VPSMon

One SSH session, turned into a control surface.

A desktop application for the server you actually run. It holds a session open, parses what comes back into a live dashboard, and gives you the fourteen views you would otherwise be rebuilding out of systemctl and tail every time something looked wrong.

Private Windows 11 Qt / C++20
Get in touch
Overview

What it is.

A single-host operations console. It connects over an overlay network with the SSH key already on your machine, holds that session open, and feeds a parsed snapshot stream into the window rather than reconnecting for every panel.

It stores no credentials of its own. There is no vault, no saved password and no second identity to rotate, which means it can only ever see and do what your key can already see and do. Revoking the key revokes the application.

Everything it reads comes from tools already on the box: systemd, journald, the web server's access log, sar, fail2ban, the package manager, Postgres. There is no agent to install on the server and nothing to keep updated at the far end.

Views

Fourteen panels, five groups.

Overview
The live dashboard, fed off the collector stream: what is up, what is loaded, what changed since you last looked.
Services
The control surface for units, with every action it takes written down rather than performed and forgotten.
Timers
Every systemd timer with its next and last fire. The box converts the timestamps, because parsing a locale timezone abbreviation on the client is a bug waiting for a plane trip.
Logs
Journal reading per unit, without composing the journalctl invocation by hand every time.
Requests
The web server's access log, deep enough to scroll back through a burst and bounded so a crawler cannot grow the table without limit. Slow requests stand out, and clicking a cell copies it.
Terminal
An interactive root shell on the box, in the same window, for the times a panel is not the answer.
Documents
The change-control tree, read and edited in place, with a section outline for every document so a long runbook is navigable.
Risks
The register of what is knowingly accepted, with the identifiers the automated checks cite back at you.
Ledger
The append-only change log, with a fence-aware reader and writer and a repair tool for when two people wrote at once.
Drift
The running box checked against what the registry says should be running. It takes a bit over a second because it genuinely goes and looks at each one.
Databases
Read-only browsing, with a guard that actually holds rather than a checkbox that asks you to be careful.
Metrics
Historical load out of the daily sar files. Seven days is the useful ceiling: a month at ten-minute resolution is four thousand points into a chart a few hundred pixels wide.
Bans
Every fail2ban jail in one round trip rather than one per jail, because this is a view you glance at, not one you wait on.
Updates
What is installed, what is waiting for a person, and the reboot that clears it.
Design

Choices that are load-bearing.

Typing the hostname is the confirmation
A reboot is the one action that can put the box on the far side of a console-only recovery, so it does not get an OK button. A dialog that needs one more click is a dialog that gets clicked through.
Alerts fire on transitions
A notification when something changes state, not a repeating reminder that a thing is still broken, and a durable feed so an alert raised while you were away is still there when you get back.
One session, not one per panel
Every panel reads from a held connection and a shared snapshot stream. Six sequential calls would each pay a handshake for a screen somebody opened to glance at.
It hands off to Claude Code
When the answer is "somebody needs to go fix this", it opens a session in a Docked Console pane with the current state already in front of it.
Requirements

What it needs.

Operating system
Windows 11.
SSH client
The Windows OpenSSH client. Everything the application does is an SSH command, so the installer checks for it up front rather than installing cleanly and then reaching nothing.
Credentials
Your existing key and your existing SSH configuration. The application adds no identity of its own.
On the server
Nothing. No agent, no daemon, no exporter.
Status

Not publicly available.

VPSMon is an internal Locke Werks tool, built against one host and one way of running it. The source is private and there is no public download.

If you want to talk about it, whether that is access, licensing, or what it would take to point something like this at your own infrastructure, write to archon@lockewerks.com.