Remove Cascade double-VPN (v2.3.0).

Drop cascade manager, API, server UI, and i18n keys after unstable egress/routing behavior.

README.md

@@ -222,6 +222,17 @@ GitHub Actions workflows in `.github/workflows/`:
 
 ## 📋 Fix / changelog (this fork)
 
+### v2.3.0
+*   **Cascade removed** — double-VPN feature dropped from the panel (manager, API, UI, i18n).
+
+### v2.2.1
+*   **Cascade egress verify fix**: bind curl to ENTRY `awg0`/`wg0` IP (client-subnet policy route), not cascade peer Address.
+*   Soft-warn (no rollback) when policy route via `cascade` is OK but public-IP echo services fail.
+
+### v2.2.0
+*   **Cascade (double VPN) restored** — later removed in **v2.3.0**.
+*   Inspired by [ryderams/amneziawg-cascade](https://github.com/ryderams/amneziawg-cascade); logic ran over panel SSH (**no remote curl|bash**).
+
 ### v2.1.0
 *   **NaiveProxy — stable**: production-ready install (Caddy + klzgrad/forwardproxy), share links always include `:443`.
 *   **Client notes (important)**:
@@ -253,7 +264,7 @@ GitHub Actions workflows in `.github/workflows/`:
 ### v1.6.0
 *   **3x-ui multi-panel**: register several 3x-ui servers in Settings; pick a panel and load VLESS inbounds over its API when creating users/invites (share link comes from 3x-ui).
 *   **Docker / CI**: refreshed `Dockerfile` + compose, `.env.example`, CI checks, GHCR image workflow.
-*   **Cascade removed** for now (pending redesign — showed active while internet often did not work).
+*   **Cascade** was temporarily removed in this release (briefly restored in v2.2.x, removed again in **v2.3.0**).
 *   **WG/AWG backups**: ZIP export of client `.conf` + restore with loading feedback.
 *   **API performance**: in-memory data cache, faster server check/stats.
 *   **Share / guest**: one-tap “Copy key”.

app.py

@@ -101,7 +101,7 @@ else:
     application_path = os.path.dirname(__file__)
 
 DATA_FILE = os.path.join(application_path, 'data.json')  # legacy JSON; used only for one-shot import / export
-CURRENT_VERSION = "v2.1.0"
+CURRENT_VERSION = "v2.3.0"
 RELEASES_REPO_URL = "https://git.evilfox.cc/test2/Amnezia-Web-Panel-main"
 RELEASES_API_LATEST = "https://git.evilfox.cc/api/v1/repos/test2/Amnezia-Web-Panel-main/releases/latest"
 BIN_DIR = os.environ.get('TUNNEL_BIN_DIR', os.path.join(application_path, 'bin'))
@@ -151,7 +151,7 @@ def load_translations():
             if f.endswith('.json'):
                 lang = f.split('.')[0]
                 try:
-                    with open(os.path.join(trans_dir, f), 'r', encoding='utf-8') as tf:
+                    with open(os.path.join(trans_dir, f), 'r', encoding='utf-8-sig') as tf:
                         TRANSLATIONS[lang] = json.load(tf)
                 except Exception as e:
                     logger.error(f"Error loading translation {f}: {e}")
@@ -1742,7 +1742,6 @@ class HysteriaSettingsRequest(BaseModel):
     email: Optional[str] = None
     renew_ssl: bool = False
 
-
 class ProtocolRequest(BaseModel):
     protocol: str = 'awg'
 
@@ -2300,7 +2299,7 @@ async def server_detail(request: Request, server_id: int):
         return RedirectResponse(url='/')
     server = data['servers'][server_id]
     users_list = data.get('users', [])
-    return tpl(request, 'server.html', server=server, server_id=server_id, users=users_list, all_servers=data['servers'])
+    return tpl(request, 'server.html', server=server, server_id=server_id, users=users_list)
 
 
 @app.get('/users', response_class=HTMLResponse, tags=["System Templates"])
@@ -3231,6 +3230,7 @@ async def api_hysteria_update_settings(request: Request, server_id: int, req: Hy
         return JSONResponse({'error': str(e)}, status_code=500)
 
 
+
 @app.post('/api/servers/{server_id}/uninstall', tags=["Protocols"])
 async def api_uninstall_protocol(request: Request, server_id: int, req: ProtocolRequest):
     if not _check_admin(request):

templates/server.html

@@ -1,4 +1,4 @@
-{% extends "base.html" %}
+{% extends "base.html" %}
 {% from "macros/icons.html" import icon %}
 
 {% block title_extra %} — {{ server.name }}{% endblock %}
@@ -2965,6 +2965,7 @@
     }
 
 
+
     // ========== Init ==========
     applyInstalledAppsVisibility();
     checkServer();

