KNJ Panel · Product Roadmap
Roadmap
What's live today, what's actively being built, and what's planned — organized by area. This page updates as features ship.
66% live, out of everything actually planned for this side of the panel. Full build log: Latest Updates →
DNS
In progressEvery domain should get a complete, production-ready zone the moment it's created — not just the bare minimum to resolve.
Mail authentication, shipped
Every new domain now signs its own outbound mail and publishes proper sender- authorization records automatically — no manual DNS work required:
Next up for a zone: a broader set of service-discovery records (mail client autoconfiguration, calendar/contacts sync) once the underlying services they point to exist — publishing DNS for something that doesn't answer yet would just create confusion, so those are sequenced after the services themselves.
SPF
DKIM (2048-bit, real signing)
DMARC
mail A record
| Feature | What it does | Status | Note |
|---|---|---|---|
| SPF / DKIM / DMARC auto-generation | Sign outbound mail and publish sender-authorization records, per domain, automatically. | Live | Shipped 2026-07-25 — real signing infrastructure, not a placeholder record. |
| Zone manager | Add, edit, delete DNS records per domain. | Live | Shipped 2026-07-26 — edit every record in place and save the whole zone in one click, plus per-type filtering and a DNSSEC toggle. |
| Restore default records | One-click recovery if a zone's records get deleted by accident. | Live | Shipped 2026-07-26 — rebuilds the essentials (nameservers, site, mail, mail authentication) without touching or duplicating anything you've added yourself. |
| Zone creation & deletion | A zone is created/removed automatically with the account. | Live | — |
| Zone templates | Customize the record set every new zone starts with. | Live | — |
| Per-domain mail routing | Choose how mail for a domain is handled — locally or remotely. | Live | Shipped 2026-07-26. |
| Bulk-enable mail signing | Retrofit SPF/DKIM/DMARC onto domains that existed before it became automatic. | Live | Shipped 2026-07-26 — Backfill All or per-domain, from Zone Templates. |
| Nameserver diagnostic report | Check whether a domain's live nameservers actually point here. | Live | — |
| Multiple domains per account | Host more than one domain under a single account. | Live | Shipped 2026-07-26. |
| Orphaned zone cleanup | Find and remove zones with no matching account. | Live | — |
| Zone TTL defaults | Configure default record TTLs and SOA values. | Live | — |
| Domain forwarding | Redirect a domain's traffic to another URL. | Live | — |
| DNSSEC | Sign zones for authenticated DNS responses. | Live | Shipped 2026-07-26 — one-click per zone, DS record shown for the registrar. |
| DNS clustering (secondary nameservers) | Authorize a DNS-only server to replicate zones from this one. | Live | Shipped 2026-07-26 — generates a real TSIG key and BIND config the moment a DNS-only server is added; replication itself uses standard, secure zone transfers. |
| Multi-nameserver sync | Manually re-push every zone to keep a cluster in sync. | Not Planned | A "push now" trigger on top of the clustering above (now live) — better scoped once there's a real secondary to test it against. |
Day-to-day mailbox management, plus the underlying mail server configuration that controls how mail is filtered, relayed, and secured.
Mail server configuration — planned depth
Beyond the anti-abuse limits and RBL filtering already live, a full mail configuration surface is planned: spam scoring, sender/recipient access lists, attachment filtering, outbound relay (smarthost) support, and protocol/encryption policy for the mail server itself (which protocols are enabled, minimum TLS version, connection limits).
