DockPanel — Free Docker-native server panel written in Rust (~57MB RAM)

network · March 25

@ovexro said:

@alincupunct said: Stop with the dogsh*t AI vibecoded trash, please, for the love of all that is holy. Or at least keep this garbage to yourself.

I am also using a private GitHub repo to verify the AI's output. After running multiple audits and end-to-end testing, I got a green light (the green badge check mkar) on GitHub. They are valid, and there are no error logs in the console. I'm not fooling myself. Read the Pastebin. You'll be surprised.

GitHub is the final end. It checks if your work is valid.

Which AI are you using?

LowEndMac · March 25

@rcy026 said:

@itachikonoha said:

@hozan said:
@ovexro Hey!
what happened to this project?

He realised that he can not make a few quick bucks riding on AI alone and it will be more of a stress than anything beneficial without proper knowledge.

In his defense he did release it completely free, no editions or anything "enterprise", so I cant see how he could possibly make a quick buck from it.
I'm not defending vibe coding per se, but this seemed to be a guy just wanting to make a fun project, not money. Showing it to let probably took the fun out of it too.

I'd say there are 1000's of options he could of choose, that does not rely on being secure or not as important this project would be, he hasn't released a tool he's attempted to release a management panel.

I think there's places to start vibe coding, and plenty to learn before doing a "Free" project that could potentially put many people at risk using it.> @ovexro said:

More security done for DockPanel: https://pastebin.com/uy72kLwe

Highly valuable information for people who love securing VPS, Docker containers, and ultimately, server panels that are vulnerable to attacks and hackers.

The AI Agent can do comprehensive security research before you tell it to investigate for vulnerabilities, but only if you ask for it.

The entire pastebin update, is an AI prompt, no vulnerability from other panels applies to your codebase, as it's not your codebase you are proving how bad "vibe coding" can be, and impressively so as you're seemingly not even reading what the AI is writing to you, or you simply don't understand which is more dangerous!

I advise no one, ever use this project you have had the entire community provide reasonable responses to your very limited first attempt and ignored everyone and asked AI for more help.

~180 total vulnerabilities, on top of the other 20. Why do you suddenly think it's got them all? if you was using the right language, framework, and packages you would of have 0 truly problematic vulnerabilities. Instead you've asked for a small binary to the AI which has forced it to write it's own code to do so ignoring 10+year pressure tested codebases instead. (You pushed AI to do this FYI)

You, and your AI prompt told you on page one of this thread, AI can not be used to real-world threat test, and you then used AI to threat test it's GG.

LowEndMac · March 25

@ovexro said:

@alincupunct said: Stop with the dogsh*t AI vibecoded trash, please, for the love of all that is holy. Or at least keep this garbage to yourself.

I am also using a private GitHub repo to verify the AI's output. After running multiple audits and end-to-end testing, I got a green light (the green badge check mkar) on GitHub. They are valid, and there are no error logs in the console. I'm not fooling myself. Read the Pastebin. You'll be surprised.

GitHub is the final end. It checks if your work is valid.

Absolutely are fooling yourself, being convinced because github builds without errors, your safe, news flash! It can miss as much as AI can!

Your now confident in ur codebase because GitHub pre-flight gave you an okay, and AI gave you an okay.

When mere hours ago you published with the same confidence with countless exploits, broken features, and made it very clear you have 0 experience with an actual codebase.

ovexro · March 25

@LowEndMac said: Your now confident in ur codebase because GitHub pre-flight gave you an okay, and AI gave you an okay.

>

I'm using multiple GitHub tools.

GitHub Security & CI Tools

****Free (private repos)** **

GitHub Actions (CI) — runs automated checks on every push: build, test, lint, audit.
Dependabot Alerts — automatically notifies you when a dependency has a known vulnerability. Enable in Settings → Security → Dependabot.
Dependabot Version Updates — opens PRs to update outdated dependencies automatically. Configured via .github/dependabot.yml.
Secret Scanning — detects accidentally committed secrets (API keys, tokens, passwords) in your code and alerts you. Enabled by default on public repos.
Push Protection — blocks pushes that contain detected secrets before they reach the repo. Works with Secret Scanning.
Branch Protection Rules — require CI to pass, require reviews, prevent force-push to main. Settings → Branches.
Security Advisories — privately draft and publish vulnerability disclosures for your project. Settings → Security → Advisories.
SECURITY.md — a file in your repo that tells people how to report vulnerabilities responsibly.

