Install and use sysusers.d/tmpfiles.d config files

sysusers.d/tmpfiles.d config files allow a package to use
declarative configuration instead of manually written maintainer
scripts. This also allows image-based systems to be created
with /usr/ only, and also allows for factory resetting a system
and recreating /etc/ on boot.

https://www.freedesktop.org/software/systemd/man/latest/sysusers.d.html
https://www.freedesktop.org/software/systemd/man/latest/tmpfiles.d.html

Tests:

- /var/lib/plinth and /var/lib/plinth/sessions/ are created on package install.
  Ownership is plinth:plinth. 0755 is permissions.

- /var/lib/plinth/firstboot-wizard-secret file is created on package install.
  Ownership is plinth:plinth. 0400 is permissions. During first wizard,
  providing the secret works.

- /var/lib/plinth/backups-data is owned by root:root.

- When upgrading from old package to new the permissions don't change.

- When reinstalling the new package, the permissions do not change.

- User is created same as before.
  plinth❌987:987:FreedomBox service:/var/lib/plinth:/usr/sbin/nologin
- Group is created same as before.
  plinth❌987:
- id plinth
  uid=987(plinth) gid=987(plinth) groups=987(plinth)

- Upgrading from old package to new does not change user and group records.

- Reinstalling new version does not change user and group records.

[sunil: Don't recursively change ownership for /var/lib/plinth/]
[sunil: Change ownership specifically for /var/lib/plinth/firstboot-wizard-secret]
Signed-off-by: Sunil Mohan Adapa <sunil@medhas.org>
Reviewed-by: Sunil Mohan Adapa <sunil@medhas.org>
Tested-by: Sunil Mohan Adapa <sunil@medhas.org>

debian/changelog

@@ -1,3 +1,68 @@
+freedombox (26.8) unstable; urgency=medium
+
+  [ Pierfrancesco Passerini ]
+  * Translated using Weblate (Italian)
+
+  [ Dietmar ]
+  * Translated using Weblate (German)
+
+  [ Sunil Mohan Adapa ]
+  * api: Drop access-info API
+
+  [ James Valleroy ]
+  * doc: Fetch latest manual
+
+ -- James Valleroy <jvalleroy@mailbox.org>  Mon, 11 May 2026 20:32:09 -0400
+
+freedombox (26.7.1) unstable; urgency=medium
+
+  [ Frederico Gomes ]
+  * radicale: Enable lc_username for case-insensitive auth
+
+  [ Sunil Mohan Adapa ]
+  * radicale, bepasty: Fix issue with failed diagnostic test
+  * radicale: Fix issue with parsing new configuration file
+  * radicale: tests: functional: Better checking for well-known URLs
+
+  [ James Valleroy ]
+  * locale: Update translation strings
+  * doc: Fetch latest manual
+
+ -- James Valleroy <jvalleroy@mailbox.org>  Tue, 28 Apr 2026 18:26:38 -0400
+
+freedombox (26.7) unstable; urgency=medium
+
+  [ Burak Yavuz ]
+  * Translated using Weblate (Turkish)
+
+  [ Besnik Bleta ]
+  * Translated using Weblate (Albanian)
+
+  [ 大王叫我来巡山 ]
+  * Translated using Weblate (Chinese (Simplified Han script))
+
+  [ Dietmar ]
+  * Translated using Weblate (German)
+  * Translated using Weblate (Italian)
+
+  [ Jiří Podhorecký ]
+  * Translated using Weblate (Czech)
+
+  [ bittin1ddc447d824349b2 ]
+  * Translated using Weblate (Swedish)
+
+  [ Coucouf ]
+  * Translated using Weblate (French)
+
+  [ Pierfrancesco Passerini ]
+  * Translated using Weblate (Italian)
+
+  [ James Valleroy ]
+  * debian: tests: Add test to access interface status
+  * doc: Fetch latest manual
+
+ -- James Valleroy <jvalleroy@mailbox.org>  Mon, 20 Apr 2026 20:25:51 -0400
+
 freedombox (26.6) unstable; urgency=medium
 
   [ Coucouf ]

debian/control

@@ -11,6 +11,7 @@ Uploaders:
  James Valleroy <jvalleroy@mailbox.org>,
 Build-Depends:
  debhelper-compat (= 13),
+ dh-sequence-installsysusers,
  dblatex,
  dh-python,
  docbook-xsl,
@@ -74,7 +75,6 @@ Depends:
  ${python3:Depends},
  ${misc:Depends},
  ${freedombox:Depends},
- adduser,
  augeas-tools,
  bind9-dnsutils,
  curl,

debian/freedombox.postinst

@@ -13,21 +13,9 @@ sed -i 's+-:ALL EXCEPT root fbx (admin) (sudo):ALL+-:ALL EXCEPT root fbx plinth
 
 case "$1" in
     configure)
-        if ! getent group plinth >/dev/null; then
-            addgroup --system --quiet plinth
-        fi
-
-        if ! getent passwd plinth >/dev/null; then
-            adduser --system --quiet --ingroup plinth --no-create-home --home /var/lib/plinth plinth
-        fi
-
-        chown plinth: /var/lib/plinth
-        chown plinth: /var/lib/plinth/sessions
-
         if [ ! -e '/var/lib/freedombox/is-freedombox-disk-image' ]; then
             umask 377
             base64 < /dev/urandom | head -c 16 | sed -e 's+$+\n+' > /var/lib/plinth/firstboot-wizard-secret
-            chown plinth:plinth /var/lib/plinth/firstboot-wizard-secret
             db_subst plinth/firstboot_wizard_secret secret $(cat /var/lib/plinth/firstboot-wizard-secret)
             db_input high plinth/firstboot_wizard_secret || true
             db_go

debian/freedombox.postrm

@@ -4,7 +4,6 @@ set -e
 
 case "$1" in
 purge)
-    deluser --system --quiet plinth || true
     rm -rf /var/lib/plinth
 
     # Remove legacy directory too

debian/freedombox.sysusers

@@ -0,0 +1 @@
+u! plinth - "FreedomBox service" /var/lib/plinth

debian/freedombox.tmpfiles

@@ -0,0 +1,3 @@
+d /var/lib/plinth 0755 plinth plinth
+d /var/lib/plinth/sessions 0755 plinth plinth
+Z /var/lib/plinth/firstboot-wizard-secret 0400 plinth plinth

debian/tests/access-web-interface

@@ -0,0 +1,16 @@
+#!/bin/sh
+
+set -e
+
+# Wait for FreedomBox setup to complete.
+sleep 30
+
+journalctl --unit=plinth --unit=freedombox-privileged
+
+# Get FreedomBox status
+curl --location --cookie "" --fail --write-out "%{response_code}" --insecure \
+     --stderr - https://localhost/freedombox/status/
+
+# Access FreedomBox interface
+curl --location --cookie "" --fail --write-out "%{response_code}" --insecure \
+     --stderr - https://localhost/freedombox/

debian/tests/control

@@ -16,3 +16,13 @@ Restrictions: needs-root, breaks-testbed
 Test-Command: PYTHONPATH='/usr/lib/python3/dist-packages/' py.test-3 -p no:cacheprovider --cov=plinth --cov-report=html:debci/htmlcov --cov-report=term
 Depends: e2fsprogs, git, python3-pytest, python3-pytest-cov, python3-pytest-django, @
 Restrictions: breaks-testbed
+
+#
+# Try to access the FreedomBox web interface.
+#
+# iptables package installs alternatives files, with iptables-nft as default alternative.
+# Without it, firewalld has this error: INVALID_IPV: 'ipv4' is not a valid backend or is unavailable
+#
+Tests: access-web-interface
+Depends: iptables, @
+Restrictions: needs-root, isolation-machine, breaks-testbed

doc/manual/en/Passkeys.raw.wiki

@@ -1,7 +1,7 @@
 #language en
 
 ##TAG:TRANSLATION-HEADER-START
-~- [[FreedomBox/Guide/Passkeys|English]] - [[DebianWiki/EditorGuide#translation|(+)]] -~
+~- [[FreedomBox/Guide/Passkeys|English]] - [[es/FreedomBox/Guide/Passkeys|Español]] - [[DebianWiki/EditorGuide#translation|(+)]] -~
 ##TAG:TRANSLATION-HEADER-END
 
 <<TableOfContents>>

doc/manual/en/ReleaseNotes.raw.wiki

@@ -8,6 +8,23 @@ For more technical details, see the [[https://salsa.debian.org/freedombox-team/f
 
 The following are the release notes for each !FreedomBox version.
 
+== FreedomBox 26.8 (2026-05-11) ==
+
+ * locale: Update translations for German, Italian
+ * api: Drop access-info API
+
+== FreedomBox 26.7.1 (2026-04-28) ==
+
+ * radicale, bepasty: Fix issue with failed diagnostic test
+ * radicale: Enable lc_username for case-insensitive auth
+ * radicale: Fix issue with parsing new configuration file
+ * radicale: tests: functional: Better checking for well-known URLs
+
+== FreedomBox 26.7 (2026-04-20) ==
+
+ * debian: tests: Add test to access interface status
+ * locale: Update translations for Albanian, Chinese (Simplified Han script), Czech, French, German, Italian, Swedish, Turkish
+
 == FreedomBox 26.6 (2026-04-06) ==
 
 === Highlights ===

doc/manual/en/Users.raw.wiki

@@ -1,6 +1,11 @@
 #language en
 
+##For Translators - to have a constantly up to date translation header in you page, you can just add a line like the following (with the comment's character at the start of the line removed)
+## <<Include(sudo, ,from="^##TAG:TRANSLATION-HEADER-START",to="^##TAG:TRANSLATION-HEADER-END")>>
+##TAG:TRANSLATION-HEADER-START
 ~- [[DebianWiki/EditorGuide#translation|Translation(s)]]: English - [[es/FreedomBox/Manual/Users|Español]] -~
+##TAG:TRANSLATION-HEADER-END
+----
 
 <<TableOfContents()>>
 

doc/manual/es/Passkeys.raw.wiki

@@ -0,0 +1,174 @@
+#language es
+
+<<Include(FreedomBox/Guide/Passkeys, ,from="^##TAG:TRANSLATION-HEADER-START",to="^##TAG:TRANSLATION-HEADER-END")>>
+
+<<TableOfContents>>
+
+## BEGIN_INCLUDE
+
+== Usa claves de acceso (passkeys) para mejorar la seguridad de inicio de sesión ==
+
+{{{#!wiki tip
+Se recomiendan encarecidamente las claves de acceso frente a las contraseñas.
+}}}
+
+'''Disponible desde''': !FreedomBox 26.6
+
+!FreedomBox permite a los usuarios iniciar sesión en su cuenta con claves de acceso.
+Las claves de acceso son una forma de verificar la identidad del usuario usando firmas digitales. Son una alternativa más segura que las contraseñas.
+La información secreta se conserva con el usuario en su teléfono, portátil o en un token hardware y se desbloquea mediante un PIN, huella dactilar o reconocimiento facial.
+No se almacenan secretos en el servidor. El servidor solo conoce la información pública que puede usarse para verificar las firmas del usuario.
+
+=== ¿Cómo funcionan las claves de acceso? ===
+
+Después de que el usuario inicie sesión en su cuenta, se puede añadir una o más claves de acceso a la cuenta desde la página "Administrar claves de acceso".
+Al añadir una clave de acceso, el hardware de la clave de acceso (o autenticador) generará un par de claves pública/privada vinculado al dominio y a la cuenta de usuario.
+La clave privada se mantiene en el hardware y la clave pública se proporciona al servidor. El servidor almacena la clave pública junto con la cuenta de usuario.
+Más tarde, cuando un usuario intenta iniciar sesión en su cuenta, el servidor envía una larga cadena aleatoria al autenticador llamada santo (santo y seña).
+El hardware firma digitalmente el santo con la clave privada y la envía (la seña) al servidor.
+El servidor puede verificar que la firma la ha hecho el poseedor de la clave privada usando solo la clave pública que tiene (esto es una propiedad de los pares de claves pública/privada).
+Una vez verificada, el servidor inicia sesión en la cuenta de usuario asociada a esa clave pública.
+
+Durante este proceso, el navegador actúa como intermediario de confianza entre el hardware de la clave de acceso y el servidor.
+Garantiza que el usuario se verifique proporcionando PIN, huella, reconocimiento facial, etc.
+También garantiza que una clave de acceso solo se use con el dominio para el que está destinada.
+
+=== Mejor seguridad ===
+
+Las claves de acceso ofrecen mayor seguridad que las contraseñas:
+
+ * '''Autenticación multifactor''': Durante el registro de una clave de acceso y durante el inicio de sesión,
+   !FreedomBox solicita que el navegador verifique al usuario.
+   Esto significa que el usuario necesitará desbloquear el dispositivo autenticador proporcionando un PIN, huella o reconocimiento facial.
+   Esto actúa como uno de los factores de autenticación: "algo que sabes" o "algo que eres".
+   Otro factor de autenticación es "algo que tienes": el hardware que almacena tu clave de acceso (como Solokey, Nitrokey o Yubikey) o un teléfono.
+   Juntos, esto es similar a usar una contraseña con un segundo factor de autenticación.
+   Por tanto, las claves de acceso pueden reemplazar la autenticación en dos pasos siendo mucho más cómodas y fáciles de usar.
+
+ * '''Sin reutilización''': Las claves de acceso nunca se reutilizan. Para cada dominio se genera y usa una clave de acceso separada.
+   Los navegadores aseguran que la clave de acceso de un dominio nunca se use con otro dominio.
+   A diferencia de las contraseñas reutilizadas, cuando un sitio web o servicio se ve comprometido, los maleantes no pueden usar eso para acceder a tu cuenta en otro sitio o servicio.
+   Esto también previene ataques de phishing donde sitios impotores se hacen pasar por sitios legítimos.
+
+ * '''No hay secretos en el servidor''': El sitio que permite el uso de claves de acceso para el inicio de sesión no almacena información secreta.
+   Solo guarda la parte pública de la clave de acceso. Si esta información es obtenida por un adversario, no podrá iniciar sesión en el sitio.
+   Solo la clave privada almacenada en el dispositivo autenticador puede usarse para iniciar sesión
+   (ya que solo una clave privada puede crear las firmas necesarias para el proceso de inicio de sesión).
+
+ * '''No adivinación''': La parte secreta de una clave de acceso es mucho más dificil de adivinar que una contraseña.
+   No existe el riesgo de que alguien adivine tu contraseña y acceda a tu cuenta.
+   No existe el riesgo de que configures accidentalmente una contraseña predecible.
+
+ * '''Comodidad''': Los usuarios no necesitan recordar nombre de usuario, correo electrónico o un secreto para iniciar sesión en un sitio.
+   No necesitan recibir OTP por SMS o correo, usar una app TOTP ni confirmar el inicio desde una app móvil.
+   Tras hacer clic en el botón "Login mediante clave de acceso", desbloquean su autenticador con un PIN, huella o reconocimiento facial.
+   Luego tocan físicamente el autenticador (si es necesario). El usuario queda entonces autenticado. Hay menos cosas que recordar.
+   Incluso el PIN de un autenticador hardware suele ser más fácil de recordar que una contraseña.
+   Esta comodidad anima a los usuarios a usar este mecanismo, lo que a la larga mejora la seguridad.
+
+=== Hardware necesario para claves de acceso  ===
+
+{{{#!wiki tip
+'''El proyecto !FreedomBox recomienda [[https://solokeys.com/|Solokeys]]''' para el almacenamiento de claves de acceso:
+
+ * El [[https://github.com/solokeys/solo2|firmware]] (el sistema operativo del hardware) es software libre.
+ * Los [[https://github.com/solokeys/solo2-hw|diseños del hardware]] también son libres.
+ * El equipo de Solokeys y el equipo de !FreedomBox colaboran entre sí.
+}}}
+
+Hay varias formas de empezar con claves de acceso:
+
+ * '''Hardware de claves de acceso separado''': La forma recomendada de almacenar claves de acceso es en una llave hardware específica.
+   En esta configuración, la clave privada de la clave de acceso nunca abandona el dispositivo hardware.
+   Además, suelen estar diseñadas para que sea difícil para un atacante con acceso físico extraer la clave de acceso.
+   Otra ventaja de estos dispositivos es que pueden utilizarse con todos tus dispositivos existentes, como teléfonos, portátiles y escritorios.
+   Estos dispositivos interactúan con teléfonos y equipos mediante USB, Bluetooth o NFC.
+   En caso de NFC, el dispositivo funciona por proximidad con el teléfono sin energía adicional.
+   Al usar un hardware separado, sin embargo, debes tener un método de respaldo para iniciar sesión si pierdes el dispositivo hardware.
+   Esto puede ser otra clave de acceso en otro hardware o una contraseña. Ver la sección de copia de seguridad más abajo.
+
+ * '''Hardware empotrado para claves de acceso''': Cuando no hay un dispositivo hardware separado, es preferible el hardware especializado, como un TPM, integrado en el equipo.
+   Esta configuración seguirá asegurando que las claves de acceso no abandonen el hardware.
+   Una desventaja es que la clave de acceso solo funciona con ese equipo y tendrás que registrar cada dispositivo que uses por separado.
+
+ * '''Administradores de contraseñas''': Como último recurso, se pueden usar gestores de contraseñas que soporten claves de acceso y funcionen con tu navegador o sistema operativo.
+   Android, iOS y Windows ofrecen administradores así.
+   Las claves de acceso guardadas en administradores suelen sincronizarse con la nube y una brecha en ese servicio/cuenta podría comprometer todas tus cuentas.
+   Sin embargo, funcionan en múltiples dispositivos y normalmente no tienes que preocuparte por perder un solo dispositivo hardware.
+
+=== Nombrar tu clave de acceso ===
+
+En !FreedomBox, cuando se añade una clave de acceso a tu cuenta, por defecto se nombra 'Key 1'. La siguiente se llamará 'Key 2' y así sucesivamente.
+Sin embargo, es buena práctica nombrarlas para saber en qué dispositivo están almacenadas. Por ejemplo, puedes llamarlas 'Clave del Solokey primario', 'Clave del tfn Android', etc.
+Si se pierde un dispositivo, puedes iniciar sesión y eliminar esa clave de la lista de claves de acceso asociadas a tu cuenta.
+
+=== Múltiples dominios ===
+
+Cada clave de acceso está estrictamente ligada a un dominio y nunca se usa para otro dominio. Esto es necesario para evitar que un dominio impostor pueda suplantar a uno legítimo.
+Por tanto, si tu !FreedomBox está configurada con múltiples dominios, el navegador y el dispositivo autenticador tratarán cada dominio como cuentas separadas a efectos de autenticación con claves de acceso.
+Esto significa que debes registrar claves de acceso separadas para cada uno de tus dominios.
+
+Por ejemplo, supón que tu !FreedomBox tiene configurados los dominios midominio1.fbx.one y midominio2.ejemplo.
+Visita midominio1.fbx.one, inicia sesión en tu cuenta y añade una clave de acceso. Esta clave de acceso quedará ligada a ese dominio.
+Cuando intentes iniciar sesión, la clave de acceso funcionará si accedes a midominio1.fbx.one pero no funcionará al acceder a midominio2.ejemplo.
+Para hacer que el segundo dominio funcione, necesitas añadir una segunda clave de acceso mientras accedes a tu !FreedomBox con el nombre de dominio midominio2.ejemplo.
+Entonces se almacenarán dos claves de acceso en tu token hardware. La primera estará ligada a midominio1.fbx.one y solo se usará cuando accedas a ese dominio.
+La segunda estará ligada a midominio2.ejemplo y solo se usará cuando accedas a ese dominio.
+
+=== Múltiples cuentas de usuario ===
+
+Cuando usas un hardware de claves de acceso para varias cuentas de usuario en el mismo !FreedomBox, se crearán claves de acceso separadas para cada cuenta.
+A cada clave de acceso se le asignará el nombre de usuario de la cuenta a la que esté ligada. Esta información se almacena en la clave de acceso así como en el servidor.
+Durante el inicio de sesión, el navegador te pedirá que selecciones la cuenta de usuario a la que quieres acceder.
+Si solo existe una clave de acceso para un dominio dado, no se mostrará el diálogo de selección y el usuario iniciará sesión en la cuenta correspondiente a esa clave de acceso.
+
+=== Copia de seguridad de la clave de acceso ===
+
+En caso de pérdida del dispositivo que almacena tu clave de acceso, necesitas métodos alternativos para iniciar sesión en tu cuenta:
+
+ 1. Puedes registrar y mantener dos claves de acceso en dos dispositivos separados. Por ejemplo, tu clave de acceso primaria podría estar en un token Solokey y
+    la segunda en un teléfono Android o en otro token Solokey. Si uno se pierde, puedes iniciar sesión con el otro. Este es el método recomendado.
+
+ 1. !FreedomBox sigue soportando contraseñas incluso después de registrar claves de acceso.
+    Así que, si se pierde un dispositivo con clave de acceso, puedes iniciar sesión con una contraseña.
+
+ 1. Si olvidas tu contraseña y tu cuenta no es la única cuenta administradora en el !FreedomBox, puedes pedir a un administrador que restablezca tu contraseña.
+    Después de eso podrás registrar una nueva clave de acceso almacenada en un nuevo dispositivo.
+
+=== Plataformas compatibles ===
+
+Las passkeys se basan en WebAuthn, un estándar publicado por el World Wide Web Consortium.
+Por tanto, la implementación de !FreedomBox debería funcionar allí donde funcionen las clave de acceso. Se ha probado de la siguiente manera:
+
+|| '''SO/Dispositivo''' || '''Navegador''' || '''Autenticador''' || '''Resultado''' ||
+|| GNU/Linux || Firefox || Solokeys || Ok ||
+|| GNU/Linux || Firefox || Yubikey || Ok ||
+|| GNU/Linux || Chromium || Solokeys || Ok ||
+|| GNU/Linux || GNOME Web || - || KO (El navegador no soporta WebAuthn) ||
+|| Windows || Firefox || Windows Hello || Ok ||
+|| Windows || Firefox || Solokeys || Ok ||
+|| Windows || Firefox || Android Phone || Ok ||
+|| Windows || Chrome || Windows Hello || Ok ||
+|| Windows || Chrome || Solokeys || Ok ||
+|| Windows || Chrome || Android Phone || Ok ||
+|| Windows || Edge || Windows Hello || Ok ||
+|| Windows || Edge || Solokeys || Ok ||
+|| Windows || Edge || Android Phone || Ok ||
+|| Android || Firefox || Google Password Manager || Ok ||
+|| Android || Firefox || Solokeys USB || KO (No se detecta el toque tras introducir el PIN) ||
+|| Android || Firefox || Solokeys NFC || KO (Es necesario entender la configuración NFC) ||
+|| Android || Firefox || Otro dispositivo || Sin probar ||
+|| Android || Chrome || Google Password Manager || Ok ||
+|| Android || Chrome || Solokeys USB || KO (No se detecta el toque tras introducir el PIN) ||
+|| Android || Chrome || Solokeys NFC || KO (Es necesario entender la configuración NFC) ||
+|| Android || Chrome || Otro dispositivo || Sin probar ||
+
+## END_INCLUDE
+
+Volver a la [[es/FreedomBox/Features|descripción de Funcionalidades]] o a las páginas del [[es/FreedomBox/Manual|manual]].
+
+
+<<Include(es/FreedomBox/Portal)>>
+
+----
+CategoryFreedomBox

doc/manual/es/ReleaseNotes.raw.wiki

@@ -8,6 +8,23 @@ For more technical details, see the [[https://salsa.debian.org/freedombox-team/f
 
 The following are the release notes for each !FreedomBox version.
 
