Tendril · System

Power

Admin password

Change the password you use to sign in to this web console.

Access & audit

viewer login · named users · a log of changes

Read-only viewer

An optional second password granting read-only access — see everything, change nothing. Hand it out instead of the admin password.

Named users

Personal sign-ins with their own password and role, so the audit log records who made each change. The main admin and viewer passwords above keep working unchanged. Removing a user signs out their active sessions immediately.

No named users yet.

Audit log

No recorded actions yet.

Notifications

push background events to ntfy or a webhook

offNotification settings are managed by an admin.

API tokens

bearer credentials for scripts & monitoring

Long-lived credentials for the HTTP API — send Authorization: Bearer tnd_… on any request. An admin token can do everything; a viewer token is read-only (handy for scraping /metrics).

No tokens yet.

The token is shown once at creation — only its SHA-256 is stored.

Backup & restore

every setting in /etc/tendril

Download everything under /etc/tendril — passwords, tokens, fleet trust, TLS material — as one archive. Treat it as a secret.

⬇ Download settings backup

Restore

Upload a settings backup to copy it over /etc/tendril. Existing files are overwritten; nothing is deleted.

OS image

demoPreview of what a real Tendril (bootc) install shows here.

Current booted image: git.onetick.ninja/flan/tendril:latest
        Digest: sha256:9f3c…a1b2  (version 0.24.0, 2026-07-09)
Current staged image: none
    Available update: none — you're on the latest image
Rollback image: git.onetick.ninja/flan/tendril:0.23.0  (bootable fallback)

Automatic updates

offdemo

When on, the host fetches and stages new OS images on a timer (bootc-fetch-apply-updates.timer); they apply on the next reboot. — preview only on this non-bootc host.

Host

Hostname	localhost.localdomain
Uptime	up 6 days, 8 hours, 31 minutes
Load (1/5/15m)	1.03 1.08 1.03
Memory	2.3 / 7.7 GB used
Disk (/)	72G / 148G / 49%
Kernel	7.0.14-201.fc44.x86_64

HTTPS certificate

off

This instance serves plain HTTP (TENDRIL_TLS=off) — usually because a reverse proxy terminates TLS in front of it. Certificate management is disabled here.

Logs

live · filterable · downloadable

⬇ Download

(demo — host logs are hidden)