Changelog · Rebels of Gaming

[0.53.2] – 2026-10-30

App push (iOS): when Apple rejects a notification, status and reason (e.g. InvalidProviderToken, TopicDisallowed, BadDeviceToken) are now in the log and in the output of rog:push:test – so far the error was only counted; rog:push:test also warns if PHP cURL lacks HTTP/2 (required by Apple)

[0.53.1] – 2026-10-30

Realtime: the apps (Windows, Linux, Android, iOS) connect to the realtime server again – connections without an origin or with the ws address as origin were rejected so far (live updates, counters and chat in the apps only came via polling)

[0.53.0] – 2026-10-30

Home page: new “Apps” block with the store links for iPhone & iPad, Android and Windows, macOS and Linux as “Coming soon”; store links come from Admin → Settings → Apps, platforms without a store show “Coming soon”
Admin → Tech → App statistics: downloads from the App Store (Google Play, Microsoft Store and Flathub follow) and signed-in app devices per platform with versions, history of the last 30 days; permission apps.stats, API GET /v1/apps/stats

[0.52.1] – 2026-10-30

Wiki: on long pages the table of contents in the sidebar scrolls on its own and stays in view

[0.52.0] – 2026-10-29

Internal wiki: own anti-cheat for Java and Bedrock (replaces Grim) with checks, alerts and settings; rog.anticheat.bypass applies to both platforms
Internal wiki: anti-cheat with anti-ESP, more checks (timer, anti-knockback, aimbot, autoclicker) and obfuscated items; new client check (client name, mod channels, detected cheat mods) with /clientinfo and the rog.staff.clientinfo permission (plugin v0.47.0)
Minecraft wiki: “Mods and clients” rule – allowed performance and visual mods, forbidden cheat clients and mods, automatic detection when connecting
Minecraft wiki: “Coloured signs” – colour codes with &, custom hex colours, formatting and &g to make text glow (Java and Bedrock); internally the rog.signs.color permission (plugin v0.48.0)
Privacy: old log archives of the Minecraft servers (logs/YYYY-MM-DD-N.log.gz, containing anti-cheat alerts with player names) are deleted automatically via Pterodactyl after 30 days (RETENTION_MINECRAFT_SERVER_LOGS_DAYS, manually rog:minecraft:prune-logs --dry-run)

[0.51.1] – 2026-10-26

Wiki: Rebel Royale with random worlds, weapons, supply drops and reboot stations (player page) and their settings (internal page)

[0.51.0] – 2026-10-26

Minecraft: new minigame “Rebel Royale” (battle royale) in statistics and leaderboards – wins, win rate, kills and deaths like Skywars, awards for 10 and 100 wins
Wiki: Rebel Royale on the player page (game list, /queue, short explainer) and /br demo with a guide for custom maps on the internal page (existing edits are kept)

[0.50.0] – 2026-10-26

Minecraft: if you already linked a Bedrock account to your account and connect it to your Java account via Floodgate (/linkaccount), it is taken over automatically on your next join – account, rank, statistics and Rebel Coins stay, no need to link again
Wiki: “What happens to my progress?” under /linkaccount and /accountmerge with its permission on the internal page (existing edits are kept)

[0.49.1] – 2026-10-26

Privacy policy: “Live reading by the team” now also covers live reading of entered commands in the Minecraft network (/cmdspy, nothing stored)

[0.49.0] – 2026-10-25

Minecraft: Bedrock players linked to Java via Floodgate are linked as a Java account (edition from the UUID), even if a Bedrock account is already linked
Game server bans: a ban on the Bedrock account also applies when the player joins with their Java account via Floodgate (the plugin sends the Xbox ID)
World map: linked Bedrock players show their Java head
Wiki: “same progress on Java and Bedrock” (/linkaccount) on the player page, /cmdspy with permissions on the internal page (existing edits are kept)

[0.48.2] – 2026-10-25

Internal wiki: staging only with the permission rog.server.staging (permission table, note, groups server-admin and admin)
Internal wiki: new /portal section (Nether/End portals as server portals) and portals in the /deko menu (existing edits are kept)

[0.48.1] – 2026-10-25

Wiki: head commands complete – command table and categories under /koepfe (short forms /heads, /kopf), on the internal page /koepfe reload, “Take”/“Remove” and the new skin options for /npc create and /npc skin (existing edits are kept)

[0.48.0] – 2026-10-25

Minecraft: new head catalogue “RoG-Heads” – decorative heads players buy for Rebel Coins on all Paper servers; the plugin fetches the catalogue every 5 minutes (only again after changes) and adds or removes heads in game
Admin: new page Tech → Head catalogue – filter and search heads by category, with preview image; edit names in German/English/French, category, tags and price, delete and add by texture hash; the website renders the previews itself, the browser loads nothing from Mojang
API: head catalogue for the plugin (/v1/gameserver/minecraft/heads with ETag) and for the apps in management (/v1/minecraft/heads)
Wiki: “Minecraft: Befehle für Spieler” gains /koepfe · /heads and a short Skywars explainer, “Minecraft intern” the “Kopf-Katalog” section, the /deko menu with NPC skins and the permissions rog.heads.admin/rog.heads.free for server-admin (existing edits are kept)

[0.47.1] – 2026-10-25

Plugin deploy: “Check release” works with the private rog-minecraft repository via a read token in .env (MINECRAFT_DEPLOY_GITHUB_TOKEN, only sent to the GitHub API); without access a hint about the token replaces the misleading “The release file is larger than allowed”

[0.47.0] – 2026-10-24

New: shop & donations – supporter ranks (first “VIP”, purely cosmetic, 30 days or permanent) and free donations with nothing in return, paid via Stripe, PayPal or Tebex on their secure payment pages; receipts under members area → Orders & donations, thank-you list only with consent. Off by default (Admin → Shop & donations, with a test mode for owners only); fixed link /minecraft/vip for the Minecraft network
API: shop products, donation info, starting a payment and own orders for the apps; management and payment provider webhooks
Shop & donations hardened: refunds, partial refunds and chargebacks are recognised (the role is only removed once a refund is confirmed or a chargeback is lost), two simultaneous purchases add up reliably, an open order is reused instead of being paid twice; only roles without any permissions below all ranks can be sold, and such roles cannot be given permissions while their product is active. Tebex checks package, quantity and price; shop managers are notified whenever manual work is needed. Only the owner switches to “live”; in test mode the admin shows whether test or live keys are in use
Wiki “Minecraft intern: Team- und Admin-Befehle”: groups and permissions now follow groups.json (new group table, intro); /rog status lists all RoG plugins with version and the latest release
Wiki “Minecraft: Befehle für Spieler”: new /spectate · /zuschauen section, a short TTT explainer and a note on name tags in TTT (owner edits are kept)

[0.46.0] – 2026-10-24

Minecraft world map: servers hidden from the server list (visibility “Hidden (admin only)”, e.g. lobby, freebuild, plots, minigame lobby and Bedwars behind the proxy) deliver tiles again and appear on the map – whether a server or world is shown is now controlled solely by Admin → Tech → World map. “Members only” servers stay off the map
Admin → Tech → Deploy plugins: new “Minimum plugin versions” card for rog-core, rog-proxy and every other plugin reported by Minecraft servers – effective minimum version with its source (admin setting, .env, global default), reported versions (oldest/newest, number outdated), editing and “Set minimum version to checked release” (only with gamebans.manage, otherwise read only). The card under game server bans links there for Minecraft

