-
Notifications
You must be signed in to change notification settings - Fork 17
Description
Brief description
We request to upgrade the webserver stack components — nginx, SFTPGo, and PHP-FPM — to their latest stable versions.
WHY: The current versions in use may contain bugs, outdated dependencies, or security vulnerabilities that have been addressed in more recent upstream releases.
PURPOSE: Ensure the platform benefits from upstream security fixes, performance improvements, and continued compatibility with web applications and integrations.
Proposed solution
Update the following packages in the repository to their latest stable versions:
- nginx
- sftpgo
- php-fpm (add support of PHP 8.4)
Perform regression testing on web-hosted services, SFTP transfers, and PHP-based applications.
Validate that reverse proxy, TLS configs, auth mechanisms, and file transfer workflows continue functioning correctly.
Alternative solutions
Remaining on older versions is discouraged due to potential exposure to known vulnerabilities and loss of compatibility with modern clients and tools. Selective patching is more effort-prone and less future-proof.
Additional context
These components are core to the system’s web-serving, file-transfer, and application runtime layers. Keeping them updated is crucial for stability, security, and performance.
Metadata
Metadata
Assignees
Labels
Type
Projects
Status