Merge pull request #4490 from oldium/fix-fwknopd-qr-and-key-type

luci-app-fwknopd: Client-side rendering and improvements/fixes.

41 files changed, 6033 insertions, 888 deletions

diff --git a/applications/luci-app-fwknopd/Makefile b/applications/luci-app-fwknopd/Makefile
index 73a9e6864..ba7a8568e 100644
--- a/applications/luci-app-fwknopd/Makefile
+++ b/applications/luci-app-fwknopd/Makefile
@@ -7,7 +7,7 @@
 include $(TOPDIR)/rules.mk
 
 LUCI_TITLE:=Fwknopd config - web config for the firewall knock daemon
-LUCI_DEPENDS:=+luci-compat +fwknopd +qrencode
+LUCI_DEPENDS:=+fwknopd +qrencode
 PKG_LICENSE:=GPLv2
 PKG_MAINTAINER:=Jonathan Bennett <JBennett@incomsystems.biz>
 include ../../luci.mk
diff --git a/applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js b/applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js
new file mode 100644
index 000000000..d7a76e440
--- /dev/null
+++ b/applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js
@@ -0,0 +1,604 @@
+'use strict';
+'require fs';
+'require dom';
+'require view';
+'require form';
+'require ui';
+'require tools.widgets as widgets';
+
+var domparser = new DOMParser();
+var QRCODE_VARIABLES = ['KEY_BASE64', 'KEY', 'HMAC_KEY_BASE64', 'HMAC_KEY'];
+var INVALID_KEYS = ['__CHANGEME__', 'CHANGEME'];
+
+function setOptionValue(map, section_id, option, value) {
+	var option = L.toArray(map.lookupOption(option, section_id))[0];
+	var uiEl = option ? option.getUIElement(section_id) : null;
+	if (uiEl)
+		uiEl.setValue(value);
+}
+
+function lines(content) {
+	return content.split(/\r?\n/);
+}
+
+function parseLine(rawLine) {
+	if (rawLine[0] != '#' && rawLine[0] != ';') {
+		var line = rawLine.split(/ ([^;]*)/, 2);
+		if (line.length == 2) {
+			var key = line[0].trim();
+			var value = line[1].trim();
+			if (key && value)
+				return [key, value];
+		}
+	}
+	return null;
+}
+
+function parseKeys(content) {
+	var l = lines(content);
+	var keys = {};
+	for (var i = 0; i < l.length; i++) {
+		var p = l[i].split(/:(.*)/, 2);
+		if (p.length == 2)
+			keys[p[0].trim()] = p[1].trim();
+	}
+	return keys;
+}
+
+var KeyTypeValue = form.ListValue.extend({
+	__init__: function() {
+		this.super('__init__', arguments);
+		this.hidden = false;
+	},
+
+	cfgvalue: function(section_id) {
+		for (var i = 0; i < this.keylist.length; i++) {
+			var value = this.map.data.get(
+				this.uciconfig || this.section.uciconfig || this.map.config,
+				this.ucisection || section_id,
+				this.keylist[i]
+			);
+			if (value)
+				return this.keylist[i];
+		}
+		return this.keylist[0];
+	},
+
+	render: function(section_id, option_index, cfgvalue) {
+		return this.super('render', arguments)
+			.then(L.bind(function(el) {
+				// Use direct style to hide, because class .hidden
+				// is used by this.isActive(). We want full functionality,
+				// but hidden field
+				if (this.hidden)
+					el.style.display = 'none';
+				return el;
+			}, this));
+	},
+
+	remove: function() {
+		// Ignore
+	},
+
+	write: function() {
+		// Ignore
+	},
+});
+
+var YNValue = form.Flag.extend({
+	__init__: function() {
+		this.super('__init__', arguments);
+		this.enabled = 'Y';
+		this.disabled = 'N';
+		this.default = 'N';
+	},
+	
+	cfgvalue: function(section_id) {
+		var value = this.super('cfgvalue', arguments);
+		return value ? String(value).toUpperCase() : value;
+	},
+
+	parse: function(section_id) {
+		var active = this.isActive(section_id),
+		    cval = this.cfgvalue(section_id),
+		    fval = active ? this.formvalue(section_id) : null;
+
+		if (String(fval).toUpperCase() != cval) {
+			if (fval == 'Y')
+				return Promise.resolve(this.write(section_id, fval));
+			else if (cval !== undefined)
+				return Promise.resolve(this.remove(section_id));
+		}
+	},
+});
+
+var QrCodeValue = form.DummyValue.extend({
+	__init__: function() {
+		this.super('__init__', arguments);
+		this.needsRefresh = {};
+
+		this.components = [];
+		QRCODE_VARIABLES.forEach(L.bind(function(option) {
+			this.components.push(option);
+			var dep = {};
+			dep[option] = /.+/;
+			this.depends(dep);
+		}, this));
+	},
+
+	cfgQrCode: function(section_id) {
+		var qr = [];
+		for (var i = 0; i < this.components.length; i++) {
+			var value = this.map.data.get(
+				this.uciconfig || this.section.uciconfig || this.map.config,
+				this.ucisection || section_id,
+				this.components[i]
+			);
+
+			if (value)
+				qr.push(this.components[i] + ':' + value);
+		}
+		return qr ? qr.join(' ') : null;
+	},
+
+	formQrCode: function(section_id) {
+		var qr = [];
+		for (var i = 0; i < this.components.length; i++) {
+			var value = null;
+
+			var uiEl = L.toArray(this.map.lookupOption(this.components[i], section_id))[0];
+			if (uiEl) {
+				if (uiEl.isActive(section_id))
+					value = uiEl.formvalue(section_id);
+			}
+
+			if (value)
+				qr.push(this.components[i] + ':' + value);
+		}
+		return qr ? qr.join(' ') : null;
+	},
+
+	onchange: function(ev, section_id) {
+		if (this.needsRefresh[section_id] !== undefined)
+			this.needsRefresh[section_id] = true;
+		else {
+			this.refresh(section_id);
+		}
+	},
+
+	refresh: function(section_id) {
+		var qrcode = this.formQrCode(section_id);
+		var formvalue = this.formvalue(section_id);
+		if (formvalue != qrcode) {
+			this.getUIElement(section_id).setValue(qrcode);
+			var uiEl = document.getElementById(this.cbid(section_id));
+			if (uiEl) {
+				var contentEl = uiEl.nextSibling;
+				if (contentEl.childNodes.length == 1) {
+					dom.append(contentEl, E('em', { 'class': 'spinning',  }, [ _('Loading…') ]));
+				}
+
+				this.needsRefresh[section_id] = false;
+
+				// Render QR code
+				return this.renderSvg(qrcode)
+					.then(L.bind(function(svgEl) {
+						dom.content(contentEl, svgEl || E('div'));
+
+						var needsAnotherRefresh = this.needsRefresh[section_id];
+						delete this.needsRefresh[section_id];
+
+						if (needsAnotherRefresh) {
+							this.refresh(section_id);
+						}
+					}, this)).finally(L.bind(function() {
+						if (this.needsRefresh[section_id] === undefined) {
+							if (contentEl.childNodes.length == 2)
+								contentEl.removeChild(contentEl.lastChild);
+							delete this.needsRefresh[section_id];
+						}
+					}, this)).catch(L.error);
+			}
+		}
+		// Nothing to render
+		return Promise.resolve(null);
+	},
+
+	renderWidget: function(section_id) {
+		var qrcode = this.cfgQrCode(section_id);
+		return this.renderSvg(qrcode)
+			.then(L.bind(function(svgEl) {
+				var uiEl = new ui.Hiddenfield(qrcode, { id: this.cbid(section_id) });
+				return E([
+					uiEl.render(),
+					E('div', {}, svgEl || E('div'))
+				]);
+			}, this));
+	},
+
+	qrEncodeSvg: function(qrcode) {
+		return fs.exec('/usr/bin/qrencode', ['--type', 'svg', '--inline', '-o', '-', qrcode])
+			.then(function(response) {
+				return response.stdout;
+			});
+	},
+
+	renderSvg: function(qrcode) {
+		if (qrcode)
+			return this.qrEncodeSvg(qrcode)
+				.then(function(rawsvg) {
+					return domparser.parseFromString(rawsvg, 'image/svg+xml')
+						.querySelector('svg');
+				});
+		else
+			return Promise.resolve(null);
+	},
+});
+
+var GenerateButton = form.Button.extend({
+	__init__: function() {
+		this.super('__init__', arguments);
+		this.onclick = L.bind(this.generateKeys, this);
+		this.keytypes = {};
+	},
+
+	keytype: function(key, regex) {
+		this.keytypes[key] = regex;
+	},
+
+	qrcode: function(option) {
+		this.qrcode = option;
+	},
+
+	generateKeys: function(ev, section_id) {
+		return fs.exec('/usr/sbin/fwknopd', ['--key-gen'])
+			.then(function(response) { return parseKeys(response.stdout); })
+			.then(L.bind(this.applyKeys, this, section_id))
+			.catch(L.error);
+	},
+
+	applyKeys: function(section_id, keys) {
+		for (var key in keys) {
+			setOptionValue(this.map, section_id, key, keys[key]);
+			for (var type in this.keytypes) {
+				if (this.keytypes[type].test(key))
+					setOptionValue(this.map, section_id, type, key);
+			}
+		}
+
+		// Force update of dependencies (element visibility)
+		this.map.checkDepends();
+
+		// Refresh QR code
+		var option = L.toArray(this.map.lookupOption(this.qrcode, section_id))[0];
+		if (option)
+			return option.refresh(section_id);
+		else
+			return Promise.resolve(null);
+	},
+});
+
+var ParseButton = form.Button.extend({
+	__init__: function() {
+		this.super('__init__', arguments);
+		this.onclick = L.bind(this.parseAccessConf, this);
+	},
+
+	parseAccessConf: function() {
+		this.stanzas = [];
+		var ctx = {
+			processLine: L.bind(this.processAccessLine, this),
+			remainingLines: [],
+			stanzas: {
+				last: {},
+				all: []
+			}
+		};
+		return fs.read('/etc/fwknop/access.conf')
+			.then(L.bind(this.parseFile, this, ctx))
+			.then(L.bind(function() {
+				if (ctx.stanzas.all.length > 0)
+					return this.renderStanzas(ctx.stanzas.all)
+						.then(function(topEl) {
+							var dlg = ui.showModal(_('Firewall Knock Operator Daemon'), [
+								topEl,
+								E('button', {
+									'class': 'cbi-button cbi-button-neutral',
+									'click': ui.hideModal
+								}, _('Close'))
+							], 'cbi-modal');
+							dlg.querySelector('button').focus();
+							dlg.parentNode.scrollTop = 0;
+						});
+				else {
+					var dlg = ui.showModal(_('Firewall Knock Operator Daemon'), [
+						E('p', _("No stanza found.")),
+						E('button', {
+							'class': 'cbi-button cbi-button-neutral',
+							'click': ui.hideModal
+						}, _('Close'))
+					]);
+					dlg.querySelector('button').focus();
+				}
+			}, this))
+			.catch(function(err) {
+				L.error(err);
+			});
+	},
+
+	parseFile: function(ctx, content) {
+		ctx.remainingLines.unshift.apply(ctx.remainingLines, lines(content));
+		return this.parseLines(ctx);
+	},
+
+	parseFolder: function(ctx, folder, entries) {
+		// Parse and process files in order
+		var parseJobs = [];
+		var parsedLines = [];
+		entries.sort(function(el1, el2) {
+			return (el1.name > el2.name) ? 1
+				: (el1.name < el2.name) ? -1
+				: 0;
+		});
+		entries.forEach(L.bind(function(entry) {
+			var ctxLines = [];
+			parsedLines.unshift(ctxLines);
+			parseJobs.push(fs.read(folder + '/' + entry.name)
+				.then(function(content) {
+					ctxLines.push.apply(ctxLines, lines(content));
+				}));
+		}, this));
+		return Promise.all(parseJobs)
+			.then(L.bind(function(ctx) {
+				parsedLines.forEach(function(lines) {
+					ctx.remainingLines.unshift.apply(ctx.remainingLines, lines);
+				});
+			}, this, ctx))
+			.then(L.bind(this.parseLines, this, ctx));
+	},
+
+	parseLines: function(ctx) {
+		while (ctx.remainingLines.length > 0) {
+			var line = parseLine(ctx.remainingLines.shift());
+			if (line) {
+				var result = ctx.processLine.call(this, ctx, line[0], line[1]);
+				if (result)
+					return result;
+			}
+		}
+	},
+
+	processAccessLine: function(ctx, key, value) {
+		if (key.endsWith(':')) {
+			key = key.slice(0, -1);
+		}
+		if (key == "%include") {
+			return fs.read(value)
+				.then(L.bind(this.parseFile, this, ctx));
+		} else if (key == "%include_folder") {
+			return fs.list(value)
+				.then(L.bind(this.parseFolder, this, ctx, value));
+		} else if (key == "%include_keys") {
+			var keysCtx = {
+				processLine: L.bind(this.processKeysLine, this),
+				remainingLines: [],
+				stanzas: ctx.stanzas
+			};
+			return fs.read(value)
+				.then(L.bind(this.parseFile, this, keysCtx))
+				.then(L.bind(this.parseLines, this, ctx));
+		} else {
+			if (key == 'SOURCE') {
+				ctx.stanzas.last = {};
+				ctx.stanzas.all.push(ctx.stanzas.last);
+			}
+			ctx.stanzas.last[key] = value;
+		}
+	},
+
+	processKeysLine: function(ctx, key, value) {
+		// Simplification - accept only KEY arguments
+		if (ctx.stanzas.last && key.match(/KEY/))
+			ctx.stanzas.last[key] = value;
+	},
+
+	renderStanzas: function(stanzas) {
+		var svgJobs = [];
+		var config = {};
+		config.access = stanzas;
+
+		var m, s, o;
+
+		var accessSection;
+		var sourceValue;
+
+		m = new form.JSONMap(config, null, _('Custom configuration read from /etc/fwknop/access.conf.'));
+		m.readonly = true;
+
+		// set the access.conf settings
+		accessSection = s = m.section(form.TypedSection, 'access', _('access.conf stanzas'));
+		s.anonymous = true;
+
+		var qrCode = s.option(QrCodeValue, 'qr', _('QR code'), ('QR code to configure fwknopd Android application.'));
+
+		sourceValue = s.option(form.Value, 'SOURCE', 'SOURCE');
+		s.option(form.Value, 'DESTINATION', 'DESTINATION');
+
+		o = s.option(form.Value, 'KEY', 'KEY');
+		o.depends('keytype', 'KEY');
+		o.validate = function(section_id, value) {
+			return (String(value).length > 0 && !INVALID_KEYS.includes(value)) ? true : _('The symmetric key has to be specified.');
+		}
+
+		o = s.option(form.Value, 'KEY_BASE64', 'KEY_BASE64');
+		o.depends('keytype', 'KEY_BASE64');
+		o.validate = function(section_id, value) {
+			return (String(value).length > 0 && !INVALID_KEYS.includes(value)) ? true : _('The symmetric key has to be specified.');
+		}
+
+		o = s.option(KeyTypeValue, 'keytype');
+		o.value('KEY', _('Normal key'));
+		o.value('KEY_BASE64', _('Base64 key'));
+		o.hidden = true;
+
+		o = s.option(form.Value, 'HMAC_KEY', 'HMAC_KEY');
+		o.depends('hkeytype', 'HMAC_KEY');
+		o.validate = function(section_id, value) {
+			return (String(value).length > 0 && !INVALID_KEYS.includes(value)) ? true : _('The HMAC authentication key has to be specified.');
+		}
+
+		o = s.option(form.Value, 'HMAC_KEY_BASE64', 'HMAC_KEY_BASE64');
+		o.depends('hkeytype', 'HMAC_KEY_BASE64');
+		o.validate = function(section_id, value) {
+			return (String(value).length > 0 && !INVALID_KEYS.includes(value)) ? true : _('The HMAC authentication key has to be specified.');
+		}
+
+		o = s.option(KeyTypeValue, 'hkeytype');
+		o.value('HMAC_KEY', _('Normal key'));
+		o.value('HMAC_KEY_BASE64', _('Base64 key'));
+		o.hidden = true;
+
+		return m.load()
+			.then(L.bind(m.render, m));
+	}
+});
+
+return view.extend({
+
+	load: function() {
+		return Promise.all([
+			L.resolveDefault(fs.stat('/etc/fwknop/access.conf'))
+		]);
+	},
+
+	render: function(results) {
+		var has_access_conf = results[0];
+		var m, s, o;
+
+		m = new form.Map('fwknopd', _('Firewall Knock Operator Daemon'));
+
+		s = m.section(form.TypedSection, 'global', _('Enable Uci/Luci control'));
+		s.anonymous = true;
+		s.option(form.Flag, 'uci_enabled', _('Enable config overwrite'), _('When unchecked, the config files in /etc/fwknopd will be used as is, ignoring any settings here.'));
+
+		if ( has_access_conf ) {
+			o = s.option(ParseButton, 'parse', _('Custom configuration'), _('Parses the /etc/fwknop/access.conf file (and \
+								included files/folders/keys) and generates QR codes for all found \
+								stanzas. Handles only files in /etc/fwknop folder due to access rights \
+								restrictions.'));
+			o.inputtitle = _("Show access.conf QR codes");
+		}
+
+		s = m.section(form.TypedSection, 'network', _('Network configuration'));
+		s.anonymous = true;
+		o = s.option(widgets.NetworkSelect, 'network', _('Network'), _('The network on which the daemon listens. The daemon \
+								is automatically started when the network is up-and-running. This option \
+								has precedence over “PCAP_INTF” option.'));
+		o.unpecified = true;
+		o.nocreate = true;
+		o.rmempty = true;
+
+		// set the access.conf settings
+		s = m.section(form.TypedSection, 'access', _('access.conf stanzas'));
+		s.anonymous = true;
+		s.addremove = true;
+
+		var qrCode = s.option(QrCodeValue, 'qr', _('QR code'), ('QR code to configure fwknopd Android application.'));
+
+		o = s.option(form.Value, 'SOURCE', 'SOURCE', _('The source address from which the SPA packet will be accepted. The string “ANY” is \
+								also accepted if a valid SPA packet should be honored from any source IP. \
+								Networks should be specified in CIDR notation (e.g. “192.168.10.0/24”), \
+								and individual IP addresses can be specified as well. Multiple entries \
+								are comma-separated.'));
+		o.validate = function(section_id, value) {
+			return String(value).length > 0 ? true : _('The source address has to be specified.');
+		}
+
+		s.option(form.Value, 'DESTINATION', 'DESTINATION', _('The destination address for which the SPA packet will be accepted. The \
+								string “ANY” is also accepted if a valid SPA packet should be honored to any \
+								destination IP. Networks should be specified in CIDR notation \
+								(e.g. “192.168.10.0/24”), and individual IP addresses can be specified as well. \
+								Multiple entries are comma-separated.'));
+
+		o = s.option(GenerateButton, 'keys', _('Generate keys'), _('Generates the symmetric key used for decrypting an incoming \
+								SPA packet, that is encrypted by the fwknop client with Rijndael block cipher, \
+								and HMAC authentication key used to verify the authenticity of the incoming SPA \
+								packet before the packet is decrypted.'));
+		o.inputtitle = _("Generate Keys");
+		o.keytype('keytype', /^KEY/);
+		o.keytype('hkeytype', /^HMAC_KEY/);
+		o.qrcode('qr');
+
+		o = s.option(form.Value, 'KEY', 'KEY', _('Define the symmetric key used for decrypting an incoming SPA \
+								packet that is encrypted by the fwknop client with Rijndael.'));
+		o.depends('keytype', 'KEY');
+		o.onchange = L.bind(qrCode.onchange, qrCode);
+		o.validate = function(section_id, value) {
+			return (String(value).length > 0 && !INVALID_KEYS.includes(value)) ? true : _('The symmetric key has to be specified.');
+		}
+
+		o = s.option(form.Value, 'KEY_BASE64', 'KEY_BASE64', _('Define the symmetric key (in Base64 encoding) used for \
+								decrypting an incoming SPA packet that is encrypted by the fwknop client \
+								with Rijndael.'));
+		o.depends('keytype', 'KEY_BASE64');
+		o.onchange = L.bind(qrCode.onchange, qrCode);
+		o.validate = function(section_id, value) {
+			return (String(value).length > 0 && !INVALID_KEYS.includes(value)) ? true : _('The symmetric key has to be specified.');
+		}
+
+		o = s.option(KeyTypeValue, 'keytype', _('Key type'));
+		o.value('KEY', _('Normal key'));
+		o.value('KEY_BASE64', _('Base64 key'));
+		o.onchange = L.bind(qrCode.onchange, qrCode);
+
+		o = s.option(form.Value, 'HMAC_KEY', 'HMAC_KEY', _('Define the HMAC authentication key used for verifying \
+								the authenticity of the SPA packet before the packet is decrypted.'));
+		o.depends('hkeytype', 'HMAC_KEY');
+		o.onchange = L.bind(qrCode.onchange, qrCode);
+		o.validate = function(section_id, value) {
+			return (String(value).length > 0 && !INVALID_KEYS.includes(value)) ? true : _('The HMAC authentication key has to be specified.');
+		}
+
+		o = s.option(form.Value, 'HMAC_KEY_BASE64', 'HMAC_KEY_BASE64', _('Define the HMAC authentication key \
+								(in Base64 encoding) used for verifying the authenticity of the SPA \
+								packet before the packet is decrypted.'));
+		o.depends('hkeytype', 'HMAC_KEY_BASE64');
+		o.onchange = L.bind(qrCode.onchange, qrCode);
+		o.validate = function(section_id, value) {
+			return (String(value).length > 0 && !INVALID_KEYS.includes(value)) ? true : _('The HMAC authentication key has to be specified.');
+		}
+
+		o = s.option(KeyTypeValue, 'hkeytype', _('HMAC key type'));
+		o.value('HMAC_KEY', _('Normal key'));
+		o.value('HMAC_KEY_BASE64', _('Base64 key'));
+		o.onchange = L.bind(qrCode.onchange, qrCode);
+
+		o = s.option(form.Value, 'OPEN_PORTS', 'OPEN_PORTS', _('Define a set of ports and protocols (tcp or udp) that will be opened if a valid knock sequence is seen. \
+							If this entry is not set, fwknopd will attempt to honor any proto/port request specified in the SPA data \
+							(unless of it matches any “RESTRICT_PORTS” entries). Multiple entries are comma-separated.'));
+		o.placeholder = "protocol/port,...";
+
+		o = s.option(form.Value, 'RESTRICT_PORTS', 'RESTRICT_PORTS', _('Define a set of ports and protocols (tcp or udp) that are explicitly not allowed \
+							regardless of the validity of the incoming SPA packet. Multiple entries are comma-separated.'));
+		o.placeholder = "protocol/port,...";
+
+		o = s.option(form.Value, 'FW_ACCESS_TIMEOUT', 'FW_ACCESS_TIMEOUT', _('Define the length of time access will be granted by fwknopd through the firewall after a \
+							valid knock sequence from a source IP address. If “FW_ACCESS_TIMEOUT” is not set then the default \
+							timeout of 30 seconds will automatically be set.'));
+		o.placeholder = "30";
+
+		s.option(YNValue, 'REQUIRE_SOURCE_ADDRESS', 'REQUIRE_SOURCE_ADDRESS', _('Force all SPA packets to contain a real IP address within the encrypted data. \
+							This makes it impossible to use the -s command line argument on the fwknop client command line, so either -R \
+							has to be used to automatically resolve the external address (if the client behind a NAT) or the client must \
+							know the external IP and set it via the -a argument.'));
+
+		s = m.section(form.TypedSection, 'config', _('fwknopd.conf config options'));
+		s.anonymous=true;
+		s.option(form.Value, 'MAX_SPA_PACKET_AGE', 'MAX_SPA_PACKET_AGE', _('Maximum age in seconds that an SPA packet will be accepted. Defaults to 120 seconds.'));
+		s.option(form.Value, 'PCAP_INTF', 'PCAP_INTF', _('Specify the ethernet interface on which fwknopd will sniff packets.'));
+		s.option(YNValue, 'ENABLE_IPT_FORWARDING', 'ENABLE_IPT_FORWARDING', _('Allow SPA clients to request access to services through an iptables firewall instead of just to it.'));
+		s.option(YNValue, 'ENABLE_NAT_DNS', 'ENABLE_NAT_DNS', _('Allow SPA clients to request forwarding destination by DNS name.'));
+
+		return m.render();
+	}
+});
diff --git a/applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua b/applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua
deleted file mode 100644
index 9ae754cb9..000000000
--- a/applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua
+++ /dev/null
@@ -1,52 +0,0 @@
--- Copyright 2015 Jonathan Bennett <jbennett@incomsystems.biz>
--- Licensed to the public under the GNU General Public License v2.
-tmp = 0
-m = Map("fwknopd", translate("Firewall Knock Operator"))
-
-s = m:section(TypedSection, "global", translate("Enable Uci/Luci control")) -- Set uci control on or off
-s.anonymous=true
-s:option(Flag, "uci_enabled", translate("Enable config overwrite"), translate("When unchecked, the config files in /etc/fwknopd will be used as is, ignoring any settings here."))
-
-s = m:section(TypedSection, "access", translate("access.conf stanzas")) -- set the access.conf settings
-s.anonymous=true
-s.addremove=true
-qr = s:option(DummyValue, "note0", "dummy")
-qr.tmp = tmp
-qr.template = "fwknopd-qr"
-qr:depends("uci_enabled", "1")
-s:option(Value, "SOURCE", "SOURCE", translate("Use ANY for any source IP"))
-k1 = s:option(Value, "KEY", "KEY", translate("Define the symmetric key used for decrypting an incoming SPA packet that is encrypted by the fwknop client with Rijndael."))
-k1:depends("keytype", translate("Normal Key"))
-k2 = s:option(Value, "KEY_BASE64", "KEY_BASE64", translate("Define the symmetric key used for decrypting an incoming SPA \
-						packet that is encrypted by the fwknop client with Rijndael."))
-k2:depends("keytype", translate("Base64 key"))
-l1 = s:option(ListValue, "keytype", "Key type")
-l1:value("Normal Key", "Normal Key")
-l1:value("Base64 key", "Base64 key")
-k3 = s:option(Value, "HMAC_KEY", "HMAC_KEY", "The hmac key")
-k3:depends("hkeytype", "Normal Key")
-k4 = s:option(Value, "HMAC_KEY_BASE64", "HMAC_KEY_BASE64", translate("The base64 hmac key"))
-k4:depends("hkeytype", "Base64 key")
-l2 = s:option(ListValue, "hkeytype", "HMAC Key type")
-l2:value("Normal Key", "Normal Key")
-l2:value("Base64 key", "Base64 key")
-s:option(Value, "OPEN_PORTS", "OPEN_PORTS", translate("Define a set of ports and protocols (tcp or udp) that will be opened if a valid knock sequence is seen. \
-					If this entry is not set, fwknopd will attempt to honor any proto/port request specified in the SPA data \
-					(unless of it matches any “RESTRICT_PORTS” entries). Multiple entries are comma-separated."))
-s:option(Value, "FW_ACCESS_TIMEOUT", "FW_ACCESS_TIMEOUT", translate("Define the length of time access will be granted by fwknopd through the firewall after a \
-					valid knock sequence from a source IP address. If “FW_ACCESS_TIMEOUT” is not set then the default \
-					timeout of 30 seconds will automatically be set."))
-s:option(Value, "REQUIRE_SOURCE_ADDRESS", "REQUIRE_SOURCE_ADDRESS", translate("Force all SPA packets to contain a real IP address within the encrypted data. \
-					This makes it impossible to use the -s command line argument on the fwknop client command line, so either -R \
-					has to be used to automatically resolve the external address (if the client behind a NAT) or the client must \
-					know the external IP and set it via the -a argument."))
-
-s = m:section(TypedSection, "config", translate("fwknopd.conf config options")) 
-s.anonymous=true
-s:option(Value, "MAX_SPA_PACKET_AGE", "MAX_SPA_PACKET_AGE", translate("Maximum age in seconds that an SPA packet will be accepted. Defaults to 120 seconds."))
-s:option(Value, "PCAP_INTF", "PCAP_INTF", translate("Specify the ethernet interface on which fwknopd will sniff packets."))
-s:option(Value, "ENABLE_IPT_FORWARDING", "ENABLE_IPT_FORWARDING", translate("Allow SPA clients to request access to services through an iptables firewall instead of just to it."))
-s:option(Value, "ENABLE_NAT_DNS", "ENABLE_NAT_DNS", translate("Allow SPA clients to request forwarding destination by DNS name."))
-
-return m
-
diff --git a/applications/luci-app-fwknopd/luasrc/view/fwknopd-qr.htm b/applications/luci-app-fwknopd/luasrc/view/fwknopd-qr.htm
deleted file mode 100644
index 5773f523e..000000000
--- a/applications/luci-app-fwknopd/luasrc/view/fwknopd-qr.htm
+++ /dev/null
@@ -1,2 +0,0 @@
-<% print(luci.sys.exec("sh /usr/sbin/gen-qr.sh " .. self.tmp)) %>
-<% self.tmp = self.tmp + 1 %>
diff --git a/applications/luci-app-fwknopd/po/ar/fwknopd.po b/applications/luci-app-fwknopd/po/ar/fwknopd.po
index 6d2ebe77a..6fb7d55a1 100644
--- a/applications/luci-app-fwknopd/po/ar/fwknopd.po
+++ b/applications/luci-app-fwknopd/po/ar/fwknopd.po
@@ -11,21 +11,44 @@ msgstr ""
 "Plural-Forms: nplurals=6; plural=n==0 ? 0 : n==1 ? 1 : n==2 ? 2 : n%100>=3 "
 "&& n%100<=10 ? 3 : n%100>=11 ? 4 : 5;\n"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:48
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:599
 msgid ""
 "Allow SPA clients to request access to services through an iptables firewall "
 "instead of just to it."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:49
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:600
 msgid "Allow SPA clients to request forwarding destination by DNS name."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:22
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:441
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:458
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:551
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:573
 msgid "Base64 key"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:33
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:308
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:319
+msgid "Close"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid "Custom configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:415
+msgid "Custom configuration read from /etc/fwknop/access.conf."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:581
+msgid ""
+"Define a set of ports and protocols (tcp or udp) that are explicitly not "
+"allowed regardless of the validity of the incoming SPA packet. Multiple "
+"entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:576
 msgid ""
 "Define a set of ports and protocols (tcp or udp) that will be opened if a "
 "valid knock sequence is seen. If this entry is not set, fwknopd will attempt "
@@ -33,7 +56,19 @@ msgid ""
 "matches any “RESTRICT_PORTS” entries). Multiple entries are comma-separated."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:36
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:562
+msgid ""
+"Define the HMAC authentication key (in Base64 encoding) used for verifying "
+"the authenticity of the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:554
+msgid ""
+"Define the HMAC authentication key used for verifying the authenticity of "
+"the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:585
 msgid ""
 "Define the length of time access will be granted by fwknopd through the "
 "firewall after a valid knock sequence from a source IP address. If "
@@ -41,18 +76,23 @@ msgid ""
 "automatically be set."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:18
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:20
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:540
+msgid ""
+"Define the symmetric key (in Base64 encoding) used for decrypting an "
+"incoming SPA packet that is encrypted by the fwknop client with Rijndael."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:532
 msgid ""
 "Define the symmetric key used for decrypting an incoming SPA packet that is "
 "encrypted by the fwknop client with Rijndael."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:6
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:480
 msgid "Enable Uci/Luci control"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid "Enable config overwrite"
 msgstr ""
 
