feat(cert): add self-signed certificate error codes and renewal notification

- Add self-signed certificate error codes (50032-50036)
- Add "Renew Certificate Success" notification
- Add WebSocket reverse-proxy fix self-check messages
- Refine zh translations and regenerate bundled artifacts

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

app/src/components/Notification/notifications.ts

@@ -45,6 +45,10 @@ const notifications: Record<string, { title: () => string, content: (args: any)
     title: () => $gettext('Renew Certificate Error'),
     content: (args: any) => $gettext('Certificate %{name} renewal failed: %{error}', args, true),
   },
+  'Renew Certificate Success_1': {
+    title: () => $gettext('Renew Certificate Success'),
+    content: (args: any) => $gettext('Certificate %{name} renewed successfully', args, true),
+  },
   'Certificate Expired': {
     title: () => $gettext('Certificate Expired'),
     content: (args: any) => $gettext('Certificate %{name} has expired', args, true),

app/src/constants/errors/cert.ts

@@ -23,4 +23,9 @@ export default {
   50022: () => $gettext('Obtain cert error: {0}'),
   50023: () => $gettext('Revoke cert error: {0}'),
   50031: () => $gettext('No certificate available'),
+  50032: () => $gettext('Generate self-signed private key error: {0}'),
+  50033: () => $gettext('Create self-signed certificate error: {0}'),
+  50034: () => $gettext('At least one domain or IP address is required'),
+  50035: () => $gettext('Invalid IP address: {0}'),
+  50036: () => $gettext('Certificate is not a self-signed certificate'),
 }

app/src/constants/errors/self_check.ts

@@ -22,8 +22,8 @@ export default {
   40418: () => $gettext('Error log path not exist'),
   40419: () => $gettext('Conf.d directory not exists'),
   40420: () => $gettext('GeoLite2 database not found at {0}. Log indexing requires GeoLite2 database for geographic IP analysis'),
-  40421: () => $gettext('Bundled nginx-ui.conf is missing the WebSocket reverse-proxy fix'),
   50007: () => $gettext('Failed to read bundled nginx-ui.conf: {0}'),
+  40421: () => $gettext('Bundled nginx-ui.conf is missing the WebSocket reverse-proxy fix'),
   50008: () => $gettext('Patched nginx-ui.conf is invalid: {0}'),
   50009: () => $gettext('Nginx reload after fix failed: {0}'),
   50010: () => $gettext('Failed to restore nginx-ui.conf from backup: {0}'),

app/src/language/generate.ts

@@ -1,6 +1,7 @@
 // This file is auto-generated. DO NOT EDIT MANUALLY.
 
 export const msg = [
+  $gettext('Bundled nginx-ui.conf has WebSocket reverse-proxy fix'),
   $gettext('Certificate not found: %{error}'),
   $gettext('Certificate revoked successfully'),
   $gettext('Check if /var/run/docker.sock exists. If you are using Nginx UI Official Docker Image, please make sure the docker socket is mounted like this: `-v /var/run/docker.sock:/var/run/docker.sock`. Nginx UI official image uses /var/run/docker.sock to communicate with the host Docker Engine via Docker Client API. This feature is used to control Nginx in another container and perform container replacement rather than binary replacement during OTA upgrades of Nginx UI to ensure container dependencies are also upgraded. If you don\'t need this feature, please add the environment variable NGINX_UI_IGNORE_DOCKER_SOCKET=true to the container.'),
@@ -34,6 +35,7 @@ export const msg = [
   $gettext('Nginx.conf includes streams-enabled directory'),
   $gettext('Sites directory exists'),
   $gettext('Streams directory exists'),
+  $gettext('When the container is behind an outer reverse proxy that terminates TLS (e.g. host nginx, Cloudflare), the bundled conf.d/nginx-ui.conf must trust the inbound X-Forwarded-Proto/Host headers; otherwise WebSocket origin checks fail. Older deployments that persisted /etc/nginx may still have the unfixed version.'),
   $gettext('[Nginx UI] ACME User: %{name}, Email: %{email}, CA Dir: %{caDir}'),
   $gettext('[Nginx UI] Backing up current certificate for later revocation'),
   $gettext('[Nginx UI] Certificate renewed successfully'),

app/src/version.json

@@ -1 +1 @@
-{"version":"2.3.11","build_id":1,"total_build":522}
+{"version":"2.3.11","build_id":2,"total_build":523}