Nova Server v1.1.0

Nova Server v1.1.0

A big feature release. Update from the panel (Health check has a one-click self-update) or reinstall with the installer.

Deploy anywhere: VPS, Docker, or a PaaS like runflare

• New Docker + PaaS support. Nova now runs as a WebSocket-only container behind any HTTP/TLS edge, so you can host it on Docker or on Iranian PaaS platforms (runflare and similar) where port 22 is closed. One-click docker compose up, a ready Dockerfile, and a step-by-step guide are included. See DEPLOY.md.
• The VPS installer stays the full-featured path (every protocol including the UDP ones, plus the Iran bridge tunnels).

Per-country exits

• Offer your users a choice of exit country. Nova runs a Tor or Psiphon instance per country and adds one config per country to each opted-in user's subscription, so they pick their country right in their app (Germany, Netherlands, UK, US, Turkey, and more).
• Per-user opt-in, live status and exit-IP test per country, one card each.

Protocols managed only in Inbounds

• VLESS, VMess and Trojan are now managed on the Inbounds page (VMess is finally createable there). The old "default protocols" switches are gone from Settings.
• Clear split between the shared-443 Cloudflare/TLS front (VLESS/VMess/Trojan over WebSocket on one port) and standalone inbounds (each on its own port with Reality, gRPC, XHTTP and the full feature set). Existing configs migrate automatically with no change to your users' links.

Resellers and managers with custom permissions

• Create staff accounts with any capability set (for example a "user management only" manager). Resellers see only the users they created and build them on your inbounds; managers can see everyone; you see all.
• Per-admin two-factor auth. The reseller/manager panel is now fully usable.

Config and port diagnostics

• A health check that verifies each config is actually listening on the right port and reachable, plus a firewall and reserved-ports view, with one-click fixes. Catches a dead config before a user ever pastes it into their app.
• Internal service ports are now reserved so a new inbound can't collide and crash the node.

Multi-profile inbounds

• Advertise one backend inbound as several subscription configs, each on its own CDN domain, SNI or address, without duplicating the inbound.

Subscriptions

• Usage and expiry now show up natively in clients (v2rayNG, sing-box, Streisand) via the standard subscription header.
• WireGuard fixes: a per-user peer is minted for each user, and the share link now imports correctly into V2Ray.
• Subscription page polish: per-country configs show the country clearly, and long names no longer break mid-word.

Notes

• The panel is available in English, Persian (RTL) and Russian throughout.
• On Docker/PaaS there is no UDP, so Hysteria2 and WireGuard are VPS-only; normal browsing, the WebSocket protocols, and VoIP all work there.