Server management without a panel.
Not every server needs cPanel. A VPS running nginx, php-fpm and systemd connects with an SSH key on port 22 and sits in the same list as your WHM, Plesk and DirectAdmin machines. You get services, firewall, DNS, PHP, root access and a terminal. Hosting accounts and mailboxes stay out, because a server with no panel has none. Below is what works and what doesn’t, row by row.
A bare VPS, next to your panels
Plenty of servers never get a control panel. An API box, a staging VPS, a Node.js app behind nginx. They still need looking after, and logging into each one over SSH to check the disk or restart a service gets old quickly. ctapanel adds a server with no control panel to the same fleet as your cPanel, Plesk and DirectAdmin machines. You connect it with an SSH key, never a root password, and it shows up in the same server list as the rest.
What works is the part of Linux server management that doesn’t depend on a panel. Services are listed per server with their state, and monitoring is switched on or off one by one. The firewall runs through firewalld or ufw, whichever the OS uses. PHP is described by its systemd pool. Node.js and Python apps run under systemd behind a reverse proxy, each with start, stop and restart. Root password rotation, sshd settings, authorised SSH keys, DNS zones, the terminal and the audit log work as they do on any other server.
What doesn’t work comes from the panel itself. Hosting accounts, packages, resellers, account migrations, databases, mail queues, mailboxes and SPF, DKIM and DMARC checks all read “no” on a bare server. Login protection and a WAF aren’t there either, and the security centre lists that as a finding instead of hiding it. One row is partial, meaning it works over SSH without panel integration: .NET runs with Kestrel and systemd behind a reverse proxy that you set up by hand. Backups can’t be taken on a server with no panel yet, though one with the agent can store backups of your cPanel and Plesk servers.
Connect it in three steps
Adding a panel-less server uses the same two-screen form as any other. Only the credential and the expected services change.
- Step 1 / 3
Pick “No panel”
Open Connect server and choose No panel as the server type. The credential switches to an SSH key on port 22, and the expected services are preset to nginx, php-fpm and systemd, so you don’t type that list in.
- Step 2 / 3
Paste the SSH key and test
Give the server a label and its IP address, then paste the key. Test the connection before you save, so a wrong key never leaves a half-made server behind. A root password is never asked for, and the key is stored encrypted.
- Step 3 / 3
Wait for the first reading
The same IP and port can’t be added twice, so a duplicate is refused before any record exists. The new server opens in maintenance with its counters at zero, and real numbers replace them once the first report arrives.
What you can manage over SSH
This is the panel-less column of the capability table. “Yes” means managed from the panel, “partial” means it works over SSH without panel integration, and “no” means it isn’t possible on a server with no panel.
| Capability | On this panel | Note |
|---|---|---|
| Accounts | ||
| Account and package management | no | Hosting accounts and packages come from a control panel, so a bare Linux server has none to list. |
| Reseller management | no | Not possible on that panel |
| Account transfer and import | no | Not possible on that panel |
| Platform | ||
| DNS zone editor | yes | Managed from the panel |
| PHP version and settings | yes | Managed from the panel |
| Node.js and Python apps | yes | Managed from the panel |
| .NET apps | partial | .NET is installable: it runs with Kestrel and systemd behind a reverse proxy that you set up by hand. |
| Database management | no | Database management isn’t available on a server without a panel. |
| Mail queue and mailboxes | no | No mail queue or mailbox management here. The mail screens cover cPanel, Plesk and DirectAdmin only. |
| SPF, DKIM and DMARC checks | no | Not possible on that panel |
| Security | ||
| Firewall rules | yes | Managed from the panel |
| Login protection thresholds | no | No login protection is installed without a panel, and the security centre reports that as a finding. |
| WAF (ModSecurity) state | no | There is no WAF engine on a panel-less server. The table shows it as missing, not implied. |
| Root access and SSH keys | yes | Managed from the panel |
| Operations | ||
