Connectivity
Padu follows a local-first client-server model. The desktop GUI, browser client, or mobile companion communicates with a lightweight daemon (padu-daemon) running on your machine or remote devbox over loopback sockets or WebSocket transport.
1. Local Loopback (Default)
When running the Padu desktop application on your computer, the daemon is started automatically on 127.0.0.1:4789. No network setup is required.
2. Remote SSH Tunneling
You can run the Padu daemon on a remote Linux server or devbox and tunnel to it securely through OpenSSH from your desktop without exposing any ports publicly:
In Padu Desktop, open Settings → Add host → Remote SSH and enter ssh://user@devbox.internal. Padu leverages your existing ~/.ssh/config and SSH keys.
3. Tailscale / Private VPN (Recommended for Remote Access)
To connect from mobile companion apps or external laptops without opening firewall ports, use a private mesh network like Tailscale or WireGuard.
Step 1: Find the daemon machine's Tailscale IP
On the host running the Padu daemon:
tailscale ip -4
# Example output: 100.101.102.103
Step 2: Start daemon on Tailscale interface
Start the daemon binding to the Tailscale IP:
padu-daemon --bind 100.101.102.103:4789 --allow-non-loopback
Step 3: Connect client
- Open Padu on your mobile device or browser.
- Go to Settings → Add host → Direct connection.
- Enter the Tailscale IP (
100.101.102.103) and port4789. - Tap Connect.