Account isolation

With isolation enabled, every account's PHP, apps, cron jobs, SSH and terminal sessions run inside a cage: a private view of the system that contains the account's own home directory and the shared system tools, but not other customers' files, processes or the server's configuration.

Enable it#

1. Open Servers › Nodes › Isolation (cage).
2. Run Setup: NexPanel checks SSH, MariaDB's socket location and the web server, then prepares the shared cage root.
3. Enable isolation for the node. Existing accounts are moved into their cages when their configuration is rebuilt.

What customers notice#

• SSH and the browser terminal open inside the cage; ls /home shows only their own account.
• Database connections use localhost as usual.
• Paths like /opt/nexpanel/runtimes (Node.js, Python, Ruby) are available inside the cage.