fix invite flow

Add postgres pool info to config
2026-01-29 06:10:47 +00:00 · 2025-10-07 21:15:14 -07:00 · 2025-10-07 15:11:10 -07:00
413 changed files with 11596 additions and 17242 deletions
--- a/.dockerignore
+++ b/.dockerignore
@@ -29,6 +29,4 @@ CONTRIBUTING.md
 dist
 .git
 migrations/
-config/
-build.ts
-tsconfig.json
+config/
--- a/.github/workflows/cicd.yml
+++ b/.github/workflows/cicd.yml
@@ -1,61 +1,34 @@
 name: CI/CD Pipeline

-# CI/CD workflow for building, publishing, mirroring, signing container images and building release binaries.
-# Actions are pinned to specific SHAs to reduce supply-chain risk. This workflow triggers on tag push events.
-
-permissions:
-  contents: read
-  packages: write      # for GHCR push
-  id-token: write      # for Cosign Keyless (OIDC) Signing
-
-# Required secrets:
-# - DOCKER_HUB_USERNAME / DOCKER_HUB_ACCESS_TOKEN: push to Docker Hub
-# - GITHUB_TOKEN: used for GHCR login and OIDC keyless signing
-# - COSIGN_PRIVATE_KEY / COSIGN_PASSWORD / COSIGN_PUBLIC_KEY: for key-based signing
-
 on:
    push:
        tags:
-            - "[0-9]+.[0-9]+.[0-9]+"
-
-concurrency:
-  group: ${{ github.ref }}
-  cancel-in-progress: true
+            - "*"

 jobs:
    release:
        name: Build and Release
-        runs-on: [self-hosted, linux, x64]
-        # Job-level timeout to avoid runaway or stuck runs
-        timeout-minutes: 120
-        env:
-          # Target images
-          DOCKERHUB_IMAGE: docker.io/${{ secrets.DOCKER_HUB_USERNAME }}/${{ github.event.repository.name }}
-          GHCR_IMAGE: ghcr.io/${{ github.repository_owner }}/${{ github.event.repository.name }}
+        runs-on: ubuntu-latest

        steps:
            - name: Checkout code
-              uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
-
-            - name: Set up QEMU
-              uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # v3.6.0
+              uses: actions/checkout@v5

            - name: Set up Docker Buildx
-              uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1
+              uses: docker/setup-buildx-action@v3

            - name: Log in to Docker Hub
-              uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0
+              uses: docker/login-action@v3
              with:
-                  registry: docker.io
                  username: ${{ secrets.DOCKER_HUB_USERNAME }}
                  password: ${{ secrets.DOCKER_HUB_ACCESS_TOKEN }}
+
            - name: Extract tag name
              id: get-tag
              run: echo "TAG=${GITHUB_REF#refs/tags/}" >> $GITHUB_ENV
-              shell: bash

            - name: Install Go
-              uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
+              uses: actions/setup-go@v6
              with:
                  go-version: 1.24

@@ -64,21 +37,18 @@ jobs:
                  TAG=${{ env.TAG }}
                  sed -i "s/export const APP_VERSION = \".*\";/export const APP_VERSION = \"$TAG\";/" server/lib/consts.ts
                  cat server/lib/consts.ts
-              shell: bash

            - name: Pull latest Gerbil version
              id: get-gerbil-tag
              run: |
                  LATEST_TAG=$(curl -s https://api.github.com/repos/fosrl/gerbil/tags | jq -r '.[0].name')
                  echo "LATEST_GERBIL_TAG=$LATEST_TAG" >> $GITHUB_ENV
-              shell: bash

            - name: Pull latest Badger version
              id: get-badger-tag
              run: |
                  LATEST_TAG=$(curl -s https://api.github.com/repos/fosrl/badger/tags | jq -r '.[0].name')
                  echo "LATEST_BADGER_TAG=$LATEST_TAG" >> $GITHUB_ENV
-              shell: bash

            - name: Update install/main.go
              run: |
@@ -90,7 +60,6 @@ jobs:
                  sed -i "s/config.BadgerVersion = \".*\"/config.BadgerVersion = \"$BADGER_VERSION\"/" install/main.go
                  echo "Updated install/main.go with Pangolin version $PANGOLIN_VERSION, Gerbil version $GERBIL_VERSION, and Badger version $BADGER_VERSION"
                  cat install/main.go
-              shell: bash

            - name: Build installer
              working-directory: install
@@ -98,84 +67,12 @@ jobs:
                  make go-build-release 

            - name: Upload artifacts from /install/bin
-              uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+              uses: actions/upload-artifact@v4
              with:
                  name: install-bin
                  path: install/bin/

-            - name: Build and push Docker images (Docker Hub)
+            - name: Build and push Docker images
              run: |
                  TAG=${{ env.TAG }}
                  make build-release tag=$TAG
-                  echo "Built & pushed to: ${{ env.DOCKERHUB_IMAGE }}:${TAG}"
-              shell: bash
-
-            - name: Login in to GHCR
-              uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0
-              with:
-                  registry: ghcr.io
-                  username: ${{ github.actor }}
-                  password: ${{ secrets.GITHUB_TOKEN }}
-
-            - name: Install skopeo + jq
-              # skopeo: copy/inspect images between registries
-              # jq: JSON parsing tool used to extract digest values
-              run: |
-                  sudo apt-get update -y
-                  sudo apt-get install -y skopeo jq
-                  skopeo --version
-              shell: bash
-
-            - name: Copy tag from Docker Hub to GHCR
-              # Mirror the already-built image (all architectures) to GHCR so we can sign it
-              run: |
-                  set -euo pipefail
-                  TAG=${{ env.TAG }}
-                  echo "Copying ${{ env.DOCKERHUB_IMAGE }}:${TAG} -> ${{ env.GHCR_IMAGE }}:${TAG}"
-                  skopeo copy --all --retry-times 3 \
-                    docker://$DOCKERHUB_IMAGE:$TAG \
-                    docker://$GHCR_IMAGE:$TAG
-              shell: bash
-
-            - name: Install cosign
-              # cosign is used to sign and verify container images (key and keyless)
-              uses: sigstore/cosign-installer@faadad0cce49287aee09b3a48701e75088a2c6ad # v4.0.0
-
-            - name: Dual-sign and verify (GHCR & Docker Hub)
-              # Sign each image by digest using keyless (OIDC) and key-based signing,
-              # then verify both the public key signature and the keyless OIDC signature.
-              env:
-                  TAG: ${{ env.TAG }}
-                  COSIGN_PRIVATE_KEY: ${{ secrets.COSIGN_PRIVATE_KEY }}
-                  COSIGN_PASSWORD: ${{ secrets.COSIGN_PASSWORD }}
-                  COSIGN_PUBLIC_KEY: ${{ secrets.COSIGN_PUBLIC_KEY }}
-                  COSIGN_YES: "true"
-              run: |
-                  set -euo pipefail
-
-                  issuer="https://token.actions.githubusercontent.com"
-                  id_regex="^https://github.com/${{ github.repository }}/.+"  # accept this repo (all workflows/refs)
-
-                  for IMAGE in "${GHCR_IMAGE}" "${DOCKERHUB_IMAGE}"; do
-                    echo "Processing ${IMAGE}:${TAG}"
-
-                    DIGEST="$(skopeo inspect --retry-times 3 docker://${IMAGE}:${TAG} | jq -r '.Digest')"
-                    REF="${IMAGE}@${DIGEST}"
-                    echo "Resolved digest: ${REF}"
-
-                    echo "==> cosign sign (keyless) --recursive ${REF}"
-                    cosign sign --recursive "${REF}"
-
-                    echo "==> cosign sign (key) --recursive ${REF}"
-                    cosign sign --key env://COSIGN_PRIVATE_KEY --recursive "${REF}"
-
-                    echo "==> cosign verify (public key) ${REF}"
-                    cosign verify --key env://COSIGN_PUBLIC_KEY "${REF}" -o text
-
-                    echo "==> cosign verify (keyless policy) ${REF}"
-                    cosign verify \
-                      --certificate-oidc-issuer "${issuer}" \
-                      --certificate-identity-regexp "${id_regex}" \
-                      "${REF}" -o text
-                  done
-              shell: bash
--- a/.github/workflows/linting.yml
+++ b/.github/workflows/linting.yml
@@ -1,8 +1,5 @@
 name: ESLint

-permissions:
-  contents: read
-
 on:
    pull_request:
        paths:
@@ -21,10 +18,10 @@ jobs:
        runs-on: ubuntu-latest
        steps:
            - name: Checkout code
-              uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+              uses: actions/checkout@v5

            - name: Set up Node.js
-              uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
+              uses: actions/setup-node@v5
              with:
                node-version: '22'

@@ -35,4 +32,4 @@ jobs:
              run: npm run set:oss

            - name: Run ESLint
-              run: npx eslint . --ext .js,.jsx,.ts,.tsx
+              run: npx eslint . --ext .js,.jsx,.ts,.tsx
--- a/.github/workflows/mirror.yaml
+++ b/.github/workflows/mirror.yaml
@@ -1,132 +0,0 @@
-name: Mirror & Sign (Docker Hub to GHCR)
-
-on:
-  workflow_dispatch: {}
-
-permissions:
-  contents: read
-  packages: write
-  id-token: write   # for keyless OIDC
-
-env:
-  SOURCE_IMAGE: docker.io/fosrl/pangolin
-  DEST_IMAGE: ghcr.io/${{ github.repository_owner }}/${{ github.event.repository.name }}
-
-jobs:
-  mirror-and-dual-sign:
-    runs-on: amd64-runner
-    steps:
-      - name: Install skopeo + jq
-        run: |
-          sudo apt-get update -y
-          sudo apt-get install -y skopeo jq
-          skopeo --version
-
-      - name: Install cosign
-        uses: sigstore/cosign-installer@faadad0cce49287aee09b3a48701e75088a2c6ad # v4.0.0
-
-      - name: Input check
-        run: |
-          test -n "${SOURCE_IMAGE}" || (echo "SOURCE_IMAGE is empty" && exit 1)
-          echo "Source : ${SOURCE_IMAGE}"
-          echo "Target : ${DEST_IMAGE}"
-
-      # Auth for skopeo (containers-auth)
-      - name: Skopeo login to GHCR
-        run: |
-          skopeo login ghcr.io -u "${{ github.actor }}" -p "${{ secrets.GITHUB_TOKEN }}"
-
-      # Auth for cosign (docker-config)
-      - name: Docker login to GHCR (for cosign)
-        run: |
-          echo "${{ secrets.GITHUB_TOKEN }}" | docker login ghcr.io -u "${{ github.actor }}" --password-stdin
-
-      - name: List source tags
-        run: |
-          set -euo pipefail
-          skopeo list-tags --retry-times 3 docker://"${SOURCE_IMAGE}" \
-            | jq -r '.Tags[]' | sort -u > src-tags.txt
-          echo "Found source tags: $(wc -l < src-tags.txt)"
-          head -n 20 src-tags.txt || true
-
-      - name: List destination tags (skip existing)
-        run: |
-          set -euo pipefail
-          if skopeo list-tags --retry-times 3 docker://"${DEST_IMAGE}" >/tmp/dst.json 2>/dev/null; then
-            jq -r '.Tags[]' /tmp/dst.json | sort -u > dst-tags.txt
-          else
-            : > dst-tags.txt
-          fi
-          echo "Existing destination tags: $(wc -l < dst-tags.txt)"
-
-      - name: Mirror, dual-sign, and verify
-        env:
-          # keyless
-          COSIGN_YES: "true"
-          # key-based
-          COSIGN_PRIVATE_KEY: ${{ secrets.COSIGN_PRIVATE_KEY }}
-          COSIGN_PASSWORD:    ${{ secrets.COSIGN_PASSWORD }}
-          # verify
-          COSIGN_PUBLIC_KEY:  ${{ secrets.COSIGN_PUBLIC_KEY }}
-        run: |
-          set -euo pipefail
-          copied=0; skipped=0; v_ok=0; errs=0
-
-          issuer="https://token.actions.githubusercontent.com"
-          id_regex="^https://github.com/${{ github.repository }}/.+"
-
-          while read -r tag; do
-            [ -z "$tag" ] && continue
-
-            if grep -Fxq "$tag" dst-tags.txt; then
-              echo "::notice ::Skip (exists) ${DEST_IMAGE}:${tag}"
-              skipped=$((skipped+1))
-              continue
-            fi
-
-            echo "==> Copy ${SOURCE_IMAGE}:${tag} → ${DEST_IMAGE}:${tag}"
-            if ! skopeo copy --all --retry-times 3 \
-                 docker://"${SOURCE_IMAGE}:${tag}" docker://"${DEST_IMAGE}:${tag}"; then
-              echo "::warning title=Copy failed::${SOURCE_IMAGE}:${tag}"
-              errs=$((errs+1)); continue
-            fi
-            copied=$((copied+1))
-
-            digest="$(skopeo inspect --retry-times 3 docker://"${DEST_IMAGE}:${tag}" | jq -r '.Digest')"
-            ref="${DEST_IMAGE}@${digest}"
-
-            echo "==> cosign sign (keyless) --recursive ${ref}"
-            if ! cosign sign --recursive "${ref}"; then
-              echo "::warning title=Keyless sign failed::${ref}"
-              errs=$((errs+1))
-            fi
-
-            echo "==> cosign sign (key) --recursive ${ref}"
-            if ! cosign sign --key env://COSIGN_PRIVATE_KEY --recursive "${ref}"; then
-              echo "::warning title=Key sign failed::${ref}"
-              errs=$((errs+1))
-            fi
-
-            echo "==> cosign verify (public key) ${ref}"
-            if ! cosign verify --key env://COSIGN_PUBLIC_KEY "${ref}" -o text; then
-              echo "::warning title=Verify(pubkey) failed::${ref}"
-              errs=$((errs+1))
-            fi
-
-            echo "==> cosign verify (keyless policy) ${ref}"
-            if ! cosign verify \
-                 --certificate-oidc-issuer "${issuer}" \
-                 --certificate-identity-regexp "${id_regex}" \
-                 "${ref}" -o text; then
-              echo "::warning title=Verify(keyless) failed::${ref}"
-              errs=$((errs+1))
-            else
-              v_ok=$((v_ok+1))
-            fi
-          done < src-tags.txt
-
-          echo "---- Summary ----"
-          echo "Copied        : $copied"
-          echo "Skipped       : $skipped"
-          echo "Verified OK   : $v_ok"
-          echo "Errors        : $errs"
--- a/.github/workflows/stale-bot.yml
+++ b/.github/workflows/stale-bot.yml
@@ -14,7 +14,7 @@ jobs:
  stale:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/stale@5f858e3efba33a5ca4407a664cc011ad407f2008 # v10.1.0
+      - uses: actions/stale@v10
        with:
          days-before-stale: 14
          days-before-close: 14
@@ -34,4 +34,4 @@ jobs:
          operations-per-run: 100
          remove-stale-when-updated: true
          delete-branch: false
-          enable-statistics: true
+          enable-statistics: true
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -1,8 +1,5 @@
 name: Run Tests

-permissions:
-  contents: read
-
 on:
  pull_request:
    branches:
@@ -14,9 +11,9 @@ jobs:
    runs-on: ubuntu-latest

    steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: actions/checkout@v5

-      - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
+      - uses: actions/setup-node@v5
        with:
          node-version: '22'

@@ -38,9 +35,6 @@ jobs:
      - name: Apply database migrations
        run: npm run db:sqlite:push

-      - name: Test with tsc
-        run: npx tsc --noEmit
-
      - name: Start app in background
        run: nohup npm run dev &

--- a/.gitignore
+++ b/.gitignore
@@ -47,6 +47,4 @@ server/db/index.ts
 server/build.ts
 postgres/
 dynamic/
-*.mmdb
-scratch/
-tsconfig.json
+*.mmdb
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -4,7 +4,7 @@ Contributions are welcome!

 Please see the contribution and local development guide on the docs page before getting started:

-https://docs.pangolin.net/development/contributing
+https://docs.digpangolin.com/development/contributing

 ### Licensing Considerations

--- a/24
+++ b/24
@@ -15,29 +15,9 @@ RUN echo "export * from \"./$DATABASE\";" > server/db/index.ts

 RUN echo "export const build = \"$BUILD\" as any;" > server/build.ts

-# Copy the appropriate TypeScript configuration based on build type
-RUN if [ "$BUILD" = "oss" ]; then cp tsconfig.oss.json tsconfig.json; \
-    elif [ "$BUILD" = "saas" ]; then cp tsconfig.saas.json tsconfig.json; \
-    elif [ "$BUILD" = "enterprise" ]; then cp tsconfig.enterprise.json tsconfig.json; \
-    fi
-
-# if the build is oss then remove the server/private directory
-RUN if [ "$BUILD" = "oss" ]; then rm -rf server/private; fi
-
-RUN if [ "$DATABASE" = "pg" ]; then npx drizzle-kit generate --dialect postgresql --schema ./server/db/pg/schema --out init; else npx drizzle-kit generate --dialect $DATABASE --schema ./server/db/$DATABASE/schema --out init; fi
-
-RUN mkdir -p dist
-RUN npm run next:build
-RUN node esbuild.mjs -e server/index.ts -o dist/server.mjs -b $BUILD
-RUN if [ "$DATABASE" = "pg" ]; then \
-        node esbuild.mjs -e server/setup/migrationsPg.ts -o dist/migrations.mjs; \
-    else \
-        node esbuild.mjs -e server/setup/migrationsSqlite.ts -o dist/migrations.mjs; \
-    fi
-
-# test to make sure the build output is there and error if not
-RUN test -f dist/server.mjs
+RUN if [ "$DATABASE" = "pg" ]; then npx drizzle-kit generate --dialect postgresql --schema ./server/db/pg/schema.ts --out init; else npx drizzle-kit generate --dialect $DATABASE --schema ./server/db/$DATABASE/schema.ts --out init; fi

+RUN npm run build:$DATABASE
 RUN npm run build:cli

 FROM node:22-alpine AS runner
--- a/20
+++ b/20
@@ -8,7 +8,6 @@ build-release:
 		exit 1; \
 	fi
 	docker buildx build \
-		--build-arg BUILD=oss \
 		--build-arg DATABASE=sqlite \
 		--platform linux/arm64,linux/amd64 \
 		--tag fosrl/pangolin:latest \
@@ -17,7 +16,6 @@ build-release:
 		--tag fosrl/pangolin:$(tag) \
 		--push .
 	docker buildx build \
-		--build-arg BUILD=oss \
 		--build-arg DATABASE=pg \
 		--platform linux/arm64,linux/amd64 \
 		--tag fosrl/pangolin:postgresql-latest \
@@ -25,24 +23,6 @@ build-release:
 		--tag fosrl/pangolin:postgresql-$(minor_tag) \
 		--tag fosrl/pangolin:postgresql-$(tag) \
 		--push .
-	docker buildx build \
-		--build-arg BUILD=enterprise \
-		--build-arg DATABASE=sqlite \
-		--platform linux/arm64,linux/amd64 \
-		--tag fosrl/pangolin:ee-latest \
-		--tag fosrl/pangolin:ee-$(major_tag) \
-		--tag fosrl/pangolin:ee-$(minor_tag) \
-		--tag fosrl/pangolin:ee-$(tag) \
-		--push .
-	docker buildx build \
-		--build-arg BUILD=enterprise \
-		--build-arg DATABASE=pg \
-		--platform linux/arm64,linux/amd64 \
-		--tag fosrl/pangolin:ee-postgresql-latest \
-		--tag fosrl/pangolin:ee-postgresql-$(major_tag) \
-		--tag fosrl/pangolin:ee-postgresql-$(minor_tag) \
-		--tag fosrl/pangolin:ee-postgresql-$(tag) \
-		--push .

 build-arm:
 	docker buildx build --platform linux/arm64 -t fosrl/pangolin:latest .
--- a/README.md
+++ b/README.md
@@ -1,88 +1,157 @@
 <div align="center">
    <h2>
-    <a href="https://pangolin.net/">
-        <picture>
-            <source media="(prefers-color-scheme: dark)" srcset="public/logo/word_mark_white.png">
-            <img alt="Pangolin Logo" src="public/logo/word_mark_black.png" width="350">
+      <picture>
+          <source media="(prefers-color-scheme: dark)" srcset="public/logo/word_mark_white.png">
+          <img alt="Pangolin Logo" src="public/logo/word_mark_black.png" width="250">
        </picture>
-    </a>
    </h2>
 </div>

+<h4 align="center">Secure gateway to your private networks</h4>
+<div align="center">
+
+_Pangolin tunnels your services to the internet so you can access anything from anywhere._
+
+</div>
+
 <div align="center">
  <h5>
-      <a href="https://pangolin.net/">
+      <a href="https://digpangolin.com">
        Website
      </a>
      <span> | </span>
-      <a href="https://docs.pangolin.net/">
-        Documentation
+      <a href="https://docs.digpangolin.com/self-host/quick-install-managed">
+        Quick Install Guide
      </a>
      <span> | </span>
-      <a href="mailto:contact@pangolin.net">
+      <a href="mailto:contact@fossorial.io">
        Contact Us
      </a>
+      <span> | </span>
+      <a href="https://digpangolin.com/slack">
+        Slack
+      </a>
+      <span> | </span>
+      <a href="https://discord.gg/HCJR8Xhme4">
+        Discord
+      </a>
  </h5>
-</div>

-<div align="center">
-
-[![Discord](https://img.shields.io/discord/1325658630518865980?logo=discord&style=flat-square)](https://discord.gg/HCJR8Xhme4)
-[![Slack](https://img.shields.io/badge/chat-slack-yellow?style=flat-square&logo=slack)](https://pangolin.net/slack)
+[![Slack](https://img.shields.io/badge/chat-slack-yellow?style=flat-square&logo=slack)](https://digpangolin.com/slack)
 [![Docker](https://img.shields.io/docker/pulls/fosrl/pangolin?style=flat-square)](https://hub.docker.com/r/fosrl/pangolin)
 ![Stars](https://img.shields.io/github/stars/fosrl/pangolin?style=flat-square)
+[![Discord](https://img.shields.io/discord/1325658630518865980?logo=discord&style=flat-square)](https://discord.gg/HCJR8Xhme4)
 [![YouTube](https://img.shields.io/badge/YouTube-red?logo=youtube&logoColor=white&style=flat-square)](https://www.youtube.com/@fossorial-app)

 </div>

 <p align="center">
    <strong>
-        Start testing Pangolin at <a href="https://app.pangolin.net/auth/signup">app.pangolin.net</a>
+        Start testing Pangolin at <a href="https://pangolin.fossorial.io/auth/signup">pangolin.fossorial.io</a>
    </strong>
 </p>

-Pangolin is a self-hosted tunneled reverse proxy server with identity and context aware access control, designed to easily expose and protect applications running anywhere. Pangolin acts as a central hub and connects isolated networks — even those behind restrictive firewalls — through encrypted tunnels, enabling easy access to remote services without opening ports or requiring a VPN.
+Pangolin is a self-hosted tunneled reverse proxy server with identity and access control, designed to securely expose private resources on distributed networks. Acting as a central hub, it connects isolated networks — even those behind restrictive firewalls — through encrypted tunnels, enabling easy access to remote services without opening ports.

-## Installation
+<img src="public/screenshots/hero.png" alt="Preview"/>

-Check out the [quick install guide](https://docs.pangolin.net/self-host/quick-install) for how to install and set up Pangolin.
-
-## Deployment Options
-
-| <img width=500 /> | Description |
-|-----------------|--------------|
-| **Self-Host: Community Edition** | Free, open source, and licensed under AGPL-3. |
-| **Self-Host: Enterprise Edition** | Licensed under Fossorial Commercial License. Free for personal and hobbyist use, and for businesses earning under \$100K USD annually. |
-| **Pangolin Cloud** | Fully managed service with instant setup and pay-as-you-go pricing — no infrastructure required. Or, self-host your own [remote node](https://docs.pangolin.net/manage/remote-node/nodes) and connect to our control plane. |
+![gif](public/clip.gif)

 ## Key Features

-Pangolin packages everything you need for seamless application access and exposure into one cohesive platform.
+### Reverse Proxy Through WireGuard Tunnel

-| <img width=500 />                                                                                                                                                                                                                                                                                                                                                                | <img width=500 />                                                  |
-|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|--------------------------------------------------------------------|
-| **Manage applications in one place**<br /><br /> Pangolin provides a unified dashboard where you can monitor, configure, and secure all of your services regardless of where they are hosted.                                                                                                                                                                                    | <img src="public/screenshots/hero.png" width=500 /><tr></tr> |
-| **Reverse proxy across networks anywhere**<br /><br />Route traffic via tunnels to any private network. Pangolin works like a reverse proxy that spans multiple networks and handles routing, load balancing, health checking, and more to the right services on the other end.                                                                                                  | <img src="public/screenshots/sites.png" width=500 /><tr></tr>          |
-| **Enforce identity and context aware rules**<br /><br />Protect your applications with identity and context aware rules such as SSO, OIDC, PIN, password, temporary share links, geolocation, IP, and more.                                                                                                                                                                                                | <img src="public/auth-diagram1.png" width=500 /><tr></tr>               |
-| **Quickly connect Pangolin sites**<br /><br />Pangolin's lightweight [Newt](https://github.com/fosrl/newt) client runs in userspace and can run anywhere. Use it as a site connector to route traffic to backends across all of your environments.                                                                                                                                                                                   | <img src="public/clip.gif" width=500 /><tr></tr>               |
+- Expose private resources on your network **without opening ports** (firewall punching).
+- Secure and easy to configure private connectivity via a custom **user space WireGuard client**, [Newt](https://github.com/fosrl/newt).
+- Built-in support for any WireGuard client.
+- Automated **SSL certificates** (https) via [LetsEncrypt](https://letsencrypt.org/).
+- Support for HTTP/HTTPS and **raw TCP/UDP services**.
+- Load balancing.
+- Extend functionality with existing [Traefik](https://github.com/traefik/traefik) plugins, such as [CrowdSec](https://plugins.traefik.io/plugins/6335346ca4caa9ddeffda116/crowdsec-bouncer-traefik-plugin) and [Geoblock](https://github.com/PascalMinder/geoblock).
+    - **Automatically install and configure Crowdsec via Pangolin's installer script.**
+- Attach as many sites to the central server as you wish.

-## Get Started
+### Identity & Access Management

-### Check out the docs
+- Centralized authentication system using platform SSO. **Users will only have to manage one login.**
+- **Define access control rules for IPs, IP ranges, and URL paths per resource.**
+- TOTP with backup codes for two-factor authentication.
+- Create organizations, each with multiple sites, users, and roles.
+- **Role-based access control** to manage resource access permissions.
+- Additional authentication options include:
+    - Email whitelisting with **one-time passcodes.**
+    - **Temporary, self-destructing share links.**
+    - Resource specific pin codes.
+    - Resource specific passwords.
+    - Passkeys
+- External identity provider (IdP) support with OAuth2/OIDC, such as Authentik, Keycloak, Okta, and others.
+    - Auto-provision users and roles from your IdP.

-We encourage everyone to read the full documentation first, which is
-available at [docs.pangolin.net](https://docs.pangolin.net). This README provides only a very brief subset of
-the docs to illustrate some basic ideas.
+<img src="public/auth-diagram1.png" alt="Auth and diagram"/>

-### Sign up and try now
+## Use Cases

-For Pangolin's managed service, you will first need to create an account at
-[app.pangolin.net](https://app.pangolin.net). We have a generous free tier to get started.
+### Manage Access to Internal Apps
+
+- Grant users access to your apps from anywhere using just a web browser. No client software required.
+
+### Developers and DevOps
+
+- Expose and test internal tools and dashboards like **Grafana**. Bring localhost or private IPs online for easy access.
+
+### Secure API Gateway
+
+- One application load balancer across multiple clouds and on-premises.
+
+### IoT and Edge Devices
+
+- Easily expose **IoT devices**, **edge servers**, or **Raspberry Pi** to the internet for field equipment monitoring.
+
+<img src="public/screenshots/sites.png" alt="Sites"/>
+
+## Deployment Options
+
+### Fully Self Hosted
+
+Host the full application on your own server or on the cloud with a VPS. Take a look at the [documentation](https://docs.digpangolin.com/self-host/quick-install) to get started.
+
+> Many of our users have had a great experience with [RackNerd](https://my.racknerd.com/aff.php?aff=13788). Depending on promotions, you can get a [**VPS with 1 vCPU, 1GB RAM, and ~20GB SSD for just around $12/year**](https://my.racknerd.com/aff.php?aff=13788&pid=912). That's a great deal!
+
+### Pangolin Cloud
+
+Easy to use with simple [pay as you go pricing](https://digpangolin.com/pricing). [Check it out here](https://pangolin.fossorial.io/auth/signup). 
+
+- Everything you get with self hosted Pangolin, but fully managed for you.
+
+### Managed & High Availability
+
+Managed control plane, your infrastructure
+
+- We manage database and control plane.
+- You self-host lightweight exit-node.
+- Traffic flows through your infra.
+- We coordinate failover between your nodes or to Cloud when things go bad.
+
+Try it out using [Pangolin Cloud](https://pangolin.fossorial.io)
+
+### Full Enterprise On-Premises
+
+[Contact us](mailto:numbat@fossorial.io) for a full distributed and enterprise deployments on your infrastructure controlled by your team.
+
+## Project Development / Roadmap
+
+We want to hear your feature requests! Add them to the [discussion board](https://github.com/orgs/fosrl/discussions/categories/feature-requests).

 ## Licensing

-Pangolin is dual licensed under the AGPL-3 and the [Fossorial Commercial License](https://pangolin.net/fcl.html). For inquiries about commercial licensing, please contact us at [contact@pangolin.net](mailto:contact@pangolin.net).
+Pangolin is dual licensed under the AGPL-3 and the Fossorial Commercial license. For inquiries about commercial licensing, please contact us at [numbat@fossorial.io](mailto:numbat@fossorial.io).

 ## Contributions

+Looking for something to contribute? Take a look at issues marked with [help wanted](https://github.com/fosrl/pangolin/issues?q=is%3Aissue%20state%3Aopen%20label%3A%22help%20wanted%22). Also take a look through the freature requests in Discussions - any are available and some are marked as a good first issue.
+
 Please see [CONTRIBUTING](./CONTRIBUTING.md) in the repository for guidelines and best practices.
+
+Please post bug reports and other functional issues in the [Issues](https://github.com/fosrl/pangolin/issues) section of the repository.
+
+If you are looking to help with translations, please contribute [on Crowdin](https://crowdin.com/project/fossorial-pangolin) or open a PR with changes to the translations files found in `messages/`.
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -3,7 +3,7 @@
 If you discover a security vulnerability, please follow the steps below to responsibly disclose it to us:

 1. **Do not create a public GitHub issue or discussion post.** This could put the security of other users at risk.
-2. Send a detailed report to [security@pangolin.net](mailto:security@pangolin.net) or send a **private** message to a maintainer on [Discord](https://discord.gg/HCJR8Xhme4). Include:
+2. Send a detailed report to [security@fossorial.io](mailto:security@fossorial.io) or send a **private** message to a maintainer on [Discord](https://discord.gg/HCJR8Xhme4). Include:

 -   Description and location of the vulnerability.
 -   Potential impact of the vulnerability.
--- a/blueprint.py
+++ b/blueprint.py
@@ -8,7 +8,7 @@ import base64
 YAML_FILE_PATH = 'blueprint.yaml'

 # The API endpoint and headers from the curl request
-API_URL = 'http://api.pangolin.net/v1/org/test/blueprint'
+API_URL = 'http://api.pangolin.fossorial.io/v1/org/test/blueprint'
 HEADERS = {
    'accept': '*/*',
    'Authorization': 'Bearer <your_token_here>',
--- a/blueprint.yaml
+++ b/blueprint.yaml
@@ -28,9 +28,9 @@ proxy-resources:
      # sso-roles:
      #   - Member
      # sso-users:
-      #   - owen@pangolin.net
+      #   - owen@fossorial.io
      # whitelist-users:
-      #   - owen@pangolin.net
+      #   - owen@fossorial.io
    headers:
      - name: X-Example-Header
        value: example-value
--- a/bruno/Auth/login.bru
+++ b/bruno/Auth/login.bru
@@ -12,7 +12,7 @@ post {

 body:json {
  {
-    "email": "owen@pangolin.net",
+    "email": "owen@fossorial.io",
    "password": "Password123!"
  }
 }
--- a/bruno/Auth/reset-password-request.bru
+++ b/bruno/Auth/reset-password-request.bru
@@ -12,6 +12,6 @@ post {

 body:json {
  {
-      "email": "milo@pangolin.net"
+      "email": "milo@fossorial.io"
  }
 }
--- a/bruno/Auth/signup.bru
+++ b/bruno/Auth/signup.bru
@@ -12,7 +12,7 @@ put {

 body:json {
  {
-    "email": "numbat@pangolin.net",
+    "email": "numbat@fossorial.io",
    "password": "Password123!"
  }
 }
--- a/config/config.example.yml
+++ b/config/config.example.yml
@@ -1,5 +1,5 @@
 # To see all available options, please visit the docs:
-# https://docs.pangolin.net/self-host/advanced/config-file
+# https://docs.digpangolin.com/self-host/advanced/config-file

 app:
  dashboard_url: http://localhost:3002
--- a/docker-compose.example.yml
+++ b/docker-compose.example.yml
@@ -20,7 +20,7 @@ services:
      pangolin:
        condition: service_healthy
    command:
-      - --reachableAt=http://gerbil:3004
+      - --reachableAt=http://gerbil:3003
      - --generateAndSaveKeyTo=/var/config/key
      - --remoteConfig=http://pangolin:3001/api/v1/
    volumes:
--- a/drizzle.pg.config.ts
+++ b/drizzle.pg.config.ts
@@ -1,9 +1,16 @@
 import { defineConfig } from "drizzle-kit";
 import path from "path";
+import { build } from "@server/build";

-const schema = [
-    path.join("server", "db", "pg", "schema"),
-];
+let schema;
+if (build === "oss") {
+    schema = [path.join("server", "db", "pg", "schema.ts")];
+} else {
+    schema = [
+        path.join("server", "db", "pg", "schema.ts"),
+        path.join("server", "db", "pg", "privateSchema.ts")
+    ];
+}

 export default defineConfig({
    dialect: "postgresql",
--- a/drizzle.sqlite.config.ts
+++ b/drizzle.sqlite.config.ts
@@ -1,10 +1,17 @@
+import { build } from "@server/build";
 import { APP_PATH } from "@server/lib/consts";
 import { defineConfig } from "drizzle-kit";
 import path from "path";

-const schema = [
-    path.join("server", "db", "sqlite", "schema"),
-];
+let schema;
+if (build === "oss") {
+    schema = [path.join("server", "db", "sqlite", "schema.ts")];
+} else {
+    schema = [
+        path.join("server", "db", "sqlite", "schema.ts"),
+        path.join("server", "db", "sqlite", "privateSchema.ts")
+    ];
+}

 export default defineConfig({
    dialect: "sqlite",
--- a/esbuild.mjs
+++ b/esbuild.mjs
@@ -2,9 +2,8 @@ import esbuild from "esbuild";
 import yargs from "yargs";
 import { hideBin } from "yargs/helpers";
 import { nodeExternalsPlugin } from "esbuild-node-externals";
-import path from "path";
-import fs from "fs";
 // import { glob } from "glob";
+// import path from "path";

 const banner = `
 // patch __dirname
@@ -19,7 +18,7 @@ const require = topLevelCreateRequire(import.meta.url);
 `;

 const argv = yargs(hideBin(process.argv))
-    .usage("Usage: $0 -entry [string] -out [string] -build [string]")
+    .usage("Usage: $0 -entry [string] -out [string]")
    .option("entry", {
        alias: "e",
        describe: "Entry point file",
@@ -32,13 +31,6 @@ const argv = yargs(hideBin(process.argv))
        type: "string",
        demandOption: true,
    })
-    .option("build", {
-        alias: "b",
-        describe: "Build type (oss, saas, enterprise)",
-        type: "string",
-        choices: ["oss", "saas", "enterprise"],
-        default: "oss",
-    })
    .help()
    .alias("help", "h").argv;

@@ -54,179 +46,6 @@ function getPackagePaths() {
    return ["package.json"];
 }

-// Plugin to guard against bad imports from #private
-function privateImportGuardPlugin() {
-    return {
-        name: "private-import-guard",
-        setup(build) {
-            const violations = [];
-
-            build.onResolve({ filter: /^#private\// }, (args) => {
-                const importingFile = args.importer;
-
-                // Check if the importing file is NOT in server/private
-                const normalizedImporter = path.normalize(importingFile);
-                const isInServerPrivate = normalizedImporter.includes(path.normalize("server/private"));
-
-                if (!isInServerPrivate) {
-                    const violation = {
-                        file: importingFile,
-                        importPath: args.path,
-                        resolveDir: args.resolveDir
-                    };
-                    violations.push(violation);
-
-                    console.log(`PRIVATE IMPORT VIOLATION:`);
-                    console.log(`   File: ${importingFile}`);
-                    console.log(`   Import: ${args.path}`);
-                    console.log(`   Resolve dir: ${args.resolveDir || 'N/A'}`);
-                    console.log('');
-                }
-
-                // Return null to let the default resolver handle it
-                return null;
-            });
-
-            build.onEnd((result) => {
-                if (violations.length > 0) {
-                    console.log(`\nSUMMARY: Found ${violations.length} private import violation(s):`);
-                    violations.forEach((v, i) => {
-                        console.log(`   ${i + 1}. ${path.relative(process.cwd(), v.file)} imports ${v.importPath}`);
-                    });
-                    console.log('');
-
-                    result.errors.push({
-                        text: `Private import violations detected: ${violations.length} violation(s) found`,
-                        location: null,
-                        notes: violations.map(v => ({
-                            text: `${path.relative(process.cwd(), v.file)} imports ${v.importPath}`,
-                            location: null
-                        }))
-                    });
-                }
-            });
-        }
-    };
-}
-
-// Plugin to guard against bad imports from #private
-function dynamicImportGuardPlugin() {
-    return {
-        name: "dynamic-import-guard",
-        setup(build) {
-            const violations = [];
-
-            build.onResolve({ filter: /^#dynamic\// }, (args) => {
-                const importingFile = args.importer;
-
-                // Check if the importing file is NOT in server/private
-                const normalizedImporter = path.normalize(importingFile);
-                const isInServerPrivate = normalizedImporter.includes(path.normalize("server/private"));
-
-                if (isInServerPrivate) {
-                    const violation = {
-                        file: importingFile,
-                        importPath: args.path,
-                        resolveDir: args.resolveDir
-                    };
-                    violations.push(violation);
-
-                    console.log(`DYNAMIC IMPORT VIOLATION:`);
-                    console.log(`   File: ${importingFile}`);
-                    console.log(`   Import: ${args.path}`);
-                    console.log(`   Resolve dir: ${args.resolveDir || 'N/A'}`);
-                    console.log('');
-                }
-
-                // Return null to let the default resolver handle it
-                return null;
-            });
-
-            build.onEnd((result) => {
-                if (violations.length > 0) {
-                    console.log(`\nSUMMARY: Found ${violations.length} dynamic import violation(s):`);
-                    violations.forEach((v, i) => {
-                        console.log(`   ${i + 1}. ${path.relative(process.cwd(), v.file)} imports ${v.importPath}`);
-                    });
-                    console.log('');
-
-                    result.errors.push({
-                        text: `Dynamic import violations detected: ${violations.length} violation(s) found`,
-                        location: null,
-                        notes: violations.map(v => ({
-                            text: `${path.relative(process.cwd(), v.file)} imports ${v.importPath}`,
-                            location: null
-                        }))
-                    });
-                }
-            });
-        }
-    };
-}
-
-// Plugin to dynamically switch imports based on build type
-function dynamicImportSwitcherPlugin(buildValue) {
-    return {
-        name: "dynamic-import-switcher",
-        setup(build) {
-            const switches = [];
-
-            build.onStart(() => {
-                console.log(`Dynamic import switcher using build type: ${buildValue}`);
-            });
-
-            build.onResolve({ filter: /^#dynamic\// }, (args) => {
-                // Extract the path after #dynamic/
-                const dynamicPath = args.path.replace(/^#dynamic\//, '');
-
-                // Determine the replacement based on build type
-                let replacement;
-                if (buildValue === "oss") {
-                    replacement = `#open/${dynamicPath}`;
-                } else if (buildValue === "saas" || buildValue === "enterprise") {
-                    replacement = `#closed/${dynamicPath}`; // We use #closed here so that the route guards dont complain after its been changed but this is the same as #private
-                } else {
-                    console.warn(`Unknown build type '${buildValue}', defaulting to #open/`);
-                    replacement = `#open/${dynamicPath}`;
-                }
-
-                const switchInfo = {
-                    file: args.importer,
-                    originalPath: args.path,
-                    replacementPath: replacement,
-                    buildType: buildValue
-                };
-                switches.push(switchInfo);
-
-                console.log(`DYNAMIC IMPORT SWITCH:`);
-                console.log(`   File: ${args.importer}`);
-                console.log(`   Original: ${args.path}`);
-                console.log(`   Switched to: ${replacement} (build: ${buildValue})`);
-                console.log('');
-
-                // Rewrite the import path and let the normal resolution continue
-                return build.resolve(replacement, {
-                    importer: args.importer,
-                    namespace: args.namespace,
-                    resolveDir: args.resolveDir,
-                    kind: args.kind
-                });
-            });
-
-            build.onEnd((result) => {
-                if (switches.length > 0) {
-                    console.log(`\nDYNAMIC IMPORT SUMMARY: Switched ${switches.length} import(s) for build type '${buildValue}':`);
-                    switches.forEach((s, i) => {
-                        console.log(`   ${i + 1}. ${path.relative(process.cwd(), s.file)}`);
-                        console.log(`      ${s.originalPath} → ${s.replacementPath}`);
-                    });
-                    console.log('');
-                }
-            });
-        }
-    };
-}
-
 esbuild
    .build({
        entryPoints: [argv.entry],
@@ -240,9 +59,6 @@ esbuild
        platform: "node",
        external: ["body-parser"],
        plugins: [
-            privateImportGuardPlugin(),
-            dynamicImportGuardPlugin(),
-            dynamicImportSwitcherPlugin(argv.build),
            nodeExternalsPlugin({
                packagePath: getPackagePaths(),
            }),
@@ -250,27 +66,7 @@ esbuild
        sourcemap: "inline",
        target: "node22",
    })
-    .then((result) => {
-        // Check if there were any errors in the build result
-        if (result.errors && result.errors.length > 0) {
-            console.error(`Build failed with ${result.errors.length} error(s):`);
-            result.errors.forEach((error, i) => {
-                console.error(`${i + 1}. ${error.text}`);
-                if (error.notes) {
-                    error.notes.forEach(note => {
-                        console.error(`   - ${note.text}`);
-                    });
-                }
-            });
-
-            // remove the output file if it was created
-            if (fs.existsSync(argv.out)) {
-                fs.unlinkSync(argv.out);
-            }
-
-            process.exit(1);
-        }
-
+    .then(() => {
        console.log("Build completed successfully");
    })
    .catch((error) => {
--- a/install/config/config.yml
+++ b/install/config/config.yml
@@ -1,10 +1,15 @@
 # To see all available options, please visit the docs:
-# https://docs.pangolin.net/
+# https://docs.digpangolin.com/self-host/advanced/config-file 

 gerbil:
    start_port: 51820
    base_endpoint: "{{.DashboardDomain}}"
-
+{{if .HybridMode}}
+managed:
+    id: "{{.HybridId}}"
+    secret: "{{.HybridSecret}}"
+  
+{{else}}
 app:
    dashboard_url: "https://{{.DashboardDomain}}"
    log_level: "info"
@@ -23,7 +28,6 @@ server:
        methods: ["GET", "POST", "PUT", "DELETE", "PATCH"]
        allowed_headers: ["X-CSRF-Token", "Content-Type"]
        credentials: false
-    {{if .EnableGeoblocking}}maxmind_db_path: "./config/GeoLite2-Country.mmdb"{{end}}
 {{if .EnableEmail}}
 email:
    smtp_host: "{{.EmailSMTPHost}}"
@@ -37,3 +41,4 @@ flags:
    disable_signup_without_invite: true
    disable_user_create_org: false
    allow_raw_resources: true
+{{end}}
--- a/install/config/docker-compose.yml
+++ b/install/config/docker-compose.yml
@@ -6,6 +6,8 @@ services:
    restart: unless-stopped
    volumes:
      - ./config:/app/config
+      - pangolin-data:/var/certificates
+      - pangolin-data:/var/dynamic
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:3001/api/v1/"]
      interval: "10s"
@@ -20,7 +22,7 @@ services:
      pangolin:
        condition: service_healthy
    command:
-      - --reachableAt=http://gerbil:3004
+      - --reachableAt=http://gerbil:3003
      - --generateAndSaveKeyTo=/var/config/key
      - --remoteConfig=http://pangolin:3001/api/v1/
    volumes:
@@ -31,7 +33,7 @@ services:
    ports:
      - 51820:51820/udp
      - 21820:21820/udp
-      - 443:443
+      - 443:{{if .HybridMode}}8443{{else}}443{{end}}
      - 80:80
 {{end}}
  traefik:
@@ -54,9 +56,15 @@ services:
      - ./config/traefik:/etc/traefik:ro # Volume to store the Traefik configuration
      - ./config/letsencrypt:/letsencrypt # Volume to store the Let's Encrypt certificates
      - ./config/traefik/logs:/var/log/traefik # Volume to store Traefik logs
+      # Shared volume for certificates and dynamic config in file mode 
+      - pangolin-data:/var/certificates:ro
+      - pangolin-data:/var/dynamic:ro

 networks:
  default:
    driver: bridge
    name: pangolin
-{{if .EnableIPv6}}    enable_ipv6: true{{end}}
+{{if .EnableIPv6}}    enable_ipv6: true{{end}}
+
+volumes:
+  pangolin-data:
--- a/install/config/traefik/traefik_config.yml
+++ b/install/config/traefik/traefik_config.yml
@@ -3,12 +3,17 @@ api:
  dashboard: true

 providers:
+{{if not .HybridMode}}
  http:
    endpoint: "http://pangolin:3001/api/v1/traefik-config"
    pollInterval: "5s"
  file:
    filename: "/etc/traefik/dynamic_config.yml"
-
+{{else}}
+  file:
+    directory: "/var/dynamic"
+    watch: true
+{{end}}
 experimental:
  plugins:
    badger:
@@ -22,7 +27,7 @@ log:
  maxBackups: 3
  maxAge: 3
  compress: true
-
+{{if not .HybridMode}}
 certificatesResolvers:
  letsencrypt:
    acme:
@@ -31,18 +36,22 @@ certificatesResolvers:
      email: "{{.LetsEncryptEmail}}"
      storage: "/letsencrypt/acme.json"
      caServer: "https://acme-v02.api.letsencrypt.org/directory"
-
+{{end}}
 entryPoints:
  web:
    address: ":80"
  websecure:
    address: ":443"
+{{if .HybridMode}}    proxyProtocol:
+      trustedIPs:
+        - 0.0.0.0/0
+        - ::1/128{{end}}
    transport:
      respondingTimeouts:
        readTimeout: "30m"
-    http:
+{{if not .HybridMode}}    http:
      tls:
-        certResolver: "letsencrypt"
+        certResolver: "letsencrypt"{{end}}

 serversTransport:
  insecureSkipVerify: true
--- a/install/get-installer.sh
+++ b/install/get-installer.sh
@@ -1,180 +0,0 @@
-#!/bin/bash
-
-# Get installer - Cross-platform installation script
-# Usage: curl -fsSL https://raw.githubusercontent.com/fosrl/installer/refs/heads/main/get-installer.sh | bash
-
-set -e
-
-# Colors for output
-RED='\033[0;31m'
-GREEN='\033[0;32m'
-YELLOW='\033[1;33m'
-NC='\033[0m' # No Color
-
-# GitHub repository info
-REPO="fosrl/pangolin"
-GITHUB_API_URL="https://api.github.com/repos/${REPO}/releases/latest"
-
-# Function to print colored output
-print_status() {
-    echo -e "${GREEN}[INFO]${NC} $1"
-}
-
-print_warning() {
-    echo -e "${YELLOW}[WARN]${NC} $1"
-}
-
-print_error() {
-    echo -e "${RED}[ERROR]${NC} $1"
-}
-
-# Function to get latest version from GitHub API
-get_latest_version() {
-    local latest_info
-    
-    if command -v curl >/dev/null 2>&1; then
-        latest_info=$(curl -fsSL "$GITHUB_API_URL" 2>/dev/null)
-    elif command -v wget >/dev/null 2>&1; then
-        latest_info=$(wget -qO- "$GITHUB_API_URL" 2>/dev/null)
-    else
-        print_error "Neither curl nor wget is available. Please install one of them." >&2
-        exit 1
-    fi
-    
-    if [ -z "$latest_info" ]; then
-        print_error "Failed to fetch latest version information" >&2
-        exit 1
-    fi
-    
-    # Extract version from JSON response (works without jq)
-    local version=$(echo "$latest_info" | grep '"tag_name"' | head -1 | sed 's/.*"tag_name": *"\([^"]*\)".*/\1/')
-    
-    if [ -z "$version" ]; then
-        print_error "Could not parse version from GitHub API response" >&2
-        exit 1
-    fi
-    
-    # Remove 'v' prefix if present
-    version=$(echo "$version" | sed 's/^v//')
-    
-    echo "$version"
-}
-
-# Detect OS and architecture
-detect_platform() {
-    local os arch
-    
-    # Detect OS - only support Linux
-    case "$(uname -s)" in
-        Linux*)     os="linux" ;;
-        *)
-            print_error "Unsupported operating system: $(uname -s). Only Linux is supported."
-            exit 1
-            ;;
-    esac
-    
-    # Detect architecture - only support amd64 and arm64
-    case "$(uname -m)" in
-        x86_64|amd64)   arch="amd64" ;;
-        arm64|aarch64)  arch="arm64" ;;
-        *)
-            print_error "Unsupported architecture: $(uname -m). Only amd64 and arm64 are supported on Linux."
-            exit 1
-            ;;
-    esac
-    
-    echo "${os}_${arch}"
-}
-
-# Get installation directory
-get_install_dir() {
-    # Install to the current directory 
-    local install_dir="$(pwd)"
-    if [ ! -d "$install_dir" ]; then
-        print_error "Installation directory does not exist: $install_dir"
-        exit 1
-    fi
-    echo "$install_dir"
-}
-
-# Download and install installer
-install_installer() {
-    local platform="$1"
-    local install_dir="$2"
-    local binary_name="installer_${platform}"
-    
-    local download_url="${BASE_URL}/${binary_name}"
-    local temp_file="/tmp/installer"
-    local final_path="${install_dir}/installer"
-    
-    print_status "Downloading installer from ${download_url}"
-    
-    # Download the binary
-    if command -v curl >/dev/null 2>&1; then
-        curl -fsSL "$download_url" -o "$temp_file"
-    elif command -v wget >/dev/null 2>&1; then
-        wget -q "$download_url" -O "$temp_file"
-    else
-        print_error "Neither curl nor wget is available. Please install one of them."
-        exit 1
-    fi
-    
-    # Create install directory if it doesn't exist
-    mkdir -p "$install_dir"
-    
-    # Move binary to install directory
-    mv "$temp_file" "$final_path"
-    
-    # Make executable
-    chmod +x "$final_path"
-    
-    print_status "Installer downloaded to ${final_path}"
-}
-
-# Verify installation
-verify_installation() {
-    local install_dir="$1"
-    local installer_path="${install_dir}/installer"
-    
-    if [ -f "$installer_path" ] && [ -x "$installer_path" ]; then
-        print_status "Installation successful!"
-        return 0
-    else
-        print_error "Installation failed. Binary not found or not executable."
-        return 1
-    fi
-}
-
-# Main installation process
-main() {
-    print_status "Installing latest version of installer..."
-    
-    # Get latest version
-    print_status "Fetching latest version from GitHub..."
-    VERSION=$(get_latest_version)
-    print_status "Latest version: v${VERSION}"
-    
-    # Set base URL with the fetched version
-    BASE_URL="https://github.com/${REPO}/releases/download/${VERSION}"
-    
-    # Detect platform
-    PLATFORM=$(detect_platform)
-    print_status "Detected platform: ${PLATFORM}"
-    
-    # Get install directory
-    INSTALL_DIR=$(get_install_dir)
-    print_status "Install directory: ${INSTALL_DIR}"
-    
-    # Install installer
-    install_installer "$PLATFORM" "$INSTALL_DIR"
-    
-    # Verify installation
-    if verify_installation "$INSTALL_DIR"; then
-        print_status "Installer is ready to use!"
-    else
-        exit 1
-    fi
-}
-
-# Run main function
-main "$@"
--- a/install/go.mod
+++ b/install/go.mod
@@ -3,8 +3,8 @@ module installer
 go 1.24.0

 require (
-	golang.org/x/term v0.36.0
+	golang.org/x/term v0.35.0
 	gopkg.in/yaml.v3 v3.0.1
 )

-require golang.org/x/sys v0.37.0 // indirect
+require golang.org/x/sys v0.36.0 // indirect
--- a/install/go.sum
+++ b/install/go.sum
@@ -1,7 +1,7 @@
-golang.org/x/sys v0.37.0 h1:fdNQudmxPjkdUTPnLn5mdQv7Zwvbvpaxqs831goi9kQ=
-golang.org/x/sys v0.37.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
-golang.org/x/term v0.36.0 h1:zMPR+aF8gfksFprF/Nc/rd1wRS1EI6nDBGyWAvDzx2Q=
-golang.org/x/term v0.36.0/go.mod h1:Qu394IJq6V6dCBRgwqshf3mPF85AqzYEzofzRdZkWss=
+golang.org/x/sys v0.36.0 h1:KVRy2GtZBrk1cBYA7MKu5bEZFxQk4NIDV6RLVcC8o0k=
+golang.org/x/sys v0.36.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/term v0.35.0 h1:bZBVKBudEyhRcajGcNc3jIfWPqV4y/Kt2XcoigOWtDQ=
+golang.org/x/term v0.35.0/go.mod h1:TPGtkTLesOwf2DE8CgVYiZinHAOuy5AYUYT1lENIZnA=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405 h1:yhCVgyC4o1eVCa2tZl7eS0r+SDo693bJlVdllGtEeKM=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
 gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
--- a/install/main.go
+++ b/install/main.go
@@ -2,6 +2,7 @@ package main

 import (
 	"bufio"
+	"bytes"
 	"embed"
 	"fmt"
 	"io"
@@ -47,8 +48,10 @@ type Config struct {
 	InstallGerbil             bool
 	TraefikBouncerKey         string
 	DoCrowdsecInstall         bool
-	EnableGeoblocking         bool
 	Secret                    string
+	HybridMode                bool
+	HybridId                  string
+	HybridSecret              string
 }

 type SupportedContainer string
@@ -95,6 +98,24 @@ func main() {

 		fmt.Println("\n=== Generating Configuration Files ===")

+		// If the secret and id are not generated then generate them
+		if config.HybridMode && (config.HybridId == "" || config.HybridSecret == "") {
+			// fmt.Println("Requesting hybrid credentials from cloud...")
+			credentials, err := requestHybridCredentials()
+			if err != nil {
+				fmt.Printf("Error requesting hybrid credentials: %v\n", err)
+				fmt.Println("Please obtain credentials manually from the dashboard and run the installer again.")
+				os.Exit(1)
+			}
+			config.HybridId = credentials.RemoteExitNodeId
+			config.HybridSecret = credentials.Secret
+			fmt.Printf("Your managed credentials have been obtained successfully.\n")
+			fmt.Printf("	ID:     %s\n", config.HybridId)
+			fmt.Printf("	Secret: %s\n", config.HybridSecret)
+			fmt.Println("Take these to the Pangolin dashboard https://pangolin.fossorial.io to adopt your node.")
+			readBool(reader, "Have you adopted your node?", true)
+		}
+
 		if err := createConfigFiles(config); err != nil {
 			fmt.Printf("Error creating config files: %v\n", err)
 			os.Exit(1)
@@ -104,15 +125,6 @@ func main() {

 		fmt.Println("\nConfiguration files created successfully!")

-		// Download MaxMind database if requested
-		if config.EnableGeoblocking {
-			fmt.Println("\n=== Downloading MaxMind Database ===")
-			if err := downloadMaxMindDatabase(); err != nil {
-				fmt.Printf("Error downloading MaxMind database: %v\n", err)
-				fmt.Println("You can download it manually later if needed.")
-			}
-		}
-
 		fmt.Println("\n=== Starting installation ===")

 		if readBool(reader, "Would you like to install and start the containers?", true) {
@@ -160,34 +172,9 @@ func main() {
 	} else {
 		alreadyInstalled = true
 		fmt.Println("Looks like you already installed Pangolin!")
-		
-		// Check if MaxMind database exists and offer to update it
-		fmt.Println("\n=== MaxMind Database Update ===")
-		if _, err := os.Stat("config/GeoLite2-Country.mmdb"); err == nil {
-			fmt.Println("MaxMind GeoLite2 Country database found.")
-			if readBool(reader, "Would you like to update the MaxMind database to the latest version?", false) {
-				if err := downloadMaxMindDatabase(); err != nil {
-					fmt.Printf("Error updating MaxMind database: %v\n", err)
-					fmt.Println("You can try updating it manually later if needed.")
-				}
-			}
-		} else {
-			fmt.Println("MaxMind GeoLite2 Country database not found.")
-			if readBool(reader, "Would you like to download the MaxMind GeoLite2 database for geoblocking functionality?", false) {
-				if err := downloadMaxMindDatabase(); err != nil {
-					fmt.Printf("Error downloading MaxMind database: %v\n", err)
-					fmt.Println("You can try downloading it manually later if needed.")
-				}
-				// Now you need to update your config file accordingly to enable geoblocking
-				fmt.Println("Please remember to update your config/config.yml file to enable geoblocking! \n")
-				// add   maxmind_db_path: "./config/GeoLite2-Country.mmdb" under server
-				fmt.Println("Add the following line under the 'server' section:")
-				fmt.Println("  maxmind_db_path: \"./config/GeoLite2-Country.mmdb\"")
-			}
-		}
 	}

-	if !checkIsCrowdsecInstalledInCompose() {
+	if !checkIsCrowdsecInstalledInCompose() && !checkIsPangolinInstalledWithHybrid() {
 		fmt.Println("\n=== CrowdSec Install ===")
 		// check if crowdsec is installed
 		if readBool(reader, "Would you like to install CrowdSec?", false) {
@@ -243,7 +230,7 @@ func main() {
 		}
 	}

-	if !alreadyInstalled {
+	if !config.HybridMode && !alreadyInstalled {
 		// Setup Token Section
 		fmt.Println("\n=== Setup Token ===")

@@ -264,7 +251,9 @@ func main() {

 	fmt.Println("\nInstallation complete!")

-	fmt.Printf("\nTo complete the initial setup, please visit:\nhttps://%s/auth/initial-setup\n", config.DashboardDomain)
+	if !config.HybridMode && !checkIsPangolinInstalledWithHybrid() {
+		fmt.Printf("\nTo complete the initial setup, please visit:\nhttps://%s/auth/initial-setup\n", config.DashboardDomain)
+	}
 }

 func podmanOrDocker(reader *bufio.Reader) SupportedContainer {
@@ -339,38 +328,66 @@ func collectUserInput(reader *bufio.Reader) Config {

 	// Basic configuration
 	fmt.Println("\n=== Basic Configuration ===")
-
-	config.BaseDomain = readString(reader, "Enter your base domain (no subdomain e.g. example.com)", "")
-
-	// Set default dashboard domain after base domain is collected
-	defaultDashboardDomain := ""
-	if config.BaseDomain != "" {
-		defaultDashboardDomain = "pangolin." + config.BaseDomain
-	}
-	config.DashboardDomain = readString(reader, "Enter the domain for the Pangolin dashboard", defaultDashboardDomain)
-	config.LetsEncryptEmail = readString(reader, "Enter email for Let's Encrypt certificates", "")
-	config.InstallGerbil = readBool(reader, "Do you want to use Gerbil to allow tunneled connections", true)
-
-	// Email configuration
-	fmt.Println("\n=== Email Configuration ===")
-	config.EnableEmail = readBool(reader, "Enable email functionality (SMTP)", false)
-
-	if config.EnableEmail {
-		config.EmailSMTPHost = readString(reader, "Enter SMTP host", "")
-		config.EmailSMTPPort = readInt(reader, "Enter SMTP port (default 587)", 587)
-		config.EmailSMTPUser = readString(reader, "Enter SMTP username", "")
-		config.EmailSMTPPass = readString(reader, "Enter SMTP password", "") // Should this be readPassword?
-		config.EmailNoReply = readString(reader, "Enter no-reply email address", "")
+	for {
+		response := readString(reader, "Do you want to install Pangolin as a cloud-managed (beta) node? (yes/no)", "")
+		if strings.EqualFold(response, "yes") || strings.EqualFold(response, "y") {
+			config.HybridMode = true
+			break
+		} else if strings.EqualFold(response, "no") || strings.EqualFold(response, "n") {
+			config.HybridMode = false
+			break
+		}
+		fmt.Println("Please answer 'yes' or 'no'")
 	}

-	// Validate required fields
-	if config.BaseDomain == "" {
-		fmt.Println("Error: Domain name is required")
-		os.Exit(1)
-	}
-	if config.LetsEncryptEmail == "" {
-		fmt.Println("Error: Let's Encrypt email is required")
-		os.Exit(1)
+	if config.HybridMode {
+		alreadyHaveCreds := readBool(reader, "Do you already have credentials from the dashboard? If not, we will create them later", false)
+
+		if alreadyHaveCreds {
+			config.HybridId = readString(reader, "Enter your ID", "")
+			config.HybridSecret = readString(reader, "Enter your secret", "")
+		}
+
+		// Try to get public IP as default
+		publicIP := getPublicIP()
+		if publicIP != "" {
+			fmt.Printf("Detected public IP: %s\n", publicIP)
+		}
+		config.DashboardDomain = readString(reader, "The public addressable IP address for this node or a domain pointing to it", publicIP)
+		config.InstallGerbil = true
+	} else {
+		config.BaseDomain = readString(reader, "Enter your base domain (no subdomain e.g. example.com)", "")
+
+		// Set default dashboard domain after base domain is collected
+		defaultDashboardDomain := ""
+		if config.BaseDomain != "" {
+			defaultDashboardDomain = "pangolin." + config.BaseDomain
+		}
+		config.DashboardDomain = readString(reader, "Enter the domain for the Pangolin dashboard", defaultDashboardDomain)
+		config.LetsEncryptEmail = readString(reader, "Enter email for Let's Encrypt certificates", "")
+		config.InstallGerbil = readBool(reader, "Do you want to use Gerbil to allow tunneled connections", true)
+
+		// Email configuration
+		fmt.Println("\n=== Email Configuration ===")
+		config.EnableEmail = readBool(reader, "Enable email functionality (SMTP)", false)
+
+		if config.EnableEmail {
+			config.EmailSMTPHost = readString(reader, "Enter SMTP host", "")
+			config.EmailSMTPPort = readInt(reader, "Enter SMTP port (default 587)", 587)
+			config.EmailSMTPUser = readString(reader, "Enter SMTP username", "")
+			config.EmailSMTPPass = readString(reader, "Enter SMTP password", "") // Should this be readPassword?
+			config.EmailNoReply = readString(reader, "Enter no-reply email address", "")
+		}
+
+		// Validate required fields
+		if config.BaseDomain == "" {
+			fmt.Println("Error: Domain name is required")
+			os.Exit(1)
+		}
+		if config.LetsEncryptEmail == "" {
+			fmt.Println("Error: Let's Encrypt email is required")
+			os.Exit(1)
+		}
 	}

 	// Advanced configuration
@@ -378,7 +395,6 @@ func collectUserInput(reader *bufio.Reader) Config {
 	fmt.Println("\n=== Advanced Configuration ===")

 	config.EnableIPv6 = readBool(reader, "Is your server IPv6 capable?", true)
-	config.EnableGeoblocking = readBool(reader, "Do you want to download the MaxMind GeoLite2 database for geoblocking functionality?", false)

 	if config.DashboardDomain == "" {
 		fmt.Println("Error: Dashboard Domain name is required")
@@ -413,6 +429,11 @@ func createConfigFiles(config Config) error {
 			return nil
 		}

+		// the hybrid does not need the dynamic config
+		if config.HybridMode && strings.Contains(path, "dynamic_config.yml") {
+			return nil
+		}
+
 		// skip .DS_Store
 		if strings.Contains(path, ".DS_Store") {
 			return nil
@@ -642,30 +663,18 @@ func checkPortsAvailable(port int) error {
 	return nil
 }

