Function wiki

Every function the panel has, in one place. Each page says what it is, who can use it, what plan it needs and where it stops. Anything not built yet is marked Coming soon. See also the full feature list.

AI built in

Your AI runs the panel. A migration, in one sentence.

An assistant inside the panel that uses your own keys (Gemini, OpenAI, Anthropic or a local Ollama: free, and no data leaves your server), plus an MCP server so the AI in VS Code can migrate servers, diagnose errors and administer the panel. It does everything the token allows, with no confirmation prompt.

See the function Connect VS Code Migration service: $20

Filter functions

Websites and PHP

Websites

Create sites with their own document root, PHP and certificate. The first site lives in public_html, like CWP and DirectAdmin.

Aliases and parked domains

Serve extra names from the same site: aliases and parked domains share the site's content and its wildcard certificate.

SSL/TLS certificates

Let's Encrypt certificates issued and renewed automatically, wildcards through DNS-01, your own certificate, and a CSR generator.

PHP versions

PHP 5.6 to 8.5 side by side per site with a License, admin-applied patch updates, one version on the Free tier and a defined fallback when one is removed.

PHP extensions

A closed catalog of PHP extensions per client; six risky ones can only be enabled by an admin, client by client.

Web server stacks

nginx is always the public edge of a node; choose one of four chains behind it, and the panel switches and rolls back if the change fails.

One-click applications

Install WordPress, Drupal, Joomla, Nextcloud, Moodle, PrestaShop and more from a closed, version-pinned catalog.

Git deployment

Deploy a site from a Git repository over HTTPS, with a token for private repositories.

Staging sites

Create staging.<domain> as a real site marked noindex, test there and publish the files to production.

Containers and app presets

Run apps as rootless Podman containers with their own subdomain and certificate; ASP.NET Core, Node.js, Python, Ruby and Java presets.

Site options

Redirects, error pages, HTTPS and HSTS, hotlink protection, IP blocking and password-protected directories from fixed options.

Dedicated IP per customer

Give a customer its own IPv4 or IPv6 address for all of its sites, taken from a pool the admin builds; DNS records follow the address automatically.

DNS and email

DNS

Authoritative BIND with dynamic zones, validated records, DNSSEC, zone templates and PTR guidance.

Email

Postfix, Dovecot and Rspamd with mailboxes, aliases, catch-all, autoconfiguration, delivery tracking and per-client sending limits.

Mail filters and auto-responder

Filters, auto-responder and block/allow lists chosen from fixed options; the panel writes the Sieve script.

Webmail

Roundcube at webmail.<domain>; mailbox owners sign in with their own address and password.

DKIM, SPF and DMARC

SPF, DKIM and DMARC (p=none) are published automatically for mail domains; DKIM keys rotate in three steps.

Mailing lists

Discussion lists on your own domains, run by Mailman in a container, with per-plan limits on lists, subscribers and monthly sends.

Databases, backups and storage

Databases

MariaDB and PostgreSQL databases and users per client, with phpMyAdmin and Adminer one click away.

Remote database access

The admin sets the node policy: closed, open to all, or only to IP addresses each client registers.

Backups

Encrypted, deduplicated backups of every account with restic; clients can add their own destination.

Restore

Restore files, folders or a whole database from a snapshot, next to the original by default or over it.

External storage

Mount a remote SFTP, S3 or FTPS storage at ~/storage; it appears over FTP and in the file manager.

Access and accounts

FTP, FTPS and SFTP

Virtual FTP accounts over explicit TLS, plus SFTP for every active account.

SSH keys

Manage the public keys of your account; the shell setting decides what a key can do.

File manager

Browse, upload up to 1 GiB, download, rename, change permissions, compress and extract inside your home.

Browser terminal

A console in the browser inside the same isolated jail as SSH, for accounts with shell access.

Cron jobs

Scheduled commands that run as your user, in the same jail as SSH and inside your CPU and memory limits.

Sub-users

Extra sign-ins for an account, each with ticked permission areas.

Accounts: suspend, deactivate, impersonate

Suspend or deactivate accounts in bulk, set console access and impersonate a client to troubleshoot.

Two-factor authentication

TOTP second factor with single-use recovery codes; mandatory for admins and resellers, optional for customers.

Monitoring and security

Security and isolation

How TNS Panel keeps customers apart: a UNIX user per client, own PHP-FPM, jailed shell and cron, and a root agent with a closed list of operations.

Web statistics

Visitors, pages, referrers and traffic per site from your own logs, with monthly transfer against the plan.

Site logs

View the tail of the access, error, PHP and slow-query logs of each site, or download them.

Firewall

nftables managed from the panel: ports, allowed and blocked addresses, CSF import and brute-force bans.

Services

See the real state of every service the panel manages and start, stop or restart it.

Web application firewall

ModSecurity with the OWASP core ruleset, with per-site rule exclusions.

Malware scan

Detects and reports known webshell and malware signatures in an account's files; it never deletes anything.

Audit log

Who did what, when, from where and on what, with optional export to your syslog or SIEM over verified TLS.

Advisor

Recommendations that always come with a concrete action: expiring certificates, stopped services, missing backups and more.

Metrics, Prometheus and Grafana

A Prometheus-format endpoint on every node, and a Prometheus plus Grafana stack with a License.

Servers and scale

Clustering Coming soon

Join nodes into one cluster managed from any node, with Raft replication, quorum and failover.

Migration

Move from CWP, cPanel, Plesk, DirectAdmin, HestiaCP, CyberPanel or aaPanel with an inventory, an import and a verification before the DNS cut.

Updates and rollback

Signed updates in three channels, never applied without you asking, with automatic rollback.

Debian and Ubuntu Coming soon

A separate installation of TNS Panel for Debian 13 and Ubuntu 24.04 LTS, coming after the AlmaLinux and Rocky Linux release.

Windows Server Coming soon

A Windows Server edition of TNS Panel with its own isolation model, in development and not part of the first Linux release.