Settings and security

Your brand

In Settings choose the name shown to customers (the customer area shows your name, not KoaVM) and the support email: it appears in the customer area and receives replies to the panel's emails.

Customer emails

Also choose the email language (Italian or English) and use Send a test. The log shows the last 50 emails with their status.

The panel writes to customers before and after migrations, when the VPS is about to run out of monthly traffic and when it does.

Other settings

• Nodes and overbooking: RAM, disk and CPU ratios and swap proposed for new nodes (including the ones the panel orders on its own) and the real-usage brake for all nodes (see Nodes). Since 1.14 also VPS groups on the nodes, needed by the disk and CPU limits: only where needed, that is on the nodes with at least one VPS that has disk or CPU limits (recommended), on all nodes (so the disk chart shows operations per second for every VPS) or never (the groups are removed and the limits do not apply).
• Parallel migrations: at most how many VPSs move at once.
• Live moves between nodes: prepares VPSs without additional disks to move without stopping (see Moving between nodes).
• Sign-in with Prime Software ID: "Sign in as admin" from the Prime Software ID Casa page, only for the administrator set there and with two-step verification. The panel shows the two addresses to register in Prime Software ID (start and return).
• Backups: destinations, start time and parallel backups (see Backups and snapshots).
• API: keys and WHMCS module (see API and integrations).

Support

If something is wrong, Settings › Support › Download the report creates a text file with what is needed to understand the problem: version, system, memory and disk of the panel server, license, nodes with their state, VPSs by state, jobs of the last 7 days with the latest failed ones, open alerts, settings and the last lines of the log.

Passwords, API keys, tokens, license keys and recovery keys are removed before the file is written: open it and read it before sending it. Send it to info@koavm.com with a couple of lines about what is happening.

If the panel doesn't open, the same report can be made on the panel server, with the last lines of the system log:

sudo koavm support-report --out report.txt

Security

• Two-step verification (since 1.13): everyone turns it on from their own account with an authenticator app on the phone; in Settings › Security you make it required for administrators and/or customers. See Two-step verification.
• Passwords with a strong hash; sessions with secure cookies; requests that change something must come from the panel itself.
• The panel talks to the nodes only over HTTPS with a client certificate and a verified server fingerprint.
• Secrets (provider keys, SMTP password, S3 keys) cannot be read back from the interface: they can only be replaced.
• Every administrator action ends up in the jobs log or the system log.
• The koavm service runs as an unprivileged user and writes only to /var/lib/koavm.

Change your password and turn on two-step verification from My account, and do not share the administrator login: create one account per person.