@@ -60,11 +100,13 @@ msgstr ""
 msgid "Firewall Knock Daemon"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:4
-msgid "Firewall Knock Operator"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:303
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:314
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:478
+msgid "Firewall Knock Operator Daemon"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:39
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:590
 msgid ""
 "Force all SPA packets to contain a real IP address within the encrypted "
 "data. This makes it impossible to use the -s command line argument on the "
@@ -73,43 +115,138 @@ msgid ""
 "know the external IP and set it via the -a argument."
 msgstr ""
 
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:527
+msgid "Generate Keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid "Generate keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid ""
+"Generates the symmetric key used for decrypting an incoming SPA packet, that "
+"is encrypted by the fwknop client with Rijndael block cipher, and HMAC "
+"authentication key used to verify the authenticity of the incoming SPA "
+"packet before the packet is decrypted."
+msgstr ""
+
 #: applications/luci-app-fwknopd/root/usr/share/rpcd/acl.d/luci-app-fwknopd.json:3
 msgid "Grant UCI access for luci-app-fwknopd"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:46
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:571
+msgid "HMAC key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:549
+msgid "Key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:178
+msgid "Loading…"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:597
 msgid ""
 "Maximum age in seconds that an SPA packet will be accepted. Defaults to 120 "
 "seconds."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:19
-msgid "Normal Key"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid "Network"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:492
+msgid "Network configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:315
+msgid "No stanza found."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:440
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:457
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:550
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:572
+msgid "Normal key"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid ""
+"Parses the /etc/fwknop/access.conf file (and included files/folders/keys) "
+"and generates QR codes for all found stanzas. Handles only files in /etc/"
+"fwknop folder due to access rights restrictions."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:422
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:506
+msgid "QR code"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:47
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:489
+msgid "Show access.conf QR codes"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:598
 msgid "Specify the ethernet interface on which fwknopd will sniff packets."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:28
-msgid "The base64 hmac key"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:447
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:453
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:559
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:568
+msgid "The HMAC authentication key has to be specified."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:517
+msgid ""
+"The destination address for which the SPA packet will be accepted. The "
+"string “ANY” is also accepted if a valid SPA packet should be honored to any "
+"destination IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid ""
+"The network on which the daemon listens. The daemon is automatically started "
+"when the network is up-and-running. This option has precedence over "
+"“PCAP_INTF” option."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:508
+msgid ""
+"The source address from which the SPA packet will be accepted. The string "
+"“ANY” is also accepted if a valid SPA packet should be honored from any "
+"source IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:514
+msgid "The source address has to be specified."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:17
-msgid "Use ANY for any source IP"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:430
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:436
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:537
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:546
+msgid "The symmetric key has to be specified."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid ""
 "When unchecked, the config files in /etc/fwknopd will be used as is, "
 "ignoring any settings here."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:10
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:419
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:502
 msgid "access.conf stanzas"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:44
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:595
 msgid "fwknopd.conf config options"
 msgstr ""
 
diff --git a/applications/luci-app-fwknopd/po/bg/fwknopd.po b/applications/luci-app-fwknopd/po/bg/fwknopd.po
index 2103f61a2..e1be420a7 100644
--- a/applications/luci-app-fwknopd/po/bg/fwknopd.po
+++ b/applications/luci-app-fwknopd/po/bg/fwknopd.po
@@ -10,21 +10,44 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=n != 1;\n"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:48
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:599
 msgid ""
 "Allow SPA clients to request access to services through an iptables firewall "
 "instead of just to it."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:49
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:600
 msgid "Allow SPA clients to request forwarding destination by DNS name."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:22
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:441
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:458
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:551
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:573
 msgid "Base64 key"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:33
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:308
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:319
+msgid "Close"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid "Custom configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:415
+msgid "Custom configuration read from /etc/fwknop/access.conf."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:581
+msgid ""
+"Define a set of ports and protocols (tcp or udp) that are explicitly not "
+"allowed regardless of the validity of the incoming SPA packet. Multiple "
+"entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:576
 msgid ""
 "Define a set of ports and protocols (tcp or udp) that will be opened if a "
 "valid knock sequence is seen. If this entry is not set, fwknopd will attempt "
@@ -32,7 +55,19 @@ msgid ""
 "matches any “RESTRICT_PORTS” entries). Multiple entries are comma-separated."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:36
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:562
+msgid ""
+"Define the HMAC authentication key (in Base64 encoding) used for verifying "
+"the authenticity of the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:554
+msgid ""
+"Define the HMAC authentication key used for verifying the authenticity of "
+"the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:585
 msgid ""
 "Define the length of time access will be granted by fwknopd through the "
 "firewall after a valid knock sequence from a source IP address. If "
@@ -40,18 +75,23 @@ msgid ""
 "automatically be set."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:18
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:20
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:540
+msgid ""
+"Define the symmetric key (in Base64 encoding) used for decrypting an "
+"incoming SPA packet that is encrypted by the fwknop client with Rijndael."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:532
 msgid ""
 "Define the symmetric key used for decrypting an incoming SPA packet that is "
 "encrypted by the fwknop client with Rijndael."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:6
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:480
 msgid "Enable Uci/Luci control"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid "Enable config overwrite"
 msgstr ""
 
@@ -59,11 +99,13 @@ msgstr ""
 msgid "Firewall Knock Daemon"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:4
-msgid "Firewall Knock Operator"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:303
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:314
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:478
+msgid "Firewall Knock Operator Daemon"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:39
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:590
 msgid ""
 "Force all SPA packets to contain a real IP address within the encrypted "
 "data. This makes it impossible to use the -s command line argument on the "
@@ -72,43 +114,138 @@ msgid ""
 "know the external IP and set it via the -a argument."
 msgstr ""
 
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:527
+msgid "Generate Keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid "Generate keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid ""
+"Generates the symmetric key used for decrypting an incoming SPA packet, that "
+"is encrypted by the fwknop client with Rijndael block cipher, and HMAC "
+"authentication key used to verify the authenticity of the incoming SPA "
+"packet before the packet is decrypted."
+msgstr ""
+
 #: applications/luci-app-fwknopd/root/usr/share/rpcd/acl.d/luci-app-fwknopd.json:3
 msgid "Grant UCI access for luci-app-fwknopd"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:46
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:571
+msgid "HMAC key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:549
+msgid "Key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:178
+msgid "Loading…"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:597
 msgid ""
 "Maximum age in seconds that an SPA packet will be accepted. Defaults to 120 "
 "seconds."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:19
-msgid "Normal Key"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid "Network"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:492
+msgid "Network configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:315
+msgid "No stanza found."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:440
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:457
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:550
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:572
+msgid "Normal key"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid ""
+"Parses the /etc/fwknop/access.conf file (and included files/folders/keys) "
+"and generates QR codes for all found stanzas. Handles only files in /etc/"
+"fwknop folder due to access rights restrictions."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:422
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:506
+msgid "QR code"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:47
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:489
+msgid "Show access.conf QR codes"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:598
 msgid "Specify the ethernet interface on which fwknopd will sniff packets."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:28
-msgid "The base64 hmac key"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:447
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:453
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:559
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:568
+msgid "The HMAC authentication key has to be specified."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:517
+msgid ""
+"The destination address for which the SPA packet will be accepted. The "
+"string “ANY” is also accepted if a valid SPA packet should be honored to any "
+"destination IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid ""
+"The network on which the daemon listens. The daemon is automatically started "
+"when the network is up-and-running. This option has precedence over "
+"“PCAP_INTF” option."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:508
+msgid ""
+"The source address from which the SPA packet will be accepted. The string "
+"“ANY” is also accepted if a valid SPA packet should be honored from any "
+"source IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:514
+msgid "The source address has to be specified."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:17
-msgid "Use ANY for any source IP"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:430
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:436
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:537
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:546
+msgid "The symmetric key has to be specified."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid ""
 "When unchecked, the config files in /etc/fwknopd will be used as is, "
 "ignoring any settings here."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:10
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:419
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:502
 msgid "access.conf stanzas"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:44
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:595
 msgid "fwknopd.conf config options"
 msgstr ""
 
diff --git a/applications/luci-app-fwknopd/po/bn_BD/fwknopd.po b/applications/luci-app-fwknopd/po/bn_BD/fwknopd.po
index b8d8ba19b..04dfcd0ee 100644
--- a/applications/luci-app-fwknopd/po/bn_BD/fwknopd.po
+++ b/applications/luci-app-fwknopd/po/bn_BD/fwknopd.po
@@ -10,21 +10,44 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=n != 1;\n"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:48
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:599
 msgid ""
 "Allow SPA clients to request access to services through an iptables firewall "
 "instead of just to it."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:49
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:600
 msgid "Allow SPA clients to request forwarding destination by DNS name."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:22
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:441
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:458
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:551
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:573
 msgid "Base64 key"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:33
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:308
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:319
+msgid "Close"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid "Custom configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:415
+msgid "Custom configuration read from /etc/fwknop/access.conf."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:581
+msgid ""
+"Define a set of ports and protocols (tcp or udp) that are explicitly not "
+"allowed regardless of the validity of the incoming SPA packet. Multiple "
+"entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:576
 msgid ""
 "Define a set of ports and protocols (tcp or udp) that will be opened if a "
 "valid knock sequence is seen. If this entry is not set, fwknopd will attempt "
@@ -32,7 +55,19 @@ msgid ""
 "matches any “RESTRICT_PORTS” entries). Multiple entries are comma-separated."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:36
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:562
+msgid ""
+"Define the HMAC authentication key (in Base64 encoding) used for verifying "
+"the authenticity of the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:554
+msgid ""
+"Define the HMAC authentication key used for verifying the authenticity of "
+"the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:585
 msgid ""
 "Define the length of time access will be granted by fwknopd through the "
 "firewall after a valid knock sequence from a source IP address. If "
@@ -40,18 +75,23 @@ msgid ""
 "automatically be set."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:18
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:20
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:540
+msgid ""
+"Define the symmetric key (in Base64 encoding) used for decrypting an "
+"incoming SPA packet that is encrypted by the fwknop client with Rijndael."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:532
 msgid ""
 "Define the symmetric key used for decrypting an incoming SPA packet that is "
 "encrypted by the fwknop client with Rijndael."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:6
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:480
 msgid "Enable Uci/Luci control"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid "Enable config overwrite"
 msgstr ""
 
@@ -59,11 +99,13 @@ msgstr ""
 msgid "Firewall Knock Daemon"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:4
-msgid "Firewall Knock Operator"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:303
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:314
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:478
+msgid "Firewall Knock Operator Daemon"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:39
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:590
 msgid ""
 "Force all SPA packets to contain a real IP address within the encrypted "
 "data. This makes it impossible to use the -s command line argument on the "
@@ -72,43 +114,138 @@ msgid ""
 "know the external IP and set it via the -a argument."
 msgstr ""
 
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:527
+msgid "Generate Keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid "Generate keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid ""
+"Generates the symmetric key used for decrypting an incoming SPA packet, that "
+"is encrypted by the fwknop client with Rijndael block cipher, and HMAC "
+"authentication key used to verify the authenticity of the incoming SPA "
+"packet before the packet is decrypted."
+msgstr ""
+
 #: applications/luci-app-fwknopd/root/usr/share/rpcd/acl.d/luci-app-fwknopd.json:3
 msgid "Grant UCI access for luci-app-fwknopd"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:46
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:571
+msgid "HMAC key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:549
+msgid "Key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:178
+msgid "Loading…"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:597
 msgid ""
 "Maximum age in seconds that an SPA packet will be accepted. Defaults to 120 "
 "seconds."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:19
-msgid "Normal Key"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid "Network"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:492
+msgid "Network configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:315
+msgid "No stanza found."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:440
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:457
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:550
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:572
+msgid "Normal key"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid ""
+"Parses the /etc/fwknop/access.conf file (and included files/folders/keys) "
+"and generates QR codes for all found stanzas. Handles only files in /etc/"
+"fwknop folder due to access rights restrictions."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:422
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:506
+msgid "QR code"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:47
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:489
+msgid "Show access.conf QR codes"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:598
 msgid "Specify the ethernet interface on which fwknopd will sniff packets."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:28
-msgid "The base64 hmac key"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:447
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:453
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:559
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:568
+msgid "The HMAC authentication key has to be specified."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:517
+msgid ""
+"The destination address for which the SPA packet will be accepted. The "
+"string “ANY” is also accepted if a valid SPA packet should be honored to any "
+"destination IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid ""
+"The network on which the daemon listens. The daemon is automatically started "
+"when the network is up-and-running. This option has precedence over "
+"“PCAP_INTF” option."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:508
+msgid ""
+"The source address from which the SPA packet will be accepted. The string "
+"“ANY” is also accepted if a valid SPA packet should be honored from any "
+"source IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:514
+msgid "The source address has to be specified."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:17
-msgid "Use ANY for any source IP"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:430
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:436
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:537
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:546
+msgid "The symmetric key has to be specified."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid ""
 "When unchecked, the config files in /etc/fwknopd will be used as is, "
 "ignoring any settings here."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:10
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:419
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:502
 msgid "access.conf stanzas"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:44
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:595
 msgid "fwknopd.conf config options"
 msgstr ""
 
diff --git a/applications/luci-app-fwknopd/po/ca/fwknopd.po b/applications/luci-app-fwknopd/po/ca/fwknopd.po
index e966b550d..f51fb96d6 100644
--- a/applications/luci-app-fwknopd/po/ca/fwknopd.po
+++ b/applications/luci-app-fwknopd/po/ca/fwknopd.po
@@ -10,21 +10,44 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=n != 1;\n"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:48
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:599
 msgid ""
 "Allow SPA clients to request access to services through an iptables firewall "
 "instead of just to it."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:49
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:600
 msgid "Allow SPA clients to request forwarding destination by DNS name."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:22
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:441
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:458
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:551
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:573
 msgid "Base64 key"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:33
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:308
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:319
+msgid "Close"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid "Custom configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:415
+msgid "Custom configuration read from /etc/fwknop/access.conf."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:581
+msgid ""
+"Define a set of ports and protocols (tcp or udp) that are explicitly not "
+"allowed regardless of the validity of the incoming SPA packet. Multiple "
+"entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:576
 msgid ""
 "Define a set of ports and protocols (tcp or udp) that will be opened if a "
 "valid knock sequence is seen. If this entry is not set, fwknopd will attempt "
@@ -32,7 +55,19 @@ msgid ""
 "matches any “RESTRICT_PORTS” entries). Multiple entries are comma-separated."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:36
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:562
+msgid ""
+"Define the HMAC authentication key (in Base64 encoding) used for verifying "
+"the authenticity of the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:554
+msgid ""
+"Define the HMAC authentication key used for verifying the authenticity of "
+"the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:585
 msgid ""
 "Define the length of time access will be granted by fwknopd through the "
 "firewall after a valid knock sequence from a source IP address. If "
@@ -40,18 +75,23 @@ msgid ""
 "automatically be set."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:18
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:20
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:540
+msgid ""
+"Define the symmetric key (in Base64 encoding) used for decrypting an "
+"incoming SPA packet that is encrypted by the fwknop client with Rijndael."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:532
 msgid ""
 "Define the symmetric key used for decrypting an incoming SPA packet that is "
 "encrypted by the fwknop client with Rijndael."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:6
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:480
 msgid "Enable Uci/Luci control"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid "Enable config overwrite"
 msgstr ""
 
@@ -59,11 +99,13 @@ msgstr ""
 msgid "Firewall Knock Daemon"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:4
-msgid "Firewall Knock Operator"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:303
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:314
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:478
+msgid "Firewall Knock Operator Daemon"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:39
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:590
 msgid ""
 "Force all SPA packets to contain a real IP address within the encrypted "
 "data. This makes it impossible to use the -s command line argument on the "
@@ -72,43 +114,138 @@ msgid ""
 "know the external IP and set it via the -a argument."
 msgstr ""
 
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:527
+msgid "Generate Keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid "Generate keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid ""
+"Generates the symmetric key used for decrypting an incoming SPA packet, that "
+"is encrypted by the fwknop client with Rijndael block cipher, and HMAC "
+"authentication key used to verify the authenticity of the incoming SPA "
+"packet before the packet is decrypted."
+msgstr ""
+
 #: applications/luci-app-fwknopd/root/usr/share/rpcd/acl.d/luci-app-fwknopd.json:3
 msgid "Grant UCI access for luci-app-fwknopd"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:46
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:571
+msgid "HMAC key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:549
+msgid "Key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:178
+msgid "Loading…"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:597
 msgid ""
 "Maximum age in seconds that an SPA packet will be accepted. Defaults to 120 "
 "seconds."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:19
-msgid "Normal Key"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid "Network"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:492
+msgid "Network configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:315
+msgid "No stanza found."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:440
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:457
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:550
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:572
+msgid "Normal key"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid ""
+"Parses the /etc/fwknop/access.conf file (and included files/folders/keys) "
+"and generates QR codes for all found stanzas. Handles only files in /etc/"
+"fwknop folder due to access rights restrictions."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:422
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:506
+msgid "QR code"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:47
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:489
+msgid "Show access.conf QR codes"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:598
 msgid "Specify the ethernet interface on which fwknopd will sniff packets."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:28
-msgid "The base64 hmac key"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:447
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:453
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:559
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:568
+msgid "The HMAC authentication key has to be specified."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:517
+msgid ""
+"The destination address for which the SPA packet will be accepted. The "
+"string “ANY” is also accepted if a valid SPA packet should be honored to any "
+"destination IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid ""
+"The network on which the daemon listens. The daemon is automatically started "
+"when the network is up-and-running. This option has precedence over "
+"“PCAP_INTF” option."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:508
+msgid ""
+"The source address from which the SPA packet will be accepted. The string "
+"“ANY” is also accepted if a valid SPA packet should be honored from any "
+"source IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:514
+msgid "The source address has to be specified."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:17
-msgid "Use ANY for any source IP"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:430
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:436
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:537
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:546
+msgid "The symmetric key has to be specified."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid ""
 "When unchecked, the config files in /etc/fwknopd will be used as is, "
 "ignoring any settings here."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:10
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:419
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:502
 msgid "access.conf stanzas"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:44
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:595
 msgid "fwknopd.conf config options"
 msgstr ""
 
diff --git a/applications/luci-app-fwknopd/po/cs/fwknopd.po b/applications/luci-app-fwknopd/po/cs/fwknopd.po
index 1b36c171c..cd0aaa446 100644
--- a/applications/luci-app-fwknopd/po/cs/fwknopd.po
+++ b/applications/luci-app-fwknopd/po/cs/fwknopd.po
@@ -12,7 +12,7 @@ msgstr ""
 "Plural-Forms: nplurals=3; plural=(n==1) ? 0 : (n>=2 && n<=4) ? 1 : 2;\n"
 "X-Generator: Weblate 3.11-dev\n"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:48
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:599
 msgid ""
 "Allow SPA clients to request access to services through an iptables firewall "
 "instead of just to it."
@@ -20,15 +20,38 @@ msgstr ""
 "Umožnit SPA klientů žádat o přístup ke službám skrze iptables brány firewall "
 "namísto u ní."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:49
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:600
 msgid "Allow SPA clients to request forwarding destination by DNS name."
 msgstr "Umožnit SPA klientům žádá předávání cíle podle DNS názvu."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:22
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:441
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:458
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:551
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:573
 msgid "Base64 key"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:33
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:308
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:319
+msgid "Close"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid "Custom configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:415
+msgid "Custom configuration read from /etc/fwknop/access.conf."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:581
+msgid ""
+"Define a set of ports and protocols (tcp or udp) that are explicitly not "
+"allowed regardless of the validity of the incoming SPA packet. Multiple "
+"entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:576
 msgid ""
 "Define a set of ports and protocols (tcp or udp) that will be opened if a "
 "valid knock sequence is seen. If this entry is not set, fwknopd will attempt "
@@ -36,7 +59,19 @@ msgid ""
 "matches any “RESTRICT_PORTS” entries). Multiple entries are comma-separated."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:36
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:562
+msgid ""
+"Define the HMAC authentication key (in Base64 encoding) used for verifying "
+"the authenticity of the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:554
+msgid ""
+"Define the HMAC authentication key used for verifying the authenticity of "
+"the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:585
 msgid ""
 "Define the length of time access will be granted by fwknopd through the "
 "firewall after a valid knock sequence from a source IP address. If "
@@ -44,18 +79,23 @@ msgid ""
 "automatically be set."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:18
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:20
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:540
+msgid ""
+"Define the symmetric key (in Base64 encoding) used for decrypting an "
+"incoming SPA packet that is encrypted by the fwknop client with Rijndael."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:532
 msgid ""
 "Define the symmetric key used for decrypting an incoming SPA packet that is "
 "encrypted by the fwknop client with Rijndael."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:6
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:480
 msgid "Enable Uci/Luci control"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid "Enable config overwrite"
 msgstr ""
 
@@ -63,11 +103,13 @@ msgstr ""
 msgid "Firewall Knock Daemon"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:4
-msgid "Firewall Knock Operator"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:303
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:314
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:478
+msgid "Firewall Knock Operator Daemon"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:39
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:590
 msgid ""
 "Force all SPA packets to contain a real IP address within the encrypted "
 "data. This makes it impossible to use the -s command line argument on the "
@@ -76,43 +118,138 @@ msgid ""
 "know the external IP and set it via the -a argument."
 msgstr ""
 
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:527
+msgid "Generate Keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid "Generate keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid ""
+"Generates the symmetric key used for decrypting an incoming SPA packet, that "
+"is encrypted by the fwknop client with Rijndael block cipher, and HMAC "
+"authentication key used to verify the authenticity of the incoming SPA "
+"packet before the packet is decrypted."
+msgstr ""
+
 #: applications/luci-app-fwknopd/root/usr/share/rpcd/acl.d/luci-app-fwknopd.json:3
 msgid "Grant UCI access for luci-app-fwknopd"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:46
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:571
+msgid "HMAC key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:549
+msgid "Key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:178
+msgid "Loading…"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:597
 msgid ""
 "Maximum age in seconds that an SPA packet will be accepted. Defaults to 120 "
 "seconds."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:19
-msgid "Normal Key"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid "Network"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:492
+msgid "Network configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:315
+msgid "No stanza found."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:440
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:457
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:550
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:572
+msgid "Normal key"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid ""
+"Parses the /etc/fwknop/access.conf file (and included files/folders/keys) "
+"and generates QR codes for all found stanzas. Handles only files in /etc/"
+"fwknop folder due to access rights restrictions."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:422
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:506
+msgid "QR code"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:47
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:489
+msgid "Show access.conf QR codes"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:598
 msgid "Specify the ethernet interface on which fwknopd will sniff packets."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:28
-msgid "The base64 hmac key"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:447
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:453
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:559
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:568
+msgid "The HMAC authentication key has to be specified."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:517
+msgid ""
+"The destination address for which the SPA packet will be accepted. The "
+"string “ANY” is also accepted if a valid SPA packet should be honored to any "
+"destination IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid ""
+"The network on which the daemon listens. The daemon is automatically started "
+"when the network is up-and-running. This option has precedence over "
+"“PCAP_INTF” option."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:508
+msgid ""
+"The source address from which the SPA packet will be accepted. The string "
+"“ANY” is also accepted if a valid SPA packet should be honored from any "
+"source IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:514
+msgid "The source address has to be specified."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:17
-msgid "Use ANY for any source IP"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:430
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:436
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:537
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:546
+msgid "The symmetric key has to be specified."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid ""
 "When unchecked, the config files in /etc/fwknopd will be used as is, "
 "ignoring any settings here."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:10
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:419
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:502
 msgid "access.conf stanzas"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:44
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:595
 msgid "fwknopd.conf config options"
 msgstr ""
 
diff --git a/applications/luci-app-fwknopd/po/de/fwknopd.po b/applications/luci-app-fwknopd/po/de/fwknopd.po
index 744fa1037..1bf04f546 100644
--- a/applications/luci-app-fwknopd/po/de/fwknopd.po
+++ b/applications/luci-app-fwknopd/po/de/fwknopd.po
@@ -12,7 +12,7 @@ msgstr ""
 "Plural-Forms: nplurals=2; plural=n != 1;\n"
 "X-Generator: Weblate 4.2-dev\n"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:48
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:599
 msgid ""
 "Allow SPA clients to request access to services through an iptables firewall "
 "instead of just to it."
@@ -20,15 +20,38 @@ msgstr ""
 "Ermögliche SPA-Clients Zugriff auf Dienste über eine iptables-Firewall "
 "anzufordern anstatt direkten Zugriff zu gewähren."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:49
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:600
 msgid "Allow SPA clients to request forwarding destination by DNS name."
 msgstr "Erlaube SPA-Clients die Forward-destination via DNS-Namen zu setzen."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:22
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:441
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:458
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:551
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:573
 msgid "Base64 key"
 msgstr "Base64-Schlüssel"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:33
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:308
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:319
+msgid "Close"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid "Custom configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:415
+msgid "Custom configuration read from /etc/fwknop/access.conf."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:581
+msgid ""
+"Define a set of ports and protocols (tcp or udp) that are explicitly not "
+"allowed regardless of the validity of the incoming SPA packet. Multiple "
+"entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:576
 msgid ""
 "Define a set of ports and protocols (tcp or udp) that will be opened if a "
 "valid knock sequence is seen. If this entry is not set, fwknopd will attempt "
@@ -41,7 +64,19 @@ msgstr ""
 "SPA-Feld zu ermöglichen (außer es deckt sich mit \"RESTRICT_PORTS\"-"
 "Einträgen). Mehrfacheinträge per Komma trennen."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:36
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:562
+msgid ""
+"Define the HMAC authentication key (in Base64 encoding) used for verifying "
+"the authenticity of the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:554
+msgid ""
+"Define the HMAC authentication key used for verifying the authenticity of "
+"the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:585
 msgid ""
 "Define the length of time access will be granted by fwknopd through the "
 "firewall after a valid knock sequence from a source IP address. If "
@@ -53,8 +88,13 @@ msgstr ""
 "erkannt wurde. Falls \"FW_ACCESS_TIMEOUT\" nicht gesetzt ist, wird die "
 "Voreinstellung von 30s automatisch gesetzt."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:18
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:20
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:540
+msgid ""
+"Define the symmetric key (in Base64 encoding) used for decrypting an "
+"incoming SPA packet that is encrypted by the fwknop client with Rijndael."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:532
 msgid ""
 "Define the symmetric key used for decrypting an incoming SPA packet that is "
 "encrypted by the fwknop client with Rijndael."
@@ -63,11 +103,11 @@ msgstr ""
 "eingehenden SPA-Pakete des fwknop-Clients (Rijndael-Algorithmus) genutzt "
 "wird."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:6
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:480
 msgid "Enable Uci/Luci control"
 msgstr "Aktiviere Uci/Luci-Zugriff"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid "Enable config overwrite"
 msgstr "Erlaube das Überschreiben der Konfiguration"
 
@@ -75,11 +115,13 @@ msgstr "Erlaube das Überschreiben der Konfiguration"
 msgid "Firewall Knock Daemon"
 msgstr "Firewall-Knock-Daemon"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:4
-msgid "Firewall Knock Operator"
-msgstr "Firewall-Knock-Operator"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:303
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:314
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:478
+msgid "Firewall Knock Operator Daemon"
+msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:39
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:590
 msgid ""
 "Force all SPA packets to contain a real IP address within the encrypted "
 "data. This makes it impossible to use the -s command line argument on the "
@@ -94,11 +136,39 @@ msgstr ""
 "oder der die externe IP muss bekannt sein und beim Client per \"-a\"-"
 "Argument mitgegeben werden."
 
