The panel never runs shell commands directly. Everything privileged goes through these scripts — idempotent, validated, loud on failure. This is the complete list, generated from their own headers.
Everything about the humans (and resellers) on the box: creating accounts, suspending them, syncing passwords, and keeping disk and bandwidth inside the lines.
| Script | What it does |
|---|---|
bandwidth-collect.sh | bandwidth-collect.sh — tally per-domain bytes from OLS vhost access logs into panel DB (bandwidth_daily). IDEMPOTENT: sums today's dated lines and upserts, so re-runs and hourly cron are safe. Skips the panel's own access.log. |
bandwidth-enforce.sh | bandwidth-enforce.sh — suspend active non-admin users at/over their monthly bandwidth quota (cPanel-style). Monthly usage = SUM(bandwidth_daily) for the current calendar month. Sets users.bw_suspended=1 so the monthly reset knows this was A |
bandwidth-reset.sh | bandwidth-reset.sh — monthly (1st, 00:05): lift ONLY automatic bandwidth suspensions (bw_suspended=1). Manual suspends are untouched — the panel clears the flag on any manual suspend/unsuspend, so human decisions always stick. |
create-account.sh | create-account.sh <username> [php_version] [password] [max_children] password (optional): sets the SYSTEM password via chpasswd so the main account can FTP immediately (vsftpd local_enable). Panel password changes re-sync it via password-sy |
delete-account.sh | delete-account.sh <username> — full teardown of a hosting account. Idempotent: every step tolerates already-gone pieces. ORDER: system artifacts first (vhosts, zones, pools, crontab, mail maps), home dir + user last. NEVER touches panel DB |
disk-usage.sh | disk-usage.sh — print "label<TAB>MB" lines for the cleanup page. |
password-sync.sh | password-sync.sh <username> <newpass> — re-sync the SYSTEM password after a panel password change (same credential by design; piped to chpasswd, never argv). |
quota-check.sh | quota-check.sh — per-user disk report (home + virtual mail), flags over-quota. Consistency rule: Helpers::quota() measures the same two trees, so the panel's hard gate and this report can never disagree about who's over. |
quota-enforce.sh | quota-enforce.sh — hard disk-quota backstop (kernel quotas unavailable: LXC and VPS mounts are host-owned, so no usrquota). Two locks, both self-healing: over quota (active, non-admin) -> FTP dropped from userlist (530s) AND the FPM pool fi |
suspend-account.sh | suspend-account.sh <username> <suspend|unsuspend> Shells stay nologin either way (accounts are FTP-only; only the password lock changes). |
Nightly full backups, week-long incrementals, encrypted copies, and offsite mirrors — plus every way to get data back.
| Script | What it does |
|---|---|
backup-account.sh | backup-account.sh <username> — full account backup (all domain dirs + home Maildir + virtual maildirs for the user's domains + full DB dump alongside). Layout: /home/<user>/<domain>/public_html, mail in /var/mail/virtual/<domain>. |
backup-all.sh | backup-all.sh — loop all panel users |
backup-crypt.sh | backup-crypt.sh — transparent backup encryption for panel backups. Model: per-user random keys (users.backup_pass), shown ONCE at enable time. Threat model: protects backups AT REST (stolen disk, leaked downloads, offsite copies) — NOT agai |
backup-dumps.sh | backup-dumps.sh — list database dump files (for selective DB restore). |
backup-get.sh | backup-get.sh <filename> — stream a panel backup to stdout for download. Runs as root (backups are root-owned). Fails loudly on anything unexpected. |
backup-inc.sh | backup-inc.sh <username> — rsync hardlinked-daily incremental (complements, never replaces, the tarball backups). Layout: /backup/skypanel/inc/<user>/<date>/ with --link-dest to yesterday, keep 7. Covers the home tree + the user's virtual m |
backup-members.sh | backup-members.sh <tarball> [prefix] — list members (cap 300) for restore browsing. |
backup-reconcile.sh | backup-reconcile.sh — register on-disk tarballs missing panel rows (pre-fix nightly backups, fetched offsite copies, hand-placed files). Owner parsed from the panel filename scheme (usernames can't contain dashes); unknown owners are report |
