# Deckpa

> Manage OpenLiteSpeed, MariaDB, DNS and backups on AlmaLinux from one panel. Start with the free package, on your own server.

Deckpa installs on your own server. Your sites, databases, and backups stay with you, and you manage all of it from one interface.

Deckpa is in private beta. During the beta you can install it on your own server and try it.

Deckhand: 3 sites, free. Captain: unlimited sites, $9 per month or $95 per year. Every feature is included in both. Payment is not open yet. Tax and refund information will be published when payments start.

Run this command on a clean AlmaLinux server; the install script does the rest.

```bash
bash <(curl -fsSL https://get.deckpa.dev/install)
```

**Six reasons to choose Deckpa**

Each one is backed by the panel's code or by a measurement.

- **Your bill does not grow with your sites**: Start with the free package. For more sites, $9 a month per server; sites are unlimited and your server's capacity is the only limit.
- **Your sites keep running if the license lapses**: The panel does not lock. Only creating new sites, databases, FTP accounts, and users stops; you keep managing existing sites.
- **You see problems before your customers do**: 48 checks and 17 alert rules come with the panel. A full disk, a stopped service, or an expiring SSL certificate is reported to you through Telegram or a webhook.
- **The panel never holds root**: The panel runs as an unprivileged user. Tasks that need root go through a fixed command list, and the ones that make changes are written to the audit log.
- **Runs comfortably on a small server**: On a test server the panel used about 115 MB of memory and the system service about 45 MB. Most of the memory is left for your sites.
- **Updates are never installed unverified**: Every update is verified with an Ed25519 signature and SHA256. If verification fails, nothing is installed.

**For teams and for individual administrators**

One panel covers both needs.

- Teams and hosting companies
  - **Three roles: admin, reseller, customer** Each user sees only the sites and screens they are allowed to.
  - **Audit log** Every change that goes through the system service is written to the audit log with who made it and the result.
  - **Reseller role** Give your customers separate accounts that see only their own sites.
- Individual users
  - **One-command install** One command on a clean AlmaLinux server is enough.
  - **Unlimited sites** The only limits are your server's memory, CPU, and disk.
  - **Private beta** During the beta you can install it on your own server and try it.

**Technical summary**

The components that come with the installation, and their versions.

- Operating system: AlmaLinux 9 and 10, Rocky 9, RHEL 9
- Web server: OpenLiteSpeed 1.9
- PHP: 8.3, 8.4, 8.5
- Database: MariaDB 11.8 LTS
- DNS: PowerDNS 5, Cloudflare optional
- SSL: Let's Encrypt, wildcard included
- Cache: Valkey 8, one process per site
- Backup destinations: The server and Google Drive
- Interface languages: Turkish, English

**Frequently asked questions**

**Does it run on my server or on Deckpa's?** It runs on your own server. Your sites' files and databases never leave it; we only receive what is needed for license verification and support (see the Privacy Policy).

**What are the minimum server requirements?** At least 1 GB of RAM and 10 GB of free disk space on the root (/) partition; 2 GB of RAM is recommended. With less than 2 GB of memory, the installer adds 2 GB of swap. The operating system must be AlmaLinux 9 or 10, Rocky 9 or RHEL 9 on x86-64. The installer stops if the server already has another panel or a MySQL or MariaDB server.

**How do I move my existing sites?** The Migration Wizard connects to a CyberPanel or Plesk server over SSH, runs quota and conflict checks and shows you a checklist. Nothing is installed until you approve it. Migration from cPanel is not supported yet.

**Does it host email?** Not yet; mailbox hosting is planned. If a site is connected to Cloudflare and uses Google Workspace, Microsoft 365, Yandex 360 or Zoho Mail, the panel writes the MX and SPF records and you choose the DMARC policy.

**Am I giving the panel root access?** No. The panel itself does not run as root. Actions that need elevated privileges go through a separate system service that can only run a fixed list of commands.

**Does my panel stop if your license server is unreachable?** No. The panel renews its license once a day. If it cannot reach our server, it retries every hour and keeps every function available. The grace period starts when your subscription ends, not when the connection drops.

**Can I run Node.js or Python apps?** There is no dedicated hosting screen for Node.js or Python apps yet; sites run on PHP. An admin account can run ready-made apps such as n8n, Gitea and Ghost with Podman from the Containers screen and connect them to a domain.

**Can I manage the panel through an API?** Not yet. There is no public API, and the panel is managed through its interface. For the same reason, automatic account creation from billing systems is not possible yet.

