Features / DNS & SSL
Your own nameservers. Free certificates.
BIND9 answers for every hosted zone, with validation before every reload. Let's Encrypt certificates are issued and renewed for every domain and for the panel itself.
DNS
Run your own authoritative DNS without editing zone files.
- Zone editor: A, AAAA, CNAME, MX, TXT, NS, CAA, SRV and SSHFP
- One-click DNSSEC with the DS record for your registrar
- Server nameservers for every zone, with automatic glue
- Nightly nameserver check flags zones still pointed at the registrar
- Zone validation: bad zones are rejected before reload
- Templates, import and export of zone text
- Secondary nameservers with zone transfers and notify
- Reseller nameservers: their own ns1/ns2 names for their clients
SSL certificates
HTTPS everywhere, without lifting a finger.
- Let's Encrypt per domain with auto-renewal
- Re-issue to add www. and mail. once their DNS points here
- Service certificates for the panel, webmail and FTP
- Expiry tracking and alerts
- Apps switch to HTTPS on issue (WordPress, PrestaShop, Flarum, phpBB)
- Self-signed fallback for LAN-only servers
Security headers
Sensible browser protections, set per domain.
- nosniff, frame and referrer protection on by default for new domains
- HTTP to HTTPS redirect once a valid certificate is in place
- Opt-in HSTS, refused without a real certificate
- Content-Security-Policy per domain