23.4.0-php7

Legacy release for PHP version 7.4

New

• Switch to Kumquat v0.1.59. [Thomas Merkel]

  • Use ZFS information to show disk usage.
  • Add enable / disable vHost feature.

• Switch to PHP 8.2, Python 3.11, MariaDB 10.11. [Thomas Merkel]

  Switch to latest stable PHP version. Handle this update with care and
  verify your application if this PHP version is supported.

• New ciritical and warning handle for Apache processes via munin. [Thomas Merkel]

  We should receive warning and critical information if the idle Apache
  process are below the values.

• Handle PHP-proxy errors in Apache. [Thomas Merkel]

  Errors generated by PHP scripts which uses php-fpm should be handled by
  Apache. For example 404 should be returned from Apache not from php-fpm.

Fix

• Remove deprecate ProFTPd option NoCertRequest. [Thomas Merkel]

• Fix webmaster user locked account. [Thomas Merkel]

  • Fix permissions for ssh authorized_keys file. Disallow modification by
    www but allow read permissions.
  • Unlock webmaster account by default when ssh public key exists.

• UID and GID change for mariadb. [Thomas Merkel]

  Based the 2022Q4 release the mariadb UID and GID changed from the
  default used by MySQL/Percona. For that reason a owner and group change
  is required in the data folder.

• Fix Let's Encrypt renewal-hooks. [Thomas Merkel]

  With the latest Let's Encrypt release it's required to use renewal-hooks
  folder instead of one file. This allow you to create multiple scripts
  which are run automatically after a successful renew (aka deploy).

Other

• Add naming update for kumquat images. [Thomas Merkel]

• Switch to latest core-base 23.4.1. [Thomas Merkel]

  • Support LE accounts in mdata variable

23.4.0

New

• Switch to Kumquat v0.1.59. [Thomas Merkel]

  • Use ZFS information to show disk usage.
  • Add enable / disable vHost feature.

• Switch to PHP 8.2, Python 3.11, MariaDB 10.11. [Thomas Merkel]

  Switch to latest stable PHP version. Handle this update with care and
  verify your application if this PHP version is supported.

• New ciritical and warning handle for Apache processes via munin. [Thomas Merkel]

  We should receive warning and critical information if the idle Apache
  process are below the values.

• Handle PHP-proxy errors in Apache. [Thomas Merkel]

  Errors generated by PHP scripts which uses php-fpm should be handled by
  Apache. For example 404 should be returned from Apache not from php-fpm.

Fix

• Remove deprecate ProFTPd option NoCertRequest. [Thomas Merkel]

• Fix webmaster user locked account. [Thomas Merkel]

  • Fix permissions for ssh authorized_keys file. Disallow modification by
    www but allow read permissions.
  • Unlock webmaster account by default when ssh public key exists.

• UID and GID change for mariadb. [Thomas Merkel]

  Based the 2022Q4 release the mariadb UID and GID changed from the
  default used by MySQL/Percona. For that reason a owner and group change
  is required in the data folder.

• Fix Let's Encrypt renewal-hooks. [Thomas Merkel]

  With the latest Let's Encrypt release it's required to use renewal-hooks
  folder instead of one file. This allow you to create multiple scripts
  which are run automatically after a successful renew (aka deploy).

Other

• Add naming update for kumquat images. [Thomas Merkel]

• Switch to latest core-base 23.4.1. [Thomas Merkel]

  • Support LE accounts in mdata variable

21.4.1

New

• MariaDB update to version 10.6.8. [Thomas Merkel]

21.4.0

New

• Kumquat v0.1.58, pkgsrc / base 2021Q4 Upgrade. [Thomas Merkel]

• 2021Q4 packages upgrade (mariadb, py39, proftpd) [Thomas Merkel]

  Switch to the latest packages from pkgsrc 2021Q4, especially moving from
  percona to mariadb and switching from py38 to py39.

