot is {{status}}. Open the Software tab for the unit summary.",
   "mailCertMissing": "No certificate for {{hosts}}. Issue it on the SSL page.",
   "mailCertPresent": "A mail certificate is already issued — this is not a missing-cert problem.",
-  "webmailNeedCert": "No certificate for {{host}} — issue it on SSL before forcing HTTPS."
+  "webmailNeedCert": "No certificate for {{host}} — issue it on SSL before forcing HTTPS.",
+  "domainRequired": "Enter a domain",
+  "domainInvalid": "Enter a valid domain",
+  "serverIpRequired": "Enter a server IP",
+  "serverIpInvalid": "Enter a valid IP address",
+  "serverIpv6Invalid": "Enter a valid IPv6 address",
+  "localPartRequired": "Enter a local part",
+  "localPartInvalid": "Local part may only use letters, digits, . _ + -",
+  "aliasDestRequired": "Enter at least one destination address",
+  "mailboxStatusManaged": "Managed",
+  "mailboxStatusActiveShort": "Active",
+  "mailboxStatusDisabledShort": "Disabled",
+  "mailboxStatusSystem": "System provisioned",
+  "mailboxStatusPending": "Pending system",
+  "mailboxStatusFailed": "System failed",
+  "dnsblCleanStatus": "Not listed",
+  "dnsblListedStatus": "Listed",
+  "deliverabilityDone": "Delivery check complete ({{score}}/100)",
+  "sieveEmpty": "No written Sieve files",
+  "sieveListed": "{{count}} written file(s)",
+  "webmailHostnameRequired": "Enter a webmail hostname",
+  "sieveFilesTitle": "Written files"
 }

package/locales/en/files.json

@@ -150,6 +150,7 @@
   "noVersions": "No version history yet",
   "noVersionsHint": "",
   "versionRestored": "Restored",
+  "restoreVersionConfirm": "Restore {{version}} over the current file {{file}}? This overwrites the file on disk.",
   "renameTitle": "Rename",
   "renameCurrent": "Current: {{name}}",
   "renamed": "Renamed",

package/locales/en/ftp.json

@@ -14,6 +14,7 @@
   "keyFingerprint": "Key fingerprint (prefix)",
   "createHint": "Create an FTP account on the Accounts tab first, then return here to register keys.",
   "pubkeyHint": "Use “+ Add public key”, choose an FTP user, and paste a full ssh-ed25519 or ssh-rsa line.",
+  "sftpKeyInvalid": "Need a username and a public key that starts with ssh-.",
   "quickSelect": "Quick-select account",
   "quickSelectHint": "Click a username to fill the new-key form",
   "editAccount": "Edit FTP account",
@@ -39,6 +40,7 @@
   "sshPubkey": "SSH public key",
   "sshPubkeyHint": "Usually from ~/.ssh/id_ed25519.pub, paste whole line",
   "deleteAccountTitle": "Delete FTP account?",
+  "deleteAccountNamed": "Delete FTP account {{name}}?",
   "deleteAccountDesc": "Apply again after remove",
   "deleteKeyTitle": "Delete SFTP public key?",
   "deleteKeyDesc": "Removes from management file; system authorized_keys may need reload.",

package/locales/en/hostBrowse.json

@@ -99,6 +99,7 @@
   "resumeHintDetail": "Resume previous session ({{count}} tabs) · {{url}} · {{when}}",
   "resumeHintOwned": "Resume last browse for {{user}} ({{count}} tabs) · {{url}} · {{when}}",
   "clearSessionData": "Clear session data",
+  "clearSessionConfirm": "This discards the resume snapshot for the previous browse session. You cannot restore those tabs afterwards.",
   "resume": "Resume",
   "resumeDismiss": "Dismiss",
   "resumeDone": "Session resumed",