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:527
+msgid "Generate Keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid "Generate keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid ""
+"Generates the symmetric key used for decrypting an incoming SPA packet, that "
+"is encrypted by the fwknop client with Rijndael block cipher, and HMAC "
+"authentication key used to verify the authenticity of the incoming SPA "
+"packet before the packet is decrypted."
+msgstr ""
+
 #: applications/luci-app-fwknopd/root/usr/share/rpcd/acl.d/luci-app-fwknopd.json:3
 msgid "Grant UCI access for luci-app-fwknopd"
 msgstr "Gewähre UCI Zugriff auf luci-app-fwknopd"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:46
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:571
+msgid "HMAC key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:549
+msgid "Key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:178
+msgid "Loading…"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:597
 msgid ""
 "Maximum age in seconds that an SPA packet will be accepted. Defaults to 120 "
 "seconds."
@@ -106,25 +176,91 @@ msgstr ""
 "Maximale Zeit in Sekunden, nach der ein SPA-Paket noch als gültig akzeptiert "
 "wird. Voreinstellung sind 120s."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:19
-msgid "Normal Key"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid "Network"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:492
+msgid "Network configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:315
+msgid "No stanza found."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:440
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:457
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:550
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:572
+msgid "Normal key"
 msgstr "Normal-Schlüssel"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:47
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid ""
+"Parses the /etc/fwknop/access.conf file (and included files/folders/keys) "
+"and generates QR codes for all found stanzas. Handles only files in /etc/"
+"fwknop folder due to access rights restrictions."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:422
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:506
+msgid "QR code"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:489
+msgid "Show access.conf QR codes"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:598
 msgid "Specify the ethernet interface on which fwknopd will sniff packets."
 msgstr ""
 "Lege die Ethernet-Schnittstelle fest, die fwknopd für das sniffen auf Pakete "
 "nutzen soll."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:28
-msgid "The base64 hmac key"
-msgstr "Der Base 64-HMAC-Schlüssel"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:447
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:453
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:559
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:568
+msgid "The HMAC authentication key has to be specified."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:517
+msgid ""
+"The destination address for which the SPA packet will be accepted. The "
+"string “ANY” is also accepted if a valid SPA packet should be honored to any "
+"destination IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:17
-msgid "Use ANY for any source IP"
-msgstr "Nutze ANY für alle Source-IPs"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid ""
+"The network on which the daemon listens. The daemon is automatically started "
+"when the network is up-and-running. This option has precedence over "
+"“PCAP_INTF” option."
+msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:508
+msgid ""
+"The source address from which the SPA packet will be accepted. The string "
+"“ANY” is also accepted if a valid SPA packet should be honored from any "
+"source IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:514
+msgid "The source address has to be specified."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:430
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:436
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:537
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:546
+msgid "The symmetric key has to be specified."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid ""
 "When unchecked, the config files in /etc/fwknopd will be used as is, "
 "ignoring any settings here."
@@ -132,14 +268,24 @@ msgstr ""
 "Dies deaktivieren um die Konfigurationsdateien unter /etc/fwknopd zu nutzen, "
 "anstatt der Einstellungen hier."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:10
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:419
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:502
 msgid "access.conf stanzas"
 msgstr "access.conf-Einträge"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:44
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:595
 msgid "fwknopd.conf config options"
 msgstr "fwknopd.conf-Konfigurationsoptionen"
 
+#~ msgid "Firewall Knock Operator"
+#~ msgstr "Firewall-Knock-Operator"
+
+#~ msgid "The Base64 HMAC key"
+#~ msgstr "Der Base 64-HMAC-Schlüssel"
+
+#~ msgid "Use ANY for any source IP"
+#~ msgstr "Nutze ANY für alle Source-IPs"
+
 #~ msgid "Enter custom access.conf variables below:"
 #~ msgstr "Enter custom access.conf variables below:"
 
diff --git a/applications/luci-app-fwknopd/po/el/fwknopd.po b/applications/luci-app-fwknopd/po/el/fwknopd.po
index e4fcbdde9..ed79bcd10 100644
--- a/applications/luci-app-fwknopd/po/el/fwknopd.po
+++ b/applications/luci-app-fwknopd/po/el/fwknopd.po
@@ -10,21 +10,44 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=n != 1;\n"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:48
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:599
 msgid ""
 "Allow SPA clients to request access to services through an iptables firewall "
 "instead of just to it."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:49
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:600
 msgid "Allow SPA clients to request forwarding destination by DNS name."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:22
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:441
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:458
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:551
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:573
 msgid "Base64 key"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:33
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:308
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:319
+msgid "Close"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid "Custom configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:415
+msgid "Custom configuration read from /etc/fwknop/access.conf."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:581
+msgid ""
+"Define a set of ports and protocols (tcp or udp) that are explicitly not "
+"allowed regardless of the validity of the incoming SPA packet. Multiple "
+"entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:576
 msgid ""
 "Define a set of ports and protocols (tcp or udp) that will be opened if a "
 "valid knock sequence is seen. If this entry is not set, fwknopd will attempt "
@@ -32,7 +55,19 @@ msgid ""
 "matches any “RESTRICT_PORTS” entries). Multiple entries are comma-separated."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:36
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:562
+msgid ""
+"Define the HMAC authentication key (in Base64 encoding) used for verifying "
+"the authenticity of the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:554
+msgid ""
+"Define the HMAC authentication key used for verifying the authenticity of "
+"the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:585
 msgid ""
 "Define the length of time access will be granted by fwknopd through the "
 "firewall after a valid knock sequence from a source IP address. If "
@@ -40,18 +75,23 @@ msgid ""
 "automatically be set."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:18
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:20
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:540
+msgid ""
+"Define the symmetric key (in Base64 encoding) used for decrypting an "
+"incoming SPA packet that is encrypted by the fwknop client with Rijndael."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:532
 msgid ""
 "Define the symmetric key used for decrypting an incoming SPA packet that is "
 "encrypted by the fwknop client with Rijndael."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:6
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:480
 msgid "Enable Uci/Luci control"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid "Enable config overwrite"
 msgstr ""
 
@@ -59,11 +99,13 @@ msgstr ""
 msgid "Firewall Knock Daemon"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:4
-msgid "Firewall Knock Operator"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:303
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:314
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:478
+msgid "Firewall Knock Operator Daemon"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:39
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:590
 msgid ""
 "Force all SPA packets to contain a real IP address within the encrypted "
 "data. This makes it impossible to use the -s command line argument on the "
@@ -72,43 +114,138 @@ msgid ""
 "know the external IP and set it via the -a argument."
 msgstr ""
 
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:527
+msgid "Generate Keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid "Generate keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid ""
+"Generates the symmetric key used for decrypting an incoming SPA packet, that "
+"is encrypted by the fwknop client with Rijndael block cipher, and HMAC "
+"authentication key used to verify the authenticity of the incoming SPA "
+"packet before the packet is decrypted."
+msgstr ""
+
 #: applications/luci-app-fwknopd/root/usr/share/rpcd/acl.d/luci-app-fwknopd.json:3
 msgid "Grant UCI access for luci-app-fwknopd"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:46
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:571
+msgid "HMAC key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:549
+msgid "Key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:178
+msgid "Loading…"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:597
 msgid ""
 "Maximum age in seconds that an SPA packet will be accepted. Defaults to 120 "
 "seconds."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:19
-msgid "Normal Key"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid "Network"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:492
+msgid "Network configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:315
+msgid "No stanza found."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:440
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:457
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:550
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:572
+msgid "Normal key"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid ""
+"Parses the /etc/fwknop/access.conf file (and included files/folders/keys) "
+"and generates QR codes for all found stanzas. Handles only files in /etc/"
+"fwknop folder due to access rights restrictions."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:422
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:506
+msgid "QR code"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:47
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:489
+msgid "Show access.conf QR codes"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:598
 msgid "Specify the ethernet interface on which fwknopd will sniff packets."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:28
-msgid "The base64 hmac key"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:447
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:453
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:559
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:568
+msgid "The HMAC authentication key has to be specified."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:517
+msgid ""
+"The destination address for which the SPA packet will be accepted. The "
+"string “ANY” is also accepted if a valid SPA packet should be honored to any "
+"destination IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid ""
+"The network on which the daemon listens. The daemon is automatically started "
+"when the network is up-and-running. This option has precedence over "
+"“PCAP_INTF” option."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:508
+msgid ""
+"The source address from which the SPA packet will be accepted. The string "
+"“ANY” is also accepted if a valid SPA packet should be honored from any "
+"source IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:514
+msgid "The source address has to be specified."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:17
-msgid "Use ANY for any source IP"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:430
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:436
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:537
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:546
+msgid "The symmetric key has to be specified."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid ""
 "When unchecked, the config files in /etc/fwknopd will be used as is, "
 "ignoring any settings here."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:10
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:419
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:502
 msgid "access.conf stanzas"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:44
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:595
 msgid "fwknopd.conf config options"
 msgstr ""
 
diff --git a/applications/luci-app-fwknopd/po/en/fwknopd.po b/applications/luci-app-fwknopd/po/en/fwknopd.po
index 65ab6ad87..1e4e4f160 100644
--- a/applications/luci-app-fwknopd/po/en/fwknopd.po
+++ b/applications/luci-app-fwknopd/po/en/fwknopd.po
@@ -10,7 +10,7 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:48
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:599
 msgid ""
 "Allow SPA clients to request access to services through an iptables firewall "
 "instead of just to it."
@@ -18,15 +18,38 @@ msgstr ""
 "Allow SPA clients to request access to services through an iptables firewall "
 "instead of just to it."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:49
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:600
 msgid "Allow SPA clients to request forwarding destination by DNS name."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:22
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:441
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:458
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:551
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:573
 msgid "Base64 key"
 msgstr "Base64 key"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:33
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:308
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:319
+msgid "Close"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid "Custom configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:415
+msgid "Custom configuration read from /etc/fwknop/access.conf."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:581
+msgid ""
+"Define a set of ports and protocols (tcp or udp) that are explicitly not "
+"allowed regardless of the validity of the incoming SPA packet. Multiple "
+"entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:576
 msgid ""
 "Define a set of ports and protocols (tcp or udp) that will be opened if a "
 "valid knock sequence is seen. If this entry is not set, fwknopd will attempt "
@@ -38,7 +61,19 @@ msgstr ""
 "to honor any proto/port request specified in the SPA data (unless of it "
 "matches any “RESTRICT_PORTS” entries). Multiple entries are comma-separated."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:36
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:562
+msgid ""
+"Define the HMAC authentication key (in Base64 encoding) used for verifying "
+"the authenticity of the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:554
+msgid ""
+"Define the HMAC authentication key used for verifying the authenticity of "
+"the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:585
 msgid ""
 "Define the length of time access will be granted by fwknopd through the "
 "firewall after a valid knock sequence from a source IP address. If "
@@ -50,8 +85,13 @@ msgstr ""
 "“FW_ACCESS_TIMEOUT” is not set then the default timeout of 30 seconds will "
 "automatically be set."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:18
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:20
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:540
+msgid ""
+"Define the symmetric key (in Base64 encoding) used for decrypting an "
+"incoming SPA packet that is encrypted by the fwknop client with Rijndael."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:532
 msgid ""
 "Define the symmetric key used for decrypting an incoming SPA packet that is "
 "encrypted by the fwknop client with Rijndael."
@@ -59,11 +99,11 @@ msgstr ""
 "Define the symmetric key used for decrypting an incoming SPA packet that is "
 "encrypted by the fwknop client with Rijndael."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:6
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:480
 msgid "Enable Uci/Luci control"
 msgstr "Enable Uci/Luci control"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid "Enable config overwrite"
 msgstr "Enable config overwrite"
 
@@ -71,11 +111,13 @@ msgstr "Enable config overwrite"
 msgid "Firewall Knock Daemon"
 msgstr "Firewall Knock Daemon"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:4
-msgid "Firewall Knock Operator"
-msgstr "Firewall Knock Operator"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:303
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:314
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:478
+msgid "Firewall Knock Operator Daemon"
+msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:39
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:590
 msgid ""
 "Force all SPA packets to contain a real IP address within the encrypted "
 "data. This makes it impossible to use the -s command line argument on the "
@@ -89,11 +131,39 @@ msgstr ""
 "resolve the external address (if the client behind a NAT) or the client must "
 "know the external IP and set it via the -a argument."
 
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:527
+msgid "Generate Keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid "Generate keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid ""
+"Generates the symmetric key used for decrypting an incoming SPA packet, that "
+"is encrypted by the fwknop client with Rijndael block cipher, and HMAC "
+"authentication key used to verify the authenticity of the incoming SPA "
+"packet before the packet is decrypted."
+msgstr ""
+
 #: applications/luci-app-fwknopd/root/usr/share/rpcd/acl.d/luci-app-fwknopd.json:3
 msgid "Grant UCI access for luci-app-fwknopd"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:46
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:571
+msgid "HMAC key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:549
+msgid "Key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:178
+msgid "Loading…"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:597
 msgid ""
 "Maximum age in seconds that an SPA packet will be accepted. Defaults to 120 "
 "seconds."
@@ -101,23 +171,89 @@ msgstr ""
 "Maximum age in seconds that an SPA packet will be accepted. Defaults to 120 "
 "seconds."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:19
-msgid "Normal Key"
-msgstr "Normal Key"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid "Network"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:492
+msgid "Network configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:315
+msgid "No stanza found."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:440
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:457
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:550
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:572
+msgid "Normal key"
+msgstr "Normal key"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:47
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid ""
+"Parses the /etc/fwknop/access.conf file (and included files/folders/keys) "
+"and generates QR codes for all found stanzas. Handles only files in /etc/"
+"fwknop folder due to access rights restrictions."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:422
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:506
+msgid "QR code"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:489
+msgid "Show access.conf QR codes"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:598
 msgid "Specify the ethernet interface on which fwknopd will sniff packets."
 msgstr "Specify the ethernet interface on which fwknopd will sniff packets."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:28
-msgid "The base64 hmac key"
-msgstr "The base64 hmac key"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:447
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:453
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:559
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:568
+msgid "The HMAC authentication key has to be specified."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:517
+msgid ""
+"The destination address for which the SPA packet will be accepted. The "
+"string “ANY” is also accepted if a valid SPA packet should be honored to any "
+"destination IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:17
-msgid "Use ANY for any source IP"
-msgstr "Use ANY for any source IP"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid ""
+"The network on which the daemon listens. The daemon is automatically started "
+"when the network is up-and-running. This option has precedence over "
+"“PCAP_INTF” option."
+msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:508
+msgid ""
+"The source address from which the SPA packet will be accepted. The string "
+"“ANY” is also accepted if a valid SPA packet should be honored from any "
+"source IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:514
+msgid "The source address has to be specified."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:430
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:436
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:537
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:546
+msgid "The symmetric key has to be specified."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid ""
 "When unchecked, the config files in /etc/fwknopd will be used as is, "
 "ignoring any settings here."
@@ -125,14 +261,24 @@ msgstr ""
 "When unchecked, the config files in /etc/fwknopd will be used as is, "
 "ignoring any settings here."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:10
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:419
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:502
 msgid "access.conf stanzas"
 msgstr "access.conf stanzas"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:44
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:595
 msgid "fwknopd.conf config options"
 msgstr "fwknopd.conf config options"
 
+#~ msgid "Firewall Knock Operator"
+#~ msgstr "Firewall Knock Operator"
+
+#~ msgid "The Base64 HMAC key"
+#~ msgstr "The Base64 HMAC key"
+
+#~ msgid "Use ANY for any source IP"
+#~ msgstr "Use ANY for any source IP"
+
 #~ msgid "Enter custom access.conf variables below:"
 #~ msgstr "Enter custom access.conf variables below:"
 
diff --git a/applications/luci-app-fwknopd/po/es/fwknopd.po b/applications/luci-app-fwknopd/po/es/fwknopd.po
index 14bd8350b..3a0f6b3e8 100644
--- a/applications/luci-app-fwknopd/po/es/fwknopd.po
+++ b/applications/luci-app-fwknopd/po/es/fwknopd.po
@@ -13,7 +13,7 @@ msgstr ""
 "Plural-Forms: nplurals=2; plural=n != 1;\n"
 "X-Generator: Weblate 4.1-dev\n"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:48
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:599
 msgid ""
 "Allow SPA clients to request access to services through an iptables firewall "
 "instead of just to it."
@@ -21,16 +21,39 @@ msgstr ""
 "Permitir que los clientes del SPA soliciten acceso a los servicios a través "
 "de un firewall de iptables en lugar de hacerlo solo."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:49
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:600
 msgid "Allow SPA clients to request forwarding destination by DNS name."
 msgstr ""
 "Permitir que los clientes SPA soliciten el destino de reenvío por nombre DNS."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:22
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:441
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:458
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:551
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:573
 msgid "Base64 key"
 msgstr "Llave base 64"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:33
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:308
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:319
+msgid "Close"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid "Custom configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:415
+msgid "Custom configuration read from /etc/fwknop/access.conf."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:581
+msgid ""
+"Define a set of ports and protocols (tcp or udp) that are explicitly not "
+"allowed regardless of the validity of the incoming SPA packet. Multiple "
+"entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:576
 msgid ""
 "Define a set of ports and protocols (tcp or udp) that will be opened if a "
 "valid knock sequence is seen. If this entry is not set, fwknopd will attempt "
@@ -44,7 +67,19 @@ msgstr ""
 "entrada de \"RESTRICT_PORTS\"). Las entradas múltiples están separadas por "
 "comas."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:36
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:562
+msgid ""
+"Define the HMAC authentication key (in Base64 encoding) used for verifying "
+"the authenticity of the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:554
+msgid ""
+"Define the HMAC authentication key used for verifying the authenticity of "
+"the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:585
 msgid ""
 "Define the length of time access will be granted by fwknopd through the "
 "firewall after a valid knock sequence from a source IP address. If "
@@ -56,8 +91,13 @@ msgstr ""
 "de origen. Si \"FW_ACCESS_TIMEOUT\" no está configurado, el tiempo de espera "
 "predeterminado de 30 segundos se establecerá automáticamente."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:18
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:20
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:540
+msgid ""
+"Define the symmetric key (in Base64 encoding) used for decrypting an "
+"incoming SPA packet that is encrypted by the fwknop client with Rijndael."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:532
 msgid ""
 "Define the symmetric key used for decrypting an incoming SPA packet that is "
 "encrypted by the fwknop client with Rijndael."
@@ -65,11 +105,11 @@ msgstr ""
 "Defina la clave simétrica utilizada para descifrar un paquete SPA entrante "
 "que está cifrado por el cliente fwknop con Rijndael."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:6
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:480
 msgid "Enable Uci/Luci control"
 msgstr "Activar el control Uci/Luci"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid "Enable config overwrite"
 msgstr "Activar sobrescritura de configuración"
 
@@ -77,11 +117,13 @@ msgstr "Activar sobrescritura de configuración"
 msgid "Firewall Knock Daemon"
 msgstr "Firewall Knock Daemon"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:4
-msgid "Firewall Knock Operator"
-msgstr "Firewall Knock Operator"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:303
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:314
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:478
+msgid "Firewall Knock Operator Daemon"
+msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:39
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:590
 msgid ""
 "Force all SPA packets to contain a real IP address within the encrypted "
 "data. This makes it impossible to use the -s command line argument on the "
@@ -96,11 +138,39 @@ msgstr ""
 "está detrás de un NAT) o el cliente debe conocer la IP externa y "
 "configurarlo a través del argumento -a."
 
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:527
+msgid "Generate Keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid "Generate keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid ""
+"Generates the symmetric key used for decrypting an incoming SPA packet, that "
+"is encrypted by the fwknop client with Rijndael block cipher, and HMAC "
+"authentication key used to verify the authenticity of the incoming SPA "
+"packet before the packet is decrypted."
+msgstr ""
+
 #: applications/luci-app-fwknopd/root/usr/share/rpcd/acl.d/luci-app-fwknopd.json:3
 msgid "Grant UCI access for luci-app-fwknopd"
 msgstr "Conceder acceso UCI para luci-app-fwknopd"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:46
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:571
+msgid "HMAC key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:549
+msgid "Key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:178
+msgid "Loading…"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:597
 msgid ""
 "Maximum age in seconds that an SPA packet will be accepted. Defaults to 120 "
 "seconds."
@@ -108,24 +178,90 @@ msgstr ""
 "Edad máxima en segundos que se aceptará un paquete de SPA. De manera "
 "predeterminada a 120 segundos."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:19
-msgid "Normal Key"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid "Network"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:492
+msgid "Network configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:315
+msgid "No stanza found."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:440
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:457
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:550
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:572
+msgid "Normal key"
 msgstr "Llave normal"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:47
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid ""
+"Parses the /etc/fwknop/access.conf file (and included files/folders/keys) "
+"and generates QR codes for all found stanzas. Handles only files in /etc/"
+"fwknop folder due to access rights restrictions."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:422
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:506
+msgid "QR code"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:489
+msgid "Show access.conf QR codes"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:598
 msgid "Specify the ethernet interface on which fwknopd will sniff packets."
 msgstr ""
 "Especifique la interfaz de Ethernet en la que fwknopd detectará paquetes."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:28
-msgid "The base64 hmac key"
-msgstr "La clave hmac base64"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:447
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:453
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:559
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:568
+msgid "The HMAC authentication key has to be specified."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:517
+msgid ""
+"The destination address for which the SPA packet will be accepted. The "
+"string “ANY” is also accepted if a valid SPA packet should be honored to any "
+"destination IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:17
-msgid "Use ANY for any source IP"
-msgstr "Use CUALQUIERA para cualquier fuente ip"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid ""
+"The network on which the daemon listens. The daemon is automatically started "
+"when the network is up-and-running. This option has precedence over "
+"“PCAP_INTF” option."
+msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:508
+msgid ""
+"The source address from which the SPA packet will be accepted. The string "
+"“ANY” is also accepted if a valid SPA packet should be honored from any "
+"source IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:514
+msgid "The source address has to be specified."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:430
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:436
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:537
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:546
+msgid "The symmetric key has to be specified."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid ""
 "When unchecked, the config files in /etc/fwknopd will be used as is, "
 "ignoring any settings here."
@@ -133,10 +269,20 @@ msgstr ""
 "Cuando no está marcada, los archivos de configuración en /etc/fwknopd se "
 "usarán tal como están, ignorando cualquier configuración aquí."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:10
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:419
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:502
 msgid "access.conf stanzas"
 msgstr "estrofas de access.conf"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:44
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:595
 msgid "fwknopd.conf config options"
 msgstr "opciones de configuración de fwknopd.conf"
+
+#~ msgid "Firewall Knock Operator"
+#~ msgstr "Firewall Knock Operator"
+
+#~ msgid "The Base64 HMAC key"
+#~ msgstr "La clave HMAC base64"
+
+#~ msgid "Use ANY for any source IP"
+#~ msgstr "Use CUALQUIERA para cualquier fuente ip"
diff --git a/applications/luci-app-fwknopd/po/fi/fwknopd.po b/applications/luci-app-fwknopd/po/fi/fwknopd.po
index 6430f4bf9..ae19972d4 100644
--- a/applications/luci-app-fwknopd/po/fi/fwknopd.po
+++ b/applications/luci-app-fwknopd/po/fi/fwknopd.po
@@ -10,21 +10,44 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=n != 1;\n"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:48
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:599
 msgid ""
 "Allow SPA clients to request access to services through an iptables firewall "
 "instead of just to it."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:49
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:600
 msgid "Allow SPA clients to request forwarding destination by DNS name."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:22
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:441
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:458
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:551
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:573
 msgid "Base64 key"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:33
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:308
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:319
+msgid "Close"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid "Custom configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:415
+msgid "Custom configuration read from /etc/fwknop/access.conf."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:581
+msgid ""
+"Define a set of ports and protocols (tcp or udp) that are explicitly not "
+"allowed regardless of the validity of the incoming SPA packet. Multiple "
+"entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:576
 msgid ""
 "Define a set of ports and protocols (tcp or udp) that will be opened if a "
 "valid knock sequence is seen. If this entry is not set, fwknopd will attempt "
@@ -32,7 +55,19 @@ msgid ""
 "matches any “RESTRICT_PORTS” entries). Multiple entries are comma-separated."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:36
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:562
+msgid ""
+"Define the HMAC authentication key (in Base64 encoding) used for verifying "
+"the authenticity of the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:554
+msgid ""
+"Define the HMAC authentication key used for verifying the authenticity of "
+"the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:585
 msgid ""
 "Define the length of time access will be granted by fwknopd through the "
 "firewall after a valid knock sequence from a source IP address. If "
@@ -40,18 +75,23 @@ msgid ""
 "automatically be set."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:18
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:20
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:540
+msgid ""
+"Define the symmetric key (in Base64 encoding) used for decrypting an "
+"incoming SPA packet that is encrypted by the fwknop client with Rijndael."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:532
 msgid ""
 "Define the symmetric key used for decrypting an incoming SPA packet that is "
 "encrypted by the fwknop client with Rijndael."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:6
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:480
 msgid "Enable Uci/Luci control"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid "Enable config overwrite"
 msgstr ""
 
@@ -59,11 +99,13 @@ msgstr ""
 msgid "Firewall Knock Daemon"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:4
-msgid "Firewall Knock Operator"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:303
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:314
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:478
+msgid "Firewall Knock Operator Daemon"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:39
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:590
 msgid ""
 "Force all SPA packets to contain a real IP address within the encrypted "
 "data. This makes it impossible to use the -s command line argument on the "
@@ -72,43 +114,138 @@ msgid ""
 "know the external IP and set it via the -a argument."
 msgstr ""
 
