Plain SSH, EC2 SSM, tmux, SFTP and port forwarding in one app. Hosts, keys and snippets sync end-to-end encrypted — and you can run the sync server yourself.
From plain SSH to AWS SSM, containers and tmux — the whole of server work in a single workspace.
Plain SSH, EC2 SSH-over-SSM, SSM shell fallback, ECS Exec, SFTP and port forwarding in one app. SSH agent auth and agent forwarding included.
Remote tmux windows become app tabs and panes become split views. Closing a tab detaches instead of killing, so the session survives and picks up where you left off.
Ask about the current session using its host details and terminal output. Read-only commands run on their own; anything that changes state waits for your approval. Works with OpenAI-compatible APIs, Claude and Codex.
Replay a finished terminal session on a timeline. Recordings stay on the device and are never uploaded.
Hosts, secrets and snippets sync between desktop and mobile with end-to-end encryption. The sync server (sync-api) runs from a single Docker command if you want to host it yourself.
The app itself joins as a tailnet node. It reaches hosts inside a tailnet with no Tailscale client and no VPN permission, and never touches your OS routing or DNS.
Local, remote and dynamic forwards, SSM forwards and container tunnels all live in one list. For connections through a jump host, point ProxyJump at a saved host and you are done.
Secret handling is the baseline for an SSH client. The rule here is simple — no secret is ever left in plaintext. The design is public in the data protection document.
The sync-api that handles browser sign-in and sync is a single container. Start it, then point the app at your address from its sign-in screen.
docker run -d --name dolgate-sync-api \ -p 8080:8080 -v dolgate-sync-api-data:/app/data \ ghcr.io/doldolma/dolgate-sync-api
See the self-hosting guide for the full configuration.
Every platform ships on the same version, and desktop builds update themselves.
Linux rpm (Fedora, RHEL) and ARM64 builds are on the releases page.