Looking for Beta Testers — Anvil Server Management Panel

[Haggis Veteran]

I'm looking for beta testers for Anvil, a lightweight, single-binary Linux server management panel. If you're running an Ubuntu-based distro and want an easy way to manage your server from a browser, I'd love your feedback.

What is Anvil?

Anvil gives you a clean web UI for managing your Linux server — services, packages, Docker, files, logs, cron jobs, users, firewall, DNS, endpoint monitoring, and a web terminal. It's a single Go binary with no database, no containers, and no dependencies to install. It authenticates against your system's PAM accounts, so there's no separate user setup.

Screenshots

 

 

 

Prerequisites

Ubuntu, Debian, Linux Mint, Pop!_OS, or any Ubuntu-derived distribution

PAM development library — required for authentication:

sudo apt install libpam0g-dev

Go 1.24+ — required to build from source:

sudo apt install golang-go

Or install from https://go.dev/dl/ if your distro's version is too old

A user account on the system (Anvil uses your existing Linux login credentials)

How to Install & Run

I will send you a link to the latest binary

Run on any free port

PORT=9005 ./anvil

Then open http://your-server-ip:9005 and log in with your Linux username and password.

What I'm Looking For

• Does it build and run cleanly on your distro?
• Any pages that error or don't display correctly?
• Features that don't work as expected?
• General UI/UX feedback

 

[Barney T. Administrators]

Wow! Looking really great, my friend!

[Mindovermaster Global Moderator]

"any Ubuntu-derived distribution"

That should be any Debian-derived distro. Debian isn't based off Ubuntu.  

Anyway, it looks closely like Webmin. But yeah, I don't have a spare computer to run this, sorry.

[Haggis Veteran]

Ah i just said Ubuntu as thats all i have personally tested on, it should work on any distro really including distros using DNF and Arch based

 

[CloudEngineer]

happy to test on a few of my vms

[Nick H. Supervisor]

My friend is borrowing my spare laptop for the moment while he moves house, but when he hands it back I'll be sure to take a look. I plan on converting it into a media hub for the house so this could be very useful!

[Haggis Veteran]

On 15/03/2026 at 11:07, CloudEngineer said:

happy to test on a few of my vms

I sent you a PM

 

[Haggis Veteran]

A few more new pages/services

 

Edited March 21 by Haggis

[branfont]

License?

[Haggis Veteran]

On 21/03/2026 at 23:59, branfont said:

License?

MIT

[Haggis Veteran]

Anvil v0.20-beta — A lightweight, self-hosted Linux server management panel built in Go.

Download: https://gitlab.com/Haggistech/anvil/-/releases/v0.20-beta

Features

• System Monitoring
• Real-time dashboard with CPU, memory, disk gauges and system info
• Live telemetry strip on every page (CPU / Memory / Disk / Uptime)
• Connection health indicator with red pulse on server disconnect
• Network overview — interfaces, active connections, open ports, routing table, public IP
• Service & Container Management
• Systemd service viewer with start/stop/restart/enable/disable
• Docker container management with icon actions, logs viewer, image list
• Process-level control from the web terminal
• File & Package Management
• File browser with upload, download, edit, rename, delete
• Package manager with update detection and install/remove
• Cron job editor — add, edit, delete scheduled tasks

Security & Access

• PAM-based authentication with remember username
• Session idle timeout with countdown warning (auto-logout at 30min)
• Sudo toggle for privileged operations
• Firewall (UFW) rule management
• SSH authorized key management
• Full audit log — who did what and when

Infrastructure

• SSL/TLS certificate viewer with expiry tracking and Let's Encrypt/certbot integration
• Disk management — partitions, SMART health, directory usage scanner
• DNS management — /etc/hosts and /etc/resolv.conf editor
• Endpoint monitoring — host:port checks with 12h uptime bars (5min granularity)

Alerts & Backups

• Notification system — webhook, Discord, Slack, and email (SMTP) channels
• Alert rules for endpoint down, certificate expiring, and disk full
• Backup manager — tar and rsync jobs with scheduling, gzip compression, exclude patterns, and one-click restore

UI & Experience

• Blueprint-style dark theme with JetBrains Mono + Outfit fonts
• Light theme toggle
• Quick navigation (Ctrl+K)
• Custom confirmation modals and toast notifications
• Right-click context menus on all data pages
• Web-based terminal

Deployment

• Single binary, no dependencies (just drop and run)
• systemd service file included
• Makefile with build/install/uninstall
• HTTPS/TLS support
• Default port: 9006

[Matthew S.]

I've been looking for a decent replacement for WebMin and ISPConfig

[Haggis Veteran]

PLease give it a try, let me know of any issues

 

[Haggis Veteran]

Anvil v0.21-beta — A lightweight, self-hosted Linux server management panel built in Go.

Download: https://gitlab.com/Haggistech/anvil/-/releases/v0.21-beta

What's new in v0.21-beta

System info page — New /sysinfo page with neofetch-style overview: hostname, OS, kernel, architecture, CPU model, RAM/swap, network interfaces, storage, temperatures, virtualization type, timezone, uptime, and boot time

Config export/import — New /config page to download all Anvil settings (endpoints, notification channels, alert rules, backup jobs) as a single JSON file. Import on another instance with replace or merge mode for easy migration

Alert timeline chart — 30-day stacked bar chart on the Notifications history tab showing alert frequency by type (endpoint down, cert expiring, disk full) with hover tooltips for pattern detection

[CloudEngineer]

hey sorry, didn't get a chance until today to run this. Have installed 0.21-beta and will report any issues. otherwise it looks good!

cheers!

[Haggis Veteran]

Anvil v0.22-beta — A lightweight, self-hosted Linux server management panel built in Go.

Download: https://gitlab.com/Haggistech/anvil/-/releases/v0.22-beta

What's new in v0.22-beta

This release is focused entirely on security fixes found during an internal audit.

• Password injection fix — Newlines are now stripped from passwords before being passed to chpasswd, preventing an authenticated panel user from injecting extra username:password pairs and changing other accounts' passwords
• Username validation hardened — The regex already used when creating users is now also enforced on delete, modify, lock/unlock, and password change operations, blocking argument injection via crafted usernames
• GID validated as numeric — Group GID input is now checked to be a valid integer before being passed to groupadd
• CSRF protection — All authenticated routes now validate the Origin or Referer header on non-GET requests. Logout is enforced as POST-only with the same check, and the logout button and idle auto-logout timer updated accordingly
• DNS resolv.conf injection fix — Search domain input is now validated against a hostname regex before being written to /etc/resolv.conf, preventing newline injection of fake nameserver entries

 

[remixedcat]

looks pretty cool. id like to try this