Repository navigation
Server Detail
The Server Detail page is the per-server workspace in Veyport. Open it by clicking a server name on the Fleet Dashboard.
Admin vs Viewer: Viewers can browse the file tree and tail logs on servers where they have been granted path access. Terminal access is available to admins and LDAP users who are in the terminal access group and have a root (
/) assignment on the server. Only admins can upload files via the Dropzone and manage path access permissions.
The page is divided into three main areas:
- Header - displays the server name, current status, hostname, IP address, OS, and agent version.
- File Explorer sidebar - a collapsible panel on the left for navigating the remote filesystem.
- Main panel - shows the currently viewed file, the Live Tail console, the Terminal workspace, or the Dropzone uploader depending on what you have selected.
An additional Admin Tools sidebar is available on the right for admins, providing path access management controls.
The File Explorer is the left sidebar. It lets you navigate the remote server's filesystem without opening a terminal.
Click the Refresh button (circular arrow icon) in the File Explorer sidebar header to re-fetch all currently expanded directories while preserving the tree's expand/collapse state. The icon spins while the refresh is in progress. The button is hidden when the sidebar is collapsed.
- Directories are shown with a folder icon and a disclosure arrow.
- Click a directory name or the arrow to expand it and reveal its contents.
- Click again to collapse it.
- The tree loads directory contents on demand - it does not pre-fetch the entire filesystem.
- Click a file name to open it in the main panel.
- Only paths the current user has been granted access to are visible. If you cannot see a path you expect, ask an admin to grant you access (see Managing File Access below).
Note: Some files may appear greyed out in the tree. These are binary files or permission-restricted paths that are visible in the directory listing but cannot be read. This is by design - the file tree shows an "honest" view of the directory structure rather than hiding files that exist but aren't readable.
Click the collapse button (chevron icon) at the top of the File Explorer panel to hide the sidebar and give the main panel more space. Click it again to restore the panel.
Drag the thin vertical divider between the File Explorer and the content viewer to resize the sidebar. Double-click the divider to reset it to the default width. The width is constrained between 200 px and 600 px, and your chosen width persists for the duration of the browser session.
Both the file tree and the content viewer scroll independently, so long directory listings and large files each have their own scrollbar.
When you select a file in the File Explorer, it opens in the File Viewer in the main panel.
Source code and configuration files are automatically syntax-highlighted based on their file extension. Supported types include Python, JavaScript/TypeScript, Go, Rust, shell scripts, YAML, TOML, JSON, Dockerfiles, Makefiles, and more. The viewer uses a dark theme optimised for readability.
Markdown files (.md) are rendered as formatted HTML by default:
- Headings, lists, tables, and code blocks are styled.
-
Mermaid diagrams embedded in fenced code blocks (
```mermaid) are rendered as SVG diagrams inline.
When viewing a Markdown file, a toggle in the top-right of the viewer lets you switch between:
- Rendered - formatted HTML output (default)
- Raw - the plain Markdown source text
Press Ctrl+F (or Cmd+F on Mac) while a file is open in the viewer to open the search bar.
- Type to search - matches are highlighted in yellow/orange throughout the file content.
- Use the prev and next buttons in the search bar to jump between matches.
- The match count is shown next to the navigation buttons (e.g.
3 / 12). - The search is debounced - there is a short delay before results update, which keeps large files responsive while you type.
- Press Escape or click the close button to dismiss the search bar and clear highlights.
The Terminal workspace opens a live shell through the same outbound agent stream used for file browsing and log tailing. It is available only while the agent is online.
- Admins can open a terminal on any online server.
-
LDAP users need membership in the configured terminal group (
veyport-terminal-usersby default) and a root (/) path assignment on that server. - Local non-admin users cannot open terminal sessions.
LDAP terminal sessions, including LDAP admin sessions, run as the mapped LDAP username
on the agent host. Local admin sessions inherit the agent service identity: the standard
installer runs the agent as root, so these shells also run as root. The same rule
applies to vey ssh. A missing mapped host account fails instead of falling back to root.
See Architecture and SSH Gateway.
- Open the server from the Fleet Dashboard.
