Quillo v1.0.0: the Design page

The first stable release of Quillo. Every blog owner can now choose their blog's look in the admin.

New: Admin > Design

Pick a look and see it straight away in a live preview of your real home page and an article, in light or dark, on a computer or a phone. Nothing changes for readers until you press Save design.

• Colours: 6 themes, each with a light and a dark version.
• Fonts: 5 pairs, all served from your own server.
• Light and dark: follow each reader's device, or Light only.
• Header: clean bar, two rows in news style, or dark bar.
• Home page: big story and sidebar, Magazine, or Newsroom.
• Article page: picture first, classic with a sidebar, or centred reading.
• Article parts: styles for share buttons, source code, code colours, downloads, tables and comments.
• Admin: the admin's own look and the post editor mode.
• Templates: 5 ready-made looks. You can also save up to 20 of your own and switch back any time.

Upgrading from 0.10.0

• Your blog keeps its exact look. Every default is the original choice, and no settings change.
• Follow the Updating steps in deploy/README.md. npm ci installs the new font packages.

Also in this release

• A VERSION file, a new README, and guides in docs/.
• A tighter .gitignore.

Full details: CHANGELOG.md

Quillo v0.10.0: white-label

Quillo no longer carries a built-in brand. Anyone can start a blog with their own name.

New

• First-run setup asks for the blog's name, description and time zone. It also offers a small "Powered by Quillo" line in the footer.
• New blogs start neutral: "My Blog", plain wording and no example content. Empty sponsor boxes stay hidden until you turn them on.
• Post features are switches in Settings > Post features: the Source code box, download buttons with a GitHub button, and "Tested with". They are off on a new blog.
• More settings:
  • the mark shown when there's no logo (your initials or an icon), which the browser-tab icon follows;
  • the region for search engines and social cards;
  • what the blog calls a post, as in "Related recipes" or "Search the projects".
• Admin > Ads: the Advertise page's three reasons and "Who advertises here" list are editable.
• PRODUCT_NAME lets resellers with a commercial licence show their own product name.

Fixed

• Time zones: the lists now include "UTC" and current names such as Asia/Kolkata. An old saved name shows as its current one.
• Footer year: it no longer stays on last year after New Year on a quiet site.

Upgrading from 0.9.0

• Existing blogs keep their look. A database update runs by itself at start and saves your current mark, features, wording, region and Advertise text as settings.
• Four small phrases are now neutral on every blog: "More from …" on the About page, "Search the projects" in the search box, the search page hint, and "share your thoughts" under posts without comments.
• Follow the Updating steps in deploy/README.md.

Full details: CHANGELOG.md

Quillo v0.9.0: first versioned release

The first versioned release. The in-house blog becomes Quillo, open source under the GNU AGPL-3.0-or-later, with a commercial licence available (see LICENSING.md).

What's in it

• Public site:
  • a big story and sidebar home page;
  • picture-first articles;
  • category pages, search, RSS and a sitemap.
• Admin:
  • a visual editor with a Markdown switch;
  • autosave, revisions and scheduling;
  • a media library, categories and tags, menus and redirects;
  • staff roles: owner, admin, editor, author and contributor.
• Readers: free accounts with email verification, and moderated comments with replies and likes.
• Newsletter: double opt-in, sent through your own email account, with one-click unsubscribe.
• Sponsor banners: first-party banners in 9 places, labelled "Sponsored".
• Search engines and AI answers:
  • structured data and social share images;
  • IndexNow;
  • cookieless analytics (Plausible or Umami).
• Makers' tools: source code boxes, STL and PDF downloads, and a GitHub button.
• Running it: a systemd service, an install script and a Cloudflare Tunnel example in deploy/.

Security

Three security audits, with fixes after each:

• Two-step sign-in with recovery codes.
• Strict content security policies.
• Encrypted secrets.
• Rate limits that survive restarts.
• Upload checks.
• Every dependency pinned exactly, with npm audit clean.

Getting started

Download the zip below, then follow deploy/README.md to put the blog online.

Full details: CHANGELOG.md