Skip to content

Behaviour

Time & Date

Default Timezone

The default timezone is stored in newly created user accounts.

Default Datetime Format

The default datetime format is stored in newly created user accounts. It defines how the user interface shows the datetime format (e.g. dd.mm.yyyy hh🇲🇲ss).

UI Settings

Precheck redirect checkbox on add server

Precheck the "redirect to server page" checkbox when adding a new user.

Precheck redirect checkbox on add user

Precheck the "redirect to user page" checkbox when adding a new user.

Precheck delete VPS on backend checkbox

Precheck the "Delete on Hostsystem" checkbox when deleting a virtual server.

Suspension/Unsuspension: Power default action

When enabled, the suspension dialog will pre-select 'Power Off' for suspensions and 'Power On' for unsuspensions.

Suspension/Unsuspension: Network interface default action

When enabled, the suspension dialog will pre-select 'Disable ports' for suspensions and 'Enable ports' for unsuspensions.

Suspension/Unsuspension: Affected network ports

By default, only network ports with 'Enable Switch Automation' enabled are affected by suspension/unsuspension actions. When this option is enabled, the system will perform the action on all assigned ports where the switch supports Advanced Switch Management.

Suspension/Unsuspension: Perform actions in background

When enabled, network port and power actions during suspension/unsuspension are executed asynchronously in background jobs. The API request returns immediately without waiting for action completion.

Network graphs: Display summary by default

By default, the extended statistics that include a summary of the selected time range for 95th percentile, average mbit, transfer volume, and current data rate are hidden. You can display this information by clicking the "Show Summary" button.

To expand the statistics by default, activate this option.

Network graphs: Display 95th percentile line

To display a 95th line in the network graphs, activate this option.

Hide Proxmox memory usage graph

Enable to hide the Proxmox memory usage graph. Memory usage is reported from the host's perspective. If the VM does not run the QEMU agent, the reported values may not reflect actual in-guest memory usage, which could be misleading to users.

Network graphs: Default port name

Controls how ports are labeled in network graphs when no custom port description is set in the connection assignment.

The following options are available:

  • Port ID only (e.g., Port 5) - the default behavior.
  • Switch name only (e.g., Switch01).
  • Switch name and port ID (e.g., Switch01 - Port 5).

This setting is useful when servers are connected through multiple switches and the port ID alone is not sufficient to identify the link.

SNMP connection assignments: Leave port description empty

When enabled, new SNMP switch connection assignments will not auto-populate the port description field with the interface name. This allows the "Network graphs: Default port name" setting above to always determine the port label in network graphs.

Without this option, the port description is automatically populated when adding a new SNMP switch assignment, which takes precedence over the default port name setting.

Don't allow duplicate external provider assignments

Enable this option to ensure that external provider assignments are unique. This allows identical item ID assignments only if they are managed by a different external provider account.

For instance, this option ensures that the same Proxmox server cannot be assigned multiple times. However, if you manage two Proxmox accounts with servers that have the same ID, servers with the same IDs can still be assigned since they are managed by different external provider accounts.

Don't allow duplicate IPMI IPs

Enable this option to ensure that each server has a unique IPMI IP address. This allows duplicate IPMI IPs only if they are managed by different agents.

Don't allow duplicate DHCP MACs

Enable this option to ensure DHCP MACs are unique per agent. This allows duplicate MACs only if they are managed by different agents.

Censor passwords by default

Enable this option to censor passwords by default. For example, when editing a network device, the SNMP community string will be hidden, with an option to reveal it by clicking a button.

Note: IPMI passwords are not affected by this setting. Refer to the next option for IPMI-specific settings.

Censor IPMI passwords

Three modes are available for selection:

  • Show IPMI passwords in clear-text.
  • Hide IPMI passwords and censor them in API responses.
  • Mask IPMI passwords with an option to reveal.

Open dialog during requesting server console

The server console is opened in a new tab, which could be blocked by popup blockers. By enabling this option, an additional dialog (modal) opens when a console is requested, which contains a direct link to the console.

Connection assignments: Don't show already assigned items

Enable if already assigned items (e.g. a switch port) should not be available in the item-selection dropdown of other servers.

Server IP Assignments Dialog: Show VLAN Information

When enabled, a summary of the VLAN configuration for each subnet is shown when assigning IP addresses to a server.

Admins: Allow power actions during PXE boots

This feature enables the execution of power actions by admins through the 'Power Options' button while a PXE boot is in progress.

Users: Allow power actions during PXE boots

This feature enables the execution of power actions by regular users through the 'Power Options' button while a PXE boot is in progress.

This option is not recommended for regular users, as they could potentially restart the server during installation, thereby putting the successful completion of the PXE boot at risk.

Show Server ID on server detail page

Enable to show the server ID on the server detail page. Available options:

  • Do not show the Server ID
  • Show for admins next to the server name
  • Show for admins and users next to the server name
  • Show for admins under the server name
  • Show for admins and users under the server name

Server detail page: Show hostname as title

Controls whether the server detail page uses the hostname as the main title instead of the server name. When the hostname is the title, the server name is shown below it (if the user has permission to view it). Users without permission to view the server name always see the hostname as the title, regardless of this setting.

Available options:

  • Always show the server name as title
  • Show hostname as title for non-admin users only
  • Show hostname as title for all users

The same primary/secondary order is also applied to other places that combine both fields, such as the quick search results and user-profile server lists.

Server list: Hide server name column by default

Controls whether the server name column is hidden by default in the server list. When the column is hidden, the clickable server link automatically moves to the hostname column. Users with permission to view the server name can still show the column manually. Saved column layouts always take precedence over this default, so users who explicitly enabled the column keep it visible.

