Add comprehensive documentation for CLICD features and operations

- Introduced Container Management documentation covering lifecycle operations, resource management, and console access.
- Added Dashboard documentation detailing metrics and related APIs.
- Created Host Report documentation summarizing host environment and resource status.
- Included Image Management documentation for template handling and management actions.
- Documented Networking and Routing features including NAT4 and IPv6 management.
- Added Security Alerts documentation outlining alert scenarios and API usage.
- Created Snapshot Management documentation for snapshot operations and scheduling.
- Documented Sub-user management for granting access to specific containers.
- Added Configuration guide detailing runtime settings and security recommendations.
- Created Installation guide for setting up CLICD with requirements and steps.
- Added Introduction and Quick Start guides for new users.
- Documented Upgrade process with version checking and pre-upgrade checklist.
- Created Deployment guide for service exposure and firewall recommendations.
- Added FAQ section addressing common questions and concerns.
- Documented Troubleshooting steps for common issues encountered.

docs/en/guide/configuration.md

@@ -0,0 +1,30 @@
+# Configuration
+
+After installation, CLICD runs as a systemd service. Runtime configuration and the database are stored locally on the host. The exact path may vary with installer options, but the default installation should mainly be checked under `/root/.clicd/`.
+
+## Common Settings
+
+| Setting | Description |
+| --- | --- |
+| Web port | Defaults to `8999`, listening on `0.0.0.0:8999`. |
+| Administrator account | Used to log in to the web panel and manage API keys. |
+| Database | SQLite storage for container metadata, sub-users, audit logs, API keys, and more. |
+| NAT port range | Used for random ports and port mapping allocation. |
+| IPv6 prefixes | Used when the host has routable IPv6 prefixes. |
+| Security alerts | Policies such as automatic shutdown can be configured. |
+
+## Service Commands
+
+```bash
+systemctl status clicd
+systemctl restart clicd
+journalctl -u clicd -n 100 --no-pager
+```
+
+## Security Recommendations
+
+- Do not expose the web panel directly to untrusted networks.
+- Use a strong administrator password and rotate it regularly.
+- Split API keys by purpose and avoid long-lived full-access keys.
+- WebSSH and WebVNC tickets are short-lived credentials and should not be written to logs or shared publicly.
+- Do not paste real IPs, passwords, API keys, or tickets into public docs, screenshots, or support tickets.

docs/en/guide/installation.md

@@ -0,0 +1,46 @@
+# Installation
+
+CLICD provides a one-line installer. By default, it installs the latest version from GitHub Releases. You can also pin a specific version with an environment variable.
+
+## Requirements
+
+- Linux x86_64 host.
+- Root privileges.
+- systemd.
+- Network access to GitHub Release downloads.
+- LXC runtime support if you want to use LXC.
+- KVM virtualization enabled with libvirt/QEMU installed if you want to use KVM.
+
+## Install the Latest Version
+
+```bash
+curl -fsSL https://raw.githubusercontent.com/MengMengCode/CLICD/main/install.sh | sudo sh
+```
+
+The script defaults to `CLICD_VERSION=latest`, which downloads `clicd-linux-amd64.tar.gz` from `releases/latest`.
+
+## Install a Specific Version
+
+```bash
+curl -fsSL https://raw.githubusercontent.com/MengMengCode/CLICD/main/install.sh | sudo CLICD_VERSION=v1.1.6 sh
+```
+
+Replace `v1.1.6` with the release tag you want to install.
+
+## Open the Panel
+
+After installation, open:
+
+```text
+http://YOUR_SERVER_IP:8999
+```
+
+Use the administrator credentials printed by the installer for the first login. In production, restrict access at the firewall or reverse proxy layer and change the default username and password as soon as possible.
+
+## Uninstall
+
+```bash
+curl -fsSL https://raw.githubusercontent.com/MengMengCode/CLICD/main/install.sh | sudo sh -s -- uninstall
+```
+
+Before uninstalling, decide whether you need to keep containers, image cache, database files, or configuration files.

