chore: run prettier

* Initial plan

* fix(tmux-monitor): explicitly handle tailscale auth in PanePreview hostConfig

For Tailscale-auth hosts the pane-preview attach path was building the
Terminal hostConfig with only the generic spread of host fields.  This
could omit or mismap auth-critical details and trigger a plain TCP/SSH
reachability path that doesn't work with Tailscale-only SSH endpoints.

The fix branches on `host.authType === "tailscale"` and:
- Carries `authType: "tailscale"` explicitly so the backend always selects
  the Tailscale-aware PTY path regardless of how the host object evolves.
- Derives `port` from `host.sshPort ?? host.port` so Tailscale SSH
  endpoints on a non-default SSH port are reached correctly.
- Leaves all non-tailscale auth types on the unchanged code path.

Reattach (bumping instanceId + attachNonce) continues to work because
terminalHostConfig is recomputed on every render with the latest
instanceIdRef.current value.

* refactor(tmux-monitor): simplify tailscale port logic with extracted variable

Address code review feedback: extract resolvedPort into a local variable
to avoid the duplicated `host.sshPort ?? host.port` expression that was
assigned to both `port` and `sshPort`.  Restructure as an if/else block
instead of an IIFE for readability.

* Potential fix for pull request finding

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

.github/dependabot.yml

@@ -37,14 +37,6 @@ updates:
       major-updates:
         update-types:
           - "major"
-    ignore:
-      # typescript-eslint declares `typescript: >=4.8.4 <6.1.0`, and TypeScript 7
-      # removed `ts.Extension`, which @typescript-eslint/typescript-estree reads
-      # at import time. Bumping to 7 makes `eslint .` fail to load its own config,
-      # so `npm run lint` cannot run at all. Drop this once typescript-eslint
-      # supports TypeScript 7.
-      - dependency-name: "typescript"
-        update-types: ["version-update:semver-major"]
 
   # Docker base images (docker/Dockerfile + docker-compose / compose-dev)
   - package-ecosystem: "docker"

.github/workflows/beta-release.yml

@@ -78,8 +78,11 @@ jobs:
       - name: Run ESLint
         run: npx eslint .
 
+      - name: Run Prettier check
+        run: npx prettier --check .
+
       - name: Type check
-        run: npm run type-check
+        run: npx tsc --noEmit
 
       - name: Run unit tests
         run: npm run test
@@ -118,7 +121,7 @@ jobs:
             CHANGES=$(git log --oneline --no-merges "${{ steps.prev.outputs.sha }}..${{ needs.prep.outputs.sha }}" -- . ':!package-lock.json' | sed 's/^/- /')
           fi
           if [ -z "$CHANGES" ]; then
-            CHANGES="- No new commits since the last beta."
+            CHANGES="- No new commits since the last beta (or this is the first beta build)."
           fi
 
           cat > BETA_RELEASE_BODY.md << EOF
@@ -154,7 +157,7 @@ jobs:
 
   docker:
     needs: [prep, verify, create-release]
-    if: ${{ always() && needs.prep.outputs.dev_branch != '' && needs.verify.result == 'success' && (needs.create-release.result == 'success' || needs.create-release.result == 'skipped') }}
+    if: ${{ always() && needs.prep.outputs.dev_branch != '' && (needs.create-release.result == 'success' || needs.create-release.result == 'skipped') }}
     uses: ./.github/workflows/docker.yml
     with:
       version: ${{ needs.prep.outputs.beta_version }}

.github/workflows/crowdin-sync.yml

@@ -34,7 +34,7 @@ jobs:
           token: ${{ secrets.GHCR_TOKEN }}
 
       - name: Setup Node.js
-        uses: actions/setup-node@v7
+        uses: actions/setup-node@v6
         with:
           node-version-file: ".nvmrc"
 

.github/workflows/deploy-helm.yml

@@ -1,76 +0,0 @@
-name: Deploy Helm
-
-on:
-  workflow_dispatch:
-    inputs:
-      namespace:
-        description: "Kubernetes namespace"
-        required: true
-        default: termix
-      release:
-        description: "Helm release name"
-        required: true
-        default: termix
-      values_file:
-        description: "Values file to use"
-        required: true
-        default: charts/termix/values-gitops-example.yaml
-      image_tag:
-        description: "Image tag to deploy"
-        required: false
-        default: ""
-
-permissions:
-  contents: read
-
-jobs:
-  deploy:
-    runs-on: ubuntu-latest
-    environment: production
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v7
-
-      - name: Set up Helm
-        uses: azure/setup-helm@v5
-        with:
-          version: v3.15.4
-
-      - name: Configure kubeconfig
-        env:
-          KUBE_CONFIG: ${{ secrets.KUBE_CONFIG }}
-        run: |
-          test -n "$KUBE_CONFIG"
-          echo "$KUBE_CONFIG" | base64 -d > "$RUNNER_TEMP/kubeconfig"
-          chmod 600 "$RUNNER_TEMP/kubeconfig"
-
-      - name: Lint chart
-        run: helm lint charts/termix
-
-      - name: Deploy
-        env:
-          KUBECONFIG: ${{ runner.temp }}/kubeconfig
-          IMAGE_TAG: ${{ inputs.image_tag }}
-          RELEASE_NAME: ${{ inputs.release }}
-          TARGET_NAMESPACE: ${{ inputs.namespace }}
-          VALUES_FILE: ${{ inputs.values_file }}
-        run: |
-          set -euo pipefail
-          [[ "$RELEASE_NAME" =~ ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$ ]]
-          [[ "$TARGET_NAMESPACE" =~ ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$ ]]
-          case "$VALUES_FILE" in
-            charts/termix/*.yaml) ;;
-            *) echo "values_file must be a YAML file under charts/termix" >&2; exit 1 ;;
-          esac
-          test -f "$VALUES_FILE"
-          ARGS=()
-          if [ -n "$IMAGE_TAG" ]; then
-            ARGS+=(--set "image.tag=$IMAGE_TAG")
-          fi
-          helm upgrade --install "$RELEASE_NAME" charts/termix \
-            --namespace "$TARGET_NAMESPACE" \
-            --create-namespace \
-            --values "$VALUES_FILE" \
-            --atomic \
-            --timeout 10m \
-            "${ARGS[@]}"

.github/workflows/docker.yml

@@ -60,7 +60,7 @@ jobs:
           platforms: linux/amd64,linux/arm64
 
       - name: Setup Docker Buildx
-        uses: useblacksmith/setup-docker-builder@v2
+        uses: useblacksmith/setup-docker-builder@v1
 
       - name: Determine tags
         id: tags

.github/workflows/electron.yml

@@ -77,43 +77,6 @@ jobs:
           node-version-file: ".nvmrc"
           cache: "npm"
 
-      - name: Install Spectre-mitigated MSVC libraries
-        shell: pwsh
-        run: |
-          # node-pty's binding.gyp sets SpectreMitigation, so MSBuild refuses to
-          # build without these. They are not on the runner image by default.
-          $vswhere = "${env:ProgramFiles(x86)}\Microsoft Visual Studio\Installer\vswhere.exe"
-          $installPath = & $vswhere -latest -products * -property installationPath
-          if (-not $installPath) { throw "Visual Studio installation not found" }
-
-          # Derive the toolset version from the installed MSVC so the component
-          # id keeps matching when the runner image bumps the compiler.
-          $toolsetDir = Get-ChildItem -Path "$installPath\VC\Tools\MSVC" -Directory |
-            Sort-Object Name -Descending | Select-Object -First 1
-          if (-not $toolsetDir) { throw "No MSVC toolset found under $installPath" }
-          $parts = $toolsetDir.Name.Split(".")
-          $shortVer = "$($parts[0]).$($parts[1].Substring(0,2))"
-          Write-Host "MSVC toolset $($toolsetDir.Name) -> component version $shortVer"
-
-          $installer = "${env:ProgramFiles(x86)}\Microsoft Visual Studio\Installer\vs_installer.exe"
-          $components = @(
-            "Microsoft.VisualStudio.Component.VC.$shortVer.17.14.x86.x64.Spectre",
-            "Microsoft.VisualStudio.Component.VC.Runtimes.x86.x64.Spectre"
-          )
-          $args = @("modify", "--installPath", "`"$installPath`"", "--quiet", "--norestart", "--nocache")
-          foreach ($c in $components) { $args += @("--add", $c) }
-
-          Write-Host "Installing: $($components -join ', ')"
-          $proc = Start-Process -FilePath $installer -ArgumentList $args -Wait -PassThru -NoNewWindow
-          if ($proc.ExitCode -ne 0 -and $proc.ExitCode -ne 3010) {
-            Write-Host "vs_installer exited with $($proc.ExitCode); verifying libraries anyway"
-          }
-
-          $found = Get-ChildItem -Path "$installPath\VC\Tools\MSVC" -Recurse -Filter "*.lib" -ErrorAction SilentlyContinue |
-            Where-Object { $_.FullName -match "\\spectre\\" } | Select-Object -First 1
-          if (-not $found) { throw "Spectre-mitigated libraries still missing after install" }
-          Write-Host "Spectre libs present: $($found.FullName)"
-
       - name: Install dependencies
         run: npm ci
 
@@ -596,7 +559,7 @@ jobs:
           CHECKSUM=$(shasum -a 256 "$DMG_PATH" | awk '{print $1}')
 
           mkdir -p homebrew-generated
-          cp Casks/termix.rb homebrew-generated/termix.rb
+          cp packaging/Casks/termix.rb homebrew-generated/termix.rb
 
           sed -i '' "s/VERSION_PLACEHOLDER/$VERSION/g" homebrew-generated/termix.rb
           sed -i '' "s/CHECKSUM_PLACEHOLDER/$CHECKSUM/g" homebrew-generated/termix.rb
@@ -931,7 +894,7 @@ jobs:
 
           mkdir -p homebrew-submission/Casks/t
 
-          cp Casks/termix.rb homebrew-submission/Casks/t/termix.rb
+          cp packaging/Casks/termix.rb homebrew-submission/Casks/t/termix.rb
 
           sed -i '' "s/VERSION_PLACEHOLDER/$VERSION/g" homebrew-submission/Casks/t/termix.rb
           sed -i '' "s/CHECKSUM_PLACEHOLDER/$CHECKSUM/g" homebrew-submission/Casks/t/termix.rb
@@ -1112,21 +1075,13 @@ jobs:
           default_platform(:mac)
 
           lane :fetch_build_number do
-            live_number = app_store_build_number(
-              live: true,
-              platform: "osx",
-              api_key_path: "/tmp/asc_keys/api_key.json",
-              app_identifier: "com.karmaa.termix",
-              initial_build_number: 0,
-            )
-            pending_number = app_store_build_number(
+            number = app_store_build_number(
               live: false,
-              platform: "osx",
               api_key_path: "/tmp/asc_keys/api_key.json",
               app_identifier: "com.karmaa.termix",
+              version: "$APP_VERSION",
               initial_build_number: 0,
             )
-            number = [live_number, pending_number].max
             File.write("$OUT_FILE", number.to_s)
           end
           EOF
@@ -1154,18 +1109,6 @@ jobs:
           BUILD_VERSION="${{ steps.build_number.outputs.build_version || github.run_number }}"
           npm run build && npx electron-builder --mac mas --universal --config.buildVersion="$BUILD_VERSION"
 
-      - name: Generate App Store release notes
-        id: asc_notes
-        if: steps.check_certs.outputs.has_certs == 'true' && steps.check_asc_creds.outputs.has_credentials == 'true'
-        run: |
-          META_DIR="$RUNNER_TEMP/asc_metadata"
-          rm -rf "$META_DIR"
-          node scripts/generate-appstore-notes.cjs \
-            --notes RELEASE_NOTES.md \
-            --out-dir "$META_DIR" \
-            --locales "en-US"
-          echo "metadata_path=$META_DIR" >> "$GITHUB_OUTPUT"
-
       - name: Upload and submit to Mac App Store
         if: steps.check_certs.outputs.has_certs == 'true' && steps.check_asc_creds.outputs.has_credentials == 'true'
         run: |
@@ -1182,16 +1125,10 @@ jobs:
             --pkg "$PKG_FILE" \
             --api_key_path "$API_KEY_JSON" \
             --app_version "$VERSION" \
-            --platform osx \
-            --app_identifier "com.karmaa.termix" \
-            --skip_metadata false \
-            --metadata_path "${{ steps.asc_notes.outputs.metadata_path }}" \
+            --skip_metadata true \
             --skip_screenshots true \
-            --skip_app_version_update false \
             --submit_for_review true \
             --automatic_release true \
-            --precheck_include_in_app_purchases false \
-            --submission_information "{\"export_compliance_uses_encryption\": false}" \
             --force true
 
       - name: Clean up keychains

.github/workflows/helm.yml

@@ -1,75 +0,0 @@
-name: Helm
-
-on:
-  pull_request:
-    paths:
-      - "charts/**"
-      - ".github/workflows/helm.yml"
-      - "deploy/**"
-  push:
-    branches: [main]
-    paths:
-      - "charts/**"
-      - ".github/workflows/helm.yml"
-      - "deploy/**"
-  workflow_dispatch:
-    inputs:
-      publish:
-        description: "Publish chart to GHCR OCI registry"
-        required: true
-        type: boolean
-        default: false
-
-permissions:
-  contents: read
-
-jobs:
-  lint:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v7
-
-      - name: Set up Helm
-        uses: azure/setup-helm@v5
-        with:
-          version: v3.15.4
-
-      - name: Lint chart
-        run: helm lint charts/termix
-
-      - name: Render default chart
-        run: helm template termix charts/termix --namespace termix
-
-      - name: Render GitOps example
-        run: helm template termix charts/termix --values charts/termix/values-gitops-example.yaml --namespace termix
-
-      - name: Render Traefik example
-        run: helm template termix charts/termix --values charts/termix/values-traefik.yaml --namespace termix
-
-  publish:
-    needs: lint
-    if: github.event_name == 'workflow_dispatch' && inputs.publish
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      packages: write
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v7
-
-      - name: Set up Helm
-        uses: azure/setup-helm@v5
-        with:
-          version: v3.15.4
-
-      - name: Log in to GHCR
-        run: echo "${{ secrets.GITHUB_TOKEN }}" | helm registry login ghcr.io --username "${{ github.actor }}" --password-stdin
-
-      - name: Package chart
-        run: helm package charts/termix --destination .helm-packages
-
-      - name: Push chart
-        run: |
-          OWNER="$(echo "$GITHUB_REPOSITORY_OWNER" | tr '[:upper:]' '[:lower:]')"
-          helm push .helm-packages/termix-*.tgz "oci://ghcr.io/$OWNER/charts"

.github/workflows/pr-check.yml

@@ -24,89 +24,14 @@ jobs:
       - name: Install dependencies
         run: npm ci
 
-      - name: Lint
-        # npm run lint, not npx eslint — the script also checks that the
-        # generated dialect schemas match schema.ts, which eslint cannot see.
-        run: npm run lint
+      - name: Run ESLint
+        run: npx eslint .
 
       - name: Run Prettier check
         run: npx prettier --check .
 
       - name: Type check
-        run: npm run type-check
+        run: npx tsc --noEmit
 
       - name: Build
         run: npm run build
-
-  database-dialects:
-    name: Postgres and MySQL
-    runs-on: blacksmith-2vcpu-ubuntu-2404
-
-    # The test suite only ever sees SQLite. Everything that differs per engine —
-    # the RETURNING replacements, the read-then-write transactions, the
-    # migrations themselves — is only covered here, against real servers.
-    services:
-      postgres:
-        image: postgres:16
-        env:
-          POSTGRES_USER: termix
-          POSTGRES_PASSWORD: termix
-          POSTGRES_DB: termix_test
-        ports:
-          - 5432:5432
-        options: >-
-          --health-cmd pg_isready
-          --health-interval 10s
-          --health-timeout 5s
-          --health-retries 5
-
-      mysql:
-        image: mysql:8
-        env:
-          MYSQL_ROOT_PASSWORD: termix
-          MYSQL_DATABASE: termix_test
-          MYSQL_USER: termix
-          MYSQL_PASSWORD: termix
-        ports:
-          - 3306:3306
-        options: >-
-          --health-cmd "mysqladmin ping -h 127.0.0.1 -ptermix"
-          --health-interval 10s
-          --health-timeout 5s
-          --health-retries 10
-
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v7
-
-      - name: Setup Node.js
-        uses: actions/setup-node@v7
-        with:
-          node-version-file: ".nvmrc"
-          cache: "npm"
-
-      - name: Install dependencies
-        run: npm ci
-
-      # Each run applies the migrations to an empty database first, so a
-      # migration that does not apply cleanly fails the build.
-      - name: Verify Postgres
-        run: npm run verify:dialect -- postgres://termix:termix@127.0.0.1:5432/termix_test
-
-      - name: Verify MySQL
-        run: npm run verify:dialect -- mysql://termix:termix@127.0.0.1:3306/termix_test
-
-      # The same repository suite the SQLite run executes, pointed at each
-      # engine. This is where a dialect difference in a query shows up as a
-      # failing assertion rather than as a bug report.
-      - name: Repository tests on Postgres
-        env:
-          TEST_DIALECT: postgres
-          TEST_DATABASE_URL: postgres://termix:termix@127.0.0.1:5432/termix_test
-        run: npx vitest run src/backend/tests/database/repositories --no-file-parallelism
-
-      - name: Repository tests on MySQL
-        env:
-          TEST_DIALECT: mysql
-          TEST_DATABASE_URL: mysql://termix:termix@127.0.0.1:3306/termix_test
-        run: npx vitest run src/backend/tests/database/repositories --no-file-parallelism

.github/workflows/release.yml

@@ -395,10 +395,10 @@ jobs:
           git fetch origin main
           git checkout -B main origin/main
 
-          sed -i "s|version \".*\"|version \"$VERSION\"|g" Casks/termix.rb
-          sed -i "s|sha256 \".*\"|sha256 \"$DMG_SHA256\"|g" Casks/termix.rb
+          sed -i "s|version \".*\"|version \"$VERSION\"|g" packaging/Casks/termix.rb
+          sed -i "s|sha256 \".*\"|sha256 \"$DMG_SHA256\"|g" packaging/Casks/termix.rb
 
-          git add Casks/termix.rb
+          git add packaging/Casks/termix.rb
           if git diff --cached --quiet; then
             echo "Cask already up to date."
             exit 0
@@ -443,21 +443,13 @@ jobs:
 
       - name: Create docs release branch
         working-directory: docs-repo
-        run: |
-          BRANCH="dev-${{ needs.prep.outputs.version }}"
-          if git ls-remote --exit-code origin "refs/heads/$BRANCH" >/dev/null 2>&1; then
-            echo "Reusing existing docs branch $BRANCH."
-            git checkout -B "$BRANCH" "origin/$BRANCH"
-          else
-            git checkout -B "$BRANCH"
-          fi
+        run: git checkout -B "dev-${{ needs.prep.outputs.version }}"
 
       - name: Overwrite OpenAPI spec and regenerate API docs
         working-directory: docs-repo
         run: |
           cp ../termix/openapi.json static/openapi.json
           npm ci
-          npm run docusaurus clean-api-docs termix
           npm run docusaurus gen-api-docs termix
 
       - name: Commit and push docs branch
@@ -479,7 +471,7 @@ jobs:
 
           git add -A
           git commit -m "feat: update API docs for ${{ needs.prep.outputs.version }}"
-          git push origin "dev-${{ needs.prep.outputs.version }}"
+          git push --force origin "dev-${{ needs.prep.outputs.version }}"
 
       - name: Open and squash-merge docs PR
         if: ${{ inputs.mode != 'Dry run' }}
@@ -542,7 +534,7 @@ jobs:
         docs,
         publish-youtube,
       ]
-    if: ${{ always() && (inputs.mode == 'Everything' || inputs.mode == 'Skip submit') && needs.merge-to-main.result == 'success' && needs.docs.result == 'success' }}
+    if: ${{ always() && (inputs.mode == 'Everything' || inputs.mode == 'Skip submit') && needs.merge-to-main.result == 'success' && needs.electron-release.result == 'success' }}
     runs-on: blacksmith-2vcpu-ubuntu-2404
     steps:
       - name: Checkout repository

.gitignore

@@ -13,8 +13,7 @@ dist-ssr
 coverage
 *.local
 
-.vscode/*
-!.vscode/settings.json
+.vscode/
 .idea
 .DS_Store
 *.suo
@@ -34,7 +33,5 @@ electron/build-info.cjs
 /.mcp.json
 /CLAUDE.md
 /old_db/
-/scripts/auto-fix.mjs
-/scripts/auto-fix-blocklist.json
-/scripts/auto-fix-state.json
-/scripts/auto-fix-report-*.json
+/scripts/fix-bugs.mjs
+/scripts/fix-features.mjs

.gitlab-ci.yml

@@ -1,2 +0,0 @@
-include:
-  - local: deploy/gitlab/.gitlab-ci.yml

.husky/commit-msg

@@ -1 +1 @@
-npx --no -- commitlint --edit "$1"
+npx --no -- commitlint --edit $1

.prettierignore

@@ -17,9 +17,3 @@ db
 *.min.js
 *.min.css
 openapi.json
-
-# Generated by drizzle-kit; formatting is the tool's own
-drizzle/
-
-# Helm templates contain Go template syntax, not plain YAML
-charts/*/templates/

.vscode/settings.json

@@ -1,22 +0,0 @@
-{
-  "editor.formatOnSave": true,
-  "editor.defaultFormatter": "esbenp.prettier-vscode",
-  "prettier.prettierPath": "./node_modules/prettier",
-  "editor.codeActionsOnSave": {
-    "source.fixAll.eslint": "explicit"
-  },
-  "eslint.validate": [
-    "javascript",
-    "javascriptreact",
-    "typescript",
-    "typescriptreact"
-  ],
-  "files.eol": "\n",
-  "files.insertFinalNewline": true,
-  "files.trimTrailingWhitespace": true,
-  "[markdown]": {
-    "files.trimTrailingWhitespace": false
-  },
-  "typescript.tsdk": "node_modules/typescript/lib",
-  "typescript.enablePromptUseWorkspaceTsdk": true
-}

README.md

@@ -4,7 +4,7 @@
 
 <h1>Termix</h1>
 
-<p>Self-hosted server management, from SSH and remote desktop to automations</p>
+<p>Self-hosted SSH management and remote desktop access</p>
 
 <p>
   English ·
@@ -58,7 +58,7 @@ Termix is free and open source. If you find it useful, consider [donating](https
 
 ## Overview
 
-Termix is a free, open source, self-hosted platform for managing your servers. It puts SSH terminals, remote desktops (RDP, VNC, Telnet), file transfers, tunnels, Docker, metrics, and automations in one place, on web, desktop, and mobile. It is a self-hosted alternative to Termius that stays free forever.
+Termix is an open-source, forever-free, self-hosted all-in-one server management platform. It provides a multi-platform solution for managing your servers and infrastructure through a single, intuitive interface. Termix offers SSH terminal access, remote desktop control (RDP, VNC, Telnet), SSH tunneling capabilities, remote file management, and many other tools. Termix is the perfect free and self-hosted alternative to Termius available for all platforms.
 
 <br />
 
@@ -68,42 +68,42 @@ Termix is a free, open source, self-hosted platform for managing your servers. I
 <tr>
 <td width="50%" valign="top">
 
-**SSH Terminal:**
-A full terminal with browser-like tabs and split screen, up to 6 panels at once. Pick your theme, font, and colors. A toolbar sits above each session with live CPU, memory, and disk, plus quick links to that host's files, Docker, tunnels, and metrics.
+**SSH Terminal Access:**
+Full-featured terminal with split-screen support (up to 4 panels) with a browser-like tab system. Includes support for customizing the terminal including common terminal themes, fonts, and other components.
 
 </td>
 <td width="50%" valign="top">
 
-**Remote Desktop:**
-RDP, VNC, and Telnet in the browser, in tabs and split screen like any other session. Includes a file browser for RDP drives and drag-and-drop upload. On Windows desktop you can also open a host in the native RDP client.
+**Remote Desktop Access:**
+RDP, VNC, and Telnet support over the browser with complete customization and split screening.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**SSH Tunnels:**
-Local, remote, and dynamic SOCKS forwarding with auto reconnect and health checks. Client-to-server tunnels on the desktop app are stored on that machine, and you can save presets to the server to move a setup to another client.
+**SSH Tunnel Management:**
+Create and manage server-to-server SSH tunnels with automatic reconnection, health monitoring, and local, remote, or dynamic SOCKS forwarding. Desktop client-to-server tunnel settings are stored locally per desktop install, optional C2S preset snapshots can be saved to the server, renamed, loaded, or deleted when you want to move a local tunnel configuration between clients.
 
 </td>
 <td width="50%" valign="top">
 
-**File Manager:**
-Browse, edit, upload, download, rename, move, and delete files over SFTP, with sudo support. View and edit code, images, audio, and video. Copy files straight from one server to another, with the fastest route picked for you and transfers checked for integrity.
+**Remote File Manager:**
+Manage files directly on remote servers with support for viewing and editing code, images, audio, and video. Upload, download, rename, delete, and move files seamlessly with sudo support. Includes support for moving files from server to server.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Docker and Podman:**
-Start, stop, pause, and remove containers, watch their stats, and open a shell inside one. Works with both Docker and Podman. It is not meant to replace Portainer or Dockge, just to manage containers you already have.
+**Docker and Podman Management:**
+Start, stop, pause, remove containers. View container stats. Control containers using a docker exec terminal. Supports both Docker and Podman as the container runtime. It was not made to replace Portainer or Dockge but rather to simply manage your containers compared to creating them.
 
 </td>
 <td width="50%" valign="top">
 
-**Host Manager:**
-Save and organize hosts with tags and nested folders you can name and color. Reuse saved credentials across hosts, deploy SSH keys automatically, group hosts under a parent host, bulk edit and export, and use Quick Connect for one-off connections you do not want to save.
+**SSH Host Manager:**
+Save, organize, and manage your SSH connections with tags and folders (folder customization and nested folder support), and easily save reusable login info while being able to automate the deployment of SSH keys.
 
 </td>
 </tr>
@@ -111,139 +111,83 @@ Save and organize hosts with tags and nested folders you can name and color. Reu
 <td width="50%" valign="top">
 
 **Host Metrics:**
-CPU, memory, disk, network, temperature, uptime, processes, ports, logins, and system info on most Linux servers, with history graphs. Manager cards let you handle services, cron jobs, packages, users, firewall rules, WireGuard, Tailscale, SSL certs, logs, and health checks without leaving Termix.
+View CPU, memory, disk usage, network, uptime, system information, firewall, port monitor, log viewer, users/permissions, certificates, and many more which work on most Linux based servers. Includes time-series history graphs and threshold-based alerts with ntfy and webhook support.
 
 </td>
 <td width="50%" valign="top">
 
-**Automations:**
-Pick a trigger, then say what should happen. Triggers include a metric crossing a threshold, a host going up or down, a health check changing, a schedule, a container event, or an incoming webhook. Steps can run commands and snippets, control containers and tunnels, wake a host, call a URL, wait, branch on a condition, run another automation, and notify you over ntfy, Discord, or a webhook. Test runs let you try it safely first.
+**User Authentication:**
+Secure user management with admin controls (can edit other users information) and OIDC/LDAP/SSO (with access control), 2FA (TOTP), and passkey (WebAuthn) support. View active user sessions across all platforms and revoke permissions. Link your OIDC/Local accounts together. View audit log of all users actions.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Fleets:**
-Group hosts into a fleet by picking them or with tag rules, so new hosts join on their own. Run one command on every host at once, push and pull files across all of them, install packages, and collect an inventory of OS, kernel, arch, and uptime.
+**Tailscale Integration:**
+List devices from your tailnet to quickly add them as hosts, and connect using Tailscale SSH as an authentication method, letting your tailnet ACLs handle authorization without storing credentials.
 
 </td>
 <td width="50%" valign="top">
 
-**AI Assistant:**
-Optional, and off until you turn it on. Connect OpenAI, Anthropic, Gemini, Ollama, or any OpenAI compatible endpoint and ask about your setup. It reads hosts, fleets, snippets, and alerts, and proposes changes for you to approve instead of making them. It can never touch credentials, users, or settings. Admins can leave it off for the whole instance, and you can hide it during setup.
+**RBAC/Sharing:**
+Create roles and share hosts across users/roles. Supports all auth types and all host protocols.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Login and Users:**
-Local accounts plus OIDC, LDAP, GitHub, and Google sign-in, with 2FA (TOTP), passkeys (WebAuthn), and trusted devices. Admins can manage users, map OIDC groups to roles, see every active session across platforms, and revoke them. Link your local and OIDC accounts together, and read the audit log of what everyone did.
-
-</td>
-<td width="50%" valign="top">
-
-**Roles and Sharing:**
-Create roles and share hosts with users or roles at four levels: connect, view, edit, and manage. Works with every auth type and every protocol, and you can override the credentials used for a shared host.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Alerts:**
-Set rules on host metrics like CPU, memory, and disk, and get notified over ntfy, Discord, or a webhook when they fire. See firing and resolved alerts in a history log, and dismiss the ones you do not care about.
-
-</td>
-<td width="50%" valign="top">
-
-**Homepage:**
-A drag-and-drop widget grid you build yourself. Widgets for host status, pings, service links, bookmarks, search, clocks, calendars, countdowns, notes, RSS, weather, images, iframes, Docker, tunnels, metrics charts, custom APIs, and even a live terminal.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Snippets and Tools:**
-Save commands you run often and fire them off in one click, with variables for the host and your own inputs. Run a single command across every open terminal, and search your command history with autocomplete.
-
-</td>
-<td width="50%" valign="top">
-
-**Session Sharing:**
-Share a live terminal, RDP, VNC, or Telnet session in real time. Send a link anyone can join without an account, or share with a specific Termix user, in read-only or read-write mode. Shares can expire on their own or be revoked, and can be turned off globally or per host.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Session Recording and Logs:**
-Record terminal, RDP, and VNC sessions and play them back later. Download plain text logs of a session, and check the connection log to see exactly what happened during a connection.
-
-</td>
-<td width="50%" valign="top">
-
 **Serial Connections:**
-Talk to serial devices like routers, switches, and microcontrollers from the browser or desktop app. Set baud rate, data bits, stop bits, and parity. Uses the Web Serial API in supported browsers, or a native backend in the desktop app.
+Connect to serial devices (routers, switches, microcontrollers, etc.) directly from the browser or desktop app. Configure baud rate, data bits, stop bits, and parity. Uses the Web Serial API in supported browsers or a native backend in the Electron app.
+
+</td>
+<td width="50%" valign="top">
+
+**Alerts:**
+Set threshold-based alert rules on host metrics (CPU, memory, disk, etc.) and get notified via ntfy or webhooks when they fire. View firing and resolved alerts in a history log.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Tailscale:**
-Pull devices from your tailnet to add them as hosts in a couple of clicks, and connect with Tailscale SSH so your tailnet ACLs handle access and no credentials are stored. Headscale and custom endpoints work too.
+**Homepage:**
+A fully customizable homepage with a drag-and-drop widget grid. Add widgets for host status, service links, clocks, notes, RSS feeds, weather, Docker containers, host metrics charts, embedded terminals, iframes, and more.
 
 </td>
 <td width="50%" valign="top">
 
-**Proxmox:**
-Import hosts straight from a Proxmox instance, and watch node and guest stats, including CPU, memory, and storage, in their own tab.
+**Database Encryption:**
+Backend stored as encrypted SQLite database files. View [docs](https://docs.termix.site/security) for more.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Workspaces and Tabs:**
-Save a set of tabs with their split layout and reopen the whole thing in one click. Termix also remembers your last session, so your tabs come back across refreshes and devices.
+**Network Graph:**
+Customize your Dashboard to visualize your homelab based off your SSH connections with status support.
 
 </td>
 <td width="50%" valign="top">
 
-**Guided Setup:**
-A short setup walks you through picking an interface preset, your theme, the features you want, and your first host. Simple mode hides what you do not use, and you can rerun setup or switch presets any time.
+**SSH Tools:**
+Create reusable command snippets that execute with a single click. Run one command simultaneously across multiple open terminals.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Desktop Standalone and Sync:**
-The desktop app runs on its own with a local backend and database, no server needed. You can also connect it to a Termix server for two-way sync of hosts, credentials, snippets, and more, and choose whether connections start locally or through the server.
-
-</td>
-<td width="50%" valign="top">
-
-**Command Line Interface:**
-A `termix` CLI for your shell and your scripts. Open terminals, run a command on one host or a whole fleet, move files over SFTP, and manage hosts, snippets, and credentials. Install with `npm install -g @termix-cli/cli` or grab a standalone binary. See the [CLI docs](https://docs.termix.site/cli).
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Security:**
-Passwords, keys, and other secrets are encrypted per user, and the database files themselves can be encrypted on disk. See the [docs](https://docs.termix.site/security) for how it works.
+**Persistent Tabs:**
+SSH sessions and tabs stay open across devices/refreshes if enabled in user profile.
 
 </td>
 <td width="50%" valign="top">
 
 **Languages:**
-Around 30 languages built in, managed through [Crowdin](https://docs.termix.site/translations).
+Built-in support ~30 languages (managed by [Crowdin](https://docs.termix.site/translations)).
 
 </td>
 </tr>
@@ -255,20 +199,17 @@ Around 30 languages built in, managed through [Crowdin](https://docs.termix.site
 <summary><b>More features</b></summary>
 <br />
 
-- **Dashboard** - Your servers at a glance, with cards you arrange yourself
-- **Network Graph** - See your homelab drawn out from your hosts, with live status
-- **Tmux Monitor** - Browse tmux sessions, windows, and panes, with previews and search
-- **API Keys** - User-scoped keys with expiry dates for scripts and CI
-- **Export and Import** - Move hosts, credentials, and file manager data in and out
-- **Automatic SSL** - Certificates generated and renewed for you, with HTTPS redirects, or bring your own
-- **Databases** - SQLite by default, with PostgreSQL and MySQL supported too
-- **Modern UI** - Clean React interface that works on desktop and mobile, with themes like light, dark, and Dracula. Any connection can open full screen from a URL
-- **Command Palette** - Double tap left shift to jump to a host from the keyboard
-- **Keyboard Shortcuts** - Move between tabs, close tabs, and more, all rebindable
-- **Wake-on-LAN** - Wake a machine from Termix or from an automation step
-- **Trusted Proxy Auth** - Let a reverse proxy handle sign-in and pass the user through
-- **SSH Feature Rich** - Jump hosts, Warpgate, TOTP prompts, SOCKS5, host key verification, password autofill, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, port knocking, terminal logging, agent forwarding, Bitwarden SSH agent, HashiCorp Vault SSH signing, and more
-- **Termix ID** - A built-in take on sshid.io. Claim a handle, publish your public keys at a resolver URL, and issue SSH certificates from the built-in CA
+- **Dashboard** - View server information at a glance on your dashboard
+- **API Keys** - Create user-scoped API keys with expiration dates to be used for automation/CI
+- **Data Export/Import** - Export and import SSH hosts, credentials, and file manager data
+- **Automatic SSL Setup** - Built-in SSL certificate generation and management with HTTPS redirects
+- **Modern UI** - Clean desktop/mobile-friendly interface built with React, Tailwind CSS, and Shadcn. Choose between many different UI themes including light, dark, Dracula, etc. Use URL routes to open any connection in full-screen.
+- **Command History** - Auto-complete and view previously ran SSH commands
+- **Quick Connect** - Connect to a server without having to save the connection data
+- **Command Palette** - Double tap left shift to quickly access SSH connections with your keyboard
+- **Proxmox Integration** - Auto-add hosts into Termix from your Proxmox instance
+- **SSH Feature Rich** - Supports jump hosts, Warpgate, TOTP based connections, SOCKS5, host key verification, password autofill, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, port knocking, terminal logging, SSH agent forwarding, Bitwarden SSH agent, HashiCorp Vault SSH signing, and more.
+- **Termix ID** - A sshid.io equivalent built into Termix. Claim a handle, publish your public SSH keys at a resolver URL, and use a built-in CA to issue SSH certificates.
 
 </details>
 
@@ -313,10 +254,6 @@ Around 30 languages built in, managed through [Crowdin](https://docs.termix.site
 
 Visit the [Termix Docs](https://docs.termix.site/install) for full installation instructions across all platforms.
 
-Deploying to Kubernetes? The Helm chart is in `charts/termix`, and setup instructions
-covering Ingress, Traefik, Argo CD, GitHub Actions, and GitLab CI are at
-[docs.termix.site/install/server/kubernetes](https://docs.termix.site/install/server/kubernetes).
-
 Sample Docker Compose file (you can omit `guacd` and the network if you don't plan on using remote desktop features):
 
 ```yaml
@@ -354,31 +291,13 @@ networks:
     driver: bridge
 ```
 
-### Command Line Interface
-
-Termix also has a CLI, so you can manage your servers from a terminal and use Termix in your own scripts.
-
-```bash
-npm install -g @termix-cli/cli
-termix login --url https://termix.example.com
-termix ssh 1
-```
-
-It can open terminals, run a command on one host or a whole fleet, move files over SFTP, and manage hosts, snippets and credentials. Full documentation is at [docs.termix.site/cli](https://docs.termix.site/cli).
-
-### Cloud Hosting
-
-You can run the Termix server on a VPS instead of inside your own network. If Termix runs on the network it manages, an outage takes Termix down with it, right when you need it to fix things. Running it elsewhere keeps it reachable, gives you a static IP, and lets you get in from anywhere without a VPN or port forward.
-
-[GINERNET](https://docs.termix.site/install/ginernet) sponsors Termix, and the docs have a step by step guide for deploying to their VPS platform.
-
 <br />
 
 ## Telemetry
 
-Termix sends a small anonymous ping once a day so I can see how many instances are running and which features get used. It contains a random instance ID, how many users and hosts you have, the app version, and which features (terminal, file manager, tunnels, docker, etc.) were used in the last 24 hours. It never contains usernames, hostnames, IP addresses, credentials, or anything else that identifies you or your servers.
+Termix sends a small anonymous usage ping once every 24 hours to help understand how many instances are running and which features are actually used. This only includes a randomly generated instance ID, a count of users and hosts, the app version, and whether certain features (terminal, file manager, tunnels, docker, etc.) were used in the last 24 hours. It never includes usernames, hostnames, IP addresses, credentials, or any other identifying or connection data.
 
-It is on by default. Turn it off in Admin Settings under General, or set `ENABLE_TELEMETRY=false` before you ever start Termix.
+This is opt-out and enabled by default. You can disable it at any time in Admin Settings under **General**.
 
 <br />
 
@@ -414,6 +333,10 @@ Interested in a paid placement to support development? Email [mail@termix.site](
   <img src="https://sirv.sirv.com/website/screenshots/cloudflare/cloudflare-logo.png?w=300" height="40" alt="Cloudflare" />
 </a>
 &nbsp;&nbsp;&nbsp;
+<a href="https://tailscale.com/">
+  <img src="https://drive.google.com/uc?export=view&id=1lIxkJuX6M23bW-2FElhT0rQieTrzaVSL" height="40" alt="Tailscale" />
+</a>
+&nbsp;&nbsp;&nbsp;
 <a href="https://akamai.com/">
   <img src="https://upload.wikimedia.org/wikipedia/commons/8/8b/Akamai_logo.svg" height="40" alt="Akamai" />
 </a>
@@ -425,17 +348,14 @@ Interested in a paid placement to support development? Email [mail@termix.site](
 <a href="https://rackgenius.com/">
   <img src="https://rackgenius.com/rackgenius-logo.png" height="40" alt="Rack Genius" />
 </a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://ginernet.com/">
-  <img src="https://ginernet.com/img/logo-web.png" height="40" alt="Ginernet" />
-</a>
+
 </div>
 
 <br />
 
 ## Support
 
-Need help or want to request a feature? Open a [new issue](https://github.com/Termix-SSH/Support/issues) and add as much detail as you can, in English if possible. You can also ask in the support channel on [Discord](https://discord.gg/jVQGdvHDrf), though replies there can take longer.
+If you need help or want to request a feature with Termix, visit the [Issues](https://github.com/Termix-SSH/Support/issues) page, log in, and press `New Issue`. Please be as detailed as possible in your issue, preferably written in English. You can also join the [Discord](https://discord.gg/jVQGdvHDrf) server and visit the support channel, however, response times may be longer.
 
 <br />
 

RELEASE_NOTES.md

@@ -1,60 +1,70 @@
 <!-- SUMMARY -->
 
-Credential cloning, a WSL local terminal, Helm and GitOps deployment, an editable file manager path bar, download progress bars, and a large batch of connection, sync, and remote desktop fixes.
+Revamped RBAC/sharing, session recording & replay, Vault auth for monitors, API key host enrollment, Proxmox guest auto sync, database refactor, plus 30+ bug fixes across terminal, file manager, RDP/VNC, and auth. DO NOT DOWNGRADE FROM THIS VERSION.
 
 <!-- /SUMMARY -->
 
 <!-- YOUTUBE -->
 
-https://youtu.be/lngaePO96tM
+https://youtu.be/c3UD4q2jW_8
 
 <!-- /YOUTUBE -->
 
 <!-- UPDATE_LOG -->
 
-- Added the ability to clone an existing credential
-- Added a WSL option for the local terminal
-- Added Helm charts and a GitOps deployment setup
-- Added an editable path bar to the file manager
-- Added a progress bar for file downloads in the file manager
-- Added an identity file option so agent authentication stops after the right key
-- Added an environment variable to turn on silent OIDC login
-- Added editable model settings for AI providers
-- Improved tmux monitor performance when aggregating sessions
-- Improved Linux packaging with standard icon sizes
-
+- Revamped RBAC/sharing system (new UI, all auth types and host protocols now supported)
+- Complete admin control over user information (manage all users hosts, credentials, and snippets)
+- Support Vault auth for monitors
+- API key host enrollment endpoint
+- Allow pinned hosts with name sorting
+- Session recording and replay
+- Terminal font size shortcuts (ctrl + / -)
+- Open File Manager to tab right-click menu
+- Proxmox guest auto sync
+- Complete database refactor
+- 30-day donation reminder and new donation milestones that support research: (donate.termix.site)
+- Improve site performance with cache and poll pauses
+- Save quick connect sessions as hosts
 <!-- /UPDATE_LOG -->
 
 <!-- BUG_FIXES -->
 
-- Passkey sign in not showing up on the login screen
-- Connections through jump hosts failing
-- Jump hosts and remote desktop hosts not resolving after a sync
-- Malformed websocket messages crashing the server
-- Encrypted file manager keys not prompting for a passphrase
-- SSH agent forwarding not working with the in-memory agent
-- Two factor prompts rejecting codes longer than six digits
-- OIDC lockout with no way to recover from environment settings
-- Tailscale requests failing on some setups
-- Terminal clipboard shortcuts not working on non-QWERTY layouts
-- Rapid mobile terminal input being sent one keystroke at a time
-- HTTPS not being able to share the configured port
-- Portable imports failing on remote databases
-- Host status not showing when metrics collection is off
-- Proxmox guest credential usernames being wrong
-- File drops not working for RDP in the browser
-- Duplicate Docker HTTPS listener on startup
-- Remote sync server probe ignoring the certificate setting
-- Runtime SSL settings not being preserved
-- Automation notifications missing host details
-- Connection screens crashing outside the connection log provider
-- better-sqlite3 failing in Docker on some platforms
-- Host action rows shifting at large font sizes
-- Sidebar height jumping when hosts or credentials have tags
-- Gaps between host rows in the sidebar list
-- Rounded corners on the host list search bar
-- Image storage settings text wrapping to one word per line
-- Unclear wording on the click-to-expand host setting
-- Dragging a folder into the file manager failing to upload
-
+- Syntax highlighting artifacts
+- Filter dashboard status hosts
+- Persist dashboard service link changes
+- Snippet text overflow
+- Persist remote desktop credential auth
+- Guard language switching failures
+- Resolve tunnel source credentials
+- Windows file delete command
+- Artifact release checkout ref
+- Command palette escape in fullscreen
+- Alerts and audit log normalization
+- macOS VNC protocol negotiation
+- Port knocking before SSH connect
+- Allow escape to close link confirmation
+- Prevent Electron modifier wheel zoom
+- Credential auth optional password
+- Retry transient terminal DNS lookups
+- OIDC redirect forwarded port handling
+- Preserve recent open tabs on startup
+- Terminal font selection
+- Poor font legibility in multiple places
+- File manager uploads failing
+- Tmux detection for non-POSTIX shells
+- OPKSSH js-yaml ESM import
+- Android Vietnamese IME input
+- Firefox RDP clipboard paste
+- Proxmox discovery over HTTPS
+- External editor actions in file preview
+- Firefox desktop OIDC callback
+- Status checks through jump hosts
+- Restore sudo password auto fill settings
+- Preserve file editor position on save
+- Sync cloud preference storage mode
+- Render RDP sessions at native pixel density
+- Restore database import in embedded desktop mode
+- Command autocomplete dropdown poor contrast
+- Allow clipboard paste in key recording field
+- Fix GitHub/google SSO "not defined" errors
 <!-- /BUG_FIXES -->

biome.json

@@ -0,0 +1,58 @@
+{
+  "$schema": "https://biomejs.dev/schemas/2.5.1/schema.json",
+  "vcs": {
+    "enabled": true,
+    "clientKind": "git",
+    "useIgnoreFile": true,
+    "defaultBranch": "dev-2.5.0"
+  },
+  "files": {
+    "ignoreUnknown": true,
+    "includes": [
+      "**",
+      "!!build",
+      "!!coverage",
+      "!!dist",
+      "!!dist-ssr",
+      "!!release",
+      "!!node_modules",
+      "!!src/mcp-server/node_modules",
+      "!!db",
+      "!!.env",
+      "!!**/*.min.js",
+      "!!**/*.min.css",
+      "!!openapi.json"
+    ]
+  },
+  "formatter": {
+    "enabled": true,
+    "indentStyle": "space",
+    "indentWidth": 2,
+    "lineWidth": 80,
+    "lineEnding": "lf"
+  },
+  "linter": {
+    "enabled": false
+  },
+  "javascript": {
+    "formatter": {
+      "quoteStyle": "double",
+      "semicolons": "always",
+      "trailingCommas": "all",
+      "arrowParentheses": "always"
+    }
+  },
+  "json": {
+    "formatter": {
+      "trailingCommas": "none"
+    }
+  },
+  "css": {
+    "parser": {
+      "tailwindDirectives": true
+    }
+  },
+  "assist": {
+    "enabled": false
+  }
+}

charts/termix/.helmignore

@@ -1,6 +0,0 @@
-.git/
-.github/
-node_modules/
-dist/
-coverage/
-*.tgz

charts/termix/Chart.yaml

@@ -1,16 +0,0 @@
-apiVersion: v2
-name: termix
-description: Self-hosted SSH and remote desktop management for Kubernetes.
-type: application
-version: 0.1.0
-appVersion: 2.7.0
-home: https://github.com/Termix-SSH/Termix
-sources:
-  - https://github.com/Termix-SSH/Termix
-maintainers:
-  - name: Termix maintainers
-keywords:
-  - ssh
-  - remote-desktop
-  - guacamole
-  - terminal

charts/termix/templates/NOTES.txt

@@ -1,17 +0,0 @@
-Termix has been installed.
-
-Service:
-  {{ include "termix.fullname" . }}:{{ .Values.service.port }}
-
-{{- if .Values.ingress.enabled }}
-Ingress hosts:
-{{- range .Values.ingress.hosts }}
-  - {{ .host }}
-{{- end }}
-{{- else if .Values.traefik.ingressRoute.enabled }}
-Traefik IngressRoute:
-  https://{{ .Values.traefik.ingressRoute.host }}{{ .Values.traefik.ingressRoute.pathPrefix }}
-{{- else }}
-Port-forward for local testing:
-  kubectl -n {{ .Release.Namespace }} port-forward svc/{{ include "termix.fullname" . }} 8080:{{ .Values.service.port }}
-{{- end }}

charts/termix/templates/_helpers.tpl

@@ -1,45 +0,0 @@
-{{- define "termix.name" -}}
-{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}}
-{{- end -}}
-
-{{- define "termix.fullname" -}}
-{{- if .Values.fullnameOverride -}}
-{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" -}}
-{{- else -}}
-{{- $name := default .Chart.Name .Values.nameOverride -}}
-{{- if contains $name .Release.Name -}}
-{{- .Release.Name | trunc 63 | trimSuffix "-" -}}
-{{- else -}}
-{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}}
-{{- end -}}
-{{- end -}}
-{{- end -}}
-
-{{- define "termix.chart" -}}
-{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" -}}
-{{- end -}}
-
-{{- define "termix.labels" -}}
-helm.sh/chart: {{ include "termix.chart" . }}
-app.kubernetes.io/name: {{ include "termix.name" . }}
-app.kubernetes.io/instance: {{ .Release.Name }}
-app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
-app.kubernetes.io/managed-by: {{ .Release.Service }}
-{{- end -}}
-
-{{- define "termix.selectorLabels" -}}
-app.kubernetes.io/name: {{ include "termix.name" . }}
-app.kubernetes.io/instance: {{ .Release.Name }}
-{{- end -}}
-
-{{- define "termix.serviceAccountName" -}}
-{{- if .Values.serviceAccount.create -}}
-{{- default (include "termix.fullname" .) .Values.serviceAccount.name -}}
-{{- else -}}
-{{- default "default" .Values.serviceAccount.name -}}
-{{- end -}}
-{{- end -}}
-
-{{- define "termix.secretName" -}}
-{{- default (printf "%s-secret" (include "termix.fullname" .)) .Values.secrets.name -}}
-{{- end -}}

charts/termix/templates/deployment.yaml

@@ -1,148 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: {{ include "termix.fullname" . }}
-  labels:
-    {{- include "termix.labels" . | nindent 4 }}
-spec:
-  {{- if not .Values.autoscaling.enabled }}
-  replicas: {{ .Values.replicaCount }}
-  {{- end }}
-  strategy:
-    {{- toYaml .Values.strategy | nindent 4 }}
-  selector:
-    matchLabels:
-      {{- include "termix.selectorLabels" . | nindent 6 }}
-  template:
-    metadata:
-      labels:
-        {{- include "termix.selectorLabels" . | nindent 8 }}
-        {{- with .Values.podLabels }}
-        {{- toYaml . | nindent 8 }}
-        {{- end }}
-      {{- with .Values.podAnnotations }}
-      annotations:
-        {{- toYaml . | nindent 8 }}
-      {{- end }}
-    spec:
-      serviceAccountName: {{ include "termix.serviceAccountName" . }}
-      {{- with .Values.imagePullSecrets }}
-      imagePullSecrets:
-        {{- toYaml . | nindent 8 }}
-      {{- end }}
-      securityContext:
-        {{- toYaml .Values.podSecurityContext | nindent 8 }}
-      containers:
-        - name: termix
-          securityContext:
-            {{- toYaml .Values.securityContext | nindent 12 }}
-          image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}"
-          imagePullPolicy: {{ .Values.image.pullPolicy }}
-          ports:
-            - name: http
-              containerPort: {{ .Values.service.port }}
-              protocol: TCP
-          env:
-            {{- range $key, $value := .Values.env }}
-            - name: {{ $key }}
-              value: {{ $value | quote }}
-            {{- end }}
-            {{- if .Values.guacd.enabled }}
-            - name: GUACD_HOST
-              value: "127.0.0.1"
-            {{- else if .Values.guacd.host }}
-            - name: GUACD_HOST
-              value: {{ .Values.guacd.host | quote }}
-            {{- end }}
-            - name: GUACD_TUNNEL_HOST
-              value: {{ include "termix.fullname" . | quote }}
-            {{- if ne .Values.database.dialect "sqlite" }}
-            - name: DATABASE_DIALECT
-              value: {{ .Values.database.dialect | quote }}
-            {{- end }}
-            {{- if .Values.database.existingSecret.name }}
-            - name: DATABASE_URL
-              valueFrom:
-                secretKeyRef:
-                  name: {{ .Values.database.existingSecret.name }}
-                  key: {{ .Values.database.existingSecret.urlKey }}
-            {{- end }}
-            {{- if .Values.secrets.create }}
-            {{- range $key, $value := .Values.secrets.data }}
-            {{- if $value }}
-            - name: {{ $key }}
-              valueFrom:
-                secretKeyRef:
-                  name: {{ include "termix.secretName" $ }}
-                  key: {{ $key }}
-            {{- end }}
-            {{- end }}
-            {{- end }}
-            {{- with .Values.extraEnv }}
-            {{- toYaml . | nindent 12 }}
-            {{- end }}
-          {{- with .Values.extraEnvFrom }}
-          envFrom:
-            {{- toYaml . | nindent 12 }}
-          {{- end }}
-          {{- if .Values.probes.liveness.enabled }}
-          livenessProbe:
-            httpGet:
-              path: /health
-              port: http
-            initialDelaySeconds: {{ .Values.probes.liveness.initialDelaySeconds }}
-            periodSeconds: {{ .Values.probes.liveness.periodSeconds }}
-            timeoutSeconds: {{ .Values.probes.liveness.timeoutSeconds }}
-            failureThreshold: {{ .Values.probes.liveness.failureThreshold }}
-          {{- end }}
-          {{- if .Values.probes.readiness.enabled }}
-          readinessProbe:
-            httpGet:
-              path: /health
-              port: http
-            initialDelaySeconds: {{ .Values.probes.readiness.initialDelaySeconds }}
-            periodSeconds: {{ .Values.probes.readiness.periodSeconds }}
-            timeoutSeconds: {{ .Values.probes.readiness.timeoutSeconds }}
-            failureThreshold: {{ .Values.probes.readiness.failureThreshold }}
-          {{- end }}
-          resources:
-            {{- toYaml .Values.resources | nindent 12 }}
-          volumeMounts:
-            - name: data
-              mountPath: /app/data
-        {{- if .Values.guacd.enabled }}
-        - name: guacd
-          image: "{{ .Values.guacd.image.repository }}:{{ .Values.guacd.image.tag }}"
-          imagePullPolicy: {{ .Values.guacd.image.pullPolicy }}
-          securityContext:
-            {{- toYaml .Values.guacd.securityContext | nindent 12 }}
-          ports:
-            - name: guacd
-              containerPort: {{ .Values.guacd.service.port }}
-              protocol: TCP
-          resources:
-            {{- toYaml .Values.guacd.resources | nindent 12 }}
-          volumeMounts:
-            - name: data
-              mountPath: /termix-data
-        {{- end }}
-      volumes:
-        - name: data
-          {{- if .Values.persistence.enabled }}
-          persistentVolumeClaim:
-            claimName: {{ default (printf "%s-data" (include "termix.fullname" .)) .Values.persistence.existingClaim }}
-          {{- else }}
-          emptyDir: {}
-          {{- end }}
-      {{- with .Values.nodeSelector }}
-      nodeSelector:
-        {{- toYaml . | nindent 8 }}
-      {{- end }}
-      {{- with .Values.affinity }}
-      affinity:
-        {{- toYaml . | nindent 8 }}
-      {{- end }}
-      {{- with .Values.tolerations }}
-      tolerations:
-        {{- toYaml . | nindent 8 }}
-      {{- end }}

charts/termix/templates/hpa.yaml

@@ -1,22 +0,0 @@
-{{- if .Values.autoscaling.enabled -}}
-apiVersion: autoscaling/v2
-kind: HorizontalPodAutoscaler
-metadata:
-  name: {{ include "termix.fullname" . }}
-  labels:
-    {{- include "termix.labels" . | nindent 4 }}
-spec:
-  scaleTargetRef:
-    apiVersion: apps/v1
-    kind: Deployment
-    name: {{ include "termix.fullname" . }}
-  minReplicas: {{ .Values.autoscaling.minReplicas }}
-  maxReplicas: {{ .Values.autoscaling.maxReplicas }}
-  metrics:
-    - type: Resource
-      resource:
-        name: cpu
-        target:
-          type: Utilization
-          averageUtilization: {{ .Values.autoscaling.targetCPUUtilizationPercentage }}
-{{- end }}

charts/termix/templates/ingress.yaml

@@ -1,35 +0,0 @@
-{{- if .Values.ingress.enabled -}}
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: {{ include "termix.fullname" . }}
-  labels:
-    {{- include "termix.labels" . | nindent 4 }}
-  {{- with .Values.ingress.annotations }}
-  annotations:
-    {{- toYaml . | nindent 4 }}
-  {{- end }}
-spec:
-  {{- if .Values.ingress.className }}
-  ingressClassName: {{ .Values.ingress.className }}
-  {{- end }}
-  {{- if .Values.ingress.tls }}
-  tls:
-    {{- toYaml .Values.ingress.tls | nindent 4 }}
-  {{- end }}
-  rules:
-    {{- range .Values.ingress.hosts }}
-    - host: {{ .host | quote }}
-      http:
-        paths:
-          {{- range .paths }}
-          - path: {{ .path }}
-            pathType: {{ .pathType }}
-            backend:
-              service:
-                name: {{ include "termix.fullname" $ }}
-                port:
-                  name: http
-          {{- end }}
-    {{- end }}
-{{- end }}

charts/termix/templates/networkpolicy.yaml

@@ -1,19 +0,0 @@
-{{- if .Values.networkPolicy.enabled -}}
-apiVersion: networking.k8s.io/v1
-kind: NetworkPolicy
-metadata:
-  name: {{ include "termix.fullname" . }}
-  labels:
-    {{- include "termix.labels" . | nindent 4 }}
-spec:
-  podSelector:
-    matchLabels:
-      {{- include "termix.selectorLabels" . | nindent 6 }}
-  policyTypes:
-    - Ingress
-    - Egress
-  ingress:
-    {{- toYaml .Values.networkPolicy.ingress | nindent 4 }}
-  egress:
-    {{- toYaml .Values.networkPolicy.egress | nindent 4 }}
-{{- end }}

charts/termix/templates/pdb.yaml

@@ -1,13 +0,0 @@
-{{- if .Values.podDisruptionBudget.enabled -}}
-apiVersion: policy/v1
-kind: PodDisruptionBudget
-metadata:
-  name: {{ include "termix.fullname" . }}
-  labels:
-    {{- include "termix.labels" . | nindent 4 }}
-spec:
-  minAvailable: {{ .Values.podDisruptionBudget.minAvailable }}
-  selector:
-    matchLabels:
-      {{- include "termix.selectorLabels" . | nindent 6 }}
-{{- end }}

charts/termix/templates/pvc.yaml

@@ -1,21 +0,0 @@
-{{- if and .Values.persistence.enabled (not .Values.persistence.existingClaim) -}}
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: {{ include "termix.fullname" . }}-data
-  labels:
-    {{- include "termix.labels" . | nindent 4 }}
-  {{- with .Values.persistence.annotations }}
-  annotations:
-    {{- toYaml . | nindent 4 }}
-  {{- end }}
-spec:
-  accessModes:
-    {{- toYaml .Values.persistence.accessModes | nindent 4 }}
-  resources:
-    requests:
-      storage: {{ .Values.persistence.size | quote }}
-  {{- if .Values.persistence.storageClass }}
-  storageClassName: {{ .Values.persistence.storageClass | quote }}
-  {{- end }}
-{{- end }}

charts/termix/templates/secret.yaml

@@ -1,15 +0,0 @@
-{{- if .Values.secrets.create -}}
-apiVersion: v1
-kind: Secret
-metadata:
-  name: {{ include "termix.secretName" . }}
-  labels:
-    {{- include "termix.labels" . | nindent 4 }}
-type: Opaque
-stringData:
-  {{- range $key, $value := .Values.secrets.data }}
-  {{- if $value }}
-  {{ $key }}: {{ $value | quote }}
-  {{- end }}
-  {{- end }}
-{{- end }}

charts/termix/templates/service.yaml

@@ -1,19 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: {{ include "termix.fullname" . }}
-  labels:
-    {{- include "termix.labels" . | nindent 4 }}
-  {{- with .Values.service.annotations }}
-  annotations:
-    {{- toYaml . | nindent 4 }}
-  {{- end }}
-spec:
-  type: {{ .Values.service.type }}
-  ports:
-    - port: {{ .Values.service.port }}
-      targetPort: http
-      protocol: TCP
-      name: http
-  selector:
-    {{- include "termix.selectorLabels" . | nindent 4 }}

charts/termix/templates/serviceaccount.yaml

@@ -1,13 +0,0 @@
-{{- if .Values.serviceAccount.create -}}
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: {{ include "termix.serviceAccountName" . }}
-  labels:
-    {{- include "termix.labels" . | nindent 4 }}
-  {{- with .Values.serviceAccount.annotations }}
-  annotations:
-    {{- toYaml . | nindent 4 }}
-  {{- end }}
-automountServiceAccountToken: {{ .Values.serviceAccount.automount }}
-{{- end }}

charts/termix/templates/traefik-ingressroute.yaml

@@ -1,34 +0,0 @@
-{{- if .Values.traefik.ingressRoute.enabled -}}
-apiVersion: traefik.io/v1alpha1
-kind: IngressRoute
-metadata:
-  name: {{ include "termix.fullname" . }}
-  labels:
-    {{- include "termix.labels" . | nindent 4 }}
-  {{- with .Values.traefik.ingressRoute.annotations }}
-  annotations:
-    {{- toYaml . | nindent 4 }}
-  {{- end }}
-spec:
-  entryPoints:
-    {{- toYaml .Values.traefik.ingressRoute.entryPoints | nindent 4 }}
-  routes:
-    - match: Host(`{{ .Values.traefik.ingressRoute.host }}`) && PathPrefix(`{{ .Values.traefik.ingressRoute.pathPrefix }}`)
-      kind: Rule
-      services:
-        - name: {{ include "termix.fullname" . }}
-          port: {{ .Values.service.port }}
-      {{- with .Values.traefik.ingressRoute.middlewares }}
-      middlewares:
-        {{- toYaml . | nindent 8 }}
-      {{- end }}
-  {{- if .Values.traefik.ingressRoute.tls.enabled }}
-  tls:
-    {{- if .Values.traefik.ingressRoute.tls.secretName }}
-    secretName: {{ .Values.traefik.ingressRoute.tls.secretName }}
-    {{- end }}
-    {{- if .Values.traefik.ingressRoute.tls.certResolver }}
-    certResolver: {{ .Values.traefik.ingressRoute.tls.certResolver }}
-    {{- end }}
-  {{- end }}
-{{- end }}

charts/termix/templates/validate.yaml

@@ -1,12 +0,0 @@
-{{- if and .Values.ingress.enabled .Values.traefik.ingressRoute.enabled -}}
-{{- fail "ingress and traefik.ingressRoute cannot both be enabled" -}}
-{{- end -}}
-{{- if and (eq .Values.database.dialect "sqlite") (or (gt (int .Values.replicaCount) 1) .Values.autoscaling.enabled) -}}
-{{- fail "SQLite supports only one replica; use Postgres or MySQL before enabling replicas or autoscaling" -}}
-{{- end -}}
-{{- if and (not .Values.guacd.enabled) (not .Values.guacd.host) -}}
-{{- fail "guacd.host is required when the bundled guacd sidecar is disabled" -}}
-{{- end -}}
-{{- if and .Values.database.existingSecret.name .Values.secrets.create .Values.secrets.data.DATABASE_URL -}}
-{{- fail "DATABASE_URL must come from either database.existingSecret or secrets.data, not both" -}}
-{{- end -}}

charts/termix/values-gitops-example.yaml

@@ -1,28 +0,0 @@
-image:
-  repository: ghcr.io/termix-ssh/termix
-  tag: "2.7.0"
-
-ingress:
-  enabled: true
-  className: nginx
-  hosts:
-    - host: termix.example.com
-      paths:
-        - path: /
-          pathType: Prefix
-  tls:
-    - secretName: termix-tls
-      hosts:
-        - termix.example.com
-
-persistence:
-  enabled: true
-  size: 20Gi
-
-secrets:
-  create: false
-
-database:
-  dialect: sqlite
-
-extraEnvFrom: []

charts/termix/values-traefik.yaml

@@ -1,32 +0,0 @@
-ingress:
-  enabled: false
-
-traefik:
-  ingressRoute:
-    enabled: true
-    entryPoints:
-      - websecure
-    host: termix.example.com
-    pathPrefix: /
-    tls:
-      enabled: true
-      certResolver: letsencrypt
-
-persistence:
-  enabled: true
-  size: 20Gi
-
-resources:
-  requests:
-    cpu: 250m
-    memory: 512Mi
-  limits:
-    memory: 2Gi
-
-guacd:
-  resources:
-    requests:
-      cpu: 100m
-      memory: 128Mi
-    limits:
-      memory: 512Mi

charts/termix/values.yaml

@@ -1,147 +0,0 @@
-replicaCount: 1
-
-image:
-  repository: ghcr.io/termix-ssh/termix
-  pullPolicy: IfNotPresent
-  tag: ""
-
-imagePullSecrets: []
-nameOverride: ""
-fullnameOverride: ""
-
-serviceAccount:
-  create: true
-  automount: false
-  annotations: {}
-  name: ""
-
-podAnnotations: {}
-podLabels: {}
-
-podSecurityContext:
-  fsGroup: 1000
-  fsGroupChangePolicy: OnRootMismatch
-
-securityContext: {}
-
-service:
-  type: ClusterIP
-  port: 8080
-  annotations: {}
-
-ingress:
-  enabled: false
-  className: ""
-  annotations: {}
-  hosts:
-    - host: termix.example.com
-      paths:
-        - path: /
-          pathType: Prefix
-  tls: []
-
-traefik:
-  ingressRoute:
-    enabled: false
-    entryPoints:
-      - websecure
-    host: termix.example.com
-    pathPrefix: /
-    tls:
-      enabled: true
-      secretName: ""
-      certResolver: ""
-    middlewares: []
-    annotations: {}
-
-resources: {}
-
-autoscaling:
-  enabled: false
-  minReplicas: 1
-  maxReplicas: 3
-  targetCPUUtilizationPercentage: 80
-
-persistence:
-  enabled: true
-  accessModes:
-    - ReadWriteOnce
-  size: 10Gi
-  storageClass: ""
-  annotations: {}
-  existingClaim: ""
-
-env:
-  PORT: "8080"
-  DATA_DIR: /app/data
-  NODE_ENV: production
-  GUACD_RECORDING_PATH: /termix-data/session_recordings/guacamole
-  GUACD_RECORDING_BACKEND_PATH: /app/data/session_recordings/guacamole
-
-extraEnv: []
-extraEnvFrom: []
-
-secrets:
-  create: false
-  name: ""
-  data:
-    JWT_SECRET: ""
-    DATABASE_URL: ""
-    GUACAMOLE_ENCRYPTION_KEY: ""
-
-database:
-  dialect: sqlite
-  existingSecret:
-    name: ""
-    urlKey: DATABASE_URL
-
-guacd:
-  enabled: true
-  host: ""
-  image:
-    repository: guacamole/guacd
-    tag: 1.6.0
-    pullPolicy: IfNotPresent
-  resources: {}
-  podAnnotations: {}
-  podLabels: {}
-  securityContext:
-    runAsNonRoot: true
-    runAsUser: 1000
-    allowPrivilegeEscalation: false
-    capabilities:
-      drop:
-        - ALL
-  service:
-    port: 4822
-    annotations: {}
-
-nodeSelector: {}
-tolerations: []
-affinity: {}
-
-strategy:
-  type: Recreate
-
-probes:
-  liveness:
-    enabled: true
-    initialDelaySeconds: 60
-    periodSeconds: 30
-    timeoutSeconds: 10
-    failureThreshold: 3
-  readiness:
-    enabled: true
-    initialDelaySeconds: 15
-    periodSeconds: 10
-    timeoutSeconds: 5
-    failureThreshold: 6
-
-podDisruptionBudget:
-  enabled: false
-  minAvailable: 1
-
-networkPolicy:
-  enabled: false
-  ingress: []
-  egress: []

deploy/argocd/application-traefik.yaml

@@ -1,25 +0,0 @@
-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: termix-traefik
-  namespace: argocd
-spec:
-  project: default
-  source:
-    repoURL: https://github.com/Termix-SSH/Termix.git
-    targetRevision: main
-    path: charts/termix
-    helm:
-      releaseName: termix
-      valueFiles:
-        - values-traefik.yaml
-  destination:
-    server: https://kubernetes.default.svc
-    namespace: termix
-  syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
-    syncOptions:
-      - CreateNamespace=true
-      - PruneLast=true

deploy/argocd/application.yaml

@@ -1,25 +0,0 @@
-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: termix
-  namespace: argocd
-spec:
-  project: default
-  source:
-    repoURL: https://github.com/Termix-SSH/Termix.git
-    targetRevision: main
-    path: charts/termix
-    helm:
-      releaseName: termix
-      valueFiles:
-        - values-gitops-example.yaml
-  destination:
-    server: https://kubernetes.default.svc
-    namespace: termix
-  syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
-    syncOptions:
-      - CreateNamespace=true
-      - PruneLast=true

deploy/gitlab/.gitlab-ci.yml

@@ -1,70 +0,0 @@
-stages:
-  - test
-  - build
-  - package
-  - deploy
-
-variables:
-  DOCKER_TLS_CERTDIR: "/certs"
-  IMAGE_TAG: "$CI_COMMIT_SHORT_SHA"
-  HELM_EXPERIMENTAL_OCI: "1"
-
-helm-lint:
-  image:
-    name: alpine/helm:3.15.4
-    entrypoint: [""]
-  stage: test
-  script:
-    - helm lint charts/termix
-    - helm template termix charts/termix --values charts/termix/values-gitops-example.yaml >/tmp/termix.yaml
-  rules:
-    - if: $CI_PIPELINE_SOURCE == "merge_request_event"
-    - if: $CI_COMMIT_BRANCH
-
-docker-build-push:
-  image: docker:27
-  stage: build
-  services:
-    - docker:27-dind
-  before_script:
-    - echo "$CI_REGISTRY_PASSWORD" | docker login "$CI_REGISTRY" -u "$CI_REGISTRY_USER" --password-stdin
-  script:
-    - docker build -f docker/Dockerfile -t "$CI_REGISTRY_IMAGE:$IMAGE_TAG" -t "$CI_REGISTRY_IMAGE:$CI_COMMIT_REF_SLUG" .
-    - docker push "$CI_REGISTRY_IMAGE:$IMAGE_TAG"
-    - docker push "$CI_REGISTRY_IMAGE:$CI_COMMIT_REF_SLUG"
-  rules:
-    - if: $CI_COMMIT_BRANCH
-
-helm-package-push:
-  image:
-    name: alpine/helm:3.15.4
-    entrypoint: [""]
-  stage: package
-  before_script:
-    - echo "$CI_REGISTRY_PASSWORD" | helm registry login "$CI_REGISTRY" -u "$CI_REGISTRY_USER" --password-stdin
-  script:
-    - helm dependency update charts/termix
-    - helm package charts/termix --destination .helm-packages
-    - helm push .helm-packages/termix-*.tgz "oci://$CI_REGISTRY_IMAGE/charts"
-  artifacts:
-    paths:
-      - .helm-packages/
-  rules:
-    - if: $CI_COMMIT_TAG
-    - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH
-
-deploy:
-  image:
-    name: alpine/helm:3.15.4
-    entrypoint: [""]
-  stage: deploy
-  environment:
-    name: production
-  before_script:
-    - echo "$KUBE_CONFIG" | base64 -d > kubeconfig
-    - chmod 600 kubeconfig
-  script:
-    - helm upgrade --install termix charts/termix --namespace termix --create-namespace --kubeconfig kubeconfig --set image.repository="$CI_REGISTRY_IMAGE" --set image.tag="$IMAGE_TAG" --values charts/termix/values-gitops-example.yaml --atomic --timeout 10m
-  rules:
-    - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH
-      when: manual

docker/Dockerfile

@@ -1,5 +1,5 @@
 # Stage 1: Install dependencies
-FROM node:24-slim AS deps
+FROM node:26-slim AS deps
 WORKDIR /app
 
 RUN apt-get update && apt-get install -y python3 make g++ && rm -rf /var/lib/apt/lists/*
@@ -31,32 +31,12 @@ WORKDIR /app
 
 COPY . .
 
