NovaScale, Built for Tailscale vs SSHush

NovaScale is a remote-work and server-operations workspace built for Tailscale. Use SSH, monitoring, private web tools, SFTP, Herdr, and Remote Codex from one app—without switching VPN apps. Built-in Tailscale connects your tailnet inside NovaScale. Traditional SSH hosts and Headscale are also supported. Core SSH, monitoring, web, and Remote Codex workflows are available free with practical limits. NovaScale Pro expands capacity and adds SFTP, flexible iCloud sync, remote push, container deployment, and advanced customization. ACCESS AND HOSTS - Discover tailnet machines automatically with live updates - Work with Tailscale SSH hosts and traditional SSH servers in one app SSH TERMINAL - Recover sessions across Wi-Fi, cellular, VPN, and foreground/background changes - Pin important terminal and tmux sessions for faster return - Scroll, click, and select with touch in mouse-aware terminal apps - Use Apple’s offline on-device dictation in Terminal and Codex on supported iOS 26 devices/languages; raw audio isn’t uploaded - Get command and argument suggestions as you type, with optional Bash/Zsh shell integration REMOTE HERDR - Connect to Herdr on Linux or Mac over SSH, through Tailscale or a traditional host - Switch workspaces, tabs, and agents with native controls and follow agent status - Pin sessions and detach without stopping remote agents - Paste clipboard images and use on-device dictation on supported devices - Free use includes three daily visits and one pin; Pro adds unlimited visits and pins, plus file and photo uploads - Requires a compatible Herdr installation on your host; tested with Herdr 0.9.1 REMOTE CODEX - Read math with adjustable text size and line spacing; search threads across projects and sync pins with compatible Codex desktop hosts - Connect to your own Codex CLI/app-server on Mac or Linux over Tailscale - Dictate prompts offline, follow goals and subagents, review Markdown and changes, and handle approvals remotely - NovaScale Pro adds optional remote push when host-backed work needs you, even while NovaScale is disconnected MONITOR AND ACT - View resource trends for CPU, memory, network, disk, and disk I/O - Inspect process details and end stalled processes remotely - Monitor and manage Docker containers - Detect and manage Apple containers on supported macOS hosts - Deploy new Docker and Apple containers with NovaScale Pro WEB AND FILE WORKFLOWS - Open dashboards and self-hosted services by URL, MagicDNS name, or Tailscale IP - Route browser traffic through a SOCKS5 or HTTP CONNECT proxy on another tailnet host - Optionally access sites using self-signed certificates - Keep audio playing in the background from services such as Jellyfin - With NovaScale Pro, browse, upload, download, preview, and edit remote files over SFTP - Share files from iOS into SFTP folders, active terminal sessions, and Remote Codex threads COMPATIBILITY - iOS 15+ for SSH, monitoring, Remote Codex, and file management - In-app web access requires iOS 17+ - Remote Codex requires your own Codex CLI/app-server - Apple Container features require a supported macOS host TRANSPARENCY - NovaScale is not affiliated with Tailscale Inc. or OpenAI - Optional Remote Push uses an open-source host-side companion agent included in the Codex bootstrap repository. It can be disabled at any time. - Remote Push sends only opaque IDs and signed lifecycle events—not prompts, code, commands, patches, responses, transcript paths, or working directories. - Codex bootstrap wrapper and companion agent: https://github.com/GalaxNet-Ltd/nova-codex-bootstrap - Built on a maintained libtailscale fork: https://github.com/GalaxNet-Ltd/libtailscale - Support: nova-support@galaxnet.cc - Terms: https://galaxnet.dev/nova/legal/tos/ - Privacy: https://galaxnet.dev/nova/legal/privacy/

3am. Your phone is face down in a drawer, on battery, in Low Power Mode. /var crosses 95%. You get woken up. That sentence is the entire product, and it is harder to deliver than it looks. An alert computed on your phone can only fire when iOS chooses to wake your phone, and iOS makes no guarantee that it ever will. Background execution is throttled on battery, suspended in Low Power Mode, stopped completely by a force quit, and starved hardest overnight - precisely when you need it. Worse, it fails in silence. You see your thresholds configured and you assume you are covered. TWO SYSTEMS, DELIBERATELY SEPARATE Live metrics come from your phone's own SSH session. Open the app, it connects, you see the server as it is right now. Alerting is a different system entirely. A small agent runs on your server and reports outward on its own schedule, independently of your phone. It does not care whether the app is open, backgrounded, force-quit or deleted from your home screen. A threshold breach originates on the server and arrives as a real push notification. If a server card shows as offline, that describes your phone's SSH connection. It says nothing about your alerting, which is still running. Your server speaks. Your phone listens. Nothing in between. Everything a monitoring platform does about a crossed threshold. None of the platform. No dashboard to host. No port to expose. No domain, no reverse proxy, no account. No platform sitting between your servers and you. No other iOS app does this. Every alternative either computes its alerts on the phone, which iOS can throttle or stop without telling you, or asks you to stand up and secure a dashboard of your own, or routes you through a monitoring platform with an account and a seat. FREE, AND NOT A TRIAL Unlimited servers. Full metrics. No agent, no account, no signup. Per-core CPU, temperature, memory, swap, disk by mount, load average, network interfaces. A full SSH terminal. Your servers sync across your devices through iCloud. This tier is agentless and always will be. Nothing is installed on anything. ALERTING, AS A SUBSCRIPTION Enable it on a server and the app installs the agent over the SSH connection you already have. There is nothing to sign up for and nothing to go and look at afterwards. Rules are configured in the app: CPU, memory, swap, disk per mount point, load average, temperature, interface down. And silence. If the agent stops reporting, you hear about it - the failure a monitoring system exists to catch, and the one a check on your phone can never see, because a sleeping phone and a dead server look identical from the inside. Every rule fires on sustained breach, not on a momentary spike. READ EVERY LINE BEFORE YOU INSTALL IT Alerting asks something real of you: a binary, on your server. You should not agree to that on trust. The agent is open source, Apache 2.0. github.com/ultra-nick/sshush-agent It runs as an unprivileged user, never as root, under systemd restrictions that make your filesystem read-only to it apart from one directory. It never listens on a port. It never executes a remote command. It never downloads anything, ever. Its whole network footprint is two URLs you can read in a config file. Metrics are sampled and rules evaluated on your server. Only a crossed threshold is ever sent. The numbers never leave the machine. Nothing else is touched. No package manager integration, no cron entry, no existing file modified. One command removes it completely, or the app asks it to remove itself. Your SSH credentials never leave your device. They live in your iCloud Keychain. Our infrastructure has never held an SSH credential and is not built to. Monitoring is free, unlimited and agentless. Alerting is there when silence stops being acceptable. --- Requirements: iOS 26.0 or later. iCloud syncs your servers and alert history across your devices. Terms of Use: https://www.apple.com/legal/internet-services/itunes/dev/stdeula/