Customer Guide

This guide is for hosting customers. You manage your websites, email, files and databases in the control panel.

Your hosting provider decides which tools your plan includes. If you do not see a tool described here, it is not part of your plan. Contact your hosting provider to add it.

Sign in

1. Open the control panel address from your hosting provider, usually https://server-name:2083.
2. Enter your Username and Password and click Log in.
3. If you turned on two-factor sign-in, enter the 6-digit code from your app.

Team members sign in on the same page with their email address and their own password.

Your hosting provider's client area may also have a Log in to Control Panel button. It signs you in with a one-time link.

Home page

Home shows your disk use, bandwidth, email accounts and databases, shortcuts to your tools, and your account information: package, main domain, addon domains, subdomains, PHP version and nameservers. It also shows how to upload files with SFTP.

Password, language and two-factor sign-in

• Password & Language: change your control panel password (it is also your SFTP/SSH password) and choose the language of your panel.
• Two-Factor Auth: protect your login with a code from an authenticator app (Google Authenticator, Authy, 1Password, Microsoft Authenticator). Scan the QR code, enter the 6-digit code and click Enable two-factor authentication. Save your 10 recovery codes: each works once if you lose your phone.

Domains

Add a domain

Open Domains. You can add three kinds of domains:

The table shows each domain's type, folder and SSL status. Click Remove to delete one.

After you add a domain, point it to the server: set its nameservers at your registrar to the ones shown on Home and in Zone Editor.

Edit DNS records (Zone Editor)

1. Open Zone Editor. It also shows the nameservers to set at your registrar.
2. Click Manage next to a domain.
3. Add a record: enter the Name (@ or www), TTL, Type, Priority (MX and SRV only) and the value. Click Add.
4. To remove a record, click Delete.

You can use A, AAAA, CNAME, MX, TXT, NS, SRV and CAA records. Hostnames in CNAME, MX and NS records should end with a dot.

DNSSEC: click Turn on DNSSEC, then add the DS record shown at your registrar. Before you turn it off, remove the DS record at your registrar and wait a day.

Cloudflare

Open Cloudflare to use Cloudflare in front of your websites.

1. In Cloudflare, create an API token (My Profile → API Tokens → Create Token, "Edit zone DNS" template, with the extra permissions listed on the page).
2. Paste the token and click Connect.
3. For each domain: Add to Cloudflare, Copy DNS records from this server, switch the proxy per record, Purge cache, set SSL: Full (strict) or Always use HTTPS.

Keep mail, FTP and webmail names on "DNS only".

SSL certificates

Open SSL/TLS.

Free automatic certificates (AutoSSL)

Every website gets a free certificate automatically as soon as its domain points to this server. It is renewed 30 days before it expires. The status shows "Secured", "Waiting for DNS" or the reason. Click Check now or Renew now if needed.

Wildcard certificate

One free certificate for the domain and all its subdomains (*.example.com). The domain must use this server's nameservers.

1. Click Add wildcard next to the domain.
2. The certificate is issued and renewed automatically.

Click Remove wildcard to go back to one certificate per subdomain.

Request a certificate (CSR)

To buy a certificate from a certificate authority (for example an EV or organisation-validated one):

1. Under Request a certificate (CSR), enter the Certificate name (for example www.example.com or *.example.com). Organization, city, state and country are optional.
2. Click Create request.
3. Click Copy and give the request text to the certificate authority.

The private key stays in your panel (encrypted). When the certificate arrives, install it as below and leave the key field empty.

Install your own certificate

1. Under Install your own certificate, choose the Website.
2. Paste the Certificate (CRT).
3. Paste the Private key (KEY). Leave it empty if you made the request on this page.
4. Paste the CA bundle (optional).
5. Click Check and install.

The certificate is checked (key match, domain, expiry) before it goes live. It replaces the automatic certificate until it expires. To go back, click Use automatic.

