Skip to content
NexPanel

Download

Install NexPanel

One command installs everything. The installer checks its own signature and every package’s before it runs anything.

Install command Installation guide
Latest stable ✓ Signature valid

v1.0.6

Released 26 October 2026 · Changelog

  • Jobs no longer go missing: the agent confirms every job it receives, and the controller re-sends an unconfirmed job after a minute instead of 30 minutes (needs agent 1.0.6).
  • A failed new account no longer leaves its Linux user behind (which blocked a retry).
  • PHP versions without websites no longer show as "failed" services: Remi's packages started every PHP-FPM version with the web server.
1

Install with one command

As root, on a fresh AlmaLinux, Rocky Linux or RHEL 9 or 10 server. Pick the setup you want. All options are in the installation guide.

Everything on one server

The panel and the hosting on the same machine. Admin on port 2087, customers on 2083. The easiest way to try it.

curl -fsSLO https://downloads.nexpanel.app/install/install.sh && bash install.sh --all-in-one --email you@example.com

The panel on its own server

Nginx, PHP-FPM, PostgreSQL and Redis, with a Let’s Encrypt certificate for your panel’s domain. Hosting servers join it later.

curl -fsSLO https://downloads.nexpanel.app/install/install.sh && bash install.sh --controller --domain cp.example.com --email you@example.com

Add a hosting server

Open Servers › Nodes › Add node in your admin panel. It shows the command for the new server, with a one-time token.

Replace you@example.com with your email: it becomes the admin login and the Let’s Encrypt contact. Add --no-telemetry to turn off anonymous install statistics.

2

Everything is checked for you

The NexPanel release key is built into the installer. Nothing runs until every check passes.

  1. ✓

    The installer itself

    It downloads its signature and checks its own file against the release key. A corrupted, outdated or altered copy stops right there.

  2. ✓

    The release list

    The manifest that names the current versions must be signed with the same key.

  3. ✓

    Every package

    Its SHA-256 must match the signed manifest, and its own signature must match the key, before it is unpacked.

  4. ✓

    Every update after

    The panel and each server check the same signatures before installing an update.

Verify the installer yourself first (optional)

For an independent check before anything runs as root, compare the key with the fingerprint published here, then check the signature:

curl -fsSO https://downloads.nexpanel.app/install/install.sh curl -fsSO https://downloads.nexpanel.app/install/install.sh.sig curl -fsSO https://downloads.nexpanel.app/keys/nexpanel-release.pub openssl pkey -pubin -in nexpanel-release.pub -outform DER | sha256sum openssl pkeyutl -verify -pubin -inkey nexpanel-release.pub -rawin -in install.sh -sigfile install.sh.sig

The sha256sum line must print:

4712 53db 7961 a1b2 5542 30e7 ba8e 65f5 3805 d1f8 8d45 328e 1b58 2627 4199 e6da

and openssl must say Signature Verified Successfully. If either doesn’t, stop and tell us. Then run bash install.sh with the options above.

3

Release files

The installer fetches these. Each has a .sig next to it.

PackageVersionSizeSHA-256
Controller 1.0.6 17.1 MB 29775cfad07ebc1d234560a38b16868c6bf5d78613beb804ce15ae8c51901243
Agent 1.0.6 10.8 MB b4bacd3b4eecf6f6fcb67080cb11751de607859bb76edcc8336699e43a975c21
LVE manager 1.0.6 2.7 MB 74907ad92618fecd248f85a0ba5019f4ba708466ee46cd9a721bc52c57170e35

Browse downloads.nexpanel.app for everything else: signed checksum lists, the manifest and the public key.

Before you start

System

AlmaLinux, Rocky Linux, RHEL 9 or 10, x86_64

To try it

2 vCPU, 4 GB of memory, 40 GB of disk

The server

Fresh and minimal, with root. No other panel on it.

Already running it?

Update from Administration › Updates instead.