Deckpa is Moserra's own hosting control panel for a single server. It installs with one command on a clean AlmaLinux 9/10, Rocky 9 or RHEL 9 server; sites, databases and backups stay on that server and are managed from one interface. It is currently in private beta.
Architecture
- Privilege separation: the panel runs as two processes. The unprivileged panel API hands root-level work to a separate system service over a Unix socket; the caller is authenticated and the service only runs a fixed command list. The panel API never connects to the database directly.
- Site isolation: every site runs as its own Linux user, so one site cannot read another's files.
- Signed updates: updates are verified with an Ed25519 signature and SHA256; if verification fails, nothing is installed.
- Audit log: every change is recorded with who made it and the result; admin, reseller and customer roles are supported.
- No lock-out: existing sites keep running even after the licence expires.
Modules
- Site management: per-site PHP 8.3 / 8.4 / 8.5, Let's Encrypt SSL (including wildcard), suspension
- One-click installs for WordPress, WooCommerce, Laravel and Joomla
- DNS on PowerDNS with Cloudflare sync; Cloudflare proxy, access rules and cache purge
- Site and app backups on the server or Google Drive
- Health checks with 48 checks and 17 alert rules; notifications in the panel, via webhook or Telegram
- ClamAV virus scanning and quarantine, Fail2ban login protection, two-factor authentication (TOTP)
- 10 ready-made apps on Podman: n8n, Uptime Kuma, Vaultwarden, Gitea, Grafana, NocoDB, Ghost, DocuSeal, Wiki.js, Stirling PDF
- Migration wizard from CyberPanel and Plesk
By the numbers
- Measured on the test server: the panel uses about 115 MB and the system service about 45 MB of memory. Runs with 1 GB RAM minimum, 2 GB recommended.
- More than 2,400 automated tests; more than 1,250 commits since May 2026.
- Free tier for up to 3 main sites; unlimited sites for $9 per server per month ($95 per year).
Product page: deckpa.com
