Pi-Tool: SSH Manager

KYTH. Systems

About this app

Pi-Tool installs, updates, backs up and monitors self-hosted services on your Raspberry Pi over SSH, with a single tap. Plus set up remote access and manage files. A cockpit with four tabs (Management, Automation, Terminal, Files); "Connect" auto-detects what's running and shows a card per service. Unofficial, not affiliated with evcc or Pi-hole.

Services:
* evcc – update (apt or Docker, auto-detected), install, live status, dry-run, restart service, open web UI
* Pi-hole – update (pihole -up), rebuild blocklists, restart DNS, install (experimental), open /admin
* Home Assistant – install as a Docker container (experimental) and update, open the web UI (port 8123)
* Grafana, InfluxDB & Mosquitto – install + update via apt (official repo, experimental), open the web UI
* AdGuard Home, Node-RED & Zigbee2MQTT – auto-detected: open the web UI, view logs, restart the service
* Raspberry Pi Connect – official remote access (Raspberry Pi OS Bookworm+): install, sign in via link, toggle on/off, open web
* Tailscale – VPN/mesh: install, connect via login link. One-tap remote access: adopts the remembered tailnet IP as the host – reach your Pi from anywhere; back home, one tap returns to the home IP
* Docker containers – view running containers and restart them
* "Add service" – every not-yet-installed service in one picker; the main screen shows only what's actually running
* System (whole Pi) – update all packages (apt full-upgrade), reboot or shut down, health readout (temperature, disk, RAM, uptime) with a low-disk warning and an SD-card check

Features:
* Cockpit with four tabs; the active Pi sits on top and is tappable (switch/add/rename)
* Auto-detects all services in one SSH session
* Files: your Pi's file browser – browse, preview, upload from the phone, delete
* Config editor: edit config files (e.g. evcc.yaml) in-app, atomic with a backup
* Backups incl. in-app restore & management: evcc (config + DB), Pi-hole (Teleporter) and Home Assistant (/config); automatic rotation; download to the phone (share sheet)
* Analyze disk usage – the largest directories at a glance
* Security check – rates your Pi's hardening (SSH configuration, automatic security updates, fail2ban and more) as a traffic light
* System cleanup: free disk space (apt, unused Docker images, journal)
* Automation on the Pi (systemd timers, no background service on the phone): scheduled updates (with evcc backup + self-heal), nightly backups (with rotation) and health alerts via ntfy (full disk, dead service, heat, updates)
* Terminal: run your own commands over SSH (sudo supported) with history + quick commands
* Set up an SSH key with one tap: the key is generated on the phone, installed on the Pi and the profile switched to key login
* Built-in "Set up Pi" guide (Raspberry Pi Imager: SSH, user, Wi-Fi) for beginners
* Multiple Pi profiles, quick switching; an "All Pis" overview as a traffic light (reachable/updates/warning); encrypted export/import for moving to a new phone
* Connect deliberately: "Connect" keeps the session to the active Pi until you switch profiles; Automation, Terminal and Files unlock only once connected. Green/red status; a running action can be cancelled
* German & English: follows your phone language automatically, switchable in Settings (System/German/English)

Security & privacy:
* Credentials stay encrypted on device (Android Keystore)
* SSH host-key verification (TOFU) – protects against MITM
* Optional app lock via biometrics/PIN
* SSH key auth as an alternative to passwords
* No accounts, no ads, no tracking, no cloud

Note: unofficial community tool, not affiliated with evcc or Pi-hole. For day-to-day charging control there is the official evcc app.

Disclaimer: the app runs sudo commands (apt, pihole, systemctl, reboot) on your device. Use at your own risk – no liability for damage to system, data or hardware (MIT license, "AS IS").

Requirement: a Raspberry Pi (or Debian/Linux device) reachable over SSH.

What’s new

Bug fix: "Restart DNS" on the Pi-hole card had no effect on Pi-hole v6 – yet the app reported success.

The reason: v6 no longer knows the command the app used, and it answers unknown commands with its help text and a success code. The app now asks the installed Pi-hole which command it understands, and reports a genuine failure as one. The same applied to the DNS reload after restoring a Pi-hole backup.