Virtualmin-Changelog

Add new Virtualmin Podman plugin for Virtualmin Pro users, bringing per-domain container and pod management to both the UI and CLI, along with a large catalog of easy-to-deploy application recipes Add Btrfs subvolume and hierarchical qgroup quota support for virtual servers and mailbox users Add ability for domain owners to use permitted Virtualmin remote API commands, with auditing and domain-scoped access checks Add Auktiva, Fish Auctions and Pixelfed web app installers for Virtualmin Pro users Add Django web app installer with isolated Python environments, Gunicorn services managed by systemd, production-safe settings and automatic database driver setup Add support for Ubuntu 26.04 Add HTTP/3 support for Nginx websites, including per-domain and server-template controls on supported systems Add full lifecycle support for IPv6-only virtual servers, including creation, modification, cloning, backup, restore, DNS, web, mail and SSL handling Add ability to add or remove an IPv4 address from an existing virtual server Add support for requesting ACME SSL certificates containing IP address identifiers Add support for FTPS backup destinations Add automatic inclusion of MySQL/MariaDB binary log coordinates in database backups for point-in-time recovery when binary logging is enabled on the server Add point-in-time recovery on restore, optionally replaying MySQL/MariaDB binary log transactions from the coordinates recorded in the backup up to a given time Add support for chaining differential backups to a selected full backup, with safer state tracking, log filtering and deletion checks Add alias domain redirect configuration and improve website redirects for sub-paths, filenames and query strings Add resource limits configuration to virtual server templates Add support for domain owners to manage their own systemd user units Add milter-greylist support for greylisting on RHEL 10 and derivatives Add ability to configure the TLS security level for Postfix services managed by Virtualmin Add a dedicated mail options section and group other related module configuration settings into appropriate sections Add TLSA records for Postfix SMTPS services Add support for primary DNS zones and CLI flags to exclude named DNS records Add transactional Cloudflare DNS record updates using the batch API to prevent partial migrations #1267 Add ability to show disk usage on the virtual server summary page Add support for using any DynDNS-compatible dynamic DNS service, like No-IP or Dynu, by making the update server configurable Fix cross-stack restores to preserve target system features, disable unavailable domain features and handle PHP modes correctly Fix unsupported CGI modes in standard templates after cross-stack restores Fix mail client autoconfiguration to enable a supported CGI mode when needed Fix to restore preflight checks and error reporting to catch clashes earlier and show SSL failures Fix post-installation wizard setup for PostgreSQL, SpamAssassin and ClamAV Fix configuration write races in long-running operations that could cause recent Virtualmin settings to be lost Fix to enforce mailbox and domain disk quota on mail delivery even when spam filtering is disabled, so full mailboxes no longer lock out webmail and IMAP access Fix domain registration expiry checks taking too long when a WHOIS server does not respond Fix PHP-FPM version repair running during package updates Fix ZIP restores to validate untrusted archives and extract them as the virtual server owner Fix chroot jail cleanup to safely unmount nested bind mounts before removing files Fix to prevent virtual server owners from downloading files from non-public URLs Fix SSL certificate parsing, CA chain handling, service syncing and repeated ACME request retries Fix several Dovecot SNI and per-IP certificate issues, including nested and alias domains Fix Postfix per-IP certificate updates and TLSA refresh after ACME renewal Fix several DNS record and zone issues, including apex shorthand, parent record locking, DS handling, sub-server zones and proxied cloud DNS checks Fix to prevent deleting credentials used by an active cloud DNS provider Fix MariaDB/MySQL user recreation to preserve authentication plugins and restore extra database users correctly Fix several website SSL, alias and HTTPS proxy redirect regressions Fix SFTP purging of backups stored in date-based directories Fix phpMyAdmin and Usermin automatic login issues Fix web app installers to avoid URL paths owned by plugins Fix Webmin API credential handling and hide passwords from FTP command errors Fix Apache proxy backends to receive the original HTTP or HTTPS scheme through X-Forwarded-Proto Fix config check to advise disabling the default IPv6 address when no externally visible IPv6 address can be detected Fix dynamic IP updates to use SSL when connecting to DynDNS Drop the obsolete per-domain ProFTPD virtual FTP feature while preserving service controls and backup compatibility Rename the Git-based config history CLI commands to list-config-revisions and restore-config-revision Replace the legacy website preview flow with sandboxed proxying Change to move domain-owner Webmin module access from “Server Templates” to “Manage Virtual Server ⇾ Edit Owner Limits”, preserving existing access on upgrade and applying template defaults only to new servers; module access can also be updated for multiple servers from “List Virtual Servers” in Pro, or through modify-limits CLI in all editions #1039

Add a simplified UI for managing website redirects Add support for PHP-FPM workload profiles Add Kanboard and Blesta web app installers for Virtualmin Pro users Add the ability to test two-factor authentication after enrollment Fix PHP-FPM not restarting when certain custom configuration options are used in a template Fix domain expiry notifications occasionally getting stuck Fix to keep local-specific directives when restoring the Postfix configuration Fix the missing message when DKIM is enabled or disabled Fix an issue reading PHP configuration files created by a reseller Update support for Moodle 5.1 and later versions

Add ability to migrate Webmin monolithic to modular while keeping enabled modules for the new repository

