Add one-click panel auto-update from git.evilfox.cc (v2.4.0).

Check Gitea releases in Settings and install the latest tag via git fetch/checkout with pip sync and restart when running from a git checkout.

README.md

@@ -85,6 +85,8 @@ Configuration panel for system parameters and preferences:
 *   **🌐 Internationalization (i18n)**:
     *   Full support for **English**, **Russian**, **French**, **Chinese**, and **Persian**.
     *   Native **RTL (Right-to-Left)** support for Persian language.
+*   **🔄 Auto-update**:
+    *   Settings → About checks releases on [git.evilfox.cc](https://git.evilfox.cc/test2/Amnezia-Web-Panel-main) and can install the latest tag via git + restart (when the panel runs from a git checkout).
 *   **👥 Advanced User Management**:
     *   Role-based access (Admin, Support, Regular User).
     *   Traffic limits, status monitoring, and account expiration.
@@ -222,6 +224,20 @@ GitHub Actions workflows in `.github/workflows/`:
 
 ## 📋 Fix / changelog (this fork)
 
+### v2.4.0
+*   **Auto-update from Gitea**: Settings → About checks https://git.evilfox.cc/test2/Amnezia-Web-Panel-main releases and can install the latest tag via `git fetch` + checkout, then restart (git install only).
+
+### v2.3.0
+*   **Cascade removed** — double-VPN feature dropped from the panel (manager, API, UI, i18n).
+
+### v2.2.1
+*   **Cascade egress verify fix**: bind curl to ENTRY `awg0`/`wg0` IP (client-subnet policy route), not cascade peer Address.
+*   Soft-warn (no rollback) when policy route via `cascade` is OK but public-IP echo services fail.
+
+### v2.2.0
+*   **Cascade (double VPN) restored** — later removed in **v2.3.0**.
+*   Inspired by [ryderams/amneziawg-cascade](https://github.com/ryderams/amneziawg-cascade); logic ran over panel SSH (**no remote curl|bash**).
+
 ### v2.1.0
 *   **NaiveProxy — stable**: production-ready install (Caddy + klzgrad/forwardproxy), share links always include `:443`.
 *   **Client notes (important)**:
@@ -253,7 +269,7 @@ GitHub Actions workflows in `.github/workflows/`:
 ### v1.6.0
 *   **3x-ui multi-panel**: register several 3x-ui servers in Settings; pick a panel and load VLESS inbounds over its API when creating users/invites (share link comes from 3x-ui).
 *   **Docker / CI**: refreshed `Dockerfile` + compose, `.env.example`, CI checks, GHCR image workflow.
-*   **Cascade removed** for now (pending redesign — showed active while internet often did not work).
+*   **Cascade** was temporarily removed in this release (briefly restored in v2.2.x, removed again in **v2.3.0**).
 *   **WG/AWG backups**: ZIP export of client `.conf` + restore with loading feedback.
 *   **API performance**: in-memory data cache, faster server check/stats.
 *   **Share / guest**: one-tap “Copy key”.

app.py

@@ -46,6 +46,7 @@ from managers.awg_manager import AWGManager
 from managers.xray_manager import XrayManager
 from managers.wireguard_manager import WireGuardManager
 from managers.backup_manager import BackupManager
+from managers.update_manager import UpdateManager, version_gt, api_latest_url, repo_url
 import telegram_bot as tg_bot
 
 # Configure logging
@@ -101,9 +102,9 @@ else:
     application_path = os.path.dirname(__file__)
 
 DATA_FILE = os.path.join(application_path, 'data.json')  # legacy JSON; used only for one-shot import / export
-CURRENT_VERSION = "v2.1.0"
-RELEASES_REPO_URL = "https://git.evilfox.cc/test2/Amnezia-Web-Panel-main"
-RELEASES_API_LATEST = "https://git.evilfox.cc/api/v1/repos/test2/Amnezia-Web-Panel-main/releases/latest"
+CURRENT_VERSION = "v2.4.0"
+RELEASES_REPO_URL = repo_url()
+RELEASES_API_LATEST = api_latest_url()
 BIN_DIR = os.environ.get('TUNNEL_BIN_DIR', os.path.join(application_path, 'bin'))
 TUNNEL_STATE_FILE = os.environ.get('TUNNEL_STATE_FILE', os.path.join(application_path, 'tunnels_state.json'))
 
@@ -151,7 +152,7 @@ def load_translations():
             if f.endswith('.json'):
                 lang = f.split('.')[0]
                 try:
-                    with open(os.path.join(trans_dir, f), 'r', encoding='utf-8') as tf:
+                    with open(os.path.join(trans_dir, f), 'r', encoding='utf-8-sig') as tf:
                         TRANSLATIONS[lang] = json.load(tf)
                 except Exception as e:
                     logger.error(f"Error loading translation {f}: {e}")
@@ -1742,7 +1743,6 @@ class HysteriaSettingsRequest(BaseModel):
     email: Optional[str] = None
     renew_ssl: bool = False
 
-
 class ProtocolRequest(BaseModel):
     protocol: str = 'awg'
 
@@ -1993,6 +1993,11 @@ class TunnelStartRequest(BaseModel):
     authtoken: Optional[str] = None
 
 
+class ApplyUpdateRequest(BaseModel):
+    target_version: Optional[str] = None
+    allow_dirty: bool = False
+
+
 # ======================== Startup ========================
 
 @app.on_event("startup")
@@ -2300,7 +2305,7 @@ async def server_detail(request: Request, server_id: int):
         return RedirectResponse(url='/')
     server = data['servers'][server_id]
     users_list = data.get('users', [])
-    return tpl(request, 'server.html', server=server, server_id=server_id, users=users_list, all_servers=data['servers'])
+    return tpl(request, 'server.html', server=server, server_id=server_id, users=users_list)
 
 
 @app.get('/users', response_class=HTMLResponse, tags=["System Templates"])
@@ -3231,6 +3236,7 @@ async def api_hysteria_update_settings(request: Request, server_id: int, req: Hy
         return JSONResponse({'error': str(e)}, status_code=500)
 
 
+
 @app.post('/api/servers/{server_id}/uninstall', tags=["Protocols"])
 async def api_uninstall_protocol(request: Request, server_id: int, req: ProtocolRequest):
     if not _check_admin(request):
@@ -5498,6 +5504,8 @@ async def api_check_updates(request: Request):
     if not _check_admin(request):
         return JSONResponse({'error': 'Forbidden'}, status_code=403)
     try:
+        updater = UpdateManager(application_path, CURRENT_VERSION)
+        mode = updater.detect_mode()
         async with httpx.AsyncClient(timeout=15.0, follow_redirects=True) as client:
             resp = await client.get(
                 RELEASES_API_LATEST,
@@ -5511,20 +5519,61 @@ async def api_check_updates(request: Request):
         data = resp.json() if resp.content else {}
         latest = (data.get('tag_name') or data.get('name') or '').strip()
         html_url = (data.get('html_url') or f'{RELEASES_REPO_URL}/releases').strip()
+        body = (data.get('body') or '')[:4000]
         current = CURRENT_VERSION
-        update_available = bool(latest) and latest != current
+        update_available = bool(latest) and version_gt(latest, current)
         return {
             'current_version': current,
             'latest_version': latest,
             'update_available': update_available,
             'html_url': html_url,
             'releases_url': f'{RELEASES_REPO_URL}/releases',
+            'body': body,
+            'can_auto_update': bool(mode.get('can_auto_update')),
+            'update_mode': mode.get('mode'),
+            'mode': mode,
         }
     except Exception as e:
         logger.exception('Error checking for updates')
         return JSONResponse({'error': str(e)}, status_code=502)
 
 
+@app.post('/api/settings/apply_update', tags=["Settings"])
+async def api_apply_update(request: Request, req: ApplyUpdateRequest):
+    """Pull the selected release tag from git.evilfox.cc and restart the panel."""
+    if not _check_admin(request):
+        return JSONResponse({'error': 'Forbidden'}, status_code=403)
+    updater = UpdateManager(application_path, CURRENT_VERSION)
+    target = (req.target_version or '').strip()
+    if not target:
+        # Resolve latest if UI did not pass a tag
+        try:
+            async with httpx.AsyncClient(timeout=15.0, follow_redirects=True) as client:
+                resp = await client.get(
+                    RELEASES_API_LATEST,
+                    headers={'Accept': 'application/json'},
+                )
+            if resp.status_code < 400 and resp.content:
+                payload = resp.json()
+                target = (payload.get('tag_name') or payload.get('name') or '').strip()
+        except Exception:
+            logger.exception('Failed to resolve latest tag for apply_update')
+    if not target:
+        return JSONResponse({'error': 'No target version specified'}, status_code=400)
+
+    result = await asyncio.to_thread(
+        updater.apply_update,
+        target,
+        bool(req.allow_dirty),
+    )
+    if result.get('status') != 'success':
+        return JSONResponse({'error': result.get('message') or 'Update failed', **result}, status_code=500)
+
+    if result.get('restart'):
+        UpdateManager.schedule_restart(1.5)
+    return result
+
+
 @app.get('/api/settings/tunnels/status', tags=["Settings"])
 async def api_tunnels_status(request: Request):
     if not _check_admin(request):