backup-schedule.sh | backup-schedule.sh <status|HH:MM|disable|enable> — panel control over the nightly backup-all run (admin, Backups page). Edits only the backup-all line in /etc/cron.d/skypanel; everything else untouched. Disabled state is a commented line (r |
db-restore.sh | db-restore.sh <dbname> <dumpfile> — restore ONE database from a full dump. Extracts the dump section between mysqldump's "Current Database" markers (plus the CREATE/USE preamble) into mysql. Refuses system schemas. |
file-restore.sh | file-restore.sh <username> <tarball> <member> — extract ONE file from a backup. GUARDED: member must be an exact tar listing entry under home/<user>/ (no globs — the panel passes one validated path); symlinks inside the tarball are never fo |
inc-list.sh | inc-list.sh <username> — list incremental snapshot dates (newest first). |
inc-restore.sh | inc-restore.sh <username> <date> <relpath> — restore one path from an incremental snapshot (date = YYYYMMDD dir). relpath is relative to the snapshot root, e.g. "home/admin/cloudknight.co.uk/public_html/index.html". Ownership repaired to th |
mailbox-restore.sh | mailbox-restore.sh <domain> <localpart> <tarball> — restore one mailbox (whole Maildir) from a backup into the live virtual mail store. The mailbox must still exist (use the Email page to recreate it first). |
offsite-disable.sh | offsite-disable.sh — stop syncing and forget the remote (config stanza + panel settings rows). Offsite DATA is left alone (delete it at the provider if you mean it). The crypt password dies with the config — fetching afterwards needs the pa |
offsite-fetch.sh | offsite-fetch.sh <filename> — pull one file back from the encrypted remote into /backup/skypanel/ (decrypted on the fly by the crypt wrapper), so the existing browse/restore/download UI works unchanged. Filename is validated like the rest o |
offsite-setup.sh | offsite-setup.sh provider=v k=v ... — configure the offsite backup remote (admin, Backups page). Providers: s3 (any S3-compatible: AWS, Backblaze B2, Wasabi, Hetzner, R2, MinIO) | sftp | local (USB mount etc.). Layout in rclone.conf: [offsi |
offsite-status.sh | offsite-status.sh — TSV for the Backups page: configured, provider, target, last sync line, remote file count + size. Panel runs as nobody; this runs privileged (root-only rclone.conf). Never prints secrets. |
offsite-sync.sh | offsite-sync.sh — nightly mirror of /backup/skypanel to the encrypted offsite remote (configured via offsite-setup.sh). rclone sync = offsite converges to local (deletes remote files deleted locally past retention — the 14-day local prune i |
restore-account.sh | restore-account.sh <username> <filename> — restore an account from a panel backup tarball. GUARDED: filename must be a plain *.tar.gz inside /backup/skypanel; only members under home/<user>/ are extracted, excluding the backup staging dir i |
Vhosts, per-user PHP pools and sandboxing, SSL, one-click apps, and the bot shield. The machinery behind every site on the server.
| Script | What it does |
|---|---|
flarum-install.sh | flarum-install.sh <domain> <owner> <subdir> <db> <dbuser> <dbpass> <title> <user_id> <domain_id> <url> <admin_email> <admin_user> <admin_pass> One-click Flarum 2.x (modern forum) via its CLI installer — database, settings and admin account |
fpm-harden.sh | fpm-harden.sh [--all | username] — re-apply pool hardening (disable_functions, open_basedir, memory cap, nice) by regenerating pool files via php-pool.sh. Idempotent: regenerating an already-hardened pool is a no-op reload. Weekly via cron |
fpm-sandbox.sh | fpm-sandbox.sh off — turn the systemd sandbox off for PHP-FPM (as root). On: read-only system except site write folders, own process list and /dev/shm, setuid and low-level calls blocked, mail() still works. Applied automatically on update; a version that won't start is put back without it. |
fpm-status.sh | fpm-status.sh — TSV per user pool for Admin > PHP pools (panel runs as nobody and can't read pool files; this runs privileged via ServiceManager). Columns: user, php-version, max_children, hardened(yes/no), memory_limit, nice |
