Console Gateway
Clients open their servers' consoles through a small gateway on this host, so they never reach Proxmox directly. Install it first, as root, from the installation directory:
sudo console/install.sh
It prints a port and a secret; enter them here. The gateway speaks plain HTTP on a port Cloudflare terminates TLS for (8443, 2053, 2083, 2087 or 2096), so behind Cloudflare nothing needs a certificate; add a Configuration Rule for cf.edge.server_port eq 8443 that sets the SSL/TLS mode to Flexible. Without Cloudflare, give the script the panel's certificate (--tls-cert, --tls-key). Everything here can be changed later under System, Settings, Console proxy; until a secret is entered the console button stays hidden.
| Check |
Result |
Details |
| Console gateway on this host |
WARN |
Nothing is listening on port 8443 of this host. Run "sudo console/install.sh" from the installation directory first, then check again. The console button stays hidden until the gateway is set up. |