WordOps

Added

• MariaDB 10.5 support (installed by default)
• Upgrade to MariaDB 10.5 with wo stack migrate --mariadb

Changed

• Improved Nginx caching rules to cache requests with query strings related to analytics (utm_, fbclid)
• WordOps is installed inside a Python virtual environment in /opt/wo to isolate it from the system's Python libraries

Fixed

• Useless php-cli version removal
• Redis 6.0.6 not installed on Ubuntu 20.04 LTS

Changed

• Redis 6.0.6 available on Ubuntu LTS

Fixed

• Avif (AV1 Image Format) & WebP Nginx conditional support(PR #322)
• Sendmail initial configuration with sendmailconfig
• SSL certificates export encoding with utf-8
• Nanorc install on Ubuntu 16.04 LTS

Added

• Add avif (AV1 Image Format) support into Nginx (PR #314)

Changed

• Use zstd instead of pigz for archive compression
• Exclude Nginx_vts status page from traffic calculation (PR #294)

Fixed

• fail2ban install without Nginx
• Grant MySQL permissions on all MySQL/MariaDB variant (PR #285)
• PHP PECL extensions and PHP 8.0 issues

Fixed

• Wrong PHP upstream for WordOps backend

Fixed

• Redis repository on Ubuntu 20.04 LTS

Changed

• MariaDB offical repository available for Ubuntu 20.04 LTS

Added

• Set opcache.preload_user for PHP 7.4
• Link to GitHub changelog after WordOps upgrade
• Automated PHPMyAdmin and Adminer latest release download and install
• Enable Let's Encrypt SSL on sites with http auth (PR #254)
• Ubuntu 20.04 LTS Support (experimental)
• New Nginx 1.18.0 package built with OpenSSL 1.1.1g
• Default PHP version can be set in /etc/wo/wo.conf

Changed

• Improved caching rules (PR #265)
• Default PHP version is now 7.3

Fixed

• MySQL databases backup when using remote MySQL server
• PHPMyAdmin assets missing after installation
• Missing WP-CLI argument when switching site URL to https (PR #257)
• WordOps installation failure with pip
• Installation on raspberry pi 4
• Fail2ban configuration when Nginx is not installed
• Wo-kernel systemd service start failure
• missing letsencrypt settings in wo.conf
• MariaDB issue with innodb_buffer_pool_instances

Fixed

• wo secure --port variable error
• --letsencrypt variable error

Added

• Backported Nano editor package for Debian/Ubuntu/Raspbian (which support syntax highlighting with --nanorc)
• Protect Easy Digital Download files from being accessed directly (PR #222)

Changed

• Improved WordOps performance by removing useless imports in wo site code
• Improved opcache cleaning with wo clean --opcache
• Force php imagick extension to be enabled after php-fpm install
• Netdata upgrade is now performed with fresh install script downloaded from github
• Update phpmyadmin to v5.0.1

Fixed

• Domain IP validation when using CNAME before issuing SSL certificate
• Netdata stack purge/remove not working properly
• Do not backup all databases when purging --mysql stack with remote MySQL server
• Netdata upgrade failure due to missing arguments

Changed

• Proxy virtualhost now include proxy_params with X-Forwarded-Proto header
• Acme.sh upgrade

Fixed

• Issue with Nginx variables_hash_bucket_size & variables_hash_max_size
• Netdata MySQL user error when purging/reinstalling Netdata stack
• Fix wo site cd

Added

• --fail2ban in wo stack upgrade

Fixed

• error with wo maintenance
• php-igbinary missing for php74 (run wo stack upgrade to install it)
• opcache reset with wo clean

Added

• PHP 7.4 support
• Improved Webp images support with Cloudflare (Issue #95). Nginx will not serve webp images alternative with Cloudflare IP ranges.
• Stack upgrade for adminer
• Check acme.sh installation and setup acme.sh if needed before issuing certificate
• Add --ufw to wo stack status
• Add Nginx directive gzip_static on; to serve precompressed assets with Cache-Enabler or WP-Rocket. (Issue #207)

Changed

• Previous --php73 & --php73=off flags are replaced by --php72, --php73, --php74 to switch site's php version
• phpMyAdmin updated to v4.9.2
• Adminer updated to v4.7.5
• Replace dot and dashes by underscores in database names (Issue #206)
• Increased database name length to 32 characters from domain name + 8 random characters

Fixed

• typo error in motd-news script (Issue #204)
• Install Nginx before ngxblocker
• WordOps install/update script text color
• Issue with MySQL stack on Raspbian 9/10
• Typo error (PR #205)
• php version in wo debug (PR #209)
• SSL certificates expiration display with shared wildcard certificates

Added

• [ACME] Display warning about sudo usage when issuing certificate with DNS API validation (require sudo -E)

Changed

• [ACME] Resolve domain IP over HTTPS with Cloudflare DNS Resolver
• [CORE] Cement Framework updated to v2.10.2
• [SITE] database name = 0 to 16 characters from the site name + 4 randomly generated character
• [SITE] database user = 0 to 12 characters from the site name + 4 randomy generated character
• [STACK] Improve sysctl tweak deployment

Fixed

• [SITE] https redirection missing on subdomains sites
• Issues with digitalocean mariadb repository
• Cement Framework output handler issues
• [CLEAN] check if Nginx is installed before purging fastcgi or opcache

Added

• [STACK] nanorc syntax highlighting for nano editor : --nanorc

Changed

• wo stack remove/purge without argument print help instead of removing main stacks

