Break-glass recovery
Reset a password, or restore an account or the panel address, from the control-plane host.
Use this only when the dashboard cannot restore access. Run the command as root on the host that runs the control plane.
Emergency access
These commands bypass capability checks and do not appear in Activity. Root on the control-plane host is the only credential they require.
The deplo command
install.sh puts it at /usr/local/bin/deplo. Run it over SSH on the host:
deplo| Command | What it does |
|---|---|
deplo recover | Reset a password, restore an account or an address, below |
deplo logs [lines] | Follow the control plane's logs |
deplo restart | Restart the control plane |
deplo update | Re-run the installer to the latest version |
Updating is normally a button - Settings -> Deplo -> Updates. deplo update is the fallback
for when the dashboard is what is broken. See Update.
When someone is locked out
deplo recoverSee the accounts
deplo recover listLists every account with its username, email, and admin, owner, or suspended state.
Reset a password
deplo recover password ada
deplo recover password ada -The first prompts for the new password. The second generates one and prints it. Every session for that account is signed out.
Restore ownership or access
deplo recover owner ada
deplo recover admin ada
deplo recover unsuspend adaowner transfers ownership and restores admin and active status. The previous
owner keeps their admin flag until you remove it in Settings -> Users.
When the address is what broke
If the panel's domain, DNS, or certificate is broken, restore its address from the control-plane host:
deplo recover panel-address deplo.example.com
deplo recover panel-address -- restores the generated address (like deplo-cb00710a.deplo.site). Restart the control
plane afterwards so install commands and links use the restored address:
deplo restartTo correct a server address that was mistyped:
deplo recover server-address eu-main-1 10.0.0.7
deplo recover server-address eu-main-1 10.0.0.7 9443This skips the normal reachability check, so it also works when the panel cannot currently reach the server.
From a source checkout
Running Deplo from a checkout instead of the image? The same tool is a package script, and the subcommands are identical:
bun run recover owner adaNext steps
Did this page help you?