-RUN rm -rf node_modules/better-sqlite3/prebuilds && \
-    npm run build-release --prefix node_modules/better-sqlite3 && \
-    test -f node_modules/better-sqlite3/build/Release/better_sqlite3.node
+RUN npm rebuild better-sqlite3
 
 RUN npm run build:backend
 
-# Stage 4: Download OPKSSH binary for the target platform so the image works offline
-FROM node:24-slim AS opkssh-downloader
-ARG TARGETARCH
-ARG OPKSSH_VERSION=v0.16.0
-WORKDIR /opkssh
-
-RUN apt-get update && apt-get install -y curl ca-certificates && rm -rf /var/lib/apt/lists/*
-
-RUN case "$TARGETARCH" in \
-      amd64) OPKSSH_ARCH=amd64 ;; \
-      arm64) OPKSSH_ARCH=arm64 ;; \
-      *) echo "Unsupported architecture: $TARGETARCH" && exit 1 ;; \
-    esac && \
-    curl -fSL -o "opkssh-linux-${OPKSSH_ARCH}" \
-      "https://github.com/openpubkey/opkssh/releases/download/${OPKSSH_VERSION}/opkssh-linux-${OPKSSH_ARCH}" && \
-    chmod 755 "opkssh-linux-${OPKSSH_ARCH}" && \
-    echo -n "$OPKSSH_VERSION" > version.txt
-
-# Stage 5: Production dependencies only
-FROM node:24-slim AS production-deps
+# Stage 4: Production dependencies only
+FROM node:26-slim AS production-deps
 WORKDIR /app
 
 RUN apt-get update && apt-get install -y python3 make g++ && rm -rf /var/lib/apt/lists/*
@@ -69,14 +49,11 @@ COPY scripts/patch-guacamole-lite.cjs ./scripts/
 
 RUN npm ci --omit=dev --ignore-scripts && \
     node scripts/patch-guacamole-lite.cjs && \
-    rm -rf node_modules/better-sqlite3/prebuilds && \
-    npm run build-release --prefix node_modules/better-sqlite3 && \
-    test -f node_modules/better-sqlite3/build/Release/better_sqlite3.node && \
-    npm rebuild bcryptjs ssh2 && \
+    npm rebuild better-sqlite3 bcryptjs ssh2 && \
     npm cache clean --force
 
-# Stage 6: Final optimized image
-FROM node:24-slim
+# Stage 5: Final optimized image
+FROM node:26-slim
 WORKDIR /app
 
 ENV DATA_DIR=/app/data \
@@ -98,11 +75,7 @@ COPY --chown=node:node --from=frontend-builder /app/dist /app/html
 
 COPY --chown=node:node --from=production-deps /app/node_modules /app/node_modules
 COPY --chown=node:node --from=backend-builder /app/dist/backend ./dist/backend
-COPY --chown=node:node --from=opkssh-downloader /opkssh /app/opkssh-bundled
 COPY --chown=node:node package.json ./
-# Schema for Postgres and MySQL. Unused by the default SQLite deployment, which
-# builds its tables at startup instead.
-COPY --chown=node:node drizzle ./drizzle
 
 VOLUME ["/app/data"]
 

docker/compose-dev.yml

@@ -13,7 +13,6 @@ services:
       PORT: "8080"
       NODE_ENV: development
       GUACD_HOST: "guacd-dev"
-      GUACD_TUNNEL_HOST: "termix-dev"
       GUACD_RECORDING_PATH: "/termix-data/session_recordings/guacamole"
     depends_on:
       - guacd-dev

docker/docker-compose.yml

@@ -10,15 +10,7 @@ services:
     environment:
       PORT: "8080"
       GUACD_HOST: "guacd"
-      GUACD_TUNNEL_HOST: "termix"
       GUACD_RECORDING_PATH: "/termix-data/session_recordings/guacamole"
-      # Trusted reverse-proxy authentication is disabled by default. When
-      # enabled, do not expose this container directly to untrusted clients.
-      # TRUSTED_PROXY_AUTH_ENABLED: "true"
-      # TRUSTED_PROXY_AUTH_TRUSTED_PROXIES: "172.16.0.0/12"
-      # TRUSTED_PROXY_AUTH_ROLE_MAP: '{"operators":["user"]}'
-      # TRUSTED_PROXY_AUTH_USERNAME_HEADER: "x-forwarded-username"
-      # TRUSTED_PROXY_AUTH_ROLE_HEADER: "x-forwarded-role"
     depends_on:
       - guacd
     networks:

docker/entrypoint.sh

@@ -22,38 +22,11 @@ if [ "$(id -u)" = "0" ]; then
     fi
 fi
 
-DATA_DIR=${DATA_DIR:-/app/data}
-
-RUNTIME_ENABLE_SSL_SET=${ENABLE_SSL+x}
-RUNTIME_ENABLE_SSL=${ENABLE_SSL-}
-RUNTIME_SSL_PORT_SET=${SSL_PORT+x}
-RUNTIME_SSL_PORT=${SSL_PORT-}
-RUNTIME_SSL_CERT_PATH_SET=${SSL_CERT_PATH+x}
-RUNTIME_SSL_CERT_PATH=${SSL_CERT_PATH-}
-RUNTIME_SSL_KEY_PATH_SET=${SSL_KEY_PATH+x}
-RUNTIME_SSL_KEY_PATH=${SSL_KEY_PATH-}
-RUNTIME_SSL_DOMAIN_SET=${SSL_DOMAIN+x}
-RUNTIME_SSL_DOMAIN=${SSL_DOMAIN-}
-
-if [ -f "$DATA_DIR/.env" ]; then
-    echo "Loading persisted SSL settings from $DATA_DIR/.env"
-    set -a
-    . "$DATA_DIR/.env"
-    set +a
-fi
-
-[ "$RUNTIME_ENABLE_SSL_SET" = "x" ] && ENABLE_SSL=$RUNTIME_ENABLE_SSL
-[ "$RUNTIME_SSL_PORT_SET" = "x" ] && SSL_PORT=$RUNTIME_SSL_PORT
-[ "$RUNTIME_SSL_CERT_PATH_SET" = "x" ] && SSL_CERT_PATH=$RUNTIME_SSL_CERT_PATH
-[ "$RUNTIME_SSL_KEY_PATH_SET" = "x" ] && SSL_KEY_PATH=$RUNTIME_SSL_KEY_PATH
-[ "$RUNTIME_SSL_DOMAIN_SET" = "x" ] && SSL_DOMAIN=$RUNTIME_SSL_DOMAIN
-
 export PORT=${PORT:-8080}
 export ENABLE_SSL=${ENABLE_SSL:-false}
 export SSL_PORT=${SSL_PORT:-8443}
 export SSL_CERT_PATH=${SSL_CERT_PATH:-/app/data/ssl/termix.crt}
 export SSL_KEY_PATH=${SSL_KEY_PATH:-/app/data/ssl/termix.key}
-export TERMIX_SSL_TERMINATED_BY_NGINX=true
 
 echo "Configuring web UI to run on port: $PORT"
 
@@ -68,11 +41,6 @@ fi
 mkdir -p /tmp/nginx
 envsubst '${PORT} ${SSL_PORT} ${SSL_CERT_PATH} ${SSL_KEY_PATH}' < $NGINX_CONF_SOURCE > /tmp/nginx/nginx.conf
 
-if [ "$ENABLE_SSL" = "true" ] && [ "$PORT" = "$SSL_PORT" ]; then
-    echo "HTTP and HTTPS use port $SSL_PORT; disabling the HTTP redirect listener"
-    sed -i '/# BEGIN HTTP_REDIRECT_SERVER/,/# END HTTP_REDIRECT_SERVER/d' /tmp/nginx/nginx.conf
-fi
-
 mkdir -p /app/data /app/uploads /app/data/.opk /app/data/acme-webroot/.well-known/acme-challenge
 chmod 755 /app/data /app/uploads /app/data/.opk 2>/dev/null || true
 
@@ -92,8 +60,8 @@ fi
 
 OPKSSH_DIR="${DATA_DIR:-/app/data}/opkssh"
 if [ ! -d "$OPKSSH_DIR" ]; then
-    echo "OPKSSH binary directory not found at $OPKSSH_DIR"
-    echo "OPKSSH will be installed from the bundled copy on first use (falls back to downloading if unavailable)."
+    echo "WARNING: OPKSSH binary directory not found at $OPKSSH_DIR"
+    echo "OPKSSH will be downloaded automatically on first use."
 else
     echo "OPKSSH binary directory found at $OPKSSH_DIR"
 fi
@@ -195,4 +163,8 @@ else
     echo "Warning: package.json not found"
 fi
 
-exec node dist/backend/backend/starter.js
+node dist/backend/backend/starter.js
+
+echo "All services started"
+
+tail -f /dev/null

docker/nginx-https.conf

@@ -11,8 +11,6 @@ http {
     include /etc/nginx/mime.types;
     default_type application/octet-stream;
 
-    server_tokens off;
-
     access_log /tmp/nginx/access.log;
 
     client_body_temp_path /tmp/nginx/client_body;
@@ -23,22 +21,6 @@ http {
 
     sendfile on;
     keepalive_timeout 65;
-
-    # Static assets only. API responses arrive already gzipped from the node
-    # backend, and gzip_proxied would otherwise have nginx decompress and
-    # recompress them for nothing.
-    gzip on;
-    gzip_vary on;
-    gzip_min_length 2048;
-    gzip_comp_level 5;
-    gzip_types
-        text/plain
-        text/css
-        text/javascript
-        application/javascript
-        application/json
-        application/wasm
-        image/svg+xml;
     client_header_timeout 300s;
 
     set_real_ip_from 127.0.0.1;
@@ -69,19 +51,16 @@ http {
     ssl_session_cache shared:SSL:10m;
     ssl_session_timeout 10m;
 
-    # BEGIN HTTP_REDIRECT_SERVER
     server {
         listen ${PORT};
         server_name _;
 
         return 301 https://$host:${SSL_PORT}$request_uri;
     }
-    # END HTTP_REDIRECT_SERVER
 
     server {
         listen ${SSL_PORT} ssl;
         server_name _;
-        client_max_body_size 50m;
 
         absolute_redirect off;
 
@@ -90,6 +69,7 @@ http {
 
         add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
         add_header X-Content-Type-Options nosniff always;
+        add_header X-XSS-Protection "1; mode=block" always;
 
         location ^~ /.well-known/acme-challenge/ {
             root /app/data/acme-webroot;
@@ -100,8 +80,6 @@ http {
         location = /sw.js {
             root /app/html;
             expires off;
-            add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
-            add_header X-Content-Type-Options nosniff always;
             add_header Cache-Control "no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0" always;
             try_files $uri =404;
         }
@@ -109,64 +87,31 @@ http {
         location = /manifest.json {
             root /app/html;
             expires off;
-            add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
-            add_header X-Content-Type-Options nosniff always;
             add_header Cache-Control "no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0" always;
             try_files $uri =404;
         }
 
-        location ^~ /assets/ {
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg|woff|woff2|ttf|eot)$ {
             root /app/html;
             expires 1y;
-            add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
-            add_header X-Content-Type-Options nosniff always;
             add_header Cache-Control "public, max-age=31536000, immutable" always;
             try_files $uri =404;
         }
 
-        location ^~ /fonts/ {
-            root /app/html;
-            expires 1y;
-            add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
-            add_header X-Content-Type-Options nosniff always;
-            add_header Cache-Control "public, max-age=31536000, immutable" always;
-            try_files $uri =404;
-        }
-
-        location ^~ /icons/ {
-            root /app/html;
-            expires 30d;
-            add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
-            add_header X-Content-Type-Options nosniff always;
-            add_header Cache-Control "public, max-age=2592000" always;
-            try_files $uri =404;
-        }
-
-        location ~* ^/[^/]+\.(js|css|png|jpe?g|gif|ico|svg|webp|woff2?|ttf|eot)$ {
-            root /app/html;
-            expires 30d;
-            add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
-            add_header X-Content-Type-Options nosniff always;
-            add_header Cache-Control "public, max-age=2592000" always;
-            try_files $uri =404;
-        }
-
-        location ~* \.map$ {
-            access_log off;
-            log_not_found off;
-            return 404;
-        }
-
         location / {
             root /app/html;
             index index.html index.htm;
             expires off;
-            add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
-            add_header X-Content-Type-Options nosniff always;
             add_header Cache-Control "no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0" always;
             try_files $uri $uri/ /index.html;
         }
 
+        location ~* \.map$ {
+            return 404;
+            access_log off;
+            log_not_found off;
+        }
+
         location ~ ^/users/sessions(/.*)?$ {
             proxy_pass http://127.0.0.1:30001;
             proxy_http_version 1.1;
@@ -214,30 +159,6 @@ http {
             proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
         }
 
-        location ~ ^/ai(/.*)?$ {
-            proxy_pass http://127.0.0.1:30001;
-            proxy_http_version 1.1;
-            proxy_set_header Host $http_host;
-            proxy_set_header X-Real-IP $remote_addr;
-            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-            proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
-
-            # The chat endpoint streams server-sent events; buffering would
-            # hold tokens back until the whole reply finished.
-            proxy_read_timeout 600s;
-            proxy_buffering off;
-            proxy_cache off;
-        }
-
-        location ~ ^/automations(/.*)?$ {
-            proxy_pass http://127.0.0.1:30001;
-            proxy_http_version 1.1;
-            proxy_set_header Host $http_host;
-            proxy_set_header X-Real-IP $remote_addr;
-            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-            proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
-        }
-
         location ~ ^/alert-rules(/.*)?$ {
             proxy_pass http://127.0.0.1:30001;
             proxy_http_version 1.1;
@@ -296,21 +217,6 @@ http {
             proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
         }
 
-        location ~ ^/fleets(/.*)?$ {
-            client_max_body_size 200m;
-
-            proxy_pass http://127.0.0.1:30001;
-            proxy_http_version 1.1;
-            proxy_set_header Host $http_host;
-            proxy_set_header X-Real-IP $remote_addr;
-            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-            proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
-
-            proxy_connect_timeout 60s;
-            proxy_send_timeout 600s;
-            proxy_read_timeout 600s;
-        }
-
         location ~ ^/vault(/.*)?$ {
             proxy_pass http://127.0.0.1:30001;
             proxy_http_version 1.1;
@@ -386,15 +292,6 @@ http {
             proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
         }
 
-        location ~ ^/workspaces(/.*)?$ {
-            proxy_pass http://127.0.0.1:30001;
-            proxy_http_version 1.1;
-            proxy_set_header Host $http_host;
-            proxy_set_header X-Real-IP $remote_addr;
-            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-            proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
-        }
-
         location ~ ^/user-preferences(/.*)?$ {
             proxy_pass http://127.0.0.1:30001;
             proxy_http_version 1.1;
@@ -404,33 +301,6 @@ http {
             proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
         }
 
-        location ~ ^/host-sidebar(/.*)?$ {
-            proxy_pass http://127.0.0.1:30001;
-            proxy_http_version 1.1;
-            proxy_set_header Host $http_host;
-            proxy_set_header X-Real-IP $remote_addr;
-            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-            proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
-        }
-
-        location ~ ^/credential-sidebar(/.*)?$ {
-            proxy_pass http://127.0.0.1:30001;
-            proxy_http_version 1.1;
-            proxy_set_header Host $http_host;
-            proxy_set_header X-Real-IP $remote_addr;
-            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-            proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
-        }
-
-        location ~ ^/ui-preferences(/.*)?$ {
-            proxy_pass http://127.0.0.1:30001;
-            proxy_http_version 1.1;
-            proxy_set_header Host $http_host;
-            proxy_set_header X-Real-IP $remote_addr;
-            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-            proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
-        }
-
         location ~ ^/database(/.*)?$ {
             client_max_body_size 5G;
             client_body_timeout 300s;
@@ -502,9 +372,7 @@ http {
 
             proxy_cache_bypass 1;
             proxy_no_cache 1;
-            add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
-            add_header X-Content-Type-Options nosniff always;
-            add_header Cache-Control "no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0" always;
+            add_header Cache-Control "no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0";
         }
 
         location ~ ^/host/opkssh-callback(/.*)?$ {
@@ -519,9 +387,7 @@ http {
 
             proxy_cache_bypass 1;
             proxy_no_cache 1;
-            add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
-            add_header X-Content-Type-Options nosniff always;
-            add_header Cache-Control "no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0" always;
+            add_header Cache-Control "no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0";
         }
 
         location /host/ {
@@ -683,8 +549,6 @@ http {
             client_max_body_size 5G;
             client_body_timeout 300s;
 
-            add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
-            add_header X-Content-Type-Options nosniff always;
             add_header Cache-Control "no-store, no-cache, must-revalidate" always;
 
             proxy_pass http://127.0.0.1:30004;
@@ -706,8 +570,6 @@ http {
             client_max_body_size 5G;
             client_body_timeout 300s;
 
-            add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
-            add_header X-Content-Type-Options nosniff always;
             add_header Cache-Control "no-store, no-cache, must-revalidate" always;
 
             proxy_pass http://127.0.0.1:30004;
@@ -787,19 +649,6 @@ http {
             proxy_read_timeout 600s;
         }
 
-        location ~ ^/proxmox-stats(/.*)?$ {
-            proxy_pass http://127.0.0.1:30005;
-            proxy_http_version 1.1;
-            proxy_set_header Host $http_host;
-            proxy_set_header X-Real-IP $remote_addr;
-            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-            proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
-
-            proxy_connect_timeout 600s;
-            proxy_send_timeout 600s;
-            proxy_read_timeout 600s;
-        }
-
         location ~ ^/global-settings(/.*)?$ {
             proxy_pass http://127.0.0.1:30005;
             proxy_http_version 1.1;
@@ -922,7 +771,6 @@ http {
         error_page 500 502 503 504 /50x.html;
         location = /50x.html {
             root /app/html;
-            internal;
         }
     }
 }

docker/nginx.conf

@@ -11,8 +11,6 @@ http {
     include /etc/nginx/mime.types;
     default_type application/octet-stream;
 
-    server_tokens off;
-
     access_log /tmp/nginx/access.log;
 
     client_body_temp_path /tmp/nginx/client_body;
@@ -23,22 +21,6 @@ http {
 
     sendfile on;
     keepalive_timeout 65;
-
-    # Static assets only. API responses arrive already gzipped from the node
-    # backend, and gzip_proxied would otherwise have nginx decompress and
-    # recompress them for nothing.
-    gzip on;
-    gzip_vary on;
-    gzip_min_length 2048;
-    gzip_comp_level 5;
-    gzip_types
-        text/plain
-        text/css
-        text/javascript
-        application/javascript
-        application/json
-        application/wasm
-        image/svg+xml;
     client_header_timeout 300s;
 
     set_real_ip_from 127.0.0.1;
@@ -72,11 +54,11 @@ http {
     server {
         listen ${PORT};
         server_name _;
-        client_max_body_size 50m;
 
         absolute_redirect off;
 
         add_header X-Content-Type-Options nosniff always;
+        add_header X-XSS-Protection "1; mode=block" always;
 
         location ^~ /.well-known/acme-challenge/ {
             root /app/data/acme-webroot;
@@ -87,7 +69,6 @@ http {
         location = /sw.js {
             root /app/html;
             expires off;
-            add_header X-Content-Type-Options nosniff always;
             add_header Cache-Control "no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0" always;
             try_files $uri =404;
         }
@@ -95,58 +76,31 @@ http {
         location = /manifest.json {
             root /app/html;
             expires off;
-            add_header X-Content-Type-Options nosniff always;
             add_header Cache-Control "no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0" always;
             try_files $uri =404;
         }
 
-        location ^~ /assets/ {
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg|woff|woff2|ttf|eot)$ {
             root /app/html;
             expires 1y;
-            add_header X-Content-Type-Options nosniff always;
             add_header Cache-Control "public, max-age=31536000, immutable" always;
             try_files $uri =404;
         }
 
-        location ^~ /fonts/ {
-            root /app/html;
-            expires 1y;
-            add_header X-Content-Type-Options nosniff always;
-            add_header Cache-Control "public, max-age=31536000, immutable" always;
-            try_files $uri =404;
-        }
-
-        location ^~ /icons/ {
-            root /app/html;
-            expires 30d;
-            add_header X-Content-Type-Options nosniff always;
-            add_header Cache-Control "public, max-age=2592000" always;
-            try_files $uri =404;
-        }
-
-        location ~* ^/[^/]+\.(js|css|png|jpe?g|gif|ico|svg|webp|woff2?|ttf|eot)$ {
-            root /app/html;
-            expires 30d;
-            add_header X-Content-Type-Options nosniff always;
-            add_header Cache-Control "public, max-age=2592000" always;
-            try_files $uri =404;
-        }
-
-        location ~* \.map$ {
-            access_log off;
-            log_not_found off;
-            return 404;
-        }
-
         location / {
             root /app/html;
             index index.html index.htm;
             expires off;
-            add_header X-Content-Type-Options nosniff always;
             add_header Cache-Control "no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0" always;
             try_files $uri $uri/ /index.html;
         }
 
+        location ~* \.map$ {
+            return 404;
+            access_log off;
+            log_not_found off;
+        }
+
         location ~ ^/users/sessions(/.*)?$ {
             proxy_pass http://127.0.0.1:30001;
             proxy_http_version 1.1;
@@ -194,30 +148,6 @@ http {
             proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
         }
 
-        location ~ ^/ai(/.*)?$ {
-            proxy_pass http://127.0.0.1:30001;
-            proxy_http_version 1.1;
-            proxy_set_header Host $http_host;
-            proxy_set_header X-Real-IP $remote_addr;
-            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-            proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
-
-            # The chat endpoint streams server-sent events; buffering would
-            # hold tokens back until the whole reply finished.
-            proxy_read_timeout 600s;
-            proxy_buffering off;
-            proxy_cache off;
-        }
-
-        location ~ ^/automations(/.*)?$ {
-            proxy_pass http://127.0.0.1:30001;
-            proxy_http_version 1.1;
-            proxy_set_header Host $http_host;
-            proxy_set_header X-Real-IP $remote_addr;
-            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-            proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
-        }
-
         location ~ ^/alert-rules(/.*)?$ {
             proxy_pass http://127.0.0.1:30001;
             proxy_http_version 1.1;
@@ -276,21 +206,6 @@ http {
             proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
         }
 
-        location ~ ^/fleets(/.*)?$ {
-            client_max_body_size 200m;
-
-            proxy_pass http://127.0.0.1:30001;
-            proxy_http_version 1.1;
-            proxy_set_header Host $http_host;
-            proxy_set_header X-Real-IP $remote_addr;
-            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-            proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
-
-            proxy_connect_timeout 60s;
-            proxy_send_timeout 600s;
-            proxy_read_timeout 600s;
-        }
-
         location ~ ^/vault(/.*)?$ {
             proxy_pass http://127.0.0.1:30001;
             proxy_http_version 1.1;
@@ -366,15 +281,6 @@ http {
             proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
         }
 
-        location ~ ^/workspaces(/.*)?$ {
-            proxy_pass http://127.0.0.1:30001;
-            proxy_http_version 1.1;
-            proxy_set_header Host $http_host;
-            proxy_set_header X-Real-IP $remote_addr;
-            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-            proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
-        }
-
         location ~ ^/user-preferences(/.*)?$ {
             proxy_pass http://127.0.0.1:30001;
             proxy_http_version 1.1;
@@ -384,33 +290,6 @@ http {
             proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
         }
 
-        location ~ ^/host-sidebar(/.*)?$ {
-            proxy_pass http://127.0.0.1:30001;
-            proxy_http_version 1.1;
-            proxy_set_header Host $http_host;
-            proxy_set_header X-Real-IP $remote_addr;
-            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-            proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
-        }
-
-        location ~ ^/credential-sidebar(/.*)?$ {
-            proxy_pass http://127.0.0.1:30001;
-            proxy_http_version 1.1;
-            proxy_set_header Host $http_host;
-            proxy_set_header X-Real-IP $remote_addr;
-            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-            proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
-        }
-
-        location ~ ^/ui-preferences(/.*)?$ {
-            proxy_pass http://127.0.0.1:30001;
-            proxy_http_version 1.1;
-            proxy_set_header Host $http_host;
-            proxy_set_header X-Real-IP $remote_addr;
-            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-            proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
-        }
-
         location ~ ^/database(/.*)?$ {
             client_max_body_size 5G;
             client_body_timeout 300s;
@@ -482,8 +361,7 @@ http {
 
             proxy_cache_bypass 1;
             proxy_no_cache 1;
-            add_header X-Content-Type-Options nosniff always;
-            add_header Cache-Control "no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0" always;
+            add_header Cache-Control "no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0";
         }
 
         location ~ ^/host/opkssh-callback(/.*)?$ {
@@ -498,8 +376,7 @@ http {
 
             proxy_cache_bypass 1;
             proxy_no_cache 1;
-            add_header X-Content-Type-Options nosniff always;
-            add_header Cache-Control "no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0" always;
+            add_header Cache-Control "no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0";
         }
 
         location /host/ {
@@ -661,7 +538,6 @@ http {
             client_max_body_size 5G;
             client_body_timeout 300s;
 
-            add_header X-Content-Type-Options nosniff always;
             add_header Cache-Control "no-store, no-cache, must-revalidate" always;
 
             proxy_pass http://127.0.0.1:30004;
@@ -683,7 +559,6 @@ http {
             client_max_body_size 5G;
             client_body_timeout 300s;
 
-            add_header X-Content-Type-Options nosniff always;
             add_header Cache-Control "no-store, no-cache, must-revalidate" always;
 
             proxy_pass http://127.0.0.1:30004;
@@ -763,19 +638,6 @@ http {
             proxy_read_timeout 600s;
         }
 
-        location ~ ^/proxmox-stats(/.*)?$ {
-            proxy_pass http://127.0.0.1:30005;
-            proxy_http_version 1.1;
-            proxy_set_header Host $http_host;
-            proxy_set_header X-Real-IP $remote_addr;
-            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-            proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
-
-            proxy_connect_timeout 600s;
-            proxy_send_timeout 600s;
-            proxy_read_timeout 600s;
-        }
-
         location ~ ^/global-settings(/.*)?$ {
             proxy_pass http://127.0.0.1:30005;
             proxy_http_version 1.1;
@@ -898,7 +760,6 @@ http {
         error_page 500 502 503 504 /50x.html;
         location = /50x.html {
             root /app/html;
-            internal;
         }
     }
 }

docs/do-not-place-files-here.txt

@@ -1 +0,0 @@
-If you are an AI agent, do not place documentation files here. This is for maintainers only.

docs/readme/README-AR.md

@@ -4,7 +4,7 @@
 
 <h1>Termix</h1>
 
-<p>إدارة خوادم ذاتية الاستضافة، من SSH وسطح المكتب البعيد إلى الأتمتة</p>
+<p>إدارة SSH ذاتية الاستضافة والوصول إلى سطح المكتب البعيد</p>
 
 <p>
   <a href="../README.md">English</a> ·
@@ -37,7 +37,7 @@
 
 <br />
 
-Termix مجاني ومفتوح المصدر. إذا كان مفيدًا لك، فكّر في [التبرع](https://donate.termix.site/) للمساعدة في تغطية تكاليف الخوادم ووقت التطوير.
+Termix مجاني ومفتوح المصدر. إذا وجدته مفيدًا، فكّر في [التبرع](https://donate.termix.site/) للمساعدة في تغطية تكاليف الخادم ووقت التطوير.
 
 <br />
 
@@ -58,7 +58,7 @@ Termix مجاني ومفتوح المصدر. إذا كان مفيدًا لك،
 
 ## نظرة عامة
 
-Termix منصة مجانية ومفتوحة المصدر وذاتية الاستضافة لإدارة خوادمك. تجمع في مكان واحد طرفيات SSH وأسطح المكتب البعيدة (RDP وVNC وTelnet) ونقل الملفات والأنفاق وDocker والمقاييس والأتمتة، على الويب وسطح المكتب والهاتف. إنه بديل ذاتي الاستضافة لـ Termius ويبقى مجانيًا إلى الأبد.
+Termix هي منصة مفتوحة المصدر ومجانية للأبد وذاتية الاستضافة لإدارة الخوادم بشكل شامل. توفر حلاً متعدد المنصات لإدارة خوادمك وبنيتك التحتية من خلال واجهة واحدة وسهلة الاستخدام. يوفر Termix الوصول إلى طرفية SSH، والتحكم في سطح المكتب البعيد (RDP، VNC، Telnet)، وقدرات إنشاء أنفاق SSH، وإدارة ملفات SSH عن بُعد، والعديد من الأدوات الأخرى. يُعد Termix البديل المثالي المجاني وذاتي الاستضافة لـ Termius المتاح لجميع المنصات.
 
 <br />
 
@@ -68,42 +68,42 @@ Termix منصة مجانية ومفتوحة المصدر وذاتية الاست
 <tr>
 <td width="50%" valign="top">
 
-**طرفية SSH:**
-طرفية كاملة بعلامات تبويب مثل المتصفح وتقسيم للشاشة، حتى 6 لوحات في وقت واحد. اختر السمة والخط والألوان. يوجد فوق كل جلسة شريط يعرض المعالج والذاكرة والقرص لحظيًا، مع روابط سريعة إلى ملفات ذلك المضيف وDocker والأنفاق والمقاييس.
+**الوصول إلى طرفية SSH:**
+طرفية كاملة الميزات مع دعم تقسيم الشاشة (حتى 4 لوحات) مع نظام علامات تبويب شبيه بالمتصفح. يتضمن دعم تخصيص الطرفية بما في ذلك سمات الطرفية الشائعة والخطوط والمكونات الأخرى.
 
 </td>
 <td width="50%" valign="top">
 
-**سطح المكتب البعيد:**
-RDP وVNC وTelnet داخل المتصفح، في علامات تبويب وشاشة مقسّمة مثل أي جلسة أخرى. يتضمن متصفح ملفات لأقراص RDP ورفعًا بالسحب والإفلات. على سطح مكتب Windows يمكنك أيضًا فتح المضيف في عميل RDP الأصلي.
+**الوصول إلى سطح المكتب البعيد:**
+دعم RDP و VNC و Telnet عبر المتصفح مع تخصيص كامل وتقسيم الشاشة.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**أنفاق SSH:**
-إعادة توجيه محلية وبعيدة وSOCKS ديناميكية، مع إعادة اتصال تلقائية وفحوص للحالة. تُحفظ أنفاق العميل إلى الخادم في تطبيق سطح المكتب على ذلك الجهاز، ويمكنك حفظ إعدادات جاهزة على الخادم لنقل التهيئة إلى جهاز آخر.
+**إدارة أنفاق SSH:**
+إنشاء وإدارة أنفاق SSH بين الخوادم مع إعادة الاتصال التلقائي ومراقبة الحالة وإعادة التوجيه المحلي أو البعيد أو SOCKS الديناميكي. يتم تخزين إعدادات نفق العميل-المكتبي إلى السيرفر محلياً لكل تثبيت مكتبي، ويمكن حفظ لقطات C2S الاختيارية على الخادم وإعادة تسميتها وتحميلها أو حذفها عندما تريد نقل تكوين النفق المحلي بين العملاء.
 
 </td>
 <td width="50%" valign="top">
 
-**مدير الملفات:**
-تصفح الملفات وحرّرها وارفعها ونزّلها وأعد تسميتها وانقلها واحذفها عبر SFTP، مع دعم sudo. اعرض وحرّر الشيفرة والصور والصوت والفيديو. انسخ الملفات مباشرة من خادم إلى آخر، مع اختيار أسرع مسار تلقائيًا والتحقق من سلامة النقل.
+**مدير الملفات عن بُعد:**
+إدارة الملفات مباشرة على الخوادم البعيدة مع دعم عرض وتحرير الكود والصور والصوت والفيديو. رفع وتنزيل وإعادة تسمية وحذف ونقل الملفات بسلاسة مع دعم sudo. يتضمن دعم نقل الملفات من خادم إلى آخر.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Docker وPodman:**
-شغّل الحاويات وأوقفها وعلّقها واحذفها، وتابع إحصاءاتها، وافتح طرفية داخل إحداها. يعمل مع Docker وPodman معًا. ليس بديلاً عن Portainer أو Dockge، بل وسيلة لإدارة الحاويات الموجودة لديك.
+**إدارة Docker و Podman:**
+تشغيل وإيقاف وتعليق وحذف الحاويات. عرض إحصائيات الحاويات. التحكم في الحاوية باستخدام طرفية docker exec. يدعم كلاً من Docker و Podman كبيئة تشغيل للحاويات. لم يُصمم ليحل محل Portainer أو Dockge بل لإدارة حاوياتك ببساطة مقارنة بإنشائها.
 
 </td>
 <td width="50%" valign="top">
 
-**مدير المضيفات:**
-احفظ مضيفاتك ونظّمها بالوسوم ومجلدات متداخلة يمكنك تسميتها وتلوينها. أعد استخدام بيانات الدخول المحفوظة عبر عدة مضيفات، وانشر مفاتيح SSH تلقائيًا، واجمع المضيفات تحت مضيف رئيسي، وحرّر وصدّر دفعة واحدة، واستخدم الاتصال السريع للاتصالات العابرة التي لا تريد حفظها.
+**مدير مضيفات SSH:**
+حفظ وتنظيم وإدارة اتصالات SSH الخاصة بك باستخدام العلامات والمجلدات (مع دعم تخصيص المجلدات والمجلدات المتداخلة)، وحفظ بيانات تسجيل الدخول القابلة لإعادة الاستخدام بسهولة مع إمكانية أتمتة نشر مفاتيح SSH.
 
 </td>
 </tr>
@@ -111,139 +111,83 @@ RDP وVNC وTelnet داخل المتصفح، في علامات تبويب وشا
 <td width="50%" valign="top">
 
 **مقاييس المضيف:**
-المعالج والذاكرة والقرص والشبكة والحرارة ومدة التشغيل والعمليات والمنافذ وتسجيلات الدخول ومعلومات النظام على معظم خوادم Linux، مع رسوم بيانية للسجل. تتيح لك بطاقات الإدارة التعامل مع الخدمات ومهام cron والحزم والمستخدمين وقواعد الجدار الناري وWireGuard وTailscale وشهادات SSL والسجلات وفحوص السلامة دون مغادرة Termix.
+عرض استخدام المعالج والذاكرة والقرص والشبكة ووقت التشغيل ومعلومات النظام وجدار الحماية ومراقب المنافذ وعارض السجلات والمستخدمين/الصلاحيات والشهادات وغيرها الكثير، تعمل على معظم الخوادم المبنية على Linux. يتضمن رسوم بيانية تاريخية زمنية السلسلة وتنبيهات قائمة على الحدود مع دعم ntfy والـ webhook.
 
 </td>
 <td width="50%" valign="top">
 
-**الأتمتة:**
-اختر مُشغِّلًا ثم حدّد ما ينبغي أن يحدث. تشمل المشغّلات تجاوز مقياس لحد معين، أو مضيفًا يسقط أو يعود، أو تغيّر فحص السلامة، أو جدولًا زمنيًا، أو حدث حاوية، أو webhook واردًا. يمكن للخطوات تشغيل أوامر ومقتطفات، والتحكم في الحاويات والأنفاق، وإيقاظ مضيف، واستدعاء رابط، والانتظار، والتفرع حسب شرط، وتشغيل أتمتة أخرى، وإشعارك عبر ntfy أو Discord أو webhook. تتيح لك عمليات التشغيل التجريبي التجربة بأمان أولًا.
+**مصادقة المستخدمين:**
+إدارة آمنة للمستخدمين مع ضوابط إدارية (يمكن تعديل معلومات المستخدمين الآخرين) ودعم OIDC/LDAP/SSO (مع التحكم في الوصول) و 2FA (TOTP) ودعم مفاتيح المرور (WebAuthn). عرض جلسات المستخدمين النشطة عبر جميع المنصات وإلغاء الصلاحيات. ربط حسابات OIDC/المحلية معاً. عرض سجل تدقيق لجميع إجراءات المستخدمين.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**الأساطيل:**
-اجمع المضيفات في أسطول باختيارها يدويًا أو بقواعد الوسوم، لتنضم المضيفات الجديدة تلقائيًا. شغّل أمرًا واحدًا على كل المضيفات دفعة واحدة، وادفع الملفات واسحبها من جميعها، وثبّت الحزم، واجمع جردًا بنظام التشغيل والنواة والمعمارية ومدة التشغيل.
+**تكامل Tailscale:**
+عرض أجهزة شبكتك من Tailscale لإضافتها بسرعة كمضيفات، والاتصال عبر Tailscale SSH كطريقة مصادقة، مما يتيح لقوائم تحكم الوصول في Tailscale التعامل مع التفويض دون الحاجة لتخزين بيانات اعتماد.
 
 </td>
 <td width="50%" valign="top">
 
-**مساعد الذكاء الاصطناعي:**
-ميزة اختيارية ومعطلة حتى تفعّلها بنفسك. اربط OpenAI أو Anthropic أو Gemini أو Ollama أو أي نقطة وصول متوافقة مع OpenAI واسأل عن إعداداتك. يمكنه قراءة المضيفات والأساطيل والمقتطفات والتنبيهات، ويقترح التغييرات لتوافق عليها بدلًا من تنفيذها بنفسه. لا يمكنه أبدًا الوصول إلى بيانات الدخول أو المستخدمين أو الإعدادات. يستطيع المسؤولون تعطيله للنظام بالكامل، ويمكنك إخفاؤه أثناء الإعداد.
+**RBAC/المشاركة:**
+إنشاء الأدوار ومشاركة المضيفات عبر المستخدمين/الأدوار. يدعم جميع أنواع المصادقة وجميع بروتوكولات المضيف.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**تسجيل الدخول والمستخدمون:**
-حسابات محلية إضافة إلى تسجيل الدخول عبر OIDC وLDAP وGitHub وGoogle، مع التحقق بخطوتين (TOTP) ومفاتيح المرور (WebAuthn) والأجهزة الموثوقة. يستطيع المسؤولون إدارة المستخدمين وربط مجموعات OIDC بالأدوار ورؤية كل الجلسات النشطة على جميع المنصات وإلغاؤها. اربط حسابك المحلي بحساب OIDC، واطّلع على سجل التدقيق لما فعله الجميع.
-
-</td>
-<td width="50%" valign="top">
-
-**الأدوار والمشاركة:**
-أنشئ أدوارًا وشارك المضيفات مع المستخدمين أو الأدوار على أربعة مستويات: الاتصال والعرض والتحرير والإدارة. يعمل مع جميع أنواع المصادقة وجميع البروتوكولات، ويمكنك تجاوز بيانات الدخول المستخدمة لمضيف مشترك.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**التنبيهات:**
-ضع قواعد على مقاييس المضيف مثل المعالج والذاكرة والقرص، وتلقَّ إشعارًا عبر ntfy أو Discord أو webhook عند تفعيلها. اطّلع على التنبيهات النشطة والمنتهية في سجل، وتجاهل ما لا يهمك منها.
-
-</td>
-<td width="50%" valign="top">
-
-**الصفحة الرئيسية:**
-شبكة عناصر تبنيها بنفسك بالسحب والإفلات. هناك عناصر لحالة المضيفات وnping وروابط الخدمات والإشارات المرجعية والبحث والساعات والتقويمات والعد التنازلي والملاحظات وRSS والطقس والصور والإطارات المضمّنة وDocker والأنفاق ورسوم المقاييس وواجهات API الخاصة بك، وحتى طرفية حية.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**المقتطفات والأدوات:**
-احفظ الأوامر التي تستخدمها كثيرًا وشغّلها بنقرة واحدة، مع متغيرات للمضيف ولمدخلاتك الخاصة. شغّل أمرًا واحدًا على كل الطرفيات المفتوحة، وابحث في سجل أوامرك مع الإكمال التلقائي.
-
-</td>
-<td width="50%" valign="top">
-
-**مشاركة الجلسة:**
-شارك جلسة طرفية أو RDP أو VNC أو Telnet مباشرة. أرسل رابطًا يمكن لأي شخص الانضمام إليه دون حساب، أو شارك مع مستخدم Termix محدد، للقراءة فقط أو مع صلاحية الكتابة. يمكن أن تنتهي المشاركات تلقائيًا أو تُلغى في أي وقت، ويمكن إيقافها كليًا أو لكل مضيف على حدة.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**تسجيل الجلسات والسجلات:**
-سجّل جلسات الطرفية وRDP وVNC وشاهدها لاحقًا. نزّل سجلات نصية للجلسة، واطّلع على سجل الاتصال لترى بالضبط ما جرى أثناء الاتصال.
-
-</td>
-<td width="50%" valign="top">
-
 **الاتصالات التسلسلية:**
-تواصل مع الأجهزة التسلسلية مثل الموجّهات والمبدّلات والمتحكمات الدقيقة من المتصفح أو تطبيق سطح المكتب. اضبط معدل الباود وبتات البيانات وبتات التوقف والتماثل. يستخدم واجهة Web Serial في المتصفحات المدعومة، أو خلفية أصلية في تطبيق سطح المكتب.
+الاتصال بالأجهزة التسلسلية (أجهزة التوجيه والمفاتيح والمتحكمات الدقيقة وغيرها) مباشرة من المتصفح أو تطبيق سطح المكتب. ضبط معدل نقل البيانات وبتات البيانات وبتات التوقف والتكافؤ. يستخدم Web Serial API في المتصفحات المدعومة أو خلفية أصلية في تطبيق Electron.
+
+</td>
+<td width="50%" valign="top">
+
+**التنبيهات:**
+ضبط قواعد تنبيه قائمة على الحدود لمقاييس المضيف (المعالج والذاكرة والقرص وغيرها) والحصول على إشعارات عبر ntfy أو webhooks عند إطلاقها. عرض التنبيهات النشطة والمحلولة في سجل التاريخ.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Tailscale:**
-اسحب الأجهزة من شبكة tailnet لإضافتها كمضيفات ببضع نقرات، واتصل عبر Tailscale SSH لتتولى قوائم صلاحيات tailnet أمر الوصول دون تخزين بيانات دخول. يعمل أيضًا مع Headscale ونقاط الوصول المخصصة.
+**الصفحة الرئيسية:**
+صفحة رئيسية قابلة للتخصيص بالكامل مع شبكة أدوات قابلة للسحب والإفلات. أضف أدوات لحالة المضيف وروابط الخدمات والساعات والملاحظات وخلاصات RSS والطقس وحاويات Docker ومخططات مقاييس المضيف والطرفيات المضمنة والإطارات المضمنة وأكثر.
 
 </td>
 <td width="50%" valign="top">
 
-**Proxmox:**
-استورد المضيفات مباشرة من نسخة Proxmox، وتابع إحصاءات العقد والأنظمة الضيفة، بما فيها المعالج والذاكرة والتخزين، في تبويب خاص بها.
+**تشفير قاعدة البيانات:**
+يُخزَّن الخادم الخلفي كملفات قاعدة بيانات SQLite مشفرة. اطلع على [الوثائق](https://docs.termix.site/security) لمزيد من المعلومات.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**مساحات العمل وعلامات التبويب:**
-احفظ مجموعة من علامات التبويب بتقسيمها، وأعد فتحها كلها بنقرة واحدة. يتذكر Termix أيضًا جلستك الأخيرة، فتعود علامات التبويب بعد التحديث وعلى الأجهزة الأخرى.
+**الرسم البياني للشبكة:**
+تخصيص لوحة التحكم لتصور مختبرك المنزلي بناءً على اتصالات SSH مع دعم الحالة.
 
 </td>
 <td width="50%" valign="top">
 
-**إعداد موجَّه:**
-إعداد قصير يرشدك إلى اختيار نمط الواجهة والسمة والميزات التي تريدها وأول مضيف لك. يخفي الوضع البسيط ما لا تستخدمه، ويمكنك إعادة الإعداد أو تغيير النمط في أي وقت.
+**أدوات SSH:**
+إنشاء مقتطفات أوامر قابلة لإعادة الاستخدام تُنفَّذ بنقرة واحدة. تشغيل أمر واحد في وقت واحد عبر عدة طرفيات مفتوحة.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**تطبيق سطح المكتب المستقل والمزامنة:**
-يعمل تطبيق سطح المكتب بمفرده بخلفية وقاعدة بيانات محلية، دون حاجة إلى خادم. يمكنك أيضًا ربطه بخادم Termix لمزامنة المضيفات وبيانات الدخول والمقتطفات وغيرها في الاتجاهين، واختيار ما إذا كانت الاتصالات تبدأ من جهازك أم عبر الخادم.
-
-</td>
-<td width="50%" valign="top">
-
-**سطر الأوامر:**
-أداة `termix` لسطر الأوامر تعمل في الطرفية وفي سكربتاتك. افتح الطرفيات، ونفّذ أمرًا على مضيف واحد أو على أسطول كامل، وانقل الملفات عبر SFTP، وأدر المضيفات والمقتطفات وبيانات الدخول. ثبّتها عبر `npm install -g @termix-cli/cli` أو استخدم ملفًا تنفيذيًا مستقلًا. راجع [وثائق سطر الأوامر](https://docs.termix.site/cli).
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**الأمان:**
-تُشفَّر كلمات المرور والمفاتيح والأسرار الأخرى لكل مستخدم على حدة، ويمكن تشفير ملفات قاعدة البيانات نفسها على القرص. راجع [الوثائق](https://docs.termix.site/security) لمعرفة آلية العمل.
+**علامات التبويب الدائمة:**
+تبقى جلسات SSH وعلامات التبويب مفتوحة عبر الأجهزة/التحديثات إذا تم تفعيلها في ملف تعريف المستخدم.
 
 </td>
 <td width="50%" valign="top">
 
 **اللغات:**
-نحو 30 لغة مدمجة، تُدار عبر [Crowdin](https://docs.termix.site/translations).
+دعم مدمج لحوالي 30 لغة (تُدار بواسطة [Crowdin](https://docs.termix.site/translations)).
 
 </td>
 </tr>
@@ -251,43 +195,40 @@ RDP وVNC وTelnet داخل المتصفح، في علامات تبويب وشا
 
 <br />
 
-<details dir="rtl">
-<summary><b>ميزات أخرى</b></summary>
+<details>
+<summary><b>المزيد من الميزات</b></summary>
 <br />
 
-- **لوحة المعلومات** - خوادمك في لمحة واحدة، ببطاقات ترتّبها بنفسك
-- **رسم الشبكة** - مختبرك المنزلي مرسومًا انطلاقًا من مضيفاتك، مع الحالة لحظيًا
-- **مراقب tmux** - تصفح جلسات tmux ونوافذه ولوحاته، مع معاينة وبحث
-- **مفاتيح API** - مفاتيح خاصة بكل مستخدم لها تاريخ انتهاء، للسكربتات وأنظمة CI
-- **التصدير والاستيراد** - انقل المضيفات وبيانات الدخول وبيانات مدير الملفات إلى الداخل والخارج
-- **SSL تلقائي** - تُنشأ الشهادات وتُجدَّد نيابة عنك، مع إعادة التوجيه إلى HTTPS، أو استخدم شهاداتك الخاصة
-- **قواعد البيانات** - SQLite افتراضيًا، مع دعم PostgreSQL وMySQL أيضًا
-- **واجهة حديثة** - واجهة React أنيقة تعمل على سطح المكتب والهاتف، بسمات مثل الفاتح والداكن وDracula. يمكن فتح أي اتصال بملء الشاشة من رابط
-- **لوحة الأوامر** - اضغط مفتاح Shift الأيسر مرتين للانتقال إلى مضيف من لوحة المفاتيح
-- **اختصارات لوحة المفاتيح** - التنقل بين علامات التبويب وإغلاقها وغير ذلك، وكلها قابلة لإعادة التعيين
-- **Wake-on-LAN** - أيقظ جهازًا من Termix أو من خطوة في الأتمتة
-- **مصادقة الوكيل الموثوق** - دع وكيلًا عكسيًا يتولى تسجيل الدخول ويمرّر المستخدم
-- **SSH بإمكانات واسعة** - مضيفات وسيطة وWarpgate وطلبات TOTP وSOCKS5 والتحقق من مفاتيح المضيف والتعبئة التلقائية لكلمات المرور و[OPKSSH](https://github.com/openpubkey/opkssh) وtmux وport knocking وسجلات الطرفية وتمرير الوكيل ووكيل SSH من Bitwarden وتوقيع SSH عبر HashiCorp Vault وغيرها
-- **Termix ID** - نسخة مدمجة على غرار sshid.io. احجز معرّفًا، وانشر مفاتيحك العامة على رابط محلِّل، وأصدر شهادات SSH من سلطة التصديق المدمجة
+- **لوحة التحكم** - عرض معلومات الخادم بنظرة واحدة على لوحة التحكم
+- **مفاتيح API** - إنشاء مفاتيح API محددة النطاق للمستخدم مع تواريخ انتهاء صلاحية للاستخدام في الأتمتة/CI
+- **تصدير/استيراد البيانات** - تصدير واستيراد مضيفات SSH وبيانات الاعتماد وبيانات مدير الملفات
+- **إعداد SSL تلقائي** - إنشاء وإدارة شهادات SSL مدمجة مع إعادة التوجيه إلى HTTPS
+- **واجهة مستخدم حديثة** - واجهة نظيفة متوافقة مع سطح المكتب والهاتف المحمول مبنية بـ React و Tailwind CSS و Shadcn. الاختيار بين العديد من سمات واجهة المستخدم بما في ذلك الفاتح والداكن و Dracula وغيرها. استخدام مسارات URL لفتح أي اتصال في وضع ملء الشاشة.
+- **سجل الأوامر** - الإكمال التلقائي وعرض أوامر SSH التي تم تنفيذها سابقاً
+- **الاتصال السريع** - الاتصال بخادم دون الحاجة إلى حفظ بيانات الاتصال
+- **لوحة الأوامر** - اضغط مرتين على Shift الأيسر للوصول السريع إلى اتصالات SSH باستخدام لوحة المفاتيح
+- **تكامل Proxmox** - إضافة المضيفات تلقائياً إلى Termix من نسخة Proxmox الخاصة بك
+- **ميزات SSH الغنية** - دعم مضيفات القفز، Warpgate، الاتصالات المبنية على TOTP، SOCKS5، التحقق من مفتاح المضيف، الملء التلقائي لكلمة المرور، [OPKSSH](https://github.com/openpubkey/opkssh)، tmux، port knocking، تسجيل الطرفية، إعادة توجيه وكيل SSH، وكيل Bitwarden SSH، توقيع SSH عبر HashiCorp Vault، وغيرها.
+- **Termix ID** - مكافئ لـ sshid.io مدمج في Termix. احصل على اسم مستخدم، انشر مفاتيح SSH العامة الخاصة بك على رابط محلل (resolver URL)، واستخدم هيئة إصدار شهادات (CA) مدمجة لإصدار شهادات SSH.
 
 </details>
 
 <br />
 
-## المنصات المدعومة
+## دعم المنصات
 
 <table align="center">
 <tr>
 <th align="center">المنصة</th>
-<th align="center">طريقة التوزيع</th>
+<th align="center">التوزيع</th>
 </tr>
 <tr>
 <td align="center"><b>Web</b></td>
-<td>أي متصفح حديث (Chrome وSafari وFirefox) · يدعم PWA</td>
+<td>أي متصفح حديث (Chrome، Safari، Firefox) · دعم PWA</td>
 </tr>
 <tr>
 <td align="center"><b>Windows</b> <sub>x64/ia32</sub></td>
-<td>نسخة محمولة · مثبّت MSI · Chocolatey</td>
+<td>نسخة محمولة · مثبت MSI · Chocolatey</td>
 </tr>
 <tr>
 <td align="center"><b>Linux</b> <sub>x64/ia32</sub></td>
@@ -311,9 +252,9 @@ RDP وVNC وTelnet داخل المتصفح، في علامات تبويب وشا
 
 ## التثبيت
 
-راجع [وثائق Termix](https://docs.termix.site/install) للاطلاع على تعليمات التثبيت الكاملة لجميع المنصات.
+قم بزيارة [وثائق](https://docs.termix.site/install) Termix للحصول على تعليمات التثبيت الكاملة عبر جميع المنصات.
 
-مثال على ملف Docker Compose (يمكنك حذف `guacd` والشبكة إذا كنت لا تنوي استخدام سطح المكتب البعيد):
+نموذج ملف Docker Compose (يمكنك حذف `guacd` والشبكة إذا كنت لا تخطط لاستخدام ميزات سطح المكتب البعيد):
 
 ```yaml
 services:
@@ -350,45 +291,19 @@ networks:
     driver: bridge
 ```
 
-### سطر الأوامر
-
-يوفر Termix أيضًا أداة سطر أوامر، لتدير خوادمك من الطرفية وتستخدم Termix داخل سكربتاتك.
-
-```bash
-npm install -g @termix-cli/cli
-termix login --url https://termix.example.com
-termix ssh 1
-```
-
-تستطيع فتح الطرفيات، وتنفيذ أمر على مضيف واحد أو على أسطول كامل، ونقل الملفات عبر SFTP، وإدارة المضيفات والمقتطفات وبيانات الدخول. الوثائق الكاملة على [docs.termix.site/cli](https://docs.termix.site/cli).
-
-### الاستضافة السحابية
-
-يمكنك تشغيل خادم Termix على VPS بدلًا من داخل شبكتك. إذا كان Termix يعمل داخل الشبكة التي يديرها، فأي عطل سيأخذه معه، تحديدًا حين تحتاج إليه لإصلاح الأمور. تشغيله في الخارج يبقيه متاحًا، ويمنحك عنوان IP ثابتًا، ويتيح لك الدخول من أي مكان دون VPN أو فتح منافذ.
-
-ترعى [GINERNET](https://docs.termix.site/install/ginernet) مشروع Termix، وتتضمن الوثائق دليلًا خطوة بخطوة للنشر على منصة الخوادم الافتراضية الخاصة بهم.
-
-<br />
-
-## بيانات الاستخدام
-
-يرسل Termix إشارة صغيرة مجهولة مرة واحدة يوميًا، لأعرف عدد النسخ العاملة والميزات المستخدمة فعلًا. تحتوي على معرّف عشوائي للنسخة، وعدد المستخدمين والمضيفات لديك، وإصدار التطبيق، والميزات التي استُخدمت خلال آخر 24 ساعة (الطرفية ومدير الملفات والأنفاق وdocker وغيرها). ولا تحتوي أبدًا على أسماء مستخدمين أو أسماء مضيفات أو عناوين IP أو بيانات دخول أو أي شيء يعرّف بك أو بخوادمك.
-
-وهي مفعّلة افتراضيًا. يمكنك إيقافها من إعدادات المسؤول ضمن قسم عام، أو ضبط `ENABLE_TELEMETRY=false` قبل تشغيل Termix أصلًا.
-
 <br />
 
 ## التبرع
 
-Termix مجاني ومفتوح المصدر، بلا اشتراكات ولا خطط مدفوعة. إذا كان مفيدًا لك، فكّر في التبرع للمساعدة في تغطية الخوادم والنطاقات ووقت التطوير. تموّل التبرعات أيضًا وقت البحث والتعلّم اللازم لبناء ميزات مثل SAML وKubernetes ودعم الوكلاء. تابع التقدم وتبرع من الرابط أدناه.
+Termix مجاني ومفتوح المصدر بدون اشتراكات أو خطط مدفوعة. إذا وجدته مفيدًا، فكّر في التبرع للمساعدة في تغطية تكاليف الخادم والنطاقات ووقت التطوير. تساعد التبرعات أيضاً في تمويل الوقت اللازم للبحث وتعلم ما هو مطلوب لبناء ميزات مثل SAML و Kubernetes ودعم الوكلاء (Agent). تابع التقدم وتبرع أدناه.
 
-[تبرّع](https://donate.termix.site/)
+[تبرع](https://donate.termix.site/)
 
 <br />
 
 ## الرعاة
 
-هل تهتم بمساحة إعلانية مدفوعة لدعم التطوير؟ راسلنا على [mail@termix.site](mailto:mail@termix.site).
+هل تريد إعلاناً مدفوعاً لدعم التطوير؟ راسلنا عبر البريد الإلكتروني [mail@termix.site](mailto:mail@termix.site).
 
 <div align="center">
 
@@ -410,6 +325,10 @@ Termix مجاني ومفتوح المصدر، بلا اشتراكات ولا خ
   <img src="https://sirv.sirv.com/website/screenshots/cloudflare/cloudflare-logo.png?w=300" height="40" alt="Cloudflare" />
 </a>
 &nbsp;&nbsp;&nbsp;
+<a href="https://tailscale.com/">
+  <img src="https://drive.google.com/uc?export=view&id=1lIxkJuX6M23bW-2FElhT0rQieTrzaVSL" height="40" alt="Tailscale" />
+</a>
+&nbsp;&nbsp;&nbsp;
 <a href="https://akamai.com/">
   <img src="https://upload.wikimedia.org/wikipedia/commons/8/8b/Akamai_logo.svg" height="40" alt="Akamai" />
 </a>
@@ -421,17 +340,14 @@ Termix مجاني ومفتوح المصدر، بلا اشتراكات ولا خ
 <a href="https://rackgenius.com/">
   <img src="https://rackgenius.com/rackgenius-logo.png" height="40" alt="Rack Genius" />
 </a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://ginernet.com/">
-  <img src="https://ginernet.com/img/logo-web.png" height="40" alt="Ginernet" />
-</a>
+
 </div>
 
 <br />
 
 ## الدعم
 
-تحتاج مساعدة أو تريد طلب ميزة؟ افتح [مشكلة جديدة](https://github.com/Termix-SSH/Support/issues) واذكر أكبر قدر ممكن من التفاصيل، بالإنجليزية إن أمكن. يمكنك أيضًا السؤال في قناة الدعم على [Discord](https://discord.gg/jVQGdvHDrf)، وإن كانت الردود هناك قد تتأخر.
+إذا كنت بحاجة إلى مساعدة أو ترغب في طلب ميزة لـ Termix، قم بزيارة صفحة [المشكلات](https://github.com/Termix-SSH/Support/issues)، وسجل الدخول، واضغط على `New Issue`. يرجى أن تكون مفصلاً قدر الإمكان في مشكلتك، ويُفضَّل كتابتها باللغة الإنجليزية. يمكنك أيضاً الانضمام إلى خادم [Discord](https://discord.gg/jVQGdvHDrf) وزيارة قناة الدعم، ومع ذلك قد تكون أوقات الاستجابة أطول.
 
 <br />
 
@@ -443,7 +359,7 @@ Termix مجاني ومفتوح المصدر، بلا اشتراكات ولا خ
 
 [![YouTube](../repo-images/YouTube.png)](https://www.youtube.com/@TermixSSH/videos)
 
-<sub>شاهد عروض التحديثات على YouTube</sub>
+<sub>شاهد نظرة عامة على التحديثات على YouTube</sub>
 
 <br />
 <br />
@@ -483,7 +399,7 @@ Termix مجاني ومفتوح المصدر، بلا اشتراكات ولا خ
 </tr>
 </table>
 
-<sub>قد تكون بعض المقاطع والصور قديمة أو لا تعرض الميزات على أفضل وجه.</sub>
+<sub>قد تكون بعض مقاطع الفيديو والصور قديمة أو قد لا تعرض الميزات بشكل مثالي.</sub>
 
 </div>
 
@@ -491,10 +407,10 @@ Termix مجاني ومفتوح المصدر، بلا اشتراكات ولا خ
 
 ## الميزات المخططة
 
-جميع الميزات المخططة موجودة في [Projects](https://github.com/orgs/Termix-SSH/projects/5). إذا أردت المساهمة، راجع [Contributing](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md).
+راجع [المشاريع](https://github.com/orgs/Termix-SSH/projects/5) لعرض جميع الميزات المخططة. إذا كنت تتطلع للمساهمة، راجع [المساهمة](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md).
 
 <br />
 
 ## الترخيص
 
-يوزَّع بموجب ترخيص Apache الإصدار 2.0. راجع ملف `LICENSE` لمزيد من المعلومات.
+موزع بموجب رخصة Apache License الإصدار 2.0. راجع ملف `LICENSE` لمزيد من المعلومات.

docs/readme/README-CN.md

@@ -4,7 +4,7 @@
 
 <h1>Termix</h1>
 
-<p>自托管服务器管理，从 SSH 和远程桌面到自动化</p>
+<p>自托管 SSH 管理与远程桌面访问平台</p>
 
 <p>
   <a href="../README.md">English</a> ·
@@ -58,7 +58,7 @@ Termix 免费且开源。如果您觉得它有用，请考虑[捐赠](https://do
 
 ## 概览
 
-Termix 是一个免费、开源、自托管的服务器管理平台。它把 SSH 终端、远程桌面（RDP、VNC、Telnet）、文件传输、隧道、Docker、指标和自动化集中在一个地方，支持网页端、桌面端和移动端。它是 Termius 的自托管替代品，并且永久免费。
+Termix 是一个开源、永久免费、自托管的一体化服务器管理平台。它提供了一个多平台解决方案，通过一个直观的界面管理你的服务器和基础设施。Termix 提供 SSH 终端访问、远程桌面控制（RDP、VNC、Telnet）、SSH 隧道功能、远程文件管理以及许多其他工具。Termix 是适用于所有平台的完美免费自托管 Termius 替代品。
 
 <br />
 
@@ -68,42 +68,42 @@ Termix 是一个免费、开源、自托管的服务器管理平台。它把 SSH
 <tr>
 <td width="50%" valign="top">
 
-**SSH 终端:**
-功能齐全的终端，配有类似浏览器的标签页和分屏，最多同时显示 6 个面板。可以选择主题、字体和配色。每个会话上方都有一个工具栏，显示实时的 CPU、内存和磁盘，并提供指向该主机文件、Docker、隧道和指标的快捷入口。
+**SSH 终端访问:**
+功能齐全的终端，支持分屏（最多 4 个面板），并配有类似浏览器的标签系统。包括对自定义终端的支持，如常用的终端主题、字体和其他组件。
 
 </td>
 <td width="50%" valign="top">
 
-**远程桌面:**
-在浏览器中使用 RDP、VNC 和 Telnet，和其他会话一样支持标签页和分屏。包含 RDP 驱动器的文件浏览器和拖放上传。在 Windows 桌面端，你还可以用原生 RDP 客户端打开主机。
+**远程桌面访问:**
+通过浏览器支持 RDP、VNC 和 Telnet，具有完整的自定义和分屏功能。
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**SSH 隧道:**
-支持本地、远程和动态 SOCKS 转发，可自动重连并进行健康检查。桌面端的客户端到服务器隧道保存在本机，你也可以把预设保存到服务器，以便迁移到另一台客户端。
+**SSH 隧道管理:**
+创建和管理具有自动重连和健康监测功能的服务器间 SSH 隧道，支持本地、远程或动态 SOCKS 转发。桌面客户端到服务器的隧道设置按桌面安装本地存储，可选的 C2S 预设快照可保存到服务器、重命名、加载或删除，以便在客户端之间迁移本地隧道配置。
 
 </td>
 <td width="50%" valign="top">
 
-**文件管理器:**
-通过 SFTP 浏览、编辑、上传、下载、重命名、移动和删除文件，支持 sudo。可以查看和编辑代码、图片、音频和视频。文件可以直接从一台服务器复制到另一台，系统会自动选择最快的路径并校验传输完整性。
+**远程文件管理器:**
+直接在远程服务器上管理文件，支持查看和编辑代码、图像、音频和视频。支持通过 sudo 无缝上传、下载、重命名、删除和移动文件。包括支持在服务器之间移动文件。
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Docker 和 Podman:**
-启动、停止、暂停和删除容器，查看它们的状态，并在容器内打开一个终端。同时支持 Docker 和 Podman。它不是要取代 Portainer 或 Dockge，只是用来管理你已有的容器。
+**Docker 和 Podman 管理:**
+启动、停止、暂停、移除容器。查看容器统计信息。通过 docker exec 终端控制容器。同时支持 Docker 和 Podman 作为容器运行时。它的初衷不是取代 Portainer 或 Dockge，而是为了比直接创建容器更简单地管理它们。
 
 </td>
 <td width="50%" valign="top">
 
-**主机管理:**
-用标签和可命名、可配色的嵌套文件夹来整理主机。在多台主机之间复用已保存的凭据，自动部署 SSH 密钥，把主机归到父主机下，批量编辑和导出，还可以用快速连接处理那些不想保存的一次性连接。
+**SSH 主机管理器:**
+通过标签和文件夹（支持文件夹自定义和嵌套文件夹）保存、组织和管理您的 SSH 连接，轻松保存可重用的登录信息，并能自动化部署 SSH 密钥。
 
 </td>
 </tr>
@@ -111,139 +111,83 @@ Termix 是一个免费、开源、自托管的服务器管理平台。它把 SSH
 <td width="50%" valign="top">
 
 **主机指标:**
-在大多数 Linux 服务器上查看 CPU、内存、磁盘、网络、温度、运行时间、进程、端口、登录记录和系统信息，并附带历史曲线图。管理卡片让你无需离开 Termix 就能处理服务、定时任务、软件包、用户、防火墙规则、WireGuard、Tailscale、SSL 证书、日志和健康检查。
+在大多数基于 Linux 的服务器上查看 CPU、内存、磁盘使用情况、网络、运行时间、系统信息、防火墙、端口监控、日志查看器、用户/权限、证书等更多信息。包括时间序列历史图表和支持 ntfy 与 webhook 的阈值告警。
 
 </td>
 <td width="50%" valign="top">
 
-**自动化:**
-先选一个触发条件，再决定要做什么。触发条件包括指标超过阈值、主机上线或下线、健康检查状态变化、定时计划、容器事件，或者一个传入的 Webhook。步骤可以执行命令和代码片段、控制容器和隧道、唤醒主机、调用某个网址、等待、按条件分支、运行另一个自动化，并通过 ntfy、Discord 或 Webhook 通知你。测试运行让你先安全地试一遍。
+**用户认证:**
+安全的用户管理，具有管理员控制（可编辑其他用户信息）和 OIDC/LDAP/SSO（带访问控制）、2FA (TOTP) 以及通行密钥（WebAuthn）支持。查看所有平台上的活动用户会话并撤销权限。将您的 OIDC/本地账户链接在一起。查看所有用户操作的审计日志。
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**机群:**
-通过手动挑选或标签规则把主机编成一个机群，新主机可以自动加入。一次在所有主机上执行同一条命令，向全部主机推送和拉取文件，安装软件包，并收集系统、内核、架构和运行时间的清单。
+**Tailscale 集成:**
+列出您 Tailscale 网络中的设备以快速添加为主机，并使用 Tailscale SSH 作为身份验证方式，让您的 Tailscale ACL 处理授权而无需存储凭据。
 
 </td>
 <td width="50%" valign="top">
 
-**AI 助手:**
-可选功能，默认关闭，需要你手动开启。接入 OpenAI、Anthropic、Gemini、Ollama 或任何兼容 OpenAI 的接口，向它询问你的配置。它可以读取主机、机群、代码片段和告警，并把改动作为建议提交给你确认，而不会自行修改。它永远无法接触凭据、用户和设置。管理员可以对整个实例关闭它，你也可以在初始设置时把它隐藏。
+**RBAC/共享:**
+创建角色并在用户/角色之间共享主机。支持所有认证类型和所有主机协议。
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**登录与用户:**
-支持本地账户，以及 OIDC、LDAP、GitHub 和 Google 登录，还有两步验证（TOTP）、通行密钥（WebAuthn）和受信任设备。管理员可以管理用户、把 OIDC 群组映射到角色、查看所有平台上的活动会话并将其吊销。你可以把本地账户和 OIDC 账户关联起来，并查看记录所有人操作的审计日志。
-
-</td>
-<td width="50%" valign="top">
-
-**角色与共享:**
-创建角色，并按四个级别把主机共享给用户或角色：连接、查看、编辑和管理。适用于所有认证方式和所有协议，并且可以覆盖共享主机所使用的凭据。
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**告警:**
-为 CPU、内存、磁盘等主机指标设置规则，触发时通过 ntfy、Discord 或 Webhook 通知你。在历史记录中查看正在触发和已恢复的告警，并忽略你不关心的那些。
-
-</td>
-<td width="50%" valign="top">
-
-**主页:**
-一个由你自己搭建的拖放小组件网格。小组件包括主机状态、Ping、服务链接、书签、搜索、时钟、日历、倒计时、便签、RSS、天气、图片、内嵌网页、Docker、隧道、指标图表、自定义 API，甚至还有一个实时终端。
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**代码片段与工具:**
-保存常用命令，一键执行，并支持主机变量和自定义输入。可以在所有已打开的终端中同时运行一条命令，也可以带自动补全地搜索命令历史。
-
-</td>
-<td width="50%" valign="top">
-
-**会话共享:**
-实时共享终端、RDP、VNC 或 Telnet 会话。可以发送一个无需账户即可加入的链接，也可以共享给指定的 Termix 用户，并选择只读或可读写。共享可以自动过期或随时撤销，也可以全局或按主机关闭。
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**会话录制与日志:**
-录制终端、RDP 和 VNC 会话，之后可以回放。可以下载会话的纯文本日志，也可以查看连接日志，了解连接过程中究竟发生了什么。
-
-</td>
-<td width="50%" valign="top">
-
 **串口连接:**
-从浏览器或桌面应用连接路由器、交换机和单片机等串口设备。可设置波特率、数据位、停止位和校验位。在支持的浏览器中使用 Web Serial API，在桌面应用中使用原生后端。
+直接从浏览器或桌面应用连接到串口设备（路由器、交换机、微控制器等）。配置波特率、数据位、停止位和奇偶校验。在支持的浏览器中使用 Web Serial API，或在 Electron 应用中使用原生后端。
+
+</td>
+<td width="50%" valign="top">
+
+**告警:**
+为主机指标（CPU、内存、磁盘等）设置基于阈值的告警规则，并通过 ntfy 或 webhook 接收触发通知。在历史日志中查看触发和已解决的告警。
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Tailscale:**
-从你的 tailnet 中拉取设备，点几下就能把它们添加为主机，并使用 Tailscale SSH 连接，由 tailnet ACL 负责访问控制，无需保存任何凭据。也支持 Headscale 和自定义接口地址。
+**主页:**
+具有拖放小组件网格的完全可定制主页。添加主机状态、服务链接、时钟、笔记、RSS 订阅、天气、Docker 容器、主机指标图表、嵌入式终端、iframe 等小组件。
 
 </td>
 <td width="50%" valign="top">
 
-**Proxmox:**
-直接从 Proxmox 实例导入主机，并在专属标签页中查看节点和虚拟机的状态，包括 CPU、内存和存储。
+**数据库加密:**
+后端存储为加密的 SQLite 数据库文件。查看[文档](https://docs.termix.site/security)了解更多。
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**工作区与标签页:**
-保存一组标签页及其分屏布局，一键就能把整套重新打开。Termix 还会记住你上次的会话，所以刷新页面或换设备后标签页都会回来。
+**网络图:**
+自定义您的仪表板，根据您的 SSH 连接可视化您的家庭实验室，并支持状态监测。
 
 </td>
 <td width="50%" valign="top">
 
-**引导设置:**
-一个简短的引导流程会带你选择界面预设、主题、需要的功能，以及第一台主机。简洁模式会隐藏你用不到的东西，你随时可以重新运行引导或切换预设。
+**SSH 工具:**
+创建可重用的命令片段，只需点击一下即可执行。在多个打开的终端中同时运行一个命令。
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**桌面独立运行与同步:**
-桌面应用可以完全独立运行，自带本地后端和数据库，不需要服务器。你也可以把它连到 Termix 服务器，双向同步主机、凭据、代码片段等内容，并选择连接是在本地发起还是通过服务器发起。
+**持久标签页:**
+如果在用户个人资料中启用，SSH 会话和标签页将在设备/刷新后保持打开状态。
 
 </td>
 <td width="50%" valign="top">
 
-**命令行工具:**
-`termix` 命令行工具，可用于你的终端和脚本。打开终端、在单台主机或整个机群上执行命令、通过 SFTP 传输文件，以及管理主机、代码片段和凭据。用 `npm install -g @termix-cli/cli` 安装，或者直接下载独立的可执行文件。详见 [CLI 文档](https://docs.termix.site/cli)。
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**安全:**
-密码、密钥和其他机密按用户加密，数据库文件本身也可以在磁盘上加密。具体原理请查看[文档](https://docs.termix.site/security)。
-
-</td>
-<td width="50%" valign="top">
-
-**多语言:**
-内置约 30 种语言，通过 [Crowdin](https://docs.termix.site/translations) 管理。
+**语言:**
+内置支持约 30 种语言（由 [Crowdin](https://docs.termix.site/translations) 管理）。
 
 </td>
 </tr>
@@ -255,20 +199,17 @@ Termix 是一个免费、开源、自托管的服务器管理平台。它把 SSH
 <summary><b>更多功能</b></summary>
 <br />
 
-- **仪表盘** - 一眼看清你的服务器，卡片由你自己排布
-- **网络拓扑图** - 根据你的主机绘制出你的家庭实验室，并显示实时状态
-- **Tmux 监视器** - 浏览 tmux 的会话、窗口和面板，支持预览和搜索
-- **API 密钥** - 面向用户的密钥，带有效期，可用于脚本和 CI
-- **导出与导入** - 把主机、凭据和文件管理器数据导入导出
-- **自动 SSL** - 自动签发和续期证书，并配置 HTTPS 跳转，也可以使用你自己的证书
-- **数据库** - 默认使用 SQLite，同时支持 PostgreSQL 和 MySQL
-- **现代界面** - 简洁的 React 界面，桌面和移动端都适用，提供浅色、深色和 Dracula 等主题。任何连接都能通过网址全屏打开
-- **命令面板** - 双击左 Shift，用键盘直接跳到某台主机
-- **键盘快捷键** - 在标签页之间切换、关闭标签页等，全部可以重新绑定
-- **网络唤醒** - 从 Termix 或自动化步骤中唤醒一台机器
-- **受信任代理认证** - 由反向代理完成登录，并把用户信息传递进来
-- **丰富的 SSH 功能** - 跳板机、Warpgate、TOTP 验证、SOCKS5、主机密钥验证、密码自动填充、[OPKSSH](https://github.com/openpubkey/opkssh)、tmux、端口敲门、终端日志、代理转发、Bitwarden SSH 代理、HashiCorp Vault SSH 签名等等
-- **Termix ID** - 内置的 sshid.io 式功能。认领一个用户名，在解析地址上发布你的公钥，并用内置 CA 签发 SSH 证书
+- **仪表板** - 在仪表板上一目了然地查看服务器信息
+- **API 密钥** - 创建带有到期日期的用户范围 API 密钥，用于自动化/CI
+- **数据导出/导入** - 导出和导入 SSH 主机、凭据和文件管理器数据
+- **自动 SSL 设置** - 内置 SSL 证书生成和管理，支持 HTTPS 重定向
+- **现代 UI** - 使用 React、Tailwind CSS 和 Shadcn 构建的整洁的桌面/移动友好界面。有多种 UI 主题可选，包括浅色、深色、Dracula 等。使用 URL 路由全屏打开任何连接。
+- **命令历史** - 自动完成并查看之前运行过的 SSH 命令
+- **快速连接** - 无需保存连接数据即可连接到服务器
+- **命令面板** - 双击左 Shift 键即可通过键盘快速访问 SSH 连接
+- **Proxmox 集成** - 从您的 Proxmox 实例自动将主机添加到 Termix
+- **丰富的 SSH 功能** - 支持跳转主机、Warpgate、基于 TOTP 的连接、SOCKS5、主机密钥验证、密码自动填充、[OPKSSH](https://github.com/openpubkey/opkssh)、tmux、端口敲击、终端日志记录、SSH 代理转发、Bitwarden SSH 代理、HashiCorp Vault SSH 签名等
+- **Termix ID** - 内置于 Termix 中的 sshid.io 等效功能。认领一个用户名，在解析 URL 上发布您的公开 SSH 密钥，并使用内置 CA 签发 SSH 证书。
 
 </details>
 
@@ -279,11 +220,11 @@ Termix 是一个免费、开源、自托管的服务器管理平台。它把 SSH
 <table align="center">
 <tr>
 <th align="center">平台</th>
-<th align="center">发行方式</th>
+<th align="center">发行版</th>
 </tr>
 <tr>
 <td align="center"><b>Web</b></td>
-<td>任何现代浏览器（Chrome、Safari、Firefox）· 支持 PWA</td>
+<td>任何现代浏览器（Chrome、Safari、Firefox）· PWA 支持</td>
 </tr>
 <tr>
 <td align="center"><b>Windows</b> <sub>x64/ia32</sub></td>
@@ -311,9 +252,9 @@ Termix 是一个免费、开源、自托管的服务器管理平台。它把 SSH
 
 ## 安装
 
-访问 [Termix 文档](https://docs.termix.site/install) 查看所有平台的完整安装说明。
+访问 [Termix 文档](https://docs.termix.site/install) 了解有关如何在所有平台上安装 Termix 的完整说明。
 
-Docker Compose 示例（如果你不打算使用远程桌面功能，可以省略 `guacd` 和相关网络配置）：
+示例 Docker Compose 文件（如果您不打算使用远程桌面功能，可以省略 `guacd` 和网络部分）：
 
 ```yaml
 services:
@@ -350,37 +291,11 @@ networks:
     driver: bridge
 ```
 
-### 命令行工具
-
-Termix 还提供命令行工具，你可以在终端里管理服务器，也可以把 Termix 用在自己的脚本中。
-
-```bash
-npm install -g @termix-cli/cli
-termix login --url https://termix.example.com
-termix ssh 1
-```
-
-它可以打开终端、在单台主机或整个机群上执行命令、通过 SFTP 传输文件，以及管理主机、代码片段和凭据。完整文档见 [docs.termix.site/cli](https://docs.termix.site/cli)。
-
-### 云端部署
-
-你也可以把 Termix 服务端跑在 VPS 上，而不是自己的内网里。如果 Termix 就运行在它所管理的网络中，一旦网络出问题，Termix 也会跟着一起挂掉，而这恰恰是你最需要它的时候。放在外面运行可以保证它始终可达，还能获得固定 IP，不用 VPN 或端口转发就能从任何地方接入。
-
-[GINERNET](https://docs.termix.site/install/ginernet) 是 Termix 的赞助商，文档里有部署到他们 VPS 平台的分步指南。
-
-<br />
-
-## 遥测
-
-Termix 每天会发送一次匿名的小型统计信息，让我了解有多少实例在运行、哪些功能被用到。内容包括一个随机的实例 ID、你有多少用户和主机、应用版本，以及过去 24 小时内使用了哪些功能（终端、文件管理器、隧道、Docker 等）。它绝不包含用户名、主机名、IP 地址、凭据，或任何能识别你和你服务器的信息。
-
-该功能默认开启。你可以在管理设置的“通用”中关闭它，或者在启动 Termix 之前设置 `ENABLE_TELEMETRY=false`。
-
 <br />
 
 ## 捐赠
 
-Termix 免费且开源，没有订阅也没有付费方案。如果你觉得它有用，可以考虑捐赠，帮忙分担服务器、域名和开发时间的成本。捐赠还能支持研究和学习 SAML、Kubernetes、Agent 等功能所需的时间。可以在下方查看进展并捐赠。
+Termix 免费且开源，没有订阅或付费方案。如果您觉得它有用，请考虑捐赠以帮助支付服务器费用、域名和开发时间。捐赠还有助于资助研究和学习构建 SAML、Kubernetes 和 Agent 支持等功能所需的时间。在下方追踪进度并进行捐赠。
 
 [捐赠](https://donate.termix.site/)
 
@@ -388,7 +303,7 @@ Termix 免费且开源，没有订阅也没有付费方案。如果你觉得它
 
 ## 赞助商
 
-有意通过付费展示位支持开发吗？请发邮件到 [mail@termix.site](mailto:mail@termix.site)。
+有意通过付费展示位置支持开发吗？请发送邮件至 [mail@termix.site](mailto:mail@termix.site)。
 
 <div align="center">
 
@@ -410,6 +325,10 @@ Termix 免费且开源，没有订阅也没有付费方案。如果你觉得它
   <img src="https://sirv.sirv.com/website/screenshots/cloudflare/cloudflare-logo.png?w=300" height="40" alt="Cloudflare" />
 </a>
 &nbsp;&nbsp;&nbsp;
+<a href="https://tailscale.com/">
+  <img src="https://drive.google.com/uc?export=view&id=1lIxkJuX6M23bW-2FElhT0rQieTrzaVSL" height="40" alt="Tailscale" />
+</a>
+&nbsp;&nbsp;&nbsp;
 <a href="https://akamai.com/">
   <img src="https://upload.wikimedia.org/wikipedia/commons/8/8b/Akamai_logo.svg" height="40" alt="Akamai" />
 </a>
@@ -421,17 +340,14 @@ Termix 免费且开源，没有订阅也没有付费方案。如果你觉得它
 <a href="https://rackgenius.com/">
   <img src="https://rackgenius.com/rackgenius-logo.png" height="40" alt="Rack Genius" />
 </a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://ginernet.com/">
-  <img src="https://ginernet.com/img/logo-web.png" height="40" alt="Ginernet" />
-</a>
+
 </div>
 
 <br />
 
 ## 支持
 
-需要帮助或想提功能建议？可以[新建一个 issue](https://github.com/Termix-SSH/Support/issues)，尽量写清楚细节，如果方便请用英文。你也可以在 [Discord](https://discord.gg/jVQGdvHDrf) 的支持频道提问，不过那边回复可能会慢一些。
+如果您需要 Termix 的帮助或想要请求功能，请访问 [Issues](https://github.com/Termix-SSH/Support/issues) 页面，登录并点击 `New Issue`。请尽可能详细地描述您的问题，建议使用英语。您也可以加入 [Discord](https://discord.gg/jVQGdvHDrf) 服务器并访问支持频道，但响应时间可能较长。
 
 <br />
 
@@ -443,7 +359,7 @@ Termix 免费且开源，没有订阅也没有付费方案。如果你觉得它
 
 [![YouTube](../repo-images/YouTube.png)](https://www.youtube.com/@TermixSSH/videos)
 
-<sub>在 YouTube 上观看版本更新介绍</sub>
+<sub>在 YouTube 上观看更新概览</sub>
 
 <br />
 <br />
@@ -483,7 +399,7 @@ Termix 免费且开源，没有订阅也没有付费方案。如果你觉得它
 </tr>
 </table>
 
-<sub>部分视频和图片可能已经过时，或者不能完整展示功能。</sub>
+<sub>某些视频和图像可能已过时，或者可能无法完美展示功能。</sub>
 
 </div>
 
@@ -491,10 +407,10 @@ Termix 免费且开源，没有订阅也没有付费方案。如果你觉得它
 
 ## 计划功能
 
-所有计划中的功能都在 [Projects](https://github.com/orgs/Termix-SSH/projects/5) 里。如果你想参与贡献，请查看[贡献指南](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md)。
+查看 [Projects](https://github.com/orgs/Termix-SSH/projects/5) 了解所有计划功能。如果您想贡献代码，请参阅 [Contributing](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md)。
 
 <br />
 
 ## 许可证
 
-基于 Apache License 2.0 发布。详见 `LICENSE`。
+根据 Apache License Version 2.0 发布。更多信息请参见 `LICENSE`。

docs/readme/README-DE.md

@@ -4,7 +4,7 @@
 
 <h1>Termix</h1>
 
-<p>Selbst gehostete Serververwaltung, von SSH und Remotedesktop bis zu Automatisierungen</p>
+<p>Selbst gehostete SSH-Verwaltung und Remote-Desktop-Zugriff</p>
 
 <p>
   <a href="../README.md">English</a> ·
@@ -37,7 +37,7 @@
 
 <br />
 
-Termix ist kostenlos und quelloffen. Wenn es dir hilft, denk über eine [Spende](https://donate.termix.site/) nach, um Serverkosten und Entwicklungszeit zu decken.
+Termix ist kostenlos und Open Source. Wenn Sie es nützlich finden, erwägen Sie eine [Spende](https://donate.termix.site/), um Serverkosten und Entwicklungszeit zu decken.
 
