Panel Settings

Panel Settings is the server owner's control room: sixteen tabs of configuration for the whole panel, from session security to branding to update channels. It is ROOT-only, and it opens as a grid of category cards; click one to configure it. This page walks through every tab and what each setting does.

General

Server-wide identity and basics: the panel's admin email (used for Let's Encrypt notices), the server hostname (auto-lowercased to keep PTR/SPF/DKIM/SSL happy), your two shared nameservers (ns1/ns2), the panel timezone (a searchable list of every IANA zone), a maintenance mode switch, and the panel name. The SSH/panel port is not here, it is on the Security tab.

Security

The richest tab, in several sections:

• High Security Mode (ROOT): the master switch that puts 2FA in front of the most dangerous pages (see roles and permissions). Enabling is one click; disabling asks for a 2FA code.
• Sessions & tokens: session duration, access-token life (15 minutes), refresh-token life, remember-me duration, max sessions per user, inactivity timeout, and auto-refresh timing.
• Security policies: enforce 2FA for ROOT / ADMIN / RESELLER independently; password rules (minimum length, require uppercase/numbers/special); session IP binding; concurrent-login prevention; CSRF protection; the audit log (on/off, retention days, and which action classes to record); and reserved usernames.
• Panel port change (ROOT): change the panel's port safely, the panel detects if you are on a public IP, warns you, then changes and health-checks the new port before redirecting you, rolling back if it cannot reach it.
• User deletion policy: whether deleting a user wipes their home immediately (the default, to avoid orphans) or after a grace period.
• Login "root" prefill: whether the login form pre-fills "root" (turn off on multi-tenant panels).

Rate Limits

Two groups. Internal limits: login attempt cap and lockout duration, the rate-limit window, and user-creation throttling (max creations per hour and its lockout). External API limits: a master on/off, a sliding-or-fixed window, and per-tier request budgets (per-minute, per-hour and burst) for the Starter, Professional, Business and Enterprise plans (Enterprise defaults to unlimited).

Performance

The High Performance Mode switch (a confirmed toggle that changes caching, audit batching, session updates and connection pooling for busy servers, with a "what changes?" explainer), plus disk-monitoring tuning: the filesystem watcher, the largest-files and disk-usage caches with their TTLs and thresholds, the disk-state sync interval, and bandwidth cache settings.

Resource Isolation

The cgroups v2 enforcement engine and namespace isolation toggles, with alert thresholds. This tab has its own detailed page; it is a licensed feature.

Monitoring

Dashboard defaults (refresh and collection intervals), history retention (7 to 90 days), and alert thresholds: warning and critical percentages for CPU, memory and disk, which drive the notifications administrators receive when a server gets hot.

Backup

The server-wide backup defaults that new backups and schedules inherit: retention days, chain rotation limits, whether encryption is mandatory and delete confirmation required, create/restore rate limits and restore concurrency, the default backup type and compression level, the content to include (files, databases, email, DNS, SSL, logs), notification settings, and download-token security. Remote destinations are configured on their own page.

IP Addresses

Manage the server's IP addresses: a table of every IP with its type, status, interface and whether it is the primary. Detect auto-discovers IPs from the network interfaces, Add registers one manually (address, interface, netmask, gateway, notes), you can edit its status and notes, set the primary IP, delete a non-primary, and Verify its runtime reality (the panel checks the IP is actually configured, rather than trusting the database).

Notifications

Controls the panel's in-app notification system (a bell with a live feed, plus optional browser sound and desktop push, this tab does not configure SMTP or Telegram delivery). Set the master switch, minimum severity, a sound with preview, browser desktop permission, Do Not Disturb hours and days, auto-archive and auto-delete ages, and per-category toggles for fourteen event types (system, security, monitoring, domain, SSL, backup, email, database, user, AI, billing, FTP, DNS, cron). ROOT gets a "send test notification" button, and the same monitoring alert thresholds appear here too.

Branding

White-label the panel (a licensed feature): company name, footer text, a switch to hide Panelica branding, a full color theme editor (over 40 ready presets plus individual light-mode, dark-mode and sidebar colors), and logo uploads (light logo, dark logo, collapsed mini-logo, favicon) with live preview and size controls. Saving regenerates the panel's CSS.

Languages

Manage the panel's languages (ROOT): a table of all languages with their direction (RTL/LTR), translation count and completion, where you can add, activate, set default, delete, export/import, and auto-translate missing keys via OpenAI (with a model choice). A Translation Keys editor lets you search and edit any string inline, and an AI Settings sub-tab holds the OpenAI API key and model used for translation.

System Updates

The update channel (stable or beta, stored server-side so it survives a browser reset), global automatic updates with a maintenance window (start/end time), and a per-service table where each service has its own auto-update switch, frequency and last-result status. Covered in depth on the Updates page.

Package Manager, Server Info, Admin Notes, License

Four embedded panels: Package Manager (licensed) installs and manages system packages; Server Info is a read-only system snapshot; Admin Notes is a private notepad for the operator; and License shows and activates your Panelica license.

Access

Strictly ROOT (the whole page redirects other roles, and non-ROOT sees a read-only warning even if they reach it). Three cards, Branding, Resource Isolation and Package Manager, are licensed features and show an upgrade prompt without the license. See roles and permissions.