https://github.com/ovexro/dockpanel
Modern server management panel built with Rust and React. Sites, databases, Docker apps, Git deploy, mail, DNS, monitoring, backups, and security — all in one panel.
https://github.com/ovexro/dockpanel
control-panel devops docker hosting-panel react rust self-hosted server-management vps web-hosting
Last synced: 17 days ago
JSON representation
Modern server management panel built with Rust and React. Sites, databases, Docker apps, Git deploy, mail, DNS, monitoring, backups, and security — all in one panel.
- Host: GitHub
- URL: https://github.com/ovexro/dockpanel
- Owner: ovexro
- License: other
- Created: 2026-03-23T19:35:12.000Z (26 days ago)
- Default Branch: main
- Last Pushed: 2026-03-29T08:34:19.000Z (21 days ago)
- Last Synced: 2026-03-29T11:03:22.002Z (21 days ago)
- Topics: control-panel, devops, docker, hosting-panel, react, rust, self-hosted, server-management, vps, web-hosting
- Language: Rust
- Homepage: https://dockpanel.dev
- Size: 8.36 MB
- Stars: 0
- Watchers: 0
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- Changelog: CHANGELOG.md
- Contributing: CONTRIBUTING.md
- Funding: .github/FUNDING.yml
- License: LICENSE
- Security: SECURITY.md
Awesome Lists containing this project
README
DockPanel
The most feature-packed free server panel ever built.
Self-hosted. Docker-native. Written in Rust. ~57MB RAM. 733 API endpoints. 151 app templates. 476 E2E tests. ~41MB binaries. Zero subscriptions.
Website •
Docs •
Changelog •
Discussions
---
## Install
```bash
curl -sL https://dockpanel.dev/install.sh | sudo bash
```
Open `http://YOUR_SERVER_IP:8443`, create your admin account, done.
Supports Ubuntu 20+, Debian 11+, CentOS 9+, Rocky 9+, Fedora 39+, Amazon Linux 2023. x86_64 and ARM64.
## Why DockPanel?
No other free panel gives you Git push-to-deploy with blue-green zero-downtime updates, 151 one-click Docker app templates, a WAF, passkey login, GPU passthrough, multi-server management, reseller accounts, a developer CLI, and Infrastructure as Code — all running on ~57MB of RAM. DockPanel does.
| | DockPanel | HestiaCP | CloudPanel | RunCloud |
|---|---|---|---|---|
| **Price** | **Free** | Free | Free | $8/mo+ |
| **Stack** | **Rust + React** | PHP | PHP | PHP (SaaS) |
| **Docker native** | **151 templates** | No | No | No |
| **Git deploy** | **Blue-green, zero-downtime** | No | No | Basic |
| **Multi-server** | **Unlimited** | No | No | Yes |
| **Reseller + white-label** | **Yes** | Reseller only | No | No |
| **CLI + IaC** | **Full CLI + YAML export** | Limited | No | No |
| **RAM usage** | **~57MB** | ~200MB+ | ~150MB+ | SaaS |
| **ARM64 / Homelab** | **Yes** | Partial | No | No |
| **Self-hosted** | **Yes** | Yes | Yes | No |
## Screenshots
Dashboard — Live server metrics, 24h graphs, site overview, recent activity
Sites — Static, PHP, Node.js, Python, reverse proxy with Nginx + SSL
Site Detail — SSL, WAF, file manager, terminal, backups, resource limits, custom nginx
Docker Apps — 151 one-click templates across 14 categories
Databases — MySQL/PostgreSQL, SQL browser, schema viewer, point-in-time recovery
File Manager — Browse, edit, upload files from the browser
Terminal — Full SSH in the browser with tabs, themes, session recording
Git Deploy — Push-to-deploy, atomic zero-downtime deploys, preview environments
Monitoring — HTTP/TCP/ping uptime checks, SLA tracking, PagerDuty integration
Security — Firewall, Fail2Ban, SSH hardening, vulnerability scanning, audit logs
Backups — Scheduled backups, S3/SFTP destinations, Restic incremental, one-click restore
DNS — Cloudflare + PowerDNS, zone management, cache purge, security settings
Mail — Postfix + Dovecot + DKIM, Roundcube webmail, Rspamd spam filter
Cron Jobs — Scheduled tasks with output logging
System — Services, updates, diagnostics, auto-healing
Settings — Branding, notifications, alert channels, account security
Login — Email/password + passkey (WebAuthn) support
## Features
### Hosting
- **Sites** — Static, PHP (8.1-8.4), Node.js, Python, reverse proxy. Automatic Nginx config, SSL, PHP-FPM pools.
