崔健壮
612e67e4cc
The auto-renew flow in obtainSSL returned early when OpenResty was not installed or `nginx -s reload` failed, skipping reloadSystemSSL. The new certificate was persisted to the DB and written into website Nginx configs, but the panel's own server.crt / server.key on disk and the in-memory constant.CertStore were left pointing at the old material. Because the cert was now fresh, subsequent cron ticks did not retry the renewal, so the panel kept serving the stale cert until a user manually re-applied it from 面板设置 → SSL. Two changes: 1. agent/app/service/website_ssl.go reloadSystemSSL is now called unconditionally after a successful renewal, regardless of whether OpenResty is present or nginx reload succeeded. The function already short-circuits for non-panel SSLs, so this is safe. 2. agent/app/service/website_ssl.go + agent/cron/job/ssl.go Add SyncSystemSSL, invoked at the start of every renew cron tick. It compares the panel's on-disk cert/key with the WebsiteSSL row referenced by the SSLID setting and rewrites the files + notifies core when they diverge. This recovers existing installs that are already in the "DB ahead of disk" state and self-heals any future drift introduced by transient failures. https://github.com/1Panel-dev/1Panel/issues/12472
The open-source VPS control panel with native AI agent support
Trusted by 2,000,000+ self-hosters worldwide
What is 1Panel?
1Panel is a modern, open-source VPS control panel — and the only one with native AI agent support. Run Ollama models, deploy OpenClaw agents, and manage your entire server stack from one clean web interface. No CLI memorization required.
👉 Watch the 2-minute introduction
Why 1Panel?
| 1Panel | cPanel / Plesk | aaPanel | Webmin | |
|---|---|---|---|---|
| Free & open source | ✅ | ❌ | Partial | ✅ |
| Native AI agent runtime | ✅ | ❌ | ❌ | ❌ |
| One-click app marketplace | ✅ 165+ apps | ❌ | ✅ | ❌ |
| Modern UI (post-2020) | ✅ | ❌ | Partial | ❌ |
| Docker / container management | ✅ | ❌ | ❌ | ❌ |
| Active development | ✅ | ✅ | ✅ | Slow |
Key Features
- AI Agent Runtime: Deploy Ollama LLMs, spin up OpenClaw personal agents, and monitor GPU utilization — all from the dashboard. No separate AI stack to manage.
- One-Click Website Deployment: Launch production-ready websites with automatic domain binding, SSL provisioning, and Nginx config — zero manual setup.
- App Marketplace: 165+ trusted open-source apps (Nextcloud, Bitwarden, Umami, NocoBase, and more) installed and updated with a single click.
- Docker & Container Management: Create, start, stop, and inspect containers, images, networks, and volumes through a visual UI — no CLI juggling.
- Security Out of the Box: Firewall rules, fail2ban, container isolation, WAF, and audit logs — configured and running from day one.
- Backup & Restore: Schedule automated backups to AWS S3, Cloudflare R2, or local storage. Restore any snapshot in one click.
Quick Start
Requirements: Linux VPS (Debian / Ubuntu / CentOS / Rocky), 1 GB RAM, internet access.
Takes ~60 seconds.
bash -c "$(curl -sSL https://resource.1panel.pro/v2/quick_start.sh)"
After installation, open http://<your-server-ip>:<port>/<security-path> in your browser.
Run 1pctl user-info via SSH if you need to retrieve your access credentials.
Screenshot
Pro Edition
1Panel OSS is free forever. Pro adds features built for teams and production workloads:
| Feature | OSS | Pro |
|---|---|---|
| One-click app installs | ✅ | ✅ |
| AI agents (OpenClaw) | 1 agent | Unlimited |
| WAF & advanced security | Basic | ✅ |
| Website tamper protection | ❌ | ✅ |
| Website uptime monitoring | ❌ | ✅ |
| Multi-node management | ❌ | ✅ |
| Custom logo & theme | ❌ | ✅ |
| Priority support | ❌ | ✅ |
From $80/year. Compare plans & start 30-day free trial →
Star History
Community & Support
- Discord — Join the community for help, feature requests, and show-and-tell
- Docs — 1panel.pro/docs
- Issues — GitHub Issues for bug reports
Security
Found a vulnerability? Please read SECURITY.md before disclosing.
License
Licensed under the GNU General Public License v3.0.