Quartermaster iOS App Review & Step‑by‑Step Setup Guide – Control 41+ Self‑Hosted Services From Your iPhone

The Community Spark #

The r/selfhosted subreddit lit up this week when a user posted “Quartermaster, a native iOS app for controlling your self‑hosted stack. 41 services (and counting), pure client, no backend”. The post hit the front page within hours, racking up more than 12 k up‑votes and a flood of comments.

Why did it explode? Because most self‑hosters still juggle multiple web UIs on a laptop or rely on generic reverse‑proxy dashboards that don’t speak iOS natively. A single, offline‑first iPhone app that can talk directly to Docker, Portainer, Home Assistant, and dozens of other services feels like the missing piece of the “anywhere‑control” puzzle.

The community’s core question became clear:

“Can Quartermaster really replace my laptop dashboard, and how do I get it working without opening security holes?”

Below we synthesize the Reddit dialogue, verify claims with real‑world testing, and give you a complete, production‑ready guide.

Synthesized Community Perspectives #

Takeaway: The community embraces Quartermaster’s philosophy (privacy‑first, client‑only) but asks for hardened token storage and clearer TLS guidance. Our guide incorporates those concerns.

Deep‑Dive Actionable Guide / Technical Tutorial #

Below is a battle‑tested, end‑to‑end walkthrough that you can copy‑paste into your terminal. We’ll assume:

• You have a self‑hosted stack behind a reverse proxy (Caddy or Nginx) with valid DNS.
• Each service exposes a REST API or WebSocket and supports token‑based auth.
• Your iPhone runs iOS 17+.

1. Prepare Your Services for Mobile Access #

1. Enable HTTPS with Trusted Certs

   # Example using Caddy for automatic TLS
   yourdomain.com {
       reverse_proxy localhost:80
       tls you@example.com
   }
   

   Why? Quartermaster refuses plain‑HTTP connections unless you explicitly toggle “Allow insecure”. This avoids accidental credential leakage on public Wi‑Fi.

2. Generate API Tokens
   Most services have a “Personal Access Token” (PAT) feature. Here’s a quick snippet for Docker (via Portainer) and Home Assistant:

   # Portainer (Docker) – generate token via API
   curl -X POST https://portainer.yourdomain.com/api/auth \
        -H "Content-Type: application/json" \
        -d '{"username":"admin","password":"YOUR_PASSWORD"}' | jq -r .jwt
   # Save the JWT securely (e.g., in 1Password)
   

   # Home Assistant – long‑lived access token
   # UI: Settings → People → Your user → Create Token
   

   Tip: Store each token in a password manager that can export OTP‑compatible entries. Quartermaster can import a CSV of service, url, token.

2. Install Quartermaster on iOS #

1. Open the App Store → search “Quartermaster – Self‑Hosted Dashboard”.

2. Tap Get → Install → Open.

   The app size is ~12 MB; no background services are installed.

3. Add Your First Service #

1. Tap + Add Service → Select Service Type (e.g., Docker, Nextcloud).

2. Fill in:

   • Base URL – https://docker.yourdomain.com
   • Auth Method – Bearer Token
   • Token – paste the JWT you generated.

3. Toggle Verify TLS (default ON). If you use a self‑signed cert, upload the PEM file under Settings → Certificates.

   Result: The dashboard instantly shows container status, logs, and start/stop buttons.

4. Bulk Import (41+ Services Made Easy) #

Quartermaster ships with a JSON import format:

[
  {
    "name": "Portainer",
    "type": "docker",
    "url": "https://portainer.yourdomain.com",
    "auth": {
      "method": "bearer",
      "token": "eyJhbGciOi..."
    }
  },
  {
    "name": "Home Assistant",
    "type": "homeassistant",
    "url": "https://ha.yourdomain.com",
    "auth": {
      "method": "bearer",
      "token": "eyJhbGciOi..."
    }
  }
  // … add the rest
]

1. Save the file as quartermaster_import.json on iCloud Drive.
2. In the app: Settings → Import → Choose File.
3. Review the auto‑detected services; enable/disable as needed.

5. Secure Token Storage on the Device #

Quartermaster uses Apple’s Secure Enclave to encrypt tokens at rest. To double‑lock:

1. Enable Face/Touch ID under Settings → Biometric Unlock.
2. Turn on “Require Passcode after 5 min of inactivity”.

If the phone is lost, you can remote‑wipe the app data via Find My iPhone → Erase Data.

6. Automations & Widgets #

Quartermaster provides Siri Shortcuts for common actions:

• Start/Stop a Docker container

  Shortcut: "Quartermaster – Start Plex"
  Action: quartermaster://run?service=plex&action=start
  

Add the shortcut to the Home Screen or Widget Stack for one‑tap control.

7. Monitoring & Alerts #

1. Open Settings → Alerts.
2. Choose Push, Email, or Webhook (e.g., to a Discord channel).
3. Define thresholds (e.g., CPU > 80 % on any container).

Quartermaster will poll the selected services every 5 minutes (configurable) and fire alerts via Apple Push Notification Service (APNS).

8. Troubleshooting Common Pitfalls #

Pros & Cons / Comparative Table #

Verdict: For mobile‑first operators who need a single pane of glass across many services, Quartermaster wins on convenience and security. Power users who already run a dedicated dashboard may still prefer Portainer for deep Docker analytics.

The Verdict / Expert Advice #

Bottom line: Quartermaster delivers on its promise—control your entire self‑hosted stack from a native iOS app without a backend—provided you follow the TLS and token‑storage best practices outlined above.

Frequently Asked Questions (FAQ) #

1. Does Quartermaster store my passwords in the cloud?
No. All credentials are encrypted locally in the iOS Secure Enclave and never leave the device unless you explicitly export them.

2. Can I use Quartermaster with services that only support HTTP?
Yes, but you must enable the “Allow insecure connections” toggle in Settings. This is discouraged for anything beyond a trusted LAN.

3. How does the app handle token expiration?
When a token returns a 401, Quartermaster marks the service as “Auth needed”. You can re‑enter a fresh token manually or use the built‑in OAuth2 Refresh flow for services that support it (e.g., Nextcloud).

4. Is there an open‑source alternative?
A few community projects (e.g., SelfHostDash) aim to replicate the UI, but none currently offer the same breadth of native iOS integration or offline‑first design as Quartermaster.