package/locales/en/metrics.json

@@ -138,6 +138,7 @@
   "applyRenice": "Apply renice",
   "reniceHint": "-20 highest · 19 lowest (needs EXECUTE)",
   "noData": "No data",
+  "shareOfMeasured": "{{pct}}% of measured",
   "mountsTitle": "Disk mounts ({{count}})",
   "mountsDesc": "Real disk usage (temporary filesystems filtered)",
   "noMounts": "No mount list",

package/locales/en/migrate.json

@@ -57,6 +57,14 @@
   "jobsTitle": "Migration jobs ({{count}})",
   "jobsDesc": "State under dataDir/migrate/;",
   "phase": "Phase",
+  "jobPhase": "Job {{id}} · {{phase}}",
+  "phaseName": {
+    "failed": "Failed",
+    "done": "Done",
+    "running": "Running",
+    "queued": "Queued",
+    "cancelled": "Cancelled"
+  },
   "target": "Target",
   "updated": "Updated",
   "notes": "Notes",

package/locales/en/nav.json

@@ -21,6 +21,7 @@
   "postgresService": "PostgreSQL service",
   "redis": "Redis",
   "redisService": "Redis service",
+  "cluster": "Clusters",
   "dns": "DNS",
   "ssl": "SSL certificates",
   "nginx": "Nginx",

package/locales/en/network.json

@@ -89,6 +89,10 @@
   "saveIpHint": "Write connection +ipv4/ipv6.addresses and connection up",
   "confirmIfaceName": "Type interface name “{{name}}” to confirm",
   "deleteRouteTitle": "Delete route?",
+  "deleteRouteNamed": "Delete route {{dst}}?",
+  "deleteRouteBody": "Remove {{dst}}{{via}}{{dev}} from the live routing table.",
+  "viaGw": " via {{gw}}",
+  "onDev": " on {{dev}}",
   "deleteDefaultWarn": "— deleting default may drop connectivity.",
   "alsoRemoveNm": "Also remove from NetworkManager connection (gone after reboot)",
   "loadFailed": "Load failed",

package/locales/en/nginx.json

@@ -28,6 +28,11 @@
   "editDesc": "Apply required after save",
   "deleteTitle": "Delete site?",
   "deleteDesc": "Delete this site?",
+  "deleteTitleNamed": "Delete site {{name}}?",
+  "deleteDescNamed": "Remove {{name}} from the panel. Applied sites will also drop their managed nginx conf.",
+  "invalidServerName": "Enter a valid hostname (e.g. app.example.com).",
+  "needUpstream": "Upstream is required for reverse proxy sites.",
+  "needRoot": "Document root is required for static and PHP sites.",
   "serverNameHint": "server_name, e.g. app.example.com",
   "kindLabel": "Site type",
   "upstreamLabel": "Upstream",
@@ -70,7 +75,7 @@
   "settingsSaved": "Saved",
   "setGzip": "Gzip",
   "setShowVersion": "Show server version",
-  "setShowVersionDesc": "Off = server_tokens off",
+  "setShowVersionDesc": "Checked = server_tokens on (nginx version in response headers)",
   "setHttp2": "HTTP/2 (SSL)",
   "setBody": "Max body",
   "setKeepalive": "Keepalive",