-func downloadMaxMindDatabase() error {
-	fmt.Println("Downloading MaxMind GeoLite2 Country database...")
-	
-	// Download the GeoLite2 Country database
-	if err := run("curl", "-L", "-o", "GeoLite2-Country.tar.gz", 
-		"https://github.com/GitSquared/node-geolite2-redist/raw/refs/heads/master/redist/GeoLite2-Country.tar.gz"); err != nil {
-		return fmt.Errorf("failed to download GeoLite2 database: %v", err)
+func checkIsPangolinInstalledWithHybrid() bool {
+	// Check if config/config.yml exists and contains hybrid section
+	if _, err := os.Stat("config/config.yml"); err != nil {
+		return false
 	}
-	
-	// Extract the database
-	if err := run("tar", "-xzf", "GeoLite2-Country.tar.gz"); err != nil {
-		return fmt.Errorf("failed to extract GeoLite2 database: %v", err)
+
+	// Read config file to check for hybrid section
+	content, err := os.ReadFile("config/config.yml")
+	if err != nil {
+		return false
 	}
-	
-	// Find the .mmdb file and move it to the config directory
-	if err := run("bash", "-c", "mv GeoLite2-Country_*/GeoLite2-Country.mmdb config/"); err != nil {
-		return fmt.Errorf("failed to move GeoLite2 database to config directory: %v", err)
-	}
-	
-	// Clean up the downloaded files
-	if err := run("rm", "-rf", "GeoLite2-Country.tar.gz", "GeoLite2-Country_*"); err != nil {
-		fmt.Printf("Warning: failed to clean up temporary files: %v\n", err)
-	}
-	
-	fmt.Println("MaxMind GeoLite2 Country database downloaded successfully!")
-	return nil
+
+	// Check for hybrid section
+	return bytes.Contains(content, []byte("managed:"))
 }
--- a/install/quickStart.go
+++ b/install/quickStart.go
@@ -0,0 +1,110 @@
+package main
+
+import (
+	"bytes"
+	"encoding/base64"
+	"encoding/json"
+	"fmt"
+	"io"
+	"net/http"
+	"time"
+)
+
+const (
+	FRONTEND_SECRET_KEY = "af4e4785-7e09-11f0-b93a-74563c4e2a7e"
+	// CLOUD_API_URL       = "https://pangolin.fossorial.io/api/v1/remote-exit-node/quick-start"
+	CLOUD_API_URL = "https://pangolin.fossorial.io/api/v1/remote-exit-node/quick-start"
+)
+
+// HybridCredentials represents the response from the cloud API
+type HybridCredentials struct {
+	RemoteExitNodeId string `json:"remoteExitNodeId"`
+	Secret           string `json:"secret"`
+}
+
+// APIResponse represents the full response structure from the cloud API
+type APIResponse struct {
+	Data HybridCredentials `json:"data"`
+}
+
+// RequestPayload represents the request body structure
+type RequestPayload struct {
+	Token string `json:"token"`
+}
+
+func generateValidationToken() string {
+	timestamp := time.Now().UnixMilli()
+	data := fmt.Sprintf("%s|%d", FRONTEND_SECRET_KEY, timestamp)
+	obfuscated := make([]byte, len(data))
+	for i, char := range []byte(data) {
+		obfuscated[i] = char + 5
+	}
+	return base64.StdEncoding.EncodeToString(obfuscated)
+}
+
+// requestHybridCredentials makes an HTTP POST request to the cloud API
+// to get hybrid credentials (ID and secret)
+func requestHybridCredentials() (*HybridCredentials, error) {
+	// Generate validation token
+	token := generateValidationToken()
+
+	// Create request payload
+	payload := RequestPayload{
+		Token: token,
+	}
+
+	// Marshal payload to JSON
+	jsonData, err := json.Marshal(payload)
+	if err != nil {
+		return nil, fmt.Errorf("failed to marshal request payload: %v", err)
+	}
+
+	// Create HTTP request
+	req, err := http.NewRequest("POST", CLOUD_API_URL, bytes.NewBuffer(jsonData))
+	if err != nil {
+		return nil, fmt.Errorf("failed to create HTTP request: %v", err)
+	}
+
+	// Set headers
+	req.Header.Set("Content-Type", "application/json")
+	req.Header.Set("X-CSRF-Token", "x-csrf-protection")
+
+	// Create HTTP client with timeout
+	client := &http.Client{
+		Timeout: 30 * time.Second,
+	}
+
+	// Make the request
+	resp, err := client.Do(req)
+	if err != nil {
+		return nil, fmt.Errorf("failed to make HTTP request: %v", err)
+	}
+	defer resp.Body.Close()
+
+	// Check response status
+	if resp.StatusCode != http.StatusOK {
+		return nil, fmt.Errorf("API request failed with status code: %d", resp.StatusCode)
+	}
+
+	// Read response body for debugging
+	body, err := io.ReadAll(resp.Body)
+	if err != nil {
+		return nil, fmt.Errorf("failed to read response body: %v", err)
+	}
+
+	// Print the raw JSON response for debugging
+	// fmt.Printf("Raw JSON response: %s\n", string(body))
+
+	// Parse response
+	var apiResponse APIResponse
+	if err := json.Unmarshal(body, &apiResponse); err != nil {
+		return nil, fmt.Errorf("failed to decode API response: %v", err)
+	}
+
+	// Validate response data
+	if apiResponse.Data.RemoteExitNodeId == "" || apiResponse.Data.Secret == "" {
+		return nil, fmt.Errorf("invalid response: missing remoteExitNodeId or secret")
+	}
+
+	return &apiResponse.Data, nil
+}
--- a/messages/bg-BG.json
+++ b/messages/bg-BG.json
@@ -47,8 +47,9 @@
    "edit": "Редактиране",
    "siteConfirmDelete": "Потвърждение на изтриване на сайта",
    "siteDelete": "Изтриване на сайта",
-    "siteMessageRemove": "След премахване, сайтът вече няма да бъде достъпен. Всички цели, свързани със сайта, също ще бъдат премахнати.",
-    "siteQuestionRemove": "Сигурни ли сте, че искате да премахнете сайта от организацията?",
+    "siteMessageRemove": "След изтриване, сайтът няма повече да бъде достъпен. Всички ресурси и цели, свързани със сайта, също ще бъдат премахнати.",
+    "siteMessageConfirm": "За потвърждение, моля, напишете името на сайта по-долу.",
+    "siteQuestionRemove": "Сигурни ли сте, че искате да премахнете сайта {selectedSite} от организацията?",
    "siteManageSites": "Управление на сайтове",
    "siteDescription": "Позволете свързване към вашата мрежа чрез сигурни тунели",
    "siteCreate": "Създайте сайт",
@@ -95,7 +96,7 @@
    "siteWgDescription": "Use any WireGuard client to establish a tunnel. Manual NAT setup required. ONLY WORKS ON SELF HOSTED NODES",
    "siteWgDescriptionSaas": "Използвайте всеки WireGuard клиент за установяване на тунел. Ръчно нат задаване е необходимо. РАБОТИ САМО НА СОБСТВЕНИ УЗЛИ.",
    "siteLocalDescription": "Local resources only. No tunneling. ONLY WORKS ON SELF HOSTED NODES",
-    "siteLocalDescriptionSaas": "Само локални ресурси. Без тунелиране. Достъпно само на отдалечени възли.",
+    "siteLocalDescriptionSaas": "Само локални ресурси. Без тунелиране. РАБОТИ САМО НА СОБСТВЕНИ УЗЛИ.",
    "siteSeeAll": "Вижте всички сайтове",
    "siteTunnelDescription": "Определете как искате да се свържете с вашия сайт",
    "siteNewtCredentials": "Newt Удостоверения",
@@ -153,7 +154,8 @@
    "protected": "Защита",
    "notProtected": "Не защитен",
    "resourceMessageRemove": "След като се премахне, ресурсът няма повече да бъде достъпен. Всички цели, свързани с ресурса, също ще бъдат премахнати.",
-    "resourceQuestionRemove": "Сигурни ли сте, че искате да премахнете ресурса от организацията?",
+    "resourceMessageConfirm": "За потвърждение, моля, напишете името на ресурса по-долу.",
+    "resourceQuestionRemove": "Сигурни ли сте, че искате да премахнете ресурса {selectedResource} от организацията?",
    "resourceHTTP": "HTTPS ресурс",
    "resourceHTTPDescription": "Прокси заявки към вашето приложение през HTTPS с помощта на субдомейн или базов домейн.",
    "resourceRaw": "Суров TCP/UDP ресурс",
@@ -218,7 +220,7 @@
    "orgDeleteConfirm": "Потвърдете изтриване на организация",
    "orgMessageRemove": "Това действие е необратимо и ще изтрие всички свързани данни.",
    "orgMessageConfirm": "За потвърждение, моля, напишете името на организацията по-долу.",
-    "orgQuestionRemove": "Сигурни ли сте, че искате да премахнете организацията?",
+    "orgQuestionRemove": "Сигурни ли сте, че искате да премахнете организацията {selectedOrg}?",
    "orgUpdated": "Организацията е актуализирана",
    "orgUpdatedDescription": "Организацията е обновена.",
    "orgErrorUpdate": "Неуспешно актуализиране на организацията",
@@ -285,8 +287,9 @@
    "apiKeysAdd": "Генерирайте API ключ",
    "apiKeysErrorDelete": "Грешка при изтриване на API ключ",
    "apiKeysErrorDeleteMessage": "Грешка при изтриване на API ключ",
-    "apiKeysQuestionRemove": "Сигурни ли сте, че искате да премахнете API ключа от организацията?",
+    "apiKeysQuestionRemove": "Сигурни ли сте, че искате да премахнете API ключа {selectedApiKey} от организацията?",
    "apiKeysMessageRemove": "След като бъде премахнат, API ключът няма вече да може да се използва.",
+    "apiKeysMessageConfirm": "За потвърждение, моля, напишете името на API ключа по-долу.",
    "apiKeysDeleteConfirm": "Потвърдете изтриване на API ключ",
    "apiKeysDelete": "Изтрийте API ключа",
    "apiKeysManage": "Управление на API ключове",
@@ -302,7 +305,8 @@
    "userDeleteConfirm": "Потвърдете изтриването на потребител",
    "userDeleteServer": "Изтрийте потребителя от сървъра",
    "userMessageRemove": "Потребителят ще бъде премахнат от всички организации и напълно заличен от сървъра.",
-    "userQuestionRemove": "Сигурни ли сте, че искате да изтриете потребител от сървъра?",
+    "userMessageConfirm": "За да потвърдите, въведете името на потребителя по-долу.",
+    "userQuestionRemove": "Сигурни ли сте, че искате да изтриете завинаги {selectedUser} от сървъра?",
    "licenseKey": "Ключ за лиценз",
    "valid": "Валиден",
    "numberOfSites": "Брой сайтове",
@@ -335,7 +339,7 @@
    "fossorialLicense": "Преглед на търговски условия и абонамент за Fossorial",
    "licenseMessageRemove": "Това ще премахне лицензионния ключ и всички свързани права, предоставени от него.",
    "licenseMessageConfirm": "За да потвърдите, въведете лицензионния ключ по-долу.",
-    "licenseQuestionRemove": "Сигурни ли сте, че искате да премахнете лицензионния ключ?",
+    "licenseQuestionRemove": "Сигурни ли сте, че искате да изтриете лицензионния ключ {selectedKey}?",
    "licenseKeyDelete": "Изтриване на лицензионен ключ",
    "licenseKeyDeleteConfirm": "Потвърдете изтриването на лицензионен ключ",
    "licenseTitle": "Управление на лицензионния статус",
@@ -368,7 +372,7 @@
    "inviteRemoveErrorDescription": "Възникна грешка при премахване на поканата.",
    "inviteRemoved": "Поканата е премахната",
    "inviteRemovedDescription": "Поканата за {имейл} е премахната.",
-    "inviteQuestionRemove": "Сигурни ли сте, че искате да премахнете поканата?",
+    "inviteQuestionRemove": "Сигурни ли сте, че искате да премахнете поканата {email}?",
    "inviteMessageRemove": "След като бъде премахната, тази покана няма да е валидна. Винаги можете да поканите потребителя отново по-късно.",
    "inviteMessageConfirm": "За да потвърдите, въведете имейл адреса на поканата по-долу.",
    "inviteQuestionRegenerate": "Сигурни ли сте, че искате да регенерирате поканата за {email}? Това ще отмени предишната покана.",
@@ -394,8 +398,9 @@
    "userErrorOrgRemoveDescription": "Възникна грешка при премахване на потребителя.",
    "userOrgRemoved": "Потребителят е премахнат",
    "userOrgRemovedDescription": "Потребителят {email} беше премахнат от организацията.",
-    "userQuestionOrgRemove": "Сигурни ли сте, че искате да премахнете този потребител от организацията?",
+    "userQuestionOrgRemove": "Сигурни ли сте, че искате да премахнете {email} от организацията?",
    "userMessageOrgRemove": "След като бъде премахнат, този потребител няма да има достъп до организацията. Винаги можете да го поканите отново по-късно, но той ще трябва да приеме отново поканата.",
+    "userMessageOrgConfirm": "За да потвърдите, въведете името на потребителя по-долу.",
    "userRemoveOrgConfirm": "Потвърдете премахването на потребителя",
    "userRemoveOrg": "Премахване на потребителя от организацията",
    "users": "Потребители",
@@ -463,10 +468,7 @@
    "createdAt": "Създаден на",
    "proxyErrorInvalidHeader": "Невалидна стойност за заглавие на хоста. Използвайте формат на име на домейн, или оставете празно поле за да премахнете персонализирано заглавие на хост.",
    "proxyErrorTls": "Невалидно име на TLS сървър. Използвайте формат на име на домейн, или оставете празно за да премахнете името на TLS сървъра.",
-    "proxyEnableSSL": "Активиране на SSL",
-    "proxyEnableSSLDescription": "Активиране на SSL/TLS криптиране за сигурни HTTPS връзки към вашите цели.",
-    "target": "Цел",
-    "configureTarget": "Конфигуриране на цели",
+    "proxyEnableSSL": "Активиране на SSL (https)",
    "targetErrorFetch": "Неуспешно извличане на цели",
    "targetErrorFetchDescription": "Възникна грешка при извличане на целите",
    "siteErrorFetch": "Неуспешно извличане на ресурс",
@@ -493,7 +495,7 @@
    "targetTlsSettings": "Конфигурация на защитена връзка",
    "targetTlsSettingsDescription": "Конфигурирайте SSL/TLS настройките за вашия ресурс",
    "targetTlsSettingsAdvanced": "Разширени TLS настройки",
-    "targetTlsSni": "Имя на TLS сървър",
+    "targetTlsSni": "Име на TLS сървър (SNI)",
    "targetTlsSniDescription": "Името на TLS сървъра за използване за SNI. Оставете празно, за да използвате подразбиране.",
    "targetTlsSubmit": "Запазване на настройките",
    "targets": "Конфигурация на целите",
@@ -502,21 +504,9 @@
    "targetStickySessionsDescription": "Запазване на връзките със същото задно целево място за цялата сесия.",
    "methodSelect": "Изберете метод",
    "targetSubmit": "Добавяне на цел",
-    "targetNoOne": "Този ресурс няма цели. Добавете цел, за да конфигурирате къде да изпращате заявки към вашия бекенд.",
+    "targetNoOne": "Няма цели. Добавете цел чрез формата.",
    "targetNoOneDescription": "Добавянето на повече от една цел ще активира натоварването на баланса.",
    "targetsSubmit": "Запазване на целите",
-    "addTarget": "Добавете цел",
-    "targetErrorInvalidIp": "Невалиден IP адрес",
-    "targetErrorInvalidIpDescription": "Моля, въведете валиден IP адрес или име на хост",
-    "targetErrorInvalidPort": "Невалиден порт",
-    "targetErrorInvalidPortDescription": "Моля, въведете валиден номер на порт",
-    "targetErrorNoSite": "Няма избран сайт",
-    "targetErrorNoSiteDescription": "Моля, изберете сайт за целта",
-    "targetCreated": "Целта е създадена",
-    "targetCreatedDescription": "Целта беше успешно създадена",
-    "targetErrorCreate": "Неуспешно създаване на целта",
-    "targetErrorCreateDescription": "Възникна грешка при създаването на целта",
-    "save": "Запази",
    "proxyAdditional": "Допълнителни настройки на прокси",
    "proxyAdditionalDescription": "Конфигурирайте как вашият ресурс обработва прокси настройки",
    "proxyCustomHeader": "Персонализиран хост заглавие",
@@ -725,7 +715,7 @@
    "pangolinServerAdmin": "Администратор на сървър - Панголин",
    "licenseTierProfessional": "Професионален лиценз",
    "licenseTierEnterprise": "Предприятие лиценз",
-    "licenseTierPersonal": "Персонален лиценз",
+    "licenseTierCommercial": "Търговски лиценз",
    "licensed": "Лицензиран",
    "yes": "Да",
    "no": "Не",
@@ -737,7 +727,7 @@
    "idpManageDescription": "Прегледайте и управлявайте доставчици на идентичност в системата",
    "idpDeletedDescription": "Доставчик на идентичност успешно изтрит",
    "idpOidc": "OAuth2/OIDC",
-    "idpQuestionRemove": "Сигурни ли сте, че искате да изтриете доставчика за идентичност?",
+    "idpQuestionRemove": "Сигурни ли сте, че искате да изтриете трайно доставчика на идентичност {name}",
    "idpMessageRemove": "Това ще премахне доставчика на идентичност и всички свързани конфигурации. Потребителите, които се удостоверяват през този доставчик, вече няма да могат да влязат.",
    "idpMessageConfirm": "За потвърждение, моля въведете името на доставчика на идентичност по-долу.",
    "idpConfirmDelete": "Потвърдите изтриването на доставчик на идентичност",
@@ -760,7 +750,7 @@
    "idpDisplayName": "Име за показване за този доставчик на идентичност",
    "idpAutoProvisionUsers": "Автоматично потребителско създаване",
    "idpAutoProvisionUsersDescription": "Когато е активирано, потребителите ще бъдат автоматично създадени в системата при първо влизане с възможност за свързване на потребителите с роли и организации.",
-    "licenseBadge": "ЕЕ",
+    "licenseBadge": "Професионален",
    "idpType": "Тип доставчик",
    "idpTypeDescription": "Изберете типа доставчик на идентичност, който искате да конфигурирате",
    "idpOidcConfigure": "Конфигурация на OAuth2/OIDC",
@@ -1094,6 +1084,7 @@
    "navbar": "Навигационно меню",
    "navbarDescription": "Главно навигационно меню за приложението",
    "navbarDocsLink": "Документация",
+    "commercialEdition": "Търговско издание",
    "otpErrorEnable": "Не може да се активира 2FA",
    "otpErrorEnableDescription": "Възникна грешка при активиране на 2FA",
    "otpSetupCheckCode": "Моля, въведете 6-цифрен код",
@@ -1149,7 +1140,7 @@
    "sidebarAllUsers": "Всички потребители",
    "sidebarIdentityProviders": "Идентификационни доставчици",
    "sidebarLicense": "Лиценз",
-    "sidebarClients": "Клиенти",
+    "sidebarClients": "Клиенти (Бета)",
    "sidebarDomains": "Домейни",
    "enableDockerSocket": "Активиране на Docker Чернова",
    "enableDockerSocketDescription": "Активиране на Docker Socket маркировка за изтегляне на етикети на чернова. Пътят на гнездото трябва да бъде предоставен на Newt.",
@@ -1206,8 +1197,9 @@
    "domainCreate": "Създаване на домейн",
    "domainCreatedDescription": "Домейнът е създаден успешно",
    "domainDeletedDescription": "Домейнът е изтрит успешно",
-    "domainQuestionRemove": "Сигурни ли сте, че искате да премахнете домейна от вашия профил?",
+    "domainQuestionRemove": "Сигурни ли сте, че искате да премахнете домейна {domain} от вашия профил?",
    "domainMessageRemove": "След премахването, домейнът вече няма да бъде свързан с вашия профил.",
+    "domainMessageConfirm": "За потвърждение, моля въведете името на домейна по-долу.",
    "domainConfirmDelete": "Потвърдете изтриването на домейн",
    "domainDelete": "Изтриване на домейн",
    "domain": "Домейн",
@@ -1274,7 +1266,7 @@
    "billingFreeTier": "Безплатен план",
    "billingWarningOverLimit": "Предупреждение: Превишили сте една или повече лимити за използване. Вашите сайтове няма да се свържат, докато не промените абонамента си или не коригирате използването.",
    "billingUsageLimitsOverview": "Преглед на лимитите за използване",
-    "billingMonitorUsage": "Следете своята употреба спрямо конфигурираните лимити. Ако имате нужда от увеличаване на лимитите, моля свържете се с нас support@pangolin.net.",
+    "billingMonitorUsage": "Следете използването спрямо конфигурираните лимити. Ако ви е необходимо увеличаване на лимитите, моля, свържете се с нас на support@fossorial.io.",
    "billingDataUsage": "Използване на данни",
    "billingOnlineTime": "Време на работа на сайта",
    "billingUsers": "Активни потребители",
@@ -1341,6 +1333,7 @@
    "twoFactorRequired": "Двуфакторното удостоверяване е необходимо за регистрация на ключ за защита.",
    "twoFactor": "Двуфакторно удостоверяване",
    "adminEnabled2FaOnYourAccount": "Вашият администратор е активирал двуфакторно удостоверяване за {email}. Моля, завършете процеса по настройка, за да продължите.",
+    "continueToApplication": "Продължаване към приложението",
    "securityKeyAdd": "Добавяне на ключ за сигурност",
    "securityKeyRegisterTitle": "Регистриране на нов ключ за сигурност",
    "securityKeyRegisterDescription": "Свържете ключа за сигурност и въведете име, по което да го идентифицирате",
@@ -1418,7 +1411,6 @@
    "externalProxyEnabled": "Външен прокси разрешен",
    "addNewTarget": "Добави нова цел",
    "targetsList": "Списък с цели",
-    "advancedMode": "Разширен режим",
    "targetErrorDuplicateTargetFound": "Дублирана цел намерена",
    "healthCheckHealthy": "Здрав",
    "healthCheckUnhealthy": "Нездрав",
@@ -1551,17 +1543,18 @@
    "autoLoginError": "Грешка при автоматично влизане",
    "autoLoginErrorNoRedirectUrl": "Не е получен URL за пренасочване от доставчика на идентификационни данни.",
    "autoLoginErrorGeneratingUrl": "Неуспешно генериране на URL за удостоверяване.",
-    "remoteExitNodeManageRemoteExitNodes": "Отдалечени възли",
-    "remoteExitNodeDescription": "Самостоятелно хоствайте един или повече отдалечени възли, за да разширите своята мрежова връзка и намалите зависимостта от облака.",
+    "remoteExitNodeManageRemoteExitNodes": "Управление на самостоятелно хоствани",
+    "remoteExitNodeDescription": "Управление на възли за разширяване на мрежовата ви свързаност",
    "remoteExitNodes": "Възли",
    "searchRemoteExitNodes": "Търсене на възли...",
    "remoteExitNodeAdd": "Добавяне на възел",
    "remoteExitNodeErrorDelete": "Грешка при изтриване на възел",
-    "remoteExitNodeQuestionRemove": "Сигурни ли сте, че искате да премахнете възела от организацията?",
+    "remoteExitNodeQuestionRemove": "Сигурни ли сте, че искате да премахнете възела {selectedNode} от организацията?",
    "remoteExitNodeMessageRemove": "След премахване, възелът вече няма да бъде достъпен.",
+    "remoteExitNodeMessageConfirm": "За потвърждение, моля въведете името на възела по-долу.",
    "remoteExitNodeConfirmDelete": "Потвърдете изтриването на възела (\"Confirm Delete Site\" match)",
    "remoteExitNodeDelete": "Изтрийте възела (\"Delete Site\" match)",
-    "sidebarRemoteExitNodes": "Отдалечени възли",
+    "sidebarRemoteExitNodes": "Възли (\"Local\" match)",
    "remoteExitNodeCreate": {
        "title": "Създаване на възел",
        "description": "Създайте нов възел, за да разширите мрежовата си свързаност",
@@ -1730,166 +1723,5 @@
    "authPageUpdated": "Страницата за удостоверяване е актуализирана успешно",
    "healthCheckNotAvailable": "Локална",
    "rewritePath": "Пренапиши път",
-    "rewritePathDescription": "По избор пренапиши пътя преди пренасочване към целта.",
-    "continueToApplication": "Продължете до приложението",
-    "checkingInvite": "Проверка на поканата",
-    "setResourceHeaderAuth": "setResourceHeaderAuth",
-    "resourceHeaderAuthRemove": "Премахване на автентикация в заглавката",
-    "resourceHeaderAuthRemoveDescription": "Автентикацията в заглавката беше премахната успешно.",
-    "resourceErrorHeaderAuthRemove": "Неуспешно премахване на автентикация в заглавката",
-    "resourceErrorHeaderAuthRemoveDescription": "Не беше възможно премахването на автентикацията в заглавката за ресурса.",
-    "resourceHeaderAuthProtectionEnabled": "Активирано удостоверяване чрез заглавие",
-    "resourceHeaderAuthProtectionDisabled": "Деактивирано удостоверяване чрез заглавие",
-    "headerAuthRemove": "Премахни удостоверяване чрез заглавие",
-    "headerAuthAdd": "Добави удостоверяване чрез заглавие",
-    "resourceErrorHeaderAuthSetup": "Неуспешно задаване на автентикация в заглавката",
-    "resourceErrorHeaderAuthSetupDescription": "Не беше възможно задаването на автентикация в заглавката за ресурса.",
-    "resourceHeaderAuthSetup": "Автентикацията в заглавката беше зададена успешно",
-    "resourceHeaderAuthSetupDescription": "Автентикацията в заглавката беше успешно зададена.",
-    "resourceHeaderAuthSetupTitle": "Задаване на автентикация в заглавката",
-    "resourceHeaderAuthSetupTitleDescription": "Задайте базови идентификационни данни (потребителско име и парола), за да защитите този ресурс чрез HTTP удостоверяване чрез заглавие. Достъпете до него, използвайки формата https://потребител:парола@ресурс.example.com",
-    "resourceHeaderAuthSubmit": "Задаване на автентикация в заглавката",
-    "actionSetResourceHeaderAuth": "Задаване на автентикация в заглавката",
-    "enterpriseEdition": "Корпоративно издание",
-    "unlicensed": "Без лиценз",
-    "beta": "Бета",
-    "manageClients": "Управление на клиенти",
-    "manageClientsDescription": "Клиентите са устройства, които могат да се свързват към вашите сайтове",
-    "licenseTableValidUntil": "Валиден до",
-    "saasLicenseKeysSettingsTitle": "Корпоративни лицензи",
-    "saasLicenseKeysSettingsDescription": "Генериране и управление на корпоративни лицензионни ключове за самостоятелно хоствани инстанции на Pangolin",
-    "sidebarEnterpriseLicenses": "Лицензи",
-    "generateLicenseKey": "Генерация на лицензионен ключ",
-    "generateLicenseKeyForm": {
-        "validation": {
-            "emailRequired": "Моля въведете валиден имейл адрес",
-            "useCaseTypeRequired": "Моля изберете тип на употреба",
-            "firstNameRequired": "Името е задължително",
-            "lastNameRequired": "Фамилията е задължителна",
-            "primaryUseRequired": "Моля опишете основната си употреба",
-            "jobTitleRequiredBusiness": "Позицията е задължителна за бизнес изполване",
-            "industryRequiredBusiness": "Индустрията е задължителна за бизнес изполване",
-            "stateProvinceRegionRequired": "Държава/Област/Регион е задължително",
-            "postalZipCodeRequired": "Пощенски/ЗИП Код е задължителен",
-            "companyNameRequiredBusiness": "Фирменото име е задължително за бизнес изполване",
-            "countryOfResidenceRequiredBusiness": "Държавата на пребиваване е задължителна за бизнес изполване",
-            "countryRequiredPersonal": "Държавата е задължителна за лична употреба",
-            "agreeToTermsRequired": "Трябва да се съгласите с условията",
-            "complianceConfirmationRequired": "Трябва да потвърдите съответствието с Fossorial Commercial License"
-        },
-        "useCaseOptions": {
-            "personal": {
-                "title": "Лична употреба",
-                "description": "За индивидуална, некомерсиална употреба като учене, лични проекти или експериментиране."
-            },
-            "business": {
-                "title": "Бизнес употреба",
-                "description": "За вътрешно използване във фирми, компании или комерсиални или доходоносни дейности."
-            }
-        },
-        "steps": {
-            "emailLicenseType": {
-                "title": "Имейл и тип лиценз",
-                "description": "Въведете своя имейл и изберете вид на лиценза"
-            },
-            "personalInformation": {
-                "title": "Лична информация",
-                "description": "Разкажете ни за себе си"
-            },
-            "contactInformation": {
-                "title": "Контактна информация",
-                "description": "Вашите контактни данни"
-            },
-            "termsGenerate": {
-                "title": "Условия и генериране",
-                "description": "Прегледайте и приемете условията, за да генерирате своя лиценз"
-            }
-        },
-        "alerts": {
-            "commercialUseDisclosure": {
-                "title": "Разкриване на употреба",
-                "description": "Изберете лицензионен клас, който точно отразява вашата целена употреба. Персоналният лиценз позволява безплатно ползване на софтуера за индивидуална, некомерсиална или маломащабна комерсиална дейност с годишен брутен приход под 100,000 USD. Всяко ползване извън тези граници — включително ползване във фирма, организация или друга доходоносна среда — изисква валиден корпоративен лиценз и плащане на съответната лицензионна такса. Всички потребители, независимо дали са лични или корпоративни, трябва да спазват Условията на Fossorial Commercial License."
-            },
-            "trialPeriodInformation": {
-                "title": "Информация за пробен период",
-                "description": "Този лицензионен ключ предоставя функции на Enterprise за 7-дневен пробен период. За продължен достъп до платени функции след изтичането на пробния период е необходима активация под валиден персонален или корпоративен лиценз. За корпоративно лицензиране се свържете с sales@pangolin.net."
-            }
-        },
-        "form": {
-            "useCaseQuestion": "Използвате ли Pangolin за лична или бизнес употреба?",
-            "firstName": "Име",
-            "lastName": "Фамилия",
-            "jobTitle": "Позиция",
-            "primaryUseQuestion": "Каква е основната ви цел да използвате Pangolin?",
-            "industryQuestion": "Какъв е вашият отрасъл?",
-            "prospectiveUsersQuestion": "Колко потенциални потребители очаквате да имате?",
-            "prospectiveSitesQuestion": "Колко потенциални сайтове (тунели) очаквате да имате?",
-            "companyName": "Фирмено име",
-            "countryOfResidence": "Държава на пребиваване",
-            "stateProvinceRegion": "Държава / Област / Регион",
-            "postalZipCode": "Пощенски / ЗИП код",
-            "companyWebsite": "Фирмен уебсайт",
-            "companyPhoneNumber": "Фирмен телефонен номер",
-            "country": "Държава",
-            "phoneNumberOptional": "Телефонен номер (по избор)",
-            "complianceConfirmation": "Потвърждавам, че предоставената от мен информация е точна и че съм в съответствие с търговския лиценз Fossorial. Съобщаването на неточна информация или неправилното идентифициране на използването на продукта е нарушение на лиценза и може да доведе до анулиране на вашия ключ."
-        },
-        "buttons": {
-            "close": "Затвори",
-            "previous": "Предишен",
-            "next": "Следващ",
-            "generateLicenseKey": "Генериране на лицензионен ключ"
-        },
-        "toasts": {
-            "success": {
-                "title": "Лицензионният ключ е успешно генериран",
-                "description": "Вашият лицензионен ключ е генериран и готов за употреба."
-            },
-            "error": {
-                "title": "Грешка при генериране на лицензионен ключ",
-                "description": "Възникна грешка при генериране на лицензионния ключ."
-            }
-        }
-    },
-    "priority": "Приоритет",
-    "priorityDescription": "По-високите приоритетни маршрути се оценяват първи. Приоритет = 100 означава автоматично подреждане (системата решава). Използвайте друго число, за да наложите ръчен приоритет.",
-    "instanceName": "Име на инстанция",
-    "pathMatchModalTitle": "Конфигурация на съвпадение по пътека",
-    "pathMatchModalDescription": "Настройте как трябва да бъдат съвпадани входящите заявки въз основа на техния път.",
-    "pathMatchType": "Вид на съвпадението",
-    "pathMatchPrefix": "Префикс",
-    "pathMatchExact": "Точно",
-    "pathMatchRegex": "Регекс",
-    "pathMatchValue": "Стойност на пътя",
-    "clear": "Изчисти",
-    "saveChanges": "Запиши промените",
-    "pathMatchRegexPlaceholder": "^/api/.*",
-    "pathMatchDefaultPlaceholder": "/път",
-    "pathMatchPrefixHelp": "Пример: /api съвпада /api, /api/потребители и т.н.",
-    "pathMatchExactHelp": "Пример: /api съвпада само с /api",
-    "pathMatchRegexHelp": "Пример: ^/api/.* съвпада с /api/всичко",
-    "pathRewriteModalTitle": "Конфигурация на пренаписване на пътя",
-    "pathRewriteModalDescription": "Преобразуване на съвпаднатия път преди препращане към целта.",
-    "pathRewriteType": "Вид на пренаписването",
-    "pathRewritePrefixOption": "Префикс - Подмяна на префикса",
-    "pathRewriteExactOption": "Точно - Замяна на целия път",
-    "pathRewriteRegexOption": "Регекс - Смяна на модела",
-    "pathRewriteStripPrefixOption": "Премахване на префикса",
-    "pathRewriteValue": "Стойност на пренаписването",
-    "pathRewriteRegexPlaceholder": "/нов/$1",
-    "pathRewriteDefaultPlaceholder": "/нов-пътека",
-    "pathRewritePrefixHelp": "Заменете съвпаднатия префикс с тази стойност",
-    "pathRewriteExactHelp": "Заменете целия път с тази стойност, когато пътят съвпада точно",
-    "pathRewriteRegexHelp": "Използвайте групи за улавяне като $1, $2 за заместване",
-    "pathRewriteStripPrefixHelp": "Оставете празно, за да премахнете префикса или предоставете нов префикс",
-    "pathRewritePrefix": "Префикс",
-    "pathRewriteExact": "Точно",
-    "pathRewriteRegex": "Регекс",
-    "pathRewriteStrip": "Премахване",
-    "pathRewriteStripLabel": "премахване",
-    "sidebarEnableEnterpriseLicense": "Активиране на корпоративен лиценз",
-    "cannotbeUndone": "Това не може да се отмени.",
-    "toConfirm": "за потвърждение",
-    "deleteClientQuestion": "Сигурни ли сте, че искате да премахнете клиента от сайта и организацията?",
-    "clientMessageRemove": "След като клиентът бъде премахнат, той вече няма да може да се свързва с сайта."
+    "rewritePathDescription": "По избор пренапиши пътя преди пренасочване към целта."
 }
--- a/messages/cs-CZ.json
+++ b/messages/cs-CZ.json
@@ -47,8 +47,9 @@
    "edit": "Upravit",
    "siteConfirmDelete": "Potvrdit odstranění lokality",
    "siteDelete": "Odstranění lokality",
-    "siteMessageRemove": "Po odstranění webu již nebude přístupný. Všechny cíle spojené s webem budou také odstraněny.",
-    "siteQuestionRemove": "Jste si jisti, že chcete odstranit tuto stránku z organizace?",
+    "siteMessageRemove": "Jakmile lokalitu odstraníte, nebude dostupná. Všechny související služby a cíle budou také odstraněny.",
+    "siteMessageConfirm": "Pro potvrzení zadejte prosím název lokality.",
+    "siteQuestionRemove": "Opravdu chcete odstranit lokalitu {selectedSite} z organizace?",
    "siteManageSites": "Správa lokalit",
    "siteDescription": "Umožní připojení k vaší síti prostřednictvím zabezpečených tunelů",
    "siteCreate": "Vytvořit lokalitu",
@@ -95,7 +96,7 @@
    "siteWgDescription": "Použijte jakéhokoli klienta WireGuard abyste sestavili tunel. Vyžaduje se ruční nastavení NAT.",
    "siteWgDescriptionSaas": "Použijte jakéhokoli klienta WireGuard abyste sestavili tunel. Vyžaduje se ruční nastavení NAT. FUNGUJE POUZE NA SELF-HOSTED SERVERECH",
    "siteLocalDescription": "Pouze lokální zdroje. Žádný tunel.",
-    "siteLocalDescriptionSaas": "Pouze místní zdroje. Žádný tunel. Dostupné pouze na vzdálených uzlech.",
+    "siteLocalDescriptionSaas": "Pouze lokální zdroje. Žádný tunel. FUNGUJE POUZE NA SELF-HOSTED SERVERECH",
    "siteSeeAll": "Zobrazit všechny lokality",
    "siteTunnelDescription": "Určete jak se chcete připojit k vaší lokalitě",
    "siteNewtCredentials": "Přihlašovací údaje Newt",
@@ -153,7 +154,8 @@
    "protected": "Chráněno",
    "notProtected": "Nechráněno",
    "resourceMessageRemove": "Jakmile zdroj odstraníte, nebude dostupný. Všechny související služby a cíle budou také odstraněny.",
-    "resourceQuestionRemove": "Jste si jisti, že chcete odstranit zdroj z organizace?",
+    "resourceMessageConfirm": "Pro potvrzení zadejte prosím název zdroje.",
+    "resourceQuestionRemove": "Opravdu chcete odstranit zdroj {selectedResource} z organizace?",
    "resourceHTTP": "Zdroj HTTPS",
    "resourceHTTPDescription": "Požadavky na proxy pro vaši aplikaci přes HTTPS pomocí subdomény nebo základní domény.",
    "resourceRaw": "Surový TCP/UDP zdroj",
@@ -218,7 +220,7 @@
    "orgDeleteConfirm": "Potvrdit odstranění organizace",
    "orgMessageRemove": "Tato akce je nevratná a odstraní všechna související data.",
    "orgMessageConfirm": "Pro potvrzení zadejte níže uvedený název organizace.",
-    "orgQuestionRemove": "Jste si jisti, že chcete odstranit organizaci?",
+    "orgQuestionRemove": "Opravdu chcete odstranit organizaci {selectedOrg}?",
    "orgUpdated": "Organizace byla aktualizována",
    "orgUpdatedDescription": "Organizace byla aktualizována.",
    "orgErrorUpdate": "Aktualizace organizace se nezdařila",
@@ -285,8 +287,9 @@
    "apiKeysAdd": "Generovat API klíč",
    "apiKeysErrorDelete": "Chyba při odstraňování API klíče",
    "apiKeysErrorDeleteMessage": "Chyba při odstraňování API klíče",
-    "apiKeysQuestionRemove": "Jste si jisti, že chcete odstranit klíč API z organizace?",
+    "apiKeysQuestionRemove": "Opravdu chcete odstranit API klíč {selectedApiKey} z organizace?",
    "apiKeysMessageRemove": "Po odstranění klíče API již nebude možné použít.",
+    "apiKeysMessageConfirm": "Pro potvrzení zadejte název klíče API.",
    "apiKeysDeleteConfirm": "Potvrdit odstranění API klíče",
    "apiKeysDelete": "Odstranit klíč API",
    "apiKeysManage": "Správa API klíčů",
@@ -302,7 +305,8 @@
    "userDeleteConfirm": "Potvrdit odstranění uživatele",
    "userDeleteServer": "Odstranit uživatele ze serveru",
    "userMessageRemove": "Uživatel bude odstraněn ze všech organizací a bude zcela odstraněn ze serveru.",
-    "userQuestionRemove": "Jste si jisti, že chcete trvale odstranit uživatele ze serveru?",
+    "userMessageConfirm": "Pro potvrzení zadejte níže uvedené jméno uživatele.",
+    "userQuestionRemove": "Opravdu chcete trvale odstranit {selectedUser} ze serveru?",
    "licenseKey": "Licenční klíč",
    "valid": "Valid",
    "numberOfSites": "Počet stránek",
@@ -335,7 +339,7 @@
    "fossorialLicense": "Zobrazit Fossorial Commercial License & Subscription terms",
    "licenseMessageRemove": "Tímto odstraníte licenční klíč a všechna s ním spojená oprávnění, která mu byla udělena.",
    "licenseMessageConfirm": "Pro potvrzení zadejte licenční klíč níže.",
-    "licenseQuestionRemove": "Jste si jisti, že chcete odstranit licenční klíč?",
+    "licenseQuestionRemove": "Jste si jisti, že chcete odstranit licenční klíč {selectedKey}?",
    "licenseKeyDelete": "Odstranit licenční klíč",
    "licenseKeyDeleteConfirm": "Potvrdit odstranění licenčního klíče",
    "licenseTitle": "Správa stavu licence",
@@ -368,7 +372,7 @@
    "inviteRemoveErrorDescription": "Došlo k chybě při odstraňování pozvánky.",
    "inviteRemoved": "Pozvánka odstraněna",
    "inviteRemovedDescription": "Pozvánka pro {email} byla odstraněna.",
-    "inviteQuestionRemove": "Jste si jisti, že chcete odstranit pozvánku?",
+    "inviteQuestionRemove": "Jste si jisti, že chcete odstranit pozvánku {email}?",
    "inviteMessageRemove": "Po odstranění, tato pozvánka již nebude platná. Později můžete uživatele znovu pozvat.",
    "inviteMessageConfirm": "Pro potvrzení zadejte prosím níže uvedenou e-mailovou adresu.",
    "inviteQuestionRegenerate": "Jste si jisti, že chcete obnovit pozvánku pro {email}? Tato akce zruší předchozí pozvánku.",
@@ -394,8 +398,9 @@
    "userErrorOrgRemoveDescription": "Došlo k chybě při odebírání uživatele.",
    "userOrgRemoved": "Uživatel odstraněn",
    "userOrgRemovedDescription": "Uživatel {email} byl odebrán z organizace.",
-    "userQuestionOrgRemove": "Jste si jisti, že chcete odstranit tohoto uživatele z organizace?",
+    "userQuestionOrgRemove": "Jste si jisti, že chcete odstranit {email} z organizace?",
    "userMessageOrgRemove": "Po odstranění tohoto uživatele již nebude mít přístup k organizaci. Vždy je můžete znovu pozvat později, ale budou muset pozvání znovu přijmout.",
+    "userMessageOrgConfirm": "Pro potvrzení, zadejte prosím jméno uživatele níže.",
    "userRemoveOrgConfirm": "Potvrdit odebrání uživatele",
    "userRemoveOrg": "Odebrat uživatele z organizace",
    "users": "Uživatelé",
@@ -463,10 +468,7 @@
    "createdAt": "Vytvořeno v",
    "proxyErrorInvalidHeader": "Neplatná hodnota hlavičky hostitele. Použijte formát názvu domény, nebo uložte prázdné pro zrušení vlastního hlavičky hostitele.",
    "proxyErrorTls": "Neplatné jméno TLS serveru. Použijte formát doménového jména nebo uložte prázdné pro odstranění názvu TLS serveru.",
-    "proxyEnableSSL": "Povolit SSL",
-    "proxyEnableSSLDescription": "Povolit šifrování SSL/TLS pro zabezpečená HTTPS připojení k vašim cílům.",
-    "target": "Target",
-    "configureTarget": "Konfigurace cílů",
+    "proxyEnableSSL": "Povolit SSL (https)",
    "targetErrorFetch": "Nepodařilo se načíst cíle",
    "targetErrorFetchDescription": "Při načítání cílů došlo k chybě",
    "siteErrorFetch": "Nepodařilo se načíst zdroj",
@@ -493,7 +495,7 @@
    "targetTlsSettings": "Nastavení bezpečného připojení",
    "targetTlsSettingsDescription": "Konfigurace nastavení SSL/TLS pro váš dokument",
    "targetTlsSettingsAdvanced": "Pokročilé nastavení TLS",
-    "targetTlsSni": "Název serveru TLS",
+    "targetTlsSni": "Název serveru TLS (SNI)",
    "targetTlsSniDescription": "Název serveru TLS pro použití v SNI. Ponechte prázdné pro použití výchozího nastavení.",
    "targetTlsSubmit": "Uložit nastavení",
    "targets": "Konfigurace cílů",
@@ -502,21 +504,9 @@
    "targetStickySessionsDescription": "Zachovat spojení na stejném cíli pro celou relaci.",
    "methodSelect": "Vyberte metodu",
    "targetSubmit": "Add Target",
-    "targetNoOne": "Tento zdroj nemá žádné cíle. Přidejte cíl pro konfiguraci kam poslat žádosti na vaši backend.",
+    "targetNoOne": "Žádné cíle. Přidejte cíl pomocí formuláře.",
    "targetNoOneDescription": "Přidáním více než jednoho cíle se umožní vyvážení zatížení.",
    "targetsSubmit": "Uložit cíle",
-    "addTarget": "Add Target",
-    "targetErrorInvalidIp": "Neplatná IP adresa",
-    "targetErrorInvalidIpDescription": "Zadejte prosím platnou IP adresu nebo název hostitele",
-    "targetErrorInvalidPort": "Neplatný port",
-    "targetErrorInvalidPortDescription": "Zadejte platné číslo portu",
-    "targetErrorNoSite": "Není vybrán žádný web",
-    "targetErrorNoSiteDescription": "Vyberte prosím web pro cíl",
-    "targetCreated": "Cíl byl vytvořen",
-    "targetCreatedDescription": "Cíl byl úspěšně vytvořen",
-    "targetErrorCreate": "Nepodařilo se vytvořit cíl",
-    "targetErrorCreateDescription": "Došlo k chybě při vytváření cíle",
-    "save": "Uložit",
    "proxyAdditional": "Další nastavení proxy",
    "proxyAdditionalDescription": "Konfigurovat nastavení proxy zpracování vašeho zdroje",
    "proxyCustomHeader": "Vlastní hlavička hostitele",
@@ -725,7 +715,7 @@
    "pangolinServerAdmin": "Správce serveru - Pangolin",
    "licenseTierProfessional": "Profesionální licence",
    "licenseTierEnterprise": "Podniková licence",
-    "licenseTierPersonal": "Osobní licence",
+    "licenseTierCommercial": "Obchodní licence",
    "licensed": "Licencováno",
    "yes": "Ano",
    "no": "Ne",
@@ -737,7 +727,7 @@
    "idpManageDescription": "Zobrazit a spravovat poskytovatele identity v systému",
    "idpDeletedDescription": "Poskytovatel identity byl úspěšně odstraněn",
    "idpOidc": "OAuth2/OIDC",
-    "idpQuestionRemove": "Jste si jisti, že chcete trvale odstranit poskytovatele identity?",
+    "idpQuestionRemove": "Jste si jisti, že chcete trvale odstranit poskytovatele identity {name}?",
    "idpMessageRemove": "Tímto odstraníte poskytovatele identity a všechny přidružené konfigurace. Uživatelé, kteří se autentizují prostřednictvím tohoto poskytovatele, se již nebudou moci přihlásit.",
    "idpMessageConfirm": "Pro potvrzení zadejte níže uvedené jméno poskytovatele identity.",
    "idpConfirmDelete": "Potvrdit odstranění poskytovatele identity",
@@ -760,7 +750,7 @@
    "idpDisplayName": "Zobrazované jméno tohoto poskytovatele identity",
    "idpAutoProvisionUsers": "Automatická úprava uživatelů",
    "idpAutoProvisionUsersDescription": "Pokud je povoleno, uživatelé budou automaticky vytvářeni v systému při prvním přihlášení, s možností namapovat uživatele na role a organizace.",
-    "licenseBadge": "PE",
+    "licenseBadge": "Profesionální",
    "idpType": "Typ poskytovatele",
    "idpTypeDescription": "Vyberte typ poskytovatele identity, který chcete nakonfigurovat",
    "idpOidcConfigure": "Nastavení OAuth2/OIDC",
@@ -1094,6 +1084,7 @@
    "navbar": "Navigation Menu",
    "navbarDescription": "Hlavní navigační menu aplikace",
    "navbarDocsLink": "Dokumentace",
+    "commercialEdition": "Obchodní vydání",
    "otpErrorEnable": "2FA nelze povolit",
    "otpErrorEnableDescription": "Došlo k chybě při povolování 2FA",
    "otpSetupCheckCode": "Zadejte 6místný kód",
@@ -1149,7 +1140,7 @@
    "sidebarAllUsers": "Všichni uživatelé",
    "sidebarIdentityProviders": "Poskytovatelé identity",
    "sidebarLicense": "Licence",
-    "sidebarClients": "Klienti",
+    "sidebarClients": "Klienti (Beta)",
    "sidebarDomains": "Domény",
    "enableDockerSocket": "Povolit Docker plán",
    "enableDockerSocketDescription": "Povolte seškrábání štítků na Docker Socket pro popisky plánů. Nová cesta musí být k dispozici.",
@@ -1206,8 +1197,9 @@
    "domainCreate": "Vytvořit doménu",
    "domainCreatedDescription": "Doména byla úspěšně vytvořena",
    "domainDeletedDescription": "Doména byla úspěšně odstraněna",
-    "domainQuestionRemove": "Opravdu chcete odstranit doménu z vašeho účtu?",
+    "domainQuestionRemove": "Opravdu chcete odstranit doménu {domain} z vašeho účtu?",
    "domainMessageRemove": "Po odstranění domény již nebude přiřazena k vašemu účtu.",
+    "domainMessageConfirm": "Pro potvrzení zadejte název domény níže.",
    "domainConfirmDelete": "Potvrdit odstranění domény",
    "domainDelete": "Odstranit doménu",
    "domain": "Doména",
@@ -1274,7 +1266,7 @@
    "billingFreeTier": "Volná úroveň",
    "billingWarningOverLimit": "Upozornění: Překročili jste jeden nebo více omezení používání. Vaše stránky se nepřipojí dokud nezměníte předplatné nebo neupravíte své používání.",
    "billingUsageLimitsOverview": "Přehled omezení použití",
-    "billingMonitorUsage": "Sledujte vaše využití pomocí nastavených limitů. Pokud potřebujete zvýšit limity, kontaktujte nás prosím support@pangolin.net.",
+    "billingMonitorUsage": "Sledujte vaše využití pomocí nastavených limitů. Pokud potřebujete zvýšit limity, kontaktujte nás prosím support@fossorial.io.",
    "billingDataUsage": "Využití dat",
    "billingOnlineTime": "Stránka online čas",
    "billingUsers": "Aktivní uživatelé",
@@ -1341,6 +1333,7 @@
    "twoFactorRequired": "Pro registraci bezpečnostního klíče je nutné dvoufaktorové ověření.",
    "twoFactor": "Dvoufaktorové ověření",
    "adminEnabled2FaOnYourAccount": "Váš správce povolil dvoufaktorové ověřování pro {email}. Chcete-li pokračovat, dokončete proces nastavení.",
+    "continueToApplication": "Pokračovat do aplikace",
    "securityKeyAdd": "Přidat bezpečnostní klíč",
    "securityKeyRegisterTitle": "Registrovat nový bezpečnostní klíč",
    "securityKeyRegisterDescription": "Připojte svůj bezpečnostní klíč a zadejte jméno pro jeho identifikaci",
@@ -1418,7 +1411,6 @@
    "externalProxyEnabled": "Externí proxy povolen",
    "addNewTarget": "Add New Target",
    "targetsList": "Seznam cílů",
-    "advancedMode": "Pokročilý režim",
    "targetErrorDuplicateTargetFound": "Byl nalezen duplicitní cíl",
    "healthCheckHealthy": "Zdravé",
    "healthCheckUnhealthy": "Nezdravé",
@@ -1551,17 +1543,18 @@
    "autoLoginError": "Automatická chyba přihlášení",
    "autoLoginErrorNoRedirectUrl": "Od poskytovatele identity nebyla obdržena žádná adresa URL.",
    "autoLoginErrorGeneratingUrl": "Nepodařilo se vygenerovat ověřovací URL.",
-    "remoteExitNodeManageRemoteExitNodes": "Vzdálené uzly",
-    "remoteExitNodeDescription": "Hostujte jeden nebo více vlastních vzdálených uzlů, abyste rozšířili síťová připojení a snížili závislost na cloudu",
+    "remoteExitNodeManageRemoteExitNodes": "Spravovat vlastní hostování",
+    "remoteExitNodeDescription": "Spravujte uzly pro rozšíření připojení k síti",
    "remoteExitNodes": "Uzly",
    "searchRemoteExitNodes": "Hledat uzly...",
    "remoteExitNodeAdd": "Přidat uzel",
    "remoteExitNodeErrorDelete": "Chyba při odstraňování uzlu",
-    "remoteExitNodeQuestionRemove": "Jste si jisti, že chcete odstranit uzel z organizace?",
+    "remoteExitNodeQuestionRemove": "Jste si jisti, že chcete odstranit uzel {selectedNode} z organizace?",
    "remoteExitNodeMessageRemove": "Po odstranění uzel již nebude přístupný.",
+    "remoteExitNodeMessageConfirm": "Pro potvrzení zadejte název uzlu níže.",
    "remoteExitNodeConfirmDelete": "Potvrdit odstranění uzlu",
    "remoteExitNodeDelete": "Odstranit uzel",
-    "sidebarRemoteExitNodes": "Vzdálené uzly",
+    "sidebarRemoteExitNodes": "Uzly",
    "remoteExitNodeCreate": {
        "title": "Vytvořit uzel",
        "description": "Vytvořit nový uzel pro rozšíření síťového připojení",
@@ -1730,166 +1723,5 @@
    "authPageUpdated": "Autentizační stránka byla úspěšně aktualizována",
    "healthCheckNotAvailable": "Místní",
    "rewritePath": "Přepsat cestu",
-    "rewritePathDescription": "Volitelně přepište cestu před odesláním na cíl.",
-    "continueToApplication": "Pokračovat v aplikaci",
-    "checkingInvite": "Kontrola pozvánky",
-    "setResourceHeaderAuth": "setResourceHeaderAuth",
-    "resourceHeaderAuthRemove": "Odstranit Autentizaci Záhlaví",
-    "resourceHeaderAuthRemoveDescription": "Úspěšně odstraněna autentizace záhlaví.",
-    "resourceErrorHeaderAuthRemove": "Nepodařilo se odstranit Autentizaci Záhlaví",
-    "resourceErrorHeaderAuthRemoveDescription": "Nepodařilo se odstranit autentizaci záhlaví ze zdroje.",
-    "resourceHeaderAuthProtectionEnabled": "Ověřování pomocí hlaviček zapnuto",
-    "resourceHeaderAuthProtectionDisabled": "Ověřování pomocí hlaviček vypnuto",
-    "headerAuthRemove": "Odstranit ověřování pomocí hlaviček",
-    "headerAuthAdd": "Přidat ověřování pomocí hlaviček",
-    "resourceErrorHeaderAuthSetup": "Nepodařilo se nastavit Autentizaci Záhlaví",
-    "resourceErrorHeaderAuthSetupDescription": "Nepodařilo se nastavit autentizaci záhlaví ze zdroje.",
-    "resourceHeaderAuthSetup": "Úspěšně nastavena Autentizace Záhlaví",
-    "resourceHeaderAuthSetupDescription": "Autentizace záhlaví byla úspěšně nastavena.",
-    "resourceHeaderAuthSetupTitle": "Nastavit Autentizaci Záhlaví",
-    "resourceHeaderAuthSetupTitleDescription": "Nastavte přihlašovací údaje basic auth (uživatelské jméno a heslo) abyste tento zdroj chránili ověřováním pomocí HTTP hlaviček. Pro přístup použijte adresu ve formátu https://username:password@resource.example.com",
-    "resourceHeaderAuthSubmit": "Nastavit Autentizaci Záhlaví",
-    "actionSetResourceHeaderAuth": "Nastavit Autentizaci Záhlaví",
-    "enterpriseEdition": "Podniková edice",
-    "unlicensed": "Nelicencováno",
-    "beta": "Beta",
-    "manageClients": "Spravovat klienty",
-    "manageClientsDescription": "Klienti jsou zařízení, která se mohou připojit k vašim lokalitám",
-    "licenseTableValidUntil": "Platná do",
-    "saasLicenseKeysSettingsTitle": "Podniková licence",
-    "saasLicenseKeysSettingsDescription": "Vygenerovat a spravovat podnikové licence pro instance Pangolin na vlastním hostingu",
-    "sidebarEnterpriseLicenses": "Licence",
-    "generateLicenseKey": "Vygenerovat licenční klíč",
-    "generateLicenseKeyForm": {
-        "validation": {
-            "emailRequired": "Prosím zadejte platnou emailovou adresu",
-            "useCaseTypeRequired": "Vyberte prosím typ použití",
-            "firstNameRequired": "Zadejte křestní jméno",
-            "lastNameRequired": "Zadejte příjmení",
-            "primaryUseRequired": "Popište prosím účel použití",
-            "jobTitleRequiredBusiness": "Pro komerční využití zadejte název pracovní pozice",
-            "industryRequiredBusiness": "Pro komerční využití zadejte odvětví společnosti",
-            "stateProvinceRegionRequired": "Zadejte stát/provincii/oblast",
-            "postalZipCodeRequired": "Zadejte PSČ",
-            "companyNameRequiredBusiness": "Pro komerční využití zadejte název společnosti",
-            "countryOfResidenceRequiredBusiness": "Pro komerční využití zadejte zemi sídla společnosti",
-            "countryRequiredPersonal": "Pro osobní využití zadejte zemi",
-            "agreeToTermsRequired": "Musíte souhlasit s podmínkami",
-            "complianceConfirmationRequired": "Musíte potvrdit dodržování Fossorial Commercial Licence"
-        },
-        "useCaseOptions": {
-            "personal": {
-                "title": "Osobní využití",
-                "description": "Pro osobní nekomerční využití jako je vzdělávání, osobní projekty nebo experimentování."
-            },
-            "business": {
-                "title": "Podnikové využití",
-                "description": "Pro použití v organizacích, společnostech nebo při činnostech generujících zisk."
-            }
-        },
-        "steps": {
-            "emailLicenseType": {
-                "title": "Email a typ licence",
-                "description": "Zadejte svůj email a vyberte typ licence"
-            },
-            "personalInformation": {
-                "title": "Osobní údaje",
-                "description": "Povězte nám něco o sobě"
-            },
-            "contactInformation": {
-                "title": "Kontaktní údaje",
-                "description": "Vaše kontaktní údaje"
-            },
-            "termsGenerate": {
-                "title": "Podmínky a vygenerovat",
-                "description": "Zkontrolujte a přijměte podmínky pro vygenerování vaší licence"
-            }
-        },
-        "alerts": {
-            "commercialUseDisclosure": {
-                "title": "Poskytnutí využití",
-                "description": "Vyberte si typ licence který odráží způsob využití. Osobní licence dovoluje používat aplikaci pro osobní využití, nekomerční využití nebo v malých organizacích do ročního obratu pod 100 000 USD. Jakékoliv jiné využití včetně využití pro podnikání, organizace nebo jiná prostředí generující zisk vyžaduje platnou podnikovou licenci a platbu licenčních poplatků. Všichni uživatelé, ať už osobních nebo podnikových licencí, musí souhlasit s Fossorial Commercial License Terms."
-            },
-            "trialPeriodInformation": {
-                "title": "Informace o zkušební době",
-                "description": "Tento licenční klíč umožňuje používat podnikové funkce po dobu sedmidenní zkušební doby. Abyste zachovali přístup k placeným funkcím po skončení zkušební doby, musíte aktivovat platnou osobní nebo podnikovou licenci. Pro podnikové licence kontaktujte sales@pangolin.net."
-            }
-        },
-        "form": {
-            "useCaseQuestion": "Používáte Pangolin pro osobní nebo obchodní účely?",
-            "firstName": "Křestní jméno",
-            "lastName": "Příjmení",
-            "jobTitle": "Pracovní pozice",
-            "primaryUseQuestion": "Na co budete především používat Pangolin?",
-            "industryQuestion": "Jaké je vaše odvětví?",
-            "prospectiveUsersQuestion": "Kolik potenciálních uživatelů předpokládáte?",
-            "prospectiveSitesQuestion": "Kolik předpokládáte lokalit (tunelů)?",
-            "companyName": "Název společnosti",
-            "countryOfResidence": "Země sídla společnosti",
-            "stateProvinceRegion": "Stát / kraj / oblast",
-            "postalZipCode": "PSČ",
-            "companyWebsite": "Stránky společnosti",
-            "companyPhoneNumber": "Telefonní číslo společnosti",
-            "country": "Země",
-            "phoneNumberOptional": "Telefonní číslo (nepovinné)",
-            "complianceConfirmation": "Potvrzuji, že informace které jsem poskytl jsou přesné a že jsem v souladu s licencí Fossorial Commercial License. Poskutnutí nepřesných informací nebo nesprávné určení použití produktu je porušením licence a může vést ke zrušení platnosti klíče."
-        },
-        "buttons": {
-            "close": "Zavřít",
-            "previous": "Předchozí",
-            "next": "Následující",
-            "generateLicenseKey": "Vygenerovat licenční klíč"
-        },
-        "toasts": {
-            "success": {
-                "title": "Licenční klíč byl úspěšně vytvořen",
-                "description": "Váš licenční klíč byl vytvořen a je připraven k použití."
-            },
-            "error": {
-                "title": "Nepodařilo se vytvořit licenční klíč",
-                "description": "Při generování licenčního klíče došlo k chybě."
-            }
-        }
-    },
-    "priority": "Priorita",
-    "priorityDescription": "Vyšší priorita je vyhodnocena jako první. Priorita = 100 znamená automatické řazení (rozhodnutí systému). Pro vynucení manuální priority použijte jiné číslo.",
-    "instanceName": "Název instance",
-    "pathMatchModalTitle": "Nastavit porovnávání cest",
-    "pathMatchModalDescription": "Nastavte jak se bude ověřovat, ze cesty příchozích požadavků se shodují.",
-    "pathMatchType": "Typ shody",
-    "pathMatchPrefix": "Prefix",
-    "pathMatchExact": "Přesná",
-    "pathMatchRegex": "Regex",
-    "pathMatchValue": "Hodnota cesty",
-    "clear": "Smazat",
-    "saveChanges": "Uložit změny",
-    "pathMatchRegexPlaceholder": "^/api/.*",
-    "pathMatchDefaultPlaceholder": "/cesta",
-    "pathMatchPrefixHelp": "Příklad: /api se shoduje s cestami /api, /api/users atd.",
-    "pathMatchExactHelp": "Příklad: /api se shoduje pouze s cestou /api",
-    "pathMatchRegexHelp": "Příklad: ^/api/.* se shoduje s /api/cokoliv",
-    "pathRewriteModalTitle": "Nastavit přepis cesty",
-    "pathRewriteModalDescription": "Upravit shodující se cestu před odesláním požadavku do cíle.",
-    "pathRewriteType": "Typ přepisu",
-    "pathRewritePrefixOption": "Prefix - Nahradí prefix",
-    "pathRewriteExactOption": "Přesný - Nahradí celou cestu",
-    "pathRewriteRegexOption": "Regex - Nahrazení pomocí vzorů",
-    "pathRewriteStripPrefixOption": "Odstranit prefix - Odstraní prefix",
-    "pathRewriteValue": "Přepisovaná hodnota",
-    "pathRewriteRegexPlaceholder": "/nová/$1",
-    "pathRewriteDefaultPlaceholder": "/nová-cesta",
-    "pathRewritePrefixHelp": "Nahradit odpovídající prefix touto hodnotou",
-    "pathRewriteExactHelp": "Nahradit celou cestu touto hodnotou, pokud cesta přesně odpovídá",
-    "pathRewriteRegexHelp": "K nahrazení použít capture groups jako $1, $2",
-    "pathRewriteStripPrefixHelp": "Ponechte prázdné pro odstranění prefixu nebo zadejte nový prefix",
-    "pathRewritePrefix": "Prefix",
-    "pathRewriteExact": "Přesný",
-    "pathRewriteRegex": "Regex",
-    "pathRewriteStrip": "Odstranit",
-    "pathRewriteStripLabel": "odstranit",
-    "sidebarEnableEnterpriseLicense": "Použít podnikovou licenci",
-    "cannotbeUndone": "To nelze vrátit zpět.",
-    "toConfirm": "Potvrdit",
-    "deleteClientQuestion": "Jste si jisti, že chcete odstranit klienta z webu a organizace?",
-    "clientMessageRemove": "Po odstranění se klient již nebude moci připojit k webu."
+    "rewritePathDescription": "Volitelně přepište cestu před odesláním na cíl."
 }
--- a/messages/de-DE.json
+++ b/messages/de-DE.json
@@ -47,8 +47,9 @@
    "edit": "Bearbeiten",
    "siteConfirmDelete": "Standort löschen bestätigen",
    "siteDelete": "Standort löschen",
-    "siteMessageRemove": "Sobald die Site entfernt ist, wird sie nicht mehr zugänglich sein. Alle mit der Site verbundenen Ziele werden ebenfalls entfernt.",
-    "siteQuestionRemove": "Sind Sie sicher, dass Sie die Site aus der Organisation entfernen möchten?",
+    "siteMessageRemove": "Sobald dieser Standort entfernt ist, wird er nicht mehr zugänglich sein. Alle Ressourcen und Ziele, die mit diesem Standort verbunden sind, werden ebenfalls entfernt.",
+    "siteMessageConfirm": "Um zu bestätigen, gib den Namen des Standortes unten ein.",
+    "siteQuestionRemove": "Bist du sicher, dass der Standort {selectedSite} aus der Organisation entfernt werden soll?",
    "siteManageSites": "Standorte verwalten",
    "siteDescription": "Verbindung zum Netzwerk durch sichere Tunnel erlauben",
    "siteCreate": "Standort erstellen",
@@ -95,7 +96,7 @@
    "siteWgDescription": "Verwende jeden WireGuard-Client, um einen Tunnel einzurichten. Manuelles NAT-Setup erforderlich.",
    "siteWgDescriptionSaas": "Verwenden Sie jeden WireGuard-Client, um einen Tunnel zu erstellen. Manuelles NAT-Setup erforderlich. FUNKTIONIERT NUR BEI SELBSTGEHOSTETEN KNOTEN",
    "siteLocalDescription": "Nur lokale Ressourcen. Kein Tunneling.",
-    "siteLocalDescriptionSaas": "Nur lokale Ressourcen. Kein Tunneling. Nur für entfernte Knoten verfügbar.",
+    "siteLocalDescriptionSaas": "Nur lokale Ressourcen. Keine Tunneldurchführung. FUNKTIONIERT NUR BEI SELBSTGEHOSTETEN KNOTEN",
    "siteSeeAll": "Alle Standorte anzeigen",
    "siteTunnelDescription": "Lege fest, wie du dich mit deinem Standort verbinden möchtest",
    "siteNewtCredentials": "Neue Newt Zugangsdaten",
@@ -153,7 +154,8 @@
    "protected": "Geschützt",
    "notProtected": "Nicht geschützt",
    "resourceMessageRemove": "Einmal entfernt, wird die Ressource nicht mehr zugänglich sein. Alle mit der Ressource verbundenen Ziele werden ebenfalls entfernt.",
-    "resourceQuestionRemove": "Sind Sie sicher, dass Sie die Ressource aus der Organisation entfernen möchten?",
+    "resourceMessageConfirm": "Um zu bestätigen, geben Sie bitte den Namen der Ressource unten ein.",
+    "resourceQuestionRemove": "Sind Sie sicher, dass Sie die Ressource {selectedResource} aus der Organisation entfernen möchten?",
    "resourceHTTP": "HTTPS-Ressource",
    "resourceHTTPDescription": "Proxy-Anfragen an Ihre App über HTTPS unter Verwendung einer Subdomain oder einer Basis-Domain.",
    "resourceRaw": "Rohe TCP/UDP Ressource",
@@ -218,7 +220,7 @@
    "orgDeleteConfirm": "Organisation löschen bestätigen",
    "orgMessageRemove": "Diese Aktion ist unwiderruflich und löscht alle zugehörigen Daten.",
    "orgMessageConfirm": "Um zu bestätigen, geben Sie bitte den Namen der Organisation unten ein.",
-    "orgQuestionRemove": "Sind Sie sicher, dass Sie die Organisation entfernen möchten?",
+    "orgQuestionRemove": "Sind Sie sicher, dass Sie die Organisation {selectedOrg} entfernen möchten?",
    "orgUpdated": "Organisation aktualisiert",
    "orgUpdatedDescription": "Die Organisation wurde aktualisiert.",
    "orgErrorUpdate": "Fehler beim Aktualisieren der Organisation",
@@ -285,8 +287,9 @@
    "apiKeysAdd": "API-Schlüssel generieren",
    "apiKeysErrorDelete": "Fehler beim Löschen des API-Schlüssels",
    "apiKeysErrorDeleteMessage": "Fehler beim Löschen des API-Schlüssels",
-    "apiKeysQuestionRemove": "Sind Sie sicher, dass Sie den API-Schlüssel aus der Organisation entfernen möchten?",
+    "apiKeysQuestionRemove": "Sind Sie sicher, dass Sie den API-Schlüssel {selectedApiKey} aus der Organisation entfernen möchten?",
    "apiKeysMessageRemove": "Einmal entfernt, kann der API-Schlüssel nicht mehr verwendet werden.",
+    "apiKeysMessageConfirm": "Zur Bestätigung geben Sie bitte den Namen des API-Schlüssels unten ein.",
    "apiKeysDeleteConfirm": "Löschen des API-Schlüssels bestätigen",
    "apiKeysDelete": "API-Schlüssel löschen",
    "apiKeysManage": "API-Schlüssel verwalten",
@@ -302,7 +305,8 @@
    "userDeleteConfirm": "Benutzer löschen bestätigen",
    "userDeleteServer": "Benutzer vom Server löschen",
    "userMessageRemove": "Der Benutzer wird von allen Organisationen entfernt und vollständig vom Server entfernt.",
-    "userQuestionRemove": "Sind Sie sicher, dass Sie den Benutzer dauerhaft vom Server löschen möchten?",
+    "userMessageConfirm": "Um zu bestätigen, geben Sie bitte den Namen des Benutzers unten ein.",
+    "userQuestionRemove": "Sind Sie sicher, dass Sie {selectedUser} dauerhaft vom Server löschen möchten?",
    "licenseKey": "Lizenzschlüssel",
    "valid": "Gültig",
    "numberOfSites": "Anzahl der Standorte",
@@ -335,7 +339,7 @@
    "fossorialLicense": "Fossorial Gewerbelizenz & Abonnementbedingungen anzeigen",
    "licenseMessageRemove": "Dadurch werden der Lizenzschlüssel und alle zugehörigen Berechtigungen entfernt.",
    "licenseMessageConfirm": "Um zu bestätigen, geben Sie bitte den Lizenzschlüssel unten ein.",
-    "licenseQuestionRemove": "Sind Sie sicher, dass Sie den Lizenzschlüssel löschen möchten?",
+    "licenseQuestionRemove": "Sind Sie sicher, dass Sie den Lizenzschlüssel {selectedKey} löschen möchten?",
    "licenseKeyDelete": "Lizenzschlüssel löschen",
    "licenseKeyDeleteConfirm": "Lizenzschlüssel löschen bestätigen",
    "licenseTitle": "Lizenzstatus verwalten",
@@ -368,7 +372,7 @@
    "inviteRemoveErrorDescription": "Beim Entfernen der Einladung ist ein Fehler aufgetreten.",
    "inviteRemoved": "Einladung entfernt",
    "inviteRemovedDescription": "Die Einladung für {email} wurde entfernt.",
-    "inviteQuestionRemove": "Sind Sie sicher, dass Sie die Einladung entfernen möchten?",
+    "inviteQuestionRemove": "Sind Sie sicher, dass Sie die Einladung {email} entfernen möchten?",
    "inviteMessageRemove": "Sobald entfernt, wird diese Einladung nicht mehr gültig sein. Sie können den Benutzer später jederzeit erneut einladen.",
    "inviteMessageConfirm": "Bitte geben Sie zur Bestätigung die E-Mail-Adresse der Einladung unten ein.",
    "inviteQuestionRegenerate": "Sind Sie sicher, dass Sie die Einladung {email} neu generieren möchten? Dies wird die vorherige Einladung widerrufen.",
@@ -394,8 +398,9 @@
    "userErrorOrgRemoveDescription": "Beim Entfernen des Benutzers ist ein Fehler aufgetreten.",
    "userOrgRemoved": "Benutzer entfernt",
    "userOrgRemovedDescription": "Der Benutzer {email} wurde aus der Organisation entfernt.",
-    "userQuestionOrgRemove": "Sind Sie sicher, dass Sie diesen Benutzer aus der Organisation entfernen möchten?",
+    "userQuestionOrgRemove": "Sind Sie sicher, dass Sie {email} aus der Organisation entfernen möchten?",
    "userMessageOrgRemove": "Nach dem Entfernen hat dieser Benutzer keinen Zugriff mehr auf die Organisation. Sie können ihn später jederzeit wieder einladen, aber er muss die Einladung erneut annehmen.",
+    "userMessageOrgConfirm": "Geben Sie zur Bestätigung den Namen des Benutzers unten ein.",
    "userRemoveOrgConfirm": "Entfernen des Benutzers bestätigen",
    "userRemoveOrg": "Benutzer aus der Organisation entfernen",
    "users": "Benutzer",
@@ -463,10 +468,7 @@
    "createdAt": "Erstellt am",
    "proxyErrorInvalidHeader": "Ungültiger benutzerdefinierter Host-Header-Wert. Verwenden Sie das Domänennamensformat oder speichern Sie leer, um den benutzerdefinierten Host-Header zu deaktivieren.",
    "proxyErrorTls": "Ungültiger TLS-Servername. Verwenden Sie das Domänennamensformat oder speichern Sie leer, um den TLS-Servernamen zu entfernen.",
-    "proxyEnableSSL": "SSL aktivieren",
-    "proxyEnableSSLDescription": "Aktiviere SSL/TLS-Verschlüsselung für sichere HTTPS-Verbindungen zu deinen Zielen.",
-    "target": "Target",
-    "configureTarget": "Ziele konfigurieren",
+    "proxyEnableSSL": "SSL aktivieren (https)",
    "targetErrorFetch": "Fehler beim Abrufen der Ziele",
    "targetErrorFetchDescription": "Beim Abrufen der Ziele ist ein Fehler aufgetreten",
    "siteErrorFetch": "Fehler beim Abrufen der Ressource",
@@ -493,7 +495,7 @@
    "targetTlsSettings": "Sicherheitskonfiguration",
    "targetTlsSettingsDescription": "Konfiguriere SSL/TLS Einstellungen für deine Ressource",
    "targetTlsSettingsAdvanced": "Erweiterte TLS-Einstellungen",
-    "targetTlsSni": "TLS Servername",
+    "targetTlsSni": "TLS-Servername (SNI)",
    "targetTlsSniDescription": "Der zu verwendende TLS-Servername für SNI. Leer lassen, um den Standard zu verwenden.",
    "targetTlsSubmit": "Einstellungen speichern",
    "targets": "Ziel-Konfiguration",
@@ -502,21 +504,9 @@
    "targetStickySessionsDescription": "Verbindungen für die gesamte Sitzung auf demselben Backend-Ziel halten.",
    "methodSelect": "Methode auswählen",
    "targetSubmit": "Ziel hinzufügen",
-    "targetNoOne": "Diese Ressource hat keine Ziele. Fügen Sie ein Ziel hinzu, um zu konfigurieren, wo Anfragen an Ihr Backend gesendet werden sollen.",
+    "targetNoOne": "Keine Ziele. Fügen Sie ein Ziel über das Formular hinzu.",
    "targetNoOneDescription": "Das Hinzufügen von mehr als einem Ziel aktiviert den Lastausgleich.",
    "targetsSubmit": "Ziele speichern",
-    "addTarget": "Ziel hinzufügen",
-    "targetErrorInvalidIp": "Ungültige IP-Adresse",
-    "targetErrorInvalidIpDescription": "Bitte geben Sie eine gültige IP-Adresse oder einen Hostnamen ein",
-    "targetErrorInvalidPort": "Ungültiger Port",
-    "targetErrorInvalidPortDescription": "Bitte geben Sie eine gültige Portnummer ein",
-    "targetErrorNoSite": "Keine Site ausgewählt",
-    "targetErrorNoSiteDescription": "Bitte wähle eine Seite für das Ziel aus",
-    "targetCreated": "Ziel erstellt",
-    "targetCreatedDescription": "Ziel wurde erfolgreich erstellt",
-    "targetErrorCreate": "Fehler beim Erstellen des Ziels",
-    "targetErrorCreateDescription": "Beim Erstellen des Ziels ist ein Fehler aufgetreten",
-    "save": "Speichern",
    "proxyAdditional": "Zusätzliche Proxy-Einstellungen",
    "proxyAdditionalDescription": "Konfigurieren Sie, wie Ihre Ressource mit Proxy-Einstellungen umgeht",
    "proxyCustomHeader": "Benutzerdefinierter Host-Header",
@@ -725,7 +715,7 @@
    "pangolinServerAdmin": "Server-Admin - Pangolin",
    "licenseTierProfessional": "Professional Lizenz",
    "licenseTierEnterprise": "Enterprise Lizenz",
-    "licenseTierPersonal": "Persönliche Lizenz",
+    "licenseTierCommercial": "Gewerbliche Lizenz",
    "licensed": "Lizenziert",
    "yes": "Ja",
    "no": "Nein",
@@ -737,7 +727,7 @@
    "idpManageDescription": "Identitätsanbieter im System anzeigen und verwalten",
    "idpDeletedDescription": "Identitätsanbieter erfolgreich gelöscht",
    "idpOidc": "OAuth2/OIDC",
-    "idpQuestionRemove": "Sind Sie sicher, dass Sie den Identitätsanbieter dauerhaft löschen möchten?",
+    "idpQuestionRemove": "Sind Sie sicher, dass Sie den Identitätsanbieter {name} dauerhaft löschen möchten?",
    "idpMessageRemove": "Dies wird den Identitätsanbieter und alle zugehörigen Konfigurationen entfernen. Benutzer, die sich über diesen Anbieter authentifizieren, können sich nicht mehr anmelden.",
    "idpMessageConfirm": "Bitte geben Sie zur Bestätigung den Namen des Identitätsanbieters unten ein.",
    "idpConfirmDelete": "Löschen des Identitätsanbieters bestätigen",
@@ -760,7 +750,7 @@
    "idpDisplayName": "Ein Anzeigename für diesen Identitätsanbieter",
    "idpAutoProvisionUsers": "Automatische Benutzerbereitstellung",
    "idpAutoProvisionUsersDescription": "Wenn aktiviert, werden Benutzer beim ersten Login automatisch im System erstellt, mit der Möglichkeit, Benutzer Rollen und Organisationen zuzuordnen.",
-    "licenseBadge": "EE",
+    "licenseBadge": "Profi",
    "idpType": "Anbietertyp",
    "idpTypeDescription": "Wählen Sie den Typ des Identitätsanbieters, den Sie konfigurieren möchten",
    "idpOidcConfigure": "OAuth2/OIDC Konfiguration",
@@ -1094,6 +1084,7 @@
    "navbar": "Navigationsmenü",
    "navbarDescription": "Hauptnavigationsmenü für die Anwendung",
    "navbarDocsLink": "Dokumentation",
+    "commercialEdition": "Kommerzielle Edition",
    "otpErrorEnable": "2FA konnte nicht aktiviert werden",
    "otpErrorEnableDescription": "Beim Aktivieren der 2FA ist ein Fehler aufgetreten",
    "otpSetupCheckCode": "Bitte geben Sie einen 6-stelligen Code ein",
@@ -1149,7 +1140,7 @@
    "sidebarAllUsers": "Alle Benutzer",
    "sidebarIdentityProviders": "Identitätsanbieter",
    "sidebarLicense": "Lizenz",
-    "sidebarClients": "Kunden",
+    "sidebarClients": "Kunden (Beta)",
    "sidebarDomains": "Domänen",
    "enableDockerSocket": "Docker Blaupause aktivieren",
    "enableDockerSocketDescription": "Aktiviere Docker-Socket-Label-Scraping für Blaupausenbeschriftungen. Der Socket-Pfad muss neu angegeben werden.",
@@ -1206,8 +1197,9 @@
    "domainCreate": "Domain erstellen",
    "domainCreatedDescription": "Domain erfolgreich erstellt",
    "domainDeletedDescription": "Domain erfolgreich gelöscht",
-    "domainQuestionRemove": "Sind Sie sicher, dass Sie die Domain von Ihrem Konto entfernen möchten?",
+    "domainQuestionRemove": "Möchten Sie die Domain {domain} wirklich aus Ihrem Konto entfernen?",
    "domainMessageRemove": "Nach dem Entfernen wird die Domain nicht mehr mit Ihrem Konto verknüpft.",
+    "domainMessageConfirm": "Um zu bestätigen, geben Sie bitte den Domainnamen unten ein.",
    "domainConfirmDelete": "Domain-Löschung bestätigen",
    "domainDelete": "Domain löschen",
    "domain": "Domäne",
@@ -1274,7 +1266,7 @@
    "billingFreeTier": "Kostenlose Stufe",
    "billingWarningOverLimit": "Warnung: Sie haben ein oder mehrere Nutzungslimits überschritten. Ihre Webseiten werden nicht verbunden, bis Sie Ihr Abonnement ändern oder Ihren Verbrauch anpassen.",
    "billingUsageLimitsOverview": "Übersicht über Nutzungsgrenzen",
-    "billingMonitorUsage": "Überwachen Sie Ihren Verbrauch im Vergleich zu konfigurierten Grenzwerten. Wenn Sie eine Erhöhung der Limits benötigen, kontaktieren Sie uns bitte support@pangolin.net.",
+    "billingMonitorUsage": "Überwachen Sie Ihren Verbrauch im Vergleich zu konfigurierten Grenzwerten. Wenn Sie eine Erhöhung der Limits benötigen, kontaktieren Sie uns bitte support@fossorial.io.",
    "billingDataUsage": "Datenverbrauch",
    "billingOnlineTime": "Online-Zeit der Seite",
    "billingUsers": "Aktive Benutzer",
@@ -1341,6 +1333,7 @@
    "twoFactorRequired": "Zur Registrierung eines Sicherheitsschlüssels ist eine Zwei-Faktor-Authentifizierung erforderlich.",
    "twoFactor": "Zwei-Faktor-Authentifizierung",
    "adminEnabled2FaOnYourAccount": "Ihr Administrator hat die Zwei-Faktor-Authentifizierung für {email} aktiviert. Bitte schließen Sie den Einrichtungsprozess ab, um fortzufahren.",
+    "continueToApplication": "Weiter zur Anwendung",
    "securityKeyAdd": "Sicherheitsschlüssel hinzufügen",
    "securityKeyRegisterTitle": "Neuen Sicherheitsschlüssel registrieren",
    "securityKeyRegisterDescription": "Verbinden Sie Ihren Sicherheitsschlüssel und geben Sie einen Namen ein, um ihn zu identifizieren",
@@ -1418,7 +1411,6 @@
    "externalProxyEnabled": "Externer Proxy aktiviert",
    "addNewTarget": "Neues Ziel hinzufügen",
    "targetsList": "Ziel-Liste",
-    "advancedMode": "Erweiterter Modus",
    "targetErrorDuplicateTargetFound": "Doppeltes Ziel gefunden",
    "healthCheckHealthy": "Gesund",
    "healthCheckUnhealthy": "Ungesund",
@@ -1551,17 +1543,18 @@
    "autoLoginError": "Fehler bei der automatischen Anmeldung",
    "autoLoginErrorNoRedirectUrl": "Keine Weiterleitungs-URL vom Identitätsanbieter erhalten.",
    "autoLoginErrorGeneratingUrl": "Fehler beim Generieren der Authentifizierungs-URL.",
-    "remoteExitNodeManageRemoteExitNodes": "Entfernte Knoten",
-    "remoteExitNodeDescription": "Self-Hoster einen oder mehrere entfernte Knoten, um Ihre Netzwerkverbindung zu erweitern und die Abhängigkeit von der Cloud zu verringern",
+    "remoteExitNodeManageRemoteExitNodes": "Selbst-Hosted verwalten",
+    "remoteExitNodeDescription": "Knoten verwalten, um die Netzwerkverbindung zu erweitern",
    "remoteExitNodes": "Knoten",
    "searchRemoteExitNodes": "Knoten suchen...",
    "remoteExitNodeAdd": "Knoten hinzufügen",
    "remoteExitNodeErrorDelete": "Fehler beim Löschen des Knotens",
-    "remoteExitNodeQuestionRemove": "Sind Sie sicher, dass Sie den Knoten aus der Organisation entfernen möchten?",
+    "remoteExitNodeQuestionRemove": "Sind Sie sicher, dass Sie den Knoten {selectedNode} aus der Organisation entfernen möchten?",
    "remoteExitNodeMessageRemove": "Einmal entfernt, wird der Knoten nicht mehr zugänglich sein.",
+    "remoteExitNodeMessageConfirm": "Um zu bestätigen, geben Sie bitte den Namen des Knotens unten ein.",
    "remoteExitNodeConfirmDelete": "Löschknoten bestätigen",
    "remoteExitNodeDelete": "Knoten löschen",
-    "sidebarRemoteExitNodes": "Entfernte Knoten",
+    "sidebarRemoteExitNodes": "Knoten",
    "remoteExitNodeCreate": {
        "title": "Knoten erstellen",
        "description": "Erstellen Sie einen neuen Knoten, um Ihre Netzwerkverbindung zu erweitern",
@@ -1730,166 +1723,5 @@
    "authPageUpdated": "Auth-Seite erfolgreich aktualisiert",
    "healthCheckNotAvailable": "Lokal",
    "rewritePath": "Pfad neu schreiben",
-    "rewritePathDescription": "Optional den Pfad umschreiben, bevor er an das Ziel weitergeleitet wird.",
-    "continueToApplication": "Weiter zur Anwendung",
-    "checkingInvite": "Einladung wird überprüft",
-    "setResourceHeaderAuth": "setResourceHeaderAuth",
-    "resourceHeaderAuthRemove": "Header-Auth entfernen",
-    "resourceHeaderAuthRemoveDescription": "Header-Authentifizierung erfolgreich entfernt.",
-    "resourceErrorHeaderAuthRemove": "Fehler beim Entfernen der Header-Authentifizierung",
-    "resourceErrorHeaderAuthRemoveDescription": "Die Headerauthentifizierung für die Ressource konnte nicht entfernt werden.",
-    "resourceHeaderAuthProtectionEnabled": "Header-Authentifizierung aktiviert",
-    "resourceHeaderAuthProtectionDisabled": "Header-Authentifizierung deaktiviert",
-    "headerAuthRemove": "Header-Auth entfernen",
-    "headerAuthAdd": "Header-Auth hinzufügen",
-    "resourceErrorHeaderAuthSetup": "Fehler beim Setzen der Header-Authentifizierung",
-    "resourceErrorHeaderAuthSetupDescription": "Konnte Header-Authentifizierung für die Ressource nicht festlegen.",
-    "resourceHeaderAuthSetup": "Header-Authentifizierung erfolgreich festgelegt",
-    "resourceHeaderAuthSetupDescription": "Header-Authentifizierung wurde erfolgreich festgelegt.",
-    "resourceHeaderAuthSetupTitle": "Header-Authentifizierung festlegen",
-    "resourceHeaderAuthSetupTitleDescription": "Legen Sie die grundlegenden Authentifizierungsdaten (Benutzername und Passwort) fest, um diese Ressource mit HTTP-Header-Authentifizierung zu schützen. Greifen Sie auf sie mit dem Format https://username:password@resource.example.com",
-    "resourceHeaderAuthSubmit": "Header-Authentifizierung festlegen",
-    "actionSetResourceHeaderAuth": "Header-Authentifizierung festlegen",
-    "enterpriseEdition": "Enterprise Edition",
-    "unlicensed": "Nicht lizenziert",
-    "beta": "Beta",
-    "manageClients": "Kunden verwalten",
-    "manageClientsDescription": "Clients sind Geräte, die sich mit Ihren Websites verbinden können",
-    "licenseTableValidUntil": "Gültig bis",
-    "saasLicenseKeysSettingsTitle": "Enterprise-Lizenzen",
-    "saasLicenseKeysSettingsDescription": "Erstelle und verwalte Enterprise-Lizenzschlüssel für selbst gehostete Pangolin-Instanzen",
-    "sidebarEnterpriseLicenses": "Lizenzen",
-    "generateLicenseKey": "Lizenzschlüssel generieren",
-    "generateLicenseKeyForm": {
-        "validation": {
-            "emailRequired": "Bitte geben Sie eine gültige E-Mail-Adresse ein",
-            "useCaseTypeRequired": "Bitte wählen Sie einen Anwendungsfall",
-            "firstNameRequired": "Vorname ist erforderlich",
-            "lastNameRequired": "Nachname ist erforderlich",
-            "primaryUseRequired": "Bitte beschreiben Sie Ihre primäre Verwendung",
-            "jobTitleRequiredBusiness": "Job-Titel ist für die geschäftliche Nutzung erforderlich",
-            "industryRequiredBusiness": "Industrie ist für die geschäftliche Nutzung erforderlich",
-            "stateProvinceRegionRequired": "Bundesland/Provinz/Region ist erforderlich",
-            "postalZipCodeRequired": "Postleitzahl ist erforderlich",
-            "companyNameRequiredBusiness": "Firmenname ist erforderlich für den geschäftlichen Gebrauch",
-            "countryOfResidenceRequiredBusiness": "Land des Wohnsitzes ist für die geschäftliche Nutzung erforderlich",
-            "countryRequiredPersonal": "Land ist für den persönlichen Gebrauch erforderlich",
-            "agreeToTermsRequired": "Sie müssen den Bedingungen zustimmen",
-            "complianceConfirmationRequired": "Sie müssen die Einhaltung der Fossorial Commercial License bestätigen"
-        },
-        "useCaseOptions": {
-            "personal": {
-                "title": "Persönliche Nutzung",
-                "description": "Für den individuellen, nicht-kommerziellen Gebrauch wie Lernen, persönliche Projekte oder Experimente."
-            },
-            "business": {
-                "title": "Business-Nutzung",
-                "description": "Für den Einsatz innerhalb von Organisationen, Unternehmen oder kommerziellen oder einkommensfördernden Aktivitäten."
-            }
-        },
-        "steps": {
-            "emailLicenseType": {
-                "title": "E-Mail & Lizenztyp",
-                "description": "Geben Sie Ihre E-Mail ein und wählen Sie Ihren Lizenztyp"
-            },
-            "personalInformation": {
-                "title": "Persönliche Informationen",
-                "description": "Erzählen Sie uns über sich selbst"
-            },
-            "contactInformation": {
-                "title": "Kontaktinformationen",
-                "description": "Ihre Kontaktdaten"
-            },
-            "termsGenerate": {
-                "title": "Begriffe & Generieren",
-                "description": "Bedingungen überprüfen und akzeptieren, um Ihre Lizenz zu generieren"
-            }
-        },
-        "alerts": {
-            "commercialUseDisclosure": {
-                "title": "Verwendungsanzeige",
-                "description": "Wählen Sie die Lizenz-Ebene, die Ihre beabsichtigte Nutzung genau widerspiegelt. Die Persönliche Lizenz erlaubt die freie Nutzung der Software für individuelle, nicht-kommerzielle oder kleine kommerzielle Aktivitäten mit jährlichen Brutto-Einnahmen von 100.000 USD. Über diese Grenzen hinausgehende Verwendungszwecke – einschließlich der Verwendung innerhalb eines Unternehmens, einer Organisation, oder eine andere umsatzgenerierende Umgebung — erfordert eine gültige Enterprise-Lizenz und die Zahlung der Lizenzgebühr. Alle Benutzer, ob Personal oder Enterprise, müssen die Fossorial Commercial License Bedingungen einhalten."
-            },
-            "trialPeriodInformation": {
-                "title": "Testperiode Information",
-                "description": "Dieser Lizenzschlüssel ermöglicht Enterprise-Funktionen für einen 7-tägigen Bewertungszeitraum. Der fortgesetzte Zugriff auf kostenpflichtige Funktionen über den Bewertungszeitraum hinaus erfordert die Aktivierung unter einer gültigen Personen- oder Enterprise-Lizenz. Für die Enterprise-Lizenzierung wenden Sie sich bitte an sales@pangolin.net."
-            }
-        },
-        "form": {
-            "useCaseQuestion": "Benutzen Sie Pangolin für den persönlichen oder geschäftlichen Gebrauch?",
-            "firstName": "Vorname",
-            "lastName": "Nachname",
-            "jobTitle": "Job Titel",
-            "primaryUseQuestion": "Wofür planen Sie in erster Linie Pangolin zu benutzen?",
-            "industryQuestion": "Was ist Ihre Branche?",
-            "prospectiveUsersQuestion": "Wie viele Interessenten erwarten Sie?",
-            "prospectiveSitesQuestion": "Wie viele potentielle Standorte (Tunnel) erwarten Sie?",
-            "companyName": "Firmenname",
-            "countryOfResidence": "Land des Wohnsitzes",
-            "stateProvinceRegion": "Bundesland / Provinz / Region",
-            "postalZipCode": "Postleitzahl",
-            "companyWebsite": "Firmen-Webseite",
-            "companyPhoneNumber": "Firmennummer",
-            "country": "Land",
-            "phoneNumberOptional": "Telefonnummer (optional)",
-            "complianceConfirmation": "Ich bestätige, dass die von mir übermittelten Informationen korrekt sind und dass ich im Einklang mit der Fossorial Commercial License bin. Die Meldung ungenauer Informationen oder die falsche Identifizierung der Nutzung des Produkts stellt eine Verletzung der Lizenz dar und kann dazu führen, dass Ihr Schlüssel widerrufen wird."
-        },
-        "buttons": {
-            "close": "Schließen",
-            "previous": "Vorherige",
-            "next": "Nächste",
-            "generateLicenseKey": "Lizenzschlüssel generieren"
-        },
-        "toasts": {
-            "success": {
-                "title": "Lizenzschlüssel erfolgreich erstellt",
-                "description": "Ihr Lizenzschlüssel wurde generiert und kann verwendet werden."
-            },
-            "error": {
-                "title": "Fehler beim Generieren des Lizenzschlüssels",
-                "description": "Beim Generieren des Lizenzschlüssels ist ein Fehler aufgetreten."
-            }
-        }
-    },
-    "priority": "Priorität",
-    "priorityDescription": "Die Routen mit höherer Priorität werden zuerst ausgewertet. Priorität = 100 bedeutet automatische Bestellung (Systementscheidung). Verwenden Sie eine andere Nummer, um manuelle Priorität zu erzwingen.",
-    "instanceName": "Instanzname",
-    "pathMatchModalTitle": "Pfad anpassen konfigurieren",
-    "pathMatchModalDescription": "Legen Sie fest, wie eingehende Anfragen basierend auf ihrem Pfad übereinstimmen sollen.",
-    "pathMatchType": "Übereinstimmungstyp",
-    "pathMatchPrefix": "Präfix",
-    "pathMatchExact": "Exakt",
-    "pathMatchRegex": "Regex",
-    "pathMatchValue": "Pfadwert",
-    "clear": "Leeren",
-    "saveChanges": "Änderungen speichern",
-    "pathMatchRegexPlaceholder": "^/api/.*",
-    "pathMatchDefaultPlaceholder": "/Pfad",
-    "pathMatchPrefixHelp": "Beispiel: /api trifft /api, /api/users etc.",
-    "pathMatchExactHelp": "Beispiel: /api passt nur auf /api",
-    "pathMatchRegexHelp": "Beispiel: ^/api/.* entspricht /api/anything",
-    "pathRewriteModalTitle": "Pfad Rewriting konfigurieren",
-    "pathRewriteModalDescription": "Transformieren Sie den übereinstimmenden Pfad bevor Sie zum Ziel weiterleiten.",
-    "pathRewriteType": "Rewrite Typ",
-    "pathRewritePrefixOption": "Präfix - Präfix ersetzen",
-    "pathRewriteExactOption": "Exakt - Gesamten Pfad ersetzen",
-    "pathRewriteRegexOption": "Regex - Musterersetzung",
-    "pathRewriteStripPrefixOption": "Präfix entfernen - Präfix entfernen",
-    "pathRewriteValue": "Wert umschreiben",
-    "pathRewriteRegexPlaceholder": "/neu/$1",
-    "pathRewriteDefaultPlaceholder": "/new-path",
-    "pathRewritePrefixHelp": "Ersetze das passende Präfix mit diesem Wert",
-    "pathRewriteExactHelp": "Ersetze den gesamten Pfad mit diesem Wert, wenn der Pfad genau zutrifft",
-    "pathRewriteRegexHelp": "Capture-Gruppen wie $1, $2 zum Ersetzen verwenden",
-    "pathRewriteStripPrefixHelp": "Leer lassen, um Präfix zu entfernen oder neues Präfix anzugeben",
-    "pathRewritePrefix": "Präfix",
-    "pathRewriteExact": "Exakt",
-    "pathRewriteRegex": "Regex",
-    "pathRewriteStrip": "Streifen",
-    "pathRewriteStripLabel": "streifen",
-    "sidebarEnableEnterpriseLicense": "Enterprise-Lizenz aktivieren",
-    "cannotbeUndone": "Dies kann nicht rückgängig gemacht werden.",
-    "toConfirm": "bestätigen",
-    "deleteClientQuestion": "Sind Sie sicher, dass Sie den Client von der Website und der Organisation entfernen möchten?",
-    "clientMessageRemove": "Nach dem Entfernen kann sich der Client nicht mehr mit der Website verbinden."
+    "rewritePathDescription": "Optional den Pfad umschreiben, bevor er an das Ziel weitergeleitet wird."
 }
--- a/messages/en-US.json
+++ b/messages/en-US.json
@@ -1,3 +1,4 @@
+
 {
    "setupCreate": "Create your organization, site, and resources",
    "setupNewOrg": "New Organization",
@@ -47,8 +48,9 @@
    "edit": "Edit",
    "siteConfirmDelete": "Confirm Delete Site",
    "siteDelete": "Delete Site",
-    "siteMessageRemove": "Once removed the site will no longer be accessible. All targets associated with the site will also be removed.",
-    "siteQuestionRemove": "Are you sure you want to remove the site from the organization?",
+    "siteMessageRemove": "Once removed, the site will no longer be accessible. All resources and targets associated with the site will also be removed.",
+    "siteMessageConfirm": "To confirm, please type the name of the site below.",
+    "siteQuestionRemove": "Are you sure you want to remove the site {selectedSite} from the organization?",
    "siteManageSites": "Manage Sites",
    "siteDescription": "Allow connectivity to your network through secure tunnels",
    "siteCreate": "Create Site",
@@ -95,7 +97,7 @@
    "siteWgDescription": "Use any WireGuard client to establish a tunnel. Manual NAT setup required.",
    "siteWgDescriptionSaas": "Use any WireGuard client to establish a tunnel. Manual NAT setup required.",
    "siteLocalDescription": "Local resources only. No tunneling.",
-    "siteLocalDescriptionSaas": "Local resources only. No tunneling. Only available on remote nodes.",
+    "siteLocalDescriptionSaas": "Local resources only. No tunneling.",
    "siteSeeAll": "See All Sites",
    "siteTunnelDescription": "Determine how you want to connect to your site",
    "siteNewtCredentials": "Newt Credentials",
@@ -153,7 +155,8 @@
    "protected": "Protected",
    "notProtected": "Not Protected",
    "resourceMessageRemove": "Once removed, the resource will no longer be accessible. All targets associated with the resource will also be removed.",
-    "resourceQuestionRemove": "Are you sure you want to remove the resource from the organization?",
+    "resourceMessageConfirm": "To confirm, please type the name of the resource below.",
+    "resourceQuestionRemove": "Are you sure you want to remove the resource {selectedResource} from the organization?",
    "resourceHTTP": "HTTPS Resource",
    "resourceHTTPDescription": "Proxy requests to your app over HTTPS using a subdomain or base domain.",
    "resourceRaw": "Raw TCP/UDP Resource",
@@ -218,7 +221,7 @@
    "orgDeleteConfirm": "Confirm Delete Organization",
    "orgMessageRemove": "This action is irreversible and will delete all associated data.",
    "orgMessageConfirm": "To confirm, please type the name of the organization below.",
-    "orgQuestionRemove": "Are you sure you want to remove the organization?",
+    "orgQuestionRemove": "Are you sure you want to remove the organization {selectedOrg}?",
    "orgUpdated": "Organization updated",
    "orgUpdatedDescription": "The organization has been updated.",
    "orgErrorUpdate": "Failed to update organization",
@@ -285,8 +288,9 @@
    "apiKeysAdd": "Generate API Key",
    "apiKeysErrorDelete": "Error deleting API key",
    "apiKeysErrorDeleteMessage": "Error deleting API key",
-    "apiKeysQuestionRemove": "Are you sure you want to remove the API key from the organization?",
+    "apiKeysQuestionRemove": "Are you sure you want to remove the API key {selectedApiKey} from the organization?",
    "apiKeysMessageRemove": "Once removed, the API key will no longer be able to be used.",
+    "apiKeysMessageConfirm": "To confirm, please type the name of the API key below.",
    "apiKeysDeleteConfirm": "Confirm Delete API Key",
    "apiKeysDelete": "Delete API Key",
    "apiKeysManage": "Manage API Keys",
@@ -302,7 +306,8 @@
    "userDeleteConfirm": "Confirm Delete User",
    "userDeleteServer": "Delete User from Server",
    "userMessageRemove": "The user will be removed from all organizations and be completely removed from the server.",
-    "userQuestionRemove": "Are you sure you want to permanently delete user from the server?",
+    "userMessageConfirm": "To confirm, please type the name of the user below.",
+    "userQuestionRemove": "Are you sure you want to permanently delete {selectedUser} from the server?",
    "licenseKey": "License Key",
    "valid": "Valid",
    "numberOfSites": "Number of Sites",
@@ -335,7 +340,7 @@
    "fossorialLicense": "View Fossorial Commercial License & Subscription Terms",
    "licenseMessageRemove": "This will remove the license key and all associated permissions granted by it.",
    "licenseMessageConfirm": "To confirm, please type the license key below.",
-    "licenseQuestionRemove": "Are you sure you want to delete the license key ?",
+    "licenseQuestionRemove": "Are you sure you want to delete the license key {selectedKey} ?",
    "licenseKeyDelete": "Delete License Key",
    "licenseKeyDeleteConfirm": "Confirm Delete License Key",
    "licenseTitle": "Manage License Status",
@@ -368,7 +373,7 @@
    "inviteRemoveErrorDescription": "An error occurred while removing the invitation.",
    "inviteRemoved": "Invitation removed",
    "inviteRemovedDescription": "The invitation for {email} has been removed.",
-    "inviteQuestionRemove": "Are you sure you want to remove the invitation?",
+    "inviteQuestionRemove": "Are you sure you want to remove the invitation {email}?",
    "inviteMessageRemove": "Once removed, this invitation will no longer be valid. You can always re-invite the user later.",
    "inviteMessageConfirm": "To confirm, please type the email address of the invitation below.",
    "inviteQuestionRegenerate": "Are you sure you want to regenerate the invitation for {email}? This will revoke the previous invitation.",
@@ -394,8 +399,9 @@
    "userErrorOrgRemoveDescription": "An error occurred while removing the user.",
    "userOrgRemoved": "User removed",
    "userOrgRemovedDescription": "The user {email} has been removed from the organization.",
-    "userQuestionOrgRemove": "Are you sure you want to remove this user from the organization?",
+    "userQuestionOrgRemove": "Are you sure you want to remove {email} from the organization?",
    "userMessageOrgRemove": "Once removed, this user will no longer have access to the organization. You can always re-invite them later, but they will need to accept the invitation again.",
+    "userMessageOrgConfirm": "To confirm, please type the name of the of the user below.",
    "userRemoveOrgConfirm": "Confirm Remove User",
    "userRemoveOrg": "Remove User from Organization",
    "users": "Users",
@@ -463,10 +469,7 @@
    "createdAt": "Created At",
    "proxyErrorInvalidHeader": "Invalid custom Host Header value. Use domain name format, or save empty to unset custom Host Header.",
    "proxyErrorTls": "Invalid TLS Server Name. Use domain name format, or save empty to remove the TLS Server Name.",
-    "proxyEnableSSL": "Enable SSL",
-    "proxyEnableSSLDescription": "Enable SSL/TLS encryption for secure HTTPS connections to your targets.",
-    "target": "Target",
-    "configureTarget": "Configure Targets",
+    "proxyEnableSSL": "Enable SSL (https)",
    "targetErrorFetch": "Failed to fetch targets",
    "targetErrorFetchDescription": "An error occurred while fetching targets",
    "siteErrorFetch": "Failed to fetch resource",
@@ -493,7 +496,7 @@
    "targetTlsSettings": "Secure Connection Configuration",
    "targetTlsSettingsDescription": "Configure SSL/TLS settings for your resource",
    "targetTlsSettingsAdvanced": "Advanced TLS Settings",
-    "targetTlsSni": "TLS Server Name",
+    "targetTlsSni": "TLS Server Name (SNI)",
    "targetTlsSniDescription": "The TLS Server Name to use for SNI. Leave empty to use the default.",
    "targetTlsSubmit": "Save Settings",
    "targets": "Targets Configuration",
@@ -502,21 +505,9 @@
    "targetStickySessionsDescription": "Keep connections on the same backend target for their entire session.",
    "methodSelect": "Select method",
    "targetSubmit": "Add Target",
-    "targetNoOne": "This resource doesn't have any targets. Add a target to configure where to send requests to your backend.",
+    "targetNoOne": "No targets. Add a target using the form.",
    "targetNoOneDescription": "Adding more than one target above will enable load balancing.",
    "targetsSubmit": "Save Targets",
-    "addTarget": "Add Target",
-    "targetErrorInvalidIp": "Invalid IP address",
-    "targetErrorInvalidIpDescription": "Please enter a valid IP address or hostname",
-    "targetErrorInvalidPort": "Invalid port",
-    "targetErrorInvalidPortDescription": "Please enter a valid port number",
-    "targetErrorNoSite": "No site selected",
-    "targetErrorNoSiteDescription": "Please select a site for the target",
-    "targetCreated": "Target created",
-    "targetCreatedDescription": "Target has been created successfully",
-    "targetErrorCreate": "Failed to create target",
-    "targetErrorCreateDescription": "An error occurred while creating the target",
-    "save": "Save",
    "proxyAdditional": "Additional Proxy Settings",
    "proxyAdditionalDescription": "Configure how your resource handles proxy settings",
    "proxyCustomHeader": "Custom Host Header",
@@ -725,7 +716,7 @@
    "pangolinServerAdmin": "Server Admin - Pangolin",
    "licenseTierProfessional": "Professional License",
    "licenseTierEnterprise": "Enterprise License",
-    "licenseTierPersonal": "Personal License",
+    "licenseTierCommercial": "Commercial License",
    "licensed": "Licensed",
    "yes": "Yes",
    "no": "No",
@@ -737,7 +728,7 @@
    "idpManageDescription": "View and manage identity providers in the system",
    "idpDeletedDescription": "Identity provider deleted successfully",
    "idpOidc": "OAuth2/OIDC",
-    "idpQuestionRemove": "Are you sure you want to permanently delete the identity provider?",
+    "idpQuestionRemove": "Are you sure you want to permanently delete the identity provider {name}?",
    "idpMessageRemove": "This will remove the identity provider and all associated configurations. Users who authenticate through this provider will no longer be able to log in.",
    "idpMessageConfirm": "To confirm, please type the name of the identity provider below.",
    "idpConfirmDelete": "Confirm Delete Identity Provider",
@@ -760,7 +751,7 @@
    "idpDisplayName": "A display name for this identity provider",
    "idpAutoProvisionUsers": "Auto Provision Users",
    "idpAutoProvisionUsersDescription": "When enabled, users will be automatically created in the system upon first login with the ability to map users to roles and organizations.",
-    "licenseBadge": "EE",
+    "licenseBadge": "Professional",
    "idpType": "Provider Type",
    "idpTypeDescription": "Select the type of identity provider you want to configure",
    "idpOidcConfigure": "OAuth2/OIDC Configuration",
@@ -1094,6 +1085,7 @@
    "navbar": "Navigation Menu",
    "navbarDescription": "Main navigation menu for the application",
    "navbarDocsLink": "Documentation",
+    "commercialEdition": "Commercial Edition",
    "otpErrorEnable": "Unable to enable 2FA",
    "otpErrorEnableDescription": "An error occurred while enabling 2FA",
    "otpSetupCheckCode": "Please enter a 6-digit code",
@@ -1149,7 +1141,7 @@
    "sidebarAllUsers": "All Users",
    "sidebarIdentityProviders": "Identity Providers",
    "sidebarLicense": "License",
-    "sidebarClients": "Clients",
+    "sidebarClients": "Clients (Beta)",
    "sidebarDomains": "Domains",
    "enableDockerSocket": "Enable Docker Blueprint",
    "enableDockerSocketDescription": "Enable Docker Socket label scraping for blueprint labels. Socket path must be provided to Newt.",
@@ -1206,8 +1198,9 @@
    "domainCreate": "Create Domain",
    "domainCreatedDescription": "Domain created successfully",
    "domainDeletedDescription": "Domain deleted successfully",
-    "domainQuestionRemove": "Are you sure you want to remove the domain from your account?",
+    "domainQuestionRemove": "Are you sure you want to remove the domain {domain} from your account?",
    "domainMessageRemove": "Once removed, the domain will no longer be associated with your account.",
+    "domainMessageConfirm": "To confirm, please type the domain name below.",
    "domainConfirmDelete": "Confirm Delete Domain",
    "domainDelete": "Delete Domain",
    "domain": "Domain",
@@ -1274,7 +1267,7 @@
    "billingFreeTier": "Free Tier",
    "billingWarningOverLimit": "Warning: You have exceeded one or more usage limits. Your sites will not connect until you modify your subscription or adjust your usage.",
    "billingUsageLimitsOverview": "Usage Limits Overview",
-    "billingMonitorUsage": "Monitor your usage against configured limits. If you need limits increased please contact us support@pangolin.net.",
+    "billingMonitorUsage": "Monitor your usage against configured limits. If you need limits increased please contact us support@fossorial.io.",
    "billingDataUsage": "Data Usage",
    "billingOnlineTime": "Site Online Time",
    "billingUsers": "Active Users",
@@ -1341,6 +1334,7 @@
    "twoFactorRequired": "Two-factor authentication is required to register a security key.",
    "twoFactor": "Two-Factor Authentication",
    "adminEnabled2FaOnYourAccount": "Your administrator has enabled two-factor authentication for {email}. Please complete the setup process to continue.",
+    "continueToApplication": "Continue to Application",
    "securityKeyAdd": "Add Security Key",
    "securityKeyRegisterTitle": "Register New Security Key",
    "securityKeyRegisterDescription": "Connect your security key and enter a name to identify it",
@@ -1418,7 +1412,6 @@
