New translations en-us.json (Norwegian Bokmal)

messages/bg-BG.json

@@ -1,12 +1,12 @@
 {
-    "setupCreate": "Създайте своя организация, сайт и ресурси",
+    "setupCreate": "Create the organization, site, and resources",
     "setupNewOrg": "Нова организация",
     "setupCreateOrg": "Създаване на организация",
     "setupCreateResources": "Създаване на ресурси",
     "setupOrgName": "Име на организацията",
-    "orgDisplayName": "Това е публичното име на вашата организация.",
+    "orgDisplayName": "This is the display name of the organization.",
     "orgId": "Идентификатор на организация",
-    "setupIdentifierMessage": "Това е уникалният идентификатор на вашата организация. Това е различно от публичното ѝ име.",
+    "setupIdentifierMessage": "This is the unique identifier for the organization.",
     "setupErrorIdentifier": "Идентификаторът на организация вече е зает. Моля, изберете друг.",
     "componentsErrorNoMemberCreate": "В момента не сте част от организация. Създайте организация, за да продължите.",
     "componentsErrorNoMember": "В момента не сте част от организация.",
@@ -50,10 +50,10 @@
     "siteMessageRemove": "След премахване, сайтът вече няма да бъде достъпен. Всички цели, свързани със сайта, също ще бъдат премахнати.",
     "siteQuestionRemove": "Сигурни ли сте, че искате да премахнете сайта от организацията?",
     "siteManageSites": "Управление на сайтове",
-    "siteDescription": "Позволете свързване към вашата мрежа чрез сигурни тунели",
+    "siteDescription": "Create and manage sites to enable connectivity to private networks",
     "siteCreate": "Създайте сайт",
     "siteCreateDescription2": "Следвайте стъпките по-долу, за да създадете и свържете нов сайт",
-    "siteCreateDescription": "Създайте нов сайт, за да започнете да свързвате вашите ресурси",
+    "siteCreateDescription": "Create a new site to start connecting resources",
     "close": "Затвори",
     "siteErrorCreate": "Грешка при създаване на сайт",
     "siteErrorCreateKeyPair": "Ключова двойка или настройки по подразбиране на сайта не са намерени",
@@ -74,7 +74,7 @@
     "siteInstallNewt": "Инсталирайте Newt",
     "siteInstallNewtDescription": "Пуснете Newt на вашата система",
     "WgConfiguration": "WireGuard конфигурация",
-    "WgConfigurationDescription": "Използвайте следната конфигурация, за да се свържете с вашата мрежа",
+    "WgConfigurationDescription": "Use the following configuration to connect to the network",
     "operatingSystem": "Операционна система",
     "commands": "Команди",
     "recommended": "Препоръчано",
@@ -87,32 +87,32 @@
     "siteUpdated": "Сайтът е обновен",
     "siteUpdatedDescription": "Сайтът е актуализиран.",
     "siteGeneralDescription": "Конфигурирайте общи настройки за този сайт",
-    "siteSettingDescription": "Настройте настройките на вашия сайт",
+    "siteSettingDescription": "Configure the settings on the site",
     "siteSetting": "Настройки на {siteName}",
-    "siteNewtTunnel": "Newt тунел (Препоръчително)",
-    "siteNewtTunnelDescription": "Най-лесният начин да създадете входна точка в мрежата си. Без допълнително конфигуриране.",
+    "siteNewtTunnel": "Newt Site (Recommended)",
+    "siteNewtTunnelDescription": "Easiest way to create an entrypoint into any network. No extra setup.",
     "siteWg": "Основен WireGuard",
     "siteWgDescription": "Use any WireGuard client to establish a tunnel. Manual NAT setup required. ONLY WORKS ON SELF HOSTED NODES",
     "siteWgDescriptionSaas": "Използвайте всеки WireGuard клиент за установяване на тунел. Ръчно нат задаване е необходимо. РАБОТИ САМО НА СОБСТВЕНИ УЗЛИ.",
     "siteLocalDescription": "Local resources only. No tunneling. ONLY WORKS ON SELF HOSTED NODES",
     "siteLocalDescriptionSaas": "Само локални ресурси. Без тунелиране. Достъпно само на отдалечени възли.",
     "siteSeeAll": "Вижте всички сайтове",
-    "siteTunnelDescription": "Определете как искате да се свържете с вашия сайт",
-    "siteNewtCredentials": "Newt Удостоверения",
-    "siteNewtCredentialsDescription": "Това е така, защото Newt ще се удостовери със сървъра",
-    "siteCredentialsSave": "Запазете вашите удостоверения",
+    "siteTunnelDescription": "Determine how you want to connect to the site",
+    "siteNewtCredentials": "Credentials",
+    "siteNewtCredentialsDescription": "This is how the site will authenticate with the server",
+    "siteCredentialsSave": "Save the Credentials",
     "siteCredentialsSaveDescription": "Ще можете да виждате това само веднъж. Уверете се да го копирате на сигурно място.",
     "siteInfo": "Информация за сайта",
     "status": "Статус",
     "shareTitle": "Управление на връзки за споделяне",
-    "shareDescription": "Създайте споделяеми връзки, за да разрешите временен или постоянен достъп до вашите ресурси",
+    "shareDescription": "Create shareable links to grant temporary or permanent access to proxy resources",
     "shareSearch": "Търсене на връзки за споделяне...",
     "shareCreate": "Създайте връзка за споделяне",
     "shareErrorDelete": "Неуспешно изтриване на връзката",
     "shareErrorDeleteMessage": "Възникна грешка при изтриване на връзката",
     "shareDeleted": "Връзката беше изтрита",
     "shareDeletedDescription": "Връзката беше премахната",
-    "shareTokenDescription": "Вашият достъп токен може да се предава по два начина: като параметър на URL или в заглавките на заявката. Тези трябва да се предават от клиента при всяка заявка за удостоверен достъп.",
+    "shareTokenDescription": "The access token can be passed in two ways: as a query parameter or in the request headers. These must be passed from the client on every request for authenticated access.",
     "accessToken": "Достъп Токен",
     "usageExamples": "Примери за използване",
     "tokenId": "Токен ID",
@@ -121,7 +121,7 @@
     "importantNote": "Важно бележка",
     "shareImportantDescription": "По съображения за сигурност, използването на заглавки се препоръчва пред параметри на заявка, когато е възможно, тъй като параметри на заявка могат да бъдат записвани в логове на сървъра или в историята на браузъра.",
     "token": "Токен",
-    "shareTokenSecurety": "Пазете вашият достъп токен в безопасност. Не го споделяйте в публичнодостъпни зони или клиентски код.",
+    "shareTokenSecurety": "Keep the access token secure. Do not share it in publicly accessible areas or client-side code.",
     "shareErrorFetchResource": "Неуспешно вземане на ресурси",
     "shareErrorFetchResourceDescription": "Възникна грешка при опит за вземане на ресурсите",
     "shareErrorCreate": "Неуспешно създаване на връзка за споделяне",
@@ -144,8 +144,10 @@
     "expires": "Изтича",
     "never": "Никога",
     "shareErrorSelectResource": "Моля, изберете ресурс",
-    "resourceTitle": "Управление на ресурси",
-    "resourceDescription": "Създайте сигурни проксита към вашите частни приложения",
+    "proxyResourceTitle": "Manage Public Resources",
+    "proxyResourceDescription": "Create and manage resources that are publicly accessible through a web browser",
+    "clientResourceTitle": "Manage Private Resources",
+    "clientResourceDescription": "Create and manage resources that are only accessible through a connected client",
     "resourcesSearch": "Търсене на ресурси...",
     "resourceAdd": "Добавете ресурс",
     "resourceErrorDelte": "Грешка при изтриване на ресурс",
@@ -155,9 +157,9 @@
     "resourceMessageRemove": "След като се премахне, ресурсът няма повече да бъде достъпен. Всички цели, свързани с ресурса, също ще бъдат премахнати.",
     "resourceQuestionRemove": "Сигурни ли сте, че искате да премахнете ресурса от организацията?",
     "resourceHTTP": "HTTPS ресурс",
-    "resourceHTTPDescription": "Прокси заявки към вашето приложение през HTTPS с помощта на субдомейн или базов домейн.",
+    "resourceHTTPDescription": "Proxy requests to the app over HTTPS using a subdomain or base domain.",
     "resourceRaw": "Суров TCP/UDP ресурс",
-    "resourceRawDescription": "Прокси заявки към вашето приложение през TCP/UDP с помощта на номер на порт.",
+    "resourceRawDescription": "Proxy requests to the app over TCP/UDP using a port number. This only works when sites are connected to nodes.",
     "resourceCreate": "Създайте ресурс",
     "resourceCreateDescription": "Следвайте стъпките по-долу, за да създадете нов ресурс",
     "resourceSeeAll": "Вижте всички ресурси",
@@ -171,22 +173,22 @@
     "noCountryFound": "Не е намерена държава.",
     "siteSelectionDescription": "Този сайт ще осигури свързаност до целта.",
     "resourceType": "Тип ресурс",
-    "resourceTypeDescription": "Определете как искате да получите достъп до вашия ресурс",
+    "resourceTypeDescription": "Determine how to access the resource",
     "resourceHTTPSSettings": "HTTPS настройки",
-    "resourceHTTPSSettingsDescription": "Конфигурирайте как вашият ресурс ще бъде достъпен през HTTPS",
+    "resourceHTTPSSettingsDescription": "Configure how the resource will be accessed over HTTPS",
     "domainType": "Тип домейн",
     "subdomain": "Субдомейн",
     "baseDomain": "Базов домейн",
-    "subdomnainDescription": "Субдомейнът, в който ще бъде достъпен вашият ресурс.",
+    "subdomnainDescription": "The subdomain where the resource will be accessible.",
     "resourceRawSettings": "TCP/UDP настройки",
-    "resourceRawSettingsDescription": "Настройте как ресурсът ви ще бъде достъпен през TCP/UDP. Свързвате ресурса към порт на хост сървъра Pangolin, за да го достъпвате от server-public-ip:mapped-port.",
+    "resourceRawSettingsDescription": "Configure how the resource will be accessed over TCP/UDP. You map the resource to a port on the host Pangolin server, so you can access the resource from server-public-ip:mapped-port.",
     "protocol": "Протокол",
     "protocolSelect": "Изберете протокол",
     "resourcePortNumber": "Номер на порт",
     "resourcePortNumberDescription": "Външен номер на порт за прокси заявки.",
     "cancel": "Отмяна",
     "resourceConfig": "Конфигурационни фрагменти",
-    "resourceConfigDescription": "Копирайте и поставете тези конфигурационни фрагменти за настройка на вашия TCP/UDP ресурс",
+    "resourceConfigDescription": "Copy and paste these configuration snippets to set up the TCP/UDP resource",
     "resourceAddEntrypoints": "Traefik: Добавете Входни точки",
     "resourceExposePorts": "Gerbil: Изложете портове в Docker Compose",
     "resourceLearnRaw": "Научете как да конфигурирате TCP/UDP ресурси",
@@ -202,14 +204,14 @@
     "proxy": "Прокси",
     "internal": "Вътрешен",
     "rules": "Правила",
-    "resourceSettingDescription": "Конфигурирайте настройките на вашия ресурс",
+    "resourceSettingDescription": "Configure the settings on the resource",
     "resourceSetting": "Настройки на {resourceName}",
-    "alwaysAllow": "Винаги позволявай",
-    "alwaysDeny": "Винаги отказвай",
+    "alwaysAllow": "Bypass Auth",
+    "alwaysDeny": "Block Access",
     "passToAuth": "Прехвърляне към удостоверяване",
-    "orgSettingsDescription": "Конфигурирайте общите настройки на вашата организация",
+    "orgSettingsDescription": "Configure the organization's settings",
     "orgGeneralSettings": "Настройки на организацията",
-    "orgGeneralSettingsDescription": "Управлявайте детайлите и конфигурацията на вашата организация",
+    "orgGeneralSettingsDescription": "Manage the organization's details and configuration",
     "saveGeneralSettings": "Запазете общите настройки",
     "saveSettings": "Запазване на настройките",
     "orgDangerZone": "Опасна зона",
@@ -232,7 +234,7 @@
     "orgMissing": "Липсва идентификатор на организация",
     "orgMissingMessage": "Невъзможност за регенериране на покана без идентификатор на организация.",
     "accessUsersManage": "Управление на потребители",
-    "accessUsersDescription": "Поканете потребители и ги добавете в роли, за да управлявате достъпа до вашата организация",
+    "accessUsersDescription": "Invite and manage users with access to this organization",
     "accessUsersSearch": "Търсене на потребители...",
     "accessUserCreate": "Създайте потребител",
     "accessUserRemove": "Премахнете потребител",
@@ -241,13 +243,13 @@
     "role": "Роля",
     "nameRequired": "Името е задължително",
     "accessRolesManage": "Управление на роли",
-    "accessRolesDescription": "Конфигурирайте роли, за да управлявате достъпа до вашата организация",
+    "accessRolesDescription": "Create and manage roles for users in the organization",
     "accessRolesSearch": "Търсене на роли...",
     "accessRolesAdd": "Добавете роля",
     "accessRoleDelete": "Изтриване на роля",
     "description": "Описание",
     "inviteTitle": "Отворени покани",
-    "inviteDescription": "Управление на вашите покани към други потребители",
+    "inviteDescription": "Manage invitations for other users to join the organization",
     "inviteSearch": "Търсене на покани...",
     "minutes": "Минути",
     "hours": "Часове",
@@ -261,13 +263,13 @@
     "apiKeysErrorCreate": "Грешка при създаване на API ключ",
     "apiKeysErrorSetPermission": "Грешка при задаване на разрешения",
     "apiKeysCreate": "Генерирайте API ключ",
-    "apiKeysCreateDescription": "Генерирайте нов API ключ за вашата организация",
+    "apiKeysCreateDescription": "Generate a new API key for the organization",
     "apiKeysGeneralSettings": "Разрешения",
     "apiKeysGeneralSettingsDescription": "Определете какво може да прави този API ключ",
-    "apiKeysList": "Вашият API ключ",
-    "apiKeysSave": "Запазване на вашия API ключ",
+    "apiKeysList": "New API Key",
+    "apiKeysSave": "Save the API Key",
     "apiKeysSaveDescription": "Ще можете да виждате това само веднъж. Уверете се да го копирате на сигурно място.",
-    "apiKeysInfo": "Вашият API ключ е:",
+    "apiKeysInfo": "The API key is:",
     "apiKeysConfirmCopy": "Копирах API ключа",
     "generate": "Генериране",
     "done": "Готово",
@@ -424,7 +426,7 @@
     "userCreated": "Потребителят е създаден",
     "userCreatedDescription": "Потребителят беше успешно създаден.",
     "userTypeInternal": "Вътрешен потребител",
-    "userTypeInternalDescription": "Поканете потребител да се присъедини директно към вашата организация.",
+    "userTypeInternalDescription": "Invite a user to join the organization directly.",
     "userTypeExternal": "Външен потребител",
     "userTypeExternalDescription": "Създайте потребител с външен доставчик на идентичност.",
     "accessUserCreateDescription": "Следвайте стъпките по-долу, за да създадете нов потребител",
@@ -468,13 +470,13 @@
     "accessControlsSubmit": "Запазване на контролите за достъп",
     "roles": "Роли",
     "accessUsersRoles": "Управление на потребители и роли",
-    "accessUsersRolesDescription": "Поканете потребители и ги добавете към роли, за да управлявате достъпа до вашата организация",
+    "accessUsersRolesDescription": "Invite users and add them to roles to manage access to the organization",
     "key": "Ключ",
     "createdAt": "Създаден на",
     "proxyErrorInvalidHeader": "Невалидна стойност за заглавие на хоста. Използвайте формат на име на домейн, или оставете празно поле за да премахнете персонализирано заглавие на хост.",
     "proxyErrorTls": "Невалидно име на TLS сървър. Използвайте формат на име на домейн, или оставете празно за да премахнете името на TLS сървъра.",
     "proxyEnableSSL": "Активиране на SSL",
-    "proxyEnableSSLDescription": "Активиране на SSL/TLS криптиране за сигурни HTTPS връзки към вашите цели.",
+    "proxyEnableSSLDescription": "Enable SSL/TLS encryption for secure HTTPS connections to the targets.",
     "target": "Цел",
     "configureTarget": "Конфигуриране на цели",
     "targetErrorFetch": "Неуспешно извличане на цели",
@@ -490,29 +492,29 @@
     "targetsErrorUpdate": "Неуспешно актуализиране на целите",
     "targetsErrorUpdateDescription": "Възникна грешка при актуализиране на целите",
     "targetTlsUpdate": "Настройките на TLS са актуализирани",
-    "targetTlsUpdateDescription": "Вашите настройки на TLS бяха успешно актуализирани",
+    "targetTlsUpdateDescription": "TLS settings have been updated successfully",
     "targetErrorTlsUpdate": "Неуспешно актуализиране на настройки на TLS",
     "targetErrorTlsUpdateDescription": "Възникна грешка при актуализиране на настройки на TLS",
     "proxyUpdated": "Настройките на прокси са актуализирани",
-    "proxyUpdatedDescription": "Вашите настройки на прокси бяха успешно актуализирани",
+    "proxyUpdatedDescription": "Proxy settings have been updated successfully",
     "proxyErrorUpdate": "Неуспешно актуализиране на настройки на прокси",
     "proxyErrorUpdateDescription": "Възникна грешка при актуализиране на настройки на прокси",
     "targetAddr": "IP / Хост име",
     "targetPort": "Порт",
     "targetProtocol": "Протокол",
     "targetTlsSettings": "Конфигурация на защитена връзка",
-    "targetTlsSettingsDescription": "Конфигурирайте SSL/TLS настройките за вашия ресурс",
+    "targetTlsSettingsDescription": "Configure SSL/TLS settings for the resource",
     "targetTlsSettingsAdvanced": "Разширени TLS настройки",
     "targetTlsSni": "Имя на TLS сървър",
     "targetTlsSniDescription": "Името на TLS сървъра за използване за SNI. Оставете празно, за да използвате подразбиране.",
     "targetTlsSubmit": "Запазване на настройките",
     "targets": "Конфигурация на целите",
-    "targetsDescription": "Настройте цели за маршрутиране на трафик към вашите бекенд услуги",
+    "targetsDescription": "Set up targets to route traffic to backend services",
     "targetStickySessions": "Активиране на постоянни сесии",
     "targetStickySessionsDescription": "Запазване на връзките със същото задно целево място за цялата сесия.",
     "methodSelect": "Изберете метод",
     "targetSubmit": "Добавяне на цел",
-    "targetNoOne": "Този ресурс няма цели. Добавете цел, за да конфигурирате къде да изпращате заявки към вашия бекенд.",
+    "targetNoOne": "This resource doesn't have any targets. Add a target to configure where to send requests to the backend.",
     "targetNoOneDescription": "Добавянето на повече от една цел ще активира натоварването на баланса.",
     "targetsSubmit": "Запазване на целите",
     "addTarget": "Добавете цел",
@@ -530,7 +532,7 @@
     "tlsServerNameDescription": "The TLS server name to use for SNI",
     "save": "Запази",
     "proxyAdditional": "Допълнителни настройки на прокси",
-    "proxyAdditionalDescription": "Конфигурирайте как вашият ресурс обработва прокси настройки",
+    "proxyAdditionalDescription": "Configure how the resource handles proxy settings",
     "proxyCustomHeader": "Персонализиран хост заглавие",
     "proxyCustomHeaderDescription": "Хост заглавието, което да зададете при прокси заявките. Оставете празно, за да използвате подразбиране.",
     "proxyAdditionalSubmit": "Запазване на прокси настройките",
@@ -570,7 +572,7 @@
     "rulesMatchType": "Тип на съвпадение",
     "value": "Стойност",
     "rulesAbout": "Относно правилата",
-    "rulesAboutDescription": "Правилата ви позволяват да контролирате достъпа до вашия ресурс въз основа на набор от критерии. Можете да създавате правила за разрешаване или отказ на достъп въз основа на IP адрес или URL път.",
+    "rulesAboutDescription": "Rules allow you to control access to the resource based on a set of criteria. You can create rules to allow or deny access based on IP address or URL path.",
     "rulesActions": "Действия",
     "rulesActionAlwaysAllow": "Винаги позволи: заобикаля всички методи за автентикация",
     "rulesActionAlwaysDeny": "Винаги отказвай: блокиране на всички заявки; не може да се направи опит за автентикация",
@@ -582,7 +584,7 @@
     "rulesEnable": "Активирай правилата",
     "rulesEnableDescription": "Активиране или деактивиране на оценката на правилата за този ресурс",
     "rulesResource": "Конфигурация на правилата за ресурси",
-    "rulesResourceDescription": "Конфигурирайте правила, за да контролирате достъпа до вашия ресурс",
+    "rulesResourceDescription": "Configure rules to control access to the resource",
     "ruleSubmit": "Добави правило",
     "rulesNoOne": "Няма правила. Добавете правило чрез формуляра.",
     "rulesOrder": "Правилата се оценяват по приоритет в нарастващ ред.",
@@ -598,7 +600,7 @@
     "none": "Няма",
     "unknown": "Неизвестно",
     "resources": "Ресурси",
-    "resourcesDescription": "Ресурсите са проксита за приложения, работещи във вашата частна мрежа. Създайте ресурс за всеки HTTP/HTTPS или суров TCP/UDP услуга във вашата частна мрежа. Всеки ресурс трябва да бъде свързан със сайт, за да се осигури частна, сигурна свързаност чрез криптиран WireGuard тунел.",
+    "resourcesDescription": "Resources are proxies to applications running on the private network. Create a resource for any HTTP/HTTPS or raw TCP/UDP service on your private network. Each resource must be connected to a site to enable private, secure connectivity through an encrypted WireGuard tunnel.",
     "resourcesWireGuardConnect": "Сигурно свързване с криптиране на WireGuard",
     "resourcesMultipleAuthenticationMethods": "Конфигуриране на множество методи за автентикация",
     "resourcesUsersRolesAccess": "Контрол на достъпа, базиран на потребители и роли",
@@ -609,7 +611,7 @@
     "resourceSelect": "Изберете ресурс",
     "shareLinks": "Споделени връзки",
     "share": "Споделени връзки",
-    "shareDescription2": "Създайте споделени връзки към вашите ресурси. Връзките осигуряват временно или неограничено достъп до вашия ресурс. Можете да конфигурирате продължителността на изтичане на връзката при създаването й.",
+    "shareDescription2": "Create shareable links to resources. Links provide temporary or unlimited access to your resource. You can configure the expiration duration of the link when you create one.",
     "shareEasyCreate": "Лесно за създаване и споделяне",
     "shareConfigurableExpirationDuration": "Конфигурируемо време на изтичане",
     "shareSecureAndRevocable": "Сигурни и отменяеми",
@@ -619,19 +621,19 @@
     "unknownCommand": "Неизвестна команда",
     "newtErrorFetchReleases": "Неуспешно получаване на информация за изданието: {err}",
     "newtErrorFetchLatest": "Грешка при получаването на последното издание: {err}",
-    "newtEndpoint": "Newt Изходен пункт",
-    "newtId": "Newt ID",
-    "newtSecretKey": "Newt Secret Key",
+    "newtEndpoint": "Endpoint",
+    "newtId": "ID",
+    "newtSecretKey": "Secret",
     "architecture": "Архитектура",
     "sites": "Сайтове",
-    "siteWgAnyClients": "Използвайте всеки WireGuard клиент за свързване. Ще трябва да адресирате вашите вътрешни ресурси, използвайки IP на равностойния.",
+    "siteWgAnyClients": "Use any WireGuard client to connect. You will have to address internal resources using the peer IP.",
     "siteWgCompatibleAllClients": "Съвместим с всички WireGuard клиенти",
     "siteWgManualConfigurationRequired": "Необходима е ръчна конфигурация",
     "userErrorNotAdminOrOwner": "Потребителят не е администратор или собственик",
     "pangolinSettings": "Настройки - Панголин",
     "accessRoleYour": "Вашата роля:",
-    "accessRoleSelect2": "Изберете роля",
-    "accessUserSelect": "Изберете потребител",
+    "accessRoleSelect2": "Select roles",
+    "accessUserSelect": "Select users",
     "otpEmailEnter": "Въведете имейл",
     "otpEmailEnterDescription": "Натиснете Enter, за да добавите имейл след като сте го въведели в полето за въвеждане.",
     "otpEmailErrorInvalid": "Невалиден имейл адрес. Wilcard (*) трябва да е цялата част от локалния адрес.",
@@ -683,7 +685,7 @@
     "resourcePincodeSetupTitle": "Задай ПИН код",
     "resourcePincodeSetupTitleDescription": "Задайте ПИН код, за да защитите този ресурс",
     "resourceRoleDescription": "Администраторите винаги могат да имат достъп до този ресурс.",
-    "resourceUsersRoles": "Потребители и роли",
+    "resourceUsersRoles": "Access Controls",
     "resourceUsersRolesDescription": "Конфигурирайте кои потребители и роли могат да посещават този ресурс",
     "resourceUsersRolesSubmit": "Запазете потребители и роли",
     "resourceWhitelistSave": "Успешно запазено",
@@ -779,15 +781,15 @@
     "idpOidcConfigure": "Конфигурация на OAuth2/OIDC",
     "idpOidcConfigureDescription": "Конфигурирайте OAuth2/OIDC доставчика на крайни точки и кредити",
     "idpClientId": "ID на клиента",
-    "idpClientIdDescription": "OAuth2 идентификационен номер на клиента от вашия доставчик на идентичност",
+    "idpClientIdDescription": "The OAuth2 client ID from the identity provider",
     "idpClientSecret": "Секретен код на клиента",
-    "idpClientSecretDescription": "OAuth2 секретен код на клиента от вашия доставчик на идентичност",
+    "idpClientSecretDescription": "The OAuth2 client secret from the identity provider",
     "idpAuthUrl": "URL за удостоверение",
     "idpAuthUrlDescription": "OAuth2 крайна точка за удостоверяване URL",
     "idpTokenUrl": "URL на токена",
     "idpTokenUrlDescription": "OAuth2 крайна точка на токена URL",
     "idpOidcConfigureAlert": "Важно информация",
-    "idpOidcConfigureAlertDescription": "След създаването на доставчика на идентичност ще е необходимо да конфигурирате URL за обратна връзка в настройките на вашия доставчик на идентичност. URL за обратна връзка ще бъде предоставен след успешно създаване.",
+    "idpOidcConfigureAlertDescription": "After creating the identity provider, you will need to configure the callback URL in the identity provider's settings. The callback URL will be provided after successful creation.",
     "idpToken": "Конфигуриране на токените",
     "idpTokenDescription": "Конфигурирайте как да извлечете информация за потребителя от ID токена",
     "idpJmespathAbout": "Относно JMESPath",
@@ -804,7 +806,7 @@
     "idpSubmit": "Създайте доставчик на идентичност",
     "orgPolicies": "Организационни политики",
     "idpSettings": "{idpName} Настройки",
-    "idpCreateSettingsDescription": "Конфигурирайте настройките за вашия доставчик на идентичност",
+    "idpCreateSettingsDescription": "Configure the settings for the identity provider",
     "roleMapping": "Ролева карта",
     "orgMapping": "Организационна карта",
     "orgPoliciesSearch": "Търсене на организационни политики...",
@@ -839,7 +841,7 @@
     "idpUpdatedDescription": "Идентификационният доставчик беше актуализиран успешно",
     "redirectUrl": "URL за пренасочване",
     "redirectUrlAbout": "За URL за пренасочване",
-    "redirectUrlAboutDescription": "Това е URL, към който потребителите ще бъдат пренасочени след удостоверяване. Трябва да конфигурирате този URL в настройките на вашия доставчик на идентификация.",
+    "redirectUrlAboutDescription": "This is the URL to which users will be redirected after authentication. You need to configure this URL in the identity provider's settings.",
     "pangolinAuth": "Authent - Pangolin",
     "verificationCodeLengthRequirements": "Вашият код за удостоверяване трябва да бъде 8 символа.",
     "errorOccurred": "Възникна грешка",
@@ -922,6 +924,10 @@
     "passwordResetSent": "Ще изпратим код за нулиране на паролата на този имейл адрес.",
     "passwordResetCode": "Код за нулиране",
     "passwordResetCodeDescription": "Проверете имейла си за код за нулиране.",
+    "generatePasswordResetCode": "Generate Password Reset Code",
+    "passwordResetCodeGenerated": "Password Reset Code Generated",
+    "passwordResetCodeGeneratedDescription": "Share this code with the user. They can use it to reset their password.",
+    "passwordResetUrl": "Reset URL",
     "passwordNew": "Нова парола",
     "passwordNewConfirm": "Потвърдете новата парола",
     "changePassword": "Промяна на парола",
@@ -939,6 +945,9 @@
     "pincodeAuth": "Код на удостоверителя",
     "pincodeSubmit2": "Изпрати код",
     "passwordResetSubmit": "Заявка за нулиране",
+    "passwordResetAlreadyHaveCode": "Enter Password Reset Code",
+    "passwordResetSmtpRequired": "Please contact your administrator",
+    "passwordResetSmtpRequiredDescription": "A password reset code is required to reset your password. Please contact your administrator for assistance.",
     "passwordBack": "Назад към Парола",
     "loginBack": "Връщане към вход",
     "signup": "Регистрация",
@@ -1104,12 +1113,15 @@
     "actionListSiteResources": "Списък на ресурсите на сайта",
     "actionUpdateSiteResource": "Актуализиране на сайт ресурс",
     "actionListInvitations": "Списък с покани",
+    "actionExportLogs": "Export Logs",
+    "actionViewLogs": "View Logs",
     "noneSelected": "Нищо не е избрано",
     "orgNotFound2": "Няма намерени организации.",
     "searchProgress": "Търсене...",
     "create": "Създаване",
     "orgs": "Организации",
     "loginError": "Възникна грешка при влизане",
+    "loginRequiredForDevice": "Login is required to authenticate your device.",
     "passwordForgot": "Забравена парола?",
     "otpAuth": "Двуфакторно удостоверяване",
     "otpAuthDescription": "Въведете кода от приложението за удостоверяване или един от вашите резервни кодове за еднократна употреба.",
@@ -1164,23 +1176,29 @@
     "sidebarHome": "Начало",
     "sidebarSites": "Сайтове",
     "sidebarResources": "Ресурси",
+    "sidebarProxyResources": "Public",
+    "sidebarClientResources": "Private",
     "sidebarAccessControl": "Контрол на достъпа",
+    "sidebarLogsAndAnalytics": "Logs & Analytics",
     "sidebarUsers": "Потребители",
+    "sidebarAdmin": "Admin",
     "sidebarInvitations": "Покани",
     "sidebarRoles": "Роли",
-    "sidebarShareableLinks": "Споделени връзки",
+    "sidebarShareableLinks": "Links",
     "sidebarApiKeys": "API ключове",
     "sidebarSettings": "Настройки",
     "sidebarAllUsers": "Всички потребители",
     "sidebarIdentityProviders": "Идентификационни доставчици",
     "sidebarLicense": "Лиценз",
     "sidebarClients": "Клиенти",
+    "sidebarUserDevices": "Users",
+    "sidebarMachineClients": "Machines",
     "sidebarDomains": "Домейни",
     "sidebarGeneral": "General",
     "sidebarLogAndAnalytics": "Log & Analytics",
     "sidebarBluePrints": "Чертежи",
     "sidebarOrganization": "Organization",
-    "sidebarLogsAnalytics": "Request Analytics",
+    "sidebarLogsAnalytics": "Analytics",
     "blueprints": "Чертежи",
     "blueprintsDescription": "Прилагайте декларативни конфигурации и преглеждайте предишни изпълнения",
     "blueprintAdd": "Добави Чертеж",
@@ -1191,7 +1209,7 @@
     "blueprintDetailsDescription": "Вижте резултата от приложените чертежи и всички възникнали грешки",
     "blueprintInfo": "Информация за Чертежа",
     "message": "Съобщение",
-    "blueprintContentsDescription": "Дефинирайте YAML съдържанието, описващо вашата инфраструктура",
+    "blueprintContentsDescription": "Define the YAML content describing the infrastructure",
     "blueprintErrorCreateDescription": "Възникна грешка при прилагането на чертежа",
     "blueprintErrorCreate": "Грешка при създаването на чертеж",
     "searchBlueprintProgress": "Търси чертежи...",
@@ -1247,15 +1265,15 @@
     "loading": "Зареждане",
     "restart": "Рестарт",
     "domains": "Домейни",
-    "domainsDescription": "Управление на домейни за вашата организация",
+    "domainsDescription": "Create and manage domains available in the organization",
     "domainsSearch": "Търсене на домейни...",
     "domainAdd": "Добавяне на домейн",
-    "domainAddDescription": "Регистриране на нов домейн с вашата организация",
+    "domainAddDescription": "Register a new domain with to the organization",
     "domainCreate": "Създаване на домейн",
     "domainCreatedDescription": "Домейнът е създаден успешно",
     "domainDeletedDescription": "Домейнът е изтрит успешно",
-    "domainQuestionRemove": "Сигурни ли сте, че искате да премахнете домейна от вашия профил?",
-    "domainMessageRemove": "След премахването, домейнът вече няма да бъде свързан с вашия профил.",
+    "domainQuestionRemove": "Are you sure you want to remove the domain?",
+    "domainMessageRemove": "Once removed, the domain will no longer be associated with the organization.",
     "domainConfirmDelete": "Потвърдете изтриването на домейн",
     "domainDelete": "Изтриване на домейн",
     "domain": "Домейн",
@@ -1274,7 +1292,7 @@
     "pending": "Чакащо",
     "sidebarBilling": "Фактуриране",
     "billing": "Фактуриране",
-    "orgBillingDescription": "Управление на информацията за фактуриране и абонаментите",
+    "orgBillingDescription": "Manage billing information and subscriptions",
     "github": "GitHub",
     "pangolinHosted": "Hosted Pangolin",
     "fossorial": "Fossorial",
@@ -1317,7 +1335,7 @@
     "domainPickerSortAsc": "A-Z",
     "domainPickerSortDesc": "Z-A",
     "domainPickerCheckingAvailability": "Проверка на наличността...",
-    "domainPickerNoMatchingDomains": "Не са намерени съвпадащи домейни. Опитайте се с друг домейн или проверете настройките на домейна на вашата организация.",
+    "domainPickerNoMatchingDomains": "No matching domains found. Try a different domain or check the organization's domain settings.",
     "domainPickerOrganizationDomains": "Домейни на организацията",
     "domainPickerProvidedDomains": "Предоставени домейни",
     "domainPickerSubdomain": "Поддомейн: {subdomain}",
@@ -1351,7 +1369,7 @@
     "billingModifySubscription": "Промяна на абонамента",
     "billingStartSubscription": "Започване на абонамент",
     "billingRecurringCharge": "Повтаряща се такса",
-    "billingManageSubscriptionSettings": "Управление на настройките и предпочитанията на абонамента ви",
+    "billingManageSubscriptionSettings": "Manage subscription settings and preferences",
     "billingNoActiveSubscription": "Нямате активен абонамент. Започнете абонамента си, за да увеличите лимитите за използване.",
     "billingFailedToLoadSubscription": "Грешка при зареждане на абонамент",
     "billingFailedToLoadUsage": "Грешка при зареждане на използването",
@@ -1362,9 +1380,9 @@
     "billingPortalError": "Грешка в портала",
     "billingDataUsageInfo": "Таксува се за всички данни, прехвърляни през вашите защитени тунели, когато сте свързани към облака. Това включва както входящия, така и изходящия трафик за всички ваши сайтове. Когато достигнете лимита си, вашите сайтове ще бъдат прекъснати, докато не надстроите плана или не намалите използването. Данните не се таксуват при използване на възли.",
     "billingOnlineTimeInfo": "Таксува се на база колко време вашите сайтове остават свързани с облака. Пример: 44,640 минути се равняват на един сайт работещ 24/7 за цял месец. Когато достигнете лимита си, вашите сайтове ще бъдат прекъснати, докато не надстроите плана или не намалите използването. Времето не се таксува при използване на възли.",
-    "billingUsersInfo": "Таксува се за всеки потребител във вашата организация. Фактурирането се извършва ежедневно на базата на броя активни потребителски акаунти във вашата организация.",
-    "billingDomainInfo": "Таксува се за всеки домейн във вашата организация. Фактурирането се извършва ежедневно на базата на броя активни домейн акаунти във вашата организация.",
-    "billingRemoteExitNodesInfo": "Таксува се за всеки управляван възел във вашата организация. Фактурирането се извършва ежедневно на базата на броя активни управлявани възли във вашата организация.",
+    "billingUsersInfo": "You're charged for each user in the organization. Billing is calculated daily based on the number of active user accounts in your org.",
+    "billingDomainInfo": "You're charged for each domain in the organization. Billing is calculated daily based on the number of active domain accounts in your org.",
+    "billingRemoteExitNodesInfo": "You're charged for each managed Node in the organization. Billing is calculated daily based on the number of active managed Nodes in your org.",
     "domainNotFound": "Домейнът не е намерен",
     "domainNotFoundDescription": "Този ресурс е деактивиран, защото домейнът вече не съществува в нашата система. Моля, задайте нов домейн за този ресурс.",
     "failed": "Неуспешно",
@@ -1456,23 +1474,23 @@
     "errorCreatingClient": "Възникна грешка при създаване на клиент",
     "clientDefaultsNotFound": "Не са намерени настройки по подразбиране за клиента",
     "createClient": "Създаване на клиент",
-    "createClientDescription": "Създайте нов клиент за свързване към вашите сайтове",
+    "createClientDescription": "Create a new client to access private resources",
     "seeAllClients": "Виж всички клиенти",
     "clientInformation": "Информация за клиента",
     "clientNamePlaceholder": "Име на клиента",
     "address": "Адрес",
     "subnetPlaceholder": "Мрежа",
-    "addressDescription": "Адресът, който клиентът ще използва за свързване",
+    "addressDescription": "The internal address of the client. Must fall within the organization's subnet.",
     "selectSites": "Избор на сайтове",
     "sitesDescription": "Клиентът ще има връзка с избраните сайтове",
     "clientInstallOlm": "Инсталиране на Olm",
     "clientInstallOlmDescription": "Конфигурирайте Olm да работи на вашата система",
-    "clientOlmCredentials": "Olm Удостоверения",
-    "clientOlmCredentialsDescription": "Това е как Olm ще се удостоверява със сървъра",
-    "olmEndpoint": "Olm Ендпойнт",
-    "olmId": "Olm ID",
-    "olmSecretKey": "Olm Тайна парола",
-    "clientCredentialsSave": "Запазете вашите удостоверения",
+    "clientOlmCredentials": "Credentials",
+    "clientOlmCredentialsDescription": "This is how the client will authenticate with the server",
+    "olmEndpoint": "Endpoint",
+    "olmId": "ID",
+    "olmSecretKey": "Secret",
+    "clientCredentialsSave": "Save the Credentials",
     "clientCredentialsSaveDescription": "Ще можете да го видите само веднъж. Уверете се, че ще го копирате на сигурно място.",
     "generalSettingsDescription": "Конфигурирайте общите настройки за този клиент",
     "clientUpdated": "Клиентът актуализиран",
@@ -1483,9 +1501,7 @@
     "sitesFetchError": "Възникна грешка при получаването на сайтовете.",
     "olmErrorFetchReleases": "Възникна грешка при получаването на Olm версиите.",
     "olmErrorFetchLatest": "Възникна грешка при получаването на последната версия на Olm.",
-    "remoteSubnets": "Отдалечени подмрежи",
     "enterCidrRange": "Въведете CIDR обхват",
-    "remoteSubnetsDescription": "Добавете CIDR диапазони, които могат да бъдат достъпни от този сайт отдалечено с клиенти. Използвайте формат като 10.0.0.0/24. Това се прилага САМО за VPN клиентска свързаност.",
     "resourceEnableProxy": "Разрешаване на публичен прокси",
     "resourceEnableProxyDescription": "Разрешете публично проксиране на този ресурс. Това позволява достъп до ресурса извън мрежата чрез облак на отворен порт. Изисква конфигурация на Traefik.",
     "externalProxyEnabled": "Външен прокси разрешен",
@@ -1503,14 +1519,15 @@
     "enableHealthChecksDescription": "Мониторинг на здравето на тази цел. Можете да наблюдавате различен краен пункт от целта, ако е необходимо.",
     "healthScheme": "Метод",
     "healthSelectScheme": "Избор на метод",
+    "healthCheckPortInvalid": "Health check port must be between 1 and 65535",
     "healthCheckPath": "Път",
     "healthHostname": "IP / Хост",
     "healthPort": "Порт",
     "healthCheckPathDescription": "Пътят за проверка на здравното състояние.",
-    "healthyIntervalSeconds": "Интервал за здраве",
-    "unhealthyIntervalSeconds": "Интервал за нездраве",
+    "healthyIntervalSeconds": "Healthy Interval (sec)",
+    "unhealthyIntervalSeconds": "Unhealthy Interval (sec)",
     "IntervalSeconds": "Интервал за здраве",
-    "timeoutSeconds": "Време за изчакване",
+    "timeoutSeconds": "Timeout (sec)",
     "timeIsInSeconds": "Времето е в секунди",
     "retryAttempts": "Опити за повторно",
     "expectedResponseCodes": "Очаквани кодове за отговор",
@@ -1546,12 +1563,12 @@
     "resourceEditDomain": "Редактиране на домейн",
     "siteName": "Име на сайта",
     "proxyPort": "Порт",
-    "resourcesTableProxyResources": "Прокси Ресурси",
-    "resourcesTableClientResources": "Клиентски ресурси",
+    "resourcesTableProxyResources": "Public",
+    "resourcesTableClientResources": "Private",
     "resourcesTableNoProxyResourcesFound": "Не са намерени ресурсни проксита.",
     "resourcesTableNoInternalResourcesFound": "Не са намерени вътрешни ресурси.",
     "resourcesTableDestination": "Дестинация",
-    "resourcesTableTheseResourcesForUseWith": "Тези ресурси са за използване с",
+    "resourcesTableAlias": "Alias",
     "resourcesTableClients": "Клиенти",
     "resourcesTableAndOnlyAccessibleInternally": "и са достъпни само вътрешно при свързване с клиент.",
     "resourcesTableNoTargets": "Без цели",
@@ -1560,8 +1577,8 @@
     "resourcesTableOffline": "Извън линия",
     "resourcesTableUnknown": "Неизвестно",
     "resourcesTableNotMonitored": "Не е наблюдавано",
-    "editInternalResourceDialogEditClientResource": "Редактиране на клиентски ресурс",
-    "editInternalResourceDialogUpdateResourceProperties": "Актуализирайте свойствата на ресурса и конфигурацията на целите за {resourceName}.",
+    "editInternalResourceDialogEditClientResource": "Edit Private Resource",
+    "editInternalResourceDialogUpdateResourceProperties": "Update the resource configuration and access controls for {resourceName}",
     "editInternalResourceDialogResourceProperties": "Свойствата на ресурса",
     "editInternalResourceDialogName": "Име",
     "editInternalResourceDialogProtocol": "Протокол",
@@ -1580,11 +1597,22 @@
     "editInternalResourceDialogInvalidIPAddressFormat": "Невалиден формат на IP адрес",
     "editInternalResourceDialogDestinationPortMin": "Дестинационният порт трябва да бъде поне 1",
     "editInternalResourceDialogDestinationPortMax": "Дестинационният порт трябва да е по-малък от 65536",
+    "editInternalResourceDialogPortModeRequired": "Protocol, proxy port, and destination port are required for port mode",
+    "editInternalResourceDialogMode": "Mode",
+    "editInternalResourceDialogModePort": "Port",
+    "editInternalResourceDialogModeHost": "Host",
+    "editInternalResourceDialogModeCidr": "CIDR",
+    "editInternalResourceDialogDestination": "Destination",
+    "editInternalResourceDialogDestinationHostDescription": "The IP address or hostname of the resource on the site's network.",
+    "editInternalResourceDialogDestinationIPDescription": "The IP or hostname address of the resource on the site's network.",
+    "editInternalResourceDialogDestinationCidrDescription": "The CIDR range of the resource on the site's network.",
+    "editInternalResourceDialogAlias": "Alias",
+    "editInternalResourceDialogAliasDescription": "An optional internal DNS alias for this resource.",
     "createInternalResourceDialogNoSitesAvailable": "Няма достъпни сайтове",
     "createInternalResourceDialogNoSitesAvailableDescription": "Трябва да имате поне един сайт на Newt с конфигурирана мрежа, за да създадете вътрешни ресурси.",
     "createInternalResourceDialogClose": "Затвори",
-    "createInternalResourceDialogCreateClientResource": "Създаване на клиентски ресурс",
-    "createInternalResourceDialogCreateClientResourceDescription": "Създайте нов ресурс, който ще бъде достъпен за клиентите свързани със избрания сайт.",
+    "createInternalResourceDialogCreateClientResource": "Create Private Resource",
+    "createInternalResourceDialogCreateClientResourceDescription": "Create a new resource that will only be accessible to clients connected to the organization",
     "createInternalResourceDialogResourceProperties": "Свойства на ресурса",
     "createInternalResourceDialogName": "Име",
     "createInternalResourceDialogSite": "Сайт",
@@ -1613,11 +1641,22 @@
     "createInternalResourceDialogInvalidIPAddressFormat": "Невалиден формат на IP адрес",
     "createInternalResourceDialogDestinationPortMin": "Дестинационният порт трябва да бъде поне 1",
     "createInternalResourceDialogDestinationPortMax": "Дестинационният порт трябва да е по-малък от 65536",
+    "createInternalResourceDialogPortModeRequired": "Protocol, proxy port, and destination port are required for port mode",
+    "createInternalResourceDialogMode": "Mode",
+    "createInternalResourceDialogModePort": "Port",
+    "createInternalResourceDialogModeHost": "Host",
+    "createInternalResourceDialogModeCidr": "CIDR",
+    "createInternalResourceDialogDestination": "Destination",
+    "createInternalResourceDialogDestinationHostDescription": "The IP address or hostname of the resource on the site's network.",
+    "createInternalResourceDialogDestinationCidrDescription": "The CIDR range of the resource on the site's network.",
+    "createInternalResourceDialogAlias": "Alias",
+    "createInternalResourceDialogAliasDescription": "An optional internal DNS alias for this resource.",
     "siteConfiguration": "Конфигурация",
     "siteAcceptClientConnections": "Приемане на клиентски връзки",
-    "siteAcceptClientConnectionsDescription": "Позволете на други устройства да се свързват чрез този Newt инстанция като възел чрез клиенти.",
-    "siteAddress": "Адрес на сайта",
-    "siteAddressDescription": "Посочете IP адреса на хоста, към който клиентите ще се свързват. Това е вътрешният адрес на сайта в мрежата на Панголиин за адресиране от клиенти. Трябва да е в рамките на подмрежата на Организацията.",
+    "siteAcceptClientConnectionsDescription": "Allow user devices and clients to access resources on this site. This can be changed later.",
+    "siteAddress": "Site Address (Advanced)",
+    "siteAddressDescription": "The internal address of the site. Must fall within the organization's subnet.",
+    "siteNameDescription": "The display name of the site that can be changed later.",
     "autoLoginExternalIdp": "Автоматично влизане с Външен IDP",
     "autoLoginExternalIdpDescription": "Незабавно пренасочете потребителя към външния IDP за удостоверяване.",
     "selectIdp": "Изберете IDP",
@@ -1631,7 +1670,7 @@
     "autoLoginErrorNoRedirectUrl": "Не е получен URL за пренасочване от доставчика на идентификационни данни.",
     "autoLoginErrorGeneratingUrl": "Неуспешно генериране на URL за удостоверяване.",
     "remoteExitNodeManageRemoteExitNodes": "Отдалечени възли",
-    "remoteExitNodeDescription": "Самостоятелно хоствайте един или повече отдалечени възли, за да разширите своята мрежова връзка и намалите зависимостта от облака.",
+    "remoteExitNodeDescription": "Self-host one or more remote nodes to extend network connectivity and reduce reliance on the cloud",
     "remoteExitNodes": "Възли",
     "searchRemoteExitNodes": "Търсене на възли...",
     "remoteExitNodeAdd": "Добавяне на възел",
@@ -1643,11 +1682,11 @@
     "sidebarRemoteExitNodes": "Отдалечени възли",
     "remoteExitNodeCreate": {
         "title": "Създаване на възел",
-        "description": "Създайте нов възел, за да разширите мрежовата си свързаност",
+        "description": "Create a new node to extend network connectivity",
         "viewAllButton": "Вижте всички възли",
         "strategy": {
             "title": "Стратегия на създаване",
-            "description": "Изберете това, за да конфигурирате ръчно възела си или да създадете нови кредити.",
+            "description": "Choose this to manually configure the node or generate new credentials.",
             "adopt": {
                 "title": "Осиновете възел",
                 "description": "Изберете това, ако вече имате кредити за възела."
@@ -1668,7 +1707,7 @@
         },
         "generate": {
             "title": "Генерирани кредити",
-            "description": "Използвайте тези генерирани кредити, за да конфигурирате възела си",
+            "description": "Use these generated credentials to configure the node",
             "nodeIdTitle": "ID на възела",
             "secretTitle": "Секретен",
             "saveCredentialsTitle": "Добавете кредити към конфигурацията",
@@ -1744,16 +1783,16 @@
     "idpTypeLabel": "Тип на доставчика на идентичност",
     "roleMappingExpressionPlaceholder": "напр.: contains(groups, 'admin') && 'Admin' || 'Member'",
     "idpGoogleConfiguration": "Конфигурация на Google",
-    "idpGoogleConfigurationDescription": "Конфигурирайте своите Google OAuth2 кредити",
-    "idpGoogleClientIdDescription": "Вашият Google OAuth2 клиентски ID",
-    "idpGoogleClientSecretDescription": "Вашият Google OAuth2 клиентски секрет",
+    "idpGoogleConfigurationDescription": "Configure the Google OAuth2 credentials",
+    "idpGoogleClientIdDescription": "Google OAuth2 Client ID",
+    "idpGoogleClientSecretDescription": "Google OAuth2 Client Secret",
     "idpAzureConfiguration": "Конфигурация на Azure Entra ID",
-    "idpAzureConfigurationDescription": "Конфигурирайте своите Azure Entra ID OAuth2 кредити",
+    "idpAzureConfigurationDescription": "Configure Azure Entra ID OAuth2 credentials",
     "idpTenantId": "Идентификационен номер на наемателя",
-    "idpTenantIdPlaceholder": "вашият идентификационен номер на наемателя",
-    "idpAzureTenantIdDescription": "Вашият Azure идентификационен номер на наемателя (намира се в преглед на Azure Active Directory)",
-    "idpAzureClientIdDescription": "Вашият Azure клиентски идентификационен номер за приложението",
-    "idpAzureClientSecretDescription": "Вашият Azure клиентски секрет за приложението",
+    "idpTenantIdPlaceholder": "tenant-id",
+    "idpAzureTenantIdDescription": "Azure tenant ID (found in Azure Active Directory overview)",
+    "idpAzureClientIdDescription": "Azure App Registration Client ID",
+    "idpAzureClientSecretDescription": "Azure App Registration Client Secret",
     "idpGoogleTitle": "Google",
     "idpGoogleAlt": "Google",
     "idpAzureTitle": "Azure Entra ID",
@@ -1761,14 +1800,14 @@
     "idpGoogleConfigurationTitle": "Конфигурация на Google",
     "idpAzureConfigurationTitle": "Конфигурация на Azure Entra ID",
     "idpTenantIdLabel": "Идентификационен номер на наемателя",
-    "idpAzureClientIdDescription2": "Вашият Azure клиентски идентификационен номер за приложението",
-    "idpAzureClientSecretDescription2": "Вашият Azure клиентски секрет за приложението",
+    "idpAzureClientIdDescription2": "Azure App Registration Client ID",
+    "idpAzureClientSecretDescription2": "Azure App Registration Client Secret",
     "idpGoogleDescription": "Google OAuth2/OIDC доставчик",
     "idpAzureDescription": "Microsoft Azure OAuth2/OIDC доставчик",
     "subnet": "Подмрежа",
     "subnetDescription": "Подмрежата за конфигурацията на мрежата на тази организация.",
     "authPage": "Страница за удостоверяване",
-    "authPageDescription": "Конфигурирайте страницата за удостоверяване на вашата организация",
+    "authPageDescription": "Configure the auth page for the organization",
     "authPageDomain": "Домен на страницата за удостоверяване",
     "noDomainSet": "Няма зададен домейн",
     "changeDomain": "Смяна на домейн",
@@ -1778,7 +1817,7 @@
     "setAuthPageDomain": "Задаване на домейн на страницата за удостоверяване",
     "failedToFetchCertificate": "Неуспех при извличане на сертификат",
     "failedToRestartCertificate": "Неуспех при рестартиране на сертификат",
-    "addDomainToEnableCustomAuthPages": "Добавете домейн, за да активирате персонализирани страници за удостоверяване за вашата организация",
+    "addDomainToEnableCustomAuthPages": "Add a domain to enable custom authentication pages for the organization",
     "selectDomainForOrgAuthPage": "Изберете домейн за страницата за удостоверяване на организацията",
     "domainPickerProvidedDomain": "Предоставен домейн",
     "domainPickerFreeProvidedDomain": "Безплатен предоставен домейн",
@@ -1793,7 +1832,7 @@
     "domainPickerInvalidSubdomainCannotMakeValid": "\"{sub}\" не може да се направи валиден за {domain}.",
     "domainPickerSubdomainSanitized": "Поддомен пречистен",
     "domainPickerSubdomainCorrected": "\"{sub}\" беше коригиран на \"{sanitized}\"",
-    "orgAuthSignInTitle": "Впишете се във вашата организация",
+    "orgAuthSignInTitle": "Sign in to the organization",
     "orgAuthChooseIdpDescription": "Изберете своя доставчик на идентичност, за да продължите",
     "orgAuthNoIdpConfigured": "Тази организация няма конфигурирани доставчици на идентичност. Можете да влезете с вашата Pangolin идентичност.",
     "orgAuthSignInWithPangolin": "Впишете се с Pangolin",
@@ -1811,7 +1850,7 @@
     "enableTwoFactorAuthentication": "Активирайте двуфакторното удостоверяване",
     "completeSecuritySteps": "Завършете стъпките за сигурност",
     "securitySettings": "Настройки за сигурност",
-    "securitySettingsDescription": "Конфигурирайте политиките за сигурност на вашата организация",
+    "securitySettingsDescription": "Configure security policies for the organization",
     "requireTwoFactorForAllUsers": "Изисквайте двуфакторно удостоверяване за всички потребители",
     "requireTwoFactorDescription": "Когато е активирано, всички вътрешни потребители в организацията трябва да имат активирано двуфакторно удостоверяване, за да имат достъп до организацията.",
     "requireTwoFactorDisabledDescription": "Тази функция изисква валиден лиценз (Enterprise) или активен абонамент (SaaS).",
@@ -1874,8 +1913,12 @@
     "enterpriseEdition": "Корпоративно издание",
     "unlicensed": "Без лиценз",
     "beta": "Бета",
-    "manageClients": "Управление на клиенти",
-    "manageClientsDescription": "Клиентите са устройства, които могат да се свързват към вашите сайтове",
+    "manageUserDevices": "User Devices",
+    "manageUserDevicesDescription": "View and manage devices that users use to privately connect to resources",
+    "manageMachineClients": "Manage Machine Clients",
+    "manageMachineClientsDescription": "Create and manage clients that servers and systems use to privately connect to resources",
+    "clientsTableUserClients": "User",
+    "clientsTableMachineClients": "Machine",
     "licenseTableValidUntil": "Валиден до",
     "saasLicenseKeysSettingsTitle": "Корпоративни лицензи",
     "saasLicenseKeysSettingsDescription": "Генериране и управление на корпоративни лицензионни ключове за самостоятелно хоствани инстанции на Pangolin",
@@ -2075,7 +2118,7 @@
     "preferWildcardCert": "Предпочитайте универсален сертификат",
     "unverified": "Невалидиран",
     "domainSetting": "Настройки на домейните",
-    "domainSettingDescription": "Конфигурирайте настройките за вашия домейн",
+    "domainSettingDescription": "Configure settings for the domain",
     "preferWildcardCertDescription": "Опит за генериране на универсален сертификат (изисква правилно конфигуриран решавач на сертификати).",
     "recordName": "Име на запис",
     "auto": "Автоматично",
@@ -2089,15 +2132,15 @@
     "olmUpdateAvailableInfo": "Налична е актуализирана версия на Olm. Моля, актуализирайте до най-новата версия за най-добро преживяване.",
     "client": "Клиент",
     "proxyProtocol": "Настройки на прокси протокол",
-    "proxyProtocolDescription": "Конфигурирайте прокси протокол за запазване на IP адресите на клиентите за TCP/UDP услуги.",
+    "proxyProtocolDescription": "Configure Proxy Protocol to preserve client IP addresses for TCP services.",
     "enableProxyProtocol": "Активирайте прокси протокола",
-    "proxyProtocolInfo": "Запазете IP адресите на клиентите за TCP/UDP бекенди",
+    "proxyProtocolInfo": "Preserve client IP addresses for TCP backends",
     "proxyProtocolVersion": "Версия на прокси протокола",
     "version1": "Версия 1 (Препоръчително)",
     "version2": "Версия 2",
     "versionDescription": "Версия 1 е текстово-базирана и широко поддържана. Версия 2 е бърна и по-ефективна, но по-малко съвместима.",
     "warning": "Предупреждение",
-    "proxyProtocolWarning": "Вашето бекенд приложение трябва да бъде конфигурирано да приема прокси протоколни връзки. Ако вашият бекенд не поддържа прокси протокол, активирането му ще прекъсне всички връзки. Уверете се, че сте конфигурирали вашия бекенд да се доверява на заглавията на прокси протокола от Traefik.",
+    "proxyProtocolWarning": "The backend application must be configured to accept Proxy Protocol connections. If your backend doesn't support Proxy Protocol, enabling this will break all connections so only enable this if you know what you're doing. Make sure to configure your backend to trust Proxy Protocol headers from Traefik.",
     "restarting": "Рестартиране...",
     "manual": "Ръководство",
     "messageSupport": "Съобщение до поддръжката",
@@ -2120,6 +2163,43 @@
     "supportMessageSent": "Съобщението е изпратено!",
     "supportWillContact": "Ще се свържем с вас скоро!",
     "selectLogRetention": "Изберете съхранение на логовете",
+    "terms": "Terms",
+    "privacy": "Privacy",
+    "security": "Security",
+    "docs": "Docs",
+    "deviceActivation": "Device activation",
+    "deviceCodeInvalidFormat": "Code must be 9 characters (e.g., A1AJ-N5JD)",
+    "deviceCodeInvalidOrExpired": "Invalid or expired code",
+    "deviceCodeVerifyFailed": "Failed to verify device code",
+    "signedInAs": "Signed in as",
+    "deviceCodeEnterPrompt": "Enter the code displayed on the device",
+    "continue": "Continue",
+    "deviceUnknownLocation": "Unknown location",
+    "deviceAuthorizationRequested": "This authorization was requested from {location} on {date}. Make sure you trust this device as it will get access to the account.",
+    "deviceLabel": "Device: {deviceName}",
+    "deviceWantsAccess": "wants to access your account",
+    "deviceExistingAccess": "Existing access:",
+    "deviceFullAccess": "Full access to your account",
+    "deviceOrganizationsAccess": "Access to all organizations your account has access to",
+    "deviceAuthorize": "Authorize {applicationName}",
+    "deviceConnected": "Device Connected!",
+    "deviceAuthorizedMessage": "Device is authorized to access your account.",
+    "pangolinCloud": "Pangolin Cloud",
+    "viewDevices": "View Devices",
+    "viewDevicesDescription": "Manage your connected devices",
+    "noDevices": "No devices found",
+    "dateCreated": "Date Created",
+    "unnamedDevice": "Unnamed Device",
+    "deviceQuestionRemove": "Are you sure you want to delete this device?",
+    "deviceMessageRemove": "This action cannot be undone.",
+    "deviceDeleteConfirm": "Delete Device",
+    "deleteDevice": "Delete Device",
+    "errorLoadingDevices": "Error loading devices",
+    "failedToLoadDevices": "Failed to load devices",
+    "deviceDeleted": "Device deleted",
+    "deviceDeletedDescription": "The device has been successfully deleted.",
+    "errorDeletingDevice": "Error deleting device",
+    "failedToDeleteDevice": "Failed to delete device",
     "showColumns": "Покажи колони",
     "hideColumns": "Скрий колони",
     "columnVisibility": "Видимост на колоните",
@@ -2134,6 +2214,10 @@
     "enableSelected": "Разреши избраните",
     "disableSelected": "Забрани избраните",
     "checkSelectedStatus": "Проверете състоянието на избраните",
+    "clients": "Clients",
+    "accessClientSelect": "Select machine clients",
+    "resourceClientDescription": "Machine clients that can access this resource",
+    "regenerate": "Regenerate",
     "credentials": "Удостоверения",
     "savecredentials": "Запазване на удостоверения",
     "regeneratecredentials": "Прегенериране",
@@ -2151,7 +2235,6 @@
     "endpoint": "Крайна точка",
     "Id": "Идентификатор",
     "SecretKey": "Таен ключ",
-    "featureDisabledTooltip": "Тази функция е налична само в корпоративния пакет и изисква лиценз за използване.",
     "niceId": "Красив ID",
     "niceIdUpdated": "Красив ID е обновен",
     "niceIdUpdatedSuccessfully": "Красив ID е успешно обновен",
@@ -2160,5 +2243,15 @@
     "niceIdCannotBeEmpty": "Красив ID не може да бъде празен",
     "enterIdentifier": "Въведете идентификатор",
     "identifier": "Идентификатор",
-    "noData": "No Data"
+    "deviceLoginUseDifferentAccount": "Not you? Use a different account.",
+    "deviceLoginDeviceRequestingAccessToAccount": "A device is requesting access to this account.",
+    "noData": "No Data",
+    "machineClients": "Machine Clients",
+    "install": "Install",
+    "run": "Run",
+    "clientNameDescription": "The display name of the client that can be changed later.",
+    "clientAddress": "Client Address (Advanced)",
+    "setupFailedToFetchSubnet": "Failed to fetch default subnet",
+    "setupSubnetAdvanced": "Subnet (Advanced)",
+    "setupSubnetDescription": "The subnet for this organization's internal network."
 }

messages/cs-CZ.json

@@ -1,12 +1,12 @@
 {
-    "setupCreate": "Vytvořte si organizaci, lokalitu a služby",
+    "setupCreate": "Create the organization, site, and resources",
     "setupNewOrg": "Nová organizace",
     "setupCreateOrg": "Vytvořit organizaci",
     "setupCreateResources": "Vytvořit zdroje",
     "setupOrgName": "Název organizace",
-    "orgDisplayName": "Toto je zobrazovaný název vaší organizace.",
+    "orgDisplayName": "This is the display name of the organization.",
     "orgId": "ID organizace",
-    "setupIdentifierMessage": "Toto je jedinečný identifikátor vaší organizace. Nemusí odpovídat názvu organizace.",
+    "setupIdentifierMessage": "This is the unique identifier for the organization.",
     "setupErrorIdentifier": "ID organizace je již použito. Zvolte prosím jiné.",
     "componentsErrorNoMemberCreate": "Zatím nejste členem žádné organizace. Abyste mohli začít, vytvořte si organizaci.",
     "componentsErrorNoMember": "Zatím nejste členem žádných organizací.",
@@ -50,10 +50,10 @@
     "siteMessageRemove": "Po odstranění webu již nebude přístupný. Všechny cíle spojené s webem budou také odstraněny.",
     "siteQuestionRemove": "Jste si jisti, že chcete odstranit tuto stránku z organizace?",
     "siteManageSites": "Správa lokalit",
-    "siteDescription": "Umožní připojení k vaší síti prostřednictvím zabezpečených tunelů",
+    "siteDescription": "Create and manage sites to enable connectivity to private networks",
     "siteCreate": "Vytvořit lokalitu",
     "siteCreateDescription2": "Postupujte podle níže uvedených kroků, abyste vytvořili a připojili novou lokalitu",
-    "siteCreateDescription": "Vytvořte novou lokalitu, abyste mohli začít připojovat služby",
+    "siteCreateDescription": "Create a new site to start connecting resources",
     "close": "Zavřít",
     "siteErrorCreate": "Chyba při vytváření lokality",
     "siteErrorCreateKeyPair": "Nebyly nalezeny klíče nebo výchozí nastavení lokality",
@@ -74,7 +74,7 @@
     "siteInstallNewt": "Nainstalovat Newt",
     "siteInstallNewtDescription": "Spustit Newt na vašem systému",
     "WgConfiguration": "Konfigurace WireGuard",
-    "WgConfigurationDescription": "Použijte následující konfiguraci pro připojení k vaší síti",
+    "WgConfigurationDescription": "Use the following configuration to connect to the network",
     "operatingSystem": "Operační systém",
     "commands": "Příkazy",
     "recommended": "Doporučeno",
@@ -87,32 +87,32 @@
     "siteUpdated": "Lokalita upravena",
     "siteUpdatedDescription": "Lokalita byla upravena.",
     "siteGeneralDescription": "Upravte obecná nastavení pro tuto lokalitu",
-    "siteSettingDescription": "Upravte nastavení vaší lokality",
+    "siteSettingDescription": "Configure the settings on the site",
     "siteSetting": "Nastavení {siteName}",
-    "siteNewtTunnel": "Tunel Newt (doporučeno)",
-    "siteNewtTunnelDescription": "Nejjednodušší způsob, jak vytvořit vstupní bod do vaší sítě. Žádné další nastavení.",
+    "siteNewtTunnel": "Newt Site (Recommended)",
+    "siteNewtTunnelDescription": "Easiest way to create an entrypoint into any network. No extra setup.",
     "siteWg": "Základní WireGuard",
     "siteWgDescription": "Použijte jakéhokoli klienta WireGuard abyste sestavili tunel. Vyžaduje se ruční nastavení NAT.",
     "siteWgDescriptionSaas": "Použijte jakéhokoli klienta WireGuard abyste sestavili tunel. Vyžaduje se ruční nastavení NAT. FUNGUJE POUZE NA SELF-HOSTED SERVERECH",
     "siteLocalDescription": "Pouze lokální zdroje. Žádný tunel.",
     "siteLocalDescriptionSaas": "Pouze místní zdroje. Žádný tunel. Dostupné pouze na vzdálených uzlech.",
     "siteSeeAll": "Zobrazit všechny lokality",
-    "siteTunnelDescription": "Určete jak se chcete připojit k vaší lokalitě",
-    "siteNewtCredentials": "Přihlašovací údaje Newt",
-    "siteNewtCredentialsDescription": "Tímto způsobem se bude Newt autentizovat na serveru",
-    "siteCredentialsSave": "Uložit přihlašovací údaje",
+    "siteTunnelDescription": "Determine how you want to connect to the site",
+    "siteNewtCredentials": "Credentials",
+    "siteNewtCredentialsDescription": "This is how the site will authenticate with the server",
+    "siteCredentialsSave": "Save the Credentials",
     "siteCredentialsSaveDescription": "Toto nastavení uvidíte pouze jednou. Ujistěte se, že jej zkopírujete na bezpečné místo.",
     "siteInfo": "Údaje o lokalitě",
     "status": "Stav",
     "shareTitle": "Spravovat sdílení odkazů",
-    "shareDescription": "Vytvořte odkazy, abyste udělili dočasný nebo trvalý přístup k vašim zdrojům",
+    "shareDescription": "Create shareable links to grant temporary or permanent access to proxy resources",
     "shareSearch": "Hledat sdílené odkazy...",
     "shareCreate": "Vytvořit odkaz",
     "shareErrorDelete": "Nepodařilo se odstranit odkaz",
     "shareErrorDeleteMessage": "Došlo k chybě při odstraňování odkazu",
     "shareDeleted": "Odkaz odstraněn",
     "shareDeletedDescription": "Odkaz byl odstraněn",
-    "shareTokenDescription": "Váš přístupový token může být předán dvěma způsoby: jako parametr dotazu nebo v záhlaví požadavku. Tyto údaje musí být předány klientem v každé žádosti o ověřený přístup.",
+    "shareTokenDescription": "The access token can be passed in two ways: as a query parameter or in the request headers. These must be passed from the client on every request for authenticated access.",
     "accessToken": "Přístupový token",
     "usageExamples": "Příklady použití",
     "tokenId": "ID tokenu",
@@ -121,7 +121,7 @@
     "importantNote": "Důležité upozornění",
     "shareImportantDescription": "Z bezpečnostních důvodů je doporučeno používat raději hlavičky než parametry dotazu pokud je to možné, protože parametry dotazu mohou být zaznamenány v logu serveru nebo v historii prohlížeče.",
     "token": "Token",
-    "shareTokenSecurety": "Uchovejte přístupový token v bezpečí. Nesdílejte jej na veřejně přístupných místěch nebo v kódu na straně klienta.",
+    "shareTokenSecurety": "Keep the access token secure. Do not share it in publicly accessible areas or client-side code.",
     "shareErrorFetchResource": "Nepodařilo se načíst zdroje",
     "shareErrorFetchResourceDescription": "Při načítání zdrojů došlo k chybě",
     "shareErrorCreate": "Nepodařilo se vytvořit odkaz",
@@ -144,8 +144,10 @@
     "expires": "Vyprší",
     "never": "Nikdy",
     "shareErrorSelectResource": "Zvolte prosím zdroj",
-    "resourceTitle": "Spravovat zdroje",
-    "resourceDescription": "Vytvořte bezpečné proxy služby pro přístup k privátním aplikacím",
+    "proxyResourceTitle": "Manage Public Resources",
+    "proxyResourceDescription": "Create and manage resources that are publicly accessible through a web browser",
+    "clientResourceTitle": "Manage Private Resources",
+    "clientResourceDescription": "Create and manage resources that are only accessible through a connected client",
     "resourcesSearch": "Prohledat zdroje...",
     "resourceAdd": "Přidat zdroj",
     "resourceErrorDelte": "Chyba při odstraňování zdroje",
@@ -155,9 +157,9 @@
     "resourceMessageRemove": "Jakmile zdroj odstraníte, nebude dostupný. Všechny související služby a cíle budou také odstraněny.",
     "resourceQuestionRemove": "Jste si jisti, že chcete odstranit zdroj z organizace?",
     "resourceHTTP": "Zdroj HTTPS",
-    "resourceHTTPDescription": "Požadavky na proxy pro vaši aplikaci přes HTTPS pomocí subdomény nebo základní domény.",
+    "resourceHTTPDescription": "Proxy requests to the app over HTTPS using a subdomain or base domain.",
     "resourceRaw": "Surový TCP/UDP zdroj",
-    "resourceRawDescription": "Požadavky na proxy pro vaši aplikaci přes TCP/UDP pomocí čísla portu.",
+    "resourceRawDescription": "Proxy requests to the app over TCP/UDP using a port number. This only works when sites are connected to nodes.",
     "resourceCreate": "Vytvořit zdroj",
     "resourceCreateDescription": "Postupujte podle níže uvedených kroků, abyste vytvořili a připojili nový zdroj",
     "resourceSeeAll": "Zobrazit všechny zdroje",
@@ -171,22 +173,22 @@
     "noCountryFound": "Nebyla nalezena žádná země.",
     "siteSelectionDescription": "Tato lokalita poskytne připojení k cíli.",
     "resourceType": "Typ zdroje",
-    "resourceTypeDescription": "Určete, jak chcete přistupovat ke svému zdroji",
+    "resourceTypeDescription": "Determine how to access the resource",
     "resourceHTTPSSettings": "Nastavení HTTPS",
-    "resourceHTTPSSettingsDescription": "Nakonfigurujte, jak bude váš zdroj přístupný přes HTTPS",
+    "resourceHTTPSSettingsDescription": "Configure how the resource will be accessed over HTTPS",
     "domainType": "Typ domény",
     "subdomain": "Subdoména",
     "baseDomain": "Základní doména",
-    "subdomnainDescription": "Subdoména, kde bude váš zdroj přístupný.",
+    "subdomnainDescription": "The subdomain where the resource will be accessible.",
     "resourceRawSettings": "Nastavení TCP/UDP",
-    "resourceRawSettingsDescription": "Nakonfigurujte, jak bude váš dokument přístupný přes TCP/UDP. Mapováte zdroj na port na serveru Pangolin, takže můžete přistupovat ke zdroji ze serveru-veřejné ip:mapped-port.",
+    "resourceRawSettingsDescription": "Configure how the resource will be accessed over TCP/UDP. You map the resource to a port on the host Pangolin server, so you can access the resource from server-public-ip:mapped-port.",
     "protocol": "Protokol",
     "protocolSelect": "Vybrat protokol",
     "resourcePortNumber": "Číslo portu",
     "resourcePortNumberDescription": "Externí port k požadavkům proxy serveru.",
     "cancel": "Zrušit",
     "resourceConfig": "Konfigurační snippety",
-    "resourceConfigDescription": "Zkopírujte a vložte tyto konfigurační snippety pro nastavení TCP/UDP zdroje",
+    "resourceConfigDescription": "Copy and paste these configuration snippets to set up the TCP/UDP resource",
     "resourceAddEntrypoints": "Traefik: Přidat vstupní body",
     "resourceExposePorts": "Gerbil: Expose Ports in Docker Compose",
     "resourceLearnRaw": "Naučte se konfigurovat zdroje TCP/UDP",
@@ -202,14 +204,14 @@
     "proxy": "Proxy server",
     "internal": "Interní",
     "rules": "Pravidla",
-    "resourceSettingDescription": "Konfigurace nastavení na vašem zdroji",
+    "resourceSettingDescription": "Configure the settings on the resource",
     "resourceSetting": "Nastavení {resourceName}",
-    "alwaysAllow": "Vždy povolit",
-    "alwaysDeny": "Vždy zakázat",
+    "alwaysAllow": "Bypass Auth",
+    "alwaysDeny": "Block Access",
     "passToAuth": "Předat k ověření",
-    "orgSettingsDescription": "Konfigurace obecných nastavení vaší organizace",
+    "orgSettingsDescription": "Configure the organization's settings",
     "orgGeneralSettings": "Nastavení organizace",
-    "orgGeneralSettingsDescription": "Spravujte údaje a konfiguraci vaší organizace",
+    "orgGeneralSettingsDescription": "Manage the organization's details and configuration",
     "saveGeneralSettings": "Uložit obecné nastavení",
     "saveSettings": "Uložit nastavení",
     "orgDangerZone": "Nebezpečná zóna",
@@ -232,7 +234,7 @@
     "orgMissing": "Chybí ID organizace",
     "orgMissingMessage": "Nelze obnovit pozvánku bez ID organizace.",
     "accessUsersManage": "Spravovat uživatele",
-    "accessUsersDescription": "Pozvěte uživatele a přidejte je do rolí pro správu přístupu do vaší organizace",
+    "accessUsersDescription": "Invite and manage users with access to this organization",
     "accessUsersSearch": "Hledat uživatele...",
     "accessUserCreate": "Vytvořit uživatele",
     "accessUserRemove": "Odstranit uživatele",
@@ -241,13 +243,13 @@
     "role": "Role",
     "nameRequired": "Název je povinný",
     "accessRolesManage": "Spravovat role",
-    "accessRolesDescription": "Konfigurace rolí pro správu přístupu do vaší organizace",
+    "accessRolesDescription": "Create and manage roles for users in the organization",
     "accessRolesSearch": "Hledat role...",
     "accessRolesAdd": "Přidat roli",
     "accessRoleDelete": "Odstranit roli",
     "description": "L 343, 22.12.2009, s. 1).",
     "inviteTitle": "Otevřít pozvánky",
-    "inviteDescription": "Spravujte své pozvánky ostatním uživatelům",
+    "inviteDescription": "Manage invitations for other users to join the organization",
     "inviteSearch": "Hledat pozvánky...",
     "minutes": "Zápis z jednání",
     "hours": "Hodiny",
@@ -261,13 +263,13 @@
     "apiKeysErrorCreate": "Chyba při vytváření API klíče",
     "apiKeysErrorSetPermission": "Chyba nastavení oprávnění",
     "apiKeysCreate": "Generovat API klíč",
-    "apiKeysCreateDescription": "Vygenerovat nový API klíč pro vaši organizaci",
+    "apiKeysCreateDescription": "Generate a new API key for the organization",
     "apiKeysGeneralSettings": "Práva",
     "apiKeysGeneralSettingsDescription": "Určete, co může tento API klíč udělat",
-    "apiKeysList": "Váš API klíč",
-    "apiKeysSave": "Uložit váš API klíč",
+    "apiKeysList": "New API Key",
+    "apiKeysSave": "Save the API Key",
     "apiKeysSaveDescription": "Toto nastavení uvidíte pouze jednou. Ujistěte se, že jej zkopírujete na bezpečné místo.",
-    "apiKeysInfo": "Váš API klíč je:",
+    "apiKeysInfo": "The API key is:",
     "apiKeysConfirmCopy": "Kopíroval jsem API klíč",
     "generate": "Generovat",
     "done": "Hotovo",
@@ -424,7 +426,7 @@
     "userCreated": "Uživatel byl vytvořen",
     "userCreatedDescription": "Uživatel byl úspěšně vytvořen.",
     "userTypeInternal": "Interní uživatel",
-    "userTypeInternalDescription": "Pozvěte uživatele do vaší organizace přímo.",
+    "userTypeInternalDescription": "Invite a user to join the organization directly.",
     "userTypeExternal": "Externí uživatel",
     "userTypeExternalDescription": "Vytvořte uživatele s externím poskytovatelem identity.",
     "accessUserCreateDescription": "Postupujte podle níže uvedených kroků pro vytvoření nového uživatele",
@@ -468,13 +470,13 @@
     "accessControlsSubmit": "Uložit kontroly přístupu",
     "roles": "Role",
     "accessUsersRoles": "Spravovat uživatele a role",
-    "accessUsersRolesDescription": "Pozvěte uživatele a přidejte je do rolí pro správu přístupu do vaší organizace",
+    "accessUsersRolesDescription": "Invite users and add them to roles to manage access to the organization",
     "key": "Klíč",
     "createdAt": "Vytvořeno v",
     "proxyErrorInvalidHeader": "Neplatná hodnota hlavičky hostitele. Použijte formát názvu domény, nebo uložte prázdné pro zrušení vlastního hlavičky hostitele.",
     "proxyErrorTls": "Neplatné jméno TLS serveru. Použijte formát doménového jména nebo uložte prázdné pro odstranění názvu TLS serveru.",
     "proxyEnableSSL": "Povolit SSL",
-    "proxyEnableSSLDescription": "Povolit šifrování SSL/TLS pro zabezpečená HTTPS připojení k vašim cílům.",
+    "proxyEnableSSLDescription": "Enable SSL/TLS encryption for secure HTTPS connections to the targets.",
     "target": "Target",
     "configureTarget": "Konfigurace cílů",
     "targetErrorFetch": "Nepodařilo se načíst cíle",
@@ -490,29 +492,29 @@
     "targetsErrorUpdate": "Nepodařilo se aktualizovat cíle",
     "targetsErrorUpdateDescription": "Došlo k chybě při aktualizaci cílů",
     "targetTlsUpdate": "Nastavení TLS aktualizováno",
-    "targetTlsUpdateDescription": "Vaše nastavení TLS bylo úspěšně aktualizováno",
+    "targetTlsUpdateDescription": "TLS settings have been updated successfully",
     "targetErrorTlsUpdate": "Aktualizace nastavení TLS se nezdařila",
     "targetErrorTlsUpdateDescription": "Došlo k chybě při aktualizaci nastavení TLS",
     "proxyUpdated": "Nastavení proxy bylo aktualizováno",
-    "proxyUpdatedDescription": "Vaše nastavení proxy bylo úspěšně aktualizováno",
+    "proxyUpdatedDescription": "Proxy settings have been updated successfully",
     "proxyErrorUpdate": "Aktualizace nastavení proxy se nezdařila",
     "proxyErrorUpdateDescription": "Došlo k chybě při aktualizaci nastavení proxy",
     "targetAddr": "IP / Hostname",
     "targetPort": "Přístav",
     "targetProtocol": "Protokol",
     "targetTlsSettings": "Nastavení bezpečného připojení",
-    "targetTlsSettingsDescription": "Konfigurace nastavení SSL/TLS pro váš dokument",
+    "targetTlsSettingsDescription": "Configure SSL/TLS settings for the resource",
     "targetTlsSettingsAdvanced": "Pokročilé nastavení TLS",
     "targetTlsSni": "Název serveru TLS",
     "targetTlsSniDescription": "Název serveru TLS pro použití v SNI. Ponechte prázdné pro použití výchozího nastavení.",
     "targetTlsSubmit": "Uložit nastavení",
     "targets": "Konfigurace cílů",
-    "targetsDescription": "Nastavte cíle pro směrování provozu do záložních služeb",
+    "targetsDescription": "Set up targets to route traffic to backend services",
     "targetStickySessions": "Povolit Rychlé relace",
     "targetStickySessionsDescription": "Zachovat spojení na stejném cíli pro celou relaci.",
     "methodSelect": "Vyberte metodu",
     "targetSubmit": "Add Target",
-    "targetNoOne": "Tento zdroj nemá žádné cíle. Přidejte cíl pro konfiguraci kam poslat žádosti na vaši backend.",
+    "targetNoOne": "This resource doesn't have any targets. Add a target to configure where to send requests to the backend.",
     "targetNoOneDescription": "Přidáním více než jednoho cíle se umožní vyvážení zatížení.",
     "targetsSubmit": "Uložit cíle",
     "addTarget": "Add Target",
@@ -530,7 +532,7 @@
     "tlsServerNameDescription": "The TLS server name to use for SNI",
     "save": "Uložit",
     "proxyAdditional": "Další nastavení proxy",
-    "proxyAdditionalDescription": "Konfigurovat nastavení proxy zpracování vašeho zdroje",
+    "proxyAdditionalDescription": "Configure how the resource handles proxy settings",
     "proxyCustomHeader": "Vlastní hlavička hostitele",
     "proxyCustomHeaderDescription": "Hlavička hostitele bude nastavena při proxování požadavků. Nechte prázdné pro použití výchozího nastavení.",
     "proxyAdditionalSubmit": "Uložit nastavení proxy",
@@ -570,7 +572,7 @@
     "rulesMatchType": "Typ shody",
     "value": "Hodnota",
     "rulesAbout": "O pravidlech",
-    "rulesAboutDescription": "Pravidla vám umožňují kontrolovat přístup k vašemu zdroji na základě sady kritérií. Můžete vytvořit pravidla pro povolení nebo zamítnutí přístupu na základě IP adresy nebo cesty URL.",
+    "rulesAboutDescription": "Rules allow you to control access to the resource based on a set of criteria. You can create rules to allow or deny access based on IP address or URL path.",
     "rulesActions": "Akce",
     "rulesActionAlwaysAllow": "Vždy Povolit: Obejít všechny metody ověřování",
     "rulesActionAlwaysDeny": "Vždy odepří: Zablokovat všechny požadavky; nelze se pokusit o ověření",
@@ -582,7 +584,7 @@
     "rulesEnable": "Povolit pravidla",
     "rulesEnableDescription": "Povolit nebo zakázat hodnocení pravidel pro tento zdroj",
     "rulesResource": "Konfigurace pravidel zdroje",
-    "rulesResourceDescription": "Konfigurace pravidel pro kontrolu přístupu k vašemu zdroji",
+    "rulesResourceDescription": "Configure rules to control access to the resource",
     "ruleSubmit": "Přidat pravidlo",
     "rulesNoOne": "Žádná pravidla. Přidejte pravidlo pomocí formuláře.",
     "rulesOrder": "Pravidla jsou hodnocena podle priority vzestupně.",
@@ -598,7 +600,7 @@
     "none": "Nic",
     "unknown": "Neznámý",
     "resources": "Zdroje",
-    "resourcesDescription": "Zdroje jsou proxy aplikací běžících na vaší soukromé síti. Vytvořte zdroj pro jakoukoli HTTP/HTTPS nebo nakreslete TCP/UDP službu na vaší soukromé síti. Každý zdroj musí být připojen k webu pro povolení soukromého, zabezpečeného připojení pomocí šifrovaného tunelu WireGuard.",
+    "resourcesDescription": "Resources are proxies to applications running on the private network. Create a resource for any HTTP/HTTPS or raw TCP/UDP service on your private network. Each resource must be connected to a site to enable private, secure connectivity through an encrypted WireGuard tunnel.",
     "resourcesWireGuardConnect": "Bezpečné připojení s šifrováním WireGuard",
     "resourcesMultipleAuthenticationMethods": "Konfigurace vícenásobných metod ověřování",
     "resourcesUsersRolesAccess": "Kontrola přístupu na základě uživatelů a rolí",
@@ -609,7 +611,7 @@
     "resourceSelect": "Vyberte zdroj",
     "shareLinks": "Sdílet odkazy",
     "share": "Sdílené odkazy",
-    "shareDescription2": "Vytvořte sdílitelné odkazy na vaše zdroje. Odkazy poskytují dočasný nebo neomezený přístup k vašemu zdroji. Můžete nakonfigurovat dobu vypršení platnosti odkazu při jeho vytvoření.",
+    "shareDescription2": "Create shareable links to resources. Links provide temporary or unlimited access to your resource. You can configure the expiration duration of the link when you create one.",
     "shareEasyCreate": "Snadné vytváření a sdílení",
     "shareConfigurableExpirationDuration": "Konfigurovatelná doba vypršení platnosti",
     "shareSecureAndRevocable": "Bezpečné a odvolatelné",
@@ -619,19 +621,19 @@
     "unknownCommand": "Neznámý příkaz",
     "newtErrorFetchReleases": "Nepodařilo se načíst informace o vydání: {err}",
     "newtErrorFetchLatest": "Chyba při načítání nejnovější verze: {err}",
-    "newtEndpoint": "Newt Endpoint",
-    "newtId": "Newt ID",
-    "newtSecretKey": "Tajný klíč novinky",
+    "newtEndpoint": "Endpoint",
+    "newtId": "ID",
+    "newtSecretKey": "Secret",
     "architecture": "Architektura",
     "sites": "Stránky",
-    "siteWgAnyClients": "K připojení použijte jakéhokoli klienta WireGuard. Budete muset řešit své interní zdroje pomocí klientské IP adresy.",
+    "siteWgAnyClients": "Use any WireGuard client to connect. You will have to address internal resources using the peer IP.",
     "siteWgCompatibleAllClients": "Kompatibilní se všemi klienty aplikace WireGuard",
     "siteWgManualConfigurationRequired": "Je vyžadována ruční konfigurace",
     "userErrorNotAdminOrOwner": "Uživatel není administrátor nebo vlastník",
     "pangolinSettings": "Nastavení - Pangolin",
     "accessRoleYour": "Vaše role:",
-    "accessRoleSelect2": "Vyberte roli",
-    "accessUserSelect": "Vyberte uživatele",
+    "accessRoleSelect2": "Select roles",
+    "accessUserSelect": "Select users",
     "otpEmailEnter": "Zadejte e-mail",
     "otpEmailEnterDescription": "Stisknutím klávesy Enter přidáte e-mail po zadání do vstupního pole.",
     "otpEmailErrorInvalid": "Neplatná e-mailová adresa. Wildcard (*) musí být celá místní část.",
@@ -683,7 +685,7 @@
     "resourcePincodeSetupTitle": "Nastavit anonymní kód",
     "resourcePincodeSetupTitleDescription": "Nastavit pincode pro ochranu tohoto zdroje",
     "resourceRoleDescription": "Administrátoři mají vždy přístup k tomuto zdroji.",
-    "resourceUsersRoles": "Uživatelé a role",
+    "resourceUsersRoles": "Access Controls",
     "resourceUsersRolesDescription": "Nastavení, kteří uživatelé a role mohou navštívit tento zdroj",
     "resourceUsersRolesSubmit": "Uložit uživatele a role",
     "resourceWhitelistSave": "Úspěšně uloženo",
@@ -779,15 +781,15 @@
     "idpOidcConfigure": "Nastavení OAuth2/OIDC",
     "idpOidcConfigureDescription": "Konfigurace koncových bodů a pověření poskytovatele OAuth2/OIDC",
     "idpClientId": "ID klienta",
-    "idpClientIdDescription": "Klientské ID OAuth2 od poskytovatele identity",
+    "idpClientIdDescription": "The OAuth2 client ID from the identity provider",
     "idpClientSecret": "Tajný klíč klienta",
-    "idpClientSecretDescription": "OAuth2 klíč klienta od poskytovatele identity",
+    "idpClientSecretDescription": "The OAuth2 client secret from the identity provider",
     "idpAuthUrl": "Autorizační URL",
     "idpAuthUrlDescription": "Koncový koncový bod ověření OAuth2",
     "idpTokenUrl": "URL tokenu",
     "idpTokenUrlDescription": "URL koncového bodu OAuth2",
     "idpOidcConfigureAlert": "Důležité informace",
-    "idpOidcConfigureAlertDescription": "Po vytvoření poskytovatele identity budete muset nakonfigurovat URL zpětného volání v nastavení poskytovatele identity. Adresa URL zpětného volání bude poskytnuta po úspěšném vytvoření.",
+    "idpOidcConfigureAlertDescription": "After creating the identity provider, you will need to configure the callback URL in the identity provider's settings. The callback URL will be provided after successful creation.",
     "idpToken": "Nastavení tokenu",
     "idpTokenDescription": "Konfigurovat jak extrahovat informace o uživateli z ID tokenu",
     "idpJmespathAbout": "O JMESPath",
@@ -804,7 +806,7 @@
     "idpSubmit": "Vytvořit poskytovatele identity",
     "orgPolicies": "Zásady organizace",
     "idpSettings": "Nastavení {idpName}",
-    "idpCreateSettingsDescription": "Konfigurace nastavení pro poskytovatele identity",
+    "idpCreateSettingsDescription": "Configure the settings for the identity provider",
     "roleMapping": "Mapování rolí",
     "orgMapping": "Mapování organizace",
     "orgPoliciesSearch": "Hledat v zásadách organizace...",
@@ -839,7 +841,7 @@
     "idpUpdatedDescription": "Poskytovatel identity byl úspěšně aktualizován",
     "redirectUrl": "Přesměrovat URL",
     "redirectUrlAbout": "O přesměrování URL",
-    "redirectUrlAboutDescription": "Toto je URL, na kterou budou uživatelé po ověření přesměrováni. Tuto URL je třeba nakonfigurovat v nastavení poskytovatele identity.",
+    "redirectUrlAboutDescription": "This is the URL to which users will be redirected after authentication. You need to configure this URL in the identity provider's settings.",
     "pangolinAuth": "Auth - Pangolin",
     "verificationCodeLengthRequirements": "Váš ověřovací kód musí mít 8 znaků.",
     "errorOccurred": "Došlo k chybě",
@@ -922,6 +924,10 @@
     "passwordResetSent": "Na tuto e-mailovou adresu zašleme kód pro obnovení hesla.",
     "passwordResetCode": "Reset Code",
     "passwordResetCodeDescription": "Zkontrolujte svůj e-mail pro kód pro obnovení.",
+    "generatePasswordResetCode": "Generate Password Reset Code",
+    "passwordResetCodeGenerated": "Password Reset Code Generated",
+    "passwordResetCodeGeneratedDescription": "Share this code with the user. They can use it to reset their password.",
+    "passwordResetUrl": "Reset URL",
     "passwordNew": "Nové heslo",
     "passwordNewConfirm": "Potvrdit nové heslo",
     "changePassword": "Změnit heslo",
@@ -939,6 +945,9 @@
     "pincodeAuth": "Ověřovací kód",
     "pincodeSubmit2": "Odeslat kód",
     "passwordResetSubmit": "Žádost o obnovení",
+    "passwordResetAlreadyHaveCode": "Enter Password Reset Code",
+    "passwordResetSmtpRequired": "Please contact your administrator",
+    "passwordResetSmtpRequiredDescription": "A password reset code is required to reset your password. Please contact your administrator for assistance.",
     "passwordBack": "Zpět na heslo",
     "loginBack": "Přejít zpět na přihlášení",
     "signup": "Zaregistrovat se",
@@ -1104,12 +1113,15 @@
     "actionListSiteResources": "Seznam zdrojů webu",
     "actionUpdateSiteResource": "Aktualizovat dokument webu",
     "actionListInvitations": "Seznam pozvánek",
+    "actionExportLogs": "Export Logs",
+    "actionViewLogs": "View Logs",
     "noneSelected": "Není vybráno",
     "orgNotFound2": "Nebyly nalezeny žádné organizace.",
     "searchProgress": "Hledat...",
     "create": "Vytvořit",
     "orgs": "Organizace",
     "loginError": "Při přihlášení došlo k chybě",
+    "loginRequiredForDevice": "Login is required to authenticate your device.",
     "passwordForgot": "Zapomněli jste heslo?",
     "otpAuth": "Dvoufaktorové ověření",
     "otpAuthDescription": "Zadejte kód z vaší autentizační aplikace nebo jeden z vlastních záložních kódů.",
@@ -1164,23 +1176,29 @@
     "sidebarHome": "Domů",
     "sidebarSites": "Stránky",
     "sidebarResources": "Zdroje",
+    "sidebarProxyResources": "Public",
+    "sidebarClientResources": "Private",
     "sidebarAccessControl": "Kontrola přístupu",
+    "sidebarLogsAndAnalytics": "Logs & Analytics",
     "sidebarUsers": "Uživatelé",
+    "sidebarAdmin": "Admin",
     "sidebarInvitations": "Pozvánky",
     "sidebarRoles": "Role",
-    "sidebarShareableLinks": "Sdílené odkazy",
+    "sidebarShareableLinks": "Links",
     "sidebarApiKeys": "API klíče",
     "sidebarSettings": "Nastavení",
     "sidebarAllUsers": "Všichni uživatelé",
     "sidebarIdentityProviders": "Poskytovatelé identity",
     "sidebarLicense": "Licence",
     "sidebarClients": "Klienti",
+    "sidebarUserDevices": "Users",
+    "sidebarMachineClients": "Machines",
     "sidebarDomains": "Domény",
     "sidebarGeneral": "General",
     "sidebarLogAndAnalytics": "Log & Analytics",
     "sidebarBluePrints": "Plány",
     "sidebarOrganization": "Organization",
-    "sidebarLogsAnalytics": "Request Analytics",
+    "sidebarLogsAnalytics": "Analytics",
     "blueprints": "Plány",
     "blueprintsDescription": "Použít deklarativní konfigurace a zobrazit předchozí běhy",
     "blueprintAdd": "Přidat plán",
@@ -1191,7 +1209,7 @@
     "blueprintDetailsDescription": "Podívejte se na výsledek použitého plánu a případné chyby, které se vyskytly",
     "blueprintInfo": "Informace o plánu",
     "message": "Zpráva",
-    "blueprintContentsDescription": "Definujte obsah YAML popisující vaši infrastrukturu",
+    "blueprintContentsDescription": "Define the YAML content describing the infrastructure",
     "blueprintErrorCreateDescription": "Při aplikaci plánu došlo k chybě",
     "blueprintErrorCreate": "Chyba při vytváření plánu",
     "searchBlueprintProgress": "Hledat plány...",
@@ -1247,15 +1265,15 @@
     "loading": "Načítání",
     "restart": "Restartovat",
     "domains": "Domény",
-    "domainsDescription": "Spravovat domény pro vaši organizaci",
+    "domainsDescription": "Create and manage domains available in the organization",
     "domainsSearch": "Hledat domény...",
     "domainAdd": "Přidat doménu",
-    "domainAddDescription": "Registrujte novou doménu ve vaší organizaci",
+    "domainAddDescription": "Register a new domain with to the organization",
     "domainCreate": "Vytvořit doménu",
     "domainCreatedDescription": "Doména byla úspěšně vytvořena",
     "domainDeletedDescription": "Doména byla úspěšně odstraněna",
-    "domainQuestionRemove": "Opravdu chcete odstranit doménu z vašeho účtu?",
-    "domainMessageRemove": "Po odstranění domény již nebude přiřazena k vašemu účtu.",
+    "domainQuestionRemove": "Are you sure you want to remove the domain?",
+    "domainMessageRemove": "Once removed, the domain will no longer be associated with the organization.",
     "domainConfirmDelete": "Potvrdit odstranění domény",
     "domainDelete": "Odstranit doménu",
     "domain": "Doména",
@@ -1274,7 +1292,7 @@
     "pending": "Nevyřízeno",
     "sidebarBilling": "Fakturace",
     "billing": "Fakturace",
-    "orgBillingDescription": "Spravujte své fakturační údaje a předplatné",
+    "orgBillingDescription": "Manage billing information and subscriptions",
     "github": "GitHub",
     "pangolinHosted": "Pangolin hostovaný",
     "fossorial": "Fossorální",
@@ -1317,7 +1335,7 @@
     "domainPickerSortAsc": "A-Z",
     "domainPickerSortDesc": "Z-A",
     "domainPickerCheckingAvailability": "Kontrola dostupnosti...",
-    "domainPickerNoMatchingDomains": "Nebyly nalezeny žádné odpovídající domény. Zkuste jinou doménu nebo zkontrolujte nastavení domény vaší organizace.",
+    "domainPickerNoMatchingDomains": "No matching domains found. Try a different domain or check the organization's domain settings.",
     "domainPickerOrganizationDomains": "Domény organizace",
     "domainPickerProvidedDomains": "Poskytnuté domény",
     "domainPickerSubdomain": "Subdoména: {subdomain}",
@@ -1351,7 +1369,7 @@
     "billingModifySubscription": "Upravit předplatné",
     "billingStartSubscription": "Začít předplatné",
     "billingRecurringCharge": "Opakované nabití",
-    "billingManageSubscriptionSettings": "Spravovat nastavení a nastavení předplatného",
+    "billingManageSubscriptionSettings": "Manage subscription settings and preferences",
     "billingNoActiveSubscription": "Nemáte aktivní předplatné. Začněte předplatné, abyste zvýšili omezení používání.",
     "billingFailedToLoadSubscription": "Nepodařilo se načíst odběr",
     "billingFailedToLoadUsage": "Nepodařilo se načíst využití",
@@ -1362,9 +1380,9 @@
     "billingPortalError": "Chyba portálu",
     "billingDataUsageInfo": "Pokud jste připojeni k cloudu, jsou vám účtována všechna data přenášená prostřednictvím zabezpečených tunelů. To zahrnuje příchozí i odchozí provoz na všech vašich stránkách. Jakmile dosáhnete svého limitu, vaše stránky se odpojí, dokud neaktualizujete svůj tarif nebo nezmenšíte jeho používání. Data nejsou nabírána při používání uzlů.",
     "billingOnlineTimeInfo": "Platíte na základě toho, jak dlouho budou vaše stránky připojeny k cloudu. Například, 44,640 minut se rovná jedné stránce 24/7 po celý měsíc. Jakmile dosáhnete svého limitu, vaše stránky se odpojí, dokud neaktualizujete svůj tarif nebo nezkrátíte jeho používání. Čas není vybírán při používání uzlů.",
-    "billingUsersInfo": "Obdrželi jste platbu za každého uživatele ve vaší organizaci. Fakturace je počítána denně na základě počtu aktivních uživatelských účtů ve vašem org.",
-    "billingDomainInfo": "Platba je účtována za každou doménu ve vaší organizaci. Fakturace je počítána denně na základě počtu aktivních doménových účtů na Vašem org.",
-    "billingRemoteExitNodesInfo": "Za každý spravovaný uzel ve vaší organizaci se vám účtuje denně. Fakturace je počítána na základě počtu aktivních spravovaných uzlů ve vašem org.",
+    "billingUsersInfo": "You're charged for each user in the organization. Billing is calculated daily based on the number of active user accounts in your org.",
+    "billingDomainInfo": "You're charged for each domain in the organization. Billing is calculated daily based on the number of active domain accounts in your org.",
+    "billingRemoteExitNodesInfo": "You're charged for each managed Node in the organization. Billing is calculated daily based on the number of active managed Nodes in your org.",
     "domainNotFound": "Doména nenalezena",
     "domainNotFoundDescription": "Tento dokument je zakázán, protože doména již neexistuje náš systém. Nastavte prosím novou doménu pro tento dokument.",
     "failed": "Selhalo",
@@ -1456,23 +1474,23 @@
     "errorCreatingClient": "Chyba při vytváření klienta",
     "clientDefaultsNotFound": "Výchozí hodnoty klienta nebyly nalezeny",
     "createClient": "Vytvořit klienta",
-    "createClientDescription": "Vytvořte nového klienta pro připojení k vašim stránkám",
+    "createClientDescription": "Create a new client to access private resources",
     "seeAllClients": "Zobrazit všechny klienty",
     "clientInformation": "Informace o klientovi",
     "clientNamePlaceholder": "Název klienta",
     "address": "Adresa",
     "subnetPlaceholder": "Podsíť",
-    "addressDescription": "Adresa, kterou bude tento klient používat pro připojení",
+    "addressDescription": "The internal address of the client. Must fall within the organization's subnet.",
     "selectSites": "Vyberte stránky",
     "sitesDescription": "Klient bude mít připojení k vybraným webům",
     "clientInstallOlm": "Nainstalovat Olm",
     "clientInstallOlmDescription": "Stáhněte si Olm běžící ve vašem systému",
-    "clientOlmCredentials": "Olm pověření",
-    "clientOlmCredentialsDescription": "Tímto způsobem se bude Olm autentizovat se serverem",
-    "olmEndpoint": "Olm koncový bod",
-    "olmId": "Olm ID",
-    "olmSecretKey": "Olm tajný klíč",
-    "clientCredentialsSave": "Uložit přihlašovací údaje",
+    "clientOlmCredentials": "Credentials",
+    "clientOlmCredentialsDescription": "This is how the client will authenticate with the server",
+    "olmEndpoint": "Endpoint",
+    "olmId": "ID",
+    "olmSecretKey": "Secret",
+    "clientCredentialsSave": "Save the Credentials",
     "clientCredentialsSaveDescription": "Toto nastavení uvidíte pouze jednou. Ujistěte se, že jej zkopírujete na bezpečné místo.",
     "generalSettingsDescription": "Konfigurace obecných nastavení pro tohoto klienta",
     "clientUpdated": "Klient byl aktualizován",
@@ -1483,9 +1501,7 @@
     "sitesFetchError": "Došlo k chybě při načítání stránek.",
     "olmErrorFetchReleases": "Při načítání vydání Olm došlo k chybě.",
     "olmErrorFetchLatest": "Došlo k chybě při načítání nejnovější verze Olm.",
-    "remoteSubnets": "Vzdálené podsítě",
     "enterCidrRange": "Zadejte rozsah CIDR",
-    "remoteSubnetsDescription": "Přidejte CIDR rozsahy, které mohou být přístupné z tohoto webu dálkově pomocí klientů. Použijte formát jako 10.0.0.0/24. Toto platí pro připojení klienta VPN.",
     "resourceEnableProxy": "Povolit veřejné proxy",
     "resourceEnableProxyDescription": "Povolit veřejné proxying pro tento zdroj. To umožňuje přístup ke zdrojům mimo síť prostřednictvím cloudu na otevřeném portu. Vyžaduje nastavení Traefik.",
     "externalProxyEnabled": "Externí proxy povolen",
@@ -1503,14 +1519,15 @@
     "enableHealthChecksDescription": "Sledujte zdraví tohoto cíle. V případě potřeby můžete sledovat jiný cílový bod, než je cíl.",
     "healthScheme": "Způsob",
     "healthSelectScheme": "Vybrat metodu",
+    "healthCheckPortInvalid": "Health check port must be between 1 and 65535",
     "healthCheckPath": "Cesta",
     "healthHostname": "IP / Hostitel",
     "healthPort": "Přístav",
     "healthCheckPathDescription": "Cesta ke kontrole zdravotního stavu.",
-    "healthyIntervalSeconds": "Interval zdraví",
-    "unhealthyIntervalSeconds": "Nezdravý interval",
+    "healthyIntervalSeconds": "Healthy Interval (sec)",
+    "unhealthyIntervalSeconds": "Unhealthy Interval (sec)",
     "IntervalSeconds": "Interval zdraví",
-    "timeoutSeconds": "Časový limit",
+    "timeoutSeconds": "Timeout (sec)",
     "timeIsInSeconds": "Čas je v sekundách",
     "retryAttempts": "Opakovat pokusy",
     "expectedResponseCodes": "Očekávané kódy odezvy",
@@ -1546,12 +1563,12 @@
     "resourceEditDomain": "Upravit doménu",
     "siteName": "Název webu",
     "proxyPort": "Přístav",
-    "resourcesTableProxyResources": "Zdroje proxy",
-    "resourcesTableClientResources": "Zdroje klienta",
+    "resourcesTableProxyResources": "Public",
+    "resourcesTableClientResources": "Private",
     "resourcesTableNoProxyResourcesFound": "Nebyly nalezeny žádné zdroje proxy",
     "resourcesTableNoInternalResourcesFound": "Nebyly nalezeny žádné vnitřní zdroje.",
     "resourcesTableDestination": "Místo určení",
-    "resourcesTableTheseResourcesForUseWith": "Tyto zdroje jsou určeny pro použití s",
+    "resourcesTableAlias": "Alias",
     "resourcesTableClients": "Klienti",
     "resourcesTableAndOnlyAccessibleInternally": "a jsou interně přístupné pouze v případě, že jsou propojeni s klientem.",
     "resourcesTableNoTargets": "Žádné cíle",
@@ -1560,8 +1577,8 @@
     "resourcesTableOffline": "Offline",
     "resourcesTableUnknown": "Neznámý",
     "resourcesTableNotMonitored": "Není sledováno",
-    "editInternalResourceDialogEditClientResource": "Upravit klientský dokument",
-    "editInternalResourceDialogUpdateResourceProperties": "Aktualizujte vlastnosti zdroje a cílovou konfiguraci pro {resourceName}.",
+    "editInternalResourceDialogEditClientResource": "Edit Private Resource",
+    "editInternalResourceDialogUpdateResourceProperties": "Update the resource configuration and access controls for {resourceName}",
     "editInternalResourceDialogResourceProperties": "Vlastnosti zdroje",
     "editInternalResourceDialogName": "Jméno",
     "editInternalResourceDialogProtocol": "Protokol",
@@ -1580,11 +1597,22 @@
     "editInternalResourceDialogInvalidIPAddressFormat": "Neplatný formát IP adresy",
     "editInternalResourceDialogDestinationPortMin": "Cílový přístav musí být alespoň 1",
     "editInternalResourceDialogDestinationPortMax": "Cílový přístav musí být nižší než 65536",
+    "editInternalResourceDialogPortModeRequired": "Protocol, proxy port, and destination port are required for port mode",
+    "editInternalResourceDialogMode": "Mode",
+    "editInternalResourceDialogModePort": "Port",
+    "editInternalResourceDialogModeHost": "Host",
+    "editInternalResourceDialogModeCidr": "CIDR",
+    "editInternalResourceDialogDestination": "Destination",
+    "editInternalResourceDialogDestinationHostDescription": "The IP address or hostname of the resource on the site's network.",
+    "editInternalResourceDialogDestinationIPDescription": "The IP or hostname address of the resource on the site's network.",
+    "editInternalResourceDialogDestinationCidrDescription": "The CIDR range of the resource on the site's network.",
+    "editInternalResourceDialogAlias": "Alias",
+    "editInternalResourceDialogAliasDescription": "An optional internal DNS alias for this resource.",
     "createInternalResourceDialogNoSitesAvailable": "Nejsou k dispozici žádné weby",
     "createInternalResourceDialogNoSitesAvailableDescription": "Musíte mít alespoň jeden Newt web s podsítí nakonfigurovanou pro vytvoření vnitřních zdrojů.",
     "createInternalResourceDialogClose": "Zavřít",
-    "createInternalResourceDialogCreateClientResource": "Vytvořit klientský dokument",
-    "createInternalResourceDialogCreateClientResourceDescription": "Vytvořte nový zdroj, který bude přístupný klientům připojeným k vybranému webu.",
+    "createInternalResourceDialogCreateClientResource": "Create Private Resource",
+    "createInternalResourceDialogCreateClientResourceDescription": "Create a new resource that will only be accessible to clients connected to the organization",
     "createInternalResourceDialogResourceProperties": "Vlastnosti zdroje",
     "createInternalResourceDialogName": "Jméno",
     "createInternalResourceDialogSite": "Lokalita",
@@ -1613,11 +1641,22 @@
     "createInternalResourceDialogInvalidIPAddressFormat": "Neplatný formát IP adresy",
     "createInternalResourceDialogDestinationPortMin": "Cílový přístav musí být alespoň 1",
     "createInternalResourceDialogDestinationPortMax": "Cílový přístav musí být nižší než 65536",
+    "createInternalResourceDialogPortModeRequired": "Protocol, proxy port, and destination port are required for port mode",
+    "createInternalResourceDialogMode": "Mode",
+    "createInternalResourceDialogModePort": "Port",
+    "createInternalResourceDialogModeHost": "Host",
+    "createInternalResourceDialogModeCidr": "CIDR",
+    "createInternalResourceDialogDestination": "Destination",
+    "createInternalResourceDialogDestinationHostDescription": "The IP address or hostname of the resource on the site's network.",
+    "createInternalResourceDialogDestinationCidrDescription": "The CIDR range of the resource on the site's network.",
+    "createInternalResourceDialogAlias": "Alias",
+    "createInternalResourceDialogAliasDescription": "An optional internal DNS alias for this resource.",
     "siteConfiguration": "Konfigurace",
     "siteAcceptClientConnections": "Přijmout připojení klienta",
-    "siteAcceptClientConnectionsDescription": "Umožnit ostatním zařízením připojit se prostřednictvím této instance Newt jako brána pomocí klientů.",
-    "siteAddress": "Adresa webu",
-    "siteAddressDescription": "Zadejte IP adresu hostitele pro připojení. Toto je interní adresa webu v síti Pangolin pro klienty. Musí spadat do podsítě Org.",
+    "siteAcceptClientConnectionsDescription": "Allow user devices and clients to access resources on this site. This can be changed later.",
+    "siteAddress": "Site Address (Advanced)",
+    "siteAddressDescription": "The internal address of the site. Must fall within the organization's subnet.",
+    "siteNameDescription": "The display name of the site that can be changed later.",
     "autoLoginExternalIdp": "Automatické přihlášení pomocí externího IDP",
     "autoLoginExternalIdpDescription": "Okamžitě přesměrujte uživatele na externí IDP k ověření.",
     "selectIdp": "Vybrat IDP",
@@ -1631,7 +1670,7 @@
     "autoLoginErrorNoRedirectUrl": "Od poskytovatele identity nebyla obdržena žádná adresa URL.",
     "autoLoginErrorGeneratingUrl": "Nepodařilo se vygenerovat ověřovací URL.",
     "remoteExitNodeManageRemoteExitNodes": "Vzdálené uzly",
-    "remoteExitNodeDescription": "Hostujte jeden nebo více vlastních vzdálených uzlů, abyste rozšířili síťová připojení a snížili závislost na cloudu",
+    "remoteExitNodeDescription": "Self-host one or more remote nodes to extend network connectivity and reduce reliance on the cloud",
     "remoteExitNodes": "Uzly",
     "searchRemoteExitNodes": "Hledat uzly...",
     "remoteExitNodeAdd": "Přidat uzel",
@@ -1643,11 +1682,11 @@
     "sidebarRemoteExitNodes": "Vzdálené uzly",
     "remoteExitNodeCreate": {
         "title": "Vytvořit uzel",
-        "description": "Vytvořit nový uzel pro rozšíření síťového připojení",
+        "description": "Create a new node to extend network connectivity",
         "viewAllButton": "Zobrazit všechny uzly",
         "strategy": {
             "title": "Strategie tvorby",
-            "description": "Vyberte pro manuální konfiguraci vašeho uzlu nebo vygenerujte nové přihlašovací údaje.",
+            "description": "Choose this to manually configure the node or generate new credentials.",
             "adopt": {
                 "title": "Přijmout uzel",
                 "description": "Zvolte tuto možnost, pokud již máte přihlašovací údaje k uzlu."
@@ -1668,7 +1707,7 @@
         },
         "generate": {
             "title": "Vygenerovaná pověření",
-            "description": "Použijte tyto generované přihlašovací údaje pro nastavení vašeho uzlu",
+            "description": "Use these generated credentials to configure the node",
             "nodeIdTitle": "ID uzlu",
             "secretTitle": "Tajný klíč",
             "saveCredentialsTitle": "Přidat přihlašovací údaje do konfigurace",
@@ -1744,16 +1783,16 @@
     "idpTypeLabel": "Typ poskytovatele identity",
     "roleMappingExpressionPlaceholder": "např. obsahuje(skupiny, 'admin') && 'Admin' || 'Member'",
     "idpGoogleConfiguration": "Konfigurace Google",
-    "idpGoogleConfigurationDescription": "Konfigurace přihlašovacích údajů Google OAuth2",
-    "idpGoogleClientIdDescription": "Vaše ID klienta Google OAuth2",
-    "idpGoogleClientSecretDescription": "Tajný klíč klienta Google OAuth2",
+    "idpGoogleConfigurationDescription": "Configure the Google OAuth2 credentials",
+    "idpGoogleClientIdDescription": "Google OAuth2 Client ID",
+    "idpGoogleClientSecretDescription": "Google OAuth2 Client Secret",
     "idpAzureConfiguration": "Nastavení Azure Entra ID",
-    "idpAzureConfigurationDescription": "Nastavte vaše Azure Entra ID OAuth2",
+    "idpAzureConfigurationDescription": "Configure Azure Entra ID OAuth2 credentials",
     "idpTenantId": "ID tenanta",
-    "idpTenantIdPlaceholder": "vaše-tenant-id",
-    "idpAzureTenantIdDescription": "Vaše Azure nájemce ID (nalezeno v přehledu Azure Active Directory – Azure)",
-    "idpAzureClientIdDescription": "Vaše ID registrace aplikace Azure",
-    "idpAzureClientSecretDescription": "Tajný klíč registrace aplikace Azure",
+    "idpTenantIdPlaceholder": "tenant-id",
+    "idpAzureTenantIdDescription": "Azure tenant ID (found in Azure Active Directory overview)",
+    "idpAzureClientIdDescription": "Azure App Registration Client ID",
+    "idpAzureClientSecretDescription": "Azure App Registration Client Secret",
     "idpGoogleTitle": "Google",
     "idpGoogleAlt": "Google",
     "idpAzureTitle": "Azure Entra ID",
@@ -1761,14 +1800,14 @@
     "idpGoogleConfigurationTitle": "Konfigurace Google",
     "idpAzureConfigurationTitle": "Nastavení Azure Entra ID",
     "idpTenantIdLabel": "ID tenanta",
-    "idpAzureClientIdDescription2": "Vaše ID registrace aplikace Azure",
-    "idpAzureClientSecretDescription2": "Tajný klíč registrace aplikace Azure",
+    "idpAzureClientIdDescription2": "Azure App Registration Client ID",
+    "idpAzureClientSecretDescription2": "Azure App Registration Client Secret",
     "idpGoogleDescription": "Poskytovatel Google OAuth2/OIDC",
     "idpAzureDescription": "Microsoft Azure OAuth2/OIDC provider",
     "subnet": "Podsíť",
     "subnetDescription": "Podsíť pro konfiguraci sítě této organizace.",
     "authPage": "Auth stránka",
-    "authPageDescription": "Konfigurace autentizační stránky vaší organizace",
+    "authPageDescription": "Configure the auth page for the organization",
     "authPageDomain": "Doména ověření stránky",
     "noDomainSet": "Není nastavena žádná doména",
     "changeDomain": "Změnit doménu",
@@ -1778,7 +1817,7 @@
     "setAuthPageDomain": "Nastavit doménu autentické stránky",
     "failedToFetchCertificate": "Nepodařilo se načíst certifikát",
     "failedToRestartCertificate": "Restartování certifikátu se nezdařilo",
-    "addDomainToEnableCustomAuthPages": "Přidejte doménu pro povolení vlastních ověřovacích stránek pro vaši organizaci",
+    "addDomainToEnableCustomAuthPages": "Add a domain to enable custom authentication pages for the organization",
     "selectDomainForOrgAuthPage": "Vyberte doménu pro ověřovací stránku organizace",
     "domainPickerProvidedDomain": "Poskytnutá doména",
     "domainPickerFreeProvidedDomain": "Zdarma poskytnutá doména",
@@ -1793,7 +1832,7 @@
     "domainPickerInvalidSubdomainCannotMakeValid": "\"{sub}\" nemohl být platný pro {domain}.",
     "domainPickerSubdomainSanitized": "Upravená subdoména",
     "domainPickerSubdomainCorrected": "\"{sub}\" bylo opraveno na \"{sanitized}\"",
-    "orgAuthSignInTitle": "Přihlaste se do vaší organizace",
+    "orgAuthSignInTitle": "Sign in to the organization",
     "orgAuthChooseIdpDescription": "Chcete-li pokračovat, vyberte svého poskytovatele identity",
     "orgAuthNoIdpConfigured": "Tato organizace nemá nakonfigurovány žádné poskytovatele identity. Místo toho se můžete přihlásit s vaší Pangolinovou identitou.",
     "orgAuthSignInWithPangolin": "Přihlásit se pomocí Pangolinu",
@@ -1811,7 +1850,7 @@
     "enableTwoFactorAuthentication": "Povolit dvoufaktorové ověření",
     "completeSecuritySteps": "Dokončit bezpečnostní kroky",
     "securitySettings": "Nastavení zabezpečení",
-    "securitySettingsDescription": "Konfigurace bezpečnostních zásad pro vaši organizaci",
+    "securitySettingsDescription": "Configure security policies for the organization",
     "requireTwoFactorForAllUsers": "Vyžadovat dvoufaktorové ověření pro všechny uživatele",
     "requireTwoFactorDescription": "Pokud je povoleno, všichni interní uživatelé v této organizaci musí mít dvoufaktorové ověření povoleno pro přístup k organizaci.",
     "requireTwoFactorDisabledDescription": "Tato funkce vyžaduje platnou licenci (Enterprise) nebo aktivní předplatné (SaaS)",
@@ -1874,8 +1913,12 @@
     "enterpriseEdition": "Podniková edice",
     "unlicensed": "Nelicencováno",
     "beta": "Beta",
-    "manageClients": "Spravovat klienty",
-    "manageClientsDescription": "Klienti jsou zařízení, která se mohou připojit k vašim lokalitám",
+    "manageUserDevices": "User Devices",
+    "manageUserDevicesDescription": "View and manage devices that users use to privately connect to resources",
+    "manageMachineClients": "Manage Machine Clients",
+    "manageMachineClientsDescription": "Create and manage clients that servers and systems use to privately connect to resources",
+    "clientsTableUserClients": "User",
+    "clientsTableMachineClients": "Machine",
     "licenseTableValidUntil": "Platná do",
     "saasLicenseKeysSettingsTitle": "Podniková licence",
     "saasLicenseKeysSettingsDescription": "Vygenerovat a spravovat podnikové licence pro instance Pangolin na vlastním hostingu",
@@ -2075,7 +2118,7 @@
     "preferWildcardCert": "Preferovat Wildcard certifikát",
     "unverified": "Neověřeno",
     "domainSetting": "Nastavení domény",
-    "domainSettingDescription": "Konfigurace nastavení pro vaši doménu",
+    "domainSettingDescription": "Configure settings for the domain",
     "preferWildcardCertDescription": "Pokus o vygenerování zástupného certifikátu (vyžaduje správně nakonfigurovaný certifikát).",
     "recordName": "Název záznamu",
     "auto": "Automaticky",
@@ -2089,15 +2132,15 @@
     "olmUpdateAvailableInfo": "Je k dispozici aktualizovaná verze Olm. Pro nejlepší zážitek prosím aktualizujte na nejnovější verzi.",
     "client": "Zákazník",
     "proxyProtocol": "Nastavení proxy protokolu",
-    "proxyProtocolDescription": "Konfigurace Proxy protokolu pro zachování klientských IP adres pro služby TCP/UDP.",
+    "proxyProtocolDescription": "Configure Proxy Protocol to preserve client IP addresses for TCP services.",
     "enableProxyProtocol": "Povolit Proxy protokol",
-    "proxyProtocolInfo": "Zachovat IP adresy klienta pro TCP/UDP backends",
+    "proxyProtocolInfo": "Preserve client IP addresses for TCP backends",
     "proxyProtocolVersion": "Verze proxy protokolu",
     "version1": " Verze 1 (doporučeno)",
     "version2": "Verze 2",
     "versionDescription": "Verze 1 je textová a široce podporovaná. Verze 2 je binární a efektivnější, ale méně kompatibilní.",
     "warning": "Varování",
-    "proxyProtocolWarning": "Vaše backend aplikace musí být nakonfigurována, aby mohla být přijata spojení s Proxy protokolem. Pokud vaše backend nepodporuje Proxy protokol, povolením tohoto protokolu dojde k přerušení všech připojení. Ujistěte se, že nastavíte svou backend a důvěřujte hlavičkám Proxy protokolu z Traefik.",
+    "proxyProtocolWarning": "The backend application must be configured to accept Proxy Protocol connections. If your backend doesn't support Proxy Protocol, enabling this will break all connections so only enable this if you know what you're doing. Make sure to configure your backend to trust Proxy Protocol headers from Traefik.",
     "restarting": "Restartování...",
     "manual": "Ruční",
     "messageSupport": "Podpora zpráv",
@@ -2120,6 +2163,43 @@
     "supportMessageSent": "Zpráva odeslána!",
     "supportWillContact": "Brzy budeme v kontaktu!",
     "selectLogRetention": "Vyberte záznam",
+    "terms": "Terms",
+    "privacy": "Privacy",
+    "security": "Security",
+    "docs": "Docs",
+    "deviceActivation": "Device activation",
+    "deviceCodeInvalidFormat": "Code must be 9 characters (e.g., A1AJ-N5JD)",
+    "deviceCodeInvalidOrExpired": "Invalid or expired code",
+    "deviceCodeVerifyFailed": "Failed to verify device code",
+    "signedInAs": "Signed in as",
+    "deviceCodeEnterPrompt": "Enter the code displayed on the device",
+    "continue": "Continue",
+    "deviceUnknownLocation": "Unknown location",
+    "deviceAuthorizationRequested": "This authorization was requested from {location} on {date}. Make sure you trust this device as it will get access to the account.",
+    "deviceLabel": "Device: {deviceName}",
+    "deviceWantsAccess": "wants to access your account",
+    "deviceExistingAccess": "Existing access:",
+    "deviceFullAccess": "Full access to your account",
+    "deviceOrganizationsAccess": "Access to all organizations your account has access to",
+    "deviceAuthorize": "Authorize {applicationName}",
+    "deviceConnected": "Device Connected!",
+    "deviceAuthorizedMessage": "Device is authorized to access your account.",
+    "pangolinCloud": "Pangolin Cloud",
+    "viewDevices": "View Devices",
+    "viewDevicesDescription": "Manage your connected devices",
+    "noDevices": "No devices found",
+    "dateCreated": "Date Created",
+    "unnamedDevice": "Unnamed Device",
+    "deviceQuestionRemove": "Are you sure you want to delete this device?",
+    "deviceMessageRemove": "This action cannot be undone.",
+    "deviceDeleteConfirm": "Delete Device",
+    "deleteDevice": "Delete Device",
+    "errorLoadingDevices": "Error loading devices",
+    "failedToLoadDevices": "Failed to load devices",
+    "deviceDeleted": "Device deleted",
+    "deviceDeletedDescription": "The device has been successfully deleted.",
+    "errorDeletingDevice": "Error deleting device",
+    "failedToDeleteDevice": "Failed to delete device",
     "showColumns": "Zobrazit sloupce",
     "hideColumns": "Skrýt sloupce",
     "columnVisibility": "Viditelnost sloupců",
@@ -2134,6 +2214,10 @@
     "enableSelected": "Povolit vybrané",
     "disableSelected": "Zakázat vybrané",
     "checkSelectedStatus": "Zkontrolovat stav vybraného",
+    "clients": "Clients",
+    "accessClientSelect": "Select machine clients",
+    "resourceClientDescription": "Machine clients that can access this resource",
+    "regenerate": "Regenerate",
     "credentials": "Pověření",
     "savecredentials": "Uložit přihlašovací údaje",
     "regeneratecredentials": "Znovu klíče",
@@ -2151,7 +2235,6 @@
     "endpoint": "Endpoint",
     "Id": "Id",
     "SecretKey": "Tajný klíč",
-    "featureDisabledTooltip": "Tato funkce je dostupná pouze v podnikovém plánu a vyžaduje její používání.",
     "niceId": "Pěkné ID",
     "niceIdUpdated": "Nice ID aktualizováno",
     "niceIdUpdatedSuccessfully": "Nice ID úspěšně aktualizováno",
@@ -2160,5 +2243,15 @@
     "niceIdCannotBeEmpty": "Nice ID nemůže být prázdné",
     "enterIdentifier": "Zadejte identifikátor",
     "identifier": "Identifier",
-    "noData": "No Data"
+    "deviceLoginUseDifferentAccount": "Not you? Use a different account.",
+    "deviceLoginDeviceRequestingAccessToAccount": "A device is requesting access to this account.",
+    "noData": "No Data",
+    "machineClients": "Machine Clients",
+    "install": "Install",
+    "run": "Run",
+    "clientNameDescription": "The display name of the client that can be changed later.",
+    "clientAddress": "Client Address (Advanced)",
+    "setupFailedToFetchSubnet": "Failed to fetch default subnet",
+    "setupSubnetAdvanced": "Subnet (Advanced)",
+    "setupSubnetDescription": "The subnet for this organization's internal network."
 }

