# TurboStack Documentation

> TurboStack is Hosted Power's self-service platform for managing hosting infrastructure. You
> describe how each server (a "host") should be configured — web server, applications, databases,
> caching, security, backups — and TurboStack deploys that configuration for you. These pages are
> the end-user documentation for the platform.

## Getting started

- [Introduction](https://docs.turbostack.app/getting-started/introduction/): What TurboStack is and the desired-state model.
- [Core concepts](https://docs.turbostack.app/getting-started/core-concepts/): Clients, groups, hosts, applications, templates, publishing, revisions.
- [Deploy your first site](https://docs.turbostack.app/getting-started/first-deployment/): End-to-end quick start: create host, add app, connect domain, publish.
- [Connecting your domain](https://docs.turbostack.app/getting-started/connecting-your-domain/): DNS A/AAAA records so Let's Encrypt can issue HTTPS.
- [Logging in](https://docs.turbostack.app/getting-started/logging-in/): Sign in, two-factor authentication, account selection.
- [Selecting an account](https://docs.turbostack.app/getting-started/selecting-an-account/): The Account list shown when a login has access to more than one account.
- [Navigating the interface](https://docs.turbostack.app/getting-started/navigating-the-interface/): The sidebar, layout, GUI vs Source.

## Hosts (configuring a server)

- [Hosts](https://docs.turbostack.app/platform/hosts/): Browse, create and manage servers; the host workspace and tabs.
- [Publishing changes](https://docs.turbostack.app/platform/hosts/publishing/): Save vs publish, deployment types, progress.
- [History](https://docs.turbostack.app/platform/hosts/revisions/): Revisions, deploys and account cloning.
- [Credentials](https://docs.turbostack.app/platform/hosts/credentials/): Server and per-account access details.
- [Health](https://docs.turbostack.app/platform/hosts/health/): Per-host monitoring — issues, resource usage, service checks.
- [Threat Center](https://docs.turbostack.app/platform/hosts/threat-center/): Security findings — vulnerabilities, malware, runtime events.
- [Applications](https://docs.turbostack.app/platform/hosts/applications/): System users, websites (vhosts), TLS, technologies, databases, FTP.
- [Services](https://docs.turbostack.app/platform/hosts/services/): Web server, databases, caching and search engines.
- [Advanced](https://docs.turbostack.app/platform/hosts/advanced/): Mail, Varnish, RabbitMQ, FTP server, operating system, Advanced Database Monitoring.
- [SSH](https://docs.turbostack.app/platform/hosts/ssh/): SSH keys and authentication.
- [Security](https://docs.turbostack.app/platform/hosts/security/): TurboShield, IP allow-list, GeoIP filtering, WAF.
- [TLS certificates](https://docs.turbostack.app/platform/hosts/tls-certificates/): Let's Encrypt, self-signed, custom; http vs DNS challenge; wildcards; renewal.
- [Email](https://docs.turbostack.app/platform/hosts/email/): Outbound mail via Postfix; SPF/DKIM/DMARC for deliverability.
- [Backups](https://docs.turbostack.app/platform/hosts/backups/): Create backups and restore files and databases.
- [Migration Hero](https://docs.turbostack.app/platform/hosts/migration-hero/): Migrate an existing site from an external host.
- [Git deployment](https://docs.turbostack.app/platform/hosts/git-deployment/): Deploy application code from a Git repository.

## Organising hosts

- [Groups](https://docs.turbostack.app/platform/groups/): Apply shared SSH keys and security across many hosts.
- [Templates](https://docs.turbostack.app/platform/templates/): Reusable host configurations.

