{
  "profiles": {
    "web": {
      "label": "Web 主机",
      "short": "SSH · 80 · 443"
    },
    "mail": {
      "label": "Web + 邮件",
      "short": "另开 25/465/587/993"
    },
    "ftps": {
      "label": "网络+FTPS",
      "short": "21 + PASV 30000–30100"
    }
  },
  "appliedProfile": "已套用配置档：{{label}}",
  "backToProtection": "防护中心",
  "statRules": "规则",
  "statDenyIps": "永久拒 IP",
  "statAllow": "允许",
  "statDeny": "拒绝",
  "statDefaultIn": "入站默认",
  "defaultNotApplied": "不适用（UFW 关闭）",
  "ufwOffHint": "UFW 关闭时不应用默认传入",
  "executeOn": "开",
  "executeOff": "关",
  "ufwDisabled": "已停用 UFW",
  "ufwEnabled": "已启用 UFW",
  "disableUfw": "停用 UFW",
  "enableUfw": "启用 UFW",
  "notInstalled": "UFW 尚未安装",
  "toolHintPrefix": "底层工具：",
  "toolHintBody": "UFW = 端口／永久规则 · 攻击应变与自动 ban 请用",
  "toolHintfail2ban": "fail2ban = 日志临时 ban",
  "toolHintFail2ban": "fail2ban = 基于日志的临时禁令",
  "executeOffHint": "系统变更未开 — 可看状态，改规则需 root + YSK_EXECUTE=1",
  "tabs": {
    "rules": "规则表",
    "ports": "开端口",
    "deny": "永久拒 IP",
    "profiles": "配置档",
    "about": "说明",
    "services": "服务"
  },
  "currentRules": "当前规则",
  "rulesSourceHint": "UFW 编号规则（ufw status numbered）",
  "colAction": "动作",
  "colTo": "目标",
  "colFrom": "来源",
  "deleteShort": "删除",
  "denyBadge": "拒绝",
  "emptyRulesTitle": "无规则或无权读取",
  "emptyRulesInstalled": "UFW inactive 或需 root 读取",
  "emptyRulesNotInstalled": "安装 UFW 后再刷新",
  "allowPortTitle": "允许端口",
  "protocol": "协议",
  "protoBoth": "两者",
  "protoBothLabel": "TCP+UDP",
  "port": "端口",
  "portHint": "选常用端口，或下面自定义",
  "portHintYsk": "YSK 服务端口一览（Panel／Web／SSH／邮件／FTP／DNS／DB／Redis）；可自定义",
  "privatePortWarn": "{{service}} 默认宜只听内网；公开 allow 有风险。建议填写来源 IP／CIDR。",
  "privatePortWarnWithFrom": "{{service}} 将只允许指定来源；仍请确认 IP／CIDR 正确。",
  "allowFrom": "来源 IP／CIDR（可选）",
  "allowFromHint": "留空 = 全部来源；填写后只允许该 IP 或网段连入此端口",
  "allowFromPlaceholder": "例 203.0.113.10 或 10.0.0.0/8",
  "customPort": "自定义端口（如 8080 或 30000:30100）",
  "allowedPort": "已允许 {{proto}}/{{port}}",
  "allowedPortFrom": "已允许 {{proto}}/{{port}}（来源 {{from}}）",
  "allowThisPort": "允许此端口",
  "allowPortHint": "默认 Web 主机应保留 22／80／443；DB／Redis／Panel 请用来源 IP 限制，勿对全世界 allow。",
  "denyTitle": "永久拒绝 IP",
  "denySub": "UFW DENY · 与 fail2ban 临时 ban 不同",
  "denyPlaceholder": "要拒绝的 IPv4 或 IPv6",
  "deniedOk": "已永久拒绝",
  "removedDeny": "已移除 DENY",
  "remove": "移除",
  "noDenyRules": "没有永久拒 IP 规则",
  "oneClickProfiles": "一键配置档",
  "oneClickDesc": "写入管理脚本并套用 UFW（不会装 fail2ban — 请到 fail2ban 页）",
  "customApply": "自定义套用",
  "allowSmtp": "允许 SMTP／IMAP 端口",
  "extraTcp": "额外 TCP 端口",
  "extraTcpHint": "点选预设组合；可再自定义逗号／范围",
  "noExtra": "无额外",
  "mailGroup": "邮件组",
  "customExtraPlaceholder": "自定义：8080,9000:9010",
  "appliedCustom": "已套用自定义规则",
  "applyToSystem": "套用到系统",
  "deletedRule": "已删 #{{n}}",
  "deleteRuleTitle": "删规则 #{{n}}？",
  "deleteRuleDesc": "将从 UFW 移除该规则编号（需系统变更权限）。",
  "servicesTitle": "托管服务端口",
  "servicesHint": "YSK 托管服务的期望网络暴露。启动服务时会自动同步这些规则。",
  "servicesUfwOff": "UFW 已關閉。此列表只是預期暴露，並非主機上已強制執行的規則。",
  "servicesEmpty": "尚无服务暴露数据",
  "servicesEmptyDesc": "启动托管服务（Web、FTPS、VPN、数据库…）后会出现在此列表。",
  "servicesManualHint": "手动开端口 chips 在「端口」分页 — 建议在此管理，规则会带 ysk-svc 标记。",
  "portsManualHint": "高级手动规则。托管软件请优先用「服务」分页。",
  "colService": "服务",
  "colMode": "模式",
  "colPorts": "端口",
  "colSync": "状态",
  "synced": "已同步",
  "syncNow": "立即同步",
  "disableConfirmTitle": "停用 UFW？",
  "disableConfirmDesc": "主机防火墙将停止过滤流量。若主机在公众网络上，SSH 与面板可能直接暴露。",
  "disableConfirmConsequence": "现有允许／拒绝规则仍会保留，但要重新启用 UFW 才会生效。",
  "desiredOnlyUfwOff": "设定：{{mode}} · UFW 关闭（未套用）",
  "syncNotApplied": "UFW 关闭 · 未套用"
}