Counter-Strike 2 Server - Getting Started Guide
Your CS2 server based on Ubuntu 24.04 comes with PufferPanel – a web-based game server management panel. Use it to manage your CS2 dedicated server through a browser: start/stop the server, access the live console, edit configuration files, and monitor resources. No SSH required for day-to-day server management.
Step 1 – Verify PufferPanel Works
Your server’s IP address and root password are shown in the Server Information section on the Overview tab of your server in the client portal. The CS2 Panel Admin Email and CS2 Panel Password you entered when ordering are shown in the CS2 Credentials card on the same tab. The panel is already accessible by IP address. Open your browser and go to:
https://your.server.ip
PufferPanel login:
- Email: the e-mail address you entered when ordering (it is your panel login)
- Password: the CS2 Panel Password you set when ordering (shown in the CS2 Credentials card on the Overview tab of your server)
CS2 server settings (generated for your server):
- RCON password – for remote server management from the game console
The panel opens over HTTPS with a certificate issued for your server address, so no browser warning appears. If your server is not reachable from the internet on port 80, the certificate cannot be issued and the browser shows a warning for a self-signed certificate – accept it and log in. You will see your CS2 Server in the server list. All credentials are also saved on the server in /root/.cs2_credentials.
For the first minute after the server is created the panel answers 403 Forbidden and SFTP does not accept connections: both stay closed until your login and password from the order are applied, so nobody can get in with a temporary password. Wait a minute and reload.
If you placed the server behind a VyOS router on a private network, forward ports 22 (SSH), 443 (PufferPanel), 5657 (SFTP) and 27015 TCP and UDP (CS2 game traffic) to the server on the router’s Configuration tab (Port forwarding). The UDP port is essential – without it, players cannot connect. Behind the router the server has only a private address, so it does not get the IP certificate, so PufferPanel shows a browser warning – accept it, or forward port 80 as well and set up a domain pointed to the router’s public address (Step 5).
Firewall. If you turn on the Firewall for this server in the client portal, allow incoming TCP port 80 in its rules, along with 443 (PufferPanel) and the game ports listed above. Certificates renew over port 80 – the IP certificate every few days – and without that rule the certificate expires and the browser starts showing a warning.
Step 2 – Start the Server and Connect
Once the installation is complete, click Start in PufferPanel to launch the CS2 server. Open CS2 on your computer, press ` (tilde) to open the console, and type:
connect your.server.ip:27015
If you set a server password in server.cfg (sv_password):
connect your.server.ip:27015; password yourpassword
Step 3 – Using PufferPanel
PufferPanel provides everything you need to manage your CS2 server:
- Console – live server output and command input. Type CS2 commands directly (e.g.
changelevel de_mirage,status) - Files – browse and edit server files in the browser. Edit
game/csgo/cfg/server.cfgto change server name, passwords, and game settings - Settings – change game mode, default map, and max players
- SFTP – upload files using an SFTP client (port 5657)
Step 4 – Get a GSLT Token (Optional)
A Game Server Login Token (GSLT) is required for your server to appear in the public server browser. Without it, players can only connect via the direct IP address.
- Go to steamcommunity.com/dev/managegameservers
- Log in with your Steam account
- Enter App ID 730 and a memo (e.g. “My CS2 Server”)
- Copy the token and add it to
server.cfgvia PufferPanel File Manager:
sv_setsteamaccount YOUR_GSLT_TOKEN
Restart the server in PufferPanel for the change to take effect.
Step 5 – Configure Domain and SSL (Optional)
To access PufferPanel via your own domain with a trusted SSL certificate:
- Create an A record in your DNS settings pointing your domain to the server IP
- Wait for DNS propagation
- Connect via SSH and run:
/opt/setup/get-ssl.sh your-domain.com
After completion, PufferPanel is available at https://your-domain.com.
Post-Installation
Workshop Maps
Load custom maps from the Steam Workshop. In the PufferPanel console, type:
host_workshop_map WORKSHOP_MAP_ID
For a workshop map collection:
host_workshop_collection COLLECTION_ID
Find map IDs on the Steam Workshop – the ID is the number at the end of the workshop URL.
RCON Commands
You can also manage the server from inside CS2. Press ` to open the console:
rcon_password your_rcon_password
rcon changelevel de_mirage
rcon mp_maxrounds 30
rcon status
rcon kick playerName
Server Configuration
The main configuration file is game/csgo/cfg/server.cfg. Edit it via PufferPanel File Manager. Common settings:
| Setting | Description |
|---|---|
hostname | Server name shown in the server browser |
sv_password | Server password (empty = public) |
rcon_password | Remote console password |
sv_setsteamaccount | GSLT token for public server listing |
mp_maxrounds | Max rounds per half |
mp_roundtime | Round time in minutes |
After editing, restart the server in PufferPanel for changes to take effect.
Fail2Ban – Brute-Force Protection
Your server comes with Fail2Ban pre-configured to protect SSH from brute-force attacks.
| Rule | Max Attempts | Ban Duration |
|---|---|---|
| SSH | 5 failed logins | 1 hour |
Useful commands:
# Check banned IPs
fail2ban-client status sshd
# Unban an IP
fail2ban-client set sshd unbanip 1.2.3.4
If you accidentally lock yourself out, open the Console on your server’s Overview tab in the client portal and unban your IP.
Service Management
Day-to-day CS2 server actions happen in PufferPanel. For the panel itself and stack services:
# PufferPanel service
systemctl status pufferpanel
systemctl restart pufferpanel
journalctl -u pufferpanel -f
# Nginx reverse proxy
systemctl status nginx
systemctl reload nginx
Software Included
| Component | Version |
|---|---|
| Ubuntu | 24.04 LTS |
| PufferPanel | 3.x |
| CS2 Dedicated Server | Latest (AppID 730) |
| Nginx | Latest |
| Certbot | Latest |
| Fail2Ban | 1.0 |
Troubleshooting
| Problem | Solution |
|---|---|
| 403 Forbidden on the panel right after the server is created | The panel and SFTP stay closed until your login and password from the order are applied – wait a minute and reload. If the page still shows 403 after five minutes, setup did not complete: check /opt/setup/setup.log over SSH and reinstall the server with the Rebuild button on its Overview tab in the client portal |
| Can’t connect to CS2 server | Wait 30-60 min after first boot for CS2 files (~58 GB) to download. Check progress in PufferPanel. Verify UDP port 27015 is reachable |
| Server not visible in browser | Add a GSLT token to server.cfg (see Step 4) |
| PufferPanel shows certificate warning | The certificate for your server address could not be issued – this happens when the server is not reachable from the internet on port 80. Accept the warning, or set up a domain with SSL (Step 5) |
| Server crashes or restarts | Check the console log in PufferPanel. Ensure you have at least 4 GB RAM |
| Blocked by Fail2Ban | Use the Console on your server’s Overview tab in the client portal to unban your IP |
| Forgot root password | Use the Console on your server’s Overview tab in the client portal to reset it |