# RainServer features

Source: https://raincleaner.eu/rainserver/features/

### Real-time monitoring
CPU, memory, disk, inodes, network and processes on one screen, with the context behind a spike.
- CPU, load average and steal time
- RAM, swap, OOM kills and memory pressure
- Disk space, inode use, I/O wait
- Top processes by CPU, memory and I/O
- Pending updates and reboot-required flag
- 24-hour charts in the web dashboard

### Smart Safe Cleanup
See what is using your disk before you delete anything. Every item has a risk label and a preview.
- APT / DNF cache, old kernels, journal size
- Docker images, stopped containers, build cache
- Old snaps, crash dumps, rotated logs
- SAFE / REVIEW / DANGER / MANUAL ONLY on every item
- Exact paths and the command before anything runs
- Never touches /home, database dirs, named volumes or keys

### Fix My Server
It reads the journal, the service state and recent changes, then tells you what it thinks happened and what it can do about it.
- Detect → Explain → Suggest → Preview → Confirm → Execute → Record
- 16 fixed, tested handlers — no shell commands made up on the spot
- Shows risk and rollback for every suggestion
- Checks the result afterwards and says if the fix did not help
- Manual-only fixes show the exact steps instead of running them

### Security checks
A configuration check for the places where things usually go wrong: SSH, firewall, updates, open ports.
- Root login and password auth over SSH
- UFW / firewalld / nftables state, fail2ban jails
- Listening ports and the process behind each one
- Pending security updates, unattended-upgrades
- Docker ports published to the internet
- Repeated failed logins, new privileged users

### Docker & containers
Containers, images and volumes grouped by Compose project, with restart loops and exposed ports called out.
- Status, health check and restart count
- Image age and unused layers
- Prune preview with the space you would get back
- Volumes listed, never removed by default
- Per-container CPU and memory, one-click restart

### systemd & services
Failed units, restart loops and broken timers, with the dependency chain so you know what else is affected.
- Unit state and recent restarts
- nginx / Apache config test before any reload
- MySQL, MariaDB, PostgreSQL, Redis, PHP-FPM health
- cron and systemd timer failures
- Critical services can be set to manual approval only

### Network diagnostics
DNS, gateway, packet loss and which service listens on which port — the first five minutes of any network problem, done for you.
- Resolver reachability and latency
- Gateway and internet reachability
- Listening ports mapped to processes
- Clock sync (NTP) state
- Let’s Encrypt certificate expiry

### Backup monitoring
RainServer does not make backups. It tells you when yours stopped working.
- Age of the newest backup file
- Size and destination free space
- Any directory or glob: restic, borg, mysqldump, tar
- Failed backup timers

### Alerts
Email, Telegram, WhatsApp, Discord and webhooks. An alert says what happened and where to look, not just “CPU high”.
- An alert opens only when a problem is seen twice in a row
- Closes on its own when the problem clears
- Daily report at the hour you choose, on every channel
- Acknowledge, maintenance windows and mute
- Escalation after 30 minutes on Business and up

### Automation
Schedules and policies for the boring, safe jobs. Anything risky still waits for a person.
- Maintenance windows
- Run SAFE cleanup on a schedule
- Restart a known non-critical unit once
- Security-only updates, never an automatic reboot
- Approval levels from observe-only to scheduled execution

### Multi-server dashboard
All your servers in one web view: what is down, what is degraded, what needs a decision.
- Online / degraded / offline at a glance
- Groups and tags: production, staging, client
- Bulk actions: scan, SAFE cleanup, security updates
- Per-server detail and action history
- Teams with roles and a REST API on Business and Agency