managers/update_manager.py

@@ -0,0 +1,249 @@
+"""Panel self-update from the EvilFox Gitea repository."""
+
+from __future__ import annotations
+
+import logging
+import os
+import re
+import subprocess
+import sys
+import threading
+import time
+from typing import Optional
+
+logger = logging.getLogger(__name__)
+
+DEFAULT_REPO_URL = 'https://git.evilfox.cc/test2/Amnezia-Web-Panel-main'
+DEFAULT_GIT_URL = 'https://git.evilfox.cc/test2/Amnezia-Web-Panel-main.git'
+DEFAULT_API_LATEST = 'https://git.evilfox.cc/api/v1/repos/test2/Amnezia-Web-Panel-main/releases/latest'
+UPDATE_REMOTE = 'panel-update'
+
+
+def _env(name: str, default: str) -> str:
+    return (os.environ.get(name) or default).strip()
+
+
+def repo_url() -> str:
+    return _env('PANEL_UPDATE_REPO_URL', DEFAULT_REPO_URL).rstrip('/')
+
+
+def git_url() -> str:
+    return _env('PANEL_UPDATE_GIT_URL', DEFAULT_GIT_URL)
+
+
+def api_latest_url() -> str:
+    return _env('PANEL_UPDATE_API_LATEST', DEFAULT_API_LATEST)
+
+
+def parse_version(value: str) -> tuple:
+    """Parse semver-ish tags like v2.3.0 / 2.3.0-beta into a comparable tuple."""
+    raw = (value or '').strip()
+    if not raw:
+        return (0, 0, 0, 1, '')
+    raw = raw.lstrip('vV')
+    main, _, pre = raw.partition('-')
+    parts = []
+    for piece in main.split('.'):
+        if piece.isdigit():
+            parts.append(int(piece))
+        else:
+            m = re.match(r'(\d+)', piece or '')
+            parts.append(int(m.group(1)) if m else 0)
+    while len(parts) < 3:
+        parts.append(0)
+    # release > prerelease: empty pre sorts higher
+    pre_rank = 0 if not pre else 1
+    return (parts[0], parts[1], parts[2], pre_rank, pre)
+
+
+def version_gt(a: str, b: str) -> bool:
+    return parse_version(a) > parse_version(b)
+
+
+def _run(cmd: list, cwd: str, timeout: int = 120) -> tuple[int, str, str]:
+    try:
+        proc = subprocess.run(
+            cmd,
+            cwd=cwd,
+            capture_output=True,
+            text=True,
+            timeout=timeout,
+            encoding='utf-8',
+            errors='replace',
+        )
+        return proc.returncode, (proc.stdout or '').strip(), (proc.stderr or '').strip()
+    except FileNotFoundError:
+        return 127, '', f'Command not found: {cmd[0]}'
+    except subprocess.TimeoutExpired:
+        return 124, '', f'Timeout running: {" ".join(cmd)}'
+
+
+class UpdateManager:
+    def __init__(self, app_root: str, current_version: str):
+        self.app_root = os.path.abspath(app_root)
+        self.current_version = current_version
+
+    def detect_mode(self) -> dict:
+        frozen = bool(getattr(sys, 'frozen', False))
+        in_docker = os.path.exists('/.dockerenv') or os.environ.get('PANEL_IN_DOCKER') == '1'
+        git_dir = os.path.join(self.app_root, '.git')
+        is_git = os.path.isdir(git_dir)
+        git_ok = False
+        if is_git and not frozen:
+            code, _, _ = _run(['git', '--version'], self.app_root, timeout=10)
+            git_ok = code == 0
+        can_auto = bool(git_ok and not frozen)
+        mode = 'git' if can_auto else ('docker' if in_docker else ('binary' if frozen else 'manual'))
+        return {
+            'mode': mode,
+            'can_auto_update': can_auto,
+            'is_git': is_git,
+            'frozen': frozen,
+            'in_docker': in_docker,
+            'app_root': self.app_root,
+            'repo_url': repo_url(),
+            'git_url': git_url(),
+        }
+
+    def _ensure_update_remote(self) -> Optional[str]:
+        code, out, err = _run(['git', 'remote'], self.app_root, timeout=15)
+        if code != 0:
+            return err or out or 'git remote failed'
+        remotes = set((out or '').split())
+        target = git_url()
+        if UPDATE_REMOTE in remotes:
+            code, _, err = _run(
+                ['git', 'remote', 'set-url', UPDATE_REMOTE, target],
+                self.app_root,
+                timeout=15,
+            )
+        else:
+            code, _, err = _run(
+                ['git', 'remote', 'add', UPDATE_REMOTE, target],
+                self.app_root,
+                timeout=15,
+            )
+        if code != 0:
+            return err or 'Failed to configure update remote'
+        return None
+
+    def working_tree_dirty(self) -> bool:
+        code, out, _ = _run(['git', 'status', '--porcelain'], self.app_root, timeout=30)
+        return code == 0 and bool(out.strip())
+
+    def apply_update(self, target_version: str, allow_dirty: bool = False) -> dict:
+        mode = self.detect_mode()
+        if not mode['can_auto_update']:
+            return {
+                'status': 'error',
+                'message': (
+                    'Auto-update requires a git checkout of the panel sources. '
+                    'Docker/binary installs: pull a new image or download a release manually.'
+                ),
+                'mode': mode,
+            }
+
+        target = (target_version or '').strip()
+        if not re.match(r'^v?\d+(\.\d+){0,3}([.-][\w.]+)?$', target):
+            return {'status': 'error', 'message': f'Invalid target version: {target_version}'}
+        if not target.startswith('v'):
+            target = 'v' + target
+
+        if not allow_dirty and self.working_tree_dirty():
+            return {
+                'status': 'error',
+                'message': (
+                    'Working tree has local changes. Commit/stash them or set allow_dirty, '
+                    'then retry auto-update.'
+                ),
+            }
+
+        err = self._ensure_update_remote()
+        if err:
+            return {'status': 'error', 'message': err}
+
+        code, out, stderr = _run(
+            ['git', 'fetch', '--tags', '--force', UPDATE_REMOTE],
+            self.app_root,
+            timeout=180,
+        )
+        if code != 0:
+            return {
+                'status': 'error',
+                'message': f'git fetch failed: {stderr or out or code}',
+            }
+
+        # Prefer annotated/lightweight tag; fall back to remote main tip if tag missing
+        code, _, _ = _run(
+            ['git', 'rev-parse', '-q', '--verify', f'refs/tags/{target}'],
+            self.app_root,
+            timeout=15,
+        )
+        if code == 0:
+            checkout_ref = target
+        else:
+            # tag might only exist as FETCH_HEAD / remote tag
+            code2, _, _ = _run(
+                ['git', 'rev-parse', '-q', '--verify', f'refs/tags/{target}^{{}}'],
+                self.app_root,
+                timeout=15,
+            )
+            checkout_ref = target if code2 == 0 else f'tags/{target}'
+
+        code, out, stderr = _run(
+            ['git', 'checkout', '--force', checkout_ref],
+            self.app_root,
+            timeout=60,
+        )
+        if code != 0:
+            # last resort: checkout remote main
+            code_m, out_m, err_m = _run(
+                ['git', 'checkout', '--force', '-B', 'main', f'{UPDATE_REMOTE}/main'],
+                self.app_root,
+                timeout=60,
+            )
+            if code_m != 0:
+                return {
+                    'status': 'error',
+                    'message': f'git checkout {target} failed: {stderr or out or err_m or out_m}',
+                }
+            checkout_ref = f'{UPDATE_REMOTE}/main'
+
+        req = os.path.join(self.app_root, 'requirements.txt')
+        pip_log = ''
+        if os.path.isfile(req):
+            code_p, out_p, err_p = _run(
+                [sys.executable, '-m', 'pip', 'install', '-r', req],
+                self.app_root,
+                timeout=300,
+            )
+            pip_log = (out_p or err_p or '')[:1500]
+            if code_p != 0:
+                return {
+                    'status': 'error',
+                    'message': f'pip install failed after checkout: {err_p or out_p or code_p}',
+                    'checkout': checkout_ref,
+                }
+
+        return {
+            'status': 'success',
+            'message': f'Updated to {target}. Panel will restart.',
+            'target_version': target,
+            'checkout': checkout_ref,
+            'pip': pip_log[:500],
+            'restart': True,
+        }
+
+    @staticmethod
+    def schedule_restart(delay_sec: float = 1.5) -> None:
+        def _restart():
+            time.sleep(max(0.5, float(delay_sec)))
+            try:
+                argv = [sys.executable] + sys.argv
+                logger.info('Restarting panel after update: %s', argv)
+                os.execv(sys.executable, argv)
+            except Exception:
+                logger.exception('Failed to restart after update; exiting')
+                os._exit(0)
+
+        threading.Thread(target=_restart, name='panel-update-restart', daemon=False).start()

templates/server.html

@@ -1,4 +1,4 @@
-{% extends "base.html" %}
+{% extends "base.html" %}
 {% from "macros/icons.html" import icon %}
 
 {% block title_extra %} — {{ server.name }}{% endblock %}
@@ -2965,6 +2965,7 @@
     }
 
 
+
     // ========== Init ==========
     applyInstalledAppsVisibility();
     checkServer();

templates/settings.html

@@ -597,15 +597,20 @@
                     <!-- Updated via JS -->
                 </div>
 
-                <div style="display: flex; gap: var(--space-sm); margin-top: var(--space-sm);">
-                    <button type="button" class="btn btn-secondary" onclick="checkForUpdates()" id="checkUpdateBtn" style="flex:1;">
+                <div style="display: flex; gap: var(--space-sm); margin-top: var(--space-sm); flex-wrap: wrap;">
+                    <button type="button" class="btn btn-secondary" onclick="checkForUpdates()" id="checkUpdateBtn" style="flex:1; min-width:140px;">
                         <span id="checkUpdateBtnText">🔄 {{ _('check_updates') }}</span>
                         <div class="spinner hidden" id="checkUpdateSpinner" style="width:14px; height:14px;"></div>
                     </button>
-                    <a href="https://git.evilfox.cc/test2/Amnezia-Web-Panel-main/releases" target="_blank" class="btn btn-primary hidden" id="downloadUpdateBtn" style="flex:1; text-decoration: none; justify-content: center;">
+                    <button type="button" class="btn btn-primary hidden" onclick="applyPanelUpdate()" id="applyUpdateBtn" style="flex:1; min-width:140px;">
+                        <span id="applyUpdateBtnText">⬆ {{ _('apply_update') }}</span>
+                        <div class="spinner hidden" id="applyUpdateSpinner" style="width:14px; height:14px;"></div>
+                    </button>
+                    <a href="https://git.evilfox.cc/test2/Amnezia-Web-Panel-main/releases" target="_blank" class="btn btn-secondary hidden" id="downloadUpdateBtn" style="flex:1; min-width:140px; text-decoration: none; justify-content: center;">
                         ⬇️ {{ _('download_update') }}
                     </a>
                 </div>
+                <p class="form-hint" id="updateModeHint" style="margin:0;">{{ _('auto_update_hint') }}</p>
             </div>
         </div>
     </div>
@@ -1482,41 +1487,98 @@
         updateProtocolsForSync();
     }
 
-    async function checkForUpdates() {
+    let latestUpdateInfo = null;
+
+    async function checkForUpdates(silent) {
         const btn = document.getElementById('checkUpdateBtn');
         const text = document.getElementById('checkUpdateBtnText');
         const spinner = document.getElementById('checkUpdateSpinner');
         const statusDiv = document.getElementById('updateStatus');
         const downloadBtn = document.getElementById('downloadUpdateBtn');
+        const applyBtn = document.getElementById('applyUpdateBtn');
+        const modeHint = document.getElementById('updateModeHint');
 
+        if (!silent) {
             btn.disabled = true;
             text.textContent = "{{ _('checking_updates')|default('Checking...') }}";
             spinner.classList.remove('hidden');
+        }
         statusDiv.classList.add('hidden');
         downloadBtn.classList.add('hidden');
+        applyBtn.classList.add('hidden');
 
         try {
             const data = await apiCall('/api/settings/check_updates');
+            latestUpdateInfo = data;
             const latestVersion = data.latest_version || '';
             statusDiv.classList.remove('hidden');
 
