Tested LGM-OS live with their community, and 2.1.0 comes out of that stream: the keyboard in the installer, windows that snap, “Format…” for disks from another system, compose.yaml and the new-version notice. With ideas from @speybondon, @eldesan_79, @epreinhad1609, @jcollins25 and @jason-budney7624.
System → LGM-OS → Update. While it works it shows the stage and a percentage; the panel restarts halfway and the bar carries on counting when it is back.
From the console
sudo lgm update
On its own
It can be left on automatic: either a notice in Notifications, or installed without asking every 6, 12 or 24 hours, or every week.
If something goes wrong
The update is atomic: it builds and checks before promoting, and if the panel does not answer afterwards it rolls itself back to the previous version.
The two long steps are normal. Installing the system packages and building the interface each take several minutes without any sign of life. Building the interface needs memory: on a tight machine, close the virtual machines first.
What's new
257 versions published. The last two are open; the rest unfold.
No version mentions that. Try a single word —«backups», «camera», «disk»— or a version number.
Recycle bin: what was deleted from Windows in “My drive” was lost instead of going to the recycle bin. Machines already installed fix themselves when they update.
Recycle bin: when something cannot be restored, the notice says why and what to do.
Installation (new ISO): it asks for the keyboard layout (Spain, Latin America, US, UK…); it used to be tied to the language. Spotted in DB Tech's live stream.
Installation (new ISO): at the end it asks you to remove the USB stick and waits for «Continue» to restart; it used to restart on its own and, with the stick still in, the installer came back. Spotted in DB Tech's live stream.
Regional settings: the NAS keyboard layout (console and server screen) can be changed from the panel. Spotted in DB Tech's live stream.
Desktop: windows snap: dragged to an edge they fill that half, to a corner the quarter, and «Tile the windows» lays them all out. Idea from @speybondon in DB Tech's live stream.
Storage: «Format…» empties a disk from another system (Proxmox, an older NAS, an LVM) in seconds so it can be used for a volume, with a double warning. Idea from DB Tech's live stream.
Storage: a disk with another machine's ZFS pool can now be used; it used to show as locked with no way to erase it. Spotted in DB Tech's live stream.
Package Center: it tells you when an application has a new version; with “Update itself” it already updated overnight. Idea by @eldesan_79 and @speybondon in DB Tech's live stream.
Changes
Applications: each one's recipe is saved as compose.yaml, Compose's current name; those already installed stay as they are until touched. Correction by @speybondon in DB Tech's live stream.
Files: the folder path sits at the top, in the header, and the footer only appears when needed: more room for the list on scaled laptop screens. Idea from @epreinhad1609 in DB Tech's live stream.
Virtual machines: the NAS no longer offers system images (Debian and Ubuntu used to be one click away): machines are created from the ISO you choose or upload. Flagged by @jcollins25 and @jason-budney7624 in DB Tech's live stream.
Fixes
Storage: another system's boot disk (Proxmox, TrueNAS) is no longer adopted automatically, and adopting a pool only mounts what hangs from its folder, never on top of the system.
Storage: a newly created or adopted ZFS pool, the cache disk and USB drives stayed unmounted for the panel. If a pool said «created but could not be mounted», delete it and create it again.
Creating a volume: a disk with another system's LVM or RAID running can now be used; an administrator's password is asked for to release it before erasing it.
Whole panel: a refusal from the privileged service is no longer shown as «cannot reach nas-helper»; its reason is shown instead.
Files: what LGM Connect uploads to Movies, Gallery or Music can be deleted and renamed from the panel; what was already uploaded is repaired on its own when updating.
Files: when something cannot be deleted, the notice says why.
Installation: if a step fails, the server screen says which one, why and which attempt it is on, instead of staying at its percentage as if it were moving. Spotted in DB Tech's live stream.
Whole panel: the notices that something went well (folder created, replica stopped, scan finished…) appear in English or German when the panel is in that language; they came out in Spanish. Spotted in DB Tech's live stream.
Updates: the progress, the log and the reason for a failure appear in the panel's language. Spotted in DB Tech's live stream.
Storage: when adding a cache or spare disk, the disks not offered are listed with their reason. Spotted in DB Tech's live stream.
«My Drive» over SMB as \\NAS\home: every account reaches its own at the same address.
Changes
Creating a volume on disks with data from another machine no longer requires erasing them first: the last step says what is on each one and asks you to confirm.
Users and groups: each account's card shows its «My Drive», and Shared folders lists the «home» folder.
Installing from the USB stick: it stayed on «Installing the backend», retrying forever, since 2.0.1. A machine stuck like that finishes on its own as soon as this version reaches it.
Server screen: the browser's own notices were always in English.
Backups: rsync backups, to a disk or to another machine over SSH, failed from the second version onwards.
Backups: the "Remote server over SSH" destination showed as unavailable ("The SSH client is missing") even when installed, and testing it failed when checking it could be written to.
Replicas: testing a ZFS replica and failing over to the other machine failed when asking it for its volumes.
Users: removing the end date of a temporary account did not remove its expiry in the system nor reopen its folders.
Users: giving SFTP access to an account on a NAS with no volume yet failed.
DNS and DHCP: the NAS DHCP server could not be switched on, and with it on no DNS change was saved: the NAS refused its own file because of the lease file line.
Documentation: «When something is not working» explains what to do when "The «…» setting was damaged" appears, also when that leaves nobody able to sign in to the panel.
Accounts and settings: the panel no longer marks a healthy setting as damaged after a failed read; it happened with the accounts («The «users» setting was damaged») and nobody could sign in.
Accounts and settings: on update, settings set aside this way go back in place by themselves.
Website: «Sign out everywhere» in your account, and the SHA-256 fingerprint of each LGM Connect installer under Downloads to check what you downloaded.
Fixes
Folders from outside: connecting them through your domain or LGM Connect always ended in «the connection with the NAS folders was cut»; they now mount.
Virtual machines, cameras and terminal: through LGM Connect the machine screen, the live camera view and the terminal did not open; at home they did.
LGM Connect: screens and live view open through the tunnel even with a NAS not yet updated.
Antivirus: every scan failed with «setpriv: activate capabilities: Operation not permitted»; it scans again.
Security
Folders from outside: a web file (HTML, SVG) in a folder no longer opens inside the panel: it downloads. It used to be able to act with the session of whoever opened it.
Clouds: what each cloud mounts can only be opened by its owner and the panel; any program or app on the NAS used to be able to read and write it.
Two-step verification: with the panel reachable from the internet (LGM Connect, DDNS or a domain), whoever administers the NAS needs it; without it, they are asked to turn it on.
NAS authority: it can now only sign your home names and your domains. Install it again on your phones and computers from External access so they apply the limit.
Panel: the web server and sessions move to versions with their security flaws fixed.
LGM Connect: nothing that comes from the NAS can run code inside the app, and the window does not navigate away from it.
LGM Connect: sharing or syncing a computer folder only works with one picked in the dialog, and never with a system folder or the whole personal folder.
Apps: containers start unable to gain privileges and without two dangerous capabilities Docker granted by default.
Passwords: the most common ones, also with numbers at the end, are no longer accepted. The list lives inside the NAS: nobody outside is asked.
LGM Connect: the encryption library moves to a version with a TLS flaw fixed.
Website: the two-step verification secret is stored encrypted, and there is a place to report a security issue (lgm-os.com/seguridad).
External access: with the panel published on your own domain, a virtual machine's console, the terminal and the camera live view now connect; they used to sit at «Connecting…» forever unless you ticked a box labelled «WebSockets». The box is gone: it is always on.
LGM Connect: each connected folder is named after the folder in Explorer; they all showed up as «LGM», so with two connected there was no telling them apart.
LGM Connect: a folder that never starts serving is no longer left in place as if it worked —opening it made Windows say «the system cannot find the device specified»—: it is removed and the reason is shown.
LGM Connect: at home, folders connect over the home network even when the NAS was added by its domain or its name; they used to go over the internet every time.
LGM Connect: connecting a folder no longer thinks for half a minute before failing: if it cannot be done from outside, it says so straight away and what to do.
LGM Connect: "My drive" is no longer tried over the internet, where the NAS does not serve it; away from home you are told to open it in Files.
Accounts: changing your password now updates the WebDAV one too (folders from outside, calendar and contacts). If yours had fallen behind, sign out of the panel and back in.
Changes
LGM Connect: connecting a folder installs whatever the computer is missing (WinFsp on Windows) instead of sending you off to another page for it.
The panel interface is now built by an unprivileged account on install and update.
Items marked «(audit)» come from Benjamin Weber's report (ITSWEBER), as does most of 2.0.0.
New
Your folders from outside home, on the panel's own address. The NAS serves your folders at the same address and port you use to reach the panel, so there is no extra router port to open. Needs WebDAV turned on under Control Panel → Shared folders.
Fixes
LGM Connect: connecting a NAS folder while away from home now works; it used to end in «uses its own certificate» or «cannot be reached», whatever was turned on.
LGM Connect: with both an LGM Connect address and your own domain, both are tried until one connects, not just the one in use.
Synced folders: the instructions for the computer give the address that really works from outside home.
Synced folders: the «pass finished» report the computer sends now reaches the NAS; it used to be lost, and the panel ended up saying that computer had stopped syncing.
Cameras: watching a single camera now asks for the best picture it can give at that moment. The small stream was always served, so a 2K camera showed at 640 px even when nobody else was using it. The wall keeps the small one, which is what it lives on.
Cameras: the photo you save to the Gallery comes out at full size, no longer shrunk.
Cameras: the fallback live view — for browsers that cannot play the camera's video — no longer blows up a small picture: upscaling only makes the blur bigger.
Security
The panel's Python dependencies are installed with their hashes pinned, and are prepared without privileges: when installing or updating, no downloaded package runs code as root. (audit)
Dedicated to Benjamin Weber (ITSWEBER), whose external audit brings most of what changes in this version. Items that come from the report are marked «(audit)»; the others do not come from it.
New
First setup: creating the first administrator asks for the one-time code shown on the NAS screen (or with sudo lgm alta). (audit)
Package Center: each app's page says which catalogue it comes from, who maintains it and where to get help; the catalogue licences are under Catalogue sources. (audit)
The website: third-party licences page and legal notice. (audit)
The website: What's new opens with credits for those who have helped improve LGM-OS, each with their own page.
LGM Connect: folders from this computer on the NAS. Share a PC folder and the NAS reads it (to back it up, or for Plex) while the app is open, at home or away. Read-only.
LGM Connect: “Connection” screen. Tests each route to the NAS and says where it fails and what to do, with the app log live and a report for getting help, without any passwords.
LGM Connect: the side menu hides and comes back with one click.
Package Center: n8n, Uptime Kuma, Home Assistant, Gitea, Nextcloud and others warn before installing that whoever opens them first creates the administrator account; Nginx Proxy Manager states its factory login. (audit)
Changes
Terminal and consoles: opening the terminal, the root session or a container console asks you to confirm your password and second factor. If you had a tab open, reload it; in LGM Connect, update the app. (audit)
Updates: the source repository can no longer be changed from the panel: do it over SSH with sudo git -C /opt/nas/src remote set-url origin <address>. (audit)
Updates: a version older than the installed one is not installed; to go back, use «Go back to the previous version».
Updates: each release carries only what the NAS uses and is half the size. (audit)
Privacy: the machine's technical details are no longer sent to lgm-os.com by default; switch them on in Control Panel → Licence if you want to share them with support. (audit)
Licence: the periodic report to lgm-os.com no longer carries your licence key, only a fingerprint that cannot be used as a licence. (audit)
Licence: the licensing check becomes daily, and the public IP is only looked up with dynamic DNS, the VPN or something published. (audit)
Installation: the boot menu and the language screen are in Spanish, English and German, with proper umlauts, and the time zone follows the chosen language. (audit)
Installation: the progress bar moves while the system packages install. (audit)
Machine console: speaks the language chosen at install time from the first boot. (audit)
Server screen: the browser starts without Google services and in the NAS language. (audit)
New installs: the web server and the media server no longer start by default; they start when WebDAV, external access or Media is turned on. (audit)
Accounts: «Close all sessions», pressed by an administrator, also closes every other account's sessions. (audit)
Certificate: the prompt to install the NAS authority explains what trusting it implies. (audit)
The website: says where the apps come from (31 of ours and more than 3,000 from the community) and who builds LGM-OS. (audit)
The website: the privacy policy details everything the NAS sends, to whom and when, now also in German. (audit)
Virtual machines: the screen toolbar no longer hides by itself: it folds and unfolds with one click on its handle, and stays the way you leave it.
Firewall: it now filters the applications' ports too: new ones open only to the home network, and in Security → Firewall you close them or open them to any source. The ones you already had stay open as they were. (audit)
Updates: the interface no longer declares its own version, different from the system's. (audit)
Unused services: on update, Apache and the media server are switched off if nothing uses them; a site or folders set up by hand keep them running. (audit)
Printer: on new installations CUPS no longer starts by default; it starts when you share the printer. (audit)
Server screen: with no monitor connected, the full-screen panel does not start or use memory; it starts when one is plugged in. (audit)
Your first volume: the assistant names the volume and the first folder in the panel's language; existing volumes keep their names. (audit)
First setup and User and group: they say which account opens a folder from another computer and warn when an administrator lacks «Shared folders». (audit)
Package Center: an app's page warns when the firewall has its port closed and it will not open from other devices. (audit)
Fixes
Storage: replacing a failed disk in a Btrfs volume now works; before, it did nothing and gave no warning. (audit)
Storage: a failed disk replacement now sends a notification with the reason and is recorded in the Log Center. (audit)
Storage: a missing disk in a volume shows as "missing" instead of "ONLINE". (audit)
Storage: a disk that is plugged back in is recognised as the missing one, and the notification says what to do. (audit)
Storage: creating and deleting a volume replies fully in the panel's language. (audit)
Notifications: disk connected, disconnected and missing-from-volume alerts come out fully in the panel's language. (audit)
Your first volume: empty but small disks say why they don't qualify instead of showing as in use. (audit)
Your first volume: with three or more disks it suggests parity when ZFS is loaded. (audit)
Cameras: since 1.92 recording did not start when the recordings folder was shared; it repairs itself on update. (audit)
Cameras: a camera that is not recording stops showing «Recording» after two minutes and gives the reason. (audit)
Shared folders: creating a folder with SMB or NFS opens its port in the firewall. (audit)
Package Center: Community Applications apps with old-style templates (Emby, Plex, GitLab…) install with their ports, folders and variables. (audit)
Package Center: PUID, PGID and the time zone use this NAS's values. (audit)
Package Center: Big Bear recipes no longer show part of a hash as their version. (audit)
Snapshots: restored files no longer come back with the execute permission. (audit)
Configuration backups: restoring no longer turns off the two-step verification accounts have on this NAS; whoever must turn it on again is told.
Licence: the "Share technical details" text says what is always sent and what only goes with it on. (audit)
The website: no longer claims the code isn't public: the code of everything that runs on the NAS ships with every release. (audit)
The website: the offline licence is explained as it is: the trial and the activation need a connection once. (audit)
The website: What's New and the documentation announced one version more than the published one.
Clouds: those already mounted are brought up to date with each update; until now they kept the settings they were mounted with.
LGM Connect: with the NAS down, a folder connected from outside home no longer freezes Explorer for minutes.
LGM Connect: folders connected from outside home no longer freeze after a while, and one that disconnects by itself no longer shows as connected.
LGM Connect: closing the app releases folders connected from outside home instead of leaving them hanging.
External access: the DuckDNS certificate is now issued; the system rejected the command that requests it.
Firewall: the screen no longer says SMB, NFS and WebDAV stay blocked: whatever you switch on from the panel opens its own port. (audit)
Country blocking: a country without an IPv6 list no longer stops the whole firewall from loading.
Files: opening a folder on a cloud, another computer or a disk that is slow to answer no longer leaves the whole panel unresponsive.
Clouds: a MEGA cloud now opens as a folder; it connected but never got mounted.
Package Center: in Catalogue sources, a source that brings applications no longer shows in red because of repeated or unsupported ones.
LGM Connect: errors from the NAS and from sharing a folder from this computer show in the app's language.
The website: the download and installation guide, now also in German, describes the current installer.
Installation: with several disks the Debian partitioning menu no longer appears: the wizard asks which disk the system goes on and, if it holds data, says what is on it before erasing it. (audit)
Installation: the boot loader goes on the system disk, not on the first disk of the machine.
Installation: the first boot no longer says LGM-OS could not be prepared when the installation went fine.
LGM Connect: «Alerts on this device» now shows the NAS alerts; until now none arrived.
Firewall: the rules the NAS opens by itself are shown in the panel's language.
Package Center: a community application's folders are labelled in the panel's language.
Desktop: the «Updates» widget no longer says «No source repository» on a NAS installed from the ISO.
System check: the warning about a DNS server that does not answer now also appears in English and German.
NFS: with the firewall on, NFSv3 mounts and showmount work again: its helper services use fixed ports, open to the home network only. (audit)
ZFS: the warning that a new kernel has been left without ZFS works again; it used to always report the machine as fine.
Package Center: the in-house apps (Vaultwarden, Nextcloud, Jellyfin…) no longer appear in Spanish with the panel in English or German, neither their description nor the install fields. (audit)
Package Center: updating also brings the in-house recipes (Vaultwarden, Gitea…) up to date on NAS already installed; any you changed by hand stay as they are. (audit)
Package Center: the catalogue a new NAS ships with has ports, author and support link; Emby opens on port 8096. (audit)
Package Center: NAS units already installed rebuild the catalogue when updating instead of waiting for the weekly sync. (audit)
Package Center: Community Applications apps no longer land almost all in «Other»: each one appears in its own category. (audit)
Package Center: CasaOS and Big Bear apps ask for their settings at install (user, password, addresses) and the NAS generates any password you leave empty.
Package Center: an app published under the same name by several authors appears once, with the most complete template.
Package Center: Community Applications descriptions no longer show markup such as «[br]» or «[b]».
Storage: a mirror of three or more disks shows the space that actually fits, the same figure the assistant gives, not two thirds of it. (audit)
Storage: after restarting with a failed mirror disk, «Replace» no longer refuses: it mounts the volume with the remaining disks and replaces the missing one. (audit)
Storage: a new disk larger than the one it replaces is used in full. (audit)
Storage: whatever was written while the mirror was missing a disk is stored twice again once the replacement finishes. (audit)
Notifications: when a volume is not mounted because a disk is missing, the alert no longer says it «keeps working»: it says its folders are unavailable until the disk is replaced.
Shared folders: the administrator created in first setup now opens them from other computers with their NAS username and password. On a NAS already set up, tick «Shared folders» for them in User and group. (audit)
VPN: the client configuration file and the address warnings come out entirely in the panel's language. (audit)
Updates: each version's package carries the same number it is published under. (audit)
The website: storage is described as it is: Btrfs by default, ZFS as an option, and parity (RAID 5/6) only with ZFS. (audit)
The website: the feature list no longer says the NAS updates from a git repository: it uses signed packages. (audit)
The website: the installation guide warns that the first boot, the long part, can take an hour or more. (audit)
The website: the «What it can do» table is translated on the German site and no longer shows an empty card on the English one.
The website and Package Center: they speak of around 3,000 community apps, not 2,000.
The website: in the demo, window and tab titles follow the page language.
Security
Updates: each version's signature is also checked by the part of the system that installs it. (audit)
Updates: hardened updating from a git repository. (audit)
Updates: building the interface no longer runs its dependencies' install scripts. (audit)
First setup: the console account password is no longer stored in a file readable by the whole system. (audit)
System helper: hardened argument validation for several internal commands, the shared-folder configuration filter and writes in data folders. (audit)
Files: each folder's recycle bin can only be seen, emptied and restored by those with permission on it. (audit)
Files: search only returns files from the searcher's own folders. (audit)
Files: restoring previous versions requires write permission. (audit)
Documents: hardened saving from the editor. (audit)
SFTP: jailed accounts can no longer create links. (audit)
Accounts: regenerating second-factor backup codes has the same attempt limit as signing in. (audit)
Accounts: «Close all sessions» also renews the session key. (audit)
Invitations: an invitation link used twice at once sets only one password. (audit)
Panel: live connections are only allowed to the NAS itself. (audit)
Licence: a portal reply can no longer swap your licence for a worse one or expire the trial early. (audit)
Package Center: recipes' example passwords are replaced at install with unique ones, shown on the app's page. (audit)
Vaultwarden: installs with its own admin token and warns that sign-ups stay open until you close them. (audit)
Whoever took over the panel can no longer take over the machine through a remote folder, a cloud or a disk mount.
Remote folders: those added with older versions are now mounted without allowing setuid programs.
LGM Connect: "Sign out" removes from the computer the password used to connect folders; the next time you connect one, it will ask for it.
LGM Connect: removing a NAS from the app removes everything it kept: password, folders at startup and syncs.
LGM Connect: an account name with commas or other signs can no longer slip options in when connecting a folder.
LGM Connect: the window's internal key no longer travels to the NAS with every request.
Application firewall: country blocking and «Deny» rules apply to their ports too, and closing an application also cuts connections already open. (audit)
Firewall: a «Deny» rule for a device or network blocks even when a broader rule opens that port.
Firewall: «Home network» counts only private home networks and the VPN, also with the NAS plugged straight into the fibre or modem. (audit)
Log: firewall changes record the IP of whoever makes them.
Machine console: the lgm account password is hidden on the NAS screen; press C on that screen to see it for a minute. (audit)
Shared folders: whoever stops administering the NAS immediately loses network access to the administrators' folders.
Shared folders: what the system creates, writes or deletes in them can no longer end up in someone else's folder by swapping a folder for a link mid-operation. (audit)
Package Center: the page of an installed app warns if it still uses its recipe's example password, the same on every machine, and says what to do. (audit)
Package Center: store recipes are written by the panel's user, not root, and links inside their folder are not followed.
Files: opening a folder with many photos or videos no longer slows down the rest of the panel.
Files: with network disks created, the recycle bin and the space report no longer fail with “permission denied for …/iscsi/#recycle”.
Network disks (iSCSI): creating a disk no longer fails with “Could not create _Backstore in configFS”.
Tunnel: if you rename it in Cloudflare, the NAS notices and uses the new name everywhere, including the LGM Connect invitation.
Tunnel: the panel warns when the name does not exist on the internet and says how to fix it in Cloudflare.
LGM Connect: with the NAS added by its domain, folders connect over the home network when you are at home, without installing anything.
LGM Connect: folders that open when the computer starts are retried until there is a network, also by domain, instead of giving up on the first attempt.
Accounts: the panel can no longer mistake the accounts file, or any other setting, for a damaged one because of a failed read: it reads it again and does not set it aside.
Panel: interrupting an operation halfway or restarting the panel no longer leaves system commands running on their own or the restart stuck.
Security
Administrator password: the lock after five failed attempts holds even if the NAS restarts.
Updates: a version only skips the rollout waves if it comes signed as urgent.
Administrator password for what cannot be undone. Removing the lock from a snapshot and deleting a volume ask for your account's password, and the code if you have it on.
Diagnostics: Isolation and monitoring. Whether the programs that open files run isolated, how many attempts there have been against the NAS and how each service reaches the network.
Alarms for attempts against the NAS: warns of a burst of refused commands or refused root consoles, and of a file that crashes the program opening it.
sudo lgm cuentas-root brings up to date which accounts can open the root console. Use it after adding an administrator or changing another one's password.
Changes
Cameras, downloads and antivirus run with their own account and only the permissions they need, not those of the whole system.
Photos, videos, documents and cameras: the programs that open them run isolated, without network and without seeing the rest of the machine.
Network exit per service: cameras only talk to the home network and downloads only to the internet. It closes by itself after 14 days without odd attempts.
Protected backups: with hourly backups, the whole last day is kept, on top of the usual twelve.
Fixes
Panel: restarting or updating it sometimes hung waiting for a background task, until the system forced it.
Machine name, region and Calendar: with the system's service manager down they no longer answer with an internal error in English; they tell you to restart the NAS.
Security
Whoever took over the panel can no longer remove the lock from backups, destroy a volume or change the password of an encrypted volume.
Whoever took over the panel can no longer take over the machine by writing configuration, or open the root console with a password they set.
Stricter system security settings, and the panel can no longer modify the system.
Administrator password: after five failed attempts, the root console and whatever asks for it are locked for ten minutes for that account.
Package Center: installing an app failed on a recovered volume —the one the installer leaves behind, or the one of somebody reinstalling the system—: its data folders belonged to root. They are now repaired on their own at boot.
Storage: creating a folder on the volume the installer leaves behind when you set aside 64 GB failed with "permission denied": mounting itself at boot did not set its owner or permissions.
Panel in English and German: 120 texts were still coming out in Spanish — why a backup fails, the requirements for a certificate, why an app is turned down, disk wear or the DHCP warning.
Storage: the data volume the installer leaves when you reserve 64 GB now mounts on its own, instead of waiting under "volumes found on the disks".
Storage: recovering a volume found on the disks failed right after installing; it now mounts first time and, if the name is not recognised yet, tells you to restart.
Panel in English and German: the reasons given for volumes found on the disks were shown in Spanish.
Virtual machines: minimising a machine's screen window asked it for a 0×0 resolution and left it with an invalid display: coming back, it looked frozen. If you were installing a system, it looked stuck on partitioning.
Panel in German: virtual machines spoke Spanish —the console, memory on the fly, data disks and taking a machine to another NAS—. The 66 missing messages are now translated.
The installer asks how much disk the system gets. The whole disk, as until now, or set aside 64 GB and leave the rest as a data volume, already mounted when you open the panel. For anyone with a single disk who does not want to spend it all.
Fixes
Virtual machines: changing memory or processors without shutting the machine down now says whether the guest system took it. It used to be taken for granted, and a machine without the needed drivers —a freshly installed Windows— stayed exactly as it was.
Virtual machines: the memory shown in the list and on the card is what the machine has now, not its maximum; lowering it looked like it did nothing.
Virtual machines: removing a disk from a running machine warns if the machine has not let go of it, instead of reporting it as detached.
Virtual machines: take a machine to another NAS. "Take it away" leaves it as a single compressed file in a shared folder; "Bring a machine" sets it up here. The machine has to be shut down to take it away.
Virtual machines: add another disk to a machine. For the one running out of room, and to keep the system apart from the data. Removing it does not delete the file.
Virtual machines: change memory and processors without shutting the machine down. On its card, while it runs. At most what it had at boot; for more, it still has to be shut down.
Display, new in the Control Panel. The NAS monitor's resolution —boot, console and the panel in full screen—, kiosk mode and how the panel looks, all together. The resolution applies on restart.
"Region & appearance" is now "Region & language": appearance moved to Display, and so did kiosk mode (it was under Machine information).
Virtual machines: how much each machine has been using. On its card, a chart of the processor and the memory over the last hour, day or week.
Fixes
Virtual machines: the machine screen's toolbar moves to the left edge. At the bottom it covered the machine's own taskbar and start menu, and while hidden it still swallowed clicks in that strip with nothing on screen to explain it.
Virtual machines: with libvirt stopped or not installed, screens said "that machine does not exist" instead of explaining what is wrong and how to fix it.
Virtual machines: if the hypervisor does not answer, the text console says what is wrong instead of "that machine no longer exists", which invited deleting a healthy machine.
Virtual machines: if the text console cannot be opened, it says so; the screen used to go blank without a word.
Virtual machines: with image filters on, "this machine did not change resolution" no longer appears when it actually did.
Virtual machines: the text console now opens. It did not work on any device: it ended in "failed to connect to the hypervisor".
Virtual machines: asking for a resolution the machine cannot do now says so, instead of looking like it worked. The system inside decides the resolution: a server with no desktop keeps the one it booted with.
LGM Connect: typing a domain now finds the NAS. It always tried the panel's port, so an address answering on 443 —the tunnel, a reverse proxy or your own domain— ended in "could not reach it by any route".
LGM Connect: the app now reaches your NAS from outside your home —over the VPN and over your domain—, not just on the local network. Paste the NAS invitation again, or pull your account's devices again, so the ones you already saved get them.
LGM Connect: the address field says your own domain works too.
Virtual machines: text console. Each machine's serial port, in a tab next to the screen: it is what you see when the graphical screen shows nothing —boot, the bootloader, a halted kernel— and there you really can copy and paste.
Virtual machines: "See all". The screens of every running machine at once, in a grid. Look, don't touch: tap one and it opens on its own.
Virtual machines: every snapshot saves a picture of what was on screen, and shows it in its gallery.
Fixes
LGM Connect: with two LGM-OS on the same network both now show up. Before, if both had the same name —the installer calls them «debian» until you rename them— only one appeared.
LGM Connect: a machine's screen opens again on a NAS that has not been updated to 1.88 yet.
Virtual machines: a machine's screen gets its own toolbar. Keys the browser never lets through (Ctrl+Alt+Del and the Ctrl+Alt+F1 to F6 text consoles), modifiers that stay held down so you can work one-handed, copy and paste with your computer, and full screen.
Virtual machines: the screen adapts to the window size. Three ways to view it —fitted, adapted (the machine changes ITS own resolution) and actual size with scrolling—, six resolutions in one tap, and zoom with Ctrl and the wheel.
Virtual machines: brightness, contrast, sharpness, greyscale and night light over the machine's screen, using your own computer's graphics card. It does not touch the machine or use any network.
Virtual machines: the screen tells you how it is doing. Real connection delay and the machine's usage in the same bar; image quality adjusts itself to how far away you are.
Virtual machines: a brief dropout no longer blanks the screen. The last image stays in view while the connection recovers, and it comes back on its own.
Virtual machines: save a picture of a machine's screen from its own toolbar, to show a boot error or a stuck installer.
Virtual machines: every machine reports what it is using in its own row of the list: CPU, memory actually in use, the space its disks take, and what it is moving over disk and network right now. You can see at a glance which one is eating the NAS.
Virtual machines: a screen nobody is watching disconnects itself and comes back when you look again; meanwhile it stops using network and NAS processor time.
Fixes
Virtual machines: the pointer is visible inside the machine even when the machine draws none (UEFI boot, installers, Windows without its drivers).
Virtual machines: starting a machine with its screen open now shows it straight away, without closing and reopening it.
Virtual machines: opening the screen of a machine that no longer exists says so, instead of asking you to start it.
Virtual machines: typing text with ñ or accents into a machine now arrives complete.
Virtual machines: a machine whose screen asks for a password explains it, instead of staying on «connecting» forever.
Security
Virtual machines: opening a machine's screen now requires a single-use pass that expires in half a minute, is tied to that machine, and is revoked when you close every session.
<!-- The English changelog. It does NOT replace CHANGELOG.md: it completes it. web/generar.py reads the Spanish one —which is the canonical one, written when each version is published— and swaps in the entries it finds here by version number. A version that is not translated yet still appears on the English page, in Spanish: nothing disappears from the list for not having been translated.
To add one: copy the Spanish entry, keep the same "## <version> — <date>" heading and translate the body. Sections are New / Changes / Fixes / Security, in that order. -->
Notepad and Calendar: with the panel in English or German, some lines of notes and appointments changed by themselves («Crear la lista» became «Create la lista»), and saving kept them that way.
Music, Movies, Podcasts and Radio: titles, synopses and lyrics show as they are with the panel in another language; the album «Red» came out as «Network».
Files: the recycle bin and the contents of a .zip show file names as they are.
Sign-in screen and desktop notice: what the administrator writes is no longer half translated.
Disks: the warnings about climbing sectors and cable faults come out whole in English and German, and so does the reason a disk is not offered.
Virtual machines: the network drop-down follows the panel's language.
Permissions: Dashboard, Notepad, Downloads and Package Center, with their names in English and German.
The website: the panel demo comes out entirely in the page's language.