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:527
+msgid "Generate Keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid "Generate keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid ""
+"Generates the symmetric key used for decrypting an incoming SPA packet, that "
+"is encrypted by the fwknop client with Rijndael block cipher, and HMAC "
+"authentication key used to verify the authenticity of the incoming SPA "
+"packet before the packet is decrypted."
+msgstr ""
+
 #: applications/luci-app-fwknopd/root/usr/share/rpcd/acl.d/luci-app-fwknopd.json:3
 msgid "Grant UCI access for luci-app-fwknopd"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:46
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:571
+msgid "HMAC key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:549
+msgid "Key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:178
+msgid "Loading…"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:597
 msgid ""
 "Maximum age in seconds that an SPA packet will be accepted. Defaults to 120 "
 "seconds."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:19
-msgid "Normal Key"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid "Network"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:492
+msgid "Network configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:315
+msgid "No stanza found."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:440
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:457
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:550
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:572
+msgid "Normal key"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid ""
+"Parses the /etc/fwknop/access.conf file (and included files/folders/keys) "
+"and generates QR codes for all found stanzas. Handles only files in /etc/"
+"fwknop folder due to access rights restrictions."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:422
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:506
+msgid "QR code"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:47
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:489
+msgid "Show access.conf QR codes"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:598
 msgid "Specify the ethernet interface on which fwknopd will sniff packets."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:28
-msgid "The base64 hmac key"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:447
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:453
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:559
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:568
+msgid "The HMAC authentication key has to be specified."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:517
+msgid ""
+"The destination address for which the SPA packet will be accepted. The "
+"string “ANY” is also accepted if a valid SPA packet should be honored to any "
+"destination IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid ""
+"The network on which the daemon listens. The daemon is automatically started "
+"when the network is up-and-running. This option has precedence over "
+"“PCAP_INTF” option."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:508
+msgid ""
+"The source address from which the SPA packet will be accepted. The string "
+"“ANY” is also accepted if a valid SPA packet should be honored from any "
+"source IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:514
+msgid "The source address has to be specified."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:17
-msgid "Use ANY for any source IP"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:430
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:436
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:537
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:546
+msgid "The symmetric key has to be specified."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid ""
 "When unchecked, the config files in /etc/fwknopd will be used as is, "
 "ignoring any settings here."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:10
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:419
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:502
 msgid "access.conf stanzas"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:44
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:595
 msgid "fwknopd.conf config options"
 msgstr ""
 
diff --git a/applications/luci-app-fwknopd/po/fr/fwknopd.po b/applications/luci-app-fwknopd/po/fr/fwknopd.po
index c3789025f..3b1ad6c46 100644
--- a/applications/luci-app-fwknopd/po/fr/fwknopd.po
+++ b/applications/luci-app-fwknopd/po/fr/fwknopd.po
@@ -12,21 +12,44 @@ msgstr ""
 "Plural-Forms: nplurals=2; plural=n > 1;\n"
 "X-Generator: Weblate 4.0-dev\n"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:48
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:599
 msgid ""
 "Allow SPA clients to request access to services through an iptables firewall "
 "instead of just to it."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:49
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:600
 msgid "Allow SPA clients to request forwarding destination by DNS name."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:22
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:441
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:458
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:551
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:573
 msgid "Base64 key"
 msgstr "Clé Base64"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:33
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:308
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:319
+msgid "Close"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid "Custom configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:415
+msgid "Custom configuration read from /etc/fwknop/access.conf."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:581
+msgid ""
+"Define a set of ports and protocols (tcp or udp) that are explicitly not "
+"allowed regardless of the validity of the incoming SPA packet. Multiple "
+"entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:576
 msgid ""
 "Define a set of ports and protocols (tcp or udp) that will be opened if a "
 "valid knock sequence is seen. If this entry is not set, fwknopd will attempt "
@@ -34,7 +57,19 @@ msgid ""
 "matches any “RESTRICT_PORTS” entries). Multiple entries are comma-separated."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:36
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:562
+msgid ""
+"Define the HMAC authentication key (in Base64 encoding) used for verifying "
+"the authenticity of the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:554
+msgid ""
+"Define the HMAC authentication key used for verifying the authenticity of "
+"the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:585
 msgid ""
 "Define the length of time access will be granted by fwknopd through the "
 "firewall after a valid knock sequence from a source IP address. If "
@@ -42,18 +77,23 @@ msgid ""
 "automatically be set."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:18
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:20
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:540
+msgid ""
+"Define the symmetric key (in Base64 encoding) used for decrypting an "
+"incoming SPA packet that is encrypted by the fwknop client with Rijndael."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:532
 msgid ""
 "Define the symmetric key used for decrypting an incoming SPA packet that is "
 "encrypted by the fwknop client with Rijndael."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:6
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:480
 msgid "Enable Uci/Luci control"
 msgstr "Activer le contrôle Uci/Luci"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid "Enable config overwrite"
 msgstr "Activer l'écrasement de la configuration"
 
@@ -61,11 +101,13 @@ msgstr "Activer l'écrasement de la configuration"
 msgid "Firewall Knock Daemon"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:4
-msgid "Firewall Knock Operator"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:303
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:314
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:478
+msgid "Firewall Knock Operator Daemon"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:39
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:590
 msgid ""
 "Force all SPA packets to contain a real IP address within the encrypted "
 "data. This makes it impossible to use the -s command line argument on the "
@@ -74,43 +116,138 @@ msgid ""
 "know the external IP and set it via the -a argument."
 msgstr ""
 
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:527
+msgid "Generate Keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid "Generate keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid ""
+"Generates the symmetric key used for decrypting an incoming SPA packet, that "
+"is encrypted by the fwknop client with Rijndael block cipher, and HMAC "
+"authentication key used to verify the authenticity of the incoming SPA "
+"packet before the packet is decrypted."
+msgstr ""
+
 #: applications/luci-app-fwknopd/root/usr/share/rpcd/acl.d/luci-app-fwknopd.json:3
 msgid "Grant UCI access for luci-app-fwknopd"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:46
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:571
+msgid "HMAC key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:549
+msgid "Key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:178
+msgid "Loading…"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:597
 msgid ""
 "Maximum age in seconds that an SPA packet will be accepted. Defaults to 120 "
 "seconds."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:19
-msgid "Normal Key"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid "Network"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:492
+msgid "Network configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:315
+msgid "No stanza found."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:440
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:457
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:550
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:572
+msgid "Normal key"
 msgstr "Clé normale"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:47
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid ""
+"Parses the /etc/fwknop/access.conf file (and included files/folders/keys) "
+"and generates QR codes for all found stanzas. Handles only files in /etc/"
+"fwknop folder due to access rights restrictions."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:422
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:506
+msgid "QR code"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:489
+msgid "Show access.conf QR codes"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:598
 msgid "Specify the ethernet interface on which fwknopd will sniff packets."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:28
-msgid "The base64 hmac key"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:447
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:453
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:559
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:568
+msgid "The HMAC authentication key has to be specified."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:517
+msgid ""
+"The destination address for which the SPA packet will be accepted. The "
+"string “ANY” is also accepted if a valid SPA packet should be honored to any "
+"destination IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid ""
+"The network on which the daemon listens. The daemon is automatically started "
+"when the network is up-and-running. This option has precedence over "
+"“PCAP_INTF” option."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:508
+msgid ""
+"The source address from which the SPA packet will be accepted. The string "
+"“ANY” is also accepted if a valid SPA packet should be honored from any "
+"source IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:514
+msgid "The source address has to be specified."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:17
-msgid "Use ANY for any source IP"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:430
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:436
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:537
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:546
+msgid "The symmetric key has to be specified."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid ""
 "When unchecked, the config files in /etc/fwknopd will be used as is, "
 "ignoring any settings here."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:10
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:419
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:502
 msgid "access.conf stanzas"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:44
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:595
 msgid "fwknopd.conf config options"
 msgstr ""
 
diff --git a/applications/luci-app-fwknopd/po/he/fwknopd.po b/applications/luci-app-fwknopd/po/he/fwknopd.po
index 4bede277d..f65977e7c 100644
--- a/applications/luci-app-fwknopd/po/he/fwknopd.po
+++ b/applications/luci-app-fwknopd/po/he/fwknopd.po
@@ -11,21 +11,44 @@ msgstr ""
 "Plural-Forms: nplurals=4; plural=(n == 1) ? 0 : ((n == 2) ? 1 : ((n > 10 && "
 "n % 10 == 0) ? 2 : 3));\n"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:48
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:599
 msgid ""
 "Allow SPA clients to request access to services through an iptables firewall "
 "instead of just to it."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:49
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:600
 msgid "Allow SPA clients to request forwarding destination by DNS name."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:22
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:441
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:458
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:551
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:573
 msgid "Base64 key"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:33
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:308
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:319
+msgid "Close"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid "Custom configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:415
+msgid "Custom configuration read from /etc/fwknop/access.conf."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:581
+msgid ""
+"Define a set of ports and protocols (tcp or udp) that are explicitly not "
+"allowed regardless of the validity of the incoming SPA packet. Multiple "
+"entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:576
 msgid ""
 "Define a set of ports and protocols (tcp or udp) that will be opened if a "
 "valid knock sequence is seen. If this entry is not set, fwknopd will attempt "
@@ -33,7 +56,19 @@ msgid ""
 "matches any “RESTRICT_PORTS” entries). Multiple entries are comma-separated."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:36
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:562
+msgid ""
+"Define the HMAC authentication key (in Base64 encoding) used for verifying "
+"the authenticity of the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:554
+msgid ""
+"Define the HMAC authentication key used for verifying the authenticity of "
+"the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:585
 msgid ""
 "Define the length of time access will be granted by fwknopd through the "
 "firewall after a valid knock sequence from a source IP address. If "
@@ -41,18 +76,23 @@ msgid ""
 "automatically be set."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:18
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:20
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:540
+msgid ""
+"Define the symmetric key (in Base64 encoding) used for decrypting an "
+"incoming SPA packet that is encrypted by the fwknop client with Rijndael."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:532
 msgid ""
 "Define the symmetric key used for decrypting an incoming SPA packet that is "
 "encrypted by the fwknop client with Rijndael."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:6
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:480
 msgid "Enable Uci/Luci control"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid "Enable config overwrite"
 msgstr ""
 
@@ -60,11 +100,13 @@ msgstr ""
 msgid "Firewall Knock Daemon"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:4
-msgid "Firewall Knock Operator"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:303
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:314
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:478
+msgid "Firewall Knock Operator Daemon"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:39
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:590
 msgid ""
 "Force all SPA packets to contain a real IP address within the encrypted "
 "data. This makes it impossible to use the -s command line argument on the "
@@ -73,43 +115,138 @@ msgid ""
 "know the external IP and set it via the -a argument."
 msgstr ""
 
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:527
+msgid "Generate Keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid "Generate keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid ""
+"Generates the symmetric key used for decrypting an incoming SPA packet, that "
+"is encrypted by the fwknop client with Rijndael block cipher, and HMAC "
+"authentication key used to verify the authenticity of the incoming SPA "
+"packet before the packet is decrypted."
+msgstr ""
+
 #: applications/luci-app-fwknopd/root/usr/share/rpcd/acl.d/luci-app-fwknopd.json:3
 msgid "Grant UCI access for luci-app-fwknopd"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:46
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:571
+msgid "HMAC key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:549
+msgid "Key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:178
+msgid "Loading…"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:597
 msgid ""
 "Maximum age in seconds that an SPA packet will be accepted. Defaults to 120 "
 "seconds."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:19
-msgid "Normal Key"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid "Network"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:492
+msgid "Network configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:315
+msgid "No stanza found."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:440
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:457
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:550
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:572
+msgid "Normal key"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid ""
+"Parses the /etc/fwknop/access.conf file (and included files/folders/keys) "
+"and generates QR codes for all found stanzas. Handles only files in /etc/"
+"fwknop folder due to access rights restrictions."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:422
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:506
+msgid "QR code"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:47
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:489
+msgid "Show access.conf QR codes"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:598
 msgid "Specify the ethernet interface on which fwknopd will sniff packets."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:28
-msgid "The base64 hmac key"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:447
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:453
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:559
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:568
+msgid "The HMAC authentication key has to be specified."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:517
+msgid ""
+"The destination address for which the SPA packet will be accepted. The "
+"string “ANY” is also accepted if a valid SPA packet should be honored to any "
+"destination IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid ""
+"The network on which the daemon listens. The daemon is automatically started "
+"when the network is up-and-running. This option has precedence over "
+"“PCAP_INTF” option."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:508
+msgid ""
+"The source address from which the SPA packet will be accepted. The string "
+"“ANY” is also accepted if a valid SPA packet should be honored from any "
+"source IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:514
+msgid "The source address has to be specified."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:17
-msgid "Use ANY for any source IP"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:430
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:436
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:537
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:546
+msgid "The symmetric key has to be specified."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid ""
 "When unchecked, the config files in /etc/fwknopd will be used as is, "
 "ignoring any settings here."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:10
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:419
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:502
 msgid "access.conf stanzas"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:44
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:595
 msgid "fwknopd.conf config options"
 msgstr ""
 
diff --git a/applications/luci-app-fwknopd/po/hi/fwknopd.po b/applications/luci-app-fwknopd/po/hi/fwknopd.po
index 0c8ddb1cc..28e71d835 100644
--- a/applications/luci-app-fwknopd/po/hi/fwknopd.po
+++ b/applications/luci-app-fwknopd/po/hi/fwknopd.po
@@ -10,21 +10,44 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=n > 1;\n"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:48
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:599
 msgid ""
 "Allow SPA clients to request access to services through an iptables firewall "
 "instead of just to it."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:49
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:600
 msgid "Allow SPA clients to request forwarding destination by DNS name."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:22
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:441
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:458
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:551
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:573
 msgid "Base64 key"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:33
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:308
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:319
+msgid "Close"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid "Custom configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:415
+msgid "Custom configuration read from /etc/fwknop/access.conf."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:581
+msgid ""
+"Define a set of ports and protocols (tcp or udp) that are explicitly not "
+"allowed regardless of the validity of the incoming SPA packet. Multiple "
+"entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:576
 msgid ""
 "Define a set of ports and protocols (tcp or udp) that will be opened if a "
 "valid knock sequence is seen. If this entry is not set, fwknopd will attempt "
@@ -32,7 +55,19 @@ msgid ""
 "matches any “RESTRICT_PORTS” entries). Multiple entries are comma-separated."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:36
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:562
+msgid ""
+"Define the HMAC authentication key (in Base64 encoding) used for verifying "
+"the authenticity of the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:554
+msgid ""
+"Define the HMAC authentication key used for verifying the authenticity of "
+"the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:585
 msgid ""
 "Define the length of time access will be granted by fwknopd through the "
 "firewall after a valid knock sequence from a source IP address. If "
@@ -40,18 +75,23 @@ msgid ""
 "automatically be set."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:18
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:20
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:540
+msgid ""
+"Define the symmetric key (in Base64 encoding) used for decrypting an "
+"incoming SPA packet that is encrypted by the fwknop client with Rijndael."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:532
 msgid ""
 "Define the symmetric key used for decrypting an incoming SPA packet that is "
 "encrypted by the fwknop client with Rijndael."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:6
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:480
 msgid "Enable Uci/Luci control"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid "Enable config overwrite"
 msgstr ""
 
@@ -59,11 +99,13 @@ msgstr ""
 msgid "Firewall Knock Daemon"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:4
-msgid "Firewall Knock Operator"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:303
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:314
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:478
+msgid "Firewall Knock Operator Daemon"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:39
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:590
 msgid ""
 "Force all SPA packets to contain a real IP address within the encrypted "
 "data. This makes it impossible to use the -s command line argument on the "
@@ -72,43 +114,138 @@ msgid ""
 "know the external IP and set it via the -a argument."
 msgstr ""
 
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:527
+msgid "Generate Keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid "Generate keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid ""
+"Generates the symmetric key used for decrypting an incoming SPA packet, that "
+"is encrypted by the fwknop client with Rijndael block cipher, and HMAC "
+"authentication key used to verify the authenticity of the incoming SPA "
+"packet before the packet is decrypted."
+msgstr ""
+
 #: applications/luci-app-fwknopd/root/usr/share/rpcd/acl.d/luci-app-fwknopd.json:3
 msgid "Grant UCI access for luci-app-fwknopd"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:46
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:571
+msgid "HMAC key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:549
+msgid "Key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:178
+msgid "Loading…"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:597
 msgid ""
 "Maximum age in seconds that an SPA packet will be accepted. Defaults to 120 "
 "seconds."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:19
-msgid "Normal Key"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid "Network"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:492
+msgid "Network configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:315
+msgid "No stanza found."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:440
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:457
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:550
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:572
+msgid "Normal key"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid ""
+"Parses the /etc/fwknop/access.conf file (and included files/folders/keys) "
+"and generates QR codes for all found stanzas. Handles only files in /etc/"
+"fwknop folder due to access rights restrictions."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:422
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:506
+msgid "QR code"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:47
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:489
+msgid "Show access.conf QR codes"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:598
 msgid "Specify the ethernet interface on which fwknopd will sniff packets."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:28
-msgid "The base64 hmac key"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:447
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:453
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:559
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:568
+msgid "The HMAC authentication key has to be specified."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:517
+msgid ""
+"The destination address for which the SPA packet will be accepted. The "
+"string “ANY” is also accepted if a valid SPA packet should be honored to any "
+"destination IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid ""
+"The network on which the daemon listens. The daemon is automatically started "
+"when the network is up-and-running. This option has precedence over "
+"“PCAP_INTF” option."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:508
+msgid ""
+"The source address from which the SPA packet will be accepted. The string "
+"“ANY” is also accepted if a valid SPA packet should be honored from any "
+"source IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:514
+msgid "The source address has to be specified."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:17
-msgid "Use ANY for any source IP"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:430
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:436
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:537
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:546
+msgid "The symmetric key has to be specified."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid ""
 "When unchecked, the config files in /etc/fwknopd will be used as is, "
 "ignoring any settings here."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:10
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:419
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:502
 msgid "access.conf stanzas"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:44
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:595
 msgid "fwknopd.conf config options"
 msgstr ""
 
diff --git a/applications/luci-app-fwknopd/po/hu/fwknopd.po b/applications/luci-app-fwknopd/po/hu/fwknopd.po
index a9e7b9b71..f7d37a971 100644
--- a/applications/luci-app-fwknopd/po/hu/fwknopd.po
+++ b/applications/luci-app-fwknopd/po/hu/fwknopd.po
@@ -12,7 +12,7 @@ msgstr ""
 "Plural-Forms: nplurals=2; plural=n != 1;\n"
 "X-Generator: Weblate 3.10\n"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:48
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:599
 msgid ""
 "Allow SPA clients to request access to services through an iptables firewall "
 "instead of just to it."
@@ -20,17 +20,40 @@ msgstr ""
 "Annak lehetővé tétele az SPA ügyfeleknek, hogy hozzáférést kérjenek a "
 "szolgáltatásokhoz egy iptables tűzfalon keresztül, ahelyett hogy csak ahhoz."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:49
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:600
 msgid "Allow SPA clients to request forwarding destination by DNS name."
 msgstr ""
 "Annak lehetővé tétele az SPA ügyfeleknek, hogy továbbítási célt kérjenek DNS-"
 "név alapján."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:22
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:441
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:458
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:551
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:573
 msgid "Base64 key"
 msgstr "Base64 kulcs"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:33
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:308
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:319
+msgid "Close"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid "Custom configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:415
+msgid "Custom configuration read from /etc/fwknop/access.conf."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:581
+msgid ""
+"Define a set of ports and protocols (tcp or udp) that are explicitly not "
+"allowed regardless of the validity of the incoming SPA packet. Multiple "
+"entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:576
 msgid ""
 "Define a set of ports and protocols (tcp or udp) that will be opened if a "
 "valid knock sequence is seen. If this entry is not set, fwknopd will attempt "
@@ -44,7 +67,19 @@ msgstr ""
 "bármely „RESTRICT_PORTS” bejegyzésre). Több bejegyzést vesszővel elválasztva "
 "kell megadni."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:36
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:562
+msgid ""
+"Define the HMAC authentication key (in Base64 encoding) used for verifying "
+"the authenticity of the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:554
+msgid ""
+"Define the HMAC authentication key used for verifying the authenticity of "
+"the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:585
 msgid ""
 "Define the length of time access will be granted by fwknopd through the "
 "firewall after a valid knock sequence from a source IP address. If "
@@ -56,8 +91,13 @@ msgstr ""
 "után. Ha az „FW_ACCESS_TIMEOUT” nincs beállítva, akkor az alapértelmezett 30 "
 "másodperces időkorlát lesz automatikusan beállítva."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:18
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:20
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:540
+msgid ""
+"Define the symmetric key (in Base64 encoding) used for decrypting an "
+"incoming SPA packet that is encrypted by the fwknop client with Rijndael."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:532
 msgid ""
 "Define the symmetric key used for decrypting an incoming SPA packet that is "
 "encrypted by the fwknop client with Rijndael."
@@ -66,11 +106,11 @@ msgstr ""
 "meghatározása, amely csomagot az fwknop ügyfél a Rijndael használatával "
 "titkosított."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:6
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:480
 msgid "Enable Uci/Luci control"
 msgstr "Uci/Luci vezérlés engedélyezése"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid "Enable config overwrite"
 msgstr "Beállítás felülírásának engedélyezése"
 
@@ -78,11 +118,13 @@ msgstr "Beállítás felülírásának engedélyezése"
 msgid "Firewall Knock Daemon"
 msgstr "Tűzfalkopogó démon"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:4
-msgid "Firewall Knock Operator"
-msgstr "Tűzfalkopogó operátor"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:303
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:314
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:478
+msgid "Firewall Knock Operator Daemon"
+msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:39
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:590
 msgid ""
 "Force all SPA packets to contain a real IP address within the encrypted "
 "data. This makes it impossible to use the -s command line argument on the "
@@ -97,11 +139,39 @@ msgstr ""
 "van), vagy az ügyfélnek tudnia kell a külső IP-t, és be kell állítania a -a "
 "argumentumon keresztül."
 
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:527
+msgid "Generate Keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid "Generate keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid ""
+"Generates the symmetric key used for decrypting an incoming SPA packet, that "
+"is encrypted by the fwknop client with Rijndael block cipher, and HMAC "
+"authentication key used to verify the authenticity of the incoming SPA "
+"packet before the packet is decrypted."
+msgstr ""
+
 #: applications/luci-app-fwknopd/root/usr/share/rpcd/acl.d/luci-app-fwknopd.json:3
 msgid "Grant UCI access for luci-app-fwknopd"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:46
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:571
+msgid "HMAC key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:549
+msgid "Key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:178
+msgid "Loading…"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:597
 msgid ""
 "Maximum age in seconds that an SPA packet will be accepted. Defaults to 120 "
 "seconds."
@@ -109,25 +179,91 @@ msgstr ""
 "Legnagyobb életkor másodpercben, amíg egy SPA csomag elfogadásra kerül. "
 "Alapértelmezetten 120 másodperc."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:19
-msgid "Normal Key"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid "Network"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:492
+msgid "Network configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:315
+msgid "No stanza found."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:440
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:457
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:550
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:572
+msgid "Normal key"
 msgstr "Normál kulcs"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:47
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid ""
+"Parses the /etc/fwknop/access.conf file (and included files/folders/keys) "
+"and generates QR codes for all found stanzas. Handles only files in /etc/"
+"fwknop folder due to access rights restrictions."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:422
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:506
+msgid "QR code"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:489
+msgid "Show access.conf QR codes"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:598
 msgid "Specify the ethernet interface on which fwknopd will sniff packets."
 msgstr ""
 "Az ethernet csatoló megadása, amelyen az fwknopd szimatolni fogja a "
 "csomagokat."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:28
-msgid "The base64 hmac key"
-msgstr "A Base64 hmac kulcs"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:447
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:453
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:559
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:568
+msgid "The HMAC authentication key has to be specified."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:517
+msgid ""
+"The destination address for which the SPA packet will be accepted. The "
+"string “ANY” is also accepted if a valid SPA packet should be honored to any "
+"destination IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:17
-msgid "Use ANY for any source IP"
-msgstr "BÁRMELY használata bármely forrás IP-nél"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid ""
+"The network on which the daemon listens. The daemon is automatically started "
+"when the network is up-and-running. This option has precedence over "
+"“PCAP_INTF” option."
+msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:508
+msgid ""
+"The source address from which the SPA packet will be accepted. The string "
+"“ANY” is also accepted if a valid SPA packet should be honored from any "
+"source IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:514
+msgid "The source address has to be specified."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:430
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:436
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:537
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:546
+msgid "The symmetric key has to be specified."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid ""
 "When unchecked, the config files in /etc/fwknopd will be used as is, "
 "ignoring any settings here."
@@ -136,14 +272,24 @@ msgstr ""
 "úgy lesznek használva, ahogy vannak, minden beállítást figyelmen kívül "
 "hagyva itt."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:10
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:419
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:502
 msgid "access.conf stanzas"
 msgstr "access.conf stanzák"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:44
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:595
 msgid "fwknopd.conf config options"
 msgstr "fwknopd.conf beállítás kapcsolói"
 
+#~ msgid "Firewall Knock Operator"
+#~ msgstr "Tűzfalkopogó operátor"
+
+#~ msgid "The Base64 HMAC key"
+#~ msgstr "A Base64 HMAC kulcs"
+
+#~ msgid "Use ANY for any source IP"
+#~ msgstr "BÁRMELY használata bármely forrás IP-nél"
+
 #~ msgid "Enter custom access.conf variables below:"
 #~ msgstr "Enter custom access.conf variables below:"
 
diff --git a/applications/luci-app-fwknopd/po/it/fwknopd.po b/applications/luci-app-fwknopd/po/it/fwknopd.po
index 00e3f7526..a41ede9ef 100644
--- a/applications/luci-app-fwknopd/po/it/fwknopd.po
+++ b/applications/luci-app-fwknopd/po/it/fwknopd.po
@@ -10,21 +10,44 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=n != 1;\n"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:48
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:599
 msgid ""
 "Allow SPA clients to request access to services through an iptables firewall "
 "instead of just to it."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:49
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:600
 msgid "Allow SPA clients to request forwarding destination by DNS name."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:22
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:441
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:458
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:551
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:573
 msgid "Base64 key"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:33
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:308
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:319
+msgid "Close"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid "Custom configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:415
+msgid "Custom configuration read from /etc/fwknop/access.conf."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:581
+msgid ""
+"Define a set of ports and protocols (tcp or udp) that are explicitly not "
+"allowed regardless of the validity of the incoming SPA packet. Multiple "
+"entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:576
 msgid ""
 "Define a set of ports and protocols (tcp or udp) that will be opened if a "
 "valid knock sequence is seen. If this entry is not set, fwknopd will attempt "
@@ -32,7 +55,19 @@ msgid ""
 "matches any “RESTRICT_PORTS” entries). Multiple entries are comma-separated."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:36
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:562
+msgid ""
+"Define the HMAC authentication key (in Base64 encoding) used for verifying "
+"the authenticity of the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:554
+msgid ""
+"Define the HMAC authentication key used for verifying the authenticity of "
+"the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:585
 msgid ""
 "Define the length of time access will be granted by fwknopd through the "
 "firewall after a valid knock sequence from a source IP address. If "
@@ -40,18 +75,23 @@ msgid ""
 "automatically be set."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:18
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:20
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:540
+msgid ""
+"Define the symmetric key (in Base64 encoding) used for decrypting an "
+"incoming SPA packet that is encrypted by the fwknop client with Rijndael."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:532
 msgid ""
 "Define the symmetric key used for decrypting an incoming SPA packet that is "
 "encrypted by the fwknop client with Rijndael."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:6
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:480
 msgid "Enable Uci/Luci control"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid "Enable config overwrite"
 msgstr ""
 
@@ -59,11 +99,13 @@ msgstr ""
 msgid "Firewall Knock Daemon"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:4
-msgid "Firewall Knock Operator"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:303
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:314
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:478
+msgid "Firewall Knock Operator Daemon"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:39
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:590
 msgid ""
 "Force all SPA packets to contain a real IP address within the encrypted "
 "data. This makes it impossible to use the -s command line argument on the "
@@ -72,43 +114,138 @@ msgid ""
 "know the external IP and set it via the -a argument."
 msgstr ""
 
