panel

This release requires [email protected] in order to work properly due to breaking internal API changes.

Fixed

• Fixes subuser creation/edit modal not submitting correctly when attemping to make modifications.
• Fixes a few remaining issues with multiple egg install scripts.
• Removes the ability for a schedule to have a null name and replaces any existing null names with a randomly generated name.
• Fixes schedules aborting the entire run process if a single schedule encountered an exception. This resolves batches of schedules never running correctly if they occur after a broken schedule.
• Fixes schedules not properly resetting themselves if an exception was encountered during the run.
• Fixes numerous N+1 query run-aways when loading multiple servers via the API.
• Fixes numerous issues with displaying directory and file names in the file manager if they included special characters that could not be decoded properly.
• Fixes CPU pinning not being properly passed along to Wings when updated (this also fixes memory/CPU/disk not passing along correctly as well).
• Fixes spinner not displaying properly when displayed over a modal.

Added

• Adds ability for users to generate their own additional server allocations via the frontend if enabled.
• Adds the ability for a user to remove un-needed allocations from their server (as long as it is not the primary allocation).
• Adds support for tracking the last 32 sent console commands for a server. Access the history by using the arrow keys when the command field is active.
• Adds S3 specific environment variables allowing for backups to use any S3 compatiable system, not just AWS.
• Adds support for copying a server allocation address to the clipboard when clicked.
• Adds information about the next schedule run time when viewing an individual schedule.
• Adds link to view a server in the admin control panel to the frontend server view when logged in as a root admin.
• Adds support for egg-specific frontend/backend functionality. This is a beta feature meant for internal features at this time.
• Adds back the EULA warning popup when starting a Minecraft server without an accepted EULA.
• Adds missing descriptions for some user permissions on the frontend UI.

Changed

• Adds Save/Invite button to top of subuser edit/creation modal to reduce the need for scrolling.
• Updated language for server transfers and mounts to be less confusing.
• Wings API endpoint for fetching all servers on a node is now properly paginated to reduce system load when returning hundreds or thousands of servers at once.
• Removes unnecessary Wings API calls when adding/editing/deleting mounts.
• Primary allocation for a server is now always returned, even if the subuser does not have permission to view all of the server allocations.
• Google Analytics frontend code is now only loaded when a valid key is provided.

SHA256 Checksum

62ccfe8d12fa3e390cc0825137d83e3ff3982131cf80605e4891ce98e57c02f9  panel.tar.gz

Fixed

• Fixes bug causing subusers to not be creatable or editable via the frontend for servers.
• Fixes system timezone not being passed along properly to the MySQL connection causing scheduled tasks to run every minute when the MySQL instance and Panel timezone did not line up.
• Fixes listing servers owned by a user in the admin area to actually list their servers.

Changed

• Adds SameSite lax attribute for cookies generated by the Panel.
• Adds better filtering for searching servers in the admin area to better key off name, uuid, or owner username/email.

SHA256 Checksum

259a066d6f4248755f7b0f239df45b70ba69f9364ad543917b238078bc356dab  panel.tar.gz

Added

• Adds support for searching inside the file editor.
• Adds support for manually executing a schedule regardless of if it is currently queued or not.
• Adds an indicator to the schedule UI to show when a schedule is currently processing.
• Adds support for setting the backup_limit of a server via the API.
• [Security] Adds login throttling to the 2FA verification endpoint.

Fixed

• Fixes subuser page title missing server name.
• Fixes schedule task sequence_id not properly being reset when a schedule's task is deleted.
• Fixes misc. UI bugs throughout the frontend when long text overflows its bounds.
• Fixes user deletion command to properly handle email & ID searching.
• Fixes color issues in the terminal causing certain text & background combinations to be illegible.
• Fixes reCAPTCHA not properly resetting on login failure.
• Fixes error messages not properly resetting between login screens.
• Fixes a UI crash when attempting to create or view a directory or file that contained the % somewhere in the name.