Virtual machines: to hand one of the machine's cards over, «Turn on and restart» prepares the NAS's boot with the IOMMU and restarts it. «VT-d» (or «AMD-Vi») in the BIOS is up to you.
The website: dedicated pages for anyone looking for a home server, a server for their business or a private cloud, in Spanish, English and German.
The website: search engines now know that «LGMOS» and «LGM OS» are LGM-OS, written without the hyphen.
Changes
The panel starts in your device's language. If you never picked one, it takes it from the phone or computer you are looking from —in LGM Connect too—; before it was always Spanish. Whatever you pick in Region and appearance still wins.
Fixes
Your account, in What's new and Documentation: the circle kept showing a «1» on lgm-os.com; it now shows your initial, or the user icon while it isn't known yet.
Virtual machines: with the firewall on, they started with no address and no internet; they now reach the internet through the NAS, as they should.
The German website showed the version history in Spanish. The German file was written, but it never reached the published site.
Mobile: the language menu fell off the screen and there was no way to pick one.
Your account, on What's new and Documentation: the circle showed a "1" instead of your initial, and the menu had neither your email nor "Administration".
The website: the same bar on every page. What's new and Documentation had a different one —no account, language somewhere else—; now it is the same as the rest, with your circle and its menu.
Fixes
The website: the language is picked from a menu, not from a flag that only toggled between two. With German there was no way to reach it.
The German website now exists for search engines: it was declared as Spanish and English only, so it could never show up in a German search.
The website: arriving with your browser set to German now lands on the German site; before it sent you to English.
Movies and subtitles: with the panel in German, synopses and subtitles were fetched in Spanish. They now come in the panel's language, whichever it is.
Dates: the ones still shown Spanish-style with the panel in German —alerts, desktop, storage, external access, calendar and podcasts— now follow that language's convention.
Music: an artist's biography comes in the panel's language. The ones already stored are kept; nothing needs completing again.
Diagnostics: "Service status" came out in Spanish with the panel in German.
Radio: the panel in German opened the station list filtered to Spain.
Package Centre: app cards use their German description when the recipe ships one.
Install as an app: the name, the icon shortcuts and the screenshot captions come in the panel's language.
The website: links to buy and to sign in from the German site lost the language.
Email: your licence key is sent in the language you registered in; before it was always Spanish. The footer of every email is translated too.
Terms and privacy: in a language without a translation they are served in English, not Spanish.
Panel search: with the panel in German, searching Papierkorb or Sicherung found nothing. Each screen is now found by its German words, and the usual ones (docker, backup, wifi) still work.
LGM-OS speaks German. The whole panel, the server alerts, the website, the 30 guides and the version history. Pick it in Control Panel → Region and appearance.
New guide: "If LGM-OS disappears". What happens to your data and your NAS if the project stops —the source goes public and the licence check goes away—, what format your files are in and what your NAS tells lgm-os.com. With the commands to check it yourself.
Fixes
English panel: quoted names used the Spanish quotation marks («Fotos» instead of “Fotos”).
English panel: rejecting a password showed half the sentence in Spanish.
Scanner: text recognition uses the dictionary for the panel's language; it always used the Spanish one and told you to install that package.
Dates: each language writes its own, in Files too (12.9.2026 in German).
Documentation: the panel opened the guides in Spanish even when set to another language.
Gallery guide: it said photos are sorted by file date; they are sorted by when they were taken.
Movies: a movie ended up showing "This movie could not be opened. Download it to watch it in your own player" when all that was happening was that the NAS was converting two other videos.
Movies: while the NAS is busy converting, the movie now waits for a slot and starts on its own as soon as one frees up, instead of just sitting there.
Files: opening a freshly recorded camera clip while the NAS was preparing two others left the video loading forever, with no message at all. It now starts either way.
LGM Connect for iPhone. Install it without the App Store: download the file from the downloads page and sign it with your own Apple ID. Picking iPhone puts the guide one click away; note that Apple's free signature expires every 7 days.
Fixes
LGM Connect for Mac is up to date again: the download and the automatic update had been stuck on an older version for weeks.
LGM Connect: "Sign in with my LGM-OS account". Press it, approve in the browser and your NAS machines show up on their own with their addresses. Opening each one still asks for its username and password.
LGM Connect finds the NAS by its internet address. Typing the LGM Connect address —or your own domain— now works to connect from outside your home.
Web: email notices. A welcome when the account is created, the licence when it is bought, and a notice when two-step verification is turned on or off or a passkey is added or removed.
Web: "forgot my password". The portal emails a link to set a new one; it lasts one hour and works only once. Until now, losing your password meant losing the account.
Web: notice when the password changes. An email arrives every time it changes, whether from your account or through the recovery link.
Changes
Gallery: saved searches belong to each account; the ones already saved are still visible to everyone.
Fixes
Web: a database outage no longer takes the whole site down. The landing page, the guides, the download and the update channel stay up; only accounts say they are out of service for a moment.
Files: "Upload files…", "Upload folder…" and the upload button of an empty folder upload again in Chrome and Edge.
Dashboard, widgets and System check: if the volume list could not be read they say so, with the reason, instead of "no storage pool yet" or "System healthy".
Shared folders: while it is unknown whether there are volumes, creating folders on the system disk is no longer offered.
Package Center, Docker and VM: when it could not be checked they say "Could not check whether there is a volume" instead of "Create a storage volume first".
Users and groups: saving a person's record, a group's record or "For everyone" no longer undoes what another administrator changed while it was open.
Users and groups: the rules of an account or group deleted while its record was open no longer come back on saving.
Users and groups: an account with an old schedule that becomes an administrator no longer blocks saving the other accounts' schedules.
Music: if your playlists could not be read when opening the app, a ♥ no longer wipes them: nothing is saved until they are read.
Music: with the app open on two devices, a ♥ on one no longer deletes the playlist just created on the other.
Music: "Add to a playlist → New playlist" now creates the playlist.
Widgets: folding or moving a card on one device no longer removes the widget added on another, and removing them all no longer brings back the defaults.
Widgets: if the NAS does not answer when the panel opens, a click no longer replaces your widgets with the defaults.
Gallery: saving a search no longer deletes the one another person had just saved.
Dialogs: confirming a text dialog with Enter no longer reopens the previous one.
IP blocking: typing in the whitelist while another field is saving no longer eats what you typed.
Weekly report: no longer says "Running" with the switch off.
Files: "Connect a cloud" explains why it offers none instead of opening empty.
Dashboard: the storage pools sentence is no longer cut short, and "healthy" no longer shows with no pools.
Gallery and Files: notices with instructions are shown in full, also on mobile.
Calendar and contacts: in dark mode, days from other months no longer stand out more than the month's own.
Backups → Restore drill: "Test now" with no backup says one has to be created.
Files: the remote device texts carry their Spanish accents.
Podcasts: a show that stops publishing no longer stops the others from updating, and subscribing to an address that does not exist says so.
Radio, Music, Movies, Podcasts, cameras and clouds: a connection failure is explained in plain words instead of the technical error.
Security advisor: on a freshly installed NAS it no longer reports SSH as off: it warns that it accepts passwords.
Dashboard: the "Still to do" notices open the screen that fixes them, not the Control Panel front page.
Licence: "Check now" says when the NAS is not linked or cannot reach lgm-os.com, instead of reporting it as checked.
Firewall, network and routes: a mistyped address is explained in plain words, with an example.
Smart home: a mistyped broker is explained without the technical text after it.
Panel in English: the system check and "Bring over your old NAS data" are in English.
Messages: the pointers to "System → LGM-OS" or "Security → Protection" lead to screens that exist.
Desktop: a change that could not be saved because the NAS did not answer is saved with the next one instead of being lost.
Calendar and WebDAV: their certificate is reissued when the NAS name or address changes, and once renewed the calendar uses it without restarting the device.
Access from outside (UPnP): with a router without UPnP the warning no longer repeats itself or talks about port forwards that were never set, and switching it off says which ports to remove.
Health → Automatic tests: when it could not check the disks it says so, instead of claiming the device has none.
Snapshots: opening one as a folder with a name that already exists explains it instead of an internal error.
Saved settings: one with a changed shape —left behind by going back to an earlier version— no longer blanks UPnP, the disk tests, the write cache, TRIM, the outbound VPN or the API keys.
Files API: uploading with a form (POST /api/files/upload) saves the files again.
Security
Accounts on the same browser: whoever signs in next no longer sees the previous account's wallpaper or folders, and what was left to upload no longer goes out with their session; signing out with uploads in progress warns first.
Oversized requests: the size limit can no longer be dodged by changing the request type, and a file sent without signing in is no longer written to the system disk.
Forms: one with thousands of fields no longer leaves the panel unresponsive.
Upload requests: with a made-up link, or a file larger than the request's limit, the NAS no longer takes anything in.
Panel and LGM Connect: signing in with another account in the same tab no longer shows or saves the previous account's desktop, and whatever was playing stops when signing out.
Panel and LGM Connect: "Sign out" asks before losing an unsaved note.
Panel and LGM Connect: offline, opening an application waits for the network instead of ending on the browser's error page.
Panel and LGM Connect: a corrupt or blocked language, window size or browser storage no longer locks anyone out of the panel.
Desktop: two devices on the same account no longer erase each other's shortcuts and windows.
Windows: none is left with its title bar under the dock or ends up covering it after many clicks; on reload the one that was in front comes back in front, without repeating applications.
Dock: when it does not fit on the screen it can be scrolled, with the mouse wheel too.
Widgets: "System health" and "Resource monitor" say the NAS is not answering instead of showing stale data or 0 %.
Error messages: the ones that arrived unexplained ("HTTP error 503", a broken reply) now say what is going on.
Search: "search inside the files" says when it has failed instead of "nothing with that text".
Control centre and notifications: they close with Escape.
Music: a station logo that does not load no longer shows as a broken image in the player.
Users and groups: an invalid account name states the rule.
Web: the home page cards no longer get cut off on small phones, and "My account" no longer opens scrolled down.
Web: the English documentation is fully in English, and "Skip to content" jumps to the guide.
Web: the notice for an email that already has an account points to "Community", which is always in the footer.
Web: the code graph opens straight away (it froze for about twenty seconds) and every link joins the pieces it belongs to.
Package Center: logos the NAS cannot fetch are no longer requested by the browser from servers the panel blocks; .ico logos show up.
Desktop: shortcuts to store apps take their logo from the NAS, like the store.
Syncs: asking about one that no longer exists says so, instead of an internal error or reporting it as stopped.
Virtual machines: without the virtualisation software, the snapshot list says what to install instead of an English error.
Firewall: an SSH setting this version does not understand no longer blocks saving other screens or leaves ports without their rule.
Security
Per-screen permissions: an account without administrator rights can no longer bypass them with a crafted request.
Downloads: a request with an oversized range no longer leaves the panel unresponsive for seconds.
Oversized requests: a request hundreds of megabytes long can no longer exhaust the panel's memory.
Web: the portal's internal API documentation is no longer published, and the language cookie is marked encrypted-only in the guides too.
Panel, LGM Connect and web: dark out of the box, whatever the system says; whoever chose light keeps it, and the theme button switches it.
LGM Connect: the computer's title bar and the phone's status bar icons follow the theme on screen.
Fixes
Web: forms work again in older browsers, such as iPhones and iPads that stayed on iOS 15 or 16: since 1.84 they answered with an error when logging in, signing up or buying.
Web: after logging out, the browser's Back button no longer shows your account again.
Shared folders: a folder with nobody on its list no longer says every account gets in: only whoever administers the NAS does.
Messages and guides: every "Control Panel → …" hint names the screen as it is called today.
Users and groups: each person's and each group's details are a fixed-size sheet with its sections down one side, opened by tapping their row; "Save" is always in the same place.
Users and groups: apps and folders are granted with the same control, from least to most, and every row says where its setting comes from; Apps gains a search box and bulk granting.
Users and groups: the list shows each person's role, groups and schedule at a glance, with a search box when there are many; closing a sheet with unsaved changes asks first.
Panel and LGM Connect (two-step): the code is typed into six boxes also when turning verification on or off, making new backup codes, creating an API key, adding a passkey and opening the root terminal; a mistyped code is corrected without starting over.
Fixes
Virtual machines: Windows runs much more smoothly: it uses all its processors, has a clock made for it and no longer goes to sleep on its own after half an hour.
Virtual machines: the ones you already had adjust themselves; shut each one down completely and start it again for it to take effect —restarting it from inside is not enough— and the list tells you which ones are pending.
Virtual machines: under "advanced" you choose which system is inside, Windows or Linux, and the panel sets what that system needs.
Virtual machines: if the NAS itself is a virtual machine, the screen warns that the ones inside perform considerably worse.
Users and groups (Folders): a folder nobody has been given access to no longer says "Open to everyone": it says who really gets in, which is whoever administers the NAS.
Users and groups: "Child account" no longer shows on accounts that cannot sign in to the panel.
Users and groups (mobile): the sheet's sections sit on a single sliding line instead of being split in two.
Web: "Log out" logs you out again; the browser was keeping the session open.
Web (sign-up): signing up with an email that already has an account now says so and offers to log in, instead of answering "Account created"; and whoever creates an account is logged straight in.
Web (My account): the two-step verification page gets back the size of its headings and the spacing between cards.
Panel and LGM Connect (support): "Did something go wrong?" moves to the top bar, in plain sight and with its label; on a phone it is the first thing in the control centre, and it is also in Control panel → Licence.
Fixes
Licence: after restarting the NAS, its status and its parts reach your account on the web at start-up, not twelve hours later.
The 60-day trial becomes a real one and, without a licence, when it ends the NAS goes into "data only": link your lgm-os.com account or activate your licence in Control panel → Licence.
New
Licence: link your lgm-os.com account from the panel with a code, with no key to copy; if you own several licences, you choose which one goes on that machine and give it a name.
Licence: the 60-day trial starts when you link the account, with everything open except the LGM Connect address; a pill on the bar shows the days left.
Licence: "Check now" asks lgm-os.com right away, and a licence assigned from your account on the web reaches the machine by itself.
Support: "Did something go wrong?", in the control centre, sends a report from the panel; "See what gets sent" shows exactly what goes out beforehand.
Licence: "Technical details and support" decides whether the NAS shares the machine's parts —no serial numbers, no addresses— so that we can help you.
Web (My account): your machines with their version and trial, the name of each licence, and "Activate on this machine" to put a purchased licence on a NAS without touching it.
Changes
Licence: when the trial ends without a licence the NAS goes into "data only": all files can be browsed and downloaded and shared folders become read-only; apps, virtual machines, cameras and backups stop. Nothing is deleted, and activating brings it all back.
Licence ("data only"): from that screen you can unlock an encrypted volume or folder, recover a volume that is on the disks and mount a USB disk; "Connect from my computer" shows how to reach your folders over the network, and the VPN and dynamic DNS keep working.
Licence: a NAS without a licence has 7 days to link the account before going into "data only"; the panel warns 3 days and 1 day before, and 15, 5, 2 and 1 before the trial ends.
Licence: the trial is one per machine and belongs to the account that started it: reinstalling carries on with the same one, with the same end date.
Configuration backup: when restoring it, the licence is checked with lgm-os.com just like when activating it; if that is not possible, it is not restored and it says where to activate it.
LGM Connect: on the trial, asking for the address says it comes with the licence instead of trying.
Panel and LGM Connect: with the NAS in "data only" the app shows the same screen for getting your files out, and the trial pill shows the days left.
Web: the home page, the FAQ, the terms and the privacy policy explain the trial, "data only" mode and which technical details the NAS sends.
Web: the forms in your account only accept submissions made from the website itself.
Web: an "Animations" button in the footer to see the site with all its animations or with reduced animations. Your choice is kept in your browser.
Changes
Web: it shows all its animations on every computer; if yours asks for less motion, a notice offers to reduce them as soon as you arrive.
Web: it runs much more smoothly on computers without graphics acceleration —offices, remote desktop—, with all its animations.
Web: it loads faster: styles, scripts and images are kept in your browser instead of being requested again on every visit.
Web (home): the panel demo waits for the headline animation to finish instead of starting up at the same time.
Panel and LGM Connect: the live background costs less on computers without graphics acceleration and over remote desktop.
Web (home): more room between sections, between the twelve "Everything it does" cards and inside the large cards; on phones the cards no longer read as a single one.
Fixes
Web: on computers with the system's animation effects turned off, no animation or particle scene showed at all.
Panel and LGM Connect: on those same computers the sign-in screen showed no background, no neon edge and no transitions.
Panel: the sign-in card jumped when the NAS name arrived, with the fields already in place.
Panel: with a right-click menu open, Ctrl+K did not open search and Tab escaped from the dialog underneath.
Web (home): at the end of the page the background specks formed two clouds on top of the headline and the download button instead of the NAS in the free gap.
Web (home): the "The full steps, with screenshots" button rode over the third step's card as you scrolled.
Web (home): in the panel demo, "Sign out" did nothing; it now takes you to the sign-in screen, and any details get you in.
Web (What's new): the thread on the left did not show each version's dot.
LGM Connect: the app's update notice did not say what the new version brought.
A new face for the panel and LGM Connect: a start-up screen with the brand and a counter that follows the real load. In full the first time in each session; just an instant after that.
Living background: a mesh of light ripples behind the sign-in screen, the desktop and LGM Connect, and answers with a wave where you click or tap.
Panel and LGM Connect: a neon edge travels non-stop around the sign-in, second-step, change-password and invitation cards, and a light runs along the six boxes of the code.
Changes
Living background: it holds still while a window is open, and does not show with a skin, another wallpaper or "light effects".
Living background: on a phone, the desktop's stays still and only ripples for a moment where you tap.
Panel and LGM Connect: the primary button uses the website's gradient with white text. With a skin or an accent colour of your choice it stays as you left it.
Panel: the default wallpaper has new colours, in light and dark.
Fixes
Panel: keyboard focus could not be seen on the primary button.
Panel: the right-click menu did not close with Escape.
Web: illustrated scenes on every page. Each area of the system has its own scene: it builds with the scroll on the home page and on load everywhere else.
Web: "What is underneath". The four layers of the system —Debian 12, storage, Docker and virtual machines, and the panel— pull apart in 3D as you scroll, each with its own drawing.
Web (home): start-up screen. The first visit opens with the system's name and a counter that follows the real page load. It does not show with "reduce motion".
Web (home): a mesh of light ripples behind the headline and answers with a wave where you click or tap.
Web (home): a ribbon of text runs across the page, with a pulse of coloured lines travelling through its letters non-stop.
Web: the sign-in, sign-up, checkout and two-step code cards get a neon edge that never stops, and a light runs along the six boxes of the code.
Changes
Web (home): "Everything it does" is now a grid of twelve cards, each with its scene, what it does and its key facts at a glance, with the full detail folded underneath.
Web (home): installing is a three-step timeline —on a phone, three cards that stack— and the monthly fee strikes itself out as you scroll.
Web (home): the clouds and specks around the headline move on their own —they drift, breathe and twinkle—, and the two clouds now show on phones too.
Web: primary buttons use white text on the house gradient.
Web: the main cards get a border of light that travels around them, and the background, colour orbs.
Web (home): long text sections keep their title pinned to one side, and the page ends with the same particle NAS it opens with.
Web: headlines come into focus as they enter, and the demo window gets a sweep of light as it settles.
Fixes
Web: on a phone, the "Community" panel opened off-screen, so the button seemed to do nothing.
Web: the top bar flickered as you started scrolling down and, once shrunk, the "Buy" button overlapped the progress line.
Web: pages run smoother on phones: what used to move non-stop now only moves while in view.
Web (home): the "+1,000" figure was cut off on most monitors, and on phones the figures flickered while counting.
Web: on a narrow phone the top bar broke into two rows.
Web: tabbing through the page entered the demo window and you had to cross all of it to carry on.
Web: in the light theme, links and notice boxes in the documentation were low contrast.
Web (What's new): on a phone each version's summary was cut off.
Web: on a phone, the cookie notice buttons were too small for a finger.
Web: the demo on the home page fetched the app logos from a third party; it no longer loads anything from outside.
Two-step sign-in: the code goes into six boxes that submit themselves when complete, spin while the NAS checks it and confirm when it is right; if it is wrong they go back in place and say so. In the panel, in LGM Connect and in your web account, also when you paste the whole code or your phone fills it in.
Web: the home page follows your scroll. The demo window arrives tilted and settles, the three steps light up in order with their thread, and the hero, the big numbers and the phones move on different planes. With "reduce motion" on, nothing moves.
Web: the home page tells its headline with particles. On a computer, the clouds of light specks around the headline dissolve as you scroll and build a NAS; six windows of the panel come out of it, orbit around it and say their name. It can be skipped, and on a phone or with “reduce motion” the home page is the usual one.
Web: a particle background on every page. It follows your scroll with depth, and when you arrive at a page its specks briefly draw its icon —the Download arrow, the Buy key, the Sign-in shield, the Documentation book— before letting go.
Web: motion across the whole site. Each page's headline comes in word by word, what is further down appears as you reach it, some sentences light up with the scroll and disclosures slide open. With “reduce motion” on, nothing moves.
Web: download by parachute. When you download the ISO or LGM Connect the button follows the click: the arrow comes down by parachute and lands on a tick. Your browser still runs the download, and that is where you see how much is left.
Web: privacy, terms and cookies. Three new pages, in Spanish and English, linked from the footer of every page. The cookies page lists them one by one: what each is for, how long it lasts, and what is kept in your browser without being a cookie.
Web: a cookie notice on the first visit, informative and not a wall: only the necessary ones are used, so there is nothing to accept or refuse.
Web: our own analytics. How many visits there are, to which pages, from which sites and on which devices, with no third-party services, no cookies and no IP address stored.
Changes
Web: a cleaner home page. What was repeated is gone —the twelve-area index, which the feature cards already tell, and the three loose questions, which join the accordion—, with more air between sections and big headings; each block moves at its own depth with the scroll.
Web: when a form fails —sign in, create account, change password— the reason now sits next to the field that failed, and the email you typed is kept.
Web: on a phone, the top bar and account buttons no longer need aiming: every tap target is now 44 px.
Web: screenshots weigh almost a quarter less, so the home page arrives sooner on mobile data.
Fixes
Two-step sign-in: backup codes could not be typed when signing in to the panel or LGM Connect, because the field only took six digits. There is now "Use a backup code".
Sign-in: on a phone the sign-in card can no longer end up shifted sideways.
Web: What's new and Documentation no longer get stuck on an old version kept by the browser.
Web: hovering a blue button —“Buy a licence”, “Join the community”— turned its label purple and unreadable.
Web: a server fault no longer answers with a bare “Internal Server Error”; it shows a page saying what happened and where to go.
Web: the page after paying told anyone arriving without a purchase that a payment was being confirmed; it now says what it is and points to your account.
Web: creating an account now confirms it on screen instead of handing back the same empty form.
Web: the “not found” page also links to your account.
Music: saving the AcoustID key ended in "acoustid.org answered 400" with any key, the right one included; it is now accepted, and if it really is wrong it says so in words.
LGM Connect: when looking for the NAS at home it sometimes kept its IPv6 address, which does not answer, and there was no way in; it now picks the IPv4 and, when a name resolves to several addresses, tries them in that order.
Music: "Correct" no longer gives up with "musicbrainz answered 503": it waits a moment and asks again. And "Artist - Title" typed in the box looks for that song by that artist, with the one named exactly like it first.
Music: correct by hand. Search the album, artist or song in the catalogue and pick the right match; the album's artist goes to every one of its songs that has none.
Movies and series gets a new home screen: rows you scroll sideways (what you started, recently added, what you might like, by genre, series and collections), covers three times smaller, and a header to pick up what you left half-watched in one tap.
Music gets a new home screen with what you played recently, your artists and your albums, a search page with results by type, and its own artist and album pages; on a computer with a sidebar and a full-width player bar, and on a phone with a full-screen player.
Movies and series: artwork, plot, ratings and episode titles fetched from the internet now show up as they arrive, with no reload.
Music: album art, artist photos and songs identified by sound now show up in the lists as they arrive, with no reload.
Changes
Movies and series: opening a title that has no internet data yet fetches it right then, instead of waiting for the next hourly pass.
Music: opening an artist or an album with no artwork fetches its details right then.
Movies and series: finished entries are refreshed on their own —weekly for a film, daily for a show still on air— so ratings and episodes don't go stale. An entry you matched by hand keeps the title you picked.
Music: albums and artists already filled in are refreshed once a month, in case the catalogue now has the artwork or photo it was missing.
Movies and series: the NAS checks your folders for new files every three minutes instead of every ten.
Movies and series: turning on "Fill in from the internet" or saving a key starts filling in straight away.
Desktop and LGM Connect: "Keep watching" refreshes itself while it's on screen, so what you leave half-watched on your phone shows up at the top on your computer.
Fixes
Movies and series: a child account no longer sees adult titles under "For you" or "You might like".
Update: 1.79.0 would not install —the panel build failed and the NAS stayed on the previous version—. A NAS that tried it updates to this one on its own.
Movies and series: subtitles from the internet. A "Find subtitles" button on every record and, with "Automatic subtitles" on (Settings), they arrive on their own when a movie has none in your language. They are left next to the file, so the whole household gets them; the ones matched by the file's fingerprint are flagged "For this file".
Movies and series: "You might like". The record suggests up to eight similar titles already on the NAS, and the home tab adds a "For you" row matching what you have watched lately.
Movies and series: new-episode alerts. Turn it on in Settings, under "Fill in from the internet": when an episode of a series you have airs and is not here, the panel says so, with its season, its number and the air date.
Users: child accounts. Tick "Child account" on a person's record and in Movies and series they will only see what is rated suitable up to age 12 (the rating comes with "Fill in from the internet"; anything without one does not show up either).
Music: identify untagged songs. The ones that arrived as "Track01.mp3" are identified by their sound and end up with title, artist and album. Needs a free acoustid.org key; paste it into Music's settings.
Music: internet radio. Thousands of stations from the free radio-browser.info catalogue, with search, country and topic filters, and your saved stations. The sound goes through the NAS, so unencrypted stations play too.
Music: podcasts. Subscribe by name or by pasting its RSS address, play episodes from the panel and resume where you left off. It refreshes every six hours on its own and can tell you about new episodes.
Desktop: "Keep watching" widget —up to six half-watched movies or episodes with their cover; clicking one opens Movies on that title—. Turn it on with the "+" in the widget panel.
LGM Connect: upload an ISO. When creating or editing a virtual machine, "Upload an ISO from this computer" copies the image you have here to the NAS —with a progress bar, cancellable and with no network folders— and leaves it selected.
LGM Connect: send to the TV. With a film or a song playing, the TV button moves it to the television (DLNA and Chromecast) and leaves the remote —pause, position and "back to this device"— on every screen.
Fixes
LGM Connect: 0.3.5 opened with "The app has failed internally"; 0.3.6 fixes it and installs itself from "Update".
Movies and series: fill in records from the internet. Off out of the box; turning it on (Settings, admin) brings cover art, synopsis, genres, rating, date and episode titles from Wikidata, Wikipedia and TVmaze, with no sign-up anywhere. Only the title and the year leave the NAS.
Movies and series: a free themoviedb.org key also brings the trailer, the cast and the collection —which groups the grid—, and an omdbapi.com key brings the IMDb rating.
Movies and series: the .nfo your library organiser left and the IMDb id in the file name win over the catalogue, and make the match exact.
Movies and series: "Fix match", in the record, pairs it by hand searching by title and year.
Movies and series: pick the quality. Original, 1080p, 720p or 480p next to the subtitles: it scales the picture down to watch a big movie on a phone or away from home, and it stays chosen on that device.
Music: fill your albums in from the internet. Cover art, release date, genres, the artist's proper name, their photo and their biography, from seven free catalogues with no keys at all. Off by default: an administrator switches it on, and the screen says what is sent and where.
Music: song lyrics, synced when available: the line being sung is highlighted and tapping it jumps the song to that moment. An .lrc or .txt file next to the song wins over the internet and works with the option off.
Music: artist page with their photo, where they are from, their genres and a biography.
LGM Connect: on opening, the home screen shows what you left half-finished —"Keep watching" and "Recently played"—; the logo takes you back to it, and "Keep watching" opens that very film.
LGM Connect: saved films. Download a film or an episode to your phone or computer and watch it offline, with its own space cap and Wi-Fi-only.
Movies and series: the NAS creates its shared folder "Peliculas", as it does with "Galeria" and "Musica". Movies and series go there —drag them across from the computer— and the app always looks in it.
Changes
LGM Connect: a virtual machine's screen opens in its own window, resizable to the full screen, which remembers where you left it.
LGM Connect: the category names in the bar are in the logo's blue, so they stand out from the screens beneath at a glance.
Phone gallery backup. The photos and videos LGM Connect uploads from your phone show up in the Gallery, under Fotos del móvil, by person, device and month, with their real date; the same photo is never stored twice.
LGM Connect on the phone: photos upload themselves. On Android, what you take with the camera goes up to the NAS when you open the app; «Upload the whole gallery» the first time, Wi-Fi only if you want, and the same photo never twice.
Music: the Folders tab walks your folders like the disk does (genre → artist → album), each one says how many songs it holds, and «Play the whole folder» plays everything under it.
Fixes
Music: after moving songs between folders from the computer, playing said «the file does not exist»; now the NAS explains it, brings the library up to date on the spot and also checks for changes every three minutes.
Updates: 1.75.0 never finished installing (it failed while preparing the interface and the NAS stayed on the previous version). Devices left on 1.74 now get 1.75.1 with everything below.
Updates: if the interface dependencies do not match, the updater resolves them on the fly instead of giving up.
Music: the NAS creates its own shared folder "Musica", just as it already did with "Galeria". That is where the songs go —drag them over the network from your computer— and the app always looks in it.
LGM Connect, the NAS app for your computer. The whole NAS in a window of its own: the same apps and settings as in the browser, with what your account may use. For Windows, macOS, Ubuntu (and any modern Linux) and Android; iPhone next. Get it at lgm-os.com → Download.
LGM Connect: NAS folders as if they were on your computer. «Connect» on any folder you can see and it shows up as one more drive. The password is asked once and it can reconnect on its own at startup.
LGM Connect: your folder offline too. «Sync here» copies it to the computer and keeps both sides the same, like a Drive.
LGM Connect: music like a real app. A mini player visible from every screen, the keyboard's playback keys and «Save on this device» to listen offline.
LGM Connect: NAS alerts, in the system. They arrive as computer notifications, with the picture when they come from a camera. Choose all or only the important ones under System → Alerts.
LGM Connect: cameras in their own window, and the live view as picture in picture to keep an eye on them while you do something else.
LGM Connect updates itself. It tells you when there is a new version and installs it from System → Update, checking its signature first.
Web: Download starts with two buttons, the NAS ISO and LGM Connect, which offers the installer for your system (Windows, macOS, Ubuntu or Android). The apps page with the demo is gone.
Your NAS shows up in LGM Connect by itself. It announces itself on your home network and the app finds it without typing any address.
Invite a computer. Under Users and groups, a code to paste into LGM Connect with where your NAS is and its fingerprint. It carries no passwords: everyone signs in with their own account.
The same code in your web account, next to each licence, to set the app up from a device that cannot reach the NAS yet.
Movies and series. A new app to watch what is on the NAS: a grid of covers, series grouped by season, subtitles and per-person «keep watching». Pick its folders in its settings screen.
Movies and series: the title, year, series and episode come from the file name, and the cover from the image next to it or from a frame. Nothing is looked up on the internet.
NAS folders on your computer. Every account sees the list of what it can connect, with the right network name and port, without needing the Control Panel.
Drive, for each person. Any account can link its own computer to its folder, see its instructions and unlink it; administrators still see them all.
Changes
Backups: the app icon is now a hard drive with a shield, which is what it does.
Control Panel: the app icon is now a cog wheel, like the settings of a phone.
