auraPanel · Features

Everything you need to operate a modern server.

Manage the complete application lifecycle — from provisioning and runtimes to databases, HTTPS, files, access, logs and backups — while keeping the underlying server under control.

One interface. One workflow. Your infrastructure.

Application management

From domain to running application.

Create a site and auraPanel handles the surrounding infrastructure: web-server configuration, runtime, system user and permissions.

Every application remains independently managed and isolated.

  • Any stack, each site its own Linux user
  • nginx vhost written and removed with the site
  • chroot-jailed SFTP per site
  • Live status and per-site resource view
Sites 5 on this server + New Site
shop.example.comWordPress PHP 8.4 web_shop running
api.example.comNext.js Node 24 web_api running
reports.example.comOwn code Python web_reports running
internal.example.comCompose Docker web_internal running
status.example.comReverse proxy Proxy web_status running
Databases

PostgreSQL and MariaDB, built in.

Create databases, generate credentials and associate them with applications without leaving auraPanel.

Open any database directly in auraDB when you need to inspect schemas, run queries or work with data.

  • Choose the engine per database
  • Auto-generated credentials, stored encrypted
  • auraDB: schemas, SQL, EXPLAIN, grid editing
select id, customer, status, total from orders where total > 100 order by total desc;
● 24 rows 3.1 ms index scan · cost 0.00–18.2
1024 Northwind Ltd paid 1,284.00
1025 Globex Corp paid 932.50
1026 Initech open 408.20
1027 Soylent Co paid 216.75
HTTPS

HTTPS without the maintenance.

Issue and renew certificates automatically, including wildcard certificates through supported DNS providers.

Set it once and let auraPanel handle the lifecycle.

  • Issued in-process via go-acme/lego
  • HTTP-01 by default, Cloudflare DNS-01 for wildcards
  • Daily automatic renewal
Files & access

Work with files without giving up control.

Upload, edit, move and manage application files directly from the browser, with operations executed within the permissions of each site’s isolated Linux user.

SSH and SFTP access remain available when you need them.

  • Syntax-highlighting editor, zip and unzip
  • Resumable drag-and-drop uploads
  • Kernel-confined via os.Root
  • SSH keys per user, key-only or password
Logs & backups

See what happened. Recover when necessary.

Inspect application and server logs from the panel, configure scheduled backups and store copies locally or on supported remote storage.

  • Access, error and application logs with live tail and search
  • Scheduled backups to local storage or any rclone remote
  • Restore over a site or into a new one
  • Cloud provider snapshots on supported VMs
Runtimes

One server. Multiple stacks.

Run PHP, Node.js, Python, Docker and static applications side by side.

Install only the components your server needs and add more when your workload changes.

  • PHP 8.3, 8.4 and 8.5 side by side, pinned per site
  • Node.js 24 LTS and Python as per-site systemd units
  • Docker Engine and Compose on demand
  • Static sites served straight from nginx
Caching

Full-page and object caching, per site.

nginx serves whole pages from its fastcgi and proxy caches, and Redis backs the object cache for applications that use one. Turn either on per site and purge from the panel when content changes.

The WordPress template carries its own bypass rules, so admin, login, cart and checkout pages are never cached.

  • nginx fastcgi_cache and proxy_cache
  • Redis object cache
  • Per-site toggle and purge
  • Application-aware bypass rules
Scheduled tasks

Scheduled jobs, per site.

Define scheduled jobs per site from the panel and they run as that site’s user — no hand-edited crontabs, no root jobs doing a site’s work.

  • Per-site schedules
  • Runs under the site’s own Linux user
  • Edit and remove from the site record
Redirects

Redirects, managed with the site.

Send an old hostname to a new site, or a path to its new home, from the panel. Each redirect hostname gets its own certificate and vhost, so the redirect works over HTTPS and behind Cloudflare.

  • Hostname and path redirects
  • HTTPS on the redirecting name
  • Managed with the destination site
Security

Security and access control, built in.

