KStack

Fixed

• OpenLiteSpeed was never once started. The service was being started by a unit name that does not exist on Debian, where it is called lsws. Every site configured for OpenLiteSpeed had been served by the fallback instead, quietly and since the feature shipped. Worth stating plainly because nothing failed loudly: the sites worked, so the only symptom was that .htaccess handling and LSCache were not doing anything. Both now are.

Added

• Ready-made plans for every kind. A new install no longer starts with an empty catalogue and a blank plan form. Shared hosting, reseller, VPS, DNS and database each come with a sensible starting plan that can be added on demand and then edited, rather than composed from grants before anything is sellable. This is the half that makes a fresh install demonstrable on the day it is installed.

The provider half of the catalogue contract, so a billing system can ask what is genuinely sellable instead of being told what exists.

Added

• Plan kinds. shared_hosting, reseller_hosting, database, email, dns and vps, each with the grants it is allowed to carry. A grant a kind does not sell is refused with a message naming it.
• VPS sizes as real bounds. 1-32 vCPU, 512 MB - 256 GB memory, 10 GB - 2 TB disk, applied per machine. An order naming no size gets the plan size; one above it is refused rather than quietly billed.
• Where each kind can be sold, right now. A location qualifies only when a node there holds every role the kind needs, accepts placement, reports a fresh heartbeat and is under the capacity watermark. DNS is served everywhere and so has no location picker at all.
• Measured facts per kind — the images a VPS can boot, the database engines available, the record types DNS supports — so a product page can claim these and nothing else. Email is built as a kind but reports itself unsellable until a mail node at that location passes mail readiness, so nothing proposes it before it would work.

Fixed

• Ubuntu site containers boot. An AppArmor signal rule was missing, so a container on an Ubuntu base came up and then could not be signalled. Sites on Debian were unaffected, which is why it took a while to see.
• The builder fails fast. It was continuing past an error and producing an image that looked finished, so the failure surfaced later and somewhere less obvious.
• Domains are canonicalised at create, not on first use. A domain that differed only in case or a trailing dot could produce two records for one name.

Added

• Node and Python sites in the create form, beside PHP.
• Clearer labels on the create form, which had been naming implementation details rather than choices.

Fixed

• Every offered PHP branch builds. 8.5 needed opcache and 8.0 needed ionCube; both were listed as available and neither produced a working image. A version you can pick and cannot run is worse than one you cannot pick.
• The WordPress floor is 7.4. The extension set WordPress actually requires is now asserted, rather than assumed from the branch number.

Changed

• Compliance wording, so the page says what is measured rather than what is aspired to.

Fixed

• A refused reinstall keeps its application. The refusal was being treated as a completed operation, so the site lost what was installed on it while the machine stayed exactly as it was. The worst shape of bug: nothing failed loudly and something was gone.
• Deleted DNS zones end. A zone removed in the panel was left being served, so a name that should have stopped resolving carried on.

Added

• www is automatic. Adding example.com gets you www.example.com too, with the certificate covering both — rather than a support ticket a week later from someone whose visitors typed the other one.
• Project SSH keys, so access follows the project rather than being pasted per machine.
• Reverse DNS on virtual machines, which mail on a VM needs and nothing else will do.
• Recipe apps served over HTTPS from the moment they are installed.
• Redis available by default rather than as a request.

Changed

• A node can now be one of our own VMs, which makes a small platform possible without dedicated hardware for every role.