Poweradmin in 2025: Year in Review
13 releases and a new LTS branch
2025 is behind us, so let’s take a moment to look at what happened with Poweradmin and what’s coming next.
A Busy Year
This was one of the most productive years for the project. We shipped 13 releases, including the major v4.0.0 in July. That’s roughly 1,320 commits, 114 merged pull requests, and around 349 issues addressed. Thanks to the 30 contributors who made this possible.
What’s New in 4.0
The 4.0 release was a big one. Here’s what changed:
Authentication & Security — You can now log in via SAML or OIDC (Google, Azure AD). There’s multi-factor authentication with recovery codes, password reset via email, and a forgot username option. We also added reCAPTCHA support, login attempt tracking with account lockout, IP whitelist/blacklist, and password policies.
API — The API now has OpenAPI/Swagger docs. Non-admin users can manage their own API keys, which is handy if you’re using the Terraform/OpenTofu provider.
DNS — Record validators are stricter and follow RFCs properly. DNSSEC got CSK support. Batch PTR works with IPv6 now. You can import and export records via CSV. Zone templates support DOMAIN and TLD placeholders.
UI — The interface got a full refresh with better dark mode and mobile support. WHOIS lookup is built in. There’s a database consistency checker for when things go wrong.
Deployment — Docker now runs on FrankenPHP. You can use a separate PowerDNS database if needed.
Long-Term Support for 3.x
Not everyone wants to upgrade right away. With version 3.9.8, the 3.x branch enters long-term support. It will get bug fixes and security updates for at least two years. More patch releases may come if needed.
Coming Soon: 4.0.5
A patch release is on the way with bug fixes — PostgreSQL improvements, zone template fixes, and security hardening.
Coming in 4.1
The master branch has new stuff that needs testing before release:
Wizards for complex DNS record types
Reverse proxy support
Immutable container deployments
More OIDC providers (Authentik, Keycloak, Okta)
API v2 with RRSet management and bulk operations
Permission templates for common user roles
Testing everything takes time, but it has to be done.
Further Ahead: 4.2
Work on 4.2 is already happening in the develop branch — user groups, MFA enforcement, per-record comments, SSO group mapping, and better user management with pagination.
Get Involved
Testing — If you can, try the latest master branch. Feedback and bug reports on GitHub are welcome.
Donations — Running this project has costs. If Poweradmin is useful to you, consider supporting it:
Thanks to everyone who has contributed over the years.