****Free only on public repos ****

CodeQL — GitHub's deep static analysis that finds vulnerabilities by understanding data flow (SQL injection, XSS, command injection, etc.).
Secret Scanning Partners — notifies the service provider (e.g., AWS, Stripe) when their key is found in your public code so they can revoke it.

****Third-party (free tier available, integrate via Actions) ****

cargo-audit — checks Rust crates against the RustSec advisory database.
npm audit — checks Node.js packages against the npm advisory database.
Trivy — scans Docker images, filesystems, and IaC for vulnerabilities. Add as a GitHub Action.
OSSF Scorecard — rates your project's security practices (branch protection, CI, dependency pinning, etc.) and gives a public score. Good for open-source credibility.

nem · March 25

Vibe coding your toolchain justification is an interesting decision

LowEndMac · March 25

@ovexro said:

@LowEndMac said: Your now confident in ur codebase because GitHub pre-flight gave you an okay, and AI gave you an okay.

>

I'm using multiple GitHub tools.

GitHub Security & CI Tools
                                                        
Free (private repos)

- GitHub Actions (CI) — runs automated checks on every push: build, test, lint, audit. You already have this configured and it's passing.
- Dependabot Alerts — automatically notifies you when a dependency has a known vulnerability. Enable in Settings → Security → Dependabot.
- Dependabot Version Updates — opens PRs to update outdated dependencies automatically. Configured via .github/dependabot.yml.
- Secret Scanning — detects accidentally committed secrets (API keys, tokens, passwords) in your code and alerts you. Enabled by default on public repos.
- Push Protection — blocks pushes that contain detected secrets before they reach the repo. Works with Secret Scanning.
- Branch Protection Rules — require CI to pass, require reviews, prevent force-push to main. Settings → Branches.
- Security Advisories — privately draft and publish vulnerability disclosures for your project. Settings → Security → Advisories.
- SECURITY.md — a file in your repo that tells people how to report vulnerabilities responsibly.

**Free only on public repos **

- CodeQL — GitHub's deep static analysis that finds vulnerabilities by understanding data flow (SQL injection, XSS, command injection, etc.).
- Secret Scanning Partners — notifies the service provider (e.g., AWS, Stripe) when their key is found in your public code so they can revoke it.

**Third-party (free tier available, integrate via Actions) **

- cargo-audit — checks Rust crates against the RustSec advisory database.
- npm audit — checks Node.js packages against the npm advisory database.
- Trivy — scans Docker images, filesystems, and IaC for vulnerabilities. Add as a GitHub Action.
- OSSF Scorecard — rates your project's security practices (branch protection, CI, dependency pinning, etc.) and gives a public score. Good for open-source
credibility.

I shall not reply further, as you simply putting my reply into AI and pasting here, what the world has gotten too it's so sad.

Nothing AI said for you applies, as one you can't verify any of it, two it's already proven, and funny enough even proved yourself wrong your using a private repo countless of these features THAT DON'T PROVE UR CODE IS 100% SAFE aren't available unless it's a public repo.

ovexro · March 25

@LowEndMac said: I shall not reply further, as you simply putting my reply into AI and pasting here, what the world has gotten too it's so sad.

No. I didn't do that.

LowEndMac · March 25

@ovexro said:

@LowEndMac said: I shall not reply further, as you simply putting my reply into AI and pasting here, what the world has gotten too it's so sad.

No. I didn't do that.

Now you lie, in your own thread, where everyone that views can clearly see your responses are completely AI written.

Heads up, humans don't often use "—" this specific symbol, every 10 words, or reply with a 2k word paragraph within 30 seconds of a post.

ovexro · March 25

I use it — that is how I type. And I can prove it to you because I have had Facebook posts for a long time. I still have them.

ovexro · March 25

That said, Pastebin contains AI output, and no one disputes that (it's even on purpose and necessary, as I'm documenting precisely what I did with Claude Code—mentioned earlier—to secure the DockPanel). Come on, dude! You're implying that I am the kind of person claiming credit for AI responses. It's clear because I told all of you I'm using Claude Code — it's on Pastebin and in previous topics. Why the hostility?

