Remote access gateway. Overpass gives people short-lived SSH certificates and routes connections to servers that do not expose public SSH ports.

op login gate.example.com

Start here

• Getting started — Install Overpass, start the control plane, and connect the first node.
• How it works — Understand certificates, the proxy, nodes, and the trust boundaries.
• Configuration — Configure addresses, session lifetimes, certificates, and updates.

The connection path

1. A user signs in with a local account or OIDC.
2. Overpass issues an SSH certificate limited by the user's roles.
3. The node verifies the certificate before opening the session.

Common tasks

• Add and manage nodes
• Install and run on NixOS
• Define roles and node-label access
• Configure local and OIDC sign-in
• Run behind a reverse proxy
• Use op, opctl, and overpass