Install open-source software on your Raspberry Pi or Mac Mini — we take care of the tunnel, SSL, and domain.
No cloud account. No port forwarding. No Docker knowledge required. Your data stays on your hardware.
obacht is currently in closed beta. Sign up for the waiting list for early access.
You want to run a small site, a sensor, an installation, a tool for a workshop — on hardware that's yours. But somewhere between SSH, Docker, Caddy, certificates and dynamic DNS, the project stalls.
Obacht is the missing operating layer for a single small device. Flash an SD card by drag-and-drop, install signed templates from the dashboard, point a domain at a service and get HTTPS automatically. The device runs on your network. The control plane lives in your browser.
Pick a template, get it running on your device, keep an eye on it, and optionally make it reachable under your own domain.
Signed templates for real apps
Self-hosted web app
manifest v2 · containerised · v1.4.0
A growing catalogue of ready-to-run setups: web apps and CMSs, collaborative tools, monitoring and status pages, static sites, fullscreen kiosks, video loopers — and your own. Templates are signed, run in containers, and use a configurable, versioned manifest.
Access and visibility when you need them
Browser terminal, file browser, host metrics (CPU, RAM, disk, temperature), service actions and an audit log of what happened on the device — all without VPN setup or port forwarding.
Your domain, automatic HTTPS
DNS check
A · 203.0.113.42 · matches obacht proxy
Bind to local port
pi-01 · :3000 → studio-tools.example
Issue Let's Encrypt certificate
ACME · auto-renew
Connect a domain you own, bind it to a service running on your device, and Obacht handles routing and Let's Encrypt certificates. Nothing is public until you say so. No router config, no static IP.
New devices boot in restricted mode: signed templates only, no arbitrary commands, audit log on every change. When you want full control, you unlock power-mode explicitly — and you can lock it back down whenever you like.
The default. Install signed templates, configure them through the UI, get monitoring and alerts. The device stays on a tight leash.
Unlock to get a full browser terminal, run arbitrary commands, edit files, manage services. Every change is recorded in the audit log.
Templates run on your device. Files live on your SD card or USB drive. Traffic to your domain is routed, not stored. Obacht is the operating layer — your project stays yours.
How it works
01
Download the install bundle, drop it onto the SD card, power on. The Pi registers itself within minutes and shows up in the dashboard. No command line required.
02
Browse the template catalogue, pick something — a CMS, a collaborative workspace, a kiosk, a status page. One click installs and configures it on your device.
03
Enter your domain — SSL is issued automatically, traffic is routed to your device. Reachable from anywhere, no router config needed.
Why Obacht
WireGuard VPN between your device and Obacht. No port forwarding, no Cloudflare account required. Your device stays invisible on the internet.
Web apps, CMSs, collaborative tools, kiosks and more. One click installs. No Docker knowledge required.
A fixed amount per installed template goes directly to the developers. Obacht earns nothing from it — with a transparent breakdown in the dashboard.
obacht is currently in closed beta. Sign up for the waiting list for early access.
Sign up for the waiting list