xCloud Changelog

🔥 New Features

🌟 Cloudflare WAF Rules Integration

Cloudflare WAF rule management is now available directly inside xCloud. You can apply common WordPress security protections without creating manual rules in the Cloudflare dashboard.

• Cloudflare WAF Security Settings – Configure essential WordPress protection rules directly from the xCloud dashboard.
• Allow Good Bots & ACME Validation – Ensures trusted crawlers and Let’s Encrypt validation requests continue to function normally.
• Sensitive File Protection – Blocks direct access to files that should not be publicly exposed.
• wp-config.php Protection – Prevents direct access to the WordPress configuration file.
• XML-RPC Blocking – Reduces exposure to XML-RPC abuse and brute-force attacks.
• Author Enumeration Protection – Blocks requests attempting to discover WordPress usernames.

Each rule is applied as a Cloudflare WAF custom rule via API and managed per site directly from xCloud.

🔄 New: Easy WordPress Rollback with Backup

You can now roll back plugins, themes, or WordPress core in a few clicks. Just pick a version from a searchable list and revert instantly. You can also enable automatic backups before rollback.

⚙️ New: Auto-Tune PHP, FPM & OPcache

Added auto-tunes for  PHP, FPM, and OPcache settings based on your server RAM. It suggests optimized values instantly and lets you manage full OPcache configuration. Works seamlessly with both Nginx and OpenLiteSpeed.

🛑 New: Shutdown Server (Vultr Providers)

You can now shut down your server directly from xCloud. It works with Vultr-based providers and safely powers off your server with a confirmation step. Perfect for maintenance or saving costs.

✨Improvements

• Improved access log view with search, filters, and bot traffic insights
• Better default OPcache settings applied during PHP installation
• Improved disk usage with clearer stats such as total, used, and free space
• Refreshed support portal design with better visibility and layout
• Improved site controls with “Enable Site” action and quick recovery option
• General UI improvements for spacing, colors, and responsiveness

✨Bug Fixes

• Reduced false alerts from PageSpeed errors caused by external issues
• Improved retry handling for PageSpeed connection failures
• Fixed incorrect sorting and pagination issues in Site Insights
• Resolved Site Pro deployment-related errors
• Fixed Slack notification issue in vulnerability alerts
• Fixed duplicate DNS record issue in Cloudflare sync

🔥 New Features

Addon

🌟Mail Delivery Enhancements

Transactional emails are essential for WordPress websites. When an email quota runs out unnoticed, emails can suddenly stop sending. This update introduces smarter Mail Delivery subscription management with Auto Upgrade and 1-click Cloudflare DNS setup to keep email delivery uninterrupted.

• Auto Upgrade Mail Delivery: Automatically upgrades your email plan when usage reaches the limit. xCloud will notify you when your email usage reaches 90% of your available quota. This ensures transactional emails continue sending without disruption.

• Cloudflare One-Click DNS Verification — If your domain uses Cloudflare integration, xCloud can automatically add and verify the required DNS records with a single click, eliminating manual DNS configuration.

• Default Mail Delivery Provider — Set a default provider so newly created sites automatically use your preferred email delivery configuration.

• Email Usage Visibility — View total email quota and available emails directly from the dashboard for better monitoring and planning.
• Built-in SMTP Configuration — Access SMTP credentials including username, password, SMTP server, and port directly from the dashboard.
• API Key Access — Manage API keys for custom integrations or external applications.
• Clone Mail Delivery Settings — When cloning a site, the Mail Delivery configuration is automatically copied so the cloned site inherits the same email setup.

🌟Multi-Port Domain Mapping for Docker Compose Sites

Custom Docker Compose sites can now map multiple domains to different container ports. Perfect for running multiple services under separate domains from a single site.

🌟  PHP 8.5 Support for OpenLiteSpeed

PHP 8.5 is now available for OpenLiteSpeed servers on Ubuntu 24. All PHP extensions are now consistently available across all PHP versions.

🌟GridPane OpenLiteSpeed Server Migration

Migrate your servers from GridPane’s OpenLiteSpeed stack to xCloud. The migration wizard handles the full transfer including sites, databases, and configurations.

✨Improvements

• Optimized server provisioning by deferring non-essential packages during setup.

✨Bug Fixes

• Fixed WordPress Bulk Management issue where the Refresh All button failed when groups were collapsed or expanded.
• Fixed dropdown menus being cut off on Mail Delivery, Mailbox, and Security addon pages.
• Fixed SSH Key Editor showing system and migration keys in the sudo user SSH key selector.
• Fixed site cloning error that occurred when the PHP version was not set.
• Fixed PageSpeed Insights temporary network errors triggering false error reports.

🔥 New Features

WordPress

🌟 Site Insights – PHP, MySQL & Traffic Analytics

A brand-new Site Insights menu providing real-time analytics for PHP performance, MySQL queries, and traffic patterns directly from the site dashboard. Gives site owners deep visibility into their application performance without needing external tools.

• Real-Time Performance Monitoring — Track live activity across PHP processes, MySQL queries, and website traffic directly from the xCloud dashboard.

• Traffic & Visitor Insights — Analyze requests, unique IPs, bots, bandwidth usage, and top URLs to understand how users and crawlers interact with your site.

• PHP Process Visibility — Monitor active PHP-FPM processes, detect CPU or memory-heavy scripts, and identify slow pages using PHP slow logs.

