Free, open, single-host. Install on your VPS or bare metal. The same core drives the panel, the CLI, and the API — including AI agents.

Host writes need root + YSK_EXECUTE=1. Dry-run never reports success.

What's new in 1.1.32

Fixes

• File manager canonicalizes the sandbox root with realpathSync, so macOS /var → /private/var no longer 403s as a false symlink escape.

Dependency upgrades

• Major bumps: @types/node 26.6.5, SimpleWebAuthn 14, Vitest 5.0.5, panel WebTorrent 3.0.21, @vitejs/plugin-react 6.1.2 with Vite 8.3.5, i18next 26.5.6 with react-i18next 17.1.9. Runtime Node stays ≥22.

Internal & CI

• This page keeps the latest three versions.
• ysk-server, ysk-server-shared, and ysk-server-core ship 1.1.32.

What's new in 1.1.31

Fixes

• From-source install.sh no longer overlays the published npm tarball onto the git checkout. Overlay (--upgrade / panel self-update) copies every bundled node_modules entry and runs npm install --omit=dev so core transitives such as maxmind resolve.

Internal & CI

• This page keeps the latest three versions.
• ysk-server, ysk-server-shared, and ysk-server-core ship 1.1.31.

What's new in 1.1.30

Security

• Weekly supply-chain pass. New high happy-dom (GHSA-834v-8h66-3h79) pinned to 21.0.4. Residual [email protected] via bittorrent-tracker is unchanged.

Dependency upgrades

• Vite 6.4.5, sql.js 1.15.1, happy-dom 21.0.4. Override: ip-address 10.7.5.

Internal & CI

• This page keeps the latest three versions.
• ysk-server, ysk-server-shared, and ysk-server-core ship 1.1.30.

Full changelog

Panel

Install

Ubuntu 22.04 / 24.04 / 26.04 as root. Node.js ≥ 22. Native deps need python3, make, and g++.

Fresh host (recommended)

curl -fsSL https://raw.githubusercontent.com/yanshekki/ysk-server/main/install.sh | bash -s -- --non-interactive

Then open https://<server-ip>:9287, accept the self-signed warning, and sign in with the one-time password printed by the installer.

This package

npm install -g ysk-server
sudo ysk-server setup --admin-user admin --admin-password 'YourStrongPass1!' --data-dir /var/lib/ysk-server
export YSK_EXECUTE=1
sudo ysk-server serve

Weak default admin is rejected. On a new machine prefer install.sh (systemd + TLS + random password).

ysk-server help
ysk-server readiness --json

Capabilities

| Area | What ships | |:-----|:-----------| | Sites | Projects, Git deploy, per-site isolation | | Files | File manager, shares, WebDAV, FTPS, BT Tracker / WebTorrent | | Mail | Domains, mailboxes, deliverability checks (inbox reputation is not guaranteed) | | Data | MySQL, MariaDB, PostgreSQL, Redis | | Edge | DNS, SSL, Nginx, Apache, CDN agents | | Security | Protection, SSH / 2FA, VPN, VNC | | Containers | Docker engine | | Ops | Metrics, logs, terminal, cron, backups, updates | | Validators | L1 nodes (Beta) |

Honesty

• Installing the panel does not make global mail inbox delivery a given.
• Dangerous host operations stay dry-run until YSK_EXECUTE=1.
• First panel certificate is self-signed. Replace it when the host has a domain.

Package family

| Package | Role | |:--------|:-----| | ysk-server | This package — CLI + API + embedded panel | | ysk-server-shared | Types and locales (1.1.32) | | ysk-server-core | Hosting and security core (1.1.32) |

ysk-server bundles shared and core so npm install -g is reliable.

Source, docs, and install scripts live on GitHub (not on the npm “Code” tab):

https://github.com/yanshekki/ysk-server

Product README · Install guide · CLI reference

Uninstall

npm uninstall -g ysk-server

If you used install.sh:

sudo ./uninstall.sh --all --keep-data --yes