uAdmin

Panel access

The panel is separate from web projects — it runs on port 10001. Client websites use standard ports 80/443.

Panel URL (example):

https://<hostname>:10001

Web project (example):

https://<domena>

First login

After install use the default account — change the password immediately in Settings → Users.

E-mail:   admin@localhost
Password: changeme

Credentials file

MariaDB and other generated passwords are stored in:

/home/uadmin/INSTALL-PASSWORDS.txt
/root/uadmin-INSTALL-PASSWORDS.txt

Panel SSL

In the panel: Settings → Panel SSL — Let's Encrypt certificate for the panel hostname (e.g. panel.example.com:10001). Web projects have separate SSL in the SSL module per domain.

Stack wizard

Before the first project run Installations → wizard: PHP-FPM versions, MariaDB, Certbot, Adminer, vsftpd, UFW and Fail2ban. Apache is usually already installed with the panel.

Dashboard

After login the panel immediately shows server resources (CPU, RAM, disk, swap). Project Health (traffic per project), Fail2ban summary and service status widgets load in the background — the page is ready in seconds instead of tens of seconds.

System cleanup

System maintenance → Cleanup tab: scan and remove cache/apt archive, vacuum systemd journal with permanent journald.conf settings, and prune old OTA panel release versions.

DNS module (PowerDNS)

uAdmin can manage a dedicated authoritative DNS server: install on a new Ubuntu 24.04 VM, attach an existing stack or run secondary DNS with AXFR replication. Everything through the DNS module in the sidebar — no manual zone file editing on the server.

Primary DNS installation

DNS → Install primary server. Enter IP, hostname (e.g. dns1.example.com), SSH access and panel egress IP (this uAdmin panel IP for firewall). Wizard installs MariaDB, PowerDNS, connector, UFW and enrollment key. After completion: health check and zone management.

Attach existing DNS / multiple panels

On another uAdmin panel: DNS → Attach existing. Use the enrollment token from the primary server (DNS → Server management). The new panel does not rotate the API key — the same DNS can serve production and staging panels. On each panel: Sync API credentials if health reports auth errors.

Zones, templates and projects

DNS → Zones: create a domain, edit A/CNAME/MX/TXT records, apply templates (web, mail). Glue/NS settings for registrars. When creating a web project enable DNS support — the panel automatically creates the zone and basic records if DNS is active.

DynDNS

DNS → DynDNS: add a host in an existing zone (e.g. home.example.com); the panel generates update credentials. The client sends an HTTPS request to the DNS server update port (8088/tcp) — the A/AAAA record updates automatically when the public IP changes.

Ports and security

DNS VM: 53/tcp+udp (public), SSH, connector API (8443/tcp — only from panel IPs), DynDNS update (8088). From the panel: re-apply install steps (maintenance, firewall, connector, TLS) in DNS → Server data — no SSH on the DNS server.

Mail module (Postfix/Dovecot/Roundcube)

uAdmin can manage a dedicated mail server: install on a new Ubuntu 24.04 VM, virtual domains, mailboxes, forwarders, webmail SSO and rspamd antispam. Everything through the Mail module in the sidebar — no manual Postfix/Dovecot configuration editing.

Mail server installation

Mail → Install mail server. Enter IP, hostname (e.g. mail.example.com), SSH access and panel egress IP. Wizard installs Postfix, Dovecot, Roundcube, rspamd, connector, UFW and TLS certificate. After completion: health check and add the first domain.

Domains, addresses and webmail

Mail → Domains and Mail addresses: create virtual domains and mailboxes. If DNS Primary is active, the panel automatically adds MX/SPF/DMARC/DKIM. The «Open webmail» button launches SSO in Roundcube at webmail.{domain}.

Client settings

The Mail addresses page shows IMAP (993 SSL), POP3 (995 SSL), SMTP (25, 587 STARTTLS, 465 SSL). Use mail.{domain} as the hostname in Outlook or Thunderbird.

TLS certificates

Mail → Server settings → Issue/Renew certificate. Let's Encrypt DNS-01 includes mail.{domain} and webmail.{domain} for each virtual domain. Renew the certificate after adding new domains.

Ports and security

Mail VM: 25, 587, 465 (SMTP), 993 (IMAPS), 995 (POP3S), 443 (webmail), SSH, connector API (8444/tcp — only from panel IPs). After panel OTA re-apply install steps on the mail VM (Dovecot, Firewall, Roundcube, Connector).

