VPN Resellers

Sell VPN accounts that provision themselves, and let clients pick a server, download their config, and change their password without ever opening a ticket.

What it does

Selling VPN access usually means a support ticket for every new account, every server change, and every forgotten password. The VPN Resellers module connects Blesta to your VPN Resellers reseller panel so a paid order creates the account automatically, and your clients get their own area to pick a server, grab their configuration file, and change their password on their own.

Key features

• Automatic Account Provisioning: A paid order creates the VPN account instantly with a unique username and a strong generated password. Suspension disables the account, reactivation re-enables it, and cancellation removes it.
• Server Picker Grouped by Country: Clients choose their VPN location from a picker grouped by country, with each server's city and current capacity shown.
• Port and Protocol Choice: Clients pick the port and protocol their connection uses alongside the server, defaulting to the recommended one.
• One-Click Configuration Download: The generated OpenVPN configuration is previewed on screen and downloaded as a ready-to-import file for the exact server and port chosen.
• Client Password Changes: Clients set their own VPN password from their service page, with the new password pushed to the panel and stored immediately.
• Staff Password Rotation: Support can see the account's current password and generate and push a new one with a single click.
• Status Drift Detection: A background check compares every account's real state on the VPN panel with its status in Blesta and records any mismatch.
• Named Reseller Accounts: Give each reseller account a name so multiple accounts are easy to tell apart, while the API token itself is stored encrypted and never displayed.
• Built-In Demo Mode: A built-in mock mode runs the whole module from bundled sample data, so you can trial every screen and action before you have an account or API key.
• Ready-Made Welcome Email: A welcome email template ships with the module and loads onto any package in one click.

For more information about VPN Resellers, visit vpnresellers.com.

Installing VPN Resellers

Before you start

• Blesta 6.0 or newer is required. Version 3.x of this module targets the Blesta 6 admin theme and is not supported on Blesta 5.
• If you are on the leased (subscription) licence, the Blesta Club Subscription Manager must be installed and your subscription active. The owned and owned-source licences have no such requirement.

1. Upload the files

Upload the extension folder into your Blesta installation so it lands under your Blesta directory at:

components/modules/vpn_resellers/

For example, on a typical install: /var/www/html/blesta/components/modules/vpn_resellers/

2. Install it in Blesta

1. Log in to your Blesta admin area with a staff account that has the Modules permission (under Settings in Manage Staff Groups).
2. Go to Settings > Company > Modules and click the Available tab.
3. Find VPN Resellers in the list and click Install.

3. Configure it

1. From Settings > Company > Modules, click Manage next to VPN Resellers, then Add Server.
2. Give the row a Name (this is the label shown throughout Blesta) and paste the reseller API token from your VPN Resellers panel. The token is stored encrypted and is never shown again after saving.
3. Tick Mock API mode to run the module from bundled sample data with no live credentials, for evaluation and demonstrations. Leave it unticked for a live reseller account.
4. Save the row. There is nothing else to configure: the module registers its own background status check on Blesta's cron automatically.

You're ready to go - see the usage guide for a walkthrough of day-to-day use.

Updating VPN Resellers

Upgrading works just like installing: upload the new files over the old ones, then run the upgrade from the same page you installed it on.

1. Back up your current extension files first - good practice before any upgrade.
2. Upload the new version over the existing folder, replacing the old files.
3. Log in to your Blesta admin area and go to Settings > Company > Modules.
4. Find VPN Resellers and click Update to run the upgrade.

Version-specific notes

• v3.0.0: Requires Blesta 6.0 or later - upgrade Blesta first, then the module. Blesta 5 installs should stay on 2.x. Nothing changes in your servers, packages or services; the staff screens simply take on the Blesta 6 admin theme (light and dark mode), the server list's Edit and Delete links become buttons, and the Add/Edit Server forms gain a Back button.
• v2.0.0: Reseller rows are now identified by a Name instead of the API token. Existing rows are automatically given a placeholder name ("Server <id>") during the update - edit each row afterwards to give it a meaningful one. If any of your email templates used the {module.token} tag, replace it with {module.name}; the token is no longer available as an email tag. The API token is now stored encrypted - existing rows keep working with their current token, and are only re-written in encrypted form the next time you open and save that row (leaving the Token field blank on that edit keeps the stored token unchanged).

Using VPN Resellers

For your staff

Add a reseller account

Go to Settings > Company > Modules, click Manage next to VPN Resellers, then Add Server. Give the row a Name (shown everywhere Blesta lists it - never the token) and paste the reseller API token. Tick Mock API mode to demo the module with bundled sample data instead of a live account. Editing a row later leaves the Token field blank on purpose; leave it blank to keep the stored token, or paste a new one to replace it.

Sell a package

Create a package on the VPN Resellers module and pick the reseller row it should provision from. There are no module-specific options to set on the package: the panel creates an account from a username and password alone.

Add or manage a service

When adding a service to a client (or on a paid order), tick Provision using the VPN Resellers module when activated and set the service to Active to have Blesta generate the account immediately - a generated username and a strong password are created and pushed to the panel. The service's Manage page shows the account's ID, Username and Password fields; the password field is always left blank here even when editing, so it never shows the client's current password on screen.

Every client and staff profile that lists this service also shows a small table with the account's ID, Username, Password and current Status, so you can answer a quick question without opening the panel yourself.

Download Configuration (staff)

Open the service's Download Configuration tab. Pick a Server from the dropdown - servers are grouped by country and show each one's current capacity - then pick a Port / Protocol and click Select. The OpenVPN configuration is previewed in a read-only box with its filename shown above it, and a Download button saves the .ovpn file.

Password (staff)

Open the service's Password tab to see the account's Current Password and a Generate & Push New Password button. Clicking it creates a new password, pushes it to the panel, and updates the stored value in one step - handy while a client is still on the phone.

For your clients

Viewing the account

A client's Services list on their dashboard shows the same ID / Username / Password / Status table staff see, so they always have their current credentials to hand.

Download Configuration

From Manage Service > Download Configuration, a client picks their Server (grouped by country, with capacity shown) and Port / Protocol, clicks Select, and gets the same on-screen preview and Download button staff see - the finished file is a ready-to-import OpenVPN configuration.

Change Password

From Manage Service > Change Password, a client enters a New Password and Confirm New Password, then clicks Change Password. On success the page shows "The password has been updated." and the new password is already active on the panel.

Good to know

• A background check runs on Blesta's cron every 15 minutes, comparing every account's real status on the VPN panel with its status in Blesta, and logs any mismatch it finds. It only reports drift - it never changes a service's status for you.
• A service provisioned while a row was in Mock API mode is tagged as a demo account. If you later switch that row to a live token, Blesta refuses to suspend, cancel, or change the password on that demo service rather than risk sending the request to your real panel - re-provision it as a new service instead.
• The reseller API token is never used as a placeholder in email templates or shown in the module-row picker on package forms - only the row's Name is. This keeps the credential out of anything client-facing.