Music: the keyboard's playback keys and the system media controls drive what is playing, in the browser and on the phone too.
Fixes
Drive: the instructions for the computer carry the address you reach the NAS by (home, your domain or the app), instead of the network name, which does not work away from home.
Drive: the WebDAV port shown is the one the NAS serves on, not the usual 443.
Drive: the list of synced folders no longer shows each account everyone else's folders and every computer in the house.
Shared folders: the password used from Windows or Mac is brought in line with the panel's every time that person signs in; before, if an old one had been left behind, it was «wrong password» forever.
Backups: the panel says which folders are left out of the backups —no backup, only inside the NAS, or copied off-site—, in Backups, in the system check and in the weekly report.
Bring over your old NAS data. It connects to the machine you had, creates the same folders here and copies what is there without touching it; if it is cut off, «Continue» picks up where it left off.
Devices seen on the network: every device identifies itself —maker, and whether it is usually a phone, camera, printer, smart plug or router— and the NAS asks it for its name and remembers it.
Devices seen on the network: name any device from its own row; that name wins over the one the device reports and comes back when you restore the configuration.
Alerts: «I am away from home». While it is on, the NAS reports every panel sign-in, every machine that connects to the shared folders and any motion on the cameras that are recording; switching it off puts everything back as it was.
First boot: after creating the administrator, the wizard proposes a volume with the empty disks it finds —single, mirror or parity, with the space that will really fit— and creates it with one button; then it offers the first shared folder.
Cameras: an alert when a camera detects motion, with a photo inside (email, Telegram, Discord and your phone). Turn it on camera by camera in its details; it only works while that camera is recording.
Cameras: each camera can carry the address of its second, low-resolution video: it is the one the wall and the live view use, and «HD» or recording use the main one. With ONVIF it is filled in for you.
Power usage. With a UPS that reports it, the panel shows how many watts the machine is drawing right now, the daily average and what it would cost per month at the kWh price you enter in Control Panel → UPS.
Folders that empty themselves. Any shared folder can remove on its own whatever has sat there untouched for N days; turn it on in the folder's card, and what is removed goes to its recycle bin.
Gallery: trips appear on their own as albums, with the photos of each run of days away from home.
Backups: the disk you take out of the house, encrypted. When you create a destination on a USB disk you can encrypt it: names and contents are encrypted on the NAS, so a lost disk cannot be read. Save the recovery key shown when you create it: it is shown only once and without it nothing can be recovered.
Backups between two NAS devices, with a code. The receiving one generates a code under Backups → Destinations → Receive backups from another NAS; the sending one pastes it and the destination is ready and tested. No files to edit on either device.
Receive backups from another NAS. Pick the volume and see who backs up to you, in which folder and how much it takes; «Stop receiving» withdraws its permission and does not delete what it had already copied.
Changes
Storage: the «Migration» tab is gone; what it did is now done by «Bring over your old NAS data», in Control Panel → Maintenance.
Devices seen on the network: the hardware address no longer has a column of its own; it moves to the small print under the device name.
Dynamic domain: the IPv6 record is published only if you switch it on in the card, and with the NAS's fixed address, not the temporary one that changes every few hours.
New-place sign-in alert: it now says the time and whether it came from away from home.
Desktop: the Cameras widget refreshes every ten seconds, and tapping a camera opens its live view.
Package Center: an application's page and the install confirmation now say when it uses the NAS network directly: its ports are the machine's own and cannot be changed.
Smart home: «Remove the password» leaves the NAS signing in to the broker without one; until now there was no way to remove it.
Backups: an unencrypted destination can no longer be created in the same disk folder as an encrypted one; pick another folder.
UPS: the kWh price is saved with the «Apply changes» button at the top, like the rest of the screen; the second button is gone.
Fixes
Remote folders, outbound VPN, tagged networks and virtual machine folders: their settings are brought up to date on their own when the NAS starts.
Shared folders: a folder with its own password, while locked, was still offered over rsync —empty and writable—; it is now withdrawn on locking and comes back on unlocking.
Power: saving that screen no longer changes the processor mode on a machine whose owner never chose one.
Power, External access, External disks and Backups: their screens no longer fall over when the NAS answers only in part.
External access: with UPnP off on the router, the screen shows the numbers to open by hand instead of leaving the list empty.
Package Center: changing an app's port and turning on its VPN in the same save left the firewall opening the old port.
Package Center: the recommended applications (Jellyfin, Nextcloud, Plex…) showed up on no shelf on the front page and under no category filter.
Package Center: with the panel in English, each shelf title was shown in Spanish.
Music: with the panel in English, the «Search for music» summary came out in Spanish.
Music: the screen opens right away even with a large library; cover art is prepared while searching for music.
Backups: with the panel in English, «What this NAS can do» and the steps of «Test connection» were shown in Spanish.
Files: sharing a folder left the app showing «The application has failed inside».
Smart home: saving with the switch off announced that the NAS had stopped publishing and that its sensors had been removed.
Certificate: pasting a file that is not a PEM left «Install» greyed out without saying what was missing.
Power: the processor setting was called just «Profile», without saying of what.
Recover settings: the screen only mentioned the ones in the volume, not the ones each backup leaves at its destination — the ones that survive reinstalling the system.
Health: an automatic test the disk says nothing about is recorded as unfinished, not as passed.
Health: a disk that stops answering its own check right after the full test is no longer reported as passed, which is when it most needs looking at.
Storage: creating a volume no longer ends in «cannot reach the server» after 30 seconds with the volume already created behind it.
Full disk test: a disk that belongs to a volume, a software RAID or an LVM group is no longer offered or written to.
Shared links: a shared photo downloads with a progress bar, resumes if the transfer breaks, and the browser stops re-downloading it every time.
Devices seen on the network: its buttons no longer grey themselves out while the NAS works out what each device is.
External disks: when the NAS cannot check which disks are open, it opens none instead of mounting one on top of another.
Folders with their own password: if opening a folder stops halfway and its password is still loaded on the machine, the panel says so and asks you to lock it.
Clouds and remote folders: if the NAS cannot check that they have been unmounted, it does not take them as unmounted or delete their settings.
Desktop: the clock and date showed in Spanish while the panel was in English.
Desktop: the tab title kept piling up repeats («Cameras · Cameras · LGM-OS») instead of saying what is open.
Package Center: an application's page said "you will be asked for 20 configuration value(s)"; now it says "one configuration value" or "20 configuration values".
Security
External access: the reason given by the router can no longer carry the password of its configuration page inside.
App store: the outbound VPN private key can no longer come out inside an error while updating or installing an app, nor in the phone alert when its schedule fails.
External access: turning on router port opening and having it fail left whatever had already been opened in place, with the switch off; it is now withdrawn and, if it cannot be, the panel says what to remove by hand.
External access: the NAS marks the port forwards it creates on the router, so withdrawing them also works once whatever asked for them is no longer published.
Backups: the settings each backup leaves at its destination no longer carry any account's two-factor seed. After restoring, anyone who had it on pairs it with their phone again.
Backups: those settings no longer carry the tokens of home computers or synced desktops either, which was written but never applied.
Files: a link with a download limit can no longer be downloaded for free by asking for it in ranges; and a folder or album zip always counts.
App store: the app that goes out through the VPN cannot take over the NAS network stack or change what runs inside its container.
Monitor: the Prometheus figures only include volumes and disks if the key's account has been granted Storage.
Music: cover art or a song that is a link to somewhere else on the NAS is no longer served or indexed.
Scheduled tasks: deleting a task with a custom command requires administering and a signed-in session, just like creating one.
Outbound VPN: withdrawing it also takes away the private key that was left written in the folder of every app that used it.
Shared folders: opening a folder with a password of its own, or changing it, now has an attempt brake: five failures and you wait ten minutes.
Virtual machines: the list of NAS folders that can be given to a machine is only shown to whoever can edit machines.
Sharing: photos go out without the place they were taken even when the file has another extension; the content is what counts.
Encryption: changing the passphrase of a volume and of an encrypted folder at the same time can no longer read each other's passphrase.
Health: test a disk thoroughly before using it. It writes and re-reads every sector and compares the disk's status before and after; it erases the disk, so it is only offered for one not in use and asks you to type its name.
Health: disks test themselves. A quick test every Sunday and a full one on the first Sunday of the month, in the small hours; on by default, and the time is chosen in Health.
Shared folders: a folder can have a password of its own: open it when you need it and lock it when you are done; locked, nobody sees it, and after a restart it stays locked until you open it.
External disks: the USB disk you plug in is shared on the network with one switch and the same permissions as a folder; it turns itself off when ejected and comes back when plugged in.
Network: every card takes a tagged network (VLAN): a second network over the same cable, with its own number and address, to keep the cameras apart without running another cable.
Power: choose how the processor runs —Power saving, Balanced or Performance— with the current mode and megahertz shown next to it.
API keys: the NAS publishes its figures (processor, memory, network, each volume and each disk) for Prometheus or Grafana; the address is in Your account → API keys.
App store: an app can reach the internet through the VPN you pay for, on its own; upload your provider's file in Control Panel → VPN.
Virtual machines: share NAS folders with a machine and they show up inside, without copying them or going over the network.
Monitor: a graphics-card tile with usage, memory and temperature on machines that have one.
External access: the NAS opens the router ports itself; switch it on under «Your connection» and, if your router has no UPnP, the panel gives you the numbers to open by hand.
External access: «Check access from outside» shows your public IPv4 and IPv6 address and where your domain points for each.
Dynamic domain: DuckDNS and Cloudflare also publish the IPv6 record, so the NAS is reachable from an IPv6-only network.
Certificate: you can use your own; certificate and key are checked to match, to be unexpired and to cover your name before being installed.
Certificate: a warning fourteen days before it expires, whether it is the NAS one, a Let's Encrypt one or yours.
Backups: every backup also saves the NAS settings —accounts, folders, permissions and alerts— to its destination and keeps the last ten; it can be turned off per job.
Scheduled tasks: «Run a command of your own», for administrators only: a command line run from a shared folder, with a time limit and without system administration permissions, with its output on show.
Files: a shared link can be limited to a number of downloads; with «1» it closes itself as soon as it is downloaded, and it can be renewed from the list without changing the address.
Smart home: the NAS connects to your home automation system (MQTT) and shows up there as one more device, with processor, memory, temperature, how full each volume is, each disk's health, the UPS and a warning when something is unread.
Cameras: each camera can prepare the previous day's summary by itself overnight; turn it on in the camera's settings.
Music. Listen to what is on the NAS without downloading it: by artist, album or folder, with a queue, search, favourites and playlists of your own; a song keeps playing when you switch tabs and you can jump to a given minute.
Music: the library keeps itself up to date and cover art comes from the folder's cover.jpg or from the song itself.
Changes
Restoring the settings also lists the ones each backup left on a disk or a folder of this machine, not just those on its volumes.
Sharing: photos leaving through a public link or a shared album go out without the place where they were taken; inside the panel the file stays untouched and videos go out as they are.
Fixes
Alerts: «Silence for 7 days» is readable in the dark theme (it came out grey on grey).
App store: an app without an icon shows a panel icon, not an emoji.
Search: the clear-search cross in the app store and the Control Panel is an icon.
Gallery: tapping a place on the map opens its photos again, and only that place stays highlighted.
Shut down and restart: the screen no longer falls over as a whole —scheduled shutdown included— when the NAS answers only halfway with the list of machines it can wake up.
App store: installing an app no longer crashes when the NAS answers only halfway with the list of network cards.
Panel in English: the system-disk warning when creating a folder, the failures of saving SMB, NFS, WebDAV, SSH and rsync, and some thirty more phrases no longer come out in Spanish.
Sync: the reasons a run is held back now show in English when the panel is in English.
Scheduled tasks: the warning about the missing target names the field ("On what") instead of sending you to "the middle field", which does not exist on a phone.
Network: a change that could not be applied no longer takes another card's configuration with it when it is undone.
Certificate: the NAS no longer overwrites, on every boot, a self-signed certificate of your own lasting more than a year.
Scheduled tasks: «Run now» left the row showing the previous run's result until you left the screen and came back.
Security
App store: a recipe can no longer join the panel's own-address network by asking for it by name.
App store: a recipe can no longer set the addresses of its own network (ipam); with the home subnet inside it left the NAS with no route to its own network.
Virtual machines: the firmware memory copy no longer writes through a link left in the destination folder.
App store: a recipe can no longer put an app inside another container's network on the NAS.
Passwords: every password you choose needs at least 8 characters —accounts, public links, file requests, shared albums, encrypted folders and volumes—; a machine with a lower minimum raises it by itself on startup.
Encrypted volumes: the panel states the minimum length before it starts creating the volume, instead of failing halfway.
App store: give an app a schedule and it starts and stops on its own at the times you choose, as virtual machines already did.
App store: "Update all" brings every installed app up to date at once, and one that fails does not stop the rest.
App store: an app can have its own address on your home network, so AdGuard or Home Assistant do not fight the panel for ports; the NAS itself cannot reach it.
Backups: a job can include virtual machines, with their disk and their definition; a running one is copied from a snapshot or skipped, and named.
Two-way cloud sync. What changes in the cloud comes back to the NAS; if a file changed on both sides, the cloud one sits next to it ending in ".nube".
Snapshots: a scheduled task can keep them by bands —so many hourly, daily, weekly and monthly at once—, so fewer than fifty reach back a whole year.
Virtual machines: hand one of the machine's cards —the graphics card, almost always— to a virtual machine; the panel says which can be handed over and gives them back on removal.
Write cache. An SSD (or two mirrored) takes in whatever is copied to the folders you choose and passes it to the volume overnight: copying from a laptop runs at SSD speed.
Shared folders: size limit. Set it when creating the folder and the filesystem enforces it; on one that already exists, the NAS warns at 90 % but does not stop writes.
SMB: use several network cards at once. Splits a large copy across two cards, from File services → SMB, with a count of the ones the NAS actually sees.
Storage: take a disk out of a volume without destroying it. The data moves to the other disks on its own and the disk is free for something else.
Storage: weekly SSD maintenance, so they do not end up writing more slowly over the years. It can be turned off.
Storage: the NAS warns about the read and write errors the system sees, which usually show up weeks before a disk declares itself unhealthy.
Power: the NAS can shut down on its own after some hours with nobody using it. It ships off, and the screen says exactly what counts as using it.
Cloud sync. Choose what does not get uploaded: by pattern (*.tmp, ~$*, node_modules/**) or by size, and see what is already left out by default.
Disk health: the tab now says how long each disk takes to answer and which one is holding the machine back, which explains a slow NAS when space and status look fine.
Disk health: every volume and disk check is recorded — when it ran, how long it took and what it found — with a warning when something has gone more than three months unchecked.
Virtual machines: pick what you are going to install —Windows 11, Windows 10 or Linux— and the machine comes with the firmware, drivers and size that system needs.
Snapshots: open a snapshot as a new shared folder, alongside and without touching the one you have now, to look inside at your own pace or try an app against yesterday's data.
Gallery: your photos on a map drawn inside the NAS, asking nothing of any outside server; those taken in your private places never appear.
Encrypted volumes: the NAS can open them on its own after a power cut, with the key on a USB stick or in the board chip; the screen spells out which protection each option gives up.
Shared folders. Each one picks its own compression and block size, so the video folder and the documents folder are not stored the same way.
Changes
SMB: using several network cards at once is now off unless you turn it on in File services → SMB; until now it was on without the panel saying so.
Encryption and keys: leaving the key on a USB stick is done only from "Opening the encrypted volume with nobody there", picking from the list of open removable disks.
Fixes
Sync: the "both directions" mode never actually synced anything on any machine. Pair your folders again with "Pair now".
SMB: compatibility with older computers turned itself off whenever any other SMB setting was saved.
Sync: folders that should never be uploaded (recycle bins and thumbnails) were being uploaded when the sync ran in a single direction.
Virtual machines: a machine rejected on creation left its disk taking up room on the volume and blocked retrying with the same name.
Alerts and errors: a camera that is off or a cloud that does not answer are no longer explained as "Docker is not running"; that advice only appears when the failing command was Docker's.
Sync: failures are explained in plain words; before, the tool's raw English message came out, with the system's timestamp in front.
Sync: a NAS folder that hits its space limit is no longer reported as "your cloud has run out of space".
Encrypted volume: leaving the key on an exFAT, FAT or NTFS stick always failed; it now works and the panel warns that anyone opening the disk can read it there (use ext4 if only the NAS should read it).
Encrypted volume: the NAS opens the stick holding the key by itself at boot, so the volume comes back on its own after a power cut.
Encryption and keys: errors when changing the passphrase or moving the key no longer come out in English with filesystem jargon inside.
Snapshots: the automatic clean-up notice about snapshots left undeleted no longer carries the system command inside.
Security
Alerts and errors: the reason for a failure can no longer carry the password a program puts in its own message (a cloud address, a camera address).
Gallery: clearing the place from photos in private places is now an administration action, recorded under the name of whoever does it.
Gallery: the details of a photo taken inside a private place no longer show its coordinates.
Cloud sync: the NAS's own folders are no longer uploaded. Syncing a whole volume sent its settings —with the password hashes of every account— and whatever was mounted inside. If you had a whole volume synced, delete those folders from your cloud and change the account passwords.
Encrypted volume: the unattended-boot key can only be left on a removable disk that is open at that moment; a path with ".." used to put it on the system disk or inside the volume itself.
Encrypted volume: storing the key with the USB stick already ejected wrote the passphrase in the clear on the NAS's own disk and reported success.
Encryption and keys: both screens stop answering accounts that can only look; they returned the exact path of the key file.
Network: "Devices seen on the network" lists who has connected to the house, when they were last seen and a button to wake them; it works even when the router hands out addresses.
Network: each card shows the negotiated port speed (100 Mb/s, 1 Gb/s, 2.5 Gb/s) and warns when a port runs at 100 Mb/s while it could do a thousand.
Disk usage: the report now says separately how much every folder's recycle bin takes up, with one button to empty them all.
Disk usage: how much each person's "My drive" folder takes up, largest first.
Desktop: a "What the NAS is doing" widget: what it is copying, converting or updating, with its progress bar.
Desktop: an upcoming-events widget with today's and tomorrow's appointments.
Printer: the print queue, showing who sent each job and when, with buttons to cancel one, empty it entirely, or resume it when it stops on its own (printer switched off or out of paper). Cancelling is for administrators.
Users and groups: every account shows when it last signed in, with a filter for the ones unused for more than 90 days.
Users and groups: give an account the day it stops working; when it arrives it closes itself (panel, shared folders, calendar and console) and the administrator gets a notice.
Users and groups: "Close all their sessions" throws a person out of the panel and the app on every device, from their card.
Alerts: night "Do not disturb": between the hours you choose, anything that is not critical waits until morning; critical alerts always get through, and the panel still shows everything.
Alerts: "Silence for 7 days" on every alert, for administrators; what is silenced is listed, and lifted, in Control Panel → Alerts.
Alerts: the NAS tells you when your provider changes your home internet address, and what to do if you have no dynamic DNS.
Alerts: the NAS tells you when it loses internet access, and when it comes back.
Alerts: the NAS tells you about the app that restarts over and over, with the last thing it said and where to look.
Files: "Calculate size" on a folder's menu (and in Properties) tells you how much it takes up and how many files it holds, without leaving the list.
Files: a type filter in the toolbar (photos, videos, documents, music, other) to keep only what you are after inside the folder.
Files: "Restore everything" sends everything in the recycle bin back to the folders it was deleted from at once; anything already there with that name is kept, and the restored copy arrives as "name (2)".
Calendar: appointments with an alarm now also notify through the NAS, at the time each one asks for and only to their owner.
Virtual machines: each machine can turn itself on and off at the times you set, on the days you choose (in its card, "Schedule").
Backups: a warning when the disk of a "backup on plug" job has not been connected for a month.
Cameras: straighten a badly mounted camera's picture (rotated 180°, flipped horizontally or vertically) from its settings: the live view, the Gallery and the recap come out straight; recordings are stored exactly as the camera sends them.
Cameras: draw up to four areas that motion detection ignores, so the street or a tree stop triggering alerts.
Cameras: save what you are seeing to the Gallery, under "Cameras/<name>".
Cameras: day summary (today so far, or yesterday) as a one-minute video, to see at a glance what happened; watch it in the panel or download it.
Security: two-step verification required for administrators (Control Panel → Security → Passwords); anyone without it only reaches the screen to set it up.
Sign in: "Do not ask for the code in this browser for 30 days" when signing in with two-step verification; cancelled by changing your password, closing all sessions or redoing your second factor.
Security: idle sign-out: closes the panel when nobody touches it for the minutes you choose; off by default, and uploads in progress are safe.
Message for everyone: a notice ("I'm shutting the NAS down tonight at 23:00") that shows on everyone's desktop when they sign in until each person dismisses it, or until the date you set; written in Control Panel → Login portal.
Sign-in screen with your photo: pick the image shown behind the sign-in form in Control Panel → Login portal; "Remove" brings back the usual one.
Large text: in Control Panel → Region and appearance, make the whole panel bigger; remembered on each device, like the theme.
Changes
App store: apps this NAS could never install — the ones asking for root powers or Docker's control socket — are no longer listed; the rest of the catalogue is unchanged.
Fixes
Users and groups: a freshly invited account said "Recovery link live" instead of "Invitation pending".
App store: apps that only needed to know the NAS's time now install.
Network: the networks the NAS creates for its virtual machines no longer show up as another card, marked "no link".
Repeated files: finding and deleting them is once again for whoever administers the NAS.
Disk usage: the scan no longer hunts for repeated files ("Repeated files" does that, and deletes them too) and finishes much sooner.
Monitor: the speed verdict follows the slower direction and talks about speed, not cables; the meter says where the internet is measured, and allows one measurement at a time.
DHCP server: the button that switches a machine on is called "Turn on", as in Power on and off.
Disk usage and repeated files: only one full walk of the volume runs at a time; the second waits for the first to finish.
Fixes
Repeated files: "Delete every extra" failed without deleting anything when more than 20,000 copies came up, and the reclaimable figure dropped sharply after deleting the first group.
DHCP server: on a phone, each machine's buttons were off the screen.
Files: "Number" let you rename without typing the name, wiping every name at once; and batch rename takes up to 2,000 items and says so, instead of hanging.
Files: batch rename that shifts names (renumbering photos from 2) answered "already exists" and greyed the button; it works now, and if something fails halfway everything goes back to its previous name.
Security
An account granted "Disk usage" could walk the whole volume and send other people's files to the recycle bin from "Repeated files".
LGM Connect: your account on the website says whether each NAS's tunnel is running or stopped; the NAS reports it with its heartbeat, and right away when you switch Connect on.
Your account: "Recent sign-ins" lists the last twenty times your account signed in (from where, with which device and how) and what to do if one of them was not you.
Control panel: the search box finds screens by what you type ("recycle bin", "wifi", "2fa", "shut down"), not just by the screen's name; Enter opens the first match.
Launcher and global search: settings screens show up there too and open the control panel right on that screen.
Network: a "Turn on" button next to every device on the DHCP list: switch on the living-room computer from your phone, without registering it first.
Monitor: "Measure the speed with this device" tells you how fast your computer and the NAS talk to each other, and whether the slowness is your Wi-Fi. No admin needed.
Files: drag a folder onto the file manager (or "Upload → Upload folder…") and it uploads whole, subfolders and empty ones included.
Files: with several items selected, "Rename" renames in bulk (find and replace, prefix or suffix, numbering) with the new names in view before applying.
Backups: "Run this backup when the disk is plugged in": when you connect that disk the NAS opens it, copies, closes it and tells you when you can unplug it. Tick it with the disk connected.
App store: an "Update itself" switch on each installed app: at night it installs the new version and, if the app does not start, puts the previous one back and tells you.
Virtual machines: create a Debian 12 or Ubuntu 24.04 LTS machine with no installer: the NAS downloads the official image, verifies it and leaves it ready to sign in. The first time downloads about 600 MB.
Storage: a btrfs volume with two disks or more switches to a mirror (RAID1) without being emptied, and switches back to reclaim the space of the copy.
Storage: "Repeated files", in the space report, finds the same file stored more than once and sends the extra copies to the recycle bin; you pick which one stays.
App store: "Export a copy" saves a whole application (settings and data) to a file on the NAS, and "Import a copy" brings it back on another machine.
Cameras: each camera's card says how far back the footage goes ("kept going back 6 days"), so you can see at a glance how much is stored.
Changes
Cameras: the per-camera space cap is now optional: recordings are kept for the days you set, and the cap, if you want one, is set when adding or editing the camera. Cameras with the default cap lose it.
Fixes
Network: the wake-up signal (Wake-on-LAN) now goes out over every network the NAS is on; it used to leave through only one, and on many machines it never arrived.
Cameras: with the default space cap (50 GB), recordings still within the retention days were being deleted without warning.
Desktop: the first five steps of a new NAS (volume, shared folder, accounts, backup and access from outside) on a card that ticks itself off and disappears once they are done.
Storage: “Measure speed” really measures each disk's reading and each volume's writing and saves the result, so a disk going slow shows up before it fails.
Users and groups: create an account with no password and hand over a link so they set it themselves; the account stays closed until then, and the link lasts 48 hours and works once.
Cameras: each camera picks when it records (always, only during set hours and days, or only when no phone of the house is connected); outside its schedule it shows “off schedule” instead of looking like a fault.
Changes
Cameras: existing recording schedules (the weekly grid) are converted to a window of hours and days. Check each camera's: it may record more hours than before, and one that never recorded leaves the camera off.
Fixes
Files: on NAS that were already installed, automatic emptying of the recycle bin stays off until a period is chosen in the Recycle bin; the first pass after updating could sweep away everything older than a month at once, without warning.
Files: a recycle-bin item that cannot be read is kept; automatic cleaning used to destroy it.
Cameras: on update, a schedule painted on the grid with two days of different hours lost one of the days; now it records more, never less.
Cameras: a camera that cannot record (password changed) no longer looks fine at times nor repeats its alerts; and saving a schedule that already applies starts it at once.
Users and groups: an invitation link cannot be issued for system or domain accounts, and if the password does not get into any door it says so and the link stays valid.
Your account and 2FA: signing in with a passkey from a new place also warns.
Updates: the time window is really saved from the screen, a short window is honoured too, and the new-version notice appears only once.
Network: many new devices at once are reported together, and the memory of seen devices is capped.
Printer: the scanner took up to 25 seconds to show up; the screen now appears at once with what was last known and keeps looking in the background, with a “Look again” for a freshly plugged-in device.
Your account and 2FA: a notice when someone signs in to the panel with your account from an address you had not used before, with the browser and system they came from. From home and from the VPN it never warns.
Updates: automatic updates now install only in the window you choose (03:00 to 06:00 by default); the notice that a new version exists still arrives. To install at any time, remove the window under Updates.
Desktop: the background can be a Gallery album, with a different photo every day.
Cameras: HD live view for a camera that only accepts one connection now comes from what is being recorded: full resolution, without taking the connection away from the recorder, a few seconds behind. For instant video, use “Smooth”.
Users and groups: “Duplicate” creates an account with the same apps, folders, groups, space limit, panel access and doors as another person; the password is a new one.
Files: the recycle bin empties itself after a while (never, 7, 30 or 90 days; 30 by default), chosen from the Recycle bin itself.
Fixes
Files: what is deleted from Windows is now dated by when it was deleted, not by when it was last edited.
Settings backup: the time zone and network time now travel in the backup and are applied on restore; the restored machine used to stay on UTC.
Settings backup: the restore result no longer comes out in Spanish for people using the panel in English.
Your account on the web: each NAS's card says which version it runs, when it last connected, how much space it has left and whether it has pending alerts. The NAS reports it in its twelve-hourly check; nothing else travels.
Users and groups: the administrator and the person are warned when someone reaches 90 % of their space limit, once per scare.
Network: a notice when a device never seen before joins your network, if the NAS is the one handing out addresses.
Desktop: dragging an icon from the desktop or the Launchpad onto the bar pins it there.
Desktop: the cameras widget shows each camera's picture, refreshed every twenty seconds; a tap opens the app.
Connect your devices: a QR code with the panel address to open it on your phone by pointing the camera at it.
Fixes
License: renaming the NAS now shows up in your account on the web; until now it kept the name it had when the license was activated.
Desktop: dragging an icon from the Dock onto the desktop leaves its shortcut there, just like from the Launchpad.
Changes
Users and groups: everything about a person on a single card —password, apps, folders, how they get in, groups, space and schedule— with a single "Save".
Users and groups: four tabs instead of six: Users, Groups, For everyone and Connected. Each person's permissions, quotas and schedule now live on their card.
Users and groups: a group's card gathers members and apps; the people and group lists show the same things with the same buttons, and each row shows that person's schedule and space limit.
Fixes
Machine name: changing it from the panel ended in "the machine is still called…" even though the change had been made, and the Overview showed the old name until reboot.
SSH: on a machine where the SSH screen was never saved, the panel no longer imposes its factory settings at boot: it only adds the reading of its keys and the SFTP jail.
External disks: a disk that is the destination of a scheduled backup cannot be formatted; the button is greyed out with the reason.
Virtual machines: if it cannot be checked which disks the NAS is using or which device is the UPS, no new USB device is handed over until it can be checked.
Fixes
Updates: the version removed with "Roll back to the previous version" is no longer reinstalled on its own, and the card says it rolled back instead of "last update successful".
Updates: "Roll back to the previous version" explains why it cannot on a machine that never updated or whose copy was removed for lack of space.
API keys: expired ones show as such, do not count towards the per-account limit, and the list says which apps each one reaches.
Apps: video acceleration is applied only to the app's main service, not to its database.
Apps: recipes are read the way Docker Compose reads them; an unquoted "22:22" port or "restart: no" no longer changes meaning when edited.
SSH keys: at boot, the files of accounts that no longer have keys in the panel are removed (after restoring a settings backup, for example).
Remote logging: with forwarding off, a leftover rsyslog file is removed at boot.
UPS: after restoring the settings backup, the panel warns that the shared UPS password is a new one and has to be copied to the other machines again.
UPS: if the shared port could not be opened in the firewall, the screen says so; and the green dot only shows when there is data from the UPS.
Language and time: on save, the list of time servers vanished until reload.
Machine name: warns that passkeys registered under the old name stop working, and the notice stays on screen instead of vanishing after five seconds.
External disks: two consecutive "Open" no longer mount the same disk twice; a label that is too long says it is too long.
Network disks: an unreadable configuration file is no longer read as "no disks" (and no longer closes the port); if it cannot be checked who has a disk mounted, nothing is removed or changed; without targetcli it says what to install.
Network disks: the machine list of a disk published before 1.66 changes correctly; emptying it asks for confirmation.
Virtual machines: cloning twice at once with the same name is refused; without libvirt it says so; a clone that fails while registering the machine no longer stays "in progress"; the clone does not inherit file-backed consoles or PCI devices; the out-of-space notice says how much is needed.
Support report: it no longer cuts off after 30 seconds; the error, if any, is shown.
Backups: a speed limit below 1 KB/s no longer turns into "no limit".
Apps: a value with colons or underscores in a recipe ("1:30.5") no longer changes when edited from the panel.
Panel in English: the texts under each task's progress bar ("recreating containers", "disk ready"…) come out in English.
Security
Helper: grouped short options ("rsync -avze …") and bare names without a path for ffmpeg, ffprobe and qemu-img no longer bypass the checks; a panel mount always carries "nosuid,nodev"; app recipes are started exactly as they were reviewed.
API keys: a key cannot create or change SMB or WebDAV accounts, nor download the support report.
Apps: the veto on privileged groups in a recipe also applies when written as numbers; a USB adapter that comes with the template is not handed over without having been chosen.
