feat: manage ca authorizations

2025-10-05 05:54:53 +00:00 · 2025-03-30 10:36:05 +08:00
parent 7503d52857
commit deb3b2f412
22 changed files with 592 additions and 160 deletions
--- a/ui/src/components/access/AccessForm.tsx
+++ b/ui/src/components/access/AccessForm.tsx
@@ -31,6 +31,7 @@ import AccessFormEdgioConfig from "./AccessFormEdgioConfig";
 import AccessFormGcoreConfig from "./AccessFormGcoreConfig";
 import AccessFormGnameConfig from "./AccessFormGnameConfig";
 import AccessFormGoDaddyConfig from "./AccessFormGoDaddyConfig";
+import AccessFormGoogleTrustServicesConfig from "./AccessFormGoogleTrustServicesConfig";
 import AccessFormHuaweiCloudConfig from "./AccessFormHuaweiCloudConfig";
 import AccessFormJDCloudConfig from "./AccessFormJDCloudConfig";
 import AccessFormKubernetesConfig from "./AccessFormKubernetesConfig";
@@ -52,6 +53,7 @@ import AccessFormVercelConfig from "./AccessFormVercelConfig";
 import AccessFormVolcEngineConfig from "./AccessFormVolcEngineConfig";
 import AccessFormWebhookConfig from "./AccessFormWebhookConfig";
 import AccessFormWestcnConfig from "./AccessFormWestcnConfig";
+import AccessFormZeroSSLConfig from "./AccessFormZeroSSLConfig";

 type AccessFormFieldValues = Partial<MaybeModelRecord<AccessModel>>;
 type AccessFormPresets = "add" | "edit";
@@ -147,6 +149,8 @@ const AccessForm = forwardRef<AccessFormInstance, AccessFormProps>(({ className,
        return <AccessFormGnameConfig {...nestedFormProps} />;
      case ACCESS_PROVIDERS.GODADDY:
        return <AccessFormGoDaddyConfig {...nestedFormProps} />;
+      case ACCESS_PROVIDERS.GOOGLETRUSTSERVICES:
+        return <AccessFormGoogleTrustServicesConfig {...nestedFormProps} />;
      case ACCESS_PROVIDERS.EDGIO:
        return <AccessFormEdgioConfig {...nestedFormProps} />;
      case ACCESS_PROVIDERS.HUAWEICLOUD:
@@ -191,6 +195,8 @@ const AccessForm = forwardRef<AccessFormInstance, AccessFormProps>(({ className,
        return <AccessFormWebhookConfig {...nestedFormProps} />;
      case ACCESS_PROVIDERS.WESTCN:
        return <AccessFormWestcnConfig {...nestedFormProps} />;
+      case ACCESS_PROVIDERS.ZEROSSL:
+        return <AccessFormZeroSSLConfig {...nestedFormProps} />;
    }
  }, [disabled, initialValues?.config, fieldProvider, nestedFormInst, nestedFormName]);

