Skip to content
Server Panel

Files and SFTP

The file manager

Section titled “The file manager”

The Files tab browses the server’s files. Click a folder to open it, a file to edit it (with syntax highlighting), or use a row’s menu to rename, move, download or delete.

The file manager of a serverThe file manager of a server
  • Upload: files of any size, in parts of 8 MB, with a progress bar and Cancel. Parts get smaller when a reverse proxy refuses the size, so proxies’ limits don’t cut big files off.
  • Several files at once: tick them (shift-click for a range, the header box for all shown). The bar above the list then zips, moves or deletes the selection. Each file is checked against your permissions; what fails is listed, the rest goes ahead.
  • Download: any file in full, streamed from the node, also many GB.
  • Folder as zip: Zip for the current folder, or a folder’s menu → Download as zip. It is built while downloading; nothing is staged on the node. With path-limited access, the zip contains only your files.

Buttons follow your permissions: without files.delete there is no delete, without files.write no upload.

Paths can’t leave the server’s folder: .. is refused, and the node resolves every path inside the folder. Symbolic links within it work; links that lead outside, and absolute ones (they point into the game’s container), don’t.

SFTP

Section titled “SFTP”

For FileZilla, WinSCP or sftp. The Files tab shows the address, your user name and the node’s host key fingerprint.
Host and port the node’s address, port 2022 unless the operator changed it
User name <your email>.<server id>, as shown on the Files tab
Password your panel password, only for accounts without two-factor
SSH key add your public key under Account → SSH keys; required with two-factor

SFTP follows the same permissions and paths as the panel. It needs the files.sftp permission; owners and admins have it.

Check the host key fingerprint on the first connection: it must match the one in the panel.

  • After 10 failed logins, an address is blocked for 10 minutes; passwords also count towards the account’s lockout.
  • Only file transfer is offered: no shell, and symbolic links can’t be created. Permissions and owners sent by a client are ignored.
  • OpenSSH 10 and newer print a warning that the connection doesn’t use post-quantum key exchange. The connection is still encrypted.