    "externalProxyEnabled": "External Proxy Enabled",
    "addNewTarget": "Add New Target",
    "targetsList": "Targets List",
-    "advancedMode": "Advanced Mode",
    "targetErrorDuplicateTargetFound": "Duplicate target found",
    "healthCheckHealthy": "Healthy",
    "healthCheckUnhealthy": "Unhealthy",
@@ -1551,17 +1544,18 @@
    "autoLoginError": "Auto Login Error",
    "autoLoginErrorNoRedirectUrl": "No redirect URL received from the identity provider.",
    "autoLoginErrorGeneratingUrl": "Failed to generate authentication URL.",
-    "remoteExitNodeManageRemoteExitNodes": "Remote Nodes",
-    "remoteExitNodeDescription": "Self-host one or more remote nodes to extend your network connectivity and reduce reliance on the cloud",
+    "remoteExitNodeManageRemoteExitNodes": "Manage Self-Hosted",
+    "remoteExitNodeDescription": "Manage nodes to extend your network connectivity",
    "remoteExitNodes": "Nodes",
    "searchRemoteExitNodes": "Search nodes...",
    "remoteExitNodeAdd": "Add Node",
    "remoteExitNodeErrorDelete": "Error deleting node",
-    "remoteExitNodeQuestionRemove": "Are you sure you want to remove the node from the organization?",
+    "remoteExitNodeQuestionRemove": "Are you sure you want to remove the node {selectedNode} from the organization?",
    "remoteExitNodeMessageRemove": "Once removed, the node will no longer be accessible.",
+    "remoteExitNodeMessageConfirm": "To confirm, please type the name of the node below.",
    "remoteExitNodeConfirmDelete": "Confirm Delete Node",
    "remoteExitNodeDelete": "Delete Node",
-    "sidebarRemoteExitNodes": "Remote Nodes",
+    "sidebarRemoteExitNodes": "Nodes",
    "remoteExitNodeCreate": {
        "title": "Create Node",
        "description": "Create a new node to extend your network connectivity",
@@ -1732,164 +1726,5 @@
    "rewritePath": "Rewrite Path",
    "rewritePathDescription": "Optionally rewrite the path before forwarding to the target.",
    "continueToApplication": "Continue to application",
-    "checkingInvite": "Checking Invite",
-    "setResourceHeaderAuth": "setResourceHeaderAuth",
-    "resourceHeaderAuthRemove": "Remove Header Auth",
-    "resourceHeaderAuthRemoveDescription": "Header authentication removed successfully.",
-    "resourceErrorHeaderAuthRemove": "Failed to remove Header Authentication",
-    "resourceErrorHeaderAuthRemoveDescription": "Could not remove header authentication for the resource.",
-    "resourceHeaderAuthProtectionEnabled": "Header Authentication Enabled",
-    "resourceHeaderAuthProtectionDisabled": "Header Authentication Disabled",
-    "headerAuthRemove": "Remove Header Auth",
-    "headerAuthAdd": "Add Header Auth",
-    "resourceErrorHeaderAuthSetup": "Failed to set Header Authentication",
-    "resourceErrorHeaderAuthSetupDescription": "Could not set header authentication for the resource.",
-    "resourceHeaderAuthSetup": "Header Authentication set successfully",
-    "resourceHeaderAuthSetupDescription": "Header authentication has been successfully set.",
-    "resourceHeaderAuthSetupTitle": "Set Header Authentication",
-    "resourceHeaderAuthSetupTitleDescription": "Set the basic auth credentials (username and password) to protect this resource with HTTP Header Authentication. Access it using the format https://username:password@resource.example.com",
-    "resourceHeaderAuthSubmit": "Set Header Authentication",
-    "actionSetResourceHeaderAuth": "Set Header Authentication",
-    "enterpriseEdition": "Enterprise Edition",
-    "unlicensed": "Unlicensed",
-    "beta": "Beta",
-    "manageClients": "Manage Clients",
-    "manageClientsDescription": "Clients are devices that can connect to your sites",
-    "licenseTableValidUntil": "Valid Until",
-    "saasLicenseKeysSettingsTitle": "Enterprise Licenses",
-    "saasLicenseKeysSettingsDescription": "Generate and manage Enterprise license keys for self-hosted Pangolin instances",
-    "sidebarEnterpriseLicenses": "Licenses",
-    "generateLicenseKey": "Generate License Key",
-    "generateLicenseKeyForm": {
-        "validation": {
-            "emailRequired": "Please enter a valid email address",
-            "useCaseTypeRequired": "Please select a use case type",
-            "firstNameRequired": "First name is required",
-            "lastNameRequired": "Last name is required",
-            "primaryUseRequired": "Please describe your primary use",
-            "jobTitleRequiredBusiness": "Job title is required for business use",
-            "industryRequiredBusiness": "Industry is required for business use",
-            "stateProvinceRegionRequired": "State/Province/Region is required",
-            "postalZipCodeRequired": "Postal/ZIP Code is required",
-            "companyNameRequiredBusiness": "Company name is required for business use",
-            "countryOfResidenceRequiredBusiness": "Country of residence is required for business use",
-            "countryRequiredPersonal": "Country is required for personal use",
-            "agreeToTermsRequired": "You must agree to the terms",
-            "complianceConfirmationRequired": "You must confirm compliance with the Fossorial Commercial License"
-        },
-        "useCaseOptions": {
-            "personal": {
-                "title": "Personal Use",
-                "description": "For individual, non-commercial use such as learning, personal projects, or experimentation."
-            },
-            "business": {
-                "title": "Business Use",
-                "description": "For use within organizations, companies, or commercial or revenue-generating activities."
-            }
-        },
-        "steps": {
-            "emailLicenseType": {
-                "title": "Email & License Type",
-                "description": "Enter your email and choose your license type"
-            },
-            "personalInformation": {
-                "title": "Personal Information",
-                "description": "Tell us about yourself"
-            },
-            "contactInformation": {
-                "title": "Contact Information",
-                "description": "Your contact details"
-            },
-            "termsGenerate": {
-                "title": "Terms & Generate",
-                "description": "Review and accept terms to generate your license"
-            }
-        },
-        "alerts": {
-            "commercialUseDisclosure": {
-                "title": "Usage Disclosure",
-                "description": "Select the license tier that accurately reflects your intended use. The Personal License permits free use of the Software for individual, non-commercial or small-scale commercial activities with annual gross revenue under $100,000 USD. Any use beyond these limits — including use within a business, organization, or other revenue-generating environment — requires a valid Enterprise License and payment of the applicable licensing fee. All users, whether Personal or Enterprise, must comply with the Fossorial Commercial License Terms."
-            },
-            "trialPeriodInformation": {
-                "title": "Trial Period Information",
-                "description": "This License Key enables Enterprise features for a 7-day evaluation period. Continued access to Paid Features beyond the evaluation period requires activation under a valid Personal or Enterprise License. For Enterprise licensing, contact sales@pangolin.net."
-            }
-        },
-        "form": {
-            "useCaseQuestion": "Are you using Pangolin for personal or business use?",
-            "firstName": "First Name",
-            "lastName": "Last Name",
-            "jobTitle": "Job Title",
-            "primaryUseQuestion": "What do you primarily plan to use Pangolin for?",
-            "industryQuestion": "What is your industry?",
-            "prospectiveUsersQuestion": "How many prospective users do you expect to have?",
-            "prospectiveSitesQuestion": "How many prospective sites (tunnels) do you expect to have?",
-            "companyName": "Company name",
-            "countryOfResidence": "Country of residence",
-            "stateProvinceRegion": "State / Province / Region",
-            "postalZipCode": "Postal / ZIP Code",
-            "companyWebsite": "Company website",
-            "companyPhoneNumber": "Company phone number",
-            "country": "Country",
-            "phoneNumberOptional": "Phone number (optional)",
-            "complianceConfirmation": "I confirm that the information I provided is accurate and that I am in compliance with the Fossorial Commercial License. Reporting inaccurate information or misidentifying use of the product is a violation of the license and may result in your key getting revoked."
-        },
-        "buttons": {
-            "close": "Close",
-            "previous": "Previous",
-            "next": "Next",
-            "generateLicenseKey": "Generate License Key"
-        },
-        "toasts": {
-            "success": {
-                "title": "License key generated successfully",
-                "description": "Your license key has been generated and is ready to use."
-            },
-            "error": {
-                "title": "Failed to generate license key",
-                "description": "An error occurred while generating the license key."
-            }
-        }
-    },
-    "priority": "Priority",
-    "priorityDescription": "Higher priority routes are evaluated first. Priority = 100 means automatic ordering (system decides). Use another number to enforce manual priority.",
-    "instanceName": "Instance Name",
-    "pathMatchModalTitle": "Configure Path Matching",
-    "pathMatchModalDescription": "Set up how incoming requests should be matched based on their path.",
-    "pathMatchType": "Match Type",
-    "pathMatchPrefix": "Prefix",
-    "pathMatchExact": "Exact",
-    "pathMatchRegex": "Regex",
-    "pathMatchValue": "Path Value",
-    "clear": "Clear",
-    "saveChanges": "Save Changes",
-    "pathMatchRegexPlaceholder": "^/api/.*",
-    "pathMatchDefaultPlaceholder": "/path",
-    "pathMatchPrefixHelp": "Example: /api matches /api, /api/users, etc.",
-    "pathMatchExactHelp": "Example: /api matches only /api",
-    "pathMatchRegexHelp": "Example: ^/api/.* matches /api/anything",
-    "pathRewriteModalTitle": "Configure Path Rewriting",
-    "pathRewriteModalDescription": "Transform the matched path before forwarding to the target.",
-    "pathRewriteType": "Rewrite Type",
-    "pathRewritePrefixOption": "Prefix - Replace prefix",
-    "pathRewriteExactOption": "Exact - Replace entire path",
-    "pathRewriteRegexOption": "Regex - Pattern replacement",
-    "pathRewriteStripPrefixOption": "Strip Prefix - Remove prefix",
-    "pathRewriteValue": "Rewrite Value",
-    "pathRewriteRegexPlaceholder": "/new/$1",
-    "pathRewriteDefaultPlaceholder": "/new-path",
-    "pathRewritePrefixHelp": "Replace the matched prefix with this value",
-    "pathRewriteExactHelp": "Replace the entire path with this value when the path matches exactly",
-    "pathRewriteRegexHelp": "Use capture groups like $1, $2 for replacement",
-    "pathRewriteStripPrefixHelp": "Leave empty to strip prefix or provide new prefix",
-    "pathRewritePrefix": "Prefix",
-    "pathRewriteExact": "Exact",
-    "pathRewriteRegex": "Regex",
-    "pathRewriteStrip": "Strip",
-    "pathRewriteStripLabel": "strip",
-    "sidebarEnableEnterpriseLicense": "Enable Enterprise License",
-    "cannotbeUndone": "This can not be undone.",
-    "toConfirm": "to confirm",
-    "deleteClientQuestion": "Are you sure you want to remove the client from the site and organization?",
-    "clientMessageRemove": "Once removed, the client will no longer be able to connect to the site."
+    "checkingInvite": "Checking Invite"
 }
--- a/messages/es-ES.json
+++ b/messages/es-ES.json
@@ -47,8 +47,9 @@
    "edit": "Editar",
    "siteConfirmDelete": "Confirmar Borrar Sitio",
    "siteDelete": "Eliminar sitio",
-    "siteMessageRemove": "Una vez eliminado, el sitio ya no será accesible. Todos los objetivos asociados con el sitio también serán eliminados.",
-    "siteQuestionRemove": "¿Está seguro que desea eliminar el sitio de la organización?",
+    "siteMessageRemove": "Una vez eliminado, el sitio ya no será accesible. Todos los recursos y objetivos asociados con el sitio también serán eliminados.",
+    "siteMessageConfirm": "Para confirmar, por favor escriba el nombre del sitio a continuación.",
+    "siteQuestionRemove": "¿Está seguro de que desea eliminar el sitio {selectedSite} de la organización?",
    "siteManageSites": "Administrar Sitios",
    "siteDescription": "Permitir conectividad a tu red a través de túneles seguros",
    "siteCreate": "Crear sitio",
@@ -95,7 +96,7 @@
    "siteWgDescription": "Utilice cualquier cliente Wirex Guard para establecer un túnel. Se requiere una configuración manual de NAT.",
    "siteWgDescriptionSaas": "Utilice cualquier cliente de WireGuard para establecer un túnel. Se requiere configuración manual de NAT. SOLO FUNCIONA EN NODOS AUTOGESTIONADOS",
    "siteLocalDescription": "Solo recursos locales. Sin túneles.",
-    "siteLocalDescriptionSaas": "Solo recursos locales. No hay túneles. Sólo disponible en nodos remotos.",
+    "siteLocalDescriptionSaas": "Solo recursos locales. Sin túneles. SOLO FUNCIONA EN NODOS AUTOGESTIONADOS",
    "siteSeeAll": "Ver todos los sitios",
    "siteTunnelDescription": "Determina cómo quieres conectarte a tu sitio",
    "siteNewtCredentials": "Credenciales nuevas",
@@ -153,7 +154,8 @@
    "protected": "Protegido",
    "notProtected": "No protegido",
    "resourceMessageRemove": "Una vez eliminado, el recurso ya no será accesible. Todos los objetivos asociados con el recurso también serán eliminados.",
-    "resourceQuestionRemove": "¿Está seguro que desea eliminar el recurso de la organización?",
+    "resourceMessageConfirm": "Para confirmar, por favor escriba el nombre del recurso a continuación.",
+    "resourceQuestionRemove": "¿Está seguro de que desea eliminar el recurso {selectedResource} de la organización?",
    "resourceHTTP": "HTTPS Recurso",
    "resourceHTTPDescription": "Solicitudes de proxy a tu aplicación sobre HTTPS usando un subdominio o dominio base.",
    "resourceRaw": "Recurso TCP/UDP sin procesar",
@@ -218,7 +220,7 @@
    "orgDeleteConfirm": "Confirmar eliminación de organización",
    "orgMessageRemove": "Esta acción es irreversible y eliminará todos los datos asociados.",
    "orgMessageConfirm": "Para confirmar, por favor escriba el nombre de la organización a continuación.",
-    "orgQuestionRemove": "¿Está seguro que desea eliminar la organización?",
+    "orgQuestionRemove": "¿Está seguro que desea eliminar la organización {selectedOrg}?",
    "orgUpdated": "Organización actualizada",
    "orgUpdatedDescription": "La organización ha sido actualizada.",
    "orgErrorUpdate": "Error al actualizar la organización",
@@ -285,8 +287,9 @@
    "apiKeysAdd": "Generar clave API",
    "apiKeysErrorDelete": "Error al eliminar la clave API",
    "apiKeysErrorDeleteMessage": "Error al eliminar la clave API",
-    "apiKeysQuestionRemove": "¿Está seguro que desea eliminar la clave API de la organización?",
+    "apiKeysQuestionRemove": "¿Está seguro de que desea eliminar la clave de API {selectedApiKey} de la organización?",
    "apiKeysMessageRemove": "Una vez eliminada, la clave API ya no podrá ser utilizada.",
+    "apiKeysMessageConfirm": "Para confirmar, por favor escriba el nombre de la clave API a continuación.",
    "apiKeysDeleteConfirm": "Confirmar Borrar Clave API",
    "apiKeysDelete": "Borrar Clave API",
    "apiKeysManage": "Administrar claves API",
@@ -302,7 +305,8 @@
    "userDeleteConfirm": "Confirmar Borrar Usuario",
    "userDeleteServer": "Eliminar usuario del servidor",
    "userMessageRemove": "El usuario será eliminado de todas las organizaciones y será eliminado completamente del servidor.",
-    "userQuestionRemove": "¿Está seguro que desea eliminar permanentemente al usuario del servidor?",
+    "userMessageConfirm": "Para confirmar, por favor escriba el nombre del usuario a continuación.",
+    "userQuestionRemove": "¿Está seguro que desea eliminar permanentemente {selectedUser} del servidor?",
    "licenseKey": "Clave de licencia",
    "valid": "Válido",
    "numberOfSites": "Número de sitios",
@@ -335,7 +339,7 @@
    "fossorialLicense": "Ver Términos de suscripción y licencia comercial",
    "licenseMessageRemove": "Esto eliminará la clave de licencia y todos los permisos asociados otorgados por ella.",
    "licenseMessageConfirm": "Para confirmar, por favor escriba la clave de licencia a continuación.",
-    "licenseQuestionRemove": "¿Está seguro que desea eliminar la clave de licencia?",
+    "licenseQuestionRemove": "¿Está seguro que desea eliminar la clave de licencia {selectedKey}?",
    "licenseKeyDelete": "Eliminar clave de licencia",
    "licenseKeyDeleteConfirm": "Confirmar eliminar clave de licencia",
    "licenseTitle": "Administrar estado de licencia",
@@ -368,7 +372,7 @@
    "inviteRemoveErrorDescription": "Ocurrió un error mientras se eliminaba la invitación.",
    "inviteRemoved": "Invitación eliminada",
    "inviteRemovedDescription": "La invitación para {email} ha sido eliminada.",
-    "inviteQuestionRemove": "¿Está seguro de que desea eliminar la invitación?",
+    "inviteQuestionRemove": "¿Está seguro de que desea eliminar la invitación {email}?",
    "inviteMessageRemove": "Una vez eliminada, esta invitación ya no será válida. Siempre puede volver a invitar al usuario más tarde.",
    "inviteMessageConfirm": "Para confirmar, por favor escriba la dirección de correo electrónico de la invitación a continuación.",
    "inviteQuestionRegenerate": "¿Estás seguro de que quieres regenerar la invitación para {email}? Esto revocará la invitación anterior.",
@@ -394,8 +398,9 @@
    "userErrorOrgRemoveDescription": "Ocurrió un error mientras se eliminaba el usuario.",
    "userOrgRemoved": "Usuario eliminado",
    "userOrgRemovedDescription": "El usuario {email} ha sido eliminado de la organización.",
-    "userQuestionOrgRemove": "¿Está seguro que desea eliminar este usuario de la organización?",
+    "userQuestionOrgRemove": "¿Estás seguro de que quieres eliminar {email} de la organización?",
    "userMessageOrgRemove": "Una vez eliminado, este usuario ya no tendrá acceso a la organización. Siempre puede volver a invitarlos más tarde, pero tendrán que aceptar la invitación de nuevo.",
+    "userMessageOrgConfirm": "Para confirmar, por favor escriba el nombre del usuario a continuación.",
    "userRemoveOrgConfirm": "Confirmar eliminar usuario",
    "userRemoveOrg": "Eliminar usuario de la organización",
    "users": "Usuarios",
@@ -463,10 +468,7 @@
    "createdAt": "Creado el",
    "proxyErrorInvalidHeader": "Valor de cabecera de host personalizado no válido. Utilice el formato de nombre de dominio, o guarde en blanco para desestablecer cabecera de host personalizada.",
    "proxyErrorTls": "Nombre de servidor TLS inválido. Utilice el formato de nombre de dominio o guarde en blanco para eliminar el nombre de servidor TLS.",
-    "proxyEnableSSL": "Activar SSL",
-    "proxyEnableSSLDescription": "Activa el cifrado SSL/TLS para conexiones seguras HTTPS a tus objetivos.",
-    "target": "Target",
-    "configureTarget": "Configurar objetivos",
+    "proxyEnableSSL": "Habilitar SSL (https)",
    "targetErrorFetch": "Error al recuperar los objetivos",
    "targetErrorFetchDescription": "Se ha producido un error al recuperar los objetivos",
    "siteErrorFetch": "No se pudo obtener el recurso",
@@ -493,7 +495,7 @@
    "targetTlsSettings": "Configuración de conexión segura",
    "targetTlsSettingsDescription": "Configurar ajustes SSL/TLS para su recurso",
    "targetTlsSettingsAdvanced": "Ajustes avanzados de TLS",
-    "targetTlsSni": "Nombre del servidor TLS",
+    "targetTlsSni": "Nombre del servidor TLS (SNI)",
    "targetTlsSniDescription": "El nombre del servidor TLS a usar para SNI. Deje en blanco para usar el valor predeterminado.",
    "targetTlsSubmit": "Guardar ajustes",
    "targets": "Configuración de objetivos",
@@ -502,21 +504,9 @@
    "targetStickySessionsDescription": "Mantener conexiones en el mismo objetivo de backend para toda su sesión.",
    "methodSelect": "Seleccionar método",
    "targetSubmit": "Añadir destino",
-    "targetNoOne": "Este recurso no tiene ningún objetivo. Agrega un objetivo para configurar dónde enviar peticiones al backend.",
+    "targetNoOne": "No hay objetivos. Agregue un objetivo usando el formulario.",
    "targetNoOneDescription": "Si se añade más de un objetivo anterior se activará el balance de carga.",
    "targetsSubmit": "Guardar objetivos",
-    "addTarget": "Añadir destino",
-    "targetErrorInvalidIp": "Dirección IP inválida",
-    "targetErrorInvalidIpDescription": "Por favor, introduzca una dirección IP válida o nombre de host",
-    "targetErrorInvalidPort": "Puerto inválido",
-    "targetErrorInvalidPortDescription": "Por favor, introduzca un número de puerto válido",
-    "targetErrorNoSite": "Ningún sitio seleccionado",
-    "targetErrorNoSiteDescription": "Por favor, seleccione un sitio para el objetivo",
-    "targetCreated": "Objetivo creado",
-    "targetCreatedDescription": "El objetivo se ha creado correctamente",
-    "targetErrorCreate": "Error al crear el objetivo",
-    "targetErrorCreateDescription": "Se ha producido un error al crear el objetivo",
-    "save": "Guardar",
    "proxyAdditional": "Ajustes adicionales del proxy",
    "proxyAdditionalDescription": "Configura cómo tu recurso maneja la configuración del proxy",
    "proxyCustomHeader": "Cabecera de host personalizada",
@@ -725,7 +715,7 @@
    "pangolinServerAdmin": "Admin Servidor - Pangolin",
    "licenseTierProfessional": "Licencia profesional",
    "licenseTierEnterprise": "Licencia Enterprise",
-    "licenseTierPersonal": "Licencia personal",
+    "licenseTierCommercial": "Licencia comercial",
    "licensed": "Licenciado",
    "yes": "Sí",
    "no": "Nu",
@@ -737,7 +727,7 @@
    "idpManageDescription": "Ver y administrar proveedores de identidad en el sistema",
    "idpDeletedDescription": "Proveedor de identidad eliminado correctamente",
    "idpOidc": "OAuth2/OIDC",
-    "idpQuestionRemove": "¿Está seguro que desea eliminar permanentemente el proveedor de identidad?",
+    "idpQuestionRemove": "¿Está seguro que desea eliminar permanentemente el proveedor de identidad {name}?",
    "idpMessageRemove": "Esto eliminará el proveedor de identidad y todas las configuraciones asociadas. Los usuarios que se autentifiquen a través de este proveedor ya no podrán iniciar sesión.",
    "idpMessageConfirm": "Para confirmar, por favor escriba el nombre del proveedor de identidad a continuación.",
    "idpConfirmDelete": "Confirmar eliminar proveedor de identidad",
@@ -760,7 +750,7 @@
    "idpDisplayName": "Un nombre mostrado para este proveedor de identidad",
    "idpAutoProvisionUsers": "Auto-Provisión de Usuarios",
    "idpAutoProvisionUsersDescription": "Cuando está habilitado, los usuarios serán creados automáticamente en el sistema al iniciar sesión con la capacidad de asignar a los usuarios a roles y organizaciones.",
-    "licenseBadge": "EE",
+    "licenseBadge": "Profesional",
    "idpType": "Tipo de proveedor",
    "idpTypeDescription": "Seleccione el tipo de proveedor de identidad que desea configurar",
    "idpOidcConfigure": "Configuración OAuth2/OIDC",
@@ -1094,6 +1084,7 @@
    "navbar": "Menú de navegación",
    "navbarDescription": "Menú de navegación principal para la aplicación",
    "navbarDocsLink": "Documentación",
+    "commercialEdition": "Edición Comercial",
    "otpErrorEnable": "No se puede habilitar 2FA",
    "otpErrorEnableDescription": "Se ha producido un error al habilitar 2FA",
    "otpSetupCheckCode": "Por favor, introduzca un código de 6 dígitos",
@@ -1149,7 +1140,7 @@
    "sidebarAllUsers": "Todos los usuarios",
    "sidebarIdentityProviders": "Proveedores de identidad",
    "sidebarLicense": "Licencia",
-    "sidebarClients": "Clientes",
+    "sidebarClients": "Clientes (Beta)",
    "sidebarDomains": "Dominios",
    "enableDockerSocket": "Habilitar Plano Docker",
    "enableDockerSocketDescription": "Activar el raspado de etiquetas de Socket Docker para etiquetas de planos. La ruta del Socket debe proporcionarse a Newt.",
@@ -1206,8 +1197,9 @@
    "domainCreate": "Crear dominio",
    "domainCreatedDescription": "Dominio creado con éxito",
    "domainDeletedDescription": "Dominio eliminado exitosamente",
-    "domainQuestionRemove": "¿Está seguro que desea eliminar el dominio de su cuenta?",
+    "domainQuestionRemove": "¿Está seguro de que desea eliminar el dominio {domain} de su cuenta?",
    "domainMessageRemove": "Una vez eliminado, el dominio ya no estará asociado con su cuenta.",
+    "domainMessageConfirm": "Para confirmar, por favor escriba el nombre del dominio abajo.",
    "domainConfirmDelete": "Confirmar eliminación del dominio",
    "domainDelete": "Eliminar dominio",
    "domain": "Dominio",
@@ -1274,7 +1266,7 @@
    "billingFreeTier": "Nivel Gratis",
    "billingWarningOverLimit": "Advertencia: Has excedido uno o más límites de uso. Tus sitios no se conectarán hasta que modifiques tu suscripción o ajustes tu uso.",
    "billingUsageLimitsOverview": "Descripción general de los límites de uso",
-    "billingMonitorUsage": "Monitorea tu uso comparado con los límites configurados. Si necesitas que aumenten los límites, contáctanos a soporte@pangolin.net.",
+    "billingMonitorUsage": "Monitorea tu uso comparado con los límites configurados. Si necesitas que aumenten los límites, contáctanos a soporte@fossorial.io.",
    "billingDataUsage": "Uso de datos",
    "billingOnlineTime": "Tiempo en línea del sitio",
    "billingUsers": "Usuarios activos",
@@ -1341,6 +1333,7 @@
    "twoFactorRequired": "Se requiere autenticación de dos factores para registrar una llave de seguridad.",
    "twoFactor": "Autenticación de dos factores",
    "adminEnabled2FaOnYourAccount": "Su administrador ha habilitado la autenticación de dos factores para {email}. Por favor, complete el proceso de configuración para continuar.",
+    "continueToApplication": "Continuar a la aplicación",
    "securityKeyAdd": "Agregar llave de seguridad",
    "securityKeyRegisterTitle": "Registrar nueva llave de seguridad",
    "securityKeyRegisterDescription": "Conecta tu llave de seguridad y escribe un nombre para identificarla",
@@ -1418,7 +1411,6 @@
    "externalProxyEnabled": "Proxy externo habilitado",
    "addNewTarget": "Agregar nuevo destino",
    "targetsList": "Lista de destinos",
-    "advancedMode": "Modo avanzado",
    "targetErrorDuplicateTargetFound": "Se encontró un destino duplicado",
    "healthCheckHealthy": "Saludable",
    "healthCheckUnhealthy": "No saludable",
@@ -1551,17 +1543,18 @@
    "autoLoginError": "Error de inicio de sesión automático",
    "autoLoginErrorNoRedirectUrl": "No se recibió URL de redirección del proveedor de identidad.",
    "autoLoginErrorGeneratingUrl": "Error al generar URL de autenticación.",
-    "remoteExitNodeManageRemoteExitNodes": "Nodos remotos",
-    "remoteExitNodeDescription": "Autoalojar uno o más nodos remotos para extender la conectividad de red y reducir la dependencia de la nube",
+    "remoteExitNodeManageRemoteExitNodes": "Administrar Nodos Autogestionados",
+    "remoteExitNodeDescription": "Administrar nodos para extender la conectividad de red",
    "remoteExitNodes": "Nodos",
    "searchRemoteExitNodes": "Buscar nodos...",
    "remoteExitNodeAdd": "Añadir Nodo",
    "remoteExitNodeErrorDelete": "Error al eliminar el nodo",
-    "remoteExitNodeQuestionRemove": "¿Está seguro que desea eliminar el nodo de la organización?",
+    "remoteExitNodeQuestionRemove": "¿Está seguro de que desea eliminar el nodo {selectedNode} de la organización?",
    "remoteExitNodeMessageRemove": "Una vez eliminado, el nodo ya no será accesible.",
+    "remoteExitNodeMessageConfirm": "Para confirmar, por favor escriba el nombre del nodo a continuación.",
    "remoteExitNodeConfirmDelete": "Confirmar eliminar nodo",
    "remoteExitNodeDelete": "Eliminar Nodo",
-    "sidebarRemoteExitNodes": "Nodos remotos",
+    "sidebarRemoteExitNodes": "Nodos",
    "remoteExitNodeCreate": {
        "title": "Crear Nodo",
        "description": "Crear un nuevo nodo para extender la conectividad de red",
@@ -1730,166 +1723,5 @@
    "authPageUpdated": "Página auth actualizada correctamente",
    "healthCheckNotAvailable": "Local",
    "rewritePath": "Reescribir Ruta",
-    "rewritePathDescription": "Opcionalmente reescribe la ruta antes de reenviar al destino.",
-    "continueToApplication": "Continuar a la aplicación",
-    "checkingInvite": "Comprobando invitación",
-    "setResourceHeaderAuth": "set-Resource HeaderAuth",
-    "resourceHeaderAuthRemove": "Eliminar Auth del Encabezado",
-    "resourceHeaderAuthRemoveDescription": "Autenticación de cabecera eliminada correctamente.",
-    "resourceErrorHeaderAuthRemove": "Error al eliminar autenticación de cabecera",
-    "resourceErrorHeaderAuthRemoveDescription": "No se pudo eliminar la autenticación de cabecera del recurso.",
-    "resourceHeaderAuthProtectionEnabled": "Autenticación de cabecera habilitada",
-    "resourceHeaderAuthProtectionDisabled": "Autenticación de cabecera desactivada",
-    "headerAuthRemove": "Eliminar Auth del Encabezado",
-    "headerAuthAdd": "Añadir autenticación de cabecera",
-    "resourceErrorHeaderAuthSetup": "Error al establecer autenticación de cabecera",
-    "resourceErrorHeaderAuthSetupDescription": "No se pudo establecer autenticación de cabecera para el recurso.",
-    "resourceHeaderAuthSetup": "Autenticación de cabecera establecida correctamente",
-    "resourceHeaderAuthSetupDescription": "La autenticación de cabecera se ha establecido correctamente.",
-    "resourceHeaderAuthSetupTitle": "Establecer autenticación de cabecera",
-    "resourceHeaderAuthSetupTitleDescription": "Establezca las credenciales básicas de autenticación (nombre de usuario y contraseña) para proteger este recurso con autenticación de HTTP Header. Acceda a él usando el formato https://username:password@resource.example.com",
-    "resourceHeaderAuthSubmit": "Establecer autenticación de cabecera",
-    "actionSetResourceHeaderAuth": "Establecer autenticación de cabecera",
-    "enterpriseEdition": "Edición corporativa",
-    "unlicensed": "Sin licencia",
-    "beta": "Beta",
-    "manageClients": "Administrar clientes",
-    "manageClientsDescription": "Los clientes son dispositivos que pueden conectarse a sus sitios",
-    "licenseTableValidUntil": "Válido hasta",
-    "saasLicenseKeysSettingsTitle": "Licencias empresariales",
-    "saasLicenseKeysSettingsDescription": "Generar y administrar claves de licencia Enterprise para instancias Pangolin autoalojadas",
-    "sidebarEnterpriseLicenses": "Licencias",
-    "generateLicenseKey": "Generar clave de licencia",
-    "generateLicenseKeyForm": {
-        "validation": {
-            "emailRequired": "Por favor, introduzca una dirección de correo válida",
-            "useCaseTypeRequired": "Por favor, seleccione un tipo de caso de uso",
-            "firstNameRequired": "El nombre es obligatorio",
-            "lastNameRequired": "Se requiere apellido",
-            "primaryUseRequired": "Por favor describa su uso principal",
-            "jobTitleRequiredBusiness": "El título de la tarea es obligatorio para uso empresarial",
-            "industryRequiredBusiness": "La industria es necesaria para uso comercial",
-            "stateProvinceRegionRequired": "Se requiere estado/Province/región",
-            "postalZipCodeRequired": "Código Postal/ZIP es requerido",
-            "companyNameRequiredBusiness": "El nombre de la empresa es obligatorio para uso comercial",
-            "countryOfResidenceRequiredBusiness": "El país de residencia es obligatorio para uso de negocios",
-            "countryRequiredPersonal": "El país es obligatorio para uso personal",
-            "agreeToTermsRequired": "Debe aceptar los términos",
-            "complianceConfirmationRequired": "Debe confirmar el cumplimiento de la Licencia Comercial Fossorial"
-        },
-        "useCaseOptions": {
-            "personal": {
-                "title": "Uso personal",
-                "description": "Para uso individual y no comercial, tales como aprendizaje, proyectos personales o experimentación."
-            },
-            "business": {
-                "title": "Uso de Negocio",
-                "description": "Para uso dentro de organizaciones, empresas o actividades comerciales o generadoras de ingresos."
-            }
-        },
-        "steps": {
-            "emailLicenseType": {
-                "title": "Email y tipo de licencia",
-                "description": "Introduzca su correo electrónico y elija su tipo de licencia"
-            },
-            "personalInformation": {
-                "title": "Información Personal",
-                "description": "Cuéntanos acerca de ti"
-            },
-            "contactInformation": {
-                "title": "Información de contacto",
-                "description": "Sus datos de contacto"
-            },
-            "termsGenerate": {
-                "title": "Términos y Generar",
-                "description": "Revisar y aceptar términos para generar su licencia"
-            }
-        },
-        "alerts": {
-            "commercialUseDisclosure": {
-                "title": "Divulgación de uso",
-                "description": "Seleccione el nivel de licencia que refleje con precisión su uso previsto. La Licencia Personal permite el uso libre del Software para actividades comerciales individuales, no comerciales o de pequeña escala con ingresos brutos anuales inferiores a $100,000 USD. Cualquier uso más allá de estos límites — incluyendo el uso dentro de una empresa, organización, u otro entorno de generación de ingresos — requiere una Licencia Empresarial válida y el pago de la cuota de licencia aplicable. Todos los usuarios, ya sean personales o empresariales, deben cumplir con las Condiciones de Licencia Comercial Fossorial."
-            },
-            "trialPeriodInformation": {
-                "title": "Información del período de prueba",
-                "description": "Esta Clave de Licencia permite las funciones de la Empresa durante un período de evaluación de 7 días. El acceso continuado a las características de pago más allá del período de evaluación requiere una activación bajo una Licencia Personal o Empresarial válida. Para licencias de la Empresa, póngase en contacto con sales@pangolin.net."
-            }
-        },
-        "form": {
-            "useCaseQuestion": "¿Estás usando Pangolin para uso personal o de negocios?",
-            "firstName": "Nombre",
-            "lastName": "Apellido",
-            "jobTitle": "Trabajo",
-            "primaryUseQuestion": "¿Para qué planeas usar principalmente Pangolin?",
-            "industryQuestion": "¿Cuál es su industria?",
-            "prospectiveUsersQuestion": "¿Cuántos usuarios potenciales esperas tener?",
-            "prospectiveSitesQuestion": "¿Cuántos sitios potenciales (túneles) esperas tener?",
-            "companyName": "Nombre de la empresa",
-            "countryOfResidence": "País de residencia",
-            "stateProvinceRegion": "Estado / Province / Región",
-            "postalZipCode": "Código postal",
-            "companyWebsite": "Sitio web de la empresa",
-            "companyPhoneNumber": "Número de teléfono de la empresa",
-            "country": "País",
-            "phoneNumberOptional": "Número de teléfono (opcional)",
-            "complianceConfirmation": "Confirmo que la información que he proporcionado es exacta y que estoy en conformidad con la Licencia Comercial Fossorial. Informar de información inexacta o identificar mal el uso del producto es una violación de la licencia y puede resultar en que su clave sea revocada."
-        },
-        "buttons": {
-            "close": "Cerrar",
-            "previous": "Anterior",
-            "next": "Siguiente",
-            "generateLicenseKey": "Generar clave de licencia"
-        },
-        "toasts": {
-            "success": {
-                "title": "Clave de licencia generada con éxito",
-                "description": "Su clave de licencia ha sido generada y está lista para usar."
-            },
-            "error": {
-                "title": "Error al generar la clave de licencia",
-                "description": "Se ha producido un error al generar la clave de licencia."
-            }
-        }
-    },
-    "priority": "Prioridad",
-    "priorityDescription": "Las rutas de prioridad más alta son evaluadas primero. Prioridad = 100 significa orden automático (decisiones del sistema). Utilice otro número para hacer cumplir la prioridad manual.",
-    "instanceName": "Nombre de instancia",
-    "pathMatchModalTitle": "Configurar ruta coincidente",
-    "pathMatchModalDescription": "Configurar cómo deben coincidir las peticiones entrantes en función de su ruta.",
-    "pathMatchType": "Tipo de partida",
-    "pathMatchPrefix": "Prefijo",
-    "pathMatchExact": "Exacto",
-    "pathMatchRegex": "Regex",
-    "pathMatchValue": "Valor de ruta",
-    "clear": "Claro",
-    "saveChanges": "Guardar Cambios",
-    "pathMatchRegexPlaceholder": "^/api/.*",
-    "pathMatchDefaultPlaceholder": "/ruta",
-    "pathMatchPrefixHelp": "Ejemplo: /api coincide con /api, /api/users, etc.",
-    "pathMatchExactHelp": "Ejemplo: /api coincide sólo con /api",
-    "pathMatchRegexHelp": "Ejemplo: ^/api/.* coincide con /api/anything",
-    "pathRewriteModalTitle": "Configurar ruta de reescritura",
-    "pathRewriteModalDescription": "Transforma la ruta coincidente antes de reenviarla al objetivo.",
-    "pathRewriteType": "Tipo de reescritura",
-    "pathRewritePrefixOption": "Prefijo - Reemplazar prefijo",
-    "pathRewriteExactOption": "Exacto - Reemplazar toda la ruta",
-    "pathRewriteRegexOption": "Regex - Reemplazo de patrón",
-    "pathRewriteStripPrefixOption": "Prefijo de clip - Quitar prefijo",
-    "pathRewriteValue": "Reescribir valor",
-    "pathRewriteRegexPlaceholder": "/new/$1",
-    "pathRewriteDefaultPlaceholder": "/new-path",
-    "pathRewritePrefixHelp": "Reemplazar el prefijo coincidente con este valor",
-    "pathRewriteExactHelp": "Reemplaza toda la ruta con este valor cuando la ruta coincida exactamente",
-    "pathRewriteRegexHelp": "Usar grupos de captura como $1, $2 para reemplazar",
-    "pathRewriteStripPrefixHelp": "Dejar en blanco para el prefijo strip o proporcionar un nuevo prefijo",
-    "pathRewritePrefix": "Prefijo",
-    "pathRewriteExact": "Exacto",
-    "pathRewriteRegex": "Regex",
-    "pathRewriteStrip": "Clip",
-    "pathRewriteStripLabel": "clip",
-    "sidebarEnableEnterpriseLicense": "Activar licencia corporativa",
-    "cannotbeUndone": "Esto no se puede deshacer.",
-    "toConfirm": "confirmar",
-    "deleteClientQuestion": "¿Está seguro que desea eliminar el cliente del sitio y la organización?",
-    "clientMessageRemove": "Una vez eliminado, el cliente ya no podrá conectarse al sitio."
+    "rewritePathDescription": "Opcionalmente reescribe la ruta antes de reenviar al destino."
 }
--- a/messages/fr-FR.json
+++ b/messages/fr-FR.json
@@ -47,8 +47,9 @@
    "edit": "Editer",
    "siteConfirmDelete": "Confirmer la suppression du site",
    "siteDelete": "Supprimer le site",
-    "siteMessageRemove": "Une fois supprimé, le site ne sera plus accessible. Toutes les cibles associées au site seront également supprimées.",
-    "siteQuestionRemove": "Êtes-vous sûr de vouloir supprimer le site de l'organisation ?",
+    "siteMessageRemove": "Une fois supprimé, le site ne sera plus accessible. Toutes les ressources et cibles associées au site seront également supprimées.",
+    "siteMessageConfirm": "Pour confirmer, veuillez saisir le nom du site ci-dessous.",
+    "siteQuestionRemove": "Êtes-vous sûr de vouloir supprimer le site {selectedSite} de l'organisation ?",
    "siteManageSites": "Gérer les sites",
    "siteDescription": "Autoriser la connectivité à votre réseau via des tunnels sécurisés",
    "siteCreate": "Créer un site",
@@ -95,7 +96,7 @@
    "siteWgDescription": "Utilisez n'importe quel client WireGuard pour établir un tunnel. Configuration NAT manuelle requise.",
    "siteWgDescriptionSaas": "Utilisez n'importe quel client WireGuard pour établir un tunnel. Configuration NAT manuelle requise. FONCTIONNE UNIQUEMENT SUR DES NŒUDS AUTONOMES",
    "siteLocalDescription": "Ressources locales seulement. Pas de tunneling.",
-    "siteLocalDescriptionSaas": "Ressources locales uniquement. Pas de tunneling. Disponible uniquement sur les nœuds distants.",
+    "siteLocalDescriptionSaas": "Ressources locales uniquement. Pas de tunneling. FONCTIONNE UNIQUEMENT SUR DES NŒUDS AUTONOMES",
    "siteSeeAll": "Voir tous les sites",
    "siteTunnelDescription": "Déterminez comment vous voulez vous connecter à votre site",
    "siteNewtCredentials": "Identifiants Newt",
@@ -153,7 +154,8 @@
    "protected": "Protégé",
    "notProtected": "Non Protégé",
    "resourceMessageRemove": "Une fois supprimée, la ressource ne sera plus accessible. Toutes les cibles associées à la ressource seront également supprimées.",
-    "resourceQuestionRemove": "Êtes-vous sûr de vouloir supprimer la ressource de l'organisation ?",
+    "resourceMessageConfirm": "Pour confirmer, veuillez saisir le nom de la ressource ci-dessous.",
+    "resourceQuestionRemove": "Êtes-vous sûr de vouloir supprimer la ressource {selectedResource} de l'organisation ?",
    "resourceHTTP": "Ressource HTTPS",
    "resourceHTTPDescription": "Requêtes de proxy à votre application via HTTPS en utilisant un sous-domaine ou un domaine de base.",
    "resourceRaw": "Ressource TCP/UDP brute",
@@ -218,7 +220,7 @@
    "orgDeleteConfirm": "Confirmer la suppression de l'organisation",
    "orgMessageRemove": "Cette action est irréversible et supprimera toutes les données associées.",
    "orgMessageConfirm": "Pour confirmer, veuillez saisir le nom de l'organisation ci-dessous.",
-    "orgQuestionRemove": "Êtes-vous sûr de vouloir supprimer l'organisation ?",
+    "orgQuestionRemove": "Êtes-vous sûr de vouloir supprimer l'organisation {selectedOrg}?",
    "orgUpdated": "Organisation mise à jour",
    "orgUpdatedDescription": "L'organisation a été mise à jour.",
    "orgErrorUpdate": "Échec de la mise à jour de l'organisation",
@@ -285,8 +287,9 @@
    "apiKeysAdd": "Générer une clé API",
    "apiKeysErrorDelete": "Erreur lors de la suppression de la clé API",
    "apiKeysErrorDeleteMessage": "Erreur lors de la suppression de la clé API",
-    "apiKeysQuestionRemove": "Êtes-vous sûr de vouloir supprimer la clé API de l'organisation ?",
+    "apiKeysQuestionRemove": "Êtes-vous sûr de vouloir supprimer la clé API {selectedApiKey} de l'organisation ?",
    "apiKeysMessageRemove": "Une fois supprimée, la clé API ne pourra plus être utilisée.",
+    "apiKeysMessageConfirm": "Pour confirmer, veuillez saisir le nom de la clé API ci-dessous.",
    "apiKeysDeleteConfirm": "Confirmer la suppression de la clé API",
    "apiKeysDelete": "Supprimer la clé API",
    "apiKeysManage": "Gérer les clés API",
@@ -302,7 +305,8 @@
    "userDeleteConfirm": "Confirmer la suppression de l'utilisateur",
    "userDeleteServer": "Supprimer l'utilisateur du serveur",
    "userMessageRemove": "L'utilisateur sera retiré de toutes les organisations et sera complètement retiré du serveur.",
-    "userQuestionRemove": "Êtes-vous sûr de vouloir supprimer définitivement l'utilisateur du serveur?",
+    "userMessageConfirm": "Pour confirmer, veuillez saisir le nom de l'utilisateur ci-dessous.",
+    "userQuestionRemove": "Êtes-vous sûr de vouloir supprimer définitivement {selectedUser} du serveur?",
    "licenseKey": "Clé de licence",
    "valid": "Valide",
    "numberOfSites": "Nombre de sites",
@@ -335,7 +339,7 @@
    "fossorialLicense": "Voir les conditions de licence commerciale et d'abonnement Fossorial",
    "licenseMessageRemove": "Cela supprimera la clé de licence et toutes les autorisations qui lui sont associées.",
    "licenseMessageConfirm": "Pour confirmer, veuillez saisir la clé de licence ci-dessous.",
-    "licenseQuestionRemove": "Êtes-vous sûr de vouloir supprimer la clé de licence ?",
+    "licenseQuestionRemove": "Êtes-vous sûr de vouloir supprimer la clé de licence {selectedKey}?",
    "licenseKeyDelete": "Supprimer la clé de licence",
    "licenseKeyDeleteConfirm": "Confirmer la suppression de la clé de licence",
    "licenseTitle": "Gérer le statut de la licence",
@@ -368,7 +372,7 @@
    "inviteRemoveErrorDescription": "Une erreur s'est produite lors de la suppression de l'invitation.",
    "inviteRemoved": "Invitation supprimée",
    "inviteRemovedDescription": "L'invitation pour {email} a été supprimée.",
-    "inviteQuestionRemove": "Êtes-vous sûr de vouloir supprimer l'invitation?",
+    "inviteQuestionRemove": "Êtes-vous sûr de vouloir supprimer l'invitation {email}?",
    "inviteMessageRemove": "Une fois supprimée, cette invitation ne sera plus valide. Vous pourrez toujours réinviter l'utilisateur plus tard.",
    "inviteMessageConfirm": "Pour confirmer, veuillez saisir l'adresse e-mail de l'invitation ci-dessous.",
    "inviteQuestionRegenerate": "Êtes-vous sûr de vouloir régénérer l'invitation {email}? Cela révoquera l'invitation précédente.",
@@ -394,8 +398,9 @@
    "userErrorOrgRemoveDescription": "Une erreur s'est produite lors de la suppression de l'utilisateur.",
    "userOrgRemoved": "Utilisateur supprimé",
    "userOrgRemovedDescription": "L'utilisateur {email} a été retiré de l'organisation.",
-    "userQuestionOrgRemove": "Êtes-vous sûr de vouloir supprimer cet utilisateur de l'organisation ?",
+    "userQuestionOrgRemove": "Êtes-vous sûr de vouloir retirer {email} de l'organisation ?",
    "userMessageOrgRemove": "Une fois retiré, cet utilisateur n'aura plus accès à l'organisation. Vous pouvez toujours le réinviter plus tard, mais il devra accepter l'invitation à nouveau.",
+    "userMessageOrgConfirm": "Pour confirmer, veuillez saisir le nom de l'utilisateur ci-dessous.",
    "userRemoveOrgConfirm": "Confirmer la suppression de l'utilisateur",
    "userRemoveOrg": "Retirer l'utilisateur de l'organisation",
    "users": "Utilisateurs",
@@ -463,10 +468,7 @@
    "createdAt": "Créé le",
    "proxyErrorInvalidHeader": "Valeur d'en-tête Host personnalisée invalide. Utilisez le format de nom de domaine, ou laissez vide pour désactiver l'en-tête Host personnalisé.",
    "proxyErrorTls": "Nom de serveur TLS invalide. Utilisez le format de nom de domaine, ou laissez vide pour supprimer le nom de serveur TLS.",
-    "proxyEnableSSL": "Activer SSL",
-    "proxyEnableSSLDescription": "Activez le cryptage SSL/TLS pour des connexions HTTPS sécurisées vers vos cibles.",
-    "target": "Target",
-    "configureTarget": "Configurer les cibles",
+    "proxyEnableSSL": "Activer SSL (https)",
    "targetErrorFetch": "Échec de la récupération des cibles",
    "targetErrorFetchDescription": "Une erreur s'est produite lors de la récupération des cibles",
    "siteErrorFetch": "Échec de la récupération de la ressource",
@@ -493,7 +495,7 @@
    "targetTlsSettings": "Configuration sécurisée de connexion",
    "targetTlsSettingsDescription": "Configurer les paramètres SSL/TLS pour votre ressource",
    "targetTlsSettingsAdvanced": "Paramètres TLS avancés",
-    "targetTlsSni": "Nom du serveur TLS",
+    "targetTlsSni": "Nom de serveur TLS (SNI)",
    "targetTlsSniDescription": "Le nom de serveur TLS à utiliser pour SNI. Laissez vide pour utiliser la valeur par défaut.",
    "targetTlsSubmit": "Enregistrer les paramètres",
    "targets": "Configuration des cibles",
@@ -502,21 +504,9 @@
    "targetStickySessionsDescription": "Maintenir les connexions sur la même cible backend pendant toute leur session.",
    "methodSelect": "Sélectionner la méthode",
    "targetSubmit": "Ajouter une cible",
-    "targetNoOne": "Cette ressource n'a aucune cible. Ajoutez une cible pour configurer où envoyer des requêtes à votre backend.",
+    "targetNoOne": "Aucune cible. Ajoutez une cible en utilisant le formulaire.",
    "targetNoOneDescription": "L'ajout de plus d'une cible ci-dessus activera l'équilibrage de charge.",
    "targetsSubmit": "Enregistrer les cibles",
-    "addTarget": "Ajouter une cible",
-    "targetErrorInvalidIp": "Adresse IP invalide",
-    "targetErrorInvalidIpDescription": "Veuillez entrer une adresse IP ou un nom d'hôte valide",
-    "targetErrorInvalidPort": "Port invalide",
-    "targetErrorInvalidPortDescription": "Veuillez entrer un numéro de port valide",
-    "targetErrorNoSite": "Aucun site sélectionné",
-    "targetErrorNoSiteDescription": "Veuillez sélectionner un site pour la cible",
-    "targetCreated": "Cible créée",
-    "targetCreatedDescription": "La cible a été créée avec succès",
-    "targetErrorCreate": "Impossible de créer la cible",
-    "targetErrorCreateDescription": "Une erreur s'est produite lors de la création de la cible",
-    "save": "Enregistrer",
    "proxyAdditional": "Paramètres de proxy supplémentaires",
    "proxyAdditionalDescription": "Configurer la façon dont votre ressource gère les paramètres de proxy",
    "proxyCustomHeader": "En-tête Host personnalisé",
@@ -725,7 +715,7 @@
    "pangolinServerAdmin": "Admin Serveur - Pangolin",
    "licenseTierProfessional": "Licence Professionnelle",
    "licenseTierEnterprise": "Licence Entreprise",
-    "licenseTierPersonal": "Licence personnelle",
+    "licenseTierCommercial": "Licence commerciale",
    "licensed": "Sous licence",
    "yes": "Oui",
    "no": "Non",
@@ -737,7 +727,7 @@
    "idpManageDescription": "Voir et gérer les fournisseurs d'identité dans le système",
    "idpDeletedDescription": "Fournisseur d'identité supprimé avec succès",
    "idpOidc": "OAuth2/OIDC",
-    "idpQuestionRemove": "Êtes-vous sûr de vouloir supprimer définitivement le fournisseur d'identité?",
+    "idpQuestionRemove": "Êtes-vous sûr de vouloir supprimer définitivement le fournisseur d'identité {name}?",
    "idpMessageRemove": "Cela supprimera le fournisseur d'identité et toutes les configurations associées. Les utilisateurs qui s'authentifient via ce fournisseur ne pourront plus se connecter.",
    "idpMessageConfirm": "Pour confirmer, veuillez saisir le nom du fournisseur d'identité ci-dessous.",
    "idpConfirmDelete": "Confirmer la suppression du fournisseur d'identité",
@@ -760,7 +750,7 @@
    "idpDisplayName": "Un nom d'affichage pour ce fournisseur d'identité",
    "idpAutoProvisionUsers": "Approvisionnement automatique des utilisateurs",
    "idpAutoProvisionUsersDescription": "Lorsque cette option est activée, les utilisateurs seront automatiquement créés dans le système lors de leur première connexion avec la possibilité de mapper les utilisateurs aux rôles et aux organisations.",
-    "licenseBadge": "EE",
+    "licenseBadge": "Professionnel",
    "idpType": "Type de fournisseur",
    "idpTypeDescription": "Sélectionnez le type de fournisseur d'identité que vous souhaitez configurer",
    "idpOidcConfigure": "Configuration OAuth2/OIDC",
@@ -1094,6 +1084,7 @@
    "navbar": "Menu de navigation",
    "navbarDescription": "Menu de navigation principal de l'application",
    "navbarDocsLink": "Documentation",
+    "commercialEdition": "Édition Commerciale",
    "otpErrorEnable": "Impossible d'activer l'A2F",
    "otpErrorEnableDescription": "Une erreur s'est produite lors de l'activation de l'A2F",
    "otpSetupCheckCode": "Veuillez entrer un code à 6 chiffres",
@@ -1149,7 +1140,7 @@
    "sidebarAllUsers": "Tous les utilisateurs",
    "sidebarIdentityProviders": "Fournisseurs d'identité",
    "sidebarLicense": "Licence",
-    "sidebarClients": "Clients",
+    "sidebarClients": "Clients (Bêta)",
    "sidebarDomains": "Domaines",
    "enableDockerSocket": "Activer le Plan Docker",
    "enableDockerSocketDescription": "Activer le ramassage d'étiquettes de socket Docker pour les étiquettes de plan. Le chemin de socket doit être fourni à Newt.",
@@ -1206,8 +1197,9 @@
    "domainCreate": "Créer un domaine",
    "domainCreatedDescription": "Domaine créé avec succès",
    "domainDeletedDescription": "Domaine supprimé avec succès",
-    "domainQuestionRemove": "Êtes-vous sûr de vouloir supprimer le domaine de votre compte ?",
+    "domainQuestionRemove": "Êtes-vous sûr de vouloir supprimer le domaine {domain} de votre compte ?",
    "domainMessageRemove": "Une fois supprimé, le domaine ne sera plus associé à votre compte.",
+    "domainMessageConfirm": "Pour confirmer, veuillez taper le nom du domaine ci-dessous.",
    "domainConfirmDelete": "Confirmer la suppression du domaine",
    "domainDelete": "Supprimer le domaine",
    "domain": "Domaine",
@@ -1274,7 +1266,7 @@
    "billingFreeTier": "Niveau gratuit",
    "billingWarningOverLimit": "Attention : Vous avez dépassé une ou plusieurs limites d'utilisation. Vos sites ne se connecteront pas tant que vous n'avez pas modifié votre abonnement ou ajusté votre utilisation.",
    "billingUsageLimitsOverview": "Vue d'ensemble des limites d'utilisation",
-    "billingMonitorUsage": "Surveillez votre consommation par rapport aux limites configurées. Si vous avez besoin d'une augmentation des limites, veuillez nous contacter à support@pangolin.net.",
+    "billingMonitorUsage": "Surveillez votre consommation par rapport aux limites configurées. Si vous avez besoin d'une augmentation des limites, veuillez nous contacter à support@fossorial.io.",
    "billingDataUsage": "Utilisation des données",
    "billingOnlineTime": "Temps en ligne du site",
    "billingUsers": "Utilisateurs actifs",
@@ -1341,6 +1333,7 @@
    "twoFactorRequired": "L'authentification à deux facteurs est requise pour enregistrer une clé de sécurité.",
    "twoFactor": "Authentification à deux facteurs",
    "adminEnabled2FaOnYourAccount": "Votre administrateur a activé l'authentification à deux facteurs pour {email}. Veuillez terminer le processus d'installation pour continuer.",
+    "continueToApplication": "Continuer vers l'application",
    "securityKeyAdd": "Ajouter une clé de sécurité",
    "securityKeyRegisterTitle": "Enregistrer une nouvelle clé de sécurité",
    "securityKeyRegisterDescription": "Connectez votre clé de sécurité et saisissez un nom pour l'identifier",
@@ -1418,7 +1411,6 @@
    "externalProxyEnabled": "Proxy externe activé",
    "addNewTarget": "Ajouter une nouvelle cible",
    "targetsList": "Liste des cibles",
-    "advancedMode": "Mode Avancé",
    "targetErrorDuplicateTargetFound": "Cible en double trouvée",
    "healthCheckHealthy": "Sain",
    "healthCheckUnhealthy": "En mauvaise santé",
@@ -1551,17 +1543,18 @@
    "autoLoginError": "Erreur de connexion automatique",
    "autoLoginErrorNoRedirectUrl": "Aucune URL de redirection reçue du fournisseur d'identité.",
    "autoLoginErrorGeneratingUrl": "Échec de la génération de l'URL d'authentification.",
-    "remoteExitNodeManageRemoteExitNodes": "Nœuds distants",
-    "remoteExitNodeDescription": "Héberger un ou plusieurs nœuds distants pour étendre votre connectivité réseau et réduire la dépendance sur le cloud",
+    "remoteExitNodeManageRemoteExitNodes": "Gérer auto-hébergé",
+    "remoteExitNodeDescription": "Gérer les nœuds pour étendre votre connectivité réseau",
    "remoteExitNodes": "Nœuds",
    "searchRemoteExitNodes": "Rechercher des nœuds...",
    "remoteExitNodeAdd": "Ajouter un noeud",
    "remoteExitNodeErrorDelete": "Erreur lors de la suppression du noeud",
-    "remoteExitNodeQuestionRemove": "Êtes-vous sûr de vouloir supprimer le noeud de l'organisation ?",
+    "remoteExitNodeQuestionRemove": "Êtes-vous sûr de vouloir supprimer le noeud {selectedNode} de l'organisation ?",
    "remoteExitNodeMessageRemove": "Une fois supprimé, le noeud ne sera plus accessible.",
+    "remoteExitNodeMessageConfirm": "Pour confirmer, veuillez saisir le nom du noeud ci-dessous.",
    "remoteExitNodeConfirmDelete": "Confirmer la suppression du noeud",
    "remoteExitNodeDelete": "Supprimer le noeud",
-    "sidebarRemoteExitNodes": "Nœuds distants",
+    "sidebarRemoteExitNodes": "Nœuds",
    "remoteExitNodeCreate": {
        "title": "Créer un noeud",
        "description": "Créer un nouveau nœud pour étendre votre connectivité réseau",
@@ -1730,166 +1723,5 @@
    "authPageUpdated": "Page d\u000027authentification mise à jour avec succès",
    "healthCheckNotAvailable": "Locale",
    "rewritePath": "Réécrire le chemin",
-    "rewritePathDescription": "Réécrivez éventuellement le chemin avant de le transmettre à la cible.",
-    "continueToApplication": "Continuer vers l'application",
-    "checkingInvite": "Vérification de l'invitation",
-    "setResourceHeaderAuth": "Définir l\\'authentification d\\'en-tête de la ressource",
-    "resourceHeaderAuthRemove": "Supprimer l'authentification de l'en-tête",
-    "resourceHeaderAuthRemoveDescription": "Authentification de l'en-tête supprimée avec succès.",
-    "resourceErrorHeaderAuthRemove": "Échec de la suppression de l'authentification de l'en-tête",
-    "resourceErrorHeaderAuthRemoveDescription": "Impossible de supprimer l'authentification de l'en-tête de la ressource.",
-    "resourceHeaderAuthProtectionEnabled": "Authentification de l'en-tête activée",
-    "resourceHeaderAuthProtectionDisabled": "L'authentification de l'en-tête est désactivée",
-    "headerAuthRemove": "Supprimer l'authentification de l'en-tête",
-    "headerAuthAdd": "Ajouter l'authentification de l'en-tête",
-    "resourceErrorHeaderAuthSetup": "Impossible de définir l'authentification de l'en-tête",
-    "resourceErrorHeaderAuthSetupDescription": "Impossible de définir l'authentification de l'en-tête pour la ressource.",
-    "resourceHeaderAuthSetup": "Authentification de l'en-tête définie avec succès",
-    "resourceHeaderAuthSetupDescription": "L'authentification de l'en-tête a été définie avec succès.",
-    "resourceHeaderAuthSetupTitle": "Authentification de l'en-tête",
-    "resourceHeaderAuthSetupTitleDescription": "Définissez les identifiants d'authentification de base (nom d'utilisateur et mot de passe) pour protéger cette ressource avec l'authentification de l'en-tête HTTP. Accédez-y en utilisant le format https://username:password@resource.example.com",
-    "resourceHeaderAuthSubmit": "Authentification de l'en-tête",
-    "actionSetResourceHeaderAuth": "Authentification de l'en-tête",
-    "enterpriseEdition": "Édition Entreprise",
-    "unlicensed": "Sans licence",
-    "beta": "Bêta",
-    "manageClients": "Gérer les clients",
-    "manageClientsDescription": "Les clients sont des appareils qui peuvent se connecter à vos sites",
-    "licenseTableValidUntil": "Valable jusqu'au",
-    "saasLicenseKeysSettingsTitle": "Licences Entreprise",
-    "saasLicenseKeysSettingsDescription": "Générer et gérer les clés de licence Entreprise pour les instances Pangolin auto-hébergées",
-    "sidebarEnterpriseLicenses": "Licences",
-    "generateLicenseKey": "Générer une clé de licence",
-    "generateLicenseKeyForm": {
-        "validation": {
-            "emailRequired": "Veuillez entrer une adresse e-mail valide",
-            "useCaseTypeRequired": "Veuillez sélectionner un type de cas d'utilisation",
-            "firstNameRequired": "Le prénom est requis",
-            "lastNameRequired": "Le nom est requis",
-            "primaryUseRequired": "Veuillez décrire votre utilisation principale",
-            "jobTitleRequiredBusiness": "Le titre du poste est requis pour un usage professionnel",
-            "industryRequiredBusiness": "L'industrie est requise pour une utilisation commerciale",
-            "stateProvinceRegionRequired": "État/Province/Région est obligatoire",
-            "postalZipCodeRequired": "Le code postal est requis",
-            "companyNameRequiredBusiness": "Le nom de la société est requis pour une utilisation commerciale",
-            "countryOfResidenceRequiredBusiness": "Le pays de résidence est requis pour un usage professionnel",
-            "countryRequiredPersonal": "Le pays est requis pour un usage personnel",
-            "agreeToTermsRequired": "Vous devez accepter les conditions",
-            "complianceConfirmationRequired": "Vous devez confirmer le respect de la licence commerciale Fossorial"
-        },
-        "useCaseOptions": {
-            "personal": {
-                "title": "Utilisation personnelle",
-                "description": "Pour une utilisation individuelle et non commerciale telle que l'apprentissage, les projets personnels ou l'expérimentation."
-            },
-            "business": {
-                "title": "Utilisation de l'entreprise",
-                "description": "Pour utilisation au sein d’organisations, d’entreprises ou d’activités commerciales ou génératrices de revenus."
-            }
-        },
-        "steps": {
-            "emailLicenseType": {
-                "title": "Email & Type de licence",
-                "description": "Entrez votre adresse e-mail et choisissez votre type de licence"
-            },
-            "personalInformation": {
-                "title": "Informations personnelles",
-                "description": "Parlez-nous de vous-même"
-            },
-            "contactInformation": {
-                "title": "Coordonnées",
-                "description": "Vos coordonnées"
-            },
-            "termsGenerate": {
-                "title": "Termes & Générer",
-                "description": "Examinez et acceptez les conditions pour générer votre licence"
-            }
-        },
-        "alerts": {
-            "commercialUseDisclosure": {
-                "title": "Divulgation d'utilisation",
-                "description": "Sélectionnez le niveau de licence qui correspond exactement à votre utilisation prévue. La Licence Personnelle autorise l'utilisation libre du Logiciel pour des activités commerciales individuelles, non commerciales ou à petite échelle avec un revenu annuel brut inférieur à 100 000 USD. Toute utilisation au-delà de ces limites — y compris l'utilisation au sein d'une entreprise, d'une organisation, ou tout autre environnement générateur de revenus — nécessite une licence d’entreprise valide et le paiement des droits de licence applicables. Tous les utilisateurs, qu'ils soient personnels ou d'entreprise, doivent se conformer aux conditions de licence commerciale Fossorial."
-            },
-            "trialPeriodInformation": {
-                "title": "Informations sur la période d'essai",
-                "description": "Cette clé de licence permet aux entreprises de bénéficier de fonctionnalités pour une période d'évaluation de 7 jours. L'accès continu aux fonctionnalités payantes au-delà de la période d'évaluation nécessite une activation sous une licence personnelle ou d'entreprise valide. Pour une licence d'entreprise, contactez sales@pangolin.net."
-            }
-        },
-        "form": {
-            "useCaseQuestion": "Utilisez-vous Pangolin à des fins personnelles ou professionnelles?",
-            "firstName": "Prénom",
-            "lastName": "Nom de famille",
-            "jobTitle": "Titre du poste",
-            "primaryUseQuestion": "À quoi comptez-vous avant tout utiliser le Pangolin ?",
-            "industryQuestion": "Quelle est votre industrie?",
-            "prospectiveUsersQuestion": "Combien d'utilisateurs vous attendez-vous à avoir ?",
-            "prospectiveSitesQuestion": "Combien de sites potentiels (tunnels) voulez-vous avoir?",
-            "companyName": "Nom de la société",
-            "countryOfResidence": "Pays de résidence",
-            "stateProvinceRegion": "Etat / Province / Région",
-            "postalZipCode": "Code postal / ZIP",
-            "companyWebsite": "Site web de l'entreprise",
-            "companyPhoneNumber": "Numéro de téléphone de la société",
-            "country": "Pays",
-            "phoneNumberOptional": "Numéro de téléphone (facultatif)",
-            "complianceConfirmation": "Je confirme que les renseignements que j'ai fournis sont exacts et que je suis en conformité avec la licence commerciale Fossorial. Signaler des informations inexactes ou une mauvaise identification de l'utilisation du produit constitue une violation de la licence et peut entraîner la révocation de votre clé."
-        },
-        "buttons": {
-            "close": "Fermer",
-            "previous": "Précédent",
-            "next": "Suivant",
-            "generateLicenseKey": "Générer une clé de licence"
-        },
-        "toasts": {
-            "success": {
-                "title": "Clé de licence générée avec succès",
-                "description": "Votre clé de licence a été générée et est prête à l'emploi."
-            },
-            "error": {
-                "title": "Impossible de générer la clé de licence",
-                "description": "Une erreur s'est produite lors de la génération de la clé de licence."
-            }
-        }
-    },
-    "priority": "Priorité",
-    "priorityDescription": "Les routes de haute priorité sont évaluées en premier. La priorité = 100 signifie l'ordre automatique (décision du système). Utilisez un autre nombre pour imposer la priorité manuelle.",
-    "instanceName": "Nom de l'instance",
-    "pathMatchModalTitle": "Configurer le chemin correspondant",
-    "pathMatchModalDescription": "Définissez comment les requêtes entrantes doivent être trouvées en fonction de leur chemin.",
-    "pathMatchType": "Type de correspondance",
-    "pathMatchPrefix": "Préfixe",
-    "pathMatchExact": "Exactement",
-    "pathMatchRegex": "Regex",
-    "pathMatchValue": "Valeur du chemin",
-    "clear": "Nettoyer",
-    "saveChanges": "Enregistrer les modifications",
-    "pathMatchRegexPlaceholder": "^/api/.*",
-    "pathMatchDefaultPlaceholder": "/chemin d'accès",
-    "pathMatchPrefixHelp": "Exemple: /api correspond à /api, /api/users, etc.",
-    "pathMatchExactHelp": "Exemple: /api ne correspond qu'à /api",
-    "pathMatchRegexHelp": "Exemple: ^/api/.* correspond à /api/anything",
-    "pathRewriteModalTitle": "Configurer la réécriture du chemin",
-    "pathRewriteModalDescription": "Transformez le chemin correspondant avant de l'envoyer à la cible.",
-    "pathRewriteType": "Type de réécriture",
-    "pathRewritePrefixOption": "Préfixe - Remplacer le préfixe",
-    "pathRewriteExactOption": "Exactement - Remplacer le chemin entier",
-    "pathRewriteRegexOption": "Regex - Remplacement de patron",
-    "pathRewriteStripPrefixOption": "Retirer le préfixe - Supprimer le préfixe",
-    "pathRewriteValue": "Réécrire la valeur",
-    "pathRewriteRegexPlaceholder": "/fr/new/$1",
-    "pathRewriteDefaultPlaceholder": "/fr/new-path",
-    "pathRewritePrefixHelp": "Remplacer le préfixe correspondant par cette valeur",
-    "pathRewriteExactHelp": "Remplacer le chemin entier par cette valeur lorsque le chemin correspond exactement",
-    "pathRewriteRegexHelp": "Utiliser des groupes de capture comme $1, $2 pour le remplacement",
-    "pathRewriteStripPrefixHelp": "Laisser vide pour supprimer le préfixe ou fournir un nouveau préfixe",
-    "pathRewritePrefix": "Préfixe",
-    "pathRewriteExact": "Exactement",
-    "pathRewriteRegex": "Regex",
-    "pathRewriteStrip": "Retirer",
-    "pathRewriteStripLabel": "bande",
-    "sidebarEnableEnterpriseLicense": "Activer la licence Entreprise",
-    "cannotbeUndone": "Cela ne peut pas être annulé.",
-    "toConfirm": "pour confirmer",
-    "deleteClientQuestion": "Êtes-vous sûr de vouloir supprimer le client du site et de l'organisation ?",
-    "clientMessageRemove": "Une fois supprimé, le client ne pourra plus se connecter au site."
+    "rewritePathDescription": "Réécrivez éventuellement le chemin avant de le transmettre à la cible."
 }
--- a/messages/it-IT.json
+++ b/messages/it-IT.json
@@ -47,8 +47,9 @@
    "edit": "Modifica",
    "siteConfirmDelete": "Conferma Eliminazione Sito",
    "siteDelete": "Elimina Sito",
-    "siteMessageRemove": "Una volta rimosso il sito non sarà più accessibile. Tutti gli obiettivi associati al sito verranno rimossi.",
-    "siteQuestionRemove": "Sei sicuro di voler rimuovere il sito dall'organizzazione?",
+    "siteMessageRemove": "Una volta rimosso, il sito non sarà più accessibile. Anche tutte le risorse e gli obiettivi associati al sito saranno rimossi.",
+    "siteMessageConfirm": "Per confermare, digita il nome del sito qui sotto.",
+    "siteQuestionRemove": "Sei sicuro di voler rimuovere il sito {selectedSite} dall'organizzazione?",
    "siteManageSites": "Gestisci Siti",
    "siteDescription": "Consenti la connettività alla rete attraverso tunnel sicuri",
    "siteCreate": "Crea Sito",
@@ -95,7 +96,7 @@
    "siteWgDescription": "Usa qualsiasi client WireGuard per stabilire un tunnel. Impostazione NAT manuale richiesta.",
    "siteWgDescriptionSaas": "Usa qualsiasi client WireGuard per stabilire un tunnel. Impostazione NAT manuale richiesta. FUNZIONA SOLO SU NODI AUTO-OSPITATI",
    "siteLocalDescription": "Solo risorse locali. Nessun tunneling.",
-    "siteLocalDescriptionSaas": "Solo risorse locali. Nessun tunneling. Disponibile solo su nodi remoti.",
+    "siteLocalDescriptionSaas": "Solo risorse locali. Nessun tunneling. FUNZIONA SOLO SU NODI AUTO-OSPITATI",
    "siteSeeAll": "Vedi Tutti I Siti",
    "siteTunnelDescription": "Determina come vuoi connetterti al tuo sito",
    "siteNewtCredentials": "Credenziali Newt",
@@ -153,7 +154,8 @@
    "protected": "Protetto",
    "notProtected": "Non Protetto",
    "resourceMessageRemove": "Una volta rimossa, la risorsa non sarà più accessibile. Tutti gli obiettivi associati alla risorsa saranno rimossi.",
-    "resourceQuestionRemove": "Sei sicuro di voler rimuovere la risorsa dall'organizzazione?",
+    "resourceMessageConfirm": "Per confermare, digita il nome della risorsa qui sotto.",
+    "resourceQuestionRemove": "Sei sicuro di voler rimuovere la risorsa {selectedResource} dall'organizzazione?",
    "resourceHTTP": "Risorsa HTTPS",
    "resourceHTTPDescription": "Richieste proxy alla tua app tramite HTTPS utilizzando un sottodominio o un dominio di base.",
    "resourceRaw": "Risorsa Raw TCP/UDP",
@@ -218,7 +220,7 @@
    "orgDeleteConfirm": "Conferma Elimina Organizzazione",
    "orgMessageRemove": "Questa azione è irreversibile e cancellerà tutti i dati associati.",
    "orgMessageConfirm": "Per confermare, digita il nome dell'organizzazione qui sotto.",
-    "orgQuestionRemove": "Sei sicuro di voler rimuovere l'organizzazione?",
+    "orgQuestionRemove": "Sei sicuro di voler rimuovere l'organizzazione {selectedOrg}?",
    "orgUpdated": "Organizzazione aggiornata",
    "orgUpdatedDescription": "L'organizzazione è stata aggiornata.",
    "orgErrorUpdate": "Impossibile aggiornare l'organizzazione",
@@ -285,8 +287,9 @@
    "apiKeysAdd": "Genera Chiave API",
    "apiKeysErrorDelete": "Errore nell'eliminazione della chiave API",
    "apiKeysErrorDeleteMessage": "Errore nell'eliminazione della chiave API",
-    "apiKeysQuestionRemove": "Sei sicuro di voler rimuovere la chiave API dall'organizzazione?",
+    "apiKeysQuestionRemove": "Sei sicuro di voler rimuovere la chiave API {selectedApiKey} dall'organizzazione?",
    "apiKeysMessageRemove": "Una volta rimossa, la chiave API non potrà più essere utilizzata.",
+    "apiKeysMessageConfirm": "Per confermare, digita il nome della chiave API qui sotto.",
    "apiKeysDeleteConfirm": "Conferma Eliminazione Chiave API",
    "apiKeysDelete": "Elimina Chiave API",
    "apiKeysManage": "Gestisci Chiavi API",
@@ -302,7 +305,8 @@
    "userDeleteConfirm": "Conferma Eliminazione Utente",
    "userDeleteServer": "Elimina utente dal server",
    "userMessageRemove": "L'utente verrà rimosso da tutte le organizzazioni ed essere completamente rimosso dal server.",
-    "userQuestionRemove": "Sei sicuro di voler eliminare definitivamente l'utente dal server?",
+    "userMessageConfirm": "Per confermare, digita il nome dell'utente qui sotto.",
+    "userQuestionRemove": "Sei sicuro di voler eliminare definitivamente {selectedUser} dal server?",
    "licenseKey": "Chiave Di Licenza",
    "valid": "Valido",
    "numberOfSites": "Numero di siti",
@@ -335,7 +339,7 @@
    "fossorialLicense": "Visualizza I Termini Di Licenza Commerciale Fossorial E Abbonamento",
    "licenseMessageRemove": "Questo rimuoverà la chiave di licenza e tutti i permessi associati da essa concessi.",
    "licenseMessageConfirm": "Per confermare, digitare la chiave di licenza qui sotto.",
-    "licenseQuestionRemove": "Sei sicuro di voler eliminare la chiave di licenza?",
+    "licenseQuestionRemove": "Sei sicuro di voler eliminare la chiave di licenza {selectedKey}?",
    "licenseKeyDelete": "Elimina Chiave Di Licenza",
    "licenseKeyDeleteConfirm": "Conferma Elimina Chiave Di Licenza",
    "licenseTitle": "Gestisci Stato Licenza",
@@ -368,7 +372,7 @@
    "inviteRemoveErrorDescription": "Si è verificato un errore durante la rimozione dell'invito.",
    "inviteRemoved": "Invito rimosso",
    "inviteRemovedDescription": "L'invito per {email} è stato rimosso.",
-    "inviteQuestionRemove": "Sei sicuro di voler rimuovere l'invito?",
+    "inviteQuestionRemove": "Sei sicuro di voler rimuovere l'invito {email}?",
    "inviteMessageRemove": "Una volta rimosso, questo invito non sarà più valido. Puoi sempre reinvitare l'utente in seguito.",
    "inviteMessageConfirm": "Per confermare, digita l'indirizzo email dell'invito qui sotto.",
    "inviteQuestionRegenerate": "Sei sicuro di voler rigenerare l'invito {email}? Questo revocherà l'invito precedente.",
@@ -394,8 +398,9 @@
    "userErrorOrgRemoveDescription": "Si è verificato un errore durante la rimozione dell'utente.",
    "userOrgRemoved": "Utente rimosso",
    "userOrgRemovedDescription": "L'utente {email} è stato rimosso dall'organizzazione.",
-    "userQuestionOrgRemove": "Sei sicuro di voler rimuovere questo utente dall'organizzazione?",
+    "userQuestionOrgRemove": "Sei sicuro di voler rimuovere {email} dall'organizzazione?",
    "userMessageOrgRemove": "Una volta rimosso, questo utente non avrà più accesso all'organizzazione. Puoi sempre reinvitarlo in seguito, ma dovrà accettare nuovamente l'invito.",
+    "userMessageOrgConfirm": "Per confermare, digita il nome dell'utente qui sotto.",
    "userRemoveOrgConfirm": "Conferma Rimozione Utente",
    "userRemoveOrg": "Rimuovi Utente dall'Organizzazione",
    "users": "Utenti",
@@ -463,10 +468,7 @@
    "createdAt": "Creato Il",
    "proxyErrorInvalidHeader": "Valore dell'intestazione Host personalizzata non valido. Usa il formato nome dominio o salva vuoto per rimuovere l'intestazione Host personalizzata.",
    "proxyErrorTls": "Nome Server TLS non valido. Usa il formato nome dominio o salva vuoto per rimuovere il Nome Server TLS.",
-    "proxyEnableSSL": "Abilita SSL",
-    "proxyEnableSSLDescription": "Abilita la crittografia SSL/TLS per connessioni HTTPS sicure ai tuoi obiettivi.",
-    "target": "Target",
-    "configureTarget": "Configura Obiettivi",
+    "proxyEnableSSL": "Abilita SSL (https)",
    "targetErrorFetch": "Impossibile recuperare i target",
    "targetErrorFetchDescription": "Si è verificato un errore durante il recupero dei target",
    "siteErrorFetch": "Impossibile recuperare la risorsa",
@@ -493,7 +495,7 @@
    "targetTlsSettings": "Configurazione Connessione Sicura",
    "targetTlsSettingsDescription": "Configura le impostazioni SSL/TLS per la tua risorsa",
    "targetTlsSettingsAdvanced": "Impostazioni TLS Avanzate",
-    "targetTlsSni": "Nome Server Tls",
+    "targetTlsSni": "Nome Server TLS (SNI)",
    "targetTlsSniDescription": "Il Nome Server TLS da usare per SNI. Lascia vuoto per usare quello predefinito.",
    "targetTlsSubmit": "Salva Impostazioni",
    "targets": "Configurazione Target",
@@ -502,21 +504,9 @@
    "targetStickySessionsDescription": "Mantieni le connessioni sullo stesso target backend per l'intera sessione.",
    "methodSelect": "Seleziona metodo",
    "targetSubmit": "Aggiungi Target",
-    "targetNoOne": "Questa risorsa non ha bersagli. Aggiungi un obiettivo per configurare dove inviare le richieste al tuo backend.",
+    "targetNoOne": "Nessun target. Aggiungi un target usando il modulo.",
    "targetNoOneDescription": "L'aggiunta di più di un target abiliterà il bilanciamento del carico.",
    "targetsSubmit": "Salva Target",
-    "addTarget": "Aggiungi Target",
-    "targetErrorInvalidIp": "Indirizzo IP non valido",
-    "targetErrorInvalidIpDescription": "Inserisci un indirizzo IP o un hostname valido",
-    "targetErrorInvalidPort": "Porta non valida",
-    "targetErrorInvalidPortDescription": "Inserisci un numero di porta valido",
-    "targetErrorNoSite": "Nessun sito selezionato",
-    "targetErrorNoSiteDescription": "Si prega di selezionare un sito per l'obiettivo",
-    "targetCreated": "Destinazione creata",
-    "targetCreatedDescription": "L'obiettivo è stato creato con successo",
-    "targetErrorCreate": "Impossibile creare l'obiettivo",
-    "targetErrorCreateDescription": "Si è verificato un errore durante la creazione del target",
-    "save": "Salva",
    "proxyAdditional": "Impostazioni Proxy Aggiuntive",
    "proxyAdditionalDescription": "Configura come la tua risorsa gestisce le impostazioni proxy",
    "proxyCustomHeader": "Intestazione Host Personalizzata",
@@ -725,7 +715,7 @@
    "pangolinServerAdmin": "Server Admin - Pangolina",
    "licenseTierProfessional": "Licenza Professional",
    "licenseTierEnterprise": "Licenza Enterprise",
-    "licenseTierPersonal": "Licenza Personale",
+    "licenseTierCommercial": "Licenza Commerciale",
    "licensed": "Con Licenza",
    "yes": "Sì",
    "no": "No",
@@ -737,7 +727,7 @@
    "idpManageDescription": "Visualizza e gestisci i provider di identità nel sistema",
    "idpDeletedDescription": "Provider di identità eliminato con successo",
    "idpOidc": "OAuth2/OIDC",
-    "idpQuestionRemove": "Sei sicuro di voler eliminare definitivamente il provider di identità?",
+    "idpQuestionRemove": "Sei sicuro di voler eliminare definitivamente il provider di identità {name}?",
    "idpMessageRemove": "Questo rimuoverà il provider di identità e tutte le configurazioni associate. Gli utenti che si autenticano tramite questo provider non potranno più accedere.",
    "idpMessageConfirm": "Per confermare, digita il nome del provider di identità qui sotto.",
    "idpConfirmDelete": "Conferma Eliminazione Provider di Identità",
@@ -760,7 +750,7 @@
    "idpDisplayName": "Un nome visualizzato per questo provider di identità",
    "idpAutoProvisionUsers": "Provisioning Automatico Utenti",
    "idpAutoProvisionUsersDescription": "Quando abilitato, gli utenti verranno creati automaticamente nel sistema al primo accesso con la possibilità di mappare gli utenti a ruoli e organizzazioni.",
-    "licenseBadge": "EE",
+    "licenseBadge": "Professionista",
    "idpType": "Tipo di Provider",
    "idpTypeDescription": "Seleziona il tipo di provider di identità che desideri configurare",
    "idpOidcConfigure": "Configurazione OAuth2/OIDC",
@@ -1094,6 +1084,7 @@
    "navbar": "Menu di Navigazione",
    "navbarDescription": "Menu di navigazione principale dell'applicazione",
    "navbarDocsLink": "Documentazione",
+    "commercialEdition": "Edizione Commerciale",
    "otpErrorEnable": "Impossibile abilitare 2FA",
    "otpErrorEnableDescription": "Si è verificato un errore durante l'abilitazione di 2FA",
    "otpSetupCheckCode": "Inserisci un codice a 6 cifre",
@@ -1149,7 +1140,7 @@
    "sidebarAllUsers": "Tutti Gli Utenti",
    "sidebarIdentityProviders": "Fornitori Di Identità",
    "sidebarLicense": "Licenza",
-    "sidebarClients": "Client",
+    "sidebarClients": "Clienti (Beta)",
    "sidebarDomains": "Domini",
    "enableDockerSocket": "Abilita Progetto Docker",
    "enableDockerSocketDescription": "Abilita la raschiatura dell'etichetta Docker Socket per le etichette dei progetti. Il percorso del socket deve essere fornito a Newt.",
@@ -1206,8 +1197,9 @@
    "domainCreate": "Crea Dominio",
    "domainCreatedDescription": "Dominio creato con successo",
    "domainDeletedDescription": "Dominio eliminato con successo",
-    "domainQuestionRemove": "Sei sicuro di voler rimuovere il dominio dal tuo account?",
+    "domainQuestionRemove": "Sei sicuro di voler rimuovere il dominio {domain} dal tuo account?",
    "domainMessageRemove": "Una volta rimosso, il dominio non sarà più associato al tuo account.",
+    "domainMessageConfirm": "Per confermare, digita il nome del dominio qui sotto.",
    "domainConfirmDelete": "Conferma Eliminazione Dominio",
    "domainDelete": "Elimina Dominio",
    "domain": "Dominio",
@@ -1274,7 +1266,7 @@
    "billingFreeTier": "Piano Gratuito",
    "billingWarningOverLimit": "Avviso: Hai superato uno o più limiti di utilizzo. I tuoi siti non si connetteranno finché non modifichi il tuo abbonamento o non adegui il tuo utilizzo.",
    "billingUsageLimitsOverview": "Panoramica dei Limiti di Utilizzo",
-    "billingMonitorUsage": "Monitora il tuo utilizzo rispetto ai limiti configurati. Se hai bisogno di aumentare i limiti, contattaci all'indirizzo support@pangolin.net.",
+    "billingMonitorUsage": "Monitora il tuo utilizzo rispetto ai limiti configurati. Se hai bisogno di aumentare i limiti, contattaci all'indirizzo support@fossorial.io.",
    "billingDataUsage": "Utilizzo dei Dati",
    "billingOnlineTime": "Tempo Online del Sito",
    "billingUsers": "Utenti Attivi",
@@ -1341,6 +1333,7 @@
    "twoFactorRequired": "È richiesta l'autenticazione a due fattori per registrare una chiave di sicurezza.",
    "twoFactor": "Autenticazione a Due Fattori",
    "adminEnabled2FaOnYourAccount": "Il tuo amministratore ha abilitato l'autenticazione a due fattori per {email}. Completa il processo di configurazione per continuare.",
+    "continueToApplication": "Continua all'Applicazione",
    "securityKeyAdd": "Aggiungi Chiave di Sicurezza",
    "securityKeyRegisterTitle": "Registra Nuova Chiave di Sicurezza",
    "securityKeyRegisterDescription": "Collega la tua chiave di sicurezza e inserisci un nome per identificarla",
@@ -1418,7 +1411,6 @@
    "externalProxyEnabled": "Proxy Esterno Abilitato",
    "addNewTarget": "Aggiungi Nuovo Target",
    "targetsList": "Elenco dei Target",
-    "advancedMode": "Modalità Avanzata",
    "targetErrorDuplicateTargetFound": "Target duplicato trovato",
    "healthCheckHealthy": "Sano",
    "healthCheckUnhealthy": "Non Sano",
@@ -1551,17 +1543,18 @@
    "autoLoginError": "Errore di Accesso Automatico",
    "autoLoginErrorNoRedirectUrl": "Nessun URL di reindirizzamento ricevuto dal provider di identità.",
    "autoLoginErrorGeneratingUrl": "Impossibile generare l'URL di autenticazione.",
-    "remoteExitNodeManageRemoteExitNodes": "Nodi Remoti",
-    "remoteExitNodeDescription": "Self-host uno o più nodi remoti per estendere la connettività di rete e ridurre la dipendenza dal cloud",
+    "remoteExitNodeManageRemoteExitNodes": "Gestisci Self-Hosted",
+    "remoteExitNodeDescription": "Gestisci i nodi per estendere la connettività di rete",
    "remoteExitNodes": "Nodi",
    "searchRemoteExitNodes": "Cerca nodi...",
    "remoteExitNodeAdd": "Aggiungi Nodo",
    "remoteExitNodeErrorDelete": "Errore nell'eliminare il nodo",
-    "remoteExitNodeQuestionRemove": "Sei sicuro di voler rimuovere il nodo dall'organizzazione?",
+    "remoteExitNodeQuestionRemove": "Sei sicuro di voler rimuovere il nodo {selectedNode} dall'organizzazione?",
    "remoteExitNodeMessageRemove": "Una volta rimosso, il nodo non sarà più accessibile.",
+    "remoteExitNodeMessageConfirm": "Per confermare, digita il nome del nodo qui sotto.",
    "remoteExitNodeConfirmDelete": "Conferma Eliminazione Nodo",
    "remoteExitNodeDelete": "Elimina Nodo",
-    "sidebarRemoteExitNodes": "Nodi Remoti",
+    "sidebarRemoteExitNodes": "Nodi",
    "remoteExitNodeCreate": {
        "title": "Crea Nodo",
        "description": "Crea un nuovo nodo per estendere la connettività di rete",
@@ -1730,166 +1723,5 @@
    "authPageUpdated": "Pagina di autenticazione aggiornata con successo",
    "healthCheckNotAvailable": "Locale",
    "rewritePath": "Riscrivi percorso",
-    "rewritePathDescription": "Riscrivi eventualmente il percorso prima di inoltrarlo al target.",
-    "continueToApplication": "Continua con l'applicazione",
-    "checkingInvite": "Controllo Invito",
-    "setResourceHeaderAuth": "setResourceHeaderAuth",
-    "resourceHeaderAuthRemove": "Rimuovi Autenticazione Intestazione",
-    "resourceHeaderAuthRemoveDescription": "Autenticazione intestazione rimossa con successo.",
-    "resourceErrorHeaderAuthRemove": "Impossibile rimuovere l'autenticazione dell'intestazione",
-    "resourceErrorHeaderAuthRemoveDescription": "Impossibile rimuovere l'autenticazione dell'intestazione per la risorsa.",
-    "resourceHeaderAuthProtectionEnabled": "Autenticazione Intestazione Abilitata",
-    "resourceHeaderAuthProtectionDisabled": "Autenticazione Intestazione Disabilitata",
-    "headerAuthRemove": "Rimuovi Autenticazione Intestazione",
-    "headerAuthAdd": "Aggiungi Autenticazione Intestazione",
-    "resourceErrorHeaderAuthSetup": "Impossibile impostare l'autenticazione dell'intestazione",
-    "resourceErrorHeaderAuthSetupDescription": "Impossibile impostare l'autenticazione dell'intestazione per la risorsa.",
-    "resourceHeaderAuthSetup": "Autenticazione intestazione impostata con successo",
-    "resourceHeaderAuthSetupDescription": "L'autenticazione dell'intestazione è stata impostata correttamente.",
-    "resourceHeaderAuthSetupTitle": "Imposta Autenticazione Intestazione",
-    "resourceHeaderAuthSetupTitleDescription": "Imposta le credenziali di autenticazione di base (nome utente e password) per proteggere questa risorsa con Autenticazione intestazione HTTP. Accedi usando il formato https://username:password@resource.example.com",
-    "resourceHeaderAuthSubmit": "Imposta Autenticazione Intestazione",
-    "actionSetResourceHeaderAuth": "Imposta Autenticazione Intestazione",
-    "enterpriseEdition": "Enterprise Edition",
-    "unlicensed": "Senza Licenza",
-    "beta": "Beta",
-    "manageClients": "Gestisci Clienti",
-    "manageClientsDescription": "I client sono dispositivi che possono connettersi ai tuoi siti",
-    "licenseTableValidUntil": "Valido Fino A",
-    "saasLicenseKeysSettingsTitle": "Licenze Enterprise",
-    "saasLicenseKeysSettingsDescription": "Genera e gestisci le chiavi di licenza Enterprise per le istanze di Pangolin self-hosted",
-    "sidebarEnterpriseLicenses": "Licenze",
-    "generateLicenseKey": "Genera Chiave Di Licenza",
-    "generateLicenseKeyForm": {
-        "validation": {
-            "emailRequired": "Inserisci un indirizzo email valido",
-            "useCaseTypeRequired": "Si prega di selezionare un tipo di caso di utilizzo",
-            "firstNameRequired": "Il nome è obbligatorio",
-            "lastNameRequired": "Il cognome è obbligatorio",
-            "primaryUseRequired": "Descrivi il tuo uso primario",
-            "jobTitleRequiredBusiness": "Il titolo di lavoro è richiesto per l'uso aziendale",
-            "industryRequiredBusiness": "L'industria è richiesta per l'uso commerciale",
-            "stateProvinceRegionRequired": "Stato/Provincia/Regione è richiesta",
-            "postalZipCodeRequired": "Codice postale/CAP obbligatorio",
-            "companyNameRequiredBusiness": "Il nome dell'azienda è richiesto per l'uso aziendale",
-            "countryOfResidenceRequiredBusiness": "Paese di residenza è richiesto per uso professionale",
-            "countryRequiredPersonal": "Il paese è richiesto per uso personale",
-            "agreeToTermsRequired": "Devi accettare i termini",
-            "complianceConfirmationRequired": "È necessario confermare la conformità alla licenza commerciale Fossorial"
-        },
-        "useCaseOptions": {
-            "personal": {
-                "title": "Uso Personale",
-                "description": "Per uso individuale, non commerciale, come l'apprendimento, progetti personali o sperimentazione."
-            },
-            "business": {
-                "title": "Uso Aziendale",
-                "description": "Da utilizzare all'interno di organizzazioni, aziende o attività commerciali o generatrici di entrate."
-            }
-        },
-        "steps": {
-            "emailLicenseType": {
-                "title": "Email & Tipo Di Licenza",
-                "description": "Inserisci la tua email e scegli il tipo di licenza"
-            },
-            "personalInformation": {
-                "title": "Informazioni Personali",
-                "description": "Raccontaci di te"
-            },
-            "contactInformation": {
-                "title": "Informazioni Di Contatto",
-                "description": "I tuoi dati di contatto"
-            },
-            "termsGenerate": {
-                "title": "Termini E Genera",
-                "description": "Controlla e accetta i termini per generare la tua licenza"
-            }
-        },
-        "alerts": {
-            "commercialUseDisclosure": {
-                "title": "Trasparenza Di Utilizzo",
-                "description": "Seleziona il livello di licenza che rispecchia accuratamente il tuo utilizzo previsto. La Licenza Personale consente l'uso gratuito del Software per le attività commerciali individuali, non commerciali o su piccola scala con entrate lorde annue inferiori a $100.000 USD. Qualsiasi uso oltre questi limiti — compreso l'uso all'interno di un'azienda, organizzazione, o altro ambiente generatore di entrate — richiede una licenza Enterprise valida e il pagamento della tassa di licenza applicabile. Tutti gli utenti, siano essi personali o aziendali, devono rispettare i termini di licenza commerciale Fossorial."
-            },
-            "trialPeriodInformation": {
-                "title": "Informazioni Periodo Di Prova",
-                "description": "Questa chiave di licenza abilita le funzionalità Enterprise per un periodo di valutazione di 7 giorni. L'accesso continuo alle funzionalità a pagamento oltre il periodo di valutazione richiede l'attivazione con una licenza personale o Enterprise valida. Per la licenza Enterprise contatta sales@pangolin.net."
-            }
-        },
-        "form": {
-            "useCaseQuestion": "Stai usando Pangolin per uso personale o di affari?",
-            "firstName": "Nome",
-            "lastName": "Cognome",
-            "jobTitle": "Titolo Del Lavoro",
-            "primaryUseQuestion": "Per che cosa hai in primo luogo intenzione di usare Pangolin?",
-            "industryQuestion": "Qual è la sua industria?",
-            "prospectiveUsersQuestion": "Quanti potenziali utenti si aspettano di avere?",
-            "prospectiveSitesQuestion": "Quanti siti potenziali (gallerie) ci si aspetta di avere?",
-            "companyName": "Nome della società",
-            "countryOfResidence": "Paese di residenza",
-            "stateProvinceRegion": "Stato / Provincia / Regione",
-            "postalZipCode": "Codice Postale / Zip",
-            "companyWebsite": "Sito web dell'azienda",
-            "companyPhoneNumber": "Numero di telefono dell'azienda",
-            "country": "Paese",
-            "phoneNumberOptional": "Numero di telefono (facoltativo)",
-            "complianceConfirmation": "Confermo che le informazioni che ho fornito sono accurate e che sono in conformità con la Fossorial Commercial License. La segnalazione di informazioni inesatte o l'uso errato del prodotto è una violazione della licenza e può portare alla revoca della chiave."
-        },
-        "buttons": {
-            "close": "Chiudi",
-            "previous": "Precedente",
-            "next": "Successivo",
-            "generateLicenseKey": "Genera Chiave Di Licenza"
-        },
-        "toasts": {
-            "success": {
-                "title": "Chiave di licenza generata con successo",
-                "description": "La chiave di licenza è stata generata ed è pronta per l'uso."
-            },
-            "error": {
-                "title": "Impossibile generare la chiave di licenza",
-                "description": "Si è verificato un errore nella generazione della chiave di licenza."
-            }
-        }
-    },
-    "priority": "Priorità",
-    "priorityDescription": "I percorsi prioritari più alti sono valutati prima. Priorità = 100 significa ordinamento automatico (decidi di sistema). Usa un altro numero per applicare la priorità manuale.",
-    "instanceName": "Nome Istanza",
-    "pathMatchModalTitle": "Configura Corrispondenza Percorso",
-    "pathMatchModalDescription": "Impostare come le richieste in arrivo devono essere abbinate in base al loro percorso.",
-    "pathMatchType": "Tipo di Corrispondenza",
-    "pathMatchPrefix": "Prefisso",
-    "pathMatchExact": "Esatto",
-    "pathMatchRegex": "Regex",
-    "pathMatchValue": "Valore Percorso",
-    "clear": "Pulisci",
-    "saveChanges": "Salva Modifiche",
-    "pathMatchRegexPlaceholder": "^/api/.*",
-    "pathMatchDefaultPlaceholder": "/path",
-    "pathMatchPrefixHelp": "Esempio: /api corrisponde /api, /api/users etc.",
-    "pathMatchExactHelp": "Esempio: /api corrisponde solo /api",
-    "pathMatchRegexHelp": "Esempio: ^/api/.* corrisponde /api/anything",
-    "pathRewriteModalTitle": "Configura La Riscrittura Percorso",
-    "pathRewriteModalDescription": "Trasforma il percorso corrispondente prima di inoltrarlo al bersaglio.",
-    "pathRewriteType": "Tipo Di Riscrittura",
-    "pathRewritePrefixOption": "Prefisso - Sostituisci prefisso",
-    "pathRewriteExactOption": "Esatto - Sostituisci l'intero percorso",
-    "pathRewriteRegexOption": "Regex - Sostituzione modello",
-    "pathRewriteStripPrefixOption": "Prefisso striscia - Rimuovi prefisso",
-    "pathRewriteValue": "Riscrittura Valore",
-    "pathRewriteRegexPlaceholder": "/new/$1",
-    "pathRewriteDefaultPlaceholder": "/nuovo-percorso",
-    "pathRewritePrefixHelp": "Sostituisci il prefisso abbinato con questo valore",
-    "pathRewriteExactHelp": "Sostituisci l'intero percorso con questo valore quando il percorso corrisponde esattamente",
-    "pathRewriteRegexHelp": "Usa gruppi di acquisizione come $1, $2 per la sostituzione",
-    "pathRewriteStripPrefixHelp": "Lasciare vuoto per strisciare il prefisso o fornire un nuovo prefisso",
-    "pathRewritePrefix": "Prefisso",
-    "pathRewriteExact": "Esatto",
-    "pathRewriteRegex": "Regex",
-    "pathRewriteStrip": "Striscia",
-    "pathRewriteStripLabel": "striscia",
-    "sidebarEnableEnterpriseLicense": "Abilita Licenza Enterprise",
-    "cannotbeUndone": "Questo non può essere annullato.",
-    "toConfirm": "per confermare",
-    "deleteClientQuestion": "Sei sicuro di voler rimuovere il client dal sito e dall'organizzazione?",
-    "clientMessageRemove": "Una volta rimosso, il client non sarà più in grado di connettersi al sito."
+    "rewritePathDescription": "Riscrivi eventualmente il percorso prima di inoltrarlo al target."
 }
--- a/messages/ko-KR.json
+++ b/messages/ko-KR.json
@@ -47,8 +47,9 @@
    "edit": "편집",
    "siteConfirmDelete": "사이트 삭제 확인",
    "siteDelete": "사이트 삭제",
-    "siteMessageRemove": "삭제되면 사이트에 더 이상 액세스할 수 없습니다. 사이트와 연결된 모든 대상도 삭제됩니다.",
-    "siteQuestionRemove": "조직에서 사이트를 제거하시겠습니까?",
+    "siteMessageRemove": "제거되면 사이트에 더 이상 접근할 수 없습니다. 사이트와 관련된 모든 리소스와 대상도 제거됩니다.",
+    "siteMessageConfirm": "확인을 위해 아래에 사이트 이름을 입력해 주세요.",
+    "siteQuestionRemove": "조직에서 사이트 {selectedSite}를 제거하시겠습니까?",
    "siteManageSites": "사이트 관리",
    "siteDescription": "안전한 터널을 통해 네트워크에 연결할 수 있도록 허용",
    "siteCreate": "사이트 생성",
@@ -95,7 +96,7 @@
    "siteWgDescription": "모든 WireGuard 클라이언트를 사용하여 터널을 설정하세요. 수동 NAT 설정이 필요합니다.",
    "siteWgDescriptionSaas": "모든 WireGuard 클라이언트를 사용하여 터널을 설정하세요. 수동 NAT 설정이 필요합니다. 자체 호스팅 노드에서만 작동합니다.",
    "siteLocalDescription": "로컬 리소스만 사용 가능합니다. 터널링이 없습니다.",
-    "siteLocalDescriptionSaas": "로컬 리소스 전용. 터널링 금지. 원격 노드에서만 사용 가능합니다.",
+    "siteLocalDescriptionSaas": "로컬 리소스만. 터널링 없음. 자체 호스팅 노드에서만 작동합니다.",
    "siteSeeAll": "모든 사이트 보기",
    "siteTunnelDescription": "사이트에 연결하는 방법을 결정하세요",
    "siteNewtCredentials": "Newt 자격 증명",
@@ -153,7 +154,8 @@
    "protected": "보호됨",
    "notProtected": "보호되지 않음",
    "resourceMessageRemove": "제거되면 리소스에 더 이상 접근할 수 없습니다. 리소스와 연결된 모든 대상도 제거됩니다.",
-    "resourceQuestionRemove": "조직에서 리소스를 제거하시겠습니까?",
+    "resourceMessageConfirm": "확인을 위해 아래에 리소스의 이름을 입력하세요.",
+    "resourceQuestionRemove": "조직에서 리소스 {selectedResource}를 제거하시겠습니까?",
    "resourceHTTP": "HTTPS 리소스",
    "resourceHTTPDescription": "서브도메인 또는 기본 도메인을 사용하여 HTTPS를 통해 앱에 대한 요청을 프록시합니다.",
    "resourceRaw": "원시 TCP/UDP 리소스",
@@ -218,7 +220,7 @@
    "orgDeleteConfirm": "조직 삭제 확인",
    "orgMessageRemove": "이 작업은 되돌릴 수 없으며 모든 관련 데이터를 삭제합니다.",
    "orgMessageConfirm": "확인을 위해 아래에 조직 이름을 입력하십시오.",
-    "orgQuestionRemove": "조직을 삭제하시겠습니까?",
+    "orgQuestionRemove": "조직 {selectedOrg}을(를) 제거하시겠습니까?",
    "orgUpdated": "조직이 업데이트되었습니다.",
    "orgUpdatedDescription": "조직이 업데이트되었습니다.",
    "orgErrorUpdate": "조직 업데이트에 실패했습니다.",
@@ -285,8 +287,9 @@
    "apiKeysAdd": "API 키 생성",
    "apiKeysErrorDelete": "API 키 삭제 오류",
    "apiKeysErrorDeleteMessage": "API 키 삭제 오류",
-    "apiKeysQuestionRemove": "조직에서 API 키를 제거하시겠습니까?",
+    "apiKeysQuestionRemove": "조직에서 API 키 {selectedApiKey}를 제거하시겠습니까?",
    "apiKeysMessageRemove": "삭제되면 API 키를 더 이상 사용할 수 없습니다.",
+    "apiKeysMessageConfirm": "확인을 위해 아래에 API 키의 이름을 입력해 주세요.",
    "apiKeysDeleteConfirm": "API 키 삭제 확인",
    "apiKeysDelete": "API 키 삭제",
    "apiKeysManage": "API 키 관리",
@@ -302,7 +305,8 @@
    "userDeleteConfirm": "사용자 삭제 확인",
    "userDeleteServer": "서버에서 사용자 삭제",
    "userMessageRemove": "사용자가 모든 조직에서 제거되며 서버에서 완전히 삭제됩니다.",
-    "userQuestionRemove": "서버에서 사용자를 영구적으로 삭제하시겠습니까?",
+    "userMessageConfirm": "확인을 위해 아래에 사용자 이름을 입력하십시오.",
+    "userQuestionRemove": "정말로 {selectedUser}를 서버에서 영구적으로 삭제하시겠습니까?",
    "licenseKey": "라이센스 키",
    "valid": "유효",
    "numberOfSites": "사이트 수",
@@ -335,7 +339,7 @@
    "fossorialLicense": "Fossorial 상업 라이선스 및 구독 약관 보기",
    "licenseMessageRemove": "이 작업은 라이센스 키와 그에 의해 부여된 모든 관련 권한을 제거합니다.",
    "licenseMessageConfirm": "확인을 위해 아래에 라이센스 키를 입력하세요.",
-    "licenseQuestionRemove": "라이선스 키를 삭제하시겠습니까?",
+    "licenseQuestionRemove": "라이센스 키 {selectedKey}를 삭제하시겠습니까?",
    "licenseKeyDelete": "라이센스 키 삭제",
    "licenseKeyDeleteConfirm": "라이센스 키 삭제 확인",
    "licenseTitle": "라이선스 상태 관리",
@@ -368,7 +372,7 @@
    "inviteRemoveErrorDescription": "초대를 제거하는 동안 오류가 발생했습니다.",
    "inviteRemoved": "초대가 제거되었습니다.",
    "inviteRemovedDescription": "{email}에 대한 초대가 삭제되었습니다.",
-    "inviteQuestionRemove": "초대를 제거하시겠습니까?",
+    "inviteQuestionRemove": "초대 {email}를 제거하시겠습니까?",
    "inviteMessageRemove": "한 번 제거되면 이 초대는 더 이상 유효하지 않습니다. 나중에 사용자를 다시 초대할 수 있습니다.",
    "inviteMessageConfirm": "확인을 위해 아래 초대의 이메일 주소를 입력해 주세요.",
    "inviteQuestionRegenerate": "{email}에 대한 초대장을 다시 생성하시겠습니까? 이전 초대장은 취소됩니다.",
@@ -394,8 +398,9 @@
    "userErrorOrgRemoveDescription": "사용자를 제거하는 동안 오류가 발생했습니다.",
    "userOrgRemoved": "사용자가 제거되었습니다.",
    "userOrgRemovedDescription": "사용자 {email}가 조직에서 제거되었습니다.",
-    "userQuestionOrgRemove": "조직에서 이 사용자를 제거하시겠습니까?",
+    "userQuestionOrgRemove": "{email}을 조직에서 제거하시겠습니까?",
    "userMessageOrgRemove": "이 사용자가 제거되면 더 이상 조직에 접근할 수 없습니다. 나중에 다시 초대할 수 있지만, 초대를 다시 수락해야 합니다.",
