Changelog

Pro features — shipped

• Scheduled automatic backups + remote (S3) storage + retention policy.
• Per-website backup/restore (.tar.gz: source + optional database).
• Web terminal (browser SSH, PTY over WebSocket).
• Firewall (UFW) and cron job management from the panel.
• Brute-force & flood protection: one-click Fail2ban, per-website rate limiting, Cloudflare real-IP restore.
• Multiple users & permissions (admin/viewer) + audit log.
• Multi-server management from one panel (fleet).
• White-label: custom name & logo.
• 2FA (two-factor) for login.
• Buy Pro in-panel via SePay (bank transfer → key issued automatically).
• Webhook alerts for Slack / Discord / HTTP (alongside Telegram & Email).

v0.8.x — 2026-06

• Object Storage (MinIO) (new): one-click install of an S3-compatible MinIO right on the server, create buckets + issue bucket-scoped access keys, enable public-read to serve images over URLs. Engine + 1 bucket on Free, unlimited on Pro. See Object Storage.
• Remote backup upgrades: restore directly from S3/MinIO, retention applied to remote copies too, multipart uploads for large files, and an option to skip TLS verification for self-signed MinIO. See Backup & restore.
• Brute-force & flood protection (new): integrated Fail2ban managed in the panel — one-click protection (sshd + nginx jails), view & unban currently banned IPs; plus per-website rate limiting in the Nginx tab that excludes static assets so normal page loads aren’t wrongly blocked. See Brute-force & flood protection.
• Cloudflare — restore real visitor IP: enable right on the Firewall page so nginx sees the correct visitor IP when sites sit behind Cloudflare — required for rate limiting & Fail2ban to work correctly.
• Upgraded Firewall page: overview tiles, quick common-port chips, rule editing, Critical rule tags (SSH/panel), and merged IPv4/IPv6 rows. See Firewall.

v0.7.x — 2026-06

• Mail Server (new): create @your-domain email right in the panel — wraps docker-mailserver (Postfix + Dovecot + Rspamd). Includes one-click install, DNS helper + automatic DKIM with a per-record check button, preflight (port 25 / PTR / blacklist), mailboxes + quota, aliases, catch-all, one-click Let’s Encrypt SSL and backups (download/restore). Free trial covers 1 domain + 3 mailboxes; relay/smarthost and scheduled/S3 backups are Pro. See Mail Server.

v0.6.x — 2026-06

• File manager is now free (every plan, including Free) and significantly upgraded: pick a scope per website (including WordPress), multi-select to delete/copy/move, drag & drop multi-file upload, zip/unzip, change permissions (chmod), image preview and a line-numbered editor. See File Manager.
• Website caching & speed (free, automatic): WordPress gets full-page caching and keeps serving cached pages during database outages (no cascading failure), a Redis object cache cuts query load for dynamic requests, and database connection isolation prevents one overloaded site from taking down the others. A Clear cache button on the site detail page makes content updates appear instantly. See Performance & Cache.
• Faster static sites: automatic gzip compression and browser caching for images and fonts (long-lived) and CSS/JS (short-lived so in-place edits show up quickly).
• More durable login sessions: no longer logged out after a panel update/restart; brute-force lockouts also persist across restarts.

v0.5.x — 2026-06

• One-command install: auto-installs & configures nginx, Docker, MySQL, certbot, Nixpacks on Ubuntu 22.04+/Debian 12+.
• One-click WordPress: create a WordPress site with MySQL, pre-installed via wp-cli, with database lifecycle on recreate/delete.
• Auto-SSL right after website creation if the domain already points to the server.
• Real multi-source deploy: Git + Nixpacks, Dockerfile, Docker image, static, reverse proxy — health-checked before switching, with rollback.
• Database engines: MySQL/MariaDB/PostgreSQL/Redis (native or Docker), backup/restore, remote servers.
• Website analytics from nginx logs (requests, visitors, top pages, browser/OS, 24h/7d/30d).
• Security hardening: Argon2id (t=3), HttpOnly cookies, HSTS, brute-force throttling, login auditing.
• Settings: system info, theme toggle, password change (revokes other sessions).

v0.1.0 — 2026-06

First release (early access): secure login, real-time monitoring dashboard, website & database management, Telegram/Email alerts, end-to-end licensing (offline Ed25519, 14-day grace).