NAME¶

trustmuxd - Trustmux daemon (mobile companion for tmux/Byobu sessions)

SYNOPSIS¶

trustmuxd [--host ADDR] [--port PORT] [--https] [--self-signed] [--version]

DESCRIPTION¶

trustmuxd is a lightweight daemon that serves a mobile-optimised web interface for monitoring and interacting with tmux and Byobu sessions over your Tailscale private network.

The daemon serves a Progressive Web App (PWA) over HTTPS. In the default mode it binds to the Tailscale interface and relies on tailscale serve for TLS termination. In direct mode (--self-signed) it generates a self-signed ECDSA certificate and binds directly on the network interface.

Authentication uses 6-digit one-time pairing codes (generated with trustmux-pair(1)) and permanent per-device session tokens stored in ~/.config/trustmux/tokens.json.

In normal use, the daemon is managed via trustmux(1) rather than being invoked directly.

OPTIONS¶

--host ADDR

Bind address (default: Tailscale IP, or 127.0.0.1 with --https).

--port PORT

TCP port to listen on (default: 7432).

--https

HTTPS mode: trust proxy headers and set Secure cookie flag. Use with tailscale serve.

--self-signed

Generate a self-signed ECDSA P-256 TLS certificate for direct HTTPS access without Tailscale.

--version

Print version and exit.

FILES¶

~/.config/trustmux/tokens.json

Persistent session tokens (mode 0600).

~/.config/trustmux/trustmux.sock

Admin Unix socket (mode 0600) used by trustmux-pair(1) and trustmux-unpair(1).

~/.config/trustmux/cert.pem

Self-signed TLS certificate (mode 0644), created on first --self-signed start.

~/.config/trustmux/key.pem

TLS private key (mode 0600).

SEE ALSO¶

trustmux(1), trustmux-pair(1), trustmux-unpair(1), trustmux-enable(1), trustmux-disable(1), byobu(1), tmux(1)

AUTHOR¶

Dustin Kirkland <kirkland@ubuntu.com>