CoreCluster · Ship

SSH, SFTP and terminal

Give each person their own SSH or SFTP login and key, open a terminal in the browser, and lock staging behind a login.

Start free for 30 days ← Back to CoreCluster
manage.corefinity.com/managed-clusters
SSH and SFTP marrowtide.co.uk · production
Open terminal Add user

Host ssh-brindlewyck-uk.cfstack.io · port 20002 · built-in user web

ssh -p 20002 web@ssh-brindlewyck-uk.cfstack.ioCopy

UsersAccessDirectoryKeys
web built-in SSH /var/www 2 keys Edit
priya Priya Shah SSH /var/www 1 key Edit
client-uploads SFTP only /var/www/htdocs/wp-content/uploads 1 key + password Edit
Connected · recorded 
web@application-0:~/htdocs$ wp cache flush
Success: The cache was flushed.
web@application-0:~/htdocs$
{  How it works  }

SSH, SFTP and terminal, step by step

  1. 1

    Copy the connection details

    Every site has one SSH host and port. SSH and SFTP both use it, with the commands ready to copy.

    manage.corefinity.com/managed-clusters
    The SSH and SFTP card with the host, port, user and ready-made ssh and sftp commands
  2. 2

    Add a user per person

    Give developers SSH to the whole site. Give clients SFTP only, kept inside one folder.

    manage.corefinity.com/managed-clusters
    Add a user marrowtide.co.uk · production
    Username client-uploads
    Type
    SSHShell and SFTP across the whole site. wp-cli, composer and git.
    SFTP onlyFile transfer in one folder. No shell.
    Folder
    • htdocsThe whole public site
    • wp-contentThemes, plugins, uploads
    • uploadsThe media library
    • themesAll themes
    • sharedKept between deployments
    Password NoneGenerate oneSet one now Shown once, after the user is added.
    No restart. The user can sign in within a minute or two. Cancel Add user
  3. 3

    Add their public key

    Paste an OpenSSH, PEM or PuTTY public key. The panel reads it and shows the fingerprint before you add it.

    manage.corefinity.com/managed-clusters
    Add a key to priya marrowtide.co.uk · production
    Name priya-laptop
    Public key
    ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIM4w7Rk2nB9QeTqZ1xY8pVfL3sHc6Wd0uJaKoNrX5bGt priya@laptop
    An OpenSSH line, or the PEM or PuTTY public key your tool exports. Those are converted for you.

    ssh-ed25519 · 256 bits SHA256:q7Lm2VfX0bTn8rKd4YsPw1eHcZ9uJaGo3NiRtB6vE5c Comment priya@laptop

    Private keys are cleared from the box and never sent.

    No restart. The key works within a minute or two. Cancel Add key
  4. 4

    Open a terminal in the browser

    Get a shell on the site without an SSH client. Every session is recorded, and the transcript kept for 90 days.

    manage.corefinity.com/managed-clusters
    SSH and SFTP marrowtide.co.uk · production
    Open terminal Add user

    Host ssh-brindlewyck-uk.cfstack.io · port 20002 · built-in user web

    ssh -p 20002 web@ssh-brindlewyck-uk.cfstack.ioCopy

    UsersAccessDirectoryKeys
    web built-in SSH /var/www 2 keys Edit
    priya Priya Shah SSH /var/www 1 key Edit
    client-uploads SFTP only /var/www/htdocs/wp-content/uploads 1 key + password Edit
    Connected · recorded 
    web@application-0:~/htdocs$ wp cache flush
Success: The cache was flushed.
web@application-0:~/htdocs$
  5. 5

    Put a login in front of staging

    Protect a whole environment, or a path such as /wp-admin/. Rules apply in about ten seconds, with no restart.

    manage.corefinity.com/managed-clusters
    HTTP authentication marrowtide.co.uk · staging

    A browser login in front of this environment. Rules apply in about ten seconds.

