HudsonPanel changelog

Previous published version: 1.20.0

Added

• Added CrowdSec-first firewall management with CSF and no-firewall alternatives, health reporting, decisions, alerts, trusted networks, and bulk allowlisting.
• Added server-wide account resource usage and domain IP resolution dashboards.
• Added account IP reassignment, reversible abuse protection, and customizable suspended-account pages with visitor contact handling.
• Added kernel status monitoring, service restart controls, server reboot tracking, and managed Ubuntu maintenance controls.
• Added an administrator release console for immutable signed packages, three-channel rotation, validation, and safe channel reassignment.

Changed

• Renamed and completed the System Updater interface and connected it to signed channel manifests at get.hudsonpanel.com.
• Stabilized email deliverability auditing and reorganized it under Messaging.
• Expanded installation support for the new firewall, maintenance, suspension, and service-management components.
• Advanced the database schema declaration to include account abuse-protection and suspension-template migrations.

Added

• Added administrator controls for automatic HudsonPanel updates, manual checks, and manual installation.
• Added installed and available version display, live update state, durable update history, and visible failure details.
• Added bounded license-server outage grace, persistent update logging, log rotation, and source-controlled public endpoint rate-limit policy.
• Added an explicit update rollback contract and focused interface tests.

Changed

• Expanded rollback to restore managed configuration and the complete pre-update HudsonPanel database before restarting the previous release.
• Preserved an administrator's automatic-update preference across manual and scheduled updates.
• Required integrity checks on both configuration and database backups before activation or rollback.
• Made fresh installation disable Ubuntu's conflicting local DNS stub while preserving upstream resolution.
• Made initial activation verify every required service, wait for application readiness, and cleanly remove a failed candidate without creating a broken `current` link.
• Made hostname preflight verify public DNS directly instead of being misled by Ubuntu's standard local `127.0.1.1` hostname entry.
• Deferred package-triggered and `needrestart` service restarts until HudsonPanel has installed and validated its DNS, mail, web, and SSH-safe configuration; start MariaDB and Redis only when configuration first requires them.
• Matched the proven live PowerDNS design with a dedicated TCP database identity, least-privilege table grants, and DNSSEC-aware backend configuration.
• Made the resolver handoff explicitly readable by `systemd-resolved`, and stop newly provisioned services if a first installation fails its acceptance gate.
• Explicitly start Ubuntu's SysV-backed Pure-FTPd service and allow all required daemons a bounded startup period before the final acceptance gate.
• Reload Nginx immediately after activating the trusted panel certificate so the first HTTPS response no longer serves the temporary bootstrap certificate.
• Allowed shared database actions to authenticate either an administrator or AccountPanel session while retaining per-account authorization checks.