• Switch from percona to mariadb. [Thomas Merkel]

  Since pkgsrc 2021Q4 mariadb is the default database for most installed
  software. For that reason it's required to migrate from percona to
  mariadb.

• Set pkgsrc PATH to php-fpm. [Thomas Merkel]

  PHP and PHP-FPM should be able to detect pkgsrc binaries for existing
  web software. Otherwise the PATH need to be modified per PHP application
  which is not always possible.

• PHP version bump from 7.3 to 7.4. [Thomas Merkel]

  Update to latest stable PHP version 7.4

Fixes

• Post_max_size should not be smaller than upload_max_filesize. [Thomas Merkel]

  Resize post_max_size to 512 MB

• Only create znapzendzetup when it's not already enabled. [Thomas Merkel]

  znapzendzetup create overwrites all old configurations and if we've
  already configured some remote it should not be created again.

• Remove PYTHONPATH env variable from SMF. [Thomas Merkel]

• Fixing letsencrypt cronjob timing. [Thomas Merkel]

  Fixing missing :50 in Kumquat Let's Encrypt cronjob.

Other

• License update for 2022. [Thomas Merkel]
• Increase max_input_vars (especially for phpMyAdmin) [Thomas Merkel]

20.4.1

New

• Add php73 yaml support. [Thomas Merkel]
• Add php-gpm module (especially recommended by NextCloud) [Thomas Merkel]

Fix

• Provide fix for Let's Encrypt bug in Kumquat. [Thomas Merkel]

20.4.0

New

• Use latest core-base image with pkgsrc 2020Q4. [Thomas Merkel]

• Switch to Kumquat WebUI v0.1.55 and default python 3.8. [Thomas Merkel]

• Add php package for APCu module. [Thomas Merkel]

• Provide extra webmaster user to manage www data. [Thomas Merkel]

  Switch back to default admin user which supports "sudo"-permissions to
  get root privileges. But also add extra webmaster user which use the
  existing uid and gid of www user.

• Httpd, apache2 enable http/2 by default. [Thomas Merkel]

Fix

• Switching default timezone for PHP to UTC. [Thomas Merkel]

  As our system uses UTC for all services and operations (including
  Percona databases) it's required to switch PHP to UTC timezone.

• Hide PHP X-Powered-by header. [Thomas Merkel]

• Hide ServerToken and Webserver version number from header. [Thomas Merkel]

• Disable Debug mode for Kumquat. [Thomas Merkel]

Other

• Add minimal usage documentation for Kumquat image. [Thomas Merkel]
• Use system packages for py-cryptography and py-mysqlclient. [Thomas Merkel]

20.1.2

Fix

• Let's Encrypt error handling
• Let's Encrypt connection to ACME server only by new / renewal certificates

20.1.1

Fix

• Add production ACMEv2 server [Thomas Merkel]
• Let's Encrypt fix for Kumquat renewal [Thomas Merkel]

20.1.0

New

• Kumquat version bump to v0.1.52. [Thomas Merkel]

  • Support for Let's Encrypt ACMEv2 protocol
  • Title and sitename set by hostname
  • Additional php modules for calendar support
  • JavaScript password generator
  • Confirm dialog updates

• Add SQLite3 for PHP73. [Thomas Merkel]

• Switch from kumquat_admin to some initialized password, create extra root user for operations. [Thomas Merkel]

• Add script and support to allow admin user to switch to www, via script. [Thomas Merkel]

Fix

• Disable binary logs for MySQL. [Thomas Merkel]
• Fix kumquat MySQL permissions. [Thomas Merkel]
• Import local timezone to MySQL. [Thomas Merkel]

18.4.2

New

• Kumquat version bump with IDNA support, and lower case fix. [Thomas Merkel]
• Switch to latest core-base, remove motd-cleanup because of core-base. [Thomas Merkel]

Fix

• Fix path for motd-cleanup. [Thomas Merkel]
• Fix MySQL upgrade and installation for latest percona version. [Thomas Merkel]