BastionSSH

BastionSSH: A Browser-Based SSH Manager Built for Teams

Most teams end up juggling a patchwork of terminal apps, scattered SSH config files, and shared credentials passed around in chat. BastionSSH replaces that patchwork with a single, self-hosted web application -- add your SSH keys and servers once, then connect to any of them from a full interactive terminal running entirely in the browser over WebSocket and xterm.js.

Every SSH key is encrypted at rest, and because BastionSSH is self-hosted, none of that data ever leaves your own infrastructure. There's no SaaS multi-tenant backend to trust -- each team runs its own isolated instance via a single Docker image or docker-compose file.

Why BastionSSH Stands Out

• 100% browser-based -- a clean web UI replaces desktop terminal apps entirely, with a real interactive shell over WebSocket + xterm.js.
• App-level cron jobs -- unlike server-side crontab, scheduled commands run from the application itself over SSH, so nothing is installed on target servers. You get a centralized view, run history, and failure alerts across your whole fleet.
• Bring your own AI -- plug in OpenAI, Anthropic Claude, or a local model via Ollama, LM Studio, or any OpenAI-compatible endpoint to suggest commands from natural language, explain terminal output, and diagnose errors.
• Team collaboration -- roles (Owner, Admin, Operator, Viewer), shared server/key/command libraries, and a full audit log of every connection, command run, and configuration change.
• Saved commands -- attach named, parameterized commands to any server for one-click execution, with run history and category grouping.
• Flexible storage -- SQLite by default for solo use, or PostgreSQL for teams and HA setups, with OAuth/SSO and TOTP two-factor authentication support.

BastionSSH is built with TypeScript across a Turborepo/pnpm monorepo, using PostgreSQL or SQLite for storage and Docker for distribution. It's free, open source, and self-hosted -- fork it, run it, and extend it however your team needs.