Counter-Strike 2 Server - Getting Started Guide
Your CS2 server based on Ubuntu 24.04 comes with PufferPanel - a web-based game server management panel. Use it to manage your CS2 dedicated server through a browser: start/stop the server, access the live console, edit configuration files, and monitor resources. No SSH required for day-to-day server management.
Step 1 - Verify PufferPanel Works
Your server's IP address and root password are shown on the Server Details page in your client panel. The panel is already accessible by IP address. Open your browser and go to:
https://your.server.ip
PufferPanel login:
- Email:
admin@panel.local - Password: your root password
CS2 server settings (configured during the order):
- RCON password - for remote server management from the game console
Accept the self-signed certificate warning and log in. You will see your CS2 Server in the server list. All credentials are also saved on the server in /root/.cs2_credentials.
If you placed the server behind a VyOS router on a private network, set up port forwarding for ports 22 (SSH), 443 (PufferPanel), 5657 (SFTP) and 27015/UDP (CS2 game traffic). The UDP port is essential - without it, players cannot connect.
Step 2 - Start the Server and Connect
Once the installation is complete, click Start in PufferPanel to launch the CS2 server. Open CS2 on your computer, press ` (tilde) to open the console, and type:
connect your.server.ip:27015
If you set a server password during the order:
connect your.server.ip:27015; password yourpassword
Step 3 - Using PufferPanel
PufferPanel provides everything you need to manage your CS2 server:
- Console - live server output and command input. Type CS2 commands directly (e.g.
changelevel de_mirage,status) - Files - browse and edit server files in the browser. Edit
game/csgo/cfg/server.cfgto change server name, passwords, and game settings - Settings - change game mode, default map, and max players
- SFTP - upload files using an SFTP client (port 5657)
Step 4 - Get a GSLT Token (Optional)
A Game Server Login Token (GSLT) is required for your server to appear in the public server browser. Without it, players can only connect via the direct IP address.
- Go to steamcommunity.com/dev/managegameservers
- Log in with your Steam account
- Enter App ID 730 and a memo (e.g. "My CS2 Server")
- Copy the token and add it to
server.cfgvia PufferPanel File Manager:
sv_setsteamaccount YOUR_GSLT_TOKEN
Restart the server in PufferPanel for the change to take effect.
Step 5 - Configure Domain and SSL (Optional)
To access PufferPanel via your own domain with a trusted SSL certificate:
- Create an A record in your DNS settings pointing your domain to the server IP
- Wait for DNS propagation
- Connect via SSH and run:
/opt/setup/get-ssl.sh your-domain.com
After completion, PufferPanel is available at https://your-domain.com.
Post-Installation
Workshop Maps
Load custom maps from the Steam Workshop. In the PufferPanel console, type:
host_workshop_map WORKSHOP_MAP_ID
For a workshop map collection:
host_workshop_collection COLLECTION_ID
Find map IDs on the Steam Workshop - the ID is the number at the end of the workshop URL.
RCON Commands
You can also manage the server from inside CS2. Press ` to open the console:
rcon_password your_rcon_password
rcon changelevel de_mirage
rcon mp_maxrounds 30
rcon status
rcon kick playerName
Server Configuration
The main configuration file is game/csgo/cfg/server.cfg. Edit it via PufferPanel File Manager. Common settings:
| Setting | Description |
|---|---|
hostname | Server name shown in the server browser |
sv_password | Server password (empty = public) |
rcon_password | Remote console password |
sv_setsteamaccount | GSLT token for public server listing |
mp_maxrounds | Max rounds per half |
mp_roundtime | Round time in minutes |
After editing, restart the server in PufferPanel for changes to take effect.
Fail2Ban - Brute-Force Protection
Your server comes with Fail2Ban pre-configured to protect SSH from brute-force attacks.
| Rule | Max Attempts | Ban Duration |
|---|---|---|
| SSH | 5 failed logins | 10 minutes |
Useful commands:
# Check banned IPs
fail2ban-client status sshd
# Unban an IP
fail2ban-client set sshd unbanip 1.2.3.4
If you accidentally lock yourself out, connect via VNC console in your client panel and unban your IP.
Service Management
Day-to-day CS2 server actions happen in PufferPanel. For the panel itself and stack services:
# PufferPanel service
systemctl status pufferpanel
systemctl restart pufferpanel
journalctl -u pufferpanel -f
# Nginx reverse proxy
systemctl status nginx
systemctl reload nginx
Software Included
| Component | Version |
|---|---|
| Ubuntu | 24.04 LTS |
| PufferPanel | 3.x |
| CS2 Dedicated Server | Latest (AppID 730) |
| Nginx | Latest |
| Certbot | Latest |
| Fail2Ban | 1.0 |
Troubleshooting
| Problem | Solution |
|---|---|
| Can't connect to CS2 server | Wait 30-60 min after first boot for CS2 files (~58 GB) to download. Check progress in PufferPanel. Verify UDP port 27015 is reachable |
| Server not visible in browser | Add a GSLT token to server.cfg (see Step 4) |
| PufferPanel shows certificate warning | This is normal with the self-signed certificate. Accept the warning or set up a domain with SSL (Step 5) |
| Server crashes or restarts | Check the console log in PufferPanel. Ensure you have at least 4 GB RAM |
| Blocked by Fail2Ban | Use VNC console in your client panel to unban your IP |
| Forgot root password | Use VNC console in your client panel to reset it |