| Feature | What it does | Status | Note |
|---|---|---|---|
| Mailboxes & forwarders | Create/delete mailboxes, set quota, manage forwarders. | Live | — |
| Anti-abuse limits | Max message size, max recipients, per-client send rate. | Live | — |
| Blocklist filtering | Reject mail from known-bad senders (RBL). | Live | — |
| Spam scoring | Score and act on likely-spam messages. | Live | Shipped 2026-07-26 — SpamAssassin, tag or optionally reject outright at a configurable score. |
| Outbound relay (smarthost) | Route outbound mail through a third-party relay. | Live | Shipped 2026-07-26 — host + optional username/password, own settings page. |
| Mail server protocol/TLS policy | Which protocols are enabled, minimum TLS version, connection limits. | Live | Shipped 2026-07-26 — IMAP/POP3 toggle, IPv6, TLS policy, and process limits, all editable without SSH. |
| Mail queue viewer | View, retry, or clear undelivered messages. | Live | Shipped 2026-07-26 — retry one message or the whole queue, delete one or clear everything. |
| Delivery reports & troubleshooting | Trace why a specific message didn't deliver. | Live | Shipped 2026-07-26 — browse recent activity or search a sender/recipient/domain. |
| Mail statistics | Send volume by domain/account over time. | Live | Shipped 2026-07-26 — sent/deferred/bounced by sender domain, plus a list of authenticated relayers. |
| Inbound filtering by country/domain | Block inbound mail by origin. | Live | Shipped 2026-07-26 — block by sender domain or by country, rejected at the SMTP level. |
| Greylisting | Temporarily defer unrecognized senders to filter spambots. | Live | Shipped 2026-07-26 — filters spam that never retries, without scoring or blocklisting anything. |
| Deliverability checker | Verify SPF/DKIM/DMARC/PTR are all correctly configured for a domain. | Live | Shipped 2026-07-26 — live public DNS lookups, no cached or self-reported state. |
| Autoresponders | Out-of-office style auto-reply per mailbox. | Live | Shipped 2026-07-26 — account-side, one per mailbox. |
| Webmail | In-browser mail client. | Live | Shipped 2026-07-29 — real Roundcube, wired to the real Dovecot/Postfix already running. Verified against a real external Gmail inbox (not just accepted by our own mail server), both directions. |
| KNJ Webmail (custom client) | A from-scratch webmail client, built into the panel itself. | Live · v0.7.1 | Bulk CSV contact import, contacts with autocomplete and one-click save, rich (HTML) compose with a sanitized editor and real multipart/alternative sending, multi-select bulk move/delete, a Settings page for autoresponder + Outlook-style mail filing rules, user-created folders with drag-and-drop, real folders, attachments, search, pagination, drafts, and sortable columns — versioned independently from the panel itself. Verified against a real external Gmail inbox. |
Service Configuration
Core is live| Feature | What it does | Status | Note |
|---|---|---|---|
| Nameserver | Authoritative DNS for hosted domains. | Live | — |
| Mail server configuration | Protocol/SSL/process-limit configuration for the mail server. | Live | Shipped 2026-07-26 — see Email section above. |
| Mail relay & filtering configuration | Full access-list/filter/relay configuration surface. | Live | Shipped 2026-08-03 — sender and recipient blocklists, wired into the same restriction chain the rest of mail security already builds so an open-relay gap can't slip in through a second, independent writer. |
| FTP accounts | FTP access to a hosting account's files. | Live | Shipped 2026-07-30 — vsftpd, SQL-backed auth (same architecture as mail), every session runs as the account's own real system user so uploads are quota-consistent automatically. A primary account is created automatically; scoped sub-accounts jailed to a subdirectory are self-service from the account panel. |
| FTP settings | Server-wide vsftpd tuning — connection limits, idle timeout, passive port range, banner. | Live | Shipped 2026-07-30 — regenerates the running vsftpd config and restarts the service on save. |
| WebDAV access | Mount a hosting account's files over WebDAV. | Live | Shipped 2026-08-03 — real nginx dav_ext module, not a separate daemon. Scoped to an account's whole site or a single subdirectory, self-service from the account panel. |
| Log rotation | Retention/rotation rules for account log files. | Live | Shipped 2026-08-03 — admin-configurable frequency, retention, and compression, floored at 32 days since bandwidth reporting rebuilds each month from the same rotated logs. |
