What it manages

Hosting accounts

Accounts are real Linux users. Creating one provisions its system user, home directory and the plan's disk quota on the host; suspending, reactivating and deleting reach the host too. Deleting an account removes what it left behind — its databases, its file-transfer logins and its site configuration.

Websites

Static, PHP and reverse-proxy sites, with domain aliases and a document root inside the account's home. The agent renders the virtual host, writes it beside the running configuration, makes the web server validate the result, and rolls the file back if validation or the reload refuses — so one bad render cannot take a server's other sites down.

PHP, several versions at once

One php-fpm pool per account per version, each running as that account's Linux user, with the worker budget taken from the plan. Customers may change a whitelisted subset of settings; a name outside the list is refused rather than quietly dropped, and the hardening lines above them cannot be countermanded by a customer setting.

SSL

Certificates ordered over ACME with an HTTP-01 challenge served from the site's own document root, custom material an operator can upload, and a renewal pass thirty days before expiry. Key material lives in a root-only store outside every account's home — a site's PHP runs as that customer, and a key inside the home is a key the site could read.

Databases

Databases with a dedicated user each, per-plan limits, a size reading and a password reset. The password is generated by the panel, shown once and never stored, so recovery is a reset rather than a retrieval. Every name is prefixed with the account and every grant is scoped to one database.

File transfer

Per-account SFTP credentials served by the host's own OpenSSH, chrooted into a root-owned jail with the account's real home bind-mounted inside it. The login carries the account's own uid, gets no shell, and cannot forward ports.

Backups, firewall, monitoring and the journal

Backups of an account's files and databases, restorable individually. A firewall the panel manages. Monitoring of the server's state. And an append-only audit journal of every sign-in and every change, with an administrators-only screen.

Not here yet

There is no web database manager and no browser file manager yet, and certificates are HTTP-01 only — wildcard certificates arrive with DNS management. Mail, DNS, reseller accounts and central management of several servers are planned after the first release.