maintenance.sh | maintenance.sh <domain> <on|off> — park a site behind a holding page by swapping the vhost docRoot between public_html and a maintenance/ dir (no rewrite interplay, no .htaccess dependency). Holding page is branded per domain and created on |
ols-throttle.sh | ols-throttle.sh — per-IP request-rate caps in the global perClientConnLimit block (fresh installs via the openlitespeed lib, existing boxes by hand). Connection COUNT was already capped (10000); request RATE was unlimited, so an RPS flood f |
opcache-set.sh | opcache-set.sh <81|82|83> <on|off> — toggle Zend OPcache for one PHP-FPM version. |
php-pool-remove.sh | php-pool-remove.sh <username> — drop all FPM pools for a user. Idempotent. |
php-pool.sh | php-pool.sh <username> <81|82|83> [max_children] — create (or move) a user's PHP-FPM pool. One pool per user in their CURRENT version only; switching versions removes the old pool and creates the new one. OLS talks to it via an `fcgi` handl |
php-switch.sh | php-switch.sh <domain> <8.1|8.2|8.3> [max_children] — move a user's PHP-FPM pool to another version. The OLS handler (fcgi:fpm-<user>) is version-independent, so no vhost edit needed. |
phpbb-install.sh | phpbb-install.sh <domain> <owner> <subdir> <db> <dbuser> <dbpass> <title> <user_id> <domain_id> <url> One-click phpBB (pinned 3.3.19) into a docroot subdir. Finish via the web installer (database page comes pre-filled from config.php — just |
preview-add.sh | preview-add.sh <domain> <token> — serve preview-<token>.<domain> from the domain's vhost (vhAliases, exact host). DNS wildcard (*.preview) is managed panel-side (DB row + zone re-render); this script only touches OLS. Idempotent. HTTP only |
preview-remove.sh | preview-remove.sh <domain> <token> — drop the preview alias from the vhost. DNS wildcard stays (shared, harmless); token row dies panel-side. |
ssl-issue.sh | ssl-issue.sh <domain> <email> |
ssl-remove.sh | ssl-remove.sh <domain> — drop the Let's Encrypt cert on domain delete so renewals stop failing against dead DNS. Refuses while any panel domain row still references the name (shared/sibling cases); mail-cert marker cleared when it points at |
ssl-renew-hook.sh | ssl-renew-hook.sh — certbot --post-hook: web + ftp restarts (as before) plus re-sync of the mail cert (LE renews ~60d; without this mail silently falls back to... nothing breaks, but the synced files would go stale at expiry). Reads the dom |
ssl-selfsigned.sh | ssl-selfsigned.sh [cn] — TLS for panel (:8090) + webmail (:8091) + phpmyadmin (:8092) with a self-signed cert. For LAN-only servers where Let's Encrypt can't reach. Idempotent. When going public, run certbot + scripts/ssl-issue.sh, which re |
vhost-add.sh | vhost-add.sh <domain> <username> [php_version] |
vhost-alias.sh | vhost-alias.sh <domain> <alias> — park an extra domain on an existing vhost. Web-only (no mailboxes for aliases): creates the BIND zone for the alias and adds it to the vhost's vhAliases. Idempotent. |
vhost-remove.sh | vhost-remove.sh <domain> <username> — remove vhost, OLS registration, Exim maps, docroot. SAFE: docroot is deleted ONLY if it is exactly /home/<user>/<domain>/public_html. Missing pieces are skipped. |
vhost-unalias.sh | vhost-unalias.sh <domain> <alias> — detach a parked domain (vhost + its zone). Idempotent. The main domain and its files are untouched. |
vvveb-install.sh | vvveb-install.sh <domain> <owner> <subdir> <db> <dbuser> <dbpass> <title> <user_id> <domain_id> <url> <admin_email> <admin_user> <admin_pass> One-click Vvveb CMS (website builder) via its CLI installer — database, site and admin account are |
wp-autoupdate.sh | wp-autoupdate.sh <on|off|status> <docroot> — WordPress auto-update policy without wp-cli: a must-use plugin (plugins+translations auto, themes stay manual) + WP_AUTO_UPDATE_CORE=minor in wp-config.php (security releases only — major version |
wp-install.sh | wp-install.sh <domain> <owner> <subdir> <db> <dbuser> <dbpass> <title> <user_id> <domain_id> <url> One-click WordPress into a docroot subdir (empty = domain root). Finish by visiting /wp-admin (web installer creates the admin account there) |
Authoritative zones, DNSSEC signing, and secondaries. The phone book of the operation.