Support report: it does not carry the webhook and Discord addresses, the ntfy topic or the SNMP community; trimming the log does not split a line with a password inside.
Shared UPS: port 3493 is opened only for the private home networks (10.x, 172.16.x and 192.168.x), not for anyone who reaches the NAS.
Backups: each task can carry a maximum speed (MB/s) so that a backup to another machine or to the cloud does not eat the home connection. Restoring is never slowed down.
Virtual machines: clone a powered-off machine under another name (the disk copied in full, a new network identity and no USB devices) from its details, as a task with progress.
Network disks (iSCSI): each disk can be limited to specific machines (their initiator name); empty still means «anyone». Changed from the list, with the disk disconnected.
Check-up: «Download support report» saves a file with the machine's state, logs and configuration, without passwords, to send to whoever is helping you.
Fixes
Panel: a very long ffmpeg or rclone error could freeze the panel for half a minute while passwords were being stripped from it.
Security
Helper: a path with «..» inside the network-disk configuration tree can no longer climb up to export a whole NAS disk.
Apps: memory and CPU limits per app, from «Ports and folders»; a runaway one no longer eats the NAS.
SSH keys. Each account keeps the public keys of its machines (and the administrator anyone's): SFTP and rsync backups without typing the password.
Apps: an Nvidia card also accelerates video, as soon as the machine has its driver and the container runtime.
Network: a fixed IPv6 address goes in the same fields as the IPv4 one.
UPS over the network. The UPS can be plugged into this NAS and shared with the other machines in the house, or live on another machine that this NAS follows (Control Panel → UPS).
Shared UPS. The panel shows the password and the exact line to copy into each machine, and opens port 3493 for the local network only while it is shared.
The machine name can be changed from the panel, in Machine information. It is the address the NAS is reached at: update the bookmarks and restart the NAS so the certificate carries the new name.
Your own time servers. In Language and time, one per line (pool.ntp.org or your router's address). Empty: the system ones.
Send the logs to another device. A copy of everything the NAS writes goes to a log server on your network (device, port and UDP or TCP), from Logs.
Session length. The panel signs you out after 30 minutes without using it; that limit is now chosen between 5 minutes and one day in the password rules.
External disks. Plug in a USB disk or drive and open it from Storage: it appears in Files as one more folder, ejects without losing anything, and can be formatted as exFAT to take it to any computer. A Windows disk shut down with fast startup opens read-only, and the panel says how to make it writable.
Virtual machines: hand a USB device from the NAS to a machine (your home automation's Zigbee or Z-Wave stick) under Details → Network, CD and devices. Whatever the UPS, an app, a NAS disk or another machine already uses is not offered; if the device is not plugged in at boot, the machine starts without it.
Changes
UPS: «connected to another machine» is only saved if that machine answers; otherwise nothing is saved and the panel says why.
«External devices» moves from the Control Panel to Storage → External disks, which can also format them. Disks mounted with the previous screen stay where they are: eject them and open them again from the new place.
Fixes
Machine information: the name shown stayed on the previous one until the panel restarted.
External disks: a Windows or Mac disk was mounted without permissions and never showed up in Files, even though the screen said it would.
Calendar and contacts: enabling it without Radicale installed says what to install, instead of leaving files half written and a bare error.
Go back to the previous version. A button in Update LGM-OS returns the version that was there before the last update, without touching data or settings; the retired one does not reinstall itself.
Video acceleration in apps. Jellyfin and Plex can use the NAS integrated graphics to convert video; switch it on when installing or from «Ports and folders».
API keys. Each account creates keys for scripts and home automation, with expiry and limited to the apps it chooses; they can be listed, revoked and never touch the account.
USB adapters for apps. Home Assistant can use the Zigbee or Z-Wave stick plugged into the NAS; tick it when installing or from «Ports and folders».
Console:lgm revertir goes back to the previous version, same as the panel button.
Fixes
Apps: since 1.63.5 no app would start, stop or uninstall on a NAS with a volume («apps only run from their store»).
Backups: since 1.63.5 no rsync backup worked, neither local nor to another NAS.
Cameras: since 1.63.5 a camera whose address carries the password as pass= could not be added or recorded.
Diagnostics: the helper check reported a stopped helper as alive.
Update: «Go back to the previous version» was unavailable right after updating, which is when it is needed.
Apps: asking for video acceleration on a NAS without graphics is explained instead of installing an app that will not start; and editing an app with its USB adapter unplugged no longer fails.
Apps: editing a recipe with unquoted ports no longer changes the port (22:22 became 1342), no longer loses the restart policy, and saving «Ports and folders» no longer answers «the port is already in use» for the app's own port.
Apps: «Ports and folders» only offers graphics and USB adapters to the apps that use them; the graphics and USB groups are refreshed at boot after restoring on another machine; an adapter with «:» in its name is offered by its device node.
API keys: with a second factor no key could be created (nor a passkey added), and a wrong password closed the panel session; now the code is asked for.
API keys: copying the key without a clipboard (panel over http) explains to copy it by hand; «1 app» in singular; the «Security» screen no longer goes blank on an incomplete response.
Update: the rollback shows its own progress; the retired version does not reinstall itself and «Install anyway» is offered; the reason for not being able to go back is always shown.
Update: an update that fails before installing no longer deletes the copy of the previous version; without the copy of the system units, without being able to check the settings, or with data work running, there is no going back, and it says why.
Security
API keys: a key limited to some apps reaches nothing outside them; and no key can register passkeys or open the root console.
Helper: a short option with its value attached («-u0») no longer bypasses the veto; Docker API paths with «..» are rejected; and a protocol upgrade is only admitted for a container console.
Helper: the recipe compose is about to bring up is also reviewed in the privileged process, not only in the panel: the one compose actually resolves, overrides included.
API keys: a key no longer obtains a full panel session; with a key no accounts are created or changed; a restricted key does not administer even inside its app; deleting an account from «User and group» revokes its keys; keys do not travel in the configuration backup, so restoring it does not bring a revoked one back to life; and a key cannot restore a configuration backup.
Helper: ffmpeg and ffprobe no longer accept inputs or outputs with a protocol prefix (file:, concat:, tee:), with which any file on the machine could be read; exportfs only re-reads; the Docker API has a connection cap; and recipes cannot join the root, disk or docker groups of the NAS.
Helper: ffmpeg no longer writes to relative paths nor opens playlists (HLS, DASH) pointing elsewhere; a concat list is checked entry by entry.
New versions arrive in waves. Each machine gets one zero, two or four days after it is published and the panel says when its turn comes; "Install anyway" brings it forward and a switch asks for day one always. A security release reaches everyone on day one.
Changes
Panel hardening: every privileged command can only do what the panel really does: no mounting, no linking services, no containers with the machine's root inside, no joining powerful groups and no reading system files through side doors.
GitHub releases: every version now ships with its notes, in Spanish and English; the earlier ones, which were blank, have been filled in.
Update LGM-OS: it will not update on UPS battery nor twice at once, and at the end it checks that the new version answers rather than the old one.
Update LGM-OS: an update cut off halfway (a power cut) is reported at boot, with what to do, and a version that already failed is not retried on its own.
The calendar stands on its own. Create your calendar and address book from the panel, with no need to connect a phone first.
Bring your calendar from wherever it was. Import the .ics or .vcf you exported from your previous calendar; anything already there is updated rather than duplicated.
Search the calendar. Find an event, a task or a contact by title, place, note or phone number, ignoring case and accents.
Event reminders. Choose how long before you want to be reminded; the reminder travels with the event to your phone.
Changes
The installer asks for the NAS name. A welcome screen and a name screen (https://<name>.local:5001; every machine used to come out as lgm-nas), with Go Back and Continue moving between them and no way into the installer menu.
Undo on delete. Removing an event, a task or a contact now offers a button to bring it back.
Calendar and contacts can be backed up. The calendar folder now shows up as a source in backups: until now there was no way to back it up.
Fixes
With Docker stopped, the screens that use it now say to start it instead of showing the internal connection error.
Wake-on-LAN, clouds and remote folders: their configuration now updates itself at start-up; until now what each version improved only arrived when they were set up again.
Calendar on mobile: the import button becomes an icon so the search box fits.
The calendar no longer overwrites what your phone changed. If something changed while you had it open, the panel says so instead of saving over it.
Service certificates: they are renewed with the NAS running too; they used to be checked only at start-up, so a machine left on for a year lost calendar and WebDAV.
The calendar says when it does not fit instead of showing half the list in silence.
Calendar and contacts: the panel shows the calendar again; on installed machines it came up empty because the panel could not enter the service's folder.
Calendar and contacts can be edited from the panel. Events, tasks and contacts are created, changed and removed without picking up the phone; the phone sees it on its next sync. Repeating events are still edited from the phone.
Fixes
App store, Cameras, Gallery, Virtual machines and Calendar: the screen no longer ends in “failed internally” when the NAS answers something other than what it expects, as happens with a panel newer than its system.
Calendar and contacts: the address you copy to your phone now says “https://” when the service is encrypted; it was always built with “http://”.
Gallery: private places. Mark your home, the school or work and the NAS strips the location from photos taken there when you share them. Under Tools.
One name to reach the NAS, at home and away. With the NAS set as the VPN client’s DNS, your internet name answers with the home address to devices at home and with the tunnel address to VPN clients. The app installed on your phone stops failing depending on where you are. Everything that worked before keeps working the same.
Changes
WebDAV is really encrypted now. The panel advertised “https://” while Apache served that port in the clear. If you had it set up with “http://”, change it to “https://”; if your device complains about the certificate, install the NAS authority first.
Calendar and contacts are encrypted. Change the address on your phone from “http://” to “https://” (the one shown under Control panel → Addresses). If your phone complains about the certificate, install the NAS authority first from External access.
Fixes
Docker: machines that moved their store to the volume before August now get the missing start-up ordering; without it Docker could start before the volume and rebuild its store on the system disk.
Certificates: whoever answers the Let's Encrypt renewal is checked at every start-up, including on a NAS with nothing published; it could be left with no one answering and the certificate expired two months later.
The NAS in Windows «Network» and in the Finder: its announcement updates at start-up, so icon and Time Machine improvements arrive without saving the shared folders settings again.
NAS DNS server: if the NAS itself is listed as its own DNS, it no longer takes itself as a forwarder; it used to end up with none, leaving the house unable to resolve internet names while the panel reported everything was fine.
Media server and antivirus: their configuration now updates itself at start-up. Until now, what each version improved only arrived when that screen was saved again.
NAS DNS server: its configuration now updates itself at start-up and when the VPN or dynamic DNS changes; it used to be rebuilt only on saving that screen, so turning the VPN on left clients unable to resolve names.
VPN: new profiles use the NAS as their DNS while its DNS server is on, so your home name reaches the NAS over the tunnel too.
Virtual machines: automatic start is now a single click on the machine's card, with no need to open the edit form.
Cameras: live view over 4G or the VPN no longer keeps stopping and starting; when the network is bursty it keeps a bit more video ahead (up to 3 s) so it plays smoothly.
VPN: the tunnel clamps the segment size of every connection, so a phone with a configuration older than the packet-size fix —or a route that shrinks along the way— no longer leaves the panel blank. If the system rejects the rule, it is skipped and the tunnel stays as it was.
Gallery: saved searches. “The summer videos I starred” is saved as the question, not as the list: it keeps itself up to date as you add photos. It lives in the three-dot menu, next to the filters that make it up.
Fixes
Gallery on mobile: the options live in a three-dot menu; you used to have to drag the bar sideways and half of it was invisible.
Gallery: uploading photos from a phone works. It said it had, the gallery kept showing the old view, nothing reported progress, and one rejected photo cancelled all the rest.
Uploads: with many files the panel bogged down drawing the list instead of uploading.
Cameras on mobile: the live view opened at half screen; it now fills the screen.
Storage, Backups and Package Centre: the section strip now shows that it continues to the right, and “Refresh” moves out of it.
VPN: a client stored in an older format no longer stops the tunnel configuration from being brought up to date at boot.
Files: dragging the preview window by touch did not move it; with a mouse it did. It is the same bug the camera controls had.
Storage: “Network drives” failed internally and left the window showing the error card instead of the screen, until you reopened it.
The tunnel configuration now brings itself up to date at boot. Fixes shipped in a release only reached a machine the day someone added or removed a VPN client; until then it kept the configuration from the day the VPN was set up. If you wrote that file by hand, it is left alone.
VPN: creating a client now lets you choose how far the tunnel reaches — the NAS only, your whole home, or all traffic — and each option shows the address the panel will open at: with “the NAS only”, the tunnel one and no other; with the rest, your home ones too.
Fixes
Cameras: moving the camera by touch did nothing —with a mouse it worked—.
VPN: the panel tells you which address to use with the tunnel on, inside the configuration file too. The name you use at home (“something.local”) does not work over the VPN — and the browser does not say so: it reports the NAS as not answering.
Addresses: the tunnel address is listed separately and labelled as the one for getting in from outside; it used to sit among the other IP addresses.
VPN: the panel came up blank when opened through the tunnel. The page loaded and the app inside it did not. The packet size was set only on the phone’s side, so reconfiguring the VPN changed nothing; it is now set on the NAS as well, which fixes existing clients without scanning anything again.
Two-factor backup codes are now shown and saved. Turning on two-step verification gives you ten single-use keys for when you lose your phone; the panel says how many are left and can make ten new ones. They used to be generated and never shown: losing the phone meant losing the account.
Per-account schedules (Users and groups → Schedules). Outside its window, that account cannot sign in and its shared folders are closed. Administrators cannot have one.
Diagnostics now checks access from outside: whether there is an internet address, whether the certificate covers it, whether the panel opens over the VPN, and which VPN clients carry an old configuration that connects but will not open the panel.
Full details for every drive under Storage → Health: capacity, firmware, spinning or solid state, how it is connected and at what speed, years powered on, power cycles, data written and read over its life, wear used, and how the last self-test ended. Everything you need to decide on a replacement, without going in over SSH.
Reissue a VPN client’s configuration without deleting it: same name, same address, fresh keys. Use it when the tunnel connects but the panel does not open. You have to scan the code again on that device.
Changes
Numbers are written the way your language writes them. In Spanish, “1,9 TB” and “45,3 %” with a decimal comma; the panel used a point everywhere. A file size could even show with a comma in Storage and a point in Photos, depending on the screen.
The browser tab says what is open (“Cameras · LGM-OS”). With the panel in several tabs, they were all named the same in the tab bar and in history.
The page declares the language it is in, so a screen reader pronounces it correctly and the browser stops offering to translate what is already translated.
Dates are written the same way across the whole panel. Each screen carried its own copy of the format and they could drift apart.
Fixes
External access: the NAS certificate did not include your internet address, so on that address the browser said the certificate did not belong to this site —a warning you cannot dismiss on a phone— and would not let you install the panel as an app. It is included now; if you have just configured the domain, restart the panel so it is reissued.
VPN: restricting the panel to your home network locked out the VPN itself. The tunnel connected, ping worked, and the panel opened neither by address nor by name.
Health: one drive value in an unexpected format brought down the whole screen — the very screen you open when you suspect a drive is dying.
Notifications: an administrator no longer empties everyone else’s notification centre. Clearing took other accounts’ personal notices with it, notices it cannot even see.
The notice that someone shared a folder with you now reaches your phone, which was the whole point. It only showed up if you opened the panel and looked at the bell.
Health: a solid-state drive connected over SATA is shown as one; it used to look the same as a drive nothing is known about.
Health: the drive details are written in plain language —“SATA”, “2.5-inch”, “No errors”— instead of repeating the system tool’s jargon.
Health: “Last self-test” says how long ago it ran. It used to show the drive’s age on that day, so a test from yesterday read as “337 days ago”.
Security
A personal notice no longer reaches a phone whose owner is unknown. Devices subscribed before the owner’s name was recorded received everything, and now that notices can be addressed to one person, that meant someone else’s messages on their lock screen.
A domain with a newline inside can no longer slip into the panel certificate.
You are told when somebody shares a folder with you, and when they stop. It used to appear —or disappear— with no word, and you only found out by looking. The notice is yours: nobody else sees it, not even the administrator.
Fixes
Dark theme: nine notices showed as light text on a light box, among them the ransomware-trap alert and the instructions for restoring a backup.
Dark theme: blue buttons (Save, Apply, Enable) had text too light for their background; the blue is adjusted and reads without strain.
Dark theme: the SMB, NFS and WebDAV badges on a shared folder went blank on hover, which is exactly when you need to read which one you are about to press.
Light theme: small grey text —paths, hints, "2 with access"— was readable or not depending on where the window sat on the wallpaper. It now reads anywhere on screen.
Cameras: the labels over the video box ("no image", "the recorder is connecting") also read with the panel in light theme.
Files: copy, move, compress, extract and restore-a-version work again for accounts that do not administer. The menu offered all six and every one ended in "administrator role required"; each now works within what that account has: the source is read and the destination is written, and MOVING also needs write access on the source.
Files: sharing a link and requesting files are no longer administrator-only. Every account creates and revokes its own, and only its own; administrators still see them all.
System check: two checks came out green without having been able to look. If Docker does not answer it said "no containers running" —and their ports may well be published to the whole network—; and the NFS folders check passed itself while saying, in green, that it could not check. Both now warn.
Files: compressing and extracting run two at a time. Several people asking to "compress everything" at once left the NAS with no room to serve its own panel.
Files: the cap on active links and file requests is per person, not for the whole NAS: one account filling its own left everybody else unable to share anything.
Restore drill: changing its settings while one was running could lose the result just recorded, or undo the change —turning it off undid itself—.
Cameras on mobile: opening a camera left the timeline and the controls taking half the screen and NO video at all. Resizable windows remembered the size from the computer and carried it to the phone, where it does not fit: mobile now uses its own, and resizing on the computer no longer overwrites the phone's or the other way round.
Cameras: with the live view cut off, the pan and zoom controls covered the button to try again. While there is no picture they step aside: there is nothing to aim at.
Security
Taking the Cameras app away from someone takes the cameras away at once. They kept watching the live view and the recordings for up to half an hour from the tab already open.
Taking a folder away from someone also cuts their downloads from it, which kept working for up to half an hour with the link they already had.
A public link stops working if its creator loses that folder. It kept handing the folder over —and accepting uploads, if it was a file request— even though its owner could no longer so much as see it. Deleting the account did remove them; lowering the permission did not.
Demoting an administrator closes any terminal they had open. It was a root console that nothing checked again for as long as the tab stayed open.
"Close all sessions" now also closes live video and a virtual machine's console. Both stayed open —the house cameras' picture, and keyboard and mouse inside the machine— until the browser was closed, with the panel saying every session had been revoked.
Taking Cameras, Monitor or Virtual machines away from someone cuts whatever they have open from those apps, without waiting for them to close the tab.
The player no longer opens playlists. A file like that is not a video: it is an index pointing at OTHER files, and a five-line one was enough to watch someone else's private video from your own folder. The converter no longer reaches the network either.
Saving a system file can no longer end up somewhere else. The NAS writes its configuration files with administrator permissions, and to do so it first creates a temporary one with a predictable name: anyone able to leave a link ready under that name —in a shared folder, or on the USB stick where an encrypted volume's passphrase is kept— got the NAS to write over a system file for them.
Restoring a backup can no longer change the owner of a system file. When it finishes the NAS hands the restored files back to their owner; if the backup contained a shortcut, that change landed on whatever file it pointed at, wherever it was. Same for camera recordings, the calendar folder and app data.
Dark theme: a replica test result was readable when it succeeded and not when it failed, and in Files the «go to its folder» shortcut faded out on hover.
Dark theme: in «Still to do» (the desktop), hovering over an item made it unreadable: the text turned black on the dark background exactly as you went to click it.
Console:lgm dhcp now checks that an address actually arrives before saying the interface is on DHCP. It is the command you use when the network is already broken, and it said «done» even when there was no DHCP server or no link.
Installation: at the end, the installer now ASKS the panel instead of trusting that the service was launched. It used to say «the backend responds correctly» even when the panel never answered, and that is the last line you read before rebooting.
Installation: if there is no room to build the panel, the installer now says so up front instead of dying halfway with an error that pointed at memory and networking.
Directory service: if the folder configuration cannot be rewritten when leaving the domain, the panel no longer claims «standalone» with the old one still in place.
Backups: the destination lock is now really checked. If the test deletion failed because of the network or a transient provider error, the panel called the destination hardened without having checked anything; it now looks for the test file and says so when it cannot tell.
Replicas: when taking over, a NAS that cannot read its own accounts no longer says the other machine's accounts «do not exist here» —which sent you to create them by hand in the middle of a recovery—.
Directory service: if leaving the domain fails, the panel now says the folders are already back on NAS accounts. It used to say only «could not leave», which reads as nothing having happened.
Security
Phone alerts now reach only the people they are meant for. Any account with the panel installed on their phone received the administration alerts —a failing disk, a backup that did not run, the anti-ransomware trap— with job names and folder paths inside.
Deleting an account disconnects its personal clouds. They stayed connected on the NAS with that person's Drive or Dropbox credentials, and anyone signing up with the same name could mount and read them from Files.
Deleting an account also removes its phone alerts, which kept arriving on that phone forever.
Addresses now warns about what is not encrypted. The calendar and contacts one is not: every time your phone syncs, your NAS password travels in the clear over the network. It is said next to the address, which is where you copy it from for your phone.
Passkeys: asking for the login challenge is now rate limited. Without it, anyone from outside and with no account could stop whoever was signing in with their face or fingerprint at that moment.
Alert email now checks who it is talking to. It encrypted the connection but did not verify the server's certificate, so anyone able to sit in the middle walked away with your email password. And if you turn STARTTLS off, the panel now tells you what that costs.
The app store now checks six more things in every recipe. Those from other catalogues are written by people we do not know, and there were ways around the whole review: asking the NAS to hand one of its own files to the app (that one walked away with the key to your public address), pulling half the recipe in from another file, or asking for ten dangerous permissions — among them the one that lets an app drop a program with root powers into a shared folder.
Gallery: the toolbar is no longer a wall of buttons. Duplicates, similar photos, clean-up and the Google import now live under «Tools», each with a line explaining what it does. On a phone the bar scrolls instead of stacking: five rows of buttons become one, and the photos start at the top.
Gallery: slideshow. The play button in the viewer moves through the photos on its own, five seconds each, and waits for a video to finish instead of cutting it. It stops at the last one or as soon as you touch anything, and keeps the screen awake while it runs.
Gallery: filter by what you are looking for. Buttons for photos only, videos only or Live Photos only, and a list to jump to a given year. They combine with each other and with the name search and favourites.
Gallery: each photo's details. In the viewer, behind the info button: camera, lens, ISO, aperture, shutter, real size and where it was taken, with a link to the map.
Gallery: add tags, a title and copyright. They are written INSIDE the photo, so they travel with the file wherever it goes and any program can read them. And they are searchable: type “beach” and the ones you tagged that way come up.
Gallery: remove a photo's location, which is what you do before sharing the one of your house.
Gallery: “On this day”. At the top, what you did on this same day in previous years.
Gallery: bring your photos over from Google Photos with their dates. A Google Takeout hands the photos over with the date you downloaded them, so twenty years all land on “today”. Point it at the folder and it gives them back their real date, description and location.
Gallery: clear out the clutter. Finds screenshots and blurry photos and tells you how much space deleting them frees. It never deletes anything on its own.
Gallery: private areas. Mark your home or workplace and strip the location from every photo taken there in one go, so a shared link does not say where you live.
Gallery: saved searches. Save “the videos from 2019 I starred” as an album that keeps itself up to date as you add photos.
Gallery: your library in numbers. How much there is, what each format takes up, what time of day you take photos and which days of the year.
Gallery: find similar photos, not just identical ones. The one that came back from WhatsApp recompressed and the original do not weigh the same, so the usual duplicate search never saw them. The first run takes a while; after that it is instant.
Notifications now make a sound. A short chime when one arrives, lower if it is serious. It uses the panel's own volume and mute, so the control centre slider already silences it.
Changes
Everything is finger-sized on a phone. Buttons, fields and rows are now as big as a fingertip: no more missed taps on the tighter screens.
Docker on a phone: each container shows «Open» plus a more-options button with the rest —logs, console, stop, restart, update and delete—.
Virtual machines on a phone: each machine shows its details and start or screen; shut down, reboot, force power off and delete move into more options.
Storage and Backups on a phone: the tabs slide in a single row instead of stacking into four before the content starts.
Fixes
What fails in the background now says what happened and what to do. Wiping a disk, updating the NAS, installing an app or restoring a folder: when something went wrong, the task card — and the alert that reaches your phone — explained it with the raw system command in English. They now give the reason and, if a program is missing, which one.
Docker: on a phone the container name was cut down to two letters, and stop, restart and delete fell outside the card with no way to press them.
Files: on a phone the window footer cut the path mid-word against the free-space bar.
Photos: the checkbox that selects a photo was less than half a finger wide.
Option menus: the line explaining each option was cut mid-sentence.
Desktop: the right-click menus did nothing —neither the one on the background (add a shortcut, sort, change the wallpaper) nor the one on an icon—.
Desktop: the box you drag to select several icons unselected them all on release.
Files: uploading a file over 100 MB from outside over LGM Connect failed saying the NAS could not be reached. That is the tunnel's limit: it now says so, and for big files upload them from your own network or connect with the VPN first.
Files: when an upload fails, the notice now says why. It used to only count how many had failed, with the reason left inside the uploads tray.
The panel went blank on a computer and came back when you resized the window: a maximised window could keep the wrong screen measurement and shrink into a corner. It no longer depends on that measurement.
A film the browser cannot render now says why. It stayed black, with no picture, no sound and no message at all, because the browser did not report an error either.
Security
Opening the root console can no longer be guessed at. It was the only one of the four doors that ask for a secret with no attempt limit: failures now count towards the account and IP blocks, like signing in or changing your password.
Country blocking works again with LGM Connect on. The filter is applied by the firewall looking at where the packet comes from, and traffic arriving through the tunnel comes from the NAS itself — so turning Connect on silently disabled it for internet traffic, which is exactly what it exists for. Your home network is untouched by this change.
Someone else's NAS can no longer overwrite your session. With LGM Connect every machine lives on an lgm-os.com subdomain, which let a page on someone else's NAS write a cookie your browser then sent to yours and to the portal. You do not have to sign in again: open sessions keep working.
Web: passkeys are checked against lgm-os.com rather than against whatever the request claims, which is what stops a signature obtained elsewhere from working here.
Gallery: sharing an album by link published ALL of its photos, including ones in folders the sharer cannot see. The link now carries only theirs, and a photo added later does not slip in either.
Gallery: private zones are now admin-only. They are the coordinates of your home or your children's school, and any account with the Gallery could read them.
DNS certificate: the DuckDNS token is no longer visible in the NAS process list, which any account on the machine can read.
Web: adding a passkey now asks for your password — and for your verification code, if you have one. A passkey opens the account on its own, signs in without a code and keeps working after a password change.
Web: each licence's LGM Connect address, on your account. At lgm-os.com → My account → LGM Connect, with the date the NAS last connected.
Changes
Alerts is split into tabs. The six notification channels, the routing and the thresholds no longer sit in a two-and-a-half-screen scroll; a green dot marks the ones that are on.
The Control Panel is reorganised. «Network» now gathers the interfaces, addresses, DNS, DHCP, SSH and SNMP; access from outside is its own group, and the printer and the calendar sit with the NAS services rather than with connectivity.
External access is split into tabs. LGM Connect, tunnel, DDNS, certificate and proxy no longer fit on one screen; pick one at the top and only that one shows.
Web: «My account» is split into five sections —Licences, LGM Connect, Security, Password and Your account— and shows only the one you click.
Fixes
On phones, tab labels were drawn on top of each other all over the panel; the bar now scrolls and they read in full.
Network: on a phone, each interface's «Configure» and «Release» ended up off the screen with no way to reach them.
External access: the «How it works» link on the certificate and proxy screens was drawn inside the button next to it, on top of its label, and could not be clicked.
External access: LGM Connect's «Turn on» and the tunnel's «Save» were drawn as plain text instead of buttons.
Web: in My account → Security the three buttons were each a different width and the key name was typed into a field with no box.
LGM Connect: turning it off and back on now works. Turning it off left its tunnel behind, and the next activation died with a message in English — whatever name you chose. It is now removed on the way out, and the name goes back to being free.
LGM Connect: a setup that broke halfway left the address answering "Error 1033" forever, and that name could never be requested again. It is now undone in full.
LGM Connect: the panel says "connecting" until the address really answers, instead of calling it ready straight away. The first time takes a moment, and it now says so.
LGM Connect: if the tunnel disappears on its own, it is rebuilt and you keep your name. That NAS used to be left unable to turn it on again.
Gallery: photos are sorted by when they were taken, not when they were copied to the NAS. Copying them stamped every one with that day's date, so a 2019 trip showed up mixed in with this week and the timeline was a single month. The camera's own date is read now (JPEG and RAW); already indexed photos are revisited on their own.
Web: removing a passkey that was no longer there said it had been removed.
Web: on the verification-code screen the message appeared twice, and it came out in Spanish for anyone browsing in English.
Security
Licences: revoking a licence — or releasing it from its machine — now also takes away its LGM Connect address. It used to stay published and working.
Adding a passkey to the panel now asks for your password — and for your verification code, if you have one. A passkey signs in on its own and without a code, so without this anyone who knew your password could bypass the second factor for good.
Passwords now expire when you sign in with a passkey too. The policy's deadline was only applied when signing in by typing it, so anyone using a passkey never changed theirs — and that same password still opens the shared folders over the network.
Web: adding a passkey now asks for your password. A passkey opens the account on its own and keeps working after a password change, so coming across an open session is no longer enough to leave one behind.
Web: signing out also clears the password confirmation for the admin pages, instead of leaving it alive for fifteen minutes in that browser.
LGM Connect: your licence key no longer travels in the address when releasing the name, so it is not written into the server's logs or anyone else's along the way.
LGM Connect: reach your NAS from outside with an address of your own. Pick a name in External access and you get yourname.lgm-os.com, with no router ports to open and no IP to remember. Requires an active licence.
Web: sign in with Face ID, your fingerprint or your device PIN. No password to type, and you can add your phone, laptop and tablet. At lgm-os.com → My account.
Web: two-step verification on your account. A code from your phone as well as your password, with recovery keys in case you lose it. Turn it on at lgm-os.com → My account.
Several desktop icons at once. Pick them with Ctrl, with Shift or by dragging a box around them, then move, open or remove them all together. Ctrl+A picks them all and Escape lets go.
Files on the desktop. Drag a document, a photo or a PDF out of Files and it stays there as a shortcut, with the same icon it has in its folder. Opening it opens the file; if you move it or delete it, the desktop says so.
Changes
Documentation: the README now explains the whole publishing process —version, ISO and website— and the guides list includes the new from-scratch installation one.
Links are now purple, in the panel and on the web; blue is kept for buttons and for what is selected.
Fixes
Web: LGM Connect's address was barely readable in dark mode.
Addresses: the screen no longer goes blank when the system helper is not answering — which is exactly when you open it to copy an address and test.
Installer image: the installer came out with Debian's looks and with its two root consoles open. It is now built with the NAS design and those exits closed, as intended.
Console: in lgm set-ip you could not correct what you typed — the arrow keys inserted stray symbols — and one typo threw you out of the whole command. It is now editable with the arrow keys, prefilled with the current values, and asks again on a bad value.
Desktop: double-clicking a shortcut opened Files at the last folder you had visited instead of the shortcut's own, and a shortcut to a Control panel screen opened its front page instead of that screen.
A closed window kept running underneath —polling the NAS and taking messages meant for another window— when the closing animation did not finish.
Dock: in "Configure the dock" the icons spilled out of their row, overlapped each other and cut the names down to "Notep…"; now they fit and read in full.