| Service certificates | TLS certificates for the panel and mail services. | Live | Shipped 2026-08-03 — the panel issues one certificate and every TLS service reuses it; this page makes that sharing explicit with real issued/expiry/issuer detail. |
| Service manager | Start/stop/restart individual services from the UI. | Live | Shipped 2026-08-03 — every control runs as a background job, never inline with the request, so restarting a service the panel itself depends on can't take the panel down with it. Stopping a service the panel needs to keep running is blocked outright. |
Accounts
Core is live| Feature | What it does | Status | Note |
|---|---|---|---|
| Account list | Full account overview with quick actions. | Live | — |
| Create account | Provision a domain, owner, and hosting package. | Live | Shipped 2026-07-29 — username always generates automatically; password can auto-generate or be set explicitly with confirmation. |
| Log in as user | Admins/resellers can open a customer's own panel directly. | Live | — |
| Edit account | Modify an account's settings after creation. | Planned | — |
| Bulk account removal | Remove multiple accounts at once. | In Progress | Single-account removal is live. |
| Suspend / unsuspend | Temporarily disable an account without deleting it. | Live | Shipped 2026-07-30 — swaps the Nginx vhost to a shared suspended page, mail and DNS keep working. |
| Admin password reset | Admin-initiated password reset for an account owner. | Planned | — |
| Quota tracking & enforcement | Disk usage limits per account. | Live | Shipped 2026-07-30 — a real, kernel-enforced ext4 quota, not just a measurement. |
| Bandwidth tracking & limits | Monthly transfer caps with usage visibility. | Live | Shipped 2026-07-30 — derived from Nginx access logs, resets monthly, suspends an account over its limit. |
| Package upgrade/downgrade | Change an account's package after creation. | Planned | — |
| Broadcast messaging | Message every account owner on the server. | Planned | — |
| Access log downloads | Download an account's raw web server logs. | Planned | — |
Security
Foundational pieces live| Feature | What it does | Status | Note |
|---|---|---|---|
| Firewall management | Manage firewall rules and banned IPs. | Live | — |
| Brute-force protection | Auto-ban IPs after repeated failed logins. | Live | Shipped 2026-07-31 — a new fail2ban jail bans an IP at the network level after 5 failed panel logins in 10 minutes, same posture as the existing SSH protection. |
| Per-service IP allow/deny lists | Restrict which IPs can reach specific services. | Planned | — |
| Two-factor authentication | TOTP-based 2FA for panel logins. | Live | Shipped 2026-07-31 — opt-in for every role, with an authenticator app, recovery codes, or an emailed one-time code as three separate ways in. |
| Password strength policy | Server-wide minimum password requirements. | In Progress | Enforced per-form today; central policy is next. |
| Security advisor | Automated scan of the server's own configuration. | Live | Shipped 2026-07-30 as Security Scan — firewall, SSH's effective config, fail2ban, network/database exposure, and automatic updates, each with a plain-language recommendation and an overall score. |
| External/OAuth login | Sign in via a third-party identity provider. | Planned | — |
| API tokens | Scoped tokens for automation. | In Progress | Admin-level tokens live; account-level next. |
SSL/TLS
Core is live| Feature | What it does | Status | Note |
|---|---|---|---|
| Automatic certificates | Free certificates, auto-issued and auto-renewed for every domain. | Live | — |
| Custom certificate upload | Install a purchased or custom certificate. | Live | — |
| CSR generation | Generate a certificate signing request. | Planned | — |
| Certificate inventory | Server-wide view of every certificate in use. | Planned | — |
| TLS policy configuration | Server-wide protocol/cipher policy. | Planned | — |
Databases
Core is live| Feature | What it does | Status | Note |
|---|---|---|---|
| Database & user management | Create/delete databases and users, manage grants. | Live | — |
| Visual database browser | Browse and query databases without external tools. | Planned | — |
| Database maintenance tools | Repair, monitor, and manage database engine settings. | Planned | — |
Software & PHP
Strong parity| Feature | What it does | Status | Note |
|---|---|---|---|
| Multiple PHP versions | Install and run several PHP versions side by side; each account picks its own. | Live | — |
| Per-account PHP configuration | Customize PHP settings per account. | Live | — |