+            if (modeHint) {
+                const mode = data.update_mode || (data.mode && data.mode.mode) || '';
+                if (data.can_auto_update) {
+                    modeHint.textContent = "{{ _('auto_update_ready')|default('Git auto-update is available for this install.') }}";
+                } else if (mode === 'docker') {
+                    modeHint.textContent = "{{ _('auto_update_docker')|default('Docker install: rebuild/pull image, or use a git checkout for one-click update.') }}";
+                } else {
+                    modeHint.textContent = "{{ _('auto_update_manual')|default('One-click update needs a git clone. You can still download a release.') }}";
+                }
+            }
+
             if (data.update_available && latestVersion) {
                 statusDiv.innerHTML = `<span style="color: var(--success); font-weight: bold;">{{ _('update_available')|default('Update available') }}: ${latestVersion}</span>`;
                 statusDiv.style.border = '1px solid var(--success)';
                 downloadBtn.href = data.html_url || data.releases_url || 'https://git.evilfox.cc/test2/Amnezia-Web-Panel-main/releases';
                 downloadBtn.classList.remove('hidden');
+                if (data.can_auto_update) {
+                    applyBtn.classList.remove('hidden');
+                }
             } else {
                 statusDiv.innerHTML = `<span style="color: var(--text-muted);">{{ _('up_to_date')|default('Up to date') }}</span>`;
                 statusDiv.style.border = '1px solid var(--border-color)';
             }
         } catch (err) {
-            showToast('Failed to check for updates: ' + err.message, 'error');
+            if (!silent) showToast('Failed to check for updates: ' + err.message, 'error');
         } finally {
+            if (!silent) {
                 btn.disabled = false;
                 text.textContent = "🔄 {{ _('check_updates')|default('Check for updates') }}";
                 spinner.classList.add('hidden');
             }
         }
+    }
+
+    async function applyPanelUpdate() {
+        const applyBtn = document.getElementById('applyUpdateBtn');
+        const applyText = document.getElementById('applyUpdateBtnText');
+        const applySpinner = document.getElementById('applyUpdateSpinner');
+        const target = (latestUpdateInfo && latestUpdateInfo.latest_version) || '';
+        if (!target) {
+            showToast("{{ _('update_no_target')|default('No target version. Check for updates first.') }}", 'error');
+            return;
+        }
+        if (!confirm("{{ _('apply_update_confirm')|default('Install update from git and restart the panel?') }} " + target)) {
+            return;
+        }
+        applyBtn.disabled = true;
+        applyText.textContent = "{{ _('applying_update')|default('Updating…') }}";
+        applySpinner.classList.remove('hidden');
+        try {
+            const data = await apiCall('/api/settings/apply_update', 'POST', {
+                target_version: target,
+                allow_dirty: false,
+            });
+            showToast(data.message || "{{ _('update_restarting')|default('Updated. Restarting…') }}", 'success');
+            setTimeout(() => { window.location.reload(); }, 3500);
+        } catch (err) {
+            showToast(_('error') + ': ' + err.message, 'error');
+            applyBtn.disabled = false;
+            applyText.textContent = "⬆ {{ _('apply_update')|default('Install update') }}";
+            applySpinner.classList.add('hidden');
+        }
+    }
+
+    // Auto-check once on Settings load
+    setTimeout(() => checkForUpdates(true), 800);
 
     /* ========== API Tokens ========== */
 

translations/en.json

@@ -39,7 +39,7 @@
     "limit":  "Limit",
     "manage":  "Manage",
     "no_protocols":  "No protocols",
-  "add_server_desc": "Add your first VPN server to get started. You'll need SSH credentials to connect.",
+    "add_server_desc":  "Add your first VPN server to get started. You\u0027ll need SSH credentials to connect.",
     "ssh_host":  "Host / IP",
     "ssh_port":  "SSH Port",
     "ssh_user":  "User",
@@ -80,8 +80,8 @@
     "no_connections":  "No connections",
     "no_connections_desc":  "Add your first connection to generate a VPN configuration",
     "install_protocol":  "Install protocol",
-  "port_default_hint": "Default port: 55424. Make sure it's not busy",
-  "port_xray_hint": "Default port: 443 (recommended for Xray). Make sure it's not taken by another web server.",
+    "port_default_hint":  "Default port: 55424. Make sure it\u0027s not busy",
+    "port_xray_hint":  "Default port: 443 (recommended for Xray). Make sure it\u0027s not taken by another web server.",
     "reinstall":  "Reinstall",
     "uninstall_confirm":  "Uninstall {}? All connections and configurations will be lost.",
     "stop_container_confirm":  "Stop container {}?",
@@ -265,10 +265,10 @@
     "bot_start_btn":  "▶️ Start",
     "bot_hint":  "After changing the token, save the settings — the bot will restart automatically. Users must have a Telegram ID in their profile.",
     "api_docs_title":  "🔌 API Documentation",
-  "api_docs_hint": "Use these interfaces to explore the panel's API capabilities",
+    "api_docs_hint":  "Use these interfaces to explore the panel\u0027s API capabilities",
     "tunnels_title":  "Tunnels",
     "local_server":  "Local Server",
-  "tunnel_install_enable": "Install & Enable",
+    "tunnel_install_enable":  "Install \u0026 Enable",
     "tunnel_enable":  "Enable Tunnel",
     "tunnel_running":  "Tunnel running",
     "tunnel_stop":  "Stop",
@@ -317,7 +317,7 @@
     "copy_key_big":  "Copy key",
     "copying_key":  "Copying…",
     "key_copied":  "Key copied — paste it into the app",
-  "more_qr_download": "QR code & file",
+    "more_qr_download":  "QR code \u0026 file",
     "download_config_file":  "Download config file",
     "show_config_text":  "Show config text",
     "copied":  "Copied!",
@@ -347,34 +347,34 @@
     "restore_success":  "Restore successful! Restarting...",
     "invalid_backup_file":  "Invalid backup file or structure",
     "config_unavailable":  "Configuration unavailable",
-  "config_unavailable_desc": "This client was created via the native Amnezia app.\\nThe private key is stored only on the user's device and cannot be recovered by the server.",
+    "config_unavailable_desc":  "This client was created via the native Amnezia app.\\nThe private key is stored only on the user\u0027s device and cannot be recovered by the server.",
     "client_public_key":  "Client public key:",
     "telemt_desc":  "MTProxy-based Telegram proxy with advanced obfuscation and TLS emulation support.",
-  "hysteria_desc": "Hysteria 2 (QUIC/UDP) via official tobyxdd/hysteria (apernet/hysteria) with Let's Encrypt TLS. Admin sets the domain at install time.",
+    "hysteria_desc":  "Hysteria 2 (QUIC/UDP) via official tobyxdd/hysteria (apernet/hysteria) with Let\u0027s Encrypt TLS. Admin sets the domain at install time.",
     "hysteria_domain":  "Domain",
-  "hysteria_email": "Let's Encrypt email",
+    "hysteria_email":  "Let\u0027s Encrypt email",
     "hysteria_port_hint":  "UDP port for Hysteria (default 8998). Avoid 443 if nginx/xray already use UDP/TCP 443. Port 80/TCP must be free for certificate issuance.",
-  "hysteria_install_hint": "Point the domain A-record to this server before install. Port 80/TCP is used temporarily for Let's Encrypt HTTP-01 validation. BBR and salamander obfuscation are enabled automatically.",
+    "hysteria_install_hint":  "Point the domain A-record to this server before install. Port 80/TCP is used temporarily for Let\u0027s Encrypt HTTP-01 validation. BBR and salamander obfuscation are enabled automatically.",
     "hysteria_dns_hint":  "Create this DNS record before installation:",
     "hysteria_settings_title":  "Hysteria settings",
     "hysteria_change_port":  "Change port",
     "hysteria_port_change_hint":  "UDP listen port. If you see “address already in use”, pick a free port (e.g. 8443 or 8998), save, then re-import the client link.",
     "hysteria_settings_saved":  "Hysteria settings updated",
-  "hysteria_ports_warning": "Warning: free TCP ports 80 and 443 are required for stable operation (Let's Encrypt on 80, HTTPS/QUIC on 443).",
+    "hysteria_ports_warning":  "Warning: free TCP ports 80 and 443 are required for stable operation (Let\u0027s Encrypt on 80, HTTPS/QUIC on 443).",
     "hysteria_renew_ssl":  "Renew SSL",
-  "hysteria_ssl_change_hint": "Changing the domain re-issues the Let's Encrypt certificate (port 80 must be free).",
+    "hysteria_ssl_change_hint":  "Changing the domain re-issues the Let\u0027s Encrypt certificate (port 80 must be free).",
     "hysteria_ssl_required":  "Domain and email are required for SSL",
-  "naiveproxy_desc": "NaiveProxy (stable) — HTTPS/HTTP2 via Caddy + forwardproxy, Let's Encrypt TLS. Client: use Karing. Do not use v2rayN; other clients untested.",
+    "naiveproxy_desc":  "NaiveProxy (stable) — HTTPS/HTTP2 via Caddy + forwardproxy, Let\u0027s Encrypt TLS. Client: use Karing. Do not use v2rayN; other clients untested.",
     "naiveproxy_domain":  "Domain",
-  "naiveproxy_email": "Let's Encrypt email",
+    "naiveproxy_email":  "Let\u0027s Encrypt email",
     "naiveproxy_port_hint":  "TCP port 443 is fixed for NaiveProxy. Port 80/TCP must be free for certificate issuance.",
-  "naiveproxy_install_hint": "Point the domain A-record to this server before install. Free TCP ports 80 and 443 are required (Let's Encrypt and HTTPS proxy).",
+    "naiveproxy_install_hint":  "Point the domain A-record to this server before install. Free TCP ports 80 and 443 are required (Let\u0027s Encrypt and HTTPS proxy).",
     "naiveproxy_dns_hint":  "Create this DNS record before installation:",
-  "naiveproxy_ports_warning": "Warning: free TCP ports 80 and 443 are required for stable operation (Let's Encrypt on 80, HTTPS proxy on 443).",
+    "naiveproxy_ports_warning":  "Warning: free TCP ports 80 and 443 are required for stable operation (Let\u0027s Encrypt on 80, HTTPS proxy on 443).",
     "naiveproxy_client_hint":  "Stable build. Do NOT use v2rayN. Confirmed working in Karing. Other clients are untested.",
     "server_ssl_domain":  "SSL domain (default)",
     "server_ssl_email":  "SSL email (default)",
-  "server_ssl_hint": "Used when installing Hysteria / NGINX on this server (Let's Encrypt).",
+    "server_ssl_hint":  "Used when installing Hysteria / NGINX on this server (Let\u0027s Encrypt).",
     "container_logs":  "Container logs",
     "logs_btn":  "📋 Logs",
     "logs_live":  "Live",
@@ -433,7 +433,7 @@
     "ping_checking":  "Checking connectivity...",
     "offline":  "offline",
     "api_tokens_title":  "API tokens",
-  "api_tokens_hint": "Bearer tokens for external integrations. Send the token in the `Authorization: Bearer <token>` header. Tokens have admin-equivalent rights and stop working if their owner is disabled or demoted.",
+    "api_tokens_hint":  "Bearer tokens for external integrations. Send the token in the `Authorization: Bearer \u003ctoken\u003e` header. Tokens have admin-equivalent rights and stop working if their owner is disabled or demoted.",
     "api_tokens_empty":  "No API tokens yet. Create one to integrate the panel with an external service.",
     "api_tokens_create":  "Create token",
     "api_tokens_create_title":  "Create API token",
@@ -443,8 +443,8 @@
     "api_tokens_name_required":  "Token name is required",
     "api_tokens_created_title":  "Token created",
     "api_tokens_value_label":  "Token value",
-  "api_tokens_warning_title": "This is the only time you'll see this token.",
-  "api_tokens_warning_body": "Copy it now and store it in your integration's secret manager. The panel keeps only a hash — if you lose this value you'll need to revoke and recreate the token.",
+    "api_tokens_warning_title":  "This is the only time you\u0027ll see this token.",
+    "api_tokens_warning_body":  "Copy it now and store it in your integration\u0027s secret manager. The panel keeps only a hash — if you lose this value you\u0027ll need to revoke and recreate the token.",
     "api_tokens_revoke":  "Revoke",
     "api_tokens_revoke_confirm":  "Revoke token \"{}\"? Any integration using it will stop working.",
     "api_tokens_revoked":  "Token revoked",
@@ -474,13 +474,22 @@
     "cert_text_label":  "Certificate content (CRT)",
     "key_text_label":  "Private Key content (KEY)",
     "ssl_hint":  "After enabling, the panel will be accessible via https:// on the specified domain. Make sure the file paths or text data are correct.",
-  "about_title": "About & Updates",
+    "about_title":  "About \u0026 Updates",
     "current_version":  "Current version",
     "check_updates":  "Check for updates",
     "checking_updates":  "Checking...",
     "update_available":  "New version available",
     "download_update":  "Download update",
     "up_to_date":  "You have the latest version",
+    "apply_update":  "Install update",
+    "applying_update":  "Updating…",
+    "apply_update_confirm":  "Install update from git.evilfox.cc and restart the panel?",
+    "update_restarting":  "Updated. Restarting panel…",
+    "update_no_target":  "No target version. Check for updates first.",
+    "auto_update_hint":  "Auto-update pulls the release tag from git.evilfox.cc (git checkout required).",
+    "auto_update_ready":  "Git auto-update is available for this install.",
+    "auto_update_docker":  "Docker install: rebuild/pull image, or use a git checkout for one-click update.",
+    "auto_update_manual":  "One-click update needs a git clone. You can still download a release.",
     "warp_hint":  "WARP routes this host outbound through Cloudflare. It does not create a public panel URL like Quick Tunnel or ngrok.",
     "warp_install_hint":  "Install the official Cloudflare WARP client first, then restart the panel.",
     "warp_install_required":  "Install WARP first",
@@ -519,10 +528,10 @@
     "port_next_instance_hint":  "Choose a free UDP port for the additional instance.",
     "checking_server":  "Checking server services...",
     "web_servers":  "Web servers",
-  "nginx_desc": "NGINX web server with Let's Encrypt HTTPS certificate and editable index.html.",
+    "nginx_desc":  "NGINX web server with Let\u0027s Encrypt HTTPS certificate and editable index.html.",
     "nginx_domain":  "Domain",
-  "nginx_email": "Let's Encrypt email",
-  "nginx_port_hint": "HTTPS port exposed on the server. Port 80/TCP must be free and reachable for Let's Encrypt validation.",
+    "nginx_email":  "Let\u0027s Encrypt email",
+    "nginx_port_hint":  "HTTPS port exposed on the server. Port 80/TCP must be free and reachable for Let\u0027s Encrypt validation.",
     "nginx_install_hint":  "The domain must already point to this server. Port 80/TCP is used temporarily/permanently for HTTP-01 certificate validation.",
     "site":  "Site",
     "site_editor":  "Site editor",

