KNJ Panel · Live Build Log

Latest Updates

Every feature as it ships, most recent first. This is the same information behind the roadmap's status pills, kept here in full so nothing gets trimmed.

Controller Panel

• Service Configuration, closed out — the five remaining items in that section all shipped together: mail relay & filtering configuration now covers both sender and recipient blocklists, wired into the same restriction chain the rest of mail security already builds so nothing can independently reopen the server as a relay. WebDAV access mounts a hosting account's files over real nginx WebDAV, not a separate daemon, scoped to a whole site or a single subdirectory. Log rotation is now admin-configurable (frequency, retention, compression), with a 32-day retention floor enforced server-side since bandwidth reporting rebuilds each month from the same rotated logs. Service certificates gets a read-only page making explicit what was already true — the panel issues one certificate and every TLS-speaking service reuses it. And the Service Manager can now start, stop, and restart individual services from the UI, with every control running as a background job rather than inline with the request that triggered it, and stopping a service the panel itself depends on blocked outright.

• Panel Updates — a real one-click Update Now button, with the same live terminal-style log as System Updates so you can watch the process happen. The SSH command is still shown alongside it for anyone who'd rather run it themselves. Backed by a new dedicated release pipeline that builds and ships every version.

• Licensing — a fresh install now requests a 30-day trial automatically from our own separate licence server, tied to the server itself so wiping and reinstalling can't grant a second one. A persistent banner counts down the days remaining; once a trial or licence lapses, the Controller and My Account areas lock to a new Licence page (under Servers) until a real key is activated — existing sites, mail, and DNS are never touched, only the panel's own management UI.

• Panel login security — a new fail2ban jail bans an IP after 5 failed panel logins in 10 minutes, the same real network-level protection SSH already had. Opt-in Two-Factor Authentication for every role, from a new My Profile page: an authenticator app (QR code setup), recovery codes, or a one-time code emailed on request as a third fallback if both of those are unavailable.

• A real backup engine — full account backups (files, every database, all mailboxes, plus a DNS zone and FTP config snapshot) written locally, scheduled per the existing daily/weekly/monthly settings or triggered on demand. Restore is real, not a stub — available to both the admin and the account owner, and regenerates the account's files, databases, and mail from exactly what was captured at backup time. Live-verified against a real disposable test account: files and a database deliberately corrupted after backup, then restored, confirmed byte-for-byte back to the original with correct ownership.

• FTP Settings — server-wide vsftpd tuning (connection limits, idle session timeout, upload umask, passive port range, welcome banner). Service Status now also reports vsftpd's live state alongside the other daemons.

• FTP account support — vsftpd, with SQL-backed authentication using the same architecture as mail (a read-only MySQL user queried directly by PAM, no separate virtual-user database to keep in sync). Every FTP session runs as the account's own real system user, so uploads are ownership- and quota-consistent automatically. Live-verified over real TLS: upload, chroot containment, and a scoped sub-account correctly jailed to just its own subdirectory.

• Security Scan — a new self-service server health check at the top of the Security nav group. Checks the server's own firewall, SSH's effective configuration (not just what a config file says), fail2ban, unexpected public ports, database exposure, and automatic security updates, with a plain-language recommendation for anything that isn't a clean pass and an overall 0-100 score. Read-only, and distinct from our own internal code security audits.

• Disk quota is now a real, kernel-enforced ext4 quota — a write past an account's limit fails at the filesystem level, not something the app polices after the fact. Bandwidth has no OS equivalent, so it's tracked by parsing Nginx access logs (self-correcting, re-derived from scratch every refresh rather than a running total) and an account over its limit is auto-suspended. Both refresh every 15 minutes via the app's first scheduled job. List Accounts and the account-side Disk & Bandwidth page both show live usage against the package limit.

• Branded default and suspended-account placeholder pages — self-contained static pages with the real KNJ logo, shown on a freshly created domain and on a suspended one. Live-verified end to end on real DNS/SSL, including catching and fixing a bug in the provisioning script that was silently breaking every action.

