Architecture

Understanding how Minepanel works under the hood.

Overview

Minepanel is a web-based Minecraft server management panel built with modern technologies. It uses a microservices architecture where each component is containerized and communicates through well-defined interfaces.

Minepanel

Components

1. Frontend (Next.js)

Technology Stack:

Next.js 14 - React framework
React 18 - UI library
TypeScript - Type safety
TailwindCSS - Styling
shadcn/ui - UI components
React Query - Data fetching

Responsibilities:

Render the web interface
Handle user interactions
Manage application state
Make API calls to backend
Display real-time data
Route management

Key Features:

Server-side rendering (SSR) for fast initial load
Static generation for optimal performance
Client-side routing for smooth navigation
Real-time updates without page refresh
Responsive design for all devices

Directory Structure:

frontend/
├── src/
│   ├── app/              # Next.js 14 App Router
│   │   ├── page.tsx      # Home page
│   │   ├── layout.tsx    # Root layout
│   │   └── dashboard/    # Dashboard pages
│   ├── components/       # React components
│   │   ├── ui/           # Base UI components
│   │   ├── molecules/    # Composite components
│   │   └── organisms/    # Complex components
│   ├── lib/              # Utilities
│   │   ├── hooks/        # Custom React hooks
│   │   ├── translations/ # i18n files
│   │   └── types/        # TypeScript types
│   └── services/         # API clients
└── public/               # Static assets

2. Backend (NestJS)

Technology Stack:

NestJS - Node.js framework
TypeScript - Type safety
Dockerode - Docker API client
bcrypt - Password hashing
Passport.js - Authentication

Responsibilities:

Expose REST API
Authenticate users
Manage Docker containers
Execute server commands
Monitor resources
Handle file operations
Manage server lifecycle

Key Features:

RESTful API design
JWT authentication
Docker integration via socket
Real-time log streaming
Error handling and validation
Type-safe with TypeScript

Directory Structure:

backend/
├── src/
│   ├── main.ts                    # Application entry point
│   ├── app.module.ts              # Root module
│   ├── auth/                      # Authentication module
│   │   ├── auth.controller.ts
│   │   ├── auth.service.ts
│   │   ├── jwt.strategy.ts
│   │   └── local.strategy.ts
│   ├── server-management/         # Server management module
│   │   ├── server-management.controller.ts
│   │   ├── server-management.service.ts
│   │   └── dto/
│   │       └── server-config.model.ts
│   └── docker-compose/            # Docker Compose integration
│       ├── docker-compose.service.ts
│       └── docker-compose.service.spec.ts
└── test/                          # Tests

API Endpoints:

typescript

// Authentication
POST   /auth/login          # Login
POST   /auth/logout         # Logout
GET    /auth/profile        # Get current user

// Servers
GET    /servers             # List all servers
POST   /servers             # Create new server
GET    /servers/:id         # Get server details
PUT    /servers/:id         # Update server
DELETE /servers/:id         # Delete server

// Server Control
POST   /servers/:id/start   # Start server
POST   /servers/:id/stop    # Stop server
POST   /servers/:id/restart # Restart server

// Server Data
GET    /servers/:id/logs    # Stream logs
POST   /servers/:id/command # Execute command
GET    /servers/:id/stats   # Get resource stats
GET    /servers/:id/players # Get online players

3. Filebrowser

Technology:

Filebrowser - File management

Responsibilities:

Browse server files
Edit configuration files
Upload/download files
Manage permissions
View file contents

Integration:

Runs as separate container
Accessed via iframe in frontend
Independent authentication
Direct file system access

4. Docker Engine

Role:

Container runtime
Resource isolation
Network management
Volume management

Docker Socket: Minepanel communicates with Docker via /var/run/docker.sock:

yaml

volumes:
  - /var/run/docker.sock:/var/run/docker.sock

This allows Minepanel to:

Create containers
Start/stop containers
Monitor containers
Read logs
Execute commands
Manage networks/volumes

Data Flow

Creating a Server

User                Frontend              Backend              Docker
  │                    │                     │                   │
  │  Fill form         │                     │                   │
  ├──────────────────→ │                     │                   │
  │                    │  POST /servers      │                   │
  │                    ├────────────────────→│                   │
  │                    │                     │  Validate input   │
  │                    │                     │  Create config    │
  │                    │                     │  Build compose    │
  │                    │                     │  docker compose   │
  │                    │                     ├──────────────────→│
  │                    │                     │                   │ Pull image
  │                    │                     │                   │ Create container
  │                    │                     │                   │ Start container
  │                    │                     │◄──────────────────┤
  │                    │◄────────────────────┤                   │
  │◄─────────────────────                    │                   │
  │  Server created!   │                     │                   │

Viewing Logs

User                Frontend              Backend              Docker
  │                    │                     │                   │
  │  View logs         │                     │                   │
  ├──────────────────→ │                     │                   │
  │                    │  GET /logs          │                   │
  │                    ├────────────────────→│                   │
  │                    │                     │  docker logs -f   │
  │                    │                     ├──────────────────→│
  │                    │                     │◄──────────────────┤
  │                    │  WebSocket stream   │  Stream logs      │
  │                    │◄────────────────────┤                   │
  │◄──────────────────────                   │                   │
  │  Real-time logs    │                     │                   │

Server Container Structure

Each Minecraft server runs in its own Docker container using itzg/docker-minecraft-server.