## Applications (deploy guides with example YAML)

- [Deploying applications](https://docs.turbostack.app/applications/): How deployment works, requirements, the base YAML pattern, the rules for choosing services, and application file layout and permissions.
- [WordPress](https://docs.turbostack.app/applications/wordpress/deploy/): PHP + MySQL + Redis; example YAML.
- [Magento 2 / Adobe Commerce](https://docs.turbostack.app/applications/magento/deploy/): PHP + MySQL + Elasticsearch + Redis + Varnish; example YAML.
- [Shopware](https://docs.turbostack.app/applications/shopware/deploy/): PHP + MySQL + Redis + Varnish; example YAML.
- [Drupal](https://docs.turbostack.app/applications/drupal/deploy/): PHP + MySQL + Redis; example YAML.
- [Laravel](https://docs.turbostack.app/applications/laravel/deploy/): PHP + MySQL + Redis; example YAML.
- [Akeneo PIM](https://docs.turbostack.app/applications/akeneo/deploy/): PHP + MySQL + Elasticsearch; example YAML.
- [OroCommerce](https://docs.turbostack.app/applications/orocommerce/deploy/): PHP + MySQL + Redis + RabbitMQ; example YAML.
- [Craft CMS](https://docs.turbostack.app/applications/craftcms/deploy/): PHP + MySQL + Redis; example YAML.
- [Nextcloud](https://docs.turbostack.app/applications/nextcloud/deploy/): PHP + MySQL/PostgreSQL + Redis; example YAML.
- [Odoo](https://docs.turbostack.app/applications/odoo/deploy/): Python + PostgreSQL behind nginx; example YAML.
- [Medusa](https://docs.turbostack.app/applications/medusa/deploy/): Node.js + PostgreSQL via reverse proxy; example YAML.
- [nopCommerce](https://docs.turbostack.app/applications/nopcommerce/deploy/): .NET + SQL Server; example YAML.
- [Self-hosted platforms (GitLab, Advanced Database Monitoring)](https://docs.turbostack.app/applications/self-hosted-platforms/): Kubernetes-based platforms.


> Every application above also has a **Best practices** page (`/applications/<app>/best-practices/`) and a **Troubleshooting** page (`/applications/<app>/troubleshooting/`). Several (Magento, Shopware, WordPress, Drupal, Odoo, Craft CMS) also have a **Reference** page (`/applications/<app>/reference/`) with file layout, command-line reference and configuration. Magento adds a [How to run multiple store views](https://docs.turbostack.app/applications/magento/multiple-store-views/) guide.

## Tools and help

- [Search](https://docs.turbostack.app/platform/search/): Find hosts, groups and templates.
- [Monitoring](https://docs.turbostack.app/platform/monitoring/): Fleet-wide alerts dashboard.
- [Platform updates](https://docs.turbostack.app/platform/platform-updates/): Release notes and announcements.
- [Support](https://docs.turbostack.app/platform/support/): How to get help.
- [Troubleshooting](https://docs.turbostack.app/platform/troubleshooting/): Common questions and fixes.

## Technologies (what it is + how to configure, with YAML)

- [Technologies overview](https://docs.turbostack.app/technologies/): Catalog of every technology and where it is configured.
- Nginx · Apache · PHP · Node.js · Python · Ruby · .NET · MySQL · PostgreSQL · MongoDB · Microsoft SQL Server · Redis · RabbitMQ · Elasticsearch · OpenSearch · Varnish · Reverse proxy · Docker · Kubernetes · TurboShield · Firewall · SSH.
- Each technology has a **What is** page (`/technologies/<slug>/what-is/`) and a **Configure** page (`/technologies/<slug>/configure/`) with the required/optional YAML keys.
- [System services](https://docs.turbostack.app/technologies/system-services/what-is/): systemd user services - what they are, and [how to create, start, stop and scale them](https://docs.turbostack.app/technologies/system-services/manage-user-services/) (message-queue consumers, queue workers, background jobs).

## Concepts

- [The Source (YAML) view](https://docs.turbostack.app/concepts/yaml-view/): Editing configuration as YAML.
- [Accounts and access](https://docs.turbostack.app/concepts/roles-and-access/): Account access and multi-account login.
- [Security overview](https://docs.turbostack.app/concepts/security-overview/): TurboShield, TurboRadar, and malware and threat protection.
- [Networking](https://docs.turbostack.app/concepts/networking/): PrivateNet, VPN, high availability.
- [Monitoring](https://docs.turbostack.app/concepts/monitoring/): Monitoring, uptime and health checks, APM.
- [Performance tuning](https://docs.turbostack.app/concepts/performance-tuning/): Caching (Redis, Varnish, OPcache) and when to override auto-tuned sizing.
- [Security hardening](https://docs.turbostack.app/concepts/security-hardening/): Practical checklist — SSH keys, TurboShield, WAF, 2FA, TLS, least-privilege DB users.
- [Glossary](https://docs.turbostack.app/concepts/glossary/): Key TurboStack terms.

