<?php

return [
    'eyebrow' => 'Operations',
    'title' => 'Hostnames and certificates',
    'subtitle' => 'Which addresses this installation serves — and whether they actually answer.',

    'list_title' => 'Served hostnames',
    'list_sub' => 'The state is measured, not read from the configuration: what a visitor gets is what is checked.',
    'empty' => 'No hostname added yet.',

    'check' => 'Check certificates',
    'apply' => 'Apply to the proxy',
    'apply_hint' => 'Applying writes the list into the proxy configuration and reloads it. The proxy then requests certificates for every name that has none — including the ones where issuance failed before. Renewal happens on its own, at two thirds of the lifetime.',

    'add_title' => 'Add a hostname',
    'add_sub' => 'The DNS record has to point at this server first. Otherwise there is no certificate, and the reason will appear in the row above.',
    'add' => 'Add',
    'added' => 'Hostname added. It takes effect with "Apply to the proxy".',
    'remove' => 'Remove',
    'removed' => 'Hostname removed. The proxy keeps serving it until the next apply.',
    'save' => 'Save',
    'checked' => 'Certificates checked.',
    'applying' => 'Applying. The agent picks it up within a minute.',
    'apply_failed' => 'Could not be requested — is the update agent running on this server?',
    'email_saved' => 'Contact address saved.',

    'acme_title' => 'Certificate contact address',
    'acme_sub' => 'The certificate authority sends expiry warnings here. It appears in no certificate.',

    'purpose' => [
        'public' => 'Public',
        'console' => 'Console (management network only)',
    ],

    'cert' => [
        'unknown' => 'Not checked yet.',
        'valid' => 'Certificate valid, :days days left (until :date).',
        'soon' => 'Certificate expires in :days days (:date) — a renewal should long since have run.',
        'error' => 'No valid certificate: :error',
    ],

    'field' => [
        'hostname' => 'Hostname',
        'hostname_hint' => 'Fully qualified, without a scheme — e.g. files.clupilot.com',
        'purpose' => 'Purpose',
        'purpose_hint' => 'Console gets the network lock. Public is reachable from anywhere.',
        'note' => 'Note',
        'acme_email' => 'Email address',
        'acme_email_hint' => 'Leave empty to use :email, the owner\'s address.',
        'acme_email_hint_none' => 'Leaving this empty is a poor choice here — there is no owner account to take an address from.',
    ],

    'stat' => [
        'total' => 'Hostnames',
        'valid' => 'Certificate valid',
        'soon' => 'Expiring soon',
        'failing' => 'No certificate',
    ],
    'from_config' => 'from the configuration',
    'remove_from_config' => 'This name comes from the installation\'s environment and would return at the next sync. It can only be removed where it is set.',
    'never_checked' => ':count hostname(s) have never been checked. The measurement runs daily at 04:17 — or now, via "Check certificates".',
    'last_checked' => 'Last checked: :when.',
    'checked_count' => ':checked checked, :failing without a valid certificate.',
];