CaptureAccounts, server settings, app definitions, bind-mounted files, Docker volumes, and shared databases.
Welcome to OurGrove
One box. Everything already on it.
Initial Setup Required
Create your first WebUI administrator account. This is separate from the Linux login you made during installation.
Find the one-time setup token
On the OurGrove server, sign in with your Linux account and run:
The command prints only the token and asks compatible terminals to copy it to your clipboard.
sudo ourgrove-bootstrap-token
YOUR APPS. YOUR SPACE.
Your Grove.
Checking server…
Checking your server…
Gathering app, backup, and resource information.
Make your server useful.
Your apps
Loading your apps…
Room to grow.
Server resourcesProcessor—
Current usage
Memory—
Checking capacity…
Storage—
Checking free space…
Temperature—
Processor temperature
Resource history Charts and refresh settings
CPU Usage
-Tracks active CPU time across the host from kernel scheduler counters.
Memory Usage
-Shows resident memory pressure using available-vs-total RAM.
Disk Usage
-Represents root filesystem occupancy using live statfs values.
CPU Temperature
-Die temperature read from on-die thermal sensors via hwmon/thermal subsystem.
Advanced diagnostics API checks, recent probes, and detailed system diagnostics Show details
API Health
Service checksService Overview
Each card shows what part of OurGrove it supports, the latest response, and a short trend for this session.
warming up...
Recent Health Checks
last 8 checksWaiting for first probe cycle...
healthy
auth-gated
degraded
offline
not yet updated
System Diagnostics
Loading diagnostics...
TOOLS FOR EVERYDAY LIFE AND WORK
Apps.
Find tools for the things you want to do. Each app runs on your OurGrove server. Read what it does, then choose Set up app to review the options before installing.
More options
Loading installed apps...
Looking for low-level container details?
Containers are a low-level view
Containers are the technical building blocks behind your apps. Stopping, restarting, or removing a container directly can break an app in ways Uninstall wouldn't.
If you're trying to update, remove, or check the logs of an app, Your Apps is probably what you want instead.
Containers (advanced)
Runtime Containers
| Access | Credentials | Actions | ||||
|---|---|---|---|---|---|---|
| Loading containers... | ||||||
0 selected
Container Logs
Loading logs...
Container Details
Inspect
Loading inspect data...
Recent Logs
Loading logs...
Help
Confirm
Details
KEEP WHAT MATTERS
Backups.
Create recovery points, keep nightly copies, and restore with confidence.
[ ... ]
Backup health
Checking backup safety...
Looking at local recovery points, schedule, and off-server copies.
Local copy
Nightly schedule
Off-server copy
SAVED ON THIS SERVER
Recovery points
These archives are stored locally. Download or copy important ones before relying on them for disk-loss recovery.
Saved backups
Restore is always an explicit action and creates a pre-restore safety backup first.
Loading backups...
Recover from another location Find backups on S3 storage or a NAS
Connect your backup storage in “Schedule and destinations” below, then choose where to look. Backups from your previous server appear here too.
Schedule and destinations Automatic backups and copies off this server
Local recovery points
-
Stored on this server for fast restore
Automatic backups
Checking...
No run recorded
NAS copy
Checking...
No destination configured
Object storage copy
Checking...
No destination configured
Protection plan
Schedule and destinations
Start with nightly local backups, then choose at least one destination that is physically outside this server.
1. Keep Local Backups
Fast recovery points stored on this server.
nightly backups
Local backups are the quickest way to undo mistakes. Add a NAS or S3 copy below so a broken disk does not take every backup with it.
2. Copy to a NAS
Save a copy to a shared folder on another device. Samba and Windows shares use SMB.
NAS connection
Checking connected backup storage...
Manual backups copy to NAS whenever NAS copies are enabled. SMB credentials are stored root-only on this server. NFS access is controlled by the NAS.
Find or connect a NAS share
Find a NAS on this network
Connect a Samba/SMB share on your local network. OurGrove reconnects it after reboot. NFS is also available for devices that use it.
For Samba/SMB, enter the share username and password, or leave both blank for guest access. NFS permissions are managed on the storage device.
Already know the share?
If scanning finds nothing (some NAS boxes block share listing but still allow a direct connection), enter it directly using the host above.
3. Copy to Object Storage
Use MinIO, Backblaze, Wasabi, Amazon S3, or another S3-compatible place.
Use object storage outside this server for real recovery. Local MinIO is allowed for testing, but it will not protect you if this machine or disk fails.
Do not include the bucket in the endpoint. Use HTTP only for trusted local testing.
