PanelDOCSv1.0.0

After installation

Your sign-in addresses, the first steps to do once on a new server, and the files worth knowing.

The server is ready to use as soon as the installer prints its summary. Work through this page once, then create your first customers.

Your addresses

Service Address Who uses it
Server Admin https://srv.yourdomain.com:8443 administrators and staff
Control Panel https://cp.yourdomain.com:8443 hosting customers
Reseller Panel https://rs.yourdomain.com:8443 resellers
Files https://fm.yourdomain.com customers' website files
DB Studio https://dbs.yourdomain.com customers' databases
HF Cloud https://cld.yourdomain.com administrators (hosts, plans, every VPS) and customers (their VPSs)
HF Deploy https://dep.yourdomain.com administrators (settings, every service) and customers (their apps)
Mail https://mail.yourdomain.com mailboxes
API https://api.yourdomain.com/v1 billing systems, scripts and the desktop app (a browser gets 403)
Mail apps incoming imap.yourdomain.com (IMAP 993, POP3 995), outgoing smtp.yourdomain.com (587 STARTTLS, 465 SSL) mailboxes
FTP / SFTP ftp.yourdomain.com (port 21 with TLS) / port 22 customers

The panels open with the port (:8443) only. The same names without the port send visitors to your website. Each panel has its own sign-in: a customer who opens the Server Admin address is told where to go instead.

The same addresses are in the "server is ready" email sent to the administrator's address. It may land in spam until SPF, DKIM and the reverse DNS are set.

First steps

  1. Sign in to Server Admin at https://srv.yourdomain.com:8443 with the admin login you created.
  2. Add the DNS records still missing. The summary listed them; hf-agent dns-setup --check shows them again. Names that point at the server join the SSL certificate by themselves within 5 minutes. You don't need to run anything again. See DNS setup.
  3. Set the reverse DNS (PTR) of the server's IP to mail.yourdomain.com at your server provider.
  4. Open Server Admin › Server › Server health and fix anything shown in yellow or red: certificate, DNS, PTR, firewall, disk, services. Many items have a one-click fix.
  5. Check Server Admin › Email › Mail health. SPF, DKIM and DMARC should be green before you send mail to customers.
  6. Switch on two-factor login for your own login: your username at the top right › Password & security.
  7. Look at the admin mailbox admin@yourdomain.com in Mail: sign in at https://mail.yourdomain.com with the full address and the password from /root/hostfog-mailboxes.txt, or click Mail next to it under Server Admin › Email › Server mailboxes. The role addresses postmaster@, abuse@, hostmaster@, webmaster@, dmarc@, tls@ and security@ forward to the administrator's email; that screen shows them, and Server Admin › System › Settings sets where they go.
  8. Set up backups under Server Admin › System › Backups and Backup storage: how often, how many to keep, and a copy on another server or in cloud storage.
  9. Check your licence under Server Admin › Billing › Licence. See Licensing.
  10. Create your first package and hosting account. See the Quick start.

Tip: take a snapshot of the server at your provider once it is set up. It is the "known good" state you can go back to.

Check the server from the command line

bash
hf-agent health              # services, configuration, disk, memory, SSL, clock, mail queue
hf-agent dns-setup --check   # the DNS records, as public DNS sees them
hf-agent portals             # each panel's address, DNS and SSL

Files worth knowing

File What it holds
/var/log/hostfog-install.log everything the installer ran
/root/hostfog-mailboxes.txt the passwords of the mailboxes the installer made (root only)
/etc/hostfog/dns-setup.zone the server domain's DNS records, ready to import at a DNS provider
/etc/hostfog/config.json the panel's settings
/etc/hostfog/VERSION the installed HF Panel version

More in Server layout.

Locked out?

On the server, as root:

bash
hf-agent reset-password <username>   # a new panel password
hf-agent reset-2fa <username>        # switch off two-factor login (lost phone)