Maintenance without thinking about it
A backup every night, a certificate check every week, a report on Monday morning: you set it once.
Scheduled tasks
Have ToutWAF's maintenance actions run at fixed times: configuration backup, journal export, certificate check, list update, Doctor and e-mail report. The actions are built in and safe, never a free-form program.
Where to find it in the console : Administration menu: Scheduled tasks (a task is created, run by hand, switched on, switched off and archived).
What it is for
Safe actions only
Each action is a ToutWAF function that reuses what the console already does. Nothing runs a program, and none takes a file name from the task.
Nothing is lost silently
A run missed because ToutWAF was stopped is made up once, or recorded as « missed ». A run that takes too long is cut and recorded.
Warned on failure
A task that fails twice in a row opens an alert, which goes to the channels of your alert rules.
A task, from schedule to result
Tasks belong to an organisation and are never visible to another.
Choose an action
One of the six built-in actions, with its parameters (period to export, number of days, recipients). Each action has a minimum gap between two runs.
Set the schedule
A simple repetition (every N minutes or hours, daily, weekly or monthly), a cron expression, or a single date, in the time zone of your choice. The next runs are displayed before saving.
Follow the run
One run at a time per task: the next is recorded as « skipped ». Each run has a time limit and leaves a line of history.
Six built-in actions
Each reuses the code the console already calls for the same function.
Configuration backup
Makes the encrypted configuration backup, as « Back up now » does, and applies its retention.
Journal export and rotation
Writes the audit journal of the last hours (NDJSON or CSV) to a private file, then removes the exports older than the chosen duration. The journal itself is not touched.
Certificate check
Lists the certificates that expire soon. An expired certificate fails the run. Nothing is renewed here: renewal has its own schedule.
List update
Refreshes the external address lists and the inbound feeds that are due.
ToutWAF Doctor
Runs the diagnostic from the machine to the origin of every site. The run fails when the diagnostic finds a failure.
E-mail report
Sends a summary: failed tasks, certificates to watch, last backup. Skipped, not failed, when no mail server is configured.
Schedules, time zones and catch-up
免费
A cron expression has five fields: minute, hour, day of month, month, day of week.
- The shortcuts @hourly, @daily, @weekly and @monthly are accepted. The time zone is an IANA name; without one, it is UTC.
- At a clock change, a fixed time that the clock skips runs once; a time that happens twice runs only once. A day of the month that does not exist in a short month does not run.
- Optional catch-up: if ToutWAF was stopped at the scheduled time, the due run is made up once, provided it is not older than the chosen window (6 hours by default). Otherwise a « missed » line says so.
Example of an expression: 02:30 on weekdays
cron
30 2 * * 1-5Guardrails
免费
A task must never become a risk.
- No free-form program: an action is a function registered by ToutWAF, and its parameters are checked when saved and when run.
- At most 50 tasks per organisation; the history keeps the last runs of each task, with a truncated output where secrets are masked.
- Archiving a task stops it and keeps its history: a task is never purged. A run whose process is gone is closed as failed, « orphaned ».
Actions on a linked web server
免费
A seventh action, off by default, reserved to platform administrators.
- It goes through the actions ToutWAF already drives on a linked ToutPanel server: restart, reload or start a service, reload the web server, regenerate a site, empty its cache, run a backup plan or a panel task.
- Stopping a service is not offered. The « Allow host actions » switch is set separately, and switching it off deletes nothing.
- The task acts with the rights of that server's panel API token.
What is not done, or not proven
We prefer to say it plainly.
- Tasks run on the control plane: if ToutWAF is stopped, nothing runs (catch-up or « missed » afterwards). There is only one active control plane.
- Scheduling is verified by automated tests, including clock changes; we publish no measurement of prolonged production use.
- It is not a general scheduler: no free-form command, no script. For a system task, keep cron or systemd on the machine.
- The e-mail report depends on a configured mail server, and the web-server action on a linked and reachable ToutPanel; tests ran against test servers, not against a real ToutPanel.
Use cases
A backup every night
The configuration is backed up at 02:30 with catch-up, and an alert warns you if it fails twice in a row.
A weekly certificate check
Every Monday, the certificates expiring within thirty days are listed in the task's history.
An archived audit journal
Every night, the last 24 hours of the journal are exported to a private file, and exports that are too old are removed.
What is included, by edition
The basics are free; the advanced options need a paid offer. An option under licence stays visible in the console, locked, never hidden.
版本免费 包含在所有方案中，包括两个免费方案（Free 和 Free +）Pro 及以上 付费方案：在控制台中可见，无许可证时被锁定。从 Pro 起，另有标注 Agency 或 Enterprise 的除外
- Six built-in actions: configuration backup, journal export and rotation, certificate check, list update, Doctor, e-mail report免费
- Five-field schedules or simple repetitions, time zone, single run, preview of the next runs and catch-up of a missed run免费
- One run at a time per task, time limit, bounded history with truncated output and masked secrets, alert after two failures in a row免费
- Actions on a linked ToutPanel web server (service, cache, backup): reserved to platform administrators and off by default免费
随时都可以把高级选项恢复为默认值。付费许可证结束后会发生什么，见定价页的常见问题：48 小时宽限期、48 小时只读，之后 WAF 防护关闭，直到续订。