WardPane
Baixar

A documentação está disponível em inglês e russo. Esta é a versão em inglês.

Documentação

Como instalar o WardPane, configurar sites e proteção e manter o painel atualizado.

Se servidores são novidade para você, comece por Instalação e Primeiros passos. As páginas de referência listam cada opção, o seu padrão e os arquivos que ela altera. Páginas marcadas como planejadas descrevem recursos de versões 2.x posteriores.

Primeiros passos

  • IntroductionWhat WardPane is, who it is for, and how this documentation is organised into getting started, hosting, protection, panel and help sections.
  • InstallationInstall WardPane on a clean Ubuntu 24.04 server with one command or from the archive, and a walk through what the installer does to the server.
  • First stepsSign in to the panel, add your first site, point its DNS at the server, upload the files, and keep an eye on the dashboard once the site is live.

Hospedagem

  • Sites and domainsHow sites, main domains and aliases work in WardPane, where site files live on the server, and how to create a site, upload files to it and delete it.
  • HandlersChoose what runs a site: no handler for static files, PHP, or a Node.js app. How to switch a site between them and how the three handlers compare.
  • PHPHow WardPane runs PHP sites: php-fpm per site in a systemd sandbox, read-only code, writable folders, routing, limits, logs and troubleshooting.
  • .htaccessApache .htaccess files without Apache: supported directives, what is refused, security behaviour, limits on regular expressions and the file check.
  • Node.jsHost a Node.js app with WardPane: folder layout, version, start command, environment, limits, PM2 per owner, the proxy, npm install and logs.
  • RuntimesThe Runtimes page lists the PHP versions installed on the server and the Node.js major versions, and shows which of your sites use each one.
  • SSL certificatesAutomatic Let's Encrypt certificates for every site and for the server IP: DNS checks, renewal, rate limits, the SSL tab and typical errors with fixes.
  • Shell clientA server terminal in your browser: root terminal in a root session, owner's terminal in the site folder. pm2, npm, git, permissions and caveats.
  • Export and importMove all sites and their settings to another server, or keep a copy, in one JSON file: merge and replace modes, what is left out, and the checks.

Proteção

  • How protection worksWhat WardPane checks on every request and in which order, what a blocked visitor sees, and what the site protection can and cannot do for you.
  • DDoS protection and bansThe per-site rate limit, temporary bans, IPv6 counting by /64, the cap on the number of bans, and the allow list that exempts trusted addresses.
  • Bot Fight ModeBlock AI and SEO crawlers, scanners, scripts, vulnerability probes, attack payloads in URLs and path scanning, with separate switches for each site.
  • Verified crawlers and IP feedsCatch fake Googlebots by checking published crawler IP ranges, block crawlers by their addresses, and apply public lists of known malicious IPs.
  • Honeypot pathA trap path that is disallowed in robots.txt: real visitors never go there, so any client that requests it is banned at once. How to set it up.
  • Geo-blockingBlock or allow visitors by country, by ready-made groups of countries, by hosting and cloud networks and by AS number, using MaxMind databases.
  • Browser language filterBlock or allow visitors by the languages their browser asks for in the Accept-Language header, as an extra signal next to the country they come from.
  • Allowed devicesShow a site only to visitors on the operating systems you choose. The filter shapes what ordinary browsers see, but it is easy to bypass on purpose.
  • Required URL parametersOpen a site only to visitors who came with your link, such as an ad link with ?ref=metaads, and show everyone else a 404 page or a redirect.
  • Password protectionAsk every visitor for a username and password (HTTP Basic) on staging copies and drafts. The password is stored on the server only as an scrypt hash.
  • Hotlink protectionStop other sites from embedding your images, videos and files directly on their pages and using your bandwidth, while your own pages keep working.
  • Security headersSet X-Frame-Options, Referrer-Policy, HSTS, Content-Security-Policy and Permissions-Policy for each site, starting from safe default values.
  • Block pagesShow blocked visitors your own page instead of the plain 404, and pick the status code it returns (404, 403 or 200) separately for each protection section.
  • Global blocklistPermanently block IP addresses and whole networks on every site of the server with one global list that works even on sites where protection is off.
  • CloudflareRun sites behind Cloudflare's orange cloud with real visitor IPs, working certificates and HTTPS redirects, and let the panel fix the zone via the API.

Painel

  • Panel settingsWhat the Settings page changes, where the values are stored, what applies at once and what needs a restart, and the full list of .env options.
  • Panel securityHow the panel protects its own sign-in: the panel login and root sign-in, brute-force limits, the IP allow list, sessions and the root helpers.
  • UpdatingHow WardPane updates work, the backup taken first and the automatic rollback, restoring a backup by hand, and moving over from Small Web Panel 1.x.
  • UninstallingRemove WardPane from a server, with or without its backups and panel data. Site files are never deleted, so your sites stay on the disk afterwards.

Ajuda

  • TroubleshootingWhere to look when something does not work, and fixes for the most common problems with panel sign-in, certificates, PHP, Node.js and protection.
  • FAQShort answers to common questions about WardPane: licensing, server requirements, Cloudflare, DDoS, other hosting panels, email and your data.

Planejado (2.1 a 2.5)

  • Databasesplanejado 2.1MySQL or MariaDB databases in WardPane 2.1: installing the database server, creating databases and users, and connecting to them from PHP and Node.js.
  • Site config fileplanejado 2.1Every site has a config file in an nginx-like syntax that you edit in the panel. It stays in sync with the forms, is checked line by line and versioned.
  • Usersplanejado 2.2Users in WardPane 2.2: sign-in with the server's own accounts, what each user sees, admins, signing in as a user, site owners and emergency login.
  • Simple and Expert modesplanejado 2.3Simple and Expert modes are two views of the same settings. Also covers the setup wizard, protection presets and health checks that help beginners.
  • DNSplanejado 2.4The DNS records a site needs, and DNS management in WardPane 2.4: zones on your own name servers, secondary servers and sync with Cloudflare.
  • Mailplanejado 2.5Mail for your domains in WardPane 2.5: mail domains, mailboxes, aliases and spam filtering, plus the DNS records mail needs to be delivered.