Wire Hysteria 2 UI with per-server SSL defaults and renew.

Expose domain/email on servers, warn that TCP 80/443 must be free on install, and allow Let's Encrypt re-issue from Hysteria settings.

Co-authored-by: Cursor <cursoragent@cursor.com>

translations/en.json

@@ -350,6 +350,23 @@
   "config_unavailable_desc": "This client was created via the native Amnezia app.\\nThe private key is stored only on the user's device and cannot be recovered by the server.",
   "client_public_key": "Client public key:",
   "telemt_desc": "MTProxy-based Telegram proxy with advanced obfuscation and TLS emulation support.",
+  "hysteria_desc": "Hysteria 2 (QUIC/UDP) via official tobyxdd/hysteria (apernet/hysteria) with Let's Encrypt TLS. Admin sets the domain at install time.",
+  "hysteria_domain": "Domain",
+  "hysteria_email": "Let's Encrypt email",
+  "hysteria_port_hint": "UDP port for Hysteria (default 8998). Avoid 443 if nginx/xray already use UDP/TCP 443. Port 80/TCP must be free for certificate issuance.",
+  "hysteria_install_hint": "Point the domain A-record to this server before install. Port 80/TCP is used temporarily for Let's Encrypt HTTP-01 validation. BBR and salamander obfuscation are enabled automatically.",
+  "hysteria_dns_hint": "Create this DNS record before installation:",
+  "hysteria_settings_title": "Hysteria settings",
+  "hysteria_change_port": "Change port",
+  "hysteria_port_change_hint": "UDP listen port. If you see “address already in use”, pick a free port (e.g. 8443 or 8998), save, then re-import the client link.",
+  "hysteria_settings_saved": "Hysteria settings updated",
+  "hysteria_ports_warning": "Warning: free TCP ports 80 and 443 are required for stable operation (Let's Encrypt on 80, HTTPS/QUIC on 443).",
+  "hysteria_renew_ssl": "Renew SSL",
+  "hysteria_ssl_change_hint": "Changing the domain re-issues the Let's Encrypt certificate (port 80 must be free).",
+  "hysteria_ssl_required": "Domain and email are required for SSL",
+  "server_ssl_domain": "SSL domain (default)",
+  "server_ssl_email": "SSL email (default)",
+  "server_ssl_hint": "Used when installing Hysteria / NGINX on this server (Let's Encrypt).",
   "container_logs": "Container logs",
   "logs_btn": "📋 Logs",
   "logs_live": "Live",

translations/fa.json

@@ -340,6 +340,23 @@
   "clear_server": "پاک‌سازی سرور",
   "remove_server": "حذف سرور از پنل",
   "telemt_desc": "پروکسی تلگرام بر پایه‌ی MTProxy با پوشش‌های پیشرفته.",
+  "hysteria_desc": "Hysteria 2 (QUIC/UDP) با تصویر رسمی tobyxdd/hysteria (apernet/hysteria) و TLS از Let's Encrypt. دامنه را ادمین هنگام نصب مشخص می‌کند.",
+  "hysteria_domain": "دامنه",
+  "hysteria_email": "ایمیل Let's Encrypt",
+  "hysteria_port_hint": "پورت UDP برای Hysteria (پیش‌فرض 8998). اگر 443 اشغال است پورت دیگری بگذارید.",
+  "hysteria_install_hint": "قبل از نصب، رکورد A دامنه باید به این سرور اشاره کند. BBR و obfuscation salamander به‌صورت خودکار فعال می‌شوند.",
+  "hysteria_dns_hint": "قبل از نصب این رکورد DNS را بسازید:",
+  "hysteria_settings_title": "تنظیمات Hysteria",
+  "hysteria_change_port": "تغییر پورت",
+  "hysteria_port_change_hint": "پورت UDP. اگر address already in use دیدید، پورت آزاد بگذارید (8443 یا 8998).",
+  "hysteria_settings_saved": "پورت Hysteria به‌روز شد",
+  "hysteria_ports_warning": "هشدار: برای کار پایدار پورت‌های TCP آزاد ۸۰ و ۴۴۳ لازم است (Let's Encrypt روی ۸۰، HTTPS/QUIC روی ۴۴۳).",
+  "hysteria_renew_ssl": "تمدید SSL",
+  "hysteria_ssl_change_hint": "تغییر دامنه گواهی Let's Encrypt را دوباره صادر می‌کند (پورت ۸۰ باید آزاد باشد).",
+  "hysteria_ssl_required": "برای SSL دامنه و ایمیل لازم است",
+  "server_ssl_domain": "دامنه SSL (پیش‌فرض)",
+  "server_ssl_email": "ایمیل SSL (پیش‌فرض)",
+  "server_ssl_hint": "هنگام نصب Hysteria / NGINX روی این سرور استفاده می‌شود (Let's Encrypt).",
   "container_logs": "لاگ‌های کانتینر",
   "logs_btn": "📋 Logs",
   "logs_live": "زنده",