[0.45.0] – 2026-10-24

Wiki: section on /groups · /gruppen added to the internal Minecraft page
Wiki: new internal page “WorldEdit – Befehle für Admins” (team only), linked from the team and admin commands page; Minecraft pages gain “Weltkarte” and “So kommst du auf den Server” sections with links to the map and the join page
Admin: Tech → Deploy plugins fixed – every server row shows its checkbox, server name and network ID again, status badges wrap cleanly instead of being cut off; the heartbeat suggestion is clearly marked as “not saved yet”, new button “Apply all suggestions”; “Deploy checked release” is greyed out until a checked release exists and at least one server is selected. Empty states no longer show the grey blob behind the icon (e.g. minigame pool)

[0.44.0] – 2026-10-24

Minecraft: new world map under Server → Minecraft world map (/minecraft/karte) – lobby, Freebuild (with farm world, nether, end), plot world and minigame lobby from above, choose server → world, warps as markers and live players with head and Bedrock badge (every 5 s). The link from the game (/map) opens the map right at your own position. Tiles are kept in our own storage; the page loads nothing from third-party servers
Minecraft: player positions are publicly visible with names on the map (clear notice on the page); they are not stored, only held for about 30 seconds. Anyone who does not want to appear types /map hide in the game
Admin: new page Tech → World map – show/hide servers and worlds, display names per world (DE/EN/FR), delete the tiles of a world, storage per world, switch “Show live players”
API: world map for the apps (GET /v1/minecraft/map, tile index, live players) and plugin interface for rog-map (worlds, tiles, live players)
Wiki templates: “World map” sections added to the Minecraft articles (players and team)
World map (hardening): live players selectable in the admin area – off, signed-in only or public; storage quotas per server and in total with a notice to the owners from 80 %; tiles only for public servers; hiding worlds and servers can delete their tiles right away; the map only loads the tile index for the visible area
Minecraft: Java resource pack for the network – new admin page Tech → Resource pack (upload, replace, delete a ZIP with pack.mcmeta; direct link with the SHA-1 in the file name and the SHA-1 to copy for server.properties), old packs stay available for 24 hours after replacing; API GET /v1/minecraft/resource-pack for the proxy and plugins
Wiki: the internal page “Minecraft intern: Team- und Admin-Befehle” gains /restart·/neustart, /day·/night, /sun·/rain·/thunder as well as /npc equip and /npc sound – only missing parts are added, existing edits are kept
Privacy policy: Minecraft world map with live positions

[0.43.0] – 2026-10-24

Minecraft: new page Server → Minecraft with the guide “How to join the server” – one card each for Java (PC, Mac, Linux), Bedrock (phone, tablet, Windows) and console (Xbox, PlayStation, Switch via the Friends tab), address, port and gamertag with a copy button, live status of the network and links to leaderboards, account linking, rules and wiki
Admin: new page Tech → Minecraft join – addresses, ports, gamertag, console card on/off and an optional note for consoles (DE/EN/FR)
Wiki: the articles “Minecraft: Befehle für Spieler” (public) and “Minecraft intern: Team- und Admin-Befehle” (team only) are created once during the update in the new sections “Minecraft” and “Minecraft intern”

[0.42.0] – 2026-10-23

Minecraft: new minigame “TTT – Traitors” in statistics and leaderboards – a win counts for the winning side, its own leaderboard by correct kills (kills of the opposing side), awards for 10 and 100 wins; the Jump Race can now also be sorted by total checkpoints

[0.41.0] – 2026-10-23

Minecraft: statistics on the profile – new tab “Minecraft” with playtime, sessions, deaths by kind, kills, blocks per group, advancements, plots, minigames (played, won, win rate, beds, final kills, checkpoints) and parkour best times; only visible if you share it under Edit profile → More visibility → “Minecraft statistics” (default “Only me”)
Minecraft: leaderboards under Server → Minecraft leaderboards – playtime, Bedwars, Skywars, TNT Run, Build Battle, Jump Race (wins or win rate from 10 games) and lobby parkour (best time per course), all time or last 30 days; only players who share their stats – if you withdraw it, you disappear from the lists right away
Minecraft: awards for milestones (playtime, kills, advancements, wins per minigame, parkour) appear as badges on the profile – with a bell notification for each new award (can be switched off)
Minecraft: lobby parkour times (parkour.finished) and the new Jump Race minigame are evaluated
Admin: new page Tech → Minigame pool – start minigame servers per queue (e.g. bedwars-solo) automatically when all joinable instances are full and stop them when idle (per group, off by default; minimum, start threshold, idle stop, event log), plus the live state of all Minecraft servers (role, players, TPS, minigame) – new permission “Control the Minecraft minigame pool”. Only servers assigned in the admin area are controlled (servers that merely report the group appear as an “Assign” suggestion); per server a maintenance switch “Exclude from pool”; after three failed starts a server is quarantined (with a notice to the owners); manual starts/stops count towards the cooldown; a Pterodactyl outage is logged only once
Admin: new page Tech → Deploy plugins – in two steps: “Check release” shows tag, release date, SHA-256 and the plugins per folder (optionally with a minisign signature), “Deploy” brings exactly this checked state to the selected servers after confirmation: upload under temporary names, swap only then, back to the old state on an error; restarts one after another, the proxy last and only when selected deliberately; you set the plugin folder per server (the heartbeat is only a suggestion, mismatches are shown and skipped) – new permission “Deploy Minecraft plugins”
Admin → Game servers → server: “Minecraft” card with the last heartbeat state and the configured plugin folder
Operations: long jobs (plugin deploy) run in their own worker (deploy/supervisor/rog-long.ini, queue long)
Privacy policy: Minecraft statistics, leaderboards and awards only with opt-in
Wiki: new visibility “Team” for internal sections – visible only with the permission “Read internal wiki sections” (leadership, moderators, server admins) or approval rights, hidden from lists, search and links for everyone else; “Internal” badge, never indexed, images private

[0.40.0] – 2026-10-22

Profile: show Rebel Coins on your profile – balance and daily bonus streak as a card on the profile overview, only if you turn it on under Edit profile → More visibility (default “Only me”; linked from Account → Linked accounts → Minecraft); transactions stay private
Privacy policy: Rebel-Coins on the profile only with opt-in

[0.39.1] – 2026-10-22

Operations: the API description (/openapi.json) is now really served from a file generated during the update – the cache from 0.39.0 did not take effect, every request still took about 15 seconds

[0.39.0] – 2026-10-22

Minecraft: Rebel Coins (⛃) – the currency of the network for all players, even without a RoG account: earn them with jobs, the daily bonus and in the server shop, spend them in the server shop and in player shops; with /link your existing balance moves to your account, all your Minecraft accounts share one balance
Account → Linked accounts → Minecraft shows your Rebel Coins balance, your daily bonus streak and recent transactions (display only – coins are spent in game)
Admin: new page Members → Rebel Coins with search, transactions, credit and debit with a mandatory reason, plus daily bonus schedule and daily limit (new permission “Manage Rebel Coins”)
Game server plugins: minimum version per plugin – under Admin → Game server bans → “Minimum plugin versions” or via GAMEBANS_MIN_PLUGIN_VERSIONS in .env; the “outdated” hint in the admin and in the heartbeat now applies per plugin
Safer Rebel Coins: only servers with the new switch “Book Rebel Coins (shops, trading, jobs)” (Admin → Servers → Bans & plugin) can book coins, only players currently on the network can pay, and new limits per server, player and admin contain the damage of a leaked key – adjustable under Admin → Members → Rebel Coins → “Limits against misuse”; the owners get a notice from 80 % of a limit and for large admin transactions
Privacy policy: Rebel-Coins in the Minecraft network
Operations: the API description (/openapi.json) is generated in advance during updates – before, it was rebuilt on every request and could briefly overload the API

