Switch Xray to VLESS+XHTTP+TLS with Cloudflare DNS ACME (v3.1.1).

Issue Let's Encrypt via Cloudflare API token so install no longer needs port 80; keep HTTP-01 as fallback.

Co-authored-by: Cursor <cursoragent@cursor.com>

translations/zh.json

@@ -71,7 +71,7 @@
     "docker_not_installed":  "Docker 未安装",
     "awg_desc":  "基于 awg-go 的新版协议。支持 S3, S4 高级混淆。",
     "awg_legacy_desc":  "原始 AWG 版本。兼容旧版客户端。",
-    "xray_desc":  "将流量伪装成普通网页流量 (XTLS-Reality)，抗封锁能力强。",
+    "xray_desc":  "VLESS over XHTTP+TLS — looks like normal HTTPS/HTTP2. Needs a domain + Let\u0027s Encrypt.",
     "not_checked":  "未检查",
     "connections":  "连接",
     "add":  "添加",
@@ -80,7 +80,22 @@
     "no_connections_desc":  "添加首个连接以生成 VPN 配置文件",
     "install_protocol":  "安装协议",
     "port_default_hint":  "默认端口: 55424。请确保端口未被占用。",
-    "port_xray_hint":  "推荐端口: 443。请确保未被其他 Web 服务器使用。",
+    "port_xray_hint":  "Default 443/TCP. Prefer Cloudflare DNS ACME — port 80 is not needed.",
+    "port_xray_hint_cf":  "Default 443/TCP. Certificate via Cloudflare DNS — port 80 is not used.",
+    "xray_domain":  "Domain",
+    "xray_email":  "Let\u0027s Encrypt email",
+    "xray_dns_hint":  "Create DNS record:",
+    "xray_dns_hint_cf":  "Domain must be on Cloudflare. A-record (DNS only):",
+    "xray_install_hint":  "Installs VLESS + XHTTP + TLS. Prefer Cloudflare API token (DNS-01) so TCP 80 stays free.",
+    "xray_ports_warning":  "TCP 80 must be free during install (Let\u0027s Encrypt HTTP-01).",
+    "xray_ports_warning_cf":  "Cloudflare DNS ACME does not use port 80. Token needs Zone → DNS → Edit. Keep proxy off (grey cloud).",
+    "xray_acme_method":  "Certificate method",
+    "xray_acme_cloudflare":  "Cloudflare DNS (API token) — recommended, no port 80",
+    "xray_acme_http":  "HTTP-01 — needs free TCP 80",
+    "xray_acme_cloudflare_short":  "Cloudflare DNS",
+    "xray_acme_http_short":  "HTTP-01",
+    "xray_cf_token":  "Cloudflare API token",
+    "xray_cf_token_hint":  "Token with Zone:DNS:Edit for this domain zone. Used only to issue the cert.",
     "reinstall":  "重新安装",
     "uninstall_confirm":  "确定卸载 {}？所有连接和配置都将丢失。",
     "stop_container_confirm":  "停止容器 {}？",