translations/en.json

@@ -39,7 +39,7 @@
     "limit":  "Limit",
     "manage":  "Manage",
     "no_protocols":  "No protocols",
-  "add_server_desc": "Add your first VPN server to get started. You'll need SSH credentials to connect.",
+    "add_server_desc":  "Add your first VPN server to get started. You\u0027ll need SSH credentials to connect.",
     "ssh_host":  "Host / IP",
     "ssh_port":  "SSH Port",
     "ssh_user":  "User",
@@ -80,8 +80,8 @@
     "no_connections":  "No connections",
     "no_connections_desc":  "Add your first connection to generate a VPN configuration",
     "install_protocol":  "Install protocol",
-  "port_default_hint": "Default port: 55424. Make sure it's not busy",
+    "port_default_hint":  "Default port: 55424. Make sure it\u0027s not busy",
-  "port_xray_hint": "Default port: 443 (recommended for Xray). Make sure it's not taken by another web server.",
+    "port_xray_hint":  "Default port: 443 (recommended for Xray). Make sure it\u0027s not taken by another web server.",
     "reinstall":  "Reinstall",
     "uninstall_confirm":  "Uninstall {}? All connections and configurations will be lost.",
     "stop_container_confirm":  "Stop container {}?",
@@ -265,10 +265,10 @@
     "bot_start_btn":  "▶️ Start",
     "bot_hint":  "After changing the token, save the settings — the bot will restart automatically. Users must have a Telegram ID in their profile.",
     "api_docs_title":  "🔌 API Documentation",
-  "api_docs_hint": "Use these interfaces to explore the panel's API capabilities",
+    "api_docs_hint":  "Use these interfaces to explore the panel\u0027s API capabilities",
     "tunnels_title":  "Tunnels",
     "local_server":  "Local Server",
-  "tunnel_install_enable": "Install & Enable",
+    "tunnel_install_enable":  "Install \u0026 Enable",
     "tunnel_enable":  "Enable Tunnel",
     "tunnel_running":  "Tunnel running",
     "tunnel_stop":  "Stop",
@@ -317,7 +317,7 @@
     "copy_key_big":  "Copy key",
     "copying_key":  "Copying…",
     "key_copied":  "Key copied — paste it into the app",
-  "more_qr_download": "QR code & file",
+    "more_qr_download":  "QR code \u0026 file",
     "download_config_file":  "Download config file",
     "show_config_text":  "Show config text",
     "copied":  "Copied!",
@@ -347,34 +347,34 @@
     "restore_success":  "Restore successful! Restarting...",
     "invalid_backup_file":  "Invalid backup file or structure",
     "config_unavailable":  "Configuration unavailable",
-  "config_unavailable_desc": "This client was created via the native Amnezia app.\\nThe private key is stored only on the user's device and cannot be recovered by the server.",
+    "config_unavailable_desc":  "This client was created via the native Amnezia app.\\nThe private key is stored only on the user\u0027s device and cannot be recovered by the server.",
     "client_public_key":  "Client public key:",
     "telemt_desc":  "MTProxy-based Telegram proxy with advanced obfuscation and TLS emulation support.",
-  "hysteria_desc": "Hysteria 2 (QUIC/UDP) via official tobyxdd/hysteria (apernet/hysteria) with Let's Encrypt TLS. Admin sets the domain at install time.",
+    "hysteria_desc":  "Hysteria 2 (QUIC/UDP) via official tobyxdd/hysteria (apernet/hysteria) with Let\u0027s Encrypt TLS. Admin sets the domain at install time.",
     "hysteria_domain":  "Domain",
-  "hysteria_email": "Let's Encrypt email",
+    "hysteria_email":  "Let\u0027s Encrypt email",
     "hysteria_port_hint":  "UDP port for Hysteria (default 8998). Avoid 443 if nginx/xray already use UDP/TCP 443. Port 80/TCP must be free for certificate issuance.",
-  "hysteria_install_hint": "Point the domain A-record to this server before install. Port 80/TCP is used temporarily for Let's Encrypt HTTP-01 validation. BBR and salamander obfuscation are enabled automatically.",
+    "hysteria_install_hint":  "Point the domain A-record to this server before install. Port 80/TCP is used temporarily for Let\u0027s Encrypt HTTP-01 validation. BBR and salamander obfuscation are enabled automatically.",
     "hysteria_dns_hint":  "Create this DNS record before installation:",
     "hysteria_settings_title":  "Hysteria settings",
     "hysteria_change_port":  "Change port",
     "hysteria_port_change_hint":  "UDP listen port. If you see “address already in use”, pick a free port (e.g. 8443 or 8998), save, then re-import the client link.",
     "hysteria_settings_saved":  "Hysteria settings updated",
-  "hysteria_ports_warning": "Warning: free TCP ports 80 and 443 are required for stable operation (Let's Encrypt on 80, HTTPS/QUIC on 443).",
+    "hysteria_ports_warning":  "Warning: free TCP ports 80 and 443 are required for stable operation (Let\u0027s Encrypt on 80, HTTPS/QUIC on 443).",
     "hysteria_renew_ssl":  "Renew SSL",
-  "hysteria_ssl_change_hint": "Changing the domain re-issues the Let's Encrypt certificate (port 80 must be free).",
+    "hysteria_ssl_change_hint":  "Changing the domain re-issues the Let\u0027s Encrypt certificate (port 80 must be free).",
     "hysteria_ssl_required":  "Domain and email are required for SSL",
-  "naiveproxy_desc": "NaiveProxy (stable) — HTTPS/HTTP2 via Caddy + forwardproxy, Let's Encrypt TLS. Client: use Karing. Do not use v2rayN; other clients untested.",
+    "naiveproxy_desc":  "NaiveProxy (stable) — HTTPS/HTTP2 via Caddy + forwardproxy, Let\u0027s Encrypt TLS. Client: use Karing. Do not use v2rayN; other clients untested.",
     "naiveproxy_domain":  "Domain",
-  "naiveproxy_email": "Let's Encrypt email",
+    "naiveproxy_email":  "Let\u0027s Encrypt email",
     "naiveproxy_port_hint":  "TCP port 443 is fixed for NaiveProxy. Port 80/TCP must be free for certificate issuance.",
-  "naiveproxy_install_hint": "Point the domain A-record to this server before install. Free TCP ports 80 and 443 are required (Let's Encrypt and HTTPS proxy).",
+    "naiveproxy_install_hint":  "Point the domain A-record to this server before install. Free TCP ports 80 and 443 are required (Let\u0027s Encrypt and HTTPS proxy).",
     "naiveproxy_dns_hint":  "Create this DNS record before installation:",
-  "naiveproxy_ports_warning": "Warning: free TCP ports 80 and 443 are required for stable operation (Let's Encrypt on 80, HTTPS proxy on 443).",
+    "naiveproxy_ports_warning":  "Warning: free TCP ports 80 and 443 are required for stable operation (Let\u0027s Encrypt on 80, HTTPS proxy on 443).",
     "naiveproxy_client_hint":  "Stable build. Do NOT use v2rayN. Confirmed working in Karing. Other clients are untested.",
     "server_ssl_domain":  "SSL domain (default)",
     "server_ssl_email":  "SSL email (default)",
-  "server_ssl_hint": "Used when installing Hysteria / NGINX on this server (Let's Encrypt).",
+    "server_ssl_hint":  "Used when installing Hysteria / NGINX on this server (Let\u0027s Encrypt).",
     "container_logs":  "Container logs",
     "logs_btn":  "📋 Logs",
     "logs_live":  "Live",
@@ -433,7 +433,7 @@
     "ping_checking":  "Checking connectivity...",
     "offline":  "offline",
     "api_tokens_title":  "API tokens",
-  "api_tokens_hint": "Bearer tokens for external integrations. Send the token in the `Authorization: Bearer <token>` header. Tokens have admin-equivalent rights and stop working if their owner is disabled or demoted.",
+    "api_tokens_hint":  "Bearer tokens for external integrations. Send the token in the `Authorization: Bearer \u003ctoken\u003e` header. Tokens have admin-equivalent rights and stop working if their owner is disabled or demoted.",
     "api_tokens_empty":  "No API tokens yet. Create one to integrate the panel with an external service.",
     "api_tokens_create":  "Create token",
     "api_tokens_create_title":  "Create API token",
@@ -443,8 +443,8 @@
     "api_tokens_name_required":  "Token name is required",
     "api_tokens_created_title":  "Token created",
     "api_tokens_value_label":  "Token value",
-  "api_tokens_warning_title": "This is the only time you'll see this token.",
+    "api_tokens_warning_title":  "This is the only time you\u0027ll see this token.",
-  "api_tokens_warning_body": "Copy it now and store it in your integration's secret manager. The panel keeps only a hash — if you lose this value you'll need to revoke and recreate the token.",
+    "api_tokens_warning_body":  "Copy it now and store it in your integration\u0027s secret manager. The panel keeps only a hash — if you lose this value you\u0027ll need to revoke and recreate the token.",
     "api_tokens_revoke":  "Revoke",
     "api_tokens_revoke_confirm":  "Revoke token \"{}\"? Any integration using it will stop working.",
     "api_tokens_revoked":  "Token revoked",
@@ -474,7 +474,7 @@
     "cert_text_label":  "Certificate content (CRT)",
     "key_text_label":  "Private Key content (KEY)",
     "ssl_hint":  "After enabling, the panel will be accessible via https:// on the specified domain. Make sure the file paths or text data are correct.",
-  "about_title": "About & Updates",
+    "about_title":  "About \u0026 Updates",
     "current_version":  "Current version",
     "check_updates":  "Check for updates",
     "checking_updates":  "Checking...",
@@ -519,10 +519,10 @@
     "port_next_instance_hint":  "Choose a free UDP port for the additional instance.",
     "checking_server":  "Checking server services...",
     "web_servers":  "Web servers",
-  "nginx_desc": "NGINX web server with Let's Encrypt HTTPS certificate and editable index.html.",
+    "nginx_desc":  "NGINX web server with Let\u0027s Encrypt HTTPS certificate and editable index.html.",
     "nginx_domain":  "Domain",
-  "nginx_email": "Let's Encrypt email",
+    "nginx_email":  "Let\u0027s Encrypt email",
-  "nginx_port_hint": "HTTPS port exposed on the server. Port 80/TCP must be free and reachable for Let's Encrypt validation.",
+    "nginx_port_hint":  "HTTPS port exposed on the server. Port 80/TCP must be free and reachable for Let\u0027s Encrypt validation.",
     "nginx_install_hint":  "The domain must already point to this server. Port 80/TCP is used temporarily/permanently for HTTP-01 certificate validation.",
     "site":  "Site",
     "site_editor":  "Site editor",