+    "userMessageOrgConfirm": "확인을 위해 아래에 사용자 이름을 입력하세요.",
    "userRemoveOrgConfirm": "사용자 제거 확인",
    "userRemoveOrg": "조직에서 사용자 제거",
    "users": "사용자",
@@ -463,10 +468,7 @@
    "createdAt": "생성일",
    "proxyErrorInvalidHeader": "잘못된 사용자 정의 호스트 헤더 값입니다. 도메인 이름 형식을 사용하거나 사용자 정의 호스트 헤더를 해제하려면 비워 두십시오.",
    "proxyErrorTls": "유효하지 않은 TLS 서버 이름입니다. 도메인 이름 형식을 사용하거나 비워 두어 TLS 서버 이름을 제거하십시오.",
-    "proxyEnableSSL": "SSL 활성화",
-    "proxyEnableSSLDescription": "대상에 대한 안전한 HTTPS 연결을 위해 SSL/TLS 암호화를 활성화하세요.",
-    "target": "대상",
-    "configureTarget": "대상 구성",
+    "proxyEnableSSL": "SSL 활성화 (https)",
    "targetErrorFetch": "대상 가져오는 데 실패했습니다.",
    "targetErrorFetchDescription": "대상 가져오는 중 오류가 발생했습니다",
    "siteErrorFetch": "리소스를 가져오는 데 실패했습니다",
@@ -493,7 +495,7 @@
    "targetTlsSettings": "보안 연결 구성",
    "targetTlsSettingsDescription": "리소스에 대한 SSL/TLS 설정 구성",
    "targetTlsSettingsAdvanced": "고급 TLS 설정",
-    "targetTlsSni": "TLS 서버 이름",
+    "targetTlsSni": "TLS 서버 이름 (SNI)",
    "targetTlsSniDescription": "SNI에 사용할 TLS 서버 이름. 기본값을 사용하려면 비워 두십시오.",
    "targetTlsSubmit": "설정 저장",
    "targets": "대상 구성",
@@ -502,21 +504,9 @@
    "targetStickySessionsDescription": "세션 전체 동안 동일한 백엔드 대상을 유지합니다.",
    "methodSelect": "선택 방법",
    "targetSubmit": "대상 추가",
-    "targetNoOne": "이 리소스에는 대상이 없습니다. 백엔드로 요청을 보내려면 대상을 추가하세요.",
+    "targetNoOne": "대상이 없습니다. 양식을 사용하여 대상을 추가하세요.",
    "targetNoOneDescription": "위에 하나 이상의 대상을 추가하면 로드 밸런싱이 활성화됩니다.",
    "targetsSubmit": "대상 저장",
-    "addTarget": "대상 추가",
-    "targetErrorInvalidIp": "유효하지 않은 IP 주소",
-    "targetErrorInvalidIpDescription": "유효한 IP 주소 또는 호스트 이름을 입력하세요.",
-    "targetErrorInvalidPort": "유효하지 않은 포트",
-    "targetErrorInvalidPortDescription": "유효한 포트 번호를 입력하세요.",
-    "targetErrorNoSite": "선택된 사이트 없음",
-    "targetErrorNoSiteDescription": "대상을 위해 사이트를 선택하세요.",
-    "targetCreated": "대상 생성",
-    "targetCreatedDescription": "대상이 성공적으로 생성되었습니다.",
-    "targetErrorCreate": "대상 생성 실패",
-    "targetErrorCreateDescription": "대상 생성 중 오류가 발생했습니다.",
-    "save": "저장",
    "proxyAdditional": "추가 프록시 설정",
    "proxyAdditionalDescription": "리소스가 프록시 설정을 처리하는 방법 구성",
    "proxyCustomHeader": "사용자 정의 호스트 헤더",
@@ -725,7 +715,7 @@
    "pangolinServerAdmin": "서버 관리자 - 판골린",
    "licenseTierProfessional": "전문 라이센스",
    "licenseTierEnterprise": "기업 라이선스",
-    "licenseTierPersonal": "개인 라이선스",
+    "licenseTierCommercial": "상업용 라이선스",
    "licensed": "라이센스",
    "yes": "예",
    "no": "아니요",
@@ -737,7 +727,7 @@
    "idpManageDescription": "시스템에서 ID 제공자를 보고 관리합니다",
    "idpDeletedDescription": "신원 공급자가 성공적으로 삭제되었습니다",
    "idpOidc": "OAuth2/OIDC",
-    "idpQuestionRemove": "아이덴티티 공급자를 영구적으로 삭제하시겠습니까?",
+    "idpQuestionRemove": "정말로 아이덴티티 공급자 {name}를 영구적으로 삭제하시겠습니까?",
    "idpMessageRemove": "이 작업은 아이덴티티 공급자와 모든 관련 구성을 제거합니다. 이 공급자를 통해 인증하는 사용자는 더 이상 로그인할 수 없습니다.",
    "idpMessageConfirm": "확인을 위해 아래에 아이덴티티 제공자의 이름을 입력하세요.",
    "idpConfirmDelete": "신원 제공자 삭제 확인",
@@ -760,7 +750,7 @@
    "idpDisplayName": "이 신원 공급자를 위한 표시 이름",
    "idpAutoProvisionUsers": "사용자 자동 프로비저닝",
    "idpAutoProvisionUsersDescription": "활성화되면 사용자가 첫 로그인 시 시스템에 자동으로 생성되며, 사용자와 역할 및 조직을 매핑할 수 있습니다.",
-    "licenseBadge": "EE",
+    "licenseBadge": "전문가",
    "idpType": "제공자 유형",
    "idpTypeDescription": "구성할 ID 공급자의 유형을 선택하십시오.",
    "idpOidcConfigure": "OAuth2/OIDC 구성",
@@ -1094,6 +1084,7 @@
    "navbar": "탐색 메뉴",
    "navbarDescription": "애플리케이션의 주요 탐색 메뉴",
    "navbarDocsLink": "문서",
+    "commercialEdition": "상업용 에디션",
    "otpErrorEnable": "2FA를 활성화할 수 없습니다.",
    "otpErrorEnableDescription": "2FA를 활성화하는 동안 오류가 발생했습니다",
    "otpSetupCheckCode": "6자리 코드를 입력하세요",
@@ -1149,7 +1140,7 @@
    "sidebarAllUsers": "모든 사용자",
    "sidebarIdentityProviders": "신원 공급자",
    "sidebarLicense": "라이선스",
-    "sidebarClients": "클라이언트",
+    "sidebarClients": "클라이언트 (Beta)",
    "sidebarDomains": "도메인",
    "enableDockerSocket": "Docker 청사진 활성화",
    "enableDockerSocketDescription": "블루프린트 레이블을 위한 Docker 소켓 레이블 수집을 활성화합니다. 소켓 경로는 Newt에 제공되어야 합니다.",
@@ -1206,8 +1197,9 @@
    "domainCreate": "도메인 생성",
    "domainCreatedDescription": "도메인이 성공적으로 생성되었습니다",
    "domainDeletedDescription": "도메인이 성공적으로 삭제되었습니다",
-    "domainQuestionRemove": "계정에서 도메인을 제거하시겠습니까?",
+    "domainQuestionRemove": "도메인 {domain}을(를) 계정에서 제거하시겠습니까?",
    "domainMessageRemove": "제거되면 도메인이 더 이상 계정과 연관되지 않습니다.",
+    "domainMessageConfirm": "확인하려면 아래에 도메인명을 입력하세요.",
    "domainConfirmDelete": "도메인 삭제 확인",
    "domainDelete": "도메인 삭제",
    "domain": "도메인",
@@ -1274,7 +1266,7 @@
    "billingFreeTier": "무료 티어",
    "billingWarningOverLimit": "경고: 하나 이상의 사용 한도를 초과했습니다. 구독을 수정하거나 사용량을 조정하기 전까지 사이트는 연결되지 않습니다.",
    "billingUsageLimitsOverview": "사용 한도 개요",
-    "billingMonitorUsage": "설정된 한도에 대한 사용량을 모니터링합니다. 한도를 늘려야 하는 경우 support@pangolin.net로 연락하십시오.",
+    "billingMonitorUsage": "설정된 한도에 대한 사용량을 모니터링합니다. 한도를 늘려야 하는 경우 support@fossorial.io로 연락하십시오.",
    "billingDataUsage": "데이터 사용량",
    "billingOnlineTime": "사이트 온라인 시간",
    "billingUsers": "활성 사용자",
@@ -1341,6 +1333,7 @@
    "twoFactorRequired": "보안 키를 등록하려면 이중 인증이 필요합니다.",
    "twoFactor": "이중 인증",
    "adminEnabled2FaOnYourAccount": "관리자가 {email}에 대한 이중 인증을 활성화했습니다. 계속하려면 설정을 완료하세요.",
+    "continueToApplication": "응용 프로그램으로 계속",
    "securityKeyAdd": "보안 키 추가",
    "securityKeyRegisterTitle": "새 보안 키 등록",
    "securityKeyRegisterDescription": "보안 키를 연결하고 식별할 이름을 입력하세요.",
@@ -1418,7 +1411,6 @@
    "externalProxyEnabled": "외부 프록시 활성화됨",
    "addNewTarget": "새 대상 추가",
    "targetsList": "대상 목록",
-    "advancedMode": "고급 모드",
    "targetErrorDuplicateTargetFound": "중복 대상 발견",
    "healthCheckHealthy": "정상",
    "healthCheckUnhealthy": "비정상",
@@ -1551,17 +1543,18 @@
    "autoLoginError": "자동 로그인 오류",
    "autoLoginErrorNoRedirectUrl": "ID 공급자로부터 리디렉션 URL을 받지 못했습니다.",
    "autoLoginErrorGeneratingUrl": "인증 URL 생성 실패.",
-    "remoteExitNodeManageRemoteExitNodes": "원격 노드",
-    "remoteExitNodeDescription": "네트워크 연결성을 확장하고 클라우드 의존도를 줄이기 위해 하나 이상의 원격 노드를 자체 호스트하십시오.",
+    "remoteExitNodeManageRemoteExitNodes": "관리 자체 호스팅",
+    "remoteExitNodeDescription": "네트워크 연결성을 확장하기 위해 노드를 관리하세요",
    "remoteExitNodes": "노드",
    "searchRemoteExitNodes": "노드 검색...",
    "remoteExitNodeAdd": "노드 추가",
    "remoteExitNodeErrorDelete": "노드 삭제 오류",
-    "remoteExitNodeQuestionRemove": "조직에서 노드를 제거하시겠습니까?",
+    "remoteExitNodeQuestionRemove": "조직에서 노드 {selectedNode}를 제거하시겠습니까?",
    "remoteExitNodeMessageRemove": "한 번 제거되면 더 이상 노드에 접근할 수 없습니다.",
+    "remoteExitNodeMessageConfirm": "확인을 위해 아래에 노드 이름을 입력해 주세요.",
    "remoteExitNodeConfirmDelete": "노드 삭제 확인",
    "remoteExitNodeDelete": "노드 삭제",
-    "sidebarRemoteExitNodes": "원격 노드",
+    "sidebarRemoteExitNodes": "노드",
    "remoteExitNodeCreate": {
        "title": "노드 생성",
        "description": "네트워크 연결성을 확장하기 위해 새 노드를 생성하세요",
@@ -1730,166 +1723,5 @@
    "authPageUpdated": "인증 페이지가 성공적으로 업데이트되었습니다",
    "healthCheckNotAvailable": "로컬",
    "rewritePath": "경로 재작성",
-    "rewritePathDescription": "대상으로 전달하기 전에 경로를 선택적으로 재작성합니다.",
-    "continueToApplication": "응용 프로그램으로 계속",
-    "checkingInvite": "초대 확인 중",
-    "setResourceHeaderAuth": "setResourceHeaderAuth",
-    "resourceHeaderAuthRemove": "헤더 인증 제거",
-    "resourceHeaderAuthRemoveDescription": "헤더 인증이 성공적으로 제거되었습니다.",
-    "resourceErrorHeaderAuthRemove": "헤더 인증 제거 실패",
-    "resourceErrorHeaderAuthRemoveDescription": "리소스의 헤더 인증을 제거할 수 없습니다.",
-    "resourceHeaderAuthProtectionEnabled": "헤더 인증 활성화됨",
-    "resourceHeaderAuthProtectionDisabled": "헤더 인증 비활성화됨",
-    "headerAuthRemove": "헤더 인증 삭제",
-    "headerAuthAdd": "헤더 인증 추가",
-    "resourceErrorHeaderAuthSetup": "헤더 인증 설정 실패",
-    "resourceErrorHeaderAuthSetupDescription": "리소스의 헤더 인증을 설정할 수 없습니다.",
-    "resourceHeaderAuthSetup": "헤더 인증이 성공적으로 설정되었습니다.",
-    "resourceHeaderAuthSetupDescription": "헤더 인증이 성공적으로 설정되었습니다.",
-    "resourceHeaderAuthSetupTitle": "헤더 인증 설정",
-    "resourceHeaderAuthSetupTitleDescription": "이 리소스를 HTTP 헤더 인증으로 보호하기 위해 기본 인증 자격 증명(사용자이름 및 비밀번호)을 설정합니다. 다음과 같은 형식으로 액세스하세요 https://사용자이름:비밀번호@resource.example.com",
-    "resourceHeaderAuthSubmit": "헤더 인증 설정",
-    "actionSetResourceHeaderAuth": "헤더 인증 설정",
-    "enterpriseEdition": "엔터프라이즈 에디션",
-    "unlicensed": "라이선스 없음",
-    "beta": "베타",
-    "manageClients": "클라이언트 관리",
-    "manageClientsDescription": "클라이언트는 당신의 사이트에 연결할 수 있는 디바이스입니다.",
-    "licenseTableValidUntil": "유효 기한",
-    "saasLicenseKeysSettingsTitle": "엔터프라이즈 라이선스",
-    "saasLicenseKeysSettingsDescription": "자체 호스팅된 Pangolin 인스턴스를 위한 엔터프라이즈 라이선스 키를 생성하고 관리합니다.",
-    "sidebarEnterpriseLicenses": "라이선스",
-    "generateLicenseKey": "라이선스 키 생성",
-    "generateLicenseKeyForm": {
-        "validation": {
-            "emailRequired": "유효한 이메일 주소를 입력하세요",
-            "useCaseTypeRequired": "사용 사례 유형을 선택하세요",
-            "firstNameRequired": "이름은 필수입니다.",
-            "lastNameRequired": "성은 필수입니다.",
-            "primaryUseRequired": "주요 용도를 설명하세요",
-            "jobTitleRequiredBusiness": "사업용 직책은 필수입니다.",
-            "industryRequiredBusiness": "사업용 산업은 필수입니다.",
-            "stateProvinceRegionRequired": "주/도/지역이 필수입니다.",
-            "postalZipCodeRequired": "우편번호/ZIP 코드가 필수입니다.",
-            "companyNameRequiredBusiness": "사업용 회사 이름은 필수입니다.",
-            "countryOfResidenceRequiredBusiness": "사업용 거주 국가는 필수입니다.",
-            "countryRequiredPersonal": "개인용 국가가 필수입니다.",
-            "agreeToTermsRequired": "약관에 동의해야 합니다.",
-            "complianceConfirmationRequired": "Fossorial 상용 라이선스를 준수함을 확인해야 합니다."
-        },
-        "useCaseOptions": {
-            "personal": {
-                "title": "개인 용도",
-                "description": "학습, 개인 프로젝트 또는 실험과 같은 개인, 비상업적 용도로 사용합니다."
-            },
-            "business": {
-                "title": "사업 용도",
-                "description": "조직, 회사 또는 수익 창출 활동 내에서 사용됩니다."
-            }
-        },
-        "steps": {
-            "emailLicenseType": {
-                "title": "이메일 및 라이선스 유형",
-                "description": "이메일을 입력하고 라이선스 유형을 선택하세요"
-            },
-            "personalInformation": {
-                "title": "개인 정보",
-                "description": "자기소개를 해주세요"
-            },
-            "contactInformation": {
-                "title": "연락처 정보",
-                "description": "당신의 연락처 정보"
-            },
-            "termsGenerate": {
-                "title": "약관 및 생성",
-                "description": "라이선스를 생성하기 위해 약관을 검토하고 수락하세요"
-            }
-        },
-        "alerts": {
-            "commercialUseDisclosure": {
-                "title": "사용 공개",
-                "description": "당신의 의도된 사용에 정확히 맞는 라이선스 등급을 선택하세요. 개인 라이선스는 연간 총 수익 100,000 USD 이하의 개인, 비상업적 또는 소규모 상업 활동을 위한 소프트웨어의 무료 사용을 허용합니다. 이러한 제한을 넘는 모든 사용 — 비즈니스, 조직 또는 기타 수익 창출 환경 내에서의 사용 — 은 유효한 엔터프라이즈 라이선스 및 해당 라이선스 수수료의 지불이 필요합니다. 개인 또는 기업 사용자는 모두 Fossorial 상용 라이선스 조건을 준수해야 합니다."
-            },
-            "trialPeriodInformation": {
-                "title": "시험 기간 정보",
-                "description": "이 라이선스 키는 엔터프라이즈 기능을 평가판 기간 동안 7일 동안 활성화합니다. 평가 기간 이후 유료 기능에 대한 계속된 액세스는 유효한 개인 또는 엔터프라이즈 라이선스 하에서 활성화가 필요합니다. 엔터프라이즈 라이선스에 대한 정보는 sales@pangolin.net에 문의하세요."
-            }
-        },
-        "form": {
-            "useCaseQuestion": "개인 또는 사업용으로 Pangolin을 사용하시나요?",
-            "firstName": "이름",
-            "lastName": "성",
-            "jobTitle": "직책",
-            "primaryUseQuestion": "Pangolin을 주로 무엇에 사용하려고 계획하시나요?",
-            "industryQuestion": "당신의 산업은 무엇입니까?",
-            "prospectiveUsersQuestion": "예상하는 잠재적 사용자는 몇 명입니까?",
-            "prospectiveSitesQuestion": "예상하는 잠재적 사이트(터널)는 몇 개입니까?",
-            "companyName": "회사 이름",
-            "countryOfResidence": "거주 국가",
-            "stateProvinceRegion": "주 / 도 / 지역",
-            "postalZipCode": "우편번호 / ZIP 코드",
-            "companyWebsite": "회사 웹사이트",
-            "companyPhoneNumber": "회사 전화번호",
-            "country": "국가",
-            "phoneNumberOptional": "전화번호 (선택 항목)",
-            "complianceConfirmation": "제가 제공한 정보가 정확하고 Fossorial 상용 라이선스를 준수하는지 확인합니다. 부정확한 정보를 보고하거나 제품 사용을 실수로 식별하는 것은 라이선스 위반이며, 키가 취소될 수 있습니다."
-        },
-        "buttons": {
-            "close": "닫기",
-            "previous": "이전",
-            "next": "다음",
-            "generateLicenseKey": "라이선스 키 생성"
-        },
-        "toasts": {
-            "success": {
-                "title": "라이선스 키가 성공적으로 생성되었습니다",
-                "description": "당신의 라이선스 키가 생성되었으며 사용 준비가 되었습니다."
-            },
-            "error": {
-                "title": "라이선스 키 생성에 실패했습니다",
-                "description": "라이선스 키를 생성하는 동안 오류가 발생했습니다."
-            }
-        }
-    },
-    "priority": "우선순위",
-    "priorityDescription": "우선 순위가 높은 경로가 먼저 평가됩니다. 우선 순위 = 100은 자동 정렬(시스템 결정)이 의미합니다. 수동 우선 순위를 적용하려면 다른 숫자를 사용하세요.",
-    "instanceName": "인스턴스 이름",
-    "pathMatchModalTitle": "경로 매칭 설정",
-    "pathMatchModalDescription": "경로별로 들어오는 요청을 어떻게 매칭할지 설정합니다.",
-    "pathMatchType": "일치 유형",
-    "pathMatchPrefix": "접두사",
-    "pathMatchExact": "정확하게",
-    "pathMatchRegex": "정규 표현식",
-    "pathMatchValue": "경로 값",
-    "clear": "지우기",
-    "saveChanges": "변경 사항 저장",
-    "pathMatchRegexPlaceholder": "^/api/.*",
-    "pathMatchDefaultPlaceholder": "/경로",
-    "pathMatchPrefixHelp": "예: /api 는 /api, /api/users 등을 매칭합니다.",
-    "pathMatchExactHelp": "예: /api 는 /api 만 매칭합니다.",
-    "pathMatchRegexHelp": "예: ^/api/.* 는 /api/anything를 매칭합니다",
-    "pathRewriteModalTitle": "경로 재작성 설정",
-    "pathRewriteModalDescription": "대상으로 전달하기 전에 매칭된 경로를 변환합니다.",
-    "pathRewriteType": "재작성 유형",
-    "pathRewritePrefixOption": "접두사 - 접두사 대체",
-    "pathRewriteExactOption": "정확 - 전체 경로 대체",
-    "pathRewriteRegexOption": "정규 표현식 - 패턴 대체",
-    "pathRewriteStripPrefixOption": "접두사 제거 - 접두사 삭제",
-    "pathRewriteValue": "재작성 값",
-    "pathRewriteRegexPlaceholder": "/new/$1",
-    "pathRewriteDefaultPlaceholder": "/새-경로",
-    "pathRewritePrefixHelp": "일치하는 접두사를 이 값으로 대체합니다",
-    "pathRewriteExactHelp": "경로가 정확히 일치할 때 전체 경로를 이 값으로 대체합니다",
-    "pathRewriteRegexHelp": "$1, $2와 같은 캡처 그룹을 사용하여 대체",
-    "pathRewriteStripPrefixHelp": "접두사를 제거하거나 새 접두사를 제공하려면 비워 둡니다",
-    "pathRewritePrefix": "접두사",
-    "pathRewriteExact": "정확하게",
-    "pathRewriteRegex": "정규 표현식",
-    "pathRewriteStrip": "제거",
-    "pathRewriteStripLabel": "제거",
-    "sidebarEnableEnterpriseLicense": "엔터프라이즈 라이선스 활성화",
-    "cannotbeUndone": "이 작업은 되돌릴 수 없습니다.",
-    "toConfirm": "확인하려면",
-    "deleteClientQuestion": "고객을 사이트와 조직에서 제거하시겠습니까?",
-    "clientMessageRemove": "제거되면 클라이언트는 사이트에 더 이상 연결할 수 없습니다."
+    "rewritePathDescription": "대상으로 전달하기 전에 경로를 선택적으로 재작성합니다."
 }
--- a/messages/nb-NO.json
+++ b/messages/nb-NO.json
@@ -47,8 +47,9 @@
    "edit": "Rediger",
    "siteConfirmDelete": "Bekreft Sletting av Område",
    "siteDelete": "Slett Område",
-    "siteMessageRemove": "Når nettstedet er fjernet, vil det ikke lenger være tilgjengelig. Alle målene for nettstedet vil også bli fjernet.",
-    "siteQuestionRemove": "Er du sikker på at du vil fjerne nettstedet fra organisasjonen?",
+    "siteMessageRemove": "Når området slettes, vil det ikke lenger være tilgjengelig. Alle ressurser og mål assosiert med området vil også bli slettet.",
+    "siteMessageConfirm": "For å bekrefte, vennligst skriv inn navnet i området nedenfor.",
+    "siteQuestionRemove": "Er du sikker på at du vil slette området {selectedSite} fra organisasjonen?",
    "siteManageSites": "Administrer Områder",
    "siteDescription": "Tillat tilkobling til nettverket ditt gjennom sikre tunneler",
    "siteCreate": "Opprett område",
@@ -95,7 +96,7 @@
    "siteWgDescription": "Bruk hvilken som helst WireGuard-klient for å etablere en tunnel. Manuell NAT-oppsett kreves.",
    "siteWgDescriptionSaas": "Bruk hvilken som helst WireGuard-klient for å etablere en tunnel. Manuell NAT-oppsett er nødvendig. FUNGERER KUN PÅ SELVHOSTEDE NODER",
    "siteLocalDescription": "Kun lokale ressurser. Ingen tunnelering.",
-    "siteLocalDescriptionSaas": "Lokale ressurser. Ingen tunnelering. Bare tilgjengelig på eksterne noder.",
+    "siteLocalDescriptionSaas": "Kun lokale ressurser. Ingen tunneling. FUNGERER KUN PÅ SELVHOSTEDE NODER",
    "siteSeeAll": "Se alle områder",
    "siteTunnelDescription": "Bestem hvordan du vil koble deg til ditt område",
    "siteNewtCredentials": "Newt påloggingsinformasjon",
@@ -153,7 +154,8 @@
    "protected": "Beskyttet",
    "notProtected": "Ikke beskyttet",
    "resourceMessageRemove": "Når den er fjernet, vil ressursen ikke lenger være tilgjengelig. Alle mål knyttet til ressursen vil også bli fjernet.",
-    "resourceQuestionRemove": "Er du sikker på at du vil fjerne ressursen fra organisasjonen?",
+    "resourceMessageConfirm": "For å bekrefte, skriv inn navnet på ressursen nedenfor.",
+    "resourceQuestionRemove": "Er du sikker på at du vil fjerne ressursen {selectedResource} fra organisasjonen?",
    "resourceHTTP": "HTTPS-ressurs",
    "resourceHTTPDescription": "Proxy-forespørsler til appen din over HTTPS ved bruk av et underdomene eller grunndomene.",
    "resourceRaw": "Rå TCP/UDP-ressurs",
@@ -218,7 +220,7 @@
    "orgDeleteConfirm": "Bekreft Sletting av Organisasjon",
    "orgMessageRemove": "Denne handlingen er irreversibel og vil slette alle tilknyttede data.",
    "orgMessageConfirm": "For å bekrefte, vennligst skriv inn navnet på organisasjonen nedenfor.",
-    "orgQuestionRemove": "Er du sikker på at du vil fjerne organisasjonen?",
+    "orgQuestionRemove": "Er du sikker på at du vil fjerne organisasjonen {selectedOrg}?",
    "orgUpdated": "Organisasjon oppdatert",
    "orgUpdatedDescription": "Organisasjonen har blitt oppdatert.",
    "orgErrorUpdate": "Kunne ikke oppdatere organisasjonen",
@@ -285,8 +287,9 @@
    "apiKeysAdd": "Generer API-nøkkel",
    "apiKeysErrorDelete": "Feil under sletting av API-nøkkel",
    "apiKeysErrorDeleteMessage": "Feil ved sletting av API-nøkkel",
-    "apiKeysQuestionRemove": "Er du sikker på at du vil fjerne API-nøkkelen fra organisasjonen?",
+    "apiKeysQuestionRemove": "Er du sikker på at du vil fjerne API-nøkkelen {selectedApiKey} fra organisasjonen?",
    "apiKeysMessageRemove": "Når den er fjernet, vil API-nøkkelen ikke lenger kunne brukes.",
+    "apiKeysMessageConfirm": "For å bekrefte, vennligst skriv inn navnet på API-nøkkelen nedenfor.",
    "apiKeysDeleteConfirm": "Bekreft sletting av API-nøkkel",
    "apiKeysDelete": "Slett API-nøkkel",
    "apiKeysManage": "Administrer API-nøkler",
@@ -302,7 +305,8 @@
    "userDeleteConfirm": "Bekreft sletting av bruker",
    "userDeleteServer": "Slett bruker fra server",
    "userMessageRemove": "Brukeren vil bli fjernet fra alle organisasjoner og vil bli fullstendig fjernet fra serveren.",
-    "userQuestionRemove": "Er du sikker på at du vil slette brukeren permanent fra serveren?",
+    "userMessageConfirm": "For å bekrefte, vennligst skriv inn navnet på brukeren nedenfor.",
+    "userQuestionRemove": "Er du sikker på at du vil slette {selectedUser} permanent fra serveren?",
    "licenseKey": "Lisensnøkkel",
    "valid": "Gyldig",
    "numberOfSites": "Antall områder",
@@ -335,7 +339,7 @@
    "fossorialLicense": "Vis Fossorial kommersiell lisens og abonnementsvilkår",
    "licenseMessageRemove": "Dette vil fjerne lisensnøkkelen og alle tilknyttede tillatelser gitt av den.",
    "licenseMessageConfirm": "For å bekrefte, vennligst skriv inn lisensnøkkelen nedenfor.",
-    "licenseQuestionRemove": "Er du sikker på at du vil slette lisensnøkkelen?",
+    "licenseQuestionRemove": "Er du sikker på at du vil slette lisensnøkkelen {selectedKey} ?",
    "licenseKeyDelete": "Slett Lisensnøkkel",
    "licenseKeyDeleteConfirm": "Bekreft sletting av lisensnøkkel",
    "licenseTitle": "Behandle lisensstatus",
@@ -368,7 +372,7 @@
    "inviteRemoveErrorDescription": "Det oppstod en feil under fjerning av invitasjonen.",
    "inviteRemoved": "Invitasjon fjernet",
    "inviteRemovedDescription": "Invitasjonen for {email} er fjernet.",
-    "inviteQuestionRemove": "Er du sikker på at du vil fjerne invitasjonen?",
+    "inviteQuestionRemove": "Er du sikker på at du vil fjerne invitasjonen {email}?",
    "inviteMessageRemove": "Når fjernet, vil denne invitasjonen ikke lenger være gyldig. Du kan alltid invitere brukeren på nytt senere.",
    "inviteMessageConfirm": "For å bekrefte, vennligst tast inn invitasjonens e-postadresse nedenfor.",
    "inviteQuestionRegenerate": "Er du sikker på at du vil generere invitasjonen på nytt for {email}? Dette vil ugyldiggjøre den forrige invitasjonen.",
@@ -394,8 +398,9 @@
    "userErrorOrgRemoveDescription": "Det oppstod en feil under fjerning av brukeren.",
    "userOrgRemoved": "Bruker fjernet",
    "userOrgRemovedDescription": "Brukeren {email} er fjernet fra organisasjonen.",
-    "userQuestionOrgRemove": "Er du sikker på at du vil fjerne denne brukeren fra organisasjonen?",
+    "userQuestionOrgRemove": "Er du sikker på at du vil fjerne {email} fra organisasjonen?",
    "userMessageOrgRemove": "Når denne brukeren er fjernet, vil de ikke lenger ha tilgang til organisasjonen. Du kan alltid invitere dem på nytt senere, men de vil måtte godta invitasjonen på nytt.",
+    "userMessageOrgConfirm": "For å bekrefte, vennligst skriv inn navnet på brukeren nedenfor.",
    "userRemoveOrgConfirm": "Bekreft fjerning av bruker",
    "userRemoveOrg": "Fjern bruker fra organisasjon",
    "users": "Brukere",
@@ -463,10 +468,7 @@
    "createdAt": "Opprettet",
    "proxyErrorInvalidHeader": "Ugyldig verdi for egendefinert vertsoverskrift. Bruk domenenavnformat, eller lagre tomt for å fjerne den egendefinerte vertsoverskriften.",
    "proxyErrorTls": "Ugyldig TLS-servernavn. Bruk domenenavnformat, eller la stå tomt for å fjerne TLS-servernavnet.",
-    "proxyEnableSSL": "Aktiver SSL",
-    "proxyEnableSSLDescription": "Aktiver SSL/TLS-kryptering for sikre HTTPS-tilkoblinger til dine mål.",
-    "target": "Target",
-    "configureTarget": "Konfigurer mål",
+    "proxyEnableSSL": "Aktiver SSL (https)",
    "targetErrorFetch": "Kunne ikke hente mål",
    "targetErrorFetchDescription": "Det oppsto en feil under henting av mål",
    "siteErrorFetch": "Klarte ikke å hente ressurs",
@@ -493,7 +495,7 @@
    "targetTlsSettings": "Sikker tilkoblings-konfigurasjon",
    "targetTlsSettingsDescription": "Konfigurer SSL/TLS-innstillinger for ressursen din",
    "targetTlsSettingsAdvanced": "Avanserte TLS-innstillinger",
-    "targetTlsSni": "TLS servernavn",
+    "targetTlsSni": "TLS Servernavn (SNI)",
    "targetTlsSniDescription": "TLS-servernavnet som skal brukes for SNI. La stå tomt for å bruke standardverdien.",
    "targetTlsSubmit": "Lagre innstillinger",
    "targets": "Målkonfigurasjon",
@@ -502,21 +504,9 @@
    "targetStickySessionsDescription": "Behold tilkoblinger på samme bakend-mål gjennom hele sesjonen.",
    "methodSelect": "Velg metode",
    "targetSubmit": "Legg til mål",
-    "targetNoOne": "Denne ressursen har ikke noen mål. Legg til et mål for å konfigurere hvor du vil sende forespørsler til din backend.",
+    "targetNoOne": "Ingen mål. Legg til et mål ved hjelp av skjemaet.",
    "targetNoOneDescription": "Å legge til mer enn ett mål ovenfor vil aktivere lastbalansering.",
    "targetsSubmit": "Lagre mål",
-    "addTarget": "Legg til mål",
-    "targetErrorInvalidIp": "Ugyldig IP-adresse",
-    "targetErrorInvalidIpDescription": "Skriv inn en gyldig IP-adresse eller vertsnavn",
-    "targetErrorInvalidPort": "Ugyldig port",
-    "targetErrorInvalidPortDescription": "Vennligst skriv inn et gyldig portnummer",
-    "targetErrorNoSite": "Ingen nettsted valgt",
-    "targetErrorNoSiteDescription": "Velg et nettsted for målet",
-    "targetCreated": "Mål opprettet",
-    "targetCreatedDescription": "Målet har blitt opprettet",
-    "targetErrorCreate": "Kunne ikke opprette målet",
-    "targetErrorCreateDescription": "Det oppstod en feil under oppretting av målet",
-    "save": "Lagre",
    "proxyAdditional": "Ytterligere Proxy-innstillinger",
    "proxyAdditionalDescription": "Konfigurer hvordan ressursen din håndterer proxy-innstillinger",
    "proxyCustomHeader": "Tilpasset verts-header",
@@ -725,7 +715,7 @@
    "pangolinServerAdmin": "Server Admin - Pangolin",
    "licenseTierProfessional": "Profesjonell lisens",
    "licenseTierEnterprise": "Bedriftslisens",
-    "licenseTierPersonal": "Personlig lisens",
+    "licenseTierCommercial": "Kommersiell lisens",
    "licensed": "Lisensiert",
    "yes": "Ja",
    "no": "Nei",
@@ -737,7 +727,7 @@
    "idpManageDescription": "Vis og administrer identitetsleverandører i systemet",
    "idpDeletedDescription": "Identitetsleverandør slettet vellykket",
    "idpOidc": "OAuth2/OIDC",
-    "idpQuestionRemove": "Er du sikker på at du vil slette identitetsleverandøren permanent?",
+    "idpQuestionRemove": "Er du sikker på at du vil slette identitetsleverandøren {name} permanent?",
    "idpMessageRemove": "Dette vil fjerne identitetsleverandøren og alle tilhørende konfigurasjoner. Brukere som autentiserer seg via denne leverandøren vil ikke lenger kunne logge inn.",
    "idpMessageConfirm": "For å bekrefte, vennligst skriv inn navnet på identitetsleverandøren nedenfor.",
    "idpConfirmDelete": "Bekreft Sletting av Identitetsleverandør",
@@ -760,7 +750,7 @@
    "idpDisplayName": "Et visningsnavn for denne identitetsleverandøren",
    "idpAutoProvisionUsers": "Automatisk brukerklargjøring",
    "idpAutoProvisionUsersDescription": "Når aktivert, opprettes brukere automatisk i systemet ved første innlogging, med mulighet til å tilordne brukere til roller og organisasjoner.",
-    "licenseBadge": "EE",
+    "licenseBadge": "Profesjonell",
    "idpType": "Leverandørtype",
    "idpTypeDescription": "Velg typen identitetsleverandør du ønsker å konfigurere",
    "idpOidcConfigure": "OAuth2/OIDC-konfigurasjon",
@@ -1094,6 +1084,7 @@
    "navbar": "Navigasjonsmeny",
    "navbarDescription": "Hovednavigasjonsmeny for applikasjonen",
    "navbarDocsLink": "Dokumentasjon",
+    "commercialEdition": "Kommersiell utgave",
    "otpErrorEnable": "Kunne ikke aktivere 2FA",
    "otpErrorEnableDescription": "En feil oppstod under aktivering av 2FA",
    "otpSetupCheckCode": "Vennligst skriv inn en 6-sifret kode",
@@ -1149,7 +1140,7 @@
    "sidebarAllUsers": "Alle brukere",
    "sidebarIdentityProviders": "Identitetsleverandører",
    "sidebarLicense": "Lisens",
-    "sidebarClients": "Klienter",
+    "sidebarClients": "Klienter (Beta)",
    "sidebarDomains": "Domener",
    "enableDockerSocket": "Aktiver Docker blåkopi",
    "enableDockerSocketDescription": "Aktiver skraping av Docker Socket for blueprint Etiketter. Socket bane må brukes for nye.",
@@ -1206,8 +1197,9 @@
    "domainCreate": "Opprett domene",
    "domainCreatedDescription": "Domene ble opprettet",
    "domainDeletedDescription": "Domene ble slettet",
-    "domainQuestionRemove": "Er du sikker på at du vil fjerne domenet fra kontoen din?",
+    "domainQuestionRemove": "Er du sikker på at du vil fjerne domenet {domain} fra kontoen din?",
    "domainMessageRemove": "Når domenet er fjernet, vil det ikke lenger være knyttet til kontoen din.",
+    "domainMessageConfirm": "For å bekrefte, vennligst skriv inn domenenavnet nedenfor.",
    "domainConfirmDelete": "Bekreft sletting av domene",
    "domainDelete": "Slett domene",
    "domain": "Domene",
@@ -1274,7 +1266,7 @@
    "billingFreeTier": "Gratis nivå",
    "billingWarningOverLimit": "Advarsel: Du har overskredet en eller flere bruksgrenser. Nettstedene dine vil ikke koble til før du endrer abonnementet ditt eller justerer bruken.",
    "billingUsageLimitsOverview": "Oversikt over bruksgrenser",
-    "billingMonitorUsage": "Overvåk bruken din i forhold til konfigurerte grenser. Hvis du trenger økte grenser, vennligst kontakt support@pangolin.net.",
+    "billingMonitorUsage": "Overvåk bruken din i forhold til konfigurerte grenser. Hvis du trenger økte grenser, vennligst kontakt support@fossorial.io.",
    "billingDataUsage": "Databruk",
    "billingOnlineTime": "Online tid for nettsteder",
    "billingUsers": "Aktive brukere",
@@ -1341,6 +1333,7 @@
    "twoFactorRequired": "Tofaktorautentisering er påkrevd for å registrere en sikkerhetsnøkkel.",
    "twoFactor": "Tofaktorautentisering",
    "adminEnabled2FaOnYourAccount": "Din administrator har aktivert tofaktorautentisering for {email}. Vennligst fullfør oppsettsprosessen for å fortsette.",
+    "continueToApplication": "Fortsett til applikasjonen",
    "securityKeyAdd": "Legg til sikkerhetsnøkkel",
    "securityKeyRegisterTitle": "Registrer ny sikkerhetsnøkkel",
    "securityKeyRegisterDescription": "Koble til sikkerhetsnøkkelen og skriv inn et navn for å identifisere den",
@@ -1418,7 +1411,6 @@
    "externalProxyEnabled": "Ekstern proxy aktivert",
    "addNewTarget": "Legg til nytt mål",
    "targetsList": "Liste over mål",
-    "advancedMode": "Avansert modus",
    "targetErrorDuplicateTargetFound": "Duplikat av mål funnet",
    "healthCheckHealthy": "Sunn",
    "healthCheckUnhealthy": "Usunn",
@@ -1551,17 +1543,18 @@
    "autoLoginError": "Feil ved automatisk innlogging",
    "autoLoginErrorNoRedirectUrl": "Ingen omdirigerings-URL mottatt fra identitetsleverandøren.",
    "autoLoginErrorGeneratingUrl": "Kunne ikke generere autentiserings-URL.",
-    "remoteExitNodeManageRemoteExitNodes": "Eksterne Noder",
-    "remoteExitNodeDescription": "Selvbetjent én eller flere eksterne noder for å utvide nettverkstilkoblingen din og redusere avhengighet på skyen",
+    "remoteExitNodeManageRemoteExitNodes": "Administrer Selv-Hostet",
+    "remoteExitNodeDescription": "Administrer noder for å forlenge nettverkstilkoblingen din",
    "remoteExitNodes": "Noder",
    "searchRemoteExitNodes": "Søk noder...",
    "remoteExitNodeAdd": "Legg til Node",
    "remoteExitNodeErrorDelete": "Feil ved sletting av node",
-    "remoteExitNodeQuestionRemove": "Er du sikker på at du vil fjerne noden fra organisasjonen?",
+    "remoteExitNodeQuestionRemove": "Er du sikker på at du vil fjerne noden {selectedNode} fra organisasjonen?",
    "remoteExitNodeMessageRemove": "Når noden er fjernet, vil ikke lenger være tilgjengelig.",
+    "remoteExitNodeMessageConfirm": "For å bekrefte, skriv inn navnet på noden nedenfor.",
    "remoteExitNodeConfirmDelete": "Bekreft sletting av Node",
    "remoteExitNodeDelete": "Slett Node",
-    "sidebarRemoteExitNodes": "Eksterne Noder",
+    "sidebarRemoteExitNodes": "Noder",
    "remoteExitNodeCreate": {
        "title": "Opprett node",
        "description": "Opprett en ny node for å utvide nettverkstilkoblingen din",
@@ -1730,166 +1723,5 @@
    "authPageUpdated": "Godkjenningsside oppdatert",
    "healthCheckNotAvailable": "Lokal",
    "rewritePath": "Omskriv sti",
-    "rewritePathDescription": "Valgfritt omskrive stien før videresending til målet.",
-    "continueToApplication": "Fortsett til applikasjonen",
-    "checkingInvite": "Sjekker invitasjon",
-    "setResourceHeaderAuth": "setResourceHeaderAuth",
-    "resourceHeaderAuthRemove": "Fjern topptekst Auth",
-    "resourceHeaderAuthRemoveDescription": "Topplinje autentisering fjernet.",
-    "resourceErrorHeaderAuthRemove": "Kunne ikke fjerne topptekst autentisering",
-    "resourceErrorHeaderAuthRemoveDescription": "Kunne ikke fjerne topptekst autentisering for ressursen.",
-    "resourceHeaderAuthProtectionEnabled": "Topplinje autentisering aktivert",
-    "resourceHeaderAuthProtectionDisabled": "Topplinje autentisering deaktivert",
-    "headerAuthRemove": "Fjern topptekst Auth",
-    "headerAuthAdd": "Legg til topptekst godkjenning",
-    "resourceErrorHeaderAuthSetup": "Kunne ikke sette topptekst autentisering",
-    "resourceErrorHeaderAuthSetupDescription": "Kunne ikke sette topplinje autentisering for ressursen.",
-    "resourceHeaderAuthSetup": "Header godkjenningssett var vellykket",
-    "resourceHeaderAuthSetupDescription": "Topplinje autentisering har blitt lagret.",
-    "resourceHeaderAuthSetupTitle": "Angi topptekst godkjenning",
-    "resourceHeaderAuthSetupTitleDescription": "Angi grunnleggende auth legitimasjon (brukernavn og passord) for å beskytte denne ressursen med HTTP Header autentisering. Tilgang til det ved hjelp av formatet https://username:password@resource.example.com",
-    "resourceHeaderAuthSubmit": "Angi topptekst godkjenning",
-    "actionSetResourceHeaderAuth": "Angi topptekst godkjenning",
-    "enterpriseEdition": "Enterprise Edition",
-    "unlicensed": "Ikke lisensiert",
-    "beta": "beta",
-    "manageClients": "Administrer klienter",
-    "manageClientsDescription": "Klienter er enheter som kan koble seg til nettstedet ditt",
-    "licenseTableValidUntil": "Gyldig til",
-    "saasLicenseKeysSettingsTitle": "Bedriftstillatelse Lisenser",
-    "saasLicenseKeysSettingsDescription": "Generer og administrer Enterprise lisensnøkler for selvbetjente Pangolin forekomster",
-    "sidebarEnterpriseLicenses": "Lisenser",
-    "generateLicenseKey": "Generer lisensnøkkel",
-    "generateLicenseKeyForm": {
-        "validation": {
-            "emailRequired": "Vennligst skriv inn en gyldig e-postadresse",
-            "useCaseTypeRequired": "Vennligst velg en bruk sakstype",
-            "firstNameRequired": "Fornavn er påkrevd",
-            "lastNameRequired": "Etternavn er påkrevd",
-            "primaryUseRequired": "Beskriv din primære bruk",
-            "jobTitleRequiredBusiness": "Jobbtittel er påkrevd for forretningsbruk",
-            "industryRequiredBusiness": "Næringslivet må til forretningsbruk",
-            "stateProvinceRegionRequired": "Stat/provins/region kreves",
-            "postalZipCodeRequired": "Postnummer er påkrevd",
-            "companyNameRequiredBusiness": "Firmanavn er påkrevd for bedriftens bruk",
-            "countryOfResidenceRequiredBusiness": "Land som skal oppholde seg er nødvendig for bruk til forretningsdrift",
-            "countryRequiredPersonal": "Land er påkrevd for personlig bruk",
-            "agreeToTermsRequired": "Du må godta vilkårene",
-            "complianceConfirmationRequired": "Du må bekrefte at du overholder Fossorial Kommersiell lisens"
-        },
-        "useCaseOptions": {
-            "personal": {
-                "title": "Personlig bruk",
-                "description": "For enkeltpersoner, ikke-kommersiell bruk som læring, personlige prosjekter eller eksperimentering."
-            },
-            "business": {
-                "title": "Forretningsmessig bruk",
-                "description": "Til bruk innenfor organisasjoner eller virksomheter eller forretningsmessige inntekter eller aktiviteter."
-            }
-        },
-        "steps": {
-            "emailLicenseType": {
-                "title": "E-post & lisenstype",
-                "description": "Skriv inn e-postadressen din og velg lisenstypen din"
-            },
-            "personalInformation": {
-                "title": "Personlig Informasjon",
-                "description": "Fortell oss om deg selv"
-            },
-            "contactInformation": {
-                "title": "Kontakt Informasjon",
-                "description": "Dine kontaktopplysninger"
-            },
-            "termsGenerate": {
-                "title": "Vilkår og generere",
-                "description": "Se gjennom og godta vilkårene for å generere lisensen"
-            }
-        },
-        "alerts": {
-            "commercialUseDisclosure": {
-                "title": "Bruk utlevering",
-                "description": "Velg lisensnivået som reflekterer nøyaktig din tiltenkte bruk. Personlige lisenser tillater fri bruk av programvare for enkelte, ikke-kommersielle eller småskala kommersielle aktiviteter, med en årlig brutto inntekt på under 100 000 amerikanske dollar. All bruk ut over disse grensene – inkludert bruk innenfor en virksomhet, organisasjon eller andre inntekter miljø - krever en gyldig Enterprise lisens og betaling av gjeldende lisensavgift. Alle brukere, enten personlig eller Enterprise, må overholde de kommersielle tillatelsene på Fossorial."
-            },
-            "trialPeriodInformation": {
-                "title": "Informasjon om prøveperiode",
-                "description": "Denne lisensnøkkelen tillater funksjoner i Enterprise for en 7-dagers evalueringsperiode. Fortsatt tilgang til betalt funksjoner utenfor evalueringsperioden krever aktivering under en gyldig Personlig eller Enterprise License. For Enterprise licensing, kontakt sales@pangolin.net."
-            }
-        },
-        "form": {
-            "useCaseQuestion": "Bruker du Pangolin for personlig eller forretningsbruk?",
-            "firstName": "Fornavn",
-            "lastName": "Etternavn (Automatic Translation)",
-            "jobTitle": "Jobb tittel",
-            "primaryUseQuestion": "Hva planlegger du først og fremst å bruke Pangolin for?",
-            "industryQuestion": "Hva er din industri?",
-            "prospectiveUsersQuestion": "Hvor mange prospektive brukere forventer du å ha?",
-            "prospectiveSitesQuestion": "Hvor mange prospektive nettsteder (tunnels) forventer du å ha?",
-            "companyName": "Navn på bedrift",
-            "countryOfResidence": "Oppholdsland",
-            "stateProvinceRegion": "Fylke / Region",
-            "postalZipCode": "Postnummer / postnummer",
-            "companyWebsite": "Firmaets hjemmeside",
-            "companyPhoneNumber": "Firmaets telefonnummer",
-            "country": "Land",
-            "phoneNumberOptional": "Telefonnummer (valgfritt)",
-            "complianceConfirmation": "Jeg bekrefter at opplysningene jeg oppga er korrekte og at jeg er i samsvar med Fossorial Kommersiell Lisens. Rapportering av unøyaktig informasjon eller feilidentifisering av bruk av produktet bryter lisensen, og kan føre til at nøkkelen din blir opphevet."
-        },
-        "buttons": {
-            "close": "Lukk",
-            "previous": "Forrige",
-            "next": "Neste",
-            "generateLicenseKey": "Generer lisensnøkkel"
-        },
-        "toasts": {
-            "success": {
-                "title": "Lisensnøkkel ble generert",
-                "description": "Din lisensnøkkel har blitt generert og er klar til bruk."
-            },
-            "error": {
-                "title": "Kan ikke generere lisensnøkkel",
-                "description": "Det oppstod en feil ved generering av lisensnøkkelen."
-            }
-        }
-    },
-    "priority": "Prioritet",
-    "priorityDescription": "Høyere prioriterte ruter evalueres først. Prioritet = 100 betyr automatisk bestilling (systembeslutninger). Bruk et annet nummer til å håndheve manuell prioritet.",
-    "instanceName": "Forekomst navn",
-    "pathMatchModalTitle": "Konfigurere matching av sti",
-    "pathMatchModalDescription": "Sett opp hvordan innkommende forespørsler skal matches basert på deres bane.",
-    "pathMatchType": "Trefftype",
-    "pathMatchPrefix": "Prefiks",
-    "pathMatchExact": "Nøyaktig",
-    "pathMatchRegex": "Regex",
-    "pathMatchValue": "Verdi for sti",
-    "clear": "Tøm",
-    "saveChanges": "Lagre endringer",
-    "pathMatchRegexPlaceholder": "^/api/.*",
-    "pathMatchDefaultPlaceholder": "/sti",
-    "pathMatchPrefixHelp": "Eksempel: /api matcher /api, /api/users, etc.",
-    "pathMatchExactHelp": "Eksempel: /api passer bare /api",
-    "pathMatchRegexHelp": "Eksempel: ^/api/.* matcher /api/alt",
-    "pathRewriteModalTitle": "Konfigurer ferdigskriving av sti",
-    "pathRewriteModalDescription": "Overfør banen som passet før den videresendes til målet.",
-    "pathRewriteType": "Omskriv type",
-    "pathRewritePrefixOption": "Prefiks - erstatt prefiks",
-    "pathRewriteExactOption": "Eksakt - Erstatt hele banen",
-    "pathRewriteRegexOption": "Regex - Ekkobilde",
-    "pathRewriteStripPrefixOption": "Ta bort prefiks - fjern prefiks",
-    "pathRewriteValue": "Omskriv verdi",
-    "pathRewriteRegexPlaceholder": "/ny/$1",
-    "pathRewriteDefaultPlaceholder": "/ny sti",
-    "pathRewritePrefixHelp": "Erstatt det samsvarende prefikset med denne verdien",
-    "pathRewriteExactHelp": "Erstatt hele banen med denne verdien når stien samsvarer nøyaktig",
-    "pathRewriteRegexHelp": "Bruk opptaksgrupper som $1, $2 for erstatning",
-    "pathRewriteStripPrefixHelp": "La stå tomt for å ta opp prefiks eller legge til nytt prefiks",
-    "pathRewritePrefix": "Prefiks",
-    "pathRewriteExact": "Nøyaktig",
-    "pathRewriteRegex": "Regex",
-    "pathRewriteStrip": "Stripe",
-    "pathRewriteStripLabel": "stripe",
-    "sidebarEnableEnterpriseLicense": "Aktiver Enterprise lisens",
-    "cannotbeUndone": "Dette kan ikke angres.",
-    "toConfirm": "å bekrefte",
-    "deleteClientQuestion": "Er du sikker på at du vil fjerne klienten fra nettstedet og organisasjonen?",
-    "clientMessageRemove": "Når klienten er fjernet, kan den ikke lenger koble seg til nettstedet."
+    "rewritePathDescription": "Valgfritt omskrive stien før videresending til målet."
 }
--- a/messages/nl-NL.json
+++ b/messages/nl-NL.json
@@ -47,8 +47,9 @@
    "edit": "Bewerken",
    "siteConfirmDelete": "Verwijderen van site bevestigen",
    "siteDelete": "Site verwijderen",
-    "siteMessageRemove": "Eenmaal verwijderd zal de site niet langer toegankelijk zijn. Alle aan de site gekoppelde doelen zullen ook worden verwijderd.",
-    "siteQuestionRemove": "Weet u zeker dat u de site wilt verwijderen uit de organisatie?",
+    "siteMessageRemove": "Eenmaal verwijderd, zal de site niet langer toegankelijk zijn. Alle bronnen en doelen die aan de site zijn gekoppeld, zullen ook worden verwijderd.",
+    "siteMessageConfirm": "Typ ter bevestiging de naam van de site hieronder.",
+    "siteQuestionRemove": "Weet u zeker dat u de site {selectedSite} uit de organisatie wilt verwijderen?",
    "siteManageSites": "Sites beheren",
    "siteDescription": "Verbindt met uw netwerk via beveiligde tunnels",
    "siteCreate": "Site maken",
@@ -95,7 +96,7 @@
    "siteWgDescription": "Gebruik een WireGuard client om een tunnel te bouwen. Handmatige NAT installatie vereist.",
    "siteWgDescriptionSaas": "Gebruik elke WireGuard-client om een tunnel op te zetten. Handmatige NAT-instelling vereist. WERKT ALLEEN OP SELF HOSTED NODES",
    "siteLocalDescription": "Alleen lokale bronnen. Geen tunneling.",
-    "siteLocalDescriptionSaas": "Enkel lokale bronnen. Geen tunneling. Alleen beschikbaar op externe knooppunten.",
+    "siteLocalDescriptionSaas": "Alleen lokale bronnen. Geen tunneling. WERKT ALLEEN OP SELF HOSTED NODES",
    "siteSeeAll": "Alle sites bekijken",
    "siteTunnelDescription": "Bepaal hoe u verbinding wilt maken met uw site",
    "siteNewtCredentials": "Nieuwste aanmeldgegevens",
@@ -153,7 +154,8 @@
    "protected": "Beschermd",
    "notProtected": "Niet beveiligd",
    "resourceMessageRemove": "Eenmaal verwijderd, zal het bestand niet langer toegankelijk zijn. Alle doelen die gekoppeld zijn aan het hulpbron, zullen ook verwijderd worden.",
-    "resourceQuestionRemove": "Weet u zeker dat u het document van de organisatie wilt verwijderen?",
+    "resourceMessageConfirm": "Om te bevestigen, typ de naam van de bron hieronder.",
+    "resourceQuestionRemove": "Weet u zeker dat u de resource {selectedResource} uit de organisatie wilt verwijderen?",
    "resourceHTTP": "HTTPS bron",
    "resourceHTTPDescription": "Proxy verzoeken aan uw app via HTTPS via een subdomein of basisdomein.",
    "resourceRaw": "TCP/UDP bron",
@@ -218,7 +220,7 @@
    "orgDeleteConfirm": "Bevestig Verwijderen Organisatie",
    "orgMessageRemove": "Deze actie is onomkeerbaar en zal alle bijbehorende gegevens verwijderen.",
    "orgMessageConfirm": "Om te bevestigen, typ de naam van de onderstaande organisatie in.",
-    "orgQuestionRemove": "Weet u zeker dat u de organisatie wilt verwijderen?",
+    "orgQuestionRemove": "Weet u zeker dat u de organisatie {selectedOrg} wilt verwijderen?",
    "orgUpdated": "Organisatie bijgewerkt",
    "orgUpdatedDescription": "De organisatie is bijgewerkt.",
    "orgErrorUpdate": "Bijwerken organisatie mislukt",
@@ -285,8 +287,9 @@
    "apiKeysAdd": "API-sleutel genereren",
    "apiKeysErrorDelete": "Fout bij verwijderen API-sleutel",
    "apiKeysErrorDeleteMessage": "Fout bij verwijderen API-sleutel",
-    "apiKeysQuestionRemove": "Weet u zeker dat u de API-sleutel van de organisatie wilt verwijderen?",
+    "apiKeysQuestionRemove": "Weet u zeker dat u de API-sleutel {selectedApiKey} van de organisatie wilt verwijderen?",
    "apiKeysMessageRemove": "Eenmaal verwijderd, kan de API-sleutel niet meer worden gebruikt.",
+    "apiKeysMessageConfirm": "Om dit te bevestigen, typt u de naam van de API-sleutel hieronder.",
    "apiKeysDeleteConfirm": "Bevestig Verwijderen API-sleutel",
    "apiKeysDelete": "API-sleutel verwijderen",
    "apiKeysManage": "API-sleutels beheren",
@@ -302,7 +305,8 @@
    "userDeleteConfirm": "Bevestig verwijderen gebruiker",
    "userDeleteServer": "Gebruiker verwijderen van de server",
    "userMessageRemove": "De gebruiker zal uit alle organisaties verwijderd worden en volledig verwijderd worden van de server.",
-    "userQuestionRemove": "Weet u zeker dat u de gebruiker permanent van de server wilt verwijderen?",
+    "userMessageConfirm": "Typ de naam van de gebruiker hieronder om te bevestigen.",
+    "userQuestionRemove": "Weet je zeker dat je {selectedUser} permanent van de server wilt verwijderen?",
    "licenseKey": "Licentie sleutel",
    "valid": "Geldig",
    "numberOfSites": "Aantal sites",
@@ -335,7 +339,7 @@
    "fossorialLicense": "Fossorial Commerciële licentie- en abonnementsvoorwaarden bekijken",
    "licenseMessageRemove": "Dit zal de licentiesleutel en alle bijbehorende machtigingen verwijderen die hierdoor zijn verleend.",
    "licenseMessageConfirm": "Typ de licentiesleutel hieronder om te bevestigen.",
-    "licenseQuestionRemove": "Weet u zeker dat u de licentiesleutel wilt verwijderen?",
+    "licenseQuestionRemove": "Weet u zeker dat u de licentiesleutel {selectedKey} wilt verwijderen?",
    "licenseKeyDelete": "Licentiesleutel verwijderen",
    "licenseKeyDeleteConfirm": "Bevestig verwijderen licentiesleutel",
    "licenseTitle": "Licentiestatus beheren",
@@ -368,7 +372,7 @@
    "inviteRemoveErrorDescription": "Er is een fout opgetreden tijdens het verwijderen van de uitnodiging.",
    "inviteRemoved": "Uitnodiging verwijderd",
    "inviteRemovedDescription": "De uitnodiging voor {email} is verwijderd.",
-    "inviteQuestionRemove": "Weet je zeker dat je de uitnodiging wilt verwijderen?",
+    "inviteQuestionRemove": "Weet u zeker dat u de uitnodiging {email} wilt verwijderen?",
    "inviteMessageRemove": "Eenmaal verwijderd, zal deze uitnodiging niet meer geldig zijn. U kunt de gebruiker later altijd opnieuw uitnodigen.",
    "inviteMessageConfirm": "Om dit te bevestigen, typ dan het e-mailadres van onderstaande uitnodiging.",
    "inviteQuestionRegenerate": "Weet u zeker dat u de uitnodiging voor {email}opnieuw wilt genereren? Dit zal de vorige uitnodiging intrekken.",
@@ -394,8 +398,9 @@
    "userErrorOrgRemoveDescription": "Er is een fout opgetreden tijdens het verwijderen van de gebruiker.",
    "userOrgRemoved": "Gebruiker verwijderd",
    "userOrgRemovedDescription": "De gebruiker {email} is verwijderd uit de organisatie.",
-    "userQuestionOrgRemove": "Weet u zeker dat u deze gebruiker wilt verwijderen uit de organisatie?",
+    "userQuestionOrgRemove": "Weet u zeker dat u {email} wilt verwijderen uit de organisatie?",
    "userMessageOrgRemove": "Eenmaal verwijderd, heeft deze gebruiker geen toegang meer tot de organisatie. Je kunt ze later altijd opnieuw uitnodigen, maar ze zullen de uitnodiging opnieuw moeten accepteren.",
+    "userMessageOrgConfirm": "Typ om te bevestigen de naam van de gebruiker hieronder.",
    "userRemoveOrgConfirm": "Bevestig verwijderen gebruiker",
    "userRemoveOrg": "Gebruiker uit organisatie verwijderen",
    "users": "Gebruikers",
@@ -463,10 +468,7 @@
    "createdAt": "Aangemaakt op",
    "proxyErrorInvalidHeader": "Ongeldige aangepaste Header waarde. Gebruik het domeinnaam formaat, of sla leeg op om de aangepaste Host header ongedaan te maken.",
    "proxyErrorTls": "Ongeldige TLS servernaam. Gebruik de domeinnaam of sla leeg op om de TLS servernaam te verwijderen.",
-    "proxyEnableSSL": "SSL inschakelen",
-    "proxyEnableSSLDescription": "SSL/TLS-versleuteling inschakelen voor beveiligde HTTPS-verbindingen naar uw doelen.",
-    "target": "Target",
-    "configureTarget": "Doelstellingen configureren",
+    "proxyEnableSSL": "SSL (https) inschakelen",
    "targetErrorFetch": "Ophalen van doelen mislukt",
    "targetErrorFetchDescription": "Er is een fout opgetreden bij het ophalen van de objecten",
    "siteErrorFetch": "Mislukt om resource op te halen",
@@ -493,7 +495,7 @@
    "targetTlsSettings": "HTTPS & TLS instellingen",
    "targetTlsSettingsDescription": "SSL/TLS-instellingen voor uw bron configureren",
    "targetTlsSettingsAdvanced": "Geavanceerde TLS instellingen",
-    "targetTlsSni": "TLS servernaam",
+    "targetTlsSni": "TLS Server Naam (SNI)",
    "targetTlsSniDescription": "De TLS servernaam om te gebruiken voor SNI. Laat leeg om de standaard te gebruiken.",
    "targetTlsSubmit": "Instellingen opslaan",
    "targets": "Doelstellingen configuratie",
@@ -502,21 +504,9 @@
    "targetStickySessionsDescription": "Behoud verbindingen op hetzelfde backend doel voor hun hele sessie.",
    "methodSelect": "Selecteer methode",
    "targetSubmit": "Doelwit toevoegen",
-    "targetNoOne": "Deze bron heeft geen doelen. Voeg een doel toe om te configureren waar verzoeken naar uw backend.",
+    "targetNoOne": "Geen doel toegevoegd. Voeg deze toe via dit formulier.",
    "targetNoOneDescription": "Het toevoegen van meer dan één doel hierboven zal de load balancering mogelijk maken.",
    "targetsSubmit": "Doelstellingen opslaan",
-    "addTarget": "Doelwit toevoegen",
-    "targetErrorInvalidIp": "Ongeldig IP-adres",
-    "targetErrorInvalidIpDescription": "Voer een geldig IP-adres of hostnaam in",
-    "targetErrorInvalidPort": "Ongeldige poort",
-    "targetErrorInvalidPortDescription": "Voer een geldig poortnummer in",
-    "targetErrorNoSite": "Geen site geselecteerd",
-    "targetErrorNoSiteDescription": "Selecteer een site voor het doel",
-    "targetCreated": "Doel aangemaakt",
-    "targetCreatedDescription": "Doel is succesvol aangemaakt",
-    "targetErrorCreate": "Kan doel niet aanmaken",
-    "targetErrorCreateDescription": "Fout opgetreden tijdens het aanmaken van het doel",
-    "save": "Opslaan",
    "proxyAdditional": "Extra Proxy-instellingen",
    "proxyAdditionalDescription": "Configureer hoe de proxy-instellingen van uw bron worden afgehandeld",
    "proxyCustomHeader": "Aangepaste Host-header",
@@ -725,7 +715,7 @@
    "pangolinServerAdmin": "Serverbeheer - Pangolin",
    "licenseTierProfessional": "Professionele licentie",
    "licenseTierEnterprise": "Enterprise Licentie",
-    "licenseTierPersonal": "Persoonlijke licentie",
+    "licenseTierCommercial": "Commerciële licentie",
    "licensed": "Gelicentieerd",
    "yes": "ja",
    "no": "Neen",
@@ -737,7 +727,7 @@
    "idpManageDescription": "Identiteitsaanbieders in het systeem bekijken en beheren",
    "idpDeletedDescription": "Identity provider succesvol verwijderd",
    "idpOidc": "OAuth2/OIDC",
-    "idpQuestionRemove": "Weet u zeker dat u de identiteitsprovider permanent wilt verwijderen?",
+    "idpQuestionRemove": "Weet u zeker dat u de identiteitsprovider {name} permanent wilt verwijderen?",
    "idpMessageRemove": "Dit zal de identiteitsprovider en alle bijbehorende configuraties verwijderen. Gebruikers die via deze provider authenticeren, kunnen niet langer inloggen.",
    "idpMessageConfirm": "Om dit te bevestigen, typt u de naam van onderstaande identiteitsprovider.",
    "idpConfirmDelete": "Bevestig verwijderen identiteit provider",
@@ -760,7 +750,7 @@
    "idpDisplayName": "Een weergavenaam voor deze identiteitsprovider",
    "idpAutoProvisionUsers": "Auto Provisie Gebruikers",
    "idpAutoProvisionUsersDescription": "Wanneer ingeschakeld, worden gebruikers automatisch in het systeem aangemaakt wanneer ze de eerste keer inloggen met de mogelijkheid om gebruikers toe te wijzen aan rollen en organisaties.",
-    "licenseBadge": "EE",
+    "licenseBadge": "Professioneel",
    "idpType": "Type provider",
    "idpTypeDescription": "Selecteer het type identiteitsprovider dat u wilt configureren",
    "idpOidcConfigure": "OAuth2/OIDC configuratie",
@@ -1094,6 +1084,7 @@
    "navbar": "Navigatiemenu",
    "navbarDescription": "Hoofd navigatie menu voor de applicatie",
    "navbarDocsLink": "Documentatie",
+    "commercialEdition": "Commerciële editie",
    "otpErrorEnable": "Kan 2FA niet inschakelen",
    "otpErrorEnableDescription": "Er is een fout opgetreden tijdens het inschakelen van 2FA",
    "otpSetupCheckCode": "Voer een 6-cijferige code in",
@@ -1149,7 +1140,7 @@
    "sidebarAllUsers": "Alle gebruikers",
    "sidebarIdentityProviders": "Identiteit aanbieders",
    "sidebarLicense": "Licentie",
-    "sidebarClients": "Clienten",
+    "sidebarClients": "Clients (Bèta)",
    "sidebarDomains": "Domeinen",
    "enableDockerSocket": "Schakel Docker Blauwdruk in",
    "enableDockerSocketDescription": "Schakel Docker Socket label in voor blauwdruk labels. Pad naar Nieuw.",
@@ -1206,8 +1197,9 @@
    "domainCreate": "Domein aanmaken",
    "domainCreatedDescription": "Domein succesvol aangemaakt",
    "domainDeletedDescription": "Domein succesvol verwijderd",
-    "domainQuestionRemove": "Weet u zeker dat u het domein uit uw account wilt verwijderen?",
+    "domainQuestionRemove": "Weet je zeker dat je het domein {domain} uit je account wilt verwijderen?",
    "domainMessageRemove": "Na verwijdering zal het domein niet langer aan je account gekoppeld zijn.",
+    "domainMessageConfirm": "Om te bevestigen, typ hieronder de domeinnaam.",
    "domainConfirmDelete": "Bevestig verwijdering van domein",
    "domainDelete": "Domein verwijderen",
    "domain": "Domein",
@@ -1274,7 +1266,7 @@
    "billingFreeTier": "Gratis Niveau",
    "billingWarningOverLimit": "Waarschuwing: U hebt een of meer gebruikslimieten overschreden. Uw sites maken geen verbinding totdat u uw abonnement aanpast of uw gebruik aanpast.",
    "billingUsageLimitsOverview": "Overzicht gebruikslimieten",
-    "billingMonitorUsage": "Houd uw gebruik in de gaten ten opzichte van de ingestelde limieten. Als u verhoogde limieten nodig heeft, neem dan contact met ons op support@pangolin.net.",
+    "billingMonitorUsage": "Houd uw gebruik in de gaten ten opzichte van de ingestelde limieten. Als u verhoogde limieten nodig heeft, neem dan contact met ons op support@fossorial.io.",
    "billingDataUsage": "Gegevensgebruik",
    "billingOnlineTime": "Site Online Tijd",
    "billingUsers": "Actieve Gebruikers",
@@ -1341,6 +1333,7 @@
    "twoFactorRequired": "Tweestapsverificatie is vereist om een beveiligingssleutel te registreren.",
    "twoFactor": "Tweestapsverificatie",
    "adminEnabled2FaOnYourAccount": "Je beheerder heeft tweestapsverificatie voor {email} ingeschakeld. Voltooi het instellingsproces om verder te gaan.",
+    "continueToApplication": "Doorgaan naar de applicatie",
    "securityKeyAdd": "Beveiligingssleutel toevoegen",
    "securityKeyRegisterTitle": "Nieuwe beveiligingssleutel registreren",
    "securityKeyRegisterDescription": "Verbind je beveiligingssleutel en voer een naam in om deze te identificeren",
@@ -1418,7 +1411,6 @@
    "externalProxyEnabled": "Externe Proxy Ingeschakeld",
    "addNewTarget": "Voeg nieuw doelwit toe",
    "targetsList": "Lijst met doelen",
-    "advancedMode": "Geavanceerde modus",
    "targetErrorDuplicateTargetFound": "Dubbel doelwit gevonden",
    "healthCheckHealthy": "Gezond",
    "healthCheckUnhealthy": "Ongezond",
@@ -1551,17 +1543,18 @@
    "autoLoginError": "Auto Login Fout",
    "autoLoginErrorNoRedirectUrl": "Geen redirect URL ontvangen van de identity provider.",
    "autoLoginErrorGeneratingUrl": "Genereren van authenticatie-URL mislukt.",
-    "remoteExitNodeManageRemoteExitNodes": "Externe knooppunten",
-    "remoteExitNodeDescription": "Zorgt voor één of meer externe knooppunten om de netwerkverbinding uit te breiden en het vertrouwen in de cloud te verminderen",
+    "remoteExitNodeManageRemoteExitNodes": "Beheer Zelf-Gehoste",
+    "remoteExitNodeDescription": "Beheer knooppunten om uw netwerkverbinding uit te breiden",
    "remoteExitNodes": "Nodes",
    "searchRemoteExitNodes": "Knooppunten zoeken...",
    "remoteExitNodeAdd": "Voeg node toe",
    "remoteExitNodeErrorDelete": "Fout bij verwijderen node",
-    "remoteExitNodeQuestionRemove": "Weet u zeker dat u het knooppunt uit de organisatie wilt verwijderen?",
+    "remoteExitNodeQuestionRemove": "Weet u zeker dat u het node {selectedNode} uit de organisatie wilt verwijderen?",
    "remoteExitNodeMessageRemove": "Eenmaal verwijderd, zal het knooppunt niet langer toegankelijk zijn.",
+    "remoteExitNodeMessageConfirm": "Om te bevestigen, typ de naam van het knooppunt hieronder.",
    "remoteExitNodeConfirmDelete": "Bevestig verwijderen node",
    "remoteExitNodeDelete": "Knoop verwijderen",
-    "sidebarRemoteExitNodes": "Externe knooppunten",
+    "sidebarRemoteExitNodes": "Nodes",
    "remoteExitNodeCreate": {
        "title": "Maak node",
        "description": "Maak een nieuwe node aan om uw netwerkverbinding uit te breiden",
@@ -1730,166 +1723,5 @@
    "authPageUpdated": "Auth-pagina succesvol bijgewerkt",
    "healthCheckNotAvailable": "Lokaal",
    "rewritePath": "Herschrijf Pad",
-    "rewritePathDescription": "Optioneel het pad herschrijven voordat je het naar het doel doorstuurt.",
-    "continueToApplication": "Doorgaan naar applicatie",
-    "checkingInvite": "Uitnodiging controleren",
-    "setResourceHeaderAuth": "stelResourceHeaderAuth",
-    "resourceHeaderAuthRemove": "Auth koptekst verwijderen",
-    "resourceHeaderAuthRemoveDescription": "Koptekst authenticatie succesvol verwijderd.",
-    "resourceErrorHeaderAuthRemove": "Kan Header-authenticatie niet verwijderen",
-    "resourceErrorHeaderAuthRemoveDescription": "Kon header authenticatie niet verwijderen voor de bron.",
-    "resourceHeaderAuthProtectionEnabled": "Koptekst authenticatie ingeschakeld",
-    "resourceHeaderAuthProtectionDisabled": "Header authenticatie uitgeschakeld",
-    "headerAuthRemove": "Auth koptekst verwijderen",
-    "headerAuthAdd": "Kopsauth toevoegen",
-    "resourceErrorHeaderAuthSetup": "Kan Header Authenticatie niet instellen",
-    "resourceErrorHeaderAuthSetupDescription": "Kan geen header authenticatie instellen voor de bron.",
-    "resourceHeaderAuthSetup": "Header Authenticatie set succesvol",
-    "resourceHeaderAuthSetupDescription": "Header authenticatie is met succes ingesteld.",
-    "resourceHeaderAuthSetupTitle": "Header Authenticatie instellen",
-    "resourceHeaderAuthSetupTitleDescription": "Stel de basis authenticatiegegevens (gebruikersnaam en wachtwoord) in om deze bron te beschermen met HTTP Header Authenticatie. Gebruik het formaat https://username:password@resource.example.com",
-    "resourceHeaderAuthSubmit": "Header Authenticatie instellen",
-    "actionSetResourceHeaderAuth": "Header Authenticatie instellen",
-    "enterpriseEdition": "Enterprise Edition",
-    "unlicensed": "Ongelicentieerd",
-    "beta": "Bèta",
-    "manageClients": "Beheer Cliënten",
-    "manageClientsDescription": "Klanten zijn apparaten die verbinding kunnen maken met uw sites",
-    "licenseTableValidUntil": "Geldig tot",
-    "saasLicenseKeysSettingsTitle": "Enterprise Licenties",
-    "saasLicenseKeysSettingsDescription": "Genereer en beheer de Enterprise licentiesleutels voor zelfgehoste Pangolin instanties",
-    "sidebarEnterpriseLicenses": "Licenties",
-    "generateLicenseKey": "Licentiesleutel genereren",
-    "generateLicenseKeyForm": {
-        "validation": {
-            "emailRequired": "Voer een geldig e-mailadres in",
-            "useCaseTypeRequired": "Selecteer een type voor gebruik",
-            "firstNameRequired": "Voornaam is vereist",
-            "lastNameRequired": "Achternaam is vereist",
-            "primaryUseRequired": "Beschrijf uw primaire gebruik",
-            "jobTitleRequiredBusiness": "Functitel is vereist voor business gebruik",
-            "industryRequiredBusiness": "Industrie is vereist voor zakelijk gebruik",
-            "stateProvinceRegionRequired": "Provincie/Regio is vereist",
-            "postalZipCodeRequired": "Postcode is vereist",
-            "companyNameRequiredBusiness": "Bedrijfsnaam is vereist voor zakelijk gebruik",
-            "countryOfResidenceRequiredBusiness": "Land van verblijf is vereist voor zakelijk gebruik",
-            "countryRequiredPersonal": "Land is vereist voor persoonlijk gebruik",
-            "agreeToTermsRequired": "U moet akkoord gaan met de voorwaarden",
-            "complianceConfirmationRequired": "U moet de naleving van de Fossorial Commerciële licentie bevestigen"
-        },
-        "useCaseOptions": {
-            "personal": {
-                "title": "Persoonlijk gebruik",
-                "description": "Voor individueel, niet-commercieel gebruik, zoals leren, persoonlijke projecten of experimenten."
-            },
-            "business": {
-                "title": "Zakelijk gebruik",
-                "description": "Voor gebruik binnen organisaties, bedrijven, commerciële of inkomstengenererende activiteiten."
-            }
-        },
-        "steps": {
-            "emailLicenseType": {
-                "title": "E-mail & Licentie Type",
-                "description": "Voer uw e-mailadres in en kies uw licentietype"
-            },
-            "personalInformation": {
-                "title": "Persoonlijke informatie",
-                "description": "Vertel ons over jezelf"
-            },
-            "contactInformation": {
-                "title": "Contact informatie",
-                "description": "Uw contactgegevens"
-            },
-            "termsGenerate": {
-                "title": "Voorwaarden & Genereer",
-                "description": "Controleer en accepteer termen om uw licentie te genereren"
-            }
-        },
-        "alerts": {
-            "commercialUseDisclosure": {
-                "title": "Disclosure voor gebruik",
-                "description": "Selecteer de licentielift die precies overeenkomt met het beoogde gebruik. De Persoonlijke Licentie staat het gratis gebruik van de software toe voor individuele, niet-commerciële of kleinschalige commerciële activiteiten met jaarlijkse bruto inkomsten van minder dan $100.000 USD. Elk gebruik buiten deze grenzen - inclusief gebruik binnen een bedrijf, organisatie, of andere inkomstengenererende omgeving - vereist een geldige Enterprise-licentie en betaling van de toepasselijke licentiekosten. Alle gebruikers, Persoonlijk of Enterprise, moeten voldoen aan de Fossorial Commerciële Licentievoorwaarden."
-            },
-            "trialPeriodInformation": {
-                "title": "Informatie proefperiode",
-                "description": "Deze licentiesleutel maakt bedrijfsfuncties mogelijk voor een evaluatieperiode van 7 dagen. Continue toegang tot betaalde functies na de evaluatieperiode vereist activering onder een geldige Persoonlijke of Enterprise License. Voor een Enterprise licentie, neem contact op met sales@pangolin.net."
-            }
-        },
-        "form": {
-            "useCaseQuestion": "Gebruikt u Pangolin voor persoonlijk of zakelijk gebruik?",
-            "firstName": "Voornaam is vereist.",
-            "lastName": "Achternaam is vereist",
-            "jobTitle": "Job titel",
-            "primaryUseQuestion": "Waar bent u primair van plan Pangolin voor te gebruiken?",
-            "industryQuestion": "Wat is uw industrie?",
-            "prospectiveUsersQuestion": "Hoeveel potentiële gebruikers verwacht je te hebben?",
-            "prospectiveSitesQuestion": "Hoeveel potentiële sites (tunnels) verwacht je te hebben?",
-            "companyName": "Naam bedrijf",
-            "countryOfResidence": "Land van verblijf",
-            "stateProvinceRegion": "Staat / Provincie / Regio",
-            "postalZipCode": "Postcode / postcode",
-            "companyWebsite": "Bedrijfs website",
-            "companyPhoneNumber": "Bedrijfs telefoonnummer",
-            "country": "Land",
-            "phoneNumberOptional": "Telefoonnummer (optioneel)",
-            "complianceConfirmation": "Ik bevestig dat de door mij verstrekte informatie juist is en dat ik mij aan de Fossorial Commerciële licentie houd. Het melden van onjuiste informatie of het verkeerd identificeren van het gebruik van het product is een schending van de licentie en kan leiden tot het intrekken van uw sleutel."
-        },
-        "buttons": {
-            "close": "Sluiten",
-            "previous": "named@@0",
-            "next": "Volgende",
-            "generateLicenseKey": "Licentiesleutel genereren"
-        },
-        "toasts": {
-            "success": {
-                "title": "Licentiesleutel succesvol gegenereerd",
-                "description": "Uw licentiesleutel is gegenereerd en is klaar voor gebruik."
-            },
-            "error": {
-                "title": "Kan licentiesleutel niet genereren",
-                "description": "Fout opgetreden tijdens het genereren van de licentiesleutel."
-            }
-        }
-    },
-    "priority": "Prioriteit",
-    "priorityDescription": "routes met hogere prioriteit worden eerst geëvalueerd. Prioriteit = 100 betekent automatisch bestellen (systeem beslist de). Gebruik een ander nummer om handmatige prioriteit af te dwingen.",
-    "instanceName": "Naam instantie",
-    "pathMatchModalTitle": "Configureren van overeenkomende pad",
-    "pathMatchModalDescription": "Stel in hoe inkomende verzoeken moeten worden gekoppeld aan hun pad.",
-    "pathMatchType": "Wedstrijd Type",
-    "pathMatchPrefix": "Voorvoegsel",
-    "pathMatchExact": "Exacte",
-    "pathMatchRegex": "Regex",
-    "pathMatchValue": "Pad waarde",
-    "clear": "Verwijderen",
-    "saveChanges": "Wijzigingen opslaan",
-    "pathMatchRegexPlaceholder": "^/api/.*",
-    "pathMatchDefaultPlaceholder": "/Pad",
-    "pathMatchPrefixHelp": "Voorbeeld: /api komt overeen met /api, /api/gebruikers, etc.",
-    "pathMatchExactHelp": "Voorbeeld: /api matcht alleen /api",
-    "pathMatchRegexHelp": "Voorbeeld: ^/api/.* komt overeen met /api/any",
-    "pathRewriteModalTitle": "Configureer pad herschrijven",
-    "pathRewriteModalDescription": "Verander het overeenstemmende pad voor het doorsturen naar het doel.",
-    "pathRewriteType": "Herschrijf Type",
-    "pathRewritePrefixOption": "Voorvoegsel - prefix vervangen",
-    "pathRewriteExactOption": "Exacte - Vervang het gehele pad",
-    "pathRewriteRegexOption": "Regex - Patroon vervanging",
-    "pathRewriteStripPrefixOption": "Voorvoegsel verwijderen - Verwijder voorvoegsel",
-    "pathRewriteValue": "Herschrijf Waarde",
-    "pathRewriteRegexPlaceholder": "/nieuw/$1",
-    "pathRewriteDefaultPlaceholder": "/nieuwe-pad",
-    "pathRewritePrefixHelp": "Vervang de overeenkomstige prefix door deze waarde",
-    "pathRewriteExactHelp": "Vervang het hele pad met deze waarde wanneer het pad precies overeenkomt",
-    "pathRewriteRegexHelp": "Gebruik capturegroepen zoals $1, $2 voor vervanging",
-    "pathRewriteStripPrefixHelp": "Laat leeg om de voorvoegsel te strippen of geef een nieuw voorvoegsel",
-    "pathRewritePrefix": "Voorvoegsel",
-    "pathRewriteExact": "Exacte",
-    "pathRewriteRegex": "Regex",
-    "pathRewriteStrip": "Verwijder",
-    "pathRewriteStripLabel": "strip",
-    "sidebarEnableEnterpriseLicense": "Activeer Enterprise Licentie",
-    "cannotbeUndone": "Dit kan niet ongedaan worden gemaakt.",
-    "toConfirm": "om te bevestigen",
-    "deleteClientQuestion": "Weet u zeker dat u de client van de site en organisatie wilt verwijderen?",
-    "clientMessageRemove": "Eenmaal verwijderd, kan de client geen verbinding meer maken met de site."
+    "rewritePathDescription": "Optioneel het pad herschrijven voordat je het naar het doel doorstuurt."
 }
--- a/messages/pl-PL.json
+++ b/messages/pl-PL.json
@@ -47,8 +47,9 @@
    "edit": "Edytuj",
    "siteConfirmDelete": "Potwierdź usunięcie witryny",
    "siteDelete": "Usuń witrynę",
-    "siteMessageRemove": "Po usunięciu witryna nie będzie już dostępna. Wszystkie cele związane z witryną zostaną również usunięte.",
-    "siteQuestionRemove": "Czy na pewno chcesz usunąć witrynę z organizacji?",
+    "siteMessageRemove": "Po usunięciu, witryna nie będzie już dostępna. Wszystkie zasoby i cele związane z witryną zostaną również usunięte.",
+    "siteMessageConfirm": "Aby potwierdzić, wpisz nazwę witryny poniżej.",
+    "siteQuestionRemove": "Czy na pewno chcesz usunąć stronę {selectedSite} z organizacji?",
    "siteManageSites": "Zarządzaj stronami",
    "siteDescription": "Zezwalaj na połączenie z siecią przez bezpieczne tunele",
    "siteCreate": "Utwórz witrynę",
@@ -95,7 +96,7 @@
    "siteWgDescription": "Użyj dowolnego klienta WireGuard do utworzenia tunelu. Wymagana jest ręczna konfiguracja NAT.",
    "siteWgDescriptionSaas": "Użyj dowolnego klienta WireGuard do utworzenia tunelu. Wymagana ręczna konfiguracja NAT. DZIAŁA TYLKO NA SAMODZIELNIE HOSTOWANYCH WĘZŁACH",
    "siteLocalDescription": "Tylko lokalne zasoby. Brak tunelu.",
-    "siteLocalDescriptionSaas": "Tylko zasoby lokalne. Brak tunelu. Dostępne tylko w węzłach zdalnych.",
+    "siteLocalDescriptionSaas": "Tylko zasoby lokalne. Brak tunelowania. DZIAŁA TYLKO NA SAMODZIELNIE HOSTOWANYCH WĘZŁACH",
    "siteSeeAll": "Zobacz wszystkie witryny",
    "siteTunnelDescription": "Określ jak chcesz połączyć się ze swoją stroną",
    "siteNewtCredentials": "Aktualne dane logowania",
@@ -153,7 +154,8 @@
    "protected": "Chronione",
    "notProtected": "Niechronione",
    "resourceMessageRemove": "Po usunięciu, zasób nie będzie już dostępny. Wszystkie cele związane z zasobem zostaną również usunięte.",
-    "resourceQuestionRemove": "Czy na pewno chcesz usunąć zasób z organizacji?",
+    "resourceMessageConfirm": "Aby potwierdzić, wpisz nazwę zasobu poniżej.",
+    "resourceQuestionRemove": "Czy na pewno chcesz usunąć zasób {selectedResource} z organizacji?",
    "resourceHTTP": "Zasób HTTPS",
    "resourceHTTPDescription": "Proxy do Twojej aplikacji przez HTTPS, przy użyciu poddomeny lub domeny bazowej.",
    "resourceRaw": "Surowy zasób TCP/UDP",
@@ -218,7 +220,7 @@
    "orgDeleteConfirm": "Potwierdź usunięcie organizacji",
    "orgMessageRemove": "Ta akcja jest nieodwracalna i usunie wszystkie powiązane dane.",
    "orgMessageConfirm": "Aby potwierdzić, wpisz nazwę organizacji poniżej.",
-    "orgQuestionRemove": "Czy na pewno chcesz usunąć organizację?",
+    "orgQuestionRemove": "Czy na pewno chcesz usunąć organizację {selectedOrg}?",
    "orgUpdated": "Organizacja zaktualizowana",
    "orgUpdatedDescription": "Organizacja została zaktualizowana.",
    "orgErrorUpdate": "Nie udało się zaktualizować organizacji",
@@ -285,8 +287,9 @@
    "apiKeysAdd": "Generuj klucz API",
    "apiKeysErrorDelete": "Błąd podczas usuwania klucza API",
    "apiKeysErrorDeleteMessage": "Błąd podczas usuwania klucza API",
-    "apiKeysQuestionRemove": "Czy na pewno chcesz usunąć klucz API z organizacji?",
+    "apiKeysQuestionRemove": "Czy na pewno chcesz usunąć klucz API {selectedApiKey} z organizacji?",
    "apiKeysMessageRemove": "Po usunięciu klucz API nie będzie już mógł być używany.",
+    "apiKeysMessageConfirm": "Aby potwierdzić, wpisz nazwę klucza API poniżej.",
    "apiKeysDeleteConfirm": "Potwierdź usunięcie klucza API",
    "apiKeysDelete": "Usuń klucz API",
    "apiKeysManage": "Zarządzaj kluczami API",
@@ -302,7 +305,8 @@
    "userDeleteConfirm": "Potwierdź usunięcie użytkownika",
    "userDeleteServer": "Usuń użytkownika z serwera",
    "userMessageRemove": "Użytkownik zostanie usunięty ze wszystkich organizacji i całkowicie usunięty z serwera.",
-    "userQuestionRemove": "Czy na pewno chcesz trwale usunąć użytkownika z serwera?",
+    "userMessageConfirm": "Aby potwierdzić, wpisz nazwę użytkownika poniżej.",
+    "userQuestionRemove": "Czy na pewno chcesz trwale usunąć {selectedUser} z serwera?",
    "licenseKey": "Klucz licencyjny",
    "valid": "Prawidłowy",
    "numberOfSites": "Liczba witryn",
@@ -335,7 +339,7 @@
    "fossorialLicense": "Zobacz Fossorial Commercial License & Subskrypcja",
    "licenseMessageRemove": "Spowoduje to usunięcie klucza licencyjnego i wszystkich przypisanych przez niego uprawnień.",
    "licenseMessageConfirm": "Aby potwierdzić, wpisz klucz licencyjny poniżej.",
-    "licenseQuestionRemove": "Czy na pewno chcesz usunąć klucz licencyjny?",
+    "licenseQuestionRemove": "Czy na pewno chcesz usunąć klucz licencyjny {selectedKey}?",
    "licenseKeyDelete": "Usuń klucz licencyjny",
    "licenseKeyDeleteConfirm": "Potwierdź usunięcie klucza licencyjnego",
    "licenseTitle": "Zarządzaj statusem licencji",
@@ -368,7 +372,7 @@
    "inviteRemoveErrorDescription": "Wystąpił błąd podczas usuwania zaproszenia.",
    "inviteRemoved": "Zaproszenie usunięte",
    "inviteRemovedDescription": "Zaproszenie dla {email} zostało usunięte.",
-    "inviteQuestionRemove": "Czy na pewno chcesz usunąć zaproszenie?",
+    "inviteQuestionRemove": "Czy na pewno chcesz usunąć zaproszenie {email}?",
    "inviteMessageRemove": "Po usunięciu to zaproszenie nie będzie już ważne. Zawsze możesz ponownie zaprosić użytkownika później.",
    "inviteMessageConfirm": "Aby potwierdzić, wpisz poniżej adres email zaproszenia.",
    "inviteQuestionRegenerate": "Czy na pewno chcesz ponownie wygenerować zaproszenie {email}? Spowoduje to unieważnienie poprzedniego zaproszenia.",
@@ -394,8 +398,9 @@
    "userErrorOrgRemoveDescription": "Wystąpił błąd podczas usuwania użytkownika.",
    "userOrgRemoved": "Użytkownik usunięty",
    "userOrgRemovedDescription": "Użytkownik {email} został usunięty z organizacji.",
-    "userQuestionOrgRemove": "Czy na pewno chcesz usunąć tego użytkownika z organizacji?",
+    "userQuestionOrgRemove": "Czy na pewno chcesz usunąć {email} z organizacji?",
    "userMessageOrgRemove": "Po usunięciu ten użytkownik nie będzie miał już dostępu do organizacji. Zawsze możesz ponownie go zaprosić później, ale będzie musiał ponownie zaakceptować zaproszenie.",
+    "userMessageOrgConfirm": "Aby potwierdzić, wpisz nazwę użytkownika poniżej.",
    "userRemoveOrgConfirm": "Potwierdź usunięcie użytkownika",
    "userRemoveOrg": "Usuń użytkownika z organizacji",
    "users": "Użytkownicy",
@@ -463,10 +468,7 @@
    "createdAt": "Utworzono",
    "proxyErrorInvalidHeader": "Nieprawidłowa wartość niestandardowego nagłówka hosta. Użyj formatu nazwy domeny lub zapisz pusty, aby usunąć niestandardowy nagłówek hosta.",
    "proxyErrorTls": "Nieprawidłowa nazwa serwera TLS. Użyj formatu nazwy domeny lub zapisz pusty, aby usunąć nazwę serwera TLS.",
-    "proxyEnableSSL": "Włącz SSL",
-    "proxyEnableSSLDescription": "Włącz szyfrowanie SSL/TLS dla bezpiecznych połączeń HTTPS z Twoimi celami.",
-    "target": "Target",
-    "configureTarget": "Konfiguruj Targety",
+    "proxyEnableSSL": "Włącz SSL (https)",
    "targetErrorFetch": "Nie udało się pobrać celów",
    "targetErrorFetchDescription": "Wystąpił błąd podczas pobierania celów",
    "siteErrorFetch": "Nie udało się pobrać zasobu",
@@ -493,7 +495,7 @@
    "targetTlsSettings": "Konfiguracja bezpiecznego połączenia",
    "targetTlsSettingsDescription": "Skonfiguruj ustawienia SSL/TLS dla twojego zasobu",
    "targetTlsSettingsAdvanced": "Zaawansowane ustawienia TLS",
-    "targetTlsSni": "Nazwa serwera TLS",
+    "targetTlsSni": "Nazwa serwera TLS (SNI)",
    "targetTlsSniDescription": "Nazwa serwera TLS do użycia dla SNI. Pozostaw puste, aby użyć domyślnej.",
    "targetTlsSubmit": "Zapisz ustawienia",
    "targets": "Konfiguracja celów",
@@ -502,21 +504,9 @@
    "targetStickySessionsDescription": "Utrzymuj połączenia na tym samym celu backendowym przez całą sesję.",
    "methodSelect": "Wybierz metodę",
    "targetSubmit": "Dodaj cel",
-    "targetNoOne": "Ten zasób nie ma żadnych celów. Dodaj cel, aby skonfigurować miejsce wysyłania żądań do twojego backendu.",
+    "targetNoOne": "Brak celów. Dodaj cel używając formularza.",
    "targetNoOneDescription": "Dodanie więcej niż jednego celu powyżej włączy równoważenie obciążenia.",
    "targetsSubmit": "Zapisz cele",
-    "addTarget": "Dodaj cel",
-    "targetErrorInvalidIp": "Nieprawidłowy adres IP",
-    "targetErrorInvalidIpDescription": "Wprowadź prawidłowy adres IP lub nazwę hosta",
-    "targetErrorInvalidPort": "Nieprawidłowy port",
-    "targetErrorInvalidPortDescription": "Wprowadź prawidłowy numer portu",
-    "targetErrorNoSite": "Nie wybrano witryny",
-    "targetErrorNoSiteDescription": "Wybierz witrynę docelową",
-    "targetCreated": "Cel utworzony",
-    "targetCreatedDescription": "Cel został utworzony pomyślnie",
-    "targetErrorCreate": "Nie udało się utworzyć celu",
-    "targetErrorCreateDescription": "Wystąpił błąd podczas tworzenia celu",
-    "save": "Zapisz",
    "proxyAdditional": "Dodatkowe ustawienia proxy",
    "proxyAdditionalDescription": "Skonfiguruj jak twój zasób obsługuje ustawienia proxy",
    "proxyCustomHeader": "Niestandardowy nagłówek hosta",
@@ -725,7 +715,7 @@
    "pangolinServerAdmin": "Administrator serwera - Pangolin",
    "licenseTierProfessional": "Licencja Professional",
    "licenseTierEnterprise": "Licencja Enterprise",
-    "licenseTierPersonal": "Licencja osobista",
+    "licenseTierCommercial": "Licencja handlowa",
    "licensed": "Licencjonowany",
    "yes": "Tak",
    "no": "Nie",
@@ -737,7 +727,7 @@
    "idpManageDescription": "Wyświetl i zarządzaj dostawcami tożsamości w systemie",
    "idpDeletedDescription": "Dostawca tożsamości został pomyślnie usunięty",
    "idpOidc": "OAuth2/OIDC",
-    "idpQuestionRemove": "Czy na pewno chcesz trwale usunąć dostawcę tożsamości?",
+    "idpQuestionRemove": "Czy na pewno chcesz trwale usunąć dostawcę tożsamości {name}?",
    "idpMessageRemove": "Spowoduje to usunięcie dostawcy tożsamości i wszystkich powiązanych konfiguracji. Użytkownicy uwierzytelniający się przez tego dostawcę nie będą mogli się już zalogować.",
    "idpMessageConfirm": "Aby potwierdzić, wpisz nazwę dostawcy tożsamości poniżej.",
    "idpConfirmDelete": "Potwierdź usunięcie dostawcy tożsamości",
@@ -760,7 +750,7 @@
    "idpDisplayName": "Nazwa wyświetlana dla tego dostawcy tożsamości",
    "idpAutoProvisionUsers": "Automatyczne tworzenie użytkowników",
    "idpAutoProvisionUsersDescription": "Gdy włączone, użytkownicy będą automatycznie tworzeni w systemie przy pierwszym logowaniu z możliwością mapowania użytkowników do ról i organizacji.",
-    "licenseBadge": "EE",
+    "licenseBadge": "Profesjonalny",
    "idpType": "Typ dostawcy",
    "idpTypeDescription": "Wybierz typ dostawcy tożsamości, który chcesz skonfigurować",
    "idpOidcConfigure": "Konfiguracja OAuth2/OIDC",
@@ -1094,6 +1084,7 @@
    "navbar": "Menu nawigacyjne",
    "navbarDescription": "Główne menu nawigacyjne aplikacji",
    "navbarDocsLink": "Dokumentacja",
+    "commercialEdition": "Edycja komercyjna",
    "otpErrorEnable": "Nie można włączyć 2FA",
    "otpErrorEnableDescription": "Wystąpił błąd podczas włączania 2FA",
    "otpSetupCheckCode": "Wprowadź 6-cyfrowy kod",
@@ -1149,7 +1140,7 @@
    "sidebarAllUsers": "Wszyscy użytkownicy",
    "sidebarIdentityProviders": "Dostawcy tożsamości",
    "sidebarLicense": "Licencja",
-    "sidebarClients": "Klientami",
+    "sidebarClients": "Klienci (Beta)",
    "sidebarDomains": "Domeny",
    "enableDockerSocket": "Włącz schemat dokera",
    "enableDockerSocketDescription": "Włącz etykietowanie kieszeni dokującej dla etykiet schematów. Ścieżka do gniazda musi być dostarczona do Newt.",
@@ -1206,8 +1197,9 @@
    "domainCreate": "Utwórz domenę",
    "domainCreatedDescription": "Domena utworzona pomyślnie",
    "domainDeletedDescription": "Domena usunięta pomyślnie",
-    "domainQuestionRemove": "Czy na pewno chcesz usunąć domenę ze swojego konta?",
+    "domainQuestionRemove": "Czy na pewno chcesz usunąć domenę {domain} ze swojego konta?",
    "domainMessageRemove": "Po usunięciu domena nie będzie już powiązana z twoim kontem.",
+    "domainMessageConfirm": "Aby potwierdzić, wpisz nazwę domeny poniżej.",
    "domainConfirmDelete": "Potwierdź usunięcie domeny",
    "domainDelete": "Usuń domenę",
    "domain": "Domena",
@@ -1274,7 +1266,7 @@
    "billingFreeTier": "Darmowy pakiet",
    "billingWarningOverLimit": "Ostrzeżenie: Przekroczyłeś jeden lub więcej limitów użytkowania. Twoje witryny nie połączą się, dopóki nie zmienisz subskrypcji lub nie dostosujesz użytkowania.",
    "billingUsageLimitsOverview": "Przegląd Limitów Użytkowania",
-    "billingMonitorUsage": "Monitoruj swoje wykorzystanie w porównaniu do skonfigurowanych limitów. Jeśli potrzebujesz zwiększenia limitów, skontaktuj się z nami pod adresem support@pangolin.net.",
+    "billingMonitorUsage": "Monitoruj swoje wykorzystanie w porównaniu do skonfigurowanych limitów. Jeśli potrzebujesz zwiększenia limitów, skontaktuj się z nami pod adresem support@fossorial.io.",
    "billingDataUsage": "Użycie danych",
    "billingOnlineTime": "Czas Online Strony",
    "billingUsers": "Aktywni użytkownicy",
@@ -1341,6 +1333,7 @@
    "twoFactorRequired": "Uwierzytelnianie dwuskładnikowe jest wymagane do zarejestrowania klucza bezpieczeństwa.",
    "twoFactor": "Uwierzytelnianie dwuskładnikowe",
    "adminEnabled2FaOnYourAccount": "Twój administrator włączył uwierzytelnianie dwuskładnikowe dla {email}. Proszę ukończyć proces konfiguracji, aby kontynuować.",
+    "continueToApplication": "Kontynuuj do aplikacji",
    "securityKeyAdd": "Dodaj klucz bezpieczeństwa",
    "securityKeyRegisterTitle": "Zarejestruj nowy klucz bezpieczeństwa",
    "securityKeyRegisterDescription": "Podłącz swój klucz bezpieczeństwa i wprowadź nazwę, aby go zidentyfikować",
@@ -1418,7 +1411,6 @@
    "externalProxyEnabled": "Zewnętrzny Proxy Włączony",
    "addNewTarget": "Dodaj nowy cel",
    "targetsList": "Lista celów",
-    "advancedMode": "Tryb zaawansowany",
    "targetErrorDuplicateTargetFound": "Znaleziono duplikat celu",
    "healthCheckHealthy": "Zdrowy",
    "healthCheckUnhealthy": "Niezdrowy",
@@ -1551,17 +1543,18 @@
    "autoLoginError": "Błąd automatycznego logowania",
    "autoLoginErrorNoRedirectUrl": "Nie otrzymano URL przekierowania od dostawcy tożsamości.",
    "autoLoginErrorGeneratingUrl": "Nie udało się wygenerować URL uwierzytelniania.",
-    "remoteExitNodeManageRemoteExitNodes": "Zdalne węzły",
-    "remoteExitNodeDescription": "Samodzielny host jeden lub więcej węzłów zdalnych, aby rozszerzyć łączność z siecią i zmniejszyć zależność od chmury",
+    "remoteExitNodeManageRemoteExitNodes": "Zarządzaj Samodzielnie-Hostingowane",
+    "remoteExitNodeDescription": "Zarządzaj węzłami w celu rozszerzenia połączenia z siecią",
    "remoteExitNodes": "Węzły",
    "searchRemoteExitNodes": "Szukaj węzłów...",
    "remoteExitNodeAdd": "Dodaj węzeł",
    "remoteExitNodeErrorDelete": "Błąd podczas usuwania węzła",
-    "remoteExitNodeQuestionRemove": "Czy na pewno chcesz usunąć węzeł z organizacji?",
+    "remoteExitNodeQuestionRemove": "Czy na pewno chcesz usunąć węzeł {selectedNode} z organizacji?",
    "remoteExitNodeMessageRemove": "Po usunięciu, węzeł nie będzie już dostępny.",
+    "remoteExitNodeMessageConfirm": "Aby potwierdzić, wpisz nazwę węzła poniżej.",
    "remoteExitNodeConfirmDelete": "Potwierdź usunięcie węzła",
    "remoteExitNodeDelete": "Usuń węzeł",
-    "sidebarRemoteExitNodes": "Zdalne węzły",
+    "sidebarRemoteExitNodes": "Węzły",
    "remoteExitNodeCreate": {
        "title": "Utwórz węzeł",
        "description": "Utwórz nowy węzeł, aby rozszerzyć połączenie z siecią",
@@ -1730,166 +1723,5 @@
    "authPageUpdated": "Strona uwierzytelniania została pomyślnie zaktualizowana",
    "healthCheckNotAvailable": "Lokalny",
    "rewritePath": "Przepis Ścieżki",
-    "rewritePathDescription": "Opcjonalnie przepisz ścieżkę przed przesłaniem do celu.",
-    "continueToApplication": "Kontynuuj do aplikacji",
-    "checkingInvite": "Sprawdzanie zaproszenia",
-    "setResourceHeaderAuth": "setResourceHeaderAuth",
-    "resourceHeaderAuthRemove": "Usuń autoryzację nagłówka",
-    "resourceHeaderAuthRemoveDescription": "Uwierzytelnianie nagłówka zostało pomyślnie usunięte.",
-    "resourceErrorHeaderAuthRemove": "Nie udało się usunąć uwierzytelniania nagłówka",
-    "resourceErrorHeaderAuthRemoveDescription": "Nie można usunąć uwierzytelniania nagłówka zasobu.",
-    "resourceHeaderAuthProtectionEnabled": "Uwierzytelnianie nagłówka włączone",
-    "resourceHeaderAuthProtectionDisabled": "Uwierzytelnianie nagłówka wyłączone",
-    "headerAuthRemove": "Usuń autoryzację nagłówka",
-    "headerAuthAdd": "Dodaj Autoryzacja nagłówka",
-    "resourceErrorHeaderAuthSetup": "Nie udało się ustawić uwierzytelniania nagłówka",
-    "resourceErrorHeaderAuthSetupDescription": "Nie można ustawić uwierzytelniania nagłówka dla zasobu.",
-    "resourceHeaderAuthSetup": "Uwierzytelnianie nagłówka ustawione pomyślnie",
-    "resourceHeaderAuthSetupDescription": "Uwierzytelnianie nagłówka zostało ustawione.",
-    "resourceHeaderAuthSetupTitle": "Ustaw uwierzytelnianie nagłówka",
-    "resourceHeaderAuthSetupTitleDescription": "Ustaw podstawowe dane uwierzytelniające (nazwa użytkownika i hasło), aby chronić ten zasób za pomocą uwierzytelniania nagłówka HTTP. Uzyskaj dostęp za pomocą formatu https://username:password@resource.example.com",
-    "resourceHeaderAuthSubmit": "Ustaw uwierzytelnianie nagłówka",
-    "actionSetResourceHeaderAuth": "Ustaw uwierzytelnianie nagłówka",
-    "enterpriseEdition": "Edycja Enterprise",
-    "unlicensed": "Nielicencjonowane",
-    "beta": "Beta",
-    "manageClients": "Zarządzaj klientami",
-    "manageClientsDescription": "Klienci to urządzenia, które mogą łączyć się z Twoimi witrynami",
-    "licenseTableValidUntil": "Ważny do",
-    "saasLicenseKeysSettingsTitle": "Licencje przedsiębiorstwa",
-    "saasLicenseKeysSettingsDescription": "Generuj i zarządzaj kluczami licencyjnymi Enterprise dla samodzielnych instancji Pangolin",
-    "sidebarEnterpriseLicenses": "Licencje",
-    "generateLicenseKey": "Generuj klucz licencyjny",
-    "generateLicenseKeyForm": {
-        "validation": {
-            "emailRequired": "Wprowadź poprawny adres e-mail",
-            "useCaseTypeRequired": "Proszę wybrać typ litery",
-            "firstNameRequired": "Imię jest wymagane",
-            "lastNameRequired": "Nazwisko jest wymagane",
-            "primaryUseRequired": "Opisz swoje podstawowe użycie",
-            "jobTitleRequiredBusiness": "Tytuł pracy jest wymagany do użytku służbowego",
-            "industryRequiredBusiness": "Przemysł jest wymagany do celów biznesowych.",
-            "stateProvinceRegionRequired": "Wymagany jest stan/województwo/region",
-            "postalZipCodeRequired": "Kod pocztowy jest wymagany",
-            "companyNameRequiredBusiness": "Nazwa firmy jest wymagana do użytku służbowego",
-            "countryOfResidenceRequiredBusiness": "Kraj zamieszkania jest wymagany do celów służbowych",
-            "countryRequiredPersonal": "Kraj jest wymagany do użytku osobistego",
-            "agreeToTermsRequired": "Musisz zaakceptować regulamin",
-            "complianceConfirmationRequired": "Musisz potwierdzić zgodność z Fossorial Commercial License"
-        },
-        "useCaseOptions": {
-            "personal": {
-                "title": "Użytkowanie osobiste",
-                "description": "Dla celów indywidualnych, niekomercyjnych, takich jak nauka, projekty osobiste lub eksperymenty."
-            },
-            "business": {
-                "title": "Wykorzystanie służbowe",
-                "description": "Do użytku w ramach organizacji, przedsiębiorstw lub działalności komercyjnej lub generującej dochody."
-            }
-        },
-        "steps": {
-            "emailLicenseType": {
-                "title": "Typ adresu e-mail i licencji",
-                "description": "Wprowadź swój adres e-mail i wybierz rodzaj licencji"
-            },
-            "personalInformation": {
-                "title": "Informacje osobiste",
-                "description": "Powiedz nam o sobie"
-            },
-            "contactInformation": {
-                "title": "Informacje kontaktowe",
-                "description": "Twoje dane kontaktowe"
-            },
-            "termsGenerate": {
-                "title": "Reguły i generuj",
-                "description": "Przejrzyj i zaakceptuj warunki generowania licencji"
-            }
-        },
-        "alerts": {
-            "commercialUseDisclosure": {
-                "title": "Ujawnienie użycia",
-                "description": "Wybierz poziom licencji, który dokładnie odzwierciedla zamierzone użycie. Licencja osobista pozwala na bezpłatne wykorzystanie oprogramowania do działalności komercyjnej, o charakterze indywidualnym, niekomercyjnym lub na małą skalę, o rocznym dochodzie brutto poniżej 100 000 USD. Wszelkie zastosowania wykraczające poza te ograniczenia – w tym wykorzystanie w przedsiębiorstwie, organizacja, lub inne środowisko generujące dochód – wymaga ważnej licencji przedsiębiorstwa i uiszczenia stosownej opłaty licencyjnej. Wszyscy użytkownicy, niezależnie od tego, czy są prywatni czy przedsiębiorcy, muszą przestrzegać warunków licencji Fossorial Commercial License."
-            },
-            "trialPeriodInformation": {
-                "title": "Informacje o okresie próbnym",
-                "description": "Ten klucz licencyjny umożliwia przedsiębiorstwom funkcje na 7-dniowy okres oceny. Ciągły dostęp do płatnych funkcji po zakończeniu okresu oceny wymaga aktywacji na podstawie ważnej licencji osobistej lub prywatnej. W celu uzyskania licencji przedsiębiorstwa skontaktuj się z sales@pangolin.net."
-            }
-        },
-        "form": {
-            "useCaseQuestion": "Używasz Pangolin do użytku osobistego lub biznesowego?",
-            "firstName": "Imię",
-            "lastName": "Nazwisko",
-            "jobTitle": "Tytuł zadania",
-            "primaryUseQuestion": "Na co planujesz przede wszystkim stosować lek Pangolin?",
-            "industryQuestion": "Jaki jest twój przemysł?",
-            "prospectiveUsersQuestion": "Ilu potencjalnych użytkowników oczekujesz?",
-            "prospectiveSitesQuestion": "Ile potencjalnych stron (tuneli) oczekujesz?",
-            "companyName": "Nazwa firmy",
-            "countryOfResidence": "Kraj zamieszkania",
-            "stateProvinceRegion": "Województwo / Region",
-            "postalZipCode": "Kod pocztowy",
-            "companyWebsite": "Strona internetowa firmy",
-            "companyPhoneNumber": "Numer telefonu firmy",
-            "country": "Kraj",
-            "phoneNumberOptional": "Numer telefonu (opcjonalnie)",
-            "complianceConfirmation": "Potwierdzam, że podane przeze mnie informacje są dokładne i że jestem zgodny z Fossorial Commercial License. Zgłaszanie nieprawidłowych informacji lub błędne oznaczanie użycia produktu jest naruszeniem licencji i może skutkować cofnięciem klucza."
-        },
-        "buttons": {
-            "close": "Zamknij",
-            "previous": "Poprzedni",
-            "next": "Następny",
-            "generateLicenseKey": "Generuj klucz licencyjny"
-        },
-        "toasts": {
-            "success": {
-                "title": "Klucz licencyjny wygenerowany pomyślnie",
-                "description": "Twój klucz licencyjny został wygenerowany i jest gotowy do użycia."
-            },
-            "error": {
-                "title": "Nie udało się wygenerować klucza licencyjnego",
-                "description": "Wystąpił błąd podczas generowania klucza licencji."
-            }
-        }
-    },
-    "priority": "Priorytet",
-    "priorityDescription": "Najpierw oceniane są trasy priorytetowe. Priorytet = 100 oznacza automatyczne zamawianie (decyzje systemowe). Użyj innego numeru, aby wyegzekwować ręczny priorytet.",
-    "instanceName": "Nazwa instancji",
-    "pathMatchModalTitle": "Skonfiguruj dopasowanie ścieżki",
-    "pathMatchModalDescription": "Skonfiguruj sposób dopasowania przychodzących żądań na podstawie ich ścieżki.",
-    "pathMatchType": "Typ dopasowania",
-    "pathMatchPrefix": "Prefiks",
-    "pathMatchExact": "Dokładny",
-    "pathMatchRegex": "Regex",
-    "pathMatchValue": "Wartość ścieżki",
-    "clear": "Wyczyść",
-    "saveChanges": "Zapisz zmiany",
-    "pathMatchRegexPlaceholder": "^/api/.*",
-    "pathMatchDefaultPlaceholder": "/ścieżka",
-    "pathMatchPrefixHelp": "Przykład: /api pasuje do /api, /api/users itp.",
-    "pathMatchExactHelp": "Przykład: /api pasuje tylko /api",
-    "pathMatchRegexHelp": "Przykład: ^/api/.* pasuje do /api/cokolwiek",
-    "pathRewriteModalTitle": "Konfiguruj Przepisywanie Ścieżki",
-    "pathRewriteModalDescription": "Przekształć dopasowaną ścieżkę przed przekierowaniem do celu.",
-    "pathRewriteType": "Typ przekierowania",
-    "pathRewritePrefixOption": "Prefiks - Zamień prefiks",
-    "pathRewriteExactOption": "Dokładny - Zamień całą ścieżkę",
-    "pathRewriteRegexOption": "Regex - zamiennik wzoru",
-    "pathRewriteStripPrefixOption": "Prefiks paska - Usuń prefiks",
-    "pathRewriteValue": "Przepisz wartość",
-    "pathRewriteRegexPlaceholder": "/nowy/$1",
-    "pathRewriteDefaultPlaceholder": "/new-path",
-    "pathRewritePrefixHelp": "Zastąp dopasowany prefiks tą wartością",
-    "pathRewriteExactHelp": "Zastąp całą ścieżkę tą wartością, gdy ścieżka dokładnie pasuje do siebie",
-    "pathRewriteRegexHelp": "Użyj grup przechwytywania takich jak $1, $2 do zamiany",
-    "pathRewriteStripPrefixHelp": "Pozostaw puste, aby usunąć prefiks lub podać nowy prefiks",
-    "pathRewritePrefix": "Prefiks",
-    "pathRewriteExact": "Dokładny",
-    "pathRewriteRegex": "Regex",
-    "pathRewriteStrip": "Pasek",
-    "pathRewriteStripLabel": "pasek",
-    "sidebarEnableEnterpriseLicense": "Włącz licencję przedsiębiorstwa",
-    "cannotbeUndone": "Tej operacji nie można cofnąć.",
-    "toConfirm": "potwierdzić",
-    "deleteClientQuestion": "Czy na pewno chcesz usunąć klienta z witryny i organizacji?",
-    "clientMessageRemove": "Po usunięciu, klient nie będzie już mógł połączyć się z witryną."
+    "rewritePathDescription": "Opcjonalnie przepisz ścieżkę przed przesłaniem do celu."
 }
--- a/messages/pt-PT.json
+++ b/messages/pt-PT.json
@@ -47,8 +47,9 @@
    "edit": "Alterar",
    "siteConfirmDelete": "Confirmar que pretende apagar o site",
    "siteDelete": "Excluir site",
-    "siteMessageRemove": "Uma vez removido, o site não estará mais acessível. Todas as metas associadas ao site também serão removidas.",
-    "siteQuestionRemove": "Você tem certeza que deseja remover este site da organização?",
+    "siteMessageRemove": "Uma vez removido, o site não estará mais acessível. Todos os recursos e alvos associados ao site também serão removidos.",
+    "siteMessageConfirm": "Para confirmar, por favor, digite o nome do site abaixo.",
+    "siteQuestionRemove": "Você tem certeza que deseja remover o site {selectedSite} da organização?",
    "siteManageSites": "Gerir sites",
    "siteDescription": "Permitir conectividade à sua rede através de túneis seguros",
    "siteCreate": "Criar site",
@@ -95,7 +96,7 @@
    "siteWgDescription": "Use qualquer cliente do WireGuard para estabelecer um túnel. Configuração manual NAT é necessária.",
    "siteWgDescriptionSaas": "Use qualquer cliente WireGuard para estabelecer um túnel. Configuração manual NAT necessária. SOMENTE FUNCIONA EM NODES AUTO-HOSPEDADOS",
    "siteLocalDescription": "Recursos locais apenas. Sem túneis.",
-    "siteLocalDescriptionSaas": "Apenas recursos locais. Sem túneis. Apenas disponível em nós remotos.",
+    "siteLocalDescriptionSaas": "Apenas recursos locais. Sem tunelamento. SOMENTE FUNCIONA EM NODES AUTO-HOSPEDADOS",
    "siteSeeAll": "Ver todos os sites",
    "siteTunnelDescription": "Determine como você deseja se conectar ao seu site",
    "siteNewtCredentials": "Credenciais Novas",
@@ -153,7 +154,8 @@
    "protected": "Protegido",
    "notProtected": "Não Protegido",
    "resourceMessageRemove": "Uma vez removido, o recurso não estará mais acessível. Todos os alvos associados ao recurso também serão removidos.",
-    "resourceQuestionRemove": "Você tem certeza que deseja remover o recurso da organização?",
+    "resourceMessageConfirm": "Para confirmar, por favor, digite o nome do recurso abaixo.",
+    "resourceQuestionRemove": "Tem certeza que deseja remover o recurso {selectedResource} da organização?",
    "resourceHTTP": "Recurso HTTPS",
    "resourceHTTPDescription": "O proxy solicita ao seu aplicativo via HTTPS usando um subdomínio ou domínio base.",
    "resourceRaw": "Recurso TCP/UDP bruto",
@@ -218,7 +220,7 @@
    "orgDeleteConfirm": "Confirmar que pretende apagar a organização",
    "orgMessageRemove": "Esta ação é irreversível e apagará todos os dados associados.",
    "orgMessageConfirm": "Para confirmar, digite o nome da organização abaixo.",
-    "orgQuestionRemove": "Você tem certeza que deseja remover esta organização?",
+    "orgQuestionRemove": "Tem certeza que deseja remover a organização {selectedOrg}?",
    "orgUpdated": "Organização atualizada",
    "orgUpdatedDescription": "A organização foi atualizada.",
    "orgErrorUpdate": "Falha ao atualizar organização",
@@ -285,8 +287,9 @@
    "apiKeysAdd": "Gerar Chave API",
    "apiKeysErrorDelete": "Erro ao apagar chave API",
    "apiKeysErrorDeleteMessage": "Erro ao apagar chave API",
-    "apiKeysQuestionRemove": "Tem certeza que deseja remover a chave de API da organização?",
+    "apiKeysQuestionRemove": "Tem certeza que deseja remover a chave API {selectedApiKey} da organização?",
    "apiKeysMessageRemove": "Uma vez removida, a chave API não poderá mais ser utilizada.",
+    "apiKeysMessageConfirm": "Para confirmar, por favor digite o nome da chave API abaixo.",
    "apiKeysDeleteConfirm": "Confirmar Exclusão da Chave API",
    "apiKeysDelete": "Excluir Chave API",
    "apiKeysManage": "Gerir Chaves API",
@@ -302,7 +305,8 @@
    "userDeleteConfirm": "Confirmar Exclusão do Usuário",
    "userDeleteServer": "Excluir utilizador do servidor",
    "userMessageRemove": "O utilizador será removido de todas as organizações e será completamente removido do servidor.",
-    "userQuestionRemove": "Tem certeza que deseja excluir permanentemente o usuário do servidor?",
+    "userMessageConfirm": "Para confirmar, por favor digite o nome do utilizador abaixo.",
+    "userQuestionRemove": "Tem certeza que deseja apagar o {selectedUser} permanentemente do servidor?",
    "licenseKey": "Chave de Licença",
    "valid": "Válido",
    "numberOfSites": "Número de sites",
@@ -335,7 +339,7 @@
    "fossorialLicense": "Ver Termos e Condições de Assinatura e Licença Fossorial",
    "licenseMessageRemove": "Isto irá remover a chave da licença e todas as permissões associadas concedidas por ela.",
    "licenseMessageConfirm": "Para confirmar, por favor, digite a chave de licença abaixo.",
-    "licenseQuestionRemove": "Tem certeza que deseja excluir a chave de licença?",
+    "licenseQuestionRemove": "Tem certeza que deseja apagar a chave de licença {selectedKey}?",
    "licenseKeyDelete": "Excluir Chave de Licença",
    "licenseKeyDeleteConfirm": "Confirmar que pretende apagar a chave de licença",
    "licenseTitle": "Gerir Status da Licença",
@@ -368,7 +372,7 @@
