Container Provisioning

🎁 Free — included on every WolfStack tier
✅ Available now

When you assign a hosting service to a customer, WolfHost can automatically provision a dedicated LXC container for them across your WolfStack cluster.

Automatic Container Setup

  • Smart node selection — automatically picks the least-loaded server based on container count, memory usage, and online status
  • Manual override — choose a specific node if needed
  • Container naming — containers follow the pattern wh-{email_prefix}-{service_id} for easy identification
  • Resource limits — configurable memory (512 MB / 1 GB / 2 GB) and CPU core limits (1–2 cores) per container based on the hosting plan
  • Proxmox compatible — auto-detects Proxmox and uses pct create instead of lxc-create
  • Default website — a branded “Welcome to your-domain.com” page is created automatically
  • Webmaster FTP — an FTP user is created automatically with www-data group membership for web file access

Web Stack

Every provisioned container receives a full LAMP stack, installed and configured automatically:

ComponentDetails
Apache 2With mod_rewrite, mod_ssl, mod_headers, mod_expires enabled. Default vhost with AllowOverride All for .htaccess support.
PHPWith modules: mysql, curl, gd, mbstring, xml, zip
CertbotLet’s Encrypt client for SSL certificate provisioning via webroot method (/var/www/acme)
vsftpdFTP server with per-customer accounts and configurable quotas
MariaDB clientFor connecting to per-container or central database servers

Reverse Proxy

WolfHost automatically configures an Nginx reverse proxy on the host for each customer container:

  • ACME challenge passthrough — /.well-known/acme-challenge/ requests are forwarded to the container for SSL verification
  • WebSocket support — proxy_buffering off with Connection/Upgrade header forwarding
  • Large file uploads — 256 MB upload limit configured by default
  • Header forwarding — X-Real-IP, X-Forwarded-For, X-Forwarded-Proto, Host headers set correctly
  • SSL termination — automatic Nginx SSL vhost with TLS 1.2 and 1.3 support

FTP Port Forwarding

WolfHost sets up automatic FTP forwarding from the host to the customer’s container:

  • Port allocation starts at 2100 and increments per customer
  • Customers connect to the host IP on their allocated FTP port
  • Traffic is transparently forwarded to the container’s vsftpd instance

Mail Server

When email is configured for a customer domain, WolfHost installs a complete mail stack inside the container:

  • Postfix — SMTP server for sending and receiving mail
  • Dovecot — IMAP and POP3 server for mail retrieval
  • DKIM — automatic DKIM key generation and signing
  • DNS records — automatic generation of required SPF, DKIM, and DMARC records with a DNS records helper endpoint
  • Pre-configured ports — SMTP on port 587 (STARTTLS), IMAP on port 993 (SSL/TLS), POP3 on port 995 (SSL/TLS)

Live Provisioning Logs

Provisioning progress is streamed to the admin dashboard in real time via Server-Sent Events (SSE):

  • Streaming endpoint — /servers/provision/{task_id}/stream for live log output
  • Log history — /servers/provision/{task_id}/logs for retrieving completed task logs
  • Log levels — info, cmd, ok, err, and done message types for clear progress tracking
  • Task tracking — each provisioning operation gets a unique task ID for monitoring
Esc