Closed pilot
Run open-source apps on a computer you own: a Raspberry Pi, a Linux machine or a Mac that is on anyway. Every app gets a web address that works from anywhere.
Your data stays on your hardware. No port forwarding, and no Docker to look after.
How a visit reaches you
01
vault.mara.obacht.space, on your phone, from anywhere.
02
Obacht looks up which device it belongs to. That's all it looks at.
03
Encrypted the whole way, through a connection your device opened itself.
04
At home, with your data. Nothing to forward on the router.
Why
You want your own website, a password manager or a tool for your team, on hardware that's yours. Somewhere between SSH, Docker, certificates and dynamic DNS the project stalls.
The homelab way
With Obacht
Obacht does the part in between. Pick an app and it installs with a web address and HTTPS already working. The device sits at your place. You run it from the browser.
How it works
Pick an app, get it running on your device, keep an eye on it and open it from anywhere.
Pi: flash the SD card, copy the install bundle on and power on. Linux: run one command. Mac: install the app and click “Register this Mac”. A few minutes later it shows up in your browser.
A password manager, a blog, a survey tool, a wiki. Fill in a few settings and it installs. No command line.
Each app gets an address under your-name.obacht.space, with HTTPS. Scan the QR code or share the link. Got your own domain? Add it later.
What you get
Obacht does the chores around your apps, so the device can sit in a cupboard and you can forget about it.
Pick from a catalogue of signed apps. Fill in a few settings, done. No terminal, and the containers look after themselves.
Every app gets its own address with HTTPS, ready the moment it's installed. Bring your own domain if you like.
Put a login in front of any address with one switch. Handy for things only you should see.
CPU, memory and disk at a glance, for every device you own.
Disk filling up, device gone quiet, app stopped. You hear about it, the rest of the time it's quiet.
Apps and the agent are signed. Your device checks every signature before anything changes.
Runs on
A Raspberry Pi, an old laptop, a mini PC from the drawer, or the Mac that's on anyway. If it runs Linux or macOS on Apple silicon, it can run Obacht.
Flash Raspberry Pi OS onto an SD card, copy the bundle on, plug it in, and it shows up a few minutes later. Plenty for a site, a CMS or a password manager.
Apps
Password manager, website, notes, AI chat, file sharing. 62 open-source apps right now, sorted by what they're for.
Your own cloud
Be visible online
Organise and get things done
Design and create
Your own AI
For tinkerers and developers
For the Raspberry Pi
Two views
Most people never need more than apps and addresses. If you do, it's one switch in the menu, and the same account shows you everything underneath.
For everyone
A store, one install sheet, a web address with a QR code. That's it.
For tinkerers
Terminal, files, telemetry, services, your own domains. Every change lands in the audit log on the device.
Ownership
Apps run on your device. Files live on your SD card, your disk or your Mac. Traffic to your address passes through. We store none of it. If Obacht went away tomorrow, your apps and their data would stay with you and keep running at home.
Security
Encryption ends on your device, not on our servers. Installs and settings are signed in your browser, with a key we never see.
Read the security architectureOpen source
Where a project can take money, part of what you pay goes straight to it. Every app page says where.
How the money flowsObacht is in a closed pilot phase. Put yourself on the list. We let people in a few at a time, so it can take a while.