# changelog

author: LiveConfig <support@liveconfig.com> - 3.1.1-1
changelog:
  - Frontend: added "early" input validation to DNS editor, improved
    input of TLSA RRs
  - Backend: improved Postfix configuration on RPM systems
    (CentOS/Rocky/Alma) to support _chroot_ configuration for sendmail
    by managing files in `/var/spool/postfix/etc`
  - Backend: improved logging when `NotFoundException` ("Object not found
    or not permitted") occurs, contains object name and identifier now
  - Backend: updated _cURL_ (8.17.0), _PCRE2_ (10.47), _SQLite_ (3.51.0)
    and _libunbound_ (1.24.1)
  - Backend: in some cases, DNS A/AAAA/MX records were not created
    immediately when a new subdomain has been added (on own nameservers)
  - Backend: when re-enabling e-mail for a domain/subdomain, the SPF
    record was not set in DNS
  - Backend: fixed Sieve configuration for Dovecot 2.4 on Debian 13 (GH-105)


author: LiveConfig <support@liveconfig.com> - 3.1.2-1
changelog:
  - Frontend: fixed various issues with backup plans (GH-75, GH-91)
  - Frontend: fixed rounding issue in spam filter thresholds
  - Frontend: show name of underlying reseller account when editing
    an account
  - Frontend: optionally accept overprovisioning of existing accounts
    when reducing resources of a reseller account
  - Backend: added "--db-repair" command to CLI
  - Backend: improved detection of AlmaLinux
  - Backend: fixed "unresolvable permission problem" in some special
    cases (nested reseller structure with cross-assigned templates)
  - Backend: fixed bug when creating additional user (typo in SQL)
  - Backend: fixed configuration issue with Postfix when SRS is enabled
    and an outbound IPv6 address selected (GH-110)
  - Backend: adjusted Postfix service name in `lclogparse.conf` on
    Debian 13 (GH-107)
  - Backend: fix base directory part in `/etc/dovecot/passwd` (mailboxes
    created before 06/2021 might have `/var/mail` instead of
    `/var/mail/<account>/<id>`, this leads to problems with Dovecot 2.4
    (Debian 13))
  - Backend: when saving ProFTPD configuration, missing DSO modules are
    added to `modules.conf` (i.e. after upgrading from Debian 12 to 13)
  - changed systemd dependency from "network.target" to
    "network-online.target"
  - LAC: PHP extensions from "Remi" repository were not loaded due
    to filtered `/etc/opt/remi directory`
  - LAC: fixed removal of user slice drop-in when disabling container
  - LAC: terminate running processes when stopping a container
  - RPM: fixed error with automated LiveConfig database backup during
    package upgrade


author: LiveConfig <support@liveconfig.com> - 3.1.3-1
changelog:
  - Frontend: display webserver hostname instead of server ID in
    webspace overview (GH-112)
  - Frontend/Backend: fixed bug with wildcard e-mail addresses
  - Backend: e-mail aliases and forwarding targets were not properly
    deleted from `virtual_alias` file (affected addresses are fixed
    automatically with this update)


