<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <channel>
    <title>DEV Community: Amer IT Manager</title>
    <description>The latest articles on DEV Community by Amer IT Manager (@amerghjjiye).</description>
    <link>https://dev.to/amerghjjiye</link>
    <image>
      <url>https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F4180395%2Fba0d59c8-94fc-4789-acc3-e054068136c0.png</url>
      <title>DEV Community: Amer IT Manager</title>
      <link>https://dev.to/amerghjjiye</link>
    </image>
    <atom:link rel="self" type="application/rss+xml" href="https://dev.to/feed/amerghjjiye"/>
    <language>en</language>
    <item>
      <title>I built AdminServer — a lightweight, security-first hosting panel for AlmaLinux/Rocky/RHEL</title>
      <dc:creator>Amer IT Manager</dc:creator>
      <pubDate>Mon, 12 Oct 2026 21:12:45 +0000</pubDate>
      <link>https://dev.to/amerghjjiye/i-built-adminserver-a-lightweight-security-first-hosting-panel-for-almalinuxrockyrhel-1hf5</link>
      <guid>https://dev.to/amerghjjiye/i-built-adminserver-a-lightweight-security-first-hosting-panel-for-almalinuxrockyrhel-1hf5</guid>
      <description>&lt;p&gt;I wanted a hosting control panel that was small, fast, and took isolation and&lt;br&gt;
hardening seriously by default — not as an afterthought. So I built one:&lt;br&gt;
&lt;strong&gt;AdminServer&lt;/strong&gt;, a control panel for RHEL-family servers (AlmaLinux / Rocky /&lt;br&gt;
RHEL 9–10). One server runs several isolated websites, all managed from the&lt;br&gt;
browser — no SSH needed for everyday work.&lt;/p&gt;

&lt;p&gt;Here's a look at it:&lt;/p&gt;

&lt;p&gt;&lt;a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2F3jgim9g3g2rd1nnpvtmi.webp" class="article-body-image-wrapper"&gt;&lt;img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2F3jgim9g3g2rd1nnpvtmi.webp" alt="Overview dashboard" width="800" height="456"&gt;&lt;/a&gt;&lt;/p&gt;

&lt;h2&gt;
  
  
  What it does
&lt;/h2&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;strong&gt;Real per-account isolation&lt;/strong&gt; — each account is its own Linux user and
systemd slice, with CPU, memory, process and disk limits, enforced by
SELinux. One site can't read another's files.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;A Security Center&lt;/strong&gt; — 28+ hardening checks (firewall, SELinux, SSH, kernel,
service isolation…), each explained in plain words and fixable in one click,
with a safe rollback.&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;&lt;a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2F16k5tvbkardq6o8l5g7w.webp" class="article-body-image-wrapper"&gt;&lt;img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2F16k5tvbkardq6o8l5g7w.webp" alt="Security Center" width="800" height="456"&gt;&lt;/a&gt;&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;strong&gt;Per-account &lt;em&gt;and&lt;/em&gt; per-subdomain PHP &amp;amp; Node.js&lt;/strong&gt; — runtimes are installed
once, centrally, read-only; each site (and each sub-domain, as its own
mini-site) picks its own version. Node apps run as the account, behind nginx
over a private socket.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Off-server backups&lt;/strong&gt; — to MEGA or any S3-compatible storage (Backblaze B2,
Wasabi, Cloudflare R2).&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;The rest&lt;/strong&gt; — drag-and-drop file manager + Monaco code editor, a web
terminal that runs as the account, per-site databases + phpMyAdmin, DNS
(PowerDNS), mail (Postfix/Dovecot), and Let's Encrypt.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Signed self-update&lt;/strong&gt; — updates are verified by checksum &lt;em&gt;and&lt;/em&gt; an Ed25519
signature before install; a tampered package is refused.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Bilingual&lt;/strong&gt; — a full English and Arabic UI.&lt;/li&gt;
&lt;/ul&gt;

&lt;h2&gt;
  
  
  Try it
&lt;/h2&gt;

&lt;p&gt;On a clean, throwaway AlmaLinux / Rocky / RHEL 9–10 VPS (as root):&lt;/p&gt;



&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight plaintext"&gt;&lt;code&gt;
bash
curl -fsSL https://aamrpr.github.io/adminserver-site/install.sh | sudo bash
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;

</description>
      <category>hosting</category>
      <category>linux</category>
      <category>selfhosted</category>
      <category>devops</category>
    </item>
  </channel>
</rss>
