Big features

• Mail server
  • Forwarding lives on the mailbox
  • ARC headers when forwarding
  • Relay tokens (apps/scripts can send without a mailbox password)
  • Global allow and deny list for spam
  • Notes on mailboxes
  • Webmail - new Mail client (search, spam control, filters from a message, Contacts and Calendar)
• VPN protection - restrict specific apps to WireGuard or OpenVPN
• Container registry - OCI-compatible registry with a built-in build server. Community App Store is nearing 100 apps
• Ubuntu 26.04 LTS (default for new installs). 22.04 and 24.04 still supported. Upgrade guide
• SSO - packages moving to OIDC (93 on OIDC, proxyAuth done, about 25 still on LDAP). App access view (what a user can open, and why)
• Login sessions - browsers and CLI on the profile

Other notable changes

• Infomaniak as a DNS provider
• Personal access tokens are now called API tokens
• Admins can create an app password that authenticates as another user
• Password reset accepts a passkey as 2FA
• TOTP backup codes
• Email notification when an app updates successfully
• Certificates and DNS sync show last run time and status
• Backups preserve file modification times
• Redis maxmemory policy and a persistence flag
• SCIM can list groups and admin roles
• Security - sanitize HTML and markdown, enforce 2FA with the external LDAP connector, app links can no longer point at internal IPs