https://jabali-panel.com/docs/ Latest documentation updates for the Jabali open-source hosting control panel. en Tue, 16 Jun 2026 18:56:06 GMT https://jabali-panel.com/docs/admin/directory-privacy/ https://jabali-panel.com/docs/admin/directory-privacy/ Fri, 05 Jun 2026 00:00:00 GMT Admin-side view of the per-subdirectory Basic Auth feature (M50). User-facing copy lives at user/directory-privacy; this page covers operator concerns. https://jabali-panel.com/docs/admin/php-extensions/ https://jabali-panel.com/docs/admin/php-extensions/ Fri, 05 Jun 2026 00:00:00 GMT /jabali-admin/php-extensions. Server-wide PHP extension manager (M9.6, ADR-0031). Installs and enables PHP extensions across every managed PHP version. https://jabali-panel.com/docs/user/directory-privacy/ https://jabali-panel.com/docs/user/directory-privacy/ Fri, 05 Jun 2026 00:00:00 GMT Domains → Edit → Security tab → Directory Privacy. Per-subdirectory HTTP Basic Auth (M50, the cPanel "Directory Privacy" equivalent). https://jabali-panel.com/docs/admin/ https://jabali-panel.com/docs/admin/ Wed, 27 May 2026 00:00:00 GMT Sections: Sidebar groups · What is intentionally *not* here. https://jabali-panel.com/docs/files/ https://jabali-panel.com/docs/files/ Wed, 27 May 2026 00:00:00 GMT /jabali-panel/files. AntD-native (M11, ADR-0030). The earlier daemon was decommissioned 2026-04-19. Filesystem ops run through the agent over Unix… https://jabali-panel.com/docs/ https://jabali-panel.com/docs/ Wed, 27 May 2026 00:00:00 GMT Jabali is an open-source Linux web-hosting control panel. Go agent + React UI, MariaDB-as-truth, reconciler-converged host state. Built as a clean… https://jabali-panel.com/docs/backups/ https://jabali-panel.com/docs/backups/ Wed, 27 May 2026 00:00:00 GMT Two backup kinds: Both are restic-backed (deduplicated, encrypted at rest, multi-destination). /jabali-admin/backups → Destinations: https://jabali-panel.com/docs/applications/ https://jabali-panel.com/docs/applications/ Wed, 27 May 2026 00:00:00 GMT 15 apps, one wizard, one install pipeline. ADR-0033. Every app uses the same 6-step pipeline: /jabali-admin/applications, per-app: https://jabali-panel.com/docs/databases/ https://jabali-panel.com/docs/databases/ Wed, 27 May 2026 00:00:00 GMT MariaDB and PostgreSQL, per-user databases and DB-users, with SSO into phpMyAdmin / pgAdmin. (Both are connected to the panel itself via Unix socket; the… https://jabali-panel.com/docs/cron/ https://jabali-panel.com/docs/cron/ Wed, 27 May 2026 00:00:00 GMT Systemd-user timers + a command allowlist. A Cron Job is: Internally each cron row becomes: Both are owned by the user. runs at user creation so timers… https://jabali-panel.com/docs/dns/ https://jabali-panel.com/docs/dns/ Wed, 27 May 2026 00:00:00 GMT Jabali ships two PowerDNS processes: Split-port setup (ADR-0047): the recursor binds the loopback so local processes (the panel, certbot, Stalwart, etc.)… https://jabali-panel.com/docs/firewall/ https://jabali-panel.com/docs/firewall/ Wed, 27 May 2026 00:00:00 GMT UFW + CrowdSec, with a strict division of labor since M43 (ADR-0089). UFW is demoted: no rules. The CrowdSec bouncers consult decisions in real time and… https://jabali-panel.com/docs/domains/ https://jabali-panel.com/docs/domains/ Wed, 27 May 2026 00:00:00 GMT A Domain is a hosted vhost owned by exactly one user. Each domain row in the panel DB drives a real nginx vhost, the reconciler converges them on every… https://jabali-panel.com/docs/ip-manager/ https://jabali-panel.com/docs/ip-manager/ Wed, 27 May 2026 00:00:00 GMT /jabali-admin/ips. ADR-0049. Lets the admin curate the pool of IPv4 addresses available for per-domain listen IP selection. https://jabali-panel.com/docs/notifications/ https://jabali-panel.com/docs/notifications/ Wed, 27 May 2026 00:00:00 GMT Redis Streams dispatcher → 6 channels → in-app + admin event sources. Admin configures channels at /jabali-admin/notifications/channels: https://jabali-panel.com/docs/email/ https://jabali-panel.com/docs/email/ Wed, 27 May 2026 00:00:00 GMT Jabali's mail stack is Stalwart (SMTP submission + MTA + JMAP + IMAP, single process) + Bulwark (rate-limit / spam policy bridge) + Roundcube webmail. https://jabali-panel.com/docs/migrations/ https://jabali-panel.com/docs/migrations/ Wed, 27 May 2026 00:00:00 GMT Sections: Supported sources · Workflow · Per-source notes · Limitations. https://jabali-panel.com/docs/installation/ https://jabali-panel.com/docs/installation/ Wed, 27 May 2026 00:00:00 GMT If outbound is blocked (some labs), set so the recursor forwards over TCP. The installer is idempotent, safe to re-run. It writes drop-ins, never… https://jabali-panel.com/docs/php/ https://jabali-panel.com/docs/php/ Wed, 27 May 2026 00:00:00 GMT Multi-version PHP via Sury + per-user FPM pools. /jabali-admin/php-pools lists all PHP versions installed on the host. The installer puts Sury's PHP repo… https://jabali-panel.com/docs/quickstart/ https://jabali-panel.com/docs/quickstart/ Wed, 27 May 2026 00:00:00 GMT For brand-new hosts. Assumes Debian 13 (Trixie), root, public IPv4, and DNS pointed at the box. The installer brings up MariaDB, PowerDNS (auth +… https://jabali-panel.com/docs/removed-features/ https://jabali-panel.com/docs/removed-features/ Wed, 27 May 2026 00:00:00 GMT If you're coming from the previous (PHP) Jabali generation or from an earlier dev snapshot of jabali2, here's what's intentionally not in the shipped… https://jabali-panel.com/docs/operations/ https://jabali-panel.com/docs/operations/ Wed, 27 May 2026 00:00:00 GMT Day-2 operator reference. For day-1 install see installation.md. (Domain stays up; user can't log in to the panel UI.) https://jabali-panel.com/docs/ssl/ https://jabali-panel.com/docs/ssl/ Wed, 27 May 2026 00:00:00 GMT Let's Encrypt-only. HTTP-01 challenge over the domain's existing port-80 nginx vhost; no DNS-01. Toggle SSL on a domain (admin: Domains → Edit → SSL… https://jabali-panel.com/docs/security/ https://jabali-panel.com/docs/security/ Wed, 27 May 2026 00:00:00 GMT Layered. CrowdSec is the IP-trust source; UFW handles the port baseline; AppSec WAF replaces ModSecurity; Snuffleupagus + AppArmor harden the application… https://jabali-panel.com/docs/support/ https://jabali-panel.com/docs/support/ Wed, 27 May 2026 00:00:00 GMT /jabali-admin/support. M29. Produces an encrypted diagnostic bundle suitable for emailing to the upstream maintainers without leaking secrets or end-user… https://jabali-panel.com/docs/updates/ https://jabali-panel.com/docs/updates/ Wed, 27 May 2026 00:00:00 GMT /jabali-admin/updates. Updates from the panel UI fire as transient systemd units (). This means: The transient-unit survival was live-verified on… https://jabali-panel.com/docs/troubleshooting/ https://jabali-panel.com/docs/troubleshooting/ Wed, 27 May 2026 00:00:00 GMT Symptom: installer hangs at "Installing CrowdSec" or. Cause: outbound is blocked, so the recursor can't recurse. https://jabali-panel.com/docs/wordpress/ https://jabali-panel.com/docs/wordpress/ Wed, 27 May 2026 00:00:00 GMT WordPress is the first-class app in Jabali's Applications Framework (M10 / M19). /jabali-panel/applications → pick the domain → WordPress → Install. https://jabali-panel.com/docs/server-status/ https://jabali-panel.com/docs/server-status/ Wed, 27 May 2026 00:00:00 GMT /jabali-admin/server-status. Single page, 5-second polling, errgroup-aggregated. Each card has start / stop / restart buttons. Disabled by default, flip… https://jabali-panel.com/docs/sftp/ https://jabali-panel.com/docs/sftp/ Wed, 27 May 2026 00:00:00 GMT Each user manages their own keys at /jabali-panel/ssh-keys: The agent writes with permissions owned by the user. A reconciler tick re-syncs the file on… https://jabali-panel.com/docs/admin/aide/ https://jabali-panel.com/docs/admin/aide/ Wed, 27 May 2026 00:00:00 GMT Security → AIDE. Daily comparison of the host's filesystem against a baseline AIDE database. /etc/aide/aide.conf.d/jabali.conf (managed by the panel)… https://jabali-panel.com/docs/admin/apparmor/ https://jabali-panel.com/docs/admin/apparmor/ Wed, 27 May 2026 00:00:00 GMT Security → AppArmor. Per-profile status surface for the AppArmor profiles the panel ships. Each profile is shipped under /etc/apparmor.d/. The installer… https://jabali-panel.com/docs/admin/appsec/ https://jabali-panel.com/docs/admin/appsec/ Wed, 27 May 2026 00:00:00 GMT Security → AppSec. The Web Application Firewall layer that inspects HTTP requests for malicious payloads. M27, ADR-0060. https://jabali-panel.com/docs/admin/applications/ https://jabali-panel.com/docs/admin/applications/ Wed, 27 May 2026 00:00:00 GMT /jabali-admin/applications. Server-wide controls for the 15-app one-click registry (M10 / M19, see Applications). https://jabali-panel.com/docs/admin/audit-log/ https://jabali-panel.com/docs/admin/audit-log/ Wed, 27 May 2026 00:00:00 GMT /jabali-admin/audit. Append-only structured record of every privileged mutation on the panel (ADR-0106). Every action that changes state writes one row… https://jabali-panel.com/docs/admin/backup-destinations/ https://jabali-panel.com/docs/admin/backup-destinations/ Wed, 27 May 2026 00:00:00 GMT Backups → Destinations. The list of repositories the panel can write restic snapshots to. Each destination has its own restic repository password… https://jabali-panel.com/docs/admin/backup-download/ https://jabali-panel.com/docs/admin/backup-download/ Wed, 27 May 2026 00:00:00 GMT Backups → Download. Generate a single on-demand snapshot and offer it as a download. The download endpoint requires the same admin session that initiated… https://jabali-panel.com/docs/admin/backup-restore/ https://jabali-panel.com/docs/admin/backup-restore/ Wed, 27 May 2026 00:00:00 GMT Backups → Restore. Browse snapshots in any destination and restore an account or the whole system. Pick a destination; the page lists every snapshot… https://jabali-panel.com/docs/admin/backup-schedules/ https://jabali-panel.com/docs/admin/backup-schedules/ Wed, 27 May 2026 00:00:00 GMT Backups → Schedules. The cron expressions that drive periodic backup runs. Each schedule becomes a system timer managed by the agent. The timer triggers… https://jabali-panel.com/docs/admin/backups/ https://jabali-panel.com/docs/admin/backups/ Wed, 27 May 2026 00:00:00 GMT /jabali-admin/backups. The parent surface for backup destinations, schedules, retention, and restore. M30 and M30.1. https://jabali-panel.com/docs/admin/cpanel-migration/ https://jabali-panel.com/docs/admin/cpanel-migration/ Wed, 27 May 2026 00:00:00 GMT The cPanel ingest path. Status: production-supported. The standard produced by cPanel's or. Either format works. https://jabali-panel.com/docs/resource-limits/ https://jabali-panel.com/docs/resource-limits/ Wed, 27 May 2026 00:00:00 GMT Three layers: Enforced on /home. Per-user quota set from the user's package (default + override). Hitting the soft limit warns; hitting the hard limit… https://jabali-panel.com/docs/admin/crowdsec-allowlists/ https://jabali-panel.com/docs/admin/crowdsec-allowlists/ Wed, 27 May 2026 00:00:00 GMT Security → CrowdSec → Allowlists and Scenario Overrides tabs (M27 extensions, ADRs 0061–0063). A persistent list of IPs or CIDR ranges that bypass every… https://jabali-panel.com/docs/admin/crowdsec-decisions/ https://jabali-panel.com/docs/admin/crowdsec-decisions/ Wed, 27 May 2026 00:00:00 GMT Security → CrowdSec → Decisions. Live and historic list of every BAN, CAPTCHA, and ALLOWLIST decision currently in force on the panel host. https://jabali-panel.com/docs/admin/crowdsec-test-ip/ https://jabali-panel.com/docs/admin/crowdsec-test-ip/ Wed, 27 May 2026 00:00:00 GMT Security → CrowdSec → Test IP. Verify what would happen to a given IP address right now without waiting for the IP to attempt a connection. https://jabali-panel.com/docs/admin/dashboard/ https://jabali-panel.com/docs/admin/dashboard/ Wed, 27 May 2026 00:00:00 GMT /jabali-admin/dashboard. First page after admin login. Top-right toolbar: New User · New Domain · Run Backup Now · Open Server Status · Open Audit. https://jabali-panel.com/docs/admin/database-tuning/ https://jabali-panel.com/docs/admin/database-tuning/ Wed, 27 May 2026 00:00:00 GMT Server Settings → Database → Tuning. The curated MariaDB / PostgreSQL configuration tuner. M46, ADR-0098. Only whitelisted keys may be edited from the… https://jabali-panel.com/docs/admin/directadmin-migration/ https://jabali-panel.com/docs/admin/directadmin-migration/ Wed, 27 May 2026 00:00:00 GMT The DirectAdmin ingest path. Status: production-supported. DirectAdmin's standard backup tarball (). Produce on the source host via: https://jabali-panel.com/docs/admin/automation-api/ https://jabali-panel.com/docs/admin/automation-api/ Wed, 27 May 2026 00:00:00 GMT /jabali-admin/automation. Scoped API tokens for the future Automation API. The UI for minting and revoking scoped tokens is shipped. The public… https://jabali-panel.com/docs/admin/dns-zones/ https://jabali-panel.com/docs/admin/dns-zones/ Wed, 27 May 2026 00:00:00 GMT /jabali-admin/dns. The cross-user view of every PowerDNS zone served by the panel. Columns: zone name, owner, record count, last modified, DNSSEC status… https://jabali-panel.com/docs/admin/domains/ https://jabali-panel.com/docs/admin/domains/ Wed, 27 May 2026 00:00:00 GMT /jabali-admin/domains. The cross-user view of every hosted domain on the panel. Columns: domain name, owner (username), package, primary / alias, PHP… https://jabali-panel.com/docs/admin/egress/ https://jabali-panel.com/docs/admin/egress/ Wed, 27 May 2026 00:00:00 GMT Security → Egress. nftables + cgroup v2 vmap rules that restrict each user's outbound traffic. M34, ADR-0084. A compromised tenant whose PHP scripts can… https://jabali-panel.com/docs/admin/email-logs/ https://jabali-panel.com/docs/admin/email-logs/ Wed, 27 May 2026 00:00:00 GMT Cross-domain view of mail flow through Stalwart. Reachable from Mail Deliverability → All Logs, and from Server Status → Mail card. https://jabali-panel.com/docs/admin/email-queue/ https://jabali-panel.com/docs/admin/email-queue/ Wed, 27 May 2026 00:00:00 GMT Stalwart's outbound queue. Reachable from Mail Deliverability → Queue. Successfully delivered or permanently bounced messages leave the queue immediately… https://jabali-panel.com/docs/admin/hestiacp-migration/ https://jabali-panel.com/docs/admin/hestiacp-migration/ Wed, 27 May 2026 00:00:00 GMT The HestiaCP ingest path. Status: partial, files, databases, DNS, and a subset of mail are supported. Complex Exim ACL rules require manual… https://jabali-panel.com/docs/admin/home/ https://jabali-panel.com/docs/admin/home/ Wed, 27 May 2026 00:00:00 GMT /jabali-admin/ redirects to /jabali-admin/dashboard. See Dashboard for the landing page content. The legacy /jabali-admin/home route is retained as an… https://jabali-panel.com/docs/admin/hosting-packages/create/ https://jabali-panel.com/docs/admin/hosting-packages/create/ Wed, 27 May 2026 00:00:00 GMT Reached from Hosting Packages → Create. Defines a new bundle of quotas and limits that may then be assigned to users. https://jabali-panel.com/docs/admin/hosting-packages/edit/ https://jabali-panel.com/docs/admin/hosting-packages/edit/ Wed, 27 May 2026 00:00:00 GMT Reached from the Edit action on a row in Hosting Packages. Modifies any field on an existing package. A field change persists immediately to the row. The… https://jabali-panel.com/docs/admin/hosting-packages/ https://jabali-panel.com/docs/admin/hosting-packages/ Wed, 27 May 2026 00:00:00 GMT /jabali-admin/packages. A Package is a bundle of quotas and limits assigned to a user. Each row shows the package name, the number of users assigned… https://jabali-panel.com/docs/admin/ip-addresses/ https://jabali-panel.com/docs/admin/ip-addresses/ Wed, 27 May 2026 00:00:00 GMT /jabali-admin/ips. The pool of IPv4 (and optionally IPv6) addresses available for per-domain listen-IP selection. M24, ADR-0049. https://jabali-panel.com/docs/admin/login/ https://jabali-panel.com/docs/admin/login/ Wed, 27 May 2026 00:00:00 GMT /jabali-admin redirects to the Kratos login flow at /auth/login. Sessions are managed by Kratos (M20). The panel itself does not store passwords or… https://jabali-panel.com/docs/admin/mail-deliverability/ https://jabali-panel.com/docs/admin/mail-deliverability/ Wed, 27 May 2026 00:00:00 GMT /jabali-admin/mail/deliverability. Per-domain view of the DNS records and policies that govern outbound mail reputation. https://jabali-panel.com/docs/admin/mail-throttles/ https://jabali-panel.com/docs/admin/mail-throttles/ Wed, 27 May 2026 00:00:00 GMT /jabali-admin/mail/throttles. Outbound mail rate-limit policy enforced by Bulwark and Stalwart (M47 Wave 3). A compromised mailbox or runaway PHP script… https://jabali-panel.com/docs/admin/malware/ https://jabali-panel.com/docs/admin/malware/ Wed, 27 May 2026 00:00:00 GMT Security → Malware. The detection and response surface for ClamAV, Linux Malware Detect (LMD), YARA, and Tetragon. M33 and M33.2. https://jabali-panel.com/docs/admin/migration/ https://jabali-panel.com/docs/admin/migration/ Wed, 27 May 2026 00:00:00 GMT /jabali-admin/migrations. Parent page for the cPanel / DirectAdmin / Hestia / WHM ingest pipelines. Each source has its own subpage: https://jabali-panel.com/docs/admin/notifications/channels/ https://jabali-panel.com/docs/admin/notifications/channels/ Wed, 27 May 2026 00:00:00 GMT /jabali-admin/notifications/channels. Configure the delivery endpoints that notification events fan out to (M14). https://jabali-panel.com/docs/admin/notifications/events/ https://jabali-panel.com/docs/admin/notifications/events/ Wed, 27 May 2026 