Changed

• Updated the search modal to close itself when the ESC key is pressed.
• Updates the schedule view and editing UI to better display information to users.
• Changed logic powering server searching on the frontend to return more accurate results and return all servers when executing the query as an admin.
• Admin CP link no longer opens in a new tab.
• Mounts will no longer allow a user to mount certain directory combinations. This blocks mounting one server's files into another server, and blocks using the server data directory as a mount destination.
• Cleaned up assorted server build modification code.
• Updates default eggs to have improved install scripts and more consistent container usage.

SHA256 Checksum

558dbced916270f7b9d9bf8d550c706aef0f55edfd1845bd0f09d2c25fe6a7b3  panel.tar.gz

Fixed

• Fixes 500 error when mounting a mount to a server, and other related errors when handling mounts.
• Ensures that server_transfers table is deleted if it already exists to avoid unnecessary error.
• Fixes servers getting marked as "not installed" when modifying their startup arguments.
• Fixes filemanager breadcrumbs being set incorrectly when navigating between files and folders.

Changed

• Change the requests per minute from 240 to 720 for the client API to avoid unecessarily displaying
  "Too Many Requests" errors.
• Added error output to certain commands that will output and terminate the command execution if the database
  migrations have not been run correctly for the instance.

SHA256 Checksum

7523e5b694111a50b4ee216aa022e661e2a526862590dc338284e76bb369b7d2  panel.tar.gz

Pterodactyl 1.0 represents the culmination of over two years of work, almost 2,000 commits, endless bug and feature requests, and a dream that has been in the making since 2013. 🎉

Due to the sheer size and timeline of this release I've massively truncated the listing below. There are numerous smaller
bug fixes and changes that would simply be too difficult to keep track of here. Please feel free to browse through the releases
tab for this repository to see more specific changes that have been made.

Added

• Adds a new client-facing API allowing a user to control all aspects of their individual servers, or servers
  which they have been granted access to as a subuser.
• Adds the ability for backups to be created for a server both manually and via a scheduled task.
• Adds the ability for users to modify their server allocations on the fly and include notes for each allocation.
• Adds the ability for users to generate recovery tokens for 2FA protected logins which can be used in place of
  a code should their device be inaccessible.
• Adds support for transfering servers between Nodes via the Panel.
• Adds the ability to assign specific CPU cores to a server (CPU Pinning) process.
• Server owners can now reinstall their assigned server egg automatically with a button on the frontend.

Changed

• The entire user frontend has been replaced with a responsive, React backed design implemented using Tailwind CSS.
• Replaces a large amount of complex daemon authentication logic by funneling most API calls through the Panel, and using
  JSON Web Tokens where necessary to handle one-time direct authentication with Wings.
• Frontend server listing now includes a toggle to show or hide servers which an administrator has access to, rather
  than always showing all servers on the system when logged into an admin account.
• We've replaced Ace Editor on the frontend with a better solution to allow lighter builds and more end-user functionality.
• Server permissions have been overhauled to be both easier to understand in the codebase, and allows plugins to better
  hook into the permission system.

Removed

• Removes large swaths of code complexity and confusing interface designs that caused a lot of pain to new developers
  trying to jump into the codebase. We've simplified this to stick to more established Laravel design standards to make
  it easy to parse through the project and make contributions.

SHA256 Checksum

698705500cb86b970a141cae83f212cda1156bce062f11e4da6b3a6e2a50c00b  panel.tar.gz

Fixed

• Fixes empty array value inside node configuration file which was causing wings to panic when used.
• Fixes multiple text overflows on the frontend at all screen sizes.
• Fixes multiple issues with the mobile design and specific breakpoint changes that would cause text to wrap incorrectly.
• Server console now correctly re-sizes its interior when the screen is resized.
• The number of servers that a user belongs to is now properly displayed in the admin area when listing users.
• Fixes handling of directory names with multiple slashes on the frontend.
• When checking all boxes under a subuser category the checkbox in the header is now properly checked and unchecked for that category.
• Fixes excessive re-rendering issues on numerous server pages.
• Schedule names are now properly validated and no longer overflow their database column as a result.
• Fixes bad encoding when copying files which would cause an error to occur.
• Fixes server resource usage displaying in red even if a server was given unlimited resource limits.
• Fixes fatal errors when attempting to manage server mounts.
• Schedule is_processing state is now reset when a schedule is toggled between active and inactive to better clear potentially corrupted states.