messages/de-DE.json

@@ -1,12 +1,12 @@
 {
-    "setupCreate": "Erstelle eine Organisation, einen Standort und Ressourcen",
+    "setupCreate": "Create the organization, site, and resources",
     "setupNewOrg": "Neue Organisation",
     "setupCreateOrg": "Organisation erstellen",
     "setupCreateResources": "Ressource erstellen",
     "setupOrgName": "Name der Organisation",
-    "orgDisplayName": "Anzeigename der Organisation.",
+    "orgDisplayName": "This is the display name of the organization.",
     "orgId": "Organisations-ID",
-    "setupIdentifierMessage": "Dies ist eine Eindeutige ID für Ihre Organisation. Diese ist unabhängig vom Anzeigenamen.",
+    "setupIdentifierMessage": "This is the unique identifier for the organization.",
     "setupErrorIdentifier": "Organisations-ID ist bereits vergeben. Bitte wähle eine andere.",
     "componentsErrorNoMemberCreate": "Du bist derzeit kein Mitglied einer Organisation. Erstelle eine Organisation, um zu starten.",
     "componentsErrorNoMember": "Du bist aktuell kein Mitglied einer Organisation.",
@@ -50,10 +50,10 @@
     "siteMessageRemove": "Sobald die Site entfernt ist, wird sie nicht mehr zugänglich sein. Alle mit der Site verbundenen Ziele werden ebenfalls entfernt.",
     "siteQuestionRemove": "Sind Sie sicher, dass Sie die Site aus der Organisation entfernen möchten?",
     "siteManageSites": "Standorte verwalten",
-    "siteDescription": "Verbindung zum Netzwerk durch sichere Tunnel erlauben",
+    "siteDescription": "Create and manage sites to enable connectivity to private networks",
     "siteCreate": "Standort erstellen",
     "siteCreateDescription2": "Folge den nachfolgenden Schritten, um einen neuen Standort zu erstellen und zu verbinden",
-    "siteCreateDescription": "Erstelle einen neuen Standort, um Ressourcen zu verbinden",
+    "siteCreateDescription": "Create a new site to start connecting resources",
     "close": "Schließen",
     "siteErrorCreate": "Fehler beim Erstellen des Standortes",
     "siteErrorCreateKeyPair": "Schlüsselpaar oder Standardwerte nicht gefunden",
@@ -74,7 +74,7 @@
     "siteInstallNewt": "Newt installieren",
     "siteInstallNewtDescription": "Installiere Newt auf deinem System.",
     "WgConfiguration": "WireGuard Konfiguration",
-    "WgConfigurationDescription": "Verwende folgende Konfiguration, um dich mit deinem Netzwerk zu verbinden",
+    "WgConfigurationDescription": "Use the following configuration to connect to the network",
     "operatingSystem": "Betriebssystem",
     "commands": "Befehle",
     "recommended": "Empfohlen",
@@ -87,32 +87,32 @@
     "siteUpdated": "Standort aktualisiert",
     "siteUpdatedDescription": "Der Standort wurde aktualisiert.",
     "siteGeneralDescription": "Allgemeine Einstellungen für diesen Standort konfigurieren",
-    "siteSettingDescription": "Konfigurieren der Standort Einstellungen",
+    "siteSettingDescription": "Configure the settings on the site",
     "siteSetting": "{siteName} Einstellungen",
-    "siteNewtTunnel": "Newt-Tunnel (empfohlen)",
-    "siteNewtTunnelDescription": "Einfachster Weg, einen Zugriffspunkt zu deinem Netzwerk zu erstellen. Keine zusätzliche Einrichtung erforderlich.",
+    "siteNewtTunnel": "Newt Site (Recommended)",
+    "siteNewtTunnelDescription": "Easiest way to create an entrypoint into any network. No extra setup.",
     "siteWg": "Einfacher WireGuard Tunnel",
     "siteWgDescription": "Verwende jeden WireGuard-Client, um einen Tunnel einzurichten. Manuelles NAT-Setup erforderlich.",
     "siteWgDescriptionSaas": "Verwenden Sie jeden WireGuard-Client, um einen Tunnel zu erstellen. Manuelles NAT-Setup erforderlich. FUNKTIONIERT NUR BEI SELBSTGEHOSTETEN KNOTEN",
     "siteLocalDescription": "Nur lokale Ressourcen. Kein Tunneling.",
     "siteLocalDescriptionSaas": "Nur lokale Ressourcen. Kein Tunneling. Nur für entfernte Knoten verfügbar.",
     "siteSeeAll": "Alle Standorte anzeigen",
-    "siteTunnelDescription": "Lege fest, wie du dich mit deinem Standort verbinden möchtest",
-    "siteNewtCredentials": "Neue Newt Zugangsdaten",
-    "siteNewtCredentialsDescription": "So wird sich Newt mit dem Server authentifizieren",
-    "siteCredentialsSave": "Ihre Zugangsdaten speichern",
+    "siteTunnelDescription": "Determine how you want to connect to the site",
+    "siteNewtCredentials": "Credentials",
+    "siteNewtCredentialsDescription": "This is how the site will authenticate with the server",
+    "siteCredentialsSave": "Save the Credentials",
     "siteCredentialsSaveDescription": "Du kannst das nur einmal sehen. Stelle sicher, dass du es an einen sicheren Ort kopierst.",
     "siteInfo": "Standort-Informationen",
     "status": "Status",
     "shareTitle": "Links zum Teilen verwalten",
-    "shareDescription": "Erstellen Sie teilbare Links, um temporären oder permanenten Zugriff auf Ihre Ressourcen zu gewähren",
+    "shareDescription": "Create shareable links to grant temporary or permanent access to proxy resources",
     "shareSearch": "Freigabe-Links suchen...",
     "shareCreate": "Link erstellen",
     "shareErrorDelete": "Link konnte nicht gelöscht werden",
     "shareErrorDeleteMessage": "Fehler beim Löschen des Links",
     "shareDeleted": "Link gelöscht",
     "shareDeletedDescription": "Der Link wurde gelöscht",
-    "shareTokenDescription": "Ihr Zugriffstoken kann auf zwei Arten übergeben werden: als Abfrageparameter oder in den Anfrage-Headern. Diese müssen vom Client auf jeder Anfrage für authentifizierten Zugriff weitergegeben werden.",
+    "shareTokenDescription": "The access token can be passed in two ways: as a query parameter or in the request headers. These must be passed from the client on every request for authenticated access.",
     "accessToken": "Zugangs-Token",
     "usageExamples": "Nutzungsbeispiele",
     "tokenId": "Token-ID",
@@ -121,7 +121,7 @@
     "importantNote": "Wichtiger Hinweis",
     "shareImportantDescription": "Aus Sicherheitsgründen wird die Verwendung von Headern über Abfrageparameter empfohlen, wenn möglich, da Abfrageparameter in Server-Logs oder Browserverlauf protokolliert werden können.",
     "token": "Token",
-    "shareTokenSecurety": "Halten Sie Ihr Zugangs-Token sicher. Teilen Sie es nicht in öffentlich zugänglichen Bereichen oder Client-seitigem Code.",
+    "shareTokenSecurety": "Keep the access token secure. Do not share it in publicly accessible areas or client-side code.",
     "shareErrorFetchResource": "Fehler beim Abrufen der Ressourcen",
     "shareErrorFetchResourceDescription": "Beim Abrufen der Ressourcen ist ein Fehler aufgetreten",
     "shareErrorCreate": "Fehler beim Erstellen des Teilen-Links",
@@ -144,8 +144,10 @@
     "expires": "Gültig bis",
     "never": "Nie",
     "shareErrorSelectResource": "Bitte wählen Sie eine Ressource",
-    "resourceTitle": "Ressourcen verwalten",
-    "resourceDescription": "Erstellen Sie sichere Proxies für Ihre privaten Anwendungen",
+    "proxyResourceTitle": "Manage Public Resources",
+    "proxyResourceDescription": "Create and manage resources that are publicly accessible through a web browser",
+    "clientResourceTitle": "Manage Private Resources",
+    "clientResourceDescription": "Create and manage resources that are only accessible through a connected client",
     "resourcesSearch": "Suche Ressourcen...",
     "resourceAdd": "Ressource hinzufügen",
     "resourceErrorDelte": "Fehler beim Löschen der Ressource",
@@ -155,9 +157,9 @@
     "resourceMessageRemove": "Einmal entfernt, wird die Ressource nicht mehr zugänglich sein. Alle mit der Ressource verbundenen Ziele werden ebenfalls entfernt.",
     "resourceQuestionRemove": "Sind Sie sicher, dass Sie die Ressource aus der Organisation entfernen möchten?",
     "resourceHTTP": "HTTPS-Ressource",
-    "resourceHTTPDescription": "Proxy-Anfragen an Ihre App über HTTPS unter Verwendung einer Subdomain oder einer Basis-Domain.",
+    "resourceHTTPDescription": "Proxy requests to the app over HTTPS using a subdomain or base domain.",
     "resourceRaw": "Direkte TCP/UDP Ressource (raw)",
-    "resourceRawDescription": "Proxy-Anfragen an Ihre App über TCP/UDP mit einer Portnummer.",
+    "resourceRawDescription": "Proxy requests to the app over TCP/UDP using a port number. This only works when sites are connected to nodes.",
     "resourceCreate": "Ressource erstellen",
     "resourceCreateDescription": "Folgen Sie den Schritten unten, um eine neue Ressource zu erstellen",
     "resourceSeeAll": "Alle Ressourcen anzeigen",
@@ -171,22 +173,22 @@
     "noCountryFound": "Kein Land gefunden.",
     "siteSelectionDescription": "Dieser Standort wird die Verbindung zum Ziel herstellen.",
     "resourceType": "Ressourcentyp",
-    "resourceTypeDescription": "Legen Sie fest, wie Sie auf Ihre Ressource zugreifen möchten",
+    "resourceTypeDescription": "Determine how to access the resource",
     "resourceHTTPSSettings": "HTTPS-Einstellungen",
-    "resourceHTTPSSettingsDescription": "Konfigurieren Sie den Zugriff auf Ihre Ressource über HTTPS",
+    "resourceHTTPSSettingsDescription": "Configure how the resource will be accessed over HTTPS",
     "domainType": "Domain-Typ",
     "subdomain": "Subdomain",
     "baseDomain": "Basis-Domain",
-    "subdomnainDescription": "Die Subdomain, auf der Ihre Ressource erreichbar sein soll.",
+    "subdomnainDescription": "The subdomain where the resource will be accessible.",
     "resourceRawSettings": "TCP/UDP Einstellungen",
-    "resourceRawSettingsDescription": "Legen Sie fest, wie auf Ihre Ressource über TCP/UDP zugegriffen wird. Sie ordnen die Ressource einem Port auf dem Pangolin-Server zu, so dass Sie auf die Ressource von server-public-ip:mapped-port zugreifen können.",
+    "resourceRawSettingsDescription": "Configure how the resource will be accessed over TCP/UDP. You map the resource to a port on the host Pangolin server, so you can access the resource from server-public-ip:mapped-port.",
     "protocol": "Protokoll",
     "protocolSelect": "Wählen Sie ein Protokoll",
     "resourcePortNumber": "Portnummer",
     "resourcePortNumberDescription": "Die externe Portnummer für Proxy-Anfragen.",
     "cancel": "Abbrechen",
     "resourceConfig": "Konfiguration Snippets",
-    "resourceConfigDescription": "Kopieren und fügen Sie diese Konfigurations-Snippets ein, um Ihre TCP/UDP Ressource einzurichten",
+    "resourceConfigDescription": "Copy and paste these configuration snippets to set up the TCP/UDP resource",
     "resourceAddEntrypoints": "Traefik: Einstiegspunkte hinzufügen",
     "resourceExposePorts": "Gerbil: Ports im Docker Compose freigeben",
     "resourceLearnRaw": "Lernen Sie, wie Sie TCP/UDP Ressourcen konfigurieren",
@@ -202,14 +204,14 @@
     "proxy": "Proxy",
     "internal": "Intern",
     "rules": "Regeln",
-    "resourceSettingDescription": "Konfigurieren Sie die Einstellungen Ihrer Ressource",
+    "resourceSettingDescription": "Configure the settings on the resource",
     "resourceSetting": "{resourceName} Einstellungen",
-    "alwaysAllow": "Immer erlauben",
-    "alwaysDeny": "Immer ablehnen",
+    "alwaysAllow": "Bypass Auth",
+    "alwaysDeny": "Block Access",
     "passToAuth": "Weiterleiten zur Authentifizierung",
-    "orgSettingsDescription": "Konfiguriere die allgemeinen Einstellungen deiner Organisation",
+    "orgSettingsDescription": "Configure the organization's settings",
     "orgGeneralSettings": "Organisations-Einstellungen",
-    "orgGeneralSettingsDescription": "Organisationsdetails und Konfiguration verwalten",
+    "orgGeneralSettingsDescription": "Manage the organization's details and configuration",
     "saveGeneralSettings": "Allgemeine Einstellungen speichern",
     "saveSettings": "Einstellungen speichern",
     "orgDangerZone": "Gefahrenzone",
@@ -232,7 +234,7 @@
     "orgMissing": "Organisations-ID fehlt",
     "orgMissingMessage": "Einladung kann ohne Organisations-ID nicht neu generiert werden.",
     "accessUsersManage": "Benutzer verwalten",
-    "accessUsersDescription": "Lade Benutzer ein und füge sie zu Rollen hinzu, um den Zugriff auf deine Organisation zu verwalten",
+    "accessUsersDescription": "Invite and manage users with access to this organization",
     "accessUsersSearch": "Benutzer suchen...",
     "accessUserCreate": "Benutzer erstellen",
     "accessUserRemove": "Benutzer entfernen",
@@ -241,13 +243,13 @@
     "role": "Rolle",
     "nameRequired": "Name ist erforderlich",
     "accessRolesManage": "Rollen verwalten",
-    "accessRolesDescription": "Konfigurieren Sie Rollen, um den Zugriff auf Ihre Organisation zu verwalten",
+    "accessRolesDescription": "Create and manage roles for users in the organization",
     "accessRolesSearch": "Rollen suchen...",
     "accessRolesAdd": "Rolle hinzufügen",
     "accessRoleDelete": "Rolle löschen",
     "description": "Beschreibung",
     "inviteTitle": "Einladungen öffnen",
-    "inviteDescription": "Ihre Einladungen an andere Benutzer verwalten",
+    "inviteDescription": "Manage invitations for other users to join the organization",
     "inviteSearch": "Einladungen suchen...",
     "minutes": "Minuten",
     "hours": "Stunden",
@@ -261,13 +263,13 @@
     "apiKeysErrorCreate": "Fehler beim Erstellen des API-Schlüssels",
     "apiKeysErrorSetPermission": "Fehler beim Setzen der Berechtigungen",
     "apiKeysCreate": "API-Schlüssel generieren",
-    "apiKeysCreateDescription": "Generieren Sie einen neuen API-Schlüssel für Ihre Organisation",
+    "apiKeysCreateDescription": "Generate a new API key for the organization",
     "apiKeysGeneralSettings": "Berechtigungen",
     "apiKeysGeneralSettingsDescription": "Legen Sie fest, was dieser API-Schlüssel tun kann",
-    "apiKeysList": "Ihr API-Schlüssel",
-    "apiKeysSave": "Speichern Sie Ihren API-Schlüssel",
+    "apiKeysList": "New API Key",
+    "apiKeysSave": "Save the API Key",
     "apiKeysSaveDescription": "Sie können dies nur einmal sehen. Kopieren Sie es an einen sicheren Ort.",
-    "apiKeysInfo": "Ihr API-Schlüssel ist:",
+    "apiKeysInfo": "The API key is:",
     "apiKeysConfirmCopy": "Ich habe den API-Schlüssel kopiert",
     "generate": "Generieren",
     "done": "Fertig",
@@ -424,7 +426,7 @@
     "userCreated": "Benutzer erstellt",
     "userCreatedDescription": "Der Benutzer wurde erfolgreich erstellt.",
     "userTypeInternal": "Interner Benutzer",
-    "userTypeInternalDescription": "Laden Sie einen Benutzer direkt in Ihre Organisation ein.",
+    "userTypeInternalDescription": "Invite a user to join the organization directly.",
     "userTypeExternal": "Externer Benutzer",
     "userTypeExternalDescription": "Erstellen Sie einen Benutzer mit einem externen Identitätsanbieter.",
     "accessUserCreateDescription": "Folgen Sie den Schritten unten, um einen neuen Benutzer zu erstellen",
@@ -468,13 +470,13 @@
     "accessControlsSubmit": "Zugriffskontrollen speichern",
     "roles": "Rollen",
     "accessUsersRoles": "Benutzer & Rollen verwalten",
-    "accessUsersRolesDescription": "Laden Sie Benutzer ein und fügen Sie sie zu Rollen hinzu, um den Zugriff auf Ihre Organisation zu verwalten",
+    "accessUsersRolesDescription": "Invite users and add them to roles to manage access to the organization",
     "key": "Schlüssel",
     "createdAt": "Erstellt am",
     "proxyErrorInvalidHeader": "Ungültiger benutzerdefinierter Host-Header-Wert. Verwenden Sie das Domain-Namensformat oder speichern Sie leer, um den benutzerdefinierten Host-Header zu deaktivieren.",
     "proxyErrorTls": "Ungültiger TLS-Servername. Verwenden Sie das Domain-Namensformat oder speichern Sie leer, um den TLS-Servernamen zu entfernen.",
     "proxyEnableSSL": "SSL aktivieren",
-    "proxyEnableSSLDescription": "Aktiviere SSL/TLS-Verschlüsselung für sichere HTTPS-Verbindungen zu deinen Zielen.",
+    "proxyEnableSSLDescription": "Enable SSL/TLS encryption for secure HTTPS connections to the targets.",
     "target": "Target",
     "configureTarget": "Ziele konfigurieren",
     "targetErrorFetch": "Fehler beim Abrufen der Ziele",
@@ -490,29 +492,29 @@
     "targetsErrorUpdate": "Fehler beim Aktualisieren der Ziele",
     "targetsErrorUpdateDescription": "Beim Aktualisieren der Ziele ist ein Fehler aufgetreten",
     "targetTlsUpdate": "TLS-Einstellungen aktualisiert",
-    "targetTlsUpdateDescription": "Ihre TLS-Einstellungen wurden erfolgreich aktualisiert",
+    "targetTlsUpdateDescription": "TLS settings have been updated successfully",
     "targetErrorTlsUpdate": "Fehler beim Aktualisieren der TLS-Einstellungen",
     "targetErrorTlsUpdateDescription": "Beim Aktualisieren der TLS-Einstellungen ist ein Fehler aufgetreten",
     "proxyUpdated": "Proxy-Einstellungen aktualisiert",
-    "proxyUpdatedDescription": "Ihre Proxy-Einstellungen wurden erfolgreich aktualisiert",
+    "proxyUpdatedDescription": "Proxy settings have been updated successfully",
     "proxyErrorUpdate": "Fehler beim Aktualisieren der Proxy-Einstellungen",
     "proxyErrorUpdateDescription": "Beim Aktualisieren der Proxy-Einstellungen ist ein Fehler aufgetreten",
     "targetAddr": "IP / Hostname",
     "targetPort": "Port",
     "targetProtocol": "Protokoll",
     "targetTlsSettings": "Sicherheitskonfiguration",
-    "targetTlsSettingsDescription": "Konfiguriere SSL/TLS Einstellungen für deine Ressource",
+    "targetTlsSettingsDescription": "Configure SSL/TLS settings for the resource",
     "targetTlsSettingsAdvanced": "Erweiterte TLS-Einstellungen",
     "targetTlsSni": "TLS Servername",
     "targetTlsSniDescription": "Der zu verwendende TLS-Servername für SNI. Leer lassen, um den Standard zu verwenden.",
     "targetTlsSubmit": "Einstellungen speichern",
     "targets": "Ziel-Konfiguration",
-    "targetsDescription": "Richten Sie Ziele ein, um Datenverkehr zu Ihren Backend-Diensten zu leiten",
+    "targetsDescription": "Set up targets to route traffic to backend services",
     "targetStickySessions": "Sticky Sessions aktivieren",
     "targetStickySessionsDescription": "Verbindungen für die gesamte Sitzung auf demselben Backend-Ziel halten.",
     "methodSelect": "Methode auswählen",
     "targetSubmit": "Ziel hinzufügen",
-    "targetNoOne": "Diese Ressource hat keine Ziele. Fügen Sie ein Ziel hinzu, um zu konfigurieren, wo Anfragen an Ihr Backend gesendet werden sollen.",
+    "targetNoOne": "This resource doesn't have any targets. Add a target to configure where to send requests to the backend.",
     "targetNoOneDescription": "Das Hinzufügen von mehr als einem Ziel aktiviert den Lastausgleich.",
     "targetsSubmit": "Ziele speichern",
     "addTarget": "Ziel hinzufügen",
@@ -530,7 +532,7 @@
     "tlsServerNameDescription": "The TLS server name to use for SNI",
     "save": "Speichern",
     "proxyAdditional": "Zusätzliche Proxy-Einstellungen",
-    "proxyAdditionalDescription": "Konfigurieren Sie, wie Ihre Ressource mit Proxy-Einstellungen umgeht",
+    "proxyAdditionalDescription": "Configure how the resource handles proxy settings",
     "proxyCustomHeader": "Benutzerdefinierter Host-Header",
     "proxyCustomHeaderDescription": "Der Host-Header, der beim Weiterleiten von Anfragen gesetzt werden soll. Leer lassen, um den Standard zu verwenden.",
     "proxyAdditionalSubmit": "Proxy-Einstellungen speichern",
@@ -570,7 +572,7 @@
     "rulesMatchType": "Übereinstimmungstyp",
     "value": "Wert",
     "rulesAbout": "Über Regeln",
-    "rulesAboutDescription": "Mit Regeln können Sie den Zugriff auf Ihre Ressource anhand verschiedener Kriterien steuern. Sie können Regeln erstellen, um den Zugriff basierend auf IP-Adresse oder URL-Pfad zu erlauben oder zu verweigern.",
+    "rulesAboutDescription": "Rules allow you to control access to the resource based on a set of criteria. You can create rules to allow or deny access based on IP address or URL path.",
     "rulesActions": "Aktionen",
     "rulesActionAlwaysAllow": "Immer erlauben: Alle Authentifizierungsmethoden umgehen",
     "rulesActionAlwaysDeny": "Immer verweigern: Alle Anfragen blockieren; keine Authentifizierung möglich",
@@ -582,7 +584,7 @@
     "rulesEnable": "Regeln aktivieren",
     "rulesEnableDescription": "Regelauswertung für diese Ressource aktivieren oder deaktivieren",
     "rulesResource": "Ressourcen-Regelkonfiguration",
-    "rulesResourceDescription": "Konfigurieren Sie Regeln zur Steuerung des Zugriffs auf Ihre Ressource",
+    "rulesResourceDescription": "Configure rules to control access to the resource",
     "ruleSubmit": "Regel hinzufügen",
     "rulesNoOne": "Keine Regeln. Fügen Sie eine Regel über das Formular hinzu.",
     "rulesOrder": "Regeln werden nach aufsteigender Priorität ausgewertet.",
@@ -598,7 +600,7 @@
     "none": "Keine",
     "unknown": "Unbekannt",
     "resources": "Ressourcen",
-    "resourcesDescription": "Ressourcen sind Proxies zu Anwendungen in Ihrem privaten Netzwerk. Erstellen Sie eine Ressource für jeden HTTP/HTTPS- oder direkten TCP/UDP-Dienst in Ihrem privaten Netzwerk. Jede Ressource muss mit einer Site verbunden sein, um private, sichere Konnektivität über einen verschlüsselten WireGuard-Tunnel zu ermöglichen.",
+    "resourcesDescription": "Resources are proxies to applications running on the private network. Create a resource for any HTTP/HTTPS or raw TCP/UDP service on your private network. Each resource must be connected to a site to enable private, secure connectivity through an encrypted WireGuard tunnel.",
     "resourcesWireGuardConnect": "Sichere Verbindung mit WireGuard-Verschlüsselung",
     "resourcesMultipleAuthenticationMethods": "Mehrere Authentifizierungsmethoden konfigurieren",
     "resourcesUsersRolesAccess": "Benutzer- und rollenbasierte Zugriffskontrolle",
@@ -609,7 +611,7 @@
     "resourceSelect": "Ressource auswählen",
     "shareLinks": "Freigabe-Links",
     "share": "Teilbare Links",
-    "shareDescription2": "Erstellen Sie teilbare Links zu Ihren Ressourcen. Links bieten temporären oder unbegrenzten Zugriff auf Ihre Ressource. Sie können die Ablaufzeit des Links bei der Erstellung konfigurieren.",
+    "shareDescription2": "Create shareable links to resources. Links provide temporary or unlimited access to your resource. You can configure the expiration duration of the link when you create one.",
     "shareEasyCreate": "Einfach zu erstellen und zu teilen",
     "shareConfigurableExpirationDuration": "Konfigurierbare Ablaufzeit",
     "shareSecureAndRevocable": "Sicher und widerrufbar",
@@ -619,19 +621,19 @@
     "unknownCommand": "Unbekannter Befehl",
     "newtErrorFetchReleases": "Fehler beim Abrufen der Release-Informationen: {err}",
     "newtErrorFetchLatest": "Fehler beim Abrufen der neuesten Version: {err}",
-    "newtEndpoint": "Newt-Endpunkt",
-    "newtId": "Newt-ID",
-    "newtSecretKey": "Newt-Geheimschlüssel",
+    "newtEndpoint": "Endpoint",
+    "newtId": "ID",
+    "newtSecretKey": "Secret",
     "architecture": "Architektur",
     "sites": "Standorte",
-    "siteWgAnyClients": "Verwenden Sie einen beliebigen WireGuard-Client zur Verbindung. Sie müssen Ihre internen Ressourcen über die Peer-IP adressieren.",
+    "siteWgAnyClients": "Use any WireGuard client to connect. You will have to address internal resources using the peer IP.",
     "siteWgCompatibleAllClients": "Kompatibel mit allen WireGuard-Clients",
     "siteWgManualConfigurationRequired": "Manuelle Konfiguration erforderlich",
     "userErrorNotAdminOrOwner": "Benutzer ist kein Administrator oder Eigentümer",
     "pangolinSettings": "Einstellungen - Pangolin",
     "accessRoleYour": "Ihre Rolle:",
-    "accessRoleSelect2": "Wähle eine Rolle",
-    "accessUserSelect": "Wähle einen Benutzer",
+    "accessRoleSelect2": "Select roles",
+    "accessUserSelect": "Select users",
     "otpEmailEnter": "E-Mail-Adresse eingeben",
     "otpEmailEnterDescription": "Drücken Sie Enter, um eine E-Mail nach der Eingabe im Eingabefeld hinzuzufügen.",
     "otpEmailErrorInvalid": "Ungültige E-Mail-Adresse. Platzhalter (*) muss der gesamte lokale Teil sein.",
@@ -683,7 +685,7 @@
     "resourcePincodeSetupTitle": "PIN-Code festlegen",
     "resourcePincodeSetupTitleDescription": "Legen Sie einen PIN-Code fest, um diese Ressource zu schützen",
     "resourceRoleDescription": "Administratoren haben immer Zugriff auf diese Ressource.",
-    "resourceUsersRoles": "Benutzer & Rollen",
+    "resourceUsersRoles": "Access Controls",
     "resourceUsersRolesDescription": "Konfigurieren Sie, welche Benutzer und Rollen diese Ressource besuchen können",
     "resourceUsersRolesSubmit": "Benutzer & Rollen speichern",
     "resourceWhitelistSave": "Erfolgreich gespeichert",
@@ -779,15 +781,15 @@
     "idpOidcConfigure": "OAuth2/OIDC Konfiguration",
     "idpOidcConfigureDescription": "Konfigurieren Sie die OAuth2/OIDC Anbieter-Endpunkte und Anmeldeinformationen",
     "idpClientId": "Client-ID",
-    "idpClientIdDescription": "Die OAuth2 Client-ID von Ihrem Identitätsanbieter",
+    "idpClientIdDescription": "The OAuth2 client ID from the identity provider",
     "idpClientSecret": "Client-Secret",
-    "idpClientSecretDescription": "Das OAuth2 Client-Secret von Ihrem Identitätsanbieter",
+    "idpClientSecretDescription": "The OAuth2 client secret from the identity provider",
     "idpAuthUrl": "Autorisierungs-URL",
     "idpAuthUrlDescription": "Die OAuth2 Autorisierungs-Endpunkt-URL",
     "idpTokenUrl": "Token-URL",
     "idpTokenUrlDescription": "Die OAuth2 Token-Endpunkt-URL",
     "idpOidcConfigureAlert": "Wichtige Information",
-    "idpOidcConfigureAlertDescription": "Nach dem Erstellen des Identitätsanbieters müssen Sie die Callback-URL in den Einstellungen Ihres Identitätsanbieters konfigurieren. Die Callback-URL wird nach erfolgreicher Erstellung bereitgestellt.",
+    "idpOidcConfigureAlertDescription": "After creating the identity provider, you will need to configure the callback URL in the identity provider's settings. The callback URL will be provided after successful creation.",
     "idpToken": "Token-Konfiguration",
     "idpTokenDescription": "Konfigurieren Sie, wie Benutzerinformationen aus dem ID-Token extrahiert werden",
     "idpJmespathAbout": "Über JMESPath",
@@ -804,7 +806,7 @@
     "idpSubmit": "Identitätsanbieter erstellen",
     "orgPolicies": "Organisationsrichtlinien",
     "idpSettings": "{idpName} Einstellungen",
-    "idpCreateSettingsDescription": "Konfigurieren Sie die Einstellungen für Ihren Identitätsanbieter",
+    "idpCreateSettingsDescription": "Configure the settings for the identity provider",
     "roleMapping": "Rollenzuordnung",
     "orgMapping": "Organisationszuordnung",
     "orgPoliciesSearch": "Organisationsrichtlinien suchen...",
@@ -839,7 +841,7 @@
     "idpUpdatedDescription": "Identitätsanbieter erfolgreich aktualisiert",
     "redirectUrl": "Weiterleitungs-URL",
     "redirectUrlAbout": "Über die Weiterleitungs-URL",
-    "redirectUrlAboutDescription": "Dies ist die URL, zu der Benutzer nach der Authentifizierung weitergeleitet werden. Sie müssen diese URL in den Einstellungen Ihres Identitätsanbieters konfigurieren.",
+    "redirectUrlAboutDescription": "This is the URL to which users will be redirected after authentication. You need to configure this URL in the identity provider's settings.",
     "pangolinAuth": "Authentifizierung - Pangolin",
     "verificationCodeLengthRequirements": "Ihr Verifizierungscode muss 8 Zeichen lang sein.",
     "errorOccurred": "Ein Fehler ist aufgetreten",
@@ -922,6 +924,10 @@
     "passwordResetSent": "Wir senden einen Code zum Zurücksetzen des Passworts an diese E-Mail-Adresse.",
     "passwordResetCode": "Reset-Code",
     "passwordResetCodeDescription": "Prüfen Sie Ihre E-Mail für den Reset-Code.",
+    "generatePasswordResetCode": "Generate Password Reset Code",
+    "passwordResetCodeGenerated": "Password Reset Code Generated",
+    "passwordResetCodeGeneratedDescription": "Share this code with the user. They can use it to reset their password.",
+    "passwordResetUrl": "Reset URL",
     "passwordNew": "Neues Passwort",
     "passwordNewConfirm": "Neues Passwort bestätigen",
     "changePassword": "Passwort ändern",
@@ -939,6 +945,9 @@
     "pincodeAuth": "Authentifizierungscode",
     "pincodeSubmit2": "Code absenden",
     "passwordResetSubmit": "Zurücksetzung anfordern",
+    "passwordResetAlreadyHaveCode": "Enter Password Reset Code",
+    "passwordResetSmtpRequired": "Please contact your administrator",
+    "passwordResetSmtpRequiredDescription": "A password reset code is required to reset your password. Please contact your administrator for assistance.",
     "passwordBack": "Zurück zum Passwort",
     "loginBack": "Zurück zur Anmeldung",
     "signup": "Registrieren",
@@ -1104,12 +1113,15 @@
     "actionListSiteResources": "Site-Ressourcen auflisten",
     "actionUpdateSiteResource": "Site-Ressource aktualisieren",
     "actionListInvitations": "Einladungen auflisten",
+    "actionExportLogs": "Export Logs",
+    "actionViewLogs": "View Logs",
     "noneSelected": "Keine ausgewählt",
     "orgNotFound2": "Keine Organisationen gefunden.",
     "searchProgress": "Suche...",
     "create": "Erstellen",
     "orgs": "Organisationen",
     "loginError": "Beim Anmelden ist ein Fehler aufgetreten",
+    "loginRequiredForDevice": "Login is required to authenticate your device.",
     "passwordForgot": "Passwort vergessen?",
     "otpAuth": "Zwei-Faktor-Authentifizierung",
     "otpAuthDescription": "Geben Sie den Code aus Ihrer Authenticator-App oder einen Ihrer einmaligen Backup-Codes ein.",
@@ -1164,23 +1176,29 @@
     "sidebarHome": "Zuhause",
     "sidebarSites": "Standorte",
     "sidebarResources": "Ressourcen",
+    "sidebarProxyResources": "Public",
+    "sidebarClientResources": "Private",
     "sidebarAccessControl": "Zugriffskontrolle",
+    "sidebarLogsAndAnalytics": "Logs & Analytics",
     "sidebarUsers": "Benutzer",
+    "sidebarAdmin": "Admin",
     "sidebarInvitations": "Einladungen",
     "sidebarRoles": "Rollen",
-    "sidebarShareableLinks": "Teilbare Links",
+    "sidebarShareableLinks": "Links",
     "sidebarApiKeys": "API-Schlüssel",
     "sidebarSettings": "Einstellungen",
     "sidebarAllUsers": "Alle Benutzer",
     "sidebarIdentityProviders": "Identitätsanbieter",
     "sidebarLicense": "Lizenz",
     "sidebarClients": "Clients",
+    "sidebarUserDevices": "Users",
+    "sidebarMachineClients": "Machines",
     "sidebarDomains": "Domänen",
     "sidebarGeneral": "General",
     "sidebarLogAndAnalytics": "Log & Analytics",
     "sidebarBluePrints": "Baupläne",
     "sidebarOrganization": "Organization",
-    "sidebarLogsAnalytics": "Request Analytics",
+    "sidebarLogsAnalytics": "Analytics",
     "blueprints": "Baupläne",
     "blueprintsDescription": "Deklarative Konfigurationen anwenden und vorherige Abläufe anzeigen",
     "blueprintAdd": "Blaupause hinzufügen",
@@ -1191,7 +1209,7 @@
     "blueprintDetailsDescription": "Siehe das Ergebnis der angewendeten Blaupause und alle aufgetretenen Fehler",
     "blueprintInfo": "Blaupauseninformation",
     "message": "Nachricht",
-    "blueprintContentsDescription": "Definieren Sie den YAML-Inhalt, der Ihre Infrastruktur beschreibt",
+    "blueprintContentsDescription": "Define the YAML content describing the infrastructure",
     "blueprintErrorCreateDescription": "Fehler beim Anwenden der Blaupause",
     "blueprintErrorCreate": "Fehler beim Erstellen der Blaupause",
     "searchBlueprintProgress": "Blaupausen suchen...",
@@ -1247,15 +1265,15 @@
     "loading": "Laden",
     "restart": "Neustart",
     "domains": "Domänen",
-    "domainsDescription": "Domains für Ihre Organisation verwalten",
+    "domainsDescription": "Create and manage domains available in the organization",
     "domainsSearch": "Domains durchsuchen...",
     "domainAdd": "Domain hinzufügen",
-    "domainAddDescription": "Eine neue Domain in Ihrer Organisation registrieren",
+    "domainAddDescription": "Register a new domain with to the organization",
     "domainCreate": "Domain erstellen",
     "domainCreatedDescription": "Domain erfolgreich erstellt",
     "domainDeletedDescription": "Domain erfolgreich gelöscht",
-    "domainQuestionRemove": "Sind Sie sicher, dass Sie die Domain von Ihrem Konto entfernen möchten?",
-    "domainMessageRemove": "Nach dem Entfernen wird die Domain nicht mehr mit Ihrem Konto verknüpft.",
+    "domainQuestionRemove": "Are you sure you want to remove the domain?",
+    "domainMessageRemove": "Once removed, the domain will no longer be associated with the organization.",
     "domainConfirmDelete": "Domain-Löschung bestätigen",
     "domainDelete": "Domain löschen",
     "domain": "Domäne",
@@ -1274,7 +1292,7 @@
     "pending": "Ausstehend",
     "sidebarBilling": "Abrechnung",
     "billing": "Abrechnung",
-    "orgBillingDescription": "Verwalten Sie Ihre Rechnungsinformationen und Abonnements",
+    "orgBillingDescription": "Manage billing information and subscriptions",
     "github": "GitHub",
     "pangolinHosted": "Pangolin Hosted",
     "fossorial": "Fossorial",
@@ -1317,7 +1335,7 @@
     "domainPickerSortAsc": "A-Z",
     "domainPickerSortDesc": "Z-A",
     "domainPickerCheckingAvailability": "Verfügbarkeit prüfen...",
-    "domainPickerNoMatchingDomains": "Keine passenden Domains gefunden. Versuchen Sie es mit einer anderen Domain oder überprüfen Sie die Domain-Einstellungen Ihrer Organisation.",
+    "domainPickerNoMatchingDomains": "No matching domains found. Try a different domain or check the organization's domain settings.",
     "domainPickerOrganizationDomains": "Organisations-Domains",
     "domainPickerProvidedDomains": "Bereitgestellte Domains",
     "domainPickerSubdomain": "Subdomain: {subdomain}",
@@ -1351,7 +1369,7 @@
     "billingModifySubscription": "Abonnement ändern",
     "billingStartSubscription": "Abonnement starten",
     "billingRecurringCharge": "Wiederkehrende Kosten",
-    "billingManageSubscriptionSettings": "Verwalten Sie Ihre Abonnement-Einstellungen und Präferenzen",
+    "billingManageSubscriptionSettings": "Manage subscription settings and preferences",
     "billingNoActiveSubscription": "Sie haben kein aktives Abonnement. Starten Sie Ihr Abonnement, um Nutzungslimits zu erhöhen.",
     "billingFailedToLoadSubscription": "Fehler beim Laden des Abonnements",
     "billingFailedToLoadUsage": "Fehler beim Laden der Nutzung",
@@ -1362,9 +1380,9 @@
     "billingPortalError": "Portalfehler",
     "billingDataUsageInfo": "Wenn Sie mit der Cloud verbunden sind, werden alle Daten über Ihre sicheren Tunnel belastet. Dies schließt eingehenden und ausgehenden Datenverkehr über alle Ihre Websites ein. Wenn Sie Ihr Limit erreichen, werden Ihre Seiten die Verbindung trennen, bis Sie Ihr Paket upgraden oder die Nutzung verringern. Daten werden nicht belastet, wenn Sie Knoten verwenden.",
     "billingOnlineTimeInfo": "Sie werden belastet, abhängig davon, wie lange Ihre Seiten mit der Cloud verbunden bleiben. Zum Beispiel 44.640 Minuten entspricht einer Site, die 24 Stunden am Tag des Monats läuft. Wenn Sie Ihr Limit erreichen, werden Ihre Seiten die Verbindung trennen, bis Sie Ihr Paket upgraden oder die Nutzung verringern. Die Zeit wird nicht belastet, wenn Sie Knoten verwenden.",
-    "billingUsersInfo": "Ihnen wird für jeden Benutzer in Ihrer Organisation berechnet. Die Abrechnung erfolgt täglich basierend auf der Anzahl der aktiven Benutzerkonten in Ihrer Organisation.",
-    "billingDomainInfo": "Ihnen wird jede Domain in Ihrer Organisation berechnet. Die Abrechnung erfolgt täglich, basierend auf der Anzahl der aktiven Domain-Konten in Ihrer Organisation.",
-    "billingRemoteExitNodesInfo": "Ihnen wird für jeden verwalteten Node in Ihrer Organisation berechnet. Die Abrechnung erfolgt täglich basierend auf der Anzahl der aktiven verwalteten Nodes in Ihrer Organisation.",
+    "billingUsersInfo": "You're charged for each user in the organization. Billing is calculated daily based on the number of active user accounts in your org.",
+    "billingDomainInfo": "You're charged for each domain in the organization. Billing is calculated daily based on the number of active domain accounts in your org.",
+    "billingRemoteExitNodesInfo": "You're charged for each managed Node in the organization. Billing is calculated daily based on the number of active managed Nodes in your org.",
     "domainNotFound": "Domain nicht gefunden",
     "domainNotFoundDescription": "Diese Ressource ist deaktiviert, weil die Domain nicht mehr in unserem System existiert. Bitte setzen Sie eine neue Domain für diese Ressource.",
     "failed": "Fehlgeschlagen",
@@ -1452,27 +1470,27 @@
     },
     "siteRequired": "Standort ist erforderlich.",
     "olmTunnel": "Olm-Tunnel",
-    "olmTunnelDescription": "Nutzen Sie Olm für die Kundenverbindung",
+    "olmTunnelDescription": "Nutzen Sie Olm für die Client-Verbindung",
     "errorCreatingClient": "Fehler beim Erstellen des Clients",
     "clientDefaultsNotFound": "Standardeinstellungen des Clients nicht gefunden",
     "createClient": "Client erstellen",
-    "createClientDescription": "Erstellen Sie einen neuen Client für die Verbindung zu Ihren Standorten.",
+    "createClientDescription": "Create a new client to access private resources",
     "seeAllClients": "Alle Clients anzeigen",
-    "clientInformation": "Client Informationen",
-    "clientNamePlaceholder": "Client Name",
+    "clientInformation": "Client-Informationen",
+    "clientNamePlaceholder": "Client-Name",
     "address": "Adresse",
     "subnetPlaceholder": "Subnetz",
-    "addressDescription": "Die Adresse, die dieser Client für die Verbindung verwenden wird.",
+    "addressDescription": "The internal address of the client. Must fall within the organization's subnet.",
     "selectSites": "Standorte auswählen",
     "sitesDescription": "Der Client wird zu den ausgewählten Standorten eine Verbindung haben.",
     "clientInstallOlm": "Olm installieren",
     "clientInstallOlmDescription": "Olm auf Ihrem System zum Laufen bringen",
-    "clientOlmCredentials": "Olm-Zugangsdaten",
-    "clientOlmCredentialsDescription": "So authentifiziert sich Olm beim Server",
-    "olmEndpoint": "Olm-Endpunkt",
-    "olmId": "Olm-ID",
-    "olmSecretKey": "Olm-Geheimschlüssel",
-    "clientCredentialsSave": "Speichern Sie Ihre Zugangsdaten",
+    "clientOlmCredentials": "Credentials",
+    "clientOlmCredentialsDescription": "This is how the client will authenticate with the server",
+    "olmEndpoint": "Endpoint",
+    "olmId": "ID",
+    "olmSecretKey": "Secret",
+    "clientCredentialsSave": "Save the Credentials",
     "clientCredentialsSaveDescription": "Sie können dies nur einmal sehen. Kopieren Sie es an einen sicheren Ort.",
     "generalSettingsDescription": "Konfigurieren Sie die allgemeinen Einstellungen für diesen Client",
     "clientUpdated": "Client aktualisiert",
@@ -1483,9 +1501,7 @@
     "sitesFetchError": "Beim Abrufen von Standorten ist ein Fehler aufgetreten.",
     "olmErrorFetchReleases": "Beim Abrufen von Olm-Veröffentlichungen ist ein Fehler aufgetreten.",
     "olmErrorFetchLatest": "Beim Abrufen der neuesten Olm-Veröffentlichung ist ein Fehler aufgetreten.",
-    "remoteSubnets": "Remote-Subnetze",
     "enterCidrRange": "Geben Sie den CIDR-Bereich ein",
-    "remoteSubnetsDescription": "Fügen Sie CIDR-Bereiche hinzu, die über Clients von dieser Site aus remote zugänglich sind. Verwenden Sie ein Format wie 10.0.0.0/24. Dies gilt NUR für die VPN-Client-Konnektivität.",
     "resourceEnableProxy": "Öffentlichen Proxy aktivieren",
     "resourceEnableProxyDescription": "Ermöglichen Sie öffentliches Proxieren zu dieser Ressource. Dies ermöglicht den Zugriff auf die Ressource von außerhalb des Netzwerks durch die Cloud über einen offenen Port. Erfordert Traefik-Config.",
     "externalProxyEnabled": "Externer Proxy aktiviert",
@@ -1503,14 +1519,15 @@
     "enableHealthChecksDescription": "Überwachen Sie die Gesundheit dieses Ziels. Bei Bedarf können Sie einen anderen Endpunkt als das Ziel überwachen.",
     "healthScheme": "Methode",
     "healthSelectScheme": "Methode auswählen",
+    "healthCheckPortInvalid": "Health check port must be between 1 and 65535",
     "healthCheckPath": "Pfad",
     "healthHostname": "IP / Host",
     "healthPort": "Port",
     "healthCheckPathDescription": "Der Pfad zum Überprüfen des Gesundheitszustands.",
-    "healthyIntervalSeconds": "Gesunder Intervall",
-    "unhealthyIntervalSeconds": "Ungesunder Intervall",
+    "healthyIntervalSeconds": "Healthy Interval (sec)",
+    "unhealthyIntervalSeconds": "Unhealthy Interval (sec)",
     "IntervalSeconds": "Gesunder Intervall",
-    "timeoutSeconds": "Timeout",
+    "timeoutSeconds": "Timeout (sec)",
     "timeIsInSeconds": "Zeit ist in Sekunden",
     "retryAttempts": "Wiederholungsversuche",
     "expectedResponseCodes": "Erwartete Antwortcodes",
@@ -1546,12 +1563,12 @@
     "resourceEditDomain": "Domain bearbeiten",
     "siteName": "Site-Name",
     "proxyPort": "Port",
-    "resourcesTableProxyResources": "Proxy-Ressourcen",
-    "resourcesTableClientResources": "Client-Ressourcen",
+    "resourcesTableProxyResources": "Public",
+    "resourcesTableClientResources": "Private",
     "resourcesTableNoProxyResourcesFound": "Keine Proxy-Ressourcen gefunden.",
     "resourcesTableNoInternalResourcesFound": "Keine internen Ressourcen gefunden.",
     "resourcesTableDestination": "Ziel",
-    "resourcesTableTheseResourcesForUseWith": "Diese Ressourcen sind zur Verwendung mit",
+    "resourcesTableAlias": "Alias",
     "resourcesTableClients": "Clients",
     "resourcesTableAndOnlyAccessibleInternally": "und sind nur intern zugänglich, wenn mit einem Client verbunden.",
     "resourcesTableNoTargets": "Keine Ziele",
@@ -1560,8 +1577,8 @@
     "resourcesTableOffline": "Offline",
     "resourcesTableUnknown": "Unbekannt",
     "resourcesTableNotMonitored": "Nicht überwacht",
-    "editInternalResourceDialogEditClientResource": "Client-Ressource bearbeiten",
-    "editInternalResourceDialogUpdateResourceProperties": "Aktualisieren Sie die Ressourceneigenschaften und die Zielkonfiguration für {resourceName}.",
+    "editInternalResourceDialogEditClientResource": "Edit Private Resource",
+    "editInternalResourceDialogUpdateResourceProperties": "Update the resource configuration and access controls for {resourceName}",
     "editInternalResourceDialogResourceProperties": "Ressourceneigenschaften",
     "editInternalResourceDialogName": "Name",
     "editInternalResourceDialogProtocol": "Protokoll",
@@ -1580,11 +1597,22 @@
     "editInternalResourceDialogInvalidIPAddressFormat": "Ungültiges IP-Adressformat",
     "editInternalResourceDialogDestinationPortMin": "Ziel-Port muss mindestens 1 sein",
     "editInternalResourceDialogDestinationPortMax": "Ziel-Port muss kleiner als 65536 sein",
+    "editInternalResourceDialogPortModeRequired": "Protocol, proxy port, and destination port are required for port mode",
+    "editInternalResourceDialogMode": "Mode",
+    "editInternalResourceDialogModePort": "Port",
+    "editInternalResourceDialogModeHost": "Host",
+    "editInternalResourceDialogModeCidr": "CIDR",
+    "editInternalResourceDialogDestination": "Destination",
+    "editInternalResourceDialogDestinationHostDescription": "The IP address or hostname of the resource on the site's network.",
+    "editInternalResourceDialogDestinationIPDescription": "The IP or hostname address of the resource on the site's network.",
+    "editInternalResourceDialogDestinationCidrDescription": "The CIDR range of the resource on the site's network.",
+    "editInternalResourceDialogAlias": "Alias",
+    "editInternalResourceDialogAliasDescription": "An optional internal DNS alias for this resource.",
     "createInternalResourceDialogNoSitesAvailable": "Keine Sites verfügbar",
     "createInternalResourceDialogNoSitesAvailableDescription": "Sie müssen mindestens eine Newt-Site mit einem konfigurierten Subnetz haben, um interne Ressourcen zu erstellen.",
     "createInternalResourceDialogClose": "Schließen",
-    "createInternalResourceDialogCreateClientResource": "Ressource erstellen",
-    "createInternalResourceDialogCreateClientResourceDescription": "Erstellen Sie eine neue Ressource, die für Clients zugänglich ist, die mit der ausgewählten Site verbunden sind.",
+    "createInternalResourceDialogCreateClientResource": "Create Private Resource",
+    "createInternalResourceDialogCreateClientResourceDescription": "Create a new resource that will only be accessible to clients connected to the organization",
     "createInternalResourceDialogResourceProperties": "Ressourceneigenschaften",
     "createInternalResourceDialogName": "Name",
     "createInternalResourceDialogSite": "Standort",
@@ -1613,11 +1641,22 @@
     "createInternalResourceDialogInvalidIPAddressFormat": "Ungültiges IP-Adressformat",
     "createInternalResourceDialogDestinationPortMin": "Ziel-Port muss mindestens 1 sein",
     "createInternalResourceDialogDestinationPortMax": "Ziel-Port muss kleiner als 65536 sein",
+    "createInternalResourceDialogPortModeRequired": "Protocol, proxy port, and destination port are required for port mode",
+    "createInternalResourceDialogMode": "Mode",
+    "createInternalResourceDialogModePort": "Port",
+    "createInternalResourceDialogModeHost": "Host",
+    "createInternalResourceDialogModeCidr": "CIDR",
+    "createInternalResourceDialogDestination": "Destination",
+    "createInternalResourceDialogDestinationHostDescription": "The IP address or hostname of the resource on the site's network.",
+    "createInternalResourceDialogDestinationCidrDescription": "The CIDR range of the resource on the site's network.",
+    "createInternalResourceDialogAlias": "Alias",
+    "createInternalResourceDialogAliasDescription": "An optional internal DNS alias for this resource.",
     "siteConfiguration": "Konfiguration",
     "siteAcceptClientConnections": "Clientverbindungen akzeptieren",
-    "siteAcceptClientConnectionsDescription": "Erlauben Sie anderen Geräten, über diese Newt-Instanz mit Clients als Gateway zu verbinden.",
-    "siteAddress": "Site-Adresse",
-    "siteAddressDescription": "Geben Sie die IP-Adresse des Hosts an, mit dem sich die Clients verbinden sollen. Dies ist die interne Adresse der Site im Pangolin-Netzwerk, die von Clients angesprochen werden muss. Muss innerhalb des Unternehmens-Subnetzes liegen.",
+    "siteAcceptClientConnectionsDescription": "Allow user devices and clients to access resources on this site. This can be changed later.",
+    "siteAddress": "Site Address (Advanced)",
+    "siteAddressDescription": "The internal address of the site. Must fall within the organization's subnet.",
+    "siteNameDescription": "The display name of the site that can be changed later.",
     "autoLoginExternalIdp": "Automatische Anmeldung mit externem IDP",
     "autoLoginExternalIdpDescription": "Leiten Sie den Benutzer sofort zur Authentifizierung an den externen IDP weiter.",
     "selectIdp": "IDP auswählen",
@@ -1631,7 +1670,7 @@
     "autoLoginErrorNoRedirectUrl": "Keine Weiterleitungs-URL vom Identitätsanbieter erhalten.",
     "autoLoginErrorGeneratingUrl": "Fehler beim Generieren der Authentifizierungs-URL.",
     "remoteExitNodeManageRemoteExitNodes": "Entfernte Knoten",
-    "remoteExitNodeDescription": "Self-Hosten Sie einen oder mehrere entfernte Knoten, um Ihr Netzwerk zu erweitern und die Abhängigkeit von der Cloud zu verringern",
+    "remoteExitNodeDescription": "Self-host one or more remote nodes to extend network connectivity and reduce reliance on the cloud",
     "remoteExitNodes": "Knoten",
     "searchRemoteExitNodes": "Knoten suchen...",
     "remoteExitNodeAdd": "Knoten hinzufügen",
@@ -1643,11 +1682,11 @@
     "sidebarRemoteExitNodes": "Entfernte Knoten",
     "remoteExitNodeCreate": {
         "title": "Knoten erstellen",
-        "description": "Erstellen Sie einen neuen Knoten, um Ihr Netzwerk zu erweitern",
+        "description": "Create a new node to extend network connectivity",
         "viewAllButton": "Alle Knoten anzeigen",
         "strategy": {
             "title": "Erstellungsstrategie",
-            "description": "Wählen Sie diese Option, um Ihren Knoten manuell zu konfigurieren oder neue Zugangsdaten zu generieren.",
+            "description": "Choose this to manually configure the node or generate new credentials.",
             "adopt": {
                 "title": "Node übernehmen",
                 "description": "Wählen Sie dies, wenn Sie bereits die Anmeldedaten für den Knoten haben."
@@ -1668,7 +1707,7 @@
         },
         "generate": {
             "title": "Generierte Anmeldedaten",
-            "description": "Verwenden Sie diese generierten Anmeldeinformationen, um Ihren Knoten zu konfigurieren",
+            "description": "Use these generated credentials to configure the node",
             "nodeIdTitle": "Knoten-ID",
             "secretTitle": "Geheimnis",
             "saveCredentialsTitle": "Anmeldedaten zur Konfiguration hinzufügen",
@@ -1744,16 +1783,16 @@
     "idpTypeLabel": "Identitätsanbietertyp",
     "roleMappingExpressionPlaceholder": "z. B. enthalten(Gruppen, 'admin') && 'Admin' || 'Mitglied'",
     "idpGoogleConfiguration": "Google-Konfiguration",
-    "idpGoogleConfigurationDescription": "Konfigurieren Sie Ihre Google OAuth2 Zugangsdaten",
-    "idpGoogleClientIdDescription": "Ihre Google OAuth2 Client-ID",
-    "idpGoogleClientSecretDescription": "Ihr Google OAuth2 Client Secret",
+    "idpGoogleConfigurationDescription": "Configure the Google OAuth2 credentials",
+    "idpGoogleClientIdDescription": "Google OAuth2 Client ID",
+    "idpGoogleClientSecretDescription": "Google OAuth2 Client Secret",
     "idpAzureConfiguration": "Azure Entra ID Konfiguration",
-    "idpAzureConfigurationDescription": "Konfigurieren Sie Ihre Azure Entra ID OAuth2 Zugangsdaten",
+    "idpAzureConfigurationDescription": "Configure Azure Entra ID OAuth2 credentials",
     "idpTenantId": "Mandanten-ID",
-    "idpTenantIdPlaceholder": "deine Mandant-ID",
-    "idpAzureTenantIdDescription": "Ihre Azure Tenant-ID (gefunden in Azure Active Directory Übersicht)",
-    "idpAzureClientIdDescription": "Ihre Azure App Registration Client ID",
-    "idpAzureClientSecretDescription": "Ihr Azure App Registration Client Secret",
+    "idpTenantIdPlaceholder": "tenant-id",
+    "idpAzureTenantIdDescription": "Azure tenant ID (found in Azure Active Directory overview)",
+    "idpAzureClientIdDescription": "Azure App Registration Client ID",
+    "idpAzureClientSecretDescription": "Azure App Registration Client Secret",
     "idpGoogleTitle": "Google",
     "idpGoogleAlt": "Google",
     "idpAzureTitle": "Azure Entra ID",
@@ -1761,14 +1800,14 @@
     "idpGoogleConfigurationTitle": "Google-Konfiguration",
     "idpAzureConfigurationTitle": "Azure Entra ID Konfiguration",
     "idpTenantIdLabel": "Mandanten-ID",
-    "idpAzureClientIdDescription2": "Ihre Azure App Registration Client ID",
-    "idpAzureClientSecretDescription2": "Ihr Azure App Registration Client Secret",
+    "idpAzureClientIdDescription2": "Azure App Registration Client ID",
+    "idpAzureClientSecretDescription2": "Azure App Registration Client Secret",
     "idpGoogleDescription": "Google OAuth2/OIDC Provider",
     "idpAzureDescription": "Microsoft Azure OAuth2/OIDC provider",
     "subnet": "Subnetz",
     "subnetDescription": "Das Subnetz für die Netzwerkkonfiguration dieser Organisation.",
     "authPage": "Auth Seite",
-    "authPageDescription": "Konfigurieren Sie die Auth-Seite für Ihre Organisation",
+    "authPageDescription": "Configure the auth page for the organization",
     "authPageDomain": "Domain der Auth Seite",
     "noDomainSet": "Keine Domain gesetzt",
     "changeDomain": "Domain ändern",
@@ -1778,7 +1817,7 @@
     "setAuthPageDomain": "Domain der Auth Seite festlegen",
     "failedToFetchCertificate": "Zertifikat konnte nicht abgerufen werden",
     "failedToRestartCertificate": "Zertifikat konnte nicht neu gestartet werden",
-    "addDomainToEnableCustomAuthPages": "Fügen Sie eine Domain hinzu, um benutzerdefinierte Authentifizierungsseiten für Ihre Organisation zu aktivieren",
+    "addDomainToEnableCustomAuthPages": "Add a domain to enable custom authentication pages for the organization",
     "selectDomainForOrgAuthPage": "Wählen Sie eine Domain für die Authentifizierungsseite der Organisation",
     "domainPickerProvidedDomain": "Angegebene Domain",
     "domainPickerFreeProvidedDomain": "Kostenlose Domain",
@@ -1793,7 +1832,7 @@
     "domainPickerInvalidSubdomainCannotMakeValid": "\"{sub}\" konnte nicht für {domain} gültig gemacht werden.",
     "domainPickerSubdomainSanitized": "Subdomain bereinigt",
     "domainPickerSubdomainCorrected": "\"{sub}\" wurde korrigiert zu \"{sanitized}\"",
-    "orgAuthSignInTitle": "Bei Ihrer Organisation anmelden",
+    "orgAuthSignInTitle": "Sign in to the organization",
     "orgAuthChooseIdpDescription": "Wähle deinen Identitätsanbieter um fortzufahren",
     "orgAuthNoIdpConfigured": "Diese Organisation hat keine Identitätsanbieter konfiguriert. Sie können sich stattdessen mit Ihrer Pangolin-Identität anmelden.",
     "orgAuthSignInWithPangolin": "Mit Pangolin anmelden",
@@ -1811,7 +1850,7 @@
     "enableTwoFactorAuthentication": "Zwei-Faktor-Authentifizierung aktivieren",
     "completeSecuritySteps": "Schließe Sicherheitsschritte ab",
     "securitySettings": "Sicherheitseinstellungen",
-    "securitySettingsDescription": "Konfigurieren Sie Sicherheitsrichtlinien für Ihre Organisation",
+    "securitySettingsDescription": "Configure security policies for the organization",
     "requireTwoFactorForAllUsers": "Zwei-Faktor-Authentifizierung für alle Benutzer erforderlich",
     "requireTwoFactorDescription": "Wenn aktiviert, müssen alle internen Benutzer in dieser Organisation die Zwei-Faktor-Authentifizierung aktiviert haben, um auf die Organisation zuzugreifen.",
     "requireTwoFactorDisabledDescription": "Diese Funktion erfordert eine gültige Lizenz (Unternehmen) oder ein aktives Abonnement (SaaS)",
@@ -1874,8 +1913,12 @@
     "enterpriseEdition": "Enterprise Edition",
     "unlicensed": "Nicht lizenziert",
     "beta": "Beta",
-    "manageClients": "Clients verwalten",
-    "manageClientsDescription": "Clients sind Geräte, die sich mit Ihren Websites verbinden können",
+    "manageUserDevices": "User Devices",
+    "manageUserDevicesDescription": "View and manage devices that users use to privately connect to resources",
+    "manageMachineClients": "Manage Machine Clients",
+    "manageMachineClientsDescription": "Create and manage clients that servers and systems use to privately connect to resources",
+    "clientsTableUserClients": "User",
+    "clientsTableMachineClients": "Machine",
     "licenseTableValidUntil": "Gültig bis",
     "saasLicenseKeysSettingsTitle": "Enterprise-Lizenzen",
     "saasLicenseKeysSettingsDescription": "Erstelle und verwalte Enterprise-Lizenzschlüssel für selbst gehostete Pangolin-Instanzen",
@@ -2075,7 +2118,7 @@
     "preferWildcardCert": "Wildcard-Zertifikat bevorzugen",
     "unverified": "Nicht verifiziert",
     "domainSetting": "Domänen-Einstellungen",
-    "domainSettingDescription": "Einstellungen für Ihre Domain konfigurieren",
+    "domainSettingDescription": "Configure settings for the domain",
     "preferWildcardCertDescription": "Versuch ein Platzhalterzertifikat zu generieren (erfordert einen richtig konfigurierten Zertifikatslöser).",
     "recordName": "Name des Datensatzes",
     "auto": "Auto",
@@ -2089,15 +2132,15 @@
     "olmUpdateAvailableInfo": "Eine aktualisierte Version von Olm ist verfügbar. Bitte aktualisieren Sie auf die neueste Version für die beste Erfahrung.",
     "client": "Client",
     "proxyProtocol": "Proxy-Protokoll-Einstellungen",
-    "proxyProtocolDescription": "Konfigurieren Sie das Proxy-Protokoll, um die IP-Adressen des Clients für TCP/UDP-Dienste zu erhalten.",
+    "proxyProtocolDescription": "Configure Proxy Protocol to preserve client IP addresses for TCP services.",
     "enableProxyProtocol": "Proxy-Protokoll aktivieren",
-    "proxyProtocolInfo": "Client-IP-Adressen für TCP/UDP Backends beibehalten",
+    "proxyProtocolInfo": "Preserve client IP addresses for TCP backends",
     "proxyProtocolVersion": "Proxy-Protokollversion",
     "version1": " Version 1 (empfohlen)",
     "version2": "Version 2",
     "versionDescription": "Die Version 1 ist textbasiert und unterstützt die Version 2, ist binär und effizienter, aber weniger kompatibel.",
     "warning": "Warnung",
-    "proxyProtocolWarning": "Ihre Backend-Anwendung muss so konfiguriert sein, dass sie Proxy-Protokoll-Verbindungen akzeptiert. Wenn Ihr Backend das Proxy-Protokoll nicht unterstützt, wird die Aktivierung dieser Option alle Verbindungen zerstören. Stellen Sie sicher, dass Sie Ihr Backend so konfigurieren, dass es Proxy-Protokoll-Header von Traefik vertraut.",
+    "proxyProtocolWarning": "The backend application must be configured to accept Proxy Protocol connections. If your backend doesn't support Proxy Protocol, enabling this will break all connections so only enable this if you know what you're doing. Make sure to configure your backend to trust Proxy Protocol headers from Traefik.",
     "restarting": "Neustarten...",
     "manual": "Manuell",
     "messageSupport": "Nachrichtenunterstützung",
@@ -2120,6 +2163,43 @@
     "supportMessageSent": "Nachricht gesendet!",
     "supportWillContact": "Wir werden in Kürze kontaktieren!",
     "selectLogRetention": "Log-Speicherung auswählen",
+    "terms": "Terms",
+    "privacy": "Privacy",
+    "security": "Security",
+    "docs": "Docs",
+    "deviceActivation": "Device activation",
+    "deviceCodeInvalidFormat": "Code must be 9 characters (e.g., A1AJ-N5JD)",
+    "deviceCodeInvalidOrExpired": "Invalid or expired code",
+    "deviceCodeVerifyFailed": "Failed to verify device code",
+    "signedInAs": "Signed in as",
+    "deviceCodeEnterPrompt": "Enter the code displayed on the device",
+    "continue": "Continue",
+    "deviceUnknownLocation": "Unknown location",
+    "deviceAuthorizationRequested": "This authorization was requested from {location} on {date}. Make sure you trust this device as it will get access to the account.",
+    "deviceLabel": "Device: {deviceName}",
+    "deviceWantsAccess": "wants to access your account",
+    "deviceExistingAccess": "Existing access:",
+    "deviceFullAccess": "Full access to your account",
+    "deviceOrganizationsAccess": "Access to all organizations your account has access to",
+    "deviceAuthorize": "Authorize {applicationName}",
+    "deviceConnected": "Device Connected!",
+    "deviceAuthorizedMessage": "Device is authorized to access your account.",
+    "pangolinCloud": "Pangolin Cloud",
+    "viewDevices": "View Devices",
+    "viewDevicesDescription": "Manage your connected devices",
+    "noDevices": "No devices found",
+    "dateCreated": "Date Created",
+    "unnamedDevice": "Unnamed Device",
+    "deviceQuestionRemove": "Are you sure you want to delete this device?",
+    "deviceMessageRemove": "This action cannot be undone.",
+    "deviceDeleteConfirm": "Delete Device",
+    "deleteDevice": "Delete Device",
+    "errorLoadingDevices": "Error loading devices",
+    "failedToLoadDevices": "Failed to load devices",
+    "deviceDeleted": "Device deleted",
+    "deviceDeletedDescription": "The device has been successfully deleted.",
+    "errorDeletingDevice": "Error deleting device",
+    "failedToDeleteDevice": "Failed to delete device",
     "showColumns": "Spalten anzeigen",
     "hideColumns": "Spalten ausblenden",
     "columnVisibility": "Spaltensichtbarkeit",
@@ -2134,6 +2214,10 @@
     "enableSelected": "Ausgewählte aktivieren",
     "disableSelected": "Ausgewählte deaktivieren",
     "checkSelectedStatus": "Status der Auswahl überprüfen",
+    "clients": "Clients",
+    "accessClientSelect": "Select machine clients",
+    "resourceClientDescription": "Machine clients that can access this resource",
+    "regenerate": "Regenerate",
     "credentials": "Zugangsdaten",
     "savecredentials": "Zugangsdaten speichern",
     "regeneratecredentials": "Re-Key",
@@ -2151,7 +2235,6 @@
     "endpoint": "Endpunkt",
     "Id": "ID",
     "SecretKey": "Geheimer Schlüssel",
-    "featureDisabledTooltip": "Diese Funktion ist nur im Enterprise-Plan verfügbar und erfordert eine Lizenz, um sie zu nutzen.",
     "niceId": "Schöne ID",
     "niceIdUpdated": "Schöne ID aktualisiert",
     "niceIdUpdatedSuccessfully": "Nice ID erfolgreich aktualisiert",
@@ -2160,5 +2243,15 @@
     "niceIdCannotBeEmpty": "Nizza-ID darf nicht leer sein",
     "enterIdentifier": "Identifikator eingeben",
     "identifier": "Identifier",
-    "noData": "No Data"
+    "deviceLoginUseDifferentAccount": "Not you? Use a different account.",
+    "deviceLoginDeviceRequestingAccessToAccount": "A device is requesting access to this account.",
+    "noData": "No Data",
+    "machineClients": "Machine Clients",
+    "install": "Install",
+    "run": "Run",
+    "clientNameDescription": "The display name of the client that can be changed later.",
+    "clientAddress": "Client Address (Advanced)",
+    "setupFailedToFetchSubnet": "Failed to fetch default subnet",
+    "setupSubnetAdvanced": "Subnet (Advanced)",
+    "setupSubnetDescription": "The subnet for this organization's internal network."
 }