    "inviteRemoveErrorDescription": "Ocorreu um erro ao remover o convite.",
    "inviteRemoved": "Convite removido",
    "inviteRemovedDescription": "O convite para {email} foi removido.",
-    "inviteQuestionRemove": "Tem certeza de que deseja remover o convite?",
+    "inviteQuestionRemove": "Tem certeza de que deseja remover o convite {email}?",
    "inviteMessageRemove": "Uma vez removido, este convite não será mais válido. Você sempre pode convidar o utilizador novamente mais tarde.",
    "inviteMessageConfirm": "Para confirmar, digite o endereço de e-mail do convite abaixo.",
    "inviteQuestionRegenerate": "Tem certeza que deseja regenerar o convite{email, plural, ='' {}, other { para #}}? Isso irá revogar o convite anterior.",
@@ -394,8 +398,9 @@
    "userErrorOrgRemoveDescription": "Ocorreu um erro ao remover o utilizador.",
    "userOrgRemoved": "Usuário removido",
    "userOrgRemovedDescription": "O utilizador {email} foi removido da organização.",
-    "userQuestionOrgRemove": "Você tem certeza que deseja remover este usuário da organização?",
+    "userQuestionOrgRemove": "Tem certeza que deseja remover {email} da organização?",
    "userMessageOrgRemove": "Uma vez removido, este utilizador não terá mais acesso à organização. Você sempre pode reconvidá-lo depois, mas eles precisarão aceitar o convite novamente.",
+    "userMessageOrgConfirm": "Para confirmar, digite o nome do utilizador abaixo.",
    "userRemoveOrgConfirm": "Confirmar Remoção do Usuário",
    "userRemoveOrg": "Remover Usuário da Organização",
    "users": "Utilizadores",
@@ -463,10 +468,7 @@
    "createdAt": "Criado Em",
    "proxyErrorInvalidHeader": "Valor do cabeçalho Host personalizado inválido. Use o formato de nome de domínio ou salve vazio para remover o cabeçalho Host personalizado.",
    "proxyErrorTls": "Nome do Servidor TLS inválido. Use o formato de nome de domínio ou salve vazio para remover o Nome do Servidor TLS.",
-    "proxyEnableSSL": "Habilitar SSL",
-    "proxyEnableSSLDescription": "Habilitar criptografia SSL/TLS para conexões HTTPS seguras a seus alvos.",
-    "target": "Target",
-    "configureTarget": "Configurar Alvos",
+    "proxyEnableSSL": "Habilitar SSL (https)",
    "targetErrorFetch": "Falha ao buscar alvos",
    "targetErrorFetchDescription": "Ocorreu um erro ao buscar alvos",
    "siteErrorFetch": "Falha ao buscar recurso",
@@ -493,7 +495,7 @@
    "targetTlsSettings": "Configuração de conexão segura",
    "targetTlsSettingsDescription": "Configurar configurações SSL/TLS para seu recurso",
    "targetTlsSettingsAdvanced": "Configurações TLS Avançadas",
-    "targetTlsSni": "Nome do Servidor TLS",
+    "targetTlsSni": "Nome do Servidor TLS (SNI)",
    "targetTlsSniDescription": "O Nome do Servidor TLS para usar para SNI. Deixe vazio para usar o padrão.",
    "targetTlsSubmit": "Guardar Configurações",
    "targets": "Configuração de Alvos",
@@ -502,21 +504,9 @@
    "targetStickySessionsDescription": "Manter conexões no mesmo alvo backend durante toda a sessão.",
    "methodSelect": "Selecionar método",
    "targetSubmit": "Adicionar Alvo",
-    "targetNoOne": "Este recurso não tem nenhum alvo. Adicione um alvo para configurar para onde enviar solicitações para sua área de administração.",
+    "targetNoOne": "Sem alvos. Adicione um alvo usando o formulário.",
    "targetNoOneDescription": "Adicionar mais de um alvo acima habilitará o balanceamento de carga.",
    "targetsSubmit": "Guardar Alvos",
-    "addTarget": "Adicionar Alvo",
-    "targetErrorInvalidIp": "Endereço IP inválido",
-    "targetErrorInvalidIpDescription": "Por favor, insira um endereço IP ou nome de host válido",
-    "targetErrorInvalidPort": "Porta inválida",
-    "targetErrorInvalidPortDescription": "Por favor, digite um número de porta válido",
-    "targetErrorNoSite": "Nenhum site selecionado",
-    "targetErrorNoSiteDescription": "Selecione um site para o destino",
-    "targetCreated": "Destino criado",
-    "targetCreatedDescription": "O alvo foi criado com sucesso",
-    "targetErrorCreate": "Falha ao criar destino",
-    "targetErrorCreateDescription": "Ocorreu um erro ao criar o destino",
-    "save": "Guardar",
    "proxyAdditional": "Configurações Adicionais de Proxy",
    "proxyAdditionalDescription": "Configure como seu recurso lida com configurações de proxy",
    "proxyCustomHeader": "Cabeçalho Host Personalizado",
@@ -725,7 +715,7 @@
    "pangolinServerAdmin": "Administrador do Servidor - Pangolin",
    "licenseTierProfessional": "Licença Profissional",
    "licenseTierEnterprise": "Licença Empresarial",
-    "licenseTierPersonal": "Licença Pessoal",
+    "licenseTierCommercial": "Licença comercial",
    "licensed": "Licenciado",
    "yes": "Sim",
    "no": "Não",
@@ -737,7 +727,7 @@
    "idpManageDescription": "Visualizar e gerir provedores de identidade no sistema",
    "idpDeletedDescription": "Provedor de identidade eliminado com sucesso",
    "idpOidc": "OAuth2/OIDC",
-    "idpQuestionRemove": "Tem certeza que deseja eliminar permanentemente o provedor de identidade?",
+    "idpQuestionRemove": "Tem certeza que deseja eliminar permanentemente o provedor de identidade {name}?",
    "idpMessageRemove": "Isto irá remover o provedor de identidade e todas as configurações associadas. Os utilizadores que se autenticam através deste provedor não poderão mais fazer login.",
    "idpMessageConfirm": "Para confirmar, por favor digite o nome do provedor de identidade abaixo.",
    "idpConfirmDelete": "Confirmar Eliminação do Provedor de Identidade",
@@ -760,7 +750,7 @@
    "idpDisplayName": "Um nome de exibição para este provedor de identidade",
    "idpAutoProvisionUsers": "Provisionamento Automático de Utilizadores",
    "idpAutoProvisionUsersDescription": "Quando ativado, os utilizadores serão criados automaticamente no sistema no primeiro login com a capacidade de mapear utilizadores para funções e organizações.",
-    "licenseBadge": "EE",
+    "licenseBadge": "Profissional",
    "idpType": "Tipo de Provedor",
    "idpTypeDescription": "Selecione o tipo de provedor de identidade que deseja configurar",
    "idpOidcConfigure": "Configuração OAuth2/OIDC",
@@ -1094,6 +1084,7 @@
    "navbar": "Menu de Navegação",
    "navbarDescription": "Menu de navegação principal da aplicação",
    "navbarDocsLink": "Documentação",
+    "commercialEdition": "Edição Comercial",
    "otpErrorEnable": "Não foi possível ativar 2FA",
    "otpErrorEnableDescription": "Ocorreu um erro ao ativar 2FA",
    "otpSetupCheckCode": "Por favor, insira um código de 6 dígitos",
@@ -1149,7 +1140,7 @@
    "sidebarAllUsers": "Todos os utilizadores",
    "sidebarIdentityProviders": "Provedores de identidade",
    "sidebarLicense": "Tipo:",
-    "sidebarClients": "Clientes",
+    "sidebarClients": "Clientes (Beta)",
    "sidebarDomains": "Domínios",
    "enableDockerSocket": "Habilitar o Diagrama Docker",
    "enableDockerSocketDescription": "Ativar a scraping de rótulo Docker para rótulos de diagramas. Caminho de Socket deve ser fornecido para Newt.",
@@ -1206,8 +1197,9 @@
    "domainCreate": "Criar Domínio",
    "domainCreatedDescription": "Domínio criado com sucesso",
    "domainDeletedDescription": "Domínio deletado com sucesso",
-    "domainQuestionRemove": "Tem certeza de que deseja remover o domínio da sua conta?",
+    "domainQuestionRemove": "Tem certeza de que deseja remover o domínio {domain} da sua conta?",
    "domainMessageRemove": "Uma vez removido, o domínio não estará mais associado à sua conta.",
+    "domainMessageConfirm": "Para confirmar, digite o nome do domínio abaixo.",
    "domainConfirmDelete": "Confirmar Exclusão de Domínio",
    "domainDelete": "Excluir Domínio",
    "domain": "Domínio",
@@ -1274,7 +1266,7 @@
    "billingFreeTier": "Plano Gratuito",
    "billingWarningOverLimit": "Aviso: Você ultrapassou um ou mais limites de uso. Seus sites não se conectarão até você modificar sua assinatura ou ajustar seu uso.",
    "billingUsageLimitsOverview": "Visão Geral dos Limites de Uso",
-    "billingMonitorUsage": "Monitore seu uso em relação aos limites configurados. Se precisar aumentar esses limites, entre em contato conosco support@pangolin.net.",
+    "billingMonitorUsage": "Monitore seu uso em relação aos limites configurados. Se precisar aumentar esses limites, entre em contato conosco support@fossorial.io.",
    "billingDataUsage": "Uso de Dados",
    "billingOnlineTime": "Tempo Online do Site",
    "billingUsers": "Usuários Ativos",
@@ -1341,6 +1333,7 @@
    "twoFactorRequired": "A autenticação de dois fatores é necessária para registrar uma chave de segurança.",
    "twoFactor": "Autenticação de Dois Fatores",
    "adminEnabled2FaOnYourAccount": "Seu administrador ativou a autenticação de dois fatores para {email}. Complete o processo de configuração para continuar.",
+    "continueToApplication": "Continuar para Aplicativo",
    "securityKeyAdd": "Adicionar Chave de Segurança",
    "securityKeyRegisterTitle": "Registrar Nova Chave de Segurança",
    "securityKeyRegisterDescription": "Conecte sua chave de segurança e insira um nome para identificá-la",
@@ -1418,7 +1411,6 @@
    "externalProxyEnabled": "Proxy Externo Habilitado",
    "addNewTarget": "Adicionar Novo Alvo",
    "targetsList": "Lista de Alvos",
-    "advancedMode": "Modo Avançado",
    "targetErrorDuplicateTargetFound": "Alvo duplicado encontrado",
    "healthCheckHealthy": "Saudável",
    "healthCheckUnhealthy": "Não Saudável",
@@ -1551,17 +1543,18 @@
    "autoLoginError": "Erro de Login Automático",
    "autoLoginErrorNoRedirectUrl": "Nenhum URL de redirecionamento recebido do provedor de identidade.",
    "autoLoginErrorGeneratingUrl": "Falha ao gerar URL de autenticação.",
-    "remoteExitNodeManageRemoteExitNodes": "Nós remotos",
-    "remoteExitNodeDescription": "Auto-hospedar um ou mais nós remotos para estender sua conectividade de rede e reduzir a dependência da nuvem",
+    "remoteExitNodeManageRemoteExitNodes": "Gerenciar Auto-Hospedados",
+    "remoteExitNodeDescription": "Gerencie os nós para estender sua conectividade de rede",
    "remoteExitNodes": "Nós",
    "searchRemoteExitNodes": "Buscar nós...",
    "remoteExitNodeAdd": "Adicionar node",
    "remoteExitNodeErrorDelete": "Erro ao excluir nó",
-    "remoteExitNodeQuestionRemove": "Tem certeza de que deseja remover o nó da organização?",
+    "remoteExitNodeQuestionRemove": "Tem certeza que deseja remover o nó {selectedNode} da organização?",
    "remoteExitNodeMessageRemove": "Uma vez removido, o nó não estará mais acessível.",
+    "remoteExitNodeMessageConfirm": "Para confirmar, por favor, digite o nome do nó abaixo.",
    "remoteExitNodeConfirmDelete": "Confirmar exclusão do nó",
    "remoteExitNodeDelete": "Excluir nó",
-    "sidebarRemoteExitNodes": "Nós remotos",
+    "sidebarRemoteExitNodes": "Nós",
    "remoteExitNodeCreate": {
        "title": "Criar nó",
        "description": "Crie um novo nó para estender sua conectividade de rede",
@@ -1730,166 +1723,5 @@
    "authPageUpdated": "Página de autenticação atualizada com sucesso",
    "healthCheckNotAvailable": "Localização",
    "rewritePath": "Reescrever Caminho",
-    "rewritePathDescription": "Opcionalmente reescreva o caminho antes de encaminhar ao destino.",
-    "continueToApplication": "Continuar para o aplicativo",
-    "checkingInvite": "Checando convite",
-    "setResourceHeaderAuth": "setResourceHeaderAuth",
-    "resourceHeaderAuthRemove": "Remover autenticação de cabeçalho",
-    "resourceHeaderAuthRemoveDescription": "Autenticação de cabeçalho removida com sucesso.",
-    "resourceErrorHeaderAuthRemove": "Falha ao remover autenticação de cabeçalho",
-    "resourceErrorHeaderAuthRemoveDescription": "Não foi possível remover a autenticação do cabeçalho para o recurso.",
-    "resourceHeaderAuthProtectionEnabled": "Autenticação de Cabeçalho Habilitada",
-    "resourceHeaderAuthProtectionDisabled": "Autenticação de Cabeçalho Desativada",
-    "headerAuthRemove": "Remover autenticação de cabeçalho",
-    "headerAuthAdd": "Adicionar Autenticação do Cabeçalho",
-    "resourceErrorHeaderAuthSetup": "Falha ao definir autenticação de cabeçalho",
-    "resourceErrorHeaderAuthSetupDescription": "Não foi possível definir a autenticação do cabeçalho para o recurso.",
-    "resourceHeaderAuthSetup": "Autenticação de Cabeçalho definida com sucesso",
-    "resourceHeaderAuthSetupDescription": "Autenticação de cabeçalho foi definida com sucesso.",
-    "resourceHeaderAuthSetupTitle": "Definir autenticação de cabeçalho",
-    "resourceHeaderAuthSetupTitleDescription": "Defina as credenciais de autenticação básica (nome de usuário e senha) para proteger este recurso com a Autenticação de Cabeçalho HTTP. Acessá-lo usando o formato https://username:password@resource.example.com",
-    "resourceHeaderAuthSubmit": "Definir autenticação de cabeçalho",
-    "actionSetResourceHeaderAuth": "Definir autenticação de cabeçalho",
-    "enterpriseEdition": "Edição Enterprise",
-    "unlicensed": "Sem licença",
-    "beta": "Beta",
-    "manageClients": "Gerenciar Clientes",
-    "manageClientsDescription": "Clientes são dispositivos que podem se conectar aos seus sites",
-    "licenseTableValidUntil": "Válido até",
-    "saasLicenseKeysSettingsTitle": "Licenças empresariais",
-    "saasLicenseKeysSettingsDescription": "Gerar e gerenciar chaves de licença Enterprise para instâncias Pangolin auto-hospedadas",
-    "sidebarEnterpriseLicenses": "Licenças",
-    "generateLicenseKey": "Gerar Chave de Licença",
-    "generateLicenseKeyForm": {
-        "validation": {
-            "emailRequired": "Por favor, insira um endereço de e-mail válido",
-            "useCaseTypeRequired": "Por favor, selecione um tipo de caso de uso",
-            "firstNameRequired": "O primeiro nome é obrigatório",
-            "lastNameRequired": "Último nome é obrigatório",
-            "primaryUseRequired": "Descreva seu uso primário",
-            "jobTitleRequiredBusiness": "O título do trabalho é necessário para o uso de negócios",
-            "industryRequiredBusiness": "Indústria é necessária para uso de negócios",
-            "stateProvinceRegionRequired": "Estado/Província/Região é necessário",
-            "postalZipCodeRequired": "Código postal/CEP é obrigatório",
-            "companyNameRequiredBusiness": "O nome da empresa é necessário para uso empresarial",
-            "countryOfResidenceRequiredBusiness": "O país de residência é necessário para a utilização da empresa",
-            "countryRequiredPersonal": "País é necessário para uso pessoal",
-            "agreeToTermsRequired": "Você deve concordar com os termos",
-            "complianceConfirmationRequired": "Você deve confirmar o cumprimento da Licença Fossorial Comercial"
-        },
-        "useCaseOptions": {
-            "personal": {
-                "title": "Uso pessoal",
-                "description": "Para uso individual, não comercial, como aprendizagem, projetos pessoais ou experimentação."
-            },
-            "business": {
-                "title": "Uso de Negócios",
-                "description": "Para uso em organizações, empresas ou atividades comerciais ou geradoras de receitas."
-            }
-        },
-        "steps": {
-            "emailLicenseType": {
-                "title": "Tipo de Email e Licença",
-                "description": "Digite seu e-mail e escolha seu tipo de licença"
-            },
-            "personalInformation": {
-                "title": "Informações Pessoais",
-                "description": "Conte-nos sobre você"
-            },
-            "contactInformation": {
-                "title": "Informação do Contato",
-                "description": "Suas informações de contato"
-            },
-            "termsGenerate": {
-                "title": "Termos & Gerar",
-                "description": "Revise e aceite os termos para gerar a sua licença"
-            }
-        },
-        "alerts": {
-            "commercialUseDisclosure": {
-                "title": "Divulgação de uso",
-                "description": "Selecione o nível de licença que reflete corretamente seu uso pretendido. A Licença Pessoal permite o uso livre do Software para atividades comerciais individuais, não comerciais ou em pequena escala com rendimento bruto anual inferior a 100.000 USD. Qualquer uso além destes limites — incluindo uso dentro de um negócio, organização, ou outro ambiente gerador de receitas — requer uma Licença Enterprise válida e o pagamento da taxa aplicável de licenciamento. Todos os usuários, pessoais ou empresariais, devem cumprir os Termos da Licença Comercial Fossorial."
-            },
-            "trialPeriodInformation": {
-                "title": "Informações do Período de Avaliação",
-                "description": "Esta Chave de Licença permite recursos da Empresa para um período de avaliação de 7 dias. O acesso contínuo a Recursos Pagos além do período de avaliação requer ativação sob uma Licença Pessoal ou Empresarial válida. Para licenciamento Empresarial, entre em contato com sales@pangolin.net."
-            }
-        },
-        "form": {
-            "useCaseQuestion": "Você está usando o Pangolin para uso pessoal ou empresarial?",
-            "firstName": "Primeiro nome",
-            "lastName": "Último Nome",
-            "jobTitle": "Título do Cargo",
-            "primaryUseQuestion": "Para que você pretende usar o Pangolin em primeiro lugar?",
-            "industryQuestion": "O que é a sua indústria?",
-            "prospectiveUsersQuestion": "Quantos usuários potenciais você espera?",
-            "prospectiveSitesQuestion": "Quantos sites (túneis) você espera ter?",
-            "companyName": "Nome Empresa",
-            "countryOfResidence": "País de residência",
-            "stateProvinceRegion": "Estado / Província / Região",
-            "postalZipCode": "Código Postal / Postal",
-            "companyWebsite": "Site da empresa",
-            "companyPhoneNumber": "Número de telefone empresa",
-            "country": "País",
-            "phoneNumberOptional": "Número de telefone (opcional)",
-            "complianceConfirmation": "Confirmo que a informação que forneci é correcta e que estou em conformidade com a Licença Comercial Fossorial. Reportar informações imprecisas ou identificar mal o uso do produto é uma violação da licença e pode resultar em sua chave ser revogada."
-        },
-        "buttons": {
-            "close": "Fechar",
-            "previous": "Anterior",
-            "next": "Próximo",
-            "generateLicenseKey": "Gerar Chave de Licença"
-        },
-        "toasts": {
-            "success": {
-                "title": "Chave de licença gerada com sucesso",
-                "description": "Sua chave de licença foi gerada e está pronta para ser usada."
-            },
-            "error": {
-                "title": "Falha ao gerar chave de licença",
-                "description": "Ocorreu um erro ao gerar a chave da licença."
-            }
-        }
-    },
-    "priority": "Prioridade",
-    "priorityDescription": "Rotas de alta prioridade são avaliadas primeiro. Prioridade = 100 significa ordem automática (decisões do sistema). Use outro número para aplicar prioridade manual.",
-    "instanceName": "Nome da Instância",
-    "pathMatchModalTitle": "Configurar Correspondência de Caminho",
-    "pathMatchModalDescription": "Configure como as solicitações de entrada devem ser correspondidas com base no caminho.",
-    "pathMatchType": "Tipo de Correspondência",
-    "pathMatchPrefix": "Prefixo",
-    "pathMatchExact": "Exato",
-    "pathMatchRegex": "Regex",
-    "pathMatchValue": "Valor do caminho",
-    "clear": "Limpar",
-    "saveChanges": "Salvar as alterações",
-    "pathMatchRegexPlaceholder": "^/api/.*",
-    "pathMatchDefaultPlaceholder": "/caminho",
-    "pathMatchPrefixHelp": "Exemplo: /api matches /api, /api/users, etc.",
-    "pathMatchExactHelp": "Exemplo: /api match only /api",
-    "pathMatchRegexHelp": "Exemplo: ^/api/.* Corresponde /api/anything",
-    "pathRewriteModalTitle": "Configurar Caminho de Reescrita",
-    "pathRewriteModalDescription": "Transforme o caminho correspondente antes de encaminhar para o alvo.",
-    "pathRewriteType": "Reescrever o tipo",
-    "pathRewritePrefixOption": "Prefixo - substituir prefixo",
-    "pathRewriteExactOption": "Exato - Substituir o caminho inteiro",
-    "pathRewriteRegexOption": "Regex - Substituição de padrão",
-    "pathRewriteStripPrefixOption": "Prefixo do Strip - Remover prefixo",
-    "pathRewriteValue": "Reescrever Valor",
-    "pathRewriteRegexPlaceholder": "/new/$1",
-    "pathRewriteDefaultPlaceholder": "/novo-caminho",
-    "pathRewritePrefixHelp": "Substituir o prefixo correspondente por este valor",
-    "pathRewriteExactHelp": "Substitua o caminho inteiro por este valor quando o caminho corresponder exatamente",
-    "pathRewriteRegexHelp": "Usar grupos de captura como $1, $2 para substituição",
-    "pathRewriteStripPrefixHelp": "Deixe em branco para remover prefixo ou fornecer novo prefixo",
-    "pathRewritePrefix": "Prefixo",
-    "pathRewriteExact": "Exato",
-    "pathRewriteRegex": "Regex",
-    "pathRewriteStrip": "Tirar",
-    "pathRewriteStripLabel": "faixa",
-    "sidebarEnableEnterpriseLicense": "Habilitar Licença Empresarial",
-    "cannotbeUndone": "Isso não pode ser desfeito.",
-    "toConfirm": "para confirmar",
-    "deleteClientQuestion": "Você tem certeza que deseja remover o cliente do site e da organização?",
-    "clientMessageRemove": "Depois de removido, o cliente não poderá mais se conectar ao site."
+    "rewritePathDescription": "Opcionalmente reescreva o caminho antes de encaminhar ao destino."
 }
--- a/messages/ru-RU.json
+++ b/messages/ru-RU.json
@@ -47,8 +47,9 @@
    "edit": "Редактировать",
    "siteConfirmDelete": "Подтвердить удаление сайта",
    "siteDelete": "Удалить сайт",
-    "siteMessageRemove": "После удаления сайт больше не будет доступен. Все цели, связанные с сайтом, также будут удалены.",
-    "siteQuestionRemove": "Вы уверены, что хотите удалить сайт из организации?",
+    "siteMessageRemove": "После удаления сайт больше не будет доступен. Все ресурсы и целевые узлы, связанные с сайтом, также будут удалены.",
+    "siteMessageConfirm": "Для подтверждения введите название сайта ниже.",
+    "siteQuestionRemove": "Вы уверены, что хотите удалить сайт {selectedSite} из организации?",
    "siteManageSites": "Управление сайтами",
    "siteDescription": "Обеспечьте подключение к вашей сети через защищённые туннели",
    "siteCreate": "Создать сайт",
@@ -95,7 +96,7 @@
    "siteWgDescription": "Используйте любой клиент WireGuard для открытия туннеля. Требуется ручная настройка NAT.",
    "siteWgDescriptionSaas": "Используйте любой клиент WireGuard для создания туннеля. Требуется ручная настройка NAT. РАБОТАЕТ ТОЛЬКО НА САМОСТОЯТЕЛЬНО РАЗМЕЩЕННЫХ УЗЛАХ",
    "siteLocalDescription": "Только локальные ресурсы. Без туннелирования.",
-    "siteLocalDescriptionSaas": "Только локальные ресурсы. Нет туннелей. Только для удаленных узлов.",
+    "siteLocalDescriptionSaas": "Только локальные ресурсы. Без туннелирования. РАБОТАЕТ ТОЛЬКО НА САМОСТОЯТЕЛЬНО РАЗМЕЩЕННЫХ УЗЛАХ",
    "siteSeeAll": "Просмотреть все сайты",
    "siteTunnelDescription": "Выберите способ подключения к вашему сайту",
    "siteNewtCredentials": "Учётные данные Newt",
@@ -153,7 +154,8 @@
    "protected": "Защищён",
    "notProtected": "Не защищён",
    "resourceMessageRemove": "После удаления ресурс больше не будет доступен. Все целевые узлы, связанные с ресурсом, также будут удалены.",
-    "resourceQuestionRemove": "Вы уверены, что хотите удалить ресурс из организации?",
+    "resourceMessageConfirm": "Для подтверждения введите название ресурса ниже.",
+    "resourceQuestionRemove": "Вы действительно хотите удалить ресурс {selectedResource} из организации?",
    "resourceHTTP": "HTTPS-ресурс",
    "resourceHTTPDescription": "Проксирование запросов к вашему приложению через HTTPS с использованием поддомена или базового домена.",
    "resourceRaw": "Сырой TCP/UDP-ресурс",
@@ -218,7 +220,7 @@
    "orgDeleteConfirm": "Подтвердить удаление",
    "orgMessageRemove": "Это действие необратимо и удалит все связанные данные.",
    "orgMessageConfirm": "Для подтверждения введите название организации ниже.",
-    "orgQuestionRemove": "Вы уверены, что хотите удалить организацию?",
+    "orgQuestionRemove": "Вы действительно хотите удалить организацию {selectedOrg}?",
    "orgUpdated": "Организация обновлена",
    "orgUpdatedDescription": "Организация была успешно обновлена.",
    "orgErrorUpdate": "Не удалось обновить организацию",
@@ -285,8 +287,9 @@
    "apiKeysAdd": "Сгенерировать ключ API",
    "apiKeysErrorDelete": "Ошибка при удалении ключа API",
    "apiKeysErrorDeleteMessage": "Не удалось удалить ключ API",
-    "apiKeysQuestionRemove": "Вы уверены, что хотите удалить API ключ из организации?",
+    "apiKeysQuestionRemove": "Вы действительно хотите удалить ключ API {selectedApiKey} из организации?",
    "apiKeysMessageRemove": "После удаления ключ API больше сможет быть использован.",
+    "apiKeysMessageConfirm": "Для подтверждения введите название ключа API ниже.",
    "apiKeysDeleteConfirm": "Подтвердить удаление",
    "apiKeysDelete": "Удаление ключа API",
    "apiKeysManage": "Управление ключами API",
@@ -302,7 +305,8 @@
    "userDeleteConfirm": "Подтвердить удаление",
    "userDeleteServer": "Удаление пользователя с сервера",
    "userMessageRemove": "Пользователь будет удалён из всех организаций и полностью удалён с сервера.",
-    "userQuestionRemove": "Вы уверены, что хотите навсегда удалить пользователя с сервера?",
+    "userMessageConfirm": "Для подтверждения введите имя пользователя ниже.",
+    "userQuestionRemove": "Вы действительно хотите навсегда удалить {selectedUser} с сервера?",
    "licenseKey": "Лицензионный ключ",
    "valid": "Действителен",
    "numberOfSites": "Количество сайтов",
@@ -335,7 +339,7 @@
    "fossorialLicense": "Просмотреть коммерческую лицензию Fossorial и условия подписки",
    "licenseMessageRemove": "Это удалит лицензионный ключ и все связанные с ним разрешения.",
    "licenseMessageConfirm": "Для подтверждения введите лицензионный ключ ниже.",
-    "licenseQuestionRemove": "Вы уверены, что хотите удалить лицензионный ключ?",
+    "licenseQuestionRemove": "Вы уверены, что хотите удалить лицензионный ключ {selectedKey}?",
    "licenseKeyDelete": "Удалить лицензионный ключ",
    "licenseKeyDeleteConfirm": "Подтвердить удаление лицензионного ключа",
    "licenseTitle": "Управление статусом лицензии",
@@ -368,7 +372,7 @@
    "inviteRemoveErrorDescription": "Произошла ошибка при удалении приглашения.",
    "inviteRemoved": "Приглашение удалено",
    "inviteRemovedDescription": "Приглашение для {email} было удалено.",
-    "inviteQuestionRemove": "Вы уверены, что хотите удалить приглашение?",
+    "inviteQuestionRemove": "Вы уверены, что хотите удалить приглашение {email}?",
    "inviteMessageRemove": "После удаления это приглашение больше не будет действительным. Вы всегда можете пригласить пользователя заново.",
    "inviteMessageConfirm": "Для подтверждения введите email адрес приглашения ниже.",
    "inviteQuestionRegenerate": "Вы уверены, что хотите пересоздать приглашение для {email}? Это отзовёт предыдущее приглашение.",
@@ -394,8 +398,9 @@
    "userErrorOrgRemoveDescription": "Произошла ошибка при удалении пользователя.",
    "userOrgRemoved": "Пользователь удалён",
    "userOrgRemovedDescription": "Пользователь {email} был удалён из организации.",
-    "userQuestionOrgRemove": "Вы уверены, что хотите удалить этого пользователя из организации?",
+    "userQuestionOrgRemove": "Вы уверены, что хотите удалить {email} из организации?",
    "userMessageOrgRemove": "После удаления этот пользователь больше не будет иметь доступ к организации. Вы всегда можете пригласить его заново, но ему нужно будет снова принять приглашение.",
+    "userMessageOrgConfirm": "Для подтверждения введите имя пользователя ниже.",
    "userRemoveOrgConfirm": "Подтвердить удаление пользователя",
    "userRemoveOrg": "Удалить пользователя из организации",
    "users": "Пользователи",
@@ -463,10 +468,7 @@
    "createdAt": "Создано в",
    "proxyErrorInvalidHeader": "Неверное значение пользовательского заголовка Host. Используйте формат доменного имени или оставьте пустым для сброса пользовательского заголовка Host.",
    "proxyErrorTls": "Неверное имя TLS сервера. Используйте формат доменного имени или оставьте пустым для удаления имени TLS сервера.",
-    "proxyEnableSSL": "Включить SSL",
-    "proxyEnableSSLDescription": "Включить шифрование SSL/TLS для безопасных HTTPS подключений к вашим целям.",
-    "target": "Target",
-    "configureTarget": "Настроить адресаты",
+    "proxyEnableSSL": "Включить SSL (https)",
    "targetErrorFetch": "Не удалось получить цели",
    "targetErrorFetchDescription": "Произошла ошибка при получении целей",
    "siteErrorFetch": "Не удалось получить ресурс",
@@ -493,7 +495,7 @@
    "targetTlsSettings": "Конфигурация безопасного соединения",
    "targetTlsSettingsDescription": "Настройте параметры SSL/TLS для вашего ресурса",
    "targetTlsSettingsAdvanced": "Расширенные настройки TLS",
-    "targetTlsSni": "Имя TLS сервера",
+    "targetTlsSni": "Имя TLS сервера (SNI)",
    "targetTlsSniDescription": "Имя TLS сервера для использования в SNI. Оставьте пустым для использования по умолчанию.",
    "targetTlsSubmit": "Сохранить настройки",
    "targets": "Конфигурация целей",
@@ -502,21 +504,9 @@
    "targetStickySessionsDescription": "Сохранять соединения на одной и той же целевой точке в течение всей сессии.",
    "methodSelect": "Выберите метод",
    "targetSubmit": "Добавить цель",
-    "targetNoOne": "Этот ресурс не имеет никаких целей. Добавьте цель для настройки, где отправлять запросы к вашему бэкэнду.",
+    "targetNoOne": "Нет целей. Добавьте цель с помощью формы.",
    "targetNoOneDescription": "Добавление более одной цели выше включит балансировку нагрузки.",
    "targetsSubmit": "Сохранить цели",
-    "addTarget": "Добавить цель",
-    "targetErrorInvalidIp": "Неверный IP-адрес",
-    "targetErrorInvalidIpDescription": "Пожалуйста, введите действительный IP адрес или имя хоста",
-    "targetErrorInvalidPort": "Неверный порт",
-    "targetErrorInvalidPortDescription": "Пожалуйста, введите правильный номер порта",
-    "targetErrorNoSite": "Сайт не выбран",
-    "targetErrorNoSiteDescription": "Пожалуйста, выберите сайт для цели",
-    "targetCreated": "Цель создана",
-    "targetCreatedDescription": "Цель была успешно создана",
-    "targetErrorCreate": "Не удалось создать цель",
-    "targetErrorCreateDescription": "Произошла ошибка при создании цели",
-    "save": "Сохранить",
    "proxyAdditional": "Дополнительные настройки прокси",
    "proxyAdditionalDescription": "Настройте, как ваш ресурс обрабатывает настройки прокси",
    "proxyCustomHeader": "Пользовательский заголовок Host",
@@ -725,7 +715,7 @@
    "pangolinServerAdmin": "Администратор сервера - Pangolin",
    "licenseTierProfessional": "Профессиональная лицензия",
    "licenseTierEnterprise": "Корпоративная лицензия",
-    "licenseTierPersonal": "Личная лицензия",
+    "licenseTierCommercial": "Коммерческая лицензия",
    "licensed": "Лицензировано",
    "yes": "Да",
    "no": "Нет",
@@ -737,7 +727,7 @@
    "idpManageDescription": "Просмотр и управление поставщиками удостоверений в системе",
    "idpDeletedDescription": "Поставщик удостоверений успешно удалён",
    "idpOidc": "OAuth2/OIDC",
-    "idpQuestionRemove": "Вы уверены, что хотите навсегда удалить поставщика удостоверений?",
+    "idpQuestionRemove": "Вы уверены, что хотите навсегда удалить поставщика удостоверений {name}?",
    "idpMessageRemove": "Это удалит поставщика удостоверений и все связанные конфигурации. Пользователи, которые аутентифицируются через этого поставщика, больше не смогут войти.",
    "idpMessageConfirm": "Для подтверждения введите имя поставщика удостоверений ниже.",
    "idpConfirmDelete": "Подтвердить удаление поставщика удостоверений",
@@ -760,7 +750,7 @@
    "idpDisplayName": "Отображаемое имя для этого поставщика удостоверений",
    "idpAutoProvisionUsers": "Автоматическое создание пользователей",
    "idpAutoProvisionUsersDescription": "При включении пользователи будут автоматически создаваться в системе при первом входе с возможностью сопоставления пользователей с ролями и организациями.",
-    "licenseBadge": "EE",
+    "licenseBadge": "Профессиональная",
    "idpType": "Тип поставщика",
    "idpTypeDescription": "Выберите тип поставщика удостоверений, который вы хотите настроить",
    "idpOidcConfigure": "Конфигурация OAuth2/OIDC",
@@ -1094,6 +1084,7 @@
    "navbar": "Навигационное меню",
    "navbarDescription": "Главное навигационное меню приложения",
    "navbarDocsLink": "Документация",
+    "commercialEdition": "Коммерческая версия",
    "otpErrorEnable": "Невозможно включить 2FA",
    "otpErrorEnableDescription": "Произошла ошибка при включении 2FA",
    "otpSetupCheckCode": "Пожалуйста, введите 6-значный код",
@@ -1149,7 +1140,7 @@
    "sidebarAllUsers": "Все пользователи",
    "sidebarIdentityProviders": "Поставщики удостоверений",
    "sidebarLicense": "Лицензия",
-    "sidebarClients": "Клиенты",
+    "sidebarClients": "Клиенты (бета)",
    "sidebarDomains": "Домены",
    "enableDockerSocket": "Включить чертёж Docker",
    "enableDockerSocketDescription": "Включить scraping ярлыка Docker Socket для ярлыков чертежей. Путь к сокету должен быть предоставлен в Newt.",
@@ -1206,8 +1197,9 @@
    "domainCreate": "Создать Домен",
    "domainCreatedDescription": "Домен успешно создан",
    "domainDeletedDescription": "Домен успешно удален",
-    "domainQuestionRemove": "Вы уверены, что хотите удалить домен из вашей учетной записи?",
+    "domainQuestionRemove": "Вы уверены, что хотите удалить домен {domain} из вашего аккаунта?",
    "domainMessageRemove": "После удаления домен больше не будет связан с вашей учетной записью.",
+    "domainMessageConfirm": "Для подтверждения введите ниже имя домена.",
    "domainConfirmDelete": "Подтвердить удаление домена",
    "domainDelete": "Удалить Домен",
    "domain": "Домен",
@@ -1274,7 +1266,7 @@
    "billingFreeTier": "Бесплатный уровень",
    "billingWarningOverLimit": "Предупреждение: Вы превысили одну или несколько границ использования. Ваши сайты не подключатся, пока вы не измените подписку или не скорректируете использование.",
    "billingUsageLimitsOverview": "Обзор лимитов использования",
-    "billingMonitorUsage": "Контролируйте использование в соответствии с установленными лимитами. Если вам требуется увеличение лимитов, пожалуйста, свяжитесь с нами support@pangolin.net.",
+    "billingMonitorUsage": "Контролируйте использование в соответствии с установленными лимитами. Если вам требуется увеличение лимитов, пожалуйста, свяжитесь с нами support@fossorial.io.",
    "billingDataUsage": "Использование данных",
    "billingOnlineTime": "Время работы сайта",
    "billingUsers": "Активные пользователи",
@@ -1341,6 +1333,7 @@
    "twoFactorRequired": "Для регистрации ключа безопасности требуется двухфакторная аутентификация.",
    "twoFactor": "Двухфакторная аутентификация",
    "adminEnabled2FaOnYourAccount": "Ваш администратор включил двухфакторную аутентификацию для {email}. Пожалуйста, завершите процесс настройки, чтобы продолжить.",
+    "continueToApplication": "Перейти к приложению",
    "securityKeyAdd": "Добавить ключ безопасности",
    "securityKeyRegisterTitle": "Регистрация нового ключа безопасности",
    "securityKeyRegisterDescription": "Подключите свой ключ безопасности и введите имя для его идентификации",
@@ -1418,7 +1411,6 @@
    "externalProxyEnabled": "Внешний прокси включен",
    "addNewTarget": "Добавить новую цель",
    "targetsList": "Список целей",
-    "advancedMode": "Расширенный режим",
    "targetErrorDuplicateTargetFound": "Обнаружена дублирующаяся цель",
    "healthCheckHealthy": "Здоровый",
    "healthCheckUnhealthy": "Нездоровый",
@@ -1551,17 +1543,18 @@
    "autoLoginError": "Ошибка автоматического входа",
    "autoLoginErrorNoRedirectUrl": "URL-адрес перенаправления не получен от провайдера удостоверения.",
    "autoLoginErrorGeneratingUrl": "Не удалось сгенерировать URL-адрес аутентификации.",
-    "remoteExitNodeManageRemoteExitNodes": "Удаленные узлы",
-    "remoteExitNodeDescription": "Самохост-один или несколько удаленных узлов для расширения сетевого подключения и уменьшения зависимости от облака",
+    "remoteExitNodeManageRemoteExitNodes": "Управление самоуправляемым",
+    "remoteExitNodeDescription": "Управляйте узлами для расширения сетевого подключения",
    "remoteExitNodes": "Узлы",
    "searchRemoteExitNodes": "Поиск узлов...",
    "remoteExitNodeAdd": "Добавить узел",
    "remoteExitNodeErrorDelete": "Ошибка удаления узла",
-    "remoteExitNodeQuestionRemove": "Вы уверены, что хотите удалить узел из организации?",
+    "remoteExitNodeQuestionRemove": "Вы уверены, что хотите удалить узел {selectedNode} из организации?",
    "remoteExitNodeMessageRemove": "После удаления узел больше не будет доступен.",
+    "remoteExitNodeMessageConfirm": "Для подтверждения введите имя узла ниже.",
    "remoteExitNodeConfirmDelete": "Подтвердите удаление узла",
    "remoteExitNodeDelete": "Удалить узел",
-    "sidebarRemoteExitNodes": "Удаленные узлы",
+    "sidebarRemoteExitNodes": "Узлы",
    "remoteExitNodeCreate": {
        "title": "Создать узел",
        "description": "Создайте новый узел, чтобы расширить сетевое подключение",
@@ -1730,166 +1723,5 @@
    "authPageUpdated": "Страница авторизации успешно обновлена",
    "healthCheckNotAvailable": "Локальный",
    "rewritePath": "Переписать путь",
-    "rewritePathDescription": "При необходимости, измените путь перед пересылкой к целевому адресу.",
-    "continueToApplication": "Перейти к приложению",
-    "checkingInvite": "Проверка приглашения",
-    "setResourceHeaderAuth": "установить заголовок ресурса",
-    "resourceHeaderAuthRemove": "Удалить проверку подлинности заголовка",
-    "resourceHeaderAuthRemoveDescription": "Проверка подлинности заголовка успешно удалена.",
-    "resourceErrorHeaderAuthRemove": "Не удалось удалить аутентификацию заголовка",
-    "resourceErrorHeaderAuthRemoveDescription": "Не удалось удалить проверку подлинности заголовка ресурса.",
-    "resourceHeaderAuthProtectionEnabled": "Заголовок аутентификации включен",
-    "resourceHeaderAuthProtectionDisabled": "Проверка подлинности заголовка отключена",
-    "headerAuthRemove": "Удалить проверку подлинности заголовка",
-    "headerAuthAdd": "Добавить заголовок аутентификации",
-    "resourceErrorHeaderAuthSetup": "Не удалось установить аутентификацию заголовка",
-    "resourceErrorHeaderAuthSetupDescription": "Не удалось установить проверку подлинности заголовка ресурса.",
-    "resourceHeaderAuthSetup": "Проверка подлинности заголовка успешно установлена",
-    "resourceHeaderAuthSetupDescription": "Проверка подлинности заголовка успешно установлена.",
-    "resourceHeaderAuthSetupTitle": "Установить проверку подлинности заголовка",
-    "resourceHeaderAuthSetupTitleDescription": "Установите основные учетные данные авторизации (имя пользователя и пароль), чтобы защитить этот ресурс с помощью заголовка HTTP. Получите доступ к нему с помощью формата https://username:password@resource.example.com",
-    "resourceHeaderAuthSubmit": "Установить проверку подлинности заголовка",
-    "actionSetResourceHeaderAuth": "Установить проверку подлинности заголовка",
-    "enterpriseEdition": "Корпоративная версия",
-    "unlicensed": "Нелицензированный",
-    "beta": "Бета",
-    "manageClients": "Управление клиентами",
-    "manageClientsDescription": "Клиенты - это устройства, которые могут подключаться к вашим сайтам",
-    "licenseTableValidUntil": "Действителен до",
-    "saasLicenseKeysSettingsTitle": "Корпоративные лицензии",
-    "saasLicenseKeysSettingsDescription": "Генерировать и управлять лицензионными ключами Enterprise для копий Pangolin",
-    "sidebarEnterpriseLicenses": "Лицензии",
-    "generateLicenseKey": "Сгенерировать лицензионный ключ",
-    "generateLicenseKeyForm": {
-        "validation": {
-            "emailRequired": "Пожалуйста, введите действительный адрес электронной почты",
-            "useCaseTypeRequired": "Пожалуйста, выберите тип варианта использования",
-            "firstNameRequired": "Требуется имя",
-            "lastNameRequired": "Требуется фамилия",
-            "primaryUseRequired": "Пожалуйста, опишите ваше основное использование",
-            "jobTitleRequiredBusiness": "Должность требуется для коммерческого использования",
-            "industryRequiredBusiness": "Промышленность необходима для коммерческого использования",
-            "stateProvinceRegionRequired": "Регион/Область обязательно",
-            "postalZipCodeRequired": "Почтовый индекс требуется",
-            "companyNameRequiredBusiness": "Название компании обязательно для бизнес-использования",
-            "countryOfResidenceRequiredBusiness": "Страна проживания необходима для коммерческого использования",
-            "countryRequiredPersonal": "Страна необходима для личного использования",
-            "agreeToTermsRequired": "Вы должны принять условия",
-            "complianceConfirmationRequired": "Вы должны подтвердить соответствие с Fossorial Commercial License"
-        },
-        "useCaseOptions": {
-            "personal": {
-                "title": "Личное использование",
-                "description": "Для индивидуального, некоммерческого использования, например, обучения, личных проектов или экспериментов."
-            },
-            "business": {
-                "title": "Бизнес-использование",
-                "description": "Для использования в организациях, компаниях или коммерческих или приносящих доход видах деятельности."
-            }
-        },
-        "steps": {
-            "emailLicenseType": {
-                "title": "Email и тип лицензии",
-                "description": "Введите адрес электронной почты и выберите тип лицензии"
-            },
-            "personalInformation": {
-                "title": "Личная информация",
-                "description": "Расскажите нам о себе"
-            },
-            "contactInformation": {
-                "title": "Контактная информация",
-                "description": "Ваши контактные данные"
-            },
-            "termsGenerate": {
-                "title": "Условия и Сгенерировать",
-                "description": "Просмотрите и примите условия для создания вашей лицензии"
-            }
-        },
-        "alerts": {
-            "commercialUseDisclosure": {
-                "title": "Раскрытие",
-                "description": "Выберите уровень лицензии, который точно отражает ваше предполагаемое использование. Личная Лицензия разрешает свободное использование Программного Обеспечения для частной, некоммерческой или малой коммерческой деятельности с годовым валовым доходом до $100 000 USD. Любое использование сверх этих пределов — включая использование в бизнесе, организацию, или другой приносящей доход среде — требует действительной лицензии предприятия и уплаты соответствующей лицензионной платы. Все пользователи, будь то Личные или Предприятия, обязаны соблюдать условия коммерческой лицензии Fossoral."
-            },
-            "trialPeriodInformation": {
-                "title": "Информация о пробном периоде",
-                "description": "Этот лицензионный ключ позволяет корпоративным функциям на 7-дневный период оценки. Для продолжения доступа к платным функциям за пределами ознакомительного периода требуется активация в рамках действующей лицензии Личного или Предприятия. Для получения лицензии свяжитесь с sales@pangolin.net."
-            }
-        },
-        "form": {
-            "useCaseQuestion": "Вы используете Pangolin для личного или делового использования?",
-            "firstName": "First Name",
-            "lastName": "Фамилия",
-            "jobTitle": "Заголовок",
-            "primaryUseQuestion": "Что вы планируете использовать Панголин в первую очередь?",
-            "industryQuestion": "Какая у вас отрасль?",
-            "prospectiveUsersQuestion": "Сколько у вас потенциальных пользователей?",
-            "prospectiveSitesQuestion": "Сколько потенциальных сайтов (туннелей) вы ожидаете?",
-            "companyName": "Название компании",
-            "countryOfResidence": "Страна проживания",
-            "stateProvinceRegion": "Область / регион",
-            "postalZipCode": "Почтовый индекс",
-            "companyWebsite": "Веб-сайт компании",
-            "companyPhoneNumber": "Телефон компании",
-            "country": "Страна",
-            "phoneNumberOptional": "Номер телефона (необязательно)",
-            "complianceConfirmation": "Я подтверждаю, что информация, которую я предоставляю, является точной и что я в соответствии с коммерческой лицензии Fossorial. Сообщение о неточной информации или неправильно идентифицирующем использовании продукта является нарушением лицензии и может привести к аннулированию вашего ключа."
-        },
-        "buttons": {
-            "close": "Закрыть",
-            "previous": "Предыдущий",
-            "next": "Следующий",
-            "generateLicenseKey": "Сгенерировать лицензионный ключ"
-        },
-        "toasts": {
-            "success": {
-                "title": "Лицензионный ключ успешно создан",
-                "description": "Ваш лицензионный ключ сгенерирован и готов к использованию."
-            },
-            "error": {
-                "title": "Не удалось сгенерировать лицензионный ключ",
-                "description": "Произошла ошибка при генерации лицензионного ключа."
-            }
-        }
-    },
-    "priority": "Приоритет",
-    "priorityDescription": "Маршруты с более высоким приоритетом оцениваются первым. Приоритет = 100 означает автоматическое упорядочение (решение системы). Используйте другой номер для обеспечения ручного приоритета.",
-    "instanceName": "Имя экземпляра",
-    "pathMatchModalTitle": "Настроить соответствие пути",
-    "pathMatchModalDescription": "Настройка соответствия входящих запросов на основе их пути.",
-    "pathMatchType": "Тип совпадения",
-    "pathMatchPrefix": "Префикс",
-    "pathMatchExact": "Точно",
-    "pathMatchRegex": "Регенерация",
-    "pathMatchValue": "Значение пути",
-    "clear": "Очистить",
-    "saveChanges": "Сохранить изменения",
-    "pathMatchRegexPlaceholder": "^/api/.*",
-    "pathMatchDefaultPlaceholder": "/путь",
-    "pathMatchPrefixHelp": "Пример: /api matches /api, /api/users, etc.",
-    "pathMatchExactHelp": "Пример: /api соответствует только /api",
-    "pathMatchRegexHelp": "Пример: ^/api/.* совпадает с /api/anything",
-    "pathRewriteModalTitle": "Настроить перезапись пути",
-    "pathRewriteModalDescription": "Преобразовать соответствующий путь перед пересылкой к цели.",
-    "pathRewriteType": "Тип перезаписи",
-    "pathRewritePrefixOption": "Префикс - Замена префикса",
-    "pathRewriteExactOption": "Точно - Заменить весь путь",
-    "pathRewriteRegexOption": "Regex - замена шаблона",
-    "pathRewriteStripPrefixOption": "Префикс вырезать - Удалить префикс",
-    "pathRewriteValue": "Перезаписать значение",
-    "pathRewriteRegexPlaceholder": "/new/$1",
-    "pathRewriteDefaultPlaceholder": "/new-path",
-    "pathRewritePrefixHelp": "Заменить соответствующий префикс этим значением",
-    "pathRewriteExactHelp": "Замените весь путь этим значением, когда путь точно соответствует",
-    "pathRewriteRegexHelp": "Использовать группы захвата типа $1, $2 для замены",
-    "pathRewriteStripPrefixHelp": "Оставьте пустым для префикса полосы или укажите новый префикс",
-    "pathRewritePrefix": "Префикс",
-    "pathRewriteExact": "Точно",
-    "pathRewriteRegex": "Регенерация",
-    "pathRewriteStrip": "Вырезать",
-    "pathRewriteStripLabel": "полоса",
-    "sidebarEnableEnterpriseLicense": "Включить корпоративную лицензию",
-    "cannotbeUndone": "Это действие не может быть отменено.",
-    "toConfirm": "для подтверждения",
-    "deleteClientQuestion": "Вы уверены, что хотите удалить клиента из сайта и организации?",
-    "clientMessageRemove": "После удаления клиент больше не сможет подключиться к сайту."
+    "rewritePathDescription": "При необходимости, измените путь перед пересылкой к целевому адресу."
 }
--- a/messages/tr-TR.json
+++ b/messages/tr-TR.json
@@ -47,8 +47,9 @@
    "edit": "Düzenle",
    "siteConfirmDelete": "Site Silmeyi Onayla",
    "siteDelete": "Siteyi Sil",
-    "siteMessageRemove": "Kaldırıldıktan sonra site artık erişilebilir olmayacaktır. Siteyle ilişkilendirilmiş tüm hedefler de kaldırılacaktır.",
-    "siteQuestionRemove": "Siteyi organizasyondan kaldırmak istediğinizden emin misiniz?",
+    "siteMessageRemove": "Kaldırıldıktan sonra site artık erişilebilir olmayacak. Siteyle ilişkili tüm kaynaklar ve hedefler de kaldırılacaktır.",
+    "siteMessageConfirm": "Onaylamak için lütfen aşağıya sitenin adını yazın.",
+    "siteQuestionRemove": "{selectedSite} sitesini organizasyondan kaldırmak istediğinizden emin misiniz?",
    "siteManageSites": "Siteleri Yönet",
    "siteDescription": "Ağınıza güvenli tüneller üzerinden bağlantı izni verin",
    "siteCreate": "Site Oluştur",
@@ -95,7 +96,7 @@
    "siteWgDescription": "Bir tünel oluşturmak için herhangi bir WireGuard istemcisi kullanın. Manuel NAT kurulumu gereklidir.",
    "siteWgDescriptionSaas": "Bir tünel oluşturmak için herhangi bir WireGuard istemcisi kullanın. Manuel NAT kurulumu gereklidir. YALNIZCA SELF HOSTED DÜĞÜMLERDE ÇALIŞIR",
    "siteLocalDescription": "Yalnızca yerel kaynaklar. Tünelleme yok.",
-    "siteLocalDescriptionSaas": "Yerel kaynaklar yalnızca. Tünel oluşturma yok. Yalnızca uzak düğümlerde mevcuttur.",
+    "siteLocalDescriptionSaas": "Yalnızca yerel kaynaklar. Tünel yok. YALNIZCA SELF HOSTED DÜĞÜMLERDE ÇALIŞIR",
    "siteSeeAll": "Tüm Siteleri Gör",
    "siteTunnelDescription": "Sitenize nasıl bağlanmak istediğinizi belirleyin",
    "siteNewtCredentials": "Newt Kimlik Bilgileri",
@@ -153,7 +154,8 @@
    "protected": "Korunan",
    "notProtected": "Korunmayan",
    "resourceMessageRemove": "Kaldırıldıktan sonra kaynak artık erişilebilir olmayacaktır. Kaynakla ilişkili tüm hedefler de kaldırılacaktır.",
-    "resourceQuestionRemove": "Kaynağı organizasyondan kaldırmak istediğinizden emin misiniz?",
+    "resourceMessageConfirm": "Onaylamak için lütfen aşağıya kaynağın adını yazın.",
+    "resourceQuestionRemove": "{selectedResource} kaynağını organizasyondan kaldırmak istediğinizden emin misiniz?",
    "resourceHTTP": "HTTPS Kaynağı",
    "resourceHTTPDescription": "Bir alt alan adı veya temel alan adı kullanarak uygulamanıza HTTPS üzerinden vekil istek gönderin.",
    "resourceRaw": "Ham TCP/UDP Kaynağı",
@@ -218,7 +220,7 @@
    "orgDeleteConfirm": "Organizasyon Silmeyi Onayla",
    "orgMessageRemove": "Bu işlem geri alınamaz ve tüm ilişkili verileri silecektir.",
    "orgMessageConfirm": "Onaylamak için lütfen aşağıya organizasyonun adını yazın.",
-    "orgQuestionRemove": "Organizasyondan kaldırmak istediğinizden emin misiniz?",
+    "orgQuestionRemove": "{selectedOrg} organizasyonunu kaldırmak istediğinizden emin misiniz?",
    "orgUpdated": "Organizasyon güncellendi",
    "orgUpdatedDescription": "Organizasyon güncellendi.",
    "orgErrorUpdate": "Organizasyon güncellenemedi",
@@ -285,8 +287,9 @@
    "apiKeysAdd": "API Anahtarı Oluştur",
    "apiKeysErrorDelete": "API anahtarı silinirken bir hata oluştu",
    "apiKeysErrorDeleteMessage": "API anahtarı silinirken bir hata oluştu",
-    "apiKeysQuestionRemove": "API anahtarını organizasyondan kaldırmak istediğinizden emin misiniz?",
+    "apiKeysQuestionRemove": "{selectedApiKey} API anahtarını organizasyondan kaldırmak istediğinizden emin misiniz?",
    "apiKeysMessageRemove": "Kaldırıldığında, API anahtarı artık kullanılamayacaktır.",
+    "apiKeysMessageConfirm": "Onaylamak için lütfen aşağıya API anahtarının adını yazın.",
    "apiKeysDeleteConfirm": "API Anahtarının Silinmesini Onaylayın",
    "apiKeysDelete": "API Anahtarını Sil",
    "apiKeysManage": "API Anahtarlarını Yönet",
@@ -302,7 +305,8 @@
    "userDeleteConfirm": "Kullanıcı Silinmesini Onayla",
    "userDeleteServer": "Kullanıcıyı Sunucudan Sil",
    "userMessageRemove": "Kullanıcı tüm organizasyonlardan çıkarılacak ve tamamen sunucudan kaldırılacaktır.",
-    "userQuestionRemove": "Kullanıcıyı sunucudan kalıcı olarak silmek istediğinizden emin misiniz?",
+    "userMessageConfirm": "Onaylamak için lütfen aşağıya kullanıcının adını yazın.",
+    "userQuestionRemove": "{selectedUser} kullanıcısını sunucudan kalıcı olarak silmek istediğinizden emin misiniz?",
    "licenseKey": "Lisans Anahtarı",
    "valid": "Geçerli",
    "numberOfSites": "Site Sayısı",
@@ -335,7 +339,7 @@
    "fossorialLicense": "Fossorial Ticari Lisans ve Abonelik Koşullarını Gör",
    "licenseMessageRemove": "Bu, lisans anahtarını ve onun tarafından verilen tüm izinleri kaldıracaktır.",
    "licenseMessageConfirm": "Onaylamak için lütfen aşağıya lisans anahtarını yazın.",
-    "licenseQuestionRemove": "Lisans anahtarını silmek istediğinizden emin misiniz?",
+    "licenseQuestionRemove": "{selectedKey} lisans anahtarını silmek istediğinizden emin misiniz?",
    "licenseKeyDelete": "Lisans Anahtarını Sil",
    "licenseKeyDeleteConfirm": "Lisans Anahtarının Silinmesini Onaylayın",
    "licenseTitle": "Lisans Durumunu Yönet",
@@ -368,7 +372,7 @@
    "inviteRemoveErrorDescription": "Daveti kaldırırken bir hata oluştu.",
    "inviteRemoved": "Davetiye kaldırıldı",
    "inviteRemovedDescription": "{email} için olan davetiye kaldırıldı.",
-    "inviteQuestionRemove": "Davetiyeyi kaldırmak istediğinizden emin misiniz?",
+    "inviteQuestionRemove": "{email} davetini kaldırmak istediğinizden emin misiniz?",
    "inviteMessageRemove": "Kaldırıldıktan sonra bu davetiye artık geçerli olmayacak. Kullanıcı tekrar davet edilebilir.",
    "inviteMessageConfirm": "Onaylamak için lütfen aşağıya davetiyenin e-posta adresini yazın.",
    "inviteQuestionRegenerate": "Are you sure you want to regenerate the invitation for{email, plural, ='' {}, other { for #}}? This will revoke the previous invitation.",
@@ -394,8 +398,9 @@
    "userErrorOrgRemoveDescription": "Kullanıcı kaldırılırken bir hata oluştu.",
    "userOrgRemoved": "Kullanıcı kaldırıldı",
    "userOrgRemovedDescription": "{email} kullanıcı organizasyondan kaldırılmıştır.",
-    "userQuestionOrgRemove": "Kullanıcıyı organizasyondan kaldırmak istediğinizden emin misiniz?",
+    "userQuestionOrgRemove": "{email} adresini organizasyondan kaldırmak istediğinizden emin misiniz?",
    "userMessageOrgRemove": "Kaldırıldığında, bu kullanıcı organizasyona artık erişim sağlayamayacak. Kullanıcı tekrar davet edilebilir, ancak daveti kabul etmesi gerekecek.",
+    "userMessageOrgConfirm": "Onaylamak için lütfen aşağıya kullanıcının adını yazın.",
    "userRemoveOrgConfirm": "Kullanıcıyı Kaldırmayı Onayla",
    "userRemoveOrg": "Kullanıcıyı Organizasyondan Kaldır",
    "users": "Kullanıcılar",
@@ -463,10 +468,7 @@
    "createdAt": "Oluşturulma Tarihi",
    "proxyErrorInvalidHeader": "Geçersiz özel Ana Bilgisayar Başlığı değeri. Alan adı formatını kullanın veya özel Ana Bilgisayar Başlığını ayarlamak için boş bırakın.",
    "proxyErrorTls": "Geçersiz TLS Sunucu Adı. Alan adı formatını kullanın veya TLS Sunucu Adını kaldırmak için boş bırakılsın.",
-    "proxyEnableSSL": "SSL Etkinleştir",
-    "proxyEnableSSLDescription": "Hedeflerinize güvenli HTTPS bağlantıları için SSL/TLS şifrelemesi etkinleştirin.",
-    "target": "Hedef",
-    "configureTarget": "Hedefleri Yapılandır",
+    "proxyEnableSSL": "SSL'yi Etkinleştir (https)",
    "targetErrorFetch": "Hedefleri alamadı",
    "targetErrorFetchDescription": "Hedefler alınırken bir hata oluştu",
    "siteErrorFetch": "kaynağa ulaşılamadı",
@@ -493,7 +495,7 @@
    "targetTlsSettings": "HTTPS & TLS Settings",
    "targetTlsSettingsDescription": "Configure TLS settings for your resource",
    "targetTlsSettingsAdvanced": "Gelişmiş TLS Ayarları",
-    "targetTlsSni": "TLS Sunucu Adı",
+    "targetTlsSni": "TLS Sunucu Adı (SNI)",
    "targetTlsSniDescription": "SNI için kullanılacak TLS Sunucu Adı'",
    "targetTlsSubmit": "Ayarları Kaydet",
    "targets": "Hedefler Konfigürasyonu",
@@ -502,21 +504,9 @@
    "targetStickySessionsDescription": "Bağlantıları oturum süresince aynı arka uç hedef üzerinde tutun.",
    "methodSelect": "Yöntemi Seç",
    "targetSubmit": "Hedef Ekle",
-    "targetNoOne": "Bu kaynağın hedefi yok. Arka planınıza istek göndereceğiniz bir hedef yapılandırmak için hedef ekleyin.",
+    "targetNoOne": "Hiçbir hedef yok. Formu kullanarak bir hedef ekleyin.",
    "targetNoOneDescription": "Yukarıdaki birden fazla hedef ekleyerek yük dengeleme etkinleştirilecektir.",
    "targetsSubmit": "Hedefleri Kaydet",
-    "addTarget": "Hedef Ekle",
-    "targetErrorInvalidIp": "Geçersiz IP adresi",
-    "targetErrorInvalidIpDescription": "Lütfen geçerli bir IP adresi veya host adı girin",
-    "targetErrorInvalidPort": "Geçersiz port",
-    "targetErrorInvalidPortDescription": "Lütfen geçerli bir port numarası girin",
-    "targetErrorNoSite": "Hiçbir site seçili değil",
-    "targetErrorNoSiteDescription": "Lütfen hedef için bir site seçin",
-    "targetCreated": "Hedef oluşturuldu",
-    "targetCreatedDescription": "Hedef başarıyla oluşturuldu",
-    "targetErrorCreate": "Hedef oluşturma başarısız oldu",
-    "targetErrorCreateDescription": "Hedef oluşturulurken bir hata oluştu",
-    "save": "Kaydet",
    "proxyAdditional": "Ek Proxy Ayarları",
    "proxyAdditionalDescription": "Kaynağınızın proxy ayarlarını nasıl yöneteceğini yapılandırın",
    "proxyCustomHeader": "Özel Ana Bilgisayar Başlığı",
@@ -725,7 +715,7 @@
    "pangolinServerAdmin": "Sunucu Yöneticisi - Pangolin",
    "licenseTierProfessional": "Profesyonel Lisans",
    "licenseTierEnterprise": "Kurumsal Lisans",
-    "licenseTierPersonal": "Kişisel Lisans",
+    "licenseTierCommercial": "Ticari Lisans",
    "licensed": "Lisanslı",
    "yes": "Evet",
    "no": "Hayır",
@@ -737,7 +727,7 @@
    "idpManageDescription": "Sistem içindeki kimlik sağlayıcıları görün ve yönetin",
    "idpDeletedDescription": "Kimlik sağlayıcı başarıyla silindi",
    "idpOidc": "OAuth2/OIDC",
-    "idpQuestionRemove": "Kimlik sağlayıcısını kalıcı olarak silmek istediğinizden emin misiniz?",
+    "idpQuestionRemove": "Kimlik sağlayıcıyı kalıcı olarak silmek istediğinizden emin misiniz? {name}",
    "idpMessageRemove": "Bu, kimlik sağlayıcıyı ve tüm ilişkili yapılandırmaları kaldıracaktır. Bu sağlayıcıdan kimlik doğrulayan kullanıcılar artık giriş yapamayacaktır.",
    "idpMessageConfirm": "Onaylamak için lütfen aşağıya kimlik sağlayıcının adını yazın.",
    "idpConfirmDelete": "Kimlik Sağlayıcıyı Silme Onayı",
@@ -760,7 +750,7 @@
    "idpDisplayName": "Bu kimlik sağlayıcı için bir görüntü adı",
    "idpAutoProvisionUsers": "Kullanıcıları Otomatik Sağla",
    "idpAutoProvisionUsersDescription": "Etkinleştirildiğinde, kullanıcılar rol ve organizasyonlara eşleme yeteneğiyle birlikte sistemde otomatik olarak oluşturulacak.",
-    "licenseBadge": " ",
+    "licenseBadge": "Profesyonel",
    "idpType": "Sağlayıcı Türü",
    "idpTypeDescription": "Yapılandırmak istediğiniz kimlik sağlayıcısı türünü seçin",
    "idpOidcConfigure": "OAuth2/OIDC Yapılandırması",
@@ -1094,6 +1084,7 @@
    "navbar": "Navigasyon Menüsü",
    "navbarDescription": "Uygulamanın ana navigasyon menüsü",
    "navbarDocsLink": "Dokümantasyon",
+    "commercialEdition": "Ticari Sürüm",
    "otpErrorEnable": "2FA etkinleştirilemedi",
    "otpErrorEnableDescription": "2FA etkinleştirilirken bir hata oluştu",
    "otpSetupCheckCode": "6 haneli bir kod girin",
@@ -1149,7 +1140,7 @@
    "sidebarAllUsers": "Tüm Kullanıcılar",
    "sidebarIdentityProviders": "Kimlik Sağlayıcılar",
    "sidebarLicense": "Lisans",
-    "sidebarClients": "İstemciler",
+    "sidebarClients": "Müşteriler (Beta)",
    "sidebarDomains": "Alan Adları",
    "enableDockerSocket": "Docker Soketini Etkinleştir",
    "enableDockerSocketDescription": "Plan etiketleri için Docker Socket etiket toplamasını etkinleştirin. Newt'e soket yolu sağlanmalıdır.",
@@ -1206,8 +1197,9 @@
    "domainCreate": "Alan Adı Oluştur",
    "domainCreatedDescription": "Alan adı başarıyla oluşturuldu",
    "domainDeletedDescription": "Alan adı başarıyla silindi",
-    "domainQuestionRemove": "Alan adını hesabınızdan kaldırmak istediğinizden emin misiniz?",
+    "domainQuestionRemove": "{domain} alan adını hesabınızdan kaldırmak istediğinizden emin misiniz?",
    "domainMessageRemove": "Kaldırıldığında, alan adı hesabınızla ilişkilendirilmeyecek.",
+    "domainMessageConfirm": "Onaylamak için lütfen aşağıya alan adını yazın.",
    "domainConfirmDelete": "Alan Adı Silinmesini Onayla",
    "domainDelete": "Alan Adını Sil",
    "domain": "Alan Adı",
@@ -1274,7 +1266,7 @@
    "billingFreeTier": "Ücretsiz Dilim",
    "billingWarningOverLimit": "Uyarı: Bir veya daha fazla kullanım limitini aştınız. Aboneliğinizi değiştirmediğiniz veya kullanımı ayarlamadığınız sürece siteleriniz bağlanmayacaktır.",
    "billingUsageLimitsOverview": "Kullanım Limitleri Genel Görünümü",
-    "billingMonitorUsage": "Kullanımınızı yapılandırılmış limitlerle karşılaştırın. Limitlerin artırılmasına ihtiyacınız varsa, lütfen support@pangolin.net adresinden bizimle iletişime geçin.",
+    "billingMonitorUsage": "Kullanımınızı yapılandırılmış limitlerle karşılaştırın. Limitlerin artırılmasına ihtiyacınız varsa, lütfen support@fossorial.io adresinden bizimle iletişime geçin.",
    "billingDataUsage": "Veri Kullanımı",
    "billingOnlineTime": "Site Çevrimiçi Süresi",
    "billingUsers": "Aktif Kullanıcılar",
@@ -1341,6 +1333,7 @@
    "twoFactorRequired": "Güvenlik anahtarını kaydetmek için iki faktörlü kimlik doğrulama gereklidir.",
    "twoFactor": "İki Faktörlü Kimlik Doğrulama",
    "adminEnabled2FaOnYourAccount": "Yöneticiniz {email} için iki faktörlü kimlik doğrulamayı etkinleştirdi. Devam etmek için kurulum işlemini tamamlayın.",
+    "continueToApplication": "Uygulamaya Devam Et",
    "securityKeyAdd": "Güvenlik Anahtarı Ekle",
    "securityKeyRegisterTitle": "Yeni Güvenlik Anahtarı Kaydet",
    "securityKeyRegisterDescription": "Güvenlik anahtarınızı bağlayın ve tanımlamak için bir ad girin",
@@ -1418,7 +1411,6 @@
    "externalProxyEnabled": "Dış Proxy Etkinleştirildi",
    "addNewTarget": "Yeni Hedef Ekle",
    "targetsList": "Hedefler Listesi",
-    "advancedMode": "Gelişmiş Mod",
    "targetErrorDuplicateTargetFound": "Yinelenen hedef bulundu",
    "healthCheckHealthy": "Sağlıklı",
    "healthCheckUnhealthy": "Sağlıksız",
@@ -1551,17 +1543,18 @@
    "autoLoginError": "Otomatik Giriş Hatası",
    "autoLoginErrorNoRedirectUrl": "Kimlik sağlayıcıdan yönlendirme URL'si alınamadı.",
    "autoLoginErrorGeneratingUrl": "Kimlik doğrulama URL'si oluşturulamadı.",
-    "remoteExitNodeManageRemoteExitNodes": "Uzak Düğümler",
-    "remoteExitNodeDescription": "Kendi konum ağlarınızdan bir veya daha fazlasını barındırarak, bağlantı kurulumları için buluta bağımlılığı azaltın.",
+    "remoteExitNodeManageRemoteExitNodes": "Öz-Host Yönetim",
+    "remoteExitNodeDescription": "Ağ bağlantınızı genişletmek için düğümleri yönetin",
    "remoteExitNodes": "Düğümler",
    "searchRemoteExitNodes": "Düğüm ara...",
    "remoteExitNodeAdd": "Düğüm Ekle",
    "remoteExitNodeErrorDelete": "Düğüm silinirken hata oluştu",
-    "remoteExitNodeQuestionRemove": "Düğümü organizasyondan kaldırmak istediğinizden emin misiniz?",
+    "remoteExitNodeQuestionRemove": "{selectedNode} düğümünü organizasyondan kaldırmak istediğinizden emin misiniz?",
    "remoteExitNodeMessageRemove": "Kaldırıldığında, düğüm artık erişilebilir olmayacaktır.",
+    "remoteExitNodeMessageConfirm": "Onaylamak için lütfen aşağıya düğümün adını yazın.",
    "remoteExitNodeConfirmDelete": "Düğüm Silmeyi Onayla",
    "remoteExitNodeDelete": "Düğümü Sil",
-    "sidebarRemoteExitNodes": "Uzak Düğümler",
+    "sidebarRemoteExitNodes": "Düğümler",
    "remoteExitNodeCreate": {
        "title": "Düğüm Oluştur",
        "description": "Ağ bağlantınızı genişletmek için yeni bir düğüm oluşturun",
@@ -1730,166 +1723,5 @@
    "authPageUpdated": "Kimlik doğrulama sayfası başarıyla güncellendi",
    "healthCheckNotAvailable": "Yerel",
    "rewritePath": "Yolu Yeniden Yaz",
-    "rewritePathDescription": "Seçenek olarak hedefe iletmeden önce yolu yeniden yazın.",
-    "continueToApplication": "Uygulamaya Devam Et",
-    "checkingInvite": "Davet Kontrol Ediliyor",
-    "setResourceHeaderAuth": "setResourceHeaderAuth",
-    "resourceHeaderAuthRemove": "Başlık Kimlik Doğrulama Kaldır",
-    "resourceHeaderAuthRemoveDescription": "Başlık kimlik doğrulama başarıyla kaldırıldı.",
-    "resourceErrorHeaderAuthRemove": "Başlık Kimlik Doğrulama kaldırılamadı",
-    "resourceErrorHeaderAuthRemoveDescription": "Kaynak için başlık kimlik doğrulaması kaldırılamadı.",
-    "resourceHeaderAuthProtectionEnabled": "Başlık Doğrulaması Etkin",
-    "resourceHeaderAuthProtectionDisabled": "Başlık Doğrulaması Devre Dışı",
-    "headerAuthRemove": "Başlık Doğrulaması Kaldır",
-    "headerAuthAdd": "Başlık Doğrulaması Ekle",
-    "resourceErrorHeaderAuthSetup": "Başlık Kimlik Doğrulama ayarlanamadı",
-    "resourceErrorHeaderAuthSetupDescription": "Kaynak için başlık kimlik doğrulaması ayarlanamadı.",
-    "resourceHeaderAuthSetup": "Başlık Kimlik Doğrulama başarıyla ayarlandı",
-    "resourceHeaderAuthSetupDescription": "Başlık kimlik doğrulaması başarıyla ayarlandı.",
-    "resourceHeaderAuthSetupTitle": "Başlık Kimlik Doğrulama Ayarla",
-    "resourceHeaderAuthSetupTitleDescription": "Bu kaynağı HTTP Başlık Kimlik Doğrulaması ile korumak için temel kimlik bilgilerini (kullanıcı adı ve şifre) ayarlayın. Kaynağa erişim için https://username:password@resource.example.com formatını kullanın.",
-    "resourceHeaderAuthSubmit": "Başlık Kimlik Doğrulama Ayarla",
-    "actionSetResourceHeaderAuth": "Başlık Kimlik Doğrulama Ayarla",
-    "enterpriseEdition": "Kurumsal Sürüm",
-    "unlicensed": "Lisansız",
-    "beta": "Beta",
-    "manageClients": "Müşteri Yönetimi",
-    "manageClientsDescription": "Müşteriler, sitelerinize bağlanabilen cihazlardır.",
-    "licenseTableValidUntil": "Geçerli İki Tarih Kadar",
-    "saasLicenseKeysSettingsTitle": "Kurumsal Lisanslar",
-    "saasLicenseKeysSettingsDescription": "Kendi barındırdığınız Pangolin örnekleri için kurumsal lisans anahtarları oluşturun ve yönetin.",
-    "sidebarEnterpriseLicenses": "Lisanslar",
-    "generateLicenseKey": "Lisans Anahtarı Oluştur",
-    "generateLicenseKeyForm": {
-        "validation": {
-            "emailRequired": "Lütfen geçerli bir e-posta adresi girin.",
-            "useCaseTypeRequired": "Lütfen bir kullanım alanı türü seçin.",
-            "firstNameRequired": "İsim gereklidir.",
-            "lastNameRequired": "Soyisim gereklidir.",
-            "primaryUseRequired": "Lütfen öncelikli kullanımınızı açıklayın.",
-            "jobTitleRequiredBusiness": "İş kullanımı için iş unvanı gereklidir.",
-            "industryRequiredBusiness": "İş kullanımı için sektör gereklidir.",
-            "stateProvinceRegionRequired": "Eyalet/İl/Bölge gereklidir.",
-            "postalZipCodeRequired": "Posta/ZIP kodu gereklidir.",
-            "companyNameRequiredBusiness": "İş kullanımı için şirket ismi gereklidir.",
-            "countryOfResidenceRequiredBusiness": "İş kullanımı için ikamet edilen ülke gereklidir.",
-            "countryRequiredPersonal": "Kişisel kullanım için ülke gereklidir.",
-            "agreeToTermsRequired": "Şartları kabul etmelisiniz.",
-            "complianceConfirmationRequired": "Fossorial Ticari Lisans ile uyumluluğu doğrulamalısınız."
-        },
-        "useCaseOptions": {
-            "personal": {
-                "title": "Kişisel Kullanım",
-                "description": "Bireysel, ticari olmayan kullanım için öğrenme, kişisel projeler veya denemeler gibi."
-            },
-            "business": {
-                "title": "İş Kullanımı",
-                "description": "Kuruluşlar, şirketler veya ticari veya gelir getirici faaliyetler bünyesinde kullanım için."
-            }
-        },
-        "steps": {
-            "emailLicenseType": {
-                "title": "E-posta ve Lisans Türü",
-                "description": "E-posta adresinizi girin ve lisans türünüzü seçin."
-            },
-            "personalInformation": {
-                "title": "Kişisel Bilgiler",
-                "description": "Kendinizden bahsedin."
-            },
-            "contactInformation": {
-                "title": "İletişim Bilgileri",
-                "description": "İletişim detaylarınız."
-            },
-            "termsGenerate": {
-                "title": "Şartlar ve Lisans Üret",
-                "description": "Lisansınızı oluşturmak için şartları inceleyin ve kabul edin."
-            }
-        },
-        "alerts": {
-            "commercialUseDisclosure": {
-                "title": "Kullanım Açıklaması",
-                "description": "Kullanım amacınızı doğru bir şekilde yansıtan lisans seviyesini seçin. Kişisel Lisans, yazılımın bireysel, ticari olmayan veya yıllık geliri 100,000 ABD Dolarının altında olan küçük ölçekli ticari faaliyetlerde ücretsiz kullanılmasına izin verir. Bu sınırların ötesinde kullanım — bir işletme, organizasyon veya diğer gelir getirici ortamlarda kullanım dahil olmak üzere — geçerli bir Kurumsal Lisans ve ilgili lisans ücretinin ödenmesini gerektirir. Tüm kullanıcılar, ister Kişisel ister Kurumsal, Fossorial Ticari Lisans Şartlarına uymalıdır."
-            },
-            "trialPeriodInformation": {
-                "title": "Deneme Süresi Bilgileri",
-                "description": "Bu Lisans Anahtarı, Kurumsal özellikleri 7 günlük bir değerlendirme süresi için etkinleştirir. Değerlendirme süresi bittikten sonra, Ücretli Özelliklere devam eden erişim, geçerli bir Kişisel veya Kurumsal Lisans altında etkinleşmeyi gerektirir. Kurumsal lisanslama için sales@pangolin.net ile iletişime geçin."
-            }
-        },
-        "form": {
-            "useCaseQuestion": "Pangolin'i kişisel veya iş kullanımı için mi kullanıyorsunuz?",
-            "firstName": "İsim",
-            "lastName": "Soyisim",
-            "jobTitle": "İş Unvanı",
-            "primaryUseQuestion": "Pangolin'i öncelikli olarak ne amacıyla kullanmayı planlıyorsunuz?",
-            "industryQuestion": "Hangi sektördesiniz?",
-            "prospectiveUsersQuestion": "Kaç potansiyel kullanıcı öngörüyorsunuz?",
-            "prospectiveSitesQuestion": "Kaç potansiyel site (tünel) öngörüyorsunuz?",
-            "companyName": "Şirket İsmi",
-            "countryOfResidence": "İkamet edilen ülke",
-            "stateProvinceRegion": "Eyalet / İl / Bölge",
-            "postalZipCode": "Posta / ZIP Kodu",
-            "companyWebsite": "Şirket web sitesi",
-            "companyPhoneNumber": "Şirket telefon numarası",
-            "country": "Ülke",
-            "phoneNumberOptional": "Telefon numarası (isteğe bağlı)",
-            "complianceConfirmation": "Sağladığım bilgilerin doğru olduğunu ve Fossorial Ticari Lisans ile uyumlu olduğumu teyit ederim. Yanlış bilgi raporlamak veya ürün kullanımını yanlış tanımlamak lisans ihlalidir ve anahtarınızın iptal edilmesine neden olabilir."
-        },
-        "buttons": {
-            "close": "Kapat",
-            "previous": "Önceki",
-            "next": "Sonraki",
-            "generateLicenseKey": "Lisans Anahtarı Oluştur"
-        },
-        "toasts": {
-            "success": {
-                "title": "Lisans anahtarı başarıyla oluşturuldu",
-                "description": "Lisans anahtarınız oluşturuldu ve kullanıma hazır."
-            },
-            "error": {
-                "title": "Lisans anahtarı oluşturulamadı",
-                "description": "Lisans anahtarı oluşturulurken bir hata oluştu."
-            }
-        }
-    },
-    "priority": "Öncelik",
-    "priorityDescription": "Daha yüksek öncelikli rotalar önce değerlendirilir. Öncelik = 100, otomatik sıralama anlamına gelir (sistem karar verir). Manuel öncelik uygulamak için başka bir numara kullanın.",
-    "instanceName": "Örnek İsmi",
-    "pathMatchModalTitle": "Yol Eşleşmesini Yapılandır",
-    "pathMatchModalDescription": "Gelen isteklerin yolu temel alarak nasıl eşleştirilmesi gerektiğini ayarlayın.",
-    "pathMatchType": "Eşleşme Türü",
-    "pathMatchPrefix": "Önek",
-    "pathMatchExact": "Tam",
-    "pathMatchRegex": "Regex",
-    "pathMatchValue": "Yol Değeri",
-    "clear": "Temizle",
-    "saveChanges": "Değişiklikleri Kaydet",
-    "pathMatchRegexPlaceholder": "^/api/.*",
-    "pathMatchDefaultPlaceholder": "/path",
-    "pathMatchPrefixHelp": "Örnek: /api, /api/users vb.'ni eşleştirir.",
-    "pathMatchExactHelp": "Örnek: /api yalnızca /api'yi eşleştirir",
-    "pathMatchRegexHelp": "Örnek: ^/api/.* her şeyi eşleştirir /api/anything",
-    "pathRewriteModalTitle": "Yolu Yeniden Yazmayı Yapılandır",
-    "pathRewriteModalDescription": "Hedefe iletilmeden önce eşleşen yolu dönüştürün.",
-    "pathRewriteType": "Yeniden Yazma Türü",
-    "pathRewritePrefixOption": "Önek - Ön ek değiştirme",
-    "pathRewriteExactOption": "Tam - Tüm yolu değiştir",
-    "pathRewriteRegexOption": "Regex - Desen değiştirme",
-    "pathRewriteStripPrefixOption": "Ön Ek Kaldır - Ön eki sil",
-    "pathRewriteValue": "Yeniden Yazma Değeri",
-    "pathRewriteRegexPlaceholder": "/new/$1",
-    "pathRewriteDefaultPlaceholder": "/new-path",
-    "pathRewritePrefixHelp": "Eşleşen öneki bu değerle değiştir",
-    "pathRewriteExactHelp": "Yol tam olarak eşleştiğinde, yolun tamamını bu değerle değiştir",
-    "pathRewriteRegexHelp": "Değiştirme için $1, $2 gibi yakalama gruplarını kullan",
-    "pathRewriteStripPrefixHelp": "Öneki silmek veya yeni bir ön ek sağlamak için boş bırakın",
-    "pathRewritePrefix": "Önek",
-    "pathRewriteExact": "Tam",
-    "pathRewriteRegex": "Regex",
-    "pathRewriteStrip": "Sil",
-    "pathRewriteStripLabel": "sil",
-    "sidebarEnableEnterpriseLicense": "Kurumsal Lisans Etkinleştir",
-    "cannotbeUndone": "Bu geri alınamaz.",
-    "toConfirm": "doğrulamak için",
-    "deleteClientQuestion": "Müşteriyi siteden ve organizasyondan kaldırmak istediğinizden emin misiniz?",
-    "clientMessageRemove": "Kaldırıldıktan sonra müşteri siteye bağlanamayacaktır."
+    "rewritePathDescription": "Seçenek olarak hedefe iletmeden önce yolu yeniden yazın."
 }
--- a/messages/zh-CN.json
+++ b/messages/zh-CN.json
@@ -47,8 +47,9 @@
    "edit": "编辑",
    "siteConfirmDelete": "确认删除站点",
    "siteDelete": "删除站点",
-    "siteMessageRemove": "一旦移除，站点将无法访问。与站点相关的所有目标也将被移除。",
-    "siteQuestionRemove": "您确定要从组织中删除该站点吗？",
+    "siteMessageRemove": "一旦删除，该站点将无法访问。与该站点相关的所有资源和目标也将被删除。",
+    "siteMessageConfirm": "请在下面输入站点名称以确认。",
+    "siteQuestionRemove": "您确定要从组织中删除 {selectedSite} 站点吗？",
    "siteManageSites": "管理站点",
    "siteDescription": "允许通过安全隧道连接到您的网络",
    "siteCreate": "创建站点",
@@ -95,7 +96,7 @@
    "siteWgDescription": "使用任何 WireGuard 客户端来建立隧道。需要手动配置 NAT。",
    "siteWgDescriptionSaas": "使用任何WireGuard客户端建立隧道。需要手动配置NAT。仅适用于自托管节点。",
    "siteLocalDescription": "仅限本地资源。不需要隧道。",
-    "siteLocalDescriptionSaas": "仅本地资源。没有隧道。仅在远程节点上可用。",
+    "siteLocalDescriptionSaas": "仅本地资源。无需隧道。仅适用于自托管节点。",
    "siteSeeAll": "查看所有站点",
    "siteTunnelDescription": "确定如何连接到您的网站",
    "siteNewtCredentials": "Newt 凭据",
@@ -153,7 +154,8 @@
    "protected": "受到保护",
    "notProtected": "未受到保护",
    "resourceMessageRemove": "一旦删除，资源将不再可访问。与该资源相关的所有目标也将被删除。",
-    "resourceQuestionRemove": "您确定要从组织中删除资源吗？",
+    "resourceMessageConfirm": "请在下面输入资源名称以确认。",
+    "resourceQuestionRemove": "您确定要从组织中删除 {selectedResource} 吗？",
    "resourceHTTP": "HTTPS 资源",
    "resourceHTTPDescription": "使用子域或根域名通过 HTTPS 向您的应用程序提出代理请求。",
    "resourceRaw": "TCP/UDP 资源",
@@ -218,7 +220,7 @@
    "orgDeleteConfirm": "确认删除组织",
    "orgMessageRemove": "此操作不可逆，这将删除所有相关数据。",
    "orgMessageConfirm": "要确认，请在下面输入组织名称。",
-    "orgQuestionRemove": "您确定要删除组织吗？",
+    "orgQuestionRemove": "你确定要删除 \"{selectedOrg}\" 组织吗？",
    "orgUpdated": "组织已更新",
    "orgUpdatedDescription": "组织已更新。",
    "orgErrorUpdate": "更新组织失败",
@@ -285,8 +287,9 @@
    "apiKeysAdd": "生成 API 密钥",
    "apiKeysErrorDelete": "删除 API 密钥出错",
    "apiKeysErrorDeleteMessage": "删除 API 密钥出错",
-    "apiKeysQuestionRemove": "您确定要从组织中删除 API 密钥吗？",
+    "apiKeysQuestionRemove": "您确定要从组织中删除 \"{selectedApiKey}\" API密钥吗？",
    "apiKeysMessageRemove": "一旦删除，此API密钥将无法被使用。",
+    "apiKeysMessageConfirm": "要确认，请在下方输入API密钥名称。",
    "apiKeysDeleteConfirm": "确认删除 API 密钥",
    "apiKeysDelete": "删除 API 密钥",
    "apiKeysManage": "管理 API 密钥",
@@ -302,7 +305,8 @@
    "userDeleteConfirm": "确认删除用户",
    "userDeleteServer": "从服务器删除用户",
    "userMessageRemove": "该用户将被从所有组织中删除并完全从服务器中删除。",
-    "userQuestionRemove": "您确定要从服务器永久删除用户吗？",
+    "userMessageConfirm": "请在下面输入用户名称以确认。",
+    "userQuestionRemove": "您确定要从服务器中永久删除 {selectedUser} 吗？",
    "licenseKey": "许可证密钥",
    "valid": "有效",
    "numberOfSites": "站点数量",
@@ -335,7 +339,7 @@
    "fossorialLicense": "查看Fossorial Commercial License和订阅条款",
    "licenseMessageRemove": "这将删除许可证密钥和它授予的所有相关权限。",
    "licenseMessageConfirm": "要确认，请在下面输入许可证密钥。",
-    "licenseQuestionRemove": "您确定要删除许可证密钥？",
+    "licenseQuestionRemove": "您确定要删除 {selectedKey} 的邀请吗？",
    "licenseKeyDelete": "删除许可证密钥",
    "licenseKeyDeleteConfirm": "确认删除许可证密钥",
    "licenseTitle": "管理许可证状态",
@@ -368,7 +372,7 @@
    "inviteRemoveErrorDescription": "删除邀请时出错。",
    "inviteRemoved": "邀请已删除",
    "inviteRemovedDescription": "为 {email} 创建的邀请已删除",
-    "inviteQuestionRemove": "您确定要删除邀请吗？",
+    "inviteQuestionRemove": "您确定要删除 {email} 的邀请吗？",
    "inviteMessageRemove": "一旦删除，这个邀请将不再有效。",
    "inviteMessageConfirm": "要确认，请在下面输入邀请的电子邮件地址。",
    "inviteQuestionRegenerate": "您确定要重新邀请 {email} 吗？这将会撤销掉之前的邀请",
@@ -394,8 +398,9 @@
    "userErrorOrgRemoveDescription": "删除用户时出错。",
    "userOrgRemoved": "用户已删除",
    "userOrgRemovedDescription": "已将 {email} 从组织中移除。",
-    "userQuestionOrgRemove": "您确定要从组织中删除此用户吗？",
+    "userQuestionOrgRemove": "你确定要将 {email} 从组织中移除吗？",
    "userMessageOrgRemove": "一旦删除，这个用户将不再能够访问组织。 你总是可以稍后重新邀请他们，但他们需要再次接受邀请。",
+    "userMessageOrgConfirm": "请在下面输入用户名称以确认。",
    "userRemoveOrgConfirm": "确认删除用户",
    "userRemoveOrg": "从组织中删除用户",
    "users": "用户",
@@ -463,10 +468,7 @@
    "createdAt": "创建于",
    "proxyErrorInvalidHeader": "无效的自定义主机头值。使用域名格式，或将空保存为取消自定义主机头。",
    "proxyErrorTls": "无效的 TLS 服务器名称。使用域名格式，或保存空以删除 TLS 服务器名称。",
-    "proxyEnableSSL": "启用 SSL",
-    "proxyEnableSSLDescription": "启用 SSL/TLS 加密以确保您目标的 HTTPS 连接。",
-    "target": "Target",
-    "configureTarget": "配置目标",
+    "proxyEnableSSL": "启用 SSL (https)",
    "targetErrorFetch": "获取目标失败",
    "targetErrorFetchDescription": "获取目标时出错",
    "siteErrorFetch": "获取资源失败",
@@ -493,7 +495,7 @@
    "targetTlsSettings": "安全连接配置",
    "targetTlsSettingsDescription": "配置资源的 SSL/TLS 设置",
    "targetTlsSettingsAdvanced": "高级TLS设置",
-    "targetTlsSni": "TLS 服务器名称",
+    "targetTlsSni": "TLS 服务器名称 (SNI)",
    "targetTlsSniDescription": "SNI使用的 TLS 服务器名称。留空使用默认值。",
    "targetTlsSubmit": "保存设置",
    "targets": "目标配置",
@@ -502,21 +504,9 @@
    "targetStickySessionsDescription": "将连接保持在同一个后端目标的整个会话中。",
    "methodSelect": "选择方法",
    "targetSubmit": "添加目标",
-    "targetNoOne": "此资源没有任何目标。添加目标来配置向您后端发送请求的位置。",
+    "targetNoOne": "没有目标。使用表单添加目标。",
    "targetNoOneDescription": "在上面添加多个目标将启用负载平衡。",
    "targetsSubmit": "保存目标",
-    "addTarget": "添加目标",
-    "targetErrorInvalidIp": "无效的 IP 地址",
-    "targetErrorInvalidIpDescription": "请输入有效的IP地址或主机名",
-    "targetErrorInvalidPort": "无效的端口",
-    "targetErrorInvalidPortDescription": "请输入有效的端口号",
-    "targetErrorNoSite": "没有选择站点",
-    "targetErrorNoSiteDescription": "请选择目标站点",
-    "targetCreated": "目标已创建",
-    "targetCreatedDescription": "目标已成功创建",
-    "targetErrorCreate": "创建目标失败",
-    "targetErrorCreateDescription": "创建目标时出错",
-    "save": "保存",
    "proxyAdditional": "附加代理设置",
    "proxyAdditionalDescription": "配置你的资源如何处理代理设置",
    "proxyCustomHeader": "自定义主机标题",
@@ -725,7 +715,7 @@
    "pangolinServerAdmin": "服务器管理员 - Pangolin",
    "licenseTierProfessional": "专业许可证",
    "licenseTierEnterprise": "企业许可证",
-    "licenseTierPersonal": "个人许可证",
+    "licenseTierCommercial": "商业许可证",
    "licensed": "已授权",
    "yes": "是",
    "no": "否",
@@ -737,7 +727,7 @@
    "idpManageDescription": "查看和管理系统中的身份提供商",
    "idpDeletedDescription": "身份提供商删除成功",
    "idpOidc": "OAuth2/OIDC",
-    "idpQuestionRemove": "您确定要永久删除身份提供者吗？",
+    "idpQuestionRemove": "你确定要永久删除 \"{name}\" 这个身份提供商吗？",
    "idpMessageRemove": "这将删除身份提供者和所有相关的配置。通过此提供者进行身份验证的用户将无法登录。",
    "idpMessageConfirm": "要确认，请在下面输入身份提供者的名称。",
    "idpConfirmDelete": "确认删除身份提供商",
@@ -760,7 +750,7 @@
    "idpDisplayName": "此身份提供商的显示名称",
    "idpAutoProvisionUsers": "自动提供用户",
    "idpAutoProvisionUsersDescription": "如果启用，用户将在首次登录时自动在系统中创建，并且能够映射用户到角色和组织。",
-    "licenseBadge": "EE",
+    "licenseBadge": "专业版",
    "idpType": "提供者类型",
    "idpTypeDescription": "选择您想要配置的身份提供者类型",
    "idpOidcConfigure": "OAuth2/OIDC 配置",
@@ -1094,6 +1084,7 @@
    "navbar": "导航菜单",
    "navbarDescription": "应用程序的主导航菜单",
    "navbarDocsLink": "文件",
+    "commercialEdition": "商业版",
    "otpErrorEnable": "无法启用 2FA",
    "otpErrorEnableDescription": "启用 2FA 时出错",
    "otpSetupCheckCode": "请输入您的6位数字代码",
@@ -1149,7 +1140,7 @@
    "sidebarAllUsers": "所有用户",
    "sidebarIdentityProviders": "身份提供商",
    "sidebarLicense": "证书",
-    "sidebarClients": "客户端",
+    "sidebarClients": "客户端（测试版）",
    "sidebarDomains": "域",
    "enableDockerSocket": "启用 Docker 蓝图",
    "enableDockerSocketDescription": "启用 Docker Socket 标签擦除蓝图标签。套接字路径必须提供给新的。",
@@ -1206,8 +1197,9 @@
    "domainCreate": "创建域",
    "domainCreatedDescription": "域创建成功",
    "domainDeletedDescription": "成功删除域",
-    "domainQuestionRemove": "您确定要从您的帐户中删除域名吗？",
+    "domainQuestionRemove": "您确定要从您的账户中移除域{domain}吗？",
    "domainMessageRemove": "移除后，该域将不再与您的账户关联。",
+    "domainMessageConfirm": "要确认，请在下方输入域名。",
    "domainConfirmDelete": "确认删除域",
    "domainDelete": "删除域",
    "domain": "域",
@@ -1274,7 +1266,7 @@
    "billingFreeTier": "免费层",
    "billingWarningOverLimit": "警告：您已超出一个或多个使用限制。在您修改订阅或调整使用情况之前，您的站点将无法连接。",
    "billingUsageLimitsOverview": "使用限制概览",
-    "billingMonitorUsage": "监控您的使用情况以对比已配置的限制。如需提高限制请联系我们 support@pangolin.net。",
+    "billingMonitorUsage": "监控您的使用情况以对比已配置的限制。如需提高限制请联系我们 support@fossorial.io。",
    "billingDataUsage": "数据使用情况",
    "billingOnlineTime": "站点在线时间",
    "billingUsers": "活跃用户",
@@ -1341,6 +1333,7 @@
    "twoFactorRequired": "注册安全密钥需要两步验证。",
    "twoFactor": "两步验证",
    "adminEnabled2FaOnYourAccount": "管理员已为{email}启用两步验证。请完成设置以继续。",
+    "continueToApplication": "继续到应用程序",
    "securityKeyAdd": "添加安全密钥",
    "securityKeyRegisterTitle": "注册新安全密钥",
    "securityKeyRegisterDescription": "连接您的安全密钥并输入名称以便识别",
@@ -1418,7 +1411,6 @@
    "externalProxyEnabled": "外部代理已启用",
    "addNewTarget": "添加新目标",
    "targetsList": "目标列表",
-    "advancedMode": "高级模式",
    "targetErrorDuplicateTargetFound": "找到重复的目标",
    "healthCheckHealthy": "正常",
    "healthCheckUnhealthy": "不正常",
@@ -1551,17 +1543,18 @@
    "autoLoginError": "自动登录错误",
    "autoLoginErrorNoRedirectUrl": "未从身份提供商收到重定向URL。",
    "autoLoginErrorGeneratingUrl": "生成身份验证URL失败。",
-    "remoteExitNodeManageRemoteExitNodes": "远程节点",
-    "remoteExitNodeDescription": "自我主机一个或多个远程节点来扩展您的网络连接并减少对云的依赖性",
+    "remoteExitNodeManageRemoteExitNodes": "管理自托管",
+    "remoteExitNodeDescription": "管理节点以扩展您的网络连接",
    "remoteExitNodes": "节点",
    "searchRemoteExitNodes": "搜索节点...",
    "remoteExitNodeAdd": "添加节点",
    "remoteExitNodeErrorDelete": "删除节点时出错",
-    "remoteExitNodeQuestionRemove": "您确定要从组织中删除该节点吗？",
+    "remoteExitNodeQuestionRemove": "您确定要从组织中删除 {selectedNode} 节点吗？",
    "remoteExitNodeMessageRemove": "一旦删除，该节点将不再能够访问。",
+    "remoteExitNodeMessageConfirm": "要确认，请输入以下节点的名称。",
    "remoteExitNodeConfirmDelete": "确认删除节点",
    "remoteExitNodeDelete": "删除节点",
-    "sidebarRemoteExitNodes": "远程节点",
+    "sidebarRemoteExitNodes": "节点",
    "remoteExitNodeCreate": {
        "title": "创建节点",
        "description": "创建一个新节点来扩展您的网络连接",
@@ -1730,166 +1723,5 @@
    "authPageUpdated": "身份验证页面更新成功",
    "healthCheckNotAvailable": "本地的",
    "rewritePath": "重写路径",
-    "rewritePathDescription": "在转发到目标之前，可以选择重写路径。",
-    "continueToApplication": "继续应用",
-    "checkingInvite": "正在检查邀请",
-    "setResourceHeaderAuth": "设置 ResourceHeaderAuth",
-    "resourceHeaderAuthRemove": "删除头部认证",
-    "resourceHeaderAuthRemoveDescription": "已成功删除头部身份验证。",
-    "resourceErrorHeaderAuthRemove": "删除头部身份验证失败",
-    "resourceErrorHeaderAuthRemoveDescription": "无法删除资源的头部身份验证。",
-    "resourceHeaderAuthProtectionEnabled": "头部认证已启用",
-    "resourceHeaderAuthProtectionDisabled": "头部身份验证已禁用",
-    "headerAuthRemove": "删除头部认证",
-    "headerAuthAdd": "添加页眉认证",
-    "resourceErrorHeaderAuthSetup": "设置页眉认证失败",
-    "resourceErrorHeaderAuthSetupDescription": "无法设置资源的头部身份验证。",
-    "resourceHeaderAuthSetup": "头部认证设置成功",
-    "resourceHeaderAuthSetupDescription": "头部认证已成功设置。",
-    "resourceHeaderAuthSetupTitle": "设置头部身份验证",
-    "resourceHeaderAuthSetupTitleDescription": "使用HTTP 头身份验证来设置基本身份验证信息(用户名和密码)。使用 https://username:password@resource.example.com 访问它",
-    "resourceHeaderAuthSubmit": "设置头部身份验证",
-    "actionSetResourceHeaderAuth": "设置头部身份验证",
-    "enterpriseEdition": "企业版",
-    "unlicensed": "未授权",
-    "beta": "测试版",
-    "manageClients": "管理客户端",
-    "manageClientsDescription": "客户端是可以连接到您的站点的设备",
-    "licenseTableValidUntil": "有效期至",
-    "saasLicenseKeysSettingsTitle": "企业许可证",
-    "saasLicenseKeysSettingsDescription": "为自我托管的 Pangolin 实例生成和管理企业许可证密钥",
-    "sidebarEnterpriseLicenses": "许可协议",
-    "generateLicenseKey": "生成许可证密钥",
-    "generateLicenseKeyForm": {
-        "validation": {
-            "emailRequired": "请输入一个有效的电子邮件地址",
-            "useCaseTypeRequired": "请选择一个使用的案例类型",
-            "firstNameRequired": "必填名",
-            "lastNameRequired": "姓氏是必填项",
-            "primaryUseRequired": "请描述您的主要使用",
-            "jobTitleRequiredBusiness": "企业使用必须有职位头衔。",
-            "industryRequiredBusiness": "商业使用需要工业",
-            "stateProvinceRegionRequired": "州/省/地区是必填项",
-            "postalZipCodeRequired": "邮政编码是必需的",
-            "companyNameRequiredBusiness": "企业使用需要公司名称",
-            "countryOfResidenceRequiredBusiness": "商业使用必须是居住国",
-            "countryRequiredPersonal": "国家需要个人使用",
-            "agreeToTermsRequired": "您必须同意条款",
-            "complianceConfirmationRequired": "您必须确认遵守Fossorial Commercial License"
-        },
-        "useCaseOptions": {
-            "personal": {
-                "title": "个人使用",
-                "description": "个人非商业用途，如学习、个人项目或实验。"
-            },
-            "business": {
-                "title": "商业使用",
-                "description": "供组织、公司或商业或创收活动使用。"
-            }
-        },
-        "steps": {
-            "emailLicenseType": {
-                "title": "电子邮件和许可证类型",
-                "description": "输入您的电子邮件并选择您的许可证类型"
-            },
-            "personalInformation": {
-                "title": "个人信息",
-                "description": "告诉我们自己的信息"
-            },
-            "contactInformation": {
-                "title": "联系信息",
-                "description": "您的联系信息"
-            },
-            "termsGenerate": {
-                "title": "条款并生成",
-                "description": "审阅并接受条款生成您的许可证"
-            }
-        },
-        "alerts": {
-            "commercialUseDisclosure": {
-                "title": "使用情况披露",
-                "description": "选择能准确反映您预定用途的许可等级。 个人许可证允许对个人、非商业性或小型商业活动免费使用软件，年收入毛额不到100 000美元。 超出这些限度的任何用途，包括在企业、组织内的用途。 或其他创收环境——需要有效的企业许可证和支付适用的许可证费用。 所有用户，不论是个人还是企业，都必须遵守寄养商业许可证条款。"
-            },
-            "trialPeriodInformation": {
-                "title": "试用期信息",
-                "description": "此许可证密钥使企业特性能够持续7天的评价。 在评估期过后继续访问付费功能需要在有效的个人或企业许可证下激活。对于企业许可证，请联系Sales@pangolin.net。"
-            }
-        },
-        "form": {
-            "useCaseQuestion": "您是否正在使用 Pangolin 进行个人或商业使用？",
-            "firstName": "名字",
-            "lastName": "名字",
-            "jobTitle": "工作头衔：",
-            "primaryUseQuestion": "您主要计划使用 Pangolin 吗？",
-            "industryQuestion": "您的行业是什么？",
-            "prospectiveUsersQuestion": "您期望有多少预期用户？",
-            "prospectiveSitesQuestion": "您期望有多少站点(隧道)？",
-            "companyName": "公司名称",
-            "countryOfResidence": "居住国",
-            "stateProvinceRegion": "州/省/地区",
-            "postalZipCode": "邮政编码",
-            "companyWebsite": "公司网站",
-            "companyPhoneNumber": "公司电话号码",
-            "country": "国家",
-            "phoneNumberOptional": "电话号码 (可选)",
-            "complianceConfirmation": "我确认我提供的资料是准确的，我遵守了寄养商业许可证。 报告不准确的信息或错误的产品使用是违反许可证的行为，可能导致您的密钥被撤销。"
-        },
-        "buttons": {
-            "close": "关闭",
-            "previous": "上一个",
-            "next": "下一个",
-            "generateLicenseKey": "生成许可证密钥"
-        },
-        "toasts": {
-            "success": {
-                "title": "许可证密钥生成成功",
-                "description": "您的许可证密钥已经生成并准备使用。"
-            },
-            "error": {
-                "title": "生成许可证密钥失败",
-                "description": "生成许可证密钥时出错。"
-            }
-        }
-    },
-    "priority": "优先权",
-    "priorityDescription": "先评估更高优先级线路。优先级 = 100意味着自动排序(系统决定). 使用另一个数字强制执行手动优先级。",
-    "instanceName": "实例名称",
-    "pathMatchModalTitle": "配置路径匹配",
-    "pathMatchModalDescription": "根据传入请求的路径设置匹配方式。",
-    "pathMatchType": "匹配类型",
-    "pathMatchPrefix": "前缀",
-    "pathMatchExact": "精准的",
-    "pathMatchRegex": "正则表达式",
-    "pathMatchValue": "路径值",
-    "clear": "清空",
-    "saveChanges": "保存更改",
-    "pathMatchRegexPlaceholder": "^/api/.*",
-    "pathMatchDefaultPlaceholder": "/路径",
-    "pathMatchPrefixHelp": "示例： /api 匹配/api, /api/users 等。",
-    "pathMatchExactHelp": "示例：/api 匹配仅限/api",
-    "pathMatchRegexHelp": "例如：^/api/.* 匹配/api/why",
-    "pathRewriteModalTitle": "配置路径重写",
-    "pathRewriteModalDescription": "在转发到目标之前变换匹配的路径。",
-    "pathRewriteType": "重写类型",
-    "pathRewritePrefixOption": "前缀 - 替换前缀",
-    "pathRewriteExactOption": "精确-替换整个路径",
-    "pathRewriteRegexOption": "正则表达式 - 替换模式",
-    "pathRewriteStripPrefixOption": "删除前缀 - 删除前缀",
-    "pathRewriteValue": "重写值",
-    "pathRewriteRegexPlaceholder": "/new/$1",
-    "pathRewriteDefaultPlaceholder": "/new-path",
-    "pathRewritePrefixHelp": "用此值替换匹配的前缀",
-    "pathRewriteExactHelp": "当路径匹配时用此值替换整个路径",
-    "pathRewriteRegexHelp": "使用抓取组，如$1，$2来替换",
-    "pathRewriteStripPrefixHelp": "留空以脱离前缀或提供新的前缀",
-    "pathRewritePrefix": "前缀",
-    "pathRewriteExact": "精准的",
-    "pathRewriteRegex": "正则表达式",
-    "pathRewriteStrip": "带状图",
-    "pathRewriteStripLabel": "条形图",
-    "sidebarEnableEnterpriseLicense": "启用企业许可证",
-    "cannotbeUndone": "无法撤消。",
-    "toConfirm": "确认",
-    "deleteClientQuestion": "您确定要从站点和组织中删除客户吗？",
-    "clientMessageRemove": "一旦删除，客户端将无法连接到站点。"
+    "rewritePathDescription": "在转发到目标之前，可以选择重写路径。"
 }
--- a/package-lock.json
+++ b/package-lock.json
--- a/package.json
+++ b/package.json
@@ -19,21 +19,21 @@
        "db:sqlite:studio": "drizzle-kit studio --config=./drizzle.sqlite.config.ts",
        "db:pg:studio": "drizzle-kit studio --config=./drizzle.pg.config.ts",
        "db:clear-migrations": "rm -rf server/migrations",
-        "set:oss": "echo 'export const build = \"oss\" as any;' > server/build.ts && cp tsconfig.oss.json tsconfig.json",
-        "set:saas": "echo 'export const build = \"saas\" as any;' > server/build.ts && cp tsconfig.saas.json tsconfig.json",
-        "set:enterprise": "echo 'export const build = \"enterprise\" as any;' > server/build.ts && cp tsconfig.enterprise.json tsconfig.json",
+        "set:oss": "echo 'export const build = \"oss\" as any;' > server/build.ts",
+        "set:saas": "echo 'export const build = \"saas\" as any;' > server/build.ts",
+        "set:enterprise": "echo 'export const build = \"enterprise\" as any;' > server/build.ts",
        "set:sqlite": "echo 'export * from \"./sqlite\";' > server/db/index.ts",
        "set:pg": "echo 'export * from \"./pg\";' > server/db/index.ts",
-        "next:build": "next build",
        "build:sqlite": "mkdir -p dist && next build && node esbuild.mjs -e server/index.ts -o dist/server.mjs && node esbuild.mjs -e server/setup/migrationsSqlite.ts -o dist/migrations.mjs",
        "build:pg": "mkdir -p dist && next build && node esbuild.mjs -e server/index.ts -o dist/server.mjs && node esbuild.mjs -e server/setup/migrationsPg.ts -o dist/migrations.mjs",
        "start": "ENVIRONMENT=prod node dist/migrations.mjs && ENVIRONMENT=prod NODE_ENV=development node --enable-source-maps dist/server.mjs",
        "email": "email dev --dir server/emails/templates --port 3005",
-        "build:cli": "node esbuild.mjs -e cli/index.ts -o dist/cli.mjs"
+        "build:cli": "node esbuild.mjs -e cli/index.ts -o dist/cli.mjs",
+        "db:sqlite:seed-exit-node": "sqlite3 config/db/db.sqlite \"INSERT INTO exitNodes (exitNodeId, name, address, endpoint, publicKey, listenPort, reachableAt, maxConnections, online, lastPing, type, region) VALUES (null, 'test', '10.0.0.1/24', 'localhost', 'MJ44MpnWGxMZURgxW/fWXDFsejhabnEFYDo60LQwK3A=', 1234, 'http://localhost:3003', 123, 1, null, 'gerbil', null);\""
    },
    "dependencies": {
        "@asteasolutions/zod-to-openapi": "^7.3.4",
-        "@aws-sdk/client-s3": "3.908.0",
+        "@aws-sdk/client-s3": "3.837.0",
        "@hookform/resolvers": "5.2.2",
        "@node-rs/argon2": "^2.0.2",
        "@oslojs/crypto": "1.0.1",
@@ -56,11 +56,11 @@
        "@radix-ui/react-tabs": "1.1.13",
        "@radix-ui/react-toast": "1.2.15",
        "@radix-ui/react-tooltip": "^1.2.8",
-        "@react-email/components": "0.5.7",
-        "@react-email/render": "^1.3.2",
+        "@react-email/components": "0.5.5",
+        "@react-email/render": "^1.2.0",
        "@react-email/tailwind": "1.2.2",
-        "@simplewebauthn/browser": "^13.2.2",
-        "@simplewebauthn/server": "^13.2.2",
+        "@simplewebauthn/browser": "^13.2.0",
+        "@simplewebauthn/server": "^13.2.1",
        "@tailwindcss/forms": "^0.5.10",
        "@tanstack/react-table": "8.21.3",
        "arctic": "^3.7.0",
@@ -76,8 +76,8 @@
        "cors": "2.8.5",
        "crypto-js": "^4.2.0",
        "drizzle-orm": "0.44.6",
-        "eslint": "9.37.0",
-        "eslint-config-next": "15.5.6",
+        "eslint": "9.35.0",
+        "eslint-config-next": "15.5.4",
        "express": "5.1.0",
        "express-rate-limit": "8.1.0",
        "glob": "11.0.3",
@@ -85,40 +85,40 @@
        "http-errors": "2.0.0",
        "i": "^0.3.7",
        "input-otp": "1.4.2",
-        "ioredis": "5.8.1",
+        "ioredis": "5.6.1",
        "jmespath": "^0.16.0",
        "js-yaml": "4.1.0",
        "jsonwebtoken": "^9.0.2",
-        "lucide-react": "^0.545.0",
+        "lucide-react": "^0.544.0",
        "maxmind": "5.0.0",
        "moment": "2.30.1",
-        "next": "15.5.6",
-        "next-intl": "^4.3.12",
+        "next": "15.5.4",
+        "next-intl": "^4.3.9",
        "next-themes": "0.4.6",
        "node-cache": "5.1.2",
        "node-fetch": "3.3.2",
-        "nodemailer": "7.0.9",
-        "npm": "^11.6.2",
+        "nodemailer": "7.0.6",
+        "npm": "^11.6.1",
        "oslo": "1.2.1",
        "pg": "^8.16.2",
-        "posthog-node": "^5.9.5",
+        "posthog-node": "^5.8.4",
        "qrcode.react": "4.2.0",
-        "react": "19.2.0",
-        "react-dom": "19.2.0",
-        "react-easy-sort": "^1.8.0",
-        "react-hook-form": "7.65.0",
+        "react": "19.1.1",
+        "react-dom": "19.1.1",
+        "react-easy-sort": "^1.7.0",
+        "react-hook-form": "7.62.0",
        "react-icons": "^5.5.0",
        "rebuild": "0.1.2",
        "reodotdev": "^1.0.0",
-        "resend": "^6.1.2",
-        "semver": "^7.7.3",
+        "resend": "^6.1.1",
+        "semver": "^7.7.2",
        "stripe": "18.2.1",
        "swagger-ui-express": "^5.0.1",
        "tailwind-merge": "3.3.1",
        "tw-animate-css": "^1.3.8",
        "uuid": "^13.0.0",
        "vaul": "1.1.2",
-        "winston": "3.18.3",
+        "winston": "3.17.0",
        "winston-daily-rotate-file": "5.0.0",
        "ws": "8.18.3",
        "yargs": "18.0.0",
@@ -128,7 +128,7 @@
    "devDependencies": {
        "@dotenvx/dotenvx": "1.51.0",
        "@esbuild-plugins/tsconfig-paths": "0.1.2",
-        "@react-email/preview-server": "4.3.1",
+        "@react-email/preview-server": "4.1.0",
        "@tailwindcss/postcss": "^4.1.14",
        "@types/better-sqlite3": "7.6.12",
        "@types/cookie-parser": "1.4.9",
@@ -139,25 +139,25 @@
        "@types/jmespath": "^0.15.2",
        "@types/js-yaml": "4.0.9",
        "@types/jsonwebtoken": "^9.0.10",
-        "@types/node": "24.8.1",
+        "@types/node": "24.6.1",
        "@types/nodemailer": "7.0.2",
        "@types/pg": "8.15.5",
-        "@types/react": "19.2.2",
-        "@types/react-dom": "19.2.2",
+        "@types/react": "19.1.16",
+        "@types/react-dom": "19.1.9",
        "@types/semver": "^7.7.1",
        "@types/swagger-ui-express": "^4.1.8",
        "@types/ws": "8.18.1",
        "@types/yargs": "17.0.33",
        "drizzle-kit": "0.31.5",
-        "esbuild": "0.25.11",
+        "esbuild": "0.25.10",
        "esbuild-node-externals": "1.18.0",
        "postcss": "^8",
-        "react-email": "4.3.1",
+        "react-email": "4.2.12",
        "tailwindcss": "^4.1.4",
        "tsc-alias": "1.8.16",
        "tsx": "4.20.6",
        "typescript": "^5",
-        "typescript-eslint": "^8.46.0"
+        "typescript-eslint": "^8.45.0"
    },
    "overrides": {
        "emblor": {
--- a/public/logo/word_mark_black.png
+++ b/public/logo/word_mark_black.png
--- a/public/logo/word_mark_white.png
+++ b/public/logo/word_mark_white.png
--- a/server/apiServer.ts
+++ b/server/apiServer.ts
@@ -7,21 +7,21 @@ import {
    errorHandlerMiddleware,
    notFoundMiddleware
 } from "@server/middlewares";
-import { authenticated, unauthenticated } from "#dynamic/routers/external";
-import { router as wsRouter, handleWSUpgrade } from "#dynamic/routers/ws";
+import { corsWithLoginPageSupport } from "@server/middlewares/private/corsWithLoginPage";
+import { authenticated, unauthenticated } from "@server/routers/external";
+import { router as wsRouter, handleWSUpgrade } from "@server/routers/ws";
 import { logIncomingMiddleware } from "./middlewares/logIncoming";
 import { csrfProtectionMiddleware } from "./middlewares/csrfProtection";
 import helmet from "helmet";
+import { stripeWebhookHandler } from "@server/routers/private/billing/webhooks";
 import { build } from "./build";
 import rateLimit, { ipKeyGenerator } from "express-rate-limit";
 import createHttpError from "http-errors";
 import HttpCode from "./types/HttpCode";
 import requestTimeoutMiddleware from "./middlewares/requestTimeout";
-import { createStore } from "#dynamic/lib/rateLimitStore";
+import { createStore } from "@server/lib/private/rateLimitStore";
+import hybridRouter from "@server/routers/private/hybrid";
 import { stripDuplicateSesions } from "./middlewares/stripDuplicateSessions";
-import { corsWithLoginPageSupport } from "@server/lib/corsWithLoginPage";
-import { hybridRouter } from "#dynamic/routers/hybrid";
-import { billingWebhookHandler } from "#dynamic/routers/billing/webhooks";

