Features
- Manage nginx running on the Docker host or a remote machine over SSH: a new
host_via_sshcontrol mode with a guided setup wizard, host key trust management, SFTP-backed configuration access, ahost-setupCLI subcommand, and Homebrew nginx support on macOS. - Rebuild the web interface on antdv-next, refresh the dependency stack, and move charting to ApexCharts v7.
- Add email notifications with configurable transport encryption and custom HTML templates.
- Add Microsoft Teams notifications through incoming webhooks.
- Add Telegram topic notifications and include the acting user in sync notifications.
- Support custom maintenance pages per site, a custom maintenance host, maintenance bypass by IP address, and batch enabling of maintenance mode.
- Support custom GeoIP MMDB databases and add China city-level map data to log analytics.
- Support HTTP proxy configuration for upgrade checks and GeoLite2 database downloads.
- Make the secure session timeout configurable.
- Toggle upstream servers directly in the configuration editor.
- Add descriptions to sites.
- Auto-match fully qualified DNS record names when configuring sites.
- Improve access log path selection and support binding query paths.
- Show the hostname and IP address in the dashboard Server Info panel.
- Standardize three-level navigation, add quick navigation entries to the home page, and allow the breadcrumb to return to the previous page.
- Add Chinese documentation for the command-line interface.
Bug Fixes
- Support the Microsoft Entra ID
GETredirect callback during OIDC login. - Harden session handling and trusted proxy configuration.
- Authenticate paired nodes served behind a path prefix, and preserve escaped node URLs.
- Preserve administrator status when upgrading from legacy installations.
- Stop a
#inside a comment body from being deleted on a configuration round trip. - Stop a backslash in a rewritten directive value from corrupting the configuration.
- Deduplicate symlinked configuration targets and normalize symlink identities before scan callbacks.
- Relink an existing enabled entry when a site or stream is renamed.
- Guard nginx reload operations and avoid duplicate remote enable requests across cluster nodes.
- Bound the staging of signed request bodies between nodes.
- Support Windows web terminals through ConPTY, including native console resize and shutdown handling.
- Fall back to TCP for upstream availability probes when the TLS handshake fails.
- Format dynamic upstream IPv6 addresses correctly, and bracket IPv6 hosts when adding the default gRPC port during site checks.
- Preserve upstream addresses whose server name is
down. - Parse site check URLs safely.
- Show configured site names on the dashboard.
- Exclude the archive being written from directory backups.
- Clarify the displayed certificate expiration date.
- Correct the dashboard radial gauge layout and card heights.
- Fix the status select width, styling, and cancellation behavior in the site list, and size the batch edit dialog to its content.
- Fit the one-time password input into its dialog on small screens.
- Pin a single copy of dayjs so the date pickers keep working.
Contributors
@0xJacky
@Hintay
@EFX1SZH
@be-student
@VXNCXNX
@Iams4kura
@Dev-next-gen