Web-based SSH/SFTP · accounts, vault, keychain & more
Route SSH connections through a bastion (SSH), SOCKS5, or HTTP-CONNECT proxy. Credentials stay on this admin account; users just pick a gateway when adding a server.
Credentials are encrypted before being stored. When editing, leave password/key blank to keep the current one.
Tunnels run on this machine (127.0.0.1) through the SSH session.
Your vault is re-encrypted under the new password automatically. Every other signed-in device will be signed out.
Add this secret to your authenticator app (Google Authenticator, Authy, 1Password…), then enter the 6-digit code.
Any OpenAI-compatible chat endpoint works — a self-hosted Ollama (https://host/v1), OpenAI, or a local llama.cpp server. The key is stored encrypted and never counts against the shared limit.
This endpoint powers Ask AI for every account that hasn't set up its own. The key is stored encrypted. Point it at your self-hosted Ollama /v1 or any OpenAI-compatible API.
Each line will run in the shell as soon as it lands — review before pasting.
Route SSH connections through this proxy. Credentials are encrypted and stored on the admin account only.