Container Configuration

Example docker-compose.yml for a server:

yaml

services:
  my-server:
    image: itzg/minecraft-server:latest
    container_name: minepanel-my-server
    environment:
      EULA: "TRUE"
      TYPE: "PAPER"
      VERSION: "1.20.1"
      MEMORY: "2G"
      MAX_PLAYERS: "20"
      DIFFICULTY: "normal"
      MODE: "survival"
      PVP: "true"
      ONLINE_MODE: "true"
    ports:
      - "25565:25565"
    volumes:
      - ./servers/my-server:/data
    labels:
      - "minepanel.server=true"
      - "minepanel.name=my-server"
      - "minepanel.type=PAPER"
      - "minepanel.version=1.20.1"
    restart: unless-stopped

Volume Mapping

Host                          Container
├── servers/
│   ├── my-server/           → /data
│   │   ├── world/              World files
│   │   ├── plugins/            Plugins (Paper/Spigot)
│   │   ├── mods/               Mods (Forge/Fabric)
│   │   ├── server.properties   Config
│   │   ├── ops.json            Operators
│   │   └── logs/               Server logs
│   └── another-server/

Labels

Minepanel uses Docker labels to track servers:

yaml

labels:
  minepanel.server: "true" # Identifies as managed server
  minepanel.name: "my-server" # Server identifier
  minepanel.type: "PAPER" # Server type
  minepanel.version: "1.20.1" # Minecraft version
  minepanel.created: "2024-10-24" # Creation date

Security Architecture

Authentication Flow

User → Frontend → Backend
                    ↓
              [Validate credentials]
                    ↓
            [Generate JWT token]
                    ↓
              [Return token]
                    ↓
        [Store in httpOnly cookie]

Security Measures:

Passwords hashed with bcrypt (12 rounds)
JWT tokens for stateless authentication
httpOnly cookies prevent XSS
CORS protection
Input validation and sanitization

Docker Socket Access

Risk: Direct access to Docker socket = root access

Mitigation:

Minepanel container runs with minimal permissions
Only necessary Docker operations allowed
Can use Docker Socket Proxy for additional security
Audit logs for all Docker operations

Optional: Docker Socket Proxy

yaml

services:
  socket-proxy:
    image: tecnativa/docker-socket-proxy
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
    environment:
      CONTAINERS: 1
      IMAGES: 1
      NETWORKS: 1
      VOLUMES: 1
    restart: always

  minepanel:
    environment:
      DOCKER_HOST: tcp://socket-proxy:2375

Network Isolation

┌─────────────────────────────────────┐
│        Docker Network: bridge        │
│                                      │
│  ┌──────────┐    ┌──────────┐      │
│  │ Minepanel│←──→│Filebrowser│      │
│  └──────────┘    └──────────┘      │
│                                      │
│  ┌──────────┐    ┌──────────┐      │
│  │Server 1  │    │Server 2  │      │
│  │(isolated)│    │(isolated)│      │
│  └──────────┘    └──────────┘      │
└─────────────────────────────────────┘

Each server runs in isolation:

Cannot access other servers
Limited network access
Resource limits enforced
Own filesystem namespace

Storage Architecture

Directory Structure

minepanel/
├── docker-compose.yml          # Main compose file
├── .env                        # Environment variables
├── servers/                    # All server data
│   ├── server-1/
│   │   ├── world/              # World save
│   │   ├── world_nether/
│   │   ├── world_the_end/
│   │   ├── plugins/            # Plugins (if applicable)
│   │   ├── mods/               # Mods (if applicable)
│   │   ├── config/             # Plugin/mod configs
│   │   ├── logs/               # Server logs
│   │   ├── server.properties
│   │   ├── server.jar
│   │   └── ...
│   ├── server-2/
│   └── backups/                # Backup storage
│       ├── server-1/
│       └── server-2/
└── filebrowser-data/           # Filebrowser config
    └── filebrowser.db

Volume Strategy

Bind Mounts: Used for server data to allow easy access from host:

yaml

volumes:
  - ./servers/my-server:/data

Benefits:

Direct access from host filesystem
Easy backups
Simple file transfers
Debug and inspect files

Named Volumes: Could be used for better isolation (future option):

yaml

volumes:
  my-server-data:

services:
  my-server:
    volumes:
      - my-server-data:/data

Scaling Considerations

Vertical Scaling

Increase resources for existing servers:

Allocate more RAM
Add more CPU cores
Upgrade disk to SSD
Optimize JVM parameters

Horizontal Scaling

Run more servers:

