All projects Private beta · iOS & Android

WakeFromFar

A self-hosted iOS and Android project I’m building so family and friends can wake selected home servers through a private tunnel.

Not in the app stores yet · currently testing with a small set of home networks

TransportTailscale / WireGuard

No public ports intended.

BackendDocker

Runs in your own home network.

ClientsiOS + Android

Native, purpose-built apps.

LizenzMIT

Publication planned with the beta.

The actual problem

A sleeping server quickly becomes a family support ticket.

Many Jellyfin, Plex, or Immich servers do not need to run around the clock. But as soon as someone else wants access, the sensible energy-saving setup often turns into a message to the admin.

WakeFromFar separates this one task from the rest of the infrastructure. Users get no router access, shell, or public admin page—only an assigned machine and a clear status.

Data path

How a wake request travels through the private network.

WakeFromFar does not provide its own VPN service. The admin provides the private tunnel; the app uses it.

  1. 01

    User taps

    The app sends an authenticated wake request.

  2. 02

    Private tunnel

    The request never leaves the protected network path.

  3. 03

    Your relay

    The backend checks permissions and sends Wake-on-LAN.

  4. 04

    Status returns

    The app and audit log show the result or failure.

Intentional boundary

The backend is not designed to run on open internet ports. A private tunnel is part of the security model, not an optional extra.

Current scope

What the beta currently covers.

The beta focuses on machines, users, wake requests, and understandable failure states.

01

Private transport

Reachable through Tailscale, WireGuard, or a comparable private tunnel.

02

Native clients

Fast, clear iOS and Android apps instead of a mobile admin panel.

03

Least privilege

Users only see machines explicitly assigned to them.

04

Traceable

Wake attempts, responses, and failures remain in the self-hosted audit log.

05

No product cloud

The relay runs in your network; BluecherLab processes no wake commands.

06

Admin signals

Planned notices for important failures and shutdown requests without permanent telemetry.

What the beta is not yet

Known limits of the current beta.

  • No public app-store availability yet.
  • No BluecherLab-hosted relay.
  • A private tunnel must already be set up.
  • The beta first validates a small set of real home-network setups.
Beta note

Testing with a small set of real home networks.

I am currently comparing different machines, tunnels, and user roles. If you run a similar setup, you are welcome to send me the details by email.