 const dev = config.isDev;
 const externalPort = config.getRawConfig().server.external_port;
@@ -39,30 +39,32 @@ export function createApiServer() {
        apiServer.post(
            `${prefix}/billing/webhooks`,
            express.raw({ type: "application/json" }),
-            billingWebhookHandler
+            stripeWebhookHandler
        );
    }

    const corsConfig = config.getRawConfig().server.cors;
-    const options = {
-        ...(corsConfig?.origins
-            ? { origin: corsConfig.origins }
-            : {
-                  origin: (origin: any, callback: any) => {
-                      callback(null, true);
-                  }
-              }),
-        ...(corsConfig?.methods && { methods: corsConfig.methods }),
-        ...(corsConfig?.allowed_headers && {
-            allowedHeaders: corsConfig.allowed_headers
-        }),
-        credentials: !(corsConfig?.credentials === false)
-    };

-    if (build == "oss" || !corsConfig) {
+    if (build == "oss") {
+        const options = {
+            ...(corsConfig?.origins
+                ? { origin: corsConfig.origins }
+                : {
+                      origin: (origin: any, callback: any) => {
+                          callback(null, true);
+                      }
+                  }),
+            ...(corsConfig?.methods && { methods: corsConfig.methods }),
+            ...(corsConfig?.allowed_headers && {
+                allowedHeaders: corsConfig.allowed_headers
+            }),
+            credentials: !(corsConfig?.credentials === false)
+        };
+
        logger.debug("Using CORS options", options);
+
        apiServer.use(cors(options));
-    } else if (corsConfig) {
+    } else {
        // Use the custom CORS middleware with loginPage support
        apiServer.use(corsWithLoginPageSupport(corsConfig));
    }
--- a/server/auth/actions.ts
+++ b/server/auth/actions.ts
@@ -4,6 +4,7 @@ import { userActions, roleActions, userOrgs } from "@server/db";
 import { and, eq } from "drizzle-orm";
 import createHttpError from "http-errors";
 import HttpCode from "@server/types/HttpCode";
+import { sendUsageNotification } from "@server/routers/org";

