Skynet/misc_pterodactyl-panel
6
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
misc_pterodactyl-panel/CHANGELOG.md

58 KiB
Raw Blame History

Changelog

This file is a running track of new features and fixes to each version of the panel released starting with v0.4.0.

This project follows Semantic Versioning guidelines.

v0.7.0-beta.4 (Derelict Dermodactylus)

Fixed

  • [beta.3] — Fixes a bug with the default environment file that was causing an inability to perform a fresh install when running package discovery.
  • [beta.3] — Fixes an edge case caused by the Laravel 5.5 upgrade that would try to perform an in_array check aganist a null value.
  • [beta.3] — Fixes a bug that would cause an error when attempting to create a new user on the Panel.
  • [beta.3] — Fixes error handling of the settings service provider when no migrations have been run.
  • [beta.3] — Fixes validation error when trying to use 'None' as the 'Copy Script From' option for an egg script.
  • Fixes a design bug in the database that prevented the storage of negative numbers, thus preventing a server from being assigned unlimited swap.

Added

  • Nest and Egg listings now show the associated ID in order to make API requests easier.

v0.7.0-beta.3 (Derelict Dermodactylus)

Fixed

  • [beta.2] — Fixes a bug that would cause an endless exception message stream in the console when attemping to setup environment settings in certain instances.
  • [beta.2] — Fixes a bug causing the dropdown menu for a server's egg to display the wrong selected value.
  • [beta.2] — Fixes a bug that would throw a red page of death when submitting an invalid egg variable value for a server in the Admin CP.
  • [beta.2] — Someone found a @todo that I never @todid and thus database hosts could not be created without being linked to a node. This is fixed...
  • [beta.2] — Fixes bug that caused incorrect rendering of CPU usage on server graphs due to missing variable.
  • [beta.2] — Fixes bug causing schedules to be un-deletable.
  • [beta.2] — Fixes bug that prevented the deletion of nodes due to an allocation deletion cascade issue with the SQL schema.
  • [beta.2] — Fixes a bug causing eggs not extending other eggs to fail validation.

Changed

  • Revoking the administrative status for an admin will revoke all authentication tokens currently assigned to their account.
  • Updated core framework to Laravel 5.5. This includes many dependency updates.
  • Certain AWS specific environment keys were changed, this should have minimal impact on users unless you specifically enabled AWS specific features. The renames are: AWS_KEY -> AWS_ACCESS_KEY_ID, AWS_SECRET -> AWS_SECRET_ACCESS_KEY, AWS_REGION -> AWS_DEFAULT_REGION
  • API keys have been changed to only use a single public key passed in a bearer token. All existing keys can continue being used, however only the first 32 characters should be sent.

Added

  • Added star indicators to user listing in Admin CP to indicate users who are set as a root admin.
  • Creating a new node will now requires a SSL connection if the Panel is configured to use SSL as well.

v0.7.0-beta.2 (Derelict Dermodactylus)

Fixed

  • [beta.1] — Fixes a CORS header issue due to a wrong API endpoint being provided in the administrative node listing.
  • [beta.1] — Fixes bug that would prevent root admins from accessing servers they were not set as the owner of.
  • [beta.1] — Fixes wrong URL redirect being provided when creating a subuser.
  • [beta.1] — Fixes missing check in environment setup that would leave the Hashids salt empty.
  • [beta.1] — Fixes bug preventing loading of allocations when trying to create a new server.
  • [beta.1] — Fixes bug causing inability to create new servers on the Panel.
  • [beta.1] — Fixes bug causing inability to delete an allocation due to misconfigured JS.
  • [beta.1] — Fixes bug causing inability to set the IP alias for an allocation to an empty value.
  • [beta.1] — Fixes bug that caused startup changes to not propigate to the server correctly on the first save.
  • [beta.1] — Fixes bug that prevented subusers from accessing anything over socketio due to a missing permission.

Changed

  • Moved Docker image setting to be on the startup management page for a server rather than the details page. This value changes based on the Nest and Egg that are selected.
  • Two-Factor authentication tokens are now 32 bytes in length, and are stored encrypted at rest in the database.
  • Login page UI has been improved to be more sleek and welcoming to users.
  • Changed 2FA login process to be more secure. Previously authentication checking happened on the 2FA post page, now it happens prior and is passed along to the 2FA page to avoid storing any credentials.

Added

  • Socketio error messages due to permissions are now rendered correctly in the UI rather than causing a silent failure.

v0.7.0-beta.1 (Derelict Dermodactylus)

Added

  • File manager now supports mass deletion option for files and folders.
  • Support for CS:GO as a default service option selection.
  • Support for GMOD as a default service option selection.
  • Added test suite for core aspects of the project (Services, Repositories, Commands, etc.) to lessen the chances for bugs to escape into releases.
  • New CLI command to disabled 2-Factor Authentication on an account if necessary.
  • Ability to delete users and locations via the CLI.
  • You can now require 2FA for all users, admins only, or at will using a simple configuration in the Admin CP.
  • Added ability to export and import service options and their associated settings and environment variables via the Admin CP.
  • Default allocation for a server can be changed on the front-end by users. This includes two new subuser permissions as well.
  • Significant improvements to environment variable control for servers. Now ships with built-in abilities to define extra variables in the Panel's configuration file, or in-code for those heavily modifying the Panel.
  • Quick link to server edit view in ACP on frontend when viewing servers.
  • Databases created in the Panel now include EXECUTE privilege.

Changed

  • Services renamed to Nests. Service Options renamed to Eggs. 🥚
  • Theme colors and login pages updated to give a more unique feel to the project.
  • Massive overhaul to the backend code that allows for much easier updating of core functionality as well as support for better testing. This overhaul also reduces complex code logic, and allows for faster response times in the application.
  • CLI commands updated to be easier to type, now stored in the p: namespace.
  • Logout icon is now more universal and not just a power icon.
  • Administrative logout notice now uses SWAL rather than a generic javascript popup.
  • Server creation page now only asks for a node to deploy to, rather than requiring a location and then a node.
  • Database passwords are now hidden by default and will only show if clicked on. In addition, database view in ACP now indicates that passwords must be viewed on the front-end.
  • Localhost cannot be used as a connection address in the environment configuration script. 127.0.0.1 is allowed.
  • Application locale can now be quickly set using an environment variable APP_LOCALE rather than having to edit core files.

