Browser access#

Syndicate's Host binds to loopback. Reach the dashboard from another machine by forwarding that loopback port over SSH.

Before you start#

The Host is healthy locally.
The browser connection uses a trusted network or SSH.
You can verify the destination hostname and certificate.

SSH forwarding#

ssh -N -T \
  -o ExitOnForwardFailure=yes \
  -o ForwardAgent=no \
  -L 127.0.0.1:4317:127.0.0.1:4317 \
  user@server

On the server, run syndicate dashboard --no-open and open the exact URL through the tunnel.

Verify#

Confirm the URL is single-use, the browser receives an authenticated dashboard session and closing the tunnel removes remote reachability.

Warning

Do not publish the Host's loopback port directly, and do not reuse invitation URLs. SSH forwarding is the supported way to reach the dashboard remotely; the Host has no listener of its own that is safe to expose.

If it does not work#

Symptom	Check	Recovery
The tunnel connects but the dashboard is unreachable	Whether the Host is listening on the forwarded loopback port	Confirm the Host locally first
The dashboard loads but actions are refused	The dashboard origin the Host is configured with	Re-run `syndicate setup` and reach it over the tunnel
The invitation URL fails through the tunnel	Whether the URL was altered	Use the printed URL unchanged; the Host rejects other names
You are tempted to expose the Host directly	—	Do not publish the Host's loopback port. SSH forwarding is the supported path