Documentation

Web console

Everything you can set with flags is also in a small page the bridge serves to your own browser: its status, how phones can reach it, pairing, paired devices, settings, the relay and the certificate. The CLI stays the primary interface; both edit the same config.json.

Open it

herdr-remote up and serve start the console at http://127.0.0.1:8790 (or the next free port) and, in a desktop terminal, open it in your browser already signed in. A bridge started as a service or over SSH doesn’t open a browser; ask it for a link instead:

Terminal
herdr-remote console
Output
http://127.0.0.1:8790/#launch=…

The link works once and for two minutes, then the browser keeps a session for twelve hours. To turn the console off, start with --no-console or set "console": false in the config (the console has the same switch). The console ships with bridge 0.1.25 and later.

Bridge console with status, how phones reach this computer, pairing and devices
The console of a bridge running plain terminals and joined to a relay, with two paired devices. Network addresses replaced with example values.

What’s in it

  • Bridge
    Running state, the name phones see, backend, listening port, saved address, number of paired devices.
  • Reaching this computer
    Local network addresses, nearby discovery, relay connection, which relay credentials are admitted, and relay activity.
  • Pair a phone
    Shows a pairing QR code for read or control access, valid 5 minutes to an hour.
  • Devices
    Every paired phone with its access; rename or revoke it.
  • Settings
    Name, port, listen address, backend, Herdr program and session, nearby discovery and its access, home-network route, console on/off and port. Saving restarts the bridge in place.
  • Relay
    Join a relay by pasting its profile, or leave it.
  • Certificate
    Fingerprint and expiry; renew early. Paired phones move to the new certificate by themselves.

Light, dark and narrow screens

The console follows your system’s light or dark appearance and fits a phone-width window.

Bridge console in dark appearance
Dark appearance
Bridge console at phone width
Phone width

Who can open it

  • It listens on 127.0.0.1 only: other machines, your phone and the relay can’t reach it.
  • A browser gets in only through a one-time link that only your user account can create, then holds an HttpOnly, SameSite=Strict session cookie.
  • Every change checks the Host and Origin headers and a CSRF token, so other web pages can’t drive it. Responses never contain device tokens, relay secrets or private keys.

Using it from another computer

Forward the port over SSH, then ask the bridge for a link:

Terminal
ssh -L 8790:127.0.0.1:8790 you@your-computerherdr-remote console      # on that computer; open the link locally

Don’t screenshot a pairing QR code

The QR code the console shows is a one-time secret. Anyone who scans it before it expires can pair a device.

WhatsApp