Fixed

  • Unable to change the daemon secret for a server via the Admin CP.
  • Using default value in rules when creating a new variable if the rules is empty.
  • Fixes a design-flaw in the allocation management part of nodes that would run a MySQL query for each port being allocated. This behavior is now changed to only execute one query to add multiple ports at once.
  • Attempting to create a server when no nodes are configured now redirects to the node creation page.
  • Fixes missing library issue for teamspeak when used with mariadb.
  • Fixes inability to change the default port on front-end when viewing a server.
  • Fixes bug preventing deletion of nests that have other nests referencing them as children.
  • Fixes console sometimes not loading properly on slow connections

Removed

  • SFTP settings page now only displays connection address and username. Password setting was removed as it is no longer necessary with Daemon changes.

v0.6.4 (Courageous Carniadactylus)

Fixed

  • Fixed the console rendering on page load, I guess people don't like watching it load line-by-line for 10 minutes. Who would have guessed...
  • Re-added support for up/down arrows loading previous commands in the console window.

Changed

  • Panel API for Daemon now responds with a HTTP/401 Unauthorized error when unable to locate a node with a given authentication token, rather than a HTTP/404 Not Found response.
  • Added better colors and styling for the terminal that can be adjusted per-theme.
  • Session timeout adjusted to be 7 days by default.

v0.6.3 (Courageous Carniadactylus)

Fixed

  • [Security] — Addresses an oversight in how the terminal rendered information sent from the server feed which allowed a malicious user to execute arbitrary commands on the game-server process itself by using a specifically crafted in-game command.

Changed

  • Removed jquery.terminal and replaced it with an in-house developed terminal with less potential for security issues.

v0.6.2 (Courageous Carniadactylus)

Fixed

  • Fixes a few typos throughout the panel, there are more don't worry.
  • Fixes bug when disabling 2FA due to a misnamed route.
  • API now returns a 404 error when deleting a user that doesn't exist, rather than saying it was successful.
  • Service variables that allow empty input now allow you to empty out the assigned value and set it back to blank.
  • Fixes a bug where changing the default allocation for a server would not actually apply that allocation as the default on the daemon.
  • Newly created service variables are now backfilled and assigned to existing servers properly.

Added

  • Added a Vagrantfile to the repository to help speed up development and testing for those who don't want to do a full dedicated install.
  • Added a confirmation dialog to the logout button for admins to prevent misguided clickers from accidentally logging out when they wanted to switch to Admin or Server views.

Changed

  • Blocked out the Reinstall button for servers that have failed installation to avoid confusion and bugs causing the daemon to break.
  • Updated dependencies, listed below.
aws/aws-sdk-php (3.26.5 => 3.29.7)       
laravel/framework (v5.4.21 => v5.4.27)        
barryvdh/laravel-debugbar (v2.3.2 => v2.4.0)     
fideloper/proxy (3.3.0 => 3.3.3)
igaster/laravel-theme (v1.14 => v1.16)    
laravel/tinker (v1.0.0 => v1.0.1)  
spatie/laravel-fractal (4.0.0 => 4.0.1)

v0.6.1 (Courageous Carniadactylus)

Fixed

  • Fixes a bug preventing the use of services that have no variables attached to them.
  • Fixes 'Remember Me' checkbox being ignored when using 2FA on an account.
  • API now returns a useful error displaying what went wrong rather than an obscure 'An Error was Encountered' message when API issues arise.
  • Fixes bug preventing the creation of new files in the file manager due to a missing JS dependency on page load.
  • Prevent using a service option tag that contains special characters that are not valid. Now only allows alpha-numeric, no spaces or underscores.
  • Fix unhandled excpetion due to missing Log class when using the API and causing an error.

Changed

  • Renamed session cookies from laravel_session to pterodactyl_session.
  • Sessions are now encrypted before being stored as an additional layer of security.
  • It is now possible to clear out a server description and have it be blank, rather than throwing an error about the field being required.

v0.6.0 (Courageous Carniadactylus)

Fixed

  • Bug causing error logs to be spammed if someone timed out on an ajax based page.
  • Fixes edge case where specific server names could cause daemon errors due to an invalid SFTP username being created by the panel.
  • Fixes sessions being removed on browser close, and set sessions to idle for up to 3 hours before being marked as expired.
  • Emails sending with 'Pterodactyl Panel' as the from name. Now configurable by using php artisan pterodactyl:mail to update.
  • Fixes potential bug with invalid CIDR notation (ex: 192.168.1.1/z) when adding allocations that could cause over 4 million records to be created at once.
  • Fixes bug where daemon was unable to register that certain games had fully booted and were ready to play on.
  • Fixes bug causing MySQL user accounts to be corrupted when resetting a password via the panel.
  • Fixes remote timing attack vulnerability due to hmac comparsion in API middleware.
  • [rc.1] — Server deletion is fixed, caused by removed download table.
  • [rc.1] — Server status indication on front-end no longer shows Error when server is marked as installing or suspended.
  • [rc.1] — Fixes issues with SteamCMD not registering and installing games properly.

