0.1.0-beta.24

Miglioramenti

• Notification e-mails have a new, cleaner layout. Every notification, the sign-in code and the password reset link share one layout that leads with the affected domain or service. Templates you have not edited follow it on their own, and Settings, Notifications marks the ones you changed and previews them with sample values.
• API reference: how a reseller ACL plan update treats permissions. The API reference now says that a reseller ACL plan update's permissions replace the plan's whole set: a permission left out takes its default value, so an integration reads the plan first and sends its set back with the change. The panel always sends the whole set and is not affected.

Sicurezza

• FTP on AlmaLinux, Rocky Linux and CentOS Stream requires TLS and refuses anonymous logins. New installs on these systems set Pure-FTPd to TLS-only with a certificate and turn anonymous logins off, as Ubuntu and Debian installs already did. A server installed earlier keeps its FTP settings until the three lines in the admin guide are set.
• Deleting a mailbox also removes its webmail address book, identities and settings. A mailbox created later under the same address, by any account, starts with an empty webmail profile instead of the previous owner's.
• A restore keeps database users' privileges as they were. Restoring a database no longer grants ALL PRIVILEGES to users that held narrower rights, such as read-only users.
• The SSH port set in Settings is protected like port 22. The firewall refuses to remove or globally deny the SSH port chosen under Settings, so a rule change cannot lock the operator out.
• Under-attack mode is back in force after a reboot. When the mode is on, the agent puts its packet filter rules back at start; before, a reboot left the panel showing protections that were not in place.
• Values in notification e-mails are shown as text. Markup inside an error message, a suspension reason or release notes is shown as written instead of being interpreted by the mail client.
• Reseller ACL plans are enforced on every client page again. A reseller's plan once more refuses the client features it withholds (file manager, cron, backups and the rest); with the web framework the installer now brings, the check had stopped matching any page.
• Rate-limit rules take effect on Ubuntu and Debian servers. Rate-limit rules are now evaluated ahead of the host firewall, so on Ubuntu and Debian an address that opens more new connections than a rule allows is banned; before, the rules never saw the traffic. A rule counts the new connections one address opens; the server's own traffic and addresses on the firewall whitelist are never counted or banned. On AlmaLinux, Rocky Linux and CentOS Stream a rule no longer counts every packet or bans the server's own loopback address.

Correzioni di bug

• Client dashboard: the phpMyAdmin tile asks for a database when there is none. An account without a database saw 'phpMyAdmin is not available'; the tile now says to create a database first.
• FTP edit dialog sends only what changed. Closing the FTP edit dialog without a change no longer writes an 'FTP account updated' entry to the activity log.
• Webmail no longer shows a Filters screen that cannot connect. Server-side mail filtering is not part of the mail stack, so the Filters screen only reported 'Unable to connect to server'. It is left out of new installs and switched off on existing servers when the agent starts.
• FTP API: an update that repeats the stored values is not logged as a change. The activity log records an FTP update only when a field actually changes, and a new password on its own is recorded as a password change.
• Webmail inbox lists received messages. The panel's security policy stopped the script that fills Roundcube's message list, so the inbox looked empty. Webmail now runs under its own policy on /webmail.
• Nightly backups of large accounts no longer log a false error. Removing the backup's working folder was cut off after 60 seconds and logged 'Async command timed out' although the backup completed; it now has the same time bound as the copy that builds the folder.
• Restoring a backup brings back the addon domain and subdomain sites. A restore now also writes back the folders of the account's addon domains and subdomains that live outside public_html; before, those sites were left as they were.
• A backup schedule's retention prunes only its own backups. With several schedules on one account each keeps its own last runs; one schedule no longer deletes another schedule's backups, locally or on the remote destination.
• Labelled dropdowns are announced by their label. Screen readers name a dropdown by its field label (for example Engine Mode) instead of by its current value.
• Notification e-mails fill in their details again. Service alerts, backup, quota, SSL and migration e-mails no longer show raw placeholders such as {{service_name}}; every event sends its real values.
• The welcome e-mail names the hosting plan. The account-created e-mail shows the name of the plan instead of its internal identifier.
• The firewall notifications API returns every firewall notification again. Integrations that read GET /firewall/notifications (for example through the PHP SDK) receive older firewall notifications again; newer notifications of other kinds no longer push them out of the answer. The panel's own notification bell was not affected.
• Fail2Ban whitelist additions made at the same time are all kept. Two whitelist additions sent at the same moment are now both written to the Fail2Ban configuration; before, one could stay only until the next Fail2Ban restart.
• Rate-limit rules created at the same time are all kept. Creating several rate-limit rules at the same moment no longer loses one of them; before, a rule could answer success, be missing from the list and stay active in the packet filter until the agent restarted.
• Suspending an account takes all of its websites offline. A suspended account's addon domains, subdomains and parked domains now show the suspended page like its main domain; before, only the main domain went offline and the others kept serving. Unsuspending brings back the sites the suspension took offline, and suspending a reseller does the same for its sub-accounts' sites.
• SSL expiry warnings are sent. The administrator and the account owner are warned when a certificate one of the account's sites serves has 14, 7, 3 or 1 days left, once at each step; before, the check looked for a file the panel never writes and no warning was ever sent. A certificate that has already expired is not reported.
• The administrator is told when an account reaches its hourly e-mail limit. When an account's outgoing mail is held back by its hourly sending limit, the administrator gets the Email Limit Exceeded notification within 15 minutes, at most once per account a day; before, the limit was applied but the notification never came.