Documentation
Everything you need to install, run and safely use bipanel: system requirements and the one-command install, where every tool lives in the panel and how it works technically, which edition and install type it is available in, and how your server is protected.
Quick start
One command as root on a clean server. The bootstrap downloads the latest stable release, verifies its SHA-256 checksum and starts the installer.
curl -fsSL https://bipanel.io/install.sh | sudo bash -s -- --hostname server.example.com --email [email protected]Contents
Getting started
Prepare the server and install bipanel; licensing, updates and troubleshooting. 8 pages
System requirements
Supported operating systems, CPU architectures, memory and disk sizing, firewall ports and hostname prerequisites for a bipanel server install.
Installing on a server
Install bipanel on a fresh Ubuntu, Debian, AlmaLinux, Rocky Linux or RHEL server with one command: install.sh options, what gets installed, first login.
Running on Docker and Railway
Run bipanel as a single container with Docker Compose and Caddy or on Railway: environment variables, the /data volume and container mode differences.
First steps after installation
After installing bipanel: sign in on ports 2087 and 2083, secure the admin password with 2FA, get the hostname certificate, create a package, an account, DNS.
Licensing: Community and Pro
Community vs Pro, the 3-account limit, activating and moving a Pro license, offline validation, and exactly what the mandatory installation report sends.
Panel updates
bipanel updates: the lts, stable, release, current and edge channels, series pinning, automatic installs, signature checks, update.sh and container images.
Automatic security updates
bipanel installs only security updates on the server in the window you choose: window, excluded packages, history, service checks and reboots.
Troubleshooting
bipanel troubleshooting: panel unreachable, forgotten admin password, service logs, SELinux, disk quotas, email delivery, SSL and update failures.
Features
Every tool: what it does, where it is in the panel, how it works, and which edition and install type it is available in. 21 pages
Websites and PHP
Addon, sub and alias domains in bipanel, document roots, per-site PHP versions, PHP settings and extensions, redirects and site protection.
Web server and caching
The bipanel web stack: Apache with mpm_event, the Nginx front end and cache, OpenLiteSpeed and Varnish (Pro), HTTP/2, compression and security headers.
SSL certificates
Automatic Let's Encrypt certificates and renewal, HTTP-01 and DNS-01 validation, wildcards, purchased certificates, CSRs and the hostname certificate.
Applications: Node.js, Python and other languages
Deploy Node.js, Next.js, Python, Ruby, Go, Java and .NET apps with bipanel from Git: process supervision, logs, releases and preview environments.
App catalog and WordPress
One-click app installs, the WordPress Toolkit, staging, the Laravel Toolkit and Site Builder templates: how they work and which parts are Pro.
Containers, one-click services and Redis/Memcached
Per-account rootless Podman containers, one-click service templates, Redis and Memcached instances, limits and isolation in bipanel Pro.
Files, FTP, Web Disk and terminal
The bipanel File Manager, FTP and FTPS with Pure-FTPd, WebDAV-based Web Disk, SSH keys, the jailed shell and the web terminal.
Databases: MySQL/MariaDB and PostgreSQL
MySQL/MariaDB and PostgreSQL databases, users and privileges, one-click phpMyAdmin and Adminer, remote access, package limits and backups.
Email
The bipanel mail server: mailboxes, quotas, forwarders, filters, Rspamd spam protection, SPF/DKIM/DMARC, webmail, migration and Pro features.
DNS management
bipanel DNS: zone editor, zone templates, BIND and PowerDNS, external DNS providers, dynamic DNS, DNS clustering and DNSSEC (Pro).
Backups and migration
bipanel full account backups, incremental restic backups, backup destinations, schedules and retention, restores and moving accounts between servers.
Disk Manager
Merge a new disk into an LVM volume, prepare it as an extra home volume such as /home2, or grow an enlarged virtual disk online.
Accounts and packages
Creating accounts, package limits, suspension, termination and restore, password policy, demo accounts, renaming and bulk actions in bipanel.
Resellers, team access and branding
bipanel reseller hierarchy, reseller limits and overselling, white-label branding, team members, administrator roles and support access, by edition.
Monitoring, resource limits and statistics
bipanel service monitoring and auto-recovery, resource alerts, site monitoring, cgroup limits, disk quotas, GoAccess statistics and logs.
Security tools
bipanel security tools: firewall, Fail2Ban and CrowdSec, ModSecurity, country blocking, attack detection, security headers and the Security Advisor.
Remote desktop
Use the server's XFCE desktop and Chrome from your browser: requirements, installation, the 2FA-based security model, settings and the Pro edition.
AI assistant and MCP
The Pro AI assistant (Anthropic, Google Gemini) and the MCP server for Claude Desktop, Claude Code and OpenAI Codex: setup, tokens and permissions.
REST API, command line and hooks
bipanel REST API tokens, Bearer authentication, the in-panel API Shell, the bipanel command-line tool, and Pro hook scripts and plugins.
Billing integrations
Automatic account provisioning, suspension, termination, package mapping and single sign-on with the WHMCS and Blesta modules, plus token setup.
Cluster and cloud servers
Manage several bipanel servers from one panel: roles, DNS cluster, config sync, remote database servers, account moves and cloud server provisioning.
Security
How bipanel protects your server, from account isolation to signed updates. 7 pages
Security
The bipanel security model: account isolation, panel security, network protection, malware scanning, vulnerability monitoring and safe updates.
Account isolation
How bipanel separates accounts: system users, per-account PHP-FPM, open_basedir, jailed shell, cgroup limits, SELinux and Pro account isolation.
Panel security
How bipanel protects sign-ins: two-factor authentication, sessions, brute-force blocking, CSRF, re-authentication, activity log, API tokens and SSO.
Network and attack protection
How the bipanel firewall (UFW/firewalld), DDoS protection, Fail2Ban, CrowdSec, country blocking, attack detection and Cloudflare Tunnel work.
Malware scanning and file integrity
bipanel ClamAV virus scanning, heuristic web shell detection, quarantine, site and system file integrity monitoring, lock mode and file safety.
Vulnerability monitoring
bipanel inventories installed packages and components, bipanel.io matches them against known vulnerabilities; alerts, KEV and how fixes arrive.
Safe updates and configuration
bipanel verifies updates with Ed25519 signatures and SHA-256 digests, rolls back failed releases and tests configuration changes before applying them.