anchor.diff:  The first time you login, you will see a warning message asking if you want to add this host to your list of hosts. You should answer `yes`.
   
   You will now be able to explore your instance and perform various configuration and maintenance tasks. To exit from your login, type `exit`.
  -
  -== Kill Bill Configuration
  -
  -Kill Bill global properties are defined in `/var/lib/killbill/config/killbill.properties`. For example, this is where you can change the MySQL credentials. Take a look at our https://docs.killbill.io/latest/userguide_configuration.html[configuration guide] for more details.
  -
  -This is also where you can change the default Kill Bill admin credentials: specify `org.killbill.security.shiroResourcePath=/var/lib/killbill/config/shiro.ini` and create the `shiro.ini` file accordingly (see our https://docs.killbill.io/latest/user_management.html[RBAC guide] for more details).
   
   
   == Using HTTPS
  
positive.code: 
  The `Let's Encrypt` certifcates are only valid 90 days and will therefore neeed to be renewed. `certbot` will create a cron entry under `/etc/cron.d/certbot` to make this process automatic.
  
  == Maintenance
  
  
  
  
negative.code: * Access logs: `/var/log/nginx/access.log`
  * Error logs: `/var/log/nginx/error.log`
  
  === Diagnostic Command
  
  The `diagnostic` option of the `kpm` command creates an extensive report for a given tenant that may be useful for troubleshooting. To run this command:
  
  ```
  # Login as 'tomcat'
  > sudo su - tomcat
  #
  # Run the command with your access credentials:
  #
  > kpm  diagnostic \
    --killbill-credentials=ADMIN PASSWORD \
    --bundles-dir=/var/lib/killbill/bundles \
    --database-name=killbill \
    --database-credentials=DBUSER DBPASS \
    --killbill-api-credentials=KEY SECRET \
    --kaui-web-path=/var/lib/tomcat/webapps2 \
    --killbill-url=http://127.0.0.1:8080 \
    --database-host=127.0.0.1:3306
  ```
  
  You will need to edit this command to include:
  
  1. Your KAUI username and password (ADMIN PASSWORD)
  2. Your database credentials (DBUSER DBPASS)
  3. The key and secret key for your tenant (KEY SECRET)
  
  The last line of the response should look like:
  
  `Diagnostic data is exported under /tmp/killbill-diagnostics-20200213-23204-u93ah5/killbill-diagnostics-02-13-20.zip`
  
  The specified zip file contains several reports of various sizes. This report can be downloaded to your computer using `sftp` and forwarded to Kill Bill for analysis.
  
  === Databases
  
  