translations/fa.json

@@ -340,9 +340,9 @@
     "clear_server":  "پاک‌سازی سرور",
     "remove_server":  "حذف سرور از پنل",
     "telemt_desc":  "پروکسی تلگرام بر پایه‌ی MTProxy با پوشش‌های پیشرفته.",
-  "hysteria_desc": "Hysteria 2 (QUIC/UDP) با تصویر رسمی tobyxdd/hysteria (apernet/hysteria) و TLS از Let's Encrypt. دامنه را ادمین هنگام نصب مشخص می‌کند.",
+    "hysteria_desc":  "Hysteria 2 (QUIC/UDP) با تصویر رسمی tobyxdd/hysteria (apernet/hysteria) و TLS از Let\u0027s Encrypt. دامنه را ادمین هنگام نصب مشخص می‌کند.",
     "hysteria_domain":  "دامنه",
-  "hysteria_email": "ایمیل Let's Encrypt",
+    "hysteria_email":  "ایمیل Let\u0027s Encrypt",
     "hysteria_port_hint":  "پورت UDP برای Hysteria (پیش‌فرض 8998). اگر 443 اشغال است پورت دیگری بگذارید.",
     "hysteria_install_hint":  "قبل از نصب، رکورد A دامنه باید به این سرور اشاره کند. BBR و obfuscation salamander به‌صورت خودکار فعال می‌شوند.",
     "hysteria_dns_hint":  "قبل از نصب این رکورد DNS را بسازید:",
@@ -350,21 +350,21 @@
     "hysteria_change_port":  "تغییر پورت",
     "hysteria_port_change_hint":  "پورت UDP. اگر address already in use دیدید، پورت آزاد بگذارید (8443 یا 8998).",
     "hysteria_settings_saved":  "پورت Hysteria به‌روز شد",
-  "hysteria_ports_warning": "هشدار: برای کار پایدار پورت‌های TCP آزاد ۸۰ و ۴۴۳ لازم است (Let's Encrypt روی ۸۰، HTTPS/QUIC روی ۴۴۳).",
+    "hysteria_ports_warning":  "هشدار: برای کار پایدار پورت‌های TCP آزاد ۸۰ و ۴۴۳ لازم است (Let\u0027s Encrypt روی ۸۰، HTTPS/QUIC روی ۴۴۳).",
     "hysteria_renew_ssl":  "تمدید SSL",
-  "hysteria_ssl_change_hint": "تغییر دامنه گواهی Let's Encrypt را دوباره صادر می‌کند (پورت ۸۰ باید آزاد باشد).",
+    "hysteria_ssl_change_hint":  "تغییر دامنه گواهی Let\u0027s Encrypt را دوباره صادر می‌کند (پورت ۸۰ باید آزاد باشد).",
     "hysteria_ssl_required":  "برای SSL دامنه و ایمیل لازم است",
-  "naiveproxy_desc": "NaiveProxy (پایدار) — HTTPS/HTTP2 با Caddy + forwardproxy و TLS از Let's Encrypt. کلاینت: Karing. از v2rayN استفاده نکنید؛ بقیه آزمایش نشده‌اند.",
+    "naiveproxy_desc":  "NaiveProxy (پایدار) — HTTPS/HTTP2 با Caddy + forwardproxy و TLS از Let\u0027s Encrypt. کلاینت: Karing. از v2rayN استفاده نکنید؛ بقیه آزمایش نشده‌اند.",
     "naiveproxy_domain":  "دامنه",
-  "naiveproxy_email": "ایمیل Let's Encrypt",
+    "naiveproxy_email":  "ایمیل Let\u0027s Encrypt",
     "naiveproxy_port_hint":  "پورت TCP 443 برای NaiveProxy ثابت است. پورت 80/TCP باید برای صدور گواهی آزاد باشد.",
-  "naiveproxy_install_hint": "قبل از نصب، رکورد A دامنه باید به این سرور اشاره کند. پورت‌های TCP آزاد ۸۰ و ۴۴۳ لازم است (Let's Encrypt و پروکسی HTTPS).",
+    "naiveproxy_install_hint":  "قبل از نصب، رکورد A دامنه باید به این سرور اشاره کند. پورت‌های TCP آزاد ۸۰ و ۴۴۳ لازم است (Let\u0027s Encrypt و پروکسی HTTPS).",
     "naiveproxy_dns_hint":  "قبل از نصب این رکورد DNS را بسازید:",
-  "naiveproxy_ports_warning": "هشدار: برای کار پایدار پورت‌های TCP آزاد ۸۰ و ۴۴۳ لازم است (Let's Encrypt روی ۸۰، پروکسی HTTPS روی ۴۴۳).",
+    "naiveproxy_ports_warning":  "هشدار: برای کار پایدار پورت‌های TCP آزاد ۸۰ و ۴۴۳ لازم است (Let\u0027s Encrypt روی ۸۰، پروکسی HTTPS روی ۴۴۳).",
     "naiveproxy_client_hint":  "نسخه پایدار. از v2rayN استفاده نکنید. در Karing تأیید شده. سایر کلاینت‌ها آزمایش نشده‌اند.",
     "server_ssl_domain":  "دامنه SSL (پیش‌فرض)",
     "server_ssl_email":  "ایمیل SSL (پیش‌فرض)",
-  "server_ssl_hint": "هنگام نصب Hysteria / NGINX روی این سرور استفاده می‌شود (Let's Encrypt).",
+    "server_ssl_hint":  "هنگام نصب Hysteria / NGINX روی این سرور استفاده می‌شود (Let\u0027s Encrypt).",
     "container_logs":  "لاگ‌های کانتینر",
     "logs_btn":  "📋 Logs",
     "logs_live":  "زنده",
@@ -409,7 +409,7 @@
     "ping_checking":  "Checking connectivity...",
     "offline":  "offline",
     "api_tokens_title":  "API tokens",
-  "api_tokens_hint": "Bearer tokens for external integrations. Send the token in the `Authorization: Bearer <token>` header. Tokens have admin-equivalent rights and stop working if their owner is disabled or demoted.",
+    "api_tokens_hint":  "Bearer tokens for external integrations. Send the token in the `Authorization: Bearer \u003ctoken\u003e` header. Tokens have admin-equivalent rights and stop working if their owner is disabled or demoted.",
     "api_tokens_empty":  "No API tokens yet. Create one to integrate the panel with an external service.",
     "api_tokens_create":  "Create token",
     "api_tokens_create_title":  "Create API token",
@@ -419,8 +419,8 @@
     "api_tokens_name_required":  "Token name is required",
     "api_tokens_created_title":  "Token created",
     "api_tokens_value_label":  "Token value",
-  "api_tokens_warning_title": "This is the only time you'll see this token.",
+    "api_tokens_warning_title":  "This is the only time you\u0027ll see this token.",
-  "api_tokens_warning_body": "Copy it now and store it in your integration's secret manager. The panel keeps only a hash — if you lose this value you'll need to revoke and recreate the token.",
+    "api_tokens_warning_body":  "Copy it now and store it in your integration\u0027s secret manager. The panel keeps only a hash — if you lose this value you\u0027ll need to revoke and recreate the token.",
     "api_tokens_revoke":  "Revoke",
     "api_tokens_revoke_confirm":  "Revoke token \"{}\"? Any integration using it will stop working.",
     "api_tokens_revoked":  "Token revoked",
@@ -470,10 +470,10 @@
     "new_instance":  "new instance",
     "port_next_instance_hint":  "Choose a free UDP port for the additional instance.",
     "web_servers":  "Web servers",
-  "nginx_desc": "NGINX web server with Let's Encrypt HTTPS certificate and editable index.html.",
+    "nginx_desc":  "NGINX web server with Let\u0027s Encrypt HTTPS certificate and editable index.html.",
     "nginx_domain":  "Domain",
-  "nginx_email": "Let's Encrypt email",
+    "nginx_email":  "Let\u0027s Encrypt email",
-  "nginx_port_hint": "HTTPS port exposed on the server. Port 80/TCP must be free and reachable for Let's Encrypt validation.",
+    "nginx_port_hint":  "HTTPS port exposed on the server. Port 80/TCP must be free and reachable for Let\u0027s Encrypt validation.",
     "nginx_install_hint":  "The domain must already point to this server. Port 80/TCP is used for HTTP-01 certificate validation.",
     "site":  "Site",
     "site_editor":  "Site editor",

