New Crowdin updates (#836)

* New translations en.json (Romanian)

[ci skip]

* New translations en.json (French)

[ci skip]

* New translations en.json (Spanish)

[ci skip]

* New translations en.json (Afrikaans)

[ci skip]

* New translations en.json (Arabic)

[ci skip]

* New translations en.json (Bulgarian)

[ci skip]

* New translations en.json (Catalan)

[ci skip]

* New translations en.json (Czech)

[ci skip]

* New translations en.json (Danish)

[ci skip]

* New translations en.json (German)

[ci skip]

* New translations en.json (Greek)

[ci skip]

* New translations en.json (Finnish)

[ci skip]

* New translations en.json (Hebrew)

[ci skip]

* New translations en.json (Hungarian)

[ci skip]

* New translations en.json (Italian)

[ci skip]

* New translations en.json (Japanese)

[ci skip]

* New translations en.json (Korean)

[ci skip]

* New translations en.json (Dutch)

[ci skip]

* New translations en.json (Norwegian)

[ci skip]

* New translations en.json (Polish)

[ci skip]

* New translations en.json (Portuguese)

[ci skip]

* New translations en.json (Russian)

[ci skip]

* New translations en.json (Serbian (Cyrillic))

[ci skip]

* New translations en.json (Swedish)

[ci skip]

* New translations en.json (Turkish)

[ci skip]

* New translations en.json (Ukrainian)

[ci skip]

* New translations en.json (Chinese Simplified)

[ci skip]

* New translations en.json (Chinese Traditional)

[ci skip]

* New translations en.json (Vietnamese)

[ci skip]

* New translations en.json (Portuguese, Brazilian)

[ci skip]

* New translations en.json (Indonesian)

[ci skip]

* New translations en.json (Bengali)

[ci skip]

* New translations en.json (Thai)

[ci skip]

* New translations en.json (Hindi)

[ci skip]

.dockerignore

@@ -31,7 +31,6 @@ Thumbs.db
 .gitignore
 
 README.md
-README-CN.md
 CONTRIBUTING.md
 LICENSE
 

.editorconfig

@@ -6,7 +6,7 @@ end_of_line = lf
 insert_final_newline = true
 trim_trailing_whitespace = true
 
-[*.{js,jsx,ts,tsx,json,css,scss,md,yml,yaml}]
+[*.{js,cjs,mjs,jsx,ts,tsx,json,css,scss,md,yml,yaml}]
 indent_style = space
 indent_size = 2
 

.gitattributes

@@ -1,6 +1,8 @@
 * text=auto eol=lf
 
 *.js text eol=lf
+*.cjs text eol=lf
+*.mjs text eol=lf
 *.jsx text eol=lf
 *.ts text eol=lf
 *.tsx text eol=lf
@@ -29,3 +31,4 @@
 *.woff2 binary
 *.ttf binary
 *.eot binary
+*.icns binary

.github/FUNDING.yml

@@ -1 +0,0 @@
-github: [LukeGus]

.github/workflows/docker.yml

@@ -25,12 +25,12 @@ jobs:
           fetch-depth: 1
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v3
+        uses: docker/setup-qemu-action@v4
         with:
-          platforms: linux/amd64,linux/arm64,linux/arm/v7
+          platforms: linux/amd64,linux/arm64
 
       - name: Setup Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: useblacksmith/setup-docker-builder@v1
 
       - name: Determine tags
         id: tags
@@ -57,7 +57,7 @@ jobs:
           echo "ALL_TAGS=$(IFS=,; echo "${ALL_TAGS[*]}")" >> $GITHUB_ENV
 
       - name: Login to GHCR
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: ghcr.io
           username: lukegus
@@ -65,27 +65,28 @@ jobs:
 
       - name: Login to Docker Hub (prod only)
         if: ${{ github.event.inputs.build_type == 'Production' }}
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           username: bugattiguy527
           password: ${{ secrets.DOCKERHUB_TOKEN }}
 
       - name: Build and push multi-arch image
-        uses: docker/build-push-action@v5
+        uses: useblacksmith/build-push-action@v2
         with:
           context: .
           file: ./docker/Dockerfile
           push: true
-          platforms: linux/amd64,linux/arm64,linux/arm/v7
+          platforms: linux/amd64,linux/arm64
           tags: ${{ env.ALL_TAGS }}
           build-args: |
-            BUILDKIT_INLINE_CACHE=1
             BUILDKIT_CONTEXT_KEEP_GIT_DIR=1
           labels: |
             org.opencontainers.image.source=https://github.com/${{ github.repository }}
             org.opencontainers.image.revision=${{ github.sha }}
             org.opencontainers.image.created=${{ github.run_id }}
-          outputs: type=registry,compression=gzip,compression-level=9
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+          outputs: type=registry,compression=zstd
 
       - name: Cleanup Docker
         if: always()

.github/workflows/electron.yml

@@ -26,7 +26,7 @@ on:
 
 jobs:
   build-windows:
-    runs-on: windows-latest
+    runs-on: blacksmith-4vcpu-windows-2025
     if: (github.event.inputs.build_type == 'all' || github.event.inputs.build_type == 'windows' || github.event.inputs.build_type == '') && github.event.inputs.artifact_destination != 'submit'
     permissions:
       contents: write
@@ -40,26 +40,11 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: "20"
+          node-version-file: ".nvmrc"
           cache: "npm"
 
       - name: Install dependencies
-        run: |
-          $maxAttempts = 3
-          $attempt = 1
-          while ($attempt -le $maxAttempts) {
-            try {
-              npm ci
-              break
-            } catch {
-              if ($attempt -eq $maxAttempts) {
-                Write-Error "npm ci failed after $maxAttempts attempts"
-                exit 1
-              }
-              Start-Sleep -Seconds 10
-              $attempt++
-            }
-          }
+        run: npm ci
 
       - name: Get version
         id: package-version
@@ -131,7 +116,7 @@ jobs:
           retention-days: 30
 
   build-linux:
-    runs-on: blacksmith-4vcpu-ubuntu-2404
+    runs-on: blacksmith-8vcpu-ubuntu-2404
     if: (github.event.inputs.build_type == 'all' || github.event.inputs.build_type == 'linux' || github.event.inputs.build_type == '') && github.event.inputs.artifact_destination != 'submit'
     permissions:
       contents: write
@@ -145,27 +130,17 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: "20"
+          node-version-file: ".nvmrc"
           cache: "npm"
 
-      - name: Install system dependencies for AppImage
+      - name: Install system dependencies
         run: |
           sudo apt-get update
-          sudo apt-get install -y libfuse2
+          sudo apt-get install -y libfuse2 flatpak flatpak-builder imagemagick
 
       - name: Install dependencies
         run: |
-          for i in 1 2 3;
-          do
-            if npm ci; then
-              break
-            else
-              if [ $i -eq 3 ]; then
-                exit 1
-              fi
-              sleep 10
-            fi
-          done
+          npm ci
           npm install --force @rollup/rollup-linux-x64-gnu
           npm install --force @rollup/rollup-linux-arm64-gnu
           npm install --force @rollup/rollup-linux-arm-gnueabihf
@@ -267,11 +242,6 @@ jobs:
           path: release/termix_linux_armv7l_portable.tar.gz
           retention-days: 30
 
-      - name: Install Flatpak builder and dependencies
-        run: |
-          sudo apt-get update
-          sudo apt-get install -y flatpak flatpak-builder imagemagick
-
       - name: Add Flathub repository
         run: |
           sudo flatpak remote-add --if-not-exists flathub https://flathub.org/repo/flathub.flatpakrepo
@@ -319,7 +289,6 @@ jobs:
           cd flatpak-build
           flatpak-builder --repo=repo --force-clean --disable-rofiles-fuse build-dir com.karmaa.termix.yml
 
-          # Determine the architecture
           ARCH=$(uname -m)
           if [ "$ARCH" = "x86_64" ]; then
             FLATPAK_ARCH="x86_64"
@@ -329,7 +298,6 @@ jobs:
             FLATPAK_ARCH="$ARCH"
           fi
 
-          # Build bundle for the current architecture
           flatpak build-bundle repo ../release/termix_linux_flatpak.flatpak com.karmaa.termix --runtime-repo=https://flathub.org/repo/flathub.flatpakrepo
 
       - name: Create flatpakref file
@@ -355,7 +323,7 @@ jobs:
           retention-days: 30
 
   build-macos:
-    runs-on: macos-latest
+    runs-on: blacksmith-6vcpu-macos-latest
     if: (github.event.inputs.build_type == 'macos' || github.event.inputs.build_type == 'all') && github.event.inputs.artifact_destination != 'submit'
     needs: []
     permissions:
@@ -370,22 +338,12 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: "20"
+          node-version-file: ".nvmrc"
           cache: "npm"
 
       - name: Install dependencies
         run: |
-          for i in 1 2 3;
-          do
-            if npm ci; then
-              break
-            else
-              if [ $i -eq 3 ]; then
-                exit 1
-              fi
-              sleep 10
-            fi
-          done
+          npm ci
           npm install --force @rollup/rollup-darwin-arm64
           npm install dmg-license
 
@@ -433,6 +391,7 @@ jobs:
         env:
           ELECTRON_BUILDER_ALLOW_UNRESOLVED_DEPENDENCIES: true
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          NODE_OPTIONS: --max-old-space-size=4096
         run: |
           CURRENT_VERSION=$(node -p "require('./package.json').version")
           BUILD_VERSION="${{ github.run_number }}"
@@ -490,11 +449,12 @@ jobs:
           APPLE_ID_PASSWORD: ${{ secrets.APPLE_ID_PASSWORD }}
           APPLE_APP_SPECIFIC_PASSWORD: ${{ secrets.APPLE_ID_PASSWORD }}
           APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
+          NODE_OPTIONS: --max-old-space-size=4096
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           if [ "${{ steps.check_certs.outputs.has_certs }}" != "true" ]; then
             npm run build
           fi
-          export GH_TOKEN="${{ secrets.GITHUB_TOKEN }}"
           npx electron-builder --mac dmg --universal --x64 --arm64 --publish never
 
       - name: Upload macOS MAS PKG
@@ -583,7 +543,7 @@ jobs:
           security delete-keychain $RUNNER_TEMP/dev-signing.keychain-db || true
 
   submit-to-chocolatey:
-    runs-on: windows-latest
+    runs-on: blacksmith-4vcpu-windows-2025
     if: github.event.inputs.artifact_destination == 'submit' && (github.event.inputs.build_type == 'all' || github.event.inputs.build_type == 'windows' || github.event.inputs.build_type == '')
     permissions:
       contents: read
@@ -688,7 +648,7 @@ jobs:
           retention-days: 30
 
   submit-to-flatpak:
-    runs-on: blacksmith-4vcpu-ubuntu-2404
+    runs-on: blacksmith-8vcpu-ubuntu-2404
     if: github.event.inputs.artifact_destination == 'submit' && (github.event.inputs.build_type == 'all' || github.event.inputs.build_type == 'linux' || github.event.inputs.build_type == '')
     needs: []
     permissions:
@@ -735,7 +695,7 @@ jobs:
           echo "appimage_arm64_name=$APPIMAGE_ARM64_NAME" >> $GITHUB_OUTPUT
           echo "checksum_arm64=$CHECKSUM_ARM64" >> $GITHUB_OUTPUT
 
-      - name: Install ImageMagick for icon generation
+      - name: Install dependencies
         run: |
           sudo apt-get update
           sudo apt-get install -y imagemagick
@@ -775,7 +735,7 @@ jobs:
           retention-days: 30
 
   submit-to-homebrew:
-    runs-on: macos-latest
+    runs-on: blacksmith-6vcpu-macos-latest
     if: github.event.inputs.artifact_destination == 'submit' && (github.event.inputs.build_type == 'all' || github.event.inputs.build_type == 'macos')
     needs: []
     permissions:
@@ -844,7 +804,7 @@ jobs:
           retention-days: 30
 
   upload-to-release:
-    runs-on: blacksmith-4vcpu-ubuntu-2404
+    runs-on: blacksmith-8vcpu-ubuntu-2404
     if: github.event.inputs.artifact_destination == 'release'
     needs: [build-windows, build-linux, build-macos]
     permissions:
@@ -880,7 +840,7 @@ jobs:
           GH_TOKEN: ${{ github.token }}
 
   submit-to-testflight:
-    runs-on: macos-latest
+    runs-on: blacksmith-6vcpu-macos-latest
     if: github.event.inputs.artifact_destination == 'submit' && (github.event.inputs.build_type == 'all' || github.event.inputs.build_type == 'macos')
     needs: []
     permissions:
@@ -895,22 +855,12 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: "20"
+          node-version-file: ".nvmrc"
           cache: "npm"
 
       - name: Install dependencies
         run: |
-          for i in 1 2 3;
-          do
-            if npm ci; then
-              break
-            else
-              if [ $i -eq 3 ]; then
-                exit 1
-              fi
-              sleep 10
-            fi
-          done
+          npm ci
           npm install --force @rollup/rollup-darwin-arm64
           npm install dmg-license
 
@@ -958,6 +908,7 @@ jobs:
         env:
           ELECTRON_BUILDER_ALLOW_UNRESOLVED_DEPENDENCIES: true
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          NODE_OPTIONS: --max-old-space-size=4096
         run: |
           CURRENT_VERSION=$(node -p "require('./package.json').version")
           BUILD_VERSION="${{ github.run_number }}"

.github/workflows/openapi.yml

@@ -15,7 +15,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: "20"
+          node-version-file: ".nvmrc"
           cache: "npm"
 
       - name: Install dependencies

.github/workflows/pr-check.yml

@@ -8,6 +8,9 @@ jobs:
   lint-and-build:
     runs-on: blacksmith-2vcpu-ubuntu-2404
 
+    env:
+      NODE_OPTIONS: "--max-old-space-size=4096"
+
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
@@ -15,12 +18,11 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: "20"
+          node-version-file: ".nvmrc"
+          cache: "npm"
 
       - name: Install dependencies
-        run: |
-          rm -rf node_modules package-lock.json
-          npm install
+        run: npm ci
 
       - name: Run ESLint
         run: npx eslint .

.gitignore

@@ -11,8 +11,7 @@ dist
 dist-ssr
 *.local
 
-.vscode/*
-!.vscode/extensions.json
+.vscode/
 .idea
 .DS_Store
 *.suo
@@ -20,12 +19,15 @@ dist-ssr
 *.njsproj
 *.sln
 *.sw?
+
 /db/
 /release/
 /.claude/
 /ssl/
-.env
-/.mcp.json
+/uploads/
 /nul
-/.vscode/
+.env
+electron/build-info.cjs
+/.mcp.json
 /CLAUDE.md
+/old_db/

.npmrc

@@ -0,0 +1 @@
+legacy-peer-deps=true

.nvmrc

@@ -1 +1 @@
-20
+24

Casks/termix.rb

@@ -1,6 +1,6 @@
 cask "termix" do
-  version "1.11.0"
-  sha256 "c62ea2c3097f466229edcbd65a5ea49d898028a716a3023704c5f644d973c70d"
+  version "2.3.0"
+  sha256 "42a42ac42938e5929ee67c71f970a82e37058b26cdd50fb3503f54aea7085463"
 
   url "https://github.com/Termix-SSH/Termix/releases/download/release-#{version}-tag/termix_macos_universal_dmg.dmg"
   name "Termix"

README-CN.md

@@ -1,172 +0,0 @@
-# 仓库统计
-
-<p align="center">
-  <a href="README.md"><img src="https://flagcdn.com/us.svg" alt="English" width="24" height="16"> 英文</a> |
-  <img src="https://flagcdn.com/cn.svg" alt="中文" width="24" height="16"> 中文
-</p>
-
-![GitHub Repo stars](https://img.shields.io/github/stars/Termix-SSH/Termix?style=flat&label=Stars)
-![GitHub forks](https://img.shields.io/github/forks/Termix-SSH/Termix?style=flat&label=Forks)
-![GitHub Release](https://img.shields.io/github/v/release/Termix-SSH/Termix?style=flat&label=Release)
-<a href="https://discord.gg/jVQGdvHDrf"><img alt="Discord" src="https://img.shields.io/discord/1347374268253470720"></a>
-
-<p align="center">
-  <img src="./repo-images/RepoOfTheDay.png" alt="Repo of the Day Achievement" style="width: 300px; height: auto;">
-  <br>
-  <small style="color: #666;">2025年9月1日获得</small>
-</p>
-
-<br />
-<p align="center">
-  <a href="https://github.com/Termix-SSH/Termix">
-    <img alt="Termix Banner" src=./repo-images/HeaderImage.png style="width: auto; height: auto;">  </a>
-</p>
-
-如果你愿意，可以在这里支持这个项目！\
-[![GitHub Sponsor](https://img.shields.io/badge/Sponsor-LukeGus-181717?style=for-the-badge&logo=github&logoColor=white)](https://github.com/sponsors/LukeGus)
-
-# 概览
-
-<p align="center">
-  <a href="https://github.com/Termix-SSH/Termix">
-    <img alt="Termix Banner" src=./public/icon.svg style="width: 250px; height: 250px;">  </a>
-</p>
-
-Termix 是一个开源、永久免费、自托管的一体化服务器管理平台。它提供了一个基于网页的解决方案，通过一个直观的界面管理你的服务器和基础设施。Termix
-提供 SSH 终端访问、SSH 隧道功能以及远程文件管理，还会陆续添加更多工具。Termix 是适用于所有平台的完美免费自托管 Termius 替代品。
-
-# 功能
-
-- **SSH 终端访问** - 功能齐全的终端，具有分屏支持（最多 4 个面板）和类似浏览器的选项卡系统。包括对自定义终端的支持，包括常见终端主题、字体和其他组件
-- **SSH 隧道管理** - 创建和管理 SSH 隧道，具有自动重新连接和健康监控功能
-- **远程文件管理器** - 直接在远程服务器上管理文件，支持查看和编辑代码、图像、音频和视频。无缝上传、下载、重命名、删除和移动文件
-- **Docker 管理** - 启动、停止、暂停、删除容器。查看容器统计信息。使用 docker exec 终端控制容器。它不是用来替代 Portainer 或 Dockge，而是用于简单管理你的容器而不是创建它们。
-- **SSH 主机管理器** - 保存、组织和管理您的 SSH 连接，支持标签和文件夹，并轻松保存可重用的登录信息，同时能够自动部署 SSH 密钥
-- **服务器统计** - 在任何 SSH 服务器上查看 CPU、内存和磁盘使用情况以及网络、正常运行时间和系统信息
-- **仪表板** - 在仪表板上一目了然地查看服务器信息
-- **RBAC** - 创建角色并在用户/角色之间共享主机
-- **用户认证** - 安全的用户管理，具有管理员控制以及 OIDC 和 2FA (TOTP) 支持。查看所有平台上的活动用户会话并撤销权限。将您的 OIDC/本地帐户链接在一起。
-- **数据库加密** - 后端存储为加密的 SQLite 数据库文件。查看[文档](https://docs.termix.site/security)了解更多信息。
-- **数据导出/导入** - 导出和导入 SSH 主机、凭据和文件管理器数据
-- **自动 SSL 设置** - 内置 SSL 证书生成和管理，支持 HTTPS 重定向
-- **现代用户界面** - 使用 React、Tailwind CSS 和 Shadcn 构建的简洁的桌面/移动设备友好界面。可选择基于深色或浅色模式的用户界面。
-- **语言** - 内置支持约 30 种语言（由 [Crowdin](https://docs.termix.site/translations) 管理）
-- **平台支持** - 可作为 Web 应用程序、桌面应用程序（Windows、Linux 和 macOS）、PWA 以及适用于 iOS 和 Android 的专用移动/平板电脑应用程序。
-- **SSH 工具** - 创建可重用的命令片段，单击即可执行。在多个打开的终端上同时运行一个命令。
-- **命令历史** - 自动完成并查看以前运行的 SSH 命令
-- **快速连接** - 无需保存连接数据即可连接到服务器
-- **命令面板** - 双击左 Shift 键可快速使用键盘访问 SSH 连接
-- **SSH 功能丰富** - 支持跳板机、Warpgate、基于 TOTP 的连接、SOCKS5、密码自动填充等。
-- **网络图** - 自定义您的仪表板，根据您的 SSH 连接可视化您的家庭实验室，支持状态显示
-
-# 计划功能
-
-查看 [项目](https://github.com/orgs/Termix-SSH/projects/2) 了解所有计划功能。如果你想贡献代码，请参阅 [贡献指南](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md)。
-
-# 安装
-
-支持的设备：
-
-- 网站（任何平台上的任何现代浏览器，如 Chrome、Safari 和 Firefox）（包括 PWA 支持）
-- Windows（x64/ia32）
-  - 便携版
-  - MSI 安装程序
-  - Chocolatey 软件包管理器
-- Linux（x64/ia32）
-  - 便携版
-  - AUR
-  - AppImage
-  - Deb
-  - Flatpak
-- macOS（x64/ia32 on v12.0+）
-  - Apple App Store
-  - DMG
-  - Homebrew
-- iOS/iPadOS（v15.1+）
-  - Apple App Store
-  - ISO
-- Android（v7.0+）
-  - Google Play 商店
-  - APK
-
-访问 Termix [文档](https://docs.termix.site/install) 了解有关如何在所有平台上安装 Termix 的更多信息。或者，在此处查看示例 Docker Compose 文件：
-
-```yaml
-services:
-  termix:
-    image: ghcr.io/lukegus/termix:latest
-    container_name: termix
-    restart: unless-stopped
-    ports:
-      - "8080:8080"
-    volumes:
-      - termix-data:/app/data
-    environment:
-      PORT: "8080"
-
-volumes:
-  termix-data:
-    driver: local
-```
-
-# 赞助商
-
-<p align="left">
-  <a href="https://www.digitalocean.com/">
-    <img src="https://opensource.nyc3.cdn.digitaloceanspaces.com/attribution/assets/SVG/DO_Logo_horizontal_blue.svg" height="50" alt="DigitalOcean">
-  </a>
-  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
-  <a href="https://crowdin.com/">
-    <img src="https://support.crowdin.com/assets/logos/core-logo/svg/crowdin-core-logo-cDark.svg" height="50" alt="Crowdin">
-  </a>
-  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
-  <a href="https://www.blacksmith.sh/">
-    <img src="https://cdn.prod.website-files.com/681bfb0c9a4601bc6e288ec4/683ca9e2c5186757092611b8_e8cb22127df4da0811c4120a523722d2_logo-backsmith-wordmark-light.svg" height="50" alt="Crowdin">
-  </a>
-</p>
-
-# 支持
-
-如果你需要 Termix 的帮助或想要请求功能，请访问 [Issues](https://github.com/Termix-SSH/Support/issues) 页面，登录并点击 `New Issue`。
-请尽可能详细地描述你的问题，最好使用英语。你也可以加入 [Discord](https://discord.gg/jVQGdvHDrf) 服务器并访问支持
-频道，但响应时间可能较长。
-
-# 展示
-
-[![](https://utfs.io/f/nGnSqDveMsqxqiKJF5EnObSopHatulx93N0E1KVsP7hvjMfF)](https://www.youtube.com/watch?v=j1_I1mkhUkE)
-
-<p align="center">
-  <img src="./repo-images/Image 1.png" width="400" alt="Termix Demo 1"/>
-  <img src="./repo-images/Image 2.png" width="400" alt="Termix Demo 2"/>
-</p>
-
-<p align="center">
-  <img src="./repo-images/Image 3.png" width="400" alt="Termix Demo 3"/>
-  <img src="./repo-images/Image 4.png" width="400" alt="Termix Demo 4"/>
-</p>
-
-<p align="center">
-  <img src="./repo-images/Image 5.png" width="400" alt="Termix Demo 5"/>
-  <img src="./repo-images/Image 6.png" width="400" alt="Termix Demo 6"/>
-</p>
-
-<p align="center">
-  <img src="./repo-images/Image 7.png" width="400" alt="Termix Demo 7"/>
-  <img src="./repo-images/Image 8.png" width="400" alt="Termix Demo 8"/>
-</p>
-
-<p align="center">
-  <img src="./repo-images/Image 9.png" width="400" alt="Termix Demo 9"/>
-  <img src="./repo-images/Image 10.png" width="400" alt="Termix Demo 10"/>
-</p>
-
-<p align="center">
-  <img src="./repo-images/Image 11.png" width="400" alt="Termix Demo 11"/>
-  <img src="./repo-images/Image 12.png" width="400" alt="Termix Demo 12"/>
-</p>
-
-某些视频和图像可能已过时或可能无法完美展示功能。
-
-# 许可证
-
-根据 Apache License Version 2.0 发布。更多信息请参见 LICENSE。

README.md

@@ -1,98 +1,221 @@
-# Repo Stats
+<div align="center">
 
-<p align="center">
-  <img src="https://flagcdn.com/us.svg" alt="English" width="24" height="16"> English | 
-  <a href="README-CN.md"><img src="https://flagcdn.com/cn.svg" alt="中文" width="24" height="16"> 中文</a>
+<img src="./public/icon.svg" width="120" height="120" alt="Termix Logo" />
+
+<h1>Termix</h1>
+
+<p>Self-hosted SSH management and remote desktop access</p>
+
+<p>
+  English ·
+  <a href="readme/README-CN.md">中文</a> ·
+  <a href="readme/README-JA.md">日本語</a> ·
+  <a href="readme/README-KO.md">한국어</a> ·
+  <a href="readme/README-FR.md">Français</a> ·
+  <a href="readme/README-DE.md">Deutsch</a> ·
+  <a href="readme/README-ES.md">Español</a> ·
+  <a href="readme/README-PT.md">Português</a> ·
+  <a href="readme/README-RU.md">Русский</a> ·
+  <a href="readme/README-AR.md">العربية</a> ·
+  <a href="readme/README-HI.md">हिन्दी</a> ·
+  <a href="readme/README-TR.md">Türkçe</a> ·
+  <a href="readme/README-VI.md">Tiếng Việt</a> ·
+  <a href="readme/README-IT.md">Italiano</a>
 </p>
 
-![GitHub Repo stars](https://img.shields.io/github/stars/Termix-SSH/Termix?style=flat&label=Stars)
-![GitHub forks](https://img.shields.io/github/forks/Termix-SSH/Termix?style=flat&label=Forks)
-![GitHub Release](https://img.shields.io/github/v/release/Termix-SSH/Termix?style=flat&label=Release)
-<a href="https://discord.gg/jVQGdvHDrf"><img alt="Discord" src="https://img.shields.io/discord/1347374268253470720"></a>
-
-<p align="center">
-  <img src="./repo-images/RepoOfTheDay.png" alt="Repo of the Day Achievement" style="width: 300px; height: auto;">
-  <br>
-  <small style="color: #666;">Achieved on September 1st, 2025</small>
+<p>
+  <img src="https://img.shields.io/github/stars/Termix-SSH/Termix?style=flat&label=Stars&color=F39044&labelColor=1a1a1a" />
+  <img src="https://img.shields.io/github/forks/Termix-SSH/Termix?style=flat&label=Forks&color=F39044&labelColor=1a1a1a" />
+  <img src="https://img.shields.io/github/v/release/Termix-SSH/Termix?style=flat&label=Release&color=F39044&labelColor=1a1a1a&v=1" />
+  <a href="https://discord.gg/jVQGdvHDrf"><img alt="Discord" src="https://img.shields.io/discord/1347374268253470720?color=F39044&labelColor=1a1a1a" /></a>
 </p>
 
 <br />
-<p align="center">
-  <a href="https://github.com/Termix-SSH/Termix">
-    <img alt="Termix Banner" src=./repo-images/HeaderImage.png style="width: auto; height: auto;">  </a>
+
+<img src="./repo-images/Termix Header.png" alt="Termix Banner" width="900" />
+
+<br />
+<br />
+
+<p>
+  <img src="repo-images/Repo of the Day.png" alt="Repo of the Day Achievement" width="280" />
+  <br />
+  <sub>Achieved on September 1st, 2025</sub>
 </p>
 
-If you would like, you can support the project here!\
-[![GitHub Sponsor](https://img.shields.io/badge/Sponsor-LukeGus-181717?style=for-the-badge&logo=github&logoColor=white)](https://github.com/sponsors/LukeGus)
+</div>
 
-# Overview
+<br />
 
-<p align="center">
-  <a href="https://github.com/Termix-SSH/Termix">
-    <img alt="Termix Banner" src=./public/icon.svg style="width: 250px; height: 250px;">  </a>
-</p>
+## Overview
 
-Termix is an open-source, forever-free, self-hosted all-in-one server management platform. It provides a multi-platform
-solution for managing your servers and infrastructure through a single, intuitive interface. Termix offers SSH terminal
-access, SSH tunneling capabilities, remote file management, and many other tools. Termix is the perfect
-free and self-hosted alternative to Termius available for all platforms.
+Termix is an open-source, forever-free, self-hosted all-in-one server management platform. It provides a multi-platform solution for managing your servers and infrastructure through a single, intuitive interface. Termix offers SSH terminal access, remote desktop control (RDP, VNC, Telnet), SSH tunneling capabilities, remote file management, and many other tools. Termix is the perfect free and self-hosted alternative to Termius available for all platforms.
 
-# Features
+<br />
+
+## Features
+
+<table>
+<tr>
+<td width="50%" valign="top">
+
+**SSH Terminal Access:**
+Full-featured terminal with split-screen support (up to 4 panels) with a browser-like tab system. Includes support for customizing the terminal including common terminal themes, fonts, and other components.
+
+</td>
+<td width="50%" valign="top">
+
+**Remote Desktop Access:**
+RDP, VNC, and Telnet support over the browser with complete customization and split screening.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**SSH Tunnel Management:**
+Create and manage server-to-server SSH tunnels with automatic reconnection, health monitoring, and local, remote, or dynamic SOCKS forwarding. Desktop client-to-server tunnel settings are stored locally per desktop install, optional C2S preset snapshots can be saved to the server, renamed, loaded, or deleted when you want to move a local tunnel configuration between clients.
+
+</td>
+<td width="50%" valign="top">
+
+**Remote File Manager:**
+Manage files directly on remote servers with support for viewing and editing code, images, audio, and video. Upload, download, rename, delete, and move files seamlessly with sudo support.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**Docker Management:**
+Start, stop, pause, remove containers. View container stats. Control container using docker exec terminal. It was not made to replace Portainer or Dockge but rather to simply manage your containers compared to creating them.
+
+</td>
+<td width="50%" valign="top">
+
+**SSH Host Manager:**
+Save, organize, and manage your SSH connections with tags and folders, and easily save reusable login info while being able to automate the deployment of SSH keys.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**Server Stats:**
+View CPU, memory, and disk usage along with network, uptime, system information, firewall, port monitor, on most Linux based servers.
+
+</td>
+<td width="50%" valign="top">
+
+**User Authentication:**
+Secure user management with admin controls and OIDC (with access control) and 2FA (TOTP) support. View active user sessions across all platforms and revoke permissions. Link your OIDC/Local accounts together.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**RBAC:**
+Create roles and share hosts across users/roles.
+
+</td>
+<td width="50%" valign="top">
+
+**Database Encryption:**
+Backend stored as encrypted SQLite database files. View [docs](https://docs.termix.site/security) for more.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**Network Graph:**
+Customize your Dashboard to visualize your homelab based off your SSH connections with status support.
+
+</td>
+<td width="50%" valign="top">
+
+**SSH Tools:**
+Create reusable command snippets that execute with a single click. Run one command simultaneously across multiple open terminals.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**Persistent Tabs:**
+SSH sessions and tabs stay open across devices/refreshes if enabled in user profile.
+
+</td>
+<td width="50%" valign="top">
+
+**Languages:**
+Built-in support ~30 languages (managed by [Crowdin](https://docs.termix.site/translations)).
+
+</td>
+</tr>
+</table>
+
+<br />
+
+<details>
+<summary><b>More features</b></summary>
+<br />
 
-- **SSH Terminal Access** - Full-featured terminal with split-screen support (up to 4 panels) with a browser-like tab system. Includes support for customizing the terminal including common terminal themes, fonts, and other components
-- **SSH Tunnel Management** - Create and manage SSH tunnels with automatic reconnection and health monitoring and support for -l or -r connections
-- **Remote File Manager** - Manage files directly on remote servers with support for viewing and editing code, images, audio, and video. Upload, download, rename, delete, and move files seamlessly with sudo support.
-- **Docker Management** - Start, stop, pause, remove containers. View container stats. Control container using docker exec terminal. It was not made to replace Portainer or Dockge but rather to simply manage your containers compared to creating them.
-- **SSH Host Manager** - Save, organize, and manage your SSH connections with tags and folders, and easily save reusable login info while being able to automate the deployment of SSH keys
-- **Server Stats** - View CPU, memory, and disk usage along with network, uptime, system information, firewall, port monitor, on most Linux based servers
 - **Dashboard** - View server information at a glance on your dashboard
-- **RBAC** - Create roles and share hosts across users/roles
-- **User Authentication** - Secure user management with admin controls and OIDC and 2FA (TOTP) support. View active user sessions across all platforms and revoke permissions. Link your OIDC/Local accounts together.
-- **Database Encryption** - Backend stored as encrypted SQLite database files. View [docs](https://docs.termix.site/security) for more.
+- **API Keys** - Create user-scoped API keys with expiration dates to be used for automation/CI
 - **Data Export/Import** - Export and import SSH hosts, credentials, and file manager data
 - **Automatic SSL Setup** - Built-in SSL certificate generation and management with HTTPS redirects
-- **Modern UI** - Clean desktop/mobile-friendly interface built with React, Tailwind CSS, and Shadcn. Choose between dark or light mode based UI. Use URL routes to open any connection in full-screen.
-- **Languages** - Built-in support ~30 languages (managed by [Crowdin](https://docs.termix.site/translations))
-- **Platform Support** - Available as a web app, desktop application (Windows, Linux, and macOS), PWA, and dedicated mobile/tablet app for iOS and Android.
-- **SSH Tools** - Create reusable command snippets that execute with a single click. Run one command simultaneously across multiple open terminals.
+- **Modern UI** - Clean desktop/mobile-friendly interface built with React, Tailwind CSS, and Shadcn. Choose between many different UI themes including light, dark, Dracula, etc. Use URL routes to open any connection in full-screen.
 - **Command History** - Auto-complete and view previously ran SSH commands
 - **Quick Connect** - Connect to a server without having to save the connection data
 - **Command Palette** - Double tap left shift to quickly access SSH connections with your keyboard
-- **SSH Feature Rich** - Supports jump hosts, Warpgate, TOTP based connections, SOCKS5, host key verification, password autofill, [OPKSSH](https://github.com/openpubkey/opkssh), etc.
-- **Network Graph** - Customize your Dashboard to visualize your homelab based off your SSH connections with status support
+- **SSH Feature Rich** - Supports jump hosts, Warpgate, TOTP based connections, SOCKS5, host key verification, password autofill, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, port knocking, etc.
 
-# Planned Features
+</details>
 
-See [Projects](https://github.com/orgs/Termix-SSH/projects/2) for all planned features. If you are looking to contribute, see [Contributing](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md).
+<br />
 
-# Installation
+## Platform Support
 
-Supported Devices:
+<table align="center">
+<tr>
+<th align="center">Platform</th>
+<th align="center">Distribution</th>
+</tr>
+<tr>
+<td align="center"><b>Web</b></td>
+<td>Any modern browser (Chrome, Safari, Firefox) · PWA support</td>
+</tr>
+<tr>
+<td align="center"><b>Windows</b> <sub>x64/ia32</sub></td>
+<td>Portable · MSI Installer · Chocolatey</td>
+</tr>
+<tr>
+<td align="center"><b>Linux</b> <sub>x64/ia32</sub></td>
+<td>Portable · AUR · AppImage · Deb · Flatpak</td>
+</tr>
+<tr>
+<td align="center"><b>macOS</b> <sub>x64/ia32, v12.0+</sub></td>
+<td>Apple App Store · DMG · Homebrew</td>
+</tr>
+<tr>
+<td align="center"><b>iOS/iPadOS</b> <sub>v15.1+</sub></td>
+<td>Apple App Store · IPA</td>
+</tr>
+<tr>
+<td align="center"><b>Android</b> <sub>v7.0+</sub></td>
+<td>Google Play Store · APK</td>
+</tr>
+</table>
 
-- Website (any modern browser on any platform like Chrome, Safari, and Firefox) (includes PWA support)
-- Windows (x64/ia32)
-  - Portable
-  - MSI Installer
-  - Chocolatey Package Manager
-- Linux (x64/ia32)
-  - Portable
-  - AUR
-  - AppImage
-  - Deb
-  - Flatpak
-- macOS (x64/ia32 on v12.0+)
-  - Apple App Store
-  - DMG
-  - Homebrew
-- iOS/iPadOS (v15.1+)
-  - Apple App Store
-  - ISO
-- Android (v7.0+)
-  - Google Play Store
-  - APK
+<br />
 
-Visit the Termix [Docs](https://docs.termix.site/install) for more information on how to install Termix on all platforms. Otherwise, view
-a sample Docker Compose file here:
+## Installation
+
+Visit the [Termix Docs](https://docs.termix.site/install) for full installation instructions across all platforms.
+
+Sample Docker Compose file (you can omit `guacd` and the network if you don't plan on using remote desktop features):
 
 ```yaml
 services:
@@ -106,70 +229,131 @@ services:
       - termix-data:/app/data
     environment:
       PORT: "8080"
+    depends_on:
+      - guacd
+    networks:
+      - termix-net
+
+  guacd:
+    image: guacamole/guacd:1.6.0
+    container_name: guacd
+    restart: unless-stopped
+    ports:
+      - "4822:4822"
+    networks:
+      - termix-net
 
 volumes:
   termix-data:
     driver: local
+
+networks:
+  termix-net:
+    driver: bridge
 ```
 
-# Sponsors
+<br />
 
-<p align="left">
-  <a href="https://www.digitalocean.com/">
-    <img src="https://opensource.nyc3.cdn.digitaloceanspaces.com/attribution/assets/SVG/DO_Logo_horizontal_blue.svg" height="50" alt="DigitalOcean">
-  </a>
-  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
-  <a href="https://crowdin.com/">
-    <img src="https://support.crowdin.com/assets/logos/core-logo/svg/crowdin-core-logo-cDark.svg" height="50" alt="Crowdin">
-  </a>
-  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
-  <a href="https://www.blacksmith.sh/">
-    <img src="https://cdn.prod.website-files.com/681bfb0c9a4601bc6e288ec4/683ca9e2c5186757092611b8_e8cb22127df4da0811c4120a523722d2_logo-backsmith-wordmark-light.svg" height="50" alt="Crowdin">
-  </a>
-</p>
+## Screenshots
 
-# Support
+<div align="center">
 
-If you need help or want to request a feature with Termix, visit the [Issues](https://github.com/Termix-SSH/Support/issues) page, log in, and press `New Issue`.
-Please be as detailed as possible in your issue, preferably written in English. You can also join the [Discord](https://discord.gg/jVQGdvHDrf) server and visit the support
-channel, however, response times may be longer.
+<br />
 
-# Screenshots
+[![YouTube](./repo-images/YouTube.png)](https://www.youtube.com/@TermixSSH/videos)
 
-[![YouTube](./repo-images/YouTube.png)](https://youtu.be/8OYCPwS7ciA)
+<sub>Watch update overviews on YouTube</sub>
 
-<p align="center">
-  <img src="./repo-images/Image 1.png" width="400" alt="Termix Demo 1"/>
-  <img src="./repo-images/Image 2.png" width="400" alt="Termix Demo 2"/>
-</p>
+<br />
+<br />
 
-<p align="center">
-  <img src="./repo-images/Image 3.png" width="400" alt="Termix Demo 3"/>
-  <img src="./repo-images/Image 4.png" width="400" alt="Termix Demo 4"/>
-</p>
+<table>
+<tr>
+<td><img src="./repo-images/Image 1.png" alt="Termix Screenshot 1" width="400" /></td>
+<td><img src="./repo-images/Image 2.png" alt="Termix Screenshot 2" width="400" /></td>
+</tr>
+<tr>
+<td><img src="./repo-images/Image 3.png" alt="Termix Screenshot 3" width="400" /></td>
+<td><img src="./repo-images/Image 4.png" alt="Termix Screenshot 4" width="400" /></td>
+</tr>
+<tr>
+<td><img src="./repo-images/Image 5.png" alt="Termix Screenshot 5" width="400" /></td>
+<td><img src="./repo-images/Image 6.png" alt="Termix Screenshot 6" width="400" /></td>
+</tr>
+<tr>
+<td><img src="./repo-images/Image 7.png" alt="Termix Screenshot 7" width="400" /></td>
+<td><img src="./repo-images/Image 8.png" alt="Termix Screenshot 8" width="400" /></td>
+</tr>
+<tr>
+<td><img src="./repo-images/Image 9.png" alt="Termix Screenshot 9" width="400" /></td>
+<td><img src="./repo-images/Image 10.png" alt="Termix Screenshot 10" width="400" /></td>
+</tr>
+<tr>
+<td><img src="./repo-images/Image 11.png" alt="Termix Screenshot 11" width="400" /></td>
+<td><img src="./repo-images/Image 12.png" alt="Termix Screenshot 12" width="400" /></td>
+</tr>
+<tr>
+<td><img src="./repo-images/Image 13.png" alt="Termix Screenshot 13" width="400" /></td>
+<td><img src="./repo-images/Image 14.png" alt="Termix Screenshot 14" width="400" /></td>
+</tr>
+</table>
 
-<p align="center">
-  <img src="./repo-images/Image 5.png" width="400" alt="Termix Demo 5"/>
-  <img src="./repo-images/Image 6.png" width="400" alt="Termix Demo 6"/>
-</p>
+<sub>Some videos and images may be out of date or may not perfectly showcase features.</sub>
 
-<p align="center">
-  <img src="./repo-images/Image 7.png" width="400" alt="Termix Demo 7"/>
-  <img src="./repo-images/Image 8.png" width="400" alt="Termix Demo 8"/>
-</p>
+</div>
 
-<p align="center">
-  <img src="./repo-images/Image 9.png" width="400" alt="Termix Demo 9"/>
-  <img src="./repo-images/Image 10.png" width="400" alt="Termix Demo 10"/>
-</p>
+<br />
 
-<p align="center">
-  <img src="./repo-images/Image 11.png" width="400" alt="Termix Demo 11"/>
-  <img src="./repo-images/Image 12.png" width="400" alt="Termix Demo 12"/>
-</p>
+## Planned Features
 
-Some videos and images may be out of date or may not perfectly showcase features.
+See [Projects](https://github.com/orgs/Termix-SSH/projects/2) for all planned features. If you are looking to contribute, see [Contributing](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md).
 
-# License
+<br />
 
-Distributed under the Apache License Version 2.0. See LICENSE for more information.
+## Sponsors
+
+<div align="center">
+
+<br />
+
+<a href="https://www.digitalocean.com/">
+  <img src="https://opensource.nyc3.cdn.digitaloceanspaces.com/attribution/assets/SVG/DO_Logo_horizontal_blue.svg" height="40" alt="DigitalOcean" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://crowdin.com/">
+  <img src="https://support.crowdin.com/assets/logos/core-logo/svg/crowdin-core-logo-cDark.svg" height="40" alt="Crowdin" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://www.blacksmith.sh/">
+  <img src="https://cdn.prod.website-files.com/681bfb0c9a4601bc6e288ec4/683ca9e2c5186757092611b8_e8cb22127df4da0811c4120a523722d2_logo-backsmith-wordmark-light.svg" height="40" alt="Blacksmith" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://www.cloudflare.com/">
+  <img src="https://sirv.sirv.com/website/screenshots/cloudflare/cloudflare-logo.png?w=300" height="40" alt="Cloudflare" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://tailscale.com/">
+  <img src="https://drive.google.com/uc?export=view&id=1lIxkJuX6M23bW-2FElhT0rQieTrzaVSL" height="40" alt="Tailscale" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://akamai.com/">
+  <img src="https://upload.wikimedia.org/wikipedia/commons/8/8b/Akamai_logo.svg" height="40" alt="Akamai" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://aws.amazon.com/">
+  <img src="https://upload.wikimedia.org/wikipedia/commons/thumb/9/93/Amazon_Web_Services_Logo.svg/960px-Amazon_Web_Services_Logo.svg.png" height="40" alt="AWS" />
+</a>
+
+</div>
+
+<br />
+
+## Support
+
+If you need help or want to request a feature with Termix, visit the [Issues](https://github.com/Termix-SSH/Support/issues) page, log in, and press `New Issue`. Please be as detailed as possible in your issue, preferably written in English. You can also join the [Discord](https://discord.gg/jVQGdvHDrf) server and visit the support channel, however, response times may be longer.
+
+<br />
+
+## License
+
+Distributed under the Apache License Version 2.0. See `LICENSE` for more information.

chocolatey/termix-ssh.nuspec

@@ -14,16 +14,10 @@
     <projectSourceUrl>https://github.com/Termix-SSH/Termix</projectSourceUrl>
     <docsUrl>https://docs.termix.site/install</docsUrl>
     <bugTrackerUrl>https://github.com/Termix-SSH/Support/issues</bugTrackerUrl>
-    <tags>docker ssh self-hosted file-management ssh-tunnel termix server-management terminal</tags>
-    <summary>Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities.</summary>
+    <tags>docker ssh terminal telnet self-hosted rdp file-management vnc ssh-tunnel server-stats termix</tags>
+    <summary>Self-hosted SSH and remote desktop management.</summary>
     <description>
-Termix is an open-source, forever-free, self-hosted all-in-one server management platform. It provides a web-based solution for managing your servers and infrastructure through a single, intuitive interface.
-
-Termix offers:
-- SSH terminal access
-- SSH tunneling capabilities
-- Remote file management
-- Server monitoring and management
+Termix is an open-source, forever-free, self-hosted all-in-one server management platform. It provides a multi-platform solution for managing your servers and infrastructure through a single, intuitive interface. Termix offers SSH terminal access, remote desktop control (RDP, VNC, Telnet), SSH tunneling capabilities, remote file management, and many other tools. Termix is the perfect free and self-hosted alternative to Termius available for all platforms.
 
 This package installs the desktop application version of Termix.
     </description>

components.json

@@ -1,15 +1,17 @@
 {
   "$schema": "https://ui.shadcn.com/schema.json",
-  "style": "new-york",
+  "style": "radix-lyra",
   "rsc": false,
   "tsx": true,
   "tailwind": {
     "config": "",
     "css": "src/index.css",
-    "baseColor": "zinc",
+    "baseColor": "neutral",
     "cssVariables": true,
     "prefix": ""
   },
+  "iconLibrary": "lucide",
+  "rtl": false,
   "aliases": {
     "components": "@/components",
     "utils": "@/lib/utils",
@@ -17,5 +19,7 @@
     "lib": "@/lib",
     "hooks": "@/hooks"
   },
-  "iconLibrary": "lucide"
+  "menuColor": "default",
+  "menuAccent": "subtle",
+  "registries": {}
 }

crowdin.yml

@@ -1,3 +1,3 @@
 files:
-  - source: /src/locales/en.json
-    translation: /src/locales/translated/%locale_with_underscore%.json
+  - source: /src/ui/locales/en.json
+    translation: /src/ui/locales/translated/%locale_with_underscore%.json

docker/Dockerfile

@@ -1,13 +1,14 @@
 # Stage 1: Install dependencies
-FROM node:22-slim AS deps
+FROM node:24-slim AS deps
 WORKDIR /app
 
 RUN apt-get update && apt-get install -y python3 make g++ && rm -rf /var/lib/apt/lists/*
 
 COPY package*.json ./
+COPY .npmrc ./
+COPY vendor ./vendor
 
-RUN rm -rf node_modules package-lock.json && \
-    npm install --ignore-scripts --force && \
+RUN npm ci --ignore-scripts && \
     npm cache clean --force
 
 # Stage 2: Build frontend
@@ -27,45 +28,43 @@ WORKDIR /app
 
 COPY . .
 
-RUN npm rebuild better-sqlite3 --force
+RUN npm rebuild better-sqlite3
 
 RUN npm run build:backend
 
 # Stage 4: Production dependencies only
-FROM node:22-slim AS production-deps
+FROM node:24-slim AS production-deps
 WORKDIR /app
 
 RUN apt-get update && apt-get install -y python3 make g++ && rm -rf /var/lib/apt/lists/*
 
 COPY package*.json ./
+COPY .npmrc ./
+COPY vendor ./vendor
 
-RUN npm ci --only=production --ignore-scripts --force && \
-    npm rebuild better-sqlite3 bcryptjs --force && \
+RUN npm ci --omit=dev --ignore-scripts && \
+    npm rebuild better-sqlite3 bcryptjs && \
     npm cache clean --force
 
 # Stage 5: Final optimized image
-FROM node:22-slim
+FROM node:24-slim
 WORKDIR /app
 
 ENV DATA_DIR=/app/data \
     PORT=8080 \
     NODE_ENV=production
 
-RUN apt-get update && apt-get install -y nginx gettext-base openssl ca-certificates gosu && \
+RUN apt-get update && apt-get install -y nginx gettext-base openssl ca-certificates gosu wget && \
     update-ca-certificates && \
     rm -rf /var/lib/apt/lists/* && \
-    mkdir -p /app/data /app/uploads /app/data/.opk /app/nginx /app/nginx/logs /app/nginx/cache /app/nginx/client_body && \
-    chown -R node:node /app && \
-    chmod 755 /app/data /app/uploads /app/data/.opk /app/nginx && \
-    touch /app/nginx/nginx.conf && \
-    chown node:node /app/nginx/nginx.conf
+    mkdir -p /app/data /app/uploads /app/data/.opk /app/nginx /tmp/nginx && \
+    chown -R node:node /app /tmp/nginx && \
+    chmod 755 /app/data /app/uploads /app/data/.opk /app/nginx /tmp/nginx
 
 COPY docker/nginx.conf /app/nginx/nginx.conf.template
 COPY docker/nginx-https.conf /app/nginx/nginx-https.conf.template
 
 COPY --chown=node:node --from=frontend-builder /app/dist /app/html
-COPY --chown=node:node --from=frontend-builder /app/src/locales /app/html/locales
-COPY --chown=node:node --from=frontend-builder /app/public/fonts /app/html/fonts
 
 COPY --chown=node:node --from=production-deps /app/node_modules /app/node_modules
 COPY --chown=node:node --from=backend-builder /app/dist/backend ./dist/backend
@@ -75,8 +74,8 @@ VOLUME ["/app/data"]
 
 EXPOSE ${PORT} 30001 30002 30003 30004 30005 30006
 
-HEALTHCHECK --interval=30s --timeout=10s --start-period=30s --retries=3 \
-    CMD node -e "require('http').get('http://localhost:30001/health', (r) => process.exit(r.statusCode === 200 ? 0 : 1)).on('error', () => process.exit(1))"
+HEALTHCHECK --interval=30s --timeout=10s --start-period=60s --retries=3 \
+    CMD wget -q -O /dev/null http://localhost:30001/health || exit 1
 
 COPY docker/entrypoint.sh /entrypoint.sh
 RUN chmod +x /entrypoint.sh

docker/compose-dev.yml

@@ -0,0 +1,33 @@
+services:
+  termix-dev:
+    build:
+      context: ..
+      dockerfile: docker/Dockerfile
+    container_name: termix-dev
+    restart: unless-stopped
+    ports:
+      - "8081:8080"
+    volumes:
+      - termix-dev-data:/app/data
+    environment:
+      PORT: "8080"
+      NODE_ENV: development
+    depends_on:
+      - guacd-dev
+    networks:
+      - termix-dev-net
+
+  guacd-dev:
+    image: guacamole/guacd:1.6.0
+    container_name: guacd-dev
+    restart: unless-stopped
+    networks:
+      - termix-dev-net
+
+volumes:
+  termix-dev-data:
+    driver: local
+
+networks:
+  termix-dev-net:
+    driver: bridge

docker/docker-compose.yml

@@ -0,0 +1,31 @@
+services:
+  termix:
+    image: ghcr.io/lukegus/termix:latest
+    container_name: termix
+    restart: unless-stopped
+    ports:
+      - "8080:8080"
+    volumes:
+      - termix-data:/app/data
+    environment:
+      PORT: "8080"
+      GUACD_HOST: "guacd"
+    depends_on:
+      - guacd
+    networks:
+      - termix-net
+
+  guacd:
+    image: guacamole/guacd:1.6.0
+    container_name: guacd
+    restart: unless-stopped
+    networks:
+      - termix-net
+
+volumes:
+  termix-data:
+    driver: local
+
+networks:
+  termix-net:
+    driver: bridge

docker/entrypoint.sh

@@ -5,16 +5,21 @@ PUID=${PUID:-1000}
 PGID=${PGID:-1000}
 
 if [ "$(id -u)" = "0" ]; then
-    echo "Setting up user permissions (PUID: $PUID, PGID: $PGID)..."
+    if [ "$PUID" = "0" ]; then
+        echo "Running as root (PUID=0, PGID=$PGID)"
+        chown -R root:root /app/data /app/uploads /tmp/nginx 2>/dev/null || true
+    else
+        echo "Setting up user permissions (PUID: $PUID, PGID: $PGID)..."
 
