Tursina Labs
Kelola
Your servers, without the terminal
What it does
- Connects over SSH with a key stored in Android StrongBox or iOS Secure Enclave; private key never leaves the phone
- Enrolls by showing a QR code and an authorized_keys line you paste on the host
- Pins the host key on first connect (TOFU) and blocks mismatches
- Discovers OS, init, package manager, firewall, and journal access, then shows load, memory, disk, and failed units
- Manages systemd units, journald logs, disks, processes, containers, and SFTP files through typed probes with a local audit log
Who it's for
- Homelab and VPS operators who want admin from a phone
- People who already have OpenSSH and do not want an agent on the server
- Anyone who prefers structured screens over an on-phone terminal
Key Features
Nothing to install on the server
Hardware-backed SSH identity
Host inventory, notes, recents, and ssh_config import
Enrollment QR + TOFU host-key pinning
Dashboard: load, memory, disk, failed units
systemd, journald, disks, processes, containers, SFTP
Local audit log (write-before-exec)
Read-only host switch
No Tursina backend and no telemetry
Free
Frequently Asked Questions
Do I install anything on the server?
No. Kelola uses the existing sshd. You only add one public key line to authorized_keys.
Where is my SSH private key stored?
On the phone in Android StrongBox or iOS Secure Enclave. The private key is non-exportable; signing is biometric-gated.
Does Kelola use a Tursina Labs cloud account?
No. There is no Tursina backend and no telemetry. Host inventory and audit logs stay on your device.
Which hosts are supported?
Any Linux host with OpenSSH — homelab boxes, VPS, cloud VMs, small on-prem fleets. Root login is refused; use a non-root sudoer.
Is Kelola free?
Yes. The app is free.
Ready to get started?
Download Kelola from Google Play Store.