Overview
SuperServer automates the initial deployment of a general-purpose web server. It creates a primary virtual host, obtains SSL, installs chosen services, saves generated credentials privately, and validates the finished stack.
mod_php so each domain can select a PHP version.Apache or Nginx
| Capability | Apache | Nginx |
|---|---|---|
.htaccess | Supported | Not used |
| PHP-FPM per domain | Yes | Yes |
| Traditional PHP hosting | Excellent | Excellent |
| Reverse proxy and Docker | Good | Excellent |
| CrowdSec AppSec/WAF | Firewall mode | Optional AppSec mode |
Multi-PHP
The installer can deploy PHP 8.1 through 8.5 side by side. PHP 8.1 starts unchecked because it is intended only for legacy compatibility.
SuperServer uses a validated provider chain and keeps only one provider active. It discovers the actual PHP-FPM listener from the pool configuration instead of assuming a socket path.
| Version | Role | Default behavior |
|---|---|---|
| 8.1 | Legacy / EOL | Explicit selection |
| 8.2 | Compatibility | Selected |
| 8.3 | Supported | Selected |
| 8.4 | Supported modern | Selected |
| 8.5 | Newest supported | Recommended default |
PHP extension profiles
Essential
cURL, MySQL/PDO MySQL, Mbstring, XML, ZIP, Intl, GD, BCMath, OPcache and Readline.
All
Essential modules plus Redis, SQLite3, SOAP, BZip2, Imagick, Tidy, XML-RPC, GMP, LDAP, IMAP, SNMP and APCu.
Custom
Use the terminal checklist to choose individual extensions. The installer checks selected packages against every selected PHP release and skips unavailable optional modules safely.
Optional components
- MariaDB and phpMyAdmin at
/phpmyadmin/ - Redis Server
- Composer
- Node.js, npm and optional PM2
- Python development tools in an isolated virtual environment
- Java JDK
- Docker Engine and Compose
- Automatic security updates
- SNYT Fastfetch and MOTD
Security
- UFW firewall rules for SSH, HTTP and HTTPS.
- Let’s Encrypt certificates with automatic renewal.
- CrowdSec Security Engine for SSH and web logs.
- Firewall bouncer for active enforcement.
- Optional Nginx bouncer and AppSec/WAF listener.
- Generated credentials stored with root-only permissions.
Domain management
Add a domain and select its PHP runtime:
super-sdomain app.example.com 8.4 super-sdomain --list-php
The helper inherits the primary Let’s Encrypt contact mode from /root/SNYT/serverInfo.txt.
Important files
/root/SNYT/serverInfo.txt | Credentials and selected provider information. |
/root/SNYT/install-plan.conf | Approved wizard choices. |
/var/log/snyt-superserver.log | Installation log. |
/usr/local/share/snyt-superserver/ | Local templates. |
/usr/local/sbin/super-server | Health and management tool. |
/usr/local/sbin/super-sdomain | Domain helper. |
Management commands
super-server status super-server doctor super-server domains super-server php super-server ssl super-server restart super-server info