--- a/ui/src/components/access/AccessFormGoogleTrustServicesConfig.tsx
+++ b/ui/src/components/access/AccessFormGoogleTrustServicesConfig.tsx
@@ -0,0 +1,82 @@
+import { useTranslation } from "react-i18next";
+import { Form, type FormInstance, Input } from "antd";
+import { createSchemaFieldRule } from "antd-zod";
+import { z } from "zod";
+
+import { type AccessConfigForGoogleTrustServices } from "@/domain/access";
+
+type AccessFormGoogleTrustServicesConfigFieldValues = Nullish<AccessConfigForGoogleTrustServices>;
+
+export type AccessFormGoogleTrustServicesConfigProps = {
+  form: FormInstance;
+  formName: string;
+  disabled?: boolean;
+  initialValues?: AccessFormGoogleTrustServicesConfigFieldValues;
+  onValuesChange?: (values: AccessFormGoogleTrustServicesConfigFieldValues) => void;
+};
+
+const initFormModel = (): AccessFormGoogleTrustServicesConfigFieldValues => {
+  return {
+    eabKid: "",
+    eabHmacKey: "",
+  };
+};
+
+const AccessFormGoogleTrustServicesConfig = ({
+  form: formInst,
+  formName,
+  disabled,
+  initialValues,
+  onValuesChange,
+}: AccessFormGoogleTrustServicesConfigProps) => {
+  const { t } = useTranslation();
+
+  const formSchema = z.object({
+    eabKid: z
+      .string()
+      .min(1, t("access.form.googletrustservices_eab_kid.placeholder"))
+      .max(256, t("common.errmsg.string_max", { max: 256 }))
+      .trim(),
+    eabHmacKey: z
+      .string()
+      .min(1, t("access.form.googletrustservices_eab_hmac_key.placeholder"))
+      .max(256, t("common.errmsg.string_max", { max: 256 }))
+      .trim(),
+  });
+  const formRule = createSchemaFieldRule(formSchema);
+
+  const handleFormChange = (_: unknown, values: z.infer<typeof formSchema>) => {
+    onValuesChange?.(values);
+  };
+
+  return (
+    <Form
+      form={formInst}
+      disabled={disabled}
+      initialValues={initialValues ?? initFormModel()}
+      layout="vertical"
+      name={formName}
+      onValuesChange={handleFormChange}
+    >
+      <Form.Item
+        name="eabKid"
+        label={t("access.form.googletrustservices_eab_kid.label")}
+        rules={[formRule]}
+        tooltip={<span dangerouslySetInnerHTML={{ __html: t("access.form.googletrustservices_eab_kid.tooltip") }}></span>}
+      >
+        <Input autoComplete="new-password" placeholder={t("access.form.googletrustservices_eab_kid.placeholder")} />
+      </Form.Item>
+
+      <Form.Item
+        name="eabHmacKey"
+        label={t("access.form.googletrustservices_eab_hmac_key.label")}
+        rules={[formRule]}
+        tooltip={<span dangerouslySetInnerHTML={{ __html: t("access.form.googletrustservices_eab_hmac_key.tooltip") }}></span>}
+      >
+        <Input.Password autoComplete="new-password" placeholder={t("access.form.googletrustservices_eab_hmac_key.placeholder")} />
+      </Form.Item>
+    </Form>
+  );
+};
+
+export default AccessFormGoogleTrustServicesConfig;
--- a/ui/src/components/access/AccessFormZeroSSLConfig.tsx
+++ b/ui/src/components/access/AccessFormZeroSSLConfig.tsx
@@ -0,0 +1,76 @@
+import { useTranslation } from "react-i18next";
+import { Form, type FormInstance, Input } from "antd";
+import { createSchemaFieldRule } from "antd-zod";
+import { z } from "zod";
+
+import { type AccessConfigForZeroSSL } from "@/domain/access";
+
+type AccessFormZeroSSLConfigFieldValues = Nullish<AccessConfigForZeroSSL>;
+
+export type AccessFormZeroSSLConfigProps = {
+  form: FormInstance;
+  formName: string;
+  disabled?: boolean;
+  initialValues?: AccessFormZeroSSLConfigFieldValues;
+  onValuesChange?: (values: AccessFormZeroSSLConfigFieldValues) => void;
+};
+
+const initFormModel = (): AccessFormZeroSSLConfigFieldValues => {
+  return {
+    eabKid: "",
+    eabHmacKey: "",
+  };
+};
+
+const AccessFormZeroSSLConfig = ({ form: formInst, formName, disabled, initialValues, onValuesChange }: AccessFormZeroSSLConfigProps) => {
+  const { t } = useTranslation();
+
+  const formSchema = z.object({
+    eabKid: z
+      .string()
+      .min(1, t("access.form.zerossl_eab_kid.placeholder"))
+      .max(256, t("common.errmsg.string_max", { max: 256 }))
+      .trim(),
+    eabHmacKey: z
+      .string()
+      .min(1, t("access.form.zerossl_eab_hmac_key.placeholder"))
+      .max(256, t("common.errmsg.string_max", { max: 256 }))
+      .trim(),
+  });
+  const formRule = createSchemaFieldRule(formSchema);
+
+  const handleFormChange = (_: unknown, values: z.infer<typeof formSchema>) => {
+    onValuesChange?.(values);
+  };
+
+  return (
+    <Form
+      form={formInst}
+      disabled={disabled}
+      initialValues={initialValues ?? initFormModel()}
+      layout="vertical"
+      name={formName}
+      onValuesChange={handleFormChange}
+    >
+      <Form.Item
+        name="eabKid"
+        label={t("access.form.zerossl_eab_kid.label")}
+        rules={[formRule]}
+        tooltip={<span dangerouslySetInnerHTML={{ __html: t("access.form.zerossl_eab_kid.tooltip") }}></span>}
+      >
+        <Input autoComplete="new-password" placeholder={t("access.form.zerossl_eab_kid.placeholder")} />
+      </Form.Item>
+
+      <Form.Item
+        name="eabHmacKey"
+        label={t("access.form.zerossl_eab_hmac_key.label")}
+        rules={[formRule]}
+        tooltip={<span dangerouslySetInnerHTML={{ __html: t("access.form.zerossl_eab_hmac_key.tooltip") }}></span>}
+      >
+        <Input.Password autoComplete="new-password" placeholder={t("access.form.zerossl_eab_hmac_key.placeholder")} />
+      </Form.Item>
+    </Form>
+  );
+};
+
+export default AccessFormZeroSSLConfig;
--- a/ui/src/components/provider/AccessProviderSelect.tsx
+++ b/ui/src/components/provider/AccessProviderSelect.tsx
@@ -9,9 +9,10 @@ export type AccessProviderSelectProps = Omit<
  "filterOption" | "filterSort" | "labelRender" | "options" | "optionFilterProp" | "optionLabelProp" | "optionRender"
 > & {
  filter?: (record: AccessProvider) => boolean;
+  showOptionTags?: boolean;
 };

-const AccessProviderSelect = ({ filter, ...props }: AccessProviderSelectProps) => {
+const AccessProviderSelect = ({ filter, showOptionTags, ...props }: AccessProviderSelectProps = { showOptionTags: true }) => {
  const { t } = useTranslation();

  const [options, setOptions] = useState<Array<{ key: string; value: string; label: string; data: AccessProvider }>>([]);
@@ -38,18 +39,14 @@ const AccessProviderSelect = ({ filter, ...props }: AccessProviderSelectProps) =
            {t(provider?.name ?? "")}
          </Typography.Text>
        </Space>
-        <div>
-          {provider?.usages?.includes(ACCESS_USAGES.APPLY) && (
-            <>
-              <Tag color="orange">{t("access.props.provider.usage.dns")}</Tag>
-            </>
-          )}
-          {provider?.usages?.includes(ACCESS_USAGES.DEPLOY) && (
-            <>
-              <Tag color="blue">{t("access.props.provider.usage.host")}</Tag>
-            </>
-          )}
-        </div>
+        {!showOptionTags && (
+          <div>
+            {provider?.usages?.includes(ACCESS_USAGES.DNS) && <Tag color="peru">{t("access.props.provider.usage.dns")}</Tag>}
+            {provider?.usages?.includes(ACCESS_USAGES.HOSTING) && <Tag color="royalblue">{t("access.props.provider.usage.hosting")}</Tag>}
+            {/* {provider?.usages?.includes(ACCESS_USAGES.CA) && <Tag color="crimson">{t("access.props.provider.usage.ca")}</Tag>} */}
+            {/* {provider?.usages?.includes(ACCESS_USAGES.NOTIFICATION) && <Tag color="mediumaquamarine">{t("access.props.provider.usage.notification")}</Tag>} */}
+          </div>
+        )}
      </div>
    );
  };
--- a/ui/src/domain/access.ts
+++ b/ui/src/domain/access.ts
@@ -28,6 +28,7 @@ export interface AccessModel extends BaseModel {
      | AccessConfigForGcore
      | AccessConfigForGname
      | AccessConfigForGoDaddy
+      | AccessConfigForGoogleTrustServices
      | AccessConfigForHuaweiCloud
      | AccessConfigForJDCloud
      | AccessConfigForKubernetes
@@ -48,6 +49,7 @@ export interface AccessModel extends BaseModel {
      | AccessConfigForVolcEngine
      | AccessConfigForWebhook
      | AccessConfigForWestcn
+      | AccessConfigForZeroSSL
    );
 }

