Jump to content
Froxlor Forum
d00p

Release 0.9.35 - Let's Encrypt, auto-update and more

Recommended Posts

Dear Froxlor Community,
 
we are proud to announce the final release of 0.9.35 which includes some new kick-ass features.
 
Support for Let's Encrypt
 
Many of you were waiting for this one for quite some time now. We finally managed to include ssl-certificate generation via Let's Encrypt directly within froxlor's interface. It's easy as a click on "use let's encrypt" when adding/editing a domain. The certificate will be created and renewed automatically.
Please keep in mind that this feature is in BETA state.

 

- Important: Let's Encrypt uses cURL - ensure you have the php-curl extension installed on your system

 

- To ensure the Let's Encrypt cronjob is in your /etc/cron.d/froxlor file, please run the cronjob manually using the --force parameter, e.g.

php /var/www/froxlor/scripts/froxlor_master_cronjob.php --force

- As Let's Encrypt uses requests to a special URI you need to configure an Alias for your webserver to do so follow these simple steps:

- activate Let's Encrypt in the settings
- as admin, goto Configuration -> select your distro -> select Webserver -> select your software
- copy'n'paste the acme.conf part of the configration template
- restart/reload webserver

Multiple default IP addresses
 
You can now select multiple IP addresses you want to be set as default for new domains in the System-settings. Until now it was only possible to define one default IP address. This is especially handy if your server has an IPv4 and IPv6 address for example.
 
Auto-Update
 
As of the release candidate 0.9.35-rc1, you are be able to update to future releases from within the webinterface. It will automatically download the latest archive and extract it - and you're done. Most of you will first enjoy this after our next release ;-)
 
Menu structure
 
We re-organized some menu-items to reflect their corresponding affinity. The former "Server" category is now called "System". PHP related settings / information are now in their own category. Also "IPs and Ports" and "Recalculate resource usage" were put in the "Resources" category (where they belong).
 
Set MYSQL_PASSWORD on configuration templates
 
It is now possible to set the MYSQL_PASSWORD value (via JavaScript, only client-side) when configurating services with our templates. This eases the process and you do not need to search and replace for MYSQL_PASSWORD in the config files again (also you are likely to not miss any of the occurences).
 
System-Log for customer
 
The customers are now able to see actions related to their account in the menu-item "System-Log", depending on the log-level set in the settings. This is also very helpful for response-messages from Let's Encrypt.
 
Changes in 0.9.35:
You can see all changes in our bugtracker at http://redmine.froxlor.org/versions/68 and http://redmine.froxlor.org/versions/70

Download: 0.9.35

Note: Gentoo-ebuild and Debian packages are now available.

Visit http://www.froxlor.org or join our IRC channel #froxlor on irc.freenode.net.

Thank you,
d00p

Edited by d00p
packages released
  • Like 1

Share this post


Link to post
Share on other sites
Guest
This topic is now closed to further replies.

  • Similar Content

    • By d00p
      Dear Froxlor Community,
      after many bugfixes and improvements here is the latest stable version of froxlor. This release will be the last release of the 0.9-series in favor of our API based 0.10.0 version which will be the new MASTER branch in our git-repository as of this release.
      Ubuntu (16.04) Xenial Support
      There are now configuration templates for Ubuntu 16.04 Xenial. Ubuntu 12.04 Precise configurations have been marked as deprecated.
      Customizable webserver logging
      For apache2 users, it is now possible to specify a script to which the logs are being piped to. Don't forget that you must explicitly enable the piping. You can also or alternatively specify a log-format and log-type for the access-log.
      FPM process manager settings per configuration
      Process manager and corresponding settings can now be overwritten on a per-php configuration base, when overwriting is explictly checked in the php-config. This makes it possible to have different process manager (static, dynamic, ondemand) settings for the same php-fpm version.
      You can see all changes on Github at https://github.com/Froxlor/Froxlor/compare/0.9.39.5...0.9.40.1
      *UPDATE*
      0.9.40.1:
      due to a typo in a function name, the backup-page was not usable  
      Download: 0.9.40.1

      Note: Gentoo-ebuild and Debian packages will be released shortly as always.

      Visit http://www.froxlor.org or join our IRC channel #froxlor on irc.freenode.net.