Dock: signing in no longer shows the factory dock for an instant before yours.
Permissions: a rule granted to a group —"Cameras, for everyone in the house"— now also reaches accounts that exist only in the panel, with no shared folder or SMB. They used to be left out silently: the sharing screen showed it as granted and they did not have it.
Accounts: deleting someone also removes the SMB or WebDAV left flagged and not yet started; a new account with that same name got them on first sign-in.
Accounts: unticking "Shared folders" or "Web access to files" for someone who has not signed in yet now cancels it. It stayed flagged: the box showed as off and the service was granted anyway the day they signed in.
Groups: deleting a group removes its permissions from the shared folders and from the app allocation, instead of warning and leaving them in place. A new group with that name inherited them.
Control centre: the sound and brightness sliders and the mute button can be tapped with a finger.
Control centre, next to the clock. Sound, brightness, light or dark theme, hiding the dock, full screen, and restarting or shutting the NAS down without opening the Control panel. Plus Wi-Fi and Bluetooth switches when the machine has them: what is not there is not drawn.
Installation tutorial, with screenshots. In the panel's help and on the website: downloading the image, writing the USB stick on Windows, Mac or Linux, booting the machine from it and what each screen looks like. Guides can now carry images.
New installer: a straight line, with the panel's design. It boots, formats and installs without asking anything, in the NAS's colours and branding. If your network does not hand out addresses, it asks for the IP inside its own window; if it does, there is nothing to touch. There is no way off the path any more: one menu entry, no editing the boot line, and no administrator consoles inside the installer.
The installer image is 162 MB smaller. Driver files were shipping twice inside the ISO.
The dock is now yours to arrange. Right-click it: remove icons, add Docker apps or Control panel screens, change the size and hide it automatically. Drag the icons in the dock itself to reorder them. It stays exactly as it is until you touch it, and “Back to the default dock” puts it back.
Cameras: the live view now goes full screen. A button on the corner of the image; on a phone it turns to landscape by itself and the screen stops going to sleep while you watch.
Changes
The QR code is gone from the NAS screen and from lgm url. The address is still there, written out and large; the code took up half the screen and meant pointing a phone at a lit monitor. The panel's own QR codes —VPN profiles and two-step verification— are unchanged.
The theme button now lives inside the control centre, on the same bar.
Each screen's «How it works» link is now lilac, and reads properly in dark mode.
Fixes
Video: on an older iPad or Mac, the player now explains why it cannot convert a video instead of falling back to the generic message.
The control centre would not open. The Wi-Fi and Bluetooth switches returned an internal error as soon as the NAS could tell which card you were reaching it through.
Turning off the Wi-Fi you are connected through no longer slips past. The warning that prevents it vanished silently when the NAS could not check; now, if it does not know, it does not turn it off and tells you why.
Sign in: with the browser's storage full — or in a Safari private window — the panel refused access with the correct password.
Video: an AVI, MTS/M2TS, WMV or MPG ended in "Could not open" even though the NAS could convert it: the panel gave up before the answer arrived.
Video: a film ready to watch kept a spinning "loading" wheel over it until someone pressed play — always in Files, and on phones in the Gallery too.
Gallery and Files: WMV, MPG, MPEG, TS, VOB, FLV, M2V, ASF, DivX, 3G2 and OGV videos now appear in the Gallery, with their thumbnail, and open in the player. Before they did not.
Cameras: the live view on an iPhone is no longer choppy. It ran at eight frames per second in compatibility mode; now the camera's own video arrives untouched, as on every other device (needs iOS 17.1 or later).
Cameras: a live view that never manages to show an image no longer leaves a black rectangle labelled "live": it falls back to compatibility mode on its own.
Cameras: the image stays centred in its space instead of sticking to the top.
Cameras: the buttons over the image are bigger on a phone, and there is no longer a gap where the speaker would go when the camera has no microphone.
Video: a file the browser cannot open now says WHY it will not play —"this NAS has no ffmpeg", with the command to install it— instead of a bare "Could not open".
Video: with two films being converted at once, the third one asks you to try again in a moment instead of sending you off to download the file.
Video: jumping to another point in a long film no longer cuts it off after half an hour: it carries on from where you were.
Desktop and dock: a shortcut to a Control panel screen that is no longer yours stops appearing, instead of taking you to a "you do not have access".
Accounts: deleting someone now also removes their panel preferences —wallpaper, icons, dock and widgets—, so a new account with that same name no longer finds them in place.
Opening an administrator session in the Console can be confirmed with Face ID, instead of typing your password in front of whoever is next to you.
How to reach this NAS. Control panel → Addresses now opens with the panel's own addresses and what each one allows: by machine name (https://your-nas.local:5001) you can sign in with your fingerprint, install it as an app and view it offline; by IP the browser allows none of the three. If the NAS is not announcing its name, it says so instead of offering a link that would not work.
Sign in with your phone’s fingerprint, face or PIN — no password typed. Control panel → Your account and 2FA, “Add a passkey”. It needs you to reach the NAS by a name (nas.local or your external address) over https: browsers do not allow it by IP address, and the panel explains that on the spot.
A valid certificate without opening a single router port. If your address ends in .duckdns.org, pick “Validate over DNS” and paste your DuckDNS token: the NAS moves to real HTTPS —with phone app installation and offline mode— even when your ISP will not let you open ports.
Videos the browser cannot open are converted on the NAS and play in the panel. A film with Dolby Digital (AC-3) sound played perfectly and made no sound at all; an AVI or a camcorder file (MTS, M2TS) would not open. They now play, with their sound, and you can pick the language when the film carries several.
Changes
Passkeys are now named the way your device names them: “Face ID or Touch ID” on an iPhone, “Windows Hello” on Windows.
The NAS resolves through 8.8.8.8 and 1.1.1.1 out of the box, instead of the router DNS. A home filter answering "does not exist" to lgm-os.com left the NAS unable to update and saying nothing. To send it through your own Pi-hole or AdGuard, change it in Control panel → Network → NAS DNS.
Fixes
Phones: the recycle bin now shows file names. They were not truncated — they were not shown at all. The shared links list had the same problem.
Passkeys: the “reach it by a name, not by IP” notice now shows your NAS's real name instead of a made-up one that resolved nowhere.
External access: turning the tunnel off or revoking its token is no longer assumed to work. If the container is still running the panel says so.
VPN: turning it off is no longer reported as done while the interface is still up.
Cameras: stopping a recording is no longer taken for granted; if the recorder is still running, the panel says so.
Changing the IP from the panel now takes effect. On machines where lgm set-ip had ever been used, a network file with the old name shadowed the panel's one —the system applies the first in alphabetical order— so the change was saved and nothing happened. It is now retired automatically, at boot and on save, and the console and the panel write the same file: whoever saves last wins.
Clouds and remote folders: unmounting one that is in use is no longer reported as done: the panel says what is holding it and the connection stays for a retry.
Network: releasing a card now also removes the configuration the console left behind; the card used to keep its old fixed address.
Changing the IP no longer claims success when nothing changed. The panel accepted the change as long as the card had any address, so with the old one still in place it saved the settings and announced "applied" while the NAS kept answering on the old address. It now requires the address you asked for, undoes the change if it does not take, and says so by name when the card is also configured by the system's own network file.
Cameras: the live view no longer stutters. The panel hugged the live edge so closely that it ran out of video between fragments, jumping every few seconds.
Cameras: compatibility mode now says so. With a camera whose video the browser cannot play, the NAS converts it to 8 frames per second —which looks choppy— and there was no way to tell.
Watching videos no longer leaves stray processes on the NAS. Opening and closing several films in a row, or a disk that stops responding mid-playback, left a conversion running for nobody; with two, the panel said it was busy converting when it was not.
Time Machine: your Mac now finds the NAS on its own. The folder worked, but it did not show up under “Select Backup Disk” in macOS: you had to mount it in the Finder first.
A video or a photo now fills the window instead of sitting small in the middle. A 1080p film on a large screen played at its own size with a black frame on all four sides; full screen was no better.
Changing the wallpaper from one device is no longer undone by another. A machine with the panel open for a while put the previous photo back as soon as you moved an icon.
If an update fails while installing dependencies, the panel now says why. The reason was lost entirely —the notice came out empty— because npm's error lines were discarded along with its advertising.
Mobile: app names are readable again over a background photo. They were in dark grey on top of the photo, which also carries a dark veil over it.
With a background photo, the panel is no longer tinted by it. The bars and the windows let it through, so a dark photo dimmed the text on top of them.
Mobile: rows you tap are now tall enough for a finger —the Overview notices and several in the Control Panel fell short—.
Gallery: if thumbnails fail to load it now says why in one line at the top, instead of leaving a grid of grey squares indistinguishable from "still loading".
Gallery: when the photo disk stops answering the panel no longer hangs for everyone —it asked once per thumbnail— and says the disk is not answering instead of "that photo is gone".
Docker on the phone: the container list was misaligned. The header buttons were drawn on top of the “Containers” title and the last one was cut off by the edge; they now wrap onto their own line. This affected any panel screen with several buttons up top.
Docker: each container's stack label is visible again. A long image name used to clip it away entirely.
The security advisor was deducting twice for two-step verification: the same warning appeared under two titles, and a NAS with two administrators without it scored 35 out of 100 instead of 45.
On a phone, a PDF no longer comes up blank..pdf files —and the preview of a .doc or .xlsx, which is a PDF— were drawn in a frame, and neither Android nor the iPhone has a PDF viewer for a frame: what appeared was an empty rectangle with no explanation. They now open in the phone's own viewer.
Security
Turning off SSH password login now really turns it off. The panel checked that its configuration was valid, not that the server would apply it: on a machine whose sshd_config sets that option on its own, unticking "sign in with a password" said "done" while SSH kept accepting them. The server is now asked what it will actually apply, and if it does not match, nothing is changed and the reason is given.
Converted video is served with the same protections as every other file on the NAS: the browser does not guess its type and cannot run anything carried inside it.
What is yours is no longer waiting for whoever logs in next on that computer. The folders pinned in Files, where you were last, the Notes notebook and the destination for photos sent from your phone were shared by every account on the browser. Pin your folders again.
The Overview says what you still have to do: no backup, the certificate not installed on that device, the firewall not loaded… Each line takes you where it is fixed, and the list disappears when nothing is missing.
The security advisor now looks at your data too, not only at the doors: it warns if no backup is configured, if the last one failed, and if any administrator signs in with a password alone.
Uploading photos from a phone no longer repeats what is there. Pick the whole camera roll: only the missing ones travel, and it tells you how many it skipped.
Fixes
The security adviser now sees the long-standing administrator. On a NAS upgraded from before account roles existed, the two-factor check said "no administrators" in green — with one who had no second factor.
Cameras: the wall can be expanded by tapping a camera. There is no double-click on a touchscreen, so watching one full screen could not be done from a phone.
Files: inside an archive, a tap opens the file on a phone. Before, it only entered folders: you could see what was inside and could not get anything out.
Turning on the tunnel without Docker installed now says Docker is missing, instead of dumping the whole command on screen with an "internal error".
Reconnecting a cloud account with the wrong password no longer breaks the one that worked. It was tested after being replaced, so one mistyped field could take down a backup that had been running for months, with no way back.
Security
Sharing a Gallery album with a password now requires eight characters, like every other public link. It used to accept a single one.
The NAS authority's key is now out of the panel's reach from the inside too. It was already locked down on disk, but the process with administrator rights could still read it.
External access → Certificate now carries the whole tutorial: both steps —install the certificate and add the panel as an app— with the ones for each device, and you can pick the device to set up the phone from the computer.
Fixes
The prompt to install the certificate also shows inside the app already added to the home screen, which is where the missing certificate shows.
In Safari the panel no longer waits forever for an answer that never comes before offering the certificate.
Five new guides on the website: connecting your devices (Windows, Mac, Linux, iPhone and Android), users and permissions, what to do when something is not working —ordered by what you see—, the port reference (which ones you open on the router and which you never do) and a glossary.
The "installing the panel as an app" guide has been rewritten: what you gain from it, phone alerts, sending things to the NAS from any app, how often the certificate has to be redone —almost never— and how to remove it.
Every guide now shows its own index —with the section you are in—, how long it takes to read and how many sections it has; the side list is grouped.
Notification centre: an alert saved in an older format no longer blanks the whole screen. That one is dropped and the rest still show; before, all of them were lost — including the failing-disk one.
Files opens at the shared folders again on a phone, instead of inside whatever folder you last visited: on a narrow screen the folder list is not on view, so starting inside one left the index a trip away. On a computer it still opens where you were.
Downloads: the "nobody is listening on port 6881" warning is gone. That port is only opened by the download program while a torrent is running, so the warning showed all the time — with no torrents there is nothing to fix. It now appears only with a torrent running, which is when it really does slow the download down.
Security
Package Centre: an app's logo can no longer make the NAS fetch something inside your network. The catalogue is written by third parties, and one of its addresses could redirect the request to your router or to the NAS itself.
The NAS can no longer be used to reach machines on your private network. The filter that stops it fetching from internal addresses did not cover the range used by Tailscale and by fibre connections on shared addressing.
The NAS's certificate authority is no longer within reach of the panel. Its key signs any website as valid on the devices where you installed it, and nothing but creating it ever needs it.
Disk notices no longer reach people who do not administer the machine: anyone with the panel open could tell when a disk was connected, removed or being wiped.
Logging out now clears whatever was left from the phone's Share menu. Those were photos that were sent and never uploaded, and they stayed in the next person's browser.
Your NAS's certificate is reissued on update: the browser will warn once more. Install the new one from the panel and it stops.
New
The panel can now be installed as an app on an Android phone. The certificate the previous version offered could not be installed there —Android only accepts authorities—; now your NAS issues its own and that is what you download.
The panel gives the install steps for YOUR device: iPhone, Android, Windows, Mac or Linux, each with its own.
The certificate is installed once per device, even if the NAS changes address.
New guide: "Install the panel as an app". The two steps —the certificate and adding the panel— explained device by device, in the panel documentation and on the website.
Fixes
Cloud backups and mounted cloud folders return their memory when they finish, instead of holding it until the next reboot.
A large cloud backup can no longer be killed by the NAS memory cap. The cap was sized for the process that launches commands, not for the commands themselves: on a machine with little memory, copying a large photo library could stop halfway.
The antivirus scan slows down instead of dying on a machine with little memory.
The panel says why it will not install as an app, instead of offering nothing, and hands you your NAS's certificate to install. Until now it saved a shortcut with no logo that opened blank, with the address bar on top, and no explanation.
Fixes
The shortcut the browser saves now carries the NAS logo, even where the full app cannot be installed.
Permissions: “for everyone at home” now reaches people who already had an account. The group those rules apply to only picked up accounts created afterwards; it repairs itself on update.
Installing the system on a machine with little memory no longer fails blaming the internet connection: the install now compiles with the same headroom updates use.
Updates: if installing packages, the dependencies or starting the new code fails, the panel says what that command said instead of a generic sentence.
Snapshots: “No snapshots yet” no longer appears when the NAS could not read them. It now says what failed, and a partial listing stops being thrown away whole.
UPS: the shutdown plan tells “nothing running” apart from “could not check”. With Docker or the virtual machines not answering, it claimed there was nothing to stop.
Files, Notes and Help came up blank on an iPhone, iPad or Mac that no longer gets system updates.
Control Panel: on those same machines, the pencil on a shared folder or a group opened nothing.
Gallery: on a phone the buttons on each album —rename, download, delete— and the photo selection checkbox are visible now. They were there, invisible, and got pressed by accident.
Gallery and Files: the fullscreen button is no longer shown where fullscreen does not exist —on an iPhone—, instead of sitting there doing nothing when pressed.
The desktop fills the whole screen when opened from a phone or tablet browser: nothing is left behind the browser bar at the bottom any more.
Control Panel: eight screens —Antivirus, Printer, DLNA, rsync, Addresses, Calendar, Country blocking and Report and trap— went blank without a single message when the NAS answered halfway; now they say so and stay on their feet.
1.55.0 could not install: it was published with the interface not compiled, and every NAS rolled itself back to its previous version without breaking anything. Update to this one.
Updates: when an update fails, the panel now says the real reason instead of repeating that it failed.
Calendar: tasks, next to the calendar. Whatever you jot down as a task from your phone or computer shows up in the panel, by date, overdue ones in red and done ones at the end.
Printer: scanning. The same all-in-one that already prints drops the page into the NAS folder you choose, as a PDF with its text inside so you can find it later from Files.
Photos: share a whole album with a link. It downloads as a single compressed file, with optional expiry and password; removing a photo from the album removes it from the link too.
System monitor: Debian security patches. Shows whether they are applied automatically, when they were last checked and whether the NAS is waiting for a reboot.
Fixes
Phone alerts: two different alerts no longer replace each other. "A disk is dying" arrived and the next one wiped it off the screen before anyone read it. They also stay until you tap them.
On a phone, pulling down no longer reloads the panel and takes everything you had open with it.
The phone's back gesture returns to the home screen instead of closing the whole panel with the app still open.
The "Upload to the NAS" shortcut —press and hold the installed panel's icon— now opens the file picker; it did nothing before.
Package Centre: on a phone the search box is no longer cut off and the toolbar buttons stay together instead of one dropping to its own line.
Package Centre: the "Get" button on featured cards can be tapped with the phone in landscape; it was half the size it needs to be.
Backups: the "this machine has no backup" warning now reads in full on a phone instead of in a four-words-per-line column.
Files: searching inside scanned PDFs found nothing. The text recogniser was missing; it now ships with the system.
Recover the whole NAS. The NAS saves a copy of its settings inside the volume every day; after reinstalling the system, the panel finds it and puts the accounts, shared folders, permissions and scheduled tasks back as they were.
After recovering, add the cameras again: their address carries the password inside, so it does not travel in the backup. The recordings stay in the volume.
The panel offers to install itself as an app, with its own icon and no browser bar. On Android it needs a trusted certificate (External access → Certificate); on iPhone and iPad, follow the two steps in the notice.
Press and hold the installed panel's icon for three shortcuts: upload files, the cameras and Files.
Fixes
System logs are visible again on machines where Docker never got installed: the panel was left without permission to read the journal, and with it the watcher that blocks repeated SSH password attempts went blind. It repairs itself on update.
Downloads: the "nobody is listening on the port" warning no longer shows with the port open. The panel cannot see who owns that port and took it for empty.
The server's own screen no longer gets stuck on a help website. Pressing Ctrl+Alt+F1 with the browser in front opened the browser's help and there was no way back; now it can only be on the panel. The text console is still on Ctrl+Alt+F3.
Package Center: the logos are back. The browser was blocking almost all of them for coming from another server; now the NAS fetches them, keeps them, and they show even on a machine with no internet access.
When the NAS does not answer, the buttons to retry and to open without the saved copy appear within seconds instead of after two minutes: until then there was nothing to press, only a spinner. This is what you see when opening it from the phone over the VPN.
Your NAS serves the store logos. Your browser used to fetch them from an outside server, one per app: slow on an average line, and with no internet none showed up. They are now fetched once, kept on the NAS, and nobody outside learns which apps you browse.
Fixes
Downloading a file from an iPhone, iPad or Mac did nothing. No download and no warning: Safari ignores a download link that is not in the page. It affected downloading a file from the file manager, saving a camera snapshot and downloading a container's log.
Uploads: when the NAS refuses a large upload —no space, no permission, or a bad destination— the panel gives the reason instead of “the NAS cannot be reached”.
Office: when a document cannot be saved it says what is actually wrong: no space, quota exhausted or a read-only disk, each with its own fix.
Backups: when a backup is cancelled because a source went empty, it says WHICH one and what can be seen about it (missing, or mounted and empty).
Opening an app from the panel installed on your phone no longer traps you inside it. It opened in the panel's own window, which has no back button: you had to close and reopen the panel. It now opens in the browser and the panel stays where it was.
The copy the panel keeps in your browser no longer grows without end. Every update left the previous version's files behind, a few megabytes each time; on a phone that eventually hit the browser's limit and the panel failed in odd ways until you cleared the site data by hand.
Saving SNMP, SMB, WebDAV or the rsync server no longer answers «internal error» when it did save. It happened when the firewall also had to be touched and could not be: you got a failure banner and the screen kept the old state. You now see the new state with the warning beside it.
Health: without the disk tool the screen answered with the internal error in English; it now says which package is missing and how to install it.
External access: the tunnel log showed the internal error instead of saying Docker is missing.
Package Center: the front page took seconds to show up. It asked for the catalogue seven times in a row, one per shelf; now it asks once.
The NAS appears in your phone's Share menu. Pick photos or videos, share them with LGM-OS and the panel asks which folder to save them in. Install the panel on the phone first (“Add to Home Screen”): without it the system will not offer it.
Temperature and fans of the machine in System monitor, with a warning when a sensor goes past its own limit.
Package Center: apps with a newer version available are flagged “Update ready”. Checked once a day.
Wake other machines on the network from Power: register a machine with its hardware address and turn it on from the panel or from your phone.
See the password as you type it, with the eye inside the field: when signing in, when setting up the NAS and when changing it. On a phone you were typing blind.
Changes
Web on mobile: the bar buttons —menu, language, light/dark, Buy— and the footer links can be tapped without missing. The light/dark one was eighteen pixels wide.
Forms: a message that already explains itself no longer carries the field's internal name in front of it.
Fixes
Opening an app right after the panel updates —or when a request does not get through— no longer leaves “The app failed internally” with English text: it waits and retries on its own, as it already did with the rest of its files.
Signing in from a phone: when the panel opens from the saved copy because the NAS was not answering, it no longer says “restarting?” and gives the real reason straight away, without a two-minute wait. It comes with an “Open without the saved copy” button, which is what makes the browser offer to accept the NAS certificate again.
Downloads: when the service does not answer, the panel says what is actually wrong —who is holding the port, or that nothing is listening— and shows the last line of its log, instead of offering two possible causes.
Downloads: if the service secret stops matching, it says so, and it is fixed by opening the Downloads settings and pressing Save.
Admin now keeps a log. Who issued, revoked or deleted a licence, when and from which address; also what the shop does on its own when a payment comes in.
Web, admin: customer licences now have their own page and are grouped by person: one row per customer with how many they hold, and their licences inside. Eight licences from the same address used to be eight rows repeating the same name.
Web, admin: opening the customer licences asks for your password again, and it lasts a quarter of an hour. The session alone — an open laptop, a stolen cookie — no longer reaches anyone's keys.
Web, your account: licence keys are now masked with dots and revealed one at a time with the field's eye. Copying works without ever showing them.
Web, your account: each licence folds away. One already installed on a NAS starts collapsed; if you only have one unused, it opens on its own so you can copy it.
Admin: delete a licence. For what should never have existed —a test, a duplicate, a mistaken issue—; to take the product away from a customer there is still "Revoke", which leaves a trace and can be undone.
Your account, with its settings. A header with what you own, a side index and a settings section —email, password and session— instead of a form at the end of the page.
Admin: the licence list is paginated. Twenty-five per page, with the range you are looking at and how many there are, and the shop's figures up top.
Payments are checked automatically. If the notice of a purchase gets lost on the way, the portal asks the shop every few minutes and issues the missing licence; there is also a button in the admin area to check right away.
Your calendar and contacts, now in the panel. Until now the NAS calendar could only be seen on the phone. The new app shows the month, each day's detail with its time, place and notes, and the address book with a search box. Everyone sees their own. For now it is a view, not an editor: to add or change something, use your phone.
Connect your own phone to the calendar. In «Calendar and contacts», Sync tab: the address to paste, your account name and a warning if you do not have access yet. Those details used to live only in the Control panel, which an ordinary household account cannot open.
Downloads: choose which files of the torrent you want. Tap a download and tick only the episodes you are going to watch; anything unticked is not downloaded.
Downloads: details for each one. How many computers you are sharing with, how much you have given back and which trackers it has.
Downloads: control just one. Its own speed limit, its place in the queue, and stopping sharing that one without touching the rest.
Drop a .torrent in the folder and it starts on its own. Any file you copy into <your downloads folder>/torrents starts downloading without opening the panel.
Downloads: your own trackers. Add them in the settings; they are tried before the ones the NAS ships with.
Changes
Administration: the "Licences" section is gone from the first screen. Everyone's licences live in Clients, grouped by person and behind the password again; you search there by email or by number, and issue them by hand.
The site's top bar separates the product from your account. Your things —account, admin and log out— move into a menu behind your initial, on the right.
In gift mode, one licence per account.
The price is written in one place only: the shop's product. The home page, the checkout page and the card search engines show all say the same without touching anything else.
Torrents start in seconds. The NAS ships almost sixty public trackers: a magnet starts with the first one that answers, so what matters is not picking the best one but having one alive when you press.
And they download at whatever the line gives. aria2 stopped looking for more people as soon as the torrent went past 50 KB/s —its factory value— which on fibre means settling for a tenth of the speed. It now keeps looking, and allows many more peers per torrent.
Fixes
Security: the anti-ransomware trap screen no longer breaks with an internal error when its stored settings are incomplete.
Revoking or releasing a licence in the portal never reached the NAS: the machine only checked it at activation, so an already-activated one never asked again. It now checks every twelve hours and says so; with no internet or the server down, the licence stays valid (and data, backups and services are untouched either way).
Migrating from another NAS: the connection error was shown exactly as the tool spat it out, and that includes the old NAS address with its username. It is masked now.
Downloads: removing a download that was already gone said «download removed» without removing anything, and the row was still there after a refresh.
Downloads: pausing, reordering or changing the limit of one that is no longer there no longer answers with the program's internal message, in English.
Coming in over the VPN hung on "loading" forever: the panel certificate did not cover the tunnel address, the browser cut the connection and the panel mistook it for a NAS restart. That address is now in the certificate.
And if the NAS does not answer within two minutes, the panel stops saying "restarting?" and says what to check —the certificate of a new address, or whether the NAS is on— with a retry button instead of an endless spinner.
Mobile: the "Users and groups" tab bar ran off the screen and the last tab was cut off. All five fit now, and every tab bar in the panel has the touch height Apple and Google ask for.
A disk mounted read-only no longer tells you to free up space —that does not fix it—: it says the system has given up on the disk and to check Storage → Health.
And it says which disk: a failure writing to the volume no longer blames the system disk.
With the panel in English, the disk-full warning came out half in each language.
Calendar and contacts: on machines that already had it switched on, whatever you noted on your phone was not saved anywhere. It now repairs itself on boot.
A disk that stops responding no longer freezes the panel. Opening Files or the Gallery, checking a permission, or the NAS going over the cameras on its own was enough: every screen froze at once, on exactly the day you need the panel to check your disks. Now each screen waits a few seconds and says what is going on.
Shared folders: a folder created from the panel while the NAS was bringing folders in from another machine, taking over, or preparing the cameras one vanished silently.
With the free-licence campaign running, anyone who already had theirs could not buy another: the page only offered "View my licence". It now says "Licence already obtained" and lets you buy another below, for a second machine or as a gift.
A payment arriving while the shop is half-configured is no longer lost: it asks to be retried, so it comes through on its own once the setup is complete.
An incomplete form no longer answers with a server dump in English, but with a page saying what is missing.
"Check payments" said "0 licences issued" and read as if nothing had happened, when what it meant was that every payment already had one. It now tells them apart.
The product card in search engines announced a made-up price —€49— from day one, no matter what the page said.
UPS: the ordered shutdown now reaches every machine. It was only written when that screen was saved —and that screen is opened once, the day the UPS is plugged in— so NAS units set up earlier still dropped dead when the battery ran out, with virtual machines and containers still running. It is now brought up to date at boot, with nothing to do.
UPS: the low-battery shutdown could fail to shut down at all. If it could not write its log (full disk, read-only /var/log) it stopped on the first line and the NAS stayed on until the battery ran out.
UPS: if the NUT package is missing, it now says so; before it sent you to check the driver and the port, which was not the problem.
Virtual machines: when their network fails to start because port 53 is busy, the panel now says WHO holds it. It used to assume the NAS DNS server, sending anyone running a Pi-hole or AdGuard to switch off something that was already off.
Unmounting a cloud or a remote folder that does not exist used to say "done" and record it in the log, while whatever you meant to unmount stayed where it was.
Form errors are no longer shown in English. "String should have at least 1 character" becomes "cannot be left empty", and the same across every screen: it was what the panel answered whenever something did not match what it expects.
Storage: warnings about a disk (a path that is not valid, a disk that is no longer there) came out in English and full of jargon; they now say what happened and what to do.
Cameras: the reason a camera gives no video no longer shows a double full stop.
When something in the firewall fails, the panel no longer shows the system command. It affected every service that opens its port —downloads, media, SMB, NFS, WebDAV, VPN, network disks, SNMP—: half the sentence in Spanish and the other half in English with the command inside.
And the same in five more places: testing a replica, testing a backup destination, installing a certificate on the panel, the progress of a disk replacement and the tunnel log.
Downloads: "the service is not responding" now says WHY. That notice appeared on any action —add, pause, remove— and sent you to a command over SSH. It now tells apart a missing program, a stopped service —with the system's last error— and one that is running but not answering.
Downloads: if another program has taken the torrent port, the panel says which one and what to do; until now the download ran at a fraction of its speed with no explanation.
A disk that stops responding no longer freezes the whole panel. It happened when switching downloads on or adding one, and since that also runs at boot, the panel could fail to come up at all.
Downloads: a large file renamed to .torrent in the watched folder can no longer leave the NAS out of memory; it is set aside and logged.
Downloads:.TORRENT files in capitals now start on their own too. They used to sit in the folder with nothing happening.
Downloads: the app no longer dies outright ("the application failed inside") when the server replies only partially, which is what happens during the few minutes an update takes.
Web: Downloads showed "the application failed inside" when opened in the demo; it now runs, with its torrents and its details panel.
Security
Downloads settings are now for the administrator. The folder, the switch and the speed caps belong to the whole house; adding, pausing or limiting a download still belongs to whoever has the app.
The rsync password now requires eight characters, like the rest: it publishes a folder on the network unencrypted and used to accept a one-character one.
Downloads: whatever comes in through the watched folder is now recorded in the log, like everything asked from the panel: anybody who can write to that folder can drop something there.
Admin alerts can no longer be cleared by anyone. A normal account could empty the whole notification centre —the failing-disk alarm, the backup that did not run, the ransomware trap— even though those alerts are not shown to them. Each account now clears and marks as read only its own.
Creating an account can no longer leave it with access nobody asked for. When saving its password the NAS activates it on the shared folders and switches it off right after; if that switch-off failed, the account kept the access and the panel said "SMB failed", which reads as the opposite. It now says so plainly and explains how to remove it.
A badly filled form no longer hands you back what you typed. The error response carried the submitted content inside —including a password, if the form had one— and that travels to places where a password has no business being.
Gallery: choosing which folders are indexed is now the administrator's call. Any account could save its own list and drop everyone else's folders from the index.
Voluntary support through Ko-fi. A cup always within reach on the site, with the detail of what the money goes to —server, test disks and the updates—, and more present while the licence is being given away.
Changes
The licence now costs €29. Still a single payment, still forever.
Checkout moves to Polar, which is the seller of record: your country's taxes are included in the price and the invoice comes from them. Licences already issued are unaffected.
Fixes
Cameras: pressing "HD" and seeing no improvement is now explained. If the camera only accepts one connection and the recording is using it, the live view falls back to the secondary stream and says so on screen; what gets recorded is still full quality.
A payment that does not go through the checkout page now issues its licence too. It is delivered to the email that paid; if that email has no account, one is created and the licence waits inside it.
Site: the three installation steps were numbered twice and stacked in one column.
Site: with the free-licence campaign on, half the home page still said "buy".
The site no longer goes down entirely when the shop is missing a key: the sale turns itself off and the pages, guides, downloads and updates keep working.