+== FreedomBox 26.8 (2026-05-11) ==
+
+ * locale: Update translations for German, Italian
+ * api: Drop access-info API
+
+== FreedomBox 26.7.1 (2026-04-28) ==
+
+ * radicale, bepasty: Fix issue with failed diagnostic test
+ * radicale: Enable lc_username for case-insensitive auth
+ * radicale: Fix issue with parsing new configuration file
+ * radicale: tests: functional: Better checking for well-known URLs
+
+== FreedomBox 26.7 (2026-04-20) ==
+
+ * debian: tests: Add test to access interface status
+ * locale: Update translations for Albanian, Chinese (Simplified Han script), Czech, French, German, Italian, Swedish, Turkish
+
 == FreedomBox 26.6 (2026-04-06) ==
 
 === Highlights ===

doc/manual/es/Users.raw.wiki

@@ -1,6 +1,6 @@
 #language es
 
-~- [[DebianWiki/EditorGuide#translation|Translation(s)]]: [[FreedomBox/Manual/Users|English]] - Español -~
+<<Include(FreedomBox/Manual/Users, ,from="^##TAG:TRANSLATION-HEADER-START",to="^##TAG:TRANSLATION-HEADER-END")>>
 
 <<TableOfContents()>>
 
@@ -9,25 +9,36 @@
 == Usuarios y Grupos ==
 
 Puedes otorgar acceso a tu !FreedomBox a otros usuarios. Proporciona el nombre del usuario y su contraseña y asignale un grupo. Actualmente se soportan los grupos
+Esta app puede usarse para crear, editar y eliminar cuentas de usuario en !FreedomBox. Muchas apps con interfaz web en !FreedomBox admiten inicio de sesión único mediante OpenID Connect.
+Esto significa que si has iniciado sesión en la interfaz web de !FreedomBox, no es necesario iniciar sesión de forma separada en la app.
+Otras apps permiten usar las cuentas de !FreedomBox mediante LDAP.
+Finalmente, hay algunas apps que gestionan sus propias cuentas de usuario de forma independiente a las cuentas que tengas en !FreedomBox.
+
+
+
+Puedes otorgar acceso a tu FreedomBox a otros usuarios. Proporciona el nombre del usuario y su contraseña y asignale un grupo. Actualmente se soportan los grupos:
  * admin
  * bit-torrent
  * calibre
- * ed2k
  * feed-reader
  * freedombox-share
+ * freedombox-ssh
  * git-access
- * minidlna
+ * kiwix
- * syncthing
+ * syncthing-access
+ * vpn
  * web-search
  * wiki
 
-El usuario podrá ingresar a los servicios que soporten ingreso único (single-sign-on) mediante LDAP si figuran en el grupo apropriado.
+Los usuarios del grupo admin podrán ingresar en todos los servicios.
+También podrán acceder al sistema vía SSH y tendrán privilegios administrativos (sudo).
+Los grupos de un usuario pueden modificarse más adelante.
 
-Los usuarios del grupo `admin` podrán ingresar en todos los servicios. También pueden ingresar al sistema por SSH y escalar a privilegios administrativos (sudo).
+!FreedomBox admite el inicio de sesión con claves de acceso.
+Las claves de acceso son una alternativa más segura que las contraseñas y son la forma recomendada de autenticarse en !FreedomBox.
+Lee más en la [[FreedomBox/Guide/Passkeys|guía de claves de acceso de FreedomBox]].
 
-Estas características se pueden cambiar más tarde. 
+Asimismo es posible establecer una clave pública SSH que permitirá al usuario ingresar al sistema de modo seguro sin emplear su contraseña. Puedes dar de alta varias claves, una en cada línea. Las líneas en blanco o que comiencen por # se ignoran.
-
-Asimismo es posible establecer una clave pública SSH que permitirá al usuario ingresar al sistema de modo seguro sin emplear su contraseña. Pueder dar de alta varias claves, una en cada línea. Las líneas en blanco o que comiencen por # se ignoran.
 
 El idioma de la interfaz se puede establecer individualmente para cada usuario. Por omisión se emplea el del navegador.
 

doc/manual/es/freedombox-manual.raw.wiki

@@ -80,6 +80,7 @@
 <<Include(es/FreedomBox/Manual/Users,            , from="## BEGIN_INCLUDE", to="## END_INCLUDE")>>
 
 = Guías =
+<<Include(es/FreedomBox/Guide/Passkeys,          , from="## BEGIN_INCLUDE", to="## END_INCLUDE")>>
 <<Include(es/FreedomBox/Guide/ExposeLocalService,, from="## BEGIN_INCLUDE", to="## END_INCLUDE")>>
 
 = Hardware =

plinth/__init__.py

@@ -3,4 +3,4 @@
 Package init file.
 """
 
-__version__ = '26.6'
+__version__ = '26.8'

plinth/action_utils.py

@@ -120,14 +120,6 @@ def service_disable(service_name: str, check: bool = False):
     except subprocess.CalledProcessError:
         pass
 
-    if service_name.endswith('.socket'):
-        # Instead, may need to query the unit for associated .service file.
-        base_name = service_name.rpartition('.')[0]
-        try:
-            service_stop(f'{base_name}.service', check=check)
-        except subprocess.CalledProcessError:
-            pass
-
 
 def service_mask(service_name: str, check: bool = False):
     """Mask a service"""
@@ -143,25 +135,62 @@ def service_start(service_name: str, check: bool = False):
     """Start a service with systemd."""
     service_action(service_name, 'start', check=check)
 
+    # When starting a .socket unit, there is not need to start the .service
+    # unit as it will be automatically started when a request is received on
+    # the socket.
+
+
+def _get_service_unit(socket_name: str) -> str:
+    """Return the .service unit name for a .socket unit."""
+    # Instead, may need to query the unit for associated .service file.
+    base_name = socket_name.rpartition('.')[0]
+    return f'{base_name}.service'
+
 
 def service_stop(service_name: str, check: bool = False):
     """Stop a service with systemd."""
     service_action(service_name, 'stop', check=check)
 
+    # When stopping a .socket unit, most of the time, we must also stop
+    # .service unit. This frees up resources when disabling the app. It also
+    # stops using resources that are being backed up.
+    if service_name.endswith('.socket'):
+        service_action(_get_service_unit(service_name), 'stop', check=check)
+
 
 def service_restart(service_name: str, check: bool = False):
     """Restart a service with systemd."""
+    if not service_name.endswith('.socket'):
         service_action(service_name, 'restart', check=check)
+    else:
+        # When restarting a .socket unit, most of the time, we actually want to
+        # restart the corresponding .service unit. This reloads the
+        # configuration changes as needed. To restart, all we need to do stop
+        # the service. It will be automatically started again by .socket unit.
+        service_action(_get_service_unit(service_name), 'stop', check=check)
 
 
 def service_try_restart(service_name: str, check: bool = False):
     """Try to restart a service with systemd."""
+    if not service_name.endswith('.socket'):
         service_action(service_name, 'try-restart', check=check)
+    else:
+        # When try-restarting a .socket unit, most of the time, we actually
+        # want to restart the corresponding .service unit. This reloads the
+        # configuration changes as needed. To restart, all we need to do stop
+        # the service. It will be automatically started again by .socket unit.
+        service_action(_get_service_unit(service_name), 'stop', check=check)
 
 
 def service_reload(service_name: str, check: bool = False):
     """Reload a service with systemd."""
+    if not service_name.endswith('.socket'):
         service_action(service_name, 'reload', check=check)
+    else:
+        # When reloading a .socket unit, most of the time, we actually want to
+        # reload the corresponding .service unit. This reloads the
+        # configuration changes as needed.
+        service_action(_get_service_unit(service_name), 'reload', check=check)
 
 
 def service_try_reload_or_restart(service_name: str, check: bool = False):
@@ -169,7 +198,14 @@ def service_try_reload_or_restart(service_name: str, check: bool = False):
 
     Do nothing if service is not running.
     """
+    if not service_name.endswith('.socket'):
         service_action(service_name, 'try-reload-or-restart', check=check)
+    else:
+        # When reloading a .socket unit, most of the time, we actually want to
+        # reload the corresponding .service unit. This reloads the
+        # configuration changes as needed.
+        service_action(_get_service_unit(service_name),
+                       'try-reload-or-restart', check=check)
 
 
 def service_reset_failed(service_name: str, check: bool = False):

plinth/locale/ar/LC_MESSAGES/django.po

@@ -7,7 +7,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-04-07 00:12+0000\n"
+"POT-Creation-Date: 2026-04-28 22:01+0000\n"
 "PO-Revision-Date: 2025-04-16 02:28+0000\n"
 "Last-Translator: MohammedSaalif <2300031323@kluniversity.in>\n"
 "Language-Team: Arabic <https://hosted.weblate.org/projects/freedombox/"
@@ -6386,7 +6386,7 @@ msgstr ""
 msgid "IRC"
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:27
+#: plinth/modules/radicale/__init__.py:26
 #, python-brace-format
 msgid ""
 "Radicale is a CalDAV and CardDAV server. It allows synchronization and "
@@ -6395,14 +6395,14 @@ msgid ""
 "a> is needed. Radicale can be accessed by any user with a {box_name} login."
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:33
+#: plinth/modules/radicale/__init__.py:32
 msgid ""
 "Radicale provides a basic web interface, which only supports creating new "
 "calendars and addressbooks. It does not support adding events or contacts, "
 "which must be done using a separate client."
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:55
+#: plinth/modules/radicale/__init__.py:52
 #: plinth/modules/radicale/manifest.py:74
 msgid "Radicale"
 msgstr ""

plinth/locale/ar_SA/LC_MESSAGES/django.po

@@ -7,7 +7,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-04-07 00:12+0000\n"
+"POT-Creation-Date: 2026-04-28 22:01+0000\n"
 "PO-Revision-Date: 2020-06-10 15:41+0000\n"
 "Last-Translator: aiman an <an1f3@hotmail.com>\n"
 "Language-Team: Arabic (Saudi Arabia) <https://hosted.weblate.org/projects/"
@@ -6390,7 +6390,7 @@ msgstr ""
 msgid "IRC"
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:27
+#: plinth/modules/radicale/__init__.py:26
 #, python-brace-format
 msgid ""
 "Radicale is a CalDAV and CardDAV server. It allows synchronization and "
@@ -6399,14 +6399,14 @@ msgid ""
 "a> is needed. Radicale can be accessed by any user with a {box_name} login."
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:33
+#: plinth/modules/radicale/__init__.py:32
 msgid ""
 "Radicale provides a basic web interface, which only supports creating new "
 "calendars and addressbooks. It does not support adding events or contacts, "
 "which must be done using a separate client."
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:55
+#: plinth/modules/radicale/__init__.py:52
 #: plinth/modules/radicale/manifest.py:74
 msgid "Radicale"
 msgstr ""

plinth/locale/be/LC_MESSAGES/django.po

@@ -7,7 +7,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-04-07 00:12+0000\n"
+"POT-Creation-Date: 2026-04-28 22:01+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: Automatically generated\n"
 "Language-Team: none\n"
@@ -6340,7 +6340,7 @@ msgstr ""
 msgid "IRC"
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:27
+#: plinth/modules/radicale/__init__.py:26
 #, python-brace-format
 msgid ""
 "Radicale is a CalDAV and CardDAV server. It allows synchronization and "
@@ -6349,14 +6349,14 @@ msgid ""
 "a> is needed. Radicale can be accessed by any user with a {box_name} login."
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:33
+#: plinth/modules/radicale/__init__.py:32
 msgid ""
 "Radicale provides a basic web interface, which only supports creating new "
 "calendars and addressbooks. It does not support adding events or contacts, "
 "which must be done using a separate client."
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:55
+#: plinth/modules/radicale/__init__.py:52
 #: plinth/modules/radicale/manifest.py:74
 msgid "Radicale"
 msgstr ""

plinth/locale/bg/LC_MESSAGES/django.po

@@ -7,7 +7,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-04-07 00:12+0000\n"
+"POT-Creation-Date: 2026-04-28 22:01+0000\n"
 "PO-Revision-Date: 2025-12-17 07:00+0000\n"
 "Last-Translator: 109247019824 "
 "<109247019824@users.noreply.hosted.weblate.org>\n"
@@ -6686,7 +6686,7 @@ msgstr "Quasseldroid"
 msgid "IRC"
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:27
+#: plinth/modules/radicale/__init__.py:26
 #, python-brace-format
 msgid ""
 "Radicale is a CalDAV and CardDAV server. It allows synchronization and "
@@ -6695,14 +6695,14 @@ msgid ""
 "a> is needed. Radicale can be accessed by any user with a {box_name} login."
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:33
+#: plinth/modules/radicale/__init__.py:32
 msgid ""
 "Radicale provides a basic web interface, which only supports creating new "
 "calendars and addressbooks. It does not support adding events or contacts, "
 "which must be done using a separate client."
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:55
+#: plinth/modules/radicale/__init__.py:52
 #: plinth/modules/radicale/manifest.py:74
 msgid "Radicale"
 msgstr "Radicale"

plinth/locale/bn/LC_MESSAGES/django.po

@@ -7,7 +7,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-04-07 00:12+0000\n"
+"POT-Creation-Date: 2026-04-28 22:01+0000\n"
 "PO-Revision-Date: 2025-04-01 03:02+0000\n"
 "Last-Translator: MURALA SAI GANESH <saiganeshmurala@gmail.com>\n"
 "Language-Team: Bengali <https://hosted.weblate.org/projects/freedombox/"
@@ -6409,7 +6409,7 @@ msgstr ""
 msgid "IRC"
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:27
+#: plinth/modules/radicale/__init__.py:26
 #, python-brace-format
 msgid ""
 "Radicale is a CalDAV and CardDAV server. It allows synchronization and "
@@ -6418,14 +6418,14 @@ msgid ""
 "a> is needed. Radicale can be accessed by any user with a {box_name} login."
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:33
+#: plinth/modules/radicale/__init__.py:32
 msgid ""
 "Radicale provides a basic web interface, which only supports creating new "
 "calendars and addressbooks. It does not support adding events or contacts, "
 "which must be done using a separate client."
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:55
+#: plinth/modules/radicale/__init__.py:52
 #: plinth/modules/radicale/manifest.py:74
 msgid "Radicale"
 msgstr ""

plinth/locale/ca/LC_MESSAGES/django.po

@@ -7,7 +7,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-04-07 00:12+0000\n"
+"POT-Creation-Date: 2026-04-28 22:01+0000\n"
 "PO-Revision-Date: 2026-02-06 23:02+0000\n"
 "Last-Translator: kosagi <marti.torra@natana.cat>\n"
 "Language-Team: Catalan <https://hosted.weblate.org/projects/freedombox/"
@@ -7170,7 +7170,7 @@ msgstr ""
 msgid "IRC"
 msgstr "IRC"
 
-#: plinth/modules/radicale/__init__.py:27
+#: plinth/modules/radicale/__init__.py:26
 #, python-brace-format
 msgid ""
 "Radicale is a CalDAV and CardDAV server. It allows synchronization and "
@@ -7179,14 +7179,14 @@ msgid ""
 "a> is needed. Radicale can be accessed by any user with a {box_name} login."
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:33
+#: plinth/modules/radicale/__init__.py:32
 msgid ""
 "Radicale provides a basic web interface, which only supports creating new "
 "calendars and addressbooks. It does not support adding events or contacts, "
 "which must be done using a separate client."
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:55
+#: plinth/modules/radicale/__init__.py:52
 #: plinth/modules/radicale/manifest.py:74
 msgid "Radicale"
 msgstr "Radicale"

plinth/locale/cs/LC_MESSAGES/django.po

@@ -7,8 +7,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-04-07 00:12+0000\n"
+"POT-Creation-Date: 2026-04-28 22:01+0000\n"
-"PO-Revision-Date: 2026-03-08 18:48+0000\n"
+"PO-Revision-Date: 2026-04-09 10:09+0000\n"
 "Last-Translator: Jiří Podhorecký <j.podhorecky@volny.cz>\n"
 "Language-Team: Czech <https://hosted.weblate.org/projects/freedombox/"
 "freedombox/cs/>\n"
@@ -7160,7 +7160,7 @@ msgstr "Quasseldroid"
 msgid "IRC"
 msgstr "IRC"
 
-#: plinth/modules/radicale/__init__.py:27
+#: plinth/modules/radicale/__init__.py:26
 #, python-brace-format
 msgid ""
 "Radicale is a CalDAV and CardDAV server. It allows synchronization and "
@@ -7174,7 +7174,7 @@ msgstr ""
 "klientská aplikace</a>. K Radicale má přístup každý uživatel s přihlašovacím "
 "jménem {box_name}."
 
-#: plinth/modules/radicale/__init__.py:33
+#: plinth/modules/radicale/__init__.py:32
 msgid ""
 "Radicale provides a basic web interface, which only supports creating new "
 "calendars and addressbooks. It does not support adding events or contacts, "
@@ -7184,7 +7184,7 @@ msgstr ""
 "nových kalendářů a adresářů kontaktů. Nepodporuje přidávání událostí či "
 "kontaktů, to je třeba dělat v tomu určeném klientovi."
 
-#: plinth/modules/radicale/__init__.py:55
+#: plinth/modules/radicale/__init__.py:52
 #: plinth/modules/radicale/manifest.py:74
 msgid "Radicale"
 msgstr "Radicale"
@@ -9782,14 +9782,12 @@ msgstr "Upravit uživatele %(username)s"
 
 #: plinth/modules/users/templates/users_login.html:30
 msgid "Logging in with passkey failed: "
-msgstr ""
+msgstr "Přihlášení pomocí passkey se nezdařilo: "
 
 #: plinth/modules/users/templates/users_login.html:41
 #: plinth/modules/users/templates/users_passkeys.html:41
-#, fuzzy
-#| msgid "This app does not support diagnostics"
 msgid "Browser does not support passkeys."
-msgstr "Tato aplikace nepodporuje diagnostiku"
+msgstr "Prohlížeč nepodporuje přístupové klíče."
 
