prepare for release

CHANGELOG.md

@@ -8,7 +8,9 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 
 ---
 
-### v3.9.5 - [Unreleased]
+### v3.9.6 - [Unreleased]
+
+### v3.9.5 - 2019-05-02
 
 #### Added
 
@@ -28,21 +30,22 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 - Support for Netdata on backend : https://server.hostname:22222/netdata/
 - New Stacks : composer and netdata
 - additional argument for letsencrypt : --hsts
-- Theme for adminer
+- Clean Theme for adminer
 - Credits for tools shipped with WordOps
 - Cache exception for Easy Digital Download
-- Additional cache exception for Woocommerce
+- Additional cache exceptions for Woocommerce
 - MySQL monitoring with Netdata
-- WordOps-dashboard on 22222
+- WordOps-dashboard on 22222, can be installed with `wo stack install`
-- Extplorer filemanager
+- Extplorer filemanager in WordOps backend
 - Enable OSCP Stapling with Let's Encrypt
-- Compress database backup with pigz before updating sites
+- Compress database backup with pigz (faster than gzip) before updating sites
 - Support for Ubuntu 19.04 (disco) - few php extensions missing
 - Support for Raspbian 9 (stretch) - tested on Raspberry Pi 3b+
 - backup letsencrypt certificate before upgrade
 - directives emergency_restart_threshold & emergency_restart_interval to restart php-fpm in case of failure
 - EasyEngine cronjob removal during install
 - Kernel tweaks via systctl.conf
+- open_basedir on php-fpm process to forbid access with php outside of /var/www & /run/nginx-cache
 
 #### Changed
 
@@ -56,6 +59,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 - backend SSL configuration now stored in /var/www/22222/conf/nginx/ssl.conf
 - Install Netdata with static pre-built binaries instead of having to compile it from source
 - Nginx updated to new stable release (1.16.0)
+- New packages (phpmyadmin, adminer, composer) are not download in /tmp anymore
 
 #### Fixed
 

README.md

@@ -14,7 +14,7 @@
 <a href="https://travis-ci.org/WordOps/WordOps" target="_blank"><img src="https://travis-ci.org/WordOps/WordOps.svg?branch=master" alt="build"></a>
 <img src="https://img.shields.io/github/license/wordops/wordops.svg" alt="MIT">
 <img src="https://img.shields.io/github/last-commit/wordops/wordops.svg" alt="Commits">
-<img alt="GitHub release" src="https://img.shields.io/github/release-pre/WordOps/WordOps.svg">
+<img alt="GitHub release" src="https://img.shields.io/github/release/WordOps/WordOps.svg">
 <br><a href="https://www.codacy.com/app/VirtuBox/WordOps?utm_source=github.com&amp;utm_medium=referral&amp;utm_content=WordOps/WordOps&amp;utm_campaign=Badge_Grade"><img src="https://api.codacy.com/project/badge/Grade/fe9100fd2c634de7882ecec17f00a11a"/></a>
 <a href="https://twitter.com/WordOps_" target="_blank"><img src="https://img.shields.io/badge/twitter-%40WordOps__-blue.svg?style=flat&logo=twitter" alt="Badge Twitter" /></a>
 <a href="https://community.wordops.net/slack" target="_blank"><img src="https://img.shields.io/badge/slack-WordOps-4A154B.svg?style=flat&logo=slack" alt="Badge Slack" /></a>
@@ -33,7 +33,6 @@
 <a href="https://wordops.net" target="_blank"> WordOps.net</a> •
 <a href="https://docs.wordops.net" target="_blank">Documentation</a> •
 <a href="https://community.wordops.net" target="_blank">Community forum</a>
-
 </p>
 
 ---

wo/cli/templates/fastcgi.mustache

@@ -1,4 +1,4 @@
-# FastCGI cache settings - WO v3.9.5
+# FastCGI cache settings
 fastcgi_cache_path /var/run/nginx-cache levels=1:2 keys_zone=WORDPRESS:50m inactive=60m max_size=256M;
 fastcgi_cache_key "$scheme$request_method$host$request_uri";
 fastcgi_cache_use_stale error timeout invalid_header updating http_500 http_503;