Settings

Search settings

No settings match your search.

Authentication

Authentik

Portal Access Control

TAK Server

Connection & Certificates

Messaging

SMS

Email Templates

MOU

Configuration

Branding & Appearance

Callsign Format

Live Map

Dashboard Bookmarks

Auto Create Groups / Channels

Auto Create Data Sync Missions

Supported TAK Clients

Request Access Page

Administration

Audit Log Plugin Manager Access Control

Reference Data

Agency Types

Regions

Colors / Teams

Roles

Portal database

Connection

Import / Export

Authentik

Authentik connection, API token, and visibility / action-lock prefixes.

Authentik Internal URL Base URL of your Authentik instance (e.g. http://authentik:9000) Authentik API Token API token with permission to manage users and groups.

Hidden User Prefixes Comma-separated prefixes of usernames to hide from the UI. Hidden Group Prefixes Comma-separated prefixes of groups to hide from the UI. User Action-Lock Prefixes Users whose name starts with these prefixes cannot be modified from the portal. Group Action-Lock Prefixes Groups whose name starts with these prefixes cannot be modified from the portal. Dashboard Authentik Stats Refresh (seconds) How often the server refreshes cached Authentik dashboard stats in the background. Server restart required for changes to take effect.

Portal database

Read-only Postgres connection for DBeaver/psql. Changing .env after the volume exists does not rotate this password. If a 1.4.9 upgrade left agencies or other records empty, restore the migrated JSON backup and re-run the import from this same dialog.

Database Checking… Worker Checking…

Host Port Database User Password

1.4.9 data migration

Checking JSON files…

File	JSON in data volume	Migrated backup	Last import

Connection & Certificates

TAK Marti URL, client certificates, and SSH setup for the TAK host.

TAK URL Full Marti URL, e.g. https://tak.example.gov:8443/Marti. Client P12 Certificate Upload a new file to replace the existing certificate. Not Installed Client P12 Password Passphrase for the client .p12 file (may be empty).

TAK Server PEM Certificate Upload a new file to replace the existing CA certificate. Notepad should show three distinct blocks of text starting with -----BEGIN CERTIFICATE----- Not Installed

Revoke on Disable Revokes TAK certs when a user is disabled.

TAK Debug Enables verbose TAK debug logging.

Bypass TAK Disables all outbound TAK calls (for testing).

Dashboard TAK stats refresh (seconds) How often the server refreshes cached TAK metrics for the dashboard in the background. Lower = fresher numbers; the dashboard page does not wait on TAK. Server restart required for changes to take effect.

SSH Target Host / IP SSH Port SSH Username SSH Password

Privilege command sudo is the default. Choose dzdo for Centrify/DirectAuthorize hosts. All privileged SSH commands (restart, reboot, Locate, certs, CoreConfig) use this binary.

sudo dzdo

Enter the TAK Server SSH host, port, username, and that user's password above, then run setup once. The portal generates a key pair, installs it on the server, configures passwordless privilege (sudo by default, or dzdo if selected) for Locate and maintenance, and verifies access automatically. The account must be allowed to run sudo or dzdo with its password during setup. SSH setup help

Email

SMTP settings and options for portal notification emails.

Email Enabled Whether email notifications are enabled.

Send Group-Change Emails When enabled, group edits trigger user group-change email notifications.

Email Provider Currently only 'smtp' is supported. SMTP Host SMTP server hostname. SMTP Port SMTP port, e.g. 587.

SMTP Secure On for SMTPS/465, off for STARTTLS/587.

SMTP Username Username for SMTP authentication. SMTP Password Password for SMTP authentication. From Address e.g. TAK Admin <[email protected]> Always CC Optional comma-separated list. Always BCC Optional comma-separated list.

Fail Hard on Email Error User actions fail when email sending fails.

Sends “TAK Portal - Email SMTP Test” to the Always CC and Always BCC addresses currently in the form. Email settings are saved when you send the test. (Email Enabled must be true.)

MOU

MOU workflow toggles, reminder schedule, and HTML size limits.

MOU Enabled Turn the MOU and standard-user agreement workflows on or off.

Send MOU Emails Sends MOU assignment/update and reminder emails to agency admins.

Default Reminder Days Days between agency-admin reminder emails for unsigned current MOUs. MOU HTML Max KB Maximum allowed size for stored MOU HTML, Markdown source, and rendered user-agreement content. Reminder Sweep Hours How often the reminder scheduler checks for unsigned agency MOUs. Server restart required for changes to take effect.

Email Templates

Edit HTML bodies for system notification emails. Overrides are stored separately from /email_templates.

User Created (with Password) Default