Dear froxlor community,

we are happy to announce the release of froxlor version 2.3.0!

This version introduces several new features for better server control, expands our API, and brings important platform updates. Please make sure to also read the note on dropped webserver support.

Key Features and Improvements

SSH-Key Management via UI

Customers with shell access can now conveniently manage their SSH keys directly through the froxlor panel. This simplifies secure access handling and reduces the need for manual server-side configuration.

API Updates

• A new API entity SshKeys is available for managing SSH keys programmatically.

• A new API entity EmailSender is available for managing alias-sender domains/addresses for email-accounts.

• The API endpoints Customers.add() and Customers.update() now support the new parameter shell_allowed, giving you more fine-grained control over shell access.

• The API endpoints Domains.add() and Domains.update() now support the new parameter http3 , see Nginx HTTP/3 support.

HTTP/3 Support for Nginx

As Debian Trixie ships with nginx 1.26.3, support for HTTP/3 (QUIC) is possible. You can enable http3 globally in the settings to enable it per domain, keep in mind that you also need TLSv1.3 in your ssl-protocols to be active in order for it to work.

Debian 13 (Trixie) Support

Froxlor now officially supports Debian 13 (Trixie), ensuring compatibility with the current stable generation of this major Linux distribution.

Important Changes

Dropped lighttpd Support

With this release, froxlor no longer supports the lighttpd webserver.

Support for lighttpd had been deprecated since version 2.2 (August 2024). If you are still running lighttpd, we strongly recommend migrating to a supported webserver (e.g. nginx or apache2) before upgrading.

Upgrade Instructions

To upgrade to froxlor version 2.3.0, please follow the standard upgrade procedures in our documentation. As always, make a backup of your configuration and databases before updating.

Get Support

If you have questions or need help, visit our support forum or join the froxlor community on Discord.

We hope you enjoy the new features and improvements in version 2.3.0 and thank you for being part of the froxlor community.

Thank you,

the froxlor team

Stable release 2.3.0 published, see https://github.com/froxlor/Froxlor/releases/tag/2.3.0

Maintenance release 2.3.1 / 2.3.2

• fix empty PATH_INFO fastcgi_param in nginx (#1357)

• fix implicitly marked variables as null (#1359)

• enhance session path validation in PhpSessionclean (#1360)

• fix froxlor (an probably many others) on http3: populate [HTTP_HOST] (#1361)

• don't force A/AAAA records in DNS if domain is 'email_only=true'

• show dns-editor button for email-only domains if enabled/allowed

• add dkim-flag of parentdomain to subdomain

• fix possible incorrect directory permissions for FCGID

• set default to currently set distro in checkCurrentDistro()

• fix potential loss of mysql-connection after traffic job

• add NIS2 information in nameserver settings to clearify that admins possible fall under EU-NIS2 obligations when running nameservers

• fix pop3_logout_format for dovecot 2.4 (#1363)

• add new setting for bcc-sending diskspace-warning mail to admin/reseller; permission fix for trixie/Dovecot

• remove http3_hq from vhost (nginx + http/3)

• add 'always' to add_header for HSTS and h3 (#1365)

• fix empty displayed zero-value in customer-domains

• Installer throws a 500 error in version 2.3.1

Maintenance release 2.3.3

• fix guessed myhostname value for postfix in debian trixie configuration template

• fix FCGID permissions

• correctly trigger rebuild of vhost generation in Domains.update

• fix fpm request_terminate_timeout depending on slowlog being active (#1373)

• updated czech and hungarian language files