Historique des mises à jour
Toutes les versions publiées de Vipper et leur contenu.
-
v0.9.5 Dernière version
- Nouveau Audit log, My connections and banned IPs: a Country column (flag and name) now follows the IP address.
- Nouveau SSH keys, webhooks, access rules and banning an IP: creating and editing happen in a modal window.
- Nouveau Bans: the screen shows the currently banned IPs with one tab per jail concerned, a "Ban an IP" button and a "Thresholds by jail" button to edit or reset each jail's thresholds.
-
v0.9.4
- Nouveau Interface: in tables, the actions of a row are grouped in an "Actions" menu (delete at the bottom, with its confirmation). A device's detail page and the webhook list show their tables in tabs.
- Nouveau SSH login banner: a default banner (product name, "By DebPanel", description, site and e-mail) is installed if the server has none; a banner you wrote is never replaced.
-
v0.9.3
- Nouveau Backups: the default rotation now keeps 7 daily, 4 weekly and 12 monthly backups (3 monthly before). Settings already chosen by the administrator do not change.
- Nouveau Command line and API: error codes are aligned with the other DebPanel products (permission_denied, unknown_error). The messages shown in the panels do not change.
-
v0.9.2
- Nouveau Database: the schema now uses numbered, tracked migrations (schema_migrations table). An update applies only the missing migrations, never lets two updates overlap, and refuses to run an older program on a newer database.
- Nouveau No visible change: the first update simply records the current state of the database as the starting point.
-
v0.9.1
- Sécurité Security: the API no longer exposes the firewall. An API token can no longer add or remove panel IP address rules; these actions stay with the admin space and the root shell.
- Nouveau Update: the database is backed up automatically before any update; if the backup fails, the update is abandoned with nothing modified.
- Nouveau Notifications: "quota reached" becomes "quota exceeded" (existing webhook subscriptions and notifications are converted), and two new events appear: new version available (checked daily by a scheduled task) and update failed.
-
v0.9.0
- Nouveau The 16 administration modules shared by every DebPanel product are now present, at the same addresses: backups, firewall, bans (fail2ban), SSH keys, connections, logs, notifications, webhooks and e-mail, scheduled tasks, date and time, message of the day, server settings, updates, administrators, API tokens and profile.
- Nouveau Administrators: create, reset the generated password and delete from the panel (the last administrator cannot be deleted).
- Nouveau Server settings: system information and changing the panels' domain (nginx, self-signed certificate and system name updated, rolled back on failure). "License and updates" becomes "Updates".
- Nouveau Scheduled tasks: managed from the panel (and stored in the database); only administration commands are accepted. Webhooks and e-mail with a delivery queue, an SMTP relay, and in-panel notifications for: quota reached or at 80 %, backup failed, WireGuard down, two-factor authentication turned off, login from a new country, session closed.
- Nouveau My connections: the history of your logins (country, browser) with remote closing of a session; failures and the other spaces' logins stay in the audit log.
- Nouveau Backups: configurable rotation (days, weeks, months) and a nightly copy to another server over SSH.
- Nouveau Also: fail2ban bans and per-jail thresholds, administration SSH keys, logs readable by name, message of the day, date, time zone and time synchronisation.
- Nouveau Update: rsync and openssh-client are installed automatically when missing; the scheduled tasks move to /etc/cron.d/vipper-panel.
-
v0.8.0
- Correctif The web apps no longer use sudo: each talks to its own private socket of a small root service (vipper-broker) that only accepts the commands of its scope. The customer space must also prove, on every action, that a valid login exists for the account it names (a signed token only a correct password can obtain).
- Sécurité The PHP-FPM services are hardened to the maximum: no additional privileges, read-only file system (except sessions and logs), network limited to Unix sockets, and no PHP function able to start a process any more.
- Correctif Fixed: the firewall form and the API stored the visitor's address instead of the typed one for an IP rule (the hidden audit flag had the same name as the rule's).
- Nouveau Update: the service, the units and the pools are installed or rewritten automatically; the apps' sudo rules are removed once the service is listening.
-
v0.7.1
- Sécurité PHP pool hardening: each space (admin, customer, API) is confined to its own folder, the shared code and the logs (open_basedir); PHP's command-execution and network functions are disabled (only proc_open remains, to call vipper); no remote URLs or file uploads; PHP version hidden; safe defaults for session cookies.
- Sécurité Servers already installed get this hardening on update: the configuration is checked by PHP-FPM before it is applied, then reloaded without cutting requests short.
-
v0.7.0
- Nouveau Monthly traffic quota: a package sets a number of MB per month and per account (all its devices together); a device can also have its own quota. When reached, the devices concerned are switched off automatically and start again next month or when the quota is raised. The administrator is alerted at 80 % and when it is reached.
- Nouveau The package prevails: a device's speed can no longer exceed its package's, and a device's allowed-address list now only narrows the package's (it no longer replaces it).
- Nouveau Traffic is collected every minute (instead of every 5 minutes) to keep quota overshoot small; an account's usage survives the deletion of a device.
- Nouveau Customer space: this month's traffic against the quota is shown, with the reason when a device is switched off by the quota.
- Nouveau Update: the new sudo rule (quota command) and the every-minute scheduled job are applied automatically.
-
v0.6.2
- Nouveau Updating an already installed server: the system configuration is now brought up to date automatically (web code owned by root, sudo rules, scheduled jobs, wg0 start order); re-running install.sh after an update is no longer needed.
- Nouveau Sudo rules are checked with visudo before they go live; database restore stays reserved to the root shell.