What shipped, week by week.
Visible changes, infrastructure work, security updates. We post here as soon as it lands in production.
- featurev1.7.0 — sites without domains, magic-link wp-admin, Magento installs
New: provision a site without specifying a domain — a default URL like red-falcon-7392.cubitrace.app is minted automatically. New: one-click WordPress admin login (magic-link, 5-min TTL, single-use). New: Magento auto-mint (8-minute install pipeline, no DNS required for evaluation). New: attach a custom domain with DNS pre-check then promote it to primary as an explicit two-step flow. The default URL keeps working forever as a 301 to your primary.
- featureMulti-provider catalog (AWS + GCP)
Dashboard now supports provisioning sites on AWS and GCP regions alongside Hetzner. Catalog is region-aware; pricing remains flat.
- securityInternal-auth namespace token-gated
/_internal/auth/* endpoints now strictly require the internal token, with localhost dev paths whitelisted via env flag.
- featureSettings → Security: change password from the dashboard
Self-service password change UI with Go endpoint, fully audit-logged.
- infraHTTP/3 on by default across edge fleet
UDP/443 opened in UFW + Hetzner Cloud Firewall. Caddy advertises Alt-Svc; new domains pick it up automatically.
- fixMagento reindexer worker isolation
Catalog reindex no longer steals CPU from the storefront. Each consumer runs on a dedicated systemd slice.
- featureBulk site import for agencies
Agency Partners can now upload a CSV (or piped JSON via the CLI) to import dozens of sites in a single batch.