-    groupmod -o -g "$PGID" node 2>/dev/null || true
-    usermod -o -u "$PUID" node 2>/dev/null || true
+        groupmod -o -g "$PGID" node 2>/dev/null || true
+        usermod -o -u "$PUID" node 2>/dev/null || true
 
-    chown -R node:node /app/data /app/uploads /app/nginx 2>/dev/null || true
+        chown -R node:node /app/data /app/uploads /tmp/nginx 2>/dev/null || true
 
-    echo "User node is now UID: $PUID, GID: $PGID"
+        echo "User node is now UID: $PUID, GID: $PGID"
 
-    exec gosu node:node "$0" "$@"
+        exec gosu node:node "$0" "$@"
+    fi
 fi
 
 export PORT=${PORT:-8080}
@@ -33,7 +38,8 @@ else
     NGINX_CONF_SOURCE="/app/nginx/nginx.conf.template"
 fi
 
-envsubst '${PORT} ${SSL_PORT} ${SSL_CERT_PATH} ${SSL_KEY_PATH}' < $NGINX_CONF_SOURCE > /app/nginx/nginx.conf
+mkdir -p /tmp/nginx
+envsubst '${PORT} ${SSL_PORT} ${SSL_CERT_PATH} ${SSL_KEY_PATH}' < $NGINX_CONF_SOURCE > /tmp/nginx/nginx.conf
 
 mkdir -p /app/data /app/uploads /app/data/.opk
 chmod 755 /app/data /app/uploads /app/data/.opk 2>/dev/null || true
@@ -52,8 +58,12 @@ else
     ls -ld /app/data/.opk
 fi
 
-if [ ! -d "/app/opkssh" ]; then
-    echo "WARNING: OPKSSH binary directory not found at /app/opkssh"
+OPKSSH_DIR="${DATA_DIR:-/app/data}/opkssh"
+if [ ! -d "$OPKSSH_DIR" ]; then
+    echo "WARNING: OPKSSH binary directory not found at $OPKSSH_DIR"
+    echo "OPKSSH will be downloaded automatically on first use."
+else
+    echo "OPKSSH binary directory found at $OPKSSH_DIR"
 fi
 
 if [ "$ENABLE_SSL" = "true" ]; then
@@ -123,7 +133,20 @@ EOF
 fi
 
 echo "Starting nginx..."
-nginx -c /app/nginx/nginx.conf
+nginx -c /tmp/nginx/nginx.conf
+
+# Inject runtime BASE_PATH into frontend if configured
+if [ -n "$BASE_PATH" ]; then
+    echo "Injecting BASE_PATH: $BASE_PATH"
+    # Strip trailing slash for use as a path prefix
+    CLEAN_BASE_PATH="${BASE_PATH%/}"
+    find /app/html -name "index.html" -exec sed -i "s|window.__TERMIX_BASE_PATH__ = \"\"|window.__TERMIX_BASE_PATH__ = \"$CLEAN_BASE_PATH\"|g" {} \;
+    # Patch sw.js static asset paths with the base path prefix
+    find /app/html -name "sw.js" -exec sed -i "s|__TERMIX_SW_BASE_PATH__|$CLEAN_BASE_PATH|g" {} \;
+else
+    # No base path - replace placeholder with empty string so paths stay absolute from root
+    find /app/html -name "sw.js" -exec sed -i "s|__TERMIX_SW_BASE_PATH__||g" {} \;
+fi
 
 echo "Starting backend services..."
 cd /app

docker/nginx-https.conf

@@ -1,7 +1,7 @@
 worker_processes 1;
 master_process off;
-pid /app/nginx/nginx.pid;
-error_log /app/nginx/logs/error.log warn;
+pid /tmp/nginx/nginx.pid;
+error_log /tmp/nginx/error.log warn;
 
 events {
     worker_connections 1024;
@@ -11,13 +11,13 @@ http {
     include /etc/nginx/mime.types;
     default_type application/octet-stream;
 
-    access_log /app/nginx/logs/access.log;
+    access_log /tmp/nginx/access.log;
 
-    client_body_temp_path /app/nginx/client_body;
-    proxy_temp_path /app/nginx/proxy_temp;
-    fastcgi_temp_path /app/nginx/fastcgi_temp;
-    uwsgi_temp_path /app/nginx/uwsgi_temp;
-    scgi_temp_path /app/nginx/scgi_temp;
+    client_body_temp_path /tmp/nginx/client_body;
+    proxy_temp_path /tmp/nginx/proxy_temp;
+    fastcgi_temp_path /tmp/nginx/fastcgi_temp;
+    uwsgi_temp_path /tmp/nginx/uwsgi_temp;
+    scgi_temp_path /tmp/nginx/scgi_temp;
 
     sendfile on;
     keepalive_timeout 65;
@@ -26,6 +26,21 @@ http {
     set_real_ip_from 127.0.0.1;
     real_ip_header X-Forwarded-For;
 
+    map $http_x_forwarded_proto $proxy_x_forwarded_proto {
+        default $http_x_forwarded_proto;
+        ''      $scheme;
+    }
+
+    map $http_x_forwarded_host $proxy_x_forwarded_host {
+        default $http_x_forwarded_host;
+        ''      $http_host;
+    }
+
+    map $http_x_forwarded_port $proxy_x_forwarded_port {
+        default $http_x_forwarded_port;
+        ''      '';
+    }
+
     ssl_protocols TLSv1.2 TLSv1.3;
     ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA384;
     ssl_prefer_server_ciphers off;
@@ -50,16 +65,32 @@ http {
         add_header X-Content-Type-Options nosniff always;
         add_header X-XSS-Protection "1; mode=block" always;
 
+        location = /sw.js {
+            root /app/html;
+            expires off;
+            add_header Cache-Control "no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0" always;
+            try_files $uri =404;
+        }
+
+        location = /manifest.json {
+            root /app/html;
+            expires off;
+            add_header Cache-Control "no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0" always;
+            try_files $uri =404;
+        }
+
         location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg|woff|woff2|ttf|eot)$ {
             root /app/html;
             expires 1y;
-            add_header Cache-Control "public, immutable";
+            add_header Cache-Control "public, max-age=31536000, immutable" always;
             try_files $uri =404;
         }
 
         location / {
             root /app/html;
             index index.html index.htm;
+            expires off;
+            add_header Cache-Control "no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0" always;
             try_files $uri $uri/ /index.html;
         }
 
@@ -72,25 +103,27 @@ http {
         location ~ ^/users/sessions(/.*)?$ {
             proxy_pass http://127.0.0.1:30001;
             proxy_http_version 1.1;
-            proxy_set_header Host $host;
+            proxy_set_header Host $http_host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-            proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
         }
 
         location ~ ^/users(/.*)?$ {
             proxy_pass http://127.0.0.1:30001;
             proxy_http_version 1.1;
-            proxy_set_header Host $host;
+            proxy_set_header Host $http_host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-            proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
+            proxy_set_header X-Forwarded-Port $proxy_x_forwarded_port;
+            proxy_set_header X-Forwarded-Host $proxy_x_forwarded_host;
         }
 
         location ~ ^/version(/.*)?$ {
             proxy_pass http://127.0.0.1:30001;
             proxy_http_version 1.1;
-            proxy_set_header Host $host;
+            proxy_set_header Host $http_host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
@@ -99,7 +132,7 @@ http {
         location ~ ^/releases(/.*)?$ {
             proxy_pass http://127.0.0.1:30001;
             proxy_http_version 1.1;
-            proxy_set_header Host $host;
+            proxy_set_header Host $http_host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
@@ -108,7 +141,7 @@ http {
         location ~ ^/alerts(/.*)?$ {
             proxy_pass http://127.0.0.1:30001;
             proxy_http_version 1.1;
-            proxy_set_header Host $host;
+            proxy_set_header Host $http_host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
@@ -117,7 +150,7 @@ http {
         location ~ ^/rbac(/.*)?$ {
             proxy_pass http://127.0.0.1:30001;
             proxy_http_version 1.1;
-            proxy_set_header Host $host;
+            proxy_set_header Host $http_host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
@@ -126,7 +159,7 @@ http {
         location ~ ^/credentials(/.*)?$ {
             proxy_pass http://127.0.0.1:30001;
             proxy_http_version 1.1;
-            proxy_set_header Host $host;
+            proxy_set_header Host $http_host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
@@ -139,7 +172,16 @@ http {
         location ~ ^/snippets(/.*)?$ {
             proxy_pass http://127.0.0.1:30001;
             proxy_http_version 1.1;
-            proxy_set_header Host $host;
+            proxy_set_header Host $http_host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+        }
+
+        location ~ ^/c2s-tunnel-presets(/.*)?$ {
+            proxy_pass http://127.0.0.1:30001;
+            proxy_http_version 1.1;
+            proxy_set_header Host $http_host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
@@ -148,7 +190,25 @@ http {
         location ~ ^/terminal(/.*)?$ {
             proxy_pass http://127.0.0.1:30001;
             proxy_http_version 1.1;
-            proxy_set_header Host $host;
+            proxy_set_header Host $http_host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+        }
+
+        location ~ ^/open-tabs(/.*)?$ {
+            proxy_pass http://127.0.0.1:30001;
+            proxy_http_version 1.1;
+            proxy_set_header Host $http_host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+        }
+
+        location ~ ^/user-preferences(/.*)?$ {
+            proxy_pass http://127.0.0.1:30001;
+            proxy_http_version 1.1;
+            proxy_set_header Host $http_host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
@@ -160,7 +220,7 @@ http {
 
             proxy_pass http://127.0.0.1:30001;
             proxy_http_version 1.1;
-            proxy_set_header Host $host;
+            proxy_set_header Host $http_host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
@@ -179,7 +239,7 @@ http {
 
             proxy_pass http://127.0.0.1:30001;
             proxy_http_version 1.1;
-            proxy_set_header Host $host;
+            proxy_set_header Host $http_host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
@@ -195,50 +255,58 @@ http {
         location ~ ^/encryption(/.*)?$ {
             proxy_pass http://127.0.0.1:30001;
             proxy_http_version 1.1;
-            proxy_set_header Host $host;
+            proxy_set_header Host $http_host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
         }
 
-        location /ssh/quick-connect {
+        location /host/quick-connect {
             proxy_pass http://127.0.0.1:30001;
             proxy_http_version 1.1;
             proxy_set_header Upgrade $http_upgrade;
             proxy_set_header Connection 'upgrade';
-            proxy_set_header Host $host;
+            proxy_set_header Host $http_host;
             proxy_cache_bypass $http_upgrade;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
         }
 
-        location ~ ^/ssh/opkssh-chooser(/.*)?$ {
-            proxy_pass http://127.0.0.1:30001/ssh/opkssh-chooser$1$is_args$args;
+        location ~ ^/host/opkssh-chooser(/.*)?$ {
+            proxy_pass http://127.0.0.1:30001/host/opkssh-chooser$1$is_args$args;
             proxy_http_version 1.1;
             proxy_set_header Host $http_host;
-            proxy_set_header X-Forwarded-Host $http_host;
-            proxy_set_header X-Forwarded-Port $server_port;
+            proxy_set_header X-Forwarded-Host $proxy_x_forwarded_host;
+            proxy_set_header X-Forwarded-Port $proxy_x_forwarded_port;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-            proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
+
+            proxy_cache_bypass 1;
+            proxy_no_cache 1;
+            add_header Cache-Control "no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0";
         }
 
-        location ~ ^/ssh/opkssh-callback(/.*)?$ {
-            proxy_pass http://127.0.0.1:30001/ssh/opkssh-callback$1$is_args$args;
+        location ~ ^/host/opkssh-callback(/.*)?$ {
+            proxy_pass http://127.0.0.1:30001/host/opkssh-callback$1$is_args$args;
             proxy_http_version 1.1;
             proxy_set_header Host $http_host;
-            proxy_set_header X-Forwarded-Host $http_host;
-            proxy_set_header X-Forwarded-Port $server_port;
+            proxy_set_header X-Forwarded-Host $proxy_x_forwarded_host;
+            proxy_set_header X-Forwarded-Port $proxy_x_forwarded_port;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-            proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
+
+            proxy_cache_bypass 1;
+            proxy_no_cache 1;
+            add_header Cache-Control "no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0";
         }
 
-        location /ssh/ {
+        location /host/ {
             proxy_pass http://127.0.0.1:30001;
             proxy_http_version 1.1;
-            proxy_set_header Host $host;
+            proxy_set_header Host $http_host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
@@ -251,15 +319,13 @@ http {
             proxy_set_header Upgrade $http_upgrade;
             proxy_set_header Connection "upgrade";
             proxy_set_header Host $http_host;
-            proxy_set_header X-Forwarded-Host $http_host;
-            proxy_set_header X-Forwarded-Port $server_port;
-            proxy_set_header X-Forwarded-Proto $scheme;
-            proxy_set_header Host $host;
+            proxy_set_header X-Forwarded-Host $proxy_x_forwarded_host;
+            proxy_set_header X-Forwarded-Port $proxy_x_forwarded_port;
+            proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
             proxy_cache_bypass $http_upgrade;
 
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-            proxy_set_header X-Forwarded-Proto $scheme;
 
             proxy_read_timeout 86400s;
             proxy_send_timeout 86400s;
@@ -271,52 +337,101 @@ http {
             proxy_next_upstream error timeout invalid_header http_500 http_502 http_503;
         }
 
+        location ^~ /guacamole/websocket/ {
+            proxy_pass http://127.0.0.1:30008/;
+            proxy_http_version 1.1;
+
+            proxy_set_header Upgrade $http_upgrade;
+            proxy_set_header Connection "upgrade";
+            proxy_set_header Host $http_host;
+            proxy_cache_bypass $http_upgrade;
+
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_set_header X-Forwarded-Port $server_port;
+            proxy_set_header X-Forwarded-Host $http_host;
+
+            proxy_read_timeout 86400s;
+            proxy_send_timeout 86400s;
+            proxy_connect_timeout 10s;
+
+            proxy_buffering off;
+            proxy_request_buffering off;
+
+            proxy_next_upstream error timeout invalid_header http_500 http_502 http_503;
+        }
+
+        location ~ ^/guacamole(/.*)?$ {
+            proxy_pass http://127.0.0.1:30001;
+            proxy_http_version 1.1;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+        }
+
+        location /host/tunnel/ {
+            proxy_pass http://127.0.0.1:30003;
+            proxy_http_version 1.1;
+            proxy_set_header Host $http_host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+        }
+
         location /ssh/tunnel/ {
             proxy_pass http://127.0.0.1:30003;
             proxy_http_version 1.1;
-            proxy_set_header Host $host;
+            proxy_set_header Upgrade $http_upgrade;
+            proxy_set_header Connection "upgrade";
+            proxy_set_header Host $http_host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_read_timeout 86400s;
+            proxy_send_timeout 86400s;
+            proxy_buffering off;
+            proxy_cache off;
         }
 
-        location /ssh/file_manager/recent {
+        location /host/file_manager/recent {
             proxy_pass http://127.0.0.1:30001;
             proxy_http_version 1.1;
-            proxy_set_header Host $host;
+            proxy_set_header Host $http_host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
         }
 
-        location /ssh/file_manager/pinned {
+        location /host/file_manager/pinned {
             proxy_pass http://127.0.0.1:30001;
             proxy_http_version 1.1;
-            proxy_set_header Host $host;
+            proxy_set_header Host $http_host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
         }
 
-        location /ssh/file_manager/shortcuts {
+        location /host/file_manager/shortcuts {
             proxy_pass http://127.0.0.1:30001;
             proxy_http_version 1.1;
-            proxy_set_header Host $host;
+            proxy_set_header Host $http_host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
         }
 
-        location /ssh/file_manager/sudo-password {
+        location /host/file_manager/sudo-password {
             proxy_pass http://127.0.0.1:30004;
             proxy_http_version 1.1;
-            proxy_set_header Host $host;
+            proxy_set_header Host $http_host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
         }
 
-        location /ssh/file_manager/ssh/ {
+        location /ssh/file_manager/ {
             client_max_body_size 5G;
             client_body_timeout 300s;
 
@@ -324,7 +439,28 @@ http {
 
             proxy_pass http://127.0.0.1:30004;
             proxy_http_version 1.1;
-            proxy_set_header Host $host;
+            proxy_set_header Host $http_host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+
+            proxy_connect_timeout 60s;
+            proxy_send_timeout 300s;
+            proxy_read_timeout 300s;
+
+            proxy_request_buffering off;
+            proxy_buffering off;
+        }
+
+        location /host/file_manager/ssh/ {
+            client_max_body_size 5G;
+            client_body_timeout 300s;
+
+            add_header Cache-Control "no-store, no-cache, must-revalidate" always;
+
+            proxy_pass http://127.0.0.1:30004;
+            proxy_http_version 1.1;
+            proxy_set_header Host $http_host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
@@ -340,7 +476,7 @@ http {
         location ~ ^/network-topology(/.*)?$ {
             proxy_pass http://127.0.0.1:30001;
             proxy_http_version 1.1;
-            proxy_set_header Host $host;
+            proxy_set_header Host $http_host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
@@ -349,7 +485,7 @@ http {
         location /health {
             proxy_pass http://127.0.0.1:30001;
             proxy_http_version 1.1;
-            proxy_set_header Host $host;
+            proxy_set_header Host $http_host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
@@ -358,7 +494,7 @@ http {
         location ~ ^/status(/.*)?$ {
             proxy_pass http://127.0.0.1:30005;
             proxy_http_version 1.1;
-            proxy_set_header Host $host;
+            proxy_set_header Host $http_host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
@@ -367,7 +503,7 @@ http {
         location ~ ^/metrics(/.*)?$ {
             proxy_pass http://127.0.0.1:30005;
             proxy_http_version 1.1;
-            proxy_set_header Host $host;
+            proxy_set_header Host $http_host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
@@ -377,10 +513,28 @@ http {
             proxy_read_timeout 60s;
         }
 
+        location ~ ^/(refresh|host-updated)$ {
+            proxy_pass http://127.0.0.1:30005;
+            proxy_http_version 1.1;
+            proxy_set_header Host $http_host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+        }
+
+        location ~ ^/global-settings(/.*)?$ {
+            proxy_pass http://127.0.0.1:30005;
+            proxy_http_version 1.1;
+            proxy_set_header Host $http_host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+        }
+
         location ~ ^/uptime(/.*)?$ {
             proxy_pass http://127.0.0.1:30006;
             proxy_http_version 1.1;
-            proxy_set_header Host $host;
+            proxy_set_header Host $http_host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
@@ -389,7 +543,7 @@ http {
         location ~ ^/activity(/.*)?$ {
             proxy_pass http://127.0.0.1:30006;
             proxy_http_version 1.1;
-            proxy_set_header Host $host;
+            proxy_set_header Host $http_host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
@@ -398,24 +552,26 @@ http {
         location ~ ^/dashboard/preferences(/.*)?$ {
             proxy_pass http://127.0.0.1:30006;
             proxy_http_version 1.1;
-            proxy_set_header Host $host;
+            proxy_set_header Host $http_host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
         }
 
         location ^~ /docker/console/ {
-            proxy_pass http://127.0.0.1:30008/;
+            proxy_pass http://127.0.0.1:30009/;
             proxy_http_version 1.1;
 
             proxy_set_header Upgrade $http_upgrade;
             proxy_set_header Connection "upgrade";
-            proxy_set_header Host $host;
+            proxy_set_header Host $http_host;
             proxy_cache_bypass $http_upgrade;
 
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_set_header X-Forwarded-Port $server_port;
+            proxy_set_header X-Forwarded-Host $http_host;
 
             proxy_read_timeout 86400s;
             proxy_send_timeout 86400s;
@@ -430,7 +586,7 @@ http {
         location ~ ^/docker(/.*)?$ {
             proxy_pass http://127.0.0.1:30007;
             proxy_http_version 1.1;
-            proxy_set_header Host $host;
+            proxy_set_header Host $http_host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;

docker/nginx.conf

@@ -1,7 +1,7 @@
 worker_processes 1;
 master_process off;
-pid /app/nginx/nginx.pid;
-error_log /app/nginx/logs/error.log warn;
+pid /tmp/nginx/nginx.pid;
+error_log /tmp/nginx/error.log warn;
 
 events {
     worker_connections 1024;
@@ -11,13 +11,13 @@ http {
     include /etc/nginx/mime.types;
     default_type application/octet-stream;
 
-    access_log /app/nginx/logs/access.log;
+    access_log /tmp/nginx/access.log;
 
-    client_body_temp_path /app/nginx/client_body;
-    proxy_temp_path /app/nginx/proxy_temp;
-    fastcgi_temp_path /app/nginx/fastcgi_temp;
-    uwsgi_temp_path /app/nginx/uwsgi_temp;
-    scgi_temp_path /app/nginx/scgi_temp;
+    client_body_temp_path /tmp/nginx/client_body;
+    proxy_temp_path /tmp/nginx/proxy_temp;
+    fastcgi_temp_path /tmp/nginx/fastcgi_temp;
+    uwsgi_temp_path /tmp/nginx/uwsgi_temp;
+    scgi_temp_path /tmp/nginx/scgi_temp;
 
     sendfile on;
     keepalive_timeout 65;
@@ -26,6 +26,21 @@ http {
     set_real_ip_from 127.0.0.1;
     real_ip_header X-Forwarded-For;
 
+    map $http_x_forwarded_proto $proxy_x_forwarded_proto {
+        default $http_x_forwarded_proto;
+        ''      $scheme;
+    }
+
+    map $http_x_forwarded_host $proxy_x_forwarded_host {
+        default $http_x_forwarded_host;
+        ''      $http_host;
+    }
+
+    map $http_x_forwarded_port $proxy_x_forwarded_port {
+        default $http_x_forwarded_port;
+        ''      '';
+    }
+
     ssl_protocols TLSv1.2 TLSv1.3;
     ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA384;
     ssl_prefer_server_ciphers off;
@@ -39,16 +54,32 @@ http {
         add_header X-Content-Type-Options nosniff always;
         add_header X-XSS-Protection "1; mode=block" always;
 
+        location = /sw.js {
+            root /app/html;
+            expires off;
+            add_header Cache-Control "no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0" always;
+            try_files $uri =404;
+        }
+
+        location = /manifest.json {
+            root /app/html;
+            expires off;
+            add_header Cache-Control "no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0" always;
+            try_files $uri =404;
+        }
+
         location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg|woff|woff2|ttf|eot)$ {
             root /app/html;
             expires 1y;
-            add_header Cache-Control "public, immutable";
+            add_header Cache-Control "public, max-age=31536000, immutable" always;
             try_files $uri =404;
         }
 
         location / {
             root /app/html;
             index index.html index.htm;
+            expires off;
+            add_header Cache-Control "no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0" always;
             try_files $uri $uri/ /index.html;
         }
 
@@ -61,25 +92,27 @@ http {
         location ~ ^/users/sessions(/.*)?$ {
             proxy_pass http://127.0.0.1:30001;
             proxy_http_version 1.1;
-            proxy_set_header Host $host;
+            proxy_set_header Host $http_host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-            proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
         }
 
         location ~ ^/users(/.*)?$ {
             proxy_pass http://127.0.0.1:30001;
             proxy_http_version 1.1;
-            proxy_set_header Host $host;
+            proxy_set_header Host $http_host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-            proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
+            proxy_set_header X-Forwarded-Port $proxy_x_forwarded_port;
+            proxy_set_header X-Forwarded-Host $proxy_x_forwarded_host;
         }
 
         location ~ ^/version(/.*)?$ {
             proxy_pass http://127.0.0.1:30001;
             proxy_http_version 1.1;
-            proxy_set_header Host $host;
+            proxy_set_header Host $http_host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
@@ -88,7 +121,7 @@ http {
         location ~ ^/releases(/.*)?$ {
             proxy_pass http://127.0.0.1:30001;
             proxy_http_version 1.1;
-            proxy_set_header Host $host;
+            proxy_set_header Host $http_host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
@@ -97,7 +130,7 @@ http {
         location ~ ^/alerts(/.*)?$ {
             proxy_pass http://127.0.0.1:30001;
             proxy_http_version 1.1;
-            proxy_set_header Host $host;
+            proxy_set_header Host $http_host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
@@ -106,7 +139,7 @@ http {
         location ~ ^/rbac(/.*)?$ {
             proxy_pass http://127.0.0.1:30001;
             proxy_http_version 1.1;
-            proxy_set_header Host $host;
+            proxy_set_header Host $http_host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
@@ -115,7 +148,7 @@ http {
         location ~ ^/credentials(/.*)?$ {
             proxy_pass http://127.0.0.1:30001;
             proxy_http_version 1.1;
-            proxy_set_header Host $host;
+            proxy_set_header Host $http_host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
@@ -128,7 +161,16 @@ http {
         location ~ ^/snippets(/.*)?$ {
             proxy_pass http://127.0.0.1:30001;
             proxy_http_version 1.1;
-            proxy_set_header Host $host;
+            proxy_set_header Host $http_host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+        }
+
+        location ~ ^/c2s-tunnel-presets(/.*)?$ {
+            proxy_pass http://127.0.0.1:30001;
+            proxy_http_version 1.1;
+            proxy_set_header Host $http_host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
@@ -137,7 +179,25 @@ http {
         location ~ ^/terminal(/.*)?$ {
             proxy_pass http://127.0.0.1:30001;
             proxy_http_version 1.1;
-            proxy_set_header Host $host;
+            proxy_set_header Host $http_host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+        }
+
+        location ~ ^/open-tabs(/.*)?$ {
+            proxy_pass http://127.0.0.1:30001;
+            proxy_http_version 1.1;
+            proxy_set_header Host $http_host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+        }
+
+        location ~ ^/user-preferences(/.*)?$ {
+            proxy_pass http://127.0.0.1:30001;
+            proxy_http_version 1.1;
+            proxy_set_header Host $http_host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
@@ -149,7 +209,7 @@ http {
 
             proxy_pass http://127.0.0.1:30001;
             proxy_http_version 1.1;
-            proxy_set_header Host $host;
+            proxy_set_header Host $http_host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
@@ -168,7 +228,7 @@ http {
 
             proxy_pass http://127.0.0.1:30001;
             proxy_http_version 1.1;
-            proxy_set_header Host $host;
+            proxy_set_header Host $http_host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
@@ -184,50 +244,58 @@ http {
         location ~ ^/encryption(/.*)?$ {
             proxy_pass http://127.0.0.1:30001;
             proxy_http_version 1.1;
-            proxy_set_header Host $host;
+            proxy_set_header Host $http_host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
         }
 
-        location /ssh/quick-connect {
+        location /host/quick-connect {
             proxy_pass http://127.0.0.1:30001;
             proxy_http_version 1.1;
             proxy_set_header Upgrade $http_upgrade;
             proxy_set_header Connection 'upgrade';
-            proxy_set_header Host $host;
+            proxy_set_header Host $http_host;
             proxy_cache_bypass $http_upgrade;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
         }
 
-        location ~ ^/ssh/opkssh-chooser(/.*)?$ {
-            proxy_pass http://127.0.0.1:30001/ssh/opkssh-chooser$1$is_args$args;
+        location ~ ^/host/opkssh-chooser(/.*)?$ {
+            proxy_pass http://127.0.0.1:30001/host/opkssh-chooser$1$is_args$args;
             proxy_http_version 1.1;
             proxy_set_header Host $http_host;
-            proxy_set_header X-Forwarded-Host $http_host;
-            proxy_set_header X-Forwarded-Port $server_port;
+            proxy_set_header X-Forwarded-Host $proxy_x_forwarded_host;
+            proxy_set_header X-Forwarded-Port $proxy_x_forwarded_port;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-            proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
+
+            proxy_cache_bypass 1;
+            proxy_no_cache 1;
+            add_header Cache-Control "no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0";
         }
 
-        location ~ ^/ssh/opkssh-callback(/.*)?$ {
-            proxy_pass http://127.0.0.1:30001/ssh/opkssh-callback$1$is_args$args;
+        location ~ ^/host/opkssh-callback(/.*)?$ {
+            proxy_pass http://127.0.0.1:30001/host/opkssh-callback$1$is_args$args;
             proxy_http_version 1.1;
             proxy_set_header Host $http_host;
-            proxy_set_header X-Forwarded-Host $http_host;
-            proxy_set_header X-Forwarded-Port $server_port;
+            proxy_set_header X-Forwarded-Host $proxy_x_forwarded_host;
+            proxy_set_header X-Forwarded-Port $proxy_x_forwarded_port;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-            proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
+
+            proxy_cache_bypass 1;
+            proxy_no_cache 1;
+            add_header Cache-Control "no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0";
         }
 
-        location /ssh/ {
+        location /host/ {
             proxy_pass http://127.0.0.1:30001;
             proxy_http_version 1.1;
-            proxy_set_header Host $host;
+            proxy_set_header Host $http_host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
@@ -240,14 +308,13 @@ http {
             proxy_set_header Upgrade $http_upgrade;
             proxy_set_header Connection "upgrade";
             proxy_set_header Host $http_host;
-            proxy_set_header X-Forwarded-Host $http_host;
-            proxy_set_header X-Forwarded-Port $server_port;
-            proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_set_header X-Forwarded-Host $proxy_x_forwarded_host;
+            proxy_set_header X-Forwarded-Port $proxy_x_forwarded_port;
+            proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
             proxy_cache_bypass $http_upgrade;
 
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-            proxy_set_header X-Forwarded-Proto $scheme;
 
             proxy_read_timeout 86400s;
             proxy_send_timeout 86400s;
@@ -259,52 +326,101 @@ http {
             proxy_next_upstream error timeout invalid_header http_500 http_502 http_503;
         }
 
+        location ^~ /guacamole/websocket/ {
+            proxy_pass http://127.0.0.1:30008/;
+            proxy_http_version 1.1;
+
+            proxy_set_header Upgrade $http_upgrade;
+            proxy_set_header Connection "upgrade";
+            proxy_set_header Host $http_host;
+            proxy_cache_bypass $http_upgrade;
+
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_set_header X-Forwarded-Port $server_port;
+            proxy_set_header X-Forwarded-Host $http_host;
+
+            proxy_read_timeout 86400s;
+            proxy_send_timeout 86400s;
+            proxy_connect_timeout 10s;
+
+            proxy_buffering off;
+            proxy_request_buffering off;
+
+            proxy_next_upstream error timeout invalid_header http_500 http_502 http_503;
+        }
+
+        location ~ ^/guacamole(/.*)?$ {
+            proxy_pass http://127.0.0.1:30001;
+            proxy_http_version 1.1;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+        }
+
+        location /host/tunnel/ {
+            proxy_pass http://127.0.0.1:30003;
+            proxy_http_version 1.1;
+            proxy_set_header Host $http_host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+        }
+
         location /ssh/tunnel/ {
             proxy_pass http://127.0.0.1:30003;
             proxy_http_version 1.1;
-            proxy_set_header Host $host;
+            proxy_set_header Upgrade $http_upgrade;
+            proxy_set_header Connection "upgrade";
+            proxy_set_header Host $http_host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_read_timeout 86400s;
+            proxy_send_timeout 86400s;
+            proxy_buffering off;
+            proxy_cache off;
         }
 
-        location /ssh/file_manager/recent {
+        location /host/file_manager/recent {
             proxy_pass http://127.0.0.1:30001;
             proxy_http_version 1.1;
-            proxy_set_header Host $host;
+            proxy_set_header Host $http_host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
         }
 
-        location /ssh/file_manager/pinned {
+        location /host/file_manager/pinned {
             proxy_pass http://127.0.0.1:30001;
             proxy_http_version 1.1;
-            proxy_set_header Host $host;
+            proxy_set_header Host $http_host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
         }
 
-        location /ssh/file_manager/shortcuts {
+        location /host/file_manager/shortcuts {
             proxy_pass http://127.0.0.1:30001;
             proxy_http_version 1.1;
-            proxy_set_header Host $host;
+            proxy_set_header Host $http_host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
         }
 
-        location /ssh/file_manager/sudo-password {
+        location /host/file_manager/sudo-password {
             proxy_pass http://127.0.0.1:30004;
             proxy_http_version 1.1;
-            proxy_set_header Host $host;
+            proxy_set_header Host $http_host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
         }
 
-        location /ssh/file_manager/ssh/ {
+        location /ssh/file_manager/ {
             client_max_body_size 5G;
             client_body_timeout 300s;
 
@@ -312,7 +428,28 @@ http {
 
             proxy_pass http://127.0.0.1:30004;
             proxy_http_version 1.1;
-            proxy_set_header Host $host;
+            proxy_set_header Host $http_host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+
+            proxy_connect_timeout 60s;
+            proxy_send_timeout 300s;
+            proxy_read_timeout 300s;
+
+            proxy_request_buffering off;
+            proxy_buffering off;
+        }
+
+        location /host/file_manager/ssh/ {
+            client_max_body_size 5G;
+            client_body_timeout 300s;
+
+            add_header Cache-Control "no-store, no-cache, must-revalidate" always;
+
+            proxy_pass http://127.0.0.1:30004;
+            proxy_http_version 1.1;
+            proxy_set_header Host $http_host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
@@ -328,7 +465,7 @@ http {
         location ~ ^/network-topology(/.*)?$ {
             proxy_pass http://127.0.0.1:30001;
             proxy_http_version 1.1;
-            proxy_set_header Host $host;
+            proxy_set_header Host $http_host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
@@ -337,7 +474,7 @@ http {
         location /health {
             proxy_pass http://127.0.0.1:30001;
             proxy_http_version 1.1;
-            proxy_set_header Host $host;
+            proxy_set_header Host $http_host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
@@ -346,7 +483,7 @@ http {
         location ~ ^/status(/.*)?$ {
             proxy_pass http://127.0.0.1:30005;
             proxy_http_version 1.1;
-            proxy_set_header Host $host;
+            proxy_set_header Host $http_host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
@@ -355,7 +492,7 @@ http {
         location ~ ^/metrics(/.*)?$ {
             proxy_pass http://127.0.0.1:30005;
             proxy_http_version 1.1;
-            proxy_set_header Host $host;
+            proxy_set_header Host $http_host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
@@ -365,10 +502,28 @@ http {
             proxy_read_timeout 60s;
         }
 
+        location ~ ^/(refresh|host-updated)$ {
+            proxy_pass http://127.0.0.1:30005;
+            proxy_http_version 1.1;
+            proxy_set_header Host $http_host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+        }
+
+        location ~ ^/global-settings(/.*)?$ {
+            proxy_pass http://127.0.0.1:30005;
+            proxy_http_version 1.1;
+            proxy_set_header Host $http_host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+        }
+
         location ~ ^/uptime(/.*)?$ {
             proxy_pass http://127.0.0.1:30006;
             proxy_http_version 1.1;
-            proxy_set_header Host $host;
+            proxy_set_header Host $http_host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
@@ -377,7 +532,7 @@ http {
         location ~ ^/activity(/.*)?$ {
             proxy_pass http://127.0.0.1:30006;
             proxy_http_version 1.1;
-            proxy_set_header Host $host;
+            proxy_set_header Host $http_host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
@@ -386,24 +541,26 @@ http {
         location ~ ^/dashboard/preferences(/.*)?$ {
             proxy_pass http://127.0.0.1:30006;
             proxy_http_version 1.1;
-            proxy_set_header Host $host;
+            proxy_set_header Host $http_host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
         }
 
         location ^~ /docker/console/ {
-            proxy_pass http://127.0.0.1:30008/;
+            proxy_pass http://127.0.0.1:30009/;
             proxy_http_version 1.1;
 
             proxy_set_header Upgrade $http_upgrade;
             proxy_set_header Connection "upgrade";
-            proxy_set_header Host $host;
+            proxy_set_header Host $http_host;
             proxy_cache_bypass $http_upgrade;
 
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_set_header X-Forwarded-Port $server_port;
+            proxy_set_header X-Forwarded-Host $http_host;
 
             proxy_read_timeout 86400s;
             proxy_send_timeout 86400s;
@@ -418,7 +575,7 @@ http {
         location ~ ^/docker(/.*)?$ {
             proxy_pass http://127.0.0.1:30007;
             proxy_http_version 1.1;
-            proxy_set_header Host $host;
+            proxy_set_header Host $http_host;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;

electron-builder.json

@@ -5,20 +5,38 @@
   "directories": {
     "output": "release"
   },
+  "asar": true,
+  "asarUnpack": [
+    "dist/backend/**/*",
+    "node_modules/**/*",
+    "public/icons/**/*",
+    "public/icon.*"
+  ],
   "files": [
     "dist/**/*",
     "electron/**/*",
     "public/**/*",
-    "!**/node_modules/**/*",
     "!src/**/*",
     "!*.md",
     "!tsconfig*.json",
     "!vite.config.ts",
-    "!eslint.config.js"
+    "!eslint.config.js",
+    "!node_modules/@napi-rs/canvas*/**/*",
+    "!node_modules/@rollup/rollup-darwin-*/**/*",
+    "!node_modules/@rollup/rollup-linux-*/**/*",
+    "!node_modules/@rollup/rollup-win32-*/**/*",
+    "!dist/icon-mac.png",
+    "!public/icon-mac.png",
+    "!dist/icon.ico",
+    "!public/icon.ico",
+    "!dist/icon.icns",
+    "!public/icon.icns",
+    "!dist/icons/**/*",
+    "!public/icons/**/*"
   ],
-  "asarUnpack": ["node_modules/node-fetch/**/*"],
   "extraMetadata": {
-    "main": "electron/main.cjs"
+    "main": "electron/main.cjs",
+    "type": "commonjs"
   },
   "buildDependenciesFromSource": false,
   "nodeGypRebuild": false,
@@ -72,8 +90,8 @@
     "desktop": {
       "entry": {
         "Name": "Termix",
-        "Comment": "A web-based server management platform",
-        "Keywords": "terminal;ssh;server;management;",
+        "Comment": "Self-hosted SSH and remote desktop management. ",
+        "Keywords": "docker;ssh;terminal;telnet;self-hosted;rdp;file-management;vnc;ssh-tunnel;server-stats;termix",
         "StartupWMClass": "termix"
       }
     }
@@ -103,7 +121,10 @@
     "entitlements": "build/entitlements.mac.plist",
     "entitlementsInherit": "build/entitlements.mac.inherit.plist",
     "type": "distribution",
-    "minimumSystemVersion": "10.15"
+    "minimumSystemVersion": "10.15",
+    "mergeASARs": false,
+    "singleArchFiles": "**/*.{node,bare}",
+    "x64ArchFiles": "**/*.{node,bare}"
   },
   "dmg": {
     "artifactName": "termix_macos_${arch}_dmg.${ext}",
@@ -116,7 +137,6 @@
     "entitlementsInherit": "build/entitlements.mas.inherit.plist",
     "hardenedRuntime": false,
     "gatekeeperAssess": false,
-    "asarUnpack": ["**/*.node"],
     "type": "distribution",
     "category": "public.app-category.developer-tools",
     "artifactName": "termix_macos_${arch}_mas.${ext}",

electron/preload.js

@@ -9,8 +9,49 @@ contextBridge.exposeInMainWorld("electronAPI", {
 
   getSetting: (key) => ipcRenderer.invoke("get-setting", key),
   setSetting: (key, value) => ipcRenderer.invoke("set-setting", key, value),
+  getC2STunnelConfig: () => ipcRenderer.invoke("get-c2s-tunnel-config"),
+  saveC2STunnelConfig: (config) =>
+    ipcRenderer.invoke("save-c2s-tunnel-config", config),
+  checkLocalPortAvailable: (host, port) =>
+    ipcRenderer.invoke("check-local-port-available", host, port),
+  getC2STunnelPresetDefaultName: () =>
+    ipcRenderer.invoke("get-c2s-tunnel-preset-default-name"),
+  startC2STunnel: (tunnel, index) =>
+    ipcRenderer.invoke("start-c2s-tunnel", tunnel, index),
+  testC2STunnel: (tunnel, index) =>
+    ipcRenderer.invoke("test-c2s-tunnel", tunnel, index),
+  stopC2STunnel: (tunnelName) =>
+    ipcRenderer.invoke("stop-c2s-tunnel", tunnelName),
+  getC2STunnelStatuses: () => ipcRenderer.invoke("get-c2s-tunnel-statuses"),
+  onC2STunnelStatuses: (callback) => {
+    const listener = (_event, statuses) => callback(statuses);
+    ipcRenderer.on("c2s-tunnel-statuses", listener);
+    return () => ipcRenderer.removeListener("c2s-tunnel-statuses", listener);
+  },
+  startC2SAutoStartTunnels: () =>
+    ipcRenderer.invoke("start-c2s-autostart-tunnels"),
+
+  clearSessionCookies: () => ipcRenderer.invoke("clear-session-cookies"),
+  getSessionCookie: (name, targetUrl) =>
+    ipcRenderer.invoke("get-session-cookie", name, targetUrl),
+  waitForSessionCookie: (name, targetUrl, previousValue, timeoutMs) =>
+    ipcRenderer.invoke(
+      "wait-session-cookie",
+      name,
+      targetUrl,
+      previousValue,
+      timeoutMs,
+    ),
+
+  oidcSystemBrowserAuth: (authUrl, callbackPort) =>
+    ipcRenderer.invoke("oidc-system-browser-auth", authUrl, callbackPort),
 
   invoke: (channel, ...args) => ipcRenderer.invoke(channel, ...args),
 });
 
+contextBridge.exposeInMainWorld("electronClipboard", {
+  writeText: (text) => ipcRenderer.invoke("clipboard-write-text", text),
+  readText: () => ipcRenderer.invoke("clipboard-read-text"),
+});
+
 window.IS_ELECTRON = true;

eslint.config.js

@@ -1,23 +0,0 @@
-import js from "@eslint/js";
-import globals from "globals";
-import reactHooks from "eslint-plugin-react-hooks";
-import reactRefresh from "eslint-plugin-react-refresh";
-import tseslint from "typescript-eslint";
-import { globalIgnores } from "eslint/config";
-
-export default tseslint.config([
-  globalIgnores(["dist"]),
-  {
-    files: ["**/*.{ts,tsx}"],
-    extends: [
-      js.configs.recommended,
-      tseslint.configs.recommended,
-      reactHooks.configs["recommended-latest"],
-      reactRefresh.configs.vite,
-    ],
-    languageOptions: {
-      ecmaVersion: 2020,
-      globals: globals.browser,
-    },
-  },
-]);

eslint.config.mjs

@@ -0,0 +1,49 @@
+import js from "@eslint/js";
+import globals from "globals";
+import reactHooks from "eslint-plugin-react-hooks";
+import reactRefresh from "eslint-plugin-react-refresh";
+import unusedImports from "eslint-plugin-unused-imports";
+import tseslint from "typescript-eslint";
+import { globalIgnores } from "eslint/config";
+
+export default tseslint.config([
+  globalIgnores(["dist", "release", "Mobile"]),
+  {
+    files: ["**/*.{ts,tsx}"],
+    extends: [
+      js.configs.recommended,
+      tseslint.configs.recommended,
+      reactRefresh.configs.vite,
+    ],
+    plugins: {
+      "react-hooks": reactHooks,
+      "unused-imports": unusedImports,
+    },
+    languageOptions: {
+      ecmaVersion: 2020,
+      globals: globals.browser,
+    },
+    rules: {
+      "unused-imports/no-unused-imports": "error",
+      "unused-imports/no-unused-vars": [
+        "warn",
+        {
+          vars: "all",
+          varsIgnorePattern: "^_",
+          args: "after-used",
+          argsIgnorePattern: "^_",
+        },
+      ],
+      "@typescript-eslint/no-unused-vars": "off",
+      "@typescript-eslint/no-explicit-any": "warn",
+      "@typescript-eslint/no-unused-expressions": "warn",
+      "no-empty": "warn",
+      "no-control-regex": "off",
+      "no-useless-assignment": "off",
+      "preserve-caught-error": "off",
+      "react-hooks/exhaustive-deps": "warn",
+      "react-hooks/rules-of-hooks": "error",
+      "react-refresh/only-export-components": "warn",
+    },
+  },
+]);

flatpak/com.karmaa.termix.desktop

@@ -1,6 +1,6 @@
 [Desktop Entry]
 Name=Termix
-Comment=Web-based server management platform with SSH terminal, tunneling, and file editing
+Comment=Self-hosted SSH and remote desktop management.
 Exec=run.sh %U
 Icon=com.karmaa.termix
 Terminal=false

flatpak/com.karmaa.termix.flatpakref

@@ -4,9 +4,8 @@ Branch=stable
 Title=Termix - SSH Server Management Platform
 IsRuntime=false
 Url=https://github.com/Termix-SSH/Termix/releases/download/VERSION_PLACEHOLDER/termix_linux_flatpak.flatpak
-GPGKey=
 RuntimeRepo=https://flathub.org/repo/flathub.flatpakrepo
-Comment=Web-based server management platform with SSH terminal, tunneling, and file editing
-Description=Termix is an open-source, forever-free, self-hosted all-in-one server management platform. It provides SSH terminal access, tunneling capabilities, and remote file management.
+Comment=Self-hosted SSH and remote desktop management.
+Description=Termix is an open-source, forever-free, self-hosted all-in-one server management platform. It provides a multi-platform solution for managing your servers and infrastructure through a single, intuitive interface. Termix offers SSH terminal access, remote desktop control (RDP, VNC, Telnet), SSH tunneling capabilities, remote file management, and many other tools. Termix is the perfect free and self-hosted alternative to Termius available for all platforms.
 Icon=https://raw.githubusercontent.com/Termix-SSH/Termix/main/public/icon.png
 Homepage=https://github.com/Termix-SSH/Termix

flatpak/com.karmaa.termix.metainfo.xml

@@ -1,77 +1,77 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <component type="desktop-application">
-  <id>com.karmaa.termix</id>
-  <name>Termix</name>
-  <summary>Web-based server management platform with SSH terminal, tunneling, and file editing</summary>
+    <id>com.karmaa.termix</id>
+    <name>Termix</name>
+    <summary>Self-hosted SSH and remote desktop management.</summary>
 
-  <metadata_license>CC0-1.0</metadata_license>
-  <project_license>Apache-2.0</project_license>
+    <metadata_license>CC0-1.0</metadata_license>
+    <project_license>Apache-2.0</project_license>
 
-  <developer_name>bugattiguy527</developer_name>
+    <developer_name>bugattiguy527</developer_name>
 
-  <description>
-    <p>
-      Termix is an open-source, forever-free, self-hosted all-in-one server management platform.
-      It provides a web-based solution for managing your servers and infrastructure through a single, intuitive interface.
-    </p>
-    <p>Features:</p>
-    <ul>
-      <li>SSH terminal access with full terminal emulation</li>
-      <li>SSH tunneling capabilities for secure port forwarding</li>
-      <li>Remote file management with editor support</li>
-      <li>Server monitoring and management tools</li>
-      <li>Self-hosted solution - keep your data private</li>
-      <li>Modern, intuitive web interface</li>
-    </ul>
-  </description>
+    <description>
+        <p>
+            Termix is an open-source, forever-free, self-hosted all-in-one server management platform. It provides a
+            multi-platform solution for managing your servers and infrastructure through a single, intuitive interface.
+            Termix offers SSH terminal access, remote desktop control (RDP, VNC, Telnet), SSH tunneling capabilities,
+            remote file management, and many other tools. Termix is the perfect free and self-hosted alternative to
+            Termius available for all platforms.
+        </p>
+    </description>
 
-  <launchable type="desktop-id">com.karmaa.termix.desktop</launchable>
+    <launchable type="desktop-id">com.karmaa.termix.desktop</launchable>
 
-  <screenshots>
-    <screenshot type="default">
-      <image>https://raw.githubusercontent.com/Termix-SSH/Termix/main/public/screenshots/terminal.png</image>
-      <caption>SSH Terminal Interface</caption>
-    </screenshot>
-  </screenshots>
+    <screenshots>
+        <screenshot type="default">
+            <image>https://raw.githubusercontent.com/Termix-SSH/Termix/main/public/screenshots/terminal.png</image>
+            <caption>SSH Terminal Interface</caption>
+        </screenshot>
+    </screenshots>
 
-  <url type="homepage">https://github.com/Termix-SSH/Termix</url>
-  <url type="bugtracker">https://github.com/Termix-SSH/Support/issues</url>
-  <url type="help">https://docs.termix.site</url>
-  <url type="vcs-browser">https://github.com/Termix-SSH/Termix</url>
+    <url type="homepage">https://github.com/Termix-SSH/Termix</url>
+    <url type="bugtracker">https://github.com/Termix-SSH/Support/issues</url>
+    <url type="help">https://docs.termix.site</url>
+    <url type="vcs-browser">https://github.com/Termix-SSH/Termix</url>
 
-  <content_rating type="oars-1.1">
-    <content_attribute id="social-info">moderate</content_attribute>
-  </content_rating>
+    <content_rating type="oars-1.1">
+        <content_attribute id="social-info">moderate</content_attribute>
+    </content_rating>
 
-  <releases>
-    <release version="VERSION_PLACEHOLDER" date="DATE_PLACEHOLDER">
-      <description>
-        <p>Latest release of Termix</p>
-      </description>
-      <url>https://github.com/Termix-SSH/Termix/releases</url>
-    </release>
-  </releases>
+    <releases>
+        <release version="VERSION_PLACEHOLDER" date="DATE_PLACEHOLDER">
+            <description>
+                <p>Latest release of Termix</p>
+            </description>
+            <url>https://github.com/Termix-SSH/Termix/releases</url>
+        </release>
+    </releases>
 
-  <categories>
-    <category>Development</category>
-    <category>Network</category>
-    <category>System</category>
-  </categories>
+    <categories>
+        <category>Development</category>
+        <category>Network</category>
+        <category>System</category>
+    </categories>
 
-  <keywords>
-    <keyword>ssh</keyword>
-    <keyword>terminal</keyword>
-    <keyword>server</keyword>
-    <keyword>management</keyword>
-    <keyword>tunnel</keyword>
-    <keyword>file-manager</keyword>
-  </keywords>
+    <keywords>
+        <keyword>docker</keyword>
+        <keyword>ssh</keyword>
+        <keyword>terminal</keyword>
+        <keyword>telnet</keyword>
+        <keyword>self-hosted</keyword>
+        <keyword>rdp</keyword>
+        <keyword>file-management</keyword>
+        <keyword>vnc</keyword>
+        <keyword>ssh-tunnel</keyword>
+        <keyword>server-stats</keyword>
+        <keyword>termix</keyword>
 
-  <provides>
-    <binary>termix</binary>
-  </provides>
+    </keywords>
 
-  <requires>
-    <internet>always</internet>
-  </requires>
+    <provides>
+        <binary>termix</binary>
+    </provides>
+
+    <requires>
+        <internet>always</internet>
+    </requires>
 </component>

index.html

@@ -2,7 +2,7 @@
 <html lang="en">
   <head>
     <meta charset="UTF-8" />
-    <link rel="icon" type="image/svg+xml" href="/favicon.ico" />
+    <link rel="icon" type="image/svg+xml" href="favicon.ico" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
 
