feat: umfangreiches UI+API-Polish (v1.1.36–1.1.42)

Backend:
- Audit-Log: Search-Endpoint mit ILIKE-Filter (actor/action/subject/date)
- NTP: /ntp/status via chronyc tracking (Stratum, Offset, Quelle)
- System: /service-restart mit Allowlist (haproxy/squid/unbound/chrony/scheduler)
- Domain-Response-Headers + Rate-Limit (Migration 0024)
- Join-Tokens (Migration 0025), Cluster-mTLS, Aggregator-Fan-Out
- apt-Service für Update-Banner (apt-get update + Versionsprüfung)
- Backup-Retry mit exponential backoff (retry_apt 3×)
- publish.sh fail-fast + cleanup-old.sh (max 10 Versionen)

Frontend:
- Audit-Log-Page (/audit) mit Filter + Pagination
- ErrorBoundary an React-Root + Vite build-target festgenagelt (iOS 15+)
- Storage-Schema-Stamp: auto-wipe bei Versions-Mismatch (blank-page-Fix)
- EmptyState-Komponente überall ausgerollt
- SSL: Aggregate-Karte (total/expiring/expired/errors)
- Backups: Aggregate-Karte (letzter Backup/Größe/Fehlschläge 24h) + Backup-Now
- NTP: Sync-Status-Karte (chronyc tracking live)
- Domains: Backend-UP/DOWN-Chip aus HAProxy-Stats
- Backends: HAProxy-Status-Spalte (UP/DEGRADED/DOWN)
- Settings: Service-Neustart-Karte (haproxy/squid/unbound/chrony/scheduler)
- Settings: Upgrade-Status-Card, Wartungsmodus, Auto-Update, Retention
- Dashboard: Recent-Alerts, Cluster-Health, License-Chip, Onboarding-Hint
- System-Regeln im Firewall als eigener Tab

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

management-ui/src/pages/Wireguard/Clients.tsx

@@ -4,12 +4,13 @@ import {
   Row, Select, Switch, Tag, Typography, message,
 } from 'antd'
 import type { ColumnsType } from 'antd/es/table'
-import { KeyOutlined, PlusOutlined } from '@ant-design/icons'
+import { KeyOutlined, PlusOutlined, ThunderboltOutlined } from '@ant-design/icons'
 import { useMutation, useQuery, useQueryClient } from '@tanstack/react-query'
 import { useTranslation } from 'react-i18next'
 
 import apiClient, { isEnvelope } from '../../api/client'
 import DataTable from '../../components/DataTable'
+import EmptyState from '../../components/EmptyState'
 import ActionButtons from '../../components/ActionButtons'
 import StatusDot from '../../components/StatusDot'
 import type { WGInterface } from './types'
@@ -113,6 +114,14 @@ export default function ClientsTab() {
     },
   ]
 
+  const openCreate = () => {
+    setCreating(true); form.resetFields()
+    form.setFieldsValue({
+      allowed_ips: '0.0.0.0/0,::/0', persistent_keepalive: 25,
+      role: 'wan', active: true, generate_keypair: true,
+    })
+  }
+
   return (
     <>
       <Alert
@@ -127,16 +136,22 @@ export default function ClientsTab() {
         dataSource={clients ?? []}
         columns={cols}
         extraActions={
-          <Button type="primary" icon={<PlusOutlined />} onClick={() => {
-            setCreating(true); form.resetFields()
-            form.setFieldsValue({
-              allowed_ips: '0.0.0.0/0,::/0', persistent_keepalive: 25,
-              role: 'wan', active: true, generate_keypair: true,
-            })
-          }}>
+          <Button type="primary" icon={<PlusOutlined />} onClick={openCreate}>
             {t('wg.iface.addClient')}
           </Button>
         }
+        emptyContent={
+          <EmptyState
+            icon={<ThunderboltOutlined />}
+            title={t('wg.iface.emptyClientTitle')}
+            description={t('wg.iface.emptyClientDesc')}
+            action={
+              <Button type="primary" icon={<PlusOutlined />} onClick={openCreate}>
+                {t('wg.iface.addClient')}
+              </Button>
+            }
+          />
+        }
       />
 
       <Modal