- **Databases** — MySQL/PostgreSQL in Docker. Built-in SQL browser, visual schema browser, point-in-time recovery (WAL/binlog). Auto-cleanup on site delete.
- **Docker Apps** — 151 templates across 14 categories (AI, CMS, Database, Media, Monitoring, and more). Compose stacks. Resource limits. GPU passthrough.
- **Git Deploy** — Push-to-deploy. Atomic zero-downtime deploys (Capistrano-style). Nixpacks (30+ languages). Preview environments.
- **WordPress Toolkit** — Multi-site dashboard, vulnerability scanning, security hardening, bulk updates.
- **CMS Install** — WordPress, Laravel, Drupal, Joomla, Symfony, CodeIgniter — one click.
- **Backups** — Scheduled, S3/SFTP remote destinations, one-click restore. Restic incremental (encrypted, deduplicated).
- **Backup Orchestrator** — DB/volume backups, AES-256 encryption, restore verification, cross-resource policies, S3/SFTP/B2/GCS destinations, health dashboard.
- **CDN** — BunnyCDN and Cloudflare CDN management. Cache purge, bandwidth stats, pull zone discovery.
- **Image Optimization** — Server-side WebP/AVIF conversion per site.
- **Secrets Manager** — AES-256-GCM encrypted vaults, version history, auto-inject to .env, masked API, CLI pull endpoint.
- **Webhook Gateway** — Inbound endpoints with unique URLs, HMAC-SHA256/SHA1 verification, request inspector, route builder, retry/replay.
### Operations
- **Multi-Server** — Manage remote servers from one panel. Agent auto-registers.
- **DNS** — Cloudflare + PowerDNS. Zone templates, propagation checker, DNSSEC. Cloudflare cache purge, security settings, Cloudflare Tunnel.
- **Container Management** — Auto-sleep (scale to zero), auto-update detection, per-user isolation policies, app migration between servers.
- **Mail** — Postfix + Dovecot + OpenDKIM. Webmail (Roundcube), spam filter (Rspamd), SMTP relay.
- **Monitoring** — HTTP/TCP/ping uptime checks, SLA tracking, PagerDuty integration.
- **Incident Management** — Full lifecycle (investigating, identified, monitoring, resolved, postmortem), severity levels, timeline, affected components.
- **Public Status Page** — Standalone dark-themed page at `/status`, component groups, email subscribers, overall status auto-computed from checks.
- **Terminal** — Full SSH with tabs, themes, sharing, session recording.
### Security
- **Passkey/WebAuthn** — Passwordless login with biometrics or security keys. Plus 2FA/TOTP with recovery codes.
- **WAF** — ModSecurity3 + OWASP CRS v4 per site. Detection or prevention mode. Event viewer.
- **CSP & Bot Protection** — Per-site Content Security Policy headers and bot rate limiting.
- **Firewall** — UFW management with smart port opener.
- **Fail2Ban** — View/ban/unban IPs, panel-specific jail.
- **SSH Hardening** — Disable password/root login, change port — one click.
- **Vulnerability Scanning** — Container scanning, file integrity, security headers.
- **Auto-Healing** — Restart crashed services, clean disk, renew expiring SSL, auto-sleep idle containers.
### Developer Experience
- **CLI** — `dockpanel status`, `sites`, `apps`, `diagnose`, `export`, `apply`
- **Infrastructure as Code** — Export/import server config as YAML. Terraform/Pulumi provider API with scoped IaC tokens.
- **Smart Diagnostics** — 6 check categories with one-click fixes. Auto-optimization recommendations.
- **File Manager** — Browse, edit, upload files from the browser.