author: LiveConfig <support@liveconfig.com> - 3.2.0-1
changelog:
  - Frontend: added reports
  - Frontend: added newsletter
  - Frontend: allow sending e-mail with login details to users
  - Frontend: allow custom CSS (GH-9)
  - Frontend: fixed/improved configuration of web statistics
  - Frontend: improved usability of several selectors (TLS certificates,
    customers, contacts)
  - Frontend: fixed Single Sign-On to phpMyAdmin (GH-111)
  - Frontend: show values for `extension`/`zend_extension` when editing
    php.ini settings
  - Frontend: fixed bug in AppInstaller when WordPress and/or phpMyAdmin
    were not allowed for installation
  - Frontend: don't show web terminal if not available (i.e. Basic license
    or LiveConfig <3.0)
  - Frontend: updated Xterm.js to 6.0.0
  - Frontend: allow upper-case characters for mailbox name (converted to
    lower-case automatically)
  - Frontend: fixed missing button to manually create webspace backups
  - Frontend: check for forbidden e-mail forwarding targets
    (LCDefaults `mail.forwards.blacklist`)
  - Frontend: improved usability when error in multi-tab input (i.e.
    e-mail) has occured in an inactive tab
  - Frontend: fixed bug when deleting last/all custom DNS RRs from a
    subdomain
  - Frontend: fixed bug in webspace log viewer
  - Backend: improved support for LiveConfig 2.x clients
  - Backend: support more TSIG algorithms for external DNS servers
  - Backend: e-mail autoresponder wasn't disabled automatically when
    an end date was set
  - Backend: fixed bug when setting floating-point values for
    spam filter thresholds (sometimes rejected as "invalid input")
  - Backend: enable sending TLS expiration mails by default for
    new automated certificates
  - Backend: it wasn't possible to create (manual) TLS certificates
    with wildcard domain name
  - Backend: fixed deletion of accounts when no webserver is assigned any more
  - Backend: check for pending account deletion during start
  - Backend: fixed bug when deleting MySQL database from LC2 client
  - Backend: fixed FTP permission on hosting templates when permission
    has been added subsequently
  - Backend: e-mail password was not updated when saving via self-service
  - Backend: SPF records have not been updated when default SPF for a
    SMTP server has been modified
  - Backend: fixed hangup when deleting e-mail alias or forward with
    SQLite backend
  - Backend: allow editing mailboxes when e-mail quota is exceeded but
    mailbox size not increased
  - Backend: proper error handling when `sendmail` is not available (GH-122)
  - Backend: fixed bug when saving TSIG key for external DNS server (GH-119)
  - Backend: TSIG keys have not been created automatically for managed
    secondary DNS servers (GH-121)
  - Backend: A/AAAA record was not removed from www subdomain when
    webspace got disabled for non-www subdomain and "sync with www" option
    was set
  - Backend: added checks to not allow DynDNS while Webspace is enabled
  - Backend: fixed license activation during AutoDeploy
  - Backend: restricted access for editing crontab files
  - added support for SSHFP DNS records
  - lcsam (LiveConfig SpamAssassin Milter): supporting configuration file
    (`/etc/liveconfig/lcsam`) to set custom reject codes and bounce message
  - allow enabling of TLS (and optionally validate TLS server
    certificate) when LiveConfig database is on a remote MySQL/MariaDB
    server (`db_options=tls|tls-verify-server`)
  - updated OpenSSL (3.5.6 LTS), MariaDB Connector/C (3.4.8),
    SQLite (3.51.3), cURL (8.19.0), zlib (1.3.2) and Expat (2.7.5)
  - improved checks for duplicate e-mail aliases or forwarding
    targets
  - `--db-check` command now also detects gaps in account structure
  - `--db-repair` command now also deletes orphaned customer records
  - fixed bug in `pam_lac` module when `/etc/liveconfig/lac.users` has not
    been created yet (GH-116)


author: LiveConfig <support@liveconfig.com> - 3.2.0-2
changelog:
  - Frontend: Server report was limited to 10 rows
  - Backend: fixed bug when adding/editing TLSA record (PCRE check failed)
  - Backend: fixed bug when checking for resources to be deleted while
    server is not connected (GH-129)


author: LiveConfig <support@liveconfig.com> - 3.2.0-3
changelog:
  - Backend: modified (manual) TLS certificates didn't get
    deployed/replaced in some cases
  - Backend: managed TLS certificate for frontend was not deployed after update


author: LiveConfig <support@liveconfig.com> - 3.2.0-4
changelog:
  - Backend: fixed bug when very old (Confixx-imported) databases were still
    in state "database being added"
  - Backend: fixed bug when deleting database while same login is still used
    with other databases (also affecting Confixx-imported databases)
  - Backend: fixed bug when calculating next available account number
    or customer number
  - Backend: fixed bug affecting backups on multi-server deployments (resources
    on remote server couldn't be backed up in certain cases)


author: LiveConfig <support@liveconfig.com> - 3.2.1-1
changelog:
  - Frontend: allow editing/changing contact data of customers' main user
  - Backend: supporting "old" encrypted object IDs from LiveConfig 2.x API
  - Backend: added LCDefaults option `rrd.retention` to allow automatic deletion
    of old RRD data from unlimited archives
  - Backend: fixed bug when user is member of a very large group
    (i.e. `lc-sftponly`)
  - Backend: TLS certificates sometimes were not completely removed from database
    when deleted with domain
  - Backend: expiring TLS certificates marked for deletion won't be renewed any more
  - Backend: fixed bug when reseller creates a new customer while reseller settings
    have not yet been initialized
  - Installer: added dependencies and check for availability of systemd


author: LiveConfig <support@liveconfig.com> - 3.2.1-2
changelog:
  - Frontend: fixed typo leading to error when traffic was >= 1TB (GH-130)
  - Frontend: fixed selection of wrong e-mail template when sending login
    data to customer
  - Backend: fixed bug when saving reseller settings in certain cases
    (old / uninitialized accounts only)
  - updated SQLite to 3.53.0


author: LiveConfig <support@liveconfig.com> - 3.2.1-3
changelog:
  - Backend: reseller accounts containing a dash (`-`) could not be used
  - Backend: fixed log message "Can't add domain to object log" when
    editing existing domains
  - Backend: DKIM was also enabled automatically for new external domains
    (now only if `mail.dkim.default` is `2`)
  - Backup: scheduled backups on multi-server setups were not started
    under certain circumstances (i.e. remote "mail-only" server)


