The One-Click Web Hosting Subsystem is a security-first hosting control plane that provisions complete application environments at the operating system level.
Unlike conventional control panels that rely on monolithic shared runtimes, One-Click isolates each hosted domain into an independent service unit using dedicated unprivileged system users, isolated systemd slices (one-click_domain.slice), per-site PHP-FPM pools, isolated UNIX sockets, and encrypted database vault structures.
The WordPress engine automates deployment, WP-CLI configuration, database initialization, security hardening, and staging pipelines for production WordPress instances.
DISALLOW_FILE_EDIT), auto-shuffles salts, moves wp-config.php one directory level above the public webroot, and enforces direct filesystem methods.staging.domain.com) with automated database search-and-replace and single-click push-to-production logic.# Interactive deployment of a new isolated WordPress site
one-click --wp-create
# Open interactive WordPress Management Dashboard
one-click --wp-admin
# Execute local and remote site backups via profile configurations
one-click --wp-backupOptimized for HTML/CSS/JS frontend applications, landing pages, and documentation hubs. Features clean URL rewriting, Nginx/Apache virtual host generation, and automated SEO crawling.
Generates XML sitemaps, human-readable HTML sitemaps, and optimized robots.txt files automatically. Configures a weekly cron task to crawl for site updates and submit ping notifications to search engines (Bing, Yandex).
# Deploy a new isolated static website
one-click --web-create
# Open Static Site Admin Console (Cloning, SEO, Backup, Permissions)
one-click --web-adminDeploy and proxy production Node.js applications and REST APIs without manual webserver or reverse-proxy configuration.
/etc/one-click/apps/nodejs/<domain>/node_bin without polluting global system paths.ProxyPass directives with WebSocket upgrade headers (HTTP/1.1, Upgrade, Connection) dynamically..env), and standard output logging.# Deploy Node.js app from Git repository or bootstrap default project
one-click --nodejs-create
# Open Node.js Admin Console (Start/Stop, Logs, Env Editor, Backups)
one-click --nodejs-adminKeeping in line with a strict security posture, the Database Manager provides a proxied, token-driven graphical database interface (Adminer) that requires explicit on-demand authorization instead of exposing a permanent login screen.
Access tokens generated via one-click --db-admin expire after 30 minutes. Upon first use, the session instantly binds to the requesting client's IP address and User-Agent string. Unauthorized or cross-IP attempts immediately destroy the session.
# Manage MariaDB/MySQL databases, link schemas, and generate temporary GUI tokens
one-click --db-adminProvision complete self-hosted Nextcloud cloud storage instances backed by MariaDB, isolated OPcache memory tuning, optional Redis memory caching, and Let's Encrypt SSL.
# Deploy a new isolated Nextcloud instance
one-click --nextcloud-create
# Interactive Nextcloud Administration (OCC Console, Maintenance, Upgrades, Hardening)
one-click --nextcloud-admin
Web applications execute under site-specific PHP-FPM pools listening on dedicated UNIX domain sockets (/run/one-click/<domain>/php.sock). Switch between PHP 7.4, 8.1, 8.2, and 8.3 per-site or tune individual php.ini limits without affecting other sites on the server.
When Redis object caching is enabled, One-Click spawns an independent, password-authenticated Redis/Valkey service instance per domain running on a dedicated UNIX socket (/run/redis/redis-<domain>.sock), preventing cross-site cache inspection or memory poisoning.
Handles automated domain validation, certificate issuance, HTTPS enforcement, and quiet renewal via certbot cron hooks.
# Interactive PHP Version Manager & Process Control
one-click --php
# Reissue or request Let's Encrypt or Self-Signed SSL Certificates
one-click --ssl