Back to Changelog
Panel Backend
v1.0.562
VPS Manager (beta), moving domains between accounts, backup low-resource mode, SSL renewals keep subdomains, Docker / Node.js / Python site improvements, webmail and many fixes
New Features
18- VPS Manager (beta, first version): run full Linux servers (Incus system containers) next to your sites. Every VPS has its own users, files, processes, network and resource limits. Please use it only as you need it: it is a beta and problems may occur.
- VPS Manager is installed on demand: ROOT opens VPS Manager and clicks Install, and only then the incus package (6.0.6.1) is downloaded. Servers that never install it are not affected. Before installing, the page shows whether the package and the image server can be reached and how much memory is left for VPSs; a failed install puts the server back to how it was before.
- VPS Manager: create a VPS with a wizard (Ubuntu 22.04 / 24.04 / 26.04, Debian 12 / 13, AlmaLinux 9 / 10, Rocky Linux 9 / 10, Alpine), then start, stop, restart, reinstall and delete it from the panel. Each VPS has Overview, Resources, Network, Security, Startup, Terminal and Files tabs, a serial console, SSH access and root password reset.
- VPS Manager: htop, top and free inside a VPS show the CPU and memory given to that VPS.
- Service plans: new VPS limits (number of VPSs, CPU, memory, disk and more). Some VPS options can only be set by ROOT.
- VPS Manager is also available in the External API (/v1/isolated, /v1/host-resources) and in the panelica command line tool.
- Move a domain to another account (ROOT): a wizard checks everything first and shows what will happen, then moves the site with its files, databases, mailboxes and settings to the new owner, shows live progress and a final report, and rolls back if a step fails. During the move the site shows a maintenance page and incoming mail waits; both continue when the move ends. Changes to that domain are refused until the move has finished.
- Backup low-resource mode: limits how fast a backup may read and write the disk, so websites stay responsive while backups run. Automatic measures the disk once and uses half of its speed; Light, Balanced, High and Custom are also available. It applies to manual and scheduled, full and incremental backups.
- Sites served by Docker, Node.js or Python apps: the visitor's source port reaches the app (X-Real-Port header, next to X-Real-IP).
- Sites served by Docker, Node.js or Python apps: mail client auto-configuration (Thunderbird autoconfig, Outlook autodiscover) can be answered by Panelica. Each domain has a setting in Domain > Email: Automatic (Panelica answers while the domain has a mailbox on this server), always Panelica, or always the app.
- Sites served by Docker, Node.js or Python apps: your own nginx directives can be added in Domain > Web Server > Nginx, for the server block and for inside location / (for example proxy_set_header). If nginx does not accept them, the site keeps working without them.
- Docker: containers with a CPU limit see only their own CPUs in htop, top, getconf and lscpu; services created with compose see their own CPU and memory in htop, top and free.
- Docker templates: the PNLCS template uses panelica/pnlcs-runtime:1.5 and template containers offer "Update to <tag>"; when the image changes, the old image's defaults are not carried over. New community template: TailAdmin Voice Core.
- Domain aliases: an alias gets its own DNS zone and resolves on its own, and an alias can redirect to the main domain.
- Domain edit: new Redirects tab, tab names on one line, Quick Actions as colored tiles with a "Move to another account" tile, and the quick stats show what serves the site.
- Login protection: an account is locked for a while after 15 failed panel logins within 15 minutes from any addresses; addresses that have logged in to that account successfully are not affected and administrators are notified. The three values are in Panel Settings > Rate limit. IP Blocking has a Panel logins tab with every account's login attempts.
- Fail2ban: the SSH jail follows the server's real SSH port, jail limits survive restarts, the IP whitelist reaches every jail, a new web scanner jail and custom jails (ROOT) with a test against a sample line. ModSecurity events show the visitor's IP (IPv6 too), the real time, the browser and all matched rules; the WAF page shows its status and has a bulk mode.
- Languages added from the panel can have a flag, shown in the navbar and on the login page. Updating a language changes only the texts that are sent.
Improvements
14- This is a beta release. Problems may occur: please try it on a server you can watch before relying on it, and tell us about anything that does not work as expected.
- While VPS Manager is installed, panelica-server cannot be rolled back below 1.0.562; the panel explains why.