Available options:

  • Always show the server name column
  • Hide the server name column for non-admin users only
  • Hide the server name column for all users

Impersonate: Stay on current page when stopping

When enabled, you remain on the current page after stopping user impersonation instead of being redirected back to where you started.

Traffic and Bandwidth Unit Auto-Scaling

Automatically scale traffic and bandwidth units to more appropriate values when they become large (e.g., GB -> TB).

Available options:

  • Auto-scale traffic values in server list
  • Auto-scale bandwidth rates in server list
  • Auto-scale units in server graphs and traffic breakdown
  • Auto-scale units in "Traffic Today" widget
  • Auto-scale units on network device page

RDNS Automation

Delete RDNS entry when removing IP assignment

Deletes the RDNS entry when you remove an IP assignment from a server. Using the next option, you can replace the entry with a default value.

Set default RDNS entry after removing IP assignment

This feature lets you reset the RDNS entry to a default value. Besides static text, you can use the following variables:

  • {reverseip} - IP 10.10.5.9 will become 9.5.10.10.in-addr.arpa.
  • {reverseipNoArpa} - IP 10.10.5.9 will become 9.5.10.10.
  • {ip} - Replaces {ip} with the IP address. E.g. {ip}.example.org becomes 10.10.5.9.example.org.
  • Leave the input field empty to remove the RDNS entry.

You can combinate multiple variables, and you can use the same variable multiple times (e.g. {ip}-{reverseip}.static.example.org.).

RDNS entry verification mode

Verification mode when the RDNS entry is being updated. Possible values:

  • Valid domain, but must not resolve to IP.
  • Valid domain and must resolve to IP.
  • Allow all strings.

System Settings

IPMI-KVM NoVNC Docker container deletion mode

Available options:

  • Delete unused containers after 5 minutes (Default)
  • Delete unused containers as fast as possible

Docker containers are terminated when they are no longer in use. The default setting is to delete them after around 5 minutes. Some IPMI vendors may only allow one KVM connection at a time, leading to new sessions only being available after previous sessions have ended. The main benefit of the default mode is that the same NoVNC window can be re-opened for up to 5 minutes.

Alternatively, a quick deletion mode is available, where containers are removed within seconds after the user disconnects. This is useful to solve the above described issue, but it also means that the same NoVNC window can only be re-opened for a short time (which is generally not a problem).

Web IPMI NoVNC (admin): Use stored IPMI account

If enabled, Tenantos admins will use the IPMI account stored in the IPMI connection details for the NoVNC session, rather than generating a new user with the privilege level specified in the IPMI connection details.

Web IPMI NoVNC (non-admins): Use stored IPMI account

If enabled, non-admins will use the IPMI account stored in the IPMI connection details for the NoVNC session, instead of generating a new user with the privilege level specified in the IPMI connection details. This setting can also be overridden on a per-IPMI-connection basis.

Web IPMI NoVNC (admins): Hide IPMI credentials

If enabled, admins will not see the IPMI credentials in the NoVNC window. This is not recommended, as automatic login to IPMI might not work, and if the IPMI web session expires, admins will need the login credentials to log in to the IPMI web page again.

Web IPMI NoVNC (non-admins): Hide IPMI credentials

If enabled, non-admins will not see the IPMI credentials in the NoVNC window. This is not recommended, as automatic login to IPMI might not work, and if the IPMI web session expires, admins will need the login credentials to log in to the IPMI web page again. This setting can also be overridden on a per-IPMI-connection basis.

NoVNC: Disable IP verification

If enabled, anyone knowing the unique URL token can access console sessions from any IP. For security reasons, it is highly recommended to leave this option disabled.

Hardware inventory callback IP validation

When activated, this feature verifies the IP address of the server during the retrieval of hardware details through the hardware inventory shell script. This ensures that data callbacks are only accepted if they originate from an IP address linked to the server. This verification step prevents the acceptance of hardware details from a server whose IP does not match those on record in Tenantos, thereby eliminating the risk of storing incorrect hardware data.

In other words: If you accidentally run the hardware inventory shell script on the wrong server, the system will prevent the storage of hardware details. This is because the origin IP address won't match with the server's IP assignments in Tenantos.

Enable VLAN automation when deleting a server

If enabled, the VLAN configuration for the server's interface will be automatically reset (e.g., all VLANs will be removed), provided that the switch management functionality is available.

This feature performs the same steps as when deleting the last IP of a server and carrying out VLAN actions. This means that the VLANs are removed from the switch port, the L3 IP may be deleted from the VLAN if it is not used by another server, and so on.

To understand the steps this setting performs, delete the last IP of a server and use the dry-run feature.

Enable VLAN automation when user lacks permission

When enabled, VLAN automation will execute automatically for actions like assigning or removing an IP if the user lacks permission to decide whether VLAN automation should be applied (typically useful when resellers can make IP assignments).

Alias Users: Use parent role for restricted items

Alias Users have their own roles. However, certain items – such as IP subnets or PXE profiles – can be limited to specific roles. Enable this option to evaluate access to such items based on the role of the parent account instead of the role assigned to the Alias User.

Enable Emergency Remote Patching System

Activates a secure channel for remotely triggering the update process when critical security patches become available. All access is cryptographically signed and IP-restricted. This feature allows immediate response to severe vulnerabilities and other emergency situations.

When triggered, a flag file is created and picked up by a local systemd daemon. The daemon then executes the upcp update script and writes an entry to the system log.

The feature is opt-in and can be disabled at any time. Activation is recommended.

The source code is open for review and can be inspected at the following paths on the Tenantos server:

  • /var/www/html/app/Http/Controllers/System/emergencyPatchingController.php
  • /var/www/html/app/Services/System/EmergencyPatchingSystem/ExecutePlatformUpdate.php