Hedgerow-App
In development

One app for your
Hedgerow servers.

Hedgerow-App brings your self-hosted Vigilant Vole, Keen Kestrel and Wise Wren together on your phone. One Overview answers “is everything OK?”, and the quick actions you reach for most are a tap away: pause a monitor, resolve an issue, approve an update.

In development. Nothing to install yet, and no release date.

Follow on GitHub See the roadmap

iPhone, iPad and AndroidOnly talks to your serversOpen source, AGPL-3.0

Concept illustration with made-up data. The real screens are still being built.

Your servers, one place

Three services, one overview.

Instead of three web pages in a browser, you get one app that answers “is everything OK?” and links straight to the right place. It works with your own self-hosted servers, whoever runs them. Connect the ones you use; you don’t need all three.

  • Vigilant Vole

    Uptime monitoring

    Is something down? See monitors with status and response time, pause one, or start maintenance.

    Vigilant Vole

  • Keen Kestrel

    Error tracking and analytics

    Have new errors or crashes appeared? Read the latest event and stack trace, then resolve or ignore the issue.

    Keen Kestrel

  • Wise Wren

    Container updates

    Is an update waiting? Approve it, schedule it, or roll back one that went wrong.

    Wise Wren

Not a copy of the websites. Setup, users, notification channels and other settings stay on each service’s web interface. The app is for looking and for the few actions you need on the go.

What you see

An Overview, then a tab for each service.

These are the screens planned for the first version. They are being built in the order shown in the roadmap.

  • Overview

    One card per connected service, with red, yellow and green at the top: monitors down, new errors in the last 24 hours, updates waiting. Tap a card to go to its tab.

  • Monitors

    Your monitors with status and response time, grouped as in Vigilant Vole, with search. A detail view shows a chart and recent incidents.

    • Pause or resume
    • Start maintenance

  • Issues

    Projects and their issues, sorted by latest or count. An issue shows its latest event with the stack trace, tags and release.

    • Resolve
    • Ignore

  • Updates

    Your servers and the targets with a newer version, plus scheduled and recent runs with their steps.

    • Approve
    • Schedule
    • Cancel
    • Roll back

Widgets: a small “is everything OK?” widget and a medium one with the three services. Notifications: see the questions below.

Security

Your servers, your tokens, your phone.

The app is a client for your own servers and nothing else. These are the rules it is built around.

  • Only your servers

    The app talks to the servers you add, through their existing REST API, with an API token. There is no Hedgerow account and no cloud in between.

  • Tokens stay on the device

    Tokens are kept in the iOS Keychain or the Android Keystore, for this device only, and are left out of backups.

  • Read-only is the default advice

    The app recommends a read-only token. You only need a token that can write if you want to use the quick actions.

  • Writes need your face or finger

    Pausing, resolving, approving and rolling back are confirmed with Face ID, Touch ID or your device’s biometrics, so a lost phone can’t change anything.

  • https only

    Connections use https. Addresses on your local network are the one exception, and the app never follows a redirect with your token attached.

  • Your data stays with your servers

    No third-party SDK sees data from your servers, and the app doesn’t send it anywhere except back to those servers.

Early software The app is still being built and hasn’t had an independent security review. The source is public so that anyone can read and check it.

A token is a key Anyone with a copy of a token can use it. Give each phone its own token, make it read-only if you can, and revoke it on the server if you lose the phone.

Platforms

iPhone, iPad and Android.

Two native apps with the same screens, in English and Norwegian. They work with any current release of the three services that has the REST API v1.

  • iPhone and iPad

    iOS 18 or later. It starts on TestFlight, with the App Store to follow.

  • Android

    Android 10 or later. An APK from the GitHub releases, not Google Play. The app updates itself: it downloads the new APK, checks its signature and asks you to confirm the install.

Status

Where it stands.

Hedgerow-App is in development and not available yet. The phases below are the order the work happens in, not cuts in scope, and there are no dates: each phase is done when it works.

  1. Now

    Foundation

    Connect a service by pasting its address and token, and an Overview with real data from Vigilant Vole, Keen Kestrel and Wise Wren.

  2. Then

    The tabs

    Monitors, Issues and Updates, for reading.

  3. Then

    Actions

    Pause, resolve, approve and roll back, each confirmed with biometrics.

  4. Then

    Connect with a QR code

    A “Connect the Hedgerow app” option on each server’s token page that shows a QR code to scan, with a token of the role and expiry you choose.

  5. Then

    Widgets and background refresh

    Home-screen widgets, and local notifications when the app refreshes in the background.

  6. Then

    Android

    The same screens on Android, with APK releases on GitHub and updates inside the app, with the signature checked.

  7. Then

    TestFlight, then the App Store

    Privacy details, the icon and screenshots, then a first build on TestFlight.

  8. Later

    Push notifications

    Instant alerts: on iOS through a Hedgerow push relay, on Android through UnifiedPush, without Google Play services.

Questions.

  • When can I use it?

    Not yet. The app is in development, with the foundation first, and there is no release date. Watch or star the repository to hear about progress.

  • Do I need a Hedgerow account?

    No. There is no Hedgerow account and no Hedgerow cloud. The app talks directly to your own servers with an API token you create there.

  • Do I need all three services?

    No. Connect the ones you run. The app checks which service lives at an address and what your token is allowed to do, and shows only what applies.

  • Which server versions work?

    Any current release of Vigilant Vole, Keen Kestrel or Wise Wren, which all offer the REST API v1. Some conveniences, like connecting with a QR code, will need a newer release of each service.

  • How will I get notifications?

    First, the app refreshes when you open it, when you pull down, and in the background when your phone allows it, and shows local notifications for changes. That needs no extra server, but it isn’t instant.

    Later, push notifications: on iOS through a Hedgerow push relay, on Android through UnifiedPush. A push only says that something happened. It never carries secrets.

  • Why isn’t the Android app on Google Play?

    The Android app is an APK from the GitHub releases, which can update itself from inside the app after checking the signature. That fits an AGPL-licensed project and doesn’t depend on Google Play services.

  • Is it open source?

    Yes, under the GNU AGPL-3.0-only.

    Contributions aren’t open yet. When they are, a contributor licence agreement (CLA) will be required for code contributions.