 #: plinth/modules/users/templates/users_login.html:57
 msgid "Login"
@@ -9798,28 +9796,29 @@ msgstr "Přihlášení"
 #: plinth/modules/users/templates/users_login.html:70
 #: plinth/modules/users/templates/users_login.html:72
 msgid "Log in with passkey"
-msgstr ""
+msgstr "Přihlásit se pomocí přístupového klíče"
 
 #: plinth/modules/users/templates/users_passkey_edit.html:19
-#, fuzzy
-#| msgid "Update setup"
 msgid "Update Passkey"
-msgstr "Aktualizovat nastavení"
+msgstr "Aktualizovat přístupový klíč"
 
 #: plinth/modules/users/templates/users_passkeys.html:30
 msgid "Adding passkey failed: "
-msgstr ""
+msgstr "Přidání přístupového klíče selhalo: "
 
 #: plinth/modules/users/templates/users_passkeys.html:48
 #: plinth/modules/users/views.py:314
 msgid "Passkeys"
-msgstr ""
+msgstr "Přístupové klíče"
 
 #: plinth/modules/users/templates/users_passkeys.html:57
 msgid ""
 "Working with passkeys requires using browser's Javascript API. Please enable "
 "Javascript support in your browser to continue."
 msgstr ""
+"Práce s přístupovými klíči vyžaduje použití rozhraní JavaScript API "
+"prohlížeče. Chcete-li pokračovat, povolte ve svém prohlížeči podporu jazyka "
+"JavaScript."
 
 #: plinth/modules/users/templates/users_passkeys.html:66
 msgid ""
@@ -9830,47 +9829,46 @@ msgid ""
 "server knows only the public information that can used to verify user's "
 "signatures."
 msgstr ""
+"Přístupové klíče jsou způsob, jak ověřit identitu uživatele pomocí "
+"digitálních podpisů. Jsou bezpečnější alternativou k heslům. Tajné informace "
+"jsou uchovávány u uživatele v jeho telefonu, notebooku nebo hardwarovém "
+"tokenu a odemykají se pomocí PINu, otisku prstu nebo identifikace obličeje. "
+"Na serveru nejsou uloženy žádné tajné informace. Server zná pouze veřejné "
+"informace, které lze použít k ověření podpisů uživatele."
 
 #: plinth/modules/users/templates/users_passkeys.html:83
 #: plinth/modules/users/templates/users_passkeys.html:85
-#, fuzzy
-#| msgid "Add password"
 msgid "Add passkey"
-msgstr "Přidat heslo"
+msgstr "Přidat přístupový klíč"
 
 #: plinth/modules/users/templates/users_passkeys.html:93
-#, fuzzy
-#| msgid "Domain"
 msgid "For Domain"
-msgstr "Doména"
+msgstr "Pro doménu"
 
 #: plinth/modules/users/templates/users_passkeys.html:94
 msgid "Added"
-msgstr ""
+msgstr "Přidáno"
 
 #: plinth/modules/users/templates/users_passkeys.html:95
-#, fuzzy
-#| msgid "Last scanned: "
 msgid "Last Used"
-msgstr "Naposledy skenováno: "
+msgstr "Naposledy použito"
 
 #: plinth/modules/users/templates/users_passkeys.html:126
 msgid "No passkeys added to user account."
-msgstr ""
+msgstr "K uživatelskému účtu nebyly přidány žádné přístupové klíče."
 
 #: plinth/modules/users/templates/users_passkeys.html:135
 msgid "Delete passkey <em class=\"passkey-name\"></em>?"
-msgstr ""
+msgstr "Smazat přístupový klíč <em class=\"passkey-name\"></em>?"
 
 #: plinth/modules/users/templates/users_passkeys.html:145
 msgid "You will need this passkey's device to add it back again."
 msgstr ""
+"K opětovnému přidání tohoto přístupového klíče budete potřebovat zařízení."
 
 #: plinth/modules/users/templates/users_passkeys.html:152
-#, fuzzy
-#| msgid "Delete user"
 msgid "Delete passkey"
-msgstr "Smazat uživatele"
+msgstr "Smazat přístupový klíč"
 
 #: plinth/modules/users/templates/users_passkeys.html:155
 #: plinth/modules/users/templates/users_update.html:72
@@ -9886,6 +9884,8 @@ msgstr "Upravit uživatele %(username)s"
 #, python-format
 msgid "Use <a href=\"%(passkeys_url)s\">passkeys</a> for better security."
 msgstr ""
+"Pro lepší zabezpečení použijte <a href=\"%(passkeys_url)s\">přístupové "
+"klíče</a>."
 
 #: plinth/modules/users/templates/users_update.html:29
 #, python-format
@@ -9951,20 +9951,16 @@ msgid "Password changed successfully."
 msgstr "Heslo úspěšně změněno."
 
 #: plinth/modules/users/views.py:420
-#, fuzzy
-#| msgid "A share with this name already exists."
 msgid "Passkey with that identifier already exists."
-msgstr "Sdílení s tímto názvem už existuje."
+msgstr "Přístupový klíč s tímto identifikátorem již existuje."
 
 #: plinth/modules/users/views.py:431
-#, fuzzy
-#| msgid "Edit User"
 msgid "Edit Passkey"
-msgstr "Upravit uživatele"
+msgstr "Upravit přístupový klíč"
 
 #: plinth/modules/users/views.py:518 plinth/modules/users/views.py:542
 msgid "Passkey used is not known."
-msgstr ""
+msgstr "Použitý přístupový klíč není znám."
 
 #: plinth/modules/wireguard/__init__.py:20
 msgid "WireGuard is a fast, modern, secure VPN tunnel."
@@ -10745,10 +10741,8 @@ msgid " System"
 msgstr " Systém"
 
 #: plinth/templates/base.html:179 plinth/templates/base.html:180
-#, fuzzy
-#| msgid "Manage Aliases"
 msgid "Manage passkeys"
-msgstr "Správa aliasů"
+msgstr "Správa přístupových klíčů"
 
 #: plinth/templates/base.html:186 plinth/templates/base.html:187
 msgid "Change password"
@@ -10804,7 +10798,7 @@ msgstr "Mobilní"
 
 #: plinth/templates/clients.html:82
 msgid "Android APK"
-msgstr ""
+msgstr "Android APK"
 
 #: plinth/templates/clients.html:91
 msgid "Play Store"

plinth/locale/da/LC_MESSAGES/django.po

@@ -9,7 +9,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: FreedomBox UI\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-04-07 00:12+0000\n"
+"POT-Creation-Date: 2026-04-28 22:01+0000\n"
 "PO-Revision-Date: 2022-09-14 17:19+0000\n"
 "Last-Translator: ikmaak <info@ikmaak.nl>\n"
 "Language-Team: Danish <https://hosted.weblate.org/projects/freedombox/"
@@ -7365,7 +7365,7 @@ msgstr "Quasseldroid"
 msgid "IRC"
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:27
+#: plinth/modules/radicale/__init__.py:26
 #, fuzzy, python-brace-format
 #| msgid ""
 #| "Radicale is a CalDAV and CardDAV server. It allows synchronization and "
@@ -7385,14 +7385,14 @@ msgstr ""
 "carddav-clients\">understøttet klient-applikation</a>. Radicale kan tilgås "
 "af enhver bruger der har et log ind til {box_name}."
 
-#: plinth/modules/radicale/__init__.py:33
+#: plinth/modules/radicale/__init__.py:32
 msgid ""
 "Radicale provides a basic web interface, which only supports creating new "
 "calendars and addressbooks. It does not support adding events or contacts, "
 "which must be done using a separate client."
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:55
+#: plinth/modules/radicale/__init__.py:52
 #: plinth/modules/radicale/manifest.py:74
 msgid "Radicale"
 msgstr ""

plinth/locale/de/LC_MESSAGES/django.po

@@ -9,8 +9,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: FreedomBox UI\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-04-07 00:12+0000\n"
+"POT-Creation-Date: 2026-04-28 22:01+0000\n"
-"PO-Revision-Date: 2026-03-29 11:09+0000\n"
+"PO-Revision-Date: 2026-05-05 17:11+0000\n"
 "Last-Translator: Dietmar <sagen@permondes.de>\n"
 "Language-Team: German <https://hosted.weblate.org/projects/freedombox/"
 "freedombox/de/>\n"
@@ -19,7 +19,7 @@ msgstr ""
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=n != 1;\n"
-"X-Generator: Weblate 5.17-dev\n"
+"X-Generator: Weblate 5.17.1\n"
 
 #: plinth/config.py:103
 #, python-brace-format
@@ -324,7 +324,7 @@ msgstr ""
 
 #: plinth/modules/backups/forms.py:79
 msgid "Hour of the day to trigger backup operation"
-msgstr "Uhrzeit, zu der der Sicherungsvorgang ausgelöst werden soll"
+msgstr "Uhrzeit für den Start des Sicherungsvorgangs"
 
 #: plinth/modules/backups/forms.py:81
 msgid ""
@@ -7303,7 +7303,7 @@ msgstr "Quasseldroid"
 msgid "IRC"
 msgstr "IRC"
 
-#: plinth/modules/radicale/__init__.py:27
+#: plinth/modules/radicale/__init__.py:26
 #, python-brace-format
 msgid ""
 "Radicale is a CalDAV and CardDAV server. It allows synchronization and "
@@ -7317,7 +7317,7 @@ msgstr ""
 "clients\">unterstützte Client Software</a> notwendig. Radicale kann von "
 "jedem Benutzer mit einem {box_name}-Konto verwendet werden."
 
-#: plinth/modules/radicale/__init__.py:33
+#: plinth/modules/radicale/__init__.py:32
 msgid ""
 "Radicale provides a basic web interface, which only supports creating new "
 "calendars and addressbooks. It does not support adding events or contacts, "
@@ -7328,7 +7328,7 @@ msgstr ""
 "Kontaktdaten wird nicht unterstützt; dies muss über einen separaten Client "
 "erfolgen."
 
-#: plinth/modules/radicale/__init__.py:55
+#: plinth/modules/radicale/__init__.py:52
 #: plinth/modules/radicale/manifest.py:74
 msgid "Radicale"
 msgstr "Radicale"
@@ -9996,14 +9996,12 @@ msgstr "Benutzer %(username)s bearbeiten"
 
 #: plinth/modules/users/templates/users_login.html:30
 msgid "Logging in with passkey failed: "
-msgstr ""
+msgstr "Die Anmeldung mit dem Passkey ist fehlgeschlagen: "
 
 #: plinth/modules/users/templates/users_login.html:41
 #: plinth/modules/users/templates/users_passkeys.html:41
-#, fuzzy
-#| msgid "This app does not support diagnostics"
 msgid "Browser does not support passkeys."
-msgstr "Diese App unterstützt keine Diagnose"
+msgstr "Der Browser unterstützt keine Passkeys."
 
 #: plinth/modules/users/templates/users_login.html:57
 msgid "Login"
@@ -10012,28 +10010,29 @@ msgstr "Anmelden"
 #: plinth/modules/users/templates/users_login.html:70
 #: plinth/modules/users/templates/users_login.html:72
 msgid "Log in with passkey"
-msgstr ""
+msgstr "Mit Passkey anmelden"
 
 #: plinth/modules/users/templates/users_passkey_edit.html:19
-#, fuzzy
-#| msgid "Update setup"
 msgid "Update Passkey"
-msgstr "Übernehmen der Änderungen"
+msgstr "Passkey aktualisieren"
 
 #: plinth/modules/users/templates/users_passkeys.html:30
 msgid "Adding passkey failed: "
-msgstr ""
+msgstr "Hinzufügen des Passkeys ist fehlgeschlagen: "
 
 #: plinth/modules/users/templates/users_passkeys.html:48
 #: plinth/modules/users/views.py:314
 msgid "Passkeys"
-msgstr ""
+msgstr "Passkeys"
 
 #: plinth/modules/users/templates/users_passkeys.html:57
 msgid ""
 "Working with passkeys requires using browser's Javascript API. Please enable "
 "Javascript support in your browser to continue."
 msgstr ""
+"Für die Verwendung von Passkeys ist die JavaScript-API des Browsers "
+"erforderlich. Bitte aktivieren Sie JavaScript in Ihrem Browser, um "
+"fortzufahren."
 
 #: plinth/modules/users/templates/users_passkeys.html:66
 msgid ""
@@ -10044,47 +10043,49 @@ msgid ""
 "server knows only the public information that can used to verify user's "
 "signatures."
 msgstr ""
+"Passkeys sind eine Methode zur Überprüfung der Benutzeridentität mithilfe "
+"digitaler Signaturen. Sie stellen eine sicherere Alternative zu Passwörtern "
+"dar. Die geheimen Informationen werden beim Benutzer auf seinem Smartphone, "
+"Laptop oder einem Hardware-Token gespeichert und mittels PIN, Fingerabdruck "
+"oder Gesichtserkennung entsperrt. Auf dem Server werden keine geheimen "
+"Informationen gespeichert. Der Server kennt lediglich die öffentlichen "
+"Informationen, die zur Überprüfung der Signaturen des Benutzers verwendet "
+"werden können."
 
 #: plinth/modules/users/templates/users_passkeys.html:83
 #: plinth/modules/users/templates/users_passkeys.html:85
-#, fuzzy
-#| msgid "Add password"
 msgid "Add passkey"
-msgstr "Kennwort hinzufügen"
+msgstr "Passkey hinzufügen"
 
 #: plinth/modules/users/templates/users_passkeys.html:93
-#, fuzzy
-#| msgid "Domain"
 msgid "For Domain"
-msgstr "Domain"
+msgstr "Für Domäne"
 
 #: plinth/modules/users/templates/users_passkeys.html:94
 msgid "Added"
-msgstr ""
+msgstr "Hinzugefügt"
 
 #: plinth/modules/users/templates/users_passkeys.html:95
-#, fuzzy
-#| msgid "Last scanned: "
 msgid "Last Used"
-msgstr "Zuletzt gescannt: "
+msgstr "Zuletzt verwendet"
 
 #: plinth/modules/users/templates/users_passkeys.html:126
 msgid "No passkeys added to user account."
-msgstr ""
+msgstr "Dem Benutzerkonto wurden keine Passkeys hinzugefügt."
 
 #: plinth/modules/users/templates/users_passkeys.html:135
 msgid "Delete passkey <em class=\"passkey-name\"></em>?"
-msgstr ""
+msgstr "Passkey <em class=\"passkey-name\"></em> löschen?"
 
 #: plinth/modules/users/templates/users_passkeys.html:145
 msgid "You will need this passkey's device to add it back again."
 msgstr ""
+"Sie benötigen das Gerät, auf dem dieser Passkey gespeichert ist, um ihn "
+"erneut hinzuzufügen."
 
 #: plinth/modules/users/templates/users_passkeys.html:152
-#, fuzzy
-#| msgid "Delete user"
 msgid "Delete passkey"
-msgstr "Benutzer löschen"
+msgstr "Passkey löschen"
 
 #: plinth/modules/users/templates/users_passkeys.html:155
 #: plinth/modules/users/templates/users_update.html:72
@@ -10100,6 +10101,7 @@ msgstr "Benutzer <em>%(username)s</em> bearbeiten"
 #, python-format
 msgid "Use <a href=\"%(passkeys_url)s\">passkeys</a> for better security."
 msgstr ""
+"Verwenden Sie <a href=\"%(passkeys_url)s\">Passkeys</a> für mehr Sicherheit."
 
 #: plinth/modules/users/templates/users_update.html:29
 #, python-format
@@ -10166,20 +10168,16 @@ msgid "Password changed successfully."
 msgstr "Passwort erfolgreich geändert."
 
 #: plinth/modules/users/views.py:420
-#, fuzzy
-#| msgid "A share with this name already exists."
 msgid "Passkey with that identifier already exists."
-msgstr "Eine Freigabe mit diesem Namen existiert bereits."
+msgstr "Ein Passkey mit dieser Kennung existiert bereits."
 
 #: plinth/modules/users/views.py:431
-#, fuzzy
-#| msgid "Edit User"
 msgid "Edit Passkey"
-msgstr "Benutzer bearbeiten"
+msgstr "Passkey bearbeiten"
 
 #: plinth/modules/users/views.py:518 plinth/modules/users/views.py:542
 msgid "Passkey used is not known."
-msgstr ""
+msgstr "Der verwendete Passkey ist nicht bekannt."
 
 #: plinth/modules/wireguard/__init__.py:20
 msgid "WireGuard is a fast, modern, secure VPN tunnel."
@@ -10335,17 +10333,15 @@ msgstr "Informationen zu dieser %(box_name)s:"
 
 #: plinth/modules/wireguard/templates/wireguard.html:25
 msgid "Property"
-msgstr ""
+msgstr "Eigenschaft"
 
 #: plinth/modules/wireguard/templates/wireguard.html:26
 msgid "Value"
-msgstr ""
+msgstr "Wert"
 
 #: plinth/modules/wireguard/templates/wireguard.html:33
-#, fuzzy
-#| msgid "Endpoint"
 msgid "Endpoint(s)"
-msgstr "Endpunkt"
+msgstr "Endpunkt(e)"
 
 #: plinth/modules/wireguard/templates/wireguard.html:41
 #, python-format
@@ -10720,7 +10716,7 @@ msgstr "Foto"
 
 #: plinth/modules/zoph/manifest.py:26
 msgid "Organizer"
-msgstr ""
+msgstr "Organisator"
 
 #: plinth/modules/zoph/templates/zoph-pre-setup.html:15
 #: plinth/modules/zoph/templates/zoph-pre-setup.html:28
@@ -10988,10 +10984,8 @@ msgid " System"
 msgstr " System"
 
 #: plinth/templates/base.html:179 plinth/templates/base.html:180
-#, fuzzy
-#| msgid "Manage Aliases"
 msgid "Manage passkeys"
-msgstr "Aliase verwalten"
+msgstr "Passkeys verwalten"
 
 #: plinth/templates/base.html:186 plinth/templates/base.html:187
 msgid "Change password"

plinth/locale/django.pot

@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-04-07 00:12+0000\n"
+"POT-Creation-Date: 2026-04-28 22:01+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -6341,7 +6341,7 @@ msgstr ""
 msgid "IRC"
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:27
+#: plinth/modules/radicale/__init__.py:26
 #, python-brace-format
 msgid ""
 "Radicale is a CalDAV and CardDAV server. It allows synchronization and "
@@ -6350,14 +6350,14 @@ msgid ""
 "a> is needed. Radicale can be accessed by any user with a {box_name} login."
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:33
+#: plinth/modules/radicale/__init__.py:32
 msgid ""
 "Radicale provides a basic web interface, which only supports creating new "
 "calendars and addressbooks. It does not support adding events or contacts, "
 "which must be done using a separate client."
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:55
+#: plinth/modules/radicale/__init__.py:52
 #: plinth/modules/radicale/manifest.py:74
 msgid "Radicale"
 msgstr ""

plinth/locale/el/LC_MESSAGES/django.po

@@ -7,7 +7,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-04-07 00:12+0000\n"
+"POT-Creation-Date: 2026-04-28 22:01+0000\n"
 "PO-Revision-Date: 2026-02-22 13:17+0000\n"
 "Last-Translator: James Valleroy <jvalleroy@mailbox.org>\n"
 "Language-Team: Greek <https://hosted.weblate.org/projects/freedombox/"
@@ -7441,7 +7441,7 @@ msgstr "Quasseldroid"
 msgid "IRC"
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:27
+#: plinth/modules/radicale/__init__.py:26
 #, fuzzy, python-brace-format
 #| msgid ""
 #| "Radicale is a CalDAV and CardDAV server. It allows synchronization and "
@@ -7460,7 +7460,7 @@ msgstr ""
 "clients/\">πελάτη</a> . Το Radicale μπορεί να προσεγγιστεί από οποιονδήποτε "
 "χρήστη με {box_name} πιστοποιητικά."
 
-#: plinth/modules/radicale/__init__.py:33
+#: plinth/modules/radicale/__init__.py:32
 msgid ""
 "Radicale provides a basic web interface, which only supports creating new "
 "calendars and addressbooks. It does not support adding events or contacts, "
@@ -7471,7 +7471,7 @@ msgstr ""
 "γεγονότων ή επαφών, το οποίο πρέπει να γίνει χρησιμοποιώντας ένα ξεχωριστό "
 "πελάτη."
 
