Fail2ban brute-force protection for ServerKit: service status, jail overview, ban/unban, and one-click install.
Cloudflare zone operations on top of your existing Cloudflare DNS connection, covering zone settings, cache purge, WAF, Workers, Tunnels, and R2/KV/D1 storage.
Lynis host vulnerability scanning for the ServerKit security suite.
Container image security for ServerKit apps: CVE scans of application Docker images with grype, SPDX SBOM generation with syft, and a deploy-gate endpoint that blocks releases whose latest scan exceeds the vulnerability threshold.
Automatic security updates for the host OS: install and manage unattended-upgrades (Debian/Ubuntu) or dnf-automatic (RHEL/Fedora) from the panel's Security surface, so known vulnerabilities are patched without manual intervention.
Self-hosted Git server (Gitea) exposed through the ServerKit extension system.
API surface for the LocalKit desktop app: pair with an API key, list/create WordPress sites (API-key friendly), and push/pull wp-content code and database dumps between local and server sites.
Full mail-server stack with Postfix/Dovecot, domains, mailboxes, aliases, DKIM/SPF/DMARC, SpamAssassin filtering, and Roundcube webmail.
ClamAV + YARA malware scanning for ServerKit: quick/full/custom-path scans, job-backed app docroot scans with a curated web-shell rule pass, custom .yar rules, scan history, and a quarantine with restore.
To associate your repository with the serverkit-extension topic, visit your repo's landing page and select "manage topics."