'password_requested_on_t'=>'A password reset request exists for this user (request sent at :datetime), which means that the user has not yet changed their password but the link they received is still valid. This may be a request from the user themselves or from an administrator.',
'password_request_expired'=>'A password reset request exists for this user but has expired, meaning that the user has not changed their password in time. This may be a request from the user themselves or from an administrator.',
'resend_email_title'=>'Resend a password reset email to the user',
'resend_email_help'=>'Use <b>Resend email</b> to send a new password reset email to the user so he can set a new password. This will leave its current password as is and any previous request will be revoked.',
'reset_password_help'=>'Use <b>Reset password</b> to force a password reset (this will set a temporary password) before sending a password reset email to the user so they can set a new password. Any previous request will be revoked.',
'help'=>'Sensitive data, the 2FA secrets and emails, are stored encrypted in database. Be sure to backup the APP_KEY value of your .env file (or the whole file) as it serves as key encryption. There is no way to decypher encrypted data without this key.',
],
'restrict_registration'=>[
'label'=>'Restrict registration',
'help'=>'Make registration only available to a limited range of email addresses. Both rules can be used simultaneously. This has no effect on registration via SSO.',
],
'restrict_list'=>[
'label'=>'Filtering list',
'help'=>'Emails in this list will be allowed to register. Separate addresses with a pipe ("|")',
],
'restrict_rule'=>[
'label'=>'Filtering rule',
'help'=>'Emails matching this regular expression will be allowed to register',
],
'disable_registration'=>[
'label'=>'Disable registration',
'help'=>'Prevent new user registration. Unless overridden (see below), this affects SSO as well, so new users won\'t be able to sign in via SSO',
'help'=>'Make SSO the only available method to log in to 2FAuth. Password login and Webauthn are then disabled for regular users. Administrators are not affected by this restriction.',
'help'=>'Allow new users to sign in for the first time via SSO whereas registration is disabled',
],
'is_admin'=>[
'label'=>'Is administrator',
'help'=>'Give administrator rights to the user. Administrators have permissions to manage the whole app, i.e. settings and other users, but cannot generate password for a 2FA they don\'t own.'
],
'test_email'=>[
'label'=>'Email configuration test',
'help'=>'Send a test email to control your instance\'s email configuration. It is important to have a working configuration, otherwise users will not be able to request a reset password.',
'email_will_be_send_to_x'=>'The email will be send to <span class="is-family-code has-text-info">:email</span>',
'help'=>'URL you can visit to check the health of this 2FAuth instance. This URL can be used to set up a Docker HEALTHCHECK or a Kubernetes HTTPS Liveness probe.',