v1.0.557

Patch Released October 6, 2026

Update reliability: Postfix mail, PHP updates for tenant sites, Update All timing, NAT subdomains

Update backups no longer keep set-uid/set-gid copies, and a rollback restores file ownership. The backup directory is readable by root only.

Applying a Postfix package no longer breaks mail sent by local users and scripts: postdrop and postqueue keep their set-gid group. Servers already affected are repaired at startup.
PHP updates and rollbacks now restart running tenant PHP-FPM pools on the new build. Previously tenant sites kept running the old PHP version until the server was rebooted.
Update All waits for the delayed panel web server restart before touching the next service. An overlapping systemd reload could leave Apache starting for up to 3 minutes.
Servers installed from the release image now see pending nginx, Redis, Roundcube and Postfix updates: installed version labels are corrected from the actual binaries.
The bandwidth service is started again after a Redis update stops it.
On servers behind NAT, subdomain and Docker vhosts no longer bind to a private address that captured traffic for every site and blocked SSL certificate issuance.

All Releases