SmileIV
tap the smile
Four taps checked. This hub is private. Protected apps (SSH, Ollama, dashboards) still use Cloudflare Access with your Google allowlist when required.
Movies, TV, music, photos.
VPN profiles · handshake · export.
IPSec profiles · setup · export.
Detroit eviction aid · resources.
Live TV channels.
EPG + lineup.
chi · hetzner · Termius · recovery · agent path.
Cloudflare Access hostname (not raw :22).
Secondary site · Access.
EAP setup · certs · profile.
Profiles and setup assets.
Services · VPN · Live TV status.
STATE · NEXT · agent brief.
Local models (Access-protected).
Primary tool gateway (consolidated).
Machine-readable rules for Goose / Hermes / headless.
Who runs where · model bus · ports.
Never lock yourself out. Updated 2026-10-02. Public :22 is closed on purpose.
| Goal | Do this |
|---|---|
| Oracle (human Terminal) | ssh chi or tunnel 127.0.0.1:2222 |
| Hetzner (human Terminal) | ssh hetzner or tunnel 127.0.0.1:2223 |
| Oracle (agent / headless) | CF Access service token + cloudflared access ssh → ubuntu@ssh-chi.smileiv.org |
| Hetzner (agent / headless) | Same pattern → root@ssh.smileiv.org |
| Termius (Mac with tunnels) | 127.0.0.1 ports 2222 / 2223 · SSH ID @smileiv |
| Phone / no cloudflared | IKEv2 VPN → ubuntu@10.0.0.51:22 |
| iMac (agent) | cloudflared access ssh → administrator@ssh-imac.smileiv.org |
| Locked out of Access | VPN → 10.0.0.51 · or cloud provider console |
| Label | Address | Port | User | Auth |
|---|---|---|---|---|
| Oracle CHI | 127.0.0.1 | 2222 | ubuntu | SSH ID @smileiv |
| Hetzner | 127.0.0.1 | 2223 | root | SSH ID @smileiv |
| Oracle-VPN | 10.0.0.51 | 22 | ubuntu | SSH ID @smileiv |
Tunnels: LaunchAgent com.smileiv.ssh-tunnels · manual smile-ssh-tunnels / ~/bin/smileyos-ssh-tunnels.sh · stop killall cloudflared
~/.ssh/id_ed25519 (and legacy names if still present)ssh-keys/smileyos_oracle · tunnel_key + CF Access service token in ssh-keys/env.sh/mnt/vault/secrets/ssh/ssh-chi.smileiv.org:22 (anycast / wrong path → timeout)smileiv as Linux user — that is the SSH ID label only