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:527
+msgid "Generate Keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid "Generate keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid ""
+"Generates the symmetric key used for decrypting an incoming SPA packet, that "
+"is encrypted by the fwknop client with Rijndael block cipher, and HMAC "
+"authentication key used to verify the authenticity of the incoming SPA "
+"packet before the packet is decrypted."
+msgstr ""
+
 #: applications/luci-app-fwknopd/root/usr/share/rpcd/acl.d/luci-app-fwknopd.json:3
 msgid "Grant UCI access for luci-app-fwknopd"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:46
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:571
+msgid "HMAC key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:549
+msgid "Key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:178
+msgid "Loading…"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:597
 msgid ""
 "Maximum age in seconds that an SPA packet will be accepted. Defaults to 120 "
 "seconds."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:19
-msgid "Normal Key"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid "Network"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:492
+msgid "Network configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:315
+msgid "No stanza found."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:440
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:457
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:550
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:572
+msgid "Normal key"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid ""
+"Parses the /etc/fwknop/access.conf file (and included files/folders/keys) "
+"and generates QR codes for all found stanzas. Handles only files in /etc/"
+"fwknop folder due to access rights restrictions."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:422
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:506
+msgid "QR code"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:47
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:489
+msgid "Show access.conf QR codes"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:598
 msgid "Specify the ethernet interface on which fwknopd will sniff packets."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:28
-msgid "The base64 hmac key"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:447
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:453
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:559
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:568
+msgid "The HMAC authentication key has to be specified."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:517
+msgid ""
+"The destination address for which the SPA packet will be accepted. The "
+"string “ANY” is also accepted if a valid SPA packet should be honored to any "
+"destination IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid ""
+"The network on which the daemon listens. The daemon is automatically started "
+"when the network is up-and-running. This option has precedence over "
+"“PCAP_INTF” option."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:508
+msgid ""
+"The source address from which the SPA packet will be accepted. The string "
+"“ANY” is also accepted if a valid SPA packet should be honored from any "
+"source IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:514
+msgid "The source address has to be specified."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:17
-msgid "Use ANY for any source IP"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:430
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:436
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:537
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:546
+msgid "The symmetric key has to be specified."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid ""
 "When unchecked, the config files in /etc/fwknopd will be used as is, "
 "ignoring any settings here."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:10
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:419
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:502
 msgid "access.conf stanzas"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:44
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:595
 msgid "fwknopd.conf config options"
 msgstr ""
 
diff --git a/applications/luci-app-fwknopd/po/ja/fwknopd.po b/applications/luci-app-fwknopd/po/ja/fwknopd.po
index 0381c040b..626bf7cd7 100644
--- a/applications/luci-app-fwknopd/po/ja/fwknopd.po
+++ b/applications/luci-app-fwknopd/po/ja/fwknopd.po
@@ -12,21 +12,44 @@ msgstr ""
 "Plural-Forms: nplurals=1; plural=0;\n"
 "X-Generator: Weblate 4.2-dev\n"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:48
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:599
 msgid ""
 "Allow SPA clients to request access to services through an iptables firewall "
 "instead of just to it."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:49
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:600
 msgid "Allow SPA clients to request forwarding destination by DNS name."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:22
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:441
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:458
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:551
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:573
 msgid "Base64 key"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:33
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:308
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:319
+msgid "Close"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid "Custom configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:415
+msgid "Custom configuration read from /etc/fwknop/access.conf."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:581
+msgid ""
+"Define a set of ports and protocols (tcp or udp) that are explicitly not "
+"allowed regardless of the validity of the incoming SPA packet. Multiple "
+"entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:576
 msgid ""
 "Define a set of ports and protocols (tcp or udp) that will be opened if a "
 "valid knock sequence is seen. If this entry is not set, fwknopd will attempt "
@@ -34,7 +57,19 @@ msgid ""
 "matches any “RESTRICT_PORTS” entries). Multiple entries are comma-separated."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:36
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:562
+msgid ""
+"Define the HMAC authentication key (in Base64 encoding) used for verifying "
+"the authenticity of the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:554
+msgid ""
+"Define the HMAC authentication key used for verifying the authenticity of "
+"the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:585
 msgid ""
 "Define the length of time access will be granted by fwknopd through the "
 "firewall after a valid knock sequence from a source IP address. If "
@@ -42,18 +77,23 @@ msgid ""
 "automatically be set."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:18
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:20
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:540
+msgid ""
+"Define the symmetric key (in Base64 encoding) used for decrypting an "
+"incoming SPA packet that is encrypted by the fwknop client with Rijndael."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:532
 msgid ""
 "Define the symmetric key used for decrypting an incoming SPA packet that is "
 "encrypted by the fwknop client with Rijndael."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:6
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:480
 msgid "Enable Uci/Luci control"
 msgstr "Uci/Luci コントロールを有効にする"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid "Enable config overwrite"
 msgstr "構成の上書きを有効にする"
 
@@ -61,11 +101,13 @@ msgstr "構成の上書きを有効にする"
 msgid "Firewall Knock Daemon"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:4
-msgid "Firewall Knock Operator"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:303
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:314
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:478
+msgid "Firewall Knock Operator Daemon"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:39
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:590
 msgid ""
 "Force all SPA packets to contain a real IP address within the encrypted "
 "data. This makes it impossible to use the -s command line argument on the "
@@ -74,43 +116,138 @@ msgid ""
 "know the external IP and set it via the -a argument."
 msgstr ""
 
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:527
+msgid "Generate Keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid "Generate keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid ""
+"Generates the symmetric key used for decrypting an incoming SPA packet, that "
+"is encrypted by the fwknop client with Rijndael block cipher, and HMAC "
+"authentication key used to verify the authenticity of the incoming SPA "
+"packet before the packet is decrypted."
+msgstr ""
+
 #: applications/luci-app-fwknopd/root/usr/share/rpcd/acl.d/luci-app-fwknopd.json:3
 msgid "Grant UCI access for luci-app-fwknopd"
 msgstr "luci-app-fwknopd に UCI アクセスを許可"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:46
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:571
+msgid "HMAC key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:549
+msgid "Key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:178
+msgid "Loading…"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:597
 msgid ""
 "Maximum age in seconds that an SPA packet will be accepted. Defaults to 120 "
 "seconds."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:19
-msgid "Normal Key"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid "Network"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:492
+msgid "Network configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:315
+msgid "No stanza found."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:440
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:457
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:550
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:572
+msgid "Normal key"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid ""
+"Parses the /etc/fwknop/access.conf file (and included files/folders/keys) "
+"and generates QR codes for all found stanzas. Handles only files in /etc/"
+"fwknop folder due to access rights restrictions."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:422
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:506
+msgid "QR code"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:47
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:489
+msgid "Show access.conf QR codes"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:598
 msgid "Specify the ethernet interface on which fwknopd will sniff packets."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:28
-msgid "The base64 hmac key"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:447
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:453
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:559
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:568
+msgid "The HMAC authentication key has to be specified."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:517
+msgid ""
+"The destination address for which the SPA packet will be accepted. The "
+"string “ANY” is also accepted if a valid SPA packet should be honored to any "
+"destination IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid ""
+"The network on which the daemon listens. The daemon is automatically started "
+"when the network is up-and-running. This option has precedence over "
+"“PCAP_INTF” option."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:508
+msgid ""
+"The source address from which the SPA packet will be accepted. The string "
+"“ANY” is also accepted if a valid SPA packet should be honored from any "
+"source IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:514
+msgid "The source address has to be specified."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:17
-msgid "Use ANY for any source IP"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:430
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:436
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:537
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:546
+msgid "The symmetric key has to be specified."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid ""
 "When unchecked, the config files in /etc/fwknopd will be used as is, "
 "ignoring any settings here."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:10
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:419
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:502
 msgid "access.conf stanzas"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:44
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:595
 msgid "fwknopd.conf config options"
 msgstr "fwknopd.conf 構成オプション"
 
diff --git a/applications/luci-app-fwknopd/po/ko/fwknopd.po b/applications/luci-app-fwknopd/po/ko/fwknopd.po
index 75922e1da..1cb9a6e18 100644
--- a/applications/luci-app-fwknopd/po/ko/fwknopd.po
+++ b/applications/luci-app-fwknopd/po/ko/fwknopd.po
@@ -10,21 +10,44 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=1; plural=0;\n"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:48
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:599
 msgid ""
 "Allow SPA clients to request access to services through an iptables firewall "
 "instead of just to it."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:49
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:600
 msgid "Allow SPA clients to request forwarding destination by DNS name."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:22
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:441
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:458
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:551
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:573
 msgid "Base64 key"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:33
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:308
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:319
+msgid "Close"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid "Custom configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:415
+msgid "Custom configuration read from /etc/fwknop/access.conf."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:581
+msgid ""
+"Define a set of ports and protocols (tcp or udp) that are explicitly not "
+"allowed regardless of the validity of the incoming SPA packet. Multiple "
+"entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:576
 msgid ""
 "Define a set of ports and protocols (tcp or udp) that will be opened if a "
 "valid knock sequence is seen. If this entry is not set, fwknopd will attempt "
@@ -32,7 +55,19 @@ msgid ""
 "matches any “RESTRICT_PORTS” entries). Multiple entries are comma-separated."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:36
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:562
+msgid ""
+"Define the HMAC authentication key (in Base64 encoding) used for verifying "
+"the authenticity of the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:554
+msgid ""
+"Define the HMAC authentication key used for verifying the authenticity of "
+"the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:585
 msgid ""
 "Define the length of time access will be granted by fwknopd through the "
 "firewall after a valid knock sequence from a source IP address. If "
@@ -40,18 +75,23 @@ msgid ""
 "automatically be set."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:18
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:20
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:540
+msgid ""
+"Define the symmetric key (in Base64 encoding) used for decrypting an "
+"incoming SPA packet that is encrypted by the fwknop client with Rijndael."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:532
 msgid ""
 "Define the symmetric key used for decrypting an incoming SPA packet that is "
 "encrypted by the fwknop client with Rijndael."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:6
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:480
 msgid "Enable Uci/Luci control"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid "Enable config overwrite"
 msgstr ""
 
@@ -59,11 +99,13 @@ msgstr ""
 msgid "Firewall Knock Daemon"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:4
-msgid "Firewall Knock Operator"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:303
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:314
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:478
+msgid "Firewall Knock Operator Daemon"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:39
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:590
 msgid ""
 "Force all SPA packets to contain a real IP address within the encrypted "
 "data. This makes it impossible to use the -s command line argument on the "
@@ -72,43 +114,138 @@ msgid ""
 "know the external IP and set it via the -a argument."
 msgstr ""
 
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:527
+msgid "Generate Keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid "Generate keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid ""
+"Generates the symmetric key used for decrypting an incoming SPA packet, that "
+"is encrypted by the fwknop client with Rijndael block cipher, and HMAC "
+"authentication key used to verify the authenticity of the incoming SPA "
+"packet before the packet is decrypted."
+msgstr ""
+
 #: applications/luci-app-fwknopd/root/usr/share/rpcd/acl.d/luci-app-fwknopd.json:3
 msgid "Grant UCI access for luci-app-fwknopd"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:46
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:571
+msgid "HMAC key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:549
+msgid "Key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:178
+msgid "Loading…"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:597
 msgid ""
 "Maximum age in seconds that an SPA packet will be accepted. Defaults to 120 "
 "seconds."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:19
-msgid "Normal Key"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid "Network"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:492
+msgid "Network configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:315
+msgid "No stanza found."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:440
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:457
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:550
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:572
+msgid "Normal key"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid ""
+"Parses the /etc/fwknop/access.conf file (and included files/folders/keys) "
+"and generates QR codes for all found stanzas. Handles only files in /etc/"
+"fwknop folder due to access rights restrictions."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:422
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:506
+msgid "QR code"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:47
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:489
+msgid "Show access.conf QR codes"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:598
 msgid "Specify the ethernet interface on which fwknopd will sniff packets."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:28
-msgid "The base64 hmac key"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:447
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:453
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:559
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:568
+msgid "The HMAC authentication key has to be specified."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:517
+msgid ""
+"The destination address for which the SPA packet will be accepted. The "
+"string “ANY” is also accepted if a valid SPA packet should be honored to any "
+"destination IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid ""
+"The network on which the daemon listens. The daemon is automatically started "
+"when the network is up-and-running. This option has precedence over "
+"“PCAP_INTF” option."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:508
+msgid ""
+"The source address from which the SPA packet will be accepted. The string "
+"“ANY” is also accepted if a valid SPA packet should be honored from any "
+"source IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:514
+msgid "The source address has to be specified."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:17
-msgid "Use ANY for any source IP"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:430
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:436
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:537
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:546
+msgid "The symmetric key has to be specified."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid ""
 "When unchecked, the config files in /etc/fwknopd will be used as is, "
 "ignoring any settings here."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:10
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:419
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:502
 msgid "access.conf stanzas"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:44
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:595
 msgid "fwknopd.conf config options"
 msgstr ""
 
diff --git a/applications/luci-app-fwknopd/po/mr/fwknopd.po b/applications/luci-app-fwknopd/po/mr/fwknopd.po
index 6408f0b46..f42f36ed2 100644
--- a/applications/luci-app-fwknopd/po/mr/fwknopd.po
+++ b/applications/luci-app-fwknopd/po/mr/fwknopd.po
@@ -12,21 +12,44 @@ msgstr ""
 "Plural-Forms: nplurals=2; plural=n > 1;\n"
 "X-Generator: Weblate 3.11-dev\n"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:48
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:599
 msgid ""
 "Allow SPA clients to request access to services through an iptables firewall "
 "instead of just to it."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:49
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:600
 msgid "Allow SPA clients to request forwarding destination by DNS name."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:22
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:441
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:458
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:551
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:573
 msgid "Base64 key"
 msgstr "बेस 64 की"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:33
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:308
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:319
+msgid "Close"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid "Custom configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:415
+msgid "Custom configuration read from /etc/fwknop/access.conf."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:581
+msgid ""
+"Define a set of ports and protocols (tcp or udp) that are explicitly not "
+"allowed regardless of the validity of the incoming SPA packet. Multiple "
+"entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:576
 msgid ""
 "Define a set of ports and protocols (tcp or udp) that will be opened if a "
 "valid knock sequence is seen. If this entry is not set, fwknopd will attempt "
@@ -34,7 +57,19 @@ msgid ""
 "matches any “RESTRICT_PORTS” entries). Multiple entries are comma-separated."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:36
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:562
+msgid ""
+"Define the HMAC authentication key (in Base64 encoding) used for verifying "
+"the authenticity of the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:554
+msgid ""
+"Define the HMAC authentication key used for verifying the authenticity of "
+"the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:585
 msgid ""
 "Define the length of time access will be granted by fwknopd through the "
 "firewall after a valid knock sequence from a source IP address. If "
@@ -42,18 +77,23 @@ msgid ""
 "automatically be set."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:18
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:20
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:540
+msgid ""
+"Define the symmetric key (in Base64 encoding) used for decrypting an "
+"incoming SPA packet that is encrypted by the fwknop client with Rijndael."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:532
 msgid ""
 "Define the symmetric key used for decrypting an incoming SPA packet that is "
 "encrypted by the fwknop client with Rijndael."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:6
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:480
 msgid "Enable Uci/Luci control"
 msgstr "Uci / Luci नियंत्रण सक्षम करा"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid "Enable config overwrite"
 msgstr "कॉन्फिगरेशन अधिलेखन सक्षम करा"
 
@@ -61,11 +101,13 @@ msgstr "कॉन्फिगरेशन अधिलेखन सक्षम
 msgid "Firewall Knock Daemon"
 msgstr "फायरवॉल नॉक डेमन"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:4
-msgid "Firewall Knock Operator"
-msgstr "फायरवॉल नॉक ऑपरेटर"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:303
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:314
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:478
+msgid "Firewall Knock Operator Daemon"
+msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:39
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:590
 msgid ""
 "Force all SPA packets to contain a real IP address within the encrypted "
 "data. This makes it impossible to use the -s command line argument on the "
@@ -74,46 +116,147 @@ msgid ""
 "know the external IP and set it via the -a argument."
 msgstr ""
 
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:527
+msgid "Generate Keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid "Generate keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid ""
+"Generates the symmetric key used for decrypting an incoming SPA packet, that "
+"is encrypted by the fwknop client with Rijndael block cipher, and HMAC "
+"authentication key used to verify the authenticity of the incoming SPA "
+"packet before the packet is decrypted."
+msgstr ""
+
 #: applications/luci-app-fwknopd/root/usr/share/rpcd/acl.d/luci-app-fwknopd.json:3
 msgid "Grant UCI access for luci-app-fwknopd"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:46
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:571
+msgid "HMAC key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:549
+msgid "Key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:178
+msgid "Loading…"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:597
 msgid ""
 "Maximum age in seconds that an SPA packet will be accepted. Defaults to 120 "
 "seconds."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:19
-msgid "Normal Key"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid "Network"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:492
+msgid "Network configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:315
+msgid "No stanza found."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:440
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:457
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:550
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:572
+msgid "Normal key"
 msgstr "सामान्य की"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:47
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid ""
+"Parses the /etc/fwknop/access.conf file (and included files/folders/keys) "
+"and generates QR codes for all found stanzas. Handles only files in /etc/"
+"fwknop folder due to access rights restrictions."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:422
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:506
+msgid "QR code"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:489
+msgid "Show access.conf QR codes"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:598
 msgid "Specify the ethernet interface on which fwknopd will sniff packets."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:28
-msgid "The base64 hmac key"
-msgstr "बेस 64 एचएमएसी की"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:447
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:453
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:559
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:568
+msgid "The HMAC authentication key has to be specified."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:517
+msgid ""
+"The destination address for which the SPA packet will be accepted. The "
+"string “ANY” is also accepted if a valid SPA packet should be honored to any "
+"destination IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid ""
+"The network on which the daemon listens. The daemon is automatically started "
+"when the network is up-and-running. This option has precedence over "
+"“PCAP_INTF” option."
+msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:17
-msgid "Use ANY for any source IP"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:508
+msgid ""
+"The source address from which the SPA packet will be accepted. The string "
+"“ANY” is also accepted if a valid SPA packet should be honored from any "
+"source IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:514
+msgid "The source address has to be specified."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:430
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:436
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:537
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:546
+msgid "The symmetric key has to be specified."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid ""
 "When unchecked, the config files in /etc/fwknopd will be used as is, "
 "ignoring any settings here."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:10
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:419
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:502
 msgid "access.conf stanzas"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:44
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:595
 msgid "fwknopd.conf config options"
 msgstr ""
 
+#~ msgid "Firewall Knock Operator"
+#~ msgstr "फायरवॉल नॉक ऑपरेटर"
+
+#~ msgid "The Base64 HMAC key"
+#~ msgstr "बेस 64 एचएमएसी की"
+
 #~ msgid "Enter custom access.conf variables below:"
 #~ msgstr "Enter custom access.conf variables below:"
 
diff --git a/applications/luci-app-fwknopd/po/ms/fwknopd.po b/applications/luci-app-fwknopd/po/ms/fwknopd.po
index 8660876cc..b7f18e41a 100644
--- a/applications/luci-app-fwknopd/po/ms/fwknopd.po
+++ b/applications/luci-app-fwknopd/po/ms/fwknopd.po
@@ -10,21 +10,44 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=1; plural=0;\n"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:48
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:599
 msgid ""
 "Allow SPA clients to request access to services through an iptables firewall "
 "instead of just to it."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:49
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:600
 msgid "Allow SPA clients to request forwarding destination by DNS name."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:22
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:441
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:458
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:551
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:573
 msgid "Base64 key"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:33
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:308
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:319
+msgid "Close"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid "Custom configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:415
+msgid "Custom configuration read from /etc/fwknop/access.conf."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:581
+msgid ""
+"Define a set of ports and protocols (tcp or udp) that are explicitly not "
+"allowed regardless of the validity of the incoming SPA packet. Multiple "
+"entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:576
 msgid ""
 "Define a set of ports and protocols (tcp or udp) that will be opened if a "
 "valid knock sequence is seen. If this entry is not set, fwknopd will attempt "
@@ -32,7 +55,19 @@ msgid ""
 "matches any “RESTRICT_PORTS” entries). Multiple entries are comma-separated."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:36
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:562
+msgid ""
+"Define the HMAC authentication key (in Base64 encoding) used for verifying "
+"the authenticity of the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:554
+msgid ""
+"Define the HMAC authentication key used for verifying the authenticity of "
+"the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:585
 msgid ""
 "Define the length of time access will be granted by fwknopd through the "
 "firewall after a valid knock sequence from a source IP address. If "
@@ -40,18 +75,23 @@ msgid ""
 "automatically be set."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:18
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:20
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:540
+msgid ""
+"Define the symmetric key (in Base64 encoding) used for decrypting an "
+"incoming SPA packet that is encrypted by the fwknop client with Rijndael."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:532
 msgid ""
 "Define the symmetric key used for decrypting an incoming SPA packet that is "
 "encrypted by the fwknop client with Rijndael."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:6
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:480
 msgid "Enable Uci/Luci control"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid "Enable config overwrite"
 msgstr ""
 
@@ -59,11 +99,13 @@ msgstr ""
 msgid "Firewall Knock Daemon"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:4
-msgid "Firewall Knock Operator"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:303
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:314
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:478
+msgid "Firewall Knock Operator Daemon"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:39
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:590
 msgid ""
 "Force all SPA packets to contain a real IP address within the encrypted "
 "data. This makes it impossible to use the -s command line argument on the "
@@ -72,43 +114,138 @@ msgid ""
 "know the external IP and set it via the -a argument."
 msgstr ""
 
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:527
+msgid "Generate Keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid "Generate keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid ""
+"Generates the symmetric key used for decrypting an incoming SPA packet, that "
+"is encrypted by the fwknop client with Rijndael block cipher, and HMAC "
+"authentication key used to verify the authenticity of the incoming SPA "
+"packet before the packet is decrypted."
+msgstr ""
+
 #: applications/luci-app-fwknopd/root/usr/share/rpcd/acl.d/luci-app-fwknopd.json:3
 msgid "Grant UCI access for luci-app-fwknopd"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:46
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:571
+msgid "HMAC key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:549
+msgid "Key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:178
+msgid "Loading…"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:597
 msgid ""
 "Maximum age in seconds that an SPA packet will be accepted. Defaults to 120 "
 "seconds."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:19
-msgid "Normal Key"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid "Network"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:492
+msgid "Network configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:315
+msgid "No stanza found."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:440
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:457
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:550
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:572
+msgid "Normal key"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid ""
+"Parses the /etc/fwknop/access.conf file (and included files/folders/keys) "
+"and generates QR codes for all found stanzas. Handles only files in /etc/"
+"fwknop folder due to access rights restrictions."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:422
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:506
+msgid "QR code"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:47
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:489
+msgid "Show access.conf QR codes"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:598
 msgid "Specify the ethernet interface on which fwknopd will sniff packets."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:28
-msgid "The base64 hmac key"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:447
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:453
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:559
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:568
+msgid "The HMAC authentication key has to be specified."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:517
+msgid ""
+"The destination address for which the SPA packet will be accepted. The "
+"string “ANY” is also accepted if a valid SPA packet should be honored to any "
+"destination IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid ""
+"The network on which the daemon listens. The daemon is automatically started "
+"when the network is up-and-running. This option has precedence over "
+"“PCAP_INTF” option."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:508
+msgid ""
+"The source address from which the SPA packet will be accepted. The string "
+"“ANY” is also accepted if a valid SPA packet should be honored from any "
+"source IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:514
+msgid "The source address has to be specified."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:17
-msgid "Use ANY for any source IP"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:430
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:436
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:537
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:546
+msgid "The symmetric key has to be specified."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid ""
 "When unchecked, the config files in /etc/fwknopd will be used as is, "
 "ignoring any settings here."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:10
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:419
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:502
 msgid "access.conf stanzas"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:44
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:595
 msgid "fwknopd.conf config options"
 msgstr ""
 
diff --git a/applications/luci-app-fwknopd/po/nb_NO/fwknopd.po b/applications/luci-app-fwknopd/po/nb_NO/fwknopd.po
index b5e1c914a..35dbdf500 100644
--- a/applications/luci-app-fwknopd/po/nb_NO/fwknopd.po
+++ b/applications/luci-app-fwknopd/po/nb_NO/fwknopd.po
@@ -10,21 +10,44 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=n != 1;\n"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:48
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:599
 msgid ""
 "Allow SPA clients to request access to services through an iptables firewall "
 "instead of just to it."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:49
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:600
 msgid "Allow SPA clients to request forwarding destination by DNS name."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:22
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:441
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:458
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:551
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:573
 msgid "Base64 key"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:33
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:308
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:319
+msgid "Close"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid "Custom configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:415
+msgid "Custom configuration read from /etc/fwknop/access.conf."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:581
+msgid ""
+"Define a set of ports and protocols (tcp or udp) that are explicitly not "
+"allowed regardless of the validity of the incoming SPA packet. Multiple "
+"entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:576
 msgid ""
 "Define a set of ports and protocols (tcp or udp) that will be opened if a "
 "valid knock sequence is seen. If this entry is not set, fwknopd will attempt "
@@ -32,7 +55,19 @@ msgid ""
 "matches any “RESTRICT_PORTS” entries). Multiple entries are comma-separated."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:36
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:562
+msgid ""
+"Define the HMAC authentication key (in Base64 encoding) used for verifying "
+"the authenticity of the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:554
+msgid ""
+"Define the HMAC authentication key used for verifying the authenticity of "
+"the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:585
 msgid ""
 "Define the length of time access will be granted by fwknopd through the "
 "firewall after a valid knock sequence from a source IP address. If "
@@ -40,18 +75,23 @@ msgid ""
 "automatically be set."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:18
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:20
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:540
+msgid ""
+"Define the symmetric key (in Base64 encoding) used for decrypting an "
+"incoming SPA packet that is encrypted by the fwknop client with Rijndael."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:532
 msgid ""
 "Define the symmetric key used for decrypting an incoming SPA packet that is "
 "encrypted by the fwknop client with Rijndael."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:6
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:480
 msgid "Enable Uci/Luci control"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid "Enable config overwrite"
 msgstr ""
 
@@ -59,11 +99,13 @@ msgstr ""
 msgid "Firewall Knock Daemon"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:4
-msgid "Firewall Knock Operator"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:303
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:314
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:478
+msgid "Firewall Knock Operator Daemon"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:39
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:590
 msgid ""
 "Force all SPA packets to contain a real IP address within the encrypted "
 "data. This makes it impossible to use the -s command line argument on the "
@@ -72,43 +114,138 @@ msgid ""
 "know the external IP and set it via the -a argument."
 msgstr ""
 
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:527
+msgid "Generate Keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid "Generate keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid ""
+"Generates the symmetric key used for decrypting an incoming SPA packet, that "
+"is encrypted by the fwknop client with Rijndael block cipher, and HMAC "
+"authentication key used to verify the authenticity of the incoming SPA "
+"packet before the packet is decrypted."
+msgstr ""
+
 #: applications/luci-app-fwknopd/root/usr/share/rpcd/acl.d/luci-app-fwknopd.json:3
 msgid "Grant UCI access for luci-app-fwknopd"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:46
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:571
+msgid "HMAC key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:549
+msgid "Key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:178
+msgid "Loading…"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:597
 msgid ""
 "Maximum age in seconds that an SPA packet will be accepted. Defaults to 120 "
 "seconds."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:19
-msgid "Normal Key"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid "Network"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:492
+msgid "Network configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:315
+msgid "No stanza found."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:440
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:457
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:550
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:572
+msgid "Normal key"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid ""
+"Parses the /etc/fwknop/access.conf file (and included files/folders/keys) "
+"and generates QR codes for all found stanzas. Handles only files in /etc/"
+"fwknop folder due to access rights restrictions."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:422
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:506
+msgid "QR code"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:47
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:489
+msgid "Show access.conf QR codes"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:598
 msgid "Specify the ethernet interface on which fwknopd will sniff packets."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:28
-msgid "The base64 hmac key"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:447
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:453
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:559
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:568
+msgid "The HMAC authentication key has to be specified."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:517
+msgid ""
+"The destination address for which the SPA packet will be accepted. The "
+"string “ANY” is also accepted if a valid SPA packet should be honored to any "
+"destination IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid ""
+"The network on which the daemon listens. The daemon is automatically started "
+"when the network is up-and-running. This option has precedence over "
+"“PCAP_INTF” option."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:508
+msgid ""
+"The source address from which the SPA packet will be accepted. The string "
+"“ANY” is also accepted if a valid SPA packet should be honored from any "
+"source IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:514
+msgid "The source address has to be specified."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:17
-msgid "Use ANY for any source IP"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:430
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:436
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:537
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:546
+msgid "The symmetric key has to be specified."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid ""
 "When unchecked, the config files in /etc/fwknopd will be used as is, "
 "ignoring any settings here."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:10
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:419
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:502
 msgid "access.conf stanzas"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:44
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:595
 msgid "fwknopd.conf config options"
 msgstr ""
 
diff --git a/applications/luci-app-fwknopd/po/pl/fwknopd.po b/applications/luci-app-fwknopd/po/pl/fwknopd.po
index cfd5c750e..f99924b5d 100644
--- a/applications/luci-app-fwknopd/po/pl/fwknopd.po
+++ b/applications/luci-app-fwknopd/po/pl/fwknopd.po
@@ -13,7 +13,7 @@ msgstr ""
 "|| n%100>=20) ? 1 : 2;\n"
 "X-Generator: Weblate 4.1-dev\n"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:48
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:599
 msgid ""
 "Allow SPA clients to request access to services through an iptables firewall "
 "instead of just to it."
@@ -21,16 +21,39 @@ msgstr ""
 "Zezwól klientom SPA na żądanie dostępu do usług za pośrednictwem zapory "
 "iptables zamiast tylko do niego."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:49
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:600
 msgid "Allow SPA clients to request forwarding destination by DNS name."
 msgstr ""
 "Zezwól klientom SPA na żądanie przekazywania docelowego przez nazwę DNS."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:22
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:441
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:458
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:551
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:573
 msgid "Base64 key"
 msgstr "Klucz Base64"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:33
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:308
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:319
+msgid "Close"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid "Custom configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:415
+msgid "Custom configuration read from /etc/fwknop/access.conf."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:581
+msgid ""
+"Define a set of ports and protocols (tcp or udp) that are explicitly not "
+"allowed regardless of the validity of the incoming SPA packet. Multiple "
+"entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:576
 msgid ""
 "Define a set of ports and protocols (tcp or udp) that will be opened if a "
 "valid knock sequence is seen. If this entry is not set, fwknopd will attempt "
@@ -43,7 +66,19 @@ msgstr ""
 "określone w danych o SPA (chyba, że pasuje ono do któregokolwiek z wpisów "
 "\"RESTRICT_PORTS\"). Wielokrotne wpisy są oddzielone przecinkami."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:36
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:562
+msgid ""
+"Define the HMAC authentication key (in Base64 encoding) used for verifying "
+"the authenticity of the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:554
+msgid ""
+"Define the HMAC authentication key used for verifying the authenticity of "
+"the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:585
 msgid ""
 "Define the length of time access will be granted by fwknopd through the "
 "firewall after a valid knock sequence from a source IP address. If "
@@ -55,8 +90,13 @@ msgstr ""
 "\"FW_ACCESS_TIMEOUT\" nie jest ustawiony, to domyślny czas 30 sekund "
 "zostanie ustawiony automatycznie."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:18
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:20
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:540
+msgid ""
+"Define the symmetric key (in Base64 encoding) used for decrypting an "
+"incoming SPA packet that is encrypted by the fwknop client with Rijndael."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:532
 msgid ""
 "Define the symmetric key used for decrypting an incoming SPA packet that is "
 "encrypted by the fwknop client with Rijndael."
@@ -64,11 +104,11 @@ msgstr ""
 "Zdefiniuj klucz symetryczny używany do odszyfrowywania przychodzącego "
 "pakietu SPA, który jest szyfrowany przez klienta fwknop z Rijndael."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:6
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:480
 msgid "Enable Uci/Luci control"
 msgstr "Włącz sterowanie Uci/LuCI"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid "Enable config overwrite"
 msgstr "Włącz nadpisywanie konfiguracji"
 
@@ -76,11 +116,13 @@ msgstr "Włącz nadpisywanie konfiguracji"
 msgid "Firewall Knock Daemon"
 msgstr "Knock demon zapory sieciowej"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:4
-msgid "Firewall Knock Operator"
-msgstr "Knock Operator zapory sieciowej"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:303
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:314
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:478
+msgid "Firewall Knock Operator Daemon"
+msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:39
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:590
 msgid ""
 "Force all SPA packets to contain a real IP address within the encrypted "
 "data. This makes it impossible to use the -s command line argument on the "
@@ -94,11 +136,39 @@ msgstr ""
 "adresu zewnętrznego (jeśli klient znajduje się za NAT) albo klient musi znać "
 "zewnętrzny IP i ustawić go za pomocą argumentu -a."
 
