# Cockpit Quick Reference Guide

## Overview
All Firefrost Gaming servers now have Cockpit web terminal installed. Access any server from your Chromebook without SSH client.

**Login credentials:** root / Butter2018!! (all servers)

---

## Server Access URLs

### Management Tier (VPS)

**Command Center**
- URL: https://63.143.34.217:9090
- Login: root / Butter2018!!
- Services: Gitea, Uptime Kuma, Code-Server, Automation
- Resources: 3.8GB RAM, 2 CPUs
- Status: ✅ Operational

**Ghost VPS**
- URL: https://64.50.188.14:9090
- Login: architect / Butter2018!!
- Services: Ghost CMS, Wiki.js (3 instances), Nextcloud
- Resources: Unknown (check via Cockpit)
- Status: ✅ Operational

**Billing VPS**
- URL: https://38.68.14.188:9090
- Login: root / Butter2018!!
- Services: Paymenter, Mailcow
- Resources: High memory usage (64%) due to Mailcow
- Status: ✅ Operational

**Panel VPS**
- URL: https://45.94.168.138:9090
- Login: root / Butter2018!!
- Services: Pterodactyl Panel
- Resources: 29% memory, low load
- Status: ✅ Operational

### Dedicated Tier (Game Servers)

**TX1 Dallas**
- URL: https://38.68.14.26:9090
- Login: root / Butter2018!!
- Services: Pterodactyl Wings, 7 game servers
- Resources: 251GB RAM (15% usage), 910GB disk (10.8% usage)
- Temperature: 30.9°C (excellent)
- IP Range: 38.68.14.26-30
- Status: ✅ Operational

**NC1 Charlotte**
- URL: https://216.239.104.130:9090
- Login: root / Butter2018!!
- Services: Pterodactyl Wings, 7 game servers
- Resources: 251GB RAM (12% usage), 97GB disk (59.8% usage)
- Temperature: 51.6°C (monitor weekly)
- Firewall: ✅ Enabled (March 21, 2026)
- Status: ✅ Operational

---

## Common Cockpit Tasks

### Terminal Access
1. Login to server's Cockpit URL
2. Click "Terminal" in left sidebar
3. Full root shell access via browser

### Service Management
1. Click "Services" in left sidebar
2. View all systemd services
3. Start/stop/restart services
4. View service logs

### Resource Monitoring
1. Click "System" (default view)
2. View CPU, memory, disk usage
3. Monitor temperature (dedicated servers)
4. Track network traffic

### View Logs
1. Click "Logs" in left sidebar
2. Filter by service, severity, time
3. Search log entries
4. Export logs if needed

---

## Security Notes

**Self-Signed Certificates**
- All Cockpit instances use self-signed SSL certificates
- Browser will show security warning - this is expected
- Click "Advanced" → "Proceed" to access

**Firewall Status**
- ✅ Command Center: UFW active, port 9090 allowed
- ✅ Ghost VPS: UFW active (assumed), port 9090 working
- ⚠️ Billing VPS: No UFW (iptables rules present)
- ✅ Panel VPS: UFW active, port 9090 allowed
- ✅ TX1 Dallas: UFW active, port 9090 allowed
- ✅ NC1 Charlotte: UFW active, port 9090 allowed (enabled March 21, 2026)

**Root Access**
- Root login enabled on all servers for Cockpit
- Default Ubuntu config disallows root in Cockpit
- We removed root from `/etc/cockpit/disallowed-users` on all servers

---

## Troubleshooting

### Can't Access Cockpit
1. Verify server is online (ping the IP)
2. Check firewall allows port 9090: `ufw status | grep 9090`
3. Check Cockpit is running: `systemctl status cockpit.socket`
4. Restart Cockpit: `systemctl restart cockpit.socket`

### Login Failed
1. Verify username is `root` (or `architect` for Ghost VPS)
2. Verify password is `Butter2018!!`
3. Check if root is allowed: `cat /etc/cockpit/disallowed-users`
4. If root is listed, remove it: `echo "# List of users which are not allowed to login to Cockpit" > /etc/cockpit/disallowed-users`
5. Restart Cockpit: `systemctl restart cockpit.socket`

### Certificate Warning
- This is normal for self-signed certificates
- Click "Advanced" → "Proceed anyway" (exact wording varies by browser)
- Chrome: "Proceed to [IP] (unsafe)"
- Firefox: "Accept the Risk and Continue"
- Edge: "Continue to [IP] (not recommended)"

---

## Deployment History

**March 21, 2026 - Session 37 (The Chronicler)**
- Deployed Cockpit to 5 servers (Ghost VPS already had it)
- Enabled UFW firewall on NC1 Charlotte (was previously unprotected)
- Standardized root password across all servers
- Created NC1 temperature monitoring task
- Total deployment time: ~1.5 hours

**Servers Deployed:**
1. Command Center (63.143.34.217)
2. Billing VPS (38.68.14.188)
3. Panel VPS (45.94.168.138)
4. TX1 Dallas (38.68.14.26)
5. NC1 Charlotte (216.239.104.130)

**Pre-existing:**
- Ghost VPS (64.50.188.14) - Already operational

---

## Related Documentation

- `docs/tasks/cockpit-deployment/` - Full deployment documentation
- `docs/tasks/nc1-security-monitoring/` - NC1 firewall and temperature monitoring
- `docs/core/infrastructure-manifest.md` - Complete server inventory

---

**Created:** March 21, 2026  
**Last Updated:** March 21, 2026  
**Maintained By:** The Chronicler

**Fire + Frost + Foundation = Where Love Builds Legacy** 💙🔥❄️