WordOps

Changed

• [APP] WP-CLI updated to v2.3.0
• [CORE] Improved SSL certificates management from previous letsencrypt or certbot install
• [CORE] Use a separate python file for gitconfig during installation to redirect setup.py output into logs
• [CORE] updated cement to v2.8.2
• [CORE] removed old --experimental flag
• [CORE] Improve and simplify install script

Fixed

• htpasswd protection when migrating from EasyEngine v3 Issue #152
• acme.sh install when migration from EasyEngine v3 Issue #153

Changed

• Improved general logs display
• UFW configuration is only applied during initial installation if UFW is disabled

Fixed

• Redis-server configuration and start
• Nginx upgrade with wo stack upgrade

Changed

• Improve Let's Encrypt certificate issuance logging informations
• MariaDB configuration & optimization is now rendered from a template (can be protected against overwriting with .custom)

Fixed

• Fix cheat.sh install PR #139
• sslutils error when trying to display SSL certificate expiration
• Fix cheat.sh symbolic link check before creation
• subdomain detection with complex suffixes like com.br
• Fix mariadb install/upgrade when running mariadb-10.1
• Fix mariadb install/upgrade on raspbian and debian 8
• Fix mariadb tuning wrong pool_instance calculation

Added

• Rate limiter on wp-cron.php and xmlrpc.php
• mime.types template to handle missing extension ttf
• try_files directive for favicon
• additional settings for fail2ban
• asynchronous installer to decrease install/update duration

Fixed

• Several typo or syntax errors
• wo site errors due to broken symlinks for access.log or error.log
• wo clean error due to unused memcached flag
• MySQL database and user variables overwrited in wo site

Added

• Sendmail stack to send WordPress welcome email properly
• Backup all MySQL databases before removing/purging MySQL stack

Changed

• do not terminate stack install process on errors
• WordOps internal log rotation limit increased to 1MB

Fixed

• ufw rules for proftpd not applied
• phpredisadmin install
• netdata configuration
• extplorer installation
• add LANG='en_US.UTF-8' in install script
• Read public_suffix list with utf8 encoding. Issue #128
• Netdata uninstall script path. PR #135
• SSL Certificates expiration for subdomains

Changed

• WordPress default permalinks structure from /%year%/%monthnum%/%day%/%postname%/ -> /%postname%/

Fixed

• Error with wo stack upgrade --nginx
• Install/update script version check
• clamAV stack install

Added

• Subdomains are automatically secured with an existant Wildcard LetsEncrypt SSL certificate.
  (If a wildcard certificate exist, WordOps will use this certificate for subdomains instead of issuing new certificates)
• MySQL & Redis stack to wo stack remove/purge

Changed

• Date format in backup name : /backup/30Aug2019035932 -> /backup/30Aug2019-03-59-32
• Cleanup and update bash_completion
• cheat.sh is installed with WordOps install script, not as a stack because it wasn't downloaded at all by WordOps (unknown reason yet)

Fixed

• cache-enabler plugin not installed and configured with wo site update site.tld --wpce
• possible issue with domain variable in --letsencrypt=wildcard
• python3-mysqldb not available on Debian 8 (Jessie)
• Fix mysql variable skip-name-resolved
• Fix typo in redis tuning directives

Changed

• updated OpCache Control Panel to v0.2.0

Fixed

• Fix Netdata install on Raspbian 9/10
• wo stack remove/purge confirmation
• Nginx error after removing a SSL certificate used to secure WordOps backend
• wo stack install --all
• ProFTPd fail2ban rules set twice if removed and reinstalled
• wo site update domain_type

Added

• cheat.sh stack : linux online cheatsheet. Usage : cheat <command>. Example for tar : cheat tar
• ClamAV anti-virus with weekly cronjob to update signatures database
• Internal function to add daily cronjobs
• Additional comment to detect previous configuration tuning (MariaDB & Redis)
• Domain/Subdomain detection based on public domain suffixes list for letsencrypt
• Increase Nginx & MariaDB systemd open_files limits
• Cronjob to update Cloudflare IPs list
• mariadb-backup to perform full and non-blocking databases backup (installation only. Backup feature will be available soon)
• Nginx configuration check before performing start/reload/restart (If configuration check fail, WordOps will not reload/restart Nginx anymore)
• Nginx mapping to proxy web-socket connections

Changed

• eXtplorer filemanager isn't installed with WordOps dashboard anymore, and a flag --extplorer is available. But it's still installed when running the command wo stack install
• Template rendering function now check for a .custom file before overwriting a configuration by default.
• flag --letsencrypt=subdomain is not required anymore, you can use --letsencrypt or -le
• Simplify and decrease duration of apt-key GPG keys import

Fixed

• typo error in wo site update : PR #126

Changed

• Nginx package OpenSSL configuration improvements (TLS v1.3 now available on all operating systems supported by WordOps)
• remove user prompt for confirmation with wo update
• Nginx stack will not be upgraded with wo update anymore. This can be done at anytime with wo upgrade --nginx
• Databases name and user are now semi-randomly generated (0-8 letters from the domain + 8 random caracters)

Fixed

• wo upgrade output
• Database name or database user length

Added

• Additional cache expection for Easy Digital Downloads PR #120
• Additional settings to support mobile with WP-Rocket
• Add the ability to block nginx configuration overwriting by adding a file .custom. Example with /etc/nginx/conf.d/webp.conf -> touch /etc/nginx/conf.d/webp.conf.custom
• If there is a custom file, WordOps will write the configuration in a file named fileconf.conf.orig to let users implement possible changes
• UFW minimal configuration during install. Can be disabled with the flag -w, --wufw or --without-ufw. Example : wget -qO wo wops.cc && sudo bash wo -w