@@ -163,6 +165,11 @@ export type AccessConfigForGoDaddy = {
  apiSecret: string;
 };

+export type AccessConfigForGoogleTrustServices = {
+  eabKid: string;
+  eabHmacKey: string;
+};
+
 export type AccessConfigForHuaweiCloud = {
  accessKeyId: string;
  secretAccessKey: string;
@@ -266,4 +273,9 @@ export type AccessConfigForWestcn = {
  username: string;
  apiPassword: string;
 };
+
+export type AccessConfigForZeroSSL = {
+  eabKid: string;
+  eabHmacKey: string;
+};
 // #endregion
--- a/ui/src/domain/provider.ts
+++ b/ui/src/domain/provider.ts
@@ -22,13 +22,16 @@ export const ACCESS_PROVIDERS = Object.freeze({
  DNSLA: "dnsla",
  DOGECLOUD: "dogecloud",
  DYNV6: "dynv6",
+  EDGIO: "edgio",
  GCORE: "gcore",
  GNAME: "gname",
  GODADDY: "godaddy",
-  EDGIO: "edgio",
+  GOOGLETRUSTSERVICES: "googletrustservices",
  HUAWEICLOUD: "huaweicloud",
  JDCLOUD: "jdcloud",
  KUBERNETES: "k8s",
+  LETSENCRYPT: "letsencrypt",
+  LETSENCRYPTSTAGING: "letsencryptstaging",
  LOCAL: "local",
  NAMECHEAP: "namecheap",
  NAMEDOTCOM: "namedotcom",
@@ -47,13 +50,16 @@ export const ACCESS_PROVIDERS = Object.freeze({
  VOLCENGINE: "volcengine",
  WEBHOOK: "webhook",
  WESTCN: "westcn",
+  ZEROSSL: "zerossl",
 } as const);

 export type AccessProviderType = (typeof ACCESS_PROVIDERS)[keyof typeof ACCESS_PROVIDERS];

 export const ACCESS_USAGES = Object.freeze({
-  APPLY: "apply",
-  DEPLOY: "deploy",
+  DNS: "dns",
+  HOSTING: "hosting",
+  CA: "ca",
+  NOTIFICATION: "notification",
 } as const);

 export type AccessUsageType = (typeof ACCESS_USAGES)[keyof typeof ACCESS_USAGES];
@@ -67,55 +73,61 @@ export type AccessProvider = {

 export const accessProvidersMap: Map<AccessProvider["type"] | string, AccessProvider> = new Map(
  /*
-     注意：此处的顺序决定显示在前端的顺序。
-     NOTICE: The following order determines the order displayed at the frontend.
-    */
+    注意：此处的顺序决定显示在前端的顺序。
+    NOTICE: The following order determines the order displayed at the frontend.
+  */
  [
-    [ACCESS_PROVIDERS.LOCAL, "provider.local", "/imgs/providers/local.svg", [ACCESS_USAGES.DEPLOY]],
-    [ACCESS_PROVIDERS.SSH, "provider.ssh", "/imgs/providers/ssh.svg", [ACCESS_USAGES.DEPLOY]],
-    [ACCESS_PROVIDERS.WEBHOOK, "provider.webhook", "/imgs/providers/webhook.svg", [ACCESS_USAGES.DEPLOY]],
-    [ACCESS_PROVIDERS.KUBERNETES, "provider.kubernetes", "/imgs/providers/kubernetes.svg", [ACCESS_USAGES.DEPLOY]],
-    [ACCESS_PROVIDERS.ALIYUN, "provider.aliyun", "/imgs/providers/aliyun.svg", [ACCESS_USAGES.APPLY, ACCESS_USAGES.DEPLOY]],
-    [ACCESS_PROVIDERS.TENCENTCLOUD, "provider.tencentcloud", "/imgs/providers/tencentcloud.svg", [ACCESS_USAGES.APPLY, ACCESS_USAGES.DEPLOY]],
-    [ACCESS_PROVIDERS.BAIDUCLOUD, "provider.baiducloud", "/imgs/providers/baiducloud.svg", [ACCESS_USAGES.APPLY, ACCESS_USAGES.DEPLOY]],
-    [ACCESS_PROVIDERS.HUAWEICLOUD, "provider.huaweicloud", "/imgs/providers/huaweicloud.svg", [ACCESS_USAGES.APPLY, ACCESS_USAGES.DEPLOY]],
-    [ACCESS_PROVIDERS.VOLCENGINE, "provider.volcengine", "/imgs/providers/volcengine.svg", [ACCESS_USAGES.APPLY, ACCESS_USAGES.DEPLOY]],
-    [ACCESS_PROVIDERS.JDCLOUD, "provider.jdcloud", "/imgs/providers/jdcloud.svg", [ACCESS_USAGES.APPLY, ACCESS_USAGES.DEPLOY]],
-    [ACCESS_PROVIDERS.AWS, "provider.aws", "/imgs/providers/aws.svg", [ACCESS_USAGES.APPLY, ACCESS_USAGES.DEPLOY]],
-    [ACCESS_PROVIDERS.AZURE, "provider.azure", "/imgs/providers/azure.svg", [ACCESS_USAGES.APPLY, ACCESS_USAGES.DEPLOY]],
-    [ACCESS_PROVIDERS.GCORE, "provider.gcore", "/imgs/providers/gcore.png", [ACCESS_USAGES.APPLY, ACCESS_USAGES.DEPLOY]],
+    [ACCESS_PROVIDERS.LOCAL, "provider.local", "/imgs/providers/local.svg", [ACCESS_USAGES.HOSTING]],
+    [ACCESS_PROVIDERS.SSH, "provider.ssh", "/imgs/providers/ssh.svg", [ACCESS_USAGES.HOSTING]],
+    [ACCESS_PROVIDERS.WEBHOOK, "provider.webhook", "/imgs/providers/webhook.svg", [ACCESS_USAGES.HOSTING, ACCESS_USAGES.NOTIFICATION]],
+    [ACCESS_PROVIDERS.KUBERNETES, "provider.kubernetes", "/imgs/providers/kubernetes.svg", [ACCESS_USAGES.HOSTING]],

