Build · Deploy · Operate
Secure remote access to camera networks, built by you.
IPC Terminal is the build server tool for installers and cloud companies. One program creates the customer server, the on-site box, the guides and the audit trail, with no black-box image to trust.
One-time fee · one year of updates included
# add a customer and a site $ ipc-build customer add "Acme Bakery" \ --endpoint acme.vpn.example.com $ ipc-build site add "Acme Bakery" shop # create every script and guide $ ipc-build generate "Acme Bakery" # deploy the server over SSH $ ipc-build deploy server "Acme Bakery" # later: check on it $ ipc-build status "Acme Bakery"
Everything you need to run camera access for customers
From the first customer to the fiftieth site, the same repeatable workflow.
Guided wizard
Run ipc-build and follow the menu. It marks the next suggested step, and every action is also available as a command.
Customer server scripts
A WireGuard hub for each customer on a small Debian VPS, with a default-deny firewall, automatic updates and daily encrypted backups.
Box scripts
Turn a Lenovo ThinkCentre Tiny into a site box. The script detects the ports, sets up the tunnel and keeps its private key on the box.
Teams and roles
Viewer, operator and admin accounts. Operators only see the customers they are assigned to.
Secrets vault
Deployment keys and passphrases are encrypted with a master key kept in a separate environment file.
Tamper-evident log
Every action is written to a hash-chained activity log, so edited or deleted history can be detected.
Architecture
Cameras never touch the internet
The box sits between the customer’s router and the camera network. Cameras get no route out, and only the private tunnel can reach them. Viewers connect over plain WireGuard, with no cloud account in the middle.
- Separate IN and OUT ports on two networks
- The box’s private key never leaves the box
- Move a customer to a new server by changing one DNS record
Built for power cuts and bad routers
- Starts by itself when power returns
- Tunnel watchdog follows the server’s DNS name every 30 seconds
- Recovers when the router is switched off and on
- Automatic security updates and a scheduled reboot window
- Restarts 10 seconds after a kernel crash
Reliability
Set it up once. It keeps itself running.
A built-in acceptance test list covers the tunnel, the reboot, the power-loss and the router-loss test, so a box is only finished when it has proved it can recover without a visit.
Take control of your camera networks
One payment of €40. One year of updates included.
Buy now – €40 See what’s included