 <br />
 
@@ -56,9 +56,9 @@ Termix ist kostenlos und quelloffen. Wenn es dir hilft, denk über eine [Spende]
 
 <br />
 
-## Überblick
+## Uberblick
 
-Termix ist eine kostenlose, quelloffene und selbst gehostete Plattform zur Verwaltung deiner Server. Sie bringt SSH-Terminals, Remotedesktops (RDP, VNC, Telnet), Dateiübertragungen, Tunnel, Docker, Metriken und Automatisierungen an einem Ort zusammen, im Browser, auf dem Desktop und auf dem Handy. Eine selbst gehostete Alternative zu Termius, die dauerhaft kostenlos bleibt.
+Termix ist eine quelloffene, dauerhaft kostenlose, selbst gehostete All-in-One-Serververwaltungsplattform. Sie bietet eine plattformubergreifende Losung zur Verwaltung Ihrer Server und Infrastruktur uber eine einzige, intuitive Oberflache. Termix bietet SSH-Terminalzugriff, Remote-Desktop-Steuerung (RDP, VNC, Telnet), SSH-Tunneling-Funktionen, Remote-Dateiverwaltung und viele weitere Werkzeuge. Termix ist die perfekte kostenlose und selbst gehostete Alternative zu Termius, verfugbar fur alle Plattformen.
 
 <br />
 
@@ -68,42 +68,42 @@ Termix ist eine kostenlose, quelloffene und selbst gehostete Plattform zur Verwa
 <tr>
 <td width="50%" valign="top">
 
-**SSH-Terminal:**
-Ein vollwertiges Terminal mit Tabs wie im Browser und geteiltem Bildschirm, bis zu 6 Bereiche gleichzeitig. Thema, Schrift und Farben wählst du selbst. Über jeder Sitzung sitzt eine Leiste mit CPU, Speicher und Festplatte in Echtzeit sowie Verknüpfungen zu Dateien, Docker, Tunneln und Metriken dieses Hosts.
+**SSH-Terminalzugriff:**
+Voll ausgestattetes Terminal mit Split-Screen-Unterstutzung (bis zu 4 Panels) mit einem browserahnlichen Tab-System. Enthalt Unterstutzung fur die Anpassung des Terminals einschliesslich gangiger Terminal-Themes, Schriftarten und anderer Komponenten.
 
 </td>
 <td width="50%" valign="top">
 
-**Remotedesktop:**
-RDP, VNC und Telnet im Browser, in Tabs und geteiltem Bildschirm wie jede andere Sitzung. Mit Dateibrowser für RDP-Laufwerke und Hochladen per Drag-and-drop. Auf dem Windows-Desktop kannst du einen Host auch im nativen RDP-Client öffnen.
+**Remote-Desktop-Zugriff:**
+RDP-, VNC- und Telnet-Unterstutzung uber den Browser mit vollstandiger Anpassung und Split-Screen.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**SSH-Tunnel:**
-Lokale, entfernte und dynamische SOCKS-Weiterleitung mit automatischem Neuverbinden und Statusprüfungen. Client-zu-Server-Tunnel der Desktop-App bleiben auf diesem Rechner, und du kannst Voreinstellungen auf dem Server speichern, um eine Konfiguration auf einen anderen Rechner zu übernehmen.
+**SSH-Tunnelverwaltung:**
+Erstellen und verwalten Sie Server-zu-Server-SSH-Tunnel mit automatischer Wiederverbindung, Gesundheitsuberwachung sowie lokaler, entfernter oder dynamischer SOCKS-Weiterleitung. Desktop-Client-zu-Server-Tunneleinstellungen werden lokal pro Desktop-Installation gespeichert, optionale C2S-Preset-Snapshots konnen auf dem Server gespeichert, umbenannt, geladen oder geloscht werden, wenn Sie eine lokale Tunnelkonfiguration zwischen Clients ubertragen mochten.
 
 </td>
 <td width="50%" valign="top">
 
-**Dateimanager:**
-Dateien über SFTP durchsuchen, bearbeiten, hochladen, herunterladen, umbenennen, verschieben und löschen, auch mit sudo. Code, Bilder, Audio und Video ansehen und bearbeiten. Dateien direkt von einem Server zum anderen kopieren, wobei der schnellste Weg für dich gewählt und die Übertragung auf Fehler geprüft wird.
+**Remote-Dateimanager:**
+Verwalten Sie Dateien direkt auf Remote-Servern mit Unterstutzung fur das Anzeigen und Bearbeiten von Code, Bildern, Audio und Video. Laden Sie Dateien hoch, herunter, benennen Sie sie um, loschen oder verschieben Sie sie nahtlos mit Sudo-Unterstutzung. Enthalt Unterstutzung fur das Verschieben von Dateien von Server zu Server.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Docker und Podman:**
-Container starten, stoppen, pausieren und entfernen, ihre Auslastung ansehen und eine Shell darin öffnen. Funktioniert mit Docker und mit Podman. Es soll Portainer oder Dockge nicht ersetzen, sondern nur die Container verwalten, die du schon hast.
+**Docker- und Podman-Verwaltung:**
+Container starten, stoppen, pausieren, entfernen. Container-Statistiken anzeigen. Container uber Docker-Exec-Terminal steuern. Unterstutzt sowohl Docker als auch Podman als Container-Laufzeitumgebung. Es wurde nicht entwickelt, um Portainer oder Dockge zu ersetzen, sondern um Ihre Container einfach zu verwalten, anstatt sie zu erstellen.
 
 </td>
 <td width="50%" valign="top">
 
-**Hostverwaltung:**
-Hosts mit Tags und verschachtelten Ordnern ordnen, die du benennen und einfärben kannst. Gespeicherte Zugangsdaten für mehrere Hosts wiederverwenden, SSH-Schlüssel automatisch verteilen, Hosts unter einem übergeordneten Host gruppieren, in großen Mengen bearbeiten und exportieren. Für einmalige Verbindungen, die du nicht speichern willst, gibt es Schnellverbindung.
+**SSH-Host-Manager:**
+Speichern, organisieren und verwalten Sie Ihre SSH-Verbindungen mit Tags und Ordnern (Ordneranpassung und verschachtelte Ordner werden unterstutzt) und speichern Sie einfach wiederverwendbare Anmeldeinformationen mit der Moglichkeit, die Bereitstellung von SSH-Schlusseln zu automatisieren.
 
 </td>
 </tr>
@@ -111,139 +111,83 @@ Hosts mit Tags und verschachtelten Ordnern ordnen, die du benennen und einfärbe
 <td width="50%" valign="top">
 
 **Host-Metriken:**
-CPU, Speicher, Festplatte, Netzwerk, Temperatur, Laufzeit, Prozesse, Ports, Anmeldungen und Systeminfos auf den meisten Linux-Servern, mit Verlaufsgrafiken. Über Verwaltungskarten kümmerst du dich um Dienste, Cronjobs, Pakete, Benutzer, Firewallregeln, WireGuard, Tailscale, SSL-Zertifikate, Logs und Statusprüfungen, ohne Termix zu verlassen.
+CPU-, Arbeitsspeicher- und Festplattenauslastung, Netzwerk, Betriebszeit, Systeminformationen, Firewall, Port-Monitor, Log-Viewer, Benutzer/Berechtigungen, Zertifikate und vieles mehr anzeigen, was auf den meisten Linux-basierten Servern funktioniert. Enthalt Zeitreihen-Verlaufsdiagramme und schwellenwertbasierte Warnmeldungen mit ntfy- und Webhook-Unterstutzung.
 
 </td>
 <td width="50%" valign="top">
 
-**Automatisierungen:**
-Wähle einen Auslöser und lege fest, was passieren soll. Auslöser sind unter anderem eine Metrik über einem Schwellwert, ein Host der hoch- oder runtergeht, eine geänderte Statusprüfung, ein Zeitplan, ein Container-Ereignis oder ein eingehender Webhook. Schritte können Befehle und Snippets ausführen, Container und Tunnel steuern, einen Host aufwecken, eine URL aufrufen, warten, sich nach einer Bedingung verzweigen, eine andere Automatisierung starten und dich über ntfy, Discord oder einen Webhook benachrichtigen. Mit Testläufen probierst du alles gefahrlos aus.
+**Benutzerauthentifizierung:**
+Sichere Benutzerverwaltung mit Admin-Kontrollen (kann Informationen anderer Benutzer bearbeiten) und OIDC-/LDAP-/SSO-Unterstutzung (mit Zugriffskontrolle), 2FA (TOTP) und Passkey (WebAuthn)-Unterstutzung. Aktive Benutzersitzungen uber alle Plattformen anzeigen und Berechtigungen widerrufen. OIDC-/Lokale Konten miteinander verknupfen. Audit-Protokoll aller Benutzeraktionen anzeigen.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Flotten:**
-Fasse Hosts zu einer Flotte zusammen, entweder von Hand oder über Tag-Regeln, damit neue Hosts von selbst dazukommen. Führe einen Befehl auf allen Hosts gleichzeitig aus, schiebe und hole Dateien auf allen, installiere Pakete und sammle eine Übersicht über Betriebssystem, Kernel, Architektur und Laufzeit.
+**Tailscale-Integration:**
+Gerate aus Ihrem Tailnet auflisten, um sie schnell als Hosts hinzuzufugen, und mit Tailscale SSH als Authentifizierungsmethode verbinden, sodass Ihre Tailnet-ACLs die Autorisierung ubernehmen, ohne Anmeldedaten speichern zu mussen.
 
 </td>
 <td width="50%" valign="top">
 
-**KI-Assistent:**
-Optional und aus, bis du ihn einschaltest. Verbinde OpenAI, Anthropic, Gemini, Ollama oder einen beliebigen OpenAI-kompatiblen Endpunkt und frag ihn zu deiner Umgebung. Er liest Hosts, Flotten, Snippets und Warnungen und schlägt Änderungen vor, die du bestätigst, statt sie selbst vorzunehmen. An Zugangsdaten, Benutzer und Einstellungen kommt er nie heran. Administratoren können ihn für die ganze Instanz auslassen, und du kannst ihn schon bei der Einrichtung ausblenden.
+**RBAC/Freigabe:**
+Erstellen Sie Rollen und teilen Sie Hosts uber Benutzer/Rollen hinweg. Unterstutzt alle Authentifizierungstypen und alle Host-Protokolle.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Anmeldung und Benutzer:**
-Lokale Konten sowie Anmeldung über OIDC, LDAP, GitHub und Google, dazu Zwei-Faktor-Authentifizierung (TOTP), Passkeys (WebAuthn) und vertrauenswürdige Geräte. Administratoren können Benutzer verwalten, OIDC-Gruppen auf Rollen abbilden, alle aktiven Sitzungen über alle Plattformen hinweg sehen und beenden. Verknüpfe dein lokales Konto mit deinem OIDC-Konto und lies im Prüfprotokoll nach, wer was gemacht hat.
-
-</td>
-<td width="50%" valign="top">
-
-**Rollen und Freigaben:**
-Lege Rollen an und teile Hosts mit Benutzern oder Rollen auf vier Stufen: Verbinden, Ansehen, Bearbeiten und Verwalten. Das funktioniert mit jeder Authentifizierungsart und jedem Protokoll, und du kannst die Zugangsdaten für einen geteilten Host überschreiben.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Warnungen:**
-Lege Regeln für Host-Metriken wie CPU, Speicher und Festplatte fest und lass dich über ntfy, Discord oder einen Webhook benachrichtigen, wenn sie greifen. Sieh dir aktive und wieder behobene Warnungen im Verlauf an und blende aus, was dich nicht interessiert.
-
-</td>
-<td width="50%" valign="top">
-
-**Startseite:**
-Ein Raster aus Widgets, das du selbst per Drag-and-drop zusammenstellst. Widgets für Hoststatus, Pings, Dienstlinks, Lesezeichen, Suche, Uhren, Kalender, Countdowns, Notizen, RSS, Wetter, Bilder, Iframes, Docker, Tunnel, Metrikdiagramme, eigene APIs und sogar ein laufendes Terminal.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Snippets und Werkzeuge:**
-Speichere Befehle, die du oft brauchst, und starte sie mit einem Klick, mit Variablen für den Host und eigene Eingaben. Führe einen Befehl in allen offenen Terminals zugleich aus und durchsuche deinen Befehlsverlauf mit Autovervollständigung.
-
-</td>
-<td width="50%" valign="top">
-
-**Sitzungsfreigabe:**
-Teile eine laufende Terminal-, RDP-, VNC- oder Telnet-Sitzung in Echtzeit. Verschicke einen Link, dem jeder ohne Konto beitreten kann, oder teile mit einem bestimmten Termix-Benutzer, nur lesend oder mit Schreibrechten. Freigaben können von selbst ablaufen oder zurückgezogen werden und lassen sich global oder pro Host abschalten.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Sitzungsaufzeichnung und Protokolle:**
-Zeichne Terminal-, RDP- und VNC-Sitzungen auf und spiel sie später ab. Lade einfache Textprotokolle einer Sitzung herunter und sieh im Verbindungsprotokoll nach, was während einer Verbindung genau passiert ist.
-
-</td>
-<td width="50%" valign="top">
-
 **Serielle Verbindungen:**
-Sprich mit seriellen Geräten wie Routern, Switches und Mikrocontrollern, aus dem Browser oder der Desktop-App. Stelle Baudrate, Datenbits, Stoppbits und Parität ein. Nutzt die Web-Serial-API in passenden Browsern oder ein natives Backend in der Desktop-App.
+Verbinden Sie sich direkt vom Browser oder der Desktop-App aus mit seriellen Geraten (Router, Switches, Mikrocontroller usw.). Konfigurieren Sie Baudrate, Datenbits, Stoppbits und Paritat. Verwendet die Web Serial API in unterstutzten Browsern oder ein natives Backend in der Electron-App.
+
+</td>
+<td width="50%" valign="top">
+
+**Warnmeldungen:**
+Legen Sie schwellenwertbasierte Warnregeln fur Host-Metriken (CPU, Arbeitsspeicher, Festplatte usw.) fest und erhalten Sie Benachrichtigungen uber ntfy oder Webhooks, wenn diese ausgelost werden. Zeigen Sie ausgeloste und aufgeloste Warnmeldungen in einem Verlaufsprotokoll an.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Tailscale:**
-Hol Geräte aus deinem Tailnet, um sie mit ein paar Klicks als Hosts anzulegen, und verbinde dich per Tailscale SSH, damit deine Tailnet-ACLs den Zugriff regeln und keine Zugangsdaten gespeichert werden. Headscale und eigene Endpunkte gehen auch.
+**Startseite:**
+Eine vollstandig anpassbare Startseite mit einem Drag-and-Drop-Widget-Raster. Fugen Sie Widgets fur Hoststatus, Service-Links, Uhren, Notizen, RSS-Feeds, Wetter, Docker-Container, Host-Metrik-Diagramme, eingebettete Terminals, iFrames und mehr hinzu.
 
 </td>
 <td width="50%" valign="top">
 
-**Proxmox:**
-Importiere Hosts direkt aus einer Proxmox-Instanz und beobachte Knoten- und Gastwerte wie CPU, Speicher und Storage in einem eigenen Tab.
+**Datenbankverschlusselung:**
+Backend gespeichert als verschlusselte SQLite-Datenbankdateien. Weitere Informationen in der [Dokumentation](https://docs.termix.site/security).
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Arbeitsbereiche und Tabs:**
-Speichere eine Reihe von Tabs samt Aufteilung und öffne alles mit einem Klick wieder. Termix merkt sich auch deine letzte Sitzung, sodass deine Tabs nach einem Neuladen und auf anderen Geräten wieder da sind.
+**Netzwerkgraph:**
+Passen Sie Ihr Dashboard an, um Ihr Homelab basierend auf Ihren SSH-Verbindungen mit Statusunterstutzung zu visualisieren.
 
 </td>
 <td width="50%" valign="top">
 
-**Geführte Einrichtung:**
-Eine kurze Einrichtung führt dich durch die Wahl einer Oberflächenvorlage, deines Themas, der gewünschten Funktionen und deines ersten Hosts. Der einfache Modus blendet aus, was du nicht nutzt, und du kannst die Einrichtung jederzeit erneut starten oder die Vorlage wechseln.
+**SSH-Werkzeuge:**
+Erstellen Sie wiederverwendbare Befehlsvorlagen, die mit einem einzigen Klick ausgefuhrt werden. Fuhren Sie einen Befehl gleichzeitig in mehreren geoffneten Terminals aus.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Desktop eigenständig und Synchronisierung:**
-Die Desktop-App läuft eigenständig mit lokalem Backend und eigener Datenbank, ganz ohne Server. Du kannst sie auch mit einem Termix-Server verbinden, um Hosts, Zugangsdaten, Snippets und mehr in beide Richtungen abzugleichen, und wählen, ob Verbindungen lokal oder über den Server aufgebaut werden.
-
-</td>
-<td width="50%" valign="top">
-
-**Kommandozeile:**
-Ein `termix`-CLI für deine Shell und deine Skripte. Terminals öffnen, einen Befehl auf einem Host oder einer ganzen Flotte ausführen, Dateien per SFTP verschieben und Hosts, Snippets und Zugangsdaten verwalten. Installiere es mit `npm install -g @termix-cli/cli` oder nimm eine eigenständige Binärdatei. Siehe die [CLI-Dokumentation](https://docs.termix.site/cli).
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Sicherheit:**
-Passwörter, Schlüssel und andere Geheimnisse werden pro Benutzer verschlüsselt, und die Datenbankdateien selbst lassen sich auf der Festplatte verschlüsseln. Wie das funktioniert, steht in der [Dokumentation](https://docs.termix.site/security).
+**Persistente Tabs:**
+SSH-Sitzungen und Tabs bleiben uber Gerate/Aktualisierungen hinweg offen, wenn im Benutzerprofil aktiviert.
 
 </td>
 <td width="50%" valign="top">
 
 **Sprachen:**
-Rund 30 Sprachen sind eingebaut, verwaltet über [Crowdin](https://docs.termix.site/translations).
+Integrierte Unterstutzung fur ca. 30 Sprachen (verwaltet uber [Crowdin](https://docs.termix.site/translations)).
 
 </td>
 </tr>
@@ -255,39 +199,36 @@ Rund 30 Sprachen sind eingebaut, verwaltet über [Crowdin](https://docs.termix.s
 <summary><b>Weitere Funktionen</b></summary>
 <br />
 
-- **Dashboard** - Deine Server auf einen Blick, mit Karten, die du selbst anordnest
-- **Netzwerkgrafik** - Dein Homelab aus deinen Hosts gezeichnet, mit Live-Status
-- **Tmux-Monitor** - tmux-Sitzungen, Fenster und Bereiche durchsehen, mit Vorschau und Suche
-- **API-Schlüssel** - Benutzerbezogene Schlüssel mit Ablaufdatum für Skripte und CI
-- **Export und Import** - Hosts, Zugangsdaten und Dateimanager-Daten rein- und rausholen
-- **Automatisches SSL** - Zertifikate werden für dich erstellt und erneuert, samt HTTPS-Weiterleitung, oder du bringst eigene mit
-- **Datenbanken** - Standardmäßig SQLite, dazu PostgreSQL und MySQL
-- **Moderne Oberfläche** - Aufgeräumte React-Oberfläche für Desktop und Handy, mit Themen wie Hell, Dunkel und Dracula. Jede Verbindung lässt sich über eine URL im Vollbild öffnen
-- **Befehlspalette** - Zweimal linke Umschalttaste, um per Tastatur zu einem Host zu springen
-- **Tastenkürzel** - Zwischen Tabs wechseln, Tabs schließen und mehr, alles neu belegbar
-- **Wake-on-LAN** - Einen Rechner aus Termix heraus oder aus einem Automatisierungsschritt aufwecken
-- **Vertrauenswürdiger Proxy** - Einen Reverse Proxy die Anmeldung erledigen und den Benutzer durchreichen lassen
-- **Viele SSH-Funktionen** - Sprunghosts, Warpgate, TOTP-Abfragen, SOCKS5, Prüfung von Hostschlüsseln, automatisches Ausfüllen von Passwörtern, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, Port Knocking, Terminalprotokolle, Agent-Weiterleitung, Bitwarden SSH-Agent, SSH-Signierung über HashiCorp Vault und mehr
-- **Termix ID** - Eine eingebaute Variante von sshid.io. Sichere dir einen Namen, veröffentliche deine öffentlichen Schlüssel unter einer Resolver-URL und stelle SSH-Zertifikate über die eingebaute CA aus
+- **Dashboard** - Serverinformationen auf einen Blick auf Ihrem Dashboard anzeigen
+- **API-Schlussel** - Erstellen Sie benutzerbezogene API-Schlussel mit Ablaufdaten zur Verwendung fur Automatisierung/CI
+- **Datenexport/-import** - SSH-Hosts, Anmeldeinformationen und Dateimanager-Daten exportieren und importieren
+- **Automatische SSL-Einrichtung** - Integrierte SSL-Zertifikatsgenerierung und -verwaltung mit HTTPS-Weiterleitungen
+- **Moderne Benutzeroberflache** - Saubere desktop-/mobilfreundliche Oberflache, erstellt mit React, Tailwind CSS und Shadcn. Wahlen Sie zwischen vielen verschiedenen UI-Themes einschliesslich Hell, Dunkel, Dracula usw. Verwenden Sie URL-Routen, um jede Verbindung im Vollbildmodus zu offnen.
+- **Befehlsverlauf** - Autovervollstandigung und Anzeige zuvor ausgefuhrter SSH-Befehle
+- **Schnellverbindung** - Verbinden Sie sich mit einem Server, ohne die Verbindungsdaten speichern zu mussen
+- **Befehlspalette** - Doppeltippen Sie die linke Umschalttaste, um schnell auf SSH-Verbindungen mit Ihrer Tastatur zuzugreifen
+- **Proxmox-Integration** - Automatisches Hinzufugen von Hosts zu Termix aus Ihrer Proxmox-Instanz
+- **SSH-Funktionsreich** - Unterstutzt Jump-Hosts, Warpgate, TOTP-basierte Verbindungen, SOCKS5, Host-Key-Verifizierung, automatisches Ausfullen von Passwortern, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, Port Knocking, Terminal-Protokollierung, SSH-Agent-Forwarding, Bitwarden SSH-Agent, HashiCorp Vault SSH-Signierung und mehr.
+- **Termix ID** - Ein sshid.io-Aquivalent, integriert in Termix. Beanspruchen Sie einen Handle, veroffentlichen Sie Ihre offentlichen SSH-Schlussel unter einer Resolver-URL und nutzen Sie eine integrierte CA zur Ausstellung von SSH-Zertifikaten.
 
 </details>
 
 <br />
 
-## Unterstützte Plattformen
+## Plattformunterstutzung
 
 <table align="center">
 <tr>
 <th align="center">Plattform</th>
-<th align="center">Bezugsquelle</th>
+<th align="center">Distribution</th>
 </tr>
 <tr>
 <td align="center"><b>Web</b></td>
-<td>Jeder moderne Browser (Chrome, Safari, Firefox) · PWA-fähig</td>
+<td>Jeder moderne Browser (Chrome, Safari, Firefox) · PWA-Unterstutzung</td>
 </tr>
 <tr>
 <td align="center"><b>Windows</b> <sub>x64/ia32</sub></td>
-<td>Portabel · MSI-Installer · Chocolatey</td>
+<td>Portabel · MSI-Installationsprogramm · Chocolatey</td>
 </tr>
 <tr>
 <td align="center"><b>Linux</b> <sub>x64/ia32</sub></td>
@@ -311,9 +252,9 @@ Rund 30 Sprachen sind eingebaut, verwaltet über [Crowdin](https://docs.termix.s
 
 ## Installation
 
-In der [Termix-Dokumentation](https://docs.termix.site/install) findest du die vollständigen Installationsanleitungen für alle Plattformen.
+Besuchen Sie die [Termix-Dokumentation](https://docs.termix.site/install) fur vollstandige Installationsanleitungen fur alle Plattformen.
 
-Beispiel für eine Docker-Compose-Datei (`guacd` und das Netzwerk kannst du weglassen, wenn du keinen Remotedesktop brauchst):
+Beispiel einer Docker-Compose-Datei (Sie konnen `guacd` und das Netzwerk weglassen, wenn Sie keine Remote-Desktop-Funktionen nutzen mochten):
 
 ```yaml
 services:
@@ -350,37 +291,11 @@ networks:
     driver: bridge
 ```
 
-### Kommandozeile
-
-Termix hat auch ein CLI, damit du deine Server vom Terminal aus verwalten und Termix in eigenen Skripten nutzen kannst.
-
-```bash
-npm install -g @termix-cli/cli
-termix login --url https://termix.example.com
-termix ssh 1
-```
-
-Es kann Terminals öffnen, einen Befehl auf einem Host oder einer ganzen Flotte ausführen, Dateien per SFTP verschieben und Hosts, Snippets und Zugangsdaten verwalten. Die vollständige Dokumentation steht auf [docs.termix.site/cli](https://docs.termix.site/cli).
-
-### Cloud-Hosting
-
-Du kannst den Termix-Server auf einem VPS laufen lassen statt im eigenen Netz. Läuft Termix in dem Netz, das es verwaltet, reißt eine Störung es mit sich, und zwar genau dann, wenn du es zum Reparieren bräuchtest. Woanders bleibt es erreichbar, du bekommst eine feste IP und kommst von überall heran, ohne VPN und ohne Portfreigabe.
-
-[GINERNET](https://docs.termix.site/install/ginernet) sponsert Termix, und in der Dokumentation steht eine Schritt-für-Schritt-Anleitung für die Bereitstellung auf deren VPS-Plattform.
-
-<br />
-
-## Telemetrie
-
-Termix schickt einmal am Tag ein kleines anonymes Signal, damit ich sehen kann, wie viele Instanzen laufen und welche Funktionen genutzt werden. Enthalten sind eine zufällige Instanz-ID, wie viele Benutzer und Hosts du hast, die App-Version und welche Funktionen (Terminal, Dateimanager, Tunnel, Docker usw.) in den letzten 24 Stunden benutzt wurden. Niemals enthalten sind Benutzernamen, Hostnamen, IP-Adressen, Zugangsdaten oder irgendetwas anderes, das dich oder deine Server identifiziert.
-
-Es ist standardmäßig an. Schalte es in den Administrationseinstellungen unter Allgemein aus oder setze `ENABLE_TELEMETRY=false`, bevor du Termix überhaupt startest.
-
 <br />
 
 ## Spenden
 
-Termix ist kostenlos und quelloffen, ohne Abo und ohne Bezahlmodell. Wenn es dir hilft, denk über eine Spende nach, um Server, Domains und Entwicklungszeit zu decken. Spenden finanzieren auch die Zeit, um Funktionen wie SAML, Kubernetes und Agent-Unterstützung zu erarbeiten. Unten kannst du den Fortschritt verfolgen und spenden.
+Termix ist kostenlos und Open Source, ohne Abonnements oder kostenpflichtige Plane. Wenn Sie es nutzlich finden, erwagen Sie eine Spende, um Serverkosten, Domains und Entwicklungszeit zu decken. Spenden helfen auch dabei, die Zeit zu finanzieren, die benotigt wird, um zu erforschen und zu lernen, was fur Funktionen wie SAML-, Kubernetes- und Agent-Unterstutzung erforderlich ist. Verfolgen Sie den Fortschritt und spenden Sie unten.
 
 [Spenden](https://donate.termix.site/)
 
@@ -388,7 +303,7 @@ Termix ist kostenlos und quelloffen, ohne Abo und ohne Bezahlmodell. Wenn es dir
 
 ## Sponsoren
 
-Interesse an einer bezahlten Platzierung zur Unterstützung der Entwicklung? Schreib an [mail@termix.site](mailto:mail@termix.site).
+Interessiert an einer bezahlten Platzierung zur Unterstutzung der Entwicklung? Schreiben Sie eine E-Mail an [mail@termix.site](mailto:mail@termix.site).
 
 <div align="center">
 
@@ -410,6 +325,10 @@ Interesse an einer bezahlten Platzierung zur Unterstützung der Entwicklung? Sch
   <img src="https://sirv.sirv.com/website/screenshots/cloudflare/cloudflare-logo.png?w=300" height="40" alt="Cloudflare" />
 </a>
 &nbsp;&nbsp;&nbsp;
+<a href="https://tailscale.com/">
+  <img src="https://drive.google.com/uc?export=view&id=1lIxkJuX6M23bW-2FElhT0rQieTrzaVSL" height="40" alt="Tailscale" />
+</a>
+&nbsp;&nbsp;&nbsp;
 <a href="https://akamai.com/">
   <img src="https://upload.wikimedia.org/wikipedia/commons/8/8b/Akamai_logo.svg" height="40" alt="Akamai" />
 </a>
@@ -421,17 +340,14 @@ Interesse an einer bezahlten Platzierung zur Unterstützung der Entwicklung? Sch
 <a href="https://rackgenius.com/">
   <img src="https://rackgenius.com/rackgenius-logo.png" height="40" alt="Rack Genius" />
 </a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://ginernet.com/">
-  <img src="https://ginernet.com/img/logo-web.png" height="40" alt="Ginernet" />
-</a>
+
 </div>
 
 <br />
 
 ## Support
 
-Brauchst du Hilfe oder möchtest du eine Funktion vorschlagen? Erstelle ein [neues Issue](https://github.com/Termix-SSH/Support/issues) und beschreibe es so genau wie möglich, nach Möglichkeit auf Englisch. Du kannst auch im Support-Kanal auf [Discord](https://discord.gg/jVQGdvHDrf) fragen, dort dauern Antworten aber manchmal länger.
+Wenn Sie Hilfe benotigen oder eine Funktion fur Termix anfragen mochten, besuchen Sie die [Issues](https://github.com/Termix-SSH/Support/issues)-Seite, melden Sie sich an und klicken Sie auf `New Issue`. Bitte beschreiben Sie Ihr Anliegen so detailliert wie moglich, vorzugsweise auf Englisch. Sie konnen auch dem [Discord](https://discord.gg/jVQGdvHDrf)-Server beitreten und den Support-Kanal besuchen, allerdings konnen die Antwortzeiten dort langer sein.
 
 <br />
 
@@ -443,7 +359,7 @@ Brauchst du Hilfe oder möchtest du eine Funktion vorschlagen? Erstelle ein [neu
 
 [![YouTube](../repo-images/YouTube.png)](https://www.youtube.com/@TermixSSH/videos)
 
-<sub>Übersichten zu Updates auf YouTube ansehen</sub>
+<sub>Update-Ubersichten auf YouTube ansehen</sub>
 
 <br />
 <br />
@@ -483,7 +399,7 @@ Brauchst du Hilfe oder möchtest du eine Funktion vorschlagen? Erstelle ein [neu
 </tr>
 </table>
 
-<sub>Manche Videos und Bilder sind vielleicht veraltet oder zeigen die Funktionen nicht perfekt.</sub>
+<sub>Einige Videos und Bilder konnen veraltet sein oder Funktionen moglicherweise nicht perfekt darstellen.</sub>
 
 </div>
 
@@ -491,10 +407,10 @@ Brauchst du Hilfe oder möchtest du eine Funktion vorschlagen? Erstelle ein [neu
 
 ## Geplante Funktionen
 
-Alle geplanten Funktionen stehen unter [Projects](https://github.com/orgs/Termix-SSH/projects/5). Wenn du mitarbeiten möchtest, sieh dir [Contributing](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md) an.
+Siehe [Projekte](https://github.com/orgs/Termix-SSH/projects/5) fur alle geplanten Funktionen. Wenn Sie beitragen mochten, siehe [Mitwirken](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md).
 
 <br />
 
 ## Lizenz
 
-Veröffentlicht unter der Apache-Lizenz Version 2.0. Mehr dazu in `LICENSE`.
+Verteilt unter der Apache License Version 2.0. Siehe `LICENSE` fur weitere Informationen.

docs/readme/README-ES.md

@@ -4,7 +4,7 @@
 
 <h1>Termix</h1>
 
-<p>Gestión de servidores autoalojada, desde SSH y escritorio remoto hasta automatizaciones</p>
+<p>Gestión SSH autoalojada y acceso a escritorio remoto</p>
 
 <p>
   <a href="../README.md">English</a> ·
@@ -37,7 +37,7 @@
 
 <br />
 
-Termix es gratuito y de código abierto. Si te resulta útil, considera [donar](https://donate.termix.site/) para ayudar a cubrir los costes de servidor y el tiempo de desarrollo.
+Termix es gratuito y de código abierto. Si lo encuentras útil, considera [donar](https://donate.termix.site/) para ayudar a cubrir los costos del servidor y el tiempo de desarrollo.
 
 <br />
 
@@ -49,201 +49,145 @@ Termix es gratuito y de código abierto. Si te resulta útil, considera [donar](
 <p>
   <img src="../repo-images/Repo of the Day.png" alt="Repo of the Day Achievement" width="280" />
   <br />
-  <sub>Conseguido el 1 de septiembre de 2025</sub>
+  <sub>Logrado el 1 de septiembre de 2025</sub>
 </p>
 
 </div>
 
 <br />
 
-## Descripción general
+## Descripcion General
 
-Termix es una plataforma gratuita, de código abierto y autoalojada para gestionar tus servidores. Reúne en un solo sitio terminales SSH, escritorios remotos (RDP, VNC, Telnet), transferencias de archivos, túneles, Docker, métricas y automatizaciones, en web, escritorio y móvil. Es una alternativa autoalojada a Termius que seguirá siendo gratuita.
+Termix es una plataforma de gestion de servidores todo en uno, de codigo abierto, siempre gratuita y autoalojada. Proporciona una solucion multiplataforma para gestionar sus servidores e infraestructura a traves de una interfaz unica e intuitiva. Termix ofrece acceso a terminal SSH, control de escritorio remoto (RDP, VNC, Telnet), capacidades de tuneles SSH, gestion remota de archivos y muchas otras herramientas. Termix es la alternativa perfecta, gratuita y autoalojada a Termius, disponible para todas las plataformas.
 
 <br />
 
-## Características
+## Caracteristicas
 
 <table>
 <tr>
 <td width="50%" valign="top">
 
-**Terminal SSH:**
-Un terminal completo con pestañas como las del navegador y pantalla dividida, hasta 6 paneles a la vez. Elige tu tema, tu fuente y tus colores. Sobre cada sesión hay una barra con CPU, memoria y disco en vivo, además de accesos rápidos a los archivos, Docker, túneles y métricas de ese host.
+**Acceso a Terminal SSH:**
+Terminal completo con soporte de pantalla dividida (hasta 4 paneles) con un sistema de pestanas similar al navegador. Incluye soporte para personalizar el terminal incluyendo temas comunes de terminal, fuentes y otros componentes.
 
 </td>
 <td width="50%" valign="top">
 
-**Escritorio remoto:**
-RDP, VNC y Telnet en el navegador, en pestañas y pantalla dividida como cualquier otra sesión. Incluye un explorador de archivos para las unidades RDP y subida arrastrando y soltando. En el escritorio de Windows también puedes abrir un host en el cliente RDP nativo.
+**Acceso a Escritorio Remoto:**
+Soporte RDP, VNC y Telnet a traves del navegador con personalizacion completa y pantalla dividida.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Túneles SSH:**
-Reenvío local, remoto y SOCKS dinámico, con reconexión automática y comprobaciones de estado. Los túneles de cliente a servidor de la aplicación de escritorio se guardan en ese equipo, y puedes guardar ajustes en el servidor para llevarte una configuración a otro equipo.
+**Gestion de Tuneles SSH:**
+Cree y gestione tuneles SSH de servidor a servidor con reconexion automatica, monitoreo de estado y reenvio local, remoto o dinamico SOCKS. La configuracion de tuneles de cliente de escritorio a servidor se almacena localmente por instalacion de escritorio, los snapshots de presets C2S opcionales pueden guardarse en el servidor, renombrarse, cargarse o eliminarse cuando desee mover una configuracion de tunel local entre clientes.
 
 </td>
 <td width="50%" valign="top">
 
-**Gestor de archivos:**
-Navega, edita, sube, descarga, renombra, mueve y borra archivos por SFTP, con soporte para sudo. Mira y edita código, imágenes, audio y vídeo. Copia archivos directamente de un servidor a otro, con la ruta más rápida elegida por ti y las transferencias verificadas.
+**Gestor Remoto de Archivos:**
+Gestione archivos directamente en servidores remotos con soporte para visualizar y editar codigo, imagenes, audio y video. Suba, descargue, renombre, elimine y mueva archivos sin problemas con soporte sudo. Incluye soporte para mover archivos de servidor a servidor.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Docker y Podman:**
-Arranca, para, pausa y elimina contenedores, mira sus estadísticas y abre una consola dentro de uno. Funciona con Docker y con Podman. No pretende sustituir a Portainer ni a Dockge, solo gestionar los contenedores que ya tienes.
+**Gestion de Docker y Podman:**
+Inicie, detenga, pause, elimine contenedores. Vea estadisticas de contenedores. Controle contenedores usando el terminal docker exec. Compatible con Docker y Podman como entorno de ejecucion de contenedores. No fue creado para reemplazar Portainer o Dockge, sino para simplemente gestionar sus contenedores en lugar de crearlos.
 
 </td>
 <td width="50%" valign="top">
 
-**Gestor de hosts:**
-Guarda y organiza hosts con etiquetas y carpetas anidadas que puedes nombrar y colorear. Reutiliza credenciales guardadas entre hosts, despliega claves SSH automáticamente, agrupa hosts bajo un host padre, edita y exporta en lote, y usa la conexión rápida para conexiones puntuales que no quieres guardar.
+**Gestor de Hosts SSH:**
+Guarde, organice y gestione sus conexiones SSH con etiquetas y carpetas (con personalizacion de carpetas y soporte de carpetas anidadas), y guarde facilmente informacion de inicio de sesion reutilizable con la capacidad de automatizar el despliegue de claves SSH.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Métricas de host:**
-CPU, memoria, disco, red, temperatura, tiempo encendido, procesos, puertos, inicios de sesión e información del sistema en la mayoría de servidores Linux, con gráficas de histórico. Las tarjetas de gestión te dejan manejar servicios, tareas cron, paquetes, usuarios, reglas del cortafuegos, WireGuard, Tailscale, certificados SSL, registros y comprobaciones de estado sin salir de Termix.
+**Metricas del Host:**
+Vea el uso de CPU, memoria y disco, red, tiempo de actividad, informacion del sistema, firewall, monitor de puertos, visor de registros, usuarios/permisos, certificados y muchos mas, que funcionan en la mayoria de los servidores basados en Linux. Incluye graficos de historial de series temporales y alertas basadas en umbrales con soporte para ntfy y webhooks.
 
 </td>
 <td width="50%" valign="top">
 
-**Automatizaciones:**
-Elige un disparador y luego di qué debe pasar. Los disparadores incluyen una métrica que supera un umbral, un host que se cae o vuelve, una comprobación de estado que cambia, una programación, un evento de contenedor o un webhook entrante. Los pasos pueden ejecutar comandos y fragmentos, controlar contenedores y túneles, despertar un host, llamar a una URL, esperar, ramificarse según una condición, ejecutar otra automatización y avisarte por ntfy, Discord o un webhook. Las ejecuciones de prueba te dejan probarlo sin riesgo.
+**Autenticacion de Usuarios:**
+Gestion segura de usuarios con controles de administrador (puede editar la informacion de otros usuarios) y soporte para OIDC/LDAP/SSO (con control de acceso), 2FA (TOTP) y soporte para passkeys (WebAuthn). Vea sesiones activas de usuarios en todas las plataformas y revoque permisos. Vincule sus cuentas OIDC/Locales entre si. Vea el registro de auditoria de las acciones de todos los usuarios.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Flotas:**
-Agrupa hosts en una flota eligiéndolos o con reglas de etiquetas, para que los nuevos entren solos. Ejecuta un comando en todos los hosts a la vez, envía y recoge archivos de todos ellos, instala paquetes y reúne un inventario del sistema, el kernel, la arquitectura y el tiempo encendido.
+**Integracion con Tailscale:**
+Liste dispositivos de su red Tailscale para agregarlos rapidamente como hosts y conectese usando Tailscale SSH como metodo de autenticacion, permitiendo que las ACL de Tailscale gestionen la autorizacion sin almacenar credenciales.
 
 </td>
 <td width="50%" valign="top">
 
-**Asistente de IA:**
-Es opcional y está apagado hasta que tú lo enciendas. Conecta OpenAI, Anthropic, Gemini, Ollama o cualquier punto de acceso compatible con OpenAI y pregúntale sobre tu instalación. Puede leer hosts, flotas, fragmentos y alertas, y propone cambios para que los apruebes en lugar de hacerlos él. Nunca puede tocar credenciales, usuarios ni ajustes. Los administradores pueden dejarlo apagado para toda la instancia, y tú puedes ocultarlo durante la configuración.
+**RBAC/Compartir:**
+Cree roles y comparta hosts entre usuarios/roles. Compatible con todos los tipos de autenticacion y todos los protocolos de host.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Acceso y usuarios:**
-Cuentas locales más inicio de sesión con OIDC, LDAP, GitHub y Google, con doble factor (TOTP), llaves de acceso (WebAuthn) y dispositivos de confianza. Los administradores pueden gestionar usuarios, asignar grupos de OIDC a roles, ver todas las sesiones activas en cualquier plataforma y revocarlas. Enlaza tu cuenta local con la de OIDC y consulta el registro de auditoría de lo que ha hecho cada uno.
+**Conexiones Serie:**
+Conectese a dispositivos serie (routers, switches, microcontroladores, etc.) directamente desde el navegador o la aplicacion de escritorio. Configure la tasa de baudios, bits de datos, bits de parada y paridad. Utiliza la Web Serial API en navegadores compatibles o un backend nativo en la aplicacion Electron.
 
 </td>
 <td width="50%" valign="top">
 
-**Roles y compartición:**
-Crea roles y comparte hosts con usuarios o roles en cuatro niveles: conectar, ver, editar y gestionar. Funciona con todos los tipos de autenticación y todos los protocolos, y puedes cambiar las credenciales que se usan en un host compartido.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
 **Alertas:**
-Pon reglas sobre métricas de host como CPU, memoria y disco, y recibe avisos por ntfy, Discord o un webhook cuando salten. Consulta las alertas activas y resueltas en un histórico y descarta las que no te importan.
-
-</td>
-<td width="50%" valign="top">
-
-**Página de inicio:**
-Una rejilla de widgets que montas tú mismo arrastrando y soltando. Hay widgets para el estado de los hosts, pings, enlaces a servicios, marcadores, búsqueda, relojes, calendarios, cuentas atrás, notas, RSS, tiempo, imágenes, iframes, Docker, túneles, gráficas de métricas, APIs propias e incluso un terminal en vivo.
+Configure reglas de alerta basadas en umbrales para metricas del host (CPU, memoria, disco, etc.) y reciba notificaciones a traves de ntfy o webhooks cuando se activen. Vea las alertas activas y resueltas en un historial de registros.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Fragmentos y herramientas:**
-Guarda los comandos que usas a menudo y lánzalos con un clic, con variables para el host y para lo que tú escribas. Ejecuta un mismo comando en todos los terminales abiertos y busca en tu historial con autocompletado.
+**Pagina de Inicio:**
+Una pagina de inicio completamente personalizable con una cuadricula de widgets de arrastrar y soltar. Agregue widgets para estado del host, enlaces de servicios, relojes, notas, feeds RSS, clima, contenedores Docker, graficos de metricas del host, terminales integrados, iframes y mas.
 
 </td>
 <td width="50%" valign="top">
 
-**Compartir sesión:**
-Comparte en directo una sesión de terminal, RDP, VNC o Telnet. Manda un enlace al que cualquiera puede entrar sin cuenta, o compártela con un usuario concreto de Termix, en solo lectura o con escritura. Las comparticiones pueden caducar solas o revocarse, y se pueden desactivar globalmente o por host.
+**Cifrado de Base de Datos:**
+Backend almacenado como archivos de base de datos SQLite cifrados. Consulte la [documentacion](https://docs.termix.site/security) para mas informacion.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Grabación y registros de sesión:**
-Graba sesiones de terminal, RDP y VNC y reprodúcelas después. Descarga registros de texto de una sesión y mira el registro de conexión para ver exactamente qué pasó durante ella.
+**Grafico de Red:**
+Personalice su Dashboard para visualizar su homelab basado en sus conexiones SSH con soporte de estado.
 
 </td>
 <td width="50%" valign="top">
 
-**Conexiones serie:**
-Habla con dispositivos serie como routers, switches y microcontroladores desde el navegador o la aplicación de escritorio. Ajusta velocidad, bits de datos, bits de parada y paridad. Usa la API Web Serial en los navegadores compatibles, o un backend nativo en la aplicación de escritorio.
+**Herramientas SSH:**
+Cree fragmentos de comandos reutilizables que se ejecutan con un solo clic. Ejecute un comando simultaneamente en multiples terminales abiertos.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Tailscale:**
-Trae dispositivos de tu tailnet para añadirlos como hosts en un par de clics, y conéctate con Tailscale SSH para que las ACL de tu tailnet controlen el acceso sin guardar credenciales. También funcionan Headscale y los puntos de acceso personalizados.
-
-</td>
-<td width="50%" valign="top">
-
-**Proxmox:**
-Importa hosts directamente desde una instancia de Proxmox y observa las estadísticas de nodos e invitados, incluidas CPU, memoria y almacenamiento, en su propia pestaña.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Espacios de trabajo y pestañas:**
-Guarda un conjunto de pestañas con su distribución dividida y reábrelo entero con un clic. Termix también recuerda tu última sesión, así que tus pestañas vuelven tras recargar y en otros dispositivos.
-
-</td>
-<td width="50%" valign="top">
-
-**Configuración guiada:**
-Una configuración corta te lleva por elegir un preajuste de interfaz, tu tema, las funciones que quieres y tu primer host. El modo sencillo esconde lo que no usas, y puedes repetir la configuración o cambiar de preajuste cuando quieras.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Escritorio independiente y sincronización:**
-La aplicación de escritorio funciona sola, con su backend y su base de datos locales, sin necesidad de servidor. También puedes conectarla a un servidor Termix para sincronizar en ambos sentidos hosts, credenciales, fragmentos y más, y decidir si las conexiones salen de tu equipo o pasan por el servidor.
-
-</td>
-<td width="50%" valign="top">
-
-**Línea de comandos:**
-Un CLI `termix` para tu shell y tus scripts. Abre terminales, ejecuta un comando en un host o en una flota entera, mueve archivos por SFTP y gestiona hosts, fragmentos y credenciales. Instálalo con `npm install -g @termix-cli/cli` o coge un binario independiente. Consulta la [documentación del CLI](https://docs.termix.site/cli).
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Seguridad:**
-Las contraseñas, las claves y otros secretos se cifran por usuario, y los propios archivos de la base de datos se pueden cifrar en disco. Mira la [documentación](https://docs.termix.site/security) para saber cómo funciona.
+**Pestanas Persistentes:**
+Las sesiones SSH y pestanas permanecen abiertas entre dispositivos/actualizaciones si esta habilitado en el perfil de usuario.
 
 </td>
 <td width="50%" valign="top">
 
 **Idiomas:**
-Unos 30 idiomas incluidos, gestionados a través de [Crowdin](https://docs.termix.site/translations).
+Soporte integrado para aproximadamente 30 idiomas (gestionado por [Crowdin](https://docs.termix.site/translations)).
 
 </td>
 </tr>
@@ -252,38 +196,35 @@ Unos 30 idiomas incluidos, gestionados a través de [Crowdin](https://docs.termi
 <br />
 
 <details>
-<summary><b>Más características</b></summary>
+<summary><b>Mas caracteristicas</b></summary>
 <br />
 
-- **Panel** - Tus servidores de un vistazo, con tarjetas que colocas tú
-- **Gráfico de red** - Tu homelab dibujado a partir de tus hosts, con estado en vivo
-- **Monitor de tmux** - Revisa sesiones, ventanas y paneles de tmux, con vista previa y búsqueda
-- **Claves de API** - Claves por usuario con fecha de caducidad para scripts y CI
-- **Exportar e importar** - Mueve hosts, credenciales y datos del gestor de archivos
-- **SSL automático** - Certificados generados y renovados por ti, con redirección a HTTPS, o usa los tuyos
-- **Bases de datos** - SQLite por defecto, y también PostgreSQL y MySQL
-- **Interfaz moderna** - Una interfaz React limpia que funciona en escritorio y móvil, con temas como claro, oscuro y Dracula. Cualquier conexión se puede abrir a pantalla completa desde una URL
-- **Paleta de comandos** - Pulsa dos veces Mayús izquierda para ir a un host desde el teclado
-- **Atajos de teclado** - Moverte entre pestañas, cerrarlas y más, todo reasignable
-- **Wake-on-LAN** - Enciende una máquina desde Termix o desde un paso de automatización
-- **Proxy de confianza** - Deja que un proxy inverso gestione el acceso y pase al usuario
-- **SSH muy completo** - Hosts de salto, Warpgate, peticiones TOTP, SOCKS5, verificación de claves de host, autorrelleno de contraseñas, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, port knocking, registro del terminal, reenvío de agente, agente SSH de Bitwarden, firma SSH con HashiCorp Vault y más
-- **Termix ID** - Una versión integrada de sshid.io. Reserva un identificador, publica tus claves públicas en una URL de resolución y emite certificados SSH desde la CA integrada
+- **Dashboard** - Vea la informacion del servidor de un vistazo en su dashboard
+- **Claves API** - Cree claves API con ambito de usuario y fechas de vencimiento para usar en automatizacion/CI
+- **Exportacion/Importacion de Datos** - Exporte e importe hosts SSH, credenciales y datos del gestor de archivos
+- **Configuracion Automatica de SSL** - Generacion y gestion integrada de certificados SSL con redirecciones HTTPS
+- **Interfaz Moderna** - Interfaz limpia compatible con escritorio/movil construida con React, Tailwind CSS y Shadcn. Elija entre muchos temas de UI diferentes, incluyendo claro, oscuro, Dracula, etc. Use rutas URL para abrir cualquier conexion en pantalla completa.
+- **Historial de Comandos** - Autocompletado y visualizacion de comandos SSH ejecutados anteriormente
+- **Conexion Rapida** - Conectese a un servidor sin necesidad de guardar los datos de conexion
+- **Paleta de Comandos** - Pulse dos veces la tecla Shift izquierda para acceder rapidamente a las conexiones SSH con su teclado
+- **Integracion con Proxmox** - Agregue automaticamente hosts a Termix desde su instancia de Proxmox
+- **SSH Rico en Funciones** - Soporta jump hosts, Warpgate, conexiones basadas en TOTP, SOCKS5, verificacion de clave de host, autocompletado de contrasenas, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, port knocking, registro de terminal, reenvio de agente SSH, agente SSH de Bitwarden, firma SSH con HashiCorp Vault y mas.
+- **Termix ID** - Un equivalente a sshid.io integrado en Termix. Reclame un identificador, publique sus claves publicas SSH en una URL de resolucion y use una CA integrada para emitir certificados SSH.
 
 </details>
 
 <br />
 
-## Plataformas compatibles
+## Soporte de Plataformas
 
 <table align="center">
 <tr>
 <th align="center">Plataforma</th>
-<th align="center">Distribución</th>
+<th align="center">Distribucion</th>
 </tr>
 <tr>
 <td align="center"><b>Web</b></td>
-<td>Cualquier navegador moderno (Chrome, Safari, Firefox) · Compatible con PWA</td>
+<td>Cualquier navegador moderno (Chrome, Safari, Firefox) · Soporte PWA</td>
 </tr>
 <tr>
 <td align="center"><b>Windows</b> <sub>x64/ia32</sub></td>
@@ -309,11 +250,11 @@ Unos 30 idiomas incluidos, gestionados a través de [Crowdin](https://docs.termi
 
 <br />
 
-## Instalación
+## Instalacion
 
-Visita la [documentación de Termix](https://docs.termix.site/install) para ver las instrucciones completas de instalación en todas las plataformas.
+Visite la [documentacion de Termix](https://docs.termix.site/install) para obtener instrucciones completas de instalacion en todas las plataformas.
 
-Ejemplo de archivo Docker Compose (puedes quitar `guacd` y la red si no piensas usar el escritorio remoto):
+Archivo de ejemplo de Docker Compose (puede omitir `guacd` y la red si no planea usar las funciones de escritorio remoto):
 
 ```yaml
 services:
@@ -350,37 +291,11 @@ networks:
     driver: bridge
 ```
 
-### Línea de comandos
-
-Termix también tiene un CLI, para que gestiones tus servidores desde un terminal y uses Termix en tus propios scripts.
-
-```bash
-npm install -g @termix-cli/cli
-termix login --url https://termix.example.com
-termix ssh 1
-```
-
-Puede abrir terminales, ejecutar un comando en un host o en una flota entera, mover archivos por SFTP y gestionar hosts, fragmentos y credenciales. La documentación completa está en [docs.termix.site/cli](https://docs.termix.site/cli).
-
-### Alojamiento en la nube
-
-Puedes ejecutar el servidor de Termix en un VPS en lugar de dentro de tu propia red. Si Termix corre en la red que gestiona, una caída se lo lleva por delante justo cuando lo necesitas para arreglar las cosas. Fuera se mantiene accesible, te da una IP fija y puedes entrar desde cualquier sitio sin VPN ni abrir puertos.
-
-[GINERNET](https://docs.termix.site/install/ginernet) patrocina Termix, y la documentación tiene una guía paso a paso para desplegar en su plataforma de VPS.
-
-<br />
-
-## Telemetría
-
-Termix envía una vez al día un pequeño aviso anónimo para que pueda ver cuántas instancias hay funcionando y qué funciones se usan. Contiene un identificador de instancia aleatorio, cuántos usuarios y hosts tienes, la versión de la aplicación y qué funciones (terminal, gestor de archivos, túneles, docker, etc.) se han usado en las últimas 24 horas. Nunca contiene nombres de usuario, nombres de host, direcciones IP, credenciales ni nada que te identifique a ti o a tus servidores.
-
-Viene activado. Puedes desactivarlo en los ajustes de administración, en General, o poner `ENABLE_TELEMETRY=false` antes incluso de arrancar Termix.
-
 <br />
 
 ## Donar
 
-Termix es gratuito y de código abierto, sin suscripciones ni planes de pago. Si te resulta útil, considera donar para ayudar con los servidores, los dominios y el tiempo de desarrollo. Las donaciones también financian el tiempo de investigar y aprender lo necesario para funciones como SAML, Kubernetes y el soporte de agentes. Sigue el progreso y dona abajo.
+Termix es gratuito y de codigo abierto, sin suscripciones ni planes de pago. Si lo encuentra util, considere donar para ayudar a cubrir los costos del servidor, los dominios y el tiempo de desarrollo. Las donaciones tambien ayudan a financiar el tiempo necesario para investigar y aprender lo que se necesita para construir funciones como soporte para SAML, Kubernetes y Agent. Siga el progreso y done a continuacion.
 
 [Donar](https://donate.termix.site/)
 
@@ -388,7 +303,7 @@ Termix es gratuito y de código abierto, sin suscripciones ni planes de pago. Si
 
 ## Patrocinadores
 
-¿Te interesa un espacio de pago para apoyar el desarrollo? Escribe a [mail@termix.site](mailto:mail@termix.site).
+Interesado en un espacio patrocinado de pago para apoyar el desarrollo? Escriba a [mail@termix.site](mailto:mail@termix.site).
 
 <div align="center">
 
@@ -410,6 +325,10 @@ Termix es gratuito y de código abierto, sin suscripciones ni planes de pago. Si
   <img src="https://sirv.sirv.com/website/screenshots/cloudflare/cloudflare-logo.png?w=300" height="40" alt="Cloudflare" />
 </a>
 &nbsp;&nbsp;&nbsp;
+<a href="https://tailscale.com/">
+  <img src="https://drive.google.com/uc?export=view&id=1lIxkJuX6M23bW-2FElhT0rQieTrzaVSL" height="40" alt="Tailscale" />
+</a>
+&nbsp;&nbsp;&nbsp;
 <a href="https://akamai.com/">
   <img src="https://upload.wikimedia.org/wikipedia/commons/8/8b/Akamai_logo.svg" height="40" alt="Akamai" />
 </a>
@@ -421,21 +340,18 @@ Termix es gratuito y de código abierto, sin suscripciones ni planes de pago. Si
 <a href="https://rackgenius.com/">
   <img src="https://rackgenius.com/rackgenius-logo.png" height="40" alt="Rack Genius" />
 </a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://ginernet.com/">
-  <img src="https://ginernet.com/img/logo-web.png" height="40" alt="Ginernet" />
-</a>
+
 </div>
 
 <br />
 
 ## Soporte
 
-¿Necesitas ayuda o quieres pedir una función? Abre una [nueva incidencia](https://github.com/Termix-SSH/Support/issues) y añade todo el detalle que puedas, en inglés si te es posible. También puedes preguntar en el canal de soporte de [Discord](https://discord.gg/jVQGdvHDrf), aunque allí las respuestas pueden tardar más.
+Si necesita ayuda o desea solicitar una funcion para Termix, visite la pagina de [Issues](https://github.com/Termix-SSH/Support/issues), inicie sesion y pulse `New Issue`. Por favor, sea lo mas detallado posible en su reporte, preferiblemente escrito en ingles. Tambien puede unirse al servidor de [Discord](https://discord.gg/jVQGdvHDrf) y visitar el canal de soporte, sin embargo, los tiempos de respuesta pueden ser mas largos.
 
 <br />
 
-## Capturas de pantalla
+## Capturas de Pantalla
 
 <div align="center">
 
@@ -443,7 +359,7 @@ Termix es gratuito y de código abierto, sin suscripciones ni planes de pago. Si
 
 [![YouTube](../repo-images/YouTube.png)](https://www.youtube.com/@TermixSSH/videos)
 
-<sub>Mira los resúmenes de las actualizaciones en YouTube</sub>
+<sub>Ver resúmenes de actualizaciones en YouTube</sub>
 
 <br />
 <br />
@@ -483,18 +399,18 @@ Termix es gratuito y de código abierto, sin suscripciones ni planes de pago. Si
 </tr>
 </table>
 
-<sub>Algunos vídeos e imágenes pueden estar desactualizados o no mostrar del todo bien las funciones.</sub>
+<sub>Algunos videos e imagenes pueden estar desactualizados o no mostrar perfectamente las caracteristicas.</sub>
 
 </div>
 
 <br />
 
-## Características planeadas
+## Caracteristicas Planeadas
 
-Todas las funciones planeadas están en [Projects](https://github.com/orgs/Termix-SSH/projects/5). Si quieres colaborar, consulta [Contributing](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md).
+Consulte [Proyectos](https://github.com/orgs/Termix-SSH/projects/5) para todas las caracteristicas planeadas. Si desea contribuir, consulte [Contribuir](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md).
 
 <br />
 
 ## Licencia
 
-Distribuido bajo la Licencia Apache versión 2.0. Consulta `LICENSE` para más información.
+Distribuido bajo la Licencia Apache Version 2.0. Consulte `LICENSE` para mas informacion.

docs/readme/README-FR.md

@@ -4,7 +4,7 @@
 
 <h1>Termix</h1>
 
-<p>Gestion de serveurs auto-hébergée, du SSH au bureau à distance jusqu'aux automatisations</p>
+<p>Gestion SSH auto-hebergee et acces bureau a distance</p>
 
 <p>
   <a href="../README.md">English</a> ·
@@ -37,7 +37,7 @@
 
 <br />
 
-Termix est gratuit et open source. S'il vous est utile, pensez à [faire un don](https://donate.termix.site/) pour aider à payer les serveurs et le temps de développement.
+Termix est gratuit et open source. Si vous le trouvez utile, pensez à [faire un don](https://donate.termix.site/) pour aider à couvrir les coûts de serveur et le temps de développement.
 
 <br />
 
@@ -56,194 +56,138 @@ Termix est gratuit et open source. S'il vous est utile, pensez à [faire un don]
 
 <br />
 
-## Présentation
+## Presentation
 
-Termix est une plateforme gratuite, open source et auto-hébergée pour gérer vos serveurs. Elle réunit au même endroit les terminaux SSH, les bureaux à distance (RDP, VNC, Telnet), les transferts de fichiers, les tunnels, Docker, les métriques et les automatisations, sur le web, le bureau et le mobile. C'est une alternative auto-hébergée à Termius, gratuite pour toujours.
+Termix est une plateforme de gestion de serveurs tout-en-un, open source, a jamais gratuite et auto-hebergee. Elle fournit une solution multiplateforme pour gerer vos serveurs et votre infrastructure a travers une interface unique et intuitive. Termix offre un acces terminal SSH, le controle de bureau a distance (RDP, VNC, Telnet), des capacites de tunneling SSH, la gestion de fichiers SSH a distance et de nombreux autres outils. Termix est l'alternative parfaite, gratuite et auto-hebergee a Termius, disponible sur toutes les plateformes.
 
 <br />
 
-## Fonctionnalités
+## Fonctionnalites
 
 <table>
 <tr>
 <td width="50%" valign="top">
 
-**Terminal SSH:**
-Un vrai terminal avec des onglets façon navigateur et un écran divisé, jusqu'à 6 panneaux à la fois. Choisissez votre thème, votre police et vos couleurs. Une barre d'outils au-dessus de chaque session affiche le CPU, la mémoire et le disque en direct, avec des raccourcis vers les fichiers, Docker, les tunnels et les métriques de cet hôte.
+**Acces terminal SSH:**
+Terminal complet avec support d'ecran partage (jusqu'a 4 panneaux) et un systeme d'onglets inspire des navigateurs. Inclut la personnalisation du terminal avec des themes courants, des polices et d'autres composants.
 
 </td>
 <td width="50%" valign="top">
 
-**Bureau à distance:**
-RDP, VNC et Telnet dans le navigateur, en onglets et en écran divisé comme n'importe quelle autre session. Comprend un explorateur de fichiers pour les lecteurs RDP et l'envoi par glisser-déposer. Sur le bureau Windows, vous pouvez aussi ouvrir un hôte dans le client RDP natif.
+**Acces Bureau a Distance:**
+Support RDP, VNC et Telnet via navigateur avec personnalisation complete et ecran partage.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Tunnels SSH:**
-Redirection locale, distante et SOCKS dynamique, avec reconnexion automatique et vérification de l'état. Les tunnels client vers serveur de l'application de bureau restent sur cette machine, et vous pouvez enregistrer des préréglages sur le serveur pour reprendre une configuration sur un autre poste.
+**Gestion des tunnels SSH:**
+Creez et gerez des tunnels SSH de serveur a serveur avec reconnexion automatique, surveillance de l'etat et transfert local, distant ou SOCKS dynamique. Les parametres de tunnel client-bureau-vers-serveur sont stockes localement par installation bureau ; des instantanes de prereglages C2S optionnels peuvent etre sauvegardes sur le serveur, renommes, charges ou supprimes pour deplacer une configuration de tunnel locale entre clients.
 
 </td>
 <td width="50%" valign="top">
 
-**Gestionnaire de fichiers:**
-Parcourez, modifiez, envoyez, téléchargez, renommez, déplacez et supprimez des fichiers en SFTP, avec sudo. Affichez et modifiez du code, des images, de l'audio et de la vidéo. Copiez des fichiers directement d'un serveur à l'autre : le chemin le plus rapide est choisi pour vous et l'intégrité des transferts est vérifiée.
+**Gestionnaire de fichiers distant:**
+Gerez les fichiers directement sur les serveurs distants avec support de la visualisation et de l'edition de code, images, audio et video. Televersez, telechargez, renommez, supprimez et deplacez des fichiers de maniere fluide avec support sudo. Inclut la prise en charge du deplacement de fichiers de serveur a serveur.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Docker et Podman:**
-Démarrez, arrêtez, mettez en pause et supprimez des conteneurs, suivez leurs statistiques et ouvrez un shell à l'intérieur. Fonctionne avec Docker comme avec Podman. Le but n'est pas de remplacer Portainer ou Dockge, juste de gérer les conteneurs que vous avez déjà.
+**Gestion Docker et Podman:**
+Demarrez, arretez, mettez en pause, supprimez des conteneurs. Consultez les statistiques des conteneurs. Controlez les conteneurs via le terminal docker exec. Compatible avec Docker et Podman comme environnement d'execution de conteneurs. Non concu pour remplacer Portainer ou Dockge, mais plutot pour gerer simplement vos conteneurs plutot que de les creer.
 
 </td>
 <td width="50%" valign="top">
 
-**Gestionnaire d'hôtes:**
-Rangez vos hôtes avec des étiquettes et des dossiers imbriqués que vous pouvez nommer et colorer. Réutilisez des identifiants enregistrés sur plusieurs hôtes, déployez des clés SSH automatiquement, regroupez des hôtes sous un hôte parent, modifiez et exportez en lot, et utilisez la connexion rapide pour les connexions ponctuelles que vous ne voulez pas garder.
+**Gestionnaire d'hotes SSH:**
+Enregistrez, organisez et gerez vos connexions SSH avec des tags et des dossiers (personnalisation des dossiers et prise en charge des dossiers imbriques), et sauvegardez facilement les informations de connexion reutilisables tout en automatisant le deploiement des cles SSH.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Métriques des hôtes:**
-CPU, mémoire, disque, réseau, température, temps de fonctionnement, processus, ports, connexions et informations système sur la plupart des serveurs Linux, avec des graphiques d'historique. Les cartes de gestion vous permettent de gérer les services, les tâches cron, les paquets, les utilisateurs, les règles de pare-feu, WireGuard, Tailscale, les certificats SSL, les journaux et les vérifications d'état sans quitter Termix.
+**Metriques d'hote:**
+Visualisez l'utilisation du CPU, de la memoire, du disque, le reseau, le temps de fonctionnement, les informations systeme, le pare-feu, le moniteur de ports, le visualiseur de journaux, les utilisateurs/permissions, les certificats et bien plus encore sur la plupart des serveurs Linux. Inclut des graphiques d'historique en serie temporelle et des alertes basees sur des seuils avec support ntfy et webhook.
 
 </td>
 <td width="50%" valign="top">
 
-**Automatisations:**
-Choisissez un déclencheur, puis dites ce qui doit se passer. Les déclencheurs peuvent être une métrique qui dépasse un seuil, un hôte qui tombe ou revient, une vérification d'état qui change, un horaire, un événement de conteneur ou un webhook entrant. Les étapes peuvent lancer des commandes et des extraits, piloter des conteneurs et des tunnels, réveiller un hôte, appeler une URL, attendre, se diviser selon une condition, lancer une autre automatisation et vous prévenir via ntfy, Discord ou un webhook. Les essais à blanc vous permettent de tester sans risque.
+**Authentification des utilisateurs:**
+Gestion securisee des utilisateurs avec controles administrateur (peut modifier les informations des autres utilisateurs) et support OIDC/LDAP/SSO (avec controle d'acces), 2FA (TOTP), et support des passkeys (WebAuthn). Visualisez les sessions utilisateur actives sur toutes les plateformes et revoquez les permissions. Liez vos comptes OIDC/locaux ensemble. Consultez le journal d'audit des actions de tous les utilisateurs.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Flottes:**
-Regroupez des hôtes dans une flotte en les choisissant ou avec des règles d'étiquettes, pour que les nouveaux hôtes s'ajoutent tout seuls. Lancez une commande sur tous les hôtes d'un coup, envoyez et récupérez des fichiers sur l'ensemble, installez des paquets et collectez un inventaire de l'OS, du noyau, de l'architecture et du temps de fonctionnement.
+**Integration Tailscale:**
+Listez les appareils de votre reseau Tailscale pour les ajouter rapidement comme hotes, et connectez-vous en utilisant Tailscale SSH comme methode d'authentification, laissant les ACL de votre reseau gerer l'autorisation sans stocker de credentials.
 
 </td>
 <td width="50%" valign="top">
 
-**Assistant IA:**
-Optionnel, et désactivé tant que vous ne l'activez pas. Connectez OpenAI, Anthropic, Gemini, Ollama ou n'importe quel point d'accès compatible OpenAI et posez des questions sur votre installation. Il lit les hôtes, les flottes, les extraits et les alertes, et propose des changements que vous validez au lieu de les appliquer lui-même. Il ne peut jamais toucher aux identifiants, aux utilisateurs ni aux réglages. Les administrateurs peuvent le laisser désactivé pour toute l'instance, et vous pouvez le masquer pendant la configuration.
+**RBAC/Partage:**
+Creez des roles et partagez des hotes entre utilisateurs/roles. Prend en charge tous les types d'authentification et tous les protocoles d'hote.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Connexion et utilisateurs:**
-Comptes locaux ainsi que connexion OIDC, LDAP, GitHub et Google, avec double authentification (TOTP), clés d'accès (WebAuthn) et appareils de confiance. Les administrateurs peuvent gérer les utilisateurs, associer les groupes OIDC aux rôles, voir toutes les sessions actives sur toutes les plateformes et les révoquer. Reliez vos comptes local et OIDC, et consultez le journal d'audit de ce que chacun a fait.
+**Connexions Serie:**
+Connectez-vous a des appareils serie (routeurs, commutateurs, microcontroleurs, etc.) directement depuis le navigateur ou l'application bureau. Configurez le debit en bauds, les bits de donnees, les bits d'arret et la parite. Utilise l'API Web Serial dans les navigateurs compatibles ou un backend natif dans l'application Electron.
 
 </td>
 <td width="50%" valign="top">
 
-**Rôles et partage:**
-Créez des rôles et partagez des hôtes avec des utilisateurs ou des rôles selon quatre niveaux : connexion, lecture, modification et gestion. Cela fonctionne avec tous les types d'authentification et tous les protocoles, et vous pouvez remplacer les identifiants utilisés pour un hôte partagé.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
 **Alertes:**
-Définissez des règles sur les métriques des hôtes comme le CPU, la mémoire et le disque, et recevez une notification via ntfy, Discord ou un webhook quand elles se déclenchent. Consultez les alertes en cours et résolues dans un historique, et écartez celles qui ne vous intéressent pas.
+Definissez des regles d'alerte basees sur des seuils pour les metriques d'hote (CPU, memoire, disque, etc.) et recevez des notifications via ntfy ou webhooks lorsqu'elles se declenchent. Consultez les alertes actives et resolues dans un journal d'historique.
 