Email

Create an email account

1. Open Email Accounts.
2. Under Create email account, enter the name (for example info), choose the domain, and enter a password (or click Generate).
3. Set the Quota (MB, 0 = unlimited).
4. Click Create.

The list shows each mailbox with its size next to its quota. Use Password to change the password and Delete to remove the mailbox. The top of the page shows how many emails your account sent in the last hour.

Read your email

• Webmail: click Open Webmail.
• Mail apps (Outlook, Apple Mail, Thunderbird, phones): use the Mail client settings on the page.

The server name is mail.your-domain when your website has a certificate, otherwise the server's own name; the page shows which one to use.

Most apps set themselves up:

• Outlook and Thunderbird: enter only your email address and password. The app finds the settings itself.
• iPhone, iPad and Mac: click iPhone / Mac next to the mailbox. The downloaded profile sets up email, and also the calendar and contacts when your plan includes them. Open it on the device, then go to Settings → Profile Downloaded → Install and enter the mailbox password.

Forwarders

Under Forwarders, enter the address (for example sales), choose the domain, enter where to Forward to (for example [email protected]) and click Add forwarder.

Autoresponder, filters and spam settings

Click Autoresponder & filters next to a mailbox.

• Spam: mail the spam filter scores as spam goes to the Junk folder (never deleted). Choose Move to Junk from score (or Server default (recommended)). Add addresses or domains to Always allow (never Junk) or Always treat as spam, one per line. Click Save.
• Autoresponder: tick Reply automatically to incoming mail, enter the Subject and Message, optional dates, and how often to reply to the same sender (once every 1–7 days). Click Save autoresponder.
• Filters: choose When (From contains, To / Cc contains, Subject contains) and a text, then Then (move to folder, forward to, or delete). Click Add filter.

Mail to unknown addresses (catch-all)

By default, mail to an address without a mailbox or forwarder is refused. This is recommended, because catch-alls collect a lot of spam. To catch it anyway, enter a mailbox under Deliver to and save.

Email routing

Email routing sets where each domain receives its email:

• Automatic (from the MX record): the panel checks the domain's MX record every hour.
• Local mail server: email is received on this server.
• Remote mail server: the domain's email is with another service (for example a hosted business email). Mail sent from your websites and mailboxes here then reaches those mailboxes instead.

The Received column shows the result: "on this server" or "on another mail server".

Import mail from another server

Copy all folders and messages of a mailbox at another provider into a mailbox here.

1. Create the mailbox here first.
2. Under Import mail from another server, choose the mailbox under Into mailbox.
3. Enter the Other mail server (IMAP), its Port, your Login there and Password there.
4. Click Start import.

The import runs in the background over secure IMAP. Running it again adds only what is new.

Email deliverability

So that Gmail, Outlook and others accept your mail, each domain needs SPF, DKIM and DMARC records. The Email deliverability table shows them with a live check (Valid or Missing). If your DNS is hosted here, they are added automatically. If your DNS is elsewhere, click Copy and add them there.

Delivery reports

Click Delivery reports to see mail sent from and received by your domains in the last 30 days, and what happened to each message. Search by address, result, direction and period.

Calendars and contacts

Every mailbox has its own calendar and address book, synced with phones and computers. Open Calendars & Contacts for the settings:

• Server: your domain (or https://your-domain/.dav/)
• Username: the full email address
• Password: the mailbox password

The page has steps for iPhone/iPad, Mac, Android (with the free DAVx⁵ app) and Thunderbird. Most devices find the settings automatically from the domain.

Mailing lists

A mailing list is one address (for example [email protected]) that sends every message to all its members.

1. Open Mailing Lists. Enter the address, the Name shown to members, and click Create.
2. Click Manage to open the list.
3. Under Add members, enter one address per line and click Add. Only add people who agreed to receive this list.
4. Under Settings, choose Who can post: members, moderators only (announcements) or anyone. Add Moderators, a Subject prefix, and whether replies go to the whole list. Click Save.

