Features Overview
AI Admin Panel ships with 156 features across deployment, management, security, and monitoring. This page provides a scannable overview of everything included.
Deployment Methods
Four ways to deploy services, each suited to different workflows:
| Method | Description | Best For |
|---|---|---|
| Template Deploy | Pick from 45 curated templates, configure variables, deploy | Standard services (databases, AI tools, web apps) |
| Git Deploy | Clone a repository, auto-detect build method, deploy | Custom applications with source code |
| AI Deploy | Paste a URL, AI analyzes the project, generates compose config | Unknown projects, quick experiments |
| Compose Deploy | Paste raw Docker Compose YAML with magic variables | Full control, existing compose files |
See the Deployment section for detailed guides on each method.
Template Catalog
45 templates organized into 4 categories:
| Category | Count | Examples |
|---|---|---|
| AI Services | 23 | Ollama, LibreChat, Dify, OpenClaw, Open WebUI |
| Databases | 5 | PostgreSQL, MySQL, MariaDB, MongoDB, Redis |
| DevTools | 7 | Gitea, n8n, MinIO, Code-Server, Uptime Kuma |
| Web Apps | 10 | Nextcloud, Ghost, WordPress, Mattermost, Directus |
Every template includes:
- Docker Compose spec with health checks
- Configurable variables (ports, passwords, resource limits)
- Minimum resource requirements
- Security profile (secure/advanced/raw)
- Traefik routing (no exposed ports)
Browse the full catalog: Template Overview
Authentication and RBAC
- Keycloak 26 as the sole identity provider (OIDC, no JWT fallback)
- Role-based access control: Admin, Operator, Viewer
- Per-customer isolation — users only see their own services
- Session management with secure cookies
- API key support for programmatic access
- Dark-branded Keycloak login page matching panel theme
Multi-Tenant Customer Management
- Create and manage customer accounts
- Assign service plans with resource quotas
- Per-customer service isolation
- Customer portal with self-service capabilities
- GDPR-compliant data handling (export, delete)
- Usage tracking and billing-ready metrics
See Customer Management for details.
Service Plans and Quotas
- Define plans with CPU, memory, storage, and service count limits
- Assign plans to customers
- Enforce quotas at deploy time
- Overage alerts and notifications
See Service Plans for details.
Domain and DNS Management
- Automatic subdomain provisioning:
{service}.panel.example.com - Custom domain support with CNAME verification
- Cloudflare DNS integration for automated record management
- Wildcard SSL via Let's Encrypt (Traefik)
- Traefik-based routing — services never expose ports directly
See Domains and DNS for details.
Monitoring and Observability
- Real-time service status dashboard
- Container resource usage (CPU, memory, network)
- Service health checks with auto-restart
- Deploy progress via WebSocket
- Container log streaming
- Service event timeline
Backup and Restore
- On-demand service backups
- Scheduled backup policies
- S3-compatible storage targets
- One-click restore
- Database-specific backup strategies
See Backup and Restore for details.
Notifications
- Multi-channel alerts: Email, Slack, Discord, Telegram, Webhooks
- Configurable notification triggers (deploy success/failure, health alerts, quota warnings)
- Per-customer notification preferences
- Webhook integration for custom automation
See Notifications for details.
Infrastructure
- Traefik v3 reverse proxy with automatic SSL certificate management
- PostgreSQL 16 for persistent data storage
- Valkey 8 for caching and session storage
- River async job queue for background operations
- Docker container orchestration via Docker API
- Single-binary deployment — frontend embedded in the Go binary
Security
- No ports exposed except 80/443 — all traffic routes through Traefik
- Secure-by-default template profiles
- Secret management via Docker secrets
- OIDC-only authentication (no password-based fallback)
- Automatic SSL/TLS for all services
- Container isolation per service