Table of Contents

Counter-Strike 2 Server - Getting Started Guide

Your CS2 server based on Ubuntu 24.04 comes with PufferPanel – a web-based game server management panel. Use it to manage your CS2 dedicated server through a browser: start/stop the server, access the live console, edit configuration files, and monitor resources. No SSH required for day-to-day server management.


Step 1 – Verify PufferPanel Works

Your server’s IP address and root password are shown in the Server Information section on the Overview tab of your server in the client portal. The CS2 Panel Admin Email and CS2 Panel Password you entered when ordering are shown in the CS2 Credentials card on the same tab. The panel is already accessible by IP address. Open your browser and go to:

https://your.server.ip

PufferPanel login:

  • Email: the e-mail address you entered when ordering (it is your panel login)
  • Password: the CS2 Panel Password you set when ordering (shown in the CS2 Credentials card on the Overview tab of your server)

CS2 server settings (generated for your server):

  • RCON password – for remote server management from the game console

The panel opens over HTTPS with a certificate issued for your server address, so no browser warning appears. If your server is not reachable from the internet on port 80, the certificate cannot be issued and the browser shows a warning for a self-signed certificate – accept it and log in. You will see your CS2 Server in the server list. All credentials are also saved on the server in /root/.cs2_credentials.

Note: On first boot, CS2 server files (~58 GB) are being downloaded. This can take 30-60 minutes depending on your server’s network speed. You can monitor the progress in PufferPanel – click on the CS2 server to see the installation status.

For the first minute after the server is created the panel answers 403 Forbidden and SFTP does not accept connections: both stay closed until your login and password from the order are applied, so nobody can get in with a temporary password. Wait a minute and reload.

If you placed the server behind a VyOS router on a private network, forward ports 22 (SSH), 443 (PufferPanel), 5657 (SFTP) and 27015 TCP and UDP (CS2 game traffic) to the server on the router’s Configuration tab (Port forwarding). The UDP port is essential – without it, players cannot connect. Behind the router the server has only a private address, so it does not get the IP certificate, so PufferPanel shows a browser warning – accept it, or forward port 80 as well and set up a domain pointed to the router’s public address (Step 5).

Firewall. If you turn on the Firewall for this server in the client portal, allow incoming TCP port 80 in its rules, along with 443 (PufferPanel) and the game ports listed above. Certificates renew over port 80 – the IP certificate every few days – and without that rule the certificate expires and the browser starts showing a warning.


Step 2 – Start the Server and Connect

Once the installation is complete, click Start in PufferPanel to launch the CS2 server. Open CS2 on your computer, press ` (tilde) to open the console, and type:

connect your.server.ip:27015

If you set a server password in server.cfg (sv_password):

connect your.server.ip:27015; password yourpassword

Step 3 – Using PufferPanel

PufferPanel provides everything you need to manage your CS2 server:

  • Console – live server output and command input. Type CS2 commands directly (e.g. changelevel de_mirage, status)
  • Files – browse and edit server files in the browser. Edit game/csgo/cfg/server.cfg to change server name, passwords, and game settings
  • Settings – change game mode, default map, and max players
  • SFTP – upload files using an SFTP client (port 5657)

Step 4 – Get a GSLT Token (Optional)

A Game Server Login Token (GSLT) is required for your server to appear in the public server browser. Without it, players can only connect via the direct IP address.

  1. Go to steamcommunity.com/dev/managegameservers
  2. Log in with your Steam account
  3. Enter App ID 730 and a memo (e.g. “My CS2 Server”)
  4. Copy the token and add it to server.cfg via PufferPanel File Manager:
sv_setsteamaccount YOUR_GSLT_TOKEN

Restart the server in PufferPanel for the change to take effect.


Step 5 – Configure Domain and SSL (Optional)

To access PufferPanel via your own domain with a trusted SSL certificate:

  1. Create an A record in your DNS settings pointing your domain to the server IP
  2. Wait for DNS propagation
  3. Connect via SSH and run:
/opt/setup/get-ssl.sh your-domain.com

After completion, PufferPanel is available at https://your-domain.com.


Post-Installation

Workshop Maps

Load custom maps from the Steam Workshop. In the PufferPanel console, type:

host_workshop_map WORKSHOP_MAP_ID

For a workshop map collection:

host_workshop_collection COLLECTION_ID

Find map IDs on the Steam Workshop – the ID is the number at the end of the workshop URL.

RCON Commands

You can also manage the server from inside CS2. Press ` to open the console:

rcon_password your_rcon_password
rcon changelevel de_mirage
rcon mp_maxrounds 30
rcon status
rcon kick playerName

Server Configuration

The main configuration file is game/csgo/cfg/server.cfg. Edit it via PufferPanel File Manager. Common settings:

Setting Description
hostnameServer name shown in the server browser
sv_passwordServer password (empty = public)
rcon_passwordRemote console password
sv_setsteamaccountGSLT token for public server listing
mp_maxroundsMax rounds per half
mp_roundtimeRound time in minutes

After editing, restart the server in PufferPanel for changes to take effect.

Fail2Ban – Brute-Force Protection

Your server comes with Fail2Ban pre-configured to protect SSH from brute-force attacks.

Rule Max Attempts Ban Duration
SSH5 failed logins1 hour

Useful commands:

# Check banned IPs
fail2ban-client status sshd

# Unban an IP
fail2ban-client set sshd unbanip 1.2.3.4

If you accidentally lock yourself out, open the Console on your server’s Overview tab in the client portal and unban your IP.

Service Management

Day-to-day CS2 server actions happen in PufferPanel. For the panel itself and stack services:

# PufferPanel service
systemctl status pufferpanel
systemctl restart pufferpanel
journalctl -u pufferpanel -f

# Nginx reverse proxy
systemctl status nginx
systemctl reload nginx

Software Included

Component Version
Ubuntu24.04 LTS
PufferPanel3.x
CS2 Dedicated ServerLatest (AppID 730)
NginxLatest
CertbotLatest
Fail2Ban1.0

Troubleshooting

Problem Solution
403 Forbidden on the panel right after the server is created The panel and SFTP stay closed until your login and password from the order are applied – wait a minute and reload. If the page still shows 403 after five minutes, setup did not complete: check /opt/setup/setup.log over SSH and reinstall the server with the Rebuild button on its Overview tab in the client portal
Can’t connect to CS2 server Wait 30-60 min after first boot for CS2 files (~58 GB) to download. Check progress in PufferPanel. Verify UDP port 27015 is reachable
Server not visible in browser Add a GSLT token to server.cfg (see Step 4)
PufferPanel shows certificate warning The certificate for your server address could not be issued – this happens when the server is not reachable from the internet on port 80. Accept the warning, or set up a domain with SSL (Step 5)
Server crashes or restarts Check the console log in PufferPanel. Ensure you have at least 4 GB RAM
Blocked by Fail2Ban Use the Console on your server’s Overview tab in the client portal to unban your IP
Forgot root password Use the Console on your server’s Overview tab in the client portal to reset it