Skip to content

Latest commit

 

History

History
108 lines (94 loc) · 5.33 KB

CHANGELOG.md

File metadata and controls

108 lines (94 loc) · 5.33 KB
Raw

Changelog

All notable changes to this project will be documented in this file.

CURRENT - Development

Features

  • Added read only/demo mode function if DEMO_MODE is set to yes in hestia.conf.
  • Added php-imagick module to installer and upgrade scripts.
  • Added recidive filter function to fail2ban.
  • Refactored MultiPHP functionality. MultiPHP will be enabled by default on new installations.
  • Allowed admin user to add or remove PHP versions from webui (edit/server->"Web Server" page).
  • Extended v-extract-fs-archive to allow archive testing and extracting only specific paths (for tar)

Bugfixes

  • Added a detection of web root for add .well-known ACME challenge.
  • Reworked Let's Encrypt ACME staging to use hestia conform standard.
  • Fixed if condition, use Nginx for Let's Encrypt ACME request if present.
  • Reworked v-add-sys-ip, removed CentOS/Red Hat support and reworked conditions.
  • Enabled HSTS and force SSL on v-add-letsencrypt-host.
  • Prevented login action for webmail in list user view.
  • Removed hardcoded mail in HELO data (cosmetic fix).
  • Fixed SFTP server validation check, thanks to @dbannik!
  • Implemented warning message for creating web domains under admin user.
  • v-generate-api-key: Fixed wrong quotes used for default keys folder location.
  • Fixed permissions to allow access for FTP users created in web domains under admin account.
  • Check if user home exists before set permission on sftp jail.
  • Fix several security issues, thanks to Andrea Cardaci (https://cardaci.xyz/)
  • Improved input validation on File System operations scripts
  • SecImprove: Cli arguments were glob expanded when written to log file
  • Fixed: Removing web domains would let sftp accounts still configured in sshd
  • SecImprove: File operations in user home folder will be executed as the real user
  • Added a confirmation dialog when deleting user logs (/list/log/)
  • Fixed issue with sftp-jail not working for users restored from backups
  • SecImprove: Improved input validation in multiple cli scripts
  • Performance: Do not load complete notifications list on every page load, reduced load time from over 1sec to under 100ms
  • Performance: Do not resolve ip when listing iptables rules. Server tab could take multiple minutes to load in some cases.
  • Update jQuery to 3.4.1 and adjust includes.
  • Fixed cronjob issue with sftp jail due to missing user.
  • Fixed issue #569 Remote backup hostname would reject ip addr without reverse dns (PTR record).
  • Create a couple of writeable folders in each user home directory (#580).
  • Added gnupg/gnupg2 check to prevent issues with pubkey installation.
  • Fixed nameserver validation on add new user packages.
  • Implement additional debug informations for LE validation, thanks to @shakaran.
  • Do not notify user if the backups are triggered from cronjob.
  • Fixed issue with suspending resources when logged directly as a normal user.

[1.0.6] - 2019-09-24 - Hotfix

Bugfixes

  • Add support for HTTP/2 Let's Encrypt Server.

[1.0.5] - 2019-08-06 - Hotfix

Bugfixes

  • Fix several security issues, thanks to Andrea Cardaci (https://cardaci.xyz/)
  • Rework Let's Encrypt acme staging to use hestia conform standard.
  • Fix if condition, use nginx for Let's Encrypt acme request if present.

1.0.4 - 2019-07-09 - Hotfix

Bugfixes

  • Delayed start of services to prevent restart limit.

1.0.3 - 2019-07-09 - Hotfix

Bugfixes

  • Fixed Let's Encrypt Mail SSL permission issue.

1.0.1 - 2019-06-25

Features

  • Improved support for Let's Encrypt certificate generation.
  • v-add-letsencrypt-host: Added Let's Encrypt support for Control Panel's own SSL.
  • Enabled use of per-domain SSL certificates for inbound and outbound mail services.
  • Consolidated template structure, removing over 50% duplicate code.
  • Re-organised file system structure for domain configuration files.
  • Added the ability to change release branches through the user interface and the command line.
  • v-sys-update-hestia-git: Added the ability to update using Git from the command line.
  • Implemented support for SFTP chroot jails.
  • A newly redesigned user interface which features:
    • A softer color palette which better matches the Hestia Control Panel logo colors.
    • A consolidated overview of domains and other information.
    • Improved navigation paths to make things easier to find.
    • Improved compatibility when viewing the Control Panel interface from a mobile device.
  • Improved handling of mail domain DNS zone values.
  • Enabled OCSP stapling on SSL-enabled web domains.
  • v-change-web-domain-hsts: Enabled support for HTTP Strict Transport Security (HSTS) on SSL.
  • Improved logging and console output during new installations and upgrades.

Bugfixes

  • Fixed issues with HTTP-to-HTTPS redirecton.
  • Fixed an issue where another website would load if browsing to a non-SSL enabled domaing using HTTPS.

1.0.0-190618 - 2019-06-25

Features

Bugfixes

0.9.8-28 - 2019-05-16

Features

  • Implemented force SSL function for web domains.

Bugfixes