Changelog

Home servers and free tunnel addresses

Run Saka on a computer at home instead of renting a VPS. Sites and web apps get a free public address with HTTPS, even behind a home router or CGNAT.

Tunnels

• Free <name>-app.hack.id addressesPick a name, choose a Saka site or a local port, and Saka sets up a Cloudflare Tunnel on your server. No router ports to open, and your home IP stays hidden.
• Use the tunnel as the site's main addressWordPress links switch to the tunnel address automatically, and switch back when the tunnel is deleted.
• Clean removalDeleting a tunnel, a site, or releasing a server removes the connector, DNS record, and tunnel.
• For AI agentsNew MCP tools tunnel_buat, tunnel_daftar, and tunnel_hapus, plus the /api/v1/tunnel REST endpoints.

Hermes

• Already running Hermes? Saka takes it overSaka detects a Hermes you installed yourself (Docker or directly) and refuses to install a second one. Manage with Saka stops the old one without deleting it, copies its memory, skills, sessions, bot, and keys, and restores it automatically if anything fails.
• Manage Hermes from the panelApprove people who message your Hermes bot, add or remove Telegram IDs, switch AI provider, model, or key without reinstalling, check for updates with an automatic backup first, and make backups.

Guides

• Home server guideStep by step for a mini PC or old laptop with Ubuntu, Raspberry Pi with Ubuntu Server, Windows via WSL2 (beta), and Mac via Multipass (beta).

Improvements

• Feature requests pageTwo column layout: the form stays in view while you browse and vote on other requests.
• Faster supportWhen you report a problem, the Saka team can now check your apps and sites, open your panel view only for 30 minutes, and run safe fixes such as restarting an app. Every action is logged and announced to you on Telegram with the reason.

Accounts

• Email verification with a codeNew accounts confirm their email with a 6-digit code before using the panel. Existing API and MCP tokens keep working.
• Forgot passwordReset your password with a one-time link by email, valid for 1 hour. All other sessions are signed out.
• Emails in your languageAccounts from Indonesia get emails in Indonesian, everyone else in English.

Safety fixes

• Releasing a server in use is blockedA server that is still a balancer or target of a load balancer, or a node of a database cluster, can't be released until that is removed first. The panel lists what still uses it.
• Deleting a cluster in use is blockedA database cluster that is still the database of a site can't be deleted.
• Updates never interrupt running workAutomatic agent updates now wait until tasks such as releasing a server have finished.

Signed updates, feature requests, and load balancer firewall

Agent updates are now cryptographically signed, you can ask for features directly from the panel, and load balancers can allow or block IP ranges.

Security

• Signed agent releasesEvery agent update is signed with Ed25519. The agent refuses any update without a valid signature, so even a compromised control plane cannot push code to your server.
• Security pagesaka.work explains exactly what the agent does on your VM, what it never does, and what data is sent.

Features

• Feature requestsSuggest features, vote on others, and get a Telegram message when the status changes. Your AI agent can file requests through MCP after you approve.
• Load balancer firewallAllow or deny IPs and CIDR ranges per load balancer, editable after creation.
• Account menuSettings and sign out now live under your email in the top bar.

Sites: a cPanel replacement for app owners

Host WordPress, PHP, or static sites on your own server with the essentials people used cPanel for, and move in from cPanel or another VPS.

Sites

• WordPress, PHP, and static sitesAutomatic HTTPS, jailed SFTP per site, local or clustered database, daily backups with one-click restore.
• phpMyAdmin per siteOpens through a secure dashboard link with no open ports, limited to that site's database, and turns itself off after 3 hours.
• PHP settingsUpload limit, memory, execution time, max_input_vars, time zone, and error display, without editing php.ini.

Migration

• Move from cPanel with a loginLike WHM's Transfer Tool: Saka triggers a full cPanel backup, downloads it, and imports it. API tokens are supported for accounts with 2FA.
• Move between serversCopy a site directly from one server to another over one-time encrypted transfer, keep the same database credentials and SFTP account, and optionally update WordPress with automatic rollback.

AI assistants

• Google GeminiGemini keys work for OpenClaw and Hermes, validated before install.
• Hermes fixesUses the published image tag and always sets the AI provider.

English, reliability, and mobile

Saka Panel and saka.work are now available in English, and the control plane runs in two locations.

Languages

• English everywhereThe panel defaults to English, with Indonesian one click away. Server messages and API errors follow your language.
• Sign up with country and phonePhone verification by OTP will follow.

Reliability

• Two location control planeA warm standby takes over if the primary goes down. Apps on your servers keep running either way.
• Recovery after restartsDatabases, load balancers, and sites that were being created during a restart are finished or marked failed automatically.
• IP changesWhen a server's IP changes, you are notified and database clusters and load balancers are updated.

Fixes

• Mobile layoutPanel menu, comparison tables, and docs fit small screens.
• Already signed inOpening the sign in page while signed in now goes straight to the panel.

Load balancers

Spread visitors across servers with health checks and automatic HTTPS, running on your own servers with no separate load balancer bill.

Load balancers

• One or two balancersCaddy based, health checked every 5 seconds, automatic Let's Encrypt certificates, round robin, least connections, or sticky sessions.
• Health aware DNSEach load balancer gets DNS that only answers with healthy servers, so mobile apps, APIs, and webhooks avoid dead servers too. A DNS only mode covers non web services.
• Weights and regionsSend more traffic to bigger servers, or send visitors to the nearest region.

Policy

• Saka never stops your appsThe earlier idea of pausing apps after a long disconnect is gone. If Saka is unreachable or the agent is removed, everything on your server keeps running.

Managed databases across locations

Run PostgreSQL or MariaDB as a cluster across servers in different locations, with automatic failover.

Databases

• PostgreSQL 17 with PatroniReplicas in other locations over WireGuard, automatic promotion when the primary fails, replica lag in the panel.
• MariaDB with GaleraMulti primary clusters with an arbitrator, plus a proxy on your app server so apps always reach a healthy node.
• FencingA failed node is fenced before a new primary takes over, to avoid split brain.

Operating systems

• More Linux distributionsUbuntu 22.04, 24.04, 26.04, Debian 13, AlmaLinux and Rocky Linux 8 to 10, and CentOS Stream 9 and 10.

First public release

Connect any VPS with one command and manage it from the panel or through your AI agent, without giving the AI root access.

Core

• Agent and panelA small agent connects out from your server; nothing listens on a new public port.
• MCP and REST APILet Claude, ChatGPT, or other agents check and manage your servers through safe, confirmable tools.
• Server readinessSeven checks with plain language fixes, including one-click swap and a firewall that keeps the ports you use open.
• Release serverOne clean way out that removes everything Saka installed and leaves what was there before.

AI assistants

• OpenClaw and HermesOne-click install with Telegram, WhatsApp for OpenClaw, and any OpenAI compatible provider.
• Manage OpenClaw without the terminalAccess requests, AI models, skills, schedules and reminders, memory, persona, backups, and safe updates with automatic rollback.
• App dashboardsOpen an app's own dashboard through a private link with no open ports.