**What happens to my sites if I remove the panel?** By default, the removal script deletes only Deckpa. The web server, MariaDB, site files and databases stay in place, but because the panel database is deleted too, you can no longer manage the sites from the panel. The other scopes are described in [Uninstalling](https://deckpa.com/en/docs/uninstall).

**Why are there two packages?** So that people who host their own sites or a few client sites on one server can use the panel for free. That is why no feature is held back in Deckhand; backups, DNS, security and monitoring are the same as in the paid package. Those who run their business on the panel and host many sites on a server pay with Captain, and that income funds the development of the panel.

**Why is Deckpa not completely free?** A hosting panel needs ongoing maintenance after it is installed. Keeping up with new versions of the operating system and server software, shipping security updates, and testing every release before it goes out is continuous engineering work. Deckpa does not cover that cost by showing ads in the panel or by selling your personal data. Its only source of income is the Captain package. That income keeps the panel up to date and secure over the long term, and keeps Deckhand free.

**Will Deckhand become paid in the future?** No. Deckhand will stay free. The free package is a permanent part of Deckpa's pricing, not a temporary promotion or a trial period.

**Which sites count toward the free limit?** Only main sites count; on the free package you can create up to 3 main sites. Subdomains, databases and FTP accounts you add under a main site do not count toward this limit.

**I have more than one server. How do I pay?** You choose a package per server. Servers that host 3 or fewer main sites stay free with Deckhand; you only buy Captain for a server that hosts more.

**What changes when I move to Captain?** Only the main site limit is lifted. The panel is not reinstalled; your sites, settings and users stay as they are.

**Is the license tied to one server?** Yes, each license covers a single server. If you need to change servers, the terms for moving a license to the new server will be published when payments start.

**Is there a discount for paying yearly?** Yes. Paying yearly costs 12% less than paying monthly for 12 months.

**Is my data sent to Deckpa?** The content of your sites, your files and your databases are not sent to us. Once license verification is enabled, the panel sends its license details and the server fingerprint; see the [Privacy Policy](https://deckpa.com/en/legal/privacy) for details.

**How do I install it?** The install guide walks you through the one-command install step by step.

Documentation and legal pages are linked below as Markdown files. Remove .md from an address to open the web page.

Every page is also available in Turkish at the same address without the `/en` prefix: <https://deckpa.com/docs.md> is the Turkish version of <https://deckpa.com/en/docs.md>.

## Site pages

- [Home](https://deckpa.com/en): Manage OpenLiteSpeed, MariaDB, DNS and backups on AlmaLinux from one panel. Start with the free package, on your own server.
- [Features](https://deckpa.com/en/features): Sites, databases, DNS, backups and server health in one panel. See what Deckpa does, with sample screens.
- [Security](https://deckpa.com/en/security): The Deckpa panel does not run as root. Unprivileged panel, fixed command list, sign-in protection, audit log and network defense.
- [Pricing](https://deckpa.com/en/pricing): Deckhand: 3 sites, free. Captain: unlimited sites, $9 per month or $95 per year. Every feature is included in both.
- [Contact](https://deckpa.com/en/contact): Contact Deckpa by email. Company details and postal address.

## Getting started

- [Installation](https://deckpa.com/en/docs.md): Installation, requirements, first sign-in and checking that services are running.
- [Updates and release channels](https://deckpa.com/en/docs/update.md): In-panel updates: release channels, signature and SHA256 verification, automatic rollback, and system packages.
- [Command line](https://deckpa.com/en/docs/cli.md): The deckpa command line: doctor, top, reset-user, vhost-custom, service commands, and recovery commands.
- [Panel settings](https://deckpa.com/en/docs/panel-settings.md): The Settings page: hostname, panel certificate, panel port, custom login address, Cloudflare Tunnel, SSH port, IPv6, and restarting the server.
- [License](https://deckpa.com/en/docs/license.md): The Panel License screen, subscription states, the 7-day grace period, and what is sent to the license server. Verification is off today.
- [Uninstalling](https://deckpa.com/en/docs/uninstall.md): Removing Deckpa: the three scopes, what is deleted, the confirmation, and what to watch for before reinstalling.

