Basic security recommendations

Passwords, UFW firewall, Fail2ban, panel login protection, panel SSL and a snapshot before production.

  1. Change admin password

    After first login (admin@localhost / changeme) set a strong password in Settings → Profile immediately.

  2. UFW firewall

    Install UFW via Web stack wizard or Firewall module. Open at least SSH (22), panel (10001) and web (80/443).

    sudo ufw allow 22/tcp
    sudo ufw allow 10001/tcp
    sudo ufw allow 80/tcp
    sudo ufw allow 443/tcp
    sudo ufw enable
  3. Fail2ban (Security module)

    Web stack → Install → check Fail2ban. In the sidebar open Security. Full guide: «Security module (Fail2ban)» in System & maintenance.

  4. Login rate limit

    Settings → Security: set max attempts and time window (e.g. 5 in 60 s). Active immediately — no .env change required.

  5. Panel SSL

    Settings → Panel SSL: self-signed certificate or your own cert for HTTPS access on port 10001.

  6. Snapshot and backup

    Take a VM snapshot in the hypervisor before production. Use the Backup module regularly for projects and configuration.