FlashPanel

Appearance

Security ​

Overview ​

The server's Security page helps you keep the operating system up to date. From here you can install the latest system updates right away (including security patches) and schedule FlashPanel to update the system automatically.

Regular updates patch publicly known vulnerabilities in the operating system and installed packages, which reduces the risk of your server being compromised.

How to use ​

Open the Security page ​

  1. Open the server you want to manage.
  2. In the server menu, expand the Security group and select Security.

The page shows the Auto Update System card.

Auto update system ​

Each update run performs these steps on the server, in order:

  1. Refresh the package list.
  2. Upgrade installed packages to their latest versions.
  3. Perform a distribution upgrade: install or replace packages when an upgrade requires it (for example a new Linux kernel).
  4. Remove packages that are no longer used.

When a package ships a new configuration file, the existing configuration files on the server are kept, so settings you have customized are not overwritten.

Update now ​

  1. Leave Enable Schedule unchecked.
  2. Click Agree.

The update runs in the background as an Auto Update System event. You can follow its progress and log on the Events page. While the update is running, the Agree button is disabled.

Schedule automatic updates ​

  1. Check Enable Schedule. The Cron Expression section appears, set by default to run daily at 00:00 (0 0 * * *).
  2. Choose when to run in one of two ways:
    • Click Template and pick a preset, for example Daily at Midnight or Weekly (Sunday).
    • Enter values in the Minute, Hour, Day of month, Month and Day of week fields yourself.
  3. Read the description above the fields to check the schedule. If the expression is invalid, an error message appears below the fields after you click Agree.
  4. Click Agree.

After you click Agree, FlashPanel saves the schedule and also runs an update immediately. The schedule is created as a system CronJob with the description [FlashPanel] Auto Update System, runs as the root user, and is listed on the CronJob page.

When you open the Security page again, Enable Schedule is already checked and shows the schedule in use. To change it, edit the cron expression and click Agree.

Learn more about cron expressions in the Cron Job & Cron Expressions Guide.

Turn off automatic updates ​

  1. Open the server's Security page.
  2. Uncheck Enable Schedule.
  3. Click Agree. FlashPanel removes the saved auto-update schedule and runs one more update right away.

You can also delete the [FlashPanel] Auto Update System CronJob on the server's CronJob page; this does not run an update.

Notes & warnings ​

  • Note: Scheduled automatic updates are only available on paid plans. On the free plan you can still click Agree to update manually.
  • Note: The schedule follows the server's timezone. See Update timezone to change it.
  • Note: If another package installation is running on the server, the update waits up to 5 minutes for it to finish. If the update fails because of an apt lock, see Fix APT Lock.
  • Warning: FlashPanel does not reboot the server after updating. Linux kernel updates only take effect after you reboot the server.
  • Warning: During an update, some services (web server, PHP, database...) may restart, briefly interrupting your websites. A new package version may also behave differently from the previous one. Schedule updates during low-traffic hours and set up backups before enabling automatic updates.
  • Warning: A completed update cannot be undone.

Other security features ​

Other pages in the Security group of the server menu:

  • SSH: change SSH settings such as the port, password login and how root may log in.
  • Server SSH Keys: manage the SSH keys allowed to log in to the server.
  • Firewall Rules: open only the ports you really need.
  • Fail2Ban: automatically block IP addresses that keep guessing passwords or attacking the server.

Other related features:

  • Resource Protection: prevent accidental deletion or destructive actions on important servers and websites.
  • Grant Root Access: let FlashPanel regain root access to manage the server.