Every message is sent from the list's address and has a one-click unsubscribe link. Addresses that keep bouncing are stopped automatically.

Files

File Manager

Open File Manager to work with the files in your home folder (/home/username). Your website files are in public_html.

• Upload (several files at once; tick Overwrite existing files to replace).
• New Folder, New File.
• Select files, then Copy, Move, Compress (.zip or .tar.gz), Permissions or Delete.
• Per file: Edit, Download, Extract, Rename.

The editor saves with Ctrl+S (⌘S on Mac).

Disk Usage

Disk Usage shows the size of every folder (click to go deeper) and your biggest files. Click Measure again to refresh. Email and databases are counted on Resource Usage.

FTP accounts

Connect with an FTP program (for example FileZilla) using FTP with TLS on port 21. Choose "explicit TLS" in your FTP program.

• Main account: your control panel username and password, with your whole home folder.
• Extra FTP accounts: under Add FTP account, enter a Login (for example designer), a Password, a Folder (the account sees only this folder) and an optional Quota. Click Create. The login is name@yourdomain.

Plain FTP without TLS also works, but it sends your password unencrypted. Prefer TLS or SFTP.

SFTP

Use FileZilla, WinSCP or Cyberduck with the SFTP protocol: your server name, port 22, and your control panel username and password.

Web Disk

Open your website files like a drive on your computer or phone.

1. Open Web Disk and copy the Address (https://your-domain/.webdisk/).
2. Under Add Web Disk login, enter a login, a password and a Folder (empty or / for the whole home folder). Tick Read-only if the login should only open and copy files. Click Create.
3. Connect:
4. Windows: File Explorer → This PC → Map network drive → "Connect to a Web site…", then paste the address.
5. macOS: Finder → Go → Connect to Server (⌘K), then paste the address.
6. Linux: in the file manager, use the address with davs:// instead of https://.
7. Phones: any file app with WebDAV support.

The domain needs its SSL certificate.

SSH access and the terminal

Open SSH Access to see your connection details and add SSH keys.

1. Under Add a public key, enter a Name (for example "My laptop").
2. Paste your Public key (ed25519, RSA 2048 or larger, or ECDSA).
3. Click Add key.

If your plan includes shell access, you can sign in with SSH or open Terminal for a command line in your browser. Without shell access, you can use SFTP only. Your SSH sessions see only your own files and processes.

Databases

MySQL databases

1. Open MySQL Databases.
2. Under Create database, enter a name and click Create. Your username is added in front of it.
3. Under Create database user, enter a user name and a password (or Generate). Click Create.
4. Under Add user to database, choose the user and the database and click Grant all privileges.

Connect from your website with host localhost. Click Open phpMyAdmin to manage your databases in the browser (no extra password needed).

If a website reports a damaged ("crashed") table, click Check & repair next to the database. Every table is checked and damaged ones are repaired where possible. If a table cannot be repaired, the message names it: restore the database from a backup.

PostgreSQL databases

PostgreSQL Databases works the same way: create a database, create a user, and add the user to the database. Every user added to a database has full rights on everything in it. Connect with host localhost, port 5432.

Click Open next to a database to use the built-in tool:

• see the Tables;
• run SQL (stopped after 15 seconds; at most 500 rows are shown);
• Export (SQL) the database.

MySQL and PostgreSQL databases count together toward your plan.

Remote MySQL

Let a computer or another server connect to your databases directly, for example a desktop database tool or an application hosted elsewhere.

1. Open Remote MySQL.
2. Under Allow an address, enter the IP address or range (your current address is shown) and a Note (for example "Office").
3. Click Allow.

Every database user of your account can then connect from that address with its own password. Everyone else is blocked by the firewall. With no addresses, your databases are reachable only from this server.

WordPress

Open WordPress.

