Guided onboarding
Zone at the nameserver, HTTP-only vhost for the challenge, certificate, then the full HTTPS vhost. Each step is checked before the next one runs.
No half-configured domainFeatures
What the panel actually does.
Written as capabilities, not slogans. Each one exists because a server we operate needed it.
Web
From a name to a hardened site.
Certificates and renewal
ACME issuance and renewal, with a token guard that serves only genuine challenge names and refuses everything else in that path.
Challenge path stays closedSecurity blocks by default
Dotfiles, .env, backup and editor files are refused on every vhost from the first request, so a stray copy never leaks source.
Per-site FPM pools
Own user, own socket, own limits. One site cannot exhaust the workers of another.
Isolated by poolFile manager
Browse and edit a document root inside the panel session, without opening SFTP for an account that should not exist.
No extra access pathHTTP/3 and caching
HTTP/3, HSTS and long immutable cache lifetimes for versioned assets are part of the standard vhost, not an afterthought.
Standard, not optionalMail and access
The parts people forget until they break.
Domains, mailboxes, aliases
One store holds the accounts; the Postfix maps and the Dovecot password file are rebuilt from it in a single step, then both daemons reload.
Never out of syncWebmail per domain
Each mail domain gets its own webmail host with its own certificate.
webmail.<domain>Users, roles and 2FA
The panel login follows the CTPF standard layout and always carries a two-factor field. Rate limiting sits in front of it.
/controller/loginSecurity events
Logins, failed attempts, blocks and rule changes are recorded with source, reason and time, and can be read back in the panel.
Readable afterwardsTimestamped backups
Before a live file is written, a copy with a UTC timestamp is placed beside it. Rolling back is copying one file.
.bak-<timestamp>Licensable modules
CDPGuard is the first separately licensable module. The panel checks the licence itself; no external service is required to serve a site.
Offline capableWant the panel on your servers?
ControlDeskPanel is built and operated by CertThor PlatForms Ltd.