• MySQL Database Analytics — View active connections, running queries, query performance, slow query logs, and database health metrics.

• Faster Troubleshooting & Optimization — Detect slow pages, database bottlenecks, traffic spikes, and server errors quickly to keep your website fast and stable.

🌟 OpenClaw – Codex OAuth Token Generator & New Provider Support

In-app OpenAI Codex OAuth token generator — ChatGPT Plus/Pro subscribers can now generate Codex OAuth tokens directly within xCloud, without needing an external service. A secure PKCE-based flow authenticates with your ChatGPT account and returns a copyable token with next-step instructions. Manual callback fallback included for browsers that block automatic redirects.

• OpenAI Codex (ChatGPT OAuth) — Connect your ChatGPT Plus/Pro subscription as an AI provider for your OpenClaw server without a separate API key
• Z.AI (GLM) — Zhipu AI’s GLM-4.7 model is now a fully active provider option (previously “coming soon”), offering a capable, cost-effective alternative for OpenClaw users
• Gateway mode fix — gateway.mode is now correctly set to local during new OpenClaw server creation, preventing gateway start failures on first setup
• Model persistence fix — Selected AI model now correctly persists after provider updates, written directly to openclaw.json so it survives gateway restarts

🌟 xCloud UI 2.0 – Pin/Unpin Sites & Servers

Pin important sites and servers to keep them at the top of all list views. Pinned items show a visual badge and persist across sorting, filtering, and pagination.

🌟 Cloudways Server Migration

Easily migrate your existing servers from Cloudways to xCloud with full server migration support, helping you move infrastructure smoothly without complex manual setup.

🌟 Vultr Bandwidth Monitoring

Monitor bandwidth usage for xCloud-managed Vultr servers directly from the dashboard, giving you clear visibility into network consumption and server traffic.

✨Improvements

• Better Cloudflare DNS proxy mode detection
• Enforced 4GB minimum RAM for n8n site creation and updates
• Performance score now supports a neutral state when data is unavailable
• Improved backup status logic in the auto backup tab
• Added server name and link on the delete progress page
• Hidden phpMyAdmin sites from site lists and navigation
• High CPU warning banner added on dashboard and server detail pages
• Improved OpenLiteSpeed PHP monitoring and validation
• Better handling for empty site titles during staging domain generation
• Added nginx config safety validation before reload commands
• Multiple UI/UX refinements across layouts, spacing, responsiveness, banners, and dashboard elements

✨Bug Fixes

• Fixed null reference issue in cron jobs after site deletion
• Fixed server creation failure without provider permission
• Fixed handling for Cloudflare cache rule limit exceeded errors
• Fixed null PHP version issue during PHP installation
• Fixed undefined stack issue in custom provider server creation
• Fixed missing pCloud backup file record issue
• Fixed MariaDB icon showing when no database is installed
• Fixed staging domain generation when site title is empty
• Fixed cloud provider permission bypass caused by improper null check

🔥 New Features

🦀 OpenClaw

🌟 OpenClaw Repair: AI-Powered OpenClaw Repair Agent is now available inside the xCloud dashboard for instant diagnosis and recovery. Run one-click AI-assisted health checks for the gateway – no SSH or manual debugging required.

✨ Improvements

📌Added temporary sudo users with 12-hour auto-expiration.
📌Added granular domain search & replace controls for updates and SSL changes.
📌Improved domain updates with real-time progress and duplicate prevention.
📌Improved UI consistency across buttons, layouts, and mobile views.
📌Improved OpenClaw Control UI domain and alias access handling.

🔧 Issues and Bug Fixes

📌Fixed Free Plan billing for Custom/Any, DigitalOcean, and GCP providers.
📌Fixed WordPress version display after core updates.
📌Fixed 502 errors on the Site Snapshots page.
📌Fixed an issue related to the Site Log export failures.
📌Fixed staging push issues with Patchstack.
📌Fixed resource creation restrictions on inactive packages.
📌Fixed OpenClaw server page crashes.

🔖 Resources

How to Repair OpenClaw with an AI-Powered Agent With xCloud (OpenClaw Troubleshooting)

🔥 New Features

🌟 Update: OpenClaw Reset (No new server needed): You can now reinstall OpenClaw from scratch on the same server using OpenClaw Reset. With one click, it creates a backup, reinstalls a clean setup, and generates fresh credentials.

✨ Improvements

• WireGuard updates now run async — no more timeouts during bulk updates
• n8n now requires Node.js 22 (upstream requirement)
• SSH password auth blocked for root on OpenClaw servers — prevents accidental lockout
• PHP Config modal now fully responsive on mobile
• Shorter SSH key display on the “Connect Existing Server” page
• Billing Type Selector & Free Plan — Server creation now supports subscription, lifetime, or free plans. Free plan users get a streamlined flow.
• Site Name Sorting — All Sites page now has clickable A-Z sort on the Site Name column.

🔧 Issues and Bug Fixes

• Fixed the pCloud backup deletion crash issue
• Fixed the issue with Server deletion, and now it no longer gets stuck in the deletion_failed state
• Site sorting across multiple servers now works correctly
• Telegram bot /authenticate handles malformed input gracefully
• GitHub repo count no longer caps at 100
• Items Per Page selector fixed on Events and other tables
• Cookie banner no longer appears on error pages (404, 500, etc.)