| PHP extension management | Toggle optional PHP extensions. | Live | Includes one-click ionCube Loader installation. |
| OS package management UI | Install system packages from the panel. | Planned | — |
Packages & Resellers
Foundational pieces live| Feature | What it does | Status | Note |
|---|---|---|---|
| Hosting packages | Define hosting plans with limits and quotas. | Live | — |
| Reseller accounts | Give a reseller their own scoped set of accounts. | In Progress | Scoping is correct; usage/limits dashboard is next. |
| Per-package feature control | Control which panel features a package's accounts can see. | Planned | — |
| Account reassignment | Move an account to a different reseller. | Planned | — |
| Reseller permission levels | Configurable per-reseller access control. | Planned | — |
| Account migration/transfer | Move accounts between servers, import from another host. | Planned | — |
Backup & Server Status
In progress| Feature | What it does | Status | Note |
|---|---|---|---|
| Service status | Live up/down status for every service. | Live | — |
| Automated backups | Scheduled backups with configurable retention. | Live | Shipped 2026-07-31 — local disk, full account backups (files, databases, mail, DNS/FTP config), daily/weekly/monthly schedule with retention, plus on-demand for admin or account owner. |
| Backup restoration | Restore a full account or individual files. | Live | Shipped 2026-07-31 — a real restore, not a stub, available to both admin and account owner. |
| Server information | System resource and hardware summary. | Live | Shipped 2026-07-28 — hostname, OS, kernel, IP, uptime, load average, and RAM/disk usage across the top of every page. |
| Live resource monitoring | Disk usage, running processes, ability to stop runaway processes. | Planned | — |
Server Configuration
In progress| Feature | What it does | Status | Note |
|---|---|---|---|
| First-run setup | Guided setup on first login — contact info, domain, certificate. | Live | — |
| Server-wide settings | Web server, PHP, mail, and DNS defaults. | In Progress | Organized by area rather than one long settings page. |
| Server role profiles | Configure a server for a specific role (mail-only, DNS-only, etc). | Planned | — |
| Timezone configuration | — | Planned | — |
| Traffic & visitor statistics | Per-account traffic reporting. | Planned | — |
| Multi-server support | Register and manage additional servers. | In Progress | Foundational data model is in place. |
| Panel version & upgrades | See your KNJ Panel version, get notified of new releases, and update with one click — or run the same command over SSH yourself. | Live | Shipped 2026-07-28, one-click Update Now added 2026-08-02. |
| System updates | See and apply pending OS package updates, with a live terminal-style log. | Live | Shipped 2026-07-28. |
Everything else
IP management, localization, clustering, dev tools| Feature | What it does | Status | Note |
|---|---|---|---|
| IP address management | IPv4/IPv6 pools, dedicated IPs per account. | Not Planned | Single shared server IP model today. |
| DNS resolver configuration | The server's own upstream DNS resolvers. | Planned | — |
| Admin notification routing | Who gets alerted on server problems. | Planned | — |
| Server clustering | DNS and configuration clustering across multiple servers. | In Progress | DNS clustering is live (see DNS above). Configuration clustering (account/package sync) is a separate, larger feature for a future release. |
| Remote reboot | Reboot the server from the UI. | Planned | — |
| Multi-language UI | — | Not Planned | English-only for now. |
| Webhooks | Integrate with external systems via webhooks. | Planned | — |
On the horizon
Not scheduledBigger ideas we've locked in for later — not part of the feature checklist above and not counted toward it, since these go beyond what a standard hosting panel offers at all.
Marketing emails — campaigns
Send newsletters and marketing emails to your contacts from inside the panel, with per-account/reseller limits and settings you control. Not started — locked in for the future, no timeline yet.
Public demo server
A shared, publicly reachable server to look around on before installing anything yourself — reset nightly so nothing you try breaks it for the next visitor. Planned for once KNJ Panel reaches a stable production release. Not started, no timeline yet.
43% live, out of everything actually planned for this side of the panel. Full build log: Latest Updates →
The account owner's own day-to-day mail toolset. The largest category here, and the one with the most room to grow.
