No. Ansible runs on the remote server<\/strong> (the one you connect to via SSH), not on the server hosting WordPress. The WordPress server only needs PHP 8.2+ and outbound SSH access.<\/p><\/dd>\nIs it safe to use in production?<\/h3><\/dt>\nRead the security warnings section below carefully before deploying in any environment. The plugin executes privileged commands on a remote server. A compromised WordPress admin account means full server access. Follow all hardening steps and test on a staging environment first.<\/p><\/dd>\n
What if a package is already installed?<\/h3><\/dt>\nThe plugin queries the package manager for current status before taking any action. Already-installed packages are shown with a 100% progress indicator and an \"Installed\" status badge.<\/p><\/dd>\n
Can I add packages beyond the default PHP extension list?<\/h3><\/dt>\nYes. Edit the $php_packages<\/code> array in includes\/ajax-handlers.php<\/code> to add any system package available in your distribution's repositories.<\/p><\/dd>\n\n<\/dl>\n\n\n2.2.0 \u2014 May 28, 2026 \u2014 15:30 UTC+2<\/h3>\n\n\n- Plugin display name changed to \"WP DevOps Dashboard\". The WP.org slug (
package-installator<\/code>) is permanent and unchanged \u2014 only the visible name in the admin menu and plugin list is updated.<\/li>\n- SSH Settings page no longer blocks on load. The page previously made a live SSH connection before sending any HTML to the browser, causing a 5\u20137 second delay. The connection test is now async: the page renders instantly and tests the connection in the background after load.<\/li>\n
- New: animated \"Test Connection\" button on the SSH Settings page with live status badge (green glow on success, red on failure). No page reload required.<\/li>\n
- SSH Settings page redesigned: card-based layout with separate sections for SSH Credentials and Automation Catalog, consistent with the main dashboard aesthetic.<\/li>\n
- Performance: the package status query (20 SSH checks) is now lazy-loaded. It only runs when the user opens the package accordion, not on every background poll. The 35-second polling cycle now only fetches server stats, Docker containers, and Ansible catalog.<\/li>\n
- Performance:
wpkginst_get_automation_readiness()<\/code> (Ansible, Docker Compose, Git detection) result is now cached in a WordPress transient for 2 minutes. Subsequent dashboard loads within that window are instant. The cache is invalidated automatically when a tool is installed via the FIX button.<\/li>\n- The script and style enqueue function is now split: the settings page only loads CSS; the React app and all SSH readiness calls are restricted to the main dashboard page.<\/li>\n
- Full English UI: all user-visible French strings in the React interface replaced with English (status labels, button text, placeholders, empty states, console messages).<\/li>\n
- Dashboard polling reduced from 5 sequential SSH connections to 1. Stats, Docker container list, and Ansible catalog are now fetched in a single SSH exec via a sectioned mega-command. The automation catalog no longer performs a
git fetch<\/code> on every poll \u2014 git sync only happens when the user explicitly clicks \"Sync Ansible Catalog\".<\/li>\n- Removed the redundant
whoami<\/code> SSH call on each REST poll; SSH connection status is now derived from the stats command result.<\/li>\n- SSH status indicator shows a distinct yellow pulsing state with an explicit \"Establishing SSH connection\u2026\" message during the initial load.<\/li>\n<\/ul>\n\n
2.1.2 \u2014 April 2026<\/h3>\n\n\n- Arch Linux and SUSE are now supported, bringing distribution coverage to approximately 99% of common Linux server environments.<\/li>\n
- Package installation now uses
nohup<\/code> for background execution, consistent with the rest of the plugin.<\/li>\n<\/ul>\n\n2.1.0 \u2014 April 2026<\/h3>\n\n\n- SSH \"One-Shot\" Engine: system metrics (CPU, RAM, disk, distro detection) are now collected in a single SSH session instead of multiple separate connections \u2014 significant performance improvement and reduced load on the remote server.<\/li>\n
- REST API migration: replaced fragmented AJAX polling with a single centralized REST route (
\/wp-json\/wpkginst\/v1\/full-status<\/code>), reducing HTTP requests by approximately 80%.<\/li>\n- Double-nonce architecture: hybrid token system to isolate data read flows (REST) from privileged system actions (AJAX).<\/li>\n