translations/fa.json

@@ -340,9 +340,9 @@
     "clear_server":  "پاک‌سازی سرور",
     "remove_server":  "حذف سرور از پنل",
     "telemt_desc":  "پروکسی تلگرام بر پایه‌ی MTProxy با پوشش‌های پیشرفته.",
-  "hysteria_desc": "Hysteria 2 (QUIC/UDP) با تصویر رسمی tobyxdd/hysteria (apernet/hysteria) و TLS از Let's Encrypt. دامنه را ادمین هنگام نصب مشخص می‌کند.",
+    "hysteria_desc":  "Hysteria 2 (QUIC/UDP) با تصویر رسمی tobyxdd/hysteria (apernet/hysteria) و TLS از Let\u0027s Encrypt. دامنه را ادمین هنگام نصب مشخص می‌کند.",
     "hysteria_domain":  "دامنه",
-  "hysteria_email": "ایمیل Let's Encrypt",
+    "hysteria_email":  "ایمیل Let\u0027s Encrypt",
     "hysteria_port_hint":  "پورت UDP برای Hysteria (پیش‌فرض 8998). اگر 443 اشغال است پورت دیگری بگذارید.",
     "hysteria_install_hint":  "قبل از نصب، رکورد A دامنه باید به این سرور اشاره کند. BBR و obfuscation salamander به‌صورت خودکار فعال می‌شوند.",
     "hysteria_dns_hint":  "قبل از نصب این رکورد DNS را بسازید:",
@@ -350,21 +350,21 @@
     "hysteria_change_port":  "تغییر پورت",
     "hysteria_port_change_hint":  "پورت UDP. اگر address already in use دیدید، پورت آزاد بگذارید (8443 یا 8998).",
     "hysteria_settings_saved":  "پورت Hysteria به‌روز شد",
-  "hysteria_ports_warning": "هشدار: برای کار پایدار پورت‌های TCP آزاد ۸۰ و ۴۴۳ لازم است (Let's Encrypt روی ۸۰، HTTPS/QUIC روی ۴۴۳).",
+    "hysteria_ports_warning":  "هشدار: برای کار پایدار پورت‌های TCP آزاد ۸۰ و ۴۴۳ لازم است (Let\u0027s Encrypt روی ۸۰، HTTPS/QUIC روی ۴۴۳).",
     "hysteria_renew_ssl":  "تمدید SSL",
-  "hysteria_ssl_change_hint": "تغییر دامنه گواهی Let's Encrypt را دوباره صادر می‌کند (پورت ۸۰ باید آزاد باشد).",
+    "hysteria_ssl_change_hint":  "تغییر دامنه گواهی Let\u0027s Encrypt را دوباره صادر می‌کند (پورت ۸۰ باید آزاد باشد).",
     "hysteria_ssl_required":  "برای SSL دامنه و ایمیل لازم است",
-  "naiveproxy_desc": "NaiveProxy (پایدار) — HTTPS/HTTP2 با Caddy + forwardproxy و TLS از Let's Encrypt. کلاینت: Karing. از v2rayN استفاده نکنید؛ بقیه آزمایش نشده‌اند.",
+    "naiveproxy_desc":  "NaiveProxy (پایدار) — HTTPS/HTTP2 با Caddy + forwardproxy و TLS از Let\u0027s Encrypt. کلاینت: Karing. از v2rayN استفاده نکنید؛ بقیه آزمایش نشده‌اند.",
     "naiveproxy_domain":  "دامنه",
-  "naiveproxy_email": "ایمیل Let's Encrypt",
+    "naiveproxy_email":  "ایمیل Let\u0027s Encrypt",
     "naiveproxy_port_hint":  "پورت TCP 443 برای NaiveProxy ثابت است. پورت 80/TCP باید برای صدور گواهی آزاد باشد.",
-  "naiveproxy_install_hint": "قبل از نصب، رکورد A دامنه باید به این سرور اشاره کند. پورت‌های TCP آزاد ۸۰ و ۴۴۳ لازم است (Let's Encrypt و پروکسی HTTPS).",
+    "naiveproxy_install_hint":  "قبل از نصب، رکورد A دامنه باید به این سرور اشاره کند. پورت‌های TCP آزاد ۸۰ و ۴۴۳ لازم است (Let\u0027s Encrypt و پروکسی HTTPS).",
     "naiveproxy_dns_hint":  "قبل از نصب این رکورد DNS را بسازید:",
-  "naiveproxy_ports_warning": "هشدار: برای کار پایدار پورت‌های TCP آزاد ۸۰ و ۴۴۳ لازم است (Let's Encrypt روی ۸۰، پروکسی HTTPS روی ۴۴۳).",
+    "naiveproxy_ports_warning":  "هشدار: برای کار پایدار پورت‌های TCP آزاد ۸۰ و ۴۴۳ لازم است (Let\u0027s Encrypt روی ۸۰، پروکسی HTTPS روی ۴۴۳).",
     "naiveproxy_client_hint":  "نسخه پایدار. از v2rayN استفاده نکنید. در Karing تأیید شده. سایر کلاینت‌ها آزمایش نشده‌اند.",
     "server_ssl_domain":  "دامنه SSL (پیش‌فرض)",
     "server_ssl_email":  "ایمیل SSL (پیش‌فرض)",
-  "server_ssl_hint": "هنگام نصب Hysteria / NGINX روی این سرور استفاده می‌شود (Let's Encrypt).",
+    "server_ssl_hint":  "هنگام نصب Hysteria / NGINX روی این سرور استفاده می‌شود (Let\u0027s Encrypt).",
     "container_logs":  "لاگ‌های کانتینر",
     "logs_btn":  "📋 Logs",
     "logs_live":  "زنده",
@@ -409,7 +409,7 @@
     "ping_checking":  "Checking connectivity...",
     "offline":  "offline",
     "api_tokens_title":  "API tokens",
-  "api_tokens_hint": "Bearer tokens for external integrations. Send the token in the `Authorization: Bearer <token>` header. Tokens have admin-equivalent rights and stop working if their owner is disabled or demoted.",
+    "api_tokens_hint":  "Bearer tokens for external integrations. Send the token in the `Authorization: Bearer \u003ctoken\u003e` header. Tokens have admin-equivalent rights and stop working if their owner is disabled or demoted.",
     "api_tokens_empty":  "No API tokens yet. Create one to integrate the panel with an external service.",
     "api_tokens_create":  "Create token",
     "api_tokens_create_title":  "Create API token",
@@ -419,8 +419,8 @@
     "api_tokens_name_required":  "Token name is required",
     "api_tokens_created_title":  "Token created",
     "api_tokens_value_label":  "Token value",
-  "api_tokens_warning_title": "This is the only time you'll see this token.",
-  "api_tokens_warning_body": "Copy it now and store it in your integration's secret manager. The panel keeps only a hash — if you lose this value you'll need to revoke and recreate the token.",
+    "api_tokens_warning_title":  "This is the only time you\u0027ll see this token.",
+    "api_tokens_warning_body":  "Copy it now and store it in your integration\u0027s secret manager. The panel keeps only a hash — if you lose this value you\u0027ll need to revoke and recreate the token.",
     "api_tokens_revoke":  "Revoke",
     "api_tokens_revoke_confirm":  "Revoke token \"{}\"? Any integration using it will stop working.",
     "api_tokens_revoked":  "Token revoked",
@@ -470,10 +470,10 @@
     "new_instance":  "new instance",
     "port_next_instance_hint":  "Choose a free UDP port for the additional instance.",
     "web_servers":  "Web servers",
-  "nginx_desc": "NGINX web server with Let's Encrypt HTTPS certificate and editable index.html.",
+    "nginx_desc":  "NGINX web server with Let\u0027s Encrypt HTTPS certificate and editable index.html.",
     "nginx_domain":  "Domain",
-  "nginx_email": "Let's Encrypt email",
-  "nginx_port_hint": "HTTPS port exposed on the server. Port 80/TCP must be free and reachable for Let's Encrypt validation.",
+    "nginx_email":  "Let\u0027s Encrypt email",
+    "nginx_port_hint":  "HTTPS port exposed on the server. Port 80/TCP must be free and reachable for Let\u0027s Encrypt validation.",
     "nginx_install_hint":  "The domain must already point to this server. Port 80/TCP is used for HTTP-01 certificate validation.",
     "site":  "Site",
     "site_editor":  "Site editor",
@@ -519,4 +519,21 @@
     "xui_server_select_label":  "سرور 3x-ui",
     "xui_server_select_hint":  "پنل 3x-ui که URL اشتراک می‌دهد را انتخاب کنید.",
     "xui_server_delete_confirm":  "این سرور 3x-ui حذف شود؟"
+,
+    "about_title":  "About & Updates",
+    "current_version":  "Current version",
+    "check_updates":  "Check for updates",
+    "checking_updates":  "Checking...",
+    "update_available":  "New version available",
+    "download_update":  "Download update",
+    "up_to_date":  "You have the latest version",
+    "apply_update":  "Install update",
+    "applying_update":  "Updating…",
+    "apply_update_confirm":  "Install update from git.evilfox.cc and restart the panel?",
+    "update_restarting":  "Updated. Restarting panel…",
+    "update_no_target":  "No target version. Check for updates first.",
+    "auto_update_hint":  "Auto-update pulls the release tag from git.evilfox.cc (git checkout required).",
+    "auto_update_ready":  "Git auto-update is available for this install.",
+    "auto_update_docker":  "Docker install: rebuild/pull image, or use a git checkout for one-click update.",
+    "auto_update_manual":  "One-click update needs a git clone. You can still download a release."
 }

