🧪 Beta Release — See the Beta Disclaimer before use.
English | Русский
A local desktop application for managing Linux and VPS servers from Windows. ServerPilot RU connects over SSH and gives you a unified interface for everything you'd normally do through a terminal, a file manager, and a web panel — without sending your credentials anywhere.
ServerPilot RU is a Tauri-based desktop app (Rust backend + React frontend) that runs entirely on your machine. It stores all server credentials locally, encrypted with AES-256-GCM. There is no cloud account, no telemetry, and no required external service.
The primary audience is developers and sysadmins who manage one or more Linux/VPS servers and want a proper desktop tool rather than browser-based panels or juggling multiple SSH sessions.
Screenshots will be added before the stable release. The interface uses a dark theme by default.
- SSH connections with password, key file, or SSH agent (Pageant, ssh-agent) authentication
- Full PTY terminal with multi-tab support — runs nano, vim, htop, and other interactive programs
- SFTP file manager with upload, download, rename, delete, chmod, and inline Monaco editor
- Credentials encrypted locally with AES-256-GCM; never logged or transmitted
Real-time server metrics: CPU, RAM, disk, network, uptime, load average, kernel version, hostname. Color-coded thresholds (yellow at 75%, red at 90%). History charts for CPU, memory, and disk updated every 10 seconds.
Dedicated monitoring page with configurable refresh interval (3 / 5 / 10 / 30 seconds). Area charts for CPU + RAM combined, separate disk chart, load average chart. Stores up to 720 data points (roughly one hour at 5-second intervals).
Log viewer for common sources: syslog, auth.log, kern.log, nginx access/error, Apache2, MySQL, dmesg, dpkg.log, journald. Live tail mode with 3-second polling. Search with match highlighting. Log line classification by severity (error, warning, info). Download button.
Full process list via remote ps. Sortable table by PID, user, CPU%, RAM%, state, command. Detail panel. Send SIGTERM or SIGKILL with confirmation. Protected PIDs (0, 1, sshd, init, systemd) — killing sshd requires an extra warning.
Detects PM2 automatically. One-click install if not present. List with status, CPU, memory, restart count, uptime. App actions: start, stop, restart, reload, delete. Log viewer with search. Create new apps with name, script, working directory, interpreter, and arguments. Environment variable display with secrets masked.
Four tabs: Containers, Images, Volumes, Networks. Container actions: start, stop, restart, pause, unpause, remove. Live log viewer with search and tail mode. Pull and delete images. Delete volumes (with data-loss confirmation). Network inspection. Environment variables displayed with secrets masked. Auto-refresh.
Detects existing Git repositories. Shows repo status including uncommitted changes. git clone and git pull with confirmation before pulling over uncommitted changes. Deployment history (last 50 records in localStorage). Desktop notifications on success and failure. "Open in Files" shortcut.
Detects Nginx installation. Lists all sites from sites-available and conf.d. Per-site actions: enable, disable, delete config entry (without touching the file), reload Nginx, test config. Inline Monaco editor with backup/restore support.
Integrated SSL management inside the Nginx section. Detects Certbot. Shows certificate status, issuer, expiry date, and days remaining. Obtain new certificates with domain and email input. Dry-run test before issuing. Auto-renewal status. Desktop notifications for expiring and expired certificates.
Runs a server-side security audit via the Rust backend. Results grouped by category with a score gauge (0–100). Filter by status: all / critical / warning / passed / unknown. Animated scan progress. Quick-fix actions where applicable.
Script manager backed by SQLite. CRUD with name, description, command, and {{variable}} placeholder support (prompted on run). Risk auto-classification using the same logic as the AI assistant. Per-script run history. Variables are passed to the Rust side and resolved there — the frontend never constructs shell commands by concatenation.
Creates tar.gz archives on the server via SSH, then downloads via SFTP. Checks free disk space before creating. Download dialog via Tauri fs plugin. Desktop notification on failure. Filter by server and status. History stored in SQLite.
