Falak changelog

v0.8.0: Falak

Tue, 06 Oct 2026 12:00:00 GMT

The product has a new name — Falak (falak.sh) — renamed from its working title with no automatic migration from earlier installs, which simply reinstall. - Renamed from its working title to Falak (falak.sh): binaries `falak`, `falak-agent`, `falak-ctl`, `FALAK_*` env vars, `/opt/falak`, images `ghcr.io/othmanhaba/falak-*`. - Falak Cloud, a hosted control plane, at https://cloud.falak.sh. - Operator-owned extra sites on the control-plane host from `/opt/falak/edge`, mounted read-only and imported after the generated sites. - The installer moves to `https://falak.sh/install.sh`. - APM for Laravel supports Laravel 12 and 13; Laravel 11 is dropped (out of security support).

v0.7.1: Redis, reachable

Mon, 05 Oct 2026 12:00:00 GMT

A Redis or Valkey instance is now reachable from containers on its own server and from other servers over a private network, and a Compose stack’s `redis` or `valkey` service can become a managed instance. - Network access for Redis and Valkey: containers over the Docker bridge, other servers of the environment over a private network (WireGuard, then the provider’s), never public. - A Compose stack’s `redis` or `valkey` service can run as a managed Redis/Valkey instance, with its references rewritten automatically. - The Redis panel shows who can connect and from where, with the reason when a site can’t. - Instances come back up on their Docker or WireGuard address after a reboot instead of racing those services at boot.

v0.7.0: Redis and Valkey

Sat, 03 Oct 2026 12:00:00 GMT

Create isolated Redis or Valkey instances next to your PostgreSQL, MySQL and MariaDB databases, connect with `REDIS_*` variables, and tune memory, eviction and persistence from the panel. - Redis and Valkey as database engines: one instance per service, with its own port, password, memory limit, eviction policy and persistence. - Rotate an instance’s password and switch its persistence mode without losing data. - A stock Redis the server already runs is left untouched — Falak’s instances can’t read or overwrite it, and it can’t touch theirs.

v0.6.0: Machine check

Sat, 03 Oct 2026 12:00:00 GMT

Before provisioning a server, Falak now checks what’s already installed — Docker, nginx, a vendor PostgreSQL — and reuses, completes or stops with a fix instead of overwriting it. - Machine check runs after the agent enrolls and on every Re-provision; it only reads the machine until provisioning starts. - Needs attention status and a Machine check panel on the server page, with Re-check and Provision actions. - Falak never replaces or removes software it didn’t install.

v0.5.2: Smoother reinstalls

Fri, 02 Oct 2026 12:00:00 GMT

Reinstalling a server replaces its agent identity cleanly, the installer runs preflight checks first, and provisioning recovers from a broken apt/PPA or a missing PHP package. - Installer preflight: checks the OS, that the panel and agent API are reachable, and the clock, before replacing an earlier install. - Reinstalling a server replaces its agent identity instead of keeping the deleted server’s. - Provisioning recovers from a PPA without a release and falls back to the distribution’s PHP. - Private IPv4 is read from real interfaces only (the default route’s first).

v0.5.1: Compose services, in order

Fri, 02 Oct 2026 12:00:00 GMT

Split a Compose service out into its own site at creation time, and Falak deploys everything in the order it needs. - Split a Compose service out into its own site at creation, not just after the fact. - Automatic deploy order: split-out sites bootstrap before the stack that depends on them. - Split-out sites inherit their env file’s keys, and database names are freed once they’re no longer used.

v0.5.0: Compose apps from a repository

Fri, 02 Oct 2026 12:00:00 GMT

Deploy a Compose stack straight from your repository — several files, profiles, per-service choices — with edge routing for every public service and a built-in image registry. - Docker Compose apps from a git repository: several files, profiles, include/extends, and Falak-specific adjustments. - Run a Compose service as its own Falak site or as a Falak database, with its own domains and health checks. - Built-in image registry for production installs, with weekly garbage collection. - Edge routing — domains, Cloudflare rules, health checks — for every public Compose service. - Containers can reach database engines on the same server over the Docker bridge.

v0.4.4: Go, multi-file functions, and cleanup

Thu, 01 Oct 2026 12:00:00 GMT

Functions can span several files and run on Go, telemetry never leaks secrets in URLs, and a batch of housekeeping fixes landed alongside. - Go runtime for functions (`net/http` Handler, Scheduled, static builds) with 10 starters. - Multi-file functions: a file tree and per-file diffs. - Function telemetry never includes secrets in URLs, across every runtime. - `FALAK_REGISTRATION=open|invite|closed` restricts sign-up; invite-only requires the invitation link. - `falak-ctl` removes old images after a successful update (`prune-images` command).

