Why Hosting Panels should Queue Server Actions
Server-changing work should be recorded first, then executed through a controlled worker that leaves an audit trail
It is tempting to let a hosting panel run a shell command the moment an administrator clicks a button, but that pattern turns a web mistake into a server-level problem very quickly
Direct Execution Risk
Any path that runs sensitive commands from a web request becomes a target, especially when DNS, SSL, backups, accounts, and service control are involved
Queue First
PanelConfig records server-level work as a job and lets an allowlisted worker drain the queue, the web tier creates a traceable record and the worker performs the controlled action
- The risky surface stays smaller and easier to review
- Every action is logged before it runs
- Panel, API, and PCCLI work stay inside the same audit trail
