// the find
midoks/mdserver-web
Simple Linux Panel
mdserver-web is a web-based Linux server control panel written in Python, inspired by (and openly copying the UI of) BT.cn (aaPanel/BaoTa). It lets you manage web servers, databases, PHP versions, and various services through a browser instead of SSH. The target audience is solo developers or small teams running VPS instances who want a GUI for common sysadmin tasks.
The plugin architecture is genuinely well thought out — each plugin is a self-contained directory with its own install script, HTML, Python handler, and JS, making it easy to understand and extend. PHP version coverage is unusually wide (5.3 through 8.5), which matters if you maintain legacy apps. Active maintenance with commits as recent as yesterday suggests it's not abandonware. The Docker support added by a community contributor means you can try it without touching a real server.
The install script pipes curl directly to bash with --insecure, skipping TLS verification — that's a bad habit to normalize and a real supply chain risk. The codebase is almost entirely undocumented in English; the README, wiki, and community forum are Chinese-only, which will stop most Western developers cold. There's no mention of authentication hardening, 2FA, or rate limiting on the panel itself, which is a serious concern for anything exposed to the internet. The cryptocurrency trading plugin bundled in the repo is a strange inclusion that raises questions about the project's focus and adds attack surface.