FleetPilot v1.7.0

Install in one command

Proxmox VE: in the node's Shell:

bash -c "$(curl -fsSL https://raw.githubusercontent.com/ChristianHandy/FleetPilot/main/proxmox/fleetpilot-lxc.sh)"

Debian 12/13, Ubuntu 22.04/24.04, Raspberry Pi OS: as root:

curl -fsSL https://raw.githubusercontent.com/ChristianHandy/FleetPilot/main/install.sh | bash

The same commands update existing installations; Proxmox takes -- update <container ID>. Your data and settings are kept.

📖 Installation guide · User guide · Deutsch: Installation, Benutzerhandbuch · PDFs

Highlights

• Routers, repeaters and access points: FRITZ!Box and FRITZ!Repeater (TR-064), OpenWrt, OPNsense, pfSense, VyOS, DD-WRT/FreshTomato, MikroTik RouterOS and IPFire. Status, connected devices, Wi-Fi and Mesh, update checks, encrypted configuration backups.
• Security center: checks of the installation and sign-in rules (2FA for admins, idle timeout, lockout, allowed networks, sign-in notice), plus every session and API token.
• Account security: your sessions, recent sign-ins, and personal API tokens (read-only or read/write, with expiry).
• Notifications to ntfy, Gotify, Discord, Slack/Mattermost and webhooks.
• Backups of FleetPilot's data: daily and one-click, verified restore.
• Audit trail: HMAC-chained, with filters and CSV export.
• Prometheus /metrics.
• Accessibility: text size, contrast, readable font, reduced motion, easy language (English and German Leichte Sprache), full keyboard and screen-reader support.
• High-security option: FIPS mode, strict SSH host keys, offline mode, and a strict systemd profile.
• Installers:
  • Proxmox VE helper script, using an unprivileged LXC.
  • Unified installer for Debian, Ubuntu and Raspberry Pi OS: read-only program directory, a dedicated service user, one narrow sudo rule, HTTPS out of the box.
  • community-scripts.org script, submitted for review.
• New documentation in English and German covering every feature.
• HW Monitor is in the menu; the German menu is fully translated.
• Faster: parallel host checks, cached role lookups and single-commit registry sync.

Fixes and security

• CodeQL alerts fixed (ReDoS, path injection, stack-trace exposure and more); uploaded host pictures are served with a sandboxing CSP.
• FleetPilot no longer writes into its program directory.
• SMART collection now reads the configured hosts.
• The repository no longer ships demo hosts.
• reset-password.sh rewritten.
• Dependencies updated, including gunicorn 26.2, cryptography 50.0.2 and webauthn 3.0.1.

Tested with 165 automated tests and on a real Proxmox VE 9.2 host: fresh install, update, and a crawl of every page.

Full details: CHANGELOG.

Verification: the v1.7.0 tag is GPG-signed (key F73DEF204C54E71D). fleetpilot-1.7.0-sbom.cdx.json is a CycloneDX SBOM of the exact Python packages a fresh install receives.

FleetPilot v1.6.0

Full Changelog: v1.5.3...v1.6.0

FleetPilot v1.5.3

Full Changelog: v1.5.2...v1.5.3

FleetPilot v1.5.2

Full Changelog: v1.5.1...v1.5.2

FleetPilot v1.5.1

Full Changelog: v1.5.0...v1.5.1

FleetPilot v1.5.0

Full Changelog: v1.4.0...v1.5.0

FleetPilot v1.4.0

Full Changelog: v1.3.2...v1.4.0

FleetPilot v1.3.2

Full Changelog: v1.3.1...v1.3.2

FleetPilot v1.3.1

Full Changelog: v1.3.0...v1.3.1

FleetPilot v1.3.0

Full Changelog: v1.1.2...v1.3.0