AegisAdmin

Documentation française

AegisAdmin is a lightweight web administration and monitoring interface for Debian and Ubuntu servers. The 0.2.x series is a release candidate intended for testing on a recoverable machine with an independent SSH access path.

• dashboard, system resources, processes, storage, network and logs;
• systemd services, Apache VirtualHosts, PHP-FPM, MySQL/MariaDB and Tor;
• Fail2ban, UFW firewall and TLS certificates with Certbot;
• Cron tasks and execution results;
• APT, firmware and hosted-site Composer dependency updates;
• users, per-module permissions, access log and TOTP two-factor authentication;
• settings, SQLite backups and server-configuration snapshots;
• French and English interface with four persistent themes.

The application separates two Go components:

• aegisadmin-web, running as the unprivileged aegisadmin account;
• aegisadmin-daemon, the privileged system backend, reachable only through a protected Unix socket.

System operations are explicitly registered and validated. Permissions are enforced server-side at View, Actions or Modify level. AegisAdmin also provides CSRF protection, secure persistent sessions, TOTP and an access audit log.

Without Apache, the Go web server provides HTTPS directly on port 8443. If Apache is already installed, the package configures it as a reverse proxy to https://127.0.0.1:9080. AegisAdmin never installs Apache implicitly.

See the architecture and security policy.

The current public release targets Debian or Ubuntu with systemd, APT and the amd64 architecture. An arm64 package can be built from the source but still requires validation before official publication.

Packages are distributed through the official signed APT repository:

• website: https://aegisadmin.fr/;
• package repository: https://packages.aegisadmin.fr/;
• installation and testing guide.

Never disable APT signature verification. After package installation, create the root account and select the default interface language:

sudo aegisadmin initialize

Go 1.22 or a compatible version is required on the development machine only.

cd backend/go
go test ./...
go vet ./...

Build and verify the Debian package from the repository root:

bash packaging/build-deb.sh
bash packaging/check-deb.sh dist/aegisadmin_$(cat VERSION)_amd64.deb

Deployment scripts modify the operating system and must only be used on an appropriate test machine.

The English documentation index covers installation, operations, architecture, permissions, recovery and packaging. The French documentation index remains available alongside it.

Current release status is tracked in the project status and planned work in the roadmap.

Read CONTRIBUTING.md before submitting a change. Do not open a public issue for a vulnerability; follow SECURITY.md.

AegisAdmin is licensed under the GNU Affero General Public License v3.0.