Settings¶
The settings page consolidates all panel-wide configuration options. It is only accessible to administrators and is divided into several tabs.
Panel Settings¶
Basic panel configuration:
| Setting | Description |
|---|---|
| Panel Name | Display name of the panel (e.g. "My Hosting"). The field may be left empty — the panel then counts as unbranded and the sign-in page shows the enconf claim and link again. |
| Logo for light surfaces | Logo upload for the sign-in pages, the light theme and emails (PNG, JPG, WebP or SVG, max. 2 MB) |
| Logo for dark surfaces | Optional second logo for dark surfaces (sidebar and dark theme) |
| Favicon | Icon in the browser tab (PNG, ICO or SVG, square 32–1024 px, max. 256 KB) |
| Admin Email | Administrator's email address (recipient for system notifications) |
| Sender Email | From address for all system emails (password reset, notifications) |
| Panel URL | Public URL of the panel |
| Default Language | Default language (German or English) |
Upload Logo¶
- For the image you want (logo for light surfaces, logo for dark surfaces or favicon) click Upload
- Select an image file (logos: PNG, JPG, JPEG, WebP or SVG, max. 2 MB; favicon: PNG, ICO or SVG, max. 256 KB)
- The image takes effect immediately
Which logo appears where
The logo for light surfaces is used on the sign-in pages, in the light theme and in emails. The logo for dark surfaces is used on dark surfaces (sidebar, dark theme); if none is set, the normal logo is used there. Conversely a dark-only logo is never shown on a light background — so always set the logo for light surfaces too, otherwise the enconf symbol appears there. The logo zone at the top of the sidebar and the logo tile of the sign-in pages follow the theme (light in the light theme, dark navy in the dark theme); the navigation below stays dark in both themes.
SVG logos work in the panel, but Gmail and Outlook do not display SVG in emails — use PNG if the logo should appear in your emails. Browsers cache favicons stubbornly, so a new one may take a while to show in the tab.
Remove Logo¶
Click Remove to revert to the default image. This button only appears when an image has been uploaded.
Colour Theme (light / dark)¶
The panel comes in a light and a dark theme. Choose the colour theme in the menu in the header (Colour theme):
| Choice | Effect |
|---|---|
| Match system (default) | follows the operating system / browser setting (light/dark) and changes with it |
| Light | always light |
| Dark | always dark |
The choice is stored in the browser and applies immediately; "Match system" clears the stored choice. The panel does not switch by time of day — the operating system decides that. The sidebar is dark in both themes. The panel's emails always stay light.
Sender Email¶
The Sender Email field sets the From: address used for all emails sent by the panel:
- Password reset — email sent to customers and administrators
- System notifications — automated status emails
If left empty, noreply@<hostname> is used automatically. It is recommended to set a valid address to avoid emails being caught by spam filters.
Recommendation
Use an address like noreply@your-domain.com and ensure your mail server allows sending from that address (SPF, DKIM).
Logo in emails
The panel logo automatically appears at the top of all email notifications. No additional setup required — as soon as a logo is set, it is included in every outgoing notification.
For resellers with their own branding, the reseller's logo takes priority in emails sent to their customers. See Reseller Branding.
License¶
License information and status:
| Field | Description |
|---|---|
| License Key | Your NetCell license key |
| Status | Valid, Expired, Grace Period |
| Type | License type (Standard, Professional, etc.) |
| Expiration Date | When the license expires |
| Max. Customers | Maximum number of customers (license-dependent) |
| Max. Sites | Maximum number of sites |
| Max. Domains | Maximum number of domains |
| Features | Enabled features |
Renew License
Licences are renewed through NetCell Licensing. When a limit is reached or a feature is not included, the panel names the current upgrade address in the message — follow that rather than typing an address by hand.
Limit reached
When a limit is reached, the API answers with HTTP 402 Payment Required.
The response carries the reason and where to upgrade:
{
"data": null,
"error": "license_feature_missing",
"params": { "feature": "Reseller" },
"upgrade_url": "https://license.netcell-it.com/self-service"
}
error carries a code the panel translates — the wording comes from the
interface, not from the response. Codes in use are
license_feature_missing, license_upgrade_required, license_expired,
license_key_missing and license_server_unreachable.