Fixed

• Import rtCamp:EasyEngine GPG key to avoid issues with previous nginx repository
• Unable to issue certificate for a domain if a subdomain certificate exist
• Incorrect WP-CLI path site_url_https function
• wo stack upgrade --ngxblocker not working properly

Fixed

• WordOps install/upgrade from PyPi

v3.10.0 - 2019-10-30

Added

• WordOps is now installed inside a wheel with pip (easier, cleaner and safer) from PyPi
• Redis 5.0.6 package backported to Debian 8/9/10
• Custom motd to display a message if a new WordOps release is available
• Run mysql_upgrade during MySQL upgrade with wo stack upgrade to perform migration if needed
• wo stack upgrade --ngxblocker to update ngxblocker blocklist

Changed

• Sysctl tweaks are applied during stack install and removed from install script
• Nginx & MariaDB systemd tweaks are removed from install script and applied during stacks install/upgrade
• Initial creation of .gitconfig is displayed the first time you run the command wo
• Added /var/lib/php/sessions/ to open_basedir to allow php sessions storage
• WordOps now check if a repository already exist before trying to adding it again.
• Improved SSL certificate error messages by displaying domain IP and server IP
• Version check before updating WordOps with wo update is now directly handled by wo
• Refactored WordOps download function with python3-requests
• MySQL backup path changed to /var/lib/wo-backup/mysql
• Do not check anymore if stack are installed with apt in wo service but only if there is a systemd service
• Refactored --letsencrypt=renew. Require the flag --force if certificate expiration is more than 45 days
• Improve netdata stack upgrade with install from source detection and updater fallback

Fixed

• Incorrect PHP-FPM log path is wo log
• force-ssl.conf not removed after removing a site
• wo clean --opcache not working with invalid SSL certificate
• wo stack install --cheat wasn't working properly previously
• wo info failure depending on php-fpm pool name. ConfigParser will now detect the section name.

Changed

• [STACK] New Nginx package built with libbrotli-dev for all linux distro supported by WordOps

Fixed

• GPG keys error with previous EasyEngine Nginx repository
• Issue with --ngxblocker stack removal/purge
• Install/Update issues with python3 setup.py
• WordOps deploying SSL certificate even if acme.sh failed

Added

• [STACK] Add Nginx TLS 1.3 0-RTT configuration

Changed

• [STACK] New Nginx package built with OpenSSL_1.1.1d and the latest ngx_brotli module

Fixed

• wo stack upgrade when using nginx-ee
• wo secure --auth
• wo secure --sshport not working with default ssh config
• Issues after APT repositories informations changed
• www was added to WordPress site url with subdomains Issue #178
• Issuing certificate with acme.sh for sub.sub-domains not working

Added

• [STACK] Nginx server_names_hash_bucket_size automated fix
• [STACK] Nginx configuration rollback in case of failure after wo stack upgrade --nginx
• [STACK] Nginx ultimate bad bots blocker with wo stack install --ngxblocker
• [STACK] Added support for custom Nginx compiled from source
• [STACK] Rollback configuration with Git in case of failure during service reload/restart
• [SITE] Enable or disable Nginx ultimate bad bots blocker with wo site update site.tld --ngxblocker/--ngxblocker=off

Changed

• [CORE] Query acme.sh database directly to check if a certificate exist
• [SITE] --letsencrypt=renew is deprecated because not it's not required with acme.sh

Fixed

• [SITE] Issues with root_domain variable with wo site update
• [SECURE] Wrong sftp-server path in sshd_config
• [SITE] Git error when using flag --vhostonly
• [SITE] Wrong plugin name displayed when installing Cache-Enabler

Added

• [SECURE] Allow new ssh port with UFW when running wo secure --sshport
• [SECURE] Additional Nginx directives to prevent access to log files or backup from web browser
• [CORE] apt-mirror-updater to select the fastest debian/ubuntu mirror with automatic switching between mirrors if the current mirror is being updated
• [SITE] add --force to force Let's Encrypt certificate issuance even if DNS check fail
• [STACK] check if another mta is installed before installing sendmail
• [SECURE] --allowpassword to allow password when using --ssh with wo secure

Changed

• [SECURE] Improved sshd_config template according to Mozilla Infosec guidelines
• [STACK] Always add stack configuration into Git before making changes to make rollback easier
• [STACK] Render php-fpm pools configuration from template
• [STACK] Adminer updated to v4.7.3

Fixed

• [STACK] UFW setup after removing all stacks with wo stack purge --all
• [CONFIG] Invalid CORS header
• [STACK] PHP-FPM stack upgrade failure due to pool configuration

Added

• [STACK] UFW now available as a stack with flag --ufw
• [SECURE] wo secure --ssh to harden ssh security
• [SECURE] wo secure --sshport to change ssh port
• [SITE] check domain DNS records before issuing a new certificate without DNS API
• [STACK] Acme challenge with DNS Alias mode --dnsalias=aliasdomain.tld acme.sh wiki

Changed

• [APP] WordOps dashboard updated to v1.2, shipped as a html file, it can be used without PHP stack
• [STACK] Refactor Let's Encrypt with acme.sh
• [STACK] Log error improved with acme.sh depending on the acme challenge (DNS API or Webroot)
• [INSTALL] Removed UFW setup from install script
• [APP] phpMyAdmin updated to v4.9.1
• [STACK] Commit possible Nginx configuration changes into Git before and after performing tasks (in wo secure for example)
• [CORE] Update deprecated handlers and hooks registration

Fixed

• [STACK] wo stack purge --all failure if mysql isn't installed
• [INSTALL] Fix EEv3 files cleanup
• [SECURE] Incorrect variable usage in wo secure --port
• [INSTALL] Fix backup_ee function in install script