Glossary

Access package: A reusable set of operator features and website resource limits.

Agent: The privileged Core Panel service that applies validated server changes queued by the web API.

Alias: An additional domain name for a website, or an email address that forwards to other destinations, depending on context.

Clean restore drill: An automated test that retrieves a specific off-host bundle and proves integrity, decryption, safe extraction, and isolated state restoration.

CIDR: Notation for an IP network, such as 203.0.113.0/24 .

DKIM: A domain signature that helps receiving mail systems verify outgoing email.

DMARC: A policy describing how receivers should handle mail that fails SPF or DKIM alignment.

Document root/public path: The folder inside a website root that Nginx exposes to visitors.

MFA: Multi-factor authentication using a password plus an authenticator or recovery code.

Panel recovery: A versioned, encrypted backup of panel state, configuration, secrets, hosted data, DNS, mail, certificates, and recovery metadata.

Production-readiness gate: The non-bypassable assessment of tenant isolation, agent mTLS, resource controls, tested off-host recovery, and independent security review.

PTR/reverse DNS: A provider-managed mapping from a public IP address to a hostname, important for mail delivery.

RRset: One DNS record name and type with one or more values.

Runtime: The execution environment for a website: static, PHP, Node.js, or Python.

SFTP: Encrypted file transfer over SSH.

S3-compatible target: An independent object-storage service that supports the S3 API over HTTPS.

SPF: A DNS policy listing servers authorized to send mail for a domain.

TTL: The length of time DNS resolvers may cache a record.