Changed

• Autogenerated usernames are now limited to 64 characters.
• JWT expiration in the console is now handled better to cover more cases and avoid needing to refresh the page in many instances.
• HTTP exception messages are now properly parsed and passed back along to the user to view.

SHA256 Checksum

46e839d20e9aaff7c3e86c9a5eba842ac8e199f1f87c2307d32a77b1cabd0995  panel.tar.gz

Fixed

• [Security] Fixes improperly escaped output in user dropdown listing when adding or editing a server that could allow remote XSS. GHSA-5822-pw57-vv37

SHA256 Checksum

a792866375f6c9414bb6968504ed202e82affa148c498a2e0c60a5ad57064c04  panel.tar.gz

Fixed

• Download file button is now only shown if it is an actual file that can be downloaded.
• Fixes multiple broken search bars throughout the admin area and improves the flexibility of searching via the API.
• Fixes authentication lockout mistakenly being incremented when a successful SFTP login occurred, leading to a lockout when more than 4 connections were opened within a minute for one account.
• Fixes old 3rd-party backups table not being renamed during a migration.
• Fixes ignored files not properly being passed along from the backup screen and task definitions.
• Fixes a fatal error when listing nodes via the application API.

Changed

• Replaces ace editor with CodeMirror.

Added

• Added support for mobile UI views to the frontend.
• Adds support for using Redis sockets rather than TCP.
• Adds total memory and disk allocated when requesting node details via the application API.

Removed

• [Breaking] Removes all references of server packs from the Panel. These were added years ago to patch some design holes and have since been superseded by Docker install scripts.

SHA256 Checksum

87bfc5ddb498cf0e0d19c7a0c9f1af5721a173ab695bd83f46c37e998350a058  panel.tar.gz

Fixed

• Power buttons for a server are now properly disabled until the websocket is fully connected and a server status is returned.

Changed

• Re-orders the input fields when creating a new schedule to be in the same order as normal cron entries, rather than reversed.
• Changes the auto-configuration command to account for wings now being a globally executable binary on the system.

SHA256 Checksum

89e5d6477b6122f4d6c0e8fcee1ce324db0db5c6b662261e9f50d739a3909836  panel.tar.gz

Fixed

• Fixes handling of values with special characters when writing to the environment file.
• Fixes a 3rd party backup plugin causing migrations to fail due to table name collisions.
• Fixes error not being cleared in the file manager when navigating to new directories.
• Fixes modals getting dismissed when selecting text and dragging outside the modal window in Chrome.
• Fixes spinner overlay on the file manager uploads not being fixed properly to the screen.
• Fixes file manager attempting to upload text that gets incorrectly dropped into the file manager, resulting in an error.
• Fixes unnecessary re-rendering and network requests when opening modals within the file manager.
• Fixes errors when adding a database host due to improper host validation, now relies on just attempting to connect to the instance to validate if the host is good or not.

Changed

• Disabled resource integrity hashes by default to avoid high support request volume from people running behind Cloud Flare which modifies the integrity hash as a result of additional minification.

SHA256 Checksum

bf0cf22fcaf1d85c440a8e1c7493ddb772378e4ac0483eeaa8bcf2483ec26978  panel.tar.gz

Fixed

• Corrected API calls for backups to correctly mark a backup as completed without throwing a validation error back to the caller.
• Server resources endpoint no longer returns a 403 error improperly when a server is in a suspended state.
• Confirmation modal now correctly appears when deleting a file via the dropdown menu.

Changed

• Updated multiple parts of the front-end to avoid needless re-rendering when server data changed in parts of the store that were not important for that specific components rendering.
• Field validation errors now output in the same format as all other errors from the Panel.
• Changed how backups are stored in the database to be a little more logical and extension friendly down the road.
• Archives and other specific file types that are known to not be editable can no longer be opened within the file manager.

Added

• Server dashboard now shows the server description.
• Added a new file.read-contents permission which is required for a subuser to be able to view the contents of a given file. The file.read permission now only controls the ability to list the contents of a given directory.

