Hosting plans now enforce their disk space, inode and bandwidth allowances. A backup can bring back a whole account: files, mailboxes, databases and database users. Clients can put a single domain into maintenance mode. The release also adds operation hooks for your own scripts and secondary DNS servers. LiteSpeed Enterprise can run natively and serve Node.js, Python and Ruby applications. ImunifyAV joins the security modules. Clients get a CPGuard page of their own. There is a list of blocked domains and an Integrations page. CloudLinux conversion and CloudLinux servers get a set of fixes.
Plan limits
- Plan allowances enforced (AB-1621, AB-1172): Hosting plans enforce Disk Space, a new Inodes limit and Bandwidth. The switches are under Settings > General Settings > Plan limits. Enforce disk and inode allowances comes with a Headroom above the plan (10% by default) and a Grace period (7 days by default). Two more switches act on accounts whose databases spend the disk allowance and on accounts over their bandwidth allowance. You choose the usage level to act at, 100% by default, with usage counted per month. An account over its limit can show visitors a notice page that names the limit. The page can start at the plan allowance or at the hard limit.
- Plan limits on new and upgraded servers (AB-1621): Enforcement is off on upgraded servers. Run
bolt-cli manage-disk-quota --action=install and then turn enforcement on. The command tells you when the server needs a reboot first. --action=status reports the state and --action=disable switches it off. On a fresh installation that supports it, plan limits apply from the first account. Otherwise the installer warns that they cannot be enforced.
- Plan changes and other limits (AB-1621, AB-1172): Mailing Lists plan limits are enforced. A plan change is judged on the account's real usage, so an account that fits a larger plan can move to it. A limit of 0 counts as unlimited for the disk, database disk, bandwidth and inode warnings.
- Combined disk usage (AB-1502): The client dashboard shows one Disk Usage bar for files and databases together, against the plan's Disk Space. The databases are a labelled part of the bar. The bar warns at 80% and turns critical at 95%. It reads Unlimited when Disk Space is 0. The admin account page, the account list and the usage APIs report the same combined figure in the new
combinedDiskUsage and diskUsagePercent fields. The client usage API returns plain numbers and true or false warning flags there.
- Inode usage (AB-1268): The client Disk Usage page shows Files (inodes) with the count used, the limit and the percentage. It turns red with advice at 90% and warns when the limit is reached. Administrators get an inode column in the account list and inode usage on the account page. The usage APIs return
inodes, totalInodes and inodeUsageWarning.
- Free temporary domain (AB-1660): A Free temporary domains option on the Feature List decides whether clients see the free temporary domain on their dashboard. Hide the free temporary domain from all customers, under Settings > General Settings > Branding, hides it for all customers. Existing Feature Lists keep the option ticked after the upgrade.
Backups
- Whole account restore (AB-1667): Account backups now include the account's mailboxes, databases, database users and grants. The new Whole account restore mode puts the home directory back. It recreates whatever is missing with its original passwords and imports the databases. Mailboxes and databases that still exist are left as they are. Restore to new account uses this mode when the original username is kept. Restore Jobs shows a report with the outcome for each item: recreated, left as it was, failed or not restored. It works with backups taken after the upgrade to 1.9.0. PostgreSQL databases are outside its scope.
- Client Backups page (AB-1664): The client Backups page is there whenever the plan includes Backups. It explains why nothing runs when there is no policy, the policy is off or the account opted out. Clients restore from the snapshots the page lists. The admin Backup Policies list and the plan form warn about plans that no policy covers. Resellers see only their own plans there. A reseller plan can use only a Feature List that reseller owns, in the panel and over the REST API.
Domains and websites
- Maintenance mode (AB-1257): Clients put a domain into maintenance from the Maintenance mode action on the domain list. The Maintenance column shows Off, On or On until a set time. The dialog sets Retry-After (minutes), an optional automatic end of up to 720 hours and the page HTML. An empty page field serves a default page. Visitors see the maintenance page and certificates are issued as usual. Maintenance turns itself off at the deadline. It works on Apache, LiteSpeed Enterprise and OpenLiteSpeed.
