Warning: On April 8th, 2018, a vulnerability was discovered in VestaCP that allowed attackers to compromise host systems and send malicious traffic targeting other servers. As a result, DigitalOcean has disabled port 8083
and VestaCP has taken down installation files until the issue has been patched which will affect new and existing installations. To find out more about ongoing developments and learn how to mitigate this issue, read the Community question about this vulnerability.
This article covers a version of Ubuntu that is no longer supported. If you are currently operate a server running Ubuntu 12.04, we highly recommend upgrading or migrating to a supported version of Ubuntu:
Reason: Ubuntu 12.04 reached end of life (EOL) on April 28, 2017 and no longer receives security patches or updates. This guide is no longer maintained.
See Instead: This guide might still be useful as a reference, but may not work on other Ubuntu releases. If available, we strongly recommend using a guide written for the version of Ubuntu you are using. You can use the search functionality at the top of the page to find a more recent version.
Vesta is an easy to use open source web hosting control panel that currently supports Ubuntu Linux (12.04 LTS, 13.04 and 13.10), Debian 7, CentOS (5 and 6), and RHEL (5 and 6). It packs a bunch of features by default to allow you to host and manage your websites with ease on your VPS.
Create and configure a new VPS.
Once you have your virtual server up and running, login via ssh with the user you created while configuring your droplet. If you decide to log in as root, you can leave out the “sudo” command in all of the following commands.
Seeing that we have a new VPS running, go ahead and refresh the package indexes:
sudo apt-get update
Now may also be a good time to upgrade any packages that might need it:
sudo apt-get dist-upgrade
Next, we download the Vesta installation script:
curl -O http://vestacp.com/pub/vst-install.sh
After which we run this script:
sudo bash vst-install.sh
The install script shows us some information on the software that will be installed:
Press “y” and “enter” to proceed with the installation.
You will be prompted to enter a valid email address. Be careful to enter an address you have access to and double-check the address you entered for any typing errors, since you will not be prompted to confirm it. Vesta will use this address to try to send you your login credentials. Don’t worry if you have entered the address incorrectly. All the information you will need will be displayed in the terminal window after installation, and you will be able to change the admin email address as soon as Vesta is installed.
Upon completion, you will be presented with the following information:
Take note of the address, username, and password. You will need it to log in to the control panel.
NOTE
If you gave the users sudo access, you might want to set that up again right now, since the Vesta installation overwrites the sudoers.tmp file to add some configurations. You can read about setting up sudo access in step four on the page.
If you don’t like the password that Vesta generated for you, you will be able to change it once you are logged in [or you can run the following command at any time]:
sudo /usr/local/vesta/bin/v-change-user-password admin NEW_PASSWORD
Just replace NEW_PASSWORD with the password you would like to use for the admin user. The above command is also handy to reset your password, should you ever lose it.
Now that Vesta is installed, open your browser and go to the address that Vesta gave you in step two. If you didn’t take note of it, the address will be as follows:
https://<your-server-IP-address-or-URL>:8083
Notice that the URL starts with https:// and not http://. This means that we are accessing Vesta over a secure connection. This secure (SSL) connection needs a certificate on the VPS to use for securing the data transport. Since we have not set up any certificates yet, an unsigned server generated certificate is used, which is why you will get a warning message from your browser similar to the one in the following screenshot:
Just press “Proceed anyway” or the equivalent in your browser, after which you will reach the login page. Login using your credentials that you obtained in step 2:
After logging in, you will be presented with the control panel where you can continue to configure users, web sites, DNS servers, databases, etc.
<div class=“author”>Submitted by: Francois De Wet</a></div>
Thanks for learning with the DigitalOcean Community. Check out our offerings for compute, storage, networking, and managed databases.
This textbox defaults to using Markdown to format your answer.
You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!
Interesting panel. I installed and am testing. I can not send or receive email. Can you help me?
@leonardoasb, check your spam folder…haven’t had anything legitimate hit my gmail spam folder in a long time so I forgot to even look there myself.
Vesta Control panel is free ? or paid …
Vesta is free.
Vesta CP panel is not working great on ubuntu, full of 500 errors
@daniellekwint i dont know why you have 500 erros but are you sure that you installed vesta on a clean server ?
Following packages are already installed: apache2 mysql-server
It is highly recommended to remove them before proceeding. If you want to force installation run this script with -f option:
What a strange suggestion? It should work without reinstalling apache & mysql.
I have a problem with Wordpress, WP Super Cache, Missing Apache Modules:
mod_headers - Required to set caching information on supercache pages. IE7 users will see old pages without this module. mod_expires - Set the expiry date on supercached pages. Visitors may not see new pages when they refresh or leave comments without this module.
Can i just do this:
udo a2enmod expires sudo a2enmod headers sudo service apache2 restart
Can this create some kind of conflict with Apache/Vesta or will it work as on a normal Apache server?
How secure is the vesta cp?
When I create database using VestaCP, I can’t login via https://my-ip/phpmyadmin but when using a command line i can access it.