Removed

• Removed unnecessary egg information from the API response to Wings. This is an internal API so it should not affect most users.

SHA256 Checksum

aec4f13d5e64e5c3a93f7b7556748dc6556b513e9378052a98caa07e30a4f263  panel.tar.gz

Fixed

• Fixes server variable default values not getting passed through to wings correctly and leading to a panic crash.
• Fixes files only uploading to the root directory.
• Fixes files being named with their contents when using the Ctrl+S hotkey in the editor.
• Fixes startup variables not being editable and not passing along to wings correctly.

Added

• Added small bubble icon to dashboard to show the current server status.

SHA256 Checksum

f6588f34ee21eccd0f14b3e91fad1254cf2d7120e57a43ecc74fbac6dd20bd17  panel.tar.gz

Fixed

• Fixed some really terrible timeouts when compressing tons of files. 15 seconds is far too short I guess...
• Fixes the kill button not correctly showing up when restarting a server instance, and sometimes just never showing up at all even when you've pressed "stop".
• Fixes restricted IP addresses for client API not being passed along correctly.
• [Security] Fixes certain API includes being wrong returned even if the user did not have permission to view those items on a server.
• Fixes the fun disco mode when viewing a server's console in a fresh tab while installing.
• Fixes integer overflow when storing a backup over 2GB in size.
• Checkbox is now correctly hidden in the file manager breadcrumbs when creating or editing a file.

Changed

• Backup checksums are stored with the checksum type in the data field to avoid BC breaks if wings ever changes how it determines hashes.
• Eggs can now specify multiple different strings for determining if a process should be marked as done starting. These strings now also support regex by prefixing the string with regex:.
• Backups are now marked as failed rather than deleted when they fail on wings. A user must manually delete them from the frontend, however they will not count against their backup limit.
• Files up to 4MB in size can now be edited via the web manager.

Added

• Adds support for uploading files via the web file manager.
• Automated task to run every 30 minutes that will mark any pending backups as failed automatically.
• Adds back the ability to view the startup command and modify startup parameters on a server.

SHA256 Checksum

244cdb59135550f1e8059e8bc571ca61a7b863d6a3602e4456a1ad1943c3c44d  panel.tar.gz

Fixed

• Fixes scrollbar styling issues as a result of the Tailwind upgrade in previous releases.
• [Security] Addresses a Client API vulnerability that would allow a user to list all servers on the system (GHSA-6888-7f3w-92jx)
  • This fix was back-ported into 0.7-develop and released as 0.7.18.
• Fixes a bug that would cause server resource usage to not display correctly on the server dashboard view.
• Fixes an issue where the modal to rename a file would unexpectedly get dismissed while refreshing the directory listing.
• Fixes a missing permissions check for subusers that would incorrectly show the edit icon to users who did not have permission to edit subusers.

Added

• Adds support for Google Analytics on the frontend pages.
• Adds support for automatically refreshing frontend views when a server is marked as installing or an installation completes.

SHA256 Checksum

b3e6a310cb127d2824f62a7a5fd90241d0fe4266cd5206d890a96a5ba5f8cf99  panel.tar.gz

Fixed

• [Security] Re-addressed missed endpoint that would not properly limit a user account to 5 API keys.
• [Security] Addresses a Client API vulnerability that would allow a user to list all servers on the system (GHSA-6888-7f3w-92jx)

SHA256 Checksum

55b12acfdb795c6f0dfca174f9cb7f7b4512a0cdbdf4c3d6c2ea799879d8798b  panel.tar.gz

Fixed

• Disk space is now properly displayed as "unlimited" and not "0" for servers with unlimited disk.
• Prevent creating additional databases for a server via the application API when a server has reached its limit.
• Fixes a 500 error being thrown when editing a server due to invalid data being submitted.
• Databases can now properly be deleted even when the database host is unreachable.
• The search bar for users now properly searches their servers and returns the results.
• Users with more than 15 servers can now properly paginate through the server listing, rather than only being able to see the first 15.
• Misc. front-end re-rendering fixes to improve page performance especially on slower devices.
• Errors returned by Wings are now more likely to be properly transformed into their Panel equivalent rather than a generic 504 error.