-    [ACCESS_PROVIDERS.QINIU, "provider.qiniu", "/imgs/providers/qiniu.svg", [ACCESS_USAGES.DEPLOY]],
-    [ACCESS_PROVIDERS.UPYUN, "provider.upyun", "/imgs/providers/upyun.svg", [ACCESS_USAGES.DEPLOY]],
-    [ACCESS_PROVIDERS.BAISHAN, "provider.baishan", "/imgs/providers/baishan.png", [ACCESS_USAGES.DEPLOY]],
-    [ACCESS_PROVIDERS.DOGECLOUD, "provider.dogecloud", "/imgs/providers/dogecloud.png", [ACCESS_USAGES.DEPLOY]],
-    [ACCESS_PROVIDERS.BYTEPLUS, "provider.byteplus", "/imgs/providers/byteplus.svg", [ACCESS_USAGES.DEPLOY]],
-    [ACCESS_PROVIDERS.UCLOUD, "provider.ucloud", "/imgs/providers/ucloud.svg", [ACCESS_USAGES.DEPLOY]],
-    [ACCESS_PROVIDERS.SAFELINE, "provider.safeline", "/imgs/providers/safeline.svg", [ACCESS_USAGES.DEPLOY]],
-    [ACCESS_PROVIDERS["1PANEL"], "provider.1panel", "/imgs/providers/1panel.svg", [ACCESS_USAGES.DEPLOY]],
-    [ACCESS_PROVIDERS.BAOTAPANEL, "provider.baotapanel", "/imgs/providers/baotapanel.svg", [ACCESS_USAGES.DEPLOY]],
-    [ACCESS_PROVIDERS.CACHEFLY, "provider.cachefly", "/imgs/providers/cachefly.png", [ACCESS_USAGES.DEPLOY]],
-    [ACCESS_PROVIDERS.CDNFLY, "provider.cdnfly", "/imgs/providers/cdnfly.png", [ACCESS_USAGES.DEPLOY]],
-    [ACCESS_PROVIDERS.EDGIO, "provider.edgio", "/imgs/providers/edgio.svg", [ACCESS_USAGES.DEPLOY]],
+    [ACCESS_PROVIDERS.ALIYUN, "provider.aliyun", "/imgs/providers/aliyun.svg", [ACCESS_USAGES.DNS, ACCESS_USAGES.HOSTING]],
+    [ACCESS_PROVIDERS.TENCENTCLOUD, "provider.tencentcloud", "/imgs/providers/tencentcloud.svg", [ACCESS_USAGES.DNS, ACCESS_USAGES.HOSTING]],
+    [ACCESS_PROVIDERS.BAIDUCLOUD, "provider.baiducloud", "/imgs/providers/baiducloud.svg", [ACCESS_USAGES.DNS, ACCESS_USAGES.HOSTING]],
+    [ACCESS_PROVIDERS.HUAWEICLOUD, "provider.huaweicloud", "/imgs/providers/huaweicloud.svg", [ACCESS_USAGES.DNS, ACCESS_USAGES.HOSTING]],
+    [ACCESS_PROVIDERS.VOLCENGINE, "provider.volcengine", "/imgs/providers/volcengine.svg", [ACCESS_USAGES.DNS, ACCESS_USAGES.HOSTING]],
+    [ACCESS_PROVIDERS.JDCLOUD, "provider.jdcloud", "/imgs/providers/jdcloud.svg", [ACCESS_USAGES.DNS, ACCESS_USAGES.HOSTING]],
+    [ACCESS_PROVIDERS.AWS, "provider.aws", "/imgs/providers/aws.svg", [ACCESS_USAGES.DNS, ACCESS_USAGES.HOSTING]],
+    [ACCESS_PROVIDERS.AZURE, "provider.azure", "/imgs/providers/azure.svg", [ACCESS_USAGES.DNS, ACCESS_USAGES.HOSTING]],
+    [ACCESS_PROVIDERS.GCORE, "provider.gcore", "/imgs/providers/gcore.png", [ACCESS_USAGES.DNS, ACCESS_USAGES.HOSTING]],