Install WordPress

1. Under Install WordPress, choose the Website and an optional folder (empty = main page). The folder must be empty.
2. Enter the Site title, Admin username, Admin email and Admin password (empty = generated).
3. Choose the Language.
4. Click Install.

A database is created for the site. Click Log in to WordPress to open the dashboard without a password.

Already have a WordPress site (uploaded or transferred)? Click Find existing sites.

Keep WordPress fast and safe

Each site has a card with:

• Update everything: WordPress, plugins and themes.
• Update automatically (daily).
• Block editing code files from the dashboard.
• Block XML-RPC (stops a common password-guessing attack; some apps and Jetpack need it).
• Page cache: visitors get ready-made pages, many times faster. Signed-in users and shopping carts always see live pages. The cache clears itself when you publish or edit. Use Turn on/Turn off and Clear cache.

Staging and push to live

1. On a site's card, enter a subdomain (default staging) and click Create staging copy. Files and database are copied, the addresses are rewritten and the copy is hidden from search engines. The live site is not touched.
2. Work on the staging copy.
3. On the staging card, click Push to live. Tick also the database if you want posts, pages, settings and orders replaced too. Changes made on the live site since the copy are then lost.

The live site is saved first. To put it back exactly as it was, click Undo the push.

Vulnerabilities

Plugins and themes are checked every day against a public vulnerability database. You are emailed about new findings. Click Check for vulnerabilities to check now. Each card shows known problems and what to do: update to a fixed version, or remove or replace the plugin.

Remove a site

Click Delete site. Tick also delete its database to remove the database too. This cannot be undone.

Applications installer

Open Applications to install a website, store, forum or tool in one click. Applications are downloaded from each project's official site and checked before installing.

Available: Joomla, Drupal, Grav, Backdrop CMS, PrestaShop, OpenCart, phpBB, MediaWiki, DokuWiki, MyBB, Nextcloud, FreshRSS, Piwigo, Matomo, Moodle, Akaunting, osTicket, Mautic, YOURLS and Laravel. WordPress has its own page.

1. Click an application.
2. Choose the Website and an optional Directory (the folder must be empty).
3. Fill in the site name and admin details, if asked.
4. Click Install.

A new MySQL database is created for it. Some applications finish in their own setup page: click Finish setup and use the database details shown (the password is shown once). To remove an application, click Remove (tick and its database to delete that too).

Site Builder

Site Builder makes a one-page website without code. Choose one of six designs, write your texts, add pictures, choose left-to-right or right-to-left, and click Save and publish.

Node.js, Python and Ruby applications

Open Node.js / Python / Ruby.

1. Upload your code to a folder in your home with the File Manager, SFTP or Git.
2. Under New application, choose the Runtime (Node.js, Python or Ruby).
3. Choose the Website and path (/ = the whole website; /api = only that path).
4. Enter the Application folder and the Start command. Your app must listen on the port in $PORT (address 127.0.0.1).
5. Add Environment variables, one NAME=value per line.
6. Click Create.

Each application has buttons to Start, Stop and Restart, to install dependencies (npm install, pip install or bundle install) and to view Logs. Applications restart automatically if they crash and after a reboot.

Git deployment

Open Git Deployment.

1. Under Connect a repository, enter the Repository address, the Branch and the folder to Deploy into (it must be empty, or already a clone of this repository).
2. Optional: enter a command to run after deploy (for example composer install).
3. Click Connect.
4. For a private repository, copy the Deploy key and add it as a read-only deploy key in the repository settings.

Click Deploy now to deploy. For Auto deploy, add the webhook address shown as a push webhook in the repository. Every push then deploys.

Cron jobs

1. Open Cron Jobs.
2. Choose a Schedule (every 5 minutes, every hour, once a day, once a week, once a month) or type one in the format: minute hour day month weekday.
3. Enter the Command, for example /usr/bin/php ~/public_html/cron.php.
4. Click Add.

