Run remotefs

Run remotefs on the computer that can reach your files or NAS. Open its web interface from that computer or through an encrypted tunnel from another one. SMB and NFS connections originate from the computer running remotefs.

1. Install

Choose one option.

macOS with Homebrew

brew install mightymorgs/tap/remotefs

Homebrew installs Python and libnfs for you.

Windows x64

Download the 0.4.0 portable ZIP and extract it. Open PowerShell inside the extracted remotefs folder. Use .\remotefs.exe in place of remotefs in the commands below. Python and libnfs are bundled.

The WinGet submission is awaiting review. Once accepted, install with:

winget install --id mightymorgs.remotefs --exact --source winget

Open a new terminal if the remotefs command is not found.

Python on Linux, macOS or Windows

With Python 3.11+ and pipx installed:

pipx install remote-fs-browser

Local files and SMB work without a native library. NFS additionally requires libnfs 6 or newer. On macOS, use brew install libnfs; the Windows portable download includes it. Linux distribution packages may be older: see the system installation instructions for the pinned build, or set LIBNFS_LIBRARY to your compatible library's absolute path.

2. Create your login and start

remotefs

The first-run wizard shows detected network addresses and scan ranges, lets you choose browser access, and creates your login. Press Enter to accept the defaults and choose a password of at least 12 characters. Open the address printed at startup (by default http://127.0.0.1:8080/) and sign in. Keep the terminal open while using the app; press Ctrl+C there to stop it.

To revisit setup, stop the service and run remotefs setup. No configuration file is needed.

With the default setup choices, the service listens only on this computer. It exposes your home directory, detected mounted volumes and local private network ranges, with read/write access subject to your operating-system permissions. The startup banner lists the exact roots and networks. To try it without changing files:

remotefs serve --read-only

To use a different port, add --port 8090 and open http://127.0.0.1:8090/.

3. Browse and connect

• Local files: choose a root under This Computer, then click folders to browse. Click a file for a text preview where supported.
• SMB: open Add location, choose SMB and enter the server hostname or IP, share name, and that server's username/password. These are separate from your remotefs login. If share enumeration is unavailable, enter the share name directly.
• NFS: use Add location, choose NFS, enter the server and export path, and select version 3 or 4. The NAS must permit the service host and its NFS identity to access that export.
• Discovery: open Scan network and scan an allowed CIDR. Results display IP addresses and available DNS/NetBIOS names. A missing name does not prevent connecting by IP.
• Favourites: use a folder's menu to add it to the shortlist, then reopen it from the sidebar.

For a NAS outside the automatically detected ranges, restart with an explicit allowed range. For example, replace this address with your NAS address:

remotefs serve --allow-network 192.168.1.50/32

--allow-network replaces the detected network list; repeat it for additional ranges. Hostnames must resolve to permitted addresses. VPN/tunnel interfaces are not included in automatic subnet detection.

4. Manage files

Use the folder toolbar or … menu to create folders/files and upload files. Open a supported text file, edit and save it. Select checkboxes for batch operations; Copy or Cut, navigate to the destination, then Paste. Deletion asks for confirmation and permanently removes the selected files or folder contents.

For a direct download, use a file's Download action. For several files or a folder:

1. Select the items and choose ZIP.
2. Choose a ZIP preparation folder and a single ZIP or multipart size. To change the folder, use Choose folder…, browse local folders on the service computer, optionally use New folder, and select Use this folder. The choice is saved automatically. Start packing.
3. Open Downloads, wait for completion and save every part through the browser.
4. Join split parts in numeric order, then extract the resulting ZIP.

For exactly three downloaded parts, on macOS/Linux:

cat selection.zip.001 selection.zip.002 selection.zip.003 > selection.zip
unzip -t selection.zip
unzip selection.zip -d extracted

On Windows PowerShell, join the same three parts using the Windows binary-copy command, then extract:

cmd /c "copy /b selection.zip.001+selection.zip.002+selection.zip.003 selection.zip"
Expand-Archive -LiteralPath .\selection.zip -DestinationPath .\extracted

Substitute the actual filenames and include every numbered part. Each part is a slice of one ZIP, not a separate archive. Once your downloads are complete, Purge removes the staged copies from the service host; it does not delete the original files. Packing pause/resume controls archive creation, not your browser's transfer. Your browser controls where downloads are saved on the viewing device; choose the extraction folder in your archive application.