Desktop notifications (Windows native) for: server offline, high CPU/RAM/disk, SSL expiring/expired, backup failure, deployment failure/success. Configurable thresholds per metric. Anti-spam: CPU/RAM/Disk notify only on the first threshold breach and again only after the value drops back below the threshold.
Connects to any OpenAI-compatible API endpoint: OpenAI, Ollama, LM Studio, vLLM, or your own server. Step-by-step diagnostic mode — AI proposes one command at a time, you review the risk level and choose to execute or skip. Security: server data (metrics, logs, command output) is always injected as a separate user message marked [SERVER DATA], never in the system prompt — this prevents prompt injection through log content. The API URL is validated (http/https only); API keys are stored in sessionStorage (cleared on app close; old localStorage values are migrated automatically on first launch).
- Credentials encrypted at rest — AES-256-GCM with a per-installation key derived via SHA-256
- No shell injection — all commands are validated on the Rust side; the frontend cannot construct arbitrary shell strings
- No logging of secrets — passwords, keys, and tokens are never written to the log file
- Prompt injection protection — server data is isolated from the AI system prompt
- No mandatory cloud — the app functions entirely offline; no account or license server required
- Local-only storage —
%LOCALAPPDATA%\ServerPilotRU\data.db+logs\app.log; nothing leaves your machine unless you explicitly trigger an AI call
ServerPilot RU does not collect usage data, does not send analytics, and does not require an account. The only outbound network connections are:
- SSH connections to your own servers
- AI API calls — only when you explicitly trigger them, to the endpoint you configure
- Windows 10 or Windows 11 (x64)
- WebView2 runtime (included in Windows 11; available as a free download for Windows 10)
- Your servers must be reachable over SSH
Download the latest .exe installer from the Releases page and run it.
WebView2 is required. It is included in Windows 11. On Windows 10, download the WebView2 Runtime from Microsoft if prompted.
No additional dependencies needed.
Download the installer from Releases, install it, and use the app with your own servers.
If you find a bug or want to suggest a feature — open an Issue.
See RELEASE_TEST_PLAN.md for a detailed test checklist.
- Windows only for now — macOS and Linux builds are possible with Tauri but not yet configured
- Large files (> 2 MB) cannot be opened in the inline editor — download and edit locally
- PTY terminal opens a separate SSH connection per tab
- Some Nginx/SSL features assume a Debian/Ubuntu server layout
- KDF uses SHA-256(MachineGUID + AppID); hardening to PBKDF2/Argon2id is planned for the stable release
- SSH host-key pinning is not yet implemented (fingerprint is shown but not stored/verified)
The source code is open. Pull requests are welcome — see CONTRIBUTING.md for build instructions, project layout, and the PR checklist. Fork the repo, branch from main, and keep one feature/fix per PR.
Use Issues for bug reports and feature requests, and Discussions for questions and ideas.
ServerPilot RU is currently a Beta release. It is intended for testing and evaluation. The app is stable for everyday use, but unexpected issues may still occur. Always keep independent backups of anything important.
The SQLite database, credential storage format, and configuration structures may change between Beta versions without a migration path — export your server list from Settings → General before upgrading.
- Open an Issue on GitHub for bug reports and feature requests
- The project is in active development — feedback at this stage is especially valuable
ServerPilot RU is free and open source under the MIT License. If it saves you time and you want to support continued development:
| Method | Details |
|---|---|
| 🌍 CloudTips (card, international) | pay.cloudtips.ru/p/62be13c3 |
| 🌐 Capitalist (international e-wallet) | Send to account U22338724 at capitalist.net |
Any amount is appreciated. There is no obligation — the app is and will remain free and open source.
| Project | Description | |
|---|---|---|
| S | SerpMax | SEO and website auditing platform — technical analysis, monitoring, and search optimization |
| V | Vibes | Links, bio pages, QR codes, and digital marketing tools |
| Z | zmega @ Vibes | Author's bio page — links, projects, and contacts |
ServerPilot RU · Beta · Local-first SSH desktop tool for Windows