Filamama is built for the home network. Phones back up and people browse when they're at home.
- One HTTPS listener on the home network, port 5400 by default, with the server's own certificate.
- TLS everywhere, with the server's key pinned on each phone at pairing.
- Pairing codes work once, for ten minutes.
- No outbound calls: no telemetry, no update checks, no CDNs. The server talks to your devices on your network and nothing else.
- No tunnel, no proxy, no public certificate built in.
Don't forward port 5400 on your router.
Ports
On Linux with a firewall, open TCP port 5400 (the web app and backups) and UDP port 5353 (mDNS, how phones find the server). See Install on Linux.
mDNS doesn't cross subnets or VLANs; pair by QR code or typed address instead. Guest networks and client isolation block it too.
Away from home
See Remote access.