## Troubleshooting

- [Troubleshooting overview](https://docs.turbostack.app/troubleshooting/): A diagnostic method and where to look first (Health, Monitoring, History, logs, CLI).
- [Why is my site slow?](https://docs.turbostack.app/troubleshooting/site-slow/): Caching, slow queries, bots and profiling.
- [502, 503 and 504 errors](https://docs.turbostack.app/troubleshooting/site-down-5xx/): PHP-FPM down/overloaded, timeouts, recovery.
- [403, 413 and 429 errors](https://docs.turbostack.app/troubleshooting/http-4xx-errors/): Firewall blocks, upload size limit, rate limiting.
- [Out of memory (OOM)](https://docs.turbostack.app/troubleshooting/out-of-memory/): Memory pressure and swap.
- [High CPU and load](https://docs.turbostack.app/troubleshooting/high-cpu-and-load/): Finding and reducing load.
- [Disk full](https://docs.turbostack.app/troubleshooting/disk-space/): Reclaiming disk space safely.
- [Database problems](https://docs.turbostack.app/troubleshooting/database-issues/): Connections, slow queries, service won't start.
- [TLS certificate problems](https://docs.turbostack.app/troubleshooting/tls-certificate-issues/): Issuance, renewal and browser warnings.
- [Mail deliverability](https://docs.turbostack.app/technologies/mail/deliverability/): SPF/DKIM/DMARC and spam.

## Trust and security

- [Trust and security overview](https://docs.turbostack.app/trust/): How TurboStack keeps hosting secure and managed; shared responsibility.
- [How we protect your platform](https://docs.turbostack.app/trust/how-we-protect-you/): Hardening, automatic updates, firewall, TurboShield, TurboRadar.
- [DDoS and abuse protection](https://docs.turbostack.app/trust/ddos-and-abuse-protection/): Rate limiting, bot mitigation, reputation-based blocking.
- [Backups and recovery](https://docs.turbostack.app/trust/backups-and-recovery/): Automatic backups and restore.
- [Access control and encryption](https://docs.turbostack.app/trust/access-and-encryption/): Key-based SSH and TLS in transit.
- [Reporting a security issue](https://docs.turbostack.app/trust/responsible-disclosure/): How to report a vulnerability.

## Account and API

- [Profile and preferences](https://docs.turbostack.app/account/profile-and-preferences/): Account settings and editor preference.
- [API tokens](https://docs.turbostack.app/account/api-tokens/): Personal access tokens.
- [Two-factor authentication](https://docs.turbostack.app/account/two-factor-authentication/): Secure your account.
- [API reference](https://docs.turbostack.app/api/reference/): Manage clients, groups and hosts programmatically.
- [Documentation MCP server](https://docs.turbostack.app/api/mcp/): Model Context Protocol endpoint at https://docs.turbostack.app/mcp - connect Claude, ChatGPT, Gemini or Cursor to these docs. Read-only, no account needed.
- [TurboStack CLI](https://docs.turbostack.app/api/cli/): The `tscli` command-line tool on every server — reload Nginx/Varnish, clear Redis/Varnish/OPcache, manage the firewall, and run Blackfire profiling over SSH.

## YAML configuration reference

- [YAML configuration reference](https://docs.turbostack.app/reference/yaml/): Every YAML key of a host configuration, what it does and why, grouped by area. Start here to write or review a host configuration.
- [Configuration recipes](https://docs.turbostack.app/reference/yaml/recipes/): Complete, copy-ready host configurations for common scenarios - simple site, online store, Odoo, Node.js app, multiple apps, split app/database - plus the dependency rules between keys.
- [Application parameters](https://docs.turbostack.app/reference/yaml/applications/): Keys set per application (vhost) - domain, certificate, runtime, proxying, PHP tuning.
- [Host service parameters](https://docs.turbostack.app/reference/yaml/host-services/): Keys set once per host - web server, databases, caching, queues, search.
- [Users and access parameters](https://docs.turbostack.app/reference/yaml/users-and-access/): System users, file transfer accounts, extra database users, SSH access.
- [Security parameters](https://docs.turbostack.app/reference/yaml/security/): TurboShield and firewall keys - protection level, bot lists, trusted addresses, country rules, ports.
- [All parameters, machine-readable](https://docs.turbostack.app/yaml-parameters.txt): The same reference as one flat file, one block per parameter, for ingestion.
- [Pre-chunked docs (JSONL)](https://docs.turbostack.app/rag-chunks.jsonl): Every documentation page split into heading-scoped chunks, one JSON object per line ({id, url, title, heading, text}) - ready to load straight into a retrieval index.

## FAQ

- [Frequently asked questions](https://docs.turbostack.app/faq/): Quick answers to common questions - applications (you are not limited to the listed apps), technologies, performance, HTTPS, email, security, backups and support - each linking to the relevant page.