[0.38.0] – 2026-10-22

Friends: send and accept friend requests – via the button on a profile, on the new “Friends” page in the members area and in the Minecraft network (one shared list); up to 100 friends, only you can see your list. Blocking someone also ends the friendship and open requests
Notifications for new friend requests and when your request was accepted
Minecraft: messages to friends who are offline arrive as a direct message and are marked “from Minecraft” in the messenger; unread messages from friends also appear in the game the next time you join
Minecraft: report players in the game with /report – the report goes to the moderation team together with the history between the two; private messages are not stored otherwise
Minecraft: website and app messages from friends only appear in the game if you switch it on under account → linked accounts → Minecraft (“Also show messages from friends on the Minecraft network”); messages with attachments are marked there
Minecraft: friends and messages in the game only work while you are on the network; if you accept a request or remove a friend in the game, you get a quiet note at the bell (can be switched off)
Friends: unanswered requests expire after 90 days; requests from suspended accounts can no longer be accepted
Moderation: reports from the game show that the history comes from the Minecraft server; child safety alerts about the same player come at most once an hour

[0.37.0] – 2026-10-22

Minecraft: groups in the network by RoG role – in the admin area under Members → Minecraft ranks and extra roles get a LuckPerms group; role changes apply in the game immediately. Removed groups keep being taken away until the owner releases them (after 30 days at the earliest); groups like “admin”, “staff” or “mod” can only be mapped by the owner
Admin: the plugin key permission “Link Minecraft accounts” is now called “Network proxy (link accounts, login, sessions)” – only the proxy key needs it, backend and minigame servers do not
Minecraft: on join the network knows the linked account, the groups and pending rule confirmations; playtime, sessions and game stats (deaths, kills, blocks, advancements, plots, minigame results) are collected for linked accounts from the time of linking (blocks only as totals) – the display follows
Online status: linked members in the Minecraft network appear as “on a RoG server”
Fixed address rebelsofgaming.com/rules redirects to the rules in your language (e.g. for the notice in the Minecraft network)
Privacy policy: Minecraft network – events and statistics of linked accounts

[0.36.0] – 2026-10-21

Minecraft: link your Minecraft account (Java or Bedrock) to your RoG account – type /link in the game, enter the code under Account → Linked accounts (directly via rebelsofgaming.com/account/minecraft) and confirm after the check (“Code for … – is this you?”); one Java and one Bedrock account per RoG account, unlink at any time
Admin: view and unlink linked Minecraft accounts in the member detail and per server (“Bans & plugin”) (new permission “Manage Minecraft links”); plugin keys need the new permission “Link Minecraft accounts” for account linking
Ban appeals: a linked Minecraft account counts as proof; on Minecraft servers the online status recognises members by their linked account
Privacy policy: section on Minecraft account linking added
Footer and emails: “Copyright by wahke” with a link to wahke.lu

[0.35.0] – 2026-10-20

Game server queries: many more games – Minecraft Query (full player list) and Bedrock, Unreal/UT99/UT2004, Killing Floor, Battlefield 1942/2/2142, FiveM/RedM, SA:MP/open.mp, Satisfactory, Teeworlds/DDNet, Quake 2, CoD 4 and Xonotic
Minecraft networks: Velocity and BungeeCord/Waterfall are queried as a proxy; starter skeleton for a Velocity ban plugin
In the admin, the server editor suggests the query type and ports matching the game (over 140 games)
Games that report players without names (e.g. Sons of the Forest) now show the player count
Queries are more robust and safer against broken or manipulated responses

[0.34.0] – 2026-10-20

Public ban list under “Bans”: active bans on our game servers with in-game name, game, reason and duration – IDs only shortened, no IP addresses, not in search engines
Appeal a ban: with an account and proof (Steam login or the code from the in-game message) as a public thread in the forum section “Ban appeals”; the admins decide there, an accepted appeal lifts the ban
The in-game message now includes a link to the ban and the appeal code
Privacy policy: ban list and appeals added

[0.33.0] – 2026-10-20

Game server bans: central ban system for all game servers – bans apply to a person (player ID per game) on all servers of that game by default, optionally on one server only or everywhere; with duration, reason, history and lifting in the admin under “Game server bans”
Server plugins: every game server gets its own plugin key (tab “Bans & plugin”). Plugins check players when they connect, take over bans from the game and keep a local copy for outages; servers without a plugin are still served via RCON. Guide and starter skeletons for ET:Legacy, CS2 and Minecraft included
Privacy policy: new section on bans on our game servers

[0.32.2] – 2026-10-20

Game servers: for servers created through the website, the detail page shows all ports (with a “main port” badge)
Legal texts: the privacy policy describes the age check at registration; the “Delete account” and “Child safety” pages also mention the Windows app and the Microsoft Store
App interface: social status for many entries at once (for status icons in the app lists), fully documented tool endpoints

[0.32.1] – 2026-10-19

Legal texts: the terms of use now apply officially (version 1). The privacy policy additionally covers tools, how child safety reports are handled and the acceptance of the terms of use

[0.32.0] – 2026-10-19

Tools: images and data (JSON) can be uploaded safely per tool (“Assets” tab – every image is re-encoded, no SVG, no server files), and finished tools can be imported as a ZIP package (PHP and server files are rejected, external fonts/scripts removed)
New tool template “Last Asylum: line-up planner”: tick your heroes, enter level and stars, get the three best teams per mode with reasons and upgrade tips – in German, English and French, saved in your account
Tools: saving was sometimes lost when a tool started faster than the page (e.g. on a slow connection) – calls now wait until the connection is ready
Create game servers: pick several additional ports (e.g. query, RCON, voice) or assign them automatically

[0.31.1] – 2026-10-19

Fixed: news with a cover image could not be opened in the admin after saving (error 500)

[0.31.0] – 2026-10-19

New: Tools – small helpers right on the website under “Tools” and in the squad tab “Tools”. To start with: the Enemy Territory nickname generator (color codes with live preview, gradient, random, copy for console and config) and the Last Asylum hero planner (your heroes and your own teams, saved in your account). The clan leadership can add more tools in the admin without an update; tools run isolated and load nothing from third-party servers

[0.30.4] – 2026-10-18

Child safety reports: reporting again reopens an already handled report, upload reports can be upgraded to child safety, and a limit protects the team from mass false alarms

[0.30.3] – 2026-10-18

New “Child safety” page (linked in the footer): our standards against sexual abuse and endangerment of minors – zero tolerance, minimum age, how to report, what we do and which authorities we report to
Reporting: new reason “Child safety / endangerment of minors” for all content (including uploads and the forum); such reports go to the top of the moderation queue and alert the team immediately

[0.30.2] – 2026-10-18

Notifications: the “Administration” group (e.g. social media drafts awaiting approval) shows a proper heading in the settings again instead of an internal key

[0.30.1] – 2026-10-18

Account: you can now leave the clan yourself (Account → Your data → “Leave the clan”, also in the app) and then delete your account without having to contact the leadership. Rank and squads end, the leadership gets a short notice
Create game servers: egg variables with a fixed list of values (e.g. server region) as a select, long hints wrap, and a rejected Pterodactyl key now shows the exact reason (key, permissions or allowed IPs)
App interface: wiki pages name the last editor