Add more server containers
Use different ports (25565, 25566, 25567...)
Share resources efficiently
Consider network proxies (BungeeCord, Velocity)

Multi-Node Setup

Split services across machines (advanced):

Machine 1: Minepanel + Filebrowser
    ↓
Machine 2: Docker Engine → Minecraft Servers

Use Docker's remote API:

yaml

environment:
  DOCKER_HOST: tcp://192.168.1.100:2376

Performance Optimizations

Backend Optimizations

Caching
- Cache server list
- Cache resource stats
- Redis for distributed cache (future)
Connection Pooling
- Reuse Docker API connections
- Keep-alive for HTTP requests
Async Operations
- Non-blocking I/O
- Parallel container operations
- Background tasks for heavy operations

Frontend Optimizations

Code Splitting
- Lazy load routes
- Dynamic imports for heavy components
Data Fetching
- React Query for caching
- Prefetch data on hover
- Stale-while-revalidate strategy
Static Generation
- Pre-render static pages
- ISR for dynamic content

Docker Optimizations

Image Caching
- Keep frequently used images
- Pre-pull common versions
Resource Limits
- Prevent resource exhaustion
- Fair resource allocation
Network Optimization
- Custom bridge networks
- DNS caching

Monitoring & Observability

Logs

Minepanel Logs:

bash

docker compose logs -f minepanel

Individual Server Logs:

bash

docker logs -f minepanel-my-server

Metrics

Container Stats:

bash

docker stats

Resource Usage:

CPU percentage
Memory usage / limit
Network I/O
Block I/O

Health Checks

Docker health checks monitor container status:

yaml

healthcheck:
  test: ["CMD", "curl", "-f", "http://localhost:3000"]
  interval: 30s
  timeout: 10s
  retries: 3
  start_period: 40s

Future Enhancements

Planned Architecture Improvements

Microservices Split
- Separate auth service
- Dedicated metrics service
- Queue for async operations
Database Integration
- PostgreSQL for persistent data
- Store server configs
- User management
- Audit logs
Message Queue
- RabbitMQ or Redis
- Async task processing
- Event-driven architecture
Orchestration
- Kubernetes support
- Docker Swarm mode
- Auto-scaling
Observability
- Prometheus metrics
- Grafana dashboards
- Loki for log aggregation
- Jaeger for tracing

Technology Choices

Why Next.js?

✅ Server-side rendering for better SEO
✅ File-based routing
✅ API routes (not used, but available)
✅ Great developer experience
✅ Built-in optimizations

Why NestJS?

✅ TypeScript native
✅ Modular architecture
✅ Dependency injection
✅ Similar to Angular (familiar patterns)
✅ Extensive ecosystem

Why Docker?

✅ Isolation and security
✅ Consistent environments
✅ Easy deployment
✅ Resource control
✅ Portability

Why itzg/minecraft-server?

✅ Most popular MC Docker image
✅ Supports all server types
✅ Well-maintained
✅ Extensive documentation
✅ Active community

Next Steps

🛠️ Development Guide - Contribute to the project
⚙️ Configuration - Customize your setup
📖 Features - Explore what's possible

Architecture ​

Overview ​

Components ​

1. Frontend (Next.js) ​

2. Backend (NestJS) ​

3. Filebrowser ​

4. Docker Engine ​

Data Flow ​

Creating a Server ​

Viewing Logs ​

Server Container Structure ​

Container Configuration ​

Volume Mapping ​

Labels ​

Security Architecture ​

Authentication Flow ​

Docker Socket Access ​

Network Isolation ​

Storage Architecture ​

Directory Structure ​

Volume Strategy ​

Scaling Considerations ​

Vertical Scaling ​

Horizontal Scaling ​

Multi-Node Setup ​

Performance Optimizations ​

Backend Optimizations ​

Frontend Optimizations ​

Docker Optimizations ​

Monitoring & Observability ​

Logs ​

Metrics ​

Health Checks ​

Future Enhancements ​

Planned Architecture Improvements ​

Technology Choices ​

Why Next.js? ​

Why NestJS? ​

Why Docker? ​

Why itzg/minecraft-server? ​

Next Steps ​

Architecture

Overview

Components

1. Frontend (Next.js)

2. Backend (NestJS)

3. Filebrowser

4. Docker Engine

Data Flow

Creating a Server

Viewing Logs

Server Container Structure

Container Configuration

Volume Mapping

Labels

Security Architecture

Authentication Flow

Docker Socket Access

Network Isolation

Storage Architecture

Directory Structure

Volume Strategy

Scaling Considerations

Vertical Scaling

Horizontal Scaling

Multi-Node Setup

Performance Optimizations

Backend Optimizations

Frontend Optimizations

Docker Optimizations

Monitoring & Observability

Logs

Metrics

Health Checks

Future Enhancements

Planned Architecture Improvements

Technology Choices

Why Next.js?

Why NestJS?

Why Docker?

Why itzg/minecraft-server?

Next Steps