v0.24.13

langs/en_US.json

@@ -18,6 +18,44 @@
     "streamBackendHealthSection": "Health checks",
     "fileLogsSortAscending": "Sort ascending",
     "fileLogsSortDescending": "Sort descending",
+    "globalBlockAllow": "Global block / allow",
+    "globalSecurityHeaders": "Security headers",
+    "globalPolicyScope": "PUBLIC HTTP LISTENERS",
+    "globalPolicyHelp": "Rules are evaluated for public HTTP traffic before connecting to the upstream, including redirects and cache invalidation. Global and per-vhost rules are cumulative; disabled controls leave existing behavior unchanged. DNS-based country rules need GeoIP data.",
+    "globalCountryTitle": "Country access",
+    "globalCountryHelp": "Block listed countries or allow only listed countries (ISO 3166-1 alpha-2). Unknown countries are denied in allow mode. Configure GeoIP updates under Settings.",
+    "globalCountryMode": "Country policy",
+    "globalCountryList": "Country codes (one per line or comma separated)",
+    "globalUaTitle": "User-Agent blocklist",
+    "globalUaEnabled": "Enable global User-Agent blocking",
+    "globalIpTitle": "IP / CIDR and dynamic DNS access",
+    "globalIpHelp": "Optional allow/deny rules for client IPs, subnets and allow-only DNS names. Deny wins. The default action applies when no rule matches.",
+    "globalIpEnabled": "Enable IP / CIDR access rules",
+    "globalIpDefault": "Default action",
+    "globalIpRules": "Rules (allow or deny, followed by IP/CIDR; DNS is allow-only)",
+    "globalMethodTitle": "HTTP methods",
+    "globalMethodHelp": "Block selected methods or allow only those listed. Applies before redirects and cache invalidation; denied requests receive 405.",
+    "globalMethodMode": "Method policy",
+    "globalMethodList": "Methods (comma, space or newline separated)",
+    "globalContentTypeTitle": "Request Content-Type",
+    "globalContentTypeHelp": "Reject declared MIME types (exact or type/*) with 403. This is a header rule, not body inspection.",
+    "globalContentTypeEnabled": "Enable Content-Type denylist",
+    "globalContentTypeList": "Blocked MIME types (one per line)",
+    "globalRateTitle": "Shared rate limit",
+    "globalRateHelp": "Optional per-client-IP limit shared by all public vhosts. Runs in addition to per-vhost limits; use conservative values to avoid blocking legitimate shared clients.",
+    "globalRateEnabled": "Enable global request rate limit",
+    "globalRateRequests": "Requests per window",
+    "globalRateWindow": "Window (seconds)",
+    "globalRateBurst": "Burst allowance",
+    "globalPolicySave": "Apply global block / allow rules",
+    "globalHeadersSecurityHelp": "Global response-header baseline for public HTTP vhosts, redirects and 404 hosts. Explicit per-vhost values override matching global headers. HSTS is sent only over HTTPS; test CSP carefully before rollout.",
+    "globalSecurityHeadersSave": "Apply security headers",
+    "globalCountriesRequired": "Enter at least one country code or turn off the country policy.",
+    "globalCountriesInvalid": "Use two-letter country codes, for example PL or DE.",
+    "globalMethodsRequired": "Enter at least one HTTP method or turn off the method policy.",
+    "globalContentTypesRequired": "Enter at least one MIME type or disable Content-Type blocking.",
+    "cacheHeadersSection": "Cache response headers",
+    "transformOperationsTitle": "Transformations",
     "policyRulesTitle": "Rules & headers",
     "vhUaRateTitle": "User-Agent rate limit overrides",
     "vhUaRatePattern": "User-Agent pattern",