Sites, domains and TLS
Accounts
Section titled “Accounts”An account is one customer’s space on a server. Each account gets its own containers (rootless Podman with user namespaces and SELinux labels), its own network and its own storage volume with a quota on bytes and files enforced by the kernel. A compromised site in one account cannot reach another account’s files, processes or databases.
An account’s limits come from its plan (disk, files, CPU, memory, sites, databases, PHP versions); an administrator can override a limit for one account, and the change is recorded in the audit log.
From an account, Launch a site creates:
- a WordPress site with a plugin set (a default set “Essentials” exists in every organization, and you can make your own), LiteSpeed Cache, and a snapshot you can roll back to in one click; or
- a PHP site (OpenLiteSpeed, or Apache for sites moved from cPanel that need
.htaccessbehaviour).
The generated WordPress administrator password is shown once, right after the launch, and is never stored by PlusPanel.
Domains and aliases
Section titled “Domains and aliases”Every site has a primary domain and any number of aliases. A host name can belong to one site per server.
Internationalized names are accepted (they are stored in their xn-- form); wildcards and IP addresses are
not.
If the domain’s zone is hosted in PlusPanel DNS, the site’s records can be created for you.
Otherwise point the domain’s A/AAAA records to the server’s public addresses shown in the panel.
PHP versions
Section titled “PHP versions”Each site picks its PHP version among the versions its plan allows (8.2 to 8.5 supported, 8.5 by default; 8.1 is end-of-life and kept only for old sites). A version change is checked after it is applied: if the site stops answering, it rolls back to the previous version by itself.
Certificates (TLS)
Section titled “Certificates (TLS)”| Mode | What happens |
|---|---|
| Automatic | a Let’s Encrypt certificate is issued for the domain and its aliases, renewed before it expires, and HTTP is redirected to HTTPS |
| DNS (wildcard) | for sites whose zone is in PlusPanel DNS: the control plane proves the domain through DNS and can issue a wildcard certificate |
| Custom | you import your own certificate and key; they are checked before use and the key is never shown again or written to a log |
| Off | plain HTTP |
Databases
Section titled “Databases”Each account can run its own MariaDB, PostgreSQL or Valkey (an open-source, Redis-compatible cache) in its own container, with databases, users and grants managed from the panel. Version upgrades are one click and roll back if they fail; downgrades are refused. Idle database services can be parked to save memory and wake on demand. phpMyAdmin opens with a one-time login link, so you never type the database password.
Files, SFTP and the web terminal
Section titled “Files, SFTP and the web terminal”- The file manager works with the account’s own permissions. Files up to 8 MiB open in the editor; larger ones are downloaded and uploaded as streams, checked end to end.
- SFTP is off by default. An administrator switches it on per server, then creates an SFTP user for an account on request, with a password (shown once) or SSH keys.
- The web terminal opens a shell inside one of the account’s containers, never on the server itself. Who opened it, when and for how long is recorded; what was typed is not.