Gately v0.5.8.1 released

October 26, 2026

This is a feature update in the v0.5.8 series, based on the suggestions in issue #18, #19, #20 and #22.

Download v0.5.8.1 · GitHub Release

Shared users for the file services

WebDAV, FTP and SMB can share one list of "shared users", so passwords and directories are maintained once. Each of the three service pages has a "Shared users" card, and a change on any page applies to all of them; each service decides with its own switch whether shared users may sign in. Local users keep working and win over a shared user with the same name. A service can also be enabled with shared users only. After a change WebDAV checks the new settings on the next request, FTP disconnects signed-in sessions and SMB reloads when its accounts change. See File services.

Close connection sites and access logs

The new "Close connection" site type sends nothing and drops the request, like nginx return 444. It is meant for the default site, so requests scanning unknown domains get no response; the access log records them as 444. Importing an nginx config turns return 444 into this type.

Web Service access log lines now end with the Referer and User-Agent in nginx combined style, so devices behind the same public IP can be told apart. See Web Service.

frps listen addresses

frps can listen on a chosen address for the frpc connection port and another for the proxy ports (HTTP, HTTPS and the remote ports of tcp/udp proxies); empty means all addresses. For example, frps can listen on 127.0.0.1 only and receive frpc through a Gately site over websocket or wss. See Tunnels.

Copy buttons and two-step verification

When the admin UI is opened over plain HTTP the browser offers no clipboard API; copy buttons now fall back to a compatible method automatically, and if that still fails the text is selected with a hint to copy it manually. Password managers such as Bitwarden can now recognise the two-step verification field and fill in the code.

Upgrade notes

• Changing shared users needs an API token with webdav:write, ftp:write and smb:write together; a service enabled with shared users only cannot have all shared users removed.
• "Close connection" sites skip authentication, access control and the WAF, and their other settings have no effect.
• Overlong URIs, Referers and User-Agents are truncated in the access log.