messages/es-ES.json

@@ -1,12 +1,12 @@
 {
-    "setupCreate": "Crea tu organización, sitio y recursos",
+    "setupCreate": "Create the organization, site, and resources",
     "setupNewOrg": "Nueva organización",
     "setupCreateOrg": "Crear organización",
     "setupCreateResources": "Crear Recursos",
     "setupOrgName": "Nombre de la organización",
-    "orgDisplayName": "Este es el nombre mostrado de su organización.",
+    "orgDisplayName": "This is the display name of the organization.",
     "orgId": "ID de la organización",
-    "setupIdentifierMessage": "Este es el identificador único para su organización. Esto es independiente del nombre de la pantalla.",
+    "setupIdentifierMessage": "This is the unique identifier for the organization.",
     "setupErrorIdentifier": "El ID de la organización ya está en uso. Por favor, elija uno diferente.",
     "componentsErrorNoMemberCreate": "Actualmente no eres miembro de ninguna organización. Crea una organización para empezar.",
     "componentsErrorNoMember": "Actualmente no eres miembro de ninguna organización.",
@@ -50,10 +50,10 @@
     "siteMessageRemove": "Una vez eliminado, el sitio ya no será accesible. Todos los objetivos asociados con el sitio también serán eliminados.",
     "siteQuestionRemove": "¿Está seguro que desea eliminar el sitio de la organización?",
     "siteManageSites": "Administrar Sitios",
-    "siteDescription": "Permitir conectividad a tu red a través de túneles seguros",
+    "siteDescription": "Create and manage sites to enable connectivity to private networks",
     "siteCreate": "Crear sitio",
     "siteCreateDescription2": "Siga los pasos siguientes para crear y conectar un nuevo sitio",
-    "siteCreateDescription": "Crear un nuevo sitio para comenzar a conectar sus recursos",
+    "siteCreateDescription": "Create a new site to start connecting resources",
     "close": "Cerrar",
     "siteErrorCreate": "Error al crear el sitio",
     "siteErrorCreateKeyPair": "Por defecto no se encuentra el par de claves o el sitio",
@@ -74,7 +74,7 @@
     "siteInstallNewt": "Instalar Newt",
     "siteInstallNewtDescription": "Recibe Newt corriendo en tu sistema",
     "WgConfiguration": "Configuración de Wirex Guard",
-    "WgConfigurationDescription": "Utilice la siguiente configuración para conectarse a su red",
+    "WgConfigurationDescription": "Use the following configuration to connect to the network",
     "operatingSystem": "Sistema operativo",
     "commands": "Comandos",
     "recommended": "Recomendado",
@@ -87,32 +87,32 @@
     "siteUpdated": "Sitio actualizado",
     "siteUpdatedDescription": "El sitio ha sido actualizado.",
     "siteGeneralDescription": "Configurar la configuración general de este sitio",
-    "siteSettingDescription": "Configurar la configuración de su sitio",
+    "siteSettingDescription": "Configure the settings on the site",
     "siteSetting": "Ajustes {siteName}",
-    "siteNewtTunnel": "Túnel Nuevo (Recomendado)",
-    "siteNewtTunnelDescription": "La forma más fácil de crear un punto de entrada en tu red. Sin configuración adicional.",
+    "siteNewtTunnel": "Newt Site (Recommended)",
+    "siteNewtTunnelDescription": "Easiest way to create an entrypoint into any network. No extra setup.",
     "siteWg": "Wirex Guardia Básica",
     "siteWgDescription": "Utilice cualquier cliente Wirex Guard para establecer un túnel. Se requiere una configuración manual de NAT.",
     "siteWgDescriptionSaas": "Utilice cualquier cliente de WireGuard para establecer un túnel. Se requiere configuración manual de NAT. SOLO FUNCIONA EN NODOS AUTOGESTIONADOS",
     "siteLocalDescription": "Solo recursos locales. Sin túneles.",
     "siteLocalDescriptionSaas": "Solo recursos locales. No hay túneles. Sólo disponible en nodos remotos.",
     "siteSeeAll": "Ver todos los sitios",
-    "siteTunnelDescription": "Determina cómo quieres conectarte a tu sitio",
-    "siteNewtCredentials": "Credenciales nuevas",
-    "siteNewtCredentialsDescription": "Así es como Newt se autentificará con el servidor",
-    "siteCredentialsSave": "Guarda tus credenciales",
+    "siteTunnelDescription": "Determine how you want to connect to the site",
+    "siteNewtCredentials": "Credentials",
+    "siteNewtCredentialsDescription": "This is how the site will authenticate with the server",
+    "siteCredentialsSave": "Save the Credentials",
     "siteCredentialsSaveDescription": "Sólo podrás verlo una vez. Asegúrate de copiarlo a un lugar seguro.",
     "siteInfo": "Información del sitio",
     "status": "Estado",
     "shareTitle": "Administrar Enlaces de Compartir",
-    "shareDescription": "Crear enlaces compartidos para conceder acceso temporal o permanente a tus recursos",
+    "shareDescription": "Create shareable links to grant temporary or permanent access to proxy resources",
     "shareSearch": "Buscar enlaces compartidos...",
     "shareCreate": "Crear enlace Compartir",
     "shareErrorDelete": "Error al eliminar el enlace",
     "shareErrorDeleteMessage": "Se ha producido un error al eliminar el enlace",
     "shareDeleted": "Enlace eliminado",
     "shareDeletedDescription": "El enlace ha sido eliminado",
-    "shareTokenDescription": "Su token de acceso puede ser pasado de dos maneras: como parámetro de consulta o en las cabeceras de solicitud. Estos deben ser pasados del cliente en cada solicitud de acceso autenticado.",
+    "shareTokenDescription": "The access token can be passed in two ways: as a query parameter or in the request headers. These must be passed from the client on every request for authenticated access.",
     "accessToken": "Token de acceso",
     "usageExamples": "Ejemplos de uso",
     "tokenId": "ID de token",
@@ -121,7 +121,7 @@
     "importantNote": "Nota Importante",
     "shareImportantDescription": "Por razones de seguridad, el uso de cabeceras se recomienda sobre parámetros de consulta cuando sea posible, ya que los parámetros de consulta pueden ser registrados en los registros del servidor o en el historial del navegador.",
     "token": "Token",
-    "shareTokenSecurety": "Mantenga su token de acceso seguro. No lo comparta en áreas de acceso público o código del lado del cliente.",
+    "shareTokenSecurety": "Keep the access token secure. Do not share it in publicly accessible areas or client-side code.",
     "shareErrorFetchResource": "No se pudo obtener recursos",
     "shareErrorFetchResourceDescription": "Se ha producido un error al recuperar los recursos",
     "shareErrorCreate": "Error al crear el enlace compartir",
@@ -144,8 +144,10 @@
     "expires": "Caduca",
     "never": "Nunca",
     "shareErrorSelectResource": "Por favor, seleccione un recurso",
-    "resourceTitle": "Administrar recursos",
-    "resourceDescription": "Crea proxies seguros para tus aplicaciones privadas",
+    "proxyResourceTitle": "Manage Public Resources",
+    "proxyResourceDescription": "Create and manage resources that are publicly accessible through a web browser",
+    "clientResourceTitle": "Manage Private Resources",
+    "clientResourceDescription": "Create and manage resources that are only accessible through a connected client",
     "resourcesSearch": "Buscar recursos...",
     "resourceAdd": "Añadir Recurso",
     "resourceErrorDelte": "Error al eliminar el recurso",
@@ -155,9 +157,9 @@
     "resourceMessageRemove": "Una vez eliminado, el recurso ya no será accesible. Todos los objetivos asociados con el recurso también serán eliminados.",
     "resourceQuestionRemove": "¿Está seguro que desea eliminar el recurso de la organización?",
     "resourceHTTP": "HTTPS Recurso",
-    "resourceHTTPDescription": "Solicitudes de proxy a tu aplicación sobre HTTPS usando un subdominio o dominio base.",
+    "resourceHTTPDescription": "Proxy requests to the app over HTTPS using a subdomain or base domain.",
     "resourceRaw": "Recurso TCP/UDP sin procesar",
-    "resourceRawDescription": "Solicitudes de proxy a tu aplicación a través de TCP/UDP usando un número de puerto.",
+    "resourceRawDescription": "Proxy requests to the app over TCP/UDP using a port number. This only works when sites are connected to nodes.",
     "resourceCreate": "Crear Recurso",
     "resourceCreateDescription": "Siga los siguientes pasos para crear un nuevo recurso",
     "resourceSeeAll": "Ver todos los recursos",
@@ -171,22 +173,22 @@
     "noCountryFound": "Ningún país encontrado.",
     "siteSelectionDescription": "Este sitio proporcionará conectividad al objetivo.",
     "resourceType": "Tipo de recurso",
-    "resourceTypeDescription": "Determina cómo quieres acceder a tu recurso",
+    "resourceTypeDescription": "Determine how to access the resource",
     "resourceHTTPSSettings": "Configuración HTTPS",
-    "resourceHTTPSSettingsDescription": "Configurar cómo se accederá a tu recurso a través de HTTPS",
+    "resourceHTTPSSettingsDescription": "Configure how the resource will be accessed over HTTPS",
     "domainType": "Tipo de dominio",
     "subdomain": "Subdominio",
     "baseDomain": "Dominio base",
-    "subdomnainDescription": "El subdominio al que su recurso será accesible.",
+    "subdomnainDescription": "The subdomain where the resource will be accessible.",
     "resourceRawSettings": "Configuración TCP/UDP",
-    "resourceRawSettingsDescription": "Configure cómo se accederá a su recurso a través de TCP/UDP. Mapeas el recurso a un puerto en el servidor Pangolin host, así puedes acceder al recurso desde el servidor-public-ip:mapped-port.",
+    "resourceRawSettingsDescription": "Configure how the resource will be accessed over TCP/UDP. You map the resource to a port on the host Pangolin server, so you can access the resource from server-public-ip:mapped-port.",
     "protocol": "Protocolo",
     "protocolSelect": "Seleccionar un protocolo",
     "resourcePortNumber": "Número de puerto",
     "resourcePortNumberDescription": "El número de puerto externo a las solicitudes de proxy.",
     "cancel": "Cancelar",
     "resourceConfig": "Fragmentos de configuración",
-    "resourceConfigDescription": "Copia y pega estos fragmentos de configuración para configurar tu recurso TCP/UDP",
+    "resourceConfigDescription": "Copy and paste these configuration snippets to set up the TCP/UDP resource",
     "resourceAddEntrypoints": "Traefik: Añadir puntos de entrada",
     "resourceExposePorts": "Gerbil: Exponer puertos en Docker Compose",
     "resourceLearnRaw": "Aprende cómo configurar los recursos TCP/UDP",
@@ -202,14 +204,14 @@
     "proxy": "Proxy",
     "internal": "Interno",
     "rules": "Reglas",
-    "resourceSettingDescription": "Configure la configuración de su recurso",
+    "resourceSettingDescription": "Configure the settings on the resource",
     "resourceSetting": "Ajustes {resourceName}",
-    "alwaysAllow": "Permitir siempre",
-    "alwaysDeny": "Denegar siempre",
+    "alwaysAllow": "Bypass Auth",
+    "alwaysDeny": "Block Access",
     "passToAuth": "Pasar a Autenticación",
-    "orgSettingsDescription": "Configurar la configuración general de su organización",
+    "orgSettingsDescription": "Configure the organization's settings",
     "orgGeneralSettings": "Configuración de la organización",
-    "orgGeneralSettingsDescription": "Administra los detalles y la configuración de tu organización",
+    "orgGeneralSettingsDescription": "Manage the organization's details and configuration",
     "saveGeneralSettings": "Guardar ajustes generales",
     "saveSettings": "Guardar ajustes",
     "orgDangerZone": "Zona de peligro",
@@ -232,7 +234,7 @@
     "orgMissing": "Falta el ID de la organización",
     "orgMissingMessage": "No se puede regenerar la invitación sin el ID de la organización.",
     "accessUsersManage": "Administrar usuarios",
-    "accessUsersDescription": "Invitar usuarios y añadirlos a roles para administrar el acceso a su organización",
+    "accessUsersDescription": "Invite and manage users with access to this organization",
     "accessUsersSearch": "Buscar usuarios...",
     "accessUserCreate": "Crear usuario",
     "accessUserRemove": "Eliminar usuario",
@@ -241,13 +243,13 @@
     "role": "Rol",
     "nameRequired": "Se requiere nombre",
     "accessRolesManage": "Administrar roles",
-    "accessRolesDescription": "Configurar roles para administrar el acceso a su organización",
+    "accessRolesDescription": "Create and manage roles for users in the organization",
     "accessRolesSearch": "Buscar roles...",
     "accessRolesAdd": "Añadir rol",
     "accessRoleDelete": "Eliminar rol",
     "description": "Descripción",
     "inviteTitle": "Invitaciones abiertas",
-    "inviteDescription": "Administra tus invitaciones a otros usuarios",
+    "inviteDescription": "Manage invitations for other users to join the organization",
     "inviteSearch": "Buscar invitaciones...",
     "minutes": "Minutos",
     "hours": "Horas",
@@ -261,13 +263,13 @@
     "apiKeysErrorCreate": "Error al crear la clave API",
     "apiKeysErrorSetPermission": "Error al establecer permisos",
     "apiKeysCreate": "Generar clave API",
-    "apiKeysCreateDescription": "Generar una nueva clave API para su organización",
+    "apiKeysCreateDescription": "Generate a new API key for the organization",
     "apiKeysGeneralSettings": "Permisos",
     "apiKeysGeneralSettingsDescription": "Determinar qué puede hacer esta clave API",
-    "apiKeysList": "Tu clave API",
-    "apiKeysSave": "Guarda tu clave API",
+    "apiKeysList": "New API Key",
+    "apiKeysSave": "Save the API Key",
     "apiKeysSaveDescription": "Sólo podrás verlo una vez. Asegúrate de copiarlo a un lugar seguro.",
-    "apiKeysInfo": "Tu clave API es:",
+    "apiKeysInfo": "The API key is:",
     "apiKeysConfirmCopy": "He copiado la clave API",
     "generate": "Generar",
     "done": "Hecho",
@@ -424,7 +426,7 @@
     "userCreated": "Usuario creado",
     "userCreatedDescription": "El usuario se ha creado correctamente.",
     "userTypeInternal": "Usuario interno",
-    "userTypeInternalDescription": "Invita a un usuario a unirse a tu organización directamente.",
+    "userTypeInternalDescription": "Invite a user to join the organization directly.",
     "userTypeExternal": "Usuario externo",
     "userTypeExternalDescription": "Crear un usuario con un proveedor de identidad externo.",
     "accessUserCreateDescription": "Siga los pasos siguientes para crear un nuevo usuario",
@@ -468,13 +470,13 @@
     "accessControlsSubmit": "Guardar controles de acceso",
     "roles": "Roles",
     "accessUsersRoles": "Administrar usuarios y roles",
-    "accessUsersRolesDescription": "Invitar usuarios y añadirlos a roles para administrar el acceso a su organización",
+    "accessUsersRolesDescription": "Invite users and add them to roles to manage access to the organization",
     "key": "Clave",
     "createdAt": "Creado el",
     "proxyErrorInvalidHeader": "Valor de cabecera de host personalizado no válido. Utilice el formato de nombre de dominio, o guarde en blanco para desestablecer cabecera de host personalizada.",
     "proxyErrorTls": "Nombre de servidor TLS inválido. Utilice el formato de nombre de dominio o guarde en blanco para eliminar el nombre de servidor TLS.",
     "proxyEnableSSL": "Activar SSL",
-    "proxyEnableSSLDescription": "Activa el cifrado SSL/TLS para conexiones seguras HTTPS a tus objetivos.",
+    "proxyEnableSSLDescription": "Enable SSL/TLS encryption for secure HTTPS connections to the targets.",
     "target": "Target",
     "configureTarget": "Configurar objetivos",
     "targetErrorFetch": "Error al recuperar los objetivos",
@@ -490,29 +492,29 @@
     "targetsErrorUpdate": "Error al actualizar los objetivos",
     "targetsErrorUpdateDescription": "Se ha producido un error al actualizar los objetivos",
     "targetTlsUpdate": "Ajustes TLS actualizados",
-    "targetTlsUpdateDescription": "La configuración de TLS se ha actualizado correctamente",
+    "targetTlsUpdateDescription": "TLS settings have been updated successfully",
     "targetErrorTlsUpdate": "Error al actualizar los ajustes de TLS",
     "targetErrorTlsUpdateDescription": "Ocurrió un error mientras se actualizaban los ajustes de TLS",
     "proxyUpdated": "Configuración del proxy actualizada",
-    "proxyUpdatedDescription": "La configuración del proxy se ha actualizado correctamente",
+    "proxyUpdatedDescription": "Proxy settings have been updated successfully",
     "proxyErrorUpdate": "Error al actualizar la configuración del proxy",
     "proxyErrorUpdateDescription": "Se ha producido un error al actualizar la configuración del proxy",
     "targetAddr": "IP / Nombre del host",
     "targetPort": "Puerto",
     "targetProtocol": "Protocolo",
     "targetTlsSettings": "Configuración de conexión segura",
-    "targetTlsSettingsDescription": "Configurar ajustes SSL/TLS para su recurso",
+    "targetTlsSettingsDescription": "Configure SSL/TLS settings for the resource",
     "targetTlsSettingsAdvanced": "Ajustes avanzados de TLS",
     "targetTlsSni": "Nombre del servidor TLS",
     "targetTlsSniDescription": "El nombre del servidor TLS a usar para SNI. Deje en blanco para usar el valor predeterminado.",
     "targetTlsSubmit": "Guardar ajustes",
     "targets": "Configuración de objetivos",
-    "targetsDescription": "Configurar objetivos para enrutar tráfico a sus servicios",
+    "targetsDescription": "Set up targets to route traffic to backend services",
     "targetStickySessions": "Activar Sesiones Pegadas",
     "targetStickySessionsDescription": "Mantener conexiones en el mismo objetivo de backend para toda su sesión.",
     "methodSelect": "Seleccionar método",
     "targetSubmit": "Añadir destino",
-    "targetNoOne": "Este recurso no tiene ningún objetivo. Agrega un objetivo para configurar dónde enviar peticiones al backend.",
+    "targetNoOne": "This resource doesn't have any targets. Add a target to configure where to send requests to the backend.",
     "targetNoOneDescription": "Si se añade más de un objetivo anterior se activará el balance de carga.",
     "targetsSubmit": "Guardar objetivos",
     "addTarget": "Añadir destino",
@@ -530,7 +532,7 @@
     "tlsServerNameDescription": "The TLS server name to use for SNI",
     "save": "Guardar",
     "proxyAdditional": "Ajustes adicionales del proxy",
-    "proxyAdditionalDescription": "Configura cómo tu recurso maneja la configuración del proxy",
+    "proxyAdditionalDescription": "Configure how the resource handles proxy settings",
     "proxyCustomHeader": "Cabecera de host personalizada",
     "proxyCustomHeaderDescription": "La cabecera del host a establecer cuando se realizan peticiones de reemplazo. Deje en blanco para usar el valor predeterminado.",
     "proxyAdditionalSubmit": "Guardar ajustes de proxy",
@@ -570,7 +572,7 @@
     "rulesMatchType": "Tipo de partida",
     "value": "Valor",
     "rulesAbout": "Sobre Reglas",
-    "rulesAboutDescription": "Las reglas le permiten controlar el acceso a su recurso basado en un conjunto de criterios. Puede crear reglas para permitir o denegar el acceso basándose en la dirección IP o ruta de la URL.",
+    "rulesAboutDescription": "Rules allow you to control access to the resource based on a set of criteria. You can create rules to allow or deny access based on IP address or URL path.",
     "rulesActions": "Acciones",
     "rulesActionAlwaysAllow": "Permitir siempre: pasar todos los métodos de autenticación",
     "rulesActionAlwaysDeny": "Denegar siempre: Bloquear todas las peticiones; no se puede intentar autenticación",
@@ -582,7 +584,7 @@
     "rulesEnable": "Activar Reglas",
     "rulesEnableDescription": "Activar o desactivar la evaluación de reglas para este recurso",
     "rulesResource": "Configuración de reglas de recursos",
-    "rulesResourceDescription": "Configurar reglas para controlar el acceso a su recurso",
+    "rulesResourceDescription": "Configure rules to control access to the resource",
     "ruleSubmit": "Añadir Regla",
     "rulesNoOne": "No hay reglas. Agregue una regla usando el formulario.",
     "rulesOrder": "Las reglas son evaluadas por prioridad en orden ascendente.",
@@ -598,7 +600,7 @@
     "none": "Ninguna",
     "unknown": "Desconocido",
     "resources": "Recursos",
-    "resourcesDescription": "Los recursos son proxies para aplicaciones que se ejecutan en su red privada. Cree un recurso para cualquier servicio HTTP/HTTPS o TCP/UDP crudo en su red privada. Cada recurso debe estar conectado a un sitio para permitir una conectividad privada y segura a través de un túnel encriptado de WireGuard.",
+    "resourcesDescription": "Resources are proxies to applications running on the private network. Create a resource for any HTTP/HTTPS or raw TCP/UDP service on your private network. Each resource must be connected to a site to enable private, secure connectivity through an encrypted WireGuard tunnel.",
     "resourcesWireGuardConnect": "Conectividad segura con cifrado de Wirex Guard",
     "resourcesMultipleAuthenticationMethods": "Configurar múltiples métodos de autenticación",
     "resourcesUsersRolesAccess": "Control de acceso basado en usuarios y roles",
@@ -609,7 +611,7 @@
     "resourceSelect": "Seleccionar recurso",
     "shareLinks": "Compartir enlaces",
     "share": "Enlaces compartibles",
-    "shareDescription2": "Crea enlaces compartidos con tus recursos. Los enlaces proporcionan acceso temporal o ilimitado a tu recurso. Puede configurar la duración de caducidad del enlace cuando cree uno.",
+    "shareDescription2": "Create shareable links to resources. Links provide temporary or unlimited access to your resource. You can configure the expiration duration of the link when you create one.",
     "shareEasyCreate": "Fácil de crear y compartir",
     "shareConfigurableExpirationDuration": "Duración de caducidad configurable",
     "shareSecureAndRevocable": "Seguro y revocable",
@@ -619,19 +621,19 @@
     "unknownCommand": "Comando desconocido",
     "newtErrorFetchReleases": "No se pudo obtener la información del lanzamiento: {err}",
     "newtErrorFetchLatest": "Error obteniendo la última versión: {err}",
-    "newtEndpoint": "Punto final de Newt",
-    "newtId": "ID de Newt",
-    "newtSecretKey": "Clave secreta de Newt",
+    "newtEndpoint": "Endpoint",
+    "newtId": "ID",
+    "newtSecretKey": "Secret",
     "architecture": "Arquitectura",
     "sites": "Sitios",
-    "siteWgAnyClients": "Usa cualquier cliente de Wirex para conectarte. Tendrás que dirigirte a tus recursos internos usando la IP de compañeros.",
+    "siteWgAnyClients": "Use any WireGuard client to connect. You will have to address internal resources using the peer IP.",
     "siteWgCompatibleAllClients": "Compatible con todos los clientes de Wirex Guard",
     "siteWgManualConfigurationRequired": "Configuración manual requerida",
     "userErrorNotAdminOrOwner": "El usuario no es un administrador o propietario",
     "pangolinSettings": "Ajustes - Pangolin",
     "accessRoleYour": "Tu rol:",
-    "accessRoleSelect2": "Seleccione un rol",
-    "accessUserSelect": "Seleccione un usuario",
+    "accessRoleSelect2": "Select roles",
+    "accessUserSelect": "Select users",
     "otpEmailEnter": "Escribe un email",
     "otpEmailEnterDescription": "Pulse Enter para añadir un correo electrónico después de teclearlo en el campo de entrada.",
     "otpEmailErrorInvalid": "Dirección de correo electrónico no válida. El comodín (*) debe ser la parte local completa.",
@@ -683,7 +685,7 @@
     "resourcePincodeSetupTitle": "Definir Pincode",
     "resourcePincodeSetupTitleDescription": "Establecer un pincode para proteger este recurso",
     "resourceRoleDescription": "Los administradores siempre pueden acceder a este recurso.",
-    "resourceUsersRoles": "Usuarios y roles",
+    "resourceUsersRoles": "Access Controls",
     "resourceUsersRolesDescription": "Configurar qué usuarios y roles pueden visitar este recurso",
     "resourceUsersRolesSubmit": "Guardar usuarios y roles",
     "resourceWhitelistSave": "Guardado correctamente",
@@ -779,15 +781,15 @@
     "idpOidcConfigure": "Configuración OAuth2/OIDC",
     "idpOidcConfigureDescription": "Configurar los puntos finales y credenciales del proveedor OAuth2/OIDC",
     "idpClientId": "ID de cliente",
-    "idpClientIdDescription": "El ID del cliente OAuth2 de su proveedor de identidad",
+    "idpClientIdDescription": "The OAuth2 client ID from the identity provider",
     "idpClientSecret": "Cliente secreto",
-    "idpClientSecretDescription": "El secreto del cliente OAuth2 de su proveedor de identidad",
+    "idpClientSecretDescription": "The OAuth2 client secret from the identity provider",
     "idpAuthUrl": "URL de autorización",
     "idpAuthUrlDescription": "La URL final de autorización de OAuth2",
     "idpTokenUrl": "URL del token",
     "idpTokenUrlDescription": "La URL del endpoint del token OAuth2",
     "idpOidcConfigureAlert": "Información importante",
-    "idpOidcConfigureAlertDescription": "Después de crear el proveedor de identidad, necesitará configurar la URL de callback en la configuración de su proveedor de identidad. La URL de devolución de llamada se proporcionará después de la creación exitosa.",
+    "idpOidcConfigureAlertDescription": "After creating the identity provider, you will need to configure the callback URL in the identity provider's settings. The callback URL will be provided after successful creation.",
     "idpToken": "Configuración del token",
     "idpTokenDescription": "Configurar cómo extraer la información del usuario del token de ID",
     "idpJmespathAbout": "Acerca de JMESPath",
@@ -804,7 +806,7 @@
     "idpSubmit": "Crear proveedor de identidad",
     "orgPolicies": "Políticas de organización",
     "idpSettings": "Ajustes {idpName}",
-    "idpCreateSettingsDescription": "Configurar la configuración de su proveedor de identidad",
+    "idpCreateSettingsDescription": "Configure the settings for the identity provider",
     "roleMapping": "Mapeo de Rol",
     "orgMapping": "Mapeo de organización",
     "orgPoliciesSearch": "Buscar políticas de organización...",
@@ -839,7 +841,7 @@
     "idpUpdatedDescription": "Proveedor de identidad actualizado correctamente",
     "redirectUrl": "URL de redirección",
     "redirectUrlAbout": "Acerca de la URL de redirección",
-    "redirectUrlAboutDescription": "Esta es la URL a la que los usuarios serán redireccionados después de la autenticación. Necesitas configurar esta URL en la configuración de tu proveedor de identidad.",
+    "redirectUrlAboutDescription": "This is the URL to which users will be redirected after authentication. You need to configure this URL in the identity provider's settings.",
     "pangolinAuth": "Autenticación - Pangolin",
     "verificationCodeLengthRequirements": "Tu código de verificación debe tener 8 caracteres.",
     "errorOccurred": "Se ha producido un error",
@@ -922,6 +924,10 @@
     "passwordResetSent": "Enviaremos un código para restablecer la contraseña a esta dirección de correo electrónico.",
     "passwordResetCode": "Código de restablecimiento",
     "passwordResetCodeDescription": "Revisa tu correo electrónico para ver el código de restablecimiento.",
+    "generatePasswordResetCode": "Generate Password Reset Code",
+    "passwordResetCodeGenerated": "Password Reset Code Generated",
+    "passwordResetCodeGeneratedDescription": "Share this code with the user. They can use it to reset their password.",
+    "passwordResetUrl": "Reset URL",
     "passwordNew": "Nueva contraseña",
     "passwordNewConfirm": "Confirmar nueva contraseña",
     "changePassword": "Cambiar Contraseña",
@@ -939,6 +945,9 @@
     "pincodeAuth": "Código de autenticación",
     "pincodeSubmit2": "Enviar código",
     "passwordResetSubmit": "Reiniciar Solicitud",
+    "passwordResetAlreadyHaveCode": "Enter Password Reset Code",
+    "passwordResetSmtpRequired": "Please contact your administrator",
+    "passwordResetSmtpRequiredDescription": "A password reset code is required to reset your password. Please contact your administrator for assistance.",
     "passwordBack": "Volver a la contraseña",
     "loginBack": "Volver a iniciar sesión",
     "signup": "Regístrate",
@@ -1104,12 +1113,15 @@
     "actionListSiteResources": "Listar recursos del sitio",
     "actionUpdateSiteResource": "Actualizar recurso del sitio",
     "actionListInvitations": "Listar invitaciones",
+    "actionExportLogs": "Export Logs",
+    "actionViewLogs": "View Logs",
     "noneSelected": "Ninguno seleccionado",
     "orgNotFound2": "No se encontraron organizaciones.",
     "searchProgress": "Buscar...",
     "create": "Crear",
     "orgs": "Organizaciones",
     "loginError": "Se ha producido un error al iniciar sesión",
+    "loginRequiredForDevice": "Login is required to authenticate your device.",
     "passwordForgot": "¿Olvidaste tu contraseña?",
     "otpAuth": "Autenticación de dos factores",
     "otpAuthDescription": "Introduzca el código de su aplicación de autenticación o uno de sus códigos de copia de seguridad de un solo uso.",
@@ -1164,23 +1176,29 @@
     "sidebarHome": "Inicio",
     "sidebarSites": "Sitios",
     "sidebarResources": "Recursos",
+    "sidebarProxyResources": "Public",
+    "sidebarClientResources": "Private",
     "sidebarAccessControl": "Control de acceso",
+    "sidebarLogsAndAnalytics": "Logs & Analytics",
     "sidebarUsers": "Usuarios",
+    "sidebarAdmin": "Admin",
     "sidebarInvitations": "Invitaciones",
     "sidebarRoles": "Roles",
-    "sidebarShareableLinks": "Enlaces compartibles",
+    "sidebarShareableLinks": "Links",
     "sidebarApiKeys": "Claves API",
     "sidebarSettings": "Ajustes",
     "sidebarAllUsers": "Todos los usuarios",
     "sidebarIdentityProviders": "Proveedores de identidad",
     "sidebarLicense": "Licencia",
     "sidebarClients": "Clientes",
+    "sidebarUserDevices": "Users",
+    "sidebarMachineClients": "Machines",
     "sidebarDomains": "Dominios",
     "sidebarGeneral": "General",
     "sidebarLogAndAnalytics": "Log & Analytics",
     "sidebarBluePrints": "Planos",
     "sidebarOrganization": "Organization",
-    "sidebarLogsAnalytics": "Request Analytics",
+    "sidebarLogsAnalytics": "Analytics",
     "blueprints": "Planos",
     "blueprintsDescription": "Aplicar configuraciones declarativas y ver ejecuciones anteriores",
     "blueprintAdd": "Añadir plano",
@@ -1191,7 +1209,7 @@
     "blueprintDetailsDescription": "Ver el resultado del plano aplicado y cualquier error que haya ocurrido",
     "blueprintInfo": "Información del plano",
     "message": "Mensaje",
-    "blueprintContentsDescription": "Defina el contenido YAML describiendo su infraestructura",
+    "blueprintContentsDescription": "Define the YAML content describing the infrastructure",
     "blueprintErrorCreateDescription": "Se ha producido un error al aplicar el plano",
     "blueprintErrorCreate": "Error al crear el plano",
     "searchBlueprintProgress": "Buscar planos...",
@@ -1247,15 +1265,15 @@
     "loading": "Cargando",
     "restart": "Reiniciar",
     "domains": "Dominios",
-    "domainsDescription": "Administrar dominios de tu organización",
+    "domainsDescription": "Create and manage domains available in the organization",
     "domainsSearch": "Buscar dominios...",
     "domainAdd": "Agregar dominio",
-    "domainAddDescription": "Registrar un nuevo dominio con tu organización",
+    "domainAddDescription": "Register a new domain with to the organization",
     "domainCreate": "Crear dominio",
     "domainCreatedDescription": "Dominio creado con éxito",
     "domainDeletedDescription": "Dominio eliminado exitosamente",
-    "domainQuestionRemove": "¿Está seguro que desea eliminar el dominio de su cuenta?",
-    "domainMessageRemove": "Una vez eliminado, el dominio ya no estará asociado con su cuenta.",
+    "domainQuestionRemove": "Are you sure you want to remove the domain?",
+    "domainMessageRemove": "Once removed, the domain will no longer be associated with the organization.",
     "domainConfirmDelete": "Confirmar eliminación del dominio",
     "domainDelete": "Eliminar dominio",
     "domain": "Dominio",
@@ -1274,7 +1292,7 @@
     "pending": "Pendiente",
     "sidebarBilling": "Facturación",
     "billing": "Facturación",
-    "orgBillingDescription": "Gestiona tu información de facturación y suscripciones",
+    "orgBillingDescription": "Manage billing information and subscriptions",
     "github": "GitHub",
     "pangolinHosted": "Pangolin Alojado",
     "fossorial": "Fossorial",
@@ -1317,7 +1335,7 @@
     "domainPickerSortAsc": "A-Z",
     "domainPickerSortDesc": "Z-A",
     "domainPickerCheckingAvailability": "Comprobando disponibilidad...",
-    "domainPickerNoMatchingDomains": "No se encontraron dominios que coincidan. Intente con un dominio diferente o verifique la configuración de dominios de su organización.",
+    "domainPickerNoMatchingDomains": "No matching domains found. Try a different domain or check the organization's domain settings.",
     "domainPickerOrganizationDomains": "Dominios de la organización",
     "domainPickerProvidedDomains": "Dominios proporcionados",
     "domainPickerSubdomain": "Subdominio: {subdomain}",
@@ -1351,7 +1369,7 @@
     "billingModifySubscription": "Modificar Suscripción",
     "billingStartSubscription": "Iniciar Suscripción",
     "billingRecurringCharge": "Cargo Recurrente",
-    "billingManageSubscriptionSettings": "Administra la configuración y preferencias de tu suscripción",
+    "billingManageSubscriptionSettings": "Manage subscription settings and preferences",
     "billingNoActiveSubscription": "No tienes una suscripción activa. Inicia tu suscripción para aumentar los límites de uso.",
     "billingFailedToLoadSubscription": "Error al cargar la suscripción",
     "billingFailedToLoadUsage": "Error al cargar el uso",
@@ -1362,9 +1380,9 @@
     "billingPortalError": "Error del portal",
     "billingDataUsageInfo": "Se le cobran todos los datos transferidos a través de sus túneles seguros cuando se conectan a la nube. Esto incluye tanto tráfico entrante como saliente a través de todos sus sitios. Cuando alcance su límite, sus sitios se desconectarán hasta que actualice su plan o reduzca el uso. Los datos no se cargan cuando se usan nodos.",
     "billingOnlineTimeInfo": "Se te cobrará en función del tiempo que tus sitios permanezcan conectados a la nube. Por ejemplo, 44.640 minutos equivale a un sitio que funciona 24/7 durante un mes completo. Cuando alcance su límite, sus sitios se desconectarán hasta que mejore su plan o reduzca el uso. No se cargará el tiempo al usar nodos.",
-    "billingUsersInfo": "Se te cobra por cada usuario en tu organización. La facturación se calcula diariamente según la cantidad de cuentas de usuario activas en tu organización.",
-    "billingDomainInfo": "Se te cobra por cada dominio en tu organización. La facturación se calcula diariamente según la cantidad de cuentas de dominio activas en tu organización.",
-    "billingRemoteExitNodesInfo": "Se te cobra por cada nodo gestionado en tu organización. La facturación se calcula diariamente según la cantidad de nodos gestionados activos en tu organización.",
+    "billingUsersInfo": "You're charged for each user in the organization. Billing is calculated daily based on the number of active user accounts in your org.",
+    "billingDomainInfo": "You're charged for each domain in the organization. Billing is calculated daily based on the number of active domain accounts in your org.",
+    "billingRemoteExitNodesInfo": "You're charged for each managed Node in the organization. Billing is calculated daily based on the number of active managed Nodes in your org.",
     "domainNotFound": "Dominio no encontrado",
     "domainNotFoundDescription": "Este recurso está deshabilitado porque el dominio ya no existe en nuestro sistema. Por favor, establece un nuevo dominio para este recurso.",
     "failed": "Fallido",
@@ -1456,23 +1474,23 @@
     "errorCreatingClient": "Error al crear el cliente",
     "clientDefaultsNotFound": "Configuración predeterminada del cliente no encontrada",
     "createClient": "Crear cliente",
-    "createClientDescription": "Crear un cliente nuevo para conectar a sus sitios",
+    "createClientDescription": "Create a new client to access private resources",
     "seeAllClients": "Ver todos los clientes",
     "clientInformation": "Información del cliente",
     "clientNamePlaceholder": "Nombre del cliente",
     "address": "Dirección",
     "subnetPlaceholder": "Subred",
-    "addressDescription": "La dirección que este cliente utilizará para la conectividad",
+    "addressDescription": "The internal address of the client. Must fall within the organization's subnet.",
     "selectSites": "Seleccionar sitios",
     "sitesDescription": "El cliente tendrá conectividad con los sitios seleccionados",
     "clientInstallOlm": "Instalar Olm",
     "clientInstallOlmDescription": "Obtén Olm funcionando en tu sistema",
-    "clientOlmCredentials": "Credenciales Olm",
-    "clientOlmCredentialsDescription": "Así es como Olm se autentificará con el servidor",
-    "olmEndpoint": "Punto final Olm",
-    "olmId": "ID de Olm",
-    "olmSecretKey": "Clave secreta de Olm",
-    "clientCredentialsSave": "Guarda tus credenciales",
+    "clientOlmCredentials": "Credentials",
+    "clientOlmCredentialsDescription": "This is how the client will authenticate with the server",
+    "olmEndpoint": "Endpoint",
+    "olmId": "ID",
+    "olmSecretKey": "Secret",
+    "clientCredentialsSave": "Save the Credentials",
     "clientCredentialsSaveDescription": "Sólo podrás verlo una vez. Asegúrate de copiarlo a un lugar seguro.",
     "generalSettingsDescription": "Configura la configuración general para este cliente",
     "clientUpdated": "Cliente actualizado",
@@ -1483,9 +1501,7 @@
     "sitesFetchError": "Se ha producido un error al recuperar los sitios.",
     "olmErrorFetchReleases": "Se ha producido un error al recuperar las versiones de Olm.",
     "olmErrorFetchLatest": "Se ha producido un error al recuperar la última versión de Olm.",
-    "remoteSubnets": "Subredes remotas",
     "enterCidrRange": "Ingresa el rango CIDR",
-    "remoteSubnetsDescription": "Agregue rangos CIDR que se puedan acceder desde este sitio de forma remota usando clientes. Utilice el formato como 10.0.0.0/24. Esto SOLO se aplica a la conectividad del cliente VPN.",
     "resourceEnableProxy": "Habilitar proxy público",
     "resourceEnableProxyDescription": "Habilite el proxy público para este recurso. Esto permite el acceso al recurso desde fuera de la red a través de la nube en un puerto abierto. Requiere configuración de Traefik.",
     "externalProxyEnabled": "Proxy externo habilitado",
@@ -1503,14 +1519,15 @@
     "enableHealthChecksDescription": "Controlar la salud de este objetivo. Puedes supervisar un punto final diferente al objetivo si es necesario.",
     "healthScheme": "Método",
     "healthSelectScheme": "Seleccionar método",
+    "healthCheckPortInvalid": "Health check port must be between 1 and 65535",
     "healthCheckPath": "Ruta",
     "healthHostname": "IP / Nombre del host",
     "healthPort": "Puerto",
     "healthCheckPathDescription": "La ruta para comprobar el estado de salud.",
-    "healthyIntervalSeconds": "Intervalo Saludable",
-    "unhealthyIntervalSeconds": "Intervalo No Saludable",
+    "healthyIntervalSeconds": "Healthy Interval (sec)",
+    "unhealthyIntervalSeconds": "Unhealthy Interval (sec)",
     "IntervalSeconds": "Intervalo Saludable",
-    "timeoutSeconds": "Tiempo de Espera",
+    "timeoutSeconds": "Timeout (sec)",
     "timeIsInSeconds": "El tiempo está en segundos",
     "retryAttempts": "Intentos de Reintento",
     "expectedResponseCodes": "Códigos de respuesta esperados",
@@ -1546,12 +1563,12 @@
     "resourceEditDomain": "Editar dominio",
     "siteName": "Nombre del sitio",
     "proxyPort": "Puerto",
-    "resourcesTableProxyResources": "Recursos de proxy",
-    "resourcesTableClientResources": "Recursos del cliente",
+    "resourcesTableProxyResources": "Public",
+    "resourcesTableClientResources": "Private",
     "resourcesTableNoProxyResourcesFound": "No se encontraron recursos de proxy.",
     "resourcesTableNoInternalResourcesFound": "No se encontraron recursos internos.",
     "resourcesTableDestination": "Destino",
-    "resourcesTableTheseResourcesForUseWith": "Estos recursos son para uso con",
+    "resourcesTableAlias": "Alias",
     "resourcesTableClients": "Clientes",
     "resourcesTableAndOnlyAccessibleInternally": "y solo son accesibles internamente cuando se conectan con un cliente.",
     "resourcesTableNoTargets": "Sin objetivos",
@@ -1560,8 +1577,8 @@
     "resourcesTableOffline": "Desconectado",
     "resourcesTableUnknown": "Desconocido",
     "resourcesTableNotMonitored": "No supervisado",
-    "editInternalResourceDialogEditClientResource": "Editar recurso del cliente",
-    "editInternalResourceDialogUpdateResourceProperties": "Actualizar las propiedades del recurso y la configuración del objetivo para {resourceName}.",
+    "editInternalResourceDialogEditClientResource": "Edit Private Resource",
+    "editInternalResourceDialogUpdateResourceProperties": "Update the resource configuration and access controls for {resourceName}",
     "editInternalResourceDialogResourceProperties": "Propiedades del recurso",
     "editInternalResourceDialogName": "Nombre",
     "editInternalResourceDialogProtocol": "Protocolo",
@@ -1580,11 +1597,22 @@
     "editInternalResourceDialogInvalidIPAddressFormat": "Formato de dirección IP inválido",
     "editInternalResourceDialogDestinationPortMin": "El puerto de destino debe ser al menos 1",
     "editInternalResourceDialogDestinationPortMax": "El puerto de destino debe ser menor de 65536",
+    "editInternalResourceDialogPortModeRequired": "Protocol, proxy port, and destination port are required for port mode",
+    "editInternalResourceDialogMode": "Mode",
+    "editInternalResourceDialogModePort": "Port",
+    "editInternalResourceDialogModeHost": "Host",
+    "editInternalResourceDialogModeCidr": "CIDR",
+    "editInternalResourceDialogDestination": "Destination",
+    "editInternalResourceDialogDestinationHostDescription": "The IP address or hostname of the resource on the site's network.",
+    "editInternalResourceDialogDestinationIPDescription": "The IP or hostname address of the resource on the site's network.",
+    "editInternalResourceDialogDestinationCidrDescription": "The CIDR range of the resource on the site's network.",
+    "editInternalResourceDialogAlias": "Alias",
+    "editInternalResourceDialogAliasDescription": "An optional internal DNS alias for this resource.",
     "createInternalResourceDialogNoSitesAvailable": "No hay sitios disponibles",
     "createInternalResourceDialogNoSitesAvailableDescription": "Necesita tener al menos un sitio de Newt con una subred configurada para crear recursos internos.",
     "createInternalResourceDialogClose": "Cerrar",
-    "createInternalResourceDialogCreateClientResource": "Crear recurso del cliente",
-    "createInternalResourceDialogCreateClientResourceDescription": "Crear un nuevo recurso que será accesible para los clientes conectados al sitio seleccionado.",
+    "createInternalResourceDialogCreateClientResource": "Create Private Resource",
+    "createInternalResourceDialogCreateClientResourceDescription": "Create a new resource that will only be accessible to clients connected to the organization",
     "createInternalResourceDialogResourceProperties": "Propiedades del recurso",
     "createInternalResourceDialogName": "Nombre",
     "createInternalResourceDialogSite": "Sitio",
@@ -1613,11 +1641,22 @@
     "createInternalResourceDialogInvalidIPAddressFormat": "Formato de dirección IP inválido",
     "createInternalResourceDialogDestinationPortMin": "El puerto de destino debe ser al menos 1",
     "createInternalResourceDialogDestinationPortMax": "El puerto de destino debe ser menor de 65536",
+    "createInternalResourceDialogPortModeRequired": "Protocol, proxy port, and destination port are required for port mode",
+    "createInternalResourceDialogMode": "Mode",
+    "createInternalResourceDialogModePort": "Port",
+    "createInternalResourceDialogModeHost": "Host",
+    "createInternalResourceDialogModeCidr": "CIDR",
+    "createInternalResourceDialogDestination": "Destination",
+    "createInternalResourceDialogDestinationHostDescription": "The IP address or hostname of the resource on the site's network.",
+    "createInternalResourceDialogDestinationCidrDescription": "The CIDR range of the resource on the site's network.",
+    "createInternalResourceDialogAlias": "Alias",
+    "createInternalResourceDialogAliasDescription": "An optional internal DNS alias for this resource.",
     "siteConfiguration": "Configuración",
     "siteAcceptClientConnections": "Aceptar conexiones de clientes",
-    "siteAcceptClientConnectionsDescription": "Permitir que otros dispositivos se conecten a través de esta instancia Newt como una puerta de enlace utilizando clientes.",
-    "siteAddress": "Dirección del sitio",
-    "siteAddressDescription": "Especifique la dirección IP del host que los clientes deben usar para conectarse. Esta es la dirección interna del sitio en la red de Pangolín para que los clientes dirijan. Debe estar dentro de la subred de la organización.",
+    "siteAcceptClientConnectionsDescription": "Allow user devices and clients to access resources on this site. This can be changed later.",
+    "siteAddress": "Site Address (Advanced)",
+    "siteAddressDescription": "The internal address of the site. Must fall within the organization's subnet.",
+    "siteNameDescription": "The display name of the site that can be changed later.",
     "autoLoginExternalIdp": "Inicio de sesión automático con IDP externo",
     "autoLoginExternalIdpDescription": "Redirigir inmediatamente al usuario al IDP externo para autenticación.",
     "selectIdp": "Seleccionar IDP",
@@ -1631,7 +1670,7 @@
     "autoLoginErrorNoRedirectUrl": "No se recibió URL de redirección del proveedor de identidad.",
     "autoLoginErrorGeneratingUrl": "Error al generar URL de autenticación.",
     "remoteExitNodeManageRemoteExitNodes": "Nodos remotos",
-    "remoteExitNodeDescription": "Autoalojar uno o más nodos remotos para extender la conectividad de red y reducir la dependencia de la nube",
+    "remoteExitNodeDescription": "Self-host one or more remote nodes to extend network connectivity and reduce reliance on the cloud",
     "remoteExitNodes": "Nodos",
     "searchRemoteExitNodes": "Buscar nodos...",
     "remoteExitNodeAdd": "Añadir Nodo",
@@ -1643,11 +1682,11 @@
     "sidebarRemoteExitNodes": "Nodos remotos",
     "remoteExitNodeCreate": {
         "title": "Crear Nodo",
-        "description": "Crear un nuevo nodo para extender la conectividad de red",
+        "description": "Create a new node to extend network connectivity",
         "viewAllButton": "Ver todos los nodos",
         "strategy": {
             "title": "Estrategia de Creación",
-            "description": "Elija esto para configurar manualmente su nodo o generar nuevas credenciales.",
+            "description": "Choose this to manually configure the node or generate new credentials.",
             "adopt": {
                 "title": "Adoptar Nodo",
                 "description": "Elija esto si ya tiene las credenciales para el nodo."
@@ -1668,7 +1707,7 @@
         },
         "generate": {
             "title": "Credenciales Generadas",
-            "description": "Utilice estas credenciales generadas para configurar su nodo",
+            "description": "Use these generated credentials to configure the node",
             "nodeIdTitle": "ID del nodo",
             "secretTitle": "Secreto",
             "saveCredentialsTitle": "Agregar Credenciales a la Configuración",
@@ -1744,16 +1783,16 @@
     "idpTypeLabel": "Tipo de proveedor de identidad",
     "roleMappingExpressionPlaceholder": "e.g., contiene(grupos, 'administrador') && 'administrador' || 'miembro'",
     "idpGoogleConfiguration": "Configuración de Google",
-    "idpGoogleConfigurationDescription": "Configura tus credenciales de Google OAuth2",
-    "idpGoogleClientIdDescription": "Tu ID de cliente de Google OAuth2",
-    "idpGoogleClientSecretDescription": "Tu secreto de cliente de Google OAuth2",
+    "idpGoogleConfigurationDescription": "Configure the Google OAuth2 credentials",
+    "idpGoogleClientIdDescription": "Google OAuth2 Client ID",
+    "idpGoogleClientSecretDescription": "Google OAuth2 Client Secret",
     "idpAzureConfiguration": "Configuración de Azure Entra ID",
-    "idpAzureConfigurationDescription": "Configure sus credenciales de Azure Entra ID OAuth2",
+    "idpAzureConfigurationDescription": "Configure Azure Entra ID OAuth2 credentials",
     "idpTenantId": "ID del inquilino",
-    "idpTenantIdPlaceholder": "su-inquilino-id",
-    "idpAzureTenantIdDescription": "Su ID de inquilino de Azure (encontrado en el resumen de Azure Active Directory)",
-    "idpAzureClientIdDescription": "Tu ID de Cliente de Registro de Azure App",
-    "idpAzureClientSecretDescription": "Tu Azure App Registro Cliente secreto",
+    "idpTenantIdPlaceholder": "tenant-id",
+    "idpAzureTenantIdDescription": "Azure tenant ID (found in Azure Active Directory overview)",
+    "idpAzureClientIdDescription": "Azure App Registration Client ID",
+    "idpAzureClientSecretDescription": "Azure App Registration Client Secret",
     "idpGoogleTitle": "Google",
     "idpGoogleAlt": "Google",
     "idpAzureTitle": "Azure Entra ID",
@@ -1761,14 +1800,14 @@
     "idpGoogleConfigurationTitle": "Configuración de Google",
     "idpAzureConfigurationTitle": "Configuración de Azure Entra ID",
     "idpTenantIdLabel": "ID del inquilino",
-    "idpAzureClientIdDescription2": "Tu ID de Cliente de Registro de Azure App",
-    "idpAzureClientSecretDescription2": "Tu Azure App Registro Cliente secreto",
+    "idpAzureClientIdDescription2": "Azure App Registration Client ID",
+    "idpAzureClientSecretDescription2": "Azure App Registration Client Secret",
     "idpGoogleDescription": "Proveedor OAuth2/OIDC de Google",
     "idpAzureDescription": "Microsoft Azure OAuth2/OIDC provider",
     "subnet": "Subred",
     "subnetDescription": "La subred para la configuración de red de esta organización.",
     "authPage": "Página Auth",
-    "authPageDescription": "Configurar la página de autenticación de su organización",
+    "authPageDescription": "Configure the auth page for the organization",
     "authPageDomain": "Dominio de la página Auth",
     "noDomainSet": "Ningún dominio establecido",
     "changeDomain": "Cambiar dominio",
@@ -1778,7 +1817,7 @@
     "setAuthPageDomain": "Establecer dominio Auth Page",
     "failedToFetchCertificate": "Error al obtener el certificado",
     "failedToRestartCertificate": "Error al reiniciar el certificado",
-    "addDomainToEnableCustomAuthPages": "Añadir un dominio para habilitar páginas de autenticación personalizadas para su organización",
+    "addDomainToEnableCustomAuthPages": "Add a domain to enable custom authentication pages for the organization",
     "selectDomainForOrgAuthPage": "Seleccione un dominio para la página de autenticación de la organización",
     "domainPickerProvidedDomain": "Dominio proporcionado",
     "domainPickerFreeProvidedDomain": "Dominio proporcionado gratis",
@@ -1793,7 +1832,7 @@
     "domainPickerInvalidSubdomainCannotMakeValid": "No se ha podido hacer válido \"{sub}\" para {domain}.",
     "domainPickerSubdomainSanitized": "Subdominio saneado",
     "domainPickerSubdomainCorrected": "\"{sub}\" fue corregido a \"{sanitized}\"",
-    "orgAuthSignInTitle": "Inicia sesión en tu organización",
+    "orgAuthSignInTitle": "Sign in to the organization",
     "orgAuthChooseIdpDescription": "Elige tu proveedor de identidad para continuar",
     "orgAuthNoIdpConfigured": "Esta organización no tiene ningún proveedor de identidad configurado. En su lugar puedes iniciar sesión con tu identidad de Pangolin.",
     "orgAuthSignInWithPangolin": "Iniciar sesión con Pangolin",
@@ -1811,7 +1850,7 @@
     "enableTwoFactorAuthentication": "Habilitar autenticación de doble factor",
     "completeSecuritySteps": "Pasos de seguridad completos",
     "securitySettings": "Ajustes de seguridad",
-    "securitySettingsDescription": "Configurar políticas de seguridad para su organización",
+    "securitySettingsDescription": "Configure security policies for the organization",
     "requireTwoFactorForAllUsers": "Requiere autenticación de doble factor para todos los usuarios",
     "requireTwoFactorDescription": "Cuando está activado, todos los usuarios internos de esta organización deben tener habilitada la autenticación de dos factores para acceder a la organización.",
     "requireTwoFactorDisabledDescription": "Esta característica requiere una licencia válida (Enterprise) o una suscripción activa (SaBudget)",
@@ -1874,8 +1913,12 @@
     "enterpriseEdition": "Edición corporativa",
     "unlicensed": "Sin licencia",
     "beta": "Beta",
-    "manageClients": "Administrar clientes",
-    "manageClientsDescription": "Los clientes son dispositivos que pueden conectarse a sus sitios",
+    "manageUserDevices": "User Devices",
+    "manageUserDevicesDescription": "View and manage devices that users use to privately connect to resources",
+    "manageMachineClients": "Manage Machine Clients",
+    "manageMachineClientsDescription": "Create and manage clients that servers and systems use to privately connect to resources",
+    "clientsTableUserClients": "User",
+    "clientsTableMachineClients": "Machine",
     "licenseTableValidUntil": "Válido hasta",
     "saasLicenseKeysSettingsTitle": "Licencias empresariales",
     "saasLicenseKeysSettingsDescription": "Generar y administrar claves de licencia Enterprise para instancias Pangolin autoalojadas",
@@ -2075,7 +2118,7 @@
     "preferWildcardCert": "Certificado de comodín preferido",
     "unverified": "Sin verificar",
     "domainSetting": "Ajustes de dominio",
-    "domainSettingDescription": "Configurar ajustes para tu dominio",
+    "domainSettingDescription": "Configure settings for the domain",
     "preferWildcardCertDescription": "Intento de generar un certificado comodín (requiere una resolución de certificados correctamente configurada).",
     "recordName": "Nombre del registro",
     "auto": "Auto",
@@ -2089,15 +2132,15 @@
     "olmUpdateAvailableInfo": "Una versión actualizada de Olm está disponible. Por favor, actualice a la última versión para obtener la mejor experiencia.",
     "client": "Cliente",
     "proxyProtocol": "Configuración del Protocolo Proxy",
-    "proxyProtocolDescription": "Configurar el protocolo de proxy para preservar las direcciones IP del cliente para los servicios TCP/UDP.",
+    "proxyProtocolDescription": "Configure Proxy Protocol to preserve client IP addresses for TCP services.",
     "enableProxyProtocol": "Habilitar protocolo proxy",
-    "proxyProtocolInfo": "Conservar direcciones IP del cliente para backends TCP/UDP",
+    "proxyProtocolInfo": "Preserve client IP addresses for TCP backends",
     "proxyProtocolVersion": "Versión del Protocolo Proxy",
     "version1": " Versión 1 (Recomendado)",
     "version2": "Versión 2",
     "versionDescription": "La versión 1 está basada en texto y es ampliamente soportada. La versión 2 es binaria y más eficiente pero menos compatible.",
     "warning": "Advertencia",
-    "proxyProtocolWarning": "Su aplicación de backend debe estar configurada para aceptar conexiones Proxy Protocol. Si su backend no soporta Proxy Protocol, habilitando esto romperá todas las conexiones. Asegúrese de configurar su backend para que confíe en las cabeceras del protocolo Proxy de Traefik.",
+    "proxyProtocolWarning": "The backend application must be configured to accept Proxy Protocol connections. If your backend doesn't support Proxy Protocol, enabling this will break all connections so only enable this if you know what you're doing. Make sure to configure your backend to trust Proxy Protocol headers from Traefik.",
     "restarting": "Reiniciando...",
     "manual": "Manual",
     "messageSupport": "Soporte de mensajes",
@@ -2120,6 +2163,43 @@
     "supportMessageSent": "¡Mensaje enviado!",
     "supportWillContact": "¡Estaremos en contacto en breve!",
     "selectLogRetention": "Seleccionar retención de registro",
+    "terms": "Terms",
+    "privacy": "Privacy",
+    "security": "Security",
+    "docs": "Docs",
+    "deviceActivation": "Device activation",
+    "deviceCodeInvalidFormat": "Code must be 9 characters (e.g., A1AJ-N5JD)",
+    "deviceCodeInvalidOrExpired": "Invalid or expired code",
+    "deviceCodeVerifyFailed": "Failed to verify device code",
+    "signedInAs": "Signed in as",
+    "deviceCodeEnterPrompt": "Enter the code displayed on the device",
+    "continue": "Continue",
+    "deviceUnknownLocation": "Unknown location",
+    "deviceAuthorizationRequested": "This authorization was requested from {location} on {date}. Make sure you trust this device as it will get access to the account.",
+    "deviceLabel": "Device: {deviceName}",
+    "deviceWantsAccess": "wants to access your account",
+    "deviceExistingAccess": "Existing access:",
+    "deviceFullAccess": "Full access to your account",
+    "deviceOrganizationsAccess": "Access to all organizations your account has access to",
+    "deviceAuthorize": "Authorize {applicationName}",
+    "deviceConnected": "Device Connected!",
+    "deviceAuthorizedMessage": "Device is authorized to access your account.",
+    "pangolinCloud": "Pangolin Cloud",
+    "viewDevices": "View Devices",
+    "viewDevicesDescription": "Manage your connected devices",
+    "noDevices": "No devices found",
+    "dateCreated": "Date Created",
+    "unnamedDevice": "Unnamed Device",
+    "deviceQuestionRemove": "Are you sure you want to delete this device?",
+    "deviceMessageRemove": "This action cannot be undone.",
+    "deviceDeleteConfirm": "Delete Device",
+    "deleteDevice": "Delete Device",
+    "errorLoadingDevices": "Error loading devices",
+    "failedToLoadDevices": "Failed to load devices",
+    "deviceDeleted": "Device deleted",
+    "deviceDeletedDescription": "The device has been successfully deleted.",
+    "errorDeletingDevice": "Error deleting device",
+    "failedToDeleteDevice": "Failed to delete device",
     "showColumns": "Mostrar columnas",
     "hideColumns": "Ocultar columnas",
     "columnVisibility": "Visibilidad de la columna",
@@ -2134,6 +2214,10 @@
     "enableSelected": "Habilitar seleccionados",
     "disableSelected": "Desactivar Seleccionado",
     "checkSelectedStatus": "Comprobar el estado de selección",
+    "clients": "Clients",
+    "accessClientSelect": "Select machine clients",
+    "resourceClientDescription": "Machine clients that can access this resource",
+    "regenerate": "Regenerate",
     "credentials": "Credenciales",
     "savecredentials": "Guardar credenciales",
     "regeneratecredentials": "Re-clave",
@@ -2151,7 +2235,6 @@
     "endpoint": "Endpoint",
     "Id": "Id",
     "SecretKey": "Clave secreta",
-    "featureDisabledTooltip": "Esta característica sólo está disponible en el plan empresarial y requiere una licencia para usarla.",
     "niceId": "ID bonita",
     "niceIdUpdated": "Bonito ID actualizado",
     "niceIdUpdatedSuccessfully": "Bonito ID actualizado correctamente",
@@ -2160,5 +2243,15 @@
     "niceIdCannotBeEmpty": "El ID de Niza no puede estar vacío",
     "enterIdentifier": "Introducir identificador",
     "identifier": "Identifier",
-    "noData": "No Data"
+    "deviceLoginUseDifferentAccount": "Not you? Use a different account.",
+    "deviceLoginDeviceRequestingAccessToAccount": "A device is requesting access to this account.",
+    "noData": "No Data",
+    "machineClients": "Machine Clients",
+    "install": "Install",
+    "run": "Run",
+    "clientNameDescription": "The display name of the client that can be changed later.",
+    "clientAddress": "Client Address (Advanced)",
+    "setupFailedToFetchSubnet": "Failed to fetch default subnet",
+    "setupSubnetAdvanced": "Subnet (Advanced)",
+    "setupSubnetDescription": "The subnet for this organization's internal network."
 }

messages/fr-FR.json

@@ -1,12 +1,12 @@
 {
-    "setupCreate": "Créez votre organisation, vos nœuds et vos ressources",
+    "setupCreate": "Create the organization, site, and resources",
     "setupNewOrg": "Nouvelle organisation",
     "setupCreateOrg": "Créer une organisation",
     "setupCreateResources": "Créer des ressources",
     "setupOrgName": "Nom de l'organisation",
-    "orgDisplayName": "Ceci est le nom affiché de votre organisation.",
+    "orgDisplayName": "This is the display name of the organization.",
     "orgId": "ID de l'organisation",
-    "setupIdentifierMessage": "Ceci est l'identifiant unique de votre organisation. Il est différent du nom.",
+    "setupIdentifierMessage": "This is the unique identifier for the organization.",
     "setupErrorIdentifier": "Cet ID est déjà utilisé. Veuillez en choisir un autre.",
     "componentsErrorNoMemberCreate": "Vous n'êtes actuellement membre d'aucune organisation. Créez une organisation pour commencer.",
     "componentsErrorNoMember": "Vous n'êtes actuellement membre d'aucune organisation.",
@@ -50,10 +50,10 @@
     "siteMessageRemove": "Une fois supprimé, le nœud ne sera plus accessible. Toutes les cibles associées au nœud seront également supprimées.",
     "siteQuestionRemove": "Êtes-vous sûr de vouloir supprimer ce nœud de l'organisation ?",
     "siteManageSites": "Gérer les nœuds",
-    "siteDescription": "Autoriser la connexion à votre réseau via des tunnels sécurisés",
+    "siteDescription": "Create and manage sites to enable connectivity to private networks",
     "siteCreate": "Créer un nœud",
     "siteCreateDescription2": "Suivez les étapes ci-dessous pour créer et connecter un nouveau nœud",
-    "siteCreateDescription": "Créez un nouveau nœud pour commencer à connecter vos ressources",
+    "siteCreateDescription": "Create a new site to start connecting resources",
     "close": "Fermer",
     "siteErrorCreate": "Erreur lors de la création du nœud",
     "siteErrorCreateKeyPair": "Clés ou nœud par défaut introuvable",
@@ -74,7 +74,7 @@
     "siteInstallNewt": "Installer Newt",
     "siteInstallNewtDescription": "Faites fonctionner Newt sur votre système",
     "WgConfiguration": "Configuration WireGuard",
-    "WgConfigurationDescription": "Utilisez la configuration suivante pour vous connecter à votre réseau",
+    "WgConfigurationDescription": "Use the following configuration to connect to the network",
     "operatingSystem": "Système d'exploitation",
     "commands": "Commandes",
     "recommended": "Recommandé",
@@ -87,32 +87,32 @@
     "siteUpdated": "Nœud mis à jour",
     "siteUpdatedDescription": "Le nœud a été mis à jour.",
     "siteGeneralDescription": "Configurer les paramètres par défaut de ce nœud",
-    "siteSettingDescription": "Configurer les paramètres de votre nœud",
+    "siteSettingDescription": "Configure the settings on the site",
     "siteSetting": "Paramètres de {siteName}",
-    "siteNewtTunnel": "Tunnel Newt (Recommandé)",
-    "siteNewtTunnelDescription": "La façon la plus simple de créer un point d'entrée dans votre réseau. Pas de configuration supplémentaire.",
+    "siteNewtTunnel": "Newt Site (Recommended)",
+    "siteNewtTunnelDescription": "Easiest way to create an entrypoint into any network. No extra setup.",
     "siteWg": "WireGuard basique",
     "siteWgDescription": "Utilisez n'importe quel client WireGuard pour établir un tunnel. Configuration NAT manuelle requise.",
     "siteWgDescriptionSaas": "Utilisez n'importe quel client WireGuard pour établir un tunnel. Configuration NAT manuelle requise.",
     "siteLocalDescription": "Ressources locales seulement. Pas de tunneling.",
     "siteLocalDescriptionSaas": "Ressources locales uniquement. Pas de tunneling. Disponible uniquement sur les nœuds distants.",
     "siteSeeAll": "Voir tous les nœuds",
-    "siteTunnelDescription": "Déterminez comment vous voulez vous connecter à votre nœud",
-    "siteNewtCredentials": "Identifiants Newt",
-    "siteNewtCredentialsDescription": "C'est comme ça que Newt s'authentifiera avec le serveur",
-    "siteCredentialsSave": "Enregistrez vos identifiants",
+    "siteTunnelDescription": "Determine how you want to connect to the site",
+    "siteNewtCredentials": "Credentials",
+    "siteNewtCredentialsDescription": "This is how the site will authenticate with the server",
+    "siteCredentialsSave": "Save the Credentials",
     "siteCredentialsSaveDescription": "Vous ne pourrez voir cela qu'une seule fois. Assurez-vous de l'enregistrer dans un endroit sécurisé.",
     "siteInfo": "Informations du nœud",
     "status": "Statut",
     "shareTitle": "Gérer les liens partageables",
-    "shareDescription": "Créez des liens partageables pour accorder un accès temporaire ou permanent à vos ressources",
+    "shareDescription": "Create shareable links to grant temporary or permanent access to proxy resources",
     "shareSearch": "Rechercher des liens partageables...",
     "shareCreate": "Créer un lien partageable",
     "shareErrorDelete": "Impossible de supprimer le lien",
     "shareErrorDeleteMessage": "Une erreur s'est produite lors de la suppression du lien",
     "shareDeleted": "Lien supprimé",
     "shareDeletedDescription": "Le lien a été supprimé",
-    "shareTokenDescription": "Votre jeton d'accès peut être fourni de deux façons : en tant que paramètre de requête ou dans les en-têtes de la requête. Il doit être transmis par le client à chaque demande d'accès authentifié.",
+    "shareTokenDescription": "The access token can be passed in two ways: as a query parameter or in the request headers. These must be passed from the client on every request for authenticated access.",
     "accessToken": "Jeton d'accès",
     "usageExamples": "Exemples d'utilisation",
     "tokenId": "ID du jeton",
@@ -121,7 +121,7 @@
     "importantNote": "Note importante",
     "shareImportantDescription": "Pour des raisons de sécurité, l'utilisation des en-têtes est recommandée par rapport aux paramètres de la requête, dans la mesure du possible, car les paramètres de requête peuvent être enregistrés dans les journaux du serveur ou dans l'historique du navigateur.",
     "token": "Jeton",
-    "shareTokenSecurety": "Gardez votre jeton d'accès sécurisé. Ne le partagez pas dans des zones accessibles au public ou dans du code côté client.",
+    "shareTokenSecurety": "Keep the access token secure. Do not share it in publicly accessible areas or client-side code.",
     "shareErrorFetchResource": "Impossible de récupérer les ressources",
     "shareErrorFetchResourceDescription": "Une erreur est survenue lors de la récupération des ressources",
     "shareErrorCreate": "Impossible de créer le lien partageable",
@@ -144,8 +144,10 @@
     "expires": "Expire",
     "never": "Jamais",
     "shareErrorSelectResource": "Veuillez sélectionner une ressource",
-    "resourceTitle": "Gérer les ressources",
-    "resourceDescription": "Créez des proxys sécurisés pour vos applications privées",
+    "proxyResourceTitle": "Manage Public Resources",
+    "proxyResourceDescription": "Create and manage resources that are publicly accessible through a web browser",
+    "clientResourceTitle": "Manage Private Resources",
+    "clientResourceDescription": "Create and manage resources that are only accessible through a connected client",
     "resourcesSearch": "Chercher des ressources...",
     "resourceAdd": "Ajouter une ressource",
     "resourceErrorDelte": "Erreur lors de la de suppression de la ressource",
@@ -155,9 +157,9 @@
     "resourceMessageRemove": "Une fois supprimée, la ressource ne sera plus accessible. Toutes les cibles associées à la ressource seront également supprimées.",
     "resourceQuestionRemove": "Êtes-vous sûr de vouloir retirer la ressource de l'organisation ?",
     "resourceHTTP": "Ressource HTTPS",
-    "resourceHTTPDescription": "Requêtes de proxy vers votre application via HTTPS en utilisant un sous-domaine ou un domaine racine.",
+    "resourceHTTPDescription": "Proxy requests to the app over HTTPS using a subdomain or base domain.",
     "resourceRaw": "Ressource TCP/UDP brute",
-    "resourceRawDescription": "Demandes de proxy vers votre application via TCP/UDP en utilisant un port.",
+    "resourceRawDescription": "Proxy requests to the app over TCP/UDP using a port number. This only works when sites are connected to nodes.",
     "resourceCreate": "Créer une ressource",
     "resourceCreateDescription": "Suivez les étapes ci-dessous pour créer une nouvelle ressource",
     "resourceSeeAll": "Voir toutes les ressources",
@@ -171,22 +173,22 @@
     "noCountryFound": "Aucun pays trouvé.",
     "siteSelectionDescription": "Ce site fournira la connectivité à la cible.",
     "resourceType": "Type de ressource",
-    "resourceTypeDescription": "Détermine comment vous voulez accéder à votre ressource",
+    "resourceTypeDescription": "Determine how to access the resource",
     "resourceHTTPSSettings": "Paramètres HTTPS",
-    "resourceHTTPSSettingsDescription": "Configure comment votre ressource sera accédée via HTTPS",
+    "resourceHTTPSSettingsDescription": "Configure how the resource will be accessed over HTTPS",
     "domainType": "Type de domaine",
     "subdomain": "Sous-domaine",
     "baseDomain": "Domaine racine",
-    "subdomnainDescription": "Le sous-domaine depuis lequel cette ressource sera accessible.",
+    "subdomnainDescription": "The subdomain where the resource will be accessible.",
     "resourceRawSettings": "Paramètres TCP/UDP",
-    "resourceRawSettingsDescription": "Configurer comment votre ressource sera accédée via TCP/UDP. Vous mappez la ressource à un port sur le serveur Pangolin, de sorte que vous puissiez accéder à la ressource depuis ip-publique-du-serveur:port-mappé.",
+    "resourceRawSettingsDescription": "Configure how the resource will be accessed over TCP/UDP. You map the resource to a port on the host Pangolin server, so you can access the resource from server-public-ip:mapped-port.",
     "protocol": "Protocole",
     "protocolSelect": "Choisir un protocole",
     "resourcePortNumber": "Numéro de port",
     "resourcePortNumberDescription": "Le numéro de port externe pour les requêtes de proxy.",
     "cancel": "Abandonner",
     "resourceConfig": "Snippets de configuration",
-    "resourceConfigDescription": "Copiez et collez ces modules de configuration pour configurer votre ressource TCP/UDP",
+    "resourceConfigDescription": "Copy and paste these configuration snippets to set up the TCP/UDP resource",
     "resourceAddEntrypoints": "Traefik: Ajouter des points d'entrée",
     "resourceExposePorts": "Gerbil: Exposer des ports dans Docker Compose",
     "resourceLearnRaw": "Apprenez à configurer les ressources TCP/UDP",
@@ -202,14 +204,14 @@
     "proxy": "Proxy",
     "internal": "Interne",
     "rules": "Règles",
-    "resourceSettingDescription": "Configurer les paramètres de votre ressource",
+    "resourceSettingDescription": "Configure the settings on the resource",
     "resourceSetting": "Réglages de {resourceName}",
-    "alwaysAllow": "Toujours autoriser",
-    "alwaysDeny": "Toujours refuser",
+    "alwaysAllow": "Bypass Auth",
+    "alwaysDeny": "Block Access",
     "passToAuth": "Passer à l'authentification",
-    "orgSettingsDescription": "Configurer les paramètres de votre organisation",
+    "orgSettingsDescription": "Configure the organization's settings",
     "orgGeneralSettings": "Paramètres de l'organisation",
-    "orgGeneralSettingsDescription": "Gérer les détails et la configuration de votre organisation",
+    "orgGeneralSettingsDescription": "Manage the organization's details and configuration",
     "saveGeneralSettings": "Enregistrer les paramètres généraux",
     "saveSettings": "Enregistrer les paramètres",
     "orgDangerZone": "Zone dangereuse",
@@ -232,7 +234,7 @@
     "orgMissing": "ID d'organisation manquant",
     "orgMissingMessage": "Impossible de régénérer l'invitation sans un ID d'organisation.",
     "accessUsersManage": "Gérer les utilisateurs",
-    "accessUsersDescription": "Invitez des utilisateurs et ajoutez-les aux rôles pour gérer l'accès à votre organisation",
+    "accessUsersDescription": "Invite and manage users with access to this organization",
     "accessUsersSearch": "Chercher des utilisateurs...",
     "accessUserCreate": "Créer un utilisateur",
     "accessUserRemove": "Supprimer un utilisateur",
@@ -241,13 +243,13 @@
     "role": "Rôle",
     "nameRequired": "Le nom est requis",
     "accessRolesManage": "Gérer les rôles",
-    "accessRolesDescription": "Configurer les rôles pour gérer l'accès à votre organisation",
+    "accessRolesDescription": "Create and manage roles for users in the organization",
     "accessRolesSearch": "Chercher des rôles...",
     "accessRolesAdd": "Ajouter un rôle",
     "accessRoleDelete": "Supprimer le rôle",
     "description": "Libellé",
     "inviteTitle": "Invitations actives",
-    "inviteDescription": "Gérez les invitations des autres utilisateurs",
+    "inviteDescription": "Manage invitations for other users to join the organization",
     "inviteSearch": "Rechercher des invitations...",
     "minutes": "Minutes",
     "hours": "Heures",
@@ -261,13 +263,13 @@
     "apiKeysErrorCreate": "Erreur lors de la création de la clé API",
     "apiKeysErrorSetPermission": "Erreur lors de la définition des permissions",
     "apiKeysCreate": "Générer une clé d'API",
-    "apiKeysCreateDescription": "Générer une nouvelle clé d'API pour votre organisation",
+    "apiKeysCreateDescription": "Generate a new API key for the organization",
     "apiKeysGeneralSettings": "Permissions",
     "apiKeysGeneralSettingsDescription": "Déterminez ce que cette clé d\"API peut faire",
-    "apiKeysList": "Votre clé d\"API",
-    "apiKeysSave": "Enregistrer votre clé API",
+    "apiKeysList": "New API Key",
+    "apiKeysSave": "Save the API Key",
     "apiKeysSaveDescription": "Vous ne pourrez la voir qu'une seule fois. Assurez-vous de la copier dans un endroit sécurisé.",
-    "apiKeysInfo": "Votre clé d'API est :",
+    "apiKeysInfo": "The API key is:",
     "apiKeysConfirmCopy": "J'ai copié la clé d\"API",
     "generate": "Générer",
     "done": "Terminé",
@@ -424,7 +426,7 @@
     "userCreated": "Utilisateur créé",
     "userCreatedDescription": "L'utilisateur a été créé avec succès.",
     "userTypeInternal": "Utilisateur interne",
-    "userTypeInternalDescription": "Inviter un utilisateur à rejoindre votre organisation directement.",
+    "userTypeInternalDescription": "Invite a user to join the organization directly.",
     "userTypeExternal": "Utilisateur externe",
     "userTypeExternalDescription": "Créer un utilisateur avec un fournisseur d'identité externe.",
     "accessUserCreateDescription": "Suivez les étapes ci-dessous pour créer un nouvel utilisateur",
@@ -468,13 +470,13 @@
     "accessControlsSubmit": "Enregistrer les contrôles d'accès",
     "roles": "Rôles",
     "accessUsersRoles": "Gérer les utilisateurs et les rôles",
-    "accessUsersRolesDescription": "Invitez des utilisateurs et ajoutez-les aux rôles pour gérer l'accès à votre organisation",
+    "accessUsersRolesDescription": "Invite users and add them to roles to manage access to the organization",
     "key": "Clé",
     "createdAt": "Créé le",
     "proxyErrorInvalidHeader": "Valeur d'en-tête Host personnalisée invalide. Utilisez le format de nom de domaine, ou laissez vide pour désactiver l'en-tête Host personnalisé.",
     "proxyErrorTls": "Nom de serveur TLS invalide. Utilisez le format de nom de domaine, ou laissez vide pour supprimer le nom de serveur TLS.",
     "proxyEnableSSL": "Activer SSL",
-    "proxyEnableSSLDescription": "Activez le cryptage SSL/TLS pour des connexions HTTPS sécurisées vers vos cibles.",
+    "proxyEnableSSLDescription": "Enable SSL/TLS encryption for secure HTTPS connections to the targets.",
     "target": "Cible",
     "configureTarget": "Configurer les cibles",
     "targetErrorFetch": "Échec de la récupération des cibles",
@@ -490,29 +492,29 @@
     "targetsErrorUpdate": "Échec de la mise à jour des cibles",
     "targetsErrorUpdateDescription": "Une erreur s'est produite lors de la mise à jour des cibles",
     "targetTlsUpdate": "Paramètres TLS mis à jour",
-    "targetTlsUpdateDescription": "Vos paramètres TLS ont été mis à jour avec succès",
+    "targetTlsUpdateDescription": "TLS settings have been updated successfully",
     "targetErrorTlsUpdate": "Échec de la mise à jour des paramètres TLS",
     "targetErrorTlsUpdateDescription": "Une erreur s'est produite lors de la mise à jour des paramètres TLS",
     "proxyUpdated": "Paramètres du proxy mis à jour",
-    "proxyUpdatedDescription": "Vos paramètres de proxy ont été mis à jour avec succès",
+    "proxyUpdatedDescription": "Proxy settings have been updated successfully",
     "proxyErrorUpdate": "Échec de la mise à jour des paramètres du proxy",
     "proxyErrorUpdateDescription": "Une erreur s'est produite lors de la mise à jour des paramètres du proxy",
     "targetAddr": "IP / Nom d'hôte",
     "targetPort": "Port",
     "targetProtocol": "Protocole",
     "targetTlsSettings": "Configuration sécurisée de connexion",
-    "targetTlsSettingsDescription": "Configurer les paramètres SSL/TLS pour votre ressource",
+    "targetTlsSettingsDescription": "Configure SSL/TLS settings for the resource",
     "targetTlsSettingsAdvanced": "Paramètres TLS avancés",
     "targetTlsSni": "Nom du serveur TLS",
     "targetTlsSniDescription": "Le nom de serveur TLS à utiliser pour SNI. Laissez vide pour utiliser la valeur par défaut.",
     "targetTlsSubmit": "Enregistrer les paramètres",
     "targets": "Configuration des cibles",
-    "targetsDescription": "Configurez les cibles pour router le trafic vers vos services.",
+    "targetsDescription": "Set up targets to route traffic to backend services",
     "targetStickySessions": "Activer les sessions persistantes",
     "targetStickySessionsDescription": "Maintenir les connexions sur la même cible backend pendant toute leur session.",
     "methodSelect": "Sélectionner la méthode",
     "targetSubmit": "Ajouter une cible",
-    "targetNoOne": "Cette ressource n'a aucune cible. Ajoutez une cible pour configurer où envoyer des requêtes à votre backend.",
+    "targetNoOne": "This resource doesn't have any targets. Add a target to configure where to send requests to the backend.",
     "targetNoOneDescription": "L'ajout de plus d'une cible ci-dessus activera l'équilibrage de charge.",
     "targetsSubmit": "Enregistrer les cibles",
     "addTarget": "Ajouter une cible",
@@ -530,7 +532,7 @@
     "tlsServerNameDescription": "The TLS server name to use for SNI",
     "save": "Enregistrer",
     "proxyAdditional": "Paramètres de proxy supplémentaires",
-    "proxyAdditionalDescription": "Configurer la façon dont votre ressource gère les paramètres de proxy",
+    "proxyAdditionalDescription": "Configure how the resource handles proxy settings",
     "proxyCustomHeader": "En-tête Host personnalisé",
     "proxyCustomHeaderDescription": "L'en-tête host à définir lors du proxy des requêtes. Laissez vide pour utiliser la valeur par défaut.",
     "proxyAdditionalSubmit": "Enregistrer les paramètres de proxy",
@@ -570,7 +572,7 @@
     "rulesMatchType": "Type de correspondance",
     "value": "Valeur",
     "rulesAbout": "À propos des règles",
-    "rulesAboutDescription": "Les règles vous permettent de contrôler l'accès à votre ressource en fonction d'un ensemble de critères. Vous pouvez créer des règles pour autoriser ou refuser l'accès basé sur l'adresse IP ou le chemin URL.",
+    "rulesAboutDescription": "Rules allow you to control access to the resource based on a set of criteria. You can create rules to allow or deny access based on IP address or URL path.",
     "rulesActions": "Actions",
     "rulesActionAlwaysAllow": "Toujours autoriser : Contourner toutes les méthodes d'authentification",
     "rulesActionAlwaysDeny": "Toujours refuser : Bloquer toutes les requêtes ; aucune authentification ne peut être tentée",
@@ -582,7 +584,7 @@
     "rulesEnable": "Activer les règles",
     "rulesEnableDescription": "Activer ou désactiver l'évaluation des règles pour cette ressource",
     "rulesResource": "Configuration des règles de ressource",
-    "rulesResourceDescription": "Configurer les règles pour contrôler l'accès à votre ressource",
+    "rulesResourceDescription": "Configure rules to control access to the resource",
     "ruleSubmit": "Ajouter une règle",
     "rulesNoOne": "Aucune règle. Ajoutez une règle en utilisant le formulaire.",
     "rulesOrder": "Les règles sont évaluées par priorité dans l'ordre croissant.",
@@ -598,7 +600,7 @@
     "none": "Aucun",
     "unknown": "Inconnu",
     "resources": "Ressources",
-    "resourcesDescription": "Les ressources sont des proxys vers des applications exécutées sur votre réseau privé. Créez une ressource pour tout service HTTP/HTTPS ou TCP/UDP brut sur votre réseau privé. Chaque ressource doit être connectée à un site pour permettre une connectivité privée et sécurisée via un tunnel WireGuard chiffré.",
+    "resourcesDescription": "Resources are proxies to applications running on the private network. Create a resource for any HTTP/HTTPS or raw TCP/UDP service on your private network. Each resource must be connected to a site to enable private, secure connectivity through an encrypted WireGuard tunnel.",
     "resourcesWireGuardConnect": "Connectivité sécurisée avec chiffrement WireGuard",
     "resourcesMultipleAuthenticationMethods": "Configurer plusieurs méthodes d'authentification",
     "resourcesUsersRolesAccess": "Contrôle d'accès basé sur les utilisateurs et les rôles",
@@ -609,7 +611,7 @@
     "resourceSelect": "Sélectionner une ressource",
     "shareLinks": "Liens de partage",
     "share": "Liens partageables",
-    "shareDescription2": "Créez des liens partageables vers vos ressources. Les liens fournissent un accès temporaire ou illimité à votre ressource. Vous pouvez configurer la durée d'expiration du lien lors de sa création.",
+    "shareDescription2": "Create shareable links to resources. Links provide temporary or unlimited access to your resource. You can configure the expiration duration of the link when you create one.",
     "shareEasyCreate": "Facile à créer et à partager",
     "shareConfigurableExpirationDuration": "Durée d'expiration configurable",
     "shareSecureAndRevocable": "Sécurisé et révocable",
@@ -619,19 +621,19 @@
     "unknownCommand": "Commande inconnue",
     "newtErrorFetchReleases": "Échec de la récupération des informations de version : {err}",
     "newtErrorFetchLatest": "Erreur lors de la récupération de la dernière version : {err}",
-    "newtEndpoint": "Point de terminaison Newt",
-    "newtId": "ID Newt",
-    "newtSecretKey": "Clé secrète Newt",
+    "newtEndpoint": "Endpoint",
+    "newtId": "ID",
+    "newtSecretKey": "Secret",
     "architecture": "Architecture",
     "sites": "Nœuds",
-    "siteWgAnyClients": "Utilisez n'importe quel client WireGuard pour vous connecter. Vous devrez adresser vos ressources internes en utilisant l'IP du pair.",
+    "siteWgAnyClients": "Use any WireGuard client to connect. You will have to address internal resources using the peer IP.",
     "siteWgCompatibleAllClients": "Compatible avec tous les clients WireGuard",
     "siteWgManualConfigurationRequired": "Configuration manuelle requise",
     "userErrorNotAdminOrOwner": "L'utilisateur n'est pas un administrateur ou un propriétaire",
     "pangolinSettings": "Paramètres - Pangolin",
     "accessRoleYour": "Votre rôle :",
-    "accessRoleSelect2": "Sélectionner un rôle",
-    "accessUserSelect": "Sélectionner un utilisateur",
+    "accessRoleSelect2": "Select roles",
+    "accessUserSelect": "Select users",
     "otpEmailEnter": "Entrer un e-mail",
     "otpEmailEnterDescription": "Appuyez sur Entrée pour ajouter un e-mail après l'avoir saisi dans le champ.",
     "otpEmailErrorInvalid": "Adresse e-mail invalide. Le caractère générique (*) doit être la partie locale entière.",
@@ -683,7 +685,7 @@
     "resourcePincodeSetupTitle": "Définir le code PIN",
     "resourcePincodeSetupTitleDescription": "Définir un code PIN pour protéger cette ressource",
     "resourceRoleDescription": "Les administrateurs peuvent toujours accéder à cette ressource.",
-    "resourceUsersRoles": "Utilisateurs et rôles",
+    "resourceUsersRoles": "Access Controls",
     "resourceUsersRolesDescription": "Configurer quels utilisateurs et rôles peuvent visiter cette ressource",
     "resourceUsersRolesSubmit": "Enregistrer les utilisateurs et les rôles",
     "resourceWhitelistSave": "Enregistré avec succès",
@@ -779,15 +781,15 @@
     "idpOidcConfigure": "Configuration OAuth2/OIDC",
     "idpOidcConfigureDescription": "Configurer les points de terminaison et les identifiants du fournisseur OAuth2/OIDC",
     "idpClientId": "ID Client",
-    "idpClientIdDescription": "L'ID client OAuth2 de votre fournisseur d'identité",
+    "idpClientIdDescription": "The OAuth2 client ID from the identity provider",
     "idpClientSecret": "Secret Client",
-    "idpClientSecretDescription": "Le secret client OAuth2 de votre fournisseur d'identité",
+    "idpClientSecretDescription": "The OAuth2 client secret from the identity provider",
     "idpAuthUrl": "URL d'autorisation",
     "idpAuthUrlDescription": "L'URL du point de terminaison d'autorisation OAuth2",
     "idpTokenUrl": "URL du jeton",
     "idpTokenUrlDescription": "L'URL du point de terminaison du jeton OAuth2",
     "idpOidcConfigureAlert": "Information importante",
-    "idpOidcConfigureAlertDescription": "Après avoir créé le fournisseur d'identité, vous devrez configurer l'URL de rappel dans les paramètres de votre fournisseur d'identité. L'URL de rappel sera fournie après la création réussie.",
+    "idpOidcConfigureAlertDescription": "After creating the identity provider, you will need to configure the callback URL in the identity provider's settings. The callback URL will be provided after successful creation.",
     "idpToken": "Configuration du jeton",
     "idpTokenDescription": "Configurer comment extraire les informations utilisateur du jeton ID",
     "idpJmespathAbout": "À propos de JMESPath",
@@ -804,7 +806,7 @@
     "idpSubmit": "Créer le fournisseur d'identité",
     "orgPolicies": "Politiques d'organisation",
     "idpSettings": "Paramètres de {idpName}",
-    "idpCreateSettingsDescription": "Configurer les paramètres de votre fournisseur d'identité",
+    "idpCreateSettingsDescription": "Configure the settings for the identity provider",
     "roleMapping": "Mappage des rôles",
     "orgMapping": "Mappage d'organisation",
     "orgPoliciesSearch": "Rechercher des politiques d'organisation...",
@@ -839,7 +841,7 @@
     "idpUpdatedDescription": "Fournisseur d'identité mis à jour avec succès",
     "redirectUrl": "URL de redirection",
     "redirectUrlAbout": "À propos de l'URL de redirection",
-    "redirectUrlAboutDescription": "C'est l'URL vers laquelle les utilisateurs seront redirigés après l'authentification. Vous devez configurer cette URL dans les paramètres de votre fournisseur d'identité.",
+    "redirectUrlAboutDescription": "This is the URL to which users will be redirected after authentication. You need to configure this URL in the identity provider's settings.",
     "pangolinAuth": "Auth - Pangolin",
     "verificationCodeLengthRequirements": "Votre code de vérification doit comporter 8 caractères.",
     "errorOccurred": "Une erreur s'est produite",
@@ -922,6 +924,10 @@
     "passwordResetSent": "Nous allons envoyer un code de réinitialisation à cette adresse e-mail.",
     "passwordResetCode": "Code de réinitialisation",
     "passwordResetCodeDescription": "Vérifiez votre e-mail pour le code de réinitialisation.",
+    "generatePasswordResetCode": "Generate Password Reset Code",
+    "passwordResetCodeGenerated": "Password Reset Code Generated",
+    "passwordResetCodeGeneratedDescription": "Share this code with the user. They can use it to reset their password.",
+    "passwordResetUrl": "Reset URL",
     "passwordNew": "Nouveau mot de passe",
     "passwordNewConfirm": "Confirmer le nouveau mot de passe",
     "changePassword": "Changer le mot de passe",
@@ -939,6 +945,9 @@
     "pincodeAuth": "Code d'authentification",
     "pincodeSubmit2": "Soumettre le code",
     "passwordResetSubmit": "Demander la réinitialisation",
+    "passwordResetAlreadyHaveCode": "Enter Password Reset Code",
+    "passwordResetSmtpRequired": "Please contact your administrator",
+    "passwordResetSmtpRequiredDescription": "A password reset code is required to reset your password. Please contact your administrator for assistance.",
     "passwordBack": "Retour au mot de passe",
     "loginBack": "Retour à la connexion",
     "signup": "S'inscrire",
@@ -1104,12 +1113,15 @@
     "actionListSiteResources": "Lister les ressources de site",
     "actionUpdateSiteResource": "Mettre à jour une ressource de site",
     "actionListInvitations": "Lister les invitations",
+    "actionExportLogs": "Export Logs",
+    "actionViewLogs": "View Logs",
     "noneSelected": "Aucune sélection",
     "orgNotFound2": "Aucune organisation trouvée.",
     "searchProgress": "Rechercher...",
     "create": "Créer",
     "orgs": "Organisations",
     "loginError": "Une erreur s'est produite lors de la connexion",
+    "loginRequiredForDevice": "Login is required to authenticate your device.",
     "passwordForgot": "Mot de passe oublié ?",
     "otpAuth": "Authentification à deux facteurs",
     "otpAuthDescription": "Entrez le code de votre application d'authentification ou l'un de vos codes de secours à usage unique.",
@@ -1164,23 +1176,29 @@
     "sidebarHome": "Domicile",
     "sidebarSites": "Nœuds",
     "sidebarResources": "Ressource",
+    "sidebarProxyResources": "Public",
+    "sidebarClientResources": "Private",
     "sidebarAccessControl": "Contrôle d'accès",
+    "sidebarLogsAndAnalytics": "Logs & Analytics",
     "sidebarUsers": "Utilisateurs",
+    "sidebarAdmin": "Admin",
     "sidebarInvitations": "Invitations",
     "sidebarRoles": "Rôles",
-    "sidebarShareableLinks": "Liens partagables",
+    "sidebarShareableLinks": "Links",
     "sidebarApiKeys": "Clés API",
     "sidebarSettings": "Réglages",
     "sidebarAllUsers": "Tous les utilisateurs",
     "sidebarIdentityProviders": "Fournisseurs d'identité",
     "sidebarLicense": "Licence",
     "sidebarClients": "Clients",
+    "sidebarUserDevices": "Users",
+    "sidebarMachineClients": "Machines",
     "sidebarDomains": "Domaines",
     "sidebarGeneral": "General",
     "sidebarLogAndAnalytics": "Log & Analytics",
     "sidebarBluePrints": "Configs",
     "sidebarOrganization": "Organization",
-    "sidebarLogsAnalytics": "Request Analytics",
+    "sidebarLogsAnalytics": "Analytics",
     "blueprints": "Configs",
     "blueprintsDescription": "Appliquer les configurations déclaratives et afficher les exécutions précédentes",
     "blueprintAdd": "Ajouter une Config",
@@ -1191,7 +1209,7 @@
     "blueprintDetailsDescription": "Voir le résultat du plan appliqué et les erreurs qui se sont produites",
     "blueprintInfo": "Informations sur la Config",
     "message": "Message",
-    "blueprintContentsDescription": "Définissez le contenu YAML décrivant votre infrastructure",
+    "blueprintContentsDescription": "Define the YAML content describing the infrastructure",
     "blueprintErrorCreateDescription": "Une erreur s'est produite lors de l'application de la config",
     "blueprintErrorCreate": "Erreur lors de la création de la config",
     "searchBlueprintProgress": "Rechercher des configs...",
@@ -1247,15 +1265,15 @@
     "loading": "Chargement",
     "restart": "Redémarrer",
     "domains": "Domaines",
-    "domainsDescription": "Gérer les domaines de votre organisation",
+    "domainsDescription": "Create and manage domains available in the organization",
     "domainsSearch": "Rechercher des domaines...",
     "domainAdd": "Ajouter un domaine",
-    "domainAddDescription": "Enregistrez un nouveau domaine avec votre organisation",
+    "domainAddDescription": "Register a new domain with to the organization",
     "domainCreate": "Créer un domaine",
     "domainCreatedDescription": "Domaine créé avec succès",
     "domainDeletedDescription": "Domaine supprimé avec succès",
-    "domainQuestionRemove": "Êtes-vous sûr de vouloir supprimer le domaine de votre compte ?",
-    "domainMessageRemove": "Une fois supprimé, le domaine ne sera plus associé à votre compte.",
+    "domainQuestionRemove": "Are you sure you want to remove the domain?",
+    "domainMessageRemove": "Once removed, the domain will no longer be associated with the organization.",
     "domainConfirmDelete": "Confirmer la suppression du domaine",
     "domainDelete": "Supprimer le domaine",
     "domain": "Domaine",
@@ -1274,7 +1292,7 @@
     "pending": "En attente",
     "sidebarBilling": "Facturation",
     "billing": "Facturation",
-    "orgBillingDescription": "Gérez vos informations de facturation et vos abonnements",
+    "orgBillingDescription": "Manage billing information and subscriptions",
     "github": "GitHub",
     "pangolinHosted": "Pangolin Hébergement",
     "fossorial": "Fossorial",
@@ -1317,7 +1335,7 @@
     "domainPickerSortAsc": "A-Z",
     "domainPickerSortDesc": "Z-A",
     "domainPickerCheckingAvailability": "Vérification de la disponibilité...",
-    "domainPickerNoMatchingDomains": "Aucun domaine correspondant trouvé. Essayez un autre domaine ou vérifiez les paramètres de domaine de votre organisation.",
+    "domainPickerNoMatchingDomains": "No matching domains found. Try a different domain or check the organization's domain settings.",
     "domainPickerOrganizationDomains": "Domaines de l'organisation",
     "domainPickerProvidedDomains": "Domaines fournis",
     "domainPickerSubdomain": "Sous-domaine : {subdomain}",
@@ -1351,7 +1369,7 @@
     "billingModifySubscription": "Modifier l'abonnement",
     "billingStartSubscription": "Démarrer l'abonnement",
     "billingRecurringCharge": "Frais récurrents",
-    "billingManageSubscriptionSettings": "Gérez les paramètres et préférences de votre abonnement",
+    "billingManageSubscriptionSettings": "Manage subscription settings and preferences",
     "billingNoActiveSubscription": "Vous n'avez pas d'abonnement actif. Commencez votre abonnement pour augmenter les limites d'utilisation.",
     "billingFailedToLoadSubscription": "Échec du chargement de l'abonnement",
     "billingFailedToLoadUsage": "Échec du chargement de l'utilisation",
@@ -1362,9 +1380,9 @@
     "billingPortalError": "Erreur du portail",
     "billingDataUsageInfo": "Vous êtes facturé pour toutes les données transférées via vos tunnels sécurisés lorsque vous êtes connecté au cloud. Cela inclut le trafic entrant et sortant sur tous vos sites. Lorsque vous atteignez votre limite, vos sites se déconnecteront jusqu'à ce que vous mettiez à niveau votre plan ou réduisiez l'utilisation. Les données ne sont pas facturées lors de l'utilisation de nœuds.",
     "billingOnlineTimeInfo": "Vous êtes facturé en fonction de la durée de connexion de vos sites au cloud. Par exemple, 44 640 minutes équivaut à un site fonctionnant 24/7 pendant un mois complet. Lorsque vous atteignez votre limite, vos sites se déconnecteront jusqu'à ce que vous mettiez à niveau votre forfait ou réduisiez votre consommation. Le temps n'est pas facturé lors de l'utilisation de nœuds.",
-    "billingUsersInfo": "Vous êtes facturé pour chaque utilisateur dans votre organisation. La facturation est calculée quotidiennement en fonction du nombre de comptes utilisateurs actifs dans votre organisation.",
-    "billingDomainInfo": "Vous êtes facturé pour chaque domaine dans votre organisation. La facturation est calculée quotidiennement en fonction du nombre de comptes de domaine actifs dans votre organisation.",
-    "billingRemoteExitNodesInfo": "Vous êtes facturé pour chaque nœud géré dans votre organisation. La facturation est calculée quotidiennement en fonction du nombre de nœuds gérés actifs dans votre organisation.",
+    "billingUsersInfo": "You're charged for each user in the organization. Billing is calculated daily based on the number of active user accounts in your org.",
+    "billingDomainInfo": "You're charged for each domain in the organization. Billing is calculated daily based on the number of active domain accounts in your org.",
+    "billingRemoteExitNodesInfo": "You're charged for each managed Node in the organization. Billing is calculated daily based on the number of active managed Nodes in your org.",
     "domainNotFound": "Domaine introuvable",
     "domainNotFoundDescription": "Cette ressource est désactivée car le domaine n'existe plus dans notre système. Veuillez définir un nouveau domaine pour cette ressource.",
     "failed": "Échec",
@@ -1456,23 +1474,23 @@
     "errorCreatingClient": "Erreur lors de la création du client",
     "clientDefaultsNotFound": "Les paramètres par défaut du client sont introuvables",
     "createClient": "Créer un client",
-    "createClientDescription": "Créez un nouveau client pour vous connecter à vos sites",
+    "createClientDescription": "Create a new client to access private resources",
     "seeAllClients": "Voir tous les clients",
     "clientInformation": "Informations client",
     "clientNamePlaceholder": "Nom du client",
     "address": "Adresse",
     "subnetPlaceholder": "Sous-réseau",
-    "addressDescription": "L'adresse que ce client utilisera pour la connectivité",
+    "addressDescription": "The internal address of the client. Must fall within the organization's subnet.",
     "selectSites": "Sélectionner des sites",
     "sitesDescription": "Le client aura une connectivité vers les sites sélectionnés",
     "clientInstallOlm": "Installer Olm",
     "clientInstallOlmDescription": "Faites fonctionner Olm sur votre système",
-    "clientOlmCredentials": "Identifiants Olm",
-    "clientOlmCredentialsDescription": "C'est ainsi qu'Olm s'authentifiera auprès du serveur",
-    "olmEndpoint": "Point de terminaison Olm",
-    "olmId": "ID Olm",
-    "olmSecretKey": "Clé secrète Olm",
-    "clientCredentialsSave": "Enregistrez vos identifiants",
+    "clientOlmCredentials": "Credentials",
+    "clientOlmCredentialsDescription": "This is how the client will authenticate with the server",
+    "olmEndpoint": "Endpoint",
+    "olmId": "ID",
+    "olmSecretKey": "Secret",
+    "clientCredentialsSave": "Save the Credentials",
     "clientCredentialsSaveDescription": "Vous ne pourrez voir cela qu'une seule fois. Assurez-vous de la copier dans un endroit sécurisé.",
     "generalSettingsDescription": "Configurez les paramètres généraux pour ce client",
     "clientUpdated": "Client mis à jour",
@@ -1483,9 +1501,7 @@
     "sitesFetchError": "Une erreur s'est produite lors de la récupération des sites.",
     "olmErrorFetchReleases": "Une erreur s'est produite lors de la récupération des versions d'Olm.",
     "olmErrorFetchLatest": "Une erreur s'est produite lors de la récupération de la dernière version d'Olm.",
-    "remoteSubnets": "Sous-réseaux distants",
     "enterCidrRange": "Entrez la plage CIDR",
-    "remoteSubnetsDescription": "Ajoutez des plages CIDR accessibles à distance depuis ce site à l'aide de clients. Utilisez le format comme 10.0.0.0/24. Cela s'applique UNIQUEMENT à la connectivité des clients VPN.",
     "resourceEnableProxy": "Activer le proxy public",
     "resourceEnableProxyDescription": "Activez le proxy public vers cette ressource. Cela permet d'accéder à la ressource depuis l'extérieur du réseau via le cloud sur un port ouvert. Nécessite la configuration de Traefik.",
     "externalProxyEnabled": "Proxy externe activé",
@@ -1503,14 +1519,15 @@
     "enableHealthChecksDescription": "Surveiller la vie de cette cible. Vous pouvez surveiller un point de terminaison différent de la cible si nécessaire.",
     "healthScheme": "Méthode",
     "healthSelectScheme": "Sélectionnez la méthode",
+    "healthCheckPortInvalid": "Health check port must be between 1 and 65535",
     "healthCheckPath": "Chemin d'accès",
     "healthHostname": "IP / Hôte",
     "healthPort": "Port",
     "healthCheckPathDescription": "Le chemin à vérifier pour le statut de santé.",
-    "healthyIntervalSeconds": "Intervalle sain",
-    "unhealthyIntervalSeconds": "Intervalle en mauvaise santé",
+    "healthyIntervalSeconds": "Healthy Interval (sec)",
+    "unhealthyIntervalSeconds": "Unhealthy Interval (sec)",
     "IntervalSeconds": "Intervalle sain",
-    "timeoutSeconds": "Délai",
+    "timeoutSeconds": "Timeout (sec)",
     "timeIsInSeconds": "Le temps est exprimé en secondes",
     "retryAttempts": "Tentatives de réessai",
     "expectedResponseCodes": "Codes de réponse attendus",
@@ -1546,12 +1563,12 @@
     "resourceEditDomain": "Modifier le domaine",
     "siteName": "Nom du site",
     "proxyPort": "Port",
-    "resourcesTableProxyResources": "Ressources proxy",
-    "resourcesTableClientResources": "Ressources client",
+    "resourcesTableProxyResources": "Public",
+    "resourcesTableClientResources": "Private",
     "resourcesTableNoProxyResourcesFound": "Aucune ressource proxy trouvée.",
     "resourcesTableNoInternalResourcesFound": "Aucune ressource interne trouvée.",
     "resourcesTableDestination": "Destination",
-    "resourcesTableTheseResourcesForUseWith": "Ces ressources sont à utiliser avec",
+    "resourcesTableAlias": "Alias",
     "resourcesTableClients": "Clients",
     "resourcesTableAndOnlyAccessibleInternally": "et sont uniquement accessibles en interne lorsqu'elles sont connectées avec un client.",
     "resourcesTableNoTargets": "Aucune cible",
@@ -1560,8 +1577,8 @@
     "resourcesTableOffline": "Hors ligne",
     "resourcesTableUnknown": "Inconnu",
     "resourcesTableNotMonitored": "Non-monitoré",
-    "editInternalResourceDialogEditClientResource": "Modifier la ressource client",
-    "editInternalResourceDialogUpdateResourceProperties": "Mettez à jour les propriétés de la ressource et la configuration de la cible pour {resourceName}.",
+    "editInternalResourceDialogEditClientResource": "Edit Private Resource",
+    "editInternalResourceDialogUpdateResourceProperties": "Update the resource configuration and access controls for {resourceName}",
     "editInternalResourceDialogResourceProperties": "Propriétés de la ressource",
     "editInternalResourceDialogName": "Nom",
     "editInternalResourceDialogProtocol": "Protocole",
@@ -1580,11 +1597,22 @@
     "editInternalResourceDialogInvalidIPAddressFormat": "Format d'adresse IP invalide",
     "editInternalResourceDialogDestinationPortMin": "Le port de destination doit être d'au moins 1",
     "editInternalResourceDialogDestinationPortMax": "Le port de destination doit être inférieur à 65536",
+    "editInternalResourceDialogPortModeRequired": "Protocol, proxy port, and destination port are required for port mode",
+    "editInternalResourceDialogMode": "Mode",
+    "editInternalResourceDialogModePort": "Port",
+    "editInternalResourceDialogModeHost": "Host",
+    "editInternalResourceDialogModeCidr": "CIDR",
+    "editInternalResourceDialogDestination": "Destination",
+    "editInternalResourceDialogDestinationHostDescription": "The IP address or hostname of the resource on the site's network.",
+    "editInternalResourceDialogDestinationIPDescription": "The IP or hostname address of the resource on the site's network.",
+    "editInternalResourceDialogDestinationCidrDescription": "The CIDR range of the resource on the site's network.",
+    "editInternalResourceDialogAlias": "Alias",
+    "editInternalResourceDialogAliasDescription": "An optional internal DNS alias for this resource.",
     "createInternalResourceDialogNoSitesAvailable": "Aucun site disponible",
     "createInternalResourceDialogNoSitesAvailableDescription": "Vous devez avoir au moins un site Newt avec un sous-réseau configuré pour créer des ressources internes.",
     "createInternalResourceDialogClose": "Fermer",
-    "createInternalResourceDialogCreateClientResource": "Créer une ressource client",
-    "createInternalResourceDialogCreateClientResourceDescription": "Créez une ressource accessible aux clients connectés au site sélectionné.",
+    "createInternalResourceDialogCreateClientResource": "Create Private Resource",
+    "createInternalResourceDialogCreateClientResourceDescription": "Create a new resource that will only be accessible to clients connected to the organization",
     "createInternalResourceDialogResourceProperties": "Propriétés de la ressource",
     "createInternalResourceDialogName": "Nom",
     "createInternalResourceDialogSite": "Site",
@@ -1613,11 +1641,22 @@
     "createInternalResourceDialogInvalidIPAddressFormat": "Format d'adresse IP invalide",
     "createInternalResourceDialogDestinationPortMin": "Le port de destination doit être d'au moins 1",
     "createInternalResourceDialogDestinationPortMax": "Le port de destination doit être inférieur à 65536",
+    "createInternalResourceDialogPortModeRequired": "Protocol, proxy port, and destination port are required for port mode",
+    "createInternalResourceDialogMode": "Mode",
+    "createInternalResourceDialogModePort": "Port",
+    "createInternalResourceDialogModeHost": "Host",
+    "createInternalResourceDialogModeCidr": "CIDR",
+    "createInternalResourceDialogDestination": "Destination",
+    "createInternalResourceDialogDestinationHostDescription": "The IP address or hostname of the resource on the site's network.",
+    "createInternalResourceDialogDestinationCidrDescription": "The CIDR range of the resource on the site's network.",
+    "createInternalResourceDialogAlias": "Alias",
+    "createInternalResourceDialogAliasDescription": "An optional internal DNS alias for this resource.",
     "siteConfiguration": "Configuration",
     "siteAcceptClientConnections": "Accepter les connexions client",
-    "siteAcceptClientConnectionsDescription": "Permet à d'autres appareils de se connecter via cette instance de Newt en tant que passerelle utilisant des clients.",
-    "siteAddress": "Adresse du site",
-    "siteAddressDescription": "Spécifiez l'adresse IP de l'hôte pour que les clients puissent s'y connecter. C'est l'adresse interne du site dans le réseau Pangolin pour que les clients puissent s'adresser. Doit être dans le sous-réseau de l'organisation.",
+    "siteAcceptClientConnectionsDescription": "Allow user devices and clients to access resources on this site. This can be changed later.",
+    "siteAddress": "Site Address (Advanced)",
+    "siteAddressDescription": "The internal address of the site. Must fall within the organization's subnet.",
+    "siteNameDescription": "The display name of the site that can be changed later.",
     "autoLoginExternalIdp": "Connexion automatique avec IDP externe",
     "autoLoginExternalIdpDescription": "Rediriger immédiatement l'utilisateur vers l'IDP externe pour l'authentification.",
     "selectIdp": "Sélectionner l'IDP",
@@ -1631,7 +1670,7 @@
     "autoLoginErrorNoRedirectUrl": "Aucune URL de redirection reçue du fournisseur d'identité.",
     "autoLoginErrorGeneratingUrl": "Échec de la génération de l'URL d'authentification.",
     "remoteExitNodeManageRemoteExitNodes": "Nœuds distants",
-    "remoteExitNodeDescription": "Héberger un ou plusieurs nœuds distants pour étendre votre connectivité réseau et réduire la dépendance sur le cloud",
+    "remoteExitNodeDescription": "Self-host one or more remote nodes to extend network connectivity and reduce reliance on the cloud",
     "remoteExitNodes": "Nœuds",
     "searchRemoteExitNodes": "Rechercher des nœuds...",
     "remoteExitNodeAdd": "Ajouter un noeud",
@@ -1643,11 +1682,11 @@
     "sidebarRemoteExitNodes": "Nœuds distants",
     "remoteExitNodeCreate": {
         "title": "Créer un noeud",
-        "description": "Créer un nouveau nœud pour étendre votre connectivité réseau",
+        "description": "Create a new node to extend network connectivity",
         "viewAllButton": "Voir tous les nœuds",
         "strategy": {
             "title": "Stratégie de création",
-            "description": "Choisissez ceci pour configurer manuellement votre nœud ou générer de nouveaux identifiants.",
+            "description": "Choose this to manually configure the node or generate new credentials.",
             "adopt": {
                 "title": "Adopter un nœud",
                 "description": "Choisissez ceci si vous avez déjà les identifiants pour le noeud."
@@ -1668,7 +1707,7 @@
         },
         "generate": {
             "title": "Informations d'identification générées",
-            "description": "Utilisez ces identifiants générés pour configurer votre noeud",
+            "description": "Use these generated credentials to configure the node",
             "nodeIdTitle": "Nœud ID",
             "secretTitle": "Secret",
             "saveCredentialsTitle": "Ajouter des identifiants à la config",
@@ -1744,16 +1783,16 @@
     "idpTypeLabel": "Type de fournisseur d'identité",
     "roleMappingExpressionPlaceholder": "ex: contenu(groupes) && 'admin' || 'membre'",
     "idpGoogleConfiguration": "Configuration Google",
-    "idpGoogleConfigurationDescription": "Configurer vos identifiants Google OAuth2",
-    "idpGoogleClientIdDescription": "Votre identifiant client Google OAuth2",
-    "idpGoogleClientSecretDescription": "Votre secret client Google OAuth2",
+    "idpGoogleConfigurationDescription": "Configure the Google OAuth2 credentials",
+    "idpGoogleClientIdDescription": "Google OAuth2 Client ID",
+    "idpGoogleClientSecretDescription": "Google OAuth2 Client Secret",
     "idpAzureConfiguration": "Configuration de l'entra ID Azure",
-    "idpAzureConfigurationDescription": "Configurer vos identifiants OAuth2 Azure Entra",
+    "idpAzureConfigurationDescription": "Configure Azure Entra ID OAuth2 credentials",
     "idpTenantId": "ID du locataire",
-    "idpTenantIdPlaceholder": "votre-locataire-id",
-    "idpAzureTenantIdDescription": "Votre ID de locataire Azure (trouvé dans l'aperçu Azure Active Directory)",
-    "idpAzureClientIdDescription": "Votre ID client d'enregistrement de l'application Azure",
-    "idpAzureClientSecretDescription": "Le secret de votre client d'enregistrement Azure App",
+    "idpTenantIdPlaceholder": "tenant-id",
+    "idpAzureTenantIdDescription": "Azure tenant ID (found in Azure Active Directory overview)",
+    "idpAzureClientIdDescription": "Azure App Registration Client ID",
+    "idpAzureClientSecretDescription": "Azure App Registration Client Secret",
     "idpGoogleTitle": "Google",
     "idpGoogleAlt": "Google",
     "idpAzureTitle": "Azure Entra ID",
@@ -1761,14 +1800,14 @@
     "idpGoogleConfigurationTitle": "Configuration Google",
     "idpAzureConfigurationTitle": "Configuration de l'entra ID Azure",
     "idpTenantIdLabel": "ID du locataire",
-    "idpAzureClientIdDescription2": "Votre ID client d'enregistrement de l'application Azure",
-    "idpAzureClientSecretDescription2": "Le secret de votre client d'enregistrement Azure App",
+    "idpAzureClientIdDescription2": "Azure App Registration Client ID",
+    "idpAzureClientSecretDescription2": "Azure App Registration Client Secret",
     "idpGoogleDescription": "Fournisseur Google OAuth2/OIDC",
     "idpAzureDescription": "Microsoft Azure OAuth2/OIDC provider",
     "subnet": "Sous-réseau",
     "subnetDescription": "Le sous-réseau de la configuration réseau de cette organisation.",
     "authPage": "Page d'authentification",
-    "authPageDescription": "Configurer la page d'authentification de votre organisation",
+    "authPageDescription": "Configure the auth page for the organization",
     "authPageDomain": "Domaine de la page d'authentification",
     "noDomainSet": "Aucun domaine défini",
     "changeDomain": "Changer de domaine",
@@ -1778,7 +1817,7 @@
     "setAuthPageDomain": "Définir le domaine de la page d'authentification",
     "failedToFetchCertificate": "Impossible de récupérer le certificat",
     "failedToRestartCertificate": "Échec du redémarrage du certificat",
-    "addDomainToEnableCustomAuthPages": "Ajouter un domaine pour activer les pages d'authentification personnalisées pour votre organisation",
+    "addDomainToEnableCustomAuthPages": "Add a domain to enable custom authentication pages for the organization",
     "selectDomainForOrgAuthPage": "Sélectionnez un domaine pour la page d'authentification de l'organisation",
     "domainPickerProvidedDomain": "Domaine fourni",
     "domainPickerFreeProvidedDomain": "Domaine fourni gratuitement",
@@ -1793,7 +1832,7 @@
     "domainPickerInvalidSubdomainCannotMakeValid": "La «{sub}» n'a pas pu être validée pour {domain}.",
     "domainPickerSubdomainSanitized": "Sous-domaine nettoyé",
     "domainPickerSubdomainCorrected": "\"{sub}\" a été corrigé à \"{sanitized}\"",
-    "orgAuthSignInTitle": "Connectez-vous à votre organisation",
+    "orgAuthSignInTitle": "Sign in to the organization",
     "orgAuthChooseIdpDescription": "Choisissez votre fournisseur d'identité pour continuer",
     "orgAuthNoIdpConfigured": "Cette organisation n'a aucun fournisseur d'identité configuré. Vous pouvez vous connecter avec votre identité Pangolin à la place.",
     "orgAuthSignInWithPangolin": "Se connecter avec Pangolin",
@@ -1811,7 +1850,7 @@
     "enableTwoFactorAuthentication": "Activer l'authentification à deux facteurs",
     "completeSecuritySteps": "Compléter les étapes de sécurité",
     "securitySettings": "Paramètres de sécurité",
-    "securitySettingsDescription": "Configurer les politiques de sécurité de votre organisation",
+    "securitySettingsDescription": "Configure security policies for the organization",
     "requireTwoFactorForAllUsers": "Exiger une authentification à deux facteurs pour tous les utilisateurs",
     "requireTwoFactorDescription": "Lorsque cette option est activée, tous les utilisateurs internes de cette organisation doivent avoir l'authentification à deux facteurs pour accéder à l'organisation.",
     "requireTwoFactorDisabledDescription": "Cette fonctionnalité nécessite une licence valide (Entreprise) ou un abonnement actif (SaaS)",
@@ -1874,8 +1913,12 @@
     "enterpriseEdition": "Édition Entreprise",
     "unlicensed": "Sans licence",
     "beta": "Bêta",
-    "manageClients": "Gérer les clients",
-    "manageClientsDescription": "Les clients sont des appareils qui peuvent se connecter à vos sites",
+    "manageUserDevices": "User Devices",
+    "manageUserDevicesDescription": "View and manage devices that users use to privately connect to resources",
+    "manageMachineClients": "Manage Machine Clients",
+    "manageMachineClientsDescription": "Create and manage clients that servers and systems use to privately connect to resources",
+    "clientsTableUserClients": "User",
+    "clientsTableMachineClients": "Machine",
     "licenseTableValidUntil": "Valable jusqu'au",
     "saasLicenseKeysSettingsTitle": "Licences Entreprise",
     "saasLicenseKeysSettingsDescription": "Générer et gérer les clés de licence Entreprise pour les instances Pangolin auto-hébergées",
@@ -2075,7 +2118,7 @@
     "preferWildcardCert": "Préférez le certificat Wildcard",
     "unverified": "Non vérifié",
     "domainSetting": "Paramètres de domaine",
-    "domainSettingDescription": "Configurer les paramètres de votre domaine",
+    "domainSettingDescription": "Configure settings for the domain",
     "preferWildcardCertDescription": "Tentative de génération d'un certificat générique (nécessite un résolveur de certificat correctement configuré).",
     "recordName": "Nom de l'enregistrement",
     "auto": "Automatique",
@@ -2089,15 +2132,15 @@
     "olmUpdateAvailableInfo": "Une version mise à jour de Olm est disponible. Veuillez mettre à jour vers la dernière version pour la meilleure expérience.",
     "client": "Client",
     "proxyProtocol": "Paramètres du protocole proxy",
-    "proxyProtocolDescription": "Configurer le protocole Proxy pour préserver les adresses IP du client pour les services TCP/UDP.",
+    "proxyProtocolDescription": "Configure Proxy Protocol to preserve client IP addresses for TCP services.",
     "enableProxyProtocol": "Activer le protocole Proxy",
-    "proxyProtocolInfo": "Conserver les adresses IP du client pour les backends TCP/UDP",
+    "proxyProtocolInfo": "Preserve client IP addresses for TCP backends",
     "proxyProtocolVersion": "Version du protocole proxy",
     "version1": " Version 1 (Recommandé)",
     "version2": "Version 2",
     "versionDescription": "La version 1 est basée sur du texte et est largement supportée. La version 2 est binaire et plus efficace mais moins compatible.",
     "warning": "Avertissement",
-    "proxyProtocolWarning": "Votre application backend doit être configurée pour accepter les connexions Proxy Protocol. Si votre backend ne prend pas en charge le protocole Proxy, activer ceci va casser toutes les connexions. Assurez-vous de configurer votre backend pour faire confiance aux en-têtes du protocole Proxy de Traefik.",
+    "proxyProtocolWarning": "The backend application must be configured to accept Proxy Protocol connections. If your backend doesn't support Proxy Protocol, enabling this will break all connections so only enable this if you know what you're doing. Make sure to configure your backend to trust Proxy Protocol headers from Traefik.",
     "restarting": "Redémarrage...",
     "manual": "Manuel",
     "messageSupport": "Soutien aux messages",
@@ -2120,6 +2163,43 @@
     "supportMessageSent": "Message envoyé !",
     "supportWillContact": "Nous vous contacterons sous peu!",
     "selectLogRetention": "Sélectionner la durée de rétention des logs",
+    "terms": "Terms",
+    "privacy": "Privacy",
+    "security": "Security",
+    "docs": "Docs",
+    "deviceActivation": "Device activation",
+    "deviceCodeInvalidFormat": "Code must be 9 characters (e.g., A1AJ-N5JD)",
+    "deviceCodeInvalidOrExpired": "Invalid or expired code",
+    "deviceCodeVerifyFailed": "Failed to verify device code",
+    "signedInAs": "Signed in as",
+    "deviceCodeEnterPrompt": "Enter the code displayed on the device",
+    "continue": "Continue",
+    "deviceUnknownLocation": "Unknown location",
+    "deviceAuthorizationRequested": "This authorization was requested from {location} on {date}. Make sure you trust this device as it will get access to the account.",
+    "deviceLabel": "Device: {deviceName}",
+    "deviceWantsAccess": "wants to access your account",
+    "deviceExistingAccess": "Existing access:",
+    "deviceFullAccess": "Full access to your account",
+    "deviceOrganizationsAccess": "Access to all organizations your account has access to",
+    "deviceAuthorize": "Authorize {applicationName}",
+    "deviceConnected": "Device Connected!",
+    "deviceAuthorizedMessage": "Device is authorized to access your account.",
+    "pangolinCloud": "Pangolin Cloud",
+    "viewDevices": "View Devices",
+    "viewDevicesDescription": "Manage your connected devices",
+    "noDevices": "No devices found",
+    "dateCreated": "Date Created",
+    "unnamedDevice": "Unnamed Device",
+    "deviceQuestionRemove": "Are you sure you want to delete this device?",
+    "deviceMessageRemove": "This action cannot be undone.",
+    "deviceDeleteConfirm": "Delete Device",
+    "deleteDevice": "Delete Device",
+    "errorLoadingDevices": "Error loading devices",
+    "failedToLoadDevices": "Failed to load devices",
+    "deviceDeleted": "Device deleted",
+    "deviceDeletedDescription": "The device has been successfully deleted.",
+    "errorDeletingDevice": "Error deleting device",
+    "failedToDeleteDevice": "Failed to delete device",
     "showColumns": "Afficher les colonnes",
     "hideColumns": "Cacher les colonnes",
     "columnVisibility": "Visibilité des colonnes",
@@ -2134,6 +2214,10 @@
     "enableSelected": "Activer la sélection",
     "disableSelected": "Désactiver la sélection",
     "checkSelectedStatus": "Vérifier le statut de la sélection",
+    "clients": "Clients",
+    "accessClientSelect": "Select machine clients",
+    "resourceClientDescription": "Machine clients that can access this resource",
+    "regenerate": "Regenerate",
     "credentials": "Identifiants",
     "savecredentials": "Enregistrer les identifiants",
     "regeneratecredentials": "Re-claver",
@@ -2151,7 +2235,6 @@
     "endpoint": "Endpoint",
     "Id": "Id",
     "SecretKey": "Clé privée",
-    "featureDisabledTooltip": "Cette fonctionnalité n'est disponible que dans la version entreprise et nécessite une licence pour être utilisée.",
     "niceId": "Joli ID",
     "niceIdUpdated": "Joli ID mis à jour",
     "niceIdUpdatedSuccessfully": "Joli ID mis à jour avec succès",
@@ -2160,5 +2243,15 @@
     "niceIdCannotBeEmpty": "Merci de renseigner un joli ID",
     "enterIdentifier": "Entrez l'identifiant",
     "identifier": "Identifiant",
-    "noData": "No Data"
+    "deviceLoginUseDifferentAccount": "Not you? Use a different account.",
+    "deviceLoginDeviceRequestingAccessToAccount": "A device is requesting access to this account.",
+    "noData": "No Data",
+    "machineClients": "Machine Clients",
+    "install": "Install",
+    "run": "Run",
+    "clientNameDescription": "The display name of the client that can be changed later.",
+    "clientAddress": "Client Address (Advanced)",
+    "setupFailedToFetchSubnet": "Failed to fetch default subnet",
+    "setupSubnetAdvanced": "Subnet (Advanced)",
+    "setupSubnetDescription": "The subnet for this organization's internal network."
 }