 </td>
+</tr>
+<tr>
 <td width="50%" valign="top">
 
 **Page d'accueil:**
-Une grille de widgets en glisser-déposer que vous construisez vous-même. Des widgets pour l'état des hôtes, les pings, les liens de services, les favoris, la recherche, les horloges, les calendriers, les comptes à rebours, les notes, les flux RSS, la météo, les images, les iframes, Docker, les tunnels, les graphiques de métriques, les API personnalisées et même un terminal en direct.
+Une page d'accueil entierement personnalisable avec une grille de widgets glisser-deposer. Ajoutez des widgets pour l'etat des hotes, les liens de services, les horloges, les notes, les flux RSS, la meteo, les conteneurs Docker, les graphiques de metriques d'hote, les terminaux integres, les iframes et plus encore.
+
+</td>
+<td width="50%" valign="top">
+
+**Chiffrement de la base de donnees:**
+Le backend est stocke sous forme de fichiers de base de donnees SQLite chiffres. Consultez la [documentation](https://docs.termix.site/security) pour plus de details.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Extraits et outils:**
-Enregistrez les commandes que vous lancez souvent et exécutez-les en un clic, avec des variables pour l'hôte et vos propres saisies. Lancez une même commande dans tous les terminaux ouverts, et cherchez dans votre historique avec la complétion automatique.
+**Graphe reseau:**
+Personnalisez votre tableau de bord pour visualiser votre homelab base sur vos connexions SSH avec support des statuts.
 
 </td>
 <td width="50%" valign="top">
 
-**Partage de session:**
-Partagez en direct une session terminal, RDP, VNC ou Telnet. Envoyez un lien que n'importe qui peut rejoindre sans compte, ou partagez avec un utilisateur Termix précis, en lecture seule ou en lecture-écriture. Les partages peuvent expirer d'eux-mêmes ou être révoqués, et se désactivent globalement ou hôte par hôte.
+**Outils SSH:**
+Creez des extraits de commandes reutilisables executables en un seul clic. Executez une commande simultanement sur plusieurs terminaux ouverts.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Enregistrement et journaux de session:**
-Enregistrez les sessions terminal, RDP et VNC pour les revoir plus tard. Téléchargez les journaux d'une session en texte simple, et consultez le journal de connexion pour voir exactement ce qui s'est passé pendant une connexion.
-
-</td>
-<td width="50%" valign="top">
-
-**Connexions série:**
-Dialoguez avec des appareils série comme des routeurs, des commutateurs et des microcontrôleurs depuis le navigateur ou l'application de bureau. Réglez la vitesse, les bits de données, les bits d'arrêt et la parité. Utilise l'API Web Serial dans les navigateurs compatibles, ou un backend natif dans l'application de bureau.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Tailscale:**
-Récupérez les appareils de votre tailnet pour les ajouter comme hôtes en quelques clics, et connectez-vous avec Tailscale SSH pour que les ACL de votre tailnet gèrent les accès, sans stocker d'identifiants. Headscale et les points d'accès personnalisés fonctionnent aussi.
-
-</td>
-<td width="50%" valign="top">
-
-**Proxmox:**
-Importez des hôtes directement depuis une instance Proxmox, et suivez les statistiques des nœuds et des invités, dont le CPU, la mémoire et le stockage, dans un onglet dédié.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Espaces de travail et onglets:**
-Enregistrez un ensemble d'onglets avec leur disposition en écran divisé et rouvrez le tout en un clic. Termix retient aussi votre dernière session, donc vos onglets reviennent après un rafraîchissement ou sur un autre appareil.
-
-</td>
-<td width="50%" valign="top">
-
-**Configuration guidée:**
-Une courte configuration vous aide à choisir un préréglage d'interface, votre thème, les fonctionnalités que vous voulez et votre premier hôte. Le mode simple masque ce que vous n'utilisez pas, et vous pouvez relancer la configuration ou changer de préréglage quand vous voulez.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Application de bureau autonome et synchronisation:**
-L'application de bureau fonctionne toute seule, avec son propre backend et sa base de données, sans serveur. Vous pouvez aussi la relier à un serveur Termix pour synchroniser dans les deux sens les hôtes, les identifiants, les extraits et le reste, et choisir si les connexions partent de votre machine ou passent par le serveur.
-
-</td>
-<td width="50%" valign="top">
-
-**Ligne de commande:**
-Un CLI `termix` pour votre shell et vos scripts. Ouvrez des terminaux, lancez une commande sur un hôte ou une flotte entière, déplacez des fichiers en SFTP et gérez hôtes, extraits et identifiants. Installez-le avec `npm install -g @termix-cli/cli` ou récupérez un binaire autonome. Voir la [documentation du CLI](https://docs.termix.site/cli).
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Sécurité:**
-Les mots de passe, les clés et les autres secrets sont chiffrés par utilisateur, et les fichiers de base de données eux-mêmes peuvent être chiffrés sur le disque. Voir la [documentation](https://docs.termix.site/security) pour le détail.
+**Onglets Persistants:**
+Les sessions SSH et les onglets restent ouverts sur tous les appareils/actualisations si active dans le profil utilisateur.
 
 </td>
 <td width="50%" valign="top">
 
 **Langues:**
-Une trentaine de langues intégrées, gérées via [Crowdin](https://docs.termix.site/translations).
+Support integre d'environ 30 langues (gere par [Crowdin](https://docs.termix.site/translations)).
 
 </td>
 </tr>
@@ -252,29 +196,26 @@ Une trentaine de langues intégrées, gérées via [Crowdin](https://docs.termix
 <br />
 
 <details>
-<summary><b>Plus de fonctionnalités</b></summary>
+<summary><b>Plus de fonctionnalites</b></summary>
 <br />
 
-- **Tableau de bord** - Vos serveurs en un coup d'œil, avec des cartes que vous rangez vous-même
-- **Graphe réseau** - Votre homelab dessiné à partir de vos hôtes, avec l'état en direct
-- **Moniteur tmux** - Parcourez les sessions, fenêtres et panneaux tmux, avec aperçus et recherche
-- **Clés API** - Des clés par utilisateur avec date d'expiration, pour vos scripts et votre CI
-- **Export et import** - Faites entrer et sortir hôtes, identifiants et données du gestionnaire de fichiers
-- **SSL automatique** - Certificats générés et renouvelés pour vous, avec redirection HTTPS, ou apportez les vôtres
-- **Bases de données** - SQLite par défaut, PostgreSQL et MySQL également pris en charge
-- **Interface moderne** - Une interface React soignée qui marche sur ordinateur et mobile, avec des thèmes clair, sombre et Dracula. Chaque connexion peut s'ouvrir en plein écran depuis une URL
-- **Palette de commandes** - Double appui sur Maj gauche pour rejoindre un hôte au clavier
-- **Raccourcis clavier** - Naviguer entre les onglets, les fermer et plus encore, tout est reconfigurable
-- **Wake-on-LAN** - Réveillez une machine depuis Termix ou depuis une étape d'automatisation
-- **Authentification par proxy de confiance** - Laissez un reverse proxy gérer la connexion et transmettre l'utilisateur
-- **SSH complet** - Hôtes de rebond, Warpgate, demandes TOTP, SOCKS5, vérification des clés d'hôte, remplissage automatique des mots de passe, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, port knocking, journalisation du terminal, transfert d'agent, agent SSH Bitwarden, signature SSH HashiCorp Vault et plus encore
-- **Termix ID** - Une version intégrée de sshid.io. Réservez un identifiant, publiez vos clés publiques sur une URL de résolution et émettez des certificats SSH depuis l'autorité intégrée
+- **Tableau de bord** - Consultez les informations de vos serveurs en un coup d'oeil depuis votre tableau de bord
+- **Cles API** - Creez des cles API a portee utilisateur avec des dates d'expiration pour une utilisation en automatisation/CI
+- **Export/Import de donnees** - Exportez et importez les hotes SSH, les identifiants et les donnees du gestionnaire de fichiers
+- **Configuration SSL automatique** - Generation et gestion integrees de certificats SSL avec redirections HTTPS
+- **Interface moderne** - Interface epuree compatible desktop/mobile construite avec React, Tailwind CSS et Shadcn. Choisissez parmi de nombreux themes d'interface utilisateur, notamment clair, sombre, Dracula, etc. Utilisez les routes URL pour ouvrir n'importe quelle connexion en plein ecran.
+- **Historique des commandes** - Auto-completion et consultation des commandes SSH precedemment executees
+- **Connexion rapide** - Connectez-vous a un serveur sans avoir a sauvegarder les donnees de connexion
+- **Palette de commandes** - Appuyez deux fois sur Shift gauche pour acceder rapidement aux connexions SSH avec votre clavier
+- **Integration Proxmox** - Ajoutez automatiquement des hotes dans Termix depuis votre instance Proxmox
+- **SSH riche en fonctionnalites** - Support des hotes de rebond, Warpgate, connexions basees sur TOTP, SOCKS5, verification des cles d'hote, remplissage automatique des mots de passe, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, port knocking, journalisation du terminal, transfert d'agent SSH, agent SSH Bitwarden, signature SSH HashiCorp Vault, et plus encore.
+- **Termix ID** - Un equivalent de sshid.io integre a Termix. Reservez un identifiant, publiez vos cles SSH publiques a une URL de resolution, et utilisez une autorite de certification integree pour emettre des certificats SSH.
 
 </details>
 
 <br />
 
-## Plateformes prises en charge
+## Support des plateformes
 
 <table align="center">
 <tr>
@@ -283,11 +224,11 @@ Une trentaine de langues intégrées, gérées via [Crowdin](https://docs.termix
 </tr>
 <tr>
 <td align="center"><b>Web</b></td>
-<td>Tout navigateur récent (Chrome, Safari, Firefox) · Compatible PWA</td>
+<td>Tout navigateur moderne (Chrome, Safari, Firefox) · Support PWA</td>
 </tr>
 <tr>
 <td align="center"><b>Windows</b> <sub>x64/ia32</sub></td>
-<td>Portable · Installeur MSI · Chocolatey</td>
+<td>Portable · MSI Installateur · Chocolatey</td>
 </tr>
 <tr>
 <td align="center"><b>Linux</b> <sub>x64/ia32</sub></td>
@@ -311,9 +252,9 @@ Une trentaine de langues intégrées, gérées via [Crowdin](https://docs.termix
 
 ## Installation
 
-Consultez la [documentation Termix](https://docs.termix.site/install) pour les instructions d'installation complètes sur toutes les plateformes.
+Visitez la [documentation](https://docs.termix.site/install) de Termix pour des instructions d'installation completes sur toutes les plateformes.
 
-Exemple de fichier Docker Compose (vous pouvez retirer `guacd` et le réseau si vous ne comptez pas utiliser le bureau à distance) :
+Voici un exemple de fichier Docker Compose (vous pouvez omettre guacd et le reseau si vous ne prevoyez pas d'utiliser les fonctionnalites de bureau a distance) :
 
 ```yaml
 services:
@@ -350,37 +291,11 @@ networks:
     driver: bridge
 ```
 
-### Ligne de commande
-
-Termix propose aussi un CLI, pour gérer vos serveurs depuis un terminal et utiliser Termix dans vos propres scripts.
-
-```bash
-npm install -g @termix-cli/cli
-termix login --url https://termix.example.com
-termix ssh 1
-```
-
-Il peut ouvrir des terminaux, lancer une commande sur un hôte ou une flotte entière, déplacer des fichiers en SFTP et gérer hôtes, extraits et identifiants. La documentation complète est sur [docs.termix.site/cli](https://docs.termix.site/cli).
-
-### Hébergement cloud
-
-Vous pouvez faire tourner le serveur Termix sur un VPS plutôt que dans votre propre réseau. Si Termix tourne sur le réseau qu'il gère, une panne l'emporte avec elle, juste au moment où vous en avez besoin pour réparer. Ailleurs, il reste joignable, vous avez une IP fixe et vous pouvez y accéder de partout sans VPN ni redirection de port.
-
-[GINERNET](https://docs.termix.site/install/ginernet) sponsorise Termix, et la documentation contient un guide pas à pas pour déployer sur leur plateforme VPS.
-
-<br />
-
-## Télémétrie
-
-Termix envoie une fois par jour un petit signal anonyme, pour que je puisse voir combien d'instances tournent et quelles fonctionnalités servent vraiment. Il contient un identifiant d'instance aléatoire, le nombre d'utilisateurs et d'hôtes, la version de l'application et les fonctionnalités utilisées ces dernières 24 heures (terminal, gestionnaire de fichiers, tunnels, docker, etc.). Il ne contient jamais de noms d'utilisateur, de noms d'hôtes, d'adresses IP, d'identifiants ni quoi que ce soit qui puisse vous identifier, vous ou vos serveurs.
-
-C'est activé par défaut. Désactivez-le dans les paramètres d'administration, section Général, ou définissez `ENABLE_TELEMETRY=false` avant même de démarrer Termix.
-
 <br />
 
 ## Faire un don
 
-Termix est gratuit et open source, sans abonnement ni offre payante. S'il vous est utile, pensez à faire un don pour aider à couvrir les serveurs, les noms de domaine et le temps de développement. Les dons financent aussi le temps de recherche nécessaire pour construire des fonctionnalités comme SAML, Kubernetes et le support des agents. Suivez l'avancement et faites un don ci-dessous.
+Termix est gratuit et open source, sans abonnement ni plan payant. Si vous le trouvez utile, pensez a faire un don pour aider a couvrir les couts de serveur, les domaines et le temps de developpement. Les dons contribuent egalement a financer le temps necessaire pour rechercher et apprendre ce qui est requis pour construire des fonctionnalites comme SAML, Kubernetes et le support des agents. Suivez la progression et faites un don ci-dessous.
 
 [Faire un don](https://donate.termix.site/)
 
@@ -388,7 +303,7 @@ Termix est gratuit et open source, sans abonnement ni offre payante. S'il vous e
 
 ## Sponsors
 
-Intéressé par un emplacement payant pour soutenir le développement ? Écrivez à [mail@termix.site](mailto:mail@termix.site).
+Interesse par un placement payant pour soutenir le developpement ? Envoyez un email a [mail@termix.site](mailto:mail@termix.site).
 
 <div align="center">
 
@@ -410,6 +325,10 @@ Intéressé par un emplacement payant pour soutenir le développement ? Écrivez
   <img src="https://sirv.sirv.com/website/screenshots/cloudflare/cloudflare-logo.png?w=300" height="40" alt="Cloudflare" />
 </a>
 &nbsp;&nbsp;&nbsp;
+<a href="https://tailscale.com/">
+  <img src="https://drive.google.com/uc?export=view&id=1lIxkJuX6M23bW-2FElhT0rQieTrzaVSL" height="40" alt="Tailscale" />
+</a>
+&nbsp;&nbsp;&nbsp;
 <a href="https://akamai.com/">
   <img src="https://upload.wikimedia.org/wikipedia/commons/8/8b/Akamai_logo.svg" height="40" alt="Akamai" />
 </a>
@@ -421,21 +340,18 @@ Intéressé par un emplacement payant pour soutenir le développement ? Écrivez
 <a href="https://rackgenius.com/">
   <img src="https://rackgenius.com/rackgenius-logo.png" height="40" alt="Rack Genius" />
 </a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://ginernet.com/">
-  <img src="https://ginernet.com/img/logo-web.png" height="40" alt="Ginernet" />
-</a>
+
 </div>
 
 <br />
 
 ## Support
 
-Besoin d'aide ou envie de proposer une fonctionnalité ? Ouvrez un [nouveau ticket](https://github.com/Termix-SSH/Support/issues) avec le plus de détails possible, en anglais si vous le pouvez. Vous pouvez aussi demander dans le canal support sur [Discord](https://discord.gg/jVQGdvHDrf), même si les réponses y prennent parfois plus de temps.
+Si vous avez besoin d'aide ou souhaitez demander une fonctionnalite pour Termix, visitez la page [Issues](https://github.com/Termix-SSH/Support/issues), connectez-vous et appuyez sur `New Issue`. Veuillez etre aussi detaille que possible dans votre issue, de preference redigee en anglais. Vous pouvez egalement rejoindre le serveur [Discord](https://discord.gg/jVQGdvHDrf) et visiter le canal de support, cependant les temps de reponse peuvent etre plus longs.
 
 <br />
 
-## Captures d'écran
+## Captures d'ecran
 
 <div align="center">
 
@@ -443,7 +359,7 @@ Besoin d'aide ou envie de proposer une fonctionnalité ? Ouvrez un [nouveau tick
 
 [![YouTube](../repo-images/YouTube.png)](https://www.youtube.com/@TermixSSH/videos)
 
-<sub>Regarder les présentations des mises à jour sur YouTube</sub>
+<sub>Regarder les aperçus des mises a jour sur YouTube</sub>
 
 <br />
 <br />
@@ -483,18 +399,18 @@ Besoin d'aide ou envie de proposer une fonctionnalité ? Ouvrez un [nouveau tick
 </tr>
 </table>
 
-<sub>Certaines vidéos et images peuvent être dépassées ou ne pas montrer parfaitement les fonctionnalités.</sub>
+<sub>Certaines videos et images peuvent etre obsoletes ou ne pas presenter parfaitement les fonctionnalites.</sub>
 
 </div>
 
 <br />
 
-## Fonctionnalités prévues
+## Fonctionnalites prevues
 
-Toutes les fonctionnalités prévues sont dans [Projects](https://github.com/orgs/Termix-SSH/projects/5). Si vous souhaitez contribuer, voir [Contribuer](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md).
+Consultez les [Projects](https://github.com/orgs/Termix-SSH/projects/5) pour toutes les fonctionnalites prevues. Si vous souhaitez contribuer, consultez [Contributing](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md).
 
 <br />
 
 ## Licence
 
-Distribué sous licence Apache version 2.0. Voir `LICENSE` pour plus d'informations.
+Distribue sous la licence Apache Version 2.0. Consultez `LICENSE` pour plus d'informations.

docs/readme/README-HI.md

@@ -4,7 +4,7 @@
 
 <h1>Termix</h1>
 
-<p>सेल्फ-होस्टेड सर्वर प्रबंधन, SSH और रिमोट डेस्कटॉप से लेकर ऑटोमेशन तक</p>
+<p>स्व-होस्टेड SSH प्रबंधन और रिमोट डेस्कटॉप एक्सेस</p>
 
 <p>
   <a href="../README.md">English</a> ·
@@ -37,7 +37,7 @@
 
 <br />
 
-Termix मुफ़्त और ओपन सोर्स है। अगर यह आपके काम आता है, तो सर्वर की लागत और विकास के समय में मदद के लिए [दान](https://donate.termix.site/) करने पर विचार करें।
+Termix मुफ़्त और ओपन सोर्स है। यदि आपको यह उपयोगी लगता है, तो सर्वर लागत और विकास समय में मदद के लिए [दान करें](https://donate.termix.site/)।
 
 <br />
 
@@ -49,7 +49,7 @@ Termix मुफ़्त और ओपन सोर्स है। अगर
 <p>
   <img src="../repo-images/Repo of the Day.png" alt="Repo of the Day Achievement" width="280" />
   <br />
-  <sub>1 सितंबर 2025 को हासिल किया गया</sub>
+  <sub>1 सितंबर, 2025 को प्राप्त</sub>
 </p>
 
 </div>
@@ -58,7 +58,7 @@ Termix मुफ़्त और ओपन सोर्स है। अगर
 
 ## अवलोकन
 
-Termix आपके सर्वर संभालने के लिए एक मुफ़्त, ओपन सोर्स, सेल्फ-होस्टेड प्लेटफ़ॉर्म है। यह SSH टर्मिनल, रिमोट डेस्कटॉप (RDP, VNC, Telnet), फ़ाइल ट्रांसफ़र, टनल, Docker, मेट्रिक्स और ऑटोमेशन को एक ही जगह लाता है, वेब, डेस्कटॉप और मोबाइल पर। यह Termius का सेल्फ-होस्टेड विकल्प है जो हमेशा मुफ़्त रहेगा।
+Termix एक ओपन-सोर्स, हमेशा के लिए मुफ़्त, सेल्फ-होस्टेड ऑल-इन-वन सर्वर प्रबंधन प्लेटफ़ॉर्म है। यह एक एकल, सहज इंटरफ़ेस के माध्यम से आपके सर्वर और बुनियादी ढाँचे के प्रबंधन के लिए एक मल्टी-प्लेटफ़ॉर्म समाधान प्रदान करता है। Termix SSH टर्मिनल एक्सेस, रिमोट डेस्कटॉप कंट्रोल (RDP, VNC, Telnet), SSH टनलिंग क्षमताएँ, रिमोट फ़ाइल प्रबंधन, और कई अन्य उपकरण प्रदान करता है। Termix सभी प्लेटफ़ॉर्म पर उपलब्ध Termius का सही मुफ़्त और सेल्फ-होस्टेड विकल्प है।
 
 <br />
 
@@ -68,42 +68,42 @@ Termix आपके सर्वर संभालने के लिए ए
 <tr>
 <td width="50%" valign="top">
 
-**SSH टर्मिनल:**
-ब्राउज़र जैसे टैब और स्प्लिट स्क्रीन वाला पूरा टर्मिनल, एक साथ 6 पैनल तक। थीम, फ़ॉन्ट और रंग आप खुद चुनें। हर सत्र के ऊपर एक टूलबार रहता है जिसमें CPU, मेमोरी और डिस्क लाइव दिखते हैं, साथ ही उस होस्ट की फ़ाइलों, Docker, टनल और मेट्रिक्स तक जाने के शॉर्टकट भी।
+**SSH टर्मिनल एक्सेस:**
+ब्राउज़र जैसी टैब प्रणाली के साथ स्प्लिट-स्क्रीन सपोर्ट (4 पैनल तक) वाला पूर्ण-विशेषता वाला टर्मिनल। इसमें लोकप्रिय टर्मिनल थीम, फ़ॉन्ट और अन्य कंपोनेंट सहित टर्मिनल को कस्टमाइज़ करने का सपोर्ट शामिल है।
 
 </td>
 <td width="50%" valign="top">
 
-**रिमोट डेस्कटॉप:**
-ब्राउज़र में RDP, VNC और Telnet, बाकी सत्रों की तरह टैब और स्प्लिट स्क्रीन में। इसमें RDP ड्राइव के लिए फ़ाइल ब्राउज़र और खींचकर छोड़ने वाला अपलोड भी है। Windows डेस्कटॉप पर आप होस्ट को सिस्टम के अपने RDP क्लाइंट में भी खोल सकते हैं।
+**रिमोट डेस्कटॉप एक्सेस:**
+ब्राउज़र पर RDP, VNC और Telnet सपोर्ट, पूर्ण कस्टमाइज़ेशन और स्प्लिट स्क्रीन के साथ।
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**SSH टनल:**
-लोकल, रिमोट और डायनामिक SOCKS फ़ॉरवर्डिंग, अपने आप दोबारा जुड़ने और स्थिति जाँच के साथ। डेस्कटॉप ऐप के क्लाइंट से सर्वर वाले टनल उसी मशीन पर रहते हैं, और आप सेटिंग सर्वर पर सहेजकर उसे दूसरी मशीन पर ले जा सकते हैं।
+**SSH टनल प्रबंधन:**
+ऑटोमैटिक रीकनेक्शन, हेल्थ मॉनिटरिंग और लोकल, रिमोट या डायनेमिक SOCKS फॉरवर्डिंग के साथ सर्वर-टु-सर्वर SSH टनल बनाएँ और प्रबंधित करें। डेस्कटॉप क्लाइंट-टु-सर्वर टनल सेटिंग्स प्रत्येक डेस्कटॉप इंस्टॉल में स्थानीय रूप से संग्रहीत होती हैं; वैकल्पिक C2S प्रीसेट स्नैपशॉट सर्वर पर सेव किए जा सकते हैं, तथा जब आप किसी लोकल टनल कॉन्फ़िगरेशन को क्लाइंट के बीच स्थानांतरित करना चाहें तो उन्हें रीनेम, लोड या डिलीट किया जा सकता है।
 
 </td>
 <td width="50%" valign="top">
 
-**फ़ाइल मैनेजर:**
-SFTP से फ़ाइलें देखें, संपादित करें, अपलोड और डाउनलोड करें, नाम बदलें, हटाएँ और खिसकाएँ, sudo के साथ भी। कोड, तस्वीरें, ऑडियो और वीडियो देखें और बदलें। फ़ाइलें सीधे एक सर्वर से दूसरे पर कॉपी करें, सबसे तेज़ रास्ता अपने आप चुना जाता है और ट्रांसफ़र की जाँच भी होती है।
+**रिमोट फ़ाइल मैनेजर:**
+कोड, इमेज, ऑडियो और वीडियो देखने और संपादित करने के सपोर्ट के साथ रिमोट सर्वर पर सीधे फ़ाइलें प्रबंधित करें। sudo सपोर्ट के साथ फ़ाइलें अपलोड, डाउनलोड, रीनेम, डिलीट और मूव करें। इसमें फ़ाइलों को एक सर्वर से दूसरे सर्वर में स्थानांतरित करने का सपोर्ट भी शामिल है।
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Docker और Podman:**
-कंटेनर चालू करें, रोकें, थामें और हटाएँ, उनके आँकड़े देखें, और किसी एक के अंदर शेल खोलें। Docker और Podman दोनों के साथ चलता है। यह Portainer या Dockge की जगह लेने के लिए नहीं है, सिर्फ़ आपके पहले से मौजूद कंटेनर संभालने के लिए है।
+**Docker और Podman प्रबंधन:**
+कंटेनर शुरू, बंद, पॉज़, हटाएँ। कंटेनर स्टैट्स देखें। docker exec टर्मिनल का उपयोग करके कंटेनर को नियंत्रित करें। Docker और Podman दोनों को कंटेनर रनटाइम के रूप में सपोर्ट करता है। इसे Portainer या Dockge की जगह लेने के लिए नहीं बनाया गया बल्कि कंटेनर बनाने की तुलना में उन्हें सरलता से प्रबंधित करने के लिए बनाया गया है।
 
 </td>
 <td width="50%" valign="top">
 
-**होस्ट मैनेजर:**
-टैग और नाम व रंग वाले नेस्टेड फ़ोल्डर से होस्ट सहेजें और व्यवस्थित करें। सहेजे गए क्रेडेंशियल कई होस्ट पर दोबारा इस्तेमाल करें, SSH कुंजियाँ अपने आप भेजें, होस्ट को किसी मुख्य होस्ट के नीचे रखें, एक साथ कई में बदलाव करें और निर्यात करें, और जिन कनेक्शनों को सहेजना नहीं चाहते उनके लिए क्विक कनेक्ट इस्तेमाल करें।
+**SSH होस्ट मैनेजर:**
+टैग और फ़ोल्डर (फ़ोल्डर कस्टमाइज़ेशन और नेस्टेड फ़ोल्डर सपोर्ट के साथ) के साथ अपने SSH कनेक्शन सहेजें, व्यवस्थित करें और प्रबंधित करें, और SSH कुंजियों की तैनाती को स्वचालित करने की क्षमता के साथ पुन: उपयोग योग्य लॉगिन जानकारी आसानी से सहेजें।
 
 </td>
 </tr>
@@ -111,139 +111,83 @@ SFTP से फ़ाइलें देखें, संपादित कर
 <td width="50%" valign="top">
 
 **होस्ट मेट्रिक्स:**
-ज़्यादातर Linux सर्वर पर CPU, मेमोरी, डिस्क, नेटवर्क, तापमान, अपटाइम, प्रोसेस, पोर्ट, लॉगिन और सिस्टम जानकारी, पुराने आँकड़ों के ग्राफ़ के साथ। मैनेजर कार्ड से आप सर्विस, cron कार्य, पैकेज, उपयोगकर्ता, फ़ायरवॉल नियम, WireGuard, Tailscale, SSL प्रमाणपत्र, लॉग और हेल्थ चेक Termix छोड़े बिना संभाल सकते हैं।
+अधिकांश Linux आधारित सर्वर पर CPU, मेमोरी, डिस्क उपयोग, नेटवर्क, अपटाइम, सिस्टम जानकारी, फ़ायरवॉल, पोर्ट मॉनिटर, लॉग व्यूअर, उपयोगकर्ता/अनुमतियाँ, सर्टिफ़िकेट और भी बहुत कुछ देखें। इसमें टाइम-सीरीज़ हिस्ट्री ग्राफ़ और ntfy व webhook सपोर्ट के साथ थ्रेशोल्ड-आधारित अलर्ट शामिल हैं।
 
 </td>
 <td width="50%" valign="top">
 
-**ऑटोमेशन:**
-पहले एक ट्रिगर चुनें, फिर बताएँ कि क्या होना चाहिए। ट्रिगर में किसी मेट्रिक का तय सीमा पार करना, होस्ट का बंद होना या वापस आना, हेल्थ चेक का बदलना, कोई तय समय, कंटेनर की कोई घटना, या आने वाला webhook शामिल है। कदमों में कमांड और स्निपेट चलाना, कंटेनर और टनल संभालना, मशीन जगाना, कोई URL बुलाना, इंतज़ार करना, शर्त के हिसाब से रास्ता बदलना, दूसरा ऑटोमेशन चलाना, और ntfy, Discord या webhook से आपको बताना शामिल है। टेस्ट रन से आप पहले सुरक्षित तरीके से आज़मा सकते हैं।
+**उपयोगकर्ता प्रमाणीकरण:**
+व्यवस्थापक नियंत्रण (अन्य उपयोगकर्ताओं की जानकारी संपादित कर सकते हैं) और OIDC/LDAP/SSO (एक्सेस कंट्रोल के साथ), 2FA (TOTP), और पासकी (WebAuthn) सपोर्ट के साथ सुरक्षित उपयोगकर्ता प्रबंधन। सभी प्लेटफ़ॉर्म पर सक्रिय उपयोगकर्ता सत्र देखें और अनुमतियाँ रद्द करें। अपने OIDC/स्थानीय खातों को एक साथ जोड़ें। सभी उपयोगकर्ताओं की कार्रवाइयों का ऑडिट लॉग देखें।
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**फ़्लीट:**
-होस्ट चुनकर या टैग नियमों से एक फ़्लीट बनाएँ, ताकि नए होस्ट अपने आप जुड़ जाएँ। एक ही कमांड सभी होस्ट पर एक साथ चलाएँ, सब पर फ़ाइलें भेजें और उनसे लाएँ, पैकेज इंस्टॉल करें, और OS, कर्नेल, आर्किटेक्चर और अपटाइम की सूची इकट्ठा करें।
+**Tailscale एकीकरण:**
+अपने Tailscale नेटवर्क के डिवाइस सूचीबद्ध करें ताकि उन्हें जल्दी से होस्ट के रूप में जोड़ा जा सके, और Tailscale SSH को प्रमाणीकरण विधि के रूप में उपयोग करके कनेक्ट करें, जिससे आपके Tailscale ACL क्रेडेंशियल संग्रहीत किए बिना प्राधिकरण संभाल सकें।
 
 </td>
 <td width="50%" valign="top">
 
-**AI सहायक:**
-यह वैकल्पिक है और जब तक आप खुद चालू न करें, बंद रहता है। OpenAI, Anthropic, Gemini, Ollama या OpenAI के अनुरूप कोई भी एंडपॉइंट जोड़ें और अपने सेटअप के बारे में पूछें। यह होस्ट, फ़्लीट, स्निपेट और अलर्ट पढ़ सकता है, और बदलाव खुद करने के बजाय आपकी मंज़ूरी के लिए सुझाता है। यह क्रेडेंशियल, उपयोगकर्ताओं या सेटिंग्स तक कभी नहीं पहुँच सकता। एडमिन इसे पूरे इंस्टेंस के लिए बंद रख सकते हैं, और आप इसे शुरुआती सेटअप में ही छिपा सकते हैं।
+**RBAC/शेयरिंग:**
+भूमिकाएँ बनाएँ और उपयोगकर्ताओं/भूमिकाओं में होस्ट साझा करें। सभी प्रमाणीकरण प्रकारों और सभी होस्ट प्रोटोकॉल का सपोर्ट करता है।
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**लॉगिन और उपयोगकर्ता:**
-लोकल खातों के साथ OIDC, LDAP, GitHub और Google से लॉगिन, और दो चरणों वाला सत्यापन (TOTP), पासकी (WebAuthn) तथा भरोसेमंद डिवाइस। एडमिन उपयोगकर्ताओं को संभाल सकते हैं, OIDC समूहों को भूमिकाओं से जोड़ सकते हैं, हर प्लेटफ़ॉर्म पर चालू सत्र देख और रद्द कर सकते हैं। अपने लोकल और OIDC खाते आपस में जोड़ें, और ऑडिट लॉग में देखें कि किसने क्या किया।
-
-</td>
-<td width="50%" valign="top">
-
-**भूमिकाएँ और साझाकरण:**
-भूमिकाएँ बनाएँ और होस्ट को उपयोगकर्ताओं या भूमिकाओं के साथ चार स्तरों पर साझा करें: कनेक्ट, देखना, बदलना और प्रबंधन। यह हर तरह के प्रमाणीकरण और हर प्रोटोकॉल के साथ चलता है, और साझा होस्ट के लिए इस्तेमाल होने वाले क्रेडेंशियल आप बदल भी सकते हैं।
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**अलर्ट:**
-CPU, मेमोरी और डिस्क जैसी होस्ट मेट्रिक्स पर नियम लगाएँ, और उनके चलने पर ntfy, Discord या webhook से सूचना पाएँ। चल रहे और ठीक हो चुके अलर्ट इतिहास में देखें, और जो आपके काम के नहीं उन्हें हटा दें।
-
-</td>
-<td width="50%" valign="top">
-
-**होमपेज:**
-खींचकर छोड़ने वाला विजेट ग्रिड जिसे आप खुद बनाते हैं। होस्ट की स्थिति, पिंग, सर्विस लिंक, बुकमार्क, खोज, घड़ियाँ, कैलेंडर, उलटी गिनती, नोट्स, RSS, मौसम, तस्वीरें, iframe, Docker, टनल, मेट्रिक्स के ग्राफ़, अपने API और यहाँ तक कि चालू टर्मिनल तक के विजेट मौजूद हैं।
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**स्निपेट और उपकरण:**
-जो कमांड आप बार-बार चलाते हैं उन्हें सहेजें और एक क्लिक में चलाएँ, होस्ट और अपने इनपुट के लिए वेरिएबल के साथ। एक ही कमांड सभी खुले टर्मिनलों पर चलाएँ, और अपने कमांड इतिहास में ऑटो-कंप्लीट के साथ खोजें।
-
-</td>
-<td width="50%" valign="top">
-
-**सत्र साझा करना:**
-चालू टर्मिनल, RDP, VNC या Telnet सत्र लाइव साझा करें। ऐसा लिंक भेजें जिससे कोई भी बिना खाते के जुड़ सके, या किसी खास Termix उपयोगकर्ता के साथ साझा करें, सिर्फ़ देखने या लिखने की अनुमति के साथ। साझाकरण अपने आप खत्म हो सकता है या कभी भी रद्द किया जा सकता है, और इसे पूरी तरह या हर होस्ट के लिए अलग से बंद किया जा सकता है।
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**सत्र रिकॉर्डिंग और लॉग:**
-टर्मिनल, RDP और VNC सत्र रिकॉर्ड करें और बाद में देखें। सत्र के सादे टेक्स्ट लॉग डाउनलोड करें, और कनेक्शन लॉग देखकर जानें कि जुड़ते समय असल में क्या हुआ।
-
-</td>
-<td width="50%" valign="top">
-
 **सीरियल कनेक्शन:**
-राउटर, स्विच और माइक्रोकंट्रोलर जैसे सीरियल उपकरणों से ब्राउज़र या डेस्कटॉप ऐप से बात करें। बॉड रेट, डेटा बिट, स्टॉप बिट और पैरिटी सेट करें। सहयोगी ब्राउज़रों में Web Serial API और डेस्कटॉप ऐप में मूल बैकएंड इस्तेमाल होता है।
+सीरियल डिवाइस (राउटर, स्विच, माइक्रोकंट्रोलर आदि) से सीधे ब्राउज़र या डेस्कटॉप ऐप से कनेक्ट करें। बॉड रेट, डेटा बिट्स, स्टॉप बिट्स और पैरिटी कॉन्फ़िगर करें। समर्थित ब्राउज़र में Web Serial API या Electron ऐप में नेटिव बैकएंड का उपयोग करता है।
+
+</td>
+<td width="50%" valign="top">
+
+**अलर्ट:**
+होस्ट मेट्रिक्स (CPU, मेमोरी, डिस्क आदि) पर थ्रेशोल्ड-आधारित अलर्ट नियम सेट करें और जब वे ट्रिगर हों तो ntfy या webhooks के माध्यम से सूचना पाएँ। इतिहास लॉग में सक्रिय और हल किए गए अलर्ट देखें।
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Tailscale:**
-अपने tailnet से डिवाइस लाकर कुछ ही क्लिक में होस्ट के रूप में जोड़ें, और Tailscale SSH से जुड़ें ताकि पहुँच का काम आपके tailnet के ACL संभालें और कोई क्रेडेंशियल सहेजना न पड़े। Headscale और अपने एंडपॉइंट भी चलते हैं।
+**होमपेज:**
+ड्रैग-एंड-ड्रॉप विजेट ग्रिड के साथ पूरी तरह से कस्टमाइज़ करने योग्य होमपेज। होस्ट स्टेटस, सर्विस लिंक, घड़ियाँ, नोट्स, RSS फ़ीड, मौसम, Docker कंटेनर, होस्ट मेट्रिक्स चार्ट, एम्बेडेड टर्मिनल, iframes और अन्य के लिए विजेट जोड़ें।
 
 </td>
 <td width="50%" valign="top">
 
-**Proxmox:**
-होस्ट सीधे किसी Proxmox इंस्टेंस से लाएँ, और नोड तथा गेस्ट के आँकड़े, जिनमें CPU, मेमोरी और स्टोरेज शामिल हैं, अलग टैब में देखें।
+**डेटाबेस एन्क्रिप्शन:**
+बैकएंड एन्क्रिप्टेड SQLite डेटाबेस फ़ाइलों के रूप में संग्रहीत। अधिक जानकारी के लिए [डॉक्स](https://docs.termix.site/security) देखें।
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**वर्कस्पेस और टैब:**
-टैब का एक सेट उनके स्प्लिट लेआउट के साथ सहेजें और पूरा का पूरा एक क्लिक में फिर खोलें। Termix आपका पिछला सत्र भी याद रखता है, इसलिए पेज रीफ़्रेश करने पर और दूसरे डिवाइस पर भी आपके टैब लौट आते हैं।
+**नेटवर्क ग्राफ़:**
+स्थिति सपोर्ट के साथ अपने SSH कनेक्शन के आधार पर अपने होमलैब को विज़ुअलाइज़ करने के लिए अपना डैशबोर्ड कस्टमाइज़ करें।
 
 </td>
 <td width="50%" valign="top">
 
-**निर्देशित सेटअप:**
-एक छोटा सा सेटअप आपको इंटरफ़ेस प्रीसेट, थीम, मनचाही सुविधाएँ और पहला होस्ट चुनने में मदद करता है। सरल मोड वह सब छिपा देता है जो आप इस्तेमाल नहीं करते, और आप सेटअप दोबारा चला सकते हैं या प्रीसेट कभी भी बदल सकते हैं।
+**SSH टूल्स:**
+एक क्लिक से निष्पादित होने वाले पुन: उपयोग योग्य कमांड स्निपेट बनाएँ। एक साथ कई खुले टर्मिनलों में एक कमांड चलाएँ।
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**स्वतंत्र डेस्कटॉप ऐप और सिंक:**
-डेस्कटॉप ऐप अपने लोकल बैकएंड और डेटाबेस के साथ बिना किसी सर्वर के अकेले चलता है। आप इसे किसी Termix सर्वर से जोड़कर होस्ट, क्रेडेंशियल, स्निपेट वगैरह दोनों तरफ़ सिंक कर सकते हैं, और चुन सकते हैं कि कनेक्शन आपकी मशीन से शुरू हों या सर्वर के रास्ते।
-
-</td>
-<td width="50%" valign="top">
-
-**कमांड लाइन:**
-आपके शेल और स्क्रिप्ट के लिए `termix` CLI। टर्मिनल खोलें, किसी एक होस्ट या पूरे फ़्लीट पर कमांड चलाएँ, SFTP से फ़ाइलें भेजें, और होस्ट, स्निपेट व क्रेडेंशियल संभालें। `npm install -g @termix-cli/cli` से इंस्टॉल करें या अलग बाइनरी लें। [CLI दस्तावेज़](https://docs.termix.site/cli) देखें।
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**सुरक्षा:**
-पासवर्ड, कुंजियाँ और बाकी गोपनीय जानकारी हर उपयोगकर्ता के लिए अलग से एन्क्रिप्ट होती है, और डेटाबेस फ़ाइलें भी डिस्क पर एन्क्रिप्ट की जा सकती हैं। यह कैसे काम करता है, यह [दस्तावेज़](https://docs.termix.site/security) में देखें।
+**परसिस्टेंट टैब:**
+उपयोगकर्ता प्रोफ़ाइल में सक्षम होने पर SSH सेशन और टैब डिवाइस/रीफ्रेश के पार खुले रहते हैं।
 
 </td>
 <td width="50%" valign="top">
 
 **भाषाएँ:**
-लगभग 30 भाषाएँ पहले से मौजूद हैं, जिन्हें [Crowdin](https://docs.termix.site/translations) से संभाला जाता है।
+लगभग 30 भाषाओं का बिल्ट-इन सपोर्ट ([Crowdin](https://docs.termix.site/translations) द्वारा प्रबंधित)।
 
 </td>
 </tr>
@@ -252,23 +196,20 @@ CPU, मेमोरी और डिस्क जैसी होस्ट म
 <br />
 
 <details>
-<summary><b>और भी विशेषताएँ</b></summary>
+<summary><b>अधिक विशेषताएँ</b></summary>
 <br />
 
-- **डैशबोर्ड** - आपके सर्वर एक नज़र में, ऐसे कार्ड के साथ जिन्हें आप खुद जमाते हैं
-- **नेटवर्क ग्राफ़** - आपके होस्ट से बना आपका होमलैब का नक्शा, लाइव स्थिति के साथ
-- **tmux मॉनिटर** - tmux के सत्र, विंडो और पैन देखें, झलक और खोज के साथ
-- **API कुंजियाँ** - स्क्रिप्ट और CI के लिए, समाप्ति तिथि वाली उपयोगकर्ता-विशिष्ट कुंजियाँ
-- **निर्यात और आयात** - होस्ट, क्रेडेंशियल और फ़ाइल मैनेजर का डेटा अंदर-बाहर ले जाएँ
-- **अपने आप SSL** - प्रमाणपत्र आपके लिए बनते और नवीनीकृत होते हैं, HTTPS रीडायरेक्ट के साथ, या अपने खुद के लगाएँ
-- **डेटाबेस** - डिफ़ॉल्ट रूप से SQLite, साथ में PostgreSQL और MySQL भी
-- **आधुनिक इंटरफ़ेस** - साफ़ सुथरा React इंटरफ़ेस जो डेस्कटॉप और मोबाइल दोनों पर चलता है, लाइट, डार्क और Dracula जैसी थीम के साथ। कोई भी कनेक्शन URL से पूरी स्क्रीन में खुल सकता है
-- **कमांड पैलेट** - बाईं Shift दो बार दबाकर कीबोर्ड से सीधे किसी होस्ट पर जाएँ
-- **कीबोर्ड शॉर्टकट** - टैब बदलना, बंद करना और बहुत कुछ, सब दोबारा तय किए जा सकते हैं
-- **Wake-on-LAN** - किसी मशीन को Termix से या ऑटोमेशन के किसी कदम से जगाएँ
-- **भरोसेमंद प्रॉक्सी से लॉगिन** - रिवर्स प्रॉक्सी को लॉगिन संभालने दें और उपयोगकर्ता की जानकारी आगे भेजने दें
-- **भरपूर SSH सुविधाएँ** - जंप होस्ट, Warpgate, TOTP पूछना, SOCKS5, होस्ट कुंजी की जाँच, पासवर्ड अपने आप भरना, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, पोर्ट नॉकिंग, टर्मिनल लॉग, एजेंट फ़ॉरवर्डिंग, Bitwarden SSH एजेंट, HashiCorp Vault से SSH हस्ताक्षर और भी बहुत कुछ
-- **Termix ID** - sshid.io जैसा अपना बना हुआ इंतज़ाम। एक नाम लें, अपनी सार्वजनिक कुंजियाँ एक रिज़ॉल्वर URL पर रखें, और अंदर मौजूद CA से SSH प्रमाणपत्र जारी करें
+- **डैशबोर्ड** - अपने डैशबोर्ड पर एक नज़र में सर्वर की जानकारी देखें
+- **API कुंजियाँ** - ऑटोमेशन/CI के लिए उपयोग हेतु समाप्ति तिथियों के साथ उपयोगकर्ता-स्कोप्ड API कुंजियाँ बनाएँ
+- **डेटा एक्सपोर्ट/इम्पोर्ट** - SSH होस्ट, क्रेडेंशियल और फ़ाइल मैनेजर डेटा एक्सपोर्ट और इम्पोर्ट करें
+- **स्वचालित SSL सेटअप** - HTTPS रीडायरेक्ट के साथ बिल्ट-इन SSL सर्टिफ़िकेट जनरेशन और प्रबंधन
+- **आधुनिक UI** - React, Tailwind CSS, और Shadcn से बना साफ़ डेस्कटॉप/मोबाइल-फ़्रेंडली इंटरफ़ेस। लाइट, डार्क, ड्रैकुला आदि सहित कई अलग-अलग UI थीम के बीच चुनें। किसी भी कनेक्शन को फ़ुल-स्क्रीन में खोलने के लिए URL रूट का उपयोग करें।
+- **कमांड इतिहास** - पहले चलाए गए SSH कमांड का ऑटो-कम्प्लीट और दृश्य
+- **क्विक कनेक्ट** - कनेक्शन डेटा सहेजे बिना सर्वर से कनेक्ट करें
+- **कमांड पैलेट** - अपने कीबोर्ड से SSH कनेक्शन तक त्वरित पहुँच के लिए बाएँ Shift को दो बार टैप करें
+- **Proxmox एकीकरण** - अपने Proxmox इंस्टेंस से Termix में होस्ट स्वचालित रूप से जोड़ें
+- **SSH सुविधाओं से भरपूर** - जम्प होस्ट, Warpgate, TOTP आधारित कनेक्शन, SOCKS5, होस्ट की वेरिफ़िकेशन, पासवर्ड ऑटोफ़िल, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, पोर्ट नॉकिंग, टर्मिनल लॉगिंग, SSH एजेंट फ़ॉरवर्डिंग, Bitwarden SSH एजेंट, HashiCorp Vault SSH सिग्निंग, और अन्य का सपोर्ट।
+- **Termix ID** - Termix में बिल्ट-इन sshid.io के समकक्ष। एक हैंडल क्लेम करें, अपनी सार्वजनिक SSH कुंजियों को एक रिज़ॉल्वर URL पर प्रकाशित करें, और SSH सर्टिफ़िकेट जारी करने के लिए बिल्ट-इन CA का उपयोग करें।
 
 </details>
 
@@ -311,9 +252,9 @@ CPU, मेमोरी और डिस्क जैसी होस्ट म
 
 ## इंस्टॉलेशन
 
-सभी प्लेटफ़ॉर्म पर पूरी इंस्टॉलेशन जानकारी के लिए [Termix दस्तावेज़](https://docs.termix.site/install) देखें।
+सभी प्लेटफ़ॉर्म पर पूर्ण इंस्टॉलेशन निर्देशों के लिए Termix [डॉक्स](https://docs.termix.site/install) पर जाएँ।
 
-Docker Compose फ़ाइल का नमूना (अगर आप रिमोट डेस्कटॉप इस्तेमाल नहीं करने वाले तो `guacd` और नेटवर्क वाला हिस्सा हटा सकते हैं):
+नमूना Docker Compose फ़ाइल (यदि आप रिमोट डेस्कटॉप सुविधाओं का उपयोग करने की योजना नहीं बना रहे हैं तो आप `guacd` और नेटवर्क को हटा सकते हैं):
 
 ```yaml
 services:
@@ -350,37 +291,11 @@ networks:
     driver: bridge
 ```
 
-### कमांड लाइन
-
-Termix में CLI भी है, ताकि आप टर्मिनल से अपने सर्वर संभाल सकें और Termix को अपनी स्क्रिप्ट में इस्तेमाल कर सकें।
-
-```bash
-npm install -g @termix-cli/cli
-termix login --url https://termix.example.com
-termix ssh 1
-```
-
-यह टर्मिनल खोल सकता है, एक होस्ट या पूरे फ़्लीट पर कमांड चला सकता है, SFTP से फ़ाइलें ले जा सकता है, और होस्ट, स्निपेट व क्रेडेंशियल संभाल सकता है। पूरा दस्तावेज़ [docs.termix.site/cli](https://docs.termix.site/cli) पर है।
-
-### क्लाउड होस्टिंग
-
-आप Termix सर्वर को अपने नेटवर्क के बजाय किसी VPS पर भी चला सकते हैं। अगर Termix उसी नेटवर्क पर चल रहा है जिसे वह संभालता है, तो गड़बड़ी होने पर वह भी साथ ही बंद हो जाएगा, ठीक उसी वक्त जब आपको उसे ठीक करने के लिए चाहिए। बाहर चलाने पर वह हमेशा पहुँच में रहता है, एक स्थिर IP देता है, और बिना VPN या पोर्ट फ़ॉरवर्ड के कहीं से भी पहुँच मिलती है।
-
-[GINERNET](https://docs.termix.site/install/ginernet) Termix को प्रायोजित करता है, और दस्तावेज़ में उनके VPS प्लेटफ़ॉर्म पर तैनाती की कदम-दर-कदम गाइड मौजूद है।
-
-<br />
-
-## टेलीमेट्री
-
-Termix दिन में एक बार एक छोटा सा गुमनाम संकेत भेजता है, ताकि मुझे पता चले कि कितने इंस्टेंस चल रहे हैं और कौन सी सुविधाएँ सच में इस्तेमाल होती हैं। इसमें एक बेतरतीब इंस्टेंस आईडी, आपके पास कितने उपयोगकर्ता और होस्ट हैं, ऐप का संस्करण, और पिछले 24 घंटे में इस्तेमाल हुई सुविधाएँ (टर्मिनल, फ़ाइल मैनेजर, टनल, docker आदि) होती हैं। इसमें कभी भी उपयोगकर्ता नाम, होस्ट नाम, IP पते, क्रेडेंशियल या ऐसी कोई चीज़ नहीं होती जो आपकी या आपके सर्वर की पहचान बताए।
-
-यह डिफ़ॉल्ट रूप से चालू रहता है। इसे एडमिन सेटिंग्स में सामान्य के अंतर्गत बंद करें, या Termix शुरू करने से पहले ही `ENABLE_TELEMETRY=false` सेट कर दें।
-
 <br />
 
 ## दान करें
 
-Termix मुफ़्त और ओपन सोर्स है, न कोई सदस्यता है न कोई पेड प्लान। अगर यह आपके काम आता है, तो सर्वर, डोमेन और विकास के समय में मदद के लिए दान करने पर विचार करें। दान से SAML, Kubernetes और एजेंट सपोर्ट जैसी सुविधाएँ बनाने के लिए ज़रूरी शोध और सीखने का समय भी मिलता है। नीचे प्रगति देखें और दान करें।
+Termix मुफ़्त और ओपन सोर्स है, बिना किसी सब्सक्रिप्शन या पेड प्लान के। यदि आपको यह उपयोगी लगता है, तो सर्वर लागत, डोमेन और विकास समय को कवर करने में मदद के लिए दान करने पर विचार करें। दान SAML, Kubernetes, और Agent सपोर्ट जैसी सुविधाओं के निर्माण के लिए आवश्यक शोध और सीखने में लगने वाले समय को वित्त पोषित करने में भी मदद करते हैं। नीचे प्रगति देखें और दान करें।
 
 [दान करें](https://donate.termix.site/)
 
@@ -388,7 +303,7 @@ Termix मुफ़्त और ओपन सोर्स है, न कोई
 
 ## प्रायोजक
 
-विकास में सहयोग के लिए पेड प्लेसमेंट में रुचि है? [mail@termix.site](mailto:mail@termix.site) पर ईमेल करें।
+विकास को समर्थन देने के लिए पेड प्लेसमेंट में रुचि है? [mail@termix.site](mailto:mail@termix.site) पर ईमेल करें।
 
 <div align="center">
 
@@ -410,6 +325,10 @@ Termix मुफ़्त और ओपन सोर्स है, न कोई
   <img src="https://sirv.sirv.com/website/screenshots/cloudflare/cloudflare-logo.png?w=300" height="40" alt="Cloudflare" />
 </a>
 &nbsp;&nbsp;&nbsp;
+<a href="https://tailscale.com/">
+  <img src="https://drive.google.com/uc?export=view&id=1lIxkJuX6M23bW-2FElhT0rQieTrzaVSL" height="40" alt="Tailscale" />
+</a>
+&nbsp;&nbsp;&nbsp;
 <a href="https://akamai.com/">
   <img src="https://upload.wikimedia.org/wikipedia/commons/8/8b/Akamai_logo.svg" height="40" alt="Akamai" />
 </a>
@@ -421,17 +340,14 @@ Termix मुफ़्त और ओपन सोर्स है, न कोई
 <a href="https://rackgenius.com/">
   <img src="https://rackgenius.com/rackgenius-logo.png" height="40" alt="Rack Genius" />
 </a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://ginernet.com/">
-  <img src="https://ginernet.com/img/logo-web.png" height="40" alt="Ginernet" />
-</a>
+
 </div>
 
 <br />
 
 ## सहायता
 
-मदद चाहिए या कोई सुविधा माँगनी है? एक [नया issue](https://github.com/Termix-SSH/Support/issues) खोलें और जितना हो सके विस्तार से लिखें, हो सके तो अंग्रेज़ी में। आप [Discord](https://discord.gg/jVQGdvHDrf) के सपोर्ट चैनल में भी पूछ सकते हैं, हालाँकि वहाँ जवाब आने में ज़्यादा समय लग सकता है।
+यदि आपको सहायता चाहिए या Termix के लिए किसी विशेषता का अनुरोध करना चाहते हैं, तो [इश्यूज़](https://github.com/Termix-SSH/Support/issues) पेज पर जाएँ, लॉग इन करें, और `New Issue` दबाएँ। कृपया अपने इश्यू में यथासंभव विस्तृत विवरण दें, अधिमानतः अंग्रेज़ी में लिखें। आप [Discord](https://discord.gg/jVQGdvHDrf) सर्वर में भी शामिल हो सकते हैं और सहायता चैनल पर जा सकते हैं, हालाँकि, प्रतिक्रिया समय अधिक हो सकता है।
 
 <br />
 
@@ -443,7 +359,7 @@ Termix मुफ़्त और ओपन सोर्स है, न कोई
 
 [![YouTube](../repo-images/YouTube.png)](https://www.youtube.com/@TermixSSH/videos)
 
-<sub>YouTube पर अपडेट की जानकारी देखें</sub>
+<sub>YouTube पर अपडेट की समीक्षाएँ देखें</sub>
 
 <br />
 <br />
@@ -483,7 +399,7 @@ Termix मुफ़्त और ओपन सोर्स है, न कोई
 </tr>
 </table>
 
-<sub>कुछ वीडियो और तस्वीरें पुरानी हो सकती हैं या सुविधाओं को पूरी तरह नहीं दिखा पातीं।</sub>
+<sub>कुछ वीडियो और छवियाँ पुरानी हो सकती हैं या विशेषताओं को पूरी तरह से प्रदर्शित नहीं कर सकती हैं।</sub>
 
 </div>
 
@@ -491,10 +407,10 @@ Termix मुफ़्त और ओपन सोर्स है, न कोई
 
 ## नियोजित विशेषताएँ
 
-सभी नियोजित सुविधाएँ [Projects](https://github.com/orgs/Termix-SSH/projects/5) में हैं। अगर आप योगदान देना चाहते हैं, तो [Contributing](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md) देखें।
+सभी नियोजित विशेषताओं के लिए [प्रोजेक्ट्स](https://github.com/orgs/Termix-SSH/projects/5) देखें। यदि आप योगदान देना चाहते हैं, तो [योगदान](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md) देखें।
 
 <br />
 
 ## लाइसेंस
 
-Apache License संस्करण 2.0 के तहत वितरित। अधिक जानकारी के लिए `LICENSE` देखें।
+Apache License Version 2.0 के तहत वितरित। अधिक जानकारी के लिए `LICENSE` देखें।

docs/readme/README-IT.md

@@ -4,7 +4,7 @@
 
 <h1>Termix</h1>
 
-<p>Gestione dei server self-hosted, da SSH e desktop remoto fino alle automazioni</p>
+<p>Gestione SSH self-hosted e accesso al desktop remoto</p>
 
 <p>
   <a href="../README.md">English</a> ·
@@ -32,12 +32,12 @@
 </p>
 
 <p>
-  <a href="https://donate.termix.site/"><img alt="Donations this month" src="https://img.shields.io/badge/dynamic/json?style=for-the-badge&label=Donations%20this%20month&query=%24.fiatTotal&prefix=%24&url=https%3A%2F%2Ftermix.site%2Fdonation-snapshot.json&color=F39044&labelColor=1a1a1a" /></a>
+  <a href="https://donate.termix.site/"><img alt="Donazioni di questo mese" src="https://img.shields.io/badge/dynamic/json?style=for-the-badge&label=Donazioni%20di%20questo%20mese&query=%24.fiatTotal&prefix=%24&url=https%3A%2F%2Ftermix.site%2Fdonation-snapshot.json&color=F39044&labelColor=1a1a1a" /></a>
 </p>
 
 <br />
 
-Termix è gratuito e open source. Se ti è utile, valuta una [donazione](https://donate.termix.site/) per aiutare a coprire i costi dei server e il tempo di sviluppo.
+Termix è gratuito e open source. Se lo trovi utile, considera di [donare](https://donate.termix.site/) per aiutare a coprire i costi del server e il tempo di sviluppo.
 
 <br />
 
@@ -58,7 +58,7 @@ Termix è gratuito e open source. Se ti è utile, valuta una [donazione](https:/
 
 ## Panoramica
 
-Termix è una piattaforma gratuita, open source e self-hosted per gestire i tuoi server. Mette in un unico posto terminali SSH, desktop remoti (RDP, VNC, Telnet), trasferimenti di file, tunnel, Docker, metriche e automazioni, su web, desktop e mobile. È un'alternativa self-hosted a Termius che resta gratuita per sempre.
+Termix è una piattaforma di gestione server tutto-in-uno, open-source, per sempre gratuita e self-hosted. Fornisce una soluzione multipiattaforma per gestire i tuoi server e la tua infrastruttura attraverso un'unica interfaccia intuitiva. Termix offre accesso al terminale SSH, controllo remoto del desktop (RDP, VNC, Telnet), funzionalità di tunneling SSH, gestione remota dei file e molti altri strumenti. Termix è la perfetta alternativa gratuita e self-hosted a Termius, disponibile per tutte le piattaforme.
 
 <br />
 
@@ -68,182 +68,126 @@ Termix è una piattaforma gratuita, open source e self-hosted per gestire i tuoi
 <tr>
 <td width="50%" valign="top">
 
-**Terminale SSH:**
-Un terminale completo con schede come quelle del browser e schermo diviso, fino a 6 pannelli insieme. Scegli tema, carattere e colori. Sopra ogni sessione c'è una barra con CPU, memoria e disco in tempo reale, più scorciatoie ai file, a Docker, ai tunnel e alle metriche di quell'host.
+**Accesso Terminale SSH:**
+Terminale completo con supporto schermo diviso (fino a 4 pannelli) con un sistema di schede in stile browser. Include il supporto per la personalizzazione del terminale, inclusi temi, font e altri componenti comuni.
 
 </td>
 <td width="50%" valign="top">
 
-**Desktop remoto:**
-RDP, VNC e Telnet nel browser, in schede e schermo diviso come qualsiasi altra sessione. Include un browser dei file per le unità RDP e il caricamento trascinando i file. Sul desktop Windows puoi anche aprire un host nel client RDP nativo.
+**Accesso Desktop Remoto:**
+Supporto RDP, VNC e Telnet tramite browser con personalizzazione completa e schermo diviso.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Tunnel SSH:**
-Inoltro locale, remoto e SOCKS dinamico, con riconnessione automatica e controlli di stato. I tunnel da client a server dell'app desktop restano su quella macchina, e puoi salvare delle preimpostazioni sul server per portare una configurazione su un altro computer.
+**Gestione Tunnel SSH:**
+Crea e gestisci tunnel SSH da server a server con riconnessione automatica, monitoraggio dello stato e inoltro locale, remoto o SOCKS dinamico. Le impostazioni del tunnel da client desktop a server sono archiviate localmente per ogni installazione desktop; gli snapshot di preset C2S opzionali possono essere salvati sul server, rinominati, caricati o eliminati per spostare una configurazione di tunnel locale tra i client.
 
 </td>
 <td width="50%" valign="top">
 
-**Gestore file:**
-Sfoglia, modifica, carica, scarica, rinomina, sposta ed elimina file via SFTP, anche con sudo. Guarda e modifica codice, immagini, audio e video. Copia i file direttamente da un server all'altro: il percorso più veloce viene scelto per te e i trasferimenti vengono verificati.
+**Gestore File Remoto:**
+Gestisci i file direttamente sui server remoti con supporto per la visualizzazione e la modifica di codice, immagini, audio e video. Carica, scarica, rinomina, elimina e sposta file senza problemi con supporto sudo. Include il supporto per spostare file da server a server.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Docker e Podman:**
-Avvia, ferma, metti in pausa ed elimina i container, guarda le loro statistiche e apri una shell dentro uno di essi. Funziona sia con Docker sia con Podman. Non vuole sostituire Portainer o Dockge, serve solo a gestire i container che hai già.
+**Gestione Docker e Podman:**
+Avvia, ferma, metti in pausa, rimuovi container. Visualizza le statistiche dei container. Controlla i container tramite terminale docker exec. Supporta sia Docker che Podman come runtime dei container. Non è stato creato per sostituire Portainer o Dockge, ma piuttosto per gestire semplicemente i tuoi container rispetto alla loro creazione.
 
 </td>
 <td width="50%" valign="top">
 
-**Gestore host:**
-Salva e organizza gli host con etichette e cartelle annidate a cui puoi dare nome e colore. Riutilizza le credenziali salvate su più host, distribuisci le chiavi SSH in automatico, raggruppa gli host sotto un host padre, modifica ed esporta in blocco, e usa la connessione rapida per i collegamenti una tantum che non vuoi salvare.
+**Gestore Host SSH:**
+Salva, organizza e gestisci le tue connessioni SSH con tag e cartelle (con personalizzazione delle cartelle e supporto per cartelle annidate), salva facilmente le informazioni di accesso riutilizzabili e automatizza il deployment delle chiavi SSH.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Metriche host:**
-CPU, memoria, disco, rete, temperatura, tempo di accensione, processi, porte, accessi e informazioni di sistema sulla maggior parte dei server Linux, con grafici storici. Le schede di gestione ti fanno seguire servizi, cron, pacchetti, utenti, regole del firewall, WireGuard, Tailscale, certificati SSL, log e controlli di stato senza uscire da Termix.
+**Metriche Host:**
+Visualizza CPU, memoria, utilizzo del disco, rete, uptime, informazioni di sistema, firewall, monitoraggio porte, visualizzatore di log, utenti/permessi, certificati e molto altro, funzionanti sulla maggior parte dei server basati su Linux. Include grafici storici delle serie temporali e avvisi basati su soglie con supporto ntfy e webhook.
 
 </td>
 <td width="50%" valign="top">
 
-**Automazioni:**
-Scegli un evento che fa partire tutto, poi decidi cosa deve succedere. Gli eventi possono essere una metrica che supera una soglia, un host che cade o torna su, un controllo di stato che cambia, una pianificazione, un evento di un container o un webhook in arrivo. I passaggi possono eseguire comandi e frammenti, gestire container e tunnel, accendere un host, chiamare un URL, aspettare, seguire una condizione, avviare un'altra automazione e avvisarti via ntfy, Discord o webhook. Le prove a vuoto ti permettono di provare senza rischi.
+**Autenticazione Utente:**
+Gestione utenti sicura con controlli amministrativi (può modificare le informazioni di altri utenti) e OIDC/LDAP/SSO (con controllo degli accessi), 2FA (TOTP) e supporto passkey (WebAuthn). Visualizza le sessioni utente attive su tutte le piattaforme e revoca i permessi. Collega i tuoi account OIDC/Locali tra loro. Visualizza il log di controllo delle azioni di tutti gli utenti.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Flotte:**
-Raggruppa gli host in una flotta scegliendoli o con regole sulle etichette, così i nuovi host entrano da soli. Esegui un comando su tutti gli host in una volta, invia e recupera file su tutti quanti, installa pacchetti e raccogli un inventario di sistema operativo, kernel, architettura e tempo di accensione.
+**Integrazione Tailscale:**
+Elenca i dispositivi della tua rete Tailscale per aggiungerli rapidamente come host, e connettiti utilizzando Tailscale SSH come metodo di autenticazione, lasciando che le ACL della tua rete gestiscano l'autorizzazione senza memorizzare credenziali.
 
 </td>
 <td width="50%" valign="top">
 
-**Assistente IA:**
-È opzionale e resta spento finché non lo accendi tu. Collega OpenAI, Anthropic, Gemini, Ollama o qualsiasi endpoint compatibile con OpenAI e fai domande sulla tua installazione. Legge host, flotte, frammenti e avvisi, e propone modifiche da approvare invece di farle da solo. Non può mai toccare credenziali, utenti o impostazioni. Gli amministratori possono lasciarlo spento per tutta l'istanza, e tu puoi nasconderlo già durante la configurazione.
+**RBAC/Condivisione:**
+Crea ruoli e condividi host tra utenti/ruoli. Supporta tutti i tipi di autenticazione e tutti i protocolli host.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Accesso e utenti:**
-Account locali più accesso con OIDC, LDAP, GitHub e Google, con doppia autenticazione (TOTP), passkey (WebAuthn) e dispositivi fidati. Gli amministratori possono gestire gli utenti, collegare i gruppi OIDC ai ruoli, vedere tutte le sessioni attive su ogni piattaforma e revocarle. Collega il tuo account locale a quello OIDC e consulta il registro di controllo di quello che ha fatto ognuno.
+**Connessioni Seriali:**
+Connettiti a dispositivi seriali (router, switch, microcontrollori, ecc.) direttamente dal browser o dall'app desktop. Configura baud rate, bit di dati, bit di stop e parità. Utilizza la Web Serial API nei browser supportati o un backend nativo nell'app Electron.
 
 </td>
 <td width="50%" valign="top">
 
-**Ruoli e condivisione:**
-Crea ruoli e condividi gli host con utenti o ruoli su quattro livelli: connessione, visualizzazione, modifica e gestione. Funziona con ogni tipo di autenticazione e ogni protocollo, e puoi cambiare le credenziali usate per un host condiviso.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
 **Avvisi:**
-Imposta regole sulle metriche degli host come CPU, memoria e disco, e ricevi una notifica via ntfy, Discord o webhook quando scattano. Guarda gli avvisi attivi e quelli rientrati in uno storico, e scarta quelli che non ti interessano.
-
-</td>
-<td width="50%" valign="top">
-
-**Pagina iniziale:**
-Una griglia di widget che costruisci tu trascinandoli. Ci sono widget per stato degli host, ping, collegamenti ai servizi, segnalibri, ricerca, orologi, calendari, conti alla rovescia, note, RSS, meteo, immagini, iframe, Docker, tunnel, grafici delle metriche, API personalizzate e perfino un terminale dal vivo.
+Imposta regole di avviso basate su soglie per le metriche dell'host (CPU, memoria, disco, ecc.) e ricevi notifiche tramite ntfy o webhook quando si attivano. Visualizza gli avvisi attivi e risolti in un registro storico.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Frammenti e strumenti:**
-Salva i comandi che usi spesso e lanciali con un clic, con variabili per l'host e per quello che scrivi tu. Esegui uno stesso comando su tutti i terminali aperti e cerca nella cronologia con il completamento automatico.
+**Homepage:**
+Una homepage completamente personalizzabile con una griglia di widget drag-and-drop. Aggiungi widget per lo stato dell'host, link ai servizi, orologi, note, feed RSS, meteo, container Docker, grafici delle metriche dell'host, terminali incorporati, iframe e altro ancora.
 
 </td>
 <td width="50%" valign="top">
 
-**Condivisione sessione:**
-Condividi dal vivo una sessione di terminale, RDP, VNC o Telnet. Manda un link a cui chiunque può accedere senza account, oppure condividi con un utente Termix preciso, in sola lettura o anche in scrittura. Le condivisioni possono scadere da sole o essere revocate, e si possono spegnere per tutti o per singolo host.
+**Crittografia Database:**
+Il backend è archiviato come file di database SQLite crittografati. Consulta la [documentazione](https://docs.termix.site/security) per maggiori informazioni.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Registrazione e log delle sessioni:**
-Registra le sessioni di terminale, RDP e VNC e riguardale dopo. Scarica i log di testo di una sessione e consulta il registro delle connessioni per vedere esattamente cosa è successo durante una connessione.
+**Grafico di Rete:**
+Personalizza la tua Dashboard per visualizzare il tuo homelab basato sulle connessioni SSH con supporto dello stato.
 
 </td>
 <td width="50%" valign="top">
 
-**Connessioni seriali:**
-Parla con dispositivi seriali come router, switch e microcontrollori dal browser o dall'app desktop. Imposta velocità, bit di dati, bit di stop e parità. Usa l'API Web Serial nei browser compatibili, oppure un backend nativo nell'app desktop.
+**Strumenti SSH:**
+Crea snippet di comandi riutilizzabili che si eseguono con un singolo clic. Esegui un comando simultaneamente su più terminali aperti.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Tailscale:**
-Prendi i dispositivi dalla tua tailnet per aggiungerli come host in pochi clic, e collegati con Tailscale SSH così gli ACL della tailnet gestiscono l'accesso senza salvare credenziali. Funzionano anche Headscale e gli endpoint personalizzati.
-
-</td>
-<td width="50%" valign="top">
-
-**Proxmox:**
-Importa gli host direttamente da un'istanza Proxmox e segui le statistiche di nodi e macchine ospiti, comprese CPU, memoria e spazio, in una scheda dedicata.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Spazi di lavoro e schede:**
-Salva un insieme di schede con la loro disposizione divisa e riapri tutto con un clic. Termix ricorda anche l'ultima sessione, così le schede tornano dopo un ricaricamento e su altri dispositivi.
-
-</td>
-<td width="50%" valign="top">
-
-**Configurazione guidata:**
-Una breve configurazione ti accompagna nella scelta di una preimpostazione dell'interfaccia, del tema, delle funzionalità che vuoi e del primo host. La modalità semplice nasconde quello che non usi, e puoi rifare la configurazione o cambiare preimpostazione quando vuoi.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Desktop autonomo e sincronizzazione:**
-L'app desktop funziona da sola, con backend e database locali, senza bisogno di un server. Puoi anche collegarla a un server Termix per sincronizzare nei due sensi host, credenziali, frammenti e altro, e scegliere se le connessioni partono dal tuo computer o passano dal server.
-
-</td>
-<td width="50%" valign="top">
-
-**Riga di comando:**
-Una CLI `termix` per la tua shell e i tuoi script. Apri terminali, esegui un comando su un host o su un'intera flotta, sposta file via SFTP e gestisci host, frammenti e credenziali. Installala con `npm install -g @termix-cli/cli` oppure prendi un binario autonomo. Vedi la [documentazione della CLI](https://docs.termix.site/cli).
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Sicurezza:**
-Password, chiavi e altri segreti sono cifrati per ogni utente, e gli stessi file del database possono essere cifrati su disco. Guarda la [documentazione](https://docs.termix.site/security) per capire come funziona.
+**Schede Persistenti:**
+Le sessioni SSH e le schede rimangono aperte tra dispositivi/aggiornamenti se abilitato nel profilo utente.
 
 </td>
 <td width="50%" valign="top">
 
 **Lingue:**
-Circa 30 lingue incluse, gestite tramite [Crowdin](https://docs.termix.site/translations).
+Supporto integrato per circa 30 lingue (gestito da [Crowdin](https://docs.termix.site/translations)).
 
 </td>
 </tr>
@@ -255,26 +199,23 @@ Circa 30 lingue incluse, gestite tramite [Crowdin](https://docs.termix.site/tran
 <summary><b>Altre funzionalità</b></summary>
 <br />
 
-- **Dashboard** - I tuoi server a colpo d'occhio, con schede che disponi tu
-- **Grafico di rete** - Il tuo homelab disegnato a partire dagli host, con stato in tempo reale
-- **Monitor tmux** - Sfoglia sessioni, finestre e pannelli di tmux, con anteprime e ricerca
-- **Chiavi API** - Chiavi per singolo utente con scadenza, per script e CI
-- **Esporta e importa** - Sposta host, credenziali e dati del gestore file dentro e fuori
-- **SSL automatico** - Certificati generati e rinnovati per te, con reindirizzamento a HTTPS, oppure usa i tuoi
-- **Database** - SQLite di base, con supporto anche per PostgreSQL e MySQL
-- **Interfaccia moderna** - Interfaccia React pulita che funziona su desktop e mobile, con temi come chiaro, scuro e Dracula. Ogni connessione si può aprire a schermo intero da un URL
-- **Palette comandi** - Premi due volte Maiusc sinistro per saltare a un host da tastiera
-- **Scorciatoie da tastiera** - Spostarsi tra le schede, chiuderle e altro, tutto riassegnabile
-- **Wake-on-LAN** - Accendi una macchina da Termix o da un passaggio di un'automazione
-- **Autenticazione tramite proxy fidato** - Lascia che un reverse proxy gestisca l'accesso e passi l'utente
-- **SSH molto completo** - Host di salto, Warpgate, richieste TOTP, SOCKS5, verifica delle chiavi host, riempimento automatico della password, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, port knocking, log del terminale, inoltro dell'agente, agente SSH di Bitwarden, firma SSH con HashiCorp Vault e altro
-- **Termix ID** - Una versione integrata di sshid.io. Prendi un identificativo, pubblica le tue chiavi pubbliche su un URL di risoluzione ed emetti certificati SSH dalla CA integrata
+- **Dashboard** - Visualizza le informazioni del server a colpo d'occhio sulla tua dashboard
+- **Chiavi API** - Crea chiavi API con ambito utente e date di scadenza da utilizzare per automazione/CI
+- **Esportazione/Importazione Dati** - Esporta e importa host SSH, credenziali e dati del gestore file
+- **Configurazione SSL Automatica** - Generazione e gestione integrata dei certificati SSL con reindirizzamenti HTTPS
+- **Interfaccia Moderna** - Interfaccia pulita e responsive per desktop/mobile costruita con React, Tailwind CSS e Shadcn. Scegli tra molti temi UI diversi, inclusi chiaro, scuro, Dracula, ecc. Usa i percorsi URL per aprire qualsiasi connessione a schermo intero.
+- **Cronologia Comandi** - Autocompletamento e visualizzazione dei comandi SSH eseguiti in precedenza
+- **Connessione Rapida** - Connettiti a un server senza dover salvare i dati di connessione
+- **Palette Comandi** - Premi due volte shift sinistro per accedere rapidamente alle connessioni SSH con la tastiera
+- **Integrazione Proxmox** - Aggiungi automaticamente host a Termix dalla tua istanza Proxmox
+- **SSH Ricco di Funzionalità** - Supporta jump host, Warpgate, connessioni basate su TOTP, SOCKS5, verifica chiave host, compilazione automatica password, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, port knocking, registrazione terminale, SSH agent forwarding, Bitwarden SSH agent, firma SSH HashiCorp Vault e altro ancora
+- **Termix ID** - L'equivalente di sshid.io integrato in Termix. Rivendica un handle, pubblica le tue chiavi SSH pubbliche su un URL resolver e utilizza una CA integrata per emettere certificati SSH
 
 </details>
 
 <br />
 
-## Piattaforme supportate
+## Supporto Piattaforme
 
 <table align="center">
 <tr>
@@ -283,15 +224,15 @@ Circa 30 lingue incluse, gestite tramite [Crowdin](https://docs.termix.site/tran
 </tr>
 <tr>
 <td align="center"><b>Web</b></td>
-<td>Qualsiasi browser recente (Chrome, Safari, Firefox) · Supporto PWA</td>
+<td>Qualsiasi browser moderno (Chrome, Safari, Firefox) · Supporto PWA</td>
 </tr>
 <tr>
 <td align="center"><b>Windows</b> <sub>x64/ia32</sub></td>
-<td>Portatile · Installer MSI · Chocolatey</td>
+<td>Portable · Installer MSI · Chocolatey</td>
 </tr>
 <tr>
 <td align="center"><b>Linux</b> <sub>x64/ia32</sub></td>
-<td>Portatile · AUR · AppImage · Deb · Flatpak</td>
+<td>Portable · AUR · AppImage · Deb · Flatpak</td>
 </tr>
 <tr>
 <td align="center"><b>macOS</b> <sub>x64/ia32, v12.0+</sub></td>
@@ -311,9 +252,9 @@ Circa 30 lingue incluse, gestite tramite [Crowdin](https://docs.termix.site/tran
 
 ## Installazione
 
-Vai alla [documentazione di Termix](https://docs.termix.site/install) per le istruzioni complete di installazione su tutte le piattaforme.
+Visita la [Documentazione Termix](https://docs.termix.site/install) per le istruzioni complete di installazione su tutte le piattaforme.
 