- Git commit history (AB-1147, AB-1620): Each repository in Git Version Control has a History action with the last 20 commits of the checked-out branch. Repository Path takes a folder inside the home directory, such as
my-site or projects/shop. A folder the panel cannot use is refused before anything runs. A failed clone, pull or push names the reason, such as failed authentication or a missing branch.
Automation and integrations
- Operation hooks (AB-1481): Settings > System > Operation Hooks runs your own scripts around panel operations. A hook can run before and after creating or deleting a hosting account or a domain. It can also run after a DNS record is created, updated or deleted and after a mailbox is created or deleted. A hook that fails before an operation stops it before anything is created. The user sees the first line of its output. Each hook has a timeout from 5 to 300 seconds and an Enabled switch. The list shows the last run with its result, exit code and duration. Run test sends a sample payload. The script receives the operation details as JSON.
- Integrations page (AB-1312, AB-1699): Administrators and resellers get an Integrations page and an Integrations card on the dashboard. It lists the official billing integrations. The WHMCS plugin has Download plugin, Setup guide and Repository links. The Blesta and Upmind modules each have a Setup guide.
- SSO link for a named administrator (AB-1209):
bolt-cli admin-sso-generate --admin=<username> creates a sign-in link for the administrator you name. An unknown name is refused. Without the option the link uses admin when that account exists, otherwise the oldest remaining administrator. The link signs in to that existing account and leaves its password as it is.
DNS
- Secondary DNS servers (AB-946, AB-455): Change Nameservers and the DNS section of General Settings hold an ordered list of at least two nameservers. Add Nameserver extends it and the list can be reordered. DNS templates gain
{{GENERAL_NS}} for one record per nameserver, plus {{GENERAL_NS3}} and higher. Settings > DNS > Secondary DNS Servers adds your own external secondary servers, with ready-to-paste setup instructions. New and deleted domains reach them on their own. Existing nameserver settings carry over on upgrade.
- External DNS sources (AB-1649): External DNS sources sync and are removed in the background, with progress and a Cancel action. Each API source has its own Sync every (minutes) setting. Large zones import in full. Global DNS Zones loads page by page with tens of thousands of zones and shows each zone's source. Remove orphaned zones clears zones left without a source, also from the console with
bolt-cli dns-orphan-zones. Results arrive through three new notification events by email, Slack, Discord and the notification bell.
Web servers
- LiteSpeed Enterprise native mode (AB-1644): LiteSpeed Enterprise can run with a configuration of its own. In that mode it serves Node.js, Python and Ruby applications. Fresh installations use native mode. Existing LiteSpeed servers keep their current mode. The LiteSpeed page shows a Mode badge with Convert to native mode and Revert to Apache drop-in. Missing site configurations are reported and fixed with Rebuild LiteSpeed vhosts.
- Web server consistency (AB-1513, AB-1530): The Attention Center and Health Overview raise a critical fault when a web server other than the configured one serves your sites. The Web Server dashboard names the server that is serving. It offers to restore the configured server, adopt the running one or rebuild the OpenLiteSpeed sites. Switching to LiteSpeed Enterprise confirms that it is serving. When it is not, the panel returns to Apache and says so. OpenLiteSpeed has a card of its own on the LiteSpeed page.
- LiteSpeed module install (AB-1220): Installing LiteSpeed, OpenLiteSpeed or Passenger from the Module Manager keeps PHP running on existing Apache domains until you switch web servers. Domains that could not be prepared are listed in a warning, with a copy in the notification bell.
bolt-cli rebuild-apache-vhosts repairs them, or one domain with --domain=<domain>.
- Stuck worker recovery (AB-1663): On servers with Watchdog installed, a web server worker stuck at full CPU for several minutes is stopped on its own. The web server keeps running. Each event is written to the panel log and raises a new System Notifications event, enabled by default.
bolt-watchdog stuck-workers history lists past detections and bolt-watchdog stuck-workers settings shows or changes the detection settings.