## Site management

- [Adding a site](https://deckpa.com/en/docs/add-site.md): Add a domain, choose an isolated Linux user and a PHP version, and connect DNS and a database.
- [PHP version and settings](https://deckpa.com/en/docs/php.md): Pick a PHP version per site, install extensions, change limits.
- [SSL certificates](https://deckpa.com/en/docs/ssl.md): Get and renew Let's Encrypt certificates, use wildcard certificates, and fix common errors.
- [File Manager](https://deckpa.com/en/docs/files.md): Browse, edit, upload, archive and repair permissions of site files from the browser.
- [Databases and phpMyAdmin](https://deckpa.com/en/docs/databases.md): Create MariaDB databases and users, grant privileges, sign in to phpMyAdmin in one click, and connect an application.
- [FTP accounts](https://deckpa.com/en/docs/ftp.md): Create per-site FTP accounts, connection settings, password reset and common problems.
- [Subdomains](https://deckpa.com/en/docs/subdomains.md): Create subdomains, choose a document root, and handle DNS, SSL and deletion.
- [Cron jobs](https://deckpa.com/en/docs/cron.md): Add cron jobs, ready-made templates, schedule modes, the output file and common problems.
- [Site Hub](https://deckpa.com/en/docs/site-hub.md): A tour of the 12 tabs in Site Hub: Overview, Files, Databases, Subdomains, FTP, Cache, Logs, DNS, Cloudflare, Cron, Backups and Settings.

## Operations

- [Backup and restore](https://deckpa.com/en/docs/backup.md): Scheduled backups of site files and databases, cloud destinations, restore.
- [DNS management](https://deckpa.com/en/docs/dns.md): Manage a domain through Cloudflare or with external DNS; track records and propagation.
- [Valkey cache](https://deckpa.com/en/docs/valkey.md): Per-site Valkey cache process, memory tier, connecting an application, the key browser and optional Memcached.
- [App installer](https://deckpa.com/en/docs/apps.md): The app installer: a five-recipe catalog, the install wizard, pre-install checks, how updates work and removal.
- [Containers](https://deckpa.com/en/docs/containers.md): Containers: Podman, a ten-application showcase, the install wizard, reverse proxy to a domain, backup and version upgrade.
- [Services and processes](https://deckpa.com/en/docs/services.md): The Services page: state badges, starting and stopping, service updates, optional installs and the live process manager.
- [Health Check](https://deckpa.com/en/docs/health.md): A 48-check server audit: tiers, state words, priority actions and the deckpa doctor command.
- [Alerts](https://deckpa.com/en/docs/alerts.md): Server and site alert rules, thresholds, severity levels, and webhook or Telegram notification channels.
- [Logs](https://deckpa.com/en/docs/logs.md): Panel and server logs, tabs, site access and error logs, retention profiles and disk caps.
- [Virus Scan](https://deckpa.com/en/docs/virus-scan.md): ClamAV site scanning, finding classes, quarantine, removing injected code and enforcement mode settings.
- [Network & Access](https://deckpa.com/en/docs/network.md): The IP allowlist for panel access, firewalld port management, service ports and the panel's own protection rules.
- [Cloudflare management](https://deckpa.com/en/docs/cloudflare.md): The Cloudflare token and its permissions, unmatched domains, DNS records and proxy, DNS mismatches, site setup, email records, cache, access rules, country blocking, traffic analytics, and common errors.

## Users and security

- [Users](https://deckpa.com/en/docs/users.md): Administrator, reseller and customer accounts: creating, suspending and deleting users, and signing in as a customer.
- [Permission groups and packages](https://deckpa.com/en/docs/permission-groups.md): The permission group matrix, the built-in Customer and Reseller groups, package quotas, and what a value of 0 means.
- [My Account and account security](https://deckpa.com/en/docs/account-security.md): Password rules, two-factor authentication, recovery codes, sessions and sign-in lockout.
- [Site migration](https://deckpa.com/en/docs/migration.md): Moving sites from CyberPanel and Plesk: what is migrated, the wizard steps, what to do afterward, and the limits.

## Optional

- [Terms of Service](https://deckpa.com/en/legal/terms.md): Deckpa terms of service: parties, beta period, license scope and transfer, license status, limitation of liability, notices, termination and governing law.
- [Privacy Policy](https://deckpa.com/en/legal/privacy.md): What data reaches us today, what will be processed once license verification and payments start, where and for how long data is processed, and your rights.
- [Cookie Policy](https://deckpa.com/en/legal/cookies.md): deckpa.com itself sets no cookies; only when you press the related button are your theme preference and the fact that you closed the notice stored in your browser. The panel's own cookies are also described.
- [Service Level Principles](https://deckpa.com/en/legal/sla.md): Which central services are covered, how the panel behaves during an outage, how to contact us and report a vulnerability, and the commitments to be published once payments start.
- [All documentation](https://deckpa.com/llms-full.txt): Every documentation page in English, in a single Markdown file.