Changed

• All frontend templates have been updated to use styled-components and twin.macro for theming, rather than directly compiling and loading CSS files.
• Updated numerous dependencies to their latest version and got most unit tests (and all integration tests) back in working order.
• Large swaths of unused code have been deleted.
• Rate limit for API is now easily configured using environment variables in the configuration.
• Animation time halved for all frontend screens to make things feel a little snappier.
• File manager now uses stale-while-revalidate hooks to make navigating through folders far faster, navigating back to folders instant, and to keep the file-manager in sync when leaving and returning to the page.

Added

• Support for defining and assigning additional docker container mounts for servers. Thanks @matthewpi!
• Wings setup command is now prefixed with sudo to avoid errors in certain environments.
• Added support for generating 2FA recovery tokens when setting up two-factor on an account.
• Added support for mass-move, mass-delete, and mass-compression of files in the file manager.
• File manager now supports compressing and decompressing files & archives in a directory.
• Added support for users to change their primary allocations and add notes to each allocation.
• Added support for right clicking a file row to open the actions context menu.

SHA256 Checksum

a026b0eb9cd881529830b98abefd1812ca34177954df41fa1a9d7f171a661307  panel.tar.gz

Fixed

• Max connection count for server databases is now properly saved to the database.
• Fixed admins being unable to select permissions for subusers on servers that they are not assigned to.
• Fixed invalid class extension for server transfers.
• Filenames with special characters are now displayed correctly throughout the UI.
• Pressing Ctrl+S/Cmd+S in the file edit screen now correctly saves the file.
• Scheduled tasks for backups are now properly displayed and do not require a payload be provided.

Changed

• Server resource limits are now displayed consistently across the UI.

Fixed

• Fixes assorted validation error and translation key issues.
• Support pipe characters within regex validation rules for egg variables. (see #1960)
• Properly passes the value to skip install scripts on servers being created.
• Subuser welcome email now correctly links into the panel, rather than to an API endpoint.
• Only the relevant node configuration data is displayed in the panel now, allowing wings to change the configuration structure without having to update panel releases as well.
• Fixes bugs that cropped up when changing the FQDN for a node.
• URL fragments are now correctly decoded before being passed along to wings when working with files and directories containing spaces and special characters.

Added

• Backups stored in S3 can now be downloaded and deleted from the system properly.

Changed

• Various helper text throughout the admin area has been updated to be more correct and more easily understood.
• Admin area CSS updated to be more visually appealing and consistent with the rest of the design.

SHA256 Checksum

fa55f47366162be90de792f3b73b39260e5e5787d2eadd471b7b6d3976ded04c  panel.tar.gz

Fixed

• Fixes an error with database migrations causing the final migration to fail.
• Browser progress indicators are no longer incorrectly flashed on the page when a request fails if an indicator was not already being displayed.
• Server console can now correctly be viewed by an administrator while a server is running the installation process.

Added

• Adds support for specifying how many backups a server is allowed to have at once. (Don't worry, we'll be implementing total size limits as well before final release!)
• Adds support for using AWS S3 as a backup location for server files. This implementation is not yet completed, but the base code for generating them now exists.

SHA256 Checksum

4e1b6b526d3a1e27ec383a804b2c917bd9881e7c2617f5c7d7c264be38e8db90  panel.tar.gz

Fixed

• Admin design updated to be easier to read in some locations and update missed templates.
• A UUID is now properly assigned to a node when that node is created.
• Fixes multiple errors on the login checkpoint screens.
• SFTP authorization is now back to working correctly.
• Admins can now view both their own servers, and all servers on the system via a toggle on the dashboard.

Changed

• Multiple internal react templates were updated to be easier to extend and re-use in the future.
• Error messaging updated to be more user friendly and indicate if they should or should not wait for it to resolve.
• Descriptions for locations, nodes, and servers are now all optional fields.

Added

• Local backups can now be generated via the scheduled tasks system.

SHA256 Checksum

025b0d5ffe8a45766d2fc05d120b1c52b401b5e8b4edf11dc9d8e35a9f86ff05  panel.tar.gz