API Tokens, and the Security Section Closed
The Security section is done. API Tokens shipped, and external/OAuth login came off the roadmap rather than staying on it as an unfinished item. API Tokens already had…
Read more →The Security section is done. API Tokens shipped, and external/OAuth login came off the roadmap rather than staying on it as an unfinished item. API Tokens already had…
Read more →Two items shipped in the Security section: per-service IP allow/deny lists (“Access Control”) and a central, admin-configurable password policy. Scoped API tokens and external login were still in…
Read more →Six items were sitting in the Accounts section of the roadmap: edit account, bulk account removal, admin password reset, package upgrade/downgrade, broadcast messaging, and access log downloads. Before…
Read more →Five items had been sitting in the Service Configuration section for a while: mail relay and filtering, WebDAV access, log rotation, service certificates, and a service manager. None…
Read more →This one started as a small safety net — a fresh install had just proven the release pipeline works end to end, and it seemed worth adding a…
Read more →Everything up to this point had been tested by upgrading a box that already had KNJ Panel running on it. That’s a different code path from installing on…
Read more →My Profile — the page for managing your own login, in either the Controller or the account area — could turn on two-factor authentication and nothing else. There…
Read more →The update mechanisms this panel had shown — the version ticker, the “update available” banner — weren’t yet checking against a real release source. There was no place…
Read more →Every previous audit looked at one growing app on one or two servers. This one is the first pass since Licensing shipped, which meant looking at three separate…
Read more →Fourth and final of the four v1.0 items. With this one shipped, all four are live and the freeze on new feature work is lifted. Licensing lives on…
Read more →Cron Jobs had been a dead entry in the account sidebar with a Soon badge. Today it became real, and the interesting part of building it was resisting…
Read more →Second of the four v1.0 items: protecting the panel’s own login. Intrusion prevention already protected SSH on every server, but the panel’s login form relied only on the…
Read more →Yesterday ended with a step back rather than a feature: a lot had shipped, and it was time to prioritize what a releasable state needs. A hosting product…
Read more →A follow-up to this morning’s FTP accounts work: Service Status now reports the FTP service’s live state alongside every other daemon, and there’s a new FTP Settings page…
Read more →The one thing that had never been touched at all: FTP. Today closed that gap, and it turned out to be less new ground than expected — the…
Read more →Five days and a large number of commits since the first one — the Security Center, Packages & Resellers, a custom-built webmail client, account creation and suspension, and…
Read more →Package limits for disk and bandwidth have existed for a while, but nothing measured or enforced them. Today closed that gap for real, not with an app-level approximation.…
Read more →Two account-management features today, plus bugs caught along the way that were worth fixing properly rather than working around. Modify an Account fills a real gap — until…
Read more →Five smaller items boxed off today, rounding out Server Settings and closing a couple of gaps on the SSL and Webmail Contacts pages. Server Settings picked up three…
Read more →Three utility features boxed off together. Track DNS lives under the DNS section of the Controller panel, accessible to both admins and resellers. Type a hostname, pick a…
Read more →