• Modify an Account (edit owner, package, reseller after creation) and Suspend/Unsuspend Account — websites go down to a suspended page while mail and DNS keep working, ready for a future billing system to trigger automatically. Server Settings: upstream DNS resolver configuration, server contacts (update/SSL-failure notification emails), and a graceful reboot button. Account SSL page can now generate a certificate signing request and private key in-browser. KNJ Webmail v0.7.1 — bulk CSV contact import.

• Track DNS (live dig lookup in the panel), Server Settings (timezone via timedatectl + OS hostname via hostnamectl, linked from the post-install Server Setup flow), Raw Log Download (per-domain nginx access and error logs on the account side).

• KNJ Webmail v0.7.0 — contacts, with autocomplete on compose and one-click save from any message. Verified against the same real external Gmail inbox.

• KNJ Webmail v0.6.0 — rich (HTML) compose with a sanitized editor and real multipart/alternative sending. Verified against the same real external Gmail inbox.

• KNJ Webmail v0.5.0 — multi-select bulk move/delete. Verified against the same real external Gmail inbox.

• KNJ Webmail v0.4.0 — a Settings page for autoresponder and Outlook-style mail filing rules, sortable columns. Verified against the same real external Gmail inbox.

• KNJ Webmail v0.3.0 — create your own folders and drag messages onto them to file. Verified against the same real external Gmail inbox.

• KNJ Webmail v0.2.0 — real folders (Inbox/Sent/Drafts/Trash/Spam) with unread counts, delete-to-Trash, attachments, in-folder search, pagination, and drafts. Verified against the same real external Gmail inbox, both directions.

• KNJ Webmail v0.1.0 — our own from-scratch webmail client, built into the panel and styled to match it, selectable alongside Roundcube. Verified against the same real external Gmail inbox, both directions.

• Webmail — real Roundcube, wired to the existing Dovecot/Postfix, own DB and PHP-FPM pool, verified against a real external inbox. Create Account can now set a password explicitly instead of only auto-generating one.

• Server info & stats bar (hostname, load, RAM/disk) on every Controller page; panel version tracking with an update-available ticker; a System Updates page for pending OS packages with a live terminal-style log.

• Fixed orphaned mail storage left behind when an account or domain is removed.

• Addon domains, per-zone DNSSEC, DNS clustering (master-side), inline bulk-save zone editing, restore-default-records recovery, outbound mail relay, editable mail server config, mail queue/delivery/statistics tooling, filter incoming email by domain/country, greylisting, spam filtering, autoresponders, email deliverability checker.

• MultiPHP Manager (install/switch versions, per-account INI overrides, extensions, ionCube), SPF/DKIM/DMARC automation, DNS zone templates, nameserver diagnostic report, DNS cleanup tool, domain forwarding.

Client Panel

• Licensing — if the server's licence ever lapses, My Account locks to a status page the same way the Controller does, with the same guarantee behind it: your own site, mail, and DNS keep running regardless — this only ever affects panel access itself, never what you've already built.

• Cron Jobs — a new page under Advanced. Schedule recurring commands using cPanel-style presets (Every Minute, Every 5 Minutes, Once Per Hour, and more) or set the schedule manually — jobs run as your own account, with output emailed to a Cron Email address you control.

• Two-Factor Authentication — a new My Profile page (top of the sidebar) to turn on 2FA for your own login: an authenticator app, recovery codes, or an emailed code if you lose access to both.

• Backups — a new page under Files. Back up your account on demand, download any piece of a backup (files, a specific database, mail), or restore your whole account from a previous backup.

• FTP Accounts — a new page under Files. Every account gets one FTP login automatically (full access to your home directory); create additional scoped logins jailed to a specific subdirectory to hand out upload access without sharing everything.

• Disk Usage renamed Disk & Bandwidth — now shows real quota-enforced disk usage and this month's bandwidth against the package limit, both with a live progress bar, alongside the existing folder-by-folder breakdown.

• KNJ Webmail — a second webmail client option, built into the panel and matching its styling, selectable from the Email Accounts page alongside Roundcube.

• Custom MIME type mappings per domain.

• Disk usage breakdown, directory password protection, leech protection (auto-blocks a shared/leaked directory login), IP blocking, hotlink protection, catch-all address, website compression, directory listing style, custom error pages, contact information & account preferences.

• Multiple domains per account, autoresponders.