    Protect the whole environment Add rule
    PathUsersOn
    / Whole environment 1 user Add user…
    brindlewyck •••••••••••••••• Reveal password Reveals are logged.
    /wp-admin/ 2 users Edit…
    /wp-login.php 2 users Edit…

    Staging starts protected with a generated login; production starts open. Up to 20 rules, 10 users per rule.

manage.corefinity.com/managed-clusters
The SSH and SFTP card with the host, port, user and ready-made ssh and sftp commands
manage.corefinity.com/managed-clusters
Add a user marrowtide.co.uk · production
Username client-uploads
Type
SSHShell and SFTP across the whole site. wp-cli, composer and git.
SFTP onlyFile transfer in one folder. No shell.
Folder
  • htdocsThe whole public site
  • wp-contentThemes, plugins, uploads
  • uploadsThe media library
  • themesAll themes
  • sharedKept between deployments
Password NoneGenerate oneSet one now Shown once, after the user is added.
No restart. The user can sign in within a minute or two. Cancel Add user
manage.corefinity.com/managed-clusters
Add a key to priya marrowtide.co.uk · production
Name priya-laptop
Public key
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIM4w7Rk2nB9QeTqZ1xY8pVfL3sHc6Wd0uJaKoNrX5bGt priya@laptop
An OpenSSH line, or the PEM or PuTTY public key your tool exports. Those are converted for you.

ssh-ed25519 · 256 bits SHA256:q7Lm2VfX0bTn8rKd4YsPw1eHcZ9uJaGo3NiRtB6vE5c Comment priya@laptop

Private keys are cleared from the box and never sent.

No restart. The key works within a minute or two. Cancel Add key
manage.corefinity.com/managed-clusters
SSH and SFTP marrowtide.co.uk · production
Open terminal Add user

Host ssh-brindlewyck-uk.cfstack.io · port 20002 · built-in user web

ssh -p 20002 web@ssh-brindlewyck-uk.cfstack.ioCopy

UsersAccessDirectoryKeys
web built-in SSH /var/www 2 keys Edit
priya Priya Shah SSH /var/www 1 key Edit
client-uploads SFTP only /var/www/htdocs/wp-content/uploads 1 key + password Edit
Connected · recorded 
web@application-0:~/htdocs$ wp cache flush
Success: The cache was flushed.
web@application-0:~/htdocs$
manage.corefinity.com/managed-clusters
HTTP authentication marrowtide.co.uk · staging

A browser login in front of this environment. Rules apply in about ten seconds.

Protect the whole environment Add rule
PathUsersOn
/ Whole environment 1 user Add user…
brindlewyck •••••••••••••••• Reveal password Reveals are logged.
/wp-admin/ 2 users Edit…
/wp-login.php 2 users Edit…

Staging starts protected with a generated login; production starts open. Up to 20 rules, 10 users per rule.

{  What you can set  }

Options and limits

Everything here is per site or per environment, from the panel, with every change in the activity log.

Connection
One SSH host and port per site, for SSH and SFTP. Plain FTP and FTPS are not offered.
Users
Up to 20 per site. SSH across the whole site, or SFTP only, kept inside one folder.
Keys
Up to 20 per user. Ed25519, ECDSA, or RSA of 2048 bits or more. PEM and PuTTY keys are converted.
Passwords
Optional on named users: generated and shown once, or set by you, 12 characters or more. Keys only is recommended.
Company keys
Add a key once in company settings. It goes on every site’s built-in web user, or on the sites you choose.
Terminal
Opens as web in the browser and is recorded. Closes after 15 idle minutes, or 4 hours at most.
HTTP authentication
The whole environment or chosen paths. Up to 20 rules and 10 users per rule. Staging starts protected.
Applying
User and key changes reach the site within a minute or two. Nothing restarts.

Questions about ssh, sftp and terminal

Yes. Add them as an SFTP-only user and pick their folder, such as the media library. They cannot leave it, and they get no shell.

The person who opened the session, and Corefinity staff. Transcripts are kept for 90 days, then deleted.

Yes. Paste it as your tool exported it and the panel converts it to an OpenSSH key. Private keys are refused and cleared before anything is sent.

← PreviousGit deployments Next →PHP, MariaDB and crons
Every walkthrough Back to CoreCluster →
Build
Launch
Ship
Protect
{  CoreCluster  }

See ssh, sftp and terminal on your own cluster

Tell us how many sites you run and on what. An engineer sizes a cluster with you and shows you the panel on a live one.

By sending this message you agree to our Privacy Policy .