Infinito.Nexus 16.0 connects your servers to each other over a private, encrypted network. The new WireGuard integration (beta) sets up secure links between all servers of a deployment, checks that they work before anything relies on them and keeps every key in your own hands. Whether you run a Docker Swarm cluster or several independent servers, the traffic between them now stays private.
The release also brings Moodle 5.3, new major versions of Mattermost, OnlyOffice, n8n and Gitea, updates to 43 applications and 33 fixes.
Private by Default
Your servers talk to each other through encrypted connections, so internal traffic never crosses an open network.
Keys Without the Busywork
Keys and connections for every server are created in one step and stored safely with your configuration.
Checked Before Use
Every deployment confirms that each connection works before your applications depend on it.
A Private Network Between Your Servers
When a deployment spans several servers, they constantly exchange data: cluster coordination, shared storage and backups. With 16.0, Infinito.Nexus can send all of this through private WireGuard connections, encrypted from one server to the next.
It adapts to the way you run your servers:
- Clusters: in a Docker Swarm cluster, the manager acts as the central hub that connects every server.
- Independent servers: servers without a cluster connect directly to each other, with no hub in between.
- Separate networks: cluster traffic and storage traffic can each run on a private network of their own.
- Your admin machine: the computer you deploy from can join the private network too.
Shared storage follows automatically: cluster servers now reach their shared files through the private network.
Secure Keys, Created for You
Every server needs its own keys and has to know its neighbors. Infinito.Nexus creates all of it in a single step and stores it with your configuration. Each private key is encrypted and kept for exactly one server.
Running that step again changes nothing. When it is time for new keys, one run replaces the keys of the whole network at once, so no server is left behind with an old one.
Checked Before Anything Depends on It
A connection that exists is not yet a connection that works. Every deployment tests the private network first and stops if something is wrong:
- Every server answers: each connection must complete a secure handshake with its partners.
- Large data gets through: a full-size packet must cross every connection without being split.
- Tested end to end: automated tests confirm that connected servers reach each other and move data intact, while servers outside a network are refused.
Also New in 16.0
Moodle moves to 5.3 and upgrades existing sites during the deployment. In Nextcloud, BPM Files, News and Recognize become optional add-ons, so you install only what you actually use.
PHP applications, PostgreSQL and Snipe-IT now size their memory to fit the container they run in, and every pinned version records where its updates come from, so each update stays traceable.
Before You Upgrade
Version 16.0.1 is the first published 16.0 release. Check this list before you deploy:
| If you… | Then… |
|---|---|
| Run Moodle | Existing sites are upgraded to 5.3 automatically. Plugins installed through Moodle’s web interface are not carried over and need to be installed again. |
| Run Zammad | Zammad rebuilds its search index once, on the first deployment after the upgrade. |
| Run n8n | n8n moves to version 2. Single sign-on and the built-in integrations are updated for it. |
| Run Nextcloud | Nextcloud stays on version 34 until its OpenProject integration supports version 35. |
| Want the private network | WireGuard is in beta. Make sure your servers can reach each other on the WireGuard port before you switch it on. |
More Reliable
- Sign-in settings stay intact: Keycloak changes that run at the same time no longer block each other.
- SuiteCRM scales out: several SuiteCRM instances now share their user sessions.
- Mail keeps trying: a mail connection that drops right at the start is retried.
- Monitoring sees every app: health checks now test each application on its own address.
Updated Applications
Your Servers, Privately Connected
Infrastructure is only as private as the network between its servers. With 16.0, Infinito.Nexus treats it that way: encrypted links between your hosts, set up and proven on every deployment.
