Administration and reselling

The server administration tools. Those marked "administration only" are not shown to resellers; the others are shown if the administrator grants them.

Accounts Plans Resellers Migration Email DNS Security Server Databases Software Backups Network and certificates API and integrations

Accounts

Create account: Create a hosting account with domain, plan, quota and contact. The account is isolated (CageFS and LVE limits) from the start.
List accounts: All accounts on the server (or the reseller's), with domain, plan, disk use, status and owner, and search.
Suspend and reactivate: Suspend an account (sites, mail and panel login stop) and reactivate it, with the reason recorded.
Log in as client: Open an account's panel without the client's password, to give support. It is recorded in the audit log, and sensitive operations still require the client.
Resource manager (LVE): Each account's CPU, memory, process and entry-process limits, the accounts that use the most, and alerts for limits reached.
CloudLinux LVE Manager administration only: CloudLinux's own interface for LVE limits, CageFS, selectors, X-Ray and AccelerateWP. It opens on a separate origin (port 2445), only from the management networks.
Modify account: Change an account's plan, quota, contact, password or owner.
Accounts over quota: Accounts that are over (or close to) their disk or file quota.
Bandwidth: Bytes served by each account's sites, added up from the web server logs every 5 minutes (with Nginx in front, it includes what the cache served). Read only.
Force password change planned: Force an account to choose a new password at its next login. Planned.
Accounts' language: The language of each account's panel and messages (Portuguese or English).

Plans

Plans (packages): The hosting plans: quota, domains, mailboxes, databases, sending limits, two-step requirement and the included features.
Feature lists: Which features each plan includes (WordPress, SSH, applications, Git and others): what is not in the plan is not shown to the client.

Resellers

Resellers administration only: Accounts that create and manage their own client accounts, within the limits you give them. They always sign in with two-factor authentication.
Reseller permissions administration only: What each reseller can do, one permission at a time, and their account and disk limits.
Change account owner administration only: Move accounts from one reseller to another, or to the administration.
Custom nameservers: The names your accounts' zones show as nameservers (ns1.your-brand.com…). Each must point, in public DNS, to this server: first create the records and the glue at the domain registrar.

Migration

Import from cPanel (cpmove) administration only: Bring accounts over from cPanel servers: from a backup archive, by direct copy from the source server, or streamed with a second pass for whatever changed. Anything that cannot come is listed in a report.
Copy from a cPanel server administration only: Copies accounts from another cPanel server over SSH, with a key only. The archives go to the import folder; then scan and import them in Import.

Email

Mail queue administration only: Messages waiting for delivery. The "frozen" ones include those from mailboxes with sending held.
Sending per domain and holds administration only: How much mail each domain sent, those over the hourly limit or with too many failures, and the mail held because of it.
Delivery reports administration only: Deliveries, deferrals and failures for each panel domain, from the mail log (the last 8 MB). Read only.
Deliverability (SPF, DKIM, DMARC) administration only: What public DNS says about each domain's mail. SPF include: mechanisms are not followed: they are left to confirm. Read only.
Outbound relay (MailChannels) planned administration only: Send the server's mail through an external relay. Planned.

DNS

Zone template administration only: The records each new domain gets in DNS. The nameservers, DKIM and the server's own addresses are always added by the panel. Changing the template does not touch existing zones.
Server zones administration only: All zones on the DNS server, with the owner account. Delegation is looked up in public DNS: it shows whether the domain points to this server's nameservers.
Bulk DKIM and SPF administration only: In every panel zone: adds the template's SPF where there is none and publishes the DKIM key the server signs with. An existing SPF is never replaced (the customer may use another mail service).
Nameservers administration only: This server's nameservers and what public DNS says about them. Read only: they are changed in /etc/sakercp/sakercp.json (nameservers and ns_addresses), because changing them affects every zone.

