v0.0.3

Nexora Panel v0.0.3

Before you update

Update the panel first, then your nodes. Nodes on v0.0.3 expect this panel release; this panel keeps working with older nodes, but live config changes and cleaner quota cut-offs need nodes on v0.0.3.

What's new

Changes reach your nodes without restarts

• Editing a template, routing, DNS or rule sets is applied to a running node without restarting it. The node restarts only when it has to.
• Rule sets are downloaded by the panel and sent to your nodes. Nodes no longer fetch them themselves, so one unreachable list can no longer stop a node from starting.
• Items a node cannot run are listed as warnings on the node instead of failing the whole configuration. They stay listed until a sync applies them.
• Accounts that lack the credential an inbound needs are left out of that inbound with a warning, and accounts created before credentials were generated are given them once.
• A node you switch off stops serving. Deleting a node stops it too, and the panel warns you if it could not be reached.
• Actions that need a switched-off node now answer "node is off" instead of a generic gateway error.
• A quota run now syncs each node once, however many accounts lapse in the same minute.

Addons

• Addons can be installed on the panel's own server, without SSH.
• The panel can issue an addon's HTTPS certificate and the addon fetches it. The panel's own certificate never leaves its server.
• Password fields in addon install forms are checked before the install starts (at least 10 characters).
• The addon install wizard keeps its answers and checks your input before running anything.

Subscriptions

• Subscription files now load and connect on current Xray and sing-box clients:
  • Xray: the removed HTTP/2 transport is left out, mKCP uses the legacy mask, and Hysteria2 and WireGuard are included.
  • sing-box: naive trusts the pinned certificate.
• Options that only matter to client apps, and ECH options that sing-box removed, are no longer offered or saved.
• VLESS Encryption can be used on outbounds.

Panel interface

• A new dashboard card walks a fresh install through its first inbound, template, node and user. Empty pages point to the next step, and nodes without a template are flagged.
• Server addresses and certificate names are blurred until you hover them.
• The sidebar groups fold away when the sidebar stops peeking, and the licence and update banners are softer in the dark theme.
• You are told when a node is behind the newest node release.

Under the hood

• Built with Go 1.27.2, which includes the latest standard-library security fixes.
• Addon contract: addon-kit v0.4.4.

@MHSanaei @alireza0