5. Reach it from another computer

One option is to leave remotefs listening on loopback and forward it through SSH. On your viewing computer:

ssh -N -L 8080:127.0.0.1:8080 YOUR_USER@YOUR_SERVER

Open http://127.0.0.1:8080/ on the viewing computer. Keep the SSH connection open. If local port 8080 is occupied, use -L 8090:127.0.0.1:8080 and open port 8090 instead.

For a trusted network or encrypted VPN, you can bind the service to a specific interface with remotefs serve --bind YOUR_SERVER_IP. Plain HTTP does not encrypt the login or file contents; use an encrypted tunnel or HTTPS when crossing an untrusted network. No firewall rules are created automatically.

One service, network access through Tailscale

Install remotefs on one computer that can reach your shares. Connect your viewing computer and the service host to Tailscale. On the service host, start remotefs with the networks it should expose:

remotefs serve --allow-network 192.168.0.0/24 --allow-network 192.168.122.0/24

On the viewing computer, open an SSH tunnel to that host’s Tailscale hostname or address:

ssh -N -L 8080:127.0.0.1:8080 YOUR_USER@YOUR_SERVER_TAILSCALE_NAME

Open http://127.0.0.1:8080/ in your browser and sign in. Keep the SSH connection open. This is the arrangement used in the network demonstration: a Mac browser, an SSH connection over Tailscale, and a Linux service reaching the LAN and VM subnet. SSH must be available and permitted on the service host.

For a browser HTTPS URL without an SSH tunnel, keep remotefs on loopback and configure Tailscale Serve. Your tailnet access rules must permit the connection. Version 0.2.2 also supports the download queue on plain-HTTP network origins; HTTP itself does not encrypt traffic.

The service host connects to SMB/NFS servers on your behalf. Those file servers do not need remotefs or Tailscale installed if the service host can already reach them over the LAN. A subnet router is not needed for this browser-to-service arrangement; it is needed only if your chosen network path requires routing through one. Remotefs does not create routes or bypass server permissions.

Open Scan network and change Ranges to probe to select a permitted subnet. For example, 192.168.122.0/24 is commonly a hypervisor’s NAT VM network. The service must run on a machine with a route to that subnet. VM and VPN networks are excluded from automatic discovery defaults, so permit them explicitly with --allow-network.

Map creates an application connection. Unmount closes it; neither action mounts a filesystem in the operating system on the service host or viewing computer. Save host credentials and add a network folder to the shortlist to reopen it after a page reload. Sidebar mappings themselves last only for the current page.

Remotefs runs as a Python service with a browser-based JavaScript interface. Local access and SMB use Python packages; NFS additionally uses libnfs 6+. No kernel SMB/NFS mount or drive mapping is required. To show a share or cloud connection as a folder or drive on this computer, start with remotefs serve --allow-mounts and right-click it → Mount on this computer… (details).

Background operation and updates

On macOS, create your account first, stop the foreground service, then run:

brew services start remotefs
# Stop it later:
brew services stop remotefs

For Linux systemd, macOS launchd or Windows startup-task installations with explicit policies, follow system service installs.

Update using the method you installed with:

brew update
brew upgrade mightymorgs/tap/remotefs
# Or, for a pipx installation:
pipx upgrade remote-fs-browser

For the Windows portable edition, stop the app and extract the new ZIP into a fresh directory. Your default config lives separately in %APPDATA%\remotefs. Restart after upgrading.

Upgrading from token login: run remotefs account --username YOUR_NAME, then restart. This migrates the existing config while retaining the saved-credential storage key. Back up both config.json and saved.json from ~/.config/remotefs (or %APPDATA%\remotefs on Windows). Linux also honours XDG_CONFIG_HOME.

If something fails

See the full README, security boundaries and tested environments for details.

Automated or always-on deployment

See the deployment guide for unattended installers and Ansible on Linux, macOS and Windows, including password setup, service management and upgrades.

Cloud and libvirt endpoints

Version 0.3.0 adds managed cloud connections and read-only libvirt pool/volume browsing. Install rclone separately on the service host for cloud access. Use Cloud storage → Add / manage to save a provider connection in the GUI, or remotefs remotes add from the CLI. Browse its folders and use Copy / Paste here across storage connections. No restart is needed. The endpoint setup guide covers credentials, provider authorization and the separate libvirt setup.