# 4.5 Elevado
Chevereto v4.5, codenamed Elevado (opens new window), adds expanded email provider support, new multi-tenant routing and CLI commands, trial mode for SaaS deployments, and bumps the minimum PHP version to 8.2.
# Releases
# Email providers changes
This release adds support for the following email providers:
- AhaSend
- Amazon SES
- Azure
- Brevo
- Infobip
- MailerSend
- Mailgun
- Mailjet
- Mailomat
- MailPace
- Mailtrap
- Mandrill
- Microsoft Graph
- Postal
- Postmark
- Resend
- Scaleway
- SendGrid
- Sweego
# Routing changes
The following routes have been added:
/_/api/4/config/traefik
Provides dynamic configuration for Traefik's HTTP provider (opens new window), enabling tenant-aware routing without custom glue code. Designed for orchestrated and edge proxy environments where Traefik needs to stay in sync with the current tenant configuration. This endpoint is internal and only accessible from localhost.
/_/api/4/auth/verify
Verifies authentication tokens across tenants. Enables programmatic validation of user authentication status for multi-tenant implementations.
/_/api/4/tenants/{id}/user-password-reset
Resets any user's password by username, with an optional custom password. Prevents users from being locked out of their own websites when email setup is incomplete or misconfigured.
# CLI changes
The following CLI commands have been added:
version-installed
Provides instant visibility into which Chevereto version is currently installed on your system. Useful for system administrators managing multiple instances or tenants, making version audits and upgrade planning significantly easier. Unlike the version command which outputs the application filesystem version, version-installed reflects the actual installed database version.
The following CLI commands have been improved:
password-reset -u <username> -x <password>
Added optional -x parameter to set a custom password when running the command. When omitted, a random password is generated as before. Useful for scripted provisioning and automated deployments where a known password is required.
# System requirements changes
The minimum required PHP version has been bumped to PHP 8.2.
# Environment changes
The following environment variables have been added:
CHEVERETO_SERVICE_NAME
Identifies the Chevereto service by name in container and orchestration environments (Docker, Kubernetes, etc.). Used to distinguish between multiple Chevereto instances running within the same cluster or compose project.
CHEVERETO_SERVICE_PORT
Use this to customize the service port if, for any reason, you want to run on a port other than 8080. It is currently used only for generating Traefik configuration.
CHEVERETO_ENABLE_GUESTS
Global switch for all guest functionality. When set to 0, guest access is completely disabled across all features.
CHEVERETO_TRIAL
Enables trial mode for multi-tenant SaaS deployments. When set, the service operates under trial constraints, allowing providers to offer Chevereto with limited service caps before users commit to a full plan.
CHEVERETO_TRIAL_ENABLE_*
Wildcard keys for controlling which features are available during trial. These mirror all CHEVERETO_ENABLE_* keys, letting SaaS providers craft compelling trial experiences by selectively enabling features that showcase the platform's value and drive conversion to paid plans.
CHEVERETO_TRIAL_MAX_*
Wildcard keys for controlling max limits during trial. These mirror all CHEVERETO_MAX_* keys, letting SaaS providers set soft caps that prevent abuse without affecting paid plan limits. For example, you can offer a plan supporting 10,000 files while ensuring trial users never approach that ceiling.
CHEVERETO_INTERNAL_HOSTNAME
Use this to configure the internal hostname, which is used to exclude the tenants-internal API. It is also used to determine whether the host is localhost and is considered when determining the root hostname. This applies to tenant context.
CHEVERETO_PROXY_ENTRYPOINT
Use this to pass web or websecure, depending on your Traefik setup.
CHEVERETO_PROXY_IP_ALLOW_LIST
Use this to pass a list of allowed IP addresses and ranges (CIDR notation) when configuring your Traefik ingress.
CHEVERETO_ROUTER_SECRET
Use this to set a router secret used to secure communication between Chevereto and the ingress proxy.
CHEVERETO_HEADER_FORWARDED_HOST
Use this to customize the HTTP_X_FORWARDED_HOST header used for the forwarded host in proxy setups.
CHEVERETO_HEADER_ROUTER_SECRET
Use this to customize the HTTP_X_ROUTER_SECRET header used for the router secret in communication between Chevereto and the ingress proxy.
The following environment variables have been renamed:
| Old name | New name |
|---|---|
| CHEVERETO_JOBS_WORKER_INTERVAL | CHEVERETO_SCHEDULER_INTERVAL |
| CHEVERETO_TENANTS_API_ALLOW_LIST | CHEVERETO_TENANTS_API_IP_ALLOW_LIST |