PegaProx/project-pegaprox v0.9.14.1 on GitHub

v0.9.14.1 — migration `aio`, a maintenance capacity pre-check, portal teardown & security

A focused follow-up to v0.9.14: three new features, two fixes, dependency-security hardening, and a warm welcome to a new Platinum sponsor.

Per-disk aio mode in the migration wizard (#598) — the ESXi→PVE wizard now lets you pick the QEMU async-IO backend (threads / native / io_uring) for the migrated target disk. Leave it on default and nothing changes (PVE's io_uring).
Maintenance-Mode RAM pre-check (#611) — before you evacuate a node, PegaProx simulates the migration and warns you (non-blocking) if it would push a remaining node past ~90 % memory, or if the cluster simply lacks the headroom. You can always proceed — it's a heads-up, not a hard block.
Client Portal self-service teardown (#556) — the "down" half of self-service: quota-bound portal users can now destroy their own CTs/VMs, not just create them. Opt-in per hoster (allow_destroy), gated strictly to the caller's own guests, with a type-the-exact-name confirm and a full audit trail.

VM wizard OVMF quick-templates (#607) — creating a Windows 11 / 2022 VM from a quick template no longer fails with efidisk0: unable to parse volume ID ':1' when the EFI-storage field is left blank; it now falls back to the VM's main storage.
Reverse-proxy log noise + console URLs (#614) — behind a reverse proxy the container no longer spams TLS-handshake noise (Invalid HTTP method '\x16\x03\x01…') into the logs, and PEGAPROX_BEHIND_PROXY=true now also routes the VNC/SSH console WebSockets through the proxy — no separate Settings toggle required.

Dependency floors raised to clear Aikido findings: cryptography 49 + fido2 2.2.1, pillow 12.3, setuptools 83, requests 2.34 — all as >= floors so future patch bumps roll in cleanly.
The remaining request-controlled Site-Recovery log lines are sanitised (CWE-117). A pre-release Aikido scan came back clean (only known, risk-accepted findings).

Full documentation: https://docs.pegaprox.com

PegaProx lives entirely from sponsorships and donations. Huge thanks to our sponsors — and especially our 💎 Platinum partners:

Want to support PegaProx? Become a sponsor. Every euro keeps the lights on. 💛