Changed

  • Admin API and base routes for user management now define the fields that should be passed to repositories rather than passing all fields.
  • User model now defines mass assignment fields using $fillable rather than $guarded.
  • 2FA checkpoint on login is now its own page, and not an AJAX based call. Improves security on that front.
  • Updated Server model code to be more efficient, as well as make life easier for backend changes and work.
  • Reduced the number of database queries being executed when viewing a specific server. This is done by caching the query for up to 15 minutes in memcached.
  • User creation emails include more information and are sent by the event listener rather than the repository.
  • Account password reset emails now auto-fill the email when clicking the link.
  • New theme applied to Admin CP. Many graphical changes were made, some data was moved around and some display data changed. Too much was changed to feasibly log it all in here. Major breaking changes or notable new features will be logged.
  • New server creation page now makes significantly less AJAX calls and is much quicker to respond.
  • Server and Node view pages wee modified to split tabs into individual pages to make re-themeing and modifications significantly easier, and reduce MySQL query loads on page.
  • Most of the backend UnhandledException display errors now include a clearer error that directs admins to the program's logs.
  • Table seeders for services now can be run during upgrades and will attempt to locate and update, or create new if not found in the database.
  • Many structural changes to the database and Pterodactyl\Models classes that would flood this changelog if they were all included. All required migrations included to handle database changes.
  • Clarified details for database hosts to prevent users entering invalid account details, as well as renamed tables and columns relating to it to keep things clearer.
  • Updated all code to be Laravel compliant when using env() and moved to using config() throughout non config/*.php files.
  • Subuser permissions are now stored in Permission::listPermissions() to make views way cleaner and make adding to views significantly cleaner.
  • Attempting to reset a password for an account that does not exist no longer returns an error, rather it displays a success message. Failed resets trigger a Pterodactyl\Events\Auth\FailedPasswordReset event that can be caught if needed to perform other actions.
  • Servers are no longer queued for deletion due to the general hassle and extra logic required.
  • Updated all panel components to run on Laravel v5.4 rather than 5.3 which is EOL.
  • Routes are now handled in the routes/ folder, and use a significantly cleaner syntax. Controller names and methods have been updated as well to be clearer as well as avoid conflicts with PHP reserved keywords.
  • API has been completely overhauled to use new permissions system. Any old API keys will immediately become invalid and fail to operate properly anymore. You will need to generate new keys.
  • Cleaned up dynamic database connection setting to use a single function call from the host model.
  • Deleting a server safely now continues even if the daemon reports a HTTP/404 missing server error (requires Daemon@0.4.0-beta.2.1)
  • Changed behavior when modifying server allocation information. You can now remove the default allocation assuming you assing a new allocation at the same time. Reduces the number of steps to change the default allocation for a server.
  • Environment setting commands now attempt to auto-quote strings with spaces in them, as well as comment lines that are edited to avoid manual changes being overwritten.
  • Version in footer of panel now displays correctly if panel is installed using Git rather than a download from source.
  • Mobile views are now more... viewable. Fixes col-xs-6 usage thoughout the Admin CP where it was intended to be col-md-6.
  • Node Configuration tokens and Download tokens are stored using the cache helpers rather than a database to speed up functions and make use of auto-expiration/deletion functions.
  • Old daemon routes using /remote have been changed to use /daemon, panel changes now reflect this.
  • Only display servers that a user is owner of or subuser of in the Admin CP rather than all servers if the user is marked as an admin.
  • Panel now sends all non-default allocations as ALLOC_#__IP and ALLOC_#__PORT to the daemon, as well as the location.

Added

  • Remote routes for daemon to contact in order to allow Daemon to retrieve updated service configuration files on boot. Centralizes services to the panel rather than to each daemon.
  • Basic service pack implementation to allow assignment of modpacks or software to a server to pre-install applications and allow users to update.
  • Users can now have a username as well as client name assigned to their account.
  • Ability to create a node through the CLI using pterodactyl:node as well as locations via pterodactyl:location.
  • New theme (AdminLTE) for front-end with tweaks to backend files to work properly with it.
  • Add support for PhraseApp's in-context editor
  • Notifications when a user is added or removed as a subuser for a server.
  • New cache policy for ServerPolicy to avoid making 15+ queries per page load when confirming if a user has permission to perform an action.
  • Ability to assign multiple allocations at once when creating a new server.
  • New humanReadable macro on File facade that accepts a file path and returns a human readable size. (File::humanReadable(path, precision))
  • Added ability to edit database host details after creation on the system.
  • Login attempts and pasword reset requests are now protected by invisible ReCaptcha. This feature can be disabled with a .env variable.
  • Server listing for individual users is now searchable on the front-end.
  • Servers that a user is assocaited with as a subuser are now displayed in addition to owned servers when listing users in the Admin CP.
  • Ability to launch the console in a new window as an individual unit. https://s3.kelp.in/IrTyE.png
  • Server listing and view in Admin CP now shows the SFTP username/Docker container name.
  • Administrative server view includes link in navigation to go to server console/frontend management.
  • Added new scripts for service options that allows installation of software in a privileged Docker container on the node prior to marking a server as installed.
  • Added ability to reinstall a server using the currently assigned service and option.
  • Added ability to change a server's service and service option, as well as change pack assignments and other management services in that regard.
  • Added support for using a proxy such as Cloudflare with a node connection. Previously there was no way to tell the panel to connect over SSL without marking the Daemon as also using SSL.

Removed

  • Removed all old theme JS and CSS folders to cleanup and avoid confusion in the future.
  • Old API calls to Server::create will fail due to changed data structure.
  • Many old routes were modified to reflect new standards in panel, and many of the controller functions being called were also modified. This shouldn't really impact anyone unless you have been digging into the code and modifying things.
  • Server::getUserDaemonSecret(Server $server) was removed and replaced with User::daemonSecret(Server $server) in order to clean up models.
  • Server::getByUUID() was replaced with Server::byUuid() as well as various other functions through-out the Server model.
  • Server::getHeaders() was removed and replaced with Server::getClient() which returns a Guzzle Client with the correct headers already assigned.

v0.6.0-rc.1

Fixed

  • [beta.2.1] — Fixed a bug preventing the deletion of a server.
  • It is now possible to modify a server's disk limits after the server is created.
  • [beta.2.1] — Fixes a bug causing login issues and password reset failures when reCAPTCHA is enabled.
  • Fixes remote timing attack vulnerability due to hmac comparsion in API middleware.
  • [beta.2.1] — Fixes bug requiring docker image field to be filled out when adding a service option.
  • [beta.2.1] — Fixes inability to mark a user as a non-admin once they were assigned the role.