Calendar and contacts now walks you through connecting your phone in three steps, with the address copiable in one tap and your account name in plain sight: it was the one thing people came for and it had to be selected by hand.
Calendar and contacts: the service never started on any machine; it could not read the access passwords.
WebDAV: signing in with the right password always failed, for the same reason. Both repair themselves at startup: nothing to set up again.
Media: opening the screen while a disk is unresponsive no longer freezes the whole panel.
Files: extracting a .tar could stop halfway with no explanation; it now uses the same checks as a .zip.
When something fails, the panel no longer shows the system command. Twenty-four screens —starting with Storage, the first one you open— answered with the whole command line, in English ("no se pudieron leer los discos: executable not found: lsblk"). They now say what happened, in your language, and name the missing package when there is one; if several things fail for the same reason, it is said once.
Files: extracting a .zip now warns before starting if the contents will not fit, instead of filling the volume halfway through.
Security
Repeated password guessing over WebDAV or the calendar now gets blocked automatically, with the same attempt limit the panel and SSH already had. They were the only two doors left without one, and they use your account password.
Downloads: you can no longer pick someone else's folder as the destination. Anyone in the house can download, but only into folders they have access to.
A share link's password now needs at least eight characters. It used to accept anything, even a single letter: the link looked protected and was not. Links you already have keep working as before.
Installing an app is now recorded in the log, as uninstalling already was: until now the log showed how an app disappeared, but not how it arrived.
Deleting an account now removes it everywhere. Their share links and file requests stop serving —they used to stay open to anyone with the address and, with no expiry date, forever— and their name disappears from folder permissions and from the app permission list, where it lingered: anyone created later with the same name inherited their access.
Security: the download ticket can now be revoked · Security: three things a normal account could see or do · The panel on a phone, properly · +5
Security: the download ticket can now be revoked
When the panel shows you a photo, a video or a PDF without downloading it, it asks for a signed ticket that travels inside the address — a browser's <img> or <video> cannot send headers, so there is no other way. That ticket was not bound to anyone: it kept working after signing out, changing the password, pressing "close all sessions" or deleting the account, for up to half an hour. And since it travels in the address, it ends up in the browser history and in any log it passes through.
It is now bound to who asked for it and to their session, as the camera and document-editor tickets already were: signing out kills it instantly. Nothing to do; older tickets stop working and the panel simply asks for a new one.
Creating and deleting with privileges now check where the path really points. The process that administers the system took it exactly as written, and the paths it handles include the data ones, where anyone with a shared folder writes: a symlink placed there redirected the new folder elsewhere on the machine, and a linked recycle bin could take out whatever sat on the other side. Deletion already guarded against a final symlink; both now check the intermediate steps too.
The panel now tells the browser where it may load things from. Until now it only asked that nobody outside put it in a frame. From now on, if booby-trapped text ever slips into a file name or a camera's error message, the browser refuses to run it or to send anything to another server. Nothing changes on screen.
The password policy now applies to the WebDAV user too. It was the only one of the five paths that set passwords that did not enforce it: you could give a four-letter password to a door served over the network.
Gallery and wallpaper: images are served telling the browser not to guess the file type, as Files already did.
Security: three things a normal account could see or do
Per-application permissions closed the screens, but three doors stayed open underneath for any account that had signed in. All three are shut, and none of them asks you to change anything:
Other people's share links and file requests. The listing returned them all, tokens included — and the token IS the key: the public address that consumes it hands over the file without checking folder permissions, which is exactly what it exists for. With someone else's token you could download a document from a folder you have no access to, and revoke their links. Everyone now sees and revokes their own, and whoever administers sees them all. Links created before this version keep working for whoever has the address, but only appear in the administrator's list: the NAS did not record who made them.
The address of the NAS holding the copy. Replicas, network disks (iSCSI), migration, folders mounted from other machines and cloud sync were readable with no permission at all: the replica list carries the address, user and SSH port of the other NAS. Each now asks for the permission of the screen it lives in (Storage, Files or Backups), as the others already did.
The whole household's tasks, live. The channel that paints progress bars handed everyone the title and message of every task —"Restoring /mnt/tank/Documents", "Extracting invoices-2026.zip"—, paths included. Each account now sees the tasks of the applications it has, and machine-administration tasks only go to whoever administers.
The panel on a phone, properly
Sideways no longer serves the desktop. A phone in landscape is wider than the 819 px that decided "this is a phone" and only 390 px tall, so you got the windowed desktop: title bar, dock and resize handles inside half a screen. The chrome now moves to a 60 px side rail (home, open apps, widgets, theme, alerts and sign out) and the top and bottom bars disappear: 96 px of height handed back to what you are looking at, a quarter of the screen. The app takes all the rest, the home screen spreads its icons across the width available and widgets come in two columns.
And with them, every app's layout. The apps carried 156 rules for "on a phone this stacks / hides / grows for the finger" and all of them looked only at width: sideways, none applied. Same for the touch ergonomics —44 px targets, fields that don't trigger Safari's zoom, dialogs within thumb reach—, all lost on rotation. All of it now understands a phone lying down.
Controls you couldn't tap. A sweep across the fourteen apps measuring what a finger needs found the Package Center, Gallery and Control Panel search boxes at 20 px tall, the Gallery tabs at 24, the switches at 28, "How it works" at 16, and Overview and Monitor labels at 10 px. All fixed, with a check that sweeps both orientations so they don't come back.
Switching apps is one finger. Swiping the title bar moves to the next open app and back, without returning to home. It lives on the bar and not on the app so it doesn't steal sideways swipes from whatever is inside.
The panel on a phone, in landscape
Turned sideways, the panel served the windowed desktop: a phone in landscape is wider than the 819 px that decided "this is a phone" and only 390 px tall, so you got a window with its title bar, its dock and its resize handles inside half a screen. Turning the phone to get a better look at a table, a video or the cameras made the panel useless.
The panel now recognises a phone in landscape and gives it its own shape:
The chrome moves to a 60 px side rail —home, open apps, widgets, theme, alerts and sign out— and the top and bottom bars disappear. That is 96 px of height handed back to what you were looking at: a quarter of the screen.
The app takes all the rest, flush to all four edges, with a shorter title bar.
The home screen spreads across the width available, with more columns and right-sized icons instead of four giant ones.
Widgets come in two columns and the app switcher in cards that fit.
And everything that already applied to a phone upright —44 px touch targets, fields that don't trigger Safari's zoom, dialogs within thumb reach— now applies sideways too: it was all lost on rotation.
Rotating closes nothing: the app stays where it was, with its scroll and whatever you had typed.
Upright, nothing changes.
Connecting your cloud in Files no longer needs an administrator
"Connect your cloud" was in Files, it was yours by design… and answered "you do not have access" with no permission anyone could grant to fix it. The three steps behind it — listing providers, opening the authorisation with Google or Dropbox and closing it — hung off the Backups permission, which starts closed and is read-only anyway: there was no way to grant it. They now go with the Files permission, which every account has by default.
Nothing else is opened up: registering a cloud as a backup destination for the NAS is still the administrator's job.
The "grants control of the machine" badge was unreadable in dark mode
On the Permissions screen that tag came out yellow on cream —1.29 contrast, where 4.5 is the legible minimum—. It now uses the house badge, which has its own colour pair per theme: 8.2 in dark and 6.1 in light.
Fixes
Calendar and contacts: the service never started on any machine; it could not read the access passwords.
WebDAV: signing in with the right password always failed, for the same reason.
Both repair themselves at startup: nothing to set up again.
Security
Backups and sync: the machine list no longer shows the credential each computer uses to report in. Anyone who copied it could fake a successful backup and silence the “hasn't backed up in days” warning; it was visible to anyone allowed to look at the backups.
SSH: unticking “sign in with a password” now really does turn it off. It was still letting passwords through by another route, so anyone who unticked it believed they had left only the key and had not.
SSH: three attempts per connection instead of six, half a minute to authenticate instead of two, no empty passwords and no port or agent forwarding at all.
Panel: changing your password and turning off two-step verification now have the same brake as signing in. Before, the current password — the same one used for shares, SFTP and WebDAV — and the six-digit code could be guessed without limit.
Remote access: the panel now sees the real address of whoever connects through the tunnel or the proxy. They all used to arrive as the machine's own address, so someone guessing passwords from the internet could lock the whole household out of the panel, and the audit log could not say where anyone had connected from.
Panel encryption: only ciphers with forward secrecy are accepted. Thirty-nine were on offer and fifteen lacked it, one of them with no encryption at all: anyone recording the network traffic could have decrypted it later.
Panel: the service now runs confined — no administrator capabilities, its own temporary space and only the system calls it needs — so a fault in it cannot turn into control of the machine.
The Permissions panel, readable and comfortable · The "Panel · admin" tag was only half readable · "Users and groups", plural
The Permissions panel, readable and comfortable
The screen that grants access looked wrong in light mode and was a scroll of forty-eight rows in a row. It has been fixed throughout:
It reads. Text came out in very pale grey on a white card —measured, 1.1 contrast against the 4.5 minimum for legibility— and the selected person in the list was blue on blue, invisible. On top of that none of its sections painted a background, so everything floated over the desktop wallpaper. The chosen name is now white on solid blue and every block has its card. From 161 contrast failures to none.
It fits. The 36 Control Panel screens all opened at once. They now come in six collapsed groups, each saying how many are granted —"Security 0/7 with access"— and you open the one you are going to touch.
It is findable. A search box at the top filters applications and screens at once, and opens the matching groups on its own: typing "fire" leaves "Firewall" in view.
It grants in one click. Every group has "Whole group: No access / View": seven Security screens are no longer seven clicks to say the same thing.
It scans vertically. The three levels take the same width on every row and line up in a column; before, each row put them wherever they fit.
The "Panel · admin" tag was only half readable
In the user list, that amber tag sat at 4.08 contrast at 10 px. A darker shade lifts it to 5.76 without changing the colour it is recognised by.
"Users and groups", plural
The Control Panel entry was called "User and group", and because of the singular the panel's search found nothing when typing "users" — on a NAS that precisely has them.
Permissions: the Control Panel is now shared out screen by screen. All 36 appear under User and group → Permissions and are granted one at a time, per person or per group.
Every account now comes with the basics: their password and two-step check, the machine information, the addresses for getting in, and the panel's language, theme and wallpaper.
Files: everyone can see their own space —what they are using, what they have been allotted if there is a quota, and what is left on the volume— without seeing anyone else's.
Clouds: anyone can connect their own from Files. Only whoever connects it sees it, and its folder is closed to everyone else.
Changes
User and group → Edit no longer repeats the sharing out: their folders, how they connect and which screens they see are all done in Permissions, which has everything and says where each thing comes from.
Language and appearance: the machine clock is only shown to whoever can change it; language, theme and wallpaper are each person's own and depend on no permission.
Fixes
Desktop: a normal account can now change its wallpaper, arrange its icons and widgets and choose which device gets the alerts. All of that used to require an administrator.
Security
Reading the firewall, the network, the VPN, the list of people, the whole household's quotas or the connected clouds through the API no longer just takes being signed in: it takes having that screen granted.
One permissions panel, in order · The permission list showed no application names
One permissions panel, in order
Permissions lived in three places that did not talk to each other: panel applications on one side, folders inside each person's card, and how each person connects (SMB, WebDAV, SFTP, console) in a tab called "Applications" that was not about applications. Granting someone access meant walking all three screens and knowing which one won.
Control Panel → User and group → Permissions now brings it together, ordered by the question you actually ask:
Starting point — what anyone in the house can do. One row per application: inherited by whoever has an account and by whoever signs up tomorrow.
People — pick someone and everything of theirs is on one screen: applications, shared folders and how they connect.
Groups — the same for a group, which is how you grant to several at once.
And the part that keeps you from getting lost: every row says where what it has comes from — "from the starting point", "from their group familia" — with a button to inherit again. So "why can this one see the cameras?" is answered by looking, instead of by opening three screens.
The permission list showed no application names
On that same screen, each level was picked with a dropdown that took the full width of the row: the application name and its description were squeezed until they vanished, leaving a column of dropdowns not saying what they were for, with the "grants control of the machine" badge on top. The three levels are now buttons you read at a glance, and the name has its place.
Cameras: the live view now has sound. The speaker in the corner of the picture turns on the camera's microphone, and only shows up on cameras that have one.
Fixes
Documents: saving a large one no longer pushes it whole through memory — it goes from the editor to the disk in chunks — and the size limit is gone: whatever fits on the volume fits here.
Documents: a save that arrives cut short no longer overwrites the original saying “saved”.
Updates: an update that fails and rolls back now also restores the files for the machine's own screen, which used to be left on the new version.
Monitor: clicking “Memory” in the process table really does sort by memory. It used to reorder only the fifteen heaviest on processor, so anything that takes up a lot and sits idle — exactly what you look for when wondering who is eating the RAM — never showed up in the table at all.
Backups: the log of a large backup is read in chunks instead of all at once.
Panel and system helper: both services now have a memory ceiling, as a percentage of what the machine has. If something runs away, the service restarts in three seconds instead of leaving the NAS out of memory.
Fixes
Documents: opening a large one no longer pulls it whole into memory — a 300 MB presentation cost 600 MB.
Cameras: with the volume not mounted — an encrypted drive still locked after a restart — Recordings said “no recordings”. It now says the volume needs mounting and that what was recorded is still on the disk.
Files: creating, moving or copying onto a name already in use said “already exists”. It now names the clashing item and says what to do.
Package Center: an app that starts and stops a second later is no longer reported as installed: it says it does not stay up and why, in the app's own words.
Documents: opening a document with the editor down waited 45 seconds to say "wait a few seconds"; it now says why it will not start, as soon as it knows.
Documents: the editor wrote its log at trace level —several lines a second, forever— filling the system disk. Already installed ones fix themselves the next time a document is opened.
Documents: the editor installed and stayed up but would not open a single document: it could not create the processes that do the work. Already installed ones fix themselves the next time a document is opened.
Documents: clicking "Edit here" opened a blank tab while the editor was being prepared, and closed it on failure: the tab now says what is happening and, if it cannot be done, why.
Permissions: the Overview, the Monitor and the Notepad were granted on screen but the server never checked them: taking them away only hid the icon.
Desktop: a saved icon or window of an app that account no longer has stops showing up at sign-in.
Containers: starting one that stops a second later no longer answers "done": it says why it stopped, in its own words.
Security
Sessions: an account deleted or demoted right as it made a request could slip through as an administrator; a name with no record now administers nothing.
Monitor: the live processor, memory and network feed asks for the same permission as its screen; it used to be served to any account that opened the connection.
Alerts: the alert centre showed every account the backup, disk and camera failures, job names and paths included. Administration alerts now belong to administrators, and an app's alerts to whoever has that app.
Accounts that do not administer the NAS can now USE it: review who has what in Control Panel → Users and groups → Permissions.
New
Per-app permissions. Every app is granted separately with three levels —no access, view and use—, just like folders: a regular account is now born able to use its files, its photos, its notes and its downloads.
Permissions: grant "for everyone" in one go —inherited by whoever signs up tomorrow— plus one-off exceptions per person or group; the person's rule wins.
Permissions: new lgm-usuarios group with every panel account in it, so "cameras for the household" is one rule instead of one per person. Existing accounts join on update.
Changes
Permissions: administrators cannot be stripped of the Control Panel, not even by mistake: a NAS with nobody in charge can only be fixed from the console.
Permissions: the Control Panel and the Terminal are listed but cannot be granted: giving them away would be handing over the whole NAS under another name.
Permissions: Storage and Backups can be granted "view" but not "use": you can watch disk health without being able to create or destroy a volume.
Permissions: Package Center, Docker and Virtual machines can be granted in full, and the screen warns first: what gets installed there can mount system folders.
Permissions: the NAS enforces the permission, not the icon —including the camera live view and the virtual machine console—, so typing the address by hand opens nothing.
Fixes
Desktop: a regular account was shown the Storage and Connected users cards saying "No response from the NAS" —retrying every twenty seconds forever— when what happened is that it has no access there. They are no longer shown.
Documentation: the resource monitor has its own guide: since when it has been slow, whether it is running out of memory, whether it is using the network well.
Changes
Memory: with ZFS, disk cache no longer counts as used memory —an idle machine always showed "RAM 74 %"— and the Monitor adds how much is cached.
Processor: the Monitor, the Overview, the history and the "high CPU" alert each measure their own; they shared one counter and with the Monitor open the rest read 0 %.
File copy (SFTP): uploads land in that account's My Drive —the same folder it sees in Files and over the network—, on the volume instead of the system disk. Anything uploaded before moves across on its own when updating.
Desktop: the shortcuts dialog offers EVERY Control Panel section —there were seven, hand-picked— each with its own icon, like the apps. A regular account only sees its own.
Shared folders: "camaras" and "Galeria" become system folders, like "docker" and "vm": they cannot be renamed or deleted from the panel, because pulling them out leaves the recordings and the photos pointing at a folder that no longer exists. In your My Drive you can still create folders with those names.
Fixes
What's new: the English panel showed them in Spanish even when fully translated.
What's new: a loose section headed the English list, with no version or date.
Backups: a failing cloud backup could leave a small NAS out of memory; the tail of the log, which is where the reason is, is kept.
Addresses: each row now lights up from the service that is really listening rather than from its switch; one that never started used to offer a dead link.
Addresses: the SFTP row only shows for accounts that have that access. Everyone else was offered a link with their username in it that always said no.
Users: deleting an account also withdraws whatever had been shared with it from Files. Creating that same name again handed the new person everything the previous one could see.
Users: creating an account with a name used before restores the owner of its My Drive; it stayed under the previous account and the new one could not even open it.
My Drive: opening it from the panel answered "no permission to read", and whatever its owner uploaded from Windows was not visible either.
Search: files in My Drive never showed up in the results —instantly and without a word— because the index only walked the shared folders.
Failover: the second machine recreated the folders WITHOUT permissions, so after a failover none of them opened. Who gets into each one now travels with the plan, and accounts missing over there are named.
Failover: the plan left on the second machine is rewritten whenever something changes; it used to be written once, so folders created later would not have existed after a failover.
My Drive: administrators did not get theirs in Files, and opening it by path answered that you can only browse inside shared folders. Their Notes notebook, which is created in there, would not open either.
Files: moving, compressing and extracting gave that same error on your own folder.
Recycle bin: whatever was deleted inside a personal folder was never emptied by the automatic cleanup and grew without limit.
Web portal: the English site was published in Spanish —the landing page and the what's-new page in full—: the translated texts did not make it into the deployed image.
Desktop: store apps took forever to show up among the shortcuts, or never did: the catalogue is read once at startup and shared.
Desktop: a store app's shortcut carries its own logo, not the generic "web page" icon.
Security
Sessions: an account deleted right as it was opening the terminal or a virtual machine console could still get in, and as an administrator. A name the panel does not know no longer counts as an administrator in any check.
Failover: a folder with NFS was recreated on the second machine without its list of allowed machines — that is, open to the whole network. The list now travels, and without it NFS stays off and says so.
Help: Virtual machines, Containers, Terminal and Monitor linked to no guide at all, even though the guides were written; all four now carry their help icon, like the rest.
Dark mode: descriptions and hints inside a card fell below the readable minimum.
What's new: the change list is read from the NAS itself, as one more help guide: it always opens —without internet too— with the latest versions and a link to the full historical list on the web.
Changes
Dialogs: each one measures its columns against itself rather than against the screen; on a wide monitor a narrow dialog still split into two cramped columns.
Shared folders: the editor comes out straight: every option is a row like the others, with its description across the width and its help next to the name.
Fixes
Files: previewing or downloading something inside an archive left the archive open in memory, and with use the panel kept eating RAM.
Files: an oversized compressed tar or zip is no longer opened whole to look inside; they answer that you should extract it and browse the folder.
Addresses: a new Control Panel screen with every link of the NAS together and ready to copy: the panel, the network folders in Windows and Mac form, SFTP with your user filled in, WebDAV, NFS, rsync, the printer, the calendar, the TV and the VPN. Only what is really on shows as on, and every account can see it.
Files: archives open like a folder, without extracting: you browse inside and download any single file. A compressed tar too big to list says so and points to extraction.
Gallery: photos arriving over the network show up on their own within minutes. A detector looks at the folders every few minutes —without reading a single photo— and fires the index only when something is new; the half-hour pass stays as the safety net.
Changes
Printer and calendar: their own pages are dressed like the NAS —same background, same cards— on install and on every update.
WebDAV: each folder is served with the same permission list as SMB. Before, any account with WebDAV credentials got into every published folder, whatever its list.
Fixes
Dark mode: several pieces kept their light background over the dark glass — the cache and spare-disk card in Storage came out as a grey slab, the Files search pill turned white while typing, and some buttons flashed white on hover. Everything now follows the theme.
External access: the two Cloudflare tunnel fields carried no styling and the browser painted them its own way — black over the light page. They are proper panel fields now, in both themes.
WebDAV: with the folder lockdown of 1.41.1, the web server could not even read the published folders: you authenticated fine and everything said "forbidden".
Settings: a setting with no file could resurrect data from an earlier use of the panel: the read returned the shared default value and any touch left it poisoned for the next ones.
Notes: code files open in a real editor: syntax highlighting for dozens of languages, line numbers, folding, multiple cursors and search and replace with expressions (Ctrl+F). It weighs nothing until the first one opens.
Notes: a guide button on its own bar, with everything it can do.
Documentation: five new guides —Files, Gallery, Documents, Package Center and Virtual machines—, in Spanish and English, served by the NAS itself without internet. Every big desktop app now has its own.
Cameras: the "camaras" folder becomes a system folder, like "docker" and "vm": it is created with every volume, cannot be renamed or deleted, and if the volume is rebuilt it is reborn in the new one. No recycle bin on purpose, and administrators only when shared.
Notes: your notebook is created on its own in My Drive → Notas the first time, truly private and with nothing to configure. A shared household notebook is still chosen from Notes itself.
Documents: double-clicking an office document asks whether to view or edit it, and if the editor is not installed yet it installs it right there, narrating the download. Photos, videos and PDFs open as always, no questions.
Documents: right-clicking a document offers "Edit here", next to "View".
Fixes
Documents: a document whose preview failed could not be edited: the "Edit here" button lived inside that preview, and the editor does not need it at all.
Who gets into the shared folders changes. A folder with no permission list becomes the administrators': grant access to each person in the "Folders" tab of their account.
New
My Drive over SMB: each person's private folder also shows up when they connect from their computer, under their own name, and each one sees only theirs.
Changes
Shared folders: a folder with no permission list is no longer open to every account and becomes the administrators'. The panel said one thing —an ordinary account could not see it— and SMB said another: it walked in and wrote.
Shared folders: each account only sees, when connecting to \\\\NAS, the folders it can actually open; the rest are not even listed.
Control Panel: an ordinary account finds the system information, its password with the second factor, and the region and appearance. The rest are administration screens and are not offered.
Storage: a mirror with very different disk sizes warns when the small disk is running out of room, before the volume stops writing, and creating one says so at the time with how many gigabytes are left unused.
Fixes
Security advisor: it warns about folders exported over NFS to any machine on the network. NFS asks for no password, so the list of machines is the only barrier — and it was the door left open once the other two were closed.
My Drive: it did not appear and did not open when the account does not exist as a system user —or its group is not named the same—: the folder stayed owned by root and the panel could not even list it.
Shared folders: after destroying a volume and creating another one under a different name, "docker" appeared twice —the old volume's entry and the real folder— in Files and in the Control Panel. Of two with the same name the one that exists wins, and the destroyed volume's entry is dropped on startup. A merely unmounted volume loses nothing.
Notes: it works with a whole folder of notes —a notebook—, not just with loose files. All of it over plain .md files in a shared folder: what you write here is still visible over SMB, and the other way round.
Notes: links between notes with [[Shopping]], with suggestions as you type [[. A link to a note that does not exist looks different, and clicking it creates it.
Notes: a graph view of the notebook —each circle a note, each line a link— that drags and zooms with the wheel.
Notes: "Linked from here", the sidebar telling you which other notes point at the open one, and an outline of its headings to jump to one.
Notes: a #home in the text is a tag that filters the list, and a - [ ] buy salt is drawn with its real checkbox and ticked from the view.
Notes: a notebook list ordered by last touched, with pending tasks beside each one, a search by name or tag, and "New note".
Notes: an "Insert" menu with heading, table, task list, link, date and separator, so you do not have to remember the syntax.
A second repair sweep: twelve more faults, almost all of them functions that said "done" without quite doing it.
Changes
Files: opening a note (.md) shows it composed —headings, lists, bold— with the same view as Notepad, instead of the raw text; and a button there opens it in Notepad for editing.
Fixes
Documents: the editor had not opened a single document since the port change in 1.40.0 —the tab just stayed blank—. An editor that is already installed fixes itself when you open the first document.
Cameras: closed days are stitched back into one file per day. The stitching failed on permissions on every machine, silently, and was retried in full on every pass: minutes of disk hammering while the folder piled up hundreds of loose files.
Cameras: in the recording in progress, jumping to a minute already recorded works even if the viewer has been open a while. The jump used to be clipped to the edge of what had been downloaded.
Gallery: a month with hundreds of your photos could open empty or half full on an ordinary account. The "everyone sees their own" limit was applied after trimming the page.
Shared folders: what is published over SMB, NFS and WebDAV is rebuilt on startup if it is not what this version would write. Two earlier fixes did not reach a NAS until the day somebody happened to touch any folder: no longer publishing the Docker store, and requiring SMB3 encryption.
Shared folders: taking over a replica and bringing the data from another NAS claimed to have recreated the folders without regenerating Samba or NFS: they showed on screen and nobody could connect.
External access: anyone with the panel published on the internet lost it when updating. When the panel moved port the stored rules were corrected, but the server facing the internet kept sending traffic to the old port.
Security advisor: it warned forever that this machine "cannot check for new versions" —false on every install made from the ISO— and stayed quiet when there really was one published. It now looks where the NAS actually updates from.
Alerts: pressing the bin closed the whole list, even when you pressed "Cancel"; and "Mark all as read" said nothing when it failed.
Cloud sync: the report for one that dies outright always said "line 2"; it now records the real line.
Documents: after installing the editor, the first open —the slow one— did not show its "Starting the editor…".
Language: the Security advisor came out entirely in Spanish with the panel in English.
Web portal: a licence issued by hand that failed halfway left the account orphaned.
Calendar and contacts: failing to read which accounts have access came out as "no account has access yet" and sent you off to create credentials that may already exist.
Settings: a saved value this version does not understand no longer leaves the Package Center sources screen or the Space report blank, nor stops WebDAV from publishing.
Security
Shared folders: removing a folder took it out of the panel, SMB, NFS and WebDAV, and left it served over rsync on port 873 with the same password as before.
Backups: the log kept when a backup fails could carry the cloud password inside —rclone writes it into its own messages— and the panel shows it in full. It is cleaned when saved and again when read, so logs written earlier come out clean too.
Backups: the failure reason shown on screen, in the phone alert and in the history could carry it too: rclone writes the full address into its own messages.
Virtual machines: when one paused itself —almost always because storage is failing— the diagnosis asked that same sick disk and froze the WHOLE panel, every screen, at exactly the moment it is needed most.
Virtual machines: the space measurement cameras use before recording and snapshots use, and the system-disk figure in Diagnostics, could freeze the panel the same way if the disk didn't answer; all three questions now carry a cap and a code check keeps another one from slipping in.
Desktop: three texts fell below the minimum contrast in the light appearance: the storage widget's disk detail and the monitor's two network speeds.
Storage: deleting a volume did not remove its network disks (iSCSI): they stayed published with no file behind them —disk errors on the computer that mounted them— and got in the way of restoring the others at boot.
If you updated to 1.40.x and the panel stopped opening, this version fixes it. Install it from the console: sudo lgm update.
Firewall: when the panel moved to port 5001 the new port was never opened, so the redirect on 5000 sent the browser to a port the NAS itself was dropping: the panel stopped opening from the network, with no error anywhere. It is restored on startup.
Firewall: on startup the rules in place are checked against the ones this version needs and restored if they differ, including a table that never got loaded.
Cameras: opening a recording ended in "Could not open the recording" —always the hour being recorded, and any other one without an index yet— while the player silently retried and drained NAS resources.
Cameras: every recording plays and can be scrubbed, including the one being written right now, which is followed live as it grows.
Settings: a saved value this version does not understand no longer stops Files, Control Panel, SMB, NFS or Backups from opening, no longer breaks signing in and no longer silences alerts: only that one value is discarded.
Settings: an entry that cannot be read is kept on disk instead of being dropped when any other entry in the same list is saved.
Downloads: a link with a password inside no longer appears in full in the error.
Apps and Virtual machines: a volume that stops responding no longer freezes the panel.
Clouds: disconnecting one that does not exist says so, instead of answering "disconnected".
Documents: two simultaneous clicks on "Install the editor" no longer start two installs.
What's new page: every section is published with its text again.
The panel changes port. Read this before updating.
Changes
The panel moves to port 5001 (encrypted) and 5000 becomes a redirect: typing 192.168.1.50:5000 in the browser now opens the panel.
Change your bookmarks to https://…:5001. The ones starting with https:// on 5000 stop working; if you have the panel on your phone's home screen, add it again.
Cloudflare: change the tunnel target from 127.0.0.1:5000 to 127.0.0.1:5001.
The NAS warns about the change by email and to your phone, once, on the first boot with the new version.
Publishing the panel to the internet, the firewall, the console, the installer, the QR code and the machine's own screen adjust to the new port on their own.
Fixes
Network disks: failing to read the system configuration no longer counts as "there are no disks", which closed port 3260 with machines still writing and turned the service off.
Storage: when a volume is deleted, the Gallery, the antivirus, the media server, Downloads and the calendar stop pointing at the folders that lived inside, and the virtual machines left without a disk are listed.
Console:lgm set-ip rejects impossible addresses and checks that the address was actually applied before saying so.
Security
Network disks: the password no longer appears in the panel's error messages.
Printer and updater: the address is logged without its password or its token.
A wide repair batch: 37 fixes, several of them with data loss involved.
Changes
Confirmation before "Close all sessions", removing the boot key of an encrypted volume and wiping a disk.
Fixes
Monitoring: three automatic checks existed in full and nobody called them, on every NAS and from day one: the ransomware trap never looked at its bait, the country-block ranges were never refreshed —which over months locks out people in your own country— and the weekly report was never sent.
Storage: a newly created volume could end up recognised but not mounted, with the NAS writing to the system disk believing it was writing to the volume.
Storage: the privileged process could miss the volume if it started before the mount; it now waits, is checked every minute and restarts if needed.
Storage: deleting a volume left its shared folders registered.
Storage: the Package Center and the virtual machines were not relocated when the volume was rebuilt under another name.
Storage: "Delete volume" asked you to stop Docker without offering how; the panel now clears it out.
Storage: a mirror with disks of different sizes announced free space that could not be used.
Backups: a backup with unreadable files was signed off as good.
Backups: restoring failed after changing the job's source folder.
Backups: the screen said "up to date" with its only job unscheduled.
Backups: the reason for a cloud failure could be masked by a file name. That makes nine fixes in the backup engine.
Cloud sync: it could empty the NAS folder if the volume was not mounted at its scheduled time; it now checks before touching anything.
Tasks: a background job that died left its card "in progress" forever.
Cameras: playing a truncated recording exhausted the panel's file handles.
Snapshots: "Restore" could do nothing at all, with no dialog and no error.
Files: compressing from a search created the archive in another folder.
Gallery: it mixed the results of two consecutive searches.
Services: turning one on without its program installed answered with a breakage error; it now says it is not available on this machine and which package to install.
Settings: a saved value this version does not understand no longer takes down the screen that reads it, in eleven more places; and five screens that would not even open.
Calendar: it could stay "enabled but stopped" forever on machines installed before an earlier fix.
