{
  "profiles": {
    "web": {
      "label": "Web 主機",
      "short": "SSH · 80 · 443"
    },
    "mail": {
      "label": "Web + 郵件",
      "short": "另開 25/465/587/993"
    },
    "ftps": {
      "label": "網絡+FTPS",
      "short": "21 + PASV 30000–30100"
    }
  },
  "appliedProfile": "已套用設定檔：{{label}}",
  "backToProtection": "防護中心",
  "statRules": "規則",
  "statDenyIps": "永久拒 IP",
  "statAllow": "允許",
  "statDeny": "拒絕",
  "statDefaultIn": "入站預設",
  "defaultNotApplied": "未套用（UFW 關閉）",
  "ufwOffHint": "UFW 關閉時入站預設不會生效",
  "executeOn": "開",
  "executeOff": "關",
  "ufwDisabled": "已停用 UFW",
  "ufwEnabled": "已啟用 UFW",
  "disableUfw": "停用 UFW",
  "enableUfw": "啟用 UFW",
  "notInstalled": "UFW 尚未安裝",
  "toolHintPrefix": "底層工具：",
  "toolHintBody": "UFW 管埠同永久規則。攻擊應變與自動封鎖請用防護中心。",
  "toolHintfail2ban": "日誌臨時封鎖",
  "toolHintFail2ban": "日誌臨時封鎖",
  "executeOffHint": "系統變更未開 — 可看狀態，改規則需 管理員權限與系統變更權限已開啟",
  "tabs": {
    "rules": "規則表",
    "ports": "開埠",
    "deny": "永久拒 IP",
    "profiles": "設定檔",
    "about": "說明",
    "services": "服務"
  },
  "currentRules": "目前規則",
  "rulesSourceHint": "UFW 編號規則（ufw status numbered）",
  "colAction": "動作",
  "colTo": "目標",
  "colFrom": "來源",
  "deleteShort": "刪除",
  "denyBadge": "拒絕",
  "emptyRulesTitle": "無規則或無權讀取",
  "emptyRulesInstalled": "UFW 未啟用，或需要管理員權限讀取",
  "emptyRulesNotInstalled": "安裝 UFW 後再整理",
  "allowPortTitle": "允許埠",
  "protocol": "協議",
  "protoBoth": "兩者",
  "protoBothLabel": "TCP+UDP",
  "port": "埠",
  "portHint": "選常用埠，或下面自訂",
  "portHintYsk": "YSK 服務埠一覽（Panel／Web／SSH／郵件／FTP／DNS／DB／Redis）；可自訂埠號",
  "privatePortWarn": "{{service}} 預設宜只聽內網；公開 allow 有風險。建議填寫來源 IP／CIDR。",
  "privatePortWarnWithFrom": "{{service}} 將只允許指定來源；仍請確認 IP／CIDR 正確。",
  "allowFrom": "來源 IP／CIDR（可選）",
  "allowFromHint": "留空 = 全部來源；填寫後只允許該 IP 或網段連入此埠",
  "allowFromPlaceholder": "例 203.0.113.10 或 10.0.0.0/8",
  "customPort": "自訂埠號（例 8080 或 30000:30100）",
  "allowedPort": "已允許 {{proto}}/{{port}}",
  "allowedPortFrom": "已允許 {{proto}}/{{port}}（來源 {{from}}）",
  "allowThisPort": "允許此埠",
  "allowPortHint": "預設 Web 主機應保留 22／80／443；DB／Redis／Panel 請用來源 IP 限制，勿對全世界 allow。",
  "denyTitle": "永久拒絕 IP",
  "denySub": "UFW DENY · 與 fail2ban 臨時 封鎖 不同",
  "denyPlaceholder": "要拒絕的 IPv4 或 IPv6",
  "deniedOk": "已永久拒絕",
  "removedDeny": "已移除 DENY",
  "remove": "移除",
  "noDenyRules": "未有永久拒 IP 規則",
  "oneClickProfiles": "一鍵設定檔",
  "oneClickDesc": "寫入管理腳本並套用 UFW（不會裝 fail2ban — 請到 fail2ban 頁）",
  "customApply": "自訂套用",
  "allowSmtp": "允許 SMTP／IMAP 埠",
  "extraTcp": "額外 TCP 埠",
  "extraTcpHint": "點選預設組合；可再自訂逗號／範圍",
  "noExtra": "無額外",
  "mailGroup": "郵件組",
  "customExtraPlaceholder": "自訂：8080,9000:9010",
  "appliedCustom": "已套用自訂規則",
  "applyToSystem": "套用到系統",
  "deletedRule": "已刪 #{{n}}",
  "deleteRuleTitle": "刪規則 #{{n}}？",
  "deleteRuleDesc": "將從 UFW 移除該規則編號（需系統變更權限）。",
  "servicesTitle": "受管服務埠",
  "servicesHint": "YSK 管理服務的預期網絡暴露。開啟服務時會自動同步這些規則。",
  "servicesUfwOff": "UFW 已關閉。此列表只是預期暴露，並非主機上已強制執行的規則。",
  "servicesEmpty": "尚未有服務暴露資料",
  "servicesEmptyDesc": "啟動受管服務（Web、FTPS、VPN、資料庫…）後會出現在此列表。",
  "servicesManualHint": "手動開埠 chips 在「埠」分頁 — 建議在此管理，規則會帶 ysk-svc 標記。",
  "portsManualHint": "進階手動規則。受管軟件請優先用「服務」分頁。",
  "colService": "服務",
  "colMode": "模式",
  "colPorts": "埠",
  "colSync": "狀態",
  "synced": "已同步",
  "syncNow": "立即同步",
  "disableConfirmTitle": "停用 UFW？",
  "disableConfirmDesc": "主機防火牆將停止過濾流量。若主機在公眾網絡上，SSH 與面板可能直接暴露。",
  "disableConfirmConsequence": "現有允許／拒絕規則仍會保留，但要重新啟用 UFW 才會生效。",
  "desiredOnlyUfwOff": "設定：{{mode}} · UFW 關閉（未套用）",
  "syncNotApplied": "UFW 關閉 · 未套用"
}