The panel's own address
Change the panel address, certificate, and backup address safely.
Settings -> Deplo, instance admins only.
The panel is served over HTTPS. It is never reachable at
http://203.0.113.10:3000: that port is bound to 127.0.0.1 for recovery access
only.
The panel has two addresses:
- Your domain, when you gave one, with a Let's Encrypt certificate.
- A generated host (like
deplo-cb00710a.deplo.site), which works without DNS setup and remains available if the custom domain breaks. It is on by default.
Changing the address also changes:
- The install command printed for new servers.
- The URL where Git provider webhooks deliver.
- The hostname passkeys are bound to.
- The cookie's security mode.
Change the address
Point DNS at this server
Point the new hostname's DNS at this server first. The page shows the exact record.
Open the panel address setting
Settings -> Deplo, find Panel address, click Change address.
Enter the new address
An impact check runs and tells you what it found: passkeys that stop working, sessions that end, or a DNS record that does not resolve here yet. An IP address is refused: no certificate authority issues for one.
Save
The certificate issues on the first request to the new address.
The generated address (like deplo-cb00710a.deplo.site) keeps working throughout, so the panel
stays reachable while DNS moves. See
ports, networks, and files.
HTTPS is not optional
There is no switch to serve the panel on plain http from the General tab, and no
way to reach it on 203.0.113.10:3000. The one exception lives under
Settings -> Deplo -> Advanced, Serve the panel over plain HTTP, and it
exists for one case: a panel on an internal network that no certificate authority
can reach. Turning it on sends every password and every session cookie across the
network in clear, and passkeys stop working entirely, so the confirm says so.
Turn the backup address off
In Settings -> Deplo -> Advanced, turn off Backup address only if you do not want the generated public hostname.
With it off, your custom domain is the only route to the panel. If it breaks, restore the address from the control-plane host:
# Put the panel back on the generated address (and turn the backup address on)
deplo recover panel-address -
# Or move it straight onto a domain that works
deplo recover panel-address deplo.example.comRestart Deplo afterwards so install commands and invite links use it too:
deplo restartSee Break-glass recovery.
It cannot be turned off while it IS the address
On an instance with no domain of its own, the generated host is what the panel answers on - turning it off there would leave no route at all, so Deplo refuses until you set a domain.
The generated address uses a self-signed certificate
Your browser warns once because public certificate authorities do not issue for the generated hostname. Use a custom domain for a browser-trusted certificate.
The certificate account email
Certificate account email is the address Let's Encrypt uses for this
instance's ACME account and expiry warnings. The installer seeds it from
ACME_EMAIL, or uses admin@<panel-host> when it is omitted.
Important details
- Changing the address invalidates passkeys and ends sessions. Everyone must register a new passkey on the new address.
- Re-point webhooks. Existing servers remain enrolled; new install commands use the new address.
- An IP address is refused. Use a hostname, or keep the generated address.
Troubleshooting
A certificate warning on the new address, a panel unreachable after the change, or "No server accepted the change": see Domains and TLS troubleshooting.
Next steps
Did this page help you?