translations/fr.json

@@ -1,7 +1,7 @@
 {
     "nav_servers":  "Serveurs",
     "nav_users":  "Utilisateurs",
-  "nav_invites": "Liens d'invitation",
+    "nav_invites":  "Liens d\u0027invitation",
     "nav_settings":  "Paramètres",
     "nav_connections":  "Connexions",
     "nav_logout":  "Déconnexion",
@@ -56,7 +56,7 @@
     "error":  "Erreur",
     "info":  "Info",
     "login_title":  "Connexion au Panneau",
-  "username": "Nom d'utilisateur",
+    "username":  "Nom d\u0027utilisateur",
     "password":  "Mot de passe",
     "captcha":  "Captcha",
     "captcha_placeholder":  "Entrez les caractères",
@@ -79,8 +79,8 @@
     "no_connections":  "Aucune connexion",
     "no_connections_desc":  "Ajoutez votre première connexion pour générer un fichier VPN",
     "install_protocol":  "Installer le protocole",
-  "port_default_hint": "Port par défaut : 55424. Assurez-vous qu'il est libre.",
-  "port_xray_hint": "Port recommandé : 443. Assurez-vous qu'il n'est pas utilisé par un serveur web.",
+    "port_default_hint":  "Port par défaut : 55424. Assurez-vous qu\u0027il est libre.",
+    "port_xray_hint":  "Port recommandé : 443. Assurez-vous qu\u0027il n\u0027est pas utilisé par un serveur web.",
     "reinstall":  "Réinstaller",
     "uninstall_confirm":  "Désinstaller {} ? Toutes les données seront perdues.",
     "stop_container_confirm":  "Arrêter le conteneur {} ?",
@@ -93,7 +93,7 @@
     "add_connection":  "Ajouter une connexion",
     "connection_name":  "Nom de la connexion",
     "connection_name_placeholder":  "Ex: iPhone, Laptop",
-  "assign_to_user": "Assigner à l'utilisateur (optionnel)",
+    "assign_to_user":  "Assigner à l\u0027utilisateur (optionnel)",
     "no_assign":  "— Aucune assignation —",
     "create":  "Créer",
     "creating":  "Création...",
@@ -107,19 +107,19 @@
     "download_conf":  "⬇ Télécharger .conf",
     "copy_key":  "📋 Copier la clé",
     "vpn_link_hint":  "Collez ce lien dans AmneziaVPN pour une config automatique",
-  "qr_hint": "Scannez le code QR dans l'application AmneziaVPN",
+    "qr_hint":  "Scannez le code QR dans l\u0027application AmneziaVPN",
     "no_data":  "Aucune donnée",
     "start_btn":  "▶ Start",
     "stop_btn":  "⏹ Stop",
     "config_btn":  "⚙️ Config",
     "done":  "Terminé",
     "installing":  "Installation...",
-  "start_install": "Début de l'installation...",
+    "start_install":  "Début de l\u0027installation...",
     "check_docker":  "Vérification de Docker...",
-  "prepare_host": "Préparation de l'hôte...",
+    "prepare_host":  "Préparation de l\u0027hôte...",
     "build_container":  "Construction du conteneur...",
     "install_success":  "Protocole installé avec succès !",
-  "install_error": "Erreur d'installation : ",
+    "install_error":  "Erreur d\u0027installation : ",
     "qr_error":  "Échec de génération du QR code",
     "users_title":  "Utilisateurs",
     "search_placeholder":  "Recherche par nom, email ou Telegram...",
@@ -130,7 +130,7 @@
     "loading_users":  "Chargement des utilisateurs...",
     "nothing_found":  "Rien trouvé",
     "search_empty_desc":  "Essayez une autre requête ou créez un utilisateur",
-  "username_label": "Nom d'utilisateur",
+    "username_label":  "Nom d\u0027utilisateur",
     "password_label":  "Mot de passe",
     "role_label":  "Rôle",
     "role_user_desc":  "User — voit ses propres connexions",
@@ -149,7 +149,7 @@
     "edit_user_email":  "Email (optionnel)",
     "edit_user_limit":  "Limite trafic (Go) (0 = illimité)",
     "new_password_hint":  "Nouveau mot de passe (laisser vide si inchangé)",
-  "op_type_label": "Type d'opération",
+    "op_type_label":  "Type d\u0027opération",
     "create_new_conn":  "Créer nouvelle connexion",
     "link_existing_conn":  "Lier existante",
     "select_existing_conn":  "Sélectionner connexion",
@@ -164,18 +164,18 @@
     "disabling":  "Désactivation",
     "user_enabled":  "Utilisateur activé",
     "user_disabled":  "Utilisateur désactivé",
-  "delete_user_confirm": "Supprimer l'utilisateur ? Ses connexions seront supprimées.",
-  "share_access": "Partager l'accès",
-  "enable_public_access": "Activer l'accès public",
+    "delete_user_confirm":  "Supprimer l\u0027utilisateur ? Ses connexions seront supprimées.",
+    "share_access":  "Partager l\u0027accès",
+    "enable_public_access":  "Activer l\u0027accès public",
     "share_password_label":  "Mot de passe (optionnel)",
-  "share_password_hint": "Si défini, requis pour l'accès",
+    "share_password_hint":  "Si défini, requis pour l\u0027accès",
     "guest_settings_title":  "Accès invité",
-  "guest_enable": "Activer l'accès invité (sans inscription)",
-  "guest_enable_hint": "Lien public sur la page de connexion. Les invités voient les connexions de l'utilisateur choisi.",
+    "guest_enable":  "Activer l\u0027accès invité (sans inscription)",
+    "guest_enable_hint":  "Lien public sur la page de connexion. Les invités voient les connexions de l\u0027utilisateur choisi.",
     "guest_link_label":  "Lien invité",
     "guest_link_placeholder":  "Enregistrez pour générer le lien",
     "guest_regen_token":  "Régénérer le lien",
-  "guest_regen_confirm": "Régénérer le lien invité ? L'ancien ne fonctionnera plus.",
+    "guest_regen_confirm":  "Régénérer le lien invité ? L\u0027ancien ne fonctionnera plus.",
     "guest_token_updated":  "Lien invité mis à jour",
     "guest_user_label":  "Utilisateur des connexions invitées",
     "guest_user_none":  "— Choisir —",
@@ -183,7 +183,7 @@
     "guest_password_label":  "Mot de passe invité (optionnel)",
     "guest_password_keep":  "Laisser vide pour conserver",
     "guest_clear_password":  "Retirer le mot de passe",
-  "guest_allow_create": "Autoriser la création d'une config",
+    "guest_allow_create":  "Autoriser la création d\u0027une config",
     "guest_access_btn":  "Continuer en invité",
     "guest_access_login_hint":  "Sans compte",
     "guest_title":  "Accès invité",
@@ -194,15 +194,15 @@
     "guest_not_found":  "404 Introuvable",
     "guest_not_found_desc":  "Accès invité désactivé ou lien invalide.",
     "wrong_guest_password":  "Mauvais mot de passe",
-  "invites_title": "Liens d'invitation",
-  "invites_hint": "Créez des liens partageables. Le destinataire peut créer une config VPN — vous fixez le nombre d'utilisations.",
+    "invites_title":  "Liens d\u0027invitation",
+    "invites_hint":  "Créez des liens partageables. Le destinataire peut créer une config VPN — vous fixez le nombre d\u0027utilisations.",
     "invites_empty":  "Aucun lien",
     "invites_empty_desc":  "Créez un lien à partager — sans inscription.",
     "invite_create":  "Créer un lien",
     "invite_edit":  "Modifier le lien",
     "invite_active":  "Actif",
     "invite_expired":  "Expiré",
-  "invite_exhausted": "Plus d'utilisations",
+    "invite_exhausted":  "Plus d\u0027utilisations",
     "invite_uses":  "Utilisations",
     "invite_name_label":  "Nom du lien",
     "invite_max_uses_label":  "Configs max",
@@ -213,13 +213,13 @@
     "invite_password_label":  "Mot de passe (optionnel)",
     "invite_expires_label":  "Expiration (optionnel)",
     "invite_duration_label":  "Durée du config (jours)",
-  "invite_duration_hint": "Commence quand l'utilisateur clique Obtenir. 0 = illimité.",
+    "invite_duration_hint":  "Commence quand l\u0027utilisateur clique Obtenir. 0 = illimité.",
     "invite_duration_short":  "Durée",
     "invite_duration_starts_hint":  "Après obtention, valable {} jour(s)",
-  "invite_config_expires_at": "Valable jusqu'au : {}",
+    "invite_config_expires_at":  "Valable jusqu\u0027au : {}",
     "invite_sub_tab":  "Abonnement",
     "days_short":  "j",
-  "invite_clear_expires": "Retirer l'expiration",
+    "invite_clear_expires":  "Retirer l\u0027expiration",
     "invite_note_label":  "Note (admin)",
     "invite_note_placeholder":  "Commentaire interne",
     "invite_reset_used":  "Réinitialiser le compteur",
@@ -255,7 +255,7 @@
     "bot_start_btn":  "▶️ Démarrer",
     "bot_hint":  "Sauvegardez après modification du token. Le bot redémarrera.",
     "api_docs_title":  "🔌 Documentation API",
-  "api_docs_hint": "Utilisez ces interfaces pour explorer l'API",
+    "api_docs_hint":  "Utilisez ces interfaces pour explorer l\u0027API",
     "tunnels_title":  "Tunnels",
     "local_server":  "Serveur local",
     "tunnel_install_enable":  "Installer et activer",
@@ -269,8 +269,8 @@
     "tunnel_delete_confirm":  "Arrêter et supprimer ce binaire de tunnel géré par le panneau ?",
     "tunnel_starting":  "Démarrage du tunnel...",
     "tunnel_started":  "Tunnel démarré",
-  "tunnel_waiting_url": "Tunnel démarré. En attente de l'URL publique...",
-  "tunnel_no_public_url": "L'URL publique apparaîtra ici après le démarrage du tunnel.",
+    "tunnel_waiting_url":  "Tunnel démarré. En attente de l\u0027URL publique...",
+    "tunnel_no_public_url":  "L\u0027URL publique apparaîtra ici après le démarrage du tunnel.",
     "tunnels_hint":  "Les tunnels rapides exposent ce panneau local sur Internet. Gardez des identifiants administrateur robustes et partagez les URL publiques uniquement avec des utilisateurs de confiance.",
     "ngrok_authtoken_placeholder":  "ngrok authtoken (optionnel pour certains comptes)",
     "import_users_title":  "📤 Import Utilisateurs",
@@ -294,7 +294,7 @@
     "deleting":  "Suppression...",
     "my_connections_title":  "Mes Connexions",
     "show_config":  "📄 Voir config",
-  "no_connections_user_desc": "Contactez l'admin pour une connexion",
+    "no_connections_user_desc":  "Contactez l\u0027admin pour une connexion",
     "share_title":  "Accès Connexion",
     "vpn_access":  "Accès VPN",
     "user_label_share":  "Utilisateur",
@@ -313,7 +313,7 @@
     "invalid_captcha":  "Captcha invalide",
     "account_disabled":  "Compte désactivé",
     "invalid_login":  "Login ou password incorrect",
-  "user_exists": "L'utilisateur existe déjà",
+    "user_exists":  "L\u0027utilisateur existe déjà",
     "cannot_delete_self":  "Vous ne pouvez pas vous supprimer",
     "wrong_share_password":  "Mauvais mot de passe",
     "saving":  "Enregistrement...",
@@ -326,11 +326,11 @@
     "backup_title":  "Sauvegarde Simple",
     "download_backup":  "Télécharger data.json",
     "restore_backup":  "Restaurer depuis un fichier",
-  "restore_confirm": "Êtes-vous sûr ? Les données actuelles seront écrasées et l'application redémarrera.",
+    "restore_confirm":  "Êtes-vous sûr ? Les données actuelles seront écrasées et l\u0027application redémarrera.",
     "restore_success":  "Restauration réussie ! Redémarrage...",
     "invalid_backup_file":  "Fichier de sauvegarde ou structure invalide",
     "config_unavailable":  "Configuration indisponible",
-  "config_unavailable_desc": "Ce client a été créé via l'application native Amnezia.\\nLa clé privée est stockée uniquement sur l'appareil de l'utilisateur et ne peut pas être récupérée par le serveur.",
+    "config_unavailable_desc":  "Ce client a été créé via l\u0027application native Amnezia.\\nLa clé privée est stockée uniquement sur l\u0027appareil de l\u0027utilisateur et ne peut pas être récupérée par le serveur.",
     "client_public_key":  "Clé publique du client :",
     "management":  "Gestion",
     "server_management":  "Gestion du serveur",
@@ -340,31 +340,31 @@
     "clear_server":  "Réinitialiser le serveur",
     "remove_server":  "Retirer le serveur du panneau",
     "telemt_desc":  "Proxy Telegram basé sur MTProxy avec obfuscation avancée.",