docs/en/guide/introduction.md

@@ -0,0 +1,29 @@
+# Introduction
+
+CLICD is a lightweight virtualization management panel for LXC and KVM. It brings common host operations into a web console and CLI, making it suitable for small VPS nodes, dedicated servers, and scenarios where container access needs to be distributed in batches.
+
+## Core Capabilities
+
+- Manage LXC containers and KVM virtual machines.
+- Create, start, stop, restart, reinstall, and delete containers.
+- Configure CPU, memory, disk, traffic limits, and expiration time.
+- Manage NAT4 port mappings, public IPv4 assignment, and public IPv6 assignment when the host network supports it.
+- Open WebSSH or WebVNC from the browser.
+- Manage image downloads, enablement, and local cache.
+- Create, restore, and delete snapshots, plus scheduled snapshots and quotas.
+- Generate security alerts based on connection behavior and keep audit logs.
+- Create sub-user access links for specific containers.
+- Integrate automation through API keys and `/api/v1`.
+
+## Use Cases
+
+- Quickly allocate multiple Linux containers on one host.
+- Give users temporary access to a container console, SSH, VNC, or NAT port management.
+- Automate container creation, resource changes, password resets, or resource cleanup through the API.
+- Use a panel that is clearer than pure CLI workflows without becoming a heavy platform.
+
+## Tech Stack
+
+- Backend: Go, `net/http`, SQLite, systemd, LXC, KVM/libvirt, cgroup v2, iptables, conntrack.
+- Frontend: React, TypeScript, Vite, Tailwind CSS, lucide-react, xterm.js, noVNC.
+- Release: GitHub Actions builds Linux AMD64 release artifacts. The installer fetches the latest release by default.

docs/en/guide/quick-start.md

@@ -0,0 +1,36 @@
+# Quick Start
+
+This is a common path from a fresh installation to your first container.
+
+## 1. Log In
+
+Open `http://YOUR_SERVER_IP:8999` and sign in with the administrator account.
+
+After entering the panel, check:
+
+- Whether the dashboard shows host resources.
+- Whether Image Management can list templates.
+- Whether NAT and IPv6 status in Routing match your host network.
+
+## 2. Download an Image
+
+Open Image Management, choose a template, and download it. On small hosts, lightweight images such as Alpine or Debian are a good first choice.
+
+Image downloads run asynchronously. You can watch progress in the task queue.
+
+## 3. Create a Container
+
+Open Container Management and click Create:
+
+- Select virtualization type and template.
+- Set CPU, memory, and disk.
+- Set traffic limits and expiration time.
+- If external access is required, add NAT port mappings or assign IPv6 from the container details page after creation.
+
+## 4. Open a Terminal
+
+After the container is created, open WebSSH from the details page. KVM virtual machines can use WebVNC for console access.
+
+## 5. Share with a Sub-user
+
+If another user needs to manage a container, create an access link in Sub-user Management. The sub-user only sees authorized containers and is limited by the operation scope configured by the administrator.

docs/en/guide/upgrade.md

@@ -0,0 +1,43 @@
+# Upgrade
+
+The CLICD installer and CLI are built around GitHub Release artifacts. Before upgrading, check the current version and back up configuration and database files.
+
+## Check the Version
+
+The current version is shown at the bottom of the web panel sidebar. You can also run:
+
+```bash
+curl http://127.0.0.1:8999/api/version
+```
+
+Example response:
+
+```json
+{
+  "success": true,
+  "data": {
+    "version": "1.1.6"
+  }
+}
+```
+
+## Upgrade with the Installer
+
+The installer uses the latest release by default:
+
+```bash
+curl -fsSL https://raw.githubusercontent.com/MengMengCode/CLICD/main/install.sh | sudo sh
+```
+
+Install a specific version:
+
+```bash
+curl -fsSL https://raw.githubusercontent.com/MengMengCode/CLICD/main/install.sh | sudo CLICD_VERSION=v1.1.6 sh
+```
+
+## Pre-upgrade Checklist
+
+- Back up `/root/.clicd/` or the actual configuration directory.
+- Make sure no critical tasks are currently running.
+- If an image download or snapshot restore is running, wait for it to finish first.
+- After upgrading, check `systemctl status clicd` and the version shown in the web panel.