Starter: one site, fully equipped
Everything a single website needs — 2 GB storage, 50 GB monthly transfer, 1 database and a DNS zone with DNSSEC. Five mailboxes at 1 GB each on your own mail domain. Free TLS certificates issued and renewed automatically, PHP 8.4 by default, and daily snapshot backups kept for 14 days. From £3.99/mo.
From £3.99/mo
Get startedMailbox: 5
Storage: 2 GB
Website: 1
Database: 1
Dns zone: 1
Mail domain: 1
What every site gets
| Included | |
|---|---|
| Mailbox | 5 |
| Storage | 2 GB |
| Website | 1 |
| Database | 1 |
| Dns zone | 1 |
| Mail domain | 1 |
| Mailbox size | 1 GB |
| Backup | included |
| Data transfer | 50 GB / month |
| DNSSEC | yes |
| Backups | default snapshots kept 14; default interval minutes daily; restore drills last 14 days 7 |
| Free TLS | certificates are issued and renewed automatically for every site |
| PHP default | 8.4 |
Runtimes
PPHP 8.5
PPHP 8.4
PPHP 8.3
PPHP 8.2
NNode 26
NNode 24
NNode 22
Python 3.12
Install in one click
FFlarum
GGhost
Joomla
NodeBB
Wiki.js
WordPress
ZZephyr
P0 — Foundation
- Cargo workspace: control-plane, agent, shared proto crate; CI green on fmt+clippy+test
- Docker dev stack: Postgres 16 + NATS compose file; migrations runner applies schema/000init.sql
- Job queue on SELECT FOR UPDATE SKIP LOCKED; every mutation writes auditlog
- Agent enrolment: bootstrap token -> client cert; NATS subscribe + timer fallback
- Reconciler framework: fetch -> observe -> plan -> validate -> apply -> report; atomic writes; generation rollback
P1 — Web hosting
- Debian tenant image pipeline; shared read-only overlayfs base layer
- Multi-version PHP-FPM 7.4-8.4, pm=ondemand, per-site selection (8.1/8.3 in dev; matrix is a build arg)
- OpenLiteSpeed + lsphp per-site alternative; .htaccess and LSCache verified
- Node and Python app hosting (dev model; in-container unification lands with P1.4)
- Hardening: Landlock+seccomp, hidepid, private /tmp, veth+nftables, outbound port-25 block
P2 — DNS and certificates
- PowerDNS (bind backend
- AXFR enabled and transfer-proven via dig AXFR (secondary topology is deployment config)
- ACME DNS-01, wildcards, renewal scheduler, CAA
- Registrar adapter: NOT kstack scope
- Panel: zone editor, cert status
P3 — Databases
- DB node role: shared MariaDB + PostgreSQL; db, user, grant provisioning; connection limits
- Zero-downtime credential rotation (P3.1)
- Size accounting per cycle, over-quota flagging (never destroy), remote-access CIDR rules (P3.2)
- Wave 1: internal sites migrated onto kstack
Pricing
Ready when you are
Get your site online with TLS, DNSSEC and backups handled from day one.
Get started