messages/it-IT.json

@@ -1,12 +1,12 @@
 {
-    "setupCreate": "Crea la tua organizzazione, sito e risorse",
+    "setupCreate": "Create the organization, site, and resources",
     "setupNewOrg": "Nuova Organizzazione",
     "setupCreateOrg": "Crea Organizzazione",
     "setupCreateResources": "Crea Risorse",
     "setupOrgName": "Nome Dell'Organizzazione",
-    "orgDisplayName": "Questo è il nome visualizzato della tua organizzazione.",
+    "orgDisplayName": "This is the display name of the organization.",
     "orgId": "Id Organizzazione",
-    "setupIdentifierMessage": "Questo è l' identificatore univoco della tua organizzazione. Questo è separato dal nome del display.",
+    "setupIdentifierMessage": "This is the unique identifier for the organization.",
     "setupErrorIdentifier": "L'ID dell'organizzazione è già utilizzato. Si prega di sceglierne uno diverso.",
     "componentsErrorNoMemberCreate": "Al momento non sei un membro di nessuna organizzazione. Crea un'organizzazione per iniziare.",
     "componentsErrorNoMember": "Attualmente non sei membro di nessuna organizzazione.",
@@ -50,10 +50,10 @@
     "siteMessageRemove": "Una volta rimosso il sito non sarà più accessibile. Tutti gli obiettivi associati al sito verranno rimossi.",
     "siteQuestionRemove": "Sei sicuro di voler rimuovere il sito dall'organizzazione?",
     "siteManageSites": "Gestisci Siti",
-    "siteDescription": "Consenti la connettività alla rete attraverso tunnel sicuri",
+    "siteDescription": "Create and manage sites to enable connectivity to private networks",
     "siteCreate": "Crea Sito",
     "siteCreateDescription2": "Segui i passaggi qui sotto per creare e collegare un nuovo sito",
-    "siteCreateDescription": "Crea un nuovo sito per iniziare a connettere le tue risorse",
+    "siteCreateDescription": "Create a new site to start connecting resources",
     "close": "Chiudi",
     "siteErrorCreate": "Errore nella creazione del sito",
     "siteErrorCreateKeyPair": "Coppia di chiavi o valori predefiniti del sito non trovati",
@@ -74,7 +74,7 @@
     "siteInstallNewt": "Installa Newt",
     "siteInstallNewtDescription": "Esegui Newt sul tuo sistema",
     "WgConfiguration": "Configurazione WireGuard",
-    "WgConfigurationDescription": "Usa la seguente configurazione per connetterti alla tua rete",
+    "WgConfigurationDescription": "Use the following configuration to connect to the network",
     "operatingSystem": "Sistema Operativo",
     "commands": "Comandi",
     "recommended": "Consigliato",
@@ -87,32 +87,32 @@
     "siteUpdated": "Sito aggiornato",
     "siteUpdatedDescription": "Il sito è stato aggiornato.",
     "siteGeneralDescription": "Configura le impostazioni generali per questo sito",
-    "siteSettingDescription": "Configura le impostazioni sul tuo sito",
+    "siteSettingDescription": "Configure the settings on the site",
     "siteSetting": "Impostazioni {siteName}",
-    "siteNewtTunnel": "Tunnel Newt (Consigliato)",
-    "siteNewtTunnelDescription": "Modo più semplice per creare un entrypoint nella rete. Nessuna configurazione aggiuntiva.",
+    "siteNewtTunnel": "Newt Site (Recommended)",
+    "siteNewtTunnelDescription": "Easiest way to create an entrypoint into any network. No extra setup.",
     "siteWg": "WireGuard Base",
     "siteWgDescription": "Usa qualsiasi client WireGuard per stabilire un tunnel. Impostazione NAT manuale richiesta.",
     "siteWgDescriptionSaas": "Usa qualsiasi client WireGuard per stabilire un tunnel. Impostazione NAT manuale richiesta. FUNZIONA SOLO SU NODI AUTO-OSPITATI",
     "siteLocalDescription": "Solo risorse locali. Nessun tunneling.",
     "siteLocalDescriptionSaas": "Solo risorse locali. Nessun tunneling. Disponibile solo su nodi remoti.",
     "siteSeeAll": "Vedi Tutti I Siti",
-    "siteTunnelDescription": "Determina come vuoi connetterti al tuo sito",
-    "siteNewtCredentials": "Credenziali Newt",
-    "siteNewtCredentialsDescription": "Questo è come Newt si autenticerà con il server",
-    "siteCredentialsSave": "Salva Le Tue Credenziali",
+    "siteTunnelDescription": "Determine how you want to connect to the site",
+    "siteNewtCredentials": "Credentials",
+    "siteNewtCredentialsDescription": "This is how the site will authenticate with the server",
+    "siteCredentialsSave": "Save the Credentials",
     "siteCredentialsSaveDescription": "Potrai vederlo solo una volta. Assicurati di copiarlo in un luogo sicuro.",
     "siteInfo": "Informazioni Sito",
     "status": "Stato",
     "shareTitle": "Gestisci Collegamenti Di Condivisione",
-    "shareDescription": "Crea link condivisibili per concedere un accesso temporaneo o permanente alle tue risorse",
+    "shareDescription": "Create shareable links to grant temporary or permanent access to proxy resources",
     "shareSearch": "Cerca link condivisi...",
     "shareCreate": "Crea Link Di Condivisione",
     "shareErrorDelete": "Impossibile eliminare il link",
     "shareErrorDeleteMessage": "Si è verificato un errore durante l'eliminazione del link",
     "shareDeleted": "Link eliminato",
     "shareDeletedDescription": "Il link è stato eliminato",
-    "shareTokenDescription": "Il token di accesso può essere passato in due modi: come parametro di interrogazione o nelle intestazioni della richiesta. Questi devono essere passati dal client su ogni richiesta di accesso autenticato.",
+    "shareTokenDescription": "The access token can be passed in two ways: as a query parameter or in the request headers. These must be passed from the client on every request for authenticated access.",
     "accessToken": "Token Di Accesso",
     "usageExamples": "Esempi Di Utilizzo",
     "tokenId": "ID del Token",
@@ -121,7 +121,7 @@
     "importantNote": "Nota Importante",
     "shareImportantDescription": "Per motivi di sicurezza, si consiglia di utilizzare le intestazioni su parametri di query quando possibile, in quanto i parametri di query possono essere registrati in log server o cronologia browser.",
     "token": "Token",
-    "shareTokenSecurety": "Mantieni sicuro il tuo token di accesso. Non condividerlo in aree accessibili al pubblico o codice lato client.",
+    "shareTokenSecurety": "Keep the access token secure. Do not share it in publicly accessible areas or client-side code.",
     "shareErrorFetchResource": "Recupero delle risorse non riuscito",
     "shareErrorFetchResourceDescription": "Si è verificato un errore durante il recupero delle risorse",
     "shareErrorCreate": "Impossibile creare il link di condivisione",
@@ -144,8 +144,10 @@
     "expires": "Scade",
     "never": "Mai",
     "shareErrorSelectResource": "Seleziona una risorsa",
-    "resourceTitle": "Gestisci Risorse",
-    "resourceDescription": "Crea proxy sicuri per le tue applicazioni private",
+    "proxyResourceTitle": "Manage Public Resources",
+    "proxyResourceDescription": "Create and manage resources that are publicly accessible through a web browser",
+    "clientResourceTitle": "Manage Private Resources",
+    "clientResourceDescription": "Create and manage resources that are only accessible through a connected client",
     "resourcesSearch": "Cerca risorse...",
     "resourceAdd": "Aggiungi Risorsa",
     "resourceErrorDelte": "Errore nell'eliminare la risorsa",
@@ -155,9 +157,9 @@
     "resourceMessageRemove": "Una volta rimossa, la risorsa non sarà più accessibile. Tutti gli obiettivi associati alla risorsa saranno rimossi.",
     "resourceQuestionRemove": "Sei sicuro di voler rimuovere la risorsa dall'organizzazione?",
     "resourceHTTP": "Risorsa HTTPS",
-    "resourceHTTPDescription": "Richieste proxy alla tua app tramite HTTPS utilizzando un sottodominio o un dominio di base.",
+    "resourceHTTPDescription": "Proxy requests to the app over HTTPS using a subdomain or base domain.",
     "resourceRaw": "Risorsa Raw TCP/UDP",
-    "resourceRawDescription": "Richieste proxy alla tua app tramite TCP/UDP utilizzando un numero di porta.",
+    "resourceRawDescription": "Proxy requests to the app over TCP/UDP using a port number. This only works when sites are connected to nodes.",
     "resourceCreate": "Crea Risorsa",
     "resourceCreateDescription": "Segui i passaggi seguenti per creare una nuova risorsa",
     "resourceSeeAll": "Vedi Tutte Le Risorse",
@@ -171,22 +173,22 @@
     "noCountryFound": "Nessun paese trovato.",
     "siteSelectionDescription": "Questo sito fornirà connettività all'obiettivo.",
     "resourceType": "Tipo Di Risorsa",
-    "resourceTypeDescription": "Determina come vuoi accedere alla tua risorsa",
+    "resourceTypeDescription": "Determine how to access the resource",
     "resourceHTTPSSettings": "Impostazioni HTTPS",
-    "resourceHTTPSSettingsDescription": "Configura come sarà possibile accedere alla tua risorsa su HTTPS",
+    "resourceHTTPSSettingsDescription": "Configure how the resource will be accessed over HTTPS",
     "domainType": "Tipo Di Dominio",
     "subdomain": "Sottodominio",
     "baseDomain": "Dominio Base",
-    "subdomnainDescription": "Il sottodominio in cui la tua risorsa sarà accessibile.",
+    "subdomnainDescription": "The subdomain where the resource will be accessible.",
     "resourceRawSettings": "Impostazioni TCP/UDP",
-    "resourceRawSettingsDescription": "Configura come sarà possibile accedere alla tua risorsa tramite TCP/UDP. Mappare la risorsa a una porta sul server host Pangolin, in modo da poter accedere alla risorsa dal server-public ip:mapped-port.",
+    "resourceRawSettingsDescription": "Configure how the resource will be accessed over TCP/UDP. You map the resource to a port on the host Pangolin server, so you can access the resource from server-public-ip:mapped-port.",
     "protocol": "Protocollo",
     "protocolSelect": "Seleziona un protocollo",
     "resourcePortNumber": "Numero Porta",
     "resourcePortNumberDescription": "Il numero di porta esterna per le richieste di proxy.",
     "cancel": "Annulla",
     "resourceConfig": "Snippet Di Configurazione",
-    "resourceConfigDescription": "Copia e incolla questi snippet di configurazione per configurare la tua risorsa TCP/UDP",
+    "resourceConfigDescription": "Copy and paste these configuration snippets to set up the TCP/UDP resource",
     "resourceAddEntrypoints": "Traefik: Aggiungi Ingresso",
     "resourceExposePorts": "Gerbil: espone le porte in Docker componi",
     "resourceLearnRaw": "Scopri come configurare le risorse TCP/UDP",
@@ -202,14 +204,14 @@
     "proxy": "Proxy",
     "internal": "Interno",
     "rules": "Regole",
-    "resourceSettingDescription": "Configura le impostazioni sulla tua risorsa",
+    "resourceSettingDescription": "Configure the settings on the resource",
     "resourceSetting": "Impostazioni {resourceName}",
-    "alwaysAllow": "Consenti Sempre",
-    "alwaysDeny": "Nega Sempre",
+    "alwaysAllow": "Bypass Auth",
+    "alwaysDeny": "Block Access",
     "passToAuth": "Passa all'autenticazione",
-    "orgSettingsDescription": "Configura le impostazioni generali della tua organizzazione",
+    "orgSettingsDescription": "Configure the organization's settings",
     "orgGeneralSettings": "Impostazioni Organizzazione",
-    "orgGeneralSettingsDescription": "Gestisci i dettagli dell'organizzazione e la configurazione",
+    "orgGeneralSettingsDescription": "Manage the organization's details and configuration",
     "saveGeneralSettings": "Salva Impostazioni Generali",
     "saveSettings": "Salva Impostazioni",
     "orgDangerZone": "Zona Pericolosa",
@@ -232,7 +234,7 @@
     "orgMissing": "ID Organizzazione Mancante",
     "orgMissingMessage": "Impossibile rigenerare l'invito senza un ID organizzazione.",
     "accessUsersManage": "Gestisci Utenti",
-    "accessUsersDescription": "Invita gli utenti e aggiungili ai ruoli per gestire l'accesso alla tua organizzazione",
+    "accessUsersDescription": "Invite and manage users with access to this organization",
     "accessUsersSearch": "Cerca utenti...",
     "accessUserCreate": "Crea Utente",
     "accessUserRemove": "Rimuovi Utente",
@@ -241,13 +243,13 @@
     "role": "Ruolo",
     "nameRequired": "Il nome è obbligatorio",
     "accessRolesManage": "Gestisci Ruoli",
-    "accessRolesDescription": "Configura i ruoli per gestire l'accesso alla tua organizzazione",
+    "accessRolesDescription": "Create and manage roles for users in the organization",
     "accessRolesSearch": "Ricerca ruoli...",
     "accessRolesAdd": "Aggiungi Ruolo",
     "accessRoleDelete": "Elimina Ruolo",
     "description": "Descrizione",
     "inviteTitle": "Inviti Aperti",
-    "inviteDescription": "Gestisci i tuoi inviti ad altri utenti",
+    "inviteDescription": "Manage invitations for other users to join the organization",
     "inviteSearch": "Cerca inviti...",
     "minutes": "Minuti",
     "hours": "Ore",
@@ -261,13 +263,13 @@
     "apiKeysErrorCreate": "Errore nella creazione della chiave API",
     "apiKeysErrorSetPermission": "Errore nell'impostazione dei permessi",
     "apiKeysCreate": "Genera Chiave API",
-    "apiKeysCreateDescription": "Genera una nuova chiave API per la tua organizzazione",
+    "apiKeysCreateDescription": "Generate a new API key for the organization",
     "apiKeysGeneralSettings": "Permessi",
     "apiKeysGeneralSettingsDescription": "Determina cosa può fare questa chiave API",
-    "apiKeysList": "La Tua Chiave API",
-    "apiKeysSave": "Salva La Tua Chiave API",
+    "apiKeysList": "New API Key",
+    "apiKeysSave": "Save the API Key",
     "apiKeysSaveDescription": "Potrai vederla solo una volta. Assicurati di copiarla in un luogo sicuro.",
-    "apiKeysInfo": "La tua chiave API è:",
+    "apiKeysInfo": "The API key is:",
     "apiKeysConfirmCopy": "Ho copiato la chiave API",
     "generate": "Genera",
     "done": "Fatto",
@@ -424,7 +426,7 @@
     "userCreated": "Utente creato",
     "userCreatedDescription": "L'utente è stato creato con successo.",
     "userTypeInternal": "Utente Interno",
-    "userTypeInternalDescription": "Invita un utente a unirsi direttamente alla tua organizzazione.",
+    "userTypeInternalDescription": "Invite a user to join the organization directly.",
     "userTypeExternal": "Utente Esterno",
     "userTypeExternalDescription": "Crea un utente con un provider di identità esterno.",
     "accessUserCreateDescription": "Segui i passaggi seguenti per creare un nuovo utente",
@@ -468,13 +470,13 @@
     "accessControlsSubmit": "Salva Controlli di Accesso",
     "roles": "Ruoli",
     "accessUsersRoles": "Gestisci Utenti e Ruoli",
-    "accessUsersRolesDescription": "Invita utenti e aggiungili ai ruoli per gestire l'accesso alla tua organizzazione",
+    "accessUsersRolesDescription": "Invite users and add them to roles to manage access to the organization",
     "key": "Chiave",
     "createdAt": "Creato Il",
     "proxyErrorInvalidHeader": "Valore dell'intestazione Host personalizzata non valido. Usa il formato nome dominio o salva vuoto per rimuovere l'intestazione Host personalizzata.",
     "proxyErrorTls": "Nome Server TLS non valido. Usa il formato nome dominio o salva vuoto per rimuovere il Nome Server TLS.",
     "proxyEnableSSL": "Abilita SSL",
-    "proxyEnableSSLDescription": "Abilita la crittografia SSL/TLS per connessioni HTTPS sicure ai tuoi obiettivi.",
+    "proxyEnableSSLDescription": "Enable SSL/TLS encryption for secure HTTPS connections to the targets.",
     "target": "Target",
     "configureTarget": "Configura Obiettivi",
     "targetErrorFetch": "Impossibile recuperare i target",
@@ -490,29 +492,29 @@
     "targetsErrorUpdate": "Impossibile aggiornare i target",
     "targetsErrorUpdateDescription": "Si è verificato un errore durante l'aggiornamento dei target",
     "targetTlsUpdate": "Impostazioni TLS aggiornate",
-    "targetTlsUpdateDescription": "Le tue impostazioni TLS sono state aggiornate con successo",
+    "targetTlsUpdateDescription": "TLS settings have been updated successfully",
     "targetErrorTlsUpdate": "Impossibile aggiornare le impostazioni TLS",
     "targetErrorTlsUpdateDescription": "Si è verificato un errore durante l'aggiornamento delle impostazioni TLS",
     "proxyUpdated": "Impostazioni proxy aggiornate",
-    "proxyUpdatedDescription": "Le tue impostazioni proxy sono state aggiornate con successo",
+    "proxyUpdatedDescription": "Proxy settings have been updated successfully",
     "proxyErrorUpdate": "Impossibile aggiornare le impostazioni proxy",
     "proxyErrorUpdateDescription": "Si è verificato un errore durante l'aggiornamento delle impostazioni proxy",
     "targetAddr": "IP / Nome host",
     "targetPort": "Porta",
     "targetProtocol": "Protocollo",
     "targetTlsSettings": "Configurazione Connessione Sicura",
-    "targetTlsSettingsDescription": "Configura le impostazioni SSL/TLS per la tua risorsa",
+    "targetTlsSettingsDescription": "Configure SSL/TLS settings for the resource",
     "targetTlsSettingsAdvanced": "Impostazioni TLS Avanzate",
     "targetTlsSni": "Nome Server Tls",
     "targetTlsSniDescription": "Il Nome Server TLS da usare per SNI. Lascia vuoto per usare quello predefinito.",
     "targetTlsSubmit": "Salva Impostazioni",
     "targets": "Configurazione Target",
-    "targetsDescription": "Configura i target per instradare il traffico ai tuoi servizi backend",
+    "targetsDescription": "Set up targets to route traffic to backend services",
     "targetStickySessions": "Abilita Sessioni Persistenti",
     "targetStickySessionsDescription": "Mantieni le connessioni sullo stesso target backend per l'intera sessione.",
     "methodSelect": "Seleziona metodo",
     "targetSubmit": "Aggiungi Target",
-    "targetNoOne": "Questa risorsa non ha bersagli. Aggiungi un obiettivo per configurare dove inviare le richieste al tuo backend.",
+    "targetNoOne": "This resource doesn't have any targets. Add a target to configure where to send requests to the backend.",
     "targetNoOneDescription": "L'aggiunta di più di un target abiliterà il bilanciamento del carico.",
     "targetsSubmit": "Salva Target",
     "addTarget": "Aggiungi Target",
@@ -530,7 +532,7 @@
     "tlsServerNameDescription": "The TLS server name to use for SNI",
     "save": "Salva",
     "proxyAdditional": "Impostazioni Proxy Aggiuntive",
-    "proxyAdditionalDescription": "Configura come la tua risorsa gestisce le impostazioni proxy",
+    "proxyAdditionalDescription": "Configure how the resource handles proxy settings",
     "proxyCustomHeader": "Intestazione Host Personalizzata",
     "proxyCustomHeaderDescription": "L'intestazione host da impostare durante il proxy delle richieste. Lascia vuoto per usare quella predefinita.",
     "proxyAdditionalSubmit": "Salva Impostazioni Proxy",
@@ -570,7 +572,7 @@
     "rulesMatchType": "Tipo di Corrispondenza",
     "value": "Valore",
     "rulesAbout": "Informazioni sulle Regole",
-    "rulesAboutDescription": "Le regole ti permettono di controllare l'accesso alla tua risorsa in base a una serie di criteri. Puoi creare regole per consentire o negare l'accesso basato su indirizzo IP o percorso URL.",
+    "rulesAboutDescription": "Rules allow you to control access to the resource based on a set of criteria. You can create rules to allow or deny access based on IP address or URL path.",
     "rulesActions": "Azioni",
     "rulesActionAlwaysAllow": "Consenti Sempre: Ignora tutti i metodi di autenticazione",
     "rulesActionAlwaysDeny": "Nega Sempre: Blocca tutte le richieste; nessuna autenticazione può essere tentata",
@@ -582,7 +584,7 @@
     "rulesEnable": "Abilita Regole",
     "rulesEnableDescription": "Abilita o disabilita la valutazione delle regole per questa risorsa",
     "rulesResource": "Configurazione Regole Risorsa",
-    "rulesResourceDescription": "Configura le regole per controllare l'accesso alla tua risorsa",
+    "rulesResourceDescription": "Configure rules to control access to the resource",
     "ruleSubmit": "Aggiungi Regola",
     "rulesNoOne": "Nessuna regola. Aggiungi una regola usando il modulo.",
     "rulesOrder": "Le regole sono valutate per priorità in ordine crescente.",
@@ -598,7 +600,7 @@
     "none": "Nessuno",
     "unknown": "Sconosciuto",
     "resources": "Risorse",
-    "resourcesDescription": "Le risorse sono proxy per le applicazioni in esecuzione sulla tua rete privata. Crea una risorsa per qualsiasi servizio HTTP/HTTPS o TCP/UDP raw sulla tua rete privata. Ogni risorsa deve essere collegata a un sito per abilitare la connettività privata e sicura attraverso un tunnel WireGuard crittografato.",
+    "resourcesDescription": "Resources are proxies to applications running on the private network. Create a resource for any HTTP/HTTPS or raw TCP/UDP service on your private network. Each resource must be connected to a site to enable private, secure connectivity through an encrypted WireGuard tunnel.",
     "resourcesWireGuardConnect": "Connettività sicura con crittografia WireGuard",
     "resourcesMultipleAuthenticationMethods": "Configura molteplici metodi di autenticazione",
     "resourcesUsersRolesAccess": "Controllo accessi basato su utenti e ruoli",
@@ -609,7 +611,7 @@
     "resourceSelect": "Seleziona risorsa",
     "shareLinks": "Link di Condivisione",
     "share": "Link Condivisibili",
-    "shareDescription2": "Crea link condivisibili per le tue risorse. I link forniscono accesso temporaneo o illimitato alla tua risorsa. Puoi configurare la durata di scadenza del link quando lo crei.",
+    "shareDescription2": "Create shareable links to resources. Links provide temporary or unlimited access to your resource. You can configure the expiration duration of the link when you create one.",
     "shareEasyCreate": "Facile da creare e condividere",
     "shareConfigurableExpirationDuration": "Durata di scadenza configurabile",
     "shareSecureAndRevocable": "Sicuro e revocabile",
@@ -619,19 +621,19 @@
     "unknownCommand": "Comando sconosciuto",
     "newtErrorFetchReleases": "Impossibile recuperare le informazioni sulla versione: {err}",
     "newtErrorFetchLatest": "Errore nel recupero dell'ultima versione: {err}",
-    "newtEndpoint": "Endpoint Newt",
-    "newtId": "ID Newt",
-    "newtSecretKey": "Chiave Segreta Newt",
+    "newtEndpoint": "Endpoint",
+    "newtId": "ID",
+    "newtSecretKey": "Secret",
     "architecture": "Architettura",
     "sites": "Siti",
-    "siteWgAnyClients": "Usa qualsiasi client WireGuard per connetterti. Dovrai indirizzare le tue risorse interne usando l'IP del peer.",
+    "siteWgAnyClients": "Use any WireGuard client to connect. You will have to address internal resources using the peer IP.",
     "siteWgCompatibleAllClients": "Compatibile con tutti i client WireGuard",
     "siteWgManualConfigurationRequired": "Configurazione manuale richiesta",
     "userErrorNotAdminOrOwner": "L'utente non è un amministratore o proprietario",
     "pangolinSettings": "Impostazioni - Pangolin",
     "accessRoleYour": "Il tuo ruolo:",
-    "accessRoleSelect2": "Seleziona un ruolo",
-    "accessUserSelect": "Seleziona un utente",
+    "accessRoleSelect2": "Select roles",
+    "accessUserSelect": "Select users",
     "otpEmailEnter": "Inserisci un'email",
     "otpEmailEnterDescription": "Premi invio per aggiungere un'email dopo averla digitata nel campo di input.",
     "otpEmailErrorInvalid": "Indirizzo email non valido. Il carattere jolly (*) deve essere l'intera parte locale.",
@@ -683,7 +685,7 @@
     "resourcePincodeSetupTitle": "Imposta Codice PIN",
     "resourcePincodeSetupTitleDescription": "Imposta un codice PIN per proteggere questa risorsa",
     "resourceRoleDescription": "Gli amministratori possono sempre accedere a questa risorsa.",
-    "resourceUsersRoles": "Utenti e Ruoli",
+    "resourceUsersRoles": "Access Controls",
     "resourceUsersRolesDescription": "Configura quali utenti e ruoli possono visitare questa risorsa",
     "resourceUsersRolesSubmit": "Salva Utenti e Ruoli",
     "resourceWhitelistSave": "Salvato con successo",
@@ -779,15 +781,15 @@
     "idpOidcConfigure": "Configurazione OAuth2/OIDC",
     "idpOidcConfigureDescription": "Configura gli endpoint e le credenziali del provider OAuth2/OIDC",
     "idpClientId": "ID Client",
-    "idpClientIdDescription": "L'ID client OAuth2 dal tuo provider di identità",
+    "idpClientIdDescription": "The OAuth2 client ID from the identity provider",
     "idpClientSecret": "Segreto Client",
-    "idpClientSecretDescription": "Il segreto client OAuth2 dal tuo provider di identità",
+    "idpClientSecretDescription": "The OAuth2 client secret from the identity provider",
     "idpAuthUrl": "URL di Autorizzazione",
     "idpAuthUrlDescription": "L'URL dell'endpoint di autorizzazione OAuth2",
     "idpTokenUrl": "URL del Token",
     "idpTokenUrlDescription": "L'URL dell'endpoint del token OAuth2",
     "idpOidcConfigureAlert": "Informazioni Importanti",
-    "idpOidcConfigureAlertDescription": "Dopo aver creato il provider di identità, dovrai configurare l'URL di callback nelle impostazioni del tuo provider di identità. L'URL di callback verrà fornito dopo la creazione riuscita.",
+    "idpOidcConfigureAlertDescription": "After creating the identity provider, you will need to configure the callback URL in the identity provider's settings. The callback URL will be provided after successful creation.",
     "idpToken": "Configurazione Token",
     "idpTokenDescription": "Configura come estrarre le informazioni dell'utente dal token ID",
     "idpJmespathAbout": "Informazioni su JMESPath",
@@ -804,7 +806,7 @@
     "idpSubmit": "Crea Provider di Identità",
     "orgPolicies": "Politiche Organizzazione",
     "idpSettings": "Impostazioni {idpName}",
-    "idpCreateSettingsDescription": "Configura le impostazioni per il tuo provider di identità",
+    "idpCreateSettingsDescription": "Configure the settings for the identity provider",
     "roleMapping": "Mappatura Ruoli",
     "orgMapping": "Mappatura Organizzazione",
     "orgPoliciesSearch": "Cerca politiche organizzazione...",
@@ -839,7 +841,7 @@
     "idpUpdatedDescription": "Provider di identità aggiornato con successo",
     "redirectUrl": "URL di Reindirizzamento",
     "redirectUrlAbout": "Informazioni sull'URL di Reindirizzamento",
-    "redirectUrlAboutDescription": "Questo è l'URL a cui gli utenti verranno reindirizzati dopo l'autenticazione. Devi configurare questo URL nelle impostazioni del tuo provider di identità.",
+    "redirectUrlAboutDescription": "This is the URL to which users will be redirected after authentication. You need to configure this URL in the identity provider's settings.",
     "pangolinAuth": "Autenticazione - Pangolina",
     "verificationCodeLengthRequirements": "Il tuo codice di verifica deve essere di 8 caratteri.",
     "errorOccurred": "Si è verificato un errore",
@@ -922,6 +924,10 @@
     "passwordResetSent": "Invieremo un codice di reset della password a questo indirizzo email.",
     "passwordResetCode": "Codice di Reset",
     "passwordResetCodeDescription": "Controlla la tua email per il codice di reset.",
+    "generatePasswordResetCode": "Generate Password Reset Code",
+    "passwordResetCodeGenerated": "Password Reset Code Generated",
+    "passwordResetCodeGeneratedDescription": "Share this code with the user. They can use it to reset their password.",
+    "passwordResetUrl": "Reset URL",
     "passwordNew": "Nuova Password",
     "passwordNewConfirm": "Conferma Nuova Password",
     "changePassword": "Cambia Password",
@@ -939,6 +945,9 @@
     "pincodeAuth": "Codice Autenticatore",
     "pincodeSubmit2": "Invia Codice",
     "passwordResetSubmit": "Richiedi Reset",
+    "passwordResetAlreadyHaveCode": "Enter Password Reset Code",
+    "passwordResetSmtpRequired": "Please contact your administrator",
+    "passwordResetSmtpRequiredDescription": "A password reset code is required to reset your password. Please contact your administrator for assistance.",
     "passwordBack": "Torna alla Password",
     "loginBack": "Torna al login",
     "signup": "Registrati",
@@ -1104,12 +1113,15 @@
     "actionListSiteResources": "Elenca Risorse del Sito",
     "actionUpdateSiteResource": "Aggiorna Risorsa del Sito",
     "actionListInvitations": "Elenco Inviti",
+    "actionExportLogs": "Export Logs",
+    "actionViewLogs": "View Logs",
     "noneSelected": "Nessuna selezione",
     "orgNotFound2": "Nessuna organizzazione trovata.",
     "searchProgress": "Ricerca...",
     "create": "Crea",
     "orgs": "Organizzazioni",
     "loginError": "Si è verificato un errore durante l'accesso",
+    "loginRequiredForDevice": "Login is required to authenticate your device.",
     "passwordForgot": "Password dimenticata?",
     "otpAuth": "Autenticazione a Due Fattori",
     "otpAuthDescription": "Inserisci il codice dalla tua app di autenticazione o uno dei tuoi codici di backup monouso.",
@@ -1164,23 +1176,29 @@
     "sidebarHome": "Home",
     "sidebarSites": "Siti",
     "sidebarResources": "Risorse",
+    "sidebarProxyResources": "Public",
+    "sidebarClientResources": "Private",
     "sidebarAccessControl": "Controllo Accesso",
+    "sidebarLogsAndAnalytics": "Logs & Analytics",
     "sidebarUsers": "Utenti",
+    "sidebarAdmin": "Admin",
     "sidebarInvitations": "Inviti",
     "sidebarRoles": "Ruoli",
-    "sidebarShareableLinks": "Collegamenti Condividibili",
+    "sidebarShareableLinks": "Links",
     "sidebarApiKeys": "Chiavi API",
     "sidebarSettings": "Impostazioni",
     "sidebarAllUsers": "Tutti Gli Utenti",
     "sidebarIdentityProviders": "Fornitori Di Identità",
     "sidebarLicense": "Licenza",
     "sidebarClients": "Client",
+    "sidebarUserDevices": "Users",
+    "sidebarMachineClients": "Machines",
     "sidebarDomains": "Domini",
     "sidebarGeneral": "General",
     "sidebarLogAndAnalytics": "Log & Analytics",
     "sidebarBluePrints": "Progetti",
     "sidebarOrganization": "Organization",
-    "sidebarLogsAnalytics": "Request Analytics",
+    "sidebarLogsAnalytics": "Analytics",
     "blueprints": "Progetti",
     "blueprintsDescription": "Applica le configurazioni dichiarative e visualizza le partite precedenti",
     "blueprintAdd": "Aggiungi Progetto",
@@ -1191,7 +1209,7 @@
     "blueprintDetailsDescription": "Vedere il risultato del progetto applicato e gli eventuali errori verificatisi",
     "blueprintInfo": "Informazioni Sul Progetto",
     "message": "Messaggio",
-    "blueprintContentsDescription": "Definisci il contenuto di YAML che descrive la tua infrastruttura",
+    "blueprintContentsDescription": "Define the YAML content describing the infrastructure",
     "blueprintErrorCreateDescription": "Si è verificato un errore durante l'applicazione del progetto",
     "blueprintErrorCreate": "Errore nella creazione del progetto",
     "searchBlueprintProgress": "Cerca progetti...",
@@ -1247,15 +1265,15 @@
     "loading": "Caricamento",
     "restart": "Riavvia",
     "domains": "Domini",
-    "domainsDescription": "Gestisci domini per la tua organizzazione",
+    "domainsDescription": "Create and manage domains available in the organization",
     "domainsSearch": "Cerca domini...",
     "domainAdd": "Aggiungi Dominio",
-    "domainAddDescription": "Registra un nuovo dominio con la tua organizzazione",
+    "domainAddDescription": "Register a new domain with to the organization",
     "domainCreate": "Crea Dominio",
     "domainCreatedDescription": "Dominio creato con successo",
     "domainDeletedDescription": "Dominio eliminato con successo",
-    "domainQuestionRemove": "Sei sicuro di voler rimuovere il dominio dal tuo account?",
-    "domainMessageRemove": "Una volta rimosso, il dominio non sarà più associato al tuo account.",
+    "domainQuestionRemove": "Are you sure you want to remove the domain?",
+    "domainMessageRemove": "Once removed, the domain will no longer be associated with the organization.",
     "domainConfirmDelete": "Conferma Eliminazione Dominio",
     "domainDelete": "Elimina Dominio",
     "domain": "Dominio",
@@ -1274,7 +1292,7 @@
     "pending": "In attesa",
     "sidebarBilling": "Fatturazione",
     "billing": "Fatturazione",
-    "orgBillingDescription": "Gestisci le tue informazioni di fatturazione e abbonamenti",
+    "orgBillingDescription": "Manage billing information and subscriptions",
     "github": "GitHub",
     "pangolinHosted": "Pangolin Hosted",
     "fossorial": "Fossoriale",
@@ -1317,7 +1335,7 @@
     "domainPickerSortAsc": "A-Z",
     "domainPickerSortDesc": "Z-A",
     "domainPickerCheckingAvailability": "Controllando la disponibilità...",
-    "domainPickerNoMatchingDomains": "Nessun dominio corrispondente trovato. Prova un dominio diverso o verifica le impostazioni del dominio della tua organizzazione.",
+    "domainPickerNoMatchingDomains": "No matching domains found. Try a different domain or check the organization's domain settings.",
     "domainPickerOrganizationDomains": "Domini dell'Organizzazione",
     "domainPickerProvidedDomains": "Domini Forniti",
     "domainPickerSubdomain": "Sottodominio: {subdomain}",
@@ -1351,7 +1369,7 @@
     "billingModifySubscription": "Modifica Abbonamento",
     "billingStartSubscription": "Inizia Abbonamento",
     "billingRecurringCharge": "Addebito Ricorrente",
-    "billingManageSubscriptionSettings": "Gestisci impostazioni e preferenze dell'abbonamento",
+    "billingManageSubscriptionSettings": "Manage subscription settings and preferences",
     "billingNoActiveSubscription": "Non hai un abbonamento attivo. Avvia il tuo abbonamento per aumentare i limiti di utilizzo.",
     "billingFailedToLoadSubscription": "Caricamento abbonamento fallito",
     "billingFailedToLoadUsage": "Caricamento utilizzo fallito",
@@ -1362,9 +1380,9 @@
     "billingPortalError": "Errore del Portale",
     "billingDataUsageInfo": "Hai addebitato tutti i dati trasferiti attraverso i tunnel sicuri quando sei connesso al cloud. Questo include sia il traffico in entrata e in uscita attraverso tutti i siti. Quando si raggiunge il limite, i siti si disconnetteranno fino a quando non si aggiorna il piano o si riduce l'utilizzo. I dati non vengono caricati quando si utilizzano nodi.",
     "billingOnlineTimeInfo": "Ti viene addebitato in base al tempo in cui i tuoi siti rimangono connessi al cloud. Ad esempio, 44,640 minuti è uguale a un sito in esecuzione 24/7 per un mese intero. Quando raggiungi il tuo limite, i tuoi siti si disconnetteranno fino a quando non aggiorni il tuo piano o riduci l'utilizzo. Il tempo non viene caricato quando si usano i nodi.",
-    "billingUsersInfo": "Sei addebitato per ogni utente nella tua organizzazione. La fatturazione viene calcolata giornalmente in base al numero di account utente attivi nella tua organizzazione.",
-    "billingDomainInfo": "Sei addebitato per ogni dominio nella tua organizzazione. La fatturazione viene calcolata giornalmente in base al numero di account dominio attivi nella tua organizzazione.",
-    "billingRemoteExitNodesInfo": "Sei addebitato per ogni nodo gestito nella tua organizzazione. La fatturazione viene calcolata giornalmente in base al numero di nodi gestiti attivi nella tua organizzazione.",
+    "billingUsersInfo": "You're charged for each user in the organization. Billing is calculated daily based on the number of active user accounts in your org.",
+    "billingDomainInfo": "You're charged for each domain in the organization. Billing is calculated daily based on the number of active domain accounts in your org.",
+    "billingRemoteExitNodesInfo": "You're charged for each managed Node in the organization. Billing is calculated daily based on the number of active managed Nodes in your org.",
     "domainNotFound": "Domini Non Trovati",
     "domainNotFoundDescription": "Questa risorsa è disabilitata perché il dominio non esiste più nel nostro sistema. Si prega di impostare un nuovo dominio per questa risorsa.",
     "failed": "Fallito",
@@ -1456,23 +1474,23 @@
     "errorCreatingClient": "Errore nella creazione del client",
     "clientDefaultsNotFound": "Impostazioni predefinite del client non trovate",
     "createClient": "Crea Cliente",
-    "createClientDescription": "Crea un nuovo cliente per connettersi ai tuoi siti",
+    "createClientDescription": "Create a new client to access private resources",
     "seeAllClients": "Vedi Tutti i Clienti",
     "clientInformation": "Informazioni sul Cliente",
     "clientNamePlaceholder": "Nome Cliente",
     "address": "Indirizzo",
     "subnetPlaceholder": "Sottorete",
-    "addressDescription": "L'indirizzo che questo cliente utilizzerà per la connettività",
+    "addressDescription": "The internal address of the client. Must fall within the organization's subnet.",
     "selectSites": "Seleziona siti",
     "sitesDescription": "Il cliente avrà connettività ai siti selezionati",
     "clientInstallOlm": "Installa Olm",
     "clientInstallOlmDescription": "Avvia Olm sul tuo sistema",
-    "clientOlmCredentials": "Credenziali Olm",
-    "clientOlmCredentialsDescription": "Ecco come Olm si autenticherà con il server",
-    "olmEndpoint": "Endpoint Olm",
-    "olmId": "ID Olm",
-    "olmSecretKey": "Chiave Segreta Olm",
-    "clientCredentialsSave": "Salva le Tue Credenziali",
+    "clientOlmCredentials": "Credentials",
+    "clientOlmCredentialsDescription": "This is how the client will authenticate with the server",
+    "olmEndpoint": "Endpoint",
+    "olmId": "ID",
+    "olmSecretKey": "Secret",
+    "clientCredentialsSave": "Save the Credentials",
     "clientCredentialsSaveDescription": "Potrai vederlo solo una volta. Assicurati di copiarlo in un luogo sicuro.",
     "generalSettingsDescription": "Configura le impostazioni generali per questo cliente",
     "clientUpdated": "Cliente aggiornato",
@@ -1483,9 +1501,7 @@
     "sitesFetchError": "Si è verificato un errore durante il recupero dei siti.",
     "olmErrorFetchReleases": "Si è verificato un errore durante il recupero delle versioni di Olm.",
     "olmErrorFetchLatest": "Si è verificato un errore durante il recupero dell'ultima versione di Olm.",
-    "remoteSubnets": "Sottoreti Remote",
     "enterCidrRange": "Inserisci l'intervallo CIDR",
-    "remoteSubnetsDescription": "Aggiungi intervalli CIDR che possono essere accessibili da questo sito in remoto utilizzando i client. Usa il formato come 10.0.0.0/24. Questo si applica SOLO alla connettività del client VPN.",
     "resourceEnableProxy": "Abilita Proxy Pubblico",
     "resourceEnableProxyDescription": "Abilita il proxy pubblico a questa risorsa. Consente l'accesso alla risorsa dall'esterno della rete tramite il cloud su una porta aperta. Richiede la configurazione di Traefik.",
     "externalProxyEnabled": "Proxy Esterno Abilitato",
@@ -1503,14 +1519,15 @@
     "enableHealthChecksDescription": "Monitorare lo stato di salute di questo obiettivo. Se necessario, è possibile monitorare un endpoint diverso da quello del bersaglio.",
     "healthScheme": "Metodo",
     "healthSelectScheme": "Seleziona Metodo",
+    "healthCheckPortInvalid": "Health check port must be between 1 and 65535",
     "healthCheckPath": "Percorso",
     "healthHostname": "IP / Nome host",
     "healthPort": "Porta",
     "healthCheckPathDescription": "Percorso per verificare lo stato di salute.",
-    "healthyIntervalSeconds": "Intervallo Sano",
-    "unhealthyIntervalSeconds": "Intervallo Non Sano",
+    "healthyIntervalSeconds": "Healthy Interval (sec)",
+    "unhealthyIntervalSeconds": "Unhealthy Interval (sec)",
     "IntervalSeconds": "Intervallo Sano",
-    "timeoutSeconds": "Timeout",
+    "timeoutSeconds": "Timeout (sec)",
     "timeIsInSeconds": "Il tempo è in secondi",
     "retryAttempts": "Tentativi di Riprova",
     "expectedResponseCodes": "Codici di Risposta Attesi",
@@ -1546,12 +1563,12 @@
     "resourceEditDomain": "Modifica Dominio",
     "siteName": "Nome del Sito",
     "proxyPort": "Porta",
-    "resourcesTableProxyResources": "Risorse Proxy",
-    "resourcesTableClientResources": "Risorse Client",
+    "resourcesTableProxyResources": "Public",
+    "resourcesTableClientResources": "Private",
     "resourcesTableNoProxyResourcesFound": "Nessuna risorsa proxy trovata.",
     "resourcesTableNoInternalResourcesFound": "Nessuna risorsa interna trovata.",
     "resourcesTableDestination": "Destinazione",
-    "resourcesTableTheseResourcesForUseWith": "Queste risorse sono per uso con",
+    "resourcesTableAlias": "Alias",
     "resourcesTableClients": "Client",
     "resourcesTableAndOnlyAccessibleInternally": "e sono accessibili solo internamente quando connessi con un client.",
     "resourcesTableNoTargets": "Nessun obiettivo",
@@ -1560,8 +1577,8 @@
     "resourcesTableOffline": "Offline",
     "resourcesTableUnknown": "Sconosciuto",
     "resourcesTableNotMonitored": "Non monitorato",
-    "editInternalResourceDialogEditClientResource": "Modifica Risorsa Client",
-    "editInternalResourceDialogUpdateResourceProperties": "Aggiorna le proprietà della risorsa e la configurazione del target per {resourceName}.",
+    "editInternalResourceDialogEditClientResource": "Edit Private Resource",
+    "editInternalResourceDialogUpdateResourceProperties": "Update the resource configuration and access controls for {resourceName}",
     "editInternalResourceDialogResourceProperties": "Proprietà della Risorsa",
     "editInternalResourceDialogName": "Nome",
     "editInternalResourceDialogProtocol": "Protocollo",
@@ -1580,11 +1597,22 @@
     "editInternalResourceDialogInvalidIPAddressFormat": "Formato dell'indirizzo IP non valido",
     "editInternalResourceDialogDestinationPortMin": "La porta di destinazione deve essere almeno 1",
     "editInternalResourceDialogDestinationPortMax": "La porta di destinazione deve essere inferiore a 65536",
+    "editInternalResourceDialogPortModeRequired": "Protocol, proxy port, and destination port are required for port mode",
+    "editInternalResourceDialogMode": "Mode",
+    "editInternalResourceDialogModePort": "Port",
+    "editInternalResourceDialogModeHost": "Host",
+    "editInternalResourceDialogModeCidr": "CIDR",
+    "editInternalResourceDialogDestination": "Destination",
+    "editInternalResourceDialogDestinationHostDescription": "The IP address or hostname of the resource on the site's network.",
+    "editInternalResourceDialogDestinationIPDescription": "The IP or hostname address of the resource on the site's network.",
+    "editInternalResourceDialogDestinationCidrDescription": "The CIDR range of the resource on the site's network.",
+    "editInternalResourceDialogAlias": "Alias",
+    "editInternalResourceDialogAliasDescription": "An optional internal DNS alias for this resource.",
     "createInternalResourceDialogNoSitesAvailable": "Nessun Sito Disponibile",
     "createInternalResourceDialogNoSitesAvailableDescription": "Devi avere almeno un sito Newt con una subnet configurata per creare risorse interne.",
     "createInternalResourceDialogClose": "Chiudi",
-    "createInternalResourceDialogCreateClientResource": "Crea Risorsa Client",
-    "createInternalResourceDialogCreateClientResourceDescription": "Crea una nuova risorsa che sarà accessibile ai client connessi al sito selezionato.",
+    "createInternalResourceDialogCreateClientResource": "Create Private Resource",
+    "createInternalResourceDialogCreateClientResourceDescription": "Create a new resource that will only be accessible to clients connected to the organization",
     "createInternalResourceDialogResourceProperties": "Proprietà della Risorsa",
     "createInternalResourceDialogName": "Nome",
     "createInternalResourceDialogSite": "Sito",
@@ -1613,11 +1641,22 @@
     "createInternalResourceDialogInvalidIPAddressFormat": "Formato dell'indirizzo IP non valido",
     "createInternalResourceDialogDestinationPortMin": "La porta di destinazione deve essere almeno 1",
     "createInternalResourceDialogDestinationPortMax": "La porta di destinazione deve essere inferiore a 65536",
+    "createInternalResourceDialogPortModeRequired": "Protocol, proxy port, and destination port are required for port mode",
+    "createInternalResourceDialogMode": "Mode",
+    "createInternalResourceDialogModePort": "Port",
+    "createInternalResourceDialogModeHost": "Host",
+    "createInternalResourceDialogModeCidr": "CIDR",
+    "createInternalResourceDialogDestination": "Destination",
+    "createInternalResourceDialogDestinationHostDescription": "The IP address or hostname of the resource on the site's network.",
+    "createInternalResourceDialogDestinationCidrDescription": "The CIDR range of the resource on the site's network.",
+    "createInternalResourceDialogAlias": "Alias",
+    "createInternalResourceDialogAliasDescription": "An optional internal DNS alias for this resource.",
     "siteConfiguration": "Configurazione",
     "siteAcceptClientConnections": "Accetta Connessioni Client",
-    "siteAcceptClientConnectionsDescription": "Permetti ad altri dispositivi di connettersi attraverso questa istanza Newt come gateway utilizzando i client.",
-    "siteAddress": "Indirizzo del Sito",
-    "siteAddressDescription": "Specifica l'indirizzo IP dell'host a cui i client si collegano. Questo è l'indirizzo interno del sito nella rete Pangolin per indirizzare i client. Deve rientrare nella subnet dell'Organizzazione.",
+    "siteAcceptClientConnectionsDescription": "Allow user devices and clients to access resources on this site. This can be changed later.",
+    "siteAddress": "Site Address (Advanced)",
+    "siteAddressDescription": "The internal address of the site. Must fall within the organization's subnet.",
+    "siteNameDescription": "The display name of the site that can be changed later.",
     "autoLoginExternalIdp": "Accesso Automatico con IDP Esterno",
     "autoLoginExternalIdpDescription": "Reindirizzare immediatamente l'utente all'IDP esterno per l'autenticazione.",
     "selectIdp": "Seleziona IDP",
@@ -1631,7 +1670,7 @@
     "autoLoginErrorNoRedirectUrl": "Nessun URL di reindirizzamento ricevuto dal provider di identità.",
     "autoLoginErrorGeneratingUrl": "Impossibile generare l'URL di autenticazione.",
     "remoteExitNodeManageRemoteExitNodes": "Nodi Remoti",
-    "remoteExitNodeDescription": "Self-host uno o più nodi remoti per estendere la connettività di rete e ridurre la dipendenza dal cloud",
+    "remoteExitNodeDescription": "Self-host one or more remote nodes to extend network connectivity and reduce reliance on the cloud",
     "remoteExitNodes": "Nodi",
     "searchRemoteExitNodes": "Cerca nodi...",
     "remoteExitNodeAdd": "Aggiungi Nodo",
@@ -1643,11 +1682,11 @@
     "sidebarRemoteExitNodes": "Nodi Remoti",
     "remoteExitNodeCreate": {
         "title": "Crea Nodo",
-        "description": "Crea un nuovo nodo per estendere la connettività di rete",
+        "description": "Create a new node to extend network connectivity",
         "viewAllButton": "Visualizza Tutti I Nodi",
         "strategy": {
             "title": "Strategia di Creazione",
-            "description": "Scegli questa opzione per configurare manualmente il nodo o generare nuove credenziali.",
+            "description": "Choose this to manually configure the node or generate new credentials.",
             "adopt": {
                 "title": "Adotta Nodo",
                 "description": "Scegli questo se hai già le credenziali per il nodo."
@@ -1668,7 +1707,7 @@
         },
         "generate": {
             "title": "Credenziali Generate",
-            "description": "Usa queste credenziali generate per configurare il nodo",
+            "description": "Use these generated credentials to configure the node",
             "nodeIdTitle": "ID Nodo",
             "secretTitle": "Segreto",
             "saveCredentialsTitle": "Aggiungi Credenziali alla Configurazione",
@@ -1744,16 +1783,16 @@
     "idpTypeLabel": "Tipo Provider Identità",
     "roleMappingExpressionPlaceholder": "es. contiene(gruppi, 'admin') && 'Admin' <unk> <unk> 'Membro'",
     "idpGoogleConfiguration": "Configurazione Google",
-    "idpGoogleConfigurationDescription": "Configura le tue credenziali di Google OAuth2",
-    "idpGoogleClientIdDescription": "Il Tuo Client Id Google OAuth2",
-    "idpGoogleClientSecretDescription": "Il Tuo Client Google OAuth2 Secret",
+    "idpGoogleConfigurationDescription": "Configure the Google OAuth2 credentials",
+    "idpGoogleClientIdDescription": "Google OAuth2 Client ID",
+    "idpGoogleClientSecretDescription": "Google OAuth2 Client Secret",
     "idpAzureConfiguration": "Configurazione Azure Entra ID",
-    "idpAzureConfigurationDescription": "Configura le credenziali OAuth2 di Azure Entra ID",
+    "idpAzureConfigurationDescription": "Configure Azure Entra ID OAuth2 credentials",
     "idpTenantId": "ID Tenant",
-    "idpTenantIdPlaceholder": "iltuo-inquilino-id",
-    "idpAzureTenantIdDescription": "Il tuo ID del tenant Azure (trovato nella panoramica di Azure Active Directory)",
-    "idpAzureClientIdDescription": "Il Tuo Id Client Registrazione App Azure",
-    "idpAzureClientSecretDescription": "Il Tuo Client Di Registrazione App Azure Secret",
+    "idpTenantIdPlaceholder": "tenant-id",
+    "idpAzureTenantIdDescription": "Azure tenant ID (found in Azure Active Directory overview)",
+    "idpAzureClientIdDescription": "Azure App Registration Client ID",
+    "idpAzureClientSecretDescription": "Azure App Registration Client Secret",
     "idpGoogleTitle": "Google",
     "idpGoogleAlt": "Google",
     "idpAzureTitle": "Azure Entra ID",
@@ -1761,14 +1800,14 @@
     "idpGoogleConfigurationTitle": "Configurazione Google",
     "idpAzureConfigurationTitle": "Configurazione Azure Entra ID",
     "idpTenantIdLabel": "ID Tenant",
-    "idpAzureClientIdDescription2": "Il Tuo Id Client Registrazione App Azure",
-    "idpAzureClientSecretDescription2": "Il Tuo Client Di Registrazione App Azure Secret",
+    "idpAzureClientIdDescription2": "Azure App Registration Client ID",
+    "idpAzureClientSecretDescription2": "Azure App Registration Client Secret",
     "idpGoogleDescription": "Google OAuth2/OIDC provider",
     "idpAzureDescription": "Microsoft Azure OAuth2/OIDC provider",
     "subnet": "Sottorete",
     "subnetDescription": "La sottorete per la configurazione di rete di questa organizzazione.",
     "authPage": "Pagina Autenticazione",
-    "authPageDescription": "Configura la pagina di autenticazione per la tua organizzazione",
+    "authPageDescription": "Configure the auth page for the organization",
     "authPageDomain": "Dominio Pagina Auth",
     "noDomainSet": "Nessun dominio impostato",
     "changeDomain": "Cambia Dominio",
@@ -1778,7 +1817,7 @@
     "setAuthPageDomain": "Imposta Dominio Pagina Autenticazione",
     "failedToFetchCertificate": "Recupero del certificato non riuscito",
     "failedToRestartCertificate": "Riavvio del certificato non riuscito",
-    "addDomainToEnableCustomAuthPages": "Aggiungi un dominio per abilitare le pagine di autenticazione personalizzate per la tua organizzazione",
+    "addDomainToEnableCustomAuthPages": "Add a domain to enable custom authentication pages for the organization",
     "selectDomainForOrgAuthPage": "Seleziona un dominio per la pagina di autenticazione dell'organizzazione",
     "domainPickerProvidedDomain": "Dominio Fornito",
     "domainPickerFreeProvidedDomain": "Dominio Fornito Gratuito",
@@ -1793,7 +1832,7 @@
     "domainPickerInvalidSubdomainCannotMakeValid": "\"{sub}\" non può essere reso valido per {domain}.",
     "domainPickerSubdomainSanitized": "Sottodominio igienizzato",
     "domainPickerSubdomainCorrected": "\"{sub}\" è stato corretto in \"{sanitized}\"",
-    "orgAuthSignInTitle": "Accedi alla tua organizzazione",
+    "orgAuthSignInTitle": "Sign in to the organization",
     "orgAuthChooseIdpDescription": "Scegli il tuo provider di identità per continuare",
     "orgAuthNoIdpConfigured": "Questa organizzazione non ha nessun provider di identità configurato. Puoi accedere con la tua identità Pangolin.",
     "orgAuthSignInWithPangolin": "Accedi con Pangolino",
@@ -1811,7 +1850,7 @@
     "enableTwoFactorAuthentication": "Abilita autenticazione a due fattori",
     "completeSecuritySteps": "Passi Di Sicurezza Completa",
     "securitySettings": "Impostazioni Di Sicurezza",
-    "securitySettingsDescription": "Configura i criteri di sicurezza per la tua organizzazione",
+    "securitySettingsDescription": "Configure security policies for the organization",
     "requireTwoFactorForAllUsers": "Richiede l'autenticazione a due fattori per tutti gli utenti",
     "requireTwoFactorDescription": "Se abilitata, tutti gli utenti interni di questa organizzazione devono avere un'autenticazione a due fattori abilitata per accedere all'organizzazione.",
     "requireTwoFactorDisabledDescription": "Questa funzione richiede una licenza valida (Enterprise) o un abbonamento attivo (SaaS)",
@@ -1874,8 +1913,12 @@
     "enterpriseEdition": "Enterprise Edition",
     "unlicensed": "Senza Licenza",
     "beta": "Beta",
-    "manageClients": "Gestisci Clienti",
-    "manageClientsDescription": "I client sono dispositivi che possono connettersi ai tuoi siti",
+    "manageUserDevices": "User Devices",
+    "manageUserDevicesDescription": "View and manage devices that users use to privately connect to resources",
+    "manageMachineClients": "Manage Machine Clients",
+    "manageMachineClientsDescription": "Create and manage clients that servers and systems use to privately connect to resources",
+    "clientsTableUserClients": "User",
+    "clientsTableMachineClients": "Machine",
     "licenseTableValidUntil": "Valido Fino A",
     "saasLicenseKeysSettingsTitle": "Licenze Enterprise",
     "saasLicenseKeysSettingsDescription": "Genera e gestisci le chiavi di licenza Enterprise per le istanze di Pangolin self-hosted",
@@ -2075,7 +2118,7 @@
     "preferWildcardCert": "Preferisci Certificato Wildcard",
     "unverified": "Non Verificato",
     "domainSetting": "Impostazioni Dominio",
-    "domainSettingDescription": "Configura le impostazioni per il tuo dominio",
+    "domainSettingDescription": "Configure settings for the domain",
     "preferWildcardCertDescription": "Tentativo di generare un certificato jolly (richiede un risolutore di certificati correttamente configurato).",
     "recordName": "Nome Record",
     "auto": "Automatico",
@@ -2089,15 +2132,15 @@
     "olmUpdateAvailableInfo": "È disponibile una versione aggiornata di Olm. Si prega di aggiornare all'ultima versione per la migliore esperienza.",
     "client": "Client",
     "proxyProtocol": "Impostazioni Protocollo Proxy",
-    "proxyProtocolDescription": "Configurare il protocollo proxy per preservare gli indirizzi IP client per i servizi TCP/UDP.",
+    "proxyProtocolDescription": "Configure Proxy Protocol to preserve client IP addresses for TCP services.",
     "enableProxyProtocol": "Abilita Protocollo Proxy",
-    "proxyProtocolInfo": "Conserva gli indirizzi IP del client per i backend TCP/UDP",
+    "proxyProtocolInfo": "Preserve client IP addresses for TCP backends",
     "proxyProtocolVersion": "Versione Protocollo Proxy",
     "version1": " Versione 1 (Consigliato)",
     "version2": "Versione 2",
     "versionDescription": "La versione 1 è testuale e ampiamente supportata. La versione 2 è binaria e più efficiente, ma meno compatibile.",
     "warning": "Attenzione",
-    "proxyProtocolWarning": "La tua applicazione backend deve essere configurata per accettare le connessioni del protocollo proxy. Se il tuo backend non supporta il protocollo proxy, abilitando questa opzione si interromperanno tutte le connessioni. Assicurati di configurare il tuo backend per fidarti delle intestazioni del protocollo proxy da Traefik.",
+    "proxyProtocolWarning": "The backend application must be configured to accept Proxy Protocol connections. If your backend doesn't support Proxy Protocol, enabling this will break all connections so only enable this if you know what you're doing. Make sure to configure your backend to trust Proxy Protocol headers from Traefik.",
     "restarting": "Riavvio...",
     "manual": "Manuale",
     "messageSupport": "Supporto Messaggio",
@@ -2120,6 +2163,43 @@
     "supportMessageSent": "Messaggio Inviato!",
     "supportWillContact": "Saremo in contatto a breve!",
     "selectLogRetention": "Seleziona ritenzione log",
+    "terms": "Terms",
+    "privacy": "Privacy",
+    "security": "Security",
+    "docs": "Docs",
+    "deviceActivation": "Device activation",
+    "deviceCodeInvalidFormat": "Code must be 9 characters (e.g., A1AJ-N5JD)",
+    "deviceCodeInvalidOrExpired": "Invalid or expired code",
+    "deviceCodeVerifyFailed": "Failed to verify device code",
+    "signedInAs": "Signed in as",
+    "deviceCodeEnterPrompt": "Enter the code displayed on the device",
+    "continue": "Continue",
+    "deviceUnknownLocation": "Unknown location",
+    "deviceAuthorizationRequested": "This authorization was requested from {location} on {date}. Make sure you trust this device as it will get access to the account.",
+    "deviceLabel": "Device: {deviceName}",
+    "deviceWantsAccess": "wants to access your account",
+    "deviceExistingAccess": "Existing access:",
+    "deviceFullAccess": "Full access to your account",
+    "deviceOrganizationsAccess": "Access to all organizations your account has access to",
+    "deviceAuthorize": "Authorize {applicationName}",
+    "deviceConnected": "Device Connected!",
+    "deviceAuthorizedMessage": "Device is authorized to access your account.",
+    "pangolinCloud": "Pangolin Cloud",
+    "viewDevices": "View Devices",
+    "viewDevicesDescription": "Manage your connected devices",
+    "noDevices": "No devices found",
+    "dateCreated": "Date Created",
+    "unnamedDevice": "Unnamed Device",
+    "deviceQuestionRemove": "Are you sure you want to delete this device?",
+    "deviceMessageRemove": "This action cannot be undone.",
+    "deviceDeleteConfirm": "Delete Device",
+    "deleteDevice": "Delete Device",
+    "errorLoadingDevices": "Error loading devices",
+    "failedToLoadDevices": "Failed to load devices",
+    "deviceDeleted": "Device deleted",
+    "deviceDeletedDescription": "The device has been successfully deleted.",
+    "errorDeletingDevice": "Error deleting device",
+    "failedToDeleteDevice": "Failed to delete device",
     "showColumns": "Mostra Colonne",
     "hideColumns": "Nascondi Colonne",
     "columnVisibility": "Visibilità Colonna",
@@ -2134,6 +2214,10 @@
     "enableSelected": "Abilita Selezionati",
     "disableSelected": "Disabilita Selezionati",
     "checkSelectedStatus": "Controlla lo stato dei selezionati",
+    "clients": "Clients",
+    "accessClientSelect": "Select machine clients",
+    "resourceClientDescription": "Machine clients that can access this resource",
+    "regenerate": "Regenerate",
     "credentials": "Credenziali",
     "savecredentials": "Salva Credenziali",
     "regeneratecredentials": "Ri-chiave",
@@ -2151,7 +2235,6 @@
     "endpoint": "Endpoint",
     "Id": "Id",
     "SecretKey": "Chiave Segreta",
-    "featureDisabledTooltip": "Questa funzione è disponibile solo nel piano aziendale e richiede una licenza per utilizzarla.",
     "niceId": "Simpatico ID",
     "niceIdUpdated": "Nice ID Aggiornato",
     "niceIdUpdatedSuccessfully": "Nizza Id Aggiornato Con Successo",
@@ -2160,5 +2243,15 @@
     "niceIdCannotBeEmpty": "Il Nice ID non può essere vuoto",
     "enterIdentifier": "Inserisci identificatore",
     "identifier": "Identifier",
-    "noData": "No Data"
+    "deviceLoginUseDifferentAccount": "Not you? Use a different account.",
+    "deviceLoginDeviceRequestingAccessToAccount": "A device is requesting access to this account.",
+    "noData": "No Data",
+    "machineClients": "Machine Clients",
+    "install": "Install",
+    "run": "Run",
+    "clientNameDescription": "The display name of the client that can be changed later.",
+    "clientAddress": "Client Address (Advanced)",
+    "setupFailedToFetchSubnet": "Failed to fetch default subnet",
+    "setupSubnetAdvanced": "Subnet (Advanced)",
+    "setupSubnetDescription": "The subnet for this organization's internal network."
 }

messages/ko-KR.json

@@ -1,12 +1,12 @@
 {
-    "setupCreate": "조직, 사이트 및 리소스를 생성하십시오.",
+    "setupCreate": "Create the organization, site, and resources",
     "setupNewOrg": "새 조직",
     "setupCreateOrg": "조직 생성",
     "setupCreateResources": "리소스 생성",
     "setupOrgName": "조직 이름",
-    "orgDisplayName": "이것은 귀하의 조직의 표시 이름입니다.",
+    "orgDisplayName": "This is the display name of the organization.",
     "orgId": "조직 ID",
-    "setupIdentifierMessage": "이것은 귀하의 조직에 대한 고유 식별자입니다. 표시 이름과는 별개입니다.",
+    "setupIdentifierMessage": "This is the unique identifier for the organization.",
     "setupErrorIdentifier": "조직 ID가 이미 사용 중입니다. 다른 것을 선택해 주세요.",
     "componentsErrorNoMemberCreate": "현재 어떤 조직의 구성원도 아닙니다. 시작하려면 조직을 생성하세요.",
     "componentsErrorNoMember": "현재 어떤 조직의 구성원도 아닙니다.",
@@ -50,10 +50,10 @@
     "siteMessageRemove": "삭제되면 사이트에 더 이상 액세스할 수 없습니다. 사이트와 연결된 모든 대상도 삭제됩니다.",
     "siteQuestionRemove": "조직에서 사이트를 제거하시겠습니까?",
     "siteManageSites": "사이트 관리",
-    "siteDescription": "안전한 터널을 통해 네트워크에 연결할 수 있도록 허용",
+    "siteDescription": "Create and manage sites to enable connectivity to private networks",
     "siteCreate": "사이트 생성",
     "siteCreateDescription2": "아래 단계를 따라 새 사이트를 생성하고 연결하십시오",
-    "siteCreateDescription": "리소스를 연결하기 위해 새 사이트를 생성하십시오.",
+    "siteCreateDescription": "Create a new site to start connecting resources",
     "close": "닫기",
     "siteErrorCreate": "사이트 생성 오류",
     "siteErrorCreateKeyPair": "키 쌍 또는 사이트 기본값을 찾을 수 없습니다",
@@ -74,7 +74,7 @@
     "siteInstallNewt": "Newt 설치",
     "siteInstallNewtDescription": "시스템에서 Newt 실행하기",
     "WgConfiguration": "WireGuard 구성",
-    "WgConfigurationDescription": "네트워크에 연결하기 위한 다음 구성을 사용하십시오.",
+    "WgConfigurationDescription": "Use the following configuration to connect to the network",
     "operatingSystem": "운영 체제",
     "commands": "명령",
     "recommended": "추천",
@@ -87,32 +87,32 @@
     "siteUpdated": "사이트가 업데이트되었습니다",
     "siteUpdatedDescription": "사이트가 업데이트되었습니다.",
     "siteGeneralDescription": "이 사이트에 대한 일반 설정을 구성하세요.",
-    "siteSettingDescription": "사이트에서 설정을 구성하세요",
+    "siteSettingDescription": "Configure the settings on the site",
     "siteSetting": "{siteName} 설정",
-    "siteNewtTunnel": "뉴트 터널 (추천)",
-    "siteNewtTunnelDescription": "네트워크에 대한 진입점을 생성하는 가장 쉬운 방법입니다. 추가 설정이 필요 없습니다.",
+    "siteNewtTunnel": "Newt Site (Recommended)",
+    "siteNewtTunnelDescription": "Easiest way to create an entrypoint into any network. No extra setup.",
     "siteWg": "기본 WireGuard",
     "siteWgDescription": "모든 WireGuard 클라이언트를 사용하여 터널을 설정하세요. 수동 NAT 설정이 필요합니다.",
     "siteWgDescriptionSaas": "모든 WireGuard 클라이언트를 사용하여 터널을 설정하세요. 수동 NAT 설정이 필요합니다. 자체 호스팅 노드에서만 작동합니다.",
     "siteLocalDescription": "로컬 리소스만 사용 가능합니다. 터널링이 없습니다.",
     "siteLocalDescriptionSaas": "로컬 리소스 전용. 터널링 금지. 원격 노드에서만 사용 가능합니다.",
     "siteSeeAll": "모든 사이트 보기",
-    "siteTunnelDescription": "사이트에 연결하는 방법을 결정하세요",
-    "siteNewtCredentials": "Newt 자격 증명",
-    "siteNewtCredentialsDescription": "이것이 Newt가 서버와 인증하는 방법입니다",
-    "siteCredentialsSave": "자격 증명 저장",
+    "siteTunnelDescription": "Determine how you want to connect to the site",
+    "siteNewtCredentials": "Credentials",
+    "siteNewtCredentialsDescription": "This is how the site will authenticate with the server",
+    "siteCredentialsSave": "Save the Credentials",
     "siteCredentialsSaveDescription": "이것은 한 번만 볼 수 있습니다. 안전한 장소에 복사해 두세요.",
     "siteInfo": "사이트 정보",
     "status": "상태",
     "shareTitle": "공유 링크 관리",
-    "shareDescription": "공유 가능한 링크를 생성하여 리소스에 대한 임시 또는 영구 액세스를 부여합니다.",
+    "shareDescription": "Create shareable links to grant temporary or permanent access to proxy resources",
     "shareSearch": "공유 링크 검색...",
     "shareCreate": "공유 링크 생성",
     "shareErrorDelete": "링크 삭제에 실패했습니다.",
     "shareErrorDeleteMessage": "링크 삭제 중 오류가 발생했습니다.",
     "shareDeleted": "링크가 삭제되었습니다.",
     "shareDeletedDescription": "링크가 삭제되었습니다.",
-    "shareTokenDescription": "액세스 토큰은 쿼리 매개변수 또는 요청 헤더의 두 가지 방법으로 전달될 수 있습니다. 이는 인증된 액세스를 위해 클라이언트에서 모든 요청마다 전달되어야 합니다.",
+    "shareTokenDescription": "The access token can be passed in two ways: as a query parameter or in the request headers. These must be passed from the client on every request for authenticated access.",
     "accessToken": "액세스 토큰",
     "usageExamples": "사용 예",
     "tokenId": "토큰 ID",
@@ -121,7 +121,7 @@
     "importantNote": "중요한 참고 사항",
     "shareImportantDescription": "보안상의 이유로 가능한 경우 쿼리 매개변수보다 헤더를 사용하는 것이 권장됩니다. 쿼리 매개변수는 서버 로그나 브라우저 기록에 기록될 수 있습니다.",
     "token": "토큰",
-    "shareTokenSecurety": "액세스 토큰을 안전하게 유지하세요. 공개적으로 접근 가능한 영역이나 클라이언트 측 코드에서 공유하지 마세요.",
+    "shareTokenSecurety": "Keep the access token secure. Do not share it in publicly accessible areas or client-side code.",
     "shareErrorFetchResource": "리소스를 가져오는 데 실패했습니다.",
     "shareErrorFetchResourceDescription": "리소스를 가져오는 중 오류가 발생했습니다.",
     "shareErrorCreate": "공유 링크 생성에 실패했습니다.",
@@ -144,8 +144,10 @@
     "expires": "만료",
     "never": "절대",
     "shareErrorSelectResource": "리소스를 선택하세요",
-    "resourceTitle": "리소스 관리",
-    "resourceDescription": "개인 애플리케이션에 대한 보안 프록시 생성",
+    "proxyResourceTitle": "Manage Public Resources",
+    "proxyResourceDescription": "Create and manage resources that are publicly accessible through a web browser",
+    "clientResourceTitle": "Manage Private Resources",
+    "clientResourceDescription": "Create and manage resources that are only accessible through a connected client",
     "resourcesSearch": "리소스 검색...",
     "resourceAdd": "리소스 추가",
     "resourceErrorDelte": "리소스 삭제 중 오류 발생",
@@ -155,9 +157,9 @@
     "resourceMessageRemove": "제거되면 리소스에 더 이상 접근할 수 없습니다. 리소스와 연결된 모든 대상도 제거됩니다.",
     "resourceQuestionRemove": "조직에서 리소스를 제거하시겠습니까?",
     "resourceHTTP": "HTTPS 리소스",
-    "resourceHTTPDescription": "서브도메인 또는 기본 도메인을 사용하여 HTTPS를 통해 앱에 대한 요청을 프록시합니다.",
+    "resourceHTTPDescription": "Proxy requests to the app over HTTPS using a subdomain or base domain.",
     "resourceRaw": "원시 TCP/UDP 리소스",
-    "resourceRawDescription": "TCP/UDP를 통해 포트 번호를 사용하여 앱에 요청을 프록시합니다.",
+    "resourceRawDescription": "Proxy requests to the app over TCP/UDP using a port number. This only works when sites are connected to nodes.",
     "resourceCreate": "리소스 생성",
     "resourceCreateDescription": "아래 단계를 따라 새 리소스를 생성하세요.",
     "resourceSeeAll": "모든 리소스 보기",
@@ -171,22 +173,22 @@
     "noCountryFound": "국가를 찾을 수 없습니다.",
     "siteSelectionDescription": "이 사이트는 대상에 대한 연결을 제공합니다.",
     "resourceType": "리소스 유형",
-    "resourceTypeDescription": "리소스에 접근하는 방법을 결정하세요",
+    "resourceTypeDescription": "Determine how to access the resource",
     "resourceHTTPSSettings": "HTTPS 설정",
-    "resourceHTTPSSettingsDescription": "리소스에 대한 HTTPS 접근 방식을 구성하십시오.",
+    "resourceHTTPSSettingsDescription": "Configure how the resource will be accessed over HTTPS",
     "domainType": "도메인 유형",
     "subdomain": "서브도메인",
     "baseDomain": "기본 도메인",
-    "subdomnainDescription": "리소스에 접근할 수 있는 하위 도메인입니다.",
+    "subdomnainDescription": "The subdomain where the resource will be accessible.",
     "resourceRawSettings": "TCP/UDP 설정",
-    "resourceRawSettingsDescription": "리소스를 TCP/UDP를 통해 액세스하는 방법을 구성합니다. 리소스를 호스트 Pangolin 서버의 포트에 매핑하여 서버-public-ip:매핑된 포트에서 리소스에 액세스할 수 있습니다.",
+    "resourceRawSettingsDescription": "Configure how the resource will be accessed over TCP/UDP. You map the resource to a port on the host Pangolin server, so you can access the resource from server-public-ip:mapped-port.",
     "protocol": "프로토콜",
     "protocolSelect": "프로토콜 선택",
     "resourcePortNumber": "포트 번호",
     "resourcePortNumberDescription": "요청을 프록시하기 위한 외부 포트 번호입니다.",
     "cancel": "취소",
     "resourceConfig": "구성 스니펫",
-    "resourceConfigDescription": "TCP/UDP 리소스를 설정하기 위해 이 구성 스니펫을 복사하여 붙여넣으십시오.",
+    "resourceConfigDescription": "Copy and paste these configuration snippets to set up the TCP/UDP resource",
     "resourceAddEntrypoints": "Traefik: 엔트리포인트 추가",
     "resourceExposePorts": "Gerbil: Docker Compose에서 포트 노출",
     "resourceLearnRaw": "TCP/UDP 리소스 구성 방법 알아보기",
@@ -202,14 +204,14 @@
     "proxy": "프록시",
     "internal": "내부",
     "rules": "규칙",
-    "resourceSettingDescription": "리소스의 설정을 구성하세요.",
+    "resourceSettingDescription": "Configure the settings on the resource",
     "resourceSetting": "{resourceName} 설정",
-    "alwaysAllow": "항상 허용",
-    "alwaysDeny": "항상 거부",
+    "alwaysAllow": "Bypass Auth",
+    "alwaysDeny": "Block Access",
     "passToAuth": "인증으로 전달",
-    "orgSettingsDescription": "조직의 일반 설정을 구성하세요",
+    "orgSettingsDescription": "Configure the organization's settings",
     "orgGeneralSettings": "조직 설정",
-    "orgGeneralSettingsDescription": "조직 세부정보 및 구성을 관리하세요.",
+    "orgGeneralSettingsDescription": "Manage the organization's details and configuration",
     "saveGeneralSettings": "일반 설정 저장",
     "saveSettings": "설정 저장",
     "orgDangerZone": "위험 구역",
@@ -232,7 +234,7 @@
     "orgMissing": "조직 ID가 누락되었습니다",
     "orgMissingMessage": "조직 ID 없이 초대장을 재생성할 수 없습니다.",
     "accessUsersManage": "사용자 관리",
-    "accessUsersDescription": "사용자를 초대하고 역할에 추가하여 조직에 대한 접근을 관리하세요",
+    "accessUsersDescription": "Invite and manage users with access to this organization",
     "accessUsersSearch": "사용자 검색...",
     "accessUserCreate": "사용자 생성",
     "accessUserRemove": "사용자 제거",
@@ -241,13 +243,13 @@
     "role": "역할",
     "nameRequired": "이름은 필수입니다",
     "accessRolesManage": "역할 관리",
-    "accessRolesDescription": "조직에 대한 액세스를 관리할 역할 구성",
+    "accessRolesDescription": "Create and manage roles for users in the organization",
     "accessRolesSearch": "역할 검색...",
     "accessRolesAdd": "역할 추가",
     "accessRoleDelete": "역할 삭제",
     "description": "설명",
     "inviteTitle": "열린 초대",
-    "inviteDescription": "다른 사용자에 대한 초대를 관리하세요",
+    "inviteDescription": "Manage invitations for other users to join the organization",
     "inviteSearch": "초대 검색...",
     "minutes": "분",
     "hours": "시간",
@@ -261,13 +263,13 @@
     "apiKeysErrorCreate": "API 키 생성 오류",
     "apiKeysErrorSetPermission": "권한 설정 오류",
     "apiKeysCreate": "API 키 생성",
-    "apiKeysCreateDescription": "조직을 위한 새로운 API 키 생성",
+    "apiKeysCreateDescription": "Generate a new API key for the organization",
     "apiKeysGeneralSettings": "권한",
     "apiKeysGeneralSettingsDescription": "이 API 키가 수행할 수 있는 작업 결정",
-    "apiKeysList": "귀하의 API 키",
-    "apiKeysSave": "API 키 저장",
+    "apiKeysList": "New API Key",
+    "apiKeysSave": "Save the API Key",
     "apiKeysSaveDescription": "이것은 한 번만 볼 수 있습니다. 안전한 장소에 복사해 두세요.",
-    "apiKeysInfo": "귀하의 API 키는 다음과 같습니다:",
+    "apiKeysInfo": "The API key is:",
     "apiKeysConfirmCopy": "API 키를 복사했습니다",
     "generate": "생성",
     "done": "완료",
@@ -424,7 +426,7 @@
     "userCreated": "사용자가 생성되었습니다.",
     "userCreatedDescription": "사용자가 성공적으로 생성되었습니다.",
     "userTypeInternal": "내부 사용자",
-    "userTypeInternalDescription": "사용자를 초대하여 귀하의 조직에 직접 참여하게 하세요.",
+    "userTypeInternalDescription": "Invite a user to join the organization directly.",
     "userTypeExternal": "외부 사용자",
     "userTypeExternalDescription": "외부 신원 공급자를 사용하여 사용자를 생성하세요.",
     "accessUserCreateDescription": "새 사용자를 만들기 위한 아래 단계를 따르세요.",
@@ -468,13 +470,13 @@
     "accessControlsSubmit": "접근 제어 저장",
     "roles": "역할",
     "accessUsersRoles": "사용자 및 역할 관리",
-    "accessUsersRolesDescription": "사용자를 초대하고 역할에 추가하여 조직에 대한 접근을 관리하세요",
+    "accessUsersRolesDescription": "Invite users and add them to roles to manage access to the organization",
     "key": "키",
     "createdAt": "생성일",
     "proxyErrorInvalidHeader": "잘못된 사용자 정의 호스트 헤더 값입니다. 도메인 이름 형식을 사용하거나 사용자 정의 호스트 헤더를 해제하려면 비워 두십시오.",
     "proxyErrorTls": "유효하지 않은 TLS 서버 이름입니다. 도메인 이름 형식을 사용하거나 비워 두어 TLS 서버 이름을 제거하십시오.",
     "proxyEnableSSL": "SSL 활성화",
-    "proxyEnableSSLDescription": "대상에 대한 안전한 HTTPS 연결을 위해 SSL/TLS 암호화를 활성화하세요.",
+    "proxyEnableSSLDescription": "Enable SSL/TLS encryption for secure HTTPS connections to the targets.",
     "target": "대상",
     "configureTarget": "대상 구성",
     "targetErrorFetch": "대상 가져오는 데 실패했습니다.",
@@ -490,29 +492,29 @@
     "targetsErrorUpdate": "대상 업데이트 실패",
     "targetsErrorUpdateDescription": "대상 업데이트 중 오류가 발생했습니다.",
     "targetTlsUpdate": "TLS 설정이 업데이트되었습니다.",
-    "targetTlsUpdateDescription": "TLS 설정이 성공적으로 업데이트되었습니다.",
+    "targetTlsUpdateDescription": "TLS settings have been updated successfully",
     "targetErrorTlsUpdate": "TLS 설정 업데이트에 실패했습니다.",
     "targetErrorTlsUpdateDescription": "TLS 설정을 업데이트하는 동안 오류가 발생했습니다",
     "proxyUpdated": "프록시 설정이 업데이트되었습니다.",
-    "proxyUpdatedDescription": "프록시 설정이 성공적으로 업데이트되었습니다",
+    "proxyUpdatedDescription": "Proxy settings have been updated successfully",
     "proxyErrorUpdate": "프록시 설정 업데이트에 실패했습니다.",
     "proxyErrorUpdateDescription": "프록시 설정을 업데이트하는 동안 오류가 발생했습니다",
     "targetAddr": "IP / 호스트 이름",
     "targetPort": "포트",
     "targetProtocol": "프로토콜",
     "targetTlsSettings": "보안 연결 구성",
-    "targetTlsSettingsDescription": "리소스에 대한 SSL/TLS 설정 구성",
+    "targetTlsSettingsDescription": "Configure SSL/TLS settings for the resource",
     "targetTlsSettingsAdvanced": "고급 TLS 설정",
     "targetTlsSni": "TLS 서버 이름",
     "targetTlsSniDescription": "SNI에 사용할 TLS 서버 이름. 기본값을 사용하려면 비워 두십시오.",
     "targetTlsSubmit": "설정 저장",
     "targets": "대상 구성",
-    "targetsDescription": "사용자 백엔드 서비스로 트래픽을 라우팅할 대상을 설정하십시오.",
+    "targetsDescription": "Set up targets to route traffic to backend services",
     "targetStickySessions": "스티키 세션 활성화",
     "targetStickySessionsDescription": "세션 전체 동안 동일한 백엔드 대상을 유지합니다.",
     "methodSelect": "선택 방법",
     "targetSubmit": "대상 추가",
-    "targetNoOne": "이 리소스에는 대상이 없습니다. 백엔드로 요청을 보내려면 대상을 추가하세요.",
+    "targetNoOne": "This resource doesn't have any targets. Add a target to configure where to send requests to the backend.",
     "targetNoOneDescription": "위에 하나 이상의 대상을 추가하면 로드 밸런싱이 활성화됩니다.",
     "targetsSubmit": "대상 저장",
     "addTarget": "대상 추가",
@@ -530,7 +532,7 @@
     "tlsServerNameDescription": "The TLS server name to use for SNI",
     "save": "저장",
     "proxyAdditional": "추가 프록시 설정",
-    "proxyAdditionalDescription": "리소스가 프록시 설정을 처리하는 방법 구성",
+    "proxyAdditionalDescription": "Configure how the resource handles proxy settings",
     "proxyCustomHeader": "사용자 정의 호스트 헤더",
     "proxyCustomHeaderDescription": "요청을 프록시할 때 설정할 호스트 헤더입니다. 기본값을 사용하려면 비워 두십시오.",
     "proxyAdditionalSubmit": "프록시 설정 저장",
@@ -570,7 +572,7 @@
     "rulesMatchType": "일치 유형",
     "value": "값",
     "rulesAbout": "규칙에 대한 정보",
-    "rulesAboutDescription": "규칙을 사용하면 IP 주소 또는 URL 경로를 기준으로 리소스에 대한 액세스를 제어할 수 있습니다. IP 주소 또는 URL 경로를 기준으로 액세스를 허용하거나 거부하는 규칙을 만들 수 있습니다.",
+    "rulesAboutDescription": "Rules allow you to control access to the resource based on a set of criteria. You can create rules to allow or deny access based on IP address or URL path.",
     "rulesActions": "작업",
     "rulesActionAlwaysAllow": "항상 허용: 모든 인증 방법 우회",
     "rulesActionAlwaysDeny": "항상 거부: 모든 요청을 차단합니다. 인증을 시도할 수 없습니다.",
@@ -582,7 +584,7 @@
     "rulesEnable": "규칙 활성화",
     "rulesEnableDescription": "이 리소스에 대한 규칙 평가를 활성화하거나 비활성화합니다.",
     "rulesResource": "리소스 규칙 구성",
-    "rulesResourceDescription": "리소스에 대한 접근을 제어하는 규칙 구성",
+    "rulesResourceDescription": "Configure rules to control access to the resource",
     "ruleSubmit": "규칙 추가",
     "rulesNoOne": "규칙이 없습니다. 양식을 사용하여 규칙을 추가하십시오.",
     "rulesOrder": "규칙은 우선 순위에 따라 오름차순으로 평가됩니다.",
@@ -598,7 +600,7 @@
     "none": "없음",
     "unknown": "알 수 없음",
     "resources": "리소스",
-    "resourcesDescription": "리소스는 개인 네트워크에서 실행 중인 애플리케이션에 대한 프록시입니다. 개인 네트워크에서 HTTP/HTTPS 또는 원시 TCP/UDP 서비스에 대한 리소스를 생성하십시오. 각 리소스는 암호화된 WireGuard 터널을 통해 개인적이고 안전한 연결을 가능하게 하려면 사이트에 연결되어야 합니다.",
+    "resourcesDescription": "Resources are proxies to applications running on the private network. Create a resource for any HTTP/HTTPS or raw TCP/UDP service on your private network. Each resource must be connected to a site to enable private, secure connectivity through an encrypted WireGuard tunnel.",
     "resourcesWireGuardConnect": "WireGuard 암호화를 통한 안전한 연결",
     "resourcesMultipleAuthenticationMethods": "다중 인증 방법 구성",
     "resourcesUsersRolesAccess": "사용자 및 역할 기반 접근 제어",
@@ -609,7 +611,7 @@
     "resourceSelect": "리소스 선택",
     "shareLinks": "공유 링크",
     "share": "공유 가능한 링크",
-    "shareDescription2": "리소스에 대한 공유 가능한 링크를 생성하세요. 링크는 리소스에 대한 임시 또는 무제한 액세스를 제공합니다. 링크를 생성할 때 만료 기간을 설정할 수 있습니다.",
+    "shareDescription2": "Create shareable links to resources. Links provide temporary or unlimited access to your resource. You can configure the expiration duration of the link when you create one.",
     "shareEasyCreate": "생성하고 공유하기 쉬움",
     "shareConfigurableExpirationDuration": "구성 가능한 만료 기간",
     "shareSecureAndRevocable": "안전하고 철회 가능",
@@ -619,19 +621,19 @@
     "unknownCommand": "알 수 없는 명령",
     "newtErrorFetchReleases": "릴리스 정보를 가져오는 데 실패했습니다: {err}",
     "newtErrorFetchLatest": "최신 릴리스를 가져오는 중 오류 발생: {err}",
-    "newtEndpoint": "Newt 엔드포인트",
-    "newtId": "뉴트 ID",
-    "newtSecretKey": "Newt 비밀 키",
+    "newtEndpoint": "Endpoint",
+    "newtId": "ID",
+    "newtSecretKey": "Secret",
     "architecture": "아키텍처",
     "sites": "사이트",
-    "siteWgAnyClients": "WireGuard 클라이언트를 사용하여 연결하십시오. 피어 IP를 사용하여 내부 리소스에 접근해야 합니다.",
+    "siteWgAnyClients": "Use any WireGuard client to connect. You will have to address internal resources using the peer IP.",
     "siteWgCompatibleAllClients": "모든 WireGuard 클라이언트와 호환",
     "siteWgManualConfigurationRequired": "수동 구성이 필요합니다.",
     "userErrorNotAdminOrOwner": "사용자는 관리자 또는 소유자가 아닙니다.",
     "pangolinSettings": "설정 - 판골린",
     "accessRoleYour": "귀하의 역할:",
-    "accessRoleSelect2": "역할 선택",
-    "accessUserSelect": "사용자를 선택하세요.",
+    "accessRoleSelect2": "Select roles",
+    "accessUserSelect": "Select users",
     "otpEmailEnter": "이메일을 입력하세요",
     "otpEmailEnterDescription": "입력 필드에 입력한 후 Enter 키를 눌러 이메일을 추가합니다.",
     "otpEmailErrorInvalid": "유효하지 않은 이메일 주소입니다. 와일드카드(*)는 전체 로컬 부분이어야 합니다.",
@@ -683,7 +685,7 @@
     "resourcePincodeSetupTitle": "핀코드 설정",
     "resourcePincodeSetupTitleDescription": "이 리소스를 보호하기 위해 핀 코드를 설정하십시오.",
     "resourceRoleDescription": "관리자는 항상 이 리소스에 접근할 수 있습니다.",
-    "resourceUsersRoles": "사용자 및 역할",
+    "resourceUsersRoles": "Access Controls",
     "resourceUsersRolesDescription": "이 리소스를 방문할 수 있는 사용자 및 역할을 구성하십시오",
     "resourceUsersRolesSubmit": "사용자 및 역할 저장",
     "resourceWhitelistSave": "성공적으로 저장되었습니다.",
@@ -779,15 +781,15 @@
     "idpOidcConfigure": "OAuth2/OIDC 구성",
     "idpOidcConfigureDescription": "OAuth2/OIDC 공급자 엔드포인트 및 자격 증명을 구성하십시오.",
     "idpClientId": "클라이언트 ID",
-    "idpClientIdDescription": "아이덴티티 공급자의 OAuth2 클라이언트 ID",
+    "idpClientIdDescription": "The OAuth2 client ID from the identity provider",
     "idpClientSecret": "클라이언트 비밀",
-    "idpClientSecretDescription": "신원 제공자로부터의 OAuth2 클라이언트 비밀",
+    "idpClientSecretDescription": "The OAuth2 client secret from the identity provider",
     "idpAuthUrl": "인증 URL",
     "idpAuthUrlDescription": "OAuth2 인증 엔드포인트 URL",
     "idpTokenUrl": "토큰 URL",
     "idpTokenUrlDescription": "OAuth2 토큰 엔드포인트 URL",
     "idpOidcConfigureAlert": "중요 정보",
-    "idpOidcConfigureAlertDescription": "아이덴티티 공급자를 생성한 후, 아이덴티티 공급자의 설정에서 콜백 URL을 구성해야 합니다. 콜백 URL은 성공적으로 생성된 후 제공됩니다.",
+    "idpOidcConfigureAlertDescription": "After creating the identity provider, you will need to configure the callback URL in the identity provider's settings. The callback URL will be provided after successful creation.",
     "idpToken": "토큰 구성",
     "idpTokenDescription": "ID 토큰에서 사용자 정보를 추출하는 방법 구성",
     "idpJmespathAbout": "JMESPath에 대하여",
@@ -804,7 +806,7 @@
     "idpSubmit": "아이덴티티 공급자 생성",
     "orgPolicies": "조직 정책",
     "idpSettings": "{idpName} 설정",
-    "idpCreateSettingsDescription": "아이덴티티 공급자의 설정을 구성하십시오",
+    "idpCreateSettingsDescription": "Configure the settings for the identity provider",
     "roleMapping": "역할 매핑",
     "orgMapping": "조직 매핑",
     "orgPoliciesSearch": "조직 정책 검색...",
@@ -839,7 +841,7 @@
     "idpUpdatedDescription": "아이덴티티 제공자가 성공적으로 업데이트되었습니다",
     "redirectUrl": "리디렉션 URL",
     "redirectUrlAbout": "리디렉션 URL에 대한 정보",
-    "redirectUrlAboutDescription": "사용자가 인증 후 리디렉션될 URL입니다. 이 URL을 신원 제공자 설정에서 구성해야 합니다.",
+    "redirectUrlAboutDescription": "This is the URL to which users will be redirected after authentication. You need to configure this URL in the identity provider's settings.",
     "pangolinAuth": "인증 - 판골린",
     "verificationCodeLengthRequirements": "인증 코드가 8자여야 합니다.",
     "errorOccurred": "오류가 발생했습니다.",
@@ -922,6 +924,10 @@
     "passwordResetSent": "이 이메일 주소로 비밀번호 재설정 코드를 전송하겠습니다.",
     "passwordResetCode": "코드 재설정",
     "passwordResetCodeDescription": "재설정 코드를 확인하려면 이메일을 확인하세요.",
+    "generatePasswordResetCode": "Generate Password Reset Code",
+    "passwordResetCodeGenerated": "Password Reset Code Generated",
+    "passwordResetCodeGeneratedDescription": "Share this code with the user. They can use it to reset their password.",
+    "passwordResetUrl": "Reset URL",
     "passwordNew": "새 비밀번호",
     "passwordNewConfirm": "새 비밀번호 확인",
     "changePassword": "비밀번호 변경",
@@ -939,6 +945,9 @@
     "pincodeAuth": "인증 코드",
     "pincodeSubmit2": "코드 제출",
     "passwordResetSubmit": "재설정 요청",
+    "passwordResetAlreadyHaveCode": "Enter Password Reset Code",
+    "passwordResetSmtpRequired": "Please contact your administrator",
+    "passwordResetSmtpRequiredDescription": "A password reset code is required to reset your password. Please contact your administrator for assistance.",
     "passwordBack": "비밀번호로 돌아가기",
     "loginBack": "로그인으로 돌아가기",
     "signup": "가입하기",
@@ -1104,12 +1113,15 @@
     "actionListSiteResources": "사이트 리소스 목록",
     "actionUpdateSiteResource": "사이트 리소스 업데이트",
     "actionListInvitations": "초대 목록",
+    "actionExportLogs": "Export Logs",
+    "actionViewLogs": "View Logs",
     "noneSelected": "선택된 항목 없음",
     "orgNotFound2": "조직이 없습니다.",
     "searchProgress": "검색...",
     "create": "생성",
     "orgs": "조직",
     "loginError": "로그인 중 오류가 발생했습니다",
+    "loginRequiredForDevice": "Login is required to authenticate your device.",
     "passwordForgot": "비밀번호를 잊으셨나요?",
     "otpAuth": "이중 인증",
     "otpAuthDescription": "인증 앱에서 코드를 입력하거나 단일 사용 백업 코드 중 하나를 입력하세요.",
@@ -1164,23 +1176,29 @@
     "sidebarHome": "홈",
     "sidebarSites": "사이트",
     "sidebarResources": "리소스",
+    "sidebarProxyResources": "Public",
+    "sidebarClientResources": "Private",
     "sidebarAccessControl": "액세스 제어",
+    "sidebarLogsAndAnalytics": "Logs & Analytics",
     "sidebarUsers": "사용자",
+    "sidebarAdmin": "Admin",
     "sidebarInvitations": "초대",
     "sidebarRoles": "역할",
-    "sidebarShareableLinks": "공유 가능한 링크",
+    "sidebarShareableLinks": "Links",
     "sidebarApiKeys": "API 키",
     "sidebarSettings": "설정",
     "sidebarAllUsers": "모든 사용자",
     "sidebarIdentityProviders": "신원 공급자",
     "sidebarLicense": "라이선스",
     "sidebarClients": "클라이언트",
+    "sidebarUserDevices": "Users",
+    "sidebarMachineClients": "Machines",
     "sidebarDomains": "도메인",
     "sidebarGeneral": "General",
     "sidebarLogAndAnalytics": "Log & Analytics",
     "sidebarBluePrints": "청사진",
     "sidebarOrganization": "Organization",
-    "sidebarLogsAnalytics": "Request Analytics",
+    "sidebarLogsAnalytics": "Analytics",
     "blueprints": "청사진",
     "blueprintsDescription": "선언적 구성을 적용하고 이전 실행을 봅니다",
     "blueprintAdd": "청사진 추가",
@@ -1191,7 +1209,7 @@
     "blueprintDetailsDescription": "적용된 청사진의 결과와 발생한 오류를 확인합니다",
     "blueprintInfo": "청사진 정보",
     "message": "메시지",
-    "blueprintContentsDescription": "인프라를 설명하는 YAML 콘텐츠를 정의하십시오",
+    "blueprintContentsDescription": "Define the YAML content describing the infrastructure",
     "blueprintErrorCreateDescription": "청사진을 적용하는 중 오류가 발생했습니다",
     "blueprintErrorCreate": "청사진 생성 오류",
     "searchBlueprintProgress": "청사진 검색...",
@@ -1247,15 +1265,15 @@
     "loading": "로딩 중",
     "restart": "재시작",
     "domains": "도메인",
-    "domainsDescription": "조직의 도메인을 관리합니다",
+    "domainsDescription": "Create and manage domains available in the organization",
     "domainsSearch": "도메인 검색...",
     "domainAdd": "도메인 추가",
-    "domainAddDescription": "조직에 새로운 도메인을 등록하세요",
+    "domainAddDescription": "Register a new domain with to the organization",
     "domainCreate": "도메인 생성",
     "domainCreatedDescription": "도메인이 성공적으로 생성되었습니다",
     "domainDeletedDescription": "도메인이 성공적으로 삭제되었습니다",
-    "domainQuestionRemove": "계정에서 도메인을 제거하시겠습니까?",
-    "domainMessageRemove": "제거되면 도메인이 더 이상 계정과 연관되지 않습니다.",
+    "domainQuestionRemove": "Are you sure you want to remove the domain?",
+    "domainMessageRemove": "Once removed, the domain will no longer be associated with the organization.",
     "domainConfirmDelete": "도메인 삭제 확인",
     "domainDelete": "도메인 삭제",
     "domain": "도메인",
@@ -1274,7 +1292,7 @@
     "pending": "대기 중",
     "sidebarBilling": "청구",
     "billing": "청구",
-    "orgBillingDescription": "청구 정보 및 구독을 관리하세요",
+    "orgBillingDescription": "Manage billing information and subscriptions",
     "github": "GitHub",
     "pangolinHosted": "판골린 호스팅",
     "fossorial": "지하 서식",
@@ -1317,7 +1335,7 @@
     "domainPickerSortAsc": "A-Z",
     "domainPickerSortDesc": "Z-A",
     "domainPickerCheckingAvailability": "가용성을 확인 중...",
-    "domainPickerNoMatchingDomains": "일치하는 도메인을 찾을 수 없습니다. 다른 도메인을 시도하거나 조직의 도메인 설정을 확인하십시오.",
+    "domainPickerNoMatchingDomains": "No matching domains found. Try a different domain or check the organization's domain settings.",
     "domainPickerOrganizationDomains": "조직 도메인",
     "domainPickerProvidedDomains": "제공된 도메인",
     "domainPickerSubdomain": "서브도메인: {subdomain}",
@@ -1351,7 +1369,7 @@
     "billingModifySubscription": "구독 수정",
     "billingStartSubscription": "구독 시작",
     "billingRecurringCharge": "반복 요금",
-    "billingManageSubscriptionSettings": "구독 설정 및 기본 설정을 관리합니다",
+    "billingManageSubscriptionSettings": "Manage subscription settings and preferences",
     "billingNoActiveSubscription": "활성 구독이 없습니다. 사용 한도를 늘리려면 구독을 시작하십시오.",
     "billingFailedToLoadSubscription": "구독을 불러오는 데 실패했습니다.",
     "billingFailedToLoadUsage": "사용량을 불러오는 데 실패했습니다.",
@@ -1362,9 +1380,9 @@
     "billingPortalError": "포털 오류",
     "billingDataUsageInfo": "클라우드에 연결할 때 보안 터널을 통해 전송된 모든 데이터에 대해 비용이 청구됩니다. 여기에는 모든 사이트의 들어오고 나가는 트래픽이 포함됩니다. 사용량 한도에 도달하면 플랜을 업그레이드하거나 사용량을 줄일 때까지 사이트가 연결 해제됩니다. 노드를 사용하는 경우 데이터는 요금이 청구되지 않습니다.",
     "billingOnlineTimeInfo": "사이트가 클라우드에 연결된 시간에 따라 요금이 청구됩니다. 예를 들어, 44,640분은 사이트가 한 달 내내 24시간 작동하는 것과 같습니다. 사용량 한도에 도달하면 플랜을 업그레이드하거나 사용량을 줄일 때까지 사이트가 연결 해제됩니다. 노드를 사용할 때 시간은 요금이 청구되지 않습니다.",
-    "billingUsersInfo": "조직의 사용자마다 요금이 청구됩니다. 청구는 조직의 활성 사용자 계정 수에 따라 매일 계산됩니다.",
-    "billingDomainInfo": "조직의 도메인마다 요금이 청구됩니다. 청구는 조직의 활성 도메인 계정 수에 따라 매일 계산됩니다.",
-    "billingRemoteExitNodesInfo": "조직의 관리 노드마다 요금이 청구됩니다. 청구는 조직의 활성 관리 노드 수에 따라 매일 계산됩니다.",
+    "billingUsersInfo": "You're charged for each user in the organization. Billing is calculated daily based on the number of active user accounts in your org.",
+    "billingDomainInfo": "You're charged for each domain in the organization. Billing is calculated daily based on the number of active domain accounts in your org.",
+    "billingRemoteExitNodesInfo": "You're charged for each managed Node in the organization. Billing is calculated daily based on the number of active managed Nodes in your org.",
     "domainNotFound": "도메인을 찾을 수 없습니다",
     "domainNotFoundDescription": "이 리소스는 도메인이 더 이상 시스템에 존재하지 않아 비활성화되었습니다. 이 리소스에 대한 새 도메인을 설정하세요.",
     "failed": "실패",
@@ -1456,23 +1474,23 @@
     "errorCreatingClient": "클라이언트 생성 오류",
     "clientDefaultsNotFound": "클라이언트 기본값을 찾을 수 없습니다.",
     "createClient": "클라이언트 생성",
-    "createClientDescription": "사이트에 연결하기 위한 새 클라이언트를 생성하십시오.",
+    "createClientDescription": "Create a new client to access private resources",
     "seeAllClients": "모든 클라이언트 보기",
     "clientInformation": "클라이언트 정보",
     "clientNamePlaceholder": "클라이언트 이름",
     "address": "주소",
     "subnetPlaceholder": "서브넷",
-    "addressDescription": "이 클라이언트가 연결에 사용할 주소",
+    "addressDescription": "The internal address of the client. Must fall within the organization's subnet.",
     "selectSites": "사이트 선택",
     "sitesDescription": "클라이언트는 선택한 사이트에 연결됩니다.",
     "clientInstallOlm": "Olm 설치",
     "clientInstallOlmDescription": "시스템에서 Olm을 실행하기",
-    "clientOlmCredentials": "Olm 자격 증명",
-    "clientOlmCredentialsDescription": "Olm이 서버와 인증하는 방법입니다.",
-    "olmEndpoint": "Olm 엔드포인트",
-    "olmId": "Olm ID",
-    "olmSecretKey": "Olm 비밀 키",
-    "clientCredentialsSave": "자격 증명 저장",
+    "clientOlmCredentials": "Credentials",
+    "clientOlmCredentialsDescription": "This is how the client will authenticate with the server",
+    "olmEndpoint": "Endpoint",
+    "olmId": "ID",
+    "olmSecretKey": "Secret",
+    "clientCredentialsSave": "Save the Credentials",
     "clientCredentialsSaveDescription": "이것은 한 번만 볼 수 있습니다. 안전한 장소에 복사해 두세요.",
     "generalSettingsDescription": "이 클라이언트에 대한 일반 설정을 구성하세요.",
     "clientUpdated": "클라이언트 업데이트됨",
@@ -1483,9 +1501,7 @@
     "sitesFetchError": "사이트 가져오는 중 오류가 발생했습니다.",
     "olmErrorFetchReleases": "Olm 릴리즈 가져오는 중 오류가 발생했습니다.",
     "olmErrorFetchLatest": "최신 Olm 릴리즈 가져오는 중 오류가 발생했습니다.",
-    "remoteSubnets": "원격 서브넷",
     "enterCidrRange": "CIDR 범위 입력",
-    "remoteSubnetsDescription": "이 사이트에서 원격으로 액세스할 수 있는 CIDR 범위를 추가하세요. 10.0.0.0/24와 같은 형식을 사용하세요. 이는 VPN 클라이언트 연결에만 적용됩니다.",
     "resourceEnableProxy": "공개 프록시 사용",
     "resourceEnableProxyDescription": "이 리소스에 대한 공개 프록시를 활성화하십시오. 이를 통해 네트워크 외부로부터 클라우드를 통해 열린 포트에서 리소스에 액세스할 수 있습니다. Traefik 구성이 필요합니다.",
     "externalProxyEnabled": "외부 프록시 활성화됨",
@@ -1503,14 +1519,15 @@
     "enableHealthChecksDescription": "이 대상을 모니터링하여 건강 상태를 확인하세요. 필요에 따라 대상과 다른 엔드포인트를 모니터링할 수 있습니다.",
     "healthScheme": "방법",
     "healthSelectScheme": "방법 선택",
+    "healthCheckPortInvalid": "Health check port must be between 1 and 65535",
     "healthCheckPath": "경로",
     "healthHostname": "IP / 호스트",
     "healthPort": "포트",
     "healthCheckPathDescription": "상태 확인을 위한 경로입니다.",
-    "healthyIntervalSeconds": "정상 간격",
-    "unhealthyIntervalSeconds": "비정상 간격",
+    "healthyIntervalSeconds": "Healthy Interval (sec)",
+    "unhealthyIntervalSeconds": "Unhealthy Interval (sec)",
     "IntervalSeconds": "정상 간격",
-    "timeoutSeconds": "시간 초과",
+    "timeoutSeconds": "Timeout (sec)",
     "timeIsInSeconds": "시간은 초 단위입니다",
     "retryAttempts": "재시도 횟수",
     "expectedResponseCodes": "예상 응답 코드",
@@ -1546,12 +1563,12 @@
     "resourceEditDomain": "도메인 수정",
     "siteName": "사이트 이름",
     "proxyPort": "포트",
-    "resourcesTableProxyResources": "프록시 리소스",
-    "resourcesTableClientResources": "클라이언트 리소스",
+    "resourcesTableProxyResources": "Public",
+    "resourcesTableClientResources": "Private",
     "resourcesTableNoProxyResourcesFound": "프록시 리소스를 찾을 수 없습니다.",
     "resourcesTableNoInternalResourcesFound": "내부 리소스를 찾을 수 없습니다.",
     "resourcesTableDestination": "대상지",
-    "resourcesTableTheseResourcesForUseWith": "이 리소스는 다음과 함께 사용하기 위한 것입니다.",
+    "resourcesTableAlias": "Alias",
     "resourcesTableClients": "클라이언트",
     "resourcesTableAndOnlyAccessibleInternally": "클라이언트와 연결되었을 때만 내부적으로 접근 가능합니다.",
     "resourcesTableNoTargets": "대상 없음",
@@ -1560,8 +1577,8 @@
     "resourcesTableOffline": "오프라인",
     "resourcesTableUnknown": "알 수 없음",
     "resourcesTableNotMonitored": "모니터링되지 않음",
-    "editInternalResourceDialogEditClientResource": "클라이언트 리소스 수정",
-    "editInternalResourceDialogUpdateResourceProperties": "{resourceName}의 리소스 속성과 대상 구성을 업데이트하세요.",
+    "editInternalResourceDialogEditClientResource": "Edit Private Resource",
+    "editInternalResourceDialogUpdateResourceProperties": "Update the resource configuration and access controls for {resourceName}",
     "editInternalResourceDialogResourceProperties": "리소스 속성",
     "editInternalResourceDialogName": "이름",
     "editInternalResourceDialogProtocol": "프로토콜",
@@ -1580,11 +1597,22 @@
     "editInternalResourceDialogInvalidIPAddressFormat": "잘못된 IP 주소 형식",
     "editInternalResourceDialogDestinationPortMin": "대상 포트는 최소 1이어야 합니다.",
     "editInternalResourceDialogDestinationPortMax": "대상 포트는 65536 미만이어야 합니다.",
+    "editInternalResourceDialogPortModeRequired": "Protocol, proxy port, and destination port are required for port mode",
+    "editInternalResourceDialogMode": "Mode",
+    "editInternalResourceDialogModePort": "Port",
+    "editInternalResourceDialogModeHost": "Host",
+    "editInternalResourceDialogModeCidr": "CIDR",
+    "editInternalResourceDialogDestination": "Destination",
+    "editInternalResourceDialogDestinationHostDescription": "The IP address or hostname of the resource on the site's network.",
+    "editInternalResourceDialogDestinationIPDescription": "The IP or hostname address of the resource on the site's network.",
+    "editInternalResourceDialogDestinationCidrDescription": "The CIDR range of the resource on the site's network.",
+    "editInternalResourceDialogAlias": "Alias",
+    "editInternalResourceDialogAliasDescription": "An optional internal DNS alias for this resource.",
     "createInternalResourceDialogNoSitesAvailable": "사용 가능한 사이트가 없습니다.",
     "createInternalResourceDialogNoSitesAvailableDescription": "내부 리소스를 생성하려면 서브넷이 구성된 최소 하나의 Newt 사이트가 필요합니다.",
     "createInternalResourceDialogClose": "닫기",
-    "createInternalResourceDialogCreateClientResource": "클라이언트 리소스 생성",
-    "createInternalResourceDialogCreateClientResourceDescription": "선택한 사이트에 연결된 클라이언트에 접근할 새 리소스를 생성합니다.",
+    "createInternalResourceDialogCreateClientResource": "Create Private Resource",
+    "createInternalResourceDialogCreateClientResourceDescription": "Create a new resource that will only be accessible to clients connected to the organization",
     "createInternalResourceDialogResourceProperties": "리소스 속성",
     "createInternalResourceDialogName": "이름",
     "createInternalResourceDialogSite": "사이트",
@@ -1613,11 +1641,22 @@
     "createInternalResourceDialogInvalidIPAddressFormat": "잘못된 IP 주소 형식",
     "createInternalResourceDialogDestinationPortMin": "대상 포트는 최소 1이어야 합니다.",
     "createInternalResourceDialogDestinationPortMax": "대상 포트는 65536 미만이어야 합니다.",
+    "createInternalResourceDialogPortModeRequired": "Protocol, proxy port, and destination port are required for port mode",
+    "createInternalResourceDialogMode": "Mode",
+    "createInternalResourceDialogModePort": "Port",
+    "createInternalResourceDialogModeHost": "Host",
+    "createInternalResourceDialogModeCidr": "CIDR",
+    "createInternalResourceDialogDestination": "Destination",
+    "createInternalResourceDialogDestinationHostDescription": "The IP address or hostname of the resource on the site's network.",
+    "createInternalResourceDialogDestinationCidrDescription": "The CIDR range of the resource on the site's network.",
+    "createInternalResourceDialogAlias": "Alias",
+    "createInternalResourceDialogAliasDescription": "An optional internal DNS alias for this resource.",
     "siteConfiguration": "설정",
     "siteAcceptClientConnections": "클라이언트 연결 허용",
-    "siteAcceptClientConnectionsDescription": "이 Newt 인스턴스를 게이트웨이로 사용하여 다른 장치가 연결될 수 있도록 허용합니다.",
-    "siteAddress": "사이트 주소",
-    "siteAddressDescription": "클라이언트가 연결하기 위한 호스트의 IP 주소를 지정합니다. 이는 클라이언트가 주소를 지정하기 위한 Pangolin 네트워크의 사이트 내부 주소입니다. 조직 서브넷 내에 있어야 합니다.",
+    "siteAcceptClientConnectionsDescription": "Allow user devices and clients to access resources on this site. This can be changed later.",
+    "siteAddress": "Site Address (Advanced)",
+    "siteAddressDescription": "The internal address of the site. Must fall within the organization's subnet.",
+    "siteNameDescription": "The display name of the site that can be changed later.",
     "autoLoginExternalIdp": "외부 IDP로 자동 로그인",
     "autoLoginExternalIdpDescription": "인증을 위해 외부 IDP로 사용자를 즉시 리디렉션합니다.",
     "selectIdp": "IDP 선택",
@@ -1631,7 +1670,7 @@
     "autoLoginErrorNoRedirectUrl": "ID 공급자로부터 리디렉션 URL을 받지 못했습니다.",
     "autoLoginErrorGeneratingUrl": "인증 URL 생성 실패.",
     "remoteExitNodeManageRemoteExitNodes": "원격 노드",
-    "remoteExitNodeDescription": "네트워크 연결성을 확장하고 클라우드 의존도를 줄이기 위해 하나 이상의 원격 노드를 자체 호스트하십시오.",
+    "remoteExitNodeDescription": "Self-host one or more remote nodes to extend network connectivity and reduce reliance on the cloud",
     "remoteExitNodes": "노드",
     "searchRemoteExitNodes": "노드 검색...",
     "remoteExitNodeAdd": "노드 추가",
@@ -1643,11 +1682,11 @@
     "sidebarRemoteExitNodes": "원격 노드",
     "remoteExitNodeCreate": {
         "title": "노드 생성",
-        "description": "네트워크 연결성을 확장하기 위해 새 노드를 생성하세요",
+        "description": "Create a new node to extend network connectivity",
         "viewAllButton": "모든 노드 보기",
         "strategy": {
             "title": "생성 전략",
-            "description": "노드를 직접 구성하거나 새 자격 증명을 생성하려면 이것을 선택하세요.",
+            "description": "Choose this to manually configure the node or generate new credentials.",
             "adopt": {
                 "title": "노드 채택",
                 "description": "이미 노드의 자격 증명이 있는 경우 이것을 선택하세요."
@@ -1668,7 +1707,7 @@
         },
         "generate": {
             "title": "생성된 자격 증명",
-            "description": "생성된 자격 증명을 사용하여 노드를 구성하세요",
+            "description": "Use these generated credentials to configure the node",
             "nodeIdTitle": "노드 ID",
             "secretTitle": "비밀",
             "saveCredentialsTitle": "구성에 자격 증명 추가",
@@ -1744,16 +1783,16 @@
     "idpTypeLabel": "신원 공급자 유형",
     "roleMappingExpressionPlaceholder": "예: contains(groups, 'admin') && 'Admin' || 'Member'",
     "idpGoogleConfiguration": "Google 구성",
-    "idpGoogleConfigurationDescription": "Google OAuth2 자격 증명을 구성합니다.",
-    "idpGoogleClientIdDescription": "Google OAuth2 클라이언트 ID",
-    "idpGoogleClientSecretDescription": "Google OAuth2 클라이언트 비밀",
+    "idpGoogleConfigurationDescription": "Configure the Google OAuth2 credentials",
+    "idpGoogleClientIdDescription": "Google OAuth2 Client ID",
+    "idpGoogleClientSecretDescription": "Google OAuth2 Client Secret",
     "idpAzureConfiguration": "Azure Entra ID 구성",
-    "idpAzureConfigurationDescription": "Azure Entra ID OAuth2 자격 증명을 구성합니다.",
+    "idpAzureConfigurationDescription": "Configure Azure Entra ID OAuth2 credentials",
     "idpTenantId": "테넌트 ID",
-    "idpTenantIdPlaceholder": "your-tenant-id",
-    "idpAzureTenantIdDescription": "Azure 액티브 디렉터리 개요에서 찾은 Azure 테넌트 ID",
-    "idpAzureClientIdDescription": "Azure 앱 등록 클라이언트 ID",
-    "idpAzureClientSecretDescription": "Azure 앱 등록 클라이언트 비밀",
+    "idpTenantIdPlaceholder": "tenant-id",
+    "idpAzureTenantIdDescription": "Azure tenant ID (found in Azure Active Directory overview)",
+    "idpAzureClientIdDescription": "Azure App Registration Client ID",
+    "idpAzureClientSecretDescription": "Azure App Registration Client Secret",
     "idpGoogleTitle": "구글",
     "idpGoogleAlt": "구글",
     "idpAzureTitle": "Azure Entra ID",
@@ -1761,14 +1800,14 @@
     "idpGoogleConfigurationTitle": "Google 구성",
     "idpAzureConfigurationTitle": "Azure Entra ID 구성",
     "idpTenantIdLabel": "테넌트 ID",
-    "idpAzureClientIdDescription2": "Azure 앱 등록 클라이언트 ID",
-    "idpAzureClientSecretDescription2": "Azure 앱 등록 클라이언트 비밀",
+    "idpAzureClientIdDescription2": "Azure App Registration Client ID",
+    "idpAzureClientSecretDescription2": "Azure App Registration Client Secret",
     "idpGoogleDescription": "Google OAuth2/OIDC 공급자",
     "idpAzureDescription": "Microsoft Azure OAuth2/OIDC 공급자",
     "subnet": "서브넷",
     "subnetDescription": "이 조직의 네트워크 구성에 대한 서브넷입니다.",
     "authPage": "인증 페이지",
-    "authPageDescription": "조직에 대한 인증 페이지를 구성합니다.",
+    "authPageDescription": "Configure the auth page for the organization",
     "authPageDomain": "인증 페이지 도메인",
     "noDomainSet": "도메인 설정 없음",
     "changeDomain": "도메인 변경",
@@ -1778,7 +1817,7 @@
     "setAuthPageDomain": "인증 페이지 도메인 설정",
     "failedToFetchCertificate": "인증서 가져오기 실패",
     "failedToRestartCertificate": "인증서 재시작 실패",
-    "addDomainToEnableCustomAuthPages": "조직의 맞춤 인증 페이지를 활성화하려면 도메인을 추가하세요.",
+    "addDomainToEnableCustomAuthPages": "Add a domain to enable custom authentication pages for the organization",
     "selectDomainForOrgAuthPage": "조직 인증 페이지에 대한 도메인을 선택하세요.",
     "domainPickerProvidedDomain": "제공된 도메인",
     "domainPickerFreeProvidedDomain": "무료 제공된 도메인",
@@ -1793,7 +1832,7 @@
     "domainPickerInvalidSubdomainCannotMakeValid": "\"{sub}\"을(를) {domain}에 대해 유효하게 만들 수 없습니다.",
     "domainPickerSubdomainSanitized": "하위 도메인 정리됨",
     "domainPickerSubdomainCorrected": "\"{sub}\"이(가) \"{sanitized}\"로 수정되었습니다",
-    "orgAuthSignInTitle": "조직에 로그인",
+    "orgAuthSignInTitle": "Sign in to the organization",
     "orgAuthChooseIdpDescription": "계속하려면 신원 공급자를 선택하세요.",
     "orgAuthNoIdpConfigured": "이 조직은 구성된 신원 공급자가 없습니다. 대신 Pangolin 아이덴티티로 로그인할 수 있습니다.",
     "orgAuthSignInWithPangolin": "Pangolin으로 로그인",
@@ -1811,7 +1850,7 @@
     "enableTwoFactorAuthentication": "이중 인증 활성화",
     "completeSecuritySteps": "보안 단계 완료",
     "securitySettings": "보안 설정",
-    "securitySettingsDescription": "조직에 대한 보안 정책을 구성합니다",
+    "securitySettingsDescription": "Configure security policies for the organization",
     "requireTwoFactorForAllUsers": "모든 사용자에 대해 이중 인증 요구",
     "requireTwoFactorDescription": "활성화되면, 이 조직의 모든 내부 사용자는 조직에 접근하기 위해 이중 인증을 활성화해야 합니다.",
     "requireTwoFactorDisabledDescription": "이 기능을 사용하려면 유효한 라이선스(Enterprise) 또는 활성 구독(SaaS)가 필요합니다.",
@@ -1874,8 +1913,12 @@
     "enterpriseEdition": "엔터프라이즈 에디션",
     "unlicensed": "라이선스 없음",
     "beta": "베타",
-    "manageClients": "클라이언트 관리",
-    "manageClientsDescription": "클라이언트는 당신의 사이트에 연결할 수 있는 디바이스입니다.",
+    "manageUserDevices": "User Devices",
+    "manageUserDevicesDescription": "View and manage devices that users use to privately connect to resources",
+    "manageMachineClients": "Manage Machine Clients",
+    "manageMachineClientsDescription": "Create and manage clients that servers and systems use to privately connect to resources",
+    "clientsTableUserClients": "User",
+    "clientsTableMachineClients": "Machine",
     "licenseTableValidUntil": "유효 기한",
     "saasLicenseKeysSettingsTitle": "엔터프라이즈 라이선스",
     "saasLicenseKeysSettingsDescription": "자체 호스팅된 Pangolin 인스턴스를 위한 엔터프라이즈 라이선스 키를 생성하고 관리합니다.",
@@ -2075,7 +2118,7 @@
     "preferWildcardCert": "와일드카드 인증서 선호",
     "unverified": "검증되지 않음",
     "domainSetting": "도메인 설정",
-    "domainSettingDescription": "도메인에 대한 설정을 구성하세요.",
+    "domainSettingDescription": "Configure settings for the domain",
     "preferWildcardCertDescription": "와일드카드 인증서를 생성하려고 시도합니다 (올바르게 구성된 인증서 해결사가 필요합니다).",
     "recordName": "레코드 이름",
     "auto": "자동",
@@ -2089,15 +2132,15 @@
     "olmUpdateAvailableInfo": "올름의 새 버전이 이용 가능합니다. 최상의 경험을 위해 최신 버전으로 업데이트하세요.",
     "client": "클라이언트",
     "proxyProtocol": "프록시 프로토콜 설정",
-    "proxyProtocolDescription": "프록시 프로토콜을 구성하여 TCP/UDP 서비스에 대한 클라이언트 IP 주소를 보존하십시오.",
+    "proxyProtocolDescription": "Configure Proxy Protocol to preserve client IP addresses for TCP services.",
     "enableProxyProtocol": "프록시 프로토콜 활성화",
-    "proxyProtocolInfo": "TCP/UDP 백엔드의 클라이언트 IP 주소를 보존합니다",
+    "proxyProtocolInfo": "Preserve client IP addresses for TCP backends",
     "proxyProtocolVersion": "프록시 프로토콜 버전",
     "version1": " 버전 1 (추천)",
     "version2": "버전 2",
     "versionDescription": "버전 1은 텍스트 기반으로 널리 지원됩니다. 버전 2는 이진 기반으로 더 효율적이지만 호환성이 낮습니다.",
     "warning": "경고",
-    "proxyProtocolWarning": "백엔드 애플리케이션이 프록시 프로토콜 연결을 허용하도록 구성되어야 합니다. 백엔드가 프록시 프로토콜을 지원하지 않으면, 이를 활성화하면 모든 연결이 끊어집니다. 트래픽에서 온 프록시 프로토콜 헤더를 백엔드가 신뢰하도록 구성하십시오.",
+    "proxyProtocolWarning": "The backend application must be configured to accept Proxy Protocol connections. If your backend doesn't support Proxy Protocol, enabling this will break all connections so only enable this if you know what you're doing. Make sure to configure your backend to trust Proxy Protocol headers from Traefik.",
     "restarting": "재시작 중...",
     "manual": "수동",
     "messageSupport": "지원 메시지",
@@ -2120,6 +2163,43 @@
     "supportMessageSent": "메시지 전송 완료!",
     "supportWillContact": "곧 연락드리겠습니다!",
     "selectLogRetention": "로그 보존 선택",
+    "terms": "Terms",
+    "privacy": "Privacy",
+    "security": "Security",
+    "docs": "Docs",
+    "deviceActivation": "Device activation",
+    "deviceCodeInvalidFormat": "Code must be 9 characters (e.g., A1AJ-N5JD)",
+    "deviceCodeInvalidOrExpired": "Invalid or expired code",
+    "deviceCodeVerifyFailed": "Failed to verify device code",
+    "signedInAs": "Signed in as",
+    "deviceCodeEnterPrompt": "Enter the code displayed on the device",
+    "continue": "Continue",
+    "deviceUnknownLocation": "Unknown location",
+    "deviceAuthorizationRequested": "This authorization was requested from {location} on {date}. Make sure you trust this device as it will get access to the account.",
+    "deviceLabel": "Device: {deviceName}",
+    "deviceWantsAccess": "wants to access your account",
+    "deviceExistingAccess": "Existing access:",
+    "deviceFullAccess": "Full access to your account",
+    "deviceOrganizationsAccess": "Access to all organizations your account has access to",
+    "deviceAuthorize": "Authorize {applicationName}",
+    "deviceConnected": "Device Connected!",
+    "deviceAuthorizedMessage": "Device is authorized to access your account.",
+    "pangolinCloud": "Pangolin Cloud",
+    "viewDevices": "View Devices",
+    "viewDevicesDescription": "Manage your connected devices",
+    "noDevices": "No devices found",
+    "dateCreated": "Date Created",
+    "unnamedDevice": "Unnamed Device",
+    "deviceQuestionRemove": "Are you sure you want to delete this device?",
+    "deviceMessageRemove": "This action cannot be undone.",
+    "deviceDeleteConfirm": "Delete Device",
+    "deleteDevice": "Delete Device",
+    "errorLoadingDevices": "Error loading devices",
+    "failedToLoadDevices": "Failed to load devices",
+    "deviceDeleted": "Device deleted",
+    "deviceDeletedDescription": "The device has been successfully deleted.",
+    "errorDeletingDevice": "Error deleting device",
+    "failedToDeleteDevice": "Failed to delete device",
     "showColumns": "열 표시",
     "hideColumns": "열 숨기기",
     "columnVisibility": "열 가시성",
@@ -2134,6 +2214,10 @@
     "enableSelected": "선택된 항목 활성화",
     "disableSelected": "선택된 항목 비활성화",
     "checkSelectedStatus": "선택된 항목 상태 확인",
+    "clients": "Clients",
+    "accessClientSelect": "Select machine clients",
+    "resourceClientDescription": "Machine clients that can access this resource",
+    "regenerate": "Regenerate",
     "credentials": "자격 증명",
     "savecredentials": "자격 증명 저장",
     "regeneratecredentials": "재생성",
@@ -2151,7 +2235,6 @@
     "endpoint": "엔드포인트",
     "Id": "아이디",
     "SecretKey": "비밀 키",
-    "featureDisabledTooltip": "이 기능은 엔터프라이즈 플랜에서만 사용할 수 있으며 라이센스가 필요합니다.",
     "niceId": "예쁜 ID",
     "niceIdUpdated": "예쁜 ID 업데이트됨",
     "niceIdUpdatedSuccessfully": "예쁜 ID가 성공적으로 업데이트되었습니다",
@@ -2160,5 +2243,15 @@
     "niceIdCannotBeEmpty": "예쁜 ID는 비워둘 수 없습니다",
     "enterIdentifier": "식별자 입력",
     "identifier": "식별자",
-    "noData": "No Data"
+    "deviceLoginUseDifferentAccount": "Not you? Use a different account.",
+    "deviceLoginDeviceRequestingAccessToAccount": "A device is requesting access to this account.",
+    "noData": "No Data",
+    "machineClients": "Machine Clients",
+    "install": "Install",
+    "run": "Run",
+    "clientNameDescription": "The display name of the client that can be changed later.",
+    "clientAddress": "Client Address (Advanced)",
+    "setupFailedToFetchSubnet": "Failed to fetch default subnet",
+    "setupSubnetAdvanced": "Subnet (Advanced)",
+    "setupSubnetDescription": "The subnet for this organization's internal network."
 }

