All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
Jabali Panel – Open Source (GPL) Hosting Control Panel – Looking for Testers & Contributors
Hi all,
I’d like to share a project I’ve been working on: https://github.com/shukiv/jabali-panel
What is Jabali Panel?
Jabali is a hosting control panel built by a sysadmins for sysadmins.
It doesn't abstract your server into a black box. It's a UI layer on top of standard Linux services and a real CLI — so when something breaks at 3am, you can still grep the logs and fix it yourself.
Jabali Panel is a 100% open source (GPL-3.0) web hosting control panel, currently in active development, and I’m looking for testers, contributors, and feedback from the community.
Feel free to roast me for this: Jabali is probably ~80% vibe coded.
But honestly, if that approach is good enough for companies like Google and Meta, it’s good enough for me.
I’d genuinely love constructive criticism — that’s the whole point of posting here.
If you have real feedback (even harsh), I’m all ears. If you’re just here to bash with no substance, I’ll probably ignore it.
Stack:
FrankenPHP (panel web server, independent of nginx)
Nginx (customer sites)
MariaDB (+ optional PostgreSQL)
Stalwart Mail Server (SMTP, IMAP, JMAP, ManageSieve — one binary, no Postfix/Dovecot mess)
PowerDNS with DNSSEC
Let’s Encrypt auto-SSL (issue + renew every 3h)
Modsecurity + CrowdSec for security
GoAccess for real-time stats
And more..
For the customer:
File manager, database manager, phpMyAdmin SSO
WordPress one-click install + built-in page cache plugin
Webmail (Bulwark JMAP client) with SSO
Per-user PHP-FPM pools (dynamic / static / ondemand)
SSH access via isolated nspawn containers per user
Bandwidth + disk usage tracking
What makes it different?
CLI-first:
Everything the panel does, you can do from the terminal:
jabali user:create, jabali nginx:regenerate, jabali ssl:check
The UI calls the same backend as the CLI — no hidden logic.
Agent architecture
The panel itself never runs as root.
A small agent handles privileged actions over a Unix socket.
Addons just drop into /etc/jabali/agent.d/.
Modern stack, small footprint
Laravel 12 + Filament v5 + Livewire.
No Java, no Ruby, no Node runtime for the panel.
Install with a single curl | bash on Debian/Ubuntu.
Mail done differently
Uses Stalwart instead of Postfix + Dovecot.
One Rust binary, fewer moving parts, fewer things to debug.
Transparent by default
jabali logs:share collects configs, logs, SSL state, FPM pools, etc.
Encrypted + tied to a ticket ID — no guesswork when debugging.
No lock-in:
Standard nginx configs, standard FPM pools, standard certbot.
Uninstall Jabali and your sites keep running.
What it’s NOT
Not trying to be cPanel (no WHM, no licensing, no bloat)
Not a Docker/orchestration platform
Not “cloud native”
It’s for people running VPS/dedis who want a clean, predictable way to manage PHP/WordPress hosting.
Please note:
Jabali is still actively developed.
It's already used in real production environments for my clients.
Expect rapid iteration and breaking changes until stable.
About me:
I’ve been a sysadmin + developer in hosting for ~30 years.
I’ve worked on real production systems and contributed to open-source projects like DTC (Domain Technologie Control).
This project is basically the result of years of “why is every panel doing this wrong?” experience.
Give it a spin. I’d appreciate it if you gave it a try and let me know what breaks.
Yehoshua
Comments
I will bestow upon you a compliment of the highest honour: "at least its not a single 17,000 file commit"
LOL! Thank you for that, I guess
But I too had to fight with the AI sometimes
It's an incredibly low bar, the last half dozen slop panels here authors didn't know how to use git and would use GH web interface to upload individual files, with secrets and unauthenticated root RCE in every function.
I agree. Vibe coding is an amazing tool to develop. The problem with vibe coding is not vibe coding, it's the vibe coders.
Give Jabali a spin and let me know what you think. Roast me. I'd love it. :-)
Your panel is perfect. Can its style be modified?
To a certain degree, yes. It will be more customized later on. Right now there is a Branding tab that you can change the:
Control Panel Name, logo,
And Page Templates where you can customize the default pages served by the panel such as the Suspended Page, and new domain index.html page.
I am planning it will support full color change and more pages you can edit.
Give it a shot and let me know what you think.
Will be sure to avoid.
You've been roasted.
