All releases of LiteSoup. The project follows SemVer.

v0.10.1 — harden-ssh health check + NodeSource GPG fix

2026-07-18

  • Post-reload health check — harden-ssh.sh verifies sshd is listening after reload; auto-rollback on failure prevents permanent lockout
  • SSH hardening moved to post-install — harden-ssh.sh is no longer called during install-stack.sh; run manually when ready
  • NodeSource GPG key fixed — stage 10 uses the official setup script for Node.js 22.x, works on Ubuntu 24.04

v0.10.0 — litesoup SSH user + backup stagger/timeout

2026-07-15

  • litesoup operator user — replaces direct root SSH via harden/harden-user.sh with SSH key, passwordless sudo, optional root lock
  • Backup stagger runner — backup/backup-stagger.sh prevents thundering herd across multi-site backups with configurable delay
  • Backup concurrency protection — flock lock + per-step timeout prevents duplicate/hung backups
  • install-stack.sh --ssh-key=... provisions SSH key during install

v0.9.2 — Landing page for default vhost

2026-07-15

  • LiteSoup landing page replaces Apache default page for direct IP access
  • Shows LiteSoup icon, tagline, buttons, GitHub link, credits

v0.9.1 — Bug fixes from TSTT Laravel deployment

2026-07-15

  • Fixed missing default vhost — 000-default.conf returning 404 for IP access
  • Fixed --git-repo timeout — shallow clone + 120s timeout
  • Fixed PHP-FPM pool exhaustion — default tier changed from small to medium
  • Fixed VHOST_DOCROOT unbound error in site-set-tls and site-set-php
  • Fixed repo_root unbound error with --skip-hardening

v0.9.0 — Backup system + scheduling

2026-07-14

  • Per-site backup system: files + DB snapshots, local + S3-compatible storage
  • Restore from any backup timestamp
  • Scheduling via systemd timers (daily, weekly, custom)
  • Email + syslog notification on backup failure

v0.8.3

2026-07-14

  • Fixed SSH lockout on fresh Ubuntu 24.04 VPS with non-standard SSH ports via sshd_config.d/ drop-ins

v0.8.2

2026-07-13

  • Fixed per-user PHP-FPM pools — created for every installed PHP version
  • Fixed Apache .well-known/acme-challenge directory permissions

v0.8.1 — CLI dispatcher architecture

2026-05-14

  • New litesoup CLI dispatcher — single entry point for all commands
  • install-stack.sh now installs itself to /usr/lib/litesoup/
  • Subcommands: stack, site, backup, harden, audit

v0.7.1 — harden-ssh safer defaults

2026-05-03

  • SSH password auth stays enabled by default (opt-in to disable)

v0.7.0 — Wave 2: harden-ssh + harden-apache + harden-php

2026-05-03

  • Per-service hardening for sshd, Apache, and PHP (global ini level)
  • Wired into install-stack.sh as optional stages (skipped with --skip-hardening)

v0.6.0 — Wave 1: harden/ + audit/ packages

2026-05-03

  • New harden/ and audit/ script packages
  • SSH hardening, kernel sysctl hardening, Apache/NGINX config audit

View all releases on GitHub