# noust console

Publish the console on a name of its own, over TLS, or take it off again.

```bash
noust console [OPTIONS] COMMAND [ARGS]...
```

Subcommands: [`expose`](#noust-console-expose), [`status`](#noust-console-status), [`unexpose`](#noust-console-unexpose)

## noust console expose

Open the console at https://DOMAIN, with a certificate, instead of an SSH tunnel.

```bash
noust console expose [OPTIONS]
```

| Option | What it does | Default |
|---|---|---|
| `--domain` | The public name, already pointing at this server (console.example.com). |  |
| `--allow-ip` | Only these addresses or networks may reach the console. Repeatable. Without it anyone can open the sign-in page; the second factor is then all that stops them. |  |
| `--force-ens` | Publish although the ENS profile is on (it keeps the console on loopback). Asks for confirmation, needs --allow-ip, and is audited. |  |
| `--skip-dns-check` | Do not require the name to resolve to this server's addresses (a server behind NAT). |  |
| `-y`, `--yes` | Do not ask for confirmation. |  |
| `--json` | Print the outcome as JSON. |  |
| `--reason` | Why this change is made (a change reference, a ticket). Recorded with the command in the audit log; required only where a compliance framework asks for it (ENS) or security.change_reasons is on. |  |

## noust console status

Show whether the console is published, where, and whether it is still in place.

```bash
noust console status [OPTIONS]
```

| Option | What it does | Default |
|---|---|---|
| `--json` | Print the state as JSON. |  |
| `--reason` | Why this change is made (a change reference, a ticket). Recorded with the command in the audit log; required only where a compliance framework asks for it (ENS) or security.change_reasons is on. |  |

## noust console unexpose

Take the console off its public name, back to an SSH tunnel only.

```bash
noust console unexpose [OPTIONS]
```

| Option | What it does | Default |
|---|---|---|
| `-y`, `--yes` | Do not ask for confirmation. |  |
| `--json` | Print the outcome as JSON. |  |
| `--reason` | Why this change is made (a change reference, a ticket). Recorded with the command in the audit log; required only where a compliance framework asks for it (ENS) or security.change_reasons is on. |  |