FireCtl:OPNsense&Proxmox Mgmt

FireCtl — Manage your OPNsense firewall from iPhone and iPad

Native iOS app for administrators, MSPs, and home-lab enthusiasts. Clean SwiftUI interface, Dark Mode, Widgets, and full iPadOS support.

THE APPROACH
FireCtl is not a web UI wrapped in an app. It is designed around the workflows you actually do on mobile: promoting a lease to a reservation, pushing an IP from Safari into an alias, taking a snapshot before a firmware update, checking what changed in the config since yesterday, checking WAN failover on the go. Every screen is a tool, not a rebuilt browser tab.

PRICING
Free to download with a 7-day free trial — no payment required to start. After the trial, the Dashboard (system health & online status) stays free forever. Pro unlocks everything else.
Subscriptions auto-renew unless cancelled at least 24 hours before the period ends, managed in your Apple ID settings. Already bought FireCtl before? You keep full Pro access automatically.
Privacy Policy: firectl.com/en/privacy · Terms of Use: firectl.com/en/terms

FEATURES
Dashboard & Widgets: live system status, four home-screen widgets (Multi-WAN failover, system health, VPN, certificate expiry), audit log.
Firewall: manage and filter rules, aliases with Share Extension (add hosts/IPs from any app), live logs with filters, universal search, and auto-refresh.
Ruleset check: reviews rules and aliases for six common issues — unrestricted allow rules, block rules without logging, disabled rules, rules without a description, empty aliases, and aliases no rule refers to. Findings you keep on purpose can be marked as accepted.
Configuration history: compare two configuration revisions and see what changed and when. How much is shown is set per area; in sensitive areas values are replaced with a placeholder.
Network: DHCP leases for ISC and Kea, reservations for ISC, Kea, and dnsmasq, promote a lease to a reservation or FreeRADIUS user in a tap, ARP/NDP tables, VLAN library, active states.
Gateways: live status, latency, RTT, and packet loss per gateway, Multi-WAN failover widget.
Services: Unbound DNS with host/domain overrides, OpenVPN, WireGuard, and Tailscale status, FreeRADIUS, Kea and dnsmasq DHCP configuration.
Diagnostics: Ping and Traceroute with live statistics.
Certificates: full list, expiry filters (30/60/90 days), revoke, CRL, delete.
System: firmware and plugin updates, configuration backups, snapshots, reboot.

PROXMOX VE INTEGRATION
Cluster overview with all nodes (CPU, RAM, storage, uptime). Start, stop, and restart VMs and LXC containers, snapshots, auto-snapshot before OPNsense firmware updates.

PROFILES
Up to 10 OPNsense and Proxmox installations, optional iCloud sync, quick switching, app lock with Face ID / Touch ID.

SECURITY
API keys stored in the iOS Keychain. No telemetry, no analytics, no ads, no cloud relay — direct connection from app to firewall. Self-signed certificates supported. Demo mode included.

SUPPORTED VERSIONS
OPNsense 24.x, 25.x, 26.x · Proxmox VE 8.x, 9.x (in preparation)

LANGUAGES
English, German, French, Spanish, Italian, Portuguese (Portugal and Brazil)

HELP & DOCUMENTATION
firectl.com · firectl.com/docs/permissions

Beta testing thanks: Chris Gelatt (https://www.linkedin.com/in/chrisgelatt/)