Changes above do not take effect until they are saved.
How recovery works What is included and how to restore
How recovery works
One complete archive, then copies in safer places
OurGrove builds a rebuild-oriented archive. A local copy is fastest to restore, but only a NAS, object-storage, or downloaded copy protects you when this server's disk fails.
AutomateRun nightly and keep a predictable number of recent recovery points.
Copy off-serverSend each backup to a NAS or S3-compatible provider, or download it yourself.
Recover deliberatelyChoose a full restore, settings only, or app data only. A safety backup is created first.
Import is safe: selecting “Import backup file” only validates the archive and adds it to Recovery Points. Nothing is overwritten until you explicitly choose Restore.
Restore Backup
Choose what to recover from .
OurGrove will automatically create a safety backup before changing anything. Docker volume exports and shared database dumps in the archive are re-imported into Docker and the shared database during restore.
MAKE IT WORK FOR YOU
Settings.
You are signed in with a read-only account. An administrator can change server settings.
Server rebooted.
Now running -.
Reload to see the fresh state.
Appearance
Choose the amount of decoration. All styles keep the same warm colours and clear layout.
Time & Region
Loading timezone...
Loading time format...
Security
Recent Security Events
| Time | Action | Resource | IP |
|---|---|---|---|
| Loading events... | |||
User Management
| Username | Role | Actions | |
|---|---|---|---|
| Loading users... | |||
SMB File Sharing
Checking file sharing...
Looking for SMB users and app-created shares.
Use a named SMB user for private folders. Guest access is easier for trusted home networks, but anyone who can reach this server on the LAN may be able to open guest shares.
| SMB user | Use | Actions |
|---|---|---|
| Loading SMB users... | ||
App Shares
These folders are created automatically by apps that expose useful files, such as downloads or imports.
| Share | Folder | Access | Connect |
|---|---|---|---|
| Loading shares... | |||
Phone Companion
Connect the OurGrove Android app to this appliance.
Open the app, choose Scan QR, then scan this code and confirm your appliance credentials. Each code is single-use and expires after 10 minutes.
Loading appliance address…
Domain Settings
Domain setup: Point public DNS at your router or internet-facing IP, then forward ports 80 and 443 to this server. OurGrove installs or repairs Traefik and uses its built-in Let's Encrypt certificate manager. No separate Certbot installation is needed.
DNS records to create
Wildcard app subdomains
Create this at your DNS provider so apps can use addresses like nextcloud.example.com.
*.example.com A/AAAA router/public internet IP
Base domain
Optional, but useful if you also want the root domain to reach this box.
example.com A/AAAA router/public internet IP
If your internet provider changes your public IP, configure Dynamic DNS below. If your DNS provider already handles that, leave it disabled.
Use a DDNS provider update URL. OurGrove runs it after saving and every 30 minutes. Tokens: {hostname}, {domain}, {public_ip}.
Not checked
Not configured
Checking...
Automatic via Traefik + Let's Encrypt
Email Notifications
Advanced email settings
System Information
-
-
-
Homepage Dashboard
Install Homepage from the app catalog, then open it from its installed app card.
Updates
-
-
Current
-
-
Update Available
Update source needs attention
Credentials are optional for public images and are stored root-only for bootc.
OS update is staged
The new OurGrove image is downloaded and prepared. Reboot when you are ready to start using it; apps will briefly stop while the server restarts.
Update Output
Last update log
Open Maintenance to load the update log.
Network Connection
Small connection checks run once a minute against Cloudflare and Google. Each check opens a fresh connection to catch intermittent failures. Results describe this server's internet access, not the router's internal health or a VPN client's connection.
The longer test runs 12 rounds and can take up to two minutes. Reports include timings and DNS/HTTPS failures, without response contents.
Loading network checks…
Disk Health
Loading disk health…
Loading disk health…
Support & Diagnostics
One bundle for supportStructured tar.gz with logs, system state, Docker state, stack configs, and sanitized settings.
Host Machine Logs
Host logs not loaded yet.
OurGrove Service Logs
Loading logs...
Docker Logs
Docker logs not loaded yet.
Network Speed Test
Measure upload, download, and ping from this appliance to the public internet.Uses the speedtest-cli package; results measure the path from the host's outbound interface, not from your browser.
Click Run Speedtest to measure your connection.
Repository Access
Loading...
Auto-update schedule
When off, new images still download and become available — but the server never reboots on its own.
Minimum 1, maximum 168 (one week). Used when no reboot window is set.
Restrict reboots to a daily window. Backups are not allowed inside this window — the two are validated against each other.
Loading…