- **Command Palette** — Ctrl+K to navigate anywhere.
- **Nginx FastCGI Cache** — Per-site toggle with smart bypass for logged-in users.
- **Redis Object Cache** — Per-site isolated Redis DB with WP auto-config.
### Themes & Layouts
- **6 Themes** — Terminal (hacker green), Midnight (navy blue), Ember (warm amber), Arctic (light teal), Clean (light blue SaaS), Clean Dark (GitHub-dark).
- **3 Layouts** — Sidebar (full sidebar nav), Compact (collapsible icon rail), Topbar (horizontal navbar).
### Business
- **Reseller Accounts** — Admin → Reseller → User hierarchy with quotas.
- **White-Label** — Custom logo, colors, panel name per reseller.
- **OAuth/SSO** — Google, GitHub, GitLab login.
- **Extension API** — Webhook events with HMAC signing and scoped API keys.
- **WHMCS Integration** — Provisioning, suspension, termination hooks. Auto-create users from billing.
- **Horizontal Auto-Scaling** — Rule-based CPU thresholds with min/max replicas and cooldown.
- **Migration Wizard** — Import from cPanel, HestiaCP. Plesk (beta). App migration between servers.
- **Teams** — Multi-user access with role-based permissions.
## Architecture
```
Browser → React 19 SPA → Nginx
├── /api/* → API (Rust/Axum)
│ ├── PostgreSQL 16
│ └── Agent (Unix socket / HTTPS)
│ └── Docker, Nginx, SSL, files, terminal
└── /* → Frontend (static files)
```
**3 Rust binaries**: Agent (~20MB), API (~19MB), CLI (~1.8MB). Total RAM: ~57MB. 11 background services.
| Component | Tech | Role |
|-----------|------|------|
| Agent | Rust/Axum | Root-level host operations (Docker, Nginx, SSL, files) |
| API | Rust/Axum + SQLx | Auth, business logic, multi-server dispatch, background tasks |
| CLI | Rust/Clap | Command-line interface for automation |
| Frontend | React 19 + Vite + Tailwind 4 | Browser UI with 6 themes + 3 layouts |
## Security
DockPanel has undergone six rounds of security auditing (260+ vulnerabilities found and fixed). Credentials are encrypted at rest with AES-256-GCM. All child processes run with sanitized environments. See [SECURITY.md](SECURITY.md) for details.
## Development
```bash
git clone https://github.com/ovexro/dockpanel.git && cd dockpanel
# Start database
docker run -d --name dockpanel-postgres \
-e POSTGRES_USER=dockpanel -e POSTGRES_PASSWORD=dockpanel -e POSTGRES_DB=dockpanel \
-p 5450:5432 postgres:16
# Build
cargo build --release --manifest-path panel/agent/Cargo.toml
cargo build --release --manifest-path panel/backend/Cargo.toml
cargo build --release --manifest-path panel/cli/Cargo.toml
cd panel/frontend && npm install && npx vite build
```
See [CONTRIBUTING.md](CONTRIBUTING.md) for full development setup.
## CLI
```bash
dockpanel status # Server status (CPU, RAM, disk)
dockpanel sites # List all sites
dockpanel apps # List Docker apps
dockpanel diagnose # Run smart diagnostics
dockpanel export -o config.yml # Export server config as YAML
dockpanel apply config.yml # Apply config (Infrastructure as Code)
```
## Update / Uninstall
```bash
sudo bash /opt/dockpanel/scripts/update.sh # Update
sudo bash /opt/dockpanel/scripts/uninstall.sh # Remove
```
## Documentation
- [Live Docs](https://docs.dockpanel.dev) — Getting started, guides, configuration
- [FEATURES.md](FEATURES.md) — Complete feature manifest (60+ features, ~280 capabilities)
- [CHANGELOG.md](CHANGELOG.md) — Version history
- [SECURITY.md](SECURITY.md) — Security model and vulnerability reporting
- [CONTRIBUTING.md](CONTRIBUTING.md) — Development setup and PR process
## License
Business Source License 1.1. Free to use on your own servers. See [LICENSE](LICENSE) for details.