How can we help?
28 guides for hosting customers and the people who run Hostctl servers.
Getting started
Websites and WordPress
- Adding a domain and turning on HTTPS Add a domain or subdomain, point its DNS at the server, get a free certificate, and connect Cloudflare or DigitalOcean DNS.
- Installing and updating WordPress Install WordPress, update it safely with automatic rollback, set automatic updates, sign in with one click and manage plugins.
- Trying changes on a WordPress staging site Make a private copy of a WordPress site, try changes there, then push files or the database back to the live site.
- Moving a WordPress site from another host Copy a WordPress site here over SSH or from a backup file, test it before moving DNS, and fix pages that show errors.
- Speeding up WordPress with the page cache Turn on the page cache for a WordPress site, check that it works, and know when to leave it off.
- Deploying a site from GitHub or GitLab Connect a Git repository with a deploy key and webhook, run build commands, protect files, and roll back by redeploying.
- Running a Node.js app Run a Node.js server from a Git repository, set its version, start command, health check and variables, and watch its log.
- Setting up email on your computer and phone Create a mailbox, read it in webmail, and connect Outlook, Apple Mail, Thunderbird or a phone with the right settings.
- Setting up the mail server Server admins Give mail a trusted name, publish SPF, DKIM and DMARC, open mail to the internet, and set how much each mailbox may send.
- Filtering spam into Junk Server admins Turn on spam protection, tune how strict it is per mailbox, and understand what your customers see in their Junk folder.
Files and FTP
- Connecting to FTP securely Create an FTP account and connect with FileZilla or WinSCP over encrypted FTP, including the first-time certificate prompt and common errors.
- Requiring encrypted FTP Server admins Choose whether FTP must be encrypted, see which certificate FTP serves, get a trusted one, and fix a refused setup.
Databases
Security
- Checking your server's security at a glance Server admins Read the Security overview, fix known WordPress vulnerabilities across every site, and see who changed what in the audit log.
- Controlling what can reach your server Server admins Use the firewall to choose which ports are open, block addresses, lift fail2ban bans and limit who can open the panel.
- Dealing with malware found on your site What a malware finding means, how to quarantine or replace the file safely, and how to clean up after a hack.
- Keeping WordPress secure Work through each site's security checklist, apply fixes for known vulnerabilities, and let security updates run by themselves.
Backups and migration
- Backing up and restoring Server admins Choose what's backed up, where it goes and when, how long it's kept, and how to put a site, database or mailbox back.
- Moving sites from Plesk Server admins What the Plesk server needs, how to discover, map and import its domains, and what comes across and what doesn't.
Running the server
- Keeping Hostctl up to date Server admins How the panel finds and installs new Hostctl releases, turning on automatic installs, and what to do when an update fails.
- Installing features and keeping server software current Server admins Install or disable optional features, update the software Hostctl pins such as Node.js, and keep the operating system patched.
- Setting up hosting plans Server admins Create plans with limits and features, choose the plan new accounts get, and move an account to another plan.
- Managing customer accounts Server admins Invite clients and resellers, sign in links, suspend accounts or domains, move domains, and offboard a customer who leaves.
- Watching server load and usage Server admins Read the server's usage charts, trace a busy process to the account behind it, and collect metrics with Prometheus and Grafana.
Recovery and troubleshooting
- Getting back in after a firewall lockout Server admins What to do when a firewall change, a ban or the panel allowlist keeps you out of the panel or SSH.
- Can't sign in What to do when the panel refuses your password, a sign-in link doesn't work, your account is suspended, or your email app is blocked.