-#: plinth/modules/radicale/__init__.py:55
+#: plinth/modules/radicale/__init__.py:52
 #: plinth/modules/radicale/manifest.py:74
 msgid "Radicale"
 msgstr "Radicale"

plinth/locale/es/LC_MESSAGES/django.po

@@ -7,7 +7,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-04-07 00:12+0000\n"
+"POT-Creation-Date: 2026-04-28 22:01+0000\n"
 "PO-Revision-Date: 2024-11-01 17:00+0000\n"
 "Last-Translator: gallegonovato <fran-carro@hotmail.es>\n"
 "Language-Team: Spanish <https://hosted.weblate.org/projects/freedombox/"
@@ -7381,7 +7381,7 @@ msgstr "Quasseldroid"
 msgid "IRC"
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:27
+#: plinth/modules/radicale/__init__.py:26
 #, fuzzy, python-brace-format
 #| msgid ""
 #| "Radicale is a CalDAV and CardDAV server. It allows synchronization and "
@@ -7401,7 +7401,7 @@ msgstr ""
 "supported-clients\">aplicación cliente soportada</a>. Cualquier persona "
 "autenticada en {box_name} puede acceder a Radicale."
 
-#: plinth/modules/radicale/__init__.py:33
+#: plinth/modules/radicale/__init__.py:32
 msgid ""
 "Radicale provides a basic web interface, which only supports creating new "
 "calendars and addressbooks. It does not support adding events or contacts, "
@@ -7411,7 +7411,7 @@ msgstr ""
 "de nuevos calendarios y agendas. No soporta añadir eventos o contactos, que "
 "debe hacerse usando un cliente separado."
 
-#: plinth/modules/radicale/__init__.py:55
+#: plinth/modules/radicale/__init__.py:52
 #: plinth/modules/radicale/manifest.py:74
 msgid "Radicale"
 msgstr "Radicale"

plinth/locale/et/LC_MESSAGES/django.po

@@ -7,7 +7,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-04-07 00:12+0000\n"
+"POT-Creation-Date: 2026-04-28 22:01+0000\n"
 "PO-Revision-Date: 2026-01-09 20:01+0000\n"
 "Last-Translator: Priit Jõerüüt <jrthwlate@users.noreply.hosted.weblate.org>\n"
 "Language-Team: Estonian <https://hosted.weblate.org/projects/freedombox/"
@@ -6384,7 +6384,7 @@ msgstr ""
 msgid "IRC"
 msgstr "IRC"
 
-#: plinth/modules/radicale/__init__.py:27
+#: plinth/modules/radicale/__init__.py:26
 #, python-brace-format
 msgid ""
 "Radicale is a CalDAV and CardDAV server. It allows synchronization and "
@@ -6393,14 +6393,14 @@ msgid ""
 "a> is needed. Radicale can be accessed by any user with a {box_name} login."
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:33
+#: plinth/modules/radicale/__init__.py:32
 msgid ""
 "Radicale provides a basic web interface, which only supports creating new "
 "calendars and addressbooks. It does not support adding events or contacts, "
 "which must be done using a separate client."
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:55
+#: plinth/modules/radicale/__init__.py:52
 #: plinth/modules/radicale/manifest.py:74
 msgid "Radicale"
 msgstr "Radicale"

plinth/locale/fa/LC_MESSAGES/django.po

@@ -7,7 +7,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-04-07 00:12+0000\n"
+"POT-Creation-Date: 2026-04-28 22:01+0000\n"
 "PO-Revision-Date: 2022-09-14 17:19+0000\n"
 "Last-Translator: ikmaak <info@ikmaak.nl>\n"
 "Language-Team: Persian <https://hosted.weblate.org/projects/freedombox/"
@@ -7062,7 +7062,7 @@ msgstr ""
 msgid "IRC"
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:27
+#: plinth/modules/radicale/__init__.py:26
 #, python-brace-format
 msgid ""
 "Radicale is a CalDAV and CardDAV server. It allows synchronization and "
@@ -7071,14 +7071,14 @@ msgid ""
 "a> is needed. Radicale can be accessed by any user with a {box_name} login."
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:33
+#: plinth/modules/radicale/__init__.py:32
 msgid ""
 "Radicale provides a basic web interface, which only supports creating new "
 "calendars and addressbooks. It does not support adding events or contacts, "
 "which must be done using a separate client."
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:55
+#: plinth/modules/radicale/__init__.py:52
 #: plinth/modules/radicale/manifest.py:74
 msgid "Radicale"
 msgstr ""

plinth/locale/fake/LC_MESSAGES/django.po

@@ -7,7 +7,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: Plinth 0.6\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-04-07 00:12+0000\n"
+"POT-Creation-Date: 2026-04-28 22:01+0000\n"
 "PO-Revision-Date: 2016-01-31 22:24+0530\n"
 "Last-Translator: Sunil Mohan Adapa <sunil@medhas.org>\n"
 "Language-Team: Plinth Developers <freedombox-"
@@ -7390,7 +7390,7 @@ msgstr ""
 msgid "IRC"
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:27
+#: plinth/modules/radicale/__init__.py:26
 #, python-brace-format
 msgid ""
 "Radicale is a CalDAV and CardDAV server. It allows synchronization and "
@@ -7399,14 +7399,14 @@ msgid ""
 "a> is needed. Radicale can be accessed by any user with a {box_name} login."
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:33
+#: plinth/modules/radicale/__init__.py:32
 msgid ""
 "Radicale provides a basic web interface, which only supports creating new "
 "calendars and addressbooks. It does not support adding events or contacts, "
 "which must be done using a separate client."
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:55
+#: plinth/modules/radicale/__init__.py:52
 #: plinth/modules/radicale/manifest.py:74
 msgid "Radicale"
 msgstr ""

plinth/locale/fr/LC_MESSAGES/django.po

@@ -7,8 +7,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: FreedomBox UI\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-04-07 00:12+0000\n"
+"POT-Creation-Date: 2026-04-28 22:01+0000\n"
-"PO-Revision-Date: 2026-03-29 11:09+0000\n"
+"PO-Revision-Date: 2026-04-16 15:09+0000\n"
 "Last-Translator: Coucouf <coucouf@coucouf.fr>\n"
 "Language-Team: French <https://hosted.weblate.org/projects/freedombox/"
 "freedombox/fr/>\n"
@@ -17,7 +17,7 @@ msgstr ""
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=n > 1;\n"
-"X-Generator: Weblate 5.17-dev\n"
+"X-Generator: Weblate 5.17.1-dev\n"
 
 #: plinth/config.py:103
 #, python-brace-format
@@ -7326,7 +7326,7 @@ msgstr "Quasseldroid"
 msgid "IRC"
 msgstr "IRC"
 
-#: plinth/modules/radicale/__init__.py:27
+#: plinth/modules/radicale/__init__.py:26
 #, python-brace-format
 msgid ""
 "Radicale is a CalDAV and CardDAV server. It allows synchronization and "
@@ -7342,7 +7342,7 @@ msgstr ""
 "a>. Tous les utilisateur disposant d’un compte sur la {box_name} ont accès à "
 "Radicale."
 
-#: plinth/modules/radicale/__init__.py:33
+#: plinth/modules/radicale/__init__.py:32
 msgid ""
 "Radicale provides a basic web interface, which only supports creating new "
 "calendars and addressbooks. It does not support adding events or contacts, "
@@ -7353,7 +7353,7 @@ msgstr ""
 "charge l’ajout d’événements ou de contacts, opérations qui doivent être "
 "réalisées avec un client dédié."
 
-#: plinth/modules/radicale/__init__.py:55
+#: plinth/modules/radicale/__init__.py:52
 #: plinth/modules/radicale/manifest.py:74
 msgid "Radicale"
 msgstr "Radicale"
@@ -10049,14 +10049,12 @@ msgstr "Paramètres du compte %(username)s"
 
 #: plinth/modules/users/templates/users_login.html:30
 msgid "Logging in with passkey failed: "
-msgstr ""
+msgstr "Échec de la connexion par clé d’accès : "
 
 #: plinth/modules/users/templates/users_login.html:41
 #: plinth/modules/users/templates/users_passkeys.html:41
-#, fuzzy
-#| msgid "This app does not support diagnostics"
 msgid "Browser does not support passkeys."
-msgstr "Cette application n’est pas compatible avec les tests de diagnostic"
+msgstr "Le navigateur n’est pas compatible avec les clés d’accès."
 
 #: plinth/modules/users/templates/users_login.html:57
 msgid "Login"
@@ -10065,28 +10063,28 @@ msgstr "S’identifier"
 #: plinth/modules/users/templates/users_login.html:70
 #: plinth/modules/users/templates/users_login.html:72
 msgid "Log in with passkey"
-msgstr ""
+msgstr "Connexion avec une clé d’accès"
 
 #: plinth/modules/users/templates/users_passkey_edit.html:19
-#, fuzzy
-#| msgid "Update setup"
 msgid "Update Passkey"
-msgstr "Appliquer les changements"
+msgstr "Mettre à jour la clé d’accès"
 
 #: plinth/modules/users/templates/users_passkeys.html:30
 msgid "Adding passkey failed: "
-msgstr ""
+msgstr "Échec d’ajout d’une clé d’accès : "
 
 #: plinth/modules/users/templates/users_passkeys.html:48
 #: plinth/modules/users/views.py:314
 msgid "Passkeys"
-msgstr ""
+msgstr "Clés d’accès"
 
 #: plinth/modules/users/templates/users_passkeys.html:57
 msgid ""
 "Working with passkeys requires using browser's Javascript API. Please enable "
 "Javascript support in your browser to continue."
 msgstr ""
+"L’utilisation de clés d’accès nécessite l’utilisation de l’API Javascript du "
+"navigateur. Veuillez activer Javascript dans votre navigateur pour continuer."
 
 #: plinth/modules/users/templates/users_passkeys.html:66
 msgid ""
@@ -10097,47 +10095,48 @@ msgid ""
 "server knows only the public information that can used to verify user's "
 "signatures."
 msgstr ""
+"Les clés d’accès sont un moyen de vérifier l’identité de l’utilisateur au "
+"travers de signatures numériques. Elles présentent un alternative plus sure "
+"à l’usage des mots de passe. Les secrets sont conservés sur le téléphone, "
+"l’ordinateur ou le jeton d’authentification matériel et protégés par un code "
+"ou une empreinte biométrique. Aucun secret n’est conservé sur les serveur. "
+"Le serveur n’a besoin de connaître que les informations publiques permettant "
+"de vérifier la signature de l’utilisateurice."
 
 #: plinth/modules/users/templates/users_passkeys.html:83
 #: plinth/modules/users/templates/users_passkeys.html:85
-#, fuzzy
-#| msgid "Add password"
 msgid "Add passkey"
-msgstr "Ajouter un mot de passe"
+msgstr "Ajouter une clé d’accès"
 
 #: plinth/modules/users/templates/users_passkeys.html:93
-#, fuzzy
-#| msgid "Domain"
 msgid "For Domain"
-msgstr "Domaine"
+msgstr "Pour le domaine"
 
 #: plinth/modules/users/templates/users_passkeys.html:94
 msgid "Added"
-msgstr ""
+msgstr "Ajoutée"
 
 #: plinth/modules/users/templates/users_passkeys.html:95
-#, fuzzy
-#| msgid "Last scanned: "
 msgid "Last Used"
-msgstr "Dernière analyse : "
+msgstr "Dernière utilisation"
 
 #: plinth/modules/users/templates/users_passkeys.html:126
 msgid "No passkeys added to user account."
-msgstr ""
+msgstr "Aucune clé d’accès pour ce compte."
 
 #: plinth/modules/users/templates/users_passkeys.html:135
 msgid "Delete passkey <em class=\"passkey-name\"></em>?"
-msgstr ""
+msgstr "Supprimer la clé d’accès <em class=\"passkey-name\"></em> ?"
 
 #: plinth/modules/users/templates/users_passkeys.html:145
 msgid "You will need this passkey's device to add it back again."
 msgstr ""
+"Vous aurez besoin de l’appareil contenant cette clé d’accès pour pouvoir "
+"l’ajouter à nouveau."
 
 #: plinth/modules/users/templates/users_passkeys.html:152
-#, fuzzy
-#| msgid "Delete user"
 msgid "Delete passkey"
-msgstr "Supprimer l'utilisateur"
+msgstr "Supprimer la clé d’accès"
 
 #: plinth/modules/users/templates/users_passkeys.html:155
 #: plinth/modules/users/templates/users_update.html:72
@@ -10153,6 +10152,8 @@ msgstr "Modifier l’utilisateur <em>%(username)s</em>"
 #, python-format
 msgid "Use <a href=\"%(passkeys_url)s\">passkeys</a> for better security."
 msgstr ""
+"Utilisez une <a href=\"%(passkeys_url)s\">clé d’accès</a> pour une meilleure "
+"sécurité."
 
 #: plinth/modules/users/templates/users_update.html:29
 #, python-format
@@ -10220,20 +10221,16 @@ msgid "Password changed successfully."
 msgstr "Le mot de passe a été changé."
 
 #: plinth/modules/users/views.py:420
-#, fuzzy
-#| msgid "A share with this name already exists."
 msgid "Passkey with that identifier already exists."
-msgstr "Un partage existe déjà avec ce nom."
+msgstr "Il y a déjà un clé d’accès avec cet identifiant."
 
 #: plinth/modules/users/views.py:431
-#, fuzzy
-#| msgid "Edit User"
 msgid "Edit Passkey"
-msgstr "Modification de l’utilisateur"
+msgstr "Modifier la clé d’accès"
 
 #: plinth/modules/users/views.py:518 plinth/modules/users/views.py:542
 msgid "Passkey used is not known."
-msgstr ""
+msgstr "La clé d’accès utilisée est inconnue."
 
 #: plinth/modules/wireguard/__init__.py:20
 msgid "WireGuard is a fast, modern, secure VPN tunnel."
@@ -11036,10 +11033,8 @@ msgid " System"
 msgstr " Système"
 
 #: plinth/templates/base.html:179 plinth/templates/base.html:180
-#, fuzzy
-#| msgid "Manage Aliases"
 msgid "Manage passkeys"
-msgstr "Configurer des alias"
+msgstr "Gérer les clés d’accès"
 
 #: plinth/templates/base.html:186 plinth/templates/base.html:187
 msgid "Change password"

plinth/locale/gl/LC_MESSAGES/django.po

@@ -7,7 +7,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-04-07 00:12+0000\n"
+"POT-Creation-Date: 2026-04-28 22:01+0000\n"
 "PO-Revision-Date: 2022-12-30 10:51+0000\n"
 "Last-Translator: gallegonovato <fran-carro@hotmail.es>\n"
 "Language-Team: Galician <https://hosted.weblate.org/projects/freedombox/"
@@ -6385,7 +6385,7 @@ msgstr "Quasseldroid"
 msgid "IRC"
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:27
+#: plinth/modules/radicale/__init__.py:26
 #, python-brace-format
 msgid ""
 "Radicale is a CalDAV and CardDAV server. It allows synchronization and "
@@ -6394,14 +6394,14 @@ msgid ""
 "a> is needed. Radicale can be accessed by any user with a {box_name} login."
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:33
+#: plinth/modules/radicale/__init__.py:32
 msgid ""
 "Radicale provides a basic web interface, which only supports creating new "
 "calendars and addressbooks. It does not support adding events or contacts, "
 "which must be done using a separate client."
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:55
+#: plinth/modules/radicale/__init__.py:52
 #: plinth/modules/radicale/manifest.py:74
 msgid "Radicale"
 msgstr ""

plinth/locale/gu/LC_MESSAGES/django.po

@@ -7,7 +7,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-04-07 00:12+0000\n"
+"POT-Creation-Date: 2026-04-28 22:01+0000\n"
 "PO-Revision-Date: 2021-01-18 12:32+0000\n"
 "Last-Translator: ikmaak <info@ikmaak.nl>\n"
 "Language-Team: Gujarati <https://hosted.weblate.org/projects/freedombox/"
@@ -6776,7 +6776,7 @@ msgstr ""
 msgid "IRC"
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:27
+#: plinth/modules/radicale/__init__.py:26
 #, python-brace-format
 msgid ""
 "Radicale is a CalDAV and CardDAV server. It allows synchronization and "
@@ -6785,14 +6785,14 @@ msgid ""
 "a> is needed. Radicale can be accessed by any user with a {box_name} login."
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:33
+#: plinth/modules/radicale/__init__.py:32
 msgid ""
 "Radicale provides a basic web interface, which only supports creating new "
 "calendars and addressbooks. It does not support adding events or contacts, "
 "which must be done using a separate client."
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:55
+#: plinth/modules/radicale/__init__.py:52
 #: plinth/modules/radicale/manifest.py:74
 msgid "Radicale"
 msgstr ""

plinth/locale/hi/LC_MESSAGES/django.po

@@ -7,7 +7,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-04-07 00:12+0000\n"
+"POT-Creation-Date: 2026-04-28 22:01+0000\n"
 "PO-Revision-Date: 2026-03-31 06:09+0000\n"
 "Last-Translator: bsurajpatra <ankitsuraj1111@gmail.com>\n"
 "Language-Team: Hindi <https://hosted.weblate.org/projects/freedombox/"
@@ -7329,7 +7329,7 @@ msgstr "क्वासेलड्रोइड"
 msgid "IRC"
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:27
+#: plinth/modules/radicale/__init__.py:26
 #, fuzzy, python-brace-format
 #| msgid ""
 #| "Radicale is a CalDAV and CardDAV server. It allows synchronization and "
@@ -7347,14 +7347,14 @@ msgstr ""
 "radicale.org/clients/\">समर्थित क्लाइंट एप्लिकेशन</a> कि जरुरत है. राडिकैल किसी "
 "{box_name} यूसर पहुंचा जा सकता है एक लॉगिन के साथ."
 
-#: plinth/modules/radicale/__init__.py:33
+#: plinth/modules/radicale/__init__.py:32
 msgid ""
 "Radicale provides a basic web interface, which only supports creating new "
 "calendars and addressbooks. It does not support adding events or contacts, "
 "which must be done using a separate client."
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:55
+#: plinth/modules/radicale/__init__.py:52
 #: plinth/modules/radicale/manifest.py:74
 msgid "Radicale"
 msgstr "राडिकैल"

plinth/locale/hu/LC_MESSAGES/django.po

@@ -7,7 +7,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-04-07 00:12+0000\n"
+"POT-Creation-Date: 2026-04-28 22:01+0000\n"
 "PO-Revision-Date: 2025-06-04 15:01+0000\n"
 "Last-Translator: András Szűcs "
 "<andrascc86288f63c44cb5@users.noreply.hosted.weblate.org>\n"
@@ -7496,7 +7496,7 @@ msgstr "Quasseldroid"
 msgid "IRC"
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:27
+#: plinth/modules/radicale/__init__.py:26
 #, fuzzy, python-brace-format
 #| msgid ""
 #| "Radicale is a CalDAV and CardDAV server. It allows synchronization and "
@@ -7517,7 +7517,7 @@ msgstr ""
 "alkalmazásra</a> is. A Radicale elérhető bármely felhasználó számára a "
 "{box_name} eszközön."
 
-#: plinth/modules/radicale/__init__.py:33
+#: plinth/modules/radicale/__init__.py:32
 msgid ""
 "Radicale provides a basic web interface, which only supports creating new "
 "calendars and addressbooks. It does not support adding events or contacts, "
@@ -7527,7 +7527,7 @@ msgstr ""
 "címjegyzékek létrehozását támogatja. Nem támogatja az események vagy "
 "kapcsolatok hozzáadását, ezeket külön kliens segítségével kell elvégezni."
 
-#: plinth/modules/radicale/__init__.py:55
+#: plinth/modules/radicale/__init__.py:52
 #: plinth/modules/radicale/manifest.py:74
 msgid "Radicale"
 msgstr "Radicale"

plinth/locale/id/LC_MESSAGES/django.po

@@ -2,7 +2,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: Indonesian (FreedomBox)\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-04-07 00:12+0000\n"
+"POT-Creation-Date: 2026-04-28 22:01+0000\n"
 "PO-Revision-Date: 2022-09-14 17:19+0000\n"
 "Last-Translator: ikmaak <info@ikmaak.nl>\n"
 "Language-Team: Indonesian <https://hosted.weblate.org/projects/freedombox/"
@@ -7047,7 +7047,7 @@ msgstr "Quasseldroid"
 msgid "IRC"
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:27
+#: plinth/modules/radicale/__init__.py:26
 #, python-brace-format
 msgid ""
 "Radicale is a CalDAV and CardDAV server. It allows synchronization and "
@@ -7056,14 +7056,14 @@ msgid ""
 "a> is needed. Radicale can be accessed by any user with a {box_name} login."
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:33
+#: plinth/modules/radicale/__init__.py:32
 msgid ""
 "Radicale provides a basic web interface, which only supports creating new "
 "calendars and addressbooks. It does not support adding events or contacts, "
 "which must be done using a separate client."
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:55
+#: plinth/modules/radicale/__init__.py:52
 #: plinth/modules/radicale/manifest.py:74
 msgid "Radicale"
 msgstr "Radicale"

plinth/locale/it/LC_MESSAGES/django.po

@@ -7,8 +7,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-04-07 00:12+0000\n"
+"POT-Creation-Date: 2026-04-28 22:01+0000\n"
-"PO-Revision-Date: 2026-03-31 06:09+0000\n"
+"PO-Revision-Date: 2026-05-05 17:11+0000\n"
 "Last-Translator: Pierfrancesco Passerini <p.passerini@gmail.com>\n"
 "Language-Team: Italian <https://hosted.weblate.org/projects/freedombox/"
 "freedombox/it/>\n"
@@ -17,7 +17,7 @@ msgstr ""
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=n != 1;\n"
-"X-Generator: Weblate 5.17-dev\n"
+"X-Generator: Weblate 5.17.1\n"
 
 #: plinth/config.py:103
 #, python-brace-format
@@ -7219,7 +7219,7 @@ msgstr "Quasseldroid"
 msgid "IRC"
 msgstr "IRC"
 
-#: plinth/modules/radicale/__init__.py:27
+#: plinth/modules/radicale/__init__.py:26
 #, python-brace-format
 msgid ""
 "Radicale is a CalDAV and CardDAV server. It allows synchronization and "
@@ -7233,7 +7233,7 @@ msgstr ""
 "client supportata</a>. Ogni utente con un profilo {box_name} può accedere a "
 "Radicale."
 
