3.3.0

Features & Improvements​

• Packages & Apps (HiTechAdmin > Services): one page for every optional module - Docker, MongoDB, MSSQL, FTP, Sentinel monitoring, S3 cloud backup (rclone), CDN, Caddy/Lighttpd/H2O/Cherokee WebEngines, HAProxy/Traefik edge routers, WAF, CSF, PHP 5.6-8.5 and the licensed products (CloudLinux, JetBackup, KernelCare, CPGuard, Softaculous, SitePad). Install, uninstall and repair run as background jobs (hitechcloudcli enterprise <module> <action> --bg) with a state file, a live-streamed log and a progress bar; troubleshoot answers inline. Licence keys are saved per module.
• Docker as an application: on the native stack the administrator installs Podman once (hitechcloudcli native-docker install); every account whose plan grants docker gets a rootless runtime of its own (subuid ranges, linger, user socket) and a new Docker page - containers (start/stop/restart/logs/terminal/remove), images (pull/remove), volumes, networks, a run-container form with ports/volumes/env/limits, and prune. plan-apply switches it on/off to follow the plan.
• MongoDB (BETA): hitechcloudcli native-mongodb install (loopback only, authorization on) and a /mongodb page for accounts - databases and users with the <account>_ prefix, grant/revoke, passwords, connection string. New mongodb feature.
• Multi-WebServer: four more engines - Caddy (8191), Lighttpd (8192), H2O (8193), Cherokee (8194) as backends behind the nginx front-end with master configs, vhost templates, units, syntax tests and reloads; selectable per website once installed. HAProxy and Traefik ship as additional edge routers with full configs.
• WebEngine report to the administrator: state, uptime, CPU share, memory, tasks and sites for every engine and edge router (/api/services/webengines, shown on the Web servers tab).
• WireGuard VPN: hitechcloudcli native-wireguard installs the server (port, peer limit), creates peers bound to hosting accounts with a per-peer bandwidth cap (tc, both directions) and client configs. Admin manages peers on Packages & Apps; resellers see only their accounts' peers; accounts download their configs from the new VPN page (feature vpn).
• IPv4 / IPv6 address pool: hitechcloudcli native-ipmanager records extra addresses (brought up on boot), assigns them to accounts or resellers; the front-end binds an account's sites to its dedicated address.
• Logs & IP lookup: every client IP on the domain Logs page is clickable for WHOIS/ASN details from APNIC RDAP; an hourly hitechcloud rdap-scan timer enriches the busiest IPs per domain into a Top visitors table (network, organisation, country, abuse contact).
• Cron jobs: Run now opens a modal that executes the job in its container and streams output live with the exit code (closing it stops the command); Delete needs a second click within a 5-second Confirm countdown.
• Panel domain SSL on HiTechAdmin > Settings > General: see the certificate served on 2083/2087, (re)issue Let's Encrypt in the background, or install a pasted custom certificate. Domains > Manage SSL can now paste a certificate/key instead of file paths; pasted pairs are validated (key matches, not expired, SAN covers the domain) and stored root-only. Mail can use a hostname and certificate of its own (hitechcloudcli native-mail hostname mail.example.com).
• Max processes (PIDs): TasksMax is derived from plan RAM (500 per GB, floor 100, unlimited for 0 GB) with a /home/<user>/TasksMax override that user-limit --tasks also writes; documented.
• Security: server/migrate.sh and user/transfer.sh build rsync/ssh as argv arrays (no eval) and pass the SSH password through sshpass -e; the in-tree CLI copy is now identical to the shipped one.
• Fixes: onboarding wizard's webserver step on the native stack ("Failed to switch webserver") now records the account's preferred WebEngine; Matomo/Drupal installs on OpenLiteSpeed find php+composer inside the container and copy the host phar in when missing; WordPress scan detects installs whose siteurl uses www. when only the bare domain is added (and vice versa); WHMCS autologin no longer opens about:blank (link validated, window.open, ServiceSingleSignOn/AdminSingleSignOn added; the API answers with a host even when the public IP is unknown); Dashboard is the first item in the sidebar; #last-ip truncated on the dashboard.
• Integrations & repository: vendored private submodules integrations/ftp (vsftpd image), integrations/clientexec (ClientExec plugin, docs and logo) and integrations/quota-report; .gitmodules regenerated against the repositories that exist; podman-install-test.yml removed; Go hitechcloud quota-report replaces repquota | awk.
• Docs: Packages & Apps, Docker application, MongoDB, ClientExec, FTP image, PIDs limit, cron Run/Confirm, custom SSL for panel/webmail/mail service; "Docker" category renamed to "Containers"; broken website links fixed. version/3.3.0/UPDATE.sh migrates existing servers.