Site migration (CyberPanel / cPanel)

The migrate-panel tool moves an existing site to uAdmin: web files, database, mailboxes, forwarders and DNS zone. It runs on the uAdmin VPS (root) and talks to the source panel over SSH, UAPI or FTP. The same code backs the web GUI at /panel-migrate/.

Web GUI

On the uAdmin panel open /panel-migrate/ (port 10001). Sign-in uses the same recovery token as the Recovery GUI. Choose the source panel, fetch the site list, run all and watch the log.

https://<hostname>:10001/panel-migrate/

Token (same as Recovery):

sudo cat /home/uadmin/shared/recovery-token

Source panels

CyberPanel: SSH (live-tested). cPanel: SSH on VPS/WHM, UAPI+FTP without SSH on shared hosting, or FTP-only if UAPI is unavailable. Joomla and WordPress config is rewritten to the new database automatically.

What is transferred

• Web files and MariaDB dump; absolute paths from the source are rewritten to the new document root.
• Mailboxes (Maildir) and forwarders — a copy stays in the mailbox, then mail is forwarded. Mailbox passwords are regenerated (old hashes cannot be transferred).
• DNS zone from scratch (A, MX, SPF, DKIM, DMARC) — source records are not imported.
• Let's Encrypt if the source had SSL and public DNS already points at the destination IP; otherwise run the ssl step after cutover.

Command line (when you need it)

The migrate.sh script does the actual work. The web interface only starts that script so you do not need a terminal. To repeat a single step (export, provision, web import, mail, DNS, SSL) or to automate it, run this on the uAdmin server:

sudo /home/uadmin/app/tools/migrate-panel/migrate.sh list-sites
sudo /home/uadmin/app/tools/migrate-panel/migrate.sh all --domain=example.com

Panel and server security

uAdmin provides panel login protection, Fail2ban preset jails, GeoBlock for SSH and individual web projects, Threat Security with threat feeds, a ban summary on the dashboard and project log management.

Login protection (rate limit)

Settings → Security: configure max login attempts and time window (default 5 attempts in 60 seconds per IP). When exceeded, a temporary lockout message is shown.

Security module (Fail2ban)

Install Fail2ban via Web stack → Install. In the sidebar open Security: jail overview (sshd, nginx-http-auth, apache-auth, vsftpd, uadmin-panel-login, uadmin-cms-admin-login), banned IPs, global settings, log and the Top 10 banned countries dashboard card.

Preset jails include uadmin-panel-login (panel port 10001) and uadmin-cms-admin-login (Joomla /administrator, WordPress wp-login.php on ports 80/443). Bans use UFW when available, while ignoreip protects trusted addresses.

GeoBlock

GeoBlock uses the GeoLite database plus nftables/nginx rules to control access by country. It can protect global SSH access, but also each web project separately: every project has its own country selection and its own Apply action.

Threat Security

Threat Security syncs public threat feeds, normalizes IP/CIDR indicators and generates nftables sets for auto-managed lists such as Spamhaus DROP and Tor exit nodes. After sync it automatically generates and applies relevant sets, while the manual set stays under administrator control.

UFW + Fail2ban

Recommended: install UFW (Firewall module) before or together with Fail2ban. Bans are applied via UFW when available.

OTA panel updates

The panel updates without losing projects. In Settings → Updates enter the manifest URL (Enc IT channel):

UADMIN_UPDATE_MANIFEST_STABLE=https://enc-it.hr/uadmin/stable.json
UADMIN_UPDATE_MANIFEST_BETA=https://enc-it.hr/uadmin/beta.json
UADMIN_UPDATE_MANIFEST_NIGHTLY=https://enc-it.hr/uadmin/nightly.json

Channels

• stable — production release
• beta — test release
• nightly — latest build

• stable.json
• beta.json
• nightly.json
• install-uadmin-from-release.sh

Update from SSH

Same from the shell (root):

sudo /usr/local/uadmin/bin/update-uadmin.sh update

Panel users

Admin users are separate from project FTP/MariaDB users. Manage in Settings → Users (add, role, password).

