Skip to content

Changelog

What's new in Vexlyx

Generated from tagged releases on the product repo. Internal maintenance commits are left out; see the GitHub release for the full, unfiltered list.

v0.1.0

October 14, 2026

Bug fixes

  • F2.3: Add multi-framework vite/static start fallback and multi-project container isolation
  • Let static/PHP projects deploy without a connected git repo
  • Pin dashboard HOSTNAME and fix CoreDNS auto-plugin syntax
  • F5.10: Production subdomain routing over HTTPS
  • F5.9: Add missing api.<domain> DNS record
  • domains: Verify TXT records against public resolvers, not the local one
  • domains: Surface the required A record, not just TXT verification
  • F5.14: Surface backup script stderr and add startup health check
  • F3.5: Responsive domain/DNS UX overflow fixes
  • Tear down containers and workspace on project delete/rename
  • Route webmail at webmail.<domain> over HTTPS in production
  • F5.26: Include mail host A record in required mail records
  • F5.27: Valid zone files for hosted DNS (absolute names, chunked TXT, own NS)
  • F5.27: Use an increasing SOA serial so CoreDNS reloads edited zones
  • mail: Make Dovecot/Postfix tables readable and compile lmdb maps as root
  • installer: Point installer and docs at the atlantiqs-org repo
  • 2fa: Clear stale recovery codes on reconfirm
  • 2fa: Restore real argon2 in tests and assert used-row survival
  • 2fa: Map reset errors and clean test types
  • 2fa: Stop leaking totp secret in login response
  • 2fa: Final review wave (migration, challenge retry, setup guard, totp window, doc)
  • mail: Provision trusted TLS certificates (#5)
  • 2fa: Add missing database migration
  • proxy: Pin panel services to Traefik network
  • mail: Show production client hostname and TLS guidance
  • databases: Disable Adminer link in production unless explicitly configured (#8)
  • domains: Allow assigning existing domains to projects
  • F5.23: Send panel mail as notifications@<panel domain> with Reply-To (#22)
  • Use valid GitHub App manifest OAuth key (#33)
  • Streamline self-hosted GitHub connection flow (#34)
  • Make runtime health checks dependency-safe (#38)
  • installer: Document hosted mail DNS records (#75)
  • api: Enforce Socket.IO origin policy in production (#76)
  • system-email: Prevent notification failures from crashing API (#78)
  • domains: Scope SSL expiry alerts to the caller's domains (#43) (#84)
  • databases: Keep the record when the engine drop fails (#48) (#95)
  • github: Enforce installation ownership at write time (#81)
  • backups: Abort restore unless project containers stop (#79)
  • env: Fail deploys instead of writing empty secrets on decrypt errors (#94)
  • sockets: End live connections with the session that opened them (#107)
  • api: Resolve the Python interpreter via PYTHON_BIN everywhere (#93)
  • sockets: Authorize backups and services room subscriptions (#101)
  • webmail: Verify TLS to Dovecot/Postfix outside development (#86)
  • auth: Equalise login timing for unknown emails (#83)
  • monitoring: Restrict host-wide metrics to admins (#82)
  • dns: Surface zone file write failures instead of swallowing them (#97)
  • git: Enforce repository URL policy across project entry points (#80)
  • mail: Report Postfix map rebuild failures instead of swallowing them (#98)
  • Time-limit every system script command and spawned manager (#99)

Documentation

  • Update primary domain from vexlyx.dev to vexlyx.com in FEATURES.md
  • Add F5.22, clarify Manage DNS as optional (found via live testing)
  • Mark F5.9/10/11 complete, document domain-verification fixes
  • F3.5: Mark feature complete and document responsive fixes
  • Add the MIT license text
  • 2fa: Mark F5.17 complete with dev docs
  • 2fa: Add design spec and implementation plan
  • Document production Adminer access, enable script and troubleshooting (#10)
  • Say where the reference pages live (#13)
  • F6.2: Document CI checks and release tagging in CONTRIBUTING (#20)
  • F5.28: Specify Scheduled Tasks (cron jobs) in FEATURES.md (#27)
  • F5.29: Specify GitHub integration (connect account, pick repo, auto-deploy) (#29)
  • Complete GitHub integration guide (#32)
  • F6.1: Complete professional documentation (#39)
  • Add Google Search Console verification tag (#91)
  • claude: Forbid AI attribution in commits and pull requests (#108)