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:527
+msgid "Generate Keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid "Generate keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid ""
+"Generates the symmetric key used for decrypting an incoming SPA packet, that "
+"is encrypted by the fwknop client with Rijndael block cipher, and HMAC "
+"authentication key used to verify the authenticity of the incoming SPA "
+"packet before the packet is decrypted."
+msgstr ""
+
 #: applications/luci-app-fwknopd/root/usr/share/rpcd/acl.d/luci-app-fwknopd.json:3
 msgid "Grant UCI access for luci-app-fwknopd"
 msgstr "Udziel dostępu UCI do luci-app-fwknopd"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:46
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:571
+msgid "HMAC key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:549
+msgid "Key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:178
+msgid "Loading…"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:597
 msgid ""
 "Maximum age in seconds that an SPA packet will be accepted. Defaults to 120 "
 "seconds."
@@ -106,24 +176,90 @@ msgstr ""
 "Maksymalna wartość w sekundach, w którym pakiet SPA zostanie zaakceptowany. "
 "Wartość domyślna to 120 sekund."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:19
-msgid "Normal Key"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid "Network"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:492
+msgid "Network configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:315
+msgid "No stanza found."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:440
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:457
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:550
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:572
+msgid "Normal key"
 msgstr "Klucz normalny"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:47
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid ""
+"Parses the /etc/fwknop/access.conf file (and included files/folders/keys) "
+"and generates QR codes for all found stanzas. Handles only files in /etc/"
+"fwknop folder due to access rights restrictions."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:422
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:506
+msgid "QR code"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:489
+msgid "Show access.conf QR codes"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:598
 msgid "Specify the ethernet interface on which fwknopd will sniff packets."
 msgstr ""
 "Określ interfejs ethernet, na którym fwknopd będzie podsłuchiwać pakiety."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:28
-msgid "The base64 hmac key"
-msgstr "Klucz HMAC Base64"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:447
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:453
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:559
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:568
+msgid "The HMAC authentication key has to be specified."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:517
+msgid ""
+"The destination address for which the SPA packet will be accepted. The "
+"string “ANY” is also accepted if a valid SPA packet should be honored to any "
+"destination IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:17
-msgid "Use ANY for any source IP"
-msgstr "Użyj ANY dla dowolnego źródła IP"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid ""
+"The network on which the daemon listens. The daemon is automatically started "
+"when the network is up-and-running. This option has precedence over "
+"“PCAP_INTF” option."
+msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:508
+msgid ""
+"The source address from which the SPA packet will be accepted. The string "
+"“ANY” is also accepted if a valid SPA packet should be honored from any "
+"source IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:514
+msgid "The source address has to be specified."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:430
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:436
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:537
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:546
+msgid "The symmetric key has to be specified."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid ""
 "When unchecked, the config files in /etc/fwknopd will be used as is, "
 "ignoring any settings here."
@@ -131,14 +267,24 @@ msgstr ""
 "Jeśli ta opcja nie jest zaznaczona, pliki konfiguracyjne w /etc/fwknopd będą "
 "używane tak jak jest, ignorując wszelkie ustawienia tutaj."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:10
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:419
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:502
 msgid "access.conf stanzas"
 msgstr "sekcje access.conf"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:44
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:595
 msgid "fwknopd.conf config options"
 msgstr "opcje konfiguracji fwknopd.conf"
 
+#~ msgid "Firewall Knock Operator"
+#~ msgstr "Knock Operator zapory sieciowej"
+
+#~ msgid "The Base64 HMAC key"
+#~ msgstr "Klucz HMAC Base64"
+
+#~ msgid "Use ANY for any source IP"
+#~ msgstr "Użyj ANY dla dowolnego źródła IP"
+
 #~ msgid "Enter custom access.conf variables below:"
 #~ msgstr "Enter custom access.conf variables below:"
 
diff --git a/applications/luci-app-fwknopd/po/pt/fwknopd.po b/applications/luci-app-fwknopd/po/pt/fwknopd.po
index 08fb1e31a..9297f336d 100644
--- a/applications/luci-app-fwknopd/po/pt/fwknopd.po
+++ b/applications/luci-app-fwknopd/po/pt/fwknopd.po
@@ -12,7 +12,7 @@ msgstr ""
 "Plural-Forms: nplurals=2; plural=n > 1;\n"
 "X-Generator: Weblate 4.1-dev\n"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:48
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:599
 msgid ""
 "Allow SPA clients to request access to services through an iptables firewall "
 "instead of just to it."
@@ -20,17 +20,40 @@ msgstr ""
 "Permitr que clientes SPA solicitem acesso aos serviços através de um "
 "firewall do iptables ao invés de apenas para ele."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:49
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:600
 msgid "Allow SPA clients to request forwarding destination by DNS name."
 msgstr ""
 "Permitir que os clientes SPA solicitem o reencaminhamento de destino por "
 "nome de DNS."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:22
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:441
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:458
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:551
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:573
 msgid "Base64 key"
 msgstr "Chave da base 64"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:33
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:308
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:319
+msgid "Close"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid "Custom configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:415
+msgid "Custom configuration read from /etc/fwknop/access.conf."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:581
+msgid ""
+"Define a set of ports and protocols (tcp or udp) that are explicitly not "
+"allowed regardless of the validity of the incoming SPA packet. Multiple "
+"entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:576
 msgid ""
 "Define a set of ports and protocols (tcp or udp) that will be opened if a "
 "valid knock sequence is seen. If this entry is not set, fwknopd will attempt "
@@ -44,7 +67,19 @@ msgstr ""
 "entrada \"RESTRICT_PORTS\"). As entradas múltiplas são separadas por "
 "vírgulas."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:36
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:562
+msgid ""
+"Define the HMAC authentication key (in Base64 encoding) used for verifying "
+"the authenticity of the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:554
+msgid ""
+"Define the HMAC authentication key used for verifying the authenticity of "
+"the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:585
 msgid ""
 "Define the length of time access will be granted by fwknopd through the "
 "firewall after a valid knock sequence from a source IP address. If "
@@ -56,8 +91,13 @@ msgstr ""
 "\"FW_ACCESS_TIMEOUT\" não estiver definido, o tempo limite predefinido de 30 "
 "segundos será automaticamente definido."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:18
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:20
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:540
+msgid ""
+"Define the symmetric key (in Base64 encoding) used for decrypting an "
+"incoming SPA packet that is encrypted by the fwknop client with Rijndael."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:532
 msgid ""
 "Define the symmetric key used for decrypting an incoming SPA packet that is "
 "encrypted by the fwknop client with Rijndael."
@@ -65,11 +105,11 @@ msgstr ""
 "Definir a chave simétrica usada para descriptografar um pacote SPA de "
 "entrada que é criptografado pelo cliente fwknop com Rijndael."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:6
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:480
 msgid "Enable Uci/Luci control"
 msgstr "Ativar o controle Uci/Luci"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid "Enable config overwrite"
 msgstr "Ativar a substituição da configuração"
 
@@ -77,11 +117,13 @@ msgstr "Ativar a substituição da configuração"
 msgid "Firewall Knock Daemon"
 msgstr "Daemon de Knock Firewall"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:4
-msgid "Firewall Knock Operator"
-msgstr "Operador de Firewall Knock"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:303
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:314
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:478
+msgid "Firewall Knock Operator Daemon"
+msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:39
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:590
 msgid ""
 "Force all SPA packets to contain a real IP address within the encrypted "
 "data. This makes it impossible to use the -s command line argument on the "
@@ -95,11 +137,39 @@ msgstr ""
 "automaticamente o endereço externo (se o cliente está por trás de um NAT) ou "
 "o cliente tem que saber o IP externo e configurá-lo através do argumento -a."
 
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:527
+msgid "Generate Keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid "Generate keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid ""
+"Generates the symmetric key used for decrypting an incoming SPA packet, that "
+"is encrypted by the fwknop client with Rijndael block cipher, and HMAC "
+"authentication key used to verify the authenticity of the incoming SPA "
+"packet before the packet is decrypted."
+msgstr ""
+
 #: applications/luci-app-fwknopd/root/usr/share/rpcd/acl.d/luci-app-fwknopd.json:3
 msgid "Grant UCI access for luci-app-fwknopd"
 msgstr "Conceder acesso UCI ao luci-app-fwknopd"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:46
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:571
+msgid "HMAC key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:549
+msgid "Key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:178
+msgid "Loading…"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:597
 msgid ""
 "Maximum age in seconds that an SPA packet will be accepted. Defaults to 120 "
 "seconds."
@@ -107,23 +177,89 @@ msgstr ""
 "Idade máxima em segundos que um pacote SPA será aceite. Predefinido a 120 "
 "segundos."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:19
-msgid "Normal Key"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid "Network"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:492
+msgid "Network configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:315
+msgid "No stanza found."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:440
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:457
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:550
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:572
+msgid "Normal key"
 msgstr "Chave Normal"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:47
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid ""
+"Parses the /etc/fwknop/access.conf file (and included files/folders/keys) "
+"and generates QR codes for all found stanzas. Handles only files in /etc/"
+"fwknop folder due to access rights restrictions."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:422
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:506
+msgid "QR code"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:489
+msgid "Show access.conf QR codes"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:598
 msgid "Specify the ethernet interface on which fwknopd will sniff packets."
 msgstr "Especificar a interface Ethernet na qual o fwknopd farejará pacotes."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:28
-msgid "The base64 hmac key"
-msgstr "A chave hmac base64"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:447
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:453
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:559
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:568
+msgid "The HMAC authentication key has to be specified."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:517
+msgid ""
+"The destination address for which the SPA packet will be accepted. The "
+"string “ANY” is also accepted if a valid SPA packet should be honored to any "
+"destination IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:17
-msgid "Use ANY for any source IP"
-msgstr "Use qualquer um (ANY) para qualquer fonte ip"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid ""
+"The network on which the daemon listens. The daemon is automatically started "
+"when the network is up-and-running. This option has precedence over "
+"“PCAP_INTF” option."
+msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:508
+msgid ""
+"The source address from which the SPA packet will be accepted. The string "
+"“ANY” is also accepted if a valid SPA packet should be honored from any "
+"source IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:514
+msgid "The source address has to be specified."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:430
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:436
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:537
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:546
+msgid "The symmetric key has to be specified."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid ""
 "When unchecked, the config files in /etc/fwknopd will be used as is, "
 "ignoring any settings here."
@@ -131,14 +267,24 @@ msgstr ""
 "Quando desmarcada, os ficheiros de configuração em /etc/fwknopd serão usados "
 "como estão, ignorando qualquer configuração feita aqui."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:10
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:419
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:502
 msgid "access.conf stanzas"
 msgstr "Parágrafos do access.conf"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:44
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:595
 msgid "fwknopd.conf config options"
 msgstr "opções de configuração do fwknopd.conf"
 
+#~ msgid "Firewall Knock Operator"
+#~ msgstr "Operador de Firewall Knock"
+
+#~ msgid "The Base64 HMAC key"
+#~ msgstr "A chave HMAC base64"
+
+#~ msgid "Use ANY for any source IP"
+#~ msgstr "Use qualquer um (ANY) para qualquer fonte ip"
+
 #~ msgid "Enter custom access.conf variables below:"
 #~ msgstr "Enter custom access.conf variables below:"
 
diff --git a/applications/luci-app-fwknopd/po/pt_BR/fwknopd.po b/applications/luci-app-fwknopd/po/pt_BR/fwknopd.po
index a6a7ab63e..295dafdeb 100644
--- a/applications/luci-app-fwknopd/po/pt_BR/fwknopd.po
+++ b/applications/luci-app-fwknopd/po/pt_BR/fwknopd.po
@@ -13,7 +13,7 @@ msgstr ""
 "Plural-Forms: nplurals=2; plural=n > 1;\n"
 "X-Generator: Weblate 4.1-dev\n"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:48
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:599
 msgid ""
 "Allow SPA clients to request access to services through an iptables firewall "
 "instead of just to it."
@@ -21,16 +21,39 @@ msgstr ""
 "Permitir que clientes SPA requeiram acesso a serviços através de um firewall "
 "iptables ao invés de apenas fazê-lo."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:49
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:600
 msgid "Allow SPA clients to request forwarding destination by DNS name."
 msgstr ""
 "Permitir que clientes SPA requeiram encaminhamento de destinos por nome DNS."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:22
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:441
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:458
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:551
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:573
 msgid "Base64 key"
 msgstr "Chave em formato base64"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:33
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:308
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:319
+msgid "Close"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid "Custom configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:415
+msgid "Custom configuration read from /etc/fwknop/access.conf."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:581
+msgid ""
+"Define a set of ports and protocols (tcp or udp) that are explicitly not "
+"allowed regardless of the validity of the incoming SPA packet. Multiple "
+"entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:576
 msgid ""
 "Define a set of ports and protocols (tcp or udp) that will be opened if a "
 "valid knock sequence is seen. If this entry is not set, fwknopd will attempt "
@@ -43,7 +66,19 @@ msgstr ""
 "especificada nos dados SPA (a não ser se casar com qualquer entrada de "
 "\"RESTRICT_PORTS\"). Múltiplas entradas serão separadas por vírgula."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:36
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:562
+msgid ""
+"Define the HMAC authentication key (in Base64 encoding) used for verifying "
+"the authenticity of the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:554
+msgid ""
+"Define the HMAC authentication key used for verifying the authenticity of "
+"the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:585
 msgid ""
 "Define the length of time access will be granted by fwknopd through the "
 "firewall after a valid knock sequence from a source IP address. If "
@@ -54,8 +89,13 @@ msgstr ""
 "do firewall depois de uma sequência de batidas válida de um endereço IP. Se "
 "“FW_ACCESS_TIMEOUT” não estiver definido, o valor padrão será de 30 segundos."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:18
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:20
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:540
+msgid ""
+"Define the symmetric key (in Base64 encoding) used for decrypting an "
+"incoming SPA packet that is encrypted by the fwknop client with Rijndael."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:532
 msgid ""
 "Define the symmetric key used for decrypting an incoming SPA packet that is "
 "encrypted by the fwknop client with Rijndael."
@@ -63,11 +103,11 @@ msgstr ""
 "Define a chave simétrica usada para decifrar um pacote SPA entrante que foi "
 "cifrado pelo cliente fwknop com o algoritmo Rijndael."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:6
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:480
 msgid "Enable Uci/Luci control"
 msgstr "Habilitar o controle UCI/Luci"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid "Enable config overwrite"
 msgstr "Habilitar a sobrescrita da configuração"
 
@@ -75,11 +115,13 @@ msgstr "Habilitar a sobrescrita da configuração"
 msgid "Firewall Knock Daemon"
 msgstr "Servidor do Firwall Knock"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:4
-msgid "Firewall Knock Operator"
-msgstr "Operador do Firewall Knock"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:303
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:314
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:478
+msgid "Firewall Knock Operator Daemon"
+msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:39
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:590
 msgid ""
 "Force all SPA packets to contain a real IP address within the encrypted "
 "data. This makes it impossible to use the -s command line argument on the "
@@ -94,11 +136,39 @@ msgstr ""
 "de uma NAT) ou o ciente deve conhecer o seu endereço IP externo e defini-lo "
 "através do argumento '-a'."
 
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:527
+msgid "Generate Keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid "Generate keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid ""
+"Generates the symmetric key used for decrypting an incoming SPA packet, that "
+"is encrypted by the fwknop client with Rijndael block cipher, and HMAC "
+"authentication key used to verify the authenticity of the incoming SPA "
+"packet before the packet is decrypted."
+msgstr ""
+
 #: applications/luci-app-fwknopd/root/usr/share/rpcd/acl.d/luci-app-fwknopd.json:3
 msgid "Grant UCI access for luci-app-fwknopd"
 msgstr "Conceda acesso UCI ao luci-app-fwknopd"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:46
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:571
+msgid "HMAC key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:549
+msgid "Key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:178
+msgid "Loading…"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:597
 msgid ""
 "Maximum age in seconds that an SPA packet will be accepted. Defaults to 120 "
 "seconds."
@@ -106,24 +176,90 @@ msgstr ""
 "Idade máxima, em segundos, que um pacote SPA será aceito. O padrão é de 120 "
 "segundos."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:19
-msgid "Normal Key"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid "Network"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:492
+msgid "Network configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:315
+msgid "No stanza found."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:440
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:457
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:550
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:572
+msgid "Normal key"
 msgstr "Chave Normal"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:47
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid ""
+"Parses the /etc/fwknop/access.conf file (and included files/folders/keys) "
+"and generates QR codes for all found stanzas. Handles only files in /etc/"
+"fwknop folder due to access rights restrictions."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:422
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:506
+msgid "QR code"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:489
+msgid "Show access.conf QR codes"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:598
 msgid "Specify the ethernet interface on which fwknopd will sniff packets."
 msgstr ""
 "Especifica o dispositivo ethernet no qual o fwknopd irá observar os pacotes."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:28
-msgid "The base64 hmac key"
-msgstr "A chave de autenticação HMAC em formato base64"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:447
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:453
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:559
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:568
+msgid "The HMAC authentication key has to be specified."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:517
+msgid ""
+"The destination address for which the SPA packet will be accepted. The "
+"string “ANY” is also accepted if a valid SPA packet should be honored to any "
+"destination IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:17
-msgid "Use ANY for any source IP"
-msgstr "Use \"ANY\" para qualquer endereço IP de origem"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid ""
+"The network on which the daemon listens. The daemon is automatically started "
+"when the network is up-and-running. This option has precedence over "
+"“PCAP_INTF” option."
+msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:508
+msgid ""
+"The source address from which the SPA packet will be accepted. The string "
+"“ANY” is also accepted if a valid SPA packet should be honored from any "
+"source IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:514
+msgid "The source address has to be specified."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:430
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:436
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:537
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:546
+msgid "The symmetric key has to be specified."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid ""
 "When unchecked, the config files in /etc/fwknopd will be used as is, "
 "ignoring any settings here."
@@ -131,10 +267,20 @@ msgstr ""
 "Quando desmarcado, os arquivos de configuração em /etc/fwknopd serão usados "
 "como estão, ignorando qualquer ajustes feitos aqui."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:10
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:419
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:502
 msgid "access.conf stanzas"
 msgstr "Estâncias do access.conf"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:44
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:595
 msgid "fwknopd.conf config options"
 msgstr "Opções do fwknopd.conf"
+
+#~ msgid "Firewall Knock Operator"
+#~ msgstr "Operador do Firewall Knock"
+
+#~ msgid "The Base64 HMAC key"
+#~ msgstr "A chave de autenticação HMAC em formato base64"
+
+#~ msgid "Use ANY for any source IP"
+#~ msgstr "Use \"ANY\" para qualquer endereço IP de origem"
diff --git a/applications/luci-app-fwknopd/po/ro/fwknopd.po b/applications/luci-app-fwknopd/po/ro/fwknopd.po
index 066f85804..75c2a4108 100644
--- a/applications/luci-app-fwknopd/po/ro/fwknopd.po
+++ b/applications/luci-app-fwknopd/po/ro/fwknopd.po
@@ -11,21 +11,44 @@ msgstr ""
 "Plural-Forms: nplurals=3; plural=n==1 ? 0 : (n==0 || (n%100 > 0 && n%100 < "
 "20)) ? 1 : 2;\n"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:48
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:599
 msgid ""
 "Allow SPA clients to request access to services through an iptables firewall "
 "instead of just to it."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:49
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:600
 msgid "Allow SPA clients to request forwarding destination by DNS name."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:22
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:441
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:458
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:551
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:573
 msgid "Base64 key"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:33
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:308
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:319
+msgid "Close"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid "Custom configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:415
+msgid "Custom configuration read from /etc/fwknop/access.conf."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:581
+msgid ""
+"Define a set of ports and protocols (tcp or udp) that are explicitly not "
+"allowed regardless of the validity of the incoming SPA packet. Multiple "
+"entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:576
 msgid ""
 "Define a set of ports and protocols (tcp or udp) that will be opened if a "
 "valid knock sequence is seen. If this entry is not set, fwknopd will attempt "
@@ -33,7 +56,19 @@ msgid ""
 "matches any “RESTRICT_PORTS” entries). Multiple entries are comma-separated."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:36
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:562
+msgid ""
+"Define the HMAC authentication key (in Base64 encoding) used for verifying "
+"the authenticity of the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:554
+msgid ""
+"Define the HMAC authentication key used for verifying the authenticity of "
+"the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:585
 msgid ""
 "Define the length of time access will be granted by fwknopd through the "
 "firewall after a valid knock sequence from a source IP address. If "
@@ -41,18 +76,23 @@ msgid ""
 "automatically be set."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:18
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:20
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:540
+msgid ""
+"Define the symmetric key (in Base64 encoding) used for decrypting an "
+"incoming SPA packet that is encrypted by the fwknop client with Rijndael."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:532
 msgid ""
 "Define the symmetric key used for decrypting an incoming SPA packet that is "
 "encrypted by the fwknop client with Rijndael."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:6
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:480
 msgid "Enable Uci/Luci control"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid "Enable config overwrite"
 msgstr ""
 
@@ -60,11 +100,13 @@ msgstr ""
 msgid "Firewall Knock Daemon"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:4
-msgid "Firewall Knock Operator"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:303
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:314
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:478
+msgid "Firewall Knock Operator Daemon"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:39
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:590
 msgid ""
 "Force all SPA packets to contain a real IP address within the encrypted "
 "data. This makes it impossible to use the -s command line argument on the "
@@ -73,43 +115,138 @@ msgid ""
 "know the external IP and set it via the -a argument."
 msgstr ""
 
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:527
+msgid "Generate Keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid "Generate keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid ""
+"Generates the symmetric key used for decrypting an incoming SPA packet, that "
+"is encrypted by the fwknop client with Rijndael block cipher, and HMAC "
+"authentication key used to verify the authenticity of the incoming SPA "
+"packet before the packet is decrypted."
+msgstr ""
+
 #: applications/luci-app-fwknopd/root/usr/share/rpcd/acl.d/luci-app-fwknopd.json:3
 msgid "Grant UCI access for luci-app-fwknopd"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:46
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:571
+msgid "HMAC key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:549
+msgid "Key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:178
+msgid "Loading…"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:597
 msgid ""
 "Maximum age in seconds that an SPA packet will be accepted. Defaults to 120 "
 "seconds."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:19
-msgid "Normal Key"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid "Network"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:492
+msgid "Network configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:315
+msgid "No stanza found."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:440
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:457
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:550
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:572
+msgid "Normal key"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid ""
+"Parses the /etc/fwknop/access.conf file (and included files/folders/keys) "
+"and generates QR codes for all found stanzas. Handles only files in /etc/"
+"fwknop folder due to access rights restrictions."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:422
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:506
+msgid "QR code"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:47
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:489
+msgid "Show access.conf QR codes"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:598
 msgid "Specify the ethernet interface on which fwknopd will sniff packets."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:28
-msgid "The base64 hmac key"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:447
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:453
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:559
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:568
+msgid "The HMAC authentication key has to be specified."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:517
+msgid ""
+"The destination address for which the SPA packet will be accepted. The "
+"string “ANY” is also accepted if a valid SPA packet should be honored to any "
+"destination IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid ""
+"The network on which the daemon listens. The daemon is automatically started "
+"when the network is up-and-running. This option has precedence over "
+"“PCAP_INTF” option."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:508
+msgid ""
+"The source address from which the SPA packet will be accepted. The string "
+"“ANY” is also accepted if a valid SPA packet should be honored from any "
+"source IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:514
+msgid "The source address has to be specified."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:17
-msgid "Use ANY for any source IP"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:430
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:436
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:537
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:546
+msgid "The symmetric key has to be specified."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid ""
 "When unchecked, the config files in /etc/fwknopd will be used as is, "
 "ignoring any settings here."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:10
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:419
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:502
 msgid "access.conf stanzas"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:44
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:595
 msgid "fwknopd.conf config options"
 msgstr ""
 
diff --git a/applications/luci-app-fwknopd/po/ru/fwknopd.po b/applications/luci-app-fwknopd/po/ru/fwknopd.po
index b3f089a23..1283e0db8 100644
--- a/applications/luci-app-fwknopd/po/ru/fwknopd.po
+++ b/applications/luci-app-fwknopd/po/ru/fwknopd.po
@@ -16,7 +16,7 @@ msgstr ""
 "Project-Info: Это технический перевод, не дословный. Главное-удобный русский "
 "интерфейс, все проверялось в графическом режиме, совместим с другими apps\n"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:48
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:599
 msgid ""
 "Allow SPA clients to request access to services through an iptables firewall "
 "instead of just to it."
@@ -24,16 +24,39 @@ msgstr ""
 "Разрешить SPA клиентам запрашивать доступ к сервисам через iptables, а не "
 "напрямую."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:49
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:600
 msgid "Allow SPA clients to request forwarding destination by DNS name."
 msgstr ""
 "Разрешить SPA клиентам запрашивать направление переадресации по DNS-имени."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:22
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:441
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:458
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:551
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:573
 msgid "Base64 key"
 msgstr "Ключ в формате Base64"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:33
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:308
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:319
+msgid "Close"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid "Custom configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:415
+msgid "Custom configuration read from /etc/fwknop/access.conf."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:581
+msgid ""
+"Define a set of ports and protocols (tcp or udp) that are explicitly not "
+"allowed regardless of the validity of the incoming SPA packet. Multiple "
+"entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:576
 msgid ""
 "Define a set of ports and protocols (tcp or udp) that will be opened if a "
 "valid knock sequence is seen. If this entry is not set, fwknopd will attempt "
@@ -46,7 +69,19 @@ msgstr ""
 "указанный в SPA данных (если он соответствует любой 'RESTRICT_PORTS' "
 "записи). Последовательность данных, разделенных запятыми."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:36
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:562
+msgid ""
+"Define the HMAC authentication key (in Base64 encoding) used for verifying "
+"the authenticity of the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:554
+msgid ""
+"Define the HMAC authentication key used for verifying the authenticity of "
+"the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:585
 msgid ""
 "Define the length of time access will be granted by fwknopd through the "
 "firewall after a valid knock sequence from a source IP address. If "
@@ -59,8 +94,13 @@ msgstr ""
 "параметр 'FW_ACCESS_TIMEOUT' не установлен, то автоматически устанавливается "
 "время ожидания по умолчанию 30 секунд."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:18
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:20
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:540
+msgid ""
+"Define the symmetric key (in Base64 encoding) used for decrypting an "
+"incoming SPA packet that is encrypted by the fwknop client with Rijndael."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:532
 msgid ""
 "Define the symmetric key used for decrypting an incoming SPA packet that is "
 "encrypted by the fwknop client with Rijndael."
@@ -68,11 +108,11 @@ msgstr ""
 "Задайте симметричный ключ, используемый для расшифровки входящего SPA пакета "
 "зашифрованного fwknop клиентом с помощью Rijndael."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:6
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:480
 msgid "Enable Uci/Luci control"
 msgstr "Включить управление в Uci/LuCI"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid "Enable config overwrite"
 msgstr "Настроить config файл"
 
@@ -80,11 +120,13 @@ msgstr "Настроить config файл"
 msgid "Firewall Knock Daemon"
 msgstr "Firewall Knock Daemon"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:4
-msgid "Firewall Knock Operator"
-msgstr "Настройка защищенного постукивания межсетевого экрана"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:303
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:314
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:478
+msgid "Firewall Knock Operator Daemon"
+msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:39
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:590
 msgid ""
 "Force all SPA packets to contain a real IP address within the encrypted "
 "data. This makes it impossible to use the -s command line argument on the "
@@ -99,11 +141,39 @@ msgstr ""
 "за NAT), либо клиент должен знать внешний IP и установить его используя "
 "аргумент '-a'."
 
