CLI Reference

# Install the full stack (Apache, PHP, MariaDB, Redis, ...)
litesoup stack install

# Install with an SSH key for the litesoup user (replaces root login)
litesoup stack install --ssh-key="ssh-ed25519 AAAA..."

# Update to the latest version
litesoup stack update

# Create a fresh site
litesoup site create --domain=example.com --tls=letsencrypt --email=admin@example.com

# Import an existing site (git repo + SQL dump)
litesoup site import --domain=example.com --git-repo=git@github.com:org/repo.git

# Delete a site and revoke its TLS cert
litesoup site delete --domain=example.com

# Switch PHP version
litesoup site set-php --domain=example.com --php=8.3

# Retune PHP-FPM pool size
litesoup site set-tier --domain=example.com --tier=medium

# Change TLS mode
litesoup site set-tls --domain=example.com --tls=letsencrypt --email=admin@example.com

# Set up Git webhook auto-deploy
litesoup site set-webhook --domain=example.com

# Back up a site locally
litesoup backup site --domain=example.com

# Back up and also upload to S3
litesoup backup site --domain=example.com --dest=s3

# Restore from a backup
litesoup backup restore --domain=example.com --date=2026-07-15_043000

# List available backups
litesoup backup list --domain=example.com

# Run staggered backups for ALL sites (60s delay between each)
sudo bash /usr/lib/litesoup/backup/backup-stagger.sh --delay=60 --timeout=300

# Configure S3 destinations and email notifications
litesoup backup configure --s3-key=AKIA... --s3-secret=... --s3-bucket=my-backups

# Schedule daily backups
sudo bash /usr/lib/litesoup/backup/backup-install.sh --domain=example.com --schedule=daily

# Create a client user with SSH + SFTP access and a site
litesoup user create \
  --name=client1 \
  --ssh-key="ssh-ed25519 AAAA..." \
  --domain=client1.com \
  --tls=letsencrypt --email=admin@example.com

# Create a user with SFTP only (no site)
litesoup user create --name=client1 --ssh-key="ssh-ed25519 AAAA..." --no-site

# List all managed users
litesoup user list

# Quick server health dashboard (single line)
litesoup status

# With traffic info
litesoup status --verbose

# Watch mode (refresh every 2s)
litesoup status --watch=2

# ASCII mode (for headless/CI)
litesoup status --ascii

litesoup harden firewall
litesoup harden fail2ban
litesoup harden ssh
litesoup harden apache
litesoup harden php
litesoup harden upgrades

litesoup audit system
litesoup audit performance
litesoup audit wp-health --domain=example.com
litesoup audit wp-vulnerabilities --domain=example.com