| Script | What it does |
|---|---|
dns-add-zone.sh | dns-add-zone.sh <domain> [ns1] [ns2] — default zone (reseller NS supported) |
dns-remove-zone.sh | dns-remove-zone.sh <domain> — remove BIND zone file + registration, reconfig. Missing pieces are skipped (idempotent). |
dns-save-zone.sh | dns-save-zone.sh <domain> — validate staged zone, install, reload. Fails loudly on bad zones. |
dns-secondary.sh | dns-secondary.sh <domain> <ip1>[,ip2] — allow zone transfers to (and notify) secondary nameserver(s) for one zone. Empty ip list clears back to primary-only. Edits only that zone's stanza in zones.skypanel (never other zones), validates wit |
dnssec-disable.sh | dnssec-disable.sh <domain> — stop signing (stanza back to plain master). Keys are KEPT so re-enabling reuses them and the registrar DS stays valid. |
dnssec-enable.sh | dnssec-enable.sh <domain> — sign a zone with inline-signing under dnssec-policy default (BIND 9.18+: auto-dnssec is deprecated). BIND fully owns key lifecycle (CSK, automatic rollovers) — the panel only triggers and reports the DS. Key dir |
dnssec-status.sh | dnssec-status.sh <domain> — "signed yes|no" + DS lines (for the panel UI). |
Mailboxes, forwarders, lists, autoresponders, DKIM, spam filtering, and delivery scoring. The full mail stack, script by script.
| Script | What it does |
|---|---|
autoreply-sync.sh | autoreply-sync.sh — rebuild Exim vacation-reply data from the panel DB. AUTHORITATIVE (unlike email-reconcile.sh): disabled/deleted mailboxes vanish from the maps, so call this after every autoresponder/mailbox/domain change. Layout (taint- |
dkim-gen.sh | dkim-gen.sh <domain> [selector] — create a 2048-bit DKIM key for outbound signing. Private key stays root/Debian-exim-only; prints the DNS TXT to publish. Idempotent: existing keys are reused (rotating breaks published signatures). |
dkim-status.sh | dkim-status.sh <domain> [selector] — "signed yes|no" + TXT record (panel UI). |
email-add.sh | email-add.sh <address> <owner> — register a virtual mailbox (Dovecot SQL + Exim virtual delivery). No system user involved: auth comes from the panel DB, mail lands in /var/mail/virtual. |
email-filters-sync.sh | email-filters-sync.sh — rebuild sieve scripts + Exim filter map from the DB. Boxes WITH active rules get /var/lib/skypanel/sieve/<domain>/<box>.sieve (compiled) and a line in /etc/exim4/virtual/filtered, which routes their mail through Dove |
email-reconcile.sh | email-reconcile.sh — repair virtual-mail maps/dirs from the panel DB + migrate legacy ~/Maildir mail into the right virtual boxes. IDEMPOTENT, additive-only: it never deletes map lines or mail (orphans are REPORTED for manual review). Migra |
email-remove.sh | email-remove.sh <address> — drop a mailbox: Exim map lines + its virtual Maildir. Idempotent. The domain itself (and other boxes) is untouched. |
exim-acl-patch.sh | exim-acl-patch.sh — idempotently insert the weekend scan-skip block into the LIVE /etc/exim4/exim4.conf (which carries substituted secrets, so it is patched, never overwritten). Anchored on the stock spam-scan lines; a marker comment makes |
forward-add.sh | forward-add.sh <from> <targets> — register/refresh a forwarder line. <targets> is comma-separated; every target must be a plain address (no pipes/files — Exim would never run them, but refuse loudly anyway). Self-forward (loop) is refused. |
forward-remove.sh | forward-remove.sh <from> — drop a forwarder line. Idempotent. |
list-sync.sh | list-sync.sh — rebuild mailing-list maps from the panel DB. AUTHORITATIVE: removed lists/members vanish. Layout (taint-safe lookups only): /etc/exim4/virtual/lists — "list@domain: /etc/exim4/virtual/listmembers/<domain>/<list>" .../ |
mail-autoconfig.sh | mail-autoconfig.sh <domain> <owner> — drop client-setup XML into the docroot so Thunderbird/Outlook/Apple Mail/K-9 configure from email+password alone. No DNS, certs or vhosts needed: both clients fall back to domain-root paths (TB: /.well- |
mail-cert-sync.sh | mail-cert-sync.sh <domain> — point Dovecot + Exim at the domain's Let's Encrypt cert so mail clients (Thunderbird autodiscover etc.) stop hitting the self-signed IP cert. Single shared pair in /etc/ssl/skypanel/ (multi- domain SNI is future |
mail-name.sh | mail-name.sh — print Exim's primary_hostname (this box's mail identity). Used so system-mail forwarding (root@) targets the right domain. |