Added

  • Added new scripts for service options that allows installation of software in a privileged Docker container on the node prior to marking a server as installed.
  • Added ability to reinstall a server using the currently assigned service and option.
  • Added ability to change a server's service and service option, as well as change pack assignments and other management services in that regard.
  • Added support for using a proxy such as Cloudflare with a node connection. Previously there was no way to tell the panel to connect over SSL without marking the Daemon as also using SSL.

Changed

  • Environment setting commands now attempt to auto-quote strings with spaces in them, as well as comment lines that are edited to avoid manual changes being overwritten.
  • Version in footer of panel now displays correctly if panel is installed using Git rather than a download from source.
  • Mobile views are now more... viewable. Fixes col-xs-6 usage thoughout the Admin CP where it was intended to be col-md-6.
  • Node Configuration tokens and Download tokens are stored using the cache helpers rather than a database to speed up functions and make use of auto-expiration/deletion functions.
  • Old daemon routes using /remote have been changed to use /daemon, panel changes now reflect this.
  • Only display servers that a user is owner of or subuser of in the Admin CP rather than all servers if the user is marked as an admin.

v0.6.0-beta.2.1

Fixed

  • [beta.2] — Suspended servers now show as suspended.
  • [beta.2] — Corrected the information when a task has not run yet.
  • [beta.2] — Fixes filemanager 404 when editing a file within a directory.
  • [beta.2] — Fixes exception in tasks when deleting a server.
  • [beta.2] — Fixes bug with Terarria and Voice servers reporting a TypeError: Service is not a constructor in the daemon due to a missing service configuration.
  • [beta.2] — Fixes password reset form throwing a MethodNotAllowed error when accessed.
  • [beta.2] — Fixes invalid password bug when attempting to change account email address.
  • [beta.2] — New attempt at fixing the issues when rendering files in the browser file editor on certain browsers.
  • [beta.2] — Fixes broken auto-deploy time checking causing no tokens to work.
  • [beta.2] — Fixes display of subusers after creation.
  • [beta.2] — Fixes bug throwing model not found exception when editing an existing subuser.

Changed

  • Deleting a server safely now continues even if the daemon reports a HTTP/404 missing server error (requires Daemon@0.4.0-beta.2.1)
  • Changed behavior when modifying server allocation information. You can now remove the default allocation assuming you assing a new allocation at the same time. Reduces the number of steps to change the default allocation for a server.

Added

  • Server listing and view in Admin CP now shows the SFTP username/Docker container name.
  • Administrative server view includes link in navigation to go to server console/frontend management.

v0.6.0-beta.2

Fixed

  • [beta.1] — Fixes task management ststem not running correctly.
  • [beta.1] — Fixes API endpoint for command sending missing the required class definition.
  • [beta.1] — Fixes panel looking for an old compiled classfile that is no longer used. This was causing errors relating to missing class DingoAPI when trying to upgrade the panel.
  • [beta.1] — Should fix render issues when trying to edit some files via the panel file editor.

Added

v0.6.0-beta.1

Fixed

  • [pre.7] — Fixes bug with subuser checkbox display.
  • [pre.7] — Fixes bug with injected JS that was causing <!DOCTYPE html> to be ignored in templates.
  • [pre.7] — Fixes exception thrown when trying to delete a node due to a misnamed model.
  • [pre.7] — Fixes username vanishing on failed login attempts.
  • [pre.7] — Terminal is now fixed to actually output all lines, rather than leaving one hanging in neverland until the browser is resized.

Added

  • Login attempts and pasword reset requests are now protected by invisible ReCaptcha. This feature can be disabled with a .env variable.
  • Server listing for individual users is now searchable on the front-end.
  • Servers that a user is assocaited with as a subuser are now displayed in addition to owned servers when listing users in the Admin CP.

Changed

  • Subuser permissions are now stored in Permission::listPermissions() to make views way cleaner and make adding to views significantly cleaner.
  • [pre.7] — Sidebar for file manager now is a single link rather than a dropdown.
  • Attempting to reset a password for an account that does not exist no longer returns an error, rather it displays a success message. Failed resets trigger a Pterodactyl\Events\Auth\FailedPasswordReset event that can be caught if needed to perform other actions.
  • Servers are no longer queued for deletion due to the general hassle and extra logic required.
  • Updated all panel components to run on Laravel v5.4 rather than 5.3 which is EOL.
  • Routes are now handled in the routes/ folder, and use a significantly cleaner syntax. Controller names and methods have been updated as well to be clearer as well as avoid conflicts with PHP reserved keywords.
  • API has been completely overhauled to use new permissions system. Any old API keys will immediately become invalid and fail to operate properly anymore. You will need to generate new keys.
  • Cleaned up dynamic database connection setting to use a single function call from the host model.
  • [pre.7] — Corrected a config option for spigot servers to set a boolean value as boolean, and not as a string.

v0.6.0-pre.7

Fixed

  • [pre.6] — Addresses misconfigured console queue that was still sending data way to quickly thus causing the console to explode on some devices when large amounts of data were sent.
  • [pre.6] — Fixes bug in allocation parsing for a node that prevented adding new allocations.
  • [pre.6] — Fixes typo in migrations that wouldn't save custom regex for non-required variables.
  • [pre.6] — Fixes auto-deploy checkbox on server creation causing validation error.

v0.6.0-pre.6

Fixed

  • [pre.5] — Console based server rebuild tool now actually rebuilds the servers with the correct information.
  • [pre.5] — Fixes typo and wrong docker contaienr for certain applications.

Changed

  • Removed all old theme JS and CSS folders to cleanup and avoid confusion in the future.

