Skip to content

About

Self-hosted homelab dashboard: OS updates, CVE scan, SMART disk health, Proxmox VMs & backups, FRITZ!Box/OpenWrt/OPNsense routers. Agentless (SSH + APIs), 2FA, one-command Proxmox install. Hardened supply chain: signed releases with SLSA provenance, OpenSSF Scorecard, CodeQL, fuzzing.

Topics

Resources

Code of conduct

Contributing

Security policy

Accessibility

Stars

7 stars

Watchers

0 watching

Forks

Latest commit

 

History

434 Commits

Folders and files

NameName
Last commit message
Last commit date
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Testers wanted: run FleetPilot in your homelab and tell us what breaks. Proxmox, TrueNAS, Unraid, FRITZ!Box, OpenWrt, OPNsense, Windows machines and the Android app.

FleetPilot needs testers. It's tested against an emulated homelab, but nothing beats real hardware.
Install it, or just try the live demo, and tell us what works and what doesn't:
🐞 Report a bug · 💬 Share how it went · Open issues


FleetPilot

One self-hosted dashboard for your homelab: servers, Proxmox, routers, disks and backups.

Updates for Linux and Windows machines, SMART disk health, FRITZ!Box / OpenWrt / OPNsense routers, Proxmox VMs, TrueNAS and Unraid, backup servers and fans. Agentless over SSH and APIs, with 2FA, audit trail and a one-command Proxmox install.

Release Tests OpenSSF Scorecard OpenSSF Baseline OpenSSF Best Practices License: GPL-3.0-or-later Python 3.11+ AI-written code

⭐ Star FleetPilot on GitHub if it's useful to you: it helps others find it, and community-scripts.org lists apps from 600 stars.

FleetPilot routers page: FRITZ!Box, repeater, OpenWrt and OPNsense with status, firmware, uptime and connected devices

▶ Try the live demo · Website · Install · Features · User guide · Security

The live demo is the real FleetPilot running in your browser against an emulated homelab. Nothing leaves your browser.


Features

Hosts and updates Linux (Debian/Ubuntu and derivatives, Fedora/RHEL family, openSUSE, Arch, Alpine and more) and Windows 10/11 and Server 2016–2025 (details) over SSH: updates with live output, schedules and history
Vulnerability scan Known CVEs in server packages (OSV.dev), Docker images (Trivy) and pfSense/OPNsense, with severity, fixed version and daily alerts
Disks SMART health and tests, formatting, block validation, alerts before a disk dies
Proxmox, storage, backups Proxmox VMs and containers, TrueNAS and Unraid, Proxmox Backup Server, Duplicati, restic, UrBackup and more
Routers FRITZ!Box and Repeater (Mesh), OpenWrt, OPNsense, pfSense, MikroTik, VyOS and more: status, devices, firmware checks, encrypted backups (details)
Hardware Live CPU, memory and temperatures, fan control, Wake-on-LAN, scheduled shutdowns
Security 2FA (TOTP, passkeys, YubiKey), roles (Admin / Operator / Viewer), sessions, scoped API tokens, tamper-evident audit trail, security center (SECURITY.md)
Integrations Prometheus /metrics, CheckMK, Home Assistant (component), REST API, plugins, public status page, Android app (beta)
For everyone English, Deutsch, Français, Español, Nederlands, Italiano; WCAG 2.2 AA, high contrast, easy language (accessibility)
Home
Home page with service map and server states
SMART disk health
SMART dashboard with one disk warning about reallocated sectors
FRITZ!Box details
FRITZ!Box detail page with uptime, updates and connected devices
Security center
Security center checks such as HTTPS, 2FA for admins and backups

Quick Start

Proxmox VE, in the Shell of your node. Creates an unprivileged Debian container with HTTPS and prints the address and admin password:

bash -c "$(curl -fsSL https://raw.githubusercontent.com/ChristianHandy/FleetPilot/main/proxmox/fleetpilot-lxc.sh)"

Debian, Ubuntu or Raspberry Pi OS, as root. Then open https://<server-ip> and sign in as admin with the password the installer shows:

curl -fsSL https://raw.githubusercontent.com/ChristianHandy/FleetPilot/main/install.sh | bash

Guides: installation (options, your own certificate, updates, backups, troubleshooting) and user guide, also in Deutsch and 简体中文 (all guides and PDFs). Development setup: CONTRIBUTING.md.


Security and supply chain

FleetPilot holds the keys to your machines, so it's built and released with care: a read-only install with an unprivileged service user; CodeQL, Bandit, zizmor and about 860 tests on every change; fuzzed parsers; every dependency locked by hash and audited; every action pinned to a commit; GPG-signed tags; releases with an SBOM, checksums and Sigstore-signed build provenance (gh attestation verify fleetpilot-X.Y.Z.tar.gz --repo ChristianHandy/FleetPilot). Details and how to report a vulnerability: SECURITY.md.


How much of FleetPilot is written by AI?

Chart: bars show the share of changed lines per month written with AI assistance, a line shows the share of all code at each month's end, and a note says whether it is going up or down. Values: https://christianhandy.github.io/FleetPilot/ai-share.json

Too much, and it needs to go down. Most of FleetPilot so far was written with AI coding assistants (GitHub Copilot, Manus, Claude). Software that holds the keys to your servers should be written and reviewed by people; that's the goal of the roadmap.

The bars count the lines each commit changed per month; the line is the share of all code at each month's end (git blame), and the note at the top says whether it is going up or down. A commit counts as AI-assisted when its author is a coding agent or its message names an AI co-author, so undeclared AI help is not counted. Rebuilt daily by scripts/ai_share.py.

New code must be AI-free: the required AI assistance check fails pull requests that declare AI help, show strong AI style signals or contain AI leftovers. Help push it down: pick a good first issue, review a pull request, or rewrite AI-written code (#201).


Contributing

Testers, translators, reviewers and developers are welcome. Start with CONTRIBUTING.md and a good first issue; see also the code of conduct, roadmap and governance.

License

GPL-3.0-or-later: free to use, study, change and share; changed versions you distribute stay under the GPL.

About

Self-hosted homelab dashboard: OS updates, CVE scan, SMART disk health, Proxmox VMs & backups, FRITZ!Box/OpenWrt/OPNsense routers. Agentless (SSH + APIs), 2FA, one-command Proxmox install. Hardened supply chain: signed releases with SLSA provenance, OpenSSF Scorecard, CodeQL, fuzzing.

Topics

Resources

Code of conduct

Contributing

Security policy

Accessibility

Stars

7 stars

Watchers

0 watching

Forks

Releases

Packages

Used by

Contributors

Languages