docs: Self review of doc pages
This commit is contained in:
@@ -6,67 +6,82 @@ sidebar_label: First login
|
||||
|
||||
A fresh install has no users and no instance. The first visit creates both.
|
||||
|
||||
## 1. Bootstrap
|
||||
## 1. Create the first account
|
||||
|
||||
Open the control plane in a browser. Because no user exists, you land on
|
||||
`/setup`.
|
||||
Open your Vantage address in a browser. Because no user exists yet, you land on
|
||||
the setup page.
|
||||
|
||||
Fill in:
|
||||
|
||||
| Field | Notes |
|
||||
| ------------- | ------------------------------------- |
|
||||
| Instance name | Display name. Shown throughout the UI |
|
||||
| Email | Becomes your sign-in identity |
|
||||
| Password | Stored bcrypt-hashed |
|
||||
| Field | Notes |
|
||||
| ---------------- | --------------------------------------------------------- |
|
||||
| Instance name | Also used to derive your instance's own subdomain |
|
||||
| Owner email | Becomes your sign-in identity |
|
||||
| Password | At least 8 characters |
|
||||
| Confirm password | Must match |
|
||||
|
||||
Submitting creates the instance and its **owner** you.
|
||||
**Setup Instance** creates the instance and makes you its **owner**.
|
||||
|
||||
:::warning Bootstrap works exactly once
|
||||
The endpoint is open only while the database has no users. As soon as the first
|
||||
one exists, There is no second chance to create the first owner, so record the
|
||||
credentials before you continue.
|
||||
:::warning Your instance gets its own address
|
||||
If you installed on a name like `vantage.example.com`, an instance called Acme
|
||||
signs in at `acme.vantage.example.com`, and each instance keeps its own sign-in.
|
||||
Make sure DNS and your reverse proxy cover that subdomain, or use a wildcard.
|
||||
:::
|
||||
|
||||
## 2. Copy the Instance ID
|
||||
:::warning Setup runs exactly once
|
||||
It is only available while the database has no users. Once yours exists, the
|
||||
page closes for good, so record the email and password before you continue.
|
||||
:::
|
||||
|
||||
Once you have finished setup you will see the successfully created page.
|
||||
## 2. Copy the instance ID
|
||||
|
||||
This will show the Instance ID. You will need this ID when creating a license in the HQ.
|
||||
The confirmation page, headed **Instance created**, shows your instance ID and
|
||||
your sign-in address. You need that ID to claim a licence in Vantage HQ, and it
|
||||
is the reference support works from. You can find it again later on the
|
||||
**Licence** page in the sidebar.
|
||||
|
||||
## 3. Sign in
|
||||
|
||||
Click the continue to sign in button on the successful setup page.
|
||||
|
||||
You will be taken to `/login`. Sign in with the email and password you just set.
|
||||
Click **Go to sign in**, then sign in with the email and password you just set.
|
||||
|
||||
## 4. Look around
|
||||
|
||||
You land on the servers dashboard, which is empty. The sidebar is the whole
|
||||
product:
|
||||
You land on the servers page, which is empty. The sidebar is the whole product:
|
||||
|
||||
| Section | What it does |
|
||||
| --------- | ------------------------------------------ |
|
||||
| Servers | The server enrol, inspect, console, update |
|
||||
| Keys | SSH public keys and their assignments |
|
||||
| Workflows | Compose and run scripted work |
|
||||
| Steps | The reusable step library |
|
||||
| Monitors | HTTP, TCP, ICMP and TLS checks |
|
||||
| Secrets | The encrypted vault |
|
||||
| Audit | Every mutating action |
|
||||
| Settings | Members, SSO, alerts, retention, licence |
|
||||
| Section | What it does |
|
||||
| --------------- | ------------------------------------------------ |
|
||||
| Servers | Your fleet: enrol, inspect, console, update |
|
||||
| Monitors | HTTP, TCP, ping and certificate checks |
|
||||
| Vulnerabilities | Known security issues in installed packages |
|
||||
| Workloads | Containers and services running on your servers |
|
||||
| SSH Keys | Public keys and which servers they are on |
|
||||
| Secrets | The encrypted vault |
|
||||
| Workflows | Compose and run scripted work |
|
||||
| Steps | The reusable step library |
|
||||
| Audit Log | A record of everything that changed |
|
||||
| Licence | Your tier, allowance and expiry |
|
||||
| Settings | People, sign-in, alerts and integrations |
|
||||
|
||||
## 5. Add the rest of your team
|
||||
**Licence** and **Settings** are shown only to owners and admins.
|
||||
|
||||
Go to **Settings → Access**. Add members with a role:
|
||||
## 5. Install your licence
|
||||
|
||||
| Role | Can |
|
||||
| -------- | -------------------------------------------------- |
|
||||
| `owner` | Everything, including billing-adjacent settings |
|
||||
| `admin` | Everything except owner-only settings |
|
||||
| `member` | Day-to-day work servers, keys, workflows, monitors |
|
||||
Until a licence is installed, the instance is read-only: you can look, but you
|
||||
cannot add servers or anything else. Continue with
|
||||
[Claim a Free licence](./claim-free-licence.md).
|
||||
|
||||
Settings and organisation management require `owner` or `admin`.
|
||||
## 6. Add the rest of your team
|
||||
|
||||
If you would rather not manage passwords, configure single sign-on instead: see [Settings](../vantage/settings.md#single-sign-on).
|
||||
Go to **Settings → Access** and add people with a role:
|
||||
|
||||
You can add more than one identity provider; each gets its own button on the login page, and no buttons appear at all until at least one provider is configured.
|
||||
| Role | Can |
|
||||
| -------- | ---------------------------------------------------- |
|
||||
| `owner` | Everything |
|
||||
| `admin` | Everything except owner-only settings |
|
||||
| `member` | Day-to-day work: servers, keys, workflows, monitors |
|
||||
|
||||
Changing settings, and adding or removing people, needs `owner` or `admin`.
|
||||
|
||||
If you would rather not manage passwords, you can use single sign-on instead,
|
||||
which is available on paid plans. See
|
||||
[Settings](../vantage/settings.md#single-sign-on).
|
||||
|
||||
Reference in New Issue
Block a user