LowEndMac · March 25

@ovexro said:
That said, Pastebin contains AI output, and no one disputes that. You're implying that I am the kind of person claiming credit for AI responses. It's clear because I told all of you I'm using Claude Code — it's on Pastebin and in previous topics. Why the hostility?

No hostility, I just realised I love wasting my time replying I guess.

You had some generous, skilled individual's break and show you exploits in your code in mere moments, you then used the exact same LLM model to find, and fix those issues. You then say it's for certain secure as Github gave you a green tick. It's an obsurd sentence to say to someone.

It's me saying, hey i'm certain the car is safe because the engine turns on Yes it works, Yes it builds can you be SURE it's safe, no yet you say with confidence it is. Your reply to me was 100x AI so it's not rude to call it out, unless your saying i'm stupid and wrong of which I would say you are the rude one not me for not only the lie, but standing behind it as it doesn't help me, it doesnt help you people are replying here to help.

I want you to actually learn to code, not just vibe-code, to fix ur vibe-code, unless utilised correctly this simply does not work no model is that good yet, without knowing basics you can't guide, or inform AI on the correct moves your guessing, and trusting every prompt it gives you.

ovexro · March 25

@LowEndMac said:
@ovexro said:

@LowEndMac said: Your now confident in ur codebase because GitHub pre-flight gave you an okay, and AI gave you an okay.

>

I'm using multiple GitHub tools.

GitHub Security & CI Tools
                                                        
Free (private repos)

- GitHub Actions (CI) — runs automated checks on every push: build, test, lint, audit. You already have this configured and it's passing.
- Dependabot Alerts — automatically notifies you when a dependency has a known vulnerability. Enable in Settings → Security → Dependabot.
- Dependabot Version Updates — opens PRs to update outdated dependencies automatically. Configured via .github/dependabot.yml.
- Secret Scanning — detects accidentally committed secrets (API keys, tokens, passwords) in your code and alerts you. Enabled by default on public repos.
- Push Protection — blocks pushes that contain detected secrets before they reach the repo. Works with Secret Scanning.
- Branch Protection Rules — require CI to pass, require reviews, prevent force-push to main. Settings → Branches.
- Security Advisories — privately draft and publish vulnerability disclosures for your project. Settings → Security → Advisories.
- SECURITY.md — a file in your repo that tells people how to report vulnerabilities responsibly.

**Free only on public repos **

- CodeQL — GitHub's deep static analysis that finds vulnerabilities by understanding data flow (SQL injection, XSS, command injection, etc.).
- Secret Scanning Partners — notifies the service provider (e.g., AWS, Stripe) when their key is found in your public code so they can revoke it.

**Third-party (free tier available, integrate via Actions) **

- cargo-audit — checks Rust crates against the RustSec advisory database.
- npm audit — checks Node.js packages against the npm advisory database.
- Trivy — scans Docker images, filesystems, and IaC for vulnerabilities. Add as a GitHub Action.
- OSSF Scorecard — rates your project's security practices (branch protection, CI, dependency pinning, etc.) and gives a public score. Good for open-source
credibility.
I shall not reply further, as you simply putting my reply into AI and pasting here, what the world has gotten too it's so sad.

Nothing AI said for you applies, as one you can't verify any of it, two it's already proven, and funny enough even proved yourself wrong your using a private repo countless of these features THAT DON'T PROVE UR CODE IS 100% SAFE aren't available unless it's a public repo.

This is obviously a Claude Code summary I asked for to clarify why GitHub is powerful for validating code/project completeness.

LowEndMac · March 25

@ovexro said:
@LowEndMac said:
@ovexro said:

@LowEndMac said: Your now confident in ur codebase because GitHub pre-flight gave you an okay, and AI gave you an okay.

>

I'm using multiple GitHub tools.