translations/fr.json

@@ -340,6 +340,23 @@
   "clear_server": "Réinitialiser le serveur",
   "remove_server": "Retirer le serveur du panneau",
   "telemt_desc": "Proxy Telegram basé sur MTProxy avec obfuscation avancée.",
+  "hysteria_desc": "Hysteria 2 (QUIC/UDP) via l'image officielle tobyxdd/hysteria (apernet/hysteria) avec TLS Let's Encrypt. Le domaine est défini par l'admin à l'installation.",
+  "hysteria_domain": "Domaine",
+  "hysteria_email": "Email Let's Encrypt",
+  "hysteria_port_hint": "Port UDP pour Hysteria (8998 par défaut). Évitez 443 s'il est déjà pris.",
+  "hysteria_install_hint": "L'enregistrement A du domaine doit pointer vers ce serveur. BBR et obfuscation salamander sont activés automatiquement.",
+  "hysteria_dns_hint": "Créez cet enregistrement DNS avant l'installation :",
+  "hysteria_settings_title": "Paramètres Hysteria",
+  "hysteria_change_port": "Changer le port",
+  "hysteria_port_change_hint": "Port UDP. Si « address already in use », choisissez un port libre (8443 ou 8998).",
+  "hysteria_settings_saved": "Port Hysteria mis à jour",
+  "hysteria_ports_warning": "Attention : les ports TCP 80 et 443 doivent être libres pour un fonctionnement stable (Let's Encrypt sur 80, HTTPS/QUIC sur 443).",
+  "hysteria_renew_ssl": "Renouveler SSL",
+  "hysteria_ssl_change_hint": "Changer le domaine réémet le certificat Let's Encrypt (le port 80 doit être libre).",
+  "hysteria_ssl_required": "Domaine et email requis pour SSL",
+  "server_ssl_domain": "Domaine SSL (par défaut)",
+  "server_ssl_email": "Email SSL (par défaut)",
+  "server_ssl_hint": "Utilisé lors de l'installation de Hysteria / NGINX sur ce serveur (Let's Encrypt).",
   "container_logs": "Logs du conteneur",
   "logs_btn": "📋 Logs",
   "logs_live": "Temps réel",