-  "hysteria_desc": "Hysteria 2 (QUIC/UDP) via l'image officielle tobyxdd/hysteria (apernet/hysteria) avec TLS Let's Encrypt. Le domaine est défini par l'admin à l'installation.",
+    "hysteria_desc":  "Hysteria 2 (QUIC/UDP) via l\u0027image officielle tobyxdd/hysteria (apernet/hysteria) avec TLS Let\u0027s Encrypt. Le domaine est défini par l\u0027admin à l\u0027installation.",
     "hysteria_domain":  "Domaine",
-  "hysteria_email": "Email Let's Encrypt",
-  "hysteria_port_hint": "Port UDP pour Hysteria (8998 par défaut). Évitez 443 s'il est déjà pris.",
-  "hysteria_install_hint": "L'enregistrement A du domaine doit pointer vers ce serveur. BBR et obfuscation salamander sont activés automatiquement.",
-  "hysteria_dns_hint": "Créez cet enregistrement DNS avant l'installation :",
+    "hysteria_email":  "Email Let\u0027s Encrypt",
+    "hysteria_port_hint":  "Port UDP pour Hysteria (8998 par défaut). Évitez 443 s\u0027il est déjà pris.",
+    "hysteria_install_hint":  "L\u0027enregistrement A du domaine doit pointer vers ce serveur. BBR et obfuscation salamander sont activés automatiquement.",
+    "hysteria_dns_hint":  "Créez cet enregistrement DNS avant l\u0027installation :",
     "hysteria_settings_title":  "Paramètres Hysteria",
     "hysteria_change_port":  "Changer le port",
     "hysteria_port_change_hint":  "Port UDP. Si « address already in use », choisissez un port libre (8443 ou 8998).",
     "hysteria_settings_saved":  "Port Hysteria mis à jour",
-  "hysteria_ports_warning": "Attention : les ports TCP 80 et 443 doivent être libres pour un fonctionnement stable (Let's Encrypt sur 80, HTTPS/QUIC sur 443).",
+    "hysteria_ports_warning":  "Attention : les ports TCP 80 et 443 doivent être libres pour un fonctionnement stable (Let\u0027s Encrypt sur 80, HTTPS/QUIC sur 443).",
     "hysteria_renew_ssl":  "Renouveler SSL",
-  "hysteria_ssl_change_hint": "Changer le domaine réémet le certificat Let's Encrypt (le port 80 doit être libre).",
+    "hysteria_ssl_change_hint":  "Changer le domaine réémet le certificat Let\u0027s Encrypt (le port 80 doit être libre).",
     "hysteria_ssl_required":  "Domaine et email requis pour SSL",
-  "naiveproxy_desc": "NaiveProxy (stable) — HTTPS/HTTP2 via Caddy + forwardproxy, TLS Let's Encrypt. Client : utilisez Karing. N'utilisez pas v2rayN ; autres clients non testés.",
+    "naiveproxy_desc":  "NaiveProxy (stable) — HTTPS/HTTP2 via Caddy + forwardproxy, TLS Let\u0027s Encrypt. Client : utilisez Karing. N\u0027utilisez pas v2rayN ; autres clients non testés.",
     "naiveproxy_domain":  "Domaine",
-  "naiveproxy_email": "Email Let's Encrypt",
-  "naiveproxy_port_hint": "Le port TCP 443 est fixe pour NaiveProxy. Le port 80/TCP doit être libre pour l'émission du certificat.",
-  "naiveproxy_install_hint": "L'enregistrement A du domaine doit pointer vers ce serveur. Les ports TCP 80 et 443 doivent être libres (Let's Encrypt et proxy HTTPS).",
-  "naiveproxy_dns_hint": "Créez cet enregistrement DNS avant l'installation :",
-  "naiveproxy_ports_warning": "Attention : les ports TCP 80 et 443 doivent être libres pour un fonctionnement stable (Let's Encrypt sur 80, proxy HTTPS sur 443).",
-  "naiveproxy_client_hint": "Version stable. N'utilisez PAS v2rayN. Fonctionne avec Karing. Autres clients non testés.",
+    "naiveproxy_email":  "Email Let\u0027s Encrypt",
+    "naiveproxy_port_hint":  "Le port TCP 443 est fixe pour NaiveProxy. Le port 80/TCP doit être libre pour l\u0027émission du certificat.",
+    "naiveproxy_install_hint":  "L\u0027enregistrement A du domaine doit pointer vers ce serveur. Les ports TCP 80 et 443 doivent être libres (Let\u0027s Encrypt et proxy HTTPS).",
+    "naiveproxy_dns_hint":  "Créez cet enregistrement DNS avant l\u0027installation :",
+    "naiveproxy_ports_warning":  "Attention : les ports TCP 80 et 443 doivent être libres pour un fonctionnement stable (Let\u0027s Encrypt sur 80, proxy HTTPS sur 443).",
+    "naiveproxy_client_hint":  "Version stable. N\u0027utilisez PAS v2rayN. Fonctionne avec Karing. Autres clients non testés.",
     "server_ssl_domain":  "Domaine SSL (par défaut)",
     "server_ssl_email":  "Email SSL (par défaut)",
-  "server_ssl_hint": "Utilisé lors de l'installation de Hysteria / NGINX sur ce serveur (Let's Encrypt).",
+    "server_ssl_hint":  "Utilisé lors de l\u0027installation de Hysteria / NGINX sur ce serveur (Let\u0027s Encrypt).",
     "container_logs":  "Logs du conteneur",
     "logs_btn":  "📋 Logs",
     "logs_live":  "Temps réel",
@@ -409,7 +409,7 @@
     "ping_checking":  "Checking connectivity...",
     "offline":  "offline",
     "api_tokens_title":  "API tokens",
-  "api_tokens_hint": "Bearer tokens for external integrations. Send the token in the `Authorization: Bearer <token>` header. Tokens have admin-equivalent rights and stop working if their owner is disabled or demoted.",
+    "api_tokens_hint":  "Bearer tokens for external integrations. Send the token in the `Authorization: Bearer \u003ctoken\u003e` header. Tokens have admin-equivalent rights and stop working if their owner is disabled or demoted.",
     "api_tokens_empty":  "No API tokens yet. Create one to integrate the panel with an external service.",
     "api_tokens_create":  "Create token",
     "api_tokens_create_title":  "Create API token",
@@ -419,8 +419,8 @@
     "api_tokens_name_required":  "Token name is required",
     "api_tokens_created_title":  "Token created",
     "api_tokens_value_label":  "Token value",
-  "api_tokens_warning_title": "This is the only time you'll see this token.",
-  "api_tokens_warning_body": "Copy it now and store it in your integration's secret manager. The panel keeps only a hash — if you lose this value you'll need to revoke and recreate the token.",
+    "api_tokens_warning_title":  "This is the only time you\u0027ll see this token.",
+    "api_tokens_warning_body":  "Copy it now and store it in your integration\u0027s secret manager. The panel keeps only a hash — if you lose this value you\u0027ll need to revoke and recreate the token.",
     "api_tokens_revoke":  "Revoke",
     "api_tokens_revoke_confirm":  "Revoke token \"{}\"? Any integration using it will stop working.",
     "api_tokens_revoked":  "Token revoked",
@@ -470,10 +470,10 @@
     "new_instance":  "new instance",
     "port_next_instance_hint":  "Choose a free UDP port for the additional instance.",
     "web_servers":  "Serveurs web",
-  "nginx_desc": "Serveur web NGINX avec certificat HTTPS Let's Encrypt et index.html modifiable.",
+    "nginx_desc":  "Serveur web NGINX avec certificat HTTPS Let\u0027s Encrypt et index.html modifiable.",
     "nginx_domain":  "Domaine",
-  "nginx_email": "Email Let's Encrypt",
-  "nginx_port_hint": "Port HTTPS exposé sur le serveur. Le port 80/TCP doit être libre et accessible pour la validation Let's Encrypt.",
+    "nginx_email":  "Email Let\u0027s Encrypt",
+    "nginx_port_hint":  "Port HTTPS exposé sur le serveur. Le port 80/TCP doit être libre et accessible pour la validation Let\u0027s Encrypt.",
     "nginx_install_hint":  "Le domaine doit déjà pointer vers ce serveur. Le port 80/TCP est utilisé pour la validation HTTP-01 du certificat.",
     "site":  "Site",
     "site_editor":  "Éditeur du site",
@@ -488,17 +488,17 @@
     "no_backups":  "No backups yet",
     "no_backups_desc":  "Create the first backup for this protocol.",
     "refresh":  "Refresh",
-  "guest_allow_create_hint": "Crée une config pour l'utilisateur invité (3x-ui VLESS ou protocole serveur).",
-  "invite_inbound_hint": "Choisissez l'inbound VLESS une fois",
+    "guest_allow_create_hint":  "Crée une config pour l\u0027utilisateur invité (3x-ui VLESS ou protocole serveur).",
+    "invite_inbound_hint":  "Choisissez l\u0027inbound VLESS une fois",
     "invite_inbound_loading":  "Chargement…",
     "invite_inbound_empty":  "Aucun inbound VLESS",
-  "invite_inbound_need_xui": "Configurez 3x-ui d'abord",
+    "invite_inbound_need_xui":  "Configurez 3x-ui d\u0027abord",
     "invite_inbound_required":  "Sélectionnez un inbound VLESS",
-  "invite_sub_url_missing_title": "URL d'abonnement manquante",
-  "invite_sub_url_missing_hint": "Dans Paramètres → 3x-ui, définissez l'URL de base /sub.",
+    "invite_sub_url_missing_title":  "URL d\u0027abonnement manquante",
+    "invite_sub_url_missing_hint":  "Dans Paramètres → 3x-ui, définissez l\u0027URL de base /sub.",
     "xui_url_label":  "URL 3x-ui",
     "xui_url_hint":  "Inclure le schéma, le port et webBasePath si configuré",
-  "xui_sub_url_label": "URL de base d'abonnement",
+    "xui_sub_url_label":  "URL de base d\u0027abonnement",
     "xui_sub_url_hint":  "Base /sub publique sans slash final (ex: https://host:2096/sub).",
     "xui_api_token_label":  "Jeton API (préféré)",
     "xui_api_token_placeholder":  "Settings → Security → API Token",
@@ -508,15 +508,32 @@
     "xui_sync_hint":  "Les clients 3x-ui deviennent des utilisateurs du panneau (liés par email)",
     "xui_inbound_label":  "Inbound VLESS",
     "xui_inbound_auto":  "Auto (premier inbound VLESS)",
-  "xui_inbound_hint": "Utilisé pour créer des configs 3x-ui VLESS. Créez d'abord un inbound VLESS dans 3x-ui.",
+    "xui_inbound_hint":  "Utilisé pour créer des configs 3x-ui VLESS. Créez d\u0027abord un inbound VLESS dans 3x-ui.",
     "xui_servers_title":  "Serveurs 3x-ui",
-  "xui_servers_hint": "Ajoutez plusieurs panneaux 3x-ui. À la création, choisissez le serveur par nom — son URL d'abonnement est utilisée.",
+    "xui_servers_hint":  "Ajoutez plusieurs panneaux 3x-ui. À la création, choisissez le serveur par nom — son URL d\u0027abonnement est utilisée.",
     "xui_servers_empty":  "Aucun serveur 3x-ui. Cliquez sur Ajouter.",
-  "xui_servers_manage_hint": "Les URL et bases d'abonnement se gèrent dans la section « Serveurs 3x-ui » ci-dessous.",
+    "xui_servers_manage_hint":  "Les URL et bases d\u0027abonnement se gèrent dans la section « Serveurs 3x-ui » ci-dessous.",
     "xui_server_add":  "Ajouter un serveur",
     "xui_server_name_label":  "Nom / description",
     "xui_server_name_hint":  "Affiché dans les invitations (ex: US, NL).",
     "xui_server_select_label":  "Serveur 3x-ui",
-  "xui_server_select_hint": "Choisissez le panneau 3x-ui qui émettra l'URL d'abonnement.",
+    "xui_server_select_hint":  "Choisissez le panneau 3x-ui qui émettra l\u0027URL d\u0027abonnement.",
     "xui_server_delete_confirm":  "Supprimer ce serveur 3x-ui ?"
+,
+    "about_title":  "About & Updates",
+    "current_version":  "Current version",
+    "check_updates":  "Check for updates",
+    "checking_updates":  "Checking...",
+    "update_available":  "New version available",
+    "download_update":  "Download update",
+    "up_to_date":  "You have the latest version",
+    "apply_update":  "Install update",
+    "applying_update":  "Updating…",
+    "apply_update_confirm":  "Install update from git.evilfox.cc and restart the panel?",
+    "update_restarting":  "Updated. Restarting panel…",
+    "update_no_target":  "No target version. Check for updates first.",
+    "auto_update_hint":  "Auto-update pulls the release tag from git.evilfox.cc (git checkout required).",
+    "auto_update_ready":  "Git auto-update is available for this install.",
+    "auto_update_docker":  "Docker install: rebuild/pull image, or use a git checkout for one-click update.",
+    "auto_update_manual":  "One-click update needs a git clone. You can still download a release."
 }