Fixed

• WordOps internal database creation on servers running with custom setup

Added

• WordOps backend is automatically secured by the first Let's Encrypt SSL certificate issued

Changed

• Extra Nginx directives moved from nginx.conf to conf.d/tweaks.conf

Fixed

• MySQLTuner installation
• wo stack remove/purge --all
• variable substitution in install script
• wo stack upgrade --phpmyadmin/--dashboard
• phpmyadmin blowfish_secret key length
• Cement App not exiting on close in case of error

Added

• Allow web browser caching for json and webmanifest files
• nginx-core.mustache template used to render nginx.conf during stack setup
• APT Packages configuration step with wo stack upgrade to apply new configurations
• Cloudflare restore real_ip configuration
• WP-Rocket plugin support with the flag --wprocket
• Cache-Enabler plugin support with the flag --wpce
• Install unattended-upgrade and enable automated security updates
• Enable time synchronization with ntp
• Additional cache exception for woocommerce

Changed

• Do not force Nginx upgrade if a custom Nginx package compiled with nginx-ee is detected
• Gzip enabled again by default with configuration in /etc/nginx/conf.d/gzip.conf
• Brotli configuration moved in /etc/nginx/conf.d/brotli.conf.disabled (disabled by default)
• Moving package configuration in a new plugin stack_pref.py
• Cleanup templates by removing all doublons (with/without php7) and replacing them with variables
• Updated Nginx to v1.16.1 in response to HTTP/2 vulnerabilites discovered
• Disable temporary adding swap feature (not working)
• wo stack upgrade --nginx is now able to apply new configurations during wo update, it highly reduce upgrade duration

Fixed

• Error in HSTS header syntax

Fixed

• redis.conf permissions additional fix

Changed

• Cement framework updated to v2.8.0
• Psutil updated to v5.6.3
• PyMySQL updated to v0.9.3

Fixed

• Missing import in wo sync
• redis.conf incorrect permissions

Added

• MySQL configuration tuning
• Cronjob to optimize MySQL databases weekly
• WO-kernel systemd service to automatically apply kernel tweaks on server startup
• Proftpd stack now secured with TLS
• New Nginx package built with Brotli from operating system libraries
• Brotli configuration with only well compressible MIME types
• WordPress site url automatically updated to https://domain.tld when using -le/--letsencrypt flag
• More informations during certificate issuance about validation mode selected
• --php72 as alternative for --php
• Automated removal of the deprecated variable ssl on; in previous Nginx ssl.conf
• Project Contributing guidelines
• Project Code of conduct

Changed

• wo maintenance refactored
• Improved debug log
• Updated Nginx configuration process to not overwrite files with custom data (htpasswd-wo, acl.conf etc..)
• Adminer updated to v4.7.2
• eXtplorer updated to v2.1.13
• Removed WordOps version from the Nginx header X-Powered-By to avoid possible security issues
• Several code quality improvements to speed up WordOps execution
• Few adjustements on PHP-FPM configuration (max_input_time,opcache.consistency_checks)
• Added /dev/urandom & /dev/shm to open_basedir in PHP-FPM configuration

Fixed

• Kernel tweaks were not applied without server reboot
• Fail2ban standalone install
• wo stack purge --all error due to PHP7.3 check
• Nginx helper configuration during plugin install for Nginx fastcgi_cache and redis-cache
• phpRedisAdmin stack installation
• Fixed Travis CI build on pull requests
• Nginx server_names_hash_bucket_size variable error after WordOps upgrade

Changed

• Improve wo update process duration
• Improve package install/upgrade/remove process

Fixed

• phpMyAdmin archive download link archive
• Arguments --letsencrypt=clean/purge for wo site update
• Incorrect directory removal during stack upgrade

Fixed

• Typo in --letsencrypt=subdomain
• phpMyAdmin upgrade archive extraction
• Error in the command wo update. Please use wo update --beta as workaround

Added

• New Nginx package on Ubuntu with Cloudflare HTTP/2 HPACK and Dynamic TLS records
• phpMyAdmin upgrade with wo stack upgrade --phpmyadmin
• Wildcard SSL Certificates support with DNS validation
• Let's Encrypt DNS API support (Cloudflare, DigitalOcean, etc ..) on domain, subdomain, and wildcard
• Flag --letsencrypt=clean to purge a previous SSL configuration
• Support for Debian 10 buster (testing - not ready for production)
• Fail2ban with custom jails to secure WordPress & SSH
• Variable keylength in /etc/wo/wo.conf to define letsencrypt certificate keylenght
• ProFTPd stack with UFW & Fail2ban configurationz
• Beta branch and command wo update --beta for beta releases
• Extra directives in wp-config.php (limit posts revisions, set max_memory, enable auto-update for minor-releases)

Fixed

• Nginx was not reloaded after enabling HSTS
• Netdata, Composer & Fail2Ban stack remove and purge
• WordPress not installed by wo site update with basic php73 sites

Documentation

Let's Encrypt DNS API configuration
Manage Let's Encrypt SSL certificates

Added

• New Nginx package on Ubuntu with TLS v1.3 support (OpenSSL 1.1.1c)
• Netdata upgrade with wo stack upgrade --netdata
• Netdata stack remove/purge

Changed

• phpRedisAdmin is now installed with the stack --admin
• Remove memcached - not required anymore

Fixed

• phpRedisAdmin installation
• Duplicated locations /robots.txt after upgrade to v3.9.5.3
• Let's Encrypt stack wo site update --letsencrypt/--letsencrypt=off
• pt-query-advisor dead link
• Netdata persistant configuration