CONTROL CENTER
Your server, at a glance.
Websites, email, and security. One focused workspace.
DISK SPACENot connected
Storage used on the hosting volume
SECURITY POSTURENot connected
Firewall, login protection, and malware scanningOpen security center ↗Websites
Manage sites ↗Service health
Live▱↗✉↗
Database workspace
Create a database or open phpMyAdmin
Your mail, hosted here
Manage mailboxes and open Roundcube
◇ Server changes are validated and recorded in Activity.
WEB HOSTING
Websites.
Nginx → Apache → a dedicated PHP-FPM pool for every site.
Add a website
Subdomains can be added as independent websites. Point DNS to this server before requesting HTTPS.
Your websites
SOFTWARE MAINTENANCE
CryptBuild.
Review installed packages, available updates and integration readiness.
Updates available
Administrator action is required. Updates can restart services; take a recoverable backup before maintenance.
Build software
PHP versions and settings are managed in PHP manager ↗. Package installation alone does not configure a hosting integration.
Review maintenance
CRYPTBUILD / CONFIGURATION
Options.
Manage supported settings and review the configured hosting architecture.
Changes are applied through the relevant manager. Fixed choices below describe CryptAdmin's supported architecture; they do not confirm that a service is installed or healthy.
Choose a category to open its manager
No options match your search.
RUNTIMES & CONFIGURATION
PHP manager.
Install supported runtimes and manage version defaults or website overrides.
Version php.ini defaults
FPM onlyApplies to websites using this version unless a website overrides the setting. The CLI configuration is separate. Upload and POST limits are capped at the proxy's 64 MiB request limit.
Website PHP settings
Saving creates explicit overrides for the displayed fields. Resetting removes managed overrides and restores version defaults. PHP memory limits apply per request; account RAM allocation is managed separately.
DOMAINS & RECORDS
DNS manager.
Authoritative zones with validated records and revision checks.
Choose a zone
Use two operational nameservers. Registrar delegation and glue records must be configured separately.
Zone records
Use @ for the zone root, or a relative name such as www. Hostname targets must be fully qualified. Changes stay in this draft until Save zone.
MX: 10 mail.example.com · SRV: 10 5 443 service.example.com · CAA: 0 issue letsencrypt.org
DATA WORKSPACE
Databases.
Local MariaDB databases, with a dedicated user for each.
Create a database
The name and user receive a ca_ prefix. Use these credentials in phpMyAdmin; database root login is disabled there.
Your databases
SELF-HOSTED EMAIL
Mailboxes.
Exim for SMTP. Dovecot for IMAP and POP3.
Create a mailbox
Add the website domain first. Mail delivery needs MX, SPF, DKIM, DMARC, and provider-configured reverse DNS.
Your mailboxes
Mail client settings
INCOMING
IMAP 993 / POP3 995
OUTGOING
SMTP 465 or 587 (STARTTLS)
USERNAME
Your full email address
Mail DNS records
Publish these records with your DNS provider, alongside SPF and DMARC. Reverse DNS is set by your server provider.
RECOVERY & CONTINUITY
Backups.
Encrypted snapshots. Independent local and S3 destinations.
A copy close by. Another further away.
Websites, database dumps, mail, and server configuration. Scheduled daily with retention.
Latest backup
Configure destinations and secrets on the server. Restores go to a separate staging directory through the command line.
DEFENSE & VISIBILITY
CryptSentinel 360.
Host firewall, brute-force protection, and malware detection.
Incident prevention audit
Read-only checks for world-writable paths, exposed backup/log filenames and scripts in uploads. It does not delete files or certify a site clean.
◇
Firewall
nftables · IPv4 and IPv6
Host firewallNot connected
Login protectionNot connected
The server setup protects your management network and SSH port. Temporary bans expire after one hour.
⌁
Malware scanner
ClamAV · Files and email
Scanner serviceNot connected
Signature databaseNot connected
Findings are reported for review. Files are never automatically deleted or cleaned.
Temporary IP block
Latest scan
Not scannedCryptSentinel event correlation
Local · No cloud reportingRecommendations only. Browser challenges and automatic quarantine require tested enforcement adapters.
Proactive PHP protection
Not installedExperimental PHP 8.4 extension. Runtime policy events are distinct from confirmed malware. Native compilation and FPM acceptance tests are required.
WordPress attack coverage
Web application firewall configurationNot installed
A researched control map, not a promise that every attack is blocked. Each class shows its current implementation and gaps.
CUSTOMER ISOLATION
Hosting accounts.
One private container per account, with enforced resource limits.
Create an isolated account
Requires enrolled Incus networking, a reviewed account image, and a ZFS storage pool. Customer logins remain gated until server acceptance checks pass. Container service routing is a separate integration step.
Isolated accounts
MY HOSTING ACCOUNT
My account
Your private hosting environment and resource allocation.
Account availability
Contact the administrator for changes to your allocation. Hosting-management tools appear only as their isolated service integrations become available.
OPERATIONS
Activity.
Queued operations and their outcomes. Passwords never appear here.