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:527
+msgid "Generate Keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid "Generate keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid ""
+"Generates the symmetric key used for decrypting an incoming SPA packet, that "
+"is encrypted by the fwknop client with Rijndael block cipher, and HMAC "
+"authentication key used to verify the authenticity of the incoming SPA "
+"packet before the packet is decrypted."
+msgstr ""
+
 #: applications/luci-app-fwknopd/root/usr/share/rpcd/acl.d/luci-app-fwknopd.json:3
 msgid "Grant UCI access for luci-app-fwknopd"
 msgstr "Предоставить UCI доступ для luci-app-fwknopd"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:46
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:571
+msgid "HMAC key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:549
+msgid "Key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:178
+msgid "Loading…"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:597
 msgid ""
 "Maximum age in seconds that an SPA packet will be accepted. Defaults to 120 "
 "seconds."
@@ -111,23 +181,89 @@ msgstr ""
 "Максимальное время в секундах, в течение которых будет принят SPA пакет, по "
 "умолчанию 120 секунд."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:19
-msgid "Normal Key"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid "Network"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:492
+msgid "Network configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:315
+msgid "No stanza found."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:440
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:457
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:550
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:572
+msgid "Normal key"
 msgstr "Нормальный ключ"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:47
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid ""
+"Parses the /etc/fwknop/access.conf file (and included files/folders/keys) "
+"and generates QR codes for all found stanzas. Handles only files in /etc/"
+"fwknop folder due to access rights restrictions."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:422
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:506
+msgid "QR code"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:489
+msgid "Show access.conf QR codes"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:598
 msgid "Specify the ethernet interface on which fwknopd will sniff packets."
 msgstr "Укажите ethernet интерфейс, пакеты которого fwknopd будет снифить."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:28
-msgid "The base64 hmac key"
-msgstr "Ключ Base64 HMAC"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:447
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:453
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:559
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:568
+msgid "The HMAC authentication key has to be specified."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:517
+msgid ""
+"The destination address for which the SPA packet will be accepted. The "
+"string “ANY” is also accepted if a valid SPA packet should be honored to any "
+"destination IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:17
-msgid "Use ANY for any source IP"
-msgstr "Использовать ЛЮБОЙ, для любого исходящего IP"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid ""
+"The network on which the daemon listens. The daemon is automatically started "
+"when the network is up-and-running. This option has precedence over "
+"“PCAP_INTF” option."
+msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:508
+msgid ""
+"The source address from which the SPA packet will be accepted. The string "
+"“ANY” is also accepted if a valid SPA packet should be honored from any "
+"source IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:514
+msgid "The source address has to be specified."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:430
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:436
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:537
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:546
+msgid "The symmetric key has to be specified."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid ""
 "When unchecked, the config files in /etc/fwknopd will be used as is, "
 "ignoring any settings here."
@@ -135,10 +271,20 @@ msgstr ""
 "Если не отмечено, будет использоваться дефолтный config файл fwknopd (/etc/"
 "fwknopd), игнорируя любые изменения настроек fwknopd здесь."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:10
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:419
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:502
 msgid "access.conf stanzas"
 msgstr "Строки config файла access.conf"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:44
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:595
 msgid "fwknopd.conf config options"
 msgstr "Настройка config файла - fwknopd.conf"
+
+#~ msgid "Firewall Knock Operator"
+#~ msgstr "Настройка защищенного постукивания межсетевого экрана"
+
+#~ msgid "The Base64 HMAC key"
+#~ msgstr "Ключ Base64 HMAC"
+
+#~ msgid "Use ANY for any source IP"
+#~ msgstr "Использовать ЛЮБОЙ, для любого исходящего IP"
diff --git a/applications/luci-app-fwknopd/po/sk/fwknopd.po b/applications/luci-app-fwknopd/po/sk/fwknopd.po
index d0bebe328..4dc06cbb6 100644
--- a/applications/luci-app-fwknopd/po/sk/fwknopd.po
+++ b/applications/luci-app-fwknopd/po/sk/fwknopd.po
@@ -10,21 +10,44 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=3; plural=(n==1) ? 0 : (n>=2 && n<=4) ? 1 : 2;\n"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:48
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:599
 msgid ""
 "Allow SPA clients to request access to services through an iptables firewall "
 "instead of just to it."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:49
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:600
 msgid "Allow SPA clients to request forwarding destination by DNS name."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:22
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:441
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:458
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:551
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:573
 msgid "Base64 key"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:33
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:308
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:319
+msgid "Close"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid "Custom configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:415
+msgid "Custom configuration read from /etc/fwknop/access.conf."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:581
+msgid ""
+"Define a set of ports and protocols (tcp or udp) that are explicitly not "
+"allowed regardless of the validity of the incoming SPA packet. Multiple "
+"entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:576
 msgid ""
 "Define a set of ports and protocols (tcp or udp) that will be opened if a "
 "valid knock sequence is seen. If this entry is not set, fwknopd will attempt "
@@ -32,7 +55,19 @@ msgid ""
 "matches any “RESTRICT_PORTS” entries). Multiple entries are comma-separated."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:36
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:562
+msgid ""
+"Define the HMAC authentication key (in Base64 encoding) used for verifying "
+"the authenticity of the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:554
+msgid ""
+"Define the HMAC authentication key used for verifying the authenticity of "
+"the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:585
 msgid ""
 "Define the length of time access will be granted by fwknopd through the "
 "firewall after a valid knock sequence from a source IP address. If "
@@ -40,18 +75,23 @@ msgid ""
 "automatically be set."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:18
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:20
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:540
+msgid ""
+"Define the symmetric key (in Base64 encoding) used for decrypting an "
+"incoming SPA packet that is encrypted by the fwknop client with Rijndael."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:532
 msgid ""
 "Define the symmetric key used for decrypting an incoming SPA packet that is "
 "encrypted by the fwknop client with Rijndael."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:6
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:480
 msgid "Enable Uci/Luci control"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid "Enable config overwrite"
 msgstr ""
 
@@ -59,11 +99,13 @@ msgstr ""
 msgid "Firewall Knock Daemon"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:4
-msgid "Firewall Knock Operator"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:303
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:314
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:478
+msgid "Firewall Knock Operator Daemon"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:39
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:590
 msgid ""
 "Force all SPA packets to contain a real IP address within the encrypted "
 "data. This makes it impossible to use the -s command line argument on the "
@@ -72,43 +114,138 @@ msgid ""
 "know the external IP and set it via the -a argument."
 msgstr ""
 
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:527
+msgid "Generate Keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid "Generate keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid ""
+"Generates the symmetric key used for decrypting an incoming SPA packet, that "
+"is encrypted by the fwknop client with Rijndael block cipher, and HMAC "
+"authentication key used to verify the authenticity of the incoming SPA "
+"packet before the packet is decrypted."
+msgstr ""
+
 #: applications/luci-app-fwknopd/root/usr/share/rpcd/acl.d/luci-app-fwknopd.json:3
 msgid "Grant UCI access for luci-app-fwknopd"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:46
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:571
+msgid "HMAC key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:549
+msgid "Key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:178
+msgid "Loading…"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:597
 msgid ""
 "Maximum age in seconds that an SPA packet will be accepted. Defaults to 120 "
 "seconds."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:19
-msgid "Normal Key"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid "Network"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:492
+msgid "Network configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:315
+msgid "No stanza found."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:440
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:457
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:550
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:572
+msgid "Normal key"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid ""
+"Parses the /etc/fwknop/access.conf file (and included files/folders/keys) "
+"and generates QR codes for all found stanzas. Handles only files in /etc/"
+"fwknop folder due to access rights restrictions."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:422
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:506
+msgid "QR code"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:47
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:489
+msgid "Show access.conf QR codes"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:598
 msgid "Specify the ethernet interface on which fwknopd will sniff packets."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:28
-msgid "The base64 hmac key"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:447
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:453
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:559
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:568
+msgid "The HMAC authentication key has to be specified."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:517
+msgid ""
+"The destination address for which the SPA packet will be accepted. The "
+"string “ANY” is also accepted if a valid SPA packet should be honored to any "
+"destination IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid ""
+"The network on which the daemon listens. The daemon is automatically started "
+"when the network is up-and-running. This option has precedence over "
+"“PCAP_INTF” option."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:508
+msgid ""
+"The source address from which the SPA packet will be accepted. The string "
+"“ANY” is also accepted if a valid SPA packet should be honored from any "
+"source IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:514
+msgid "The source address has to be specified."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:17
-msgid "Use ANY for any source IP"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:430
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:436
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:537
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:546
+msgid "The symmetric key has to be specified."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid ""
 "When unchecked, the config files in /etc/fwknopd will be used as is, "
 "ignoring any settings here."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:10
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:419
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:502
 msgid "access.conf stanzas"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:44
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:595
 msgid "fwknopd.conf config options"
 msgstr ""
 
diff --git a/applications/luci-app-fwknopd/po/sv/fwknopd.po b/applications/luci-app-fwknopd/po/sv/fwknopd.po
index c773154e2..ec15fd682 100644
--- a/applications/luci-app-fwknopd/po/sv/fwknopd.po
+++ b/applications/luci-app-fwknopd/po/sv/fwknopd.po
@@ -12,7 +12,7 @@ msgstr ""
 "Plural-Forms: nplurals=2; plural=n != 1;\n"
 "X-Generator: Weblate 4.3.1-dev\n"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:48
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:599
 msgid ""
 "Allow SPA clients to request access to services through an iptables firewall "
 "instead of just to it."
@@ -20,15 +20,38 @@ msgstr ""
 "Tillåt SPA klienter att begära tillgång till tjänster genom en iptabells "
 "brandvägg istället för direkt till den."
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:49
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:600
 msgid "Allow SPA clients to request forwarding destination by DNS name."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:22
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:441
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:458
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:551
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:573
 msgid "Base64 key"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:33
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:308
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:319
+msgid "Close"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid "Custom configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:415
+msgid "Custom configuration read from /etc/fwknop/access.conf."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:581
+msgid ""
+"Define a set of ports and protocols (tcp or udp) that are explicitly not "
+"allowed regardless of the validity of the incoming SPA packet. Multiple "
+"entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:576
 msgid ""
 "Define a set of ports and protocols (tcp or udp) that will be opened if a "
 "valid knock sequence is seen. If this entry is not set, fwknopd will attempt "
@@ -36,7 +59,19 @@ msgid ""
 "matches any “RESTRICT_PORTS” entries). Multiple entries are comma-separated."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:36
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:562
+msgid ""
+"Define the HMAC authentication key (in Base64 encoding) used for verifying "
+"the authenticity of the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:554
+msgid ""
+"Define the HMAC authentication key used for verifying the authenticity of "
+"the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:585
 msgid ""
 "Define the length of time access will be granted by fwknopd through the "
 "firewall after a valid knock sequence from a source IP address. If "
@@ -44,18 +79,23 @@ msgid ""
 "automatically be set."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:18
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:20
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:540
+msgid ""
+"Define the symmetric key (in Base64 encoding) used for decrypting an "
+"incoming SPA packet that is encrypted by the fwknop client with Rijndael."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:532
 msgid ""
 "Define the symmetric key used for decrypting an incoming SPA packet that is "
 "encrypted by the fwknop client with Rijndael."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:6
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:480
 msgid "Enable Uci/Luci control"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid "Enable config overwrite"
 msgstr ""
 
@@ -63,11 +103,13 @@ msgstr ""
 msgid "Firewall Knock Daemon"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:4
-msgid "Firewall Knock Operator"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:303
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:314
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:478
+msgid "Firewall Knock Operator Daemon"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:39
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:590
 msgid ""
 "Force all SPA packets to contain a real IP address within the encrypted "
 "data. This makes it impossible to use the -s command line argument on the "
@@ -76,43 +118,138 @@ msgid ""
 "know the external IP and set it via the -a argument."
 msgstr ""
 
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:527
+msgid "Generate Keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid "Generate keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid ""
+"Generates the symmetric key used for decrypting an incoming SPA packet, that "
+"is encrypted by the fwknop client with Rijndael block cipher, and HMAC "
+"authentication key used to verify the authenticity of the incoming SPA "
+"packet before the packet is decrypted."
+msgstr ""
+
 #: applications/luci-app-fwknopd/root/usr/share/rpcd/acl.d/luci-app-fwknopd.json:3
 msgid "Grant UCI access for luci-app-fwknopd"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:46
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:571
+msgid "HMAC key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:549
+msgid "Key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:178
+msgid "Loading…"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:597
 msgid ""
 "Maximum age in seconds that an SPA packet will be accepted. Defaults to 120 "
 "seconds."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:19
-msgid "Normal Key"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid "Network"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:492
+msgid "Network configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:315
+msgid "No stanza found."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:440
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:457
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:550
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:572
+msgid "Normal key"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid ""
+"Parses the /etc/fwknop/access.conf file (and included files/folders/keys) "
+"and generates QR codes for all found stanzas. Handles only files in /etc/"
+"fwknop folder due to access rights restrictions."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:422
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:506
+msgid "QR code"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:47
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:489
+msgid "Show access.conf QR codes"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:598
 msgid "Specify the ethernet interface on which fwknopd will sniff packets."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:28
-msgid "The base64 hmac key"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:447
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:453
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:559
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:568
+msgid "The HMAC authentication key has to be specified."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:517
+msgid ""
+"The destination address for which the SPA packet will be accepted. The "
+"string “ANY” is also accepted if a valid SPA packet should be honored to any "
+"destination IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid ""
+"The network on which the daemon listens. The daemon is automatically started "
+"when the network is up-and-running. This option has precedence over "
+"“PCAP_INTF” option."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:508
+msgid ""
+"The source address from which the SPA packet will be accepted. The string "
+"“ANY” is also accepted if a valid SPA packet should be honored from any "
+"source IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:514
+msgid "The source address has to be specified."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:17
-msgid "Use ANY for any source IP"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:430
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:436
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:537
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:546
+msgid "The symmetric key has to be specified."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid ""
 "When unchecked, the config files in /etc/fwknopd will be used as is, "
 "ignoring any settings here."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:10
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:419
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:502
 msgid "access.conf stanzas"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:44
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:595
 msgid "fwknopd.conf config options"
 msgstr ""
 
diff --git a/applications/luci-app-fwknopd/po/templates/fwknopd.pot b/applications/luci-app-fwknopd/po/templates/fwknopd.pot
index 43969bb44..676b44902 100644
--- a/applications/luci-app-fwknopd/po/templates/fwknopd.pot
+++ b/applications/luci-app-fwknopd/po/templates/fwknopd.pot
@@ -1,21 +1,44 @@
 msgid ""
 msgstr "Content-Type: text/plain; charset=UTF-8"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:48
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:599
 msgid ""
 "Allow SPA clients to request access to services through an iptables firewall "
 "instead of just to it."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:49
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:600
 msgid "Allow SPA clients to request forwarding destination by DNS name."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:22
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:441
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:458
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:551
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:573
 msgid "Base64 key"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:33
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:308
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:319
+msgid "Close"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid "Custom configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:415
+msgid "Custom configuration read from /etc/fwknop/access.conf."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:581
+msgid ""
+"Define a set of ports and protocols (tcp or udp) that are explicitly not "
+"allowed regardless of the validity of the incoming SPA packet. Multiple "
+"entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:576
 msgid ""
 "Define a set of ports and protocols (tcp or udp) that will be opened if a "
 "valid knock sequence is seen. If this entry is not set, fwknopd will attempt "
@@ -23,7 +46,19 @@ msgid ""
 "matches any “RESTRICT_PORTS” entries). Multiple entries are comma-separated."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:36
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:562
+msgid ""
+"Define the HMAC authentication key (in Base64 encoding) used for verifying "
+"the authenticity of the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:554
+msgid ""
+"Define the HMAC authentication key used for verifying the authenticity of "
+"the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:585
 msgid ""
 "Define the length of time access will be granted by fwknopd through the "
 "firewall after a valid knock sequence from a source IP address. If "
@@ -31,18 +66,23 @@ msgid ""
 "automatically be set."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:18
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:20
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:540
+msgid ""
+"Define the symmetric key (in Base64 encoding) used for decrypting an "
+"incoming SPA packet that is encrypted by the fwknop client with Rijndael."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:532
 msgid ""
 "Define the symmetric key used for decrypting an incoming SPA packet that is "
 "encrypted by the fwknop client with Rijndael."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:6
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:480
 msgid "Enable Uci/Luci control"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid "Enable config overwrite"
 msgstr ""
 
@@ -50,11 +90,13 @@ msgstr ""
 msgid "Firewall Knock Daemon"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:4
-msgid "Firewall Knock Operator"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:303
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:314
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:478
+msgid "Firewall Knock Operator Daemon"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:39
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:590
 msgid ""
 "Force all SPA packets to contain a real IP address within the encrypted "
 "data. This makes it impossible to use the -s command line argument on the "
@@ -63,42 +105,137 @@ msgid ""
 "know the external IP and set it via the -a argument."
 msgstr ""
 
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:527
+msgid "Generate Keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid "Generate keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid ""
+"Generates the symmetric key used for decrypting an incoming SPA packet, that "
+"is encrypted by the fwknop client with Rijndael block cipher, and HMAC "
+"authentication key used to verify the authenticity of the incoming SPA "
+"packet before the packet is decrypted."
+msgstr ""
+
 #: applications/luci-app-fwknopd/root/usr/share/rpcd/acl.d/luci-app-fwknopd.json:3
 msgid "Grant UCI access for luci-app-fwknopd"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:46
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:571
+msgid "HMAC key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:549
+msgid "Key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:178
+msgid "Loading…"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:597
 msgid ""
 "Maximum age in seconds that an SPA packet will be accepted. Defaults to 120 "
 "seconds."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:19
-msgid "Normal Key"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid "Network"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:492
+msgid "Network configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:315
+msgid "No stanza found."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:440
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:457
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:550
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:572
+msgid "Normal key"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid ""
+"Parses the /etc/fwknop/access.conf file (and included files/folders/keys) "
+"and generates QR codes for all found stanzas. Handles only files in /etc/"
+"fwknop folder due to access rights restrictions."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:422
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:506
+msgid "QR code"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:47
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:489
+msgid "Show access.conf QR codes"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:598
 msgid "Specify the ethernet interface on which fwknopd will sniff packets."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:28
-msgid "The base64 hmac key"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:447
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:453
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:559
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:568
+msgid "The HMAC authentication key has to be specified."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:517
+msgid ""
+"The destination address for which the SPA packet will be accepted. The "
+"string “ANY” is also accepted if a valid SPA packet should be honored to any "
+"destination IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid ""
+"The network on which the daemon listens. The daemon is automatically started "
+"when the network is up-and-running. This option has precedence over "
+"“PCAP_INTF” option."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:508
+msgid ""
+"The source address from which the SPA packet will be accepted. The string "
+"“ANY” is also accepted if a valid SPA packet should be honored from any "
+"source IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:514
+msgid "The source address has to be specified."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:17
-msgid "Use ANY for any source IP"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:430
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:436
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:537
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:546
+msgid "The symmetric key has to be specified."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid ""
 "When unchecked, the config files in /etc/fwknopd will be used as is, "
 "ignoring any settings here."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:10
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:419
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:502
 msgid "access.conf stanzas"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:44
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:595
 msgid "fwknopd.conf config options"
 msgstr ""
diff --git a/applications/luci-app-fwknopd/po/tr/fwknopd.po b/applications/luci-app-fwknopd/po/tr/fwknopd.po
index bf982a347..7e2625c8a 100644
--- a/applications/luci-app-fwknopd/po/tr/fwknopd.po
+++ b/applications/luci-app-fwknopd/po/tr/fwknopd.po
@@ -10,21 +10,44 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=n != 1;\n"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:48
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:599
 msgid ""
 "Allow SPA clients to request access to services through an iptables firewall "
 "instead of just to it."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:49
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:600
 msgid "Allow SPA clients to request forwarding destination by DNS name."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:22
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:441
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:458
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:551
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:573
 msgid "Base64 key"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:33
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:308
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:319
+msgid "Close"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid "Custom configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:415
+msgid "Custom configuration read from /etc/fwknop/access.conf."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:581
+msgid ""
+"Define a set of ports and protocols (tcp or udp) that are explicitly not "
+"allowed regardless of the validity of the incoming SPA packet. Multiple "
+"entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:576
 msgid ""
 "Define a set of ports and protocols (tcp or udp) that will be opened if a "
 "valid knock sequence is seen. If this entry is not set, fwknopd will attempt "
@@ -32,7 +55,19 @@ msgid ""
 "matches any “RESTRICT_PORTS” entries). Multiple entries are comma-separated."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:36
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:562
+msgid ""
+"Define the HMAC authentication key (in Base64 encoding) used for verifying "
+"the authenticity of the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:554
+msgid ""
+"Define the HMAC authentication key used for verifying the authenticity of "
+"the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:585
 msgid ""
 "Define the length of time access will be granted by fwknopd through the "
 "firewall after a valid knock sequence from a source IP address. If "
@@ -40,18 +75,23 @@ msgid ""
 "automatically be set."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:18
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:20
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:540
+msgid ""
+"Define the symmetric key (in Base64 encoding) used for decrypting an "
+"incoming SPA packet that is encrypted by the fwknop client with Rijndael."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:532
 msgid ""
 "Define the symmetric key used for decrypting an incoming SPA packet that is "
 "encrypted by the fwknop client with Rijndael."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:6
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:480
 msgid "Enable Uci/Luci control"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid "Enable config overwrite"
 msgstr ""
 
@@ -59,11 +99,13 @@ msgstr ""
 msgid "Firewall Knock Daemon"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:4
-msgid "Firewall Knock Operator"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:303
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:314
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:478
+msgid "Firewall Knock Operator Daemon"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:39
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:590
 msgid ""
 "Force all SPA packets to contain a real IP address within the encrypted "
 "data. This makes it impossible to use the -s command line argument on the "
@@ -72,43 +114,138 @@ msgid ""
 "know the external IP and set it via the -a argument."
 msgstr ""
 
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:527
+msgid "Generate Keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid "Generate keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid ""
+"Generates the symmetric key used for decrypting an incoming SPA packet, that "
+"is encrypted by the fwknop client with Rijndael block cipher, and HMAC "
+"authentication key used to verify the authenticity of the incoming SPA "
+"packet before the packet is decrypted."
+msgstr ""
+
 #: applications/luci-app-fwknopd/root/usr/share/rpcd/acl.d/luci-app-fwknopd.json:3
 msgid "Grant UCI access for luci-app-fwknopd"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:46
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:571
+msgid "HMAC key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:549
+msgid "Key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:178
+msgid "Loading…"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:597
 msgid ""
 "Maximum age in seconds that an SPA packet will be accepted. Defaults to 120 "
 "seconds."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:19
-msgid "Normal Key"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid "Network"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:492
+msgid "Network configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:315
+msgid "No stanza found."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:440
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:457
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:550
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:572
+msgid "Normal key"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid ""
+"Parses the /etc/fwknop/access.conf file (and included files/folders/keys) "
+"and generates QR codes for all found stanzas. Handles only files in /etc/"
+"fwknop folder due to access rights restrictions."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:422
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:506
+msgid "QR code"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:47
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:489
+msgid "Show access.conf QR codes"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:598
 msgid "Specify the ethernet interface on which fwknopd will sniff packets."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:28
-msgid "The base64 hmac key"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:447
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:453
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:559
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:568
+msgid "The HMAC authentication key has to be specified."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:517
+msgid ""
+"The destination address for which the SPA packet will be accepted. The "
+"string “ANY” is also accepted if a valid SPA packet should be honored to any "
+"destination IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid ""
+"The network on which the daemon listens. The daemon is automatically started "
+"when the network is up-and-running. This option has precedence over "
+"“PCAP_INTF” option."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:508
+msgid ""
+"The source address from which the SPA packet will be accepted. The string "
+"“ANY” is also accepted if a valid SPA packet should be honored from any "
+"source IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:514
+msgid "The source address has to be specified."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:17
-msgid "Use ANY for any source IP"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:430
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:436
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:537
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:546
+msgid "The symmetric key has to be specified."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid ""
 "When unchecked, the config files in /etc/fwknopd will be used as is, "
 "ignoring any settings here."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:10
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:419
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:502
 msgid "access.conf stanzas"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:44
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:595
 msgid "fwknopd.conf config options"
 msgstr ""
 
diff --git a/applications/luci-app-fwknopd/po/uk/fwknopd.po b/applications/luci-app-fwknopd/po/uk/fwknopd.po
index 055cedfca..1961d62d7 100644
--- a/applications/luci-app-fwknopd/po/uk/fwknopd.po
+++ b/applications/luci-app-fwknopd/po/uk/fwknopd.po
@@ -11,21 +11,44 @@ msgstr ""
 "Plural-Forms: nplurals=3; plural=n%10==1 && n%100!=11 ? 0 : n%10>=2 && n%10<="
 "4 && (n%100<10 || n%100>=20) ? 1 : 2;\n"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:48
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:599
 msgid ""
 "Allow SPA clients to request access to services through an iptables firewall "
 "instead of just to it."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:49
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:600
 msgid "Allow SPA clients to request forwarding destination by DNS name."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:22
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:441
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:458
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:551
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:573
 msgid "Base64 key"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:33
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:308
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:319
+msgid "Close"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid "Custom configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:415
+msgid "Custom configuration read from /etc/fwknop/access.conf."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:581
+msgid ""
+"Define a set of ports and protocols (tcp or udp) that are explicitly not "
+"allowed regardless of the validity of the incoming SPA packet. Multiple "
+"entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:576
 msgid ""
 "Define a set of ports and protocols (tcp or udp) that will be opened if a "
 "valid knock sequence is seen. If this entry is not set, fwknopd will attempt "
@@ -33,7 +56,19 @@ msgid ""
 "matches any “RESTRICT_PORTS” entries). Multiple entries are comma-separated."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:36
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:562
+msgid ""
+"Define the HMAC authentication key (in Base64 encoding) used for verifying "
+"the authenticity of the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:554
+msgid ""
+"Define the HMAC authentication key used for verifying the authenticity of "
+"the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:585
 msgid ""
 "Define the length of time access will be granted by fwknopd through the "
 "firewall after a valid knock sequence from a source IP address. If "
@@ -41,18 +76,23 @@ msgid ""
 "automatically be set."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:18
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:20
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:540
+msgid ""
+"Define the symmetric key (in Base64 encoding) used for decrypting an "
+"incoming SPA packet that is encrypted by the fwknop client with Rijndael."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:532
 msgid ""
 "Define the symmetric key used for decrypting an incoming SPA packet that is "
 "encrypted by the fwknop client with Rijndael."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:6
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:480
 msgid "Enable Uci/Luci control"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid "Enable config overwrite"
 msgstr ""
 