- Strengthened
permission_callback<\/code> enforcement on all REST and AJAX endpoints.<\/li>\n- React lifecycle refactor: simultaneous update of all UI components (Docker, Packages, Stats) for a latency-free experience, with removal of redundant
useEffect<\/code> calls.<\/li>\n- Improved error feedback on API connection loss or SSH authentication failure.<\/li>\n<\/ul>\n\n
2.0.0 \u2014 April 2026<\/h3>\n\n\n- Major milestone: transition from a simple package manager to a full DevOps orchestrator.<\/li>\n
- New: Ansible core \u2014 run playbooks directly from the WordPress dashboard.<\/li>\n
- New: Forkable automation catalog \u2014 point the plugin at any GitHub repository following the
manifest.json<\/code> spec.<\/li>\n- New: Background processing \u2014 long-running tasks execute via
nohup<\/code> over SSH.<\/li>\n- New: Real-time streaming \u2014 live log output for Ansible playbooks and package installations.<\/li>\n
- Security hardening: stricter nonce validation and path sanitization throughout.<\/li>\n
- Full rewrite of AJAX polling logic to handle high-concurrency background tasks.<\/li>\n<\/ul>\n\n
1.4.0<\/h3>\n\n\n- New: Cockpit dashboard with real-time system resource monitoring (CPU, RAM, disk).<\/li>\n<\/ul>\n\n
1.3.0 \u2014 April 2026<\/h3>\n\n\n- Security audit and refactoring co-authored with Gemini (Google AI).<\/li>\n
- Hardened SQL queries and input sanitization.<\/li>\n
- Docker integration: list, start, stop, and restart containers via SSH.<\/li>\n<\/ul>\n\n
1.2.1 \u2014 March 2026<\/h3>\n\n\n- PHP session is now opened only on the Terminal and Log pages via a conditional check in the
admin_init<\/code> hook.<\/li>\nsession_write_close()<\/code> called systematically after every session usage.<\/li>\n- Terminal authentication persists correctly across page refreshes without blocking REST API or loopback requests.<\/li>\n
- Fixed \"Access denied \u2014 Session expired\" error when running commands after a page refresh.<\/li>\n
- Removed global session lock that caused Site Health failures (active PHP session + REST API timeout).<\/li>\n<\/ul>\n\n
1.2.0 \u2014 March 2026<\/h3>\n\n\n- Complete overhaul of PHP session management to resolve Site Health warnings (REST API timeout and active session detection).<\/li>\n<\/ul>\n\n
1.1.0 \u2014 December 2025<\/h3>\n\n\n- Full internationalization (i18n) support with French and English translations.<\/li>\n
- Command history logging with dedicated database table.<\/li>\n
- Non-interactive root command executor (SSH Terminal page).<\/li>\n
- Improved session handling and security hardening.<\/li>\n
- WordPress 6.9 compatibility.<\/li>\n<\/ul>\n\n
1.0.0<\/h3>\n\n\n- Initial release: React UI, SSH-based package management, support for Debian-based systems.<\/li>\n
- Animated progress bars, expandable command output, and SSH status indicator.<\/li>\n<\/ul>","raw_excerpt":"A WordPress DevOps dashboard: manage system packages, run Ansible playbooks, control Docker containers, and monitor your server \u2014 all via SSH.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/oci.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/248644","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oci.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/oci.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/oci.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=248644"}],"author":[{"embeddable":true,"href":"https:\/\/oci.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/tlloancy"}],"wp:attachment":[{"href":"https:\/\/oci.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=248644"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/oci.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=248644"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/oci.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=248644"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/oci.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=248644"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/oci.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=248644"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/oci.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=248644"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}