Web Console Workflows
The Vaulthalla web console is the browser-based control surface for most operator tasks. It is not an arbitrary host shell. It sends authenticated WebSocket commands to the Vaulthalla daemon and exposes supported workflows through pages, forms, tables, and file actions.
Web Console Versus CLI
| Task | Web console | CLI |
|---|---|---|
| View runtime health | Dashboard | vh status |
| Browse files | Filesystem page | /mnt/vaulthalla and vault commands |
| Create vaults | Vaults page | vh vault create ... |
| Manage S3/R2 API keys | API Keys page | vh api-key ... |
| Manage users and groups | Users and Groups pages | vh user ..., vh group ... |
| Manage roles | Admin Roles and Vault Roles pages | vh role ..., vh vault role ... |
| Manage shares | Shares page and filesystem share action | Web-first workflow |
| Manage price budgets | Cost Control page | vh pricing budget ... |
| Configure operator email | Operator Email page | vh email ... |
Use the CLI for lifecycle commands, recovery exports, automation, and host-local troubleshooting. Use the web console for interactive administration, filesystem browsing, dashboards, shares, and policy editing.
Dashboard
The Dashboard area summarizes runtime health, filesystem activity, storage, operations, and trends. It can show setup advisories, such as an unbound CLI admin UID, without marking the whole runtime unhealthy.
Treat dashboard backup/recovery indicators as status signals. They do not prove a real backup has completed.
Filesystem
The Filesystem page lets authenticated users browse and act on vault files according to their vault roles. Available actions depend on permissions and context.
Typical actions include:
- Preview.
- Download.
- Upload.
- Copy.
- Delete.
- Share.
If an action is missing or denied, check the user's vault role and any path overrides.
Vault Management
The Vaults page supports local and S3/R2 vault creation. For S3/R2 vaults, the form includes:
- API key.
- Bucket.
- Storage tier.
- Sync strategy.
- Conflict policy.
- Sync interval.
- Upstream encryption.
- Request-budget preset or custom limits.
- Maximum remote-index age.
After creating or editing an S3/R2 vault, confirm the policy from the CLI:
1vh vault sync info <vault>Cost Control
The Cost Control page manages price budgets. Request budgets remain part of each S3/R2 vault sync policy.
Use the CLI when you need scriptable checks:
1vh pricing budget status2vh pricing budget ledger --limit 1003vh vault sync dry-run <vault>Shares
The web console is the primary share workflow. It creates the one-time public URL or email-validated share URL, lets operators rotate links, and restricts share-mode file actions to the share role.
See Sharing.
Operator Email
The Operator Email page configures notification providers and checks delivery history. Use it with CLI smoke tests:
1vh email doctor2vh email test --dry-run3vh email history --limit 100When To Use The CLI Instead
Use vh instead of the web console for:
- Package lifecycle setup and teardown.
- Admin Linux UID assignment.
- Database bootstrap and remote database setup.
- Nginx and Certbot setup.
- Vault key and internal secret exports.
- Shell-based automation.
- Recovery and low-level service troubleshooting.