The setup wizard
A new installation has no accounts. The setup wizard makes you its first operator, then walks you through what the installation needs before anyone else uses it: how it sends mail, who may sign up, and its licence.
1. Claim the installation
Open the address the installer showed, such as https://10.0.0.5/. You see Claim this instance.
- Enter the setup token from the installer’s finish screen.
- Enter your own email address and a password. This makes you the first operator.
Lost the token? Read it again on the server, as root at its console or over SSH: runuser -u velrix -- env VELRIX_ROOT=/var/lib/velrix/bundle velrix setup-token. Wrong tokens are counted per address, and after too many that address is refused for an hour.
A second step for operators. Under the default security profile, an operator with no second step can only add one at sign-in: a passkey, or an authenticator app. Nothing else opens until one is added; then ten recovery codes are shown once. Passkeys need the realm on a domain name, not an IP address. Your claim signs you in; you are asked at your next sign-in.
2. Go through the steps
After you claim it, the wizard fills the screen until every required step is done. The rail on the left lists the steps in groups, with a tick for each one done and a dot for each one required. Use Next and Back to move, and Skip for an optional step.
The steps come from the modules your installation runs, so yours may differ a little from this list.
| Group | Step | Required |
|---|---|---|
| Realm | Name and colour of the realm, and whether it is a new realm or joins another | No |
| Realm | How do your servers boot? Where each new server starts: local disk or diskless | No |
| Access | First operator: you, already done | Yes |
| Access | Who may sign up: nobody, invited people only, or people with an address at your domains | Yes |
| Access | Sign-in methods: add single sign-on through your identity provider (OpenID Connect or SAML) | No |
| How mail leaves: your SMTP server, its port, user, password and sender address. Send a test mail to finish the step | When sign-up sends mail | |
| Company | The company that invoices, if this installation bills anyone | No |
| Licence | Licence: paste the licence we sent you, connect to Velrix Public Cloud and pay as you go, or use monthly files offline | When your installation needs one |
| Look | Brand colour and wallpaper of the desktop | No |
| More | Default language and time zone | No |
Velrix sends mail to verify addresses, invite people and reset passwords, so it needs a way out. The step is required while sign-up sends mail (open sign-up, invitations or your domains); a realm where nobody may sign up can skip it. Enter your SMTP server and send a test mail. The step is done once the test mail went through. The password is stored sealed and never shown again. Velrix refuses to send a password to a server without encryption.
Licence
You have three ways to licence an installation:
- Paste a licence. For a fixed term: it runs to its end date, and nothing is sent anywhere.
- Connect to Velrix Public Cloud and pay as you go. Compare the fingerprint shown with the one we gave you, approve the link, and paste the licence. Usage reports then go every hour on their own, with totals only: no people, no names.
- Offline, with monthly files. Install the licence the same way, without a link. At the start of each month, export the usage file, send it to us, and import the receipt we send back.
A licence problem never stops your workloads. See Licensing.
3. Finish
When every required step is done, Finish closes the wizard and opens the desktop. To come back to the optional steps later, open Set up this instance in the Manager. The Manager lists its tools in groups down the side; press / or Ctrl F to filter them.