Added

  • [pre.5] — Added foreign key to pack_id to ensure nothing eds up breaking there.

v0.6.0-pre.5

Changed

  • New theme applied to Admin CP. Many graphical changes were made, some data was moved around and some display data changed. Too much was changed to feasibly log it all in here. Major breaking changes or notable new features will be logged.
  • New server creation page now makes significantly less AJAX calls and is much quicker to respond.
  • Server and Node view pages wee modified to split tabs into individual pages to make re-themeing and modifications significantly easier, and reduce MySQL query loads on page.
  • [pre.4] — Service and Pack magement overhauled to be faster, cleaner, and more extensible in the future.
  • Most of the backend UnhandledException display errors now include a clearer error that directs admins to the program's logs.
  • Table seeders for services now can be run during upgrades and will attempt to locate and update, or create new if not found in the database.
  • Many structural changes to the database and Pterodactyl\Models classes that would flood this changelog if they were all included. All required migrations included to handle database changes.
  • [pre.4] — Service pack files are now stored in the database rather than on the host system to make updates easier.
  • Clarified details for database hosts to prevent users entering invalid account details, as well as renamed tables and columns relating to it to keep things clearer.
  • Updated all code to be Laravel compliant when using env() and moved to using config() throughout non config/*.php files.

Fixed

  • Fixes potential bug with invalid CIDR notation (ex: 192.168.1.1/z) when adding allocations that could cause over 4 million records to be created at once.
  • [pre.4] — Fixes bug preventing server updates from occurring by the system due to undefined Auth::user() in the event listener.
  • [pre.4] — Fixes Server::byUuid() caching to actually clear the cache for all users, rather than the logged in user by using cache tags.
  • [pre.4] — Fixes server listing on frontend not displaying a page selector when more than 10 servers exist.
  • [pre.4] — Fixes non-admin users being unable to create personal API keys.
  • Fixes bug where daemon was unable to register that certain games had fully booted and were ready to play on.
  • Fixes bug causing MySQL user accounts to be corrupted when resetting a password via the panel.
  • [pre.4] — Multiple clients refreshing the console no longer clears the console for all parties involved... sorry about that.
  • [pre.4] — Fixes bug in environment setting script that would not remeber defaults and try to re-assign values.

Added

  • Ability to assign multiple allocations at once when creating a new server.
  • New humanReadable macro on File facade that accepts a file path and returns a human readable size. (File::humanReadable(path, precision))
  • Added ability to edit database host details after creation on the system.

Deprecated

  • Old API calls to Server::create will fail due to changed data structure.
  • Many old routes were modified to reflect new standards in panel, and many of the controller functions being called were also modified. This shouldn't really impact anyone unless you have been digging into the code and modifying things.

v0.6.0-pre.4

Fixed

  • [pre.3] — Fixes bug in cache handler that doesn't cache against the user making the request. Would have allowed for users to access servers not belonging to themselves in production.
  • [pre.3] — Fixes misnamed MySQL column that was causing the inability to delete certain port ranges from the database.
  • [pre.3] — Fixes bug preventing rebuilding server containers through the Admin CP.

Added

  • New cache policy for ServerPolicy to avoid making 15+ queries per page load when confirming if a user has permission to perform an action.

v0.6.0-pre.3

Fixed

  • [pre.2] — Fixes bug where servers could not be manually deployed to nodes due to a broken SQL call.
  • [pre.2] — Fixes inability to edit a server due to owner_id issues.
  • [pre.2] — Fixes bug when trying to add new subusers.
  • Emails sending with 'Pterodactyl Panel' as the from name. Now configurable by using php artisan pterodactyl:mail to update.
  • [pre.2] — Fixes inability to delete accounts due to SQL changes.
  • [pre.2] — Fixes bug with checking power-permissions that showed the wrong buttons. Also adds check back to sidebar to only show options a user can use.
  • [pre.2] — Fixes allocation listing on node allocations tab as well as bug preventing deletion of port.
  • [pre.2] — Fixes bug in services that prevented saving updated settings or creating new services.

Changed

  • [pre.2] — File Manager now displays relevant information on all screen sizes, and includes better button clicking mechanics for dropdown menu.
  • Reduced the number of database queries being executed when viewing a specific server. This is done by caching the query for up to 60 minutes in memcached.
  • User creation emails include more information and are sent by the event listener rather than the repository.
  • Account password reset emails now auto-fill the email when clicking the link.

Added

  • Notifications when a user is added or removed as a subuser for a server.

v0.6.0-pre.2

Fixed

  • [pre.1] — Fixes bug with database seeders that prevented correctly installing the panel.

Changed

  • [pre.1] — Moved around navigation bar on fronted to make it more obvious where logout and admin buttons were, as well as use the right icon for server listing.

v0.6.0-pre.1

Added

  • Remote routes for daemon to contact in order to allow Daemon to retrieve updated service configuration files on boot. Centralizes services to the panel rather than to each daemon.
  • Basic service pack implementation to allow assignment of modpacks or software to a server to pre-install applications and allow users to update.
  • Users can now have a username as well as client name assigned to their account.
  • Ability to create a node through the CLI using pterodactyl:node as well as locations via pterodactyl:location.
  • New theme (AdminLTE) for front-end with tweaks to backend files to work properly with it.
  • Add support for PhraseApp's in-context editor

Fixed

  • Bug causing error logs to be spammed if someone timed out on an ajax based page.
  • Fixes edge case where specific server names could cause daemon errors due to an invalid SFTP username being created by the panel.
  • Fixes sessions being removed on browser close, and set sessions to idle for up to 3 hours before being marked as expired.

Changed

  • Admin API and base routes for user management now define the fields that should be passed to repositories rather than passing all fields.
  • User model now defines mass assignment fields using $fillable rather than $guarded.
  • 2FA checkpoint on login is now its own page, and not an AJAX based call. Improves security on that front.
  • Updated Server model code to be more efficient, as well as make life easier for backend changes and work.

Deprecated

  • Server::getUserDaemonSecret(Server $server) was removed and replaced with User::daemonSecret(Server $server) in order to clean up models.
  • Server::getByUUID() was replaced with Server::byUuid() as well as various other functions through-out the Server model.
  • Server::getHeaders() was removed and replaced with Server::getClient() which returns a Guzzle Client with the correct headers already assigned.

v0.5.6 (Bodacious Boreopterus)

Added

  • Added the following languages: Estonian et, Dutch nl, Norwegian nb (partial), Romanian ro, and Russian ru. Interested in helping us translate the panel into more languages, or improving existing translations? Contact us on Discord and let us know.
  • Added missing strings.password to language file for English.
  • Allow listing of users from the API by passing either the user ID or their email.