translations/fr.json

@@ -1,7 +1,7 @@
 {
     "nav_servers":  "Serveurs",
     "nav_users":  "Utilisateurs",
-  "nav_invites": "Liens d'invitation",
+    "nav_invites":  "Liens d\u0027invitation",
     "nav_settings":  "Paramètres",
     "nav_connections":  "Connexions",
     "nav_logout":  "Déconnexion",
@@ -56,7 +56,7 @@
     "error":  "Erreur",
     "info":  "Info",
     "login_title":  "Connexion au Panneau",
-  "username": "Nom d'utilisateur",
+    "username":  "Nom d\u0027utilisateur",
     "password":  "Mot de passe",
     "captcha":  "Captcha",
     "captcha_placeholder":  "Entrez les caractères",
@@ -79,8 +79,8 @@
     "no_connections":  "Aucune connexion",
     "no_connections_desc":  "Ajoutez votre première connexion pour générer un fichier VPN",
     "install_protocol":  "Installer le protocole",
-  "port_default_hint": "Port par défaut : 55424. Assurez-vous qu'il est libre.",
+    "port_default_hint":  "Port par défaut : 55424. Assurez-vous qu\u0027il est libre.",
-  "port_xray_hint": "Port recommandé : 443. Assurez-vous qu'il n'est pas utilisé par un serveur web.",
+    "port_xray_hint":  "Port recommandé : 443. Assurez-vous qu\u0027il n\u0027est pas utilisé par un serveur web.",
     "reinstall":  "Réinstaller",
     "uninstall_confirm":  "Désinstaller {} ? Toutes les données seront perdues.",
     "stop_container_confirm":  "Arrêter le conteneur {} ?",
@@ -93,7 +93,7 @@
     "add_connection":  "Ajouter une connexion",
     "connection_name":  "Nom de la connexion",
     "connection_name_placeholder":  "Ex: iPhone, Laptop",
-  "assign_to_user": "Assigner à l'utilisateur (optionnel)",
+    "assign_to_user":  "Assigner à l\u0027utilisateur (optionnel)",
     "no_assign":  "— Aucune assignation —",
     "create":  "Créer",
     "creating":  "Création...",
@@ -107,19 +107,19 @@
     "download_conf":  "⬇ Télécharger .conf",
     "copy_key":  "📋 Copier la clé",
     "vpn_link_hint":  "Collez ce lien dans AmneziaVPN pour une config automatique",
-  "qr_hint": "Scannez le code QR dans l'application AmneziaVPN",
+    "qr_hint":  "Scannez le code QR dans l\u0027application AmneziaVPN",
     "no_data":  "Aucune donnée",
     "start_btn":  "▶ Start",
     "stop_btn":  "⏹ Stop",
     "config_btn":  "⚙️ Config",
     "done":  "Terminé",
     "installing":  "Installation...",
-  "start_install": "Début de l'installation...",
+    "start_install":  "Début de l\u0027installation...",
     "check_docker":  "Vérification de Docker...",
-  "prepare_host": "Préparation de l'hôte...",
+    "prepare_host":  "Préparation de l\u0027hôte...",
     "build_container":  "Construction du conteneur...",
     "install_success":  "Protocole installé avec succès !",
-  "install_error": "Erreur d'installation : ",
+    "install_error":  "Erreur d\u0027installation : ",
     "qr_error":  "Échec de génération du QR code",
     "users_title":  "Utilisateurs",
     "search_placeholder":  "Recherche par nom, email ou Telegram...",
@@ -130,7 +130,7 @@
     "loading_users":  "Chargement des utilisateurs...",
     "nothing_found":  "Rien trouvé",
     "search_empty_desc":  "Essayez une autre requête ou créez un utilisateur",
-  "username_label": "Nom d'utilisateur",
+    "username_label":  "Nom d\u0027utilisateur",
     "password_label":  "Mot de passe",
     "role_label":  "Rôle",
     "role_user_desc":  "User — voit ses propres connexions",
@@ -149,7 +149,7 @@
     "edit_user_email":  "Email (optionnel)",
     "edit_user_limit":  "Limite trafic (Go) (0 = illimité)",
     "new_password_hint":  "Nouveau mot de passe (laisser vide si inchangé)",
-  "op_type_label": "Type d'opération",
+    "op_type_label":  "Type d\u0027opération",
     "create_new_conn":  "Créer nouvelle connexion",
     "link_existing_conn":  "Lier existante",
     "select_existing_conn":  "Sélectionner connexion",
@@ -164,18 +164,18 @@
     "disabling":  "Désactivation",
     "user_enabled":  "Utilisateur activé",
     "user_disabled":  "Utilisateur désactivé",
-  "delete_user_confirm": "Supprimer l'utilisateur ? Ses connexions seront supprimées.",
+    "delete_user_confirm":  "Supprimer l\u0027utilisateur ? Ses connexions seront supprimées.",
-  "share_access": "Partager l'accès",
+    "share_access":  "Partager l\u0027accès",
-  "enable_public_access": "Activer l'accès public",
+    "enable_public_access":  "Activer l\u0027accès public",
     "share_password_label":  "Mot de passe (optionnel)",
-  "share_password_hint": "Si défini, requis pour l'accès",
+    "share_password_hint":  "Si défini, requis pour l\u0027accès",
     "guest_settings_title":  "Accès invité",
-  "guest_enable": "Activer l'accès invité (sans inscription)",
+    "guest_enable":  "Activer l\u0027accès invité (sans inscription)",
-  "guest_enable_hint": "Lien public sur la page de connexion. Les invités voient les connexions de l'utilisateur choisi.",
+    "guest_enable_hint":  "Lien public sur la page de connexion. Les invités voient les connexions de l\u0027utilisateur choisi.",
     "guest_link_label":  "Lien invité",
     "guest_link_placeholder":  "Enregistrez pour générer le lien",
     "guest_regen_token":  "Régénérer le lien",
-  "guest_regen_confirm": "Régénérer le lien invité ? L'ancien ne fonctionnera plus.",
+    "guest_regen_confirm":  "Régénérer le lien invité ? L\u0027ancien ne fonctionnera plus.",
     "guest_token_updated":  "Lien invité mis à jour",
     "guest_user_label":  "Utilisateur des connexions invitées",
     "guest_user_none":  "— Choisir —",
@@ -183,7 +183,7 @@
     "guest_password_label":  "Mot de passe invité (optionnel)",
     "guest_password_keep":  "Laisser vide pour conserver",
     "guest_clear_password":  "Retirer le mot de passe",
-  "guest_allow_create": "Autoriser la création d'une config",
+    "guest_allow_create":  "Autoriser la création d\u0027une config",
     "guest_access_btn":  "Continuer en invité",
     "guest_access_login_hint":  "Sans compte",
     "guest_title":  "Accès invité",
@@ -194,15 +194,15 @@
     "guest_not_found":  "404 Introuvable",
     "guest_not_found_desc":  "Accès invité désactivé ou lien invalide.",
     "wrong_guest_password":  "Mauvais mot de passe",
-  "invites_title": "Liens d'invitation",
+    "invites_title":  "Liens d\u0027invitation",
-  "invites_hint": "Créez des liens partageables. Le destinataire peut créer une config VPN — vous fixez le nombre d'utilisations.",
+    "invites_hint":  "Créez des liens partageables. Le destinataire peut créer une config VPN — vous fixez le nombre d\u0027utilisations.",
     "invites_empty":  "Aucun lien",
     "invites_empty_desc":  "Créez un lien à partager — sans inscription.",
     "invite_create":  "Créer un lien",
     "invite_edit":  "Modifier le lien",
     "invite_active":  "Actif",
     "invite_expired":  "Expiré",
-  "invite_exhausted": "Plus d'utilisations",
+    "invite_exhausted":  "Plus d\u0027utilisations",
     "invite_uses":  "Utilisations",
     "invite_name_label":  "Nom du lien",
     "invite_max_uses_label":  "Configs max",
@@ -213,13 +213,13 @@
     "invite_password_label":  "Mot de passe (optionnel)",
     "invite_expires_label":  "Expiration (optionnel)",
     "invite_duration_label":  "Durée du config (jours)",
-  "invite_duration_hint": "Commence quand l'utilisateur clique Obtenir. 0 = illimité.",
