📚 VPS Docs

Using Your ObsidianHost VPS

Important notes about IPv4 addresses, local IP access, publishing websites, SSH access, and why two-factor authentication protects every VPS account.

IPv4 First Console Login Local IP Cloudflared SSH 2FA Safety

Why VPS plans do not include public IPv4 by default

Public IPv4 addresses are limited and have become very expensive for hosting providers to obtain and maintain. To keep ObsidianHost VPS pricing affordable, we do not include a dedicated public IPv4 address with every VPS by default.

Instead, every VPS receives a local network IP for private access inside our infrastructure. This lets you manage your server while avoiding the extra cost that dedicated public IPv4 addresses would add to every plan.

If your project needs a website or web app online, we recommend using Cloudflare Tunnel through cloudflared or a similar tunnel/proxy solution.

Why you need to open the console first

Before the browser SSH tool can make access simple, your VPS needs a short first-time setup from the console. During this setup, ObsidianHost installs useful management and security tools for your server.

  • qemu-guest-agent lets our panel read your VPS network details correctly.
  • fail2ban helps protect your VPS from repeated bad login attempts.
  • Additional helpful packages may be installed to improve basic VPS management and reliability.
Very important: QEMU Guest Agent is what lets the ObsidianHost SSH tool instantly fill in your VPS IP address and username when you click SSH. After that, the only thing you need to enter is your password.

Every VPS gets a local IP address

Your VPS credentials include a local IP address. This address is used for access inside the ObsidianHost network and works with our browser-based SSH tool.

  • Write your VPS local IP address somewhere safe so you do not lose it.
  • Use your local IP when connecting through ObsidianHost SSH.
  • Keep your credentials private and do not share them with anyone.
  • If something does not connect, open a support ticket or ask in Discord.
Please store your IP address, username, and password in a private password manager or another safe place. VPS passwords are generated securely and are not the same between customers or servers.

Publishing websites without a public IPv4

For websites, dashboards, APIs, and other HTTP services, Cloudflare Tunnel can securely expose your service to the internet without requiring a dedicated public IPv4 address on your VPS.

  1. Install cloudflared on your VPS.
  2. Create a tunnel in your Cloudflare account.
  3. Point your domain or subdomain to the tunnel.
  4. Run your website locally on the VPS, then let the tunnel publish it.
cloudflared tunnel --url http://localhost:8080

The command above is a simple quick test. For production, create a named tunnel and run it as a service so it starts automatically when your VPS reboots.

Accessing your VPS with ObsidianHost SSH

ObsidianHost provides a web SSH tool for accessing your VPS from the browser. After the first console setup installs QEMU Guest Agent, the SSH tool can automatically detect your VPS IP address and username.

Open vps.obsidianhost.net/ssh.html, click SSH for your VPS, and the tool will fill the IP and username for you. You only need to enter your password.

The SSH page is intended for VPS management. If you are publishing a website to visitors, use a tunnel such as Cloudflare Tunnel instead of asking visitors to connect to your local IP.

Why VPS credentials require 2FA

Two-factor authentication is required because VPS accounts can control servers, files, websites, data, and billing. Passwords can be reused, leaked, or guessed, so 2FA adds a second layer of protection.

  • It helps stop attackers even if they learn your password.
  • It protects your server from unauthorized access and account takeover.
  • It keeps the ObsidianHost network safer for every customer.
We require 2FA because we want every customer to stay safer from hackers and credential theft.

Basic VPS safety tips

A VPS gives you control, so it is important to protect your login details and keep your server maintained.

  • Keep 2FA enabled on your VPS account at all times.
  • Store your IP address, username, and password in a private password manager or another safe place.
  • Never share your VPS password, panel login, or 2FA codes with anyone.
  • Use strong, unique passwords for services you install on your VPS.
  • Keep your server updated with the latest security patches.
  • Only install software from sources you trust.
  • Back up important files before changing system settings or installing major updates.
  • Use tunnels and public services carefully. Only expose the ports and apps that need to be public.
  • If you think your account or server is compromised, change your password and contact support immediately.
ObsidianHost will never ask for your password or 2FA code in Discord, email, or support chat. Keep those details private.