Settings
Settings holds the panel-wide options. It is organised in tabs, and which tabs you see depends on your role. This page lists every tab and, for the General tab, every field. The tabs with their own pages are linked.
The tabs
| Tab | Who sees it | What it holds |
|---|---|---|
| General | Owners | Addresses, language, colour, warning thresholds, history retention, version. |
| Subscription page | Owners | The look of the client page. See The subscription page. |
| Panel access | Owners | The panel's own address, secret path and HTTPS. |
| API | Everyone | API Tokens, the API base URL and the OpenAPI document. See API tokens. |
| My account | Everyone | Your password, two-factor sign-in and signed-in devices. See Panel accounts. |
| Backup | Owners | Download and restore. See Back up and restore. |
| Activity log | Owners and roles that see all clients | Who did what. See Activity log. |
The API tab shows the address to send API requests to, the OpenAPI document, and the tokens of the signed-in account. Create a token there and keep its secret; the panel does not show it again. How tokens work is on API tokens.
General
| Field | What it does |
|---|---|
| Public address | The domain or IP that client profiles connect to. The installer fills it. An inbound can override it with Public address override. |
| Subscription link address | Optional, for example https://sub.example.com. Empty uses the address you open the panel with. |
| Default language for client pages | English or Persian. |
| Panel colour | The accent colour of the panel for everyone who signs in: Lime, Cyan, Mint, Amber, Coral, Rose, Violet or Sky. It previews as you pick and is saved with Save. Client pages have their own colour. |
| Warn when a plan ends within | Days. Clients closer than this to their end date appear under Running out. |
| Warn when traffic used reaches | Percent. Clients above it appear under Running out. |
| Sign out after inactivity | Hours. After this long without activity, a signed-in browser is signed out. |
| Traffic charts | Days of usage history kept. |
| Connection log | Days of finished connections kept. |
| Activity log | Days of the audit log kept. |
The section at the bottom shows the installed version of Ovira and OpenVPN, the operating system and the Machine ID of this server, with a copy button. You give it when you buy or renew a license outside the panel.
Panel access
The block at the top is HTTPS, described in HTTPS for the panel. Below it are the fields that decide where the panel answers.
| Field | What it does |
|---|---|
| Panel port | The port the panel listens on (1–65535). Ovira opens it in this server's firewall; open it in any cloud firewall yourself. |
| Bind address | Optional. Empty means all interfaces. Use 127.0.0.1 when a reverse proxy on this server sits in front of the panel. |
| Subscription port | Optional. Subscription links and pages are served on this port instead of the panel port. A Subscription link address under General overrides it. |
| Secret path | The panel answers only under this path. Everything else looks like an empty server. |
| Subscription path | The first part of subscription links. |
| TLS certificate file, TLS key file | Your own certificate as full paths on the server. Empty for plain HTTP or the Ovira-managed certificate. |
| Behind a reverse proxy (trust X-Forwarded-For) | Turn on only when a proxy you control sets that header. |
These take effect after a restart. Save keeps them, the page tells you Saved. Restart the panel to apply., and Restart panel applies them. The page shows the new address in the form After restart the panel will be at .... Write it down before you restart. VPN connections are not affected by the restart.
WARNING
A wrong Panel port, Bind address or Secret path makes the panel unreachable after the restart. If the new address cannot be opened, the panel goes back to the last address that worked. Check the address under the fields before you restart. If you are locked out, ovira status on the server prints the address the panel now uses.
Related pages
- Back up and restore: the Backup tab.
- Panel accounts: the My account tab.
- First sign-in: the first settings to check.
- Files, services and ports: where the same values live on the server.