package/locales/en/notes.json

@@ -5,6 +5,7 @@
   "notFound": "Not found",
   "needPath": "Specify a path",
   "needName": "Enter a name",
+  "needHost": "Enter a host",
   "needDomain": "Enter a domain",
   "needProjectName": "Enter a project name",
   "needServerIp": "Specify a server IP",
@@ -72,7 +73,14 @@
     "movedToTrash": "Moved {{name}} to the recycle bin. Permanent delete after {{days}} days.",
     "restoreNameExists": "Cannot restore {{name}} — a live archive with that name already exists.",
     "restoredFromTrash": "Restored {{name}} from the recycle bin.",
-    "trashEmptied": "Permanently deleted {{n}} archive(s) from the recycle bin."
+    "trashEmptied": "Permanently deleted {{n}} archive(s) from the recycle bin.",
+    "partialOk": "Partial success — {{n}} project(s) skipped"
+  },
+  "health": {
+    "portListening": "Port {{port}} is listening",
+    "portNotListening": "Port {{port}} is not listening",
+    "httpOk": "HTTP OK {{status}}",
+    "httpFail": "HTTP failed: {{detail}}"
   },
   "redis": {
     "cliMissing": "redis-cli is not installed",
@@ -88,6 +96,7 @@
     "managedDir": "Managed config dir: {{path}}",
     "includeHint": "In nginx: include {{path}}/*.conf;",
     "removedOrphan": "Removed orphan nginx conf {{path}}",
+    "keptLiveSsl": "Kept live HTTPS block in {{path}} (managed template had no listen 443)",
     "orphanCleanupFailed": "Orphan nginx cleanup failed: {{detail}}",
     "settingsWritten": "Nginx global snippet written",
     "settingsNeedExecute": "Apply needs YSK_EXECUTE",
@@ -168,6 +177,8 @@
     "noManagedZones": "No managed zone files under dataDir/dns/zones",
     "pdnsListZones": "PowerDNS list-zones: {{n}}",
     "lookupIgnoredAt": "dig is unavailable — @{{server}} was ignored. Not using the system resolver as that server’s answer.",
+    "digNotInstalled": "dig is not installed",
+    "digEmpty": "dig: no answer",
     "localAOk": "local A {{name}} → {{ip}}"
   },
   "db": {
@@ -215,7 +226,11 @@
     "dovecotPassdbWrittenNeedApply": "Passwd-file written under dataDir — run apply (EXECUTE+root) so Dovecot loads it",
     "postqueueSetgidBroken": "Postfix queue tools failed: setgid_group is empty in main.cf. Set setgid_group=postdrop (panel tries to fix when YSK_EXECUTE is on).",
     "postqueueMailDown": "Postfix is not running (showq unavailable). Panel tried to start it when YSK_EXECUTE is on — check the Software tab / systemctl status postfix.",
-    "postqueueSpoolMissing": "Postfix queue directories are missing (e.g. hold/). Panel tried to create the spool tree and start Postfix when YSK_EXECUTE is on."
+    "postqueueSpoolMissing": "Postfix queue directories are missing (e.g. hold/). Panel tried to create the spool tree and start Postfix when YSK_EXECUTE is on.",
+    "invalidDomain": "Enter a valid mail domain",
+    "invalidServerIp": "Enter a valid server IP",
+    "mailboxLocalPartInvalid": "Mailbox local-part may only use letters, digits, . _ + -",
+    "passwordTooShort": "Password must be at least 8 characters"
   },
   "agents": {
     "sessionNotFound": "Session not found: {{sessionId}}"
@@ -2259,7 +2274,7 @@
     "t0327": " (skipped {{v0}} without a home dir)",
     "t0328": "projectdirectory: {{v0}}",
     "t0329": "tar failed: {{v0}}",
-    "t0330": "Wrotebackup {{v0}}",
+    "t0330": "Wrote backup {{v0}}",
     "t0331": "Preview: {{v0}} files in the archive (showing {{v1}})",
     "t0332": "cannot: {{v0}}",
     "t0333": "restore (web) to {{v0}}",
@@ -2938,10 +2953,10 @@
     "serverMissing": "WireGuard server not initialized — run Start server first.",
     "peerCreated": "Client «{{name}}» created.",
     "peerNotFound": "Client not found.",
-    "peerRemoved": "Client removed.",
+    "peerRemoved": "Removed {{name}}.",
     "peersSynced": "Peer list reloaded on the running WireGuard interface.",
     "setEndpointHint": "Set public endpoint (host:port) so mobile clients can reach this server.",
-    "invalidConf": "Conf must include [Interface] and PrivateKey.",
+    "invalidConf": "This file is not a valid VPN client conf. Use a WireGuard or OpenVPN client profile.",
     "clientImported": "Profile «{{name}}» imported.",
     "profileNotFound": "Client profile not found.",
     "clientUpFailed": "Connect failed: {{detail}}",