[0.30.0] – 2026-10-18

Game servers: new servers can be created right in the admin – freely choose node, port, game template (egg), Docker image, startup variables and resources. The website registers them automatically, shows the installation state and can delete them again with an expiry date (with prior warning, e.g. for scrim servers) or after confirmation. New permission “Create game servers”, two-factor sign-in required
Social media: news, events, clan wars and gallery albums show in the admin whether and on which channels they were posted (with a link to the post); failed channels can be resent and missing posts prepared again – without duplicate posts and still with approval
Report and block: wiki pages and single edits can be reported; moderators jump from the queue straight to the reported content. Blocked people are now also hidden in news comments (collapsed) and the gallery
New “Terms of use” page (linked in the footer); you agree to them when registering
Apps: push notifications for Android prepared, more reliable delivery

[0.29.7] – 2026-10-18

Windows app: visitors on a Windows PC now see a small, dismissible hint about our app with a link to the Microsoft Store, just like on phones (set up in the admin under Settings → Apps with the Microsoft Store ID)
Privacy policy: new “Windows app” subsection (device name, access key in the Windows Credential Manager, encrypted data on the PC, notifications, Windows Hello, updates via the Microsoft Store)

[0.29.6] – 2026-10-17

App interface: preview images of running Twitch streams come as full addresses so the app can show them directly

[0.29.5] – 2026-10-16

New “Accessibility” page (linked in the footer next to Privacy): what the website and app do for keyboard, screen reader, voice control, large text, contrast and reduced motion, which limits remain and how to report barriers
App interface: events with a game server as location now include the join password directly (same rules as on the server page), Steam game icons come as full addresses, and the app learns whether your Minecraft account is confirmed, still being re-checked or should be saved again

[0.29.4] – 2026-10-16

Game servers: scrim and practice servers can have a join password. Permitted members (all members, only the server's squad or only server management – configurable in the admin) see it on the server page, in the server list and on events with the server as location, ready to reveal and copy; for CS2 and other Source games, “Connect” joins directly with the password. Guests, the status page, Discord and webhooks never get the password

[0.29.3] – 2026-10-16

Operations: website updates can no longer get stuck unnoticed – every step has a time limit, database locks are handled after 60 seconds with a second attempt, the clan leadership is alerted right away on failure, and the system status shows the last deploy; the version number in the footer is correct again

[0.29.2] – 2026-10-16

Profile: new “Steam library” card – your most played Steam games with total hours and hours in the last 2 weeks, once you turn it on under profile → settings (off by default, visibility selectable like your other profile details). If your game details are private on Steam, the card shows you how to make them public; turning it off deletes the stored data right away
Home page: new block “What are we playing?” with the most played Steam games of the last 2 weeks – only from members who shared their library, and only as far as their visibility allows
Profile: new “League of Legends / TFT” card – your ranks (Solo/Duo, Flex, TFT, Double Up) with LP and win rate via the Riot ID from your platform IDs, once you turn it on under profile → settings (off by default, server selectable, never more visible than your Riot ID); turning it off deletes the stored data right away
Minecraft: your Minecraft name in your game accounts is now checked with Mojang (typos show up right away). Your skin appears as a head and full-body picture on your profile and in a skin row on the Minecraft squad page, updated daily and with the same visibility as your game account

[0.29.1] – 2026-10-16

Social links: footer, profile and the input fields now show the real logos (YouTube, Twitch, X, Instagram, Facebook, TikTok, Steam) instead of a generic link icon
Social media: the website can now post to the clan channels on Facebook, Instagram, Threads, X, YouTube, Bluesky and Mastodon – under Admin → Social media. Every post is reviewed and approved first (right away or at a scheduled time), the text adapts to each platform (character limits, links, hashtags) with a preview per channel; published posts can be retracted again
Social media: new public news, public events, clan war results (without player names) and new images in public gallery albums automatically create a draft to approve, and the clan leadership is notified. Videos from the gallery or the media library can be uploaded straight to YouTube
Gallery: when submitting you now also confirm that content from public albums may be shown on the clan's social media channels
Social links: Facebook can now be added in the clan settings (footer) and in your own profile

[0.29.0] – 2026-10-15

Account: two-factor authentication can now also be set up, confirmed and turned off in the app, and recovery codes can be regenerated there (with the current password; accounts without a password set it up on the website, turning it off works after a fresh app sign-in with the authenticator code; new codes are logged)
Security: turning two-factor authentication on or off and generating new recovery codes now sends you a notification (by mail too by default) with a hint what to do if it wasn’t you – on the website and in the app
Account: Steam can now also be unlinked in the app (same rules as on the website; linking still happens on the website’s Account page)
Admin: under Member → App devices the clan leadership can sign a member’s device out (e.g. for a lost phone) – only for accounts below their own position, recorded in the audit log; also via the API
Admin: the CSV export of the audit log is now also available via the API (same filters and permissions as on the website)
Security (behaviour change): the app may now also manage webhooks, translations and legal texts and – for the owner only – own API tokens; like all management areas only with the matching permission and an authenticator code at sign-in. Please sign out a lost device right away
Admin: legal texts can now also be edited in the app – draft, preview, comparing versions and importing from the files (like Admin → Legal texts)
Security: in the CSV export of the audit log, cells a spreadsheet would read as a formula (starting with =, +, -, @) are marked as text with '
App: the member list with roles only shows active roles and loads reliably with many members
App: passkeys and signed-in website devices can again be viewed, removed and signed out in the app – without token management, which only the owner has
App: signed-in members send the contact form without the computing challenge (ALTCHA) – it took too long on phones; the limit then applies per account

[0.28.0] – 2026-10-15

Privacy: new public “Delete account” page (/en/account-deletion, no sign-in needed) – steps in the app and on the website, a way without access to the app (contact form or email), what is deleted, what remains without your name and how long backups and logs still contain data; linked in the footer and below the privacy policy
Privacy policy: new section “App for iOS and Android” (sign-in, devices, push via Apple/Google, storage on the device, camera and photos, Face ID, app updates via Expo, App Store and Google Play); the following sections move down by one
Contact: the contact form takes a topic from the link (e.g. “Privacy”)
Security: after “This wasn’t me”, “forgot password” stays locked until you sign in with Discord and confirm a new email address (or the clan leadership unlocks it) – the lock no longer expires after 7 days, and a new password alone does not lift it
Security: email address and password can only be changed via the API with the current password – a fresh app login is no longer enough; accounts without a password change both on the website (confirmation with Discord)
Privacy: the ZIP data export is built one at a time and in batches; temporary copies no longer go to the system temp directory or into backups, and leftovers of aborted runs are deleted after one day
Permissions: permission templates can only be deleted by someone who may grant all of their permissions (as for creating and editing)
Privacy: originals of gallery videos no longer end up in backups while they are processed; if processing hangs for more than a day, the original is deleted and the entry marked as failed
Gallery: when a public album is switched to members or squad, videos and their thumbnails now also move to private storage – the old public address stops working
Security: videos are now only processed with allowed formats (MP4/MOV, WebM/MKV) and codecs (H.264, HEVC, VP8, VP9, AV1, MPEG-4); other videos are rejected with a clear message
Privacy: when an account is deleted, images and videos released to the media library now also lose their original file name and description; privacy policy and “Delete account” page updated accordingly
Privacy: if an account is deleted while an avatar or banner is still being processed, no finished image files are left behind
Wiki: descriptions of files in areas with review now become suggestions like page edits and only appear once approved
Admin: new “Delete account on request” button on a member for deletion requests by email or contact form – with a reason, authenticator code, audit log entry and a confirmation email to the account’s address (new permission “Delete accounts on request”, admins only by default)
Website: on request the website shows smartphone visitors a small, dismissible hint about the app with a link to the App Store or Google Play (Apple’s banner in Safari); App Store ID, package name and switch in Admin → Settings → Apps, off by default
Security: “Delete account on request” now requires two-factor authentication and – also via the API – always a fresh authenticator code
Security: personal API tokens with management scopes (e.g. roles, settings, managing members) now require two-factor authentication – like signing in to the app; your account shows a hint
Security: when unlocking an account after “This wasn’t me”, the clan leadership can enter a new email address after an identity check that replaces the old one – the password reset link then goes to the new address, the old one only receives a notice
Wiki: approving or discarding a file description suggestion only applies to exactly the version that was shown – if the suggestion changed in the meantime, the new version appears for another review
Security: when someone confirms a new email address after “This wasn’t me”, the previous address receives a notice (without a revert link) and the clan leadership is notified
Operations: the data export staging folder is fixed at storage/app/private/export-staging (the DATA_EXPORT_STAGING_PATH setting is gone); cleanup there only deletes job folders

