v0.34.10

langs/en_US.json

@@ -2378,7 +2378,6 @@
     "certificateSourceExternal": "External files (absolute paths)",
     "certificateSourceManagedHelp": "Enter filenames only, for example app.pem and app.key. RustProxy loads them from <data-dir>/certs (normally /var/lib/rustproxy/certs for a packaged service).",
     "certificateSourceExternalHelp": "Enter absolute server paths. Certbot example: /etc/letsencrypt/live/example.com/fullchain.pem and /etc/letsencrypt/live/example.com/privkey.pem. live/ symlinks are resolved on every reload. POSIX ACL read access is supported; RustProxy does not require an exact chmod. The private key must not be world-readable or group/world-writable, and the path must stay under root- or rustproxy-owned non-writable directories.",
-    "certificateExternalAclExample": "ACL example (grant traversal, not directory read):\nsetfacl -m u:rustproxy:--x /etc/ssl/\nsetfacl -m u:rustproxy:--x /etc/letsencrypt/ /etc/letsencrypt/live/ /etc/letsencrypt/archive/\nsetfacl -m u:rustproxy:--x /etc/letsencrypt/live/example.com/ /etc/letsencrypt/archive/example.com/\nsetfacl -m u:rustproxy:r-- /etc/letsencrypt/archive/example.com/fullchain*.pem /etc/letsencrypt/archive/example.com/privkey*.pem\nAfter renewal, reapply read ACL to the current resolved files before API reload:\nsetfacl -m u:rustproxy:r-- \"$(readlink -f /etc/letsencrypt/live/example.com/fullchain.pem)\" \"$(readlink -f /etc/letsencrypt/live/example.com/privkey.pem)\"",
     "certificateExternalFiles": "External file paths",
     "vhWwwRedirect": "Redirect www ↔ non-www",
     "vhWwwRedirectTarget": "Choose the domain and redirect direction (308 destination)",
@@ -2852,7 +2851,23 @@
     "cacheMixSample": "Since service start · {count} HTTP requests",
     "cacheMixWaiting": "No HTTP requests since service start",
     "cacheMixAria": "Since service start: {hit} HIT, {miss} MISS, {bypass} BYPASS, {other} OTHER",
-    "cacheMixInvalid": "Totals unavailable: request and cache counters disagree"
+    "cacheMixInvalid": "Totals unavailable: request and cache counters disagree",
+    "pathPermissionsTitle": "Permission commands",
+    "pathPermissionsUser": "Service user",
+    "pathPermissionsCopy": "Copy commands",
+    "pathPermissionsCopied": "Commands copied.",
+    "pathPermissionsCopyFailed": "Copy failed. Select and copy the commands manually.",
+    "pathPermissionsCertificateHelp": "Linux: run these commands in a server terminal with sudo; the acl package is required. They grant traversal and read access to the actual files, including symlink targets, and restrict private-key permissions. Files and parent directories must be owned by root or the service user; parents cannot be group/world-writable. After renewal, repeat the commands for new targets and reload the certificate.",
+    "pathPermissionsWebHelp": "Linux: run these commands in a server terminal with sudo; the acl package is required. They grant traversal of parent directories, read access to this website and default ACLs for new content. Symlinks within the site are skipped. Reapply after moving files or preserving restrictive modes. PHP-FPM has its own user and write permissions.",
+    "pathPermissionsCertificatePrompt": "Enter both absolute certificate/key paths and a valid service username to generate commands. Paths cannot contain . or .. components or control characters.",
+    "pathPermissionsWebPrompt": "Enter an absolute website directory (not /) and a valid service username to generate commands. Paths cannot contain . or .. components or control characters.",
+    "certificateReadNames": "Read names from certificate",
+    "certificateInspectReading": "Reading certificate…",
+    "certificateInspectReady": "DNS names read from certificate.",
+    "certificateInspectKept": "Certificate read; your SNI names were preserved.",
+    "certificateInspectNoNames": "Certificate contains no DNS SAN names.",
+    "certificateInspectFailed": "Cannot read certificate. Check the file and its permissions, then read again.",
+    "pathPermissionsOptions": "Options and help"
   },
   "overviewLayoutNarrow": "Decrease card width",
   "overviewLayoutWiden": "Increase card width",