-#: plinth/modules/radicale/__init__.py:33
+#: plinth/modules/radicale/__init__.py:32
 msgid ""
 "Radicale provides a basic web interface, which only supports creating new "
 "calendars and addressbooks. It does not support adding events or contacts, "
@@ -7243,7 +7243,7 @@ msgstr ""
 "nuovi calendari e rubriche. Non supporta l'aggiunta di eventi o contatti, "
 "che dovranno essere gestiti tramite un client separato."
 
-#: plinth/modules/radicale/__init__.py:55
+#: plinth/modules/radicale/__init__.py:52
 #: plinth/modules/radicale/manifest.py:74
 msgid "Radicale"
 msgstr "Radicale"
@@ -9872,14 +9872,12 @@ msgstr "Modifica l'utente %(username)s"
 
 #: plinth/modules/users/templates/users_login.html:30
 msgid "Logging in with passkey failed: "
-msgstr ""
+msgstr "Aaccesso con passkey non riuscito: "
 
 #: plinth/modules/users/templates/users_login.html:41
 #: plinth/modules/users/templates/users_passkeys.html:41
-#, fuzzy
-#| msgid "This app does not support diagnostics"
 msgid "Browser does not support passkeys."
-msgstr "Questa applicazione non supporta la diagnostica"
+msgstr "Il browser non supporta le passkey."
 
 #: plinth/modules/users/templates/users_login.html:57
 msgid "Login"
@@ -9888,28 +9886,28 @@ msgstr "Login"
 #: plinth/modules/users/templates/users_login.html:70
 #: plinth/modules/users/templates/users_login.html:72
 msgid "Log in with passkey"
-msgstr ""
+msgstr "Accedi con passkey"
 
 #: plinth/modules/users/templates/users_passkey_edit.html:19
-#, fuzzy
-#| msgid "Update setup"
 msgid "Update Passkey"
-msgstr "Aggiorna impostazioni"
+msgstr "Aggiorna Passkey"
 
 #: plinth/modules/users/templates/users_passkeys.html:30
 msgid "Adding passkey failed: "
-msgstr ""
+msgstr "Aggiunta di passkey non riuscita: "
 
 #: plinth/modules/users/templates/users_passkeys.html:48
 #: plinth/modules/users/views.py:314
 msgid "Passkeys"
-msgstr ""
+msgstr "Passkey"
 
 #: plinth/modules/users/templates/users_passkeys.html:57
 msgid ""
 "Working with passkeys requires using browser's Javascript API. Please enable "
 "Javascript support in your browser to continue."
 msgstr ""
+"L'uso di passkey richiede l'accesso alle API Javascript del browser. Prima "
+"di continuare, accertati che tale supporto sia presente."
 
 #: plinth/modules/users/templates/users_passkeys.html:66
 msgid ""
@@ -9920,47 +9918,46 @@ msgid ""
 "server knows only the public information that can used to verify user's "
 "signatures."
 msgstr ""
+"Le passkey permettono la verifica degli accessi mediante l'utilizzo di firme "
+"digitali. Rappresentano un'alternativa più sicura alle password. Le "
+"informazioni riservate vengono conservate dall'utente sul proprio telefono, "
+"laptop o su un token hardware e sbloccate tramite PIN, impronta digitale o "
+"riconoscimento del volto. Nessuna informazione riservata viene memorizzata "
+"sul server. Il server conosce solo le informazioni pubbliche che possono "
+"essere utilizzate per verificare le firme dell'utente."
 
 #: plinth/modules/users/templates/users_passkeys.html:83
 #: plinth/modules/users/templates/users_passkeys.html:85
-#, fuzzy
-#| msgid "Add password"
 msgid "Add passkey"
-msgstr "Aggiungi la password"
+msgstr "Aggiungi Passkey"
 
 #: plinth/modules/users/templates/users_passkeys.html:93
-#, fuzzy
-#| msgid "Domain"
 msgid "For Domain"
-msgstr "Dominio"
+msgstr "Per Dominio"
 
 #: plinth/modules/users/templates/users_passkeys.html:94
 msgid "Added"
-msgstr ""
+msgstr "Aggiunto"
 
 #: plinth/modules/users/templates/users_passkeys.html:95
-#, fuzzy
-#| msgid "Last scanned: "
 msgid "Last Used"
-msgstr "Ultima scansione: "
+msgstr "Ultimo utilizzo"
 
 #: plinth/modules/users/templates/users_passkeys.html:126
 msgid "No passkeys added to user account."
-msgstr ""
+msgstr "Nessuna passkey aggiunta all'account utente."
 
 #: plinth/modules/users/templates/users_passkeys.html:135
 msgid "Delete passkey <em class=\"passkey-name\"></em>?"
-msgstr ""
+msgstr "Elimina passkey <em class=\"passkey-name\"></em>?"
 
 #: plinth/modules/users/templates/users_passkeys.html:145
 msgid "You will need this passkey's device to add it back again."
-msgstr ""
+msgstr "Avrai bisogno di questa passkey per aggiungere di nuovo il dispositivo."
 
 #: plinth/modules/users/templates/users_passkeys.html:152
-#, fuzzy
-#| msgid "Delete user"
 msgid "Delete passkey"
-msgstr "Cancella l'utente"
+msgstr "Cancella Passkey"
 
 #: plinth/modules/users/templates/users_passkeys.html:155
 #: plinth/modules/users/templates/users_update.html:72
@@ -9976,6 +9973,8 @@ msgstr "Modifica utente <em>%(username)s</em>"
 #, python-format
 msgid "Use <a href=\"%(passkeys_url)s\">passkeys</a> for better security."
 msgstr ""
+"Utilizzare <a href=\"%(passkeys_url)s\">passkey</a> per una maggiore "
+"sicurezza."
 
 #: plinth/modules/users/templates/users_update.html:29
 #, python-format
@@ -10040,20 +10039,16 @@ msgid "Password changed successfully."
 msgstr "La password è stata aggiornata."
 
 #: plinth/modules/users/views.py:420
-#, fuzzy
-#| msgid "A share with this name already exists."
 msgid "Passkey with that identifier already exists."
-msgstr "Una condivisione con questo nome esiste già."
+msgstr "Esiste già un Passkey con quell'identificatore."
 
 #: plinth/modules/users/views.py:431
-#, fuzzy
-#| msgid "Edit User"
 msgid "Edit Passkey"
-msgstr "Modifica utente"
+msgstr "Modifica Passkey"
 
 #: plinth/modules/users/views.py:518 plinth/modules/users/views.py:542
 msgid "Passkey used is not known."
-msgstr ""
+msgstr "Passkey sconosciuta."
 
 #: plinth/modules/wireguard/__init__.py:20
 msgid "WireGuard is a fast, modern, secure VPN tunnel."
@@ -10842,10 +10837,8 @@ msgid " System"
 msgstr " Sistema"
 
 #: plinth/templates/base.html:179 plinth/templates/base.html:180
-#, fuzzy
-#| msgid "Manage Aliases"
 msgid "Manage passkeys"
-msgstr "Gestire gli alias"
+msgstr "Gestire le Passkey"
 
 #: plinth/templates/base.html:186 plinth/templates/base.html:187
 msgid "Change password"

plinth/locale/ja/LC_MESSAGES/django.po

@@ -7,7 +7,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-04-07 00:12+0000\n"
+"POT-Creation-Date: 2026-04-28 22:01+0000\n"
 "PO-Revision-Date: 2025-10-24 16:02+0000\n"
 "Last-Translator: Jun Nogata <nogajun@gmail.com>\n"
 "Language-Team: Japanese <https://hosted.weblate.org/projects/freedombox/"
@@ -6348,7 +6348,7 @@ msgstr ""
 msgid "IRC"
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:27
+#: plinth/modules/radicale/__init__.py:26
 #, python-brace-format
 msgid ""
 "Radicale is a CalDAV and CardDAV server. It allows synchronization and "
@@ -6357,14 +6357,14 @@ msgid ""
 "a> is needed. Radicale can be accessed by any user with a {box_name} login."
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:33
+#: plinth/modules/radicale/__init__.py:32
 msgid ""
 "Radicale provides a basic web interface, which only supports creating new "
 "calendars and addressbooks. It does not support adding events or contacts, "
 "which must be done using a separate client."
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:55
+#: plinth/modules/radicale/__init__.py:52
 #: plinth/modules/radicale/manifest.py:74
 msgid "Radicale"
 msgstr ""

plinth/locale/kn/LC_MESSAGES/django.po

@@ -7,7 +7,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-04-07 00:12+0000\n"
+"POT-Creation-Date: 2026-04-28 22:01+0000\n"
 "PO-Revision-Date: 2020-07-16 16:41+0000\n"
 "Last-Translator: Yogesh <yogesh@karnatakaeducation.org.in>\n"
 "Language-Team: Kannada <https://hosted.weblate.org/projects/freedombox/"
@@ -6343,7 +6343,7 @@ msgstr ""
 msgid "IRC"
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:27
+#: plinth/modules/radicale/__init__.py:26
 #, python-brace-format
 msgid ""
 "Radicale is a CalDAV and CardDAV server. It allows synchronization and "
@@ -6352,14 +6352,14 @@ msgid ""
 "a> is needed. Radicale can be accessed by any user with a {box_name} login."
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:33
+#: plinth/modules/radicale/__init__.py:32
 msgid ""
 "Radicale provides a basic web interface, which only supports creating new "
 "calendars and addressbooks. It does not support adding events or contacts, "
 "which must be done using a separate client."
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:55
+#: plinth/modules/radicale/__init__.py:52
 #: plinth/modules/radicale/manifest.py:74
 msgid "Radicale"
 msgstr ""

plinth/locale/lt/LC_MESSAGES/django.po

@@ -7,7 +7,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-04-07 00:12+0000\n"
+"POT-Creation-Date: 2026-04-28 22:01+0000\n"
 "PO-Revision-Date: 2022-09-14 17:19+0000\n"
 "Last-Translator: ikmaak <info@ikmaak.nl>\n"
 "Language-Team: Lithuanian <https://hosted.weblate.org/projects/freedombox/"
@@ -6363,7 +6363,7 @@ msgstr "Quasseldroid"
 msgid "IRC"
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:27
+#: plinth/modules/radicale/__init__.py:26
 #, python-brace-format
 msgid ""
 "Radicale is a CalDAV and CardDAV server. It allows synchronization and "
@@ -6372,14 +6372,14 @@ msgid ""
 "a> is needed. Radicale can be accessed by any user with a {box_name} login."
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:33
+#: plinth/modules/radicale/__init__.py:32
 msgid ""
 "Radicale provides a basic web interface, which only supports creating new "
 "calendars and addressbooks. It does not support adding events or contacts, "
 "which must be done using a separate client."
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:55
+#: plinth/modules/radicale/__init__.py:52
 #: plinth/modules/radicale/manifest.py:74
 msgid "Radicale"
 msgstr ""

plinth/locale/lv/LC_MESSAGES/django.po

@@ -7,7 +7,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-04-07 00:12+0000\n"
+"POT-Creation-Date: 2026-04-28 22:01+0000\n"
 "PO-Revision-Date: 2022-09-14 17:20+0000\n"
 "Last-Translator: ikmaak <info@ikmaak.nl>\n"
 "Language-Team: Latvian <https://hosted.weblate.org/projects/freedombox/"
@@ -6362,7 +6362,7 @@ msgstr ""
 msgid "IRC"
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:27
+#: plinth/modules/radicale/__init__.py:26
 #, python-brace-format
 msgid ""
 "Radicale is a CalDAV and CardDAV server. It allows synchronization and "
@@ -6371,14 +6371,14 @@ msgid ""
 "a> is needed. Radicale can be accessed by any user with a {box_name} login."
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:33
+#: plinth/modules/radicale/__init__.py:32
 msgid ""
 "Radicale provides a basic web interface, which only supports creating new "
 "calendars and addressbooks. It does not support adding events or contacts, "
 "which must be done using a separate client."
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:55
+#: plinth/modules/radicale/__init__.py:52
 #: plinth/modules/radicale/manifest.py:74
 msgid "Radicale"
 msgstr ""

plinth/locale/nb/LC_MESSAGES/django.po

@@ -15,7 +15,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: FreedomBox UI\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-04-07 00:12+0000\n"
+"POT-Creation-Date: 2026-04-28 22:01+0000\n"
 "PO-Revision-Date: 2024-10-27 23:30+0000\n"
 "Last-Translator: Sunil Mohan Adapa <sunil@medhas.org>\n"
 "Language-Team: Norwegian Bokmål <https://hosted.weblate.org/projects/"
@@ -7433,7 +7433,7 @@ msgstr "Quasseldroid"
 msgid "IRC"
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:27
+#: plinth/modules/radicale/__init__.py:26
 #, fuzzy, python-brace-format
 #| msgid ""
 #| "Radicale is a CalDAV and CardDAV server. It allows synchronization and "
@@ -7451,7 +7451,7 @@ msgstr ""
 "href=\"http://radicale.org/clients/\">støttet klientprogram </a>. Radicale "
 "kan nås av alle brukere med {box_name}-innlogging."
 
-#: plinth/modules/radicale/__init__.py:33
+#: plinth/modules/radicale/__init__.py:32
 msgid ""
 "Radicale provides a basic web interface, which only supports creating new "
 "calendars and addressbooks. It does not support adding events or contacts, "
@@ -7461,7 +7461,7 @@ msgstr ""
 "kalendre og adressebøker. Den tilbyr ikke å legge inn nye hendelser eller "
 "kontakter, det må gjøres med en egen klient."
 
-#: plinth/modules/radicale/__init__.py:55
+#: plinth/modules/radicale/__init__.py:52
 #: plinth/modules/radicale/manifest.py:74
 msgid "Radicale"
 msgstr "Radicale"

plinth/locale/nl/LC_MESSAGES/django.po

@@ -7,7 +7,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-04-07 00:12+0000\n"
+"POT-Creation-Date: 2026-04-28 22:01+0000\n"
 "PO-Revision-Date: 2025-09-17 09:01+0000\n"
 "Last-Translator: ikmaak <info@ikmaak.nl>\n"
 "Language-Team: Dutch <https://hosted.weblate.org/projects/freedombox/"
@@ -7172,7 +7172,7 @@ msgstr "Quasseldroid"
 msgid "IRC"
 msgstr "IRC"
 
-#: plinth/modules/radicale/__init__.py:27
+#: plinth/modules/radicale/__init__.py:26
 #, python-brace-format
 msgid ""
 "Radicale is a CalDAV and CardDAV server. It allows synchronization and "
@@ -7186,7 +7186,7 @@ msgstr ""
 "clienttoepassing</a> nodig. Radicale kan worden benaderd door elke "
 "{box_name} gebruiker."
 
-#: plinth/modules/radicale/__init__.py:33
+#: plinth/modules/radicale/__init__.py:32
 msgid ""
 "Radicale provides a basic web interface, which only supports creating new "
 "calendars and addressbooks. It does not support adding events or contacts, "
@@ -7197,7 +7197,7 @@ msgstr ""
 "gebeurtenissen of contactpersonen, die moeten worden gedaan met behulp van "
 "een aparte client."
 
-#: plinth/modules/radicale/__init__.py:55
+#: plinth/modules/radicale/__init__.py:52
 #: plinth/modules/radicale/manifest.py:74
 msgid "Radicale"
 msgstr "Radicale"

plinth/locale/pl/LC_MESSAGES/django.po

@@ -7,7 +7,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-04-07 00:12+0000\n"
+"POT-Creation-Date: 2026-04-28 22:01+0000\n"
 "PO-Revision-Date: 2024-07-13 12:09+0000\n"
 "Last-Translator: Monika <adamdomenek@protonmail.com>\n"
 "Language-Team: Polish <https://hosted.weblate.org/projects/freedombox/"
@@ -7012,7 +7012,7 @@ msgstr "Quasseldroid"
 msgid "IRC"
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:27
+#: plinth/modules/radicale/__init__.py:26
 #, python-brace-format
 msgid ""
 "Radicale is a CalDAV and CardDAV server. It allows synchronization and "
@@ -7021,14 +7021,14 @@ msgid ""
 "a> is needed. Radicale can be accessed by any user with a {box_name} login."
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:33
+#: plinth/modules/radicale/__init__.py:32
 msgid ""
 "Radicale provides a basic web interface, which only supports creating new "
 "calendars and addressbooks. It does not support adding events or contacts, "
 "which must be done using a separate client."
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:55
+#: plinth/modules/radicale/__init__.py:52
 #: plinth/modules/radicale/manifest.py:74
 msgid "Radicale"
 msgstr "Radicale"

plinth/locale/pt/LC_MESSAGES/django.po

@@ -7,7 +7,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-04-07 00:12+0000\n"
+"POT-Creation-Date: 2026-04-28 22:01+0000\n"
 "PO-Revision-Date: 2025-04-09 22:41+0000\n"
 "Last-Translator: tuliogit <wikigeolog@gmx.com>\n"
 "Language-Team: Portuguese <https://hosted.weblate.org/projects/freedombox/"
@@ -7266,7 +7266,7 @@ msgstr "Quasseldroid"
 msgid "IRC"
 msgstr "IRC"
 
-#: plinth/modules/radicale/__init__.py:27
+#: plinth/modules/radicale/__init__.py:26
 #, python-brace-format
 msgid ""
 "Radicale is a CalDAV and CardDAV server. It allows synchronization and "
@@ -7280,7 +7280,7 @@ msgstr ""
 "radicale.org/master.html#supported-clients\"&gt;&lt;/a&gt; . O Radicale pode "
 "ser acessado por qualquer usuário com um login {box_name} ."
 
-#: plinth/modules/radicale/__init__.py:33
+#: plinth/modules/radicale/__init__.py:32
 msgid ""
 "Radicale provides a basic web interface, which only supports creating new "
 "calendars and addressbooks. It does not support adding events or contacts, "
@@ -7290,7 +7290,7 @@ msgstr ""
 "novos calendários e catálogos de endereços. Não permite adicionar eventos ou "
 "contatos, o que deve ser feito usando um cliente separado."
 
-#: plinth/modules/radicale/__init__.py:55
+#: plinth/modules/radicale/__init__.py:52
 #: plinth/modules/radicale/manifest.py:74
 msgid "Radicale"
 msgstr "Radical"

plinth/locale/ru/LC_MESSAGES/django.po

@@ -7,7 +7,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-04-07 00:12+0000\n"
+"POT-Creation-Date: 2026-04-28 22:01+0000\n"
 "PO-Revision-Date: 2026-03-15 18:09+0000\n"
 "Last-Translator: OwlGale <owlgale@users.noreply.hosted.weblate.org>\n"
 "Language-Team: Russian <https://hosted.weblate.org/projects/freedombox/"
@@ -7224,7 +7224,7 @@ msgstr "Quasseldroid"
 msgid "IRC"
 msgstr "IRC"
 
-#: plinth/modules/radicale/__init__.py:27
+#: plinth/modules/radicale/__init__.py:26
 #, python-brace-format
 msgid ""
 "Radicale is a CalDAV and CardDAV server. It allows synchronization and "
@@ -7238,7 +7238,7 @@ msgstr ""
 "clients\">поддерживаемое клиентское приложение</a>. Доступ к Radicale может "
 "получить любой пользователь с логином {box_name}."
 
-#: plinth/modules/radicale/__init__.py:33
+#: plinth/modules/radicale/__init__.py:32
 msgid ""
 "Radicale provides a basic web interface, which only supports creating new "
 "calendars and addressbooks. It does not support adding events or contacts, "
@@ -7248,7 +7248,7 @@ msgstr ""
 "создание новых календарей и адресных книг. Он не поддерживает добавление "
 "событий или контактов, для этого требуется отдельный клиент."
 