[0.27.0] – 2026-10-15

Game servers: on servers with four-eyes approval, deleting and unlocking backups now also need the approval permission (like restoring); locking still works without approval
Game servers: locking/unlocking backups reliably ends in the requested state even with concurrent changes (e.g. in the panel); the audit log records the actual one
Apps (privacy): the signed map tile link is now valid for only 2 hours and ends immediately when you sign out of the app or remove the device
Gallery: submitting the same file twice from the app (e.g. a double tap) now creates only one gallery item
API: lists now describe their query parameters in the OpenAPI spec (cursor, per_page, every filter[…], sort with allowed values, include) – generated clients and the Bruno collection know them; delete endpoints no longer list unrelated form fields as parameters
API: the OpenAPI spec now describes all responses with their real fields and types (before, among others, news, live server state, squad headers, system status and the home page were untyped or wrongly typed) – generated clients and the app can rely on it; a test checks real responses against the spec. Empty maps are always {}
API (change): tokens never see more than their account sees on the website – archived squads, inactive games, suspended profiles, extra roles with expiry dates and sorting by “last seen” only with the matching management permissions; online filter and event declines only for clan members
API: guest mode also for the forum (public areas), the TeamSpeak viewer and Twitch live – without a token exactly what guests see on the website; stats stay members only
Apps: signing the app in through the browser now also works with email and password instead of Discord – with ALTCHA and, if two-factor authentication is enabled, an authenticator or recovery code
Apps: the app may now also edit the wiki, upload images to the gallery, create short links and write applications or vote in the squad (new default scopes wiki:write, gallery:write, links:write, applications:read, applications:write; if you set APPS_CLIENT_SCOPES yourself, add them)
API: wiki pages tell whether you watch them (watching)
API: the content of single wiki versions can be fetched (GET /v1/wiki/revisions/{id}) – for comparing in the app, visible like the history
API: protection against concurrent wiki edits – with base_revision_id, PUT /v1/wiki/pages/{id} reports a conflict (409) instead of overwriting other people's changes
API: wiki pages can also be fetched by section and address (GET /v1/wiki/namespaces/{section}/pages/{page}) – follows old addresses and redirects like the website
API: the OpenAPI spec now fully describes wiki pages, the page tree and the bodies for creating/editing
API: the wiki page tree lists the last change per page (updated_at) – the app syncs offline pages faster
Forum: blocking now also applies to the forum – posts by people you blocked are collapsed (“Show anyway”), also in the app and search
API: the conversation list returns the last message as a preview, the other person with avatar and pages with a cursor
Apps: push notifications on Android go to separate channels per event (messages, mentions, events, applications, servers, system) and can be muted individually
Apps: the badge on the app icon on iPhone/iPad is now correct without opening the app
API: GET /v1 lists the public realtime connection data (Reverb key, host, port) – apps no longer need them built in
Moderation: forum posts can be reported through the central report dialog with reason and comment (also in the app)
Calendar: single events can be added to the device calendar as an .ics file (API and app)
API: the OpenAPI spec fully describes the request bodies for writing in the forum and in messages, deleting the account and the notification settings
Apps (change): admins and moderators can sign in to the app with their management permissions – only with two-factor authentication enabled and only for what their account has permissions for; everyone else signs in with member permissions as before. Personal tokens with write access to content/master data (e.g. news, squads, rules) now require the authenticator code when two-factor authentication is enabled
API (change, security): signing in with email and password through the API (POST /v1/auth/login) now grants management scopes like the app login – only with a matching permission and an authenticator code; before, the token got every requested scope (the account’s permissions still applied)
Forum: if you blocked someone, you no longer get notifications from them about replies in subscribed threads, mentions or quotes
Search: the forum search and the global search (website, app) no longer show a text excerpt for posts by people you blocked
Security: disabling two-factor authentication removes the management scopes from all API tokens and app sign-ins (tokens with management scopes only are revoked, audit log entry); the confirmation prompt says so
Downloads: members-only and squad downloads can now be downloaded in the app too (short-lived link via the API)
API: downloads name their game (game_info), not just its slug
Uploader: images and videos with visibility “members” are now shown in the app too
Apps: the member map gets its map tiles through our own server (the device never contacts OpenStreetMap)
API: the member map also names the country of each place (for grouping in the app)
API: events can be filtered by your own answer (e.g. only yes and maybe)
API: open votes include trial tasks and activity like the “Votes” page
Gallery: large videos can be uploaded from the app straight to storage and then submitted (more reliable on mobile networks)
Gallery: single items have their own link (an anchor on the album page opens the image directly), also for sharing from the app
API: your own profile lists the limits for avatar and banner (size, minimum dimensions, file types) – the app checks before uploading
Realtime: website and app learn right away when an avatar, banner or upload has finished processing (no more polling every few seconds)
Game servers: backups can be deleted and locked via the API; whoever starts a backup gets a realtime notice once it is done
Game servers: whoever may control a server sees in the app up front whether changes need four-eyes approval and which permissions apply
API: the OpenAPI spec fully describes the server control (bodies, query parameters, resources, backups, config preview)
API: the OpenAPI spec describes the bodies for announcing (pre-signed) and editing uploads
API: the OpenAPI spec describes applying, messages to the squad and the period/metric parameters of the stats; deleting an absence no longer requires form fields in the spec
API (bug fix): partially changing an application question via the API (e.g. only switching it on/off) no longer resets its other settings
API: a member's roles come with the assignment ID in the management view – so roles can be revoked in the app too
API: single reports can be fetched directly (e.g. for links in the app)
API: single audit entries can be fetched, the actor filter also accepts the profile name (slug)
API: member moderation names the person and whether an own avatar or a banner exists to remove
API: applications can be searched by the applicant's name
API: managers see archived squads in the squad list (to restore them in the app)
API: squad leaders get the squad roles to choose from even without the roles read scope (change squad roles in the app)
API: the OpenAPI spec fully describes application management (detail with vote, settings, tasks)
API: the OpenAPI spec fully describes the permission check (scope parameter, sources)
API: the application list shows the state of the vote, the detail your own vote and whether you may vote
API: application questions and task templates name their game
API: game management also gets inactive games via the API (with the flag active)
API: authors see their own news drafts in the list (also in the app)
API: the forum approval list names the thread and category of each pending post
API: active bans can be fetched page by page (no longer cut off at 200)
API: the OpenAPI spec describes the bodies for warnings and automatic levels
API: the OpenAPI spec describes editing news, home order and blocks and archiving squads with the correct fields
API: the OpenAPI spec describes log entries, caches and the clan settings precisely
API: the default home layout can be taken over so blocks can be edited in the app too

