# NPMplus Credentials Guide

**Date**: 2026-01-21  
**Purpose**: Configure Let's Encrypt certificate for explorer.d-bis.org

---

## NPMplus Dashboard Access

### URL
- **Dashboard**: `https://192.168.11.167:81`
- **From internal network only**

### Credentials

The email and password for NPMplus are stored in the `.env` file in the explorer-monorepo directory.

**To find credentials:**
1. Check the `.env` file in the project root
2. Look for `NPM_EMAIL` and `NPM_PASSWORD` variables
3. Or check the NPMplus container directly

---

## Manual Certificate Configuration

If automated script doesn't work, configure manually:

### Step 1: Access NPMplus Dashboard

1. Open browser: `https://192.168.11.167:81`
2. Login with credentials from `.env` file

### Step 2: Request Let's Encrypt Certificate

1. Click **"SSL Certificates"** in left menu
2. Click **"Add SSL Certificate"**
3. Select **"Let's Encrypt"**
4. Fill in:
   - **Domain Names**: `explorer.d-bis.org`
   - **Email**: (from `.env` file - `NPM_EMAIL`)
   - **Agree to Terms**: Yes
5. Click **"Save"**

### Step 3: Assign Certificate to Proxy Host

1. Click **"Proxy Hosts"** in left menu
2. Find and click **"explorer.d-bis.org"**
3. Scroll to **"SSL Certificate"** section
4. Select the Let's Encrypt certificate you just created
5. Enable:
   - ✅ **Force SSL**
   - ✅ **HTTP/2 Support**
   - ✅ **HSTS Enabled** (optional)
6. Click **"Save"**

### Step 4: Wait for Certificate

- Let's Encrypt certificate issuance takes 1-2 minutes
- Check certificate status in "SSL Certificates" section
- Once issued, the certificate will be automatically assigned

---

## Verification

After configuration:

```bash
# Test without SSL verification bypass
curl -I https://explorer.d-bis.org

# Should return HTTP 200, 301, or 302
# Should NOT show SSL certificate error
```

---

## Troubleshooting

### If Authentication Fails

1. **Check credentials in `.env` file**:
   ```bash
   cd /home/intlc/projects/proxmox/explorer-monorepo
   grep NPM_EMAIL .env
   grep NPM_PASSWORD .env
   ```

2. **Check NPMplus container**:
   ```bash
   ssh root@r630-01
   pct exec 10233 -- docker exec npmplus cat /data/npm/.npm_pwd
   ```

3. **Reset password** (if needed):
   - Access NPMplus container
   - Use NPMplus password reset feature
   - Or check container logs for initial setup credentials

### If Certificate Request Fails

1. **Check DNS**: Ensure `explorer.d-bis.org` resolves to `76.53.10.36`
2. **Check Port Forwarding**: Ensure ports 80/443 are forwarded correctly
3. **Check Firewall**: Ensure UDM Pro allows Let's Encrypt validation
4. **Check NPMplus Logs**: Look for certificate request errors

---

## Summary

**Status**: ⚠️ **MANUAL CONFIGURATION REQUIRED**

**Action**: 
1. Access NPMplus dashboard at `https://192.168.11.167:81`
2. Use credentials from `.env` file
3. Request Let's Encrypt certificate manually
4. Assign to `explorer.d-bis.org` proxy host

---

**Next Step**: Access NPMplus dashboard and configure certificate manually