+    "invite_duration_hint":  "Commence quand l\u0027utilisateur clique Obtenir. 0 = illimité.",
     "invite_duration_short":  "Durée",
     "invite_duration_starts_hint":  "Après obtention, valable {} jour(s)",
-  "invite_config_expires_at": "Valable jusqu'au : {}",
+    "invite_config_expires_at":  "Valable jusqu\u0027au : {}",
     "invite_sub_tab":  "Abonnement",
     "days_short":  "j",
-  "invite_clear_expires": "Retirer l'expiration",
+    "invite_clear_expires":  "Retirer l\u0027expiration",
     "invite_note_label":  "Note (admin)",
     "invite_note_placeholder":  "Commentaire interne",
     "invite_reset_used":  "Réinitialiser le compteur",
@@ -255,7 +255,7 @@
     "bot_start_btn":  "▶️ Démarrer",
     "bot_hint":  "Sauvegardez après modification du token. Le bot redémarrera.",
     "api_docs_title":  "🔌 Documentation API",
-  "api_docs_hint": "Utilisez ces interfaces pour explorer l'API",
+    "api_docs_hint":  "Utilisez ces interfaces pour explorer l\u0027API",
     "tunnels_title":  "Tunnels",
     "local_server":  "Serveur local",
     "tunnel_install_enable":  "Installer et activer",
@@ -269,8 +269,8 @@
     "tunnel_delete_confirm":  "Arrêter et supprimer ce binaire de tunnel géré par le panneau ?",
     "tunnel_starting":  "Démarrage du tunnel...",
     "tunnel_started":  "Tunnel démarré",
-  "tunnel_waiting_url": "Tunnel démarré. En attente de l'URL publique...",
+    "tunnel_waiting_url":  "Tunnel démarré. En attente de l\u0027URL publique...",
-  "tunnel_no_public_url": "L'URL publique apparaîtra ici après le démarrage du tunnel.",
+    "tunnel_no_public_url":  "L\u0027URL publique apparaîtra ici après le démarrage du tunnel.",
     "tunnels_hint":  "Les tunnels rapides exposent ce panneau local sur Internet. Gardez des identifiants administrateur robustes et partagez les URL publiques uniquement avec des utilisateurs de confiance.",
     "ngrok_authtoken_placeholder":  "ngrok authtoken (optionnel pour certains comptes)",
     "import_users_title":  "📤 Import Utilisateurs",
@@ -294,7 +294,7 @@
     "deleting":  "Suppression...",
     "my_connections_title":  "Mes Connexions",
     "show_config":  "📄 Voir config",
-  "no_connections_user_desc": "Contactez l'admin pour une connexion",
+    "no_connections_user_desc":  "Contactez l\u0027admin pour une connexion",
     "share_title":  "Accès Connexion",
     "vpn_access":  "Accès VPN",
     "user_label_share":  "Utilisateur",
@@ -313,7 +313,7 @@
     "invalid_captcha":  "Captcha invalide",
     "account_disabled":  "Compte désactivé",
     "invalid_login":  "Login ou password incorrect",
-  "user_exists": "L'utilisateur existe déjà",
+    "user_exists":  "L\u0027utilisateur existe déjà",
     "cannot_delete_self":  "Vous ne pouvez pas vous supprimer",
     "wrong_share_password":  "Mauvais mot de passe",
     "saving":  "Enregistrement...",
@@ -326,11 +326,11 @@
     "backup_title":  "Sauvegarde Simple",
     "download_backup":  "Télécharger data.json",
     "restore_backup":  "Restaurer depuis un fichier",
-  "restore_confirm": "Êtes-vous sûr ? Les données actuelles seront écrasées et l'application redémarrera.",
+    "restore_confirm":  "Êtes-vous sûr ? Les données actuelles seront écrasées et l\u0027application redémarrera.",
     "restore_success":  "Restauration réussie ! Redémarrage...",
     "invalid_backup_file":  "Fichier de sauvegarde ou structure invalide",
     "config_unavailable":  "Configuration indisponible",
-  "config_unavailable_desc": "Ce client a été créé via l'application native Amnezia.\\nLa clé privée est stockée uniquement sur l'appareil de l'utilisateur et ne peut pas être récupérée par le serveur.",
+    "config_unavailable_desc":  "Ce client a été créé via l\u0027application native Amnezia.\\nLa clé privée est stockée uniquement sur l\u0027appareil de l\u0027utilisateur et ne peut pas être récupérée par le serveur.",
     "client_public_key":  "Clé publique du client :",
     "management":  "Gestion",
     "server_management":  "Gestion du serveur",
@@ -340,31 +340,31 @@
     "clear_server":  "Réinitialiser le serveur",
     "remove_server":  "Retirer le serveur du panneau",
     "telemt_desc":  "Proxy Telegram basé sur MTProxy avec obfuscation avancée.",
-  "hysteria_desc": "Hysteria 2 (QUIC/UDP) via l'image officielle tobyxdd/hysteria (apernet/hysteria) avec TLS Let's Encrypt. Le domaine est défini par l'admin à l'installation.",
+    "hysteria_desc":  "Hysteria 2 (QUIC/UDP) via l\u0027image officielle tobyxdd/hysteria (apernet/hysteria) avec TLS Let\u0027s Encrypt. Le domaine est défini par l\u0027admin à l\u0027installation.",
     "hysteria_domain":  "Domaine",
-  "hysteria_email": "Email Let's Encrypt",
+    "hysteria_email":  "Email Let\u0027s Encrypt",
-  "hysteria_port_hint": "Port UDP pour Hysteria (8998 par défaut). Évitez 443 s'il est déjà pris.",
+    "hysteria_port_hint":  "Port UDP pour Hysteria (8998 par défaut). Évitez 443 s\u0027il est déjà pris.",
-  "hysteria_install_hint": "L'enregistrement A du domaine doit pointer vers ce serveur. BBR et obfuscation salamander sont activés automatiquement.",
+    "hysteria_install_hint":  "L\u0027enregistrement A du domaine doit pointer vers ce serveur. BBR et obfuscation salamander sont activés automatiquement.",
-  "hysteria_dns_hint": "Créez cet enregistrement DNS avant l'installation :",
+    "hysteria_dns_hint":  "Créez cet enregistrement DNS avant l\u0027installation :",
     "hysteria_settings_title":  "Paramètres Hysteria",
     "hysteria_change_port":  "Changer le port",
     "hysteria_port_change_hint":  "Port UDP. Si « address already in use », choisissez un port libre (8443 ou 8998).",
     "hysteria_settings_saved":  "Port Hysteria mis à jour",
-  "hysteria_ports_warning": "Attention : les ports TCP 80 et 443 doivent être libres pour un fonctionnement stable (Let's Encrypt sur 80, HTTPS/QUIC sur 443).",
+    "hysteria_ports_warning":  "Attention : les ports TCP 80 et 443 doivent être libres pour un fonctionnement stable (Let\u0027s Encrypt sur 80, HTTPS/QUIC sur 443).",
     "hysteria_renew_ssl":  "Renouveler SSL",
-  "hysteria_ssl_change_hint": "Changer le domaine réémet le certificat Let's Encrypt (le port 80 doit être libre).",
+    "hysteria_ssl_change_hint":  "Changer le domaine réémet le certificat Let\u0027s Encrypt (le port 80 doit être libre).",
     "hysteria_ssl_required":  "Domaine et email requis pour SSL",
-  "naiveproxy_desc": "NaiveProxy (stable) — HTTPS/HTTP2 via Caddy + forwardproxy, TLS Let's Encrypt. Client : utilisez Karing. N'utilisez pas v2rayN ; autres clients non testés.",
+    "naiveproxy_desc":  "NaiveProxy (stable) — HTTPS/HTTP2 via Caddy + forwardproxy, TLS Let\u0027s Encrypt. Client : utilisez Karing. N\u0027utilisez pas v2rayN ; autres clients non testés.",
     "naiveproxy_domain":  "Domaine",
-  "naiveproxy_email": "Email Let's Encrypt",
+    "naiveproxy_email":  "Email Let\u0027s Encrypt",
-  "naiveproxy_port_hint": "Le port TCP 443 est fixe pour NaiveProxy. Le port 80/TCP doit être libre pour l'émission du certificat.",
+    "naiveproxy_port_hint":  "Le port TCP 443 est fixe pour NaiveProxy. Le port 80/TCP doit être libre pour l\u0027émission du certificat.",
-  "naiveproxy_install_hint": "L'enregistrement A du domaine doit pointer vers ce serveur. Les ports TCP 80 et 443 doivent être libres (Let's Encrypt et proxy HTTPS).",