00:00:00 GMT /jabali-admin/notifications/events. The catalog of event sources the panel can emit. Configure routing on Routing. https://jabali-panel.com/docs/admin/notifications/routing/ https://jabali-panel.com/docs/admin/notifications/routing/ Wed, 27 May 2026 00:00:00 GMT /jabali-admin/notifications/routing. Per-event-source mapping to per-channel destinations, with severity thresholds and recipient filters. https://jabali-panel.com/docs/admin/notifications/test/ https://jabali-panel.com/docs/admin/notifications/test/ Wed, 27 May 2026 00:00:00 GMT /jabali-admin/notifications/test. Fire a synthetic event through the dispatcher to verify channel and routing configuration without waiting for a real… https://jabali-panel.com/docs/admin/panel-certificate/ https://jabali-panel.com/docs/admin/panel-certificate/ Wed, 27 May 2026 00:00:00 GMT The Let's Encrypt certificate used by the panel itself for the configured panel hostname. Managed through Server Settings → General → Panel SSL and, for… https://jabali-panel.com/docs/admin/panel-hostname/ https://jabali-panel.com/docs/admin/panel-hostname/ Wed, 27 May 2026 00:00:00 GMT The FQDN the panel serves itself on. Set under Server Settings → General → Panel Hostname. The hostname drives several derived states: https://jabali-panel.com/docs/admin/password-reset-request/ https://jabali-panel.com/docs/admin/password-reset-request/ Wed, 27 May 2026 00:00:00 GMT /auth/recovery. Kratos recovery flow. By default. Override under Server Settings → Mail → Recovery sender. If outbound mail is broken (Stalwart down, no… https://jabali-panel.com/docs/admin/password-reset-reset/ https://jabali-panel.com/docs/admin/password-reset-reset/ Wed, 27 May 2026 00:00:00 GMT The destination page reached from the email link sent by Request Password Reset. Recovery tokens expire after 60 minutes. After expiry the link returns… https://jabali-panel.com/docs/admin/php-manager/ https://jabali-panel.com/docs/admin/php-manager/ Wed, 27 May 2026 00:00:00 GMT /jabali-admin/php-pools. The list of installed PHP versions on the host, with per-version FPM tuning and an extension manager (M9.6). https://jabali-panel.com/docs/admin/security/ https://jabali-panel.com/docs/admin/security/ Wed, 27 May 2026 00:00:00 GMT /jabali-admin/security. Parent page for the security tabs (M26). A header strip summarises: Each link drills into the relevant tab. https://jabali-panel.com/docs/admin/server-settings/ https://jabali-panel.com/docs/admin/server-settings/ Wed, 27 May 2026 00:00:00 GMT /jabali-admin/settings. Global settings that apply to the whole installation, organized into sections. See Database Tuning for the per-key reference. https://jabali-panel.com/docs/admin/server-status/ https://jabali-panel.com/docs/admin/server-status/ Wed, 27 May 2026 00:00:00 GMT /jabali-admin/server-status. M31. Live status of every watched service plus host vitals. Errgroup-aggregated polling every 5 seconds. Each card returns… https://jabali-panel.com/docs/admin/server-updates/ https://jabali-panel.com/docs/admin/server-updates/ Wed, 27 May 2026 00:00:00 GMT /jabali-admin/updates. M29. Run from the panel UI as a transient systemd unit (ADR-0064). If the update were to run inside the panel API itself, the… https://jabali-panel.com/docs/admin/services/ https://jabali-panel.com/docs/admin/services/ Wed, 27 May 2026 00:00:00 GMT The per-service control surface, an expanded view of the cards shown on Server Status. For each watched systemd unit: https://jabali-panel.com/docs/admin/snuffleupagus/ https://jabali-panel.com/docs/admin/snuffleupagus/ Wed, 27 May 2026 00:00:00 GMT Security → Snuffleupagus. PHP runtime hardening loaded as a Zend extension into every installed PHP version. The installer ships a baseline rule set that… https://jabali-panel.com/docs/admin/ssl-manager/ https://jabali-panel.com/docs/admin/ssl-manager/ Wed, 27 May 2026 00:00:00 GMT /jabali-admin/ssl. The cross-user view of every Let's Encrypt certificate the panel is responsible for. Columns: domain, owner, status ( / / ), issued… https://jabali-panel.com/docs/admin/support/ https://jabali-panel.com/docs/admin/support/ Wed, 27 May 2026 00:00:00 GMT /jabali-admin/support. M29. Produce an encrypted diagnostic bundle for the upstream maintainers, then open a ticket. https://jabali-panel.com/docs/admin/terminal/ https://jabali-panel.com/docs/admin/terminal/ Wed, 27 May 2026 00:00:00 GMT /jabali-admin/terminal. In-browser shell on the panel host, scoped to root. The terminal is gated by the admin session cookie. Anyone with a panel admin… https://jabali-panel.com/docs/admin/two-factor-challenge/ https://jabali-panel.com/docs/admin/two-factor-challenge/ Wed, 27 May 2026 00:00:00 GMT After password auth, if TOTP is enrolled, Kratos asks for the 6-digit code. Profile → Security → Two-Factor → Enable. Scan the QR with any TOTP app… https://jabali-panel.com/docs/admin/ufw-baseline/ https://jabali-panel.com/docs/admin/ufw-baseline/ Wed, 27 May 2026 00:00:00 GMT Security → UFW. The simple port-open / port-close baseline. M43 (ADR-0089) reduced UFW to this role; IP-trust decisions live in CrowdSec Decisions. https://jabali-panel.com/docs/admin/users/create/ https://jabali-panel.com/docs/admin/users/create/ Wed, 27 May 2026 00:00:00 GMT Reached from Users → Create User. Single-form wizard that provisions every piece of per-user state. Most steps complete within five seconds; PHP pool and… https://jabali-panel.com/docs/admin/users/edit/ https://jabali-panel.com/docs/admin/users/edit/ Wed, 27 May 2026 00:00:00 GMT Reached from the Edit action on a row in Users. Modifies every mutable attribute of a panel user. A single transactional against, plus a Kratos call if… https://jabali-panel.com/docs/admin/users/ https://jabali-panel.com/docs/admin/users/ Wed, 27 May 2026 00:00:00 GMT /jabali-admin/users. The list and lifecycle controls for every panel user (administrators and hosting customers). https://jabali-panel.com/docs/admin/whm-migration/ https://jabali-panel.com/docs/admin/whm-migration/ Wed, 27 May 2026 00:00:00 GMT The WHM ingest path. Status: production-supported; effectively a batch of cPanel restores. A WHM-level dump produced by: https://jabali-panel.com/docs/user/activity/ https://jabali-panel.com/docs/user/activity/ Wed, 27 May 2026 00:00:00 GMT /jabali-panel/activity. The audit trail scoped to your account. Every privileged action that affected your account. Each row contains: https://jabali-panel.com/docs/user/applications/ https://jabali-panel.com/docs/user/applications/ Wed, 27 May 2026 00:00:00 GMT /jabali-panel/applications. One-click installs for WordPress and 14 other popular apps (M10 / M19). WordPress, Moodle, Drupal, Joomla, NextCloud… https://jabali-panel.com/docs/user/autoresponders/ https://jabali-panel.com/docs/user/autoresponders/ Wed, 27 May 2026 00:00:00 GMT /jabali-panel/mail/autoresponders. Vacation-style automatic replies per mailbox. Save with Active = on. Stalwart begins responding at the start date and… https://jabali-panel.com/docs/user/backup-download/ https://jabali-panel.com/docs/user/backup-download/ Wed, 27 May 2026 00:00:00 GMT Profile → Backups → Download my account. Produce a fresh snapshot on demand and download it. Subject to the administrator allowing tenant-initiated… https://jabali-panel.com/docs/user/backups/ https://jabali-panel.com/docs/user/backups/ Wed, 27 May 2026 00:00:00 GMT /jabali-panel/backups. Your account-level backup view. If the administrator has enabled tenant-visible backups for your package, this page shows: https://jabali-panel.com/docs/user/catch-all/ https://jabali-panel.com/docs/user/catch-all/ Wed, 27 May 2026 00:00:00 GMT /jabali-panel/mail/catch-all. What happens to mail addressed to a local part that does not exist as a mailbox or forwarder. https://jabali-panel.com/docs/user/cpanel-migration/ https://jabali-panel.com/docs/user/cpanel-migration/ Wed, 27 May 2026 00:00:00 GMT If you are moving your account from a cPanel host to Jabali, this is the typical path. Operator-side details are in cPanel Migration. https://jabali-panel.com/docs/user/dashboard/ https://jabali-panel.com/docs/user/dashboard/ Wed, 27 May 2026 00:00:00 GMT /jabali-panel/dashboard. The first page after a tenant logs in. Top of the page: New Domain · New Mailbox · New Database · Open Files · Open Webmail. https://jabali-panel.com/docs/user/cron-jobs/ https://jabali-panel.com/docs/user/cron-jobs/ Wed, 27 May 2026 00:00:00 GMT /jabali-panel/cron. Scheduled commands that run under your account (M8). Click Add cron job, supply: On save, the agent creates two systemd-user units in… https://jabali-panel.com/docs/user/databases/ https://jabali-panel.com/docs/user/databases/ Wed, 27 May 2026 00:00:00 GMT /jabali-panel/databases. Your MariaDB and PostgreSQL databases. Database names are prefixed with your