mail-queue.sh | mail-queue.sh <summary|flush|frozen|thaw-frozen|drop-frozen|drop-all> — Exim queue ops for the panel (runs as root). summary: counts; flush: one queue run; frozen: list frozen ids ( capped ); thaw-frozen: retry frozen; drop-frozen: delete f |
mail-score.sh | mail-score.sh <domain> — 0-100 deliverability score from fast local checks: SPF 25 / DKIM 25 / DMARC 20 / MX 15 / STARTTLS 15. Prints score=N plus one "<key>=<pts> <text>" line per check. Tight timeouts: must finish well inside the panel's |
mail-sent.sh | mail-sent.sh <username> — authenticated SMTP submissions TODAY across all of the user's mailbox addresses (what the rate limiter counts). Reads the live mainlog only (rotated logs excluded), so the number resets daily by nature. Prints an i |
mail-usage.sh | mail-usage.sh <address> — print mailbox usage in MB (one number, for the panel). Reads Dovecot's quota accounting (same numbers IMAP REPORTs), not du. |
malware-scan.sh | malware-scan.sh — nightly docroot antivirus sweep. Runs daily via cron (off-peak; on-access scanning is deliberately NOT used — fanotify is unavailable in LXC and taxes every request on small boxes). Uses clamdscan (daemon, multithreaded); |
The file manager backend and FTP provisioning: moving, renaming, zipping, and permissioning files as the right user.
| Script | What it does |
|---|---|
file-chmod.sh | file-chmod.sh <username> <relpath> <name> <mode> — set permissions. GUARDED: mode must be exactly 3 octal digits; owner/group stay with the user (never root, never executable-by-others beyond 755). No setuid/setgid bits. |
file-del.sh | file-del.sh <username> <relpath> <name> — delete one file or directory inside a user's home. GUARDED: no .., no absolute paths, never the home root itself, never a live domain root (use domain delete for those — it tears down vhost/DNS/mail |
file-get.sh | file-get.sh <username> <relpath> <name> — print one text file for the panel editor. GUARDED like file-del.sh. Refuses binaries (NUL byte) and files over 512KB. |
file-mkdir.sh | file-mkdir.sh <username> <relpath> <name> — create one directory level. file-new.sh <username> <relpath> <name> — create one empty file. Shared guards with file-del.sh (containment, no home root, validated names). |
file-new.sh | file-mkdir.sh <username> <relpath> <name> — create one directory level. file-new.sh <username> <relpath> <name> — create one empty file. Shared guards with file-del.sh (containment, no home root, validated names). |
file-put.sh | file-put.sh <username> <relpath> <tmpfile> <filename> — place a panel-uploaded file into a user's home (relpath is relative to /home/<user>, e.g. "<domain>/public_html"). The web worker (nobody) can't write user homedirs, so PHP stages the |
file-rename.sh | file-rename.sh <username> <relpath> <oldname> <newname> — rename within one dir. GUARDED like file-chmod.sh: both names validated, realpath must stay inside the home, no symlinks, target must not exist. Never touches home root. |
file-unzip.sh | file-unzip.sh <username> <relpath> <archive> — extract a zip in place. GUARDED: archive validated; listing scanned for absolute paths / .. entries (zip-slip) before anything is written; result chowned to the user. |
file-zip.sh | file-zip.sh <username> <relpath> <archive> <name>... — zip a selection into one archive in the same dir. GUARDED like file-rename.sh: all names validated, everything must resolve inside the home, no symlinks, archive must not exist yet. Ref |
ftp-add.sh | ftp-add.sh <login> <password> <homedir> |
ftp-passwd.sh | ftp-passwd.sh <login> <newpass> — rotate one FTP suffix account's password. Underscore REQUIRED: main-account passwords sync via password-sync.sh instead. |
ftp-remove.sh | ftp-remove.sh <login> — drop one FTP suffix account (system user + allow-list). Underscore REQUIRED: main accounts are never removed here (account delete owns those). |
ftp-tls.sh | ftp-tls.sh [domain] — pin vsftpd to the LE cert and force TLS-only logins. Idempotent set-or-replace (never duplicates lines). Without this, FTP silently stays plaintext (ssl_enable=NO) even after LE is issued for the site — clients fall ba |
Watchers, tripwires, jails, and shields. The scripts that notice trouble and do something about it.