-    [ACCESS_PROVIDERS.CLOUDFLARE, "provider.cloudflare", "/imgs/providers/cloudflare.svg", [ACCESS_USAGES.APPLY]],
-    [ACCESS_PROVIDERS.CLOUDNS, "provider.cloudns", "/imgs/providers/cloudns.png", [ACCESS_USAGES.APPLY]],
-    [ACCESS_PROVIDERS.DESEC, "provider.desec", "/imgs/providers/desec.svg", [ACCESS_USAGES.APPLY]],
-    [ACCESS_PROVIDERS.DNSLA, "provider.dnsla", "/imgs/providers/dnsla.svg", [ACCESS_USAGES.APPLY]],
-    [ACCESS_PROVIDERS.DYNV6, "provider.dynv6", "/imgs/providers/dynv6.svg", [ACCESS_USAGES.APPLY]],
-    [ACCESS_PROVIDERS.GNAME, "provider.gname", "/imgs/providers/gname.png", [ACCESS_USAGES.APPLY]],
-    [ACCESS_PROVIDERS.GODADDY, "provider.godaddy", "/imgs/providers/godaddy.svg", [ACCESS_USAGES.APPLY]],
-    [ACCESS_PROVIDERS.NAMECHEAP, "provider.namecheap", "/imgs/providers/namecheap.svg", [ACCESS_USAGES.APPLY]],
-    [ACCESS_PROVIDERS.NAMEDOTCOM, "provider.namedotcom", "/imgs/providers/namedotcom.svg", [ACCESS_USAGES.APPLY]],
-    [ACCESS_PROVIDERS.NAMESILO, "provider.namesilo", "/imgs/providers/namesilo.svg", [ACCESS_USAGES.APPLY]],
-    [ACCESS_PROVIDERS.NS1, "provider.ns1", "/imgs/providers/ns1.svg", [ACCESS_USAGES.APPLY]],
-    [ACCESS_PROVIDERS.PORKBUN, "provider.porkbun", "/imgs/providers/porkbun.svg", [ACCESS_USAGES.APPLY]],
-    [ACCESS_PROVIDERS.VERCEL, "provider.vercel", "/imgs/providers/vercel.svg", [ACCESS_USAGES.APPLY]],
-    [ACCESS_PROVIDERS.CMCCCLOUD, "provider.cmcccloud", "/imgs/providers/cmcccloud.svg", [ACCESS_USAGES.APPLY]],
-    [ACCESS_PROVIDERS.RAINYUN, "provider.rainyun", "/imgs/providers/rainyun.svg", [ACCESS_USAGES.APPLY]],
-    [ACCESS_PROVIDERS.WESTCN, "provider.westcn", "/imgs/providers/westcn.svg", [ACCESS_USAGES.APPLY]],
-    [ACCESS_PROVIDERS.POWERDNS, "provider.powerdns", "/imgs/providers/powerdns.svg", [ACCESS_USAGES.APPLY]],
-    [ACCESS_PROVIDERS.ACMEHTTPREQ, "provider.acmehttpreq", "/imgs/providers/acmehttpreq.svg", [ACCESS_USAGES.APPLY]],
+    [ACCESS_PROVIDERS.QINIU, "provider.qiniu", "/imgs/providers/qiniu.svg", [ACCESS_USAGES.HOSTING]],
+    [ACCESS_PROVIDERS.UPYUN, "provider.upyun", "/imgs/providers/upyun.svg", [ACCESS_USAGES.HOSTING]],
+    [ACCESS_PROVIDERS.BAISHAN, "provider.baishan", "/imgs/providers/baishan.png", [ACCESS_USAGES.HOSTING]],
+    [ACCESS_PROVIDERS.DOGECLOUD, "provider.dogecloud", "/imgs/providers/dogecloud.png", [ACCESS_USAGES.HOSTING]],
+    [ACCESS_PROVIDERS.BYTEPLUS, "provider.byteplus", "/imgs/providers/byteplus.svg", [ACCESS_USAGES.HOSTING]],
+    [ACCESS_PROVIDERS.UCLOUD, "provider.ucloud", "/imgs/providers/ucloud.svg", [ACCESS_USAGES.HOSTING]],
+    [ACCESS_PROVIDERS.SAFELINE, "provider.safeline", "/imgs/providers/safeline.svg", [ACCESS_USAGES.HOSTING]],
+    [ACCESS_PROVIDERS["1PANEL"], "provider.1panel", "/imgs/providers/1panel.svg", [ACCESS_USAGES.HOSTING]],
+    [ACCESS_PROVIDERS.BAOTAPANEL, "provider.baotapanel", "/imgs/providers/baotapanel.svg", [ACCESS_USAGES.HOSTING]],
+    [ACCESS_PROVIDERS.CACHEFLY, "provider.cachefly", "/imgs/providers/cachefly.png", [ACCESS_USAGES.HOSTING]],
+    [ACCESS_PROVIDERS.CDNFLY, "provider.cdnfly", "/imgs/providers/cdnfly.png", [ACCESS_USAGES.HOSTING]],
+    [ACCESS_PROVIDERS.EDGIO, "provider.edgio", "/imgs/providers/edgio.svg", [ACCESS_USAGES.HOSTING]],
+
+    [ACCESS_PROVIDERS.CLOUDFLARE, "provider.cloudflare", "/imgs/providers/cloudflare.svg", [ACCESS_USAGES.DNS]],
+    [ACCESS_PROVIDERS.CLOUDNS, "provider.cloudns", "/imgs/providers/cloudns.png", [ACCESS_USAGES.DNS]],
+    [ACCESS_PROVIDERS.DESEC, "provider.desec", "/imgs/providers/desec.svg", [ACCESS_USAGES.DNS]],
+    [ACCESS_PROVIDERS.DNSLA, "provider.dnsla", "/imgs/providers/dnsla.svg", [ACCESS_USAGES.DNS]],
+    [ACCESS_PROVIDERS.DYNV6, "provider.dynv6", "/imgs/providers/dynv6.svg", [ACCESS_USAGES.DNS]],
+    [ACCESS_PROVIDERS.GNAME, "provider.gname", "/imgs/providers/gname.png", [ACCESS_USAGES.DNS]],
+    [ACCESS_PROVIDERS.GODADDY, "provider.godaddy", "/imgs/providers/godaddy.svg", [ACCESS_USAGES.DNS]],
+    [ACCESS_PROVIDERS.NAMECHEAP, "provider.namecheap", "/imgs/providers/namecheap.svg", [ACCESS_USAGES.DNS]],
+    [ACCESS_PROVIDERS.NAMEDOTCOM, "provider.namedotcom", "/imgs/providers/namedotcom.svg", [ACCESS_USAGES.DNS]],
+    [ACCESS_PROVIDERS.NAMESILO, "provider.namesilo", "/imgs/providers/namesilo.svg", [ACCESS_USAGES.DNS]],
+    [ACCESS_PROVIDERS.NS1, "provider.ns1", "/imgs/providers/ns1.svg", [ACCESS_USAGES.DNS]],
+    [ACCESS_PROVIDERS.PORKBUN, "provider.porkbun", "/imgs/providers/porkbun.svg", [ACCESS_USAGES.DNS]],
+    [ACCESS_PROVIDERS.VERCEL, "provider.vercel", "/imgs/providers/vercel.svg", [ACCESS_USAGES.DNS]],
+    [ACCESS_PROVIDERS.CMCCCLOUD, "provider.cmcccloud", "/imgs/providers/cmcccloud.svg", [ACCESS_USAGES.DNS]],
+    [ACCESS_PROVIDERS.RAINYUN, "provider.rainyun", "/imgs/providers/rainyun.svg", [ACCESS_USAGES.DNS]],
+    [ACCESS_PROVIDERS.WESTCN, "provider.westcn", "/imgs/providers/westcn.svg", [ACCESS_USAGES.DNS]],
+    [ACCESS_PROVIDERS.POWERDNS, "provider.powerdns", "/imgs/providers/powerdns.svg", [ACCESS_USAGES.DNS]],
+    [ACCESS_PROVIDERS.ACMEHTTPREQ, "provider.acmehttpreq", "/imgs/providers/acmehttpreq.svg", [ACCESS_USAGES.DNS]],
+
+    [ACCESS_PROVIDERS.LETSENCRYPT, "provider.letsencrypt", "/imgs/providers/letsencrypt.svg", [ACCESS_USAGES.CA]],
+    [ACCESS_PROVIDERS.LETSENCRYPTSTAGING, "provider.letsencryptstaging", "/imgs/providers/letsencrypt.svg", [ACCESS_USAGES.CA]],
+    [ACCESS_PROVIDERS.GOOGLETRUSTSERVICES, "provider.googletrustservices", "/imgs/providers/google.svg", [ACCESS_USAGES.CA]],
+    [ACCESS_PROVIDERS.ZEROSSL, "provider.zerossl", "/imgs/providers/zerossl.svg", [ACCESS_USAGES.CA]],
  ].map((e) => [
    e[0] as string,
    {
--- a/ui/src/domain/settings.ts
+++ b/ui/src/domain/settings.ts
@@ -136,9 +136,9 @@ export const notifyChannelsMap: Map<NotifyChannel["type"], NotifyChannel> = new
 // #region Settings: SSLProvider
 export const SSLPROVIDERS = Object.freeze({
  LETS_ENCRYPT: "letsencrypt",
-  LETS_ENCRYPT_STAGING: "letsencrypt_staging",
+  LETS_ENCRYPT_STAGING: "letsencryptstaging",
  ZERO_SSL: "zerossl",
-  GOOGLE_TRUST_SERVICES: "gts",
+  GOOGLE_TRUST_SERVICES: "googletrustservices",
 } as const);