username for isolation: a database you create with… https://jabali-panel.com/docs/user/db-users/ https://jabali-panel.com/docs/user/db-users/ Wed, 27 May 2026 00:00:00 GMT /jabali-panel/database-users. The DB-user accounts your applications use to connect to databases. You may have many DB users (typical pattern: one DB… https://jabali-panel.com/docs/user/directadmin-migration/ https://jabali-panel.com/docs/user/directadmin-migration/ Wed, 27 May 2026 00:00:00 GMT If you are moving from DirectAdmin to Jabali, the operator handles the per-user backup ingest. Operator-side details: DirectAdmin Migration. https://jabali-panel.com/docs/user/disclaimer/ https://jabali-panel.com/docs/user/disclaimer/ Wed, 27 May 2026 00:00:00 GMT /jabali-panel/mail/disclaimer. A server-side disclaimer appended to outbound mail per domain. Per-domain: Stalwart appends the disclaimer at the bottom… https://jabali-panel.com/docs/user/dns-records/ https://jabali-panel.com/docs/user/dns-records/ Wed, 27 May 2026 00:00:00 GMT The records inside a single DNS zone you own. Is generated and managed by the panel; you do not edit it directly. https://jabali-panel.com/docs/user/dnssec/ https://jabali-panel.com/docs/user/dnssec/ Wed, 27 May 2026 00:00:00 GMT Per-domain DNSSEC signing. Toggle under Domain Edit → DNSSEC. DNSSEC ("Domain Name System Security Extensions") signs every record in your zone with… https://jabali-panel.com/docs/user/domains/ https://jabali-panel.com/docs/user/domains/ Wed, 27 May 2026 00:00:00 GMT /jabali-panel/domains. The domains hosted on the panel under your account. Columns: domain name, PHP version, SSL state, DNSSEC state, listen IP, last… https://jabali-panel.com/docs/user/email-logs/ https://jabali-panel.com/docs/user/email-logs/ Wed, 27 May 2026 00:00:00 GMT /jabali-panel/mail/logs. Live tail of inbound and outbound mail for your domains. Click a row to view: You can see the metadata for every message in your… https://jabali-panel.com/docs/user/email/ https://jabali-panel.com/docs/user/email/ Wed, 27 May 2026 00:00:00 GMT /jabali-panel/mail/mailboxes (plus tabs). The mail surface for your domains. Provides Roundcube webmail. The Mailboxes tab has a one-click Open Webmail… https://jabali-panel.com/docs/user/forwarders/ https://jabali-panel.com/docs/user/forwarders/ Wed, 27 May 2026 00:00:00 GMT /jabali-panel/mail/forwarders. Forward mail addressed to one address to one or more destinations. A forwarder does not have storage. Mail addressed to a… https://jabali-panel.com/docs/user/files/ https://jabali-panel.com/docs/user/files/ Wed, 27 May 2026 00:00:00 GMT /jabali-panel/files. The in-panel file manager (M11, ADR-0030). File operations route through the panel API, which calls the agent over Unix socket. The… https://jabali-panel.com/docs/user/home/ https://jabali-panel.com/docs/user/home/ Wed, 27 May 2026 00:00:00 GMT /jabali-panel/ redirects to /jabali-panel/dashboard. See Dashboard for the landing page content. The legacy /jabali-panel/home route is retained as an… https://jabali-panel.com/docs/user/ https://jabali-panel.com/docs/user/ Wed, 27 May 2026 00:00:00 GMT This is the table of contents for the tenant-facing documentation. A few things only the administrator can do for you: https://jabali-panel.com/docs/user/login/ https://jabali-panel.com/docs/user/login/ Wed, 27 May 2026 00:00:00 GMT /jabali-panel redirects to the Kratos login flow at /auth/login. The login page has a Forgot password? link → Request Password Reset. https://jabali-panel.com/docs/user/logs/ https://jabali-panel.com/docs/user/logs/ Wed, 27 May 2026 00:00:00 GMT /jabali-panel/logs. nginx access and error logs for your domains, plus the PHP-FPM error log for your account. https://jabali-panel.com/docs/user/mailboxes/ https://jabali-panel.com/docs/user/mailboxes/ Wed, 27 May 2026 00:00:00 GMT /jabali-panel/mail/mailboxes. The list and lifecycle of mail accounts in your domains. Mailbox storage lives inside Stalwart's data directory… https://jabali-panel.com/docs/user/password-reset-request/ https://jabali-panel.com/docs/user/password-reset-request/ Wed, 27 May 2026 00:00:00 GMT The /auth/recovery page reached from the login page's Forgot password? link. The recovery email is sent from by default, using the panel's own Stalwart… https://jabali-panel.com/docs/user/password-reset-reset/ https://jabali-panel.com/docs/user/password-reset-reset/ Wed, 27 May 2026 00:00:00 GMT The