-Esempio di file Docker Compose (puoi togliere `guacd` e la rete se non pensi di usare il desktop remoto):
+File Docker Compose di esempio (puoi omettere `guacd` e la rete se non prevedi di utilizzare le funzioni di desktop remoto):
 
 ```yaml
 services:
@@ -350,37 +291,11 @@ networks:
     driver: bridge
 ```
 
-### Riga di comando
-
-Termix ha anche una CLI, così puoi gestire i tuoi server dal terminale e usare Termix nei tuoi script.
-
-```bash
-npm install -g @termix-cli/cli
-termix login --url https://termix.example.com
-termix ssh 1
-```
-
-Può aprire terminali, eseguire un comando su un host o su un'intera flotta, spostare file via SFTP e gestire host, frammenti e credenziali. La documentazione completa è su [docs.termix.site/cli](https://docs.termix.site/cli).
-
-### Hosting in cloud
-
-Puoi far girare il server Termix su un VPS invece che dentro la tua rete. Se Termix gira sulla rete che gestisce, un guasto se lo porta via proprio quando ti servirebbe per sistemare le cose. Fuori resta raggiungibile, ti dà un IP fisso e ci entri da ovunque senza VPN né porte aperte.
-
-[GINERNET](https://docs.termix.site/install/ginernet) sponsorizza Termix, e nella documentazione c'è una guida passo passo per il rilascio sulla loro piattaforma VPS.
-
-<br />
-
-## Telemetria
-
-Termix invia una volta al giorno un piccolo segnale anonimo, così posso vedere quante istanze sono attive e quali funzionalità vengono usate davvero. Contiene un ID istanza casuale, quanti utenti e host hai, la versione dell'app e quali funzionalità (terminale, gestore file, tunnel, docker, ecc.) sono state usate nelle ultime 24 ore. Non contiene mai nomi utente, nomi host, indirizzi IP, credenziali o qualsiasi altra cosa che identifichi te o i tuoi server.
-
-È attivo di base. Puoi spegnerlo nelle impostazioni di amministrazione, sezione Generale, oppure impostare `ENABLE_TELEMETRY=false` prima ancora di avviare Termix.
-
 <br />
 
 ## Dona
 
-Termix è gratuito e open source, senza abbonamenti né piani a pagamento. Se ti è utile, valuta una donazione per aiutare con server, domini e tempo di sviluppo. Le donazioni finanziano anche il tempo per studiare quello che serve a costruire funzionalità come SAML, Kubernetes e il supporto agli agenti. Segui i progressi e dona qui sotto.
+Termix è gratuito e open source, senza abbonamenti o piani a pagamento. Se lo trovi utile, considera di donare per aiutare a coprire i costi del server, i domini e il tempo di sviluppo. Le donazioni aiutano anche a finanziare il tempo necessario per ricercare e imparare ciò che serve per costruire funzionalità come SAML, Kubernetes e supporto Agent. Segui i progressi e dona qui sotto.
 
 [Dona](https://donate.termix.site/)
 
@@ -388,7 +303,7 @@ Termix è gratuito e open source, senza abbonamenti né piani a pagamento. Se ti
 
 ## Sponsor
 
-Ti interessa uno spazio a pagamento per sostenere lo sviluppo? Scrivi a [mail@termix.site](mailto:mail@termix.site).
+Interessato a un posizionamento a pagamento per supportare lo sviluppo? Scrivi a [mail@termix.site](mailto:mail@termix.site).
 
 <div align="center">
 
@@ -410,6 +325,10 @@ Ti interessa uno spazio a pagamento per sostenere lo sviluppo? Scrivi a [mail@te
   <img src="https://sirv.sirv.com/website/screenshots/cloudflare/cloudflare-logo.png?w=300" height="40" alt="Cloudflare" />
 </a>
 &nbsp;&nbsp;&nbsp;
+<a href="https://tailscale.com/">
+  <img src="https://drive.google.com/uc?export=view&id=1lIxkJuX6M23bW-2FElhT0rQieTrzaVSL" height="40" alt="Tailscale" />
+</a>
+&nbsp;&nbsp;&nbsp;
 <a href="https://akamai.com/">
   <img src="https://upload.wikimedia.org/wikipedia/commons/8/8b/Akamai_logo.svg" height="40" alt="Akamai" />
 </a>
@@ -421,17 +340,14 @@ Ti interessa uno spazio a pagamento per sostenere lo sviluppo? Scrivi a [mail@te
 <a href="https://rackgenius.com/">
   <img src="https://rackgenius.com/rackgenius-logo.png" height="40" alt="Rack Genius" />
 </a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://ginernet.com/">
-  <img src="https://ginernet.com/img/logo-web.png" height="40" alt="Ginernet" />
-</a>
+
 </div>
 
 <br />
 
 ## Supporto
 
-Ti serve aiuto o vuoi proporre una funzionalità? Apri una [nuova issue](https://github.com/Termix-SSH/Support/issues) con più dettagli possibile, in inglese se ci riesci. Puoi anche chiedere nel canale di supporto su [Discord](https://discord.gg/jVQGdvHDrf), anche se lì le risposte possono richiedere più tempo.
+Se hai bisogno di aiuto o vuoi richiedere una funzionalità per Termix, visita la pagina [Issues](https://github.com/Termix-SSH/Support/issues), accedi e premi `New Issue`. Per favore, sii il più dettagliato possibile nella tua segnalazione, preferibilmente scritta in inglese. Puoi anche unirti al server [Discord](https://discord.gg/jVQGdvHDrf) e visitare il canale di supporto, tuttavia i tempi di risposta potrebbero essere più lunghi.
 
 <br />
 
@@ -483,18 +399,18 @@ Ti serve aiuto o vuoi proporre una funzionalità? Apri una [nuova issue](https:/
 </tr>
 </table>
 
-<sub>Alcuni video e immagini possono essere datati o non mostrare al meglio le funzionalità.</sub>
+<sub>Alcuni video e immagini potrebbero non essere aggiornati o potrebbero non mostrare perfettamente le funzionalità.</sub>
 
 </div>
 
 <br />
 
-## Funzionalità pianificate
+## Funzionalità Pianificate
 
-Tutte le funzionalità pianificate sono su [Projects](https://github.com/orgs/Termix-SSH/projects/5). Se vuoi contribuire, guarda [Contributing](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md).
+Consulta [Projects](https://github.com/orgs/Termix-SSH/projects/5) per tutte le funzionalità pianificate. Se desideri contribuire, consulta [Contributing](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md).
 
 <br />
 
 ## Licenza
 
-Distribuito con licenza Apache versione 2.0. Vedi `LICENSE` per maggiori informazioni.
+Distribuito sotto la Licenza Apache Versione 2.0. Consulta `LICENSE` per maggiori informazioni.

docs/readme/README-JA.md

@@ -4,7 +4,7 @@
 
 <h1>Termix</h1>
 
-<p>SSH やリモートデスクトップから自動化まで、セルフホストのサーバー管理</p>
+<p>セルフホスト型 SSH 管理とリモートデスクトップアクセス</p>
 
 <p>
   <a href="../README.md">English</a> ·
@@ -37,7 +37,7 @@
 
 <br />
 
-Termix は無料でオープンソースです。役に立ったと感じたら、サーバー費用と開発時間を支えるために[寄付](https://donate.termix.site/)をご検討ください。
+Termix は無料のオープンソースプロジェクトです。便利だと感じた場合は、サーバーコストと開発時間のために[寄付](https://donate.termix.site/)をご検討ください。
 
 <br />
 
@@ -49,7 +49,7 @@ Termix は無料でオープンソースです。役に立ったと感じたら
 <p>
   <img src="../repo-images/Repo of the Day.png" alt="Repo of the Day Achievement" width="280" />
   <br />
-  <sub>2025年9月1日 達成</sub>
+  <sub>2025年9月1日に達成</sub>
 </p>
 
 </div>
@@ -58,7 +58,7 @@ Termix は無料でオープンソースです。役に立ったと感じたら
 
 ## 概要
 
-Termix は無料でオープンソースの、セルフホスト型サーバー管理プラットフォームです。SSH ターミナル、リモートデスクトップ（RDP、VNC、Telnet）、ファイル転送、トンネル、Docker、メトリクス、自動化をひとつにまとめ、ウェブ、デスクトップ、モバイルで使えます。ずっと無料で使える、セルフホスト版の Termius 代替です。
+Termixは、オープンソースで永久無料のセルフホスト型オールインワンサーバー管理プラットフォームです。単一の直感的なインターフェースを通じて、サーバーとインフラストラクチャを管理するマルチプラットフォームソリューションを提供します。Termixは、SSHターミナルアクセス、リモートデスクトップ制御（RDP、VNC、Telnet）、SSHトンネリング機能、リモートファイル管理、およびその他多くのツールを提供します。Termixは、すべてのプラットフォームで利用可能なTermiusの完全無料でセルフホスト可能な代替ソリューションです。
 
 <br />
 
@@ -68,42 +68,42 @@ Termix は無料でオープンソースの、セルフホスト型サーバー
 <tr>
 <td width="50%" valign="top">
 
-**SSH ターミナル:**
-ブラウザのようなタブと分割画面を備えた本格的なターミナルで、最大 6 分割まで同時に表示できます。テーマ、フォント、配色は自由に選べます。各セッションの上のツールバーには CPU、メモリ、ディスクの状況がリアルタイムで表示され、そのホストのファイル、Docker、トンネル、メトリクスへすぐ移動できます。
+**SSHターミナルアクセス:**
+ブラウザ風タブシステムによる分割画面対応（最大4パネル）のフル機能ターミナル。一般的なターミナルテーマ、フォント、その他のコンポーネントを含むターミナルカスタマイズに対応しています。
 
 </td>
 <td width="50%" valign="top">
 
-**リモートデスクトップ:**
-RDP、VNC、Telnet をブラウザから利用でき、他のセッションと同じようにタブや分割画面で扱えます。RDP ドライブ用のファイルブラウザとドラッグ＆ドロップのアップロードも使えます。Windows のデスクトップ版では、ホストをネイティブの RDP クライアントで開くこともできます。
+**リモートデスクトップアクセス:**
+ブラウザ上でRDP、VNC、Telnetをサポート、完全なカスタマイズと分割画面に対応しています。
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**SSH トンネル:**
-ローカル、リモート、ダイナミック SOCKS の転送に対応し、自動再接続とヘルスチェックが付いています。デスクトップ版のクライアント間トンネルはその端末に保存され、プリセットをサーバーに保存しておけば別の端末に設定を移せます。
+**SSHトンネル管理:**
+自動再接続とヘルスモニタリング、ローカル・リモート・ダイナミックSOCKSフォワーディングを備えたサーバー間SSHトンネルの作成・管理が可能です。デスクトップクライアント対サーバーのトンネル設定はデスクトップインストールごとにローカルに保存され、オプションのC2Sプリセットスナップショットをサーバーに保存・名前変更・読み込み・削除してクライアント間でローカルトンネル設定を移動できます。
 
 </td>
 <td width="50%" valign="top">
 
-**ファイルマネージャー:**
-SFTP でファイルの閲覧、編集、アップロード、ダウンロード、名前変更、移動、削除ができ、sudo にも対応しています。コード、画像、音声、動画を表示・編集できます。サーバー間で直接ファイルをコピーでき、最速の経路が自動で選ばれ、転送の整合性も検証されます。
+**リモートファイルマネージャー:**
+コード、画像、音声、動画の表示・編集に対応し、リモートサーバー上のファイルを直接管理できます。sudo対応でファイルのアップロード、ダウンロード、名前変更、削除、移動をシームレスに実行できます。サーバー間でのファイル移動にも対応しています。
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Docker と Podman:**
-コンテナの起動、停止、一時停止、削除ができ、状態を確認したり、中でシェルを開いたりできます。Docker と Podman のどちらでも動きます。Portainer や Dockge を置き換えるためのものではなく、すでにあるコンテナを扱うためのものです。
+**DockerおよびPodman管理:**
+コンテナの起動、停止、一時停止、削除。コンテナの統計情報を表示。docker execターミナルでコンテナを操作。DockerとPodmanの両方をコンテナランタイムとしてサポートしています。PortainerやDockgeの代替ではなく、コンテナの作成よりも簡易的な管理を目的としています。
 
 </td>
 <td width="50%" valign="top">
 
-**ホスト管理:**
-タグと、名前や色を付けられる入れ子のフォルダでホストを整理できます。保存した認証情報を複数のホストで使い回し、SSH 鍵を自動で配布し、ホストを親ホストの下にまとめ、一括編集やエクスポートができます。保存したくない一度きりの接続にはクイック接続が使えます。
+**SSHホストマネージャー:**
+タグやフォルダ（フォルダのカスタマイズとネストフォルダ対応）でSSH接続を保存、整理、管理し、再利用可能なログイン情報を簡単に保存しながらSSHキーのデプロイを自動化できます。
 
 </td>
 </tr>
@@ -111,139 +111,83 @@ SFTP でファイルの閲覧、編集、アップロード、ダウンロード
 <td width="50%" valign="top">
 
 **ホストメトリクス:**
-たいていの Linux サーバーで CPU、メモリ、ディスク、ネットワーク、温度、稼働時間、プロセス、ポート、ログイン、システム情報を履歴グラフ付きで確認できます。マネージャーカードを使えば、サービス、cron、パッケージ、ユーザー、ファイアウォール、WireGuard、Tailscale、SSL 証明書、ログ、ヘルスチェックを Termix から離れずに扱えます。
+ほとんどのLinuxベースのサーバーで、CPU、メモリ、ディスク使用量、ネットワーク、アップタイム、システム情報、ファイアウォール、ポートモニター、ログビューア、ユーザー/権限、証明書など、さらに多くの情報を表示できます。時系列の履歴グラフと、ntfyおよびwebhookに対応したしきい値ベースのアラートを含みます。
 
 </td>
 <td width="50%" valign="top">
 
-**自動化:**
-きっかけを選んで、何をするかを決めるだけです。きっかけには、メトリクスがしきい値を超えたとき、ホストが上がったり落ちたりしたとき、ヘルスチェックの状態が変わったとき、スケジュール、コンテナのイベント、外部からの Webhook があります。ステップではコマンドやスニペットの実行、コンテナやトンネルの操作、ホストの起動、URL の呼び出し、待機、条件分岐、別の自動化の実行ができ、ntfy、Discord、Webhook で通知できます。テスト実行で安全に試せます。
+**ユーザー認証:**
+管理者コントロール（他のユーザー情報を編集可能）とOIDC/LDAP/SSO（アクセス制御付き）、2FA（TOTP）、パスキー（WebAuthn）対応による安全なユーザー管理。すべてのプラットフォームでアクティブなユーザーセッションを表示し、権限を取り消し可能。OIDC/ローカルアカウントの連携が可能です。すべてのユーザー操作の監査ログを表示できます。
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**フリート:**
-ホストを選ぶか、タグのルールを決めてフリートにまとめると、新しいホストは自動で入ります。すべてのホストで同じコマンドを一度に実行し、全台にファイルを配ったり集めたり、パッケージを入れたり、OS、カーネル、アーキテクチャ、稼働時間の一覧を集められます。
+**Tailscaleインテグレーション:**
+Tailnetのデバイスをリストしてホストとしてすばやく追加し、Tailscale SSHを認証方法として使用して接続します。これにより、TailnetのACLが認証情報を保存せずに認可を処理します。
 
 </td>
 <td width="50%" valign="top">
 
-**AI アシスタント:**
-任意の機能で、自分で有効にするまでは動きません。OpenAI、Anthropic、Gemini、Ollama、または OpenAI 互換のエンドポイントにつないで、自分の環境について質問できます。ホスト、フリート、スニペット、アラートを読み取れますが、変更は自分で行わず、承認してもらうための提案として出します。認証情報、ユーザー、設定には決して触れられません。管理者はインスタンス全体で無効にでき、初期設定で非表示にすることもできます。
+**RBAC/共有:**
+ロールを作成し、ユーザー/ロール間でホストを共有できます。すべての認証タイプとすべてのホストプロトコルに対応しています。
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**ログインとユーザー:**
-ローカルアカウントに加えて OIDC、LDAP、GitHub、Google でのサインインに対応し、2 要素認証（TOTP）、パスキー（WebAuthn）、信頼済みデバイスも使えます。管理者はユーザーの管理、OIDC グループとロールの対応付け、全プラットフォームのアクティブなセッションの確認と失効ができます。ローカルと OIDC のアカウントを連携でき、誰が何をしたかは監査ログで確認できます。
-
-</td>
-<td width="50%" valign="top">
-
-**ロールと共有:**
-ロールを作り、接続、閲覧、編集、管理という 4 段階でホストをユーザーやロールに共有できます。すべての認証方式とすべてのプロトコルで使え、共有したホストで使う認証情報を上書きすることもできます。
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**アラート:**
-CPU、メモリ、ディスクなどのホストメトリクスにルールを設定し、発報したら ntfy、Discord、Webhook で通知を受け取れます。発報中と解消済みのアラートは履歴で確認でき、気にしないものは消しておけます。
-
-</td>
-<td width="50%" valign="top">
-
-**ホームページ:**
-自分で組み立てるドラッグ＆ドロップのウィジェット画面です。ホストの状態、Ping、サービスリンク、ブックマーク、検索、時計、カレンダー、カウントダウン、メモ、RSS、天気、画像、iframe、Docker、トンネル、メトリクスのグラフ、独自 API、さらにはライブのターミナルまでウィジェットとして置けます。
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**スニペットとツール:**
-よく使うコマンドを保存して、ワンクリックで実行できます。ホストの値や自分で入力する値を変数として使えます。開いているすべてのターミナルで同じコマンドをまとめて実行でき、コマンド履歴も補完付きで検索できます。
-
-</td>
-<td width="50%" valign="top">
-
-**セッション共有:**
-ターミナル、RDP、VNC、Telnet のセッションをリアルタイムで共有できます。アカウントなしで参加できるリンクを送るか、特定の Termix ユーザーと共有し、閲覧のみか操作可能かを選べます。共有は自動で期限切れにも、いつでも取り消しにもでき、全体またはホストごとにオフにできます。
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**セッション録画とログ:**
-ターミナル、RDP、VNC のセッションを録画して、あとから再生できます。セッションのテキストログをダウンロードでき、接続ログを見れば接続中に何が起きたかがそのまま分かります。
-
-</td>
-<td width="50%" valign="top">
-
 **シリアル接続:**
-ルーター、スイッチ、マイコンなどのシリアル機器に、ブラウザやデスクトップアプリから接続できます。ボーレート、データビット、ストップビット、パリティを設定できます。対応ブラウザでは Web Serial API を、デスクトップアプリではネイティブのバックエンドを使います。
+ブラウザまたはデスクトップアプリからシリアルデバイス（ルーター、スイッチ、マイクロコントローラーなど）に直接接続できます。ボーレート、データビット、ストップビット、パリティを設定できます。対応ブラウザではWeb Serial APIを使用し、Electronアプリではネイティブバックエンドを使用します。
+
+</td>
+<td width="50%" valign="top">
+
+**アラート:**
+ホストメトリクス（CPU、メモリ、ディスクなど）に対してしきい値ベースのアラートルールを設定し、発動時にntfyまたはwebhookで通知を受け取れます。発動中および解決済みのアラートを履歴ログで確認できます。
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Tailscale:**
-tailnet から端末を取り込んで数クリックでホストとして追加でき、Tailscale SSH で接続すればアクセス制御は tailnet の ACL に任せられ、認証情報を保存する必要がありません。Headscale や独自のエンドポイントにも対応しています。
+**ホームページ:**
+ドラッグ＆ドロップのウィジェットグリッドを備えた完全カスタマイズ可能なホームページ。ホストステータス、サービスリンク、時計、メモ、RSSフィード、天気、Dockerコンテナ、ホストメトリクスグラフ、埋め込みターミナル、iframeなどのウィジェットを追加できます。
 
 </td>
 <td width="50%" valign="top">
 
-**Proxmox:**
-Proxmox のインスタンスからそのままホストを取り込めます。ノードやゲストの CPU、メモリ、ストレージなどの状態を専用のタブで確認できます。
+**データベース暗号化:**
+バックエンドは暗号化されたSQLiteデータベースファイルとして保存されます。詳細は[ドキュメント](https://docs.termix.site/security)をご覧ください。
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**ワークスペースとタブ:**
-タブと分割レイアウトのセットを保存して、ワンクリックでまるごと開き直せます。Termix は前回のセッションも覚えているので、再読み込みしても端末を変えてもタブは戻ってきます。
+**ネットワークグラフ:**
+ダッシュボードをカスタマイズして、SSH接続に基づくホームラボのネットワークをステータス表示付きで可視化できます。
 
 </td>
 <td width="50%" valign="top">
 
-**ガイド付きセットアップ:**
-短いセットアップが、画面のプリセット、テーマ、使いたい機能、最初のホストの選択を案内します。シンプルモードは使わないものを隠してくれます。セットアップはいつでもやり直せますし、プリセットも切り替えられます。
+**SSHツール:**
+ワンクリックで実行できる再利用可能なコマンドスニペットの作成。複数の開いているターミナルに対して同時にコマンドを実行できます。
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**デスクトップ単体利用と同期:**
-デスクトップアプリはローカルのバックエンドとデータベースを持ち、サーバーなしで単体で動きます。Termix サーバーにつなげば、ホスト、認証情報、スニペットなどを双方向で同期でき、接続をローカルから始めるかサーバー経由にするかも選べます。
-
-</td>
-<td width="50%" valign="top">
-
-**コマンドラインツール:**
-シェルやスクリプトから使える `termix` CLI です。ターミナルを開き、ホスト 1 台またはフリート全体でコマンドを実行し、SFTP でファイルを移動し、ホストやスニペット、認証情報を管理できます。`npm install -g @termix-cli/cli` で入れるか、単体のバイナリを使ってください。詳しくは [CLI ドキュメント](https://docs.termix.site/cli)をご覧ください。
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**セキュリティ:**
-パスワードや鍵などの秘密情報はユーザーごとに暗号化され、データベースのファイル自体もディスク上で暗号化できます。仕組みは[ドキュメント](https://docs.termix.site/security)をご覧ください。
+**永続タブ:**
+ユーザープロフィールで有効にすると、SSHセッションとタブがデバイス/更新をまたいで開いたまま保持されます。
 
 </td>
 <td width="50%" valign="top">
 
 **多言語対応:**
-約 30 言語に対応しており、[Crowdin](https://docs.termix.site/translations) で管理しています。
+約30言語の組み込みサポート（[Crowdin](https://docs.termix.site/translations)で管理されています）。
 
 </td>
 </tr>
@@ -255,20 +199,17 @@ Proxmox のインスタンスからそのままホストを取り込めます。
 <summary><b>その他の機能</b></summary>
 <br />
 
-- **ダッシュボード** - 自分で並べたカードでサーバーの状況をひと目で把握
-- **ネットワーク図** - ホストからホームラボを図にして、状態をリアルタイム表示
-- **tmux モニター** - tmux のセッション、ウィンドウ、ペインをプレビューと検索付きで一覧
-- **API キー** - スクリプトや CI 用の、有効期限付きユーザー単位のキー
-- **エクスポートとインポート** - ホスト、認証情報、ファイルマネージャーのデータを出し入れ
-- **自動 SSL** - 証明書の発行と更新、HTTPS へのリダイレクトを自動で。自前の証明書も使えます
-- **データベース** - 標準は SQLite、PostgreSQL と MySQL にも対応
-- **モダンな UI** - デスクトップでもモバイルでも使える React の画面。ライト、ダーク、Dracula などのテーマ付き。どの接続も URL からフルスクリーンで開けます
-- **コマンドパレット** - 左 Shift の 2 回押しで、キーボードからホストへ移動
-- **キーボードショートカット** - タブの移動や閉じる操作など、すべて割り当て変更可能
-- **Wake-on-LAN** - Termix からでも自動化のステップからでもマシンを起動
-- **信頼済みプロキシ認証** - リバースプロキシにサインインを任せ、ユーザー情報を引き継ぎ
-- **充実した SSH 機能** - 踏み台ホスト、Warpgate、TOTP の入力、SOCKS5、ホスト鍵の検証、パスワードの自動入力、[OPKSSH](https://github.com/openpubkey/opkssh)、tmux、ポートノッキング、ターミナルのログ、エージェント転送、Bitwarden SSH エージェント、HashiCorp Vault の SSH 署名など
-- **Termix ID** - sshid.io のような仕組みを内蔵。ハンドルを取得し、公開鍵をリゾルバー URL で公開し、内蔵 CA から SSH 証明書を発行できます
+- **ダッシュボード** - ダッシュボードでサーバー情報を一目で確認できます
+- **APIキー** - 自動化/CI用に有効期限付きのユーザースコープAPIキーを作成できます
+- **データのエクスポート/インポート** - SSHホスト、認証情報、ファイルマネージャーデータのエクスポートとインポートが可能です
+- **自動SSL設定** - HTTPSリダイレクト付きの組み込みSSL証明書生成・管理が可能です
+- **モダンUI** - React、Tailwind CSS、Shadcnで構築された、デスクトップ/モバイル対応のクリーンなインターフェース。ライト、ダーク、Draculaなど、多くの異なるUIテーマから選択可能。URLルートで任意の接続をフルスクリーンで開くことができます。
+- **コマンド履歴** - 過去に実行したSSHコマンドの自動補完と表示が可能です
+- **クイック接続** - 接続データを保存せずにサーバーに接続できます
+- **コマンドパレット** - 左Shiftキーを2回押すことで、キーボードからSSH接続に素早くアクセスできます
+- **Proxmox統合** - Proxmoxインスタンスからホストを自動的にTermixに追加できます
+- **SSH機能充実** - ジャンプホスト、Warpgate、TOTPベースの接続、SOCKS5、ホストキー検証、パスワード自動入力、[OPKSSH](https://github.com/openpubkey/opkssh)、tmux、ポート敲き（port knocking）、ターミナルログ記録、SSHエージェントフォワーディング、Bitwarden SSHエージェント、HashiCorp Vault SSH署名などに対応しています
+- **Termix ID** - Termixに組み込まれたsshid.io相当の機能です。ハンドルを取得し、リゾルバーURLで公開SSHキーを公開し、組み込みCAを使用してSSH証明書を発行できます。
 
 </details>
 
@@ -283,15 +224,15 @@ Proxmox のインスタンスからそのままホストを取り込めます。
 </tr>
 <tr>
 <td align="center"><b>Web</b></td>
-<td>最近のブラウザ全般（Chrome、Safari、Firefox）· PWA 対応</td>
+<td>あらゆる最新ブラウザ（Chrome、Safari、Firefox）· PWA対応</td>
 </tr>
 <tr>
 <td align="center"><b>Windows</b> <sub>x64/ia32</sub></td>
-<td>ポータブル · MSI インストーラー · Chocolatey</td>
+<td>ポータブル版 · MSIインストーラー · Chocolatey</td>
 </tr>
 <tr>
 <td align="center"><b>Linux</b> <sub>x64/ia32</sub></td>
-<td>ポータブル · AUR · AppImage · Deb · Flatpak</td>
+<td>ポータブル版 · AUR · AppImage · Deb · Flatpak</td>
 </tr>
 <tr>
 <td align="center"><b>macOS</b> <sub>x64/ia32, v12.0+</sub></td>
@@ -311,9 +252,9 @@ Proxmox のインスタンスからそのままホストを取り込めます。
 
 ## インストール
 
-すべてのプラットフォーム向けの詳しいインストール手順は [Termix ドキュメント](https://docs.termix.site/install)をご覧ください。
+すべてのプラットフォームへのTermixのインストール方法については、[Termixドキュメント](https://docs.termix.site/install)をご覧ください。
 
-Docker Compose の例です（リモートデスクトップ機能を使わないなら `guacd` とネットワークの部分は省略できます）:
+サンプルDocker Composeファイル（リモートデスクトップ機能を使用する予定がない場合は、`guacd`とネットワークの設定を省略できます）：
 
 ```yaml
 services:
@@ -350,37 +291,11 @@ networks:
     driver: bridge
 ```
 
-### コマンドラインツール
-
-Termix には CLI もあるので、ターミナルからサーバーを管理したり、自分のスクリプトに組み込んだりできます。
-
-```bash
-npm install -g @termix-cli/cli
-termix login --url https://termix.example.com
-termix ssh 1
-```
-
-ターミナルを開き、ホスト 1 台またはフリート全体でコマンドを実行し、SFTP でファイルを移動し、ホストやスニペット、認証情報を管理できます。詳しい説明は [docs.termix.site/cli](https://docs.termix.site/cli) にあります。
-
-### クラウドでの運用
-
-Termix のサーバーは自分のネットワーク内ではなく、VPS で動かすこともできます。管理対象のネットワーク上で動かしていると、障害が起きたときに Termix も一緒に落ちてしまい、直したいときに限って使えなくなります。外で動かしておけばいつでも届きますし、固定 IP も手に入り、VPN やポート開放なしでどこからでも入れます。
-
-[GINERNET](https://docs.termix.site/install/ginernet) は Termix のスポンサーで、同社の VPS へデプロイする手順はドキュメントに詳しく載っています。
-
-<br />
-
-## テレメトリー
-
-Termix は 1 日 1 回、匿名の小さなデータを送ります。どれくらいのインスタンスが動いていて、どの機能が使われているかを把握するためのものです。含まれるのはランダムなインスタンス ID、ユーザーとホストの数、アプリのバージョン、直近 24 時間に使われた機能（ターミナル、ファイルマネージャー、トンネル、Docker など）だけです。ユーザー名、ホスト名、IP アドレス、認証情報など、あなたやサーバーを特定できるものは一切含まれません。
-
-初期状態では有効です。管理設定の「一般」から止められますし、Termix を起動する前に `ENABLE_TELEMETRY=false` を設定しておくこともできます。
-
 <br />
 
 ## 寄付
 
-Termix は無料でオープンソースで、サブスクリプションも有料プランもありません。役に立っていると感じたら、サーバー代、ドメイン、開発時間を支えるための寄付をご検討ください。寄付は SAML、Kubernetes、エージェント対応といった機能を作るための調査や学習の時間にもあてられます。進み具合の確認と寄付は下記からどうぞ。
+Termixは無料のオープンソースプロジェクトであり、サブスクリプションや有料プランはありません。便利だと感じた場合は、サーバーコスト、ドメイン、開発時間を賄うための寄付をご検討ください。寄付は、SAML、Kubernetes、Agentサポートなどの機能を構築するために必要な調査と学習の時間を確保することにも役立ちます。以下で進捗を確認し、寄付できます。
 
 [寄付する](https://donate.termix.site/)
 
@@ -388,7 +303,7 @@ Termix は無料でオープンソースで、サブスクリプションも有
 
 ## スポンサー
 
-有料掲載で開発を支援することにご興味がありますか。[mail@termix.site](mailto:mail@termix.site) までご連絡ください。
+開発を支援するための有料掲載にご興味がありますか？[mail@termix.site](mailto:mail@termix.site)までメールをお送りください。
 
 <div align="center">
 
@@ -410,6 +325,10 @@ Termix は無料でオープンソースで、サブスクリプションも有
   <img src="https://sirv.sirv.com/website/screenshots/cloudflare/cloudflare-logo.png?w=300" height="40" alt="Cloudflare" />
 </a>
 &nbsp;&nbsp;&nbsp;
+<a href="https://tailscale.com/">
+  <img src="https://drive.google.com/uc?export=view&id=1lIxkJuX6M23bW-2FElhT0rQieTrzaVSL" height="40" alt="Tailscale" />
+</a>
+&nbsp;&nbsp;&nbsp;
 <a href="https://akamai.com/">
   <img src="https://upload.wikimedia.org/wikipedia/commons/8/8b/Akamai_logo.svg" height="40" alt="Akamai" />
 </a>
@@ -421,17 +340,14 @@ Termix は無料でオープンソースで、サブスクリプションも有
 <a href="https://rackgenius.com/">
   <img src="https://rackgenius.com/rackgenius-logo.png" height="40" alt="Rack Genius" />
 </a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://ginernet.com/">
-  <img src="https://ginernet.com/img/logo-web.png" height="40" alt="Ginernet" />
-</a>
+
 </div>
 
 <br />
 
 ## サポート
 
-困ったときや機能の要望があるときは、[新しい issue](https://github.com/Termix-SSH/Support/issues) を作って、できるだけ詳しく、できれば英語で書いてください。[Discord](https://discord.gg/jVQGdvHDrf) のサポートチャンネルでも質問できますが、返信には時間がかかることがあります。
+Termixに関するヘルプや機能リクエストが必要な場合は、[Issues](https://github.com/Termix-SSH/Support/issues)ページにアクセスし、ログインして`New Issue`を押してください。Issueはできるだけ詳細に記述し、英語での記述が望ましいです。また、[Discord](https://discord.gg/jVQGdvHDrf)サーバーに参加してサポートチャンネルを利用することもできますが、応答時間が長くなる場合があります。
 
 <br />
 
@@ -443,7 +359,7 @@ Termix は無料でオープンソースで、サブスクリプションも有
 
 [![YouTube](../repo-images/YouTube.png)](https://www.youtube.com/@TermixSSH/videos)
 
-<sub>YouTube でアップデートの紹介を見る</sub>
+<sub>YouTubeでアップデートの概要を視聴する</sub>
 
 <br />
 <br />
@@ -483,7 +399,7 @@ Termix は無料でオープンソースで、サブスクリプションも有
 </tr>
 </table>
 
-<sub>動画や画像は古くなっていたり、機能を十分に伝えられていない場合があります。</sub>
+<sub>動画や画像の一部は最新ではない場合や、機能を完全に紹介できていない場合があります。</sub>
 
 </div>
 
@@ -491,10 +407,10 @@ Termix は無料でオープンソースで、サブスクリプションも有
 
 ## 予定されている機能
 
-予定されている機能はすべて [Projects](https://github.com/orgs/Termix-SSH/projects/5) にあります。貢献をお考えの方は[コントリビューションガイド](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md)をご覧ください。
+すべての予定機能については[Projects](https://github.com/orgs/Termix-SSH/projects/5)をご覧ください。コントリビュートをご希望の方は[Contributing](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md)をご覧ください。
 
 <br />
 
 ## ライセンス
 
-Apache License 2.0 のもとで配布しています。詳しくは `LICENSE` をご覧ください。
+Apache License Version 2.0のもとで配布されています。詳細は`LICENSE`をご覧ください。

docs/readme/README-KO.md

@@ -4,7 +4,7 @@
 
 <h1>Termix</h1>
 
-<p>SSH와 원격 데스크톱부터 자동화까지, 셀프 호스팅 서버 관리</p>
+<p>셀프 호스팅 SSH 관리 및 원격 데스크톱 액세스</p>
 
 <p>
   <a href="../README.md">English</a> ·
@@ -37,7 +37,7 @@
 
 <br />
 
-Termix는 무료이며 오픈 소스입니다. 유용하게 쓰고 계시다면 서버 비용과 개발 시간에 보탬이 되도록 [후원](https://donate.termix.site/)을 고려해 주세요.
+Termix는 무료 오픈소스 프로젝트입니다. 유용하게 사용하고 있다면 서버 비용과 개발 시간을 위해 [후원](https://donate.termix.site/)을 고려해 주세요.
 
 <br />
 
@@ -58,7 +58,7 @@ Termix는 무료이며 오픈 소스입니다. 유용하게 쓰고 계시다면
 
 ## 개요
 
-Termix는 무료 오픈 소스 셀프 호스팅 서버 관리 플랫폼입니다. SSH 터미널, 원격 데스크톱(RDP, VNC, Telnet), 파일 전송, 터널, Docker, 지표, 자동화를 한곳에 모아 웹과 데스크톱, 모바일에서 쓸 수 있습니다. 계속 무료로 쓸 수 있는 셀프 호스팅 Termius 대안입니다.
+Termix는 오픈 소스이며 영구 무료인 셀프 호스팅 올인원 서버 관리 플랫폼입니다. 단일 직관적인 인터페이스를 통해 서버와 인프라를 관리할 수 있는 멀티 플랫폼 솔루션을 제공합니다. Termix는 SSH 터미널 접속, 원격 데스크톱 제어(RDP, VNC, Telnet), SSH 터널링 기능, 원격 SSH 파일 관리 및 기타 다양한 도구를 제공합니다. Termix는 모든 플랫폼에서 사용 가능한 Termius의 완벽한 무료 셀프 호스팅 대안입니다.
 
 <br />
 
@@ -68,182 +68,126 @@ Termix는 무료 오픈 소스 셀프 호스팅 서버 관리 플랫폼입니다
 <tr>
 <td width="50%" valign="top">
 
-**SSH 터미널:**
-브라우저 같은 탭과 분할 화면을 갖춘 제대로 된 터미널로, 한 번에 최대 6개 패널까지 띄울 수 있습니다. 테마와 글꼴, 색을 골라 쓸 수 있습니다. 각 세션 위의 툴바에는 CPU, 메모리, 디스크가 실시간으로 표시되고, 해당 호스트의 파일과 Docker, 터널, 지표로 바로 갈 수 있습니다.
+**SSH 터미널 접속:**
+브라우저 스타일 탭 시스템과 분할 화면 지원(최대 4개 패널)을 갖춘 완전한 기능의 터미널. 일반 터미널 테마, 글꼴 및 기타 구성 요소를 포함한 터미널 사용자 정의 지원.
 
 </td>
 <td width="50%" valign="top">
 
-**원격 데스크톱:**
-브라우저에서 RDP와 VNC, Telnet을 쓸 수 있고 다른 세션과 똑같이 탭과 분할 화면으로 다룰 수 있습니다. RDP 드라이브용 파일 브라우저와 끌어다 놓기 업로드도 있습니다. Windows 데스크톱에서는 호스트를 기본 RDP 클라이언트로 열 수도 있습니다.
+**원격 데스크톱 접속:**
+완전한 사용자 정의와 분할 화면을 지원하는 브라우저 기반 RDP, VNC, Telnet 지원.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**SSH 터널:**
-로컬과 원격, 동적 SOCKS 포워딩을 지원하며 자동 재연결과 상태 확인이 붙어 있습니다. 데스크톱 앱의 클라이언트 대 서버 터널은 그 컴퓨터에 저장되고, 프리셋을 서버에 저장해 두면 다른 컴퓨터로 설정을 옮길 수 있습니다.
+**SSH 터널 관리:**
+자동 재연결, 상태 모니터링, 로컬·원격·동적 SOCKS 포워딩을 지원하는 서버 간 SSH 터널 생성 및 관리. 데스크톱 클라이언트-서버 터널 설정은 데스크톱 설치별로 로컬에 저장되며, 선택적 C2S 사전 설정 스냅샷을 서버에 저장·이름 변경·불러오기·삭제하여 클라이언트 간 로컬 터널 구성을 이동할 수 있습니다.
 
 </td>
 <td width="50%" valign="top">
 
-**파일 관리자:**
-SFTP로 파일을 살펴보고 편집하고 올리고 내려받고 이름을 바꾸고 옮기고 지울 수 있으며 sudo도 됩니다. 코드와 이미지, 오디오, 비디오를 보고 편집할 수 있습니다. 서버에서 서버로 파일을 바로 복사할 수 있는데, 가장 빠른 경로가 자동으로 선택되고 전송 무결성도 확인합니다.
+**원격 파일 관리자:**
+코드, 이미지, 오디오, 비디오의 보기 및 편집을 지원하여 원격 서버에서 파일을 직접 관리. sudo 지원으로 파일 업로드, 다운로드, 이름 변경, 삭제, 이동을 원활하게 수행. 서버 간 파일 이동도 지원합니다.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Docker와 Podman:**
-컨테이너를 시작하고 멈추고 일시 정지하고 지울 수 있으며, 상태를 보거나 안에서 셸을 열 수 있습니다. Docker와 Podman 모두에서 동작합니다. Portainer나 Dockge를 대신하려는 것이 아니라, 이미 있는 컨테이너를 다루기 위한 것입니다.
+**Docker 및 Podman 관리:**
+컨테이너 시작, 중지, 일시 정지, 제거. 컨테이너 통계 보기. docker exec 터미널로 컨테이너 제어. Docker와 Podman을 모두 컨테이너 런타임으로 지원. Portainer나 Dockge를 대체하기 위한 것이 아니라 컨테이너 생성보다는 간편한 관리를 목적으로 합니다.
 
 </td>
 <td width="50%" valign="top">
 
-**호스트 관리:**
-태그와, 이름과 색을 붙일 수 있는 중첩 폴더로 호스트를 정리합니다. 저장한 자격 증명을 여러 호스트에서 다시 쓰고, SSH 키를 자동으로 배포하고, 호스트를 상위 호스트 아래로 묶고, 한꺼번에 편집하거나 내보낼 수 있습니다. 저장하고 싶지 않은 일회성 연결에는 빠른 연결을 쓰면 됩니다.
+**SSH 호스트 관리자:**
+태그와 폴더(폴더 사용자 지정 및 중첩 폴더 지원)로 SSH 연결을 저장, 정리, 관리하고, 재사용 가능한 로그인 정보를 쉽게 저장하면서 SSH 키 배포를 자동화.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**호스트 지표:**
-대부분의 리눅스 서버에서 CPU, 메모리, 디스크, 네트워크, 온도, 가동 시간, 프로세스, 포트, 로그인, 시스템 정보를 기록 그래프와 함께 볼 수 있습니다. 관리 카드로 서비스와 cron 작업, 패키지, 사용자, 방화벽 규칙, WireGuard, Tailscale, SSL 인증서, 로그, 상태 확인을 Termix 안에서 처리할 수 있습니다.
+**호스트 메트릭:**
+대부분의 Linux 기반 서버에서 CPU, 메모리, 디스크 사용량, 네트워크, 업타임, 시스템 정보, 방화벽, 포트 모니터, 로그 뷰어, 사용자/권한, 인증서 등 다양한 정보를 표시. 시계열 히스토리 그래프와 ntfy 및 웹훅을 지원하는 임계값 기반 알림을 포함합니다.
 
 </td>
 <td width="50%" valign="top">
 
-**자동화:**
-먼저 조건을 고르고, 무슨 일이 일어날지 정하면 됩니다. 조건에는 지표가 기준을 넘을 때, 호스트가 올라오거나 내려갈 때, 상태 확인 결과가 바뀔 때, 정해진 일정, 컨테이너 이벤트, 들어오는 웹훅이 있습니다. 각 단계에서 명령과 스니펫을 실행하고, 컨테이너와 터널을 조작하고, 호스트를 깨우고, URL을 호출하고, 기다리고, 조건에 따라 갈라지고, 다른 자동화를 실행하고, ntfy나 Discord, 웹훅으로 알릴 수 있습니다. 테스트 실행으로 먼저 안전하게 시험해 볼 수 있습니다.
+**사용자 인증:**
+관리자 제어(다른 사용자 정보 편집 가능)와 OIDC/LDAP/SSO(액세스 제어 포함), 2FA(TOTP), 패스키(WebAuthn) 지원을 통한 안전한 사용자 관리. 모든 플랫폼에서 활성 사용자 세션을 보고 권한을 취소 가능. OIDC/로컬 계정 연동. 모든 사용자 작업의 감사 로그 조회.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**플릿:**
-호스트를 직접 고르거나 태그 규칙으로 플릿에 묶으면 새 호스트는 알아서 들어옵니다. 모든 호스트에서 같은 명령을 한 번에 실행하고, 전부에 파일을 보내고 가져오고, 패키지를 설치하고, OS와 커널, 아키텍처, 가동 시간 목록을 모을 수 있습니다.
+**Tailscale 통합:**
+Tailscale 네트워크의 기기를 나열하여 호스트로 빠르게 추가하고, Tailscale SSH를 인증 방법으로 사용하여 연결함으로써 자격 증명을 저장하지 않고도 네트워크 ACL이 권한 부여를 처리하도록 합니다.
 
 </td>
 <td width="50%" valign="top">
 
-**AI 어시스턴트:**
-선택 기능이며 직접 켜기 전까지는 꺼져 있습니다. OpenAI, Anthropic, Gemini, Ollama 또는 OpenAI 호환 엔드포인트를 연결해 내 환경에 대해 물어볼 수 있습니다. 호스트와 플릿, 스니펫, 알림을 읽을 수 있지만 직접 바꾸지 않고 승인받을 제안으로 내놓습니다. 자격 증명과 사용자, 설정에는 절대 접근할 수 없습니다. 관리자는 인스턴스 전체에서 꺼 둘 수 있고, 초기 설정에서 아예 숨길 수도 있습니다.
+**RBAC/공유:**
+역할을 생성하고 사용자/역할 간에 호스트를 공유합니다. 모든 인증 유형과 모든 호스트 프로토콜을 지원합니다.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**로그인과 사용자:**
-로컬 계정과 함께 OIDC, LDAP, GitHub, Google 로그인을 지원하고 2단계 인증(TOTP), 패스키(WebAuthn), 신뢰할 수 있는 기기도 쓸 수 있습니다. 관리자는 사용자를 관리하고, OIDC 그룹을 역할에 연결하고, 모든 플랫폼의 활성 세션을 보고 해지할 수 있습니다. 로컬 계정과 OIDC 계정을 연결할 수 있고, 누가 무엇을 했는지는 감사 로그에서 확인합니다.
-
-</td>
-<td width="50%" valign="top">
-
-**역할과 공유:**
-역할을 만들고 연결, 보기, 편집, 관리라는 네 단계로 호스트를 사용자나 역할에 공유할 수 있습니다. 모든 인증 방식과 모든 프로토콜에서 동작하며, 공유한 호스트에 쓸 자격 증명을 따로 지정할 수도 있습니다.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**알림:**
-CPU와 메모리, 디스크 같은 호스트 지표에 규칙을 걸어 두고 조건이 걸리면 ntfy나 Discord, 웹훅으로 알림을 받습니다. 발생 중인 알림과 해제된 알림을 기록에서 보고, 신경 쓰지 않을 것은 지워 둘 수 있습니다.
-
-</td>
-<td width="50%" valign="top">
-
-**홈페이지:**
-직접 꾸미는 끌어다 놓기 위젯 화면입니다. 호스트 상태, 핑, 서비스 링크, 북마크, 검색, 시계, 달력, 카운트다운, 메모, RSS, 날씨, 이미지, iframe, Docker, 터널, 지표 차트, 사용자 API, 심지어 살아 있는 터미널까지 위젯으로 놓을 수 있습니다.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**스니펫과 도구:**
-자주 쓰는 명령을 저장해 두고 한 번에 실행할 수 있으며, 호스트 값이나 직접 넣는 값을 변수로 쓸 수 있습니다. 열려 있는 모든 터미널에서 같은 명령을 한꺼번에 실행할 수 있고, 명령 기록도 자동 완성으로 찾을 수 있습니다.
-
-</td>
-<td width="50%" valign="top">
-
-**세션 공유:**
-터미널과 RDP, VNC, Telnet 세션을 실시간으로 공유합니다. 계정 없이 들어올 수 있는 링크를 보내거나 특정 Termix 사용자와 공유할 수 있고, 보기만 할지 조작까지 할지 고를 수 있습니다. 공유는 알아서 만료되게 하거나 언제든 취소할 수 있고, 전체 또는 호스트별로 꺼 둘 수 있습니다.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**세션 녹화와 로그:**
-터미널과 RDP, VNC 세션을 녹화해 두었다가 나중에 다시 볼 수 있습니다. 세션의 텍스트 로그를 내려받을 수 있고, 연결 로그를 보면 연결하는 동안 무슨 일이 있었는지 그대로 알 수 있습니다.
-
-</td>
-<td width="50%" valign="top">
-
 **시리얼 연결:**
-라우터와 스위치, 마이크로컨트롤러 같은 시리얼 장치에 브라우저나 데스크톱 앱에서 접속할 수 있습니다. 보드레이트와 데이터 비트, 스톱 비트, 패리티를 설정할 수 있습니다. 지원되는 브라우저에서는 Web Serial API를, 데스크톱 앱에서는 네이티브 백엔드를 씁니다.
+브라우저 또는 데스크톱 앱에서 직접 시리얼 장치(라우터, 스위치, 마이크로컨트롤러 등)에 연결. 보드레이트, 데이터 비트, 스톱 비트, 패리티 구성. 지원 브라우저에서는 Web Serial API를, Electron 앱에서는 네이티브 백엔드를 사용합니다.
+
+</td>
+<td width="50%" valign="top">
+
+**알림:**
+호스트 메트릭(CPU, 메모리, 디스크 등)에 대한 임계값 기반 알림 규칙을 설정하고 트리거될 때 ntfy 또는 웹훅을 통해 알림 수신. 기록 로그에서 발생 중인 알림과 해결된 알림 확인.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Tailscale:**
-tailnet에서 기기를 가져와 몇 번의 클릭으로 호스트로 추가하고, Tailscale SSH로 접속하면 접근 권한은 tailnet ACL이 처리하므로 자격 증명을 저장할 필요가 없습니다. Headscale과 사용자 지정 엔드포인트도 됩니다.
+**홈페이지:**
+드래그 앤 드롭 위젯 그리드를 갖춘 완전 맞춤형 홈페이지. 호스트 상태, 서비스 링크, 시계, 메모, RSS 피드, 날씨, Docker 컨테이너, 호스트 메트릭 차트, 임베디드 터미널, iframe 등의 위젯 추가 가능.
 
 </td>
 <td width="50%" valign="top">
 
-**Proxmox:**
-Proxmox 인스턴스에서 호스트를 바로 가져오고, 노드와 게스트의 CPU와 메모리, 스토리지 상태를 전용 탭에서 볼 수 있습니다.
+**데이터베이스 암호화:**
+백엔드가 암호화된 SQLite 데이터베이스 파일로 저장됨. 자세한 내용은 [문서](https://docs.termix.site/security)를 참조하세요.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**워크스페이스와 탭:**
-탭과 분할 배치를 통째로 저장해 두고 한 번에 다시 열 수 있습니다. Termix는 마지막 세션도 기억하기 때문에 새로 고침을 하거나 기기를 바꿔도 탭이 그대로 돌아옵니다.
+**네트워크 그래프:**
+대시보드를 사용자 정의하여 SSH 연결 기반의 홈랩 네트워크를 상태 표시와 함께 시각화.
 
 </td>
 <td width="50%" valign="top">
 
-**설치 안내:**
-짧은 설정 과정이 화면 프리셋과 테마, 쓰고 싶은 기능, 첫 호스트를 고르도록 안내합니다. 간단 모드는 쓰지 않는 것을 숨겨 주고, 설정은 언제든 다시 하거나 프리셋을 바꿀 수 있습니다.
+**SSH 도구:**
+한 번의 클릭으로 실행 가능한 재사용 가능 명령어 스니펫 생성. 여러 열린 터미널에서 동시에 하나의 명령어 실행.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**데스크톱 단독 실행과 동기화:**
-데스크톱 앱은 자체 백엔드와 데이터베이스로 서버 없이 혼자 돌아갑니다. Termix 서버에 연결하면 호스트와 자격 증명, 스니펫 등을 양방향으로 동기화할 수 있고, 연결을 로컬에서 시작할지 서버를 거칠지도 고를 수 있습니다.
+**지속 탭:**
+사용자 프로필에서 활성화된 경우 SSH 세션 및 탭이 기기/새로 고침 간에 열린 상태 유지.
 
 </td>
 <td width="50%" valign="top">
 
-**명령줄 도구:**
-셸과 스크립트에서 쓰는 `termix` CLI입니다. 터미널을 열고, 호스트 하나나 플릿 전체에서 명령을 실행하고, SFTP로 파일을 옮기고, 호스트와 스니펫, 자격 증명을 관리할 수 있습니다. `npm install -g @termix-cli/cli`로 설치하거나 단독 실행 파일을 받으면 됩니다. [CLI 문서](https://docs.termix.site/cli)를 참고하세요.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**보안:**
-비밀번호와 키를 비롯한 비밀 정보는 사용자별로 암호화되고, 데이터베이스 파일 자체도 디스크에서 암호화할 수 있습니다. 어떻게 동작하는지는 [문서](https://docs.termix.site/security)에서 볼 수 있습니다.
-
-</td>
-<td width="50%" valign="top">
-
-**언어:**
-약 30개 언어가 기본으로 들어 있으며 [Crowdin](https://docs.termix.site/translations)으로 관리합니다.
+**다국어 지원:**
+약 30개 언어 내장 지원([Crowdin](https://docs.termix.site/translations)으로 관리).
 
 </td>
 </tr>
@@ -255,20 +199,17 @@ Proxmox 인스턴스에서 호스트를 바로 가져오고, 노드와 게스트
 <summary><b>더 많은 기능</b></summary>
 <br />
 
-- **대시보드** - 직접 배치한 카드로 서버 상태를 한눈에
-- **네트워크 그래프** - 호스트를 바탕으로 홈랩을 그려 주고 상태를 실시간 표시
-- **tmux 모니터** - tmux 세션과 창, 페인을 미리보기와 검색으로 살펴보기
-- **API 키** - 스크립트와 CI용, 만료일이 있는 사용자별 키
-- **내보내기와 가져오기** - 호스트와 자격 증명, 파일 관리자 데이터를 옮기기
-- **자동 SSL** - 인증서 발급과 갱신, HTTPS 리다이렉트를 알아서. 직접 만든 인증서도 쓸 수 있습니다
-- **데이터베이스** - 기본은 SQLite, PostgreSQL과 MySQL도 지원
-- **현대적인 UI** - 데스크톱과 모바일에서 모두 쓸 수 있는 깔끔한 React 화면. 라이트와 다크, Dracula 같은 테마 제공. 어떤 연결이든 URL로 전체 화면에서 열 수 있습니다
-- **명령 팔레트** - 왼쪽 Shift를 두 번 눌러 키보드로 호스트로 이동
-- **키보드 단축키** - 탭 이동과 닫기 등, 모두 다시 지정할 수 있습니다
-- **Wake-on-LAN** - Termix에서도, 자동화 단계에서도 컴퓨터를 켜기
-- **신뢰할 수 있는 프록시 인증** - 리버스 프록시가 로그인을 처리하고 사용자 정보를 넘겨주기
-- **풍부한 SSH 기능** - 점프 호스트, Warpgate, TOTP 입력, SOCKS5, 호스트 키 확인, 비밀번호 자동 입력, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, 포트 노킹, 터미널 로그, 에이전트 포워딩, Bitwarden SSH 에이전트, HashiCorp Vault SSH 서명 등
-- **Termix ID** - sshid.io 같은 기능을 내장했습니다. 핸들을 등록하고 리졸버 URL에 공개 키를 올리고 내장 CA에서 SSH 인증서를 발급할 수 있습니다
+- **대시보드** - 대시보드에서 서버 정보를 한눈에 확인
+- **API 키** - 자동화/CI에 사용할 만료일이 있는 사용자 범위 API 키 생성
+- **데이터 내보내기/가져오기** - SSH 호스트, 자격 증명, 파일 관리자 데이터의 내보내기 및 가져오기
+- **자동 SSL 설정** - HTTPS 리디렉션을 포함한 내장 SSL 인증서 생성 및 관리
+- **모던 UI** - React, Tailwind CSS, Shadcn으로 구축된 깔끔한 데스크톱/모바일 친화적 인터페이스. 라이트, 다크, 드라큘라 등 다양한 UI 테마 선택 가능. URL 라우트를 사용하여 모든 연결을 전체 화면으로 열기 가능.
+- **명령어 기록** - 이전에 실행한 SSH 명령어의 자동 완성 및 조회
+- **빠른 연결** - 연결 데이터를 저장하지 않고 서버에 접속
+- **명령어 팔레트** - 왼쪽 Shift 키를 두 번 눌러 키보드로 SSH 연결에 빠르게 접근
+- **Proxmox 통합** - Proxmox 인스턴스에서 Termix로 호스트를 자동 추가
+- **풍부한 SSH 기능** - 점프 호스트, Warpgate, TOTP 기반 연결, SOCKS5, 호스트 키 검증, 비밀번호 자동 입력, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, 포트 노킹, 터미널 로깅, SSH 에이전트 포워딩, Bitwarden SSH 에이전트, HashiCorp Vault SSH 서명 등 지원.
+- **Termix ID** - Termix에 내장된 sshid.io와 동등한 기능. 핸들을 등록하고, 리졸버 URL에 공개 SSH 키를 게시하며, 내장 CA를 사용하여 SSH 인증서를 발급할 수 있습니다.
 
 </details>
 
@@ -279,15 +220,15 @@ Proxmox 인스턴스에서 호스트를 바로 가져오고, 노드와 게스트
 <table align="center">
 <tr>
 <th align="center">플랫폼</th>
-<th align="center">배포 형태</th>
+<th align="center">배포판</th>
 </tr>
 <tr>
 <td align="center"><b>Web</b></td>
-<td>최신 브라우저 전반(Chrome, Safari, Firefox) · PWA 지원</td>
+<td>모든 최신 브라우저(Chrome, Safari, Firefox) · PWA 지원</td>
 </tr>
 <tr>
 <td align="center"><b>Windows</b> <sub>x64/ia32</sub></td>
-<td>포터블 · MSI 설치 파일 · Chocolatey</td>
+<td>포터블 · MSI 설치 프로그램 · Chocolatey</td>
 </tr>
 <tr>
 <td align="center"><b>Linux</b> <sub>x64/ia32</sub></td>
@@ -311,9 +252,9 @@ Proxmox 인스턴스에서 호스트를 바로 가져오고, 노드와 게스트
 
 ## 설치
 
-모든 플랫폼의 자세한 설치 방법은 [Termix 문서](https://docs.termix.site/install)를 참고하세요.
+모든 플랫폼에 Termix를 설치하는 방법에 대한 자세한 내용은 Termix [문서](https://docs.termix.site/install)를 방문하세요.
 
-Docker Compose 예시입니다(원격 데스크톱 기능을 쓰지 않는다면 `guacd`와 네트워크 부분은 빼도 됩니다):
+다음은 Docker Compose 파일 예시입니다(원격 데스크톱 기능을 사용할 계획이 없다면 guacd와 네트워크를 생략할 수 있습니다):
 
 ```yaml
 services:
@@ -350,37 +291,11 @@ networks:
     driver: bridge
 ```
 
-### 명령줄 도구
-
-Termix에는 CLI도 있어서 터미널에서 서버를 관리하거나 Termix를 자기 스크립트에 넣어 쓸 수 있습니다.
-
-```bash
-npm install -g @termix-cli/cli
-termix login --url https://termix.example.com
-termix ssh 1
-```
-
-터미널을 열고, 호스트 하나나 플릿 전체에서 명령을 실행하고, SFTP로 파일을 옮기고, 호스트와 스니펫, 자격 증명을 관리할 수 있습니다. 전체 문서는 [docs.termix.site/cli](https://docs.termix.site/cli)에 있습니다.
-
-### 클라우드 호스팅
-
-Termix 서버는 집 안 네트워크가 아니라 VPS에서 돌릴 수도 있습니다. 관리 대상 네트워크 위에서 돌아가면 장애가 났을 때 Termix도 같이 멈춰서, 정작 고쳐야 할 때 쓸 수 없게 됩니다. 밖에서 돌리면 언제든 접속할 수 있고 고정 IP도 생기며, VPN이나 포트 포워딩 없이 어디서나 들어갈 수 있습니다.
-
-[GINERNET](https://docs.termix.site/install/ginernet)은 Termix를 후원하고 있으며, 문서에 이 회사 VPS에 배포하는 단계별 안내가 있습니다.
-
-<br />
-
-## 텔레메트리
-
-Termix는 하루에 한 번 익명의 작은 데이터를 보냅니다. 인스턴스가 얼마나 돌아가는지, 어떤 기능이 쓰이는지 파악하기 위한 것입니다. 여기에는 무작위 인스턴스 ID, 사용자와 호스트 수, 앱 버전, 최근 24시간 동안 쓴 기능(터미널, 파일 관리자, 터널, Docker 등)만 들어갑니다. 사용자 이름과 호스트 이름, IP 주소, 자격 증명처럼 나나 내 서버를 알아볼 수 있는 것은 전혀 담기지 않습니다.
-
-기본으로 켜져 있습니다. 관리 설정의 일반에서 끄거나, Termix를 시작하기 전에 `ENABLE_TELEMETRY=false`를 지정하면 됩니다.
-
 <br />
 
 ## 후원
 
-Termix는 무료 오픈 소스이고 구독이나 유료 요금제가 없습니다. 유용하게 쓰고 계시다면 서버 비용과 도메인, 개발 시간에 보탬이 되도록 후원을 고려해 주세요. 후원은 SAML과 Kubernetes, 에이전트 지원 같은 기능을 만들기 위해 알아보고 배우는 시간에도 쓰입니다. 진행 상황을 보고 후원하시려면 아래를 눌러 주세요.
+Termix는 구독이나 유료 요금제가 없는 무료 오픈소스 프로젝트입니다. 유용하게 사용하고 있다면 서버 비용, 도메인, 개발 시간을 위해 후원을 고려해 주세요. 후원은 SAML, Kubernetes, 에이전트 지원과 같은 기능을 구축하는 데 필요한 사항을 연구하고 학습하는 시간에도 사용됩니다. 아래에서 진행 상황을 확인하고 후원할 수 있습니다.
 
 [후원하기](https://donate.termix.site/)
 
@@ -388,7 +303,7 @@ Termix는 무료 오픈 소스이고 구독이나 유료 요금제가 없습니
 
 ## 스폰서
 
-유료 게재로 개발을 지원하고 싶으신가요? [mail@termix.site](mailto:mail@termix.site)로 메일을 보내 주세요.
+개발 지원을 위한 유료 광고에 관심이 있으신가요? [mail@termix.site](mailto:mail@termix.site)로 이메일을 보내주세요.
 
 <div align="center">
 
@@ -410,6 +325,10 @@ Termix는 무료 오픈 소스이고 구독이나 유료 요금제가 없습니
   <img src="https://sirv.sirv.com/website/screenshots/cloudflare/cloudflare-logo.png?w=300" height="40" alt="Cloudflare" />
 </a>
 &nbsp;&nbsp;&nbsp;
+<a href="https://tailscale.com/">
+  <img src="https://drive.google.com/uc?export=view&id=1lIxkJuX6M23bW-2FElhT0rQieTrzaVSL" height="40" alt="Tailscale" />
+</a>
+&nbsp;&nbsp;&nbsp;
 <a href="https://akamai.com/">
   <img src="https://upload.wikimedia.org/wikipedia/commons/8/8b/Akamai_logo.svg" height="40" alt="Akamai" />
 </a>
@@ -421,17 +340,14 @@ Termix는 무료 오픈 소스이고 구독이나 유료 요금제가 없습니
 <a href="https://rackgenius.com/">
   <img src="https://rackgenius.com/rackgenius-logo.png" height="40" alt="Rack Genius" />
 </a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://ginernet.com/">
-  <img src="https://ginernet.com/img/logo-web.png" height="40" alt="Ginernet" />
-</a>
+
 </div>
 
 <br />
 
 ## 지원
 
-도움이 필요하거나 기능을 제안하고 싶으신가요? [새 이슈](https://github.com/Termix-SSH/Support/issues)를 올리면서 되도록 자세히, 가능하면 영어로 적어 주세요. [Discord](https://discord.gg/jVQGdvHDrf) 지원 채널에서 물어봐도 되지만 답변이 늦을 수 있습니다.
+Termix에 대한 도움이 필요하거나 기능을 요청하려면 [Issues](https://github.com/Termix-SSH/Support/issues) 페이지를 방문하여 로그인하고 `New Issue`를 누르세요. 이슈는 가능한 한 상세하게 작성하고, 영어로 작성하는 것이 좋습니다. [Discord](https://discord.gg/jVQGdvHDrf) 서버에 참여하여 지원 채널을 이용할 수도 있지만, 응답 시간이 더 길 수 있습니다.
 
 <br />
 
@@ -443,7 +359,7 @@ Termix는 무료 오픈 소스이고 구독이나 유료 요금제가 없습니
 
 [![YouTube](../repo-images/YouTube.png)](https://www.youtube.com/@TermixSSH/videos)
 
-<sub>YouTube에서 업데이트 소개 보기</sub>
+<sub>YouTube에서 업데이트 개요 시청하기</sub>
 
 <br />
 <br />
@@ -483,7 +399,7 @@ Termix는 무료 오픈 소스이고 구독이나 유료 요금제가 없습니
 </tr>
 </table>
 
-<sub>일부 영상과 이미지는 오래되었거나 기능을 제대로 보여 주지 못할 수 있습니다.</sub>
+<sub>일부 비디오 및 이미지는 최신이 아니거나 기능을 완벽하게 보여주지 않을 수 있습니다.</sub>
 
 </div>
 
@@ -491,10 +407,10 @@ Termix는 무료 오픈 소스이고 구독이나 유료 요금제가 없습니
 
 ## 계획된 기능
 
-계획된 기능은 모두 [Projects](https://github.com/orgs/Termix-SSH/projects/5)에 있습니다. 기여하고 싶다면 [기여 안내](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md)를 봐 주세요.
+모든 계획된 기능은 [Projects](https://github.com/orgs/Termix-SSH/projects/5)를 참조하세요. 기여를 원하시면 [Contributing](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md)을 참조하세요.
 
 <br />
 
 ## 라이선스
 
-Apache License 2.0에 따라 배포합니다. 자세한 내용은 `LICENSE`를 참고하세요.
+Apache License Version 2.0에 따라 배포됩니다. 자세한 내용은 `LICENSE`를 참조하세요.

docs/readme/README-PT.md

@@ -4,7 +4,7 @@
 
 <h1>Termix</h1>
 
-<p>Gestão de servidores auto-hospedada, do SSH e do desktop remoto às automações</p>
+<p>Gerenciamento SSH auto-hospedado e acesso a area de trabalho remota</p>
 
 <p>
   <a href="../README.md">English</a> ·
@@ -37,7 +37,7 @@
 
 <br />
 
-O Termix é gratuito e de código aberto. Se ele te ajuda, considera [doar](https://donate.termix.site/) para ajudar a cobrir os custos de servidor e o tempo de desenvolvimento.
+Termix é gratuito e de código aberto. Se o achar útil, considere [doar](https://donate.termix.site/) para ajudar a cobrir os custos de servidor e o tempo de desenvolvimento.
 
 <br />
 
@@ -56,9 +56,9 @@ O Termix é gratuito e de código aberto. Se ele te ajuda, considera [doar](http
 
 <br />
 
-## Visão geral
+## Visao Geral
 
-O Termix é uma plataforma gratuita, de código aberto e auto-hospedada para gerenciar os teus servidores. Ele junta num só lugar terminais SSH, desktops remotos (RDP, VNC, Telnet), transferência de arquivos, túneis, Docker, métricas e automações, na web, no desktop e no celular. É uma alternativa auto-hospedada ao Termius que continua gratuita para sempre.
+Termix e uma plataforma de gerenciamento de servidores tudo-em-um, de codigo aberto, sempre gratuita e auto-hospedada. Ela fornece uma solucao multiplataforma para gerenciar seus servidores e infraestrutura atraves de uma interface unica e intuitiva. Termix oferece acesso a terminal SSH, controle de desktop remoto (RDP, VNC, Telnet), capacidades de tunelamento SSH, gerenciamento remoto de arquivos SSH e muitas outras ferramentas. Termix e a alternativa perfeita, gratuita e auto-hospedada ao Termius, disponivel para todas as plataformas.
 
 <br />
 
@@ -68,182 +68,126 @@ O Termix é uma plataforma gratuita, de código aberto e auto-hospedada para ger
 <tr>
 <td width="50%" valign="top">
 
-**Terminal SSH:**
-Um terminal completo com abas como as do navegador e tela dividida, até 6 painéis ao mesmo tempo. Escolhe o teu tema, a fonte e as cores. Acima de cada sessão há uma barra com CPU, memória e disco ao vivo, além de atalhos para os arquivos, o Docker, os túneis e as métricas daquele host.
+**Acesso ao Terminal SSH:**
+Terminal completo com suporte a tela dividida (ate 4 paineis) com um sistema de abas similar ao navegador. Inclui suporte para personalizacao do terminal incluindo temas comuns de terminal, fontes e outros componentes.
 
 </td>
 <td width="50%" valign="top">
 
-**Desktop remoto:**
-RDP, VNC e Telnet no navegador, em abas e tela dividida como qualquer outra sessão. Inclui um navegador de arquivos para as unidades RDP e envio arrastando e soltando. No desktop Windows também dá para abrir um host no cliente RDP nativo.
+**Acesso a Area de Trabalho Remota:**
+Suporte a RDP, VNC e Telnet pelo navegador com personalizacao completa e tela dividida.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Túneis SSH:**
-Encaminhamento local, remoto e SOCKS dinâmico, com reconexão automática e verificação de estado. Os túneis de cliente para servidor do aplicativo de desktop ficam naquela máquina, e dá para salvar predefinições no servidor para levar uma configuração para outro computador.
+**Gerenciamento de Tuneis SSH:**
+Crie e gerencie tuneis SSH de servidor para servidor com reconexao automatica, monitoramento de saude e encaminhamento local, remoto ou SOCKS dinamico. As configuracoes de tunel de cliente desktop para servidor sao armazenadas localmente por instalacao de desktop, snapshots de predefinicoes C2S opcionais podem ser salvos no servidor, renomeados, carregados ou excluidos quando voce quiser mover uma configuracao de tunel local entre clientes.
 
 </td>
 <td width="50%" valign="top">
 
-**Gerenciador de arquivos:**
-Navega, edita, envia, baixa, renomeia, move e apaga arquivos por SFTP, com suporte a sudo. Vê e edita código, imagens, áudio e vídeo. Copia arquivos direto de um servidor para outro, com o caminho mais rápido escolhido para ti e a integridade das transferências verificada.
+**Gerenciador Remoto de Arquivos:**
+Gerencie arquivos diretamente em servidores remotos com suporte para visualizar e editar codigo, imagens, audio e video. Faca upload, download, renomeie, exclua e mova arquivos facilmente com suporte sudo. Inclui suporte para mover arquivos de servidor para servidor.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Docker e Podman:**
-Inicia, para, pausa e remove containers, acompanha as estatísticas e abre um shell dentro de um deles. Funciona tanto com Docker quanto com Podman. Não é para substituir o Portainer ou o Dockge, só para gerenciar os containers que já tens.
+**Gerenciamento de Docker e Podman:**
+Inicie, pare, pause, remova conteineres. Visualize estatisticas de conteineres. Controle conteineres usando o terminal Docker Exec. Suporta Docker e Podman como ambiente de execucao de conteineres. Nao foi feito para substituir Portainer ou Dockge, mas sim para simplesmente gerenciar seus conteineres em vez de cria-los.
 
 </td>
 <td width="50%" valign="top">
 
-**Gerenciador de hosts:**
-Salva e organiza hosts com etiquetas e pastas aninhadas que podes nomear e colorir. Reaproveita credenciais salvas entre hosts, distribui chaves SSH automaticamente, agrupa hosts sob um host pai, edita e exporta em lote, e usa a conexão rápida para conexões pontuais que não queres guardar.
+**Gerenciador de Hosts SSH:**
+Salve, organize e gerencie suas conexoes SSH com tags e pastas (com personalizacao de pastas e suporte a pastas aninhadas), e salve facilmente informacoes de login reutilizaveis com a capacidade de automatizar a implantacao de chaves SSH.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Métricas de host:**
-CPU, memória, disco, rede, temperatura, tempo ligado, processos, portas, logins e informações do sistema na maioria dos servidores Linux, com gráficos de histórico. Os cartões de gerenciamento deixam cuidar de serviços, tarefas cron, pacotes, usuários, regras de firewall, WireGuard, Tailscale, certificados SSL, logs e verificações de saúde sem sair do Termix.
+**Metricas do Host:**
+Visualize o uso de CPU, memoria e disco, rede, tempo de atividade, informacoes do sistema, firewall, monitor de portas, visualizador de logs, usuarios/permissoes, certificados e muito mais na maioria dos servidores baseados em Linux. Inclui graficos de historico em serie temporal e alertas baseados em limites com suporte a ntfy e webhook.
 
 </td>
 <td width="50%" valign="top">
 
-**Automações:**
-Escolhe um gatilho e depois diz o que deve acontecer. Os gatilhos incluem uma métrica passando de um limite, um host caindo ou voltando, uma verificação de saúde mudando, um agendamento, um evento de container ou um webhook recebido. Os passos podem rodar comandos e trechos, controlar containers e túneis, acordar um host, chamar uma URL, esperar, seguir por uma condição, rodar outra automação e te avisar por ntfy, Discord ou webhook. As execuções de teste deixam experimentar com segurança primeiro.
+**Autenticacao de Usuarios:**
+Gerenciamento seguro de usuarios com controles de administrador (podem editar informacoes de outros usuarios) e suporte para OIDC/LDAP/SSO (com controle de acesso), 2FA (TOTP) e passkey (WebAuthn). Visualize sessoes ativas de usuarios em todas as plataformas e revogue permissoes. Vincule suas contas OIDC/Locais entre si. Visualize o log de auditoria de todas as acoes dos usuarios.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Frotas:**
-Junta hosts numa frota escolhendo um a um ou com regras de etiquetas, para que os novos entrem sozinhos. Roda um comando em todos os hosts de uma vez, envia e busca arquivos em todos eles, instala pacotes e reúne um inventário do sistema, do kernel, da arquitetura e do tempo ligado.
+**Integracao com Tailscale:**
+Liste dispositivos da sua rede Tailscale para adicioná-los rapidamente como hosts, e conecte-se usando Tailscale SSH como metodo de autenticacao, deixando as ACLs da sua rede gerenciar a autorizacao sem armazenar credenciais.
 