package/locales/en/opsResult.json

@@ -19,5 +19,9 @@
   "stepStoppedOld": "Stopped previous process",
   "stepTuningApplied": "Runtime tuning applied",
   "stepUnitWritten": "Service unit written",
-  "stepSystemdStartFailed": "Systemd start failed — using process fallback"
+  "stepSystemdStartFailed": "Systemd start failed — using process fallback",
+  "portListening": "Port {{port}} is listening",
+  "portNotListening": "Port {{port}} is not listening",
+  "httpOk": "HTTP OK {{status}}",
+  "httpFail": "HTTP failed: {{detail}}"
 }

package/locales/en/projects.json

@@ -678,5 +678,8 @@
   "gitBehindShort": "↓{{count}}",
   "gitAheadShort": "↑{{count}}",
   "gitDirtyShort": "Dirty · {{count}}",
-  "gitFilesLink": "Files"
+  "gitFilesLink": "Files",
+  "nameInvalid": "Use a lowercase name: start with a letter, then letters, digits, or hyphen (max 31).",
+  "deployVersionMissing": "Node {{version}} is not installed on this host. Pick an installed version, or install this version first.",
+  "deployUsedBinary": "Deploy used {{path}}"
 }

package/locales/en/protection.json

@@ -238,8 +238,8 @@
   "block": "Block",
   "allow": "Allow",
   "matched": "Matched",
-  "applyStricterTitle": "Apply stricter preset?",
-  "applyStricterDesc": "May enable auto-ban. Confirm your IP is whitelisted.",
+  "applyStricterTitle": "Apply {{name}}?",
+  "applyStricterDesc": "May enable auto-ban. Confirm your IP is whitelisted. Review the profile changes below.",
   "confirmEmergencyTitle": "Confirm emergency preset",
   "confirmEmergencyDesc": "Emergency extremely rate-limits. Confirm whitelist and type EMERGENCY.",
   "confirmString": "Confirm string",

package/locales/en/publicFiles.json

@@ -17,8 +17,11 @@
     "notSynced": "Managed conf exists but is not under /etc/nginx/conf.d — apply again as root with YSK_EXECUTE"
   },
   "quotaMiB": "Quota (MiB)",
-  "quotaHint": "Optional; caps public directory size",
+  "quotaHint": "Optional; caps public directory size. Unlimited disables the MiB field.",
   "unlimited": "Unlimited",
+  "quotaInvalid": "Enter a whole number of MiB, or choose Unlimited.",
+  "serverNameRequired": "Enter a server name.",
+  "serverNameInvalid": "Use a hostname, wildcard, or IP — no spaces or punctuation.",
   "applyHint": "Apply only writes config;",
   "appliedOk": "Public files site applied",
   "applyReload": "Apply and reload Nginx",

package/locales/en/rbac.json

@@ -108,6 +108,6 @@
   "unsavedHint": "Unsaved edits on this role",
   "nothingToSave": "Nothing to save",
   "saveRole": "Save {{role}} policy",
-  "discardTitle": "Discard unsaved policy?",
-  "discardDesc": "Switching roles drops unsaved capability edits."
+  "discardTitle": "Discard unsaved changes?",
+  "discardDesc": "Unsaved permission edits will be discarded."
 }

package/locales/en/runtime.json

@@ -75,6 +75,10 @@
   "globalPhpIniDesc": "One setting per row",
   "managePath": "Management path",
   "loading": "Loading",
+  "probing": "Probing…",
+  "noBinaryPath": "No binary path",
+  "hostDefaultError": "Host default unavailable",
+  "pm2Tick": "{{at}} · projects {{projects}} · PM2 {{pm2}} · running {{run}}",
   "cannotLoadSettings": "Cannot load settings table",
   "reloadFailed": "Reload failed",
   "sensitive": "Sensitive setting — careful",
@@ -92,6 +96,7 @@
   "demoVhost": "System tools: demo vhost / pool",
   "demoVhostDesc": "Advanced/debug; daily sites use Projects → Deploy",
   "domain": "Domain",
+  "domainRequired": "Enter a valid domain before applying the vhost.",
   "vhostServerName": "Virtual host server_name",
   "poolName": "Pool name",
   "poolNameHint": "Hand-typed id (demo); project paths use ysks_* users",
@@ -450,7 +455,8 @@
       "interpreter": "Interpreter",
       "user": "User",
       "unit": "Unit",
-      "runtime": "Runtime"
+      "runtime": "Runtime",
+      "pid": "PID"
     },
     "projectsTitle": "YSK project processes",
     "projectsDesc": "systemd units for panel projects (default deploy path — not PM2).",