[0.26.0] – 2026-10-14

Apps: links to news, forum, profiles, squads, events, matches and the wiki can open directly in the app (deep link files under /.well-known/, new in .env: APPLE_TEAM_ID, APP_BUNDLE_IDS, ANDROID_PACKAGES, ANDROID_CERT_SHA256)
API (change): accepting rules (POST /v1/rules/{set}/accept) needs the new scope rules:accept (or profile:write) instead of just rules:read; the app requests it automatically, existing app sign-ins keep working. If you set APPS_CLIENT_SCOPES yourself, add rules:accept
API: the game server console token now names the origin apps must send to Pterodactyl/Wings (new: PTERODACTYL_CONSOLE_ORIGIN, defaults to the admin domain)
API: GET /v1/auth/scopes lists all token scopes with descriptions (for apps and personal tokens)
API: GET /v1/live returns the figures of the home page live ticker (also without signing in)
API: guest mode – public content (news, events, squads, member list and profiles, rules, matches, gallery, downloads, wiki, servers, pages, hall of fame, search) can be read without a token, exactly as on the website without signing in; separate rate limit per IP. It stays closed in preview and maintenance mode
Videos: the interim names FFMPEG_BINARY/FFPROBE_BINARY are gone – only FFMPEG_BIN/FFPROBE_BIN apply (default /usr/local/bin/…)

[0.25.2] – 2026-10-14

Admin → Forum → Reactions: no more server error when opening the page (the reaction list could no longer be read back from the cache)
App sign-in: if an app’s redirect address is not allowed, the error page names the rejected address and logs it – making APPS_REDIRECT_URIS easy to check

[0.25.1] – 2026-10-14

Security: “Unlock account” (admin → member) now only works for accounts locked by “This wasn’t me” and never replaces an existing e-mail address – previously lower-ranked accounts could be taken over this way
Security: wiki pages with very deeply nested template braces no longer slow down the server (limits and a time budget per page)
Security: event series previews, completing large uploads and requests for videos still being processed can no longer be used to slow down the server
Privacy: squad leaders only see a member’s online status, “last seen”, linked accounts and player IDs on the admin member page if the member shares them
Privacy: a ZIP export no longer stays behind after an account is deleted; the profile banner is now included in the export
Privacy policy: internal notes of the clan leadership, appearance setting in the browser, welcome post on Discord, videos in the media library

[0.25.0] – 2026-10-14

Light design as an option: choose between Dark (default), Light and System (follows your device) under Account → Settings → “Appearance” – applies to the website, wiki and admin. Without signing in, the switch sits at the bottom of the footer; the choice stays in your browser only (no cookie)
API: GET/PATCH /v1/me with the new field theme (dark | light | system)
New: media library (Admin → Content) – all images and videos in one place: search, filter by type, folder, uploader and date, maintain alt texts in German, English and French and see where an image is used. Your own images can be shared as clan assets (logos, banners, maps)
Choose “From library” everywhere: cover and text of news, pages, home page text, squad header and logo, sponsor logo, forum and wiki editor – or upload a new image right in the dialog. Images that are too restricted for the place (e.g. a “members only” image in a public news post) are locked so nobody sees a broken image or a secret link gets published
Alt texts (image descriptions for screen readers) in “My uploads” – they are used wherever the image appears; the forum now also supports [img=description]…[/img]
Deleting an image that is still embedded somewhere asks first and lists the places (also via the ShareX delete link)
Images shared to the library stay as clan assets without your name when you delete your account – all other uploads are deleted as before
API: media library under /v1/media (browse, usages, alt texts, sharing); covers and logos accept upload_id; DELETE /v1/uploads/{id} answers 409 upload_in_use while in use (delete with force=1)
Media library: deleting a gallery image or album keeps an image shared to the library – it is only deleted in the library, under “My uploads” or by moderation
News, pages and homepage texts: if the text contains images that are more restricted than the post (e.g. a “members only” image after the news became public), it is still saved – a notice names the images and links to the media library
API: meta.warnings[] with image_visibility_conflict when saving news, pages and homepage blocks

[0.24.0] – 2026-10-14

Uploader and gallery: upload videos from an iPhone (MOV/HEVC) and as MKV – they are converted to MP4 automatically (at most 1080p) so they play in every browser. Location, device and title are removed completely. Videos get a poster image (in “My uploads”, the gallery, the forum and when the link is shared). Every video is processed in the background – the link is available right away and works as soon as the video is done; if it is too long or damaged, “My uploads” shows the reason and the original is deleted. Unprocessed originals are never served
Without ffmpeg on the server, video uploads are rejected with “Video uploads are currently unavailable” (API: video_unavailable); images are not affected
Admin → System status and rog:golive:check: “ffmpeg (videos)” (version, libx264 present – red in production if missing) and “Video worker (media queue)”; new command php artisan rog:uploads:ffmpeg
Uploader: upload short videos (MP4, WebM) – on the website, via ShareX (screen recordings) and in the forum editor; playable right on the page, direct link i.rogclan.de/….mp4, in the forum as [video]. Size and length per role (default 25 MB and 60 seconds, adjustable under Admin → Uploads → Limits); location, device and title are removed from the file without transcoding the video. Gallery videos are now cleaned the same way
Forum: more reactions – instead of six fixed emojis there are now twelve to choose from (including 👏 🎉 🤔 😢 👀 🙏), via “+” on every post; the leadership manages them under Admin → Forum → Reactions (emoji, name DE/EN/FR, order, active). Existing reactions are kept
Forum editor: emoji picker with all Unicode emojis, search and groups in German, English and French – loads only when opened, without third-party servers
Rules: new option “Lock until accepted” per rule set (Admin → Rules) – anyone who has not accepted the current version cannot write in the forum, messages, news comments or the gallery, but can still read; a notice bar leads to the rules. Account, data export, account deletion and log out are never locked
Rules when joining a squad (trial, acceptance or added): notification, and the squad page and application status show the squad and game rules with “Accept” – including rules only the squad may see
Calendar: extended series – “every N days” (e.g. from Oct 15 every 2 days, regardless of the weekday), weekly up to “every 12 weeks” and monthly (“on the 15th” or “on the last Friday”); no end, until a date or after a number of dates; “Next dates” preview right while editing. The local time stays the same across DST changes
Calendar: editing a series date – “this one only”, “this and all following” (splits the series) or “whole series”, also with a new recurrence; answers and line-ups are kept, with a new time everyone who accepted is notified. Dates deleted or cancelled on their own do not come back
Discord: at most the next 3 dates of a series are in the channel at a time – even daily series do not flood Discord
API: recurrence structured or as RRULE (RFC 5545), new preview POST /v1/events/recurrence-preview

