3.0.4

Release 3.0.4 closes the issues found while QA-ing 3.0.3 on a live AlmaLinux 8 server, hardens the terminal, and adds the collaboration suite (Chat, Meetings, Files, Documents, Booking, AI Assistant) to the webmail.

Fixes​

Security​

• Terminal jail: the web terminal and jailed SSH logins run inside a mount + PID namespace of the account's own (hitechcloud-jail): the account's home, the system's tools read-only, its database sockets, and nothing else. cd / / ls /home / reading /etc/hitechcloud are gone. rbash stays only as a fallback.
• WAF: 3.0.3's permission hardening left native.conf and the site records unreadable by the WAF service, so every firewalled Apache/OpenLiteSpeed site was proxied to nginx and answered 502. Records are group-owned by the WAF now.

WebEngines​

• OpenLiteSpeed "No input file specified" / 502: external processors are named per site. Two vhosts on the same PHP version shared one entry, so the second site's PHP ran in the first site's PHP-FPM pool and failed open_basedir. wp.hitechcloud.org and every other OLS site now serve correctly.
• Admin > Domains > WebEngine Configuration: edit the front-end, nginx, Apache and OpenLiteSpeed master configs with syntax check, dated backups, restore and reload. LiteSpeed Enterprise is listed when installed.

Cache & search services​

• Cache pages show the account's own credentials/socket (never rendered before), read the real Valkey (6380) and Elasticsearch (9201) ports instead of 6379/9200, and let the account enable its own memcached and Varnish; the admin sees and switches both on the account's services tab.
• native-search: OpenSearch/Elasticsearch superuser recovered and held by the panel, ports pinned, one login per account scoped to <account>_* indices, provisioned at account creation like the Redis/Valkey logins.

Monitoring​

• Uptime: Sentinel was never installed on native servers; it is installed by the installer and the update, built statically (the shipped binary needed glibc 2.32), and the Uptime page has a live "Right now" column refreshed every 30 s.
• Firewall Events are live: the per-site event table refreshes every 5 s.

WordPress​

• Settings tab loads in one WP-CLI call instead of eight (10–25 s → ~1 s).
• Per-plugin / per-theme / core auto-update management, "disable all updates" switch, update now.
• Security & Debug and Staging & Hardening tabs merged; the tab bar no longer wraps.
• Screenshots: the panel's own screenshot service is installed and used; placeholder + retry when absent.
• PageSpeed: built-in speed test, server-wide API key list with rotation, 6 h cache.

Accounts, IPs, DNS​

• Git Deployment: a site is "attached" only when it names a repository (no more false positives).
• Creating a reseller in the admin writes its limits file, so IPs can be allocated to it and it can create accounts.
• New DNS zones use the account's assigned dedicated IP instead of the control IP.
• SMTP settings: non-email usernames (SendGrid apikey, SES keys) are accepted and rejected fields are reported instead of silently dropped.
• Admin > Server > Databases: every MySQL/PostgreSQL database with owner and size, users, live process list with kill, phpMyAdmin sign-on as administrator, pgAdmin proxied for the administrator. pgAdmin is installed by the installer/update.
• Transfer Accounts between servers works on the native stack (databases, mail, DNS, SSL, cron); user backups no longer archive every account's maildirs; domain redirects on native; ARM64 (aarch64) installs and releases.
• DNS Clustering: real zone push to HiTechCloud peers and to cPanel/WHM, DirectAdmin, Plesk and Cloudflare providers, with a nightly reconcile.

New in the webmail (port 2096)​

• AI Assistant (admin-configured OpenAI / Anthropic / OpenAI-compatible gateway with per-account limits and audit log): reply suggestions, summaries, key points, translate, format; Vibe Code assistant on 2083 (deploy from GitHub/zip/paste, AutoSSL, error diagnosis, one-click rollback) and an admin assistant on 2087 with delegation rules.
• Chat / TeamChat: 1:1 and group chat, rooms, threads, polls, mentions, pins, file sharing, share-email-to-room, guests by link.
• Meetings / Webinar: self-hosted WebRTC SFU (hitechcloud-meet, UDP 8894) with lobby, passwords, roles, screen share, recordings, polls, Q&A, webinar mode.
• Files with sharing links (password, expiry, access log with map), Smart Attach, calendar invite timeline preview, Booking pages.
• Documents: real-time collaborative docs, sheets and slides (Yjs), docx/xlsx/pptx import/export, review mode, comments, versions, sharing.

Update​

hitechcloudcli update applies version/3.0.4/UPDATE.sh: installs the jail and sentinel, shares site records with the WAF, re-renders OpenLiteSpeed vhosts, provisions search logins and pgAdmin.