firefrost-operations-manual/docs/reference/cockpit-quick-reference.md

Cockpit Quick Reference Guide

Overview

All Firefrost Gaming servers now have Cockpit web terminal installed. Access any server from your Chromebook without SSH client.

Login credentials: root / Butter2018!! (all servers)

---

Server Access URLs

Management Tier (VPS)

Command Center

• URL: https://63.143.34.217:9090
• Login: root / Butter2018!!
• Services: Gitea, Uptime Kuma, Code-Server, Automation
• Resources: 3.8GB RAM, 2 CPUs
• Status: ✅ Operational

Ghost VPS

• URL: https://64.50.188.14:9090
• Login: architect / Butter2018!!
• Services: Ghost CMS, Wiki.js (3 instances), Nextcloud
• Resources: Unknown (check via Cockpit)
• Status: ✅ Operational

Billing VPS

• URL: https://38.68.14.188:9090
• Login: root / Butter2018!!
• Services: Paymenter, Mailcow
• Resources: High memory usage (64%) due to Mailcow
• Status: ✅ Operational

Panel VPS

• URL: https://45.94.168.138:9090
• Login: root / Butter2018!!
• Services: Pterodactyl Panel
• Resources: 29% memory, low load
• Status: ✅ Operational

Dedicated Tier (Game Servers)

TX1 Dallas

• URL: https://38.68.14.26:9090
• Login: root / Butter2018!!
• Services: Pterodactyl Wings, 7 game servers
• Resources: 251GB RAM (15% usage), 910GB disk (10.8% usage)
• Temperature: 30.9°C (excellent)
• IP Range: 38.68.14.26-30
• Status: ✅ Operational

NC1 Charlotte

• URL: https://216.239.104.130:9090
• Login: root / Butter2018!!
• Services: Pterodactyl Wings, 7 game servers
• Resources: 251GB RAM (12% usage), 97GB disk (59.8% usage)
• Temperature: 51.6°C (monitor weekly)
• Firewall: ✅ Enabled (March 21, 2026)
• Status: ✅ Operational

---

Common Cockpit Tasks

Terminal Access

1. Login to server's Cockpit URL
2. Click "Terminal" in left sidebar
3. Full root shell access via browser

Service Management

1. Click "Services" in left sidebar
2. View all systemd services
3. Start/stop/restart services
4. View service logs

Resource Monitoring

1. Click "System" (default view)
2. View CPU, memory, disk usage
3. Monitor temperature (dedicated servers)
4. Track network traffic

View Logs

1. Click "Logs" in left sidebar
2. Filter by service, severity, time
3. Search log entries
4. Export logs if needed

---

Security Notes

Self-Signed Certificates

• All Cockpit instances use self-signed SSL certificates
• Browser will show security warning - this is expected
• Click "Advanced" → "Proceed" to access

Firewall Status

• ✅ Command Center: UFW active, port 9090 allowed
• ✅ Ghost VPS: UFW active (assumed), port 9090 working
• ⚠️ Billing VPS: No UFW (iptables rules present)
• ✅ Panel VPS: UFW active, port 9090 allowed
• ✅ TX1 Dallas: UFW active, port 9090 allowed
• ✅ NC1 Charlotte: UFW active, port 9090 allowed (enabled March 21, 2026)

Root Access

• Root login enabled on all servers for Cockpit
• Default Ubuntu config disallows root in Cockpit
• We removed root from /etc/cockpit/disallowed-users on all servers

---

Troubleshooting

Can't Access Cockpit

1. Verify server is online (ping the IP)
2. Check firewall allows port 9090: ufw status | grep 9090
3. Check Cockpit is running: systemctl status cockpit.socket
4. Restart Cockpit: systemctl restart cockpit.socket

Login Failed

1. Verify username is root (or architect for Ghost VPS)
2. Verify password is Butter2018!!
3. Check if root is allowed: cat /etc/cockpit/disallowed-users
4. If root is listed, remove it: echo "# List of users which are not allowed to login to Cockpit" > /etc/cockpit/disallowed-users
5. Restart Cockpit: systemctl restart cockpit.socket

Certificate Warning

• This is normal for self-signed certificates
• Click "Advanced" → "Proceed anyway" (exact wording varies by browser)
• Chrome: "Proceed to [IP] (unsafe)"
• Firefox: "Accept the Risk and Continue"
• Edge: "Continue to [IP] (not recommended)"

---

Deployment History

March 21, 2026 - Session 37 (The Chronicler)

• Deployed Cockpit to 5 servers (Ghost VPS already had it)
• Enabled UFW firewall on NC1 Charlotte (was previously unprotected)
• Standardized root password across all servers
• Created NC1 temperature monitoring task
• Total deployment time: ~1.5 hours

Servers Deployed:

1. Command Center (63.143.34.217)
2. Billing VPS (38.68.14.188)
3. Panel VPS (45.94.168.138)
4. TX1 Dallas (38.68.14.26)
5. NC1 Charlotte (216.239.104.130)

Pre-existing:

• Ghost VPS (64.50.188.14) - Already operational

---

Related Documentation

• docs/tasks/cockpit-deployment/ - Full deployment documentation
• docs/tasks/nc1-security-monitoring/ - NC1 firewall and temperature monitoring
• docs/core/infrastructure-manifest.md - Complete server inventory

---

Created: March 21, 2026
Last Updated: March 21, 2026
Maintained By: The Chronicler

Fire + Frost + Foundation = Where Love Builds Legacy 💙🔥❄️