 </td>
 <td width="50%" valign="top">
 
-**Assistente de IA:**
-É opcional e fica desligado até tu ligares. Conecta OpenAI, Anthropic, Gemini, Ollama ou qualquer endpoint compatível com OpenAI e pergunta sobre a tua instalação. Ele lê hosts, frotas, trechos e alertas, e propõe mudanças para tu aprovares em vez de fazer sozinho. Nunca consegue mexer em credenciais, usuários ou configurações. Os administradores podem deixar desligado para toda a instância, e dá para escondê-lo já na configuração inicial.
+**RBAC/Compartilhamento:**
+Crie funcoes e compartilhe hosts entre usuarios/funcoes. Suporta todos os tipos de autenticacao e todos os protocolos de host.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Login e usuários:**
-Contas locais além de login por OIDC, LDAP, GitHub e Google, com dois fatores (TOTP), chaves de acesso (WebAuthn) e dispositivos confiáveis. Os administradores podem gerenciar usuários, ligar grupos do OIDC a papéis, ver todas as sessões ativas em qualquer plataforma e encerrá-las. Liga a tua conta local com a do OIDC e consulta o registro de auditoria do que cada um fez.
+**Conexoes Seriais:**
+Conecte-se a dispositivos seriais (roteadores, switches, microcontroladores, etc.) diretamente do navegador ou do aplicativo desktop. Configure taxa de baud, bits de dados, bits de parada e paridade. Usa a Web Serial API em navegadores suportados ou um backend nativo no aplicativo Electron.
 
 </td>
 <td width="50%" valign="top">
 
-**Papéis e compartilhamento:**
-Cria papéis e compartilha hosts com usuários ou papéis em quatro níveis: conectar, ver, editar e gerenciar. Funciona com todos os tipos de autenticação e todos os protocolos, e dá para trocar as credenciais usadas num host compartilhado.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
 **Alertas:**
-Define regras em métricas de host como CPU, memória e disco, e recebe aviso por ntfy, Discord ou webhook quando elas disparam. Vê os alertas ativos e resolvidos num histórico e dispensa os que não te interessam.
-
-</td>
-<td width="50%" valign="top">
-
-**Página inicial:**
-Uma grade de widgets que tu mesmo montas arrastando e soltando. Tem widget para status de host, ping, links de serviços, favoritos, busca, relógios, calendários, contagens regressivas, notas, RSS, previsão do tempo, imagens, iframes, Docker, túneis, gráficos de métricas, APIs próprias e até um terminal ao vivo.
+Defina regras de alerta baseadas em limites para metricas do host (CPU, memoria, disco, etc.) e receba notificacoes via ntfy ou webhooks quando forem ativadas. Visualize alertas ativos e resolvidos em um historico de registros.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Trechos e ferramentas:**
-Salva os comandos que usas sempre e dispara com um clique, com variáveis para o host e para o que tu digitares. Roda um mesmo comando em todos os terminais abertos e pesquisa o teu histórico com preenchimento automático.
+**Pagina Inicial:**
+Uma pagina inicial totalmente personalizavel com uma grade de widgets de arrastar e soltar. Adicione widgets para status do host, links de servicos, relogios, notas, feeds RSS, clima, conteineres Docker, graficos de metricas do host, terminais incorporados, iframes e mais.
 
 </td>
 <td width="50%" valign="top">
 
-**Compartilhar sessão:**
-Compartilha ao vivo uma sessão de terminal, RDP, VNC ou Telnet. Manda um link que qualquer um entra sem conta, ou compartilha com um usuário específico do Termix, em somente leitura ou com escrita. Os compartilhamentos podem expirar sozinhos ou ser revogados, e dá para desligar tudo de uma vez ou por host.
+**Criptografia de Banco de Dados:**
+Backend armazenado como arquivos de banco de dados SQLite criptografados. Consulte a [documentacao](https://docs.termix.site/security) para mais informacoes.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Gravação e registros de sessão:**
-Grava sessões de terminal, RDP e VNC e reproduz depois. Baixa registros de texto de uma sessão e olha o registro de conexão para ver exatamente o que aconteceu durante ela.
+**Grafico de Rede:**
+Personalize seu Dashboard para visualizar seu homelab baseado nas suas conexoes SSH com suporte de status.
 
 </td>
 <td width="50%" valign="top">
 
-**Conexões seriais:**
-Fala com dispositivos seriais como roteadores, switches e microcontroladores pelo navegador ou pelo aplicativo de desktop. Define taxa de transmissão, bits de dados, bits de parada e paridade. Usa a API Web Serial nos navegadores compatíveis, ou um backend nativo no aplicativo de desktop.
+**Ferramentas SSH:**
+Crie trechos de comandos reutilizaveis que sao executados com um unico clique. Execute um comando simultaneamente em multiplos terminais abertos.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Tailscale:**
-Traz dispositivos da tua tailnet para adicionar como hosts em poucos cliques, e conecta com Tailscale SSH para que as ACLs da tailnet cuidem do acesso sem guardar credenciais. Headscale e endpoints personalizados também funcionam.
-
-</td>
-<td width="50%" valign="top">
-
-**Proxmox:**
-Importa hosts direto de uma instância Proxmox e acompanha as estatísticas de nós e convidados, incluindo CPU, memória e armazenamento, numa aba própria.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Áreas de trabalho e abas:**
-Salva um conjunto de abas com a divisão da tela e reabre tudo com um clique. O Termix também lembra da tua última sessão, então as abas voltam depois de recarregar e em outros dispositivos.
-
-</td>
-<td width="50%" valign="top">
-
-**Configuração guiada:**
-Uma configuração curta te leva por escolher uma predefinição de interface, o tema, as funcionalidades que queres e o teu primeiro host. O modo simples esconde o que não usas, e dá para refazer a configuração ou trocar de predefinição quando quiseres.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Desktop independente e sincronização:**
-O aplicativo de desktop roda sozinho, com backend e banco de dados locais, sem servidor. Também dá para ligar num servidor Termix e sincronizar nos dois sentidos hosts, credenciais, trechos e mais, e escolher se as conexões saem da tua máquina ou passam pelo servidor.
-
-</td>
-<td width="50%" valign="top">
-
-**Linha de comando:**
-Um CLI `termix` para o teu shell e os teus scripts. Abre terminais, roda um comando num host ou numa frota inteira, move arquivos por SFTP e gerencia hosts, trechos e credenciais. Instala com `npm install -g @termix-cli/cli` ou pega um binário independente. Vê a [documentação do CLI](https://docs.termix.site/cli).
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Segurança:**
-Senhas, chaves e outros segredos são criptografados por usuário, e os próprios arquivos do banco de dados podem ser criptografados em disco. Vê a [documentação](https://docs.termix.site/security) para entender como funciona.
+**Abas Persistentes:**
+Sessoes SSH e abas permanecem abertas entre dispositivos/atualizacoes se habilitado no perfil do usuario.
 
 </td>
 <td width="50%" valign="top">
 
 **Idiomas:**
-Cerca de 30 idiomas incluídos, gerenciados pelo [Crowdin](https://docs.termix.site/translations).
+Suporte integrado para aproximadamente 30 idiomas (gerenciado pelo [Crowdin](https://docs.termix.site/translations)).
 
 </td>
 </tr>
@@ -255,43 +199,40 @@ Cerca de 30 idiomas incluídos, gerenciados pelo [Crowdin](https://docs.termix.s
 <summary><b>Mais funcionalidades</b></summary>
 <br />
 
-- **Painel** - Os teus servidores num relance, com cartões que tu mesmo organizas
-- **Gráfico de rede** - O teu homelab desenhado a partir dos teus hosts, com status ao vivo
-- **Monitor tmux** - Percorre sessões, janelas e painéis do tmux, com prévia e busca
-- **Chaves de API** - Chaves por usuário com data de validade para scripts e CI
-- **Exportar e importar** - Leva e traz hosts, credenciais e dados do gerenciador de arquivos
-- **SSL automático** - Certificados gerados e renovados para ti, com redirecionamento para HTTPS, ou usa os teus
-- **Bancos de dados** - SQLite por padrão, com PostgreSQL e MySQL também suportados
-- **Interface moderna** - Interface React limpa que funciona no desktop e no celular, com temas como claro, escuro e Dracula. Qualquer conexão abre em tela cheia por uma URL
-- **Paleta de comandos** - Toca duas vezes no Shift esquerdo para ir a um host pelo teclado
-- **Atalhos de teclado** - Trocar de aba, fechar abas e mais, tudo remapeável
-- **Wake-on-LAN** - Liga uma máquina pelo Termix ou por um passo de automação
-- **Autenticação por proxy confiável** - Deixa um proxy reverso cuidar do login e repassar o usuário
-- **SSH bem completo** - Hosts de salto, Warpgate, pedidos de TOTP, SOCKS5, verificação de chave de host, preenchimento automático de senha, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, port knocking, registro do terminal, encaminhamento de agente, agente SSH do Bitwarden, assinatura SSH com HashiCorp Vault e mais
-- **Termix ID** - Uma versão embutida do sshid.io. Registra um identificador, publica as tuas chaves públicas numa URL de resolução e emite certificados SSH pela CA embutida
+- **Dashboard** - Visualize informacoes do servidor de relance no seu dashboard
+- **Chaves de API** - Crie chaves de API com escopo de usuario e datas de expiracao para uso em automacao/CI
+- **Exportacao/Importacao de Dados** - Exporte e importe hosts SSH, credenciais e dados do gerenciador de arquivos
+- **Configuracao Automatica de SSL** - Geracao e gerenciamento integrado de certificados SSL com redirecionamentos HTTPS
+- **Interface Moderna** - Interface limpa compativel com desktop/mobile construida com React, Tailwind CSS e Shadcn. Escolha entre muitos temas de interface diferentes, incluindo claro, escuro, Dracula, etc. Use rotas de URL para abrir qualquer conexao em tela cheia.
+- **Historico de Comandos** - Autocompletar e visualizar comandos SSH executados anteriormente
+- **Conexao Rapida** - Conecte-se a um servidor sem precisar salvar os dados de conexao
+- **Paleta de Comandos** - Pressione duas vezes a tecla Shift esquerda para acessar rapidamente as conexoes SSH com seu teclado
+- **Integracao com Proxmox** - Adicione automaticamente hosts ao Termix a partir da sua instancia Proxmox
+- **SSH Rico em Funcionalidades** - Suporta jump hosts, Warpgate, conexoes baseadas em TOTP, SOCKS5, verificacao de chave do host, preenchimento automatico de senhas, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, port knocking, registro de terminal, encaminhamento de agente SSH, agente SSH do Bitwarden, assinatura SSH do HashiCorp Vault, e mais.
+- **Termix ID** - Um equivalente ao sshid.io integrado ao Termix. Reivindique um identificador, publique suas chaves SSH publicas em uma URL de resolucao e use uma CA integrada para emitir certificados SSH.
 
 </details>
 
 <br />
 
-## Plataformas suportadas
+## Suporte a Plataformas
 
 <table align="center">
 <tr>
 <th align="center">Plataforma</th>
-<th align="center">Distribuição</th>
+<th align="center">Distribuicao</th>
 </tr>
 <tr>
 <td align="center"><b>Web</b></td>
-<td>Qualquer navegador moderno (Chrome, Safari, Firefox) · Suporte a PWA</td>
+<td>Qualquer navegador moderno (Chrome, Safari, Firefox) · Suporte PWA</td>
 </tr>
 <tr>
 <td align="center"><b>Windows</b> <sub>x64/ia32</sub></td>
-<td>Portátil · Instalador MSI · Chocolatey</td>
+<td>Portatil · Instalador MSI · Chocolatey</td>
 </tr>
 <tr>
 <td align="center"><b>Linux</b> <sub>x64/ia32</sub></td>
-<td>Portátil · AUR · AppImage · Deb · Flatpak</td>
+<td>Portatil · AUR · AppImage · Deb · Flatpak</td>
 </tr>
 <tr>
 <td align="center"><b>macOS</b> <sub>x64/ia32, v12.0+</sub></td>
@@ -309,11 +250,11 @@ Cerca de 30 idiomas incluídos, gerenciados pelo [Crowdin](https://docs.termix.s
 
 <br />
 
-## Instalação
+## Instalacao
 
-Vê a [documentação do Termix](https://docs.termix.site/install) para as instruções completas de instalação em todas as plataformas.
+Visite a [documentacao](https://docs.termix.site/install) do Termix para instrucoes completas de instalacao em todas as plataformas.
 
-Exemplo de arquivo Docker Compose (dá para tirar o `guacd` e a rede se não pretendes usar o desktop remoto):
+Arquivo Docker Compose de exemplo (voce pode omitir o `guacd` e a rede se nao planeja usar recursos de area de trabalho remota):
 
 ```yaml
 services:
@@ -350,37 +291,11 @@ networks:
     driver: bridge
 ```
 
-### Linha de comando
-
-O Termix também tem um CLI, para gerenciares os teus servidores pelo terminal e usares o Termix nos teus próprios scripts.
-
-```bash
-npm install -g @termix-cli/cli
-termix login --url https://termix.example.com
-termix ssh 1
-```
-
-Ele abre terminais, roda um comando num host ou numa frota inteira, move arquivos por SFTP e gerencia hosts, trechos e credenciais. A documentação completa está em [docs.termix.site/cli](https://docs.termix.site/cli).
-
-### Hospedagem na nuvem
-
-Dá para rodar o servidor do Termix num VPS em vez de dentro da tua própria rede. Se o Termix roda na rede que ele gerencia, uma queda leva ele junto, bem na hora em que precisas dele para resolver. Rodando fora ele continua acessível, te dá um IP fixo e dá para entrar de qualquer lugar sem VPN nem abrir portas.
-
-A [GINERNET](https://docs.termix.site/install/ginernet) patrocina o Termix, e a documentação tem um guia passo a passo para publicar na plataforma de VPS deles.
-
-<br />
-
-## Telemetria
-
-O Termix manda uma vez por dia um pequeno sinal anônimo, para eu saber quantas instâncias estão rodando e quais funcionalidades são usadas. Ele contém um ID de instância aleatório, quantos usuários e hosts tu tens, a versão do aplicativo e quais funcionalidades (terminal, gerenciador de arquivos, túneis, docker, etc.) foram usadas nas últimas 24 horas. Nunca contém nomes de usuário, nomes de host, endereços IP, credenciais ou qualquer coisa que identifique ti ou os teus servidores.
-
-Vem ligado por padrão. Podes desligar nas configurações de administração, em Geral, ou definir `ENABLE_TELEMETRY=false` antes mesmo de iniciar o Termix.
-
 <br />
 
 ## Doar
 
-O Termix é gratuito e de código aberto, sem assinaturas nem planos pagos. Se ele te ajuda, considera doar para ajudar com servidores, domínios e tempo de desenvolvimento. As doações também custeiam o tempo de pesquisar e aprender o necessário para funcionalidades como SAML, Kubernetes e suporte a agentes. Acompanha o progresso e doa abaixo.
+Termix e gratuito e de codigo aberto, sem assinaturas ou planos pagos. Se o achar util, considere doar para ajudar a cobrir custos de servidor, dominios e tempo de desenvolvimento. As doacoes tambem ajudam a financiar o tempo de pesquisa e aprendizado necessario para construir funcionalidades como suporte a SAML, Kubernetes e Agent. Acompanhe o progresso e doe abaixo.
 
 [Doar](https://donate.termix.site/)
 
@@ -388,7 +303,7 @@ O Termix é gratuito e de código aberto, sem assinaturas nem planos pagos. Se e
 
 ## Patrocinadores
 
-Tens interesse num espaço pago para apoiar o desenvolvimento? Escreve para [mail@termix.site](mailto:mail@termix.site).
+Interessado em um espaco pago para apoiar o desenvolvimento? Envie um email para [mail@termix.site](mailto:mail@termix.site).
 
 <div align="center">
 
@@ -410,6 +325,10 @@ Tens interesse num espaço pago para apoiar o desenvolvimento? Escreve para [mai
   <img src="https://sirv.sirv.com/website/screenshots/cloudflare/cloudflare-logo.png?w=300" height="40" alt="Cloudflare" />
 </a>
 &nbsp;&nbsp;&nbsp;
+<a href="https://tailscale.com/">
+  <img src="https://drive.google.com/uc?export=view&id=1lIxkJuX6M23bW-2FElhT0rQieTrzaVSL" height="40" alt="Tailscale" />
+</a>
+&nbsp;&nbsp;&nbsp;
 <a href="https://akamai.com/">
   <img src="https://upload.wikimedia.org/wikipedia/commons/8/8b/Akamai_logo.svg" height="40" alt="Akamai" />
 </a>
@@ -421,21 +340,18 @@ Tens interesse num espaço pago para apoiar o desenvolvimento? Escreve para [mai
 <a href="https://rackgenius.com/">
   <img src="https://rackgenius.com/rackgenius-logo.png" height="40" alt="Rack Genius" />
 </a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://ginernet.com/">
-  <img src="https://ginernet.com/img/logo-web.png" height="40" alt="Ginernet" />
-</a>
+
 </div>
 
 <br />
 
 ## Suporte
 
-Precisas de ajuda ou queres pedir uma funcionalidade? Abre uma [nova issue](https://github.com/Termix-SSH/Support/issues) com o máximo de detalhes possível, em inglês se der. Também podes perguntar no canal de suporte do [Discord](https://discord.gg/jVQGdvHDrf), embora as respostas por lá possam demorar mais.
+Se voce precisa de ajuda ou deseja solicitar uma funcionalidade para o Termix, visite a pagina de [Issues](https://github.com/Termix-SSH/Support/issues), faca login e clique em `New Issue`. Por favor, seja o mais detalhado possivel no seu relato, preferencialmente escrito em ingles. Voce tambem pode entrar no servidor do [Discord](https://discord.gg/jVQGdvHDrf) e visitar o canal de suporte, porem, os tempos de resposta podem ser mais longos.
 
 <br />
 
-## Capturas de tela
+## Capturas de Tela
 
 <div align="center">
 
@@ -443,7 +359,7 @@ Precisas de ajuda ou queres pedir uma funcionalidade? Abre uma [nova issue](http
 
 [![YouTube](../repo-images/YouTube.png)](https://www.youtube.com/@TermixSSH/videos)
 
-<sub>Vê as apresentações das atualizações no YouTube</sub>
+<sub>Assista resumos de atualizacoes no YouTube</sub>
 
 <br />
 <br />
@@ -483,18 +399,18 @@ Precisas de ajuda ou queres pedir uma funcionalidade? Abre uma [nova issue](http
 </tr>
 </table>
 
-<sub>Alguns vídeos e imagens podem estar desatualizados ou não mostrar as funcionalidades perfeitamente.</sub>
+<sub>Alguns videos e imagens podem estar desatualizados ou podem nao mostrar perfeitamente as funcionalidades.</sub>
 
 </div>
 
 <br />
 
-## Funcionalidades planejadas
+## Funcionalidades Planejadas
 
-Todas as funcionalidades planejadas estão em [Projects](https://github.com/orgs/Termix-SSH/projects/5). Se queres contribuir, vê [Contributing](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md).
+Consulte [Projetos](https://github.com/orgs/Termix-SSH/projects/5) para todas as funcionalidades planejadas. Se voce deseja contribuir, consulte [Contribuir](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md).
 
 <br />
 
-## Licença
+## Licenca
 
-Distribuído sob a Licença Apache versão 2.0. Vê `LICENSE` para mais informações.
+Distribuido sob a Licenca Apache Versao 2.0. Consulte `LICENSE` para mais informacoes.

docs/readme/README-RU.md

@@ -4,7 +4,7 @@
 
 <h1>Termix</h1>
 
-<p>Управление серверами на своём хостинге, от SSH и удалённого рабочего стола до автоматизаций</p>
+<p>Самостоятельно размещаемое управление SSH и доступ к удалённому рабочему столу</p>
 
 <p>
   <a href="../README.md">English</a> ·
@@ -37,7 +37,7 @@
 
 <br />
 
-Termix бесплатен и с открытым исходным кодом. Если он вам пригодился, подумайте о [пожертвовании](https://donate.termix.site/), чтобы помочь покрыть расходы на серверы и время на разработку.
+Termix — бесплатный проект с открытым исходным кодом. Если он вам полезен, рассмотрите возможность [пожертвования](https://donate.termix.site/) для покрытия расходов на серверы и время разработки.
 
 <br />
 
@@ -49,7 +49,7 @@ Termix бесплатен и с открытым исходным кодом. Е
 <p>
   <img src="../repo-images/Repo of the Day.png" alt="Repo of the Day Achievement" width="280" />
   <br />
-  <sub>Получено 1 сентября 2025 года</sub>
+  <sub>Достигнуто 1 сентября 2025 года</sub>
 </p>
 
 </div>
@@ -58,7 +58,7 @@ Termix бесплатен и с открытым исходным кодом. Е
 
 ## Обзор
 
-Termix это бесплатная платформа с открытым исходным кодом для управления серверами на своём хостинге. Она собирает в одном месте SSH-терминалы, удалённые рабочие столы (RDP, VNC, Telnet), передачу файлов, туннели, Docker, метрики и автоматизации, в браузере, на компьютере и на телефоне. Это self-hosted замена Termius, которая остаётся бесплатной навсегда.
+Termix - это платформа для управления серверами с открытым исходным кодом, навсегда бесплатная и размещаемая на собственном сервере. Она предоставляет мультиплатформенное решение для управления вашими серверами и инфраструктурой через единый интуитивно понятный интерфейс. Termix предлагает доступ к SSH-терминалу, управление удаленным рабочим столом (RDP, VNC, Telnet), возможности SSH-туннелирования, удаленное управление файлами SSH и множество других инструментов. Termix - это идеальная бесплатная альтернатива Termius с возможностью размещения на собственном сервере, доступная для всех платформ.
 
 <br />
 
@@ -68,182 +68,126 @@ Termix это бесплатная платформа с открытым исх
 <tr>
 <td width="50%" valign="top">
 
-**SSH-терминал:**
-Полноценный терминал с вкладками как в браузере и разделением экрана, до 6 панелей одновременно. Тему, шрифт и цвета выбираете вы. Над каждой сессией есть панель с текущей загрузкой процессора, памяти и диска, а также быстрые ссылки на файлы, Docker, туннели и метрики этого хоста.
+**Доступ к SSH-терминалу:**
+Полнофункциональный терминал с поддержкой разделения экрана (до 4 панелей) и системой вкладок, как в браузере. Включает поддержку настройки терминала, включая популярные темы, шрифты и другие компоненты.
 
 </td>
 <td width="50%" valign="top">
 
-**Удалённый рабочий стол:**
-RDP, VNC и Telnet прямо в браузере, во вкладках и с разделением экрана, как и любая другая сессия. Есть просмотр файлов на дисках RDP и загрузка перетаскиванием. В версии для Windows хост можно открыть и в обычном клиенте RDP.
+**Доступ к удалённому рабочему столу:**
+Поддержка RDP, VNC и Telnet через браузер с полной настройкой и разделением экрана.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**SSH-туннели:**
-Локальная, удалённая и динамическая переадресация SOCKS с автоматическим переподключением и проверкой состояния. Туннели от клиента к серверу в настольном приложении хранятся на этом компьютере, а наборы настроек можно сохранить на сервере, чтобы перенести конфигурацию на другую машину.
+**Управление SSH-туннелями:**
+Создание и управление межсерверными SSH-туннелями с автоматическим переподключением, мониторингом состояния и локальной, удалённой или динамической SOCKS-переадресацией. Настройки туннелей «десктопный клиент - сервер» хранятся локально для каждой установки; опциональные снимки C2S-пресетов можно сохранять на сервере, переименовывать, загружать или удалять, когда вы хотите перенести локальную конфигурацию туннеля между клиентами.
 
 </td>
 <td width="50%" valign="top">
 
-**Файловый менеджер:**
-Просматривайте, редактируйте, загружайте, скачивайте, переименовывайте, перемещайте и удаляйте файлы по SFTP, в том числе через sudo. Смотрите и правьте код, изображения, аудио и видео. Копируйте файлы напрямую с одного сервера на другой: самый быстрый маршрут подбирается сам, а целостность передачи проверяется.
+**Удалённый файловый менеджер:**
+Управление файлами непосредственно на удалённых серверах с поддержкой просмотра и редактирования кода, изображений, аудио и видео. Загрузка, скачивание, переименование, удаление и перемещение файлов с поддержкой sudo. Включает поддержку перемещения файлов с сервера на сервер.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Docker и Podman:**
-Запускайте, останавливайте, ставьте на паузу и удаляйте контейнеры, смотрите их нагрузку и открывайте оболочку внутри. Работает и с Docker, и с Podman. Это не замена Portainer или Dockge, а способ управлять теми контейнерами, что у вас уже есть.
+**Управление Docker и Podman:**
+Запуск, остановка, приостановка, удаление контейнеров. Просмотр статистики контейнеров. Управление контейнером через терминал docker exec. Поддерживает как Docker, так и Podman в качестве среды выполнения контейнеров. Не предназначен для замены Portainer или Dockge, а скорее для простого управления контейнерами по сравнению с их созданием.
 
 </td>
 <td width="50%" valign="top">
 
-**Менеджер хостов:**
-Храните и упорядочивайте хосты с помощью меток и вложенных папок, которым можно задать имя и цвет. Используйте сохранённые учётные данные на нескольких хостах, разворачивайте SSH-ключи автоматически, группируйте хосты под родительским, редактируйте и выгружайте пакетно, а для разовых подключений, которые не хочется сохранять, есть быстрое подключение.
+**Менеджер SSH-хостов:**
+Сохранение, организация и управление SSH-подключениями с помощью тегов и папок (с настройкой папок и поддержкой вложенных папок), с возможностью сохранения данных для повторного входа и автоматизации развёртывания SSH-ключей.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Метрики хостов:**
-Процессор, память, диск, сеть, температура, время работы, процессы, порты, входы в систему и сведения о системе на большинстве серверов Linux, с графиками за прошлые периоды. Карточки управления позволяют работать со службами, задачами cron, пакетами, пользователями, правилами брандмауэра, WireGuard, Tailscale, сертификатами SSL, журналами и проверками состояния, не выходя из Termix.
+**Метрики хоста:**
+Просмотр использования CPU, памяти и диска, сети, времени работы, информации о системе, файрвола, монитора портов, просмотрщика логов, пользователей/прав доступа, сертификатов и многого другого на большинстве серверов на базе Linux. Включает графики истории временных рядов и оповещения на основе пороговых значений с поддержкой ntfy и вебхуков.
 
 </td>
 <td width="50%" valign="top">
 
-**Автоматизации:**
-Выберите событие, а затем опишите, что должно произойти. Событием может быть превышение порога метрикой, хост, который упал или вернулся, изменение проверки состояния, расписание, событие контейнера или входящий webhook. Шаги умеют выполнять команды и сниппеты, управлять контейнерами и туннелями, будить хост, обращаться по адресу, ждать, ветвиться по условию, запускать другую автоматизацию и присылать уведомления через ntfy, Discord или webhook. Тестовый запуск позволяет всё безопасно проверить.
+**Аутентификация пользователей:**
+Безопасное управление пользователями с административным контролем (может редактировать информацию других пользователей) и поддержкой OIDC/LDAP/SSO (с контролем доступа), 2FA (TOTP) и поддержкой ключей доступа (WebAuthn). Просмотр активных сессий пользователей на всех платформах и отзыв прав доступа. Связывание аккаунтов OIDC/локальных аккаунтов. Просмотр журнала аудита действий всех пользователей.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Флоты:**
-Объединяйте хосты во флот вручную или по правилам меток, чтобы новые хосты попадали туда сами. Выполняйте одну команду сразу на всех хостах, отправляйте и забирайте файлы со всех, устанавливайте пакеты и собирайте сводку по системе, ядру, архитектуре и времени работы.
+**Интеграция с Tailscale:**
+Список устройств вашей сети Tailscale для быстрого добавления их в качестве хостов и подключение через Tailscale SSH в качестве метода аутентификации, позволяя ACL вашей сети управлять авторизацией без хранения учётных данных.
 
 </td>
 <td width="50%" valign="top">
 
-**ИИ-помощник:**
-Необязательная возможность, выключенная до тех пор, пока вы сами её не включите. Подключите OpenAI, Anthropic, Gemini, Ollama или любой совместимый с OpenAI адрес и спрашивайте о своей системе. Он читает хосты, флоты, сниппеты и оповещения и предлагает изменения на ваше утверждение, а не вносит их сам. До учётных данных, пользователей и настроек он не доберётся никогда. Администраторы могут оставить его выключенным для всей установки, а вы можете скрыть его ещё при первичной настройке.
+**RBAC/Общий доступ:**
+Создание ролей и предоставление общего доступа к хостам для пользователей/ролей. Поддерживает все типы аутентификации и все протоколы хостов.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Вход и пользователи:**
-Локальные учётные записи, а также вход через OIDC, LDAP, GitHub и Google, с двухфакторной проверкой (TOTP), ключами доступа (WebAuthn) и доверенными устройствами. Администраторы могут управлять пользователями, сопоставлять группы OIDC с ролями, видеть все активные сессии на всех платформах и завершать их. Свяжите локальную учётную запись с OIDC и смотрите журнал аудита действий каждого.
-
-</td>
-<td width="50%" valign="top">
-
-**Роли и общий доступ:**
-Создавайте роли и делитесь хостами с пользователями или ролями на четырёх уровнях: подключение, просмотр, изменение и управление. Работает со всеми способами аутентификации и всеми протоколами, а учётные данные для общего хоста можно переопределить.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Оповещения:**
-Задайте правила по метрикам хостов, например процессору, памяти и диску, и получайте уведомления через ntfy, Discord или webhook, когда они срабатывают. Смотрите активные и уже снятые оповещения в журнале и убирайте те, что вам не нужны.
-
-</td>
-<td width="50%" valign="top">
-
-**Домашняя страница:**
-Сетка виджетов, которую вы собираете сами перетаскиванием. Есть виджеты для состояния хостов, пингов, ссылок на сервисы, закладок, поиска, часов, календарей, обратного отсчёта, заметок, RSS, погоды, изображений, встроенных страниц, Docker, туннелей, графиков метрик, своих API и даже живого терминала.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Сниппеты и инструменты:**
-Сохраняйте команды, которые часто набираете, и запускайте их одним нажатием, с переменными для хоста и для собственного ввода. Выполняйте одну команду сразу во всех открытых терминалах и ищите по истории команд с автодополнением.
-
-</td>
-<td width="50%" valign="top">
-
-**Общий доступ к сессии:**
-Делитесь живой сессией терминала, RDP, VNC или Telnet. Отправьте ссылку, по которой можно подключиться без учётной записи, или поделитесь с конкретным пользователем Termix, только для просмотра или с правом ввода. Доступ может истекать сам или отзываться в любой момент, и его можно отключить полностью или для отдельного хоста.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Запись сессий и журналы:**
-Записывайте сессии терминала, RDP и VNC и просматривайте их позже. Скачивайте текстовые журналы сессии и заглядывайте в журнал подключения, чтобы увидеть, что именно происходило во время соединения.
-
-</td>
-<td width="50%" valign="top">
-
 **Последовательные подключения:**
-Общайтесь с последовательными устройствами вроде маршрутизаторов, коммутаторов и микроконтроллеров из браузера или настольного приложения. Настраивайте скорость, биты данных, стоповые биты и чётность. В подходящих браузерах используется Web Serial API, а в настольном приложении собственный бэкенд.
+Подключение к последовательным устройствам (маршрутизаторы, коммутаторы, микроконтроллеры и т. д.) напрямую из браузера или приложения для рабочего стола. Настройка скорости передачи данных, битов данных, стоп-битов и чётности. Использует Web Serial API в поддерживаемых браузерах или нативный бэкенд в приложении Electron.
+
+</td>
+<td width="50%" valign="top">
+
+**Оповещения:**
+Настройте правила оповещений на основе пороговых значений для метрик хоста (CPU, память, диск и т. д.) и получайте уведомления через ntfy или вебхуки при их срабатывании. Просматривайте активные и разрешённые оповещения в журнале истории.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Tailscale:**
-Подтягивайте устройства из своей tailnet, чтобы добавить их как хосты в пару нажатий, и подключайтесь через Tailscale SSH: доступом займутся правила tailnet, а учётные данные хранить не придётся. Headscale и свои адреса тоже работают.
+**Домашняя страница:**
+Полностью настраиваемая домашняя страница с сеткой виджетов с перетаскиванием. Добавляйте виджеты для статуса хоста, ссылок на сервисы, часов, заметок, RSS-лент, погоды, контейнеров Docker, графиков метрик хоста, встроенных терминалов, iframe и многого другого.
 
 </td>
 <td width="50%" valign="top">
 
-**Proxmox:**
-Импортируйте хосты прямо из установки Proxmox и следите за показателями узлов и гостевых машин, включая процессор, память и хранилище, на отдельной вкладке.
+**Шифрование базы данных:**
+Бэкенд хранится в виде зашифрованных файлов базы данных SQLite. Подробнее в [документации](https://docs.termix.site/security).
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Рабочие пространства и вкладки:**
-Сохраните набор вкладок вместе с разделением экрана и откройте всё это одним нажатием. Termix помнит и последнюю сессию, поэтому вкладки возвращаются после обновления страницы и на других устройствах.
+**Сетевой граф:**
+Настройте панель управления для визуализации вашей домашней лаборатории на основе SSH-подключений с поддержкой статусов.
 
 </td>
 <td width="50%" valign="top">
 
-**Пошаговая настройка:**
-Короткая настройка поможет выбрать шаблон интерфейса, тему, нужные возможности и первый хост. Простой режим скрывает то, чем вы не пользуетесь, а настройку можно пройти заново или сменить шаблон в любой момент.
+**Инструменты SSH:**
+Создание переиспользуемых фрагментов команд, выполняемых одним нажатием. Запуск одной команды одновременно в нескольких открытых терминалах.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Автономный клиент и синхронизация:**
-Настольное приложение работает само по себе, со своим бэкендом и базой данных, без сервера. Его можно подключить к серверу Termix, чтобы в обе стороны синхронизировать хосты, учётные данные, сниппеты и остальное, и выбрать, откуда идут подключения: с вашего компьютера или через сервер.
-
-</td>
-<td width="50%" valign="top">
-
-**Командная строка:**
-CLI `termix` для вашей оболочки и ваших скриптов. Открывайте терминалы, выполняйте команду на одном хосте или на целом флоте, перемещайте файлы по SFTP и управляйте хостами, сниппетами и учётными данными. Установите через `npm install -g @termix-cli/cli` или возьмите отдельный исполняемый файл. Смотрите [документацию CLI](https://docs.termix.site/cli).
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Безопасность:**
-Пароли, ключи и другие секреты шифруются для каждого пользователя, а сами файлы базы данных можно зашифровать на диске. Как это устроено, описано в [документации](https://docs.termix.site/security).
+**Постоянные вкладки:**
+SSH-сессии и вкладки остаются открытыми на всех устройствах/при обновлении страницы, если включено в профиле пользователя.
 
 </td>
 <td width="50%" valign="top">
 
 **Языки:**
-Около 30 встроенных языков, которые ведутся через [Crowdin](https://docs.termix.site/translations).
+Встроенная поддержка около 30 языков (управляется через [Crowdin](https://docs.termix.site/translations)).
 
 </td>
 </tr>
@@ -252,23 +196,20 @@ CLI `termix` для вашей оболочки и ваших скриптов.
 <br />
 
 <details>
-<summary><b>Другие возможности</b></summary>
+<summary><b>Больше возможностей</b></summary>
 <br />
 
-- **Панель** - Ваши серверы одним взглядом, карточки расставляете вы сами
-- **Схема сети** - Ваша домашняя лаборатория, нарисованная по хостам, с состоянием в реальном времени
-- **Монитор tmux** - Просмотр сессий, окон и панелей tmux с предпросмотром и поиском
-- **Ключи API** - Ключи для конкретного пользователя со сроком действия, для скриптов и CI
-- **Экспорт и импорт** - Перенос хостов, учётных данных и данных файлового менеджера
-- **Автоматический SSL** - Сертификаты выпускаются и обновляются за вас, с переходом на HTTPS, либо используйте свои
-- **Базы данных** - По умолчанию SQLite, поддерживаются также PostgreSQL и MySQL
-- **Современный интерфейс** - Аккуратный интерфейс на React для компьютера и телефона, с темами вроде светлой, тёмной и Dracula. Любое подключение открывается на весь экран по ссылке
-- **Палитра команд** - Двойное нажатие левого Shift, чтобы перейти к хосту с клавиатуры
-- **Сочетания клавиш** - Переход между вкладками, их закрытие и другое, всё можно переназначить
-- **Wake-on-LAN** - Разбудите машину из Termix или из шага автоматизации
-- **Доверенный прокси** - Пусть обратный прокси возьмёт вход на себя и передаст пользователя
-- **Богатые возможности SSH** - Промежуточные хосты, Warpgate, запросы TOTP, SOCKS5, проверка ключей хоста, автозаполнение паролей, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, port knocking, журналы терминала, проброс агента, SSH-агент Bitwarden, подпись SSH через HashiCorp Vault и другое
-- **Termix ID** - Встроенный аналог sshid.io. Займите имя, опубликуйте открытые ключи по адресу распознавателя и выпускайте SSH-сертификаты через встроенный центр сертификации
+- **Панель управления** - Просмотр информации о сервере на панели управления одним взглядом
+- **API-ключи** - Создание API-ключей с областью видимости пользователя и сроками действия для использования в автоматизации/CI
+- **Экспорт/импорт данных** - Экспорт и импорт SSH-хостов, учётных данных и данных файлового менеджера
+- **Автоматическая настройка SSL** - Встроенная генерация и управление SSL-сертификатами с перенаправлением на HTTPS
+- **Современный интерфейс** - Чистый интерфейс для десктопа и мобильных устройств, построенный на React, Tailwind CSS и Shadcn. Выбор между множеством различных тем интерфейса, включая светлую, тёмную, Dracula и т. д. Использование URL-маршрутов для открытия любого подключения в полноэкранном режиме.
+- **История команд** - Автодополнение и просмотр ранее выполненных SSH-команд
+- **Быстрое подключение** - Подключение к серверу без необходимости сохранения данных подключения
+- **Командная палитра** - Двойное нажатие левого Shift для быстрого доступа к SSH-подключениям с клавиатуры
+- **Интеграция с Proxmox** - Автоматическое добавление хостов в Termix из вашего экземпляра Proxmox
+- **Богатый функционал SSH** - Поддержка jump-хостов, Warpgate, подключений на основе TOTP, SOCKS5, верификации ключей хоста, автозаполнения паролей, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, port knocking, логирования терминала, переадресации SSH-агента, SSH-агента Bitwarden, подписи SSH через HashiCorp Vault и многого другого.
+- **Termix ID** - Аналог sshid.io, встроенный в Termix. Зарегистрируйте имя пользователя, опубликуйте свои публичные SSH-ключи по URL резолвера и используйте встроенный ЦС для выдачи SSH-сертификатов.
 
 </details>
 
@@ -279,7 +220,7 @@ CLI `termix` для вашей оболочки и ваших скриптов.
 <table align="center">
 <tr>
 <th align="center">Платформа</th>
-<th align="center">Способ установки</th>
+<th align="center">Дистрибутив</th>
 </tr>
 <tr>
 <td align="center"><b>Web</b></td>
@@ -311,9 +252,9 @@ CLI `termix` для вашей оболочки и ваших скриптов.
 
 ## Установка
 
-Полные инструкции по установке для всех платформ смотрите в [документации Termix](https://docs.termix.site/install).
+Посетите [документацию](https://docs.termix.site/install) Termix для получения полных инструкций по установке на всех платформах.
 
-Пример файла Docker Compose (`guacd` и сеть можно убрать, если удалённый рабочий стол вам не нужен):
+Пример файла Docker Compose (вы можете опустить `guacd` и сеть, если не планируете использовать функции удаленного рабочего стола):
 
 ```yaml
 services:
@@ -350,45 +291,19 @@ networks:
     driver: bridge
 ```
 
-### Командная строка
-
-У Termix есть и CLI, так что серверами можно управлять из терминала и использовать Termix в своих скриптах.
-
-```bash
-npm install -g @termix-cli/cli
-termix login --url https://termix.example.com
-termix ssh 1
-```
-
-Он умеет открывать терминалы, выполнять команду на одном хосте или на целом флоте, перемещать файлы по SFTP и управлять хостами, сниппетами и учётными данными. Полная документация есть на [docs.termix.site/cli](https://docs.termix.site/cli).
-
-### Размещение в облаке
-
-Сервер Termix можно держать на VPS, а не внутри своей сети. Если Termix работает в той же сети, которой управляет, при сбое он упадёт вместе с ней, как раз тогда, когда нужен для починки. Снаружи он остаётся доступным, даёт постоянный IP и позволяет зайти откуда угодно без VPN и проброса портов.
-
-[GINERNET](https://docs.termix.site/install/ginernet) спонсирует Termix, и в документации есть пошаговое руководство по развёртыванию на их площадке VPS.
-
 <br />
 
-## Телеметрия
+## Пожертвование
 
-Termix раз в сутки отправляет небольшой анонимный сигнал, чтобы я понимал, сколько установок работает и какими возможностями действительно пользуются. В нём есть случайный идентификатор установки, число пользователей и хостов, версия приложения и то, какие возможности (терминал, файловый менеджер, туннели, docker и прочее) использовались за последние 24 часа. В нём никогда нет имён пользователей, имён хостов, IP-адресов, учётных данных и ничего другого, что указывало бы на вас или ваши серверы.
+Termix бесплатен и имеет открытый исходный код, без подписок или платных тарифов. Если он вам полезен, рассмотрите возможность пожертвования, чтобы помочь покрыть расходы на серверы, домены и время разработки. Пожертвования также помогают финансировать время на исследование и изучение того, что необходимо для создания таких функций, как поддержка SAML, Kubernetes и Agent. Отслеживайте прогресс и делайте пожертвования ниже.
 
-По умолчанию он включён. Выключить можно в настройках администратора в разделе «Общие» или задать `ENABLE_TELEMETRY=false` ещё до первого запуска Termix.
-
-<br />
-
-## Пожертвования
-
-Termix бесплатен и открыт, без подписок и платных тарифов. Если он вам полезен, подумайте о пожертвовании: оно помогает с серверами, доменами и временем на разработку. Пожертвования также оплачивают время на изучение того, что нужно для таких возможностей, как SAML, Kubernetes и поддержка агентов. Следить за ходом работ и поддержать можно по ссылке ниже.
-
-[Поддержать](https://donate.termix.site/)
+[Пожертвовать](https://donate.termix.site/)
 
 <br />
 
 ## Спонсоры
 
-Интересует платное размещение в поддержку разработки? Напишите на [mail@termix.site](mailto:mail@termix.site).
+Заинтересованы в платном размещении для поддержки разработки? Напишите на [mail@termix.site](mailto:mail@termix.site).
 
 <div align="center">
 
@@ -410,6 +325,10 @@ Termix бесплатен и открыт, без подписок и платн
   <img src="https://sirv.sirv.com/website/screenshots/cloudflare/cloudflare-logo.png?w=300" height="40" alt="Cloudflare" />
 </a>
 &nbsp;&nbsp;&nbsp;
+<a href="https://tailscale.com/">
+  <img src="https://drive.google.com/uc?export=view&id=1lIxkJuX6M23bW-2FElhT0rQieTrzaVSL" height="40" alt="Tailscale" />
+</a>
+&nbsp;&nbsp;&nbsp;
 <a href="https://akamai.com/">
   <img src="https://upload.wikimedia.org/wikipedia/commons/8/8b/Akamai_logo.svg" height="40" alt="Akamai" />
 </a>
@@ -421,17 +340,14 @@ Termix бесплатен и открыт, без подписок и платн
 <a href="https://rackgenius.com/">
   <img src="https://rackgenius.com/rackgenius-logo.png" height="40" alt="Rack Genius" />
 </a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://ginernet.com/">
-  <img src="https://ginernet.com/img/logo-web.png" height="40" alt="Ginernet" />
-</a>
+
 </div>
 
 <br />
 
 ## Поддержка
 
-Нужна помощь или хотите предложить функцию? Создайте [новое обращение](https://github.com/Termix-SSH/Support/issues) и опишите всё как можно подробнее, по возможности на английском. Ещё можно спросить в канале поддержки в [Discord](https://discord.gg/jVQGdvHDrf), хотя там ответа иногда приходится ждать дольше.
+Если вам нужна помощь или вы хотите запросить новую функцию для Termix, посетите страницу [Проблемы](https://github.com/Termix-SSH/Support/issues), войдите в систему и нажмите `New Issue`. Пожалуйста, опишите вашу проблему как можно подробнее, предпочтительно на английском языке. Вы также можете присоединиться к серверу [Discord](https://discord.gg/jVQGdvHDrf) и обратиться в канал поддержки, однако время ответа может быть дольше.
 
 <br />
 
@@ -483,7 +399,7 @@ Termix бесплатен и открыт, без подписок и платн
 </tr>
 </table>
 
-<sub>Некоторые видео и изображения могут устареть или не полностью показывать возможности.</sub>
+<sub>Некоторые видео и изображения могут быть устаревшими или не полностью отражать функциональность.</sub>
 
 </div>
 
@@ -491,10 +407,10 @@ Termix бесплатен и открыт, без подписок и платн
 
 ## Запланированные функции
 
-Все запланированные функции собраны в [Projects](https://github.com/orgs/Termix-SSH/projects/5). Если хотите поучаствовать, посмотрите [Contributing](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md).
+Смотрите [Проекты](https://github.com/orgs/Termix-SSH/projects/5) для просмотра всех запланированных функций. Если вы хотите внести вклад, смотрите [Участие в разработке](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md).
 
 <br />
 
 ## Лицензия
 
-Распространяется по лицензии Apache версии 2.0. Подробности в файле `LICENSE`.
+Распространяется по лицензии Apache License Version 2.0. Подробнее см. в файле `LICENSE`.

docs/readme/README-TR.md

@@ -4,7 +4,7 @@
 
 <h1>Termix</h1>
 
-<p>Kendi sunucunuzda çalışan sunucu yönetimi, SSH ve uzak masaüstünden otomasyonlara kadar</p>
+<p>Kendi sunucunuzda barindirilan SSH yonetimi ve uzak masaustu erisimi</p>
 
 <p>
   <a href="../README.md">English</a> ·
@@ -37,7 +37,7 @@
 
 <br />
 
-Termix ücretsiz ve açık kaynaklıdır. İşinize yarıyorsa, sunucu masraflarına ve geliştirme süresine katkı için [bağış yapmayı](https://donate.termix.site/) düşünün.
+Termix ücretsiz ve açık kaynaklıdır. Faydalı buluyorsanız, sunucu maliyetleri ve geliştirme süresine katkıda bulunmak için [bağış yapmayı](https://donate.termix.site/) düşünebilirsiniz.
 
 <br />
 
@@ -49,201 +49,145 @@ Termix ücretsiz ve açık kaynaklıdır. İşinize yarıyorsa, sunucu masraflar
 <p>
   <img src="../repo-images/Repo of the Day.png" alt="Repo of the Day Achievement" width="280" />
   <br />
-  <sub>1 Eylül 2025 tarihinde kazanıldı</sub>
+  <sub>1 Eylül 2025'te kazanildi</sub>
 </p>
 
 </div>
 
 <br />
 
-## Genel bakış
+## Genel Bakis
 
-Termix, sunucularınızı yönetmek için ücretsiz, açık kaynaklı ve kendi sunucunuzda çalışan bir platformdur. SSH terminallerini, uzak masaüstlerini (RDP, VNC, Telnet), dosya aktarımlarını, tünelleri, Docker'ı, ölçümleri ve otomasyonları tek yerde toplar; web, masaüstü ve mobilde çalışır. Sonsuza dek ücretsiz kalan, kendi sunucunuzda çalışan bir Termius alternatifidir.
+Termix, acik kaynakli, sonsuza kadar ucretsiz, kendi sunucunuzda barindirabileceginez hepsi bir arada sunucu yonetim platformudur. Sunucularinizi ve altyapinizi tek bir sezgisel arayuz uzerinden yonetmek icin cok platformlu bir cozum sunar. Termix, SSH terminal erisimi, uzak masaustu kontrolu (RDP, VNC, Telnet), SSH tunelleme yetenekleri, uzak dosya yonetimi ve daha bircok arac saglar. Termix, tum platformlarda kullanilabilen Termius'un mukemmel ucretsiz ve kendi barindirmali alternatifidir.
 
 <br />
 
-## Özellikler
+## Ozellikler
 
 <table>
 <tr>
 <td width="50%" valign="top">
 
-**SSH terminali:**
-Tarayıcı gibi sekmeleri ve bölünmüş ekranı olan tam donanımlı bir terminal, aynı anda 6 panele kadar. Temanızı, yazı tipinizi ve renklerinizi seçin. Her oturumun üstünde anlık CPU, bellek ve disk bilgisi gösteren bir araç çubuğu ile o sunucunun dosyalarına, Docker'ına, tünellerine ve ölçümlerine giden kısayollar bulunur.
+**SSH Terminal Erisimi:**
+Tarayici benzeri sekme sistemiyle bolunmus ekran destegine sahip (4 panele kadar) tam ozellikli terminal. Yaygin terminal temalari, yazi tipleri ve diger bilesenleri iceren terminal ozellestirme destegi.
 
 </td>
 <td width="50%" valign="top">
 
-**Uzak masaüstü:**
-Tarayıcıda RDP, VNC ve Telnet; diğer oturumlar gibi sekmelerde ve bölünmüş ekranda. RDP sürücüleri için dosya tarayıcısı ve sürükle bırak yükleme içerir. Windows masaüstünde bir sunucuyu yerel RDP istemcisinde de açabilirsiniz.
+**Uzak Masaustu Erisimi:**
+Tam ozellestirme ve bolunmus ekran ile tarayici uzerinden RDP, VNC ve Telnet destegi.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**SSH tünelleri:**
-Yerel, uzak ve dinamik SOCKS yönlendirmesi; otomatik yeniden bağlanma ve durum kontrolleriyle. Masaüstü uygulamasındaki istemciden sunucuya tüneller o makinede saklanır, ayarları sunucuya kaydederek bir kurulumu başka bir makineye taşıyabilirsiniz.
+**SSH Tunel Yonetimi:**
+Otomatik yeniden baglanti, saglik izleme ve yerel, uzak veya dinamik SOCKS yonlendirme ile sunucular arasi SSH tunelleri olusturun ve yonetin. Masaustu istemci-sunucu tunel ayarlari her masaustu kurulumu icin yerel olarak depolanir; istege bagli C2S hazir ayar anlik goruntuleri, yerel bir tunel yapilandirmasini istemciler arasinda tasimak istediginizde sunucuya kaydedilebilir, yeniden adlandirilabilir, yuklenebilir veya silinebilir.
 
 </td>
 <td width="50%" valign="top">
 
-**Dosya yöneticisi:**
-SFTP üzerinden dosyalara göz atın, düzenleyin, yükleyin, indirin, yeniden adlandırın, taşıyın ve silin; sudo da kullanılabilir. Kod, görsel, ses ve videoyu görüntüleyip düzenleyin. Dosyaları doğrudan bir sunucudan diğerine kopyalayın; en hızlı yol sizin için seçilir ve aktarımların bütünlüğü doğrulanır.
+**Uzak Dosya Yoneticisi:**
+Uzak sunuculardaki dosyalari dogrudan yonetin; kod, goruntu, ses ve video goruntuleme ve duzenleme destegi ile. Sudo destegi ile dosyalari sorunsuzca yukleyin, indirin, yeniden adlandirin, silin ve tasiyin. Dosyalari sunucudan sunucuya tasima destegini de icerir.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Docker ve Podman:**
-Kapsayıcıları başlatın, durdurun, duraklatın ve silin, durumlarını izleyin ve içlerinde bir kabuk açın. Hem Docker hem Podman ile çalışır. Portainer ya da Dockge'nin yerini almak için değil, hâlihazırdaki kapsayıcılarınızı yönetmek için tasarlandı.
+**Docker ve Podman Yonetimi:**
+Konteynerleri baslatın, durdurun, duraklatın, kaldirin. Konteyner istatistiklerini goruntuleyin. Docker exec terminali kullanarak konteyneri kontrol edin. Docker ve Podman'i konteyner calisma ortami olarak destekler. Portainer veya Dockge'nin yerini almak icin degil, konteynerlerinizi olusturmak yerine basitce yonetmek icin tasarlanmistir.
 
 </td>
 <td width="50%" valign="top">
 
-**Sunucu yöneticisi:**
-Sunucularınızı etiketlerle ve isim ve renk verebileceğiniz iç içe klasörlerle düzenleyin. Kayıtlı kimlik bilgilerini birden çok sunucuda kullanın, SSH anahtarlarını otomatik dağıtın, sunucuları bir üst sunucunun altında toplayın, toplu düzenleyip dışa aktarın ve kaydetmek istemediğiniz tek seferlik bağlantılar için hızlı bağlantıyı kullanın.
+**SSH Ana Bilgisayar Yoneticisi:**
+SSH baglantilarinizi etiketler ve klasorlerle (klasor ozellestirme ve ic ice klasor destegi ile) kaydedin, duzenleyin ve yonetin; yeniden kullanilabilir giris bilgilerini kolayca kaydedin ve SSH anahtarlarinin dagitimini otomatiklestirin.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Sunucu ölçümleri:**
-Çoğu Linux sunucusunda CPU, bellek, disk, ağ, sıcaklık, çalışma süresi, süreçler, portlar, oturum açmalar ve sistem bilgisi; geçmiş grafikleriyle birlikte. Yönetim kartları sayesinde servisleri, cron görevlerini, paketleri, kullanıcıları, güvenlik duvarı kurallarını, WireGuard'ı, Tailscale'i, SSL sertifikalarını, günlükleri ve sağlık kontrollerini Termix'ten çıkmadan yönetirsiniz.
+**Ana Bilgisayar Metrikleri:**
+Cogu Linux tabanli sunucularda calisan CPU, bellek, disk kullanimi, ag, calisma suresi, sistem bilgisi, guvenlik duvari, port izleme, gunluk goruntuleyici, kullanicilar/izinler, sertifikalar ve daha fazlasini goruntuleyin. Zaman serisi gecmis grafiklerini ve ntfy ile webhook destekli esik tabanli uyarilari icerir.
 
 </td>
 <td width="50%" valign="top">
 
-**Otomasyonlar:**
-Bir tetikleyici seçin, sonra ne olacağını söyleyin. Tetikleyiciler arasında bir ölçümün eşiği aşması, bir sunucunun düşmesi veya geri gelmesi, sağlık kontrolünün değişmesi, bir zamanlama, bir kapsayıcı olayı ya da gelen bir webhook var. Adımlar komut ve parçacık çalıştırabilir, kapsayıcı ve tünelleri yönetebilir, bir makineyi uyandırabilir, bir adrese istek atabilir, bekleyebilir, koşula göre dallanabilir, başka bir otomasyonu çalıştırabilir ve ntfy, Discord ya da webhook ile size haber verebilir. Deneme çalıştırmaları ile önce güvenle test edersiniz.
+**Kullanici Kimlik Dogrulama:**
+Yonetici kontrolleri (diger kullanicilarin bilgilerini duzenleyebilir), OIDC/LDAP/SSO (erisim kontrollu), 2FA (TOTP) ve passkey (WebAuthn) destegi ile guvenli kullanici yonetimi. Tum platformlardaki aktif kullanici oturumlarini goruntuleyin ve izinleri iptal edin. OIDC/Yerel hesaplarinizi birbirine baglayin. Tum kullanicilarin islemlerinin denetim gunlugunu goruntuleyin.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Filolar:**
-Sunucuları tek tek seçerek ya da etiket kurallarıyla bir filoda toplayın; yeni sunucular kendiliğinden katılsın. Tek bir komutu tüm sunucularda aynı anda çalıştırın, hepsine dosya gönderip hepsinden dosya alın, paket kurun ve işletim sistemi, çekirdek, mimari ve çalışma süresi dökümünü toplayın.
+**Tailscale Entegrasyonu:**
+Tailscale aginizdaki cihazlari listeleyerek hizlica ana bilgisayar olarak ekleyin ve kimlik dogrulama yontemi olarak Tailscale SSH kullanarak baglanin; bu sayede ag ACL'leriniz kimlik bilgileri depolamadan yetkilendirmeyi yonetir.
 
 </td>
 <td width="50%" valign="top">
 
-**Yapay zekâ asistanı:**
-İsteğe bağlıdır ve siz açana kadar kapalıdır. OpenAI, Anthropic, Gemini, Ollama ya da OpenAI uyumlu herhangi bir uç noktayı bağlayın ve kurulumunuz hakkında sorular sorun. Sunucuları, filoları, parçacıkları ve uyarıları okuyabilir; değişiklikleri kendisi yapmak yerine onayınıza sunar. Kimlik bilgilerine, kullanıcılara ve ayarlara asla erişemez. Yöneticiler tüm kurulum için kapalı bırakabilir, siz de kurulum sırasında gizleyebilirsiniz.
+**RBAC/Paylasim:**
+Roller olusturun ve ana bilgisayarlari kullanicilar/roller arasinda paylasin. Tum kimlik dogrulama turlerini ve tum ana bilgisayar protokollerini destekler.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Giriş ve kullanıcılar:**
-Yerel hesapların yanında OIDC, LDAP, GitHub ve Google ile giriş; iki adımlı doğrulama (TOTP), geçiş anahtarları (WebAuthn) ve güvenilir cihazlar. Yöneticiler kullanıcıları yönetebilir, OIDC gruplarını rollerle eşleştirebilir, tüm platformlardaki etkin oturumları görüp sonlandırabilir. Yerel ve OIDC hesaplarınızı birbirine bağlayın ve herkesin ne yaptığını denetim günlüğünden okuyun.
+**Seri Baglantilar:**
+Seri cihazlara (router, switch, mikrodenetleyici vb.) dogrudan tarayici veya masaustu uygulamasindan baglanin. Baud hizi, veri bitleri, durdurma bitleri ve parite yapilandirin. Desteklenen tarayicilarda Web Serial API, Electron uygulamasinda yerel arka ucu kullanir.
 
 </td>
 <td width="50%" valign="top">
 
-**Roller ve paylaşım:**
-Roller oluşturun ve sunucuları kullanıcılar veya rollerle dört düzeyde paylaşın: bağlanma, görüntüleme, düzenleme ve yönetme. Tüm kimlik doğrulama türleri ve tüm protokollerle çalışır, paylaşılan bir sunucuda kullanılan kimlik bilgilerini değiştirebilirsiniz.
+**Uyarilar:**
+Ana bilgisayar metrikleri (CPU, bellek, disk vb.) icin esik tabanli uyari kurallari belirleyin ve tetiklendiklerinde ntfy veya webhook araciligiyla bildirim alin. Gecmis gunlugunde tetiklenen ve cozulen uyarilari goruntuleyin.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Uyarılar:**
-CPU, bellek ve disk gibi sunucu ölçümlerine kurallar koyun ve tetiklendiklerinde ntfy, Discord veya webhook ile haberdar olun. Devam eden ve çözülen uyarıları geçmişte görün, ilgilenmediklerinizi kapatın.
+**Ana Sayfa:**
+Surukleme ve birakma widget izgarasina sahip tamamen ozellestirilebilir bir ana sayfa. Ana bilgisayar durumu, hizmet baglantilari, saatler, notlar, RSS besleme, hava durumu, Docker konteynerleri, ana bilgisayar metrik grafikleri, gomulu terminaller, iframe ve daha fazlasi icin widget ekleyin.
 
 </td>
 <td width="50%" valign="top">
 
-**Ana sayfa:**
-Kendi kurduğunuz, sürükle bırak çalışan bir bileşen ızgarası. Sunucu durumu, ping, servis bağlantıları, yer imleri, arama, saatler, takvimler, geri sayımlar, notlar, RSS, hava durumu, görseller, gömülü sayfalar, Docker, tüneller, ölçüm grafikleri, kendi API'leriniz ve hatta canlı bir terminal için bileşenler var.
+**Veritabani Sifreleme:**
+Arka uc, sifrelenmis SQLite veritabani dosyalari olarak depolanir. Daha fazla bilgi icin [belgelere](https://docs.termix.site/security) bakin.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Parçacıklar ve araçlar:**
-Sık kullandığınız komutları kaydedin ve tek tıkla çalıştırın; sunucu için ve kendi girdileriniz için değişkenler kullanabilirsiniz. Aynı komutu açık olan tüm terminallerde çalıştırın, komut geçmişinizde tamamlamayla arama yapın.
+**Ag Grafigi:**
+Kontrol panelinizi, SSH baglantilariniza dayali olarak ev laboratuvarinizi durum destegi ile gorselletirmek icin ozellestirin.
 
 </td>
 <td width="50%" valign="top">
 
-**Oturum paylaşımı:**
-Canlı bir terminal, RDP, VNC veya Telnet oturumunu paylaşın. Hesap gerekmeden katılınabilen bir bağlantı gönderin ya da belirli bir Termix kullanıcısıyla, salt okunur veya yazma yetkili olarak paylaşın. Paylaşımlar kendiliğinden sona erebilir veya istediğiniz an iptal edilebilir; tümüyle ya da sunucu bazında kapatılabilir.
+**SSH Araclari:**
+Tek tiklamayla calistirilan yeniden kullanilabilir komut parcaciklari olusturun. Birden fazla acik terminalde ayni anda tek bir komut calistirin.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Oturum kaydı ve günlükler:**
-Terminal, RDP ve VNC oturumlarını kaydedin ve sonra izleyin. Bir oturumun düz metin günlüğünü indirin, bağlantı günlüğüne bakarak bağlantı sırasında tam olarak ne olduğunu görün.
-
-</td>
-<td width="50%" valign="top">
-
-**Seri bağlantılar:**
-Yönlendirici, anahtar ve mikrodenetleyici gibi seri cihazlarla tarayıcıdan veya masaüstü uygulamasından konuşun. Baud hızını, veri bitlerini, dur bitlerini ve pariteyi ayarlayın. Destekleyen tarayıcılarda Web Serial API'yi, masaüstü uygulamasında yerel bir arka ucu kullanır.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Tailscale:**
-Tailnet'inizdeki cihazları çekip birkaç tıkla sunucu olarak ekleyin ve Tailscale SSH ile bağlanın; erişimi tailnet kurallarınız yönetsin, kimlik bilgisi saklamanız gerekmesin. Headscale ve özel uç noktalar da çalışır.
-
-</td>
-<td width="50%" valign="top">
-
-**Proxmox:**
-Sunucuları doğrudan bir Proxmox kurulumundan içe aktarın; düğüm ve misafir makinelerin CPU, bellek ve depolama dahil durumlarını kendi sekmesinde izleyin.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Çalışma alanları ve sekmeler:**
-Bir sekme grubunu bölünmüş düzeniyle birlikte kaydedin ve hepsini tek tıkla yeniden açın. Termix son oturumunuzu da hatırlar, böylece sayfayı yenileseniz de başka cihaza geçseniz de sekmeleriniz geri gelir.
-
-</td>
-<td width="50%" valign="top">
-
-**Rehberli kurulum:**
-Kısa bir kurulum, arayüz ön ayarını, temanızı, istediğiniz özellikleri ve ilk sunucunuzu seçmenizde size yol gösterir. Basit kip kullanmadığınız şeyleri gizler; kurulumu istediğiniz zaman yeniden çalıştırabilir veya ön ayarı değiştirebilirsiniz.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Bağımsız masaüstü ve eşitleme:**
-Masaüstü uygulaması kendi arka ucu ve veritabanıyla tek başına, sunucusuz çalışır. İsterseniz bir Termix sunucusuna bağlayıp sunucuları, kimlik bilgilerini, parçacıkları ve fazlasını iki yönlü eşitleyebilir, bağlantıların kendi makinenizden mi yoksa sunucu üzerinden mi kurulacağını seçebilirsiniz.
-
-</td>
-<td width="50%" valign="top">
-
-**Komut satırı:**
-Kabuğunuz ve betikleriniz için bir `termix` CLI'ı. Terminal açın, tek bir sunucuda veya tüm filoda komut çalıştırın, SFTP ile dosya taşıyın ve sunucuları, parçacıkları ve kimlik bilgilerini yönetin. `npm install -g @termix-cli/cli` ile kurun ya da bağımsız bir çalıştırılabilir dosya edinin. [CLI belgelerine](https://docs.termix.site/cli) bakın.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Güvenlik:**
-Parolalar, anahtarlar ve diğer gizli bilgiler kullanıcı bazında şifrelenir, veritabanı dosyalarının kendisi de diskte şifrelenebilir. Nasıl çalıştığı için [belgelere](https://docs.termix.site/security) bakın.
+**Kalici Sekmeler:**
+Kullanici profilinde etkinlestirilmisse SSH oturumlari ve sekmeler cihazlar/yenilemeler arasinda acik kalir.
 
 </td>
 <td width="50%" valign="top">
 
 **Diller:**
-Yaklaşık 30 dil yerleşik olarak gelir, [Crowdin](https://docs.termix.site/translations) üzerinden yönetilir.
+Yaklasik 30 dil icin yerlesik destek ([Crowdin](https://docs.termix.site/translations) tarafindan yonetilir).
 
 </td>
 </tr>
@@ -252,46 +196,43 @@ Yaklaşık 30 dil yerleşik olarak gelir, [Crowdin](https://docs.termix.site/tra
 <br />
 
 <details>
-<summary><b>Daha fazla özellik</b></summary>
+<summary><b>Daha fazla ozellik</b></summary>
 <br />
 
-- **Kontrol paneli** - Kendi dizdiğiniz kartlarla sunucularınıza tek bakışta göz atın
-- **Ağ grafiği** - Ev laboratuvarınız sunucularınızdan çizilir, durum anlık gösterilir
-- **Tmux izleyici** - tmux oturumlarına, pencerelerine ve panellerine önizleme ve aramayla göz atın
-- **API anahtarları** - Betikler ve CI için, son kullanma tarihli kullanıcıya özel anahtarlar
-- **Dışa ve içe aktarma** - Sunucuları, kimlik bilgilerini ve dosya yöneticisi verilerini taşıyın
-- **Otomatik SSL** - Sertifikalar sizin için oluşturulur ve yenilenir, HTTPS yönlendirmesiyle birlikte; ya da kendi sertifikanızı kullanın
-- **Veritabanları** - Varsayılan SQLite, ayrıca PostgreSQL ve MySQL desteklenir
-- **Modern arayüz** - Masaüstü ve mobilde çalışan sade bir React arayüzü; açık, koyu ve Dracula gibi temalarla. Her bağlantı bir adresten tam ekran açılabilir
-- **Komut paleti** - Sol Shift'e iki kez basarak klavyeden bir sunucuya atlayın
-- **Klavye kısayolları** - Sekmeler arasında geçiş, sekme kapatma ve dahası, hepsi yeniden atanabilir
-- **Wake-on-LAN** - Bir makineyi Termix'ten ya da bir otomasyon adımından uyandırın
-- **Güvenilir vekil doğrulaması** - Girişi ters vekil sunucu halletsin ve kullanıcıyı aktarsın
-- **Zengin SSH desteği** - Atlama sunucuları, Warpgate, TOTP istekleri, SOCKS5, sunucu anahtarı doğrulama, parola otomatik doldurma, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, port knocking, terminal günlüğü, aracı yönlendirme, Bitwarden SSH aracısı, HashiCorp Vault ile SSH imzalama ve dahası
-- **Termix ID** - sshid.io'nun yerleşik hali. Bir kullanıcı adı alın, açık anahtarlarınızı bir çözümleyici adresinde yayımlayın ve yerleşik CA ile SSH sertifikaları çıkarın
+- **Kontrol Paneli** - Kontrol panelinizde sunucu bilgilerini bir bakista goruntuleyin
+- **API Anahtarlari** - Otomasyon/CI icin kullanilmak uzere son kullanma tarihleriyle kullanici kapsamli API anahtarlari olusturun
+- **Veri Disa/Ice Aktarma** - SSH ana bilgisayarlarini, kimlik bilgilerini ve dosya yoneticisi verilerini disa ve ice aktarin
+- **Otomatik SSL Kurulumu** - HTTPS yonlendirmeleriyle yerlesik SSL sertifika olusturma ve yonetimi
+- **Modern Arayuz** - React, Tailwind CSS ve Shadcn ile olusturulmus temiz masaustu/mobil uyumlu arayuz. Isik, karanlik, Dracula vb. dahil olmak uzere bircok farkli UI temasi arasından secim yapin. Herhangi bir baglantıyı tam ekranda acmak icin URL yollarini kullanin.
+- **Komut Gecmisi** - Daha once calistirilan SSH komutlarini otomatik tamamlayin ve goruntuleyin
+- **Hizli Baglanti** - Baglanti verilerini kaydetmeden bir sunucuya baglanin
+- **Komut Paleti** - Sol shift tusuna iki kez basarak SSH baglantilariniza klavyenizle hizlica erisin
+- **Proxmox Entegrasyonu** - Proxmox ornekinizden Termix'e otomatik olarak ana bilgisayar ekleyin
+- **SSH Zengin Ozellikler** - Atlama ana bilgisayarlari, Warpgate, TOTP tabanli baglantilar, SOCKS5, ana bilgisayar anahtar dogrulama, otomatik sifre doldurma, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, port knocking, terminal gunlukleme, SSH agent forwarding, Bitwarden SSH agent, HashiCorp Vault SSH imzalama ve dahasini destekler.
+- **Termix ID** - Termix'e entegre edilmis bir sshid.io esdegeri. Bir kullanici adi edinin, genel SSH anahtarlarinizi bir cozumleyici URL'sinde yayinlayin ve SSH sertifikalari vermek icin yerlesik bir CA kullanin.
 
 </details>
 
 <br />
 
-## Platform desteği
+## Platform Destegi
 
 <table align="center">
 <tr>
 <th align="center">Platform</th>
-<th align="center">Dağıtım</th>
+<th align="center">Dagitim</th>
 </tr>
 <tr>
 <td align="center"><b>Web</b></td>
-<td>Güncel her tarayıcı (Chrome, Safari, Firefox) · PWA desteği</td>
+<td>Herhangi bir modern tarayici (Chrome, Safari, Firefox) · PWA destegi</td>
 </tr>
 <tr>
 <td align="center"><b>Windows</b> <sub>x64/ia32</sub></td>
-<td>Taşınabilir · MSI kurulumu · Chocolatey</td>
+<td>Tasınabilir · MSI Yukleyici · Chocolatey</td>
 </tr>
 <tr>
 <td align="center"><b>Linux</b> <sub>x64/ia32</sub></td>
-<td>Taşınabilir · AUR · AppImage · Deb · Flatpak</td>
+<td>Tasınabilir · AUR · AppImage · Deb · Flatpak</td>
 </tr>
 <tr>
 <td align="center"><b>macOS</b> <sub>x64/ia32, v12.0+</sub></td>
@@ -311,9 +252,9 @@ Yaklaşık 30 dil yerleşik olarak gelir, [Crowdin](https://docs.termix.site/tra
 
 ## Kurulum
 
-Tüm platformlar için ayrıntılı kurulum yönergelerini [Termix belgelerinde](https://docs.termix.site/install) bulabilirsiniz.
+Termix'i tum platformlara nasil kuracaginiz hakkinda daha fazla bilgi icin Termix [Belgelerine](https://docs.termix.site/install) bakin.
 
-Örnek Docker Compose dosyası (uzak masaüstünü kullanmayacaksanız `guacd` ve ağ kısmını çıkarabilirsiniz):
+Ornek bir Docker Compose dosyasi (uzak masaustu ozelliklerini kullanmayi planlamiyorsaniz `guacd` ve agi cikarabilirsiniz):
 
 ```yaml
 services:
@@ -350,45 +291,19 @@ networks:
     driver: bridge
 ```
 
-### Komut satırı
-
-Termix'in bir CLI'ı da var; sunucularınızı terminalden yönetebilir ve Termix'i kendi betiklerinizde kullanabilirsiniz.
-
-```bash
-npm install -g @termix-cli/cli
-termix login --url https://termix.example.com
-termix ssh 1
-```
-
-Terminal açabilir, tek bir sunucuda veya tüm filoda komut çalıştırabilir, SFTP ile dosya taşıyabilir ve sunucuları, parçacıkları ve kimlik bilgilerini yönetebilir. Belgelerin tamamı [docs.termix.site/cli](https://docs.termix.site/cli) adresinde.
-
-### Bulutta barındırma
-
-Termix sunucusunu kendi ağınız yerine bir VPS üzerinde de çalıştırabilirsiniz. Termix yönettiği ağın içinde çalışıyorsa, bir kesinti onu da beraberinde götürür; hem de tam onu tamir için kullanmanız gereken anda. Dışarıda çalıştırmak erişilebilir kalmasını sağlar, sabit bir IP verir ve VPN ya da port yönlendirme olmadan her yerden girmenize izin verir.
-
-[GINERNET](https://docs.termix.site/install/ginernet) Termix'e sponsor oluyor ve belgelerde onların VPS platformuna kurulum için adım adım bir rehber var.
-
 <br />
 
-## Telemetri
+## Bağış Yapın
 
-Termix günde bir kez küçük ve anonim bir sinyal gönderir; böylece kaç kurulumun çalıştığını ve hangi özelliklerin kullanıldığını görebiliyorum. İçinde rastgele bir kurulum kimliği, kaç kullanıcı ve sunucunuz olduğu, uygulama sürümü ve son 24 saatte hangi özelliklerin (terminal, dosya yöneticisi, tüneller, docker vb.) kullanıldığı yer alır. İçinde asla kullanıcı adları, sunucu adları, IP adresleri, kimlik bilgileri ya da sizi veya sunucularınızı tanımlayan başka bir şey bulunmaz.
+Termix ücretsiz ve açık kaynaklıdır, abonelik veya ücretli plan yoktur. Faydalı buluyorsaniz, sunucu maliyetleri, alan adlari ve gelistirme suresine katkida bulunmak icin bagis yapmayi dusunebilirsiniz. Bagislar ayrica SAML, Kubernetes ve Agent destegi gibi ozellikleri gelistirmek icin gereken arastirma ve ogrenme suresini finanse etmeye yardimci olur. Ilerlemeyi takip edin ve asagidan bagis yapin.
 
-Varsayılan olarak açıktır. Yönetici ayarlarında Genel bölümünden kapatabilir ya da Termix'i hiç başlatmadan önce `ENABLE_TELEMETRY=false` tanımlayabilirsiniz.
-
-<br />
-
-## Bağış
-
-Termix ücretsiz ve açık kaynaklıdır; abonelik ya da ücretli plan yoktur. İşinize yarıyorsa, sunucu, alan adı ve geliştirme süresi masraflarına katkı için bağış yapmayı düşünün. Bağışlar ayrıca SAML, Kubernetes ve aracı desteği gibi özellikler için gereken araştırma ve öğrenme süresini karşılar. İlerlemeyi aşağıdan izleyip bağış yapabilirsiniz.
-
-[Bağış yap](https://donate.termix.site/)
+[Bağış Yapın](https://donate.termix.site/)
 
 <br />
 
 ## Sponsorlar
 
-Geliştirmeyi desteklemek için ücretli bir yerleşim ilginizi çeker mi? [mail@termix.site](mailto:mail@termix.site) adresine yazın.
+Gelistirmeyi desteklemek icin ucretli bir yerlesim ile ilgileniyor musunuz? [mail@termix.site](mailto:mail@termix.site) adresine e-posta gonderin.
 