The panel shows a notice with a direct upgrade link in that case.
License Limits and Enforcement¶
The license can define the following limits:
- Maximum number of customers
- Maximum number of websites (Sites + WordPress installations combined)
- Maximum number of domains
- Maximum number of server activations
- Feature flags — Reseller functionality, import, advanced backups
These limits are actively enforced. When a limit is reached, the panel prevents creating additional resources and displays a clear error message. For example, if the website limit is reached, no new websites can be created until existing ones are removed or the license is upgraded.
Note
Each WordPress installation is counted as a full website.
The Reseller feature can be disabled via license feature flags. When disabled, the reseller menu and all reseller-related functionality are hidden from the panel.
Max Activations
If the activation limit is exceeded, the panel displays a link to the self-service portal where you can deactivate old servers.
Feature Flags¶
Certain functions can be enabled or disabled per license:
- Reseller functionality — Can be disabled via license
- Import — Migration from other panels
- Advanced backups — S3 and FTP backup targets
DNS Settings¶
| Setting | Description |
|---|---|
| Nameserver 1 | Primary nameserver (e.g. ns1.example.com) |
| Nameserver 2 | Secondary nameserver |
| Nameserver 3 | Tertiary nameserver (optional) |
| Nameserver 4 | Quaternary nameserver (optional) |
| Default TTL | Default Time-to-Live for DNS records |
| SOA Email | Email address in the SOA record |
Web Settings¶
| Setting | Description |
|---|---|
| Default PHP Version | PHP version for new websites |
| Available PHP Versions | Installed PHP versions |
| Default Web Server | Web server type (Nginx) |
| Preview Domain | Domain for preview URLs |
Mail Configuration¶
The email settings are divided into three tabs:
Tab: General¶
| Setting | Description |
|---|---|
| Mail Hostname | Hostname of the mail server (e.g. mail.example.com) |
| Maximum Message Size | Size limit for emails in MB |
| Maximum Recipients | Maximum number of recipients per email |
Below the hostname field, the server's detected IPv4 and IPv6 addresses are displayed automatically. These IPs must be set as DNS A and AAAA records for the configured hostname so that email delivery and SPF work correctly.
DNS Setup
Configure the following DNS records for your mail hostname:
- A record → displayed IPv4 address
- AAAA record → displayed IPv6 address (if available)
Tab: Spam & Security¶
Global spam filter settings (rspamd):
| Setting | Description |
|---|---|
| Mark Threshold | Messages scoring above this value receive a spam header |
| Reject Threshold | Messages scoring above this value are rejected |
| Greylist Threshold | Messages scoring above this value are greylisted |
| DKIM | Enable/disable DKIM signing globally |
RBL Lists (Realtime Blackhole Lists): Configure known and custom RBL providers for spam detection.
Per-Domain Spam Settings: Individual thresholds and sender lists can be configured for each domain:
- Custom reject/greylist/header thresholds
- Sender whitelist (never marked as spam)
- Sender blacklist (always marked as spam)
- Per-domain greylisting toggle
- Reset to defaults available
Tab: Server¶
| Setting | Description |
|---|---|
| SMTP Relay | External SMTP server for outgoing email (host, port, user, password, TLS) |
| Greylisting | Enable/disable greylisting globally |
| Mail Queue | View queue, delete individual entries or all, flush queue |
Security Settings¶
Password Policy¶
| Setting | Default | Description |
|---|---|---|
| Minimum Length | 12 | Minimum password length |
| Uppercase | No | At least one uppercase letter required |
| Lowercase | No | At least one lowercase letter required |
| Digits | No | At least one digit required |
| Special Characters | No | At least one special character required |
The default follows NIST 800-63B — length rather than enforced character classes. Explained in detail under Security.