Fixed

  • Fixes bug where assigning a variable a default value (or valid value) of 0 would cause the panel to reject the value thinking it did not exist.
  • Addresses potential for crash by limiting total ports that can be assigned per-range to 2000.
  • Fixes server names requiring at minimum 4 characters. Name can now be 1 to 200 characters long. ✏️
  • Fixes bug that would allow adding the owner of a server as a subuser for that same server.
  • Fixes bug that would allow creating multiple subusers with the same email address.
  • Fixes bug where Sponge servers were improperly tagged as a spigot server in the daemon causing issues when booting or modifying configuration files.
  • Use transpiled ES6 -> ES5 filemanager code in browsers.
  • Fixes service option name displaying the name of a nwly added variable after the variable is added and until the page is refreshed. (see #208)

Changed

  • Filemanager and EULA checking javascript is now written in pure ES6 code rather than as a blade-syntax template. This allows the use of babel to transpile into ES5 as a minified version.

v0.5.5 (Bodacious Boreopterus)

Added

  • New API route to return allocations given a server ID. This adds support for a community-driven WHMCS module 🚀 available here.

Fixed

  • Fixes subuser display when trying to edit an existing subuser.

v0.5.4 (Bodacious Boreopterus)

Added

  • Changing node configuration values now automatically makes a call to the daemon and updates the configuration there. Changing daemon tokens now does not require any intervention, and takes effect immediately. SSL & Port configurations will still require a daemon reboot.
  • New button in file manager that triggers the right click menu to enable support on mobile devices and those who cannot right click (blessed be them).
  • Support for filtering users when listing all users on the system.
  • Container ID and User ID on the daemon are now shown when viewing a server in the panel.

Changed

  • File uploads now account for a maximum file size that is assigned for the daemon, and gives cleaner errors when that limit is reached.
  • File upload limit can now be controlled from the panel.
  • Updates regex and default values for some Minecraft services to reflect current technology.

Fixed

  • Fixes potential for generated password to not meet own validation requirements.
  • Fixes some regex checking issues with newer versions of Minecraft.

v0.5.3 (Bodacious Boreopterus)

Fixed

  • Fixed an error that occurred when viewing a node listing when no nodes were created yet due to a mis-declared variable. Also fixes a bug that would have all nodes trying to connect to the daemon using the same secret token on the node listing, causing only the last node to display properly.
  • Fixes a bug that displayed the panel version rather than the daemon version when viewing a node.
  • Fixes a multiplicator being applied to an overallocation field rather than a storage space field when adding a node.

Changed

  • Added a few new configuration variables for nodes to the default config, as well as a variable that will be used in future versions of the daemon.

v0.5.2 (Bodacious Boreopterus)

Fixed

  • Time axis on server graphs is corrected to show the minutes rather than the current month.
  • Node deletion now works correctly and deletes allocations as well.
  • Fixes a bug that would leave orphaned databases on the system if there was an error during creation.
  • Fixes an issue that could occur if a UUID contained #e# formatting within it when it comes to creating databases.
  • Fixed node status display to account for updated daemon security changes.
  • Fixes default language being selected as German (defaults to English now).
  • Fixes bug preventing the deletion of database servers.

Changed

  • Using node:<name> when filtering servers now properly filters the servers by node name, rather than looking for the node ID.
  • Using owner:<email> when filtering servers now properly filters by the owner's email rather than ID.
  • Added some quick help buttons to the admin index page for getting support or checking the documentation.
  • Panel now displays Pterodactyl Panel as the company name if one is not set.

Added

  • Added basic information about the daemon when viewing a node, including the host OS and version, CPU count, and the daemon version.
  • Added version checking for the daemon and panel that alerts admins when daemons or the panel is out of date.
  • Added multiplicator support to certain memory and disk fields that allow users to enter 10g and have it converted to MB automatically.

v0.5.1 (Bodacious Boreopterus)

Fixed

  • Fixes a bug that allowed a user to bypass 2FA authentication if using the correct username and password for an account.

v0.5.0 (Bodacious Boreopterus)

After nearly a month in the works, version v0.5.0 is finally here! 🎉

Added

  • Foreign keys are now enabled on all tables that the panel makes use of to prevent accidental data deletion when associated with other tables.
  • Javascript changes to prevent crashing browsers when large quantities of data are sent over the websocket to the console. Includes a small popover message on the console to alert users that it is being throttled.
  • Support for 'ARK: Survival Evolved' servers through the panel.
  • Support for filtering servers within Admin CP to narrow down results by name, email, allocation, or defined fields.
  • Setup scripts (user, mail, env) now support argument flags for use in containers and other non-terminal environments.
  • New API endpoints for individual users to control their servers with at /api/me/*.
  • Typeahead support for owner email when adding a new server.
  • Scheduled command to clear out task log every month (configurable timespan).
  • Support for allocating a FQDN as an allocation (panel will convert to IP and assign the FQDN as the alias automatically).
  • Refresh files button in file manager to reload file listing without full page refresh.
  • Added support for file copying through the file manager. #127
  • Creating new files and folders directly from the right-click dropdown menu in the file manager.
  • Support for setting custom user_id when using the API to create users.
  • Support for creating a new server through the API by passing a user ID rather than an email.
  • Passing ?daemon=true flag to /api/servers/:id will return the daemon stats as well as the daemon_token if using HTTPS.
  • Small check for current node status that shows up to the left of the name when viewing a listing of all nodes.
  • Support for creating server without having to assign a node and allocation manually. Simply select the checkbox or pass auto_deploy=true to the API to auto-select a node and allocation given a location.
  • Support for setting IP Aliases through the panel on the node overview page. Also cleaned up allocation removal.
  • Support for renaming files through the panel's file mananger.