- Moving domains: domains that run Docker, Laravel, Node.js, Python or Git apps cannot be moved yet. The check lists files that still point to the old account so they can be fixed.
- Site migration and moving domains: after a migration or a move, check every site carefully (pages, mail, databases, SSL, cron jobs). Some manual steps may still be needed after the migration. Please do not ignore problems after a migration and report them to us.
- Backup low-resource mode stays Off on existing servers after this update, so backups run as fast as before; new installations start with Automatic. It can be turned on in Panel Settings > Backup.
- SSL: the panel waits up to 10 minutes for a certificate, so a slow but successful request is no longer reported as failed after 30 seconds. Reissue and Renew list the subdomains that are not on the certificate. The panelica ssl install command works again.
- The server hostname answers on port 443 with the panel's certificate when that certificate is valid and covers the name.
- Sites served by Docker, Node.js or Python apps show a branded page while the app is not running, instead of nginx's default error page.
- Docker: an image that is not on the server is pulled when ROOT creates a container. The manual image box keeps the prefix of the name chosen from the list.
- Webmail (Roundcube): binding a webmail session to the visitor's IP address is a setting in Email Settings > Webmail and is off by default, so users whose address changes (mobile networks, IPv4/IPv6) are no longer logged out. One-click webmail login is more robust and is recorded in the security log.
- Webmail sends mail through its own logged-in connection, and the sender address must belong to the logged-in mailbox (its own address, its aliases and addresses on its domain that are not another mailbox). The same rule for mail programs is a switch in Email Settings > Postfix and is off by default.
- MySQL users are listed and managed by their owner. External API POST /v1/mysql-users creates the account.
- The Developer API reference page is generated from the live list of endpoints (54 categories).
- Translations for every new screen in all 31 languages (panel-i18n 1.0.146).
Bug Fixes
16- Panelica to Panelica site migration now carries DNS records, subdomain names and PHP versions, SSL records and the panel password. When the source server is behind NAT, the migrated DNS records no longer point to the old server.
- DNS on servers behind NAT: subdomains and migrated zones publish the public IP address instead of the private one; template records are no longer written twice during a migration.
- Let's Encrypt: renewals and reissues keep every subdomain that uses the domain's certificate (up to 100 names). Issuing, renewing and reissuing use one list of names; a certificate with fewer names is not installed over a working one while the current one has more than 14 days left; repeated requests for the same certificate are avoided.
- Reissuing SSL, changing the PHP version, web server or cache, and some other actions no longer replace the proxy of a Docker, Node.js or Python site with a PHP site. Sites that were affected before are restored automatically after this update; existing app sites get the new port header and mail settings without other changes.
- Node.js and Python sites can obtain and renew Let's Encrypt certificates again.
- Docker stack backup and restore work end to end: data is restored into the right volume, the project name has a single prefix and the restore always uses the saved project name.
- Docker: when a port cannot be used, the error says why (another program listens on it, or one of the server's own connections holds it).
- Subdomains: one add/edit window on both pages; the document root is never empty and saving no longer moves it.
- Domains: ROOT can create a domain for an account on a second server IP; domain creation errors show the real reason in the panel's language.
- Default mailbox size: a mailbox created without a size (and without a plan default) gets the size shown in the panel (1024 MB by default) in the panel, the API and the CLI; before, the API and CLI used the 10 GB domain quota.
- A missing Roundcube database role, database or tables are created automatically at startup.
- Login: no more logouts when the panel is open in several tabs or when the connection switches between IPv4 and IPv6, and a burst of parallel logins no longer ends the live session.
- File manager: preview shows text files, Edit from the preview loads the file, "Open in Browser" opens the file, rename works in place (F2) and the delete confirmation opened with the Delete key accepts Enter.
- Updates: Reinstall installs the version of the panel's update channel and never one older than the installed version.
- PHP-FPM reload waits until the master process is ready, so a freshly started PHP-FPM is not stopped by the reload; a stopped Postfix is started instead of reloaded.
- ADMIN and USER accounts no longer get access errors on the dashboard, Security Advisor and FTP pages; several dark theme fixes; configuration backups no longer pile up (the newest 5 are kept).