CloudLinux
- Conversion outcome (AB-1353, CloudLinux Only): A failed conversion lists the missing components next to the licence edition. The installer page shows CloudLinux's own log beside the conversion log. Known causes are explained in plain words, such as an IP address without a licence, with the step that resumes the run. After Try again the page keeps the previous failed run with its log.
- Conversion checks (AB-1203, CloudLinux Only): The conversion and its precheck stop before anything on the server changes when a check fails. They name the reason. The conversion can also run again on a server that already runs CloudLinux, for example to repair it.
- Apache after conversion (AB-1662, CloudLinux Only): A conversion leaves Apache ready for AdminBolt hosting accounts. Existing sites keep serving their pages and PHP. New accounts and domains can be created on the plans the server supports. This holds after a repeated conversion and after CloudLinux updates its Apache packages. The conversion result in the admin API shows whether Apache is ready.
- PHP on converted servers (AB-1221, CloudLinux Only): New accounts and domains get a PHP version that runs, including backup imports. When a plan's PHP version cannot be served, the create form flags the plan with PHP not available on this server as soon as it is picked. Creation is then refused with the reason before anything is created. Clients pick only from the PHP versions they are allowed.
- WordPress on alt-php (AB-1200, CloudLinux Only): The WordPress Installer, the plugin list, plugin removal, site statistics, the version check and single sign-on work on sites running alt-php. When a WordPress tool cannot run, the action names the reason. A management action that fails is reported as failed.
- Client PHP Selector (AB-1646, CloudLinux Only): Clients find PHP Selector under Advanced in the client panel. It needs LVE Manager installed and the plan's PHP Selector feature. The administrator can hide it with Hide PHP Selector in LVE Manager. When it is hidden, a direct link does not open it either. The embedded CloudLinux screens fit the browser window and longer content scrolls inside them.
- Resource Usage options (AB-1661, CloudLinux Only): Customers with access to Resource Usage can open its Options tab. It shows the notification settings for their own account, their reseller and their plan. The client pages that list available PHP versions open for customers as well.
- CloudLinux tool errors (AB-1484, CloudLinux Only): When a CloudLinux tool behind a client page fails, the client sees one neutral message. The panel log records one entry with the details, so you can find the cause without logging in to the server.
- PHP version list (AB-1658, CloudLinux Only): The panel's list of installed PHP versions updates on its own when versions, including alt-php builds, are installed or removed. This also covers changes made from the command line. A new version can be assigned straight away.
Security and access
- ImunifyAV module (AB-1482): ImunifyAV, the free malware scanning edition, installs from its card in Modules without an activation key. Only one of Imunify360, ImunifyAV and CPGuard can be active. Each install wizard names the module that blocks it. Modules > ImunifyAV shows the service state, the last scan and the files it found across accounts. Upgrade to Imunify360 replaces it in one run, with a trial when you leave the key empty. Clients see only their own files under Security > ImunifyAV, following a plan feature that the upgrade turns on for existing feature lists.
- Client CPGuard page (AB-1614): Clients get a CPGuard page under Security. It lists their scans with the detections of each scan. Clients can stop their own running scan and start Scan my files, with a limit on how often. They see detections inside their own account only. The admin CPGuard page holds the full history, with Scan an account and Scan whole server. The pages appear once CPGuard is installed and the plan grants the CPGuard feature.
- Blocked domains (AB-1666): Settings > Security > Domain Security gains a Blocked domains list.
brand.example blocks that domain and every name under it. *.brand.example blocks only the names under it. The list applies to administrators, resellers, clients and API keys. It covers creating an account and adding, parking or renaming a domain or using it for a subdomain. The refusal names the matching entry. A default list of major mail and social providers is active on upgraded servers too. Restore the default list brings it back. Import and migration reports flag matching domains for review.
- Panel sign-in protection (AB-1694): Repeated failed panel sign-ins block the address on the panel only, for a limited time. SSH, websites and mail stay reachable. Open SSH sessions stay connected. While no address is exempt from blocking, the admin dashboard offers to exempt yours. The admin sign-in field is Username or e-mail. It accepts an administrator's e-mail address when exactly one administrator uses it.
