Download Latest Version v1.6.13 source code.zip (108.1 MB)
Email in envelope

Get an email when there's a new version of BunkerWeb

Home / v1.6.14-rc1
Name Modified Size InfoDownloads / Week
Parent folder
BunkerWeb_documentation_v1.6.14.rc1.pdf 2026-07-23 24.1 MB
install-bunkerweb.sh 2026-07-23 351.0 kB
install-bunkerweb.sh.sha256 2026-07-23 87 Bytes
README.md 2026-07-23 2.4 kB
v1.6.14-rc1 source code.tar.gz 2026-07-23 101.2 MB
v1.6.14-rc1 source code.zip 2026-07-23 106.7 MB
Totals: 6 Items   232.4 MB 0

Documentation : https://docs.bunkerweb.io/1.6.14~rc1/

Docker tags :

  • All-in-one : bunkerity/bunkerweb-all-in-one:1.6.14-rc1 or ghcr.io/bunkerity/bunkerweb-all-in-one:1.6.14-rc1
  • BunkerWeb : bunkerity/bunkerweb:1.6.14-rc1 or ghcr.io/bunkerity/bunkerweb:1.6.14-rc1
  • Scheduler : bunkerity/bunkerweb-scheduler:1.6.14-rc1 or ghcr.io/bunkerity/bunkerweb-scheduler:1.6.14-rc1
  • Autoconf : bunkerity/bunkerweb-autoconf:1.6.14-rc1 or ghcr.io/bunkerity/bunkerweb-autoconf:1.6.14-rc1
  • UI : bunkerity/bunkerweb-ui:1.6.14-rc1 or ghcr.io/bunkerity/bunkerweb-ui:1.6.14-rc1
  • API : bunkerity/bunkerweb-api:1.6.14-rc1 or ghcr.io/bunkerity/bunkerweb-api:1.6.14-rc1

Linux packages : https://packagecloud.io/app/bunkerity/bunkerweb/search?q=1.6.14~rc1&filter=all&dist=

Changelog :

  • [BUGFIX] mtls: the Scheduler now validates the client CA bundle and CRL, caches them, and distributes them to every instance instead of shipping the raw configured path straight into the NGINX configuration, so a Scheduler-only mount works as documented instead of causing "cannot load certificate" errors on instances that cannot read that path. Adds MTLS_CA_CERTIFICATE_DATA and MTLS_CRL_DATA to supply either file inline as base64 or plaintext PEM.
  • [BUGFIX] backup: support MySQL 9 and MariaDB 12 backup/restore with current authentication, TLS, and privilege defaults while preserving compatibility with older servers; refresh the documented database compatibility matrix, including PostgreSQL 18.
  • [BUGFIX] ui: fix plugin hook loading and chaining, and purge unavailable PRO plugin pages after license loss.
  • [BUGFIX] letsencrypt: quarantine broken renewal lineages and persist the cleaned cache before Certbot runs. (Fixes [#3733])
  • [FEATURE] metrics: buffer reports during Redis OOM events, make list and facet updates atomic, and add the METRICS_REDIS_TTL setting.
  • [FEATURE] headers: deny Chrome built-in AI APIs in the default PERMISSIONS_POLICY.
  • [FEATURE] misc: allow the QUERY HTTP method by default in ALLOWED_METHODS and bundled service templates.
  • [LINUX] Updated the NGINX version to v1.30.4 for Fedora 43 and 44 now that it is available in their repositories.
  • [UI] Reports and Bans pages: show unknown countries as not applicable, and make exports and bulk actions honor active filters. (Fixes [#3683], [#3685])
Source: README.md, updated 2026-07-23