Installation

From clean VPS to control panel
in a few minutes

The installer is designed for fresh Ubuntu and Debian servers. It configures the hosting stack, the panel service and HTTPS without hiding the commands it runs.

1. Run the installer

No license key, hostname or email is required. The panel comes up on a secure IP address and asks for your license after sign-in.

curl -fsSL https://anitapanel.com/install.sh | sudo bash

For a domain with a trusted Let's Encrypt certificate, pass optional flags:

curl -fsSL https://anitapanel.com/install.sh | sudo bash -s -- \ --hostname panel.example.com \ --email admin@example.com

The installer creates /etc/anitapanel/anitapanel.env with mode 600 and prints the initial admin password once.

2. Sign in

Open https://SERVER_IP:2087 (accept the self-signed certificate), sign in with the generated administrator account, then enter your license key on the License page.

Save the initial password in a password manager immediately. Panel passwords are stored with scrypt, not plaintext.

3. Add a domain later

The IP:port panel is always available. To add a trusted domain certificate, re-run the installer options on a fresh server or run Certbot against your panel hostname.

Server prerequisites

  • Ubuntu 24.04+, Debian 12+, AlmaLinux 9+ or CloudLinux 8/9+
  • Root SSH access and systemd
  • Public IPv4 and open ports 22, 80, 443 and 2087
  • At least 1 GB RAM and 5 GB free disk
  • Optional: a domain or subdomain for trusted HTTPS

Try the live installation

The public demo panel is available at panel.anitapanel.com. It runs the same code that installs on your own server.

What gets installed

A standard, inspectable stack

No opaque agents. AnitaPanel orchestrates the same services you would configure manually.

NginxWeb

Virtual hosts, TLS termination, PHP-FPM routing and security headers.

MariaDBData

Databases, dedicated users and encrypted credentials in the panel database.

PHP-FPMRuntime

System PHP with common extensions. The panel detects the installed version.

BIND 9DNS

Authoritative zones with validation before every reload.

CertbotTLS

Let's Encrypt issuance and renewal through the systemd timer.

UFWSecurity

Firewall rules and protected core service ports.