SSH collector: agentless host facts over SSH
Requested by the community in #2 the day of launch — shipped the same week in #6.
Add any Linux box to the ledger with nothing but a read-only SSH account:
- Container facts without exposing the Docker API —
docker psover SSH exec records image, tag, state, compose project, and published/internal ports (IPv4/IPv6 binds deduped) - Bare hosts count too — listening sockets via
ssbecome port facts even with no Docker anywhere: loopback binds recorded as internal, everything else as published, and listeners already explained by Docker are never double-counted - Security posture matches the ledger — key-only auth, required host-key pinning (press Test connection once to discover the fingerprint, paste to pin), per-command timeouts, credentials sealed like every connector secret, nothing ever written over the session
Docs: connector guide. Existing databases migrate automatically.
Also in this release: a unified form design system across the setup wizard and every source form, clipboard copy that works over plain http (the common homelab case), and a batch of interaction-feedback fixes from a full UI walkthrough.
Changelog
- aac2ab1 Add the SSH collector: agentless host facts over SSH (#6)
- 11c808c Polish interaction feedback and edge cases found in a full user walkthrough
- b50eb94 Unify record-entry forms with the ledger design system
- 5a14083 Demo seed: register the fixture reverse proxy so route detail names it
- 8f607db Code + security review fixes: data integrity, connector hardening, contract gaps