Security
Root access, with the rules written down.
Hostio needs root over SSH, so every rule is enforced in code and in tests.
Public keyssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHk3pQ0…sample hostio-team-8Copy public key
FingerprintSHA256:Qm4s0Dk9w1r7…sample
GeneratedTue, Oct 27, 2026
Connection from 80.47.228.240
Key accepted for hostio-team-8from="80.47.228.240,2a04:3542:1000:910:7cd7:1dff:fe8b:9a4"
Key accepted for hostio-team-8from="80.47.228.240,2a04:3542:1000:910:7cd7:1dff:fe8b:9a4"
01
One key per team
Private half encrypted at rest, never shown.
02
Only from our addresses
Hostio connects only from 80.47.228.240, 2a04:3542:1000:910:7cd7:1dff:fe8b:9a4.
03
Health never writes
Read-only recipes only, checked by a test.
04
Every change reversible
A backup first, then one action puts it back.
Operation log
Who did what.
Every operation names the person or the API key that started it. A session is stored as a short hash, never the cookie.
2026-10-27 08:14Started by ops@agency.example · session 3f9a…e1 · via panel
2026-10-26 17:03Started by API key ci-deploy · sites 4, 7
Talivio Technology OÜ, Tallinn, Estonia · control plane in Frankfurt