translations/ru.json

@@ -350,6 +350,23 @@
   "config_unavailable_desc": "Этот клиент был создан через нативное приложение Amnezia.\\nПриватный ключ хранится только на устройстве пользователя и не может быть восстановлен сервером.",
   "client_public_key": "Публичный ключ клиента:",
   "telemt_desc": "Прокси для Telegram на базе MTProxy с продвинутой обфускацией и эмуляцией TLS.",
+  "hysteria_desc": "Hysteria 2 (QUIC/UDP) на официальном образе tobyxdd/hysteria (apernet/hysteria) с TLS от Let's Encrypt. Домен указывает админ при установке.",
+  "hysteria_domain": "Домен",
+  "hysteria_email": "Email для Let's Encrypt",
+  "hysteria_port_hint": "UDP-порт Hysteria (по умолчанию 8998). Не ставьте 443, если он уже занят nginx/xray. Порт 80/TCP должен быть свободен для выпуска сертификата.",
+  "hysteria_install_hint": "Перед установкой A-запись домена должна указывать на этот сервер. Порт 80/TCP временно используется для HTTP-01 проверки Let's Encrypt. BBR и obfuscation salamander включаются автоматически.",
+  "hysteria_dns_hint": "Перед установкой создайте DNS-запись:",
+  "hysteria_settings_title": "Настройки Hysteria",
+  "hysteria_change_port": "Сменить порт",
+  "hysteria_port_change_hint": "UDP-порт прослушивания. Если ошибка «address already in use» — выберите свободный порт (8443 или 8998), сохраните и заново импортируйте ссылку в клиент.",
+  "hysteria_settings_saved": "Настройки Hysteria обновлены",
+  "hysteria_ports_warning": "Внимание: для стабильной работы нужны свободные TCP-порты 80 и 443 (Let's Encrypt на 80, HTTPS/QUIC на 443).",
+  "hysteria_renew_ssl": "Обновить SSL",
+  "hysteria_ssl_change_hint": "Смена домена заново выпускает сертификат Let's Encrypt (порт 80 должен быть свободен).",
+  "hysteria_ssl_required": "Для SSL нужны домен и email",
+  "server_ssl_domain": "SSL-домен (по умолчанию)",
+  "server_ssl_email": "SSL-email (по умолчанию)",
+  "server_ssl_hint": "Подставляется при установке Hysteria / NGINX на этом сервере (Let's Encrypt).",
   "container_logs": "Логи контейнера",
   "logs_btn": "📋 Логи",
   "logs_live": "В реальном времени",

translations/zh.json

@@ -340,6 +340,23 @@
   "clear_server": "清除服务器",
   "remove_server": "从面板移除服务器",
   "telemt_desc": "基于 MTProxy 的 Telegram 代理，支持高级混淆。",
+  "hysteria_desc": "Hysteria 2（QUIC/UDP，官方 tobyxdd/hysteria / apernet/hysteria），支持 Let's Encrypt TLS。安装时由管理员指定域名。",
+  "hysteria_domain": "域名",
+  "hysteria_email": "Let's Encrypt 邮箱",
+  "hysteria_port_hint": "Hysteria UDP 端口（默认 8998）。若 443 已被占用请换端口。",
+  "hysteria_install_hint": "安装前请将域名 A 记录指向本服务器。将自动启用 BBR 与 salamander 混淆。",
+  "hysteria_dns_hint": "安装前请创建此 DNS 记录：",
+  "hysteria_settings_title": "Hysteria 设置",
+  "hysteria_change_port": "更改端口",
+  "hysteria_port_change_hint": "UDP 监听端口。若提示 address already in use，请改用空闲端口（如 8443 或 8998）。",
+  "hysteria_settings_saved": "Hysteria 端口已更新",
+  "hysteria_ports_warning": "注意：稳定运行需要空闲的 TCP 端口 80 和 443（Let's Encrypt 使用 80，HTTPS/QUIC 使用 443）。",
+  "hysteria_renew_ssl": "续签 SSL",
+  "hysteria_ssl_change_hint": "更改域名会重新签发 Let's Encrypt 证书（需空闲端口 80）。",
+  "hysteria_ssl_required": "签发 SSL 需要域名和邮箱",
+  "server_ssl_domain": "SSL 域名（默认）",
+  "server_ssl_email": "SSL 邮箱（默认）",
+  "server_ssl_hint": "安装 Hysteria / NGINX 时自动填入（Let's Encrypt）。",
   "container_logs": "容器日志",
   "logs_btn": "📋 日志",
   "logs_live": "实时",