v0.4.3: Lock down and test your functions

Thu, 01 Oct 2026 12:00:00 GMT

Restrict who can call a function, mount it at a path on another site, send it a test request, and manage it all from the `falak fn` CLI. - Access control for functions: API keys and IP allowlists. - Mount a function at a path on another site (edge mounts). - Test request panel, and observability charts. - `falak fn` CLI: list, pull, deploy, versions, rollback, run, logs, invoke.

v0.4.2: More languages for Functions

Thu, 01 Oct 2026 12:00:00 GMT

Write functions in Node.js, Deno or Python, not just Bun, each with 10 ready-to-use starters. - Node.js 24, Deno 2 and Python (ASGI, uv) runtimes for functions. - 10 starters per language; the TypeScript ones are shared across Bun, Node and Deno. - A shared tracer, entry loader and scheduled runner behind every JavaScript runtime.

v0.4.1: Functions on a schedule

Thu, 01 Oct 2026 12:00:00 GMT

Give a function a cron schedule, trigger a run on demand, and see its run history — including the runs it missed. - Schedules (cron) for functions, with Run now and run history. - Missed-run detection, and an Insights issue that names the schedule when a run fails. - A run that hits its timeout exits cleanly and keeps its logs.

v0.4.0: Cloud Functions

Thu, 01 Oct 2026 12:00:00 GMT

Write a function in Falak’s own editor and deploy it in seconds — Bun + Hono to start, scaling to zero between requests with built-in observability. - Functions: write code in the browser, deploy in seconds, no repository or Dockerfile. - Bun + Hono runtime with scale to zero, versions and rollback. - Built-in observability: request spans, exceptions, outgoing fetches, cold starts, live status.

v0.3.2: Cache, purge, lock down

Wed, 30 Sep 2026 12:00:00 GMT

Set cache behavior per domain, purge automatically after each deploy, flip on Under Attack mode, and lock your origin down to Cloudflare or a tunnel. - Cache modes per domain, with an automatic purge after every deploy. - Under Attack mode and origin lock-down (Cloudflare-only, or closed behind a tunnel) from the panel. - Lock-down holds against all-port firewall rules and port ranges; a lost tunnel is detected.

v0.3.1: No open ports, just a tunnel

Wed, 30 Sep 2026 12:00:00 GMT

Route a server’s traffic through Cloudflare Tunnel instead of opening inbound ports — Falak installs and runs `cloudflared` for you. - Cloudflare Tunnel as a server’s ingress: `cloudflared` installed and managed by Falak. - Domains route through the tunnel once it’s up; no open inbound ports needed. - DNS only moves to the tunnel after `cloudflared` is confirmed running.

v0.3.0: Cloudflare, connected

Wed, 30 Sep 2026 12:00:00 GMT

Connect a Cloudflare token and Falak keeps DNS in sync with your services automatically, issues certificates through the proxy, and sees visitors’ real IPs. - Connect a Cloudflare API token; Falak finds your managed zones. - DNS records created, updated and removed automatically for Falak’s own services, with names generated under your zone. - HTTP-01 certificates behind Cloudflare’s proxy (orange cloud) — no DNS plugin needed on servers. - Real visitor IPs are trusted only from Cloudflare’s published ranges.

v0.2.8: Update your fleet, one click

Tue, 29 Sep 2026 12:00:00 GMT

Update agents across selected servers or the whole fleet from the Servers list, and pick from 14 more one-click templates. - Update one agent, a selection, or every server’s agent from the Servers list. - 14 new templates: Ollama + Open WebUI, Langflow, Qdrant, changedetection.io, ntfy, Nextcloud, Paperless-ngx, BookStack, Wiki.js, Forgejo, code-server, Excalidraw, Adminer, Matomo. - Selecting every updatable server sends one request instead of one per server. - Update buttons show a loading state and ignore double clicks.

v0.2.7: Ports of their own

Tue, 29 Sep 2026 12:00:00 GMT

Each site gets its own container port independent of the host port, so several sites can share a server, and the `falak` CLI installs in one line. - Container port decoupled from the host port: several sites can use the same port internally on one server. - One-line install for the `falak` CLI on developer machines. - A changed host port redeploys the site instead of leaving the old port live. - Deleting a site stops its containers (and Compose project) instead of leaving them running.

