Documentation

Understand the stack before you deploy.

Reference the web servers, Multi-PHP behavior, extension profiles, services, security model, generated files, and management commands.

Overview

SuperServer automates the initial deployment of a general-purpose web server. It creates a primary virtual host, obtains SSL, installs chosen services, saves generated credentials privately, and validates the finished stack.

SuperServer uses PHP-FPM with both Apache and Nginx. It intentionally avoids mod_php so each domain can select a PHP version.

Apache or Nginx

CapabilityApacheNginx
.htaccessSupportedNot used
PHP-FPM per domainYesYes
Traditional PHP hostingExcellentExcellent
Reverse proxy and DockerGoodExcellent
CrowdSec AppSec/WAFFirewall modeOptional AppSec mode

Multi-PHP

The installer can deploy PHP 8.1 through 8.5 side by side. PHP 8.1 starts unchecked because it is intended only for legacy compatibility.

SuperServer uses a validated provider chain and keeps only one provider active. It discovers the actual PHP-FPM listener from the pool configuration instead of assuming a socket path.

VersionRoleDefault behavior
8.1Legacy / EOLExplicit selection
8.2CompatibilitySelected
8.3SupportedSelected
8.4Supported modernSelected
8.5Newest supportedRecommended default

PHP extension profiles

Essential

cURL, MySQL/PDO MySQL, Mbstring, XML, ZIP, Intl, GD, BCMath, OPcache and Readline.

All

Essential modules plus Redis, SQLite3, SOAP, BZip2, Imagick, Tidy, XML-RPC, GMP, LDAP, IMAP, SNMP and APCu.

Custom

Use the terminal checklist to choose individual extensions. The installer checks selected packages against every selected PHP release and skips unavailable optional modules safely.

Optional components

  • MariaDB and phpMyAdmin at /phpmyadmin/
  • Redis Server
  • Composer
  • Node.js, npm and optional PM2
  • Python development tools in an isolated virtual environment
  • Java JDK
  • Docker Engine and Compose
  • Automatic security updates
  • SNYT Fastfetch and MOTD

Security

  • UFW firewall rules for SSH, HTTP and HTTPS.
  • Let’s Encrypt certificates with automatic renewal.
  • CrowdSec Security Engine for SSH and web logs.
  • Firewall bouncer for active enforcement.
  • Optional Nginx bouncer and AppSec/WAF listener.
  • Generated credentials stored with root-only permissions.

Domain management

Add a domain and select its PHP runtime:

super-sdomain
super-sdomain app.example.com 8.4
super-sdomain --list-php

The helper inherits the primary Let’s Encrypt contact mode from /root/SNYT/serverInfo.txt.

Important files

/root/SNYT/serverInfo.txtCredentials and selected provider information.
/root/SNYT/install-plan.confApproved wizard choices.
/var/log/snyt-superserver.logInstallation log.
/usr/local/share/snyt-superserver/Local templates.
/usr/local/sbin/super-serverHealth and management tool.
/usr/local/sbin/super-sdomainDomain helper.

Management commands

super-server
super-server status
super-server doctor
super-server domains
super-server php
super-server ssl
super-server restart
super-server info