translations/ru.json

@@ -350,31 +350,31 @@
     "config_unavailable_desc":  "Этот клиент был создан через нативное приложение Amnezia.\\nПриватный ключ хранится только на устройстве пользователя и не может быть восстановлен сервером.",
     "client_public_key":  "Публичный ключ клиента:",
     "telemt_desc":  "Прокси для Telegram на базе MTProxy с продвинутой обфускацией и эмуляцией TLS.",
-  "hysteria_desc": "Hysteria 2 (QUIC/UDP) на официальном образе tobyxdd/hysteria (apernet/hysteria) с TLS от Let's Encrypt. Домен указывает админ при установке.",
+    "hysteria_desc":  "Hysteria 2 (QUIC/UDP) на официальном образе tobyxdd/hysteria (apernet/hysteria) с TLS от Let\u0027s Encrypt. Домен указывает админ при установке.",
     "hysteria_domain":  "Домен",
-  "hysteria_email": "Email для Let's Encrypt",
+    "hysteria_email":  "Email для Let\u0027s Encrypt",
     "hysteria_port_hint":  "UDP-порт Hysteria (по умолчанию 8998). Не ставьте 443, если он уже занят nginx/xray. Порт 80/TCP должен быть свободен для выпуска сертификата.",
-  "hysteria_install_hint": "Перед установкой A-запись домена должна указывать на этот сервер. Порт 80/TCP временно используется для HTTP-01 проверки Let's Encrypt. BBR и obfuscation salamander включаются автоматически.",
+    "hysteria_install_hint":  "Перед установкой A-запись домена должна указывать на этот сервер. Порт 80/TCP временно используется для HTTP-01 проверки Let\u0027s Encrypt. BBR и obfuscation salamander включаются автоматически.",
     "hysteria_dns_hint":  "Перед установкой создайте DNS-запись:",
     "hysteria_settings_title":  "Настройки Hysteria",
     "hysteria_change_port":  "Сменить порт",
     "hysteria_port_change_hint":  "UDP-порт прослушивания. Если ошибка «address already in use» — выберите свободный порт (8443 или 8998), сохраните и заново импортируйте ссылку в клиент.",
     "hysteria_settings_saved":  "Настройки Hysteria обновлены",
-  "hysteria_ports_warning": "Внимание: для стабильной работы нужны свободные TCP-порты 80 и 443 (Let's Encrypt на 80, HTTPS/QUIC на 443).",
+    "hysteria_ports_warning":  "Внимание: для стабильной работы нужны свободные TCP-порты 80 и 443 (Let\u0027s Encrypt на 80, HTTPS/QUIC на 443).",
     "hysteria_renew_ssl":  "Обновить SSL",
-  "hysteria_ssl_change_hint": "Смена домена заново выпускает сертификат Let's Encrypt (порт 80 должен быть свободен).",
+    "hysteria_ssl_change_hint":  "Смена домена заново выпускает сертификат Let\u0027s Encrypt (порт 80 должен быть свободен).",
     "hysteria_ssl_required":  "Для SSL нужны домен и email",
-  "naiveproxy_desc": "NaiveProxy (стабильный) — HTTPS/HTTP2 через Caddy + forwardproxy, TLS Let's Encrypt. Клиент: используйте Karing. Не используйте v2rayN; остальные клиенты под вопросом.",
+    "naiveproxy_desc":  "NaiveProxy (стабильный) — HTTPS/HTTP2 через Caddy + forwardproxy, TLS Let\u0027s Encrypt. Клиент: используйте Karing. Не используйте v2rayN; остальные клиенты под вопросом.",
     "naiveproxy_domain":  "Домен",
-  "naiveproxy_email": "Email для Let's Encrypt",
+    "naiveproxy_email":  "Email для Let\u0027s Encrypt",
     "naiveproxy_port_hint":  "TCP-порт 443 фиксирован для NaiveProxy. Порт 80/TCP должен быть свободен для выпуска сертификата.",
-  "naiveproxy_install_hint": "Перед установкой A-запись домена должна указывать на этот сервер. Нужны свободные TCP-порты 80 и 443 (Let's Encrypt и HTTPS-прокси).",
+    "naiveproxy_install_hint":  "Перед установкой A-запись домена должна указывать на этот сервер. Нужны свободные TCP-порты 80 и 443 (Let\u0027s Encrypt и HTTPS-прокси).",
     "naiveproxy_dns_hint":  "Перед установкой создайте DNS-запись:",
-  "naiveproxy_ports_warning": "Внимание: для стабильной работы нужны свободные TCP-порты 80 и 443 (Let's Encrypt на 80, HTTPS-прокси на 443).",
+    "naiveproxy_ports_warning":  "Внимание: для стабильной работы нужны свободные TCP-порты 80 и 443 (Let\u0027s Encrypt на 80, HTTPS-прокси на 443).",
     "naiveproxy_client_hint":  "Стабильная версия. НЕ используйте v2rayN. Точно работает в Karing. Остальные клиенты под вопросом.",
     "server_ssl_domain":  "SSL-домен (по умолчанию)",
     "server_ssl_email":  "SSL-email (по умолчанию)",
-  "server_ssl_hint": "Подставляется при установке Hysteria / NGINX на этом сервере (Let's Encrypt).",
+    "server_ssl_hint":  "Подставляется при установке Hysteria / NGINX на этом сервере (Let\u0027s Encrypt).",
     "container_logs":  "Логи контейнера",
     "logs_btn":  "📋 Логи",
     "logs_live":  "В реальном времени",
@@ -433,7 +433,7 @@
     "ping_checking":  "Проверяем соединение...",
     "offline":  "недоступен",
     "api_tokens_title":  "API-токены",
-  "api_tokens_hint": "Bearer-токены для внешних интеграций. Передавайте токен в заголовке `Authorization: Bearer <token>`. Токены имеют права администратора и перестают работать, если их владелец отключён или понижен в роли.",
+    "api_tokens_hint":  "Bearer-токены для внешних интеграций. Передавайте токен в заголовке `Authorization: Bearer \u003ctoken\u003e`. Токены имеют права администратора и перестают работать, если их владелец отключён или понижен в роли.",
     "api_tokens_empty":  "Пока нет ни одного API-токена. Создайте, чтобы подключить панель к внешнему сервису.",
     "api_tokens_create":  "Создать токен",
     "api_tokens_create_title":  "Создание API-токена",
@@ -481,6 +481,15 @@
     "update_available":  "Доступна новая версия",
     "download_update":  "Скачать обновление",
     "up_to_date":  "У вас установлена последняя версия",
+    "apply_update":  "Установить обновление",
+    "applying_update":  "Обновление…",
+    "apply_update_confirm":  "Установить обновление с git.evilfox.cc и перезапустить панель?",
+    "update_restarting":  "Обновлено. Перезапуск панели…",
+    "update_no_target":  "Нет целевой версии. Сначала проверьте обновления.",
+    "auto_update_hint":  "Автообновление тянет тег релиза с git.evilfox.cc (нужен git clone панели).",
+    "auto_update_ready":  "Для этой установки доступно автообновление через git.",
+    "auto_update_docker":  "Docker: пересоберите/подтяните образ или используйте git clone для обновления в один клик.",
+    "auto_update_manual":  "Обновление в один клик требует git clone. Можно скачать релиз вручную.",
     "warp_hint":  "WARP направляет исходящий трафик этого хоста через Cloudflare. Он не создаёт публичный URL панели как Quick Tunnel или ngrok.",
     "warp_install_hint":  "Сначала установите официальный клиент Cloudflare WARP, затем перезапустите панель.",
     "warp_install_required":  "Сначала установите WARP",
@@ -519,10 +528,10 @@
     "port_next_instance_hint":  "Выберите свободный UDP-порт для дополнительного экземпляра.",
     "checking_server":  "Проверяем сервисы сервера...",
     "web_servers":  "Веб-серверы",
-  "nginx_desc": "NGINX веб-сервер с HTTPS-сертификатом Let's Encrypt и редактируемым index.html.",
+    "nginx_desc":  "NGINX веб-сервер с HTTPS-сертификатом Let\u0027s Encrypt и редактируемым index.html.",
     "nginx_domain":  "Домен",
-  "nginx_email": "Email для Let's Encrypt",
-  "nginx_port_hint": "HTTPS-порт на сервере. Порт 80/TCP должен быть свободен и доступен для проверки Let's Encrypt.",
+    "nginx_email":  "Email для Let\u0027s Encrypt",
+    "nginx_port_hint":  "HTTPS-порт на сервере. Порт 80/TCP должен быть свободен и доступен для проверки Let\u0027s Encrypt.",
     "nginx_install_hint":  "Домен уже должен указывать на этот сервер. Порт 80/TCP используется для HTTP-01 проверки сертификата.",
     "site":  "Сайт",
     "site_editor":  "Редактор сайта",