-#: plinth/modules/radicale/__init__.py:55
+#: plinth/modules/radicale/__init__.py:52
 #: plinth/modules/radicale/manifest.py:74
 msgid "Radicale"
 msgstr "Radicale"

plinth/locale/si/LC_MESSAGES/django.po

@@ -7,7 +7,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-04-07 00:12+0000\n"
+"POT-Creation-Date: 2026-04-28 22:01+0000\n"
 "PO-Revision-Date: 2021-04-27 13:32+0000\n"
 "Last-Translator: HelaBasa <R45XvezA@protonmail.ch>\n"
 "Language-Team: Sinhala <https://hosted.weblate.org/projects/freedombox/"
@@ -6343,7 +6343,7 @@ msgstr ""
 msgid "IRC"
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:27
+#: plinth/modules/radicale/__init__.py:26
 #, python-brace-format
 msgid ""
 "Radicale is a CalDAV and CardDAV server. It allows synchronization and "
@@ -6352,14 +6352,14 @@ msgid ""
 "a> is needed. Radicale can be accessed by any user with a {box_name} login."
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:33
+#: plinth/modules/radicale/__init__.py:32
 msgid ""
 "Radicale provides a basic web interface, which only supports creating new "
 "calendars and addressbooks. It does not support adding events or contacts, "
 "which must be done using a separate client."
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:55
+#: plinth/modules/radicale/__init__.py:52
 #: plinth/modules/radicale/manifest.py:74
 msgid "Radicale"
 msgstr ""

plinth/locale/sl/LC_MESSAGES/django.po

@@ -7,7 +7,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-04-07 00:12+0000\n"
+"POT-Creation-Date: 2026-04-28 22:01+0000\n"
 "PO-Revision-Date: 2022-09-14 17:19+0000\n"
 "Last-Translator: ikmaak <info@ikmaak.nl>\n"
 "Language-Team: Slovenian <https://hosted.weblate.org/projects/freedombox/"
@@ -6698,7 +6698,7 @@ msgstr "Quasseldroid"
 msgid "IRC"
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:27
+#: plinth/modules/radicale/__init__.py:26
 #, python-brace-format
 msgid ""
 "Radicale is a CalDAV and CardDAV server. It allows synchronization and "
@@ -6707,14 +6707,14 @@ msgid ""
 "a> is needed. Radicale can be accessed by any user with a {box_name} login."
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:33
+#: plinth/modules/radicale/__init__.py:32
 msgid ""
 "Radicale provides a basic web interface, which only supports creating new "
 "calendars and addressbooks. It does not support adding events or contacts, "
 "which must be done using a separate client."
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:55
+#: plinth/modules/radicale/__init__.py:52
 #: plinth/modules/radicale/manifest.py:74
 msgid "Radicale"
 msgstr ""

plinth/locale/sq/LC_MESSAGES/django.po

@@ -7,8 +7,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-04-07 00:12+0000\n"
+"POT-Creation-Date: 2026-04-28 22:01+0000\n"
-"PO-Revision-Date: 2026-03-26 09:09+0000\n"
+"PO-Revision-Date: 2026-04-08 07:09+0000\n"
 "Last-Translator: Besnik Bleta <besnik@programeshqip.org>\n"
 "Language-Team: Albanian <https://hosted.weblate.org/projects/freedombox/"
 "freedombox/sq/>\n"
@@ -7237,7 +7237,7 @@ msgstr "Quasseldroid"
 msgid "IRC"
 msgstr "IRC"
 
-#: plinth/modules/radicale/__init__.py:27
+#: plinth/modules/radicale/__init__.py:26
 #, python-brace-format
 msgid ""
 "Radicale is a CalDAV and CardDAV server. It allows synchronization and "
@@ -7252,7 +7252,7 @@ msgstr ""
 "Radicale mund të hyhet nga cilido përdorues me kredenciale hyrjeje në "
 "{box_name}."
 
-#: plinth/modules/radicale/__init__.py:33
+#: plinth/modules/radicale/__init__.py:32
 msgid ""
 "Radicale provides a basic web interface, which only supports creating new "
 "calendars and addressbooks. It does not support adding events or contacts, "
@@ -7262,7 +7262,7 @@ msgstr ""
 "të ri dhe librash adresash. S’mbulon shtim veprimtarish ose kontaktesh, çka "
 "duhen bërë duke përdorur një tjetër klient."
 
-#: plinth/modules/radicale/__init__.py:55
+#: plinth/modules/radicale/__init__.py:52
 #: plinth/modules/radicale/manifest.py:74
 msgid "Radicale"
 msgstr "Radicale"
@@ -9899,14 +9899,12 @@ msgstr "Përpunoni përdoruesin %(username)s"
 
 #: plinth/modules/users/templates/users_login.html:30
 msgid "Logging in with passkey failed: "
-msgstr ""
+msgstr "Hyrja me kyçkalim dështoi: "
 
 #: plinth/modules/users/templates/users_login.html:41
 #: plinth/modules/users/templates/users_passkeys.html:41
-#, fuzzy
-#| msgid "This app does not support diagnostics"
 msgid "Browser does not support passkeys."
-msgstr "Ky aplikacion s’mbulon diagnostikime"
+msgstr "Shfletuesi s’mbulon kyçkalime."
 
 #: plinth/modules/users/templates/users_login.html:57
 msgid "Login"
@@ -9915,28 +9913,28 @@ msgstr "Hyrje"
 #: plinth/modules/users/templates/users_login.html:70
 #: plinth/modules/users/templates/users_login.html:72
 msgid "Log in with passkey"
-msgstr ""
+msgstr "Hyni me kyçkalim"
 
 #: plinth/modules/users/templates/users_passkey_edit.html:19
-#, fuzzy
-#| msgid "Update setup"
 msgid "Update Passkey"
-msgstr "Përditësoni ujdisjen"
+msgstr "Përditësoni Kyçkalimin"
 
 #: plinth/modules/users/templates/users_passkeys.html:30
 msgid "Adding passkey failed: "
-msgstr ""
+msgstr "Shtimi i kyçkalimit dështoi: "
 
 #: plinth/modules/users/templates/users_passkeys.html:48
 #: plinth/modules/users/views.py:314
 msgid "Passkeys"
-msgstr ""
+msgstr "Kyçkalime"
 
 #: plinth/modules/users/templates/users_passkeys.html:57
 msgid ""
 "Working with passkeys requires using browser's Javascript API. Please enable "
 "Javascript support in your browser to continue."
 msgstr ""
+"Puna me kyçkalime lyp përdorim të API-t Javascript të shfletuesit. Ju "
+"lutemi, që të vazhdohet, aktivizoni mbulim Javascript-i në shfletuesin tuaj."
 
 #: plinth/modules/users/templates/users_passkeys.html:66
 msgid ""
@@ -9947,47 +9945,46 @@ msgid ""
 "server knows only the public information that can used to verify user's "
 "signatures."
 msgstr ""
+"Kyçkalimet janë një mënyrë verifikimi identiteti përdoruesit duke përdorur "
+"nënshkrime dixhitale. Janë një alternativë më e siguruar se fjalëkalimet. "
+"Informacioni i fshehtë mbahet nga përdoruesi në telefonin e tij, portativin, "
+"ose token-in hardware dhe shkyçet duke përdorur një PIN, shenja gishtash ose "
+"“face ID”. S’ruhet të fshehta te shërbyesi. Shërbyesi njeh vetëm "
+"informacionin publik që mund të përdoret për të verifikuar nënshkrime të "
+"përdoruesit."
 
 #: plinth/modules/users/templates/users_passkeys.html:83
 #: plinth/modules/users/templates/users_passkeys.html:85
-#, fuzzy
-#| msgid "Add password"
 msgid "Add passkey"
-msgstr "Shtoni fjalëkalim"
+msgstr "Shtoni kyçkalim"
 
 #: plinth/modules/users/templates/users_passkeys.html:93
-#, fuzzy
-#| msgid "Domain"
 msgid "For Domain"
-msgstr "Përkatësi"
+msgstr "Për Përkatësi"
 
 #: plinth/modules/users/templates/users_passkeys.html:94
 msgid "Added"
-msgstr ""
+msgstr "U shtua"
 
 #: plinth/modules/users/templates/users_passkeys.html:95
-#, fuzzy
-#| msgid "Last scanned: "
 msgid "Last Used"
-msgstr "Skanuar së fundi më: "
+msgstr "Përdorur Së Fundi Më"
 
 #: plinth/modules/users/templates/users_passkeys.html:126
 msgid "No passkeys added to user account."
-msgstr ""
+msgstr "Te llogari përdoruesi, s’u shtuan kyçkalime."
 
 #: plinth/modules/users/templates/users_passkeys.html:135
 msgid "Delete passkey <em class=\"passkey-name\"></em>?"
-msgstr ""
+msgstr "Të fshihet kyçkalimi <em class=\"passkey-name\"></em>?"
 
 #: plinth/modules/users/templates/users_passkeys.html:145
 msgid "You will need this passkey's device to add it back again."
-msgstr ""
+msgstr "Që ta rishtoni, do t’ju duhet pajisja e këtij kyçkalimi."
 
 #: plinth/modules/users/templates/users_passkeys.html:152
-#, fuzzy
-#| msgid "Delete user"
 msgid "Delete passkey"
-msgstr "Fshi përdorues"
+msgstr "Fshije kyçkalimin"
 
 #: plinth/modules/users/templates/users_passkeys.html:155
 #: plinth/modules/users/templates/users_update.html:72
@@ -10003,6 +10000,7 @@ msgstr "Përpunoni Përdoruesin <em>%(username)s</em>"
 #, python-format
 msgid "Use <a href=\"%(passkeys_url)s\">passkeys</a> for better security."
 msgstr ""
+"Për siguri më të mirë, përdorni <a href=\"%(passkeys_url)s\">kyçkalime</a>."
 
 #: plinth/modules/users/templates/users_update.html:29
 #, python-format
@@ -10069,20 +10067,16 @@ msgid "Password changed successfully."
 msgstr "Fjalëkalimi u ndryshua me sukses."
 
 #: plinth/modules/users/views.py:420
-#, fuzzy
-#| msgid "A share with this name already exists."
 msgid "Passkey with that identifier already exists."
-msgstr "Ka tashmë një pjesë me këtë emër."
+msgstr "Ka tashmë një kyçkalim me atë identifikues."
 
 #: plinth/modules/users/views.py:431
-#, fuzzy
-#| msgid "Edit User"
 msgid "Edit Passkey"
-msgstr "Përpunoni Përdorues"
+msgstr "Përpunoni Kyçkalim"
 
 #: plinth/modules/users/views.py:518 plinth/modules/users/views.py:542
 msgid "Passkey used is not known."
-msgstr ""
+msgstr "Kyçkalimi i përdorur s’njihet."
 
 #: plinth/modules/wireguard/__init__.py:20
 msgid "WireGuard is a fast, modern, secure VPN tunnel."
@@ -10251,7 +10245,7 @@ msgstr "IP VPN-je %(box_name)s për shërbime"
 
 #: plinth/modules/wireguard/templates/wireguard.html:50
 msgid "Peers"
-msgstr ""
+msgstr "Ortakë"
 
 #: plinth/modules/wireguard/templates/wireguard.html:52
 msgid "Peers allowed to connect to this server:"
@@ -10873,10 +10867,8 @@ msgid " System"
 msgstr " Sistem"
 
 #: plinth/templates/base.html:179 plinth/templates/base.html:180
-#, fuzzy
-#| msgid "Manage Aliases"
 msgid "Manage passkeys"
-msgstr "Administroni Aliase"
+msgstr "Administroni kyçkalime"
 
 #: plinth/templates/base.html:186 plinth/templates/base.html:187
 msgid "Change password"

plinth/locale/sr/LC_MESSAGES/django.po

@@ -7,7 +7,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-04-07 00:12+0000\n"
+"POT-Creation-Date: 2026-04-28 22:01+0000\n"
 "PO-Revision-Date: 2022-09-14 17:20+0000\n"
 "Last-Translator: ikmaak <info@ikmaak.nl>\n"
 "Language-Team: Serbian <https://hosted.weblate.org/projects/freedombox/"
@@ -6597,7 +6597,7 @@ msgstr "Quasseldroid"
 msgid "IRC"
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:27
+#: plinth/modules/radicale/__init__.py:26
 #, python-brace-format
 msgid ""
 "Radicale is a CalDAV and CardDAV server. It allows synchronization and "
@@ -6606,14 +6606,14 @@ msgid ""
 "a> is needed. Radicale can be accessed by any user with a {box_name} login."
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:33
+#: plinth/modules/radicale/__init__.py:32
 msgid ""
 "Radicale provides a basic web interface, which only supports creating new "
 "calendars and addressbooks. It does not support adding events or contacts, "
 "which must be done using a separate client."
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:55
+#: plinth/modules/radicale/__init__.py:52
 #: plinth/modules/radicale/manifest.py:74
 msgid "Radicale"
 msgstr ""

plinth/locale/sv/LC_MESSAGES/django.po

@@ -7,9 +7,9 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-04-07 00:12+0000\n"
+"POT-Creation-Date: 2026-04-28 22:01+0000\n"
-"PO-Revision-Date: 2026-03-11 22:09+0000\n"
+"PO-Revision-Date: 2026-04-15 10:10+0000\n"
-"Last-Translator: Daniel Wiik <d.wiik@outlook.com>\n"
+"Last-Translator: bittin1ddc447d824349b2 <bittin@reimu.nl>\n"
 "Language-Team: Swedish <https://hosted.weblate.org/projects/freedombox/"
 "freedombox/sv/>\n"
 "Language: sv\n"
@@ -17,7 +17,7 @@ msgstr ""
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=n != 1;\n"
-"X-Generator: Weblate 5.17-dev\n"
+"X-Generator: Weblate 5.17.1-dev\n"
 
 #: plinth/config.py:103
 #, python-brace-format
@@ -7176,7 +7176,7 @@ msgstr "Quasseldroid"
 msgid "IRC"
 msgstr "IRC"
 
-#: plinth/modules/radicale/__init__.py:27
+#: plinth/modules/radicale/__init__.py:26
 #, python-brace-format
 msgid ""
 "Radicale is a CalDAV and CardDAV server. It allows synchronization and "
@@ -7190,7 +7190,7 @@ msgstr ""
 "användarklient</a>. Radikal kan nås av alla användare med en {box_name} "
 "inloggning."
 
-#: plinth/modules/radicale/__init__.py:33
+#: plinth/modules/radicale/__init__.py:32
 msgid ""
 "Radicale provides a basic web interface, which only supports creating new "
 "calendars and addressbooks. It does not support adding events or contacts, "
@@ -7200,7 +7200,7 @@ msgstr ""
 "skapandet av nya kalendrar och adressböcker. Det stöder inte att lägga till "
 "händelser eller kontakter, som måste göras med hjälp av en separat klient."
 
-#: plinth/modules/radicale/__init__.py:55
+#: plinth/modules/radicale/__init__.py:52
 #: plinth/modules/radicale/manifest.py:74
 msgid "Radicale"
 msgstr "Radicale"
@@ -9808,14 +9808,12 @@ msgstr "Redigera användare %(username)s"
 
 #: plinth/modules/users/templates/users_login.html:30
 msgid "Logging in with passkey failed: "
-msgstr ""
+msgstr "Inloggning med lösennyckel misslyckades: "
 
 #: plinth/modules/users/templates/users_login.html:41
 #: plinth/modules/users/templates/users_passkeys.html:41
-#, fuzzy
-#| msgid "This app does not support diagnostics"
 msgid "Browser does not support passkeys."
-msgstr "Den här appen stöder inte diagnostik"
+msgstr "Webbläsaren stöder inte lösennycklar."
 
 #: plinth/modules/users/templates/users_login.html:57
 msgid "Login"
@@ -9824,28 +9822,28 @@ msgstr "Logga in"
 #: plinth/modules/users/templates/users_login.html:70
 #: plinth/modules/users/templates/users_login.html:72
 msgid "Log in with passkey"
-msgstr ""
+msgstr "Logga in med lösennyckel"
 
 #: plinth/modules/users/templates/users_passkey_edit.html:19
-#, fuzzy
-#| msgid "Update setup"
 msgid "Update Passkey"
-msgstr "Uppdatera inställningar"
+msgstr "Uppdatera lösennyckel"
 
 #: plinth/modules/users/templates/users_passkeys.html:30
 msgid "Adding passkey failed: "
-msgstr ""
+msgstr "Att lägga till lösennyckel misslyckades: "
 
 #: plinth/modules/users/templates/users_passkeys.html:48
 #: plinth/modules/users/views.py:314
 msgid "Passkeys"
-msgstr ""
+msgstr "Lösennycklar"
 
 #: plinth/modules/users/templates/users_passkeys.html:57
 msgid ""
 "Working with passkeys requires using browser's Javascript API. Please enable "
 "Javascript support in your browser to continue."
 msgstr ""
+"Att arbeta med lösennycklar kräver att du använder webbläsarens Javascript "
+"API. Vänligen aktivera Javascript stöd i din webbläsare för att fortsätta."
 
 #: plinth/modules/users/templates/users_passkeys.html:66
 msgid ""
@@ -9856,47 +9854,45 @@ msgid ""
 "server knows only the public information that can used to verify user's "
 "signatures."
 msgstr ""
+"Lösennycklar är sätt att verifiera användarens identitet med hjälp av "
+"digitala signaturer. De är ett säkrare alternativ till lösenord. Hemlig "
+"information hålls med användaren på sin telefon, bärbar dator eller en "
+"hårdvaru token och låst med en PIN, fingeravtryck eller ansikte ID. Inga "
+"hemligheter lagras på servern. Servern vet bara den offentliga informationen "
+"som kan användas för att verifiera användarens signaturer."
 
 #: plinth/modules/users/templates/users_passkeys.html:83
 #: plinth/modules/users/templates/users_passkeys.html:85
-#, fuzzy
-#| msgid "Add password"
 msgid "Add passkey"
-msgstr "Lägg till lösenord"
+msgstr "Lägg till lösennyckel"
 
 #: plinth/modules/users/templates/users_passkeys.html:93
-#, fuzzy
-#| msgid "Domain"
 msgid "For Domain"
-msgstr "Domän"
+msgstr "För domän"
 
 #: plinth/modules/users/templates/users_passkeys.html:94
 msgid "Added"
-msgstr ""
+msgstr "Tillagd"
 
 #: plinth/modules/users/templates/users_passkeys.html:95
-#, fuzzy
-#| msgid "Last scanned: "
 msgid "Last Used"
-msgstr "Senast skannad: "
+msgstr "Senast använd"
 
 #: plinth/modules/users/templates/users_passkeys.html:126
 msgid "No passkeys added to user account."
-msgstr ""
+msgstr "Inga lösennycklar har lagts till på användarkontot."
 
 #: plinth/modules/users/templates/users_passkeys.html:135
 msgid "Delete passkey <em class=\"passkey-name\"></em>?"
-msgstr ""
+msgstr "Radera lösennyckel <em class=\"passkey-name\"></em>?"
 
 #: plinth/modules/users/templates/users_passkeys.html:145
 msgid "You will need this passkey's device to add it back again."
-msgstr ""
+msgstr "Du behöver denna lösennyckels enhet för att lägga till den igen."
 
 #: plinth/modules/users/templates/users_passkeys.html:152
-#, fuzzy
-#| msgid "Delete user"
 msgid "Delete passkey"
-msgstr "Radera användare"
+msgstr "Radera lösennyckel"
 
 #: plinth/modules/users/templates/users_passkeys.html:155
 #: plinth/modules/users/templates/users_update.html:72
@@ -9912,6 +9908,7 @@ msgstr "Redigera användare <em>%(username)s</em>"
 #, python-format
 msgid "Use <a href=\"%(passkeys_url)s\">passkeys</a> for better security."
 msgstr ""
+"Använd <a href=\"%(passkeys_url)s\">lösennycklar</a> för bättre säkerhet."
 
 #: plinth/modules/users/templates/users_update.html:29
 #, python-format
@@ -9977,20 +9974,16 @@ msgid "Password changed successfully."
 msgstr "Lösenordet har ändrats."
 
 #: plinth/modules/users/views.py:420
-#, fuzzy
-#| msgid "A share with this name already exists."
 msgid "Passkey with that identifier already exists."
-msgstr "Det finns redan en share med det här namnet."
+msgstr "Lösennyckel med den identifieraren finns redan."
 
 #: plinth/modules/users/views.py:431
-#, fuzzy
-#| msgid "Edit User"
 msgid "Edit Passkey"
-msgstr "Redigera användar"
+msgstr "Redigera Lösennyckel"
 
 #: plinth/modules/users/views.py:518 plinth/modules/users/views.py:542
 msgid "Passkey used is not known."
-msgstr ""
+msgstr "Lösennyckel som används är inte känd."
 