GitHub Security & CI Tools
                                                        
Free (private repos)

- GitHub Actions (CI) — runs automated checks on every push: build, test, lint, audit. You already have this configured and it's passing.
- Dependabot Alerts — automatically notifies you when a dependency has a known vulnerability. Enable in Settings → Security → Dependabot.
- Dependabot Version Updates — opens PRs to update outdated dependencies automatically. Configured via .github/dependabot.yml.
- Secret Scanning — detects accidentally committed secrets (API keys, tokens, passwords) in your code and alerts you. Enabled by default on public repos.
- Push Protection — blocks pushes that contain detected secrets before they reach the repo. Works with Secret Scanning.
- Branch Protection Rules — require CI to pass, require reviews, prevent force-push to main. Settings → Branches.
- Security Advisories — privately draft and publish vulnerability disclosures for your project. Settings → Security → Advisories.
- SECURITY.md — a file in your repo that tells people how to report vulnerabilities responsibly.

**Free only on public repos **

- CodeQL — GitHub's deep static analysis that finds vulnerabilities by understanding data flow (SQL injection, XSS, command injection, etc.).
- Secret Scanning Partners — notifies the service provider (e.g., AWS, Stripe) when their key is found in your public code so they can revoke it.

**Third-party (free tier available, integrate via Actions) **

- cargo-audit — checks Rust crates against the RustSec advisory database.
- npm audit — checks Node.js packages against the npm advisory database.
- Trivy — scans Docker images, filesystems, and IaC for vulnerabilities. Add as a GitHub Action.
- OSSF Scorecard — rates your project's security practices (branch protection, CI, dependency pinning, etc.) and gives a public score. Good for open-source
credibility.
I shall not reply further, as you simply putting my reply into AI and pasting here, what the world has gotten too it's so sad.

Nothing AI said for you applies, as one you can't verify any of it, two it's already proven, and funny enough even proved yourself wrong your using a private repo countless of these features THAT DON'T PROVE UR CODE IS 100% SAFE aren't available unless it's a public repo.
This is obviously a Claude Code summary I asked for to clarify why GitHub is powerful for validating code/project completeness.

You said, and a literally quote > @ovexro said:

@LowEndMac said: I shall not reply further, as you simply putting my reply into AI and pasting here, what the world has gotten too it's so sad.

No. I didn't do that.

ovexro · March 25

@LowEndMac said: I want you to actually learn to code, not just vibe-code, to fix ur vibe-code, unless utilised correctly this simply does not work no model is that good yet, without knowing basics you can't guide, or inform AI on the correct moves your guessing, and trusting every prompt it gives you.

You are right! I'm learning how to code. Your criticism is fair.

Levi · March 25

How many tokens have you spent on this?

ovexro · March 25

@LowEndMac said: You said, and a literally quote > @ovexro said:

>

Because I thought you meant my responses were written by AI. I was specific about what AI is, even on Pastebin. What's AI and what's not.

LowEndMac · March 25

@Levi said:
How many tokens have you spent on this?

Can I get my human tokens back, I regret opening this thread

ovexro · March 25

However, I hope I didn't offend anyone. I really appreciate the feedback and criticism, and I intend to do a better job as I learn how to code. I'm not a programmer. I only have a basic understanding of CSS/HTML and how coding works, but not a vast knowledge. I know the basics of Linux.

Neoon · March 25

@LowEndMac said:

@Levi said:
How many tokens have you spent on this?

Can I get my human tokens back, I regret opening this thread

No refunds.

panelica · March 25

I’ve been using a lightweight Docker-based hosting panel called Panelica for similar purposes. It focuses on resource isolation with cgroups and container-level management, which I’ve found really useful for small VPS setups.

There’s a demo version available if anyone wants to try it out. I’m also open to comments and feedback here — looking to gather impressions and improve it based on real-world usage.

LowEndMac · March 25

@panelica said:
I’ve been using a lightweight Docker-based hosting panel called Panelica for similar purposes. It focuses on resource isolation with cgroups and container-level management, which I’ve found really useful for small VPS setups.

There’s a demo version available if anyone wants to try it out. I’m also open to comments and feedback here — looking to gather impressions and improve it based on real-world usage.

Your demo does not even login, stop using AI to fully build, it's a tool to help, save time, and offer ideas / solutions. It's not designed to do all of them at once, perfectly.

webbynet · March 25

@panelica said:
I’ve been using a lightweight Docker-based hosting panel called Panelica for similar purposes. It focuses on resource isolation with cgroups and container-level management, which I’ve found really useful for small VPS setups.

