Features Services Pricing Documentation Changelog About PanelOps Contact & Support
Create Account
PanelOps v14 Documentation 4 min read

Domains, SSL & Reverse Proxy

Let's Encrypt SSL, automated renewals, and proxy routing.

Documentation Domains, SSL & Reverse Proxy

Domains, SSL & Reverse Proxy Suite

The Domains & SSL Suite is an edge reverse proxy and certificate lifecycle management system powered by Nginx and Certbot. It allows you to route incoming HTTP/HTTPS domain traffic directly to your App Store applications, Git projects, managed databases, or custom internal ports with automatic Let's Encrypt certificates.


🌐 Target Routing Types

When connecting a domain (e.g. app.example.com), PanelOps supports multiple routing targets:

Routing Type Target Description Example Use Case
📦 App Store Application Automatically binds to the active host port of any installed App Store container. wordpress, nextcloud, n8n
🚀 Git Project Routes traffic directly to your containerized Node.js, Python, or Go deployment. api.myapp.com → Container port 3000
🗄️ Managed Database Routes web traffic to the DbGate Studio interface for that database. db.internal.net → Port 8080
🔌 Custom Port Proxies directly to http://127.0.0.1:<port>. Microservice on port 9000
🔗 Custom Upstream URL Proxies to any external HTTP/HTTPS upstream URL. http://10.0.0.5:8080
↪️ URL Redirect Issues an HTTP 301 (Permanent) or 302 (Temporary) redirect. domain.com → https://www.domain.com

🔒 Automated Let's Encrypt SSL & Auto-Renewal

PanelOps includes a production-grade SSL manager:

  1. Pre-Issuance DNS A-Record Verification: Resolves DNS records before querying ACME servers to prevent Let's Encrypt rate-limiting failures.
  2. Webroot & Standalone Challenge: Employs an HTTP-01 webroot challenge first with an automated standalone fallback on port 80.
  3. 90-Day Renewal Timer: Automated daily background cron checks. When a certificate has less than 30 days remaining, Certbot auto-renews the certificate without manual intervention.
  4. Certificate Validity Visualizer: Visual progress bar showing certificate age, days remaining, issuer, and expiry dates.

🔍 Diagnostics & Tooling

Each domain card provides a suite of diagnostics:

  • Live Access & Error Logs: Inspect real-time Nginx request and error logs directly from the browser.
  • DNS Propagation Checker: Verify that root domains and subdomains point accurately to the host VPS IP.
  • AI Diagnostic & Auto-Fix: Automatically analyze Nginx syntax errors or ACME challenge failures and apply AI-suggested fixes.
  • View Raw Nginx Config: Inspect and edit the generated /etc/nginx/sites-available/<domain>.conf file.