Migration: bringing the data over from your previous NAS never even started.
Drive and Home computers: the reports of two computers finishing at the same time overwrote each other, and an unlinked computer could come back to the list.
Shared folders: unsharing from someone who did not have it answered "done".
Alerts: two different alerts shared one silence and one hid the other.
Antivirus: quarantine could hide an infected file instead of setting it aside.
Installation and updates: three fewer stumbles, and seven fixes in the internal scripts that run with privileges.
Language: the ransomware alert came with an English headline and a Spanish body, and 65 more phrases came out in Spanish with the panel in English, including the documentation index.
Security
API: its documentation was served without a session —317 endpoints and 438 models—; now only to the administrator.
Gallery: folder permissions were applied when opening a photo but not when listing them, so other people's names and dates were visible.
Downloads: a link's password could end up written as the download's name.
System: the secrets in /etc/nas were readable for an instant while being saved.
API: an address that does not exist returned the panel's page with code 200.
Web portal: six fixes, three of them security; among them, the server's GitHub credential travelled to a foreign domain when following a redirect.
Documents: the editor installs from the document itself, with the "Install the editor" button under the preview, and tells you when it is done. It is not offered to people who do not administer the NAS.
Fixes
Documents: the preview said you had to download the file to edit it, with the "Edit here" button right next to it.
Folders on other machines: connecting to one that does not exist said "mount error(2)" and pointed at a manual page; it now says the machine shares nothing by that name and lists the ones it does share.
Folders on other machines: the address can be pasted exactly as Windows shows it (\192.168.1.50\Data), with forward or back slashes, and the NFS export the way the server writes it (server:/srv/data).
Folders on other machines: the other six failure reasons —wrong user or password, machine off, firewall, name that will not resolve and the two NFS ones— say what to check instead of an error number.
My Drive: a private folder per person, with its own recycle bin, visible only to its owner and to the administrator.
Share a folder with another NAS account, read-only or read-write, from Files itself.
Fixes
Storage: a jammed volume —full by internal allocation, with plenty of space— was announced as a full disk and advised deleting files, which fixes nothing. It now tells the two apart and says what to do in each case.
Cameras: the "not recording" alert now carries the reason the recorder itself writes, instead of repeating the symptom.
Updates: a failed update could revive units and scripts from two versions back when rolling back.
Installation: the image could sit waiting for an answer on machines that had another system installed, or get stuck on an encrypted disk that would not release.
Storage: unlocking an encrypted volume right after a power cut.
Shared folders: the "docker" folder could end up writable from Windows.
Clouds and network folders: connecting two at once could make one disappear.
Publishing: the signing key read from the Windows keyring was rejected over an invisible character.
Security
Installation: the first install verifies the LGM-OS signature.
Documents: an editor in the browser, installable from the Package Center. It uses no memory at rest, opens from the preview and can be used by anyone with permission on the document.
Changes
Updates: the NAS waits for long jobs to finish —bringing folders over from another NAS, reclaiming space on the volume— before updating itself.
Fixes
Backups: the screen could say at the same time that the SSH key exists and that it cannot be found.
Replicas: "Replica started" appeared without having started one.
Language: 122 messages came out in Spanish with the panel in English.
Settings: a saved value whose shape had changed left its screen blank, in forty-nine places —including backup jobs—. It now opens anyway, discarding only what it cannot read.
Settings: the ransomware trap and the password policy silently reverted to factory values when reading their configuration, across eleven screens.
Replicas and syncs: an unreadable entry was deleted when any other one was touched.
Sessions: "Close all sessions" left open whatever was already open —including a terminal—; it now closes in under half a minute.
Audit: the log said "nobody" where a name should have gone.
Backups: a small space cap was read as "no limit".
Syncs and scheduled jobs: three buttons said yes without doing anything, and editing a job that no longer existed could wipe the list.
Weekly report: it arrived with error codes and program names inside.
Country blocking: its screen left the panel unresponsive.
Docker and Gallery: their operations were not recorded in the audit log.
Backups: the link to the guide had ended up inside the "New backup" button, invisible; and several blue texts were washed out in dark mode.
Permissions: one operation asked for an administrator without needing one.
Seven more alerts the panel kept to itself.
Language: the fifteen Package Center categories came out in Spanish with the panel in English, and Docker showed its program's error verbatim.
Panel: with the privileged service down, Backups, Cameras, Replicas, Syncs and Health went blank exactly when you needed to open them. They now draw with whatever is known, and the real reason.
Ransomware trap: it turned itself off, silently, when the bait files could not be written; it now says which folder failed.
Country blocking: "Update now" answered with a server error.
Clouds: connecting OneDrive froze the panel for up to 30 seconds.
Storage: a failing disk could leave screens stuck for three minutes.
Security
Logs: a password starting with a dash was shown in full.
Cameras: the recorder announced "the recordings disk is full" with the volume half empty, because it measured space with a tool that does not work on these volumes. It still warns when the disk really is full.
Files: "Cannot access the recycle bin" when opening the recycle bin, and the same fault prevented updating.
Storage: wiping a disk revalidated the target too late.
Accounts: turning on two-step verification twice at once.
Security
Signed updates. Every version ships signed and the NAS verifies the signature before installing; without a signature, or with one that does not match, it does not install and says why.
Space forecast: the NAS samples every volume every six hours and warns "at this rate it fills up in N days" as soon as there is enough history, not only in the weekly report.
Changes
Web: the apps page shows the real panel running inside it, in the reader's language and theme, instead of screenshots that aged; and it weighs 7 MB less.
Fixes
Cameras: the recorder asks the disk before blaming the camera when no video arrives.
System check: it shows the real reason from the service's own log, not just the command that failed.
Panel advice: all 26 "check the log with journalctl" hints now include sudo.
Web: the published page lists the store's recipes again, after showing 0.
Desktop: placing an icon is now done by picking the drawing, with a search across apps, shared folders and panel sections, and store apps can be placed from there too.
Fixes
Desktop: what is already placed is visible and removable from the same place, you are warned at the 64-icon limit, and if the shared folders cannot be read it says so.
Calendar: it could not use the chosen folder even when everything was set up right, and the "last error" the panel showed was not an error but the service's description.
Hardened backups. A switch per destination leaves every backup read-only, and only the NAS that wrote it can add new ones. "Test the lock" verifies it for real, and the NAS repeats the test every week.
Restore drill. Once a month the NAS restores twenty random files from the backup and compares their contents with the originals. It lives in Backups → Jobs, with "Test now".
Home computers. The NAS knows which folder belongs to each computer and how often it is expected to back up, and warns when one goes quiet. It works without installing anything, and there is an optional four-line script to pick folders and send a report.
My folder everywhere. One folder on your computer and one on the NAS, identical both ways, over WebDAV. Conflicts are kept without throwing anything away, and the panel warns if a computer stops syncing. It does not replace a backup, and the screen says so.
Bring over a previous NAS whole. It connects over SMB, discovers the folders and the accounts, fixes the names that are not valid here and copies without touching the source machine. Whatever cannot be brought over is shown before starting.
Handover between two NAS. The first one writes on the second what needs doing, and the second rehearses it once a week without writing anything. A person always asks for the handover: automating it with a single link ends with both machines writing at once.
Encryption key management. Change the passphrase without touching the data, dry-run a check that you still remember it, keep the key on a USB stick —with its warning— and a rescue sheet to print.
Disk failure prediction by trend. Every six hours the counters are recorded and you are warned when they RISE, even if the value is far from the manufacturer's threshold, telling disk errors apart from cable errors.
Scheduler: one stuck check left everything behind it undone —backups, disk monitoring, camera schedules—. Each check now gets ten minutes, and if it is cut short you are told which.
Virtual machines: without libvirt, deleting, starting or touching a snapshot answered with the program's innards.
Ransomware trap: the bait is now a real document, a real photo and a real PDF, placed in the most used subfolders too. A lone .txt is not on almost any ransomware family's extension list, so they skipped it and the trap never fired.
Ransomware trap: a second net even if no bait is touched. The NAS watches for files with encryption extensions or ransom notes appearing all at once; three at a time are needed to raise the alarm.
Ransomware trap: when it fires, an immediate snapshot of what is affected, a hold on backups and replicas —a backup that runs after the encryption overwrites your last good copy, which is how you lose everything while having backups—, SMB closed with a 24-hour block if asked, and a report with what fired, what was done and who was connected.
Antivirus: it scans what arrives every few minutes, at the lowest priority. Six days pass between one full scan and the next.
Antivirus: the age of the signatures is shown, quarantine can be inspected, restored and emptied, and if what it finds is an encryptor it triggers the trap's response.
Weekly report: it starts with a score out of 100 and ends in a short list ordered by urgency, comparing with last week: "60 GB less than 7 days ago · at this rate it fills up in 46". New blocks for snapshots, security, and cameras that believe they are recording.
Fixes
Printer: the switch answered "could not share the printer: executable not found: cupsctl" and checked nothing. It now says the printing system is missing and how to install it, checks that it really starts, and shows the last line of its log if it does not.
Printer: the switch cannot be pressed if the printing system is not installed, and the screen tells "installed and stopped" apart from "working".
Calendar and contacts: it could not be turned on at all, on any machine, from the day it shipped. The switch answered "mkdir outside the allowed paths: '/etc/radicale'", an internal message with a server error.
Report and trap: the screen never loaded.
Documentation: the 126 links between guides opened a tab to a genuinely foreign site —.md is Moldova's domain—, the ones with an anchor were not even drawn, and the internal ones did nothing. All three now resolve inside the help window, with a "Back".
Updates: a NAS whose IPv6 path to the version server is intercepted could never update. It now retries over IPv4, and what is downloaded is still verified by its SHA-256.
Updates: you are told it happened, in the panel and in the console, even if the update went fine: it means someone is in the middle of your NAS traffic. And it says who signs the certificate, which is what points at the device to look for.
Console:lgm tells apart a name that will not resolve, no connection, no answer in time and a certificate that will not verify. It used to say "check the NAS internet access" in all four cases.
Updates:"LGM-OS is up to date" appeared even when the check had failed, with the failure notice right below it. Of the two, the one you believe is the green one, so a NAS could go months without updating believing it was current.
Updates: the reason was always "check the NAS internet access", and it almost never is: the panel is being viewed over that same network. It now tells apart never reaching the server, the server answering with its own error, no version being published, an answer that cannot be read, and a configured server that does not speak https.
Help in the panel: every screen links to its guide, and the guide opens inside the panel and jumps to the right section. The NAS serves them itself, so they can be read without internet.
Four new guides —disks and replicas, home services, watching and defending your data, and recovery— in Spanish and English.
Country blocking: only let people in from the countries you choose, with the local network always allowed. The ranges refresh once a week, and if a list cannot be downloaded nothing is filtered instead of everything.
Ransomware trap: a bait file in every shared folder; if something touches it, a critical alert and, if asked, the shared folders are closed. A disk that stops answering does not count as an attack.
Weekly report: a short email round-up of space, disks and backups. It can be read before turning it on, and if the NAS was off at its scheduled time it is sent when it comes back.
Changes
Web: one single menu across the site, the front page announces the latest version, the changelog is searchable, the guides have their own index and there is a page with every app.
Your own calendar and contacts (CalDAV/CardDAV): your phone calendar and address book synced against the NAS, with the same account as the files and each person seeing their own. The data lives on the volume, so it is included in backups.
Network printer: the USB printer plugged into the NAS, available to the whole house and to phones. What is plugged in is detected and registered with a name.
Search inside scanned documents: PDFs without text get text recognition in the background, never while someone is searching.
Web: a new section with the whole system drawn out, navigable and searchable.
Previous versions from Windows: right-click a file and see how it looked in each snapshot. It is turned on folder by folder.
Restore a whole folder from a snapshot, in the background and with its progress in Tasks.
Who touched what: every shared folder can record who deletes, moves or renames over SMB. Only destructive or moving operations are recorded, never reads.
Spare disk: an empty disk on standby; if another one fails it steps in by itself and the NAS warns you. A spare that has already stepped in cannot be removed.
Media server (DLNA): the TV and the players around the house see the films on the NAS. What you copy shows up on its own, and there is a button to rescan.
Antivirus: it scans the shared folders on demand or once a week, at the lowest priority. Out of the box it only warns; moving someone else's files is a decision.
Spin the disks down after 20 minutes, 30, 1 hour or 2. It is reapplied on every boot.
Downloads: a new app for http, https and ftp links, magnets and .torrent files. It survives a power cut, tells you when it is done and what it fetches lands in a shared folder.
Automatic power off and on, with Wake-on-LAN. If the wake-up cannot be scheduled the NAS does not power off; nor does it with a backup running.
Replicate to another NAS: whole snapshots over SSH, incremental, on a schedule or by hand, testing the destination before saving.
Network disks (iSCSI): publish a disk from the volume for another machine to use as its own, with an optional password. A disk someone has mounted cannot be removed.
Cameras: recordings were being saved without sound.
Cameras: a camera with a frozen picture and running audio was taken as fine, and the watcher stayed quiet about one that never recorded at all.
Cameras: the photo of a stuck camera is now the last frame it recorded, and the panel gives the exact reason instead of guessing it.
Cameras: new recordings appear on their own, the wall recovers if it fails to ask for permission, and a camera answering something that is not HTTP no longer breaks the panel.
Storage: a disk with data inside can no longer be formatted by accident.
Storage: expanding a volume was announced as failed while going fine, replacing a disk showed no progress, and destroying an adopted volume did not release its disks.
Storage: volumes on a USB disk are no longer adopted on their own at boot.
Backups: a backup cannot empty the destination because the source is not mounted, and an ordinary failure no longer wipes the progress of a resumed backup.
Clouds: mounted folders are visible on the machine again.
Apps: "No space left" tells the system disk apart from the volume.
Updates:sudo lgm update failed every time again, following it did not wait for the end, and a failed update was not undone in full.
System: the Gallery and search indexes heal themselves after a power cut, the scheduled scrub reports what it finds, and the Monitor keeps the month it offers.
Security
Cameras: the permission that opens their images no longer counts as an administrator session.
Phone alerts: each account receives its own.
Sessions: the list of connected sessions is for the administrator only.
Shared folders: they cannot be named after a reserved section of the SMB server.
Cameras: some answer over ONVIF with their host name instead of their address, and the pan-tilt control recovers on its own if the stored address stops working.
Background tasks: the watchers can no longer die without a trace, and the metrics history died before starting on some machines.
External access: dynamic DNS behind a captive portal gives a readable reason.
Sign-in: the sign-in screen gets a background with depth, so the glass of the form has something to refract. Same fields, same button.
Fixes
Language: 76 error messages came out in Spanish with the panel in English —filling in a form wrong, mounting a cloud, adding a camera—. They are all translated now.
Updates: the "Update" button failed with "Permission denied" and never worked again. An affected NAS repairs itself when you press it; if yours is stuck right now, update one last time from the console with sudo lgm update.
Cameras: when a camera was not recording, the panel made up a cause. It now shows the real reason from the recorder —password, address, video format, connection refused— or says it could not read it.
Firewall: removing a rule that did not exist answered "done" and left you believing a port was closed while it stayed open.
Security
Configuration backup: the destination was checked as text, so a path with .. could leave your data and write into the system. The real path is now resolved before accepting it.
Cameras: a camera could say "recording", with the red dot, and leave not one file behind. The wall thumbnail was requested from the camera every eight seconds and, on single-connection models, that hung up on the recorder. The wall photo now comes from the recording in progress.
Cameras: editing a camera forced you to retype the address with its password, even just to change the retention days. Leaving it empty keeps the one it has.
Cameras: "Recording; the first segment takes a few minutes" was said forever. After five minutes with no recording the camera turns amber and shows the likely causes.
Scheduled tasks: all seven form fields have a label. They used to be loose numbers that did not say what they were.
Email alerts: labels on all seven fields, visible with the account already set up too.
Power off and restart: each button now explains what is about to happen and how to come back.
Fixes
Apps: changing a port did not check whether the new one was free; the clash came out at the end, in a raw Docker message. You are now warned before anything is touched.
Package Center: an install that failed could stay "in progress" forever, with no message.
Cameras: machines with the video port open are also asked directly at their IP. A camera with ONVIF on could show up as "no ONVIF" on networks where multicast discovery does not arrive.
Fixes
Cameras: the player could sit on "Preparing the recording…" forever with a damaged file. With no picture in 15 seconds it now says so and offers to retry.
Cameras: deleting a camera with "also delete the recordings" reported how many it had deleted even when it could delete none. It now says how much was left and where to look.
Cameras: the global space cap also reports when it cannot delete, instead of going quiet.
Machine: ejecting a USB drive said "you can unplug it now" without checking anything. It now flushes what is pending, verifies the unmount and, if something is using it, tells you to wait.
Machine: powering off or restarting could do nothing while the panel said "shutting down…". If the machine does not obey, a notification arrives with the reason.
If you have cameras, the first cleanup after updating will delete in one go everything that should have gone in the past months. Take out whatever you want to keep first.
Cameras: retention deleted nothing, ever, and the cleanup answered "0 files freed" —the same as when there is nothing to delete—, so the volume filled up without a single warning. Your NAS repairs itself on update.
Updates: an update could die halfway from lack of memory and finish saying it had gone fine. It now allocates by the real free memory and checks which version ended up installed before declaring success.
Virtual machines: memory, disk and processors are validated against what the machine has. Asking for 4 TB on a 500 GB volume worked instantly and failed months later.
Scheduled tasks: a task could start with the previous run still going. The turn is now skipped and recorded.
Scheduled tasks: the monthly verification reported "task failed" when the previous month's was still running, which on a large volume is normal.
Docker: running out of space is explained the same way when installing an app, creating a container and turning on remote access. Two of the three dropped the raw message.
Desktop: the dock stops growing icons taller than the bar itself and stops flickering when a Gallery video opens.
Desktop: 53 controls changed abruptly on hover, in a single frame. They now match the rest.
Desktop: open windows no longer end up in "the app has crashed" after an update.
Fixes
Gallery: opening it with new photos left the panel unable to open any file at all —"Too many open files"—, not even to let anyone sign in. Thumbnails are now generated three at a time.
Disks: a long operation survived a panel restart without its protections. An orphaned disk wipe could keep writing under a freshly created volume.
Backups: updating cut a restore or a backup in half without saying so.
Cleanup tasks: they could walk into the backups and leave them incomplete without anyone knowing until restore day. Backups are now untouchable for automation.
Cleanup tasks: they could delete files on another machine or in your cloud while walking the folders mounted under the volume.
Docker: creating a container with the port taken downloaded the whole image only to fail at the end. You are now warned immediately, and told which port is taken.
Domain: leaving one left running the service that only makes sense while joined, with seven errors on every boot.
Language: all 35 task titles came out in Spanish with the panel in English.
Fixes
Virtual machines: the panel said "shutting down" and never looked again, even if the system inside ignored the order. It now checks and, if it is still on after two minutes, warns you.
Files: a half-uploaded file was saved as if it were complete.
Snapshots: a restore longer than 6 hours was cut in half and left the folder with two dates mixed. It now continues in passes, up to 16.5 hours.
Snapshots: the age-based cleanup could delete the very snapshot being restored from.
Snapshots: destroying a volume with a restore running took it down with it.
Desktop: the app launcher covered the dock and swallowed its clicks.
Desktop: minimising a window made it vanish, as if it had been closed. It now tucks towards the dock and comes back from there.
Desktop: the right-click menu, the search, the alerts and the uploads appeared abruptly, with no transition.
Machine: on small system disks the log grew to 10 % of the disk. Below 32 GB it is capped at 200 MB; above that nothing is touched.
This version ships a new ISO. If you are installing on a machine that had another system, download it again.
Installation: on a disk that already had another system, the first install died creating the swap area and the second one worked. The installer now closes the encrypted volumes and disk groups still holding on to the old partitions.
Installation: the question about unmounting what is in use went unanswered.
Apps: "Uninstall and delete the data" did not delete the data, and the panel said "uninstalled". You thought you had recovered hundreds of gigabytes and they reappeared on reinstall. They are really deleted now and, if they cannot be, you are told where they are and why.
Backups: restoring a very busy folder reported failure even when it had worked.
Storage: the "volume almost full" warning sent you off to delete things, and deleting from the panel frees nothing: it moves the file to the shared folder recycle bin, on the same volume. The warning now explains the recycle bin and takes you to empty it.
Whole panel: a stalled disk froze every screen at once, for up to half an hour, exactly when the panel is most needed. All 76 questions to the disk now carry a time limit and block nothing; if something cannot be measured, it says so instead of reporting a zero.
Users: revoking someone's SFTP could fail to revoke it. The panel said "SFTP revoked" and the person kept getting in. It is now verified, both when granting and when revoking.
Mobile: the swipe-back gesture could fire on a screen that was already closed.
If you updated to 1.27.29, update to this one too.
Snapshots: restoring a shared folder that was also a dataset emptied it. Snapshots are not recursive, and nested data came out as empty folders.
Snapshots: a dataset whose name started with "auto-" made its manual snapshots delete themselves.
Snapshots: the progress bar could sign off a job that had failed.
Snapshots: what was not restored because it is not in the snapshot is told apart from what failed while restoring. They are not the same and you do not do the same about them.
Storage: destroying a volume did not reserve its disks, so another operation running at the same time could take them halfway through.
Storage: that same reservation did not protect ZFS volumes.
Snapshots: restore several folders at once, with an "All" at the top. One at a time failed in the case that matters most —bringing the whole NAS back after an encryption—, where it is easy to miss one without noticing. Nothing comes ticked by default.
Snapshots: a single backup for all of them, and the space is measured by adding them up: they might each fit alone and not fit together.
Snapshots: a folder that is not in that snapshot is left as it is and reported at the end; if one fails the rest are restored anyway, and the task does not finish green.
Fixes
Snapshots: two restores at once on the same folder overwrote each other.
"Restore" restored nothing. If you use snapshots, update.
Snapshots: on Btrfs volumes, "Restore" left a copy in /mnt/<volume>/restored-<date> without touching a single file of yours, and the panel said "restored". Those folders piled up in the volume dropdown. It now really restores, folder by folder, saving how everything looks first just in case.
Snapshots: restoring blocked the browser and could start without room to finish. It now runs in the background and refuses to start if it will not fit.
Storage: a kernel update could leave the ZFS volume unmounted, and nobody knew until the next reboot, weeks later. It is checked every six hours and reported while it still takes a minute to fix.
Virtual machines: the NAS DNS held port 53 and stopped them from starting.
If you have older restored-… folders: they are still there with their data, untouched. They are yours; you can look at them and delete them whenever you like.
Desktop: the auto-hiding dock comes in fast and with a bounce, and withdraws more slowly, shrinking and fading. Coming in and going out used to be the same movement.
Desktop: the dock waits a moment before withdrawing, instead of hiding the instant the pointer brushes its edge.
Fixes
Desktop: opening an app from the dock did not work if it was not already open.
Storage: SSD read cache for ZFS volumes. It is added and removed hot from the volume card; it holds no data, so removing it or having it fail loses nothing.
Fixes
Storage: expanding a volume, replacing a disk and adding cache did not reserve the disk, so a simultaneous "Create volume" could format it out from under the operation. The worst case is the replacement, where the volume is already degraded.
Storage: destroying a volume did not clear its cache disk, which stayed marked as in use.
Storage: a failure writing the audit log left the disk reserved forever.
Storage: the whole screen crashed if a volume came from an earlier version.
Files: uploading, copying or moving something sent you off to free space when the problem was a jammed volume, not a full one. Deleting there fixes nothing.
Storage: the jammed-volume warning now arrives before writing stops, not once it has already halted the virtual machines and the downloads.
A volume can end up unable to write while showing 25 GB free. Btrfs hands the disk out in chunks, and what runs out first is the space not yet handed out.
New
Storage: every volume reports how much is unallocated and warns below 2 GiB, before it jams.
Storage: a "Rebalance" button that starts with the cheap pass and only escalates if it has to. If the rebalance itself cannot start for lack of room, the way out is explained.
Fixes
External access: when the tunnel image did not fit, the panel blamed Docker.
Docker: "Make room" declared the whole cleanup failed if any single part failed, hiding behind a red banner the gigabytes it had just recovered. Each cleanup now stands alone: how much was freed and, separately, what could not be.
Docker: the build cache came ticked by default even when it was empty.
Virtual machines: a failure of the virtualisation system was reported as if it were the machine's state, and "Grow" could answer "'test' is executable not found" while sending you off to shut down something that may not even exist. It now tells apart the machine that is not there, the system that does not answer and the machine that is running.
Launcher: a hand-made app showed up as "own-my-web" instead of "my-web".
Apps: "Configuration" stopped at "no permission to access …/.env" and the app was left half-manageable. It happens on NAS with history, where those files ended up owned by root. The panel recovers them on its own the first time it needs them, without asking, and only those two: never the app's data.
Docker: the recipe of a hand-made container could be left half-written by a power cut or a full disk, and it is the only thing describing it. It is now written alongside and swapped in one go, keeping the previous one when you edit.
Docker: a path with a ":" inside is no longer accepted; it split the recipe silently.
Docker: while editing, the form let you type before the recipe had loaded.
Docker: deleting your own container says its recipe and its data stay, and where. That folder now starts with a dot so the Package Center does not see it.
Docker: an empty port in the form came back with a raw server error.
Docker: live logs got mixed up between containers.
Virtual machines: snapshot dates follow the panel language, not the browser's.
Docker: a console inside each running container, in its own window. It picks bash if the image has it and sh if not, and warns that whatever you change there is lost when the container is recreated.
Docker: logs refresh on their own and can be searched. With "Follow" on, it only jumps to the end if you were already at the end.
Fixes
Docker: a stopped container is told it is stopped, instead of dropping the Docker error.
This version ships a new ISO. The two installation fixes only arrive by downloading it.
New
Docker: a "Make room" button. It says how much Docker takes and how much each item reclaims; tick what you want and it says how much it will free before you press. Volumes are shown but never swept, and your apps' data is not touched.
Fixes
Installation: on a machine that already had another system, the install stalled at the last step waiting for a bootloader question nobody could see.
Installation: on a machine that already had another system, the install died creating the swap area. The installer activates the disks it finds at boot, and that prevented rewriting the partition table.
Virtual machines: a machine's disk can be grown from its own page, with the machine off. You type how many gigabytes to add and that is it.
Virtual machines: you are told what is left to do afterwards —the system inside has to take up the new space— and that the disk cannot be touched while there are snapshots.
Virtual machines: snapshots from each machine's page, so there is a point to come back to before updating the system inside. It used to require the terminal.
Virtual machines: with the machine running, the memory is saved too, so coming back finds it exactly as it was. Going back warns you what is lost.
Virtual machines: what they are not is stated: they live inside the machine's own disk and do not replace a backup. If the machine cannot make them, it explains why.
Docker: an edit button on containers created from the panel, to change their port, their folder or the image version without deleting anything. The data stays where it is.
Docker: anything added to the recipe by hand is respected, and a recipe the form cannot represent is left alone. The name cannot be changed while editing.
Docker: "New container", to run by hand any image that is not in the Package Center without opening a terminal. Name, image, ports, folders, variables and when it should come back.
Docker: the recipe is saved inside the volume, the folders on offer are the ones from Files, and only data folders are allowed.
Docker: the NAS network can be chosen, which is what some apps need, and the download runs as a task with its own bar.
Docker: each container states in its row when it comes back after a power cut, and it is changed with a right-click. It used to be decided at creation, could not be changed from the panel and was shown nowhere: you found out when the power came back.
Docker: with Package Center apps you are warned that their recipe has the last word.
This version ships a new ISO. The machine's screen travels inside it.
Changes
Console: the screen you see when the machine boots is alive: the bar really rises, drawn with blocks, and there is a clock in the footer. It used to be drawn once at boot, so the machine installed on the inside while looking frozen from the outside.
Console: Ctrl+Alt+F1 and Ctrl+Alt+F2 show the same thing, both live, and each says which one you are on. One key gets you to the login; when you sign out, it comes back on its own. F3 onwards are still ordinary consoles.
Console: the screen is centred and fits whatever size is available, and shows the machine name next to "ready".
Fixes
Console: the QR code could not be scanned even though it looked perfect: it lacked white margin around it and its white was not quite white.
Console:lgm log did not exist, and the screen itself told you to type it. It now shows the right log for the moment, including the installation one.
Console:lgm progress repeated down the screen instead of updating, and the frame went crooked with long step names.
Desktop: the dock can auto-hide, from Control Panel → Region and appearance.
Web: the public site is in Spanish and English, with its flag in the bar.
Fixes
External access: the panel would not open from a phone. The certificate the NAS makes for itself lasted ten years —Apple devices reject anything over 398 days, with no way past it— and did not carry the NAS address inside. It is issued properly now.
Gallery: a video that ended and was played again went black, because the playback permission had expired.
Gallery: the volume was not remembered from one video to the next.
Storage: the Health screen went blank if a disk was missing its SMART data, which is exactly when you suspect it is dying.
Shared folders: the screen crashed if the list of places to create in did not arrive.
Files: the preview showed the previous file when moving from one to another.
Web: three links in the guides led nowhere, the sitemap announced a page that does not exist and the mobile bar broke into two rows.
Installation: the screen is the same from the first second, with frame, colours and bar: 1 % looking for the version, 4 % downloading it, 12 % starting the install. The whole download used to pass without showing a single percentage.
Fixes
Installation: progress was written correctly but the screen did not show it until someone pressed Enter, so from the front it looked like a frozen machine. If there is a session open on that console, it is left alone.
Installation: the download and the install count on the same bar, 0 to 100 once. The bar used to start from zero twice.
Installation: a QR code on screen leads to the panel without typing the address, and the console keys and the commands that are useful right now are always in view.
Fixes
Updates: the screen crashed with "internal panel failure" on exactly the machine where you most need to look at it.
Whole panel: system failures read in plain language, instead of "PermissionError: [Errno 13]".
Desktop: pressing the red notification closed the widgets.
Updates: the screen said "5 updates available" next to a red error, with a number taken from stale data. If it could not be checked, no figure is given.
Updates: a NAS that cannot talk to the repository is not stuck: it updates through the version channel.
Installation: the first boot reported any stumble as "no internet". It now says what is failing.
Console:lgm did not exist on a freshly installed machine. The 1.27.2 package shipped with Windows line endings, and a script like that does not start on Linux; the message it gave, "No such file or directory", did not mention the real problem.
This version ships a new ISO. Until today, the update button only worked on a NAS installed from source.
New
Updates: "Update now" works on any NAS. It asks the version server which one is latest, downloads it, checks its SHA-256 digest and installs it. All it needs is internet access.
Updates: the notice and the automatic install work the same, and the updater relaunches itself from the new version before installing.
Installation: the ISO also asks for the root password, along with the machine name and the user.
Fixes
Updates: the screen told everyone who had installed from the ISO to reinstall the NAS —"this install does not come from a checkout"— with nothing actually broken.
Updates: the panel compared against one version and displayed another.
Updates: if the installed version is unknown, it says so instead of assuming it.
Updates:sudo lgm update demanded the source code, and said "verified" even when it had not left the package. When curl is missing, it says so instead of blaming the network.
Web: the ISO SHA-256 digest was written by hand and stayed on the first image's. Anyone comparing it would conclude their download was corrupt.
Installation: the ISO offered to install a bare base system alongside the LGM-OS entries.
Sixty-two repairs, all traced from one update that failed on a real NAS.
Fixes
Updates: a good update rolled itself all the way back because of a notice at the end, with the new version already installed and running.
Updates: if it fails, you are told at which stage and why, instead of "The update failed (code 1)", and the reason is kept in the log.
Updates:lgm update signed off a rollback as success, and a half-downloaded interface could still be installed.
Installation: the first boot from the ISO could die without saying anything.