 <div align="center">
 
@@ -410,6 +325,10 @@ Geliştirmeyi desteklemek için ücretli bir yerleşim ilginizi çeker mi? [mail
   <img src="https://sirv.sirv.com/website/screenshots/cloudflare/cloudflare-logo.png?w=300" height="40" alt="Cloudflare" />
 </a>
 &nbsp;&nbsp;&nbsp;
+<a href="https://tailscale.com/">
+  <img src="https://drive.google.com/uc?export=view&id=1lIxkJuX6M23bW-2FElhT0rQieTrzaVSL" height="40" alt="Tailscale" />
+</a>
+&nbsp;&nbsp;&nbsp;
 <a href="https://akamai.com/">
   <img src="https://upload.wikimedia.org/wikipedia/commons/8/8b/Akamai_logo.svg" height="40" alt="Akamai" />
 </a>
@@ -421,21 +340,18 @@ Geliştirmeyi desteklemek için ücretli bir yerleşim ilginizi çeker mi? [mail
 <a href="https://rackgenius.com/">
   <img src="https://rackgenius.com/rackgenius-logo.png" height="40" alt="Rack Genius" />
 </a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://ginernet.com/">
-  <img src="https://ginernet.com/img/logo-web.png" height="40" alt="Ginernet" />
-</a>
+
 </div>
 
 <br />
 
 ## Destek
 
-Yardıma mı ihtiyacınız var ya da bir özellik mi istiyorsunuz? [Yeni bir konu](https://github.com/Termix-SSH/Support/issues) açın ve olabildiğince ayrıntı ekleyin, mümkünse İngilizce yazın. [Discord](https://discord.gg/jVQGdvHDrf) üzerindeki destek kanalında da sorabilirsiniz, ancak oradaki yanıtlar daha uzun sürebilir.
+Termix ile ilgili yardima ihtiyaciniz varsa veya bir ozellik talep etmek istiyorsaniz, [Sorunlar](https://github.com/Termix-SSH/Support/issues) sayfasini ziyaret edin, giris yapin ve `New Issue` butonuna basin. Lutfen sorununuzu mumkun oldugunca ayrintili yazin, tercihen Ingilizce olarak. Ayrica [Discord](https://discord.gg/jVQGdvHDrf) sunucusuna katilabilir ve destek kanalini ziyaret edebilirsiniz, ancak yanit sureleri daha uzun olabilir.
 
 <br />
 
-## Ekran görüntüleri
+## Ekran Goruntuleri
 
 <div align="center">
 
@@ -443,7 +359,7 @@ Yardıma mı ihtiyacınız var ya da bir özellik mi istiyorsunuz? [Yeni bir kon
 
 [![YouTube](../repo-images/YouTube.png)](https://www.youtube.com/@TermixSSH/videos)
 
-<sub>Güncelleme tanıtımlarını YouTube'da izleyin</sub>
+<sub>YouTube'da guncelleme ozetlerini izleyin</sub>
 
 <br />
 <br />
@@ -483,18 +399,18 @@ Yardıma mı ihtiyacınız var ya da bir özellik mi istiyorsunuz? [Yeni bir kon
 </tr>
 </table>
 
-<sub>Bazı videolar ve görseller güncelliğini yitirmiş ya da özellikleri tam olarak göstermiyor olabilir.</sub>
+<sub>Bazi videolar ve gorseller guncel olmayabilir veya ozellikleri tam olarak yansitmayabilir.</sub>
 
 </div>
 
 <br />
 
-## Planlanan özellikler
+## Planlanan Ozellikler
 
-Planlanan tüm özellikler [Projects](https://github.com/orgs/Termix-SSH/projects/5) sayfasında. Katkıda bulunmak isterseniz [Contributing](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md) dosyasına bakın.
+Tum planlanan ozellikler icin [Projeler](https://github.com/orgs/Termix-SSH/projects/5) sayfasina bakin. Katkida bulunmak istiyorsaniz, [Katkida Bulunma](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md) sayfasina bakin.
 
 <br />
 
 ## Lisans
 
-Apache Lisansı Sürüm 2.0 ile dağıtılır. Ayrıntılar için `LICENSE` dosyasına bakın.
+Apache Lisansi Surumu 2.0 altinda dagitilmaktadir. Daha fazla bilgi icin `LICENSE` dosyasina bakin.

docs/readme/README-VI.md

@@ -4,7 +4,7 @@
 
 <h1>Termix</h1>
 
-<p>Quản lý máy chủ tự lưu trữ, từ SSH và máy tính từ xa cho đến tự động hoá</p>
+<p>Quan ly SSH tu luu tru va truy cap may tinh tu xa</p>
 
 <p>
   <a href="../README.md">English</a> ·
@@ -37,7 +37,7 @@
 
 <br />
 
-Termix miễn phí và mã nguồn mở. Nếu bạn thấy hữu ích, hãy cân nhắc [quyên góp](https://donate.termix.site/) để giúp trang trải chi phí máy chủ và thời gian phát triển.
+Termix là dự án miễn phí và mã nguồn mở. Nếu bạn thấy hữu ích, hãy cân nhắc [quyên góp](https://donate.termix.site/) để giúp trang trải chi phí máy chủ và thời gian phát triển.
 
 <br />
 
@@ -49,201 +49,145 @@ Termix miễn phí và mã nguồn mở. Nếu bạn thấy hữu ích, hãy câ
 <p>
   <img src="../repo-images/Repo of the Day.png" alt="Repo of the Day Achievement" width="280" />
   <br />
-  <sub>Đạt được vào ngày 1 tháng 9 năm 2025</sub>
+  <sub>Dat duoc vao ngay 1 thang 9 nam 2025</sub>
 </p>
 
 </div>
 
 <br />
 
-## Tổng quan
+## Tong Quan
 
-Termix là nền tảng miễn phí, mã nguồn mở, tự lưu trữ để quản lý máy chủ của bạn. Nó gom vào một chỗ terminal SSH, máy tính từ xa (RDP, VNC, Telnet), truyền tệp, tunnel, Docker, số liệu và tự động hoá, trên web, máy tính và điện thoại. Đây là bản thay thế tự lưu trữ cho Termius và sẽ miễn phí mãi mãi.
+Termix la nen tang quan ly may chu tat ca trong mot, ma nguon mo, mien phi vinh vien, tu luu tru. No cung cap giai phap da nen tang de quan ly may chu va co so ha tang cua ban thong qua mot giao dien truc quan duy nhat. Termix cung cap quyen truy cap terminal SSH, dieu khien may tinh tu xa (RDP, VNC, Telnet), kha nang tao duong ham SSH, quan ly tep tu xa va nhieu cong cu khac. Termix la giai phap thay the mien phi va tu luu tru hoan hao cho Termius, kha dung tren tat ca cac nen tang.
 
 <br />
 
-## Tính năng
+## Tinh Nang
 
 <table>
 <tr>
 <td width="50%" valign="top">
 
-**Terminal SSH:**
-Một terminal đầy đủ với các thẻ giống trình duyệt và chia đôi màn hình, tối đa 6 khung cùng lúc. Bạn tự chọn giao diện, phông chữ và màu sắc. Phía trên mỗi phiên có một thanh công cụ hiện CPU, bộ nhớ và ổ đĩa theo thời gian thực, kèm lối tắt tới tệp, Docker, tunnel và số liệu của máy chủ đó.
+**Truy Cap Terminal SSH:**
+Terminal day du tinh nang voi ho tro chia man hinh (len den 4 bang) voi he thong tab kieu trinh duyet. Bao gom ho tro tuy chinh terminal bao gom cac chu de terminal pho bien, phong chu va cac thanh phan khac.
 
 </td>
 <td width="50%" valign="top">
 
-**Máy tính từ xa:**
-RDP, VNC và Telnet ngay trong trình duyệt, dùng thẻ và chia đôi màn hình như mọi phiên khác. Có trình duyệt tệp cho ổ đĩa RDP và tải lên bằng cách kéo thả. Trên máy tính Windows, bạn còn có thể mở máy chủ bằng ứng dụng RDP của hệ điều hành.
+**Truy Cap Man Hinh Tu Xa:**
+Ho tro RDP, VNC va Telnet qua trinh duyet voi day du tuy chinh va chia man hinh.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Tunnel SSH:**
-Chuyển tiếp cục bộ, từ xa và SOCKS động, có tự kết nối lại và kiểm tra tình trạng. Tunnel từ máy khách tới máy chủ trong ứng dụng máy tính được lưu ngay trên máy đó, và bạn có thể lưu cấu hình sẵn lên máy chủ để mang sang máy khác.
+**Quan Ly Duong Ham SSH:**
+Tao va quan ly duong ham SSH giua cac may chu voi tu dong ket noi lai, giam sat suc khoe va chuyen tiep cuc bo, tu xa hoac SOCKS dong. Cai dat duong ham tu may khach desktop den may chu duoc luu tru cuc bo cho moi ban cai dat desktop; cac snapshot C2S preset tuy chon co the duoc luu tren may chu, doi ten, tai hoac xoa khi ban muon di chuyen mot cau hinh duong ham cuc bo giua cac may khach.
 
 </td>
 <td width="50%" valign="top">
 
-**Trình quản lý tệp:**
-Duyệt, sửa, tải lên, tải xuống, đổi tên, di chuyển và xoá tệp qua SFTP, có hỗ trợ sudo. Xem và sửa mã nguồn, hình ảnh, âm thanh và video. Sao chép tệp thẳng từ máy chủ này sang máy chủ khác, hệ thống tự chọn đường nhanh nhất và kiểm tra tính toàn vẹn khi truyền.
+**Trinh Quan Ly Tep Tu Xa:**
+Quan ly tep truc tiep tren may chu tu xa voi ho tro xem va chinh sua ma, hinh anh, am thanh va video. Tai len, tai xuong, doi ten, xoa va di chuyen tep lien mach voi ho tro sudo. Bao gom ho tro di chuyen tep tu may chu nay sang may chu khac.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Docker và Podman:**
-Khởi động, dừng, tạm dừng và xoá container, xem thông số của chúng và mở một shell bên trong. Chạy được với cả Docker lẫn Podman. Nó không nhằm thay thế Portainer hay Dockge, chỉ để quản lý những container bạn đã có.
+**Quan Ly Docker va Podman:**
+Khoi dong, dung, tam dung, xoa container. Xem thong ke container. Dieu khien container bang terminal docker exec. Ho tro ca Docker va Podman lam moi truong chay container. Khong duoc tao ra de thay the Portainer hay Dockge ma don gian la de quan ly container cua ban thay vi tao moi chung.
 
 </td>
 <td width="50%" valign="top">
 
-**Quản lý máy chủ:**
-Lưu và sắp xếp máy chủ bằng thẻ và thư mục lồng nhau mà bạn có thể đặt tên và tô màu. Dùng lại thông tin đăng nhập đã lưu cho nhiều máy chủ, tự động triển khai khoá SSH, gom máy chủ dưới một máy chủ cha, sửa và xuất hàng loạt, và dùng kết nối nhanh cho những lần kết nối một lần mà bạn không muốn lưu.
+**Trinh Quan Ly May Chu SSH:**
+Luu, sap xep va quan ly cac ket noi SSH cua ban voi the va thu muc (ho tro tuy chinh thu muc va thu muc long nhau), de dang luu thong tin dang nhap co the tai su dung dong thoi co the tu dong hoa viec trien khai khoa SSH.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Số liệu máy chủ:**
-CPU, bộ nhớ, ổ đĩa, mạng, nhiệt độ, thời gian hoạt động, tiến trình, cổng, lượt đăng nhập và thông tin hệ thống trên hầu hết máy chủ Linux, kèm biểu đồ lịch sử. Các thẻ quản lý cho phép bạn xử lý dịch vụ, tác vụ cron, gói phần mềm, người dùng, luật tường lửa, WireGuard, Tailscale, chứng chỉ SSL, nhật ký và kiểm tra tình trạng mà không cần rời Termix.
+**Chi So May Chu:**
+Xem muc su dung CPU, bo nho, o dia, mang, thoi gian hoat dong, thong tin he thong, tuong lua, giam sat cong, trinh xem nhat ky, nguoi dung/quyen, chung chi va nhieu hon nua tren hau het cac may chu chay Linux. Bao gom bieu do lich su theo chuoi thoi gian va canh bao dua tren nguong voi ho tro ntfy va webhook.
 
 </td>
 <td width="50%" valign="top">
 
-**Tự động hoá:**
-Chọn một điều kiện kích hoạt, rồi nói bạn muốn điều gì xảy ra. Điều kiện gồm một số liệu vượt ngưỡng, một máy chủ sập hoặc sống lại, kiểm tra tình trạng thay đổi, một lịch định sẵn, một sự kiện container, hoặc một webhook gửi đến. Các bước có thể chạy lệnh và đoạn lệnh, điều khiển container và tunnel, đánh thức máy chủ, gọi một địa chỉ, chờ, rẽ nhánh theo điều kiện, chạy một tự động hoá khác, và báo cho bạn qua ntfy, Discord hoặc webhook. Chạy thử giúp bạn kiểm tra an toàn trước.
+**Xac Thuc Nguoi Dung:**
+Quan ly nguoi dung an toan voi quyen quan tri (co the chinh sua thong tin cua nguoi dung khac) va ho tro OIDC/LDAP/SSO (co kiem soat truy cap), 2FA (TOTP) va passkey (WebAuthn). Xem phien hoat dong cua nguoi dung tren tat ca cac nen tang va thu hoi quyen. Lien ket tai khoan OIDC/Noi bo cua ban voi nhau. Xem nhat ky kiem toan cac hanh dong cua tat ca nguoi dung.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Nhóm máy chủ:**
-Gom máy chủ vào một nhóm bằng cách tự chọn hoặc theo luật thẻ, để máy chủ mới tự vào nhóm. Chạy một lệnh trên mọi máy chủ cùng lúc, đẩy và lấy tệp trên tất cả, cài gói phần mềm, và thu thập danh sách hệ điều hành, nhân, kiến trúc và thời gian hoạt động.
+**Tich Hop Tailscale:**
+Liet ke cac thiet bi trong mang Tailscale de nhanh chong them vao lam may chu, va ket noi bang Tailscale SSH lam phuong thuc xac thuc, de cac ACL mang xu ly uy quyen ma khong can luu tru thong tin xac thuc.
 
 </td>
 <td width="50%" valign="top">
 
-**Trợ lý AI:**
-Là tuỳ chọn, và tắt cho đến khi bạn tự bật. Kết nối OpenAI, Anthropic, Gemini, Ollama hoặc bất kỳ endpoint tương thích OpenAI nào rồi hỏi về hệ thống của bạn. Nó đọc được máy chủ, nhóm máy chủ, đoạn lệnh và cảnh báo, và đề xuất thay đổi để bạn duyệt chứ không tự làm. Nó không bao giờ chạm được vào thông tin đăng nhập, người dùng hay thiết lập. Quản trị viên có thể tắt hẳn cho cả hệ thống, còn bạn có thể ẩn nó ngay khi cài đặt ban đầu.
+**RBAC/Chia Se:**
+Tao vai tro va chia se may chu giua nguoi dung/vai tro. Ho tro tat ca cac loai xac thuc va tat ca cac giao thuc may chu.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Đăng nhập và người dùng:**
-Tài khoản cục bộ cùng với đăng nhập qua OIDC, LDAP, GitHub và Google, kèm xác thực hai bước (TOTP), passkey (WebAuthn) và thiết bị tin cậy. Quản trị viên có thể quản lý người dùng, ánh xạ nhóm OIDC sang vai trò, xem mọi phiên đang hoạt động trên mọi nền tảng và thu hồi chúng. Bạn có thể liên kết tài khoản cục bộ với tài khoản OIDC, và xem nhật ký kiểm toán về những gì mọi người đã làm.
+**Ket Noi Noi Tiep:**
+Ket noi voi cac thiet bi noi tiep (router, switch, vi dieu khien, v.v.) truc tiep tu trinh duyet hoac ung dung may tinh. Cau hinh toc do baud, bit du lieu, bit dung va chan le. Su dung Web Serial API tren trinh duyet duoc ho tro hoac backend ban dia trong ung dung Electron.
 
 </td>
 <td width="50%" valign="top">
 
-**Vai trò và chia sẻ:**
-Tạo vai trò và chia sẻ máy chủ với người dùng hoặc vai trò theo bốn mức: kết nối, xem, sửa và quản lý. Hoạt động với mọi kiểu xác thực và mọi giao thức, và bạn có thể thay thông tin đăng nhập dùng cho một máy chủ được chia sẻ.
+**Canh Bao:**
+Dat cac quy tac canh bao dua tren nguong cho chi so may chu (CPU, bo nho, o dia, v.v.) va nhan thong bao qua ntfy hoac webhook khi chung kich hoat. Xem canh bao dang kich hoat va da giai quyet trong nhat ky lich su.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Cảnh báo:**
-Đặt luật cho các số liệu máy chủ như CPU, bộ nhớ và ổ đĩa, rồi nhận thông báo qua ntfy, Discord hoặc webhook khi chúng kích hoạt. Xem cảnh báo đang bật và đã hết trong nhật ký, và bỏ qua những cái bạn không quan tâm.
+**Trang Chu:**
+Trang chu co the tuy chinh hoan toan voi luoi widget keo va tha. Them widget cho trang thai may chu, lien ket dich vu, dong ho, ghi chu, feed RSS, thoi tiet, container Docker, bieu do chi so may chu, terminal nhung, iframe va nhieu hon nua.
 
 </td>
 <td width="50%" valign="top">
 
-**Trang chủ:**
-Một lưới tiện ích kéo thả do bạn tự dựng. Có tiện ích cho tình trạng máy chủ, ping, liên kết dịch vụ, dấu trang, tìm kiếm, đồng hồ, lịch, đếm ngược, ghi chú, RSS, thời tiết, hình ảnh, iframe, Docker, tunnel, biểu đồ số liệu, API riêng, và cả một terminal đang chạy.
+**Ma Hoa Co So Du Lieu:**
+Backend duoc luu tru duoi dang tep co so du lieu SQLite duoc ma hoa. Xem [tai lieu](https://docs.termix.site/security) de biet them.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Đoạn lệnh và công cụ:**
-Lưu những lệnh bạn hay dùng và chạy chỉ với một cú nhấp, có biến cho máy chủ và cho phần bạn tự nhập. Chạy một lệnh trên tất cả terminal đang mở, và tìm trong lịch sử lệnh với gợi ý tự động.
+**Bieu Do Mang:**
+Tuy chinh Bang Dieu Khien de truc quan hoa homelab cua ban dua tren cac ket noi SSH voi ho tro trang thai.
 
 </td>
 <td width="50%" valign="top">
 
-**Chia sẻ phiên:**
-Chia sẻ trực tiếp một phiên terminal, RDP, VNC hoặc Telnet. Gửi một liên kết mà ai cũng vào được không cần tài khoản, hoặc chia sẻ với một người dùng Termix cụ thể, ở chế độ chỉ xem hoặc cho phép thao tác. Chia sẻ có thể tự hết hạn hoặc bị thu hồi bất cứ lúc nào, và có thể tắt toàn bộ hoặc theo từng máy chủ.
+**Cong Cu SSH:**
+Tao doan lenh co the tai su dung, thuc thi chi voi mot cu nhap chuot. Chay mot lenh dong thoi tren nhieu terminal dang mo.
 
 </td>
 </tr>
 <tr>
 <td width="50%" valign="top">
 
-**Ghi phiên và nhật ký:**
-Ghi lại phiên terminal, RDP và VNC rồi xem lại sau. Tải nhật ký dạng văn bản của một phiên, và xem nhật ký kết nối để biết chính xác chuyện gì đã xảy ra trong lúc kết nối.
+**Tab Lien Tuc:**
+Cac phien SSH va tab van mo tren cac thiet bi/lan lam moi neu duoc bat trong ho so nguoi dung.
 
 </td>
 <td width="50%" valign="top">
 
-**Kết nối serial:**
-Làm việc với thiết bị serial như router, switch và vi điều khiển từ trình duyệt hoặc ứng dụng máy tính. Đặt tốc độ baud, bit dữ liệu, bit dừng và bit chẵn lẻ. Dùng Web Serial API trên các trình duyệt hỗ trợ, hoặc backend gốc trong ứng dụng máy tính.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Tailscale:**
-Lấy thiết bị từ tailnet của bạn để thêm làm máy chủ chỉ với vài cú nhấp, và kết nối bằng Tailscale SSH để ACL của tailnet lo phần quyền truy cập, không cần lưu thông tin đăng nhập. Headscale và endpoint tuỳ chỉnh cũng dùng được.
-
-</td>
-<td width="50%" valign="top">
-
-**Proxmox:**
-Nhập máy chủ thẳng từ một hệ thống Proxmox, và theo dõi số liệu của node và máy ảo, gồm CPU, bộ nhớ và dung lượng, trong một thẻ riêng.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Không gian làm việc và thẻ:**
-Lưu một bộ thẻ cùng cách chia màn hình rồi mở lại toàn bộ chỉ với một cú nhấp. Termix cũng nhớ phiên gần nhất, nên các thẻ của bạn quay lại sau khi tải lại trang và trên thiết bị khác.
-
-</td>
-<td width="50%" valign="top">
-
-**Cài đặt có hướng dẫn:**
-Một phần cài đặt ngắn sẽ hướng bạn chọn kiểu giao diện, chủ đề, những tính năng bạn muốn và máy chủ đầu tiên. Chế độ đơn giản ẩn bớt những gì bạn không dùng, và bạn có thể chạy lại phần cài đặt hoặc đổi kiểu bất cứ lúc nào.
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Ứng dụng máy tính độc lập và đồng bộ:**
-Ứng dụng máy tính chạy độc lập với backend và cơ sở dữ liệu riêng, không cần máy chủ. Bạn cũng có thể nối nó với một máy chủ Termix để đồng bộ hai chiều máy chủ, thông tin đăng nhập, đoạn lệnh và nhiều thứ khác, và chọn kết nối xuất phát từ máy của bạn hay đi qua máy chủ.
-
-</td>
-<td width="50%" valign="top">
-
-**Dòng lệnh:**
-Công cụ `termix` cho shell và các script của bạn. Mở terminal, chạy một lệnh trên một máy chủ hoặc cả một nhóm, chuyển tệp qua SFTP, và quản lý máy chủ, đoạn lệnh và thông tin đăng nhập. Cài bằng `npm install -g @termix-cli/cli` hoặc tải bản chạy độc lập. Xem [tài liệu CLI](https://docs.termix.site/cli).
-
-</td>
-</tr>
-<tr>
-<td width="50%" valign="top">
-
-**Bảo mật:**
-Mật khẩu, khoá và các thông tin bí mật khác được mã hoá theo từng người dùng, và bản thân các tệp cơ sở dữ liệu cũng có thể mã hoá trên ổ đĩa. Xem [tài liệu](https://docs.termix.site/security) để biết cách hoạt động.
-
-</td>
-<td width="50%" valign="top">
-
-**Ngôn ngữ:**
-Có sẵn khoảng 30 ngôn ngữ, quản lý qua [Crowdin](https://docs.termix.site/translations).
+**Ngon Ngu:**
+Ho tro tich hop khoang 30 ngon ngu (duoc quan ly boi [Crowdin](https://docs.termix.site/translations)).
 
 </td>
 </tr>
@@ -252,46 +196,43 @@ Có sẵn khoảng 30 ngôn ngữ, quản lý qua [Crowdin](https://docs.termix.
 <br />
 
 <details>
-<summary><b>Thêm tính năng khác</b></summary>
+<summary><b>Them tinh nang</b></summary>
 <br />
 
-- **Bảng điều khiển** - Nhìn nhanh toàn bộ máy chủ, với các thẻ do bạn tự sắp xếp
-- **Sơ đồ mạng** - Vẽ homelab của bạn từ danh sách máy chủ, kèm trạng thái theo thời gian thực
-- **Theo dõi tmux** - Xem các phiên, cửa sổ và khung tmux, có xem trước và tìm kiếm
-- **Khoá API** - Khoá theo từng người dùng có ngày hết hạn, dùng cho script và CI
-- **Xuất và nhập** - Chuyển máy chủ, thông tin đăng nhập và dữ liệu trình quản lý tệp ra vào
-- **SSL tự động** - Chứng chỉ được tạo và gia hạn giúp bạn, kèm chuyển hướng HTTPS, hoặc dùng chứng chỉ của riêng bạn
-- **Cơ sở dữ liệu** - Mặc định là SQLite, đồng thời hỗ trợ PostgreSQL và MySQL
-- **Giao diện hiện đại** - Giao diện React gọn gàng chạy tốt trên máy tính và điện thoại, với các chủ đề như sáng, tối và Dracula. Mọi kết nối đều mở toàn màn hình được từ một địa chỉ
-- **Bảng lệnh** - Nhấn hai lần phím Shift trái để nhảy tới một máy chủ bằng bàn phím
-- **Phím tắt** - Chuyển giữa các thẻ, đóng thẻ và nhiều thao tác khác, đều gán lại được
-- **Wake-on-LAN** - Đánh thức một máy từ Termix hoặc từ một bước tự động hoá
-- **Xác thực qua proxy tin cậy** - Để reverse proxy lo phần đăng nhập rồi chuyển thông tin người dùng vào
-- **SSH nhiều tính năng** - Máy chủ trung gian, Warpgate, hỏi mã TOTP, SOCKS5, kiểm tra khoá máy chủ, tự điền mật khẩu, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, port knocking, ghi nhật ký terminal, chuyển tiếp agent, SSH agent của Bitwarden, ký SSH bằng HashiCorp Vault và nhiều thứ khác
-- **Termix ID** - Bản dựng sẵn theo kiểu sshid.io. Đăng ký một tên, công bố khoá công khai của bạn tại một địa chỉ phân giải, và cấp chứng chỉ SSH từ CA tích hợp
+- **Bang Dieu Khien** - Xem thong tin may chu trong nháy mat tren bang dieu khien cua ban
+- **Khoa API** - Tao khoa API theo pham vi nguoi dung voi ngay het han de su dung cho tu dong hoa/CI
+- **Xuat/Nhap Du Lieu** - Xuat va nhap may chu SSH, thong tin xac thuc va du lieu trinh quan ly tep
+- **Thiet Lap SSL Tu Dong** - Tao va quan ly chung chi SSL tich hop voi chuyen huong HTTPS
+- **Giao Dien Hien Dai** - Giao dien sach se, than thien voi may tinh/di dong duoc xay dung bang React, Tailwind CSS va Shadcn. Chon giua nhieu chu de UI khac nhau bao gom sang, toi, Dracula, v.v. Su dung duong dan URL de mo bat ky ket noi nao o che do toan man hinh.
+- **Lich Su Lenh** - Tu dong hoan thanh va xem cac lenh SSH da chay truoc do
+- **Ket Noi Nhanh** - Ket noi den may chu ma khong can luu du lieu ket noi
+- **Bang Lenh** - Nhan dup phim shift trai de truy cap nhanh cac ket noi SSH bang ban phim
+- **Tich Hop Proxmox** - Tu dong them may chu vao Termix tu instance Proxmox cua ban
+- **SSH Giau Tinh Nang** - Ho tro jump host, Warpgate, ket noi dua tren TOTP, SOCKS5, xac minh khoa may chu, tu dong dien mat khau, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, port knocking, ghi nhat ky terminal, chuyen tiep SSH agent, Bitwarden SSH agent, ky SSH bang HashiCorp Vault va nhieu hon nua.
+- **Termix ID** - Mot tuong duong cua sshid.io duoc tich hop san trong Termix. Dang ky mot ten dinh danh, cong bo khoa SSH cong khai cua ban tai mot URL phan giai va su dung CA tich hop san de cap chung chi SSH.
 
 </details>
 
 <br />
 
-## Nền tảng hỗ trợ
+## Ho Tro Nen Tang
 
 <table align="center">
 <tr>
-<th align="center">Nền tảng</th>
-<th align="center">Bản phân phối</th>
+<th align="center">Nen tang</th>
+<th align="center">Phan phoi</th>
 </tr>
 <tr>
 <td align="center"><b>Web</b></td>
-<td>Mọi trình duyệt hiện đại (Chrome, Safari, Firefox) · Hỗ trợ PWA</td>
+<td>Bat ky trinh duyet hien dai nao (Chrome, Safari, Firefox) · Ho tro PWA</td>
 </tr>
 <tr>
 <td align="center"><b>Windows</b> <sub>x64/ia32</sub></td>
-<td>Bản chạy ngay · Bộ cài MSI · Chocolatey</td>
+<td>Portable · MSI Installer · Chocolatey</td>
 </tr>
 <tr>
 <td align="center"><b>Linux</b> <sub>x64/ia32</sub></td>
-<td>Bản chạy ngay · AUR · AppImage · Deb · Flatpak</td>
+<td>Portable · AUR · AppImage · Deb · Flatpak</td>
 </tr>
 <tr>
 <td align="center"><b>macOS</b> <sub>x64/ia32, v12.0+</sub></td>
@@ -309,11 +250,11 @@ Có sẵn khoảng 30 ngôn ngữ, quản lý qua [Crowdin](https://docs.termix.
 
 <br />
 
-## Cài đặt
+## Cai Dat
 
-Xem [tài liệu Termix](https://docs.termix.site/install) để có hướng dẫn cài đặt đầy đủ trên mọi nền tảng.
+Truy cap [Tai Lieu](https://docs.termix.site/install) Termix de biet them thong tin ve cach cai dat Termix tren tat ca cac nen tang.
 
-Tệp Docker Compose mẫu (bạn có thể bỏ `guacd` và phần mạng nếu không định dùng máy tính từ xa):
+Tep Docker Compose mau (ban co the bo qua `guacd` va mang neu khong co y dinh su dung cac tinh nang dieu khien may tinh tu xa):
 
 ```yaml
 services:
@@ -350,45 +291,19 @@ networks:
     driver: bridge
 ```
 
-### Dòng lệnh
-
-Termix cũng có CLI, để bạn quản lý máy chủ từ terminal và dùng Termix trong script của mình.
-
-```bash
-npm install -g @termix-cli/cli
-termix login --url https://termix.example.com
-termix ssh 1
-```
-
-Nó mở được terminal, chạy lệnh trên một máy chủ hoặc cả một nhóm, chuyển tệp qua SFTP, và quản lý máy chủ, đoạn lệnh và thông tin đăng nhập. Tài liệu đầy đủ ở [docs.termix.site/cli](https://docs.termix.site/cli).
-
-### Chạy trên cloud
-
-Bạn có thể chạy máy chủ Termix trên VPS thay vì trong mạng của mình. Nếu Termix chạy ngay trong mạng mà nó quản lý, một sự cố sẽ kéo nó sập theo, đúng lúc bạn cần nó để sửa. Chạy ở ngoài thì nó luôn truy cập được, cho bạn một IP cố định và vào được từ bất cứ đâu mà không cần VPN hay mở cổng.
-
-[GINERNET](https://docs.termix.site/install/ginernet) là nhà tài trợ của Termix, và tài liệu có hướng dẫn từng bước để triển khai trên nền tảng VPS của họ.
-
-<br />
-
-## Dữ liệu sử dụng
-
-Termix gửi một tín hiệu nhỏ ẩn danh mỗi ngày một lần, để tôi biết có bao nhiêu bản đang chạy và tính năng nào thực sự được dùng. Nó gồm một mã bản cài ngẫu nhiên, số người dùng và máy chủ bạn có, phiên bản ứng dụng, và những tính năng (terminal, trình quản lý tệp, tunnel, docker, v.v.) đã dùng trong 24 giờ qua. Nó không bao giờ chứa tên người dùng, tên máy chủ, địa chỉ IP, thông tin đăng nhập hay bất cứ thứ gì nhận dạng bạn hoặc máy chủ của bạn.
-
-Mặc định là bật. Bạn tắt nó trong phần Cài đặt quản trị, mục Chung, hoặc đặt `ENABLE_TELEMETRY=false` trước cả khi khởi động Termix.
-
 <br />
 
 ## Quyên góp
 
-Termix miễn phí và mã nguồn mở, không có gói thuê bao hay bản trả phí. Nếu bạn thấy hữu ích, hãy cân nhắc quyên góp để giúp trang trải máy chủ, tên miền và thời gian phát triển. Quyên góp cũng giúp có thời gian tìm hiểu những thứ cần thiết cho các tính năng như SAML, Kubernetes và hỗ trợ agent. Theo dõi tiến độ và quyên góp ở bên dưới.
+Termix là dự án miễn phí và mã nguồn mở, không có gói đăng ký hay trả phí. Nếu bạn thấy hữu ích, hãy cân nhắc quyên góp để giúp trang trải chi phí máy chủ, tên miền và thời gian phát triển. Các khoản quyên góp cũng giúp tài trợ thời gian nghiên cứu và tìm hiểu những gì cần thiết để xây dựng các tính năng như SAML, Kubernetes và hỗ trợ Agent. Theo dõi tiến độ và quyên góp bên dưới.
 
 [Quyên góp](https://donate.termix.site/)
 
 <br />
 
-## Nhà tài trợ
+## Nha Tai Tro
 
-Bạn muốn đặt quảng cáo trả phí để ủng hộ việc phát triển? Gửi thư tới [mail@termix.site](mailto:mail@termix.site).
+Ban quan tam den viec dat quang cao tra phi de ho tro phat trien? Gui email toi [mail@termix.site](mailto:mail@termix.site).
 
 <div align="center">
 
@@ -410,6 +325,10 @@ Bạn muốn đặt quảng cáo trả phí để ủng hộ việc phát triể
   <img src="https://sirv.sirv.com/website/screenshots/cloudflare/cloudflare-logo.png?w=300" height="40" alt="Cloudflare" />
 </a>
 &nbsp;&nbsp;&nbsp;
+<a href="https://tailscale.com/">
+  <img src="https://drive.google.com/uc?export=view&id=1lIxkJuX6M23bW-2FElhT0rQieTrzaVSL" height="40" alt="Tailscale" />
+</a>
+&nbsp;&nbsp;&nbsp;
 <a href="https://akamai.com/">
   <img src="https://upload.wikimedia.org/wikipedia/commons/8/8b/Akamai_logo.svg" height="40" alt="Akamai" />
 </a>
@@ -421,21 +340,18 @@ Bạn muốn đặt quảng cáo trả phí để ủng hộ việc phát triể
 <a href="https://rackgenius.com/">
   <img src="https://rackgenius.com/rackgenius-logo.png" height="40" alt="Rack Genius" />
 </a>
-&nbsp;&nbsp;&nbsp;
-<a href="https://ginernet.com/">
-  <img src="https://ginernet.com/img/logo-web.png" height="40" alt="Ginernet" />
-</a>
+
 </div>
 
 <br />
 
-## Hỗ trợ
+## Ho Tro
 
-Cần giúp đỡ hoặc muốn đề xuất tính năng? Hãy mở một [issue mới](https://github.com/Termix-SSH/Support/issues) và mô tả càng chi tiết càng tốt, bằng tiếng Anh nếu được. Bạn cũng có thể hỏi trong kênh hỗ trợ trên [Discord](https://discord.gg/jVQGdvHDrf), tuy nhiên ở đó có thể lâu được trả lời hơn.
+Neu ban can tro giup hoac muon yeu cau tinh nang voi Termix, hay truy cap trang [Van De](https://github.com/Termix-SSH/Support/issues), dang nhap va nhan `New Issue`. Vui long mo ta van de cang chi tiet cang tot, uu tien viet bang tieng Anh. Ban cung co the tham gia may chu [Discord](https://discord.gg/jVQGdvHDrf) va truy cap kenh ho tro, tuy nhien thoi gian phan hoi co the lau hon.
 
 <br />
 
-## Ảnh chụp màn hình
+## Anh Chup Man Hinh
 
 <div align="center">
 
@@ -443,7 +359,7 @@ Cần giúp đỡ hoặc muốn đề xuất tính năng? Hãy mở một [issue
 
 [![YouTube](../repo-images/YouTube.png)](https://www.youtube.com/@TermixSSH/videos)
 
-<sub>Xem giới thiệu các bản cập nhật trên YouTube</sub>
+<sub>Xem tong quan cap nhat tren YouTube</sub>
 
 <br />
 <br />
@@ -483,18 +399,18 @@ Cần giúp đỡ hoặc muốn đề xuất tính năng? Hãy mở một [issue
 </tr>
 </table>
 
-<sub>Một số video và hình ảnh có thể đã cũ hoặc chưa thể hiện đầy đủ tính năng.</sub>
+<sub>Mot so video va hinh anh co the da loi thoi hoac khong the hien chinh xac hoan toan cac tinh nang.</sub>
 
 </div>
 
 <br />
 
-## Tính năng dự kiến
+## Tinh Nang Du Kien
 
-Toàn bộ tính năng dự kiến nằm ở [Projects](https://github.com/orgs/Termix-SSH/projects/5). Nếu bạn muốn đóng góp, xem [Contributing](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md).
+Xem [Du An](https://github.com/orgs/Termix-SSH/projects/5) de biet tat ca cac tinh nang du kien. Neu ban muon dong gop, xem [Dong Gop](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md).
 
 <br />
 
-## Giấy phép
+## Giay Phep
 
-Phát hành theo Giấy phép Apache phiên bản 2.0. Xem `LICENSE` để biết thêm chi tiết.
+Duoc phan phoi theo Giay Phep Apache Phien Ban 2.0. Xem `LICENSE` de biet them thong tin.

drizzle.config.mysql.ts

@@ -1,7 +0,0 @@
-import { defineConfig } from "drizzle-kit";
-
-export default defineConfig({
-  dialect: "mysql",
-  schema: "./src/backend/database/db/schema.mysql.ts",
-  out: "./drizzle/mysql",
-});

drizzle.config.pg.ts

@@ -1,7 +0,0 @@
-import { defineConfig } from "drizzle-kit";
-
-export default defineConfig({
-  dialect: "postgresql",
-  schema: "./src/backend/database/db/schema.pg.ts",
-  out: "./drizzle/postgres",
-});

drizzle.config.sqlite.ts

@@ -1,7 +0,0 @@
-import { defineConfig } from "drizzle-kit";
-
-export default defineConfig({
-  dialect: "sqlite",
-  schema: "./src/backend/database/db/schema.ts",
-  out: "./drizzle/sqlite",
-});

drizzle/mysql/0000_clean_pretty_boy.sql

@@ -1,890 +0,0 @@
-CREATE TABLE `alert_firings` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`user_id` varchar(255) NOT NULL,
-	`rule_id` int NOT NULL,
-	`host_id` int NOT NULL,
-	`host_name` text NOT NULL,
-	`fired_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	`resolved_at` text,
-	`value` double,
-	`message` text NOT NULL,
-	`severity` text NOT NULL DEFAULT ('warning'),
-	`acknowledged` boolean NOT NULL DEFAULT false,
-	CONSTRAINT `alert_firings_id` PRIMARY KEY(`id`)
-);
---> statement-breakpoint
-CREATE TABLE `alert_rule_channels` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`rule_id` int NOT NULL,
-	`channel_id` int NOT NULL,
-	CONSTRAINT `alert_rule_channels_id` PRIMARY KEY(`id`)
-);
---> statement-breakpoint
-CREATE TABLE `alert_rules` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`user_id` varchar(255) NOT NULL,
-	`host_id` int,
-	`name` varchar(255) NOT NULL,
-	`enabled` boolean NOT NULL DEFAULT true,
-	`trigger_type` text NOT NULL,
-	`threshold_value` double,
-	`threshold_duration_seconds` int,
-	`cooldown_minutes` int NOT NULL DEFAULT 15,
-	`created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	`updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `alert_rules_id` PRIMARY KEY(`id`)
-);
---> statement-breakpoint
-CREATE TABLE `api_keys` (
-	`id` varchar(255) NOT NULL,
-	`user_id` varchar(255) NOT NULL,
-	`name` varchar(255) NOT NULL,
-	`token_hash` text NOT NULL,
-	`token_prefix` text NOT NULL,
-	`created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	`expires_at` text,
-	`last_used_at` text,
-	`is_active` boolean NOT NULL DEFAULT true,
-	CONSTRAINT `api_keys_id` PRIMARY KEY(`id`)
-);
---> statement-breakpoint
-CREATE TABLE `audit_logs` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`user_id` varchar(255),
-	`username` text NOT NULL,
-	`action` text NOT NULL,
-	`resource_type` text NOT NULL,
-	`resource_id` text,
-	`resource_name` text,
-	`details` text,
-	`ip_address` text,
-	`user_agent` text,
-	`success` boolean NOT NULL,
-	`error_message` text,
-	`timestamp` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `audit_logs_id` PRIMARY KEY(`id`)
-);
---> statement-breakpoint
-CREATE TABLE `c2s_tunnel_presets` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`user_id` varchar(255) NOT NULL,
-	`name` varchar(255) NOT NULL,
-	`config` text NOT NULL,
-	`platform` text,
-	`computer_name` text,
-	`created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	`updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `c2s_tunnel_presets_id` PRIMARY KEY(`id`)
-);
---> statement-breakpoint
-CREATE TABLE `command_history` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`user_id` varchar(255) NOT NULL,
-	`host_id` int NOT NULL,
-	`command` text NOT NULL,
-	`executed_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `command_history_id` PRIMARY KEY(`id`)
-);
---> statement-breakpoint
-CREATE TABLE `dashboard_service_links` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`user_id` varchar(255) NOT NULL,
-	`label` text NOT NULL,
-	`url` text NOT NULL,
-	`order` int NOT NULL DEFAULT 0,
-	`sync_id` varchar(255),
-	`created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	`updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `dashboard_service_links_id` PRIMARY KEY(`id`),
-	CONSTRAINT `dashboard_service_links_sync_id_unique` UNIQUE(`sync_id`)
-);
---> statement-breakpoint
-CREATE TABLE `dismissed_alerts` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`user_id` varchar(255) NOT NULL,
-	`alert_id` text NOT NULL,
-	`dismissed_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `dismissed_alerts_id` PRIMARY KEY(`id`)
-);
---> statement-breakpoint
-CREATE TABLE `file_manager_pinned` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`user_id` varchar(255) NOT NULL,
-	`host_id` int NOT NULL,
-	`name` varchar(255) NOT NULL,
-	`path` text NOT NULL,
-	`pinned_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `file_manager_pinned_id` PRIMARY KEY(`id`)
-);
---> statement-breakpoint
-CREATE TABLE `file_manager_recent` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`user_id` varchar(255) NOT NULL,
-	`host_id` int NOT NULL,
-	`name` varchar(255) NOT NULL,
-	`path` text NOT NULL,
-	`last_opened` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `file_manager_recent_id` PRIMARY KEY(`id`)
-);
---> statement-breakpoint
-CREATE TABLE `file_manager_shortcuts` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`user_id` varchar(255) NOT NULL,
-	`host_id` int NOT NULL,
-	`name` varchar(255) NOT NULL,
-	`path` text NOT NULL,
-	`created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `file_manager_shortcuts_id` PRIMARY KEY(`id`)
-);
---> statement-breakpoint
-CREATE TABLE `homepage_items` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`user_id` varchar(255) NOT NULL,
-	`type_id` text NOT NULL,
-	`title` text,
-	`config` text NOT NULL DEFAULT ('{}'),
-	`folder_id` int,
-	`sync_id` varchar(255),
-	`created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	`updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `homepage_items_id` PRIMARY KEY(`id`),
-	CONSTRAINT `homepage_items_sync_id_unique` UNIQUE(`sync_id`)
-);
---> statement-breakpoint
-CREATE TABLE `homepage_layouts` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`user_id` varchar(255) NOT NULL,
-	`layout` text NOT NULL DEFAULT ('{}'),
-	`updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `homepage_layouts_id` PRIMARY KEY(`id`),
-	CONSTRAINT `homepage_layouts_user_id_unique` UNIQUE(`user_id`)
-);
---> statement-breakpoint
-CREATE TABLE `host_access` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`host_id` int NOT NULL,
-	`user_id` varchar(255),
-	`role_id` int,
-	`granted_by` varchar(255) NOT NULL,
-	`permission_level` text NOT NULL DEFAULT ('connect'),
-	`expires_at` text,
-	`created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	`last_accessed_at` text,
-	`access_count` int NOT NULL DEFAULT 0,
-	CONSTRAINT `host_access_id` PRIMARY KEY(`id`)
-);
---> statement-breakpoint
-CREATE TABLE `host_health_checks` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`user_id` varchar(255) NOT NULL,
-	`host_id` int NOT NULL,
-	`checks` text NOT NULL,
-	`interval_seconds` int NOT NULL DEFAULT 300,
-	`created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	`updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `host_health_checks_id` PRIMARY KEY(`id`),
-	CONSTRAINT `idx_host_health_checks_user_host` UNIQUE(`user_id`,`host_id`)
-);
---> statement-breakpoint
-CREATE TABLE `host_health_history` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`user_id` varchar(255) NOT NULL,
-	`host_id` int NOT NULL,
-	`check_id` text NOT NULL,
-	`ts` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	`ok` boolean NOT NULL,
-	`latency_ms` int,
-	`detail` text,
-	CONSTRAINT `host_health_history_id` PRIMARY KEY(`id`)
-);
---> statement-breakpoint
-CREATE TABLE `host_metrics_history` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`host_id` int NOT NULL,
-	`ts` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	`cpu_percent` double,
-	`mem_percent` double,
-	`disk_percent` double,
-	`net_rx_bytes` int,
-	`net_tx_bytes` int,
-	CONSTRAINT `host_metrics_history_id` PRIMARY KEY(`id`)
-);
---> statement-breakpoint
-CREATE TABLE `host_metrics_preferences` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`user_id` varchar(255) NOT NULL,
-	`host_id` int NOT NULL,
-	`layout` text NOT NULL,
-	`created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	`updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `host_metrics_preferences_id` PRIMARY KEY(`id`),
-	CONSTRAINT `idx_host_metrics_prefs_user_host` UNIQUE(`user_id`,`host_id`)
-);
---> statement-breakpoint
-CREATE TABLE `ssh_data` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`user_id` varchar(255) NOT NULL,
-	`connection_type` text NOT NULL DEFAULT ('ssh'),
-	`name` varchar(255),
-	`ip` text NOT NULL,
-	`port` int NOT NULL,
-	`username` text NOT NULL,
-	`folder` text,
-	`tags` text,
-	`pin` boolean NOT NULL DEFAULT false,
-	`auth_type` text NOT NULL,
-	`use_warpgate` boolean NOT NULL DEFAULT false,
-	`share_ssh_auth` boolean NOT NULL DEFAULT false,
-	`force_keyboard_interactive` text,
-	`password` text,
-	`key` text,
-	`key_password` text,
-	`key_type` text,
-	`sudo_password` text,
-	`autostart_password` text,
-	`autostart_key` text,
-	`autostart_key_password` text,
-	`credential_id` int,
-	`override_credential_username` boolean,
-	`vault_profile_id` int,
-	`enable_terminal` boolean NOT NULL DEFAULT true,
-	`enable_session_logging` boolean NOT NULL DEFAULT true,
-	`allow_session_sharing` boolean NOT NULL DEFAULT true,
-	`enable_command_history` boolean NOT NULL DEFAULT true,
-	`enable_tunnel` boolean NOT NULL DEFAULT true,
-	`tunnel_connections` text,
-	`jump_hosts` text,
-	`enable_file_manager` boolean NOT NULL DEFAULT true,
-	`scp_legacy` boolean NOT NULL DEFAULT false,
-	`enable_docker` boolean NOT NULL DEFAULT false,
-	`enable_tmux_monitor` boolean NOT NULL DEFAULT false,
-	`show_terminal_in_sidebar` boolean NOT NULL DEFAULT true,
-	`show_file_manager_in_sidebar` boolean NOT NULL DEFAULT false,
-	`show_tunnel_in_sidebar` boolean NOT NULL DEFAULT false,
-	`show_docker_in_sidebar` boolean NOT NULL DEFAULT false,
-	`show_server_stats_in_sidebar` boolean NOT NULL DEFAULT false,
-	`default_path` text,
-	`stats_config` text,
-	`docker_config` text,
-	`enable_proxmox` boolean NOT NULL DEFAULT false,
-	`proxmox_config` text,
-	`terminal_config` text,
-	`quick_actions` text,
-	`notes` text,
-	`enable_ssh` boolean NOT NULL DEFAULT true,
-	`enable_rdp` boolean NOT NULL DEFAULT false,
-	`enable_vnc` boolean NOT NULL DEFAULT false,
-	`enable_telnet` boolean NOT NULL DEFAULT false,
-	`ssh_port` int DEFAULT 22,
-	`rdp_port` int DEFAULT 3389,
-	`vnc_port` int DEFAULT 5900,
-	`telnet_port` int DEFAULT 23,
-	`rdp_credential_id` int,
-	`rdp_user` text,
-	`rdp_password` text,
-	`rdp_domain` text,
-	`rdp_security` text,
-	`rdp_ignore_cert` boolean DEFAULT false,
-	`vnc_credential_id` int,
-	`vnc_password` text,
-	`vnc_user` text,
-	`telnet_user` text,
-	`telnet_password` text,
-	`telnet_credential_id` int,
-	`rdp_auth_type` text,
-	`vnc_auth_type` text,
-	`telnet_auth_type` text,
-	`domain` text,
-	`security` text,
-	`ignore_cert` boolean DEFAULT false,
-	`guacamole_config` text,
-	`use_socks5` boolean,
-	`socks5_host` text,
-	`socks5_port` int,
-	`socks5_username` text,
-	`socks5_password` text,
-	`socks5_proxy_chain` text,
-	`connection_origin` text,
-	`mac_address` text,
-	`wol_broadcast_address` text,
-	`port_knock_sequence` text,
-	`host_key_fingerprint` text,
-	`host_key_type` text,
-	`host_key_algorithm` text DEFAULT ('sha256'),
-	`host_key_first_seen` text,
-	`host_key_last_verified` text,
-	`host_key_changed_count` int DEFAULT 0,
-	`sync_id` varchar(255),
-	`created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	`updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `ssh_data_id` PRIMARY KEY(`id`),
-	CONSTRAINT `ssh_data_sync_id_unique` UNIQUE(`sync_id`)
-);
---> statement-breakpoint
-CREATE TABLE `network_topology` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`user_id` varchar(255) NOT NULL,
-	`topology` text,
-	`created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	`updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `network_topology_id` PRIMARY KEY(`id`)
-);
---> statement-breakpoint
-CREATE TABLE `notification_channels` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`user_id` varchar(255) NOT NULL,
-	`name` varchar(255) NOT NULL,
-	`type` text NOT NULL,
-	`config` text NOT NULL,
-	`enabled` boolean NOT NULL DEFAULT true,
-	`created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `notification_channels_id` PRIMARY KEY(`id`)
-);
---> statement-breakpoint
-CREATE TABLE `opkssh_tokens` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`user_id` varchar(255) NOT NULL,
-	`host_id` int NOT NULL,
-	`ssh_cert` text NOT NULL,
-	`private_key` text NOT NULL,
-	`email` text,
-	`sub` text,
-	`issuer` text,
-	`audience` text,
-	`created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	`expires_at` text NOT NULL,
-	`last_used` text,
-	CONSTRAINT `opkssh_tokens_id` PRIMARY KEY(`id`),
-	CONSTRAINT `idx_opkssh_tokens_user_host` UNIQUE(`user_id`,`host_id`)
-);
---> statement-breakpoint
-CREATE TABLE `recent_activity` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`user_id` varchar(255) NOT NULL,
-	`type` text NOT NULL,
-	`host_id` int NOT NULL,
-	`host_name` text,
-	`timestamp` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `recent_activity_id` PRIMARY KEY(`id`)
-);
---> statement-breakpoint
-CREATE TABLE `roles` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`name` varchar(255) NOT NULL,
-	`display_name` text NOT NULL,
-	`description` text,
-	`is_system` boolean NOT NULL DEFAULT false,
-	`permissions` text,
-	`created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	`updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `roles_id` PRIMARY KEY(`id`),
-	CONSTRAINT `roles_name_unique` UNIQUE(`name`)
-);
---> statement-breakpoint
-CREATE TABLE `session_recordings` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`host_id` int NOT NULL,
-	`user_id` varchar(255),
-	`username` text,
-	`access_id` int,
-	`started_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	`ended_at` text,
-	`duration` int,
-	`commands` text,
-	`dangerous_actions` text,
-	`recording_path` text,
-	`protocol` varchar(255) NOT NULL DEFAULT 'ssh',
-	`format` text NOT NULL DEFAULT ('text'),
-	`terminated_by_owner` boolean DEFAULT false,
-	`termination_reason` text,
-	CONSTRAINT `session_recordings_id` PRIMARY KEY(`id`)
-);
---> statement-breakpoint
-CREATE TABLE `session_share_participants` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`share_id` varchar(255) NOT NULL,
-	`user_id` varchar(255),
-	`guest_label` text,
-	`joined_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	`left_at` text,
-	CONSTRAINT `session_share_participants_id` PRIMARY KEY(`id`)
-);
---> statement-breakpoint
-CREATE TABLE `session_shares` (
-	`id` varchar(255) NOT NULL,
-	`host_id` int NOT NULL,
-	`owner_user_id` varchar(255) NOT NULL,
-	`protocol` varchar(255) NOT NULL,
-	`session_id` text NOT NULL,
-	`tab_instance_id` text,
-	`share_type` text NOT NULL,
-	`target_user_id` varchar(255),
-	`link_token` varchar(255),
-	`permission_level` text NOT NULL DEFAULT ('read-only'),
-	`created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	`expires_at` text NOT NULL,
-	`revoked_at` text,
-	`last_joined_at` text,
-	`join_count` int NOT NULL DEFAULT 0,
-	CONSTRAINT `session_shares_id` PRIMARY KEY(`id`),
-	CONSTRAINT `session_shares_link_token_unique` UNIQUE(`link_token`)
-);
---> statement-breakpoint
-CREATE TABLE `sessions` (
-	`id` varchar(255) NOT NULL,
-	`user_id` varchar(255) NOT NULL,
-	`jwt_token` text NOT NULL,
-	`device_type` text NOT NULL,
-	`device_info` text NOT NULL,
-	`oidc_sub` text,
-	`oidc_sid` text,
-	`sso_provider_id` int,
-	`created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	`expires_at` text NOT NULL,
-	`last_active_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `sessions_id` PRIMARY KEY(`id`)
-);
---> statement-breakpoint
-CREATE TABLE `settings` (
-	`key` varchar(255) NOT NULL,
-	`value` text NOT NULL,
-	CONSTRAINT `settings_key` PRIMARY KEY(`key`)
-);
---> statement-breakpoint
-CREATE TABLE `shared_host_auth_overrides` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`host_id` int NOT NULL,
-	`user_id` varchar(255) NOT NULL,
-	`protocol` varchar(255) NOT NULL DEFAULT 'ssh',
-	`credential_id` int NOT NULL,
-	`created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	`updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `shared_host_auth_overrides_id` PRIMARY KEY(`id`),
-	CONSTRAINT `shared_host_auth_overrides_host_user_protocol_unique` UNIQUE(`host_id`,`user_id`,`protocol`)
-);
---> statement-breakpoint
-CREATE TABLE `shared_host_secrets` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`host_access_id` int NOT NULL,
-	`target_user_id` varchar(255) NOT NULL,
-	`protocol` varchar(255) NOT NULL DEFAULT 'ssh',
-	`source_type` text NOT NULL DEFAULT ('credential'),
-	`original_credential_id` int,
-	`encrypted_username` text,
-	`encrypted_auth_type` text,
-	`encrypted_password` text,
-	`encrypted_key` text,
-	`encrypted_key_password` text,
-	`encrypted_key_type` text,
-	`encrypted_domain` text,
-	`created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	`updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `shared_host_secrets_id` PRIMARY KEY(`id`),
-	CONSTRAINT `idx_shared_host_secrets_scope` UNIQUE(`host_access_id`,`target_user_id`,`protocol`)
-);
---> statement-breakpoint
-CREATE TABLE `snippet_access` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`snippet_id` int NOT NULL,
-	`user_id` varchar(255),
-	`role_id` int,
-	`granted_by` varchar(255) NOT NULL,
-	`permission_level` text NOT NULL DEFAULT ('view'),
-	`expires_at` text,
-	`created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `snippet_access_id` PRIMARY KEY(`id`)
-);
---> statement-breakpoint
-CREATE TABLE `snippet_folders` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`user_id` varchar(255) NOT NULL,
-	`name` varchar(255) NOT NULL,
-	`color` text,
-	`icon` text,
-	`sync_id` varchar(255),
-	`created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	`updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `snippet_folders_id` PRIMARY KEY(`id`),
-	CONSTRAINT `snippet_folders_sync_id_unique` UNIQUE(`sync_id`)
-);
---> statement-breakpoint
-CREATE TABLE `snippets` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`user_id` varchar(255) NOT NULL,
-	`name` varchar(255) NOT NULL,
-	`content` text NOT NULL,
-	`description` text,
-	`folder` text,
-	`order` int NOT NULL DEFAULT 0,
-	`sync_id` varchar(255),
-	`created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	`updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	`host_filter` text,
-	CONSTRAINT `snippets_id` PRIMARY KEY(`id`),
-	CONSTRAINT `snippets_sync_id_unique` UNIQUE(`sync_id`)
-);
---> statement-breakpoint
-CREATE TABLE `ssh_credential_usage` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`credential_id` int NOT NULL,
-	`host_id` int NOT NULL,
-	`user_id` varchar(255) NOT NULL,
-	`used_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `ssh_credential_usage_id` PRIMARY KEY(`id`)
-);
---> statement-breakpoint
-CREATE TABLE `ssh_credentials` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`user_id` varchar(255) NOT NULL,
-	`name` varchar(255) NOT NULL,
-	`description` text,
-	`folder` text,
-	`tags` text,
-	`auth_type` text NOT NULL,
-	`username` text,
-	`password` text,
-	`key` text,
-	`private_key` text,
-	`public_key` text,
-	`key_password` text,
-	`key_type` text,
-	`detected_key_type` text,
-	`cert_public_key` text,
-	`usage_count` int NOT NULL DEFAULT 0,
-	`last_used` text,
-	`sync_id` varchar(255),
-	`created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	`updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `ssh_credentials_id` PRIMARY KEY(`id`),
-	CONSTRAINT `ssh_credentials_sync_id_unique` UNIQUE(`sync_id`)
-);
---> statement-breakpoint
-CREATE TABLE `ssh_folders` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`user_id` varchar(255) NOT NULL,
-	`name` varchar(255) NOT NULL,
-	`color` text,
-	`icon` text,
-	`credential_id` int,
-	`sync_id` varchar(255),
-	`created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	`updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `ssh_folders_id` PRIMARY KEY(`id`),
-	CONSTRAINT `ssh_folders_sync_id_unique` UNIQUE(`sync_id`)
-);
---> statement-breakpoint
-CREATE TABLE `sso_providers` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`name` varchar(255) NOT NULL,
-	`type` text NOT NULL,
-	`enabled` boolean NOT NULL DEFAULT true,
-	`display_order` int NOT NULL DEFAULT 0,
-	`config` text NOT NULL,
-	`created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	`updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `sso_providers_id` PRIMARY KEY(`id`)
-);
---> statement-breakpoint
-CREATE TABLE `sync_tombstones` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`user_id` varchar(255) NOT NULL,
-	`entity_type` text NOT NULL,
-	`sync_id` varchar(255) NOT NULL,
-	`deleted_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `sync_tombstones_id` PRIMARY KEY(`id`)
-);
---> statement-breakpoint
-CREATE TABLE `termix_identities` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`user_id` varchar(255) NOT NULL,
-	`handle` varchar(255) NOT NULL,
-	`description` text,
-	`created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	`updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `termix_identities_id` PRIMARY KEY(`id`),
-	CONSTRAINT `termix_identities_user_id_unique` UNIQUE(`user_id`),
-	CONSTRAINT `termix_identities_handle_unique` UNIQUE(`handle`)
-);
---> statement-breakpoint
-CREATE TABLE `termix_identity_ca` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`identity_id` int NOT NULL,
-	`user_id` varchar(255) NOT NULL,
-	`public_key` text NOT NULL,
-	`private_key` text NOT NULL,
-	`validity_days` int NOT NULL DEFAULT 90,
-	`created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	`updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `termix_identity_ca_id` PRIMARY KEY(`id`),
-	CONSTRAINT `termix_identity_ca_identity_id_unique` UNIQUE(`identity_id`)
-);
---> statement-breakpoint
-CREATE TABLE `termix_identity_keys` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`identity_id` int NOT NULL,
-	`user_id` varchar(255) NOT NULL,
-	`public_key` text NOT NULL,
-	`key_type` text NOT NULL,
-	`algorithm` text NOT NULL,
-	`label` text,
-	`comment` text,
-	`source` text NOT NULL DEFAULT ('manual'),
-	`credential_id` int,
-	`enabled` boolean NOT NULL DEFAULT true,
-	`created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `termix_identity_keys_id` PRIMARY KEY(`id`)
-);
---> statement-breakpoint
-CREATE TABLE `tmux_session_tags` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`user_id` varchar(255) NOT NULL,
-	`host_id` int NOT NULL,
-	`session_name` text NOT NULL,
-	`tag` text NOT NULL,
-	`created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `tmux_session_tags_id` PRIMARY KEY(`id`)
-);
---> statement-breakpoint
-CREATE TABLE `transfer_recent` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`user_id` varchar(255) NOT NULL,
-	`source_host_id` int NOT NULL,
-	`dest_host_id` int NOT NULL,
-	`dest_path` text NOT NULL,
-	`dest_path_label` text NOT NULL,
-	`last_used` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `transfer_recent_id` PRIMARY KEY(`id`)
-);
---> statement-breakpoint
-CREATE TABLE `trusted_devices` (
-	`id` varchar(255) NOT NULL,
-	`user_id` varchar(255) NOT NULL,
-	`device_fingerprint` text NOT NULL,
-	`device_type` text NOT NULL,
-	`device_info` text NOT NULL,
-	`created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	`expires_at` text NOT NULL,
-	`last_used_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `trusted_devices_id` PRIMARY KEY(`id`)
-);
---> statement-breakpoint
-CREATE TABLE `user_open_tabs` (
-	`id` varchar(255) NOT NULL,
-	`user_id` varchar(255) NOT NULL,
-	`tab_type` text NOT NULL,
-	`host_id` int,
-	`label` text NOT NULL,
-	`tab_order` int NOT NULL DEFAULT 0,
-	`backend_session_id` text,
-	`created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	`updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `user_open_tabs_id` PRIMARY KEY(`id`)
-);
---> statement-breakpoint
-CREATE TABLE `user_preferences` (
-	`user_id` varchar(255) NOT NULL,
-	`reopen_tabs_on_login` boolean NOT NULL DEFAULT false,
-	`theme` text,
-	`font_size` text,
-	`accent_color` text,
-	`language` text,
-	`storage_mode` text,
-	`command_autocomplete` boolean,
-	`command_palette_enabled` boolean,
-	`show_host_tags` boolean,
-	`host_tray_on_click` boolean,
-	`pin_app_rail` boolean,
-	`expand_app_rail_on_hover` boolean,
-	`folders_collapsed` boolean,
-	`confirm_snippet_execution` boolean,
-	`disable_update_check` boolean,
-	`confirm_tab_close` boolean,
-	`hidden_rail_tabs` text,
-	`compact_host_view` boolean,
-	`status_color_scheme` text,
-	`custom_themes` text,
-	`custom_keybindings` text,
-	`updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `user_preferences_user_id` PRIMARY KEY(`user_id`)
-);
---> statement-breakpoint
-CREATE TABLE `user_roles` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`user_id` varchar(255) NOT NULL,
-	`role_id` int NOT NULL,
-	`granted_by` varchar(255),
-	`granted_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `user_roles_id` PRIMARY KEY(`id`),
-	CONSTRAINT `idx_user_roles_user_role` UNIQUE(`user_id`,`role_id`)
-);
---> statement-breakpoint
-CREATE TABLE `users` (
-	`id` varchar(255) NOT NULL,
-	`username` text NOT NULL,
-	`password_hash` text NOT NULL,
-	`is_admin` boolean NOT NULL DEFAULT false,
-	`is_oidc` boolean NOT NULL DEFAULT false,
-	`oidc_identifier` text,
-	`sso_provider_id` int,
-	`client_id` text,
-	`client_secret` text,
-	`issuer_url` text,
-	`authorization_url` text,
-	`token_url` text,
-	`identifier_path` text,
-	`name_path` text,
-	`scopes` text DEFAULT ('openid email profile'),
-	`totp_secret` text,
-	`totp_enabled` boolean NOT NULL DEFAULT false,
-	`totp_backup_codes` text,
-	`registered_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	`donation_modal_dismissed` boolean NOT NULL DEFAULT false,
-	CONSTRAINT `users_id` PRIMARY KEY(`id`)
-);
---> statement-breakpoint
-CREATE TABLE `vault_profiles` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`user_id` varchar(255) NOT NULL,
-	`name` varchar(255) NOT NULL,
-	`description` text,
-	`folder` text,
-	`tags` text,
-	`vault_addr` text NOT NULL,
-	`vault_namespace` text,
-	`oidc_mount` text,
-	`oidc_role` text,
-	`ssh_mount` text,
-	`ssh_role` text NOT NULL,
-	`valid_principals` text,
-	`key_type` text,
-	`shared` boolean NOT NULL DEFAULT false,
-	`sync_id` varchar(255),
-	`created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	`updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `vault_profiles_id` PRIMARY KEY(`id`),
-	CONSTRAINT `vault_profiles_sync_id_unique` UNIQUE(`sync_id`)
-);
---> statement-breakpoint
-CREATE TABLE `vault_tokens` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`user_id` varchar(255) NOT NULL,
-	`profile_id` int NOT NULL,
-	`ssh_cert` text NOT NULL,
-	`private_key` text NOT NULL,
-	`created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	`expires_at` text NOT NULL,
-	`last_used` text,
-	CONSTRAINT `vault_tokens_id` PRIMARY KEY(`id`),
-	CONSTRAINT `idx_vault_tokens_user_profile` UNIQUE(`user_id`,`profile_id`)
-);
---> statement-breakpoint
-CREATE TABLE `webauthn_credentials` (
-	`id` varchar(255) NOT NULL,
-	`user_id` varchar(255) NOT NULL,
-	`name` varchar(255) NOT NULL,
-	`credential_id` text NOT NULL,
-	`public_key` text NOT NULL,
-	`counter` int NOT NULL DEFAULT 0,
-	`device_type` text,
-	`backed_up` boolean NOT NULL DEFAULT false,
-	`transports` text,
-	`user_verification` text NOT NULL DEFAULT ('preferred'),
-	`created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	`last_used_at` text,
-	CONSTRAINT `webauthn_credentials_id` PRIMARY KEY(`id`)
-);
---> statement-breakpoint
-ALTER TABLE `alert_firings` ADD CONSTRAINT `alert_firings_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `alert_firings` ADD CONSTRAINT `alert_firings_rule_id_alert_rules_id_fk` FOREIGN KEY (`rule_id`) REFERENCES `alert_rules`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `alert_rule_channels` ADD CONSTRAINT `alert_rule_channels_rule_id_alert_rules_id_fk` FOREIGN KEY (`rule_id`) REFERENCES `alert_rules`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `alert_rule_channels` ADD CONSTRAINT `alert_rule_channels_channel_id_notification_channels_id_fk` FOREIGN KEY (`channel_id`) REFERENCES `notification_channels`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `alert_rules` ADD CONSTRAINT `alert_rules_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `alert_rules` ADD CONSTRAINT `alert_rules_host_id_ssh_data_id_fk` FOREIGN KEY (`host_id`) REFERENCES `ssh_data`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `api_keys` ADD CONSTRAINT `api_keys_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `audit_logs` ADD CONSTRAINT `audit_logs_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE set null ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `c2s_tunnel_presets` ADD CONSTRAINT `c2s_tunnel_presets_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `command_history` ADD CONSTRAINT `command_history_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `command_history` ADD CONSTRAINT `command_history_host_id_ssh_data_id_fk` FOREIGN KEY (`host_id`) REFERENCES `ssh_data`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `dashboard_service_links` ADD CONSTRAINT `dashboard_service_links_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `dismissed_alerts` ADD CONSTRAINT `dismissed_alerts_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `file_manager_pinned` ADD CONSTRAINT `file_manager_pinned_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `file_manager_pinned` ADD CONSTRAINT `file_manager_pinned_host_id_ssh_data_id_fk` FOREIGN KEY (`host_id`) REFERENCES `ssh_data`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `file_manager_recent` ADD CONSTRAINT `file_manager_recent_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `file_manager_recent` ADD CONSTRAINT `file_manager_recent_host_id_ssh_data_id_fk` FOREIGN KEY (`host_id`) REFERENCES `ssh_data`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `file_manager_shortcuts` ADD CONSTRAINT `file_manager_shortcuts_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `file_manager_shortcuts` ADD CONSTRAINT `file_manager_shortcuts_host_id_ssh_data_id_fk` FOREIGN KEY (`host_id`) REFERENCES `ssh_data`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `homepage_items` ADD CONSTRAINT `homepage_items_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `homepage_layouts` ADD CONSTRAINT `homepage_layouts_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `host_access` ADD CONSTRAINT `host_access_host_id_ssh_data_id_fk` FOREIGN KEY (`host_id`) REFERENCES `ssh_data`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `host_access` ADD CONSTRAINT `host_access_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `host_access` ADD CONSTRAINT `host_access_role_id_roles_id_fk` FOREIGN KEY (`role_id`) REFERENCES `roles`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `host_access` ADD CONSTRAINT `host_access_granted_by_users_id_fk` FOREIGN KEY (`granted_by`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `host_health_checks` ADD CONSTRAINT `host_health_checks_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `host_health_checks` ADD CONSTRAINT `host_health_checks_host_id_ssh_data_id_fk` FOREIGN KEY (`host_id`) REFERENCES `ssh_data`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `host_health_history` ADD CONSTRAINT `host_health_history_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `host_health_history` ADD CONSTRAINT `host_health_history_host_id_ssh_data_id_fk` FOREIGN KEY (`host_id`) REFERENCES `ssh_data`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `host_metrics_history` ADD CONSTRAINT `host_metrics_history_host_id_ssh_data_id_fk` FOREIGN KEY (`host_id`) REFERENCES `ssh_data`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `host_metrics_preferences` ADD CONSTRAINT `host_metrics_preferences_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `host_metrics_preferences` ADD CONSTRAINT `host_metrics_preferences_host_id_ssh_data_id_fk` FOREIGN KEY (`host_id`) REFERENCES `ssh_data`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `ssh_data` ADD CONSTRAINT `ssh_data_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `ssh_data` ADD CONSTRAINT `ssh_data_credential_id_ssh_credentials_id_fk` FOREIGN KEY (`credential_id`) REFERENCES `ssh_credentials`(`id`) ON DELETE set null ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `ssh_data` ADD CONSTRAINT `ssh_data_vault_profile_id_vault_profiles_id_fk` FOREIGN KEY (`vault_profile_id`) REFERENCES `vault_profiles`(`id`) ON DELETE set null ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `ssh_data` ADD CONSTRAINT `ssh_data_rdp_credential_id_ssh_credentials_id_fk` FOREIGN KEY (`rdp_credential_id`) REFERENCES `ssh_credentials`(`id`) ON DELETE set null ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `ssh_data` ADD CONSTRAINT `ssh_data_vnc_credential_id_ssh_credentials_id_fk` FOREIGN KEY (`vnc_credential_id`) REFERENCES `ssh_credentials`(`id`) ON DELETE set null ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `ssh_data` ADD CONSTRAINT `ssh_data_telnet_credential_id_ssh_credentials_id_fk` FOREIGN KEY (`telnet_credential_id`) REFERENCES `ssh_credentials`(`id`) ON DELETE set null ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `network_topology` ADD CONSTRAINT `network_topology_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `notification_channels` ADD CONSTRAINT `notification_channels_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `opkssh_tokens` ADD CONSTRAINT `opkssh_tokens_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `opkssh_tokens` ADD CONSTRAINT `opkssh_tokens_host_id_ssh_data_id_fk` FOREIGN KEY (`host_id`) REFERENCES `ssh_data`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `recent_activity` ADD CONSTRAINT `recent_activity_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `recent_activity` ADD CONSTRAINT `recent_activity_host_id_ssh_data_id_fk` FOREIGN KEY (`host_id`) REFERENCES `ssh_data`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `session_recordings` ADD CONSTRAINT `session_recordings_host_id_ssh_data_id_fk` FOREIGN KEY (`host_id`) REFERENCES `ssh_data`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `session_recordings` ADD CONSTRAINT `session_recordings_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE set null ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `session_recordings` ADD CONSTRAINT `session_recordings_access_id_host_access_id_fk` FOREIGN KEY (`access_id`) REFERENCES `host_access`(`id`) ON DELETE set null ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `session_share_participants` ADD CONSTRAINT `session_share_participants_share_id_session_shares_id_fk` FOREIGN KEY (`share_id`) REFERENCES `session_shares`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `session_share_participants` ADD CONSTRAINT `session_share_participants_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `session_shares` ADD CONSTRAINT `session_shares_host_id_ssh_data_id_fk` FOREIGN KEY (`host_id`) REFERENCES `ssh_data`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `session_shares` ADD CONSTRAINT `session_shares_owner_user_id_users_id_fk` FOREIGN KEY (`owner_user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `session_shares` ADD CONSTRAINT `session_shares_target_user_id_users_id_fk` FOREIGN KEY (`target_user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `sessions` ADD CONSTRAINT `sessions_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `shared_host_auth_overrides` ADD CONSTRAINT `shared_host_auth_overrides_host_id_ssh_data_id_fk` FOREIGN KEY (`host_id`) REFERENCES `ssh_data`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `shared_host_auth_overrides` ADD CONSTRAINT `shared_host_auth_overrides_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `shared_host_auth_overrides` ADD CONSTRAINT `shared_host_auth_overrides_credential_id_ssh_credentials_id_fk` FOREIGN KEY (`credential_id`) REFERENCES `ssh_credentials`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `shared_host_secrets` ADD CONSTRAINT `shared_host_secrets_host_access_id_host_access_id_fk` FOREIGN KEY (`host_access_id`) REFERENCES `host_access`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `shared_host_secrets` ADD CONSTRAINT `shared_host_secrets_target_user_id_users_id_fk` FOREIGN KEY (`target_user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `shared_host_secrets` ADD CONSTRAINT `shared_host_secrets_original_credential_id_ssh_credentials_id_fk` FOREIGN KEY (`original_credential_id`) REFERENCES `ssh_credentials`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `snippet_access` ADD CONSTRAINT `snippet_access_snippet_id_snippets_id_fk` FOREIGN KEY (`snippet_id`) REFERENCES `snippets`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `snippet_access` ADD CONSTRAINT `snippet_access_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `snippet_access` ADD CONSTRAINT `snippet_access_role_id_roles_id_fk` FOREIGN KEY (`role_id`) REFERENCES `roles`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `snippet_access` ADD CONSTRAINT `snippet_access_granted_by_users_id_fk` FOREIGN KEY (`granted_by`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `snippet_folders` ADD CONSTRAINT `snippet_folders_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `snippets` ADD CONSTRAINT `snippets_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `ssh_credential_usage` ADD CONSTRAINT `ssh_credential_usage_credential_id_ssh_credentials_id_fk` FOREIGN KEY (`credential_id`) REFERENCES `ssh_credentials`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `ssh_credential_usage` ADD CONSTRAINT `ssh_credential_usage_host_id_ssh_data_id_fk` FOREIGN KEY (`host_id`) REFERENCES `ssh_data`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `ssh_credential_usage` ADD CONSTRAINT `ssh_credential_usage_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `ssh_credentials` ADD CONSTRAINT `ssh_credentials_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `ssh_folders` ADD CONSTRAINT `ssh_folders_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `ssh_folders` ADD CONSTRAINT `ssh_folders_credential_id_ssh_credentials_id_fk` FOREIGN KEY (`credential_id`) REFERENCES `ssh_credentials`(`id`) ON DELETE set null ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `sync_tombstones` ADD CONSTRAINT `sync_tombstones_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `termix_identities` ADD CONSTRAINT `termix_identities_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `termix_identity_ca` ADD CONSTRAINT `termix_identity_ca_identity_id_termix_identities_id_fk` FOREIGN KEY (`identity_id`) REFERENCES `termix_identities`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `termix_identity_ca` ADD CONSTRAINT `termix_identity_ca_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `termix_identity_keys` ADD CONSTRAINT `termix_identity_keys_identity_id_termix_identities_id_fk` FOREIGN KEY (`identity_id`) REFERENCES `termix_identities`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `termix_identity_keys` ADD CONSTRAINT `termix_identity_keys_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `termix_identity_keys` ADD CONSTRAINT `termix_identity_keys_credential_id_ssh_credentials_id_fk` FOREIGN KEY (`credential_id`) REFERENCES `ssh_credentials`(`id`) ON DELETE set null ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `tmux_session_tags` ADD CONSTRAINT `tmux_session_tags_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `tmux_session_tags` ADD CONSTRAINT `tmux_session_tags_host_id_ssh_data_id_fk` FOREIGN KEY (`host_id`) REFERENCES `ssh_data`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `transfer_recent` ADD CONSTRAINT `transfer_recent_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `transfer_recent` ADD CONSTRAINT `transfer_recent_source_host_id_ssh_data_id_fk` FOREIGN KEY (`source_host_id`) REFERENCES `ssh_data`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `transfer_recent` ADD CONSTRAINT `transfer_recent_dest_host_id_ssh_data_id_fk` FOREIGN KEY (`dest_host_id`) REFERENCES `ssh_data`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `trusted_devices` ADD CONSTRAINT `trusted_devices_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `user_open_tabs` ADD CONSTRAINT `user_open_tabs_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `user_open_tabs` ADD CONSTRAINT `user_open_tabs_host_id_ssh_data_id_fk` FOREIGN KEY (`host_id`) REFERENCES `ssh_data`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `user_preferences` ADD CONSTRAINT `user_preferences_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `user_roles` ADD CONSTRAINT `user_roles_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `user_roles` ADD CONSTRAINT `user_roles_role_id_roles_id_fk` FOREIGN KEY (`role_id`) REFERENCES `roles`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `user_roles` ADD CONSTRAINT `user_roles_granted_by_users_id_fk` FOREIGN KEY (`granted_by`) REFERENCES `users`(`id`) ON DELETE set null ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `vault_profiles` ADD CONSTRAINT `vault_profiles_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `vault_tokens` ADD CONSTRAINT `vault_tokens_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `vault_tokens` ADD CONSTRAINT `vault_tokens_profile_id_vault_profiles_id_fk` FOREIGN KEY (`profile_id`) REFERENCES `vault_profiles`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `webauthn_credentials` ADD CONSTRAINT `webauthn_credentials_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;

