/oss · 4 merged

0xJacky/nginx-ui

A web panel for managing Nginx, the program that sits in front of many websites and serves their pages.

the project on GitHub (opens in a new tab)
  1. 16 Oct 2026

    Downloaded PFX certificates open in OpenSSL 3 and Node

    What was broken
    The panel's PFX download used an old 40-bit cipher that OpenSSL 3 and Node refuse by default. The file downloaded fine but could not be opened there.
    What I changed
    The download now uses the format the library recommends for wide support, which Windows and IIS still import.
    Why it matters
    A certificate exported from the panel works in current tools without extra flags.

    see the code, #2022 (opens in a new tab)

  2. 16 Oct 2026

    A renamed site keeps its certificate renewing

    What was broken
    The panel links a certificate to its site's file name. Renaming a site left the certificate on the old name, so automatic renewal skipped it. Nothing warned anyone, and the certificate just ran out.
    What I changed
    Renaming a site or a stream now moves its certificate to the new name too.
    Why it matters
    Renaming a site no longer quietly lets its HTTPS certificate expire.

    see the code, #2021 (opens in a new tab)

  3. 14 Oct 2026

    Notes in a site's settings survive a save

    What was broken
    Notes at the end of a settings line were thrown away when a site was saved in the panel's block editor. Certbot, the common certificate tool, adds one to every line it writes, so those sites lost them all.
    What I changed
    The editor now keeps those notes. Most move to their own line just above the setting, and inside page rules they stay on the same line.
    Why it matters
    Saving a site in the panel no longer quietly strips the notes people and tools left in it.

    see the code, #2015 (opens in a new tab)

  4. 14 Oct 2026

    A site under maintenance can't be deleted or renamed by mistake

    What was broken
    A site in maintenance mode shows visitors a 'down for maintenance' page. Deleting or renaming it left that page on under the old name, and with the site gone from the panel, nobody could turn it off.
    What I changed
    The panel now refuses to delete or rename a site while it is under maintenance, and says why. The delete check was already meant to do this but looked in the wrong folder.
    Why it matters
    Visitors are not left stuck on a maintenance page that nobody can switch off.

    see the code, #2014 (opens in a new tab)

← every project