translations/zh.json

@@ -340,9 +340,9 @@
     "clear_server":  "清除服务器",
     "remove_server":  "从面板移除服务器",
     "telemt_desc":  "基于 MTProxy 的 Telegram 代理，支持高级混淆。",
-  "hysteria_desc": "Hysteria 2（QUIC/UDP，官方 tobyxdd/hysteria / apernet/hysteria），支持 Let's Encrypt TLS。安装时由管理员指定域名。",
+    "hysteria_desc":  "Hysteria 2（QUIC/UDP，官方 tobyxdd/hysteria / apernet/hysteria），支持 Let\u0027s Encrypt TLS。安装时由管理员指定域名。",
     "hysteria_domain":  "域名",
-  "hysteria_email": "Let's Encrypt 邮箱",
+    "hysteria_email":  "Let\u0027s Encrypt 邮箱",
     "hysteria_port_hint":  "Hysteria UDP 端口（默认 8998）。若 443 已被占用请换端口。",
     "hysteria_install_hint":  "安装前请将域名 A 记录指向本服务器。将自动启用 BBR 与 salamander 混淆。",
     "hysteria_dns_hint":  "安装前请创建此 DNS 记录：",
@@ -350,21 +350,21 @@
     "hysteria_change_port":  "更改端口",
     "hysteria_port_change_hint":  "UDP 监听端口。若提示 address already in use，请改用空闲端口（如 8443 或 8998）。",
     "hysteria_settings_saved":  "Hysteria 端口已更新",
-  "hysteria_ports_warning": "注意：稳定运行需要空闲的 TCP 端口 80 和 443（Let's Encrypt 使用 80，HTTPS/QUIC 使用 443）。",
+    "hysteria_ports_warning":  "注意：稳定运行需要空闲的 TCP 端口 80 和 443（Let\u0027s Encrypt 使用 80，HTTPS/QUIC 使用 443）。",
     "hysteria_renew_ssl":  "续签 SSL",
-  "hysteria_ssl_change_hint": "更改域名会重新签发 Let's Encrypt 证书（需空闲端口 80）。",
+    "hysteria_ssl_change_hint":  "更改域名会重新签发 Let\u0027s Encrypt 证书（需空闲端口 80）。",
     "hysteria_ssl_required":  "签发 SSL 需要域名和邮箱",
-  "naiveproxy_desc": "NaiveProxy（稳定）— Caddy + forwardproxy 的 HTTPS/HTTP2，Let's Encrypt TLS。客户端请用 Karing，不要用 v2rayN；其他客户端未测试。",
+    "naiveproxy_desc":  "NaiveProxy（稳定）— Caddy + forwardproxy 的 HTTPS/HTTP2，Let\u0027s Encrypt TLS。客户端请用 Karing，不要用 v2rayN；其他客户端未测试。",
     "naiveproxy_domain":  "域名",
-  "naiveproxy_email": "Let's Encrypt 邮箱",
+    "naiveproxy_email":  "Let\u0027s Encrypt 邮箱",
     "naiveproxy_port_hint":  "NaiveProxy 固定使用 TCP 443。签发证书需空闲 TCP 80。",
-  "naiveproxy_install_hint": "安装前请将域名 A 记录指向本服务器。需空闲 TCP 端口 80 和 443（Let's Encrypt 与 HTTPS 代理）。",
+    "naiveproxy_install_hint":  "安装前请将域名 A 记录指向本服务器。需空闲 TCP 端口 80 和 443（Let\u0027s Encrypt 与 HTTPS 代理）。",
     "naiveproxy_dns_hint":  "安装前请创建此 DNS 记录：",
-  "naiveproxy_ports_warning": "注意：稳定运行需要空闲的 TCP 端口 80 和 443（Let's Encrypt 使用 80，HTTPS 代理使用 443）。",
+    "naiveproxy_ports_warning":  "注意：稳定运行需要空闲的 TCP 端口 80 和 443（Let\u0027s Encrypt 使用 80，HTTPS 代理使用 443）。",
     "naiveproxy_client_hint":  "稳定版。请勿使用 v2rayN。已确认 Karing 可用。其他客户端未测试。",
     "server_ssl_domain":  "SSL 域名（默认）",
     "server_ssl_email":  "SSL 邮箱（默认）",
-  "server_ssl_hint": "安装 Hysteria / NGINX 时自动填入（Let's Encrypt）。",
+    "server_ssl_hint":  "安装 Hysteria / NGINX 时自动填入（Let\u0027s Encrypt）。",
     "container_logs":  "容器日志",
     "logs_btn":  "📋 日志",
     "logs_live":  "实时",
@@ -409,7 +409,7 @@
     "ping_checking":  "Checking connectivity...",
     "offline":  "offline",
     "api_tokens_title":  "API tokens",
-  "api_tokens_hint": "Bearer tokens for external integrations. Send the token in the `Authorization: Bearer <token>` header. Tokens have admin-equivalent rights and stop working if their owner is disabled or demoted.",
+    "api_tokens_hint":  "Bearer tokens for external integrations. Send the token in the `Authorization: Bearer \u003ctoken\u003e` header. Tokens have admin-equivalent rights and stop working if their owner is disabled or demoted.",
     "api_tokens_empty":  "No API tokens yet. Create one to integrate the panel with an external service.",
     "api_tokens_create":  "Create token",
     "api_tokens_create_title":  "Create API token",
@@ -419,8 +419,8 @@
     "api_tokens_name_required":  "Token name is required",
     "api_tokens_created_title":  "Token created",
     "api_tokens_value_label":  "Token value",
-  "api_tokens_warning_title": "This is the only time you'll see this token.",
-  "api_tokens_warning_body": "Copy it now and store it in your integration's secret manager. The panel keeps only a hash — if you lose this value you'll need to revoke and recreate the token.",
+    "api_tokens_warning_title":  "This is the only time you\u0027ll see this token.",
+    "api_tokens_warning_body":  "Copy it now and store it in your integration\u0027s secret manager. The panel keeps only a hash — if you lose this value you\u0027ll need to revoke and recreate the token.",
     "api_tokens_revoke":  "Revoke",
     "api_tokens_revoke_confirm":  "Revoke token \"{}\"? Any integration using it will stop working.",
     "api_tokens_revoked":  "Token revoked",
@@ -470,10 +470,10 @@
     "new_instance":  "new instance",
     "port_next_instance_hint":  "Choose a free UDP port for the additional instance.",
     "web_servers":  "Web servers",
-  "nginx_desc": "NGINX web server with Let's Encrypt HTTPS certificate and editable index.html.",
+    "nginx_desc":  "NGINX web server with Let\u0027s Encrypt HTTPS certificate and editable index.html.",
     "nginx_domain":  "Domain",
-  "nginx_email": "Let's Encrypt email",
-  "nginx_port_hint": "HTTPS port exposed on the server. Port 80/TCP must be free and reachable for Let's Encrypt validation.",
+    "nginx_email":  "Let\u0027s Encrypt email",
+    "nginx_port_hint":  "HTTPS port exposed on the server. Port 80/TCP must be free and reachable for Let\u0027s Encrypt validation.",
     "nginx_install_hint":  "The domain must already point to this server. Port 80/TCP is used for HTTP-01 certificate validation.",
     "site":  "Site",
     "site_editor":  "Site editor",
@@ -519,4 +519,21 @@
     "xui_server_select_label":  "3x-ui 服务器",
     "xui_server_select_hint":  "选择签发订阅 URL 的 3x-ui 面板。",
     "xui_server_delete_confirm":  "从面板删除此 3x-ui 服务器？"
+,
+    "about_title":  "About & Updates",
+    "current_version":  "Current version",
+    "check_updates":  "Check for updates",
+    "checking_updates":  "Checking...",
+    "update_available":  "New version available",
+    "download_update":  "Download update",
+    "up_to_date":  "You have the latest version",
+    "apply_update":  "Install update",
+    "applying_update":  "Updating…",
+    "apply_update_confirm":  "Install update from git.evilfox.cc and restart the panel?",
+    "update_restarting":  "Updated. Restarting panel…",
+    "update_no_target":  "No target version. Check for updates first.",
+    "auto_update_hint":  "Auto-update pulls the release tag from git.evilfox.cc (git checkout required).",
+    "auto_update_ready":  "Git auto-update is available for this install.",
+    "auto_update_docker":  "Docker install: rebuild/pull image, or use a git checkout for one-click update.",
+    "auto_update_manual":  "One-click update needs a git clone. You can still download a release."
 }