SFPanel
SFPanel is an all-in-one self-hosted server management panel built with Go and React. It provides Docker orchestration, firewall rules, disk management, network configuration, terminal access, and a curated app store in a single binary.
Ficha actualizada 23 sept 2026, 8:02 · upstream 23 sept 2026, 7:47 · release v0.77.5
Qué es SFPanel
Descripción editorial construida a partir del repositorio, su documentación y sus señales de mantenimiento.
SFPanel is a comprehensive self-hosted server administration interface designed for home servers, VPS providers, and small businesses. The application runs entirely on a single Go binary with embedded React frontend, eliminating the need for external dependencies or Docker containers during runtime. It offers complete control over system resources through integrated monitoring dashboards, automated backup systems, and real-time log streaming.
The panel provides granular management of Linux servers including container orchestration via Docker Compose, firewall configuration (UFW, Fail2Ban, Docker), disk space management with LVM support, network interface configuration, and process/service control. Its architecture separates the backend API from the frontend SPA using Go's Echo framework, while maintaining a SQLite database for storing configuration, audit logs, and metrics.
A key design decision is the absence of external dependencies — all runtime requirements are bundled within the binary itself, making it ideal for serverless deployments or environments where containerization overhead must be minimized. The panel supports both single-node operation and cluster management through HashiCorp Raft consensus, enabling distributed control across multiple nodes.
The app store feature hosts over 90 curated applications including Nextcloud, Vaultwarden, Immich, Authentik, Forgejo, and others, with runtime verification to prevent unauthorized software installation. Real-time monitoring via WebSocket provides live CPU, memory, disk usage, and container health metrics, while the terminal interface supports multi-tab sessions with persistentPTY for long-running processes.
Security is built-in through JWT-based authentication, TOTP 2FA, password hashing (bcrypt), rate limiting on login attempts, destructive operation confirmation prompts, and comprehensive audit logging. The panel also includes scheduled backups, automated software updates with integrity verification via Sigstore or SHA-256 checksums, and a rolling upgrade mechanism that gracefully reboots individual nodes during cluster upgrades.
The architecture is designed for horizontal scalability through Raft-ba
- Home server management — controlling Docker containers, firewall rules, disk usage, and system processes from a single interface
- VPS provider dashboard — managing multiple customer instances with shared configuration and automated backups
- Small business automation — running Nextcloud, Vaultwarden, or other apps without needing to install them manually on each server
- Network administration — configuring firewall rules, DNS settings, and routing for home networks or small office environments
- System monitoring and alerting — tracking resource usage trends over time with historical charts and automated notifications via Discord/Telegram
- Development environment management — running development tools like GitLab CI runners or local test servers alongside production workloads
- Single binary deployment eliminates containerization overhead, reducing attack surface and startup latency
- Built-in Docker Compose management with rollback capabilities allows safe service restarts without manual intervention
- Real-time WebSocket metrics dashboard provides visibility into CPU, memory, disk, and container health at any moment
- 90+ curated apps in the app store are vetted for security and compatibility before being available to users
- RAFT-based cluster architecture enables distributed control with automatic leader election and consensus recovery
- Tauri desktop application provides native Windows/macOS/Linux experiences without requiring Electron or Node.js runtime
- SQLite database is not suitable for production environments with high write throughput; consider migrating to PostgreSQL for large-scale deployments
- No built-in container orchestration (e.g., Kubernetes) — Docker Compose management is limited to basic operations like start/stop and rollback
- RAFT cluster requires manual node configuration and coordination, making it unsuitable for fully automated serverless environments without additional infrastructure
- The app store feature may become a bottleneck as the number of curated apps grows beyond 90, potentially impacting performance
- No native support for Windows Server or other non-Linux operating systems — only Linux-based distributions are supported
Perfil de infraestructura
Estimación inicial derivada del repositorio y de los servicios detectados.
Despliegue detectado
Qué señales reales de instalación hemos encontrado.
Deploy SFPanel on Linux (Ubuntu 24.04/26.04 LTS recommended) with root privileges. Install via the provided script, then configure firewall rules to restrict access to port 3628 from trusted networks only. For production environments, deploy behind a reverse proxy (Caddy or Nginx) with TLS termination using Let's Encrypt certificates. Enable TOTP 2FA for all admin accounts and set up automated backups via the panel UI. The systemd service unit file should include Restart=always to ensure automatic recovery on failure. Monitor disk usage regularly — the panel recommends a minimum of 10GB free space per node, though it can operate with less if configured appropriately.
Stack y dependencias
Componentes inferidos a partir de manifests, configuración y documentación.
Puede sustituir a
Relaciones detectadas por el análisis del repositorio y su categoría.
Experiencia real de la comunidad
Ayuda a contrastar la estimación automática con instalaciones reales.
Todavía no hay datos comunitarios para este proyecto.