destination page reached from the recovery email link. The recovery token is valid for 60 minutes from the moment the email was sent. Expired tokens… https://jabali-panel.com/docs/user/php-settings/ https://jabali-panel.com/docs/user/php-settings/ Wed, 27 May 2026 00:00:00 GMT /jabali-panel/php-settings. Per-user PHP configuration. Applied to every domain you own that runs PHP through your per-user FPM pool. https://jabali-panel.com/docs/user/profile/ https://jabali-panel.com/docs/user/profile/ Wed, 27 May 2026 00:00:00 GMT /jabali-panel/profile. The tenant's account settings. Email changes propagate to Kratos; the next login uses the new email. https://jabali-panel.com/docs/user/shared-folders/ https://jabali-panel.com/docs/user/shared-folders/ Wed, 27 May 2026 00:00:00 GMT /jabali-panel/mail/shared-folders. IMAP shared folders for collaborative mailboxes. Click Create shared folder, supply: https://jabali-panel.com/docs/user/ssh-keys/ https://jabali-panel.com/docs/user/ssh-keys/ Wed, 27 May 2026 00:00:00 GMT /jabali-panel/ssh-keys. Manage the SSH public keys used for SFTP access to your account (M12). SFTP is the file-transfer protocol the panel exposes (port… https://jabali-panel.com/docs/user/ssl/ https://jabali-panel.com/docs/user/ssl/ Wed, 27 May 2026 00:00:00 GMT /jabali-panel/ssl. The TLS certificate state for the domains in your account. For each domain: status (issued / pending / failed / off), issued at… https://jabali-panel.com/docs/user/postgresql/ https://jabali-panel.com/docs/user/postgresql/ Wed, 27 May 2026 00:00:00 GMT PostgreSQL databases are managed under the same Databases and Database Users pages as MariaDB; pick PostgreSQL as the engine when creating. https://jabali-panel.com/docs/user/two-factor-challenge/ https://jabali-panel.com/docs/user/two-factor-challenge/ Wed, 27 May 2026 00:00:00 GMT After entering your password successfully, if your account has TOTP two-factor authentication enrolled, you are prompted for a six-digit code. https://jabali-panel.com/docs/user/wordpress/ https://jabali-panel.com/docs/user/wordpress/ Wed, 27 May 2026 00:00:00 GMT WordPress is the first-class app in the Applications registry. Applications → Install new → WordPress. Required fields: https://jabali-panel.com/docs/platform/agent/ https://jabali-panel.com/docs/platform/agent/ Wed, 27 May 2026 00:00:00 GMT Root-privileged process; the only thing that performs privileged host operations. Callers (the panel API, the CLI, the reconciler) reach it over… https://jabali-panel.com/docs/platform/cli/ https://jabali-panel.com/docs/platform/cli/ Wed, 27 May 2026 00:00:00 GMT The binary is one cobra root with subcommands. Run or for live flags. This page lists every shipped subcommand grouped by area, with the one-line… https://jabali-panel.com/docs/platform/components/ https://jabali-panel.com/docs/platform/components/ Wed, 27 May 2026 00:00:00 GMT The full third-party inventory shipped or installed by Jabali on a Debian 13 host. Every component listed here is fetched, configured, and started by… https://jabali-panel.com/docs/platform/dnssec/ https://jabali-panel.com/docs/platform/dnssec/ Wed, 27 May 2026 00:00:00 GMT Per-domain, opt-in. ADR-0057. Each hosted zone can be signed independently. Toggle per-domain at Domains → Edit → DNSSEC (admin) or… https://jabali-panel.com/docs/platform/mail-autoconfig/ https://jabali-panel.com/docs/platform/mail-autoconfig/ Wed, 27 May 2026 00:00:00 GMT Bulwark serves three autoconfig flavours so clients pick up correct mail settings automatically. (For Outlook, also handle the SRV-record fallback: SRV →… https://jabali-panel.com/docs/platform/health-monitor/ https://jabali-panel.com/docs/platform/health-monitor/ Wed, 27 May 2026 00:00:00 GMT The same surface as Server Status but exposed at machine-readable endpoints for external monitoring. The watched set is computed at startup; services… https://jabali-panel.com/docs/platform/monitoring/ https://jabali-panel.com/docs/platform/monitoring/ Wed, 27 May 2026 00:00:00 GMT Three signal sources, complementary. /jabali-admin/audit. Append-only structured rows. Every privileged mutation lands here: https://jabali-panel.com/docs/platform/stack/ https://jabali-panel.com/docs/platform/stack/ Wed, 27 May 2026 00:00:00 GMT The full inventory of moving parts. The single in-process loop inside. Wakes on: What it does (per tick): Idempotency rule: every converger compares…