Kaleta 2.8.0

Kaleta 2.8 is about a site that runs itself: background jobs you can see, one record of what happened, an e-mail when something breaks, updates that undo themselves when the site stops working, a firewall, and checks of the domain, the mail records, the accounts and the speed real visitors get.

Background jobs

Settings → System status → Background jobs lists everything the site does by itself: scheduled publishing, mail, webhooks, newsletters, backups, link checks, clean-up, alerts, and the new daily checks. Each job shows when it last ran, when it last worked, and the last error.

• Cron calling /ulohy every 5 minutes runs every job that is due. Without cron, visits run the light jobs after the page is sent.
• One run at a time: cron and a visit never run the same job twice.
• A job that fails three times in a row is recorded as an event, and again when it works.
• The installer now shows the cron line on its last screen.

Events and alert e-mails

One record of what happened: enquiries received, pages and the look published, backups made or failed, updates installed or undone, mail and webhooks that could not be delivered, a 404 address requested often, failing jobs, blocked addresses. Events carry ids and counts, never the sender of an enquiry. They are kept for 180 days.

Alert e-mails (System status → Alerts): warnings and errors go to the site e-mail, or to an address you choose. At most one e-mail an hour, with everything since the last one.

Updates that undo themselves

After an update the site asks itself whether the new version runs: a one-time check address must answer with the new version, and the home page and the administration must not end with a server error. If they do, the previous files come back right away and the event update.rolled_back is recorded, so the alert e-mail tells you. An update is never undone without a clear server error – a site that cannot reach itself keeps the new version.

Firewall

Settings → Firewall (off until you switch it on) guards the public site and the Claude connection – never the administration, so you cannot lock yourself out.

• Block addresses and networks, one per line (203.0.113.7, 198.51.100.0/24).
• Block countries – behind Cloudflare, or when the hosting sends the country.
• Limit requests per minute from one address. The Claude connection is not limited.
• Block for 24 hours an address that asks five times in an hour for addresses of other systems that do not exist here (/wp-login.php, /.env, /xmlrpc.php…). Missing images and old links of a moved site never count.
• The last refused requests, and the blocked addresses with an Unblock button.

Domain, certificate and mail records

Once a day the site checks the SPF, DMARC and DKIM records of the domain it sends mail from, with the exact record to add when one is missing, the days left on the HTTPS certificate, and when the domain registration expires. The results are in System status and in the site audit before handing over; Check now runs the check at once.

Accounts and Claude connections

System status has a new group Accounts and access: administrators without two-step sign-in, accounts not used for 90 days, Claude connections not used for 60 days, and connections without an expiry.

• Settings → General → Suspend automatically (off by default): block unused accounts, revoke unused Claude connections, or both. Every suspension is in the change log, and one click in Users reactivates an account.
• Users shows the Claude connections of each person, and an administrator can revoke one.
• New personal tokens in My account get a validity – 30 or 90 days, a year (default) or no expiry. Existing tokens keep working.

Speed

• Real-user speed in Statistics: LCP, CLS and INP from the browsers of real visitors, per page, as the 75th percentile with Google's rating. No cookies, no identifiers, only while statistics are on, never for signed-in users. The site audit flags a page whose loading got more than a quarter slower than in the previous 30 days.
• Custom fonts of the site are preloaded, so text appears in the right font sooner.

Claude

• get_health – the state of the site in one read: problems, background jobs, cron, the last backup and recent warnings.
• list_events – the events since the last time Claude looked, with a cursor and filters by type and severity.
• get_stats carries web_vitals; site_audit has the kinds speed and the new items before handing over.

Updating

Update from Settings → Backups and updates. It works from every earlier release. This release adds five tables (events, jobs, two for the firewall, real-user speed) and two columns to the accounts; the update creates them.