@@ -60,11 +100,13 @@ msgstr ""
 msgid "Firewall Knock Daemon"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:4
-msgid "Firewall Knock Operator"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:303
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:314
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:478
+msgid "Firewall Knock Operator Daemon"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:39
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:590
 msgid ""
 "Force all SPA packets to contain a real IP address within the encrypted "
 "data. This makes it impossible to use the -s command line argument on the "
@@ -73,43 +115,138 @@ msgid ""
 "know the external IP and set it via the -a argument."
 msgstr ""
 
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:527
+msgid "Generate Keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid "Generate keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid ""
+"Generates the symmetric key used for decrypting an incoming SPA packet, that "
+"is encrypted by the fwknop client with Rijndael block cipher, and HMAC "
+"authentication key used to verify the authenticity of the incoming SPA "
+"packet before the packet is decrypted."
+msgstr ""
+
 #: applications/luci-app-fwknopd/root/usr/share/rpcd/acl.d/luci-app-fwknopd.json:3
 msgid "Grant UCI access for luci-app-fwknopd"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:46
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:571
+msgid "HMAC key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:549
+msgid "Key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:178
+msgid "Loading…"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:597
 msgid ""
 "Maximum age in seconds that an SPA packet will be accepted. Defaults to 120 "
 "seconds."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:19
-msgid "Normal Key"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid "Network"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:492
+msgid "Network configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:315
+msgid "No stanza found."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:440
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:457
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:550
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:572
+msgid "Normal key"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid ""
+"Parses the /etc/fwknop/access.conf file (and included files/folders/keys) "
+"and generates QR codes for all found stanzas. Handles only files in /etc/"
+"fwknop folder due to access rights restrictions."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:422
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:506
+msgid "QR code"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:47
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:489
+msgid "Show access.conf QR codes"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:598
 msgid "Specify the ethernet interface on which fwknopd will sniff packets."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:28
-msgid "The base64 hmac key"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:447
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:453
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:559
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:568
+msgid "The HMAC authentication key has to be specified."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:517
+msgid ""
+"The destination address for which the SPA packet will be accepted. The "
+"string “ANY” is also accepted if a valid SPA packet should be honored to any "
+"destination IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid ""
+"The network on which the daemon listens. The daemon is automatically started "
+"when the network is up-and-running. This option has precedence over "
+"“PCAP_INTF” option."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:508
+msgid ""
+"The source address from which the SPA packet will be accepted. The string "
+"“ANY” is also accepted if a valid SPA packet should be honored from any "
+"source IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:514
+msgid "The source address has to be specified."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:17
-msgid "Use ANY for any source IP"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:430
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:436
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:537
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:546
+msgid "The symmetric key has to be specified."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid ""
 "When unchecked, the config files in /etc/fwknopd will be used as is, "
 "ignoring any settings here."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:10
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:419
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:502
 msgid "access.conf stanzas"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:44
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:595
 msgid "fwknopd.conf config options"
 msgstr ""
 
diff --git a/applications/luci-app-fwknopd/po/vi/fwknopd.po b/applications/luci-app-fwknopd/po/vi/fwknopd.po
index eabb0220e..868634a2d 100644
--- a/applications/luci-app-fwknopd/po/vi/fwknopd.po
+++ b/applications/luci-app-fwknopd/po/vi/fwknopd.po
@@ -10,21 +10,44 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=1; plural=0;\n"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:48
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:599
 msgid ""
 "Allow SPA clients to request access to services through an iptables firewall "
 "instead of just to it."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:49
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:600
 msgid "Allow SPA clients to request forwarding destination by DNS name."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:22
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:441
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:458
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:551
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:573
 msgid "Base64 key"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:33
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:308
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:319
+msgid "Close"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid "Custom configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:415
+msgid "Custom configuration read from /etc/fwknop/access.conf."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:581
+msgid ""
+"Define a set of ports and protocols (tcp or udp) that are explicitly not "
+"allowed regardless of the validity of the incoming SPA packet. Multiple "
+"entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:576
 msgid ""
 "Define a set of ports and protocols (tcp or udp) that will be opened if a "
 "valid knock sequence is seen. If this entry is not set, fwknopd will attempt "
@@ -32,7 +55,19 @@ msgid ""
 "matches any “RESTRICT_PORTS” entries). Multiple entries are comma-separated."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:36
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:562
+msgid ""
+"Define the HMAC authentication key (in Base64 encoding) used for verifying "
+"the authenticity of the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:554
+msgid ""
+"Define the HMAC authentication key used for verifying the authenticity of "
+"the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:585
 msgid ""
 "Define the length of time access will be granted by fwknopd through the "
 "firewall after a valid knock sequence from a source IP address. If "
@@ -40,18 +75,23 @@ msgid ""
 "automatically be set."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:18
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:20
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:540
+msgid ""
+"Define the symmetric key (in Base64 encoding) used for decrypting an "
+"incoming SPA packet that is encrypted by the fwknop client with Rijndael."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:532
 msgid ""
 "Define the symmetric key used for decrypting an incoming SPA packet that is "
 "encrypted by the fwknop client with Rijndael."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:6
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:480
 msgid "Enable Uci/Luci control"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid "Enable config overwrite"
 msgstr ""
 
@@ -59,11 +99,13 @@ msgstr ""
 msgid "Firewall Knock Daemon"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:4
-msgid "Firewall Knock Operator"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:303
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:314
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:478
+msgid "Firewall Knock Operator Daemon"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:39
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:590
 msgid ""
 "Force all SPA packets to contain a real IP address within the encrypted "
 "data. This makes it impossible to use the -s command line argument on the "
@@ -72,43 +114,138 @@ msgid ""
 "know the external IP and set it via the -a argument."
 msgstr ""
 
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:527
+msgid "Generate Keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid "Generate keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid ""
+"Generates the symmetric key used for decrypting an incoming SPA packet, that "
+"is encrypted by the fwknop client with Rijndael block cipher, and HMAC "
+"authentication key used to verify the authenticity of the incoming SPA "
+"packet before the packet is decrypted."
+msgstr ""
+
 #: applications/luci-app-fwknopd/root/usr/share/rpcd/acl.d/luci-app-fwknopd.json:3
 msgid "Grant UCI access for luci-app-fwknopd"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:46
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:571
+msgid "HMAC key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:549
+msgid "Key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:178
+msgid "Loading…"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:597
 msgid ""
 "Maximum age in seconds that an SPA packet will be accepted. Defaults to 120 "
 "seconds."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:19
-msgid "Normal Key"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid "Network"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:492
+msgid "Network configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:315
+msgid "No stanza found."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:440
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:457
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:550
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:572
+msgid "Normal key"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid ""
+"Parses the /etc/fwknop/access.conf file (and included files/folders/keys) "
+"and generates QR codes for all found stanzas. Handles only files in /etc/"
+"fwknop folder due to access rights restrictions."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:422
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:506
+msgid "QR code"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:47
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:489
+msgid "Show access.conf QR codes"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:598
 msgid "Specify the ethernet interface on which fwknopd will sniff packets."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:28
-msgid "The base64 hmac key"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:447
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:453
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:559
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:568
+msgid "The HMAC authentication key has to be specified."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:517
+msgid ""
+"The destination address for which the SPA packet will be accepted. The "
+"string “ANY” is also accepted if a valid SPA packet should be honored to any "
+"destination IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid ""
+"The network on which the daemon listens. The daemon is automatically started "
+"when the network is up-and-running. This option has precedence over "
+"“PCAP_INTF” option."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:508
+msgid ""
+"The source address from which the SPA packet will be accepted. The string "
+"“ANY” is also accepted if a valid SPA packet should be honored from any "
+"source IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:514
+msgid "The source address has to be specified."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:17
-msgid "Use ANY for any source IP"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:430
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:436
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:537
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:546
+msgid "The symmetric key has to be specified."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid ""
 "When unchecked, the config files in /etc/fwknopd will be used as is, "
 "ignoring any settings here."
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:10
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:419
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:502
 msgid "access.conf stanzas"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:44
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:595
 msgid "fwknopd.conf config options"
 msgstr ""
 
diff --git a/applications/luci-app-fwknopd/po/zh_Hans/fwknopd.po b/applications/luci-app-fwknopd/po/zh_Hans/fwknopd.po
index dba9830ba..9a4b3dba1 100644
--- a/applications/luci-app-fwknopd/po/zh_Hans/fwknopd.po
+++ b/applications/luci-app-fwknopd/po/zh_Hans/fwknopd.po
@@ -13,21 +13,44 @@ msgstr ""
 "Plural-Forms: nplurals=1; plural=0;\n"
 "X-Generator: Weblate 4.1-dev\n"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:48
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:599
 msgid ""
 "Allow SPA clients to request access to services through an iptables firewall "
 "instead of just to it."
 msgstr "允许 SPA 客户端请求通过 iptables 防火墙访问服务，而不仅仅是被拦截。"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:49
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:600
 msgid "Allow SPA clients to request forwarding destination by DNS name."
 msgstr "允许 SPA 客户端用 DNS 名称请求转发目标。"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:22
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:441
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:458
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:551
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:573
 msgid "Base64 key"
 msgstr "Base64 密钥"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:33
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:308
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:319
+msgid "Close"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid "Custom configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:415
+msgid "Custom configuration read from /etc/fwknop/access.conf."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:581
+msgid ""
+"Define a set of ports and protocols (tcp or udp) that are explicitly not "
+"allowed regardless of the validity of the incoming SPA packet. Multiple "
+"entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:576
 msgid ""
 "Define a set of ports and protocols (tcp or udp) that will be opened if a "
 "valid knock sequence is seen. If this entry is not set, fwknopd will attempt "
@@ -38,7 +61,19 @@ msgstr ""
 "端口和协议。如果未设置此条目，fwknopd 将尝试遵守 SPA 数据中指定的任何协议/端"
 "口请求（除非匹配到了任何“RESTRICT_PORTS”条目）。多个条目以逗号分隔。"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:36
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:562
+msgid ""
+"Define the HMAC authentication key (in Base64 encoding) used for verifying "
+"the authenticity of the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:554
+msgid ""
+"Define the HMAC authentication key used for verifying the authenticity of "
+"the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:585
 msgid ""
 "Define the length of time access will be granted by fwknopd through the "
 "firewall after a valid knock sequence from a source IP address. If "
@@ -48,19 +83,24 @@ msgstr ""
 "定义在源 IP 地址的有效敲门序列后，fwknopd 授予其通过防火墙访问的时间长度。如"
 "果未设置“FW_ACCESS_TIMEOUT”，则将自动设置默认超时 30 秒。"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:18
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:20
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:540
+msgid ""
+"Define the symmetric key (in Base64 encoding) used for decrypting an "
+"incoming SPA packet that is encrypted by the fwknop client with Rijndael."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:532
 msgid ""
 "Define the symmetric key used for decrypting an incoming SPA packet that is "
 "encrypted by the fwknop client with Rijndael."
 msgstr ""
 "定义 Rijndael 对称密钥，将用于解密由 fwknop 客户端传入的加密 SPA 数据包。"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:6
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:480
 msgid "Enable Uci/Luci control"
 msgstr "启用 Uci/Luci 控件"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid "Enable config overwrite"
 msgstr "启用配置覆盖"
 
@@ -68,11 +108,13 @@ msgstr "启用配置覆盖"
 msgid "Firewall Knock Daemon"
 msgstr "Firewall Knock 守护进程"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:4
-msgid "Firewall Knock Operator"
-msgstr "Firewall Knock 操作者"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:303
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:314
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:478
+msgid "Firewall Knock Operator Daemon"
+msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:39
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:590
 msgid ""
 "Force all SPA packets to contain a real IP address within the encrypted "
 "data. This makes it impossible to use the -s command line argument on the "
@@ -84,43 +126,147 @@ msgstr ""
 "令行上使用 -s 命令行参数，因此 -R 必须用于自动解析外部地址（如果 NAT 后面的客"
 "户端），或客户端必须通过 -a 参数知道外部 IP。"
 
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:527
+msgid "Generate Keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid "Generate keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid ""
+"Generates the symmetric key used for decrypting an incoming SPA packet, that "
+"is encrypted by the fwknop client with Rijndael block cipher, and HMAC "
+"authentication key used to verify the authenticity of the incoming SPA "
+"packet before the packet is decrypted."
+msgstr ""
+
 #: applications/luci-app-fwknopd/root/usr/share/rpcd/acl.d/luci-app-fwknopd.json:3
 msgid "Grant UCI access for luci-app-fwknopd"
 msgstr "授予UCI访问luci-app-fwknopd的权限"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:46
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:571
+msgid "HMAC key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:549
+msgid "Key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:178
+msgid "Loading…"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:597
 msgid ""
 "Maximum age in seconds that an SPA packet will be accepted. Defaults to 120 "
 "seconds."
 msgstr "SPA 数据包可被接受的最大期限（以秒为单位）。默认为120秒。"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:19
-msgid "Normal Key"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid "Network"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:492
+msgid "Network configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:315
+msgid "No stanza found."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:440
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:457
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:550
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:572
+msgid "Normal key"
 msgstr "普通密钥"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:47
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid ""
+"Parses the /etc/fwknop/access.conf file (and included files/folders/keys) "
+"and generates QR codes for all found stanzas. Handles only files in /etc/"
+"fwknop folder due to access rights restrictions."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:422
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:506
+msgid "QR code"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:489
+msgid "Show access.conf QR codes"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:598
 msgid "Specify the ethernet interface on which fwknopd will sniff packets."
 msgstr "指定 fwknopd 将要嗅探数据包的以太网接口。"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:28
-msgid "The base64 hmac key"
-msgstr "base64 hmac 密钥"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:447
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:453
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:559
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:568
+msgid "The HMAC authentication key has to be specified."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:517
+msgid ""
+"The destination address for which the SPA packet will be accepted. The "
+"string “ANY” is also accepted if a valid SPA packet should be honored to any "
+"destination IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:17
-msgid "Use ANY for any source IP"
-msgstr "对任何源 IP 使用 ANY"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid ""
+"The network on which the daemon listens. The daemon is automatically started "
+"when the network is up-and-running. This option has precedence over "
+"“PCAP_INTF” option."
+msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:508
+msgid ""
+"The source address from which the SPA packet will be accepted. The string "
+"“ANY” is also accepted if a valid SPA packet should be honored from any "
+"source IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:514
+msgid "The source address has to be specified."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:430
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:436
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:537
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:546
+msgid "The symmetric key has to be specified."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid ""
 "When unchecked, the config files in /etc/fwknopd will be used as is, "
 "ignoring any settings here."
 msgstr ""
 "取消选中时，/etc/fwknopd 中的配置文件将按原样使用，忽略此处的任何设置。"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:10
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:419
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:502
 msgid "access.conf stanzas"
 msgstr "access.conf 节"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:44
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:595
 msgid "fwknopd.conf config options"
 msgstr "fwknopd.conf 配置选项"
+
+#~ msgid "Firewall Knock Operator"
+#~ msgstr "Firewall Knock 操作者"
+
+#~ msgid "The Base64 HMAC key"
+#~ msgstr "base64 HMAC 密钥"
+
+#~ msgid "Use ANY for any source IP"
+#~ msgstr "对任何源 IP 使用 ANY"
diff --git a/applications/luci-app-fwknopd/po/zh_Hant/fwknopd.po b/applications/luci-app-fwknopd/po/zh_Hant/fwknopd.po
index 8d82fb7d1..b7aa119ed 100644
--- a/applications/luci-app-fwknopd/po/zh_Hant/fwknopd.po
+++ b/applications/luci-app-fwknopd/po/zh_Hant/fwknopd.po
@@ -11,21 +11,44 @@ msgstr ""
 "PO-Revision-Date: 2018-08-07 19:10+0800\n"
 "X-Generator: Gtranslator 2.91.7\n"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:48
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:599
 msgid ""
 "Allow SPA clients to request access to services through an iptables firewall "
 "instead of just to it."
 msgstr "允許 SPA 客戶端請求通過 iptables 防火牆訪問服務，而不僅僅是被攔截。"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:49
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:600
 msgid "Allow SPA clients to request forwarding destination by DNS name."
 msgstr "允許 SPA 客戶端用 DNS 名稱請求轉發目標。"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:22
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:441
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:458
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:551
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:573
 msgid "Base64 key"
 msgstr "Base64 金鑰"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:33
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:308
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:319
+msgid "Close"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid "Custom configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:415
+msgid "Custom configuration read from /etc/fwknop/access.conf."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:581
+msgid ""
+"Define a set of ports and protocols (tcp or udp) that are explicitly not "
+"allowed regardless of the validity of the incoming SPA packet. Multiple "
+"entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:576
 msgid ""
 "Define a set of ports and protocols (tcp or udp) that will be opened if a "
 "valid knock sequence is seen. If this entry is not set, fwknopd will attempt "
@@ -36,7 +59,19 @@ msgstr ""
 "和協議。如果未設定此條目，fwknopd 將嘗試遵守 SPA 資料中指定的任何協議/端口請"
 "求（除非匹配到了任何“RESTRICT_PORTS”條目）。多個條目以逗號分隔。"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:36
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:562
+msgid ""
+"Define the HMAC authentication key (in Base64 encoding) used for verifying "
+"the authenticity of the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:554
+msgid ""
+"Define the HMAC authentication key used for verifying the authenticity of "
+"the SPA packet before the packet is decrypted."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:585
 msgid ""
 "Define the length of time access will be granted by fwknopd through the "
 "firewall after a valid knock sequence from a source IP address. If "
@@ -46,19 +81,24 @@ msgstr ""
 "定義在源 IP 位址的有效敲門序列後，fwknopd 授予其通過防火牆訪問的時間長度。如"
 "果未設定“FW_ACCESS_TIMEOUT”，則將自動設定預設超時 30 秒。"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:18
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:20
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:540
+msgid ""
+"Define the symmetric key (in Base64 encoding) used for decrypting an "
+"incoming SPA packet that is encrypted by the fwknop client with Rijndael."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:532
 msgid ""
 "Define the symmetric key used for decrypting an incoming SPA packet that is "
 "encrypted by the fwknop client with Rijndael."
 msgstr ""
 "定義 Rijndael 對稱金鑰，將用於解密由 fwknop 客戶端傳入的加密 SPA 資料包。"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:6
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:480
 msgid "Enable Uci/Luci control"
 msgstr "啟用 Uci/Luci 控制元件"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid "Enable config overwrite"
 msgstr "啟用配置覆蓋"
 
@@ -66,11 +106,13 @@ msgstr "啟用配置覆蓋"
 msgid "Firewall Knock Daemon"
 msgstr "Firewall Knock 守護程式"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:4
-msgid "Firewall Knock Operator"
-msgstr "Firewall Knock 操作者"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:303
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:314
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:478
+msgid "Firewall Knock Operator Daemon"
+msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:39
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:590
 msgid ""
 "Force all SPA packets to contain a real IP address within the encrypted "
 "data. This makes it impossible to use the -s command line argument on the "
@@ -82,43 +124,147 @@ msgstr ""
 "令行上使用 -s 指令列引數，因此 -R 必須用於自動解析外部位址（如果 NAT 後面的客"
 "戶端）,或客戶端必須通過 -a 引數知道外部 IP。"
 
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:527
+msgid "Generate Keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid "Generate keys"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:523
+msgid ""
+"Generates the symmetric key used for decrypting an incoming SPA packet, that "
+"is encrypted by the fwknop client with Rijndael block cipher, and HMAC "
+"authentication key used to verify the authenticity of the incoming SPA "
+"packet before the packet is decrypted."
+msgstr ""
+
 #: applications/luci-app-fwknopd/root/usr/share/rpcd/acl.d/luci-app-fwknopd.json:3
 msgid "Grant UCI access for luci-app-fwknopd"
 msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:46
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:571
+msgid "HMAC key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:549
+msgid "Key type"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:178
+msgid "Loading…"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:597
 msgid ""
 "Maximum age in seconds that an SPA packet will be accepted. Defaults to 120 "
 "seconds."
 msgstr "SPA 資料包的最大可接受年齡（秒）。預設為 120 秒"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:19
-msgid "Normal Key"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid "Network"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:492
+msgid "Network configuration"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:315
+msgid "No stanza found."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:440
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:457
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:550
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:572
+msgid "Normal key"
 msgstr "普通金鑰"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:47
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:485
+msgid ""
+"Parses the /etc/fwknop/access.conf file (and included files/folders/keys) "
+"and generates QR codes for all found stanzas. Handles only files in /etc/"
+"fwknop folder due to access rights restrictions."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:422
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:506
+msgid "QR code"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:489
+msgid "Show access.conf QR codes"
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:598
 msgid "Specify the ethernet interface on which fwknopd will sniff packets."
 msgstr "指定 fwknopd 將要嗅探資料包的乙太網介面。"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:28
-msgid "The base64 hmac key"
-msgstr "base64 hmac 金鑰"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:447
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:453
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:559
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:568
+msgid "The HMAC authentication key has to be specified."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:517
+msgid ""
+"The destination address for which the SPA packet will be accepted. The "
+"string “ANY” is also accepted if a valid SPA packet should be honored to any "
+"destination IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:17
-msgid "Use ANY for any source IP"
-msgstr "對任何源 IP 使用 ANY"
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:494
+msgid ""
+"The network on which the daemon listens. The daemon is automatically started "
+"when the network is up-and-running. This option has precedence over "
+"“PCAP_INTF” option."
+msgstr ""
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:8
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:508
+msgid ""
+"The source address from which the SPA packet will be accepted. The string "
+"“ANY” is also accepted if a valid SPA packet should be honored from any "
+"source IP. Networks should be specified in CIDR notation (e.g. "
+"“192.168.10.0/24”), and individual IP addresses can be specified as well. "
+"Multiple entries are comma-separated."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:514
+msgid "The source address has to be specified."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:430
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:436
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:537
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:546
+msgid "The symmetric key has to be specified."
+msgstr ""
+
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:482
 msgid ""
 "When unchecked, the config files in /etc/fwknopd will be used as is, "
 "ignoring any settings here."
 msgstr ""
 "取消選中時，/etc/fwknopd 中的配置檔案將按原樣使用，忽略此處的任何設定。"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:10
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:419
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:502
 msgid "access.conf stanzas"
 msgstr "access.conf 節"
 
-#: applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua:44
+#: applications/luci-app-fwknopd/htdocs/luci-static/resources/view/fwknopd.js:595
 msgid "fwknopd.conf config options"
 msgstr "fwknopd.conf 配置選項"
+
+#~ msgid "Firewall Knock Operator"
+#~ msgstr "Firewall Knock 操作者"
+
+#~ msgid "The Base64 HMAC key"
+#~ msgstr "base64 HMAC 金鑰"
+
+#~ msgid "Use ANY for any source IP"
+#~ msgstr "對任何源 IP 使用 ANY"
diff --git a/applications/luci-app-fwknopd/root/etc/uci-defaults/40_luci-fwknopd b/applications/luci-app-fwknopd/root/etc/uci-defaults/40_luci-fwknopd
index 7cecf2746..5fed1889d 100644
--- a/applications/luci-app-fwknopd/root/etc/uci-defaults/40_luci-fwknopd
+++ b/applications/luci-app-fwknopd/root/etc/uci-defaults/40_luci-fwknopd
@@ -3,16 +3,12 @@
 #-- Licensed to the public under the GNU General Public License v2.
 . /lib/functions/network.sh
 
-[ "$(uci -q get fwknopd.@access[0].KEY)" != "CHANGEME" ] && exit 0
+# Clean-up - keytype/hkeytype is unnecessary now
+if uci -q show fwknopd | grep \\.h\\?keytype > /dev/null; then
+	for keytype in $(uci -q show fwknopd | grep \\.h\\?keytype= | cut -d= -f1); do
+		uci delete $keytype
+	done
+	uci commit fwknopd
+fi
 
-uci delete fwknopd.@access[0].KEY
-uci delete fwknopd.@access[0].HMAC_KEY
-uci set fwknopd.@access[0].keytype='Base64 key'
-uci set fwknopd.@access[0].hkeytype='Base64 key'
-uci set fwknopd.@access[0].KEY_BASE64=`fwknopd --key-gen | awk '/^KEY/ {print $2;}'`
-uci set fwknopd.@access[0].HMAC_KEY_BASE64=`fwknopd --key-gen | awk '/^HMAC/ {print $2;}'`
-uci set fwknopd.@config[0].ENABLE_IPT_FORWARDING='y'
-uci set fwknopd.@config[0].ENABLE_NAT_DNS='y'
-
-uci commit fwknopd
 exit 0
diff --git a/applications/luci-app-fwknopd/root/usr/sbin/gen-qr.sh b/applications/luci-app-fwknopd/root/usr/sbin/gen-qr.sh
deleted file mode 100644
index 48850bd36..000000000
--- a/applications/luci-app-fwknopd/root/usr/sbin/gen-qr.sh
+++ /dev/null
@@ -1,26 +0,0 @@
-#!/bin/sh
-entry_num=0
-if [ "$1" != "" ]; then
-entry_num=$1
-fi
-
-key_base64=$(uci -q get fwknopd.@access[$entry_num].KEY_BASE64)
-key=$(uci -q get fwknopd.@access[$entry_num].KEY)
-hmac_key_base64=$(uci -q get fwknopd.@access[$entry_num].HMAC_KEY_BASE64)
-hmac_key=$(uci -q get fwknopd.@access[$entry_num].HMAC_KEY)
-
-if [ "$key_base64" != "" ]; then
-qr="KEY_BASE64:$key_base64"
-fi
-if [ "$key" != "" ]; then
-qr="$qr KEY:$key"
-
-fi
-if [ "$hmac_key_base64" != "" ]; then
-qr="$qr HMAC_KEY_BASE64:$hmac_key_base64"
-fi
-if [ "$hmac_key" != "" ]; then
-qr="$qr HMAC_KEY:$hmac_key"
-fi
-
-qrencode -t svg -I -o - "$qr"
diff --git a/applications/luci-app-fwknopd/root/usr/share/luci/menu.d/luci-app-fwknopd.json b/applications/luci-app-fwknopd/root/usr/share/luci/menu.d/luci-app-fwknopd.json
index 85486b997..e3ada68d7 100644
--- a/applications/luci-app-fwknopd/root/usr/share/luci/menu.d/luci-app-fwknopd.json
+++ b/applications/luci-app-fwknopd/root/usr/share/luci/menu.d/luci-app-fwknopd.json
@@ -2,12 +2,15 @@
 	"admin/services/fwknopd": {
 		"title": "Firewall Knock Daemon",
 		"action": {
-			"type": "cbi",
-			"path": "fwknopd",
-			"post": { "cbi.submit": true }
+			"type": "view",
+			"path": "fwknopd"
 		},
 		"depends": {
 			"acl": [ "luci-app-fwknopd" ],
+			"fs": {
+				"/usr/bin/qrencode": "executable",
+				"/usr/sbin/fwknopd": "executable"
+			},
 			"uci": { "fwknopd": true }
 		}
 	}
diff --git a/applications/luci-app-fwknopd/root/usr/share/rpcd/acl.d/luci-app-fwknopd.json b/applications/luci-app-fwknopd/root/usr/share/rpcd/acl.d/luci-app-fwknopd.json
index 3877f8752..307ec28b6 100644
--- a/applications/luci-app-fwknopd/root/usr/share/rpcd/acl.d/luci-app-fwknopd.json
+++ b/applications/luci-app-fwknopd/root/usr/share/rpcd/acl.d/luci-app-fwknopd.json
@@ -2,7 +2,12 @@
 	"luci-app-fwknopd": {
 		"description": "Grant UCI access for luci-app-fwknopd",
 		"read": {
-			"uci": [ "fwknopd" ]
+			"uci": [ "fwknopd" ],
+			"file": {
+				"/etc/fwknop/*": [ "read" ],
+				"/usr/bin/qrencode": [ "exec" ],
+				"/usr/sbin/fwknopd --key-gen": [ "exec" ]
+			}
 		},
 		"write": {
 			"uci": [ "fwknopd" ]