Add support for systemd resource limits for Virtualmin Pro users Add support for SFTP backups and restores, including the ability to purge SFTP backups Add support for paginated display of large user lists Add backup signing improvements, including the ability to skip signing when necessary Add option to forward the original HTTP hostname when proxying requests Add phpMyAdmin integration (if installed) when editing databases for virtual servers Add a row showing when and why a domain was disabled in the virtual server summary Add improvements to ACME service notifications Add reseller access to edit PHP-FPM configs Add improvements to handling of remote/cloud DNS hosting Fix validation of A and AAAA DNS records when using modify-dns CLI Fix reliability of remote backups during long-running tasks using Webmin RPC Fix several DKIM-related issues Fix handling of EC SSL certificates Update the repo setup script and workflow to match the newer packaging/CI layout

Fix to correctly add new virtual hosts in Apache config to prevent wrong site being served Fix DNS NS record update correctly when renaming domain Fix to set a custom DNS address for a subdomain only if it really differs from the primary one Fix mail alias domains to manage users expectedly Fix to correctly show current IPv6 address in the form when changing it Fix the default BIND to listen on port 53 unless already configured Fix redirect all requests to SSL site option work correctly Fix support to manage PHP 8.5 versions More details…

Add support for Bunny DNS for Virtualmin Pro users Add improvements to external IPv4 and IPv6 address detection Add improvements and simplifications to the post-installation wizard Add pure-Perl implementation for retrieving SSL certificate information Fix to significantly improve support for IPv6 across different services Fix Apache and Dovecot config issues when restoring the backup Fix to stop breaking Apache config if hostname SSL request fails during Virtualmin installation Fix not to smoosh DNS TXT records together when using CLI #1104 Fix to disallow out-of-domain DNS records when using CLI Fix to correctly add IPv6 to SSL virtual hosts Fix incorrect logic when checking IPv4 and IPv6 addresses in the config check Fix mailbox cleanup to correctly handle messages moved between folders, like to trash or spam Fix missing POP port in mail auto-config that caused some email clients to fail automatic configuration Fix to properly use the global Webmin notification email address for alerts Fix to hide localhost DNS record unless explicitly enabled Fix to completely remove the obsolete m DNS record More details…

Add an API for plugins to exclude specific directories from backups Add ability to exclude some backup features to avoid overhead Fix check for safety when restoring a logged backup Fix to handle cases where no username is entered for SSH in backup destination

Add built-in password recovery support for the login page Add advanced search for backup logs with fielded queries and multi-field terms Add a new CLI API to manage config file backups with list-config-backups and restore-config-backups commands Add full MTA-STS support Add a template option to ignore specified names during ACME certificate requests Add support for record sets in Amazon Route 53 Add support for adding NS records to parent domain with Route 53 DNS Add a default timeout to allow waiting for scheduled backups to finish instead of failing immediately Add BIND and Apache configs validation during config check Add ability to configure DNS resolvers Add support for IPv6 per-IP certificates for Webmin and Usermin Add support for fully-qualified extra admin usernames Add support for plugin-driven scheduled backups, restore, and backup logs used by upcoming WP Workbench Add support for domain restore with a clashing IDs Improve the navigation menu by using a new layout that prioritizes the “Create Virtual Server” button Improve local and remote host handling in MySQL/MariaDB, update grant and access logic when moving and restoring a domain Improve relying on the proper API to interact with the Apache config Improve API categorization for Virtualmin CLI Improve ZIP backups to handle feature files inside the archive, use maximum compression, and skip compressing the internal files Improve the “SSL Certificate” page to display SANs in a more concise and user-friendly way Improve the complex schedule field to display consistently regardless of the schedule Replaced IDNA::Punycode with the actively maintained Net::LibIDN2 for full IDNA2008 support Change Let’s Encrypt renewal default to 21 days before expiry Change to use relative dates for last login and days until renewal when applicable Drop legacy S3 Perl modules and now always require using AWS-CLI Drop supporting outdated panels for migration backups, except for cPanel, Plesk, and DirectAdmin Fix Jailkit support for sub-servers #1082 Fix Rackspace endpoint for London Fix alias domains to allow DKIM to be enabled Fix config check to support Postfix configured as a relay Fix displaying chosen values correctly for a multi-server selection field Fix it to correctly use * as the default in an Apache virtual host on new systems Fix it to stop showing details of the installed web app if the plugin provides it, like with WP Workbench Fix missing RewriteEngine directive when creating a proxy path Fix not update max_spare_servers when saving PHP options if children don’t change Fix renaming a domain with Route 53 DNS enabled, to delete records from the old domain Fix to remove NS records when deleting a sub-domain from Route 53 DNS Fix reseller updates on all available Webmin modules, since saving the template affects their permissions Fix support for Backblaze API keys may start with plus Fix support for new local IMAP authentication with the Dovecot command in Usermin Fix the Dropbox bugs that occurred when listing backups Fix the automatic renewal of SSL certificates with other ACME providers to work Fix the incorrect FQDN check when creating an SSL certificate for the hostname Fix to allow resellers with a Unix login to access the Terminal module Fix to correctly display DNS-related errors with the original error message Fix to correctly sort and place alias domain next to the parent when listing domains Fix to limit lifetime of sessions to one hour by default when using CLI to create a login link Fix to set -all as the default in DNS SPF records Fix to make sure that in PHP disabled mode, PHP files are not processed Fix the sporadic PHP-FPM service going down unexpectedly on EL systems Fix to not force re-generation of MySQL/MariaDB username when just listing using CLI Fix to prevent mail users from setting up email notifications Fix to roll config back when the DNS move fails, by setting it up again on the old host or locally Fix to run pre and post commands when backing up a domain Fix to use a consistent timestamp throughout the backup Fix up paths in autoreply files when renaming users Fix various IPv6 related bugs

Add an intro for the new WP Workbench plugin to the dashboard Fix an issue where the latest updated script failed to load WP Workbench API

Add missing text string for WP Workbench