It’s been a few releases since we last did a proper round-up, so here’s everything that’s\nlanded in WebDeck since 2.0.2 \u2014 what we built, what we fixed, and the reasoning behind each one.<\/p>\n\n
This is where the licensing model settled. Free<\/strong> gives you 2 hosting accounts\nand 4 websites with every<\/em> feature included \u2014 no crippled tier, no features locked behind\na paywall on the free plan. Pro<\/strong> (\u00a312\/month per server) unlocks unlimited accounts\nand websites, plus reseller accounts, with a 14-day trial and no card required.<\/p>\n The rule the whole model is built around: a licence should never take a customer’s\nwebsite offline.<\/strong> If a trial ends or a subscription lapses, nothing is suspended or\ndeleted \u2014 every website keeps serving, every mailbox keeps receiving. You simply can’t create\nnew<\/em> accounts until you’re back under the Free limits or upgrade.<\/p>\n\n Following a community review, we went through the 2.0.x codebase and verified every claim\nagainst the real code \u2014 not the description of the bug, the actual code path. Five issues were\nconfirmed and fixed:<\/p>\n Why it matters:<\/strong> a control panel sits at the centre of your server’s security.\nOutside scrutiny is useful, not something to be defensive about \u2014 we’d rather someone find a real\nissue and tell us than not find it at all.<\/p>\n\n This one’s important: we found and fixed a bug where signed updates could fail to\napply without any visible error<\/strong> \u2014 the panel would check for an update, find one, and\nsilently do nothing. The root cause was in how the update signature was carried through the check;\nit’s fixed now, and update failures are logged and shown in the panel instead of disappearing.<\/p>\n Also in this release:<\/p>\n Why it matters:<\/strong> an update button you can’t trust is worse than no update\nbutton. This makes sure that when you click it, something actually happens \u2014 and if it doesn’t,\nyou’re told why.<\/p>\n\n Added Typecho<\/strong> and Grav<\/strong> (lightweight CMSs), YOURLS<\/strong>\n(your own URL shortener), LinkAce<\/strong> (a self-hosted bookmark manager) and\nChamilo<\/strong> (e-learning). Each installs the same way as the rest of the catalogue \u2014\ndatabase created, permissions set, SSL live from the first request.<\/p>\n\n The headline feature: email notifications.<\/strong> WebDeck can now tell you when a\nservice goes down (or gets auto-healed), a backup completes or fails, disk space is running low,\nor a security event happens \u2014 with a toggle for each alert. Your customers get the same, scoped\nto their own sites: SSL, backups, suspension, account changes.<\/p>\n Alongside that, two security fixes:<\/p>\n Why it matters:<\/strong> notifications mean you find out about a problem before a\ncustomer emails you about it. The security fixes close a real gap \u2014 session tokens simply\nshouldn’t end up in a URL, however convenient it is in the short term.<\/p>\n\n Two things, both requested by people actually using the panel day to day:<\/p>\n Why it matters:<\/strong> a control panel gets used from a phone more often than you’d\nthink \u2014 at 2am, fixing something, standing in a server room that isn’t yours. It should work\nproperly there.<\/p>\n\n2.0.3 \u2014 A security review, taken seriously<\/h3>\n
\n
2.0.4 \u2014 Fixing the update system itself<\/h3>\n
\n
2.0.5 \u2014 Five more apps, 53 in total<\/h3>\n
2.0.6 \u2014 Email notifications, and closing a real security gap<\/h3>\n
\n
2.0.7 \u2014 A notification bell, and a mobile fix<\/h3>\n
\n
The short version<\/h3>\n