WebDeck 2.0.0 is here — and it’s the biggest release we’ve shipped. Per-account isolation, in-panel service logs, a stack of cross-platform reliability fixes, and security hardening throughout. Tested on Debian, Ubuntu, Rocky and AlmaLinux. Still free.
- 🔒 Account isolation
- 📋 Service logs
- 🛡 Security hardening
- 🐧 4 distros
The headline: Account Isolation
This is the big one. Every new SFTP/SSH account created in WebDeck is now automatically isolated — confined to its own website’s files, unable to see other customers on the server. No configuration, no toggle to remember; it’s on by default.
What isolation gives you
- Accounts confined to their own site’s files — can’t read other tenants’
- Resource limits, so one customer can’t exhaust the server’s CPU, memory or processes
- An optional process cage (bubblewrap) that also hides other tenants’ processes, where the kernel supports it
- A server-wide Isolation page showing every account’s status, with one-click controls
- Self-healing — if a mount or config is ever lost, the panel repairs it, and shows you on the dashboard
See what’s happening: service logs in the panel
No more SSH-and-grep. The Logs page now shows live logs for Apache, MariaDB, PHP, mail, DNS and FTP, straight from the browser. There’s also a self-heal activity feed on the Server dashboard, so you can see exactly what the panel repaired and when.
Rock-solid across distros
A big chunk of 2.0.0 was hunting down and fixing the differences between Debian-family and RHEL-family systems so everything behaves the same everywhere:
- Websites now configure correctly on Rocky and AlmaLinux
- PowerDNS starts reliably on SELinux-enforcing systems
- PHP version selection only offers versions actually installed, and switches instantly
- ionCube Loader installs correctly on all supported distributions
- The installer retries transient mirror failures instead of giving up, and sets up the FTP server and isolation tools for you
Security hardening
- Every server is guaranteed a strong, unique signing key — the panel will never run with an insecure default
- Rate-limiting on login, credential and expensive operations, without getting in the way of normal use
- Safer installs — no piping remote scripts straight to the shell; downloads are verified before they run
- Defense-in-depth validation on account names and isolation paths
Everyday improvements
- Clear login errors (“incorrect username or password”, not a confusing “session expired”)
- No forced password change right after you set your admin password
- Longer sessions — no getting logged out mid-task
- SFTP/FTP now home to the domain folder, so users can keep private files outside their web root
- PHP module toggles that respond instantly, and follow the selected PHP version
Upgrading
Existing installs update in place from the panel — your websites, accounts and settings are untouched. Isolation applies to new accounts going forward; existing accounts can be isolated individually whenever you choose. The updater backs up first and rolls back automatically if the new version won’t start, so upgrading is safe.
Supported systems: Debian, Ubuntu, Rocky Linux, AlmaLinux.
Get WebDeck 2.0.0
A free hosting control panel with per-account isolation, one-click apps, free SSL and a built-in WordPress manager.