| Script | What it does |
|---|---|
egress-watch.sh | egress-watch.sh [--seed] — webshell canary: sample established outbound TCP, attribute to system users, alert ONCE per new (user, destination). Sampling (not tracing): short-lived connections between ticks are missed — this catches beacons |
fail2ban-panel.sh | fail2ban-panel.sh <filter-src> — enable the panel-login jail on an existing box (fresh installs get it from the installer). Idempotent: skips present pieces, reloads fail2ban, verifies the jail is up. |
integrity-check.sh | integrity-check.sh [--baseline] — tripwire-lite for the box's own brains: panel code, privileged scripts, and the configs that control mail, firewall and schedule. Anything changing outside the known writers (panel-update, ssl-issue, exim-a |
ufw-manage.sh | ufw-manage.sh <status|allow|deny|block|delete> [args] — panel-safe UFW control. GUARDED: SSH (port 22) rules can never be deleted (lockout protection); ports strictly validated; IPs must parse; rule numbers numeric only. |
user-abuse.sh | user-abuse.sh — every 5 min: snapshot per-user CPU/MEM/processes to /var/lib/skypanel/abuse.json (the admin Abuse board reads it — no costly ps/du inside web requests) and alert on SUSTAINED offenders: >150% CPU (1.5 cores) or >25% RAM on t |
waf-shield.sh | waf-shield.sh <domain> <on|off> [--no-reload] — toggle the bot-shield rewrite block in a vhost.conf (marked SHIELD-START/END, before the front controller). Blocks casual mass-scan traffic (traversal, sqli-in-query, shell paths, dotfile expo |
Keeping daemons alive and knowing when they are not: health checks, watchdogs, disk janitors, and alerts.
| Script | What it does |
|---|---|
app-daemon.sh | app-daemon.sh <create|remove|start|stop|restart|on|off> <username> <name> [command] [workdir] Supervised user processes as systemd units (karnak-<user>-<name>.service). GUARDED: name strict; workdir must sit inside the user's home; the comm |
app-log.sh | app-log.sh <username> <name> [lines] — journal tail for one supervised app. |
app-status.sh | app-status.sh <username> <name> — "active|inactive enabled|disabled" for one daemon. |
cron-monitor.sh | cron-monitor.sh — dead-man alerts for user cron jobs. Every 5 min via cron. A job with expect_min set must FINISH (any exit) at least that often, plus grace_min slack. Overdue jobs mail the OWNER once per episode + panel-notify them; a fres |
cron-sync.sh | cron-sync.sh <username> — rebuild /var/spool/cron/crontabs/<user> from DB |
cron-wrap.sh | cron-wrap.sh <jobid> <command...> — run a user cron job with logging. Appends START/END/EXIT lines + capped output to ~/.skypanel-cron/<id>.log (panel-readable via ACL) so the Cron page shows last-run state. |
disk-clean.sh | disk-clean.sh <staging|sessions|releases> — safe purges only. staging: orphaned upload fragments (>1 day). sessions: dead PHP sessions (>7 days; live ones are touched constantly). releases: keep newest TWO version dirs (current + rollback t |
expiry-check.sh | expiry-check.sh — daily domain + SSL expiry watch. Alerts (mail + panel notify to the domain OWNER) when either drops to 30/14/7/1 days, once per band; above 30d the state clears silently. Caches both dates on domains for the Domains page. |
push-chat.sh | push-chat.sh <bot-token> — list recent chats that messaged the bot (panel "Find my chat"). Message the bot anything first, then run: prints one "chat_id name" per line for the UI to offer. Token validated by shape only here; Telegram itself |
push-digest.sh | push-digest.sh [--test] — phone pager for box-level urgents via a Telegram bot. Polls recent admin-scope notifications (user_id NULL) of urgent types and sends them with sendMessage. Default OFF (no settings = silent exit). No inbound ports |
server-ip.sh | server-ip.sh — print the primary outward IPv4 (used for default DNS records) |
