Free · Ubuntu & Debian · v0.5.21

The server panel that is fast, simple and safe

Turn a fresh VPS into a production web server in minutes. Host PHP, Node.js, Python and static sites with SSL, databases, cron, firewall and backups — from a lightweight panel that never runs as root.

Try the live demo Read the docs

$ curl -sSL https://xaxa.com.tr/install.sh | sudo bash

XAXA dashboard with server load chart and site list

Everything a web server needs

One installer sets up the stack. The panel handles the daily work and stays out of the way.

Every kind of site

PHP 8.2–8.5, Node.js, Python, static and reverse proxy — plus one-click WordPress and Laravel.

Git deploy

Push to deploy with webhooks, deploy keys, custom scripts and a log for every run.

Files & terminal

Browser file manager and terminal that run as the site user — never as root.

One-click SSL

Let's Encrypt with auto-renewal, or import a wildcard once and install it on every site it covers.

Databases + phpMyAdmin

MariaDB or MySQL, with phpMyAdmin sign-in through a 60-minute temporary user.

Security built in

IP and bot blocking, basic auth, Cloudflare-only, UFW, fail2ban, 2FA, audit log.

Backups & staging

Nightly zstd backups to S3-compatible storage, one-click restore and site cloning.

Uptime & SSL monitoring

Every site checked each minute, response times and certificate expiry at a glance.

API, CLI and teams

REST API tokens, the xaxa CLI, and users who only see the sites assigned to them.

How it works

1

Install

Run one command on a fresh Ubuntu or Debian server. The installer sets up the whole stack, PHP 8.2–8.5 and Node.js LTS included.
2

Set up

Open the one-time setup link the installer prints, create your admin and turn on 2FA.
3

Add sites

Enter a domain, pick a type, issue SSL and create a database — about a minute per site.

Built to contain mistakes

The web UI runs as an unprivileged user; its code is read-only.
Root work goes through one agent that re-validates every value and never uses a shell.
Every site has its own Linux user and PHP-FPM pool.
One-time setup link, 2FA, rate-limited login and a full audit log.