OliveTin

OliveTin is a small, self-hosted Go service that turns a set of predefined shell commands into safe, click-to-run buttons in a web UI. Instead of handing out SSH access — or instead of writing one-off web hooks every time a household member needs to restart a service — administrators describe each action in a YAML config file (name, icon, command, optional dropdown or text inputs, confirmation dialog) and OliveTin renders them as a tidy dashboard that anyone with the URL can use. The result is a curated, bounded operational surface that exposes exactly the commands you want exposed and nothing else.

Common Use Cases

Households mount OliveTin on a wall tablet or family laptop to give non-technical members controlled buttons for restarting Plex, kicking the router, sending wake-on-lan packets to media PCs, refreshing the *arr stack, or starting a vacuum-cleaner job through home automation hooks. Self-hosters expose a panic-button page on a phone home screen with one-tap actions for the operations they actually run frequently — far faster than SSH-in-then-type for routine work. Small ops teams use OliveTin for a curated runbook UI: a single dashboard with "rotate logs", "take service X out of pool for 5 minutes", "trigger the canary deploy" buttons, each scoped to specific arguments, so junior engineers and on-call respondents have a guided way to perform routine recovery actions. Homelab operators wire OliveTin actions into Home Assistant, Node-RED, n8n, and other automation systems via the HTTP webhook endpoints, treating OliveTin as a controlled command-execution layer that automation hubs can invoke. Kiosk operators (lobbies, conference rooms, classroom front-of-room tablets) deploy OliveTin as the "magic buttons" page that lets non-admin users perform a few specific operations without exposing the underlying machine.

Key Features

• YAML-defined actions covering title, icon, shell command, dropdown and text inputs, timeouts, and confirmation dialogs
• Responsive single-page web UI suitable for phones, tablets, wall-mounted touchscreens, and desktop browsers
• Argument inputs supporting free-form text, fixed-choice dropdowns, and checkbox toggles for safe parameterised commands
• Confirmation dialogs and rate-limit settings so destructive actions need an extra deliberate click
• Optional execution-output dialogs to surface stdout/stderr in the UI without granting raw shell access
• HTTP webhook endpoints and REST API for triggering actions from Home Assistant, n8n, Node-RED, and custom automation systems
• Built-in icon library with hundreds of action-appropriate icons, plus support for custom uploaded icons
• Dark mode and accessibility-first UI passing major screen-reader and contrast checks
• Tiny single-binary Go footprint using only a few MB of RAM and barely any CPU when idle
• Optional reverse-proxy-aware authentication header support for integrating with SSO and identity providers
• Multi-arch container images (amd64 and arm64) for portability across cloud and Pi-class hosts
• Active open-source upstream with regular releases at olivetin.app

Why deploy OliveTin on Hostinger VPS

Running OliveTin on a Hostinger VPS gives self-hosters and small ops teams a curated, always-on command-execution dashboard reachable from any device without granting SSH access. Because the binary is tiny and the service does almost nothing when idle, OliveTin coexists comfortably with dozens of other self-hosted services on a small VPS plan — it pulls less than 50 MB of RAM and zero CPU until a button is pressed. Persistent volume storage keeps the YAML config, action history, and any uploaded icons durable across container restarts and host upgrades, so the operational surface you painstakingly curate survives any redeploy. Combined with Traefik-based HTTPS routing on a clean branded hostname, the dashboard is reachable from phones and tablets over TLS, and the webhook endpoints that automation systems hit are encrypted end-to-end. For deployments that need SSO, OliveTin's reverse-proxy-aware authentication makes integration with Authentik, Authelia, or oauth2-proxy straightforward. For deployments shared within a household or small team, putting OliveTin behind your VPS's basic-auth-protected proxy gives you safe, bounded shared access in minutes.