Back to Changelog
v1.0.329
Docker-optional legacy PHP discovery and boot self-heal (SH-014), FastCGI phpinfo for legacy PHP, bulletproof SSL auto-issue with preflight and fallback chain, SSH key auth for sub-users, and namespace cleanup.
New Features
5- Docker-optional legacy PHP listing: PHP 5.6-7.4 versions appear in the version selector only when Docker is running and the required shim image is locally present; unavailable versions are hidden instead of failing at switch time.
- SH-014 boot self-heal: on startup, the backend detects drifted legacy PHP shim images and automatically reconciles them to a valid present image, ensuring existing installations continue working after a binary update without manual intervention.
- Legacy PHP phpinfo renders full HTML via FastCGI: a minimal stdlib-only FastCGI client issues phpinfo against the live FPM pool, matching native PHP output; the phpinfo script is written to a random temporary path and deleted immediately; falls back to plain text if the pool is unreachable.
- SSL bulletproof auto-issue: read-only preflight plan, multi-step fallback chain (DNS-01 to HTTP-01 to Cloudflare Origin Certificate), Cloudflare proxy auto-enable for cf_origin strategy, and optional CF auto-management (missing A records and proxy state handled automatically with user consent).
- SSH/SFTP sub-user key-based authentication: secondary users can upload and manage SSH public keys for passwordless login via the panel.
Improvements
3- Docker-aware PHP version switch: backend waits for the FPM socket to become ready before reporting success (8s for native PHP, 45s for Docker shim), eliminating race-condition 502 errors on slower hosts or container cold-starts.
- Services page is now docker-aware: legacy PHP entries reflect actual container availability instead of static configuration presence.
- i18n: SSL cf_origin description text synchronized across 29-language embedded seeds for fresh-install baseline parity; EN slot unchanged.
Bug Fixes
2- Custom SSL upload: resolved permission and key-mismatch errors (USER 403 regression) for Cloudflare-origin proxy mode.
- Namespace isolation toggle-off now performs proper cleanup of residual mount-point artifacts and shows a dependency warning before deactivation.