service-control.sh | service-control.sh <restart|start|stop|status> <service-key> |
service-watchdog.sh | service-watchdog.sh — restart critical units that died. Runs every 5 min via cron. Logs recoveries to the panel log. Never touches ssh/cron themselves blindly: restarting those is safe (no config change), so they're included — a dead cron i |
session-kill.sh | session-kill.sh <sid> — destroy one panel session file. Strict basename handling: the sid can never escape the sessions dir. |
session-list.sh | session-list.sh — list panel sessions (runs as root: the sessions dir is drwx-wx-wt, i.e. listable only by root by design). Tab-separated: sid, username, role, last-activity-epoch. |
watchdog-status.sh | watchdog-status.sh — last-run age for the panel banners (Services + Notifications). Prints "age=<seconds>" or "age=never". Panel runs as nobody; the heartbeat file is world-readable by design (a timestamp, no secrets). |
Safe self-updates with rollback, version probes, and moving whole servers or cPanel accounts in.
| Script | What it does |
|---|---|
build-panel-update.sh | build-panel-update.sh [version] — assemble the self-update package the panel Update UI accepts, at /tmp/karnakpanel-panel-<ver>.tar.gz. panel-update.sh is strict and refuses anything else, so this mirrors its gates exactly. Layout at tarbal |
cpmove-import.sh | cpmove-import.sh <tarball> <cpuser> <paneluser> <domain> — import a cPanel full backup (cpmove-USER.tar.gz) into an EXISTING panel user + domain. DETACHED (runs longer than the panel sudo timeout): backgrounds into /var/log/karnakpanel/soft |
panel-fetch-update.sh | panel-fetch-update.sh — one-click update import for the Update page. Downloads the LATEST signed panel-update package from the release feed into the panel staging dir (verified SHA256; signature itself is verified later by panel-update.sh b |
panel-rollback.sh | panel-rollback.sh [release] — revert panel+scripts to a kept release (default: the newest release that ISN'T current). Restores the matching pre-upgrade DB dump when one exists. DETACHED like panel-update.sh; watch update.log. |
panel-transfer-import.sh | panel-transfer-import.sh <bundle.tar.gz> [--finish] [--force] — restore a panel-transfer.sh bundle onto a FRESH box (run as root on the TARGET). VERSION GATE: bundle MANIFEST version must equal the local panel VERSION. Update the target fir |
panel-transfer.sh | panel-transfer.sh [--out DIR] — export a server-transfer bundle (run as root on the SOURCE box). READ-ONLY: dumps config + databases, never mutates. Bundle holds everything small and machine-specific: panel DB dump, customer MySQL dumps, BI |
panel-update.sh | panel-update.sh <tarball> — safe self-update for KarnakPanel itself. DETACHED (web timeout): all work backgrounds into /var/log/karnakpanel/update.log. Tarball layout (built by packaging the repo): MANIFEST — VERSION=<x.y> line ( |
system-reboot.sh | system-reboot.sh [go|cancel] — reboot (or cancel a pending reboot) DETACHED. The panel sudo wrapper kills scripts after 15s, but shutdown returns instantly: "go" schedules +1 min so the panel can flash back first. Without args it only REPOR |
system-update.sh | system-update.sh [go] — apt update + upgrade for the whole box, DETACHED. The panel sudo wrapper kills scripts after 15s, so the real work backgrounds into /var/log/karnakpanel/apt-upgrade.log (watch it in admin Logs). Without "go" it only |
update-check.sh | update-check.sh — daily "is there a newer release?" probe (admin dashboard + update banners). Compares local panel/VERSION against downloads/VERSION with sort -V; severity comes from the newest CHANGELOG section (mentions of "security" = ur |
The fourteen library modules that turn a bare Ubuntu image into a hosting server, in order.
