Topic
Mods
Public pages, upload sources, social login, security, API, previews, branding.
Guides
Articles
Step-by-step write-ups for this topic.
- Apple loginEnable Sign in with Apple: Services ID, Team ID, Key ID, and .p8 private key.View article
- VK loginEnable VK ID login with Application ID and Secure key. Uses id.vk.ru OAuth with PKCE.View article
- Social button displayPer-provider icon and name on buttons, plus whether social buttons sit above or below the password form.View article
- OAuth redirect URIRead-only callback URL per provider. Copy it exactly into each developer console.View article
- Two-factor authentication modeDisabled, Optional, or Mandatory TOTP (Google Authenticator). No SMS. Default Optional.View article
- Restrict session to single IPOn a new sign-in from a different IP, other active sessions for that member are revoked. Default off.View article
- Delete old sessions afterSessions with no activity longer than this many hours are removed. Default 72. Max 8760.View article
- Editable session listMembers always see sessions; this controls whether they can revoke other devices. Default on.View article
- Notify on loginEmail after each successful sign-in with IP, country, and user-agent. Default off.View article
- Confirm login from new countryHold sign-in from a new GeoIP country until the member confirms by email. Default off. First country is auto-trusted.View article
- Backup modMaster switch for scheduled site backups over SSH. Manual Run now can still work when off. Default off.View article
- Backup database vs website filesDatabase = pg_dump SQL (default on). Website = app tree via rsync (default off). Uploads are not included.View article
- Backup schedule periodOff, Hourly, Daily, or Monthly. pg-boss runs when Backup mod is on and SSH is saved. Default Off.View article
- Backup SSH destinationRemote SSH host, port, username, and absolute remote path for backup runs.View article
- Backup SSH authPrefer a full private key for scheduled backups. Password auth needs sshpass on the app server.View article
- Backup retentionCount keeps N timestamped sets (default 5). Overwrite replaces each current/ folder every run.View article
- How to Set Up Social Login with Google for XFile UltraCreate a Google Cloud OAuth web client, register the Redirect URI, paste Client ID and secret into Mods → Social → Google, and test sign-in.View article
- Member APIMaster switch for member /api/v1 routes and Manage Account → API. Default on. Auth is Bearer API key.View article
- How to Set Up Social Login with Facebook for XFile UltraCreate a Meta app with Facebook Login, add the Valid OAuth Redirect URI, paste App ID and App secret into Mods → Social → Facebook, and go Live.View article
- Member API rate limitsPer member account + IP per hour. Defaults: upload 30, remote URL 20, copy 20, read 300, write 120.View article