messages/nb-NO.json

@@ -1,12 +1,12 @@
 {
-    "setupCreate": "Lag din organisasjon, område og dine ressurser",
+    "setupCreate": "Create the organization, site, and resources",
     "setupNewOrg": "Ny Organisasjon",
     "setupCreateOrg": "Opprett organisasjon",
     "setupCreateResources": "Opprett ressurser",
     "setupOrgName": "Organisasjonsnavn",
-    "orgDisplayName": "Dette er visningsnavnet til organisasjonen din.",
+    "orgDisplayName": "This is the display name of the organization.",
     "orgId": "Organisasjons-ID",
-    "setupIdentifierMessage": "Dette er den unike identifikator for din organisasjon. Dette er separat fra visningsnavnet.",
+    "setupIdentifierMessage": "This is the unique identifier for the organization.",
     "setupErrorIdentifier": "Organisasjons-ID er allerede tatt. Vennligst velg en annen.",
     "componentsErrorNoMemberCreate": "Du er for øyeblikket ikke medlem av noen organisasjoner. Lag en organisasjon for å komme i gang.",
     "componentsErrorNoMember": "Du er for øyeblikket ikke medlem av noen organisasjoner.",
@@ -50,10 +50,10 @@
     "siteMessageRemove": "Når nettstedet er fjernet, vil det ikke lenger være tilgjengelig. Alle målene for nettstedet vil også bli fjernet.",
     "siteQuestionRemove": "Er du sikker på at du vil fjerne nettstedet fra organisasjonen?",
     "siteManageSites": "Administrer Områder",
-    "siteDescription": "Tillat tilkobling til nettverket ditt gjennom sikre tunneler",
+    "siteDescription": "Create and manage sites to enable connectivity to private networks",
     "siteCreate": "Opprett område",
     "siteCreateDescription2": "Følg trinnene nedenfor for å opprette og koble til et nytt område",
-    "siteCreateDescription": "Opprett et nytt område for å begynne å koble til ressursene dine",
+    "siteCreateDescription": "Create a new site to start connecting resources",
     "close": "Lukk",
     "siteErrorCreate": "Feil ved oppretting av område",
     "siteErrorCreateKeyPair": "Nøkkelpar eller standardinnstillinger for område ikke funnet",
@@ -74,7 +74,7 @@
     "siteInstallNewt": "Installer Newt",
     "siteInstallNewtDescription": "Få Newt til å kjøre på systemet ditt",
     "WgConfiguration": "WireGuard Konfigurasjon",
-    "WgConfigurationDescription": "Bruk følgende konfigurasjon for å koble til nettverket ditt",
+    "WgConfigurationDescription": "Use the following configuration to connect to the network",
     "operatingSystem": "Operativsystem",
     "commands": "Kommandoer",
     "recommended": "Anbefalt",
@@ -87,32 +87,32 @@
     "siteUpdated": "Område oppdatert",
     "siteUpdatedDescription": "Området har blitt oppdatert.",
     "siteGeneralDescription": "Konfigurer de generelle innstillingene for dette området",
-    "siteSettingDescription": "Konfigurer innstillingene for området ditt",
+    "siteSettingDescription": "Configure the settings on the site",
     "siteSetting": "{siteName} Innstillinger",
-    "siteNewtTunnel": "Newt Tunnel (Anbefalt)",
-    "siteNewtTunnelDescription": "Enkleste måte å opprette et inngangspunkt i nettverket ditt. Ingen ekstra oppsett.",
+    "siteNewtTunnel": "Newt Site (Recommended)",
+    "siteNewtTunnelDescription": "Easiest way to create an entrypoint into any network. No extra setup.",
     "siteWg": "Grunnleggende WireGuard",
     "siteWgDescription": "Bruk hvilken som helst WireGuard-klient for å etablere en tunnel. Manuell NAT-oppsett kreves.",
     "siteWgDescriptionSaas": "Bruk hvilken som helst WireGuard-klient for å etablere en tunnel. Manuell NAT-oppsett er nødvendig. FUNGERER KUN PÅ SELVHOSTEDE NODER",
     "siteLocalDescription": "Kun lokale ressurser. Ingen tunnelering.",
     "siteLocalDescriptionSaas": "Lokale ressurser. Ingen tunnelering. Bare tilgjengelig på eksterne noder.",
     "siteSeeAll": "Se alle områder",
-    "siteTunnelDescription": "Bestem hvordan du vil koble deg til ditt område",
-    "siteNewtCredentials": "Newt påloggingsinformasjon",
-    "siteNewtCredentialsDescription": "Slik vil Newt autentisere seg mot serveren",
-    "siteCredentialsSave": "Lagre påloggingsinformasjonen din",
+    "siteTunnelDescription": "Determine how you want to connect to the site",
+    "siteNewtCredentials": "Credentials",
+    "siteNewtCredentialsDescription": "This is how the site will authenticate with the server",
+    "siteCredentialsSave": "Save the Credentials",
     "siteCredentialsSaveDescription": "Du vil kun kunne se dette én gang. Sørg for å kopiere det til et sikkert sted.",
     "siteInfo": "Områdeinformasjon",
     "status": "Status",
     "shareTitle": "Administrer delingslenker",
-    "shareDescription": "Opprett delbare lenker for å gi midlertidig eller permanent tilgang til ressursene dine",
+    "shareDescription": "Create shareable links to grant temporary or permanent access to proxy resources",
     "shareSearch": "Søk delingslenker...",
     "shareCreate": "Opprett delingslenke",
     "shareErrorDelete": "Klarte ikke å slette lenke",
     "shareErrorDeleteMessage": "En feil oppstod ved sletting av lenke",
     "shareDeleted": "Lenke slettet",
     "shareDeletedDescription": "Lenken har blitt slettet",
-    "shareTokenDescription": "Din tilgangsnøkkel kan sendes på to måter: som en query parameter eller i request headers. Disse må sendes fra klienten på hver forespørsel for autentisert tilgang.",
+    "shareTokenDescription": "The access token can be passed in two ways: as a query parameter or in the request headers. These must be passed from the client on every request for authenticated access.",
     "accessToken": "Tilgangsnøkkel",
     "usageExamples": "Brukseksempler",
     "tokenId": "Token-ID",
@@ -121,7 +121,7 @@
     "importantNote": "Viktig merknad",
     "shareImportantDescription": "Av sikkerhetsgrunner anbefales det å bruke headere fremfor query parametere der det er mulig, da query parametere kan logges i serverlogger eller nettleserhistorikk.",
     "token": "Token",
-    "shareTokenSecurety": "Hold tilgangsnøkkelen ditt sikkert. Ikke del i offentlig tilgjengelige områder eller klientkode.",
+    "shareTokenSecurety": "Keep the access token secure. Do not share it in publicly accessible areas or client-side code.",
     "shareErrorFetchResource": "Klarte ikke å hente ressurser",
     "shareErrorFetchResourceDescription": "En feil oppstod under henting av ressursene",
     "shareErrorCreate": "Mislyktes med å opprette delingslenke",
@@ -144,8 +144,10 @@
     "expires": "Utløper",
     "never": "Aldri",
     "shareErrorSelectResource": "Vennligst velg en ressurs",
-    "resourceTitle": "Administrer Ressurser",
-    "resourceDescription": "Opprett sikre proxyer til dine private applikasjoner",
+    "proxyResourceTitle": "Manage Public Resources",
+    "proxyResourceDescription": "Create and manage resources that are publicly accessible through a web browser",
+    "clientResourceTitle": "Manage Private Resources",
+    "clientResourceDescription": "Create and manage resources that are only accessible through a connected client",
     "resourcesSearch": "Søk i ressurser...",
     "resourceAdd": "Legg til ressurs",
     "resourceErrorDelte": "Feil ved sletting av ressurs",
@@ -155,9 +157,9 @@
     "resourceMessageRemove": "Når den er fjernet, vil ressursen ikke lenger være tilgjengelig. Alle mål knyttet til ressursen vil også bli fjernet.",
     "resourceQuestionRemove": "Er du sikker på at du vil fjerne ressursen fra organisasjonen?",
     "resourceHTTP": "HTTPS-ressurs",
-    "resourceHTTPDescription": "Proxy-forespørsler til appen din over HTTPS ved bruk av et underdomene eller grunndomene.",
+    "resourceHTTPDescription": "Proxy requests to the app over HTTPS using a subdomain or base domain.",
     "resourceRaw": "Rå TCP/UDP-ressurs",
-    "resourceRawDescription": "Proxyer forespørsler til appen din over TCP/UDP ved å bruke et portnummer.",
+    "resourceRawDescription": "Proxy requests to the app over TCP/UDP using a port number. This only works when sites are connected to nodes.",
     "resourceCreate": "Opprett ressurs",
     "resourceCreateDescription": "Følg trinnene nedenfor for å opprette en ny ressurs",
     "resourceSeeAll": "Se alle ressurser",
@@ -171,22 +173,22 @@
     "noCountryFound": "Ingen land funnet.",
     "siteSelectionDescription": "Dette området vil gi tilkobling til mål.",
     "resourceType": "Ressurstype",
-    "resourceTypeDescription": "Bestem hvordan du vil få tilgang til ressursen din",
+    "resourceTypeDescription": "Determine how to access the resource",
     "resourceHTTPSSettings": "HTTPS-innstillinger",
-    "resourceHTTPSSettingsDescription": "Konfigurer tilgang til ressursen din over HTTPS",
+    "resourceHTTPSSettingsDescription": "Configure how the resource will be accessed over HTTPS",
     "domainType": "Domenetype",
     "subdomain": "Underdomene",
     "baseDomain": "Grunndomene",
-    "subdomnainDescription": "Underdomenet der ressursen din vil være tilgjengelig.",
+    "subdomnainDescription": "The subdomain where the resource will be accessible.",
     "resourceRawSettings": "TCP/UDP-innstillinger",
-    "resourceRawSettingsDescription": "Konfigurer hvordan din ressurs vil bli tilgjengelig over TCP/UDP. Du kartlegger ressursen til en port på vertsserveren Pangolin slik at du får tilgang til ressursene fra server-ip:mappet port.",
+    "resourceRawSettingsDescription": "Configure how the resource will be accessed over TCP/UDP. You map the resource to a port on the host Pangolin server, so you can access the resource from server-public-ip:mapped-port.",
     "protocol": "Protokoll",
     "protocolSelect": "Velg en protokoll",
     "resourcePortNumber": "Portnummer",
     "resourcePortNumberDescription": "Det eksterne portnummeret for proxy forespørsler.",
     "cancel": "Avbryt",
     "resourceConfig": "Konfigurasjonsutdrag",
-    "resourceConfigDescription": "Kopier og lim inn disse konfigurasjonsutdragene for å sette opp din TCP/UDP-ressurs",
+    "resourceConfigDescription": "Copy and paste these configuration snippets to set up the TCP/UDP resource",
     "resourceAddEntrypoints": "Traefik: Legg til inngangspunkter",
     "resourceExposePorts": "Gerbil: Eksponer Porter i Docker Compose",
     "resourceLearnRaw": "Lær hvordan å konfigurere TCP/UDP-ressurser",
@@ -202,14 +204,14 @@
     "proxy": "Proxy",
     "internal": "Intern",
     "rules": "Regler",
-    "resourceSettingDescription": "Konfigurer innstillingene på ressursen din",
+    "resourceSettingDescription": "Configure the settings on the resource",
     "resourceSetting": "{resourceName} Innstillinger",
-    "alwaysAllow": "Alltid tillat",
-    "alwaysDeny": "Alltid avslå",
+    "alwaysAllow": "Bypass Auth",
+    "alwaysDeny": "Block Access",
     "passToAuth": "Pass til Autentisering",
-    "orgSettingsDescription": "Konfigurer organisasjonens generelle innstillinger",
+    "orgSettingsDescription": "Configure the organization's settings",
     "orgGeneralSettings": "Organisasjonsinnstillinger",
-    "orgGeneralSettingsDescription": "Administrer dine organisasjonsdetaljer og konfigurasjon",
+    "orgGeneralSettingsDescription": "Manage the organization's details and configuration",
     "saveGeneralSettings": "Lagre generelle innstillinger",
     "saveSettings": "Lagre innstillinger",
     "orgDangerZone": "Faresone",
@@ -232,7 +234,7 @@
     "orgMissing": "Organisasjons-ID Mangler",
     "orgMissingMessage": "Kan ikke regenerere invitasjon uten en organisasjons-ID.",
     "accessUsersManage": "Administrer brukere",
-    "accessUsersDescription": "Inviter brukere og gi dem roller for å administrere tilgang til organisasjonen din",
+    "accessUsersDescription": "Invite and manage users with access to this organization",
     "accessUsersSearch": "Søk etter brukere...",
     "accessUserCreate": "Opprett bruker",
     "accessUserRemove": "Fjern bruker",
@@ -241,13 +243,13 @@
     "role": "Rolle",
     "nameRequired": "Navn er påkrevd",
     "accessRolesManage": "Administrer Roller",
-    "accessRolesDescription": "Konfigurer roller for å administrere tilgang til organisasjonen din",
+    "accessRolesDescription": "Create and manage roles for users in the organization",
     "accessRolesSearch": "Søk etter roller...",
     "accessRolesAdd": "Legg til rolle",
     "accessRoleDelete": "Slett rolle",
     "description": "Beskrivelse",
     "inviteTitle": "Åpne invitasjoner",
-    "inviteDescription": "Administrer invitasjonene dine til andre brukere",
+    "inviteDescription": "Manage invitations for other users to join the organization",
     "inviteSearch": "Søk i invitasjoner...",
     "minutes": "Minutter",
     "hours": "Timer",
@@ -261,13 +263,13 @@
     "apiKeysErrorCreate": "Feil ved oppretting av API-nøkkel",
     "apiKeysErrorSetPermission": "Feil ved innstilling av tillatelser",
     "apiKeysCreate": "Generer API-nøkkel",
-    "apiKeysCreateDescription": "Generer en ny API-nøkkel for din organisasjon",
+    "apiKeysCreateDescription": "Generate a new API key for the organization",
     "apiKeysGeneralSettings": "Tillatelser",
     "apiKeysGeneralSettingsDescription": "Finn ut hva denne API-nøkkelen kan gjøre",
-    "apiKeysList": "Din API-nøkkel",
-    "apiKeysSave": "Lagre API-nøkkelen din",
+    "apiKeysList": "New API Key",
+    "apiKeysSave": "Save the API Key",
     "apiKeysSaveDescription": "Du vil bare kunne se dette én gang. Sørg for å kopiere det til et sikkert sted.",
-    "apiKeysInfo": "Din API-nøkkel er:",
+    "apiKeysInfo": "The API key is:",
     "apiKeysConfirmCopy": "Jeg har kopiert API-nøkkelen",
     "generate": "Generer",
     "done": "Ferdig",
@@ -424,7 +426,7 @@
     "userCreated": "Bruker opprettet",
     "userCreatedDescription": "Brukeren har blitt vellykket opprettet.",
     "userTypeInternal": "Intern bruker",
-    "userTypeInternalDescription": "Inviter en bruker til å bli med i organisasjonen din direkte.",
+    "userTypeInternalDescription": "Invite a user to join the organization directly.",
     "userTypeExternal": "Ekstern bruker",
     "userTypeExternalDescription": "Opprett en bruker med en ekstern identitetsleverandør.",
     "accessUserCreateDescription": "Følg stegene under for å opprette en ny bruker",
@@ -468,13 +470,13 @@
     "accessControlsSubmit": "Lagre tilgangskontroller",
     "roles": "Roller",
     "accessUsersRoles": "Administrer brukere og roller",
-    "accessUsersRolesDescription": "Inviter brukere og legg dem til roller for å administrere tilgang til organisasjonen din.",
+    "accessUsersRolesDescription": "Invite users and add them to roles to manage access to the organization",
     "key": "Nøkkel",
     "createdAt": "Opprettet",
     "proxyErrorInvalidHeader": "Ugyldig verdi for egendefinert vertsoverskrift. Bruk domenenavnformat, eller lagre tomt for å fjerne den egendefinerte vertsoverskriften.",
     "proxyErrorTls": "Ugyldig TLS-servernavn. Bruk domenenavnformat, eller la stå tomt for å fjerne TLS-servernavnet.",
     "proxyEnableSSL": "Aktiver SSL",
-    "proxyEnableSSLDescription": "Aktiver SSL/TLS-kryptering for sikre HTTPS-tilkoblinger til dine mål.",
+    "proxyEnableSSLDescription": "Enable SSL/TLS encryption for secure HTTPS connections to the targets.",
     "target": "Target",
     "configureTarget": "Konfigurer mål",
     "targetErrorFetch": "Kunne ikke hente mål",
@@ -490,29 +492,29 @@
     "targetsErrorUpdate": "Feilet å oppdatere mål",
     "targetsErrorUpdateDescription": "En feil oppsto under oppdatering av mål",
     "targetTlsUpdate": "TLS-innstillinger oppdatert",
-    "targetTlsUpdateDescription": "Dine TLS-innstillinger er oppdatert",
+    "targetTlsUpdateDescription": "TLS settings have been updated successfully",
     "targetErrorTlsUpdate": "Feilet under oppdatering av TLS-innstillinger",
     "targetErrorTlsUpdateDescription": "Det oppstod en feil under oppdatering av TLS-innstillinger",
     "proxyUpdated": "Proxy-innstillinger oppdatert",
-    "proxyUpdatedDescription": "Proxy-innstillingene dine er oppdatert",
+    "proxyUpdatedDescription": "Proxy settings have been updated successfully",
     "proxyErrorUpdate": "En feil oppsto under oppdatering av proxyinnstillinger",
     "proxyErrorUpdateDescription": "En feil oppsto under oppdatering av proxyinnstillinger",
     "targetAddr": "IP / vertsnavn",
     "targetPort": "Port",
     "targetProtocol": "Protokoll",
     "targetTlsSettings": "Sikker tilkoblings-konfigurasjon",
-    "targetTlsSettingsDescription": "Konfigurer SSL/TLS-innstillinger for ressursen din",
+    "targetTlsSettingsDescription": "Configure SSL/TLS settings for the resource",
     "targetTlsSettingsAdvanced": "Avanserte TLS-innstillinger",
     "targetTlsSni": "TLS servernavn",
     "targetTlsSniDescription": "TLS-servernavnet som skal brukes for SNI. La stå tomt for å bruke standardverdien.",
     "targetTlsSubmit": "Lagre innstillinger",
     "targets": "Målkonfigurasjon",
-    "targetsDescription": "Sett opp mål for å rute trafikk til dine backend-tjenester",
+    "targetsDescription": "Set up targets to route traffic to backend services",
     "targetStickySessions": "Aktiver klebrige sesjoner",
     "targetStickySessionsDescription": "Behold tilkoblinger på samme bakend-mål gjennom hele sesjonen.",
     "methodSelect": "Velg metode",
     "targetSubmit": "Legg til mål",
-    "targetNoOne": "Denne ressursen har ikke noen mål. Legg til et mål for å konfigurere hvor du vil sende forespørsler til din backend.",
+    "targetNoOne": "This resource doesn't have any targets. Add a target to configure where to send requests to the backend.",
     "targetNoOneDescription": "Å legge til mer enn ett mål ovenfor vil aktivere lastbalansering.",
     "targetsSubmit": "Lagre mål",
     "addTarget": "Legg til mål",
@@ -530,7 +532,7 @@
     "tlsServerNameDescription": "The TLS server name to use for SNI",
     "save": "Lagre",
     "proxyAdditional": "Ytterligere Proxy-innstillinger",
-    "proxyAdditionalDescription": "Konfigurer hvordan ressursen din håndterer proxy-innstillinger",
+    "proxyAdditionalDescription": "Configure how the resource handles proxy settings",
     "proxyCustomHeader": "Tilpasset verts-header",
     "proxyCustomHeaderDescription": "Verts-header som skal settes ved videresending av forespørsler. La stå tom for å bruke standardinnstillingen.",
     "proxyAdditionalSubmit": "Lagre proxy-innstillinger",
@@ -570,7 +572,7 @@
     "rulesMatchType": "Trefftype",
     "value": "Verdi",
     "rulesAbout": "Om regler",
-    "rulesAboutDescription": "Regler lar deg kontrollere tilgang til din ressurs basert på et sett med kriterier. Du kan opprette regler for å tillate eller nekte tilgang basert på IP-adresse eller URL-sti.",
+    "rulesAboutDescription": "Rules allow you to control access to the resource based on a set of criteria. You can create rules to allow or deny access based on IP address or URL path.",
     "rulesActions": "Handlinger",
     "rulesActionAlwaysAllow": "Alltid Tillat: Omgå alle autentiserings metoder",
     "rulesActionAlwaysDeny": "Alltid Nekt: Blokker alle forespørsler; ingen autentisering kan forsøkes",
@@ -582,7 +584,7 @@
     "rulesEnable": "Aktiver regler",
     "rulesEnableDescription": "Aktiver eller deaktiver regelvurdering for denne ressursen",
     "rulesResource": "Konfigurasjon av ressursregler",
-    "rulesResourceDescription": "Konfigurere regler for tilgangskontroll til ressursen din",
+    "rulesResourceDescription": "Configure rules to control access to the resource",
     "ruleSubmit": "Legg til regel",
     "rulesNoOne": "Ingen regler. Legg til en regel ved å bruke skjemaet.",
     "rulesOrder": "Regler evalueres etter prioritet i stigende rekkefølge.",
@@ -598,7 +600,7 @@
     "none": "Ingen",
     "unknown": "Ukjent",
     "resources": "Ressurser",
-    "resourcesDescription": "Ressurser er proxyer for applikasjoner som kjører på ditt private nettverk. Opprett en ressurs for enhver HTTP/HTTPS- eller rå TCP/UDP-tjeneste på ditt private nettverk. Hver ressurs må kobles til et område for å muliggjøre privat, sikker tilkobling gjennom en kryptert WireGuard-tunnel.",
+    "resourcesDescription": "Resources are proxies to applications running on the private network. Create a resource for any HTTP/HTTPS or raw TCP/UDP service on your private network. Each resource must be connected to a site to enable private, secure connectivity through an encrypted WireGuard tunnel.",
     "resourcesWireGuardConnect": "Sikker tilkobling med WireGuard-kryptering",
     "resourcesMultipleAuthenticationMethods": "Konfigurer flere autentiseringsmetoder",
     "resourcesUsersRolesAccess": "Bruker- og rollebasert tilgangskontroll",
@@ -609,7 +611,7 @@
     "resourceSelect": "Velg ressurs",
     "shareLinks": "Del lenker",
     "share": "Delbare lenker",
-    "shareDescription2": "Opprett delbare lenker til ressursene dine. Lenker gir midlertidig eller ubegrenset tilgang til ressursen din. Du kan konfigurere utløpsvarigheten for lenken når du oppretter den.",
+    "shareDescription2": "Create shareable links to resources. Links provide temporary or unlimited access to your resource. You can configure the expiration duration of the link when you create one.",
     "shareEasyCreate": "Enkelt å lage og dele",
     "shareConfigurableExpirationDuration": "Konfigurerbar utløpsvarighet",
     "shareSecureAndRevocable": "Sikker og tilbakekallbar",
@@ -619,19 +621,19 @@
     "unknownCommand": "Ukjent kommando",
     "newtErrorFetchReleases": "Feilet å hente utgivelsesinfo: {err}",
     "newtErrorFetchLatest": "Feil ved henting av siste utgivelse: {err}",
-    "newtEndpoint": "Newt endepunkt",
-    "newtId": "Newt-ID",
-    "newtSecretKey": "Newt hemmelig nøkkel",
+    "newtEndpoint": "Endpoint",
+    "newtId": "ID",
+    "newtSecretKey": "Secret",
     "architecture": "Arkitektur",
     "sites": "Områder",
-    "siteWgAnyClients": "Bruk en hvilken som helst WireGuard-klient for å koble til. Du må adressere dine interne ressurser ved å bruke peer-IP-en.",
+    "siteWgAnyClients": "Use any WireGuard client to connect. You will have to address internal resources using the peer IP.",
     "siteWgCompatibleAllClients": "Kompatibel med alle WireGuard-klienter",
     "siteWgManualConfigurationRequired": "Manuell konfigurasjon påkrevd",
     "userErrorNotAdminOrOwner": "Bruker er ikke administrator eller eier",
     "pangolinSettings": "Innstillinger - Pangolin",
     "accessRoleYour": "Din rolle:",
-    "accessRoleSelect2": "Velg en rolle",
-    "accessUserSelect": "Velg en bruker",
+    "accessRoleSelect2": "Select roles",
+    "accessUserSelect": "Select users",
     "otpEmailEnter": "Skriv inn én e-post",
     "otpEmailEnterDescription": "Trykk enter for å legge til en e-post etter å ha tastet den inn i tekstfeltet.",
     "otpEmailErrorInvalid": "Ugyldig e-postadresse. Jokertegnet (*) må være hele lokaldelen.",
@@ -683,7 +685,7 @@
     "resourcePincodeSetupTitle": "Angi PIN-kode",
     "resourcePincodeSetupTitleDescription": "Sett en pinkode for å beskytte denne ressursen",
     "resourceRoleDescription": "Administratorer har alltid tilgang til denne ressursen.",
-    "resourceUsersRoles": "Brukere og Roller",
+    "resourceUsersRoles": "Access Controls",
     "resourceUsersRolesDescription": "Konfigurer hvilke brukere og roller som har tilgang til denne ressursen",
     "resourceUsersRolesSubmit": "Lagre brukere og roller",
     "resourceWhitelistSave": "Lagring vellykket",
@@ -779,15 +781,15 @@
     "idpOidcConfigure": "OAuth2/OIDC-konfigurasjon",
     "idpOidcConfigureDescription": "Konfigurer OAuth2/OIDC-leverandørens endepunkter og legitimasjon",
     "idpClientId": "Klient-ID",
-    "idpClientIdDescription": "OAuth2-klient-ID-en fra identitetsleverandøren din",
+    "idpClientIdDescription": "The OAuth2 client ID from the identity provider",
     "idpClientSecret": "Klienthemmelighet",
-    "idpClientSecretDescription": "OAuth2-klienthemmeligheten fra din identitetsleverandør",
+    "idpClientSecretDescription": "The OAuth2 client secret from the identity provider",
     "idpAuthUrl": "Autorisasjons-URL",
     "idpAuthUrlDescription": "OAuth2 autorisasjonsendepunkt URL",
     "idpTokenUrl": "Token-URL",
     "idpTokenUrlDescription": "OAuth2-tokenendepunkt-URL",
     "idpOidcConfigureAlert": "Viktig informasjon",
-    "idpOidcConfigureAlertDescription": "Etter at du har opprettet identitetsleverandøren, må du konfigurere callback-URL-en i identitetsleverandørens innstillinger. Callback-URL-en blir oppgitt etter vellykket opprettelse.",
+    "idpOidcConfigureAlertDescription": "After creating the identity provider, you will need to configure the callback URL in the identity provider's settings. The callback URL will be provided after successful creation.",
     "idpToken": "Token-konfigurasjon",
     "idpTokenDescription": "Konfigurer hvordan brukerinformasjon trekkes ut fra ID-tokenet",
     "idpJmespathAbout": "Om JMESPath",
@@ -804,7 +806,7 @@
     "idpSubmit": "Opprett identitetsleverandør",
     "orgPolicies": "Organisasjonsretningslinjer",
     "idpSettings": "{idpName} Innstillinger",
-    "idpCreateSettingsDescription": "Konfigurer innstillingene for din identitetsleverandør",
+    "idpCreateSettingsDescription": "Configure the settings for the identity provider",
     "roleMapping": "Rolletilordning",
     "orgMapping": "Organisasjon Kartlegging",
     "orgPoliciesSearch": "Søk i organisasjonens retningslinjer...",
@@ -839,7 +841,7 @@
     "idpUpdatedDescription": "Identitetsleverandør vellykket oppdatert",
     "redirectUrl": "Omdirigerings-URL",
     "redirectUrlAbout": "Om omdirigerings-URL",
-    "redirectUrlAboutDescription": "Dette er URL-en som brukere vil bli omdirigert til etter autentisering. Du må konfigurere denne URL-en i innstillingene for identitetsleverandøren din.",
+    "redirectUrlAboutDescription": "This is the URL to which users will be redirected after authentication. You need to configure this URL in the identity provider's settings.",
     "pangolinAuth": "Autentisering - Pangolin",
     "verificationCodeLengthRequirements": "Din verifiseringskode må være 8 tegn.",
     "errorOccurred": "Det oppstod en feil",
@@ -922,6 +924,10 @@
     "passwordResetSent": "Vi sender en kode for tilbakestilling av passord til denne e-postadressen.",
     "passwordResetCode": "Tilbakestillingskode",
     "passwordResetCodeDescription": "Sjekk e-posten din for tilbakestillingskoden.",
+    "generatePasswordResetCode": "Generate Password Reset Code",
+    "passwordResetCodeGenerated": "Password Reset Code Generated",
+    "passwordResetCodeGeneratedDescription": "Share this code with the user. They can use it to reset their password.",
+    "passwordResetUrl": "Reset URL",
     "passwordNew": "Nytt passord",
     "passwordNewConfirm": "Bekreft nytt passord",
     "changePassword": "Endre passord",
@@ -939,6 +945,9 @@
     "pincodeAuth": "Autentiseringskode",
     "pincodeSubmit2": "Send inn kode",
     "passwordResetSubmit": "Be om tilbakestilling",
+    "passwordResetAlreadyHaveCode": "Enter Password Reset Code",
+    "passwordResetSmtpRequired": "Please contact your administrator",
+    "passwordResetSmtpRequiredDescription": "A password reset code is required to reset your password. Please contact your administrator for assistance.",
     "passwordBack": "Tilbake til passord",
     "loginBack": "Gå tilbake til innlogging",
     "signup": "Registrer deg",
@@ -1104,12 +1113,15 @@
     "actionListSiteResources": "List opp Stedsressurser",
     "actionUpdateSiteResource": "Oppdater Stedsressurs",
     "actionListInvitations": "Liste invitasjoner",
+    "actionExportLogs": "Export Logs",
+    "actionViewLogs": "View Logs",
     "noneSelected": "Ingen valgt",
     "orgNotFound2": "Ingen organisasjoner funnet.",
     "searchProgress": "Søker...",
     "create": "Opprett",
     "orgs": "Organisasjoner",
     "loginError": "En feil oppstod under innlogging",
+    "loginRequiredForDevice": "Login is required to authenticate your device.",
     "passwordForgot": "Glemt passordet ditt?",
     "otpAuth": "Tofaktorautentisering",
     "otpAuthDescription": "Skriv inn koden fra autentiseringsappen din eller en av dine engangs reservekoder.",
@@ -1164,23 +1176,29 @@
     "sidebarHome": "Hjem",
     "sidebarSites": "Områder",
     "sidebarResources": "Ressurser",
+    "sidebarProxyResources": "Public",
+    "sidebarClientResources": "Private",
     "sidebarAccessControl": "Tilgangskontroll",
+    "sidebarLogsAndAnalytics": "Logs & Analytics",
     "sidebarUsers": "Brukere",
+    "sidebarAdmin": "Admin",
     "sidebarInvitations": "Invitasjoner",
     "sidebarRoles": "Roller",
-    "sidebarShareableLinks": "Delbare lenker",
+    "sidebarShareableLinks": "Links",
     "sidebarApiKeys": "API-nøkler",
     "sidebarSettings": "Innstillinger",
     "sidebarAllUsers": "Alle brukere",
     "sidebarIdentityProviders": "Identitetsleverandører",
     "sidebarLicense": "Lisens",
     "sidebarClients": "Klienter",
+    "sidebarUserDevices": "Users",
+    "sidebarMachineClients": "Machines",
     "sidebarDomains": "Domener",
     "sidebarGeneral": "General",
     "sidebarLogAndAnalytics": "Log & Analytics",
     "sidebarBluePrints": "Tegninger",
     "sidebarOrganization": "Organization",
-    "sidebarLogsAnalytics": "Request Analytics",
+    "sidebarLogsAnalytics": "Analytics",
     "blueprints": "Tegninger",
     "blueprintsDescription": "Bruk deklarative konfigurasjoner og vis tidligere kjøringer",
     "blueprintAdd": "Legg til blåkopi",
@@ -1191,7 +1209,7 @@
     "blueprintDetailsDescription": "Se resultatet av den påførte blåkopien og alle feil som oppstod",
     "blueprintInfo": "Blåkopi informasjon",
     "message": "Melding",
-    "blueprintContentsDescription": "Definer innhold av YAML som beskriver din infrastruktur",
+    "blueprintContentsDescription": "Define the YAML content describing the infrastructure",
     "blueprintErrorCreateDescription": "Det oppstod en feil da plantegningen ble lagt til",
     "blueprintErrorCreate": "Feil ved opprettelse av plantegning",
     "searchBlueprintProgress": "Søk etter plantegninger...",
@@ -1247,15 +1265,15 @@
     "loading": "Laster inn",
     "restart": "Start på nytt",
     "domains": "Domener",
-    "domainsDescription": "Administrer domener for organisasjonen din",
+    "domainsDescription": "Create and manage domains available in the organization",
     "domainsSearch": "Søk i domener...",
     "domainAdd": "Legg til domene",
-    "domainAddDescription": "Registrer et nytt domene hos organisasjonen din",
+    "domainAddDescription": "Register a new domain with to the organization",
     "domainCreate": "Opprett domene",
     "domainCreatedDescription": "Domene ble opprettet",
     "domainDeletedDescription": "Domene ble slettet",
-    "domainQuestionRemove": "Er du sikker på at du vil fjerne domenet fra kontoen din?",
-    "domainMessageRemove": "Når domenet er fjernet, vil det ikke lenger være knyttet til kontoen din.",
+    "domainQuestionRemove": "Are you sure you want to remove the domain?",
+    "domainMessageRemove": "Once removed, the domain will no longer be associated with the organization.",
     "domainConfirmDelete": "Bekreft sletting av domene",
     "domainDelete": "Slett domene",
     "domain": "Domene",
@@ -1274,7 +1292,7 @@
     "pending": "Venter",
     "sidebarBilling": "Fakturering",
     "billing": "Fakturering",
-    "orgBillingDescription": "Administrer faktureringsinformasjon og abonnementer",
+    "orgBillingDescription": "Manage billing information and subscriptions",
     "github": "GitHub",
     "pangolinHosted": "Driftet av Pangolin",
     "fossorial": "Fossorial",
@@ -1317,7 +1335,7 @@
     "domainPickerSortAsc": "A-Å",
     "domainPickerSortDesc": "Å-A",
     "domainPickerCheckingAvailability": "Sjekker tilgjengelighet...",
-    "domainPickerNoMatchingDomains": "Ingen samsvarende domener funnet. Prøv et annet domene eller sjekk organisasjonens domeneinnstillinger.",
+    "domainPickerNoMatchingDomains": "No matching domains found. Try a different domain or check the organization's domain settings.",
     "domainPickerOrganizationDomains": "Organisasjonsdomener",
     "domainPickerProvidedDomains": "Leverte domener",
     "domainPickerSubdomain": "Underdomene: {subdomain}",
@@ -1351,7 +1369,7 @@
     "billingModifySubscription": "Endre abonnement",
     "billingStartSubscription": "Start abonnement",
     "billingRecurringCharge": "Innkommende Avgift",
-    "billingManageSubscriptionSettings": "Administrer abonnementsinnstillinger og preferanser",
+    "billingManageSubscriptionSettings": "Manage subscription settings and preferences",
     "billingNoActiveSubscription": "Du har ikke et aktivt abonnement. Start abonnementet ditt for å øke bruksgrensene.",
     "billingFailedToLoadSubscription": "Klarte ikke å laste abonnement",
     "billingFailedToLoadUsage": "Klarte ikke å laste bruksdata",
@@ -1362,9 +1380,9 @@
     "billingPortalError": "Portalfeil",
     "billingDataUsageInfo": "Du er ladet for all data som overføres gjennom dine sikre tunneler når du er koblet til skyen. Dette inkluderer både innkommende og utgående trafikk på alle dine nettsteder. Når du når grensen din, vil sidene koble fra til du oppgraderer planen eller reduserer bruken. Data belastes ikke ved bruk av EK-grupper.",
     "billingOnlineTimeInfo": "Du er ladet på hvor lenge sidene dine forblir koblet til skyen. For eksempel tilsvarer 44,640 minutter ett nettsted som går 24/7 i en hel måned. Når du når grensen din, vil sidene koble fra til du oppgraderer planen eller reduserer bruken. Tid belastes ikke når du bruker noder.",
-    "billingUsersInfo": "Du belastes for hver bruker i organisasjonen din. Faktureringen beregnes daglig basert på antall aktive brukerkontoer i organisasjonen din.",
-    "billingDomainInfo": "Du belastes for hvert domene i organisasjonen din. Faktureringen beregnes daglig basert på antall aktive domenekontoer i organisasjonen din.",
-    "billingRemoteExitNodesInfo": "Du belastes for hver styrt node i organisasjonen din. Faktureringen beregnes daglig basert på antall aktive styrte noder i organisasjonen din.",
+    "billingUsersInfo": "You're charged for each user in the organization. Billing is calculated daily based on the number of active user accounts in your org.",
+    "billingDomainInfo": "You're charged for each domain in the organization. Billing is calculated daily based on the number of active domain accounts in your org.",
+    "billingRemoteExitNodesInfo": "You're charged for each managed Node in the organization. Billing is calculated daily based on the number of active managed Nodes in your org.",
     "domainNotFound": "Domene ikke funnet",
     "domainNotFoundDescription": "Denne ressursen er deaktivert fordi domenet ikke lenger eksisterer i systemet vårt. Vennligst angi et nytt domene for denne ressursen.",
     "failed": "Mislyktes",
@@ -1456,23 +1474,23 @@
     "errorCreatingClient": "Feil ved oppretting av klient",
     "clientDefaultsNotFound": "Klientstandarder ikke funnet",
     "createClient": "Opprett klient",
-    "createClientDescription": "Opprett en ny klient for å koble til dine områder",
+    "createClientDescription": "Create a new client to access private resources",
     "seeAllClients": "Se alle klienter",
     "clientInformation": "Klientinformasjon",
     "clientNamePlaceholder": "Klientnavn",
     "address": "Adresse",
     "subnetPlaceholder": "Subnett",
-    "addressDescription": "Adressen denne klienten vil bruke for tilkobling",
+    "addressDescription": "The internal address of the client. Must fall within the organization's subnet.",
     "selectSites": "Velg områder",
     "sitesDescription": "Klienten vil ha tilkobling til de valgte områdene",
     "clientInstallOlm": "Installer Olm",
     "clientInstallOlmDescription": "Få Olm til å kjøre på systemet ditt",
-    "clientOlmCredentials": "Olm-legitimasjon",
-    "clientOlmCredentialsDescription": "Slik vil Olm autentisere med serveren",
-    "olmEndpoint": "Olm-endepunkt",
-    "olmId": "Olm-ID",
-    "olmSecretKey": "Olm hemmelig nøkkel",
-    "clientCredentialsSave": "Lagre din legitimasjon",
+    "clientOlmCredentials": "Credentials",
+    "clientOlmCredentialsDescription": "This is how the client will authenticate with the server",
+    "olmEndpoint": "Endpoint",
+    "olmId": "ID",
+    "olmSecretKey": "Secret",
+    "clientCredentialsSave": "Save the Credentials",
     "clientCredentialsSaveDescription": "Du vil bare kunne se dette én gang. Sørg for å kopiere det til et sikkert sted.",
     "generalSettingsDescription": "Konfigurer de generelle innstillingene for denne klienten",
     "clientUpdated": "Klient oppdatert",
@@ -1483,9 +1501,7 @@
     "sitesFetchError": "En feil oppstod under henting av områder.",
     "olmErrorFetchReleases": "En feil oppstod under henting av Olm-utgivelser.",
     "olmErrorFetchLatest": "En feil oppstod under henting av den nyeste Olm-utgivelsen.",
-    "remoteSubnets": "Fjern-subnett",
     "enterCidrRange": "Skriv inn CIDR-område",
-    "remoteSubnetsDescription": "Legg til CIDR-områder som kan få fjerntilgang til dette området. Bruk format som 10.0.0.0/24 eller 192.168.1.0/24.",
     "resourceEnableProxy": "Aktiver offentlig proxy",
     "resourceEnableProxyDescription": "Aktiver offentlig proxying til denne ressursen. Dette gir tilgang til ressursen fra utsiden av nettverket gjennom skyen på en åpen port. Krever Traefik-konfigurasjon.",
     "externalProxyEnabled": "Ekstern proxy aktivert",
@@ -1503,14 +1519,15 @@
     "enableHealthChecksDescription": "Overvåk helsen til dette målet. Du kan overvåke et annet endepunkt enn målet hvis nødvendig.",
     "healthScheme": "Metode",
     "healthSelectScheme": "Velg metode",
+    "healthCheckPortInvalid": "Health check port must be between 1 and 65535",
     "healthCheckPath": "Sti",
     "healthHostname": "IP / Vert",
     "healthPort": "Port",
     "healthCheckPathDescription": "Stien for å sjekke helsestatus.",
-    "healthyIntervalSeconds": "Sunt intervall",
-    "unhealthyIntervalSeconds": "Usunt intervall",
+    "healthyIntervalSeconds": "Healthy Interval (sec)",
+    "unhealthyIntervalSeconds": "Unhealthy Interval (sec)",
     "IntervalSeconds": "Sunt intervall",
-    "timeoutSeconds": "Tidsavbrudd",
+    "timeoutSeconds": "Timeout (sec)",
     "timeIsInSeconds": "Tid er i sekunder",
     "retryAttempts": "Forsøk på nytt",
     "expectedResponseCodes": "Forventede svarkoder",
@@ -1546,12 +1563,12 @@
     "resourceEditDomain": "Rediger domene",
     "siteName": "Områdenavn",
     "proxyPort": "Port",
-    "resourcesTableProxyResources": "Proxy-ressurser",
-    "resourcesTableClientResources": "Klientressurser",
+    "resourcesTableProxyResources": "Public",
+    "resourcesTableClientResources": "Private",
     "resourcesTableNoProxyResourcesFound": "Ingen proxy-ressurser funnet.",
     "resourcesTableNoInternalResourcesFound": "Ingen interne ressurser funnet.",
     "resourcesTableDestination": "Destinasjon",
-    "resourcesTableTheseResourcesForUseWith": "Disse ressursene er til bruk med",
+    "resourcesTableAlias": "Alias",
     "resourcesTableClients": "Klienter",
     "resourcesTableAndOnlyAccessibleInternally": "og er kun tilgjengelig internt når de er koblet til med en klient.",
     "resourcesTableNoTargets": "Ingen mål",
@@ -1560,8 +1577,8 @@
     "resourcesTableOffline": "Frakoblet",
     "resourcesTableUnknown": "Ukjent",
     "resourcesTableNotMonitored": "Ikke overvåket",
-    "editInternalResourceDialogEditClientResource": "Rediger klientressurs",
-    "editInternalResourceDialogUpdateResourceProperties": "Oppdater ressursens egenskaper og målkonfigurasjon for {resourceName}.",
+    "editInternalResourceDialogEditClientResource": "Edit Private Resource",
+    "editInternalResourceDialogUpdateResourceProperties": "Update the resource configuration and access controls for {resourceName}",
     "editInternalResourceDialogResourceProperties": "Ressursegenskaper",
     "editInternalResourceDialogName": "Navn",
     "editInternalResourceDialogProtocol": "Protokoll",
@@ -1580,11 +1597,22 @@
     "editInternalResourceDialogInvalidIPAddressFormat": "Ugyldig IP-adresseformat",
     "editInternalResourceDialogDestinationPortMin": "Destinasjonsport må være minst 1",
     "editInternalResourceDialogDestinationPortMax": "Destinasjonsport må være mindre enn 65536",
+    "editInternalResourceDialogPortModeRequired": "Protocol, proxy port, and destination port are required for port mode",
+    "editInternalResourceDialogMode": "Mode",
+    "editInternalResourceDialogModePort": "Port",
+    "editInternalResourceDialogModeHost": "Host",
+    "editInternalResourceDialogModeCidr": "CIDR",
+    "editInternalResourceDialogDestination": "Destination",
+    "editInternalResourceDialogDestinationHostDescription": "The IP address or hostname of the resource on the site's network.",
+    "editInternalResourceDialogDestinationIPDescription": "The IP or hostname address of the resource on the site's network.",
+    "editInternalResourceDialogDestinationCidrDescription": "The CIDR range of the resource on the site's network.",
+    "editInternalResourceDialogAlias": "Alias",
+    "editInternalResourceDialogAliasDescription": "An optional internal DNS alias for this resource.",
     "createInternalResourceDialogNoSitesAvailable": "Ingen tilgjengelige steder",
     "createInternalResourceDialogNoSitesAvailableDescription": "Du må ha minst ett Newt-område med et konfigureret delnett for å lage interne ressurser.",
     "createInternalResourceDialogClose": "Lukk",
-    "createInternalResourceDialogCreateClientResource": "Opprett klientressurs",
-    "createInternalResourceDialogCreateClientResourceDescription": "Lag en ny ressurs som blir tilgjengelig for klienter koblet til det valgte området.",
+    "createInternalResourceDialogCreateClientResource": "Create Private Resource",
+    "createInternalResourceDialogCreateClientResourceDescription": "Create a new resource that will only be accessible to clients connected to the organization",
     "createInternalResourceDialogResourceProperties": "Ressursegenskaper",
     "createInternalResourceDialogName": "Navn",
     "createInternalResourceDialogSite": "Område",
@@ -1613,11 +1641,22 @@
     "createInternalResourceDialogInvalidIPAddressFormat": "Ugyldig IP-adresseformat",
     "createInternalResourceDialogDestinationPortMin": "Destinasjonsport må være minst 1",
     "createInternalResourceDialogDestinationPortMax": "Destinasjonsport må være mindre enn 65536",
+    "createInternalResourceDialogPortModeRequired": "Protocol, proxy port, and destination port are required for port mode",
+    "createInternalResourceDialogMode": "Mode",
+    "createInternalResourceDialogModePort": "Port",
+    "createInternalResourceDialogModeHost": "Host",
+    "createInternalResourceDialogModeCidr": "CIDR",
+    "createInternalResourceDialogDestination": "Destination",
+    "createInternalResourceDialogDestinationHostDescription": "The IP address or hostname of the resource on the site's network.",
+    "createInternalResourceDialogDestinationCidrDescription": "The CIDR range of the resource on the site's network.",
+    "createInternalResourceDialogAlias": "Alias",
+    "createInternalResourceDialogAliasDescription": "An optional internal DNS alias for this resource.",
     "siteConfiguration": "Konfigurasjon",
     "siteAcceptClientConnections": "Godta klientforbindelser",
-    "siteAcceptClientConnectionsDescription": "Tillat andre enheter å koble seg til gjennom denne Newt-instansen som en gateway ved hjelp av klienter.",
-    "siteAddress": "Områdeadresse",
-    "siteAddressDescription": "Angi IP-adressen til verten for klienter å koble seg til. Dette er den interne adressen til området i Pangolin-nettverket for klienter som adresserer. Må falle innenfor Org-underettet.",
+    "siteAcceptClientConnectionsDescription": "Allow user devices and clients to access resources on this site. This can be changed later.",
+    "siteAddress": "Site Address (Advanced)",
+    "siteAddressDescription": "The internal address of the site. Must fall within the organization's subnet.",
+    "siteNameDescription": "The display name of the site that can be changed later.",
     "autoLoginExternalIdp": "Automatisk innlogging med ekstern IDP",
     "autoLoginExternalIdpDescription": "Omdiriger brukeren umiddelbart til den eksterne IDP-en for autentisering.",
     "selectIdp": "Velg IDP",
@@ -1631,7 +1670,7 @@
     "autoLoginErrorNoRedirectUrl": "Ingen omdirigerings-URL mottatt fra identitetsleverandøren.",
     "autoLoginErrorGeneratingUrl": "Kunne ikke generere autentiserings-URL.",
     "remoteExitNodeManageRemoteExitNodes": "Eksterne Noder",
-    "remoteExitNodeDescription": "Selvbetjent én eller flere eksterne noder for å utvide nettverkstilkoblingen din og redusere avhengighet på skyen",
+    "remoteExitNodeDescription": "Self-host one or more remote nodes to extend network connectivity and reduce reliance on the cloud",
     "remoteExitNodes": "Noder",
     "searchRemoteExitNodes": "Søk noder...",
     "remoteExitNodeAdd": "Legg til Node",
@@ -1643,11 +1682,11 @@
     "sidebarRemoteExitNodes": "Eksterne Noder",
     "remoteExitNodeCreate": {
         "title": "Opprett node",
-        "description": "Opprett en ny node for å utvide nettverkstilkoblingen din",
+        "description": "Create a new node to extend network connectivity",
         "viewAllButton": "Vis alle koder",
         "strategy": {
             "title": "Opprettelsesstrategi",
-            "description": "Velg denne for manuelt å konfigurere noden eller generere nye legitimasjoner.",
+            "description": "Choose this to manually configure the node or generate new credentials.",
             "adopt": {
                 "title": "Adopter Node",
                 "description": "Velg dette hvis du allerede har legitimasjon til noden."
@@ -1668,7 +1707,7 @@
         },
         "generate": {
             "title": "Genererte Legitimasjoner",
-            "description": "Bruk disse genererte opplysningene for å konfigurere noden din",
+            "description": "Use these generated credentials to configure the node",
             "nodeIdTitle": "Node-ID",
             "secretTitle": "Sikkerhet",
             "saveCredentialsTitle": "Legg til Legitimasjoner til Config",
@@ -1744,16 +1783,16 @@
     "idpTypeLabel": "Identitet leverandør type",
     "roleMappingExpressionPlaceholder": "F.eks. inneholder(grupper, 'admin') && 'Admin' ⋅'Medlem'",
     "idpGoogleConfiguration": "Google Konfigurasjon",
-    "idpGoogleConfigurationDescription": "Konfigurer din Google OAuth2 legitimasjon",
-    "idpGoogleClientIdDescription": "Din Google OAuth2-klient-ID",
-    "idpGoogleClientSecretDescription": "Google OAuth2-klienten din hemmelig",
+    "idpGoogleConfigurationDescription": "Configure the Google OAuth2 credentials",
+    "idpGoogleClientIdDescription": "Google OAuth2 Client ID",
+    "idpGoogleClientSecretDescription": "Google OAuth2 Client Secret",
     "idpAzureConfiguration": "Azure Entra ID konfigurasjon",
-    "idpAzureConfigurationDescription": "Konfigurere din Azure Entra ID OAuth2 legitimasjon",
+    "idpAzureConfigurationDescription": "Configure Azure Entra ID OAuth2 credentials",
     "idpTenantId": "Leietaker-ID",
-    "idpTenantIdPlaceholder": "din-tenant-id",
-    "idpAzureTenantIdDescription": "Din Azure leie-ID (funnet i Azure Active Directory-oversikten)",
-    "idpAzureClientIdDescription": "Din Azure App registrerings klient-ID",
-    "idpAzureClientSecretDescription": "Din Azure App registrerings klient hemmelig",
+    "idpTenantIdPlaceholder": "tenant-id",
+    "idpAzureTenantIdDescription": "Azure tenant ID (found in Azure Active Directory overview)",
+    "idpAzureClientIdDescription": "Azure App Registration Client ID",
+    "idpAzureClientSecretDescription": "Azure App Registration Client Secret",
     "idpGoogleTitle": "Google",
     "idpGoogleAlt": "Google",
     "idpAzureTitle": "Azure Entra ID",
@@ -1761,14 +1800,14 @@
     "idpGoogleConfigurationTitle": "Google Konfigurasjon",
     "idpAzureConfigurationTitle": "Azure Entra ID konfigurasjon",
     "idpTenantIdLabel": "Leietaker-ID",
-    "idpAzureClientIdDescription2": "Din Azure App registrerings klient-ID",
-    "idpAzureClientSecretDescription2": "Din Azure App registrerings klient hemmelig",
+    "idpAzureClientIdDescription2": "Azure App Registration Client ID",
+    "idpAzureClientSecretDescription2": "Azure App Registration Client Secret",
     "idpGoogleDescription": "Google OAuth2/OIDC leverandør",
     "idpAzureDescription": "Microsoft Azure OAuth2/OIDC provider",
     "subnet": "Subnett",
     "subnetDescription": "Undernettverket for denne organisasjonens nettverkskonfigurasjon.",
     "authPage": "Autentiseringsside",
-    "authPageDescription": "Konfigurer autoriseringssiden for din organisasjon",
+    "authPageDescription": "Configure the auth page for the organization",
     "authPageDomain": "Autentiseringsside domene",
     "noDomainSet": "Ingen domene valgt",
     "changeDomain": "Endre domene",
@@ -1778,7 +1817,7 @@
     "setAuthPageDomain": "Angi autoriseringsside domene",
     "failedToFetchCertificate": "Kunne ikke hente sertifikat",
     "failedToRestartCertificate": "Kan ikke starte sertifikat",
-    "addDomainToEnableCustomAuthPages": "Legg til et domene for å aktivere egendefinerte autentiseringssider for organisasjonen din",
+    "addDomainToEnableCustomAuthPages": "Add a domain to enable custom authentication pages for the organization",
     "selectDomainForOrgAuthPage": "Velg et domene for organisasjonens autentiseringsside",
     "domainPickerProvidedDomain": "Gitt domene",
     "domainPickerFreeProvidedDomain": "Gratis oppgitt domene",
@@ -1793,7 +1832,7 @@
     "domainPickerInvalidSubdomainCannotMakeValid": "\"{sub}\" kunne ikke gjøres gyldig for {domain}.",
     "domainPickerSubdomainSanitized": "Underdomenet som ble sanivert",
     "domainPickerSubdomainCorrected": "\"{sub}\" var korrigert til \"{sanitized}\"",
-    "orgAuthSignInTitle": "Logg inn på din organisasjon",
+    "orgAuthSignInTitle": "Sign in to the organization",
     "orgAuthChooseIdpDescription": "Velg din identitet leverandør for å fortsette",
     "orgAuthNoIdpConfigured": "Denne organisasjonen har ikke noen identitetstjeneste konfigurert. Du kan i stedet logge inn med Pangolin identiteten din.",
     "orgAuthSignInWithPangolin": "Logg inn med Pangolin",
@@ -1811,7 +1850,7 @@
     "enableTwoFactorAuthentication": "Aktiver to-faktor autentisering",
     "completeSecuritySteps": "Fullfør sikkerhetstrinnene",
     "securitySettings": "Sikkerhet innstillinger",
-    "securitySettingsDescription": "Konfigurere sikkerhetspolicyer for din organisasjon",
+    "securitySettingsDescription": "Configure security policies for the organization",
     "requireTwoFactorForAllUsers": "Krev to-faktor autentisering for alle brukere",
     "requireTwoFactorDescription": "Når aktivert må alle interne brukere i denne organisasjonen ha to-faktorautentisering aktivert for å få tilgang til organisasjonen.",
     "requireTwoFactorDisabledDescription": "Denne funksjonen krever en gyldig lisens (Enterprise) eller aktivt abonnement (SaaS)",
@@ -1874,8 +1913,12 @@
     "enterpriseEdition": "Enterprise Edition",
     "unlicensed": "Ikke lisensiert",
     "beta": "beta",
-    "manageClients": "Administrer klienter",
-    "manageClientsDescription": "Klienter er enheter som kan koble seg til nettstedet ditt",
+    "manageUserDevices": "User Devices",
+    "manageUserDevicesDescription": "View and manage devices that users use to privately connect to resources",
+    "manageMachineClients": "Manage Machine Clients",
+    "manageMachineClientsDescription": "Create and manage clients that servers and systems use to privately connect to resources",
+    "clientsTableUserClients": "User",
+    "clientsTableMachineClients": "Machine",
     "licenseTableValidUntil": "Gyldig til",
     "saasLicenseKeysSettingsTitle": "Bedriftstillatelse Lisenser",
     "saasLicenseKeysSettingsDescription": "Generer og administrer Enterprise lisensnøkler for selvbetjente Pangolin forekomster",
@@ -2075,7 +2118,7 @@
     "preferWildcardCert": "Foretrekk Wildcard sertifikat",
     "unverified": "Uverifisert",
     "domainSetting": "Domene innstillinger",
-    "domainSettingDescription": "Konfigurer innstillinger for ditt domene",
+    "domainSettingDescription": "Configure settings for the domain",
     "preferWildcardCertDescription": "Forsøk på å generere et jokertegn (krever en riktig konfigurert sertifikatløsning).",
     "recordName": "Lagre navn",
     "auto": "Automatisk",
@@ -2089,15 +2132,15 @@
     "olmUpdateAvailableInfo": "En oppdatert versjon av Olm er tilgjengelig. Oppdater til den nyeste versjonen for å få den beste opplevelsen.",
     "client": "Klient",
     "proxyProtocol": "Protokoll innstillinger for Protokoll",
-    "proxyProtocolDescription": "Konfigurer Proxy-protokoll for å bevare klientens IP-adresser til TCP/UDP tjenester.",
+    "proxyProtocolDescription": "Configure Proxy Protocol to preserve client IP addresses for TCP services.",
     "enableProxyProtocol": "Aktiver Proxy-protokoll",
-    "proxyProtocolInfo": "Bevar klientens IP-adresser for TCP/UDP bakover",
+    "proxyProtocolInfo": "Preserve client IP addresses for TCP backends",
     "proxyProtocolVersion": "Proxy protokoll versjon",
     "version1": " Versjon 1 (Anbefalt)",
     "version2": "Versjon 2",
     "versionDescription": "Versjon 1 er tekstbasert og støttet. Versjon 2 er binært og mer effektivt, men mindre kompatibel.",
     "warning": "Advarsel",
-    "proxyProtocolWarning": "Din backend applikasjon må være konfigurert for å godta Proxy Protokoller. Hvis din backend ikke støtter Proxy Protocol, vil aktivering av dette bryte alle tilkoblinger. Sørg for å konfigurere backend til å stole på Proxy Protokoll overskrifter fra Traefik.",
+    "proxyProtocolWarning": "The backend application must be configured to accept Proxy Protocol connections. If your backend doesn't support Proxy Protocol, enabling this will break all connections so only enable this if you know what you're doing. Make sure to configure your backend to trust Proxy Protocol headers from Traefik.",
     "restarting": "Restarter...",
     "manual": "Manuell",
     "messageSupport": "Støtte for melding",
@@ -2120,6 +2163,43 @@
     "supportMessageSent": "Melding sendt!",
     "supportWillContact": "Vi kommer raskt til å ta kontakt!",
     "selectLogRetention": "Velg oppbevaring av logg",
+    "terms": "Terms",
+    "privacy": "Privacy",
+    "security": "Security",
+    "docs": "Docs",
+    "deviceActivation": "Device activation",
+    "deviceCodeInvalidFormat": "Code must be 9 characters (e.g., A1AJ-N5JD)",
+    "deviceCodeInvalidOrExpired": "Invalid or expired code",
+    "deviceCodeVerifyFailed": "Failed to verify device code",
+    "signedInAs": "Signed in as",
+    "deviceCodeEnterPrompt": "Enter the code displayed on the device",
+    "continue": "Continue",
+    "deviceUnknownLocation": "Unknown location",
+    "deviceAuthorizationRequested": "This authorization was requested from {location} on {date}. Make sure you trust this device as it will get access to the account.",
+    "deviceLabel": "Device: {deviceName}",
+    "deviceWantsAccess": "wants to access your account",
+    "deviceExistingAccess": "Existing access:",
+    "deviceFullAccess": "Full access to your account",
+    "deviceOrganizationsAccess": "Access to all organizations your account has access to",
+    "deviceAuthorize": "Authorize {applicationName}",
+    "deviceConnected": "Device Connected!",
+    "deviceAuthorizedMessage": "Device is authorized to access your account.",
+    "pangolinCloud": "Pangolin Cloud",
+    "viewDevices": "View Devices",
+    "viewDevicesDescription": "Manage your connected devices",
+    "noDevices": "No devices found",
+    "dateCreated": "Date Created",
+    "unnamedDevice": "Unnamed Device",
+    "deviceQuestionRemove": "Are you sure you want to delete this device?",
+    "deviceMessageRemove": "This action cannot be undone.",
+    "deviceDeleteConfirm": "Delete Device",
+    "deleteDevice": "Delete Device",
+    "errorLoadingDevices": "Error loading devices",
+    "failedToLoadDevices": "Failed to load devices",
+    "deviceDeleted": "Device deleted",
+    "deviceDeletedDescription": "The device has been successfully deleted.",
+    "errorDeletingDevice": "Error deleting device",
+    "failedToDeleteDevice": "Failed to delete device",
     "showColumns": "Vis kolonner",
     "hideColumns": "Skjul kolonner",
     "columnVisibility": "Kolonne Synlighet",
@@ -2134,6 +2214,10 @@
     "enableSelected": "Aktiver valgte",
     "disableSelected": "Deaktiver valgte",
     "checkSelectedStatus": "Kontroller status for valgte",
+    "clients": "Clients",
+    "accessClientSelect": "Select machine clients",
+    "resourceClientDescription": "Machine clients that can access this resource",
+    "regenerate": "Regenerate",
     "credentials": "Legitimasjon",
     "savecredentials": "Lagre brukeropplysninger",
     "regeneratecredentials": "Ny nøkkel",
@@ -2151,7 +2235,6 @@
     "endpoint": "Endpoint",
     "Id": "Id",
     "SecretKey": "Hemmelig nøkkel",
-    "featureDisabledTooltip": "Denne funksjonen er bare tilgjengelig i virksomhetsplanen og krever en lisens til å bruke den.",
     "niceId": "God ID",
     "niceIdUpdated": "Flott ID oppdatert",
     "niceIdUpdatedSuccessfully": "Id-en ble oppdatert",
@@ -2160,5 +2243,15 @@
     "niceIdCannotBeEmpty": "God ID kan ikke være tom",
     "enterIdentifier": "Angi identifikator",
     "identifier": "Identifier",
-    "noData": "No Data"
+    "deviceLoginUseDifferentAccount": "Not you? Use a different account.",
+    "deviceLoginDeviceRequestingAccessToAccount": "A device is requesting access to this account.",
+    "noData": "No Data",
+    "machineClients": "Machine Clients",
+    "install": "Install",
+    "run": "Run",
+    "clientNameDescription": "The display name of the client that can be changed later.",
+    "clientAddress": "Client Address (Advanced)",
+    "setupFailedToFetchSubnet": "Failed to fetch default subnet",
+    "setupSubnetAdvanced": "Subnet (Advanced)",
+    "setupSubnetDescription": "The subnet for this organization's internal network."
 }

messages/nl-NL.json

@@ -1,12 +1,12 @@
 {
-    "setupCreate": "Maak uw organisatie, site en bronnen aan",
+    "setupCreate": "Create the organization, site, and resources",
     "setupNewOrg": "Nieuwe organisatie",
     "setupCreateOrg": "Nieuwe organisatie aanmaken",
     "setupCreateResources": "Bronnen aanmaken",
     "setupOrgName": "Naam van de organisatie",
-    "orgDisplayName": "Dit is de weergavenaam van uw organisatie.",
+    "orgDisplayName": "This is the display name of the organization.",
     "orgId": "Organisatie ID",
-    "setupIdentifierMessage": "Dit is de unieke identificatie voor uw organisatie. Deze is gescheiden van de weergavenaam.",
+    "setupIdentifierMessage": "This is the unique identifier for the organization.",
     "setupErrorIdentifier": "Organisatie-ID is al in gebruik. Kies een andere.",
     "componentsErrorNoMemberCreate": "U bent momenteel geen lid van een organisatie. Maak een organisatie aan om aan de slag te gaan.",
     "componentsErrorNoMember": "U bent momenteel geen lid van een organisatie.",
@@ -50,10 +50,10 @@
     "siteMessageRemove": "Eenmaal verwijderd zal de site niet langer toegankelijk zijn. Alle aan de site gekoppelde doelen zullen ook worden verwijderd.",
     "siteQuestionRemove": "Weet u zeker dat u de site wilt verwijderen uit de organisatie?",
     "siteManageSites": "Sites beheren",
-    "siteDescription": "Verbindt met uw netwerk via beveiligde tunnels",
+    "siteDescription": "Create and manage sites to enable connectivity to private networks",
     "siteCreate": "Site maken",
     "siteCreateDescription2": "Volg de onderstaande stappen om een nieuwe site aan te maken en te verbinden",
-    "siteCreateDescription": "Maak een nieuwe site aan om verbinding te maken met uw bronnen",
+    "siteCreateDescription": "Create a new site to start connecting resources",
     "close": "Sluiten",
     "siteErrorCreate": "Fout bij maken site",
     "siteErrorCreateKeyPair": "Key pair of site standaard niet gevonden",
@@ -74,7 +74,7 @@
     "siteInstallNewt": "Installeer Newt",
     "siteInstallNewtDescription": "Laat Newt draaien op uw systeem",
     "WgConfiguration": "WireGuard Configuratie",
-    "WgConfigurationDescription": "Gebruik de volgende configuratie om verbinding te maken met je netwerk",
+    "WgConfigurationDescription": "Use the following configuration to connect to the network",
     "operatingSystem": "Operating systeem",
     "commands": "Opdrachten",
     "recommended": "Aanbevolen",
@@ -87,32 +87,32 @@
     "siteUpdated": "Site bijgewerkt",
     "siteUpdatedDescription": "De site is bijgewerkt.",
     "siteGeneralDescription": "Algemene instellingen voor deze site configureren",
-    "siteSettingDescription": "Configureer de instellingen op uw site",
+    "siteSettingDescription": "Configure the settings on the site",
     "siteSetting": "{siteName} instellingen",
-    "siteNewtTunnel": "Newttunnel (Aanbevolen)",
-    "siteNewtTunnelDescription": "Gemakkelijkste manier om een ingangspunt in uw netwerk te maken. Geen extra opzet.",
+    "siteNewtTunnel": "Newt Site (Recommended)",
+    "siteNewtTunnelDescription": "Easiest way to create an entrypoint into any network. No extra setup.",
     "siteWg": "Basis WireGuard",
     "siteWgDescription": "Gebruik een WireGuard client om een tunnel te bouwen. Handmatige NAT installatie vereist.",
     "siteWgDescriptionSaas": "Gebruik elke WireGuard-client om een tunnel op te zetten. Handmatige NAT-instelling vereist. WERKT ALLEEN OP SELF HOSTED NODES",
     "siteLocalDescription": "Alleen lokale bronnen. Geen tunneling.",
     "siteLocalDescriptionSaas": "Enkel lokale bronnen. Geen tunneling. Alleen beschikbaar op externe knooppunten.",
     "siteSeeAll": "Alle sites bekijken",
-    "siteTunnelDescription": "Bepaal hoe u verbinding wilt maken met uw site",
-    "siteNewtCredentials": "Nieuwste aanmeldgegevens",
-    "siteNewtCredentialsDescription": "Dit is hoe Newt zich zal verifiëren met de server",
-    "siteCredentialsSave": "Uw referenties opslaan",
+    "siteTunnelDescription": "Determine how you want to connect to the site",
+    "siteNewtCredentials": "Credentials",
+    "siteNewtCredentialsDescription": "This is how the site will authenticate with the server",
+    "siteCredentialsSave": "Save the Credentials",
     "siteCredentialsSaveDescription": "Je kunt dit slechts één keer zien. Kopieer het naar een beveiligde plek.",
     "siteInfo": "Site informatie",
     "status": "Status",
     "shareTitle": "Beheer deellinks",
-    "shareDescription": "Maak deelbare links aan om tijdelijke of permanente toegang tot uw bronnen te verlenen",
+    "shareDescription": "Create shareable links to grant temporary or permanent access to proxy resources",
     "shareSearch": "Zoek share links...",
     "shareCreate": "Maak Share link",
     "shareErrorDelete": "Kan link niet verwijderen",
     "shareErrorDeleteMessage": "Fout opgetreden tijdens het verwijderen link",
     "shareDeleted": "Link verwijderd",
     "shareDeletedDescription": "De link is verwijderd",
-    "shareTokenDescription": "Uw toegangstoken kan op twee manieren worden doorgegeven: als queryparameter of in de header van de aanvraag. Deze moeten worden doorgegeven van de client op elk verzoek voor geverifieerde toegang.",
+    "shareTokenDescription": "The access token can be passed in two ways: as a query parameter or in the request headers. These must be passed from the client on every request for authenticated access.",
     "accessToken": "Toegangs-token",
     "usageExamples": "Voorbeelden van gebruik",
     "tokenId": "Token ID",
@@ -121,7 +121,7 @@
     "importantNote": "Belangrijke opmerking",
     "shareImportantDescription": "Om veiligheidsredenen wordt het gebruik van headers aanbevolen over queryparameters indien mogelijk, omdat query parameters kunnen worden aangemeld in serverlogboeken of browsergeschiedenis.",
     "token": "Token",
-    "shareTokenSecurety": "Houd uw toegangstoken veilig. Deel deze niet in openbaar toegankelijke gebieden of client-side code.",
+    "shareTokenSecurety": "Keep the access token secure. Do not share it in publicly accessible areas or client-side code.",
     "shareErrorFetchResource": "Fout bij het ophalen van bronnen",
     "shareErrorFetchResourceDescription": "Er is een fout opgetreden bij het ophalen van de resources",
     "shareErrorCreate": "Aanmaken van link delen mislukt",
@@ -144,8 +144,10 @@
     "expires": "Verloopt",
     "never": "Nooit",
     "shareErrorSelectResource": "Selecteer een bron",
-    "resourceTitle": "Bronnen beheren",
-    "resourceDescription": "Veilige proxy's voor uw privéapplicaties maken",
+    "proxyResourceTitle": "Manage Public Resources",
+    "proxyResourceDescription": "Create and manage resources that are publicly accessible through a web browser",
+    "clientResourceTitle": "Manage Private Resources",
+    "clientResourceDescription": "Create and manage resources that are only accessible through a connected client",
     "resourcesSearch": "Zoek bronnen...",
     "resourceAdd": "Bron toevoegen",
     "resourceErrorDelte": "Fout bij verwijderen document",
@@ -155,9 +157,9 @@
     "resourceMessageRemove": "Eenmaal verwijderd, zal het bestand niet langer toegankelijk zijn. Alle doelen die gekoppeld zijn aan het hulpbron, zullen ook verwijderd worden.",
     "resourceQuestionRemove": "Weet u zeker dat u het document van de organisatie wilt verwijderen?",
     "resourceHTTP": "HTTPS bron",
-    "resourceHTTPDescription": "Proxy verzoeken aan uw app via HTTPS via een subdomein of basisdomein.",
+    "resourceHTTPDescription": "Proxy requests to the app over HTTPS using a subdomain or base domain.",
     "resourceRaw": "TCP/UDP bron",
-    "resourceRawDescription": "Proxy verzoeken naar je app via TCP/UDP met behulp van een poortnummer.",
+    "resourceRawDescription": "Proxy requests to the app over TCP/UDP using a port number. This only works when sites are connected to nodes.",
     "resourceCreate": "Bron maken",
     "resourceCreateDescription": "Volg de onderstaande stappen om een nieuwe bron te maken",
     "resourceSeeAll": "Alle bronnen bekijken",
@@ -171,22 +173,22 @@
     "noCountryFound": "Geen land gevonden.",
     "siteSelectionDescription": "Deze site zal connectiviteit met het doelwit bieden.",
     "resourceType": "Type bron",
-    "resourceTypeDescription": "Bepaal hoe u toegang wilt krijgen tot uw bron",
+    "resourceTypeDescription": "Determine how to access the resource",
     "resourceHTTPSSettings": "HTTPS instellingen",
-    "resourceHTTPSSettingsDescription": "Stel in hoe de bron wordt benaderd via HTTPS",
+    "resourceHTTPSSettingsDescription": "Configure how the resource will be accessed over HTTPS",
     "domainType": "Domein type",
     "subdomain": "Subdomein",
     "baseDomain": "Basis domein",
-    "subdomnainDescription": "Het subdomein waar de bron toegankelijk is.",
+    "subdomnainDescription": "The subdomain where the resource will be accessible.",
     "resourceRawSettings": "TCP/UDP instellingen",
-    "resourceRawSettingsDescription": "Stel in hoe uw bron wordt benaderd via TCP/UDP. Je gooit de bron toe aan een poort op de host-Pangolin server, zodat je de bron kan bereiken vanaf server-public-ip:mapped-port.",
+    "resourceRawSettingsDescription": "Configure how the resource will be accessed over TCP/UDP. You map the resource to a port on the host Pangolin server, so you can access the resource from server-public-ip:mapped-port.",
     "protocol": "Protocol",
     "protocolSelect": "Selecteer een protocol",
     "resourcePortNumber": "Nummer van poort",
     "resourcePortNumberDescription": "Het externe poortnummer naar proxyverzoeken.",
     "cancel": "Annuleren",
     "resourceConfig": "Configuratie tekstbouwstenen",
-    "resourceConfigDescription": "Kopieer en plak deze configuratie-snippets om je TCP/UDP-bron in te stellen",
+    "resourceConfigDescription": "Copy and paste these configuration snippets to set up the TCP/UDP resource",
     "resourceAddEntrypoints": "Traefik: Entrypoints toevoegen",
     "resourceExposePorts": "Gerbild: Gevangen blootstellen in Docker Compose",
     "resourceLearnRaw": "Leer hoe je TCP/UDP bronnen kunt configureren",
@@ -202,14 +204,14 @@
     "proxy": "Proxy",
     "internal": "Intern",
     "rules": "Regels",
-    "resourceSettingDescription": "Configureer de instellingen op uw bron",
+    "resourceSettingDescription": "Configure the settings on the resource",
     "resourceSetting": "{resourceName} instellingen",
-    "alwaysAllow": "Altijd toestaan",
-    "alwaysDeny": "Altijd weigeren",
+    "alwaysAllow": "Bypass Auth",
+    "alwaysDeny": "Block Access",
     "passToAuth": "Passeren naar Auth",
-    "orgSettingsDescription": "Configureer de algemene instellingen van je organisatie",
+    "orgSettingsDescription": "Configure the organization's settings",
     "orgGeneralSettings": "Organisatie Instellingen",
-    "orgGeneralSettingsDescription": "Beheer de details en configuratie van uw organisatie",
+    "orgGeneralSettingsDescription": "Manage the organization's details and configuration",
     "saveGeneralSettings": "Algemene instellingen opslaan",
     "saveSettings": "Instellingen opslaan",
     "orgDangerZone": "Gevaarlijke zone",
@@ -232,7 +234,7 @@
     "orgMissing": "Organisatie-ID ontbreekt",
     "orgMissingMessage": "Niet in staat om de uitnodiging te regenereren zonder organisatie-ID.",
     "accessUsersManage": "Gebruikers beheren",
-    "accessUsersDescription": "Nodig gebruikers uit en voeg ze toe aan de rollen om toegang tot uw organisatie te beheren",
+    "accessUsersDescription": "Invite and manage users with access to this organization",
     "accessUsersSearch": "Gebruikers zoeken...",
     "accessUserCreate": "Gebruiker aanmaken",
     "accessUserRemove": "Gebruiker verwijderen",
@@ -241,13 +243,13 @@
     "role": "Functie",
     "nameRequired": "Naam is verplicht",
     "accessRolesManage": "Rollen beheren",
-    "accessRolesDescription": "Configureer rollen om toegang tot uw organisatie te beheren",
+    "accessRolesDescription": "Create and manage roles for users in the organization",
     "accessRolesSearch": "Rollen zoeken...",
     "accessRolesAdd": "Rol toevoegen",
     "accessRoleDelete": "Verwijder rol",
     "description": "Beschrijving",
     "inviteTitle": "Open uitnodigingen",
-    "inviteDescription": "Beheer je uitnodigingen aan andere gebruikers",
+    "inviteDescription": "Manage invitations for other users to join the organization",
     "inviteSearch": "Uitnodigingen zoeken...",
     "minutes": "minuten",
     "hours": "Uren",
@@ -261,13 +263,13 @@
     "apiKeysErrorCreate": "Fout bij maken API-sleutel",
     "apiKeysErrorSetPermission": "Fout instellen permissies",
     "apiKeysCreate": "API-sleutel genereren",
-    "apiKeysCreateDescription": "Genereer een nieuwe API-sleutel voor uw organisatie",
+    "apiKeysCreateDescription": "Generate a new API key for the organization",
     "apiKeysGeneralSettings": "Machtigingen",
     "apiKeysGeneralSettingsDescription": "Bepaal wat deze API-sleutel kan doen",
-    "apiKeysList": "Uw API-sleutel",
-    "apiKeysSave": "Uw API-sleutel opslaan",
+    "apiKeysList": "New API Key",
+    "apiKeysSave": "Save the API Key",
     "apiKeysSaveDescription": "Je kunt dit slechts één keer zien. Kopieer het naar een veilige plek.",
-    "apiKeysInfo": "Uw API-sleutel is:",
+    "apiKeysInfo": "The API key is:",
     "apiKeysConfirmCopy": "Ik heb de API-sleutel gekopieerd",
     "generate": "Genereren",
     "done": "Voltooid",
@@ -424,7 +426,7 @@
     "userCreated": "Gebruiker aangemaakt",
     "userCreatedDescription": "De gebruiker is succesvol aangemaakt.",
     "userTypeInternal": "Interne gebruiker",
-    "userTypeInternalDescription": "Nodig een gebruiker uit om direct lid te worden van je organisatie.",
+    "userTypeInternalDescription": "Invite a user to join the organization directly.",
     "userTypeExternal": "Externe gebruiker",
     "userTypeExternalDescription": "Maak een gebruiker aan met een externe identiteitsprovider.",
     "accessUserCreateDescription": "Volg de onderstaande stappen om een nieuwe gebruiker te maken",
@@ -468,13 +470,13 @@
     "accessControlsSubmit": "Bewaar Toegangsbesturing",
     "roles": "Rollen",
     "accessUsersRoles": "Beheer Gebruikers & Rollen",
-    "accessUsersRolesDescription": "Nodig gebruikers uit en voeg ze toe aan de rollen om toegang tot uw organisatie te beheren",
+    "accessUsersRolesDescription": "Invite users and add them to roles to manage access to the organization",
     "key": "Sleutel",
     "createdAt": "Aangemaakt op",
     "proxyErrorInvalidHeader": "Ongeldige aangepaste Header waarde. Gebruik het domeinnaam formaat, of sla leeg op om de aangepaste Host header ongedaan te maken.",
     "proxyErrorTls": "Ongeldige TLS servernaam. Gebruik de domeinnaam of sla leeg op om de TLS servernaam te verwijderen.",
     "proxyEnableSSL": "SSL inschakelen",
-    "proxyEnableSSLDescription": "SSL/TLS-versleuteling inschakelen voor beveiligde HTTPS-verbindingen naar uw doelen.",
+    "proxyEnableSSLDescription": "Enable SSL/TLS encryption for secure HTTPS connections to the targets.",
     "target": "Target",
     "configureTarget": "Doelstellingen configureren",
     "targetErrorFetch": "Ophalen van doelen mislukt",
@@ -490,29 +492,29 @@
     "targetsErrorUpdate": "Kan doelen niet bijwerken",
     "targetsErrorUpdateDescription": "Fout opgetreden tijdens het bijwerken van de doelen",
     "targetTlsUpdate": "TLS instellingen bijgewerkt",
-    "targetTlsUpdateDescription": "Uw TLS instellingen zijn succesvol bijgewerkt",
+    "targetTlsUpdateDescription": "TLS settings have been updated successfully",
     "targetErrorTlsUpdate": "Bijwerken van TLS instellingen mislukt",
     "targetErrorTlsUpdateDescription": "Fout opgetreden tijdens het bijwerken van de TLS-instellingen",
     "proxyUpdated": "Proxyinstellingen bijgewerkt",
-    "proxyUpdatedDescription": "Uw proxyinstellingen zijn succesvol bijgewerkt",
+    "proxyUpdatedDescription": "Proxy settings have been updated successfully",
     "proxyErrorUpdate": "Bijwerken van proxy-instellingen mislukt",
     "proxyErrorUpdateDescription": "Fout opgetreden tijdens het bijwerken van de proxy-instellingen",
     "targetAddr": "IP / Hostnaam",
     "targetPort": "Poort",
     "targetProtocol": "Protocol",
     "targetTlsSettings": "HTTPS & TLS instellingen",
-    "targetTlsSettingsDescription": "SSL/TLS-instellingen voor uw bron configureren",
+    "targetTlsSettingsDescription": "Configure SSL/TLS settings for the resource",
     "targetTlsSettingsAdvanced": "Geavanceerde TLS instellingen",
     "targetTlsSni": "TLS servernaam",
     "targetTlsSniDescription": "De TLS servernaam om te gebruiken voor SNI. Laat leeg om de standaard te gebruiken.",
     "targetTlsSubmit": "Instellingen opslaan",
     "targets": "Doelstellingen configuratie",
-    "targetsDescription": "Stel doelen in om verkeer naar uw backend-services te leiden",
+    "targetsDescription": "Set up targets to route traffic to backend services",
     "targetStickySessions": "Sticky sessies inschakelen",
     "targetStickySessionsDescription": "Behoud verbindingen op hetzelfde backend doel voor hun hele sessie.",
     "methodSelect": "Selecteer methode",
     "targetSubmit": "Doelwit toevoegen",
-    "targetNoOne": "Deze bron heeft geen doelen. Voeg een doel toe om te configureren waar verzoeken naar uw backend.",
+    "targetNoOne": "This resource doesn't have any targets. Add a target to configure where to send requests to the backend.",
     "targetNoOneDescription": "Het toevoegen van meer dan één doel hierboven zal de load balancering mogelijk maken.",
     "targetsSubmit": "Doelstellingen opslaan",
     "addTarget": "Doelwit toevoegen",
@@ -530,7 +532,7 @@
     "tlsServerNameDescription": "The TLS server name to use for SNI",
     "save": "Opslaan",
     "proxyAdditional": "Extra Proxy-instellingen",
-    "proxyAdditionalDescription": "Configureer hoe de proxy-instellingen van uw bron worden afgehandeld",
+    "proxyAdditionalDescription": "Configure how the resource handles proxy settings",
     "proxyCustomHeader": "Aangepaste Host-header",
     "proxyCustomHeaderDescription": "De hostkop om in te stellen bij proxying verzoeken. Laat leeg om de standaard te gebruiken.",
     "proxyAdditionalSubmit": "Proxyinstellingen opslaan",
@@ -570,7 +572,7 @@
     "rulesMatchType": "Wedstrijd Type",
     "value": "Waarde",
     "rulesAbout": "Over regels",
-    "rulesAboutDescription": "Regels stellen u in staat om de toegang tot uw bron te controleren op basis van een aantal criteria. U kunt regels maken om toegang te toestaan of weigeren op basis van IP-adres of URL pad.",
+    "rulesAboutDescription": "Rules allow you to control access to the resource based on a set of criteria. You can create rules to allow or deny access based on IP address or URL path.",
     "rulesActions": "acties",
     "rulesActionAlwaysAllow": "Altijd toegestaan: Omzeil alle authenticatiemethoden",
     "rulesActionAlwaysDeny": "Altijd weigeren: Blokkeer alle aanvragen, er kan geen verificatie worden geprobeerd",
@@ -582,7 +584,7 @@
     "rulesEnable": "Regels inschakelen",
     "rulesEnableDescription": "In- of uitschakelen van regelevaluatie voor deze bron",
     "rulesResource": "Configuratie Resource Regels",
-    "rulesResourceDescription": "Regels instellen om toegang tot uw bron te beheren",
+    "rulesResourceDescription": "Configure rules to control access to the resource",
     "ruleSubmit": "Regel toevoegen",
     "rulesNoOne": "Geen regels. Voeg een regel toe via het formulier.",
     "rulesOrder": "Regels worden in oplopende volgorde volgens prioriteit beoordeeld.",
@@ -598,7 +600,7 @@
     "none": "geen",
     "unknown": "onbekend",
     "resources": "Bronnen",
-    "resourcesDescription": "Bronnen zijn proxies voor applicaties die op uw privénetwerk worden uitgevoerd. Maak een bron aan voor elke HTTP/HTTPS of onbewerkte TCP/UDP-service op uw privénetwerk. Elke bron moet verbonden zijn met een site om private, beveiligde verbinding mogelijk te maken via een versleutelde WireGuard tunnel.",
+    "resourcesDescription": "Resources are proxies to applications running on the private network. Create a resource for any HTTP/HTTPS or raw TCP/UDP service on your private network. Each resource must be connected to a site to enable private, secure connectivity through an encrypted WireGuard tunnel.",
     "resourcesWireGuardConnect": "Beveiligde verbinding met WireGuard versleuteling",
     "resourcesMultipleAuthenticationMethods": "Meerdere verificatiemethoden configureren",
     "resourcesUsersRolesAccess": "Gebruiker en rol-gebaseerde toegangsbeheer",
@@ -609,7 +611,7 @@
     "resourceSelect": "Selecteer resource",
     "shareLinks": "Links delen",
     "share": "Deelbare links",
-    "shareDescription2": "Maak deelbare links naar uw bronnen. Links bieden tijdelijke of onbeperkte toegang tot uw bron. U kunt de vervalduur van de link configureren wanneer u er een aanmaakt.",
+    "shareDescription2": "Create shareable links to resources. Links provide temporary or unlimited access to your resource. You can configure the expiration duration of the link when you create one.",
     "shareEasyCreate": "Makkelijk te maken en te delen",
     "shareConfigurableExpirationDuration": "Configureerbare vervalduur",
     "shareSecureAndRevocable": "Veilig en herroepbaar",
@@ -619,19 +621,19 @@
     "unknownCommand": "Onbekende opdracht",
     "newtErrorFetchReleases": "Kan release-informatie niet ophalen: {err}",
     "newtErrorFetchLatest": "Fout bij ophalen van laatste release: {err}",
-    "newtEndpoint": "Newt Eindoordeel",
-    "newtId": "Newt-ID",
-    "newtSecretKey": "Nieuwe geheime sleutel",
+    "newtEndpoint": "Endpoint",
+    "newtId": "ID",
+    "newtSecretKey": "Secret",
     "architecture": "Architectuur",
     "sites": "Sites",
-    "siteWgAnyClients": "Gebruik een willekeurige WireGuard client om verbinding te maken. Je moet je interne bronnen aanspreken met behulp van de peer IP.",
+    "siteWgAnyClients": "Use any WireGuard client to connect. You will have to address internal resources using the peer IP.",
     "siteWgCompatibleAllClients": "Compatibel met alle WireGuard clients",
     "siteWgManualConfigurationRequired": "Handmatige configuratie vereist",
     "userErrorNotAdminOrOwner": "Gebruiker is geen beheerder of eigenaar",
     "pangolinSettings": "Instellingen - Pangolin",
     "accessRoleYour": "Jouw rol:",
-    "accessRoleSelect2": "Selecteer lidmaatschap",
-    "accessUserSelect": "Selecteer een gebruiker",
+    "accessRoleSelect2": "Select roles",
+    "accessUserSelect": "Select users",
     "otpEmailEnter": "Voer e-mailadres in",
     "otpEmailEnterDescription": "Druk op enter om een e-mail toe te voegen na het typen in het invoerveld.",
     "otpEmailErrorInvalid": "Ongeldig e-mailadres. Wildcard (*) moet het hele lokale deel zijn.",
@@ -683,7 +685,7 @@
     "resourcePincodeSetupTitle": "Pincode instellen",
     "resourcePincodeSetupTitleDescription": "Stel een pincode in om deze hulpbron te beschermen",
     "resourceRoleDescription": "Beheerders hebben altijd toegang tot deze bron.",
-    "resourceUsersRoles": "Gebruikers & Rollen",
+    "resourceUsersRoles": "Access Controls",
     "resourceUsersRolesDescription": "Configureer welke gebruikers en rollen deze pagina kunnen bezoeken",
     "resourceUsersRolesSubmit": "Gebruikers opslaan & rollen",
     "resourceWhitelistSave": "Succesvol opgeslagen",
@@ -779,15 +781,15 @@
     "idpOidcConfigure": "OAuth2/OIDC configuratie",
     "idpOidcConfigureDescription": "Configureer de eindpunten van de OAuth2/OIDC provider en referenties",
     "idpClientId": "Client ID",
-    "idpClientIdDescription": "De OAuth2 client ID van uw identiteitsprovider",
+    "idpClientIdDescription": "The OAuth2 client ID from the identity provider",
     "idpClientSecret": "Client Secret",
-    "idpClientSecretDescription": "Het OAuth2 Client Secret van je identiteitsprovider",
+    "idpClientSecretDescription": "The OAuth2 client secret from the identity provider",
     "idpAuthUrl": "URL autorisatie",
     "idpAuthUrlDescription": "De URL voor autorisatie OAuth2",
     "idpTokenUrl": "URL token",
     "idpTokenUrlDescription": "De URL van het OAuth2 token eindpunt",
     "idpOidcConfigureAlert": "Belangrijke informatie",
-    "idpOidcConfigureAlertDescription": "Na het aanmaken van de identity provider moet u de callback URL configureren in de instellingen van uw identity provider. De callback URL zal worden opgegeven na het succesvol aanmaken.",
+    "idpOidcConfigureAlertDescription": "After creating the identity provider, you will need to configure the callback URL in the identity provider's settings. The callback URL will be provided after successful creation.",
     "idpToken": "Token configuratie",
     "idpTokenDescription": "Stel in hoe gebruikersgegevens uit het ID token uit te pakken",
     "idpJmespathAbout": "Over JMESPath",
@@ -804,7 +806,7 @@
     "idpSubmit": "Identity Provider aanmaken",
     "orgPolicies": "Organisatie beleid",
     "idpSettings": "{idpName} instellingen",
-    "idpCreateSettingsDescription": "Configureer de instellingen voor uw identiteitsprovider",
+    "idpCreateSettingsDescription": "Configure the settings for the identity provider",
     "roleMapping": "Rol Toewijzing",
     "orgMapping": "Organisatie toewijzing",
     "orgPoliciesSearch": "Zoek het organisatiebeleid...",
@@ -839,7 +841,7 @@
     "idpUpdatedDescription": "Identity provider succesvol bijgewerkt",
     "redirectUrl": "Omleidings URL",
     "redirectUrlAbout": "Over omleidings-URL",
-    "redirectUrlAboutDescription": "Dit is de URL waarnaar gebruikers worden doorverwezen na verificatie. U moet deze URL configureren in uw identiteitsprovider-instellingen.",
+    "redirectUrlAboutDescription": "This is the URL to which users will be redirected after authentication. You need to configure this URL in the identity provider's settings.",
     "pangolinAuth": "Authenticatie - Pangolin",
     "verificationCodeLengthRequirements": "Je verificatiecode moet 8 tekens bevatten.",
     "errorOccurred": "Er is een fout opgetreden",
@@ -922,6 +924,10 @@
     "passwordResetSent": "We sturen een wachtwoord reset code naar dit e-mailadres.",
     "passwordResetCode": "Resetcode",
     "passwordResetCodeDescription": "Controleer je e-mail voor de reset code.",
+    "generatePasswordResetCode": "Generate Password Reset Code",
+    "passwordResetCodeGenerated": "Password Reset Code Generated",
+    "passwordResetCodeGeneratedDescription": "Share this code with the user. They can use it to reset their password.",
+    "passwordResetUrl": "Reset URL",
     "passwordNew": "Nieuw wachtwoord",
     "passwordNewConfirm": "Bevestig nieuw wachtwoord",
     "changePassword": "Wachtwoord wijzigen",
@@ -939,6 +945,9 @@
     "pincodeAuth": "Authenticatiecode",
     "pincodeSubmit2": "Code indienen",
     "passwordResetSubmit": "Opnieuw instellen aanvragen",
+    "passwordResetAlreadyHaveCode": "Enter Password Reset Code",
+    "passwordResetSmtpRequired": "Please contact your administrator",
+    "passwordResetSmtpRequiredDescription": "A password reset code is required to reset your password. Please contact your administrator for assistance.",
     "passwordBack": "Terug naar wachtwoord",
     "loginBack": "Ga terug naar login",
     "signup": "Registreer nu",
@@ -1104,12 +1113,15 @@
     "actionListSiteResources": "Bronnen van site weergeven",
     "actionUpdateSiteResource": "Document bijwerken van site",
     "actionListInvitations": "Toon uitnodigingen",
+    "actionExportLogs": "Export Logs",
+    "actionViewLogs": "View Logs",
     "noneSelected": "Niet geselecteerd",
     "orgNotFound2": "Geen organisaties gevonden.",
     "searchProgress": "Zoeken...",
     "create": "Aanmaken",
     "orgs": "Organisaties",
     "loginError": "Er is een fout opgetreden tijdens het inloggen",
+    "loginRequiredForDevice": "Login is required to authenticate your device.",
     "passwordForgot": "Wachtwoord vergeten?",
     "otpAuth": "Tweestapsverificatie verificatie",
     "otpAuthDescription": "Voer de code van je authenticator-app of een van je reservekopiecodes voor het eenmalig gebruik in.",
@@ -1164,23 +1176,29 @@
     "sidebarHome": "Startpagina",
     "sidebarSites": "Werkruimtes",
     "sidebarResources": "Bronnen",
+    "sidebarProxyResources": "Public",
+    "sidebarClientResources": "Private",
     "sidebarAccessControl": "Toegangs controle",
+    "sidebarLogsAndAnalytics": "Logs & Analytics",
     "sidebarUsers": "Gebruikers",
+    "sidebarAdmin": "Admin",
     "sidebarInvitations": "Uitnodigingen",
     "sidebarRoles": "Rollen",
-    "sidebarShareableLinks": "Deelbare links",
+    "sidebarShareableLinks": "Links",
     "sidebarApiKeys": "API sleutels",
     "sidebarSettings": "Instellingen",
     "sidebarAllUsers": "Alle gebruikers",
     "sidebarIdentityProviders": "Identiteit aanbieders",
     "sidebarLicense": "Licentie",
     "sidebarClients": "Clienten",
+    "sidebarUserDevices": "Users",
+    "sidebarMachineClients": "Machines",
     "sidebarDomains": "Domeinen",
     "sidebarGeneral": "General",
     "sidebarLogAndAnalytics": "Log & Analytics",
     "sidebarBluePrints": "Blauwdrukken",
     "sidebarOrganization": "Organization",
-    "sidebarLogsAnalytics": "Request Analytics",
+    "sidebarLogsAnalytics": "Analytics",
     "blueprints": "Blauwdrukken",
     "blueprintsDescription": "Gebruik declaratieve configuraties en bekijk vorige uitvoeringen.",
     "blueprintAdd": "Blauwdruk toevoegen",
@@ -1191,7 +1209,7 @@
     "blueprintDetailsDescription": "Bekijk het resultaat van de toegepaste blauwdruk en eventuele fouten",
     "blueprintInfo": "Blauwdruk Informatie",
     "message": "bericht",
-    "blueprintContentsDescription": "Definieer de YAML content die je infrastructuur beschrijft",
+    "blueprintContentsDescription": "Define the YAML content describing the infrastructure",
     "blueprintErrorCreateDescription": "Er is een fout opgetreden bij het toepassen van de blauwdruk",
     "blueprintErrorCreate": "Fout bij maken blauwdruk",
     "searchBlueprintProgress": "Blauwdrukken zoeken...",
@@ -1247,15 +1265,15 @@
     "loading": "Bezig met laden",
     "restart": "Herstarten",
     "domains": "Domeinen",
-    "domainsDescription": "Beheer domeinen voor je organisatie",
+    "domainsDescription": "Create and manage domains available in the organization",
     "domainsSearch": "Zoek domeinen...",
     "domainAdd": "Domein toevoegen",
-    "domainAddDescription": "Registreer een nieuw domein bij je organisatie",
+    "domainAddDescription": "Register a new domain with to the organization",
     "domainCreate": "Domein aanmaken",
     "domainCreatedDescription": "Domein succesvol aangemaakt",
     "domainDeletedDescription": "Domein succesvol verwijderd",
-    "domainQuestionRemove": "Weet u zeker dat u het domein uit uw account wilt verwijderen?",
-    "domainMessageRemove": "Na verwijdering zal het domein niet langer aan je account gekoppeld zijn.",
+    "domainQuestionRemove": "Are you sure you want to remove the domain?",
+    "domainMessageRemove": "Once removed, the domain will no longer be associated with the organization.",
     "domainConfirmDelete": "Bevestig verwijdering van domein",
     "domainDelete": "Domein verwijderen",
     "domain": "Domein",
@@ -1274,7 +1292,7 @@
     "pending": "In afwachting",
     "sidebarBilling": "Facturering",
     "billing": "Facturering",
-    "orgBillingDescription": "Beheer je factureringsgegevens en abonnementen",
+    "orgBillingDescription": "Manage billing information and subscriptions",
     "github": "GitHub",
     "pangolinHosted": "Pangolin gehost",
     "fossorial": "Fossorial",
@@ -1317,7 +1335,7 @@
     "domainPickerSortAsc": "A-Z",
     "domainPickerSortDesc": "Z-A",
     "domainPickerCheckingAvailability": "Beschikbaarheid controleren...",
-    "domainPickerNoMatchingDomains": "Geen overeenkomende domeinen gevonden. Probeer een ander domein of controleer de domeininstellingen van uw organisatie.",
+    "domainPickerNoMatchingDomains": "No matching domains found. Try a different domain or check the organization's domain settings.",
     "domainPickerOrganizationDomains": "Organisatiedomeinen",
     "domainPickerProvidedDomains": "Aangeboden domeinen",
     "domainPickerSubdomain": "Subdomein: {subdomain}",
@@ -1351,7 +1369,7 @@
     "billingModifySubscription": "Abonnementsaanpassing",
     "billingStartSubscription": "Abonnement Starten",
     "billingRecurringCharge": "Terugkerende Kosten",
-    "billingManageSubscriptionSettings": "Beheer uw abonnementsinstellingen en voorkeuren",
+    "billingManageSubscriptionSettings": "Manage subscription settings and preferences",
     "billingNoActiveSubscription": "U heeft geen actief abonnement. Start uw abonnement om gebruikslimieten te verhogen.",
     "billingFailedToLoadSubscription": "Fout bij laden van abonnement",
     "billingFailedToLoadUsage": "Niet gelukt om gebruik te laden",
@@ -1362,9 +1380,9 @@
     "billingPortalError": "Portal Fout",
     "billingDataUsageInfo": "U bent in rekening gebracht voor alle gegevens die via uw beveiligde tunnels via de cloud worden verzonden. Dit omvat zowel inkomende als uitgaande verkeer over al uw sites. Wanneer u uw limiet bereikt zullen uw sites de verbinding verbreken totdat u uw abonnement upgradet of het gebruik vermindert. Gegevens worden niet in rekening gebracht bij het gebruik van knooppunten.",
     "billingOnlineTimeInfo": "U wordt in rekening gebracht op basis van hoe lang uw sites verbonden blijven met de cloud. Bijvoorbeeld 44,640 minuten is gelijk aan één site met 24/7 voor een volledige maand. Wanneer u uw limiet bereikt, zal de verbinding tussen uw sites worden verbroken totdat u een upgrade van uw abonnement uitvoert of het gebruik vermindert. Tijd wordt niet belast bij het gebruik van knooppunten.",
-    "billingUsersInfo": "U wordt gefactureerd voor elke gebruiker in uw organisatie. Facturering wordt dagelijks berekend op basis van het aantal actieve gebruikersaccounts in uw organisatie.",
-    "billingDomainInfo": "U wordt gefactureerd voor elk domein in uw organisatie. Facturering wordt dagelijks berekend op basis van het aantal actieve domeinaccounts in uw organisatie.",
-    "billingRemoteExitNodesInfo": "U wordt gefactureerd voor elke beheerde Node in uw organisatie. Facturering wordt dagelijks berekend op basis van het aantal actieve beheerde Nodes in uw organisatie.",
+    "billingUsersInfo": "You're charged for each user in the organization. Billing is calculated daily based on the number of active user accounts in your org.",
+    "billingDomainInfo": "You're charged for each domain in the organization. Billing is calculated daily based on the number of active domain accounts in your org.",
+    "billingRemoteExitNodesInfo": "You're charged for each managed Node in the organization. Billing is calculated daily based on the number of active managed Nodes in your org.",
     "domainNotFound": "Domein niet gevonden",
     "domainNotFoundDescription": "Deze bron is uitgeschakeld omdat het domein niet langer in ons systeem bestaat. Stel een nieuw domein in voor deze bron.",
     "failed": "Mislukt",
@@ -1456,23 +1474,23 @@
     "errorCreatingClient": "Fout bij het aanmaken van de client",
     "clientDefaultsNotFound": "Standaardinstellingen van klant niet gevonden",
     "createClient": "Client aanmaken",
-    "createClientDescription": "Maak een nieuwe client aan om verbinding te maken met uw sites",
+    "createClientDescription": "Create a new client to access private resources",
     "seeAllClients": "Alle clients bekijken",
     "clientInformation": "Klantinformatie",
     "clientNamePlaceholder": "Clientnaam",
     "address": "Adres",
     "subnetPlaceholder": "Subnet",
-    "addressDescription": "Het adres dat deze client zal gebruiken voor connectiviteit",
+    "addressDescription": "The internal address of the client. Must fall within the organization's subnet.",
     "selectSites": "Selecteer sites",
     "sitesDescription": "De client heeft connectiviteit met de geselecteerde sites",
     "clientInstallOlm": "Installeer Olm",
     "clientInstallOlmDescription": "Laat Olm draaien op uw systeem",
-    "clientOlmCredentials": "Olm inloggegevens",
-    "clientOlmCredentialsDescription": "Dit is hoe Olm zich bij de server zal verifiëren",
-    "olmEndpoint": "Olm Eindpunt",
-    "olmId": "Olm ID",
-    "olmSecretKey": "Olm Geheime Sleutel",
-    "clientCredentialsSave": "Uw referenties opslaan",
+    "clientOlmCredentials": "Credentials",
+    "clientOlmCredentialsDescription": "This is how the client will authenticate with the server",
+    "olmEndpoint": "Endpoint",
+    "olmId": "ID",
+    "olmSecretKey": "Secret",
+    "clientCredentialsSave": "Save the Credentials",
     "clientCredentialsSaveDescription": "Je kunt dit slechts één keer zien. Kopieer het naar een beveiligde plek.",
     "generalSettingsDescription": "Configureer de algemene instellingen voor deze client",
     "clientUpdated": "Klant bijgewerkt ",
@@ -1483,9 +1501,7 @@
     "sitesFetchError": "Er is een fout opgetreden bij het ophalen van sites.",
     "olmErrorFetchReleases": "Er is een fout opgetreden bij het ophalen van Olm releases.",
     "olmErrorFetchLatest": "Er is een fout opgetreden bij het ophalen van de nieuwste Olm release.",
-    "remoteSubnets": "Externe Subnets",
     "enterCidrRange": "Voer CIDR-bereik in",
-    "remoteSubnetsDescription": "Voeg CIDR-bereiken toe die vanaf deze site op afstand toegankelijk zijn met behulp van clients. Gebruik een formaat zoals 10.0.0.0/24. Dit geldt ALLEEN voor VPN-clientconnectiviteit.",
     "resourceEnableProxy": "Openbare proxy inschakelen",
     "resourceEnableProxyDescription": "Schakel publieke proxy in voor deze resource. Dit maakt toegang tot de resource mogelijk vanuit het netwerk via de cloud met een open poort. Vereist Traefik-configuratie.",
     "externalProxyEnabled": "Externe Proxy Ingeschakeld",
@@ -1503,14 +1519,15 @@
     "enableHealthChecksDescription": "Controleer de gezondheid van dit doel. U kunt een ander eindpunt monitoren dan het doel indien vereist.",
     "healthScheme": "Methode",
     "healthSelectScheme": "Selecteer methode",
+    "healthCheckPortInvalid": "Health check port must be between 1 and 65535",
     "healthCheckPath": "Pad",
     "healthHostname": "IP / Hostnaam",
     "healthPort": "Poort",
     "healthCheckPathDescription": "Het pad om de gezondheid status te controleren.",
-    "healthyIntervalSeconds": "Gezonde Interval",
-    "unhealthyIntervalSeconds": "Ongezonde Interval",
+    "healthyIntervalSeconds": "Healthy Interval (sec)",
+    "unhealthyIntervalSeconds": "Unhealthy Interval (sec)",
     "IntervalSeconds": "Gezonde Interval",
-    "timeoutSeconds": "Timeout",
+    "timeoutSeconds": "Timeout (sec)",
     "timeIsInSeconds": "Tijd is in seconden",
     "retryAttempts": "Herhaal Pogingen",
     "expectedResponseCodes": "Verwachte Reactiecodes",
@@ -1546,12 +1563,12 @@
     "resourceEditDomain": "Domein bewerken",
     "siteName": "Site Naam",
     "proxyPort": "Poort",
-    "resourcesTableProxyResources": "Proxybronnen",
-    "resourcesTableClientResources": "Clientbronnen",
+    "resourcesTableProxyResources": "Public",
+    "resourcesTableClientResources": "Private",
     "resourcesTableNoProxyResourcesFound": "Geen proxybronnen gevonden.",
     "resourcesTableNoInternalResourcesFound": "Geen interne bronnen gevonden.",
     "resourcesTableDestination": "Bestemming",
-    "resourcesTableTheseResourcesForUseWith": "Deze bronnen zijn bedoeld voor gebruik met",
+    "resourcesTableAlias": "Alias",
     "resourcesTableClients": "Clienten",
     "resourcesTableAndOnlyAccessibleInternally": "en zijn alleen intern toegankelijk wanneer verbonden met een client.",
     "resourcesTableNoTargets": "Geen doelen",
@@ -1560,8 +1577,8 @@
     "resourcesTableOffline": "Offline",
     "resourcesTableUnknown": "onbekend",
     "resourcesTableNotMonitored": "Niet gecontroleerd",
-    "editInternalResourceDialogEditClientResource": "Bewerk clientbron",
-    "editInternalResourceDialogUpdateResourceProperties": "Werk de eigenschapen van de bron en doelconfiguratie bij voor {resourceName}.",
+    "editInternalResourceDialogEditClientResource": "Edit Private Resource",
+    "editInternalResourceDialogUpdateResourceProperties": "Update the resource configuration and access controls for {resourceName}",
     "editInternalResourceDialogResourceProperties": "Bron eigenschappen",
     "editInternalResourceDialogName": "Naam",
     "editInternalResourceDialogProtocol": "Protocol",
@@ -1580,11 +1597,22 @@
     "editInternalResourceDialogInvalidIPAddressFormat": "Ongeldig IP-adresformaat",
     "editInternalResourceDialogDestinationPortMin": "Bestemmingspoort moet minstens 1 zijn",
     "editInternalResourceDialogDestinationPortMax": "Bestemmingspoort moet minder dan 65536 zijn",
+    "editInternalResourceDialogPortModeRequired": "Protocol, proxy port, and destination port are required for port mode",
+    "editInternalResourceDialogMode": "Mode",
+    "editInternalResourceDialogModePort": "Port",
+    "editInternalResourceDialogModeHost": "Host",
+    "editInternalResourceDialogModeCidr": "CIDR",
+    "editInternalResourceDialogDestination": "Destination",
+    "editInternalResourceDialogDestinationHostDescription": "The IP address or hostname of the resource on the site's network.",
+    "editInternalResourceDialogDestinationIPDescription": "The IP or hostname address of the resource on the site's network.",
+    "editInternalResourceDialogDestinationCidrDescription": "The CIDR range of the resource on the site's network.",
+    "editInternalResourceDialogAlias": "Alias",
+    "editInternalResourceDialogAliasDescription": "An optional internal DNS alias for this resource.",
     "createInternalResourceDialogNoSitesAvailable": "Geen sites beschikbaar",
     "createInternalResourceDialogNoSitesAvailableDescription": "U moet ten minste één Newt-site hebben met een geconfigureerd subnet om interne bronnen aan te maken.",
     "createInternalResourceDialogClose": "Sluiten",
-    "createInternalResourceDialogCreateClientResource": "Maak clientbron",
-    "createInternalResourceDialogCreateClientResourceDescription": "Maak een nieuwe bron die toegankelijk zal zijn voor clients die verbonden zijn met de geselecteerde site.",
+    "createInternalResourceDialogCreateClientResource": "Create Private Resource",
+    "createInternalResourceDialogCreateClientResourceDescription": "Create a new resource that will only be accessible to clients connected to the organization",
     "createInternalResourceDialogResourceProperties": "Bron-eigenschappen",
     "createInternalResourceDialogName": "Naam",
     "createInternalResourceDialogSite": "Site",
@@ -1613,11 +1641,22 @@
     "createInternalResourceDialogInvalidIPAddressFormat": "Ongeldig IP-adresformaat",
     "createInternalResourceDialogDestinationPortMin": "Bestemmingspoort moet minstens 1 zijn",
     "createInternalResourceDialogDestinationPortMax": "Bestemmingspoort moet minder dan 65536 zijn",
+    "createInternalResourceDialogPortModeRequired": "Protocol, proxy port, and destination port are required for port mode",
+    "createInternalResourceDialogMode": "Mode",
+    "createInternalResourceDialogModePort": "Port",
+    "createInternalResourceDialogModeHost": "Host",
+    "createInternalResourceDialogModeCidr": "CIDR",
+    "createInternalResourceDialogDestination": "Destination",
+    "createInternalResourceDialogDestinationHostDescription": "The IP address or hostname of the resource on the site's network.",
+    "createInternalResourceDialogDestinationCidrDescription": "The CIDR range of the resource on the site's network.",
+    "createInternalResourceDialogAlias": "Alias",
+    "createInternalResourceDialogAliasDescription": "An optional internal DNS alias for this resource.",
     "siteConfiguration": "Configuratie",
     "siteAcceptClientConnections": "Accepteer clientverbindingen",
-    "siteAcceptClientConnectionsDescription": "Sta toe dat andere apparaten verbinding maken via deze Newt-instantie als een gateway met behulp van clients.",
-    "siteAddress": "Siteadres",
-    "siteAddressDescription": "Specificeren het IP-adres van de host voor clients om verbinding mee te maken. Dit is het interne adres van de site in het Pangolin netwerk voor clients om te adresseren. Moet binnen het Organisatienetwerk vallen.",
+    "siteAcceptClientConnectionsDescription": "Allow user devices and clients to access resources on this site. This can be changed later.",
+    "siteAddress": "Site Address (Advanced)",
+    "siteAddressDescription": "The internal address of the site. Must fall within the organization's subnet.",
+    "siteNameDescription": "The display name of the site that can be changed later.",
     "autoLoginExternalIdp": "Auto Login met Externe IDP",
     "autoLoginExternalIdpDescription": "De gebruiker onmiddellijk doorsturen naar de externe IDP voor authenticatie.",
     "selectIdp": "Selecteer IDP",
@@ -1631,7 +1670,7 @@
     "autoLoginErrorNoRedirectUrl": "Geen redirect URL ontvangen van de identity provider.",
     "autoLoginErrorGeneratingUrl": "Genereren van authenticatie-URL mislukt.",
     "remoteExitNodeManageRemoteExitNodes": "Externe knooppunten",
-    "remoteExitNodeDescription": "Zorgt voor één of meer externe knooppunten om de netwerkverbinding uit te breiden en het vertrouwen in de cloud te verminderen",
+    "remoteExitNodeDescription": "Self-host one or more remote nodes to extend network connectivity and reduce reliance on the cloud",
     "remoteExitNodes": "Nodes",
     "searchRemoteExitNodes": "Knooppunten zoeken...",
     "remoteExitNodeAdd": "Voeg node toe",
@@ -1643,11 +1682,11 @@
     "sidebarRemoteExitNodes": "Externe knooppunten",
     "remoteExitNodeCreate": {
         "title": "Maak node",
-        "description": "Maak een nieuwe node aan om uw netwerkverbinding uit te breiden",
+        "description": "Create a new node to extend network connectivity",
         "viewAllButton": "Alle nodes weergeven",
         "strategy": {
             "title": "Creatie Strategie",
-            "description": "Kies dit om uw node handmatig te configureren of nieuwe referenties te genereren.",
+            "description": "Choose this to manually configure the node or generate new credentials.",
             "adopt": {
                 "title": "Adopteer Node",
                 "description": "Kies dit als u al de referenties voor deze node heeft"
@@ -1668,7 +1707,7 @@
         },
         "generate": {
             "title": "Gegeneerde Inloggegevens",
-            "description": "Gebruik deze gegenereerde inloggegevens om uw node te configureren",
+            "description": "Use these generated credentials to configure the node",
             "nodeIdTitle": "Knooppunt ID",
             "secretTitle": "Geheim",
             "saveCredentialsTitle": "Voeg Inloggegevens toe aan Config",
@@ -1744,16 +1783,16 @@
     "idpTypeLabel": "Identiteit provider type",
     "roleMappingExpressionPlaceholder": "bijvoorbeeld bevat (groepen, 'admin') && 'Admin' ½ 'Member'",
     "idpGoogleConfiguration": "Google Configuratie",
-    "idpGoogleConfigurationDescription": "Configureer uw Google OAuth2-referenties",
-    "idpGoogleClientIdDescription": "Uw Google OAuth2-client-ID",
-    "idpGoogleClientSecretDescription": "Uw Google OAuth2 Clientgeheim",
+    "idpGoogleConfigurationDescription": "Configure the Google OAuth2 credentials",
+    "idpGoogleClientIdDescription": "Google OAuth2 Client ID",
+    "idpGoogleClientSecretDescription": "Google OAuth2 Client Secret",
     "idpAzureConfiguration": "Azure Entra ID configuratie",
-    "idpAzureConfigurationDescription": "Configureer uw Azure Entra ID OAuth2 referenties",
+    "idpAzureConfigurationDescription": "Configure Azure Entra ID OAuth2 credentials",
     "idpTenantId": "Tenant-ID",
-    "idpTenantIdPlaceholder": "jouw-tenant-id",
-    "idpAzureTenantIdDescription": "Uw Azure tenant ID (gevonden in Azure Active Directory overzicht)",
-    "idpAzureClientIdDescription": "Uw Azure App registratie Client ID",
-    "idpAzureClientSecretDescription": "Uw Azure App registratie Client Secret",
+    "idpTenantIdPlaceholder": "tenant-id",
+    "idpAzureTenantIdDescription": "Azure tenant ID (found in Azure Active Directory overview)",
+    "idpAzureClientIdDescription": "Azure App Registration Client ID",
+    "idpAzureClientSecretDescription": "Azure App Registration Client Secret",
     "idpGoogleTitle": "Google",
     "idpGoogleAlt": "Google",
     "idpAzureTitle": "Azure Entra ID",
@@ -1761,14 +1800,14 @@
     "idpGoogleConfigurationTitle": "Google Configuratie",
     "idpAzureConfigurationTitle": "Azure Entra ID configuratie",
     "idpTenantIdLabel": "Tenant-ID",
-    "idpAzureClientIdDescription2": "Uw Azure App registratie Client ID",
-    "idpAzureClientSecretDescription2": "Uw Azure App registratie Client Secret",
+    "idpAzureClientIdDescription2": "Azure App Registration Client ID",
+    "idpAzureClientSecretDescription2": "Azure App Registration Client Secret",
     "idpGoogleDescription": "Google OAuth2/OIDC provider",
     "idpAzureDescription": "Microsoft Azure OAuth2/OIDC provider",
     "subnet": "Subnet",
     "subnetDescription": "Het subnet van de netwerkconfiguratie van deze organisatie.",
     "authPage": "Authenticatie pagina",
-    "authPageDescription": "De autorisatiepagina voor uw organisatie configureren",
+    "authPageDescription": "Configure the auth page for the organization",
     "authPageDomain": "Authenticatie pagina domein",
     "noDomainSet": "Geen domein ingesteld",
     "changeDomain": "Domein wijzigen",
@@ -1778,7 +1817,7 @@
     "setAuthPageDomain": "Authenticatiepagina domein instellen",
     "failedToFetchCertificate": "Certificaat ophalen mislukt",
     "failedToRestartCertificate": "Kon certificaat niet opnieuw opstarten",
-    "addDomainToEnableCustomAuthPages": "Voeg een domein toe om aangepaste authenticatiepagina's voor uw organisatie in te schakelen",
+    "addDomainToEnableCustomAuthPages": "Add a domain to enable custom authentication pages for the organization",
     "selectDomainForOrgAuthPage": "Selecteer een domein voor de authenticatiepagina van de organisatie",
     "domainPickerProvidedDomain": "Opgegeven domein",
     "domainPickerFreeProvidedDomain": "Gratis verstrekt domein",
@@ -1793,7 +1832,7 @@
     "domainPickerInvalidSubdomainCannotMakeValid": "\"{sub}\" kon niet geldig worden gemaakt voor {domain}.",
     "domainPickerSubdomainSanitized": "Subdomein gesaniseerd",
     "domainPickerSubdomainCorrected": "\"{sub}\" was gecorrigeerd op \"{sanitized}\"",
-    "orgAuthSignInTitle": "Meld je aan bij je organisatie",
+    "orgAuthSignInTitle": "Sign in to the organization",
     "orgAuthChooseIdpDescription": "Kies uw identiteitsprovider om door te gaan",
     "orgAuthNoIdpConfigured": "Deze organisatie heeft geen identiteitsproviders geconfigureerd. Je kunt in plaats daarvan inloggen met je Pangolin-identiteit.",
     "orgAuthSignInWithPangolin": "Log in met Pangolin",
@@ -1811,7 +1850,7 @@
     "enableTwoFactorAuthentication": "Tweestapsverificatie inschakelen",
     "completeSecuritySteps": "Voltooi beveiligingsstappen",
     "securitySettings": "Beveiliging instellingen",
-    "securitySettingsDescription": "Beveiligingsbeleid voor uw organisatie configureren",
+    "securitySettingsDescription": "Configure security policies for the organization",
     "requireTwoFactorForAllUsers": "Authenticatie in twee stappen vereist voor alle gebruikers",
     "requireTwoFactorDescription": "Wanneer ingeschakeld, moeten alle interne gebruikers in deze organisatie tweestapsverificatie ingeschakeld hebben om toegang te krijgen tot de organisatie.",
     "requireTwoFactorDisabledDescription": "Deze functie vereist een geldig licentie (Enterprise) of actief abonnement (SaaS)",
@@ -1874,8 +1913,12 @@
     "enterpriseEdition": "Enterprise Edition",
     "unlicensed": "Ongelicentieerd",
     "beta": "Bèta",
-    "manageClients": "Beheer Cliënten",
-    "manageClientsDescription": "Klanten zijn apparaten die verbinding kunnen maken met uw sites",
+    "manageUserDevices": "User Devices",
+    "manageUserDevicesDescription": "View and manage devices that users use to privately connect to resources",
+    "manageMachineClients": "Manage Machine Clients",
+    "manageMachineClientsDescription": "Create and manage clients that servers and systems use to privately connect to resources",
+    "clientsTableUserClients": "User",
+    "clientsTableMachineClients": "Machine",
     "licenseTableValidUntil": "Geldig tot",
     "saasLicenseKeysSettingsTitle": "Enterprise Licenties",
     "saasLicenseKeysSettingsDescription": "Genereer en beheer de Enterprise licentiesleutels voor zelfgehoste Pangolin instanties",
@@ -2075,7 +2118,7 @@
     "preferWildcardCert": "Bij voorkeur Wildcard Certificaat",
     "unverified": "Ongeverifieerd",
     "domainSetting": "Domein instellingen",
-    "domainSettingDescription": "Configureer instellingen voor uw domein",
+    "domainSettingDescription": "Configure settings for the domain",
     "preferWildcardCertDescription": "Poging om een certificaat met een wildcard te genereren (vereist een correct geconfigureerde certificaatresolver).",
     "recordName": "Record Naam",
     "auto": "Automatisch",
@@ -2089,15 +2132,15 @@
     "olmUpdateAvailableInfo": "Er is een bijgewerkte versie van Olm beschikbaar. Update alstublieft naar de nieuwste versie voor de beste ervaring.",
     "client": "Klant",
     "proxyProtocol": "Proxy Protocol Instellingen",
-    "proxyProtocolDescription": "Proxyprotocol configureren om de IP-adressen van de client voor TCP/UDP-diensten te bewaren.",
+    "proxyProtocolDescription": "Configure Proxy Protocol to preserve client IP addresses for TCP services.",
     "enableProxyProtocol": "Proxy Protocol inschakelen",
-    "proxyProtocolInfo": "Behoud IP adressen van de client voor TCP/UDP backends",
+    "proxyProtocolInfo": "Preserve client IP addresses for TCP backends",
     "proxyProtocolVersion": "Proxy Protocol Versie",
     "version1": " Versie 1 (Aanbevolen)",
     "version2": "Versie 2",
     "versionDescription": "Versie 1 is text-based en breed ondersteund. Versie 2 is binair en efficiënter maar minder compatibel.",
     "warning": "Waarschuwing",
-    "proxyProtocolWarning": "Je backend applicatie moet worden geconfigureerd om connecties met Proxy Protocol te accepteren. Als je backend geen Proxy Protocol ondersteunt, zal het inschakelen van dit alle verbindingen verbreken. Zorg ervoor dat je je backend configureert om Proxy Protocol headers van Traefik.",
+    "proxyProtocolWarning": "The backend application must be configured to accept Proxy Protocol connections. If your backend doesn't support Proxy Protocol, enabling this will break all connections so only enable this if you know what you're doing. Make sure to configure your backend to trust Proxy Protocol headers from Traefik.",
     "restarting": "Herstarten...",
     "manual": "Handleiding",
     "messageSupport": "Bericht ondersteuning",
@@ -2120,6 +2163,43 @@
     "supportMessageSent": "Bericht verzonden!",
     "supportWillContact": "We nemen binnenkort contact met u op!",
     "selectLogRetention": "Selecteer log retentie",
+    "terms": "Terms",
+    "privacy": "Privacy",
+    "security": "Security",
+    "docs": "Docs",
+    "deviceActivation": "Device activation",
+    "deviceCodeInvalidFormat": "Code must be 9 characters (e.g., A1AJ-N5JD)",
+    "deviceCodeInvalidOrExpired": "Invalid or expired code",
+    "deviceCodeVerifyFailed": "Failed to verify device code",
+    "signedInAs": "Signed in as",
+    "deviceCodeEnterPrompt": "Enter the code displayed on the device",
+    "continue": "Continue",
+    "deviceUnknownLocation": "Unknown location",
+    "deviceAuthorizationRequested": "This authorization was requested from {location} on {date}. Make sure you trust this device as it will get access to the account.",
+    "deviceLabel": "Device: {deviceName}",
+    "deviceWantsAccess": "wants to access your account",
+    "deviceExistingAccess": "Existing access:",
+    "deviceFullAccess": "Full access to your account",
+    "deviceOrganizationsAccess": "Access to all organizations your account has access to",
+    "deviceAuthorize": "Authorize {applicationName}",
+    "deviceConnected": "Device Connected!",
+    "deviceAuthorizedMessage": "Device is authorized to access your account.",
+    "pangolinCloud": "Pangolin Cloud",
+    "viewDevices": "View Devices",
+    "viewDevicesDescription": "Manage your connected devices",
+    "noDevices": "No devices found",
+    "dateCreated": "Date Created",
+    "unnamedDevice": "Unnamed Device",
+    "deviceQuestionRemove": "Are you sure you want to delete this device?",
+    "deviceMessageRemove": "This action cannot be undone.",
+    "deviceDeleteConfirm": "Delete Device",
+    "deleteDevice": "Delete Device",
+    "errorLoadingDevices": "Error loading devices",
+    "failedToLoadDevices": "Failed to load devices",
+    "deviceDeleted": "Device deleted",
+    "deviceDeletedDescription": "The device has been successfully deleted.",
+    "errorDeletingDevice": "Error deleting device",
+    "failedToDeleteDevice": "Failed to delete device",
     "showColumns": "Kolommen weergeven",
     "hideColumns": "Kolommen verbergen",
     "columnVisibility": "Zichtbaarheid kolommen",
@@ -2134,6 +2214,10 @@
     "enableSelected": "Selectie inschakelen",
     "disableSelected": "Selectie uitschakelen",
     "checkSelectedStatus": "Controleer de status van de geselecteerde",
+    "clients": "Clients",
+    "accessClientSelect": "Select machine clients",
+    "resourceClientDescription": "Machine clients that can access this resource",
+    "regenerate": "Regenerate",
     "credentials": "Aanmeldgegevens",
     "savecredentials": "Referenties opslaan",
     "regeneratecredentials": "Hersleutel",
@@ -2151,7 +2235,6 @@
     "endpoint": "Endpoint",
     "Id": "Id",
     "SecretKey": "Geheime sleutel",
-    "featureDisabledTooltip": "Deze functie is alleen beschikbaar in het bedrijfsplan en vereist een licentie om deze te gebruiken.",
     "niceId": "Leuk ID",
     "niceIdUpdated": "Leuke ID bijgewerkt",
     "niceIdUpdatedSuccessfully": "Nice ID Updated Successfully",
@@ -2160,5 +2243,15 @@
     "niceIdCannotBeEmpty": "Nice ID mag niet leeg zijn",
     "enterIdentifier": "ID invoeren",
     "identifier": "Identifier",
-    "noData": "No Data"
+    "deviceLoginUseDifferentAccount": "Not you? Use a different account.",
+    "deviceLoginDeviceRequestingAccessToAccount": "A device is requesting access to this account.",
+    "noData": "No Data",
+    "machineClients": "Machine Clients",
+    "install": "Install",
+    "run": "Run",
+    "clientNameDescription": "The display name of the client that can be changed later.",
+    "clientAddress": "Client Address (Advanced)",
+    "setupFailedToFetchSubnet": "Failed to fetch default subnet",
+    "setupSubnetAdvanced": "Subnet (Advanced)",
+    "setupSubnetDescription": "The subnet for this organization's internal network."
 }

