myron
fe2d3d457c
Add account edit modal — package, PHP version, email
...
- New accounts/update endpoint: updates package_id, php_version, email,
and notes; switches PHP-FPM pool when version changes
- Edit button on each account row opens pre-populated modal
- Modal shows email, package dropdown, PHP version selector; domain
is read-only with tooltip explaining it can't change
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-06-08 20:39:54 +00:00
myron
2ab74b7569
feat( #25 ): email notifications via CyberMail
...
- Notifier.php: CyberMail API sender with 4 trigger types (account
created, suspended, disk quota warning, SSL expiry)
- Reads cybermail_api_key / notify_from_* / notify_admin_email from
settings table
- accounts.php: fires Notifier on create (welcome + admin alert) and
suspend (user + admin alert)
- system.php: notify-settings GET, save-notify-settings POST,
test-notify POST (with API key masking)
- bin/notify-checks.php: daily cron for disk ≥85% and SSL ≤14 days
(flag-based dedup in settings table)
- admin panel: Notifications page with form + trigger reference table;
sidebar link added
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-06-08 04:12:47 +00:00
myron
dbc5a01de9
Fix #4-#8: mail virtual domains, DNS verified, reseller isolation, missing DB tables
...
#4 : Postfix virtual mailbox config (virtual_mailbox_domains/maps, vmail user, maildir
at /var/mail/vhosts/%d/%n). Dovecot SQL backend pointed at novacpx.email_accounts
with SHA512-CRYPT passdb and per-domain Maildir userdb.
#5 : BIND9 confirmed working — dig @localhost resolves testdomain1.com correctly.
#6 : Certbot 2.9.0 confirmed installed; domains.document_root wired; infrastructure
ready for live domain issuance (testdomain1.com not publicly resolvable so
dry-run expected to fail).
#7 : Fixed all broken user-panel API queries — missing tables (databases, ftp_accounts,
ssl_certs, cron_jobs, php_configs, notifications) created; `databases` reserved-word
backtick-quoted across DatabaseManager+endpoints; domains.php is_primary→type=main,
doc_root→document_root column fixes; DNSManager::createZone call signature fixed;
stats/account auto-resolves account_id for user role.
#8 : assert_account_access() helper added to api/index.php; reseller ownership check
wired into email, ftp, databases, domains, dns, ssl endpoints.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-06-08 03:31:30 +00:00
myron
6fdccc6dbd
feat: items #9-13 — password change, webmail SSO, DKIM live, file manager security, cache busting
...
#9 auth.php: add self-service change-password action (current+new+confirm)
accounts.php: fix admin change-password — accept account_id, fetch username
for chpasswd (was using int ID), add Auth::require('admin') guard
user.js: add Change Password page + navItem + submitChangePassword()
#10 EmailManager: store AES-256-CBC enc_password alongside SHA512-CRYPT hash
webmail.php: rewrite login-url to use webmail_sso_tokens table
novacpx-sso.php: Roundcube SSO bridge (validate token, decrypt, autosubmit)
Migration 005: add enc_password column + webmail_sso_tokens table
#11 opendkim: installed, configured (/etc/opendkim.conf, signing.table,
key.table, trusted.hosts), socket at /var/spool/postfix/opendkim/,
Postfix milter wired, service enabled+running, key generation verified
#12 files.php: fix safe_path() for non-existent paths (write/mkdir),
add safe_path_new() helper using parent-dir realpath check,
fix delete guard (block deleting account root dirs),
fix rename destination, clamp chmod to 0777
#13 nova.js: api() handles network errors, 429 rate-limit with retry-after,
non-JSON responses (PHP fatal pages) — graceful error instead of throw
admin/user/reseller index.php: filemtime-based cache-busting on all assets
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-06-08 01:19:33 +00:00
myron
e3b166803a
Add full API endpoint suite, lib managers, webmail (Roundcube :8883), and NovaCPX icon/branding assets
...
- 14 API endpoints: accounts, packages, domains, dns, email, databases, ftp, ssl, cron, php, files, stats, webmail, server_setup
- 8 lib managers: AccountManager, VhostManager, DNSManager, EmailManager, DatabaseManager, PHPManager, FTPManager, SSLManager
- Roundcube webmail on dedicated port 8883 (sequenced after 8880/8881/8882)
- Custom NovaCPX SVG icon sprite (30+ unique icons), logo, mark, favicon
- PORT_WEBMAIL=8883 wired into Core.php, install.sh, UFW, Fail2Ban, credentials file
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-06-07 05:50:50 +00:00
myron