Login Protection (Brute-Force Protection)¶
| Setting | Description |
|---|---|
| Enabled | Enable/disable brute-force protection |
| Max. Failed Attempts | Number of allowed failed attempts |
| Lockout Duration (Minutes) | Duration of the lockout after exceeding the limit |
| IP Whitelist | IPs that are never locked out |
2FA (Two-Factor Authentication)¶
See Security for details on 2FA configuration.
Backup Settings¶
Global backup configuration:
| Setting | Description |
|---|---|
| Backup Enabled | Global on/off switch |
| S3 Endpoint | URL of the S3 service |
| S3 Region | AWS region |
| S3 Bucket | Default S3 bucket |
| S3 Access Key | Access key |
| S3 Secret Key | Secret key |
| Encryption Password | Master encryption password for backups |
| Default Retention | Default number of retained snapshots |
Use the Test Connection button in the S3 and FTP cards to verify reachability and credentials before saving the settings. For details on the connection test, see Backup Management > Connection Test.
Checking Object Lock¶
The Check Object Lock Status button queries the configured S3 target for whether an Object Lock (WORM) configuration is active on the bucket, and on success shows the mode and retention period (days/years) — or that none is active. This is purely informational on this page, not a setting: Object Lock is configured on the S3 service itself, not in the panel.
Cost and limits of Object Lock
Data locked by Object Lock cannot be deleted before the retention period expires — this also applies to removing a repository key ("Empty Completely" button): an active lock makes the operation fail, and the storage keeps being occupied and billed. Customer-supplied S3 credentials with bypass-governance rights defeat the protection — the panel cannot prevent that, only report what it sees.
Notifications¶
The full notification management is available under Notifications in the main menu.
Available Events¶
| Event | Recipients | Description |
|---|---|---|
| subscription_created | Customer | Welcome email with credentials when a new hosting account is created |
| subscription_expiring | Customer, Admin | Warning 7 days before the subscription expires |
| subscription_expired | Customer, Admin | Notification when a subscription has expired |
| subscription_suspended | Customer | Notification on suspension |
| disk_quota_warning | Customer | Disk space ≥ 80% used |
| disk_quota_critical | Customer | Disk space ≥ 95% used |
| ssl_expiring | Customer, Admin | SSL certificate expires in 14 days |
| ssl_expiring_custom | Customer, Admin | Own SSL certificate expires in 14 days (not renewed automatically) |
| ssl_renewed | Customer | SSL certificate successfully renewed |
| backup_failed | Admin | Backup error |
| password_changed | Customer | Password changed |
| login_new_ip | Customer | Login from unknown IP address |
| failed_logins | Admin | Multiple failed login attempts |
| server_disk_warning | Admin | Server disk ≥ 85% used |
| service_down | Admin | Service unreachable |
| license_expiring | Admin | License expires in 7 days |
Email Branding in Notifications¶
Automatic logo and panel name
All outgoing notification emails automatically include the panel logo and panel name — no manual template editing required.
- Panel logo (
{{panel_logo_html}}): Rendered as an<img>tag at the top of the email - Panel name (
{{panel_name}}): Inserted in subject and body - Panel URL (
{{panel_url}}): Public URL of the panel
For customers assigned to a reseller with white-label branding, the reseller's logo and name are used automatically — not the admin settings. See Reseller Branding.
Customizing Email Templates¶
Under Notifications → Templates you can customize the default email templates for each event and language (DE, EN, FR, ES, NL, TR, PL, IT):
| Placeholder | Description |
|---|---|
{{panel_name}} |
Panel name (or reseller panel name) |
{{panel_logo_html}} |
Panel logo as HTML image (empty if no logo is set) |
{{panel_url}} |
Public URL of the panel |
{{customer_name}} |
Customer's full name |
{{domain}} |
Subscription domain |
{{subscription_name}} |
Subscription name / main domain |
{{expires_at}} |
Expiry date (formatted) |
{{usage_percent}} |
Disk usage in % |
{{email}} |
User account email address |
{{password}} |
Generated password (welcome email only) |
{{error}} |
Error message (backup failure) |
{{ip_address}} |
IP address (login events) |
{{service_name}} |
Name of the failed service |
Language fallback
If no template exists for a language, the system falls back to German automatically.
