What is VPS Medic? A server doctor for CyberPanel, in an Android app

If you run a VPS with CyberPanel and OpenLiteSpeed, you already know the pattern. A site goes down at an awkward hour, you open a terminal, run systemctl status lsws, read a stack of logs, and try things until it works. Sometimes you fix it in a minute. Sometimes a "fix" takes the database down with it.

VPS Medic exists to make that pattern safe and fast, from a phone. It is an Android app that connects to your server over SSH, runs a complete health scan, works out why something failed, and repairs it the way a careful senior admin would: lightest fix first, verified, with a rollback ready.

What the app does

Open the app, pick a server, tap Scan. In about twenty seconds you get a colour-coded report of your server's vital signs:

• Services — OpenLiteSpeed, CyberPanel (lscpd), MariaDB, Postfix, Dovecot, PowerDNS, firewall. Not just "running" but whether a unit is inactive, failed, disabled or masked, because each one needs a different action.
• Resources — disk and inode usage, RAM, swap, load, out-of-memory kills in the last day.
• Websites — a health card per vhost: config validity, docroot permissions, PHP version and extensions, SSL expiry and chain, whether DNS actually points at this server, a live HTTP test, and recent log errors.
• Security — open ports, failed SSH logins, password login for root, pending security updates, recently changed files and injection patterns in public_html.
• Panel — CyberPanel version, PHP versions installed and which sites use them, last backup time.

Every red or yellow item has a Fix button. Tapping it does not run anything yet. It shows the diagnosis, the commands that will be executed, the expected downtime, and whether a snapshot will be taken first. You confirm, then watch the live console.

How the repair engine thinks

Most "auto-fix" scripts are a list of commands run in order, ending with a reinstall. That is how a missing Python module turns into a reinstalled panel with lost settings. VPS Medic's engine is different: every repair is a playbook that climbs the same ladder.

1. Observe — read-only commands collect evidence: service state, journalctl, application logs, disk, memory, config test results.
2. Diagnose — the evidence is matched against known root causes, ordered from most common to least. A failed lsws could be a port conflict with Apache, a stale PID file, an invalid vhost config, a missing SSL file, an OOM kill, or a corrupt binary. Each has a different fix.
3. Fix lightly — level 1 is restart, enable, permissions, cache. Level 2 touches config or a single package, always after a snapshot. Level 3 (reinstall a component, rebuild a venv) needs your confirmation.
4. Verify — after every step the engine checks the symptom is gone and that every site still answers. If not, it climbs one rung.
5. Roll back — if any service that was healthy before stops, the snapshot is restored automatically and you get a report instead of a broken server.

Here is a shortened playbook for the "psutil / lscpd down" case, one of the most common CyberPanel failures after an OS upgrade:

causes:
  disk-full        → run disk-cleanup first (corrupt .so files are born here)
  venv-missing     → rebuild venv            (level 3, confirm, backup)
  python-mismatch  → rebuild venv for new Python (level 3, confirm)
  pip-broken       → ensurepip / get-pip     (level 2) then continue
  so-corrupt       → pip install --force-reinstall --no-cache-dir psutil
  module-missing   → pip install psutil into the panel venv, not system pip
  build-deps       → install gcc + python3-dev, retry
fallback:          → full venv rebuild from requirements, with backup

Notice the order. Reinstalling psutil on a full disk produces another corrupt file; reinstalling it with a broken pip fails; installing it with system pip puts it in the wrong place. The engine fixes the cause before it installs anything.

Why it will not make things worse

Some limits are hard-coded into the engine, not into individual playbooks, so no playbook can override them:

• /home, MariaDB data, OpenLiteSpeed and CyberPanel configuration are never deleted.
• Active log files are truncated, never removed. Deleting a log that a process still holds open does not free space and can confuse the process.
• The running kernel is never removed by cleanup.
• Before any level-2 or level-3 step the engine checks free disk and inodes. If the disk is nearly full it runs a safe cleanup first, because almost every corrupt file on a VPS was written while the disk was full.
• Nothing is reported as fixed until a verify step passes.

When every rung has been tried and the problem remains, the app does not guess. It gives you a diagnosis report with the evidence, what was attempted, and the manual steps to take next, with a one-tap option to send it to support.

Where your credentials live

The app asks for an IP, port and root password or key. Those are stored encrypted on your phone using the Android Keystore and used only to open an SSH session from the phone to your server. They are never sent to VPS Medic's servers. On the first connection the app generates its own SSH key, installs it, and offers to disable password login for you.

The license server only receives your license key and an anonymous hash that identifies your phone. Requests from the app to the on-server agent are signed with a key created during pairing, so the agent cannot be driven by anyone else even if its port is reachable.

Supported systems

Operating system	Status
Ubuntu 22.04 LTS, 24.04 LTS	Full repair playbooks
AlmaLinux 8, 9 · Rocky Linux 8, 9	Full repair playbooks
Ubuntu 20.04, CentOS 7, Debian	Diagnostics only, flagged as unsupported or end-of-life

The playbooks target CyberPanel with OpenLiteSpeed. Servers without CyberPanel still get the scan, disk cleanup, memory and security checks. cPanel installation and checks are on the roadmap.

Pricing and license

Every plan covers unlimited servers on one phone; you only choose the period: $69.9 a month, $199.9 a year, or $399.9 once for life (all in US dollars). Updates are included while the plan is active and forever on Lifetime. One license is tied to one phone; moving to a new phone is a one-tap reset. Everything is unlocked for a 3-day trial without a card. See the pricing page for details, or download the APK and scan your first server.