      Thank you,
      d00p
    • By d00p
      Dear Froxlor Community,
       
      many great new features have found their way into our latest release. Here are the biggest innovations:
      Debian 9.x (Stretch) Support
      We finally added configuration templates for the current stable release of the Debian Linux Distribution. Important for all PHP-FPM users, you need to use mod_proxy/mod_proxy_fcgi as there is no libapache2-mod-fastcgi anymore.
      Multiple PHP-FPM installations
      Users with more than one PHP Version installed on their system were forced to use FCGID until now if they wanted to assign different versions of PHP to different customers or domains. This can now also be done for PHP-FPM. Some of the settings have moved from the global settings to a new section in the admin PHP menu called PHP-FPM version. Here you can add all the PHP-versions you have installed on your system with their corresponding config-path, restart-command, etc. In PHP-Configurations you can then choose the desired PHP-FPM version from a select-box.
      Settings Import / Export
      When installing Froxlor on multiple systems with equal settings, you can now export your settings from one intallation and import them to another. System-Hostname, default IP addresses and a few more variables that are either system specific or filled by the installation process anyway are being omitted. This feature will be "older version" compatible in later versions, meaning you will be able to import settings from 0.9.39 into newer versions of Froxlor. Please note that this new feature requires the PHP-json extension to be installed and loaded.
      Let customers choose PHP configuration
      When adding a new or editing an existing customer, the admin/reseller can now select from all available PHP configurations which of them are usable for the customer.  If none is selected, the one the admin used when adding the domain is used. When the customer adds a new or edits an existing (sub)domain he can choose between the assigned PHP configurations (especially helpful if you have PHP configurations for different PHP-versions).
      Other PHP-FPM related changes
      Three minor changes/additions for PHP-FPM users: 
      You can now specify paths which will be added to the PATH environment variable in each PHP-FPM pool. There was no such entry until now. If the setting is left empty, no env[PATH] entry will be generated You can now specify values for the security.limit_extensions setting on a per PHP-FPM version basis. You can now enable '-pass-header Authorization' for each PHP configuration so authorization headers are being passed from the webserver to PHP-FPM Testing implementation of Let's Encrypts ACME v2
      As announced earlier by Let's Encrypt (see https://community.letsencrypt.org/t/staging-endpoint-for-acme-v2/49605 ) the new api version will be live as of 27th of februrary and is already available for testing (staging api). You can select the ACME v2 standard in the settings if you want to test it using the staging api. Sadly, wildcard-certificates, which is one of the biggest innovations in ACME v2, will only work using the dns-reg challenge (validation via DNS record) so this won't be an option for 99% of you (also, we did not implement the dns-reg challenge, only http-reg). It would be awesome if this is going to be changed. Note: You will still be able to (and probably should) use the ACME v1 API, especially if you have any productive certificates obtained already.
      Minor installation changes
      When checking the webserver and apache is found, we now assume that apache-2.4 is used instead of 2.2
      MySQL STRICT-MODE issues
      Some newer distributions ar enabling the so-called STRICT-MODE for the DBMS by default, which Froxlor could not deal with on installation (e.g. some tables would not be created). These issues should be resolved now.
      *UPDATE*
      0.9.39.1:
      fix possible invalid php-fpm-socket filename for dummy-socket fix selected phpfpm daemon when editing php-configuration fix updating wrong column when deleting a fpm configuration get rid of the need for allow_url_fopen only let admin select php-configs that the customer is allowed to use to avoid unwanted php-config changes when customer edits domain 0.9.39.2:
      add script to automatically configure services from shell without the need of copy/paste from the interface 0.9.39.3:
      add new hosting-plans feature add domain flag to avoid generation of nginx try_files directive in webroot which is not suitable for some applications 0.9.39.4:
      fixed add/edit domain due to misuse of Settings-class 0.9.39.5:
      fixed display of imap/pop3 flag when editing hosting plans You can see all changes on Github at https://github.com/Froxlor/Froxlor/compare/0.9.38.8...0.9.39.5

      Download: 0.9.39.5

      Note: Gentoo-ebuild and Debian packages will be released shortly as always.

      Visit http://www.froxlor.org or join our IRC channel #froxlor on irc.freenode.net.

      Thank you,
      d00p
    • By d00p
      Dear Froxlor Community,
       
      as our latest stable release of froxlor is quite established now, it is time for some minor bugfixes and improvements.

      Changes in 0.9.38.8:
      + added OCSP stapling support for apache2 and nginx + added libnss-extrausers support for debian/ubuntu users + added http2 support for froxlor-vhost and per-domain and domain-import + added setting to disable LE self-check + #416: added letsencrypt, HSTS settings, oscp-stapling and phpenabled-flag to Domain-import + #464: added simple smtp-settings test-page ~ #412: fixed libnss config ~ #434: allow non fqdn CNAME entries (froxlor appends zone's domain automatically if there's no trailing dot) ~ #447: fixed wildcard entries in dns editor ~ #472: generate multiline txt-record if content is too long ~ #475: corrected setting for php-fpm peardir ~ #479: removed each() keyword as it is deprecated as of php-7.2 ~ #485: added default/global directory options in apache regardless of whether fcgid/fpm is being used or not ~ #496: explicitly deactivate TLS (and auto-tls) in phpMailer when setting use-tls is OFF ~ #1697: allow underscore in DNS labels ~ #1720: do not show full path of file on php-error ~ #1726: use correct pagination in admin-log/customer-log ~ #1728: clearify field label for domain termination date ~ fixed phpenabled flag for new subdomains added by customers ~ fixed auto-update of database in cronjob if activated ~ fixed ssl integration in lighttpd You can see all changes on Github at https://github.com/Froxlor/Froxlor/compare/0.9.38.7...0.9.38.8

      Download: 0.9.38.8

      Note: Gentoo-ebuild and Debian packages will be released shortly as always.

      Visit http://www.froxlor.org or join our IRC channel #froxlor on irc.freenode.net.

      Thank you,
      d00p


×