Changed

  • Servers are now queued for deletion to allow for cancellation of deletion, as well as run in the background to speed up page loading.
  • Switched to new graphing library to make graphs less... broken.
  • Rebuild triggers are only sent to the node if there is actually something changed that requires a rebuild.
  • Dependencies are now hard-coded into the composer.json file to prevent users installing slightly different versions with different features or bugs.
  • Server related tasks now use the lowest priorty queue to prevent clogging the pipes when there are more important tasks to be run by the panel.
  • Dates displayed in the file manager are now more user friendly.
  • Creating a user, server, or node now returns HTTP/1.1 200 and a JSON element with the user/server/node's ID.
  • Environment setting script is much more user friendly and does not require an excessive amount of clicking and typing.
  • File upload method switched from BinaryJS to Socket.io implementation to fix bugs as well as be a little speedier and allow upload throttling.
  • Server::getbyUUID() now accepts either the uuidShort or full-length uuid for server identification.
  • API keys are tied to individual users and no longer created through the Admin CP.
  • ALL API routes previously returning paginated result sets, or result sets nested inside a descriptive block (e.g. servers:) have been changed to return a single array of all associated items. Please see the updated documentation for how this change might effect your API use.
  • API route for /api/users/:id now includes an array of all servers the user is set as the owner of.
  • Prevent clicking server start button until server is completely off, not just stopping.
  • Upon successful creation of a node it will redirect to the allocation tab and display a clearer message to add allocations.
  • Trying to add a new node if no location exists redirects user to location management page and alerts them to add a location first.
  • Server\AjaxController@postSetConnection is now Server\AjaxController@postSetPrimary and accepts one post parameter of allocation rather than a combined ip:port value.
  • Port allocations on server view are now cleaner and should make more sense.
  • Improved File Manager
    • Rewritten Javascript to load, rename, and handle other file actions.
    • Uses Ace Editor for editing files rather than a non-formatted textarea
    • File actions that were previously icons to the right are now contained in a menu that appears when right-clicking a file or folder.

Fixed

  • Fixes bug where resetting a user password through the login form would not hold passwords to the same requirements as the rest of the panel (mixed case and at least one numeric character).
  • Fixes bug where no error would be displayed when adding a new server with an invalid owner email.
  • Fixes a bug that could allow an admin to delete the default allocation for a server causing all sorts of issues.
  • Databases assigned to a server are now actually deleted when a server is removed.
  • Server overview listing the location short-code as the name of the node.
  • Server task manager only sending commands every 5 minutes at the quickest.
  • Fixes additional port allocation from removing the wrong row when clicking 'x'.
  • Updated Socket.io client file to version 1.5.0 to match the latest release. Correlates with setting hard dependencies in the Daemon.
  • Team Fortress named 'Insurgency' in panel in database seeder. (#96, PR by @MeltedLux)
  • Server allocation listing display now showing the connection IP unless an alias was assigned.
  • Fixed bug where node allocation would appear to be successful but actual encounter an error. Made it cleared how to enter ports.
  • Fixes display where an extra space was added to the end of SFTP passwords when they were copied from the panel. #116, thanks @OrangeJuiced
  • Fixes a bug that prevented viewing database servers if not assigned to a node.
  • Checkboxes previously not displayed checkmarks are now fixed.

Fixed (bugs from v0.5.0-rc.2)

  • Fixes a bug causing password resets to fail for server databases.
  • Fixes a bug during installation that would prevent the 'Ark: Survival Evolved' service option from being added to the panel unless it was an update.
  • Fixes constant scrolling to bottom of console; console now only scrolls to the bottom on new data.

Removed

  • Removed active session management table displaying the last location of a session.
  • Removed online player listing due to inconsistency in query library and an assortment of query related bugs. This will return in future versions when we get it working correctly.

v0.5.0-rc.2 (Bodacious Boreopterus)

Fixed

  • Fixes a bug that would cause MySQL errors when attempting to install the panel rather than upgrading.

v0.5.0-rc.1 (Bodacious Boreopterus)

Added

  • Foreign keys are now enabled on all tables that the panel makes use of to prevent accidental data deletion when associated with other tables.
  • Javascript changes to prevent crashing browsers when large quantities of data are sent over the websocket to the console. Includes a small popover message on the console to alert users that it is being throttled.
  • Support for 'ARK: Survival Evolved' servers through the panel.

Fixed

  • Fixes bug where resetting a user password through the login form would not hold passwords to the same requirements as the rest of the panel (mixed case and at least one numeric character).
  • Fixes misnamed environment variable for Bungeecord Servers (BUNGE_VERSION -> BUNGEE_VERSION).
  • Fixes bug where no error would be displayed when adding a new server with an invalid owner email.
  • Fixes a bug that could allow an admin to delete the default allocation for a server causing all sorts of issues.
  • Databases assigned to a server are now actually deleted when a server is removed.
  • Fixes file uploads being improperly throttled.

Changed

  • Servers are now queued for deletion to allow for cancellation of deletion, as well as run in the background to speed up page loading.
  • Switched to new graphing library to make graphs less... broken.
  • Rebuild triggers are only sent to the node if there is actually something changed that requires a rebuild.
  • Dependencies are now hard-coded into the composer.json file to prevent users installing slightly different versions with different features or bugs.
  • Server related tasks now use the lowest priorty queue to prevent clogging the pipes when there are more important tasks to be run by the panel.
  • Decompressing files now shows a pop-over box that does not dismiss until it is complete.
  • Dates displayed in the file manager are now more user friendly.

Removed

  • Removed online player listing due to inconsistency in query library and an assortment of query related bugs. This will return in future versions when we get it working correctly.

v0.5.0-pre.3 (Bodacious Boreopterus)

Added

  • Return node configuration from remote API by using /api/nodes/{id}/config endpoint. Only accepts SSL connections.
  • Support for filtering servers within Admin CP to narrow down results by name, email, allocation, or defined fields.
  • Setup scripts (user, mail, env) now support argument flags for use in containers and other non-terminal environments.
  • New API endpoints for individual users to control their servers with at /api/me/*.
  • Typeahead support for owner email when adding a new server.
  • Scheduled command to clear out task log every month (configurable timespan).
  • Support for allocating a FQDN as an allocation (panel will convert to IP and assign the FQDN as the alias automatically).
  • Refresh files button in file manager to reload file listing without full page refresh.

