amneziavpnphp/CHANGELOG.md

Changelog

All notable changes to Amnezia VPN Web Panel will be documented in this file.

[1.1.0] - 2025-11-06

Added

• Traffic Statistics Tracking

  • Real-time bandwidth monitoring (upload/download)
  • Last handshake tracking
  • Online/offline status detection
  • Formatted stats display (B, KB, MB, GB, TB)
  • Manual sync stats button on server and client pages
  • Batch stats sync for all clients on server

• Client Access Control

  • Revoke client access (temporary disable)
  • Restore revoked clients
  • Improved delete with proper cleanup
  • Status badges (Active/Disabled)

• Enhanced UI

  • Traffic columns in client list table
  • Last seen timestamp display
  • Revoke/Restore/Delete action buttons
  • Real-time stats refresh (AJAX)
  • Online status indicator (green dot)
  • Improved client view page with stats panel

• API Endpoints

  • GET /api/clients/{id} - Get client with stats
  • POST /api/clients/{id}/revoke - Revoke client access
  • POST /api/clients/{id}/restore - Restore client access
  • GET /api/servers/{id}/clients - Get all clients with stats
  • POST /servers/{id}/sync-stats - Batch sync server clients
  • POST /clients/{id}/sync-stats - Sync single client stats

Technical

• Database migration 002_add_traffic_stats.sql
• New columns: bytes_sent, bytes_received, last_handshake, last_sync_at
• WireGuard stats parsing from wg show output
• Peer removal from wg0.conf using sed
• wg syncconf for live config updates

Documentation

• Created TRAFFIC_STATS.md - Complete traffic stats guide
• API usage examples
• Troubleshooting section

[1.0.0] - 2024-11-05

Added

• Initial release of Amnezia VPN Web Management Panel
• Full VPN server deployment via SSH
• AmneziaWG container management on remote servers
• Client configuration creation and management
• QR code generation compatible with Amnezia VPN apps
• User authentication system (login/register/logout)
• Role-based access control (admin/user)
• Modern responsive UI with Tailwind CSS
• Dashboard with server and client overview
• Server CRUD operations (Create, Read, Update, Delete)
• Client management with download and QR code features
• Docker Compose deployment setup
• Database migrations system
• Twig template engine integration
• REST API foundation for future Telegram bot integration

Technical Details

• PHP 8.2 backend
• MySQL 8.0 database
• Endroid QR Code library v5.x integration
• Qt/QDataStream compatible QR encoding (tested with Amnezia apps)
• AWG obfuscation parameters support (Jc, Jmin, Jmax, S1, S2, H1-H4)
• Secure password hashing with bcrypt
• PDO prepared statements for SQL injection prevention
• XSS protection via Twig auto-escaping

Security

• Default admin account: admin@amnez.ia / admin123 (change immediately!)
• Bcrypt password hashing
• SQL injection prevention
• XSS protection
• Session-based authentication

Known Issues

• QR code library updated to v5.x with API compatibility fixes
• Server deletion not yet removing Docker containers from remote servers
• Client deletion not yet updating server wg0.conf file
• API authentication (JWT) not yet implemented
• Rate limiting not yet implemented

Infrastructure

• Docker container with PHP 8.2 Apache
• MySQL 8.0 container
• Docker Compose orchestration
• Volume persistence for database
• Composer dependency management

[Unreleased]

Planned Features

• JWT authentication for REST API
• Complete Telegram bot integration
• Server monitoring and health checks
• Bandwidth usage statistics
• Client traffic analysis
• Email notifications
• Two-factor authentication (2FA)
• Multi-language support
• Dark mode UI theme
• Automated backups
• Rate limiting for API endpoints
• Export/import configurations
• Server templates for quick deployment
• Client groups and tagging
• Advanced logging and audit trail
• User management admin panel

Improvements Planned

• Better error handling and user feedback
• Real-time deployment progress updates
• Server resource monitoring (CPU, RAM, bandwidth)
• Client connection status tracking
• Automatic Let's Encrypt SSL setup
• Database connection pooling
• Caching layer (Redis)
• WebSocket support for real-time updates
• Mobile-responsive improvements
• Accessibility enhancements

---

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.