Business hosting for five sites that mean business
Run 5 websites on 20 GB of storage with 10 databases, 25 mailboxes at 5 GB each, and 500 GB of monthly data transfer. PHP 8.4 by default, free TLS certificates issued and renewed automatically for every site, DNSSEC on your 5 DNS zones, and daily snapshot backups kept for 14 days. From £9.99/mo.
From £9.99/mo
Get startedMailbox: 25
Storage: 20 GB
Website: 5
Database: 10
Dns zone: 5
Mail domain: 5
What every site gets
| Included | |
|---|---|
| Mailbox | 25 |
| Storage | 20 GB |
| Website | 5 |
| Database | 10 |
| Dns zone | 5 |
| Mail domain | 5 |
| Mailbox size | 5 GB |
| Backup | included |
| Data transfer | 500 GB / month |
| DNSSEC | yes |
| Backups | default snapshots kept 14; default interval minutes daily; restore drills last 14 days 7 |
| Free TLS | certificates are issued and renewed automatically for every site |
| PHP default | 8.4 |
Runtimes
PPHP 8.5
PPHP 8.4
PPHP 8.3
PPHP 8.2
NNode 26
NNode 24
NNode 22
Python 3.12
Install in one click
FFlarum
GGhost
Joomla
NodeBB
Wiki.js
WordPress
ZZephyr
P0 — Foundation
- Cargo workspace: control-plane, agent, shared proto crate; CI green on fmt+clippy+test
- Docker dev stack: Postgres 16 + NATS compose file; migrations runner applies schema/000init.sql
- Job queue on SELECT FOR UPDATE SKIP LOCKED; every mutation writes auditlog
- Agent enrolment: bootstrap token -> client cert; NATS subscribe + timer fallback
- Reconciler framework: fetch -> observe -> plan -> validate -> apply -> report; atomic writes; generation rollback
P1 — Web hosting
- Debian tenant image pipeline; shared read-only overlayfs base layer
- Multi-version PHP-FPM 7.4-8.4, pm=ondemand, per-site selection (8.1/8.3 in dev; matrix is a build arg)
- OpenLiteSpeed + lsphp per-site alternative; .htaccess and LSCache verified
- Node and Python app hosting (dev model; in-container unification lands with P1.4)
- Hardening: Landlock+seccomp, hidepid, private /tmp, veth+nftables, outbound port-25 block
P2 — DNS and certificates
- PowerDNS (bind backend
- AXFR enabled and transfer-proven via dig AXFR (secondary topology is deployment config)
- ACME DNS-01, wildcards, renewal scheduler, CAA
- Registrar adapter: NOT kstack scope
- Panel: zone editor, cert status
P3 — Databases
- DB node role: shared MariaDB + PostgreSQL; db, user, grant provisioning; connection limits
- Zero-downtime credential rotation (P3.1)
- Size accounting per cycle, over-quota flagging (never destroy), remote-access CIDR rules (P3.2)
- Wave 1: internal sites migrated onto kstack