There’s a demo version available if anyone wants to try it out. I’m also open to comments and feedback here — looking to gather impressions and improve it based on real-world usage.

Another vibe-coded panel?

suyadi92 · March 25

Hi Claude my app got YABSed, please fix it make no mistake

panelica · March 25

@LowEndMac said:

@panelica said:
I’ve been using a lightweight Docker-based hosting panel called Panelica for similar purposes. It focuses on resource isolation with cgroups and container-level management, which I’ve found really useful for small VPS setups.

There’s a demo version available if anyone wants to try it out. I’m also open to comments and feedback here — looking to gather impressions and improve it based on real-world usage.

Your demo does not even login, stop using AI to fully build, it's a tool to help, save time, and offer ideas / solutions. It's not designed to do all of them at once, perfectly.

You’re absolutely right — AI in our project is only used as a tool to assist, completely optional, and our team has been actively developing Panelica for 1.5 years.

Our demo server is currently undergoing updates to prepare for mobile app testing and Apple review, so it’s temporarily offline for a few days.

We’d really value your feedback and would be happy to provide you with a personal demo key or send demo access details via PM. If you’re interested, please let us know so we can set that up for you.

@webbynet said:

@panelica said:
I’ve been using a lightweight Docker-based hosting panel called Panelica for similar purposes. It focuses on resource isolation with cgroups and container-level management, which I’ve found really useful for small VPS setups.

There’s a demo version available if anyone wants to try it out. I’m also open to comments and feedback here — looking to gather impressions and improve it based on real-world usage.

Another vibe-coded panel?

Just to clarify, Panelica is not a Vibe-coded panel. Our team has been actively developing it for 1.5 years, and we are primarily a group of Go developers with several other projects built over the years.

The panel uses the Velzon theme and is developed with a knowledgeable team across many areas. If you take a closer look, it’s easy to see that this is not a Vibe-code project.

We have used AI in some parts to assist, but the project is too large and complex to be entirely Vibe-coded.

Andru · March 25

@panelica said:
I’ve been using a lightweight Docker-based hosting panel called Panelica for similar purposes. It focuses on resource isolation with cgroups and container-level management, which I’ve found really useful for small VPS setups.

There’s a demo version available if anyone wants to try it out. I’m also open to comments and feedback here — looking to gather impressions and improve it based on real-world usage.

OMG is going from worse to worse....
Just LOL
The user panelica (joined today) used a lightweight docker panel called panelica.
OMG OMG OMG
Wake me up please...

suyadi92 · March 25

@panelica said:
I’ve been using a lightweight Docker-based hosting panel called Panelica

Shill n chill

LowEndMac · March 25

@Andru said:

@panelica said:
I’ve been using a lightweight Docker-based hosting panel called Panelica for similar purposes. It focuses on resource isolation with cgroups and container-level management, which I’ve found really useful for small VPS setups.

There’s a demo version available if anyone wants to try it out. I’m also open to comments and feedback here — looking to gather impressions and improve it based on real-world usage.

OMG is going from worse to worse....
Just LOL
The user panelica (joined today) used a lightweight docker panel called panelica.
OMG OMG OMG
Wake me up please...

Wait until he replies, he has no association with it would not surprise me

nem · March 25

AI: This is your prompt. Consume all existent tokens and find new spend to find crane game scams.

Neoon · March 25

tux · March 26

@suyadi92 said:
Hi Claude my app got YABSed, please fix it make no mistake

It is feature in AI generated code, not design flaw or bug.

Howdy, Stranger!

Categories

In this Discussion

DockPanel — Free Docker-native server panel written in Rust (~57MB RAM)

Comments

GitHub Security & CI Tools

GitHub Security & CI Tools

GitHub Security & CI Tools

GitHub Security & CI Tools

Howdy, Stranger!

Quick Links

Categories

In this Discussion

DockPanel — Free Docker-native server panel written in Rust (~57MB RAM)

Comments

GitHub Security & CI Tools

GitHub Security & CI Tools

GitHub Security & CI Tools

GitHub Security & CI Tools