CoolerControl

Appearance

On this page

Updated at:

Remote Access ​

CoolerControl can be accessed remotely to control cooling on another machine. By default, the daemon binds to the local loopback interface. Remote access requires adjustments to the daemon's configuration.

Direct Network Access ​

To expose the daemon directly on your network, you must configure the address and port to bind to. See the TCP Port and Address documentation for details on how to configure the daemon's network settings. By default, the daemon will use a self-signed certificate for non-local connections. See the SSL/TLS documentation for details.

WARNING

Remote access increases the risk of someone gaining access to your cooling devices. To minimize this risk, follow these best practices:

  • Use a secure transport:
    • Use a VPN/zero-trust tunnel over direct internet exposure. (i.e. Tailscale, Wireguard, etc.)
    • Use a valid SSL/TLS certificate. (i.e. Let's Encrypt, Cloudflare, etc.)
    • SSH port forwarding or a TLS-terminating reverse proxy (TLS termination proxy).
  • Enforce strong authentication: set a strong password and rotate it periodically.
  • Restrict network reachability: allowlist source IPs and lock down access with host firewall rules/ACLs.

SSH Tunnel ​

One can also use an SSH tunnel to access the daemon remotely. Replace user@remote-machine.ip with your remote username/host, and choose any free local port (e.g., 12000):

bash
ssh -N -L 12000:127.0.0.1:11987 user@remote-machine.ip

This forwards the daemon port on the remote server to your local machine on the chosen local port, e.g. 12000. You can then access the UI in your browser at http://localhost:12000/, or point the desktop application to the same address in its daemon connection settings. It will behave as if it were running locally.

Desktop Application Configuration ​

To connect the desktop application to a remote daemon:

  1. Open the desktop application
  2. Right-click on the system tray icon and click on "Daemon Address".
  3. Click "next" and enter the address and port of the remote daemon.
  4. Click "Apply"

See Also ​

Released under the GPLv3+ License.

Copyright © 2021-present Guy Boldon