FAQ: the self-hosted Proxmox control panel

NexoVirt is a self-hosted control panel and a clean REST API layer for Proxmox VE. It manages multiple hosts and clusters from one place: guests, networking, storage, backups, plans and a customer portal, and runs entirely on your own infrastructure.

Two groups. Homelabbers and Proxmox admins who want a friendlier panel and a cleaner API than the stock Proxmox web UI use the free Community Edition. Hosting providers, MSPs and resellers who sell VMs and containers to customers use the paid plans for more nodes, white-label branding, SSO and a reseller tier. Everything is self-hosted.

NexoVirt sits on top of Proxmox and adds a panel-wide view across every host (no node-switching), a hosting layer (plans, OS templates, a customer portal, async provisioning), IPAM, alerting, email, automation and a cleaner REST API, things the stock Proxmox UI does not provide.

NexoVirt is a self-hosted, closed-source application that you run on your own server. The Proxmox API wrapper and the Terraform provider are separate, dedicated components.

Yes. A one-time SSH login installs a small agent on fresh or already-running nodes, and the panel imports your current VMs, containers, storage and networks. No reinstall and no starting over.

No. NexoVirt adopts your existing Proxmox setup in place. Nothing is reinstalled and your running guests keep running while they are imported.

Yes: both QEMU virtual machines and LXC containers, with create, reinstall, power, console, snapshots and backups for each.

Proxmox VE 7.0 or newer. When you add a host, the pre-check reads its Proxmox version and stops with a clear message if it is older than 7.0; hosts already in the panel get a health warning instead.

Yes. Add as many Proxmox hosts as you run; the dashboard, guest list and inventory are panel-wide across every host, so you never switch nodes by hand.

Yes. NexoVirt includes a multi-tenant customer portal with role-based access, an in-browser console, SSH-key management and two-factor authentication, so customers only ever see and manage the guests they own.

Start, stop, reboot and shut down their own servers, open an in-browser console, view live metrics, manage their SSH keys and 2FA, and (optionally) manage their own per-guest firewall rules, all scoped to guests they own, re-checked server-side on every action.

Yes. Plans bundle cores, memory, disk, a monthly traffic limit and an expiry. Creating from a plan locks the specs and records a lifecycle, and optional enforcement automatically suspends, deletes or resumes plan-assigned guests. Your custom guests are never touched.

Yes. Transactional email supports your own logo, company name and editable per-event templates over your own SMTP in every edition. Full white-label (your name and logo across panel, portal and email, no "Powered by") is part of the paid plans.

No. NexoVirt is fully self-hosted. The lightweight on-node agent collects no telemetry and ships nothing off your box. Only license checks and updates phone home.

Host passwords, per-host SSH keys, SMTP and automation credentials are encrypted at rest with your application key, and secrets are never returned in API responses or views.

Yes: opt-in TOTP two-factor with single-use recovery codes, for both admins and customers. The login challenge is role-agnostic, and the secret is encrypted at rest.

Yes. Logins, impersonation, host and user changes and 2FA events are recorded to a filterable global audit log.

Yes. IP address management (IPAM) lets you define IPv4/IPv6 zones with automatic subnet math; the create wizard can allocate the next free address as a static IP or use DHCP.

Yes. Per-host NAT and port forwarding give private guests internet access and expose them safely, and the rules survive a reboot. A read-only inspector shows iptables, nftables, ufw, firewalld and pve-firewall rules in one view with a network map, and per-guest firewall rules come with reusable presets.

On-demand per-guest backups (vzdump) with restore and delete, scheduled datacenter backup jobs, and instant per-guest snapshots with rollback are all available today.

Yes. You can connect and adopt a Proxmox Backup Server (PBS) with fingerprint pinning and optional client-side encryption, and monitor datastores, snapshots, garbage collection and verification from the panel.

Yes. Manage datacenter storages, directory, NFS and SMB/CIFS, from the panel, with per-node usage and content views.

Yes: a token-authenticated REST API with predictable JSON responses and in-app documentation. It covers hosts, nodes, the full guest lifecycle (create from a plan, power, reinstall, IP, delete), users and ownership, so a billing system or script can drive everything.

Yes. An OpenTofu/Terraform provider drives the REST API, so you can manage NexoVirt guests, through the hosting layer (plans, OS templates, async provisioning), declaratively.

A fresh Ubuntu server for the panel, which the one-line installer sets up, and network access from it to your Proxmox hosts: the Proxmox API on port 8006 and SSH on port 22 for the one-time onboarding. The agent on each node needs only PHP, which onboarding installs if it is missing.

Run the one-line installer on a fresh Ubuntu server, open the panel in your browser and add your first Proxmox host. The installation guide in the documentation covers the details, updates and uninstalling.

The Community Edition is free forever: every core feature, unlimited VMs, up to 2 Proxmox nodes. Paid plans are flat monthly plans with no per-VM fees: Pro (5 nodes, white-label, webhooks), Business (20 nodes, SSO, team roles) and Unlimited (unlimited nodes, reseller tier). See the pricing page for current prices.

The panel falls back to the free Community Edition and keeps running, and nothing is deleted. Paid features such as white-label switch off, and with more than 2 nodes you cannot add hosts or create guests until you renew or reduce the node count.

No. The installer sets up a free Community Edition license by itself, with no account and no license key. You only need an account to buy a paid plan or to claim the install for support.