Proxmox

https://www.udemy.com/course/proxmox-virtualization-environment-complete-training/

proxmox ssh port

#  vi /etc/ssh/sshd_config  

Verify the New Port:  ssh -p 2222 root@your_proxmox_ip 

sudo apt update

sudo nano /etc/network/interfaces

su -

apt install curl software-properties-common apt-transport-https ca-certificates gnupg2 -y

echo "deb [arch=amd64] http://download.proxmox.com/debian/pve bookworm pve-no-subscription" > /etc/apt/sources.list.d/pve-install-repo.list

wget https://enterprise.proxmox.com/debian/proxmox-release-bookworm.gpg -O /etc/apt/trusted.gpg.d/proxmox-release-bookworm.gpg

apt update && sudo apt full-upgrade

apt install proxmox-default-kernel -y

 install Proxmox VE and additional packages, such as postfix and chrony. Postfix is a mail transfer agent (MTA) that Proxmox uses to send system notifications, alerts, and other administrative emails.

Chrony is an implementation of the Network Time Protocol (NTP) that synchronizes the system clock with NTP servers. Although they are not mandatory, their functionalities are crucial for managing virtualized environments.

apt install proxmox-ve postfix open-iscsi chrony

Press Ok to start the configuration, select Local only  

ss -tunelp | grep 8006

 Remove the Linux Kernel

apt remove linux-image-amd64 'linux-image-6.1*'

 Update GRUB

update-grub

apt remove os-prober

reboot

https://[your_IP_address]:8006/

Change the Proxmox Default Web Console Port Using iptables Port Redirection

https://your-proxmox-ip without typing :8006 

Before starting:

1. Make sure no other service already uses TCP/443 on this host.

2. Back up current iptables rules (iptables-save > /root/iptables-backup.txt).

Now follow these steps:

1. Open an SSH session or local terminal window on your server.

2. Redirect incoming TCP/443 traffic to TCP/8006:

   iptables -t nat -A PREROUTING -p tcp --dport 443 -j REDIRECT --to-port 8006

For IPv6 addresses:

   ip6tables -t nat -A PREROUTING -p tcp --dport 443 -j REDIRECT --to-port 8006

3. To make these rules survive reboots:

   apt-get install iptables-persistent netfilter-persistent

   netfilter-persistent save

After applying these commands:

• You can now reach your dashboard at https://your-proxmox-ip.

However—this does NOT close direct access via :8006! To restrict unwanted connections:

ufw deny 8006/tcp && ufw reload

Or limit allowed IPs explicitly using iptables:

iptables -A INPUT -p tcp --dport 8006 ! -s <trusted-IP-or-subnet> -j DROP

Always test connectivity before logging out! Keep a direct console session open until confirmed working.