Sign in with a passkey, with TOTP as the fallback. Per-resource roles decide who can touch which site. Secrets are encrypted at rest, every privileged action is audited, and the panel sends no usage telemetry.

The Cloudflare Edge Shield locks a site’s origin to Cloudflare’s IP ranges so it only answers traffic that came through the proxy.

  • Passkeys and TOTP 2FA
  • Per-resource roles
  • Encrypted secrets, audit log
  • Cloudflare origin lock
Server & updates

Manage the server underneath.

Services, packages, resources and runtimes stay visible from the panel, and component tuning — database buffer pools, Redis memory, PHP-FPM workers — is sized to the host at install.

auraPanel updates itself: releases are Ed25519-signed and checksum-verified before they install, on demand or automatically.

  • Service status and restarts
  • Optional components
  • Resource-aware tuning
  • Signed self-update, automatic if you choose
Automation

Automate it from the command line.

The apcli tool drives installs, updates and on-box tasks — sites, databases, backups, licences, TLS, users and services — for scripts and provisioning pipelines.

  • apcli command-line tool
  • Non-interactive install flags
  • Complete reference in the docs
Catalogue

Application catalogue

Generated from the panel's own registry, so this list is what auraPanel can actually install. Auto-install deploys and configures in a click. Assisted deploys the files and database, then finishes in the application's own wizard. Preset has no installer: the site is preconfigured and handed the framework's scaffold command.

24 of 24 applications

WordPress Auto-install

Blogs, business sites & WooCommerce. Auto-installed with database, admin user and HTTPS.

CMS
WooCommerce Auto-install

WordPress storefront & cart. Installs WordPress, then the WooCommerce plugin, with database, admin user and HTTPS.

E-commerce
PrestaShop Auto-install

Open-source online store. Downloads the official release and runs the non-interactive installer.

E-commerce
Shopware Auto-install

Modern commerce platform. Scaffolds via Composer and runs the non-interactive installer.

E-commerce
Magento Preset

Adobe Commerce (Open Source). Provisions a Magento-ready site; deploy with your own Adobe keys via the shown commands.

E-commerce
OpenCart Auto-install

Lightweight open-source online store. Downloads the official release and runs the non-interactive installer.

E-commerce
Moodle Auto-install

Learning-management platform. Auto-installed with database, admin user and HTTPS.

LMS
Drupal Auto-install

Enterprise CMS (Composer-based). Auto-installed with database, admin user and HTTPS.

CMS
Joomla Auto-install

Flexible CMS for sites & portals. Auto-installed with database, admin user and HTTPS.

CMS
TYPO3 Auto-install

Enterprise PHP content management system. Scaffolds via Composer and runs the non-interactive setup.

CMS
Neos Assisted

Content application platform. Scaffolds via Composer; finish setup in the browser at /setup.

CMS
Laravel Auto-install

PHP framework. Scaffolds the app, wires the database and runs migrations.

PHP Frameworks
Symfony Auto-install

Reusable-component PHP framework. Scaffolds a runnable skeleton via Composer.

PHP Frameworks
CodeIgniter Auto-install

Lightweight, fast PHP framework. Scaffolds the app starter via Composer.

PHP Frameworks
CakePHP Auto-install

Rapid-development PHP framework. Scaffolds the app skeleton via Composer.

PHP Frameworks
Yii Auto-install

High-performance PHP framework. Scaffolds the basic app template via Composer.

PHP Frameworks
Matomo Assisted

Privacy-first web analytics. Files + database are deployed; finish the short setup wizard in the browser.

Analytics & Marketing
Mautic Auto-install

Open-source marketing automation. Scaffolds via Composer and runs the non-interactive installer.

Analytics & Marketing
Nextcloud Auto-install

Self-hosted files, calendar & contacts. Auto-installed with database, admin user and HTTPS.