Cron jobs run as your user. Your plan sets how many you can have.

PHP settings

Open PHP.

• PHP version: choose the version for the whole account (Account default) and, if needed, a different version per website. Click Save versions.
• PHP settings: memory limit, max upload size, max POST size, max execution and input time, max input vars, showing errors in the page, and time zone. Leave a field empty to use the server default. Click Save settings The Ready-made buttons fill in settings for a common kind of site (WordPress, WooCommerce / large shop, Laravel / framework, large uploads, development); check them and click Save settings.

Errors shows the latest PHP errors and warnings of your websites, newest first.

Other website tools

• Redirects: send a page or a whole website to another address, Permanent (301) or Temporary (302), optionally keeping the rest of the path. Custom error pages shows your own page for 403, 404, 500 and 503 errors.
• Access Control: password-protect a folder (with optional leech protection), turn on Directory listing for a folder, block addresses with the IP Blocker, and stop other sites from embedding your images with Hotlink Protection. The Protection section shows attacks on your sites. You can turn individual protections off for one site if an application really needs it.
• MIME Types & Handlers: add file types, run extensions such as .html as PHP, and run CGI scripts in cgi-bin.
• Visitors: unique visitors, page views, most visited pages, where visitors came from, and pages not found. Bots are not counted. Raw access logs are in your logs/ folder.
• Uptime: your websites are checked every 5 minutes. You get an email when one goes down and when it is back.
• Resource Usage: disk by type, bandwidth this month, traffic per website, and your processor, memory and process limits. If your sites often reach their limits, a bigger plan keeps them fast.
• Security: results of the malware scans of your files. Click Scan my website to scan now.

Backups

Open Backups.

• Create backup: a full copy of your website files, email and databases. Download it, or click Restore….
• Daily snapshots: taken automatically every night. Click Browse next to a day.

When you restore, choose:

• Files: all files, or only a file or folder you pick. Restore them into a new folder "restored-date" (nothing is overwritten) or back to the original place.
• Databases: each chosen database is replaced by the backed-up version.
• Email: messages are put back; newer messages are kept.

Click Restore selected.

Team members

Give a developer, designer or colleague their own login, limited to the tools they need.

1. Open Team Members.
2. Under Add team member, enter their Email address, an optional Name and a Password.
3. Tick the Tools this member can use.
4. Click Add member.

They sign in on the normal login page with their email address. Their actions are recorded under their own name. Your password, two-factor setting, team and API tokens stay yours. To pause a member, untick Can sign in. To remove one, click Remove.

API tokens

Automate your account from your own scripts: mailboxes, forwarders, databases, DNS records and cron jobs.

1. Open API tokens.
2. Enter a Token name (for example "deploy script") and click Create token.
3. Copy the token now. It is not shown again.

curl -H "Authorization: Bearer TOKEN" https://server-name:2083/api/v1/me

Only the tools of your plan are available. Click Revoke to cancel a token. See the API reference for every call.

Support

Open Support to ask for help. Your question goes to whoever sells your hosting.

1. Enter a Subject and your Message. Name the website or email address concerned and what you see. Never send passwords.
2. Tick Urgent only when a website or email is down.
3. Click Send.

You get an email when there is an answer. Open the ticket to read it, reply, or click Close ticket when the problem is solved. A ticket that was answered and gets no reply for a week is closed by itself; replying opens it again.

Site Check

When a website does not open or shows an error, open Site Check, choose the website and click Check. You see:

• whether the name points to this server, and its nameservers;
• what the website answers (status, time, page title), on this server and for visitors;
• its certificate and when it expires;
• your account's state: suspended, disk space, files, bandwidth;
• the latest PHP errors of that website.

A line marked Problem is usually the cause. If your host has turned on the AI assistant, click Ask the AI assistant what is wrong for an explanation and the steps to fix it. On the Errors page, Explain with AI explains your latest PHP errors the same way.