     <meta name="theme-color" content="#09090b" />
@@ -12,8 +12,8 @@
       content="black-translucent"
     />
     <meta name="apple-mobile-web-app-title" content="Termix" />
-    <link rel="apple-touch-icon" href="/icons/512x512.png" />
-    <link rel="manifest" href="/manifest.json" />
+    <link rel="apple-touch-icon" href="icons/512x512.png" />
+    <link rel="manifest" href="manifest.json" />
     <title>Termix</title>
     <style>
       .hide-scrollbar {
@@ -47,6 +47,9 @@
     </style>
   </head>
   <body>
+    <script>
+      window.__TERMIX_BASE_PATH__ = "";
+    </script>
     <div id="root"></div>
     <script type="module" src="/src/main.tsx"></script>
   </body>

package.json

@@ -1,166 +1,186 @@
 {
   "name": "termix",
   "private": true,
-  "version": "1.11.1",
-  "description": "A web-based server management platform with SSH terminal, tunneling, and file editing capabilities",
+  "version": "2.3.1",
+  "description": "Self-hosted SSH and remote desktop management.",
   "author": "Karmaa",
   "main": "electron/main.cjs",
-  "type": "module",
+  "engines": {
+    "node": ">=22.12.0",
+    "npm": ">=11"
+  },
   "scripts": {
-    "clean": "npx prettier . --write",
     "format": "prettier --write .",
     "format:check": "prettier --check .",
+    "postinstall": "node scripts/patch-app-builder-lib.cjs && node scripts/patch-guacamole-lite.cjs && node scripts/patch-better-sqlite3.cjs && node scripts/patch-nan.cjs",
+    "prebuild": "node scripts/write-electron-build-info.cjs",
     "lint": "eslint .",
     "lint:fix": "eslint --fix .",
     "type-check": "tsc --noEmit",
     "dev": "vite",
-    "build": "vite build && tsc -p tsconfig.node.json",
-    "build:backend": "tsc -p tsconfig.node.json",
-    "dev:backend": "tsc -p tsconfig.node.json && node ./dist/backend/backend/starter.js",
+    "build": "vite build && tsc -p tsconfig.node.json && node -e \"require('fs').copyFileSync('src/backend/package.json','dist/backend/package.json')\"",
+    "build:backend": "tsc -p tsconfig.node.json && node -e \"require('fs').copyFileSync('src/backend/package.json','dist/backend/package.json')\"",
+    "dev:backend": "tsc -p tsconfig.node.json && node -e \"require('fs').copyFileSync('src/backend/package.json','dist/backend/package.json')\" && node ./dist/backend/backend/starter.js",
     "dev:docker": "docker stop termix-dev 2>nul & docker rm termix-dev 2>nul & docker build -f docker/Dockerfile -t termix:dev --no-cache . && docker run -d --name termix-dev -p 3000:3000 -p 8080:8080 -p 30001-30006:30001-30006 -v \"%cd%\\db\\data:/app/data\" termix:dev",
     "dev:docker:restart": "docker stop termix-dev 2>nul & docker rm termix-dev 2>nul & docker run -d --name termix-dev -p 8080:8080 -p 30001-30006:30001-30006 -v \"%cd%\\db\\data:/app/data\" termix:dev",
-    "generate:openapi": "tsc -p tsconfig.node.json && node ./dist/backend/backend/swagger.js",
+    "generate:openapi": "tsc -p tsconfig.node.json && node -e \"require('fs').copyFileSync('src/backend/package.json','dist/backend/package.json')\" && node ./dist/backend/backend/swagger.js",
     "preview": "vite preview",
     "electron:dev": "concurrently \"npm run dev\" \"powershell -c \\\"Start-Sleep -Seconds 5\\\" && electron .\"",
-    "build:win-portable": "npm run build && electron-builder --win --dir",
-    "build:win-installer": "npm run build && electron-builder --win --publish=never",
-    "build:linux-portable": "npm run build && electron-builder --linux --dir",
-    "build:linux-appimage": "npm run build && electron-builder --linux AppImage",
-    "build:linux-targz": "npm run build && electron-builder --linux tar.gz",
-    "build:mac": "npm run build && electron-builder --mac --universal"
+    "electron:patch-builder": "node scripts/patch-app-builder-lib.cjs",
+    "electron:rebuild": "electron-rebuild -f -w better-sqlite3",
+    "build:win-portable": "npm run build && npm run electron:rebuild && npm run electron:patch-builder && electron-builder --win --dir",
+    "build:win-installer": "npm run build && npm run electron:rebuild && npm run electron:patch-builder && electron-builder --win --publish=never",
+    "build:linux-portable": "npm run build && npm run electron:rebuild && npm run electron:patch-builder && electron-builder --linux --dir",
+    "build:linux-appimage": "npm run build && npm run electron:rebuild && npm run electron:patch-builder && electron-builder --linux AppImage",
+    "build:linux-targz": "npm run build && npm run electron:rebuild && npm run electron:patch-builder && electron-builder --linux tar.gz",
+    "build:mac": "npm run build && npm run electron:rebuild && npm run electron:patch-builder && electron-builder --mac --universal",
+    "build:mac-dev": "npm run build && npm run electron:rebuild && npm run electron:patch-builder && electron-builder --mac dir --publish=never"
   },
   "dependencies": {
-    "@codemirror/autocomplete": "^6.18.7",
-    "@codemirror/commands": "^6.3.3",
-    "@codemirror/search": "^6.5.11",
-    "@codemirror/theme-one-dark": "^6.1.2",
-    "@codemirror/view": "^6.23.1",
-    "@hookform/resolvers": "^5.1.1",
+    "@tanstack/react-virtual": "^3.13.26",
+    "axios": "^1.15.2",
+    "bcryptjs": "^3.0.3",
+    "better-sqlite3": "^12.9.0",
+    "body-parser": "^2.2.2",
+    "chalk": "^5.6.2",
+    "cookie-parser": "^1.4.7",
+    "cors": "^2.8.6",
+    "dotenv": "^17.4.2",
+    "drizzle-orm": "^0.45.2",
+    "express": "^5.2.1",
+    "guacamole-lite": "^1.2.0",
+    "https-proxy-agent": "^7.0.6",
+    "jose": "^6.2.2",
+    "js-yaml": "^4.1.1",
+    "jsonwebtoken": "^9.0.3",
+    "jszip": "^3.10.1",
+    "motion": "^12.38.0",
+    "multer": "^2.1.1",
+    "nanoid": "^5.1.9",
+    "qrcode": "^1.5.4",
+    "socks": "^2.8.7",
+    "speakeasy": "^2.0.0",
+    "ssh2": "^1.17.0",
+    "swagger-jsdoc": "^6.3.0",
+    "undici": "^7.0.0",
+    "ws": "^8.20.0"
+  },
+  "devDependencies": {
+    "@codemirror/autocomplete": "^6.20.1",
+    "@codemirror/commands": "^6.10.3",
+    "@codemirror/search": "^6.7.0",
+    "@codemirror/theme-one-dark": "^6.1.3",
+    "@codemirror/view": "^6.41.1",
+    "@commitlint/cli": "^21.0.1",
+    "@commitlint/config-conventional": "^21.0.1",
+    "@deadendjs/swagger-jsdoc": "^8.1.2",
+    "@electron/notarize": "^3.1.1",
+    "@electron/rebuild": "^4.0.4",
+    "@eslint/js": "^9.0.0",
+    "@fontsource-variable/jetbrains-mono": "^5.2.8",
     "@monaco-editor/react": "^4.7.0",
-    "@radix-ui/react-accordion": "^1.2.11",
+    "@radix-ui/react-accordion": "^1.2.12",
     "@radix-ui/react-alert-dialog": "^1.1.15",
-    "@radix-ui/react-checkbox": "^1.3.2",
+    "@radix-ui/react-checkbox": "^1.3.3",
     "@radix-ui/react-dialog": "^1.1.15",
-    "@radix-ui/react-dropdown-menu": "^2.1.15",
-    "@radix-ui/react-label": "^2.1.7",
-    "@radix-ui/react-popover": "^1.1.14",
-    "@radix-ui/react-progress": "^1.1.7",
-    "@radix-ui/react-scroll-area": "^1.2.9",
-    "@radix-ui/react-select": "^2.2.5",
-    "@radix-ui/react-separator": "^1.1.7",
+    "@radix-ui/react-dropdown-menu": "^2.1.16",
+    "@radix-ui/react-label": "^2.1.8",
+    "@radix-ui/react-popover": "^1.1.15",
+    "@radix-ui/react-progress": "^1.1.8",
+    "@radix-ui/react-scroll-area": "^1.2.10",
+    "@radix-ui/react-select": "^2.2.6",
+    "@radix-ui/react-separator": "^1.1.8",
     "@radix-ui/react-slider": "^1.3.6",
     "@radix-ui/react-slot": "^1.2.4",
-    "@radix-ui/react-switch": "^1.2.5",
-    "@radix-ui/react-tabs": "^1.1.12",
+    "@radix-ui/react-switch": "^1.2.6",
+    "@radix-ui/react-tabs": "^1.1.13",
     "@radix-ui/react-tooltip": "^1.2.8",
-    "@tailwindcss/vite": "^4.1.14",
-    "@types/bcryptjs": "^2.4.6",
-    "@types/cookie-parser": "^1.4.9",
-    "@types/cytoscape": "^3.21.9",
-    "@types/jszip": "^3.4.0",
-    "@types/multer": "^2.0.0",
-    "@types/qrcode": "^1.5.5",
-    "@types/react-grid-layout": "^1.3.6",
+    "@tailwindcss/vite": "^4.2.4",
+    "@types/better-sqlite3": "^7.6.13",
+    "@types/cookie-parser": "^1.4.10",
+    "@types/cors": "^2.8.19",
+    "@types/express": "^5.0.6",
+    "@types/guacamole-common-js": "^1.5.5",
+    "@types/js-yaml": "^4.0.9",
+    "@types/jsonwebtoken": "^9.0.10",
+    "@types/multer": "^2.1.0",
+    "@types/node": "^25.9.1",
+    "@types/qrcode": "^1.5.6",
+    "@types/react": "^19.2.14",
+    "@types/react-dom": "^19.2.3",
     "@types/speakeasy": "^2.0.10",
-    "@uiw/codemirror-extensions-langs": "^4.24.1",
-    "@uiw/codemirror-theme-github": "^4.25.4",
-    "@uiw/react-codemirror": "^4.24.1",
-    "@xterm/addon-clipboard": "^0.1.0",
-    "@xterm/addon-fit": "^0.10.0",
-    "@xterm/addon-unicode11": "^0.8.0",
-    "@xterm/addon-web-links": "^0.11.0",
-    "@xterm/xterm": "^5.5.0",
-    "axios": "^1.10.0",
-    "bcryptjs": "^3.0.2",
-    "better-sqlite3": "^12.2.0",
-    "body-parser": "^1.20.2",
-    "chalk": "^4.1.2",
+    "@types/ssh2": "^1.15.5",
+    "@types/ws": "^8.18.1",
+    "@uiw/codemirror-extensions-langs": "^4.25.9",
+    "@uiw/codemirror-theme-github": "^4.25.9",
+    "@uiw/react-codemirror": "^4.25.9",
+    "@vitejs/plugin-react": "^6.0.1",
+    "@xterm/addon-clipboard": "^0.2.0",
+    "@xterm/addon-fit": "^0.11.0",
+    "@xterm/addon-unicode11": "^0.9.0",
+    "@xterm/addon-web-links": "^0.12.0",
+    "@xterm/xterm": "^6.0.0",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
     "cmdk": "^1.1.1",
-    "cookie-parser": "^1.4.7",
-    "cors": "^2.8.5",
-    "cytoscape": "^3.33.1",
-    "dotenv": "^17.2.0",
-    "drizzle-orm": "^0.44.3",
-    "express": "^5.1.0",
-    "https-proxy-agent": "^7.0.6",
-    "i18n-auto-translation": "^2.2.3",
-    "i18next": "^25.4.2",
-    "i18next-browser-languagedetector": "^8.2.0",
-    "jose": "^5.2.3",
-    "jsonwebtoken": "^9.0.2",
-    "jszip": "^3.10.1",
-    "lucide-react": "^0.525.0",
-    "multer": "^2.0.2",
-    "nanoid": "^5.1.5",
-    "next-themes": "^0.4.6",
-    "node-fetch": "^3.3.2",
-    "qrcode": "^1.5.4",
-    "react": "^19.1.0",
-    "react-cytoscapejs": "^2.0.0",
-    "react-dom": "^19.1.0",
-    "react-grid-layout": "^2.2.2",
-    "react-h5-audio-player": "^3.10.1",
-    "react-hook-form": "^7.60.0",
-    "react-i18next": "^15.7.3",
-    "react-icons": "^5.5.0",
-    "react-markdown": "^10.1.0",
-    "react-pdf": "^10.1.0",
-    "react-photo-view": "^1.2.7",
-    "react-player": "^3.3.3",
-    "react-resizable-panels": "^3.0.3",
-    "react-simple-keyboard": "^3.8.120",
-    "react-syntax-highlighter": "^15.6.6",
-    "react-xtermjs": "^1.0.10",
-    "recharts": "^3.2.1",
-    "remark-gfm": "^4.0.1",
-    "socks": "^2.8.7",
-    "sonner": "^2.0.7",
-    "speakeasy": "^2.0.0",
-    "ssh2": "^1.16.0",
-    "tailwind-merge": "^3.3.1",
-    "tailwindcss": "^4.1.14",
-    "wait-on": "^9.0.1",
-    "ws": "^8.18.3",
-    "zod": "^4.0.5"
-  },
-  "devDependencies": {
-    "@commitlint/cli": "^20.1.0",
-    "@commitlint/config-conventional": "^20.0.0",
-    "@electron/notarize": "^2.5.0",
-    "@eslint/js": "^9.34.0",
-    "@types/better-sqlite3": "^7.6.13",
-    "@types/cors": "^2.8.19",
-    "@types/express": "^5.0.3",
-    "@types/jsonwebtoken": "^9.0.10",
-    "@types/node": "^24.3.0",
-    "@types/react": "^19.1.8",
-    "@types/react-dom": "^19.1.6",
-    "@types/ssh2": "^1.15.5",
-    "@types/ws": "^8.18.1",
-    "@vitejs/plugin-react": "^4.3.4",
     "concurrently": "^9.2.1",
-    "electron": "^38.0.0",
-    "electron-builder": "^26.0.12",
-    "eslint": "^9.34.0",
-    "eslint-plugin-react-hooks": "^5.2.0",
-    "eslint-plugin-react-refresh": "^0.4.20",
-    "globals": "^16.3.0",
+    "cytoscape": "^3.33.2",
+    "electron": "^42.2.0",
+    "electron-builder": "^26.8.1",
+    "eslint": "^9.0.0",
+    "eslint-plugin-react-hooks": "^7.1.1",
+    "eslint-plugin-react-refresh": "^0.5.2",
+    "eslint-plugin-unused-imports": "^4.4.1",
+    "globals": "^17.5.0",
+    "guacamole-common-js": "^1.5.0",
     "husky": "^9.1.7",
-    "lint-staged": "^16.2.3",
-    "prettier": "3.6.2",
-    "swagger-jsdoc": "^6.2.8",
-    "typescript": "~5.9.2",
-    "typescript-eslint": "^8.40.0",
-    "vite": "^7.1.5"
+    "i18next": "^26.0.8",
+    "i18next-browser-languagedetector": "^8.2.1",
+    "lint-staged": "^17.0.5",
+    "lucide-react": "^1.11.0",
+    "prettier": "3.8.3",
+    "radix-ui": "^1.4.3",
+    "react": "^19.2.5",
+    "react-cytoscapejs": "^2.0.0",
+    "react-dom": "^19.2.5",
+    "react-h5-audio-player": "^3.10.2",
+    "react-hook-form": "^7.73.1",
+    "react-i18next": "^17.0.4",
+    "react-icons": "^5.6.0",
+    "react-markdown": "^10.1.0",
+    "react-pdf": "^10.4.1",
+    "react-photo-view": "^1.2.7",
+    "react-syntax-highlighter": "^16.1.1",
+    "react-xtermjs": "^1.0.10",
+    "remark-gfm": "^4.0.1",
+    "sharp": "^0.34.5",
+    "sonner": "^2.0.7",
+    "tailwind-merge": "^3.5.0",
+    "tailwindcss": "^4.2.4",
+    "tw-animate-css": "^1.4.0",
+    "typescript": "~6.0.3",
+    "typescript-eslint": "^8.59.0",
+    "vite": "^8.0.13",
+    "vite-plugin-svgr": "^5.2.0"
   },
   "lint-staged": {
-    "*.{js,jsx,ts,tsx}": [
+    "*.{ts,tsx}": [
+      "eslint --fix",
+      "prettier --write"
+    ],
+    "*.{js,jsx}": [
       "prettier --write"
     ],
     "*.{json,css,md}": [
       "prettier --write"
     ]
+  },
+  "overrides": {
+    "@electron/asar": "^4.2.0",
+    "@electron/get": "^5.0.0",
+    "dompurify": "^3.4.1",
+    "eslint-visitor-keys": "^4.2.1",
+    "prebuild-install": "npm:@mmomtchev/prebuild-install@1.0.2",
+    "rimraf": "file:vendor/rimraf-compat"
   }
 }

public/manifest.json

@@ -1,7 +1,7 @@
 {
   "name": "Termix",
   "short_name": "Termix",
-  "description": "A web-based server management platform with SSH terminal, tunneling, and file editing capabilities",
+  "description": "Self-hosted SSH and remote desktop management.",
   "theme_color": "#09090b",
   "background_color": "#09090b",
   "display": "standalone",

public/sw.js

@@ -1,13 +1,11 @@
-const CACHE_NAME = "termix-v1";
+const CACHE_NAME = "termix-static-v2";
+const BASE_PATH = "__TERMIX_SW_BASE_PATH__";
 const STATIC_ASSETS = [
-  "/",
-  "/index.html",
-  "/manifest.json",
-  "/favicon.ico",
-  "/icons/48x48.png",
-  "/icons/128x128.png",
-  "/icons/256x256.png",
-  "/icons/512x512.png",
+  `${BASE_PATH}/favicon.ico`,
+  `${BASE_PATH}/icons/48x48.png`,
+  `${BASE_PATH}/icons/128x128.png`,
+  `${BASE_PATH}/icons/256x256.png`,
+  `${BASE_PATH}/icons/512x512.png`,
 ];
 
 self.addEventListener("install", (event) => {
@@ -54,23 +52,23 @@ self.addEventListener("fetch", (event) => {
     return;
   }
 
+  if (
+    url.pathname.startsWith("/host/opkssh-chooser/") ||
+    url.pathname.startsWith("/host/opkssh-callback/")
+  ) {
+    return;
+  }
+
   if (url.origin !== self.location.origin) {
     return;
   }
 
   if (request.mode === "navigate") {
-    event.respondWith(
-      fetch(request).catch(() => {
-        return caches.match("/index.html");
-      }),
-    );
+    event.respondWith(fetch(request));
     return;
   }
 
-  const isStaticAsset = STATIC_ASSETS.some((asset) => {
-    if (asset === "/") return url.pathname === "/";
-    return url.pathname === asset || url.pathname.startsWith("/assets/");
-  });
+  const isStaticAsset = STATIC_ASSETS.some((asset) => url.pathname === asset);
 
   if (!isStaticAsset) {
     return;

readme/README-AR.md

@@ -0,0 +1,357 @@
+<div align="center">
+
+<img src="../public/icon.svg" width="120" height="120" alt="Termix Logo" />
+
+<h1>Termix</h1>
+
+<p>إدارة SSH ذاتية الاستضافة والوصول إلى سطح المكتب البعيد</p>
+
+<p>
+  <a href="../README.md">English</a> ·
+  <a href="README-CN.md">中文</a> ·
+  <a href="README-JA.md">日本語</a> ·
+  <a href="README-KO.md">한국어</a> ·
+  <a href="README-FR.md">Français</a> ·
+  <a href="README-DE.md">Deutsch</a> ·
+  <a href="README-ES.md">Español</a> ·
+  <a href="README-PT.md">Português</a> ·
+  <a href="README-RU.md">Русский</a> ·
+  العربية ·
+  <a href="README-HI.md">हिन्दी</a> ·
+  <a href="README-TR.md">Türkçe</a> ·
+  <a href="README-VI.md">Tiếng Việt</a> ·
+  <a href="README-IT.md">Italiano</a>
+</p>
+
+<p>
+  <img src="https://img.shields.io/github/stars/Termix-SSH/Termix?style=flat&label=Stars&color=F39044&labelColor=1a1a1a" />
+  <img src="https://img.shields.io/github/forks/Termix-SSH/Termix?style=flat&label=Forks&color=F39044&labelColor=1a1a1a" />
+  <img src="https://img.shields.io/github/v/release/Termix-SSH/Termix?style=flat&label=Release&color=F39044&labelColor=1a1a1a&v=1" />
+  <a href="https://discord.gg/jVQGdvHDrf"><img alt="Discord" src="https://img.shields.io/discord/1347374268253470720?color=F39044&labelColor=1a1a1a" /></a>
+</p>
+
+<br />
+
+<img src="../repo-images/Termix Header.png" alt="Termix Banner" width="900" />
+
+<br />
+<br />
+
+<p>
+  <img src="../repo-images/Repo of the Day.png" alt="Repo of the Day Achievement" width="280" />
+  <br />
+  <sub>تم تحقيقه في 1 سبتمبر 2025</sub>
+</p>
+
+</div>
+
+<br />
+
+## نظرة عامة
+
+Termix هي منصة مفتوحة المصدر ومجانية للأبد وذاتية الاستضافة لإدارة الخوادم بشكل شامل. توفر حلاً متعدد المنصات لإدارة خوادمك وبنيتك التحتية من خلال واجهة واحدة وسهلة الاستخدام. يوفر Termix الوصول إلى طرفية SSH، والتحكم في سطح المكتب البعيد (RDP، VNC، Telnet)، وقدرات إنشاء أنفاق SSH، وإدارة ملفات SSH عن بُعد، والعديد من الأدوات الأخرى. يُعد Termix البديل المثالي المجاني وذاتي الاستضافة لـ Termius المتاح لجميع المنصات.
+
+<br />
+
+## الميزات
+
+<table>
+<tr>
+<td width="50%" valign="top">
+
+**الوصول إلى طرفية SSH:**
+طرفية كاملة الميزات مع دعم تقسيم الشاشة (حتى 4 لوحات) مع نظام علامات تبويب شبيه بالمتصفح. يتضمن دعم تخصيص الطرفية بما في ذلك سمات الطرفية الشائعة والخطوط والمكونات الأخرى.
+
+</td>
+<td width="50%" valign="top">
+
+**الوصول إلى سطح المكتب البعيد:**
+دعم RDP و VNC و Telnet عبر المتصفح مع تخصيص كامل وتقسيم الشاشة.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**إدارة أنفاق SSH:**
+إنشاء وإدارة أنفاق SSH بين الخوادم مع إعادة الاتصال التلقائي ومراقبة الحالة وإعادة التوجيه المحلي أو البعيد أو SOCKS الديناميكي. يتم تخزين إعدادات نفق العميل-المكتبي إلى السيرفر محلياً لكل تثبيت مكتبي؛ يمكن حفظ لقطات C2S الاختيارية على الخادم وإعادة تسميتها وتحميلها أو حذفها لنقل تكوين النفق المحلي بين العملاء.
+
+</td>
+<td width="50%" valign="top">
+
+**مدير الملفات عن بُعد:**
+إدارة الملفات مباشرة على الخوادم البعيدة مع دعم عرض وتحرير الكود والصور والصوت والفيديو. رفع وتنزيل وإعادة تسمية وحذف ونقل الملفات بسلاسة مع دعم sudo.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**إدارة Docker:**
+تشغيل وإيقاف وتعليق وحذف الحاويات. عرض إحصائيات الحاويات. التحكم في الحاوية باستخدام طرفية docker exec. لم يُصمم ليحل محل Portainer أو Dockge بل لإدارة حاوياتك ببساطة مقارنة بإنشائها.
+
+</td>
+<td width="50%" valign="top">
+
+**مدير مضيفات SSH:**
+حفظ وتنظيم وإدارة اتصالات SSH الخاصة بك باستخدام العلامات والمجلدات، وحفظ بيانات تسجيل الدخول القابلة لإعادة الاستخدام بسهولة مع إمكانية أتمتة نشر مفاتيح SSH.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**إحصائيات الخادم:**
+عرض استخدام المعالج والذاكرة والقرص إلى جانب الشبكة ووقت التشغيل ومعلومات النظام وجدار الحماية ومراقب المنافذ على معظم الخوادم المبنية على Linux.
+
+</td>
+<td width="50%" valign="top">
+
+**مصادقة المستخدمين:**
+إدارة آمنة للمستخدمين مع ضوابط إدارية ودعم OIDC (مع التحكم في الوصول) و 2FA (TOTP). عرض جلسات المستخدمين النشطة عبر جميع المنصات وإلغاء الصلاحيات. ربط حسابات OIDC/المحلية معاً.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**RBAC:**
+إنشاء الأدوار ومشاركة المضيفات عبر المستخدمين/الأدوار.
+
+</td>
+<td width="50%" valign="top">
+
+**تشفير قاعدة البيانات:**
+يُخزَّن الخادم الخلفي كملفات قاعدة بيانات SQLite مشفرة. اطلع على [الوثائق](https://docs.termix.site/security) لمزيد من المعلومات.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**الرسم البياني للشبكة:**
+تخصيص لوحة التحكم لتصور مختبرك المنزلي بناءً على اتصالات SSH مع دعم الحالة.
+
+</td>
+<td width="50%" valign="top">
+
+**أدوات SSH:**
+إنشاء مقتطفات أوامر قابلة لإعادة الاستخدام تُنفَّذ بنقرة واحدة. تشغيل أمر واحد في وقت واحد عبر عدة طرفيات مفتوحة.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**علامات التبويب الدائمة:**
+تبقى جلسات SSH وعلامات التبويب مفتوحة عبر الأجهزة/التحديثات إذا تم تفعيلها في ملف تعريف المستخدم.
+
+</td>
+<td width="50%" valign="top">
+
+**اللغات:**
+دعم مدمج لحوالي 30 لغة (تُدار بواسطة [Crowdin](https://docs.termix.site/translations)).
+
+</td>
+</tr>
+</table>
+
+<br />
+
+<details>
+<summary><b>المزيد من الميزات</b></summary>
+<br />
+
+- **لوحة التحكم** - عرض معلومات الخادم بنظرة واحدة على لوحة التحكم
+- **مفاتيح API** - إنشاء مفاتيح API محددة النطاق للمستخدم مع تواريخ انتهاء صلاحية للاستخدام في الأتمتة/CI
+- **تصدير/استيراد البيانات** - تصدير واستيراد مضيفات SSH وبيانات الاعتماد وبيانات مدير الملفات
+- **إعداد SSL تلقائي** - إنشاء وإدارة شهادات SSL مدمجة مع إعادة التوجيه إلى HTTPS
+- **واجهة مستخدم حديثة** - واجهة نظيفة متوافقة مع سطح المكتب والهاتف المحمول مبنية بـ React و Tailwind CSS و Shadcn. الاختيار بين العديد من سمات واجهة المستخدم بما في ذلك الفاتح والداكن و Dracula وغيرها. استخدام مسارات URL لفتح أي اتصال في وضع ملء الشاشة.
+- **سجل الأوامر** - الإكمال التلقائي وعرض أوامر SSH التي تم تنفيذها سابقاً
+- **الاتصال السريع** - الاتصال بخادم دون الحاجة إلى حفظ بيانات الاتصال
+- **لوحة الأوامر** - اضغط مرتين على Shift الأيسر للوصول السريع إلى اتصالات SSH باستخدام لوحة المفاتيح
+- **ميزات SSH الغنية** - دعم مضيفات القفز، Warpgate، الاتصالات المبنية على TOTP، SOCKS5، التحقق من مفتاح المضيف، الملء التلقائي لكلمة المرور، [OPKSSH](https://github.com/openpubkey/opkssh)، tmux، port knocking، إلخ.
+
+</details>
+
+<br />
+
+## دعم المنصات
+
+<table align="center">
+<tr>
+<th align="center">المنصة</th>
+<th align="center">التوزيع</th>
+</tr>
+<tr>
+<td align="center"><b>Web</b></td>
+<td>أي متصفح حديث (Chrome، Safari، Firefox) · دعم PWA</td>
+</tr>
+<tr>
+<td align="center"><b>Windows</b> <sub>x64/ia32</sub></td>
+<td>نسخة محمولة · مثبت MSI · Chocolatey</td>
+</tr>
+<tr>
+<td align="center"><b>Linux</b> <sub>x64/ia32</sub></td>
+<td>نسخة محمولة · AUR · AppImage · Deb · Flatpak</td>
+</tr>
+<tr>
+<td align="center"><b>macOS</b> <sub>x64/ia32, v12.0+</sub></td>
+<td>Apple App Store · DMG · Homebrew</td>
+</tr>
+<tr>
+<td align="center"><b>iOS/iPadOS</b> <sub>v15.1+</sub></td>
+<td>Apple App Store · IPA</td>
+</tr>
+<tr>
+<td align="center"><b>Android</b> <sub>v7.0+</sub></td>
+<td>Google Play Store · APK</td>
+</tr>
+</table>
+
+<br />
+
+## التثبيت
+
+قم بزيارة [وثائق](https://docs.termix.site/install) Termix للحصول على مزيد من المعلومات حول كيفية تثبيت Termix على جميع المنصات. يمكنك الاطلاع على نموذج ملف Docker Compose هنا (يمكنك حذف guacd والشبكة إذا كنت لا تخطط لاستخدام ميزات سطح المكتب البعيد):
+
+```yaml
+services:
+  termix:
+    image: ghcr.io/lukegus/termix:latest
+    container_name: termix
+    restart: unless-stopped
+    ports:
+      - "8080:8080"
+    volumes:
+      - termix-data:/app/data
+    environment:
+      PORT: "8080"
+    depends_on:
+      - guacd
+    networks:
+      - termix-net
+
+  guacd:
+    image: guacamole/guacd:1.6.0
+    container_name: guacd
+    restart: unless-stopped
+    ports:
+      - "4822:4822"
+    networks:
+      - termix-net
+
+volumes:
+  termix-data:
+    driver: local
+
+networks:
+  termix-net:
+    driver: bridge
+```
+
+<br />
+
+## لقطات الشاشة
+
+<div align="center">
+
+<br />
+
+[![YouTube](../repo-images/YouTube.png)](https://www.youtube.com/@TermixSSH/videos)
+
+<sub>شاهد نظرة عامة على التحديثات على YouTube</sub>
+
+<br />
+<br />
+
+<table>
+<tr>
+<td><img src="../repo-images/Image 1.png" alt="Termix Screenshot 1" width="400" /></td>
+<td><img src="../repo-images/Image 2.png" alt="Termix Screenshot 2" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 3.png" alt="Termix Screenshot 3" width="400" /></td>
+<td><img src="../repo-images/Image 4.png" alt="Termix Screenshot 4" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 5.png" alt="Termix Screenshot 5" width="400" /></td>
+<td><img src="../repo-images/Image 6.png" alt="Termix Screenshot 6" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 7.png" alt="Termix Screenshot 7" width="400" /></td>
+<td><img src="../repo-images/Image 8.png" alt="Termix Screenshot 8" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 9.png" alt="Termix Screenshot 9" width="400" /></td>
+<td><img src="../repo-images/Image 10.png" alt="Termix Screenshot 10" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 11.png" alt="Termix Screenshot 11" width="400" /></td>
+<td><img src="../repo-images/Image 12.png" alt="Termix Screenshot 12" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 13.png" alt="Termix Screenshot 13" width="400" /></td>
+<td><img src="../repo-images/Image 14.png" alt="Termix Screenshot 14" width="400" /></td>
+</tr>
+</table>
+
+<sub>قد تكون بعض مقاطع الفيديو والصور قديمة أو قد لا تعرض الميزات بشكل مثالي.</sub>
+
+</div>
+
+<br />
+
+## الميزات المخططة
+
+راجع [المشاريع](https://github.com/orgs/Termix-SSH/projects/2) لعرض جميع الميزات المخططة. إذا كنت تتطلع للمساهمة، راجع [المساهمة](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md).
+
+<br />
+
+## الرعاة
+
+<div align="center">
+
+<br />
+
+<a href="https://www.digitalocean.com/">
+  <img src="https://opensource.nyc3.cdn.digitaloceanspaces.com/attribution/assets/SVG/DO_Logo_horizontal_blue.svg" height="40" alt="DigitalOcean" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://crowdin.com/">
+  <img src="https://support.crowdin.com/assets/logos/core-logo/svg/crowdin-core-logo-cDark.svg" height="40" alt="Crowdin" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://www.blacksmith.sh/">
+  <img src="https://cdn.prod.website-files.com/681bfb0c9a4601bc6e288ec4/683ca9e2c5186757092611b8_e8cb22127df4da0811c4120a523722d2_logo-backsmith-wordmark-light.svg" height="40" alt="Blacksmith" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://www.cloudflare.com/">
+  <img src="https://sirv.sirv.com/website/screenshots/cloudflare/cloudflare-logo.png?w=300" height="40" alt="Cloudflare" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://tailscale.com/">
+  <img src="https://drive.google.com/uc?export=view&id=1lIxkJuX6M23bW-2FElhT0rQieTrzaVSL" height="40" alt="Tailscale" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://akamai.com/">
+  <img src="https://upload.wikimedia.org/wikipedia/commons/8/8b/Akamai_logo.svg" height="40" alt="Akamai" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://aws.amazon.com/">
+  <img src="https://upload.wikimedia.org/wikipedia/commons/thumb/9/93/Amazon_Web_Services_Logo.svg/960px-Amazon_Web_Services_Logo.svg.png" height="40" alt="AWS" />
+</a>
+
+</div>
+
+<br />
+
+## الدعم
+
+إذا كنت بحاجة إلى مساعدة أو ترغب في طلب ميزة لـ Termix، قم بزيارة صفحة [المشكلات](https://github.com/Termix-SSH/Support/issues)، وسجل الدخول، واضغط على `New Issue`. يرجى أن تكون مفصلاً قدر الإمكان في مشكلتك، ويُفضَّل كتابتها باللغة الإنجليزية. يمكنك أيضاً الانضمام إلى خادم [Discord](https://discord.gg/jVQGdvHDrf) وزيارة قناة الدعم، ومع ذلك قد تكون أوقات الاستجابة أطول.
+
+<br />
+
+## الترخيص
+
+موزع بموجب رخصة Apache License الإصدار 2.0. راجع ملف `LICENSE` لمزيد من المعلومات.

readme/README-CN.md

@@ -0,0 +1,357 @@
+<div align="center">
+
+<img src="../public/icon.svg" width="120" height="120" alt="Termix Logo" />
+
+<h1>Termix</h1>
+
+<p>自托管 SSH 管理与远程桌面访问平台</p>
+
+<p>
+  <a href="../README.md">English</a> ·
+  中文 ·
+  <a href="README-JA.md">日本語</a> ·
+  <a href="README-KO.md">한국어</a> ·
+  <a href="README-FR.md">Français</a> ·
+  <a href="README-DE.md">Deutsch</a> ·
+  <a href="README-ES.md">Español</a> ·
+  <a href="README-PT.md">Português</a> ·
+  <a href="README-RU.md">Русский</a> ·
+  <a href="README-AR.md">العربية</a> ·
+  <a href="README-HI.md">हिन्दी</a> ·
+  <a href="README-TR.md">Türkçe</a> ·
+  <a href="README-VI.md">Tiếng Việt</a> ·
+  <a href="README-IT.md">Italiano</a>
+</p>
+
+<p>
+  <img src="https://img.shields.io/github/stars/Termix-SSH/Termix?style=flat&label=Stars&color=F39044&labelColor=1a1a1a" />
+  <img src="https://img.shields.io/github/forks/Termix-SSH/Termix?style=flat&label=Forks&color=F39044&labelColor=1a1a1a" />
+  <img src="https://img.shields.io/github/v/release/Termix-SSH/Termix?style=flat&label=Release&color=F39044&labelColor=1a1a1a&v=1" />
+  <a href="https://discord.gg/jVQGdvHDrf"><img alt="Discord" src="https://img.shields.io/discord/1347374268253470720?color=F39044&labelColor=1a1a1a" /></a>
+</p>
+
+<br />
+
+<img src="../repo-images/Termix Header.png" alt="Termix Banner" width="900" />
+
+<br />
+<br />
+
+<p>
+  <img src="../repo-images/Repo of the Day.png" alt="Repo of the Day Achievement" width="280" />
+  <br />
+  <sub>获得于 2025年9月1日</sub>
+</p>
+
+</div>
+
+<br />
+
+## 概览
+
+Termix 是一个开源、永久免费、自托管的一体化服务器管理平台。它提供了一个多平台解决方案，通过一个直观的界面管理你的服务器和基础设施。Termix 提供 SSH 终端访问、远程桌面控制（RDP、VNC、Telnet）、SSH 隧道功能、远程 SSH 文件管理以及许多其他工具。Termix 是适用于所有平台的完美免费自托管 Termius 替代品。
+
+<br />
+
+## 功能
+
+<table>
+<tr>
+<td width="50%" valign="top">
+
+**SSH 终端访问:**
+功能齐全的终端，支持分屏（最多 4 个面板），并配有类似浏览器的标签系统。包括对自定义终端的支持，如常用的终端主题、字体和其他组件。
+
+</td>
+<td width="50%" valign="top">
+
+**远程桌面访问:**
+通过浏览器支持 RDP、VNC 和 Telnet，具有完整的自定义和分屏功能。
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**SSH 隧道管理:**
+创建和管理具有自动重连和健康监测功能的服务器间 SSH 隧道，支持本地、远程或动态 SOCKS 转发。桌面客户端到服务器的隧道设置按桌面安装本地存储，可选的 C2S 预设快照可保存到服务器、重命名、加载或删除，以便在客户端之间迁移本地隧道配置。
+
+</td>
+<td width="50%" valign="top">
+
+**远程文件管理器:**
+直接在远程服务器上管理文件，支持查看和编辑代码、图像、音频和视频。支持通过 sudo 无缝上传、下载、重命名、删除和移动文件。
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**Docker 管理:**
+启动、停止、暂停、移除容器。查看容器统计信息。通过 docker exec 终端控制容器。它的初衷不是取代 Portainer 或 Dockge，而是为了比直接创建容器更简单地管理它们。
+
+</td>
+<td width="50%" valign="top">
+
+**SSH 主机管理器:**
+通过标签和文件夹保存、组织和管理您的 SSH 连接，轻松保存可重用的登录信息，并能自动化部署 SSH 密钥。
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**服务器统计:**
+在大多数基于 Linux 的服务器上查看 CPU、内存、磁盘使用情况以及网络、运行时间、系统信息、防火墙和端口监控。
+
+</td>
+<td width="50%" valign="top">
+
+**用户认证:**
+安全的用户管理，具有管理员控制、OIDC（带访问控制）和 2FA (TOTP) 支持。查看所有平台上的活动用户会话并撤销权限。将您的 OIDC/本地账户链接在一起。
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**RBAC:**
+创建角色并在用户/角色之间共享主机。
+
+</td>
+<td width="50%" valign="top">
+
+**数据库加密:**
+后端存储为加密的 SQLite 数据库文件。查看[文档](https://docs.termix.site/security)了解更多。
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**网络图:**
+自定义您的仪表板，根据您的 SSH 连接可视化您的家庭实验室，并支持状态监测。
+
+</td>
+<td width="50%" valign="top">
+
+**SSH 工具:**
+创建可重用的命令片段，只需点击一下即可执行。在多个打开的终端中同时运行一个命令。
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**持久标签页:**
+如果在用户个人资料中启用，SSH 会话和标签页将在设备/刷新后保持打开状态。
+
+</td>
+<td width="50%" valign="top">
+
+**语言:**
+内置支持约 30 种语言（由 [Crowdin](https://docs.termix.site/translations) 管理）。
+
+</td>
+</tr>
+</table>
+
+<br />
+
+<details>
+<summary><b>更多功能</b></summary>
+<br />
+
+- **仪表板** - 在仪表板上一目了然地查看服务器信息
+- **API 密钥** - 创建带有到期日期的用户范围 API 密钥，用于自动化/CI
+- **数据导出/导入** - 导出和导入 SSH 主机、凭据和文件管理器数据
+- **自动 SSL 设置** - 内置 SSL 证书生成和管理，支持 HTTPS 重定向
+- **现代 UI** - 使用 React、Tailwind CSS 和 Shadcn 构建的整洁的桌面/移动友好界面。有多种 UI 主题可选，包括浅色、深色、Dracula 等。使用 URL 路由全屏打开任何连接。
+- **命令历史** - 自动完成并查看之前运行过的 SSH 命令
+- **快速连接** - 无需保存连接数据即可连接到服务器
+- **命令面板** - 双击左 Shift 键即可通过键盘快速访问 SSH 连接
+- **丰富的 SSH 功能** - 支持跳转主机、Warpgate、基于 TOTP 的连接、SOCKS5、主机密钥验证、密码自动填充、[OPKSSH](https://github.com/openpubkey/opkssh)、tmux、端口敲击等
+
+</details>
+
+<br />
+
+## 平台支持
+
+<table align="center">
+<tr>
+<th align="center">平台</th>
+<th align="center">发行版</th>
+</tr>
+<tr>
+<td align="center"><b>Web</b></td>
+<td>任何现代浏览器（Chrome、Safari、Firefox）· PWA 支持</td>
+</tr>
+<tr>
+<td align="center"><b>Windows</b> <sub>x64/ia32</sub></td>
+<td>便携版 · MSI 安装程序 · Chocolatey</td>
+</tr>
+<tr>
+<td align="center"><b>Linux</b> <sub>x64/ia32</sub></td>
+<td>便携版 · AUR · AppImage · Deb · Flatpak</td>
+</tr>
+<tr>
+<td align="center"><b>macOS</b> <sub>x64/ia32, v12.0+</sub></td>
+<td>Apple App Store · DMG · Homebrew</td>
+</tr>
+<tr>
+<td align="center"><b>iOS/iPadOS</b> <sub>v15.1+</sub></td>
+<td>Apple App Store · IPA</td>
+</tr>
+<tr>
+<td align="center"><b>Android</b> <sub>v7.0+</sub></td>
+<td>Google Play Store · APK</td>
+</tr>
+</table>
+
+<br />
+
+## 安装
+
+访问 [Termix 文档](https://docs.termix.site/install) 了解有关如何在所有平台上安装 Termix 的更多信息。此外，这里有一个示例 Docker Compose 文件（如果您不打算使用远程桌面功能，可以省略 guacd 和网络部分）：
+
+```yaml
+services:
+  termix:
+    image: ghcr.io/lukegus/termix:latest
+    container_name: termix
+    restart: unless-stopped
+    ports:
+      - "8080:8080"
+    volumes:
+      - termix-data:/app/data
+    environment:
+      PORT: "8080"
+    depends_on:
+      - guacd
+    networks:
+      - termix-net
+
+  guacd:
+    image: guacamole/guacd:1.6.0
+    container_name: guacd
+    restart: unless-stopped
+    ports:
+      - "4822:4822"
+    networks:
+      - termix-net
+
+volumes:
+  termix-data:
+    driver: local
+
+networks:
+  termix-net:
+    driver: bridge
+```
+
+<br />
+
+## 展示
+
+<div align="center">
+
+<br />
+
+[![YouTube](../repo-images/YouTube.png)](https://www.youtube.com/@TermixSSH/videos)
+
+<sub>在 YouTube 上观看更新概览</sub>
+
+<br />
+<br />
+
+<table>
+<tr>
+<td><img src="../repo-images/Image 1.png" alt="Termix Screenshot 1" width="400" /></td>
+<td><img src="../repo-images/Image 2.png" alt="Termix Screenshot 2" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 3.png" alt="Termix Screenshot 3" width="400" /></td>
+<td><img src="../repo-images/Image 4.png" alt="Termix Screenshot 4" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 5.png" alt="Termix Screenshot 5" width="400" /></td>
+<td><img src="../repo-images/Image 6.png" alt="Termix Screenshot 6" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 7.png" alt="Termix Screenshot 7" width="400" /></td>
+<td><img src="../repo-images/Image 8.png" alt="Termix Screenshot 8" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 9.png" alt="Termix Screenshot 9" width="400" /></td>
+<td><img src="../repo-images/Image 10.png" alt="Termix Screenshot 10" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 11.png" alt="Termix Screenshot 11" width="400" /></td>
+<td><img src="../repo-images/Image 12.png" alt="Termix Screenshot 12" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 13.png" alt="Termix Screenshot 13" width="400" /></td>
+<td><img src="../repo-images/Image 14.png" alt="Termix Screenshot 14" width="400" /></td>
+</tr>
+</table>
+
+<sub>某些视频和图像可能已过时，或者可能无法完美展示功能。</sub>
+
+</div>
+
+<br />
+
+## 计划功能
+
+查看 [Projects](https://github.com/orgs/Termix-SSH/projects/2) 了解所有计划功能。如果您想贡献代码，请参阅 [Contributing](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md)。
+
+<br />
+
+## 赞助商
+
+<div align="center">
+
+<br />
+
+<a href="https://www.digitalocean.com/">
+  <img src="https://opensource.nyc3.cdn.digitaloceanspaces.com/attribution/assets/SVG/DO_Logo_horizontal_blue.svg" height="40" alt="DigitalOcean" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://crowdin.com/">
+  <img src="https://support.crowdin.com/assets/logos/core-logo/svg/crowdin-core-logo-cDark.svg" height="40" alt="Crowdin" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://www.blacksmith.sh/">
+  <img src="https://cdn.prod.website-files.com/681bfb0c9a4601bc6e288ec4/683ca9e2c5186757092611b8_e8cb22127df4da0811c4120a523722d2_logo-backsmith-wordmark-light.svg" height="40" alt="Blacksmith" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://www.cloudflare.com/">
+  <img src="https://sirv.sirv.com/website/screenshots/cloudflare/cloudflare-logo.png?w=300" height="40" alt="Cloudflare" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://tailscale.com/">
+  <img src="https://drive.google.com/uc?export=view&id=1lIxkJuX6M23bW-2FElhT0rQieTrzaVSL" height="40" alt="Tailscale" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://akamai.com/">
+  <img src="https://upload.wikimedia.org/wikipedia/commons/8/8b/Akamai_logo.svg" height="40" alt="Akamai" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://aws.amazon.com/">
+  <img src="https://upload.wikimedia.org/wikipedia/commons/thumb/9/93/Amazon_Web_Services_Logo.svg/960px-Amazon_Web_Services_Logo.svg.png" height="40" alt="AWS" />
+</a>
+
+</div>
+
+<br />
+
+## 支持
+
+如果您需要 Termix 的帮助或想要请求功能，请访问 [Issues](https://github.com/Termix-SSH/Support/issues) 页面，登录并点击 `New Issue`。请尽可能详细地描述您的问题，建议使用英语。您也可以加入 [Discord](https://discord.gg/jVQGdvHDrf) 服务器并访问支持频道，但响应时间可能较长。
+
+<br />
+
+## 许可证
+
+根据 Apache License Version 2.0 发布。更多信息请参见 `LICENSE`。

readme/README-DE.md

@@ -0,0 +1,357 @@
+<div align="center">
+
+<img src="../public/icon.svg" width="120" height="120" alt="Termix Logo" />
+
+<h1>Termix</h1>
+
+<p>Selbst gehostete SSH-Verwaltung und Remote-Desktop-Zugriff</p>
+
+<p>
+  <a href="../README.md">English</a> ·
+  <a href="README-CN.md">中文</a> ·
+  <a href="README-JA.md">日本語</a> ·
+  <a href="README-KO.md">한국어</a> ·
+  <a href="README-FR.md">Français</a> ·
+  Deutsch ·
+  <a href="README-ES.md">Español</a> ·
+  <a href="README-PT.md">Português</a> ·
+  <a href="README-RU.md">Русский</a> ·
+  <a href="README-AR.md">العربية</a> ·
+  <a href="README-HI.md">हिन्दी</a> ·
+  <a href="README-TR.md">Türkçe</a> ·
+  <a href="README-VI.md">Tiếng Việt</a> ·
+  <a href="README-IT.md">Italiano</a>
+</p>
+
+<p>
+  <img src="https://img.shields.io/github/stars/Termix-SSH/Termix?style=flat&label=Stars&color=F39044&labelColor=1a1a1a" />
+  <img src="https://img.shields.io/github/forks/Termix-SSH/Termix?style=flat&label=Forks&color=F39044&labelColor=1a1a1a" />
+  <img src="https://img.shields.io/github/v/release/Termix-SSH/Termix?style=flat&label=Release&color=F39044&labelColor=1a1a1a&v=1" />
+  <a href="https://discord.gg/jVQGdvHDrf"><img alt="Discord" src="https://img.shields.io/discord/1347374268253470720?color=F39044&labelColor=1a1a1a" /></a>
+</p>
+
+<br />
+
+<img src="../repo-images/Termix Header.png" alt="Termix Banner" width="900" />
+
+<br />
+<br />
+
+<p>
+  <img src="../repo-images/Repo of the Day.png" alt="Repo of the Day Achievement" width="280" />
+  <br />
+  <sub>Erreicht am 1. September 2025</sub>
+</p>
+
+</div>
+
+<br />
+
+## Uberblick
+
+Termix ist eine quelloffene, dauerhaft kostenlose, selbst gehostete All-in-One-Serververwaltungsplattform. Sie bietet eine plattformubergreifende Losung zur Verwaltung Ihrer Server und Infrastruktur uber eine einzige, intuitive Oberflache. Termix bietet SSH-Terminalzugriff, Remote-Desktop-Steuerung (RDP, VNC, Telnet), SSH-Tunneling-Funktionen, Remote-SSH-Dateiverwaltung und viele weitere Werkzeuge. Termix ist die perfekte kostenlose und selbst gehostete Alternative zu Termius, verfugbar fur alle Plattformen.
+
+<br />
+
+## Funktionen
+
+<table>
+<tr>
+<td width="50%" valign="top">
+
+**SSH-Terminalzugriff:**
+Voll ausgestattetes Terminal mit Split-Screen-Unterstutzung (bis zu 4 Panels) mit einem browserahnlichen Tab-System. Enthalt Unterstutzung fur die Anpassung des Terminals einschliesslich gangiger Terminal-Themes, Schriftarten und anderer Komponenten.
+
+</td>
+<td width="50%" valign="top">
+
+**Remote-Desktop-Zugriff:**
+RDP-, VNC- und Telnet-Unterstutzung uber den Browser mit vollstandiger Anpassung und Split-Screen.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**SSH-Tunnelverwaltung:**
+Erstellen und verwalten Sie Server-zu-Server-SSH-Tunnel mit automatischer Wiederverbindung und Gesundheitsuberwachung sowie lokaler, entfernter oder dynamischer SOCKS-Weiterleitung. Desktop-Client-zu-Server-Tunneleinstellungen werden lokal pro Desktop-Installation gespeichert, optionale C2S-Preset-Snapshots konnen auf dem Server gespeichert, umbenannt, geladen oder geloscht werden, um eine lokale Tunnelkonfiguration zwischen Clients zu ubertragen.
+
+</td>
+<td width="50%" valign="top">
+
+**Remote-Dateimanager:**
+Verwalten Sie Dateien direkt auf Remote-Servern mit Unterstutzung fur das Anzeigen und Bearbeiten von Code, Bildern, Audio und Video. Laden Sie Dateien hoch, herunter, benennen Sie sie um, loschen oder verschieben Sie sie nahtlos mit Sudo-Unterstutzung.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**Docker-Verwaltung:**
+Container starten, stoppen, pausieren, entfernen. Container-Statistiken anzeigen. Container uber Docker-Exec-Terminal steuern. Es wurde nicht entwickelt, um Portainer oder Dockge zu ersetzen, sondern um Ihre Container einfach zu verwalten, anstatt sie zu erstellen.
+
+</td>
+<td width="50%" valign="top">
+
+**SSH-Host-Manager:**
+Speichern, organisieren und verwalten Sie Ihre SSH-Verbindungen mit Tags und Ordnern und speichern Sie einfach wiederverwendbare Anmeldeinformationen mit der Moglichkeit, die Bereitstellung von SSH-Schlusseln zu automatisieren.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**Serverstatistiken:**
+CPU-, Arbeitsspeicher- und Festplattenauslastung sowie Netzwerk, Betriebszeit, Systeminformationen, Firewall, Port-Monitor auf den meisten Linux-basierten Servern anzeigen.
+
+</td>
+<td width="50%" valign="top">
+
+**Benutzerauthentifizierung:**
+Sichere Benutzerverwaltung mit Admin-Kontrollen und OIDC- (mit Zugriffskontrolle) sowie 2FA (TOTP)-Unterstutzung. Aktive Benutzersitzungen uber alle Plattformen anzeigen und Berechtigungen widerrufen. OIDC-/Lokale Konten miteinander verknupfen.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**RBAC:**
+Rollen erstellen und Hosts uber Benutzer/Rollen teilen.
+
+</td>
+<td width="50%" valign="top">
+
+**Datenbankverschlusselung:**
+Backend gespeichert als verschlusselte SQLite-Datenbankdateien. Weitere Informationen in der [Dokumentation](https://docs.termix.site/security).
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**Netzwerkgraph:**
+Passen Sie Ihr Dashboard an, um Ihr Homelab basierend auf Ihren SSH-Verbindungen mit Statusunterstutzung zu visualisieren.
+
+</td>
+<td width="50%" valign="top">
+
+**SSH-Werkzeuge:**
+Erstellen Sie wiederverwendbare Befehlsvorlagen, die mit einem einzigen Klick ausgefuhrt werden. Fuhren Sie einen Befehl gleichzeitig in mehreren geoffneten Terminals aus.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**Persistente Tabs:**
+SSH-Sitzungen und Tabs bleiben uber Gerate/Aktualisierungen hinweg offen, wenn im Benutzerprofil aktiviert.
+
+</td>
+<td width="50%" valign="top">
+
+**Sprachen:**
+Integrierte Unterstutzung fur ca. 30 Sprachen (verwaltet uber [Crowdin](https://docs.termix.site/translations)).
+
+</td>
+</tr>
+</table>
+
+<br />
+
+<details>
+<summary><b>Weitere Funktionen</b></summary>
+<br />
+
+- **Dashboard** - Serverinformationen auf einen Blick auf Ihrem Dashboard anzeigen
+- **API-Schlussel** - Erstellen Sie benutzerbezogene API-Schlussel mit Ablaufdaten zur Verwendung fur Automatisierung/CI
+- **Datenexport/-import** - SSH-Hosts, Anmeldeinformationen und Dateimanager-Daten exportieren und importieren
+- **Automatische SSL-Einrichtung** - Integrierte SSL-Zertifikatsgenerierung und -verwaltung mit HTTPS-Weiterleitungen
+- **Moderne Benutzeroberflache** - Saubere desktop-/mobilfreundliche Oberflache, erstellt mit React, Tailwind CSS und Shadcn. Wahlen Sie zwischen vielen verschiedenen UI-Themes einschliesslich Hell, Dunkel, Dracula usw. Verwenden Sie URL-Routen, um jede Verbindung im Vollbildmodus zu offnen.
+- **Befehlsverlauf** - Autovervollstandigung und Anzeige zuvor ausgefuhrter SSH-Befehle
+- **Schnellverbindung** - Verbinden Sie sich mit einem Server, ohne die Verbindungsdaten speichern zu mussen
+- **Befehlspalette** - Doppeltippen Sie die linke Umschalttaste, um schnell auf SSH-Verbindungen mit Ihrer Tastatur zuzugreifen
+- **SSH-Funktionsreich** - Unterstutzt Jump-Hosts, Warpgate, TOTP-basierte Verbindungen, SOCKS5, Host-Key-Verifizierung, automatisches Ausfullen von Passwortern, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, Port Knocking usw.
+
+</details>
+
+<br />
+
+## Plattformunterstutzung
+
+<table align="center">
+<tr>
+<th align="center">Plattform</th>
+<th align="center">Distribution</th>
+</tr>
+<tr>
+<td align="center"><b>Web</b></td>
+<td>Jeder moderne Browser (Chrome, Safari, Firefox) · PWA-Unterstutzung</td>
+</tr>
+<tr>
+<td align="center"><b>Windows</b> <sub>x64/ia32</sub></td>
+<td>Portabel · MSI-Installationsprogramm · Chocolatey</td>
+</tr>
+<tr>
+<td align="center"><b>Linux</b> <sub>x64/ia32</sub></td>
+<td>Portabel · AUR · AppImage · Deb · Flatpak</td>
+</tr>
+<tr>
+<td align="center"><b>macOS</b> <sub>x64/ia32, v12.0+</sub></td>
+<td>Apple App Store · DMG · Homebrew</td>
+</tr>
+<tr>
+<td align="center"><b>iOS/iPadOS</b> <sub>v15.1+</sub></td>
+<td>Apple App Store · IPA</td>
+</tr>
+<tr>
+<td align="center"><b>Android</b> <sub>v7.0+</sub></td>
+<td>Google Play Store · APK</td>
+</tr>
+</table>
+
+<br />
+
+## Installation
+
+Besuchen Sie die Termix-[Dokumentation](https://docs.termix.site/install) fur weitere Informationen zur Installation von Termix auf allen Plattformen. Alternativ finden Sie hier eine Docker Compose-Beispieldatei (Sie konnen guacd und das Netzwerk weglassen, wenn Sie keine Remote-Desktop-Funktionen nutzen mochten):
+
+```yaml
+services:
+  termix:
+    image: ghcr.io/lukegus/termix:latest
+    container_name: termix
+    restart: unless-stopped
+    ports:
+      - "8080:8080"
+    volumes:
+      - termix-data:/app/data
+    environment:
+      PORT: "8080"
+    depends_on:
+      - guacd
+    networks:
+      - termix-net
+
+  guacd:
+    image: guacamole/guacd:1.6.0
+    container_name: guacd
+    restart: unless-stopped
+    ports:
+      - "4822:4822"
+    networks:
+      - termix-net
+
+volumes:
+  termix-data:
+    driver: local
+
+networks:
+  termix-net:
+    driver: bridge
+```
+
+<br />
+
+## Screenshots
+
+<div align="center">
+
+<br />
+
+[![YouTube](../repo-images/YouTube.png)](https://www.youtube.com/@TermixSSH/videos)
+
+<sub>Update-Ubersichten auf YouTube ansehen</sub>
+
+<br />
+<br />
+
+<table>
+<tr>
+<td><img src="../repo-images/Image 1.png" alt="Termix Screenshot 1" width="400" /></td>
+<td><img src="../repo-images/Image 2.png" alt="Termix Screenshot 2" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 3.png" alt="Termix Screenshot 3" width="400" /></td>
+<td><img src="../repo-images/Image 4.png" alt="Termix Screenshot 4" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 5.png" alt="Termix Screenshot 5" width="400" /></td>
+<td><img src="../repo-images/Image 6.png" alt="Termix Screenshot 6" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 7.png" alt="Termix Screenshot 7" width="400" /></td>
+<td><img src="../repo-images/Image 8.png" alt="Termix Screenshot 8" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 9.png" alt="Termix Screenshot 9" width="400" /></td>
+<td><img src="../repo-images/Image 10.png" alt="Termix Screenshot 10" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 11.png" alt="Termix Screenshot 11" width="400" /></td>
+<td><img src="../repo-images/Image 12.png" alt="Termix Screenshot 12" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 13.png" alt="Termix Screenshot 13" width="400" /></td>
+<td><img src="../repo-images/Image 14.png" alt="Termix Screenshot 14" width="400" /></td>
+</tr>
+</table>
+
+<sub>Einige Videos und Bilder konnen veraltet sein oder Funktionen moglicherweise nicht perfekt darstellen.</sub>
+
+</div>
+
+<br />
+
+## Geplante Funktionen
+
+Siehe [Projekte](https://github.com/orgs/Termix-SSH/projects/2) fur alle geplanten Funktionen. Wenn Sie beitragen mochten, siehe [Mitwirken](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md).
+
+<br />
+
+## Sponsoren
+
+<div align="center">
+
+<br />
+
+<a href="https://www.digitalocean.com/">
+  <img src="https://opensource.nyc3.cdn.digitaloceanspaces.com/attribution/assets/SVG/DO_Logo_horizontal_blue.svg" height="40" alt="DigitalOcean" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://crowdin.com/">
+  <img src="https://support.crowdin.com/assets/logos/core-logo/svg/crowdin-core-logo-cDark.svg" height="40" alt="Crowdin" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://www.blacksmith.sh/">
+  <img src="https://cdn.prod.website-files.com/681bfb0c9a4601bc6e288ec4/683ca9e2c5186757092611b8_e8cb22127df4da0811c4120a523722d2_logo-backsmith-wordmark-light.svg" height="40" alt="Blacksmith" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://www.cloudflare.com/">
+  <img src="https://sirv.sirv.com/website/screenshots/cloudflare/cloudflare-logo.png?w=300" height="40" alt="Cloudflare" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://tailscale.com/">
+  <img src="https://drive.google.com/uc?export=view&id=1lIxkJuX6M23bW-2FElhT0rQieTrzaVSL" height="40" alt="Tailscale" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://akamai.com/">
+  <img src="https://upload.wikimedia.org/wikipedia/commons/8/8b/Akamai_logo.svg" height="40" alt="Akamai" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://aws.amazon.com/">
+  <img src="https://upload.wikimedia.org/wikipedia/commons/thumb/9/93/Amazon_Web_Services_Logo.svg/960px-Amazon_Web_Services_Logo.svg.png" height="40" alt="AWS" />
+</a>
+
+</div>
+
+<br />
+
+## Support
+
+Wenn Sie Hilfe benotigen oder eine Funktion fur Termix anfragen mochten, besuchen Sie die [Issues](https://github.com/Termix-SSH/Support/issues)-Seite, melden Sie sich an und klicken Sie auf `New Issue`. Bitte beschreiben Sie Ihr Anliegen so detailliert wie moglich, vorzugsweise auf Englisch. Sie konnen auch dem [Discord](https://discord.gg/jVQGdvHDrf)-Server beitreten und den Support-Kanal besuchen, allerdings konnen die Antwortzeiten dort langer sein.
+
+<br />
+
+## Lizenz
+
+Verteilt unter der Apache License Version 2.0. Siehe `LICENSE` fur weitere Informationen.

