Open-source server control panel built on LiteHttpd
Apache-level .htaccess compatibility · LiteSpeed-level performance
Website & Docs · Live Demo · Changelog · 简体中文 · 繁體中文
curl -fsSL https://raw.githubusercontent.com/web-casa/LLStack/main/scripts/install.sh | sudo bashAfter the installer finishes, open https://<your-server-ip>:30333 to create the admin account.
Requirements: AlmaLinux / Rocky Linux / CentOS Stream 9 or 10 · 1 GB RAM · 5 GB disk
| Area | Highlights |
|---|---|
| LiteHttpd engine | OpenLiteSpeed + 80 .htaccess directives, ~2.5× Apache throughput |
| Multi-version PHP | PHP 7.4 – 8.5 via REMI, php-litespeed SAPI (not php-fpm) |
| Databases | MariaDB / MySQL / Percona / PostgreSQL — import, export, clone, maintenance, Adminer SSO |
| Redis | Per-user isolated instances, object cache, ACL (6.0+) |
| SSL certificates | Let's Encrypt issue/renew, manual upload, force HTTPS |
- One-click install, plugin/theme management, passwordless SSO
- Wordfence CVE scan — 33,000+ vulnerability records with CVSS scoring
- Smart Update (clone → test → apply) + scheduled auto-updates
- Redis object cache integration
- Automatic rollback on failed updates
| Area | Highlights |
|---|---|
| Staging | One-click clone, Push / Pull (files / DB / both), automatic domain rewrite |
| Incremental backup | restic dedup + AES-256, 1h–24h schedule, selective restore |
| CDN | Cloudflare one-click setup, cache purge |
| Monitoring | CPU/memory/disk, Redis trends, cgroup pressure |
- RBAC — 4 roles: Owner / Admin / Developer / Viewer
- ALTCHA — proof-of-work brute-force protection (no CAPTCHA)
- 2FA/TOTP — Google Authenticator / Authy compatible
- JWT auth, audit log, per-site
disable_functions - Plan-based quotas (site count, DB count, disk)
- File manager + xterm.js web terminal (WebSocket PTY)
- Cron jobs, firewalld rules, log rotation
- One-click Apache migration (
litehttpd-confconv) - App store (WordPress / Laravel / Typecho)
- Full i18n: 简体中文 / 繁體中文 / English
Browser → LiteHttpd :30333 (HTTPS)
├── /api/* → gunicorn :8001 (Flask + SQLite)
├── /ws/* → gunicorn :8001 (WebSocket terminal)
└── /* → dist/ (React 19 + Radix UI)
- Backend: Python 3.12 + Flask, SQLite (WAL mode), 245+ pytest tests
- Frontend: React 19 + Radix UI + Vite (pre-built, no Node.js on server)
- Scripts: 43 shell scripts for system operations, invoked via sudoers
Full documentation lives at llstack.com:
- IT admin guide — install, configure, operate
- Site user guide — sites, WordPress, databases
- Developer guide — full-stack workflow, API reference
- LiteHttpd engine —
.htaccesscompatibility, benchmarks - FAQ
| Metric | Apache 2.4 | Stock OLS | LiteHttpd |
|---|---|---|---|
| Static RPS | 23,909 | 63,140 | 58,891 |
| PHP RPS (wp-login) | 274 | 258 | 292 |
| Memory | 818 MB | 654 MB | 689 MB |
.htaccess compat |
10/10 | 6/10 | 10/10 |
Environment: Linode 4C/8G, EL9, PHP 8.3, MariaDB 10.11
- LiteHttpd — a lightweight web server with first-class Apache compatibility
- WebCasa — an AI-native open-source server control panel
GPLv3 — see LICENSE


