Latest release 0.8.163Ubuntu, Debian & RHEL-ready

VTA PanelYour own hosting panel, one command away.

VTA Panel is your own hosting panel for Linux, one command away. Pick Nginx, Apache or OpenLiteSpeed, ship PHP and WordPress by default, then add Node.js, mail, DNS, malware scanning, firewall, backups and billing — one self-hosted hosting control panel for you and your customers.

$ curl -fsSL https://vtapanel.com/latest/install | sudo bash

Run as root. x86_64 and arm64. Customize the installer

Interactive Interface Tour

Take the panel for a spin.

A quick tour of the real panel — the server overview, every site in one list, and a site’s own tools — looping on its own.

Unified Tenant Architecture

Everything a website needs, on one page.

Open any site and its tools are a tab away. Administrators and customers see the same page, limited by the customer's plan.

Full Linux Stack Integration

The platform behind every site.

Caching, runtimes, databases, mail and recovery — the same pieces you would wire by hand, already integrated and plan-gated.

Runtime

PHP by default

Install PHP 8.2–8.5 side by side. Each account gets its own PHP-FPM service, open_basedir and systemd resource slice. WordPress, Drupal, Joomla, Nextcloud, PrestaShop, Matomo and Laravel are ready on day one.

Containers

Node.js in Podman

Git or upload deploys, zero-downtime rollbacks, workers, webhooks and secrets. Apps listen on localhost only; your chosen web server reverse-proxies them — including WebSockets.

Accelerator

Varnish cache

Optional in front of Nginx, Apache, OpenResty or Caddy. WordPress and WooCommerce rules keep carts and logged-in visitors uncached. Purge from the panel or WP admin bar.

Optimization

OpenLiteSpeed + LSCache

Pick OLS when you want LiteSpeed’s cache for PHP and WordPress. Turn LSCache on or off per site and purge from the panel.

Memory Engine

Redis / Valkey

Shared cache bound to localhost, with a server password. Plans can offer Redis to sites; RHEL 10+ uses Valkey. Required when mail (Rspamd) is installed.

Storage Engines

MariaDB & PostgreSQL

Shared databases per account, plus dedicated DB servers with their own ports, TLS, storage quotas, point-in-time recovery and cross-server replicas.

Mail Daemon

Email that ships

Postfix, Dovecot, Rspamd, optional ClamAV, DKIM helpers and sending limits. Webmail is VMail or Roundcube — your choice at install time.

Networking

DNS your way

Authoritative BIND on the server, or manage zones in the panel and publish to Cloudflare. Wildcard certificates via DNS-01.

Disaster Recovery

Backups & DR

Daily site backups, encrypted S3-compatible offsite copies, panel and mailbox disaster-recovery archives, and a rebuild path for a new server.

Installer

Build your install command.

Use the wizard, or set every option up front for an unattended install. Running the installer again is safe and keeps your admin password.

Supported Platforms

Runs on the Linux you already use.

Long-term-support releases with systemd, on x86_64 or arm64 hardware.

Root or sudo access
Ports 80, 443 and 8443 free
Outbound HTTPS for packages
A hostname that resolves to the server

Tier 1

Tier 1 supported distributions
Ubuntu LTS	22.04, 24.04, 26.04
Debian	12, 13
AlmaLinux, Rocky Linux, RHEL	9, 10

Tier 2

Tier 2 supported distributions
Oracle Linux, CentOS Stream	9, 10
openSUSE Leap	15.6, 16.0
SUSE Linux Enterprise Server	15, 16

Not supported: Arch Linux, Fedora, Alpine, Gentoo, non-LTS Ubuntu, RHEL 8 and older, and any system without systemd. OpenLiteSpeed is not available on SUSE.

Fail-Safe Engineering

Built so a bad change never takes a server down.

System-level guardrails, sandboxed execution, rollback safety, and non-destructive service configuration.

Config is tested before it is applied

nginx -t, apachectl configtest and php-fpm -t run first. If a test fails, the previous configuration comes back.

Restores can be undone

A pre-restore backup is saved first. If the database import fails, the old files and records are automatically restored without human intervention.

Passwords are shown once

Generated passwords go to WP-CLI on standard input, never on the command line, process table, or persistent bash history logs.

Accounts are kept apart

SFTP is chrooted, each account has its own PHP-FPM services with open_basedir, and files are readable only by their owner.

Off-server backups are encrypted

Copies to S3-compatible storage are encrypted client-side with a cryptographic key that never leaves your local server environment.

Your SSH session stays open

The installer allows SSH, including the active port you are currently connected on, before it turns the firewall on. You are never locked out.

Documentation Knowledge Engine

Step-by-step guides for every role.

From the first install to answering a customer's ticket.

Docs index

Server operators

Installation

Install VTA Panel on Ubuntu, Debian, AlmaLinux, Rocky or RHEL; first sign-in, paths, and adding databases or PHP later from Server software.

Open install guide

The admin user and staff

Administrator manual

Administer VTA Panel: accounts, plans, sites, databases, Server software, email, DNS, security, backups, disaster recovery and billing.

Open admin manual

Customer accounts

End-user manual

Customer guide to VTA Panel: sites, WordPress tools, files, SFTP, SSL certificates, databases, email, backups and support.

Open customer manual

Everyone

FAQ

Short answers for VTA Panel: install, databases, PHP versions, Email tab, webmail, HTTPS, Redis, backups, malware, firewall and the API.

Browse FAQ

The admin user and staff

Administrator knowledge base

How-to guides for every admin menu: Overview, Sites, Accounts, DNS, Server Settings, Repair, preferred domain, software, mail, security and more — with redacted screenshots.

Open how-tos