readme/README-ES.md

@@ -0,0 +1,357 @@
+<div align="center">
+
+<img src="../public/icon.svg" width="120" height="120" alt="Termix Logo" />
+
+<h1>Termix</h1>
+
+<p>Gestion SSH autoalojada y acceso a escritorio remoto</p>
+
+<p>
+  <a href="../README.md">English</a> ·
+  <a href="README-CN.md">中文</a> ·
+  <a href="README-JA.md">日本語</a> ·
+  <a href="README-KO.md">한국어</a> ·
+  <a href="README-FR.md">Français</a> ·
+  <a href="README-DE.md">Deutsch</a> ·
+  Español ·
+  <a href="README-PT.md">Português</a> ·
+  <a href="README-RU.md">Русский</a> ·
+  <a href="README-AR.md">العربية</a> ·
+  <a href="README-HI.md">हिन्दी</a> ·
+  <a href="README-TR.md">Türkçe</a> ·
+  <a href="README-VI.md">Tiếng Việt</a> ·
+  <a href="README-IT.md">Italiano</a>
+</p>
+
+<p>
+  <img src="https://img.shields.io/github/stars/Termix-SSH/Termix?style=flat&label=Stars&color=F39044&labelColor=1a1a1a" />
+  <img src="https://img.shields.io/github/forks/Termix-SSH/Termix?style=flat&label=Forks&color=F39044&labelColor=1a1a1a" />
+  <img src="https://img.shields.io/github/v/release/Termix-SSH/Termix?style=flat&label=Release&color=F39044&labelColor=1a1a1a&v=1" />
+  <a href="https://discord.gg/jVQGdvHDrf"><img alt="Discord" src="https://img.shields.io/discord/1347374268253470720?color=F39044&labelColor=1a1a1a" /></a>
+</p>
+
+<br />
+
+<img src="../repo-images/Termix Header.png" alt="Termix Banner" width="900" />
+
+<br />
+<br />
+
+<p>
+  <img src="../repo-images/Repo of the Day.png" alt="Repo of the Day Achievement" width="280" />
+  <br />
+  <sub>Logrado el 1 de septiembre de 2025</sub>
+</p>
+
+</div>
+
+<br />
+
+## Descripcion General
+
+Termix es una plataforma de gestion de servidores todo en uno, de codigo abierto, siempre gratuita y autoalojada. Proporciona una solucion multiplataforma para gestionar sus servidores e infraestructura a traves de una interfaz unica e intuitiva. Termix ofrece acceso a terminal SSH, control de escritorio remoto (RDP, VNC, Telnet), capacidades de tuneles SSH, gestion remota de archivos SSH y muchas otras herramientas. Termix es la alternativa perfecta, gratuita y autoalojada a Termius, disponible para todas las plataformas.
+
+<br />
+
+## Caracteristicas
+
+<table>
+<tr>
+<td width="50%" valign="top">
+
+**Acceso a Terminal SSH:**
+Terminal completo con soporte de pantalla dividida (hasta 4 paneles) con un sistema de pestanas similar al navegador. Incluye soporte para personalizar el terminal incluyendo temas comunes de terminal, fuentes y otros componentes.
+
+</td>
+<td width="50%" valign="top">
+
+**Acceso a Escritorio Remoto:**
+Soporte RDP, VNC y Telnet a traves del navegador con personalizacion completa y pantalla dividida.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**Gestion de Tuneles SSH:**
+Cree y gestione tuneles SSH de servidor a servidor con reconexion automatica, monitoreo de estado y reenvio local, remoto o dinamico SOCKS. La configuracion de tuneles de cliente de escritorio a servidor se almacena localmente por instalacion de escritorio; los snapshots de presets C2S opcionales pueden guardarse en el servidor, renombrarse, cargarse o eliminarse para mover una configuracion de tunel local entre clientes.
+
+</td>
+<td width="50%" valign="top">
+
+**Gestor Remoto de Archivos:**
+Gestione archivos directamente en servidores remotos con soporte para visualizar y editar codigo, imagenes, audio y video. Suba, descargue, renombre, elimine y mueva archivos sin problemas con soporte sudo.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**Gestion de Docker:**
+Inicie, detenga, pause, elimine contenedores. Vea estadisticas de contenedores. Controle contenedores usando el terminal docker exec. No fue creado para reemplazar Portainer o Dockge, sino para simplemente gestionar sus contenedores en lugar de crearlos.
+
+</td>
+<td width="50%" valign="top">
+
+**Gestor de Hosts SSH:**
+Guarde, organice y gestione sus conexiones SSH con etiquetas y carpetas, y guarde facilmente informacion de inicio de sesion reutilizable con la capacidad de automatizar el despliegue de claves SSH.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**Estadisticas del Servidor:**
+Vea el uso de CPU, memoria y disco junto con red, tiempo de actividad, informacion del sistema, firewall, monitor de puertos en la mayoria de los servidores basados en Linux.
+
+</td>
+<td width="50%" valign="top">
+
+**Autenticacion de Usuarios:**
+Gestion segura de usuarios con controles de administrador y soporte para OIDC (con control de acceso) y 2FA (TOTP). Vea sesiones activas de usuarios en todas las plataformas y revoque permisos. Vincule sus cuentas OIDC/Locales entre si.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**RBAC:**
+Cree roles y comparta hosts entre usuarios/roles.
+
+</td>
+<td width="50%" valign="top">
+
+**Cifrado de Base de Datos:**
+Backend almacenado como archivos de base de datos SQLite cifrados. Consulte la [documentacion](https://docs.termix.site/security) para mas informacion.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**Grafico de Red:**
+Personalice su Dashboard para visualizar su homelab basado en sus conexiones SSH con soporte de estado.
+
+</td>
+<td width="50%" valign="top">
+
+**Herramientas SSH:**
+Cree fragmentos de comandos reutilizables que se ejecutan con un solo clic. Ejecute un comando simultaneamente en multiples terminales abiertos.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**Pestanas Persistentes:**
+Las sesiones SSH y pestanas permanecen abiertas entre dispositivos/actualizaciones si esta habilitado en el perfil de usuario.
+
+</td>
+<td width="50%" valign="top">
+
+**Idiomas:**
+Soporte integrado para aproximadamente 30 idiomas (gestionado por [Crowdin](https://docs.termix.site/translations)).
+
+</td>
+</tr>
+</table>
+
+<br />
+
+<details>
+<summary><b>Mas caracteristicas</b></summary>
+<br />
+
+- **Dashboard** - Vea la informacion del servidor de un vistazo en su dashboard
+- **Claves API** - Cree claves API con ambito de usuario y fechas de vencimiento para usar en automatizacion/CI
+- **Exportacion/Importacion de Datos** - Exporte e importe hosts SSH, credenciales y datos del gestor de archivos
+- **Configuracion Automatica de SSL** - Generacion y gestion integrada de certificados SSL con redirecciones HTTPS
+- **Interfaz Moderna** - Interfaz limpia compatible con escritorio/movil construida con React, Tailwind CSS y Shadcn. Elija entre muchos temas de UI diferentes, incluyendo claro, oscuro, Dracula, etc. Use rutas URL para abrir cualquier conexion en pantalla completa.
+- **Historial de Comandos** - Autocompletado y visualizacion de comandos SSH ejecutados anteriormente
+- **Conexion Rapida** - Conectese a un servidor sin necesidad de guardar los datos de conexion
+- **Paleta de Comandos** - Pulse dos veces la tecla Shift izquierda para acceder rapidamente a las conexiones SSH con su teclado
+- **SSH Rico en Funciones** - Soporta jump hosts, Warpgate, conexiones basadas en TOTP, SOCKS5, verificacion de clave de host, autocompletado de contrasenas, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, port knocking, etc.
+
+</details>
+
+<br />
+
+## Soporte de Plataformas
+
+<table align="center">
+<tr>
+<th align="center">Plataforma</th>
+<th align="center">Distribucion</th>
+</tr>
+<tr>
+<td align="center"><b>Web</b></td>
+<td>Cualquier navegador moderno (Chrome, Safari, Firefox) · Soporte PWA</td>
+</tr>
+<tr>
+<td align="center"><b>Windows</b> <sub>x64/ia32</sub></td>
+<td>Portable · Instalador MSI · Chocolatey</td>
+</tr>
+<tr>
+<td align="center"><b>Linux</b> <sub>x64/ia32</sub></td>
+<td>Portable · AUR · AppImage · Deb · Flatpak</td>
+</tr>
+<tr>
+<td align="center"><b>macOS</b> <sub>x64/ia32, v12.0+</sub></td>
+<td>Apple App Store · DMG · Homebrew</td>
+</tr>
+<tr>
+<td align="center"><b>iOS/iPadOS</b> <sub>v15.1+</sub></td>
+<td>Apple App Store · IPA</td>
+</tr>
+<tr>
+<td align="center"><b>Android</b> <sub>v7.0+</sub></td>
+<td>Google Play Store · APK</td>
+</tr>
+</table>
+
+<br />
+
+## Instalacion
+
+Visite la [documentacion](https://docs.termix.site/install) de Termix para mas informacion sobre como instalar Termix en todas las plataformas. De lo contrario, vea un archivo Docker Compose de ejemplo aqui (puede omitir guacd y la red si no planea usar funciones de escritorio remoto):
+
+```yaml
+services:
+  termix:
+    image: ghcr.io/lukegus/termix:latest
+    container_name: termix
+    restart: unless-stopped
+    ports:
+      - "8080:8080"
+    volumes:
+      - termix-data:/app/data
+    environment:
+      PORT: "8080"
+    depends_on:
+      - guacd
+    networks:
+      - termix-net
+
+  guacd:
+    image: guacamole/guacd:1.6.0
+    container_name: guacd
+    restart: unless-stopped
+    ports:
+      - "4822:4822"
+    networks:
+      - termix-net
+
+volumes:
+  termix-data:
+    driver: local
+
+networks:
+  termix-net:
+    driver: bridge
+```
+
+<br />
+
+## Capturas de Pantalla
+
+<div align="center">
+
+<br />
+
+[![YouTube](../repo-images/YouTube.png)](https://www.youtube.com/@TermixSSH/videos)
+
+<sub>Ver resúmenes de actualizaciones en YouTube</sub>
+
+<br />
+<br />
+
+<table>
+<tr>
+<td><img src="../repo-images/Image 1.png" alt="Termix Screenshot 1" width="400" /></td>
+<td><img src="../repo-images/Image 2.png" alt="Termix Screenshot 2" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 3.png" alt="Termix Screenshot 3" width="400" /></td>
+<td><img src="../repo-images/Image 4.png" alt="Termix Screenshot 4" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 5.png" alt="Termix Screenshot 5" width="400" /></td>
+<td><img src="../repo-images/Image 6.png" alt="Termix Screenshot 6" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 7.png" alt="Termix Screenshot 7" width="400" /></td>
+<td><img src="../repo-images/Image 8.png" alt="Termix Screenshot 8" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 9.png" alt="Termix Screenshot 9" width="400" /></td>
+<td><img src="../repo-images/Image 10.png" alt="Termix Screenshot 10" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 11.png" alt="Termix Screenshot 11" width="400" /></td>
+<td><img src="../repo-images/Image 12.png" alt="Termix Screenshot 12" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 13.png" alt="Termix Screenshot 13" width="400" /></td>
+<td><img src="../repo-images/Image 14.png" alt="Termix Screenshot 14" width="400" /></td>
+</tr>
+</table>
+
+<sub>Algunos videos e imagenes pueden estar desactualizados o no mostrar perfectamente las caracteristicas.</sub>
+
+</div>
+
+<br />
+
+## Caracteristicas Planeadas
+
+Consulte [Proyectos](https://github.com/orgs/Termix-SSH/projects/2) para todas las caracteristicas planeadas. Si desea contribuir, consulte [Contribuir](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md).
+
+<br />
+
+## Patrocinadores
+
+<div align="center">
+
+<br />
+
+<a href="https://www.digitalocean.com/">
+  <img src="https://opensource.nyc3.cdn.digitaloceanspaces.com/attribution/assets/SVG/DO_Logo_horizontal_blue.svg" height="40" alt="DigitalOcean" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://crowdin.com/">
+  <img src="https://support.crowdin.com/assets/logos/core-logo/svg/crowdin-core-logo-cDark.svg" height="40" alt="Crowdin" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://www.blacksmith.sh/">
+  <img src="https://cdn.prod.website-files.com/681bfb0c9a4601bc6e288ec4/683ca9e2c5186757092611b8_e8cb22127df4da0811c4120a523722d2_logo-backsmith-wordmark-light.svg" height="40" alt="Blacksmith" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://www.cloudflare.com/">
+  <img src="https://sirv.sirv.com/website/screenshots/cloudflare/cloudflare-logo.png?w=300" height="40" alt="Cloudflare" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://tailscale.com/">
+  <img src="https://drive.google.com/uc?export=view&id=1lIxkJuX6M23bW-2FElhT0rQieTrzaVSL" height="40" alt="Tailscale" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://akamai.com/">
+  <img src="https://upload.wikimedia.org/wikipedia/commons/8/8b/Akamai_logo.svg" height="40" alt="Akamai" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://aws.amazon.com/">
+  <img src="https://upload.wikimedia.org/wikipedia/commons/thumb/9/93/Amazon_Web_Services_Logo.svg/960px-Amazon_Web_Services_Logo.svg.png" height="40" alt="AWS" />
+</a>
+
+</div>
+
+<br />
+
+## Soporte
+
+Si necesita ayuda o desea solicitar una funcion para Termix, visite la pagina de [Issues](https://github.com/Termix-SSH/Support/issues), inicie sesion y pulse `New Issue`. Por favor, sea lo mas detallado posible en su reporte, preferiblemente escrito en ingles. Tambien puede unirse al servidor de [Discord](https://discord.gg/jVQGdvHDrf) y visitar el canal de soporte, sin embargo, los tiempos de respuesta pueden ser mas largos.
+
+<br />
+
+## Licencia
+
+Distribuido bajo la Licencia Apache Version 2.0. Consulte `LICENSE` para mas informacion.

readme/README-FR.md

@@ -0,0 +1,357 @@
+<div align="center">
+
+<img src="../public/icon.svg" width="120" height="120" alt="Termix Logo" />
+
+<h1>Termix</h1>
+
+<p>Gestion SSH auto-hebergee et acces bureau a distance</p>
+
+<p>
+  <a href="../README.md">English</a> ·
+  <a href="README-CN.md">中文</a> ·
+  <a href="README-JA.md">日本語</a> ·
+  <a href="README-KO.md">한국어</a> ·
+  Français ·
+  <a href="README-DE.md">Deutsch</a> ·
+  <a href="README-ES.md">Español</a> ·
+  <a href="README-PT.md">Português</a> ·
+  <a href="README-RU.md">Русский</a> ·
+  <a href="README-AR.md">العربية</a> ·
+  <a href="README-HI.md">हिन्दी</a> ·
+  <a href="README-TR.md">Türkçe</a> ·
+  <a href="README-VI.md">Tiếng Việt</a> ·
+  <a href="README-IT.md">Italiano</a>
+</p>
+
+<p>
+  <img src="https://img.shields.io/github/stars/Termix-SSH/Termix?style=flat&label=Stars&color=F39044&labelColor=1a1a1a" />
+  <img src="https://img.shields.io/github/forks/Termix-SSH/Termix?style=flat&label=Forks&color=F39044&labelColor=1a1a1a" />
+  <img src="https://img.shields.io/github/v/release/Termix-SSH/Termix?style=flat&label=Release&color=F39044&labelColor=1a1a1a&v=1" />
+  <a href="https://discord.gg/jVQGdvHDrf"><img alt="Discord" src="https://img.shields.io/discord/1347374268253470720?color=F39044&labelColor=1a1a1a" /></a>
+</p>
+
+<br />
+
+<img src="../repo-images/Termix Header.png" alt="Termix Banner" width="900" />
+
+<br />
+<br />
+
+<p>
+  <img src="../repo-images/Repo of the Day.png" alt="Repo of the Day Achievement" width="280" />
+  <br />
+  <sub>Obtenu le 1er septembre 2025</sub>
+</p>
+
+</div>
+
+<br />
+
+## Presentation
+
+Termix est une plateforme de gestion de serveurs tout-en-un, open source, a jamais gratuite et auto-hebergee. Elle fournit une solution multiplateforme pour gerer vos serveurs et votre infrastructure a travers une interface unique et intuitive. Termix offre un acces terminal SSH, le controle de bureau a distance (RDP, VNC, Telnet), des capacites de tunneling SSH, la gestion de fichiers SSH a distance et de nombreux autres outils. Termix est l'alternative parfaite, gratuite et auto-hebergee a Termius, disponible sur toutes les plateformes.
+
+<br />
+
+## Fonctionnalites
+
+<table>
+<tr>
+<td width="50%" valign="top">
+
+**Acces terminal SSH:**
+Terminal complet avec support d'ecran partage (jusqu'a 4 panneaux) et un systeme d'onglets inspire des navigateurs. Inclut la personnalisation du terminal avec des themes courants, des polices et d'autres composants.
+
+</td>
+<td width="50%" valign="top">
+
+**Acces Bureau a Distance:**
+Support RDP, VNC et Telnet via navigateur avec personnalisation complete et ecran partage.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**Gestion des tunnels SSH:**
+Creez et gerez des tunnels SSH de serveur a serveur avec reconnexion automatique, surveillance de l'etat et transfert local, distant ou SOCKS dynamique. Les parametres de tunnel client-bureau-vers-serveur sont stockes localement par installation bureau ; des instantanes de prereglages C2S optionnels peuvent etre sauvegardes sur le serveur, renommes, charges ou supprimes pour deplacer une configuration de tunnel locale entre clients.
+
+</td>
+<td width="50%" valign="top">
+
+**Gestionnaire de fichiers distant:**
+Gerez les fichiers directement sur les serveurs distants avec support de la visualisation et de l'edition de code, images, audio et video. Televersez, telechargez, renommez, supprimez et deplacez des fichiers de maniere fluide avec support sudo.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**Gestion Docker:**
+Demarrez, arretez, mettez en pause, supprimez des conteneurs. Consultez les statistiques des conteneurs. Controlez les conteneurs via le terminal docker exec. Non concu pour remplacer Portainer ou Dockge, mais plutot pour gerer simplement vos conteneurs plutot que de les creer.
+
+</td>
+<td width="50%" valign="top">
+
+**Gestionnaire d'hotes SSH:**
+Enregistrez, organisez et gerez vos connexions SSH avec des tags et des dossiers, et sauvegardez facilement les informations de connexion reutilisables tout en automatisant le deploiement des cles SSH.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**Statistiques serveur:**
+Visualisez l'utilisation du CPU, de la memoire et du disque ainsi que le reseau, le temps de fonctionnement, les informations systeme, le pare-feu et le moniteur de ports sur la plupart des serveurs Linux.
+
+</td>
+<td width="50%" valign="top">
+
+**Authentification des utilisateurs:**
+Gestion securisee des utilisateurs avec controles administrateur et support OIDC (avec controle d'acces) et 2FA (TOTP). Visualisez les sessions utilisateur actives sur toutes les plateformes et revoquez les permissions. Liez vos comptes OIDC/locaux ensemble.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**RBAC:**
+Creez des roles et partagez des hotes entre utilisateurs/roles.
+
+</td>
+<td width="50%" valign="top">
+
+**Chiffrement de la base de donnees:**
+Le backend est stocke sous forme de fichiers de base de donnees SQLite chiffres. Consultez la [documentation](https://docs.termix.site/security) pour plus de details.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**Graphe reseau:**
+Personnalisez votre tableau de bord pour visualiser votre homelab base sur vos connexions SSH avec support des statuts.
+
+</td>
+<td width="50%" valign="top">
+
+**Outils SSH:**
+Creez des extraits de commandes reutilisables executables en un seul clic. Executez une commande simultanement sur plusieurs terminaux ouverts.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**Onglets Persistants:**
+Les sessions SSH et les onglets restent ouverts sur tous les appareils/actualisations si active dans le profil utilisateur.
+
+</td>
+<td width="50%" valign="top">
+
+**Langues:**
+Support integre d'environ 30 langues (gere par [Crowdin](https://docs.termix.site/translations)).
+
+</td>
+</tr>
+</table>
+
+<br />
+
+<details>
+<summary><b>Plus de fonctionnalites</b></summary>
+<br />
+
+- **Tableau de bord** - Consultez les informations de vos serveurs en un coup d'oeil depuis votre tableau de bord
+- **Cles API** - Creez des cles API a portee utilisateur avec des dates d'expiration pour une utilisation en automatisation/CI
+- **Export/Import de donnees** - Exportez et importez les hotes SSH, les identifiants et les donnees du gestionnaire de fichiers
+- **Configuration SSL automatique** - Generation et gestion integrees de certificats SSL avec redirections HTTPS
+- **Interface moderne** - Interface epuree compatible desktop/mobile construite avec React, Tailwind CSS et Shadcn. Choisissez parmi de nombreux themes d'interface utilisateur, notamment clair, sombre, Dracula, etc. Utilisez les routes URL pour ouvrir n'importe quelle connexion en plein ecran.
+- **Historique des commandes** - Auto-completion et consultation des commandes SSH precedemment executees
+- **Connexion rapide** - Connectez-vous a un serveur sans avoir a sauvegarder les donnees de connexion
+- **Palette de commandes** - Appuyez deux fois sur Shift gauche pour acceder rapidement aux connexions SSH avec votre clavier
+- **SSH riche en fonctionnalites** - Support des hotes de rebond, Warpgate, connexions basees sur TOTP, SOCKS5, verification des cles d'hote, remplissage automatique des mots de passe, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, port knocking, etc.
+
+</details>
+
+<br />
+
+## Support des plateformes
+
+<table align="center">
+<tr>
+<th align="center">Plateforme</th>
+<th align="center">Distribution</th>
+</tr>
+<tr>
+<td align="center"><b>Web</b></td>
+<td>Tout navigateur moderne (Chrome, Safari, Firefox) · Support PWA</td>
+</tr>
+<tr>
+<td align="center"><b>Windows</b> <sub>x64/ia32</sub></td>
+<td>Portable · MSI Installateur · Chocolatey</td>
+</tr>
+<tr>
+<td align="center"><b>Linux</b> <sub>x64/ia32</sub></td>
+<td>Portable · AUR · AppImage · Deb · Flatpak</td>
+</tr>
+<tr>
+<td align="center"><b>macOS</b> <sub>x64/ia32, v12.0+</sub></td>
+<td>Apple App Store · DMG · Homebrew</td>
+</tr>
+<tr>
+<td align="center"><b>iOS/iPadOS</b> <sub>v15.1+</sub></td>
+<td>Apple App Store · IPA</td>
+</tr>
+<tr>
+<td align="center"><b>Android</b> <sub>v7.0+</sub></td>
+<td>Google Play Store · APK</td>
+</tr>
+</table>
+
+<br />
+
+## Installation
+
+Visitez la [documentation](https://docs.termix.site/install) de Termix pour plus d'informations sur l'installation de Termix sur toutes les plateformes. Voici un exemple de fichier Docker Compose (vous pouvez omettre guacd et le reseau si vous ne prevoyez pas d'utiliser les fonctionnalites de bureau a distance) :
+
+```yaml
+services:
+  termix:
+    image: ghcr.io/lukegus/termix:latest
+    container_name: termix
+    restart: unless-stopped
+    ports:
+      - "8080:8080"
+    volumes:
+      - termix-data:/app/data
+    environment:
+      PORT: "8080"
+    depends_on:
+      - guacd
+    networks:
+      - termix-net
+
+  guacd:
+    image: guacamole/guacd:1.6.0
+    container_name: guacd
+    restart: unless-stopped
+    ports:
+      - "4822:4822"
+    networks:
+      - termix-net
+
+volumes:
+  termix-data:
+    driver: local
+
+networks:
+  termix-net:
+    driver: bridge
+```
+
+<br />
+
+## Captures d'ecran
+
+<div align="center">
+
+<br />
+
+[![YouTube](../repo-images/YouTube.png)](https://www.youtube.com/@TermixSSH/videos)
+
+<sub>Regarder les aperçus des mises a jour sur YouTube</sub>
+
+<br />
+<br />
+
+<table>
+<tr>
+<td><img src="../repo-images/Image 1.png" alt="Termix Screenshot 1" width="400" /></td>
+<td><img src="../repo-images/Image 2.png" alt="Termix Screenshot 2" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 3.png" alt="Termix Screenshot 3" width="400" /></td>
+<td><img src="../repo-images/Image 4.png" alt="Termix Screenshot 4" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 5.png" alt="Termix Screenshot 5" width="400" /></td>
+<td><img src="../repo-images/Image 6.png" alt="Termix Screenshot 6" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 7.png" alt="Termix Screenshot 7" width="400" /></td>
+<td><img src="../repo-images/Image 8.png" alt="Termix Screenshot 8" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 9.png" alt="Termix Screenshot 9" width="400" /></td>
+<td><img src="../repo-images/Image 10.png" alt="Termix Screenshot 10" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 11.png" alt="Termix Screenshot 11" width="400" /></td>
+<td><img src="../repo-images/Image 12.png" alt="Termix Screenshot 12" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 13.png" alt="Termix Screenshot 13" width="400" /></td>
+<td><img src="../repo-images/Image 14.png" alt="Termix Screenshot 14" width="400" /></td>
+</tr>
+</table>
+
+<sub>Certaines videos et images peuvent etre obsoletes ou ne pas presenter parfaitement les fonctionnalites.</sub>
+
+</div>
+
+<br />
+
+## Fonctionnalites prevues
+
+Consultez les [Projects](https://github.com/orgs/Termix-SSH/projects/2) pour toutes les fonctionnalites prevues. Si vous souhaitez contribuer, consultez [Contributing](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md).
+
+<br />
+
+## Sponsors
+
+<div align="center">
+
+<br />
+
+<a href="https://www.digitalocean.com/">
+  <img src="https://opensource.nyc3.cdn.digitaloceanspaces.com/attribution/assets/SVG/DO_Logo_horizontal_blue.svg" height="40" alt="DigitalOcean" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://crowdin.com/">
+  <img src="https://support.crowdin.com/assets/logos/core-logo/svg/crowdin-core-logo-cDark.svg" height="40" alt="Crowdin" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://www.blacksmith.sh/">
+  <img src="https://cdn.prod.website-files.com/681bfb0c9a4601bc6e288ec4/683ca9e2c5186757092611b8_e8cb22127df4da0811c4120a523722d2_logo-backsmith-wordmark-light.svg" height="40" alt="Blacksmith" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://www.cloudflare.com/">
+  <img src="https://sirv.sirv.com/website/screenshots/cloudflare/cloudflare-logo.png?w=300" height="40" alt="Cloudflare" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://tailscale.com/">
+  <img src="https://drive.google.com/uc?export=view&id=1lIxkJuX6M23bW-2FElhT0rQieTrzaVSL" height="40" alt="Tailscale" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://akamai.com/">
+  <img src="https://upload.wikimedia.org/wikipedia/commons/8/8b/Akamai_logo.svg" height="40" alt="Akamai" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://aws.amazon.com/">
+  <img src="https://upload.wikimedia.org/wikipedia/commons/thumb/9/93/Amazon_Web_Services_Logo.svg/960px-Amazon_Web_Services_Logo.svg.png" height="40" alt="AWS" />
+</a>
+
+</div>
+
+<br />
+
+## Support
+
+Si vous avez besoin d'aide ou souhaitez demander une fonctionnalite pour Termix, visitez la page [Issues](https://github.com/Termix-SSH/Support/issues), connectez-vous et appuyez sur `New Issue`. Veuillez etre aussi detaille que possible dans votre issue, de preference redigee en anglais. Vous pouvez egalement rejoindre le serveur [Discord](https://discord.gg/jVQGdvHDrf) et visiter le canal de support, cependant les temps de reponse peuvent etre plus longs.
+
+<br />
+
+## Licence
+
+Distribue sous la licence Apache Version 2.0. Consultez `LICENSE` pour plus d'informations.

readme/README-HI.md

@@ -0,0 +1,357 @@
+<div align="center">
+
+<img src="../public/icon.svg" width="120" height="120" alt="Termix Logo" />
+
+<h1>Termix</h1>
+
+<p>स्व-होस्टेड SSH प्रबंधन और रिमोट डेस्कटॉप एक्सेस</p>
+
+<p>
+  <a href="../README.md">English</a> ·
+  <a href="README-CN.md">中文</a> ·
+  <a href="README-JA.md">日本語</a> ·
+  <a href="README-KO.md">한국어</a> ·
+  <a href="README-FR.md">Français</a> ·
+  <a href="README-DE.md">Deutsch</a> ·
+  <a href="README-ES.md">Español</a> ·
+  <a href="README-PT.md">Português</a> ·
+  <a href="README-RU.md">Русский</a> ·
+  <a href="README-AR.md">العربية</a> ·
+  हिन्दी ·
+  <a href="README-TR.md">Türkçe</a> ·
+  <a href="README-VI.md">Tiếng Việt</a> ·
+  <a href="README-IT.md">Italiano</a>
+</p>
+
+<p>
+  <img src="https://img.shields.io/github/stars/Termix-SSH/Termix?style=flat&label=Stars&color=F39044&labelColor=1a1a1a" />
+  <img src="https://img.shields.io/github/forks/Termix-SSH/Termix?style=flat&label=Forks&color=F39044&labelColor=1a1a1a" />
+  <img src="https://img.shields.io/github/v/release/Termix-SSH/Termix?style=flat&label=Release&color=F39044&labelColor=1a1a1a&v=1" />
+  <a href="https://discord.gg/jVQGdvHDrf"><img alt="Discord" src="https://img.shields.io/discord/1347374268253470720?color=F39044&labelColor=1a1a1a" /></a>
+</p>
+
+<br />
+
+<img src="../repo-images/Termix Header.png" alt="Termix Banner" width="900" />
+
+<br />
+<br />
+
+<p>
+  <img src="../repo-images/Repo of the Day.png" alt="Repo of the Day Achievement" width="280" />
+  <br />
+  <sub>1 सितंबर, 2025 को प्राप्त</sub>
+</p>
+
+</div>
+
+<br />
+
+## अवलोकन
+
+Termix एक ओपन-सोर्स, हमेशा के लिए मुफ़्त, सेल्फ-होस्टेड ऑल-इन-वन सर्वर प्रबंधन प्लेटफ़ॉर्म है। यह एक एकल, सहज इंटरफ़ेस के माध्यम से आपके सर्वर और बुनियादी ढाँचे के प्रबंधन के लिए एक मल्टी-प्लेटफ़ॉर्म समाधान प्रदान करता है। Termix SSH टर्मिनल एक्सेस, रिमोट डेस्कटॉप कंट्रोल (RDP, VNC, Telnet), SSH टनलिंग क्षमताएँ, रिमोट SSH फ़ाइल प्रबंधन, और कई अन्य उपकरण प्रदान करता है। Termix सभी प्लेटफ़ॉर्म पर उपलब्ध Termius का सही मुफ़्त और सेल्फ-होस्टेड विकल्प है।
+
+<br />
+
+## विशेषताएँ
+
+<table>
+<tr>
+<td width="50%" valign="top">
+
+**SSH टर्मिनल एक्सेस:**
+ब्राउज़र जैसी टैब प्रणाली के साथ स्प्लिट-स्क्रीन सपोर्ट (4 पैनल तक) वाला पूर्ण-विशेषता वाला टर्मिनल। इसमें लोकप्रिय टर्मिनल थीम, फ़ॉन्ट और अन्य कंपोनेंट सहित टर्मिनल को कस्टमाइज़ करने का सपोर्ट शामिल है।
+
+</td>
+<td width="50%" valign="top">
+
+**रिमोट डेस्कटॉप एक्सेस:**
+ब्राउज़र पर RDP, VNC और Telnet सपोर्ट, पूर्ण कस्टमाइज़ेशन और स्प्लिट स्क्रीन के साथ।
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**SSH टनल प्रबंधन:**
+ऑटोमैटिक रीकनेक्शन, हेल्थ मॉनिटरिंग और लोकल, रिमोट या डायनेमिक SOCKS फॉरवर्डिंग के साथ सर्वर-टु-सर्वर SSH टनल बनाएँ और प्रबंधित करें। डेस्कटॉप क्लाइंट-टु-सर्वर टनल सेटिंग्स प्रत्येक डेस्कटॉप इंस्टॉल में स्थानीय रूप से संग्रहीत होती हैं; वैकल्पिक C2S प्रीसेट स्नैपशॉट सर्वर पर सेव, रीनेम, लोड या डिलीट किए जा सकते हैं।
+
+</td>
+<td width="50%" valign="top">
+
+**रिमोट फ़ाइल मैनेजर:**
+कोड, इमेज, ऑडियो और वीडियो देखने और संपादित करने के सपोर्ट के साथ रिमोट सर्वर पर सीधे फ़ाइलें प्रबंधित करें। sudo सपोर्ट के साथ फ़ाइलें अपलोड, डाउनलोड, रीनेम, डिलीट और मूव करें।
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**Docker प्रबंधन:**
+कंटेनर शुरू, बंद, पॉज़, हटाएँ। कंटेनर स्टैट्स देखें। docker exec टर्मिनल का उपयोग करके कंटेनर को नियंत्रित करें। इसे Portainer या Dockge की जगह लेने के लिए नहीं बनाया गया बल्कि कंटेनर बनाने की तुलना में उन्हें सरलता से प्रबंधित करने के लिए बनाया गया है।
+
+</td>
+<td width="50%" valign="top">
+
+**SSH होस्ट मैनेजर:**
+टैग और फ़ोल्डर के साथ अपने SSH कनेक्शन सहेजें, व्यवस्थित करें और प्रबंधित करें, और SSH कुंजियों की तैनाती को स्वचालित करने की क्षमता के साथ पुन: उपयोग योग्य लॉगिन जानकारी आसानी से सहेजें।
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**सर्वर आँकड़े:**
+अधिकांश Linux आधारित सर्वर पर नेटवर्क, अपटाइम, सिस्टम जानकारी, फ़ायरवॉल, पोर्ट मॉनिटर के साथ CPU, मेमोरी और डिस्क उपयोग देखें।
+
+</td>
+<td width="50%" valign="top">
+
+**उपयोगकर्ता प्रमाणीकरण:**
+व्यवस्थापक नियंत्रण और OIDC (एक्सेस कंट्रोल के साथ) और 2FA (TOTP) सपोर्ट के साथ सुरक्षित उपयोगकर्ता प्रबंधन। सभी प्लेटफ़ॉर्म पर सक्रिय उपयोगकर्ता सत्र देखें और अनुमतियाँ रद्द करें। अपने OIDC/स्थानीय खातों को एक साथ जोड़ें।
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**RBAC:**
+भूमिकाएँ बनाएँ और उपयोगकर्ताओं/भूमिकाओं में होस्ट साझा करें।
+
+</td>
+<td width="50%" valign="top">
+
+**डेटाबेस एन्क्रिप्शन:**
+बैकएंड एन्क्रिप्टेड SQLite डेटाबेस फ़ाइलों के रूप में संग्रहीत। अधिक जानकारी के लिए [डॉक्स](https://docs.termix.site/security) देखें।
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**नेटवर्क ग्राफ़:**
+स्थिति सपोर्ट के साथ अपने SSH कनेक्शन के आधार पर अपने होमलैब को विज़ुअलाइज़ करने के लिए अपना डैशबोर्ड कस्टमाइज़ करें।
+
+</td>
+<td width="50%" valign="top">
+
+**SSH टूल्स:**
+एक क्लिक से निष्पादित होने वाले पुन: उपयोग योग्य कमांड स्निपेट बनाएँ। एक साथ कई खुले टर्मिनलों में एक कमांड चलाएँ।
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**परसिस्टेंट टैब:**
+उपयोगकर्ता प्रोफ़ाइल में सक्षम होने पर SSH सेशन और टैब डिवाइस/रीफ्रेश के पार खुले रहते हैं।
+
+</td>
+<td width="50%" valign="top">
+
+**भाषाएँ:**
+लगभग 30 भाषाओं का बिल्ट-इन सपोर्ट ([Crowdin](https://docs.termix.site/translations) द्वारा प्रबंधित)।
+
+</td>
+</tr>
+</table>
+
+<br />
+
+<details>
+<summary><b>अधिक विशेषताएँ</b></summary>
+<br />
+
+- **डैशबोर्ड** - अपने डैशबोर्ड पर एक नज़र में सर्वर की जानकारी देखें
+- **API कुंजियाँ** - ऑटोमेशन/CI के लिए उपयोग हेतु समाप्ति तिथियों के साथ उपयोगकर्ता-स्कोप्ड API कुंजियाँ बनाएँ
+- **डेटा एक्सपोर्ट/इम्पोर्ट** - SSH होस्ट, क्रेडेंशियल और फ़ाइल मैनेजर डेटा एक्सपोर्ट और इम्पोर्ट करें
+- **स्वचालित SSL सेटअप** - HTTPS रीडायरेक्ट के साथ बिल्ट-इन SSL सर्टिफ़िकेट जनरेशन और प्रबंधन
+- **आधुनिक UI** - React, Tailwind CSS, और Shadcn से बना साफ़ डेस्कटॉप/मोबाइल-फ़्रेंडली इंटरफ़ेस। लाइट, डार्क, ड्रैकुला आदि सहित कई अलग-अलग UI थीम के बीच चुनें। किसी भी कनेक्शन को फ़ुल-स्क्रीन में खोलने के लिए URL रूट का उपयोग करें।
+- **कमांड इतिहास** - पहले चलाए गए SSH कमांड का ऑटो-कम्प्लीट और दृश्य
+- **क्विक कनेक्ट** - कनेक्शन डेटा सहेजे बिना सर्वर से कनेक्ट करें
+- **कमांड पैलेट** - अपने कीबोर्ड से SSH कनेक्शन तक त्वरित पहुँच के लिए बाएँ Shift को दो बार टैप करें
+- **SSH सुविधाओं से भरपूर** - जम्प होस्ट, Warpgate, TOTP आधारित कनेक्शन, SOCKS5, होस्ट की वेरिफ़िकेशन, पासवर्ड ऑटोफ़िल, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, पोर्ट नॉकिंग आदि का सपोर्ट
+
+</details>
+
+<br />
+
+## प्लेटफ़ॉर्म सपोर्ट
+
+<table align="center">
+<tr>
+<th align="center">प्लेटफ़ॉर्म</th>
+<th align="center">वितरण</th>
+</tr>
+<tr>
+<td align="center"><b>Web</b></td>
+<td>कोई भी आधुनिक ब्राउज़र (Chrome, Safari, Firefox) · PWA सपोर्ट</td>
+</tr>
+<tr>
+<td align="center"><b>Windows</b> <sub>x64/ia32</sub></td>
+<td>पोर्टेबल · MSI इंस्टॉलर · Chocolatey</td>
+</tr>
+<tr>
+<td align="center"><b>Linux</b> <sub>x64/ia32</sub></td>
+<td>पोर्टेबल · AUR · AppImage · Deb · Flatpak</td>
+</tr>
+<tr>
+<td align="center"><b>macOS</b> <sub>x64/ia32, v12.0+</sub></td>
+<td>Apple App Store · DMG · Homebrew</td>
+</tr>
+<tr>
+<td align="center"><b>iOS/iPadOS</b> <sub>v15.1+</sub></td>
+<td>Apple App Store · IPA</td>
+</tr>
+<tr>
+<td align="center"><b>Android</b> <sub>v7.0+</sub></td>
+<td>Google Play Store · APK</td>
+</tr>
+</table>
+
+<br />
+
+## इंस्टॉलेशन
+
+सभी प्लेटफ़ॉर्म पर Termix इंस्टॉल करने के बारे में अधिक जानकारी के लिए Termix [डॉक्स](https://docs.termix.site/install) पर जाएँ। यहाँ एक नमूना Docker Compose फ़ाइल देखें (यदि आप रिमोट डेस्कटॉप सुविधाओं का उपयोग करने की योजना नहीं बना रहे हैं तो आप guacd और नेटवर्क को हटा सकते हैं):
+
+```yaml
+services:
+  termix:
+    image: ghcr.io/lukegus/termix:latest
+    container_name: termix
+    restart: unless-stopped
+    ports:
+      - "8080:8080"
+    volumes:
+      - termix-data:/app/data
+    environment:
+      PORT: "8080"
+    depends_on:
+      - guacd
+    networks:
+      - termix-net
+
+  guacd:
+    image: guacamole/guacd:1.6.0
+    container_name: guacd
+    restart: unless-stopped
+    ports:
+      - "4822:4822"
+    networks:
+      - termix-net
+
+volumes:
+  termix-data:
+    driver: local
+
+networks:
+  termix-net:
+    driver: bridge
+```
+
+<br />
+
+## स्क्रीनशॉट
+
+<div align="center">
+
+<br />
+
+[![YouTube](../repo-images/YouTube.png)](https://www.youtube.com/@TermixSSH/videos)
+
+<sub>YouTube पर अपडेट की समीक्षाएँ देखें</sub>
+
+<br />
+<br />
+
+<table>
+<tr>
+<td><img src="../repo-images/Image 1.png" alt="Termix Screenshot 1" width="400" /></td>
+<td><img src="../repo-images/Image 2.png" alt="Termix Screenshot 2" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 3.png" alt="Termix Screenshot 3" width="400" /></td>
+<td><img src="../repo-images/Image 4.png" alt="Termix Screenshot 4" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 5.png" alt="Termix Screenshot 5" width="400" /></td>
+<td><img src="../repo-images/Image 6.png" alt="Termix Screenshot 6" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 7.png" alt="Termix Screenshot 7" width="400" /></td>
+<td><img src="../repo-images/Image 8.png" alt="Termix Screenshot 8" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 9.png" alt="Termix Screenshot 9" width="400" /></td>
+<td><img src="../repo-images/Image 10.png" alt="Termix Screenshot 10" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 11.png" alt="Termix Screenshot 11" width="400" /></td>
+<td><img src="../repo-images/Image 12.png" alt="Termix Screenshot 12" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 13.png" alt="Termix Screenshot 13" width="400" /></td>
+<td><img src="../repo-images/Image 14.png" alt="Termix Screenshot 14" width="400" /></td>
+</tr>
+</table>
+
+<sub>कुछ वीडियो और छवियाँ पुरानी हो सकती हैं या विशेषताओं को पूरी तरह से प्रदर्शित नहीं कर सकती हैं।</sub>
+
+</div>
+
+<br />
+
+## नियोजित विशेषताएँ
+
+सभी नियोजित विशेषताओं के लिए [प्रोजेक्ट्स](https://github.com/orgs/Termix-SSH/projects/2) देखें। यदि आप योगदान देना चाहते हैं, तो [योगदान](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md) देखें।
+
+<br />
+
+## प्रायोजक
+
+<div align="center">
+
+<br />
+
+<a href="https://www.digitalocean.com/">
+  <img src="https://opensource.nyc3.cdn.digitaloceanspaces.com/attribution/assets/SVG/DO_Logo_horizontal_blue.svg" height="40" alt="DigitalOcean" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://crowdin.com/">
+  <img src="https://support.crowdin.com/assets/logos/core-logo/svg/crowdin-core-logo-cDark.svg" height="40" alt="Crowdin" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://www.blacksmith.sh/">
+  <img src="https://cdn.prod.website-files.com/681bfb0c9a4601bc6e288ec4/683ca9e2c5186757092611b8_e8cb22127df4da0811c4120a523722d2_logo-backsmith-wordmark-light.svg" height="40" alt="Blacksmith" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://www.cloudflare.com/">
+  <img src="https://sirv.sirv.com/website/screenshots/cloudflare/cloudflare-logo.png?w=300" height="40" alt="Cloudflare" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://tailscale.com/">
+  <img src="https://drive.google.com/uc?export=view&id=1lIxkJuX6M23bW-2FElhT0rQieTrzaVSL" height="40" alt="Tailscale" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://akamai.com/">
+  <img src="https://upload.wikimedia.org/wikipedia/commons/8/8b/Akamai_logo.svg" height="40" alt="Akamai" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://aws.amazon.com/">
+  <img src="https://upload.wikimedia.org/wikipedia/commons/thumb/9/93/Amazon_Web_Services_Logo.svg/960px-Amazon_Web_Services_Logo.svg.png" height="40" alt="AWS" />
+</a>
+
+</div>
+
+<br />
+
+## सहायता
+
+यदि आपको सहायता चाहिए या Termix के लिए किसी विशेषता का अनुरोध करना चाहते हैं, तो [इश्यूज़](https://github.com/Termix-SSH/Support/issues) पेज पर जाएँ, लॉग इन करें, और `New Issue` दबाएँ। कृपया अपने इश्यू में यथासंभव विस्तृत विवरण दें, अधिमानतः अंग्रेज़ी में लिखें। आप [Discord](https://discord.gg/jVQGdvHDrf) सर्वर में भी शामिल हो सकते हैं और सहायता चैनल पर जा सकते हैं, हालाँकि, प्रतिक्रिया समय अधिक हो सकता है।
+
+<br />
+
+## लाइसेंस
+
+Apache License Version 2.0 के तहत वितरित। अधिक जानकारी के लिए `LICENSE` देखें।