- Jail status (AB-1659): The Jails screen shows Jails Status with the total failed, total banned and currently banned counts for every active jail. It includes jails the panel did not create. Each jail's Stats suggests a next step when the jail is off or inactive. Old bookmarks to the previous status page open Jails Status.
- Client PHP version choice (AB-1205): Clients choose only from the PHP versions the administrator offers them, on the domain form and in the client API. A domain already on a version hidden from clients can still be saved without changing it.
- LiteSpeed Cache exclusions (AB-1206): Excluded paths on the client LiteSpeed Cache page and the admin cache tab accept URL paths only. The error names any entry the panel cannot use. A missing leading slash or a duplicate is corrected for you.
- File manager access (AB-1533): The file manager opens only for a signed-in hosting account.
Licence
- Trial to paid licence (AB-1648, AB-1687): The License page shows Trial license or Paid license with the days left. On a trial, Buy a license opens billing already signed in on the upgrade page. The panel picks up the payment on its own or when you press I have paid, check now. The licence key field is always available. A new paid key replaces a running trial and a rejected key leaves everything as it was. A full licence issued at signup shows as active straight away.
- Licence revalidation (AB-1503): A renewed licence unlocks the panel at the next scheduled check. Check license status now on the License page shows at once whether the licence is valid and the panel unlocked.
bolt-cli revalidate-license reports the result with an exit code. bolt-cli set-license-key <key> checks a key and stores it. The lock screen points to both commands.
Fixes and smaller changes
- Account home ownership (AB-1531): Health > Overview raises a critical Account homes issue that names each account whose folders need repair. Repair ownership fixes them without touching their contents. A warning lists accounts without a home folder.
bolt-cli repair-home-ownership does the same from the console. With --dry-run it only reports.
- Health check command (AB-1671):
bolt-cli health-check checks the configured web server and MariaDB. It starts a stopped service and checks it again. It carries on after one service fails. It exits with 1 when a required service is still down, so scripts and monitoring can act on it.
- Redis status (AB-1668): The client Redis page shows the instance's real state, with the cause and the next step. Restart appears when the instance is stopped. The admin health and services pages and the API report Redis the same way. An upgrade leaves clients' Redis instances running when nothing about them changed.
- Panel certificate chain (AB-1670): The panel port and the server's default HTTPS site serve the full certificate chain. A fresh installation switches the panel to its real certificate as soon as it is issued.
- Mailbox sending suspension (AB-1460): A mailbox's Outgoing mail field and the Suspend Sending action are one control. Suspending sending stops all outgoing mail from that mailbox. The Restrictions column shows one Sending suspended label.
- Partial certificates (AB-1534): A certificate is issued when an extra domain name points to an IPv6 address the server cannot reach. That name is left off with the reason and the certificate covers the rest.
- Quieter idle server (AB-1506, AB-1509, AB-1510, AB-1511): An idle server uses less CPU and writes fewer entries to the system log. Hosting account statistics refresh interval, on the Scheduler settings page, runs from 5 to 60 minutes with 15 by default. On LiteSpeed Enterprise and OpenLiteSpeed the Metrics widget explains why Apache status is not shown.
- Plain error messages (AB-1467): Resellers and clients see error messages in plain language, or a general message with a correlation ID. Administrators see the full detail.
- Smaller fixes (AB-1168, AB-1246, AB-1247, AB-1398, AB-1469): The hostname certificate check completes quickly and keeps the current certificate when a replacement cannot be used. A stopped or missing service reads as stopped or not found. SSH Access settings save and apply as entered, including removed addresses and the port. The mail server and DNS database cards under Settings > Adminer open read-only. WordPress single sign-on opens the WordPress dashboard and falls back to the login page when it cannot.
Install
curl -sSL https://get.adminbolt.com/install.sh | bash
Upgrade from 1.8.4
- Log in to the Admin Panel.
- Open System, then System Updates.
- Click Check for updates and review the release notes.
- Start the update if a newer version is available.
