Create the first administrator
Within the installation's 15-minute enrollment window, use the same authenticated root terminal:
/usr/bin/python3 -I -B /root/emailaoribit-bundle/enroll-admin.py
Choose your own login and password. Password entry is hidden and confirmed. There is no default password or public setup wizard; successful enrollment permanently closes the first-enrollment path.
If the window has expired or the result is uncertain, preserve the database and enrollment state. Use the matching release's protected local identity-recovery procedure instead of resetting installation state.
Connect from your computer
The initial panel HTTPS listener is server loopback 127.0.0.1:8443. With your existing authorised SSH account:
ssh -N -L 127.0.0.1:8443:127.0.0.1:8443 YOUR_SSH_USER@YOUR_SERVER_IP
Replace both placeholders, leave the terminal open and, for the default origin, open https://localhost:8443. A configured FQDN installation needs the exact printed origin and reviewed local name resolution through the tunnel.
Establish trust and MFA
Retrieve the installation's initial certificate chain through trusted host access and independently verify its fingerprint before configuring browser trust. Do not disable TLS verification.
Choose Admin, sign in with the credentials you created and enrol passkey/TOTP MFA before operational actions. Store recovery codes privately outside the server. Ordinary Panel credentials are distinct from Linux root credentials; the optional machine-password provider is a separately configured capability, not the default login.