 #: plinth/modules/wireguard/__init__.py:20
 msgid "WireGuard is a fast, modern, secure VPN tunnel."
@@ -10777,10 +10770,8 @@ msgid " System"
 msgstr " System"
 
 #: plinth/templates/base.html:179 plinth/templates/base.html:180
-#, fuzzy
-#| msgid "Manage Aliases"
 msgid "Manage passkeys"
-msgstr "Hantera alias"
+msgstr "Hantera lösennycklar"
 
 #: plinth/templates/base.html:186 plinth/templates/base.html:187
 msgid "Change password"
@@ -10836,7 +10827,7 @@ msgstr "Mobil"
 
 #: plinth/templates/clients.html:82
 msgid "Android APK"
-msgstr ""
+msgstr "Android APK"
 
 #: plinth/templates/clients.html:91
 msgid "Play Store"

plinth/locale/ta/LC_MESSAGES/django.po

@@ -7,7 +7,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-04-07 00:12+0000\n"
+"POT-Creation-Date: 2026-04-28 22:01+0000\n"
 "PO-Revision-Date: 2026-03-02 19:53+0000\n"
 "Last-Translator: James Valleroy <jvalleroy@mailbox.org>\n"
 "Language-Team: Tamil <https://hosted.weblate.org/projects/freedombox/"
@@ -7140,7 +7140,7 @@ msgstr "குவாசெல்ட்ராய்டு"
 msgid "IRC"
 msgstr "Irc"
 
-#: plinth/modules/radicale/__init__.py:27
+#: plinth/modules/radicale/__init__.py:26
 #, python-brace-format
 msgid ""
 "Radicale is a CalDAV and CardDAV server. It allows synchronization and "
@@ -7153,7 +7153,7 @@ msgstr ""
 "radicale.org/master.html#supported-comients\"> ஆதரிக்கப்பட்ட கிளையன்ட் பயன்பாடு </"
 "a> தேவை. {box_name} உள்நுழைவுடன் எந்த பயனரும் ராடிகலை அணுகலாம்."
 
-#: plinth/modules/radicale/__init__.py:33
+#: plinth/modules/radicale/__init__.py:32
 msgid ""
 "Radicale provides a basic web interface, which only supports creating new "
 "calendars and addressbooks. It does not support adding events or contacts, "
@@ -7163,7 +7163,7 @@ msgstr ""
 "முகவரி புத்தகங்களை உருவாக்குவதை மட்டுமே ஆதரிக்கிறது. இது நிகழ்வுகள் அல்லது "
 "தொடர்புகளைச் சேர்ப்பதை ஆதரிக்காது, இது ஒரு தனி கிளையண்டைப் பயன்படுத்தி செய்யப்பட வேண்டும்."
 
-#: plinth/modules/radicale/__init__.py:55
+#: plinth/modules/radicale/__init__.py:52
 #: plinth/modules/radicale/manifest.py:74
 msgid "Radicale"
 msgstr "தீவிரமான"

plinth/locale/te/LC_MESSAGES/django.po

@@ -9,7 +9,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: FreedomBox UI\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-04-07 00:12+0000\n"
+"POT-Creation-Date: 2026-04-28 22:01+0000\n"
 "PO-Revision-Date: 2025-05-14 17:03+0000\n"
 "Last-Translator: Sripath Roy Koganti <sripathroy@swecha.net>\n"
 "Language-Team: Telugu <https://hosted.weblate.org/projects/freedombox/"
@@ -7011,7 +7011,7 @@ msgstr "క్వాసెల్ డ్రొఇడ్"
 msgid "IRC"
 msgstr "IRC"
 
-#: plinth/modules/radicale/__init__.py:27
+#: plinth/modules/radicale/__init__.py:26
 #, python-brace-format
 msgid ""
 "Radicale is a CalDAV and CardDAV server. It allows synchronization and "
@@ -7024,7 +7024,7 @@ msgstr ""
 "href=\"https://radicale.org/master.html#supported-clients\">మద్దతు ఉన్న క్లయింట్ "
 "అప్లికేషన్</a> అవసరం. {box_name} లాగిన్ ఉన్న ఏ యూజర్ అయినా Radicaleని యాక్సెస్ చేయవచ్చు."
 
-#: plinth/modules/radicale/__init__.py:33
+#: plinth/modules/radicale/__init__.py:32
 msgid ""
 "Radicale provides a basic web interface, which only supports creating new "
 "calendars and addressbooks. It does not support adding events or contacts, "
@@ -7034,7 +7034,7 @@ msgstr ""
 "రూపొందించడానికి మాత్రమే మద్దతు ఇస్తుంది. ఈవెంట్‌లు లేదా పరిచయాలను జోడించడానికి ఇది మద్దతు ఇవ్వదు, ఇది "
 "ప్రత్యేక క్లయింట్‌ని ఉపయోగించి చేయాలి."
 
-#: plinth/modules/radicale/__init__.py:55
+#: plinth/modules/radicale/__init__.py:52
 #: plinth/modules/radicale/manifest.py:74
 msgid "Radicale"
 msgstr "రాడికేల్"

plinth/locale/tr/LC_MESSAGES/django.po

@@ -6,8 +6,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: \n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-04-07 00:12+0000\n"
+"POT-Creation-Date: 2026-04-28 22:01+0000\n"
-"PO-Revision-Date: 2026-03-25 07:09+0000\n"
+"PO-Revision-Date: 2026-04-09 10:09+0000\n"
 "Last-Translator: Burak Yavuz <hitowerdigit@hotmail.com>\n"
 "Language-Team: Turkish <https://hosted.weblate.org/projects/freedombox/"
 "freedombox/tr/>\n"
@@ -7191,7 +7191,7 @@ msgstr "Quasseldroid"
 msgid "IRC"
 msgstr "IRC"
 
-#: plinth/modules/radicale/__init__.py:27
+#: plinth/modules/radicale/__init__.py:26
 #, python-brace-format
 msgid ""
 "Radicale is a CalDAV and CardDAV server. It allows synchronization and "
@@ -7205,7 +7205,7 @@ msgstr ""
 "istemci uygulaması</a> gereklidir. Radicale'ye {box_name} oturum açma adı "
 "ile herhangi bir kullanıcı tarafından erişilebilir."
 
-#: plinth/modules/radicale/__init__.py:33
+#: plinth/modules/radicale/__init__.py:32
 msgid ""
 "Radicale provides a basic web interface, which only supports creating new "
 "calendars and addressbooks. It does not support adding events or contacts, "
@@ -7215,7 +7215,7 @@ msgstr ""
 "temel bir web arayüzü sağlar. Ayrı bir istemci kullanılarak yapılması "
 "zorunlu olan olayların veya kişilerin eklenmesini desteklemez."
 
-#: plinth/modules/radicale/__init__.py:55
+#: plinth/modules/radicale/__init__.py:52
 #: plinth/modules/radicale/manifest.py:74
 msgid "Radicale"
 msgstr "Radicale"
@@ -9835,14 +9835,12 @@ msgstr "%(username)s kullanıcısını düzenle"
 
 #: plinth/modules/users/templates/users_login.html:30
 msgid "Logging in with passkey failed: "
-msgstr ""
+msgstr "Geçiş anahtarıyla oturum açma başarısız oldu: "
 
 #: plinth/modules/users/templates/users_login.html:41
 #: plinth/modules/users/templates/users_passkeys.html:41
-#, fuzzy
-#| msgid "This app does not support diagnostics"
 msgid "Browser does not support passkeys."
-msgstr "Bu uygulama tanılamayı desteklemiyor"
+msgstr "Tarayıcı geçiş anahtarlarını desteklemiyor."
 
 #: plinth/modules/users/templates/users_login.html:57
 msgid "Login"
@@ -9851,28 +9849,29 @@ msgstr "Oturum aç"
 #: plinth/modules/users/templates/users_login.html:70
 #: plinth/modules/users/templates/users_login.html:72
 msgid "Log in with passkey"
-msgstr ""
+msgstr "Geçiş anahtarıyla oturum aç"
 
 #: plinth/modules/users/templates/users_passkey_edit.html:19
-#, fuzzy
-#| msgid "Update setup"
 msgid "Update Passkey"
-msgstr "Ayarlamayı güncelle"
+msgstr "Geçiş Anahtarını Güncelle"
 
 #: plinth/modules/users/templates/users_passkeys.html:30
 msgid "Adding passkey failed: "
-msgstr ""
+msgstr "Geçiş anahtarını ekleme başarısız oldu: "
 
 #: plinth/modules/users/templates/users_passkeys.html:48
 #: plinth/modules/users/views.py:314
 msgid "Passkeys"
-msgstr ""
+msgstr "Geçiş anahtarları"
 
 #: plinth/modules/users/templates/users_passkeys.html:57
 msgid ""
 "Working with passkeys requires using browser's Javascript API. Please enable "
 "Javascript support in your browser to continue."
 msgstr ""
+"Geçiş anahtarlarıyla çalışmak, tarayıcının Javascript API'sinin "
+"kullanılmasını gerektirir. Devam etmek için lütfen tarayıcınızda Javascript "
+"desteğini etkinleştirin."
 
 #: plinth/modules/users/templates/users_passkeys.html:66
 msgid ""
@@ -9883,47 +9882,46 @@ msgid ""
 "server knows only the public information that can used to verify user's "
 "signatures."
 msgstr ""
+"Geçiş anahtarları, dijital imzaları kullanarak kullanıcının kimliğini "
+"doğrulamasının bir yoludur. Parolalara göre daha güvenli bir "
+"alternatiftirdir. Gizli bilgiler kullanıcının telefonunda, dizüstü "
+"bilgisayarında veya donanım belirtecinde saklanır ve PIN, parmak izi veya "
+"yüz kimliği kullanılarak kilidi açılır. Sunucuda hiçbir gizli anahtar "
+"saklanmaz. Sunucu sadece kullanıcının imzalarını doğrulamak için "
+"kullanılabilecek genel bilgileri bilir."
 
 #: plinth/modules/users/templates/users_passkeys.html:83
 #: plinth/modules/users/templates/users_passkeys.html:85
-#, fuzzy
-#| msgid "Add password"
 msgid "Add passkey"
-msgstr "Parola ekle"
+msgstr "Geçiş anahtarı ekle"
 
 #: plinth/modules/users/templates/users_passkeys.html:93
-#, fuzzy
-#| msgid "Domain"
 msgid "For Domain"
-msgstr "Etki alanı"
+msgstr "Etki Alanı İçin"
 
 #: plinth/modules/users/templates/users_passkeys.html:94
 msgid "Added"
-msgstr ""
+msgstr "Eklenen"
 
 #: plinth/modules/users/templates/users_passkeys.html:95
-#, fuzzy
-#| msgid "Last scanned: "
 msgid "Last Used"
-msgstr "Son taranan: "
+msgstr "Son Kullanılan"
 
 #: plinth/modules/users/templates/users_passkeys.html:126
 msgid "No passkeys added to user account."
-msgstr ""
+msgstr "Kullanıcı hesabına eklenen geçiş anahtarları yok."
 
 #: plinth/modules/users/templates/users_passkeys.html:135
 msgid "Delete passkey <em class=\"passkey-name\"></em>?"
-msgstr ""
+msgstr "<em class=\"passkey-name\"></em> geçiş anahtarı silinsin mi?"
 
 #: plinth/modules/users/templates/users_passkeys.html:145
 msgid "You will need this passkey's device to add it back again."
-msgstr ""
+msgstr "Tekrar eklemek için bu geçiş anahtarının cihazına ihtiyacınız olacak."
 
 #: plinth/modules/users/templates/users_passkeys.html:152
-#, fuzzy
-#| msgid "Delete user"
 msgid "Delete passkey"
-msgstr "Kullanıcıyı sil"
+msgstr "Geçiş anahtarını sil"
 
 #: plinth/modules/users/templates/users_passkeys.html:155
 #: plinth/modules/users/templates/users_update.html:72
@@ -9939,6 +9937,8 @@ msgstr "<em>%(username)s</em> Kullanıcısını Düzenleyin"
 #, python-format
 msgid "Use <a href=\"%(passkeys_url)s\">passkeys</a> for better security."
 msgstr ""
+"Daha iyi güvenlik için <a href=\"%(passkeys_url)s\">geçiş anahtarlarını</a> "
+"kullanın."
 
 #: plinth/modules/users/templates/users_update.html:29
 #, python-format
@@ -10005,20 +10005,16 @@ msgid "Password changed successfully."
 msgstr "Parola başarılı olarak değiştirildi."
 
 #: plinth/modules/users/views.py:420
-#, fuzzy
-#| msgid "A share with this name already exists."
 msgid "Passkey with that identifier already exists."
-msgstr "Bu ada sahip bir paylaşım zaten var."
+msgstr "Bu tanımlayıcıya sahip geçiş anahtarı zaten var."
 
 #: plinth/modules/users/views.py:431
-#, fuzzy
-#| msgid "Edit User"
 msgid "Edit Passkey"
-msgstr "Kullanıcıyı Düzenle"
+msgstr "Geçiş Anahtarını Düzenle"
 
 #: plinth/modules/users/views.py:518 plinth/modules/users/views.py:542
 msgid "Passkey used is not known."
-msgstr ""
+msgstr "Kullanılan geçiş anahtarı bilinmiyor."
 
 #: plinth/modules/wireguard/__init__.py:20
 msgid "WireGuard is a fast, modern, secure VPN tunnel."
@@ -10802,10 +10798,8 @@ msgid " System"
 msgstr " Sistem"
 
 #: plinth/templates/base.html:179 plinth/templates/base.html:180
-#, fuzzy
-#| msgid "Manage Aliases"
 msgid "Manage passkeys"
-msgstr "Kod Adlarını Yönet"
+msgstr "Geçiş anahtarlarını yönet"
 
 #: plinth/templates/base.html:186 plinth/templates/base.html:187
 msgid "Change password"

plinth/locale/uk/LC_MESSAGES/django.po

@@ -7,7 +7,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-04-07 00:12+0000\n"
+"POT-Creation-Date: 2026-04-28 22:01+0000\n"
 "PO-Revision-Date: 2025-12-17 07:00+0000\n"
 "Last-Translator: Максим Горпиніч <gorpinicmaksim0@gmail.com>\n"
 "Language-Team: Ukrainian <https://hosted.weblate.org/projects/freedombox/"
@@ -7224,7 +7224,7 @@ msgstr "Quasseldroid"
 msgid "IRC"
 msgstr "IRC"
 
-#: plinth/modules/radicale/__init__.py:27
+#: plinth/modules/radicale/__init__.py:26
 #, python-brace-format
 msgid ""
 "Radicale is a CalDAV and CardDAV server. It allows synchronization and "
@@ -7238,7 +7238,7 @@ msgstr ""
 "clients\">підтримувана клієнтська програма</a>. Radicale може отримати "
 "доступ будь-який користувач із логіном {box_name}."
 
-#: plinth/modules/radicale/__init__.py:33
+#: plinth/modules/radicale/__init__.py:32
 msgid ""
 "Radicale provides a basic web interface, which only supports creating new "
 "calendars and addressbooks. It does not support adding events or contacts, "
@@ -7248,7 +7248,7 @@ msgstr ""
 "календарів та адресних книг. Він не підтримує додавання подій або контактів, "
 "для цього необхідно використовувати окремий клієнт."
 
-#: plinth/modules/radicale/__init__.py:55
+#: plinth/modules/radicale/__init__.py:52
 #: plinth/modules/radicale/manifest.py:74
 msgid "Radicale"
 msgstr "Radicale"

plinth/locale/vi/LC_MESSAGES/django.po

@@ -7,7 +7,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-04-07 00:12+0000\n"
+"POT-Creation-Date: 2026-04-28 22:01+0000\n"
 "PO-Revision-Date: 2021-07-28 08:34+0000\n"
 "Last-Translator: bruh <quangtrung02hn16@gmail.com>\n"
 "Language-Team: Vietnamese <https://hosted.weblate.org/projects/freedombox/"
@@ -6774,7 +6774,7 @@ msgstr ""
 msgid "IRC"
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:27
+#: plinth/modules/radicale/__init__.py:26
 #, python-brace-format
 msgid ""
 "Radicale is a CalDAV and CardDAV server. It allows synchronization and "
@@ -6783,14 +6783,14 @@ msgid ""
 "a> is needed. Radicale can be accessed by any user with a {box_name} login."
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:33
+#: plinth/modules/radicale/__init__.py:32
 msgid ""
 "Radicale provides a basic web interface, which only supports creating new "
 "calendars and addressbooks. It does not support adding events or contacts, "
 "which must be done using a separate client."
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:55
+#: plinth/modules/radicale/__init__.py:52
 #: plinth/modules/radicale/manifest.py:74
 msgid "Radicale"
 msgstr ""

plinth/locale/zh_Hans/LC_MESSAGES/django.po

@@ -7,8 +7,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: Plinth\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-04-07 00:12+0000\n"
+"POT-Creation-Date: 2026-04-28 22:01+0000\n"
-"PO-Revision-Date: 2026-03-04 05:09+0000\n"
+"PO-Revision-Date: 2026-04-08 07:09+0000\n"
 "Last-Translator: 大王叫我来巡山 "
 "<hamburger2048@users.noreply.hosted.weblate.org>\n"
 "Language-Team: Chinese (Simplified Han script) <https://hosted.weblate.org/"
@@ -6542,7 +6542,7 @@ msgstr ""
 msgid "IRC"
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:27
+#: plinth/modules/radicale/__init__.py:26
 #, python-brace-format
 msgid ""
 "Radicale is a CalDAV and CardDAV server. It allows synchronization and "
@@ -6555,14 +6555,14 @@ msgstr ""
 "master.html#supported-clients\">支持的客户端应用程序</a>。任何拥有 "
 "{box_name} 登录名的用户都可以访问 Radicale。"
 
-#: plinth/modules/radicale/__init__.py:33
+#: plinth/modules/radicale/__init__.py:32
 msgid ""
 "Radicale provides a basic web interface, which only supports creating new "
 "calendars and addressbooks. It does not support adding events or contacts, "
 "which must be done using a separate client."
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:55
+#: plinth/modules/radicale/__init__.py:52
 #: plinth/modules/radicale/manifest.py:74
 msgid "Radicale"
 msgstr ""
@@ -8851,10 +8851,8 @@ msgstr ""
 
 #: plinth/modules/users/templates/users_login.html:41
 #: plinth/modules/users/templates/users_passkeys.html:41
-#, fuzzy
-#| msgid "This app does not support diagnostics"
 msgid "Browser does not support passkeys."
-msgstr "此应用程序不支持诊断"
+msgstr "浏览器不支持 passkeys。"
 
 #: plinth/modules/users/templates/users_login.html:57
 msgid "Login"
@@ -8866,10 +8864,8 @@ msgid "Log in with passkey"
 msgstr ""
 
 #: plinth/modules/users/templates/users_passkey_edit.html:19
-#, fuzzy
-#| msgid "Update setup"
 msgid "Update Passkey"
-msgstr "更新安装程序"
+msgstr "更新 Passkey"
 
 #: plinth/modules/users/templates/users_passkeys.html:30
 msgid "Adding passkey failed: "
@@ -8898,26 +8894,20 @@ msgstr ""
 
 #: plinth/modules/users/templates/users_passkeys.html:83
 #: plinth/modules/users/templates/users_passkeys.html:85
-#, fuzzy
-#| msgid "Add password"
 msgid "Add passkey"
-msgstr "添加密码"
+msgstr "添加 passkey"
 
 #: plinth/modules/users/templates/users_passkeys.html:93
-#, fuzzy
-#| msgid "Domain"
 msgid "For Domain"
-msgstr "域名"
+msgstr "针对域名"
 
 #: plinth/modules/users/templates/users_passkeys.html:94
 msgid "Added"
 msgstr ""
 
 #: plinth/modules/users/templates/users_passkeys.html:95
-#, fuzzy
-#| msgid "Last scanned: "
 msgid "Last Used"
-msgstr "上次扫描： "
+msgstr "上次使用"
 
 #: plinth/modules/users/templates/users_passkeys.html:126
 msgid "No passkeys added to user account."
@@ -8932,10 +8922,8 @@ msgid "You will need this passkey's device to add it back again."
 msgstr ""
 
 #: plinth/modules/users/templates/users_passkeys.html:152
-#, fuzzy
-#| msgid "Delete user"
 msgid "Delete passkey"
-msgstr "删除用户"
+msgstr "删除 passkey"
 
 #: plinth/modules/users/templates/users_passkeys.html:155
 #: plinth/modules/users/templates/users_update.html:72
@@ -9011,16 +8999,12 @@ msgid "Password changed successfully."
 msgstr "已成功更改密码。"
 
