🚀 XUI 2.0 — Release Notes

Release Date: 06.04.2026
Version: v2.0.0
Type: Stable Release

🌍 Internationalization — 14 Languages

Full translation coverage (~90%) across the entire admin panel.

Supported languages:

⚙️ Setup Wizard (First Run)

A guided setup wizard is available after fresh installation and license activation.

Steps included:

1. Language selection (14 supported languages)
2. Theme selection (Light or Dark)
3. Timezone configuration
4. Server Name and Message of the Day (MOTD)
5. Admin account creation (username, password, email, minimum 8 characters)

The system detects first run automatically and redirects to the dashboard after setup is complete.

🔐 Persistent HWID (Hardware ID)

HWID generation has been redesigned with HMAC-SHA256.

Benefits:

• Persistent across OS reinstalls
• Deterministic output per server
• Secure against spoofing and reverse engineering

A license tied to a server can now be reused after OS reinstall without requiring a new key.

🎬 FFmpeg 7.1 & 8.0 — Custom Build

Both FFmpeg 7.1-IPTVTOOLS.IO and 8.0-IPTVTOOLS.IO have been recompiled from source with full codec support and hardware acceleration.

Video Encoders/Decoders:

• libx264 — H.264 encoding
• libx265 — H.265/HEVC encoding
• libvpx — VP8/VP9 encoding
• libxvid — MPEG-4 Part 2 encoding
• libtheora — Theora encoding

Audio Encoders:

• libmp3lame — MP3 encoding
• libfdk-aac — AAC encoding (high quality)
• libopus — Opus encoding
• libvorbis — Vorbis encoding

NVIDIA Hardware Acceleration:

• nvenc — H.264 / HEVC hardware encoding
• nvdec — hardware decoding
• cuvid — CUDA video decoding
• ffnvcodec — NVIDIA codec headers

VA-API (Intel / AMD):

• vaapi — hardware acceleration support

Subtitle & Overlay:

• libass — SSA/ASS subtitles
• libzvbi — Teletext / VBI decoding
• libfreetype, libfontconfig, libharfbuzz, libfribidi — full text rendering support

Streaming Protocols:

• libsrt — SRT protocol support
• openssl — SSL/TLS (HTTPS, RTMPS)

Build: Static linking, GPL + non-free enabled, compiled with GCC 13.

🔐 Database Credential Encryption

Database credentials are now encrypted at rest on both Main Server and LoadBalancer.

Main Server:

• Stored in config.enc
• config.ini can be removed after license activation

Tip: Delete config.ini after activation for better security.

LoadBalancer:

• Encrypted using HMAC-SHA256
• Unique encryption per server

Even if filesystem access is compromised, credentials cannot be decrypted without the original machine-id.

⚡ LLOD v3 — Improved Stream Management

The LLOD (Low Latency On Demand) engine has been improved for better performance and stability.

• Faster stream startup
• Improved MPEG-TS sync detection and recovery
• Better handling of source disconnections
• Automatic failover between sources
• Smoother stream switching

⚡ Direct Source & Direct Stream — Reimplemented

Both Direct Source and Direct Stream modes have been fully reimplemented for speed, stability, and compatibility.

• Near-instant startup — streams start almost immediately
• Improved stability across multiple source types
• Flussonic Token Auth compatible
• IP Lock support for client-based restriction
• Stream Info detection fixed (Kbps, resolution, codecs, FPS)

🔐 Flussonic Auth Token Integration

A secure authentication bridge between XUI 2.0 and Flussonic media server.

• Token-based authentication using HMAC-SHA256
• Includes expiry, stream name, user ID, IP, max connections, stream ID
• IP Lock enforcement
• Time-limited tokens to prevent reuse

API Endpoint:

http://<server-ip>/backend/flussonic_auth

Use this endpoint as auth_backend in Flussonic configuration.

🌐 Intelligent HTTP Routing & Error Pages

New routing and permission system with clean error responses.

• 403 Forbidden — unauthorized access
• 404 Not Found — invalid endpoints
• 200 OK — valid requests

Supports full HTTP range: 400, 401, 403, 404, 405, 408, 429, 500, 502, 503, 504.

🌙 Dark Mode — UI Redesign

Dark Mode has been redesigned for better readability and modern UI.

• Improved contrast and visual clarity
• Deep blue and dark navy color palette
• Cleaner and more professional look

Custom CSS:

• bootstrap.dark.css
• custom.dark.css

🔍 Scan Source — Fixed

Scan Source now reliably returns full Stream Info every time.

• Bitrate
• Resolution
• Codecs
• FPS

Improved internal handling eliminates undefined variable issues.

▶️ YouTube Live Streams — Fixed

YouTube Live ingestion has been fixed and now works reliably with live source URLs.

🔌 Public Client API — Updated

Player API (player_api.php) and Panel API updated.

• Improved response handling
• Legacy API toggle support
• Better formatting

🌍 GeoIP Database — Updated

MaxMind GeoIP2-ISP updated for improved accuracy in ISP detection and analytics.

⚙️ LoadBalancer — FFmpeg Dependencies

Automatic installation of required FFmpeg runtime dependencies:

apt-get install -y libva2 libva-drm2 libdrm2

Ensures ffmpeg and ffprobe work correctly on fresh LoadBalancer deployments.

📊 Summary of Changes