Mobile: the panel opens 10 % lighter. Cameras travelled whole inside the file everyone downloads on the way in, and it was the only app that would open on a phone.
Mobile: the NAS announced in its QR an address a phone cannot reach.
Mobile: every app failed with "TypeError: Importing a module script failed" after an update, and the copy kept in the browser stayed poisoned.
Mobile: coming back to an app could find it blank, and live data did not come back with you. With the phone locked, the panel now stops working.
Whole panel: while the NAS updates, 38 of the 94 screens answered "the app has crashed internally", the same message as a real fault. They now explain the NAS is updating.
Desktop: a setting edited by hand over SSH could take down the whole desktop.
Sign-in: a password with an impossible character took down the sign-in screen, and a NAS with its accounts set aside offered itself to the first passer-by.
Whole panel: "internal panel failure" when what was full was the disk.
Tasks: a task that dies no longer spins forever.
Storage: a disk marked for wiping could stay marked without being wiped.
Users: revoking shared-folder access was not verified.
Cameras: four cameras each with their own cap could fill the volume to zero, because each only looked at its own. There is now a common floor for the whole volume.
Files: an interrupted upload took down the file that was already there.
Network: "Back to automatic DNS" answered with an internal error, exactly the button you press to undo a manual DNS that does not work.
Network: a network change that leaves the NAS mute undoes itself.
Security: the SSH watch loaded hundreds of thousands of journal lines into memory exactly when it matters —a brute-force attack— and never moved forward again.
Files: deleting gigabytes froze the whole panel.
Language: notifications came out in Spanish with the panel in English: disks, volumes, services down, cameras, backups and certificates. That is 74 texts.
Gallery: asking for a page with an impossible number blew up in the database.
Cameras: saving a camera cut its recording, and its configuration file promised a retention it did not apply.
Security
Updates: a version package is extracted as root, and an executable with the setuid bit inside would have let any NAS user become root. It is now stripped by hand.
Gallery: videos join the Gallery, with a frame as their thumbnail, and they play in chunks: a 3 GB video no longer fills your phone's memory or stops you jumping to a minute.
Gallery: named albums, favourites with their own filter, and a viewer with arrows, keyboard, rotate and zoom.
Gallery: delete to the NAS recycle bin, upload photos and videos from the app itself, and a duplicate finder that groups what is repeated.
Package Center: four public catalogues selectable in one click, with what each brings and how much it weighs written beside it. Big Bear comes as standard.
Files: the preview is a real window: it drags, it resizes and it remembers size and place. And thumbnails are the photo, not an icon of a photo.
Changes
Desktop: five icons redrawn —Storage, Backups, Cameras, Control Panel and Gallery— so they can be told apart.
Files: tabs are named after the folder they have open.
Fixes
Storage: emptying the recycle bin did not give the space back on Btrfs volumes: seven gigabytes were emptied and the volume still said it was full.
Storage: uploading, copying or extracting stop with an explanation before eating the last gigabytes, where Docker and the virtual machines live.
Storage: the panel threw away good output over an error code and showed "the disks could not be read" or, worse, "no pools yet" with the create button on top of a volume full of data. "Could not check" is no longer drawn as "there is nothing".
Updates: the updater left services down. It now notes which were running and brings them back.
Updates: the installed version and the update button are always visible.
Notepad: it warns before closing with unsaved notes, does not overwrite what someone else wrote over the network, respects Windows line endings and does not hang on a .md full of brackets.
The biggest release so far: six new apps, mobile done properly, and a security and reliability review in three passes.
New
Gallery: a new app. All your photos on a timeline, grouped by day and by month, without having to know which folder they are in.
Notifications: alerts on your phone and computer, served by the NAS itself. No account anywhere and no third party seeing your alerts.
Files: right-click a file → "Previous versions…", to get yesterday's back without diving into the snapshots.
Backups: "Prepare a place for a computer…", which sets up the folder, the user and the quota in one step so a PC or a Mac can back up to the NAS.
Files: upload requests, the reverse of a share link: someone sends you files without having an account on the NAS.
Desktop: search the whole NAS with Ctrl+K —apps, settings, folders and files—, and inside file contents when you ask for it.
Desktop: wallpaper from your own photo, icons on the desktop and memory of where each window was.
Files: another machine's shared folder is mounted on the NAS and used like any other folder. Disk images open with one click.
Recycle bin: a search inside what was deleted.
Mobile: the panel feels like an app. You go back by swiping from the edge, the home screen says how the NAS is doing at a glance and open apps are a carousel.
Virtual machines: the install image downloads itself, without hunting for it by hand.
Network: the NAS DNS server can listen on another port and coexist with an app already using 53.
Changes
Whole panel: it opens fast and nothing spins forever. The Package Center, the app menu, Backups, Health, Overview, Virtual machines, Storage and Clouds stop making you wait.
Cameras: the live view opens in one second instead of several, and holds up without degrading if you watch it for a long time.
Whole panel: nothing overflows sideways, and blue buttons are readable in dark mode.
Fixes
Cameras: stopping recording is no longer a secret, and a camera that keeps cutting out warns you.
Cameras: recording cannot end up on the system disk, a passing disk hiccup no longer kills it forever, and a stopped recorder restarts itself.
Cameras: a camera flicker condemned the live view to re-encoding, and a camera that went silent left it frozen.
Cameras: adding two cameras at once could manufacture a false success.
Cameras: playing a recording was slow or stayed black.
Storage: an encrypted volume took Docker inside it, and destroying a ZFS volume left the disks unusable.
Storage: an encrypted volume that failed halfway left the disks unusable, and a hung disk froze the whole screen.
Storage: a Btrfs scrub with errors was announced as "no errors", and SMART health was not watched on every disk.
Backups: a disk that is not mounted is not backed up, and "Verify" now really reads the contents instead of just checking the file is there.
Files: moving with "overwrite" could delete exactly what you were about to move, and copying a folder into itself is refused.
Files: moving or deleting a lot said "server offline" after 30 seconds.
Files: a freshly created share link disappeared.
Users: deleting a user also removes their permissions on the folders.
Network: undoing a network change left leftovers, and turning SMB off did not close its discovery ports.
Overview: DNS, DHCP and external access were shown wrong.
Monitor: the process table sat on "Loading…" forever and stacked up requests.
Notifications: they were only cleared on screen, and the email digest was lost if sending failed.
Whole panel: the NAS now holds up for weeks without degrading; the memory leaks in the intruder brake and the processes left hanging by a camera's live view were closed.
Security
Package Center: an app could publish the whole disk over SMB, and a third-party recipe could mount the system with just one variable.
Apps: the ports and volumes editor could mount the system.
Files: copying a file could write outside your folders, and receiving files through an upload request could overwrite what was already there.
Users: a panel-only user was given network file access by mistake.
Sessions: "Close all sessions" could undo itself, and closing two at once left one unrevoked.
Storage: expanding a ZFS volume could destroy redundancy silently.
Firewall: a rule for a Docker service did not respect its source, and two changes at once overwrote each other.
Certificates: a wildcard certificate overrode the main domain's.
Backups: clouds configured for backups cannot be mounted as a folder.
Forty-two fixes across the veteran code: storage, shared folders, security, network, alerts and the panel.
Fixes
Storage: a disk that had died completely could not be replaced from the panel, which is the case that matters: the volume stayed degraded until you went in over SSH. The replacement is now watched until it finishes.
Storage: a Btrfs volume that is present on the disks can be recovered again.
Storage: destroying a volume that was in use said it had destroyed it.
Shared folders: with the volume unmounted they were recreated on the system disk.
Network: the VPN did not come back on its own after a reboot, because its rules were lost.
Notifications: important alerts did not arrive with the disk full, which is exactly when they are needed.
Security
Shared folders: a folder with every permission set to "none" was left open to everyone.
Firewall: any rule change forgot which networks the panel is limited to.
Sign-in: turning two-step verification on or off could undo a password change made at the same time.
Files: pasting, moving, dragging or uploading something that already exists asks you, once per operation: keep both, leave it as it is, or replace. Each path used to decide on its own, and an upload overwrote silently.
Files: copying and moving many items shows progress.
Files: any folder can be pinned to the top of the sidebar from its menu.
Files: every share link, in one list.
Cameras: the padlock on a recording keeps it out of the day- and gigabyte-based cleanup until it is released. The mark travels with the folder, so it survives moving to another machine.
Cameras: bookmarks on the timeline, so the moment that took effort to find is not lost.
Cameras: an "All" tab, with every camera at a glance.
Cameras: a button saves the frame you are watching on the live view.
Shared folders: "docker" and "vm" now appear in the list, with their system badge, and SMB, NFS or WebDAV can be turned on for them like any other. They cannot be renamed or deleted.
Security
Shared folders: when sharing "docker", its internal store is neither visible nor writable from the network.
Backups: you can look inside a backup and browse it like a folder, and restore only what you tick, down to a single file.
Backups: smart retention by default on new jobs —recent dailies, weeklies, monthlies— without having to decide anything.
Backups: a "Verify" button that reads the whole backup from the destination without moving a byte, to say whether it is really there.
Backups: end-to-end encryption to the cloud, so the provider cannot read your backups.
Backups: the backup says how fast it is going and how long is left, in numbers.
Backups: exclusions are chosen in the wizard, you can also copy to a second destination, and the history tells verifications apart from backups.
Cameras: the timeline shows the gaps with no recording, stays smooth with thousands of segments and produces thumbnails even for segments that are not indexed yet.
Files: delete many items at once, with a progress bar. The 200-item cap is gone.
Fixes
Cameras: four out of every five hours were not being recorded. Resuming after a drop took ten to eighteen seconds and now takes one, and the NAS warns you if the camera is broken.
Cameras: a mistyped port left the whole app blank.
Cameras: the space-based cleanup took the hour being recorded, and retention could delete a whole day that was still within its window.
Cameras: the night the clocks change in October threw the recordings off.
Cameras: exporting a range that crosses a gap brought an extra hour along, and an unreadable recordings folder was lost in silence.
Backups: "Verify" went green when it had nothing to compare against.
Backups: a backup to a disk that fails halfway left rubbish behind forever, and old versions disappeared from the panel.
Files: emptying the recycle bin did not tell the truth, and an interrupted upload passed itself off as good.
Shared folders: turning WebDAV off for a folder did not withdraw it, and editing it wiped its SMB settings.
Installation: a Docker that would not start aborted the whole install, and the step that enables the repository ZFS depends on did nothing.
Updates: rolling back a failed update did not bring the configuration back.
Control Panel: releasing a network card asked for confirmation with text that did not exist, and turning a service off took your half-written form with it.
Control Panel: several screens said "there is nothing here" when what was really happening is that they did not know.
Security
Users: a panel account cannot be named "root".
Package Center: a recipe cannot ask for control of the NAS.
Sign-in: a two-step code no longer works twice, and "Close all sessions" really closes them.
Cameras: the permission that opens the video can now be revoked.
Files: a ZIP could write outside the folder when extracted, and copying followed links outside the shared folder.
Backups: the configuration backup carried the SNMP key inside it.
Installation: Node was installed by handing root an unverified script.
Cameras becomes a real recorder, disks warn before dying, and a sweep of more than a hundred fixes across the panel.
New
Cameras: a wall with every camera, full screen, still capture and a right-click menu. The live view window really resizes.
Cameras: a forensic player with a calendar, range export and PTZ control.
Cameras: a weekly recording schedule, and searching for a recording by date and time.
Cameras: recordings are browsed on their own timeline, with thumbnails.
Cameras: recordings are stitched by the hour, so the thousands of loose files are gone, and the folder lives inside the volume and can be opened from Files.
Storage: SMART counters are read in plain language and the NAS watches them on its own, so a disk warns before it dies.
Storage: wipe a disk completely before selling or discarding it.
Storage: volumes can be created encrypted.
Files: clouds are used like any other folder on the NAS.
Backups: Docker and the virtual machines can now be backed up.
Backups: the backup is verified by weighing both sides, and says whether it is advancing or has hung.
Updates: rclone updates from the panel, without going in over SSH.
Desktop: three new wallpapers, painted with gradients. "Regional options" is renamed "Region and appearance".
Fixes
Shared folders: the NAS never appeared under "Network" in Windows. Ever. It was a mistyped path, and the panel blamed the network on top of it.
Cameras: every camera that would not start said the same thing, "the camera did not respond", and on the wall it said nothing at all.
Cameras: recording could stop silently and forever, and a power cut took the whole last segment.
Cameras: opening the app and every jump on the timeline took an eternity with the NAS perfectly healthy.
Cameras: the live view clashed with the recording, and failed with "Operation not permitted".
Cameras: the NAS crawled because of the thumbnails.
Cameras: the camera password appeared inside the error messages.
Backups: the diagnosis said the exact opposite of what was happening —"upload failed …: Skipped copy as --dry-run is set"— and the advice arrived cut in half.
Backups: the green "Backups up to date" banner sat next to "Last successful backup: never", and a failure listing versions disguised itself as "no versions yet".
Backups: "0 files" meant two different things, and a version with "0 files" is not empty.
Overview: the Cameras and Backups cards said the same thing whatever happened, a locked encrypted volume made it say "No volumes yet", and in dark mode hovering turned them into a grey slab.
Storage: the screen died with an internal error if lsblk failed.
Whole panel: Disk status, Snapshots, Shared folders and Backups went blank because of one secondary query failing.
Updates: a wrong package name left the NAS installing nothing, rclone could never be downloaded and the log contradicted itself.
Updates: the update died over IPv6 —"npm error errno ENETUNREACH"— with the NAS perfectly connected.
Package Center: eight copies of the same app appeared, because they were grouped by name, and withdrawn ones were still offered.
Package Center: installing a large app failed because of the clock.
Users: the "wsdd" user could not be deleted.
Panel: it opens almost twice as fast from outside; it used to download a single 1 MB file before showing anything.
Documentation: on a phone half of it went off screen and commands came out on one line with the word bash in front.
Whole panel: 63 buttons ignored the font size, delete buttons came out grey and two dropdowns went off screen on a phone.
Scheduled tasks: one broken check left every check after it undone.
Licences: each key is good for one NAS only, is released from the machine itself, and a key with no record of being issued will not activate. Free licence on sign-up.
Fixes
Backups: a large file would not upload to Nextcloud with the account half empty, and the failure notice was cut off right where it said where to look.
Mobile: the panel is handled like an app, and dialogs come up from the bottom.
Security
Licences: a full review of the portal before selling. A critical fault is closed, a purchase is visible only to its owner, sign-in withstands brute force, and the headers against clickjacking are added.
Space report: it says where the disk is going, folder by folder.
Monitor: a metrics history, to see how the machine has been doing these past days.
Apps: a visual editor for ports and folders, without touching the recipe by hand.
Storage: disks appear when you plug them in.
Licences: LGM-OS becomes a one-off purchase, forever. It is verified on the machine itself, without internet; the NAS is never locked by the licence, and the key is tied to you, not to the hardware. There is a free-mode switch.
VPN: it configures itself. The public address is detected without asking, the DNS is proposed, the home networks are configurable and you are warned if a client will not reach anything.
Notifications: alerts over Telegram, Discord and ntfy, with each level choosing its route.
Network: the NAS shows up on its own in Windows and on a Mac, with configurable name, description and workgroup.
Diagnostics: network tests that really go out to the internet, three new automations and a log download.
Changes
Virtual machines: the console opens in a tab, not a pop-up window.
Desktop: windows and dialogs remember their size.
Fixes
Log Center: "Virtual machines" did not work and never had; the Samba startup showed in red and half the rows were source-code paths.
Security
Sign-in: automatic intruder blocking now covers SSH too.
Cameras: a single connection per camera, shared among everyone watching, and the live view runs without re-encoding.
Virtual machines: the CD is removed on its own once the machine is installed, there are advanced settings, and shutdown can be forced.
Changes
Mobile: on narrow screens there is no desktop: the panel takes the shape of an app, respects the notch, going home closes nothing, and it installs as an app on iPhone too.
Control Panel: the "System" app disappears from the desktop and everything it held moves into the Control Panel, so there are not two doors to the same thing.
Fixes
Sign-in: a wrong password said "Session expired", and the username came with "admin" already filled in.
Storage: the figures for a Btrfs volume did not add up, because it cannot be measured with an ordinary disk's ruler.
Security
Panel: WebSockets check where they come from, the panel cannot be embedded in someone else's frame, and the development exception no longer ships to NAS machines.
Updates: a real progress bar, from 1 % to the reboot, and the error is visible without leaving the panel if something fails.
Snapshots: a padlock against data hijacking, in Storage → Snapshots. The state is asked of the filesystem, not stored in the panel, and with Btrfs it says it cannot be done instead of pretending it can.
Files: the manager, rebuilt. One toolbar instead of two, the file type is recognisable at a glance and the selected row is visible.
Fixes
Updates: running out of memory was mistaken for a compilation error.
Files: the Docker and virtual machine folders were not visible.
Cameras: the scan finds the ones that used to be missed, respects the address each one answered from and brings out a multi-channel recorder whole.
Whole panel: the focus ring deformed the element it was on, and in dark mode it was invisible.
System check: two warnings appeared with nothing wrong: "The panel has SSH off but ssh is running" and "Without nas-helper the panel cannot touch the system".
Cameras: the scan now goes out over every network on the NAS, not just one.
System check: it said "Remote console (SSH): off" while there was an SSH session open on that very machine. Now, when the panel believes a service is off, it checks anyway, and the screen says what time it checked.
Whole panel: out with what pretended to work. "S3 storage", "No pending updates", "The firewall is on", the backup encryption and "Reconnect the account" all said things nobody had verified.
System check: it goes over every service and catches what breaks without raising an error: Samba running with a configuration that does not have your folder, an NFS export whose folder no longer exists —which takes the others down—, WebDAV on with its server stopped, Docker with its store on the system disk, low space, an unmounted volume, or a camera recording to a drive that is not there.
Files: the upload queue lives in the top bar, you can keep working while it uploads and, if one file fails, the rest carry on. The whole batch used to fall over and the panel went mute until the end.
Shared folders: WebDAV is ticked on the folder, and neither NFS nor WebDAV ask for paths any more. Loose NFS exports from earlier versions are still visible.
Fixes
Users: the permission labels read as if they were buttons.
Users: per-person quotas, in Control Panel → User and group → Quotas. The filesystem enforces them, not the panel, so they only work on ZFS volumes; on the others it explains why.
Sign-in: the session moves to a cookie the browser will not let scripts read, with its defence against cross-site requests, and it now expires after half an hour of inactivity instead of twelve hours.
Files: a share link's password left a trace in the address, and from there in the server log and the history. The screen does not even show the file name before you get it right, and it is five attempts per link.
Cameras: a new app. You add a camera with its RTSP address and it records on its own; the system records, not the panel, copying the video without re-encoding. It cleans up after itself and everything lives inside the volume. The camera password never leaves the NAS.
Cameras: live view with no plugin and no lag.
Changes
Desktop: the logs, the editor, the recycle bin and everything that opens a dialog can be dragged around.
Backups: backups go out to the cloud —Drive, OneDrive, Dropbox, S3 and several more—. Connecting the account does not require installing anything on your computer and the credentials are not stored in the panel.
Backups: the destination is tested before it is saved, and how versions work in each cloud is explained.
Updates: the two long steps —installing packages and building the interface— warn that they take several minutes and how to follow them. Without saying so they looked frozen.
Docker and Virtual machines: without a volume nothing is installed, and it says so: "Create a storage volume first", with its button. What grows lives on the volume, never on the system disk. Only the Package Center used to warn about it.
Storage: everything that grows lives on the volume. Creating it prepares the Docker, the virtual machine and the catalogue folders on its own, and the Docker store moves there. Images used to stay on the system disk —almost always the small one— and filled it within weeks; the first thing to stop working was the update that would fix it.
Docker: on a NAS that got its volume later, the app warns that its data is still on the system disk, says how much it takes and moves it with a button. If the move fails, Docker starts up just as it was.
Updates: the interface is built where there is real room, so updating needs 400 MiB on the system disk instead of 1 GiB. On a machine with the system on a small disk the update did not fit no matter how much you cleaned.
Console: the NAS screen moves to terminal 7 and the usual login stays on 1, so Ctrl+Alt+F1 gives a real console even if the screen breaks. The machine could be left with no way in from its own keyboard.
Fixes
Updates: a few failed attempts left leftovers that made the next one die with "insufficient space", without saying they were the cause. They are now cleaned before measuring and, if space is still short, it says what is taking it.
Console: the NAS screen turns on when you update, and is installed on the spot if the machine has a display and did not have it. If you turned it off from the panel, it stays off.
Fixes
Console: on a machine without a dedicated graphics card the screen died with "no screens found" or did not respond to the keyboard. And if it cannot start, it gives up after five attempts leaving the reason written, instead of retrying forever.
Updates: an update that failed and rolled back left the screen identical, indistinguishable from one that had never been attempted. It now says in green which version you went from and to, or in red at which stage it failed and why.
Terminal: a reconnect button, 10,000 lines of history and a red frame when the session is root.
Changes
Control Panel: users move out of the file services and "User and group" becomes an entry with its own category. Each service used to have its own list, and the same person ended up with different accounts depending on where they were created.
Control Panel: SNMP moves to Connectivity, and Security keeps what protects the machine: advisor, firewall and address blocking.
Virtual machines: a new app. You create a machine with its name, memory, processors and disk, install from an image you have in your folders, and see its screen inside the panel itself. The disks go on the volume and grow as they are used.
Virtual machines: each machine's screen listens only inside the machine; it is viewed through a panel bridge that requires an administrator session, never open on the network.
Virtual machines: if the machine cannot virtualise, it explains what is missing.
Fixes
Whole panel: switching section inherited the scroll position of the previous one.
Console: the NAS screen was not installed on virtual machines, for want of a display connector an emulated card does not always publish.
Shared folders: a "Check" button for SMB, which walks the service, the process, the port and the permissions in order to explain why "Windows cannot access \\NAS".
Changes
Control Panel: a front page with the sections grouped in a grid —File sharing, Connectivity, Security, System— with a search box, instead of a sidebar list of twenty entries.
Fixes
Package Center: a passing failure of one catalogue wiped its thousands of recipes at once and left the store half empty, with no explanation. Only catalogues that answered are now refreshed, and the sources sheet says what each one brought and when.
Console: the server opens the panel on its own display, full screen, like any operating system. It is only installed if the machine has a display, and it is turned off from System → Information.
Files: compress and extract. Extracting creates a folder named after the archive, instead of dumping a hundred loose files on top of the current folder.
Files: share by link, with optional expiry and password, and the list of active links with its download counter and its revoke button.
Files: real search across the whole tree, ignoring case and accents, with each result's folder. It used to filter only what was already on screen.
Files: preview, "Copy to…", "Move to…" and a complete right-click menu.
Files: copy and move in bulk as a single operation; repeated names become "x (2)" instead of failing halfway.
Changes
Updates: operating system updates are withdrawn from the panel. They can restart services or leave them half-done with nobody watching; anyone who wants them has the console. LGM-OS still updates from the panel.
Security
Package Center: an app identifier is validated before a path is built from it; a stray ".." pointed outside the catalogue.
Terminal: an account whose password has not been changed yet no longer opens the terminal, which is the most dangerous thing in the panel.
Shared folders: the description cannot carry line breaks, which inside the Samba configuration are new directives.
Files: extracting an archive discards entries pointing outside the folder and symbolic links.
Shared folders: SMB, NFS and WebDAV move into one place. They were three menu entries, as if they were different things, and sharing a folder meant walking all three.
Shared folders: each folder's SMB and NFS badges are clickable, without opening the full editor.
Users: per-person permissions, with their folders and three columns —no access, read and write, read only—, including the permission that reaches them through their groups.
Users: one person, one account. There were two places to create people and the same one ended up with two accounts and two passwords that drifted apart. The panel cannot be left without an administrator, not even by removing your own.
Fixes
Log Center: "Panel" and "Privileged service" gave error 500 over a size cap the chattier units exceed easily. The same limit broke any large file read that way.
Log Center: a journal line that was not valid text took down the whole list, and logs are now chosen by their everyday name.
The NAS stops being something you only use from home: it publishes outward, keeps real backups and provides network services to the local network itself.
New
Backups: a new app. Each version is seen whole when you open it but only takes up what changed, and every source is stored with its full path, so two folders with the same name do not collide.
Backups: destinations on a local disk or on a remote server over SSH, with keys the panel cannot read. The connection test tells apart an unreachable machine, an unauthorised key, a changed fingerprint, a folder that does not exist and a missing write permission, instead of a "could not connect" that does not say what to fix.
Backups: retention only deletes after a successful backup, so repeated failures cannot leave you with no backup at all. Restoring recreates the original path inside the folder you choose, without overwriting the live data.
External access: dynamic DNS, with the provider notified only when the address really changes. The token lives apart, so the configuration travels in the backup and the secret does not, and it is stripped from any error message.
External access: automatic certificates, resynced daily so a renewal reaches the panel too.
External access: a reverse proxy that validates the configuration before reloading it and restores the previous one if it fails. Targets are restricted to literal private addresses.
VPN: WireGuard, with each client's private key shown once, at creation, inside its configuration and a QR generated on the NAS itself. Adding or removing clients does not cut the open tunnels.
Network: DNS and DHCP, with reservations by hardware address. The configuration is validated before installing and the previous one restored if the service will not start. Turning DHCP on requires confirmation and warns if another DHCP server is detected on the same network.
Files: a recycle bin inside each shared folder, visible over SMB too. The previous one lived on the system disk, so deleting a large file copied it between disks and could fill it.
Fixes
Installation: machines installed from the ISO could not be updated from the panel. None of them, ever.
Installation: if the first boot died halfway, the machine was stuck on "installing" forever with no way to recover it.
Updates: the update is promoted keeping the previous one and, if the panel does not respond after restarting, it rolls back on its own. The panel can no longer claim a success that did not happen.
Backups: the configuration backup lost the shared folders, and with them SNMP, the sign-in portal, the UPS and address blocking.
The first public release. It gathers everything built before the launch.
New
Installation: an installer of our own with four choices —server name, network, console user and system disk—, a dark theme and not one stray question from the base system.
Console: a screen with the logo, the address and the URL, with a live progress bar during the first boot, and the lgm command to see the status, the URL with its QR and the progress.
Sign-in: a first-access wizard. There is no factory administrator: the first visit creates yours.
Panel: it installs as an app on phones and computers.
Desktop: a side panel of live widgets —system health, resource monitor, storage, connected users, scheduled tasks and recent logs—, with a menu to enable, pin, fold and reorder them.
Branding: our own logo on the sign-in screen, in the top bar and in the browser tab.
Shared folders: a single definition creates the folder, applies the per-user and per-group permissions and publishes it over SMB and NFS.
Users: real system groups managed from the panel, usable in permissions.
Connected users: live web sessions, SMB connections and console sessions, with their own tab and widget.
Security Advisor: an analysis with a score —factory password, administrators' two-factor, SSH hardening, firewall, pending updates, automatic blocking— and its advice.
Security: automatic address blocking after several failed attempts, with an allow list and unblocking from the panel.
Control Panel: time zone and network time, a read-only SNMP agent, and a sign-in portal with a customisable title and message.
External devices: USB disks with mount, unmount and safe eject, visible from Files.
Desktop: draggable widgets that remember their position, and the app launcher moves to the dock.
Files: a quick-access sidebar, cut, copy and paste, move by dragging, upload by dropping files on it, and creating files and folders.
Files: multiple selection and keyboard shortcuts —F2 rename, Del to the recycle bin, Ctrl+C/X/V, Enter open, Backspace up—.
Files: sort by name, type, size or date, list and grid views, a search box, an editable address bar, properties and a complete right-click menu.
Monitor: a live process table, with each process's user and usage.
Docker and Storage: a right-click menu on containers and on volumes.
System: machine information —processor, memory, system, disks and load— in its own tab.
Updates: LGM-OS updates from the panel, showing what it brings first.
Desktop: a full-screen launcher with every system app and the store apps already installed, with live search.
Terminal: a real console inside the panel, for administrators only. It runs as the service user, not as root.
Storage: replace a failed disk and expand a volume from the panel, with the rebalance running in the background.
Overview: a new app, with volume health and usage, service status, load, SMART, containers and notifications in a single view.
Files: a recycle bin, with list, restore and empty.
Storage: short and long SMART self-tests per disk.
UPS: a safe shutdown at a configurable battery level, with live status in the panel.
Files: a web manager, with list, upload, download, rename, copy and delete.
Users: unified file accounts, with a single password for SMB and WebDAV.
Storage: datasets with quota and compression, manual and scheduled snapshots with retention and restore, and SMART with on-demand and scheduled scrubs.
Notifications: alerts by email and webhook, watching usage, volumes, downed services and SMART, with their centre in the panel.
Shared folders: an NFS server, a network recycle bin and Time Machine backups.
Backups: configuration backup and restore, by hand or scheduled.
Network: network configuration from the panel, with VLAN and card bonding.
Package Center: a verified remote catalogue, logs and statistics for each container, and updates for what is installed.
Scheduled tasks: an integrated scheduler for snapshots, scrubs and backups.
Desktop: a dark Liquid Glass theme with a switch and system detection, and an interface in Spanish and English.
Storage: ZFS and Btrfs volumes.
Shared folders: SMB, SSH and WebDAV.
Firewall: system rules managed from the panel.
Docker: a container orchestrator and a Package Center.
Desktop: a Liquid Glass web panel with real-time metrics.
Changes
Control Panel: the settings are grouped into "File sharing", "Remote access", "Security" and "Power", and System into "Machine", "Updates", "Automation" and "Maintenance", so each thing can be found at a glance.
Whole panel: the browser dialogs are replaced by dialogs of our own and toast notices, in the same glass material as the rest.
Whole panel: dialogs trap and restore focus, close with Escape, and the reduced-motion preference is respected.
Branding: the product is renamed LGM-OS across the panel.
Installation: the installer is redesigned, with a colour logo, numbered steps and a final screen.
Whole panel: our own iconography across the interface; the emoji are withdrawn.
Desktop: the dock tells apart the active app, the one open in the background and the minimised one, and one click brings it to the front or minimises it depending on focus.
Fixes
Desktop: window dragging and resizing, rebuilt from scratch. They work with mouse, finger and pen, with eight handles and without leaving the desktop.
Whole panel: the secondary buttons had lost their styling.
Users: the screen returned a server error over a malformed path.
Firewall: it could never be turned on.
Storage: creating a Btrfs volume with a dash in its name left it unable to mount. Names are restricted to letters, numbers and underscore.
Installation: the installer did not leave ZFS ready, so creating a ZFS volume failed.
Shared folders: WebDAV stopped the web server from starting by duplicating its port.
Users: deleting an SMB user left their system account behind.
Firewall: the panel warns that SMB, NFS and WebDAV stay blocked until their ports are opened.
Recycle bin: restoring several items was no longer aborted by one of them, and two files with the same name stopped overwriting each other.
Scheduled tasks: two changes at once overwrote each other.
Storage: a volume's status confused the cache disks with the data ones.
Panel: reconnection hammered away without pause after a session failure.
Security
Backups: the configuration backup included the key that signs sessions and did not require an administrator: a read-only user could download it and impersonate an administrator.
Sign-in: the two-factor code was compared badly, and the factory password blocked nothing until it was changed.
Shared folders: sharing is restricted to the data paths, so the whole system cannot be exported.
Panel: mandatory encryption, with a certificate generated on first boot and replaceable.
Panel: the panel runs without privileges and everything touching the system goes through a helper with a closed allow list of commands and paths.
Sign-in: an attempt limit per address, account lockout after five failures, an audit log, real sign-out —including global and on password change— and two-factor.
Your computer asks for fewer animations and this site moves quite a lot. If that bothers you, you can reduce them.