 export enum ActionsEnum {
    createOrgUser = "createOrgUser",
@@ -60,7 +61,6 @@ export enum ActionsEnum {
    getUser = "getUser",
    setResourcePassword = "setResourcePassword",
    setResourcePincode = "setResourcePincode",
-    setResourceHeaderAuth = "setResourceHeaderAuth",
    setResourceWhitelist = "setResourceWhitelist",
    getResourceWhitelist = "getResourceWhitelist",
    generateAccessToken = "generateAccessToken",
@@ -194,6 +194,7 @@ export async function checkUserActionPermission(

        return roleActionPermission.length > 0;

+        return false;
    } catch (error) {
        console.error("Error checking user action permission:", error);
        throw createHttpError(
--- a/server/private/auth/sessions/remoteExitNode.ts
+++ b/server/private/auth/sessions/remoteExitNode.ts
--- a/server/auth/sessions/resource.ts
+++ b/server/auth/sessions/resource.ts
@@ -4,6 +4,9 @@ import { resourceSessions, ResourceSession } from "@server/db";
 import { db } from "@server/db";
 import { eq, and } from "drizzle-orm";
 import config from "@server/lib/config";
+import axios from "axios";
+import logger from "@server/logger";
+import { tokenManager } from "@server/lib/tokenManager";

 export const SESSION_COOKIE_NAME =
    config.getRawConfig().server.session_cookie_name;
@@ -62,6 +65,29 @@ export async function validateResourceSessionToken(
    token: string,
    resourceId: number
 ): Promise<ResourceSessionValidationResult> {
+    if (config.isManagedMode()) {
+        try {
+            const response = await axios.post(`${config.getRawConfig().managed?.endpoint}/api/v1/hybrid/resource/${resourceId}/session/validate`, {
+                token: token
+            }, await tokenManager.getAuthHeader());
+            return response.data.data;
+        } catch (error) {
+            if (axios.isAxiosError(error)) {
+                logger.error("Error validating resource session token in hybrid mode:", {
+                    message: error.message,
+                    code: error.code,
+                    status: error.response?.status,
+                    statusText: error.response?.statusText,
+                    url: error.config?.url,
+                    method: error.config?.method
+                });
+            } else {
+                logger.error("Error validating resource session token in hybrid mode:", error);
+            }
+            return { resourceSession: null };
+        }
+    }
+
    const sessionId = encodeHexLowerCase(
        sha256(new TextEncoder().encode(token))
    );
--- a/server/cleanup.ts
+++ b/server/cleanup.ts
@@ -1,13 +0,0 @@
-import { cleanup as wsCleanup } from "@server/routers/ws";
-
-async function cleanup() {
-    await wsCleanup();
-
-    process.exit(0);
-}
-
-export async function initCleanup() {
-    // Handle process termination
-    process.on("SIGTERM", () => cleanup());
-    process.on("SIGINT", () => cleanup());
-}
--- a/server/db/pg/driver.ts
+++ b/server/db/pg/driver.ts
@@ -38,9 +38,9 @@ function createDb() {
    const poolConfig = config.postgres.pool;
    const primaryPool = new Pool({
        connectionString,
-        max: poolConfig?.max_connections || 20,
-        idleTimeoutMillis: poolConfig?.idle_timeout_ms || 30000,
-        connectionTimeoutMillis: poolConfig?.connection_timeout_ms || 5000,
+        max: poolConfig.max_connections,
+        idleTimeoutMillis: poolConfig.idle_timeout_ms,
+        connectionTimeoutMillis: poolConfig.connection_timeout_ms,
    });

    const replicas = [];
@@ -51,9 +51,9 @@ function createDb() {
        for (const conn of replicaConnections) {
            const replicaPool = new Pool({
                connectionString: conn.connection_string,
-                max: poolConfig?.max_replica_connections || 20,
-                idleTimeoutMillis: poolConfig?.idle_timeout_ms || 30000,
-                connectionTimeoutMillis: poolConfig?.connection_timeout_ms || 5000,
+                max: poolConfig.max_replica_connections,
+                idleTimeoutMillis: poolConfig.idle_timeout_ms,
+                connectionTimeoutMillis: poolConfig.connection_timeout_ms,
            });
            replicas.push(DrizzlePostgres(replicaPool));
        }
--- a/server/db/pg/index.ts
+++ b/server/db/pg/index.ts
@@ -1,3 +1,3 @@
 export * from "./driver";
-export * from "./schema/schema";
-export * from "./schema/privateSchema";
+export * from "./schema";
+export * from "./privateSchema";
--- a/server/db/pg/schema/privateSchema.ts
+++ b/server/db/pg/schema/privateSchema.ts
@@ -1,3 +1,16 @@
+/*
+ * This file is part of a proprietary work.
+ *
+ * Copyright (c) 2025 Fossorial, Inc.
+ * All rights reserved.
+ *
+ * This file is licensed under the Fossorial Commercial License.
+ * You may not use this file except in compliance with the License.
+ * Unauthorized use, copying, modification, or distribution is strictly prohibited.
+ *
+ * This file is not licensed under the AGPLv3.
+ */
+
 import {
    pgTable,
    serial,
--- a/server/db/pg/schema/schema.ts
+++ b/server/db/pg/schema/schema.ts
@@ -125,8 +125,7 @@ export const targets = pgTable("targets", {
    path: text("path"),
    pathMatchType: text("pathMatchType"), // exact, prefix, regex
    rewritePath: text("rewritePath"), // if set, rewrites the path to this value before sending to the target
-    rewritePathType: text("rewritePathType"), // exact, prefix, regex, stripPrefix
-    priority: integer("priority").notNull().default(100)
+    rewritePathType: text("rewritePathType") // exact, prefix, regex, stripPrefix
 });

 export const targetHealthCheck = pgTable("targetHealthCheck", {
@@ -381,14 +380,6 @@ export const resourcePassword = pgTable("resourcePassword", {
    passwordHash: varchar("passwordHash").notNull()
 });

-export const resourceHeaderAuth = pgTable("resourceHeaderAuth", {
-    headerAuthId: serial("headerAuthId").primaryKey(),
-    resourceId: integer("resourceId")
-        .notNull()
-        .references(() => resources.resourceId, { onDelete: "cascade" }),
-    headerAuthHash: varchar("headerAuthHash").notNull()
-});
-
 export const resourceAccessToken = pgTable("resourceAccessToken", {
    accessTokenId: varchar("accessTokenId").primaryKey(),
    orgId: varchar("orgId")
@@ -698,7 +689,6 @@ export type UserOrg = InferSelectModel<typeof userOrgs>;
 export type ResourceSession = InferSelectModel<typeof resourceSessions>;
 export type ResourcePincode = InferSelectModel<typeof resourcePincode>;
 export type ResourcePassword = InferSelectModel<typeof resourcePassword>;
-export type ResourceHeaderAuth = InferSelectModel<typeof resourceHeaderAuth>;
 export type ResourceOtp = InferSelectModel<typeof resourceOtp>;
 export type ResourceAccessToken = InferSelectModel<typeof resourceAccessToken>;
 export type ResourceWhitelist = InferSelectModel<typeof resourceWhitelist>;
@@ -720,5 +710,4 @@ export type OrgDomains = InferSelectModel<typeof orgDomains>;
 export type SiteResource = InferSelectModel<typeof siteResources>;
 export type SetupToken = InferSelectModel<typeof setupTokens>;
 export type HostMeta = InferSelectModel<typeof hostMeta>;
-export type TargetHealthCheck = InferSelectModel<typeof targetHealthCheck>;
-export type IdpOidcConfig = InferSelectModel<typeof idpOidcConfig>;
+export type TargetHealthCheck = InferSelectModel<typeof targetHealthCheck>;
--- a/server/private/lib/rateLimit.test.ts
+++ b/server/private/lib/rateLimit.test.ts
--- a/server/private/lib/rateLimit.ts
+++ b/server/private/lib/rateLimit.ts
@@ -12,7 +12,7 @@
 */

 import logger from "@server/logger";
-import redisManager from "#private/lib/redis";
+import redisManager from "@server/db/private/redis";
 import { build } from "@server/build";