Security

Audit log administration only: Everything done in the panel, by whom, from where and with what result. The log is append-only and hash-chained: a changed or deleted row is detected.
Security advisor administration only: Server and panel checks, with the suggested fix. Some can be fixed here with one click and undone the same way; the others (SSH, CageFS, database, PHP) are done by hand, carefully.
Management networks administration only: The networks administrators can log in from. Planned in the panel; today they are changed in the server configuration.
Root SSH keys planned administration only: Manage root's SSH keys. Left out of the panel on purpose: the panel does not give root access to the server.
Malware found administration only: Malware found by Imunify360 in every account, with the status of each file.
Imunify360 administration only: The server's firewall, antivirus, WAF and proactive defense. The Imunify360 interface opens on a separate origin (port 2445), only from the management networks.
SakerGuard (limits and blocks) administration only: Protection against abusive requests (brute force, scans): per-IP limits, current blocks and exceptions.
Password and two-step: The password and second factor (app or security key) of your own administration account.
API tokens: Keys to automate the panel from scripts and other systems, through the REST API. Each token only does what you choose here, and never more than your account.

Server

Services administration only: Status of the server's services. Only those on this list can be restarted from the panel.
PHP extensions administration only: The extensions of each PHP version apply to every site using that version. Before saving, the panel checks they all load; if one fails, the previous list stays.
Status and resources administration only: The server's load, memory and disks right now. Read only.
Processes administration only: The server's processes, by memory used. Commands are written by the processes' owners: they are shown as text. Read only.
Apache status administration only: What Apache is handling right now and the summary since the last start. With Nginx in front, only the requests that reach Apache appear. Requests come from the internet: they are shown as text. Read only.
MySQL Governor administration only: Controls database usage per account: whoever abuses goes inside their own limit (LVE), and SELECT queries that take too long are killed. View and lift restrictions only; configuration is done in sakercp-setup.
Disk usage administration only: Space on the server's partitions and what takes the most.
Dedicated IPs: Give an account an IPv4 or IPv6 address of its own, for the site, mail and certificate.
Restart the server planned administration only: Reboot the machine from the panel. Planned.

Databases

Server MariaDB administration only: Databases and users of each account, with their sizes, compared with what actually exists in MariaDB. Read only.
Remote database access planned administration only: Allow connecting to the databases from outside the server, only from the IPs set for each user. Planned in the administration; clients already have it for their databases.
phpMyAdmin planned administration only: phpMyAdmin with access to every database. Planned.

Software

PHP versions and extensions administration only: The installed PHP versions (CloudLinux alt-php) and the extensions enabled in each one.
Node.js and Python administration only: The versions customers can choose for their applications (CloudLinux selectors). The "Node.js and Python applications" feature is turned on in the plans.
Nginx and cache planned administration only: The configuration of Nginx in front of Apache and of the cache. Planned in the administration; each account already manages its own site's cache.
SakerCP updates administration only: The panel updates itself from the signed repository, rolling back automatically if the new version does not start. Only the panel's services restart: sites, mail and databases do not stop.
SakerCP licence administration only: The licence belongs to this server, by its public IP, and is confirmed automatically with the licence server every 6 hours. Without contact, the last licence stays valid for up to 7 days. Without a licence, the panel becomes read-only; websites, mail, DNS and databases keep running.

Backups

Backup settings planned administration only: What SakerBackupServer backs up from this server and how often. Planned in the panel; today it is configured on SakerBackupServer.
Restore planned administration only: Restore any account's backups without logging in as the client. Planned for this entry; it already exists in each account.
Destinations (SFTP, S3) planned administration only: Server backup destinations outside SakerBackupServer. Planned.

Network and certificates

IPs (IPv4 and IPv6) administration only: The server's addresses and what public DNS says about them (names and PTR).
Hostname and resolvers administration only: The server's name, its certificate and the DNS servers it uses, compared with public DNS.
Service certificates administration only: The server name's certificate (panel, and mail and webmail without their own certificate) and each domain's (site and, by SNI, mail. and webmail.). They renew themselves 30 days before the end. Read only.

API and integrations

API tokens administration only: Keys to automate the panel from scripts and other systems, through the REST API. Each token only does what you choose here, and never more than your account.
WHMCS planned administration only: Module to create, suspend and delete accounts from WHMCS. Planned.
Notifications administration only: E-mail notices about things that need action. The same notice is never sent twice. Malware and resource limit notices have their own settings.