readme/README-IT.md

@@ -0,0 +1,357 @@
+<div align="center">
+
+<img src="../public/icon.svg" width="120" height="120" alt="Termix Logo" />
+
+<h1>Termix</h1>
+
+<p>Gestione SSH self-hosted e accesso al desktop remoto</p>
+
+<p>
+  <a href="../README.md">English</a> ·
+  <a href="README-CN.md">中文</a> ·
+  <a href="README-JA.md">日本語</a> ·
+  <a href="README-KO.md">한국어</a> ·
+  <a href="README-FR.md">Français</a> ·
+  <a href="README-DE.md">Deutsch</a> ·
+  <a href="README-ES.md">Español</a> ·
+  <a href="README-PT.md">Português</a> ·
+  <a href="README-RU.md">Русский</a> ·
+  <a href="README-AR.md">العربية</a> ·
+  <a href="README-HI.md">हिन्दी</a> ·
+  <a href="README-TR.md">Türkçe</a> ·
+  <a href="README-VI.md">Tiếng Việt</a> ·
+  Italiano
+</p>
+
+<p>
+  <img src="https://img.shields.io/github/stars/Termix-SSH/Termix?style=flat&label=Stars&color=F39044&labelColor=1a1a1a" />
+  <img src="https://img.shields.io/github/forks/Termix-SSH/Termix?style=flat&label=Forks&color=F39044&labelColor=1a1a1a" />
+  <img src="https://img.shields.io/github/v/release/Termix-SSH/Termix?style=flat&label=Release&color=F39044&labelColor=1a1a1a&v=1" />
+  <a href="https://discord.gg/jVQGdvHDrf"><img alt="Discord" src="https://img.shields.io/discord/1347374268253470720?color=F39044&labelColor=1a1a1a" /></a>
+</p>
+
+<br />
+
+<img src="../repo-images/Termix Header.png" alt="Termix Banner" width="900" />
+
+<br />
+<br />
+
+<p>
+  <img src="../repo-images/Repo of the Day.png" alt="Repo of the Day Achievement" width="280" />
+  <br />
+  <sub>Ottenuto il 1 settembre 2025</sub>
+</p>
+
+</div>
+
+<br />
+
+## Panoramica
+
+Termix e una piattaforma di gestione server tutto-in-uno, open-source, per sempre gratuita e self-hosted. Fornisce una soluzione multipiattaforma per gestire i tuoi server e la tua infrastruttura attraverso un'unica interfaccia intuitiva. Termix offre accesso al terminale SSH, controllo remoto del desktop (RDP, VNC, Telnet), funzionalita di tunneling SSH, gestione remota dei file SSH e molti altri strumenti. Termix e la perfetta alternativa gratuita e self-hosted a Termius, disponibile per tutte le piattaforme.
+
+<br />
+
+## Funzionalita
+
+<table>
+<tr>
+<td width="50%" valign="top">
+
+**Accesso Terminale SSH:**
+Terminale completo con supporto schermo diviso (fino a 4 pannelli) con un sistema di schede in stile browser. Include il supporto per la personalizzazione del terminale, inclusi temi, font e altri componenti comuni.
+
+</td>
+<td width="50%" valign="top">
+
+**Accesso Desktop Remoto:**
+Supporto RDP, VNC e Telnet tramite browser con personalizzazione completa e schermo diviso.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**Gestione Tunnel SSH:**
+Crea e gestisci tunnel SSH da server a server con riconnessione automatica, monitoraggio dello stato e inoltro locale, remoto o SOCKS dinamico. Le impostazioni del tunnel da client desktop a server sono archiviate localmente per ogni installazione desktop; gli snapshot di preset C2S opzionali possono essere salvati sul server, rinominati, caricati o eliminati per spostare una configurazione di tunnel locale tra i client.
+
+</td>
+<td width="50%" valign="top">
+
+**Gestore File Remoto:**
+Gestisci i file direttamente sui server remoti con supporto per la visualizzazione e la modifica di codice, immagini, audio e video. Carica, scarica, rinomina, elimina e sposta file senza problemi con supporto sudo.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**Gestione Docker:**
+Avvia, ferma, metti in pausa, rimuovi container. Visualizza le statistiche dei container. Controlla i container tramite terminale docker exec. Non e stato creato per sostituire Portainer o Dockge, ma piuttosto per gestire semplicemente i tuoi container rispetto alla loro creazione.
+
+</td>
+<td width="50%" valign="top">
+
+**Gestore Host SSH:**
+Salva, organizza e gestisci le tue connessioni SSH con tag e cartelle, salva facilmente le informazioni di accesso riutilizzabili e automatizza il deployment delle chiavi SSH.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**Statistiche Server:**
+Visualizza l'utilizzo di CPU, memoria e disco insieme a rete, uptime, informazioni di sistema, firewall, monitoraggio porte sulla maggior parte dei server basati su Linux.
+
+</td>
+<td width="50%" valign="top">
+
+**Autenticazione Utente:**
+Gestione utenti sicura con controlli amministrativi e supporto OIDC (con controllo degli accessi) e 2FA (TOTP). Visualizza le sessioni utente attive su tutte le piattaforme e revoca i permessi. Collega i tuoi account OIDC/Locali tra loro.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**RBAC:**
+Crea ruoli e condividi host tra utenti/ruoli.
+
+</td>
+<td width="50%" valign="top">
+
+**Crittografia Database:**
+Il backend e archiviato come file di database SQLite crittografati. Consulta la [documentazione](https://docs.termix.site/security) per maggiori informazioni.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**Grafico di Rete:**
+Personalizza la tua Dashboard per visualizzare il tuo homelab basato sulle connessioni SSH con supporto dello stato.
+
+</td>
+<td width="50%" valign="top">
+
+**Strumenti SSH:**
+Crea snippet di comandi riutilizzabili che si eseguono con un singolo clic. Esegui un comando simultaneamente su piu terminali aperti.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**Schede Persistenti:**
+Le sessioni SSH e le schede rimangono aperte tra dispositivi/aggiornamenti se abilitato nel profilo utente.
+
+</td>
+<td width="50%" valign="top">
+
+**Lingue:**
+Supporto integrato per circa 30 lingue (gestito da [Crowdin](https://docs.termix.site/translations)).
+
+</td>
+</tr>
+</table>
+
+<br />
+
+<details>
+<summary><b>Altre funzionalita</b></summary>
+<br />
+
+- **Dashboard** - Visualizza le informazioni del server a colpo d'occhio sulla tua dashboard
+- **Chiavi API** - Crea chiavi API con ambito utente e date di scadenza da utilizzare per automazione/CI
+- **Esportazione/Importazione Dati** - Esporta e importa host SSH, credenziali e dati del gestore file
+- **Configurazione SSL Automatica** - Generazione e gestione integrata dei certificati SSL con reindirizzamenti HTTPS
+- **Interfaccia Moderna** - Interfaccia pulita e responsive per desktop/mobile costruita con React, Tailwind CSS e Shadcn. Scegli tra molti temi UI diversi, inclusi chiaro, scuro, Dracula, ecc. Usa i percorsi URL per aprire qualsiasi connessione a schermo intero.
+- **Cronologia Comandi** - Autocompletamento e visualizzazione dei comandi SSH eseguiti in precedenza
+- **Connessione Rapida** - Connettiti a un server senza dover salvare i dati di connessione
+- **Palette Comandi** - Premi due volte shift sinistro per accedere rapidamente alle connessioni SSH con la tastiera
+- **SSH Ricco di Funzionalita** - Supporta jump host, Warpgate, connessioni basate su TOTP, SOCKS5, verifica chiave host, compilazione automatica password, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, port knocking, ecc.
+
+</details>
+
+<br />
+
+## Supporto Piattaforme
+
+<table align="center">
+<tr>
+<th align="center">Piattaforma</th>
+<th align="center">Distribuzione</th>
+</tr>
+<tr>
+<td align="center"><b>Web</b></td>
+<td>Qualsiasi browser moderno (Chrome, Safari, Firefox) · Supporto PWA</td>
+</tr>
+<tr>
+<td align="center"><b>Windows</b> <sub>x64/ia32</sub></td>
+<td>Portable · MSI Installer · Chocolatey</td>
+</tr>
+<tr>
+<td align="center"><b>Linux</b> <sub>x64/ia32</sub></td>
+<td>Portable · AUR · AppImage · Deb · Flatpak</td>
+</tr>
+<tr>
+<td align="center"><b>macOS</b> <sub>x64/ia32, v12.0+</sub></td>
+<td>Apple App Store · DMG · Homebrew</td>
+</tr>
+<tr>
+<td align="center"><b>iOS/iPadOS</b> <sub>v15.1+</sub></td>
+<td>Apple App Store · IPA</td>
+</tr>
+<tr>
+<td align="center"><b>Android</b> <sub>v7.0+</sub></td>
+<td>Google Play Store · APK</td>
+</tr>
+</table>
+
+<br />
+
+## Installazione
+
+Visita la [Documentazione](https://docs.termix.site/install) di Termix per maggiori informazioni su come installare Termix su tutte le piattaforme. In alternativa, visualizza un file Docker Compose di esempio qui (puoi omettere guacd e la rete se non prevedi di utilizzare le funzioni di desktop remoto):
+
+```yaml
+services:
+  termix:
+    image: ghcr.io/lukegus/termix:latest
+    container_name: termix
+    restart: unless-stopped
+    ports:
+      - "8080:8080"
+    volumes:
+      - termix-data:/app/data
+    environment:
+      PORT: "8080"
+    depends_on:
+      - guacd
+    networks:
+      - termix-net
+
+  guacd:
+    image: guacamole/guacd:1.6.0
+    container_name: guacd
+    restart: unless-stopped
+    ports:
+      - "4822:4822"
+    networks:
+      - termix-net
+
+volumes:
+  termix-data:
+    driver: local
+
+networks:
+  termix-net:
+    driver: bridge
+```
+
+<br />
+
+## Screenshot
+
+<div align="center">
+
+<br />
+
+[![YouTube](../repo-images/YouTube.png)](https://www.youtube.com/@TermixSSH/videos)
+
+<sub>Guarda le panoramiche degli aggiornamenti su YouTube</sub>
+
+<br />
+<br />
+
+<table>
+<tr>
+<td><img src="../repo-images/Image 1.png" alt="Termix Screenshot 1" width="400" /></td>
+<td><img src="../repo-images/Image 2.png" alt="Termix Screenshot 2" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 3.png" alt="Termix Screenshot 3" width="400" /></td>
+<td><img src="../repo-images/Image 4.png" alt="Termix Screenshot 4" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 5.png" alt="Termix Screenshot 5" width="400" /></td>
+<td><img src="../repo-images/Image 6.png" alt="Termix Screenshot 6" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 7.png" alt="Termix Screenshot 7" width="400" /></td>
+<td><img src="../repo-images/Image 8.png" alt="Termix Screenshot 8" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 9.png" alt="Termix Screenshot 9" width="400" /></td>
+<td><img src="../repo-images/Image 10.png" alt="Termix Screenshot 10" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 11.png" alt="Termix Screenshot 11" width="400" /></td>
+<td><img src="../repo-images/Image 12.png" alt="Termix Screenshot 12" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 13.png" alt="Termix Screenshot 13" width="400" /></td>
+<td><img src="../repo-images/Image 14.png" alt="Termix Screenshot 14" width="400" /></td>
+</tr>
+</table>
+
+<sub>Alcuni video e immagini potrebbero non essere aggiornati o potrebbero non mostrare perfettamente le funzionalita.</sub>
+
+</div>
+
+<br />
+
+## Funzionalita Pianificate
+
+Consulta [Progetti](https://github.com/orgs/Termix-SSH/projects/2) per tutte le funzionalita pianificate. Se desideri contribuire, consulta [Contribuire](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md).
+
+<br />
+
+## Sponsor
+
+<div align="center">
+
+<br />
+
+<a href="https://www.digitalocean.com/">
+  <img src="https://opensource.nyc3.cdn.digitaloceanspaces.com/attribution/assets/SVG/DO_Logo_horizontal_blue.svg" height="40" alt="DigitalOcean" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://crowdin.com/">
+  <img src="https://support.crowdin.com/assets/logos/core-logo/svg/crowdin-core-logo-cDark.svg" height="40" alt="Crowdin" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://www.blacksmith.sh/">
+  <img src="https://cdn.prod.website-files.com/681bfb0c9a4601bc6e288ec4/683ca9e2c5186757092611b8_e8cb22127df4da0811c4120a523722d2_logo-backsmith-wordmark-light.svg" height="40" alt="Blacksmith" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://www.cloudflare.com/">
+  <img src="https://sirv.sirv.com/website/screenshots/cloudflare/cloudflare-logo.png?w=300" height="40" alt="Cloudflare" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://tailscale.com/">
+  <img src="https://drive.google.com/uc?export=view&id=1lIxkJuX6M23bW-2FElhT0rQieTrzaVSL" height="40" alt="Tailscale" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://akamai.com/">
+  <img src="https://upload.wikimedia.org/wikipedia/commons/8/8b/Akamai_logo.svg" height="40" alt="Akamai" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://aws.amazon.com/">
+  <img src="https://upload.wikimedia.org/wikipedia/commons/thumb/9/93/Amazon_Web_Services_Logo.svg/960px-Amazon_Web_Services_Logo.svg.png" height="40" alt="AWS" />
+</a>
+
+</div>
+
+<br />
+
+## Supporto
+
+Se hai bisogno di aiuto o vuoi richiedere una funzionalita per Termix, visita la pagina [Segnalazioni](https://github.com/Termix-SSH/Support/issues), accedi e premi `New Issue`. Per favore, sii il piu dettagliato possibile nella tua segnalazione, preferibilmente scritta in inglese. Puoi anche unirti al server [Discord](https://discord.gg/jVQGdvHDrf) e visitare il canale di supporto, tuttavia i tempi di risposta potrebbero essere piu lunghi.
+
+<br />
+
+## Licenza
+
+Distribuito sotto la Licenza Apache Versione 2.0. Consulta `LICENSE` per maggiori informazioni.

readme/README-JA.md

@@ -0,0 +1,357 @@
+<div align="center">
+
+<img src="../public/icon.svg" width="120" height="120" alt="Termix Logo" />
+
+<h1>Termix</h1>
+
+<p>セルフホスト型 SSH 管理とリモートデスクトップアクセス</p>
+
+<p>
+  <a href="../README.md">English</a> ·
+  <a href="README-CN.md">中文</a> ·
+  日本語 ·
+  <a href="README-KO.md">한국어</a> ·
+  <a href="README-FR.md">Français</a> ·
+  <a href="README-DE.md">Deutsch</a> ·
+  <a href="README-ES.md">Español</a> ·
+  <a href="README-PT.md">Português</a> ·
+  <a href="README-RU.md">Русский</a> ·
+  <a href="README-AR.md">العربية</a> ·
+  <a href="README-HI.md">हिन्दी</a> ·
+  <a href="README-TR.md">Türkçe</a> ·
+  <a href="README-VI.md">Tiếng Việt</a> ·
+  <a href="README-IT.md">Italiano</a>
+</p>
+
+<p>
+  <img src="https://img.shields.io/github/stars/Termix-SSH/Termix?style=flat&label=Stars&color=F39044&labelColor=1a1a1a" />
+  <img src="https://img.shields.io/github/forks/Termix-SSH/Termix?style=flat&label=Forks&color=F39044&labelColor=1a1a1a" />
+  <img src="https://img.shields.io/github/v/release/Termix-SSH/Termix?style=flat&label=Release&color=F39044&labelColor=1a1a1a&v=1" />
+  <a href="https://discord.gg/jVQGdvHDrf"><img alt="Discord" src="https://img.shields.io/discord/1347374268253470720?color=F39044&labelColor=1a1a1a" /></a>
+</p>
+
+<br />
+
+<img src="../repo-images/Termix Header.png" alt="Termix Banner" width="900" />
+
+<br />
+<br />
+
+<p>
+  <img src="../repo-images/Repo of the Day.png" alt="Repo of the Day Achievement" width="280" />
+  <br />
+  <sub>2025年9月1日に達成</sub>
+</p>
+
+</div>
+
+<br />
+
+## 概要
+
+Termixは、オープンソースで永久無料のセルフホスト型オールインワンサーバー管理プラットフォームです。単一の直感的なインターフェースを通じて、サーバーとインフラストラクチャを管理するマルチプラットフォームソリューションを提供します。Termixは、SSHターミナルアクセス、リモートデスクトップ制御（RDP、VNC、Telnet）、SSHトンネリング機能、リモートSSHファイル管理、およびその他多くのツールを提供します。Termixは、すべてのプラットフォームで利用可能なTermiusの完全無料でセルフホスト可能な代替ソリューションです。
+
+<br />
+
+## 機能
+
+<table>
+<tr>
+<td width="50%" valign="top">
+
+**SSHターミナルアクセス:**
+ブラウザ風タブシステムによる分割画面対応（最大4パネル）のフル機能ターミナル。一般的なターミナルテーマ、フォント、その他のコンポーネントを含むターミナルカスタマイズに対応しています。
+
+</td>
+<td width="50%" valign="top">
+
+**リモートデスクトップアクセス:**
+ブラウザ上でRDP、VNC、Telnetをサポート、完全なカスタマイズと分割画面に対応しています。
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**SSHトンネル管理:**
+自動再接続とヘルスモニタリング、ローカル・リモート・ダイナミックSOCKSフォワーディングを備えたサーバー間SSHトンネルの作成・管理が可能です。デスクトップクライアント対サーバーのトンネル設定はデスクトップインストールごとにローカルに保存され、オプションのC2Sプリセットスナップショットをサーバーに保存・名前変更・読み込み・削除してクライアント間でローカルトンネル設定を移動できます。
+
+</td>
+<td width="50%" valign="top">
+
+**リモートファイルマネージャー:**
+コード、画像、音声、動画の表示・編集に対応し、リモートサーバー上のファイルを直接管理できます。sudo対応でファイルのアップロード、ダウンロード、名前変更、削除、移動をシームレスに実行できます。
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**Docker管理:**
+コンテナの起動、停止、一時停止、削除。コンテナの統計情報を表示。docker execターミナルでコンテナを操作。PortainerやDockgeの代替ではなく、コンテナの作成よりも簡易的な管理を目的としています。
+
+</td>
+<td width="50%" valign="top">
+
+**SSHホストマネージャー:**
+タグやフォルダでSSH接続を保存、整理、管理し、再利用可能なログイン情報を簡単に保存しながらSSHキーのデプロイを自動化できます。
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**サーバー統計:**
+ほとんどのLinuxベースのサーバーで、CPU、メモリ、ディスク使用量、ネットワーク、アップタイム、システム情報、ファイアウォール、ポートモニターを表示できます。
+
+</td>
+<td width="50%" valign="top">
+
+**ユーザー認証:**
+管理者コントロールとOIDC（アクセス制御付き）および2FA（TOTP）対応による安全なユーザー管理。すべてのプラットフォームでアクティブなユーザーセッションを表示し、権限を取り消し可能。OIDC/ローカルアカウントの連携が可能です。
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**RBAC:**
+ロールを作成し、ユーザー/ロール間でホストを共有できます。
+
+</td>
+<td width="50%" valign="top">
+
+**データベース暗号化:**
+バックエンドは暗号化されたSQLiteデータベースファイルとして保存されます。詳細は[ドキュメント](https://docs.termix.site/security)をご覧ください。
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**ネットワークグラフ:**
+ダッシュボードをカスタマイズして、SSH接続に基づくホームラボのネットワークをステータス表示付きで可視化できます。
+
+</td>
+<td width="50%" valign="top">
+
+**SSHツール:**
+ワンクリックで実行できる再利用可能なコマンドスニペットの作成。複数の開いているターミナルに対して同時にコマンドを実行できます。
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**永続タブ:**
+ユーザープロフィールで有効にすると、SSHセッションとタブがデバイス/更新をまたいで開いたまま保持されます。
+
+</td>
+<td width="50%" valign="top">
+
+**多言語対応:**
+約30言語の組み込みサポート（[Crowdin](https://docs.termix.site/translations)で管理されています）。
+
+</td>
+</tr>
+</table>
+
+<br />
+
+<details>
+<summary><b>その他の機能</b></summary>
+<br />
+
+- **ダッシュボード** - ダッシュボードでサーバー情報を一目で確認できます
+- **APIキー** - 自動化/CI用に有効期限付きのユーザースコープAPIキーを作成できます
+- **データのエクスポート/インポート** - SSHホスト、認証情報、ファイルマネージャーデータのエクスポートとインポートが可能です
+- **自動SSL設定** - HTTPSリダイレクト付きの組み込みSSL証明書生成・管理が可能です
+- **モダンUI** - React、Tailwind CSS、Shadcnで構築された、デスクトップ/モバイル対応のクリーンなインターフェース。ライト、ダーク、Draculaなど、多くの異なるUIテーマから選択可能。URLルートで任意の接続をフルスクリーンで開くことができます。
+- **コマンド履歴** - 過去に実行したSSHコマンドの自動補完と表示が可能です
+- **クイック接続** - 接続データを保存せずにサーバーに接続できます
+- **コマンドパレット** - 左Shiftキーを2回押すことで、キーボードからSSH接続に素早くアクセスできます
+- **SSH機能充実** - ジャンプホスト、Warpgate、TOTPベースの接続、SOCKS5、ホストキー検証、パスワード自動入力、[OPKSSH](https://github.com/openpubkey/opkssh)、tmux、ポート敲き（port knocking）などに対応しています
+
+</details>
+
+<br />
+
+## プラットフォーム対応
+
+<table align="center">
+<tr>
+<th align="center">プラットフォーム</th>
+<th align="center">配布形式</th>
+</tr>
+<tr>
+<td align="center"><b>Web</b></td>
+<td>あらゆる最新ブラウザ（Chrome、Safari、Firefox）· PWA対応</td>
+</tr>
+<tr>
+<td align="center"><b>Windows</b> <sub>x64/ia32</sub></td>
+<td>ポータブル版 · MSIインストーラー · Chocolatey</td>
+</tr>
+<tr>
+<td align="center"><b>Linux</b> <sub>x64/ia32</sub></td>
+<td>ポータブル版 · AUR · AppImage · Deb · Flatpak</td>
+</tr>
+<tr>
+<td align="center"><b>macOS</b> <sub>x64/ia32, v12.0+</sub></td>
+<td>Apple App Store · DMG · Homebrew</td>
+</tr>
+<tr>
+<td align="center"><b>iOS/iPadOS</b> <sub>v15.1+</sub></td>
+<td>Apple App Store · IPA</td>
+</tr>
+<tr>
+<td align="center"><b>Android</b> <sub>v7.0+</sub></td>
+<td>Google Play Store · APK</td>
+</tr>
+</table>
+
+<br />
+
+## インストール
+
+すべてのプラットフォームへのTermixのインストール方法については、Termixの[ドキュメント](https://docs.termix.site/install)をご覧ください。また、以下のサンプルDocker Composeファイルをご覧ください（リモートデスクトップ機能を使用する予定がない場合は、guacdとネットワークの設定を省略できます）：
+
+```yaml
+services:
+  termix:
+    image: ghcr.io/lukegus/termix:latest
+    container_name: termix
+    restart: unless-stopped
+    ports:
+      - "8080:8080"
+    volumes:
+      - termix-data:/app/data
+    environment:
+      PORT: "8080"
+    depends_on:
+      - guacd
+    networks:
+      - termix-net
+
+  guacd:
+    image: guacamole/guacd:1.6.0
+    container_name: guacd
+    restart: unless-stopped
+    ports:
+      - "4822:4822"
+    networks:
+      - termix-net
+
+volumes:
+  termix-data:
+    driver: local
+
+networks:
+  termix-net:
+    driver: bridge
+```
+
+<br />
+
+## スクリーンショット
+
+<div align="center">
+
+<br />
+
+[![YouTube](../repo-images/YouTube.png)](https://www.youtube.com/@TermixSSH/videos)
+
+<sub>YouTubeでアップデートの概要を視聴する</sub>
+
+<br />
+<br />
+
+<table>
+<tr>
+<td><img src="../repo-images/Image 1.png" alt="Termix Screenshot 1" width="400" /></td>
+<td><img src="../repo-images/Image 2.png" alt="Termix Screenshot 2" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 3.png" alt="Termix Screenshot 3" width="400" /></td>
+<td><img src="../repo-images/Image 4.png" alt="Termix Screenshot 4" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 5.png" alt="Termix Screenshot 5" width="400" /></td>
+<td><img src="../repo-images/Image 6.png" alt="Termix Screenshot 6" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 7.png" alt="Termix Screenshot 7" width="400" /></td>
+<td><img src="../repo-images/Image 8.png" alt="Termix Screenshot 8" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 9.png" alt="Termix Screenshot 9" width="400" /></td>
+<td><img src="../repo-images/Image 10.png" alt="Termix Screenshot 10" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 11.png" alt="Termix Screenshot 11" width="400" /></td>
+<td><img src="../repo-images/Image 12.png" alt="Termix Screenshot 12" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 13.png" alt="Termix Screenshot 13" width="400" /></td>
+<td><img src="../repo-images/Image 14.png" alt="Termix Screenshot 14" width="400" /></td>
+</tr>
+</table>
+
+<sub>動画や画像の一部は最新ではない場合や、機能を完全に紹介できていない場合があります。</sub>
+
+</div>
+
+<br />
+
+## 予定されている機能
+
+すべての予定機能については[Projects](https://github.com/orgs/Termix-SSH/projects/2)をご覧ください。コントリビュートをご希望の方は[Contributing](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md)をご覧ください。
+
+<br />
+
+## スポンサー
+
+<div align="center">
+
+<br />
+
+<a href="https://www.digitalocean.com/">
+  <img src="https://opensource.nyc3.cdn.digitaloceanspaces.com/attribution/assets/SVG/DO_Logo_horizontal_blue.svg" height="40" alt="DigitalOcean" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://crowdin.com/">
+  <img src="https://support.crowdin.com/assets/logos/core-logo/svg/crowdin-core-logo-cDark.svg" height="40" alt="Crowdin" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://www.blacksmith.sh/">
+  <img src="https://cdn.prod.website-files.com/681bfb0c9a4601bc6e288ec4/683ca9e2c5186757092611b8_e8cb22127df4da0811c4120a523722d2_logo-backsmith-wordmark-light.svg" height="40" alt="Blacksmith" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://www.cloudflare.com/">
+  <img src="https://sirv.sirv.com/website/screenshots/cloudflare/cloudflare-logo.png?w=300" height="40" alt="Cloudflare" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://tailscale.com/">
+  <img src="https://drive.google.com/uc?export=view&id=1lIxkJuX6M23bW-2FElhT0rQieTrzaVSL" height="40" alt="Tailscale" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://akamai.com/">
+  <img src="https://upload.wikimedia.org/wikipedia/commons/8/8b/Akamai_logo.svg" height="40" alt="Akamai" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://aws.amazon.com/">
+  <img src="https://upload.wikimedia.org/wikipedia/commons/thumb/9/93/Amazon_Web_Services_Logo.svg/960px-Amazon_Web_Services_Logo.svg.png" height="40" alt="AWS" />
+</a>
+
+</div>
+
+<br />
+
+## サポート
+
+Termixに関するヘルプや機能リクエストが必要な場合は、[Issues](https://github.com/Termix-SSH/Support/issues)ページにアクセスし、ログインして`New Issue`を押してください。Issueはできるだけ詳細に記述し、英語での記述が望ましいです。また、[Discord](https://discord.gg/jVQGdvHDrf)サーバーに参加してサポートチャンネルを利用することもできますが、応答時間が長くなる場合があります。
+
+<br />
+
+## ライセンス
+
+Apache License Version 2.0のもとで配布されています。詳細は`LICENSE`をご覧ください。

readme/README-KO.md

@@ -0,0 +1,357 @@
+<div align="center">
+
+<img src="../public/icon.svg" width="120" height="120" alt="Termix Logo" />
+
+<h1>Termix</h1>
+
+<p>셀프 호스팅 SSH 관리 및 원격 데스크톱 액세스</p>
+
+<p>
+  <a href="../README.md">English</a> ·
+  <a href="README-CN.md">中文</a> ·
+  <a href="README-JA.md">日本語</a> ·
+  한국어 ·
+  <a href="README-FR.md">Français</a> ·
+  <a href="README-DE.md">Deutsch</a> ·
+  <a href="README-ES.md">Español</a> ·
+  <a href="README-PT.md">Português</a> ·
+  <a href="README-RU.md">Русский</a> ·
+  <a href="README-AR.md">العربية</a> ·
+  <a href="README-HI.md">हिन्दी</a> ·
+  <a href="README-TR.md">Türkçe</a> ·
+  <a href="README-VI.md">Tiếng Việt</a> ·
+  <a href="README-IT.md">Italiano</a>
+</p>
+
+<p>
+  <img src="https://img.shields.io/github/stars/Termix-SSH/Termix?style=flat&label=Stars&color=F39044&labelColor=1a1a1a" />
+  <img src="https://img.shields.io/github/forks/Termix-SSH/Termix?style=flat&label=Forks&color=F39044&labelColor=1a1a1a" />
+  <img src="https://img.shields.io/github/v/release/Termix-SSH/Termix?style=flat&label=Release&color=F39044&labelColor=1a1a1a&v=1" />
+  <a href="https://discord.gg/jVQGdvHDrf"><img alt="Discord" src="https://img.shields.io/discord/1347374268253470720?color=F39044&labelColor=1a1a1a" /></a>
+</p>
+
+<br />
+
+<img src="../repo-images/Termix Header.png" alt="Termix Banner" width="900" />
+
+<br />
+<br />
+
+<p>
+  <img src="../repo-images/Repo of the Day.png" alt="Repo of the Day Achievement" width="280" />
+  <br />
+  <sub>2025년 9월 1일 달성</sub>
+</p>
+
+</div>
+
+<br />
+
+## 개요
+
+Termix는 오픈 소스이며 영구 무료인 셀프 호스팅 올인원 서버 관리 플랫폼입니다. 단일 직관적인 인터페이스를 통해 서버와 인프라를 관리할 수 있는 멀티 플랫폼 솔루션을 제공합니다. Termix는 SSH 터미널 접속, 원격 데스크톱 제어(RDP, VNC, Telnet), SSH 터널링 기능, 원격 SSH 파일 관리 및 기타 다양한 도구를 제공합니다. Termix는 모든 플랫폼에서 사용 가능한 Termius의 완벽한 무료 셀프 호스팅 대안입니다.
+
+<br />
+
+## 기능
+
+<table>
+<tr>
+<td width="50%" valign="top">
+
+**SSH 터미널 접속:**
+브라우저 스타일 탭 시스템과 분할 화면 지원(최대 4개 패널)을 갖춘 완전한 기능의 터미널. 일반 터미널 테마, 글꼴 및 기타 구성 요소를 포함한 터미널 사용자 정의 지원.
+
+</td>
+<td width="50%" valign="top">
+
+**원격 데스크톱 접속:**
+완전한 사용자 정의와 분할 화면을 지원하는 브라우저 기반 RDP, VNC, Telnet 지원.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**SSH 터널 관리:**
+자동 재연결, 상태 모니터링, 로컬·원격·동적 SOCKS 포워딩을 지원하는 서버 간 SSH 터널 생성 및 관리. 데스크톱 클라이언트-서버 터널 설정은 데스크톱 설치별로 로컬에 저장되며, 선택적 C2S 사전 설정 스냅샷을 서버에 저장·이름 변경·불러오기·삭제하여 클라이언트 간 로컬 터널 구성을 이동할 수 있습니다.
+
+</td>
+<td width="50%" valign="top">
+
+**원격 파일 관리자:**
+코드, 이미지, 오디오, 비디오의 보기 및 편집을 지원하여 원격 서버에서 파일을 직접 관리. sudo 지원으로 파일 업로드, 다운로드, 이름 변경, 삭제, 이동을 원활하게 수행.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**Docker 관리:**
+컨테이너 시작, 중지, 일시 정지, 제거. 컨테이너 통계 보기. docker exec 터미널로 컨테이너 제어. Portainer나 Dockge를 대체하기 위한 것이 아니라 컨테이너 생성보다는 간편한 관리를 목적으로 합니다.
+
+</td>
+<td width="50%" valign="top">
+
+**SSH 호스트 관리자:**
+태그와 폴더로 SSH 연결을 저장, 정리, 관리하고, 재사용 가능한 로그인 정보를 쉽게 저장하면서 SSH 키 배포를 자동화.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**서버 통계:**
+대부분의 Linux 기반 서버에서 CPU, 메모리, 디스크 사용량과 함께 네트워크, 업타임, 시스템 정보, 방화벽, 포트 모니터를 표시.
+
+</td>
+<td width="50%" valign="top">
+
+**사용자 인증:**
+관리자 제어와 OIDC(액세스 제어 포함) 및 2FA(TOTP) 지원을 통한 안전한 사용자 관리. 모든 플랫폼에서 활성 사용자 세션을 보고 권한을 취소 가능. OIDC/로컬 계정 연동.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**RBAC:**
+역할을 생성하고 사용자/역할 간에 호스트 공유.
+
+</td>
+<td width="50%" valign="top">
+
+**데이터베이스 암호화:**
+백엔드가 암호화된 SQLite 데이터베이스 파일로 저장됨. 자세한 내용은 [문서](https://docs.termix.site/security)를 참조하세요.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**네트워크 그래프:**
+대시보드를 사용자 정의하여 SSH 연결 기반의 홈랩 네트워크를 상태 표시와 함께 시각화.
+
+</td>
+<td width="50%" valign="top">
+
+**SSH 도구:**
+한 번의 클릭으로 실행 가능한 재사용 가능 명령어 스니펫 생성. 여러 열린 터미널에서 동시에 하나의 명령어 실행.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**지속 탭:**
+사용자 프로필에서 활성화된 경우 SSH 세션 및 탭이 기기/새로 고침 간에 열린 상태 유지.
+
+</td>
+<td width="50%" valign="top">
+
+**다국어 지원:**
+약 30개 언어 내장 지원([Crowdin](https://docs.termix.site/translations)으로 관리).
+
+</td>
+</tr>
+</table>
+
+<br />
+
+<details>
+<summary><b>더 많은 기능</b></summary>
+<br />
+
+- **대시보드** - 대시보드에서 서버 정보를 한눈에 확인
+- **API 키** - 자동화/CI에 사용할 만료일이 있는 사용자 범위 API 키 생성
+- **데이터 내보내기/가져오기** - SSH 호스트, 자격 증명, 파일 관리자 데이터의 내보내기 및 가져오기
+- **자동 SSL 설정** - HTTPS 리디렉션을 포함한 내장 SSL 인증서 생성 및 관리
+- **모던 UI** - React, Tailwind CSS, Shadcn으로 구축된 깔끔한 데스크톱/모바일 친화적 인터페이스. 라이트, 다크, 드라큘라 등 다양한 UI 테마 선택 가능. URL 라우트를 사용하여 모든 연결을 전체 화면으로 열기 가능.
+- **명령어 기록** - 이전에 실행한 SSH 명령어의 자동 완성 및 조회
+- **빠른 연결** - 연결 데이터를 저장하지 않고 서버에 접속
+- **명령어 팔레트** - 왼쪽 Shift 키를 두 번 눌러 키보드로 SSH 연결에 빠르게 접근
+- **풍부한 SSH 기능** - 점프 호스트, Warpgate, TOTP 기반 연결, SOCKS5, 호스트 키 검증, 비밀번호 자동 입력, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, 포트 노킹 등 지원
+
+</details>
+
+<br />
+
+## 플랫폼 지원
+
+<table align="center">
+<tr>
+<th align="center">플랫폼</th>
+<th align="center">배포판</th>
+</tr>
+<tr>
+<td align="center"><b>Web</b></td>
+<td>모든 최신 브라우저(Chrome, Safari, Firefox) · PWA 지원</td>
+</tr>
+<tr>
+<td align="center"><b>Windows</b> <sub>x64/ia32</sub></td>
+<td>포터블 · MSI 설치 프로그램 · Chocolatey</td>
+</tr>
+<tr>
+<td align="center"><b>Linux</b> <sub>x64/ia32</sub></td>
+<td>포터블 · AUR · AppImage · Deb · Flatpak</td>
+</tr>
+<tr>
+<td align="center"><b>macOS</b> <sub>x64/ia32, v12.0+</sub></td>
+<td>Apple App Store · DMG · Homebrew</td>
+</tr>
+<tr>
+<td align="center"><b>iOS/iPadOS</b> <sub>v15.1+</sub></td>
+<td>Apple App Store · IPA</td>
+</tr>
+<tr>
+<td align="center"><b>Android</b> <sub>v7.0+</sub></td>
+<td>Google Play Store · APK</td>
+</tr>
+</table>
+
+<br />
+
+## 설치
+
+모든 플랫폼에 Termix를 설치하는 방법에 대한 자세한 내용은 Termix [문서](https://docs.termix.site/install)를 방문하세요. 다음은 Docker Compose 파일 예시입니다(원격 데스크톱 기능을 사용할 계획이 없다면 guacd와 네트워크를 생략할 수 있습니다):
+
+```yaml
+services:
+  termix:
+    image: ghcr.io/lukegus/termix:latest
+    container_name: termix
+    restart: unless-stopped
+    ports:
+      - "8080:8080"
+    volumes:
+      - termix-data:/app/data
+    environment:
+      PORT: "8080"
+    depends_on:
+      - guacd
+    networks:
+      - termix-net
+
+  guacd:
+    image: guacamole/guacd:1.6.0
+    container_name: guacd
+    restart: unless-stopped
+    ports:
+      - "4822:4822"
+    networks:
+      - termix-net
+
+volumes:
+  termix-data:
+    driver: local
+
+networks:
+  termix-net:
+    driver: bridge
+```
+
+<br />
+
+## 스크린샷
+
+<div align="center">
+
+<br />
+
+[![YouTube](../repo-images/YouTube.png)](https://www.youtube.com/@TermixSSH/videos)
+
+<sub>YouTube에서 업데이트 개요 시청하기</sub>
+
+<br />
+<br />
+
+<table>
+<tr>
+<td><img src="../repo-images/Image 1.png" alt="Termix Screenshot 1" width="400" /></td>
+<td><img src="../repo-images/Image 2.png" alt="Termix Screenshot 2" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 3.png" alt="Termix Screenshot 3" width="400" /></td>
+<td><img src="../repo-images/Image 4.png" alt="Termix Screenshot 4" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 5.png" alt="Termix Screenshot 5" width="400" /></td>
+<td><img src="../repo-images/Image 6.png" alt="Termix Screenshot 6" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 7.png" alt="Termix Screenshot 7" width="400" /></td>
+<td><img src="../repo-images/Image 8.png" alt="Termix Screenshot 8" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 9.png" alt="Termix Screenshot 9" width="400" /></td>
+<td><img src="../repo-images/Image 10.png" alt="Termix Screenshot 10" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 11.png" alt="Termix Screenshot 11" width="400" /></td>
+<td><img src="../repo-images/Image 12.png" alt="Termix Screenshot 12" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 13.png" alt="Termix Screenshot 13" width="400" /></td>
+<td><img src="../repo-images/Image 14.png" alt="Termix Screenshot 14" width="400" /></td>
+</tr>
+</table>
+
+<sub>일부 비디오 및 이미지는 최신이 아니거나 기능을 완벽하게 보여주지 않을 수 있습니다.</sub>
+
+</div>
+
+<br />
+
+## 계획된 기능
+
+모든 계획된 기능은 [Projects](https://github.com/orgs/Termix-SSH/projects/2)를 참조하세요. 기여를 원하시면 [Contributing](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md)을 참조하세요.
+
+<br />
+
+## 스폰서
+
+<div align="center">
+
+<br />
+
+<a href="https://www.digitalocean.com/">
+  <img src="https://opensource.nyc3.cdn.digitaloceanspaces.com/attribution/assets/SVG/DO_Logo_horizontal_blue.svg" height="40" alt="DigitalOcean" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://crowdin.com/">
+  <img src="https://support.crowdin.com/assets/logos/core-logo/svg/crowdin-core-logo-cDark.svg" height="40" alt="Crowdin" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://www.blacksmith.sh/">
+  <img src="https://cdn.prod.website-files.com/681bfb0c9a4601bc6e288ec4/683ca9e2c5186757092611b8_e8cb22127df4da0811c4120a523722d2_logo-backsmith-wordmark-light.svg" height="40" alt="Blacksmith" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://www.cloudflare.com/">
+  <img src="https://sirv.sirv.com/website/screenshots/cloudflare/cloudflare-logo.png?w=300" height="40" alt="Cloudflare" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://tailscale.com/">
+  <img src="https://drive.google.com/uc?export=view&id=1lIxkJuX6M23bW-2FElhT0rQieTrzaVSL" height="40" alt="Tailscale" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://akamai.com/">
+  <img src="https://upload.wikimedia.org/wikipedia/commons/8/8b/Akamai_logo.svg" height="40" alt="Akamai" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://aws.amazon.com/">
+  <img src="https://upload.wikimedia.org/wikipedia/commons/thumb/9/93/Amazon_Web_Services_Logo.svg/960px-Amazon_Web_Services_Logo.svg.png" height="40" alt="AWS" />
+</a>
+
+</div>
+
+<br />
+
+## 지원
+
+Termix에 대한 도움이 필요하거나 기능을 요청하려면 [Issues](https://github.com/Termix-SSH/Support/issues) 페이지를 방문하여 로그인하고 `New Issue`를 누르세요. 이슈는 가능한 한 상세하게 작성하고, 영어로 작성하는 것이 좋습니다. [Discord](https://discord.gg/jVQGdvHDrf) 서버에 참여하여 지원 채널을 이용할 수도 있지만, 응답 시간이 더 길 수 있습니다.
+
+<br />
+
+## 라이선스
+
+Apache License Version 2.0에 따라 배포됩니다. 자세한 내용은 `LICENSE`를 참조하세요.

readme/README-PT.md

@@ -0,0 +1,357 @@
+<div align="center">
+
+<img src="../public/icon.svg" width="120" height="120" alt="Termix Logo" />
+
+<h1>Termix</h1>
+
+<p>Gerenciamento SSH auto-hospedado e acesso a area de trabalho remota</p>
+
+<p>
+  <a href="../README.md">English</a> ·
+  <a href="README-CN.md">中文</a> ·
+  <a href="README-JA.md">日本語</a> ·
+  <a href="README-KO.md">한국어</a> ·
+  <a href="README-FR.md">Français</a> ·
+  <a href="README-DE.md">Deutsch</a> ·
+  <a href="README-ES.md">Español</a> ·
+  Português ·
+  <a href="README-RU.md">Русский</a> ·
+  <a href="README-AR.md">العربية</a> ·
+  <a href="README-HI.md">हिन्दी</a> ·
+  <a href="README-TR.md">Türkçe</a> ·
+  <a href="README-VI.md">Tiếng Việt</a> ·
+  <a href="README-IT.md">Italiano</a>
+</p>
+
+<p>
+  <img src="https://img.shields.io/github/stars/Termix-SSH/Termix?style=flat&label=Stars&color=F39044&labelColor=1a1a1a" />
+  <img src="https://img.shields.io/github/forks/Termix-SSH/Termix?style=flat&label=Forks&color=F39044&labelColor=1a1a1a" />
+  <img src="https://img.shields.io/github/v/release/Termix-SSH/Termix?style=flat&label=Release&color=F39044&labelColor=1a1a1a&v=1" />
+  <a href="https://discord.gg/jVQGdvHDrf"><img alt="Discord" src="https://img.shields.io/discord/1347374268253470720?color=F39044&labelColor=1a1a1a" /></a>
+</p>
+
+<br />
+
+<img src="../repo-images/Termix Header.png" alt="Termix Banner" width="900" />
+
+<br />
+<br />
+
+<p>
+  <img src="../repo-images/Repo of the Day.png" alt="Repo of the Day Achievement" width="280" />
+  <br />
+  <sub>Conquistado em 1 de setembro de 2025</sub>
+</p>
+
+</div>
+
+<br />
+
+## Visao Geral
+
+Termix e uma plataforma de gerenciamento de servidores tudo-em-um, de codigo aberto, sempre gratuita e auto-hospedada. Ela fornece uma solucao multiplataforma para gerenciar seus servidores e infraestrutura atraves de uma interface unica e intuitiva. Termix oferece acesso a terminal SSH, controle de desktop remoto (RDP, VNC, Telnet), capacidades de tunelamento SSH, gerenciamento remoto de arquivos SSH e muitas outras ferramentas. Termix e a alternativa perfeita, gratuita e auto-hospedada ao Termius, disponivel para todas as plataformas.
+
+<br />
+
+## Funcionalidades
+
+<table>
+<tr>
+<td width="50%" valign="top">
+
+**Acesso ao Terminal SSH:**
+Terminal completo com suporte a tela dividida (ate 4 paineis) com um sistema de abas similar ao navegador. Inclui suporte para personalizacao do terminal incluindo temas comuns de terminal, fontes e outros componentes.
+
+</td>
+<td width="50%" valign="top">
+
+**Acesso a Area de Trabalho Remota:**
+Suporte a RDP, VNC e Telnet pelo navegador com personalizacao completa e tela dividida.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**Gerenciamento de Tuneis SSH:**
+Crie e gerencie tuneis SSH de servidor para servidor com reconexao automatica, monitoramento de saude e encaminhamento local, remoto ou SOCKS dinamico. As configuracoes de tunel de cliente desktop para servidor sao armazenadas localmente por instalacao de desktop; snapshots de predefinicoes C2S opcionais podem ser salvos no servidor, renomeados, carregados ou excluidos para mover uma configuracao de tunel local entre clientes.
+
+</td>
+<td width="50%" valign="top">
+
+**Gerenciador Remoto de Arquivos:**
+Gerencie arquivos diretamente em servidores remotos com suporte para visualizar e editar codigo, imagens, audio e video. Faca upload, download, renomeie, exclua e mova arquivos facilmente com suporte sudo.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**Gerenciamento de Docker:**
+Inicie, pare, pause, remova conteineres. Visualize estatisticas de conteineres. Controle conteineres usando o terminal Docker Exec. Nao foi feito para substituir Portainer ou Dockge, mas sim para simplesmente gerenciar seus conteineres em vez de cria-los.
+
+</td>
+<td width="50%" valign="top">
+
+**Gerenciador de Hosts SSH:**
+Salve, organize e gerencie suas conexoes SSH com tags e pastas, e salve facilmente informacoes de login reutilizaveis com a capacidade de automatizar a implantacao de chaves SSH.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**Estatisticas do Servidor:**
+Visualize o uso de CPU, memoria e disco junto com rede, tempo de atividade, informacoes do sistema, firewall, monitor de portas na maioria dos servidores baseados em Linux.
+
+</td>
+<td width="50%" valign="top">
+
+**Autenticacao de Usuarios:**
+Gerenciamento seguro de usuarios com controles de administrador e suporte para OIDC (com controle de acesso) e 2FA (TOTP). Visualize sessoes ativas de usuarios em todas as plataformas e revogue permissoes. Vincule suas contas OIDC/Locais entre si.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**RBAC:**
+Crie funcoes e compartilhe hosts entre usuarios/funcoes.
+
+</td>
+<td width="50%" valign="top">
+
+**Criptografia de Banco de Dados:**
+Backend armazenado como arquivos de banco de dados SQLite criptografados. Consulte a [documentacao](https://docs.termix.site/security) para mais informacoes.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**Grafico de Rede:**
+Personalize seu Dashboard para visualizar seu homelab baseado nas suas conexoes SSH com suporte de status.
+
+</td>
+<td width="50%" valign="top">
+
+**Ferramentas SSH:**
+Crie trechos de comandos reutilizaveis que sao executados com um unico clique. Execute um comando simultaneamente em multiplos terminais abertos.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**Abas Persistentes:**
+Sessoes SSH e abas permanecem abertas entre dispositivos/atualizacoes se habilitado no perfil do usuario.
+
+</td>
+<td width="50%" valign="top">
+
+**Idiomas:**
+Suporte integrado para aproximadamente 30 idiomas (gerenciado pelo [Crowdin](https://docs.termix.site/translations)).
+
+</td>
+</tr>
+</table>
+
+<br />
+
+<details>
+<summary><b>Mais funcionalidades</b></summary>
+<br />
+
+- **Dashboard** - Visualize informacoes do servidor de relance no seu dashboard
+- **Chaves de API** - Crie chaves de API com escopo de usuario e datas de expiracao para uso em automacao/CI
+- **Exportacao/Importacao de Dados** - Exporte e importe hosts SSH, credenciais e dados do gerenciador de arquivos
+- **Configuracao Automatica de SSL** - Geracao e gerenciamento integrado de certificados SSL com redirecionamentos HTTPS
+- **Interface Moderna** - Interface limpa compativel com desktop/mobile construida com React, Tailwind CSS e Shadcn. Escolha entre muitos temas de interface diferentes, incluindo claro, escuro, Dracula, etc. Use rotas de URL para abrir qualquer conexao em tela cheia.
+- **Historico de Comandos** - Autocompletar e visualizar comandos SSH executados anteriormente
+- **Conexao Rapida** - Conecte-se a um servidor sem precisar salvar os dados de conexao
+- **Paleta de Comandos** - Pressione duas vezes a tecla Shift esquerda para acessar rapidamente as conexoes SSH com seu teclado
+- **SSH Rico em Funcionalidades** - Suporta jump hosts, Warpgate, conexoes baseadas em TOTP, SOCKS5, verificacao de chave do host, preenchimento automatico de senhas, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, port knocking, etc.
+
+</details>
+
+<br />
+
+## Suporte a Plataformas
+
+<table align="center">
+<tr>
+<th align="center">Plataforma</th>
+<th align="center">Distribuicao</th>
+</tr>
+<tr>
+<td align="center"><b>Web</b></td>
+<td>Qualquer navegador moderno (Chrome, Safari, Firefox) · Suporte PWA</td>
+</tr>
+<tr>
+<td align="center"><b>Windows</b> <sub>x64/ia32</sub></td>
+<td>Portatil · Instalador MSI · Chocolatey</td>
+</tr>
+<tr>
+<td align="center"><b>Linux</b> <sub>x64/ia32</sub></td>
+<td>Portatil · AUR · AppImage · Deb · Flatpak</td>
+</tr>
+<tr>
+<td align="center"><b>macOS</b> <sub>x64/ia32, v12.0+</sub></td>
+<td>Apple App Store · DMG · Homebrew</td>
+</tr>
+<tr>
+<td align="center"><b>iOS/iPadOS</b> <sub>v15.1+</sub></td>
+<td>Apple App Store · IPA</td>
+</tr>
+<tr>
+<td align="center"><b>Android</b> <sub>v7.0+</sub></td>
+<td>Google Play Store · APK</td>
+</tr>
+</table>
+
+<br />
+
+## Instalacao
+
+Visite a [documentacao](https://docs.termix.site/install) do Termix para mais informacoes sobre como instalar o Termix em todas as plataformas. Caso contrario, veja um arquivo Docker Compose de exemplo aqui (voce pode omitir o guacd e a rede se nao planeja usar recursos de area de trabalho remota):
+
+```yaml
+services:
+  termix:
+    image: ghcr.io/lukegus/termix:latest
+    container_name: termix
+    restart: unless-stopped
+    ports:
+      - "8080:8080"
+    volumes:
+      - termix-data:/app/data
+    environment:
+      PORT: "8080"
+    depends_on:
+      - guacd
+    networks:
+      - termix-net
+
+  guacd:
+    image: guacamole/guacd:1.6.0
+    container_name: guacd
+    restart: unless-stopped
+    ports:
+      - "4822:4822"
+    networks:
+      - termix-net
+
+volumes:
+  termix-data:
+    driver: local
+
+networks:
+  termix-net:
+    driver: bridge
+```
+
+<br />
+
+## Capturas de Tela
+
+<div align="center">
+
+<br />
+
+[![YouTube](../repo-images/YouTube.png)](https://www.youtube.com/@TermixSSH/videos)
+
+<sub>Assista resumos de atualizacoes no YouTube</sub>
+
+<br />
+<br />
+
+<table>
+<tr>
+<td><img src="../repo-images/Image 1.png" alt="Termix Screenshot 1" width="400" /></td>
+<td><img src="../repo-images/Image 2.png" alt="Termix Screenshot 2" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 3.png" alt="Termix Screenshot 3" width="400" /></td>
+<td><img src="../repo-images/Image 4.png" alt="Termix Screenshot 4" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 5.png" alt="Termix Screenshot 5" width="400" /></td>
+<td><img src="../repo-images/Image 6.png" alt="Termix Screenshot 6" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 7.png" alt="Termix Screenshot 7" width="400" /></td>
+<td><img src="../repo-images/Image 8.png" alt="Termix Screenshot 8" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 9.png" alt="Termix Screenshot 9" width="400" /></td>
+<td><img src="../repo-images/Image 10.png" alt="Termix Screenshot 10" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 11.png" alt="Termix Screenshot 11" width="400" /></td>
+<td><img src="../repo-images/Image 12.png" alt="Termix Screenshot 12" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 13.png" alt="Termix Screenshot 13" width="400" /></td>
+<td><img src="../repo-images/Image 14.png" alt="Termix Screenshot 14" width="400" /></td>
+</tr>
+</table>
+
+<sub>Alguns videos e imagens podem estar desatualizados ou podem nao mostrar perfeitamente as funcionalidades.</sub>
+
+</div>
+
+<br />
+
+## Funcionalidades Planejadas
+
+Consulte [Projetos](https://github.com/orgs/Termix-SSH/projects/2) para todas as funcionalidades planejadas. Se voce deseja contribuir, consulte [Contribuir](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md).
+
+<br />
+
+## Patrocinadores
+
+<div align="center">
+
+<br />
+
+<a href="https://www.digitalocean.com/">
+  <img src="https://opensource.nyc3.cdn.digitaloceanspaces.com/attribution/assets/SVG/DO_Logo_horizontal_blue.svg" height="40" alt="DigitalOcean" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://crowdin.com/">
+  <img src="https://support.crowdin.com/assets/logos/core-logo/svg/crowdin-core-logo-cDark.svg" height="40" alt="Crowdin" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://www.blacksmith.sh/">
+  <img src="https://cdn.prod.website-files.com/681bfb0c9a4601bc6e288ec4/683ca9e2c5186757092611b8_e8cb22127df4da0811c4120a523722d2_logo-backsmith-wordmark-light.svg" height="40" alt="Blacksmith" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://www.cloudflare.com/">
+  <img src="https://sirv.sirv.com/website/screenshots/cloudflare/cloudflare-logo.png?w=300" height="40" alt="Cloudflare" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://tailscale.com/">
+  <img src="https://drive.google.com/uc?export=view&id=1lIxkJuX6M23bW-2FElhT0rQieTrzaVSL" height="40" alt="Tailscale" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://akamai.com/">
+  <img src="https://upload.wikimedia.org/wikipedia/commons/8/8b/Akamai_logo.svg" height="40" alt="Akamai" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://aws.amazon.com/">
+  <img src="https://upload.wikimedia.org/wikipedia/commons/thumb/9/93/Amazon_Web_Services_Logo.svg/960px-Amazon_Web_Services_Logo.svg.png" height="40" alt="AWS" />
+</a>
+
+</div>
+
+<br />
+
+## Suporte
+
+Se voce precisa de ajuda ou deseja solicitar uma funcionalidade para o Termix, visite a pagina de [Issues](https://github.com/Termix-SSH/Support/issues), faca login e clique em `New Issue`. Por favor, seja o mais detalhado possivel no seu relato, preferencialmente escrito em ingles. Voce tambem pode entrar no servidor do [Discord](https://discord.gg/jVQGdvHDrf) e visitar o canal de suporte, porem, os tempos de resposta podem ser mais longos.
+
+<br />
+
+## Licenca
+
+Distribuido sob a Licenca Apache Versao 2.0. Consulte `LICENSE` para mais informacoes.