 export type SSLProviders = (typeof SSLPROVIDERS)[keyof typeof SSLPROVIDERS];
--- a/ui/src/i18n/locales/en/nls.access.json
+++ b/ui/src/i18n/locales/en/nls.access.json
@@ -14,7 +14,11 @@
  "access.props.name": "Name",
  "access.props.provider": "Provider",
  "access.props.provider.usage.dns": "DNS provider",
-  "access.props.provider.usage.host": "Host provider",
+  "access.props.provider.usage.hosting": "Hosting provider",
+  "access.props.provider.usage.ca": "CA",
+  "access.props.provider.usage.notification": "Notification channel",
+  "access.props.ca": "Certificate authority",
+  "access.props.channel": "Notification channel",
  "access.props.created_at": "Created at",
  "access.props.updated_at": "Updated at",

@@ -165,6 +169,12 @@
  "access.form.godaddy_api_secret.label": "GoDaddy API secret",
  "access.form.godaddy_api_secret.placeholder": "Please enter GoDaddy API secret",
  "access.form.godaddy_api_secret.tooltip": "For more information, see <a href=\"https://developer.godaddy.com/\" target=\"_blank\">https://developer.godaddy.com/</a>",
+  "access.form.googletrustservices_eab_kid.label": "ACME EAB KID",
+  "access.form.googletrustservices_eab_kid.placeholder": "Please enter ACME EAB KID",
+  "access.form.googletrustservices_eab_kid.tooltip": "For more information, see <a href=\"https://cloud.google.com/certificate-manager/docs/public-ca-tutorial\" target=\"_blank\">https://cloud.google.com/certificate-manager/docs/public-ca-tutorial</a>",
+  "access.form.googletrustservices_eab_hmac_key.label": "ACME EAB HMAC key",
+  "access.form.googletrustservices_eab_hmac_key.placeholder": "Please enter ACME EAB HMAC key",
+  "access.form.googletrustservices_eab_hmac_key.tooltip": "For more information, see <a href=\"https://cloud.google.com/certificate-manager/docs/public-ca-tutorial\" target=\"_blank\">https://cloud.google.com/certificate-manager/docs/public-ca-tutorial</a>",
  "access.form.huaweicloud_access_key_id.label": "Huawei Cloud AccessKeyId",
  "access.form.huaweicloud_access_key_id.placeholder": "Please enter Huawei Cloud AccessKeyId",
  "access.form.huaweicloud_access_key_id.tooltip": "For more information, see <a href=\"https://support.huaweicloud.com/intl/en-us/usermanual-ca/ca_01_0003.html\" target=\"_blank\">https://support.huaweicloud.com/intl/en-us/usermanual-ca/ca_01_0003.html</a>",
@@ -284,5 +294,11 @@
  "access.form.westcn_username.tooltip": "For more information, see <a href=\"https://www.west.cn/CustomerCenter/doc/apiv2.html#12u3001u8eabu4efdu9a8cu8bc10a3ca20id3d12u3001u8eabu4efdu9a8cu8bc13e203ca3e\" target=\"_blank\">https://www.west.cn/CustomerCenter/doc/apiv2.html</a>",
  "access.form.westcn_api_password.label": "West.cn API password",
  "access.form.westcn_api_password.placeholder": "Please enter West.cn API password",
-  "access.form.westcn_api_password.tooltip": "For more information, see <a href=\"https://www.west.cn/CustomerCenter/doc/apiv2.html#12u3001u8eabu4efdu9a8cu8bc10a3ca20id3d12u3001u8eabu4efdu9a8cu8bc13e203ca3e\" target=\"_blank\">https://www.west.cn/CustomerCenter/doc/apiv2.html</a>"
+  "access.form.westcn_api_password.tooltip": "For more information, see <a href=\"https://www.west.cn/CustomerCenter/doc/apiv2.html#12u3001u8eabu4efdu9a8cu8bc10a3ca20id3d12u3001u8eabu4efdu9a8cu8bc13e203ca3e\" target=\"_blank\">https://www.west.cn/CustomerCenter/doc/apiv2.html</a>",
+  "access.form.zerossl_eab_kid.label": "ACME EAB KID",
+  "access.form.zerossl_eab_kid.placeholder": "Please enter ACME EAB KID",
+  "access.form.zerossl_eab_kid.tooltip": "For more information, see <a href=\"https://zerossl.com/documentation/acme/\" target=\"_blank\">https://zerossl.com/documentation/acme/</a>",
+  "access.form.zerossl_eab_hmac_key.label": "ACME EAB HMAC key",
+  "access.form.zerossl_eab_hmac_key.placeholder": "Please enter ACME EAB HMAC key",
+  "access.form.zerossl_eab_hmac_key.tooltip": "For more information, see <a href=\"https://zerossl.com/documentation/acme/\" target=\"_blank\">https://zerossl.com/documentation/acme/</a>"
 }
--- a/ui/src/i18n/locales/en/nls.provider.json
+++ b/ui/src/i18n/locales/en/nls.provider.json
@@ -61,6 +61,7 @@
  "provider.godaddy": "GoDaddy",
  "provider.goedge": "GoEdge",
  "provider.goedge.cdn": "GoEdge - CDN (Content Delivery Network)",
+  "provider.googletrustservices": "Google Trust Services",
  "provider.huaweicloud": "Huawei Cloud",
  "provider.huaweicloud.cdn": "Huawei Cloud - CDN (Content Delivery Network)",
  "provider.huaweicloud.dns": "Huawei Cloud - DNS (Domain Name Service)",
@@ -75,6 +76,8 @@
  "provider.jdcloud.vod": "JD Cloud - VOD (Video on Demand)",
  "provider.kubernetes": "Kubernetes",
  "provider.kubernetes.secret": "Kubernetes - Secret",
+  "provider.letsencrypt": "Let's Encrypt",
+  "provider.letsencryptstaging": "Let's Encrypt Staging Environment",
  "provider.local": "Local deployment",
  "provider.namecheap": "Namecheap",
  "provider.namedotcom": "Name.com",
@@ -121,6 +124,7 @@
  "provider.volcengine.tos": "Volcengine - TOS (Tinder Object Storage)",
  "provider.webhook": "Webhook",
  "provider.westcn": "West.cn",
+  "provider.zerossl": "ZeroSSL",