 #: plinth/modules/users/views.py:420
-#, fuzzy
-#| msgid "A share with this name already exists."
 msgid "Passkey with that identifier already exists."
-msgstr "已存在同名共享。"
+msgstr "已存在该标识符的 Passkey。"
 
 #: plinth/modules/users/views.py:431
-#, fuzzy
-#| msgid "Edit User"
 msgid "Edit Passkey"
-msgstr "编辑用户"
+msgstr "编辑 Passkey"
 
 #: plinth/modules/users/views.py:518 plinth/modules/users/views.py:542
 msgid "Passkey used is not known."
@@ -9736,10 +9720,8 @@ msgid " System"
 msgstr " 系统"
 
 #: plinth/templates/base.html:179 plinth/templates/base.html:180
-#, fuzzy
-#| msgid "Manage Aliases"
 msgid "Manage passkeys"
-msgstr "管理别名"
+msgstr "管理 passkeys"
 
 #: plinth/templates/base.html:186 plinth/templates/base.html:187
 msgid "Change password"

plinth/locale/zh_Hant/LC_MESSAGES/django.po

@@ -7,7 +7,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-04-07 00:12+0000\n"
+"POT-Creation-Date: 2026-04-28 22:01+0000\n"
 "PO-Revision-Date: 2025-02-07 12:01+0000\n"
 "Last-Translator: pesder <j_h_liau@yahoo.com.tw>\n"
 "Language-Team: Chinese (Traditional Han script) <https://hosted.weblate.org/"
@@ -6674,7 +6674,7 @@ msgstr ""
 msgid "IRC"
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:27
+#: plinth/modules/radicale/__init__.py:26
 #, python-brace-format
 msgid ""
 "Radicale is a CalDAV and CardDAV server. It allows synchronization and "
@@ -6683,14 +6683,14 @@ msgid ""
 "a> is needed. Radicale can be accessed by any user with a {box_name} login."
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:33
+#: plinth/modules/radicale/__init__.py:32
 msgid ""
 "Radicale provides a basic web interface, which only supports creating new "
 "calendars and addressbooks. It does not support adding events or contacts, "
 "which must be done using a separate client."
 msgstr ""
 
-#: plinth/modules/radicale/__init__.py:55
+#: plinth/modules/radicale/__init__.py:52
 #: plinth/modules/radicale/manifest.py:74
 msgid "Radicale"
 msgstr ""

plinth/modules/api/urls.py

@@ -10,6 +10,4 @@ from plinth.modules.api import views
 
 urlpatterns = [
     re_path(r'^api/(?P<version>[0-9]+)/shortcuts/?$', public(views.shortcuts)),
-    re_path(r'^api/(?P<version>[0-9]+)/access-info/?$',
-            public(views.access_info)),
 ]

plinth/modules/api/views.py

@@ -7,22 +7,10 @@ import copy
 import json
 
 from django.core.serializers.json import DjangoJSONEncoder
-from django.http import HttpRequest, HttpResponse
+from django.http import HttpResponse
 from django.templatetags.static import static
 
 from plinth import frontpage
-from plinth.modules import names
-
-
-def access_info(request: HttpRequest, **kwargs) -> HttpResponse:
-    """API view to return a list of domains and types."""
-    domains = [{
-        'domain': domain.name,
-        'type': domain.domain_type.component_id
-    } for domain in names.components.DomainName.list()]
-    response = {'domains': domains}
-
-    return HttpResponse(json.dumps(response), content_type='application/json')
 
 
 def shortcuts(request, **kwargs):

plinth/modules/bepasty/privileged.py

@@ -91,8 +91,6 @@ def setup(domain_name: str):
 
     # Migrate from old bepasty:bepasty ownership to root:root
     shutil.chown(CONF_FILE, user='root', group='root')
-    action_utils.run(['deluser', 'bepasty'], check=False)
-    action_utils.run(['delgroup', 'bepasty'], check=False)
 
 
 @privileged
@@ -151,6 +149,6 @@ def _generate_password():
 
 @privileged
 def uninstall():
-    """Remove bepasty user, group and data."""
+    """Remove data and configuration file."""
     shutil.rmtree(DATA_DIR, ignore_errors=True)
     CONF_FILE.unlink(missing_ok=True)

plinth/modules/infinoted/data/usr/lib/sysusers.d/freedombox-infinoted.conf

@@ -0,0 +1,6 @@
+# Create system user and group to run infinoted as system daemon (as opposed to
+# running in particular user's account). The user is created at boot or when
+# 'systemd-sysusers freedombox-infinoted.conf' is run. To override this file as
+# system administrator, create a file /etc/sysusers.d/freedombox-infinoted.conf
+# or link it to /dev/null.
+u! infinoted - "Infinoted collaborative editing server" /var/lib/infinoted

plinth/modules/infinoted/privileged.py

@@ -1,10 +1,8 @@
 # SPDX-License-Identifier: AGPL-3.0-or-later
 """Configure infinoted."""
 
-import grp
 import os
 import pathlib
-import pwd
 import shutil
 import subprocess
 import time
@@ -126,21 +124,8 @@ def setup():
 
     action_utils.service_daemon_reload()
 
-    # Create infinoted group if needed.
+    # Create an 'infinoted' system user and group, if needed.
-    try:
+    action_utils.run(['systemd-sysusers', 'freedombox-infinoted.conf'])
-        grp.getgrnam('infinoted')
-    except KeyError:
-        action_utils.run(['addgroup', '--system', 'infinoted'], check=True)
-
-    # Create infinoted user if needed.
-    try:
-        pwd.getpwnam('infinoted')
-    except KeyError:
-        action_utils.run([
-            'adduser', '--system', '--ingroup', 'infinoted', '--home',
-            DATA_DIR, '--gecos', 'Infinoted collaborative editing server',
-            'infinoted'
-        ], check=True)
 
     for directory in (DATA_DIR, KEY_DIR, SYNC_DIR):
         if not os.path.exists(directory):

plinth/modules/radicale/__init__.py

@@ -5,7 +5,6 @@ FreedomBox app for radicale.
 
 import logging
 
-import augeas
 from django.utils.translation import gettext_lazy as _
 
 from plinth import app as app_module
@@ -37,15 +36,13 @@ _description = [
 
 logger = logging.getLogger(__name__)
 
-CONFIG_FILE = '/etc/radicale/config'
-
 
 class RadicaleApp(app_module.App):
     """FreedomBox app for Radicale."""
 
     app_id = 'radicale'
 
-    _version = 5
+    _version = 6
 
     def __init__(self) -> None:
         """Create components for the app."""
@@ -129,7 +126,7 @@ class RadicaleApp(app_module.App):
         if Version(package['new_version']) > Version('4~'):
             return False
 
-        rights = get_rights_value()
+        rights = privileged.get_rights_value()
         install(['radicale'], force_configuration='new')
         privileged.setup()
         privileged.configure(rights)
@@ -140,28 +137,3 @@ class RadicaleApp(app_module.App):
         """De-configure and uninstall the app."""
         super().uninstall()
         privileged.uninstall()
-
-
-def load_augeas():
-    """Prepares the augeas."""
-    aug = augeas.Augeas(flags=augeas.Augeas.NO_LOAD +
-                        augeas.Augeas.NO_MODL_AUTOLOAD)
-
-    # INI file lens
-    aug.set('/augeas/load/Puppet/lens', 'Puppet.lns')
-    aug.set('/augeas/load/Puppet/incl[last() + 1]', CONFIG_FILE)
-
-    aug.load()
-    return aug
-
-
-def get_rights_value():
-    """Returns the current Rights value."""
-    aug = load_augeas()
-    value = aug.get('/files' + CONFIG_FILE + '/rights/type')
-
-    if value == 'from_file':
-        # Default rights file is equivalent to owner_only.
-        value = 'owner_only'
-
-    return value

plinth/modules/radicale/data/usr/share/augeas/lenses/radicale.aug

@@ -0,0 +1,45 @@
+(* Radicale module for Augeas
+ Based on Puppet lens.
+
+ Manage config file for http://radicale.org/
+ /etc/radicale/config is a standard INI File.
+*)
+
+
+module Radicale =
+  autoload xfm
+
+(************************************************************************
+ * INI File settings
+ *
+ * /etc/radicale/config only supports "#" as commentary and "=" as separator
+ *************************************************************************)
+let comment    = IniFile.comment "#" "#"
+let comment_re = /[#]/
+let sep        = IniFile.sep "=" "="
+
+
+(************************************************************************
+ *                        ENTRY
+ * /etc/radicale/config uses standard INI File entries
+ *************************************************************************)
+let entry   = IniFile.entry_generic (Util.indent . key IniFile.entry_re) sep comment_re comment
+
+
+(************************************************************************
+ *                        RECORD
+ * /etc/radicale/config uses standard INI File records
+ *************************************************************************)
+let title   = IniFile.indented_title IniFile.record_re
+let record  = IniFile.record title entry
+
+
+(************************************************************************
+ *                        LENS & FILTER
+ * /etc/radicale/config uses standard INI File records
+ *************************************************************************)
+let lns     = IniFile.lns record comment
+
+let filter = (incl "/etc/radicale/config")
+
+let xfm = transform lns filter

plinth/modules/radicale/data/usr/share/augeas/lenses/tests/test_radicale.aug

@@ -0,0 +1,81 @@
+module Test_radicale =
+
+   let conf = "
+[server]
+
+[encoding]
+
+[well-known]
+
+[auth]
+
+[git]
+
+[rights]
+
+[storage]
+
+[logging]
+
+[headers]
+Content-Security-Policy = default-src 'self'; object-src 'none'
+
+"
+
+   test Radicale.lns get conf =
+      {}
+      { "server"
+         {} }
+      { "encoding"
+         {} }
+      { "well-known"
+         {} }
+      { "auth"
+         {} }
+      { "git"
+         {} }
+      { "rights"
+         {} }
+      { "storage"
+         {} }
+      { "logging"
+         {} }
+      { "headers"
+         { "Content-Security-Policy" = "default-src 'self'; object-src 'none'" }
+         {} }
+
+    test Radicale.lns put conf after
+       set "server/hosts" "127.0.0.1:5232, [::1]:5232";
+       set "server/base_prefix" "/radicale/";
+       set "well-known/caldav" "/radicale/%(user)s/caldav/";
+       set "well-known/cardav" "/radicale/%(user)s/carddav/";
+       set "auth/type" "remote_user";
+       set "rights/type" "owner_only";
+       set "headers/Content-Security-Policy" "default-src 'self'; object-src 'none'"
+    = "
+[server]
+
+hosts=127.0.0.1:5232, [::1]:5232
+base_prefix=/radicale/
+[encoding]
+
+[well-known]
+
+caldav=/radicale/%(user)s/caldav/
+cardav=/radicale/%(user)s/carddav/
+[auth]
+
+type=remote_user
+[git]
+
+[rights]
+
+type=owner_only
+[storage]
+
+[logging]
+
+[headers]
+Content-Security-Policy = default-src 'self'; object-src 'none'
+
+"

plinth/modules/radicale/privileged.py

@@ -24,6 +24,7 @@ def setup():
     """
     aug = load_augeas()
     aug.set('auth/type', 'remote_user')
+    aug.set('auth/lc_username', 'True')
     aug.save()
     # Service is started again by socket.
     action_utils.service_stop(SERVICE_NAME)
@@ -55,12 +56,24 @@ def load_augeas():
     aug = augeas.Augeas(flags=augeas.Augeas.NO_LOAD +
                         augeas.Augeas.NO_MODL_AUTOLOAD)
     # INI file lens
-    aug.transform('Puppet', CONFIG_FILE)
+    aug.transform('Radicale', CONFIG_FILE)
     aug.set('/augeas/context', '/files' + CONFIG_FILE)
     aug.load()
     return aug
 
 
+def get_rights_value():
+    """Returns the current Rights value."""
+    aug = load_augeas()
+    value = aug.get('rights/type')
+
+    if value == 'from_file':
+        # Default rights file is equivalent to owner_only.
+        value = 'owner_only'
+
+    return value
+
+
 @privileged
 def uninstall():
     """Remove all radicale collections."""

plinth/modules/radicale/tests/test_functional.py

@@ -83,21 +83,21 @@ def _set_access_rights(browser, access_rights_type):
 
 def _calendar_is_available(browser):
     """Return whether calendar is available at well-known URL."""
-    conf = functional.config['DEFAULT']
+    return _well_known_available(browser, '/.well-known/caldav')
-    url = functional.base_url + '/.well-known/caldav'
-    logging.captureWarnings(True)
-    request = requests.get(url, auth=(conf['username'], conf['password']),
-                           verify=False)
-    logging.captureWarnings(False)
-    return request.status_code != 404
 
 
 def _addressbook_is_available(browser):
     """Return whether addressbook is available at well-known URL."""
+    return _well_known_available(browser, '/.well-known/carddav')
+
+
+def _well_known_available(browser, wellknown_url: str):
+    """Return whether a well-known URL redirects to radicale."""
     conf = functional.config['DEFAULT']
-    url = functional.base_url + '/.well-known/carddav'
+    url = functional.base_url + wellknown_url
     logging.captureWarnings(True)
     request = requests.get(url, auth=(conf['username'], conf['password']),
-                           verify=False)
+                           verify=False, allow_redirects=False)
     logging.captureWarnings(False)
-    return request.status_code != 404
+    return (request.status_code == 301
+            and request.headers['Location'].endswith('/radicale/'))

plinth/modules/radicale/views.py

@@ -8,7 +8,7 @@ from django.utils.translation import gettext_lazy as _
 
 from plinth.views import AppView
 
-from . import get_rights_value, privileged
+from . import privileged
 from .forms import RadicaleForm
 
 
@@ -20,13 +20,13 @@ class RadicaleAppView(AppView):
     def get_initial(self):
         """Return the values to fill in the form."""
         initial = super().get_initial()
-        initial['access_rights'] = get_rights_value()
+        initial['access_rights'] = privileged.get_rights_value()
         return initial
 
     def form_valid(self, form):
         """Change the access control of Radicale service."""
         data = form.cleaned_data
-        if get_rights_value() != data['access_rights']:
+        if privileged.get_rights_value() != data['access_rights']:
             privileged.configure(data['access_rights'])
             messages.success(self.request,
                              _('Access rights configuration updated'))

plinth/modules/syncthing/data/usr/lib/sysusers.d/freedombox-syncthing.conf

@@ -0,0 +1,6 @@
+# Create system user and group to run syncthing as system daemon (as opposed to
+# running in particular user's account). The user is created at boot or when
+# 'systemd-sysusers freedombox-syncthing.conf' is run. To override this file as
+# system administrator, create a file /etc/sysusers.d/freedombox-syncthing.conf
+# or link it to /dev/null.
+u! syncthing - "Syncthing file synchronization server" /var/lib/syncthing

plinth/modules/syncthing/privileged.py

@@ -1,9 +1,7 @@
 # SPDX-License-Identifier: AGPL-3.0-or-later
 """Configure Syncthing."""
 
-import grp
 import os
-import pwd
 import shutil
 import time
 
@@ -32,21 +30,8 @@ def augeas_load(conf_file):
 @privileged
 def setup():
     """Perform post-install actions for Syncthing."""
-    # Create syncthing group if needed.
+    # Create a 'syncthing' system user and group, if needed.
-    try:
+    action_utils.run(['systemd-sysusers', 'freedombox-syncthing.conf'])
-        grp.getgrnam('syncthing')
-    except KeyError:
-        action_utils.run(['addgroup', '--system', 'syncthing'], check=True)
-
-    # Create syncthing user if needed.
-    try:
-        pwd.getpwnam('syncthing')
-    except KeyError:
-        action_utils.run([
-            'adduser', '--system', '--ingroup', 'syncthing', '--home',
-            DATA_DIR, '--gecos', 'Syncthing file synchronization server',
-            'syncthing'
-        ], check=True)
 
     if not os.path.exists(DATA_DIR):
         os.makedirs(DATA_DIR, mode=0o750)

plinth/tests/test_action_utils.py

@@ -20,7 +20,8 @@ from plinth.action_utils import (get_addresses, get_hostname,
                                  service_try_reload_or_restart,
                                  service_try_restart, service_unmask, umask)
 
-UNKNOWN = 'unknowndeamon'
+UNKNOWN = 'unknowndeamon.service'
+UNKNOWN_SOCKET = 'unknowndeamon.socket'
 
 systemctl_path = pathlib.Path('/usr/bin/systemctl')
 systemd_installed = pytest.mark.skipif(not systemctl_path.exists(),
@@ -76,20 +77,101 @@ def test_service_enable_and_disable():
 
 @patch('plinth.action_utils.service_action')
 @systemd_installed
-def test_service_actions(mock):
+def test_service_start(mock):
-    """Trivial white box test for trivial implementations."""
+    """Test staring a service."""
     service_start(UNKNOWN)
-    mock.assert_called_with(UNKNOWN, 'start', check=False)
+    mock.mock_calls = [call(UNKNOWN, 'start', check=False)]
+
+    mock.reset_mock()
+    service_start(UNKNOWN, check=True)
+    mock.mock_calls = [call(UNKNOWN, 'start', check=True)]
+
+
+@patch('plinth.action_utils.service_action')
+@systemd_installed
+def test_service_stop(mock):
+    """Test stopping a service."""
     service_stop(UNKNOWN)
-    mock.assert_called_with(UNKNOWN, 'stop', check=False)
+    assert mock.mock_calls == [call(UNKNOWN, 'stop', check=False)]
+
+    mock.reset_mock()
+    service_stop(UNKNOWN, check=True)
+    mock.mock_calls = [call(UNKNOWN, 'stop', check=True)]
+
+    mock.reset_mock()
+    service_stop(UNKNOWN_SOCKET)
+    assert mock.mock_calls == [
+        call(UNKNOWN_SOCKET, 'stop', check=False),
+        call(UNKNOWN, 'stop', check=False)
+    ]
+
+
+@patch('plinth.action_utils.service_action')
+@systemd_installed
+def test_service_restart(mock):
+    """Test restaring a service."""
     service_restart(UNKNOWN)
-    mock.assert_called_with(UNKNOWN, 'restart', check=False)
+    assert mock.mock_calls == [call(UNKNOWN, 'restart', check=False)]
+
+    mock.reset_mock()
+    service_restart(UNKNOWN, check=True)
+    mock.mock_calls = [call(UNKNOWN, 'restart', check=True)]
+
+    mock.reset_mock()
+    service_restart(UNKNOWN_SOCKET)
+    assert mock.mock_calls == [call(UNKNOWN, 'stop', check=False)]
+
+
+@patch('plinth.action_utils.service_action')
+@systemd_installed
+def test_service_try_restart(mock):
+    """Test try-restaring a service."""
     service_try_restart(UNKNOWN)
-    mock.assert_called_with(UNKNOWN, 'try-restart', check=False)
+    assert mock.mock_calls == [call(UNKNOWN, 'try-restart', check=False)]
+
+    mock.reset_mock()
+    service_try_restart(UNKNOWN, check=True)
+    mock.mock_calls = [call(UNKNOWN, 'try-restart', check=True)]
+
+    mock.reset_mock()
+    service_restart(UNKNOWN_SOCKET)
+    assert mock.mock_calls == [call(UNKNOWN, 'stop', check=False)]
+
+
+@patch('plinth.action_utils.service_action')
+@systemd_installed
+def test_service_reload(mock):
+    """Test reloading a service."""
     service_reload(UNKNOWN)
-    mock.assert_called_with(UNKNOWN, 'reload', check=False)
+    assert mock.mock_calls == [call(UNKNOWN, 'reload', check=False)]
+
+    mock.reset_mock()
+    service_reload(UNKNOWN, check=True)
+    mock.mock_calls = [call(UNKNOWN, 'reload', check=True)]
+
+    mock.reset_mock()
+    service_reload(UNKNOWN_SOCKET)
+    assert mock.mock_calls == [call(UNKNOWN, 'reload', check=False)]
+
+
+@patch('plinth.action_utils.service_action')
+@systemd_installed
+def test_service_try_reload_or_restart(mock):
+    """Test try-reload-or-restart on a service."""
     service_try_reload_or_restart(UNKNOWN)
-    mock.assert_called_with(UNKNOWN, 'try-reload-or-restart', check=False)
+    assert mock.mock_calls == [
+        call(UNKNOWN, 'try-reload-or-restart', check=False)
+    ]
+
+    mock.reset_mock()
+    service_try_reload_or_restart(UNKNOWN, check=True)
+    mock.mock_calls = [call(UNKNOWN, 'try-reload-or-restart', check=True)]
+
+    mock.reset_mock()
+    service_try_reload_or_restart(UNKNOWN_SOCKET)
+    assert mock.mock_calls == [
+        call(UNKNOWN, 'try-reload-or-restart', check=False)
+    ]
 
 
 @pytest.mark.usefixtures('needs_root')