wtf is cloud-web-panel?

Cloud Web Panel is a management dashboard for deploying VLESS and Trojan VPN configurations onto Cloudflare Workers. It is built for people who cannot or do not want to use a specific Android app to get these configs, especially iPhone users. Each person logs in with their own Cloudflare account, deploys the panel they want onto that same account in a few clicks, and then pulls out their connection configs. Most users do not need to install or run anything themselves. A hosted version of the panel is already running at a public web address. A person creates an account with just an email and password, enters their Cloudflare Global API Key and account email from their own Cloudflare dashboard, and then deploys any of five supported sub-panels, called BPB, EDG, Nahan, MLM, and Zeus, with one click. Everything runs on the user's own Cloudflare account rather than a shared server. Configs can then be copied in bulk and imported into VPN apps like Shadowrocket, Streisand, V2Box, or v2rayNG using their Import from Clipboard option. The source code is published openly so anyone can verify exactly what happens on the server, particularly around a specific security claim. Every sensitive value the panel stores, including the Cloudflare API key, account email, and even the VPN config links themselves, is encrypted with a key derived from that individual user's own password, using PBKDF2 with SHA256 and a random per-user salt. This key exists only in memory during an active logged-in session and is never stored anywhere. As a result, a full database leak reveals nothing usable without each user's real password, there is no password reset feature since resetting would permanently destroy the old encryption key, and there is no automatic subscription URL, since decrypting configs is only possible inside an active logged-in session. For people who want to self-host the panel instead of using the public instance, it runs on plain PHP and MySQL with no build step, needing PHP 7.4 or newer with a few common extensions. Setup involves uploading the files, creating a database, and running an install script, after which the first registered account becomes the site administrator. The project also includes a tool that combines a config with a list of clean IP addresses, generating variants with the same SNI and host. It is released under the MIT license.