| Script | What it does |
|---|---|
bind.sh | BIND9 authoritative |
clamav.sh | ClamAV antivirus for mail (OPTIONAL — heavy). |
common.sh | common: base packages, users, dirs |
cron-ssl.sh | cron + certbot auto-renew |
exim-dovecot-spamassassin.sh | Exim4 + Dovecot + SpamAssassin (spamd) |
fail2ban-ssh.sh | Fail2ban + OpenSSH hardening |
mariadb.sh | MariaDB |
openlitespeed.sh | OpenLiteSpeed from official repo + default vhost for panel on :8090 |
panel-deploy.sh | Deploy panel code into /usr/local/skypanel/panel + wire OLS vhost docroot |
php-fpm.sh | PHP-FPM per-user pools (customer PHP isolation). Ubuntu 24.04 / Debian 13 repos (Debian uses the Debian PHP repository, key pinned in the installer) |
php-multiphp.sh | LSPHP multiple versions 8.3 8.4 8.5 |
phpmyadmin.sh | phpMyAdmin on :8092 (OpenLiteSpeed + LSPHP83 + local MariaDB) |
roundcube.sh | Roundcube webmail on :8091 (OpenLiteSpeed + LSPHP83 + local Dovecot/Exim) |
vsftpd.sh | vsftpd with virtual-user friendly defaults (system users chrooted) |
Small gears: logging, downloads stats, release checks, and the bits that glue everything together.
| Script | What it does |
|---|---|
dev-snapshot.sh | dev-snapshot.sh [label] — poor-man's versioning for a git-free repo (run on the DEV host after each feature). Copies the project tree (minus runtime) to ~/snapshots/<date>-<label>/ plus a sha256 manifest, keeps the last 10. Answers "what ch |
download-digest.sh | download-digest.sh — weekly append of download-stats.sh to a cumulative log (log rotation would otherwise eat history). Runs Mondays 06:15 via cron. |
download-stats.sh | download-stats.sh — install/download counts from the WEBSERVER's own logs. No beacons, no fingerprints: counts GETs of release artifacts served from /downloads (tarball + installer + VERSION), per file and per-day unique IPs. Run on the box |
log-read.sh | log-read.sh <service> [lines] — tail a WHITELISTED log for the panel log viewer. Runs as root (most service logs are 640/600). Anything off-list is refused; line count is clamped so a 1MB OLS error.log can't blow up the web request. |
panel-domain.sh | panel-domain.sh <domain> [admin-email] — onboard the PANEL's own domain at install time: DB rows + zone + vhost + autoconfig (mirrors DomainController::create for the admin user), then LE + services cert ONLY if the domain already resolves |
phpini-set.sh | phpini-set.sh <81|82|83> <key> <value> — change one allowlisted php.ini setting. Backs up first; validates with the FPM config test; rolls back on failure. |
pma-gate.sh | pma-gate.sh <username> <hash|--revoke> — manage the phpMyAdmin Basic-Auth gate. Only a HASH ever crosses here (generated panel-side); plaintext never hits argv/ps. |
release-check.sh | release-check.sh <tarball> — fail the cut if dev-only files ship. Local-only files (COMMANDS.md, internal docs, secrets, scaffolding) must NEVER reach users; the tar include-list is human-edited, so verify output. |
ssh-addkey.sh | ssh-addkey.sh <"type base64 [comment]"> — append a root public key (panel SSH page). Strict shape check, duplicates skipped, perms fixed. Private keys and options (command=, ...) are refused — this file is root login, keep it plain. |
ssh-keygen.sh | ssh-keygen.sh — create a root ed25519 keypair for panel admins (no passphrase: it's for automated/owner use; passphrase-protected keys belong on YOUR machine — see the SSH page how-to). Refuses if a keypair already exists (never silently re |
ssh-password.sh | ssh-password.sh <on|off> — allow or forbid SSH password logins (keys-only mode). SAFETY (never regress): 'off' REFUSES unless /root/.ssh/authorized_keys holds at least one valid public key — disabling passwords with no key = locked out. Res |
ssh-status.sh | ssh-status.sh — TSV for Admin > SSH: password-auth, root-login, key count + fingerprints, panel-generated keypair present. Panel runs as nobody and can't read sshd_config/authorized_keys; this runs privileged. |