A free, private baby tracker. No ads, no lock-in, no forced account.
Track sleep, feeds, diapers, medicine, play, and bath time. Everything stays on your device: install it as a PWA and it works offline.
| Light | Dark | |
|---|---|---|
| Hero card |  |
 |
| Logging a bottle |  |
 |
- Hero card: awake timer with age-based nap window predictions
- Sleep: start, end, and quality
- Nursing: side, duration, and time
- Bottles: contents and volume
- Diapers: wet, dirty, or mixed
- Medicine: custom medicines, doses, and interval reminders
- Play: tummy time and floor play, logged as awake time
- Bath: one tap when it's done
- Pumping: side, volume, and time
- SweetSpot: predicts the next nap window from your baby's age and their own recent naps, not a fixed schedule
- Sharing: invite caregivers to log together in real time
Hearth uses Tailscale for networking and auth. The docker-compose.yml runs
three containers: Tailscale joins your tailnet and advertises the hostname
hearth, the app shares its network namespace, and Watchtower polls
GHCR every 60s and recreates the app
container when a new :latest image lands. Only devices on your tailnet can
reach the app. Tailscale handles TLS.
git clone https://github.com/jeremysball/hearth.git
cd hearth
# Tailscale auth key: https://login.tailscale.com/admin/settings/keys
cp .env.example .env
# Fill in TS_AUTHKEY, CERT_FILE, and KEY_FILE
sudo docker compose pull
sudo docker compose up -dThe app runs at https://hearth.<your-tailnet>.ts.net:8443. Every merge to
main builds a new image and rolls the host within about a minute. The app
is briefly unreachable (~2–5s) while Watchtower recreates the container. To
roll back, pin the app image to a specific :sha-<hash> tag in
docker-compose.yml (find the hash in the
GHCR package versions)
and run sudo docker compose up -d. Watchtower ignores pinned non-:latest
tags.
Requires Go (version in go.mod). The frontend embeds into the binary at build time, so the resulting binary is self-contained.
go build -o hearth-server ./cmd/hearth
./hearth-serverDB_PATH defaults to a hearth.db relative to where you run the binary. Pick a stable working directory, or set DB_PATH to an absolute path.
sudo cp hearth-server /usr/local/bin/
sudo cp hearth.service /etc/systemd/system/
sudo systemctl enable --now hearthSettings come from environment variables or a .env file in the working directory:
| Variable | Default | Description |
|---|---|---|
HOST |
0.0.0.0 |
Listen address |
PORT |
8443 |
Listen port |
CERT_FILE |
(empty) | TLS certificate path |
KEY_FILE |
(empty) | TLS private key path |
DB_PATH |
hearth.db |
SQLite database path |
STATIC_DIR |
(empty) | Empty: serve the frontend embedded in the binary. Set to .: serve files live from disk, so edits show up on refresh without a Go rebuild. |
GEOIP_ENABLED |
false |
Set to true to enrich request logs from a local MaxMind GeoLite2 City database. |
GEOIP_DB_PATH |
(empty) | Path to GeoLite2-City.mmdb. Required when GeoIP is enabled. |
MAXMIND_LICENSE_KEY |
(empty) | Optional. If set and GEOIP_DB_PATH is missing, Hearth downloads and extracts GeoLite2 City on startup. |
Set both CERT_FILE and KEY_FILE to enable TLS; leave them empty for plain HTTP.
hearth/
├── cmd/
│ ├── hearth/ # Server entrypoint (thin main, imports server/)
│ └── vapidgen/ # One-off VAPID keypair generator
├── server/ # Go backend package: API, auth, SQLite, SSE sync
├── js/ # Vanilla JS frontend, no framework
├── index.html # PWA shell
├── sw.js # Service worker
├── styles.css # All styles
├── icons/ # PWA icons
├── Dockerfile # Multi-stage Go build
└── docker-compose.yml # App + Tailscale sidecar
The Go server owns the API, family-scoped data isolation, and real-time sync over SSE. One family means one baby, any number of caregivers, and shared entries and settings, all keyed by family_id. The frontend is a vanilla JS PWA: data lives in localStorage and syncs to the server when connected. SQLite holds the shared state.
Tailscale is the auth layer. It has no login page, no passwords, and no token hashing: anyone on your tailnet is trusted.
Run the server with STATIC_DIR set so frontend edits show up on refresh without rebuilding:
STATIC_DIR=. go run ./cmd/hearthWithout STATIC_DIR, the server serves the frontend baked in at the last Go build.
The server logs through Go's standard logger. On startup: db path, static mode, optional GeoIP database path, and address. Every API request logs structured fields ordered for scanning: method, status, duration, path, client IP, remote IP, host, proxy headers, user agent, caregiver ID, family ID, and available GeoIP fields. Static file errors (4xx/5xx) are logged; successful asset fetches are silent. Status and auth events are colorized only when the log stream is an interactive terminal; redirected files and systemd logs stay plain text.
Auth events log as auth event=... with caregiver ID, family ID, and origin IP. Events include signup, invite join, launch-token login, OAuth link/restore/signup, OAuth conflict resolution, and signout. Logs never include session tokens.
GeoIP is off by default. If GEOIP_ENABLED=true and GEOIP_DB_PATH points to a missing file, startup downloads GeoLite2 City when MAXMIND_LICENSE_KEY is set. Without a license key, startup stops with a message telling the operator to download the database from MaxMind or provide the key. Proxy-provided location headers, such as Cloudflare or Vercel country/city headers, are logged when present even without the local database.
The browser logs nothing by default. To enable sync and outbox tracing in DevTools:
// persists across reloads until cleared
localStorage.setItem('hearth.debug', '1')Or append ?debug to the URL for one session. To turn it off:
localStorage.removeItem('hearth.debug')Output is namespaced and colour-coded: info (green), warn (amber), error (red), event (blue).
Browser tests in tests/ run against a self-spawned server on plain HTTP, with no TLS and no Tailscale, so they work in CI.
npm install
npx playwright install chromium
npm testThe runner builds the Go binary if needed, starts the server on 127.0.0.1:18787, drives Chromium via Playwright, and tears down on exit. Each suite reports N pass, N fail; any failure exits non-zero.
MIT. See LICENSE.