  "provider.category.all": "All",
  "provider.category.cdn": "CDN",
--- a/ui/src/i18n/locales/en/nls.settings.json
+++ b/ui/src/i18n/locales/en/nls.settings.json
@@ -82,14 +82,14 @@
  "settings.sslprovider.form.zerossl_eab_kid.label": "EAB KID",
  "settings.sslprovider.form.zerossl_eab_kid.placeholder": "Please enter EAB KID",
  "settings.sslprovider.form.zerossl_eab_kid.tooltip": "For more information, see <a href=\"https://zerossl.com/documentation/acme/\" target=\"_blank\">https://zerossl.com/documentation/acme/</a>",
-  "settings.sslprovider.form.zerossl_eab_hmac_key.label": "EAB HMAC Key",
-  "settings.sslprovider.form.zerossl_eab_hmac_key.placeholder": "Please enter EAB HMAC Key",
+  "settings.sslprovider.form.zerossl_eab_hmac_key.label": "EAB HMAC key",
+  "settings.sslprovider.form.zerossl_eab_hmac_key.placeholder": "Please enter EAB HMAC key",
  "settings.sslprovider.form.zerossl_eab_hmac_key.tooltip": "For more information, see <a href=\"https://zerossl.com/documentation/acme/\" target=\"_blank\">https://zerossl.com/documentation/acme/</a>",
  "settings.sslprovider.form.gts_eab_kid.label": "EAB KID",
  "settings.sslprovider.form.gts_eab_kid.placeholder": "Please enter EAB KID",
  "settings.sslprovider.form.gts_eab_kid.tooltip": "For more information, see <a href=\"https://cloud.google.com/certificate-manager/docs/public-ca-tutorial\" target=\"_blank\">https://cloud.google.com/certificate-manager/docs/public-ca-tutorial</a>",
-  "settings.sslprovider.form.gts_eab_hmac_key.label": "EAB HMAC Key",
-  "settings.sslprovider.form.gts_eab_hmac_key.placeholder": "Please enter EAB HMAC Key",
+  "settings.sslprovider.form.gts_eab_hmac_key.label": "EAB HMAC key",
+  "settings.sslprovider.form.gts_eab_hmac_key.placeholder": "Please enter EAB HMAC key",
  "settings.sslprovider.form.gts_eab_hmac_key.tooltip": "For more information, see <a href=\"https://cloud.google.com/certificate-manager/docs/public-ca-tutorial\" target=\"_blank\">https://cloud.google.com/certificate-manager/docs/public-ca-tutorial</a>",

  "settings.persistence.tab": "Persistence",
--- a/ui/src/i18n/locales/zh/nls.access.json
+++ b/ui/src/i18n/locales/zh/nls.access.json
@@ -14,7 +14,11 @@
  "access.props.name": "名称",
  "access.props.provider": "提供商",
  "access.props.provider.usage.dns": "DNS 提供商",
-  "access.props.provider.usage.host": "主机提供商",
+  "access.props.provider.usage.hosting": "主机提供商",
+  "access.props.provider.usage.ca": "证书颁发机构",
+  "access.props.provider.usage.notification": "通知渠道",
+  "access.props.ca": "证书颁发机构",
+  "access.props.channel": "通知渠道",
  "access.props.created_at": "创建时间",
  "access.props.updated_at": "更新时间",

