From 8a01e013bc567c7730c6a90d5cacac3949ab39da Mon Sep 17 00:00:00 2001
From: master3395 <master3395@users.noreply.github.com>
Date: Mon, 13 Apr 2026 00:55:28 +0200
Subject: [PATCH] docs: note v2.5.5-dev upstream sync and cyberpanel-plugins
 security ref

---
 to-do/PLUGIN-SECURITY-AND-SYNC.md | 27 +++++++++++++++++++++++++++
 1 file changed, 27 insertions(+)
 create mode 100644 to-do/PLUGIN-SECURITY-AND-SYNC.md

diff --git a/to-do/PLUGIN-SECURITY-AND-SYNC.md b/to-do/PLUGIN-SECURITY-AND-SYNC.md
new file mode 100644
index 000000000..5c79628e3
--- /dev/null
+++ b/to-do/PLUGIN-SECURITY-AND-SYNC.md
@@ -0,0 +1,27 @@
+# Plugin security and branch sync (master3395 fork)
+
+**Oppdatert:** 12.04.2026
+
+## `v2.5.5-dev` vs upstream
+
+- Lokal `v2.5.5-dev` er **synket med** `usmannasir/cyberpanel` branch `v2.5.5-dev` gjennom merge-base **778de5af** (Merge pull request #1761 from master3395/v2.5.5-dev).
+- Siste commit på denne forgreningen: **c7995ecf** — «Fix missing /usr/local/CyberCP/bin/python for cron og IncBackups».
+
+Kjør jevnlig for å holde deg à jour med upstream:
+
+```bash
+cd /home/cyberpanel-repo
+git fetch origin
+git fetch usmannasir
+git merge usmannasir/v2.5.5-dev
+git push origin v2.5.5-dev
+```
+
+## Community-plugins (sikkerhet)
+
+Sikkerhetsforbedringer for installerte CyberPanel-plugins (Fail2ban, Discord Auth/Webhooks, Redis Manager, Memcache Manager, Google Tag Manager) vedlikeholdes i **cyberpanel-plugins**, ikke i denne kjernerepoen.
+
+- Repo: https://github.com/master3395/cyberpanel-plugins
+- Referansecommit (security hardening på `main`): **6be9796e** (12.04.2026).
+
+Installer eller oppdater plugins via CyberPanel Plugin Manager eller ved å hente siste `main` fra det repoet.