Everything you need to manage a full-stack server
Python (WSGI/ASGI), PHP, Node.js apps with Gunicorn/Uvicorn process manager, auto-restart, resource limits.
Nginx, Apache, PHP-FPM management. Reverse proxy, SSL/TLS, page caching - all configured automatically.
MariaDB, PostgreSQL, Redis, MongoDB, Memcached - install, manage users, create databases.
Full mail server: Postfix, Dovecot, Rspamd, OpenDKIM, Roundcube webmail - setup wizard included.
UFW firewall, Fail2Ban, ClamAV antivirus, Let's Encrypt SSL, audit logging, CSRF protection.
Real-time process monitor, log streaming, cron jobs, backup management, network stats.
35+ built-in addons: Docker, Supervisor, Git, UFW, Logrotate, and more - one-click install.
Full xterm.js terminal in browser. Run commands, manage files, all through the panel.
| Category | Frameworks |
|---|---|
| Python WSGI | Django, Flask, Pyramid, Bottle, Tornado |
| Python ASGI | FastAPI, Litestar, Sanic |
| PHP | Laravel, WordPress, Symfony, CodeIgniter, Slim |
| Node.js | Express, Next.js, Fastify, NestJS, Hono, SvelteKit, Astro |
| Static | HTML/CSS/JS sites (Nginx direct serve) |
Edit workers, timeout, worker class, max requests, graceful timeout, keep alive per app.
MemoryMax, CPUQuota, Nice, OOMScoreAdjust via systemd integration.
SIGHUP reload without restart + real-time WebSocket monitoring.
Finds rogue gunicorn/uvicorn processes with kill APIs.
| Feature | Description |
|---|---|
| CSRF Protection | HMAC-based tokens on all POST forms + AJAX headers |
| WebSocket Auth | Session validation before accepting connections |
| Rate Limiting | 5 login attempts per IP per 5 minutes |
| Session Hardening | httponly, max_age=24h, secure flag when SSL |
| Session Idle Lock | Per-user timeout, auto-locks inactive sessions |
| Shell Injection | shlex.quote() on all user input in bash commands |
| Password Hashing | PBKDF2-SHA256 (SQLite) + PAM shadow users |
| Audit Trail | Login logs with IP, timestamp, success/fail |
| Category | Addons |
|---|---|
| Web Server | Nginx, Apache, Caddy, Lighttpd |
| Database | MySQL/MariaDB, PostgreSQL, Redis, MongoDB, Memcached |
| Dovecot, Postfix, Exim, SpamAssassin, Roundcube | |
| Remote Access | OpenSSH, OpenVPN, FTP |
| Security | Fail2Ban, ClamAV, Certbot, AIDE, Lynis, UFW |
| Runtime | Python 3, PHP, Node.js, Golang, Ruby, Git, Docker, Supervisor |
| Monitoring | Cockpit, Glances, Grafana, Netdata, Prometheus, Htop, Logrotate |
Each addon supports: Install - Config - Update - Start/Stop/Restart - Uninstall