Native stack

The native-* commands manage the native (dockerless) stack: host services driven by systemd rather than containers. They are what the panel itself shells out to, so the CLI and the panel can never disagree about how a vhost is generated or when a service is safe to reload.

Every one of them answers --help with its own subcommands.

Installing and migrating

Command	What it does	Subcommands
`hitechcloudcli native-install`	Install and bootstrap the native (dockerless) HiTechCloud stack.
`hitechcloudcli native-migrate`	Move an existing container-based install onto the native stack.	`plan` `run` `files` `ssl` `databases` `finish` `rollback`
`hitechcloudcli native-multiweb`	Enable, inspect and repair Multi-WebServer Hosting.	`status` `preflight` `check` `enable` `disable` `repair`
`hitechcloudcli native-service`	Start, stop and inspect the native (dockerless) service stack.	`list` `status` `start` `stop` `restart` `reload` `enable` `disable`
`hitechcloudcli native-event`	Run the administrator's own scripts when the panel does something.	`emit` `list` `log` `test` `dirs`

Websites

Command	What it does	Subcommands
`hitechcloudcli native-engine`	Choose the WebEngine (nginx/apache/openlitespeed) per website.	`list` `get` `set` `default` `sites`
`hitechcloudcli native-vhost`	Generate, rebuild and remove native vhosts for a domain.	`create` `rebuild` `delete` `suspend` `unsuspend` `show` `list`
`hitechcloudcli native-php`	Manage native multi-version PHP-FPM for the dockerless stack.	`list` `install` `remove` `set` `default` `ini` `restart`
`hitechcloudcli native-protect`	Password-protect a directory of a website on any WebEngine.	`list` `add` `remove` `users` `user-set` `user-delete` `show` `rebuild`
`hitechcloudcli native-errorpages`	Serve a customer's own 401, 403, 404 and 500 pages for a domain.	`list` `get` `set` `clear` `intercept` `rebuild`
`hitechcloudcli native-mimetypes`	Per-domain MIME types and Apache-style handlers.	`list` `support` `add-type` `remove-type` `add-handler` `remove-handler` `rebuild`
`hitechcloudcli native-http3`	Turn HTTP/3 (QUIC) on or off for a domain at the front-end.	`status` `list` `on` `off`
`hitechcloudcli native-hotlink`	Stop other websites embedding this one's images and files.	`status` `on` `off` `show`
`hitechcloudcli native-movedomain`	Move a domain from one hosting account to another, in place.	`plan` `move`
`hitechcloudcli native-waf`	Per-site web application firewall on the native stack.

Accounts

Command	What it does	Subcommands
`hitechcloudcli native-user`	Create and remove hosting accounts as plain Linux users.	`add` `delete` `suspend` `unsuspend` `list` `show` `quota`
`hitechcloudcli native-limits`	Bind a hosting plan's CPU, memory and IO limits to the account.	`apply` `apply-all` `show` `verify`
`hitechcloudcli native-usage`	Sample per-account resource usage for the panel's usage history.	`collect` `quota-report` `show` `prune`
`hitechcloudcli native-sslstore`	A per-account store of private keys, signing requests and certificates, and the pages that use it.

DNS and certificates

Command	What it does	Subcommands
`hitechcloudcli native-dns`	Manage BIND zones for websites on the native stack.	`add` `delete` `list` `show` `reload` `check`
`hitechcloudcli native-dnssec`	Sign a hosted zone with DNSSEC, publish the DS, and keep it signed.	`status` `enable` `disable` `sign` `ds` `rotate` `check` `run` `list` `enabled`
`hitechcloudcli native-healthcheck`	Score a domain's DNS and SSL configuration and say what to fix.
`hitechcloudcli native-ssl`	Issue, renew, upload and inspect SSL certificates on the native stack.	`status` `info` `issue` `renew` `upload` `selfsigned` `revoke` `remove` `wildcard` `dns-provider` `dns-providers` `force-https` `hsts` `autossl` `deploy` `install`
`hitechcloudcli native-resolver`	Ask this server's own BIND, so the spam blocklists answer.	`status` `enable` `disable` `check`

Mail

Command	What it does	Subcommands
`hitechcloudcli native-mail`	Virtual mail hosting on native Postfix and Dovecot.	`install` `sync` `check` `status` `domains` `test`
`hitechcloudcli native-mailautoconfig`	Serve Thunderbird autoconfig, Outlook autodiscover and the MTA-STS policy for a mail domain, and publish MTA-STS only once the policy is provably reachable.	`status` `list` `enable` `disable` `rebuild` `verify` `mta-sts` `reports`
`hitechcloudcli native-mailforward`	Forward a mailbox's mail to other addresses, and set a domain's catch-all.	`list` `set` `del` `catchall`
`hitechcloudcli native-mailpolicy`	Per-domain and per-mailbox mail policy: blocked and allowed senders, the spam threshold and what happens at it, greylisting.	`show` `spam` `access` `greylist` `sync`
`hitechcloudcli native-mailrelay`	A backup SMTP route for outgoing mail.	`show` `set` `unset` `test` `sync`
`hitechcloudcli native-mailusage`	How much disk each mailbox uses, against its quota.	`list` `show`
`hitechcloudcli native-webmail`	MailFlow webmail, installed and served natively.	`install` `configure` `update` `status` `remove`

Databases and caches

Command	What it does	Subcommands
`hitechcloudcli native-mysql84`	Run Oracle MySQL 8.4 LTS beside MariaDB, on its own port.	`install` `status` `start` `stop` `remove` `port` `cli`
`hitechcloudcli native-postgres`	Who may reach this server's PostgreSQL, per hosting account.	`remote` `listen` `status`
`hitechcloudcli native-pgadmin`	Serve pgAdmin from the native stack, one account at a time.	`install` `status` `remove`
`hitechcloudcli native-phpmyadmin`	Serve phpMyAdmin from the native stack.	`install` `status` `remove` `port`
`hitechcloudcli native-cache`	Per-account logins for the shared Redis/Valkey cache.	`status` `secure` `unsecure` `adduser` `deluser` `password` `show`
`hitechcloudcli native-memcached`	A memcached of an account's own, on a socket only it can open.	`status` `enable` `disable` `show`
`hitechcloudcli native-varnish`	A Varnish of an account's own, on sockets only it can open.	`status` `enable` `disable` `show` `site` `purge` `sync`

Server

Command	What it does	Subcommands
`hitechcloudcli native-firewall`	Turn the ConfigServer Firewall on and off, and keep its port list honest about what this machine is actually serving.	`status` `on` `off` `ports` `allow`