Planned next for account-side mail
Per-mailbox filters and delivery tracking are next, followed by calendar/contacts sync once the underlying sync service exists.
| Feature | What it does | Status | Note |
|---|---|---|---|
| Mailboxes & forwarders | Create/delete mailboxes, forward addresses. | Live | — |
| Per-domain mail routing | Choose how mail for a domain is handled — locally or remotely. | Live | Shipped 2026-07-26. |
| Autoresponders | Automated out-of-office style reply per mailbox. | Live | Shipped 2026-07-26 — set a subject, message, and optional start/stop dates per mailbox. |
| Catch-all address | Route mail sent to a nonexistent address at the domain somewhere useful. | Live | Shipped 2026-07-27. |
| Mailing lists | Announcement/discussion list addresses. | Planned | — |
| Delivery tracking | Search delivery logs for a message's fate. | Planned | — |
| Mail filters (global & per-mailbox) | Rule-based sorting, forwarding, and discarding of incoming mail. | Planned | — |
| Deliverability checker | Confirm SPF/DKIM/DMARC/PTR are all correctly configured and live. | Live | Shipped 2026-07-26 on the admin side (DNS → Email Deliverability); no separate account-side page yet, but resellers/admins already see per-domain results there. |
| Bulk address import | Create many forwarders/list entries at once from a file. | Planned | — |
| Spam scoring (per-account) | Tune spam sensitivity for an individual account. | In Progress | Shipped 2026-07-26 server-wide on the admin side; no per-account self-service tuning yet. |
| Mail encryption (S/MIME) | Sign/encrypt mail with a certificate. | Planned | — |
| Challenge-response spam gate | Require unrecognized senders to confirm before their mail is delivered. | Planned | — |
| Greylisting (per-account opt-out) | Choose whether an account participates in server-wide greylisting. | Planned | — |
| Calendars & contacts sync | CalDAV/CardDAV calendar and address book sync. | Planned | Depends on the underlying sync service being built first. |
| Mailbox storage usage | Per-mailbox disk usage breakdown. | Planned | — |
Domains
In progressOne unified place to manage every domain attached to an account — including hosting more than one domain per account, which is one of the highest-priority items on the whole roadmap.
| Feature | What it does | Status | Note |
|---|---|---|---|
| Multiple domains per account | Attach additional domains/subdomains to one hosting account. | Live | Shipped 2026-07-26 — Domains page, add/remove addon domains, package limit enforced. |
| Domain forwarding | Redirect a domain's traffic to another URL. | Live | — |
| Zone editor | Account-side DNS record editor. | Live | — |
| WordPress management | Ongoing management (updates, staging, cloning) of installed WordPress sites. | In Progress | Installation is live; ongoing management is next. |
| Quick site publisher | A simple starter page for a domain with no site yet. | Planned | — |
| Dynamic DNS | Keep a hostname pointed at a device with a changing IP address. | Planned | — |
Files
Core is live| Feature | What it does | Status | Note |
|---|---|---|---|
| File manager | Browse/upload/rename/delete files in the browser. | Live | — |
| Directory password protection | Password-protect a folder. | Live | — |
| Disk usage breakdown | Visual per-folder size breakdown. | Live | — |
| WebDAV access | Mount the account's files as a network drive. | Planned | — |
| Backup & restore | Download/restore full or partial account backups. | Live | Shipped 2026-07-31 — Backup Now, per-component download, and a real restore, all self-service. |
| Deploy from Git | Link a repo, get a webhook — push to deploy automatically. | Planned | Flagged 2026-07-27 as a real differentiator, not just catalog parity. |
| Image tools | Thumbnail generation, scale, convert image formats. | Planned | — |
Databases
Core is live| Feature | What it does | Status | Note |
|---|---|---|---|
| Database & user management | Create/delete databases and users, manage grants. | Live | — |
| Guided database wizard | Create a database, user, and grants in one guided flow. | In Progress | Each step exists individually; a single guided flow is next. |
| Visual database browser | Browse and query databases without external tools. | Planned | — |
| Remote database access | Allow external hosts to connect to the account's databases. | Planned | — |
Metrics
PlannedSelf-serve visibility into traffic, errors, and bandwidth — none of which exists yet for account owners today.
