1.19 docs updates

This commit is contained in:
miloschwartz
2026-06-10 18:52:28 -07:00
parent 3586d8ce05
commit 4354effcc2
25 changed files with 903 additions and 162 deletions

View File

@@ -39,6 +39,29 @@ docker exec -it pangolin pangctl set-admin-credentials --email "admin@example.co
Use a strong password and keep your admin credentials secure.
</Warning>
## Set Server Admin
Add or remove server admin status for a user by email address:
```bash
docker exec -it pangolin pangctl set-server-admin --email "admin@example.com"
```
To remove server admin status:
```bash
docker exec -it pangolin pangctl set-server-admin --email "admin@example.com" --remove
```
### Options
- `--email` (required): User email address
- `--remove` (optional, default: `false`): Remove server admin status from the user
<Warning>
At least one server admin must always exist. The command fails if you try to remove server admin status from the last remaining server admin.
</Warning>
## Clear Exit Nodes
Clear all exit nodes from the database:
@@ -63,6 +86,22 @@ docker exec -it pangolin pangctl reset-user-security-keys --email "user@example.
This command permanently deletes all security keys for the specified user. The user will need to re-register their security keys to use passkey authentication again.
</Warning>
## Disable User 2FA
Disable two-factor authentication for a user by email address. Sets `twoFactorEnabled` to false and clears the user's 2FA secret:
```bash
docker exec -it pangolin pangctl disable-user-2fa --email "user@example.com"
```
### Options
- `--email` (required): User email address
<Warning>
This command disables 2FA for the specified user and clears their stored 2FA secret. The user can re-enable 2FA from their account settings after signing in.
</Warning>
## Rotate Server Secret
Rotate the server secret by decrypting all encrypted values with the old secret and re-encrypting with a new secret. This command updates OIDC IdP configurations and license keys in the database, as well as the config file.
@@ -133,7 +172,7 @@ Generate an SSH CA public/private key pair for an organization and store them in
docker exec -it pangolin pangctl generate-org-ca-keys --orgId "org-123"
```
## Clear certificates
## Clear Certificates
Clear all certificates from the database to be reinserted by the server when syncing from acme.json files or using Pangolin DNS.