Security
FiverPanel isolation, least-privilege, and integrity principles.
The goal is to keep the web interface from having unrestricted operating-system access. Privileged operations pass through controlled components.
Layers
| Layer | Mechanism |
|---|---|
| Release | Ed25519 manifest + SHA-256. |
| Web panel | Private backend behind web edge. |
| Agent | Privileged socket/coordination with allowlist. |
| Sites | Unix user and isolated root. |
| SSH | Jail and process/resource limits. |
| DNS | Authenticated local authoritative DNS API and AXFR deny-by-default. |
| License | Signed entitlement and periodic enforcement. |
| Network | UFW/abuse protection plus provider firewall when applicable. |
Secrets
Do not publish license keys, cluster tokens, database passwords, or email credentials in tickets or shared diagnostic commands. Redact output before sending it to third parties.