The problem with vibe coding is vibe coding.
It's fine for a throw-away script to parse something that you'll run once and then discard, but to actually publish it? God no.
Why should I trust a program from someone who doesn't know how to program, especially when 100% of past slop posted here had serious vulnerabilities?
If vibe coding is good for the developers in Google and Meta, it is good enough for me.
I wrote that if you do not have a constructive criticism regarding the project, do not bother.
So Thank you for your useless comments.
The developers at Google and Meta are developers being forced to use this stuff. By and large, they hate it (when it's used to produce code - It's fine for assisting in code reviews). And... they are actual developers.
Either you're the world's fastest code reviewer and vulnerability researcher, or you're blindly trusting a large amount of code from a tool that is infamous for producing insecure slop.
So let me ask you: Who is checking your code for vulnerabilities? Not you because there's too much code to check (even if you were a programmer), and not the AI because it's the one hallucinating this slop in the first place.
Learn programming. Stop flying blind. Stop advocating that others put themselves at risk.
He has no idea what he's in for here lol
I am going through a lot of what he is doing, and I try to see as much issues as possible. I bring my 30 years of experience with web hosting and security in the field. My experience with other contribution made to other projects. I find issues with Jabali every day.
There is a small community in github that are contributing and testing, and Jabali needs more people to see and find vulnerabilities, bugs and issues with the project. This is why I asked for help.
So come aboard and help out to make a great panel together for everyone.
And I'm giving you help with germane advice: Drop the slop and recognize that you are not the fastest code reviewer in the world. I work in the infosec industry, I'm not guessing here.
Trying to see as many issues as possible is fruitless when this thing is spitting out code faster than anyone could possibly audit it. Even a well-sized team would take years to do that.
Do you have a demo page? If so, post it. My guess is it'll end up like the last three vibe coders who posted here: Hacked by page 3. I'm excited to see the YABS on your host.
Learn programming? I am programming since I was 12 years old, I am now 47. My first IDE was basic on an Apple IIc.
This comment show me your not here to give a real criticism.
So thank you for your input. And have a good day.
Please post your demo page.
And if you only listen to criticism that is not "your fundamental approach is flawed" then you're looking for affirmation, not feedback.
https://jabali-panel.com/demo/
Dude, you gave me criticism without even looking at the github. You were just criticized about vibe coding, not about the project.
This is why I wrote this in the first place:
Feel free to roast me for this: Jabali is probably ~80% vibe coded.
But honestly, if that approach is good enough for companies like Google and Meta, it’s good enough for me.
I’d genuinely love constructive criticism — that’s the whole point of posting here.
If you have real feedback (even harsh), I’m all ears. If you’re just here to bash with no substance, I’ll probably ignore it.
Bash harsh jabali project, and give me real constructive criticism!
Thank you.
I'm giving you a forewarning about what you're in for, not auditing your codebase for free.
That statement is reductive and betrays your risible naïvety.
is there PHP selector? that would be beneficial.
Edit: Ok, got it. its inside Customer Panel demo > PHP settings.
the UX looks good.
Yes, there is.
https://jabali-panel.com/docs/admin/php-manager/
The screen shot is a bit old, now it support PHP 7.4 to 8.5 when 8.5 is the default while the default can be changed.
Give it a spin and open an issue in github if you need help! I'd love if you try it out!
Ou boy, in ru language "jabali" means "fucked". Damn...
@jabali pro tip
Litter your git page and website with PICTURES / SCREENSHOTS.
most customers I know buy pictures, not reliability. Sadly but true
Don't be stupid. What is next?
We should have trust issues because OP is from Isreal?
is it halal?
nice work @jabali. Funny that all vibe code work has similar look and feel. Is there an option to see the cli commands under the hood, when your configuring stuff in the gui?
But it is full of screenshots. Take a look at the docs. There is also a demo.
Thank you for your kind words.
I am actually using Laravel Filament defaults only for design. So yeah, it might looks like other projects.
In the future there is a plan on making Jabali own Filament design.
LOL. I speak some russian, but I did not knew that. Jabali in Spanish means warthog. It's actually a word, like many other words in Spanish, that integrated from Arabic that got into Spanish through the conquest of Spain.
Jabali is an open source, GPL project. There are no customers. :-)
Besides, there are tons of pictures in the website front page and in the documentations.
Also there is a demo you can see. (although some pages changed over time, but the general feeling is there)
LOL.