1Panel is a production-grade, open-source Linux server management panel built on a distributed core-agent architecture. The system provides a comprehensive web-based GUI (Vue 3 frontend) and a REST API (Go/Gin) that orchestrates an agent running on each managed host. It covers the full server lifecycle: website management (Nginx/OpenResty with custom config parser), database administration (MySQL, PostgreSQL, MongoDB, Redis), Docker container orchestration, firewall management (abstraction over iptables, nftables, firewalld, UFW), system monitoring, backup/restore to multiple cloud storage providers, cron jobs, SSL certificate automation via ACME, and terminal access (local, SSH, container) with AI-assisted command generation. The architecture splits control plane (core) and execution plane (agent) communicating over Unix sockets or HTTPS, supporting multi-node environments. Notable engineering highlights include a reusable task framework with retry/rollback, a firewall lifecycle abstraction with rule identity hashing, a custom Nginx config lexer/parser, and an enterprise extension system via Go build tags and frontend dynamic imports. The codebase is actively maintained with frequent commits and a large open-source community (37k+ stars). However, there is significant code duplication between core and agent packages, and some hardcoded paths and legacy migration logic add complexity.
This repository is the aaPanel (BaoTa) Linux server management panel, a comprehensive web-based administration tool for hosting environments. It manages websites (Nginx/Apache), databases (MySQL, PostgreSQL, MongoDB), Docker containers, SSL certificates, firewalls, FTP, scheduled tasks, backups, and system security auditing. The backend is built with Python (Flask) and follows a modular architecture with a legacy `class/` directory and a newer `mod/` structure, using a dynamic plugin loader for extensibility. The frontend is a Vue 3 single-page application with module federation, incorporating rich text editing (CKEditor), code editing (Monaco/Ace), and real-time task monitoring. The system also includes a comprehensive security compliance framework with over 50 audit check modules, WebAuthn support, and a multi-channel notification system (email, WeChat, DingTalk, Feishu, SMS). Despite its broad functionality and active use, the codebase exhibits significant technical debt including hardcoded paths, dual codebases, vendored third-party assets, and inconsistent error handling, which limits portability and maintainability.