Changed

  • Creating a user, server, or node now returns HTTP/1.1 200 and a JSON element with the user/server/node's ID.
  • Environment setting script is much more user friendly and does not require an excessive amount of clicking and typing.
  • File upload method switched from BinaryJS to Socket.io implementation to fix bugs as well as be a little speedier and allow upload throttling.
  • Server::getbyUUID() now accepts either the uuidShort or full-length uuid for server identification.
  • API keys are tied to individual users and no longer created through the Admin CP.

Fixed

  • Server overview listing the location short-code as the name of the node.
  • Server task manager only sending commands every 5 minutes at the quickest.
  • Fixes additional port allocation from removing the wrong row when clicking 'x'.

v0.5.0-pre.2 (Bodacious Boreopterus)

Added

  • Added support for file copying through the file manager. #127
  • Creating new files and folders directly from the right-click dropdown menu in the file manager.
  • Support for setting custom user_id when using the API to create users.
  • Support for creating a new server through the API by passing a user ID rather than an email.
  • Passing ?daemon=true flag to /api/servers/:id will return the daemon stats as well as the daemon_token if using HTTPS.
  • Small check for current node status that shows up to the left of the name when viewing a listing of all nodes.

Changed

  • Support for sub-folders within the getJavascript() route for servers.
  • ALL API routes previously returning paginated result sets, or result sets nested inside a descriptive block (e.g. servers:) have been changed to return a single array of all associated items. Please see the updated documentation for how this change might effect your API use.
  • API route for /api/users/:id now includes an array of all servers the user is set as the owner of.

Fixed

  • File manager would do multiple up-down-up-down loading actions if you escaped renaming a file. Fixed the binding issue. #122
  • File manager actions would not trigger properly if text in a row was used to right-click from.
  • File manager rename field would not disappear when pressing the escape key in chrome. #121
  • Fixes bug where server image assigned was not being saved to the database.
  • Fixes instances where selecting auto-deploy would not hide the node selection dropdown.
  • Fixes bug in auto-deployment that would throw a ModelNotFoundException if the location passed was not valid. Not normally an issue in the panel, but caused display issues for the API.
  • Updated Socket.io client file to version 1.5.0 to match the latest release. Correlates with setting hard dependencies in the Daemon.

v0.5.0-pre.1 (Bodacious Boreopterus)

Added

  • Support for creating server without having to assign a node and allocation manually. Simply select the checkbox or pass auto_deploy=true to the API to auto-select a node and allocation given a location.
  • Support for setting IP Aliases through the panel on the node overview page. Also cleaned up allocation removal.
  • Support for renaming files through the panel's file mananger.

Changed

  • Prevent clicking server start button until server is completely off, not just stopping.
  • Upon successful creation of a node it will redirect to the allocation tab and display a clearer message to add allocations.
  • Trying to add a new node if no location exists redirects user to location management page and alerts them to add a location first.
  • Server\AjaxController@postSetConnection is now Server\AjaxController@postSetPrimary and accepts one post parameter of allocation rather than a combined ip:port value.
  • Port allocations on server view are now cleaner and should make more sense.
  • Improved File Manager
    • Rewritten Javascript to load, rename, and handle other file actions.
    • Uses Ace Editor for editing files rather than a non-formatted textarea
    • File actions that were previously icons to the right are now contained in a menu that appears when right-clicking a file or folder.

Fixed

  • Team Fortress named 'Insurgency' in panel in database seeder. (#96, PR by @MeltedLux)
  • Server allocation listing display now showing the connection IP unless an alias was assigned.
  • Fixed bug where node allocation would appear to be successful but actual encounter an error. Made it cleared how to enter ports.
  • Fixes display where an extra space was added to the end of SFTP passwords when they were copied from the panel. #116, thanks @OrangeJuiced

Removed

  • Removed active session management table displaying the last location of a session.

v0.4.1 (Articulate Aerotitan)

Changed

  • Overallocate fields are now auto-filled with a value of 0

Fixed

v0.4.0 (Arty Aerodactylus)

Added

  • Task scheduler supporting customized CRON syntax or dropdown selected options. (currently only support command and power options)
  • Adds support for changing per-server database passwords from the panel.
  • Allows for use of IP rather than a FQDN if the node is not using SSL
  • Adds support for IP Aliases on display pages for users. This makes it possible to use GRE tunnels and still show the user what IP they should be connecting to.
  • Adds support for suspending servers
  • Adds support for viewing SFTP password within the panel (#74, thanks @ET-Bent)
  • Improved API with support for server suspension and build modification.
  • Improved service management and setup on first install.
  • New terminal that supports ANSI color codes as well as cleaner output. You can also simply type start or boot to start your server rather than having to use the start button.

Fixed

  • Fixes password auto-generation on 'Manage Server' page. (#67, thanks @ET-Bent)
  • Fixes some overly verbose user output when an error occurs
  • Prevent calling daemon until database call has been confirmed when changing default connection.
  • Fixes a few display issues relating to subusers and database management.
  • Fixes the server name in the header not linking to the server correctly. (#79, thanks @xX1bumblebee1Xx)
  • Fixes bug where non-admins could not see command box on servers. (#83, thanks @xX1bumblebee1Xx)
  • Fixes bug where files could not be uploaded through the "click and select" system, only through "drag and drop." (#82, thanks @xX1bumblebee1Xx)
  • Fixes a bug where new files could not be created through the panel for a server. (#85, thanks @xX1bumblebee1Xx)
  • Fixes the exception handler to properly display and log exceptions that might occur rather than leaving a vague error. (#81)

Changed

  • Update Laravel to version 5.3 and update dependencies.

Deprecated

  • Requires Pterodactyl Daemon v0.2.*

Security

  • Fixes listing of server variables for server. Previously a bug made it possible to view settings for all servers, even if the user didn't own that server. (#69)