# WebSpaces

> Run websites on a FeatherPanel WebSpace: domains and SSL, SFTP and FTP, databases, mailboxes and webmail, WordPress and other apps, Git deploy and backups.

Source: https://featherpanel.com/docs/user/webspaces/

A WebSpace is a website container on a [FeatherQuilld](https://featherpanel.com/docs/quilld) web node, with its own domains, files, databases
and mail. Admins create them (see [Web hosting](https://featherpanel.com/docs/admin/web-hosting)); you manage everything inside.

## Domains and SSL

- Point each domain's A/AAAA records at the web node, then **Check DNS**.
- **Renew / reissue SSL** gets a certificate automatically. You can also upload your own certificate and key.
- **Force HTTPS**, and a **www preference** (no redirect, www to apex, or apex to www).
- **Wildcard SSL** for `*.example.com` through Cloudflare DNS, once a DNS zone is linked.
- **Provision DNS records** creates the records in a linked Cloudflare zone.

## Files and access

The file manager works like the [server file manager](https://featherpanel.com/docs/user/servers/files), with upload, pull, archives, search
filters and a trash. **File access** shows the SFTP host, port and username (log in with your panel password), lets you
create extra SFTP accounts locked to a subdirectory, and shows Classic FTP details when the node enables it. FTP is
unencrypted, so prefer SFTP.

## Databases

Create databases up to your limit, view credentials, download an SQL dump, restore from SQL, reset the password, and
open phpMyAdmin or phpPgAdmin.

## Email

When the host added a mail host and you added a domain, you can create mailboxes up to your limit, reset passwords,
turn mailboxes and their spam filter on or off, set an autoresponder and open webmail. **Forwarders and catch-all**
route mail to other addresses, and mailing lists send to several members.

## Apps and deploys

| App | Runtime |
| --- | --- |
| WordPress | PHP. Installs with a database and admin user. Extra tools: update core and plugins, install a plugin by slug, a staging copy you can promote, and weekly auto-updates. |
| Laravel, Joomla, Drupal, PrestaShop, Magento | PHP |
| Ghost, Node.js starter | Node.js |
| Python starter | Python |

**Git deploy** clones or pulls an HTTPS or SSH repository at a branch or tag. Generate a deploy key for private SSH
repos, or give an access token for HTTPS. A signed deploy webhook (GitHub `X-Hub-Signature-256`) redeploys on push.

## Security

- **Web application firewall:** security headers, a 10 MB request body cap, denied IPs or CIDRs and denied path
  prefixes such as `/xmlrpc.php`. Nodes with ModSecurity and the OWASP CRS add those rules too.
- **Malware scan:** scan site files with ClamAV, now or weekly, when the node has it installed.

## Monitoring

**Analytics** shows requests, bandwidth, error share and status codes per domain, plus panel activity and the monthly
bandwidth quota. **Logs** shows access, error, runtime and install logs with a filter, a live tail and log rotation.

## Settings, backups and schedules

- **Settings:** name and description, the limits your host set, the PHP version, `php.ini` and PHP extensions (saving
  recreates the container), a Redis add-on (host `redis`, password in `REDIS_PASSWORD`), and Reinstall.
- **Backups:** archives on the web node. Create, download, restore all or selected files, import and delete.
- **Schedules:** run commands on a cron schedule. Some schedules are added by the WebPlate and managed by it.
- **Users:** add subusers by email and pick their [WebSpace permissions](https://featherpanel.com/docs/reference/permissions#webspace-subusers).

## Frequently asked questions

### Can I create a WebSpace myself?

No. WebSpaces are created by an administrator. Once one is assigned to you it shows under Web hosting in the dashboard.

### How do I get HTTPS on my site?

Point the domain's A or AAAA record at the web node, then open Domains and SSL, check DNS and renew or issue the certificate. Force HTTPS redirects all HTTP traffic.

### Which apps can I install?

On PHP WebSpaces WordPress, Laravel, Joomla, Drupal, PrestaShop and Magento. Ghost and a Node.js starter on Node, and a Python starter on Python. Static sites use the file manager.