v0.34.4

langs/en_US.json

@@ -1068,14 +1068,36 @@
     "aclProfileCountryInvalid": "Country codes must use two-letter ISO codes.",
     "aclProfileCountryRequired": "Add at least one country or disable country exceptions.",
     "aclProfileDuplicate": "An ACL profile with this ID already exists.",
-    "vhAclProfile": "ACL profile",
+    "vhAclProfile": "ACL profiles",
     "vhAclProfileNone": "No reusable profile",
-    "vhAclProfileHelp": "Optional reusable profile. Inline vhost ACL and country rules below are still enforced in addition to the profile.",
+    "vhAclProfileHelp": "Select up to eight reusable ACL profiles. Hover or open the selector to preview their default action, IP rules and country restrictions. Inline Vhost ACLs and other restrictions still apply separately.",
     "multiAclWarning": "Multiple ACL profiles: explicit IP deny and blocked country take priority over allows in every selected profile. Explicit allows are combined (OR); if no rule matches, all profile defaults must allow. Vhost inline ACL, location ACL and global host ACL still apply separately (AND). Avoid mixing allow-all policies with denies: it is easy to expose or accidentally block access.",
     "vhCertificateMismatchForce": "Force an incompatible certificate (explicit risk acceptance)",
     "vhCertificateMismatchWarning": "This allows RustProxy to publish this name with a certificate that does not cover it. Browsers and TLS clients will still reject or warn about the hostname mismatch. Use only when necessary; obtain a matching certificate whenever possible.",
     "vhCertificateMismatchConfirm": "Publish with a certificate that may not cover these domain names? This override disables the certificate/name binding check ONLY for this Vhost. TLS clients may reject the connection. Confirm the risk.",
-    "dockerCertMismatchForce": "Force certificate mismatch for this Docker Vhost",
+    "aclPickerChoose": "Select ACL profiles",
+    "aclPickerSelected": "Selected profiles: {count}",
+    "aclPickerSearch": "Search profiles, IDs or rules…",
+    "aclPickerNone": "No profiles selected",
+    "aclPickerNoProfiles": "Create an ACL profile first in Access control.",
+    "aclPickerNoMatches": "No matching ACL profiles",
+    "aclPickerLimit": "Maximum of 8 profiles. Remove one before adding another.",
+    "aclPickerMoreRules": "more rules",
+    "aclPickerNoRules": "No IP exceptions",
+    "aclPickerNoIpRules": "No IP ACL",
+    "aclPickerDefaultAllow": "Default ALLOW",
+    "aclPickerDefaultDeny": "Default DENY",
+    "aclPickerBlockedCountries": "Block country",
+    "aclPickerAllowedCountries": "Allow country",
+    "dockerCertSection": "Frontend TLS certificate",
+    "dockerCertMismatchRisk": "Risk accepted",
+    "dockerCertMismatchUnavailable": "To accept a mismatch, select a named frontend certificate in Docker agent settings. The inherited default certificate needs no override.",
+    "dockerFrontendProtocols": "Frontend protocols",
+    "dockerFrontendProtocolsHelp": "Per Docker vhost; requires support on the agent-selected listeners. Does not change the backend HTTP/HTTPS scheme.",
+    "dockerHttp1Always": "Always available",
+    "dockerHttp2Enabled": "HTTP/2 (H2)",
+    "dockerHttp3Enabled": "HTTP/3 (H3/QUIC)",
+    "dockerCertMismatchForce": "Accept certificate/domain mismatch for this Docker vhost",
     "dockerCertMismatchWarning": "The agent-selected public certificate may not cover this hostname or its aliases. Saving this override allows the binding but client browsers will still show a certificate error. A matching certificate is recommended.",
     "dockerCertMismatchConfirm": "Confirm publishing this Docker Vhost with an incompatible TLS certificate? Browsers may reject the connection. This explicitly waives RustProxy hostname coverage validation for this published hostname and its aliases.",
     "vhHostAdd": "Add hostname",
@@ -1552,13 +1574,13 @@
     "dockerUnhideVhost": "Show in view",
     "dockerCertificate": "Frontend certificate",
     "dockerCertificateHelp": "Certificate assigned to every generated vhost for this agent. Default uses normal TLS/SNI certificate selection.",
-    "dockerDefaultAcl": "Default ACL profile",
+    "dockerDefaultAcl": "Default ACL profiles",
     "dockerDefaultAclNone": "No default ACL profile",
-    "dockerDefaultAclHelp": "Inherited by generated Docker vhosts that do not select their own per-app ACL profile.",
+    "dockerDefaultAclHelp": "Select up to eight ACL profiles inherited by Docker vhosts without an explicit per-app selection. An empty app selection inherits these defaults.",
     "dockerApplyService": "Apply changes",
     "dockerAccessControl": "Access control",
     "dockerAclSummary": "Optional ACL profile and per-app IP rules",
-    "dockerAclProfile": "ACL profile",
+    "dockerAclProfile": "ACL profiles",
     "dockerAclProfileNone": "No ACL profile",
     "dockerAclProfileInherit": "Agent default",
     "dockerAclInline": "Use additional per-app ACL",