File Sharing & Cloud
ownCloud Infinite Scale Auto-install

Modern ownCloud (Infinite Scale): a self-contained service, reverse-proxied. Auto-installed with an admin user and HTTPS.

File Sharing & Cloud
Gitea Auto-install

Lightweight self-hosted Git service. Auto-installed (SQLite) with an admin user and HTTPS.

Developer Tools
Next.js Preset

React framework for server-rendered and static sites. Provisions a Node.js site to deploy your app to.

JavaScript Frameworks
Nuxt Preset

Vue framework for server-rendered apps. Provisions a Node.js site to deploy your app to.

JavaScript Frameworks
Strapi Preset

Headless Node.js CMS. Provisions a Node.js site to deploy your project to.

JavaScript Frameworks

Beyond the catalogue you can deploy any other PHP, Node.js, Python or static application, or a Docker Compose stack.

Try the live demo

A real auraPanel on a real server, shared with everyone. Sign in with the demo account and click around.

Email
demo@goaura.one
Password
demo1234
Open the demo panel ↗

Shared public demo, so please don’t put anything personal in it. More about the demo →

Talk to us

Tell us what you need and how to reach you. A person reads this, not a queue.

We use these details only to reply to you. Privacy

Recent updates

What shipped in the last releases. With automatic updates on, each lands on your server the moment it is published.

  1. v1.21.3
    Framework sites were undetectable, and a restore could silently point the copy at the original's live database.

    DetectApp looked for each application's signature relative to the docroot — but every PHP framework in the registry serves from a subdirectory (DocrootSub: public, webroot, web, pub, docroot) and keeps the file that identifies it one level *above* that. So the Laravel signature searched <project>/public/artisan,…

  2. v1.21.2
    Restarting nginx now blocks the panel and reconnects, instead of showing a notice.

    v1.21.1 stopped the false "HTTP 520" but only put up a toast — and a toast is the wrong affordance when the panel itself is about to go away: the page sat there looking broken while every request failed underneath it.

  3. v1.21.1
    Restarting nginx from Services no longer reports a false failure.

    It showed "Restart failed — HTTP 520". The panel is reverse-proxied *by* nginx, so the request deadlocked against itself: the handler blocked waiting for the restart to finish, while nginx's graceful stop waited for that very request to drain. Neither could proceed until nginx's stop-retry timeout force-killed it,…

  4. v1.21.0
    Per-site X-Frame-Options, fixing page builders that couldn't load their preview.

    Elementor's editor failed with *"Multiple 'X-Frame-Options' headers with conflicting values ('DENY, SAMEORIGIN')"*. The cause is that nginx's add_header appends rather than replaces: when the application also sets the header — a WordPress security plugin, or a CDN transform — the browser received two values,…

  5. v1.20.6
    The multi-database restore refusal now says what is in the backup and what still works.

    It read only "Restoring a multi-database site isn't supported yet", which is a dead end: it named neither the databases involved, nor why one of them is the limit, nor any route forward.

  6. v1.20.5
    Services: cards in a row now match heights.

    Like the settings grid before it, the Services grid pinned each card to its own content height, so a row often showed one card noticeably shorter than the card beside it. Each row now takes the taller card's height and both fill it, and it re-balances as content changes — a runtime installed, a longer service list.

  7. v1.20.4
    Settings: paired cards now match heights.

    Organisation / Panel Domain and auraPanel Updates / Session timeout each sat at their own content height, so a row showed one card visibly shorter than its neighbour. Each row now takes the taller card's height and both fill it — driven by content, not a fixed value, so it still adapts as a card grows (a validation…

  8. v1.20.3
    Settings: Organisation and Panel Domain now share a row too.

    They were full-width blocks stacked above the rest of the page; they now sit side by side in the same two-column grid as the Updates / Session timeout pair, so the top of Settings reads as two tidy rows instead of four stacked bands. Both cards shrink cleanly — the logo drop zone is a fixed 44×44 and the name field…

All releases on GitHub ↗