readme/README-RU.md

@@ -0,0 +1,357 @@
+<div align="center">
+
+<img src="../public/icon.svg" width="120" height="120" alt="Termix Logo" />
+
+<h1>Termix</h1>
+
+<p>Самостоятельно размещаемое управление SSH и доступ к удалённому рабочему столу</p>
+
+<p>
+  <a href="../README.md">English</a> ·
+  <a href="README-CN.md">中文</a> ·
+  <a href="README-JA.md">日本語</a> ·
+  <a href="README-KO.md">한국어</a> ·
+  <a href="README-FR.md">Français</a> ·
+  <a href="README-DE.md">Deutsch</a> ·
+  <a href="README-ES.md">Español</a> ·
+  <a href="README-PT.md">Português</a> ·
+  Русский ·
+  <a href="README-AR.md">العربية</a> ·
+  <a href="README-HI.md">हिन्दी</a> ·
+  <a href="README-TR.md">Türkçe</a> ·
+  <a href="README-VI.md">Tiếng Việt</a> ·
+  <a href="README-IT.md">Italiano</a>
+</p>
+
+<p>
+  <img src="https://img.shields.io/github/stars/Termix-SSH/Termix?style=flat&label=Stars&color=F39044&labelColor=1a1a1a" />
+  <img src="https://img.shields.io/github/forks/Termix-SSH/Termix?style=flat&label=Forks&color=F39044&labelColor=1a1a1a" />
+  <img src="https://img.shields.io/github/v/release/Termix-SSH/Termix?style=flat&label=Release&color=F39044&labelColor=1a1a1a&v=1" />
+  <a href="https://discord.gg/jVQGdvHDrf"><img alt="Discord" src="https://img.shields.io/discord/1347374268253470720?color=F39044&labelColor=1a1a1a" /></a>
+</p>
+
+<br />
+
+<img src="../repo-images/Termix Header.png" alt="Termix Banner" width="900" />
+
+<br />
+<br />
+
+<p>
+  <img src="../repo-images/Repo of the Day.png" alt="Repo of the Day Achievement" width="280" />
+  <br />
+  <sub>Достигнуто 1 сентября 2025 года</sub>
+</p>
+
+</div>
+
+<br />
+
+## Обзор
+
+Termix - это платформа для управления серверами с открытым исходным кодом, навсегда бесплатная и размещаемая на собственном сервере. Она предоставляет мультиплатформенное решение для управления вашими серверами и инфраструктурой через единый интуитивно понятный интерфейс. Termix предлагает доступ к SSH-терминалу, управление удаленным рабочим столом (RDP, VNC, Telnet), возможности SSH-туннелирования, удаленное управление файлами SSH и множество других инструментов. Termix - это идеальная бесплатная альтернатива Termius с возможностью размещения на собственном сервере, доступная для всех платформ.
+
+<br />
+
+## Возможности
+
+<table>
+<tr>
+<td width="50%" valign="top">
+
+**Доступ к SSH-терминалу:**
+Полнофункциональный терминал с поддержкой разделения экрана (до 4 панелей) и системой вкладок, как в браузере. Включает поддержку настройки терминала, включая популярные темы, шрифты и другие компоненты.
+
+</td>
+<td width="50%" valign="top">
+
+**Доступ к удалённому рабочему столу:**
+Поддержка RDP, VNC и Telnet через браузер с полной настройкой и разделением экрана.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**Управление SSH-туннелями:**
+Создание и управление межсерверными SSH-туннелями с автоматическим переподключением, мониторингом состояния и локальной, удалённой или динамической SOCKS-переадресацией. Настройки туннелей «десктопный клиент - сервер» хранятся локально для каждой установки; опциональные снимки C2S-пресетов можно сохранять на сервере, переименовывать, загружать или удалять для переноса конфигурации между клиентами.
+
+</td>
+<td width="50%" valign="top">
+
+**Удалённый файловый менеджер:**
+Управление файлами непосредственно на удалённых серверах с поддержкой просмотра и редактирования кода, изображений, аудио и видео. Загрузка, скачивание, переименование, удаление и перемещение файлов с поддержкой sudo.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**Управление Docker:**
+Запуск, остановка, приостановка, удаление контейнеров. Просмотр статистики контейнеров. Управление контейнером через терминал docker exec. Не предназначен для замены Portainer или Dockge, а скорее для простого управления контейнерами по сравнению с их созданием.
+
+</td>
+<td width="50%" valign="top">
+
+**Менеджер SSH-хостов:**
+Сохранение, организация и управление SSH-подключениями с помощью тегов и папок, с возможностью сохранения данных для повторного входа и автоматизации развёртывания SSH-ключей.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**Статистика сервера:**
+Просмотр использования CPU, памяти и диска, а также сети, времени работы, информации о системе, файрвола и монитора портов на большинстве серверов на базе Linux.
+
+</td>
+<td width="50%" valign="top">
+
+**Аутентификация пользователей:**
+Безопасное управление пользователями с административным контролем и поддержкой OIDC (с контролем доступа) и 2FA (TOTP). Просмотр активных сессий пользователей на всех платформах и отзыв прав доступа. Связывание аккаунтов OIDC/локальных аккаунтов.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**RBAC:**
+Создание ролей и предоставление общего доступа к хостам для пользователей/ролей.
+
+</td>
+<td width="50%" valign="top">
+
+**Шифрование базы данных:**
+Бэкенд хранится в виде зашифрованных файлов базы данных SQLite. Подробнее в [документации](https://docs.termix.site/security).
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**Сетевой граф:**
+Настройте панель управления для визуализации вашей домашней лаборатории на основе SSH-подключений с поддержкой статусов.
+
+</td>
+<td width="50%" valign="top">
+
+**Инструменты SSH:**
+Создание переиспользуемых фрагментов команд, выполняемых одним нажатием. Запуск одной команды одновременно в нескольких открытых терминалах.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**Постоянные вкладки:**
+SSH-сессии и вкладки остаются открытыми на всех устройствах/при обновлении страницы, если включено в профиле пользователя.
+
+</td>
+<td width="50%" valign="top">
+
+**Языки:**
+Встроенная поддержка около 30 языков (управляется через [Crowdin](https://docs.termix.site/translations)).
+
+</td>
+</tr>
+</table>
+
+<br />
+
+<details>
+<summary><b>Больше возможностей</b></summary>
+<br />
+
+- **Панель управления** - Просмотр информации о сервере на панели управления одним взглядом
+- **API-ключи** - Создание API-ключей с областью видимости пользователя и сроками действия для использования в автоматизации/CI
+- **Экспорт/импорт данных** - Экспорт и импорт SSH-хостов, учётных данных и данных файлового менеджера
+- **Автоматическая настройка SSL** - Встроенная генерация и управление SSL-сертификатами с перенаправлением на HTTPS
+- **Современный интерфейс** - Чистый интерфейс для десктопа и мобильных устройств, построенный на React, Tailwind CSS и Shadcn. Выбор между множеством различных тем интерфейса, включая светлую, тёмную, Dracula и т. д. Использование URL-маршрутов для открытия любого подключения в полноэкранном режиме.
+- **История команд** - Автодополнение и просмотр ранее выполненных SSH-команд
+- **Быстрое подключение** - Подключение к серверу без необходимости сохранения данных подключения
+- **Командная палитра** - Двойное нажатие левого Shift для быстрого доступа к SSH-подключениям с клавиатуры
+- **Богатый функционал SSH** - Поддержка jump-хостов, Warpgate, подключений на основе TOTP, SOCKS5, верификации ключей хоста, автозаполнения паролей, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, port knocking и др.
+
+</details>
+
+<br />
+
+## Поддержка платформ
+
+<table align="center">
+<tr>
+<th align="center">Платформа</th>
+<th align="center">Дистрибутив</th>
+</tr>
+<tr>
+<td align="center"><b>Web</b></td>
+<td>Любой современный браузер (Chrome, Safari, Firefox) · Поддержка PWA</td>
+</tr>
+<tr>
+<td align="center"><b>Windows</b> <sub>x64/ia32</sub></td>
+<td>Портативная версия · Установщик MSI · Chocolatey</td>
+</tr>
+<tr>
+<td align="center"><b>Linux</b> <sub>x64/ia32</sub></td>
+<td>Портативная версия · AUR · AppImage · Deb · Flatpak</td>
+</tr>
+<tr>
+<td align="center"><b>macOS</b> <sub>x64/ia32, v12.0+</sub></td>
+<td>Apple App Store · DMG · Homebrew</td>
+</tr>
+<tr>
+<td align="center"><b>iOS/iPadOS</b> <sub>v15.1+</sub></td>
+<td>Apple App Store · IPA</td>
+</tr>
+<tr>
+<td align="center"><b>Android</b> <sub>v7.0+</sub></td>
+<td>Google Play Store · APK</td>
+</tr>
+</table>
+
+<br />
+
+## Установка
+
+Посетите [документацию](https://docs.termix.site/install) Termix для получения дополнительной информации об установке Termix на всех платформах. Также вы можете ознакомиться с примером файла Docker Compose здесь (вы можете опустить guacd и сеть, если не планируете использовать функции удаленного рабочего стола):
+
+```yaml
+services:
+  termix:
+    image: ghcr.io/lukegus/termix:latest
+    container_name: termix
+    restart: unless-stopped
+    ports:
+      - "8080:8080"
+    volumes:
+      - termix-data:/app/data
+    environment:
+      PORT: "8080"
+    depends_on:
+      - guacd
+    networks:
+      - termix-net
+
+  guacd:
+    image: guacamole/guacd:1.6.0
+    container_name: guacd
+    restart: unless-stopped
+    ports:
+      - "4822:4822"
+    networks:
+      - termix-net
+
+volumes:
+  termix-data:
+    driver: local
+
+networks:
+  termix-net:
+    driver: bridge
+```
+
+<br />
+
+## Скриншоты
+
+<div align="center">
+
+<br />
+
+[![YouTube](../repo-images/YouTube.png)](https://www.youtube.com/@TermixSSH/videos)
+
+<sub>Смотрите обзоры обновлений на YouTube</sub>
+
+<br />
+<br />
+
+<table>
+<tr>
+<td><img src="../repo-images/Image 1.png" alt="Termix Screenshot 1" width="400" /></td>
+<td><img src="../repo-images/Image 2.png" alt="Termix Screenshot 2" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 3.png" alt="Termix Screenshot 3" width="400" /></td>
+<td><img src="../repo-images/Image 4.png" alt="Termix Screenshot 4" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 5.png" alt="Termix Screenshot 5" width="400" /></td>
+<td><img src="../repo-images/Image 6.png" alt="Termix Screenshot 6" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 7.png" alt="Termix Screenshot 7" width="400" /></td>
+<td><img src="../repo-images/Image 8.png" alt="Termix Screenshot 8" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 9.png" alt="Termix Screenshot 9" width="400" /></td>
+<td><img src="../repo-images/Image 10.png" alt="Termix Screenshot 10" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 11.png" alt="Termix Screenshot 11" width="400" /></td>
+<td><img src="../repo-images/Image 12.png" alt="Termix Screenshot 12" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 13.png" alt="Termix Screenshot 13" width="400" /></td>
+<td><img src="../repo-images/Image 14.png" alt="Termix Screenshot 14" width="400" /></td>
+</tr>
+</table>
+
+<sub>Некоторые видео и изображения могут быть устаревшими или не полностью отражать функциональность.</sub>
+
+</div>
+
+<br />
+
+## Запланированные функции
+
+Смотрите [Проекты](https://github.com/orgs/Termix-SSH/projects/2) для просмотра всех запланированных функций. Если вы хотите внести вклад, смотрите [Участие в разработке](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md).
+
+<br />
+
+## Спонсоры
+
+<div align="center">
+
+<br />
+
+<a href="https://www.digitalocean.com/">
+  <img src="https://opensource.nyc3.cdn.digitaloceanspaces.com/attribution/assets/SVG/DO_Logo_horizontal_blue.svg" height="40" alt="DigitalOcean" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://crowdin.com/">
+  <img src="https://support.crowdin.com/assets/logos/core-logo/svg/crowdin-core-logo-cDark.svg" height="40" alt="Crowdin" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://www.blacksmith.sh/">
+  <img src="https://cdn.prod.website-files.com/681bfb0c9a4601bc6e288ec4/683ca9e2c5186757092611b8_e8cb22127df4da0811c4120a523722d2_logo-backsmith-wordmark-light.svg" height="40" alt="Blacksmith" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://www.cloudflare.com/">
+  <img src="https://sirv.sirv.com/website/screenshots/cloudflare/cloudflare-logo.png?w=300" height="40" alt="Cloudflare" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://tailscale.com/">
+  <img src="https://drive.google.com/uc?export=view&id=1lIxkJuX6M23bW-2FElhT0rQieTrzaVSL" height="40" alt="Tailscale" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://akamai.com/">
+  <img src="https://upload.wikimedia.org/wikipedia/commons/8/8b/Akamai_logo.svg" height="40" alt="Akamai" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://aws.amazon.com/">
+  <img src="https://upload.wikimedia.org/wikipedia/commons/thumb/9/93/Amazon_Web_Services_Logo.svg/960px-Amazon_Web_Services_Logo.svg.png" height="40" alt="AWS" />
+</a>
+
+</div>
+
+<br />
+
+## Поддержка
+
+Если вам нужна помощь или вы хотите запросить новую функцию для Termix, посетите страницу [Проблемы](https://github.com/Termix-SSH/Support/issues), войдите в систему и нажмите `New Issue`. Пожалуйста, опишите вашу проблему как можно подробнее, предпочтительно на английском языке. Вы также можете присоединиться к серверу [Discord](https://discord.gg/jVQGdvHDrf) и обратиться в канал поддержки, однако время ответа может быть дольше.
+
+<br />
+
+## Лицензия
+
+Распространяется по лицензии Apache License Version 2.0. Подробнее см. в файле `LICENSE`.

readme/README-TR.md

@@ -0,0 +1,357 @@
+<div align="center">
+
+<img src="../public/icon.svg" width="120" height="120" alt="Termix Logo" />
+
+<h1>Termix</h1>
+
+<p>Kendi sunucunuzda barindirilan SSH yonetimi ve uzak masaustu erisimi</p>
+
+<p>
+  <a href="../README.md">English</a> ·
+  <a href="README-CN.md">中文</a> ·
+  <a href="README-JA.md">日本語</a> ·
+  <a href="README-KO.md">한국어</a> ·
+  <a href="README-FR.md">Français</a> ·
+  <a href="README-DE.md">Deutsch</a> ·
+  <a href="README-ES.md">Español</a> ·
+  <a href="README-PT.md">Português</a> ·
+  <a href="README-RU.md">Русский</a> ·
+  <a href="README-AR.md">العربية</a> ·
+  <a href="README-HI.md">हिन्दी</a> ·
+  Türkçe ·
+  <a href="README-VI.md">Tiếng Việt</a> ·
+  <a href="README-IT.md">Italiano</a>
+</p>
+
+<p>
+  <img src="https://img.shields.io/github/stars/Termix-SSH/Termix?style=flat&label=Stars&color=F39044&labelColor=1a1a1a" />
+  <img src="https://img.shields.io/github/forks/Termix-SSH/Termix?style=flat&label=Forks&color=F39044&labelColor=1a1a1a" />
+  <img src="https://img.shields.io/github/v/release/Termix-SSH/Termix?style=flat&label=Release&color=F39044&labelColor=1a1a1a&v=1" />
+  <a href="https://discord.gg/jVQGdvHDrf"><img alt="Discord" src="https://img.shields.io/discord/1347374268253470720?color=F39044&labelColor=1a1a1a" /></a>
+</p>
+
+<br />
+
+<img src="../repo-images/Termix Header.png" alt="Termix Banner" width="900" />
+
+<br />
+<br />
+
+<p>
+  <img src="../repo-images/Repo of the Day.png" alt="Repo of the Day Achievement" width="280" />
+  <br />
+  <sub>1 Eylül 2025'te kazanildi</sub>
+</p>
+
+</div>
+
+<br />
+
+## Genel Bakis
+
+Termix, acik kaynakli, sonsuza kadar ucretsiz, kendi sunucunuzda barindirabileceginez hepsi bir arada sunucu yonetim platformudur. Sunucularinizi ve altyapinizi tek bir sezgisel arayuz uzerinden yonetmek icin cok platformlu bir cozum sunar. Termix, SSH terminal erisimi, uzak masaustu kontrolu (RDP, VNC, Telnet), SSH tunelleme yetenekleri, uzak SSH dosya yonetimi ve daha bircok arac saglar. Termix, tum platformlarda kullanilabilen Termius'un mukemmel ucretsiz ve kendi barindirmali alternatifidir.
+
+<br />
+
+## Ozellikler
+
+<table>
+<tr>
+<td width="50%" valign="top">
+
+**SSH Terminal Erisimi:**
+Tarayici benzeri sekme sistemiyle bolunmus ekran destegine sahip (4 panele kadar) tam ozellikli terminal. Yaygin terminal temalari, yazi tipleri ve diger bilesenleri iceren terminal ozellestirme destegi.
+
+</td>
+<td width="50%" valign="top">
+
+**Uzak Masaustu Erisimi:**
+Tam ozellestirme ve bolunmus ekran ile tarayici uzerinden RDP, VNC ve Telnet destegi.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**SSH Tunel Yonetimi:**
+Otomatik yeniden baglantiya, saglik izleme ve yerel, uzak veya dinamik SOCKS yonlendirme destegi ile sunucular arasi SSH tunelleri olusturun ve yonetin. Masaustu istemci-sunucu tunel ayarlari her masaustu kurulumu icin yerel olarak depolanir; istege bagli C2S hazir ayar anlik goruntuleri sunucuya kaydedilebilir, yeniden adlandirilabilir, yuklenebilir veya silinebilir.
+
+</td>
+<td width="50%" valign="top">
+
+**Uzak Dosya Yoneticisi:**
+Uzak sunuculardaki dosyalari dogrudan yonetin; kod, goruntu, ses ve video goruntuleme ve duzenleme destegi ile. Sudo destegi ile dosyalari sorunsuzca yukleyin, indirin, yeniden adlandirin, silin ve tasiyin.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**Docker Yonetimi:**
+Konteynerleri baslatın, durdurun, duraklatın, kaldirin. Konteyner istatistiklerini goruntuleyin. Docker exec terminali kullanarak konteyneri kontrol edin. Portainer veya Dockge'nin yerini almak icin degil, konteynerlerinizi olusturmak yerine basitce yonetmek icin tasarlanmistir.
+
+</td>
+<td width="50%" valign="top">
+
+**SSH Ana Bilgisayar Yoneticisi:**
+SSH baglantilarinizi etiketler ve klasorlerle kaydedin, duzenleyin ve yonetin; yeniden kullanilabilir giris bilgilerini kolayca kaydedin ve SSH anahtarlarinin dagitimini otomatiklestirin.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**Sunucu Istatistikleri:**
+Cogu Linux tabanli sunucularda CPU, bellek ve disk kullanimini ag, calisma suresi, sistem bilgisi, guvenlik duvari, port izleme ile birlikte goruntuleyin.
+
+</td>
+<td width="50%" valign="top">
+
+**Kullanici Kimlik Dogrulama:**
+Yonetici kontrolleri, OIDC (erisim kontrollu) ve 2FA (TOTP) destegi ile guvenli kullanici yonetimi. Tum platformlardaki aktif kullanici oturumlarini goruntuleyin ve izinleri iptal edin. OIDC/Yerel hesaplarinizi birbirine baglayin.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**RBAC:**
+Roller olusturun ve ana bilgisayarlari kullanicilar/roller arasinda paylasin.
+
+</td>
+<td width="50%" valign="top">
+
+**Veritabani Sifreleme:**
+Arka uc, sifrelenmis SQLite veritabani dosyalari olarak depolanir. Daha fazla bilgi icin [belgelere](https://docs.termix.site/security) bakin.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**Ag Grafigi:**
+Kontrol panelinizi, SSH baglantilariniza dayali olarak ev laboratuvarinizi durum destegi ile gorselletirmek icin ozellestirin.
+
+</td>
+<td width="50%" valign="top">
+
+**SSH Araclari:**
+Tek tiklamayla calistirilan yeniden kullanilabilir komut parcaciklari olusturun. Birden fazla acik terminalde ayni anda tek bir komut calistirin.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**Kalici Sekmeler:**
+Kullanici profilinde etkinlestirilmisse SSH oturumlari ve sekmeler cihazlar/yenilemeler arasinda acik kalir.
+
+</td>
+<td width="50%" valign="top">
+
+**Diller:**
+Yaklasik 30 dil icin yerlesik destek ([Crowdin](https://docs.termix.site/translations) tarafindan yonetilir).
+
+</td>
+</tr>
+</table>
+
+<br />
+
+<details>
+<summary><b>Daha fazla ozellik</b></summary>
+<br />
+
+- **Kontrol Paneli** - Kontrol panelinizde sunucu bilgilerini bir bakista goruntuleyin
+- **API Anahtarlari** - Otomasyon/CI icin kullanilmak uzere son kullanma tarihleriyle kullanici kapsamli API anahtarlari olusturun
+- **Veri Disa/Ice Aktarma** - SSH ana bilgisayarlarini, kimlik bilgilerini ve dosya yoneticisi verilerini disa ve ice aktarin
+- **Otomatik SSL Kurulumu** - HTTPS yonlendirmeleriyle yerlesik SSL sertifika olusturma ve yonetimi
+- **Modern Arayuz** - React, Tailwind CSS ve Shadcn ile olusturulmus temiz masaustu/mobil uyumlu arayuz. Isik, karanlik, Dracula vb. dahil olmak uzere bircok farkli UI temasi arasından secim yapin. Herhangi bir baglantıyı tam ekranda acmak icin URL yollarini kullanin.
+- **Komut Gecmisi** - Daha once calistirilan SSH komutlarini otomatik tamamlayin ve goruntuleyin
+- **Hizli Baglanti** - Baglanti verilerini kaydetmeden bir sunucuya baglanin
+- **Komut Paleti** - Sol shift tusuna iki kez basarak SSH baglantilariniza klavyenizle hizlica erisin
+- **SSH Zengin Ozellikler** - Atlama ana bilgisayarlari, Warpgate, TOTP tabanli baglantilar, SOCKS5, ana bilgisayar anahtar dogrulama, otomatik sifre doldurma, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, port knocking vb. destekler.
+
+</details>
+
+<br />
+
+## Platform Destegi
+
+<table align="center">
+<tr>
+<th align="center">Platform</th>
+<th align="center">Dagitim</th>
+</tr>
+<tr>
+<td align="center"><b>Web</b></td>
+<td>Herhangi bir modern tarayici (Chrome, Safari, Firefox) · PWA destegi</td>
+</tr>
+<tr>
+<td align="center"><b>Windows</b> <sub>x64/ia32</sub></td>
+<td>Tasınabilir · MSI Yukleyici · Chocolatey</td>
+</tr>
+<tr>
+<td align="center"><b>Linux</b> <sub>x64/ia32</sub></td>
+<td>Tasınabilir · AUR · AppImage · Deb · Flatpak</td>
+</tr>
+<tr>
+<td align="center"><b>macOS</b> <sub>x64/ia32, v12.0+</sub></td>
+<td>Apple App Store · DMG · Homebrew</td>
+</tr>
+<tr>
+<td align="center"><b>iOS/iPadOS</b> <sub>v15.1+</sub></td>
+<td>Apple App Store · IPA</td>
+</tr>
+<tr>
+<td align="center"><b>Android</b> <sub>v7.0+</sub></td>
+<td>Google Play Store · APK</td>
+</tr>
+</table>
+
+<br />
+
+## Kurulum
+
+Termix'i tum platformlara nasil kuracaginiz hakkinda daha fazla bilgi icin Termix [Belgelerine](https://docs.termix.site/install) bakin. Ornek bir Docker Compose dosyasini asagida inceleyebilirsiniz (uzak masaustu ozelliklerini kullanmayi planlamiyorsaniz guacd'yi ve agi cikarabilirsiniz):
+
+```yaml
+services:
+  termix:
+    image: ghcr.io/lukegus/termix:latest
+    container_name: termix
+    restart: unless-stopped
+    ports:
+      - "8080:8080"
+    volumes:
+      - termix-data:/app/data
+    environment:
+      PORT: "8080"
+    depends_on:
+      - guacd
+    networks:
+      - termix-net
+
+  guacd:
+    image: guacamole/guacd:1.6.0
+    container_name: guacd
+    restart: unless-stopped
+    ports:
+      - "4822:4822"
+    networks:
+      - termix-net
+
+volumes:
+  termix-data:
+    driver: local
+
+networks:
+  termix-net:
+    driver: bridge
+```
+
+<br />
+
+## Ekran Goruntuleri
+
+<div align="center">
+
+<br />
+
+[![YouTube](../repo-images/YouTube.png)](https://www.youtube.com/@TermixSSH/videos)
+
+<sub>YouTube'da guncelleme ozetlerini izleyin</sub>
+
+<br />
+<br />
+
+<table>
+<tr>
+<td><img src="../repo-images/Image 1.png" alt="Termix Screenshot 1" width="400" /></td>
+<td><img src="../repo-images/Image 2.png" alt="Termix Screenshot 2" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 3.png" alt="Termix Screenshot 3" width="400" /></td>
+<td><img src="../repo-images/Image 4.png" alt="Termix Screenshot 4" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 5.png" alt="Termix Screenshot 5" width="400" /></td>
+<td><img src="../repo-images/Image 6.png" alt="Termix Screenshot 6" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 7.png" alt="Termix Screenshot 7" width="400" /></td>
+<td><img src="../repo-images/Image 8.png" alt="Termix Screenshot 8" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 9.png" alt="Termix Screenshot 9" width="400" /></td>
+<td><img src="../repo-images/Image 10.png" alt="Termix Screenshot 10" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 11.png" alt="Termix Screenshot 11" width="400" /></td>
+<td><img src="../repo-images/Image 12.png" alt="Termix Screenshot 12" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 13.png" alt="Termix Screenshot 13" width="400" /></td>
+<td><img src="../repo-images/Image 14.png" alt="Termix Screenshot 14" width="400" /></td>
+</tr>
+</table>
+
+<sub>Bazi videolar ve gorseller guncel olmayabilir veya ozellikleri tam olarak yansitmayabilir.</sub>
+
+</div>
+
+<br />
+
+## Planlanan Ozellikler
+
+Tum planlanan ozellikler icin [Projeler](https://github.com/orgs/Termix-SSH/projects/2) sayfasina bakin. Katkida bulunmak istiyorsaniz, [Katkida Bulunma](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md) sayfasina bakin.
+
+<br />
+
+## Sponsorlar
+
+<div align="center">
+
+<br />
+
+<a href="https://www.digitalocean.com/">
+  <img src="https://opensource.nyc3.cdn.digitaloceanspaces.com/attribution/assets/SVG/DO_Logo_horizontal_blue.svg" height="40" alt="DigitalOcean" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://crowdin.com/">
+  <img src="https://support.crowdin.com/assets/logos/core-logo/svg/crowdin-core-logo-cDark.svg" height="40" alt="Crowdin" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://www.blacksmith.sh/">
+  <img src="https://cdn.prod.website-files.com/681bfb0c9a4601bc6e288ec4/683ca9e2c5186757092611b8_e8cb22127df4da0811c4120a523722d2_logo-backsmith-wordmark-light.svg" height="40" alt="Blacksmith" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://www.cloudflare.com/">
+  <img src="https://sirv.sirv.com/website/screenshots/cloudflare/cloudflare-logo.png?w=300" height="40" alt="Cloudflare" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://tailscale.com/">
+  <img src="https://drive.google.com/uc?export=view&id=1lIxkJuX6M23bW-2FElhT0rQieTrzaVSL" height="40" alt="Tailscale" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://akamai.com/">
+  <img src="https://upload.wikimedia.org/wikipedia/commons/8/8b/Akamai_logo.svg" height="40" alt="Akamai" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://aws.amazon.com/">
+  <img src="https://upload.wikimedia.org/wikipedia/commons/thumb/9/93/Amazon_Web_Services_Logo.svg/960px-Amazon_Web_Services_Logo.svg.png" height="40" alt="AWS" />
+</a>
+
+</div>
+
+<br />
+
+## Destek
+
+Termix ile ilgili yardima ihtiyaciniz varsa veya bir ozellik talep etmek istiyorsaniz, [Sorunlar](https://github.com/Termix-SSH/Support/issues) sayfasini ziyaret edin, giris yapin ve `New Issue` butonuna basin. Lutfen sorununuzu mumkun oldugunca ayrintili yazin, tercihen Ingilizce olarak. Ayrica [Discord](https://discord.gg/jVQGdvHDrf) sunucusuna katilabilir ve destek kanalini ziyaret edebilirsiniz, ancak yanit sureleri daha uzun olabilir.
+
+<br />
+
+## Lisans
+
+Apache Lisansi Surumu 2.0 altinda dagitilmaktadir. Daha fazla bilgi icin `LICENSE` dosyasina bakin.

readme/README-VI.md

@@ -0,0 +1,357 @@
+<div align="center">
+
+<img src="../public/icon.svg" width="120" height="120" alt="Termix Logo" />
+
+<h1>Termix</h1>
+
+<p>Quan ly SSH tu luu tru va truy cap may tinh tu xa</p>
+
+<p>
+  <a href="../README.md">English</a> ·
+  <a href="README-CN.md">中文</a> ·
+  <a href="README-JA.md">日本語</a> ·
+  <a href="README-KO.md">한국어</a> ·
+  <a href="README-FR.md">Français</a> ·
+  <a href="README-DE.md">Deutsch</a> ·
+  <a href="README-ES.md">Español</a> ·
+  <a href="README-PT.md">Português</a> ·
+  <a href="README-RU.md">Русский</a> ·
+  <a href="README-AR.md">العربية</a> ·
+  <a href="README-HI.md">हिन्दी</a> ·
+  <a href="README-TR.md">Türkçe</a> ·
+  Tiếng Việt ·
+  <a href="README-IT.md">Italiano</a>
+</p>
+
+<p>
+  <img src="https://img.shields.io/github/stars/Termix-SSH/Termix?style=flat&label=Stars&color=F39044&labelColor=1a1a1a" />
+  <img src="https://img.shields.io/github/forks/Termix-SSH/Termix?style=flat&label=Forks&color=F39044&labelColor=1a1a1a" />
+  <img src="https://img.shields.io/github/v/release/Termix-SSH/Termix?style=flat&label=Release&color=F39044&labelColor=1a1a1a&v=1" />
+  <a href="https://discord.gg/jVQGdvHDrf"><img alt="Discord" src="https://img.shields.io/discord/1347374268253470720?color=F39044&labelColor=1a1a1a" /></a>
+</p>
+
+<br />
+
+<img src="../repo-images/Termix Header.png" alt="Termix Banner" width="900" />
+
+<br />
+<br />
+
+<p>
+  <img src="../repo-images/Repo of the Day.png" alt="Repo of the Day Achievement" width="280" />
+  <br />
+  <sub>Dat duoc vao ngay 1 thang 9 nam 2025</sub>
+</p>
+
+</div>
+
+<br />
+
+## Tong Quan
+
+Termix la nen tang quan ly may chu tat ca trong mot, ma nguon mo, mien phi vinh vien, tu luu tru. No cung cap giai phap da nen tang de quan ly may chu va co so ha tang cua ban thong qua mot giao dien truc quan duy nhat. Termix cung cap quyen truy cap terminal SSH, dieu khien may tinh tu xa (RDP, VNC, Telnet), kha nang tao duong ham SSH, quan ly tep SSH tu xa va nhieu cong cu khac. Termix la giai phap thay the mien phi va tu luu tru hoan hao cho Termius, kha dung tren tat ca cac nen tang.
+
+<br />
+
+## Tinh Nang
+
+<table>
+<tr>
+<td width="50%" valign="top">
+
+**Truy Cap Terminal SSH:**
+Terminal day du tinh nang voi ho tro chia man hinh (len den 4 bang) voi he thong tab kieu trinh duyet. Bao gom ho tro tuy chinh terminal bao gom cac chu de terminal pho bien, phong chu va cac thanh phan khac.
+
+</td>
+<td width="50%" valign="top">
+
+**Truy Cap Man Hinh Tu Xa:**
+Ho tro RDP, VNC va Telnet qua trinh duyet voi day du tuy chinh va chia man hinh.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**Quan Ly Duong Ham SSH:**
+Tao va quan ly duong ham SSH giua cac may chu voi tu dong ket noi lai, giam sat suc khoe va chuyen tiep cuc bo, tu xa hoac SOCKS dong. Cai dat duong ham tu may khach desktop den may chu duoc luu tru cuc bo cho moi ban cai dat desktop; cac snapshot C2S preset tuy chon co the duoc luu tren may chu, doi ten, tai hoac xoa de di chuyen cau hinh duong ham cuc bo giua cac may khach.
+
+</td>
+<td width="50%" valign="top">
+
+**Trinh Quan Ly Tep Tu Xa:**
+Quan ly tep truc tiep tren may chu tu xa voi ho tro xem va chinh sua ma, hinh anh, am thanh va video. Tai len, tai xuong, doi ten, xoa va di chuyen tep lien mach voi ho tro sudo.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**Quan Ly Docker:**
+Khoi dong, dung, tam dung, xoa container. Xem thong ke container. Dieu khien container bang terminal docker exec. Khong duoc tao ra de thay the Portainer hay Dockge ma don gian la de quan ly container cua ban thay vi tao moi chung.
+
+</td>
+<td width="50%" valign="top">
+
+**Trinh Quan Ly May Chu SSH:**
+Luu, sap xep va quan ly cac ket noi SSH cua ban voi the va thu muc, de dang luu thong tin dang nhap co the tai su dung dong thoi co the tu dong hoa viec trien khai khoa SSH.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**Thong Ke May Chu:**
+Xem muc su dung CPU, bo nho va o dia cung voi mang, thoi gian hoat dong, thong tin he thong, tuong lua, giam sat cong tren hau het cac may chu chay Linux.
+
+</td>
+<td width="50%" valign="top">
+
+**Xac Thuc Nguoi Dung:**
+Quan ly nguoi dung an toan voi quyen quan tri va ho tro OIDC (co kiem soat truy cap) va 2FA (TOTP). Xem phien hoat dong cua nguoi dung tren tat ca cac nen tang va thu hoi quyen. Lien ket tai khoan OIDC/Noi bo cua ban voi nhau.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**RBAC:**
+Tao vai tro va chia se may chu giua nguoi dung/vai tro.
+
+</td>
+<td width="50%" valign="top">
+
+**Ma Hoa Co So Du Lieu:**
+Backend duoc luu tru duoi dang tep co so du lieu SQLite duoc ma hoa. Xem [tai lieu](https://docs.termix.site/security) de biet them.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**Bieu Do Mang:**
+Tuy chinh Bang Dieu Khien de truc quan hoa homelab cua ban dua tren cac ket noi SSH voi ho tro trang thai.
+
+</td>
+<td width="50%" valign="top">
+
+**Cong Cu SSH:**
+Tao doan lenh co the tai su dung, thuc thi chi voi mot cu nhap chuot. Chay mot lenh dong thoi tren nhieu terminal dang mo.
+
+</td>
+</tr>
+<tr>
+<td width="50%" valign="top">
+
+**Tab Lien Tuc:**
+Cac phien SSH va tab van mo tren cac thiet bi/lan lam moi neu duoc bat trong ho so nguoi dung.
+
+</td>
+<td width="50%" valign="top">
+
+**Ngon Ngu:**
+Ho tro tich hop khoang 30 ngon ngu (duoc quan ly boi [Crowdin](https://docs.termix.site/translations)).
+
+</td>
+</tr>
+</table>
+
+<br />
+
+<details>
+<summary><b>Them tinh nang</b></summary>
+<br />
+
+- **Bang Dieu Khien** - Xem thong tin may chu trong nháy mat tren bang dieu khien cua ban
+- **Khoa API** - Tao khoa API theo pham vi nguoi dung voi ngay het han de su dung cho tu dong hoa/CI
+- **Xuat/Nhap Du Lieu** - Xuat va nhap may chu SSH, thong tin xac thuc va du lieu trinh quan ly tep
+- **Thiet Lap SSL Tu Dong** - Tao va quan ly chung chi SSL tich hop voi chuyen huong HTTPS
+- **Giao Dien Hien Dai** - Giao dien sach se, than thien voi may tinh/di dong duoc xay dung bang React, Tailwind CSS va Shadcn. Chon giua nhieu chu de UI khac nhau bao gom sang, toi, Dracula, v.v. Su dung duong dan URL de mo bat ky ket noi nao o che do toan man hinh.
+- **Lich Su Lenh** - Tu dong hoan thanh va xem cac lenh SSH da chay truoc do
+- **Ket Noi Nhanh** - Ket noi den may chu ma khong can luu du lieu ket noi
+- **Bang Lenh** - Nhan dup phim shift trai de truy cap nhanh cac ket noi SSH bang ban phim
+- **SSH Giau Tinh Nang** - Ho tro jump host, Warpgate, ket noi dua tren TOTP, SOCKS5, xac minh khoa may chu, tu dong dien mat khau, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, port knocking, v.v.
+
+</details>
+
+<br />
+
+## Ho Tro Nen Tang
+
+<table align="center">
+<tr>
+<th align="center">Nen tang</th>
+<th align="center">Phan phoi</th>
+</tr>
+<tr>
+<td align="center"><b>Web</b></td>
+<td>Bat ky trinh duyet hien dai nao (Chrome, Safari, Firefox) · Ho tro PWA</td>
+</tr>
+<tr>
+<td align="center"><b>Windows</b> <sub>x64/ia32</sub></td>
+<td>Portable · MSI Installer · Chocolatey</td>
+</tr>
+<tr>
+<td align="center"><b>Linux</b> <sub>x64/ia32</sub></td>
+<td>Portable · AUR · AppImage · Deb · Flatpak</td>
+</tr>
+<tr>
+<td align="center"><b>macOS</b> <sub>x64/ia32, v12.0+</sub></td>
+<td>Apple App Store · DMG · Homebrew</td>
+</tr>
+<tr>
+<td align="center"><b>iOS/iPadOS</b> <sub>v15.1+</sub></td>
+<td>Apple App Store · IPA</td>
+</tr>
+<tr>
+<td align="center"><b>Android</b> <sub>v7.0+</sub></td>
+<td>Google Play Store · APK</td>
+</tr>
+</table>
+
+<br />
+
+## Cai Dat
+
+Truy cap [Tai Lieu](https://docs.termix.site/install) Termix de biet them thong tin ve cach cai dat Termix tren tat ca cac nen tang. Ngoai ra, xem tep Docker Compose mau tai day (ban co the bo qua guacd va mang neu khong co y dinh su dung cac tinh nang dieu khien may tinh tu xa):
+
+```yaml
+services:
+  termix:
+    image: ghcr.io/lukegus/termix:latest
+    container_name: termix
+    restart: unless-stopped
+    ports:
+      - "8080:8080"
+    volumes:
+      - termix-data:/app/data
+    environment:
+      PORT: "8080"
+    depends_on:
+      - guacd
+    networks:
+      - termix-net
+
+  guacd:
+    image: guacamole/guacd:1.6.0
+    container_name: guacd
+    restart: unless-stopped
+    ports:
+      - "4822:4822"
+    networks:
+      - termix-net
+
+volumes:
+  termix-data:
+    driver: local
+
+networks:
+  termix-net:
+    driver: bridge
+```
+
+<br />
+
+## Anh Chup Man Hinh
+
+<div align="center">
+
+<br />
+
+[![YouTube](../repo-images/YouTube.png)](https://www.youtube.com/@TermixSSH/videos)
+
+<sub>Xem tong quan cap nhat tren YouTube</sub>
+
+<br />
+<br />
+
+<table>
+<tr>
+<td><img src="../repo-images/Image 1.png" alt="Termix Screenshot 1" width="400" /></td>
+<td><img src="../repo-images/Image 2.png" alt="Termix Screenshot 2" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 3.png" alt="Termix Screenshot 3" width="400" /></td>
+<td><img src="../repo-images/Image 4.png" alt="Termix Screenshot 4" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 5.png" alt="Termix Screenshot 5" width="400" /></td>
+<td><img src="../repo-images/Image 6.png" alt="Termix Screenshot 6" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 7.png" alt="Termix Screenshot 7" width="400" /></td>
+<td><img src="../repo-images/Image 8.png" alt="Termix Screenshot 8" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 9.png" alt="Termix Screenshot 9" width="400" /></td>
+<td><img src="../repo-images/Image 10.png" alt="Termix Screenshot 10" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 11.png" alt="Termix Screenshot 11" width="400" /></td>
+<td><img src="../repo-images/Image 12.png" alt="Termix Screenshot 12" width="400" /></td>
+</tr>
+<tr>
+<td><img src="../repo-images/Image 13.png" alt="Termix Screenshot 13" width="400" /></td>
+<td><img src="../repo-images/Image 14.png" alt="Termix Screenshot 14" width="400" /></td>
+</tr>
+</table>
+
+<sub>Mot so video va hinh anh co the da loi thoi hoac khong the hien chinh xac hoan toan cac tinh nang.</sub>
+
+</div>
+
+<br />
+
+## Tinh Nang Du Kien
+
+Xem [Du An](https://github.com/orgs/Termix-SSH/projects/2) de biet tat ca cac tinh nang du kien. Neu ban muon dong gop, xem [Dong Gop](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md).
+
+<br />
+
+## Nha Tai Tro
+
+<div align="center">
+
+<br />
+
+<a href="https://www.digitalocean.com/">
+  <img src="https://opensource.nyc3.cdn.digitaloceanspaces.com/attribution/assets/SVG/DO_Logo_horizontal_blue.svg" height="40" alt="DigitalOcean" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://crowdin.com/">
+  <img src="https://support.crowdin.com/assets/logos/core-logo/svg/crowdin-core-logo-cDark.svg" height="40" alt="Crowdin" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://www.blacksmith.sh/">
+  <img src="https://cdn.prod.website-files.com/681bfb0c9a4601bc6e288ec4/683ca9e2c5186757092611b8_e8cb22127df4da0811c4120a523722d2_logo-backsmith-wordmark-light.svg" height="40" alt="Blacksmith" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://www.cloudflare.com/">
+  <img src="https://sirv.sirv.com/website/screenshots/cloudflare/cloudflare-logo.png?w=300" height="40" alt="Cloudflare" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://tailscale.com/">
+  <img src="https://drive.google.com/uc?export=view&id=1lIxkJuX6M23bW-2FElhT0rQieTrzaVSL" height="40" alt="Tailscale" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://akamai.com/">
+  <img src="https://upload.wikimedia.org/wikipedia/commons/8/8b/Akamai_logo.svg" height="40" alt="Akamai" />
+</a>
+&nbsp;&nbsp;&nbsp;
+<a href="https://aws.amazon.com/">
+  <img src="https://upload.wikimedia.org/wikipedia/commons/thumb/9/93/Amazon_Web_Services_Logo.svg/960px-Amazon_Web_Services_Logo.svg.png" height="40" alt="AWS" />
+</a>
+
+</div>
+
+<br />
+
+## Ho Tro
+
+Neu ban can tro giup hoac muon yeu cau tinh nang voi Termix, hay truy cap trang [Van De](https://github.com/Termix-SSH/Support/issues), dang nhap va nhan `New Issue`. Vui long mo ta van de cang chi tiet cang tot, uu tien viet bang tieng Anh. Ban cung co the tham gia may chu [Discord](https://discord.gg/jVQGdvHDrf) va truy cap kenh ho tro, tuy nhien thoi gian phan hoi co the lau hon.
+
+<br />
+
+## Giay Phep
+
+Duoc phan phoi theo Giay Phep Apache Phien Ban 2.0. Xem `LICENSE` de biet them thong tin.

scripts/generate-icons.mjs

@@ -0,0 +1,133 @@
+import sharp from "sharp";
+import { readFileSync, writeFileSync, mkdirSync } from "fs";
+import { join, dirname } from "path";
+import { fileURLToPath } from "url";
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const root = join(__dirname, "..");
+const publicDir = join(root, "public");
+const iconsDir = join(publicDir, "icons");
+
+mkdirSync(iconsDir, { recursive: true });
+
+const svgBuffer = readFileSync(join(publicDir, "icon.svg"));
+
+const pngSizes = [16, 24, 32, 48, 64, 128, 256, 512, 1024];
+
+console.log("Generating PNG icons...");
+await Promise.all(
+  pngSizes.map((size) =>
+    sharp(svgBuffer)
+      .resize(size, size)
+      .png()
+      .toFile(join(iconsDir, `${size}x${size}.png`))
+      .then(() => console.log(`  ✓ icons/${size}x${size}.png`)),
+  ),
+);
+
+// icon.png (1024x1024) for Linux electron-builder
+await sharp(svgBuffer)
+  .resize(1024, 1024)
+  .png()
+  .toFile(join(publicDir, "icon.png"));
+console.log("  ✓ icon.png");
+
+// icon-mac.png (512x512) for macOS
+await sharp(svgBuffer)
+  .resize(512, 512)
+  .png()
+  .toFile(join(publicDir, "icon-mac.png"));
+console.log("  ✓ icon-mac.png");
+
+// full-icon.png (1024x1024) used in app UI
+await sharp(svgBuffer)
+  .resize(1024, 1024)
+  .png()
+  .toFile(join(publicDir, "full-icon.png"));
+console.log("  ✓ full-icon.png");
+
+// favicon.ico — embed 16, 32, 48 px layers
+console.log("Generating favicon.ico...");
+const icoSizes = [16, 32, 48];
+const icoBuffers = await Promise.all(
+  icoSizes.map((size) => sharp(svgBuffer).resize(size, size).png().toBuffer()),
+);
+writeFileSync(join(publicDir, "favicon.ico"), buildIco(icoBuffers, icoSizes));
+console.log("  ✓ favicon.ico");
+
+// icon.ico — embed 16, 32, 48, 64, 128, 256 px layers
+console.log("Generating icon.ico...");
+const winSizes = [16, 32, 48, 64, 128, 256];
+const winBuffers = await Promise.all(
+  winSizes.map((size) => sharp(svgBuffer).resize(size, size).png().toBuffer()),
+);
+writeFileSync(join(publicDir, "icon.ico"), buildIco(winBuffers, winSizes));
+console.log("  ✓ icon.ico");
+
+// icons/icon.ico and icons/icon.icns placeholders (stubs pointing to source)
+// electron-builder generates .icns; copy the 1024 PNG as icons/icon.png for reference
+await sharp(svgBuffer)
+  .resize(1024, 1024)
+  .png()
+  .toFile(join(iconsDir, "icon.ico").replace("icon.ico", "1024x1024.png"));
+// Copy icon.ico and icon.icns into icons/ as well
+import { copyFileSync } from "fs";
+copyFileSync(join(publicDir, "icon.ico"), join(iconsDir, "icon.ico"));
+console.log("  ✓ icons/icon.ico");
+
+console.log(
+  "\nDone! Note: icon.icns requires macOS tools (iconutil). Use electron-builder on macOS to generate it.",
+);
+
+/**
+ * Builds a minimal ICO file from PNG buffers.
+ * @param {Buffer[]} pngBuffers
+ * @param {number[]} sizes
+ * @returns {Buffer}
+ */
+function buildIco(pngBuffers, sizes) {
+  const count = pngBuffers.length;
+  const headerSize = 6;
+  const dirEntrySize = 16;
+  const dirSize = headerSize + count * dirEntrySize;
+
+  let offset = dirSize;
+  const entries = pngBuffers.map((buf, i) => {
+    const size = sizes[i];
+    const entry = {
+      size,
+      width: size > 255 ? 0 : size,
+      height: size > 255 ? 0 : size,
+      buf,
+      offset,
+    };
+    offset += buf.length;
+    return entry;
+  });
+
+  const totalSize = offset;
+  const ico = Buffer.alloc(totalSize);
+
+  // ICO header
+  ico.writeUInt16LE(0, 0); // reserved
+  ico.writeUInt16LE(1, 2); // type: 1 = ICO
+  ico.writeUInt16LE(count, 4); // image count
+
+  // Directory entries
+  entries.forEach((e, i) => {
+    const base = headerSize + i * dirEntrySize;
+    ico.writeUInt8(e.width, base); // width (0 = 256)
+    ico.writeUInt8(e.height, base + 1); // height (0 = 256)
+    ico.writeUInt8(0, base + 2); // color count
+    ico.writeUInt8(0, base + 3); // reserved
+    ico.writeUInt16LE(1, base + 4); // planes
+    ico.writeUInt16LE(32, base + 6); // bit count
+    ico.writeUInt32LE(e.buf.length, base + 8); // size of image data
+    ico.writeUInt32LE(e.offset, base + 12); // offset of image data
+  });
+
+  // Image data
+  entries.forEach((e) => e.buf.copy(ico, e.offset));
+
+  return ico;
+}

scripts/patch-app-builder-lib.cjs

@@ -0,0 +1,197 @@
+const fs = require("node:fs");
+const path = require("node:path");
+
+const collectorPath = path.join(
+  __dirname,
+  "..",
+  "node_modules",
+  "app-builder-lib",
+  "out",
+  "node-module-collector",
+  "nodeModulesCollector.js",
+);
+
+const appFileCopierPath = path.join(
+  __dirname,
+  "..",
+  "node_modules",
+  "app-builder-lib",
+  "out",
+  "util",
+  "appFileCopier.js",
+);
+
+const moduleManagerPath = path.join(
+  __dirname,
+  "..",
+  "node_modules",
+  "app-builder-lib",
+  "out",
+  "node-module-collector",
+  "moduleManager.js",
+);
+
+function patchFile(filePath, replacements) {
+  if (!fs.existsSync(filePath)) {
+    return;
+  }
+
+  let source = fs.readFileSync(filePath, "utf8");
+  let changed = false;
+
+  for (const { original, patched, name, alreadyPatched = [] } of replacements) {
+    if (
+      source.includes(patched) ||
+      alreadyPatched.some((marker) => source.includes(marker))
+    ) {
+      continue;
+    }
+
+    if (!source.includes(original)) {
+      console.warn(
+        `app-builder-lib patch "${name}" was not applied; expected source was not found.`,
+      );
+      continue;
+    }
+
+    source = source.replace(original, patched);
+    changed = true;
+  }
+
+  if (changed) {
+    fs.writeFileSync(filePath, source);
+  }
+}
+
+patchFile(collectorPath, [
+  {
+    name: "node module collector spawn shell",
+    original: `                shell: true, // \`true\`\` is now required: https://github.com/electron-userland/electron-builder/issues/9488`,
+    patched: `                shell: false, // Avoid Node DEP0190; .cmd files are wrapped through cmd.exe above.`,
+  },
+  {
+    name: "node module collector output flush",
+    alreadyPatched: [
+      `                    outStream.end();
+                }`,
+    ],
+    original: `                outStream.close();
+                // https://github.com/npm/npm/issues/17624
+                const shouldIgnore = code === 1 && "npm" === execName.toLowerCase() && args.includes("list");
+                if (shouldIgnore) {
+                    builder_util_1.log.debug(null, "\`npm list\` returned non-zero exit code, but it MIGHT be expected (https://github.com/npm/npm/issues/17624). Check stderr for details.");
+                }
+                if (stderr.length > 0) {
+                    builder_util_1.log.debug({ stderr }, "note: there was node module collector output on stderr");
+                    this.cache.logSummary[moduleManager_1.LogMessageByKey.PKG_COLLECTOR_OUTPUT].push(stderr);
+                }
+                const shouldResolve = code === 0 || shouldIgnore;
+                return shouldResolve ? resolve() : reject(new Error(\`Node module collector process exited with code \${code}:\\n\${stderr}\`));`,
+    patched: `                const finish = () => {
+                    // https://github.com/npm/npm/issues/17624
+                    const shouldIgnore = code === 1 && "npm" === execName.toLowerCase() && args.includes("list");
+                    if (shouldIgnore) {
+                        builder_util_1.log.debug(null, "\`npm list\` returned non-zero exit code, but it MIGHT be expected (https://github.com/npm/npm/issues/17624). Check stderr for details.");
+                    }
+                    if (stderr.length > 0) {
+                        builder_util_1.log.debug({ stderr }, "note: there was node module collector output on stderr");
+                        this.cache.logSummary[moduleManager_1.LogMessageByKey.PKG_COLLECTOR_OUTPUT].push(stderr);
+                    }
+                    const shouldResolve = code === 0 || shouldIgnore;
+                    return shouldResolve ? resolve() : reject(new Error(\`Node module collector process exited with code \${code}:\\n\${stderr}\`));
+                };
+                if (outStream.writableFinished) {
+                    finish();
+                }
+                else {
+                    outStream.once("finish", finish);
+                    outStream.end();
+                }`,
+  },
+  {
+    name: "node module collector finish guard",
+    original: `                if (outStream.writableFinished || outStream.closed) {`,
+    patched: `                if (outStream.writableFinished) {`,
+  },
+]);
+
+patchFile(moduleManagerPath, [
+  {
+    name: "node module collector npm alias resolution",
+    original: `    semverSatisfies(found, range) {
+        if ((0, builder_util_1.isEmptyOrSpaces)(range) || range === "*") {`,
+    patched: `    semverSatisfies(found, range, packageNameMatches = true) {
+        if (!packageNameMatches) {
+            return true;
+        }
+        if ((0, builder_util_1.isEmptyOrSpaces)(range) || range === "*") {`,
+  },
+  {
+    name: "node module collector direct alias match",
+    original: `            if (json && this.semverSatisfies(json.version, requiredRange)) {
+                return { packageDir: path.dirname(direct), packageJson: json };
+            }`,
+    patched: `            if (json && this.semverSatisfies(json.version, requiredRange, json.name === pkgName)) {
+                return { packageDir: path.dirname(direct), packageJson: json };
+            }`,
+  },
+  {
+    name: "node module collector alias match",
+    original: `                if (json && this.semverSatisfies(json.version, requiredRange)) {
+                    return { packageDir: path.dirname(candidate), packageJson: json };
+                }`,
+    patched: `                if (json && this.semverSatisfies(json.version, requiredRange, json.name === pkgName)) {
+                    return { packageDir: path.dirname(candidate), packageJson: json };
+                }`,
+  },
+  {
+    name: "node module collector scoped alias match",
+    original: `                                if (json && this.semverSatisfies(json.version, requiredRange)) {
+                                    return { packageDir: path.dirname(candidatePkgJson), packageJson: json };
+                                }`,
+    patched: `                                if (json && this.semverSatisfies(json.version, requiredRange, json.name === pkgName)) {
+                                    return { packageDir: path.dirname(candidatePkgJson), packageJson: json };
+                                }`,
+  },
+  {
+    name: "node module collector nested alias match",
+    original: `                    if (json && this.semverSatisfies(json.version, requiredRange)) {
+                        return { packageDir: path.dirname(candidatePkgJson), packageJson: json };
+                    }`,
+    patched: `                    if (json && this.semverSatisfies(json.version, requiredRange, json.name === pkgName)) {
+                        return { packageDir: path.dirname(candidatePkgJson), packageJson: json };
+                    }`,
+  },
+  {
+    name: "node module collector nested direct alias match",
+    original: `                    if (json && this.semverSatisfies(json.version, requiredRange)) {
+                        return { packageDir: path.dirname(candidateDirect), packageJson: json };
+                    }`,
+    patched: `                    if (json && this.semverSatisfies(json.version, requiredRange, json.name === pkgName)) {
+                        return { packageDir: path.dirname(candidateDirect), packageJson: json };
+                    }`,
+  },
+]);
+
+patchFile(appFileCopierPath, [
+  {
+    name: "node module collector fallback",
+    original: `            const collector = (0, node_module_collector_1.getCollectorByPackageManager)(pm, dir, tempDirManager);
+            deps = await collector.getNodeModules({ packageName: packager.metadata.name });
+            if (deps.nodeModules.length > 0) {`,
+    patched: `            const collector = (0, node_module_collector_1.getCollectorByPackageManager)(pm, dir, tempDirManager);
+            try {
+                deps = await collector.getNodeModules({ packageName: packager.metadata.name });
+            }
+            catch (error) {
+                const isLastSearchDirectory = searchDirectories.indexOf(dir) >= searchDirectories.length - 1;
+                const isLastPackageManager = pmApproaches.indexOf(pm) >= pmApproaches.length - 1;
+                if (isLastSearchDirectory && isLastPackageManager) {
+                    throw error;
+                }
+                builder_util_1.log.warn({ pm, searchDir: dir, error: error instanceof Error ? error.message : String(error) }, "node modules collection failed, trying fallback");
+                continue;
+            }
+            if (deps.nodeModules.length > 0) {`,
+  },
+]);

