NewImprovedFixedSecurity

v2.8.6

xCloud v2.8.6 introduces backup and restore for Docker applications, a team Wallet for account credits, and read-only billing access through the xCloud Public API. This release also encrypts site environment scripts at rest, improves white-label signup, extends Mail Delivery beyond WordPress, and resolves several billing and server provisioning failures.

Release at a Glance

  • 3 major new features
  • 14 customer-facing improvements
  • 4 bug fixes
  • 18 total improvements and fixes

πŸ”₯ New Features

Back Up and Restore Docker Applications

Docker applications now have a dedicated backup and restore experience. Whether the site was created from a OneClick template, Docker Compose, a Git repository or a Dockerfile, you can protect both the application data and the configuration needed to recreate it.

  • Create backups on demand, or schedule them daily, weekly or monthly.
  • Set retention preferences per site.
  • Store backups locally, or with a configured S3-compatible or SFTP provider.
  • Preview a backup before restoring it.
  • Restore named volumes, bind-mounted data, Docker Compose configuration and environment settings.
  • Manage Docker backups through the xCloud Public API β€” list, inspect, create, configure and delete.

To keep data consistent, xCloud briefly stops the application while it captures the local snapshot, then brings the app back online before uploading. The interruption is limited to the time needed to copy the application data, not the full upload.

A New Wallet for Team Credits

Account credits now live in one clear, auditable place. Credit is applied automatically before a card payment, so only the remaining invoice amount is charged β€” and if the Wallet covers the invoice in full, no card payment is needed.

  • View your current balance and full credit history from the new Wallet page.
  • Manage eligible credits created after deleting a paid service.
  • Submit a claimable-credit request instead of receiving service-deletion credit automatically, and follow its status with a unique CCR-XXXXXX reference.
  • For eligible self-managed servers deleted within 14 days of creation, the full paid amount can be returned as xCloud credit.

The Wallet is not shown on white-label accounts, where billing is handled by the reseller.

Read-Only Billing Access through the Public API

Teams can now retrieve billing information programmatically with the new read:billing permission, for reporting, dashboards and internal automation.

  • Current plan and billing overview.
  • Bills and individual bill details.
  • Invoices and invoice details.
  • Packages and products.
  • Active subscriptions.
  • Masked payment-method information.

These endpoints are read-only. Payments and checkout actions stay inside xCloud, so no integration can move money or read full card details.

πŸ” Security and Access

  • Site environment script content is now encrypted at rest, protecting database passwords, application keys and API credentials held in the platform database.
  • The transition supports both existing and newly encrypted records, with safeguards that prevent unreadable encrypted content from being written back to a site’s environment file.
  • Billing API access is permission-based and read-only; payment and checkout actions remain unavailable to integrations.
  • Payment-method information returned by the API is masked.

✨ Improvements

A Better White-Label Signup Experience

  • Visitors can choose from the reseller’s available server plans while creating their account, shortening the path from signup to purchase.
  • The server creation screen now identifies plans that have already been purchased.
  • Clearer Deploy and Pay & Deploy actions on the server creation screen.
  • A confirmation step helps prevent unintended extra charges when switching away from a purchased plan.

Mail Delivery for More Site Types

  • Provider and custom-domain settings now work reliably on Joomla, Laravel and custom applications, not only WordPress.
  • Improved error handling during provider setup.
  • WordPress-specific commands are no longer run against non-WordPress sites.

More Reliable Server Provisioning and Maintenance

  • Leaseweb warm-pool assignment retries are now delayed and limited instead of repeating indefinitely.
  • Vultr rebuilds wait for temporary instance locks to clear before failing.
  • Partial nginx.org upgrades recover more reliably and no longer risk looping indefinitely.
  • Public catalog data falls back to current Vultr plan specifications when needed.

Billing and Reporting

  • More consistent handling of queued invoice consolidation.
  • Clearer suspension notes generated from billing reports.
  • Docker backup operations are available through the Public API alongside the existing site and server endpoints.

πŸ› Bug Fixes

  • Fixed duplicate environment-script records created during repeated saves.
  • Fixed Leaseweb warm-pool assignment retrying indefinitely when no instance was available.
  • Fixed Vultr rebuilds failing outright when the instance was temporarily locked.
  • Fixed partial nginx.org upgrades being left in a looping state instead of recovering.