Modules
Built-in features for hosts, switched on per install from the admin UI.
Modules ship with lomiri, so there is nothing to install. Each one is off by default; switch it on and configure it from Admin → Modules. They run under the same test suite as the rest of the panel.
Self-service
Let users create their own servers within limits you set.
- Eggs: choose which eggs users may deploy.
- Placement:
autopicks a viable node,node-selectlets the user choose. - Limits: maximum servers, plus CPU (100 = one core), memory and disk (MiB), and the number of
allocations, databases and backups each created server gets. A limit of
0means none. - Overrides: give specific users their own limits.
Self-registration
Let visitors create their own accounts. Optionally put sign-up behind a Cloudflare Turnstile captcha: enable it and enter your site key and secret. The secret is never sent to the browser.
Rate limiting
Throttle API traffic and brute-force attempts. Each rule allows at most max hits per window
seconds; set max to 0 to turn a rule off.
| Rule | Default | Applies to |
|---|---|---|
client | 720 / 60 s | /api/client, per user |
application | 240 / 60 s | /api/application, per user |
ui | 720 / 60 s | The web UI's API, per user |
login | 5 / 60 s | Failed logins per IP and account (cleared on success) |
loginIp | 20 / 60 s | Failed logins per IP |
loginAccount | 30 / 15 min | Failed logins per account, from any IP |
register | 10 / hour | Sign-ups per IP |
oauth | 30 / 60 s | OAuth attempts per IP |
authFailures | 30 / 60 s | Failed API-token authentications per IP |
passwordConfirm | 5 / 60 s | Failed current-password checks per user |
sftp | 5 / 60 s | Failed SFTP logins per username and IP |
Limits are keyed on the client address, so make sure
TRUSTED_PROXIES matches your setup.
Announcement bar
Show a dismissible message above every user's server list, for maintenance windows, incidents or news. Up to 2000 characters.