{ "manifestVersion": 2, "type": "app", "id": "io.cloudron.rathole", "title": "Rathole", "description": "Rathole is a secure, stable and high-performance reverse proxy for NAT traversal, written in Rust. This package runs the server side: clients behind NAT connect to the control port with per-service token authentication (optionally Noise/TLS encrypted) and expose their local services through tunnels on the reserved port range. Configuration lives in /app/data/server.toml and hot-reloads on save. No database required.", "author": "rapiz1 / rathole-org", "website": "https://github.com/rathole-org/rathole", "documentationUrl": "https://github.com/rathole-org/rathole/blob/main/README.md", "contactEmail": "cloudron@tsys.dev", "tagline": "Secure, high-performance reverse-tunnel server for NAT traversal", "version": "0.5.0", "upstreamVersion": "0.5.0", "healthCheckPath": "/", "httpPort": 8000, "httpAuth": { "type": "proxy" }, "tcpPorts": { "CONTROL_PORT": { "title": "Control channel port", "description": "TCP port that rathole clients connect to in order to establish tunnels. Change only if it collides with another exposed app on this Cloudron.", "defaultValue": 2333, "containerPort": 2333, "portCount": 1 }, "SERVICE_PORT": { "title": "Tunnel exit ports", "description": "Start of the sequential port range reserved for tunneled services (100 ports by default: 5200-5299). Each [server.services.*] block in /app/data/server.toml binds one port from this range; the config hot-reloads, so services can be added without a restart.", "defaultValue": 5200, "containerPort": 5200, "portCount": 100 } }, "memoryLimit": 268435456, "addons": { "localstorage": {} }, "postInstallMessage": "Rathole is headless: there is nothing to click through. Open the **file manager** and edit **/app/data/server.toml** to define tunnel services (a random default token was generated on first start). The config hot-reloads on save. The client-side setup is documented in the package README.", "mediaLinks": [], "changelog": "Initial Cloudron package for Rathole 0.5.0 (server mode). Pre-compiled upstream binary with sha256 pin, token-authenticated tunnels on control port 2333 plus a 100-port service range (5200-5299), config with hot reload at /app/data/server.toml, and an auth-proxied status page on the HTTP port.", "icon": "file://logo.png" }