Function wiki

Every function the panel has, in one place. Each page says what it is, who can use it, what plan it needs and where it stops. Anything not built yet is marked Coming soon.

AI built in

Your AI runs the panel. A migration, in one sentence.

An assistant inside the panel that uses your own keys (Gemini, OpenAI, Anthropic or a local Ollama: free, and no data leaves your server), plus an MCP server so the AI in VS Code can migrate servers, diagnose errors and administer the panel. It does everything the token allows, with no confirmation prompt.

See the function Connect VS Code Migration service: $20

Filter functions

Websites and PHP

Websites

Create sites with their own document root, PHP and certificate. The first site lives in public_html, like CWP and DirectAdmin.

Aliases and parked domains

Serve extra names from the same site: aliases and parked domains share the site's content and its wildcard certificate.

SSL/TLS certificates

Let's Encrypt certificates issued and renewed automatically, wildcards through DNS-01, your own certificate, and a CSR generator.

PHP versions

One active PHP version on the Free tier, several side by side per site with a License, and a defined fallback when a version is removed.

PHP extensions

A closed catalog of PHP extensions per client; six risky ones can only be enabled by an admin, client by client.

Web server stacks

Choose Apache, nginx or OpenLiteSpeed as the public edge of a node; the panel switches and rolls back if the new edge fails.

One-click applications

Install WordPress, Drupal, Joomla, Nextcloud, Moodle, PrestaShop and more from a closed, version-pinned catalog.

Git deployment

Deploy a site from a Git repository over HTTPS, with a token for private repositories.

Staging sites

Create staging.<domain> as a real site marked noindex, test there and publish the files to production.

Containers and app presets

Run apps as rootless Podman containers with their own subdomain and certificate; ASP.NET Core, Node.js, Python, Ruby and Java presets.

Site options

Redirects, error pages, HTTPS and HSTS, hotlink protection, IP blocking and password-protected directories from fixed options.

DNS and email

DNS

Authoritative BIND with dynamic zones, validated records, DNSSEC, zone templates and PTR guidance.

Email

Postfix, Dovecot and Rspamd with mailboxes, aliases, catch-all, autoconfiguration, delivery tracking and per-client sending limits.

Mail filters and auto-responder

Filters, auto-responder and block/allow lists chosen from fixed options; the panel writes the Sieve script.

Webmail

Roundcube at webmail.<domain>; mailbox owners sign in with their own address and password.

DKIM, SPF and DMARC

SPF, DKIM and DMARC (p=none) are published automatically for mail domains; DKIM keys rotate in three steps.

Databases, backups and storage

Databases

MariaDB and PostgreSQL databases and users per client, with phpMyAdmin and phpPgAdmin one click away.

Remote database access

The admin sets the node policy: closed, open to all, or only to IP addresses each client registers.

Backups

Encrypted, deduplicated backups of every account with restic; clients can add their own destination.

Restore

Restore files, folders or a whole database from a snapshot, next to the original by default or over it.

External storage

Mount a remote SFTP, S3 or FTPS storage at ~/storage; it appears over FTP and in the file manager.

Access and accounts

FTP, FTPS and SFTP

Virtual FTP accounts over explicit TLS, plus SFTP for every active account.

SSH keys

Manage the public keys of your account; the shell setting decides what a key can do.

File manager

Browse, upload up to 1 GiB, download, rename, change permissions, compress and extract inside your home.

Browser terminal

A console in the browser inside the same isolated jail as SSH, for accounts with shell access.

Cron jobs

Scheduled commands that run as your user, in the same jail as SSH and inside your CPU and memory limits.

Sub-users

Extra sign-ins for an account, each with ticked permission areas.

Accounts: suspend, deactivate, impersonate

Suspend or deactivate accounts in bulk, set console access and impersonate a client to troubleshoot.

Monitoring and security

Web statistics

Visitors, pages, referrers and traffic per site from your own logs, with monthly transfer against the plan.

Site logs

View the tail of the access, error, PHP and slow-query logs of each site, or download them.

Firewall

nftables managed from the panel: ports, allowed and blocked addresses, CSF import and brute-force bans.

Services

See the real state of every service the panel manages and start, stop or restart it.

Web application firewall

ModSecurity with the OWASP core ruleset, with per-site rule exclusions.

Malware scan

Detects and reports known webshell and malware signatures in an account's files; it never deletes anything.

Audit log

Who did what, when, from where and on what, with optional export to your syslog or SIEM over verified TLS.

Advisor

Recommendations that always come with a concrete action: expiring certificates, stopped services, missing backups and more.

Metrics, Prometheus and Grafana

A Prometheus-format endpoint on every node, and a Prometheus plus Grafana stack with a License.

Servers and scale

Clustering

Join nodes into one cluster managed from any node, with Raft replication, quorum and failover.

Migration

Move from CWP, cPanel, Plesk, DirectAdmin, HestiaCP, CyberPanel or aaPanel with an inventory, an import and a verification before the DNS cut.

Updates and rollback

Signed updates in three channels, never applied without you asking, with automatic rollback.

Support tickets Coming soon

Open a ticket from inside your panel and have it answered by TNS; part of Premium Support.