@@ -159,6 +163,12 @@
  "access.form.godaddy_api_secret.label": "GoDaddy API Secret",
  "access.form.godaddy_api_secret.placeholder": "请输入 GoDaddy API Secret",
  "access.form.godaddy_api_secret.tooltip": "这是什么？请参阅 <a href=\"https://developer.godaddy.com/\" target=\"_blank\">https://developer.godaddy.com/</a>",
+  "access.form.googletrustservices_eab_kid.label": "ACME EAB KID",
+  "access.form.googletrustservices_eab_kid.placeholder": "请输入 ACME EAB KID",
+  "access.form.googletrustservices_eab_kid.tooltip": "这是什么？请参阅 <a href=\"https://cloud.google.com/certificate-manager/docs/public-ca-tutorial\" target=\"_blank\">https://cloud.google.com/certificate-manager/docs/public-ca-tutorial</a>",
+  "access.form.googletrustservices_eab_hmac_key.label": "ACME EAB HMAC Key",
+  "access.form.googletrustservices_eab_hmac_key.placeholder": "请输入 ACME EAB HMAC Key",
+  "access.form.googletrustservices_eab_hmac_key.tooltip": "这是什么？请参阅 <a href=\"https://cloud.google.com/certificate-manager/docs/public-ca-tutorial\" target=\"_blank\">https://cloud.google.com/certificate-manager/docs/public-ca-tutorial</a>",
  "access.form.huaweicloud_access_key_id.label": "华为云 AccessKeyId",
  "access.form.huaweicloud_access_key_id.placeholder": "请输入华为云 AccessKeyId",
  "access.form.huaweicloud_access_key_id.tooltip": "这是什么？请参阅 <a href=\"https://support.huaweicloud.com/usermanual-ca/ca_01_0003.html\" target=\"_blank\">https://support.huaweicloud.com/usermanual-ca/ca_01_0003.html</a>",
@@ -284,5 +294,11 @@
  "access.form.westcn_username.tooltip": "这是什么？请参阅 <a href=\"https://www.west.cn/CustomerCenter/doc/apiv2.html#12u3001u8eabu4efdu9a8cu8bc10a3ca20id3d12u3001u8eabu4efdu9a8cu8bc13e203ca3e\" target=\"_blank\">https://www.west.cn/CustomerCenter/doc/apiv2.html</a>",
  "access.form.westcn_api_password.label": "西部数码 API 密码",
  "access.form.westcn_api_password.placeholder": "请输入西部数码 API 密码",
-  "access.form.westcn_api_password.tooltip": "这是什么？请参阅 <a href=\"https://www.west.cn/CustomerCenter/doc/apiv2.html#12u3001u8eabu4efdu9a8cu8bc10a3ca20id3d12u3001u8eabu4efdu9a8cu8bc13e203ca3e\" target=\"_blank\">https://www.west.cn/CustomerCenter/doc/apiv2.html</a>"
+  "access.form.westcn_api_password.tooltip": "这是什么？请参阅 <a href=\"https://www.west.cn/CustomerCenter/doc/apiv2.html#12u3001u8eabu4efdu9a8cu8bc10a3ca20id3d12u3001u8eabu4efdu9a8cu8bc13e203ca3e\" target=\"_blank\">https://www.west.cn/CustomerCenter/doc/apiv2.html</a>",
+  "access.form.zerossl_eab_kid.label": "ACME EAB KID",
+  "access.form.zerossl_eab_kid.placeholder": "请输入 ACME EAB KID",
+  "access.form.zerossl_eab_kid.tooltip": "这是什么？请参阅 <a href=\"https://zerossl.com/documentation/acme/\" target=\"_blank\">https://zerossl.com/documentation/acme/</a>",
+  "access.form.zerossl_eab_hmac_key.label": "ACME EAB HMAC Key",
+  "access.form.zerossl_eab_hmac_key.placeholder": "请输入 ACME EAB HMAC Key",
+  "access.form.zerossl_eab_hmac_key.tooltip": "这是什么？请参阅 <a href=\"https://zerossl.com/documentation/acme/\" target=\"_blank\">https://zerossl.com/documentation/acme/</a>"
 }
--- a/ui/src/i18n/locales/zh/nls.provider.json
+++ b/ui/src/i18n/locales/zh/nls.provider.json
@@ -61,6 +61,7 @@
  "provider.godaddy": "GoDaddy",
  "provider.goedge": "GoEdge",
  "provider.goedge.cdn": "GoEdge - 内容分发网络 CDN",
+  "provider.googletrustservices": "Google Trust Services",
  "provider.huaweicloud": "华为云",
  "provider.huaweicloud.cdn": "华为云 - 内容分发网络 CDN",
  "provider.huaweicloud.dns": "华为云 - 云解析 DNS",
@@ -75,11 +76,13 @@
  "provider.jdcloud.vod": "京东云 - 视频点播",
  "provider.kubernetes": "Kubernetes",
  "provider.kubernetes.secret": "Kubernetes - Secret",
+  "provider.letsencrypt": "Let's Encrypt",
+  "provider.letsencryptstaging": "Let's Encrypt 测试环境",
  "provider.local": "本地部署",
  "provider.namecheap": "Namecheap",
  "provider.namedotcom": "Name.com",
  "provider.namesilo": "NameSilo",
-  "provider.ns1": "NS1（IBM NS1 Connect）",
+  "provider.ns1": "NS1 (IBM NS1 Connect)",
  "provider.porkbun": "Porkbun",
  "provider.powerdns": "PowerDNS",
  "provider.qiniu": "七牛云",
@@ -121,6 +124,7 @@
  "provider.volcengine.tos": "火山引擎 - 对象存储 TOS",
  "provider.webhook": "Webhook",
  "provider.westcn": "西部数码",
+  "provider.zerossl": "ZeroSSL",

  "provider.category.all": "全部",
  "provider.category.cdn": "CDN",
--- a/ui/src/pages/settings/SettingsSSLProvider.tsx
+++ b/ui/src/pages/settings/SettingsSSLProvider.tsx
@@ -317,28 +317,28 @@ const SettingsSSLProvider = () => {
          <Form.Item className="mb-2" name="provider" label={t("settings.sslprovider.form.provider.label")}>
            <CheckCard.Group className="w-full" onChange={(value) => setProviderType(value as SSLProviders)}>
              <CheckCard
-                avatar={<img src={"/imgs/acme/letsencrypt.svg"} className="size-8" />}
+                avatar={<img src={"/imgs/providers/letsencrypt.svg"} className="size-8" />}
                size="small"
                title={t("settings.sslprovider.form.provider.option.letsencrypt.label")}
                description="letsencrypt.org"
                value={SSLPROVIDERS.LETS_ENCRYPT}
              />
              <CheckCard
-                avatar={<img src={"/imgs/acme/letsencrypt.svg"} className="size-8" />}
+                avatar={<img src={"/imgs/providers/letsencrypt.svg"} className="size-8" />}
                size="small"
                title={t("settings.sslprovider.form.provider.option.letsencrypt_staging.label")}
                description="letsencrypt.org"
                value={SSLPROVIDERS.LETS_ENCRYPT_STAGING}
              />
              <CheckCard
-                avatar={<img src={"/imgs/acme/zerossl.svg"} className="size-8" />}
+                avatar={<img src={"/imgs/providers/zerossl.svg"} className="size-8" />}
                size="small"
                title={t("settings.sslprovider.form.provider.option.zerossl.label")}
                description="zerossl.com"
                value={SSLPROVIDERS.ZERO_SSL}
              />
              <CheckCard
-                avatar={<img src={"/imgs/acme/google.svg"} className="size-8" />}
+                avatar={<img src={"/imgs/providers/google.svg"} className="size-8" />}
                size="small"
                title={t("settings.sslprovider.form.provider.option.gts.label")}
                description="pki.goog"