| Service control (start/stop) | yes | Managed from the panel |
| Backup plans | no | Backups can’t be taken on a server with no panel yet. With the agent, it can still store backups of your cPanel and Plesk servers. |
| Terminal and command assistant | yes | Managed from the panel |
| Audit log | yes | Managed from the panel |
Managed from the panel Works over SSH, without panel integration Not possible on that panelCompare all panels
Screens that work without a panel
- 01Details
systemd services, fleet-wide
Every service on every server sits in one table, panel-less servers included. See how many servers run nginx or php-fpm, switch monitoring per service, and spot anything that restarted four or more times in 24 hours. - 02Details
firewalld or ufw, one screen
The engine is read from the server: firewalld or ufw, depending on the OS. Open a port or a range and allow or deny an IP with an expiry. Duplicate rules are refused, and zones appear only on firewalld. - 03Details
Root password and SSH keys
Rotate the root password without it ever being stored. Edit PermitRootLogin, password login and the SSH port. New keys are parsed as real ed25519 or rsa keys, and keys unused for 90 days are flagged as dormant. - 04Details
Node.js and Python behind a proxy
Apps run under systemd behind a reverse proxy and listen on high ports. Each row shows port, memory, CPU and entry file, with start, stop and restart. A stopped app carries the reason in its row. - 05Details
A terminal in the browser
Run df -h, free -m, uptime or systemctl and read the output in the panel. Destructive commands such as rm -rf / are blocked and the reason is printed. It is built for inspection, so use SSH for vim or package installs. - 06Details
Missing protection, as a finding
The security centre shows each server’s firewall, login protection, WAF and two-factor state. On a panel-less server the hardening list holds only automatic updates and brute force protection, and missing protection shows up as a finding.
Running servers without cPanel
Q.01Can I manage a VPS without cPanel?
Yes. Connect it as a No panel server with an SSH key on port 22. Services, firewalld or ufw, DNS, PHP, Node.js and Python apps, root access, SSH keys, the terminal and the audit log all work. Hosting accounts and mailboxes don’t, because a server with no panel has none.
Q.02Do I need a control panel on a Linux server?
You need one for hosting accounts, mailboxes, mail queues and reseller tools, since those concepts come from the panel. If a server only runs your own apps on nginx, php-fpm and systemd, you can manage its services, firewall, PHP and SSH keys from ctapanel without installing a panel.
Q.03Is ctapanel a control panel alternative?
For a bare server, partly. It manages services, firewall, PHP, DNS, root access and runtimes, but it doesn’t create hosting accounts, databases or mailboxes where there is no panel. On cPanel, Plesk and DirectAdmin it works on top of the panel you already run instead of replacing it.
Q.04Which firewall does a panel-less server use?
The one the OS runs: firewalld or ufw. ctapanel reads the engine from the server and works through it, so you don’t pick one. Fields an engine lacks are never drawn. Zones exist only on firewalld, and country blocking is a CSF feature.
Q.05.NET and backups on a server with no panel?
.NET is partial. It runs with Kestrel and systemd behind a reverse proxy that you set up by hand, and the screen lists it as installable. Backups can’t be taken on a server with no panel yet. If it runs the ctapanel agent, it can still be a storage destination for backups of your cPanel and Plesk servers.
Running another panel too?
Most fleets mix panels. Each one connects in its own way and supports a slightly different set of screens.
cPanel management
Manage multiple cPanel servers from one screen. Connect each WHM with an API token on port 2087, then run accounts, resellers, PHP, mail and security.
Read the pagePlesk management
Manage multiple Plesk servers from one panel: subscriptions, resellers, .NET apps, Fail2Ban jails, Plesk Firewall and mail queues, all with an admin key.
Read the pageDirectAdmin management
DirectAdmin management for multiple servers in one panel: users, resellers, DNS, mail queues, Brute Force Monitor and migrations over port 2222.
Read the page
Connect your first server today.
Free for 14 days, no card needed. Create your account, add your first server with an API token or an SSH key, and the panel starts filling in a few minutes later.
No setup fee · Cancel anytime · EU-hosted