[0.23.0] – 2026-10-14

Profile: a member's Twitch channel can be watched right on the profile – with live indicator, title and game; the player only loads after a click (no data goes to Twitch before), “Always load” is only remembered by your browser
Profile: game stats at a glance in the overview – kills, K/D, playtime and awards per game plus the latest rounds; choose who sees them under Profile → Edit → “More visibility” (default members, “Public” also shows them to guests, “Only me” hides them including the “Stats” tab)
Profile: member card for sharing – an image with name, avatar, rank, squads, badges and “Rebel since” (public details only); download it or copy the link under “Share”; shared profile links show the card as preview image
Fixed: the protective limits of individual features (e.g. avatar upload, search, forum preview, sending messages) counted together – searching a lot could suddenly block uploading an image (“Too many requests”). Now every feature has its own limit
API docs: ready-made Bruno collection to download (all endpoints with examples, environments production/staging/local); Postman and Insomnia import the OpenAPI spec directly
API: new realtime channel presence-squad.{id} – apps see who of their own squad is online right now (only with the online status shared)
Fixed: members with a Steam status showed “presence::presence.labels.steam” instead of a text – now “Playing <game> on Steam”; missing status texts never show the raw key again
Admin → Permission check: check a single permission (“May X do this here – and why?”) with the reason (owner, deny/allow exception, role); scope selection now also for servers; exceptions show their reason
Admin: permission templates may only contain permissions you hold yourself (as in the permission matrix)
API: permission check for a single permission, allow/deny exceptions and permission templates (create, change, delete, apply to a role) – for the admin app
Admin → “View site as member” is now strictly read-only and limited to 15 minutes: starting needs a fresh authenticator code, never for owners or members at the same/a higher position, messages, notifications, account and settings stay hidden; the member gets notified. By default only the owner may do this (grantable in the permission matrix)
Security: while “view site as member” is active nothing can be submitted or changed (forms, actions, real-time channels, API) – not even after the time is up
API: admin overview with the dashboard key figures, onboarding pipeline status (open applications per status and squad, overdue reviews, ending trials and votes) and your own onboarding checklist – for the admin and member apps
Admin → System status: monitoring export for external monitoring – Prometheus endpoint /health/metrics (with HEALTH_TOKEN), JSON/Prometheus via the API and as a download; system states only, no personal data

[0.22.0] – 2026-10-13

Gaming platforms: Nintendo friend codes are always stored in upper case (SW-…)
Calendar: custom event types like “Raid”, “Alliance event”, “Fun night”, “Server maintenance” or “Meetup” – with emoji, colour, default visibility, global or for one squad only; managed under Admin → Content → Event types (sort, archive), new types can also be created right in the event form (“+ New type …”). Calendar, lists, Discord, iCal and notifications show name and emoji; filter by type in the calendar
API: deprecated endpoints announce themselves via Deprecation/Sunset headers (for app and bot developers)
Account → Your data: the data export is now also available as a ZIP with your own files (avatar, banner, images, attachments, gallery videos) – created in the background, you get notified, available for 7 days, once per 24 hours; JSON is still available directly
Admin: squad leaders see the members of their squads under “Members” (read-only, without email) – also via the API
Messages: “Delete for me” – hide any message just for you, the others still see it; delete a whole conversation for you (it comes back with the next message, showing only the new ones)
Wiki: you now write new pages in wikitext as in MediaWiki/Wikipedia – formatting, headings with a table of contents, lists, links (sections, pipe trick, interwiki, other languages), tables (sortable, collapsible), templates with parameters, parser functions (#if, #switch, #expr, #time …), categories, redirects, images and galleries, footnotes, highlighted code, tabs, formulas and signatures (~~~~); existing Markdown pages stay as they are, the format can be switched per language in the editor
Wiki: wikitext toolbar in the editor, edit single sections ([Edit] at every heading), preview with all features
Wiki: new “Categories” and “Files” pages – embed images with [[File:Name.png|thumb]], upload them in the editor or under “Files”; files are as visible as their section
Wiki: new “Templates” section for your own templates ({{Name|…}}); the existing infobox templates keep working
Wiki: formatting help with a “Wikitext” tab – every example rendered by the real renderer
Security: wikitext allows no free HTML (only checked tags and styles), links and transclusions never reveal anything from sections you may not read; limits against endless templates and oversized pages
Fixed: the certificate check (go-live check and system status) reported valid certificates of domains with a redirect as invalid; it now checks directly via TLS (chain, hostname, remaining validity – warning under 14, error under 3 days) and names the exact reason
Squads, rule sets and forum areas can link a wiki page (“Read in the wiki” card); in the forum, [wiki]Page[/wiki] and [[Area:Page]] link wiki pages – you only see what you may read in the wiki
Admin → Homepage: “Preview” shows the homepage with unsaved changes exactly as it will look – per language and as a guest or a member, only for you and for 30 minutes
Profile: your own banner for the header of your profile page (3:1, recommended 1500 × 500) – upload or remove it under Profile → Edit; cropped, without metadata; moderators can remove unsuitable banners
Admin: new page Tech → System tools (permission “System tools”) – clear caches one by one (configuration, routes, views and events are rebuilt right away in production), read, filter and download log files (secrets redacted), view, retry or delete failed jobs; everything in the audit log
Discord: new welcome post – when an application is accepted, the website welcomes the new member in the welcome channel (channel, mention and DE/EN text configurable under Integrations → Discord bot, off by default); only name, squad and game, only the person is mentioned

[0.20.0] – 2026-10-13

Account: change your e-mail address – confirmation link to the new address, notice with “This wasn’t me” to the old one; the old address stays reserved for 7 days
Account: “This wasn’t me” secures the account – old address restored, all sign-ins, tokens, passkeys and the password removed, unlock via Discord and a new password; admins can unlock secured accounts after verifying the person’s identity
Account: change your password or – for Discord/Steam accounts – set one for the first time; other devices are signed out, API tokens too if you choose
New notifications “News published” and “Game server back online”: bell only by default, email/Discord/push opt-in; for these two you can also switch off the bell. Once per post, only to people allowed to see it, several posts or servers bundled; server starts only after at least 5 minutes offline, at most every 6 hours per server
Gallery on squad pages (“Gallery” tab) and as a “Gallery” homepage block (latest images or one album) – only images you may see, guests only public ones
Dashboard: new tiles “Forum: new posts” and “Unread messages” with counts and the latest entries
Dashboard: “Discord: in voice” shows who is in which voice channel right now – members only, and only members who share their online status; private channels appear without their name
Dashboard: “Birthdays this week” – day and month only, never the age, following the profile visibility
Admin: internal notes on members (pin, edit, delete) for admins and leaders – the member does not see them, but they are part of their data export; deleted 6 months after leaving
Privacy: internal notes on applications are now part of the applicant’s data export (without author); application messages were previously missing from the export
Discord bot 1.4.0: new /member <name> command – member card with rank, squads, badges and a link to the profile, public profile details only, with name suggestions; only you see the answer
Referral and invite links of games automatically get a short link (rogclan.de/…) with click statistics for game managers; the squad page and the application confirmation link through it. The application confirmation now shows the Discord invite, clan invite and the game’s referral link
Fixed: “members only” referral links were visible to every logged-in account, now only to clan members
Profile: new section “Gaming platforms” – enter your IDs for PlayStation, Xbox, Nintendo (friend code), Epic Games, EA, Ubisoft Connect, Battle.net and Riot so others can add you as a friend; visibility per entry (default: members only), shown with a copy button in the profile tab “Accounts”, self-reported and not verified
Admin: the list of gaming platforms can be extended (name, icon, format, active/deactivated) with the new permission “Manage gaming platforms”

[0.19.1] – 2026-10-13

Security: adding and removing passkeys, managing two-factor authentication, creating personal API tokens and linking or switching Discord/Steam now require confirming your identity again (password, an older passkey or – without a password – Discord); with 2FA enabled, new passkeys, re-enabling, disabling and recovery codes additionally need the authenticator code
Security: bell and e-mail notice on every change of linked accounts; “sign out all other devices” (optionally including all API tokens) and “forgot password” now reliably end old sessions
Admin area: after 30 minutes without activity the two-factor confirmation is required again