messages/pl-PL.json

@@ -1,12 +1,12 @@
 {
-    "setupCreate": "Utwórz swoją organizację, witrynę i zasoby",
+    "setupCreate": "Create the organization, site, and resources",
     "setupNewOrg": "Nowa organizacja",
     "setupCreateOrg": "Utwórz organizację",
     "setupCreateResources": "Utwórz Zasoby",
     "setupOrgName": "Nazwa organizacji",
-    "orgDisplayName": "To jest wyświetlana nazwa Twojej organizacji.",
+    "orgDisplayName": "This is the display name of the organization.",
     "orgId": "Identyfikator organizacji",
-    "setupIdentifierMessage": "To jest unikalny identyfikator Twojej organizacji. Jest to oddzielone od nazwy wyświetlanej.",
+    "setupIdentifierMessage": "This is the unique identifier for the organization.",
     "setupErrorIdentifier": "Identyfikator organizacji jest już zajęty. Wybierz inny.",
     "componentsErrorNoMemberCreate": "Nie jesteś obecnie członkiem żadnej organizacji. Aby rozpocząć, utwórz organizację.",
     "componentsErrorNoMember": "Nie jesteś obecnie członkiem żadnej organizacji.",
@@ -50,10 +50,10 @@
     "siteMessageRemove": "Po usunięciu witryna nie będzie już dostępna. Wszystkie cele związane z witryną zostaną również usunięte.",
     "siteQuestionRemove": "Czy na pewno chcesz usunąć witrynę z organizacji?",
     "siteManageSites": "Zarządzaj stronami",
-    "siteDescription": "Zezwalaj na połączenie z siecią przez bezpieczne tunele",
+    "siteDescription": "Create and manage sites to enable connectivity to private networks",
     "siteCreate": "Utwórz witrynę",
     "siteCreateDescription2": "Wykonaj poniższe kroki, aby utworzyć i połączyć nową witrynę",
-    "siteCreateDescription": "Utwórz nową witrynę, aby rozpocząć łączenie zasobów",
+    "siteCreateDescription": "Create a new site to start connecting resources",
     "close": "Zamknij",
     "siteErrorCreate": "Błąd podczas tworzenia witryny",
     "siteErrorCreateKeyPair": "Nie znaleziono pary kluczy lub domyślnych ustawień witryny",
@@ -74,7 +74,7 @@
     "siteInstallNewt": "Zainstaluj Newt",
     "siteInstallNewtDescription": "Uruchom Newt w swoim systemie",
     "WgConfiguration": "Konfiguracja WireGuard",
-    "WgConfigurationDescription": "Użyj następującej konfiguracji, aby połączyć się z siecią",
+    "WgConfigurationDescription": "Use the following configuration to connect to the network",
     "operatingSystem": "System operacyjny",
     "commands": "Polecenia",
     "recommended": "Rekomendowane",
@@ -87,32 +87,32 @@
     "siteUpdated": "Strona zaktualizowana",
     "siteUpdatedDescription": "Strona została zaktualizowana.",
     "siteGeneralDescription": "Skonfiguruj ustawienia ogólne dla tej witryny",
-    "siteSettingDescription": "Skonfiguruj ustawienia na swojej stronie",
+    "siteSettingDescription": "Configure the settings on the site",
     "siteSetting": "Ustawienia {siteName}",
-    "siteNewtTunnel": "Newt Tunnel (Zalecane)",
-    "siteNewtTunnelDescription": "Łatwiejszy sposób na stworzenie punktu wejścia w sieci. Nie ma dodatkowej konfiguracji.",
+    "siteNewtTunnel": "Newt Site (Recommended)",
+    "siteNewtTunnelDescription": "Easiest way to create an entrypoint into any network. No extra setup.",
     "siteWg": "Podstawowy WireGuard",
     "siteWgDescription": "Użyj dowolnego klienta WireGuard do utworzenia tunelu. Wymagana jest ręczna konfiguracja NAT.",
     "siteWgDescriptionSaas": "Użyj dowolnego klienta WireGuard do utworzenia tunelu. Wymagana ręczna konfiguracja NAT. DZIAŁA TYLKO NA SAMODZIELNIE HOSTOWANYCH WĘZŁACH",
     "siteLocalDescription": "Tylko lokalne zasoby. Brak tunelu.",
     "siteLocalDescriptionSaas": "Tylko zasoby lokalne. Brak tunelu. Dostępne tylko w węzłach zdalnych.",
     "siteSeeAll": "Zobacz wszystkie witryny",
-    "siteTunnelDescription": "Określ jak chcesz połączyć się ze swoją stroną",
-    "siteNewtCredentials": "Aktualne dane logowania",
-    "siteNewtCredentialsDescription": "Oto jak Newt będzie uwierzytelniał się z serwerem",
-    "siteCredentialsSave": "Zapisz swoje poświadczenia",
+    "siteTunnelDescription": "Determine how you want to connect to the site",
+    "siteNewtCredentials": "Credentials",
+    "siteNewtCredentialsDescription": "This is how the site will authenticate with the server",
+    "siteCredentialsSave": "Save the Credentials",
     "siteCredentialsSaveDescription": "Możesz to zobaczyć tylko raz. Upewnij się, że skopiuj je do bezpiecznego miejsca.",
     "siteInfo": "Informacje o witrynie",
     "status": "Status",
     "shareTitle": "Zarządzaj linkami udostępniania",
-    "shareDescription": "Utwórz linki, które można udostępnić, aby przyznać tymczasowy lub stały dostęp do Twoich zasobów",
+    "shareDescription": "Create shareable links to grant temporary or permanent access to proxy resources",
     "shareSearch": "Szukaj linków udostępnienia...",
     "shareCreate": "Utwórz link udostępniania",
     "shareErrorDelete": "Nie udało się usunąć linku",
     "shareErrorDeleteMessage": "Wystąpił błąd podczas usuwania linku",
     "shareDeleted": "Link usunięty",
     "shareDeletedDescription": "Link został usunięty",
-    "shareTokenDescription": "Twój token dostępu może być przekazywany na dwa sposoby: jako parametr zapytania lub w nagłówkach żądania. Muszą być przekazywane z klienta na każde żądanie uwierzytelnionego dostępu.",
+    "shareTokenDescription": "The access token can be passed in two ways: as a query parameter or in the request headers. These must be passed from the client on every request for authenticated access.",
     "accessToken": "Token dostępu",
     "usageExamples": "Przykłady użycia",
     "tokenId": "Identyfikator tokena",
@@ -121,7 +121,7 @@
     "importantNote": "Ważna uwaga",
     "shareImportantDescription": "Ze względów bezpieczeństwa zaleca się użycie nagłówków nad parametrami zapytania, jeśli to możliwe, ponieważ parametry zapytania mogą być zalogowane w dziennikach serwera lub historii przeglądarki.",
     "token": "Token",
-    "shareTokenSecurety": "Chroń swój token dostępu. Nie udostępniaj go w publicznie dostępnych miejscach ani w kodzie po stronie klienta.",
+    "shareTokenSecurety": "Keep the access token secure. Do not share it in publicly accessible areas or client-side code.",
     "shareErrorFetchResource": "Nie udało się pobrać zasobów",
     "shareErrorFetchResourceDescription": "Wystąpił błąd podczas pobierania zasobów",
     "shareErrorCreate": "Nie udało się utworzyć linku udostępniania",
@@ -144,8 +144,10 @@
     "expires": "Wygasa",
     "never": "Nigdy",
     "shareErrorSelectResource": "Wybierz zasób",
-    "resourceTitle": "Zarządzaj zasobami",
-    "resourceDescription": "Utwórz bezpieczne proxy do prywatnych aplikacji",
+    "proxyResourceTitle": "Manage Public Resources",
+    "proxyResourceDescription": "Create and manage resources that are publicly accessible through a web browser",
+    "clientResourceTitle": "Manage Private Resources",
+    "clientResourceDescription": "Create and manage resources that are only accessible through a connected client",
     "resourcesSearch": "Szukaj zasobów...",
     "resourceAdd": "Dodaj zasób",
     "resourceErrorDelte": "Błąd podczas usuwania zasobu",
@@ -155,9 +157,9 @@
     "resourceMessageRemove": "Po usunięciu, zasób nie będzie już dostępny. Wszystkie cele związane z zasobem zostaną również usunięte.",
     "resourceQuestionRemove": "Czy na pewno chcesz usunąć zasób z organizacji?",
     "resourceHTTP": "Zasób HTTPS",
-    "resourceHTTPDescription": "Proxy do Twojej aplikacji przez HTTPS, przy użyciu poddomeny lub domeny bazowej.",
+    "resourceHTTPDescription": "Proxy requests to the app over HTTPS using a subdomain or base domain.",
     "resourceRaw": "Surowy zasób TCP/UDP",
-    "resourceRawDescription": "Proxy do aplikacji przez TCP/UDP przy użyciu numeru portu.",
+    "resourceRawDescription": "Proxy requests to the app over TCP/UDP using a port number. This only works when sites are connected to nodes.",
     "resourceCreate": "Utwórz zasób",
     "resourceCreateDescription": "Wykonaj poniższe kroki, aby utworzyć nowy zasób",
     "resourceSeeAll": "Zobacz wszystkie zasoby",
@@ -171,22 +173,22 @@
     "noCountryFound": "Nie znaleziono kraju.",
     "siteSelectionDescription": "Ta strona zapewni połączenie z celem.",
     "resourceType": "Typ zasobu",
-    "resourceTypeDescription": "Określ jak chcesz uzyskać dostęp do swojego zasobu",
+    "resourceTypeDescription": "Determine how to access the resource",
     "resourceHTTPSSettings": "Ustawienia HTTPS",
-    "resourceHTTPSSettingsDescription": "Skonfiguruj jak twój zasób będzie dostępny przez HTTPS",
+    "resourceHTTPSSettingsDescription": "Configure how the resource will be accessed over HTTPS",
     "domainType": "Typ domeny",
     "subdomain": "Poddomena",
     "baseDomain": "Bazowa domena",
-    "subdomnainDescription": "Poddomena, w której twój zasób będzie dostępny.",
+    "subdomnainDescription": "The subdomain where the resource will be accessible.",
     "resourceRawSettings": "Ustawienia TCP/UDP",
-    "resourceRawSettingsDescription": "Skonfiguruj jak twój zasób będzie dostępny przez TCP/UDP. Zmapujesz zasób do portu na serwerze hosta Pangolin, dzięki czemu możesz uzyskać dostęp do zasobu z serwera-public ip:mapped-port.",
+    "resourceRawSettingsDescription": "Configure how the resource will be accessed over TCP/UDP. You map the resource to a port on the host Pangolin server, so you can access the resource from server-public-ip:mapped-port.",
     "protocol": "Protokół",
     "protocolSelect": "Wybierz protokół",
     "resourcePortNumber": "Numer portu",
     "resourcePortNumberDescription": "Numer portu zewnętrznego do żądań proxy.",
     "cancel": "Anuluj",
     "resourceConfig": "Snippety konfiguracji",
-    "resourceConfigDescription": "Skopiuj i wklej te fragmenty konfiguracji, aby skonfigurować swój zasób TCP/UDP",
+    "resourceConfigDescription": "Copy and paste these configuration snippets to set up the TCP/UDP resource",
     "resourceAddEntrypoints": "Traefik: Dodaj punkty wejścia",
     "resourceExposePorts": "Gerbil: Podnieś porty w Komponencie Dockera",
     "resourceLearnRaw": "Dowiedz się, jak skonfigurować zasoby TCP/UDP",
@@ -202,14 +204,14 @@
     "proxy": "Serwer pośredniczący",
     "internal": "Wewętrzny",
     "rules": "Regulamin",
-    "resourceSettingDescription": "Skonfiguruj ustawienia zasobu",
+    "resourceSettingDescription": "Configure the settings on the resource",
     "resourceSetting": "Ustawienia {resourceName}",
-    "alwaysAllow": "Zawsze zezwalaj",
-    "alwaysDeny": "Zawsze odmawiaj",
+    "alwaysAllow": "Bypass Auth",
+    "alwaysDeny": "Block Access",
     "passToAuth": "Przekaż do Autoryzacji",
-    "orgSettingsDescription": "Skonfiguruj ustawienia ogólne swojej organizacji",
+    "orgSettingsDescription": "Configure the organization's settings",
     "orgGeneralSettings": "Ustawienia organizacji",
-    "orgGeneralSettingsDescription": "Zarządzaj szczegółami swojej organizacji i konfiguracją",
+    "orgGeneralSettingsDescription": "Manage the organization's details and configuration",
     "saveGeneralSettings": "Zapisz ustawienia ogólne",
     "saveSettings": "Zapisz ustawienia",
     "orgDangerZone": "Strefa zagrożenia",
@@ -232,7 +234,7 @@
     "orgMissing": "Brak ID organizacji",
     "orgMissingMessage": "Nie można ponownie wygenerować zaproszenia bez ID organizacji.",
     "accessUsersManage": "Zarządzaj użytkownikami",
-    "accessUsersDescription": "Zaproś użytkowników i dodaj je do ról do zarządzania dostępem do Twojej organizacji",
+    "accessUsersDescription": "Invite and manage users with access to this organization",
     "accessUsersSearch": "Szukaj użytkowników...",
     "accessUserCreate": "Utwórz użytkownika",
     "accessUserRemove": "Usuń użytkownika",
@@ -241,13 +243,13 @@
     "role": "Rola",
     "nameRequired": "Nazwa jest wymagana",
     "accessRolesManage": "Zarządzaj rolami",
-    "accessRolesDescription": "Skonfiguruj role do zarządzania dostępem do Twojej organizacji",
+    "accessRolesDescription": "Create and manage roles for users in the organization",
     "accessRolesSearch": "Szukaj ról...",
     "accessRolesAdd": "Dodaj rolę",
     "accessRoleDelete": "Usuń rolę",
     "description": "Opis",
     "inviteTitle": "Otwórz zaproszenia",
-    "inviteDescription": "Zarządzaj zaproszeniami dla innych użytkowników",
+    "inviteDescription": "Manage invitations for other users to join the organization",
     "inviteSearch": "Szukaj zaproszeń...",
     "minutes": "Protokoły",
     "hours": "Godziny",
@@ -261,13 +263,13 @@
     "apiKeysErrorCreate": "Błąd podczas tworzenia klucza API",
     "apiKeysErrorSetPermission": "Błąd podczas ustawiania uprawnień",
     "apiKeysCreate": "Generuj klucz API",
-    "apiKeysCreateDescription": "Wygeneruj nowy klucz API dla swojej organizacji",
+    "apiKeysCreateDescription": "Generate a new API key for the organization",
     "apiKeysGeneralSettings": "Uprawnienia",
     "apiKeysGeneralSettingsDescription": "Określ, co ten klucz API może zrobić",
-    "apiKeysList": "Twój klucz API",
-    "apiKeysSave": "Zapisz swój klucz API",
+    "apiKeysList": "New API Key",
+    "apiKeysSave": "Save the API Key",
     "apiKeysSaveDescription": "Będziesz mógł zobaczyć to tylko raz. Upewnij się, że skopiujesz go w bezpieczne miejsce.",
-    "apiKeysInfo": "Twój klucz API to:",
+    "apiKeysInfo": "The API key is:",
     "apiKeysConfirmCopy": "Skopiowałem klucz API",
     "generate": "Generuj",
     "done": "Gotowe",
@@ -424,7 +426,7 @@
     "userCreated": "Utworzono użytkownika",
     "userCreatedDescription": "Użytkownik został pomyślnie utworzony.",
     "userTypeInternal": "Użytkownik wewnętrzny",
-    "userTypeInternalDescription": "Zaproś użytkownika do bezpośredniego dołączenia do Twojej organizacji.",
+    "userTypeInternalDescription": "Invite a user to join the organization directly.",
     "userTypeExternal": "Użytkownik zewnętrzny",
     "userTypeExternalDescription": "Utwórz użytkownika z zewnętrznym dostawcą tożsamości.",
     "accessUserCreateDescription": "Wykonaj poniższe kroki, aby utworzyć nowego użytkownika",
@@ -468,13 +470,13 @@
     "accessControlsSubmit": "Zapisz kontrole dostępu",
     "roles": "Role",
     "accessUsersRoles": "Zarządzaj użytkownikami i rolami",
-    "accessUsersRolesDescription": "Zapraszaj użytkowników i dodawaj ich do ról, aby zarządzać dostępem do Twojej organizacji",
+    "accessUsersRolesDescription": "Invite users and add them to roles to manage access to the organization",
     "key": "Klucz",
     "createdAt": "Utworzono",
     "proxyErrorInvalidHeader": "Nieprawidłowa wartość niestandardowego nagłówka hosta. Użyj formatu nazwy domeny lub zapisz pusty, aby usunąć niestandardowy nagłówek hosta.",
     "proxyErrorTls": "Nieprawidłowa nazwa serwera TLS. Użyj formatu nazwy domeny lub zapisz pusty, aby usunąć nazwę serwera TLS.",
     "proxyEnableSSL": "Włącz SSL",
-    "proxyEnableSSLDescription": "Włącz szyfrowanie SSL/TLS dla bezpiecznych połączeń HTTPS z Twoimi celami.",
+    "proxyEnableSSLDescription": "Enable SSL/TLS encryption for secure HTTPS connections to the targets.",
     "target": "Target",
     "configureTarget": "Konfiguruj Targety",
     "targetErrorFetch": "Nie udało się pobrać celów",
@@ -490,29 +492,29 @@
     "targetsErrorUpdate": "Nie udało się zaktualizować celów",
     "targetsErrorUpdateDescription": "Wystąpił błąd podczas aktualizacji celów",
     "targetTlsUpdate": "Ustawienia TLS zaktualizowane",
-    "targetTlsUpdateDescription": "Twoje ustawienia TLS zostały pomyślnie zaktualizowane",
+    "targetTlsUpdateDescription": "TLS settings have been updated successfully",
     "targetErrorTlsUpdate": "Nie udało się zaktualizować ustawień TLS",
     "targetErrorTlsUpdateDescription": "Wystąpił błąd podczas aktualizacji ustawień TLS",
     "proxyUpdated": "Ustawienia proxy zaktualizowane",
-    "proxyUpdatedDescription": "Twoje ustawienia proxy zostały pomyślnie zaktualizowane",
+    "proxyUpdatedDescription": "Proxy settings have been updated successfully",
     "proxyErrorUpdate": "Nie udało się zaktualizować ustawień proxy",
     "proxyErrorUpdateDescription": "Wystąpił błąd podczas aktualizacji ustawień proxy",
     "targetAddr": "IP / Nazwa hosta",
     "targetPort": "Port",
     "targetProtocol": "Protokół",
     "targetTlsSettings": "Konfiguracja bezpiecznego połączenia",
-    "targetTlsSettingsDescription": "Skonfiguruj ustawienia SSL/TLS dla twojego zasobu",
+    "targetTlsSettingsDescription": "Configure SSL/TLS settings for the resource",
     "targetTlsSettingsAdvanced": "Zaawansowane ustawienia TLS",
     "targetTlsSni": "Nazwa serwera TLS",
     "targetTlsSniDescription": "Nazwa serwera TLS do użycia dla SNI. Pozostaw puste, aby użyć domyślnej.",
     "targetTlsSubmit": "Zapisz ustawienia",
     "targets": "Konfiguracja celów",
-    "targetsDescription": "Skonfiguruj cele do kierowania ruchu do usług zaplecza",
+    "targetsDescription": "Set up targets to route traffic to backend services",
     "targetStickySessions": "Włącz sesje trwałe",
     "targetStickySessionsDescription": "Utrzymuj połączenia na tym samym celu backendowym przez całą sesję.",
     "methodSelect": "Wybierz metodę",
     "targetSubmit": "Dodaj cel",
-    "targetNoOne": "Ten zasób nie ma żadnych celów. Dodaj cel, aby skonfigurować miejsce wysyłania żądań do twojego backendu.",
+    "targetNoOne": "This resource doesn't have any targets. Add a target to configure where to send requests to the backend.",
     "targetNoOneDescription": "Dodanie więcej niż jednego celu powyżej włączy równoważenie obciążenia.",
     "targetsSubmit": "Zapisz cele",
     "addTarget": "Dodaj cel",
@@ -530,7 +532,7 @@
     "tlsServerNameDescription": "The TLS server name to use for SNI",
     "save": "Zapisz",
     "proxyAdditional": "Dodatkowe ustawienia proxy",
-    "proxyAdditionalDescription": "Skonfiguruj jak twój zasób obsługuje ustawienia proxy",
+    "proxyAdditionalDescription": "Configure how the resource handles proxy settings",
     "proxyCustomHeader": "Niestandardowy nagłówek hosta",
     "proxyCustomHeaderDescription": "Nagłówek hosta do ustawienia podczas proxy żądań. Pozostaw puste, aby użyć domyślnego.",
     "proxyAdditionalSubmit": "Zapisz ustawienia proxy",
@@ -570,7 +572,7 @@
     "rulesMatchType": "Typ dopasowania",
     "value": "Wartość",
     "rulesAbout": "O regułach",
-    "rulesAboutDescription": "Reguły pozwalają kontrolować dostęp do zasobu na podstawie zestawu kryteriów. Możesz tworzyć reguły zezwalające lub odmawiające dostępu na podstawie adresu IP lub ścieżki URL.",
+    "rulesAboutDescription": "Rules allow you to control access to the resource based on a set of criteria. You can create rules to allow or deny access based on IP address or URL path.",
     "rulesActions": "Akcje",
     "rulesActionAlwaysAllow": "Zawsze zezwalaj: Pomiń wszystkie metody uwierzytelniania",
     "rulesActionAlwaysDeny": "Zawsze odmawiaj: Blokuj wszystkie żądania; nie można próbować uwierzytelniania",
@@ -582,7 +584,7 @@
     "rulesEnable": "Włącz reguły",
     "rulesEnableDescription": "Włącz lub wyłącz ocenę reguł dla tego zasobu",
     "rulesResource": "Konfiguracja reguł zasobu",
-    "rulesResourceDescription": "Skonfiguruj reguły kontroli dostępu do zasobu",
+    "rulesResourceDescription": "Configure rules to control access to the resource",
     "ruleSubmit": "Dodaj regułę",
     "rulesNoOne": "Brak reguł. Dodaj regułę używając formularza.",
     "rulesOrder": "Reguły są oceniane według priorytetu w kolejności rosnącej.",
@@ -598,7 +600,7 @@
     "none": "Brak",
     "unknown": "Nieznany",
     "resources": "Zasoby",
-    "resourcesDescription": "Zasoby są proxy do aplikacji działających w Twojej sieci prywatnej. Utwórz zasób dla dowolnej usługi HTTP/HTTPS lub surowej TCP/UDP w Twojej sieci prywatnej. Każdy zasób musi być połączony z witryną, aby umożliwić prywatne, bezpieczne połączenie przez zaszyfrowany tunel WireGuard.",
+    "resourcesDescription": "Resources are proxies to applications running on the private network. Create a resource for any HTTP/HTTPS or raw TCP/UDP service on your private network. Each resource must be connected to a site to enable private, secure connectivity through an encrypted WireGuard tunnel.",
     "resourcesWireGuardConnect": "Bezpieczne połączenie z szyfrowaniem WireGuard",
     "resourcesMultipleAuthenticationMethods": "Skonfiguruj wiele metod uwierzytelniania",
     "resourcesUsersRolesAccess": "Kontrola dostępu oparta na użytkownikach i rolach",
@@ -609,7 +611,7 @@
     "resourceSelect": "Wybierz zasób",
     "shareLinks": "Linki udostępniania",
     "share": "Linki do udostępniania",
-    "shareDescription2": "Twórz linki do udostępniania swoich zasobów. Linki zapewniają tymczasowy lub nieograniczony dostęp do zasobu. Podczas tworzenia linku możesz skonfigurować okres jego ważności.",
+    "shareDescription2": "Create shareable links to resources. Links provide temporary or unlimited access to your resource. You can configure the expiration duration of the link when you create one.",
     "shareEasyCreate": "Łatwe tworzenie i udostępnianie",
     "shareConfigurableExpirationDuration": "Konfigurowalny okres ważności",
     "shareSecureAndRevocable": "Bezpieczne i odwoływalne",
@@ -619,19 +621,19 @@
     "unknownCommand": "Nieznane polecenie",
     "newtErrorFetchReleases": "Nie udało się pobrać informacji o wydaniu: {err}",
     "newtErrorFetchLatest": "Błąd podczas pobierania najnowszego wydania: {err}",
-    "newtEndpoint": "Punkt końcowy Newt",
-    "newtId": "ID Newt",
-    "newtSecretKey": "Klucz tajny Newt",
+    "newtEndpoint": "Endpoint",
+    "newtId": "ID",
+    "newtSecretKey": "Secret",
     "architecture": "Architektura",
     "sites": "Witryny",
-    "siteWgAnyClients": "Użyj dowolnego klienta WireGuard do połączenia. Będziesz musiał adresować swoje zasoby wewnętrzne używając IP peera.",
+    "siteWgAnyClients": "Use any WireGuard client to connect. You will have to address internal resources using the peer IP.",
     "siteWgCompatibleAllClients": "Kompatybilny ze wszystkimi klientami WireGuard",
     "siteWgManualConfigurationRequired": "Wymagana konfiguracja ręczna",
     "userErrorNotAdminOrOwner": "Użytkownik nie jest administratorem ani właścicielem",
     "pangolinSettings": "Ustawienia - Pangolin",
     "accessRoleYour": "Twoja rola:",
-    "accessRoleSelect2": "Wybierz rolę",
-    "accessUserSelect": "Wybierz użytkownika",
+    "accessRoleSelect2": "Select roles",
+    "accessUserSelect": "Select users",
     "otpEmailEnter": "Wprowadź adres e-mail",
     "otpEmailEnterDescription": "Naciśnij enter, aby dodać adres e-mail po wpisaniu go w polu.",
     "otpEmailErrorInvalid": "Nieprawidłowy adres e-mail. Znak wieloznaczny (*) musi być całą częścią lokalną.",
@@ -683,7 +685,7 @@
     "resourcePincodeSetupTitle": "Ustaw kod PIN",
     "resourcePincodeSetupTitleDescription": "Ustaw kod PIN, aby chronić ten zasób",
     "resourceRoleDescription": "Administratorzy zawsze mają dostęp do tego zasobu.",
-    "resourceUsersRoles": "Użytkownicy i role",
+    "resourceUsersRoles": "Access Controls",
     "resourceUsersRolesDescription": "Skonfiguruj, którzy użytkownicy i role mogą odwiedzać ten zasób",
     "resourceUsersRolesSubmit": "Zapisz użytkowników i role",
     "resourceWhitelistSave": "Zapisano pomyślnie",
@@ -779,15 +781,15 @@
     "idpOidcConfigure": "Konfiguracja OAuth2/OIDC",
     "idpOidcConfigureDescription": "Skonfiguruj punkty końcowe i poświadczenia dostawcy OAuth2/OIDC",
     "idpClientId": "ID klienta",
-    "idpClientIdDescription": "ID klienta OAuth2 od twojego dostawcy tożsamości",
+    "idpClientIdDescription": "The OAuth2 client ID from the identity provider",
     "idpClientSecret": "Sekret klienta",
-    "idpClientSecretDescription": "Sekret klienta OAuth2 od twojego dostawcy tożsamości",
+    "idpClientSecretDescription": "The OAuth2 client secret from the identity provider",
     "idpAuthUrl": "URL autoryzacji",
     "idpAuthUrlDescription": "URL punktu końcowego autoryzacji OAuth2",
     "idpTokenUrl": "URL tokena",
     "idpTokenUrlDescription": "URL punktu końcowego tokena OAuth2",
     "idpOidcConfigureAlert": "Ważna informacja",
-    "idpOidcConfigureAlertDescription": "Po utworzeniu dostawcy tożsamości, będziesz musiał skonfigurować URL wywołania zwrotnego w ustawieniach swojego dostawcy tożsamości. URL wywołania zwrotnego zostanie podany po pomyślnym utworzeniu.",
+    "idpOidcConfigureAlertDescription": "After creating the identity provider, you will need to configure the callback URL in the identity provider's settings. The callback URL will be provided after successful creation.",
     "idpToken": "Konfiguracja tokena",
     "idpTokenDescription": "Skonfiguruj jak wydobywać informacje o użytkowniku z tokena ID",
     "idpJmespathAbout": "O JMESPath",
@@ -804,7 +806,7 @@
     "idpSubmit": "Utwórz dostawcę tożsamości",
     "orgPolicies": "Polityki organizacji",
     "idpSettings": "Ustawienia {idpName}",
-    "idpCreateSettingsDescription": "Skonfiguruj ustawienia dla swojego dostawcy tożsamości",
+    "idpCreateSettingsDescription": "Configure the settings for the identity provider",
     "roleMapping": "Mapowanie ról",
     "orgMapping": "Mapowanie organizacji",
     "orgPoliciesSearch": "Szukaj polityk organizacji...",
@@ -839,7 +841,7 @@
     "idpUpdatedDescription": "Dostawca tożsamości został pomyślnie zaktualizowany",
     "redirectUrl": "URL przekierowania",
     "redirectUrlAbout": "O URL przekierowania",
-    "redirectUrlAboutDescription": "Jest to URL, na który użytkownicy zostaną przekierowani po uwierzytelnieniu. Musisz skonfigurować ten URL w ustawieniach swojego dostawcy tożsamości.",
+    "redirectUrlAboutDescription": "This is the URL to which users will be redirected after authentication. You need to configure this URL in the identity provider's settings.",
     "pangolinAuth": "Autoryzacja - Pangolin",
     "verificationCodeLengthRequirements": "Twój kod weryfikacyjny musi mieć 8 znaków.",
     "errorOccurred": "Wystąpił błąd",
@@ -922,6 +924,10 @@
     "passwordResetSent": "Wyślemy kod resetowania hasła na ten adres e-mail.",
     "passwordResetCode": "Kod resetowania",
     "passwordResetCodeDescription": "Sprawdź swój e-mail, aby znaleźć kod resetowania.",
+    "generatePasswordResetCode": "Generate Password Reset Code",
+    "passwordResetCodeGenerated": "Password Reset Code Generated",
+    "passwordResetCodeGeneratedDescription": "Share this code with the user. They can use it to reset their password.",
+    "passwordResetUrl": "Reset URL",
     "passwordNew": "Nowe hasło",
     "passwordNewConfirm": "Potwierdź nowe hasło",
     "changePassword": "Zmień hasło",
@@ -939,6 +945,9 @@
     "pincodeAuth": "Kod uwierzytelniający",
     "pincodeSubmit2": "Wyślij kod",
     "passwordResetSubmit": "Zażądaj resetowania",
+    "passwordResetAlreadyHaveCode": "Enter Password Reset Code",
+    "passwordResetSmtpRequired": "Please contact your administrator",
+    "passwordResetSmtpRequiredDescription": "A password reset code is required to reset your password. Please contact your administrator for assistance.",
     "passwordBack": "Powrót do hasła",
     "loginBack": "Wróć do logowania",
     "signup": "Zarejestruj się",
@@ -1104,12 +1113,15 @@
     "actionListSiteResources": "Lista zasobów strony",
     "actionUpdateSiteResource": "Aktualizuj zasób strony",
     "actionListInvitations": "Lista zaproszeń",
+    "actionExportLogs": "Export Logs",
+    "actionViewLogs": "View Logs",
     "noneSelected": "Nie wybrano",
     "orgNotFound2": "Nie znaleziono organizacji.",
     "searchProgress": "Szukaj...",
     "create": "Utwórz",
     "orgs": "Organizacje",
     "loginError": "Wystąpił błąd podczas logowania",
+    "loginRequiredForDevice": "Login is required to authenticate your device.",
     "passwordForgot": "Zapomniałeś hasła?",
     "otpAuth": "Uwierzytelnianie dwuskładnikowe",
     "otpAuthDescription": "Wprowadź kod z aplikacji uwierzytelniającej lub jeden z jednorazowych kodów zapasowych.",
@@ -1164,23 +1176,29 @@
     "sidebarHome": "Strona główna",
     "sidebarSites": "Witryny",
     "sidebarResources": "Zasoby",
+    "sidebarProxyResources": "Public",
+    "sidebarClientResources": "Private",
     "sidebarAccessControl": "Kontrola dostępu",
+    "sidebarLogsAndAnalytics": "Logs & Analytics",
     "sidebarUsers": "Użytkownicy",
+    "sidebarAdmin": "Admin",
     "sidebarInvitations": "Zaproszenia",
     "sidebarRoles": "Role",
-    "sidebarShareableLinks": "Linki do udostępnienia",
+    "sidebarShareableLinks": "Links",
     "sidebarApiKeys": "Klucze API",
     "sidebarSettings": "Ustawienia",
     "sidebarAllUsers": "Wszyscy użytkownicy",
     "sidebarIdentityProviders": "Dostawcy tożsamości",
     "sidebarLicense": "Licencja",
     "sidebarClients": "Klientami",
+    "sidebarUserDevices": "Users",
+    "sidebarMachineClients": "Machines",
     "sidebarDomains": "Domeny",
     "sidebarGeneral": "General",
     "sidebarLogAndAnalytics": "Log & Analytics",
     "sidebarBluePrints": "Schematy",
     "sidebarOrganization": "Organization",
-    "sidebarLogsAnalytics": "Request Analytics",
+    "sidebarLogsAnalytics": "Analytics",
     "blueprints": "Schematy",
     "blueprintsDescription": "Zastosuj konfiguracje deklaracyjne i wyświetl poprzednie operacje",
     "blueprintAdd": "Dodaj schemat",
@@ -1191,7 +1209,7 @@
     "blueprintDetailsDescription": "Zobacz wynik zastosowanego schematu i wszelkie błędy, które wystąpiły",
     "blueprintInfo": "Informacje o projekcie",
     "message": "Wiadomość",
-    "blueprintContentsDescription": "Zdefiniuj zawartość YAML opisującą Twoją infrastrukturę",
+    "blueprintContentsDescription": "Define the YAML content describing the infrastructure",
     "blueprintErrorCreateDescription": "Wystąpił błąd podczas stosowania schematu",
     "blueprintErrorCreate": "Błąd podczas tworzenia schematu",
     "searchBlueprintProgress": "Szukaj schematów...",
@@ -1247,15 +1265,15 @@
     "loading": "Ładowanie",
     "restart": "Uruchom ponownie",
     "domains": "Domeny",
-    "domainsDescription": "Zarządzaj domenami swojej organizacji",
+    "domainsDescription": "Create and manage domains available in the organization",
     "domainsSearch": "Szukaj domen...",
     "domainAdd": "Dodaj domenę",
-    "domainAddDescription": "Zarejestruj nową domenę w swojej organizacji",
+    "domainAddDescription": "Register a new domain with to the organization",
     "domainCreate": "Utwórz domenę",
     "domainCreatedDescription": "Domena utworzona pomyślnie",
     "domainDeletedDescription": "Domena usunięta pomyślnie",
-    "domainQuestionRemove": "Czy na pewno chcesz usunąć domenę ze swojego konta?",
-    "domainMessageRemove": "Po usunięciu domena nie będzie już powiązana z twoim kontem.",
+    "domainQuestionRemove": "Are you sure you want to remove the domain?",
+    "domainMessageRemove": "Once removed, the domain will no longer be associated with the organization.",
     "domainConfirmDelete": "Potwierdź usunięcie domeny",
     "domainDelete": "Usuń domenę",
     "domain": "Domena",
@@ -1274,7 +1292,7 @@
     "pending": "Oczekuje",
     "sidebarBilling": "Fakturowanie",
     "billing": "Fakturowanie",
-    "orgBillingDescription": "Zarządzaj swoimi informacjami rozliczeniowymi i subskrypcjami",
+    "orgBillingDescription": "Manage billing information and subscriptions",
     "github": "GitHub",
     "pangolinHosted": "Logo Pangolin",
     "fossorial": "Fossorial",
@@ -1317,7 +1335,7 @@
     "domainPickerSortAsc": "A-Z",
     "domainPickerSortDesc": "Z-A",
     "domainPickerCheckingAvailability": "Sprawdzanie dostępności...",
-    "domainPickerNoMatchingDomains": "Nie znaleziono pasujących domen. Spróbuj innej domeny lub sprawdź ustawienia domeny swojej organizacji.",
+    "domainPickerNoMatchingDomains": "No matching domains found. Try a different domain or check the organization's domain settings.",
     "domainPickerOrganizationDomains": "Domeny organizacji",
     "domainPickerProvidedDomains": "Dostarczone domeny",
     "domainPickerSubdomain": "Subdomena: {subdomain}",
@@ -1351,7 +1369,7 @@
     "billingModifySubscription": "Modyfikuj Subskrypcję",
     "billingStartSubscription": "Rozpocznij Subskrypcję",
     "billingRecurringCharge": "Opłata Cyklowa",
-    "billingManageSubscriptionSettings": "Zarządzaj ustawieniami i preferencjami subskrypcji",
+    "billingManageSubscriptionSettings": "Manage subscription settings and preferences",
     "billingNoActiveSubscription": "Nie masz aktywnej subskrypcji. Rozpocznij subskrypcję, aby zwiększyć limity użytkowania.",
     "billingFailedToLoadSubscription": "Nie udało się załadować subskrypcji",
     "billingFailedToLoadUsage": "Nie udało się załadować użycia",
@@ -1362,9 +1380,9 @@
     "billingPortalError": "Błąd Portalu",
     "billingDataUsageInfo": "Jesteś obciążony za wszystkie dane przesyłane przez bezpieczne tunele, gdy jesteś podłączony do chmury. Obejmuje to zarówno ruch przychodzący, jak i wychodzący we wszystkich Twoich witrynach. Gdy osiągniesz swój limit, twoje strony zostaną rozłączone, dopóki nie zaktualizujesz planu lub nie ograniczysz użycia. Dane nie będą naliczane przy użyciu węzłów.",
     "billingOnlineTimeInfo": "Opłata zależy od tego, jak długo twoje strony pozostają połączone z chmurą. Na przykład 44,640 minut oznacza jedną stronę działającą 24/7 przez cały miesiąc. Kiedy osiągniesz swój limit, twoje strony zostaną rozłączone, dopóki nie zaktualizujesz planu lub nie zmniejsz jego wykorzystania. Czas nie będzie naliczany przy użyciu węzłów.",
-    "billingUsersInfo": "Jesteś obciążany za każdego użytkownika w twojej organizacji. Rozliczenia są obliczane codziennie na podstawie liczby aktywnych kont użytkowników w twojej organizacji.",
-    "billingDomainInfo": "Jesteś obciążany za każdą domenę w twojej organizacji. Rozliczenia są obliczane codziennie na podstawie liczby aktywnych kont domen w twojej organizacji.",
-    "billingRemoteExitNodesInfo": "Jesteś obciążany za każdy zarządzany węzeł w twojej organizacji. Rozliczenia są obliczane codziennie na podstawie liczby aktywnych zarządzanych węzłów w twojej organizacji.",
+    "billingUsersInfo": "You're charged for each user in the organization. Billing is calculated daily based on the number of active user accounts in your org.",
+    "billingDomainInfo": "You're charged for each domain in the organization. Billing is calculated daily based on the number of active domain accounts in your org.",
+    "billingRemoteExitNodesInfo": "You're charged for each managed Node in the organization. Billing is calculated daily based on the number of active managed Nodes in your org.",
     "domainNotFound": "Nie znaleziono domeny",
     "domainNotFoundDescription": "Zasób jest wyłączony, ponieważ domena nie istnieje już w naszym systemie. Proszę ustawić nową domenę dla tego zasobu.",
     "failed": "Niepowodzenie",
@@ -1456,23 +1474,23 @@
     "errorCreatingClient": "Błąd podczas tworzenia klienta",
     "clientDefaultsNotFound": "Nie znaleziono domyślnych ustawień klienta",
     "createClient": "Utwórz Klienta",
-    "createClientDescription": "Utwórz nowego klienta do łączenia się z Twoimi witrynami",
+    "createClientDescription": "Create a new client to access private resources",
     "seeAllClients": "Zobacz Wszystkich Klientów",
     "clientInformation": "Informacje o Kliencie",
     "clientNamePlaceholder": "Nazwa klienta",
     "address": "Adres",
     "subnetPlaceholder": "Podsieć",
-    "addressDescription": "Adres, którego ten klient będzie używać do łączności",
+    "addressDescription": "The internal address of the client. Must fall within the organization's subnet.",
     "selectSites": "Wybierz witryny",
     "sitesDescription": "Klient będzie miał łączność z wybranymi witrynami",
     "clientInstallOlm": "Zainstaluj Olm",
     "clientInstallOlmDescription": "Uruchom Olm na swoim systemie",
-    "clientOlmCredentials": "Poświadczenia Olm",
-    "clientOlmCredentialsDescription": "To jest sposób, w jaki Olm będzie się uwierzytelniać z serwerem",
-    "olmEndpoint": "Punkt Końcowy Olm",
-    "olmId": "Identyfikator Olm",
-    "olmSecretKey": "Tajny Klucz Olm",
-    "clientCredentialsSave": "Zapisz swoje poświadczenia",
+    "clientOlmCredentials": "Credentials",
+    "clientOlmCredentialsDescription": "This is how the client will authenticate with the server",
+    "olmEndpoint": "Endpoint",
+    "olmId": "ID",
+    "olmSecretKey": "Secret",
+    "clientCredentialsSave": "Save the Credentials",
     "clientCredentialsSaveDescription": "Będziesz mógł zobaczyć to tylko raz. Upewnij się, że skopiujesz go w bezpieczne miejsce.",
     "generalSettingsDescription": "Skonfiguruj ogólne ustawienia dla tego klienta",
     "clientUpdated": "Klient zaktualizowany",
@@ -1483,9 +1501,7 @@
     "sitesFetchError": "Wystąpił błąd podczas pobierania witryn.",
     "olmErrorFetchReleases": "Wystąpił błąd podczas pobierania wydań Olm.",
     "olmErrorFetchLatest": "Wystąpił błąd podczas pobierania najnowszego wydania Olm.",
-    "remoteSubnets": "Zdalne Podsieci",
     "enterCidrRange": "Wprowadź zakres CIDR",
-    "remoteSubnetsDescription": "Dodaj zakresy CIDR, które można uzyskać zdalnie z tej strony za pomocą klientów. Użyj formatu jak 10.0.0.0/24. Dotyczy to WYŁĄCZNIE łączności klienta VPN.",
     "resourceEnableProxy": "Włącz publiczny proxy",
     "resourceEnableProxyDescription": "Włącz publiczne proxy dla tego zasobu. To umożliwia dostęp do zasobu spoza sieci przez chmurę na otwartym porcie. Wymaga konfiguracji Traefik.",
     "externalProxyEnabled": "Zewnętrzny Proxy Włączony",
@@ -1503,14 +1519,15 @@
     "enableHealthChecksDescription": "Monitoruj zdrowie tego celu. Możesz monitorować inny punkt końcowy niż docelowy w razie potrzeby.",
     "healthScheme": "Metoda",
     "healthSelectScheme": "Wybierz metodę",
+    "healthCheckPortInvalid": "Health check port must be between 1 and 65535",
     "healthCheckPath": "Ścieżka",
     "healthHostname": "IP / Nazwa hosta",
     "healthPort": "Port",
     "healthCheckPathDescription": "Ścieżka do sprawdzania stanu zdrowia.",
-    "healthyIntervalSeconds": "Interwał Zdrowy",
-    "unhealthyIntervalSeconds": "Interwał Niezdrowy",
+    "healthyIntervalSeconds": "Healthy Interval (sec)",
+    "unhealthyIntervalSeconds": "Unhealthy Interval (sec)",
     "IntervalSeconds": "Interwał Zdrowy",
-    "timeoutSeconds": "Limit Czasu",
+    "timeoutSeconds": "Timeout (sec)",
     "timeIsInSeconds": "Czas w sekundach",
     "retryAttempts": "Próby Ponowienia",
     "expectedResponseCodes": "Oczekiwane Kody Odpowiedzi",
@@ -1546,12 +1563,12 @@
     "resourceEditDomain": "Edytuj domenę",
     "siteName": "Nazwa strony",
     "proxyPort": "Port",
-    "resourcesTableProxyResources": "Zasoby proxy",
-    "resourcesTableClientResources": "Zasoby klienta",
+    "resourcesTableProxyResources": "Public",
+    "resourcesTableClientResources": "Private",
     "resourcesTableNoProxyResourcesFound": "Nie znaleziono zasobów proxy.",
     "resourcesTableNoInternalResourcesFound": "Nie znaleziono wewnętrznych zasobów.",
     "resourcesTableDestination": "Miejsce docelowe",
-    "resourcesTableTheseResourcesForUseWith": "Te zasoby są do użytku z",
+    "resourcesTableAlias": "Alias",
     "resourcesTableClients": "Klientami",
     "resourcesTableAndOnlyAccessibleInternally": "i są dostępne tylko wewnętrznie po połączeniu z klientem.",
     "resourcesTableNoTargets": "Brak celów",
@@ -1560,8 +1577,8 @@
     "resourcesTableOffline": "Offline",
     "resourcesTableUnknown": "Nieznane",
     "resourcesTableNotMonitored": "Nie monitorowano",
-    "editInternalResourceDialogEditClientResource": "Edytuj zasób klienta",
-    "editInternalResourceDialogUpdateResourceProperties": "Zaktualizuj właściwości zasobu i konfigurację celu dla {resourceName}.",
+    "editInternalResourceDialogEditClientResource": "Edit Private Resource",
+    "editInternalResourceDialogUpdateResourceProperties": "Update the resource configuration and access controls for {resourceName}",
     "editInternalResourceDialogResourceProperties": "Właściwości zasobów",
     "editInternalResourceDialogName": "Nazwa",
     "editInternalResourceDialogProtocol": "Protokół",
@@ -1580,11 +1597,22 @@
     "editInternalResourceDialogInvalidIPAddressFormat": "Nieprawidłowy format adresu IP",
     "editInternalResourceDialogDestinationPortMin": "Port docelowy musi wynosić przynajmniej 1",
     "editInternalResourceDialogDestinationPortMax": "Port docelowy nie może być większy niż 65536",
+    "editInternalResourceDialogPortModeRequired": "Protocol, proxy port, and destination port are required for port mode",
+    "editInternalResourceDialogMode": "Mode",
+    "editInternalResourceDialogModePort": "Port",
+    "editInternalResourceDialogModeHost": "Host",
+    "editInternalResourceDialogModeCidr": "CIDR",
+    "editInternalResourceDialogDestination": "Destination",
+    "editInternalResourceDialogDestinationHostDescription": "The IP address or hostname of the resource on the site's network.",
+    "editInternalResourceDialogDestinationIPDescription": "The IP or hostname address of the resource on the site's network.",
+    "editInternalResourceDialogDestinationCidrDescription": "The CIDR range of the resource on the site's network.",
+    "editInternalResourceDialogAlias": "Alias",
+    "editInternalResourceDialogAliasDescription": "An optional internal DNS alias for this resource.",
     "createInternalResourceDialogNoSitesAvailable": "Brak dostępnych stron",
     "createInternalResourceDialogNoSitesAvailableDescription": "Musisz mieć co najmniej jedną stronę Newt z skonfigurowanym podsiecią, aby tworzyć wewnętrzne zasoby.",
     "createInternalResourceDialogClose": "Zamknij",
-    "createInternalResourceDialogCreateClientResource": "Utwórz zasób klienta",
-    "createInternalResourceDialogCreateClientResourceDescription": "Utwórz nowy zasób, który będzie dostępny dla klientów połączonych z wybraną stroną.",
+    "createInternalResourceDialogCreateClientResource": "Create Private Resource",
+    "createInternalResourceDialogCreateClientResourceDescription": "Create a new resource that will only be accessible to clients connected to the organization",
     "createInternalResourceDialogResourceProperties": "Właściwości zasobów",
     "createInternalResourceDialogName": "Nazwa",
     "createInternalResourceDialogSite": "Witryna",
@@ -1613,11 +1641,22 @@
     "createInternalResourceDialogInvalidIPAddressFormat": "Nieprawidłowy format adresu IP",
     "createInternalResourceDialogDestinationPortMin": "Port docelowy musi wynosić przynajmniej 1",
     "createInternalResourceDialogDestinationPortMax": "Port docelowy nie może być większy niż 65536",
+    "createInternalResourceDialogPortModeRequired": "Protocol, proxy port, and destination port are required for port mode",
+    "createInternalResourceDialogMode": "Mode",
+    "createInternalResourceDialogModePort": "Port",
+    "createInternalResourceDialogModeHost": "Host",
+    "createInternalResourceDialogModeCidr": "CIDR",
+    "createInternalResourceDialogDestination": "Destination",
+    "createInternalResourceDialogDestinationHostDescription": "The IP address or hostname of the resource on the site's network.",
+    "createInternalResourceDialogDestinationCidrDescription": "The CIDR range of the resource on the site's network.",
+    "createInternalResourceDialogAlias": "Alias",
+    "createInternalResourceDialogAliasDescription": "An optional internal DNS alias for this resource.",
     "siteConfiguration": "Konfiguracja",
     "siteAcceptClientConnections": "Akceptuj połączenia klienta",
-    "siteAcceptClientConnectionsDescription": "Pozwól innym urządzeniom połączyć się przez tę instancję Newt jako bramę za pomocą klientów.",
-    "siteAddress": "Adres strony",
-    "siteAddressDescription": "Podaj adres IP hosta, do którego klienci będą się łączyć. Jest to wewnętrzny adres strony w sieci Pangolin dla klientów do adresowania. Musi zawierać się w podsieci organizacji.",
+    "siteAcceptClientConnectionsDescription": "Allow user devices and clients to access resources on this site. This can be changed later.",
+    "siteAddress": "Site Address (Advanced)",
+    "siteAddressDescription": "The internal address of the site. Must fall within the organization's subnet.",
+    "siteNameDescription": "The display name of the site that can be changed later.",
     "autoLoginExternalIdp": "Automatyczny login z zewnętrznym IDP",
     "autoLoginExternalIdpDescription": "Natychmiastowe przekierowanie użytkownika do zewnętrznego IDP w celu uwierzytelnienia.",
     "selectIdp": "Wybierz IDP",
@@ -1631,7 +1670,7 @@
     "autoLoginErrorNoRedirectUrl": "Nie otrzymano URL przekierowania od dostawcy tożsamości.",
     "autoLoginErrorGeneratingUrl": "Nie udało się wygenerować URL uwierzytelniania.",
     "remoteExitNodeManageRemoteExitNodes": "Zdalne węzły",
-    "remoteExitNodeDescription": "Samodzielny host jeden lub więcej węzłów zdalnych, aby rozszerzyć łączność z siecią i zmniejszyć zależność od chmury",
+    "remoteExitNodeDescription": "Self-host one or more remote nodes to extend network connectivity and reduce reliance on the cloud",
     "remoteExitNodes": "Węzły",
     "searchRemoteExitNodes": "Szukaj węzłów...",
     "remoteExitNodeAdd": "Dodaj węzeł",
@@ -1643,11 +1682,11 @@
     "sidebarRemoteExitNodes": "Zdalne węzły",
     "remoteExitNodeCreate": {
         "title": "Utwórz węzeł",
-        "description": "Utwórz nowy węzeł, aby rozszerzyć połączenie z siecią",
+        "description": "Create a new node to extend network connectivity",
         "viewAllButton": "Zobacz wszystkie węzły",
         "strategy": {
             "title": "Strategia Tworzenia",
-            "description": "Wybierz to, aby ręcznie skonfigurować węzeł lub wygenerować nowe poświadczenia.",
+            "description": "Choose this to manually configure the node or generate new credentials.",
             "adopt": {
                 "title": "Zaadoptuj Węzeł",
                 "description": "Wybierz to, jeśli masz już dane logowania dla węzła."
@@ -1668,7 +1707,7 @@
         },
         "generate": {
             "title": "Wygenerowane Poświadczenia",
-            "description": "Użyj tych danych logowania, aby skonfigurować węzeł",
+            "description": "Use these generated credentials to configure the node",
             "nodeIdTitle": "ID węzła",
             "secretTitle": "Sekret",
             "saveCredentialsTitle": "Dodaj Poświadczenia do Konfiguracji",
@@ -1744,16 +1783,16 @@
     "idpTypeLabel": "Typ dostawcy tożsamości",
     "roleMappingExpressionPlaceholder": "np. zawiera(grupy, 'admin') && 'Admin' || 'Członek'",
     "idpGoogleConfiguration": "Konfiguracja Google",
-    "idpGoogleConfigurationDescription": "Skonfiguruj swoje poświadczenia Google OAuth2",
-    "idpGoogleClientIdDescription": "Twój identyfikator klienta Google OAuth2",
-    "idpGoogleClientSecretDescription": "Twój klucz klienta Google OAuth2",
+    "idpGoogleConfigurationDescription": "Configure the Google OAuth2 credentials",
+    "idpGoogleClientIdDescription": "Google OAuth2 Client ID",
+    "idpGoogleClientSecretDescription": "Google OAuth2 Client Secret",
     "idpAzureConfiguration": "Konfiguracja Azure Entra ID",
-    "idpAzureConfigurationDescription": "Skonfiguruj swoje dane logowania OAuth2 Azure Entra",
+    "idpAzureConfigurationDescription": "Configure Azure Entra ID OAuth2 credentials",
     "idpTenantId": "ID Najemcy",
-    "idpTenantIdPlaceholder": "twoj-lokator",
-    "idpAzureTenantIdDescription": "Twój identyfikator dzierżawcy Azure (znaleziony w Podglądzie Azure Active Directory",
-    "idpAzureClientIdDescription": "Twój identyfikator klienta rejestracji aplikacji Azure",
-    "idpAzureClientSecretDescription": "Klucz tajny Twojego klienta rejestracji aplikacji Azure",
+    "idpTenantIdPlaceholder": "tenant-id",
+    "idpAzureTenantIdDescription": "Azure tenant ID (found in Azure Active Directory overview)",
+    "idpAzureClientIdDescription": "Azure App Registration Client ID",
+    "idpAzureClientSecretDescription": "Azure App Registration Client Secret",
     "idpGoogleTitle": "Google",
     "idpGoogleAlt": "Google",
     "idpAzureTitle": "Azure Entra ID",
@@ -1761,14 +1800,14 @@
     "idpGoogleConfigurationTitle": "Konfiguracja Google",
     "idpAzureConfigurationTitle": "Konfiguracja Azure Entra ID",
     "idpTenantIdLabel": "ID Najemcy",
-    "idpAzureClientIdDescription2": "Twój identyfikator klienta rejestracji aplikacji Azure",
-    "idpAzureClientSecretDescription2": "Klucz tajny Twojego klienta rejestracji aplikacji Azure",
+    "idpAzureClientIdDescription2": "Azure App Registration Client ID",
+    "idpAzureClientSecretDescription2": "Azure App Registration Client Secret",
     "idpGoogleDescription": "Dostawca Google OAuth2/OIDC",
     "idpAzureDescription": "Microsoft Azure OAuth2/OIDC provider",
     "subnet": "Podsieć",
     "subnetDescription": "Podsieć dla konfiguracji sieci tej organizacji.",
     "authPage": "Strona uwierzytelniania",
-    "authPageDescription": "Skonfiguruj stronę uwierzytelniania dla swojej organizacji",
+    "authPageDescription": "Configure the auth page for the organization",
     "authPageDomain": "Domena strony uwierzytelniania",
     "noDomainSet": "Nie ustawiono domeny",
     "changeDomain": "Zmień domenę",
@@ -1778,7 +1817,7 @@
     "setAuthPageDomain": "Ustaw domenę strony uwierzytelniania",
     "failedToFetchCertificate": "Nie udało się pobrać certyfikatu",
     "failedToRestartCertificate": "Nie udało się ponownie uruchomić certyfikatu",
-    "addDomainToEnableCustomAuthPages": "Dodaj domenę, aby włączyć niestandardowe strony uwierzytelniania dla Twojej organizacji",
+    "addDomainToEnableCustomAuthPages": "Add a domain to enable custom authentication pages for the organization",
     "selectDomainForOrgAuthPage": "Wybierz domenę dla strony uwierzytelniania organizacji",
     "domainPickerProvidedDomain": "Dostarczona domena",
     "domainPickerFreeProvidedDomain": "Darmowa oferowana domena",
@@ -1793,7 +1832,7 @@
     "domainPickerInvalidSubdomainCannotMakeValid": "\"{sub}\" nie może być poprawne dla {domain}.",
     "domainPickerSubdomainSanitized": "Poddomena oczyszczona",
     "domainPickerSubdomainCorrected": "\"{sub}\" został skorygowany do \"{sanitized}\"",
-    "orgAuthSignInTitle": "Zaloguj się do swojej organizacji",
+    "orgAuthSignInTitle": "Sign in to the organization",
     "orgAuthChooseIdpDescription": "Wybierz swojego dostawcę tożsamości, aby kontynuować",
     "orgAuthNoIdpConfigured": "Ta organizacja nie ma skonfigurowanych żadnych dostawców tożsamości. Zamiast tego możesz zalogować się za pomocą swojej tożsamości Pangolin.",
     "orgAuthSignInWithPangolin": "Zaloguj się używając Pangolin",
@@ -1811,7 +1850,7 @@
     "enableTwoFactorAuthentication": "Włącz uwierzytelnianie dwuskładnikowe",
     "completeSecuritySteps": "Zakończ kroki bezpieczeństwa",
     "securitySettings": "Ustawienia zabezpieczeń",
-    "securitySettingsDescription": "Skonfiguruj politykę bezpieczeństwa dla Twojej organizacji",
+    "securitySettingsDescription": "Configure security policies for the organization",
     "requireTwoFactorForAllUsers": "Wymagaj uwierzytelniania dwuetapowego dla wszystkich użytkowników",
     "requireTwoFactorDescription": "Po włączeniu wszyscy użytkownicy wewnętrzni w tej organizacji muszą mieć włączone uwierzytelnianie dwuskładnikowe, aby uzyskać dostęp do organizacji.",
     "requireTwoFactorDisabledDescription": "Ta funkcja wymaga poprawnej licencji (Enterprise) lub aktywnej subskrypcji (SaaaS)",
@@ -1874,8 +1913,12 @@
     "enterpriseEdition": "Edycja Enterprise",
     "unlicensed": "Nielicencjonowane",
     "beta": "Beta",
-    "manageClients": "Zarządzaj klientami",
-    "manageClientsDescription": "Klienci to urządzenia, które mogą łączyć się z Twoimi witrynami",
+    "manageUserDevices": "User Devices",
+    "manageUserDevicesDescription": "View and manage devices that users use to privately connect to resources",
+    "manageMachineClients": "Manage Machine Clients",
+    "manageMachineClientsDescription": "Create and manage clients that servers and systems use to privately connect to resources",
+    "clientsTableUserClients": "User",
+    "clientsTableMachineClients": "Machine",
     "licenseTableValidUntil": "Ważny do",
     "saasLicenseKeysSettingsTitle": "Licencje przedsiębiorstwa",
     "saasLicenseKeysSettingsDescription": "Generuj i zarządzaj kluczami licencyjnymi Enterprise dla samodzielnych instancji Pangolin",
@@ -2075,7 +2118,7 @@
     "preferWildcardCert": "Preferuj Certyfikat Wildcard",
     "unverified": "Niezweryfikowane",
     "domainSetting": "Ustawienia domeny",
-    "domainSettingDescription": "Skonfiguruj ustawienia domeny",
+    "domainSettingDescription": "Configure settings for the domain",
     "preferWildcardCertDescription": "Próba wygenerowania certyfikatu wieloznacznego (wymaga poprawnie skonfigurowanego resolwera certyfikatów).",
     "recordName": "Nazwa rekordu",
     "auto": "Auto",
@@ -2089,15 +2132,15 @@
     "olmUpdateAvailableInfo": "Dostępna jest zaktualizowana wersja Olm. Zaktualizuj do najnowszej wersji, aby uzyskać najlepsze doświadczenia.",
     "client": "Klient",
     "proxyProtocol": "Ustawienia protokołu proxy",
-    "proxyProtocolDescription": "Skonfiguruj protokół Proxy aby zachować adresy IP klienta dla usług TCP/UDP.",
+    "proxyProtocolDescription": "Configure Proxy Protocol to preserve client IP addresses for TCP services.",
     "enableProxyProtocol": "Włącz protokół proxy",
-    "proxyProtocolInfo": "Zachowaj adresy IP klienta dla backendów TCP/UDP",
+    "proxyProtocolInfo": "Preserve client IP addresses for TCP backends",
     "proxyProtocolVersion": "Wersja protokołu proxy",
     "version1": " Wersja 1 (zalecane)",
     "version2": "Wersja 2",
     "versionDescription": "Wersja 1 jest oparta na tekście i szeroko wspierana. Wersja 2 jest binarna i bardziej efektywna, ale mniej kompatybilna.",
     "warning": "Ostrzeżenie",
-    "proxyProtocolWarning": "Twoja aplikacja backend musi być skonfigurowana tak, aby przyjmować połączenia z protokołem proxy. Jeśli Twój backend nie obsługuje protokołu proxy, włączenie to spowoduje przerwanie wszystkich połączeń. Upewnij się, że konfiguracja twojego backendu do zaufanych nagłówków protokołu proxy z Traefik.",
+    "proxyProtocolWarning": "The backend application must be configured to accept Proxy Protocol connections. If your backend doesn't support Proxy Protocol, enabling this will break all connections so only enable this if you know what you're doing. Make sure to configure your backend to trust Proxy Protocol headers from Traefik.",
     "restarting": "Restartowanie...",
     "manual": "Ręcznie",
     "messageSupport": "Obsługa wiadomości",
@@ -2120,6 +2163,43 @@
     "supportMessageSent": "Wiadomość wysłana!",
     "supportWillContact": "Wkrótce będziemy w kontakcie!",
     "selectLogRetention": "Wybierz zatrzymanie dziennika",
+    "terms": "Terms",
+    "privacy": "Privacy",
+    "security": "Security",
+    "docs": "Docs",
+    "deviceActivation": "Device activation",
+    "deviceCodeInvalidFormat": "Code must be 9 characters (e.g., A1AJ-N5JD)",
+    "deviceCodeInvalidOrExpired": "Invalid or expired code",
+    "deviceCodeVerifyFailed": "Failed to verify device code",
+    "signedInAs": "Signed in as",
+    "deviceCodeEnterPrompt": "Enter the code displayed on the device",
+    "continue": "Continue",
+    "deviceUnknownLocation": "Unknown location",
+    "deviceAuthorizationRequested": "This authorization was requested from {location} on {date}. Make sure you trust this device as it will get access to the account.",
+    "deviceLabel": "Device: {deviceName}",
+    "deviceWantsAccess": "wants to access your account",
+    "deviceExistingAccess": "Existing access:",
+    "deviceFullAccess": "Full access to your account",
+    "deviceOrganizationsAccess": "Access to all organizations your account has access to",
+    "deviceAuthorize": "Authorize {applicationName}",
+    "deviceConnected": "Device Connected!",
+    "deviceAuthorizedMessage": "Device is authorized to access your account.",
+    "pangolinCloud": "Pangolin Cloud",
+    "viewDevices": "View Devices",
+    "viewDevicesDescription": "Manage your connected devices",
+    "noDevices": "No devices found",
+    "dateCreated": "Date Created",
+    "unnamedDevice": "Unnamed Device",
+    "deviceQuestionRemove": "Are you sure you want to delete this device?",
+    "deviceMessageRemove": "This action cannot be undone.",
+    "deviceDeleteConfirm": "Delete Device",
+    "deleteDevice": "Delete Device",
+    "errorLoadingDevices": "Error loading devices",
+    "failedToLoadDevices": "Failed to load devices",
+    "deviceDeleted": "Device deleted",
+    "deviceDeletedDescription": "The device has been successfully deleted.",
+    "errorDeletingDevice": "Error deleting device",
+    "failedToDeleteDevice": "Failed to delete device",
     "showColumns": "Pokaż kolumny",
     "hideColumns": "Ukryj kolumny",
     "columnVisibility": "Widoczność kolumn",
@@ -2134,6 +2214,10 @@
     "enableSelected": "Włącz zaznaczone",
     "disableSelected": "Wyłącz zaznaczone",
     "checkSelectedStatus": "Sprawdź status zaznaczonych",
+    "clients": "Clients",
+    "accessClientSelect": "Select machine clients",
+    "resourceClientDescription": "Machine clients that can access this resource",
+    "regenerate": "Regenerate",
     "credentials": "Dane logowania",
     "savecredentials": "Zapisz dane logowania",
     "regeneratecredentials": "Przycisk ponownie",
@@ -2151,7 +2235,6 @@
     "endpoint": "Endpoint",
     "Id": "Id",
     "SecretKey": "Sekretny klucz",
-    "featureDisabledTooltip": "Ta funkcja jest dostępna tylko w planie przedsiębiorstwa i wymaga licencji, aby z niej korzystać.",
     "niceId": "Niepoprawne ID",
     "niceIdUpdated": "Zaktualizowano błędne ID",
     "niceIdUpdatedSuccessfully": "Zaktualizowano błędne ID",
@@ -2160,5 +2243,15 @@
     "niceIdCannotBeEmpty": "Niepoprawny identyfikator nie może być pusty",
     "enterIdentifier": "Wprowadź identyfikator",
     "identifier": "Identifier",
-    "noData": "No Data"
+    "deviceLoginUseDifferentAccount": "Not you? Use a different account.",
+    "deviceLoginDeviceRequestingAccessToAccount": "A device is requesting access to this account.",
+    "noData": "No Data",
+    "machineClients": "Machine Clients",
+    "install": "Install",
+    "run": "Run",
+    "clientNameDescription": "The display name of the client that can be changed later.",
+    "clientAddress": "Client Address (Advanced)",
+    "setupFailedToFetchSubnet": "Failed to fetch default subnet",
+    "setupSubnetAdvanced": "Subnet (Advanced)",
+    "setupSubnetDescription": "The subnet for this organization's internal network."
 }