+    "naiveproxy_install_hint":  "L\u0027enregistrement A du domaine doit pointer vers ce serveur. Les ports TCP 80 et 443 doivent être libres (Let\u0027s Encrypt et proxy HTTPS).",
-  "naiveproxy_dns_hint": "Créez cet enregistrement DNS avant l'installation :",
+    "naiveproxy_dns_hint":  "Créez cet enregistrement DNS avant l\u0027installation :",
-  "naiveproxy_ports_warning": "Attention : les ports TCP 80 et 443 doivent être libres pour un fonctionnement stable (Let's Encrypt sur 80, proxy HTTPS sur 443).",
+    "naiveproxy_ports_warning":  "Attention : les ports TCP 80 et 443 doivent être libres pour un fonctionnement stable (Let\u0027s Encrypt sur 80, proxy HTTPS sur 443).",
-  "naiveproxy_client_hint": "Version stable. N'utilisez PAS v2rayN. Fonctionne avec Karing. Autres clients non testés.",
+    "naiveproxy_client_hint":  "Version stable. N\u0027utilisez PAS v2rayN. Fonctionne avec Karing. Autres clients non testés.",
     "server_ssl_domain":  "Domaine SSL (par défaut)",
     "server_ssl_email":  "Email SSL (par défaut)",
-  "server_ssl_hint": "Utilisé lors de l'installation de Hysteria / NGINX sur ce serveur (Let's Encrypt).",
+    "server_ssl_hint":  "Utilisé lors de l\u0027installation de Hysteria / NGINX sur ce serveur (Let\u0027s Encrypt).",
     "container_logs":  "Logs du conteneur",
     "logs_btn":  "📋 Logs",
     "logs_live":  "Temps réel",
@@ -409,7 +409,7 @@
     "ping_checking":  "Checking connectivity...",
     "offline":  "offline",
     "api_tokens_title":  "API tokens",
-  "api_tokens_hint": "Bearer tokens for external integrations. Send the token in the `Authorization: Bearer <token>` header. Tokens have admin-equivalent rights and stop working if their owner is disabled or demoted.",
+    "api_tokens_hint":  "Bearer tokens for external integrations. Send the token in the `Authorization: Bearer \u003ctoken\u003e` header. Tokens have admin-equivalent rights and stop working if their owner is disabled or demoted.",
     "api_tokens_empty":  "No API tokens yet. Create one to integrate the panel with an external service.",
     "api_tokens_create":  "Create token",
     "api_tokens_create_title":  "Create API token",
@@ -419,8 +419,8 @@
     "api_tokens_name_required":  "Token name is required",
     "api_tokens_created_title":  "Token created",
     "api_tokens_value_label":  "Token value",
-  "api_tokens_warning_title": "This is the only time you'll see this token.",
+    "api_tokens_warning_title":  "This is the only time you\u0027ll see this token.",
-  "api_tokens_warning_body": "Copy it now and store it in your integration's secret manager. The panel keeps only a hash — if you lose this value you'll need to revoke and recreate the token.",
+    "api_tokens_warning_body":  "Copy it now and store it in your integration\u0027s secret manager. The panel keeps only a hash — if you lose this value you\u0027ll need to revoke and recreate the token.",
     "api_tokens_revoke":  "Revoke",
     "api_tokens_revoke_confirm":  "Revoke token \"{}\"? Any integration using it will stop working.",
     "api_tokens_revoked":  "Token revoked",
@@ -470,10 +470,10 @@
     "new_instance":  "new instance",
     "port_next_instance_hint":  "Choose a free UDP port for the additional instance.",
     "web_servers":  "Serveurs web",
-  "nginx_desc": "Serveur web NGINX avec certificat HTTPS Let's Encrypt et index.html modifiable.",
+    "nginx_desc":  "Serveur web NGINX avec certificat HTTPS Let\u0027s Encrypt et index.html modifiable.",
     "nginx_domain":  "Domaine",
-  "nginx_email": "Email Let's Encrypt",
+    "nginx_email":  "Email Let\u0027s Encrypt",
-  "nginx_port_hint": "Port HTTPS exposé sur le serveur. Le port 80/TCP doit être libre et accessible pour la validation Let's Encrypt.",
+    "nginx_port_hint":  "Port HTTPS exposé sur le serveur. Le port 80/TCP doit être libre et accessible pour la validation Let\u0027s Encrypt.",
     "nginx_install_hint":  "Le domaine doit déjà pointer vers ce serveur. Le port 80/TCP est utilisé pour la validation HTTP-01 du certificat.",
     "site":  "Site",
     "site_editor":  "Éditeur du site",
@@ -488,17 +488,17 @@
     "no_backups":  "No backups yet",
     "no_backups_desc":  "Create the first backup for this protocol.",
     "refresh":  "Refresh",
-  "guest_allow_create_hint": "Crée une config pour l'utilisateur invité (3x-ui VLESS ou protocole serveur).",
+    "guest_allow_create_hint":  "Crée une config pour l\u0027utilisateur invité (3x-ui VLESS ou protocole serveur).",
-  "invite_inbound_hint": "Choisissez l'inbound VLESS une fois",
+    "invite_inbound_hint":  "Choisissez l\u0027inbound VLESS une fois",
     "invite_inbound_loading":  "Chargement…",
     "invite_inbound_empty":  "Aucun inbound VLESS",
-  "invite_inbound_need_xui": "Configurez 3x-ui d'abord",
+    "invite_inbound_need_xui":  "Configurez 3x-ui d\u0027abord",
     "invite_inbound_required":  "Sélectionnez un inbound VLESS",
-  "invite_sub_url_missing_title": "URL d'abonnement manquante",
+    "invite_sub_url_missing_title":  "URL d\u0027abonnement manquante",
-  "invite_sub_url_missing_hint": "Dans Paramètres → 3x-ui, définissez l'URL de base /sub.",
+    "invite_sub_url_missing_hint":  "Dans Paramètres → 3x-ui, définissez l\u0027URL de base /sub.",
     "xui_url_label":  "URL 3x-ui",
     "xui_url_hint":  "Inclure le schéma, le port et webBasePath si configuré",
-  "xui_sub_url_label": "URL de base d'abonnement",
+    "xui_sub_url_label":  "URL de base d\u0027abonnement",
     "xui_sub_url_hint":  "Base /sub publique sans slash final (ex: https://host:2096/sub).",
     "xui_api_token_label":  "Jeton API (préféré)",
     "xui_api_token_placeholder":  "Settings → Security → API Token",
@@ -508,15 +508,15 @@
     "xui_sync_hint":  "Les clients 3x-ui deviennent des utilisateurs du panneau (liés par email)",
     "xui_inbound_label":  "Inbound VLESS",
     "xui_inbound_auto":  "Auto (premier inbound VLESS)",
-  "xui_inbound_hint": "Utilisé pour créer des configs 3x-ui VLESS. Créez d'abord un inbound VLESS dans 3x-ui.",
+    "xui_inbound_hint":  "Utilisé pour créer des configs 3x-ui VLESS. Créez d\u0027abord un inbound VLESS dans 3x-ui.",
     "xui_servers_title":  "Serveurs 3x-ui",
-  "xui_servers_hint": "Ajoutez plusieurs panneaux 3x-ui. À la création, choisissez le serveur par nom — son URL d'abonnement est utilisée.",
+    "xui_servers_hint":  "Ajoutez plusieurs panneaux 3x-ui. À la création, choisissez le serveur par nom — son URL d\u0027abonnement est utilisée.",
     "xui_servers_empty":  "Aucun serveur 3x-ui. Cliquez sur Ajouter.",
-  "xui_servers_manage_hint": "Les URL et bases d'abonnement se gèrent dans la section « Serveurs 3x-ui » ci-dessous.",
+    "xui_servers_manage_hint":  "Les URL et bases d\u0027abonnement se gèrent dans la section « Serveurs 3x-ui » ci-dessous.",
     "xui_server_add":  "Ajouter un serveur",
     "xui_server_name_label":  "Nom / description",
     "xui_server_name_hint":  "Affiché dans les invitations (ex: US, NL).",
     "xui_server_select_label":  "Serveur 3x-ui",
-  "xui_server_select_hint": "Choisissez le panneau 3x-ui qui émettra l'URL d'abonnement.",
+    "xui_server_select_hint":  "Choisissez le panneau 3x-ui qui émettra l\u0027URL d\u0027abonnement.",
     "xui_server_delete_confirm":  "Supprimer ce serveur 3x-ui ?"
 }