[0.19.0] – 2026-10-13

Game servers: form templates for map rotation, server name, slots, password (ET/RtCW, CS2) and Minecraft settings – also for roles without file access; passwords are never shown
Game servers: config editor with syntax highlighting; copy configs as backups (.bak/.old), rename and delete backups
Game servers: optional four-eyes approval per server or file – changes without the approval permission are only written once a second person approves them, with notifications
Game servers: RCON for ET/RtCW, CS2 and Minecraft – console in the admin, ban and unban players, ban list and whitelist with member recognition; timed bans expire automatically
Moderation: new “game server” ban – bans via RCON on all matching servers, with expiry and a dry run without write permission
Game server security: bans validate player IDs/names strictly per game (CS2 as SteamID64, no Minecraft selectors) and never ban when another person claims the same ID; RCON only to public addresses; on servers with four-eyes approval, console commands and backup restore also need the approval permission
Stats for Return to Castle Wolfenstein, Counter-Strike 2 and Minecraft: rounds, matches and play sessions from our servers; you are recognised by the GUID, Steam ID or Minecraft UUID in your profile – never by name
Stats: weapons and objectives (dynamite, bomb, revives …) per game in the profile, headshots and assists for CS2, new round page with all members of a round
Stats: awards per round and week (most kills, best K/D, headhunter, objective hero, marathon player) on the game page, round page and profile
Squads: new “Stats” tab with the numbers of the current squad members, top weapons and awards
Minecraft: totals from the world statistics (play time, deaths, players and mobs defeated) in the profile
Stats: player IDs entered by several members count for nobody (hint under Admin → Stats); for CS2 the Steam ID of the linked Steam login wins
Privacy: archived game logs no longer contain chat texts and private messages (/msg, /tell …); Minecraft never stores self-chosen item names
Discord sign-in for the Windows and mobile apps: sign-in in the system browser with PKCE, one device token per device; each app may only request its allowed scopes, signing in again on the same device replaces the old access
Account → “Apps & devices”: view, rename and sign out app devices; admins can see a member’s devices (read-only)
Push notifications to the apps (Android/Windows via Firebase, iOS via Apple) – the “Push” channel now covers browser and apps; pushes contain no content (only a generic title such as “New message”), only with consent to the transfer to Google or Apple
System status “App push” (not set up / dry run / active)
Security: personal API tokens and app sign-ins with management scopes require the authenticator code when two-factor authentication is enabled

[0.18.0] – 2026-10-13

Automatic badges for forum posts (100/500/1000) and clan war wins (10/50/100) – awarded daily and right after the post or win; once earned they stay
Messages: posts of people you blocked are now also left out of previews, the unread counter, search and the API, and quotes of them are hidden; suspended accounts are skipped in groups; at most 20 new conversations per hour
Fixed: contact form and registration API no longer fail with a server error on invalid input
Fixed: download and news categories with the same name can be created again; download admin and download API no longer crash for squad managers
Fixed: downloads and gallery albums visible to a squad always require a squad; rejecting an album's cover image picks a new one
Events: pick a game server as the location – the event page shows server, address, live status and “Connect”; members-only servers stay hidden from guests, on Discord and in the bot (“Game server”), also in the API and iCal
Squads: new “Internal” page for squad members – upcoming events with line-ups, squad chat, squad forum, downloads and albums in one place, also via the API
Forum: upload images right in the editor – button next to [img], drag and drop or Ctrl+V (new thread, reply, edit); images are as visible as the area, your role's upload limits apply
Wiki: images in the editor via drag and drop and Ctrl+V too; move pages with their subpages to another section, old addresses and links redirect
Wiki: a changed page address redirects from the old one; images in squad sections are private with a secret link instead of "members only"
Security: hidden or pending forum posts can no longer be quoted; wiki links into sections you may not read no longer reveal whether a page exists there

[0.17.1] – 2026-10-13

Security: wiki pages and page lists of protected sections (e.g. "Intern") could be read through a manipulated page view – fixed
Homepage: a Twitch block crashed the page – fixed

[0.17.0] – 2026-10-13

Admin → Translations: review every text of the website per language – missing, empty and still-German texts are flagged – and put your own texts over the language files (plain text, placeholders stay), also via the API
Own avatar: upload a profile picture (JPG, PNG, WebP, GIF) instead of the Discord/Steam picture – cropped square, without metadata; moderators can remove inappropriate pictures
After unlinking Steam, a Steam avatar now disappears right away
Game server control (power, console, files, backups) only on the production instance – test environments never switch real servers

[0.16.0] – 2026-10-12

Discord bot 1.3.0: slash commands /rules, /server and /event – rule sets, game server status and upcoming events, public information only and visible only to the caller
Admin → Integrations → Webhooks: send events (server online/offline, news, events, match results, rules, squads, new privacy policy) HMAC-signed to your own receivers, with delivery log, retries and test – also via the API
Security: notification by bell and email when your account signs in to the admin area from a new device
API documentation: correct status codes (201/202) for create and queued actions
Discord bot admin: invalid feeds show an error message instead of crashing the page

[0.15.0] – 2026-10-12

Admin → Settings: clan name, tag, founding year, Discord invite, social links and maintenance mode for website and wiki – changeable without a deployment, also via the API
Admin → Menus: customise main menu and footer – order, hide, rename (per language), move entries between groups and add custom links to CMS pages or addresses, also via the API
Admin → Mail templates: customise greeting, sign-off and note of every mail plus subject and intro of individual mails per language, with preview and a test mail to yourself, also via the API
All mails in the RoG design with German, English and French texts instead of Laravel's English defaults; user content (names, titles, messages) can no longer inject links or images into mails

[0.14.0] – 2026-10-12

API: CORS only for the platform's own domains and allowed app origins
Discord: new rule sets and new rule versions are announced in #announcements
Discord bot: slash commands are registered only once writes are allowed (dry run changes nothing on Discord)
Discord bot can run on web01 under Supervisor and restarts itself after every deploy
Staging rebelsofgaming.dev: basic auth and all mail redirected to one address
Privacy policy: section on the Discord bot (verification, AutoMod, live notices)

[0.13.0] – 2026-10-12

Discord bot controlled from the admin: verification, welcome, role selection, AutoMod, bot status and /status – no restart needed, dry run while the website may not write
Discord server structure as a target state with comparison; applied only after confirmation, never deleting
Squad channel templates with game category, player and lead role and visibility per channel; setup adopts what exists instead of creating duplicates
Permission check for Discord and TeamSpeak
Posts on Discord: news, Twitch live (with consent) and RSS feeds
Wiki: formatting help with every supported feature

[0.12.0] – 2026-10-11

Version shown in the footer of every page, and this changelog
Admin: notice about new versions and a system status page with traffic light and instructions per check
The status page also shows TeamSpeak and the Discord bot
Integrations without credentials (Twitch, Steam, Faceit, Supercell) are skipped quietly and shown as "not set up" in the system status

[0.11.0] – 2026-10-11

Security headers and a Content Security Policy on every page
Platform monitoring with alerts by mail and Discord
Daily database and file backups, weekly restore test, offsite copy
Browser push notifications fixed
Multilingual content (news, pages, legal texts) is stored cleanly per language
ShareX: one-click setup, delete link for uploads

[0.10.0] – 2026-10-11

First production release with stages 1–10:

Sign-in with Discord, Steam and e-mail, two-factor protection, roles and permissions
Members, profiles, squads, leadership page, member map
Discord bot, TeamSpeak integration, applications with trial period and vote
Forum, direct messages, real-time notifications
Calendar, matches, Hall of Fame, chronicle
Game servers with live status and control, playtime statistics
News, pages, home page builder, gallery, downloads, image uploader, short links
Twitch, Steam and Faceit displays, moderation, legal texts, wiki and REST API