Recovery GUI (when the panel does not work normally)

At http://<server>:10001/panel-recovery/ enter the token and reset an admin password.

http://<server-ip-or-host>:10001/panel-recovery/

SSH — artisan (when the panel works but you lost the password)

Replace email and new password (min. 8 characters):

sudo -u uadmin php8.3-cli /home/uadmin/app/artisan tinker --execute="
  \$u = App\Models\User::where('email', 'admin@localhost')->first();
  if (!\$u) { echo 'Korisnik nije pronađen'; exit(1); }
  \$u->password = 'NovaSigurnaLozinka123';
  \$u->save();
  echo 'OK: '.$u->email;
"

New admin user (artisan)

Prefer Settings → Users in the panel. For emergencies via SSH:

sudo -u uadmin php8.3-cli /home/uadmin/app/artisan tinker --execute="
  App\Models\User::create([
    'name' => 'Admin',
    'email' => 'admin@example.com',
    'password' => 'NovaSigurnaLozinka123',
    'role' => 'admin',
  ]);
  echo 'User created';
"

Recovery tools

Recovery works even when the main panel returns 503 (maintenance after OTA) or an update hangs. Tools live outside the Laravel release — they survive rollback.

Web GUI (port 10001):

http://<server-ip-or-host>:10001/panel-recovery/

Recovery token (SSH, root):

sudo cat /home/uadmin/shared/recovery-token

The token is created on install/update. Without it the GUI will reject actions.

Interactive SSH menu (root):

sudo bash /usr/local/uadmin/bin/panel-recovery.sh

Direct SSH commands (root):

Same actions without the interactive menu. For switch-release replace X.Y.Z with a version from /home/uadmin/releases/.

sudo /usr/local/uadmin/bin/update-uadmin.sh maintenance-off
sudo /usr/local/uadmin/bin/update-uadmin.sh rollback
sudo /usr/local/uadmin/bin/update-uadmin.sh switch-release --version X.Y.Z
sudo bash /usr/local/uadmin/bin/panel-recovery.sh
sudo /usr/local/uadmin/bin/recovery-stack.sh status
sudo /usr/local/uadmin/bin/recovery-stack.sh repair all

What recovery can do

• Panel status and list of release versions
• Disable maintenance (503) — maintenance-off
• Rollback to previous version or switch-release --version X.Y.Z
• Repair symlinks, recovery token and maintenance files
• Stack repair — Nginx, Apache, PHP-FPM (recovery-stack.sh)
• List panel users and reset password (GUI or recovery API)

CLI commands (root)

All commands for panel maintenance. Scripts are in /usr/local/uadmin/bin/.

update-uadmin.sh

sudo /usr/local/uadmin/bin/update-uadmin.sh status
sudo /usr/local/uadmin/bin/update-uadmin.sh update
sudo /usr/local/uadmin/bin/update-uadmin.sh list-releases
sudo /usr/local/uadmin/bin/update-uadmin.sh rollback
sudo /usr/local/uadmin/bin/update-uadmin.sh switch-release --version 1.0.397
sudo /usr/local/uadmin/bin/update-uadmin.sh maintenance-off
sudo /usr/local/uadmin/bin/update-uadmin.sh maintenance-off --force-lock
sudo /usr/local/uadmin/bin/update-uadmin.sh repair

panel-recovery.sh

Interactive menu — same actions as recovery GUI, handy over SSH without a browser.

sudo bash /usr/local/uadmin/bin/panel-recovery.sh

artisan (as uadmin)

Laravel commands — always from the current release:

cd /home/uadmin/app
sudo -u uadmin php8.3-cli artisan migrate --force
sudo -u uadmin php8.3-cli artisan config:cache
sudo -u uadmin php8.3-cli artisan route:cache

Smoke test

Verify the panel after install or update:

sudo -u uadmin php8.3-cli /home/uadmin/app/bin/smoke-test.php

Common issues

What is uAdmin?

uAdmin (Ubuntu web Admin) was developed at Enc IT as a free panel for developers and sysadmins who host multiple PHP/CMS projects on Ubuntu and need granular configuration — not just click-and-hope.

Who it is for

• Developers and DevOps/system administrators on their own VPS or dedicated server
• Agencies with multiple clients and a /web/public_html layout
• Staging and production environments before moving to a larger stack

Stack

Laravel, Nginx, Apache, PHP-FPM, MariaDB, Certbot, UFW, Fail2ban, vsftpd. Ubuntu 24.04.

Official release packages: OTA manifest and install scripts on the Enc IT channel.