package/locales/en/services.json

@@ -59,6 +59,11 @@
   "restartConfirmPanelDesc": "The panel and API will drop briefly while the unit restarts.",
   "restartConfirmTitle": "Restart {{label}}?",
   "restartConfirmDesc": "Restart {{label}} now. Active connections may drop.",
+  "restartConfirmConsequence": "{{label}} will briefly interrupt connections, then keep serving HTTP/HTTPS.",
+  "reloadConfirmTitle": "Reload {{label}}?",
+  "reloadConfirmDesc": "Reload {{label}} configuration. Existing sessions should stay up.",
+  "enableConfirmTitle": "Enable {{label}} at boot?",
+  "enableConfirmDesc": "Enable {{label}} so it starts on boot.",
   "startVerifyFailed": "{{label}} start did not stay healthy.",
   "stopConfirmPanelToken": "stop ysk-server",
   "stopConfirmPanelConsequence": "This browser session will disconnect. Start the unit from SSH or the host console.",
@@ -102,5 +107,17 @@
   "protectionDoneNote": "Protection probe finished",
   "probeDone": "Probe complete",
   "runProtection": "Run protection probe",
-  "notProbedYet": "Not probed yet"
+  "notProbedYet": "Not probed yet",
+  "cat": {
+    "web": "Web",
+    "db": "Databases",
+    "mail": "Mail",
+    "dns": "DNS",
+    "ftp": "FTP",
+    "cache": "Cache",
+    "panel": "Panel",
+    "ssh": "SSH",
+    "other": "Other",
+    "runtime": "Runtimes"
+  }
 }

package/locales/en/software.json

@@ -84,6 +84,8 @@
     "latest": "Latest",
     "upToDate": "Up to date / repo latest",
     "refresh": "Recheck latest",
+    "refreshHasUpdate": "Newer version available",
+    "refreshLatest": "Already the latest recorded version",
     "pick": "Pick version",
     "noTarget": "No update target",
     "needRuntimePage": "Install this version on the runtime page",

package/locales/en/stackWizard.json

@@ -22,5 +22,20 @@
   "uninstallNow": "Uninstall now",
   "uninstallNeedSelect": "Select at least one bundle. Empty selection no longer means remove all.",
   "uninstallConfirmTitle": "Remove selected bundles?",
-  "uninstallConfirmDesc": "{{count}} bundle(s) will be removed. Type REMOVE to confirm."
+  "uninstallConfirmDesc": "{{count}} bundle(s) will be removed. Type REMOVE to confirm.",
+  "bundle": {
+    "control-plane": "Control plane",
+    "web": "Web hosting",
+    "database": "Databases",
+    "email": "Mail stack",
+    "dns": "DNS",
+    "ftp": "FTP / FTPS",
+    "defense": "Host defense",
+    "runtimes": "Language runtimes"
+  },
+  "planTitle": {
+    "minimal": "Control plane only",
+    "recommended": "Recommended hosting",
+    "full": "All software"
+  }
 }

package/locales/en/tabs.json

@@ -3,5 +3,7 @@
   "scrollRight": "Scroll tabs right",
   "about": "About",
   "main": "Actions",
-  "stack": "Software"
+  "stack": "Software",
+  "unknown": "No such tab",
+  "unknownHint": "This page has no tab named {{tab}}."
 }