 // Rate limiting configuration
@@ -451,4 +451,8 @@ export class RateLimitService {
 }

 // Export singleton instance
-export const rateLimitService = new RateLimitService();
+export const rateLimitService = new RateLimitService();
+
+// Handle process termination
+process.on("SIGTERM", () => rateLimitService.cleanup());
+process.on("SIGINT", () => rateLimitService.cleanup());
--- a/server/private/lib/redis.ts
+++ b/server/private/lib/redis.ts
@@ -13,7 +13,7 @@

 import Redis, { RedisOptions } from "ioredis";
 import logger from "@server/logger";
-import privateConfig from "#private/lib/config";
+import config from "@server/lib/config";
 import { build } from "@server/build";

 class RedisManager {
@@ -46,7 +46,7 @@ class RedisManager {
            this.isEnabled = false;
            return;
        }
-        this.isEnabled = privateConfig.getRawPrivateConfig().flags.enable_redis || false;
+        this.isEnabled = config.getRawPrivateConfig().flags?.enable_redis || false;
        if (this.isEnabled) {
            this.initializeClients();
        }
@@ -93,7 +93,7 @@ class RedisManager {
    }

    private getRedisConfig(): RedisOptions {
-        const redisConfig = privateConfig.getRawPrivateConfig().redis!;
+        const redisConfig = config.getRawPrivateConfig().redis!;
        const opts: RedisOptions = {
            host: redisConfig.host!,
            port: redisConfig.port!,
@@ -108,7 +108,7 @@ class RedisManager {
    }

    private getReplicaRedisConfig(): RedisOptions | null {
-        const redisConfig = privateConfig.getRawPrivateConfig().redis!;
+        const redisConfig = config.getRawPrivateConfig().redis!;
        if (!redisConfig.replicas || redisConfig.replicas.length === 0) {
            return null;
        }
--- a/server/private/lib/redisStore.ts
+++ b/server/private/lib/redisStore.ts
--- a/server/db/queries/verifySessionQueries.ts
+++ b/server/db/queries/verifySessionQueries.ts
@@ -6,8 +6,6 @@ import {
    ResourceRule,
    resourcePassword,
    resourcePincode,
-    resourceHeaderAuth,
-    ResourceHeaderAuth,
    resourceRules,
    resources,
    roleResources,
@@ -17,12 +15,15 @@ import {
    users
 } from "@server/db";
 import { and, eq } from "drizzle-orm";
+import axios from "axios";
+import config from "@server/lib/config";
+import logger from "@server/logger";
+import { tokenManager } from "@server/lib/tokenManager";

 export type ResourceWithAuth = {
    resource: Resource | null;
    pincode: ResourcePincode | null;
    password: ResourcePassword | null;
-    headerAuth: ResourceHeaderAuth | null;
 };

 export type UserSessionWithUser = {
@@ -36,6 +37,30 @@ export type UserSessionWithUser = {
 export async function getResourceByDomain(
    domain: string
 ): Promise<ResourceWithAuth | null> {
+    if (config.isManagedMode()) {
+        try {
+            const response = await axios.get(
+                `${config.getRawConfig().managed?.endpoint}/api/v1/hybrid/resource/domain/${domain}`,
+                await tokenManager.getAuthHeader()
+            );
+            return response.data.data;
+        } catch (error) {
+            if (axios.isAxiosError(error)) {
+                logger.error("Error fetching config in verify session:", {
+                    message: error.message,
+                    code: error.code,
+                    status: error.response?.status,
+                    statusText: error.response?.statusText,
+                    url: error.config?.url,
+                    method: error.config?.method
+                });
+            } else {
+                logger.error("Error fetching config in verify session:", error);
+            }
+            return null;
+        }
+    }
+
    const [result] = await db
        .select()
        .from(resources)
@@ -47,10 +72,6 @@ export async function getResourceByDomain(
            resourcePassword,
            eq(resourcePassword.resourceId, resources.resourceId)
        )
-        .leftJoin(
-            resourceHeaderAuth,
-            eq(resourceHeaderAuth.resourceId, resources.resourceId)
-        )
        .where(eq(resources.fullDomain, domain))
        .limit(1);

@@ -61,8 +82,7 @@ export async function getResourceByDomain(
    return {
        resource: result.resources,
        pincode: result.resourcePincode,
-        password: result.resourcePassword,
-        headerAuth: result.resourceHeaderAuth
+        password: result.resourcePassword
    };
 }

@@ -72,6 +92,30 @@ export async function getResourceByDomain(
 export async function getUserSessionWithUser(
    userSessionId: string
 ): Promise<UserSessionWithUser | null> {
+    if (config.isManagedMode()) {
+        try {
+            const response = await axios.get(
+                `${config.getRawConfig().managed?.endpoint}/api/v1/hybrid/session/${userSessionId}`,
+                await tokenManager.getAuthHeader()
+            );
+            return response.data.data;
+        } catch (error) {
+            if (axios.isAxiosError(error)) {
+                logger.error("Error fetching config in verify session:", {
+                    message: error.message,
+                    code: error.code,
+                    status: error.response?.status,
+                    statusText: error.response?.statusText,
+                    url: error.config?.url,
+                    method: error.config?.method
+                });
+            } else {
+                logger.error("Error fetching config in verify session:", error);
+            }
+            return null;
+        }
+    }
+
    const [res] = await db
        .select()
        .from(sessions)
@@ -92,6 +136,30 @@ export async function getUserSessionWithUser(
 * Get user organization role
 */
 export async function getUserOrgRole(userId: string, orgId: string) {
+    if (config.isManagedMode()) {
+        try {
+            const response = await axios.get(
+                `${config.getRawConfig().managed?.endpoint}/api/v1/hybrid/user/${userId}/org/${orgId}/role`,
+                await tokenManager.getAuthHeader()
+            );
+            return response.data.data;
+        } catch (error) {
+            if (axios.isAxiosError(error)) {
+                logger.error("Error fetching config in verify session:", {
+                    message: error.message,
+                    code: error.code,
+                    status: error.response?.status,
+                    statusText: error.response?.statusText,
+                    url: error.config?.url,
+                    method: error.config?.method
+                });
+            } else {
+                logger.error("Error fetching config in verify session:", error);
+            }
+            return null;
+        }
+    }
+
    const userOrgRole = await db
        .select()
        .from(userOrgs)
@@ -108,6 +176,30 @@ export async function getRoleResourceAccess(
    resourceId: number,
    roleId: number
 ) {
+    if (config.isManagedMode()) {
+        try {
+            const response = await axios.get(
+                `${config.getRawConfig().managed?.endpoint}/api/v1/hybrid/role/${roleId}/resource/${resourceId}/access`,
+                await tokenManager.getAuthHeader()
+            );
+            return response.data.data;
+        } catch (error) {
+            if (axios.isAxiosError(error)) {
+                logger.error("Error fetching config in verify session:", {
+                    message: error.message,
+                    code: error.code,
+                    status: error.response?.status,
+                    statusText: error.response?.statusText,
+                    url: error.config?.url,
+                    method: error.config?.method
+                });
+            } else {
+                logger.error("Error fetching config in verify session:", error);
+            }
+            return null;
+        }
+    }
+
    const roleResourceAccess = await db
        .select()
        .from(roleResources)
@@ -129,6 +221,30 @@ export async function getUserResourceAccess(
    userId: string,
    resourceId: number
 ) {
+    if (config.isManagedMode()) {
+        try {
+            const response = await axios.get(
+                `${config.getRawConfig().managed?.endpoint}/api/v1/hybrid/user/${userId}/resource/${resourceId}/access`,
+                await tokenManager.getAuthHeader()
+            );
+            return response.data.data;
+        } catch (error) {
+            if (axios.isAxiosError(error)) {
+                logger.error("Error fetching config in verify session:", {
+                    message: error.message,
+                    code: error.code,
+                    status: error.response?.status,
+                    statusText: error.response?.statusText,
+                    url: error.config?.url,
+                    method: error.config?.method
+                });
+            } else {
+                logger.error("Error fetching config in verify session:", error);
+            }
+            return null;
+        }
+    }
+
    const userResourceAccess = await db
        .select()
        .from(userResources)
@@ -149,6 +265,30 @@ export async function getUserResourceAccess(
 export async function getResourceRules(
    resourceId: number
 ): Promise<ResourceRule[]> {
+    if (config.isManagedMode()) {
+        try {
+            const response = await axios.get(
+                `${config.getRawConfig().managed?.endpoint}/api/v1/hybrid/resource/${resourceId}/rules`,
+                await tokenManager.getAuthHeader()
+            );
+            return response.data.data;
+        } catch (error) {
+            if (axios.isAxiosError(error)) {
+                logger.error("Error fetching config in verify session:", {
+                    message: error.message,
+                    code: error.code,
+                    status: error.response?.status,
+                    statusText: error.response?.statusText,
+                    url: error.config?.url,
+                    method: error.config?.method
+                });
+            } else {
+                logger.error("Error fetching config in verify session:", error);
+            }
+            return [];
+        }
+    }
+
    const rules = await db
        .select()
        .from(resourceRules)
@@ -163,6 +303,30 @@ export async function getResourceRules(
 export async function getOrgLoginPage(
    orgId: string
 ): Promise<LoginPage | null> {
+    if (config.isManagedMode()) {
+        try {
+            const response = await axios.get(
+                `${config.getRawConfig().managed?.endpoint}/api/v1/hybrid/org/${orgId}/login-page`,
+                await tokenManager.getAuthHeader()
+            );
+            return response.data.data;
+        } catch (error) {
+            if (axios.isAxiosError(error)) {
+                logger.error("Error fetching config in verify session:", {
+                    message: error.message,
+                    code: error.code,
+                    status: error.response?.status,
+                    statusText: error.response?.statusText,
+                    url: error.config?.url,
+                    method: error.config?.method
+                });
+            } else {
+                logger.error("Error fetching config in verify session:", error);
+            }
+            return null;
+        }
+    }
+
    const [result] = await db
        .select()
        .from(loginPageOrg)
--- a/server/db/sqlite/driver.ts
+++ b/server/db/sqlite/driver.ts
@@ -1,6 +1,6 @@
 import { drizzle as DrizzleSqlite } from "drizzle-orm/better-sqlite3";
 import Database from "better-sqlite3";
-import * as schema from "./schema/schema";
+import * as schema from "./schema";
 import path from "path";
 import fs from "fs";
 import { APP_PATH } from "@server/lib/consts";
--- a/server/db/sqlite/index.ts
+++ b/server/db/sqlite/index.ts
@@ -1,3 +1,3 @@
 export * from "./driver";
-export * from "./schema/schema";
-export * from "./schema/privateSchema";
+export * from "./schema";
+export * from "./privateSchema";
--- a/server/db/sqlite/schema/privateSchema.ts
+++ b/server/db/sqlite/schema/privateSchema.ts
@@ -1,3 +1,16 @@
+/*
+ * This file is part of a proprietary work.
+ *
+ * Copyright (c) 2025 Fossorial, Inc.
+ * All rights reserved.
+ *
+ * This file is licensed under the Fossorial Commercial License.
+ * You may not use this file except in compliance with the License.
+ * Unauthorized use, copying, modification, or distribution is strictly prohibited.
+ *
+ * This file is not licensed under the AGPLv3.
+ */
+
 import {
    sqliteTable,
    integer,
--- a/server/db/sqlite/schema/schema.ts
+++ b/server/db/sqlite/schema/schema.ts
@@ -137,8 +137,7 @@ export const targets = sqliteTable("targets", {
    path: text("path"),
    pathMatchType: text("pathMatchType"), // exact, prefix, regex
    rewritePath: text("rewritePath"), // if set, rewrites the path to this value before sending to the target
-    rewritePathType: text("rewritePathType"), // exact, prefix, regex, stripPrefix
-    priority: integer("priority").notNull().default(100)
+    rewritePathType: text("rewritePathType") // exact, prefix, regex, stripPrefix
 });

 export const targetHealthCheck = sqliteTable("targetHealthCheck", {
@@ -514,16 +513,6 @@ export const resourcePassword = sqliteTable("resourcePassword", {
    passwordHash: text("passwordHash").notNull()
 });

-export const resourceHeaderAuth = sqliteTable("resourceHeaderAuth", {
-    headerAuthId: integer("headerAuthId").primaryKey({
-        autoIncrement: true
-    }),
-    resourceId: integer("resourceId")
-        .notNull()
-        .references(() => resources.resourceId, { onDelete: "cascade" }),
-    headerAuthHash: text("headerAuthHash").notNull()
-});
-
 export const resourceAccessToken = sqliteTable("resourceAccessToken", {
    accessTokenId: text("accessTokenId").primaryKey(),
    orgId: text("orgId")
@@ -739,7 +728,6 @@ export type UserOrg = InferSelectModel<typeof userOrgs>;
 export type ResourceSession = InferSelectModel<typeof resourceSessions>;
 export type ResourcePincode = InferSelectModel<typeof resourcePincode>;
 export type ResourcePassword = InferSelectModel<typeof resourcePassword>;
-export type ResourceHeaderAuth = InferSelectModel<typeof resourceHeaderAuth>;
 export type ResourceOtp = InferSelectModel<typeof resourceOtp>;
 export type ResourceAccessToken = InferSelectModel<typeof resourceAccessToken>;
 export type ResourceWhitelist = InferSelectModel<typeof resourceWhitelist>;
@@ -759,5 +747,4 @@ export type SiteResource = InferSelectModel<typeof siteResources>;
 export type OrgDomains = InferSelectModel<typeof orgDomains>;
 export type SetupToken = InferSelectModel<typeof setupTokens>;
 export type HostMeta = InferSelectModel<typeof hostMeta>;
-export type TargetHealthCheck = InferSelectModel<typeof targetHealthCheck>;
-export type IdpOidcConfig = InferSelectModel<typeof idpOidcConfig>;
+export type TargetHealthCheck = InferSelectModel<typeof targetHealthCheck>;
--- a/server/emails/index.ts
+++ b/server/emails/index.ts
@@ -6,6 +6,11 @@ import logger from "@server/logger";
 import SMTPTransport from "nodemailer/lib/smtp-transport";

 function createEmailClient() {
+    if (config.isManagedMode()) {
+        // LETS NOT WORRY ABOUT EMAILS IN HYBRID 
+        return;
+    }
+
    const emailConfig = config.getRawConfig().email;
    if (!emailConfig) {
        logger.warn(
--- a/server/emails/sendEmail.ts
+++ b/server/emails/sendEmail.ts
@@ -2,6 +2,7 @@ import { render } from "@react-email/render";
 import { ReactElement } from "react";
 import emailClient from "@server/emails";
 import logger from "@server/logger";
+import config from "@server/lib/config";

 export async function sendEmail(
    template: ReactElement,
@@ -24,7 +25,7 @@ export async function sendEmail(

    const emailHtml = await render(template);

-    const appName = process.env.BRANDING_APP_NAME || "Pangolin"; // From the private config loading into env vars to seperate away the private config
+    const appName = config.getRawPrivateConfig().branding?.app_name || "Pangolin";

    await emailClient.sendMail({
        from: {
--- a/server/emails/templates/PrivateNotifyUsageLimitApproaching.tsx
+++ b/server/emails/templates/PrivateNotifyUsageLimitApproaching.tsx
@@ -1,3 +1,16 @@
+/*
+ * This file is part of a proprietary work.
+ *
+ * Copyright (c) 2025 Fossorial, Inc.
+ * All rights reserved.
+ *
+ * This file is licensed under the Fossorial Commercial License.
+ * You may not use this file except in compliance with the License.
+ * Unauthorized use, copying, modification, or distribution is strictly prohibited.
+ *
+ * This file is not licensed under the AGPLv3.
+ */
+
 import React from "react";
 import { Body, Head, Html, Preview, Tailwind } from "@react-email/components";
 import { themeColors } from "./lib/theme";
--- a/server/emails/templates/PrivateNotifyUsageLimitReached.tsx
+++ b/server/emails/templates/PrivateNotifyUsageLimitReached.tsx
@@ -1,3 +1,16 @@
+/*
+ * This file is part of a proprietary work.
+ *
+ * Copyright (c) 2025 Fossorial, Inc.
+ * All rights reserved.
+ *
+ * This file is licensed under the Fossorial Commercial License.
+ * You may not use this file except in compliance with the License.
+ * Unauthorized use, copying, modification, or distribution is strictly prohibited.
+ *
+ * This file is not licensed under the AGPLv3.
+ */
+
 import React from "react";
 import { Body, Head, Html, Preview, Tailwind } from "@react-email/components";
 import { themeColors } from "./lib/theme";
--- a/server/emails/templates/WelcomeQuickStart.tsx
+++ b/server/emails/templates/WelcomeQuickStart.tsx
@@ -88,7 +88,7 @@ export const WelcomeQuickStart = ({
                                    To learn how to use Newt, including more
                                    installation methods, visit the{" "}
                                    <a
-                                        href="https://docs.pangolin.net/manage/sites/install-site"
+                                        href="https://docs.digpangolin.com/manage/sites/install-site"
                                        className="underline"
                                    >
                                        docs
--- a/server/emails/templates/components/Email.tsx
+++ b/server/emails/templates/components/Email.tsx
@@ -89,7 +89,7 @@ export function EmailFooter({ children }: { children: React.ReactNode }) {
                    <p className="text-xs text-gray-400 mt-4">
                        For any questions or support, please contact us at:
                        <br />
-                        support@pangolin.net
+                        support@fossorial.io
                    </p>
                    <p className="text-xs text-gray-300 text-center mt-4">
                        &copy; {new Date().getFullYear()} Fossorial, Inc. All
--- a/server/hybridServer.ts
+++ b/server/hybridServer.ts
@@ -0,0 +1,151 @@
+import logger from "@server/logger";
+import config from "@server/lib/config";
+import { createWebSocketClient } from "./routers/ws/client";
+import { addPeer, deletePeer } from "./routers/gerbil/peers";
+import { db, exitNodes } from "./db";
+import { TraefikConfigManager } from "./lib/traefik/TraefikConfigManager";
+import { tokenManager } from "./lib/tokenManager";
+import { APP_VERSION } from "./lib/consts";
+import axios from "axios";
+
+export async function createHybridClientServer() {
+    logger.info("Starting hybrid client server...");
+
+    // Start the token manager
+    await tokenManager.start();
+
+    const token = await tokenManager.getToken();
+
+    const monitor = new TraefikConfigManager();
+
+    await monitor.start();
+
+    // Create client
+    const client = createWebSocketClient(
+        token,
+        config.getRawConfig().managed!.endpoint!,
+        {
+            reconnectInterval: 5000,
+            pingInterval: 30000,
+            pingTimeout: 10000
+        }
+    );
+
+    // Register message handlers
+    client.registerHandler("remoteExitNode/peers/add", async (message) => {
+        const { publicKey, allowedIps } = message.data;
+
+        // TODO: we are getting the exit node twice here
+        // NOTE: there should only be one gerbil registered so...
+        const [exitNode] = await db.select().from(exitNodes).limit(1);
+        await addPeer(exitNode.exitNodeId, {
+            publicKey: publicKey,
+            allowedIps: allowedIps || []
+        });
+    });
+
+    client.registerHandler("remoteExitNode/peers/remove", async (message) => {
+        const { publicKey } = message.data;
+
+        // TODO: we are getting the exit node twice here
+        // NOTE: there should only be one gerbil registered so...
+        const [exitNode] = await db.select().from(exitNodes).limit(1);
+        await deletePeer(exitNode.exitNodeId, publicKey);
+    });
+
+    // /update-proxy-mapping
+    client.registerHandler("remoteExitNode/update-proxy-mapping", async (message) => {
+        try {
+            const [exitNode] = await db.select().from(exitNodes).limit(1);
+            if (!exitNode) {
+                logger.error("No exit node found for proxy mapping update");
+                return;
+            }
+
+            const response = await axios.post(`${exitNode.endpoint}/update-proxy-mapping`, message.data);
+            logger.info(`Successfully updated proxy mapping: ${response.status}`);
+        } catch (error) {
+            // pull data out of the axios error to log
+            if (axios.isAxiosError(error)) {
+                logger.error("Error updating proxy mapping:", {
+                    message: error.message,
+                    code: error.code,
+                    status: error.response?.status,
+                    statusText: error.response?.statusText,
+                    url: error.config?.url,
+                    method: error.config?.method
+                });
+            } else {
+                logger.error("Error updating proxy mapping:", error);
+            }
+        }
+    });
+
+    // /update-destinations
+    client.registerHandler("remoteExitNode/update-destinations", async (message) => {
+        try {
+            const [exitNode] = await db.select().from(exitNodes).limit(1);
+            if (!exitNode) {
+                logger.error("No exit node found for destinations update");
+                return;
+            }
+
+            const response = await axios.post(`${exitNode.endpoint}/update-destinations`, message.data);
+            logger.info(`Successfully updated destinations: ${response.status}`);
+        } catch (error) {
+            // pull data out of the axios error to log
+            if (axios.isAxiosError(error)) {
+                logger.error("Error updating destinations:", {
+                    message: error.message,
+                    code: error.code,
+                    status: error.response?.status,
+                    statusText: error.response?.statusText,
+                    url: error.config?.url,
+                    method: error.config?.method
+                });
+            } else {
+                logger.error("Error updating destinations:", error);
+            }
+        }
+    });
+
+    client.registerHandler("remoteExitNode/traefik/reload", async (message) => {
+        await monitor.HandleTraefikConfig();
+    });
+
+    // Listen to connection events
+    client.on("connect", () => {
+        logger.info("Connected to WebSocket server");
+        client.sendMessage("remoteExitNode/register", {
+            remoteExitNodeVersion: APP_VERSION
+        });
+    });
+
+    client.on("disconnect", () => {
+        logger.info("Disconnected from WebSocket server");
+    });
+
+    client.on("message", (message) => {
+        logger.info(
+            `Received message: ${message.type} ${JSON.stringify(message.data)}`
+        );
+    });
+
+    // Connect to the server
+    try {
+        await client.connect();
+        logger.info("Connection initiated");
+    } catch (error) {
+        logger.error("Failed to connect:", error);
+    }
+
+    // Store the ping interval stop function for cleanup if needed
+    const stopPingInterval = client.sendMessageInterval(
+        "remoteExitNode/ping",
+        { timestamp: Date.now() / 1000 },
+        60000
+    ); // send every minute
+
+    // Return client and cleanup function for potential use
+    return { client, stopPingInterval };
+}
--- a/server/index.ts
+++ b/server/index.ts
@@ -5,30 +5,18 @@ import { runSetupFunctions } from "./setup";
 import { createApiServer } from "./apiServer";
 import { createNextServer } from "./nextServer";
 import { createInternalServer } from "./internalServer";
-import {
-    ApiKey,
-    ApiKeyOrg,
-    RemoteExitNode,
-    Session,
-    User,
-    UserOrg
-} from "@server/db";
+import { ApiKey, ApiKeyOrg, RemoteExitNode, Session, User, UserOrg } from "@server/db";
 import { createIntegrationApiServer } from "./integrationApiServer";
+import { createHybridClientServer } from "./hybridServer";
 import config from "@server/lib/config";
 import { setHostMeta } from "@server/lib/hostMeta";
 import { initTelemetryClient } from "./lib/telemetry.js";
 import { TraefikConfigManager } from "./lib/traefik/TraefikConfigManager.js";
-import { initCleanup } from "#dynamic/cleanup";
-import license from "#dynamic/license/license";

 async function startServers() {
    await setHostMeta();

    await config.initServer();
-
-    license.setServerSecret(config.getRawConfig().server.secret!);
-    await license.check();
-
    await runSetupFunctions();

    initTelemetryClient();
@@ -37,11 +25,16 @@ async function startServers() {
    const apiServer = createApiServer();
    const internalServer = createInternalServer();

+    let hybridClientServer;
    let nextServer;
-    nextServer = await createNextServer();
-    if (config.getRawConfig().traefik.file_mode) {
-        const monitor = new TraefikConfigManager();
-        await monitor.start();
+    if (config.isManagedMode()) {
+        hybridClientServer = await createHybridClientServer();
+    } else {
+        nextServer = await createNextServer();
+        if (config.getRawConfig().traefik.file_mode) {
+            const monitor = new TraefikConfigManager();
+            await monitor.start();
+        }
    }

    let integrationServer;
@@ -49,13 +42,12 @@ async function startServers() {
        integrationServer = createIntegrationApiServer();
    }

-    await initCleanup();
-
    return {
        apiServer,
        nextServer,
        internalServer,
-        integrationServer
+        integrationServer,
+        hybridClientServer
    };
 }

--- a/server/integrationApiServer.ts
+++ b/server/integrationApiServer.ts
@@ -7,7 +7,7 @@ import {
    errorHandlerMiddleware,
    notFoundMiddleware,
 } from "@server/middlewares";
-import { authenticated, unauthenticated } from "#dynamic/routers/integration";
+import { authenticated, unauthenticated } from "@server/routers/integration";
 import { logIncomingMiddleware } from "./middlewares/logIncoming";
 import helmet from "helmet";
 import swaggerUi from "swagger-ui-express";
--- a/server/internalServer.ts
+++ b/server/internalServer.ts
@@ -8,7 +8,7 @@ import {
    errorHandlerMiddleware,
    notFoundMiddleware
 } from "@server/middlewares";
-import { internalRouter } from "#dynamic/routers/internal";
+import internal from "@server/routers/internal";
 import { stripDuplicateSesions } from "./middlewares/stripDuplicateSessions";

 const internalPort = config.getRawConfig().server.internal_port;
@@ -23,7 +23,7 @@ export function createInternalServer() {
    internalServer.use(express.json());

    const prefix = `/api/v1`;
-    internalServer.use(prefix, internalRouter);
+    internalServer.use(prefix, internal);

    internalServer.use(notFoundMiddleware);
    internalServer.use(errorHandlerMiddleware);
--- a/server/lib/billing/createCustomer.ts
+++ b/server/lib/billing/createCustomer.ts
@@ -1,6 +0,0 @@
-export async function createCustomer(
-    orgId: string,
-    email: string | null | undefined
-): Promise<string | undefined> {
-    return;
-}
--- a/server/lib/billing/getOrgTierData.ts
+++ b/server/lib/billing/getOrgTierData.ts
@@ -1,8 +0,0 @@
-export async function getOrgTierData(
-    orgId: string
-): Promise<{ tier: string | null; active: boolean }> {
-    let tier = null;
-    let active = false;
-
-    return { tier, active };
-}
--- a/server/lib/billing/index.ts
+++ b/server/lib/billing/index.ts
@@ -1,5 +0,0 @@
-export * from "./limitSet";
-export * from "./features";
-export * from "./limitsService";
-export * from "./getOrgTierData";
-export * from "./createCustomer";
--- a/server/lib/blueprints/applyBlueprint.ts
+++ b/server/lib/blueprints/applyBlueprint.ts
@@ -139,8 +139,8 @@ export async function applyBlueprint(
 //                 password: "sadfasdfadsf",
 //                 "sso-enabled": true,
 //                 "sso-roles": ["Member"],
-//                 "sso-users": ["owen@pangolin.net"],
-//                 "whitelist-users": ["owen@pangolin.net"]
+//                 "sso-users": ["owen@fossorial.io"],
+//                 "whitelist-users": ["owen@fossorial.io"]
 //             },
 //             targets: [
 //                 {
--- a/server/lib/blueprints/applyNewtDockerBlueprint.ts
+++ b/server/lib/blueprints/applyNewtDockerBlueprint.ts
@@ -1,4 +1,4 @@
-import { sendToClient } from "#dynamic/routers/ws";
+import { sendToClient } from "@server/routers/ws";
 import { processContainerLabels } from "./parseDockerContainers";
 import { applyBlueprint } from "./applyBlueprint";
 import { db, sites } from "@server/db";
--- a/server/lib/blueprints/parseDotNotation.ts
+++ b/server/lib/blueprints/parseDotNotation.ts
@@ -87,8 +87,8 @@ export function convertValue(value: string): any {
 //     "resources.resource-nice-id.auth.password": "sadfasdfadsf",
 //     "resources.resource-nice-id.auth.sso-enabled": "true",
 //     "resources.resource-nice-id.auth.sso-roles[0]": "Member",
-//     "resources.resource-nice-id.auth.sso-users[0]": "owen@pangolin.net",
-//     "resources.resource-nice-id.auth.whitelist-users[0]": "owen@pangolin.net",
+//     "resources.resource-nice-id.auth.sso-users[0]": "owen@fossorial.io",
+//     "resources.resource-nice-id.auth.whitelist-users[0]": "owen@fossorial.io",
 //     "resources.resource-nice-id.targets[0].hostname": "localhost",
 //     "resources.resource-nice-id.targets[0].method": "http",
 //     "resources.resource-nice-id.targets[0].port": "8000",
--- a/server/lib/blueprints/proxyResources.ts
+++ b/server/lib/blueprints/proxyResources.ts
@@ -2,7 +2,6 @@ import {
    domains,
    orgDomains,
    Resource,
-    resourceHeaderAuth,
    resourcePincode,
    resourceRules,
    resourceWhitelist,
@@ -25,7 +24,7 @@ import {
    TargetData
 } from "./types";
 import logger from "@server/logger";
-import { createCertificate } from "#dynamic/routers/certificates/createCertificate";
+import { createCertificate } from "@server/routers/private/certificates/createCertificate";
 import { pickPort } from "@server/routers/target/helpers";
 import { resourcePassword } from "@server/db";
 import { hashPassword } from "@server/auth/password";
@@ -115,8 +114,7 @@ export async function updateProxyResources(
                    path: targetData.path,
                    pathMatchType: targetData["path-match"],
                    rewritePath: targetData.rewritePath,
-                    rewritePathType: targetData["rewrite-match"],
-                    priority: targetData.priority
+                    rewritePathType: targetData["rewrite-match"]
                })
                .returning();

@@ -124,9 +122,7 @@ export async function updateProxyResources(

            const healthcheckData = targetData.healthcheck;

-            const hcHeaders = healthcheckData?.headers
-                ? JSON.stringify(healthcheckData.headers)
-                : null;
+            const hcHeaders = healthcheckData?.headers ? JSON.stringify(healthcheckData.headers) : null;

            const [newHealthcheck] = await trx
                .insert(targetHealthCheck)
@@ -267,32 +263,6 @@ export async function updateProxyResources(
                    });
                }

-                await trx
-                    .delete(resourceHeaderAuth)
-                    .where(
-                        eq(
-                            resourceHeaderAuth.resourceId,
-                            existingResource.resourceId
-                        )
-                    );
-                if (resourceData.auth?.["basic-auth"]) {
-                    const headerAuthUser =
-                        resourceData.auth?.["basic-auth"]?.user;
-                    const headerAuthPassword =
-                        resourceData.auth?.["basic-auth"]?.password;
-                    if (headerAuthUser && headerAuthPassword) {
-                        const headerAuthHash = await hashPassword(
-                            Buffer.from(
-                                `${headerAuthUser}:${headerAuthPassword}`
-                            ).toString("base64")
-                        );
-                        await trx.insert(resourceHeaderAuth).values({
-                            resourceId: existingResource.resourceId,
-                            headerAuthHash
-                        });
-                    }
-                }
-
                if (resourceData.auth?.["sso-roles"]) {
                    const ssoRoles = resourceData.auth?.["sso-roles"];
                    await syncRoleResources(
@@ -393,8 +363,7 @@ export async function updateProxyResources(
                            path: targetData.path,
                            pathMatchType: targetData["path-match"],
                            rewritePath: targetData.rewritePath,
-                            rewritePathType: targetData["rewrite-match"],
-                            priority: targetData.priority
+                            rewritePathType: targetData["rewrite-match"]
                        })
                        .where(eq(targets.targetId, existingTarget.targetId))
                        .returning();
@@ -437,9 +406,7 @@ export async function updateProxyResources(
                        )
                        .limit(1);

-                    const hcHeaders = healthcheckData?.headers
-                        ? JSON.stringify(healthcheckData.headers)
-                        : null;
+                    const hcHeaders = healthcheckData?.headers ? JSON.stringify(healthcheckData.headers) : null;

                    const [newHealthcheck] = await trx
                        .update(targetHealthCheck)
@@ -624,25 +591,6 @@ export async function updateProxyResources(
                });
            }

-            if (resourceData.auth?.["basic-auth"]) {
-                const headerAuthUser = resourceData.auth?.["basic-auth"]?.user;
-                const headerAuthPassword =
-                    resourceData.auth?.["basic-auth"]?.password;
-
-                if (headerAuthUser && headerAuthPassword) {
-                    const headerAuthHash = await hashPassword(
-                        Buffer.from(
-                            `${headerAuthUser}:${headerAuthPassword}`
-                        ).toString("base64")
-                    );
-
-                    await trx.insert(resourceHeaderAuth).values({
-                        resourceId: newResource.resourceId,
-                        headerAuthHash
-                    });
-                }
-            }
-
            resource = newResource;

            const [adminRole] = await trx
--- a/server/lib/blueprints/types.ts
+++ b/server/lib/blueprints/types.ts
@@ -33,8 +33,7 @@ export const TargetSchema = z.object({
    "path-match": z.enum(["exact", "prefix", "regex"]).optional().nullable(),
    healthcheck: TargetHealthCheckSchema.optional(),
    rewritePath: z.string().optional(),
-    "rewrite-match": z.enum(["exact", "prefix", "regex", "stripPrefix"]).optional().nullable(),
-    priority: z.number().int().min(1).max(1000).optional().default(100)
+    "rewrite-match": z.enum(["exact", "prefix", "regex", "stripPrefix"]).optional().nullable()
 });
 export type TargetData = z.infer<typeof TargetSchema>;

@@ -42,10 +41,6 @@ export const AuthSchema = z.object({
    // pincode has to have 6 digits
    pincode: z.number().min(100000).max(999999).optional(),
    password: z.string().min(1).optional(),
-    "basic-auth": z.object({
-        user: z.string().min(1),
-        password: z.string().min(1)
-    }).optional(),
    "sso-enabled": z.boolean().optional().default(false),
    "sso-roles": z
        .array(z.string())
--- a/server/lib/certificates.ts
+++ b/server/lib/certificates.ts
@@ -1,13 +0,0 @@
-export async function getValidCertificatesForDomains(domains: Set<string>): Promise<
-    Array<{
-        id: number;
-        domain: string;
-        wildcard: boolean | null;
-        certFile: string | null;
-        keyFile: string | null;
-        expiresAt: number | null;
-        updatedAt?: number | null;
-    }>
-> {
-    return []; // stub
-}
--- a/server/lib/config.ts
+++ b/server/lib/config.ts
@@ -3,12 +3,19 @@ import { __DIRNAME, APP_VERSION } from "@server/lib/consts";
 import { db } from "@server/db";
 import { SupporterKey, supporterKey } from "@server/db";
 import { eq } from "drizzle-orm";
+import { license } from "@server/license/license";
 import { configSchema, readConfigFile } from "./readConfigFile";
 import { fromError } from "zod-validation-error";
+import {
+    privateConfigSchema,
+    readPrivateConfigFile
+} from "@server/lib/private/readConfigFile";
+import logger from "@server/logger";
 import { build } from "@server/build";

 export class Config {
    private rawConfig!: z.infer<typeof configSchema>;
+    private rawPrivateConfig!: z.infer<typeof privateConfigSchema>;

    supporterData: SupporterKey | null = null;

@@ -30,6 +37,19 @@ export class Config {
            throw new Error(`Invalid configuration file: ${errors}`);
        }

+        const privateEnvironment = readPrivateConfigFile();
+
+        const {
+            data: parsedPrivateConfig,
+            success: privateSuccess,
+            error: privateError
+        } = privateConfigSchema.safeParse(privateEnvironment);
+
+        if (!privateSuccess) {
+            const errors = fromError(privateError);
+            throw new Error(`Invalid private configuration file: ${errors}`);
+        }
+
        if (
            // @ts-ignore
            parsedConfig.users ||
@@ -89,23 +109,132 @@ export class Config {
            ? "true"
            : "false";

+        if (parsedPrivateConfig.branding?.colors) {
+            process.env.BRANDING_COLORS = JSON.stringify(
+                parsedPrivateConfig.branding?.colors
+            );
+        }
+
+        if (parsedPrivateConfig.branding?.logo?.light_path) {
+            process.env.BRANDING_LOGO_LIGHT_PATH =
+                parsedPrivateConfig.branding?.logo?.light_path;
+        }
+        if (parsedPrivateConfig.branding?.logo?.dark_path) {
+            process.env.BRANDING_LOGO_DARK_PATH =
+                parsedPrivateConfig.branding?.logo?.dark_path || undefined;
+        }
+
+        process.env.HIDE_SUPPORTER_KEY = parsedPrivateConfig.flags
+            ?.hide_supporter_key
+            ? "true"
+            : "false";
+
+        if (build != "oss") {
+            if (parsedPrivateConfig.branding?.logo?.light_path) {
+                process.env.BRANDING_LOGO_LIGHT_PATH =
+                    parsedPrivateConfig.branding?.logo?.light_path;
+            }
+            if (parsedPrivateConfig.branding?.logo?.dark_path) {
+                process.env.BRANDING_LOGO_DARK_PATH =
+                    parsedPrivateConfig.branding?.logo?.dark_path || undefined;
+            }
+
+            process.env.BRANDING_LOGO_AUTH_WIDTH = parsedPrivateConfig.branding
+                ?.logo?.auth_page?.width
+                ? parsedPrivateConfig.branding?.logo?.auth_page?.width.toString()
+                : undefined;
+            process.env.BRANDING_LOGO_AUTH_HEIGHT = parsedPrivateConfig.branding
+                ?.logo?.auth_page?.height
+                ? parsedPrivateConfig.branding?.logo?.auth_page?.height.toString()
+                : undefined;
+
+            process.env.BRANDING_LOGO_NAVBAR_WIDTH = parsedPrivateConfig
+                .branding?.logo?.navbar?.width
+                ? parsedPrivateConfig.branding?.logo?.navbar?.width.toString()
+                : undefined;
+            process.env.BRANDING_LOGO_NAVBAR_HEIGHT = parsedPrivateConfig
+                .branding?.logo?.navbar?.height
+                ? parsedPrivateConfig.branding?.logo?.navbar?.height.toString()
+                : undefined;
+
+            process.env.BRANDING_FAVICON_PATH =
+                parsedPrivateConfig.branding?.favicon_path;
+
+            process.env.BRANDING_APP_NAME =
+                parsedPrivateConfig.branding?.app_name || "Pangolin";
+
+            if (parsedPrivateConfig.branding?.footer) {
+                process.env.BRANDING_FOOTER = JSON.stringify(
+                    parsedPrivateConfig.branding?.footer
+                );
+            }
+
+            process.env.LOGIN_PAGE_TITLE_TEXT =
+                parsedPrivateConfig.branding?.login_page?.title_text || "";
+            process.env.LOGIN_PAGE_SUBTITLE_TEXT =
+                parsedPrivateConfig.branding?.login_page?.subtitle_text || "";
+
+            process.env.SIGNUP_PAGE_TITLE_TEXT =
+                parsedPrivateConfig.branding?.signup_page?.title_text || "";
+            process.env.SIGNUP_PAGE_SUBTITLE_TEXT =
+                parsedPrivateConfig.branding?.signup_page?.subtitle_text || "";
+
+            process.env.RESOURCE_AUTH_PAGE_HIDE_POWERED_BY =
+                parsedPrivateConfig.branding?.resource_auth_page
+                    ?.hide_powered_by === true
+                    ? "true"
+                    : "false";
+            process.env.RESOURCE_AUTH_PAGE_SHOW_LOGO =
+                parsedPrivateConfig.branding?.resource_auth_page?.show_logo ===
+                true
+                    ? "true"
+                    : "false";
+            process.env.RESOURCE_AUTH_PAGE_TITLE_TEXT =
+                parsedPrivateConfig.branding?.resource_auth_page?.title_text ||
+                "";
+            process.env.RESOURCE_AUTH_PAGE_SUBTITLE_TEXT =
+                parsedPrivateConfig.branding?.resource_auth_page
+                    ?.subtitle_text || "";
+
+            if (parsedPrivateConfig.branding?.background_image_path) {
+                process.env.BACKGROUND_IMAGE_PATH =
+                    parsedPrivateConfig.branding?.background_image_path;
+            }
+
+            if (parsedPrivateConfig.server.reo_client_id) {
+                process.env.REO_CLIENT_ID =
+                    parsedPrivateConfig.server.reo_client_id;
+            }
+        }
+
        if (parsedConfig.server.maxmind_db_path) {
            process.env.MAXMIND_DB_PATH = parsedConfig.server.maxmind_db_path;
        }

        this.rawConfig = parsedConfig;
+        this.rawPrivateConfig = parsedPrivateConfig;
    }

    public async initServer() {
        if (!this.rawConfig) {
            throw new Error("Config not loaded. Call load() first.");
        }
+        if (this.rawConfig.managed) {
+            // LETS NOT WORRY ABOUT THE SERVER SECRET WHEN MANAGED
+            return;
+        }
+        license.setServerSecret(this.rawConfig.server.secret!);

        await this.checkKeyStatus();
    }

    private async checkKeyStatus() {
-        if (build == "oss") {
+        const licenseStatus = await license.check();
+        if (
+            !this.rawPrivateConfig.flags?.hide_supporter_key &&
+            build != "oss" &&
+            !licenseStatus.isHostLicensed
+        ) {
            this.checkSupporterKey();
        }
    }
@@ -114,6 +243,10 @@ export class Config {
        return this.rawConfig;
    }

+    public getRawPrivateConfig() {
+        return this.rawPrivateConfig;
+    }
+
    public getNoReplyEmail(): string | undefined {
        return (
            this.rawConfig.email?.no_reply || this.rawConfig.email?.smtp_user
@@ -147,6 +280,10 @@ export class Config {
        return false;
    }

+    public isManagedMode() {
+        return typeof this.rawConfig?.managed === "object";
+    }
+
    public async checkSupporterKey() {
        const [key] = await db.select().from(supporterKey).limit(1);

--- a/server/lib/consts.ts
+++ b/server/lib/consts.ts
@@ -2,7 +2,7 @@ import path from "path";
 import { fileURLToPath } from "url";

 // This is a placeholder value replaced by the build process
-export const APP_VERSION = "1.11.0";
+export const APP_VERSION = "1.10.4";

 export const __FILENAME = fileURLToPath(import.meta.url);
 export const __DIRNAME = path.dirname(__FILENAME);
--- a/server/lib/exitNodes/exitNodes.ts
+++ b/server/lib/exitNodes/exitNodes.ts
@@ -1,4 +1,4 @@
-import { db, exitNodes, Transaction } from "@server/db";
+import { db, exitNodes } from "@server/db";
 import logger from "@server/logger";
 import { ExitNodePingResult } from "@server/routers/newt";
 import { eq } from "drizzle-orm";
@@ -16,11 +16,7 @@ export async function verifyExitNodeOrgAccess(
    return { hasAccess: true, exitNode };
 }

-export async function listExitNodes(
-    orgId: string,
-    filterOnline = false,
-    noCloud = false
-) {
+export async function listExitNodes(orgId: string, filterOnline = false, noCloud = false) {
    // TODO: pick which nodes to send and ping better than just all of them that are not remote
    const allExitNodes = await db
        .select({
@@ -59,24 +55,11 @@ export function selectBestExitNode(
    return pingResults[0];
 }

-export async function checkExitNodeOrg(
-    exitNodeId: number,
-    orgId: string,
-    trx?: Transaction | typeof db
-): Promise<boolean> {
+export async function checkExitNodeOrg(exitNodeId: number, orgId: string) {
    return false;
 }

-export async function resolveExitNodes(
-    hostname: string,
-    publicKey: string
-): Promise<
-    {
-        endpoint: string;
-        publicKey: string;
-        orgId: string;
-    }[]
-> {
+export async function resolveExitNodes(hostname: string, publicKey: string) {
    // OSS version: simple implementation that returns empty array
    return [];
 }
--- a/server/lib/exitNodes/index.ts
+++ b/server/lib/exitNodes/index.ts
@@ -1,4 +1,33 @@
-export * from "./exitNodes";
-export * from "./exitNodeComms";
+import { build } from "@server/build";
+
+// Import both modules
+import * as exitNodesModule from "./exitNodes";
+import * as privateExitNodesModule from "./privateExitNodes";
+
+// Conditionally export exit nodes implementation based on build type
+const exitNodesImplementation = build === "oss" ? exitNodesModule : privateExitNodesModule;
+
+// Re-export all items from the selected implementation
+export const {
+    verifyExitNodeOrgAccess,
+    listExitNodes,
+    selectBestExitNode,
+    checkExitNodeOrg,
+    resolveExitNodes
+} = exitNodesImplementation;
+
+// Import communications modules
+import * as exitNodeCommsModule from "./exitNodeComms";
+import * as privateExitNodeCommsModule from "./privateExitNodeComms";
+
+// Conditionally export communications implementation based on build type
+const exitNodeCommsImplementation = build === "oss" ? exitNodeCommsModule : privateExitNodeCommsModule;
+
+// Re-export communications functions from the selected implementation
+export const {
+    sendToExitNode
+} = exitNodeCommsImplementation;
+
+// Re-export shared modules
 export * from "./subnet";
 export * from "./getCurrentExitNodeId";
--- a/server/private/lib/exitNodes/exitNodeComms.ts
+++ b/server/private/lib/exitNodes/exitNodeComms.ts
@@ -15,9 +15,8 @@ import axios from "axios";
 import logger from "@server/logger";
 import { db, ExitNode, remoteExitNodes } from "@server/db";
 import { eq } from "drizzle-orm";
-import { sendToClient } from "#private/routers/ws";
-import privateConfig from "#private/lib/config";
-import config from "@server/lib/config";
+import { sendToClient } from "../../routers/ws";
+import { config } from "../config";

 interface ExitNodeRequest {
    remoteType?: string;
@@ -57,16 +56,16 @@ export async function sendToExitNode(
    } else {
        let hostname = exitNode.reachableAt;

-        // logger.debug(`Exit node details:`, {
-        //     type: exitNode.type,
-        //     name: exitNode.name,
-        //     reachableAt: exitNode.reachableAt,
-        // });
+        logger.debug(`Exit node details:`, {
+            type: exitNode.type,
+            name: exitNode.name,
+            reachableAt: exitNode.reachableAt,
+        });

-        // logger.debug(`Configured local exit node name: ${config.getRawConfig().gerbil.exit_node_name}`);
+        logger.debug(`Configured local exit node name: ${config.getRawConfig().gerbil.exit_node_name}`);

        if (exitNode.name == config.getRawConfig().gerbil.exit_node_name) {
-            hostname = privateConfig.getRawPrivateConfig().gerbil.local_exit_node_reachable_at;
+            hostname = config.getRawPrivateConfig().gerbil.local_exit_node_reachable_at;
        }

        if (!hostname) {
@@ -75,10 +74,10 @@ export async function sendToExitNode(
            );
        }

-        // logger.debug(`Sending request to exit node at ${hostname}`, {
-        //     type: request.remoteType,
-        //     data: request.data
-        // });
+        logger.debug(`Sending request to exit node at ${hostname}`, {
+            type: request.remoteType,
+            data: request.data
+        });

        // Handle local exit node with HTTP API
        const method = request.method || "POST";
--- a/server/private/lib/exitNodes/exitNodes.ts
+++ b/server/private/lib/exitNodes/exitNodes.ts
@@ -18,8 +18,7 @@ import {
    resources,
    targets,
    sites,
-    targetHealthCheck,
-    Transaction
+    targetHealthCheck
 } from "@server/db";
 import logger from "@server/logger";
 import { ExitNodePingResult } from "@server/routers/newt";
@@ -184,47 +183,47 @@ export async function listExitNodes(orgId: string, filterOnline = false, noCloud
        return [];
    }

-    // // Enhanced online checking: consider node offline if either DB says offline OR HTTP ping fails
-    // const nodesWithRealOnlineStatus = await Promise.all(
-    //     allExitNodes.map(async (node) => {
-    //         // If database says it's online, verify with HTTP ping
-    //         let online: boolean;
-    //         if (filterOnline && node.type == "remoteExitNode") {
-    //             try {
-    //                 const isActuallyOnline = await checkExitNodeOnlineStatus( 
-    //                     node.endpoint
-    //                 );
+    // Enhanced online checking: consider node offline if either DB says offline OR HTTP ping fails
+    const nodesWithRealOnlineStatus = await Promise.all(
+        allExitNodes.map(async (node) => {
+            // If database says it's online, verify with HTTP ping
+            let online: boolean;
+            if (filterOnline && node.type == "remoteExitNode") {
+                try {
+                    const isActuallyOnline = await checkExitNodeOnlineStatus( 
+                        node.endpoint
+                    );

-    //                 // set the item in the database if it is offline
-    //                 if (isActuallyOnline != node.online) {
-    //                     await db
-    //                         .update(exitNodes)
-    //                         .set({ online: isActuallyOnline })
-    //                         .where(eq(exitNodes.exitNodeId, node.exitNodeId));
-    //                 }
-    //                 online = isActuallyOnline;
-    //             } catch (error) {
-    //                 logger.warn(
-    //                     `Failed to check online status for exit node ${node.name} (${node.endpoint}): ${error instanceof Error ? error.message : "Unknown error"}`
-    //                 );
-    //                 online = false;
-    //             }
-    //         } else {
-    //             online = node.online;
-    //         }
+                    // set the item in the database if it is offline
+                    if (isActuallyOnline != node.online) {
+                        await db
+                            .update(exitNodes)
+                            .set({ online: isActuallyOnline })
+                            .where(eq(exitNodes.exitNodeId, node.exitNodeId));
+                    }
+                    online = isActuallyOnline;
+                } catch (error) {
+                    logger.warn(
+                        `Failed to check online status for exit node ${node.name} (${node.endpoint}): ${error instanceof Error ? error.message : "Unknown error"}`
+                    );
+                    online = false;
+                }
+            } else {
+                online = node.online;
+            }

-    //         return {
-    //             ...node,
-    //             online
-    //         };
-    //     })
-    // );
+            return {
+                ...node,
+                online
+            };
+        })
+    );

-    const remoteExitNodes = allExitNodes.filter(
+    const remoteExitNodes = nodesWithRealOnlineStatus.filter(
        (node) =>
            node.type === "remoteExitNode" && (!filterOnline || node.online)
    );
-    const gerbilExitNodes = allExitNodes.filter(
+    const gerbilExitNodes = nodesWithRealOnlineStatus.filter(
        (node) => node.type === "gerbil" && (!filterOnline || node.online) && !noCloud
    );

@@ -334,8 +333,8 @@ export function selectBestExitNode(
    return fallbackNode;
 }

-export async function checkExitNodeOrg(exitNodeId: number, orgId: string, trx: Transaction | typeof db = db) {
-    const [exitNodeOrg] = await trx
+export async function checkExitNodeOrg(exitNodeId: number, orgId: string) {
+    const [exitNodeOrg] = await db
        .select()
        .from(exitNodeOrgs)
        .where(
--- a/server/lib/geoip.ts
+++ b/server/lib/geoip.ts
@@ -1,5 +1,8 @@
 import logger from "@server/logger";
 import { maxmindLookup } from "@server/db/maxmind";
+import axios from "axios";
+import config from "./config";
+import { tokenManager } from "./tokenManager";

 export async function getCountryCodeForIp(
    ip: string
@@ -30,4 +33,32 @@ export async function getCountryCodeForIp(
    }

    return;
-}
+}
+
+export async function remoteGetCountryCodeForIp(
+    ip: string
+): Promise<string | undefined> {
+    try {
+        const response = await axios.get(
+            `${config.getRawConfig().managed?.endpoint}/api/v1/hybrid/geoip/${ip}`,
+            await tokenManager.getAuthHeader()
+        );
+
+        return response.data.data.countryCode;
+    } catch (error) {
+        if (axios.isAxiosError(error)) {
+            logger.error("Error fetching config in verify session:", {
+                message: error.message,
+                code: error.code,
+                status: error.response?.status,
+                statusText: error.response?.statusText,
+                url: error.config?.url,
+                method: error.config?.method
+            });
+        } else {
+            logger.error("Error fetching config in verify session:", error);
+        }
+    }
+
+    return;
+}
--- a/server/lib/private/billing/features.ts
+++ b/server/lib/private/billing/features.ts
@@ -1,3 +1,16 @@
+/*
+ * This file is part of a proprietary work.
+ *
+ * Copyright (c) 2025 Fossorial, Inc.
+ * All rights reserved.
+ *
+ * This file is licensed under the Fossorial Commercial License.
+ * You may not use this file except in compliance with the License.
+ * Unauthorized use, copying, modification, or distribution is strictly prohibited.
+ *
+ * This file is not licensed under the AGPLv3.
+ */
+
 import Stripe from "stripe";

 export enum FeatureId {
--- a/server/lib/private/billing/index.ts
+++ b/server/lib/private/billing/index.ts
@@ -11,5 +11,6 @@
 * This file is not licensed under the AGPLv3.
 */

-export * from "./getOrgTierData";
-export * from "./createCustomer";
+export * from "./limitSet";
+export * from "./features";
+export * from "./limitsService";
--- a/server/lib/private/billing/limitSet.ts
+++ b/server/lib/private/billing/limitSet.ts
@@ -1,3 +1,16 @@
+/*
+ * This file is part of a proprietary work.
+ *
+ * Copyright (c) 2025 Fossorial, Inc.
+ * All rights reserved.
+ *
+ * This file is licensed under the Fossorial Commercial License.
+ * You may not use this file except in compliance with the License.
+ * Unauthorized use, copying, modification, or distribution is strictly prohibited.
+ *
+ * This file is not licensed under the AGPLv3.
+ */
+
 import { FeatureId } from "./features";

 export type LimitSet = {
--- a/server/lib/private/billing/limitsService.ts
+++ b/server/lib/private/billing/limitsService.ts
@@ -1,3 +1,16 @@
+/*
+ * This file is part of a proprietary work.
+ *
+ * Copyright (c) 2025 Fossorial, Inc.
+ * All rights reserved.
+ *
+ * This file is licensed under the Fossorial Commercial License.
+ * You may not use this file except in compliance with the License.
+ * Unauthorized use, copying, modification, or distribution is strictly prohibited.
+ *
+ * This file is not licensed under the AGPLv3.
+ */
+
 import { db, limits } from "@server/db";
 import { and, eq } from "drizzle-orm";
 import { LimitSet } from "./limitSet";
--- a/server/lib/private/billing/tiers.ts
+++ b/server/lib/private/billing/tiers.ts
@@ -1,3 +1,16 @@
+/*
+ * This file is part of a proprietary work.
+ *
+ * Copyright (c) 2025 Fossorial, Inc.
+ * All rights reserved.
+ *
+ * This file is licensed under the Fossorial Commercial License.
+ * You may not use this file except in compliance with the License.
+ * Unauthorized use, copying, modification, or distribution is strictly prohibited.
+ *
+ * This file is not licensed under the AGPLv3.
+ */
+
 export enum TierId {
    STANDARD = "standard",
 }
--- a/server/lib/private/billing/usageService.ts
+++ b/server/lib/private/billing/usageService.ts
@@ -1,7 +1,21 @@
+/*
+ * This file is part of a proprietary work.
+ *
+ * Copyright (c) 2025 Fossorial, Inc.
+ * All rights reserved.
+ *
+ * This file is licensed under the Fossorial Commercial License.
+ * You may not use this file except in compliance with the License.
+ * Unauthorized use, copying, modification, or distribution is strictly prohibited.
+ *
+ * This file is not licensed under the AGPLv3.
+ */
+
 import { eq, sql, and } from "drizzle-orm";
 import NodeCache from "node-cache";
 import { v4 as uuidv4 } from "uuid";
 import { PutObjectCommand } from "@aws-sdk/client-s3";
+import { s3Client } from "../s3";
 import * as fs from "fs/promises";
 import * as path from "path";
 import {
@@ -16,10 +30,10 @@ import {
    Transaction
 } from "@server/db";
 import { FeatureId, getFeatureMeterId } from "./features";
+import config from "@server/lib/config";
 import logger from "@server/logger";
-import { sendToClient } from "#dynamic/routers/ws";
+import { sendToClient } from "@server/routers/ws";
 import { build } from "@server/build";
-import { s3Client } from "@server/lib/s3";

 interface StripeEvent {
    identifier?: string;
@@ -31,17 +45,6 @@ interface StripeEvent {
    };
 }

-export function noop() {
-    if (
-        build !== "saas" ||
-        !process.env.S3_BUCKET ||
-        !process.env.LOCAL_FILE_PATH
-    ) {
-        return true;
-    }
-    return false;
-}
-
 export class UsageService {
    private cache: NodeCache;
    private bucketName: string | undefined;
@@ -52,13 +55,11 @@ export class UsageService {

    constructor() {
        this.cache = new NodeCache({ stdTTL: 300 }); // 5 minute TTL
-        if (noop()) {
+        if (build !== "saas") {
            return;
        }
-        // this.bucketName = privateConfig.getRawPrivateConfig().stripe?.s3Bucket;
-        // this.eventsDir = privateConfig.getRawPrivateConfig().stripe?.localFilePath;
-        this.bucketName = process.env.S3_BUCKET || undefined;
-        this.eventsDir = process.env.LOCAL_FILE_PATH || undefined;
+        this.bucketName = config.getRawPrivateConfig().stripe?.s3Bucket;
+        this.eventsDir = config.getRawPrivateConfig().stripe?.localFilePath;

        // Ensure events directory exists
        this.initializeEventsDirectory().then(() => {
@@ -82,9 +83,7 @@ export class UsageService {

    private async initializeEventsDirectory(): Promise<void> {
        if (!this.eventsDir) {
-            logger.warn(
-                "Stripe local file path is not configured, skipping events directory initialization."
-            );
+            logger.warn("Stripe local file path is not configured, skipping events directory initialization.");
            return;
        }
        try {
@@ -96,9 +95,7 @@ export class UsageService {

    private async uploadPendingEventFilesOnStartup(): Promise<void> {
        if (!this.eventsDir || !this.bucketName) {
-            logger.warn(
-                "Stripe local file path or bucket name is not configured, skipping leftover event file upload."
-            );
+            logger.warn("Stripe local file path or bucket name is not configured, skipping leftover event file upload.");
            return;
        }
        try {
@@ -121,17 +118,15 @@ export class UsageService {
                                ContentType: "application/json"
                            });
                            await s3Client.send(uploadCommand);
-
+                            
                            // Check if file still exists before unlinking
                            try {
                                await fs.access(filePath);
                                await fs.unlink(filePath);
                            } catch (unlinkError) {
-                                logger.debug(
-                                    `Startup file ${file} was already deleted`
-                                );
+                                logger.debug(`Startup file ${file} was already deleted`);
                            }
-
+                            
                            logger.info(
                                `Uploaded leftover event file ${file} to S3 with ${events.length} events`
                            );
@@ -141,9 +136,7 @@ export class UsageService {
                                await fs.access(filePath);
                                await fs.unlink(filePath);
                            } catch (unlinkError) {
-                                logger.debug(
-                                    `Empty startup file ${file} was already deleted`
-                                );
+                                logger.debug(`Empty startup file ${file} was already deleted`);
                            }
                        }
                    } catch (err) {
@@ -154,8 +147,8 @@ export class UsageService {
                    }
                }
            }
-        } catch (error) {
-            logger.error("Failed to scan for leftover event files");
+        } catch (err) {
+            logger.error("Failed to scan for leftover event files:", err);
        }
    }

@@ -165,17 +158,17 @@ export class UsageService {
        value: number,
        transaction: any = null
    ): Promise<Usage | null> {
-        if (noop()) {
+        if (build !== "saas") {
            return null;
        }
-
+        
        // Truncate value to 11 decimal places
        value = this.truncateValue(value);
-
+        
        // Implement retry logic for deadlock handling
        const maxRetries = 3;
        let attempt = 0;
-
+        
        while (attempt <= maxRetries) {
            try {
                // Get subscription data for this org (with caching)
@@ -198,12 +191,7 @@ export class UsageService {
                    );
                } else {
                    await db.transaction(async (trx) => {
-                        usage = await this.internalAddUsage(
-                            orgId,
-                            featureId,
-                            value,
-                            trx
-                        );
+                        usage = await this.internalAddUsage(orgId, featureId, value, trx);
                    });
                }

@@ -213,26 +201,25 @@ export class UsageService {
                return usage || null;
            } catch (error: any) {
                // Check if this is a deadlock error
-                const isDeadlock =
-                    error?.code === "40P01" ||
-                    error?.cause?.code === "40P01" ||
-                    (error?.message && error.message.includes("deadlock"));
-
+                const isDeadlock = error?.code === '40P01' || 
+                                 error?.cause?.code === '40P01' ||
+                                 (error?.message && error.message.includes('deadlock'));
+                
                if (isDeadlock && attempt < maxRetries) {
                    attempt++;
                    // Exponential backoff with jitter: 50-150ms, 100-300ms, 200-600ms
                    const baseDelay = Math.pow(2, attempt - 1) * 50;
                    const jitter = Math.random() * baseDelay;
                    const delay = baseDelay + jitter;
-
+                    
                    logger.warn(
                        `Deadlock detected for ${orgId}/${featureId}, retrying attempt ${attempt}/${maxRetries} after ${delay.toFixed(0)}ms`
                    );
-
-                    await new Promise((resolve) => setTimeout(resolve, delay));
+                    
+                    await new Promise(resolve => setTimeout(resolve, delay));
                    continue;
                }
-
+                
                logger.error(
                    `Failed to add usage for ${orgId}/${featureId} after ${attempt} attempts:`,
                    error
@@ -252,10 +239,10 @@ export class UsageService {
    ): Promise<Usage> {
        // Truncate value to 11 decimal places
        value = this.truncateValue(value);
-
+        
        const usageId = `${orgId}-${featureId}`;
        const meterId = getFeatureMeterId(featureId);
-
+        
        // Use upsert: insert if not exists, otherwise increment
        const [returnUsage] = await trx
            .insert(usage)
@@ -272,8 +259,7 @@ export class UsageService {
                set: {
                    latestValue: sql`${usage.latestValue} + ${value}`
                }
-            })
-            .returning();
+            }).returning();

        return returnUsage;
    }
@@ -294,7 +280,7 @@ export class UsageService {
        value?: number,
        customerId?: string
    ): Promise<void> {
-        if (noop()) {
+        if (build !== "saas") {
            return;
        }
        try {
@@ -365,7 +351,7 @@ export class UsageService {
                            .set({
                                latestValue: newRunningTotal,
                                instantaneousValue: value,
-                                updatedAt: Math.floor(Date.now() / 1000)
+                                updatedAt: Math.floor(Date.now() / 1000) 
                            })
                            .where(eq(usage.usageId, usageId));
                    }
@@ -380,7 +366,7 @@ export class UsageService {
                        meterId,
                        instantaneousValue: truncatedValue,
                        latestValue: truncatedValue,
-                        updatedAt: Math.floor(Date.now() / 1000)
+                        updatedAt: Math.floor(Date.now() / 1000) 
                    });
                }
            });
@@ -441,7 +427,7 @@ export class UsageService {
    ): Promise<void> {
        // Truncate value to 11 decimal places before sending to Stripe
        const truncatedValue = this.truncateValue(value);
-
+        
        const event: StripeEvent = {
            identifier: uuidv4(),
            timestamp: Math.floor(new Date().getTime() / 1000),
@@ -458,9 +444,7 @@ export class UsageService {

    private async writeEventToFile(event: StripeEvent): Promise<void> {
        if (!this.eventsDir || !this.bucketName) {
-            logger.warn(
-                "Stripe local file path or bucket name is not configured, skipping event file write."
-            );
+            logger.warn("Stripe local file path or bucket name is not configured, skipping event file write.");
            return;
        }
        if (!this.currentEventFile) {
@@ -509,9 +493,7 @@ export class UsageService {

    private async uploadFileToS3(): Promise<void> {
        if (!this.bucketName || !this.eventsDir) {
-            logger.warn(
-                "Stripe local file path or bucket name is not configured, skipping S3 upload."
-            );
+            logger.warn("Stripe local file path or bucket name is not configured, skipping S3 upload.");
            return;
        }
        if (!this.currentEventFile) {
@@ -523,9 +505,7 @@ export class UsageService {

        // Check if this file is already being uploaded
        if (this.uploadingFiles.has(fileName)) {
-            logger.debug(
-                `File ${fileName} is already being uploaded, skipping`
-            );
+            logger.debug(`File ${fileName} is already being uploaded, skipping`);
            return;
        }

@@ -537,9 +517,7 @@ export class UsageService {
            try {
                await fs.access(filePath);
            } catch (error) {
-                logger.debug(
-                    `File ${fileName} does not exist, may have been already processed`
-                );
+                logger.debug(`File ${fileName} does not exist, may have been already processed`);
                this.uploadingFiles.delete(fileName);
                // Reset current file if it was this file
                if (this.currentEventFile === fileName) {
@@ -559,9 +537,7 @@ export class UsageService {
                    await fs.unlink(filePath);
                } catch (unlinkError) {
                    // File may have been already deleted
-                    logger.debug(
-                        `File ${fileName} was already deleted during cleanup`
-                    );
+                    logger.debug(`File ${fileName} was already deleted during cleanup`);
                }
                this.currentEventFile = null;
                this.uploadingFiles.delete(fileName);
@@ -584,9 +560,7 @@ export class UsageService {
                await fs.unlink(filePath);
            } catch (unlinkError) {
                // File may have been already deleted by another process
-                logger.debug(
-                    `File ${fileName} was already deleted during upload`
-                );
+                logger.debug(`File ${fileName} was already deleted during upload`);
            }

            logger.info(
@@ -597,7 +571,10 @@ export class UsageService {
            this.currentEventFile = null;
            this.currentFileStartTime = 0;
        } catch (error) {
-            logger.error(`Failed to upload ${fileName} to S3:`, error);
+            logger.error(
+                `Failed to upload ${fileName} to S3:`,
+                error
+            );
        } finally {
            // Always remove from uploading set
            this.uploadingFiles.delete(fileName);
@@ -612,17 +589,16 @@ export class UsageService {

    public async getUsage(
        orgId: string,
-        featureId: FeatureId,
-        trx: Transaction | typeof db = db
+        featureId: FeatureId
    ): Promise<Usage | null> {
-        if (noop()) {
+        if (build !== "saas") {
            return null;
        }

        const usageId = `${orgId}-${featureId}`;

        try {
-            const [result] = await trx
+            const [result] = await db
                .select()
                .from(usage)
                .where(eq(usage.usageId, usageId))
@@ -634,9 +610,9 @@ export class UsageService {
                    `Creating new usage record for ${orgId}/${featureId}`
                );
                const meterId = getFeatureMeterId(featureId);
-
+                
                try {
-                    const [newUsage] = await trx
+                    const [newUsage] = await db
                        .insert(usage)
                        .values({
                            usageId,
@@ -653,7 +629,7 @@ export class UsageService {
                        return newUsage;
                    } else {
                        // Record was created by another process, fetch it
-                        const [existingUsage] = await trx
+                        const [existingUsage] = await db
                            .select()
                            .from(usage)
                            .where(eq(usage.usageId, usageId))
@@ -666,7 +642,7 @@ export class UsageService {
                        `Insert failed for ${orgId}/${featureId}, attempting to fetch existing record:`,
                        insertError
                    );
-                    const [existingUsage] = await trx
+                    const [existingUsage] = await db
                        .select()
                        .from(usage)
                        .where(eq(usage.usageId, usageId))
@@ -689,7 +665,7 @@ export class UsageService {
        orgId: string,
        featureId: FeatureId
    ): Promise<Usage | null> {
-        if (noop()) {
+        if (build !== "saas") {
            return null;
        }
        await this.updateDaily(orgId, featureId); // Ensure daily usage is updated
@@ -709,9 +685,7 @@ export class UsageService {
     */
    private async uploadOldEventFiles(): Promise<void> {
        if (!this.eventsDir || !this.bucketName) {
-            logger.warn(
-                "Stripe local file path or bucket name is not configured, skipping old event file upload."
-            );
+            logger.warn("Stripe local file path or bucket name is not configured, skipping old event file upload.");
            return;
        }
        try {
@@ -719,17 +693,15 @@ export class UsageService {
            const now = Date.now();
            for (const file of files) {
                if (!file.endsWith(".json")) continue;
-
+                
                // Skip files that are already being uploaded
                if (this.uploadingFiles.has(file)) {
-                    logger.debug(
-                        `Skipping file ${file} as it's already being uploaded`
-                    );
+                    logger.debug(`Skipping file ${file} as it's already being uploaded`);
                    continue;
                }

                const filePath = path.join(this.eventsDir, file);
-
+                
                try {
                    // Check if file still exists before processing
                    try {
@@ -744,7 +716,7 @@ export class UsageService {
                    if (age >= 90000) {
                        // 1.5 minutes - Mark as being uploaded
                        this.uploadingFiles.add(file);
-
+                        
                        try {
                            const fileContent = await fs.readFile(
                                filePath,
@@ -760,17 +732,15 @@ export class UsageService {
                                    ContentType: "application/json"
                                });
                                await s3Client.send(uploadCommand);
-
+                                
                                // Check if file still exists before unlinking
                                try {
                                    await fs.access(filePath);
                                    await fs.unlink(filePath);
                                } catch (unlinkError) {
-                                    logger.debug(
-                                        `File ${file} was already deleted during interval upload`
-                                    );
+                                    logger.debug(`File ${file} was already deleted during interval upload`);
                                }
-
+                                
                                logger.info(
                                    `Interval: Uploaded event file ${file} to S3 with ${events.length} events`
                                );
@@ -785,9 +755,7 @@ export class UsageService {
                                    await fs.access(filePath);
                                    await fs.unlink(filePath);
                                } catch (unlinkError) {
-                                    logger.debug(
-                                        `Empty file ${file} was already deleted`
-                                    );
+                                    logger.debug(`Empty file ${file} was already deleted`);
                                }
                            }
                        } finally {
@@ -809,25 +777,19 @@ export class UsageService {
        }
    }

-    public async checkLimitSet(
-        orgId: string,
-        kickSites = false,
-        featureId?: FeatureId,
-        usage?: Usage,
-        trx: Transaction | typeof db = db
-    ): Promise<boolean> {
-        if (noop()) {
+    public async checkLimitSet(orgId: string, kickSites = false, featureId?: FeatureId, usage?: Usage): Promise<boolean> {
+        if (build !== "saas") {
            return false;
        }
        // This method should check the current usage against the limits set for the organization
-        // and kick out all of the sites on the org
+        // and kick out all of the sites on the org 
        let hasExceededLimits = false;

        try {
            let orgLimits: Limit[] = [];
            if (featureId) {
                // Get all limits set for this organization
-                orgLimits = await trx
+                orgLimits = await db
                    .select()
                    .from(limits)
                    .where(
@@ -838,7 +800,7 @@ export class UsageService {
                    );
            } else {
                // Get all limits set for this organization
-                orgLimits = await trx
+                orgLimits = await db
                    .select()
                    .from(limits)
                    .where(eq(limits.orgId, orgId));
@@ -855,31 +817,16 @@ export class UsageService {
                if (usage) {
                    currentUsage = usage;
                } else {
-                    currentUsage = await this.getUsage(
-                        orgId,
-                        limit.featureId as FeatureId,
-                        trx
-                    );
+                    currentUsage = await this.getUsage(orgId, limit.featureId as FeatureId);
                }

-                const usageValue =
-                    currentUsage?.instantaneousValue ||
-                    currentUsage?.latestValue ||
-                    0;
-                logger.debug(
-                    `Current usage for org ${orgId} on feature ${limit.featureId}: ${usageValue}`
-                );
-                logger.debug(
-                    `Limit for org ${orgId} on feature ${limit.featureId}: ${limit.value}`
-                );
-                if (
-                    currentUsage &&
-                    limit.value !== null &&
-                    usageValue > limit.value
-                ) {
+                const usageValue = currentUsage?.instantaneousValue || currentUsage?.latestValue || 0;
+                logger.debug(`Current usage for org ${orgId} on feature ${limit.featureId}: ${usageValue}`);
+                logger.debug(`Limit for org ${orgId} on feature ${limit.featureId}: ${limit.value}`);
+                if (currentUsage && limit.value !== null && usageValue > limit.value) {
                    logger.debug(
                        `Org ${orgId} has exceeded limit for ${limit.featureId}: ` +
-                            `${usageValue} > ${limit.value}`
+                        `${usageValue} > ${limit.value}`
                    );
                    hasExceededLimits = true;
                    break; // Exit early if any limit is exceeded
@@ -888,24 +835,22 @@ export class UsageService {

            // If any limits are exceeded, disconnect all sites for this organization
            if (hasExceededLimits && kickSites) {
-                logger.warn(
-                    `Disconnecting all sites for org ${orgId} due to exceeded limits`
-                );
+                logger.warn(`Disconnecting all sites for org ${orgId} due to exceeded limits`);

                // Get all sites for this organization
-                const orgSites = await trx
+                const orgSites = await db
                    .select()
                    .from(sites)
                    .where(eq(sites.orgId, orgId));

                // Mark all sites as offline and send termination messages
-                const siteUpdates = orgSites.map((site) => site.siteId);
+                const siteUpdates = orgSites.map(site => site.siteId);

                if (siteUpdates.length > 0) {
                    // Send termination messages to newt sites
                    for (const site of orgSites) {
                        if (site.type === "newt") {
-                            const [newt] = await trx
+                            const [newt] = await db
                                .select()
                                .from(newts)
                                .where(eq(newts.siteId, site.siteId))
@@ -920,21 +865,17 @@ export class UsageService {
                                };

                                // Don't await to prevent blocking
-                                await sendToClient(newt.newtId, payload).catch(
-                                    (error: any) => {
-                                        logger.error(
-                                            `Failed to send termination message to newt ${newt.newtId}:`,
-                                            error
-                                        );
-                                    }
-                                );
+                                sendToClient(newt.newtId, payload).catch((error: any) => {
+                                    logger.error(
+                                        `Failed to send termination message to newt ${newt.newtId}:`,
+                                        error
+                                    );
+                                });
                            }
                        }
                    }

-                    logger.info(
-                        `Disconnected ${orgSites.length} sites for org ${orgId} due to exceeded limits`
-                    );
+                    logger.info(`Disconnected ${orgSites.length} sites for org ${orgId} due to exceeded limits`);
                }
            }
        } catch (error) {
--- a/server/lib/private/createUserAccountOrg.ts
+++ b/server/lib/private/createUserAccountOrg.ts
@@ -1,3 +1,16 @@
+/*
+ * This file is part of a proprietary work.
+ *
+ * Copyright (c) 2025 Fossorial, Inc.
+ * All rights reserved.
+ *
+ * This file is licensed under the Fossorial Commercial License.
+ * You may not use this file except in compliance with the License.
+ * Unauthorized use, copying, modification, or distribution is strictly prohibited.
+ *
+ * This file is not licensed under the AGPLv3.
+ */
+
 import { isValidCIDR } from "@server/lib/validators";
 import { getNextAvailableOrgSubnet } from "@server/lib/ip";
 import {
@@ -15,9 +28,9 @@ import {
 } from "@server/db";
 import { eq } from "drizzle-orm";
 import { defaultRoleAllowedActions } from "@server/routers/role";
-import { FeatureId, limitsService, sandboxLimitSet } from "@server/lib/billing";
-import { createCustomer } from "#dynamic/lib/billing";
-import { usageService } from "@server/lib/billing/usageService";
+import { FeatureId, limitsService, sandboxLimitSet } from "@server/lib/private/billing";
+import { createCustomer } from "@server/routers/private/billing/createCustomer";
+import { usageService } from "@server/lib/private/billing/usageService";

 export async function createUserAccountOrg(
    userId: string,
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
miloschwartz	b1bcdadf80	fix invite flow	2025-10-07 21:15:14 -07:00
Owen	dcb4ae71b8	Add postgres pool info to config	2025-10-07 15:11:10 -07:00