File manager
Browse, edit, upload, and download files inside explicit roots. Symlinks that escape a root are rejected.
ExploreFiles, Nginx and Let's Encrypt, WireGuard, a web terminal, rsync transfers, SQLite studio, systemd and nftables, plus the authentication and audit plumbing to run it safely.
Every panel below is backed by SQLite and editable from the console.
Browse, edit, upload, and download files inside explicit roots. Symlinks that escape a root are rejected.
ExploreReverse proxies, static sites, and redirects rendered from templates, with certbot issuance and expiry tracking.
ExploreCreate interfaces and peers, generate keys, render wg-quick configs, and bring tunnels up or down.
ExploreA shell in the browser with per-session working directory, command history, timeouts, and bounded output.
ExploreStore SSH targets with encrypted secrets, test connectivity, and push or pull files with rsync and a job history.
ExploreInspect schemas, run one statement at a time, save snippets, and export results as CSV.
ExploreNo external services and no frontend build step. One binary with embedded assets.
Inspect systemd units, read journal lines, and manage ufw rules and status from one page.
GOVPS_SYSTEM_ENABLED=false disables every host command. Credentials use AES-256-GCM, file roots are sandboxed, and actions are audited.
One file holds users, sessions, vhost metadata, WireGuard keys, targets, snippets, and the audit trail. Backup with VACUUM INTO.
Sign in and manage files, sites, tunnels, services, and the firewall from one console.