Agency hosting: 25 sites, one control panel
Built for studios juggling client work — 100 GB storage, 50 databases, 100 mailboxes at 10 GB each, and 2000 GB of monthly data transfer. Free TLS certificates are issued and renewed automatically for every site, PHP 8.4 ships as default, and DNSSEC protects all 25 DNS zones. Daily snapshot backups are included, kept 14 days, with restore drills over the last 7 days.
From £24.99/mo
Get startedMailbox: 100
Storage: 100 GB
Website: 25
Database: 50
Dns zone: 25
Mail domain: 25
What every site gets
| Included | |
|---|---|
| Mailbox | 100 |
| Storage | 100 GB |
| Website | 25 |
| Database | 50 |
| Dns zone | 25 |
| Mail domain | 25 |
| Mailbox size | 10 GB |
| Backup | included |
| Data transfer | 2000 GB / month |
| DNSSEC | yes |
| Backups | default snapshots kept 14; default interval minutes daily; restore drills last 14 days 7 |
| Free TLS | certificates are issued and renewed automatically for every site |
| PHP default | 8.4 |
Runtimes
PPHP 8.5
PPHP 8.4
PPHP 8.3
PPHP 8.2
NNode 26
NNode 24
NNode 22
Python 3.12
Install in one click
FFlarum
GGhost
Joomla
NodeBB
Wiki.js
WordPress
ZZephyr
P0 — Foundation
- Cargo workspace: control-plane, agent, shared proto crate; CI green on fmt+clippy+test
- Docker dev stack: Postgres 16 + NATS compose file; migrations runner applies schema/000init.sql
- Job queue on SELECT FOR UPDATE SKIP LOCKED; every mutation writes auditlog
- Agent enrolment: bootstrap token -> client cert; NATS subscribe + timer fallback
- Reconciler framework: fetch -> observe -> plan -> validate -> apply -> report; atomic writes; generation rollback
P1 — Web hosting
- Debian tenant image pipeline; shared read-only overlayfs base layer
- Multi-version PHP-FPM 7.4-8.4, pm=ondemand, per-site selection (8.1/8.3 in dev; matrix is a build arg)
- OpenLiteSpeed + lsphp per-site alternative; .htaccess and LSCache verified
- Node and Python app hosting (dev model; in-container unification lands with P1.4)
- Hardening: Landlock+seccomp, hidepid, private /tmp, veth+nftables, outbound port-25 block
P2 — DNS and certificates
- PowerDNS (bind backend
- AXFR enabled and transfer-proven via dig AXFR (secondary topology is deployment config)
- ACME DNS-01, wildcards, renewal scheduler, CAA
- Registrar adapter: NOT kstack scope
- Panel: zone editor, cert status
P3 — Databases
- DB node role: shared MariaDB + PostgreSQL; db, user, grant provisioning; connection limits
- Zero-downtime credential rotation (P3.1)
- Size accounting per cycle, over-quota flagging (never destroy), remote-access CIDR rules (P3.2)
- Wave 1: internal sites migrated onto kstack