FleetPilot GitHub

Free and open source · GPL-3.0 · v1.7.0

One dashboard for your whole homelab.

FleetPilot keeps your servers, Proxmox nodes, NAS, routers and disks in view and up to date: OS updates, known vulnerabilities, SMART health, VMs, backups and FRITZ!Box, OpenWrt or OPNsense. Self-hosted, agentless, installed with one command.

Try the live demo Install
  • No cloud, no subscription, no agents
  • Linux, Windows, Proxmox, TrueNAS, Unraid, routers
  • English, Deutsch, Français, Español, Nederlands
FleetPilot home page with the service map and the state of every server

Live demo

Try it before you install it

The demo is not a video or a mock-up. It is the real FleetPilot, running in your browser tab (WebAssembly), connected to an emulated homelab: two Proxmox nodes with VMs, a TrueNAS box, a backup server, Linux and Windows machines, a FRITZ!Box with repeater, OpenWrt and OPNsense.

  • Update a server and watch the real apt output
  • Wake a switched-off PC with Wake-on-LAN
  • Let a disk fail and see the SMART alert arrive in the outbox
  • Start VMs, change fan speeds, check routers for firmware
  • Scan for real CVEs, update, rescan

Nothing leaves your browser. About 20 MB on first load, ready in a few seconds.

Open the live demo Quick static tour
The live demo: FleetPilot's vulnerability page next to the Virtual lab panel with emulated servers

Features

Everything your homelab needs, in one place

Agentless: FleetPilot talks to your machines over SSH and to appliances over their APIs. Nothing to install on them.

OS updates

Debian, Ubuntu, Fedora, Arch and Windows (winget) over SSH. One host or all, with live output, history and schedules.

Vulnerability scan

Known CVEs in every server's packages (OSV.dev), Docker images (Trivy) and firewalls, with severity, the fixing version and daily alerts.

Disk health

SMART data from servers, Proxmox nodes, TrueNAS and Unraid. Alerts by e-mail, ntfy, Gotify, Discord or Slack before a disk dies.

Routers

FRITZ!Box and FRITZ!Repeater with Mesh, OpenWrt, OPNsense, pfSense, MikroTik, VyOS and more: status, devices, firmware checks, encrypted backups.

Proxmox and backups

VMs and containers across your cluster: start, stop, snapshots. Proxmox Backup Server, Duplicati, restic, BorgWarehouse, UrBackup and Bacula.

Storage

TrueNAS and Unraid pools, datasets, shares and alerts, next to the disks of all your machines.

Hardware and fans

Live CPU, memory and temperatures, fan control (lm-sensors, IPMI, liquidctl, Raspberry Pi), Wake-on-LAN and scheduled shutdowns.

Secure by default

2FA with TOTP, passkeys and YubiKey, roles, sessions per device, a tamper-evident audit trail and a security center.

Integrations

Prometheus metrics, Home Assistant, CheckMK, a REST API with scoped tokens, and a public status page.

Accessible

Checked against WCAG 2.2 AA. Text size, high contrast, reduced motion and an easy-language mode, in five languages.

Screenshots

A closer look

Routers page with FRITZ!Box, repeater, OpenWrt and OPNsense

Install

Running in a few minutes

Proxmox VE

In the Shell of your Proxmox node. Creates an unprivileged Debian container, installs FleetPilot with HTTPS and prints the address and admin password.

bash -c "$(curl -fsSL https://raw.githubusercontent.com/ChristianHandy/FleetPilot/main/proxmox/fleetpilot-lxc.sh)"

Debian, Ubuntu, Raspberry Pi OS

As root on the machine. Then open https://<server-ip> and sign in as admin with the password the installer shows.

curl -fsSL https://raw.githubusercontent.com/ChristianHandy/FleetPilot/main/install.sh | bash

Read the scripts before you run them, as with any curl | bash. The installation guide (Deutsch) covers unattended installs, your own certificate, updates and backups.

Security

It holds the keys to your homelab. It is built like it.

FleetPilot runs as an unprivileged service user from a read-only install, and its few root actions go through small helpers with fixed arguments. The project itself is hardened too, and every release can be verified.

Security policy OpenSSF Scorecard
  • Signed releasesSBOM, checksums and Sigstore-signed SLSA build provenance: gh attestation verify
  • Analysed and fuzzedCodeQL, Bandit and ~200 tests on every change; parsers fuzzed with Atheris
  • Locked dependenciesEvery package pinned by hash, scanned for vulnerabilities, updated after a cooldown
  • Hardened CIActions pinned to commits, least-privilege tokens, protected main branch

See it for yourself

Open the demo, click around, break a disk. Then install it on your own hardware.

Try the live demo Star on GitHub