termalSome things live where only your private network can reach them — a Grafana dashboard, a router’s admin page, Home Assistant, Portainer, an app on a server’s localhost. Until now, opening one from somewhere else meant a port forward, a VPN, or a reverse proxy. This release adds internal sites: point a Connector at the service and get a private web address of your own.
Open a private app in any browser — no port forwarding
Point a Connector at a web service it can reach — anything on localhost or a private address — and Termalin gives it an address of its own, https://<10 characters>.termal.ink. Nothing is opened on the server and no port is forwarded: the Connector dials out. Connectors on Linux, Windows and macOS all do this, and an app on the Connector’s own localhost works on Windows and macOS too.
Most apps need nothing changed on their side. WebSockets pass through, so live panels and live updates behave as they do on the LAN; turn on “the internal site uses https” if the app inside speaks HTTPS with a self-signed certificate. The visitor’s address arrives in X-Real-IP, so apps that refuse an unknown proxy still open. Only private addresses can be opened.
To start: open Internal sites in the cabinet, add a site, pick a Connector and enter the service’s address (say localhost:3000). The internal sites page has the full tour, and this guide walks through Home Assistant and Grafana.
Yours alone, or shared with a few people
You open a site from the cabinet or the app, already signed in. To let someone else in, share it by email for 24 hours or 7 days — they confirm their address with a one-time code, with no account to create. Take access away at any moment and their open pages close at once.
Each invitation link is personal to the person you invited; anyone else who opens it sees only “This link doesn’t work”, and a site you didn’t name shows visitors just “Internal site”. Opening a site works on Pro, Team and the trial; sharing needs a paid plan.
Now a section of its own, with an Edit button
Internal sites have their own section in the cabinet’s menu. Each site has an Edit button, and when a site doesn’t answer, an address check explains why rather than leaving you guessing.
Easy on the limits
There’s no cap on how many sites you add. A soft daily traffic brake — 5 GB per link, 20 GB per account — resets at midnight UTC.
Back up Windows and macOS servers
Server backups were Linux only; now they run on Windows and macOS servers too, through a Connector. On Windows, files that are open during the backup (databases, mail stores) are copied consistently from a Volume Shadow Copy when the Connector’s login user is an administrator (Windows 10 1803 / Server 2019 and newer); without that right it reads the live drive and the archive says so — more on how that works. On macOS it packs at the lowest priority; if macOS blocks a folder, turn on “Allow full disk access for remote users” under Remote Login. The backup form shows example paths for each server’s OS.
Trial backups use up to 5 GB of Termalin storage; a paid plan gives them the full pool. See the server backups page for the full picture.
Alert settings for each server
Each server can keep its own alert settings. Per server, choose Account defaults, Custom or Off — and Off only stops the alerts, it keeps collecting that server’s metrics, so you no longer have to switch monitoring off to quiet one noisy machine. Every threshold is editable, down to how long a server must be gone before it counts as offline, how long the host may take the CPU, how many days before a certificate expires count as critical, and the inodes-critical mark. In the cabinet and the app — the server monitoring page explains what’s collected.
New account-wide alerts
You’re now told when your Termalin storage is nearly full, when a scheduled backup quietly stops succeeding, when your balance falls below a figure you set, and before an auto-renewing storage pack renews if your balance won’t cover it.
An Android app is on the way
An Android app is coming to Google Play — it isn’t released yet. It’s the same app as on iPhone and iPad: open sessions stay connected while it’s in the background, and it receives your server alerts like the iPhone does.
Open a Mac’s Screen Sharing
The app now speaks macOS Screen Sharing’s sign-in, so a Mac opens with its own account — the Mac’s user name and password, not an Apple ID — as it already did in the web cabinet.
Team invitations
Adding someone to a team now sends an invitation they accept. They join only when they accept it — from the email or in the cabinet, signed in with that confirmed address — and take no seat until then. Pending invitations are listed and expire after 14 days; the owner can cancel or resend one.
Let an AI assistant add internal sites
Three new tools — web_link_create, web_link_list and web_link_delete, 21 in all — let a connected assistant set up an internal site for you. Ask it to expose a dashboard that only listens inside a server and it appears under Internal sites, marked “Added by” with the app’s or key’s name. Only you open it, signed in. Adding and removing need full access on a Connector open to AI. See SSH for AI agents for how that access works.