NEXODER
●  v0.5  ·  local-only

Your servers, your terminal,
nothing exposed

Nexoder is a rack-style dashboard for your Linux VPS fleet that lives entirely in your terminal. It speaks plain SSH with the keys you already have.

works over stock OpenSSHzero telemetry
The dashboard screen. One SSH round-trip per refresh, every 15 seconds.
// WHY NEXODER

Three zeros your monitoring stack can't offer

Every mainstream monitoring tool wants to live on your server, open a port, or ship your metrics to someone's cloud. Nexoder refuses all three.

0

agents installed

Nothing to deploy, update, or clean up on the server. Nexoder runs on your machine and reads metrics through one batched SSH command per refresh.

0

ports exposed

No web dashboard listening on :19999, no /metrics endpoint to firewall. Your attack surface stays exactly what it was: sshd, which you already run.

0

bytes leave your machine

No cloud, no accounts, no telemetry, no phone-home. Server records live in an encrypted SQLite vault in your local config directory.

// SCREENS

The whole app, four keystrokes deep

Unlock, pick a box in the rack, read the dashboard, audit what auto-starts at boot. Full keyboard navigation, no mouse required.

The rack. Reachability probes every box on :22 with a 2 second timeout.
One master password. Argon2id to a key, held in memory only.
Boot-persistence audit: everything that survives a reboot, and as whom it runs.
// FEATURES

A full ops cockpit in one TTY

Built for people who run 1 to 30 boxes and refuse to stand up Grafana for their own infra.

[rack]

Multi-server rack view

Every box in one table with a live reachability LED and a last-known snapshot. Stop cycling through ssh sessions to answer "is everything up?"

[1 round-trip]

Batched refresh

The whole dashboard - OS info, load, CPU, RAM, disk, services, processes - arrives in a single bash round-trip every 15 seconds.

[top -100]

Process table + pinning

Top 100 processes sortable by CPU or memory. Pin the ones you care about; they float to the top and persist across reconnects.

[enter]

One-key service restart

Hit Enter on a process and Nexoder resolves its systemd unit via /proc cgroups and restarts it. The only write action, and an explicit one.

[e]

Enabled-units audit

See everything that auto-starts at boot: unit, active state, running user, vendor preset. Find the cron-miner before it finds you.

[vault]

Encrypted local vault

One master password unlocks all your server records. Argon2id key derivation, AES-GCM at rest, key held in memory only.

// SECURITY MODEL

Paranoid by construction

Nexoder is a desktop tool. There is no server component to breach, no SaaS custodian of your data, no third party in the loop.

Argon2id + AES-GCM vaultSSH passwords and key passphrases are encrypted at rest with a key derived from your master password.
Master password lives in RAM onlyEntered once per session, cached in memory, never written to disk in any form.
Read-only by designEvery collector is a read command. The single exception - service restart - is an explicit keypress on an explicit unit.
Your existing SSH trustKeys, agents, and known_hosts you already maintain. Nexoder adds no new credentials to your servers.

Monitor the fleet, keep the perimeter

Public release is in the works.