scripts/patch-better-sqlite3.cjs

@@ -0,0 +1,106 @@
+const fs = require("node:fs");
+const path = require("node:path");
+
+const betterSqlite3Dir = path.join(
+  __dirname,
+  "..",
+  "node_modules",
+  "better-sqlite3",
+);
+const macrosPath = path.join(betterSqlite3Dir, "src", "util", "macros.cpp");
+const helpersPath = path.join(betterSqlite3Dir, "src", "util", "helpers.cpp");
+const entryPath = path.join(betterSqlite3Dir, "src", "better_sqlite3.cpp");
+
+function patchFile(filePath, replacements) {
+  if (!fs.existsSync(filePath)) {
+    return false;
+  }
+
+  let source = fs.readFileSync(filePath, "utf8");
+  let changed = false;
+
+  for (const { original, patched } of replacements) {
+    if (source.includes(patched)) {
+      continue;
+    }
+    if (!source.includes(original)) {
+      continue;
+    }
+    source = source.replace(original, patched);
+    changed = true;
+  }
+
+  if (changed) {
+    fs.writeFileSync(filePath, source);
+  }
+
+  return changed;
+}
+
+if (!fs.existsSync(betterSqlite3Dir)) {
+  console.log("[patch-better-sqlite3] better-sqlite3 not found, skipping");
+  process.exit(0);
+}
+
+const macrosPatched = patchFile(macrosPath, [
+  {
+    original: `#define OnlyContext isolate->GetCurrentContext()
+#define OnlyAddon static_cast<Addon*>(info.Data().As<v8::External>()->Value())
+#define UseIsolate v8::Isolate* isolate = OnlyIsolate`,
+    patched: `#define OnlyContext isolate->GetCurrentContext()
+#if defined(V8_MAJOR_VERSION) && V8_MAJOR_VERSION >= 14
+#define BETTER_SQLITE3_EXTERNAL_POINTER_TAG static_cast<v8::ExternalPointerTypeTag>(0)
+#define EXTERNAL_VALUE(external) ((external)->Value(BETTER_SQLITE3_EXTERNAL_POINTER_TAG))
+#define EXTERNAL_NEW(isolate, value) v8::External::New((isolate), (value), BETTER_SQLITE3_EXTERNAL_POINTER_TAG)
+#else
+#define EXTERNAL_VALUE(external) ((external)->Value())
+#define EXTERNAL_NEW(isolate, value) v8::External::New((isolate), (value))
+#endif
+#define OnlyAddon static_cast<Addon*>(EXTERNAL_VALUE(info.Data().As<v8::External>()))
+#define UseIsolate v8::Isolate* isolate = OnlyIsolate`,
+  },
+]);
+
+const helpersPatched = patchFile(helpersPath, [
+  {
+    original: `\trecv->InstanceTemplate()->SetNativeDataProperty(
+\t\tInternalizedFromLatin1(isolate, name),
+\t\tfunc,
+\t\t0,
+\t\tdata
+\t);`,
+    patched: `\trecv->InstanceTemplate()->SetNativeDataProperty(
+\t\tInternalizedFromLatin1(isolate, name),
+\t\tfunc,
+\t\tstatic_cast<v8::AccessorNameSetterCallback>(nullptr),
+\t\tdata
+\t);`,
+  },
+]);
+
+const entryPatched = patchFile(entryPath, [
+  {
+    original: `#include <sqlite3.h>
+#include <node.h>`,
+    patched: `#include <sqlite3.h>
+#if defined(_MSC_VER) && !defined(__clang__) && !defined(__builtin_frame_address)
+#include <intrin.h>
+#define __builtin_frame_address(level) _AddressOfReturnAddress()
+#endif
+#include <node.h>`,
+  },
+  {
+    original: `\tv8::Local<v8::External> data = v8::External::New(isolate, addon);`,
+    patched: `\tv8::Local<v8::External> data = EXTERNAL_NEW(isolate, addon);`,
+  },
+]);
+
+if (macrosPatched || helpersPatched || entryPatched) {
+  console.log(
+    "[patch-better-sqlite3] Applied compatibility patches for newer Electron/V8",
+  );
+} else {
+  console.log(
+    "[patch-better-sqlite3] Already patched or target code not found",
+  );
+}

scripts/patch-guacamole-lite.cjs

@@ -0,0 +1,57 @@
+const fs = require("fs");
+const path = require("path");
+
+const filePath = path.join(
+  __dirname,
+  "..",
+  "node_modules",
+  "guacamole-lite",
+  "lib",
+  "GuacdClient.js",
+);
+
+if (!fs.existsSync(filePath)) {
+  console.log("[patch-guacamole-lite] File not found, skipping");
+  process.exit(0);
+}
+
+let content = fs.readFileSync(filePath, "utf8");
+
+// Patch 1: version acceptance list
+const oldVersionCheck = "if (version === '1_0_0' || version === '1_1_0') {";
+const newVersionCheck =
+  "if (version === '1_0_0' || version === '1_1_0' || version === '1_3_0' || version === '1_5_0') {";
+
+// Patch 2: timezone instruction must be sent for all protocols >= 1.1.0, not just 1.1.0
+const oldTimezone = "if (protocolVersion === '1_1_0') {";
+const newTimezone = "if (protocolVersion !== '1_0_0') {";
+
+let patched = false;
+
+if (!content.includes(newVersionCheck)) {
+  if (!content.includes(oldVersionCheck)) {
+    console.log("[patch-guacamole-lite] Version check target not found, skipping");
+    process.exit(0);
+  }
+  content = content.replace(oldVersionCheck, newVersionCheck);
+  patched = true;
+}
+
+if (!content.includes(newTimezone)) {
+  if (!content.includes(oldTimezone)) {
+    console.log("[patch-guacamole-lite] Timezone target not found, skipping");
+    process.exit(0);
+  }
+  content = content.replace(oldTimezone, newTimezone);
+  patched = true;
+}
+
+if (!patched) {
+  console.log("[patch-guacamole-lite] Already patched");
+  process.exit(0);
+}
+
+fs.writeFileSync(filePath, content);
+console.log(
+  "[patch-guacamole-lite] Patched to support protocol VERSION_1_3_0 and VERSION_1_5_0 with correct timezone handshake",
+);

scripts/patch-nan.cjs

@@ -0,0 +1,121 @@
+const fs = require("node:fs");
+const path = require("node:path");
+
+const nanDir = path.join(__dirname, "..", "node_modules", "nan");
+
+if (!fs.existsSync(nanDir)) {
+  console.log("[patch-nan] nan not found, skipping");
+  process.exit(0);
+}
+
+function patchFile(filePath, replacements) {
+  if (!fs.existsSync(filePath)) return false;
+
+  let source = fs.readFileSync(filePath, "utf8");
+  let changed = false;
+
+  for (const { original, patched } of replacements) {
+    if (source.includes(patched)) continue;
+    if (!source.includes(original)) continue;
+    source = source.replace(original, patched);
+    changed = true;
+  }
+
+  if (changed) fs.writeFileSync(filePath, source);
+  return changed;
+}
+
+// 1. nan.h: inject MSVC __builtin_frame_address compat before node.h is included.
+const nanHeaderPatched = patchFile(path.join(nanDir, "nan.h"), [
+  {
+    original: `#include <node_version.h>
+
+#define NODE_0_10_MODULE_VERSION 11`,
+    patched: `#include <node_version.h>
+
+// MSVC lacks __builtin_frame_address; cppgc/heap.h (pulled by node.h) uses it.
+#if defined(_MSC_VER) && !defined(__clang__) && !defined(__builtin_frame_address)
+# include <intrin.h>
+# define __builtin_frame_address(level) _AddressOfReturnAddress()
+#endif
+
+#define NODE_0_10_MODULE_VERSION 11`,
+  },
+]);
+
+// cpu-features binding.cc includes <node.h> before <nan.h>, so the nan.h patch
+// above is too late. Patch binding.cc directly to inject the compat define first.
+const cpuFeaturesDir = path.join(
+  __dirname,
+  "..",
+  "node_modules",
+  "cpu-features",
+);
+const bindingPath = path.join(cpuFeaturesDir, "src", "binding.cc");
+const bindingPatched = patchFile(bindingPath, [
+  {
+    original: `#include <node.h>`,
+    patched: `#if defined(_MSC_VER) && !defined(__clang__) && !defined(__builtin_frame_address)
+#include <intrin.h>
+#define __builtin_frame_address(level) _AddressOfReturnAddress()
+#endif
+#include <node.h>`,
+  },
+]);
+
+// 2. nan_implementation_12_inl.h: replace v8::External::New() with the 3-arg form.
+//    Electron 42 / V8 13+ requires an ExternalPointerTypeTag as the third argument.
+const implPath = path.join(nanDir, "nan_implementation_12_inl.h");
+let implPatched = false;
+if (fs.existsSync(implPath)) {
+  let src = fs.readFileSync(implPath, "utf8");
+  const before = src;
+
+  const TAG = "static_cast<v8::ExternalPointerTypeTag>(0)";
+  if (!src.includes(TAG)) {
+    src = src.replace(
+      /v8::External::New\(v8::Isolate::GetCurrent\(\),\s*value\)/g,
+      `v8::External::New(v8::Isolate::GetCurrent(), value, ${TAG})`,
+    );
+    src = src.replace(
+      /v8::External::New\(isolate,\s*reinterpret_cast<void \*>\(callback\)\)/g,
+      `v8::External::New(isolate, reinterpret_cast<void *>(callback), ${TAG})`,
+    );
+  }
+
+  if (src !== before) {
+    fs.writeFileSync(implPath, src);
+    implPatched = true;
+  }
+}
+
+// 3. nan_callbacks_12_inl.h: replace ->Value() with ->Value(tag) on v8::External.
+//    The new API requires an ExternalPointerTypeTag argument.
+const callbacksPath = path.join(nanDir, "nan_callbacks_12_inl.h");
+let callbacksPatched = false;
+if (fs.existsSync(callbacksPath)) {
+  let src = fs.readFileSync(callbacksPath, "utf8");
+  const before = src;
+
+  const TAG = "static_cast<v8::ExternalPointerTypeTag>(0)";
+  if (!src.includes(TAG)) {
+    // Pattern: .As<v8::External>()->Value()) — always followed by ))
+    src = src.replace(
+      /\.As<v8::External>\(\)->Value\(\)\)/g,
+      `.As<v8::External>()->Value(${TAG}))`,
+    );
+  }
+
+  if (src !== before) {
+    fs.writeFileSync(callbacksPath, src);
+    callbacksPatched = true;
+  }
+}
+
+if (nanHeaderPatched || bindingPatched || implPatched || callbacksPatched) {
+  console.log(
+    "[patch-nan] Applied compatibility patches for Electron 42 / V8 13+",
+  );
+} else {
+  console.log("[patch-nan] Already patched or target code not found");
+}

scripts/write-electron-build-info.cjs

@@ -0,0 +1,24 @@
+const fs = require("fs");
+const path = require("path");
+
+const outputPath = path.join(__dirname, "..", "electron", "build-info.cjs");
+const rawBuildTimestamp =
+  process.env.TERMIX_BUILD_TIMESTAMP || process.env.BUILD_TIMESTAMP;
+const parsedBuildTimestamp = rawBuildTimestamp
+  ? Number(rawBuildTimestamp)
+  : NaN;
+const buildTimestamp = Number.isInteger(parsedBuildTimestamp)
+  ? parsedBuildTimestamp
+  : Math.floor(Date.now() / 1000);
+const buildInfo = {
+  buildTimestamp,
+  generatedAt: new Date().toISOString(),
+};
+
+fs.mkdirSync(path.dirname(outputPath), { recursive: true });
+fs.writeFileSync(
+  outputPath,
+  `module.exports = ${JSON.stringify(buildInfo, null, 2)};\n`,
+);
+
+console.log(`Wrote Electron build info: ${buildTimestamp}`);

src/backend/dashboard.ts

@@ -1,14 +1,14 @@
 import express from "express";
-import cors from "cors";
 import cookieParser from "cookie-parser";
+import { createCorsMiddleware } from "./utils/cors-config.js";
 import { getDb, DatabaseSaveTrigger } from "./database/db/index.js";
 import {
   recentActivity,
-  sshData,
+  hosts,
   hostAccess,
   dashboardPreferences,
 } from "./database/db/schema.js";
-import { eq, and, desc, or, sql } from "drizzle-orm";
+import { eq, and, desc, sql, inArray } from "drizzle-orm";
 import { dashboardLogger } from "./utils/logger.js";
 import { SimpleDBOps } from "./utils/simple-db-ops.js";
 import { AuthManager } from "./utils/auth-manager.js";
@@ -22,39 +22,13 @@ const serverStartTime = Date.now();
 const activityRateLimiter = new Map<string, number>();
 const RATE_LIMIT_MS = 1000;
 
-app.use(
-  cors({
-    origin: (origin, callback) => {
-      if (!origin) return callback(null, true);
-
-      const allowedOrigins = ["http://localhost:5173", "http://127.0.0.1:5173"];
-
-      if (allowedOrigins.includes(origin)) {
-        return callback(null, true);
-      }
-
-      if (origin.startsWith("https://")) {
-        return callback(null, true);
-      }
-
-      if (origin.startsWith("http://")) {
-        return callback(null, true);
-      }
-
-      callback(new Error("Not allowed by CORS"));
-    },
-    credentials: true,
-    methods: ["GET", "POST", "PUT", "PATCH", "DELETE", "OPTIONS"],
-    allowedHeaders: [
-      "Content-Type",
-      "Authorization",
-      "User-Agent",
-      "X-Electron-App",
-    ],
-  }),
-);
+app.use(createCorsMiddleware());
 app.use(cookieParser());
 app.use(express.json({ limit: "1mb" }));
+app.use((_req, res, next) => {
+  res.setHeader("Cache-Control", "no-store");
+  next();
+});
 
 app.use(authManager.createAuthMiddleware());
 
@@ -85,9 +59,6 @@ app.use(authManager.createAuthMiddleware());
  */
 app.get("/uptime", async (req, res) => {
   try {
-    const startTime = Date.now();
-    const userId = (req as AuthenticatedRequest).userId;
-
     const uptimeMs = Date.now() - serverStartTime;
     const uptimeSeconds = Math.floor(uptimeMs / 1000);
     const days = Math.floor(uptimeSeconds / 86400);
@@ -175,7 +146,7 @@ app.get("/activity/recent", async (req, res) => {
  *             properties:
  *               type:
  *                 type: string
- *                 enum: [terminal, file_manager, server_stats, tunnel, docker]
+ *                 enum: [terminal, file_manager, server_stats, tunnel, docker, telnet, vnc, rdp]
  *               hostId:
  *                 type: integer
  *               hostName:
@@ -218,11 +189,14 @@ app.post("/activity/log", async (req, res) => {
         "server_stats",
         "tunnel",
         "docker",
+        "telnet",
+        "vnc",
+        "rdp",
       ].includes(type)
     ) {
       return res.status(400).json({
         error:
-          "Invalid activity type. Must be 'terminal', 'file_manager', 'server_stats', 'tunnel', or 'docker'",
+          "Invalid activity type. Must be 'terminal', 'file_manager', 'server_stats', 'tunnel', 'docker', 'telnet', 'vnc', or 'rdp'",
       });
     }
 
@@ -251,8 +225,8 @@ app.post("/activity/log", async (req, res) => {
     const ownedHosts = await SimpleDBOps.select(
       getDb()
         .select()
-        .from(sshData)
-        .where(and(eq(sshData.id, hostId), eq(sshData.userId, userId))),
+        .from(hosts)
+        .where(and(eq(hosts.id, hostId), eq(hosts.userId, userId))),
       "ssh_data",
       userId,
     );
@@ -284,21 +258,48 @@ app.post("/activity/log", async (req, res) => {
       userId,
     )) as unknown as { id: number };
 
-    const allActivities = await SimpleDBOps.select(
-      getDb()
-        .select()
-        .from(recentActivity)
-        .where(eq(recentActivity.userId, userId))
-        .orderBy(desc(recentActivity.timestamp)),
-      "recent_activity",
-      userId,
-    );
+    // Best-effort trim of old activity entries; failures here should not
+    // cause the primary /activity/log request to 500.
+    try {
+      const allActivities = await SimpleDBOps.select<{
+        id: number;
+        timestamp: string;
+      }>(
+        getDb()
+          .select({
+            id: recentActivity.id,
+            timestamp: recentActivity.timestamp,
+          })
+          .from(recentActivity)
+          .where(eq(recentActivity.userId, userId))
+          .orderBy(desc(recentActivity.timestamp)),
+        "recent_activity",
+        userId,
+      );
 
-    if (allActivities.length > 100) {
-      const toDelete = allActivities.slice(100);
-      for (const activity of toDelete) {
-        await SimpleDBOps.delete(recentActivity, "recent_activity", userId);
+      if (allActivities.length > 100) {
+        const idsToDelete = allActivities
+          .slice(100)
+          .map((a) => a.id)
+          .filter((id) => typeof id === "number");
+
+        if (idsToDelete.length > 0) {
+          await SimpleDBOps.delete(
+            recentActivity,
+            "recent_activity",
+            and(
+              eq(recentActivity.userId, userId),
+              inArray(recentActivity.id, idsToDelete),
+            ),
+          );
+        }
       }
+    } catch (trimErr) {
+      dashboardLogger.warn("Failed to trim recent_activity (non-fatal)", {
+        operation: "trim_recent_activity",
+        userId,
+        error: trimErr instanceof Error ? trimErr.message : String(trimErr),
+      });
     }
 
     res.json({ message: "Activity logged", id: result.id });
@@ -469,7 +470,7 @@ app.post("/dashboard/preferences", async (req, res) => {
       });
     }
 
-    const { cards } = req.body;
+    const { cards, mainWidthPct } = req.body;
 
     if (!cards || !Array.isArray(cards)) {
       return res.status(400).json({
@@ -477,7 +478,11 @@ app.post("/dashboard/preferences", async (req, res) => {
       });
     }
 
-    const layout = JSON.stringify({ cards });
+    const layoutObj: Record<string, unknown> = { cards };
+    if (typeof mainWidthPct === "number") {
+      layoutObj.mainWidthPct = mainWidthPct;
+    }
+    const layout = JSON.stringify(layoutObj);
 
     const existing = await getDb()
       .select()

src/backend/database/database.ts

@@ -1,17 +1,21 @@
 import express from "express";
+import http from "http";
 import bodyParser from "body-parser";
 import multer from "multer";
 import cookieParser from "cookie-parser";
 import userRoutes from "./routes/users.js";
-import sshRoutes from "./routes/ssh.js";
+import hostRoutes from "./routes/host.js";
 import alertRoutes from "./routes/alerts.js";
 import credentialsRoutes from "./routes/credentials.js";
 import snippetsRoutes from "./routes/snippets.js";
+import c2sTunnelPresetRoutes from "./routes/c2s-tunnel-presets.js";
 import terminalRoutes from "./routes/terminal.js";
+import guacamoleRoutes from "../guacamole/routes.js";
 import networkTopologyRoutes from "./routes/network-topology.js";
 import rbacRoutes from "./routes/rbac.js";
-import cors from "cors";
-import fetch from "node-fetch";
+import openTabsRoutes from "./routes/open-tabs.js";
+import userPreferencesRoutes from "./routes/user-preferences.js";
+import { createCorsMiddleware } from "../utils/cors-config.js";
 import fs from "fs";
 import path from "path";
 import os from "os";
@@ -28,7 +32,7 @@ import { parseUserAgent } from "../utils/user-agent-parser.js";
 import { getProxyAgent } from "../utils/proxy-agent.js";
 import {
   users,
-  sshData,
+  hosts,
   sshCredentials,
   fileManagerRecent,
   fileManagerPinned,
@@ -45,6 +49,10 @@ import type {
 } from "../../types/index.js";
 import { getDb, DatabaseSaveTrigger } from "./db/index.js";
 import Database from "better-sqlite3";
+import { fileURLToPath } from "url";
+
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
 
 const app = express();
 
@@ -53,43 +61,13 @@ app.set("trust proxy", true);
 const authManager = AuthManager.getInstance();
 const authenticateJWT = authManager.createAuthMiddleware();
 const requireAdmin = authManager.createAdminMiddleware();
-app.use(
-  cors({
-    origin: (origin, callback) => {
-      if (!origin) return callback(null, true);
+app.use(createCorsMiddleware());
 
-      const allowedOrigins = ["http://localhost:5173", "http://127.0.0.1:5173"];
-
-      if (allowedOrigins.includes(origin)) {
-        return callback(null, true);
-      }
-
-      if (origin.startsWith("https://")) {
-        return callback(null, true);
-      }
-
-      if (origin.startsWith("http://")) {
-        return callback(null, true);
-      }
-
-      callback(new Error("Not allowed by CORS"));
-    },
-    credentials: true,
-    methods: ["GET", "POST", "PUT", "PATCH", "DELETE", "OPTIONS"],
-    allowedHeaders: [
-      "Content-Type",
-      "Authorization",
-      "User-Agent",
-      "X-Electron-App",
-      "Accept",
-      "Origin",
-    ],
-  }),
-);
+const uploadsDir = path.join(process.env.DATA_DIR || "./db/data", "uploads");
 
 const storage = multer.diskStorage({
   destination: (req, file, cb) => {
-    cb(null, "uploads/");
+    cb(null, uploadsDir);
   },
   filename: (req, file, cb) => {
     const timestamp = Date.now();
@@ -144,6 +122,31 @@ class GitHubCache {
 
 const githubCache = new GitHubCache();
 
+function parseSemver(
+  version: string | undefined,
+): [number, number, number] | null {
+  const match = String(version || "").match(/(\d+)\.(\d+)(?:\.(\d+))?/);
+  if (!match) return null;
+
+  return [Number(match[1]), Number(match[2]), Number(match[3] || 0)];
+}
+
+function compareSemver(
+  a: string | undefined,
+  b: string | undefined,
+): number | null {
+  const parsedA = parseSemver(a);
+  const parsedB = parseSemver(b);
+  if (!parsedA || !parsedB) return null;
+
+  for (let i = 0; i < 3; i += 1) {
+    if (parsedA[i] > parsedB[i]) return 1;
+    if (parsedA[i] < parsedB[i]) return -1;
+  }
+
+  return 0;
+}
+
 const GITHUB_API_BASE = "https://api.github.com";
 const REPO_OWNER = "Termix-SSH";
 const REPO_NAME = "Termix";
@@ -169,7 +172,7 @@ async function fetchGitHubAPI<T>(
         "User-Agent": "TermixUpdateChecker/1.0",
         "X-GitHub-Api-Version": "2022-11-28",
       },
-      agent: getProxyAgent(url),
+      dispatcher: getProxyAgent(url),
     });
 
     if (!response.ok) {
@@ -203,6 +206,10 @@ app.use(bodyParser.json({ limit: "1gb" }));
 app.use(bodyParser.urlencoded({ limit: "1gb", extended: true }));
 app.use(bodyParser.raw({ limit: "5gb", type: "application/octet-stream" }));
 app.use(cookieParser());
+app.use((_req, res, next) => {
+  res.setHeader("Cache-Control", "no-store");
+  next();
+});
 
 /**
  * @openapi
@@ -298,6 +305,10 @@ app.get("/version", authenticateJWT, async (req, res) => {
     return res.status(404).send("Local Version Not Set");
   }
 
+  if (req.query.checkRemote === "false") {
+    return res.json({ localVersion, status: "update_check_disabled" });
+  }
+
   try {
     const cacheKey = "latest_release";
     const releaseData = await fetchGitHubAPI<GitHubRelease>(
@@ -317,12 +328,19 @@ app.get("/version", authenticateJWT, async (req, res) => {
       return res.status(401).send("Remote Version Not Found");
     }
 
-    const isUpToDate = localVersion === remoteVersion;
+    const versionComparison = compareSemver(localVersion, remoteVersion);
+    const status =
+      versionComparison === null || versionComparison === 0
+        ? "up_to_date"
+        : versionComparison > 0
+          ? "beta"
+          : "requires_update";
 
     const response = {
-      status: isUpToDate ? "up_to_date" : "requires_update",
+      status,
       localVersion: localVersion,
       version: remoteVersion,
+      remoteVersion: remoteVersion,
       latest_release: {
         tag_name: releaseData.data.tag_name,
         name: releaseData.data.name,
@@ -594,22 +612,31 @@ app.post("/encryption/regenerate-jwt", requireAdmin, async (req, res) => {
 app.post("/database/export", authenticateJWT, async (req, res) => {
   try {
     const userId = (req as AuthenticatedRequest).userId;
-    const { password } = req.body;
-
-    if (!password) {
-      return res.status(400).json({
-        error: "Password required for export",
-        code: "PASSWORD_REQUIRED",
-      });
-    }
     const deviceInfo = parseUserAgent(req);
-    const unlocked = await authManager.authenticateUser(
-      userId,
-      password,
-      deviceInfo.type,
-    );
-    if (!unlocked) {
-      return res.status(401).json({ error: "Invalid password" });
+
+    const user = await getDb().select().from(users).where(eq(users.id, userId));
+    if (!user || user.length === 0) {
+      return res.status(404).json({ error: "User not found" });
+    }
+
+    const isOidcUser = !!user[0].isOidc;
+
+    if (!DataCrypto.getUserDataKey(userId)) {
+      if (isOidcUser) {
+        const oidcUnlocked = await authManager.authenticateOIDCUser(
+          userId,
+          deviceInfo.type,
+        );
+        if (!oidcUnlocked) {
+          return res.status(403).json({
+            error: "Failed to unlock user data with SSO credentials",
+          });
+        }
+      } else {
+        return res.status(403).json({
+          error: "User data is locked. Please log in again.",
+        });
+      }
     }
 
     apiLogger.info("Exporting user data as SQLite", {
@@ -622,15 +649,7 @@ app.post("/database/export", authenticateJWT, async (req, res) => {
       throw new Error("User data not unlocked");
     }
 
-    const user = await getDb().select().from(users).where(eq(users.id, userId));
-    if (!user || user.length === 0) {
-      throw new Error(`User not found: ${userId}`);
-    }
-
-    const tempDir =
-      process.env.NODE_ENV === "production"
-        ? path.join(process.env.DATA_DIR || "./db/data", ".temp", "exports")
-        : path.join(os.tmpdir(), "termix-exports");
+    const tempDir = path.join(os.tmpdir(), "termix-exports");
 
     try {
       if (!fs.existsSync(tempDir)) {
@@ -641,7 +660,9 @@ app.post("/database/export", authenticateJWT, async (req, res) => {
         operation: "export_temp_dir_error",
         tempDir,
       });
-      throw new Error(`Failed to create temp directory: ${dirError.message}`);
+      throw new Error(`Failed to create temp directory: ${dirError.message}`, {
+        cause: dirError,
+      });
     }
 
     const timestamp = new Date().toISOString().replace(/[:.]/g, "-");
@@ -686,6 +707,7 @@ app.post("/database/export", authenticateJWT, async (req, res) => {
         CREATE TABLE ssh_data (
           id INTEGER PRIMARY KEY AUTOINCREMENT,
           user_id TEXT NOT NULL,
+          connection_type TEXT NOT NULL DEFAULT 'ssh',
           name TEXT,
           ip TEXT NOT NULL,
           port INTEGER NOT NULL,
@@ -718,6 +740,7 @@ app.post("/database/export", authenticateJWT, async (req, res) => {
           show_server_stats_in_sidebar INTEGER NOT NULL DEFAULT 0,
           default_path TEXT,
           stats_config TEXT,
+          docker_config TEXT,
           terminal_config TEXT,
           quick_actions TEXT,
           notes TEXT,
@@ -727,6 +750,12 @@ app.post("/database/export", authenticateJWT, async (req, res) => {
           socks5_username TEXT,
           socks5_password TEXT,
           socks5_proxy_chain TEXT,
+          domain TEXT,
+          security TEXT,
+          ignore_cert INTEGER NOT NULL DEFAULT 0,
+          guacamole_config TEXT,
+          mac_address TEXT,
+          port_knock_sequence TEXT,
           created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
           updated_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP
         );
@@ -739,7 +768,7 @@ app.post("/database/export", authenticateJWT, async (req, res) => {
           folder TEXT,
           tags TEXT,
           auth_type TEXT NOT NULL,
-          username TEXT NOT NULL,
+          username TEXT,
           password TEXT,
           key TEXT,
           private_key TEXT,
@@ -805,29 +834,29 @@ app.post("/database/export", authenticateJWT, async (req, res) => {
         userRecord.id,
         userRecord.username,
         "[EXPORTED_USER_NO_PASSWORD]",
-        userRecord.is_admin ? 1 : 0,
-        userRecord.is_oidc ? 1 : 0,
-        userRecord.oidc_identifier || null,
-        userRecord.client_id || null,
-        userRecord.client_secret || null,
-        userRecord.issuer_url || null,
-        userRecord.authorization_url || null,
-        userRecord.token_url || null,
-        userRecord.identifier_path || null,
-        userRecord.name_path || null,
+        userRecord.isAdmin ? 1 : 0,
+        userRecord.isOidc ? 1 : 0,
+        userRecord.oidcIdentifier || null,
+        userRecord.clientId || null,
+        userRecord.clientSecret || null,
+        userRecord.issuerUrl || null,
+        userRecord.authorizationUrl || null,
+        userRecord.tokenUrl || null,
+        userRecord.identifierPath || null,
+        userRecord.namePath || null,
         userRecord.scopes || null,
-        userRecord.totp_secret || null,
-        userRecord.totp_enabled ? 1 : 0,
-        userRecord.totp_backup_codes || null,
+        userRecord.totpSecret || null,
+        userRecord.totpEnabled ? 1 : 0,
+        userRecord.totpBackupCodes || null,
       );
 
       const sshHosts = await getDb()
         .select()
-        .from(sshData)
-        .where(eq(sshData.userId, userId));
+        .from(hosts)
+        .where(eq(hosts.userId, userId));
       const insertHost = exportDb.prepare(`
-        INSERT INTO ssh_data (id, user_id, name, ip, port, username, folder, tags, pin, auth_type, force_keyboard_interactive, password, key, key_password, key_type, sudo_password, autostart_password, autostart_key, autostart_key_password, credential_id, override_credential_username, enable_terminal, enable_tunnel, tunnel_connections, jump_hosts, enable_file_manager, enable_docker, show_terminal_in_sidebar, show_file_manager_in_sidebar, show_tunnel_in_sidebar, show_docker_in_sidebar, show_server_stats_in_sidebar, default_path, stats_config, terminal_config, quick_actions, notes, use_socks5, socks5_host, socks5_port, socks5_username, socks5_password, socks5_proxy_chain, created_at, updated_at)
-        VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+        INSERT INTO ssh_data (id, user_id, connection_type, name, ip, port, username, folder, tags, pin, auth_type, force_keyboard_interactive, password, key, key_password, key_type, sudo_password, autostart_password, autostart_key, autostart_key_password, credential_id, override_credential_username, enable_terminal, enable_tunnel, tunnel_connections, jump_hosts, enable_file_manager, enable_docker, show_terminal_in_sidebar, show_file_manager_in_sidebar, show_tunnel_in_sidebar, show_docker_in_sidebar, show_server_stats_in_sidebar, default_path, stats_config, docker_config, terminal_config, quick_actions, notes, use_socks5, socks5_host, socks5_port, socks5_username, socks5_password, socks5_proxy_chain, domain, security, ignore_cert, guacamole_config, mac_address, port_knock_sequence, created_at, updated_at)
+        VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
       `);
 
       for (const host of sshHosts) {
@@ -840,6 +869,7 @@ app.post("/database/export", authenticateJWT, async (req, res) => {
         insertHost.run(
           decrypted.id,
           decrypted.userId,
+          decrypted.connectionType || "ssh",
           decrypted.name || null,
           decrypted.ip,
           decrypted.port,
@@ -851,36 +881,43 @@ app.post("/database/export", authenticateJWT, async (req, res) => {
           decrypted.forceKeyboardInteractive || null,
           decrypted.password || null,
           decrypted.key || null,
-          decrypted.key_password || null,
+          decrypted.keyPassword || null,
           decrypted.keyType || null,
           decrypted.sudoPassword || null,
           decrypted.autostartPassword || null,
           decrypted.autostartKey || null,
           decrypted.autostartKeyPassword || null,
           decrypted.credentialId || null,
-          Boolean(decrypted.overrideCredentialUsername) ? 1 : 0,
-          Boolean(decrypted.enableTerminal) ? 1 : 0,
-          Boolean(decrypted.enableTunnel) ? 1 : 0,
+          decrypted.overrideCredentialUsername ? 1 : 0,
+          decrypted.enableTerminal ? 1 : 0,
+          decrypted.enableTunnel ? 1 : 0,
           decrypted.tunnelConnections || null,
           decrypted.jumpHosts || null,
-          Boolean(decrypted.enableFileManager) ? 1 : 0,
-          Boolean(decrypted.enableDocker) ? 1 : 0,
-          Boolean(decrypted.showTerminalInSidebar) ? 1 : 0,
-          Boolean(decrypted.showFileManagerInSidebar) ? 1 : 0,
-          Boolean(decrypted.showTunnelInSidebar) ? 1 : 0,
-          Boolean(decrypted.showDockerInSidebar) ? 1 : 0,
-          Boolean(decrypted.showServerStatsInSidebar) ? 1 : 0,
+          decrypted.enableFileManager ? 1 : 0,
+          decrypted.enableDocker ? 1 : 0,
+          decrypted.showTerminalInSidebar ? 1 : 0,
+          decrypted.showFileManagerInSidebar ? 1 : 0,
+          decrypted.showTunnelInSidebar ? 1 : 0,
+          decrypted.showDockerInSidebar ? 1 : 0,
+          decrypted.showServerStatsInSidebar ? 1 : 0,
           decrypted.defaultPath || null,
           decrypted.statsConfig || null,
+          decrypted.dockerConfig || null,
           decrypted.terminalConfig || null,
           decrypted.quickActions || null,
           decrypted.notes || null,
-          Boolean(decrypted.useSocks5) ? 1 : 0,
+          decrypted.useSocks5 ? 1 : 0,
           decrypted.socks5Host || null,
           decrypted.socks5Port || null,
           decrypted.socks5Username || null,
           decrypted.socks5Password || null,
           decrypted.socks5ProxyChain || null,
+          decrypted.domain || null,
+          decrypted.security || null,
+          decrypted.ignoreCert ? 1 : 0,
+          decrypted.guacamoleConfig || null,
+          decrypted.macAddress || null,
+          decrypted.portKnockSequence || null,
           decrypted.createdAt,
           decrypted.updatedAt,
         );
@@ -913,9 +950,9 @@ app.post("/database/export", authenticateJWT, async (req, res) => {
           decrypted.username,
           decrypted.password || null,
           decrypted.key || null,
-          decrypted.private_key || null,
-          decrypted.public_key || null,
-          decrypted.key_password || null,
+          decrypted.privateKey || null,
+          decrypted.publicKey || null,
+          decrypted.keyPassword || null,
           decrypted.keyType || null,
           decrypted.detectedKeyType || null,
           decrypted.usageCount || 0,
@@ -1122,7 +1159,6 @@ app.post(
       }
 
       const userId = (req as AuthenticatedRequest).userId;
-      const { password } = req.body;
       const mainDb = getDb();
       const deviceInfo = parseUserAgent(req);
 
@@ -1135,32 +1171,22 @@ app.post(
         return res.status(404).json({ error: "User not found" });
       }
 
-      const isOidcUser = !!userRecords[0].is_oidc;
+      const isOidcUser = !!userRecords[0].isOidc;
 
-      if (!isOidcUser) {
-        if (!password) {
-          return res.status(400).json({
-            error: "Password required for import",
-            code: "PASSWORD_REQUIRED",
-          });
-        }
-
-        const unlocked = await authManager.authenticateUser(
-          userId,
-          password,
-          deviceInfo.type,
-        );
-        if (!unlocked) {
-          return res.status(401).json({ error: "Invalid password" });
-        }
-      } else if (!DataCrypto.getUserDataKey(userId)) {
-        const oidcUnlocked = await authManager.authenticateOIDCUser(
-          userId,
-          deviceInfo.type,
-        );
-        if (!oidcUnlocked) {
+      if (!DataCrypto.getUserDataKey(userId)) {
+        if (isOidcUser) {
+          const oidcUnlocked = await authManager.authenticateOIDCUser(
+            userId,
+            deviceInfo.type,
+          );
+          if (!oidcUnlocked) {
+            return res.status(403).json({
+              error: "Failed to unlock user data with SSO credentials",
+            });
+          }
+        } else {
           return res.status(403).json({
-            error: "Failed to unlock user data with SSO credentials",
+            error: "User data is locked. Please log in again.",
           });
         }
       }
@@ -1173,16 +1199,7 @@ app.post(
         mimetype: req.file.mimetype,
       });
 
-      let userDataKey = DataCrypto.getUserDataKey(userId);
-      if (!userDataKey && isOidcUser) {
-        const oidcUnlocked = await authManager.authenticateOIDCUser(
-          userId,
-          deviceInfo.type,
-        );
-        if (oidcUnlocked) {
-          userDataKey = DataCrypto.getUserDataKey(userId);
-        }
-      }
+      const userDataKey = DataCrypto.getUserDataKey(userId);
       if (!userDataKey) {
         throw new Error("User data not unlocked");
       }
@@ -1236,6 +1253,7 @@ app.post(
       };
 
       try {
+        mainDb.$client.exec("PRAGMA foreign_keys = OFF");
         try {
           const importedHosts = importDb
             .prepare("SELECT * FROM ssh_data")
@@ -1244,13 +1262,13 @@ app.post(
             try {
               const existing = await mainDb
                 .select()
-                .from(sshData)
+                .from(hosts)
                 .where(
                   and(
-                    eq(sshData.userId, userId),
-                    eq(sshData.ip, host.ip),
-                    eq(sshData.port, host.port),
-                    eq(sshData.username, host.username),
+                    eq(hosts.userId, userId),
+                    eq(hosts.ip, host.ip),
+                    eq(hosts.port, host.port),
+                    eq(hosts.username, host.username),
                   ),
                 );
 
@@ -1318,7 +1336,7 @@ app.post(
                 userId,
                 userDataKey,
               );
-              await mainDb.insert(sshData).values(encrypted);
+              await mainDb.insert(hosts).values(encrypted);
               result.summary.sshHostsImported++;
             } catch (hostError) {
               result.summary.errors.push(
@@ -1506,7 +1524,7 @@ app.post(
           .select()
           .from(users)
           .where(eq(users.id, userId));
-        if (targetUser.length > 0 && targetUser[0].is_admin) {
+        if (targetUser.length > 0 && targetUser[0].isAdmin) {
           try {
             const importedSettings = importDb
               .prepare("SELECT * FROM settings")
@@ -1546,6 +1564,7 @@ app.post(
           );
         }
 
+        mainDb.$client.exec("PRAGMA foreign_keys = ON");
         result.success = true;
 
         try {
@@ -1736,13 +1755,70 @@ app.post("/database/restore", requireAdmin, async (req, res) => {
 });
 
 app.use("/users", userRoutes);
-app.use("/ssh", sshRoutes);
+app.use("/host", hostRoutes);
 app.use("/alerts", alertRoutes);
 app.use("/credentials", credentialsRoutes);
 app.use("/snippets", snippetsRoutes);
+app.use("/c2s-tunnel-presets", c2sTunnelPresetRoutes);
 app.use("/terminal", terminalRoutes);
+app.use("/guacamole", guacamoleRoutes);
 app.use("/network-topology", networkTopologyRoutes);
 app.use("/rbac", rbacRoutes);
+app.use("/open-tabs", openTabsRoutes);
+app.use("/user-preferences", userPreferencesRoutes);
+
+const frontendDistPaths = [
+  path.join(__dirname, "../../../dist"),
+  path.join(__dirname, "../../dist"),
+  path.join(process.cwd(), "dist"),
+];
+
+const frontendDist = frontendDistPaths.find((p) =>
+  fs.existsSync(path.join(p, "index.html")),
+);
+
+if (frontendDist) {
+  databaseLogger.info(`Serving frontend from: ${frontendDist}`, {
+    operation: "static_files",
+  });
+  app.use(
+    express.static(frontendDist, {
+      setHeaders: (res, filePath) => {
+        const relativePath = path
+          .relative(frontendDist, filePath)
+          .replaceAll(path.sep, "/");
+
+        if (relativePath.startsWith("assets/")) {
+          res.setHeader("Cache-Control", "public, max-age=31536000, immutable");
+          return;
+        }
+
+        if (
+          relativePath === "index.html" ||
+          relativePath === "sw.js" ||
+          relativePath === "manifest.json"
+        ) {
+          res.setHeader(
+            "Cache-Control",
+            "no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0",
+          );
+        }
+      },
+    }),
+  );
+
+  app.use((req, res, next) => {
+    if (req.method === "GET" && req.accepts("html")) {
+      res.setHeader(
+        "Cache-Control",
+        "no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0",
+      );
+      res.sendFile(path.join(frontendDist, "index.html"));
+    } else {
+      next();
+    }
+  });
+}
 
 app.use(
   (
@@ -1751,6 +1827,7 @@ app.use(
     res: express.Response,
     _next: express.NextFunction,
   ) => {
+    void _next;
     apiLogger.error("Unhandled error in request", err, {
       operation: "error_handler",
       method: req.method,
@@ -1819,13 +1896,17 @@ app.get(
       if (status.hasUnencryptedDb) {
         try {
           unencryptedSize = fs.statSync(dbPath).size;
-        } catch (error) {}
+        } catch {
+          // expected - file may not exist
+        }
       }
 
       if (status.hasEncryptedDb) {
         try {
           encryptedSize = fs.statSync(encryptedDbPath).size;
-        } catch (error) {}
+        } catch {
+          // expected - file may not exist
+        }
       }
 
       res.json({
@@ -1927,13 +2008,32 @@ app.get(
   },
 );
 
-app.listen(HTTP_PORT, async () => {
-  const uploadsDir = path.join(process.cwd(), "uploads");
-  if (!fs.existsSync(uploadsDir)) {
-    fs.mkdirSync(uploadsDir, { recursive: true });
-  }
+const httpServer = http.createServer(app);
 
-  await initializeSecurity();
+httpServer.on("error", (err: NodeJS.ErrnoException) => {
+  if (err.code === "EADDRINUSE") {
+    databaseLogger.error(
+      `Port ${HTTP_PORT} is already in use. Kill the existing process and retry.`,
+      err,
+      {
+        operation: "http_server_port_conflict",
+        port: HTTP_PORT,
+      },
+    );
+    process.exit(1);
+  }
+  throw err;
+});
+
+export const serverReady = new Promise<void>((resolve) => {
+  httpServer.listen(HTTP_PORT, async () => {
+    if (!fs.existsSync(uploadsDir)) {
+      fs.mkdirSync(uploadsDir, { recursive: true });
+    }
+
+    await initializeSecurity();
+    resolve();
+  });
 });
 
 const sslConfig = AutoSSLSetup.getSSLConfig();

src/backend/database/db/index.ts

@@ -37,10 +37,11 @@ async function initializeDatabaseAsync(): Promise<void> {
         memoryDatabase = new Database(decryptedBuffer);
 
         try {
-          const sessionCount = memoryDatabase
+          memoryDatabase
             .prepare("SELECT COUNT(*) as count FROM sessions")
             .get() as { count: number };
-        } catch (countError) {
+        } catch {
+          // expected - sessions table may not exist yet
         }
       } else {
         const migration = new DatabaseMigration(dataDir);
@@ -117,6 +118,7 @@ async function initializeDatabaseAsync(): Promise<void> {
 
       throw new Error(
         `Database decryption failed: ${error instanceof Error ? error.message : "Unknown error"}. This prevents data loss.`,
+        { cause: error },
       );
     }
   } else {
@@ -182,6 +184,18 @@ async function initializeCompleteDatabase(): Promise<void> {
         FOREIGN KEY (user_id) REFERENCES users (id) ON DELETE CASCADE
     );
 
+    CREATE TABLE IF NOT EXISTS trusted_devices (
+        id TEXT PRIMARY KEY,
+        user_id TEXT NOT NULL,
+        device_fingerprint TEXT NOT NULL,
+        device_type TEXT NOT NULL,
+        device_info TEXT NOT NULL,
+        created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
+        expires_at TEXT NOT NULL,
+        last_used_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
+        FOREIGN KEY (user_id) REFERENCES users (id) ON DELETE CASCADE
+    );
+
     CREATE TABLE IF NOT EXISTS ssh_data (
         id INTEGER PRIMARY KEY AUTOINCREMENT,
         user_id TEXT NOT NULL,
@@ -304,6 +318,18 @@ async function initializeCompleteDatabase(): Promise<void> {
         FOREIGN KEY (user_id) REFERENCES users (id) ON DELETE CASCADE
     );
 
+    CREATE TABLE IF NOT EXISTS c2s_tunnel_presets (
+        id INTEGER PRIMARY KEY AUTOINCREMENT,
+        user_id TEXT NOT NULL,
+        name TEXT NOT NULL,
+        config TEXT NOT NULL,
+        platform TEXT,
+        computer_name TEXT,
+        created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
+        updated_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
+        FOREIGN KEY (user_id) REFERENCES users (id) ON DELETE CASCADE
+    );
+
     CREATE TABLE IF NOT EXISTS ssh_folders (
         id INTEGER PRIMARY KEY AUTOINCREMENT,
         user_id TEXT NOT NULL,
@@ -411,12 +437,64 @@ async function initializeCompleteDatabase(): Promise<void> {
         FOREIGN KEY (access_id) REFERENCES host_access (id) ON DELETE SET NULL
     );
 
+    CREATE TABLE IF NOT EXISTS api_keys (
+        id TEXT PRIMARY KEY,
+        user_id TEXT NOT NULL,
+        name TEXT NOT NULL,
+        token_hash TEXT NOT NULL,
+        token_prefix TEXT NOT NULL,
+        created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
+        expires_at TEXT,
+        last_used_at TEXT,
+        is_active INTEGER NOT NULL DEFAULT 1,
+        FOREIGN KEY (user_id) REFERENCES users (id) ON DELETE CASCADE
+    );
+
+    CREATE TABLE IF NOT EXISTS user_open_tabs (
+        id TEXT PRIMARY KEY,
+        user_id TEXT NOT NULL,
+        tab_type TEXT NOT NULL,
+        host_id INTEGER,
+        label TEXT NOT NULL,
+        tab_order INTEGER NOT NULL DEFAULT 0,
+        backend_session_id TEXT,
+        created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
+        updated_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
+        FOREIGN KEY (user_id) REFERENCES users (id) ON DELETE CASCADE,
+        FOREIGN KEY (host_id) REFERENCES ssh_data (id) ON DELETE CASCADE
+    );
+
+    CREATE TABLE IF NOT EXISTS user_preferences (
+        user_id TEXT PRIMARY KEY,
+        reopen_tabs_on_login INTEGER NOT NULL DEFAULT 0,
+        updated_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
+        FOREIGN KEY (user_id) REFERENCES users (id) ON DELETE CASCADE
+    );
+
 `);
 
   try {
-    sqlite
-      .prepare("DELETE FROM sessions WHERE expires_at < datetime('now')")
-      .run();
+    sqlite.prepare("DELETE FROM user_open_tabs").run();
+    databaseLogger.info("Open tabs cleared on startup", {
+      operation: "db_init_open_tabs_cleanup",
+    });
+  } catch (e) {
+    databaseLogger.warn("Could not clear open tabs on startup", {
+      operation: "db_init_open_tabs_cleanup_failed",
+      error: e,
+    });
+  }
+
+  try {
+    const result = sqlite
+      .prepare("DELETE FROM sessions WHERE expires_at <= ?")
+      .run(new Date().toISOString());
+    if (result.changes > 0) {
+      databaseLogger.info("Expired sessions cleaned up on startup", {
+        operation: "db_init_session_cleanup",
+        deletedSessions: result.changes,
+      });
+    }
   } catch (e) {
     databaseLogger.warn("Could not clear expired sessions on startup", {
       operation: "db_init_session_cleanup_failed",
@@ -461,6 +539,42 @@ async function initializeCompleteDatabase(): Promise<void> {
       error: e,
     });
   }
+
+  try {
+    const row = sqlite
+      .prepare("SELECT value FROM settings WHERE key = 'guac_enabled'")
+      .get();
+    if (!row) {
+      sqlite
+        .prepare(
+          "INSERT INTO settings (key, value) VALUES ('guac_enabled', 'true')",
+        )
+        .run();
+    }
+  } catch (e) {
+    databaseLogger.warn("Could not initialize guac_enabled setting", {
+      operation: "db_init",
+      error: e,
+    });
+  }
+
+  try {
+    const row = sqlite
+      .prepare("SELECT value FROM settings WHERE key = 'guac_url'")
+      .get();
+    if (!row) {
+      sqlite
+        .prepare(
+          "INSERT INTO settings (key, value) VALUES ('guac_url', 'guacd:4822')",
+        )
+        .run();
+    }
+  } catch (e) {
+    databaseLogger.warn("Could not initialize guac_url setting", {
+      operation: "db_init",
+      error: e,
+    });
+  }
 }
 
 const addColumnIfNotExists = (
@@ -578,6 +692,11 @@ const migrateSchema = () => {
   );
   addColumnIfNotExists("ssh_data", "docker_config", "TEXT");
 
+  addColumnIfNotExists("ssh_data", "connection_type", 'TEXT NOT NULL DEFAULT "ssh"');
+  addColumnIfNotExists("ssh_data", "domain", "TEXT");
+  addColumnIfNotExists("ssh_data", "security", "TEXT");
+  addColumnIfNotExists("ssh_data", "ignore_cert", "INTEGER NOT NULL DEFAULT 0");
+  addColumnIfNotExists("ssh_data", "guacamole_config", "TEXT");
   addColumnIfNotExists("ssh_data", "notes", "TEXT");
 
   addColumnIfNotExists("ssh_data", "use_socks5", "INTEGER");
@@ -624,6 +743,8 @@ const migrateSchema = () => {
   addColumnIfNotExists("ssh_credentials", "public_key", "TEXT");
   addColumnIfNotExists("ssh_credentials", "detected_key_type", "TEXT");
 
+  addColumnIfNotExists("ssh_credentials", "cert_public_key", "TEXT");
+
   addColumnIfNotExists("ssh_credentials", "system_password", "TEXT");
   addColumnIfNotExists("ssh_credentials", "system_key", "TEXT");
   addColumnIfNotExists("ssh_credentials", "system_key_password", "TEXT");
@@ -696,6 +817,7 @@ const migrateSchema = () => {
 
   addColumnIfNotExists("snippets", "folder", "TEXT");
   addColumnIfNotExists("snippets", "order", "INTEGER NOT NULL DEFAULT 0");
+  addColumnIfNotExists("snippets", "host_filter", "TEXT");
 
   try {
     sqlite
@@ -723,6 +845,59 @@ const migrateSchema = () => {
     }
   }
 
+  try {
+    sqlite.prepare("SELECT id FROM snippet_access LIMIT 1").get();
+  } catch {
+    try {
+      sqlite.exec(`
+        CREATE TABLE IF NOT EXISTS snippet_access (
+          id INTEGER PRIMARY KEY AUTOINCREMENT,
+          snippet_id INTEGER NOT NULL,
+          user_id TEXT,
+          role_id INTEGER,
+          granted_by TEXT NOT NULL,
+          permission_level TEXT NOT NULL DEFAULT 'view',
+          expires_at TEXT,
+          created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
+          FOREIGN KEY (snippet_id) REFERENCES snippets (id) ON DELETE CASCADE,
+          FOREIGN KEY (user_id) REFERENCES users (id) ON DELETE CASCADE,
+          FOREIGN KEY (role_id) REFERENCES roles (id) ON DELETE CASCADE,
+          FOREIGN KEY (granted_by) REFERENCES users (id) ON DELETE CASCADE
+        );
+      `);
+    } catch (createError) {
+      databaseLogger.warn("Failed to create snippet_access table", {
+        operation: "schema_migration",
+        error: createError,
+      });
+    }
+  }
+
+  try {
+    sqlite.prepare("SELECT id FROM c2s_tunnel_presets LIMIT 1").get();
+  } catch {
+    try {
+      sqlite.exec(`
+        CREATE TABLE IF NOT EXISTS c2s_tunnel_presets (
+          id INTEGER PRIMARY KEY AUTOINCREMENT,
+          user_id TEXT NOT NULL,
+          name TEXT NOT NULL,
+          config TEXT NOT NULL,
+          platform TEXT,
+          computer_name TEXT,
+          created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
+          updated_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
+          FOREIGN KEY (user_id) REFERENCES users (id) ON DELETE CASCADE
+        );
+      `);
+    } catch (createError) {
+      databaseLogger.warn("Failed to create c2s_tunnel_presets table", {
+        operation: "schema_migration",
+        error: createError,
+      });
+    }
+  }
+
   try {
     sqlite
       .prepare("SELECT id FROM sessions LIMIT 1")
@@ -750,6 +925,33 @@ const migrateSchema = () => {
     }
   }
 
+  try {
+    sqlite
+      .prepare("SELECT id FROM trusted_devices LIMIT 1")
+      .get();
+  } catch {
+    try {
+      sqlite.exec(`
+        CREATE TABLE IF NOT EXISTS trusted_devices (
+          id TEXT PRIMARY KEY,
+          user_id TEXT NOT NULL,
+          device_fingerprint TEXT NOT NULL,
+          device_type TEXT NOT NULL,
+          device_info TEXT NOT NULL,
+          created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
+          expires_at TEXT NOT NULL,
+          last_used_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
+          FOREIGN KEY (user_id) REFERENCES users (id) ON DELETE CASCADE
+        );
+      `);
+    } catch (createError) {
+      databaseLogger.warn("Failed to create trusted_devices table", {
+        operation: "schema_migration",
+        error: createError,
+      });
+    }
+  }
+
   try {
     sqlite
       .prepare("SELECT id FROM network_topology LIMIT 1")
@@ -841,6 +1043,19 @@ const migrateSchema = () => {
     }
   }
 
+  try {
+    sqlite.prepare("SELECT override_credential_id FROM host_access LIMIT 1").get();
+  } catch {
+    try {
+      sqlite.exec("ALTER TABLE host_access ADD COLUMN override_credential_id INTEGER REFERENCES ssh_credentials(id) ON DELETE SET NULL");
+    } catch (alterError) {
+      databaseLogger.warn("Failed to add override_credential_id column", {
+        operation: "schema_migration",
+        error: alterError,
+      });
+    }
+  }
+
   try {
     sqlite.prepare("SELECT sudo_password FROM ssh_data LIMIT 1").get();
   } catch {
@@ -854,6 +1069,97 @@ const migrateSchema = () => {
     }
   }
 