v0.2.6: Domains that just work

Mon, 28 Sep 2026 12:00:00 GMT

Every new service gets a working HTTPS address instantly, and custom domains tell you exactly which DNS records to add. - Generated domains: `..sslip.io` with a Let’s Encrypt certificate and no DNS setup. nip.io or off per organization. - Custom domains show the A/AAAA records to add and check DNS live until the name points at your server. Cloudflare proxying is detected. - Networking → Check DNS & TLS: records, a live check and the certificate actually served. - Commands in flight survive agent restarts: desired-state commands are redelivered, one-shot steps fail with a clear message. - `falak-ctl` detects changed config files through the container’s mount namespace and recreates exactly those services.

v0.2.5: Network logs and fleet upgrades

Mon, 28 Sep 2026 12:00:00 GMT

Access logs per deployment, one-click agent upgrades across the fleet, and tighter release permissions. - Network Logs: every request your edge served, per release, with status and path filters. - Upgrade one agent or all of them from the panel, in batches, verified by checksum, with automatic stop on the first failure. - Laravel web logs reach Loki with site attribution (multi-line stack traces merged). - Builders send run ids and heartbeats, so a restarted builder never leaves a deploy hanging. - Release directories are closed to other local users (0750 plus an ACL for the web server).

v0.2.4: A calmer, faster canvas

Mon, 28 Sep 2026 12:00:00 GMT

Stacked floating panels with motion, deployment cards with logs, and groups, volumes and references on the canvas. - Canvas groups: frame related services, collapse them, move them as one. - Volume strips under services with persistent storage, and dashed edges for variable references and depends_on. - Deployment cards with the live release, failures and history; a stacked logs panel with build, deploy and network logs. - Projects dashboard with starred projects, previews and health per environment.

v0.2.3: Hardened on real servers

Mon, 28 Sep 2026 12:00:00 GMT

Fixes from deploying real apps on AWS: static sites, remote databases, multi-server health checks and more. - Static sites get a 404 page or an SPA fallback instead of bare 404s, served from the release root. - Remote database access over the private network. - pnpm and yarn builds, build-time variables and custom build commands. - Multi-server health checks and cloud public IP detection.

v0.2.2: Fast panel under load

Mon, 28 Sep 2026 12:00:00 GMT

The panel now runs in FrankenPHP worker mode and agents long-poll their own service, so pages stay fast however many servers you add. - Panel pages answer in 2.7–23 ms (median TTFB) with 50 agents connected (previously they queued for seconds behind long-polls). - A separate agent-api service for agents, installer and builders, with its own thread pool. - `falak-ctl status` and `doctor` show PHP thread usage and flag saturated pools. - GitHub App manifest conversion error handling.

v0.2.1: One-click GitHub

Mon, 28 Sep 2026 12:00:00 GMT

Connect GitHub in one click with a private GitHub App: read-only access, no deploy keys, short-lived tokens per build. - GitHub App via the manifest flow, registered on your account or organization. - One app-level webhook for push-to-deploy; installation tokens minted per build and never stored.

v0.2.0: Compose, templates and Octane

Mon, 28 Sep 2026 12:00:00 GMT

Docker Compose deploys, a catalog of 18 one-click apps, Octane routing and smarter multi-server deploys. - Docker Compose sites from your repo or stored in Falak with history; images pinned by digest for exact rollbacks. - Templates: n8n, Plausible, Umami, Ghost, WordPress, MinIO, Metabase and more, plus your own custom templates. - Laravel Octane (FrankenPHP, Swoole, RoadRunner) with stable per-site ports and zero failed requests on redeploy. - Deploys wait for servers that are still provisioning instead of failing. - Runtime download mirrors for FrankenPHP, Node, Bun and Deno.

v0.1.0: First release

Sun, 27 Sep 2026 12:00:00 GMT

The production installer, the Railway-style UI and everything underneath: servers, sites, deploys, databases and observability. - One-command production install (Docker Compose, Let’s Encrypt) and `falak-ctl` for status, updates with rollback, backup and restore. - Project canvas with environments, services, a create picker, service panels and deploy views. - Infrastructure: server fleet, add-server flow, metrics, processes, firewall, network, terminal, SSH keys, recipes. - Observability: issues, traces, logs, heartbeats, alerts and a notification center.