drizzle/mysql/0001_puzzling_aqueduct.sql

@@ -1,10 +0,0 @@
-CREATE TABLE `host_sidebar_preferences` (
-	`user_id` varchar(255) NOT NULL,
-	`data` text NOT NULL,
-	`updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `host_sidebar_preferences_user_id` PRIMARY KEY(`user_id`)
-);
---> statement-breakpoint
-ALTER TABLE `ssh_data` ADD `sort_order` int;--> statement-breakpoint
-ALTER TABLE `ssh_folders` ADD `sort_order` int;--> statement-breakpoint
-ALTER TABLE `host_sidebar_preferences` ADD CONSTRAINT `host_sidebar_preferences_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;

drizzle/mysql/0002_bumpy_korg.sql

@@ -1,10 +0,0 @@
-CREATE TABLE `credential_sidebar_preferences` (
-	`user_id` varchar(255) NOT NULL,
-	`data` text NOT NULL,
-	`updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `credential_sidebar_preferences_user_id` PRIMARY KEY(`user_id`)
-);
---> statement-breakpoint
-ALTER TABLE `ssh_credentials` ADD `pin` boolean DEFAULT false NOT NULL;--> statement-breakpoint
-ALTER TABLE `ssh_credentials` ADD `sort_order` int;--> statement-breakpoint
-ALTER TABLE `credential_sidebar_preferences` ADD CONSTRAINT `credential_sidebar_preferences_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;

drizzle/mysql/0003_dry_human_robot.sql

@@ -1 +0,0 @@
-ALTER TABLE `snippets` ADD `is_note` boolean DEFAULT false NOT NULL;

drizzle/mysql/0004_fancy_spencer_smythe.sql

@@ -1,28 +0,0 @@
-CREATE TABLE `proxmox_node_history` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`host_id` int NOT NULL,
-	`ts` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	`cpu_percent` double,
-	`mem_percent` double,
-	`disk_percent` double,
-	`net_rx_bytes` int,
-	`net_tx_bytes` int,
-	CONSTRAINT `proxmox_node_history_id` PRIMARY KEY(`id`)
-);
---> statement-breakpoint
-CREATE TABLE `proxmox_stats_preferences` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`user_id` varchar(255) NOT NULL,
-	`host_id` int NOT NULL,
-	`layout` text NOT NULL,
-	`created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	`updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `proxmox_stats_preferences_id` PRIMARY KEY(`id`),
-	CONSTRAINT `idx_proxmox_stats_prefs_user_host` UNIQUE(`user_id`,`host_id`)
-);
---> statement-breakpoint
-ALTER TABLE `ssh_data` ADD `enable_proxmox_stats` boolean DEFAULT false NOT NULL;--> statement-breakpoint
-ALTER TABLE `ssh_data` ADD `proxmox_stats_config` text;--> statement-breakpoint
-ALTER TABLE `proxmox_node_history` ADD CONSTRAINT `proxmox_node_history_host_id_ssh_data_id_fk` FOREIGN KEY (`host_id`) REFERENCES `ssh_data`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `proxmox_stats_preferences` ADD CONSTRAINT `proxmox_stats_preferences_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `proxmox_stats_preferences` ADD CONSTRAINT `proxmox_stats_preferences_host_id_ssh_data_id_fk` FOREIGN KEY (`host_id`) REFERENCES `ssh_data`(`id`) ON DELETE cascade ON UPDATE no action;

drizzle/mysql/0005_tearful_mindworm.sql

@@ -1 +0,0 @@
-ALTER TABLE `ssh_data` ADD `enable_terminal_toolbar` boolean DEFAULT true NOT NULL;

drizzle/mysql/0006_last_fantastic_four.sql

@@ -1,45 +0,0 @@
-CREATE TABLE `fleet_inventory` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`host_id` int NOT NULL,
-	`user_id` varchar(255) NOT NULL,
-	`os_pretty_name` text,
-	`kernel` text,
-	`architecture` text,
-	`hostname` text,
-	`uptime_seconds` int,
-	`ip` text,
-	`package_manager` text,
-	`collected_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `fleet_inventory_id` PRIMARY KEY(`id`),
-	CONSTRAINT `idx_fleet_inventory_host` UNIQUE(`host_id`,`user_id`)
-);
---> statement-breakpoint
-CREATE TABLE `fleet_members` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`fleet_id` int NOT NULL,
-	`host_id` int NOT NULL,
-	`added_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `fleet_members_id` PRIMARY KEY(`id`),
-	CONSTRAINT `idx_fleet_members_fleet_host` UNIQUE(`fleet_id`,`host_id`)
-);
---> statement-breakpoint
-CREATE TABLE `fleets` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`user_id` varchar(255) NOT NULL,
-	`name` varchar(255) NOT NULL,
-	`description` text,
-	`color` text,
-	`icon` text,
-	`tag_rules` text,
-	`sync_id` varchar(255),
-	`created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	`updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `fleets_id` PRIMARY KEY(`id`),
-	CONSTRAINT `fleets_sync_id_unique` UNIQUE(`sync_id`)
-);
---> statement-breakpoint
-ALTER TABLE `fleet_inventory` ADD CONSTRAINT `fleet_inventory_host_id_ssh_data_id_fk` FOREIGN KEY (`host_id`) REFERENCES `ssh_data`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `fleet_inventory` ADD CONSTRAINT `fleet_inventory_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `fleet_members` ADD CONSTRAINT `fleet_members_fleet_id_fleets_id_fk` FOREIGN KEY (`fleet_id`) REFERENCES `fleets`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `fleet_members` ADD CONSTRAINT `fleet_members_host_id_ssh_data_id_fk` FOREIGN KEY (`host_id`) REFERENCES `ssh_data`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `fleets` ADD CONSTRAINT `fleets_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;

drizzle/mysql/0007_aspiring_turbo.sql

@@ -1,2 +0,0 @@
-ALTER TABLE `ssh_data` ADD `parent_host_id` int;--> statement-breakpoint
-ALTER TABLE `ssh_data` ADD CONSTRAINT `ssh_data_parent_host_id_ssh_data_id_fk` FOREIGN KEY (`parent_host_id`) REFERENCES `ssh_data`(`id`) ON DELETE set null ON UPDATE no action;

drizzle/mysql/0008_lame_nighthawk.sql

@@ -1,18 +0,0 @@
-CREATE TABLE `user_workspaces` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`user_id` varchar(255) NOT NULL,
-	`name` varchar(255) NOT NULL,
-	`color` text,
-	`icon` text,
-	`kind` text NOT NULL DEFAULT ('manual'),
-	`is_default` boolean NOT NULL DEFAULT false,
-	`payload` text NOT NULL DEFAULT ('{}'),
-	`sync_id` varchar(255),
-	`created_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	`updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	`last_used_at` text,
-	CONSTRAINT `user_workspaces_id` PRIMARY KEY(`id`),
-	CONSTRAINT `user_workspaces_sync_id_unique` UNIQUE(`sync_id`)
-);
---> statement-breakpoint
-ALTER TABLE `user_workspaces` ADD CONSTRAINT `user_workspaces_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;

drizzle/mysql/0009_tan_skaar.sql

@@ -1,26 +0,0 @@
-ALTER TABLE `api_keys` MODIFY COLUMN `expires_at` varchar(255);--> statement-breakpoint
-ALTER TABLE `audit_logs` MODIFY COLUMN `action` varchar(255) NOT NULL;--> statement-breakpoint
-ALTER TABLE `audit_logs` MODIFY COLUMN `resource_type` varchar(255) NOT NULL;--> statement-breakpoint
-ALTER TABLE `audit_logs` MODIFY COLUMN `timestamp` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `host_access` MODIFY COLUMN `expires_at` varchar(255);--> statement-breakpoint
-ALTER TABLE `opkssh_tokens` MODIFY COLUMN `expires_at` varchar(255) NOT NULL;--> statement-breakpoint
-ALTER TABLE `recent_activity` MODIFY COLUMN `timestamp` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `session_shares` MODIFY COLUMN `expires_at` varchar(255) NOT NULL;--> statement-breakpoint
-ALTER TABLE `sessions` MODIFY COLUMN `expires_at` varchar(255) NOT NULL;--> statement-breakpoint
-ALTER TABLE `snippet_access` MODIFY COLUMN `expires_at` varchar(255);--> statement-breakpoint
-ALTER TABLE `trusted_devices` MODIFY COLUMN `expires_at` varchar(255) NOT NULL;--> statement-breakpoint
-ALTER TABLE `vault_tokens` MODIFY COLUMN `expires_at` varchar(255) NOT NULL;--> statement-breakpoint
-ALTER TABLE `webauthn_credentials` MODIFY COLUMN `credential_id` varchar(255) NOT NULL;--> statement-breakpoint
-CREATE INDEX `idx_audit_logs_timestamp` ON `audit_logs` (`timestamp`);--> statement-breakpoint
-CREATE INDEX `idx_audit_logs_user_ts` ON `audit_logs` (`user_id`,`timestamp`);--> statement-breakpoint
-CREATE INDEX `idx_audit_logs_action_ts` ON `audit_logs` (`action`,`timestamp`);--> statement-breakpoint
-CREATE INDEX `idx_audit_logs_resource_ts` ON `audit_logs` (`resource_type`,`timestamp`);--> statement-breakpoint
-CREATE INDEX `idx_host_access_user_id` ON `host_access` (`user_id`);--> statement-breakpoint
-CREATE INDEX `idx_host_access_role_id` ON `host_access` (`role_id`);--> statement-breakpoint
-CREATE INDEX `idx_host_access_host_id` ON `host_access` (`host_id`);--> statement-breakpoint
-CREATE INDEX `idx_host_access_expires_at` ON `host_access` (`expires_at`);--> statement-breakpoint
-CREATE INDEX `idx_ssh_data_user_id` ON `ssh_data` (`user_id`);--> statement-breakpoint
-CREATE INDEX `idx_ssh_data_parent_host` ON `ssh_data` (`parent_host_id`);--> statement-breakpoint
-CREATE INDEX `idx_ssh_data_credential` ON `ssh_data` (`credential_id`);--> statement-breakpoint
-CREATE INDEX `idx_sessions_user_id` ON `sessions` (`user_id`);--> statement-breakpoint
-CREATE INDEX `idx_sessions_expires_at` ON `sessions` (`expires_at`);

drizzle/mysql/0010_small_infant_terrible.sql

@@ -1,8 +0,0 @@
-CREATE TABLE `ui_preferences` (
-	`user_id` varchar(255) NOT NULL,
-	`data` text NOT NULL,
-	`updated_at` text NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `ui_preferences_user_id` PRIMARY KEY(`user_id`)
-);
---> statement-breakpoint
-ALTER TABLE `ui_preferences` ADD CONSTRAINT `ui_preferences_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;

drizzle/mysql/0011_easy_the_order.sql

@@ -1,32 +0,0 @@
-ALTER TABLE `alert_firings` MODIFY COLUMN `fired_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `session_recordings` MODIFY COLUMN `started_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `session_shares` MODIFY COLUMN `session_id` varchar(255) NOT NULL;--> statement-breakpoint
-CREATE INDEX `idx_alert_firings_rule` ON `alert_firings` (`rule_id`,`fired_at`);--> statement-breakpoint
-CREATE INDEX `idx_alert_firings_host` ON `alert_firings` (`host_id`);--> statement-breakpoint
-CREATE INDEX `idx_api_keys_user_id` ON `api_keys` (`user_id`);--> statement-breakpoint
-CREATE INDEX `idx_command_history_user_host` ON `command_history` (`user_id`,`host_id`);--> statement-breakpoint
-CREATE INDEX `idx_dismissed_alerts_user_id` ON `dismissed_alerts` (`user_id`);--> statement-breakpoint
-CREATE INDEX `idx_file_manager_pinned_user` ON `file_manager_pinned` (`user_id`,`host_id`);--> statement-breakpoint
-CREATE INDEX `idx_file_manager_recent_user` ON `file_manager_recent` (`user_id`,`host_id`);--> statement-breakpoint
-CREATE INDEX `idx_file_manager_shortcuts_user` ON `file_manager_shortcuts` (`user_id`,`host_id`);--> statement-breakpoint
-CREATE INDEX `idx_fleet_inventory_user` ON `fleet_inventory` (`user_id`);--> statement-breakpoint
-CREATE INDEX `idx_fleet_members_host` ON `fleet_members` (`host_id`);--> statement-breakpoint
-CREATE INDEX `idx_homepage_items_user_id` ON `homepage_items` (`user_id`);--> statement-breakpoint
-CREATE INDEX `idx_recent_activity_user_ts` ON `recent_activity` (`user_id`,`timestamp`);--> statement-breakpoint
-CREATE INDEX `idx_session_recordings_user_started` ON `session_recordings` (`user_id`,`started_at`);--> statement-breakpoint
-CREATE INDEX `idx_session_recordings_host` ON `session_recordings` (`host_id`);--> statement-breakpoint
-CREATE INDEX `idx_session_shares_session_id` ON `session_shares` (`session_id`);--> statement-breakpoint
-CREATE INDEX `idx_session_shares_host_id` ON `session_shares` (`host_id`);--> statement-breakpoint
-CREATE INDEX `idx_snippet_access_user_id` ON `snippet_access` (`user_id`);--> statement-breakpoint
-CREATE INDEX `idx_snippet_access_snippet_id` ON `snippet_access` (`snippet_id`);--> statement-breakpoint
-CREATE INDEX `idx_snippet_access_role_id` ON `snippet_access` (`role_id`);--> statement-breakpoint
-CREATE INDEX `idx_snippets_user_id` ON `snippets` (`user_id`);--> statement-breakpoint
-CREATE INDEX `idx_ssh_credential_usage_credential` ON `ssh_credential_usage` (`credential_id`);--> statement-breakpoint
-CREATE INDEX `idx_ssh_credential_usage_user` ON `ssh_credential_usage` (`user_id`);--> statement-breakpoint
-CREATE INDEX `idx_ssh_credentials_user_id` ON `ssh_credentials` (`user_id`);--> statement-breakpoint
-CREATE INDEX `idx_ssh_folders_user_id` ON `ssh_folders` (`user_id`);--> statement-breakpoint
-CREATE INDEX `idx_transfer_recent_user` ON `transfer_recent` (`user_id`);--> statement-breakpoint
-CREATE INDEX `idx_trusted_devices_user_id` ON `trusted_devices` (`user_id`);--> statement-breakpoint
-CREATE INDEX `idx_user_open_tabs_user_id` ON `user_open_tabs` (`user_id`);--> statement-breakpoint
-CREATE INDEX `idx_user_roles_role_id` ON `user_roles` (`role_id`);--> statement-breakpoint
-CREATE INDEX `idx_user_workspaces_user_id` ON `user_workspaces` (`user_id`);

drizzle/mysql/0012_outgoing_ultron.sql

@@ -1,224 +0,0 @@
-CREATE TABLE `ai_conversations` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`user_id` varchar(255) NOT NULL,
-	`title` text,
-	`provider_id` int,
-	`model` text,
-	`created_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	`updated_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `ai_conversations_id` PRIMARY KEY(`id`)
-);
---> statement-breakpoint
-CREATE TABLE `ai_messages` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`conversation_id` int NOT NULL,
-	`role` text NOT NULL,
-	`content` text NOT NULL DEFAULT (''),
-	`tool_calls` text,
-	`created_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `ai_messages_id` PRIMARY KEY(`id`)
-);
---> statement-breakpoint
-CREATE TABLE `ai_proposals` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`conversation_id` int NOT NULL,
-	`user_id` varchar(255) NOT NULL,
-	`kind` text NOT NULL,
-	`summary` text,
-	`payload` text NOT NULL DEFAULT ('{}'),
-	`status` varchar(255) NOT NULL DEFAULT 'pending',
-	`applied_at` text,
-	`result_summary` text,
-	`created_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `ai_proposals_id` PRIMARY KEY(`id`)
-);
---> statement-breakpoint
-CREATE TABLE `ai_providers` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`user_id` varchar(255) NOT NULL,
-	`provider_type` text NOT NULL,
-	`label` varchar(255) NOT NULL,
-	`base_url` text,
-	`api_key` text,
-	`api_key_prefix` text,
-	`default_model` text,
-	`enabled` boolean NOT NULL DEFAULT true,
-	`created_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	`updated_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `ai_providers_id` PRIMARY KEY(`id`),
-	CONSTRAINT `idx_ai_providers_user_label` UNIQUE(`user_id`,`label`)
-);
---> statement-breakpoint
-CREATE TABLE `automation_channels` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`automation_id` int NOT NULL,
-	`channel_id` int NOT NULL,
-	CONSTRAINT `automation_channels_id` PRIMARY KEY(`id`),
-	CONSTRAINT `idx_automation_channels_pair` UNIQUE(`automation_id`,`channel_id`)
-);
---> statement-breakpoint
-CREATE TABLE `automation_run_steps` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`run_id` int NOT NULL,
-	`step_index` int NOT NULL,
-	`step_id` text NOT NULL,
-	`step_type` text NOT NULL,
-	`status` varchar(255) NOT NULL,
-	`started_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	`finished_at` text,
-	`output` text,
-	`error` text,
-	`truncated` boolean NOT NULL DEFAULT false,
-	CONSTRAINT `automation_run_steps_id` PRIMARY KEY(`id`)
-);
---> statement-breakpoint
-CREATE TABLE `automation_runs` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`automation_id` int NOT NULL,
-	`user_id` varchar(255) NOT NULL,
-	`trigger_type` text NOT NULL,
-	`trigger_context` text,
-	`status` varchar(255) NOT NULL,
-	`started_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	`finished_at` text,
-	`duration_ms` int,
-	`error` text,
-	`dry_run` boolean NOT NULL DEFAULT false,
-	`parent_run_id` int,
-	CONSTRAINT `automation_runs_id` PRIMARY KEY(`id`)
-);
---> statement-breakpoint
-CREATE TABLE `automation_schedules` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`automation_id` int NOT NULL,
-	`cron` text,
-	`interval_seconds` int,
-	`timezone` text,
-	`next_due_at` varchar(255),
-	`last_tick_at` text,
-	CONSTRAINT `automation_schedules_id` PRIMARY KEY(`id`),
-	CONSTRAINT `idx_automation_schedules_automation` UNIQUE(`automation_id`)
-);
---> statement-breakpoint
-CREATE TABLE `automation_trigger_state` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`automation_id` int NOT NULL,
-	`state_key` varchar(255) NOT NULL,
-	`breach_started_at` text,
-	`last_fired_at` text,
-	`last_value` double,
-	`last_observed_state` text,
-	`updated_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `automation_trigger_state_id` PRIMARY KEY(`id`),
-	CONSTRAINT `idx_automation_trigger_state_key` UNIQUE(`automation_id`,`state_key`)
-);
---> statement-breakpoint
-CREATE TABLE `automations` (
-	`id` int AUTO_INCREMENT NOT NULL,
-	`user_id` varchar(255) NOT NULL,
-	`name` varchar(255) NOT NULL,
-	`description` text,
-	`enabled` boolean NOT NULL DEFAULT true,
-	`definition` text NOT NULL,
-	`definition_version` int NOT NULL DEFAULT 1,
-	`concurrency_policy` text NOT NULL DEFAULT ('skip'),
-	`max_run_seconds` int NOT NULL DEFAULT 300,
-	`dry_run` boolean NOT NULL DEFAULT false,
-	`last_run_at` text,
-	`last_run_status` text,
-	`created_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	`updated_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP),
-	CONSTRAINT `automations_id` PRIMARY KEY(`id`)
-);
---> statement-breakpoint
-ALTER TABLE `alert_rules` MODIFY COLUMN `created_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `alert_rules` MODIFY COLUMN `updated_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `api_keys` MODIFY COLUMN `created_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `c2s_tunnel_presets` MODIFY COLUMN `created_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `c2s_tunnel_presets` MODIFY COLUMN `updated_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `credential_sidebar_preferences` MODIFY COLUMN `updated_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `dashboard_service_links` MODIFY COLUMN `label` varchar(255) NOT NULL;--> statement-breakpoint
-ALTER TABLE `dashboard_service_links` MODIFY COLUMN `created_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `dashboard_service_links` MODIFY COLUMN `updated_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `file_manager_shortcuts` MODIFY COLUMN `created_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `fleets` MODIFY COLUMN `created_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `fleets` MODIFY COLUMN `updated_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `homepage_items` MODIFY COLUMN `created_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `homepage_items` MODIFY COLUMN `updated_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `homepage_layouts` MODIFY COLUMN `updated_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `host_access` MODIFY COLUMN `created_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `host_health_checks` MODIFY COLUMN `created_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `host_health_checks` MODIFY COLUMN `updated_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `host_metrics_preferences` MODIFY COLUMN `created_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `host_metrics_preferences` MODIFY COLUMN `updated_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `host_sidebar_preferences` MODIFY COLUMN `updated_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `ssh_data` MODIFY COLUMN `created_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `ssh_data` MODIFY COLUMN `updated_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `network_topology` MODIFY COLUMN `created_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `network_topology` MODIFY COLUMN `updated_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `notification_channels` MODIFY COLUMN `created_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `opkssh_tokens` MODIFY COLUMN `created_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `proxmox_stats_preferences` MODIFY COLUMN `created_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `proxmox_stats_preferences` MODIFY COLUMN `updated_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `roles` MODIFY COLUMN `created_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `roles` MODIFY COLUMN `updated_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `session_shares` MODIFY COLUMN `created_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `sessions` MODIFY COLUMN `created_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `shared_host_auth_overrides` MODIFY COLUMN `created_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `shared_host_auth_overrides` MODIFY COLUMN `updated_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `shared_host_secrets` MODIFY COLUMN `created_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `shared_host_secrets` MODIFY COLUMN `updated_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `snippet_access` MODIFY COLUMN `created_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `snippet_folders` MODIFY COLUMN `created_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `snippet_folders` MODIFY COLUMN `updated_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `snippets` MODIFY COLUMN `created_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `snippets` MODIFY COLUMN `updated_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `ssh_credentials` MODIFY COLUMN `created_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `ssh_credentials` MODIFY COLUMN `updated_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `ssh_folders` MODIFY COLUMN `created_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `ssh_folders` MODIFY COLUMN `updated_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `sso_providers` MODIFY COLUMN `created_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `sso_providers` MODIFY COLUMN `updated_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `termix_identities` MODIFY COLUMN `created_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `termix_identities` MODIFY COLUMN `updated_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `termix_identity_ca` MODIFY COLUMN `created_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `termix_identity_ca` MODIFY COLUMN `updated_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `termix_identity_keys` MODIFY COLUMN `label` varchar(255);--> statement-breakpoint
-ALTER TABLE `termix_identity_keys` MODIFY COLUMN `created_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `tmux_session_tags` MODIFY COLUMN `created_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `trusted_devices` MODIFY COLUMN `created_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `ui_preferences` MODIFY COLUMN `updated_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `user_open_tabs` MODIFY COLUMN `label` varchar(255) NOT NULL;--> statement-breakpoint
-ALTER TABLE `user_open_tabs` MODIFY COLUMN `created_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `user_open_tabs` MODIFY COLUMN `updated_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `user_preferences` MODIFY COLUMN `updated_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `user_workspaces` MODIFY COLUMN `created_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `user_workspaces` MODIFY COLUMN `updated_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `vault_profiles` MODIFY COLUMN `created_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `vault_profiles` MODIFY COLUMN `updated_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `vault_tokens` MODIFY COLUMN `created_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `webauthn_credentials` MODIFY COLUMN `created_at` varchar(255) NOT NULL DEFAULT (CURRENT_TIMESTAMP);--> statement-breakpoint
-ALTER TABLE `user_preferences` ADD `ai_assistant_enabled` boolean;--> statement-breakpoint
-ALTER TABLE `user_preferences` ADD `ai_read_only_commands` boolean;--> statement-breakpoint
-ALTER TABLE `ai_conversations` ADD CONSTRAINT `ai_conversations_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `ai_messages` ADD CONSTRAINT `ai_messages_conversation_id_ai_conversations_id_fk` FOREIGN KEY (`conversation_id`) REFERENCES `ai_conversations`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `ai_proposals` ADD CONSTRAINT `ai_proposals_conversation_id_ai_conversations_id_fk` FOREIGN KEY (`conversation_id`) REFERENCES `ai_conversations`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `ai_proposals` ADD CONSTRAINT `ai_proposals_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `ai_providers` ADD CONSTRAINT `ai_providers_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `automation_channels` ADD CONSTRAINT `automation_channels_automation_id_automations_id_fk` FOREIGN KEY (`automation_id`) REFERENCES `automations`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `automation_channels` ADD CONSTRAINT `automation_channels_channel_id_notification_channels_id_fk` FOREIGN KEY (`channel_id`) REFERENCES `notification_channels`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `automation_run_steps` ADD CONSTRAINT `automation_run_steps_run_id_automation_runs_id_fk` FOREIGN KEY (`run_id`) REFERENCES `automation_runs`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `automation_runs` ADD CONSTRAINT `automation_runs_automation_id_automations_id_fk` FOREIGN KEY (`automation_id`) REFERENCES `automations`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `automation_runs` ADD CONSTRAINT `automation_runs_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `automation_schedules` ADD CONSTRAINT `automation_schedules_automation_id_automations_id_fk` FOREIGN KEY (`automation_id`) REFERENCES `automations`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `automation_trigger_state` ADD CONSTRAINT `automation_trigger_state_automation_id_automations_id_fk` FOREIGN KEY (`automation_id`) REFERENCES `automations`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE `automations` ADD CONSTRAINT `automations_user_id_users_id_fk` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-CREATE INDEX `idx_ai_conversations_user` ON `ai_conversations` (`user_id`,`updated_at`);--> statement-breakpoint
-CREATE INDEX `idx_ai_messages_conversation` ON `ai_messages` (`conversation_id`,`created_at`);--> statement-breakpoint
-CREATE INDEX `idx_ai_proposals_user` ON `ai_proposals` (`user_id`,`status`);--> statement-breakpoint
-CREATE INDEX `idx_ai_proposals_conversation` ON `ai_proposals` (`conversation_id`);--> statement-breakpoint
-CREATE INDEX `idx_automation_run_steps_run` ON `automation_run_steps` (`run_id`,`step_index`);--> statement-breakpoint
-CREATE INDEX `idx_automation_runs_automation` ON `automation_runs` (`automation_id`,`started_at`);--> statement-breakpoint
-CREATE INDEX `idx_automation_runs_user` ON `automation_runs` (`user_id`,`started_at`);--> statement-breakpoint
-CREATE INDEX `idx_automation_schedules_due` ON `automation_schedules` (`next_due_at`);--> statement-breakpoint
-CREATE INDEX `idx_automations_user` ON `automations` (`user_id`,`enabled`);

drizzle/mysql/0013_third_wraith.sql

@@ -1,2 +0,0 @@
-ALTER TABLE `user_preferences` ADD `terminal_defaults` text;--> statement-breakpoint
-ALTER TABLE `user_preferences` ADD `rdp_defaults` text;

drizzle/mysql/0014_bitter_nextwave.sql

@@ -1 +0,0 @@
-ALTER TABLE `user_preferences` ADD `terminal_macros` text;

drizzle/mysql/meta/_journal.json

@@ -1,111 +0,0 @@
-{
-  "version": "7",
-  "dialect": "mysql",
-  "entries": [
-    {
-      "idx": 0,
-      "version": "5",
-      "when": 1785738871436,
-      "tag": "0000_clean_pretty_boy",
-      "breakpoints": true
-    },
-    {
-      "idx": 1,
-      "version": "5",
-      "when": 1786132418625,
-      "tag": "0001_puzzling_aqueduct",
-      "breakpoints": true
-    },
-    {
-      "idx": 2,
-      "version": "5",
-      "when": 1786147319261,
-      "tag": "0002_bumpy_korg",
-      "breakpoints": true
-    },
-    {
-      "idx": 3,
-      "version": "5",
-      "when": 1786258964346,
-      "tag": "0003_dry_human_robot",
-      "breakpoints": true
-    },
-    {
-      "idx": 4,
-      "version": "5",
-      "when": 1786423595505,
-      "tag": "0004_fancy_spencer_smythe",
-      "breakpoints": true
-    },
-    {
-      "idx": 5,
-      "version": "5",
-      "when": 1786428085301,
-      "tag": "0005_tearful_mindworm",
-      "breakpoints": true
-    },
-    {
-      "idx": 6,
-      "version": "5",
-      "when": 1786482021452,
-      "tag": "0006_last_fantastic_four",
-      "breakpoints": true
-    },
-    {
-      "idx": 7,
-      "version": "5",
-      "when": 1786487754919,
-      "tag": "0007_aspiring_turbo",
-      "breakpoints": true
-    },
-    {
-      "idx": 8,
-      "version": "5",
-      "when": 1786498680274,
-      "tag": "0008_lame_nighthawk",
-      "breakpoints": true
-    },
-    {
-      "idx": 9,
-      "version": "5",
-      "when": 1786509736628,
-      "tag": "0009_tan_skaar",
-      "breakpoints": true
-    },
-    {
-      "idx": 10,
-      "version": "5",
-      "when": 1786515117582,
-      "tag": "0010_small_infant_terrible",
-      "breakpoints": true
-    },
-    {
-      "idx": 11,
-      "version": "5",
-      "when": 1786519424221,
-      "tag": "0011_easy_the_order",
-      "breakpoints": true
-    },
-    {
-      "idx": 12,
-      "version": "5",
-      "when": 1786598522577,
-      "tag": "0012_outgoing_ultron",
-      "breakpoints": true
-    },
-    {
-      "idx": 13,
-      "version": "5",
-      "when": 1786737725732,
-      "tag": "0013_third_wraith",
-      "breakpoints": true
-    },
-    {
-      "idx": 14,
-      "version": "5",
-      "when": 1786757023790,
-      "tag": "0014_bitter_nextwave",
-      "breakpoints": true
-    }
-  ]
-}

drizzle/postgres/0000_jazzy_infant_terrible.sql

@@ -1,837 +0,0 @@
-CREATE TABLE "alert_firings" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"user_id" varchar(255) NOT NULL,
-	"rule_id" integer NOT NULL,
-	"host_id" integer NOT NULL,
-	"host_name" text NOT NULL,
-	"fired_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL,
-	"resolved_at" text,
-	"value" double precision,
-	"message" text NOT NULL,
-	"severity" text DEFAULT 'warning' NOT NULL,
-	"acknowledged" boolean DEFAULT false NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE "alert_rule_channels" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"rule_id" integer NOT NULL,
-	"channel_id" integer NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE "alert_rules" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"user_id" varchar(255) NOT NULL,
-	"host_id" integer,
-	"name" varchar(255) NOT NULL,
-	"enabled" boolean DEFAULT true NOT NULL,
-	"trigger_type" text NOT NULL,
-	"threshold_value" double precision,
-	"threshold_duration_seconds" integer,
-	"cooldown_minutes" integer DEFAULT 15 NOT NULL,
-	"created_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL,
-	"updated_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE "api_keys" (
-	"id" varchar(255) PRIMARY KEY NOT NULL,
-	"user_id" varchar(255) NOT NULL,
-	"name" varchar(255) NOT NULL,
-	"token_hash" text NOT NULL,
-	"token_prefix" text NOT NULL,
-	"created_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL,
-	"expires_at" text,
-	"last_used_at" text,
-	"is_active" boolean DEFAULT true NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE "audit_logs" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"user_id" varchar(255),
-	"username" text NOT NULL,
-	"action" text NOT NULL,
-	"resource_type" text NOT NULL,
-	"resource_id" text,
-	"resource_name" text,
-	"details" text,
-	"ip_address" text,
-	"user_agent" text,
-	"success" boolean NOT NULL,
-	"error_message" text,
-	"timestamp" text DEFAULT CURRENT_TIMESTAMP NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE "c2s_tunnel_presets" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"user_id" varchar(255) NOT NULL,
-	"name" varchar(255) NOT NULL,
-	"config" text NOT NULL,
-	"platform" text,
-	"computer_name" text,
-	"created_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL,
-	"updated_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE "command_history" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"user_id" varchar(255) NOT NULL,
-	"host_id" integer NOT NULL,
-	"command" text NOT NULL,
-	"executed_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE "dashboard_service_links" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"user_id" varchar(255) NOT NULL,
-	"label" text NOT NULL,
-	"url" text NOT NULL,
-	"order" integer DEFAULT 0 NOT NULL,
-	"sync_id" varchar(255),
-	"created_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL,
-	"updated_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL,
-	CONSTRAINT "dashboard_service_links_sync_id_unique" UNIQUE("sync_id")
-);
---> statement-breakpoint
-CREATE TABLE "dismissed_alerts" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"user_id" varchar(255) NOT NULL,
-	"alert_id" text NOT NULL,
-	"dismissed_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE "file_manager_pinned" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"user_id" varchar(255) NOT NULL,
-	"host_id" integer NOT NULL,
-	"name" varchar(255) NOT NULL,
-	"path" text NOT NULL,
-	"pinned_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE "file_manager_recent" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"user_id" varchar(255) NOT NULL,
-	"host_id" integer NOT NULL,
-	"name" varchar(255) NOT NULL,
-	"path" text NOT NULL,
-	"last_opened" text DEFAULT CURRENT_TIMESTAMP NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE "file_manager_shortcuts" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"user_id" varchar(255) NOT NULL,
-	"host_id" integer NOT NULL,
-	"name" varchar(255) NOT NULL,
-	"path" text NOT NULL,
-	"created_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE "homepage_items" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"user_id" varchar(255) NOT NULL,
-	"type_id" text NOT NULL,
-	"title" text,
-	"config" text DEFAULT '{}' NOT NULL,
-	"folder_id" integer,
-	"sync_id" varchar(255),
-	"created_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL,
-	"updated_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL,
-	CONSTRAINT "homepage_items_sync_id_unique" UNIQUE("sync_id")
-);
---> statement-breakpoint
-CREATE TABLE "homepage_layouts" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"user_id" varchar(255) NOT NULL,
-	"layout" text DEFAULT '{}' NOT NULL,
-	"updated_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL,
-	CONSTRAINT "homepage_layouts_user_id_unique" UNIQUE("user_id")
-);
---> statement-breakpoint
-CREATE TABLE "host_access" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"host_id" integer NOT NULL,
-	"user_id" varchar(255),
-	"role_id" integer,
-	"granted_by" varchar(255) NOT NULL,
-	"permission_level" text DEFAULT 'connect' NOT NULL,
-	"expires_at" text,
-	"created_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL,
-	"last_accessed_at" text,
-	"access_count" integer DEFAULT 0 NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE "host_health_checks" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"user_id" varchar(255) NOT NULL,
-	"host_id" integer NOT NULL,
-	"checks" text NOT NULL,
-	"interval_seconds" integer DEFAULT 300 NOT NULL,
-	"created_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL,
-	"updated_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE "host_health_history" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"user_id" varchar(255) NOT NULL,
-	"host_id" integer NOT NULL,
-	"check_id" text NOT NULL,
-	"ts" text DEFAULT CURRENT_TIMESTAMP NOT NULL,
-	"ok" boolean NOT NULL,
-	"latency_ms" integer,
-	"detail" text
-);
---> statement-breakpoint
-CREATE TABLE "host_metrics_history" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"host_id" integer NOT NULL,
-	"ts" text DEFAULT CURRENT_TIMESTAMP NOT NULL,
-	"cpu_percent" double precision,
-	"mem_percent" double precision,
-	"disk_percent" double precision,
-	"net_rx_bytes" integer,
-	"net_tx_bytes" integer
-);
---> statement-breakpoint
-CREATE TABLE "host_metrics_preferences" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"user_id" varchar(255) NOT NULL,
-	"host_id" integer NOT NULL,
-	"layout" text NOT NULL,
-	"created_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL,
-	"updated_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE "ssh_data" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"user_id" varchar(255) NOT NULL,
-	"connection_type" text DEFAULT 'ssh' NOT NULL,
-	"name" varchar(255),
-	"ip" text NOT NULL,
-	"port" integer NOT NULL,
-	"username" text NOT NULL,
-	"folder" text,
-	"tags" text,
-	"pin" boolean DEFAULT false NOT NULL,
-	"auth_type" text NOT NULL,
-	"use_warpgate" boolean DEFAULT false NOT NULL,
-	"share_ssh_auth" boolean DEFAULT false NOT NULL,
-	"force_keyboard_interactive" text,
-	"password" text,
-	"key" text,
-	"key_password" text,
-	"key_type" text,
-	"sudo_password" text,
-	"autostart_password" text,
-	"autostart_key" text,
-	"autostart_key_password" text,
-	"credential_id" integer,
-	"override_credential_username" boolean,
-	"vault_profile_id" integer,
-	"enable_terminal" boolean DEFAULT true NOT NULL,
-	"enable_session_logging" boolean DEFAULT true NOT NULL,
-	"allow_session_sharing" boolean DEFAULT true NOT NULL,
-	"enable_command_history" boolean DEFAULT true NOT NULL,
-	"enable_tunnel" boolean DEFAULT true NOT NULL,
-	"tunnel_connections" text,
-	"jump_hosts" text,
-	"enable_file_manager" boolean DEFAULT true NOT NULL,
-	"scp_legacy" boolean DEFAULT false NOT NULL,
-	"enable_docker" boolean DEFAULT false NOT NULL,
-	"enable_tmux_monitor" boolean DEFAULT false NOT NULL,
-	"show_terminal_in_sidebar" boolean DEFAULT true NOT NULL,
-	"show_file_manager_in_sidebar" boolean DEFAULT false NOT NULL,
-	"show_tunnel_in_sidebar" boolean DEFAULT false NOT NULL,
-	"show_docker_in_sidebar" boolean DEFAULT false NOT NULL,
-	"show_server_stats_in_sidebar" boolean DEFAULT false NOT NULL,
-	"default_path" text,
-	"stats_config" text,
-	"docker_config" text,
-	"enable_proxmox" boolean DEFAULT false NOT NULL,
-	"proxmox_config" text,
-	"terminal_config" text,
-	"quick_actions" text,
-	"notes" text,
-	"enable_ssh" boolean DEFAULT true NOT NULL,
-	"enable_rdp" boolean DEFAULT false NOT NULL,
-	"enable_vnc" boolean DEFAULT false NOT NULL,
-	"enable_telnet" boolean DEFAULT false NOT NULL,
-	"ssh_port" integer DEFAULT 22,
-	"rdp_port" integer DEFAULT 3389,
-	"vnc_port" integer DEFAULT 5900,
-	"telnet_port" integer DEFAULT 23,
-	"rdp_credential_id" integer,
-	"rdp_user" text,
-	"rdp_password" text,
-	"rdp_domain" text,
-	"rdp_security" text,
-	"rdp_ignore_cert" boolean DEFAULT false,
-	"vnc_credential_id" integer,
-	"vnc_password" text,
-	"vnc_user" text,
-	"telnet_user" text,
-	"telnet_password" text,
-	"telnet_credential_id" integer,
-	"rdp_auth_type" text,
-	"vnc_auth_type" text,
-	"telnet_auth_type" text,
-	"domain" text,
-	"security" text,
-	"ignore_cert" boolean DEFAULT false,
-	"guacamole_config" text,
-	"use_socks5" boolean,
-	"socks5_host" text,
-	"socks5_port" integer,
-	"socks5_username" text,
-	"socks5_password" text,
-	"socks5_proxy_chain" text,
-	"connection_origin" text,
-	"mac_address" text,
-	"wol_broadcast_address" text,
-	"port_knock_sequence" text,
-	"host_key_fingerprint" text,
-	"host_key_type" text,
-	"host_key_algorithm" text DEFAULT 'sha256',
-	"host_key_first_seen" text,
-	"host_key_last_verified" text,
-	"host_key_changed_count" integer DEFAULT 0,
-	"sync_id" varchar(255),
-	"created_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL,
-	"updated_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL,
-	CONSTRAINT "ssh_data_sync_id_unique" UNIQUE("sync_id")
-);
---> statement-breakpoint
-CREATE TABLE "network_topology" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"user_id" varchar(255) NOT NULL,
-	"topology" text,
-	"created_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL,
-	"updated_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE "notification_channels" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"user_id" varchar(255) NOT NULL,
-	"name" varchar(255) NOT NULL,
-	"type" text NOT NULL,
-	"config" text NOT NULL,
-	"enabled" boolean DEFAULT true NOT NULL,
-	"created_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE "opkssh_tokens" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"user_id" varchar(255) NOT NULL,
-	"host_id" integer NOT NULL,
-	"ssh_cert" text NOT NULL,
-	"private_key" text NOT NULL,
-	"email" text,
-	"sub" text,
-	"issuer" text,
-	"audience" text,
-	"created_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL,
-	"expires_at" text NOT NULL,
-	"last_used" text
-);
---> statement-breakpoint
-CREATE TABLE "recent_activity" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"user_id" varchar(255) NOT NULL,
-	"type" text NOT NULL,
-	"host_id" integer NOT NULL,
-	"host_name" text,
-	"timestamp" text DEFAULT CURRENT_TIMESTAMP NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE "roles" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"name" varchar(255) NOT NULL,
-	"display_name" text NOT NULL,
-	"description" text,
-	"is_system" boolean DEFAULT false NOT NULL,
-	"permissions" text,
-	"created_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL,
-	"updated_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL,
-	CONSTRAINT "roles_name_unique" UNIQUE("name")
-);
---> statement-breakpoint
-CREATE TABLE "session_recordings" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"host_id" integer NOT NULL,
-	"user_id" varchar(255),
-	"username" text,
-	"access_id" integer,
-	"started_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL,
-	"ended_at" text,
-	"duration" integer,
-	"commands" text,
-	"dangerous_actions" text,
-	"recording_path" text,
-	"protocol" varchar(255) DEFAULT 'ssh' NOT NULL,
-	"format" text DEFAULT 'text' NOT NULL,
-	"terminated_by_owner" boolean DEFAULT false,
-	"termination_reason" text
-);
---> statement-breakpoint
-CREATE TABLE "session_share_participants" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"share_id" varchar(255) NOT NULL,
-	"user_id" varchar(255),
-	"guest_label" text,
-	"joined_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL,
-	"left_at" text
-);
---> statement-breakpoint
-CREATE TABLE "session_shares" (
-	"id" varchar(255) PRIMARY KEY NOT NULL,
-	"host_id" integer NOT NULL,
-	"owner_user_id" varchar(255) NOT NULL,
-	"protocol" varchar(255) NOT NULL,
-	"session_id" text NOT NULL,
-	"tab_instance_id" text,
-	"share_type" text NOT NULL,
-	"target_user_id" varchar(255),
-	"link_token" varchar(255),
-	"permission_level" text DEFAULT 'read-only' NOT NULL,
-	"created_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL,
-	"expires_at" text NOT NULL,
-	"revoked_at" text,
-	"last_joined_at" text,
-	"join_count" integer DEFAULT 0 NOT NULL,
-	CONSTRAINT "session_shares_link_token_unique" UNIQUE("link_token")
-);
---> statement-breakpoint
-CREATE TABLE "sessions" (
-	"id" varchar(255) PRIMARY KEY NOT NULL,
-	"user_id" varchar(255) NOT NULL,
-	"jwt_token" text NOT NULL,
-	"device_type" text NOT NULL,
-	"device_info" text NOT NULL,
-	"oidc_sub" text,
-	"oidc_sid" text,
-	"sso_provider_id" integer,
-	"created_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL,
-	"expires_at" text NOT NULL,
-	"last_active_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE "settings" (
-	"key" varchar(255) PRIMARY KEY NOT NULL,
-	"value" text NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE "shared_host_auth_overrides" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"host_id" integer NOT NULL,
-	"user_id" varchar(255) NOT NULL,
-	"protocol" varchar(255) DEFAULT 'ssh' NOT NULL,
-	"credential_id" integer NOT NULL,
-	"created_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL,
-	"updated_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE "shared_host_secrets" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"host_access_id" integer NOT NULL,
-	"target_user_id" varchar(255) NOT NULL,
-	"protocol" varchar(255) DEFAULT 'ssh' NOT NULL,
-	"source_type" text DEFAULT 'credential' NOT NULL,
-	"original_credential_id" integer,
-	"encrypted_username" text,
-	"encrypted_auth_type" text,
-	"encrypted_password" text,
-	"encrypted_key" text,
-	"encrypted_key_password" text,
-	"encrypted_key_type" text,
-	"encrypted_domain" text,
-	"created_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL,
-	"updated_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE "snippet_access" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"snippet_id" integer NOT NULL,
-	"user_id" varchar(255),
-	"role_id" integer,
-	"granted_by" varchar(255) NOT NULL,
-	"permission_level" text DEFAULT 'view' NOT NULL,
-	"expires_at" text,
-	"created_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE "snippet_folders" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"user_id" varchar(255) NOT NULL,
-	"name" varchar(255) NOT NULL,
-	"color" text,
-	"icon" text,
-	"sync_id" varchar(255),
-	"created_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL,
-	"updated_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL,
-	CONSTRAINT "snippet_folders_sync_id_unique" UNIQUE("sync_id")
-);
---> statement-breakpoint
-CREATE TABLE "snippets" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"user_id" varchar(255) NOT NULL,
-	"name" varchar(255) NOT NULL,
-	"content" text NOT NULL,
-	"description" text,
-	"folder" text,
-	"order" integer DEFAULT 0 NOT NULL,
-	"sync_id" varchar(255),
-	"created_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL,
-	"updated_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL,
-	"host_filter" text,
-	CONSTRAINT "snippets_sync_id_unique" UNIQUE("sync_id")
-);
---> statement-breakpoint
-CREATE TABLE "ssh_credential_usage" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"credential_id" integer NOT NULL,
-	"host_id" integer NOT NULL,
-	"user_id" varchar(255) NOT NULL,
-	"used_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE "ssh_credentials" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"user_id" varchar(255) NOT NULL,
-	"name" varchar(255) NOT NULL,
-	"description" text,
-	"folder" text,
-	"tags" text,
-	"auth_type" text NOT NULL,
-	"username" text,
-	"password" text,
-	"key" text,
-	"private_key" text,
-	"public_key" text,
-	"key_password" text,
-	"key_type" text,
-	"detected_key_type" text,
-	"cert_public_key" text,
-	"usage_count" integer DEFAULT 0 NOT NULL,
-	"last_used" text,
-	"sync_id" varchar(255),
-	"created_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL,
-	"updated_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL,
-	CONSTRAINT "ssh_credentials_sync_id_unique" UNIQUE("sync_id")
-);
---> statement-breakpoint
-CREATE TABLE "ssh_folders" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"user_id" varchar(255) NOT NULL,
-	"name" varchar(255) NOT NULL,
-	"color" text,
-	"icon" text,
-	"credential_id" integer,
-	"sync_id" varchar(255),
-	"created_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL,
-	"updated_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL,
-	CONSTRAINT "ssh_folders_sync_id_unique" UNIQUE("sync_id")
-);
---> statement-breakpoint
-CREATE TABLE "sso_providers" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"name" varchar(255) NOT NULL,
-	"type" text NOT NULL,
-	"enabled" boolean DEFAULT true NOT NULL,
-	"display_order" integer DEFAULT 0 NOT NULL,
-	"config" text NOT NULL,
-	"created_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL,
-	"updated_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE "sync_tombstones" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"user_id" varchar(255) NOT NULL,
-	"entity_type" text NOT NULL,
-	"sync_id" varchar(255) NOT NULL,
-	"deleted_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE "termix_identities" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"user_id" varchar(255) NOT NULL,
-	"handle" varchar(255) NOT NULL,
-	"description" text,
-	"created_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL,
-	"updated_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL,
-	CONSTRAINT "termix_identities_user_id_unique" UNIQUE("user_id"),
-	CONSTRAINT "termix_identities_handle_unique" UNIQUE("handle")
-);
---> statement-breakpoint
-CREATE TABLE "termix_identity_ca" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"identity_id" integer NOT NULL,
-	"user_id" varchar(255) NOT NULL,
-	"public_key" text NOT NULL,
-	"private_key" text NOT NULL,
-	"validity_days" integer DEFAULT 90 NOT NULL,
-	"created_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL,
-	"updated_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL,
-	CONSTRAINT "termix_identity_ca_identity_id_unique" UNIQUE("identity_id")
-);
---> statement-breakpoint
-CREATE TABLE "termix_identity_keys" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"identity_id" integer NOT NULL,
-	"user_id" varchar(255) NOT NULL,
-	"public_key" text NOT NULL,
-	"key_type" text NOT NULL,
-	"algorithm" text NOT NULL,
-	"label" text,
-	"comment" text,
-	"source" text DEFAULT 'manual' NOT NULL,
-	"credential_id" integer,
-	"enabled" boolean DEFAULT true NOT NULL,
-	"created_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE "tmux_session_tags" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"user_id" varchar(255) NOT NULL,
-	"host_id" integer NOT NULL,
-	"session_name" text NOT NULL,
-	"tag" text NOT NULL,
-	"created_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE "transfer_recent" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"user_id" varchar(255) NOT NULL,
-	"source_host_id" integer NOT NULL,
-	"dest_host_id" integer NOT NULL,
-	"dest_path" text NOT NULL,
-	"dest_path_label" text NOT NULL,
-	"last_used" text DEFAULT CURRENT_TIMESTAMP NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE "trusted_devices" (
-	"id" varchar(255) PRIMARY KEY NOT NULL,
-	"user_id" varchar(255) NOT NULL,
-	"device_fingerprint" text NOT NULL,
-	"device_type" text NOT NULL,
-	"device_info" text NOT NULL,
-	"created_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL,
-	"expires_at" text NOT NULL,
-	"last_used_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE "user_open_tabs" (
-	"id" varchar(255) PRIMARY KEY NOT NULL,
-	"user_id" varchar(255) NOT NULL,
-	"tab_type" text NOT NULL,
-	"host_id" integer,
-	"label" text NOT NULL,
-	"tab_order" integer DEFAULT 0 NOT NULL,
-	"backend_session_id" text,
-	"created_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL,
-	"updated_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE "user_preferences" (
-	"user_id" varchar(255) PRIMARY KEY NOT NULL,
-	"reopen_tabs_on_login" boolean DEFAULT false NOT NULL,
-	"theme" text,
-	"font_size" text,
-	"accent_color" text,
-	"language" text,
-	"storage_mode" text,
-	"command_autocomplete" boolean,
-	"command_palette_enabled" boolean,
-	"show_host_tags" boolean,
-	"host_tray_on_click" boolean,
-	"pin_app_rail" boolean,
-	"expand_app_rail_on_hover" boolean,
-	"folders_collapsed" boolean,
-	"confirm_snippet_execution" boolean,
-	"disable_update_check" boolean,
-	"confirm_tab_close" boolean,
-	"hidden_rail_tabs" text,
-	"compact_host_view" boolean,
-	"status_color_scheme" text,
-	"custom_themes" text,
-	"custom_keybindings" text,
-	"updated_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE "user_roles" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"user_id" varchar(255) NOT NULL,
-	"role_id" integer NOT NULL,
-	"granted_by" varchar(255),
-	"granted_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE "users" (
-	"id" varchar(255) PRIMARY KEY NOT NULL,
-	"username" text NOT NULL,
-	"password_hash" text NOT NULL,
-	"is_admin" boolean DEFAULT false NOT NULL,
-	"is_oidc" boolean DEFAULT false NOT NULL,
-	"oidc_identifier" text,
-	"sso_provider_id" integer,
-	"client_id" text,
-	"client_secret" text,
-	"issuer_url" text,
-	"authorization_url" text,
-	"token_url" text,
-	"identifier_path" text,
-	"name_path" text,
-	"scopes" text DEFAULT 'openid email profile',
-	"totp_secret" text,
-	"totp_enabled" boolean DEFAULT false NOT NULL,
-	"totp_backup_codes" text,
-	"registered_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL,
-	"donation_modal_dismissed" boolean DEFAULT false NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE "vault_profiles" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"user_id" varchar(255) NOT NULL,
-	"name" varchar(255) NOT NULL,
-	"description" text,
-	"folder" text,
-	"tags" text,
-	"vault_addr" text NOT NULL,
-	"vault_namespace" text,
-	"oidc_mount" text,
-	"oidc_role" text,
-	"ssh_mount" text,
-	"ssh_role" text NOT NULL,
-	"valid_principals" text,
-	"key_type" text,
-	"shared" boolean DEFAULT false NOT NULL,
-	"sync_id" varchar(255),
-	"created_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL,
-	"updated_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL,
-	CONSTRAINT "vault_profiles_sync_id_unique" UNIQUE("sync_id")
-);
---> statement-breakpoint
-CREATE TABLE "vault_tokens" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"user_id" varchar(255) NOT NULL,
-	"profile_id" integer NOT NULL,
-	"ssh_cert" text NOT NULL,
-	"private_key" text NOT NULL,
-	"created_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL,
-	"expires_at" text NOT NULL,
-	"last_used" text
-);
---> statement-breakpoint
-CREATE TABLE "webauthn_credentials" (
-	"id" varchar(255) PRIMARY KEY NOT NULL,
-	"user_id" varchar(255) NOT NULL,
-	"name" varchar(255) NOT NULL,
-	"credential_id" text NOT NULL,
-	"public_key" text NOT NULL,
-	"counter" integer DEFAULT 0 NOT NULL,
-	"device_type" text,
-	"backed_up" boolean DEFAULT false NOT NULL,
-	"transports" text,
-	"user_verification" text DEFAULT 'preferred' NOT NULL,
-	"created_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL,
-	"last_used_at" text
-);
---> statement-breakpoint
-ALTER TABLE "alert_firings" ADD CONSTRAINT "alert_firings_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "alert_firings" ADD CONSTRAINT "alert_firings_rule_id_alert_rules_id_fk" FOREIGN KEY ("rule_id") REFERENCES "public"."alert_rules"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "alert_rule_channels" ADD CONSTRAINT "alert_rule_channels_rule_id_alert_rules_id_fk" FOREIGN KEY ("rule_id") REFERENCES "public"."alert_rules"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "alert_rule_channels" ADD CONSTRAINT "alert_rule_channels_channel_id_notification_channels_id_fk" FOREIGN KEY ("channel_id") REFERENCES "public"."notification_channels"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "alert_rules" ADD CONSTRAINT "alert_rules_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "alert_rules" ADD CONSTRAINT "alert_rules_host_id_ssh_data_id_fk" FOREIGN KEY ("host_id") REFERENCES "public"."ssh_data"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "api_keys" ADD CONSTRAINT "api_keys_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "audit_logs" ADD CONSTRAINT "audit_logs_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "c2s_tunnel_presets" ADD CONSTRAINT "c2s_tunnel_presets_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "command_history" ADD CONSTRAINT "command_history_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "command_history" ADD CONSTRAINT "command_history_host_id_ssh_data_id_fk" FOREIGN KEY ("host_id") REFERENCES "public"."ssh_data"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "dashboard_service_links" ADD CONSTRAINT "dashboard_service_links_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "dismissed_alerts" ADD CONSTRAINT "dismissed_alerts_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "file_manager_pinned" ADD CONSTRAINT "file_manager_pinned_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "file_manager_pinned" ADD CONSTRAINT "file_manager_pinned_host_id_ssh_data_id_fk" FOREIGN KEY ("host_id") REFERENCES "public"."ssh_data"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "file_manager_recent" ADD CONSTRAINT "file_manager_recent_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "file_manager_recent" ADD CONSTRAINT "file_manager_recent_host_id_ssh_data_id_fk" FOREIGN KEY ("host_id") REFERENCES "public"."ssh_data"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "file_manager_shortcuts" ADD CONSTRAINT "file_manager_shortcuts_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "file_manager_shortcuts" ADD CONSTRAINT "file_manager_shortcuts_host_id_ssh_data_id_fk" FOREIGN KEY ("host_id") REFERENCES "public"."ssh_data"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "homepage_items" ADD CONSTRAINT "homepage_items_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "homepage_layouts" ADD CONSTRAINT "homepage_layouts_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "host_access" ADD CONSTRAINT "host_access_host_id_ssh_data_id_fk" FOREIGN KEY ("host_id") REFERENCES "public"."ssh_data"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "host_access" ADD CONSTRAINT "host_access_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "host_access" ADD CONSTRAINT "host_access_role_id_roles_id_fk" FOREIGN KEY ("role_id") REFERENCES "public"."roles"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "host_access" ADD CONSTRAINT "host_access_granted_by_users_id_fk" FOREIGN KEY ("granted_by") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "host_health_checks" ADD CONSTRAINT "host_health_checks_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "host_health_checks" ADD CONSTRAINT "host_health_checks_host_id_ssh_data_id_fk" FOREIGN KEY ("host_id") REFERENCES "public"."ssh_data"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "host_health_history" ADD CONSTRAINT "host_health_history_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "host_health_history" ADD CONSTRAINT "host_health_history_host_id_ssh_data_id_fk" FOREIGN KEY ("host_id") REFERENCES "public"."ssh_data"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "host_metrics_history" ADD CONSTRAINT "host_metrics_history_host_id_ssh_data_id_fk" FOREIGN KEY ("host_id") REFERENCES "public"."ssh_data"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "host_metrics_preferences" ADD CONSTRAINT "host_metrics_preferences_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "host_metrics_preferences" ADD CONSTRAINT "host_metrics_preferences_host_id_ssh_data_id_fk" FOREIGN KEY ("host_id") REFERENCES "public"."ssh_data"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "ssh_data" ADD CONSTRAINT "ssh_data_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "ssh_data" ADD CONSTRAINT "ssh_data_credential_id_ssh_credentials_id_fk" FOREIGN KEY ("credential_id") REFERENCES "public"."ssh_credentials"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "ssh_data" ADD CONSTRAINT "ssh_data_vault_profile_id_vault_profiles_id_fk" FOREIGN KEY ("vault_profile_id") REFERENCES "public"."vault_profiles"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "ssh_data" ADD CONSTRAINT "ssh_data_rdp_credential_id_ssh_credentials_id_fk" FOREIGN KEY ("rdp_credential_id") REFERENCES "public"."ssh_credentials"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "ssh_data" ADD CONSTRAINT "ssh_data_vnc_credential_id_ssh_credentials_id_fk" FOREIGN KEY ("vnc_credential_id") REFERENCES "public"."ssh_credentials"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "ssh_data" ADD CONSTRAINT "ssh_data_telnet_credential_id_ssh_credentials_id_fk" FOREIGN KEY ("telnet_credential_id") REFERENCES "public"."ssh_credentials"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "network_topology" ADD CONSTRAINT "network_topology_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "notification_channels" ADD CONSTRAINT "notification_channels_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "opkssh_tokens" ADD CONSTRAINT "opkssh_tokens_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "opkssh_tokens" ADD CONSTRAINT "opkssh_tokens_host_id_ssh_data_id_fk" FOREIGN KEY ("host_id") REFERENCES "public"."ssh_data"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "recent_activity" ADD CONSTRAINT "recent_activity_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "recent_activity" ADD CONSTRAINT "recent_activity_host_id_ssh_data_id_fk" FOREIGN KEY ("host_id") REFERENCES "public"."ssh_data"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "session_recordings" ADD CONSTRAINT "session_recordings_host_id_ssh_data_id_fk" FOREIGN KEY ("host_id") REFERENCES "public"."ssh_data"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "session_recordings" ADD CONSTRAINT "session_recordings_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "session_recordings" ADD CONSTRAINT "session_recordings_access_id_host_access_id_fk" FOREIGN KEY ("access_id") REFERENCES "public"."host_access"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "session_share_participants" ADD CONSTRAINT "session_share_participants_share_id_session_shares_id_fk" FOREIGN KEY ("share_id") REFERENCES "public"."session_shares"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "session_share_participants" ADD CONSTRAINT "session_share_participants_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "session_shares" ADD CONSTRAINT "session_shares_host_id_ssh_data_id_fk" FOREIGN KEY ("host_id") REFERENCES "public"."ssh_data"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "session_shares" ADD CONSTRAINT "session_shares_owner_user_id_users_id_fk" FOREIGN KEY ("owner_user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "session_shares" ADD CONSTRAINT "session_shares_target_user_id_users_id_fk" FOREIGN KEY ("target_user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "sessions" ADD CONSTRAINT "sessions_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "shared_host_auth_overrides" ADD CONSTRAINT "shared_host_auth_overrides_host_id_ssh_data_id_fk" FOREIGN KEY ("host_id") REFERENCES "public"."ssh_data"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "shared_host_auth_overrides" ADD CONSTRAINT "shared_host_auth_overrides_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "shared_host_auth_overrides" ADD CONSTRAINT "shared_host_auth_overrides_credential_id_ssh_credentials_id_fk" FOREIGN KEY ("credential_id") REFERENCES "public"."ssh_credentials"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "shared_host_secrets" ADD CONSTRAINT "shared_host_secrets_host_access_id_host_access_id_fk" FOREIGN KEY ("host_access_id") REFERENCES "public"."host_access"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "shared_host_secrets" ADD CONSTRAINT "shared_host_secrets_target_user_id_users_id_fk" FOREIGN KEY ("target_user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "shared_host_secrets" ADD CONSTRAINT "shared_host_secrets_original_credential_id_ssh_credentials_id_fk" FOREIGN KEY ("original_credential_id") REFERENCES "public"."ssh_credentials"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "snippet_access" ADD CONSTRAINT "snippet_access_snippet_id_snippets_id_fk" FOREIGN KEY ("snippet_id") REFERENCES "public"."snippets"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "snippet_access" ADD CONSTRAINT "snippet_access_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "snippet_access" ADD CONSTRAINT "snippet_access_role_id_roles_id_fk" FOREIGN KEY ("role_id") REFERENCES "public"."roles"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "snippet_access" ADD CONSTRAINT "snippet_access_granted_by_users_id_fk" FOREIGN KEY ("granted_by") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "snippet_folders" ADD CONSTRAINT "snippet_folders_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "snippets" ADD CONSTRAINT "snippets_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "ssh_credential_usage" ADD CONSTRAINT "ssh_credential_usage_credential_id_ssh_credentials_id_fk" FOREIGN KEY ("credential_id") REFERENCES "public"."ssh_credentials"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "ssh_credential_usage" ADD CONSTRAINT "ssh_credential_usage_host_id_ssh_data_id_fk" FOREIGN KEY ("host_id") REFERENCES "public"."ssh_data"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "ssh_credential_usage" ADD CONSTRAINT "ssh_credential_usage_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "ssh_credentials" ADD CONSTRAINT "ssh_credentials_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "ssh_folders" ADD CONSTRAINT "ssh_folders_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "ssh_folders" ADD CONSTRAINT "ssh_folders_credential_id_ssh_credentials_id_fk" FOREIGN KEY ("credential_id") REFERENCES "public"."ssh_credentials"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "sync_tombstones" ADD CONSTRAINT "sync_tombstones_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "termix_identities" ADD CONSTRAINT "termix_identities_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "termix_identity_ca" ADD CONSTRAINT "termix_identity_ca_identity_id_termix_identities_id_fk" FOREIGN KEY ("identity_id") REFERENCES "public"."termix_identities"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "termix_identity_ca" ADD CONSTRAINT "termix_identity_ca_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "termix_identity_keys" ADD CONSTRAINT "termix_identity_keys_identity_id_termix_identities_id_fk" FOREIGN KEY ("identity_id") REFERENCES "public"."termix_identities"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "termix_identity_keys" ADD CONSTRAINT "termix_identity_keys_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "termix_identity_keys" ADD CONSTRAINT "termix_identity_keys_credential_id_ssh_credentials_id_fk" FOREIGN KEY ("credential_id") REFERENCES "public"."ssh_credentials"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "tmux_session_tags" ADD CONSTRAINT "tmux_session_tags_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "tmux_session_tags" ADD CONSTRAINT "tmux_session_tags_host_id_ssh_data_id_fk" FOREIGN KEY ("host_id") REFERENCES "public"."ssh_data"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "transfer_recent" ADD CONSTRAINT "transfer_recent_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "transfer_recent" ADD CONSTRAINT "transfer_recent_source_host_id_ssh_data_id_fk" FOREIGN KEY ("source_host_id") REFERENCES "public"."ssh_data"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "transfer_recent" ADD CONSTRAINT "transfer_recent_dest_host_id_ssh_data_id_fk" FOREIGN KEY ("dest_host_id") REFERENCES "public"."ssh_data"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "trusted_devices" ADD CONSTRAINT "trusted_devices_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "user_open_tabs" ADD CONSTRAINT "user_open_tabs_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "user_open_tabs" ADD CONSTRAINT "user_open_tabs_host_id_ssh_data_id_fk" FOREIGN KEY ("host_id") REFERENCES "public"."ssh_data"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "user_preferences" ADD CONSTRAINT "user_preferences_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "user_roles" ADD CONSTRAINT "user_roles_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "user_roles" ADD CONSTRAINT "user_roles_role_id_roles_id_fk" FOREIGN KEY ("role_id") REFERENCES "public"."roles"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "user_roles" ADD CONSTRAINT "user_roles_granted_by_users_id_fk" FOREIGN KEY ("granted_by") REFERENCES "public"."users"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "vault_profiles" ADD CONSTRAINT "vault_profiles_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "vault_tokens" ADD CONSTRAINT "vault_tokens_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "vault_tokens" ADD CONSTRAINT "vault_tokens_profile_id_vault_profiles_id_fk" FOREIGN KEY ("profile_id") REFERENCES "public"."vault_profiles"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "webauthn_credentials" ADD CONSTRAINT "webauthn_credentials_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-CREATE UNIQUE INDEX "idx_host_health_checks_user_host" ON "host_health_checks" USING btree ("user_id","host_id");--> statement-breakpoint
-CREATE UNIQUE INDEX "idx_host_metrics_prefs_user_host" ON "host_metrics_preferences" USING btree ("user_id","host_id");--> statement-breakpoint
-CREATE UNIQUE INDEX "idx_opkssh_tokens_user_host" ON "opkssh_tokens" USING btree ("user_id","host_id");--> statement-breakpoint
-CREATE UNIQUE INDEX "shared_host_auth_overrides_host_user_protocol_unique" ON "shared_host_auth_overrides" USING btree ("host_id","user_id","protocol");--> statement-breakpoint
-CREATE UNIQUE INDEX "idx_shared_host_secrets_scope" ON "shared_host_secrets" USING btree ("host_access_id","target_user_id","protocol");--> statement-breakpoint
-CREATE UNIQUE INDEX "idx_user_roles_user_role" ON "user_roles" USING btree ("user_id","role_id");--> statement-breakpoint
-CREATE UNIQUE INDEX "idx_vault_tokens_user_profile" ON "vault_tokens" USING btree ("user_id","profile_id");

drizzle/postgres/0001_worried_silvermane.sql

@@ -1,9 +0,0 @@
-CREATE TABLE "host_sidebar_preferences" (
-	"user_id" varchar(255) PRIMARY KEY NOT NULL,
-	"data" text NOT NULL,
-	"updated_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL
-);
---> statement-breakpoint
-ALTER TABLE "ssh_data" ADD COLUMN "sort_order" integer;--> statement-breakpoint
-ALTER TABLE "ssh_folders" ADD COLUMN "sort_order" integer;--> statement-breakpoint
-ALTER TABLE "host_sidebar_preferences" ADD CONSTRAINT "host_sidebar_preferences_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;

drizzle/postgres/0002_clear_cerebro.sql

@@ -1,9 +0,0 @@
-CREATE TABLE "credential_sidebar_preferences" (
-	"user_id" varchar(255) PRIMARY KEY NOT NULL,
-	"data" text NOT NULL,
-	"updated_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL
-);
---> statement-breakpoint
-ALTER TABLE "ssh_credentials" ADD COLUMN "pin" boolean DEFAULT false NOT NULL;--> statement-breakpoint
-ALTER TABLE "ssh_credentials" ADD COLUMN "sort_order" integer;--> statement-breakpoint
-ALTER TABLE "credential_sidebar_preferences" ADD CONSTRAINT "credential_sidebar_preferences_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;

drizzle/postgres/0003_harsh_gravity.sql

@@ -1 +0,0 @@
-ALTER TABLE "snippets" ADD COLUMN "is_note" boolean DEFAULT false NOT NULL;

drizzle/postgres/0004_great_victor_mancha.sql

@@ -1,26 +0,0 @@
-CREATE TABLE "proxmox_node_history" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"host_id" integer NOT NULL,
-	"ts" text DEFAULT CURRENT_TIMESTAMP NOT NULL,
-	"cpu_percent" double precision,
-	"mem_percent" double precision,
-	"disk_percent" double precision,
-	"net_rx_bytes" integer,
-	"net_tx_bytes" integer
-);
---> statement-breakpoint
-CREATE TABLE "proxmox_stats_preferences" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"user_id" varchar(255) NOT NULL,
-	"host_id" integer NOT NULL,
-	"layout" text NOT NULL,
-	"created_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL,
-	"updated_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL
-);
---> statement-breakpoint
-ALTER TABLE "ssh_data" ADD COLUMN "enable_proxmox_stats" boolean DEFAULT false NOT NULL;--> statement-breakpoint
-ALTER TABLE "ssh_data" ADD COLUMN "proxmox_stats_config" text;--> statement-breakpoint
-ALTER TABLE "proxmox_node_history" ADD CONSTRAINT "proxmox_node_history_host_id_ssh_data_id_fk" FOREIGN KEY ("host_id") REFERENCES "public"."ssh_data"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "proxmox_stats_preferences" ADD CONSTRAINT "proxmox_stats_preferences_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "proxmox_stats_preferences" ADD CONSTRAINT "proxmox_stats_preferences_host_id_ssh_data_id_fk" FOREIGN KEY ("host_id") REFERENCES "public"."ssh_data"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-CREATE UNIQUE INDEX "idx_proxmox_stats_prefs_user_host" ON "proxmox_stats_preferences" USING btree ("user_id","host_id");

drizzle/postgres/0005_loose_captain_marvel.sql

@@ -1 +0,0 @@
-ALTER TABLE "ssh_data" ADD COLUMN "enable_terminal_toolbar" boolean DEFAULT true NOT NULL;

drizzle/postgres/0006_gigantic_thor_girl.sql

@@ -1,42 +0,0 @@
-CREATE TABLE "fleet_inventory" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"host_id" integer NOT NULL,
-	"user_id" varchar(255) NOT NULL,
-	"os_pretty_name" text,
-	"kernel" text,
-	"architecture" text,
-	"hostname" text,
-	"uptime_seconds" integer,
-	"ip" text,
-	"package_manager" text,
-	"collected_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE "fleet_members" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"fleet_id" integer NOT NULL,
-	"host_id" integer NOT NULL,
-	"added_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE "fleets" (
-	"id" serial PRIMARY KEY NOT NULL,
-	"user_id" varchar(255) NOT NULL,
-	"name" varchar(255) NOT NULL,
-	"description" text,
-	"color" text,
-	"icon" text,
-	"tag_rules" text,
-	"sync_id" varchar(255),
-	"created_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL,
-	"updated_at" text DEFAULT CURRENT_TIMESTAMP NOT NULL,
-	CONSTRAINT "fleets_sync_id_unique" UNIQUE("sync_id")
-);
---> statement-breakpoint
-ALTER TABLE "fleet_inventory" ADD CONSTRAINT "fleet_inventory_host_id_ssh_data_id_fk" FOREIGN KEY ("host_id") REFERENCES "public"."ssh_data"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "fleet_inventory" ADD CONSTRAINT "fleet_inventory_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "fleet_members" ADD CONSTRAINT "fleet_members_fleet_id_fleets_id_fk" FOREIGN KEY ("fleet_id") REFERENCES "public"."fleets"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "fleet_members" ADD CONSTRAINT "fleet_members_host_id_ssh_data_id_fk" FOREIGN KEY ("host_id") REFERENCES "public"."ssh_data"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "fleets" ADD CONSTRAINT "fleets_user_id_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."users"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-CREATE UNIQUE INDEX "idx_fleet_inventory_host" ON "fleet_inventory" USING btree ("host_id","user_id");--> statement-breakpoint
-CREATE UNIQUE INDEX "idx_fleet_members_fleet_host" ON "fleet_members" USING btree ("fleet_id","host_id");

drizzle/postgres/0007_orange_mandrill.sql

@@ -1,2 +0,0 @@
-ALTER TABLE "ssh_data" ADD COLUMN "parent_host_id" integer;--> statement-breakpoint
-ALTER TABLE "ssh_data" ADD CONSTRAINT "ssh_data_parent_host_id_ssh_data_id_fk" FOREIGN KEY ("parent_host_id") REFERENCES "public"."ssh_data"("id") ON DELETE set null ON UPDATE no action;