+  const sshDataMigrations: Array<{ column: string; sql: string }> = [
+    { column: "connection_type", sql: "ALTER TABLE ssh_data ADD COLUMN connection_type TEXT NOT NULL DEFAULT 'ssh'" },
+    { column: "credential_id", sql: "ALTER TABLE ssh_data ADD COLUMN credential_id INTEGER" },
+    { column: "override_credential_username", sql: "ALTER TABLE ssh_data ADD COLUMN override_credential_username INTEGER" },
+    { column: "jump_hosts", sql: "ALTER TABLE ssh_data ADD COLUMN jump_hosts TEXT" },
+    { column: "show_terminal_in_sidebar", sql: "ALTER TABLE ssh_data ADD COLUMN show_terminal_in_sidebar INTEGER NOT NULL DEFAULT 1" },
+    { column: "show_file_manager_in_sidebar", sql: "ALTER TABLE ssh_data ADD COLUMN show_file_manager_in_sidebar INTEGER NOT NULL DEFAULT 0" },
+    { column: "show_tunnel_in_sidebar", sql: "ALTER TABLE ssh_data ADD COLUMN show_tunnel_in_sidebar INTEGER NOT NULL DEFAULT 0" },
+    { column: "show_docker_in_sidebar", sql: "ALTER TABLE ssh_data ADD COLUMN show_docker_in_sidebar INTEGER NOT NULL DEFAULT 0" },
+    { column: "show_server_stats_in_sidebar", sql: "ALTER TABLE ssh_data ADD COLUMN show_server_stats_in_sidebar INTEGER NOT NULL DEFAULT 0" },
+    { column: "quick_actions", sql: "ALTER TABLE ssh_data ADD COLUMN quick_actions TEXT" },
+    { column: "domain", sql: "ALTER TABLE ssh_data ADD COLUMN domain TEXT" },
+    { column: "security", sql: "ALTER TABLE ssh_data ADD COLUMN security TEXT" },
+    { column: "ignore_cert", sql: "ALTER TABLE ssh_data ADD COLUMN ignore_cert INTEGER NOT NULL DEFAULT 0" },
+    { column: "guacamole_config", sql: "ALTER TABLE ssh_data ADD COLUMN guacamole_config TEXT" },
+    { column: "socks5_proxy_chain", sql: "ALTER TABLE ssh_data ADD COLUMN socks5_proxy_chain TEXT" },
+    { column: "host_key_fingerprint", sql: "ALTER TABLE ssh_data ADD COLUMN host_key_fingerprint TEXT" },
+    { column: "host_key_type", sql: "ALTER TABLE ssh_data ADD COLUMN host_key_type TEXT" },
+    { column: "host_key_algorithm", sql: "ALTER TABLE ssh_data ADD COLUMN host_key_algorithm TEXT NOT NULL DEFAULT 'sha256'" },
+    { column: "host_key_first_seen", sql: "ALTER TABLE ssh_data ADD COLUMN host_key_first_seen TEXT" },
+    { column: "host_key_last_verified", sql: "ALTER TABLE ssh_data ADD COLUMN host_key_last_verified TEXT" },
+    { column: "host_key_changed_count", sql: "ALTER TABLE ssh_data ADD COLUMN host_key_changed_count INTEGER NOT NULL DEFAULT 0" },
+    { column: "mac_address", sql: "ALTER TABLE ssh_data ADD COLUMN mac_address TEXT" },
+    { column: "port_knock_sequence", sql: "ALTER TABLE ssh_data ADD COLUMN port_knock_sequence TEXT" },
+    { column: "enable_ssh", sql: "ALTER TABLE ssh_data ADD COLUMN enable_ssh INTEGER NOT NULL DEFAULT 1" },
+    { column: "enable_rdp", sql: "ALTER TABLE ssh_data ADD COLUMN enable_rdp INTEGER NOT NULL DEFAULT 0" },
+    { column: "enable_vnc", sql: "ALTER TABLE ssh_data ADD COLUMN enable_vnc INTEGER NOT NULL DEFAULT 0" },
+    { column: "enable_telnet", sql: "ALTER TABLE ssh_data ADD COLUMN enable_telnet INTEGER NOT NULL DEFAULT 0" },
+    { column: "ssh_port", sql: "ALTER TABLE ssh_data ADD COLUMN ssh_port INTEGER DEFAULT 22" },
+    { column: "rdp_port", sql: "ALTER TABLE ssh_data ADD COLUMN rdp_port INTEGER DEFAULT 3389" },
+    { column: "vnc_port", sql: "ALTER TABLE ssh_data ADD COLUMN vnc_port INTEGER DEFAULT 5900" },
+    { column: "telnet_port", sql: "ALTER TABLE ssh_data ADD COLUMN telnet_port INTEGER DEFAULT 23" },
+    { column: "rdp_user", sql: "ALTER TABLE ssh_data ADD COLUMN rdp_user TEXT" },
+    { column: "rdp_password", sql: "ALTER TABLE ssh_data ADD COLUMN rdp_password TEXT" },
+    { column: "rdp_domain", sql: "ALTER TABLE ssh_data ADD COLUMN rdp_domain TEXT" },
+    { column: "rdp_security", sql: "ALTER TABLE ssh_data ADD COLUMN rdp_security TEXT" },
+    { column: "rdp_ignore_cert", sql: "ALTER TABLE ssh_data ADD COLUMN rdp_ignore_cert INTEGER DEFAULT 0" },
+    { column: "vnc_password", sql: "ALTER TABLE ssh_data ADD COLUMN vnc_password TEXT" },
+    { column: "vnc_user", sql: "ALTER TABLE ssh_data ADD COLUMN vnc_user TEXT" },
+    { column: "telnet_user", sql: "ALTER TABLE ssh_data ADD COLUMN telnet_user TEXT" },
+    { column: "telnet_password", sql: "ALTER TABLE ssh_data ADD COLUMN telnet_password TEXT" },
+  ];
+
+  for (const migration of sshDataMigrations) {
+    try {
+      sqlite.prepare(`SELECT ${migration.column} FROM ssh_data LIMIT 1`).get();
+    } catch {
+      try {
+        sqlite.exec(migration.sql);
+      } catch (alterError) {
+        databaseLogger.warn(`Failed to add ${migration.column} column`, {
+          operation: "schema_migration",
+          error: alterError,
+        });
+      }
+    }
+  }
+
+  // Copy unencrypted username/domain into protocol-specific columns for old guac hosts.
+  // Passwords are handled via the legacy field name fallback in lazy-field-encryption.ts.
+  const usernameDomainBackfills = [
+    {
+      protocol: "rdp",
+      sql: "UPDATE ssh_data SET rdp_user = username, rdp_password = password, rdp_domain = domain WHERE connection_type = 'rdp' AND rdp_user IS NULL AND rdp_password IS NULL",
+    },
+    {
+      protocol: "vnc",
+      sql: "UPDATE ssh_data SET vnc_user = username, vnc_password = password WHERE connection_type = 'vnc' AND vnc_user IS NULL AND vnc_password IS NULL",
+    },
+    {
+      protocol: "telnet",
+      sql: "UPDATE ssh_data SET telnet_user = username, telnet_password = password WHERE connection_type = 'telnet' AND telnet_user IS NULL AND telnet_password IS NULL",
+    },
+  ];
+  for (const backfill of usernameDomainBackfills) {
+    try {
+      const result = sqlite.prepare(backfill.sql).run();
+      if (result.changes > 0) {
+        databaseLogger.info(
+          `Backfilled ${result.changes} ${backfill.protocol} host credential(s)`,
+          { operation: "guac_credential_backfill" },
+        );
+      }
+    } catch (e) {
+      databaseLogger.warn(`Failed to backfill ${backfill.protocol} host credentials`, {
+        operation: "guac_credential_backfill",
+        error: e,
+      });
+    }
+  }
+
   try {
     sqlite.prepare("SELECT id FROM roles LIMIT 1").get();
   } catch {
@@ -1027,29 +1333,47 @@ const migrateSchema = () => {
     }
   }
 
+  try {
+    sqlite.prepare("SELECT id FROM api_keys LIMIT 1").get();
+  } catch {
+    try {
+      sqlite.exec(`
+        CREATE TABLE IF NOT EXISTS api_keys (
+          id TEXT PRIMARY KEY,
+          user_id TEXT NOT NULL,
+          name TEXT NOT NULL,
+          token_hash TEXT NOT NULL,
+          token_prefix TEXT NOT NULL,
+          created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
+          expires_at TEXT,
+          last_used_at TEXT,
+          is_active INTEGER NOT NULL DEFAULT 1,
+          FOREIGN KEY (user_id) REFERENCES users (id) ON DELETE CASCADE
+        );
+      `);
+    } catch (createError) {
+      databaseLogger.warn("Failed to create api_keys table", {
+        operation: "schema_migration",
+        error: createError,
+      });
+    }
+  }
+
   try {
     const existingRoles = sqlite.prepare("SELECT name, is_system FROM roles").all() as Array<{ name: string; is_system: number }>;
 
     try {
       const validSystemRoles = ['admin', 'user'];
       const unwantedRoleNames = ['superAdmin', 'powerUser', 'readonly', 'member'];
-      let deletedCount = 0;
-
       const deleteByName = sqlite.prepare("DELETE FROM roles WHERE name = ?");
       for (const roleName of unwantedRoleNames) {
-        const result = deleteByName.run(roleName);
-        if (result.changes > 0) {
-          deletedCount += result.changes;
-        }
+        deleteByName.run(roleName);
       }
 
       const deleteOldSystemRole = sqlite.prepare("DELETE FROM roles WHERE name = ? AND is_system = 1");
       for (const role of existingRoles) {
         if (role.is_system === 1 && !validSystemRoles.includes(role.name) && !unwantedRoleNames.includes(role.name)) {
-          const result = deleteOldSystemRole.run(role.name);
-          if (result.changes > 0) {
-            deletedCount += result.changes;
-          }
+          deleteOldSystemRole.run(role.name);
         }
       }
     } catch (cleanupError) {
@@ -1107,7 +1431,7 @@ const migrateSchema = () => {
         for (const admin of adminUsers) {
           try {
             insertUserRole.run(admin.id, adminRole.id);
-          } catch (error) {
+          } catch {
             // Ignore duplicate errors
           }
         }
@@ -1122,7 +1446,7 @@ const migrateSchema = () => {
         for (const user of normalUsers) {
           try {
             insertUserRole.run(user.id, userRole.id);
-          } catch (error) {
+          } catch {
             // Ignore duplicate errors
           }
         }
@@ -1145,7 +1469,7 @@ const migrateSchema = () => {
   });
 };
 
-async function saveMemoryDatabaseToFile() {
+async function saveMemoryDatabaseToFile(): Promise<void> {
   if (!memoryDatabase) return;
 
   try {
@@ -1156,10 +1480,11 @@ async function saveMemoryDatabaseToFile() {
     }
 
     try {
-      const sessionCount = memoryDatabase
+      memoryDatabase
         .prepare("SELECT COUNT(*) as count FROM sessions")
         .get() as { count: number };
-    } catch (countError) {
+    } catch {
+      // expected - sessions table may not exist yet
     }
 
     if (enableFileEncryption) {
@@ -1170,6 +1495,8 @@ async function saveMemoryDatabaseToFile() {
     } else {
       fs.writeFileSync(dbPath, buffer);
     }
+
+    DatabaseSaveTrigger.markClean();
   } catch (error) {
     databaseLogger.error("Failed to save in-memory database", error, {
       operation: "memory_db_save_failed",
@@ -1185,7 +1512,11 @@ async function handlePostInitFileEncryption() {
     if (memoryDatabase) {
       await saveMemoryDatabaseToFile();
 
-      setInterval(saveMemoryDatabaseToFile, 15 * 1000);
+      setInterval(() => {
+        if (DatabaseSaveTrigger.isDirty) {
+          saveMemoryDatabaseToFile();
+        }
+      }, 5 * 60 * 1000);
 
       DatabaseSaveTrigger.initialize(saveMemoryDatabaseToFile);
     }
@@ -1254,15 +1585,18 @@ async function cleanupDatabase() {
         try {
           fs.unlinkSync(path.join(tempDir, file));
         } catch {
+          // expected - file cleanup best effort
         }
       }
 
       try {
         fs.rmdirSync(tempDir);
       } catch {
+        // expected - dir cleanup best effort
       }
     }
   } catch {
+    // expected - temp dir cleanup best effort
   }
 }
 
@@ -1271,6 +1605,7 @@ process.on("exit", () => {
     try {
       sqlite.close();
     } catch {
+      // expected - database may already be closed
     }
   }
 });

src/backend/database/db/schema.ts

@@ -4,25 +4,25 @@ import { sql } from "drizzle-orm";
 export const users = sqliteTable("users", {
   id: text("id").primaryKey(),
   username: text("username").notNull(),
-  password_hash: text("password_hash").notNull(),
-  is_admin: integer("is_admin", { mode: "boolean" }).notNull().default(false),
+  passwordHash: text("password_hash").notNull(),
+  isAdmin: integer("is_admin", { mode: "boolean" }).notNull().default(false),
 
-  is_oidc: integer("is_oidc", { mode: "boolean" }).notNull().default(false),
-  oidc_identifier: text("oidc_identifier"),
-  client_id: text("client_id"),
-  client_secret: text("client_secret"),
-  issuer_url: text("issuer_url"),
-  authorization_url: text("authorization_url"),
-  token_url: text("token_url"),
-  identifier_path: text("identifier_path"),
-  name_path: text("name_path"),
+  isOidc: integer("is_oidc", { mode: "boolean" }).notNull().default(false),
+  oidcIdentifier: text("oidc_identifier"),
+  clientId: text("client_id"),
+  clientSecret: text("client_secret"),
+  issuerUrl: text("issuer_url"),
+  authorizationUrl: text("authorization_url"),
+  tokenUrl: text("token_url"),
+  identifierPath: text("identifier_path"),
+  namePath: text("name_path"),
   scopes: text().default("openid email profile"),
 
-  totp_secret: text("totp_secret"),
-  totp_enabled: integer("totp_enabled", { mode: "boolean" })
+  totpSecret: text("totp_secret"),
+  totpEnabled: integer("totp_enabled", { mode: "boolean" })
     .notNull()
     .default(false),
-  totp_backup_codes: text("totp_backup_codes"),
+  totpBackupCodes: text("totp_backup_codes"),
 });
 
 export const settings = sqliteTable("settings", {
@@ -47,11 +47,29 @@ export const sessions = sqliteTable("sessions", {
     .default(sql`CURRENT_TIMESTAMP`),
 });
 
-export const sshData = sqliteTable("ssh_data", {
+export const trustedDevices = sqliteTable("trusted_devices", {
+  id: text("id").primaryKey(),
+  userId: text("user_id")
+    .notNull()
+    .references(() => users.id, { onDelete: "cascade" }),
+  deviceFingerprint: text("device_fingerprint").notNull(),
+  deviceType: text("device_type").notNull(),
+  deviceInfo: text("device_info").notNull(),
+  createdAt: text("created_at")
+    .notNull()
+    .default(sql`CURRENT_TIMESTAMP`),
+  expiresAt: text("expires_at").notNull(),
+  lastUsedAt: text("last_used_at")
+    .notNull()
+    .default(sql`CURRENT_TIMESTAMP`),
+});
+
+export const hosts = sqliteTable("ssh_data", {
   id: integer("id").primaryKey({ autoIncrement: true }),
   userId: text("user_id")
     .notNull()
     .references(() => users.id, { onDelete: "cascade" }),
+  connectionType: text("connection_type").notNull().default("ssh"),
   name: text("name"),
   ip: text("ip").notNull(),
   port: integer("port").notNull(),
@@ -64,7 +82,7 @@ export const sshData = sqliteTable("ssh_data", {
 
   password: text("password"),
   key: text("key", { length: 8192 }),
-  key_password: text("key_password"),
+  keyPassword: text("key_password"),
   keyType: text("key_type"),
   sudoPassword: text("sudo_password"),
 
@@ -107,9 +125,36 @@ export const sshData = sqliteTable("ssh_data", {
     .default(false),
   defaultPath: text("default_path"),
   statsConfig: text("stats_config"),
+  dockerConfig: text("docker_config"),
   terminalConfig: text("terminal_config"),
   quickActions: text("quick_actions"),
   notes: text("notes"),
+  enableSsh: integer("enable_ssh", { mode: "boolean" }).notNull().default(true),
+  enableRdp: integer("enable_rdp", { mode: "boolean" }).notNull().default(false),
+  enableVnc: integer("enable_vnc", { mode: "boolean" }).notNull().default(false),
+  enableTelnet: integer("enable_telnet", { mode: "boolean" }).notNull().default(false),
+
+  sshPort: integer("ssh_port").default(22),
+  rdpPort: integer("rdp_port").default(3389),
+  vncPort: integer("vnc_port").default(5900),
+  telnetPort: integer("telnet_port").default(23),
+
+  rdpUser: text("rdp_user"),
+  rdpPassword: text("rdp_password"),
+  rdpDomain: text("rdp_domain"),
+  rdpSecurity: text("rdp_security"),
+  rdpIgnoreCert: integer("rdp_ignore_cert", { mode: "boolean" }).default(false),
+
+  vncPassword: text("vnc_password"),
+  vncUser: text("vnc_user"),
+
+  telnetUser: text("telnet_user"),
+  telnetPassword: text("telnet_password"),
+
+  domain: text("domain"),
+  security: text("security"),
+  ignoreCert: integer("ignore_cert", { mode: "boolean" }).default(false),
+  guacamoleConfig: text("guacamole_config"),
 
   useSocks5: integer("use_socks5", { mode: "boolean" }),
   socks5Host: text("socks5_host"),
@@ -118,6 +163,9 @@ export const sshData = sqliteTable("ssh_data", {
   socks5Password: text("socks5_password"),
   socks5ProxyChain: text("socks5_proxy_chain"),
 
+  macAddress: text("mac_address"),
+  portKnockSequence: text("port_knock_sequence"),
+
   hostKeyFingerprint: text("host_key_fingerprint"),
   hostKeyType: text("host_key_type"),
   hostKeyAlgorithm: text("host_key_algorithm").default("sha256"),
@@ -140,7 +188,7 @@ export const fileManagerRecent = sqliteTable("file_manager_recent", {
     .references(() => users.id, { onDelete: "cascade" }),
   hostId: integer("host_id")
     .notNull()
-    .references(() => sshData.id, { onDelete: "cascade" }),
+    .references(() => hosts.id, { onDelete: "cascade" }),
   name: text("name").notNull(),
   path: text("path").notNull(),
   lastOpened: text("last_opened")
@@ -155,7 +203,7 @@ export const fileManagerPinned = sqliteTable("file_manager_pinned", {
     .references(() => users.id, { onDelete: "cascade" }),
   hostId: integer("host_id")
     .notNull()
-    .references(() => sshData.id, { onDelete: "cascade" }),
+    .references(() => hosts.id, { onDelete: "cascade" }),
   name: text("name").notNull(),
   path: text("path").notNull(),
   pinnedAt: text("pinned_at")
@@ -170,7 +218,7 @@ export const fileManagerShortcuts = sqliteTable("file_manager_shortcuts", {
     .references(() => users.id, { onDelete: "cascade" }),
   hostId: integer("host_id")
     .notNull()
-    .references(() => sshData.id, { onDelete: "cascade" }),
+    .references(() => hosts.id, { onDelete: "cascade" }),
   name: text("name").notNull(),
   path: text("path").notNull(),
   createdAt: text("created_at")
@@ -202,12 +250,14 @@ export const sshCredentials = sqliteTable("ssh_credentials", {
   username: text("username"),
   password: text("password"),
   key: text("key", { length: 16384 }),
-  private_key: text("private_key", { length: 16384 }),
-  public_key: text("public_key", { length: 4096 }),
-  key_password: text("key_password"),
+  privateKey: text("private_key", { length: 16384 }),
+  publicKey: text("public_key", { length: 4096 }),
+  keyPassword: text("key_password"),
   keyType: text("key_type"),
   detectedKeyType: text("detected_key_type"),
 
+  certPublicKey: text("cert_public_key", { length: 8192 }),
+
   systemPassword: text("system_password"),
   systemKey: text("system_key", { length: 16384 }),
   systemKeyPassword: text("system_key_password"),
@@ -229,7 +279,7 @@ export const sshCredentialUsage = sqliteTable("ssh_credential_usage", {
     .references(() => sshCredentials.id, { onDelete: "cascade" }),
   hostId: integer("host_id")
     .notNull()
-    .references(() => sshData.id, { onDelete: "cascade" }),
+    .references(() => hosts.id, { onDelete: "cascade" }),
   userId: text("user_id")
     .notNull()
     .references(() => users.id, { onDelete: "cascade" }),
@@ -254,6 +304,7 @@ export const snippets = sqliteTable("snippets", {
   updatedAt: text("updated_at")
     .notNull()
     .default(sql`CURRENT_TIMESTAMP`),
+  hostFilter: text("host_filter"),
 });
 
 export const snippetFolders = sqliteTable("snippet_folders", {
@@ -272,6 +323,47 @@ export const snippetFolders = sqliteTable("snippet_folders", {
     .default(sql`CURRENT_TIMESTAMP`),
 });
 
+export const c2sTunnelPresets = sqliteTable("c2s_tunnel_presets", {
+  id: integer("id").primaryKey({ autoIncrement: true }),
+  userId: text("user_id")
+    .notNull()
+    .references(() => users.id, { onDelete: "cascade" }),
+  name: text("name").notNull(),
+  config: text("config").notNull(),
+  platform: text("platform"),
+  computerName: text("computer_name"),
+  createdAt: text("created_at")
+    .notNull()
+    .default(sql`CURRENT_TIMESTAMP`),
+  updatedAt: text("updated_at")
+    .notNull()
+    .default(sql`CURRENT_TIMESTAMP`),
+});
+
+export const snippetAccess = sqliteTable("snippet_access", {
+  id: integer("id").primaryKey({ autoIncrement: true }),
+  snippetId: integer("snippet_id")
+    .notNull()
+    .references(() => snippets.id, { onDelete: "cascade" }),
+
+  userId: text("user_id").references(() => users.id, { onDelete: "cascade" }),
+  roleId: integer("role_id").references(() => roles.id, {
+    onDelete: "cascade",
+  }),
+
+  grantedBy: text("granted_by")
+    .notNull()
+    .references(() => users.id, { onDelete: "cascade" }),
+
+  permissionLevel: text("permission_level").notNull().default("view"),
+
+  expiresAt: text("expires_at"),
+
+  createdAt: text("created_at")
+    .notNull()
+    .default(sql`CURRENT_TIMESTAMP`),
+});
+
 export const sshFolders = sqliteTable("ssh_folders", {
   id: integer("id").primaryKey({ autoIncrement: true }),
   userId: text("user_id")
@@ -296,7 +388,7 @@ export const recentActivity = sqliteTable("recent_activity", {
   type: text("type").notNull(),
   hostId: integer("host_id")
     .notNull()
-    .references(() => sshData.id, { onDelete: "cascade" }),
+    .references(() => hosts.id, { onDelete: "cascade" }),
   hostName: text("host_name"),
   timestamp: text("timestamp")
     .notNull()
@@ -310,7 +402,7 @@ export const commandHistory = sqliteTable("command_history", {
     .references(() => users.id, { onDelete: "cascade" }),
   hostId: integer("host_id")
     .notNull()
-    .references(() => sshData.id, { onDelete: "cascade" }),
+    .references(() => hosts.id, { onDelete: "cascade" }),
   command: text("command").notNull(),
   executedAt: text("executed_at")
     .notNull()
@@ -350,7 +442,7 @@ export const hostAccess = sqliteTable("host_access", {
   id: integer("id").primaryKey({ autoIncrement: true }),
   hostId: integer("host_id")
     .notNull()
-    .references(() => sshData.id, { onDelete: "cascade" }),
+    .references(() => hosts.id, { onDelete: "cascade" }),
 
   userId: text("user_id")
     .references(() => users.id, { onDelete: "cascade" }),
@@ -372,6 +464,10 @@ export const hostAccess = sqliteTable("host_access", {
     .default(sql`CURRENT_TIMESTAMP`),
   lastAccessedAt: text("last_accessed_at"),
   accessCount: integer("access_count").notNull().default(0),
+  overrideCredentialId: integer("override_credential_id").references(
+    () => sshCredentials.id,
+    { onDelete: "set null" },
+  ),
 });
 
 export const sharedCredentials = sqliteTable("shared_credentials", {
@@ -475,7 +571,7 @@ export const sessionRecordings = sqliteTable("session_recordings", {
 
   hostId: integer("host_id")
     .notNull()
-    .references(() => sshData.id, { onDelete: "cascade" }),
+    .references(() => hosts.id, { onDelete: "cascade" }),
   userId: text("user_id")
     .notNull()
     .references(() => users.id, { onDelete: "cascade" }),
@@ -506,7 +602,7 @@ export const opksshTokens = sqliteTable("opkssh_tokens", {
     .references(() => users.id, { onDelete: "cascade" }),
   hostId: integer("host_id")
     .notNull()
-    .references(() => sshData.id, { onDelete: "cascade" }),
+    .references(() => hosts.id, { onDelete: "cascade" }),
 
   sshCert: text("ssh_cert", { length: 8192 }).notNull(),
   privateKey: text("private_key", { length: 8192 }).notNull(),
@@ -522,3 +618,47 @@ export const opksshTokens = sqliteTable("opkssh_tokens", {
   expiresAt: text("expires_at").notNull(),
   lastUsed: text("last_used"),
 });
+
+export const apiKeys = sqliteTable("api_keys", {
+  id: text("id").primaryKey(),
+  userId: text("user_id")
+    .notNull()
+    .references(() => users.id, { onDelete: "cascade" }),
+  name: text("name").notNull(),
+  tokenHash: text("token_hash").notNull(),
+  tokenPrefix: text("token_prefix").notNull(),
+  createdAt: text("created_at").notNull().default(sql`CURRENT_TIMESTAMP`),
+  expiresAt: text("expires_at"),
+  lastUsedAt: text("last_used_at"),
+  isActive: integer("is_active", { mode: "boolean" }).notNull().default(true),
+});
+
+export const userOpenTabs = sqliteTable("user_open_tabs", {
+  id: text("id").primaryKey(),
+  userId: text("user_id")
+    .notNull()
+    .references(() => users.id, { onDelete: "cascade" }),
+  tabType: text("tab_type").notNull(),
+  hostId: integer("host_id").references(() => hosts.id, { onDelete: "cascade" }),
+  label: text("label").notNull(),
+  tabOrder: integer("tab_order").notNull().default(0),
+  backendSessionId: text("backend_session_id"),
+  createdAt: text("created_at")
+    .notNull()
+    .default(sql`CURRENT_TIMESTAMP`),
+  updatedAt: text("updated_at")
+    .notNull()
+    .default(sql`CURRENT_TIMESTAMP`),
+});
+
+export const userPreferences = sqliteTable("user_preferences", {
+  userId: text("user_id")
+    .primaryKey()
+    .references(() => users.id, { onDelete: "cascade" }),
+  reopenTabsOnLogin: integer("reopen_tabs_on_login", { mode: "boolean" })
+    .notNull()
+    .default(false),
+  updatedAt: text("updated_at")
+    .notNull()
+    .default(sql`CURRENT_TIMESTAMP`),
+});

src/backend/database/routes/alerts.ts

@@ -7,7 +7,6 @@ import express from "express";
 import { db } from "../db/index.js";
 import { dismissedAlerts } from "../db/schema.js";
 import { eq, and } from "drizzle-orm";
-import fetch from "node-fetch";
 import { authLogger } from "../../utils/logger.js";
 import { AuthManager } from "../../utils/auth-manager.js";
 import { getProxyAgent } from "../../utils/proxy-agent.js";
@@ -61,7 +60,7 @@ async function fetchAlertsFromGitHub(): Promise<TermixAlert[]> {
         Accept: "application/json",
         "User-Agent": "TermixAlertChecker/1.0",
       },
-      agent: getProxyAgent(url),
+      dispatcher: getProxyAgent(url),
     });
 
     if (!response.ok) {

src/backend/database/routes/c2s-tunnel-presets.ts

@@ -0,0 +1,247 @@
+import type {
+  AuthenticatedRequest,
+  TunnelConnection,
+} from "../../../types/index.js";
+import express from "express";
+import { db } from "../db/index.js";
+import { c2sTunnelPresets } from "../db/schema.js";
+import { and, asc, eq, sql } from "drizzle-orm";
+import type { Request, Response } from "express";
+import { authLogger, databaseLogger } from "../../utils/logger.js";
+import { AuthManager } from "../../utils/auth-manager.js";
+
+const router = express.Router();
+
+const authManager = AuthManager.getInstance();
+const authenticateJWT = authManager.createAuthMiddleware();
+const requireDataAccess = authManager.createDataAccessMiddleware();
+
+function isNonEmptyString(val: unknown): val is string {
+  return typeof val === "string" && val.trim().length > 0;
+}
+
+function parsePreset(row: typeof c2sTunnelPresets.$inferSelect) {
+  return {
+    ...row,
+    config: JSON.parse(row.config) as TunnelConnection[],
+  };
+}
+
+function validateConfig(config: unknown): config is TunnelConnection[] {
+  if (!Array.isArray(config)) return false;
+  return config.every((item) => {
+    if (!item || typeof item !== "object") return false;
+    const tunnel = item as Partial<TunnelConnection>;
+    const mode = tunnel.mode || tunnel.tunnelType;
+    return (
+      tunnel.scope === "c2s" &&
+      (mode === "local" || mode === "remote" || mode === "dynamic") &&
+      typeof tunnel.sourcePort === "number" &&
+      tunnel.sourcePort >= 1 &&
+      tunnel.sourcePort <= 65535 &&
+      (mode === "dynamic" ||
+        (typeof tunnel.endpointPort === "number" &&
+          tunnel.endpointPort >= 1 &&
+          tunnel.endpointPort <= 65535))
+    );
+  });
+}
+
+router.get(
+  "/",
+  authenticateJWT,
+  requireDataAccess,
+  async (req: Request, res: Response) => {
+    const userId = (req as AuthenticatedRequest).userId;
+    if (!isNonEmptyString(userId)) {
+      return res.status(400).json({ error: "Invalid userId" });
+    }
+
+    try {
+      const result = await db
+        .select()
+        .from(c2sTunnelPresets)
+        .where(eq(c2sTunnelPresets.userId, userId))
+        .orderBy(asc(c2sTunnelPresets.name));
+      res.json(result.map(parsePreset));
+    } catch (error) {
+      authLogger.error("Failed to fetch C2S tunnel presets", error);
+      res.status(500).json({ error: "Failed to fetch C2S tunnel presets" });
+    }
+  },
+);
+
+router.post(
+  "/",
+  authenticateJWT,
+  requireDataAccess,
+  async (req: Request, res: Response) => {
+    const userId = (req as AuthenticatedRequest).userId;
+    const { name, config, platform, computerName } = req.body;
+
+    if (!isNonEmptyString(userId) || !isNonEmptyString(name)) {
+      return res.status(400).json({ error: "Preset name is required" });
+    }
+    if (!validateConfig(config)) {
+      return res
+        .status(400)
+        .json({ error: "Invalid C2S tunnel configuration" });
+    }
+
+    const trimmedName = name.trim();
+    try {
+      const existing = await db
+        .select()
+        .from(c2sTunnelPresets)
+        .where(
+          and(
+            eq(c2sTunnelPresets.userId, userId),
+            eq(c2sTunnelPresets.name, trimmedName),
+          ),
+        );
+      if (existing.length > 0) {
+        return res.status(409).json({ error: "Preset name already exists" });
+      }
+
+      const result = await db
+        .insert(c2sTunnelPresets)
+        .values({
+          userId,
+          name: trimmedName,
+          config: JSON.stringify(config),
+          platform: platform?.trim() || null,
+          computerName: computerName?.trim() || null,
+        })
+        .returning();
+
+      databaseLogger.info("C2S tunnel preset created", {
+        operation: "c2s_tunnel_preset_create",
+        userId,
+        presetId: result[0].id,
+      });
+      res.status(201).json(parsePreset(result[0]));
+    } catch (error) {
+      authLogger.error("Failed to create C2S tunnel preset", error);
+      res.status(500).json({ error: "Failed to create C2S tunnel preset" });
+    }
+  },
+);
+
+router.put(
+  "/:id",
+  authenticateJWT,
+  requireDataAccess,
+  async (req: Request, res: Response) => {
+    const userId = (req as AuthenticatedRequest).userId;
+    const id = Number(req.params.id);
+    const { name, config, platform, computerName } = req.body;
+
+    if (!isNonEmptyString(userId) || !Number.isInteger(id)) {
+      return res.status(400).json({ error: "Invalid request" });
+    }
+
+    try {
+      const existing = await db
+        .select()
+        .from(c2sTunnelPresets)
+        .where(
+          and(eq(c2sTunnelPresets.id, id), eq(c2sTunnelPresets.userId, userId)),
+        );
+      if (existing.length === 0) {
+        return res.status(404).json({ error: "Preset not found" });
+      }
+
+      const updateFields: Record<string, unknown> = {
+        updatedAt: sql`CURRENT_TIMESTAMP`,
+      };
+
+      if (name !== undefined) {
+        if (!isNonEmptyString(name)) {
+          return res.status(400).json({ error: "Preset name is required" });
+        }
+        const trimmedName = name.trim();
+        const duplicate = await db
+          .select()
+          .from(c2sTunnelPresets)
+          .where(
+            and(
+              eq(c2sTunnelPresets.userId, userId),
+              eq(c2sTunnelPresets.name, trimmedName),
+            ),
+          );
+        if (duplicate.some((preset) => preset.id !== id)) {
+          return res.status(409).json({ error: "Preset name already exists" });
+        }
+        updateFields.name = trimmedName;
+      }
+
+      if (config !== undefined) {
+        if (!validateConfig(config)) {
+          return res
+            .status(400)
+            .json({ error: "Invalid C2S tunnel configuration" });
+        }
+        updateFields.config = JSON.stringify(config);
+      }
+      if (platform !== undefined)
+        updateFields.platform = platform?.trim() || null;
+      if (computerName !== undefined)
+        updateFields.computerName = computerName?.trim() || null;
+
+      await db
+        .update(c2sTunnelPresets)
+        .set(updateFields)
+        .where(
+          and(eq(c2sTunnelPresets.id, id), eq(c2sTunnelPresets.userId, userId)),
+        );
+
+      const updated = await db
+        .select()
+        .from(c2sTunnelPresets)
+        .where(eq(c2sTunnelPresets.id, id));
+      res.json(parsePreset(updated[0]));
+    } catch (error) {
+      authLogger.error("Failed to update C2S tunnel preset", error);
+      res.status(500).json({ error: "Failed to update C2S tunnel preset" });
+    }
+  },
+);
+
+router.delete(
+  "/:id",
+  authenticateJWT,
+  requireDataAccess,
+  async (req: Request, res: Response) => {
+    const userId = (req as AuthenticatedRequest).userId;
+    const id = Number(req.params.id);
+
+    if (!isNonEmptyString(userId) || !Number.isInteger(id)) {
+      return res.status(400).json({ error: "Invalid request" });
+    }
+
+    try {
+      const existing = await db
+        .select()
+        .from(c2sTunnelPresets)
+        .where(
+          and(eq(c2sTunnelPresets.id, id), eq(c2sTunnelPresets.userId, userId)),
+        );
+      if (existing.length === 0) {
+        return res.status(404).json({ error: "Preset not found" });
+      }
+
+      await db
+        .delete(c2sTunnelPresets)
+        .where(
+          and(eq(c2sTunnelPresets.id, id), eq(c2sTunnelPresets.userId, userId)),
+        );
+
+      res.json({ success: true });
+    } catch (error) {
+      authLogger.error("Failed to delete C2S tunnel preset", error);
+      res.status(500).json({ error: "Failed to delete C2S tunnel preset" });
+    }
+  },
+);
+
+export default router;

src/backend/database/routes/credentials.ts

@@ -7,7 +7,7 @@ import { db } from "../db/index.js";
 import {
   sshCredentials,
   sshCredentialUsage,
-  sshData,
+  hosts,
   hostAccess,
 } from "../db/schema.js";
 import { eq, and, desc, sql } from "drizzle-orm";
@@ -147,6 +147,7 @@ router.post(
       key,
       keyPassword,
       keyType,
+      certPublicKey,
     } = req.body;
 
     if (!isNonEmptyString(userId) || !isNonEmptyString(name)) {
@@ -225,11 +226,13 @@ router.post(
         username: username?.trim() || null,
         password: plainPassword,
         key: plainKey,
-        private_key: keyInfo?.privateKey || plainKey,
-        public_key: keyInfo?.publicKey || null,
-        key_password: plainKeyPassword,
+        privateKey: keyInfo?.privateKey || plainKey,
+        publicKey: keyInfo?.publicKey || null,
+        keyPassword: plainKeyPassword,
         keyType: keyType || null,
         detectedKeyType: keyInfo?.keyType || null,
+        certPublicKey:
+          authType === "key" && certPublicKey ? certPublicKey.trim() : null,
         usageCount: 0,
         lastUsed: null,
       };
@@ -431,17 +434,16 @@ router.get(
       if (credential.password) {
         output.password = credential.password;
       }
-      if (credential.key) {
-        output.key = credential.key;
+      output.hasKey = !!credential.key;
+      output.hasKeyPassword = !!credential.keyPassword;
+      if (credential.publicKey) {
+        output.publicKey = credential.publicKey;
       }
-      if (credential.private_key) {
-        output.privateKey = credential.private_key;
+      if (credential.certPublicKey) {
+        output.certPublicKey = credential.certPublicKey;
       }
-      if (credential.public_key) {
-        output.publicKey = credential.public_key;
-      }
-      if (credential.key_password) {
-        output.keyPassword = credential.key_password;
+      if (credential.keyPassword) {
+        output.keyPassword = credential.keyPassword;
       }
 
       res.json(output);
@@ -564,13 +566,16 @@ router.put(
               error: `Invalid SSH key: ${keyInfo.error}`,
             });
           }
-          updateFields.private_key = keyInfo.privateKey;
-          updateFields.public_key = keyInfo.publicKey;
+          updateFields.privateKey = keyInfo.privateKey;
+          updateFields.publicKey = keyInfo.publicKey;
           updateFields.detectedKeyType = keyInfo.keyType;
         }
       }
       if (updateData.keyPassword !== undefined) {
-        updateFields.key_password = updateData.keyPassword || null;
+        updateFields.keyPassword = updateData.keyPassword || null;
+      }
+      if (updateData.certPublicKey !== undefined) {
+        updateFields.certPublicKey = updateData.certPublicKey?.trim() || null;
       }
 
       if (Object.keys(updateFields).length === 0) {
@@ -614,7 +619,6 @@ router.put(
         userId,
       );
 
-      const credential = updated[0];
       authLogger.success("SSH credential updated", {
         operation: "credential_update_success",
         userId,
@@ -691,29 +695,23 @@ router.delete(
 
       const hostsUsingCredential = await db
         .select()
-        .from(sshData)
+        .from(hosts)
         .where(
-          and(
-            eq(sshData.credentialId, parseInt(id)),
-            eq(sshData.userId, userId),
-          ),
+          and(eq(hosts.credentialId, parseInt(id)), eq(hosts.userId, userId)),
         );
 
       if (hostsUsingCredential.length > 0) {
         await db
-          .update(sshData)
+          .update(hosts)
           .set({
             credentialId: null,
             password: null,
             key: null,
-            key_password: null,
+            keyPassword: null,
             authType: "password",
           })
           .where(
-            and(
-              eq(sshData.credentialId, parseInt(id)),
-              eq(sshData.userId, userId),
-            ),
+            and(eq(hosts.credentialId, parseInt(id)), eq(hosts.userId, userId)),
           );
 
         for (const host of hostsUsingCredential) {
@@ -751,7 +749,6 @@ router.delete(
           ),
         );
 
-      const credential = credentialToDelete[0];
       authLogger.success("SSH credential deleted", {
         operation: "credential_delete_success",
         userId,
@@ -837,20 +834,18 @@ router.post(
       const credential = credentials[0];
 
       await db
-        .update(sshData)
+        .update(hosts)
         .set({
           credentialId: parseInt(credentialId),
           username: (credential.username as string) || "",
-          authType: (credential.auth_type || credential.authType) as string,
+          authType: credential.authType as string,
           password: null,
           key: null,
-          key_password: null,
+          keyPassword: null,
           keyType: null,
           updatedAt: new Date().toISOString(),
         })
-        .where(
-          and(eq(sshData.id, parseInt(hostId)), eq(sshData.userId, userId)),
-        );
+        .where(and(eq(hosts.id, parseInt(hostId)), eq(hosts.userId, userId)));
 
       await db.insert(sshCredentialUsage).values({
         credentialId: parseInt(credentialId),
@@ -917,17 +912,17 @@ router.get(
     }
 
     try {
-      const hosts = await db
+      const hostsUsingCredential = await db
         .select()
-        .from(sshData)
+        .from(hosts)
         .where(
           and(
-            eq(sshData.credentialId, parseInt(credentialId)),
-            eq(sshData.userId, userId),
+            eq(hosts.credentialId, parseInt(credentialId)),
+            eq(hosts.userId, userId),
           ),
         );
 
-      res.json(hosts.map((host) => formatSSHHostOutput(host)));
+      res.json(hostsUsingCredential.map((host) => formatSSHHostOutput(host)));
     } catch (err) {
       authLogger.error("Failed to fetch hosts using credential", err);
       res.status(500).json({
@@ -954,15 +949,16 @@ function formatCredentialOutput(
           ? credential.tags.split(",").filter(Boolean)
           : []
         : [],
-    authType: credential.authType || credential.auth_type,
+    authType: credential.authType,
     username: credential.username || null,
-    publicKey: credential.public_key || credential.publicKey,
-    keyType: credential.key_type || credential.keyType,
-    detectedKeyType: credential.detected_key_type || credential.detectedKeyType,
-    usageCount: credential.usage_count || credential.usageCount || 0,
-    lastUsed: credential.last_used || credential.lastUsed,
-    createdAt: credential.created_at || credential.createdAt,
-    updatedAt: credential.updated_at || credential.updatedAt,
+    publicKey: credential.publicKey,
+    hasCertPublicKey: !!credential.certPublicKey,
+    keyType: credential.keyType,
+    detectedKeyType: credential.detectedKeyType,
+    usageCount: credential.usageCount || 0,
+    lastUsed: credential.lastUsed,
+    createdAt: credential.createdAt,
+    updatedAt: credential.updatedAt,
   };
 }
 
@@ -1455,7 +1451,7 @@ router.post(
       const publicKeyString =
         typeof publicKeyPem === "string"
           ? publicKeyPem
-          : publicKeyPem.toString("utf8");
+          : (publicKeyPem as Buffer).toString("utf8");
 
       let keyType = "unknown";
       const asymmetricKeyType = privateKeyObj.asymmetricKeyType;
@@ -1508,7 +1504,7 @@ async function deploySSHKeyToHost(
   hostConfig: Record<string, unknown>,
   credData: CredentialBackend,
 ): Promise<{ success: boolean; message?: string; error?: string }> {
-  const publicKey = credData.public_key as string;
+  const publicKey = credData.publicKey as string;
   return new Promise((resolve) => {
     const conn = new Client();
 
@@ -1627,9 +1623,12 @@ async function deploySSHKeyToHost(
           const escapedKey = actualPublicKey
             .replace(/\\/g, "\\\\")
             .replace(/'/g, "'\\''");
+          const escapedName = credData.name
+            .replace(/\\/g, "\\\\")
+            .replace(/'/g, "'\\''");
 
           conn.exec(
-            `printf '%s\n' '${escapedKey} ${credData.name}@Termix' >> ~/.ssh/authorized_keys && chmod 600 ~/.ssh/authorized_keys`,
+            `printf '%s\n' '${escapedKey} ${escapedName}@Termix' >> ~/.ssh/authorized_keys && chmod 600 ~/.ssh/authorized_keys`,
             (err, stream) => {
               if (err) {
                 clearTimeout(addTimeout);
@@ -1934,7 +1933,7 @@ router.post(
         });
       }
 
-      const publicKey = credData.public_key;
+      const publicKey = credData.publicKey;
       if (!publicKey) {
         return res.status(400).json({
           success: false,
@@ -1942,7 +1941,7 @@ router.post(
         });
       }
       const targetHost = await SimpleDBOps.select(
-        db.select().from(sshData).where(eq(sshData.id, targetHostId)).limit(1),
+        db.select().from(hosts).where(eq(hosts.id, targetHostId)).limit(1),
         "ssh_data",
         userId,
       );
@@ -1990,15 +1989,14 @@ router.post(
           if (hostCredential && hostCredential.length > 0) {
             const cred = hostCredential[0];
 
-            hostConfig.authType = cred.auth_type || cred.authType;
+            hostConfig.authType = cred.authType;
             hostConfig.username = cred.username;
 
-            if ((cred.auth_type || cred.authType) === "password") {
+            if (cred.authType === "password") {
               hostConfig.password = cred.password;
-            } else if ((cred.auth_type || cred.authType) === "key") {
-              hostConfig.privateKey =
-                cred.private_key || cred.privateKey || cred.key;
-              hostConfig.keyPassword = cred.key_password || cred.keyPassword;
+            } else if (cred.authType === "key") {
+              hostConfig.privateKey = cred.privateKey || cred.key;
+              hostConfig.keyPassword = cred.keyPassword;
             }
           } else {
             return res.status(400).json({

src/backend/database/routes/open-tabs.ts

@@ -0,0 +1,302 @@
+import type { AuthenticatedRequest } from "../../../types/index.js";
+import express from "express";
+import { db } from "../db/index.js";
+import { userOpenTabs } from "../db/schema.js";
+import { eq, and, sql } from "drizzle-orm";
+import type { Request, Response } from "express";
+import { databaseLogger } from "../../utils/logger.js";
+import { AuthManager } from "../../utils/auth-manager.js";
+import { sessionManager } from "../../ssh/terminal-session-manager.js";
+
+const router = express.Router();
+const authManager = AuthManager.getInstance();
+const authenticateJWT = authManager.createAuthMiddleware();
+
+/**
+ * @openapi
+ * /open-tabs:
+ *   get:
+ *     summary: Get all open tabs for the current user
+ *     tags:
+ *       - Open Tabs
+ *     responses:
+ *       200:
+ *         description: List of open tabs ordered by tab_order.
+ */
+const TAB_TTL_MS = 30 * 60 * 1000;
+
+router.get("/", authenticateJWT, async (req: Request, res: Response) => {
+  const userId = (req as AuthenticatedRequest).userId;
+  try {
+    const cutoff = new Date(Date.now() - TAB_TTL_MS).toISOString();
+    const tabs = db
+      .select()
+      .from(userOpenTabs)
+      .where(and(eq(userOpenTabs.userId, userId), sql`${userOpenTabs.updatedAt} > ${cutoff}`))
+      .orderBy(userOpenTabs.tabOrder)
+      .all();
+    return res.json(tabs);
+  } catch (e) {
+    databaseLogger.error("Failed to get open tabs", e, { operation: "get_open_tabs", userId });
+    return res.status(500).json({ error: "Failed to get open tabs" });
+  }
+});
+
+/**
+ * @openapi
+ * /open-tabs:
+ *   post:
+ *     summary: Upsert a single open tab for the current user
+ *     tags:
+ *       - Open Tabs
+ *     requestBody:
+ *       required: true
+ *       content:
+ *         application/json:
+ *           schema:
+ *             type: object
+ *             required: [id, tabType, label, tabOrder]
+ *             properties:
+ *               id:
+ *                 type: string
+ *               tabType:
+ *                 type: string
+ *               hostId:
+ *                 type: integer
+ *                 nullable: true
+ *               label:
+ *                 type: string
+ *               tabOrder:
+ *                 type: integer
+ *               backendSessionId:
+ *                 type: string
+ *                 nullable: true
+ *     responses:
+ *       200:
+ *         description: Tab upserted successfully.
+ */
+router.post("/", authenticateJWT, async (req: Request, res: Response) => {
+  const userId = (req as AuthenticatedRequest).userId;
+  const { id, tabType, hostId, label, tabOrder, backendSessionId } = req.body as {
+    id: string;
+    tabType: string;
+    hostId?: number | null;
+    label: string;
+    tabOrder: number;
+    backendSessionId?: string | null;
+  };
+
+  if (!id || !tabType || !label) {
+    return res.status(400).json({ error: "id, tabType, and label are required" });
+  }
+
+  try {
+    const now = new Date().toISOString();
+    const existing = db.select().from(userOpenTabs).where(and(eq(userOpenTabs.id, id), eq(userOpenTabs.userId, userId))).all();
+    if (existing.length > 0) {
+      // Preserve existing backendSessionId when not explicitly provided
+      const sessionId = backendSessionId !== undefined ? backendSessionId : existing[0].backendSessionId;
+      db.update(userOpenTabs)
+        .set({ tabType, hostId: hostId ?? null, label, tabOrder, backendSessionId: sessionId ?? null, updatedAt: now })
+        .where(and(eq(userOpenTabs.id, id), eq(userOpenTabs.userId, userId)))
+        .run();
+    } else {
+      db.insert(userOpenTabs).values({ id, userId, tabType, hostId: hostId ?? null, label, tabOrder, backendSessionId: backendSessionId ?? null, updatedAt: now }).run();
+    }
+    return res.json({ success: true });
+  } catch (e) {
+    databaseLogger.error("Failed to upsert open tab", e, { operation: "upsert_open_tab", userId, id });
+    return res.status(500).json({ error: "Failed to upsert open tab" });
+  }
+});
+
+/**
+ * @openapi
+ * /open-tabs:
+ *   put:
+ *     summary: Bulk replace all open tabs for the current user
+ *     tags:
+ *       - Open Tabs
+ *     requestBody:
+ *       required: true
+ *       content:
+ *         application/json:
+ *           schema:
+ *             type: object
+ *             properties:
+ *               tabs:
+ *                 type: array
+ *     responses:
+ *       200:
+ *         description: Tabs updated successfully.
+ */
+router.put("/", authenticateJWT, async (req: Request, res: Response) => {
+  const userId = (req as AuthenticatedRequest).userId;
+  const { tabs } = req.body as {
+    tabs: Array<{
+      id: string;
+      tabType: string;
+      hostId?: number | null;
+      label: string;
+      tabOrder: number;
+      backendSessionId?: string | null;
+    }>;
+  };
+
+  if (!Array.isArray(tabs)) {
+    return res.status(400).json({ error: "tabs must be an array" });
+  }
+
+  try {
+    db.delete(userOpenTabs).where(eq(userOpenTabs.userId, userId)).run();
+    if (tabs.length > 0) {
+      const now = new Date().toISOString();
+      db.insert(userOpenTabs).values(
+        tabs.map((t) => ({
+          id: t.id,
+          userId,
+          tabType: t.tabType,
+          hostId: t.hostId ?? null,
+          label: t.label,
+          tabOrder: t.tabOrder,
+          backendSessionId: t.backendSessionId ?? null,
+          updatedAt: now,
+        })),
+      ).run();
+    }
+    return res.json({ success: true });
+  } catch (e) {
+    databaseLogger.error("Failed to sync open tabs", e, { operation: "sync_open_tabs", userId });
+    return res.status(500).json({ error: "Failed to sync open tabs" });
+  }
+});
+
+/**
+ * @openapi
+ * /open-tabs/{id}:
+ *   patch:
+ *     summary: Update a single open tab
+ *     tags:
+ *       - Open Tabs
+ *     parameters:
+ *       - in: path
+ *         name: id
+ *         required: true
+ *         schema:
+ *           type: string
+ *     responses:
+ *       200:
+ *         description: Tab updated successfully.
+ *       404:
+ *         description: Tab not found.
+ */
+router.patch("/:id", authenticateJWT, async (req: Request, res: Response) => {
+  const userId = (req as AuthenticatedRequest).userId;
+  const id = String(req.params.id);
+  const updates = req.body as Partial<{
+    label: string;
+    tabOrder: number;
+    backendSessionId: string | null;
+  }>;
+
+  try {
+    const result = db
+      .update(userOpenTabs)
+      .set({ ...updates, updatedAt: new Date().toISOString() })
+      .where(and(eq(userOpenTabs.id, id), eq(userOpenTabs.userId, userId)))
+      .run();
+
+    if (result.changes === 0) {
+      return res.status(404).json({ error: "Tab not found" });
+    }
+    return res.json({ success: true });
+  } catch (e) {
+    databaseLogger.error("Failed to update open tab", e, { operation: "update_open_tab", userId, id });
+    return res.status(500).json({ error: "Failed to update open tab" });
+  }
+});
+
+/**
+ * @openapi
+ * /open-tabs/{id}:
+ *   delete:
+ *     summary: Delete a single open tab
+ *     tags:
+ *       - Open Tabs
+ *     parameters:
+ *       - in: path
+ *         name: id
+ *         required: true
+ *         schema:
+ *           type: string
+ *     responses:
+ *       200:
+ *         description: Tab deleted successfully.
+ */
+router.delete("/:id", authenticateJWT, async (req: Request, res: Response) => {
+  const userId = (req as AuthenticatedRequest).userId;
+  const id = String(req.params.id);
+
+  try {
+    db.delete(userOpenTabs)
+      .where(and(eq(userOpenTabs.id, id), eq(userOpenTabs.userId, userId)))
+      .run();
+    return res.json({ success: true });
+  } catch (e) {
+    databaseLogger.error("Failed to delete open tab", e, { operation: "delete_open_tab", userId, id });
+    return res.status(500).json({ error: "Failed to delete open tab" });
+  }
+});
+
+/**
+ * @openapi
+ * /open-tabs/active-sessions:
+ *   get:
+ *     summary: Get all active backend sessions for the current user
+ *     description: Returns live terminal sessions from the session manager. Used by the Active Connections panel and tab restore logic.
+ *     tags:
+ *       - Open Tabs
+ *     responses:
+ *       200:
+ *         description: List of active sessions.
+ *         content:
+ *           application/json:
+ *             schema:
+ *               type: array
+ *               items:
+ *                 type: object
+ *                 properties:
+ *                   sessionId:
+ *                     type: string
+ *                   hostId:
+ *                     type: integer
+ *                   hostName:
+ *                     type: string
+ *                   tabInstanceId:
+ *                     type: string
+ *                   isConnected:
+ *                     type: boolean
+ *                   createdAt:
+ *                     type: number
+ */
+router.get("/active-sessions", authenticateJWT, async (req: Request, res: Response) => {
+  const userId = (req as AuthenticatedRequest).userId;
+  try {
+    const sessions = sessionManager.getUserSessions(userId);
+    return res.json(
+      sessions.map((s) => ({
+        sessionId: s.id,
+        hostId: s.hostId,
+        hostName: s.hostName,
+        tabInstanceId: s.attachedTabInstanceId ?? s.tabInstanceId ?? null,
+        isConnected: s.isConnected,
+        createdAt: s.createdAt,
+      })),
+    );
+  } catch (e) {
+    databaseLogger.error("Failed to get active sessions", e, { operation: "get_active_sessions", userId });
+    return res.status(500).json({ error: "Failed to get active sessions" });
+  }
+});
+
+export default router;