Changelog
See what's new in Server Compass. Every feature, improvement, and bug fix documented in detail.
All Releases
Page 1 of 13
Kubernetes on Your Server
Server Compass now finds the Kubernetes cluster on your server, or installs single-node k3s after a preflight, and gives you a Kubernetes tab to watch workloads, read pod logs, scale, roll back and apply manifests without typing kubectl. The Overview also shows every disk on the server and can mount an attached volume, and AI agents can run long commands in the background over MCP.
Tunnels for AI Agents
AI agents connected to Server Compass can now set up, adopt, repair and route Cloudflare tunnels over MCP, under the same access levels and activity log as every other tool. Server Compass also accepts StoicSoft bundle keys, and license checks now pick up plan changes without re-activating.
Security Updates
A security release: Server Compass moves to Electron 44 (Chromium 152, Node.js 24), locks down how the app can be launched, checks its own code for tampering, declines Brotli-compressed network data and patches bundled libraries. macOS 13 Ventura or later is now required.
Adopt Any Tunnel
Cloudflare Tunnels whose services live on the VPS itself, on localhost ports or a Kubernetes (k3s) ingress, can now be adopted with a new "Run on the entry-point VPS" option that checks every hostname before changing anything. This release also fixes the SSL certificate list re-checking domains in a loop and the adoption dialog closing mid-adoption.
Multi-Origin Client Portal Gateway
One server can now host branded client portals on separate hostnames, device sync lets you review every conflicting record before anything is overwritten, and Cloudflare Tunnels already running on a server can be detected and adopted.
Run Your Server Without Root
Server Compass no longer needs to be root. Firewall, brute-force protection, SSH hardening, Docker and deploys all work when the app signs in as a sudo user, apps land in that user's home instead of root's, and disabling root login stays locked until a working key-based sudo fallback is verified. This release also imports servers straight from your ~/.ssh/config (passphrase-protected keys included), adds Static Site and PHP Site templates that need no Git repository and stay editable after a redeploy, stores CPU, memory, disk and load history on the server, ships a seven-chapter guided tour, and lets a Team Owner export a sealed recovery bundle and restore the workspace on a new machine.
Review Device Sync Instead of Overwriting Everything
Device Sync no longer forces you to overwrite one machine with the other when both have changed. When there is a conflict, review exactly what differs — items only on this device, only in the remote snapshot, and what changed on both — then keep or discard each server, app, or domain, open a field-by-field comparison, and apply the merged result (optionally pushing it to your other machines). The all-or-nothing overwrite is still there if you want it. This release also lets a blank second device pull without adding a server first, stops built-in templates being treated as your data, and fixes several Pull Latest download and restore failures on S3-compatible storage.
Linux Desktop in the Browser
Install a full Linux desktop in your browser straight from the Stack Wizard: the Webtop template self-hosts Alpine XFCE (or Ubuntu, Fedora, Debian and Arch, with KDE, MATE or i3) on your VPS, signs in with a username and password you set, and keeps your files across updates. This release also makes S3-compatible cloud storage — Cloudflare R2, MinIO, Hetzner — connect reliably, cleans up the endpoint URLs you paste, and stops credential fields being auto-filled with a saved website password.
Run Your Servers With a Team
Run your servers with a team: create an encrypted workspace in an S3-compatible bucket you already own, share a server without handing out its SSH credential, grant access down to a single Docker app with an expiry, work in the same terminal at once, and put CPU and memory ceilings on any service.
Tailscale, and a Better Windows
Reach your desktop from your phone over Tailscale instead of a public tunnel, plus a batch of Windows and Linux fixes covering click handling, local builds and Docker.
View all releases on GitHub
View on GitHub