These commands manage the services that run on the host: services driven by
systemd rather than containers. They are what the panel itself shells out to,
so the CLI and the panel can never disagree about how a vhost is generated or
when a service is safe to reload.
Every one of them answers --help with its own subcommands.
Each was once spelled with a native- prefix, and that spelling still works:
hitechcloudcli native-mail sync runs exactly what hitechcloudcli mail sync
runs, and an operator hook filed under the old name (pre_native-mail.sh)
still fires. Most names simply dropped the prefix; eleven took a new word
because the short one was already another command's: snapshots (was
native-backup), objectcache (native-cache), zone (native-dns),
usercontainers (native-docker), addresses (native-ipmanager),
sqlserver (native-mssql), phpversions (native-php), dbadmin
(native-phpmyadmin), account (native-user), webfirewall (native-waf)
and vpn (native-wireguard).
Installing and migrating
| Command | What it does | Subcommands |
|---|
hitechcloudcli install | Install and bootstrap the HiTechCloud services on the host (no containers). | |
hitechcloudcli migrate | Move an existing container-based install onto services running on the host. accounts moves a container server's accounts onto this server: see Move off the container stack. | plan run files ssl databases finish rollback accounts |
hitechcloudcli multiweb | Enable, inspect and repair Multi-WebServer Hosting. | status preflight check enable disable repair |
hitechcloudcli service | Start, stop and inspect the services that run on the host. | list status start stop restart reload enable disable |
hitechcloudcli event | Run the administrator's own scripts when the panel does something. | emit list log test dirs |
Websites
| Command | What it does | Subcommands |
|---|
hitechcloudcli engine | Choose the WebEngine (nginx/apache/openlitespeed) per website. | list get set default sites |
hitechcloudcli vhost | Generate, rebuild and remove native vhosts for a domain. | create rebuild delete suspend unsuspend show list |
hitechcloudcli phpversions | Manage native multi-version PHP-FPM for the dockerless stack. | list install remove set default ini restart |
hitechcloudcli protect | Password-protect a directory of a website on any WebEngine. | list add remove users user-set user-delete show rebuild |
hitechcloudcli errorpages | Serve a customer's own 401, 403, 404 and 500 pages for a domain. | list get set clear intercept rebuild |
hitechcloudcli mimetypes | Per-domain MIME types and Apache-style handlers. | list support add-type remove-type add-handler remove-handler rebuild |
hitechcloudcli http3 | Turn HTTP/3 (QUIC) on or off for a domain at the front-end. | status list on off |
hitechcloudcli hotlink | Stop other websites embedding this one's images and files. | status on off show |
hitechcloudcli movedomain | Move a domain from one hosting account to another, in place. | plan move |
hitechcloudcli webfirewall | Per-site web application firewall for the websites on this server. | |
Accounts
| Command | What it does | Subcommands |
|---|
hitechcloudcli account | Create and remove hosting accounts as plain Linux users. | add delete suspend unsuspend list show quota |
hitechcloudcli limits | Bind a hosting plan's CPU, memory and IO limits to the account. | apply apply-all show verify |
hitechcloudcli usage | Sample per-account resource usage for the panel's usage history. | collect quota-report show prune |
hitechcloudcli sslstore | A per-account store of private keys, signing requests and certificates, and the pages that use it. | |
DNS and certificates
| Command | What it does | Subcommands |
|---|
hitechcloudcli zone | Manage BIND zones for the websites on this server. | add delete list show reload check |
hitechcloudcli dnssec | Sign a hosted zone with DNSSEC, publish the DS, and keep it signed. | status enable disable sign ds rotate check run list enabled |
hitechcloudcli healthcheck | Score a domain's DNS and SSL configuration and say what to fix. | |
hitechcloudcli ssl | Issue, renew, upload and inspect SSL certificates for the websites on this server. | status info issue renew upload selfsigned revoke remove wildcard dns-provider dns-providers force-https hsts autossl deploy install |
hitechcloudcli resolver | Ask this server's own BIND, so the spam blocklists answer. | status enable disable check |
Mail
| Command | What it does | Subcommands |
|---|
hitechcloudcli mail | Virtual mail hosting on native Postfix and Dovecot. | install sync check status domains test |
hitechcloudcli mailautoconfig | Serve Thunderbird autoconfig, Outlook autodiscover and the MTA-STS policy for a mail domain, and publish MTA-STS only once the policy is provably reachable. | status list enable disable rebuild verify mta-sts reports |
hitechcloudcli mailforward | Forward a mailbox's mail to other addresses, and set a domain's catch-all. | list set del catchall |
hitechcloudcli mailpolicy | Per-domain and per-mailbox mail policy: blocked and allowed senders, the spam threshold and what happens at it, greylisting. | show spam access greylist sync |
hitechcloudcli mailrelay | A backup SMTP route for outgoing mail. | show set unset test sync |
hitechcloudcli mailusage | How much disk each mailbox uses, against its quota. | list show |
hitechcloudcli webmail | HiTechCloud Webmail, installed and served on the host. | install configure update status remove |
Databases and caches
| Command | What it does | Subcommands |
|---|
hitechcloudcli mysql84 | Run Oracle MySQL 8.4 LTS beside MariaDB, on its own port. | install status start stop remove port cli |
hitechcloudcli postgres | Who may reach this server's PostgreSQL, per hosting account. | remote listen status |
hitechcloudcli pgadmin | Serve pgAdmin from the host, one account at a time. | install status remove |
hitechcloudcli dbadmin | Serve phpMyAdmin from the host. | install status remove port |
hitechcloudcli objectcache | Per-account logins for the shared Redis/Valkey cache. | status secure unsecure adduser deluser password show |
hitechcloudcli memcached | A memcached of an account's own, on a socket only it can open. | status enable disable show |
hitechcloudcli varnish | A Varnish of an account's own, on sockets only it can open. | status enable disable show site purge sync |
Server
| Command | What it does | Subcommands |
|---|
hitechcloudcli firewall | Turn the ConfigServer Firewall on and off, and keep its port list honest about what this machine is actually serving. | status on off ports allow |