| Feature | What it does | Status | Note |
|---|---|---|---|
| Error log viewer | See recent errors from the domain's own error log. | Planned | High priority. |
| Bandwidth usage | Monthly transfer graph, per domain. | In Progress | Shipped 2026-07-30: account-wide usage this month vs. the package limit, on the Disk & Bandwidth page. A per-domain breakdown graph is still open. |
| Visitor summary | Recent visitor request activity, summarized. | Planned | — |
| Raw access log download | Download the domain's raw web server logs. | Planned | — |
| Traffic statistics dashboard | Graphical visitor/traffic statistics per domain. | Planned | — |
Security
Foundational pieces live| Feature | What it does | Status | Note |
|---|---|---|---|
| SSL/TLS | Automatic and custom certificates per domain. | In Progress | Certificates are live; CSR generation is next. |
| SSL/TLS status overview | Bulk view of every domain/subdomain's certificate status. | In Progress | Single-domain view is live; bulk view is next. |
| IP blocking | Block specific IPs/ranges from reaching the account's site. | Live | Shipped 2026-07-27. |
| Hotlink protection | Prevent other sites from directly linking to this account's files. | Live | Shipped 2026-07-27. |
| Directory login protection | Auto-lock a password-protected directory after repeated failed logins. | Live | Shipped 2026-07-27 — detects the same login used from too many distinct IPs and blocks it. |
| Account-level API tokens | Scoped tokens for account-level automation. | Planned | Admin-level tokens are already live. |
Software
Strong parity| Feature | What it does | Status | Note |
|---|---|---|---|
| Multiple PHP versions | Choose the PHP version for a domain. | Live | — |
| Per-domain PHP configuration | Custom php.ini overrides. | Live | — |
| One-click app installer | Install common apps beyond just WordPress. | In Progress | WordPress installation is live; a broader catalog is next. |
| Website compression | Enable gzip compression for a domain. | Live | Shipped 2026-07-27. |
Advanced
Planned| Feature | What it does | Status | Note |
|---|---|---|---|
| Cron jobs | Schedule recurring commands/scripts. | Live | Shipped 2026-07-31 — real crontabs, jobs run as your own account, cPanel-style presets (Every Minute, Once Per Hour, etc.) or manual scheduling. |
| DNS lookup tool | In-browser DNS lookup utility. | Planned | — |
| Directory listing style | Choose how a folder with no index page is displayed. | Live | Shipped 2026-07-27. |
| Custom error pages | Custom 404/500-style pages per domain. | Live | Shipped 2026-07-27. |
| Custom MIME types | Custom file-type mappings per domain. | Live | Shipped 2026-07-27. |
Preferences
Planned| Feature | What it does | Status | Note |
|---|---|---|---|
| Account preferences | Notification and contact preferences. | Live | Shipped 2026-07-27. |
| Password & two-factor | Change password, enable 2FA. | In Progress | Two-factor authentication shipped 2026-07-31 (authenticator app, recovery codes, or an emailed one-time code) — self-service password change doesn't have its own page yet. |
| Sub-accounts | Create additional logins sharing email/FTP/file access. | Planned | — |
| Team access | Invite other people to access this account with scoped roles. | Planned | — |
On the horizon
Not scheduledBigger ideas we've locked in for later — not part of the feature checklist above and not counted toward it, since these go beyond what a standard hosting panel offers at all.
Marketing emails — subscribe forms
Generate a subscribe form for your own site, right from your account panel — visitors who sign up build your own subscriber list automatically. Includes a welcome email and regular new-subscriber/unsubscribe stats. Not started — locked in for the future, no timeline yet.
Public demo server
The same shared demo server, on the Client Panel side — try the account/customer experience before you install. Reset nightly. Planned for once KNJ Panel reaches a stable production release. Not started, no timeline yet.