- Click the Terminal workspace button in the main panel toolbar.
- Wait for the session status to show Live shell ready.
- Type commands normally in the terminal pane.
The terminal resizes with the browser panel. Closing the tab, switching away, or clicking the close control ends the server-side session.
Veyport records terminal open and close events in the audit log. The open event includes the session ID and execution user when available.
Live Tail streams log output from a file on the remote server directly into your browser in real time. It is equivalent to running tail -f on the server, but without needing SSH access.
Both admins and viewers can use Live Tail on paths they have been granted access to.
- In the File Explorer, navigate to the log file you want to monitor (e.g.
/var/log/syslog). - Click the Tail button that appears next to the file name, or open the file and click Start Tailing in the viewer toolbar.
- The main panel switches to the Live Tail console. New log lines appear at the bottom as they are written.
Type a filter string into the Grep field at the top of the console. Only lines containing that string (case-insensitive) are shown. Clear the field to see all lines again. The filter applies to incoming lines in real time.
- Click Pause to freeze the output. New lines continue to buffer in the background.
- Click Resume to flush the buffer and continue live display.
Click Stop to end the tail session. The console retains the lines that were received so you can scroll and read them after stopping.
The Dropzone lets you transfer files from your local machine to the server without SCP, SFTP, or any other external tool.
Admin only: The Dropzone tab is only available to admin users. Viewers will not see this tab.
- Click Dropzone in the main panel toolbar, or select the Dropzone tab if it is visible.
- Drag one or more files from your desktop or file manager and drop them onto the highlighted drop area.
- Alternatively, click inside the drop area to open a file picker.
- Each file shows an upload progress indicator. When complete, a confirmation appears.
Files are uploaded to the path configured by an admin for your account. If no upload path has been set, the Dropzone will display an error - contact an admin.
When a file is uploaded, a notification is sent to users who have email notifications enabled for file upload events.
Below the drop area, a list shows all files that have been successfully uploaded in the current session:
- Filename and upload timestamp
- Delete button - removes the file from the server immediately
Click the Delete (trash) icon next to a file in the dropped files list. You will be asked to confirm before the file is permanently removed from the server.
Admins can control which filesystem paths each user can see and interact with.
- Open the Admin Tools panel on the right side of the Server Detail page (click the panel header to expand it if it is collapsed).
- Select the user from the dropdown.
- Enter the path to grant access to (e.g.
/var/logor/home/deploy/app). - Click Grant Access.
The path is added to the user's allowed list for this server. They will immediately see the path appear in their File Explorer on next load.
In the Admin Tools panel, find the path in the user's current access list and click Revoke. The path is removed. The user will no longer see it in their File Explorer.
Both grant and revoke actions are recorded in the Audit Logs (path.granted and path.revoked).
When a node's mTLS client certificate has expired while the node was offline, the agent phones home over the bootstrap channel and requests re-enrollment. The server page will show a Pending re-enrollment banner at the top with the request time and node details.
Admin only: Only admins can approve or deny re-enrollment requests.
- Open the server page. The Pending re-enrollment banner appears at the top with hostname, IP, and the time of the request.
- If a "possible clone" warning is shown, review it before proceeding. This warning appears when the node's hardware fingerprint has changed since enrollment, or when the original IP is still reported online — it may indicate the request comes from a cloned or unauthorised machine.
- Click Approve. You will be prompted for your TOTP code (step-up authentication).
- Enter your current TOTP code and confirm.
On successful approval, the hub re-issues a certificate for the same serverID. The node reconnects automatically within seconds — no manual action required on the server. The event is recorded in Audit Logs as agent.reenroll_approved, attributed to your account.
If approval returns "re-register required": The node was enrolled before transport-key support was added. Re-register it once using the standard install command and it will have transport-key support going forward.
Click Deny on the pending banner to reject the request. The node's request is cancelled and it will not be able to reconnect until a new request is approved. The event is recorded as agent.reenroll_denied.
Both the File Explorer (left) and Admin Tools (right) sidebars can be independently collapsed to maximise the working area:
- Click the chevron button on a panel's edge to collapse or expand it.
- The panels remember their state for the duration of your session.