Send Test Email¶
Under Notifications → Test Email you can send a test notification with real branding values to verify the configuration.
SMTP Settings¶
| Setting | Description |
|---|---|
| SMTP Server | Outgoing mail server (empty = local Postfix) |
| SMTP Port | Port (25 for local, 465 for SSL, 587 for STARTTLS) |
| SMTP User | Username (empty = no authentication) |
| SMTP Password | Password |
| Sender Email | Sender address |
| Sender Name | Sender name (e.g. "My Hosting Panel") |
Local Postfix
Without SMTP configuration, the panel sends via the locally installed Postfix — no external SMTP server required.
Webhooks¶
Webhooks send HTTP notifications to external systems:
Create Webhook¶
- Click Create Webhook
- Configure:
| Field | Description |
|---|---|
| URL | Target URL for the webhook |
| Events | Triggering events (e.g. customer created, site created) |
| Secret | Secret key for signature verification |
| Active | Enable/disable webhook |
API Keys¶
API keys enable programmatic access to the panel API:
Create API Key¶
- Navigate to the API Keys tab
- Click Create API Key
| Field | Description |
|---|---|
| Name | Name of the key |
| Expiration Date | Optional expiration date |
- The generated key is displayed once
Store Key Securely
The API key is only displayed once. Store it in a secure location.
Delete API Key¶
- Click the delete icon
- Confirm the deletion
Update Channel and Update Mode¶
| Channel | Description |
|---|---|
| Stable (recommended) | Stable releases only |
| Testing (pre-releases) | Pre-release versions for testing |
| Update mode | Description |
|---|---|
| Manual (default) | You are notified when an update is available and install it yourself ("Update now"). |
| Automatic | The server updates the panel and agent automatically from the channel it is on. |
Manual is the default
On start the agent removes the automatic update allowance for the enconf packages unless the mode is explicitly "Automatic" — even if the setting was never set. The choice is pushed to every active server when set, and again on every panel start. Debian security updates of the operating system keep running automatically, independently of this. In "Manual" mode a fix only reaches your servers once you install the update.
The update mode applies only to the enconf packages (panel and agent). It controls neither extensions (a switch of their own per extension) nor PHP patches (auto-patch in the Security Advisor).
Maintenance Mode¶
Maintenance mode displays a maintenance page to visitors:
- Enable the maintenance mode toggle
- Optional: Customize the maintenance message
- Click Save
Access During Maintenance¶
| Role | Behavior |
|---|---|
| Admin | Can still log in and use the panel normally |
| Reseller | Sees a maintenance information page with a Retry button |
| Customer | Sees a maintenance information page with a Retry button |
Resellers and customers are redirected to a dedicated maintenance page that displays the configured maintenance message and a retry button to check whether maintenance has ended.
Planned Maintenance
Enable maintenance mode before major updates or server migrations.
Session Persistence¶
Sessions are stored in the browser via sessionStorage. This means:
- Reloading the page (F5) — The session is preserved, no need to log in again
- Closing the tab — The session ends automatically
- Closing the browser — All sessions end
No logout on F5
Unlike earlier versions, reloading the page no longer logs you out. The session persists as long as the browser tab stays open.
Help Link¶
The panel header has a question mark icon (?) that links directly to the online documentation:
- German:
https://docs.enconf.com/webpanel/ - English:
https://docs.enconf.com/webpanel/en/
The link opens in a new tab and automatically selects the language matching the panel setting.
Change Password¶
Every user can change their own password:
- Navigate to the Password tab
- Enter the current password
- Enter and confirm the new password
- Click Change Password
Server Information¶
Technical details about the server:
| Information | Description |
|---|---|
| Hostname | Server hostname |
| Operating System | OS and version |
| Kernel | Linux kernel version |
| Timezone | Configured timezone |
| PHP Versions | Installed PHP versions |
| Nginx Version | Nginx version number |
| MariaDB Version | MariaDB version number |
| Postfix Version | Postfix version number |
| Dovecot Version | Dovecot version number |
| PowerDNS Version | PowerDNS version number |
| Reboot Required | Whether a reboot is pending |