Agent settings
Options and buttons available in the Docker agent interface.
Agent settings are available in the local Docker agent interface. They affect the local agent service: HTTPS access to the agent panel, controller certificate verification, trusted CA certificates and DNS resolution used by the agent.
Opening settings
Open the agent web panel, sign in, then use the Settings button on the left side of the interface. The panel opens as a drawer and can be closed with the X button or by clicking outside it.
TLS/SSL Certificate
| Element | Purpose |
|---|---|
| Status badge | Shows whether the certificate is Active, Expired or requires agent restart. Restart Required means the running HTTPS service still uses the previous certificate. |
| Common Name | Shows the certificate CN used by the agent HTTPS panel. The value should match the DNS name or address used to open the panel. |
| Valid Until / Days Left | Shows certificate expiration date and days left. Values close to expiry are highlighted. |
| Fingerprint | Shows the SHA-256 fingerprint of the current agent certificate for comparison with the certificate presented by a browser or another system. |
| View Details | Opens full certificate details: subject, issuer, validity, fingerprints, SAN entries and PEM content. |
| Generate | Generates a new self-signed certificate for the agent panel. The form accepts Common Name and Validity days. A restart may be required. |
| CSR | Creates a Certificate Signing Request for an external CA. The form supports Common Name, optional subject fields, SAN DNS/IP entries and Regenerate private key. |
| Bind | Installs a certificate signed from the pending CSR and binds it to the existing private key. |
| Upload | Uploads an existing certificate and private key pair. Supported files include .crt, .pem, .cer, .key. A restart may be required. |
Custom CA Certificates
Custom CA certificates are used when the agent must trust an internal CA, for example to verify a controller certificate issued by a private PKI.
| Button / field | Purpose |
|---|---|
| + Add | Adds a trusted CA certificate file (.crt/.pem/.cer) to the local CA bundle used by the agent. |
| View | Shows full CA certificate details: subject, issuer, validity, fingerprints, SAN entries and PEM content. |
| Remove | Removes a CA certificate from the local bundle after confirmation. |
Controller Connection
| Option | Behavior |
|---|---|
| Verify Controller Certificate: off | The WSS connection to the controller is encrypted, but the controller certificate chain is not validated. This is the default mode for self-signed controller deployments and lab environments. |
| Verify Controller Certificate: on | The agent validates the controller certificate. The certificate must be trusted by the system CA store or by a CA added in Custom CA Certificates, and must match the controller hostname. |
DNS Servers
DNS settings control how the agent resolves hostnames, especially internal or .local controller names. If no custom value is configured, the UI shows 8.8.8.8 as the default entry.
| Element | Purpose |
|---|---|
| DNS server list | Shows DNS servers currently configured for the agent resolver. Entries are saved in agent storage and used by the backend resolver. DNS changes can require restart. |
| DNS IP input | Adds a DNS server by IPv4 address. Only valid IPv4 addresses are accepted. Duplicate addresses are rejected. Maximum 5 DNS servers can be configured. |
| Add | Saves the IP address from the input field to the DNS server list. The value is saved immediately. |
| Remove | Deletes a DNS server from the list and saves the updated list immediately. |
Other agent interface buttons
| Button | Purpose |
|---|---|
| LIVE LOGS | Opens live logs streamed from the agent backend. The drawer supports pause/resume, copy, clear, close and scroll-to-bottom. |
| Theme toggle | Switches between light and dark mode. The selected theme is saved in browser localStorage and affects only the local UI display. |
| Unregister | Unregisters the agent locally from its current controller. This path keeps the AIID and allows re-registration of the same agent instance. |