translations/ru.json

@@ -350,31 +350,31 @@
     "config_unavailable_desc":  "Этот клиент был создан через нативное приложение Amnezia.\\nПриватный ключ хранится только на устройстве пользователя и не может быть восстановлен сервером.",
     "client_public_key":  "Публичный ключ клиента:",
     "telemt_desc":  "Прокси для Telegram на базе MTProxy с продвинутой обфускацией и эмуляцией TLS.",
-  "hysteria_desc": "Hysteria 2 (QUIC/UDP) на официальном образе tobyxdd/hysteria (apernet/hysteria) с TLS от Let's Encrypt. Домен указывает админ при установке.",
+    "hysteria_desc":  "Hysteria 2 (QUIC/UDP) на официальном образе tobyxdd/hysteria (apernet/hysteria) с TLS от Let\u0027s Encrypt. Домен указывает админ при установке.",
     "hysteria_domain":  "Домен",
-  "hysteria_email": "Email для Let's Encrypt",
+    "hysteria_email":  "Email для Let\u0027s Encrypt",
     "hysteria_port_hint":  "UDP-порт Hysteria (по умолчанию 8998). Не ставьте 443, если он уже занят nginx/xray. Порт 80/TCP должен быть свободен для выпуска сертификата.",
-  "hysteria_install_hint": "Перед установкой A-запись домена должна указывать на этот сервер. Порт 80/TCP временно используется для HTTP-01 проверки Let's Encrypt. BBR и obfuscation salamander включаются автоматически.",
+    "hysteria_install_hint":  "Перед установкой A-запись домена должна указывать на этот сервер. Порт 80/TCP временно используется для HTTP-01 проверки Let\u0027s Encrypt. BBR и obfuscation salamander включаются автоматически.",
     "hysteria_dns_hint":  "Перед установкой создайте DNS-запись:",
     "hysteria_settings_title":  "Настройки Hysteria",
     "hysteria_change_port":  "Сменить порт",
     "hysteria_port_change_hint":  "UDP-порт прослушивания. Если ошибка «address already in use» — выберите свободный порт (8443 или 8998), сохраните и заново импортируйте ссылку в клиент.",
     "hysteria_settings_saved":  "Настройки Hysteria обновлены",
-  "hysteria_ports_warning": "Внимание: для стабильной работы нужны свободные TCP-порты 80 и 443 (Let's Encrypt на 80, HTTPS/QUIC на 443).",
+    "hysteria_ports_warning":  "Внимание: для стабильной работы нужны свободные TCP-порты 80 и 443 (Let\u0027s Encrypt на 80, HTTPS/QUIC на 443).",
     "hysteria_renew_ssl":  "Обновить SSL",
-  "hysteria_ssl_change_hint": "Смена домена заново выпускает сертификат Let's Encrypt (порт 80 должен быть свободен).",
+    "hysteria_ssl_change_hint":  "Смена домена заново выпускает сертификат Let\u0027s Encrypt (порт 80 должен быть свободен).",
     "hysteria_ssl_required":  "Для SSL нужны домен и email",
-  "naiveproxy_desc": "NaiveProxy (стабильный) — HTTPS/HTTP2 через Caddy + forwardproxy, TLS Let's Encrypt. Клиент: используйте Karing. Не используйте v2rayN; остальные клиенты под вопросом.",
+    "naiveproxy_desc":  "NaiveProxy (стабильный) — HTTPS/HTTP2 через Caddy + forwardproxy, TLS Let\u0027s Encrypt. Клиент: используйте Karing. Не используйте v2rayN; остальные клиенты под вопросом.",
     "naiveproxy_domain":  "Домен",
-  "naiveproxy_email": "Email для Let's Encrypt",
+    "naiveproxy_email":  "Email для Let\u0027s Encrypt",
     "naiveproxy_port_hint":  "TCP-порт 443 фиксирован для NaiveProxy. Порт 80/TCP должен быть свободен для выпуска сертификата.",
-  "naiveproxy_install_hint": "Перед установкой A-запись домена должна указывать на этот сервер. Нужны свободные TCP-порты 80 и 443 (Let's Encrypt и HTTPS-прокси).",
+    "naiveproxy_install_hint":  "Перед установкой A-запись домена должна указывать на этот сервер. Нужны свободные TCP-порты 80 и 443 (Let\u0027s Encrypt и HTTPS-прокси).",
     "naiveproxy_dns_hint":  "Перед установкой создайте DNS-запись:",
-  "naiveproxy_ports_warning": "Внимание: для стабильной работы нужны свободные TCP-порты 80 и 443 (Let's Encrypt на 80, HTTPS-прокси на 443).",
+    "naiveproxy_ports_warning":  "Внимание: для стабильной работы нужны свободные TCP-порты 80 и 443 (Let\u0027s Encrypt на 80, HTTPS-прокси на 443).",
     "naiveproxy_client_hint":  "Стабильная версия. НЕ используйте v2rayN. Точно работает в Karing. Остальные клиенты под вопросом.",
     "server_ssl_domain":  "SSL-домен (по умолчанию)",
     "server_ssl_email":  "SSL-email (по умолчанию)",
-  "server_ssl_hint": "Подставляется при установке Hysteria / NGINX на этом сервере (Let's Encrypt).",
+    "server_ssl_hint":  "Подставляется при установке Hysteria / NGINX на этом сервере (Let\u0027s Encrypt).",
     "container_logs":  "Логи контейнера",
     "logs_btn":  "📋 Логи",
     "logs_live":  "В реальном времени",
@@ -433,7 +433,7 @@
     "ping_checking":  "Проверяем соединение...",
     "offline":  "недоступен",
     "api_tokens_title":  "API-токены",
-  "api_tokens_hint": "Bearer-токены для внешних интеграций. Передавайте токен в заголовке `Authorization: Bearer <token>`. Токены имеют права администратора и перестают работать, если их владелец отключён или понижен в роли.",
+    "api_tokens_hint":  "Bearer-токены для внешних интеграций. Передавайте токен в заголовке `Authorization: Bearer \u003ctoken\u003e`. Токены имеют права администратора и перестают работать, если их владелец отключён или понижен в роли.",
     "api_tokens_empty":  "Пока нет ни одного API-токена. Создайте, чтобы подключить панель к внешнему сервису.",
     "api_tokens_create":  "Создать токен",
     "api_tokens_create_title":  "Создание API-токена",
@@ -519,10 +519,10 @@
     "port_next_instance_hint":  "Выберите свободный UDP-порт для дополнительного экземпляра.",
     "checking_server":  "Проверяем сервисы сервера...",
     "web_servers":  "Веб-серверы",
-  "nginx_desc": "NGINX веб-сервер с HTTPS-сертификатом Let's Encrypt и редактируемым index.html.",
+    "nginx_desc":  "NGINX веб-сервер с HTTPS-сертификатом Let\u0027s Encrypt и редактируемым index.html.",
     "nginx_domain":  "Домен",
-  "nginx_email": "Email для Let's Encrypt",
+    "nginx_email":  "Email для Let\u0027s Encrypt",
-  "nginx_port_hint": "HTTPS-порт на сервере. Порт 80/TCP должен быть свободен и доступен для проверки Let's Encrypt.",
+    "nginx_port_hint":  "HTTPS-порт на сервере. Порт 80/TCP должен быть свободен и доступен для проверки Let\u0027s Encrypt.",
     "nginx_install_hint":  "Домен уже должен указывать на этот сервер. Порт 80/TCP используется для HTTP-01 проверки сертификата.",
     "site":  "Сайт",
     "site_editor":  "Редактор сайта",

