A single-binary CLI tool with interactive TUI for managing Rathole tunnels with Caddy reverse proxy. Uses your Caddyfile as the single source of truth - just edit one file and RCM handles the rest.
Prerequisites: This tool requires a working Rathole + Caddy setup. See rathole-tunnel for the complete setup guide.
flowchart TB
subgraph local["Your Machine"]
config["~/.config/rcm/"]
configyaml["config.yaml"]
caddyfile["Caddyfile"]
config --> configyaml
config --> caddyfile
end
rcm["rcm sync"]
config --> rcm
subgraph vps["VPS"]
servertoml["server.toml"]
vpscaddy["Caddyfile"]
ratholeserver["rathole-server"]
caddy["caddy"]
end
subgraph home["Home Machine"]
clienttoml["client.toml"]
ratholeclient["rathole-client"]
end
rcm -->|SSH| vps
rcm -->|SSH| home
internet["Internet"] --> caddy
ratholeclient <-->|Tunnel| ratholeserver
When exposing home network services through a VPS using Rathole + Caddy, adding a new service requires editing 3 config files across 2 machines:
server.tomlon VPS (rathole server)client.tomlon home machine (rathole client)Caddyfileon VPS (reverse proxy)
This is error-prone and tedious.
RCM lets you manage everything from a single Caddyfile:
# myapp: 192.168.1.100:3000
app.example.com {
reverse_proxy 127.0.0.1:5000 { ... }
}Then just run:
rcm syncRCM will:
- Parse the Caddyfile to extract service definitions
- Generate
server.tomlandclient.toml - SSH to both machines and deploy the configs
- Restart rathole and caddy services
- Single Binary - No dependencies, just download and run
- Interactive TUI - Beautiful terminal interface with keyboard navigation
- Plain Mode - Use
--plainflag for scripting and CI/CD - Service Comparison - See which services exist locally vs remotely
- Auto-Pull - Automatically pulls Caddyfile when setting up a new machine
- Safe Sync - Warns before removing services
Download the latest release for your platform from Releases:
# macOS (Apple Silicon)
curl -L https://github.com/AhmedAburady/rcm-go/releases/latest/download/rcm-darwin-arm64 -o rcm
chmod +x rcm
sudo mv rcm /usr/local/bin/
# macOS (Intel)
curl -L https://github.com/AhmedAburady/rcm-go/releases/latest/download/rcm-darwin-amd64 -o rcm
chmod +x rcm
sudo mv rcm /usr/local/bin/
# Linux (x86_64)
curl -L https://github.com/AhmedAburady/rcm-go/releases/latest/download/rcm-linux-amd64 -o rcm
chmod +x rcm
sudo mv rcm /usr/local/bin/If you have Go installed:
go install github.com/AhmedAburady/rcm-go/cmd/rcm@latestRequires Go 1.21+:
git clone https://github.com/AhmedAburady/rcm-go.git
cd rcm-go
go build -o rcm ./cmd/rcm
sudo mv rcm /usr/local/bin/mkdir -p ~/.config/rcmnano ~/.config/rcm/config.yaml# Paths
paths:
caddyfile: "~/.config/rcm/Caddyfile"
ssh_dir: "~/.ssh"
# VPS (Server) SSH Configuration
server:
host: "203.0.113.50" # Your VPS IP
user: "root"
ssh_key: "id_ed25519" # SSH key filename
rathole_config: "/etc/rathole/server.toml"
caddyfile: "~/rathole-caddy/caddy/Caddyfile"
caddy_compose_dir: "~/rathole-caddy/caddy"
# Home (Client) SSH Configuration
client:
host: "192.168.1.10" # Home machine IP (or hostname)
user: "pi"
ssh_key: "id_ed25519"
rathole_config: "/etc/rathole/client.toml"
# Rathole keys
rathole:
bind_port: 2333
token: "your-token-here" # openssl rand -base64 32
server_private_key: "..." # From: rathole --genkey
server_public_key: "..." # From: rathole --genkeyAdd a comment before each domain block to define the service:
# service_name: local_ip:portExample:
# homeassistant: 192.168.1.10:8123
ha.example.com {
tls /certs/cert.pem /certs/key.pem
reverse_proxy 127.0.0.1:5001 {
header_up Host {host}
header_up X-Real-IP {remote_host}
header_up X-Forwarded-For {remote_host}
header_up X-Forwarded-Proto {scheme}
}
}The VPS port (5001) is extracted from reverse_proxy 127.0.0.1:5001.
Simply run any command to launch the interactive interface:
rcm # Launch main menu
rcm list # Service list view
rcm sync # Sync view
rcm status # Status view
rcm pull # Pull view
rcm restart # Restart viewTUI Navigation:
↑/↓orj/k- NavigateEnter- SelectEsc- Go backq- Quit
Use --plain or -p for non-interactive output:
rcm list --plain # Plain text service list
rcm sync --plain # Plain text sync output
rcm status --plain # Plain text status
rcm pull --plain # Plain text pull
rcm restart --plain # Plain text restart| Command | Description |
|---|---|
rcm |
Launch interactive TUI |
rcm list |
List services (local vs remote comparison) |
rcm pull |
Pull Caddyfile from VPS to local |
rcm sync |
Deploy configs to both machines |
rcm status |
Check service health on both machines |
rcm restart |
Restart rathole and caddy services |
rcm restart # Restart all services
rcm restart --server # VPS only (rathole-server, caddy)
rcm restart --client # Client only (rathole-client)rcm list shows which services exist locally vs remotely:
┌─────────────────┬────────────────────┬──────────┬─────────────────┬───────┬────────┐
│ Service │ Local Address │ VPS Port │ Domains │ Local │ Remote │
├─────────────────┼────────────────────┼──────────┼─────────────────┼───────┼────────┤
│ homeassistant │ 192.168.1.10:8123 │ 5001 │ ha.example.com │ ✓ │ ✓ │
│ newservice │ 192.168.1.50:3000 │ 5002 │ new.example.com │ ✓ │ ✗ │
└─────────────────┴────────────────────┴──────────┴─────────────────┴───────┴────────┘
- First time? Run
rcm pullto get the remote Caddyfile - Edit your local Caddyfile - add/remove service blocks with comments
- Run
rcm sync- deploys everything automatically - Done!
# servicename: 192.168.1.100:8080
domain.com {
reverse_proxy 127.0.0.1:5000 { ... }
}# portainer: 192.168.1.50:9443
portainer.example.com {
reverse_proxy https://127.0.0.1:5002 {
transport http {
tls_insecure_skip_verify
}
...
}
}# blog: 192.168.1.100:8080
blog.example.com {
reverse_proxy 127.0.0.1:5003 { ... }
}
# blog: 192.168.1.100:8080
www.blog.example.com {
reverse_proxy 127.0.0.1:5003 { ... }
}Only one rathole tunnel is created - RCM deduplicates by service name.
# Build for current platform
go build -o rcm ./cmd/rcm
# Cross-compile
GOOS=linux GOARCH=amd64 go build -o rcm-linux-amd64 ./cmd/rcm
GOOS=darwin GOARCH=arm64 go build -o rcm-darwin-arm64 ./cmd/rcm
GOOS=darwin GOARCH=amd64 go build -o rcm-darwin-amd64 ./cmd/rcmMIT