Account

Account Management

Your Lumos Gate account gives you access to the dashboard, server management, and all platform features. This page covers account settings, security, frozen account behavior, and the deletion process.

Profile Settings

Navigate to Settings -> Profile to update your account information:

• Name -- Your display name shown in the dashboard
• Email -- Your login email address (requires email verification if changed)

Security Settings

Under Settings -> Security, you can:

• Change password -- Requires your current password. All existing sessions are invalidated after a password change. The system records when the password was changed and checks it against each session's issue time every 5 minutes. Any session issued before the password change is automatically rejected.
• View active sessions -- See where your account is logged in

Tip: Use a strong, unique password. Lumos Gate uses secure password hashing with a cryptographic salt. After changing your password, you will need to log in again on all devices.

API Keys

Under Settings -> API Keys, you can create and manage API keys for programmatic access (Pro and Enterprise plans only).

• Keys use the lmsk_ prefix for easy identification
• The full key is shown only once at creation -- copy it immediately
• Only a SHA-256 hash is stored in the database; the plaintext cannot be recovered
• A key prefix is stored for identification in the dashboard

See API Keys for detailed usage.

Notification Settings

Under Settings -> Notifications, you can configure how you receive alerts:

• Email notifications -- Available on Pro and Enterprise plans
• Webhook notifications -- Available on Enterprise plan only; configure a URL to receive JSON payloads for all alert types

Alert types include server_down, server_recovered, server_error, ssl_expiring, ssl_renewed, failover_triggered, low_balance, and account_frozen. See Notifications for the full list and payload formats.

Frozen Accounts

If your credit balance drops below the required amount during a billing deduction, your account is automatically frozen. This section explains everything about frozen mode.

What Triggers Freezing

The WebSocket server runs a billing deduction check every 5 minutes. When a deduction is due and your balance is insufficient to cover your plan's monthly price, the system:

1. Sets your profile status to "frozen"
2. Schedules a retry deduction for 24 hours later
3. Sends an account_frozen notification via your configured channels

What You Can Do While Frozen

Why Sites Stay Online During Freeze

Your shield servers operate independently once configured. The Lumos agent on each VPS has the HAProxy configuration stored locally and continues proxying traffic regardless of dashboard connectivity. Freezing only affects your ability to make changes through the dashboard or API -- it does not send any stop signal to your agents.

Emergency Domain Updates

For safety, changing origin IP addresses on existing domains is allowed even when frozen. The frozen check is bypassed for this specific operation. This ensures you can redirect traffic in an emergency (for example, if an origin server fails) without needing to deposit first.

How Freezing Works Internally

Your account has a status field with three possible values: "active", "frozen", and "deleting". The dashboard checks this status and enforces frozen mode across all pages. All mutation API endpoints verify that the account is active before allowing changes. If the account is frozen or being deleted, mutation requests return HTTP 403 with the message "Account is frozen. Renew your plan to make changes."

How to Unfreeze

Unfreezing is automatic upon deposit:

1. Navigate to Dashboard -> Settings -> Billing
2. Click Deposit and complete a payment
3. Once the blockchain transaction is confirmed, the system updates your balance
4. If your new balance >= your plan's monthly price, the account status changes from "frozen" to "active"
5. The dashboard refreshes and all mutation operations are re-enabled

No manual action is needed beyond making the deposit. See Credits -- Unfreezing for the full technical flow.

Tip: To avoid freezing, keep your balance above 2x your plan price. Set up notifications to receive low_balance alerts before it gets critical.

Account Deletion

Account deletion permanently removes all your data from Lumos Gate. This action cannot be undone.

Before Deleting

Before you delete your account, take these steps:

1. Export your configuration using Config Export. This gives you a JSON file with all your domain and server settings plus a basic HAProxy config template you can use independently.

2. Ensure all servers are online. The decommission process needs to reach your agents via WebSocket. If a server is offline during deletion, the agent will not receive the restore command. You can manually run lumos-uninstall on any server that missed the signal. See Agent CLI for uninstall instructions.

3. Check your credit balance. Any remaining credit balance is forfeited upon account deletion. There are no refunds for unused credits.

4. Understand what happens to your servers. Each agent receives a decommission command, restores the original HAProxy configuration from backup (if one exists from before agent installation), and stops the Lumos agent service. If no backup exists, the agent stops but the current HAProxy configuration remains in place.

What Happens When You Delete Your Account

1. Decommission signal sent -- All your servers receive a decommission command, and each agent restores the original HAProxy configuration from backup and stops the Lumos agent service.

2. Account marked for deletion -- Your profile status is set to "deleting". This immediately blocks all mutations (same as frozen mode). The system picks up accounts in "deleting" status and performs the cascade delete after a grace period.

3. Data cascade -- After the grace period, the following data is permanently deleted:

   • Your user account and profile
   • All server registrations and connection tokens
   • All domain configurations and domain-server associations
   • WAF rules and blocked request logs
   • Analytics and metrics data
   • API keys
   • Notification settings
   • Credit balance and transaction history
   • Payment records

How to Delete

1. Go to Settings -> Account
2. Click Delete Account
3. Confirm the deletion in the dialog
4. Your account is immediately marked for deletion and a decommission signal is sent to all servers
5. Data cascade completes after the grace period

After Deletion

• You will be logged out and cannot log back in
• Your email address is freed and can be used to create a new account
• Servers that received the decommission signal will be running their original HAProxy configuration (or the Lumos-generated config if no backup existed)
• Servers that were offline during deletion will continue running the Lumos agent until you manually uninstall it with lumos-uninstall

Recovery

There is no recovery mechanism after the grace period. Once the data cascade completes, all data is permanently gone. If you want to return to Lumos Gate after deletion, you must create a new account and set up everything from scratch (or import from a config export file if you saved one).

Account Status Summary

Next Steps

• Config Export -- Export your configuration before making changes or deleting
• Credits and Billing -- Understand the prepaid credit system and how to avoid freezing
• Plans -- Compare available plans
• Notifications -- Set up alerts for account events
• Agent CLI -- Manual agent uninstall instructions
• Troubleshooting -- Solutions for common account issues