Core Production-Grade Hosting Operations
PanelConfig covers the tools customers expect, with the security, automation, integrations, and installer discipline providers need to run them responsibly
Websites and Runtime
Website hosting controls with enough detail for providers and enough clarity for customers
Virtual Hosts
Each domain receives its own document root under the hosting account home
Per-Website PHP
Pin PHP 8.1 through 8.4 per website without changing the whole server
Server Profile
nginx by default with Apache support for .htaccess-dependent applications
Website Logs
Per-site access and error logs surface in PCUser with safe read-only viewing
Domains and DNS
Domain lifecycle, zone records, redirects, and SSL state in one provider-aware flow
Addon Domains
Validated domain and subdomain creation with document roots and provisioning jobs
Redirects
301, 302, 307, and 308 redirects with full-URL targets and ownership checks
DNS Records
A, AAAA, CNAME, MX, TXT, and SRV records per zone
SSL State
Each domain shows certificate status clearly before it becomes a support question
Email Hosting
Customer mailboxes and deliverability records without a second control panel
Mailboxes
Per-account mailboxes with quotas and status control
Aliases and Forwarders
Route addresses without creating full mailboxes
Deliverability Records
SPF, DKIM, and DMARC guidance per domain in the DNS editor
Email Usage
Mailbox storage contributes to account usage snapshots
Databases
MySQL and MariaDB records scoped to the hosting account
Databases and Users
Create databases and grant users from PCUser or PCCLI
Account Isolation
Customers only see the databases assigned to their own hosting account
Size Tracking
Database usage feeds into account snapshots
Backup Coverage
Databases are included in scheduled and on-demand backup workflows
PHP and Runtime
Modern PHP support without breaking older applications
PHP Versions
PHP 8.1 through 8.4 can run side by side
Per-Site Selection
Switch one website without a server-wide runtime change
Runtime Overrides
Memory limit, upload size, and execution time can be set per site
Safe Reloads
Runtime changes apply through allowlisted jobs, not raw shell calls from the web
Security Center
Security controls that operators can review, explain, and trace
Firewall Rules
Inbound and outbound rules with protocol, port, and source validation
WAF Rules
Named rules with block, challenge, or log-only actions
IP Blocks
Manual and expiring blocks with one-click release
Malware and Login History
Queued scan records and every login attempt captured for review
Backups
Recovery workflows designed to be tracked, repeated, and reviewed
Backup Schedules
Full, files-only, or database-only backups on cron schedules
On-Demand Runs
Trigger a backup before risky changes from the panel or pc backups:run
Restore Records
Every restore is a tracked and audited operation
Off-Box Friendly
Backup artifacts are organized for external storage workflows
API and CLI
Two automation surfaces connected to the same records and audit trail
Scoped Tokens
SHA-256 hashed tokens with per-scope permissions and expiry
Rate Limits
Per-token windows with predictable 429 responses
PCCLI
One pc command for accounts, SSL, backups, jobs, services, and health
Job Queue
Panel and CLI writes queue auditable jobs for a worker to drain
Integrations
Prepared for the tools providers already use around the hosting panel
Billing Systems
Designed to connect with WHMCS, HostBill, Blesta, and custom customer systems through careful API workflows
DNS and Security Tools
Integration direction for Cloudflare, Imunify360, and provider-side security workflows
Backup Platforms
Prepared for JetBackup and other remote backup workflows with provider-ready storage patterns
App Platforms
Ready for app installers and web app workflows such as Softaculous, SitePad, and custom templates
Installer and Updates
From clean server to locked installation with release visibility
One Command Install
A single bash command on fresh Linux-based server
Requirement Checks
The installer verifies PHP, extensions, storage, and server readiness before changes
Installation Lock
A dual-signal lock refuses accidental reinstalls over live data
Release Audits
Each build can be audited from PCAdmin or pc release:audit
Extensive Access Stands
Panel, Terminal, and API access are placed where each role can use them without breaking the audit trail
| Capability | PCAdmin | PCUser | PCCLI | API |
|---|---|---|---|---|
| Users, roles, and resellers | - | |||
| Hosting accounts and packages | - | |||
| Domains, subdomains, redirects | ||||
| DNS zones and records | ||||
| Websites and PHP versions | ||||
| File manager and FTP accounts | - | - | ||
| MySQL databases and users | ||||
| Email accounts, aliases, forwarders | ||||
| SSL orders, certificates, renewals | ||||
| Backups, schedules, restores | ||||
| Cron jobs | ||||
| Firewall, WAF, IP blocking | - | - | ||
| Malware scan records | - | - | ||
| Resource usage and metrics | ||||
| Audit logs and login history | ||||
| Plans, subscriptions, invoices | - | - | ||
| Branding and notifications | - | - | - | |
| API tokens and scopes | - |
Server-Side Action Validation
Panel and CLI actions write the same records, queue the same jobs, and land in the same append-only audit log, so customer requests, admin changes, and scripts leave one traceable trail
One Command Installation
Point a hostname at a fresh Linux-based server and run the installer, your first login becomes the owner account
bash <(curl -sSL https://install.panelconfig.com/latest.sh)