See what was running when it spiked.
Charts of CPU, memory and network for every machine, with up to 90 days of history. Click a point on a chart and Bield shows what was busy at that moment.
Metrics come from a small bash agent under the MIT license, so you can read it before you run it.
Restart the container from the page that said it broke.
Logs, live stats and images for every machine Bield can reach. It can start, stop and restart. It can’t create, exec or prune, and that’s on purpose.
A shell that’s still there tomorrow.
Terminals run in tmux, so closing the tab doesn’t end the session. The file manager edits and previews on any machine with SSH access.
Alerts that find you.
Offline machines, full disks, expiring Tailscale keys, failing checks, crashed containers and failed services. Acknowledge them, snooze them, or leave a note for later.
They reach your phone through
- ntfy
- Telegram
- Discord
- Slack
- Any webhook
Your tailnet is the login.
There’s no password and no account to make. For each connection, Bield asks Tailscale which device it comes from and who owns that device. Nothing in a request can claim to be someone else.
- connection from
- 100.101.0.9
- tailscale says
- alex@example.com, MacBook Pro
- role
- admin
- Only your tailnet can reach it.
- Admins and read-only viewers, decided by tailnet identity.
- An agent can report metrics and do nothing else.
- Every terminal, file change and restart goes in the activity log.
- Bield has had an outside review, and v0.1.1 fixes what it found. SECURITY.md has the full threat model.
Running in about two minutes.
curl -fsSLO https://raw.githubusercontent.com/manasseh-fikadu/bield/main/compose.yaml
docker compose up -d
docker compose logs bield # open the link in it, to log Bield in to Tailscale
curl -fsSL https://raw.githubusercontent.com/manasseh-fikadu/bield/main/install.sh | sudo bash
# then open http://127.0.0.1:4700 on that machine, to log Bield in to Tailscale
git clone https://github.com/manasseh-fikadu/bield
cd bield
make build # needs Go 1.27.3, Node 22.17 and Bun
./bield serve # then open http://127.0.0.1:4700, to log Bield in to Tailscale
Then
- Install the agent, for its CPU, memory and disk.
- Set up SSH, for the terminal, the files and Docker.
- Add a notification channel, so alerts find you.