Component 03
Rizoma Webpanel is the mesh hosting control plane.
Run applications, services, routes, databases, mail, files, jobs, backups, and operator history on mesh nodes. A Go control plane with embedded Svelte dashboard, private-by-default networking, and day-two operations built in.
Control plane
dashboard, proxy routes, and service endpoints scoped to Rizoma Mesh
/api/v1 with session auth, CSRF, RBAC, request IDs
12 managed services across workloads, network, and communications
SMTP on 587, IMAP on 993, Maildir storage, webmail UI
healthz, readyz, metrics, logs, audit trail, restore points
A hosting panel shaped around the mesh node.
Product architecture
A hosting panel shaped around the mesh node.
Webpanel combines a Go API server, embedded Svelte UI, process supervisor, Docker and stack managers, reverse proxy, mail, FTP, file management, databases, cron, backup/restore, and audit logging into one operator surface.
Operator dashboard
Overview, workloads, network, fleet, security, operations, events, audit, and settings in one UI.
Go API layer
Versioned REST API under /api/v1 with session cookies, CSRF, rate limits, RBAC, and Prometheus metrics.
Runtime managers
Native service supervisor, Docker manager, stack deployer, database manager, cron scheduler, and restart controls.
Mesh publishing
Domains, proxy routes, WebSocket and static serving, FastCGI support, circuit breaker, and TLS posture.
Runtime coverage
Deploy more than websites.
Webpanel manages the runtime layer a private node needs: long-running services, container workloads, stack deployments, data services, scheduled tasks, and file operations.
svc
Native services
Start, stop, restart, inspect activity, stream logs, and manage environment for long-running services.
yaml
Stack deploys
Deploy YAML stacks, view status and activity, restart, stop, rollback, and inspect stack logs.
docker
Docker manager
Control containers, images, volumes, and networks with registry policy and lifecycle actions.
db
Databases
Run PostgreSQL, MySQL, and SQLite-backed services with lifecycle controls, stats, and admin access.
cron
Scheduled jobs
Create jobs, run them on demand, inspect next runs, and keep execution logs close to the service.
fs
Files
Browse, read, write, upload, download, mkdir, rename, chmod, search, archive, and extract through controlled paths.
Security model
Private by default, auditable by design.
The panel is built for sovereign deployments where the management plane should be reachable through the mesh, every mutation should be attributable, and unsafe input should be rejected before it becomes infrastructure state.
Mesh access
Mesh access
Bind management and service exposure to the private Rizoma network instead of opening the node to the public internet.
Identity
Identity controls
Session auth, bcrypt passwords, account lockout, admin gates, and admin/operator/viewer permissions.
Limits
Request hardening
CSRF checks, rate limits, JSON body limits, path traversal prevention, command validation, and sanitized responses.
Audit
Audit trail
Structured events with actor context, request IDs, system activity, and operational history for review.
Deploy the control plane
Turn a mesh node into an operable hosting environment.
Use Webpanel when you need one private surface for workloads, routes, mail, files, data services, operations, and evidence.