translations/zh.json

@@ -340,9 +340,9 @@
     "clear_server":  "清除服务器",
     "remove_server":  "从面板移除服务器",
     "telemt_desc":  "基于 MTProxy 的 Telegram 代理，支持高级混淆。",
-  "hysteria_desc": "Hysteria 2（QUIC/UDP，官方 tobyxdd/hysteria / apernet/hysteria），支持 Let's Encrypt TLS。安装时由管理员指定域名。",
+    "hysteria_desc":  "Hysteria 2（QUIC/UDP，官方 tobyxdd/hysteria / apernet/hysteria），支持 Let\u0027s Encrypt TLS。安装时由管理员指定域名。",
     "hysteria_domain":  "域名",
-  "hysteria_email": "Let's Encrypt 邮箱",
+    "hysteria_email":  "Let\u0027s Encrypt 邮箱",
     "hysteria_port_hint":  "Hysteria UDP 端口（默认 8998）。若 443 已被占用请换端口。",
     "hysteria_install_hint":  "安装前请将域名 A 记录指向本服务器。将自动启用 BBR 与 salamander 混淆。",
     "hysteria_dns_hint":  "安装前请创建此 DNS 记录：",
@@ -350,21 +350,21 @@
     "hysteria_change_port":  "更改端口",
     "hysteria_port_change_hint":  "UDP 监听端口。若提示 address already in use，请改用空闲端口（如 8443 或 8998）。",
     "hysteria_settings_saved":  "Hysteria 端口已更新",
-  "hysteria_ports_warning": "注意：稳定运行需要空闲的 TCP 端口 80 和 443（Let's Encrypt 使用 80，HTTPS/QUIC 使用 443）。",
+    "hysteria_ports_warning":  "注意：稳定运行需要空闲的 TCP 端口 80 和 443（Let\u0027s Encrypt 使用 80，HTTPS/QUIC 使用 443）。",
     "hysteria_renew_ssl":  "续签 SSL",
-  "hysteria_ssl_change_hint": "更改域名会重新签发 Let's Encrypt 证书（需空闲端口 80）。",
+    "hysteria_ssl_change_hint":  "更改域名会重新签发 Let\u0027s Encrypt 证书（需空闲端口 80）。",
     "hysteria_ssl_required":  "签发 SSL 需要域名和邮箱",
-  "naiveproxy_desc": "NaiveProxy（稳定）— Caddy + forwardproxy 的 HTTPS/HTTP2，Let's Encrypt TLS。客户端请用 Karing，不要用 v2rayN；其他客户端未测试。",
+    "naiveproxy_desc":  "NaiveProxy（稳定）— Caddy + forwardproxy 的 HTTPS/HTTP2，Let\u0027s Encrypt TLS。客户端请用 Karing，不要用 v2rayN；其他客户端未测试。",
     "naiveproxy_domain":  "域名",
-  "naiveproxy_email": "Let's Encrypt 邮箱",
+    "naiveproxy_email":  "Let\u0027s Encrypt 邮箱",
     "naiveproxy_port_hint":  "NaiveProxy 固定使用 TCP 443。签发证书需空闲 TCP 80。",
-  "naiveproxy_install_hint": "安装前请将域名 A 记录指向本服务器。需空闲 TCP 端口 80 和 443（Let's Encrypt 与 HTTPS 代理）。",
+    "naiveproxy_install_hint":  "安装前请将域名 A 记录指向本服务器。需空闲 TCP 端口 80 和 443（Let\u0027s Encrypt 与 HTTPS 代理）。",
     "naiveproxy_dns_hint":  "安装前请创建此 DNS 记录：",
-  "naiveproxy_ports_warning": "注意：稳定运行需要空闲的 TCP 端口 80 和 443（Let's Encrypt 使用 80，HTTPS 代理使用 443）。",
+    "naiveproxy_ports_warning":  "注意：稳定运行需要空闲的 TCP 端口 80 和 443（Let\u0027s Encrypt 使用 80，HTTPS 代理使用 443）。",
     "naiveproxy_client_hint":  "稳定版。请勿使用 v2rayN。已确认 Karing 可用。其他客户端未测试。",
     "server_ssl_domain":  "SSL 域名（默认）",
     "server_ssl_email":  "SSL 邮箱（默认）",
-  "server_ssl_hint": "安装 Hysteria / NGINX 时自动填入（Let's Encrypt）。",
+    "server_ssl_hint":  "安装 Hysteria / NGINX 时自动填入（Let\u0027s Encrypt）。",
     "container_logs":  "容器日志",
     "logs_btn":  "📋 日志",
     "logs_live":  "实时",
@@ -409,7 +409,7 @@
     "ping_checking":  "Checking connectivity...",
     "offline":  "offline",
     "api_tokens_title":  "API tokens",
-  "api_tokens_hint": "Bearer tokens for external integrations. Send the token in the `Authorization: Bearer <token>` header. Tokens have admin-equivalent rights and stop working if their owner is disabled or demoted.",
+    "api_tokens_hint":  "Bearer tokens for external integrations. Send the token in the `Authorization: Bearer \u003ctoken\u003e` header. Tokens have admin-equivalent rights and stop working if their owner is disabled or demoted.",
     "api_tokens_empty":  "No API tokens yet. Create one to integrate the panel with an external service.",
     "api_tokens_create":  "Create token",
     "api_tokens_create_title":  "Create API token",
@@ -419,8 +419,8 @@
     "api_tokens_name_required":  "Token name is required",
     "api_tokens_created_title":  "Token created",
     "api_tokens_value_label":  "Token value",
-  "api_tokens_warning_title": "This is the only time you'll see this token.",
+    "api_tokens_warning_title":  "This is the only time you\u0027ll see this token.",
-  "api_tokens_warning_body": "Copy it now and store it in your integration's secret manager. The panel keeps only a hash — if you lose this value you'll need to revoke and recreate the token.",
+    "api_tokens_warning_body":  "Copy it now and store it in your integration\u0027s secret manager. The panel keeps only a hash — if you lose this value you\u0027ll need to revoke and recreate the token.",
     "api_tokens_revoke":  "Revoke",
     "api_tokens_revoke_confirm":  "Revoke token \"{}\"? Any integration using it will stop working.",
     "api_tokens_revoked":  "Token revoked",
@@ -470,10 +470,10 @@
     "new_instance":  "new instance",
     "port_next_instance_hint":  "Choose a free UDP port for the additional instance.",
     "web_servers":  "Web servers",
-  "nginx_desc": "NGINX web server with Let's Encrypt HTTPS certificate and editable index.html.",
+    "nginx_desc":  "NGINX web server with Let\u0027s Encrypt HTTPS certificate and editable index.html.",
     "nginx_domain":  "Domain",
-  "nginx_email": "Let's Encrypt email",
+    "nginx_email":  "Let\u0027s Encrypt email",
-  "nginx_port_hint": "HTTPS port exposed on the server. Port 80/TCP must be free and reachable for Let's Encrypt validation.",
+    "nginx_port_hint":  "HTTPS port exposed on the server. Port 80/TCP must be free and reachable for Let\u0027s Encrypt validation.",
     "nginx_install_hint":  "The domain must already point to this server. Port 80/TCP is used for HTTP-01 certificate validation.",
     "site":  "Site",
     "site_editor":  "Site editor",