value-added service · zero-knowledge relay
The open-source Ternimal stays LAN/VPN-only — that boundary is part of its security. When you need to reach your sessions from another network, the relay takes you there without port-forwarding or a self-run VPN: your sessions never leave your machine, and the relay only ever sees ciphertext.
~/plans
Both run the same open-source core. One stops at your network border; the other goes through it.
Self-hosted. Free forever, MIT license.
Every open-source feature, plus a path through any network.
~/how-the-relay-works
The paranoia that keeps the open-source version LAN-only, applied to the road beyond.
01
Your desktop Ternimal encrypts the session stream with a per-launch key before anything leaves the machine.
02
The relay routes encrypted packets between your desktop and your devices. It holds no keys and no token — nothing to leak, nothing to subpoena.
03
Your phone or browser decrypts locally. Sessions, scrollback and auth still live only on your hardware.
data residency: the relay stores no session content, no scrollback, no credentials — routing metadata only, discarded after connection teardown.
~/compare
| Ternimal open source | Ternimal relay | |
|---|---|---|
| LAN / VPN access | ✓ | ✓ |
| Beyond your network | ✗ (by design) | ✓ |
| No port-forwarding / no VPN to run | — | ✓ |
| Session mirroring + replay | ✓ | ✓ |
| Mobile soft keyboard | ✓ | ✓ |
| Token auth · kill-all switch | ✓ | ✓ |
| TLS certificate | self-signed + fingerprint check | managed CA — no warnings |
| Zero-knowledge encryption in transit | TLS to your machine | ✓ relay can't read |
| Session data lives | on your machine | on your machine — always |
| Support | GitHub issues | priority email |
| Price | ¥0 · MIT | ¥15 / month · ¥120 / year |
~/faq
Can the relay see my terminal?
No. The stream is encrypted end-to-end with a per-launch key; the relay routes ciphertext only. Your token never leaves your devices either.
Do I still run the desktop app myself?
Yes — that's the point. Sessions, scrollback and auth stay on your hardware. The relay is just the road back to them.
What happens to my sessions if the relay is down, or I stop paying?
Nothing. Sessions live in your desktop Ternimal and keep running; on LAN you're never interrupted. Reconnect later and the replay catches you up.
How do I cancel?
Any time. When the subscription ends you keep the full open-source version — same binary, same features on your LAN.
One subscription covers all your devices and every desktop you run Ternimal on.