# VorqulPanel

VorqulPanel manages web and game hosting on one Linux server: nginx and Apache vhosts, SSL via acme.sh or certbot, BIND9 DNS zones, Postfix/Dovecot mail, a game server catalog with automatic dependency installs, MariaDB with Adminer, a built-in SFTP server, an nftables firewall GUI and monitoring with 30-day retention. Every change goes through a config test with automatic rollback.

VorqulPanel is a server administration panel written as a single-file Java application - backend, API and web UI live in one source file and ship as a compiled, ready-to-run JAR. It runs as a hardened systemd service and keeps its data in SQLite, so the panel itself needs no external database server.

## Facts

- Type: Server control panel
- Language: Java
- Delivery: Compiled JAR, ready to run
- Deployment: Self-hosted, systemd
- Panel database: SQLite
- Web server: nginx, Apache
- DNS: BIND9
- Mail: Postfix, Dovecot
- Firewall: nftables
- Price: Paid license

## What it manages

### Web hosting

Domains and vhosts for nginx and Apache: static sites, reverse proxies, redirects, PHP via FPM sockets with version selection, aliases. It can adopt sites configured by someone else - it reads their config but never rewrites or deletes it until you explicitly allow a takeover, with a backup. Every Apply runs through configtest / nginx -t with automatic rollback on failure.

### SSL

Certificate issuance and renewal via acme.sh or certbot, automatic vhost rewrite to TLS after issuance, expiry overview next to each domain with a warning under 14 days.

### DNS

Full BIND9 zone management: A/AAAA/CNAME/MX/TXT/SRV records, serials, delegation checks, per-domain DNS check.

### Mail

Postfix/Dovecot setup and management: mail domains, mailboxes, DKIM/SPF/DMARC - including a clean uninstall.

### Game servers

A catalog of dozens of games with automatic dependency installs (Java, Node, Python, Go, .NET, SteamCMD...), start/stop/console, suspend and resource limits.

### Databases

MariaDB management with integrated Adminer and its own auth flow.

### SFTP

Built-in SFTP server (Apache SSHD) with a master account and per-server accounts, bcrypt passwords, IP whitelist, brute-force guard with blocking, concurrent session limits.

### Firewall & security

nftables GUI, fail2ban, one-click Apache hardening (ModSecurity, mod_evasive), audit log of every action with retention, CSRF protection, roles.

### Monitoring

Metrics with 30-day retention, per-domain logs and statistics, disk usage, service status.

### Delivery and installation

You receive a compiled, ready-to-run JAR. No source code, no Maven, no build tools: download, run, done. Installation registers the systemd unit and the service user; uninstalling removes the panel without leaving traces in the system.

### Operations and diagnostics

Every action is written to an audit log. The web UI is protected by CSRF tokens and roles, the service runs inside a systemd sandbox, and privileged calls go through a minimal sudo wrapper (vorqul-helper) rather than blanket root. Errors are written as readable sentences with a concrete fix, and vorqul-doctor and vorqul-diagnose check the whole installation when something still does not add up.

## A panel that respects your server

VorqulPanel only writes files prefixed vorqul-, never edits configs it did not create, backs up before touching an adopted site, and routes every change through a config test with rollback. When something fails, you get a sentence explaining what happened, why, and what to do - including the exact command if a manual step is needed - instead of a stack trace or a generic 500.

## Why this one

- **Zero footprint** - One JAR plus SQLite. No PHP stack for the panel itself, no hundreds of packages, no third-party repositories rewriting your system. Uninstalling means deleting a service and a directory.
- **Transparency** - Only vorqul- prefixed files, untouched foreign configs, backups before takeovers, configtest with rollback, and an audit log - the admin always knows exactly what the panel did.
- **Security by default** - systemd sandbox, minimal sudo through a dedicated helper with strictly scoped rules, bcrypt, SFTP rate limiting. Not bolted on afterwards like in older panels.
- **Web + game hosting in one** - A combination classic panels do not offer: cPanel ignores game servers, Pterodactyl ignores web, mail and DNS. VorqulPanel covers both on a single server.
- **Errors you can act on** - Instead of a stack trace you get what happened, why, and what to do about it - with the exact command when a manual step is needed.

## Reference pages

- Web hosting: https://vorqul.com/vorqulpanel/web-hosting
- Game hosting: https://vorqul.com/vorqulpanel/game-hosting
- DNS: https://vorqul.com/vorqulpanel/dns
- Mail: https://vorqul.com/vorqulpanel/mail
- Databases: https://vorqul.com/vorqulpanel/databases
- SFTP: https://vorqul.com/vorqulpanel/sftp
- Firewall: https://vorqul.com/vorqulpanel/firewall
- Monitoring: https://vorqul.com/vorqulpanel/monitoring

## FAQ

**Does the panel need its own database server?**

No. The panel stores its own data in SQLite. MariaDB is only managed for your hosted sites and apps.

**Can it take over an existing server?**

Yes - it adopts existing nginx/Apache sites read-only, and only modifies them after an explicit takeover confirmation, with a backup first.

**What happens when a config change breaks something?**

Every Apply runs the web server config test first; if it fails, the panel rolls back automatically and tells you exactly what went wrong.

**How do I uninstall it?**

Stop the systemd service and delete the panel directory. The panel only ever writes vorqul- prefixed files, so nothing else is left behind.

## Links

- Page: https://vorqul.com/vorqulpanel
- Repository: https://github.com/Yamiru/vorqul-panel
- Test access: https://vorqul.com/test-access