NovaPanel

Documentation

Everything you need to install, license, and operate NovaPanel — plus the recipes for common day-two tasks. Missing something? Ask in Discord.

Getting started

How-to guides

Onboard a customer in one step

Create Account: account, website, DNS and FTP together, plus a paste-ready credential handover.

Set up email for a customer

Mailboxes, DNS records, SPF/DKIM/DMARC, common gotchas.

Email deliverability & alerts

Get outbound mail into the inbox: PTR, SPF, DKIM, DMARC, the Cloudflare trap, relays, and admin alert emails.

One-click app installs

Install WordPress, Laravel, Nextcloud, Ghost and ~30 more onto any site.

Manage WordPress sites

Update core, plugins & themes on demand, or auto-update every site nightly.

Migrate a WordPress site

Files + database + DNS, in roughly 30 minutes.

Import from cPanel, DirectAdmin or HestiaCP

Upload a backup archive and the panel recreates the account — sites, databases, mail, DNS, cron. Dry run first, nothing overwritten.

Migrate from cPanel by hand

The manual account-by-account path, for anything the importer reports it could not bring across.

Web Application Firewall

Coraza + OWASP CRS: the three modes, per-category tuning, safe rollout for a live store.

Choosing a web server

Run a site on OpenLiteSpeed, Nginx/OpenResty or Apache instead of the default — what changes and what doesn't.

Using the File Manager

Browse, upload, edit, and organise site files from the browser — no SSH needed.

White-label the customer panel

Logo, colours, login page, email From — make it look like yours.

Deploy from Git

Push-to-deploy from GitHub or GitLab, custom build steps, and one-click rollback.

Keeping NovaPanel updated

What installs itself, what waits for you, and how to turn automatic security updates off.

FOSSBilling integration

Sell hosting from FOSSBilling: orders provision a full account with website, DNS, FTP and SSL, and customers see their live usage.

Outbound webhooks

HMAC-signed event POSTs into Slack, Zapier, your CRM — anything HTTP.

Restore a backup

Snapshots, restoring a single site, manual SQL dumps.

Publish staging to live

Push a WordPress staging copy over production — files, or files and database, with a backup taken first.

Offsite backups & monitoring

Push backups to S3/B2/SFTP, the Health Score, and resource alerts.

Configure DNS for a new domain

Registrar-managed vs PowerDNS-authoritative, plus DNSSEC.

Running behind Cloudflare

Which ports work through the proxy, why phpMyAdmin/webmail use 8443/2096, and why mail/FTP must be DNS-only.

Run behind a Cloudflare Tunnel

Homelab setup: expose the panel without opening ports — plus what doesn't fit through an HTTP-only tunnel.

Reference