messages/pt-PT.json

@@ -1,12 +1,12 @@
 {
-    "setupCreate": "Crie sua organização, site e recursos",
+    "setupCreate": "Create the organization, site, and resources",
     "setupNewOrg": "Nova organização",
     "setupCreateOrg": "Criar Organização",
     "setupCreateResources": "Criar recursos",
     "setupOrgName": "Nome Da Organização",
-    "orgDisplayName": "Este é o nome de exibição da sua organização.",
+    "orgDisplayName": "This is the display name of the organization.",
     "orgId": "ID da organização",
-    "setupIdentifierMessage": "Este é o identificador exclusivo para sua organização. Isso é separado do nome de exibição.",
+    "setupIdentifierMessage": "This is the unique identifier for the organization.",
     "setupErrorIdentifier": "O ID da organização já existe. Por favor, escolha um diferente.",
     "componentsErrorNoMemberCreate": "Não é atualmente um membro de nenhuma organização. Crie uma organização para começar.",
     "componentsErrorNoMember": "Não é atualmente um membro de nenhuma organização.",
@@ -50,10 +50,10 @@
     "siteMessageRemove": "Uma vez removido, o site não estará mais acessível. Todas as metas associadas ao site também serão removidas.",
     "siteQuestionRemove": "Você tem certeza que deseja remover este site da organização?",
     "siteManageSites": "Gerir sites",
-    "siteDescription": "Permitir conectividade à sua rede através de túneis seguros",
+    "siteDescription": "Create and manage sites to enable connectivity to private networks",
     "siteCreate": "Criar site",
     "siteCreateDescription2": "Siga os passos abaixo para criar e conectar um novo site",
-    "siteCreateDescription": "Crie um novo site para começar a conectar seus recursos",
+    "siteCreateDescription": "Create a new site to start connecting resources",
     "close": "FECHAR",
     "siteErrorCreate": "Erro ao criar site",
     "siteErrorCreateKeyPair": "Par de chaves ou padrões do site não encontrados",
@@ -74,7 +74,7 @@
     "siteInstallNewt": "Instalar Novo",
     "siteInstallNewtDescription": "Novo item em execução no seu sistema",
     "WgConfiguration": "Configuração do WireGuard",
-    "WgConfigurationDescription": "Use a seguinte configuração para conectar-se à sua rede",
+    "WgConfigurationDescription": "Use the following configuration to connect to the network",
     "operatingSystem": "Sistema operacional",
     "commands": "Comandos",
     "recommended": "Recomendados",
@@ -87,32 +87,32 @@
     "siteUpdated": "Site atualizado",
     "siteUpdatedDescription": "O site foi atualizado.",
     "siteGeneralDescription": "Configurar as configurações gerais para este site",
-    "siteSettingDescription": "Configure as configurações no seu site",
+    "siteSettingDescription": "Configure the settings on the site",
     "siteSetting": "Configurações do {siteName}",
-    "siteNewtTunnel": "Novo túnel (recomendado)",
-    "siteNewtTunnelDescription": "A maneira mais fácil de criar um ponto de entrada na sua rede. Nenhuma configuração extra.",
+    "siteNewtTunnel": "Newt Site (Recommended)",
+    "siteNewtTunnelDescription": "Easiest way to create an entrypoint into any network. No extra setup.",
     "siteWg": "WireGuard Básico",
     "siteWgDescription": "Use qualquer cliente do WireGuard para estabelecer um túnel. Configuração manual NAT é necessária.",
     "siteWgDescriptionSaas": "Use qualquer cliente WireGuard para estabelecer um túnel. Configuração manual NAT necessária. SOMENTE FUNCIONA EM NODES AUTO-HOSPEDADOS",
     "siteLocalDescription": "Recursos locais apenas. Sem túneis.",
     "siteLocalDescriptionSaas": "Apenas recursos locais. Sem túneis. Apenas disponível em nós remotos.",
     "siteSeeAll": "Ver todos os sites",
-    "siteTunnelDescription": "Determine como você deseja se conectar ao seu site",
-    "siteNewtCredentials": "Credenciais Novas",
-    "siteNewtCredentialsDescription": "É assim que o novo sistema se autenticará com o servidor",
-    "siteCredentialsSave": "Salve suas credenciais",
+    "siteTunnelDescription": "Determine how you want to connect to the site",
+    "siteNewtCredentials": "Credentials",
+    "siteNewtCredentialsDescription": "This is how the site will authenticate with the server",
+    "siteCredentialsSave": "Save the Credentials",
     "siteCredentialsSaveDescription": "Você só será capaz de ver esta vez. Certifique-se de copiá-lo para um lugar seguro.",
     "siteInfo": "Informações do Site",
     "status": "SItuação",
     "shareTitle": "Gerir links partilhados",
-    "shareDescription": "Criar links compartilháveis para conceder acesso temporário ou permanente aos seus recursos",
+    "shareDescription": "Create shareable links to grant temporary or permanent access to proxy resources",
     "shareSearch": "Pesquisar links de compartilhamento...",
     "shareCreate": "Criar Link de Compartilhamento",
     "shareErrorDelete": "Falha ao apagar o link",
     "shareErrorDeleteMessage": "Ocorreu um erro ao apagar o link",
     "shareDeleted": "Link excluído",
     "shareDeletedDescription": "O link foi eliminado",
-    "shareTokenDescription": "Seu token de acesso pode ser passado de duas maneiras: como um parâmetro de consulta ou nos cabeçalhos da solicitação. Estes devem ser passados do cliente em todas as solicitações para acesso autenticado.",
+    "shareTokenDescription": "The access token can be passed in two ways: as a query parameter or in the request headers. These must be passed from the client on every request for authenticated access.",
     "accessToken": "Token de acesso",
     "usageExamples": "Exemplos de uso",
     "tokenId": "ID do Token",
@@ -121,7 +121,7 @@
     "importantNote": "Nota importante",
     "shareImportantDescription": "Por razões de segurança, o uso de cabeçalhos é recomendado através dos parâmetros de consulta quando possível, já que os parâmetros de consulta podem estar logados nos logs do servidor ou no histórico do navegador.",
     "token": "Identificador",
-    "shareTokenSecurety": "Mantenha seu token de acesso seguro. Não o compartilhe em áreas de acesso público ou código do lado do cliente.",
+    "shareTokenSecurety": "Keep the access token secure. Do not share it in publicly accessible areas or client-side code.",
     "shareErrorFetchResource": "Falha ao buscar recursos",
     "shareErrorFetchResourceDescription": "Ocorreu um erro ao obter os recursos",
     "shareErrorCreate": "Falha ao criar link de compartilhamento",
@@ -144,8 +144,10 @@
     "expires": "Expira",
     "never": "nunca",
     "shareErrorSelectResource": "Por favor, selecione um recurso",
-    "resourceTitle": "Gerir Recursos",
-    "resourceDescription": "Crie proxies seguros para seus aplicativos privados",
+    "proxyResourceTitle": "Manage Public Resources",
+    "proxyResourceDescription": "Create and manage resources that are publicly accessible through a web browser",
+    "clientResourceTitle": "Manage Private Resources",
+    "clientResourceDescription": "Create and manage resources that are only accessible through a connected client",
     "resourcesSearch": "Procurar recursos...",
     "resourceAdd": "Adicionar Recurso",
     "resourceErrorDelte": "Erro ao apagar recurso",
@@ -155,9 +157,9 @@
     "resourceMessageRemove": "Uma vez removido, o recurso não estará mais acessível. Todos os alvos associados ao recurso também serão removidos.",
     "resourceQuestionRemove": "Você tem certeza que deseja remover o recurso da organização?",
     "resourceHTTP": "Recurso HTTPS",
-    "resourceHTTPDescription": "O proxy solicita ao seu aplicativo via HTTPS usando um subdomínio ou domínio base.",
+    "resourceHTTPDescription": "Proxy requests to the app over HTTPS using a subdomain or base domain.",
     "resourceRaw": "Recurso TCP/UDP bruto",
-    "resourceRawDescription": "O proxy solicita ao seu aplicativo sobre TCP/UDP usando um número de porta.",
+    "resourceRawDescription": "Proxy requests to the app over TCP/UDP using a port number. This only works when sites are connected to nodes.",
     "resourceCreate": "Criar Recurso",
     "resourceCreateDescription": "Siga os passos abaixo para criar um novo recurso",
     "resourceSeeAll": "Ver todos os recursos",
@@ -171,22 +173,22 @@
     "noCountryFound": "Nenhum país encontrado.",
     "siteSelectionDescription": "Este site fornecerá conectividade ao destino.",
     "resourceType": "Tipo de Recurso",
-    "resourceTypeDescription": "Determine como você deseja aceder seu recurso",
+    "resourceTypeDescription": "Determine how to access the resource",
     "resourceHTTPSSettings": "Configurações de HTTPS",
-    "resourceHTTPSSettingsDescription": "Configure como seu recurso será acessado por HTTPS",
+    "resourceHTTPSSettingsDescription": "Configure how the resource will be accessed over HTTPS",
     "domainType": "Tipo de domínio",
     "subdomain": "Subdomínio",
     "baseDomain": "Domínio Base",
-    "subdomnainDescription": "O subdomínio onde seu recurso estará acessível.",
+    "subdomnainDescription": "The subdomain where the resource will be accessible.",
     "resourceRawSettings": "Configurações TCP/UDP",
-    "resourceRawSettingsDescription": "Configure como seu recurso será acessado sobre TCP/UDP. Você mapeia o recurso para uma porta no servidor Pangolin do hospedeiro, para que você possa acessar o recurso do server-public-ip:mapped-port.",
+    "resourceRawSettingsDescription": "Configure how the resource will be accessed over TCP/UDP. You map the resource to a port on the host Pangolin server, so you can access the resource from server-public-ip:mapped-port.",
     "protocol": "Protocolo",
     "protocolSelect": "Selecione um protocolo",
     "resourcePortNumber": "Número da Porta",
     "resourcePortNumberDescription": "O número da porta externa para requisições de proxy.",
     "cancel": "cancelar",
     "resourceConfig": "Snippets de Configuração",
-    "resourceConfigDescription": "Copie e cole estes snippets de configuração para configurar o seu recurso TCP/UDP",
+    "resourceConfigDescription": "Copy and paste these configuration snippets to set up the TCP/UDP resource",
     "resourceAddEntrypoints": "Traefik: Adicionar pontos de entrada",
     "resourceExposePorts": "Gerbil: Expor Portas no Docker Compose",
     "resourceLearnRaw": "Aprenda como configurar os recursos TCP/UDP",
@@ -202,14 +204,14 @@
     "proxy": "Proxy",
     "internal": "Interno",
     "rules": "Regras",
-    "resourceSettingDescription": "Configure as configurações do seu recurso",
+    "resourceSettingDescription": "Configure the settings on the resource",
     "resourceSetting": "Configurações do {resourceName}",
-    "alwaysAllow": "Sempre permitir",
-    "alwaysDeny": "Sempre negar",
+    "alwaysAllow": "Bypass Auth",
+    "alwaysDeny": "Block Access",
     "passToAuth": "Passar para Autenticação",
-    "orgSettingsDescription": "Configurar as configurações gerais da sua organização",
+    "orgSettingsDescription": "Configure the organization's settings",
     "orgGeneralSettings": "Configurações da organização",
-    "orgGeneralSettingsDescription": "Gerir os detalhes e a configuração da sua organização",
+    "orgGeneralSettingsDescription": "Manage the organization's details and configuration",
     "saveGeneralSettings": "Guardar configurações gerais",
     "saveSettings": "Guardar Configurações",
     "orgDangerZone": "Zona de Perigo",
@@ -232,7 +234,7 @@
     "orgMissing": "ID da Organização Ausente",
     "orgMissingMessage": "Não é possível regenerar o convite sem um ID de organização.",
     "accessUsersManage": "Gerir Utilizadores",
-    "accessUsersDescription": "Convidar utilizadores e adicioná-los a funções para gerir o acesso à sua organização",
+    "accessUsersDescription": "Invite and manage users with access to this organization",
     "accessUsersSearch": "Procurar utilizadores...",
     "accessUserCreate": "Criar Usuário",
     "accessUserRemove": "Remover utilizador",
@@ -241,13 +243,13 @@
     "role": "Funções",
     "nameRequired": "O nome é obrigatório",
     "accessRolesManage": "Gerir Funções",
-    "accessRolesDescription": "Configurar funções para gerir o acesso à sua organização",
+    "accessRolesDescription": "Create and manage roles for users in the organization",
     "accessRolesSearch": "Pesquisar funções...",
     "accessRolesAdd": "Adicionar função",
     "accessRoleDelete": "Excluir Papel",
     "description": "Descrição:",
     "inviteTitle": "Convites Abertos",
-    "inviteDescription": "Gerir seus convites para outros utilizadores",
+    "inviteDescription": "Manage invitations for other users to join the organization",
     "inviteSearch": "Procurar convites...",
     "minutes": "minutos",
     "hours": "horas",
@@ -261,13 +263,13 @@
     "apiKeysErrorCreate": "Erro ao criar chave API",
     "apiKeysErrorSetPermission": "Erro ao definir permissões",
     "apiKeysCreate": "Gerar Chave API",
-    "apiKeysCreateDescription": "Gerar uma nova chave API para sua organização",
+    "apiKeysCreateDescription": "Generate a new API key for the organization",
     "apiKeysGeneralSettings": "Permissões",
     "apiKeysGeneralSettingsDescription": "Determine o que esta chave API pode fazer",
-    "apiKeysList": "Sua Chave API",
-    "apiKeysSave": "Guardar Sua Chave API",
+    "apiKeysList": "New API Key",
+    "apiKeysSave": "Save the API Key",
     "apiKeysSaveDescription": "Você só poderá ver isto uma vez. Certifique-se de copiá-la para um local seguro.",
-    "apiKeysInfo": "Sua chave API é:",
+    "apiKeysInfo": "The API key is:",
     "apiKeysConfirmCopy": "Eu copiei a chave API",
     "generate": "Gerar",
     "done": "Concluído",
@@ -424,7 +426,7 @@
     "userCreated": "Usuário criado",
     "userCreatedDescription": "O utilizador foi criado com sucesso.",
     "userTypeInternal": "Usuário Interno",
-    "userTypeInternalDescription": "Convidar um utilizador para se juntar à sua organização diretamente.",
+    "userTypeInternalDescription": "Invite a user to join the organization directly.",
     "userTypeExternal": "Usuário Externo",
     "userTypeExternalDescription": "Criar um utilizador com um provedor de identidade externo.",
     "accessUserCreateDescription": "Siga os passos abaixo para criar um novo utilizador",
@@ -468,13 +470,13 @@
     "accessControlsSubmit": "Guardar Controlos de Acesso",
     "roles": "Funções",
     "accessUsersRoles": "Gerir Utilizadores e Funções",
-    "accessUsersRolesDescription": "Convide utilizadores e adicione-os a funções para gerir o acesso à sua organização",
+    "accessUsersRolesDescription": "Invite users and add them to roles to manage access to the organization",
     "key": "Chave",
     "createdAt": "Criado Em",
     "proxyErrorInvalidHeader": "Valor do cabeçalho Host personalizado inválido. Use o formato de nome de domínio ou salve vazio para remover o cabeçalho Host personalizado.",
     "proxyErrorTls": "Nome do Servidor TLS inválido. Use o formato de nome de domínio ou salve vazio para remover o Nome do Servidor TLS.",
     "proxyEnableSSL": "Habilitar SSL",
-    "proxyEnableSSLDescription": "Habilitar criptografia SSL/TLS para conexões HTTPS seguras a seus alvos.",
+    "proxyEnableSSLDescription": "Enable SSL/TLS encryption for secure HTTPS connections to the targets.",
     "target": "Target",
     "configureTarget": "Configurar Alvos",
     "targetErrorFetch": "Falha ao buscar alvos",
@@ -490,29 +492,29 @@
     "targetsErrorUpdate": "Falha ao atualizar alvos",
     "targetsErrorUpdateDescription": "Ocorreu um erro ao atualizar alvos",
     "targetTlsUpdate": "Configurações TLS atualizadas",
-    "targetTlsUpdateDescription": "Suas configurações TLS foram atualizadas com sucesso",
+    "targetTlsUpdateDescription": "TLS settings have been updated successfully",
     "targetErrorTlsUpdate": "Falha ao atualizar configurações TLS",
     "targetErrorTlsUpdateDescription": "Ocorreu um erro ao atualizar as configurações TLS",
     "proxyUpdated": "Configurações de proxy atualizadas",
-    "proxyUpdatedDescription": "Suas configurações de proxy foram atualizadas com sucesso",
+    "proxyUpdatedDescription": "Proxy settings have been updated successfully",
     "proxyErrorUpdate": "Falha ao atualizar configurações de proxy",
     "proxyErrorUpdateDescription": "Ocorreu um erro ao atualizar as configurações de proxy",
     "targetAddr": "IP / Nome do Host",
     "targetPort": "Porta",
     "targetProtocol": "Protocolo",
     "targetTlsSettings": "Configuração de conexão segura",
-    "targetTlsSettingsDescription": "Configurar configurações SSL/TLS para seu recurso",
+    "targetTlsSettingsDescription": "Configure SSL/TLS settings for the resource",
     "targetTlsSettingsAdvanced": "Configurações TLS Avançadas",
     "targetTlsSni": "Nome do Servidor TLS",
     "targetTlsSniDescription": "O Nome do Servidor TLS para usar para SNI. Deixe vazio para usar o padrão.",
     "targetTlsSubmit": "Guardar Configurações",
     "targets": "Configuração de Alvos",
-    "targetsDescription": "Configure alvos para rotear tráfego para seus serviços de backend",
+    "targetsDescription": "Set up targets to route traffic to backend services",
     "targetStickySessions": "Ativar Sessões Persistentes",
     "targetStickySessionsDescription": "Manter conexões no mesmo alvo backend durante toda a sessão.",
     "methodSelect": "Selecionar método",
     "targetSubmit": "Adicionar Alvo",
-    "targetNoOne": "Este recurso não tem nenhum alvo. Adicione um alvo para configurar para onde enviar solicitações para sua área de administração.",
+    "targetNoOne": "This resource doesn't have any targets. Add a target to configure where to send requests to the backend.",
     "targetNoOneDescription": "Adicionar mais de um alvo acima habilitará o balanceamento de carga.",
     "targetsSubmit": "Guardar Alvos",
     "addTarget": "Adicionar Alvo",
@@ -530,7 +532,7 @@
     "tlsServerNameDescription": "The TLS server name to use for SNI",
     "save": "Guardar",
     "proxyAdditional": "Configurações Adicionais de Proxy",
-    "proxyAdditionalDescription": "Configure como seu recurso lida com configurações de proxy",
+    "proxyAdditionalDescription": "Configure how the resource handles proxy settings",
     "proxyCustomHeader": "Cabeçalho Host Personalizado",
     "proxyCustomHeaderDescription": "O cabeçalho host para definir ao fazer proxy de requisições. Deixe vazio para usar o padrão.",
     "proxyAdditionalSubmit": "Guardar Configurações de Proxy",
@@ -570,7 +572,7 @@
     "rulesMatchType": "Tipo de Correspondência",
     "value": "Valor",
     "rulesAbout": "Sobre Regras",
-    "rulesAboutDescription": "As regras permitem controlar o acesso ao seu recurso com base em um conjunto de critérios. Você pode criar regras para permitir ou negar acesso com base no endereço IP ou caminho URL.",
+    "rulesAboutDescription": "Rules allow you to control access to the resource based on a set of criteria. You can create rules to allow or deny access based on IP address or URL path.",
     "rulesActions": "Ações",
     "rulesActionAlwaysAllow": "Sempre Permitir: Ignorar todos os métodos de autenticação",
     "rulesActionAlwaysDeny": "Sempre Negar: Bloquear todas as requisições; nenhuma autenticação pode ser tentada",
@@ -582,7 +584,7 @@
     "rulesEnable": "Ativar Regras",
     "rulesEnableDescription": "Ativar ou desativar avaliação de regras para este recurso",
     "rulesResource": "Configuração de Regras do Recurso",
-    "rulesResourceDescription": "Configure regras para controlar o acesso ao seu recurso",
+    "rulesResourceDescription": "Configure rules to control access to the resource",
     "ruleSubmit": "Adicionar Regra",
     "rulesNoOne": "Sem regras. Adicione uma regra usando o formulário.",
     "rulesOrder": "As regras são avaliadas por prioridade em ordem ascendente.",
@@ -598,7 +600,7 @@
     "none": "Nenhum",
     "unknown": "Desconhecido",
     "resources": "Recursos",
-    "resourcesDescription": "Recursos são proxies para aplicações executando em sua rede privada. Crie um recurso para qualquer serviço HTTP/HTTPS ou TCP/UDP bruto em sua rede privada. Cada recurso deve estar conectado a um site para habilitar conectividade privada e segura através de um túnel WireGuard criptografado.",
+    "resourcesDescription": "Resources are proxies to applications running on the private network. Create a resource for any HTTP/HTTPS or raw TCP/UDP service on your private network. Each resource must be connected to a site to enable private, secure connectivity through an encrypted WireGuard tunnel.",
     "resourcesWireGuardConnect": "Conectividade segura com criptografia WireGuard",
     "resourcesMultipleAuthenticationMethods": "Configure múltiplos métodos de autenticação",
     "resourcesUsersRolesAccess": "Controle de acesso baseado em utilizadores e funções",
@@ -609,7 +611,7 @@
     "resourceSelect": "Selecionar recurso",
     "shareLinks": "Links de Compartilhamento",
     "share": "Links Compartilháveis",
-    "shareDescription2": "Crie links compartilháveis para seus recursos. Os links fornecem acesso temporário ou ilimitado ao seu recurso. Você pode configurar a duração da expiração do link quando o criar.",
+    "shareDescription2": "Create shareable links to resources. Links provide temporary or unlimited access to your resource. You can configure the expiration duration of the link when you create one.",
     "shareEasyCreate": "Fácil de criar e compartilhar",
     "shareConfigurableExpirationDuration": "Duração de expiração configurável",
     "shareSecureAndRevocable": "Seguro e revogável",
@@ -619,19 +621,19 @@
     "unknownCommand": "Comando desconhecido",
     "newtErrorFetchReleases": "Falha ao buscar informações da versão: {err}",
     "newtErrorFetchLatest": "Erro ao buscar última versão: {err}",
-    "newtEndpoint": "Endpoint Newt",
-    "newtId": "ID Newt",
-    "newtSecretKey": "Chave Secreta Newt",
+    "newtEndpoint": "Endpoint",
+    "newtId": "ID",
+    "newtSecretKey": "Secret",
     "architecture": "Arquitetura",
     "sites": "sites",
-    "siteWgAnyClients": "Use qualquer cliente WireGuard para conectar. Você terá que endereçar seus recursos internos usando o IP do par.",
+    "siteWgAnyClients": "Use any WireGuard client to connect. You will have to address internal resources using the peer IP.",
     "siteWgCompatibleAllClients": "Compatível com todos os clientes WireGuard",
     "siteWgManualConfigurationRequired": "Configuração manual necessária",
     "userErrorNotAdminOrOwner": "Usuário não é administrador ou proprietário",
     "pangolinSettings": "Configurações - Pangolin",
     "accessRoleYour": "Sua função:",
-    "accessRoleSelect2": "Selecionar uma função",
-    "accessUserSelect": "Selecionar um utilizador",
+    "accessRoleSelect2": "Select roles",
+    "accessUserSelect": "Select users",
     "otpEmailEnter": "Digite um e-mail",
     "otpEmailEnterDescription": "Pressione enter para adicionar um e-mail após digitá-lo no campo de entrada.",
     "otpEmailErrorInvalid": "Endereço de e-mail inválido. O caractere curinga (*) deve ser a parte local inteira.",
@@ -683,7 +685,7 @@
     "resourcePincodeSetupTitle": "Definir Código PIN",
     "resourcePincodeSetupTitleDescription": "Defina um código PIN para proteger este recurso",
     "resourceRoleDescription": "Administradores sempre podem aceder este recurso.",
-    "resourceUsersRoles": "Utilizadores e Funções",
+    "resourceUsersRoles": "Access Controls",
     "resourceUsersRolesDescription": "Configure quais utilizadores e funções podem visitar este recurso",
     "resourceUsersRolesSubmit": "Guardar Utilizadores e Funções",
     "resourceWhitelistSave": "Salvo com sucesso",
@@ -779,15 +781,15 @@
     "idpOidcConfigure": "Configuração OAuth2/OIDC",
     "idpOidcConfigureDescription": "Configurar os endpoints e credenciais do provedor OAuth2/OIDC",
     "idpClientId": "ID do Cliente",
-    "idpClientIdDescription": "O ID do cliente OAuth2 do seu provedor de identidade",
+    "idpClientIdDescription": "The OAuth2 client ID from the identity provider",
     "idpClientSecret": "Segredo do Cliente",
-    "idpClientSecretDescription": "O segredo do cliente OAuth2 do seu provedor de identidade",
+    "idpClientSecretDescription": "The OAuth2 client secret from the identity provider",
     "idpAuthUrl": "URL de Autorização",
     "idpAuthUrlDescription": "O URL do endpoint de autorização OAuth2",
     "idpTokenUrl": "URL do Token",
     "idpTokenUrlDescription": "O URL do endpoint do token OAuth2",
     "idpOidcConfigureAlert": "Informação Importante",
-    "idpOidcConfigureAlertDescription": "Após criar o provedor de identidade, será necessário configurar o URL de retorno nas configurações do seu provedor de identidade. O URL de retorno será fornecido após a criação bem-sucedida.",
+    "idpOidcConfigureAlertDescription": "After creating the identity provider, you will need to configure the callback URL in the identity provider's settings. The callback URL will be provided after successful creation.",
     "idpToken": "Configuração do Token",
     "idpTokenDescription": "Configurar como extrair informações do utilizador do token ID",
     "idpJmespathAbout": "Sobre JMESPath",
@@ -804,7 +806,7 @@
     "idpSubmit": "Criar Provedor de Identidade",
     "orgPolicies": "Políticas da Organização",
     "idpSettings": "Configurações de {idpName}",
-    "idpCreateSettingsDescription": "Configurar as definições para o seu provedor de identidade",
+    "idpCreateSettingsDescription": "Configure the settings for the identity provider",
     "roleMapping": "Mapeamento de Funções",
     "orgMapping": "Mapeamento da Organização",
     "orgPoliciesSearch": "Pesquisar políticas da organização...",
@@ -839,7 +841,7 @@
     "idpUpdatedDescription": "Provedor de identidade atualizado com sucesso",
     "redirectUrl": "URL de Redirecionamento",
     "redirectUrlAbout": "Sobre o URL de Redirecionamento",
-    "redirectUrlAboutDescription": "Este é o URL para o qual os utilizadores serão redirecionados após a autenticação. Precisa configurar este URL nas configurações do seu provedor de identidade.",
+    "redirectUrlAboutDescription": "This is the URL to which users will be redirected after authentication. You need to configure this URL in the identity provider's settings.",
     "pangolinAuth": "Autenticação - Pangolin",
     "verificationCodeLengthRequirements": "O seu código de verificação deve ter 8 caracteres.",
     "errorOccurred": "Ocorreu um erro",
@@ -922,6 +924,10 @@
     "passwordResetSent": "Enviaremos um código de redefinição de palavra-passe para este email.",
     "passwordResetCode": "Código de Redefinição",
     "passwordResetCodeDescription": "Verifique o seu email para obter o código de redefinição.",
+    "generatePasswordResetCode": "Generate Password Reset Code",
+    "passwordResetCodeGenerated": "Password Reset Code Generated",
+    "passwordResetCodeGeneratedDescription": "Share this code with the user. They can use it to reset their password.",
+    "passwordResetUrl": "Reset URL",
     "passwordNew": "Nova Palavra-passe",
     "passwordNewConfirm": "Confirmar Nova Palavra-passe",
     "changePassword": "Mudar a senha",
@@ -939,6 +945,9 @@
     "pincodeAuth": "Código do Autenticador",
     "pincodeSubmit2": "Submeter Código",
     "passwordResetSubmit": "Solicitar Redefinição",
+    "passwordResetAlreadyHaveCode": "Enter Password Reset Code",
+    "passwordResetSmtpRequired": "Please contact your administrator",
+    "passwordResetSmtpRequiredDescription": "A password reset code is required to reset your password. Please contact your administrator for assistance.",
     "passwordBack": "Voltar à Palavra-passe",
     "loginBack": "Voltar ao início de sessão",
     "signup": "Registar",
@@ -1104,12 +1113,15 @@
     "actionListSiteResources": "Listar Recursos do Site",
     "actionUpdateSiteResource": "Atualizar Recurso do Site",
     "actionListInvitations": "Listar Convites",
+    "actionExportLogs": "Export Logs",
+    "actionViewLogs": "View Logs",
     "noneSelected": "Nenhum selecionado",
     "orgNotFound2": "Nenhuma organização encontrada.",
     "searchProgress": "Pesquisar...",
     "create": "Criar",
     "orgs": "Organizações",
     "loginError": "Ocorreu um erro ao iniciar sessão",
+    "loginRequiredForDevice": "Login is required to authenticate your device.",
     "passwordForgot": "Esqueceu a sua palavra-passe?",
     "otpAuth": "Autenticação de Dois Fatores",
     "otpAuthDescription": "Insira o código da sua aplicação de autenticação ou um dos seus códigos de backup de uso único.",
@@ -1164,23 +1176,29 @@
     "sidebarHome": "Residencial",
     "sidebarSites": "sites",
     "sidebarResources": "Recursos",
+    "sidebarProxyResources": "Public",
+    "sidebarClientResources": "Private",
     "sidebarAccessControl": "Controle de Acesso",
+    "sidebarLogsAndAnalytics": "Logs & Analytics",
     "sidebarUsers": "Utilizadores",
+    "sidebarAdmin": "Admin",
     "sidebarInvitations": "Convites",
     "sidebarRoles": "Papéis",
-    "sidebarShareableLinks": "Links compartilháveis",
+    "sidebarShareableLinks": "Links",
     "sidebarApiKeys": "Chaves API",
     "sidebarSettings": "Configurações",
     "sidebarAllUsers": "Todos os utilizadores",
     "sidebarIdentityProviders": "Provedores de identidade",
     "sidebarLicense": "Tipo:",
     "sidebarClients": "Clientes",
+    "sidebarUserDevices": "Users",
+    "sidebarMachineClients": "Machines",
     "sidebarDomains": "Domínios",
     "sidebarGeneral": "General",
     "sidebarLogAndAnalytics": "Log & Analytics",
     "sidebarBluePrints": "Diagramas",
     "sidebarOrganization": "Organization",
-    "sidebarLogsAnalytics": "Request Analytics",
+    "sidebarLogsAnalytics": "Analytics",
     "blueprints": "Diagramas",
     "blueprintsDescription": "Aplicar configurações declarativas e ver execuções anteriores",
     "blueprintAdd": "Adicionar Diagrama",
@@ -1191,7 +1209,7 @@
     "blueprintDetailsDescription": "Veja o resultado do diagrama aplicado e todos os erros que ocorreram",
     "blueprintInfo": "Informação do Diagrama",
     "message": "mensagem",
-    "blueprintContentsDescription": "Defina o conteúdo YAML descrevendo a sua infraestrutura",
+    "blueprintContentsDescription": "Define the YAML content describing the infrastructure",
     "blueprintErrorCreateDescription": "Ocorreu um erro ao aplicar o diagrama",
     "blueprintErrorCreate": "Erro ao criar diagrama",
     "searchBlueprintProgress": "Pesquisar diagramas...",
@@ -1247,15 +1265,15 @@
     "loading": "Carregando",
     "restart": "Reiniciar",
     "domains": "Domínios",
-    "domainsDescription": "Gerir domínios para sua organização",
+    "domainsDescription": "Create and manage domains available in the organization",
     "domainsSearch": "Pesquisar domínios...",
     "domainAdd": "Adicionar Domínio",
-    "domainAddDescription": "Registre um novo domínio com sua organização",
+    "domainAddDescription": "Register a new domain with to the organization",
     "domainCreate": "Criar Domínio",
     "domainCreatedDescription": "Domínio criado com sucesso",
     "domainDeletedDescription": "Domínio deletado com sucesso",
-    "domainQuestionRemove": "Tem certeza de que deseja remover o domínio da sua conta?",
-    "domainMessageRemove": "Uma vez removido, o domínio não estará mais associado à sua conta.",
+    "domainQuestionRemove": "Are you sure you want to remove the domain?",
+    "domainMessageRemove": "Once removed, the domain will no longer be associated with the organization.",
     "domainConfirmDelete": "Confirmar Exclusão de Domínio",
     "domainDelete": "Excluir Domínio",
     "domain": "Domínio",
@@ -1274,7 +1292,7 @@
     "pending": "Pendente",
     "sidebarBilling": "Faturamento",
     "billing": "Faturamento",
-    "orgBillingDescription": "Gerir suas informações de faturação e assinaturas",
+    "orgBillingDescription": "Manage billing information and subscriptions",
     "github": "GitHub",
     "pangolinHosted": "Hospedagem Pangolin",
     "fossorial": "Fossorial",
@@ -1317,7 +1335,7 @@
     "domainPickerSortAsc": "A-Z",
     "domainPickerSortDesc": "Z-A",
     "domainPickerCheckingAvailability": "Verificando disponibilidade...",
-    "domainPickerNoMatchingDomains": "Nenhum domínio correspondente encontrado. Tente um domínio diferente ou verifique as configurações do domínio da sua organização.",
+    "domainPickerNoMatchingDomains": "No matching domains found. Try a different domain or check the organization's domain settings.",
     "domainPickerOrganizationDomains": "Domínios da Organização",
     "domainPickerProvidedDomains": "Domínios Fornecidos",
     "domainPickerSubdomain": "Subdomínio: {subdomain}",
@@ -1351,7 +1369,7 @@
     "billingModifySubscription": "Modificar Assinatura",
     "billingStartSubscription": "Iniciar Assinatura",
     "billingRecurringCharge": "Cobrança Recorrente",
-    "billingManageSubscriptionSettings": "Gerenciar as configurações e preferências da sua assinatura",
+    "billingManageSubscriptionSettings": "Manage subscription settings and preferences",
     "billingNoActiveSubscription": "Você não tem uma assinatura ativa. Inicie sua assinatura para aumentar os limites de uso.",
     "billingFailedToLoadSubscription": "Falha ao carregar assinatura",
     "billingFailedToLoadUsage": "Falha ao carregar uso",
@@ -1362,9 +1380,9 @@
     "billingPortalError": "Erro do Portal",
     "billingDataUsageInfo": "Você é cobrado por todos os dados transferidos através de seus túneis seguros quando conectado à nuvem. Isso inclui o tráfego de entrada e saída em todos os seus sites. Quando você atingir o seu limite, seus sites desconectarão até que você atualize seu plano ou reduza o uso. Os dados não serão cobrados ao usar os nós.",
     "billingOnlineTimeInfo": "Cobrança de acordo com o tempo em que seus sites permanecem conectados à nuvem. Por exemplo, 44,640 minutos é igual a um site que roda 24/7 para um mês inteiro. Quando você atinge o seu limite, seus sites desconectarão até que você faça o upgrade do seu plano ou reduza o uso. O tempo não é cobrado ao usar nós.",
-    "billingUsersInfo": "Você será cobrado por cada usuário em sua organização. A cobrança é calculada diariamente com base no número de contas de usuário ativas em sua organização.",
-    "billingDomainInfo": "Você será cobrado por cada domínio em sua organização. A cobrança é calculada diariamente com base no número de contas de domínio ativas em sua organização.",
-    "billingRemoteExitNodesInfo": "Você será cobrado por cada Nodo gerenciado em sua organização. A cobrança é calculada diariamente com base no número de Nodos gerenciados ativos em sua organização.",
+    "billingUsersInfo": "You're charged for each user in the organization. Billing is calculated daily based on the number of active user accounts in your org.",
+    "billingDomainInfo": "You're charged for each domain in the organization. Billing is calculated daily based on the number of active domain accounts in your org.",
+    "billingRemoteExitNodesInfo": "You're charged for each managed Node in the organization. Billing is calculated daily based on the number of active managed Nodes in your org.",
     "domainNotFound": "Domínio Não Encontrado",
     "domainNotFoundDescription": "Este recurso está desativado porque o domínio não existe mais em nosso sistema. Defina um novo domínio para este recurso.",
     "failed": "Falhou",
@@ -1456,23 +1474,23 @@
     "errorCreatingClient": "Erro ao criar cliente",
     "clientDefaultsNotFound": "Padrões do cliente não encontrados",
     "createClient": "Criar Cliente",
-    "createClientDescription": "Crie um novo cliente para conectar aos seus sites",
+    "createClientDescription": "Create a new client to access private resources",
     "seeAllClients": "Ver Todos os Clientes",
     "clientInformation": "Informações do Cliente",
     "clientNamePlaceholder": "Nome do cliente",
     "address": "Endereço",
     "subnetPlaceholder": "Sub-rede",
-    "addressDescription": "O endereço que este cliente usará para conectividade",
+    "addressDescription": "The internal address of the client. Must fall within the organization's subnet.",
     "selectSites": "Selecionar sites",
     "sitesDescription": "O cliente terá conectividade com os sites selecionados",
     "clientInstallOlm": "Instalar Olm",
     "clientInstallOlmDescription": "Execute o Olm em seu sistema",
-    "clientOlmCredentials": "Credenciais Olm",
-    "clientOlmCredentialsDescription": "É assim que Olm se autenticará com o servidor",
-    "olmEndpoint": "Endpoint Olm",
-    "olmId": "ID Olm",
-    "olmSecretKey": "Chave Secreta Olm",
-    "clientCredentialsSave": "Salve suas Credenciais",
+    "clientOlmCredentials": "Credentials",
+    "clientOlmCredentialsDescription": "This is how the client will authenticate with the server",
+    "olmEndpoint": "Endpoint",
+    "olmId": "ID",
+    "olmSecretKey": "Secret",
+    "clientCredentialsSave": "Save the Credentials",
     "clientCredentialsSaveDescription": "Você só poderá ver isto uma vez. Certifique-se de copiá-las para um local seguro.",
     "generalSettingsDescription": "Configure as configurações gerais para este cliente",
     "clientUpdated": "Cliente atualizado",
@@ -1483,9 +1501,7 @@
     "sitesFetchError": "Ocorreu um erro ao buscar sites.",
     "olmErrorFetchReleases": "Ocorreu um erro ao buscar lançamentos do Olm.",
     "olmErrorFetchLatest": "Ocorreu um erro ao buscar o lançamento mais recente do Olm.",
-    "remoteSubnets": "Sub-redes Remotas",
     "enterCidrRange": "Insira o intervalo CIDR",
-    "remoteSubnetsDescription": "Adicionar intervalos CIDR que podem ser acessados deste site remotamente usando clientes. Use um formato como 10.0.0.0/24. Isso SOMENTE se aplica à conectividade do cliente VPN.",
     "resourceEnableProxy": "Ativar Proxy Público",
     "resourceEnableProxyDescription": "Permite proxy público para este recurso. Isso permite o acesso ao recurso de fora da rede através da nuvem em uma porta aberta. Requer configuração do Traefik.",
     "externalProxyEnabled": "Proxy Externo Habilitado",
@@ -1503,14 +1519,15 @@
     "enableHealthChecksDescription": "Monitore a saúde deste alvo. Você pode monitorar um ponto de extremidade diferente do alvo, se necessário.",
     "healthScheme": "Método",
     "healthSelectScheme": "Selecione o Método",
+    "healthCheckPortInvalid": "Health check port must be between 1 and 65535",
     "healthCheckPath": "Caminho",
     "healthHostname": "IP / Nome do Host",
     "healthPort": "Porta",
     "healthCheckPathDescription": "O caminho para verificar o estado de saúde.",
-    "healthyIntervalSeconds": "Intervalo Saudável",
-    "unhealthyIntervalSeconds": "Intervalo Não Saudável",
+    "healthyIntervalSeconds": "Healthy Interval (sec)",
+    "unhealthyIntervalSeconds": "Unhealthy Interval (sec)",
     "IntervalSeconds": "Intervalo Saudável",
-    "timeoutSeconds": "Tempo Limite",
+    "timeoutSeconds": "Timeout (sec)",
     "timeIsInSeconds": "O tempo está em segundos",
     "retryAttempts": "Tentativas de Repetição",
     "expectedResponseCodes": "Códigos de Resposta Esperados",
@@ -1546,12 +1563,12 @@
     "resourceEditDomain": "Editar Domínio",
     "siteName": "Nome do Site",
     "proxyPort": "Porta",
-    "resourcesTableProxyResources": "Recursos de Proxy",
-    "resourcesTableClientResources": "Recursos do Cliente",
+    "resourcesTableProxyResources": "Public",
+    "resourcesTableClientResources": "Private",
     "resourcesTableNoProxyResourcesFound": "Nenhum recurso de proxy encontrado.",
     "resourcesTableNoInternalResourcesFound": "Nenhum recurso interno encontrado.",
     "resourcesTableDestination": "Destino",
-    "resourcesTableTheseResourcesForUseWith": "Esses recursos são para uso com",
+    "resourcesTableAlias": "Alias",
     "resourcesTableClients": "Clientes",
     "resourcesTableAndOnlyAccessibleInternally": "e são acessíveis apenas internamente quando conectados com um cliente.",
     "resourcesTableNoTargets": "Nenhum alvo",
@@ -1560,8 +1577,8 @@
     "resourcesTableOffline": "Desconectado",
     "resourcesTableUnknown": "Desconhecido",
     "resourcesTableNotMonitored": "Não monitorado",
-    "editInternalResourceDialogEditClientResource": "Editar Recurso do Cliente",
-    "editInternalResourceDialogUpdateResourceProperties": "Atualize as propriedades do recurso e a configuração do alvo para {resourceName}.",
+    "editInternalResourceDialogEditClientResource": "Edit Private Resource",
+    "editInternalResourceDialogUpdateResourceProperties": "Update the resource configuration and access controls for {resourceName}",
     "editInternalResourceDialogResourceProperties": "Propriedades do Recurso",
     "editInternalResourceDialogName": "Nome",
     "editInternalResourceDialogProtocol": "Protocolo",
@@ -1580,11 +1597,22 @@
     "editInternalResourceDialogInvalidIPAddressFormat": "Formato de endereço IP inválido",
     "editInternalResourceDialogDestinationPortMin": "Porta de destino deve ser pelo menos 1",
     "editInternalResourceDialogDestinationPortMax": "Porta de destino deve ser inferior a 65536",
+    "editInternalResourceDialogPortModeRequired": "Protocol, proxy port, and destination port are required for port mode",
+    "editInternalResourceDialogMode": "Mode",
+    "editInternalResourceDialogModePort": "Port",
+    "editInternalResourceDialogModeHost": "Host",
+    "editInternalResourceDialogModeCidr": "CIDR",
+    "editInternalResourceDialogDestination": "Destination",
+    "editInternalResourceDialogDestinationHostDescription": "The IP address or hostname of the resource on the site's network.",
+    "editInternalResourceDialogDestinationIPDescription": "The IP or hostname address of the resource on the site's network.",
+    "editInternalResourceDialogDestinationCidrDescription": "The CIDR range of the resource on the site's network.",
+    "editInternalResourceDialogAlias": "Alias",
+    "editInternalResourceDialogAliasDescription": "An optional internal DNS alias for this resource.",
     "createInternalResourceDialogNoSitesAvailable": "Nenhum Site Disponível",
     "createInternalResourceDialogNoSitesAvailableDescription": "Você precisa ter pelo menos um site Newt com uma sub-rede configurada para criar recursos internos.",
     "createInternalResourceDialogClose": "Fechar",
-    "createInternalResourceDialogCreateClientResource": "Criar Recurso do Cliente",
-    "createInternalResourceDialogCreateClientResourceDescription": "Crie um novo recurso que estará acessível aos clientes conectados ao site selecionado.",
+    "createInternalResourceDialogCreateClientResource": "Create Private Resource",
+    "createInternalResourceDialogCreateClientResourceDescription": "Create a new resource that will only be accessible to clients connected to the organization",
     "createInternalResourceDialogResourceProperties": "Propriedades do Recurso",
     "createInternalResourceDialogName": "Nome",
     "createInternalResourceDialogSite": "Site",
@@ -1613,11 +1641,22 @@
     "createInternalResourceDialogInvalidIPAddressFormat": "Formato de endereço IP inválido",
     "createInternalResourceDialogDestinationPortMin": "Porta de destino deve ser pelo menos 1",
     "createInternalResourceDialogDestinationPortMax": "Porta de destino deve ser inferior a 65536",
+    "createInternalResourceDialogPortModeRequired": "Protocol, proxy port, and destination port are required for port mode",
+    "createInternalResourceDialogMode": "Mode",
+    "createInternalResourceDialogModePort": "Port",
+    "createInternalResourceDialogModeHost": "Host",
+    "createInternalResourceDialogModeCidr": "CIDR",
+    "createInternalResourceDialogDestination": "Destination",
+    "createInternalResourceDialogDestinationHostDescription": "The IP address or hostname of the resource on the site's network.",
+    "createInternalResourceDialogDestinationCidrDescription": "The CIDR range of the resource on the site's network.",
+    "createInternalResourceDialogAlias": "Alias",
+    "createInternalResourceDialogAliasDescription": "An optional internal DNS alias for this resource.",
     "siteConfiguration": "Configuração",
     "siteAcceptClientConnections": "Aceitar Conexões de Clientes",
-    "siteAcceptClientConnectionsDescription": "Permitir que outros dispositivos se conectem através desta instância Newt como um gateway usando clientes.",
-    "siteAddress": "Endereço do Site",
-    "siteAddressDescription": "Especificar o endereço IP do host para que os clientes se conectem. Este é o endereço interno do site na rede Pangolin para os clientes endereçarem. Deve estar dentro da sub-rede da Organização.",
+    "siteAcceptClientConnectionsDescription": "Allow user devices and clients to access resources on this site. This can be changed later.",
+    "siteAddress": "Site Address (Advanced)",
+    "siteAddressDescription": "The internal address of the site. Must fall within the organization's subnet.",
+    "siteNameDescription": "The display name of the site that can be changed later.",
     "autoLoginExternalIdp": "Login Automático com IDP Externo",
     "autoLoginExternalIdpDescription": "Redirecionar imediatamente o utilizador para o IDP externo para autenticação.",
     "selectIdp": "Selecionar IDP",
@@ -1631,7 +1670,7 @@
     "autoLoginErrorNoRedirectUrl": "Nenhum URL de redirecionamento recebido do provedor de identidade.",
     "autoLoginErrorGeneratingUrl": "Falha ao gerar URL de autenticação.",
     "remoteExitNodeManageRemoteExitNodes": "Nós remotos",
-    "remoteExitNodeDescription": "Auto-hospedar um ou mais nós remotos para estender sua conectividade de rede e reduzir a dependência da nuvem",
+    "remoteExitNodeDescription": "Self-host one or more remote nodes to extend network connectivity and reduce reliance on the cloud",
     "remoteExitNodes": "Nós",
     "searchRemoteExitNodes": "Buscar nós...",
     "remoteExitNodeAdd": "Adicionar node",
@@ -1643,11 +1682,11 @@
     "sidebarRemoteExitNodes": "Nós remotos",
     "remoteExitNodeCreate": {
         "title": "Criar nó",
-        "description": "Crie um novo nó para estender sua conectividade de rede",
+        "description": "Create a new node to extend network connectivity",
         "viewAllButton": "Ver Todos os Nós",
         "strategy": {
             "title": "Estratégia de Criação",
-            "description": "Escolha isto para configurar o seu nó manualmente ou gerar novas credenciais.",
+            "description": "Choose this to manually configure the node or generate new credentials.",
             "adopt": {
                 "title": "Adotar Nodo",
                 "description": "Escolha isto se você já tem credenciais para o nó."
@@ -1668,7 +1707,7 @@
         },
         "generate": {
             "title": "Credenciais Geradas",
-            "description": "Use estas credenciais geradas para configurar o seu nó",
+            "description": "Use these generated credentials to configure the node",
             "nodeIdTitle": "Nó ID",
             "secretTitle": "Chave Secreta",
             "saveCredentialsTitle": "Adicionar Credenciais à Configuração",
@@ -1744,16 +1783,16 @@
     "idpTypeLabel": "Tipo de provedor de identidade",
     "roleMappingExpressionPlaceholder": "ex.: Contem (grupos, 'administrador') && 'Administrador' 「'Membro'",
     "idpGoogleConfiguration": "Configuração do Google",
-    "idpGoogleConfigurationDescription": "Configurar suas credenciais do Google OAuth2",
-    "idpGoogleClientIdDescription": "Seu ID de Cliente OAuth2 do Google",
-    "idpGoogleClientSecretDescription": "Seu Segredo de Cliente OAuth2 do Google",
+    "idpGoogleConfigurationDescription": "Configure the Google OAuth2 credentials",
+    "idpGoogleClientIdDescription": "Google OAuth2 Client ID",
+    "idpGoogleClientSecretDescription": "Google OAuth2 Client Secret",
     "idpAzureConfiguration": "Configuração de ID do Azure Entra",
-    "idpAzureConfigurationDescription": "Configure as suas credenciais do Azure Entra ID OAuth2",
+    "idpAzureConfigurationDescription": "Configure Azure Entra ID OAuth2 credentials",
     "idpTenantId": "ID do Inquilino",
-    "idpTenantIdPlaceholder": "seu-tenente-id",
-    "idpAzureTenantIdDescription": "Seu ID do tenant Azure (encontrado na visão geral do diretório ativo Azure)",
-    "idpAzureClientIdDescription": "Seu ID de Cliente de Registro do App Azure",
-    "idpAzureClientSecretDescription": "Seu segredo de cliente de registro de aplicativos Azure",
+    "idpTenantIdPlaceholder": "tenant-id",
+    "idpAzureTenantIdDescription": "Azure tenant ID (found in Azure Active Directory overview)",
+    "idpAzureClientIdDescription": "Azure App Registration Client ID",
+    "idpAzureClientSecretDescription": "Azure App Registration Client Secret",
     "idpGoogleTitle": "Google",
     "idpGoogleAlt": "Google",
     "idpAzureTitle": "Azure Entra ID",
@@ -1761,14 +1800,14 @@
     "idpGoogleConfigurationTitle": "Configuração do Google",
     "idpAzureConfigurationTitle": "Configuração de ID do Azure Entra",
     "idpTenantIdLabel": "ID do Inquilino",
-    "idpAzureClientIdDescription2": "Seu ID de Cliente de Registro do App Azure",
-    "idpAzureClientSecretDescription2": "Seu segredo de cliente de registro de aplicativos Azure",
+    "idpAzureClientIdDescription2": "Azure App Registration Client ID",
+    "idpAzureClientSecretDescription2": "Azure App Registration Client Secret",
     "idpGoogleDescription": "Provedor Google OAuth2/OIDC",
     "idpAzureDescription": "Microsoft Azure OAuth2/OIDC provider",
     "subnet": "Sub-rede",
     "subnetDescription": "A sub-rede para a configuração de rede dessa organização.",
     "authPage": "Página de Autenticação",
-    "authPageDescription": "Configurar a página de autenticação para sua organização",
+    "authPageDescription": "Configure the auth page for the organization",
     "authPageDomain": "Domínio de Página Autenticação",
     "noDomainSet": "Nenhum domínio definido",
     "changeDomain": "Alterar domínio",
@@ -1778,7 +1817,7 @@
     "setAuthPageDomain": "Definir domínio da página de autenticação",
     "failedToFetchCertificate": "Falha ao buscar o certificado",
     "failedToRestartCertificate": "Falha ao reiniciar o certificado",
-    "addDomainToEnableCustomAuthPages": "Adicione um domínio para habilitar páginas de autenticação personalizadas para sua organização",
+    "addDomainToEnableCustomAuthPages": "Add a domain to enable custom authentication pages for the organization",
     "selectDomainForOrgAuthPage": "Selecione um domínio para a página de autenticação da organização",
     "domainPickerProvidedDomain": "Domínio fornecido",
     "domainPickerFreeProvidedDomain": "Domínio fornecido grátis",
@@ -1793,7 +1832,7 @@
     "domainPickerInvalidSubdomainCannotMakeValid": "\"{sub}\" não pôde ser válido para {domain}.",
     "domainPickerSubdomainSanitized": "Subdomínio banalizado",
     "domainPickerSubdomainCorrected": "\"{sub}\" foi corrigido para \"{sanitized}\"",
-    "orgAuthSignInTitle": "Entrar na sua organização",
+    "orgAuthSignInTitle": "Sign in to the organization",
     "orgAuthChooseIdpDescription": "Escolha o seu provedor de identidade para continuar",
     "orgAuthNoIdpConfigured": "Esta organização não tem nenhum provedor de identidade configurado. Você pode entrar com a identidade do seu Pangolin.",
     "orgAuthSignInWithPangolin": "Entrar com o Pangolin",
@@ -1811,7 +1850,7 @@
     "enableTwoFactorAuthentication": "Ativar autenticação de dois fatores",
     "completeSecuritySteps": "Passos de segurança completos",
     "securitySettings": "Configurações de Segurança",
-    "securitySettingsDescription": "Configurar políticas de segurança para a sua organização",
+    "securitySettingsDescription": "Configure security policies for the organization",
     "requireTwoFactorForAllUsers": "Exigir autenticação dupla para todos os usuários",
     "requireTwoFactorDescription": "Quando ativado, todos os usuários internos nesta organização devem ter a autenticação de dois fatores ativada para acessar a organização.",
     "requireTwoFactorDisabledDescription": "Este recurso requer uma licença válida (Enterprise) ou assinatura ativa (SaaS)",
@@ -1874,8 +1913,12 @@
     "enterpriseEdition": "Edição Enterprise",
     "unlicensed": "Sem licença",
     "beta": "Beta",
-    "manageClients": "Gerenciar Clientes",
-    "manageClientsDescription": "Clientes são dispositivos que podem se conectar aos seus sites",
+    "manageUserDevices": "User Devices",
+    "manageUserDevicesDescription": "View and manage devices that users use to privately connect to resources",
+    "manageMachineClients": "Manage Machine Clients",
+    "manageMachineClientsDescription": "Create and manage clients that servers and systems use to privately connect to resources",
+    "clientsTableUserClients": "User",
+    "clientsTableMachineClients": "Machine",
     "licenseTableValidUntil": "Válido até",
     "saasLicenseKeysSettingsTitle": "Licenças empresariais",
     "saasLicenseKeysSettingsDescription": "Gerar e gerenciar chaves de licença Enterprise para instâncias Pangolin auto-hospedadas",
@@ -2075,7 +2118,7 @@
     "preferWildcardCert": "Prefere Certificado Wildcard",
     "unverified": "Não verificado",
     "domainSetting": "Configurações do domínio",
-    "domainSettingDescription": "Configure as configurações para o seu domínio",
+    "domainSettingDescription": "Configure settings for the domain",
     "preferWildcardCertDescription": "Tentativa de gerar um certificado coringa (requer um resolvedor de certificado devidamente configurado).",
     "recordName": "Nome da gravação",
     "auto": "Automático",
@@ -2089,15 +2132,15 @@
     "olmUpdateAvailableInfo": "Uma versão atualizada do Olm está disponível. Atualize para a versão mais recente para ter a melhor experiência.",
     "client": "Cliente",
     "proxyProtocol": "Configurações de Protocolo Proxy",
-    "proxyProtocolDescription": "Configurar o protocolo Proxy para preservar endereços IP do cliente para serviços TCP/UDP.",
+    "proxyProtocolDescription": "Configure Proxy Protocol to preserve client IP addresses for TCP services.",
     "enableProxyProtocol": "Habilitar protocolo proxy",
-    "proxyProtocolInfo": "Preservar endereços IP do cliente para backends TCP/UDP",
+    "proxyProtocolInfo": "Preserve client IP addresses for TCP backends",
     "proxyProtocolVersion": "Versão do Protocolo Proxy",
     "version1": " Versão 1 (recomendado)",
     "version2": "Versão 2",
     "versionDescription": "A versão 1 é baseada em texto e amplamente suportada. A versão 2 é binária e mais eficiente, mas menos compatível.",
     "warning": "ATENÇÃO",
-    "proxyProtocolWarning": "Seu aplicativo de backend deve ser configurado para aceitar conexões de protocolo de proxy. Se o seu backend não suportar o protocolo de protocolo, habilitando isso quebrará todas as conexões. Certifique-se de configurar seu backend para confiar nos cabeçalhos do protocolo proxy no Traefik.",
+    "proxyProtocolWarning": "The backend application must be configured to accept Proxy Protocol connections. If your backend doesn't support Proxy Protocol, enabling this will break all connections so only enable this if you know what you're doing. Make sure to configure your backend to trust Proxy Protocol headers from Traefik.",
     "restarting": "Reiniciando...",
     "manual": "Manualmente",
     "messageSupport": "Suporte a Mensagens",
@@ -2120,6 +2163,43 @@
     "supportMessageSent": "Mensagem enviada!",
     "supportWillContact": "Entraremos em contato em breve!",
     "selectLogRetention": "Selecionar retenção de log",
+    "terms": "Terms",
+    "privacy": "Privacy",
+    "security": "Security",
+    "docs": "Docs",
+    "deviceActivation": "Device activation",
+    "deviceCodeInvalidFormat": "Code must be 9 characters (e.g., A1AJ-N5JD)",
+    "deviceCodeInvalidOrExpired": "Invalid or expired code",
+    "deviceCodeVerifyFailed": "Failed to verify device code",
+    "signedInAs": "Signed in as",
+    "deviceCodeEnterPrompt": "Enter the code displayed on the device",
+    "continue": "Continue",
+    "deviceUnknownLocation": "Unknown location",
+    "deviceAuthorizationRequested": "This authorization was requested from {location} on {date}. Make sure you trust this device as it will get access to the account.",
+    "deviceLabel": "Device: {deviceName}",
+    "deviceWantsAccess": "wants to access your account",
+    "deviceExistingAccess": "Existing access:",
+    "deviceFullAccess": "Full access to your account",
+    "deviceOrganizationsAccess": "Access to all organizations your account has access to",
+    "deviceAuthorize": "Authorize {applicationName}",
+    "deviceConnected": "Device Connected!",
+    "deviceAuthorizedMessage": "Device is authorized to access your account.",
+    "pangolinCloud": "Pangolin Cloud",
+    "viewDevices": "View Devices",
+    "viewDevicesDescription": "Manage your connected devices",
+    "noDevices": "No devices found",
+    "dateCreated": "Date Created",
+    "unnamedDevice": "Unnamed Device",
+    "deviceQuestionRemove": "Are you sure you want to delete this device?",
+    "deviceMessageRemove": "This action cannot be undone.",
+    "deviceDeleteConfirm": "Delete Device",
+    "deleteDevice": "Delete Device",
+    "errorLoadingDevices": "Error loading devices",
+    "failedToLoadDevices": "Failed to load devices",
+    "deviceDeleted": "Device deleted",
+    "deviceDeletedDescription": "The device has been successfully deleted.",
+    "errorDeletingDevice": "Error deleting device",
+    "failedToDeleteDevice": "Failed to delete device",
     "showColumns": "Exibir Colunas",
     "hideColumns": "Ocultar colunas",
     "columnVisibility": "Visibilidade da Coluna",
@@ -2134,6 +2214,10 @@
     "enableSelected": "Habilitar Selecionados",
     "disableSelected": "Desativar Selecionados",
     "checkSelectedStatus": "Status de Verificação dos Selecionados",
+    "clients": "Clients",
+    "accessClientSelect": "Select machine clients",
+    "resourceClientDescription": "Machine clients that can access this resource",
+    "regenerate": "Regenerate",
     "credentials": "Credenciais",
     "savecredentials": "Salvar Credenciais",
     "regeneratecredentials": "Rechave",
@@ -2151,7 +2235,6 @@
     "endpoint": "Endpoint",
     "Id": "Id",
     "SecretKey": "Chave secreta",
-    "featureDisabledTooltip": "Este recurso só está disponível no plano corporativo e requer que uma licença utilize.",
     "niceId": "Belo ID",
     "niceIdUpdated": "Bom ID atualizado",
     "niceIdUpdatedSuccessfully": "Bom ID atualizado com sucesso",
@@ -2160,5 +2243,15 @@
     "niceIdCannotBeEmpty": "Bom ID não pode estar vazio",
     "enterIdentifier": "Inserir identificador",
     "identifier": "Identifier",
-    "noData": "No Data"
+    "deviceLoginUseDifferentAccount": "Not you? Use a different account.",
+    "deviceLoginDeviceRequestingAccessToAccount": "A device is requesting access to this account.",
+    "noData": "No Data",
+    "machineClients": "Machine Clients",
+    "install": "Install",
+    "run": "Run",
+    "clientNameDescription": "The display name of the client that can be changed later.",
+    "clientAddress": "Client Address (Advanced)",
+    "setupFailedToFetchSubnet": "Failed to fetch default subnet",
+    "setupSubnetAdvanced": "Subnet (Advanced)",
+    "setupSubnetDescription": "The subnet for this organization's internal network."
 }

messages/ru-RU.json

@@ -1,12 +1,12 @@
 {
-    "setupCreate": "Создайте свою организацию, сайт и ресурсы",
+    "setupCreate": "Create the organization, site, and resources",
     "setupNewOrg": "Новая организация",
     "setupCreateOrg": "Создать организацию",
     "setupCreateResources": "Создать ресурсы",
     "setupOrgName": "Название организации",
-    "orgDisplayName": "Это отображаемое имя вашей организации.",
+    "orgDisplayName": "This is the display name of the organization.",
     "orgId": "ID организации",
-    "setupIdentifierMessage": "Уникальный идентификатор вашей организации. Он задаётся отдельно от отображаемого имени.",
+    "setupIdentifierMessage": "This is the unique identifier for the organization.",
     "setupErrorIdentifier": "ID организации уже занят. Выберите другой.",
     "componentsErrorNoMemberCreate": "Вы пока не состоите ни в одной организации. Создайте организацию для начала работы.",
     "componentsErrorNoMember": "Вы пока не состоите ни в одной организации.",
@@ -50,10 +50,10 @@
     "siteMessageRemove": "После удаления сайт больше не будет доступен. Все цели, связанные с сайтом, также будут удалены.",
     "siteQuestionRemove": "Вы уверены, что хотите удалить сайт из организации?",
     "siteManageSites": "Управление сайтами",
-    "siteDescription": "Обеспечьте подключение к вашей сети через защищённые туннели",
+    "siteDescription": "Create and manage sites to enable connectivity to private networks",
     "siteCreate": "Создать сайт",
     "siteCreateDescription2": "Следуйте инструкциям ниже для создания и подключения нового сайта",
-    "siteCreateDescription": "Создайте новый сайт для подключения ваших ресурсов",
+    "siteCreateDescription": "Create a new site to start connecting resources",
     "close": "Закрыть",
     "siteErrorCreate": "Ошибка при создании сайта",
     "siteErrorCreateKeyPair": "Пара ключей или настройки сайта по умолчанию не найдены",
@@ -74,7 +74,7 @@
     "siteInstallNewt": "Установить Newt",
     "siteInstallNewtDescription": "Запустите Newt в вашей системе",
     "WgConfiguration": "Конфигурация WireGuard",
-    "WgConfigurationDescription": "Используйте следующую конфигурацию для подключения к вашей сети",
+    "WgConfigurationDescription": "Use the following configuration to connect to the network",
     "operatingSystem": "Операционная система",
     "commands": "Команды",
     "recommended": "Рекомендуется",
@@ -87,32 +87,32 @@
     "siteUpdated": "Сайт обновлён",
     "siteUpdatedDescription": "Сайт был успешно обновлён.",
     "siteGeneralDescription": "Настройте общие параметры для этого сайта",
-    "siteSettingDescription": "Настройте параметры вашего сайта",
+    "siteSettingDescription": "Configure the settings on the site",
     "siteSetting": "Настройки {siteName}",
-    "siteNewtTunnel": "Туннель Newt (Рекомендуется)",
-    "siteNewtTunnelDescription": "Простейший способ создать точку входа в вашу сеть. Дополнительная настройка не требуется.",
+    "siteNewtTunnel": "Newt Site (Recommended)",
+    "siteNewtTunnelDescription": "Easiest way to create an entrypoint into any network. No extra setup.",
     "siteWg": "Базовый WireGuard",
     "siteWgDescription": "Используйте любой клиент WireGuard для открытия туннеля. Требуется ручная настройка NAT.",
     "siteWgDescriptionSaas": "Используйте любой клиент WireGuard для создания туннеля. Требуется ручная настройка NAT. РАБОТАЕТ ТОЛЬКО НА САМОСТОЯТЕЛЬНО РАЗМЕЩЕННЫХ УЗЛАХ",
     "siteLocalDescription": "Только локальные ресурсы. Без туннелирования.",
     "siteLocalDescriptionSaas": "Только локальные ресурсы. Нет туннелей. Только для удаленных узлов.",
     "siteSeeAll": "Просмотреть все сайты",
-    "siteTunnelDescription": "Выберите способ подключения к вашему сайту",
-    "siteNewtCredentials": "Учётные данные Newt",
-    "siteNewtCredentialsDescription": "Так Newt будет выполнять аутентификацию на сервере",
-    "siteCredentialsSave": "Сохраните ваши учётные данные",
+    "siteTunnelDescription": "Determine how you want to connect to the site",
+    "siteNewtCredentials": "Credentials",
+    "siteNewtCredentialsDescription": "This is how the site will authenticate with the server",
+    "siteCredentialsSave": "Save the Credentials",
     "siteCredentialsSaveDescription": "Вы сможете увидеть эти данные только один раз. Обязательно скопируйте их в безопасное место.",
     "siteInfo": "Информация о сайте",
     "status": "Статус",
     "shareTitle": "Управление общими ссылками",
-    "shareDescription": "Создавайте общие ссылки для предоставления временного или постоянного доступа к вашим ресурсам",
+    "shareDescription": "Create shareable links to grant temporary or permanent access to proxy resources",
     "shareSearch": "Поиск общих ссылок...",
     "shareCreate": "Создать общую ссылку",
     "shareErrorDelete": "Не удалось удалить ссылку",
     "shareErrorDeleteMessage": "Произошла ошибка при удалении ссылки",
     "shareDeleted": "Ссылка удалена",
     "shareDeletedDescription": "Ссылка была успешно удалена",
-    "shareTokenDescription": "Ваш токен доступа может быть передан двумя способами: как параметр запроса или в заголовках запроса. Он должен передаваться клиентом при каждом запросе для аутентификации.",
+    "shareTokenDescription": "The access token can be passed in two ways: as a query parameter or in the request headers. These must be passed from the client on every request for authenticated access.",
     "accessToken": "Токен доступа",
     "usageExamples": "Примеры использования",
     "tokenId": "ID токена",
@@ -121,7 +121,7 @@
     "importantNote": "Важное примечание",
     "shareImportantDescription": "Из соображений безопасности рекомендуется использовать заголовки вместо параметров запроса, когда это возможно, так как параметры запроса могут сохраняться в логах сервера или истории браузера.",
     "token": "Токен",
-    "shareTokenSecurety": "Храните ваш токен доступа в безопасности. Не делитесь им в общедоступных местах или клиентском коде.",
+    "shareTokenSecurety": "Keep the access token secure. Do not share it in publicly accessible areas or client-side code.",
     "shareErrorFetchResource": "Не удалось получить ресурсы",
     "shareErrorFetchResourceDescription": "Произошла ошибка при получении ресурсов",
     "shareErrorCreate": "Не удалось создать общую ссылку",
@@ -144,8 +144,10 @@
     "expires": "Истекает",
     "never": "Никогда",
     "shareErrorSelectResource": "Пожалуйста, выберите ресурс",
-    "resourceTitle": "Управление ресурсами",
-    "resourceDescription": "Создавайте защищённые прокси к вашим приватным приложениям",
+    "proxyResourceTitle": "Manage Public Resources",
+    "proxyResourceDescription": "Create and manage resources that are publicly accessible through a web browser",
+    "clientResourceTitle": "Manage Private Resources",
+    "clientResourceDescription": "Create and manage resources that are only accessible through a connected client",
     "resourcesSearch": "Поиск ресурсов...",
     "resourceAdd": "Добавить ресурс",
     "resourceErrorDelte": "Ошибка при удалении ресурса",
@@ -155,9 +157,9 @@
     "resourceMessageRemove": "После удаления ресурс больше не будет доступен. Все целевые узлы, связанные с ресурсом, также будут удалены.",
     "resourceQuestionRemove": "Вы уверены, что хотите удалить ресурс из организации?",
     "resourceHTTP": "HTTPS-ресурс",
-    "resourceHTTPDescription": "Проксирование запросов к вашему приложению через HTTPS с использованием поддомена или базового домена.",
+    "resourceHTTPDescription": "Proxy requests to the app over HTTPS using a subdomain or base domain.",
     "resourceRaw": "Сырой TCP/UDP-ресурс",
-    "resourceRawDescription": "Проксирование запросов к вашему приложению через TCP/UDP с использованием по номеру порта.",
+    "resourceRawDescription": "Proxy requests to the app over TCP/UDP using a port number. This only works when sites are connected to nodes.",
     "resourceCreate": "Создание ресурса",
     "resourceCreateDescription": "Следуйте инструкциям ниже для создания нового ресурса",
     "resourceSeeAll": "Посмотреть все ресурсы",
@@ -171,22 +173,22 @@
     "noCountryFound": "Страна не найдена.",
     "siteSelectionDescription": "Этот сайт предоставит подключение к цели.",
     "resourceType": "Тип ресурса",
-    "resourceTypeDescription": "Определите, как вы хотите получать доступ к вашему ресурсу",
+    "resourceTypeDescription": "Determine how to access the resource",
     "resourceHTTPSSettings": "Настройки HTTPS",
-    "resourceHTTPSSettingsDescription": "Настройте, как будет осуществляться доступ к вашему ресурсу через HTTPS",
+    "resourceHTTPSSettingsDescription": "Configure how the resource will be accessed over HTTPS",
     "domainType": "Тип домена",
     "subdomain": "Поддомен",
     "baseDomain": "Базовый домен",
-    "subdomnainDescription": "Поддомен, на котором будет доступен ресурс.",
+    "subdomnainDescription": "The subdomain where the resource will be accessible.",
     "resourceRawSettings": "Настройки TCP/UDP",
-    "resourceRawSettingsDescription": "Настройте доступ к вашему ресурсу по TCP/UDP. Вы соотносите ресурс с портом на сервере хоста Pangolin, так что вы можете получить доступ к ресурсу с сервера server-public-ip:mapped-порта.",
+    "resourceRawSettingsDescription": "Configure how the resource will be accessed over TCP/UDP. You map the resource to a port on the host Pangolin server, so you can access the resource from server-public-ip:mapped-port.",
     "protocol": "Протокол",
     "protocolSelect": "Выберите протокол",
     "resourcePortNumber": "Номер порта",
     "resourcePortNumberDescription": "Внешний номер порта для проксирования запросов.",
     "cancel": "Отмена",
     "resourceConfig": "Фрагменты конфигурации",
-    "resourceConfigDescription": "Скопируйте и вставьте эти фрагменты конфигурации для настройки вашего TCP/UDP-ресурса",
+    "resourceConfigDescription": "Copy and paste these configuration snippets to set up the TCP/UDP resource",
     "resourceAddEntrypoints": "Traefik: Добавить точки входа",
     "resourceExposePorts": "Gerbil: Открыть порты в Docker Compose",
     "resourceLearnRaw": "Узнайте, как настроить TCP/UDP-ресурсы",
@@ -202,14 +204,14 @@
     "proxy": "Прокси",
     "internal": "Внутренний",
     "rules": "Правила",
-    "resourceSettingDescription": "Настройте параметры вашего ресурса",
+    "resourceSettingDescription": "Configure the settings on the resource",
     "resourceSetting": "Настройки {resourceName}",
-    "alwaysAllow": "Всегда разрешать",
-    "alwaysDeny": "Всегда запрещать",
+    "alwaysAllow": "Bypass Auth",
+    "alwaysDeny": "Block Access",
     "passToAuth": "Переход к аутентификации",
-    "orgSettingsDescription": "Настройте общие параметры вашей организации",
+    "orgSettingsDescription": "Configure the organization's settings",
     "orgGeneralSettings": "Настройки организации",
-    "orgGeneralSettingsDescription": "Управляйте данными и конфигурацией вашей организации",
+    "orgGeneralSettingsDescription": "Manage the organization's details and configuration",
     "saveGeneralSettings": "Сохранить общие настройки",
     "saveSettings": "Сохранить настройки",
     "orgDangerZone": "Опасная зона",
@@ -232,7 +234,7 @@
     "orgMissing": "Отсутствует ID организации",
     "orgMissingMessage": "Невозможно восстановить приглашение без ID организации.",
     "accessUsersManage": "Управление пользователями",
-    "accessUsersDescription": "Приглашайте пользователей и назначайте им роли для управления доступом к вашей организации",
+    "accessUsersDescription": "Invite and manage users with access to this organization",
     "accessUsersSearch": "Поиск пользователей...",
     "accessUserCreate": "Создать пользователя",
     "accessUserRemove": "Удалить пользователя",
@@ -241,13 +243,13 @@
     "role": "Роль",
     "nameRequired": "Имя обязательно",
     "accessRolesManage": "Управление ролями",
-    "accessRolesDescription": "Настройте роли для управления доступом к вашей организации",
+    "accessRolesDescription": "Create and manage roles for users in the organization",
     "accessRolesSearch": "Поиск ролей...",
     "accessRolesAdd": "Добавить роль",
     "accessRoleDelete": "Удалить роль",
     "description": "Описание",
     "inviteTitle": "Открытые приглашения",
-    "inviteDescription": "Управляйте вашими приглашениями для других пользователей",
+    "inviteDescription": "Manage invitations for other users to join the organization",
     "inviteSearch": "Поиск приглашений...",
     "minutes": "мин.",
     "hours": "ч.",
@@ -261,13 +263,13 @@
     "apiKeysErrorCreate": "Ошибка при создании ключа API",
     "apiKeysErrorSetPermission": "Ошибка при установке разрешений",
     "apiKeysCreate": "Сгенерировать ключ API",
-    "apiKeysCreateDescription": "Сгенерируйте новый ключ API для вашей организации",
+    "apiKeysCreateDescription": "Generate a new API key for the organization",
     "apiKeysGeneralSettings": "Разрешения",
     "apiKeysGeneralSettingsDescription": "Определите, что может делать этот ключ API",
-    "apiKeysList": "Ваш ключ API",
-    "apiKeysSave": "Сохраните ваш ключ API",
+    "apiKeysList": "New API Key",
+    "apiKeysSave": "Save the API Key",
     "apiKeysSaveDescription": "Вы сможете увидеть этот ключ только один раз. Обязательно скопируйте его в безопасное место.",
-    "apiKeysInfo": "Ваш ключ API:",
+    "apiKeysInfo": "The API key is:",
     "apiKeysConfirmCopy": "Я скопировал(а) ключ API",
     "generate": "Сгенерировать",
     "done": "Готово",
@@ -424,7 +426,7 @@
     "userCreated": "Пользователь создан",
     "userCreatedDescription": "Пользователь был успешно создан.",
     "userTypeInternal": "Внутренний пользователь",
-    "userTypeInternalDescription": "Пригласите пользователя напрямую в вашу организацию.",
+    "userTypeInternalDescription": "Invite a user to join the organization directly.",
     "userTypeExternal": "Внешний пользователь",
     "userTypeExternalDescription": "Создайте пользователя через внешний Identity Provider.",
     "accessUserCreateDescription": "Следуйте инструкциям ниже для создания нового пользователя",
@@ -468,13 +470,13 @@
     "accessControlsSubmit": "Сохранить контроль доступа",
     "roles": "Роли",
     "accessUsersRoles": "Управление пользователями и ролями",
-    "accessUsersRolesDescription": "Приглашайте пользователей и добавляйте их в роли для управления доступом к вашей организации",
+    "accessUsersRolesDescription": "Invite users and add them to roles to manage access to the organization",
     "key": "Ключ",
     "createdAt": "Создано в",
     "proxyErrorInvalidHeader": "Неверное значение пользовательского заголовка Host. Используйте формат доменного имени или оставьте пустым для сброса пользовательского заголовка Host.",
     "proxyErrorTls": "Неверное имя TLS сервера. Используйте формат доменного имени или оставьте пустым для удаления имени TLS сервера.",
     "proxyEnableSSL": "Включить SSL",
-    "proxyEnableSSLDescription": "Включить шифрование SSL/TLS для безопасных HTTPS подключений к вашим целям.",
+    "proxyEnableSSLDescription": "Enable SSL/TLS encryption for secure HTTPS connections to the targets.",
     "target": "Target",
     "configureTarget": "Настроить адресаты",
     "targetErrorFetch": "Не удалось получить цели",
@@ -490,29 +492,29 @@
     "targetsErrorUpdate": "Не удалось обновить цели",
     "targetsErrorUpdateDescription": "Произошла ошибка при обновлении целей",
     "targetTlsUpdate": "Настройки TLS обновлены",
-    "targetTlsUpdateDescription": "Ваши настройки TLS были успешно обновлены",
+    "targetTlsUpdateDescription": "TLS settings have been updated successfully",
     "targetErrorTlsUpdate": "Не удалось обновить настройки TLS",
     "targetErrorTlsUpdateDescription": "Произошла ошибка при обновлении настроек TLS",
     "proxyUpdated": "Настройки прокси обновлены",
-    "proxyUpdatedDescription": "Ваши настройки прокси были успешно обновлены",
+    "proxyUpdatedDescription": "Proxy settings have been updated successfully",
     "proxyErrorUpdate": "Не удалось обновить настройки прокси",
     "proxyErrorUpdateDescription": "Произошла ошибка при обновлении настроек прокси",
     "targetAddr": "IP / Имя хоста",
     "targetPort": "Порт",
     "targetProtocol": "Протокол",
     "targetTlsSettings": "Конфигурация безопасного соединения",
-    "targetTlsSettingsDescription": "Настройте параметры SSL/TLS для вашего ресурса",
+    "targetTlsSettingsDescription": "Configure SSL/TLS settings for the resource",
     "targetTlsSettingsAdvanced": "Расширенные настройки TLS",
     "targetTlsSni": "Имя TLS сервера",
     "targetTlsSniDescription": "Имя TLS сервера для использования в SNI. Оставьте пустым для использования по умолчанию.",
     "targetTlsSubmit": "Сохранить настройки",
     "targets": "Конфигурация целей",
-    "targetsDescription": "Настройте цели для маршрутизации трафика к вашим бэкэнд сервисам",
+    "targetsDescription": "Set up targets to route traffic to backend services",
     "targetStickySessions": "Включить фиксированные сессии",
     "targetStickySessionsDescription": "Сохранять соединения на одной и той же целевой точке в течение всей сессии.",
     "methodSelect": "Выберите метод",
     "targetSubmit": "Добавить цель",
-    "targetNoOne": "Этот ресурс не имеет никаких целей. Добавьте цель для настройки, где отправлять запросы к вашему бэкэнду.",
+    "targetNoOne": "This resource doesn't have any targets. Add a target to configure where to send requests to the backend.",
     "targetNoOneDescription": "Добавление более одной цели выше включит балансировку нагрузки.",
     "targetsSubmit": "Сохранить цели",
     "addTarget": "Добавить цель",
@@ -530,7 +532,7 @@
     "tlsServerNameDescription": "The TLS server name to use for SNI",
     "save": "Сохранить",
     "proxyAdditional": "Дополнительные настройки прокси",
-    "proxyAdditionalDescription": "Настройте, как ваш ресурс обрабатывает настройки прокси",
+    "proxyAdditionalDescription": "Configure how the resource handles proxy settings",
     "proxyCustomHeader": "Пользовательский заголовок Host",
     "proxyCustomHeaderDescription": "Заголовок host для установки при проксировании запросов. Оставьте пустым для использования по умолчанию.",
     "proxyAdditionalSubmit": "Сохранить настройки прокси",
@@ -570,7 +572,7 @@
     "rulesMatchType": "Тип совпадения",
     "value": "Значение",
     "rulesAbout": "О правилах",
-    "rulesAboutDescription": "Правила позволяют контролировать доступ к вашему ресурсу на основе набора критериев. Вы можете создавать правила для разрешения или запрета доступа на основе IP адреса или URL пути.",
+    "rulesAboutDescription": "Rules allow you to control access to the resource based on a set of criteria. You can create rules to allow or deny access based on IP address or URL path.",
     "rulesActions": "Действия",
     "rulesActionAlwaysAllow": "Всегда разрешать: Обойти все методы аутентификации",
     "rulesActionAlwaysDeny": "Всегда запрещать: Блокировать все запросы; аутентификация не может быть выполнена",
@@ -582,7 +584,7 @@
     "rulesEnable": "Включить правила",
     "rulesEnableDescription": "Включить или отключить проверку правил для этого ресурса",
     "rulesResource": "Конфигурация правил ресурса",
-    "rulesResourceDescription": "Настройте правила для контроля доступа к вашему ресурсу",
+    "rulesResourceDescription": "Configure rules to control access to the resource",
     "ruleSubmit": "Добавить правило",
     "rulesNoOne": "Нет правил. Добавьте правило с помощью формы.",
     "rulesOrder": "Правила оцениваются по приоритету в возрастающем порядке.",
@@ -598,7 +600,7 @@
     "none": "Нет",
     "unknown": "Неизвестно",
     "resources": "Ресурсы",
-    "resourcesDescription": "Ресурсы - это прокси к приложениям, работающим в вашей частной сети. Создайте ресурс для любого HTTP/HTTPS или сырого TCP/UDP сервиса в вашей частной сети. Каждый ресурс должен быть подключен к сайту для обеспечения приватного, безопасного соединения через зашифрованный туннель WireGuard.",
+    "resourcesDescription": "Resources are proxies to applications running on the private network. Create a resource for any HTTP/HTTPS or raw TCP/UDP service on your private network. Each resource must be connected to a site to enable private, secure connectivity through an encrypted WireGuard tunnel.",
     "resourcesWireGuardConnect": "Безопасное соединение с шифрованием WireGuard",
     "resourcesMultipleAuthenticationMethods": "Настройка нескольких методов аутентификации",
     "resourcesUsersRolesAccess": "Контроль доступа на основе пользователей и ролей",
@@ -609,7 +611,7 @@
     "resourceSelect": "Выберите ресурс",
     "shareLinks": "Общие ссылки",
     "share": "Общие ссылки",
-    "shareDescription2": "Создавайте общие ссылки к вашим ресурсам. Ссылки предоставляют временный или неограниченный доступ к вашему ресурсу. Вы можете настроить время истечения ссылки при её создании.",
+    "shareDescription2": "Create shareable links to resources. Links provide temporary or unlimited access to your resource. You can configure the expiration duration of the link when you create one.",
     "shareEasyCreate": "Легко создавать и делиться",
     "shareConfigurableExpirationDuration": "Настраиваемая продолжительность истечения",
     "shareSecureAndRevocable": "Безопасные и отзываемые",
@@ -619,19 +621,19 @@
     "unknownCommand": "Неизвестная команда",
     "newtErrorFetchReleases": "Не удалось получить информацию о релизе: {err}",
     "newtErrorFetchLatest": "Ошибка при получении последнего релиза: {err}",
-    "newtEndpoint": "Конечная точка Newt",
-    "newtId": "Newt ID",
-    "newtSecretKey": "Секретный ключ Newt",
+    "newtEndpoint": "Endpoint",
+    "newtId": "ID",
+    "newtSecretKey": "Secret",
     "architecture": "Архитектура",
     "sites": "Сайты",
-    "siteWgAnyClients": "Используйте любой клиент WireGuard для подключения. Вам придётся обращаться к вашим внутренним ресурсам, используя IP узла.",
+    "siteWgAnyClients": "Use any WireGuard client to connect. You will have to address internal resources using the peer IP.",
     "siteWgCompatibleAllClients": "Совместим со всеми клиентами WireGuard",
     "siteWgManualConfigurationRequired": "Требуется ручная настройка",
     "userErrorNotAdminOrOwner": "Пользователь не является администратором или владельцем",
     "pangolinSettings": "Настройки - Pangolin",
     "accessRoleYour": "Ваша роль:",
-    "accessRoleSelect2": "Выберите роль",
-    "accessUserSelect": "Выберите пользователя",
+    "accessRoleSelect2": "Select roles",
+    "accessUserSelect": "Select users",
     "otpEmailEnter": "Введите email",
     "otpEmailEnterDescription": "Нажмите enter для добавления email после ввода в поле.",
     "otpEmailErrorInvalid": "Неверный email адрес. Подстановочный знак (*) должен быть всей локальной частью.",
@@ -683,7 +685,7 @@
     "resourcePincodeSetupTitle": "Установить PIN-код",
     "resourcePincodeSetupTitleDescription": "Установите PIN-код для защиты этого ресурса",
     "resourceRoleDescription": "Администраторы всегда имеют доступ к этому ресурсу.",
-    "resourceUsersRoles": "Пользователи и роли",
+    "resourceUsersRoles": "Access Controls",
     "resourceUsersRolesDescription": "Выберите пользователей и роли с доступом к этому ресурсу",
     "resourceUsersRolesSubmit": "Сохранить пользователей и роли",
     "resourceWhitelistSave": "Успешно сохранено",
@@ -779,15 +781,15 @@
     "idpOidcConfigure": "Конфигурация OAuth2/OIDC",
     "idpOidcConfigureDescription": "Настройте конечные точки и учётные данные поставщика OAuth2/OIDC",
     "idpClientId": "ID клиента",
-    "idpClientIdDescription": "OAuth2 ID клиента от вашего поставщика удостоверений",
+    "idpClientIdDescription": "The OAuth2 client ID from the identity provider",
     "idpClientSecret": "Секрет клиента",
-    "idpClientSecretDescription": "OAuth2 секрет клиента от вашего поставщика удостоверений",
+    "idpClientSecretDescription": "The OAuth2 client secret from the identity provider",
     "idpAuthUrl": "URL авторизации",
     "idpAuthUrlDescription": "URL конечной точки авторизации OAuth2",
     "idpTokenUrl": "URL токена",
     "idpTokenUrlDescription": "URL конечной точки токена OAuth2",
     "idpOidcConfigureAlert": "Важная информация",
-    "idpOidcConfigureAlertDescription": "После создания поставщика удостоверений вам нужно будет настроить URL обратного вызова в настройках вашего поставщика удостоверений. URL обратного вызова будет предоставлен после успешного создания.",
+    "idpOidcConfigureAlertDescription": "After creating the identity provider, you will need to configure the callback URL in the identity provider's settings. The callback URL will be provided after successful creation.",
     "idpToken": "Конфигурация токена",
     "idpTokenDescription": "Настройте, как извлекать информацию о пользователе из ID токена",
     "idpJmespathAbout": "О JMESPath",
@@ -804,7 +806,7 @@
     "idpSubmit": "Создать поставщика удостоверений",
     "orgPolicies": "Политики организации",
     "idpSettings": "Настройки {idpName}",
-    "idpCreateSettingsDescription": "Настройте параметры для вашего поставщика удостоверений",
+    "idpCreateSettingsDescription": "Configure the settings for the identity provider",
     "roleMapping": "Сопоставление ролей",
     "orgMapping": "Сопоставление организаций",
     "orgPoliciesSearch": "Поиск политик организации...",
@@ -839,7 +841,7 @@
     "idpUpdatedDescription": "Поставщик удостоверений успешно обновлён",
     "redirectUrl": "URL редиректа",
     "redirectUrlAbout": "О редиректе URL",
-    "redirectUrlAboutDescription": "Это URL, на который пользователи будут перенаправлены после аутентификации. Вам нужно настроить этот URL в настройках вашего поставщика удостоверений.",
+    "redirectUrlAboutDescription": "This is the URL to which users will be redirected after authentication. You need to configure this URL in the identity provider's settings.",
     "pangolinAuth": "Аутентификация - Pangolin",
     "verificationCodeLengthRequirements": "Ваш код подтверждения должен состоять из 8 символов.",
     "errorOccurred": "Произошла ошибка",
@@ -922,6 +924,10 @@
     "passwordResetSent": "Мы отправим код сброса пароля на этот email адрес.",
     "passwordResetCode": "Код сброса пароля",
     "passwordResetCodeDescription": "Проверьте вашу почту для получения кода сброса пароля.",
+    "generatePasswordResetCode": "Generate Password Reset Code",
+    "passwordResetCodeGenerated": "Password Reset Code Generated",
+    "passwordResetCodeGeneratedDescription": "Share this code with the user. They can use it to reset their password.",
+    "passwordResetUrl": "Reset URL",
     "passwordNew": "Новый пароль",
     "passwordNewConfirm": "Подтвердите новый пароль",
     "changePassword": "Изменить пароль",
@@ -939,6 +945,9 @@
     "pincodeAuth": "Код аутентификатора",
     "pincodeSubmit2": "Отправить код",
     "passwordResetSubmit": "Запросить сброс",
+    "passwordResetAlreadyHaveCode": "Enter Password Reset Code",
+    "passwordResetSmtpRequired": "Please contact your administrator",
+    "passwordResetSmtpRequiredDescription": "A password reset code is required to reset your password. Please contact your administrator for assistance.",
     "passwordBack": "Назад к паролю",
     "loginBack": "Вернуться к входу",
     "signup": "Регистрация",
@@ -1104,12 +1113,15 @@
     "actionListSiteResources": "Список ресурсов сайта",
     "actionUpdateSiteResource": "Обновить ресурс сайта",
     "actionListInvitations": "Список приглашений",
+    "actionExportLogs": "Export Logs",
+    "actionViewLogs": "View Logs",
     "noneSelected": "Ничего не выбрано",
     "orgNotFound2": "Организации не найдены.",
     "searchProgress": "Поиск...",
     "create": "Создать",
     "orgs": "Организации",
     "loginError": "Произошла ошибка при входе",
+    "loginRequiredForDevice": "Login is required to authenticate your device.",
     "passwordForgot": "Забыли пароль?",
     "otpAuth": "Двухфакторная аутентификация",
     "otpAuthDescription": "Введите код из вашего приложения-аутентификатора или один из ваших одноразовых резервных кодов.",
@@ -1164,23 +1176,29 @@
     "sidebarHome": "Главная",
     "sidebarSites": "Сайты",
     "sidebarResources": "Ресурсы",
+    "sidebarProxyResources": "Public",
+    "sidebarClientResources": "Private",
     "sidebarAccessControl": "Контроль доступа",
+    "sidebarLogsAndAnalytics": "Logs & Analytics",
     "sidebarUsers": "Пользователи",
+    "sidebarAdmin": "Admin",
     "sidebarInvitations": "Приглашения",
     "sidebarRoles": "Роли",
-    "sidebarShareableLinks": "Общие ссылки",
+    "sidebarShareableLinks": "Links",
     "sidebarApiKeys": "API ключи",
     "sidebarSettings": "Настройки",
     "sidebarAllUsers": "Все пользователи",
     "sidebarIdentityProviders": "Поставщики удостоверений",
     "sidebarLicense": "Лицензия",
     "sidebarClients": "Клиенты",
+    "sidebarUserDevices": "Users",
+    "sidebarMachineClients": "Machines",
     "sidebarDomains": "Домены",
     "sidebarGeneral": "General",
     "sidebarLogAndAnalytics": "Log & Analytics",
     "sidebarBluePrints": "Чертежи",
     "sidebarOrganization": "Organization",
-    "sidebarLogsAnalytics": "Request Analytics",
+    "sidebarLogsAnalytics": "Analytics",
     "blueprints": "Чертежи",
     "blueprintsDescription": "Применить декларирующие конфигурации и просмотреть предыдущие запуски",
     "blueprintAdd": "Добавить чертёж",
@@ -1191,7 +1209,7 @@
     "blueprintDetailsDescription": "Посмотреть результат примененного чертежа и все возникшие ошибки",
     "blueprintInfo": "Информация о чертеже",
     "message": "Сообщение",
-    "blueprintContentsDescription": "Определите содержимое YAML, описывающее вашу инфраструктуру",
+    "blueprintContentsDescription": "Define the YAML content describing the infrastructure",
     "blueprintErrorCreateDescription": "Произошла ошибка при применении чертежа",
     "blueprintErrorCreate": "Ошибка при создании чертежа",
     "searchBlueprintProgress": "Поиск чертежей...",
@@ -1247,15 +1265,15 @@
     "loading": "Загрузка",
     "restart": "Перезагрузка",
     "domains": "Домены",
-    "domainsDescription": "Управление доменами для вашей организации",
+    "domainsDescription": "Create and manage domains available in the organization",
     "domainsSearch": "Поиск доменов...",
     "domainAdd": "Добавить Домен",
-    "domainAddDescription": "Зарегистрировать новый домен в вашей организации",
+    "domainAddDescription": "Register a new domain with to the organization",
     "domainCreate": "Создать Домен",
     "domainCreatedDescription": "Домен успешно создан",
     "domainDeletedDescription": "Домен успешно удален",
-    "domainQuestionRemove": "Вы уверены, что хотите удалить домен из вашей учетной записи?",
-    "domainMessageRemove": "После удаления домен больше не будет связан с вашей учетной записью.",
+    "domainQuestionRemove": "Are you sure you want to remove the domain?",
+    "domainMessageRemove": "Once removed, the domain will no longer be associated with the organization.",
     "domainConfirmDelete": "Подтвердить удаление домена",
     "domainDelete": "Удалить Домен",
     "domain": "Домен",
@@ -1274,7 +1292,7 @@
     "pending": "В ожидании",
     "sidebarBilling": "Выставление счетов",
     "billing": "Выставление счетов",
-    "orgBillingDescription": "Управляйте информацией о выставлении счетов и подписками",
+    "orgBillingDescription": "Manage billing information and subscriptions",
     "github": "GitHub",
     "pangolinHosted": "Pangolin Hosted",
     "fossorial": "Fossorial",
@@ -1317,7 +1335,7 @@
     "domainPickerSortAsc": "А-Я",
     "domainPickerSortDesc": "Я-А",
     "domainPickerCheckingAvailability": "Проверка доступности...",
-    "domainPickerNoMatchingDomains": "Не найдены сопоставимые домены. Попробуйте другой домен или проверьте настройки доменов вашей организации.",
+    "domainPickerNoMatchingDomains": "No matching domains found. Try a different domain or check the organization's domain settings.",
     "domainPickerOrganizationDomains": "Домены организации",
     "domainPickerProvidedDomains": "Предоставленные домены",
     "domainPickerSubdomain": "Поддомен: {subdomain}",
@@ -1351,7 +1369,7 @@
     "billingModifySubscription": "Изменить подписку",
     "billingStartSubscription": "Начать подписку",
     "billingRecurringCharge": "Периодический взнос",
-    "billingManageSubscriptionSettings": "Управляйте настройками и предпочтениями вашей подписки",
+    "billingManageSubscriptionSettings": "Manage subscription settings and preferences",
     "billingNoActiveSubscription": "У вас нет активной подписки. Начните подписку, чтобы увеличить лимиты использования.",
     "billingFailedToLoadSubscription": "Не удалось загрузить подписку",
     "billingFailedToLoadUsage": "Не удалось загрузить использование",
@@ -1362,9 +1380,9 @@
     "billingPortalError": "Ошибка портала",
     "billingDataUsageInfo": "Вы несете ответственность за все данные, переданные через безопасные туннели при подключении к облаку. Это включает как входящий, так и исходящий трафик на всех ваших сайтах. При достижении лимита ваши сайты будут отключаться до тех пор, пока вы не обновите план или не уменьшите его использование. При использовании узлов не взимается плата.",
     "billingOnlineTimeInfo": "Вы тарифицируете на то, как долго ваши сайты будут подключены к облаку. Например, 44 640 минут равны одному сайту, работающему круглосуточно за весь месяц. Когда вы достигните лимита, ваши сайты будут отключаться до тех пор, пока вы не обновите тарифный план или не сократите нагрузку. При использовании узлов не тарифицируется.",
-    "billingUsersInfo": "С вас взимается плата за каждого пользователя в вашей организации. Оплата рассчитывается ежедневно исходя из количества активных учетных записей пользователей в вашей организации.",
-    "billingDomainInfo": "С вас взимается плата за каждый домен в вашей организации. Оплата рассчитывается ежедневно исходя из количества активных учетных записей доменов в вашей организации.",
-    "billingRemoteExitNodesInfo": "С вас взимается плата за каждый управляемый узел в вашей организации. Оплата рассчитывается ежедневно исходя из количества активных управляемых узлов в вашей организации.",
+    "billingUsersInfo": "You're charged for each user in the organization. Billing is calculated daily based on the number of active user accounts in your org.",
+    "billingDomainInfo": "You're charged for each domain in the organization. Billing is calculated daily based on the number of active domain accounts in your org.",
+    "billingRemoteExitNodesInfo": "You're charged for each managed Node in the organization. Billing is calculated daily based on the number of active managed Nodes in your org.",
     "domainNotFound": "Домен не найден",
     "domainNotFoundDescription": "Этот ресурс отключен, так как домен больше не существует в нашей системе. Пожалуйста, установите новый домен для этого ресурса.",
     "failed": "Ошибка",
@@ -1456,23 +1474,23 @@
     "errorCreatingClient": "Ошибка при создании клиента",
     "clientDefaultsNotFound": "Настройки клиента по умолчанию не найдены",
     "createClient": "Создать клиента",
-    "createClientDescription": "Создайте нового клиента для подключения к вашим сайтам",
+    "createClientDescription": "Create a new client to access private resources",
     "seeAllClients": "Просмотреть всех клиентов",
     "clientInformation": "Информация о клиенте",
     "clientNamePlaceholder": "Имя клиента",
     "address": "Адрес",
     "subnetPlaceholder": "Подсеть",
-    "addressDescription": "Адрес, который этот клиент будет использовать для подключения",
+    "addressDescription": "The internal address of the client. Must fall within the organization's subnet.",
     "selectSites": "Выберите сайты",
     "sitesDescription": "Клиент будет иметь подключение к выбранным сайтам",
     "clientInstallOlm": "Установить Olm",
     "clientInstallOlmDescription": "Запустите Olm на вашей системе",
-    "clientOlmCredentials": "Учётные данные Olm",
-    "clientOlmCredentialsDescription": "Так Olm будет аутентифицироваться через сервер",
-    "olmEndpoint": "Конечная точка Olm",
-    "olmId": "Olm ID",
-    "olmSecretKey": "Секретный ключ Olm",
-    "clientCredentialsSave": "Сохраните ваши учётные данные",
+    "clientOlmCredentials": "Credentials",
+    "clientOlmCredentialsDescription": "This is how the client will authenticate with the server",
+    "olmEndpoint": "Endpoint",
+    "olmId": "ID",
+    "olmSecretKey": "Secret",
+    "clientCredentialsSave": "Save the Credentials",
     "clientCredentialsSaveDescription": "Вы сможете увидеть их только один раз. Обязательно скопируйте в безопасное место.",
     "generalSettingsDescription": "Настройте общие параметры для этого клиента",
     "clientUpdated": "Клиент обновлен",
@@ -1483,9 +1501,7 @@
     "sitesFetchError": "Произошла ошибка при получении сайтов.",
     "olmErrorFetchReleases": "Произошла ошибка при получении релизов Olm.",
     "olmErrorFetchLatest": "Произошла ошибка при получении последнего релиза Olm.",
-    "remoteSubnets": "Удалённые подсети",
     "enterCidrRange": "Введите диапазон CIDR",
-    "remoteSubnetsDescription": "Добавьте диапазоны адресов CIDR, которые можно получить из этого сайта удаленно, используя клиентов. Используйте формат 10.0.0.0/24. Это относится ТОЛЬКО к подключению через VPN клиентов.",
     "resourceEnableProxy": "Включить публичный прокси",
     "resourceEnableProxyDescription": "Включите публичное проксирование для этого ресурса. Это позволяет получить доступ к ресурсу извне сети через облако через открытый порт. Требуется конфигурация Traefik.",
     "externalProxyEnabled": "Внешний прокси включен",
@@ -1503,14 +1519,15 @@
     "enableHealthChecksDescription": "Мониторинг здоровья этой цели. При необходимости можно контролировать другую конечную точку.",
     "healthScheme": "Метод",
     "healthSelectScheme": "Выберите метод",
+    "healthCheckPortInvalid": "Health check port must be between 1 and 65535",
     "healthCheckPath": "Путь",
     "healthHostname": "IP / хост",
     "healthPort": "Порт",
     "healthCheckPathDescription": "Путь к проверке состояния здоровья.",
-    "healthyIntervalSeconds": "Интервал здоровых состояний",
-    "unhealthyIntervalSeconds": "Интервал нездоровых состояний",
+    "healthyIntervalSeconds": "Healthy Interval (sec)",
+    "unhealthyIntervalSeconds": "Unhealthy Interval (sec)",
     "IntervalSeconds": "Интервал здоровых состояний",
-    "timeoutSeconds": "Тайм-аут",
+    "timeoutSeconds": "Timeout (sec)",
     "timeIsInSeconds": "Время указано в секундах",
     "retryAttempts": "Количество попыток повторного запроса",
     "expectedResponseCodes": "Ожидаемые коды ответов",
@@ -1546,12 +1563,12 @@
     "resourceEditDomain": "Редактировать домен",
     "siteName": "Имя сайта",
     "proxyPort": "Порт",
-    "resourcesTableProxyResources": "Проксированные ресурсы",
-    "resourcesTableClientResources": "Клиентские ресурсы",
+    "resourcesTableProxyResources": "Public",
+    "resourcesTableClientResources": "Private",
     "resourcesTableNoProxyResourcesFound": "Проксированных ресурсов не найдено.",
     "resourcesTableNoInternalResourcesFound": "Внутренних ресурсов не найдено.",
     "resourcesTableDestination": "Пункт назначения",
-    "resourcesTableTheseResourcesForUseWith": "Эти ресурсы предназначены для использования с",
+    "resourcesTableAlias": "Alias",
     "resourcesTableClients": "Клиенты",
     "resourcesTableAndOnlyAccessibleInternally": "и доступны только внутренне при подключении с клиентом.",
     "resourcesTableNoTargets": "Нет ярлыков",
@@ -1560,8 +1577,8 @@
     "resourcesTableOffline": "Оффлайн",
     "resourcesTableUnknown": "Неизвестен",
     "resourcesTableNotMonitored": "Не отслеживается",
-    "editInternalResourceDialogEditClientResource": "Редактировать ресурс клиента",
-    "editInternalResourceDialogUpdateResourceProperties": "Обновите свойства ресурса и настройку цели для {resourceName}.",
+    "editInternalResourceDialogEditClientResource": "Edit Private Resource",
+    "editInternalResourceDialogUpdateResourceProperties": "Update the resource configuration and access controls for {resourceName}",
     "editInternalResourceDialogResourceProperties": "Свойства ресурса",
     "editInternalResourceDialogName": "Имя",
     "editInternalResourceDialogProtocol": "Протокол",
@@ -1580,11 +1597,22 @@
     "editInternalResourceDialogInvalidIPAddressFormat": "Неверный формат IP адреса",
     "editInternalResourceDialogDestinationPortMin": "Целевой порт должен быть не менее 1",
     "editInternalResourceDialogDestinationPortMax": "Целевой порт должен быть меньше 65536",
+    "editInternalResourceDialogPortModeRequired": "Protocol, proxy port, and destination port are required for port mode",
+    "editInternalResourceDialogMode": "Mode",
+    "editInternalResourceDialogModePort": "Port",
+    "editInternalResourceDialogModeHost": "Host",
+    "editInternalResourceDialogModeCidr": "CIDR",
+    "editInternalResourceDialogDestination": "Destination",
+    "editInternalResourceDialogDestinationHostDescription": "The IP address or hostname of the resource on the site's network.",
+    "editInternalResourceDialogDestinationIPDescription": "The IP or hostname address of the resource on the site's network.",
+    "editInternalResourceDialogDestinationCidrDescription": "The CIDR range of the resource on the site's network.",
+    "editInternalResourceDialogAlias": "Alias",
+    "editInternalResourceDialogAliasDescription": "An optional internal DNS alias for this resource.",
     "createInternalResourceDialogNoSitesAvailable": "Нет доступных сайтов",
     "createInternalResourceDialogNoSitesAvailableDescription": "Вам необходимо иметь хотя бы один сайт Newt с настроенной подсетью для создания внутреннего ресурса.",
     "createInternalResourceDialogClose": "Закрыть",
-    "createInternalResourceDialogCreateClientResource": "Создать ресурс клиента",
-    "createInternalResourceDialogCreateClientResourceDescription": "Создайте новый ресурс, который будет доступен клиентам, подключенным к выбранному сайту.",
+    "createInternalResourceDialogCreateClientResource": "Create Private Resource",
+    "createInternalResourceDialogCreateClientResourceDescription": "Create a new resource that will only be accessible to clients connected to the organization",
     "createInternalResourceDialogResourceProperties": "Свойства ресурса",
     "createInternalResourceDialogName": "Имя",
     "createInternalResourceDialogSite": "Сайт",
@@ -1613,11 +1641,22 @@
     "createInternalResourceDialogInvalidIPAddressFormat": "Неверный формат IP-адреса",
     "createInternalResourceDialogDestinationPortMin": "Целевой порт должен быть не менее 1",
     "createInternalResourceDialogDestinationPortMax": "Целевой порт должен быть меньше 65536",
+    "createInternalResourceDialogPortModeRequired": "Protocol, proxy port, and destination port are required for port mode",
+    "createInternalResourceDialogMode": "Mode",
+    "createInternalResourceDialogModePort": "Port",
+    "createInternalResourceDialogModeHost": "Host",
+    "createInternalResourceDialogModeCidr": "CIDR",
+    "createInternalResourceDialogDestination": "Destination",
+    "createInternalResourceDialogDestinationHostDescription": "The IP address or hostname of the resource on the site's network.",
+    "createInternalResourceDialogDestinationCidrDescription": "The CIDR range of the resource on the site's network.",
+    "createInternalResourceDialogAlias": "Alias",
+    "createInternalResourceDialogAliasDescription": "An optional internal DNS alias for this resource.",
     "siteConfiguration": "Конфигурация",
     "siteAcceptClientConnections": "Принимать подключения клиентов",
-    "siteAcceptClientConnectionsDescription": "Разрешите другим устройствам подключаться через этот экземпляр Newt в качестве шлюза с использованием клиентов.",
-    "siteAddress": "Адрес сайта",
-    "siteAddressDescription": "Укажите IP-адрес хоста для подключения клиентов. Это внутренний адрес сайта в сети Pangolin для адресации клиентов. Должен находиться в пределах подсети организационного уровня.",
+    "siteAcceptClientConnectionsDescription": "Allow user devices and clients to access resources on this site. This can be changed later.",
+    "siteAddress": "Site Address (Advanced)",
+    "siteAddressDescription": "The internal address of the site. Must fall within the organization's subnet.",
+    "siteNameDescription": "The display name of the site that can be changed later.",
     "autoLoginExternalIdp": "Автоматический вход с внешним провайдером",
     "autoLoginExternalIdpDescription": "Немедленно перенаправьте пользователя к внешнему провайдеру для аутентификации.",
     "selectIdp": "Выберите провайдера",
@@ -1631,7 +1670,7 @@
     "autoLoginErrorNoRedirectUrl": "URL-адрес перенаправления не получен от провайдера удостоверения.",
     "autoLoginErrorGeneratingUrl": "Не удалось сгенерировать URL-адрес аутентификации.",
     "remoteExitNodeManageRemoteExitNodes": "Удаленные узлы",
-    "remoteExitNodeDescription": "Самохост-один или несколько удаленных узлов для расширения сетевого подключения и уменьшения зависимости от облака",
+    "remoteExitNodeDescription": "Self-host one or more remote nodes to extend network connectivity and reduce reliance on the cloud",
     "remoteExitNodes": "Узлы",
     "searchRemoteExitNodes": "Поиск узлов...",
     "remoteExitNodeAdd": "Добавить узел",
@@ -1643,11 +1682,11 @@
     "sidebarRemoteExitNodes": "Удаленные узлы",
     "remoteExitNodeCreate": {
         "title": "Создать узел",
-        "description": "Создайте новый узел, чтобы расширить сетевое подключение",
+        "description": "Create a new node to extend network connectivity",
         "viewAllButton": "Все узлы",
         "strategy": {
             "title": "Стратегия создания",
-            "description": "Выберите эту опцию для настройки вашего узла или создания новых учетных данных.",
+            "description": "Choose this to manually configure the node or generate new credentials.",
             "adopt": {
                 "title": "Принять узел",
                 "description": "Выберите это, если у вас уже есть учетные данные для узла."
@@ -1668,7 +1707,7 @@
         },
         "generate": {
             "title": "Сгенерированные учетные данные",
-            "description": "Используйте эти учётные данные для настройки вашего узла",
+            "description": "Use these generated credentials to configure the node",
             "nodeIdTitle": "ID узла",
             "secretTitle": "Секретный ключ",
             "saveCredentialsTitle": "Добавить учетные данные в конфигурацию",
@@ -1744,16 +1783,16 @@
     "idpTypeLabel": "Тип поставщика удостоверений",
     "roleMappingExpressionPlaceholder": "например, contains(groups, 'admin') && 'Admin' || 'Member'",
     "idpGoogleConfiguration": "Конфигурация Google",
-    "idpGoogleConfigurationDescription": "Настройка учетных данных Google OAuth2",
-    "idpGoogleClientIdDescription": "Ваш Google OAuth2 ID клиента",
-    "idpGoogleClientSecretDescription": "Ваш Google OAuth2 Секрет",
+    "idpGoogleConfigurationDescription": "Configure the Google OAuth2 credentials",
+    "idpGoogleClientIdDescription": "Google OAuth2 Client ID",
+    "idpGoogleClientSecretDescription": "Google OAuth2 Client Secret",
     "idpAzureConfiguration": "Конфигурация Azure Entra ID",
-    "idpAzureConfigurationDescription": "Настройте учетные данные Azure Entra ID OAuth2",
+    "idpAzureConfigurationDescription": "Configure Azure Entra ID OAuth2 credentials",
     "idpTenantId": "Идентификатор арендатора",
-    "idpTenantIdPlaceholder": "ваш тенант-id",
-    "idpAzureTenantIdDescription": "Идентификатор арендатора Azure (найден в обзоре Active Directory Azure)",
-    "idpAzureClientIdDescription": "Ваш идентификатор клиента Azure App",
-    "idpAzureClientSecretDescription": "Секрет регистрации клиента Azure App",
+    "idpTenantIdPlaceholder": "tenant-id",
+    "idpAzureTenantIdDescription": "Azure tenant ID (found in Azure Active Directory overview)",
+    "idpAzureClientIdDescription": "Azure App Registration Client ID",
+    "idpAzureClientSecretDescription": "Azure App Registration Client Secret",
     "idpGoogleTitle": "Google",
     "idpGoogleAlt": "Google",
     "idpAzureTitle": "Azure Entra ID",
@@ -1761,14 +1800,14 @@
     "idpGoogleConfigurationTitle": "Конфигурация Google",
     "idpAzureConfigurationTitle": "Конфигурация Azure Entra ID",
     "idpTenantIdLabel": "Идентификатор арендатора",
-    "idpAzureClientIdDescription2": "Ваш идентификатор клиента Azure App",
-    "idpAzureClientSecretDescription2": "Секрет регистрации клиента Azure App",
+    "idpAzureClientIdDescription2": "Azure App Registration Client ID",
+    "idpAzureClientSecretDescription2": "Azure App Registration Client Secret",
     "idpGoogleDescription": "Google OAuth2/OIDC провайдер",
     "idpAzureDescription": "Microsoft Azure OAuth2/OIDC provider",
     "subnet": "Подсеть",
     "subnetDescription": "Подсеть для конфигурации сети этой организации.",
     "authPage": "Страница авторизации",
-    "authPageDescription": "Настройка страницы авторизации для вашей организации",
+    "authPageDescription": "Configure the auth page for the organization",
     "authPageDomain": "Домен страницы авторизации",
     "noDomainSet": "Домен не установлен",
     "changeDomain": "Изменить домен",
@@ -1778,7 +1817,7 @@
     "setAuthPageDomain": "Установить домен страницы авторизации",
     "failedToFetchCertificate": "Не удалось получить сертификат",
     "failedToRestartCertificate": "Не удалось перезапустить сертификат",
-    "addDomainToEnableCustomAuthPages": "Добавьте домен для включения пользовательских страниц аутентификации для вашей организации",
+    "addDomainToEnableCustomAuthPages": "Add a domain to enable custom authentication pages for the organization",
     "selectDomainForOrgAuthPage": "Выберите домен для страницы аутентификации организации",
     "domainPickerProvidedDomain": "Домен предоставлен",
     "domainPickerFreeProvidedDomain": "Бесплатный домен",
@@ -1793,7 +1832,7 @@
     "domainPickerInvalidSubdomainCannotMakeValid": "\"{sub}\" не может быть действительным для {domain}.",
     "domainPickerSubdomainSanitized": "Субдомен очищен",
     "domainPickerSubdomainCorrected": "\"{sub}\" был исправлен на \"{sanitized}\"",
-    "orgAuthSignInTitle": "Войдите в свою организацию",
+    "orgAuthSignInTitle": "Sign in to the organization",
     "orgAuthChooseIdpDescription": "Выберите своего поставщика удостоверений личности для продолжения",
     "orgAuthNoIdpConfigured": "Эта организация не имеет настроенных поставщиков идентификационных данных. Вместо этого вы можете войти в свой Pangolin.",
     "orgAuthSignInWithPangolin": "Войти через Pangolin",
@@ -1811,7 +1850,7 @@
     "enableTwoFactorAuthentication": "Включить двухфакторную аутентификацию",
     "completeSecuritySteps": "Пройти шаги безопасности",
     "securitySettings": "Настройки безопасности",
-    "securitySettingsDescription": "Настройка политик безопасности для вашей организации",
+    "securitySettingsDescription": "Configure security policies for the organization",
     "requireTwoFactorForAllUsers": "Требовать двухфакторную аутентификацию для всех пользователей",
     "requireTwoFactorDescription": "Когда включено, все внутренние пользователи в этой организации должны иметь двухфакторную аутентификацию для доступа к организации.",
     "requireTwoFactorDisabledDescription": "Эта функция требует действительной лицензии (Enterprise) или активной подписки (SaaS)",
@@ -1874,8 +1913,12 @@
     "enterpriseEdition": "Корпоративная версия",
     "unlicensed": "Нелицензированный",
     "beta": "Бета",
-    "manageClients": "Управление клиентами",
-    "manageClientsDescription": "Клиенты - это устройства, которые могут подключаться к вашим сайтам",
+    "manageUserDevices": "User Devices",
+    "manageUserDevicesDescription": "View and manage devices that users use to privately connect to resources",
+    "manageMachineClients": "Manage Machine Clients",
+    "manageMachineClientsDescription": "Create and manage clients that servers and systems use to privately connect to resources",
+    "clientsTableUserClients": "User",
+    "clientsTableMachineClients": "Machine",
     "licenseTableValidUntil": "Действителен до",
     "saasLicenseKeysSettingsTitle": "Корпоративные лицензии",
     "saasLicenseKeysSettingsDescription": "Генерировать и управлять лицензионными ключами Enterprise для копий Pangolin",
@@ -2075,7 +2118,7 @@
     "preferWildcardCert": "Предпочитать сертификат Wildcard",
     "unverified": "Не подтверждено",
     "domainSetting": "Настройки домена",
-    "domainSettingDescription": "Настройка параметров для вашего домена",
+    "domainSettingDescription": "Configure settings for the domain",
     "preferWildcardCertDescription": "Попытка создания шаблона сертификата (требуется должным образом сконфигурированный резолвер сертификата).",
     "recordName": "Имя записи",
     "auto": "Авто",
@@ -2089,15 +2132,15 @@
     "olmUpdateAvailableInfo": "Доступна обновленная версия Олма. Пожалуйста, обновитесь до последней версии.",
     "client": "Клиент",
     "proxyProtocol": "Настройки протокола прокси",
-    "proxyProtocolDescription": "Настроить Прокси-протокол для сохранения IP-адресов клиента для служб TCP/UDP.",
+    "proxyProtocolDescription": "Configure Proxy Protocol to preserve client IP addresses for TCP services.",
     "enableProxyProtocol": "Включить Прокси Протокол",
-    "proxyProtocolInfo": "Сохранять IP-адреса клиента для кэша TCP/UDP",
+    "proxyProtocolInfo": "Preserve client IP addresses for TCP backends",
     "proxyProtocolVersion": "Версия протокола прокси",
     "version1": " Версия 1 (рекомендуется)",
     "version2": "Версия 2",
     "versionDescription": "Версия 1 основана на тексте и широко поддерживается. Версия 2 является бинарной и более эффективной, но менее совместимой.",
     "warning": "Предупреждение",
-    "proxyProtocolWarning": "Бэкэнд приложение должно быть сконфигурировано для принятия прокси-соединений. Если ваш бэкэнд не поддерживает Прокси-протокол, это нарушит все соединения. Обязательно настройте вашего бэкэнда на доверие заголовкам Proxy Protocol от Traefik.",
+    "proxyProtocolWarning": "The backend application must be configured to accept Proxy Protocol connections. If your backend doesn't support Proxy Protocol, enabling this will break all connections so only enable this if you know what you're doing. Make sure to configure your backend to trust Proxy Protocol headers from Traefik.",
     "restarting": "Перезапуск...",
     "manual": "Ручной",
     "messageSupport": "Поддержка сообщений",
@@ -2120,6 +2163,43 @@
     "supportMessageSent": "Сообщение отправлено!",
     "supportWillContact": "Мы скоро свяжемся с Вами!",
     "selectLogRetention": "Выберите удержание журнала",
+    "terms": "Terms",
+    "privacy": "Privacy",
+    "security": "Security",
+    "docs": "Docs",
+    "deviceActivation": "Device activation",
+    "deviceCodeInvalidFormat": "Code must be 9 characters (e.g., A1AJ-N5JD)",
+    "deviceCodeInvalidOrExpired": "Invalid or expired code",
+    "deviceCodeVerifyFailed": "Failed to verify device code",
+    "signedInAs": "Signed in as",
+    "deviceCodeEnterPrompt": "Enter the code displayed on the device",
+    "continue": "Continue",
+    "deviceUnknownLocation": "Unknown location",
+    "deviceAuthorizationRequested": "This authorization was requested from {location} on {date}. Make sure you trust this device as it will get access to the account.",
+    "deviceLabel": "Device: {deviceName}",
+    "deviceWantsAccess": "wants to access your account",
+    "deviceExistingAccess": "Existing access:",
+    "deviceFullAccess": "Full access to your account",
+    "deviceOrganizationsAccess": "Access to all organizations your account has access to",
+    "deviceAuthorize": "Authorize {applicationName}",
+    "deviceConnected": "Device Connected!",
+    "deviceAuthorizedMessage": "Device is authorized to access your account.",
+    "pangolinCloud": "Pangolin Cloud",
+    "viewDevices": "View Devices",
+    "viewDevicesDescription": "Manage your connected devices",
+    "noDevices": "No devices found",
+    "dateCreated": "Date Created",
+    "unnamedDevice": "Unnamed Device",
+    "deviceQuestionRemove": "Are you sure you want to delete this device?",
+    "deviceMessageRemove": "This action cannot be undone.",
+    "deviceDeleteConfirm": "Delete Device",
+    "deleteDevice": "Delete Device",
+    "errorLoadingDevices": "Error loading devices",
+    "failedToLoadDevices": "Failed to load devices",
+    "deviceDeleted": "Device deleted",
+    "deviceDeletedDescription": "The device has been successfully deleted.",
+    "errorDeletingDevice": "Error deleting device",
+    "failedToDeleteDevice": "Failed to delete device",
     "showColumns": "Показать колонки",
     "hideColumns": "Скрыть столбцы",
     "columnVisibility": "Видимость столбцов",
@@ -2134,6 +2214,10 @@
     "enableSelected": "Включить выбранные",
     "disableSelected": "Отключить выбранные",
     "checkSelectedStatus": "Проверить статус выбранных",
+    "clients": "Clients",
+    "accessClientSelect": "Select machine clients",
+    "resourceClientDescription": "Machine clients that can access this resource",
+    "regenerate": "Regenerate",
     "credentials": "Полномочия",
     "savecredentials": "Сохранить учетные данные",
     "regeneratecredentials": "Пере-ключ",
@@ -2151,7 +2235,6 @@
     "endpoint": "Endpoint",
     "Id": "Id",
     "SecretKey": "Секретный ключ",
-    "featureDisabledTooltip": "Эта функция доступна только в плане предприятия и требует лицензии на ее использование.",
     "niceId": "Неплохой ID",
     "niceIdUpdated": "Хороший ID обновлен",
     "niceIdUpdatedSuccessfully": "Неплохой ID успешно обновлен",
@@ -2160,5 +2243,15 @@
     "niceIdCannotBeEmpty": "Неправильный ID не может быть пустым",
     "enterIdentifier": "Введите идентификатор",
     "identifier": "Identifier",
-    "noData": "No Data"
+    "deviceLoginUseDifferentAccount": "Not you? Use a different account.",
+    "deviceLoginDeviceRequestingAccessToAccount": "A device is requesting access to this account.",
+    "noData": "No Data",
+    "machineClients": "Machine Clients",
+    "install": "Install",
+    "run": "Run",
+    "clientNameDescription": "The display name of the client that can be changed later.",
+    "clientAddress": "Client Address (Advanced)",
+    "setupFailedToFetchSubnet": "Failed to fetch default subnet",
+    "setupSubnetAdvanced": "Subnet (Advanced)",
+    "setupSubnetDescription": "The subnet for this organization's internal network."
 }

