xudbinSERVER PANEL
TR Star Try the demo

Installation

You install Xudbin on your server with one command, create the admin account with the setup link, and manage the panel with the xudbin command on the server.

Requirements

  • Ubuntu, Debian or AlmaLinux/Rocky; at least 2 GB of RAM
  • Ports 80 and 443 must be free
  • Root access

One-command install

curl -fsSL https://raw.githubusercontent.com/Furkan1116/XudbinPanel/main/install.sh | sudo bash

The script shows every step in the terminal:

  1. Checks the system; adds 2 GB of swap if RAM is under 3 GB.
  2. Installs Docker if it's missing.
  3. Downloads Xudbin to /opt/xudbin and installs the xudbin command.
  4. Opens only SSH, 80, 443 and 8443 (the panel's IP access) in the firewall and installs fail2ban for SSH.
  5. Pulls the prebuilt image (ghcr.io/furkan1116/xudbin); if it can't, builds from source.
  6. Generates a panel address from the server's IP, like xudbin.1-2-3-4.sslip.io, and gets an HTTPS certificate. The panel also opens at https://1.2.3.4:8443 (see below).
  7. Prints the setup link and a QR code.

Install options

You can customize the script with environment variables:

# With your own domain (its A record must already point to the server)
curl -fsSL https://raw.githubusercontent.com/Furkan1116/XudbinPanel/main/install.sh | sudo XUDBIN_DOMAIN=panel.example.com ACME_EMAIL=you@example.com bash

# On a LAN/test server with no public IP, with HTTPS off
curl -fsSL https://raw.githubusercontent.com/Furkan1116/XudbinPanel/main/install.sh | sudo XUDBIN_HTTPS=0 bash

Set XUDBIN_HARDEN=0 to skip the firewall and fail2ban setup.

Access by IP (https://<ip>:8443)

Besides its domain, the panel also opens at the server's IP address on port 8443. That address uses a certificate from Caddy's own certificate authority (self-signed), so your browser shows a "connection is not private" warning on first visit; accept it and the panel opens. The same protections as the domain (WAF, rate limit, IP blocking) apply. The domain has a Let's Encrypt certificate browsers trust, so we recommend it for daily use.

  • To turn it off: Settings → Panel → Access by IP (the port is closed in the firewall too).
  • Different port: XUDBIN_IP_PORT=9443 at install; XUDBIN_IP_PORT=0 disables it. If 8443 is already used by another service on the server, the installer turns IP access off by itself.
  • There is no IP access on installs with HTTPS off (XUDBIN_HTTPS=0).

First admin account

At the end of the install a setup link is shown (...?setup=<key>). The admin account can only be created with the setup key in this link, so nobody can take over the panel before you the moment it goes online.

  1. Open the link in a browser (or scan the QR code with your phone).
  2. On Create the admin account, enter your name, email and a password of at least 10 characters. The Setup key field is filled in from the link.
  3. Click Create account.

If you missed the link, show it again on the server:

xudbin link

The panel address (or the setup link, if setup is not finished) is also shown every time you log in over SSH. Only users who can reach Docker (root or the docker group) see it; to turn it off: sudo mkdir -p /etc/xudbin && sudo touch /etc/xudbin/no-login-link.

Don't share the link. After creating the account, turn on two-factor authentication under Settings > Account.

The xudbin command

xudbin link                                       # panel address (setup link on first install), with QR code
xudbin status                                     # counts of servers, apps, databases, users and banned IPs
xudbin user list                                  # users
xudbin user create ali@example.com Ali --member   # adds a user (admin without --member), prints a temporary password
xudbin user reset-password ali@example.com        # new temporary password, signs out all sessions
xudbin user disable-2fa ali@example.com           # turns off 2FA if the phone is lost
xudbin user delete ali@example.com
xudbin unban 203.0.113.7                          # removes an IP ban
sudo xudbin restore /root/xudbin-panel-....xbk    # restores a panel backup
sudo xudbin backup decrypt backup.sql.gz.xbe      # turns an encrypted database/volume backup into gzip
sudo xudbin update                                # updates Xudbin
xudbin restart                                    # restarts the panel
xudbin logs                                       # follows the panel logs

Updating

When a new version is out, the panel shows a notice. Go to Settings > Panel and click Update; the panel restarts within a few minutes and the page reloads on its own.

You can also update from the server:

sudo xudbin update

Updates only come from tagged releases (v1.2.3); changes on the main branch never reach your server. Before installing, the signatures of the panel and Caddy images are verified: if an image was not signed by the official repository's GitHub Actions workflow, the update stops, the current version keeps running and a warning appears under Settings > Panel. The running image is started by its verified digest (@sha256:...).

To install a specific release, pass XUDBIN_REF=v1.3.0. If you run your own image or fork, XUDBIN_VERIFY=0 turns verification off (not recommended).

Updating doesn't touch your apps, databases or panel data. Security fixes only ship in the latest version.

Verifying the images

Prebuilt images are built in GitHub Actions and signed with Sigstore (cosign); an SBOM and provenance are published with the image. To verify the signature:

cosign verify ghcr.io/furkan1116/xudbin:1.3.0 \
  --certificate-identity-regexp '^https://github\.com/Furkan1116/XudbinPanel/\.github/workflows/' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com

Adding a remote server

  1. Click Servers > Add server and enter a name, IP address, SSH port and user (root is recommended; another user needs passwordless sudo).
  2. On the Setup tab, run the shown command on the server to add the panel's SSH key.
  3. Click Test connection, then Start setup. Docker and Caddy are installed automatically; the first setup can take 3–6 minutes.
Edit this page on GitHub