HestiaCP — Open Source Web Server Control Panel for Linux

Introduction

HestiaCP is an open-source web hosting control panel that provides a clean web interface for managing web sites, email accounts, DNS zones, databases, and FTP users on Linux servers. It is a community fork of VestaCP with improved security, modern PHP support, and active development.

What HestiaCP Does

• Manages Nginx and Apache web server configurations with virtual host templating
• Creates and administers email domains, mailboxes, aliases, and webmail access via Roundcube
• Handles DNS zone management with BIND or local DNS caching
• Provisions MySQL and PostgreSQL databases with per-user access controls
• Supports Let's Encrypt SSL certificate issuance and automatic renewal for all hosted domains

Architecture Overview

HestiaCP installs and configures a full LEMP/LAMP stack on the host system: Nginx (as reverse proxy or standalone), Apache (optional backend), PHP-FPM with multiple PHP version support, Exim for SMTP, Dovecot for IMAP/POP3, BIND for DNS, and either MySQL or PostgreSQL. A web panel served on port 8083 communicates with backend shell scripts that generate and apply configuration files for each service. User isolation is enforced through system-level user accounts and file permissions.

Self-Hosting & Configuration

• Requires a fresh Debian 10+ or Ubuntu 18.04+ server with no pre-installed web services
• Run the install script which presents options for Nginx, Apache, mail, DNS, firewall, and database components
• Access the admin panel at https://hostname:8083 with the credentials generated during installation
• Add web domains through the panel to auto-generate Nginx/Apache virtual hosts with PHP-FPM pools
• Configure automatic backups to local storage or remote destinations via the backup manager

Key Features

• Multi-PHP support: run different PHP versions (7.4, 8.0, 8.1, 8.2, 8.3) per domain simultaneously
• Built-in firewall management with fail2ban integration for brute-force protection
• Reseller and multi-user support with configurable hosting packages and resource quotas
• One-click Let's Encrypt SSL provisioning with automatic renewal and HTTP/2 support
• Quick installer for WordPress, PrestaShop, Drupal, Laravel, and other web applications

Comparison with Similar Tools

• cPanel/Plesk — commercial panels with licensing costs; HestiaCP is free and open source
• CyberPanel — OpenLiteSpeed-focused; HestiaCP supports Nginx and Apache with more flexible PHP configuration
• CloudPanel — modern UI but limited to Nginx; HestiaCP offers Nginx, Apache, and combined proxy setups
• VestaCP — HestiaCP's predecessor, now unmaintained; HestiaCP provides security fixes, modern PHP support, and active development
• Webmin/Virtualmin — general-purpose server admin; HestiaCP provides a more streamlined hosting-focused experience

FAQ

Q: Can I install HestiaCP on an existing server with services already running? A: It is strongly recommended to install on a fresh server. Existing configurations for Nginx, Apache, or mail services will conflict with HestiaCP's management.

Q: Does it support multiple PHP versions? A: Yes. You can install multiple PHP versions and assign different versions to different domains through the panel.

Q: Is there a migration path from cPanel or VestaCP? A: VestaCP backups can be restored directly. For cPanel, third-party migration scripts exist, or you can manually recreate accounts and transfer files.

Q: How do I keep HestiaCP updated? A: Run apt update && apt upgrade on Debian/Ubuntu. HestiaCP updates are delivered through the system package manager.

Sources

• https://github.com/hestiacp/hestiacp
• https://hestiacp.com/