Features

  • F0.1: Initialize turborepo monorepo with three workspaces
  • F0.2: Scaffold Next.js 15 dashboard with shadcn/ui and layout system
  • F0.3: Scaffold Fastify 5 API with health check, error handling, and Pino logging
  • F0.4: Add Prisma schema, PostgreSQL Docker Compose, migrations, and seed
  • F0.5: Add Redis, BullMQ, and Traefik to Docker Compose dev environment
  • F0.6: Add authentication system with Argon2id, Redis sessions, and rate limiting
  • F0.7: Add shared package with auth schemas and types
  • F1.1: Add project CRUD API with soft delete and shared schemas
  • F1.2: Add project dashboard UI with card grid, create modal, and detail page
  • F1.3: Add git repository integration with SSH key gen and webhook URL
  • F1.4: Integrate nixpacks for zero-config build system
  • F1.5: Implement Docker deployment engine with container lifecycle and compose templates
  • F1.6: Add real-time log streaming via Socket.io
  • F1.7: Add environment variables management with AES-256-GCM encryption
  • F2.1: Add Next.js runtime deployment with SSR, auto-detection, and build caching
  • F2.2: Add Python (Django/Flask/FastAPI) deployment with auto-detection, WSGI/ASGI servers, and version pinning
  • F2.4: Add PHP and WordPress deployment runtime with 1-click installer
  • [F2.5] custom dockerfile deployment
  • [F2.6] database provisioning (MySQL/PostgreSQL)
  • [F2.7] GitHub webhook auto-deploy
  • F3.1: Implement custom domain management with DNS TXT verification and Traefik routing
  • F3.2: Implement subdomain and wildcard routing with Traefik priorities and verification inheritance
  • dns: Implement F3.3 DNS record management with CoreDNS and dedicated UI
  • ssl: Implement F3.4 SSL certificate management with Let's Encrypt, custom certs, and Traefik TLS
  • F4.1: Implement Postfix SMTP server with OpenDKIM, virtual domains, TLS, and mail dashboard
  • F4.2: Implement Dovecot IMAP server with ARGON2ID auth, Maildir storage, and Postfix SASL integration
  • F4.3: Implement mailbox management UI with real IMAP/SMTP delivery
  • F4.4: Implement Roundcube webmail with STARTTLS auth and dashboard tab
  • F4.5: Implement SPF, DKIM, DMARC auto-configuration with deliverability scoring
  • F4.6: Implement email forwarding and alias management
  • F4.7: Add vacation auto-responder with Dovecot Pigeonhole Sieve
  • f2.8: Implement file manager, wordpress backup, and chrooted sftp access
  • F5.1: Add one-line production installer with idempotent setup
  • f5.2: Implement server and container resource monitoring with real-time and historical metrics
  • f5.3: Add full-system backup with scheduling, retention, and restore
  • F5.4: Add web-based UFW firewall management
  • F5.5,F5.8: Add user roles & permissions with reseller sub-accounts
  • F5.6: Add service status dashboard for Postfix, Dovecot, CoreDNS, Postgres, Redis & Docker
  • F5.7: Fast static & WordPress serving (no-build deploy path)
  • F5.9: Onboarding DNS records & public IP visibility
  • Raise file upload limit from 100 MB to 1000 MB
  • F5.11: Panel settings page with password change and DNS reference
  • F5.12: Unify refresh button animation via shared hook
  • F1.8: Reorganize project detail page into tabbed sections
  • F4.8: Add mail queue management, delivery log, and DKIM rotation
  • F5.13: Add per-core CPU monitoring and configurable server timezone
  • F5.15: Add Docker image/container cleanup and disk reclamation
  • F5.16: Add real dashboard home widgets
  • F5.18: Add audit log for security-sensitive actions
  • F5.19: Add fine-grained custom permissions
  • F5.20: Add reseller overselling mode for quotas
  • F5.21: Add no-build PHP hosting for composer-less projects
  • F5.22: Clarify Manage DNS as optional, not required setup
  • F5.25: Per-domain DNS mode (connect-only vs hosted)
  • F5.26: Mail auth records for connect-only domains
  • F5.27: Public authoritative DNS and prepare-zone-before-switch
  • 2fa: Add REQUIRE_ADMIN_2FA flag
  • 2fa: Add otplib and qrcode deps
  • 2fa: Add totp columns and recovery_codes table
  • 2fa: Add shared 2fa schemas and audit actions
  • 2fa: Add TwoFactorService with totp and recovery codes
  • 2fa: Split login with challenge and 2fa endpoints
  • 2fa: Two-step login with totp challenge
  • 2fa: Settings security card and admin reset
  • Feature f5.17
  • installer: Opt-in Adminer in production behind HTTPS and basic auth (#9)
  • docs: Move the VitePress docs site into docs/ (#12)
  • F6.2: Add CI, release workflow, changelog config and dashboard tests (#18)
  • F5.23: System transactional email and password reset (#21)
  • Add GitHub App integration (#30)
  • dx: Add `pnpm bootstrap` one-command local setup and rewrite README (#31)