messages/tr-TR.json

@@ -1,12 +1,12 @@
 {
-    "setupCreate": "Organizasyonunuzu, sitenizi ve kaynaklarınızı oluşturun",
+    "setupCreate": "Create the organization, site, and resources",
     "setupNewOrg": "Yeni Organizasyon",
     "setupCreateOrg": "Organizasyon Oluştur",
     "setupCreateResources": "Kaynaklar Oluştur",
     "setupOrgName": "Organizasyon Adı",
-    "orgDisplayName": "Bu, organizasyonunuzun görünen adıdır.",
+    "orgDisplayName": "This is the display name of the organization.",
     "orgId": "Organizasyon ID",
-    "setupIdentifierMessage": "Bu, organizasyonunuzun benzersiz kimliğidir. Görünen adtan ayrı olarak.",
+    "setupIdentifierMessage": "This is the unique identifier for the organization.",
     "setupErrorIdentifier": "Organizasyon ID'si zaten alınmış. Lütfen başka bir tane seçin.",
     "componentsErrorNoMemberCreate": "Şu anda herhangi bir organizasyona üye değilsiniz. Başlamak için bir organizasyon oluşturun.",
     "componentsErrorNoMember": "Şu anda herhangi bir organizasyona üye değilsiniz.",
@@ -50,10 +50,10 @@
     "siteMessageRemove": "Kaldırıldıktan sonra site artık erişilebilir olmayacaktır. Siteyle ilişkilendirilmiş tüm hedefler de kaldırılacaktır.",
     "siteQuestionRemove": "Siteyi organizasyondan kaldırmak istediğinizden emin misiniz?",
     "siteManageSites": "Siteleri Yönet",
-    "siteDescription": "Ağınıza güvenli tüneller üzerinden bağlantı izni verin",
+    "siteDescription": "Create and manage sites to enable connectivity to private networks",
     "siteCreate": "Site Oluştur",
     "siteCreateDescription2": "Yeni bir site oluşturup bağlanmak için aşağıdaki adımları izleyin",
-    "siteCreateDescription": "Kaynaklarınızı bağlamaya başlamak için yeni bir site oluşturun",
+    "siteCreateDescription": "Create a new site to start connecting resources",
     "close": "Kapat",
     "siteErrorCreate": "Site oluşturulurken hata",
     "siteErrorCreateKeyPair": "Anahtar çifti veya site varsayılanları bulunamadı",
@@ -74,7 +74,7 @@
     "siteInstallNewt": "Newt Yükle",
     "siteInstallNewtDescription": "Newt'i sisteminizde çalıştırma",
     "WgConfiguration": "WireGuard Yapılandırması",
-    "WgConfigurationDescription": "Ağınıza bağlanmak için aşağıdaki yapılandırmayı kullanın",
+    "WgConfigurationDescription": "Use the following configuration to connect to the network",
     "operatingSystem": "İşletim Sistemi",
     "commands": "Komutlar",
     "recommended": "Önerilen",
@@ -87,32 +87,32 @@
     "siteUpdated": "Site güncellendi",
     "siteUpdatedDescription": "Site güncellendi.",
     "siteGeneralDescription": "Bu site için genel ayarları yapılandırın",
-    "siteSettingDescription": "Sitenizdeki ayarları yapılandırın",
+    "siteSettingDescription": "Configure the settings on the site",
     "siteSetting": "{siteName} Ayarları",
-    "siteNewtTunnel": "Newt Tüneli (Önerilen)",
-    "siteNewtTunnelDescription": "Ağınıza giriş noktası oluşturmanın en kolay yolu. Ekstra kurulum gerekmez.",
+    "siteNewtTunnel": "Newt Site (Recommended)",
+    "siteNewtTunnelDescription": "Easiest way to create an entrypoint into any network. No extra setup.",
     "siteWg": "Temel WireGuard",
     "siteWgDescription": "Bir tünel oluşturmak için herhangi bir WireGuard istemcisi kullanın. Manuel NAT kurulumu gereklidir.",
     "siteWgDescriptionSaas": "Bir tünel oluşturmak için herhangi bir WireGuard istemcisi kullanın. Manuel NAT kurulumu gereklidir. YALNIZCA SELF HOSTED DÜĞÜMLERDE ÇALIŞIR",
     "siteLocalDescription": "Yalnızca yerel kaynaklar. Tünelleme yok.",
     "siteLocalDescriptionSaas": "Yerel kaynaklar yalnızca. Tünel oluşturma yok. Yalnızca uzak düğümlerde mevcuttur.",
     "siteSeeAll": "Tüm Siteleri Gör",
-    "siteTunnelDescription": "Sitenize nasıl bağlanmak istediğinizi belirleyin",
-    "siteNewtCredentials": "Newt Kimlik Bilgileri",
-    "siteNewtCredentialsDescription": "Bu, Newt'in sunucu ile kimlik doğrulaması yapacağı yöntemdir",
-    "siteCredentialsSave": "Kimlik Bilgilerinizi Kaydedin",
+    "siteTunnelDescription": "Determine how you want to connect to the site",
+    "siteNewtCredentials": "Credentials",
+    "siteNewtCredentialsDescription": "This is how the site will authenticate with the server",
+    "siteCredentialsSave": "Save the Credentials",
     "siteCredentialsSaveDescription": "Yalnızca bir kez görebileceksiniz. Güvenli bir yere kopyaladığınızdan emin olun.",
     "siteInfo": "Site Bilgilendirmesi",
     "status": "Durum",
     "shareTitle": "Paylaşım Bağlantılarını Yönet",
-    "shareDescription": "Kaynaklarınıza geçici veya kalıcı erişim sağlamak için paylaşılabilir bağlantılar oluşturun",
+    "shareDescription": "Create shareable links to grant temporary or permanent access to proxy resources",
     "shareSearch": "Paylaşım bağlantılarını ara...",
     "shareCreate": "Paylaşım Bağlantısı Oluştur",
     "shareErrorDelete": "Bağlantı silinirken hata oluştu",
     "shareErrorDeleteMessage": "Bağlantı silinirken bir hata oluştu",
     "shareDeleted": "Bağlantı silindi",
     "shareDeletedDescription": "Bağlantı silindi",
-    "shareTokenDescription": "Erişim jetonunuz iki şekilde iletilebilir: sorgu parametresi olarak veya istek başlıklarında. Kimlik doğrulanmış erişim için her istekten müşteri tarafından iletilmelidir.",
+    "shareTokenDescription": "The access token can be passed in two ways: as a query parameter or in the request headers. These must be passed from the client on every request for authenticated access.",
     "accessToken": "Erişim Jetonu",
     "usageExamples": "Kullanım Örnekleri",
     "tokenId": "Jeton ID",
@@ -121,7 +121,7 @@
     "importantNote": "Önemli Not",
     "shareImportantDescription": "Güvenlik nedenleriyle, mümkünse başlıklar üzerinden kullanılması sorgu parametrelerinden daha önerilir, çünkü sorgu parametreleri sunucu günlüklerinde veya tarayıcı geçmişinde kaydedilebilir.",
     "token": "Jeton",
-    "shareTokenSecurety": "Erişim jetonunuzu güvende tutun. Herkese açık alanlarda veya istemci tarafı kodunda paylaşmayın.",
+    "shareTokenSecurety": "Keep the access token secure. Do not share it in publicly accessible areas or client-side code.",
     "shareErrorFetchResource": "Kaynaklar getirilemedi",
     "shareErrorFetchResourceDescription": "Kaynaklar getirilirken bir hata oluştu",
     "shareErrorCreate": "Paylaşım bağlantısı oluşturma başarısız oldu",
@@ -144,8 +144,10 @@
     "expires": "Süresi Doluyor",
     "never": "Asla",
     "shareErrorSelectResource": "Lütfen bir kaynak seçin",
-    "resourceTitle": "Kaynakları Yönet",
-    "resourceDescription": "Özel uygulamalarınıza güvenli vekil sunucular oluşturun",
+    "proxyResourceTitle": "Manage Public Resources",
+    "proxyResourceDescription": "Create and manage resources that are publicly accessible through a web browser",
+    "clientResourceTitle": "Manage Private Resources",
+    "clientResourceDescription": "Create and manage resources that are only accessible through a connected client",
     "resourcesSearch": "Kaynakları ara...",
     "resourceAdd": "Kaynak Ekle",
     "resourceErrorDelte": "Kaynak silinirken hata",
@@ -155,9 +157,9 @@
     "resourceMessageRemove": "Kaldırıldıktan sonra kaynak artık erişilebilir olmayacaktır. Kaynakla ilişkili tüm hedefler de kaldırılacaktır.",
     "resourceQuestionRemove": "Kaynağı organizasyondan kaldırmak istediğinizden emin misiniz?",
     "resourceHTTP": "HTTPS Kaynağı",
-    "resourceHTTPDescription": "Bir alt alan adı veya temel alan adı kullanarak uygulamanıza HTTPS üzerinden vekil istek gönderin.",
+    "resourceHTTPDescription": "Proxy requests to the app over HTTPS using a subdomain or base domain.",
     "resourceRaw": "Ham TCP/UDP Kaynağı",
-    "resourceRawDescription": "Uygulamanıza TCP/UDP üzerinden port numarası ile vekil istek gönderin.",
+    "resourceRawDescription": "Proxy requests to the app over TCP/UDP using a port number. This only works when sites are connected to nodes.",
     "resourceCreate": "Kaynak Oluştur",
     "resourceCreateDescription": "Yeni bir kaynak oluşturmak için aşağıdaki adımları izleyin",
     "resourceSeeAll": "Tüm Kaynakları Gör",
@@ -171,22 +173,22 @@
     "noCountryFound": "Ülke bulunamadı.",
     "siteSelectionDescription": "Bu site hedefe bağlantı sağlayacaktır.",
     "resourceType": "Kaynak Türü",
-    "resourceTypeDescription": "Kaynağınıza nasıl erişmek istediğinizi belirleyin",
+    "resourceTypeDescription": "Determine how to access the resource",
     "resourceHTTPSSettings": "HTTPS Ayarları",
-    "resourceHTTPSSettingsDescription": "Kaynağınıza HTTPS üzerinden erişimin nasıl sağlanacağını yapılandırın",
+    "resourceHTTPSSettingsDescription": "Configure how the resource will be accessed over HTTPS",
     "domainType": "Alan Türü",
     "subdomain": "Alt Alan Adı",
     "baseDomain": "Temel Alan Adı",
-    "subdomnainDescription": "Kaynağınızın erişilebileceği alt alan adı.",
+    "subdomnainDescription": "The subdomain where the resource will be accessible.",
     "resourceRawSettings": "TCP/UDP Ayarları",
-    "resourceRawSettingsDescription": "Kaynağınızın TCP/UDP üzerinden nasıl erişileceğini yapılandırın. Kaynağı, sunucudan erişebilmeniz için bir ana bilgisayar Pangolin sunucusundaki bir bağlantı noktasına eşlersiniz: sunucu genel-IP: eşlenen-bağlantı-noktası.",
+    "resourceRawSettingsDescription": "Configure how the resource will be accessed over TCP/UDP. You map the resource to a port on the host Pangolin server, so you can access the resource from server-public-ip:mapped-port.",
     "protocol": "Protokol",
     "protocolSelect": "Bir protokol seçin",
     "resourcePortNumber": "Port Numarası",
     "resourcePortNumberDescription": "Vekil istekler için harici port numarası.",
     "cancel": "İptal",
     "resourceConfig": "Yapılandırma Parçaları",
-    "resourceConfigDescription": "TCP/UDP kaynağınızı kurmak için bu yapılandırma parçalarını kopyalayıp yapıştırın",
+    "resourceConfigDescription": "Copy and paste these configuration snippets to set up the TCP/UDP resource",
     "resourceAddEntrypoints": "Traefik: Başlangıç Noktaları Ekleyin",
     "resourceExposePorts": "Gerbil: Docker Compose'da Portları Açın",
     "resourceLearnRaw": "TCP/UDP kaynaklarını nasıl yapılandıracağınızı öğrenin",
@@ -202,14 +204,14 @@
     "proxy": "Vekil Sunucu",
     "internal": "Dahili",
     "rules": "Kurallar",
-    "resourceSettingDescription": "Kaynağınızdaki ayarları yapılandırın",
+    "resourceSettingDescription": "Configure the settings on the resource",
     "resourceSetting": "{resourceName} Ayarları",
-    "alwaysAllow": "Her Zaman İzin Ver",
-    "alwaysDeny": "Her Zaman Reddet",
+    "alwaysAllow": "Bypass Auth",
+    "alwaysDeny": "Block Access",
     "passToAuth": "Kimlik Doğrulamasına Geç",
-    "orgSettingsDescription": "Organizasyonunuzun genel ayarlarını yapılandırın",
+    "orgSettingsDescription": "Configure the organization's settings",
     "orgGeneralSettings": "Organizasyon Ayarları",
-    "orgGeneralSettingsDescription": "Organizasyon detaylarınızı ve yapılandırmanızı yönetin",
+    "orgGeneralSettingsDescription": "Manage the organization's details and configuration",
     "saveGeneralSettings": "Genel Ayarları Kaydet",
     "saveSettings": "Ayarları Kaydet",
     "orgDangerZone": "Tehlike Alanı",
@@ -232,7 +234,7 @@
     "orgMissing": "Organizasyon Kimliği Eksik",
     "orgMissingMessage": "Organizasyon kimliği olmadan daveti yeniden oluşturmanız mümkün değildir.",
     "accessUsersManage": "Kullanıcıları Yönet",
-    "accessUsersDescription": "Kullanıcıları davet edin ve erişimi yönetmek için rollere ekleyin",
+    "accessUsersDescription": "Invite and manage users with access to this organization",
     "accessUsersSearch": "Kullanıcıları ara...",
     "accessUserCreate": "Kullanıcı Oluştur",
     "accessUserRemove": "Kullanıcıyı Kaldır",
@@ -241,13 +243,13 @@
     "role": "Rol",
     "nameRequired": "Ad gereklidir",
     "accessRolesManage": "Rolleri Yönet",
-    "accessRolesDescription": "Organizasyonunuza erişimi yönetmek için rolleri yapılandırın",
+    "accessRolesDescription": "Create and manage roles for users in the organization",
     "accessRolesSearch": "Rolleri ara...",
     "accessRolesAdd": "Rol Ekle",
     "accessRoleDelete": "Rolü Sil",
     "description": "Açıklama",
     "inviteTitle": "Açık Davetiyeler",
-    "inviteDescription": "Davetiyelerinizi diğer kullanıcılarla yönetin",
+    "inviteDescription": "Manage invitations for other users to join the organization",
     "inviteSearch": "Davetiyeleri ara...",
     "minutes": "Dakika",
     "hours": "Saat",
@@ -261,13 +263,13 @@
     "apiKeysErrorCreate": "API anahtarı oluşturulurken hata",
     "apiKeysErrorSetPermission": "İzinler ayarlanırken hata",
     "apiKeysCreate": "API Anahtarı Oluştur",
-    "apiKeysCreateDescription": "Organizasyonunuz için yeni bir API anahtarı oluşturun",
+    "apiKeysCreateDescription": "Generate a new API key for the organization",
     "apiKeysGeneralSettings": "İzinler",
     "apiKeysGeneralSettingsDescription": "Bu API anahtarının neler yapabileceğini belirleyin",
-    "apiKeysList": "API Anahtarınız",
-    "apiKeysSave": "API Anahtarınızı Kaydedin",
+    "apiKeysList": "New API Key",
+    "apiKeysSave": "Save the API Key",
     "apiKeysSaveDescription": "Bunu yalnızca bir kez görebileceksiniz. Güvenli bir yere kopyaladığınızdan emin olun.",
-    "apiKeysInfo": "API anahtarınız:",
+    "apiKeysInfo": "The API key is:",
     "apiKeysConfirmCopy": "API anahtarını kopyaladım",
     "generate": "Oluştur",
     "done": "Tamamlandı",
@@ -424,7 +426,7 @@
     "userCreated": "Kullanıcı oluşturuldu",
     "userCreatedDescription": "Kullanıcı başarıyla oluşturulmuştur.",
     "userTypeInternal": "Dahili Kullanıcı",
-    "userTypeInternalDescription": "Kullanıcınızı doğrudan organizasyonunuza davet edin.",
+    "userTypeInternalDescription": "Invite a user to join the organization directly.",
     "userTypeExternal": "Harici Kullanıcı",
     "userTypeExternalDescription": "Harici bir kimlik sağlayıcısıyla kullanıcı oluşturun.",
     "accessUserCreateDescription": "Yeni bir kullanıcı oluşturmak için aşağıdaki adımları izleyin",
@@ -468,13 +470,13 @@
     "accessControlsSubmit": "Erişim Kontrollerini Kaydet",
     "roles": "Roller",
     "accessUsersRoles": "Kullanıcılar ve Roller Yönetin",
-    "accessUsersRolesDescription": "Kullanıcılara davet gönderin ve organizasyonunuza erişim yönetmek için rollere ekleyin",
+    "accessUsersRolesDescription": "Invite users and add them to roles to manage access to the organization",
     "key": "Anahtar",
     "createdAt": "Oluşturulma Tarihi",
     "proxyErrorInvalidHeader": "Geçersiz özel Ana Bilgisayar Başlığı değeri. Alan adı formatını kullanın veya özel Ana Bilgisayar Başlığını ayarlamak için boş bırakın.",
     "proxyErrorTls": "Geçersiz TLS Sunucu Adı. Alan adı formatını kullanın veya TLS Sunucu Adını kaldırmak için boş bırakılsın.",
     "proxyEnableSSL": "SSL Etkinleştir",
-    "proxyEnableSSLDescription": "Hedeflerinize güvenli HTTPS bağlantıları için SSL/TLS şifrelemesi etkinleştirin.",
+    "proxyEnableSSLDescription": "Enable SSL/TLS encryption for secure HTTPS connections to the targets.",
     "target": "Hedef",
     "configureTarget": "Hedefleri Yapılandır",
     "targetErrorFetch": "Hedefleri alamadı",
@@ -490,29 +492,29 @@
     "targetsErrorUpdate": "Hedefler güncellenemedi",
     "targetsErrorUpdateDescription": "Hedefler güncellenirken bir hata oluştu",
     "targetTlsUpdate": "TLS ayarları güncellendi",
-    "targetTlsUpdateDescription": "TLS ayarlarınız başarıyla güncellendi",
+    "targetTlsUpdateDescription": "TLS settings have been updated successfully",
     "targetErrorTlsUpdate": "TLS ayarları güncellenemedi",
     "targetErrorTlsUpdateDescription": "TLS ayarlarını güncellerken bir hata oluştu",
     "proxyUpdated": "Proxy ayarları güncellendi",
-    "proxyUpdatedDescription": "Proxy ayarlarınız başarıyla güncellenmiştir",
+    "proxyUpdatedDescription": "Proxy settings have been updated successfully",
     "proxyErrorUpdate": "Proxy ayarları güncellenemedi",
     "proxyErrorUpdateDescription": "Proxy ayarlarını güncellerken bir hata oluştu",
     "targetAddr": "IP / Hostname",
     "targetPort": "Bağlantı Noktası",
     "targetProtocol": "Protokol",
     "targetTlsSettings": "HTTPS & TLS Settings",
-    "targetTlsSettingsDescription": "Configure TLS settings for your resource",
+    "targetTlsSettingsDescription": "Configure SSL/TLS settings for the resource",
     "targetTlsSettingsAdvanced": "Gelişmiş TLS Ayarları",
     "targetTlsSni": "TLS Sunucu Adı",
     "targetTlsSniDescription": "SNI için kullanılacak TLS Sunucu Adı'",
     "targetTlsSubmit": "Ayarları Kaydet",
     "targets": "Hedefler Konfigürasyonu",
-    "targetsDescription": "Trafiği arka uç hizmetlerinize yönlendirmek için hedefleri ayarlayın",
+    "targetsDescription": "Set up targets to route traffic to backend services",
     "targetStickySessions": "Yapışkan Oturumları Etkinleştir",
     "targetStickySessionsDescription": "Bağlantıları oturum süresince aynı arka uç hedef üzerinde tutun.",
     "methodSelect": "Yöntemi Seç",
     "targetSubmit": "Hedef Ekle",
-    "targetNoOne": "Bu kaynağın hedefi yok. Arka planınıza istek göndereceğiniz bir hedef yapılandırmak için hedef ekleyin.",
+    "targetNoOne": "This resource doesn't have any targets. Add a target to configure where to send requests to the backend.",
     "targetNoOneDescription": "Yukarıdaki birden fazla hedef ekleyerek yük dengeleme etkinleştirilecektir.",
     "targetsSubmit": "Hedefleri Kaydet",
     "addTarget": "Hedef Ekle",
@@ -530,7 +532,7 @@
     "tlsServerNameDescription": "The TLS server name to use for SNI",
     "save": "Kaydet",
     "proxyAdditional": "Ek Proxy Ayarları",
-    "proxyAdditionalDescription": "Kaynağınızın proxy ayarlarını nasıl yöneteceğini yapılandırın",
+    "proxyAdditionalDescription": "Configure how the resource handles proxy settings",
     "proxyCustomHeader": "Özel Ana Bilgisayar Başlığı",
     "proxyCustomHeaderDescription": "İstekleri proxy'lerken ayarlanacak ana bilgisayar başlığı. Varsayılanı kullanmak için boş bırakılır.",
     "proxyAdditionalSubmit": "Proxy Ayarlarını Kaydet",
@@ -570,7 +572,7 @@
     "rulesMatchType": "Eşleşme Türü",
     "value": "Değer",
     "rulesAbout": "Kurallar Hakkında",
-    "rulesAboutDescription": "Kurallar, kaynağınıza erişimi belirli bir kriterlere göre kontrol etmenizi sağlar. IP adresi veya URL yolu temelinde erişimi izin vermek veya engellemek için kurallar oluşturabilirsiniz.",
+    "rulesAboutDescription": "Rules allow you to control access to the resource based on a set of criteria. You can create rules to allow or deny access based on IP address or URL path.",
     "rulesActions": "Aksiyonlar",
     "rulesActionAlwaysAllow": "Her Zaman İzin Ver: Tüm kimlik doğrulama yöntemlerini atlayın",
     "rulesActionAlwaysDeny": "Her Zaman Reddedin: Tüm istekleri engelleyin; kimlik doğrulaması yapılamaz",
@@ -582,7 +584,7 @@
     "rulesEnable": "Kuralları Etkinleştir",
     "rulesEnableDescription": "Bu kaynak için kural değerlendirmesini etkinleştirin veya devre dışı bırakın",
     "rulesResource": "Kaynak Kuralları Yapılandırması",
-    "rulesResourceDescription": "Kaynağınıza erişimi kontrol etmek için kuralları yapılandırın",
+    "rulesResourceDescription": "Configure rules to control access to the resource",
     "ruleSubmit": "Kural Ekle",
     "rulesNoOne": "Kural yok. Formu kullanarak bir kural ekleyin.",
     "rulesOrder": "Kurallar, artan öncelik sırasına göre değerlendirilir.",
@@ -598,7 +600,7 @@
     "none": "Hiçbiri",
     "unknown": "Bilinmiyor",
     "resources": "Kaynaklar",
-    "resourcesDescription": "Kaynaklar, özel ağınızda çalışan uygulamalara proxy görevi görür. Özel ağınızdaki herhangi bir HTTP/HTTPS veya ham TCP/UDP hizmeti için bir kaynak oluşturun. Her kaynak, şifreli bir WireGuard tüneli aracılığıyla özel ve güvenli bağlantıyı etkinleştirmek için bir siteye bağlı olmalıdır.",
+    "resourcesDescription": "Resources are proxies to applications running on the private network. Create a resource for any HTTP/HTTPS or raw TCP/UDP service on your private network. Each resource must be connected to a site to enable private, secure connectivity through an encrypted WireGuard tunnel.",
     "resourcesWireGuardConnect": "WireGuard şifreleme ile güvenli bağlantı",
     "resourcesMultipleAuthenticationMethods": "Birden fazla kimlik doğrulama yöntemi yapılandırın",
     "resourcesUsersRolesAccess": "Kullanıcı ve rol tabanlı erişim kontrolü",
@@ -609,7 +611,7 @@
     "resourceSelect": "Kaynak seçin",
     "shareLinks": "Paylaşım Bağlantıları",
     "share": "Paylaşılabilir Bağlantılar",
-    "shareDescription2": "Kaynaklarınıza geçici veya sınırsız erişim sağlamak için paylaşılabilir bağlantılar oluşturun. Bağlantı oluştururken sona erme süresini yapılandırabilirsiniz.",
+    "shareDescription2": "Create shareable links to resources. Links provide temporary or unlimited access to your resource. You can configure the expiration duration of the link when you create one.",
     "shareEasyCreate": "Kolayca oluştur ve paylaş",
     "shareConfigurableExpirationDuration": "Yapılandırılabilir sona erme süresi",
     "shareSecureAndRevocable": "Güvenli ve iptal edilebilir",
@@ -619,19 +621,19 @@
     "unknownCommand": "Bilinmeyen komut",
     "newtErrorFetchReleases": "Sürüm bilgileri alınamadı: {err}",
     "newtErrorFetchLatest": "Son sürüm alınırken hata: {err}",
-    "newtEndpoint": "Newt Uç Noktası",
-    "newtId": "Newt Kimliği",
-    "newtSecretKey": "Newt Gizli Anahtarı",
+    "newtEndpoint": "Endpoint",
+    "newtId": "ID",
+    "newtSecretKey": "Secret",
     "architecture": "Mimari",
     "sites": "Siteler",
-    "siteWgAnyClients": "Herhangi bir WireGuard istemcisi kullanarak bağlanın. Dahili kaynaklarınıza eş IP adresini kullanarak erişmeniz gerekecek.",
+    "siteWgAnyClients": "Use any WireGuard client to connect. You will have to address internal resources using the peer IP.",
     "siteWgCompatibleAllClients": "Tüm WireGuard istemcileriyle uyumlu",
     "siteWgManualConfigurationRequired": "Manuel yapılandırma gerekli",
     "userErrorNotAdminOrOwner": "Kullanıcı yönetici veya sahibi değil",
     "pangolinSettings": "Ayarlar - Pangolin",
     "accessRoleYour": "Rolünüz:",
-    "accessRoleSelect2": "Bir rol seçin",
-    "accessUserSelect": "Bir kullanıcı seçin",
+    "accessRoleSelect2": "Select roles",
+    "accessUserSelect": "Select users",
     "otpEmailEnter": "Bir e-posta girin",
     "otpEmailEnterDescription": "E-posta girdikten sonra girdi alanına yazıp enter'a basın.",
     "otpEmailErrorInvalid": "Geçersiz e-posta adresi. Joker karakter (*) yerel kısmın tamamı olmalıdır.",
@@ -683,7 +685,7 @@
     "resourcePincodeSetupTitle": "Pincode Ayarla",
     "resourcePincodeSetupTitleDescription": "Bu kaynağı korumak için bir pincode ayarlayın",
     "resourceRoleDescription": "Yöneticiler her zaman bu kaynağa erişebilir.",
-    "resourceUsersRoles": "Kullanıcılar ve Roller",
+    "resourceUsersRoles": "Access Controls",
     "resourceUsersRolesDescription": "Bu kaynağı kimlerin ziyaret edebileceği kullanıcıları ve rolleri yapılandırın",
     "resourceUsersRolesSubmit": "Kullanıcıları ve Rolleri Kaydet",
     "resourceWhitelistSave": "Başarıyla kaydedildi",
@@ -779,15 +781,15 @@
     "idpOidcConfigure": "OAuth2/OIDC Yapılandırması",
     "idpOidcConfigureDescription": "OAuth2/OIDC sağlayıcı uç noktalarını ve kimlik bilgilerini yapılandırın",
     "idpClientId": "Müşteri ID",
-    "idpClientIdDescription": "Kimlik sağlayıcınızdan alınan OAuth2 istemci kimliği",
+    "idpClientIdDescription": "The OAuth2 client ID from the identity provider",
     "idpClientSecret": "Müşteri Gizli",
-    "idpClientSecretDescription": "Kimlik sağlayıcınızdan alınan OAuth2 istemci sırrı",
+    "idpClientSecretDescription": "The OAuth2 client secret from the identity provider",
     "idpAuthUrl": "Yetki URL'si",
     "idpAuthUrlDescription": "OAuth2 yetki uç nokta URL'si",
     "idpTokenUrl": "Token URL'si",
     "idpTokenUrlDescription": "OAuth2 jeton uç nokta URL'si",
     "idpOidcConfigureAlert": "Önemli Bilgi",
-    "idpOidcConfigureAlertDescription": "Kimlik sağlayıcısını oluşturduktan sonra, kimlik sağlayıcınızın ayarlarında geri arama URL'sini yapılandırmanız gerekecektir. Geri arama URL'si başarılı bir oluşturma işleminden sonra sağlanacaktır.",
+    "idpOidcConfigureAlertDescription": "After creating the identity provider, you will need to configure the callback URL in the identity provider's settings. The callback URL will be provided after successful creation.",
     "idpToken": "Token Yapılandırma",
     "idpTokenDescription": "Kullanıcı bilgisini ID token'dan nasıl çıkaracağınızı yapılandırın",
     "idpJmespathAbout": "JMESPath Hakkında",
@@ -804,7 +806,7 @@
     "idpSubmit": "Kimlik Sağlayıcı Oluştur",
     "orgPolicies": "Kuruluş Politikaları",
     "idpSettings": "{idpName} Ayarları",
-    "idpCreateSettingsDescription": "Kimlik sağlayıcınız için ayarları yapılandırın",
+    "idpCreateSettingsDescription": "Configure the settings for the identity provider",
     "roleMapping": "Rol Eşlemesi",
     "orgMapping": "Kuruluş Eşlemesi",
     "orgPoliciesSearch": "Kuruluş politikalarını ara...",
@@ -839,7 +841,7 @@
     "idpUpdatedDescription": "Kimlik sağlayıcı başarıyla güncellendi",
     "redirectUrl": "Yönlendirme URL'si",
     "redirectUrlAbout": "Yönlendirme URL'si Hakkında",
-    "redirectUrlAboutDescription": "Bu, kimlik doğrulamasından sonra kullanıcıların yönlendirileceği URL'dir. Bu URL'yi kimlik sağlayıcınızın ayarlarında yapılandırmanız gerekir.",
+    "redirectUrlAboutDescription": "This is the URL to which users will be redirected after authentication. You need to configure this URL in the identity provider's settings.",
     "pangolinAuth": "Yetkilendirme - Pangolin",
     "verificationCodeLengthRequirements": "Doğrulama kodunuz 8 karakter olmalıdır.",
     "errorOccurred": "Bir hata oluştu",
@@ -922,6 +924,10 @@
     "passwordResetSent": "Bu e-posta adresine bir şifre sıfırlama kodu gönderilecektir.",
     "passwordResetCode": "Sıfırlama Kodu",
     "passwordResetCodeDescription": "E-posta gelen kutunuzda sıfırlama kodunu kontrol edin.",
+    "generatePasswordResetCode": "Generate Password Reset Code",
+    "passwordResetCodeGenerated": "Password Reset Code Generated",
+    "passwordResetCodeGeneratedDescription": "Share this code with the user. They can use it to reset their password.",
+    "passwordResetUrl": "Reset URL",
     "passwordNew": "Yeni Şifre",
     "passwordNewConfirm": "Yeni Şifreyi Onayla",
     "changePassword": "Parola Değiştir",
@@ -939,6 +945,9 @@
     "pincodeAuth": "Kimlik Doğrulama Kodu",
     "pincodeSubmit2": "Kodu Gönder",
     "passwordResetSubmit": "Sıfırlama İsteği",
+    "passwordResetAlreadyHaveCode": "Enter Password Reset Code",
+    "passwordResetSmtpRequired": "Please contact your administrator",
+    "passwordResetSmtpRequiredDescription": "A password reset code is required to reset your password. Please contact your administrator for assistance.",
     "passwordBack": "Şifreye Geri Dön",
     "loginBack": "Girişe geri dön",
     "signup": "Kaydol",
@@ -1104,12 +1113,15 @@
     "actionListSiteResources": "Site Kaynaklarını Listele",
     "actionUpdateSiteResource": "Site Kaynağını Güncelle",
     "actionListInvitations": "Davetiyeleri Listele",
+    "actionExportLogs": "Export Logs",
+    "actionViewLogs": "View Logs",
     "noneSelected": "Hiçbiri seçili değil",
     "orgNotFound2": "Hiçbir organizasyon bulunamadı.",
     "searchProgress": "Ara...",
     "create": "Oluştur",
     "orgs": "Organizasyonlar",
     "loginError": "Giriş yaparken bir hata oluştu",
+    "loginRequiredForDevice": "Login is required to authenticate your device.",
     "passwordForgot": "Şifrenizi mi unuttunuz?",
     "otpAuth": "İki Faktörlü Kimlik Doğrulama",
     "otpAuthDescription": "Authenticator uygulamanızdan veya tek kullanımlık yedek kodlarınızdan birini girin.",
@@ -1164,23 +1176,29 @@
     "sidebarHome": "Ana Sayfa",
     "sidebarSites": "Siteler",
     "sidebarResources": "Kaynaklar",
+    "sidebarProxyResources": "Public",
+    "sidebarClientResources": "Private",
     "sidebarAccessControl": "Erişim Kontrolü",
+    "sidebarLogsAndAnalytics": "Logs & Analytics",
     "sidebarUsers": "Kullanıcılar",
+    "sidebarAdmin": "Admin",
     "sidebarInvitations": "Davetiye",
     "sidebarRoles": "Roller",
-    "sidebarShareableLinks": "Paylaşılabilir Bağlantılar",
+    "sidebarShareableLinks": "Links",
     "sidebarApiKeys": "API Anahtarları",
     "sidebarSettings": "Ayarlar",
     "sidebarAllUsers": "Tüm Kullanıcılar",
     "sidebarIdentityProviders": "Kimlik Sağlayıcılar",
     "sidebarLicense": "Lisans",
     "sidebarClients": "İstemciler",
+    "sidebarUserDevices": "Users",
+    "sidebarMachineClients": "Machines",
     "sidebarDomains": "Alan Adları",
     "sidebarGeneral": "General",
     "sidebarLogAndAnalytics": "Log & Analytics",
     "sidebarBluePrints": "Planlar",
     "sidebarOrganization": "Organization",
-    "sidebarLogsAnalytics": "Request Analytics",
+    "sidebarLogsAnalytics": "Analytics",
     "blueprints": "Planlar",
     "blueprintsDescription": "Deklaratif yapılandırmaları uygulayın ve önceki çalışmaları görüntüleyin",
     "blueprintAdd": "Plan Ekle",
@@ -1191,7 +1209,7 @@
     "blueprintDetailsDescription": "Uygulanan mavi yazılımın sonucunu ve oluşan hataları görün",
     "blueprintInfo": "Plan Bilgileri",
     "message": "Mesaj",
-    "blueprintContentsDescription": "Altyapınızı tanımlayan YAML içeriğini tanımlayın",
+    "blueprintContentsDescription": "Define the YAML content describing the infrastructure",
     "blueprintErrorCreateDescription": "Plan uygulanırken bir hata oluştu",
     "blueprintErrorCreate": "Plan oluşturulurken hata oluştu",
     "searchBlueprintProgress": "Planlarda ara...",
@@ -1247,15 +1265,15 @@
     "loading": "Yükleniyor",
     "restart": "Yeniden Başlat",
     "domains": "Alan Adları",
-    "domainsDescription": "Organizasyonunuz için alan adlarını yönetin",
+    "domainsDescription": "Create and manage domains available in the organization",
     "domainsSearch": "Alan adlarını ara...",
     "domainAdd": "Alan Adı Ekle",
-    "domainAddDescription": "Organizasyonunuz için yeni bir alan adı kaydedin",
+    "domainAddDescription": "Register a new domain with to the organization",
     "domainCreate": "Alan Adı Oluştur",
     "domainCreatedDescription": "Alan adı başarıyla oluşturuldu",
     "domainDeletedDescription": "Alan adı başarıyla silindi",
-    "domainQuestionRemove": "Alan adını hesabınızdan kaldırmak istediğinizden emin misiniz?",
-    "domainMessageRemove": "Kaldırıldığında, alan adı hesabınızla ilişkilendirilmeyecek.",
+    "domainQuestionRemove": "Are you sure you want to remove the domain?",
+    "domainMessageRemove": "Once removed, the domain will no longer be associated with the organization.",
     "domainConfirmDelete": "Alan Adı Silinmesini Onayla",
     "domainDelete": "Alan Adını Sil",
     "domain": "Alan Adı",
@@ -1274,7 +1292,7 @@
     "pending": "Beklemede",
     "sidebarBilling": "Faturalama",
     "billing": "Faturalama",
-    "orgBillingDescription": "Fatura bilgilerinizi ve aboneliklerinizi yönetin",
+    "orgBillingDescription": "Manage billing information and subscriptions",
     "github": "GitHub",
     "pangolinHosted": "Pangolin Barındırılan",
     "fossorial": "Fossorial",
@@ -1317,7 +1335,7 @@
     "domainPickerSortAsc": "A-Z",
     "domainPickerSortDesc": "Z-A",
     "domainPickerCheckingAvailability": "Kullanılabilirlik kontrol ediliyor...",
-    "domainPickerNoMatchingDomains": "Eşleşen domain bulunamadı. Farklı bir domain deneyin veya organizasyonunuzun domain ayarlarını kontrol edin.",
+    "domainPickerNoMatchingDomains": "No matching domains found. Try a different domain or check the organization's domain settings.",
     "domainPickerOrganizationDomains": "Organizasyon Alan Adları",
     "domainPickerProvidedDomains": "Sağlanan Alan Adları",
     "domainPickerSubdomain": "Alt Alan: {subdomain}",
@@ -1351,7 +1369,7 @@
     "billingModifySubscription": "Aboneliği Düzenle",
     "billingStartSubscription": "Aboneliği Başlat",
     "billingRecurringCharge": "Yinelenen Ücret",
-    "billingManageSubscriptionSettings": "Abonelik ayarlarınızı ve tercihlerinizi yönetin",
+    "billingManageSubscriptionSettings": "Manage subscription settings and preferences",
     "billingNoActiveSubscription": "Aktif bir aboneliğiniz yok. Kullanım limitlerini artırmak için aboneliğinizi başlatın.",
     "billingFailedToLoadSubscription": "Abonelik yüklenemedi",
     "billingFailedToLoadUsage": "Kullanım yüklenemedi",
@@ -1362,9 +1380,9 @@
     "billingPortalError": "Portal Hatası",
     "billingDataUsageInfo": "Buluta bağlandığınızda, güvenli tünellerinizden aktarılan tüm verilerden ücret alınırsınız. Bu, tüm sitelerinizdeki gelen ve giden trafiği içerir. Limitinize ulaştığınızda, planınızı yükseltmeli veya kullanımı azaltmalısınız, aksi takdirde siteleriniz bağlantıyı keser. Düğümler kullanırken verilerden ücret alınmaz.",
     "billingOnlineTimeInfo": "Sitelerinizin buluta ne kadar süre bağlı kaldığına göre ücretlendirilirsiniz. Örneğin, 44,640 dakika, bir sitenin 24/7 boyunca tam bir ay boyunca çalışması anlamına gelir. Limitinize ulaştığınızda, planınızı yükseltmeyip kullanımı azaltmazsanız siteleriniz bağlantıyı keser. Düğümler kullanırken zamandan ücret alınmaz.",
-    "billingUsersInfo": "Kuruluşunuzdaki her kullanıcı için ücretlendirilirsiniz. Faturalandırma, hesabınızdaki aktif kullanıcı hesaplarının sayısına göre günlük olarak hesaplanır.",
-    "billingDomainInfo": "Kuruluşunuzdaki her alan adı için ücretlendirilirsiniz. Faturalandırma, hesabınızdaki aktif alan adları hesaplarının sayısına göre günlük olarak hesaplanır.",
-    "billingRemoteExitNodesInfo": "Kuruluşunuzdaki her yönetilen Düğüm için ücretlendirilirsiniz. Faturalandırma, hesabınızdaki aktif yönetilen Düğümler sayısına göre günlük olarak hesaplanır.",
+    "billingUsersInfo": "You're charged for each user in the organization. Billing is calculated daily based on the number of active user accounts in your org.",
+    "billingDomainInfo": "You're charged for each domain in the organization. Billing is calculated daily based on the number of active domain accounts in your org.",
+    "billingRemoteExitNodesInfo": "You're charged for each managed Node in the organization. Billing is calculated daily based on the number of active managed Nodes in your org.",
     "domainNotFound": "Alan Adı Bulunamadı",
     "domainNotFoundDescription": "Bu kaynak devre dışıdır çünkü alan adı sistemimizde artık mevcut değil. Bu kaynak için yeni bir alan adı belirleyin.",
     "failed": "Başarısız",
@@ -1456,23 +1474,23 @@
     "errorCreatingClient": "Müşteri oluşturulurken hata oluştu",
     "clientDefaultsNotFound": "Müşteri varsayılanları bulunamadı",
     "createClient": "Müşteri Oluştur",
-    "createClientDescription": "Sitelerinize bağlanmak için yeni bir müşteri oluşturun",
+    "createClientDescription": "Create a new client to access private resources",
     "seeAllClients": "Tüm Müşterileri Gör",
     "clientInformation": "Müşteri Bilgileri",
     "clientNamePlaceholder": "Müşteri adı",
     "address": "Adres",
     "subnetPlaceholder": "Alt ağ",
-    "addressDescription": "Bu müşteri için bağlantıda kullanılacak adres",
+    "addressDescription": "The internal address of the client. Must fall within the organization's subnet.",
     "selectSites": "Siteleri seçin",
     "sitesDescription": "Müşteri seçilen sitelere bağlantı kuracaktır",
     "clientInstallOlm": "Olm Yükle",
     "clientInstallOlmDescription": "Sisteminizde Olm çalıştırın",
-    "clientOlmCredentials": "Olm Kimlik Bilgileri",
-    "clientOlmCredentialsDescription": "Bu, Olm'in sunucu ile kimlik doğrulaması yapacağı yöntemdir",
-    "olmEndpoint": "Olm Uç Noktası",
-    "olmId": "Olm Kimliği",
-    "olmSecretKey": "Olm Gizli Anahtarı",
-    "clientCredentialsSave": "Kimlik Bilgilerinizi Kaydedin",
+    "clientOlmCredentials": "Credentials",
+    "clientOlmCredentialsDescription": "This is how the client will authenticate with the server",
+    "olmEndpoint": "Endpoint",
+    "olmId": "ID",
+    "olmSecretKey": "Secret",
+    "clientCredentialsSave": "Save the Credentials",
     "clientCredentialsSaveDescription": "Bunu yalnızca bir kez görebileceksiniz. Güvenli bir yere kopyaladığınızdan emin olun.",
     "generalSettingsDescription": "Bu müşteri için genel ayarları yapılandırın",
     "clientUpdated": "Müşteri güncellendi",
@@ -1483,9 +1501,7 @@
     "sitesFetchError": "Siteler alınırken bir hata oluştu.",
     "olmErrorFetchReleases": "Olm yayınları alınırken bir hata oluştu.",
     "olmErrorFetchLatest": "En son Olm yayını alınırken bir hata oluştu.",
-    "remoteSubnets": "Uzak Alt Ağlar",
     "enterCidrRange": "CIDR aralığını girin",
-    "remoteSubnetsDescription": "Bu siteye uzaktan erişilebilen CIDR aralıklarını ekleyin. 10.0.0.0/24 formatını kullanın. Bu YALNIZCA VPN istemci bağlantıları için geçerlidir.",
     "resourceEnableProxy": "Genel Proxy'i Etkinleştir",
     "resourceEnableProxyDescription": "Bu kaynağa genel proxy erişimini etkinleştirin. Bu sayede ağ dışından açık bir port üzerinden kaynağa bulut aracılığıyla erişim sağlanır. Traefik yapılandırması gereklidir.",
     "externalProxyEnabled": "Dış Proxy Etkinleştirildi",
@@ -1503,14 +1519,15 @@
     "enableHealthChecksDescription": "Bu hedefin sağlığını izleyin. Gerekirse hedef dışındaki bir son noktayı izleyebilirsiniz.",
     "healthScheme": "Yöntem",
     "healthSelectScheme": "Yöntem Seç",
+    "healthCheckPortInvalid": "Health check port must be between 1 and 65535",
     "healthCheckPath": "Yol",
     "healthHostname": "IP / Hostname",
     "healthPort": "Bağlantı Noktası",
     "healthCheckPathDescription": "Sağlık durumunu kontrol etmek için yol.",
-    "healthyIntervalSeconds": "Sağlıklı Aralık",
-    "unhealthyIntervalSeconds": "Sağlıksız Aralık",
+    "healthyIntervalSeconds": "Healthy Interval (sec)",
+    "unhealthyIntervalSeconds": "Unhealthy Interval (sec)",
     "IntervalSeconds": "Sağlıklı Aralık",
-    "timeoutSeconds": "Zaman Aşımı",
+    "timeoutSeconds": "Timeout (sec)",
     "timeIsInSeconds": "Zaman saniye cinsindendir",
     "retryAttempts": "Tekrar Deneme Girişimleri",
     "expectedResponseCodes": "Beklenen Yanıt Kodları",
@@ -1546,12 +1563,12 @@
     "resourceEditDomain": "Alan Adını Düzenle",
     "siteName": "Site Adı",
     "proxyPort": "Bağlantı Noktası",
-    "resourcesTableProxyResources": "Proxy Kaynaklar",
-    "resourcesTableClientResources": "İstemci Kaynaklar",
+    "resourcesTableProxyResources": "Public",
+    "resourcesTableClientResources": "Private",
     "resourcesTableNoProxyResourcesFound": "Hiçbir proxy kaynağı bulunamadı.",
     "resourcesTableNoInternalResourcesFound": "Hiçbir dahili kaynak bulunamadı.",
     "resourcesTableDestination": "Hedef",
-    "resourcesTableTheseResourcesForUseWith": "Bu kaynaklar ile kullanılmak için",
+    "resourcesTableAlias": "Alias",
     "resourcesTableClients": "İstemciler",
     "resourcesTableAndOnlyAccessibleInternally": "veyalnızca bir istemci ile bağlandığında dahili olarak erişilebilir.",
     "resourcesTableNoTargets": "Hedef yok",
@@ -1560,8 +1577,8 @@
     "resourcesTableOffline": "Çevrimdışı",
     "resourcesTableUnknown": "Bilinmiyor",
     "resourcesTableNotMonitored": "İzlenmiyor",
-    "editInternalResourceDialogEditClientResource": "İstemci Kaynağı Düzenleyin",
-    "editInternalResourceDialogUpdateResourceProperties": "{resourceName} için kaynak özelliklerini ve hedef yapılandırmasını güncelleyin.",
+    "editInternalResourceDialogEditClientResource": "Edit Private Resource",
+    "editInternalResourceDialogUpdateResourceProperties": "Update the resource configuration and access controls for {resourceName}",
     "editInternalResourceDialogResourceProperties": "Kaynak Özellikleri",
     "editInternalResourceDialogName": "Ad",
     "editInternalResourceDialogProtocol": "Protokol",
@@ -1580,11 +1597,22 @@
     "editInternalResourceDialogInvalidIPAddressFormat": "Geçersiz IP adresi formatı",
     "editInternalResourceDialogDestinationPortMin": "Hedef bağlantı noktası en az 1 olmalıdır",
     "editInternalResourceDialogDestinationPortMax": "Hedef bağlantı noktası 65536'dan küçük olmalıdır",
+    "editInternalResourceDialogPortModeRequired": "Protocol, proxy port, and destination port are required for port mode",
+    "editInternalResourceDialogMode": "Mode",
+    "editInternalResourceDialogModePort": "Port",
+    "editInternalResourceDialogModeHost": "Host",
+    "editInternalResourceDialogModeCidr": "CIDR",
+    "editInternalResourceDialogDestination": "Destination",
+    "editInternalResourceDialogDestinationHostDescription": "The IP address or hostname of the resource on the site's network.",
+    "editInternalResourceDialogDestinationIPDescription": "The IP or hostname address of the resource on the site's network.",
+    "editInternalResourceDialogDestinationCidrDescription": "The CIDR range of the resource on the site's network.",
+    "editInternalResourceDialogAlias": "Alias",
+    "editInternalResourceDialogAliasDescription": "An optional internal DNS alias for this resource.",
     "createInternalResourceDialogNoSitesAvailable": "Site Bulunamadı",
     "createInternalResourceDialogNoSitesAvailableDescription": "Dahili kaynak oluşturmak için en az bir Newt sitesine ve alt ağa sahip olmalısınız.",
     "createInternalResourceDialogClose": "Kapat",
-    "createInternalResourceDialogCreateClientResource": "İstemci Kaynağı Oluştur",
-    "createInternalResourceDialogCreateClientResourceDescription": "Seçilen siteye bağlı istemciler için erişilebilir olacak yeni bir kaynak oluşturun.",
+    "createInternalResourceDialogCreateClientResource": "Create Private Resource",
+    "createInternalResourceDialogCreateClientResourceDescription": "Create a new resource that will only be accessible to clients connected to the organization",
     "createInternalResourceDialogResourceProperties": "Kaynak Özellikleri",
     "createInternalResourceDialogName": "Ad",
     "createInternalResourceDialogSite": "Site",
@@ -1613,11 +1641,22 @@
     "createInternalResourceDialogInvalidIPAddressFormat": "Geçersiz IP adresi formatı",
     "createInternalResourceDialogDestinationPortMin": "Hedef bağlantı noktası en az 1 olmalıdır",
     "createInternalResourceDialogDestinationPortMax": "Hedef bağlantı noktası 65536'dan küçük olmalıdır",
+    "createInternalResourceDialogPortModeRequired": "Protocol, proxy port, and destination port are required for port mode",
+    "createInternalResourceDialogMode": "Mode",
+    "createInternalResourceDialogModePort": "Port",
+    "createInternalResourceDialogModeHost": "Host",
+    "createInternalResourceDialogModeCidr": "CIDR",
+    "createInternalResourceDialogDestination": "Destination",
+    "createInternalResourceDialogDestinationHostDescription": "The IP address or hostname of the resource on the site's network.",
+    "createInternalResourceDialogDestinationCidrDescription": "The CIDR range of the resource on the site's network.",
+    "createInternalResourceDialogAlias": "Alias",
+    "createInternalResourceDialogAliasDescription": "An optional internal DNS alias for this resource.",
     "siteConfiguration": "Yapılandırma",
     "siteAcceptClientConnections": "İstemci Bağlantılarını Kabul Et",
-    "siteAcceptClientConnectionsDescription": "Bu Newt örneğini bir geçit olarak kullanarak diğer cihazların bağlanmasına izin verin.",
-    "siteAddress": "Site Adresi",
-    "siteAddressDescription": "İstemcilerin bağlanması için hostun IP adresini belirtin. Bu, Pangolin ağındaki sitenin iç adresidir ve istemciler için atlas olmalıdır. Org alt ağına düşmelidir.",
+    "siteAcceptClientConnectionsDescription": "Allow user devices and clients to access resources on this site. This can be changed later.",
+    "siteAddress": "Site Address (Advanced)",
+    "siteAddressDescription": "The internal address of the site. Must fall within the organization's subnet.",
+    "siteNameDescription": "The display name of the site that can be changed later.",
     "autoLoginExternalIdp": "Harici IDP ile Otomatik Giriş",
     "autoLoginExternalIdpDescription": "Kullanıcıyı kimlik doğrulama için otomatik olarak harici IDP'ye yönlendirin.",
     "selectIdp": "IDP Seç",
@@ -1631,7 +1670,7 @@
     "autoLoginErrorNoRedirectUrl": "Kimlik sağlayıcıdan yönlendirme URL'si alınamadı.",
     "autoLoginErrorGeneratingUrl": "Kimlik doğrulama URL'si oluşturulamadı.",
     "remoteExitNodeManageRemoteExitNodes": "Uzak Düğümler",
-    "remoteExitNodeDescription": "Kendi konum ağlarınızdan bir veya daha fazlasını barındırarak, bağlantı kurulumları için buluta bağımlılığı azaltın.",
+    "remoteExitNodeDescription": "Self-host one or more remote nodes to extend network connectivity and reduce reliance on the cloud",
     "remoteExitNodes": "Düğümler",
     "searchRemoteExitNodes": "Düğüm ara...",
     "remoteExitNodeAdd": "Düğüm Ekle",
@@ -1643,11 +1682,11 @@
     "sidebarRemoteExitNodes": "Uzak Düğümler",
     "remoteExitNodeCreate": {
         "title": "Düğüm Oluştur",
-        "description": "Ağ bağlantınızı genişletmek için yeni bir düğüm oluşturun",
+        "description": "Create a new node to extend network connectivity",
         "viewAllButton": "Tüm Düğümleri Gör",
         "strategy": {
             "title": "Oluşturma Stratejisi",
-            "description": "Düğümünüzü manuel olarak yapılandırmak veya yeni kimlik bilgileri oluşturmak için bunu seçin.",
+            "description": "Choose this to manually configure the node or generate new credentials.",
             "adopt": {
                 "title": "Düğüm Benimse",
                 "description": "Zaten düğüm için kimlik bilgilerine sahipseniz bunu seçin."
@@ -1668,7 +1707,7 @@
         },
         "generate": {
             "title": "Oluşturulan Kimlik Bilgileri",
-            "description": "Düğümünüzü yapılandırmak için oluşturulan bu kimlik bilgilerini kullanın",
+            "description": "Use these generated credentials to configure the node",
             "nodeIdTitle": "Düğüm ID",
             "secretTitle": "Gizli",
             "saveCredentialsTitle": "Kimlik Bilgilerini Yapılandırmaya Ekle",
@@ -1744,16 +1783,16 @@
     "idpTypeLabel": "Kimlik Sağlayıcı Türü",
     "roleMappingExpressionPlaceholder": "örn., contains(gruplar, 'yönetici') && 'Yönetici' || 'Üye'",
     "idpGoogleConfiguration": "Google Yapılandırması",
-    "idpGoogleConfigurationDescription": "Google OAuth2 kimlik bilgilerinizi yapılandırın",
-    "idpGoogleClientIdDescription": "Google OAuth2 İstemci Kimliğiniz",
-    "idpGoogleClientSecretDescription": "Google OAuth2 İstemci Sırrınız",
+    "idpGoogleConfigurationDescription": "Configure the Google OAuth2 credentials",
+    "idpGoogleClientIdDescription": "Google OAuth2 Client ID",
+    "idpGoogleClientSecretDescription": "Google OAuth2 Client Secret",
     "idpAzureConfiguration": "Azure Entra ID Yapılandırması",
-    "idpAzureConfigurationDescription": "Azure Entra ID OAuth2 kimlik bilgilerinizi yapılandırın",
+    "idpAzureConfigurationDescription": "Configure Azure Entra ID OAuth2 credentials",
     "idpTenantId": "Kiracı Kimliği",
-    "idpTenantIdPlaceholder": "kiraci-kimliginiz",
-    "idpAzureTenantIdDescription": "Azure kiracı kimliğiniz (Azure Active Directory genel bakışında bulunur)",
-    "idpAzureClientIdDescription": "Azure Uygulama Kaydı İstemci Kimliğiniz",
-    "idpAzureClientSecretDescription": "Azure Uygulama Kaydı İstemci Sırrınız",
+    "idpTenantIdPlaceholder": "tenant-id",
+    "idpAzureTenantIdDescription": "Azure tenant ID (found in Azure Active Directory overview)",
+    "idpAzureClientIdDescription": "Azure App Registration Client ID",
+    "idpAzureClientSecretDescription": "Azure App Registration Client Secret",
     "idpGoogleTitle": "Google",
     "idpGoogleAlt": "Google",
     "idpAzureTitle": "Azure Entra ID",
@@ -1761,14 +1800,14 @@
     "idpGoogleConfigurationTitle": "Google Yapılandırması",
     "idpAzureConfigurationTitle": "Azure Entra ID Yapılandırması",
     "idpTenantIdLabel": "Kiracı Kimliği",
-    "idpAzureClientIdDescription2": "Azure Uygulama Kaydı İstemci Kimliğiniz",
-    "idpAzureClientSecretDescription2": "Azure Uygulama Kaydı İstemci Sırrınız",
+    "idpAzureClientIdDescription2": "Azure App Registration Client ID",
+    "idpAzureClientSecretDescription2": "Azure App Registration Client Secret",
     "idpGoogleDescription": "Google OAuth2/OIDC sağlayıcısı",
     "idpAzureDescription": "Microsoft Azure OAuth2/OIDC sağlayıcısı",
     "subnet": "Alt ağ",
     "subnetDescription": "Bu organizasyonun ağ yapılandırması için alt ağ.",
     "authPage": "Yetkilendirme Sayfası",
-    "authPageDescription": "Kuruluşunuz için yetkilendirme sayfasını yapılandırın",
+    "authPageDescription": "Configure the auth page for the organization",
     "authPageDomain": "Yetkilendirme Sayfası Alanı",
     "noDomainSet": "Alan belirlenmedi",
     "changeDomain": "Alanı Değiştir",
@@ -1778,7 +1817,7 @@
     "setAuthPageDomain": "Yetkilendirme Sayfası Alanını Ayarla",
     "failedToFetchCertificate": "Sertifika getirilemedi",
     "failedToRestartCertificate": "Sertifika yeniden başlatılamadı",
-    "addDomainToEnableCustomAuthPages": "Kuruluşunuz için özel kimlik doğrulama sayfalarını etkinleştirmek için bir alan ekleyin",
+    "addDomainToEnableCustomAuthPages": "Add a domain to enable custom authentication pages for the organization",
     "selectDomainForOrgAuthPage": "Kuruluşun kimlik doğrulama sayfası için bir alan seçin",
     "domainPickerProvidedDomain": "Sağlanan Alan Adı",
     "domainPickerFreeProvidedDomain": "Ücretsiz Sağlanan Alan Adı",
@@ -1793,7 +1832,7 @@
     "domainPickerInvalidSubdomainCannotMakeValid": "\"{sub}\" {domain} için geçerli yapılamadı.",
     "domainPickerSubdomainSanitized": "Alt alan adı temizlendi",
     "domainPickerSubdomainCorrected": "\"{sub}\" \"{sanitized}\" olarak düzeltildi",
-    "orgAuthSignInTitle": "Kuruluşunuza giriş yapın",
+    "orgAuthSignInTitle": "Sign in to the organization",
     "orgAuthChooseIdpDescription": "Devam etmek için kimlik sağlayıcınızı seçin",
     "orgAuthNoIdpConfigured": "Bu kuruluşta yapılandırılmış kimlik sağlayıcı yok. Bunun yerine Pangolin kimliğinizle giriş yapabilirsiniz.",
     "orgAuthSignInWithPangolin": "Pangolin ile Giriş Yap",
@@ -1811,7 +1850,7 @@
     "enableTwoFactorAuthentication": "İki faktörlü kimlik doğrulamayı etkinleştir",
     "completeSecuritySteps": "Güvenlik Adımlarını Tamamla",
     "securitySettings": "Güvenlik Ayarları",
-    "securitySettingsDescription": "Kuruluşunuz için güvenlik politikalarını yapılandırın",
+    "securitySettingsDescription": "Configure security policies for the organization",
     "requireTwoFactorForAllUsers": "Tüm Kullanıcılar için İki Faktörlü Kimlik Doğrulama Gerektir",
     "requireTwoFactorDescription": "Etkinleştirildiğinde, bu kuruluştaki tüm dahili kullanıcıların, kuruluşa erişmek için iki faktörlü kimlik doğrulama etkinleştirilmiş olmalıdır.",
     "requireTwoFactorDisabledDescription": "Bu özellik, geçerli bir lisans (Kurumsal) veya aktif bir abonelik (SaaS) gerektirir",
@@ -1874,8 +1913,12 @@
     "enterpriseEdition": "Kurumsal Sürüm",
     "unlicensed": "Lisansız",
     "beta": "Beta",
-    "manageClients": "Müşteri Yönetimi",
-    "manageClientsDescription": "Müşteriler, sitelerinize bağlanabilen cihazlardır.",
+    "manageUserDevices": "User Devices",
+    "manageUserDevicesDescription": "View and manage devices that users use to privately connect to resources",
+    "manageMachineClients": "Manage Machine Clients",
+    "manageMachineClientsDescription": "Create and manage clients that servers and systems use to privately connect to resources",
+    "clientsTableUserClients": "User",
+    "clientsTableMachineClients": "Machine",
     "licenseTableValidUntil": "Geçerli İki Tarih Kadar",
     "saasLicenseKeysSettingsTitle": "Kurumsal Lisanslar",
     "saasLicenseKeysSettingsDescription": "Kendi barındırdığınız Pangolin örnekleri için kurumsal lisans anahtarları oluşturun ve yönetin.",
@@ -2075,7 +2118,7 @@
     "preferWildcardCert": "Joker Sertifikayı Tercih Et",
     "unverified": "Doğrulanmadı",
     "domainSetting": "Alan Adı Ayarları",
-    "domainSettingDescription": "Alan adınız için ayarları yapılandırın",
+    "domainSettingDescription": "Configure settings for the domain",
     "preferWildcardCertDescription": "Joker sertifika üretmeye çalışın (doğru yapılandırılmış bir sertifika çözücü gereklidir).",
     "recordName": "Kayıt Adı",
     "auto": "Otomatik",
@@ -2089,15 +2132,15 @@
     "olmUpdateAvailableInfo": "Olm'nin güncellenmiş bir sürümü mevcut. En iyi deneyim için lütfen en son sürüme güncelleyin.",
     "client": "İstemci",
     "proxyProtocol": "Proxy Protokol Ayarları",
-    "proxyProtocolDescription": "TCP/UDP hizmetleri için istemci IP adreslerini korumak için Proxy Protokolünü yapılandırın.",
+    "proxyProtocolDescription": "Configure Proxy Protocol to preserve client IP addresses for TCP services.",
     "enableProxyProtocol": "Proxy Protokolünü Etkinleştir",
-    "proxyProtocolInfo": "TCP/UDP arka uçları için istemci IP adreslerini koruyun",
+    "proxyProtocolInfo": "Preserve client IP addresses for TCP backends",
     "proxyProtocolVersion": "Proxy Protokol Versiyonu",
     "version1": " Versiyon 1 (Önerilen)",
     "version2": "Versiyon 2",
     "versionDescription": "Versiyon 1 metin tabanlı ve yaygın olarak desteklenir. Versiyon 2 ise ikili ve daha verimlidir ama daha az uyumludur.",
     "warning": "Uyarı",
-    "proxyProtocolWarning": "Arka uç uygulamanız, Proxy Protokol bağlantılarını kabul etmek üzere yapılandırılmalıdır. Arka ucunuz Proxy Protokolünü desteklemiyorsa, bunu etkinleştirmek tüm bağlantıları koparır. Traefik'ten gelen Proxy Protokol başlıklarına güvenecek şekilde arka ucunuzu yapılandırdığınızdan emin olun.",
+    "proxyProtocolWarning": "The backend application must be configured to accept Proxy Protocol connections. If your backend doesn't support Proxy Protocol, enabling this will break all connections so only enable this if you know what you're doing. Make sure to configure your backend to trust Proxy Protocol headers from Traefik.",
     "restarting": "Yeniden Başlatılıyor...",
     "manual": "Manuel",
     "messageSupport": "Destek Mesajı Gönder",
@@ -2120,6 +2163,43 @@
     "supportMessageSent": "Mesaj Gönderildi!",
     "supportWillContact": "En kısa sürede size geri döneceğiz!",
     "selectLogRetention": "Kayıt saklama seç",
+    "terms": "Terms",
+    "privacy": "Privacy",
+    "security": "Security",
+    "docs": "Docs",
+    "deviceActivation": "Device activation",
+    "deviceCodeInvalidFormat": "Code must be 9 characters (e.g., A1AJ-N5JD)",
+    "deviceCodeInvalidOrExpired": "Invalid or expired code",
+    "deviceCodeVerifyFailed": "Failed to verify device code",
+    "signedInAs": "Signed in as",
+    "deviceCodeEnterPrompt": "Enter the code displayed on the device",
+    "continue": "Continue",
+    "deviceUnknownLocation": "Unknown location",
+    "deviceAuthorizationRequested": "This authorization was requested from {location} on {date}. Make sure you trust this device as it will get access to the account.",
+    "deviceLabel": "Device: {deviceName}",
+    "deviceWantsAccess": "wants to access your account",
+    "deviceExistingAccess": "Existing access:",
+    "deviceFullAccess": "Full access to your account",
+    "deviceOrganizationsAccess": "Access to all organizations your account has access to",
+    "deviceAuthorize": "Authorize {applicationName}",
+    "deviceConnected": "Device Connected!",
+    "deviceAuthorizedMessage": "Device is authorized to access your account.",
+    "pangolinCloud": "Pangolin Cloud",
+    "viewDevices": "View Devices",
+    "viewDevicesDescription": "Manage your connected devices",
+    "noDevices": "No devices found",
+    "dateCreated": "Date Created",
+    "unnamedDevice": "Unnamed Device",
+    "deviceQuestionRemove": "Are you sure you want to delete this device?",
+    "deviceMessageRemove": "This action cannot be undone.",
+    "deviceDeleteConfirm": "Delete Device",
+    "deleteDevice": "Delete Device",
+    "errorLoadingDevices": "Error loading devices",
+    "failedToLoadDevices": "Failed to load devices",
+    "deviceDeleted": "Device deleted",
+    "deviceDeletedDescription": "The device has been successfully deleted.",
+    "errorDeletingDevice": "Error deleting device",
+    "failedToDeleteDevice": "Failed to delete device",
     "showColumns": "Sütunları Göster",
     "hideColumns": "Sütunları Gizle",
     "columnVisibility": "Sütun Görünürlüğü",
@@ -2134,6 +2214,10 @@
     "enableSelected": "Seçilenleri Etkinleştir",
     "disableSelected": "Seçilenleri Devre Dışı Bırak",
     "checkSelectedStatus": "Seçilenlerin Durumunu Kontrol Et",
+    "clients": "Clients",
+    "accessClientSelect": "Select machine clients",
+    "resourceClientDescription": "Machine clients that can access this resource",
+    "regenerate": "Regenerate",
     "credentials": "Kimlik Bilgileri",
     "savecredentials": "Kimlik Bilgilerini Kaydet",
     "regeneratecredentials": "Yeniden Anahtarla",
@@ -2151,7 +2235,6 @@
     "endpoint": "Uç Nokta",
     "Id": "Kimlik",
     "SecretKey": "Gizli Anahtar",
-    "featureDisabledTooltip": "Bu özellik yalnızca kurumsal planda mevcuttur ve kullanmak için lisans gerektirir.",
     "niceId": "Güzel Kimlik",
     "niceIdUpdated": "Güzel Kimlik Güncellendi",
     "niceIdUpdatedSuccessfully": "Güzel Kimlik Başarıyla Güncellendi",
@@ -2160,5 +2243,15 @@
     "niceIdCannotBeEmpty": "Güzel Kimlik boş olamaz",
     "enterIdentifier": "Tanımlayıcıyı girin",
     "identifier": "Tanımlayıcı",
-    "noData": "No Data"
+    "deviceLoginUseDifferentAccount": "Not you? Use a different account.",
+    "deviceLoginDeviceRequestingAccessToAccount": "A device is requesting access to this account.",
+    "noData": "No Data",
+    "machineClients": "Machine Clients",
+    "install": "Install",
+    "run": "Run",
+    "clientNameDescription": "The display name of the client that can be changed later.",
+    "clientAddress": "Client Address (Advanced)",
+    "setupFailedToFetchSubnet": "Failed to fetch default subnet",
+    "setupSubnetAdvanced": "Subnet (Advanced)",
+    "setupSubnetDescription": "The subnet for this organization's internal network."
 }

messages/zh-CN.json

@@ -1,12 +1,12 @@
 {
-    "setupCreate": "创建您的第一个组织、网站和资源",
+    "setupCreate": "Create the organization, site, and resources",
     "setupNewOrg": "新建组织",
     "setupCreateOrg": "创建组织",
     "setupCreateResources": "创建资源",
     "setupOrgName": "组织名称",
-    "orgDisplayName": "这是您组织的显示名称。",
+    "orgDisplayName": "This is the display name of the organization.",
     "orgId": "组织ID",
-    "setupIdentifierMessage": "这是您组织的唯一标识符。这是与显示名称分开的。",
+    "setupIdentifierMessage": "This is the unique identifier for the organization.",
     "setupErrorIdentifier": "组织ID 已被使用。请另选一个。",
     "componentsErrorNoMemberCreate": "您目前不是任何组织的成员。创建组织以开始操作。",
     "componentsErrorNoMember": "您目前不是任何组织的成员。",
@@ -50,10 +50,10 @@
     "siteMessageRemove": "一旦移除，站点将无法访问。与站点相关的所有目标也将被移除。",
     "siteQuestionRemove": "您确定要从组织中删除该站点吗？",
     "siteManageSites": "管理站点",
-    "siteDescription": "允许通过安全隧道连接到您的网络",
+    "siteDescription": "Create and manage sites to enable connectivity to private networks",
     "siteCreate": "创建站点",
     "siteCreateDescription2": "按照下面的步骤创建和连接一个新站点",
-    "siteCreateDescription": "创建一个新站点开始连接您的资源",
+    "siteCreateDescription": "Create a new site to start connecting resources",
     "close": "关闭",
     "siteErrorCreate": "创建站点出错",
     "siteErrorCreateKeyPair": "找不到密钥对或站点默认值",
@@ -74,7 +74,7 @@
     "siteInstallNewt": "安装 Newt",
     "siteInstallNewtDescription": "在您的系统中运行 Newt",
     "WgConfiguration": "WireGuard 配置",
-    "WgConfigurationDescription": "使用以下配置连接到您的网络",
+    "WgConfigurationDescription": "Use the following configuration to connect to the network",
     "operatingSystem": "操作系统",
     "commands": "命令",
     "recommended": "推荐",
@@ -87,32 +87,32 @@
     "siteUpdated": "站点已更新",
     "siteUpdatedDescription": "网站已更新。",
     "siteGeneralDescription": "配置此站点的常规设置",
-    "siteSettingDescription": "配置您网站上的设置",
+    "siteSettingDescription": "Configure the settings on the site",
     "siteSetting": "{siteName} 设置",
-    "siteNewtTunnel": "Newt 隧道 (推荐)",
-    "siteNewtTunnelDescription": "最简单的方式来连接到您的网络。不需要任何额外设置。",
+    "siteNewtTunnel": "Newt Site (Recommended)",
+    "siteNewtTunnelDescription": "Easiest way to create an entrypoint into any network. No extra setup.",
     "siteWg": "基本 WireGuard",
     "siteWgDescription": "使用任何 WireGuard 客户端来建立隧道。需要手动配置 NAT。",
     "siteWgDescriptionSaas": "使用任何WireGuard客户端建立隧道。需要手动配置NAT。仅适用于自托管节点。",
     "siteLocalDescription": "仅限本地资源。不需要隧道。",
     "siteLocalDescriptionSaas": "仅本地资源。没有隧道。仅在远程节点上可用。",
     "siteSeeAll": "查看所有站点",
-    "siteTunnelDescription": "确定如何连接到您的网站",
-    "siteNewtCredentials": "Newt 凭据",
-    "siteNewtCredentialsDescription": "这是 Newt 服务器的身份验证凭据",
-    "siteCredentialsSave": "保存您的凭据",
+    "siteTunnelDescription": "Determine how you want to connect to the site",
+    "siteNewtCredentials": "Credentials",
+    "siteNewtCredentialsDescription": "This is how the site will authenticate with the server",
+    "siteCredentialsSave": "Save the Credentials",
     "siteCredentialsSaveDescription": "您只能看到一次。请确保将其复制并保存到一个安全的地方。",
     "siteInfo": "站点信息",
     "status": "状态",
     "shareTitle": "管理共享链接",
-    "shareDescription": "创建可共享的链接，允许暂时或永久访问您的资源",
+    "shareDescription": "Create shareable links to grant temporary or permanent access to proxy resources",
     "shareSearch": "搜索共享链接...",
     "shareCreate": "创建共享链接",
     "shareErrorDelete": "删除链接失败",
     "shareErrorDeleteMessage": "删除链接时出错",
     "shareDeleted": "链接已删除",
     "shareDeletedDescription": "链接已删除",
-    "shareTokenDescription": "您的访问令牌可以通过两种方式传递：作为查询参数或请求头。 每次验证访问请求都必须从客户端传递。",
+    "shareTokenDescription": "The access token can be passed in two ways: as a query parameter or in the request headers. These must be passed from the client on every request for authenticated access.",
     "accessToken": "访问令牌",
     "usageExamples": "用法示例",
     "tokenId": "令牌 ID",
@@ -121,7 +121,7 @@
     "importantNote": "重要提示",
     "shareImportantDescription": "出于安全考虑，建议尽可能在使用请求头传递参数，因为查询参数可能会被浏览器历史记录或服务器日志记录。",
     "token": "令牌",
-    "shareTokenSecurety": "请妥善保管您的访问令牌，不要将其暴露在公开访问的区域或客户端代码中。",
+    "shareTokenSecurety": "Keep the access token secure. Do not share it in publicly accessible areas or client-side code.",
     "shareErrorFetchResource": "获取资源失败",
     "shareErrorFetchResourceDescription": "获取资源时出错",
     "shareErrorCreate": "无法创建共享链接",
@@ -144,8 +144,10 @@
     "expires": "过期时间",
     "never": "永不过期",
     "shareErrorSelectResource": "请选择一个资源",
-    "resourceTitle": "管理资源",
-    "resourceDescription": "为您的私人应用程序创建安全代理",
+    "proxyResourceTitle": "Manage Public Resources",
+    "proxyResourceDescription": "Create and manage resources that are publicly accessible through a web browser",
+    "clientResourceTitle": "Manage Private Resources",
+    "clientResourceDescription": "Create and manage resources that are only accessible through a connected client",
     "resourcesSearch": "搜索资源...",
     "resourceAdd": "添加资源",
     "resourceErrorDelte": "删除资源时出错",
@@ -155,9 +157,9 @@
     "resourceMessageRemove": "一旦删除，资源将不再可访问。与该资源相关的所有目标也将被删除。",
     "resourceQuestionRemove": "您确定要从组织中删除资源吗？",
     "resourceHTTP": "HTTPS 资源",
-    "resourceHTTPDescription": "使用子域或根域名通过 HTTPS 向您的应用程序提出代理请求。",
+    "resourceHTTPDescription": "Proxy requests to the app over HTTPS using a subdomain or base domain.",
     "resourceRaw": "TCP/UDP 资源",
-    "resourceRawDescription": "使用 TCP/UDP 使用端口号向您的应用提出代理请求。",
+    "resourceRawDescription": "Proxy requests to the app over TCP/UDP using a port number. This only works when sites are connected to nodes.",
     "resourceCreate": "创建资源",
     "resourceCreateDescription": "按照下面的步骤创建新资源",
     "resourceSeeAll": "查看所有资源",
@@ -171,22 +173,22 @@
     "noCountryFound": "找不到国家。",
     "siteSelectionDescription": "此站点将为目标提供连接。",
     "resourceType": "资源类型",
-    "resourceTypeDescription": "确定如何访问您的资源",
+    "resourceTypeDescription": "Determine how to access the resource",
     "resourceHTTPSSettings": "HTTPS 设置",
-    "resourceHTTPSSettingsDescription": "配置如何通过 HTTPS 访问您的资源",
+    "resourceHTTPSSettingsDescription": "Configure how the resource will be accessed over HTTPS",
     "domainType": "域类型",
     "subdomain": "子域名",
     "baseDomain": "根域名",
-    "subdomnainDescription": "您的资源可以访问的子域名。",
+    "subdomnainDescription": "The subdomain where the resource will be accessible.",
     "resourceRawSettings": "TCP/UDP 设置",
-    "resourceRawSettingsDescription": "配置如何通过 TCP/UDP 访问您的资源。 您映射资源到主机Pangolin服务器上的端口，这样您就可以访问服务器-公共-ip:mapped端口的资源。",
+    "resourceRawSettingsDescription": "Configure how the resource will be accessed over TCP/UDP. You map the resource to a port on the host Pangolin server, so you can access the resource from server-public-ip:mapped-port.",
     "protocol": "协议",
     "protocolSelect": "选择协议",
     "resourcePortNumber": "端口号",
     "resourcePortNumberDescription": "代理请求的外部端口号。",
     "cancel": "取消",
     "resourceConfig": "配置片段",
-    "resourceConfigDescription": "复制并粘贴这些配置片段以设置您的 TCP/UDP 资源",
+    "resourceConfigDescription": "Copy and paste these configuration snippets to set up the TCP/UDP resource",
     "resourceAddEntrypoints": "Traefik: 添加入口点",
     "resourceExposePorts": "Gerbil：在 Docker Compose 中显示端口",
     "resourceLearnRaw": "学习如何配置 TCP/UDP 资源",
@@ -202,14 +204,14 @@
     "proxy": "代理服务器",
     "internal": "内部设置",
     "rules": "规则",
-    "resourceSettingDescription": "配置您资源上的设置",
+    "resourceSettingDescription": "Configure the settings on the resource",
     "resourceSetting": "{resourceName} 设置",
-    "alwaysAllow": "一律允许",
-    "alwaysDeny": "一律拒绝",
+    "alwaysAllow": "Bypass Auth",
+    "alwaysDeny": "Block Access",
     "passToAuth": "传递至认证",
-    "orgSettingsDescription": "配置您组织的一般设置",
+    "orgSettingsDescription": "Configure the organization's settings",
     "orgGeneralSettings": "组织设置",
-    "orgGeneralSettingsDescription": "管理您的机构详细信息和配置",
+    "orgGeneralSettingsDescription": "Manage the organization's details and configuration",
     "saveGeneralSettings": "保存常规设置",
     "saveSettings": "保存设置",
     "orgDangerZone": "危险区域",
@@ -232,7 +234,7 @@
     "orgMissing": "缺少组织 ID",
     "orgMissingMessage": "没有组织ID，无法重新生成邀请。",
     "accessUsersManage": "管理用户",
-    "accessUsersDescription": "邀请用户并位他们添加角色以管理访问您的组织",
+    "accessUsersDescription": "Invite and manage users with access to this organization",
     "accessUsersSearch": "搜索用户...",
     "accessUserCreate": "创建用户",
     "accessUserRemove": "删除用户",
@@ -241,13 +243,13 @@
     "role": "角色",
     "nameRequired": "名称是必填项",
     "accessRolesManage": "管理角色",
-    "accessRolesDescription": "配置角色来管理访问您的组织",
+    "accessRolesDescription": "Create and manage roles for users in the organization",
     "accessRolesSearch": "搜索角色...",
     "accessRolesAdd": "添加角色",
     "accessRoleDelete": "删除角色",
     "description": "描述",
     "inviteTitle": "打开邀请",
-    "inviteDescription": "管理您给其他用户的邀请",
+    "inviteDescription": "Manage invitations for other users to join the organization",
     "inviteSearch": "搜索邀请...",
     "minutes": "分钟",
     "hours": "小时",
@@ -261,13 +263,13 @@
     "apiKeysErrorCreate": "创建 API 密钥出错",
     "apiKeysErrorSetPermission": "设置权限出错",
     "apiKeysCreate": "生成 API 密钥",
-    "apiKeysCreateDescription": "为您的组织生成一个新的 API 密钥",
+    "apiKeysCreateDescription": "Generate a new API key for the organization",
     "apiKeysGeneralSettings": "权限",
     "apiKeysGeneralSettingsDescription": "确定此 API 密钥可以做什么",
-    "apiKeysList": "您的 API 密钥",
-    "apiKeysSave": "保存您的 API 密钥",
+    "apiKeysList": "New API Key",
+    "apiKeysSave": "Save the API Key",
     "apiKeysSaveDescription": "该信息仅会显示一次，请确保将其复制到安全的位置。",
-    "apiKeysInfo": "您的 API 密钥是：",
+    "apiKeysInfo": "The API key is:",
     "apiKeysConfirmCopy": "我已复制 API 密钥",
     "generate": "生成",
     "done": "完成",
@@ -424,7 +426,7 @@
     "userCreated": "用户已创建",
     "userCreatedDescription": "用户已成功创建。",
     "userTypeInternal": "内部用户",
-    "userTypeInternalDescription": "邀请用户直接加入您的组织。",
+    "userTypeInternalDescription": "Invite a user to join the organization directly.",
     "userTypeExternal": "外部用户",
     "userTypeExternalDescription": "创建一个具有外部身份提供商的用户。",
     "accessUserCreateDescription": "按照下面的步骤创建一个新用户",
@@ -468,13 +470,13 @@
     "accessControlsSubmit": "保存访问控制",
     "roles": "角色",
     "accessUsersRoles": "管理用户和角色",
-    "accessUsersRolesDescription": "邀请用户并将他们添加到角色以管理访问您的组织",
+    "accessUsersRolesDescription": "Invite users and add them to roles to manage access to the organization",
     "key": "关键字",
     "createdAt": "创建于",
     "proxyErrorInvalidHeader": "无效的自定义主机头值。使用域名格式，或将空保存为取消自定义主机头。",
     "proxyErrorTls": "无效的 TLS 服务器名称。使用域名格式，或保存空以删除 TLS 服务器名称。",
     "proxyEnableSSL": "启用 SSL",
-    "proxyEnableSSLDescription": "启用 SSL/TLS 加密以确保您目标的 HTTPS 连接。",
+    "proxyEnableSSLDescription": "Enable SSL/TLS encryption for secure HTTPS connections to the targets.",
     "target": "Target",
     "configureTarget": "配置目标",
     "targetErrorFetch": "获取目标失败",
@@ -490,29 +492,29 @@
     "targetsErrorUpdate": "更新目标失败",
     "targetsErrorUpdateDescription": "更新目标时出错",
     "targetTlsUpdate": "TLS 设置已更新",
-    "targetTlsUpdateDescription": "您的 TLS 设置已成功更新",
+    "targetTlsUpdateDescription": "TLS settings have been updated successfully",
     "targetErrorTlsUpdate": "更新 TLS 设置失败",
     "targetErrorTlsUpdateDescription": "更新 TLS 设置时出错",
     "proxyUpdated": "代理设置已更新",
-    "proxyUpdatedDescription": "您的代理设置已成功更新",
+    "proxyUpdatedDescription": "Proxy settings have been updated successfully",
     "proxyErrorUpdate": "更新代理设置失败",
     "proxyErrorUpdateDescription": "更新代理设置时出错",
     "targetAddr": "IP / 域名",
     "targetPort": "端口",
     "targetProtocol": "协议",
     "targetTlsSettings": "安全连接配置",
-    "targetTlsSettingsDescription": "配置资源的 SSL/TLS 设置",
+    "targetTlsSettingsDescription": "Configure SSL/TLS settings for the resource",
     "targetTlsSettingsAdvanced": "高级TLS设置",
     "targetTlsSni": "TLS 服务器名称",
     "targetTlsSniDescription": "SNI使用的 TLS 服务器名称。留空使用默认值。",
     "targetTlsSubmit": "保存设置",
     "targets": "目标配置",
-    "targetsDescription": "设置目标来路由流量到您的后端服务",
+    "targetsDescription": "Set up targets to route traffic to backend services",
     "targetStickySessions": "启用置顶会话",
     "targetStickySessionsDescription": "将连接保持在同一个后端目标的整个会话中。",
     "methodSelect": "选择方法",
     "targetSubmit": "添加目标",
-    "targetNoOne": "此资源没有任何目标。添加目标来配置向您后端发送请求的位置。",
+    "targetNoOne": "This resource doesn't have any targets. Add a target to configure where to send requests to the backend.",
     "targetNoOneDescription": "在上面添加多个目标将启用负载平衡。",
     "targetsSubmit": "保存目标",
     "addTarget": "添加目标",
@@ -530,7 +532,7 @@
     "tlsServerNameDescription": "The TLS server name to use for SNI",
     "save": "保存",
     "proxyAdditional": "附加代理设置",
-    "proxyAdditionalDescription": "配置你的资源如何处理代理设置",
+    "proxyAdditionalDescription": "Configure how the resource handles proxy settings",
     "proxyCustomHeader": "自定义主机标题",
     "proxyCustomHeaderDescription": "代理请求时设置的主机头。留空则使用默认值。",
     "proxyAdditionalSubmit": "保存代理设置",
@@ -570,7 +572,7 @@
     "rulesMatchType": "匹配类型",
     "value": "值",
     "rulesAbout": "关于规则",
-    "rulesAboutDescription": "规则使您能够依据特定条件控制资源访问权限。您可以创建基于 IP 地址或 URL 路径的规则，以允许或拒绝访问。",
+    "rulesAboutDescription": "Rules allow you to control access to the resource based on a set of criteria. You can create rules to allow or deny access based on IP address or URL path.",
     "rulesActions": "行动",
     "rulesActionAlwaysAllow": "总是允许：绕过所有身份验证方法",
     "rulesActionAlwaysDeny": "总是拒绝：阻止所有请求；无法尝试验证",
@@ -582,7 +584,7 @@
     "rulesEnable": "启用规则",
     "rulesEnableDescription": "启用或禁用此资源的规则评估",
     "rulesResource": "资源规则配置",
-    "rulesResourceDescription": "配置规则来控制对您资源的访问",
+    "rulesResourceDescription": "Configure rules to control access to the resource",
     "ruleSubmit": "添加规则",
     "rulesNoOne": "没有规则。使用表单添加规则。",
     "rulesOrder": "规则按优先顺序评定。",
@@ -598,7 +600,7 @@
     "none": "无",
     "unknown": "未知",
     "resources": "资源",
-    "resourcesDescription": "资源是您私有网络中运行的应用程序的代理。您可以为私有网络中的任何 HTTP/HTTPS 或 TCP/UDP 服务创建资源。每个资源都必须连接到一个站点，以通过加密的 WireGuard 隧道实现私密且安全的连接。",
+    "resourcesDescription": "Resources are proxies to applications running on the private network. Create a resource for any HTTP/HTTPS or raw TCP/UDP service on your private network. Each resource must be connected to a site to enable private, secure connectivity through an encrypted WireGuard tunnel.",
     "resourcesWireGuardConnect": "采用 WireGuard 提供的加密安全连接",
     "resourcesMultipleAuthenticationMethods": "配置多个身份验证方法",
     "resourcesUsersRolesAccess": "基于用户和角色的访问控制",
@@ -609,7 +611,7 @@
     "resourceSelect": "选择资源",
     "shareLinks": "分享链接",
     "share": "分享链接",
-    "shareDescription2": "创建资源共享链接。链接提供对资源的临时或无限制访问。 当您创建链接时，您可以配置链接的到期时间。",
+    "shareDescription2": "Create shareable links to resources. Links provide temporary or unlimited access to your resource. You can configure the expiration duration of the link when you create one.",
     "shareEasyCreate": "轻松创建和分享",
     "shareConfigurableExpirationDuration": "可配置的过期时间",
     "shareSecureAndRevocable": "安全和可撤销的",
@@ -619,19 +621,19 @@
     "unknownCommand": "未知命令",
     "newtErrorFetchReleases": "无法获取版本信息: {err}",
     "newtErrorFetchLatest": "无法获取最新版信息: {err}",
-    "newtEndpoint": "Newt 端点",
-    "newtId": "Newt  ID",
-    "newtSecretKey": "Newt 私钥",
+    "newtEndpoint": "Endpoint",
+    "newtId": "ID",
+    "newtSecretKey": "Secret",
     "architecture": "架构",
     "sites": "站点",
-    "siteWgAnyClients": "使用任何 WireGuard 客户端连接。您必须使用对等IP解决您的内部资源。",
+    "siteWgAnyClients": "Use any WireGuard client to connect. You will have to address internal resources using the peer IP.",
     "siteWgCompatibleAllClients": "与所有WireGuard客户端兼容",
     "siteWgManualConfigurationRequired": "需要手动配置",
     "userErrorNotAdminOrOwner": "用户不是管理员或所有者",
     "pangolinSettings": "设置 - Pangolin",
     "accessRoleYour": "您的角色：",
-    "accessRoleSelect2": "选择角色",
-    "accessUserSelect": "选择一个用户",
+    "accessRoleSelect2": "Select roles",
+    "accessUserSelect": "Select users",
     "otpEmailEnter": "输入电子邮件",
     "otpEmailEnterDescription": "在输入字段输入后按回车键添加电子邮件。",
     "otpEmailErrorInvalid": "无效的邮箱地址。通配符（*）必须占据整个开头部分。",
@@ -683,7 +685,7 @@
     "resourcePincodeSetupTitle": "设置 PIN 码",
     "resourcePincodeSetupTitleDescription": "设置 PIN 码来保护此资源",
     "resourceRoleDescription": "管理员总是可以访问此资源。",
-    "resourceUsersRoles": "用户和角色",
+    "resourceUsersRoles": "Access Controls",
     "resourceUsersRolesDescription": "配置用户和角色可以访问此资源",
     "resourceUsersRolesSubmit": "保存用户和角色",
     "resourceWhitelistSave": "保存成功",
@@ -779,15 +781,15 @@
     "idpOidcConfigure": "OAuth2/OIDC 配置",
     "idpOidcConfigureDescription": "配置 OAuth2/OIDC 供应商端点和凭据",
     "idpClientId": "客户端ID",
-    "idpClientIdDescription": "来自您身份提供商的 OAuth2 客户端 ID",
+    "idpClientIdDescription": "The OAuth2 client ID from the identity provider",
     "idpClientSecret": "客户端密钥",
-    "idpClientSecretDescription": "来自身份提供商的 OAuth2 客户端密钥",
+    "idpClientSecretDescription": "The OAuth2 client secret from the identity provider",
     "idpAuthUrl": "授权 URL",
     "idpAuthUrlDescription": "OAuth2 授权端点的 URL",
     "idpTokenUrl": "令牌 URL",
     "idpTokenUrlDescription": "OAuth2 令牌端点的 URL",
     "idpOidcConfigureAlert": "重要提示",
-    "idpOidcConfigureAlertDescription": "创建身份提供方后，您需要在其设置中配置回调 URL。回调 URL 会在创建成功后提供。",
+    "idpOidcConfigureAlertDescription": "After creating the identity provider, you will need to configure the callback URL in the identity provider's settings. The callback URL will be provided after successful creation.",
     "idpToken": "令牌配置",
     "idpTokenDescription": "配置如何从 ID 令牌中提取用户信息",
     "idpJmespathAbout": "关于 JMESPath",
@@ -804,7 +806,7 @@
     "idpSubmit": "创建身份提供商",
     "orgPolicies": "组织策略",
     "idpSettings": "{idpName} 设置",
-    "idpCreateSettingsDescription": "配置身份提供商的设置",
+    "idpCreateSettingsDescription": "Configure the settings for the identity provider",
     "roleMapping": "角色映射",
     "orgMapping": "组织映射",
     "orgPoliciesSearch": "搜索组织策略...",
@@ -839,7 +841,7 @@
     "idpUpdatedDescription": "身份提供商更新成功",
     "redirectUrl": "重定向网址",
     "redirectUrlAbout": "关于重定向网址",
-    "redirectUrlAboutDescription": "这是用户在验证后将被重定向到的URL。您需要在身份提供商设置中配置此URL。",
+    "redirectUrlAboutDescription": "This is the URL to which users will be redirected after authentication. You need to configure this URL in the identity provider's settings.",
     "pangolinAuth": "认证 - Pangolin",
     "verificationCodeLengthRequirements": "您的验证码必须是8个字符。",
     "errorOccurred": "发生错误",
@@ -922,6 +924,10 @@
     "passwordResetSent": "我们将发送一个验证码到这个电子邮件地址。",
     "passwordResetCode": "验证码",
     "passwordResetCodeDescription": "请检查您的电子邮件以获取验证码。",
+    "generatePasswordResetCode": "Generate Password Reset Code",
+    "passwordResetCodeGenerated": "Password Reset Code Generated",
+    "passwordResetCodeGeneratedDescription": "Share this code with the user. They can use it to reset their password.",
+    "passwordResetUrl": "Reset URL",
     "passwordNew": "新密码",
     "passwordNewConfirm": "确认新密码",
     "changePassword": "更改密码",
@@ -939,6 +945,9 @@
     "pincodeAuth": "验证器代码",
     "pincodeSubmit2": "提交代码",
     "passwordResetSubmit": "请求重置",
+    "passwordResetAlreadyHaveCode": "Enter Password Reset Code",
+    "passwordResetSmtpRequired": "Please contact your administrator",
+    "passwordResetSmtpRequiredDescription": "A password reset code is required to reset your password. Please contact your administrator for assistance.",
     "passwordBack": "回到密码",
     "loginBack": "返回登录",
     "signup": "注册",
@@ -1104,12 +1113,15 @@
     "actionListSiteResources": "列出站点资源",
     "actionUpdateSiteResource": "更新站点资源",
     "actionListInvitations": "邀请列表",
+    "actionExportLogs": "Export Logs",
+    "actionViewLogs": "View Logs",
     "noneSelected": "未选择",
     "orgNotFound2": "未找到组织。",
     "searchProgress": "搜索中...",
     "create": "创建",
     "orgs": "组织",
     "loginError": "登录时出错",
+    "loginRequiredForDevice": "Login is required to authenticate your device.",
     "passwordForgot": "忘记密码？",
     "otpAuth": "两步验证",
     "otpAuthDescription": "从您的身份验证程序中输入代码或您的单次备份代码。",
@@ -1164,23 +1176,29 @@
     "sidebarHome": "首页",
     "sidebarSites": "站点",
     "sidebarResources": "资源",
+    "sidebarProxyResources": "Public",
+    "sidebarClientResources": "Private",
     "sidebarAccessControl": "访问控制",
+    "sidebarLogsAndAnalytics": "Logs & Analytics",
     "sidebarUsers": "用户",
+    "sidebarAdmin": "Admin",
     "sidebarInvitations": "邀请",
     "sidebarRoles": "角色",
-    "sidebarShareableLinks": "分享链接",
+    "sidebarShareableLinks": "Links",
     "sidebarApiKeys": "API密钥",
     "sidebarSettings": "设置",
     "sidebarAllUsers": "所有用户",
     "sidebarIdentityProviders": "身份提供商",
     "sidebarLicense": "证书",
     "sidebarClients": "客户端",
+    "sidebarUserDevices": "Users",
+    "sidebarMachineClients": "Machines",
     "sidebarDomains": "域",
     "sidebarGeneral": "General",
     "sidebarLogAndAnalytics": "Log & Analytics",
     "sidebarBluePrints": "蓝图",
     "sidebarOrganization": "Organization",
-    "sidebarLogsAnalytics": "Request Analytics",
+    "sidebarLogsAnalytics": "Analytics",
     "blueprints": "蓝图",
     "blueprintsDescription": "应用声明配置并查看先前运行的",
     "blueprintAdd": "添加蓝图",
@@ -1191,7 +1209,7 @@
     "blueprintDetailsDescription": "查看应用蓝图的结果和发生的任何错误",
     "blueprintInfo": "蓝图信息",
     "message": "留言",
-    "blueprintContentsDescription": "定义描述您基础设施的 YAML 内容",
+    "blueprintContentsDescription": "Define the YAML content describing the infrastructure",
     "blueprintErrorCreateDescription": "应用蓝图时出错",
     "blueprintErrorCreate": "创建蓝图时出错",
     "searchBlueprintProgress": "搜索蓝图...",
@@ -1247,15 +1265,15 @@
     "loading": "加载中",
     "restart": "重启",
     "domains": "域",
-    "domainsDescription": "管理您的组织域",
+    "domainsDescription": "Create and manage domains available in the organization",
     "domainsSearch": "搜索域...",
     "domainAdd": "添加域",
-    "domainAddDescription": "在您的组织中注册新域",
+    "domainAddDescription": "Register a new domain with to the organization",
     "domainCreate": "创建域",
     "domainCreatedDescription": "域创建成功",
     "domainDeletedDescription": "成功删除域",
-    "domainQuestionRemove": "您确定要从您的帐户中删除域名吗？",
-    "domainMessageRemove": "移除后，该域将不再与您的账户关联。",
+    "domainQuestionRemove": "Are you sure you want to remove the domain?",
+    "domainMessageRemove": "Once removed, the domain will no longer be associated with the organization.",
     "domainConfirmDelete": "确认删除域",
     "domainDelete": "删除域",
     "domain": "域",
@@ -1274,7 +1292,7 @@
     "pending": "待定",
     "sidebarBilling": "计费",
     "billing": "计费",
-    "orgBillingDescription": "管理您的账单信息和订阅",
+    "orgBillingDescription": "Manage billing information and subscriptions",
     "github": "GitHub",
     "pangolinHosted": "Pangolin 托管",
     "fossorial": "Fossorial",
@@ -1317,7 +1335,7 @@
     "domainPickerSortAsc": "A-Z",
     "domainPickerSortDesc": "Z-A",
     "domainPickerCheckingAvailability": "检查可用性...",
-    "domainPickerNoMatchingDomains": "未找到匹配的域名。尝试不同的域名或检查您组织的域名设置。",
+    "domainPickerNoMatchingDomains": "No matching domains found. Try a different domain or check the organization's domain settings.",
     "domainPickerOrganizationDomains": "组织域",
     "domainPickerProvidedDomains": "提供的域",
     "domainPickerSubdomain": "子域：{subdomain}",
@@ -1351,7 +1369,7 @@
     "billingModifySubscription": "修改订阅",
     "billingStartSubscription": "开始订阅",
     "billingRecurringCharge": "周期性收费",
-    "billingManageSubscriptionSettings": "管理您的订阅设置和偏好",
+    "billingManageSubscriptionSettings": "Manage subscription settings and preferences",
     "billingNoActiveSubscription": "您没有活跃的订阅。开始订阅以增加使用限制。",
     "billingFailedToLoadSubscription": "无法加载订阅",
     "billingFailedToLoadUsage": "无法加载使用情况",
@@ -1362,9 +1380,9 @@
     "billingPortalError": "门户错误",
     "billingDataUsageInfo": "当连接到云端时，您将为通过安全隧道传输的所有数据收取费用。 这包括您所有站点的进出流量。 当您达到上限时，您的站点将断开连接，直到您升级计划或减少使用。使用节点时不收取数据。",
     "billingOnlineTimeInfo": "您要根据您的网站连接到云端的时间长短收取费用。 例如，44,640分钟等于一个24/7全月运行的网站。 当您达到上限时，您的站点将断开连接，直到您升级计划或减少使用。使用节点时不收取费用。",
-    "billingUsersInfo": "根据您组织中的活跃用户数量收费。按日计算账单。",
-    "billingDomainInfo": "根据组织中活跃域的数量收费。按日计算账单。",
-    "billingRemoteExitNodesInfo": "根据您组织中已管理节点的数量收费。按日计算账单。",
+    "billingUsersInfo": "You're charged for each user in the organization. Billing is calculated daily based on the number of active user accounts in your org.",
+    "billingDomainInfo": "You're charged for each domain in the organization. Billing is calculated daily based on the number of active domain accounts in your org.",
+    "billingRemoteExitNodesInfo": "You're charged for each managed Node in the organization. Billing is calculated daily based on the number of active managed Nodes in your org.",
     "domainNotFound": "域未找到",
     "domainNotFoundDescription": "此资源已禁用，因为该域不再在我们的系统中存在。请为此资源设置一个新域。",
     "failed": "失败",
@@ -1456,23 +1474,23 @@
     "errorCreatingClient": "创建客户端出错",
     "clientDefaultsNotFound": "未找到客户端默认值",
     "createClient": "创建客户端",
-    "createClientDescription": "创建一个新客户端来连接您的站点",
+    "createClientDescription": "Create a new client to access private resources",
     "seeAllClients": "查看所有客户端",
     "clientInformation": "客户端信息",
     "clientNamePlaceholder": "客户端名称",
     "address": "地址",
     "subnetPlaceholder": "子网",
-    "addressDescription": "此客户端将用于连接的地址",
+    "addressDescription": "The internal address of the client. Must fall within the organization's subnet.",
     "selectSites": "选择站点",
     "sitesDescription": "客户端将与所选站点进行连接",
     "clientInstallOlm": "安装 Olm",
     "clientInstallOlmDescription": "在您的系统上运行 Olm",
-    "clientOlmCredentials": "Olm 凭据",
-    "clientOlmCredentialsDescription": "这是 Olm 服务器的身份验证方式",
-    "olmEndpoint": "Olm 端点",
-    "olmId": "Olm  ID",
-    "olmSecretKey": "Olm 私钥",
-    "clientCredentialsSave": "保存您的凭据",
+    "clientOlmCredentials": "Credentials",
+    "clientOlmCredentialsDescription": "This is how the client will authenticate with the server",
+    "olmEndpoint": "Endpoint",
+    "olmId": "ID",
+    "olmSecretKey": "Secret",
+    "clientCredentialsSave": "Save the Credentials",
     "clientCredentialsSaveDescription": "该信息仅会显示一次，请确保将其复制到安全位置。",
     "generalSettingsDescription": "配置此客户端的常规设置",
     "clientUpdated": "客户端已更新",
@@ -1483,9 +1501,7 @@
     "sitesFetchError": "获取站点时出错。",
     "olmErrorFetchReleases": "获取 Olm 发布版本时出错。",
     "olmErrorFetchLatest": "获取最新 Olm 发布版本时出错。",
-    "remoteSubnets": "远程子网",
     "enterCidrRange": "输入 CIDR 范围",
-    "remoteSubnetsDescription": "添加可以通过客户端远程访问该站点的CIDR范围。使用类似10.0.0.0/24的格式。这仅适用于VPN客户端连接。",
     "resourceEnableProxy": "启用公共代理",
     "resourceEnableProxyDescription": "启用到此资源的公共代理。这允许外部网络通过开放端口访问资源。需要 Traefik 配置。",
     "externalProxyEnabled": "外部代理已启用",
@@ -1503,14 +1519,15 @@
     "enableHealthChecksDescription": "监视此目标的健康状况。如果需要，您可以监视一个不同的终点。",
     "healthScheme": "方法",
     "healthSelectScheme": "选择方法",
+    "healthCheckPortInvalid": "Health check port must be between 1 and 65535",
     "healthCheckPath": "路径",
     "healthHostname": "IP / 主机",
     "healthPort": "端口",
     "healthCheckPathDescription": "用于检查健康状态的路径。",
-    "healthyIntervalSeconds": "正常间隔",
-    "unhealthyIntervalSeconds": "不正常间隔",
+    "healthyIntervalSeconds": "Healthy Interval (sec)",
+    "unhealthyIntervalSeconds": "Unhealthy Interval (sec)",
     "IntervalSeconds": "正常间隔",
-    "timeoutSeconds": "超时",
+    "timeoutSeconds": "Timeout (sec)",
     "timeIsInSeconds": "时间以秒为单位",
     "retryAttempts": "重试次数",
     "expectedResponseCodes": "期望响应代码",
@@ -1546,12 +1563,12 @@
     "resourceEditDomain": "编辑域名",
     "siteName": "站点名称",
     "proxyPort": "端口",
-    "resourcesTableProxyResources": "代理资源",
-    "resourcesTableClientResources": "客户端资源",
+    "resourcesTableProxyResources": "Public",
+    "resourcesTableClientResources": "Private",
     "resourcesTableNoProxyResourcesFound": "未找到代理资源。",
     "resourcesTableNoInternalResourcesFound": "未找到内部资源。",
     "resourcesTableDestination": "目标",
-    "resourcesTableTheseResourcesForUseWith": "这些资源供...使用",
+    "resourcesTableAlias": "Alias",
     "resourcesTableClients": "客户端",
     "resourcesTableAndOnlyAccessibleInternally": "且仅在与客户端连接时可内部访问。",
     "resourcesTableNoTargets": "没有目标",
@@ -1560,8 +1577,8 @@
     "resourcesTableOffline": "离线的",
     "resourcesTableUnknown": "未知的",
     "resourcesTableNotMonitored": "未监视的",
-    "editInternalResourceDialogEditClientResource": "编辑客户端资源",
-    "editInternalResourceDialogUpdateResourceProperties": "更新{resourceName}的资源属性和目标配置。",
+    "editInternalResourceDialogEditClientResource": "Edit Private Resource",
+    "editInternalResourceDialogUpdateResourceProperties": "Update the resource configuration and access controls for {resourceName}",
     "editInternalResourceDialogResourceProperties": "资源属性",
     "editInternalResourceDialogName": "名称",
     "editInternalResourceDialogProtocol": "协议",
@@ -1580,11 +1597,22 @@
     "editInternalResourceDialogInvalidIPAddressFormat": "无效的IP地址格式",
     "editInternalResourceDialogDestinationPortMin": "目标端口必须至少为1",
     "editInternalResourceDialogDestinationPortMax": "目标端口必须小于65536",
+    "editInternalResourceDialogPortModeRequired": "Protocol, proxy port, and destination port are required for port mode",
+    "editInternalResourceDialogMode": "Mode",
+    "editInternalResourceDialogModePort": "Port",
+    "editInternalResourceDialogModeHost": "Host",
+    "editInternalResourceDialogModeCidr": "CIDR",
+    "editInternalResourceDialogDestination": "Destination",
+    "editInternalResourceDialogDestinationHostDescription": "The IP address or hostname of the resource on the site's network.",
+    "editInternalResourceDialogDestinationIPDescription": "The IP or hostname address of the resource on the site's network.",
+    "editInternalResourceDialogDestinationCidrDescription": "The CIDR range of the resource on the site's network.",
+    "editInternalResourceDialogAlias": "Alias",
+    "editInternalResourceDialogAliasDescription": "An optional internal DNS alias for this resource.",
     "createInternalResourceDialogNoSitesAvailable": "暂无可用站点",
     "createInternalResourceDialogNoSitesAvailableDescription": "您需要至少配置一个子网的Newt站点来创建内部资源。",
     "createInternalResourceDialogClose": "关闭",
-    "createInternalResourceDialogCreateClientResource": "创建客户端资源",
-    "createInternalResourceDialogCreateClientResourceDescription": "创建一个新资源，该资源将可供连接到所选站点的客户端访问。",
+    "createInternalResourceDialogCreateClientResource": "Create Private Resource",
+    "createInternalResourceDialogCreateClientResourceDescription": "Create a new resource that will only be accessible to clients connected to the organization",
     "createInternalResourceDialogResourceProperties": "资源属性",
     "createInternalResourceDialogName": "名称",
     "createInternalResourceDialogSite": "站点",
@@ -1613,11 +1641,22 @@
     "createInternalResourceDialogInvalidIPAddressFormat": "无效的IP地址格式",
     "createInternalResourceDialogDestinationPortMin": "目标端口必须至少为1",
     "createInternalResourceDialogDestinationPortMax": "目标端口必须小于65536",
+    "createInternalResourceDialogPortModeRequired": "Protocol, proxy port, and destination port are required for port mode",
+    "createInternalResourceDialogMode": "Mode",
+    "createInternalResourceDialogModePort": "Port",
+    "createInternalResourceDialogModeHost": "Host",
+    "createInternalResourceDialogModeCidr": "CIDR",
+    "createInternalResourceDialogDestination": "Destination",
+    "createInternalResourceDialogDestinationHostDescription": "The IP address or hostname of the resource on the site's network.",
+    "createInternalResourceDialogDestinationCidrDescription": "The CIDR range of the resource on the site's network.",
+    "createInternalResourceDialogAlias": "Alias",
+    "createInternalResourceDialogAliasDescription": "An optional internal DNS alias for this resource.",
     "siteConfiguration": "配置",
     "siteAcceptClientConnections": "接受客户端连接",
-    "siteAcceptClientConnectionsDescription": "允许其他设备通过此Newt实例使用客户端作为网关连接。",
-    "siteAddress": "站点地址",
-    "siteAddressDescription": "指定主机的IP地址以供客户端连接。这是Pangolin网络中站点的内部地址，供客户端访问。必须在Org子网内。",
+    "siteAcceptClientConnectionsDescription": "Allow user devices and clients to access resources on this site. This can be changed later.",
+    "siteAddress": "Site Address (Advanced)",
+    "siteAddressDescription": "The internal address of the site. Must fall within the organization's subnet.",
+    "siteNameDescription": "The display name of the site that can be changed later.",
     "autoLoginExternalIdp": "自动使用外部IDP登录",
     "autoLoginExternalIdpDescription": "立即将用户重定向到外部IDP进行身份验证。",
     "selectIdp": "选择IDP",
@@ -1631,7 +1670,7 @@
     "autoLoginErrorNoRedirectUrl": "未从身份提供商收到重定向URL。",
     "autoLoginErrorGeneratingUrl": "生成身份验证URL失败。",
     "remoteExitNodeManageRemoteExitNodes": "远程节点",
-    "remoteExitNodeDescription": "自我主机一个或多个远程节点来扩展您的网络连接并减少对云的依赖性",
+    "remoteExitNodeDescription": "Self-host one or more remote nodes to extend network connectivity and reduce reliance on the cloud",
     "remoteExitNodes": "节点",
     "searchRemoteExitNodes": "搜索节点...",
     "remoteExitNodeAdd": "添加节点",
@@ -1643,11 +1682,11 @@
     "sidebarRemoteExitNodes": "远程节点",
     "remoteExitNodeCreate": {
         "title": "创建节点",
-        "description": "创建一个新节点来扩展您的网络连接",
+        "description": "Create a new node to extend network connectivity",
         "viewAllButton": "查看所有节点",
         "strategy": {
             "title": "创建策略",
-            "description": "选择此选项以手动配置您的节点或生成新凭据。",
+            "description": "Choose this to manually configure the node or generate new credentials.",
             "adopt": {
                 "title": "采纳节点",
                 "description": "如果您已经拥有该节点的凭据，请选择此项。"
@@ -1668,7 +1707,7 @@
         },
         "generate": {
             "title": "生成的凭据",
-            "description": "使用这些生成的凭据来配置您的节点",
+            "description": "Use these generated credentials to configure the node",
             "nodeIdTitle": "节点 ID",
             "secretTitle": "密钥",
             "saveCredentialsTitle": "将凭据添加到配置中",
@@ -1744,16 +1783,16 @@
     "idpTypeLabel": "身份提供者类型",
     "roleMappingExpressionPlaceholder": "例如: contains(group, 'admin' &'Admin' || 'Member'",
     "idpGoogleConfiguration": "Google 配置",
-    "idpGoogleConfigurationDescription": "配置您的 Google OAuth2 凭据",
-    "idpGoogleClientIdDescription": "您的 Google OAuth2 客户端 ID",
-    "idpGoogleClientSecretDescription": "您的 Google OAuth2 客户端密钥",
+    "idpGoogleConfigurationDescription": "Configure the Google OAuth2 credentials",
+    "idpGoogleClientIdDescription": "Google OAuth2 Client ID",
+    "idpGoogleClientSecretDescription": "Google OAuth2 Client Secret",
     "idpAzureConfiguration": "Azure Entra ID 配置",
-    "idpAzureConfigurationDescription": "配置您的 Azure Entra ID OAuth2 凭据",
+    "idpAzureConfigurationDescription": "Configure Azure Entra ID OAuth2 credentials",
     "idpTenantId": "租户 ID",
-    "idpTenantIdPlaceholder": "您的租户ID",
-    "idpAzureTenantIdDescription": "您的 Azure 租户ID (在 Azure Active Directory 概览中发现)",
-    "idpAzureClientIdDescription": "您的 Azure 应用程序注册客户端 ID",
-    "idpAzureClientSecretDescription": "您的 Azure 应用程序注册客户端密钥",
+    "idpTenantIdPlaceholder": "tenant-id",
+    "idpAzureTenantIdDescription": "Azure tenant ID (found in Azure Active Directory overview)",
+    "idpAzureClientIdDescription": "Azure App Registration Client ID",
+    "idpAzureClientSecretDescription": "Azure App Registration Client Secret",
     "idpGoogleTitle": "谷歌",
     "idpGoogleAlt": "Google",
     "idpAzureTitle": "Azure Entra ID",
@@ -1761,14 +1800,14 @@
     "idpGoogleConfigurationTitle": "Google 配置",
     "idpAzureConfigurationTitle": "Azure Entra ID 配置",
     "idpTenantIdLabel": "租户 ID",
-    "idpAzureClientIdDescription2": "您的 Azure 应用程序注册客户端 ID",
-    "idpAzureClientSecretDescription2": "您的 Azure 应用程序注册客户端密钥",
+    "idpAzureClientIdDescription2": "Azure App Registration Client ID",
+    "idpAzureClientSecretDescription2": "Azure App Registration Client Secret",
     "idpGoogleDescription": "Google OAuth2/OIDC 提供商",
     "idpAzureDescription": "Microsoft Azure OAuth2/OIDC provider",
     "subnet": "子网",
     "subnetDescription": "此组织网络配置的子网。",
     "authPage": "认证页面",
-    "authPageDescription": "配置您的组织认证页面",
+    "authPageDescription": "Configure the auth page for the organization",
     "authPageDomain": "认证页面域",
     "noDomainSet": "没有域设置",
     "changeDomain": "更改域",
@@ -1778,7 +1817,7 @@
     "setAuthPageDomain": "设置认证页面域",
     "failedToFetchCertificate": "获取证书失败",
     "failedToRestartCertificate": "重新启动证书失败",
-    "addDomainToEnableCustomAuthPages": "为您的组织添加域名以启用自定义认证页面",
+    "addDomainToEnableCustomAuthPages": "Add a domain to enable custom authentication pages for the organization",
     "selectDomainForOrgAuthPage": "选择组织认证页面的域",
     "domainPickerProvidedDomain": "提供的域",
     "domainPickerFreeProvidedDomain": "免费提供的域",
@@ -1793,7 +1832,7 @@
     "domainPickerInvalidSubdomainCannotMakeValid": "\"{sub}\" 无法为 {domain} 变为有效。",
     "domainPickerSubdomainSanitized": "子域已净化",
     "domainPickerSubdomainCorrected": "\"{sub}\" 已被更正为 \"{sanitized}\"",
-    "orgAuthSignInTitle": "登录到您的组织",
+    "orgAuthSignInTitle": "Sign in to the organization",
     "orgAuthChooseIdpDescription": "选择您的身份提供商以继续",
     "orgAuthNoIdpConfigured": "此机构没有配置任何身份提供者。您可以使用您的 Pangolin 身份登录。",
     "orgAuthSignInWithPangolin": "使用 Pangolin 登录",
@@ -1811,7 +1850,7 @@
     "enableTwoFactorAuthentication": "启用两步验证",
     "completeSecuritySteps": "完成安全步骤",
     "securitySettings": "安全设置",
-    "securitySettingsDescription": "配置您组织的安全策略",
+    "securitySettingsDescription": "Configure security policies for the organization",
     "requireTwoFactorForAllUsers": "所有用户需要两步验证",
     "requireTwoFactorDescription": "如果启用，此组织的所有内部用户必须启用双重身份验证才能访问组织。",
     "requireTwoFactorDisabledDescription": "此功能需要有效的许可证（企业）或活动订阅（SaS）",
@@ -1874,8 +1913,12 @@
     "enterpriseEdition": "企业版",
     "unlicensed": "未授权",
     "beta": "测试版",
-    "manageClients": "管理客户端",
-    "manageClientsDescription": "客户端是可以连接到您的站点的设备",
+    "manageUserDevices": "User Devices",
+    "manageUserDevicesDescription": "View and manage devices that users use to privately connect to resources",
+    "manageMachineClients": "Manage Machine Clients",
+    "manageMachineClientsDescription": "Create and manage clients that servers and systems use to privately connect to resources",
+    "clientsTableUserClients": "User",
+    "clientsTableMachineClients": "Machine",
     "licenseTableValidUntil": "有效期至",
     "saasLicenseKeysSettingsTitle": "企业许可证",
     "saasLicenseKeysSettingsDescription": "为自我托管的 Pangolin 实例生成和管理企业许可证密钥",
@@ -2075,7 +2118,7 @@
     "preferWildcardCert": "喜欢通配符证书",
     "unverified": "未验证",
     "domainSetting": "域设置",
-    "domainSettingDescription": "配置您的域的设置",
+    "domainSettingDescription": "Configure settings for the domain",
     "preferWildcardCertDescription": "尝试生成通配符证书(需要正确配置的证书解析器)。",
     "recordName": "记录名称",
     "auto": "自动操作",
@@ -2089,15 +2132,15 @@
     "olmUpdateAvailableInfo": "有最新版本的 Olm 可用。请更新到最新版本以获取最佳体验。",
     "client": "客户端：",
     "proxyProtocol": "代理协议设置",
-    "proxyProtocolDescription": "配置代理协议以保留TCP/UDP 服务的客户端IP地址。",
+    "proxyProtocolDescription": "Configure Proxy Protocol to preserve client IP addresses for TCP services.",
     "enableProxyProtocol": "启用代理协议",
-    "proxyProtocolInfo": "为TCP/UDP 后端保留客户端IP地址",
+    "proxyProtocolInfo": "Preserve client IP addresses for TCP backends",
     "proxyProtocolVersion": "代理协议版本",
     "version1": " 版本 1 (推荐)",
     "version2": "版本 2",
     "versionDescription": "版本 1 是基于文本和广泛支持的版本。版本 2 是二进制和更有效率但不那么兼容。",
     "warning": "警告",
-    "proxyProtocolWarning": "您的后端应用程序必须配置为接受代理协议连接。如果您的后端不支持代理协议，启用这将会中断所有连接。 请务必从Traefik配置您的后端到信任代理协议标题。",
+    "proxyProtocolWarning": "The backend application must be configured to accept Proxy Protocol connections. If your backend doesn't support Proxy Protocol, enabling this will break all connections so only enable this if you know what you're doing. Make sure to configure your backend to trust Proxy Protocol headers from Traefik.",
     "restarting": "正在重启...",
     "manual": "手动模式",
     "messageSupport": "消息支持",
@@ -2120,6 +2163,43 @@
     "supportMessageSent": "消息已发送！",
     "supportWillContact": "我们很快就会联系起来！",
     "selectLogRetention": "选择保留日志",
+    "terms": "Terms",
+    "privacy": "Privacy",
+    "security": "Security",
+    "docs": "Docs",
+    "deviceActivation": "Device activation",
+    "deviceCodeInvalidFormat": "Code must be 9 characters (e.g., A1AJ-N5JD)",
+    "deviceCodeInvalidOrExpired": "Invalid or expired code",
+    "deviceCodeVerifyFailed": "Failed to verify device code",
+    "signedInAs": "Signed in as",
+    "deviceCodeEnterPrompt": "Enter the code displayed on the device",
+    "continue": "Continue",
+    "deviceUnknownLocation": "Unknown location",
+    "deviceAuthorizationRequested": "This authorization was requested from {location} on {date}. Make sure you trust this device as it will get access to the account.",
+    "deviceLabel": "Device: {deviceName}",
+    "deviceWantsAccess": "wants to access your account",
+    "deviceExistingAccess": "Existing access:",
+    "deviceFullAccess": "Full access to your account",
+    "deviceOrganizationsAccess": "Access to all organizations your account has access to",
+    "deviceAuthorize": "Authorize {applicationName}",
+    "deviceConnected": "Device Connected!",
+    "deviceAuthorizedMessage": "Device is authorized to access your account.",
+    "pangolinCloud": "Pangolin Cloud",
+    "viewDevices": "View Devices",
+    "viewDevicesDescription": "Manage your connected devices",
+    "noDevices": "No devices found",
+    "dateCreated": "Date Created",
+    "unnamedDevice": "Unnamed Device",
+    "deviceQuestionRemove": "Are you sure you want to delete this device?",
+    "deviceMessageRemove": "This action cannot be undone.",
+    "deviceDeleteConfirm": "Delete Device",
+    "deleteDevice": "Delete Device",
+    "errorLoadingDevices": "Error loading devices",
+    "failedToLoadDevices": "Failed to load devices",
+    "deviceDeleted": "Device deleted",
+    "deviceDeletedDescription": "The device has been successfully deleted.",
+    "errorDeletingDevice": "Error deleting device",
+    "failedToDeleteDevice": "Failed to delete device",
     "showColumns": "显示列",
     "hideColumns": "隐藏列",
     "columnVisibility": "列可见性",
@@ -2134,6 +2214,10 @@
     "enableSelected": "启用选中的",
     "disableSelected": "禁用选中的",
     "checkSelectedStatus": "检查选中的状态",
+    "clients": "Clients",
+    "accessClientSelect": "Select machine clients",
+    "resourceClientDescription": "Machine clients that can access this resource",
+    "regenerate": "Regenerate",
     "credentials": "全权证书",
     "savecredentials": "保存证书",
     "regeneratecredentials": "重置键",
@@ -2151,7 +2235,6 @@
     "endpoint": "Endpoint",
     "Id": "Id",
     "SecretKey": "秘密密钥",
-    "featureDisabledTooltip": "此功能仅在企业计划中可用，需要许可证才能使用。",
     "niceId": "好的 ID",
     "niceIdUpdated": "好的 ID 已更新",
     "niceIdUpdatedSuccessfully": "Nice ID 更新成功",
@@ -2160,5 +2243,15 @@
     "niceIdCannotBeEmpty": "好的 ID 不能为空",
     "enterIdentifier": "输入标识符",
     "identifier": "Identifier",
-    "noData": "No Data"
+    "deviceLoginUseDifferentAccount": "Not you? Use a different account.",
+    "deviceLoginDeviceRequestingAccessToAccount": "A device is requesting access to this account.",
+    "noData": "No Data",
+    "machineClients": "Machine Clients",
+    "install": "Install",
+    "run": "Run",
+    "clientNameDescription": "The display name of the client that can be changed later.",
+    "clientAddress": "Client Address (Advanced)",
+    "setupFailedToFetchSubnet": "Failed to fetch default subnet",
+    "setupSubnetAdvanced": "Subnet (Advanced)",
+    "setupSubnetDescription": "The subnet for this organization's internal network."
 }