Gately v0.6.5.4 released

November 11, 2026

Download v0.6.5.4 · GitHub Release

Wake-on-LAN: remote shutdown

Choose an SSH connection from the Web terminal for a device and enter a shutdown command, and the device card gets a "Shut down" button (API POST /api/wol/devices/{key}/shutdown).

• The form offers common commands for Linux (shutdown -h now), Windows (shutdown /s /t 0, with the OpenSSH server enabled) and macOS (sudo -n shutdown -h now);
• The connection must have been opened once in the Web terminal so its host key is recorded; unknown hosts are never trusted unattended;
• Each shutdown opens a new SSH connection and closes it afterwards, so a stale connection from before the device rebooted is never used; the command runs for at most 30 seconds, one at a time per device; a connection that drops before an exit code is returned counts as the shutdown having started;
• API tokens need webterminal:write in addition to wol:write to create, edit or copy devices or trigger a shutdown, and webterminal:read to list the available SSH connections.

Wake-on-LAN: Bemfa voice control

With Bemfa connected, voice assistants such as Xiao AI, Xiaodu and Google Assistant can turn devices on and off: create a topic ending with 001 (socket) or 006 (switch) in the Bemfa console, enter the same topic on the device, enter the user private key under "Wake-on-LAN → Bemfa" and enable it, then link your Bemfa account in apps such as Mi Home or Xiaodu.

"Turn on" wakes the device and "turn off" shuts it down remotely, and the state is written back to Bemfa after success; waking or shutting down from the UI or API writes it back too. Gately connects to bemfa.com:9503 with MQTT 3.1.1 over TLS and verifies the certificate, and the private key is masked in the API; the previous state the server replays on subscribe is not executed, and the same command repeated within 10 seconds runs once. Only one client can be online per private key.

Web service: extra HTTP port on a listener

A listener can also take a plain HTTP port (for example 80 next to an HTTPS listener on 443) that shares all sites and settings with the main port, so HTTP needs no separate listener with the same sites filled in again. With HTTPS on, choose "Redirect to HTTPS" (default; keeps the domain, path and query string, switches the port to the one in the access address, and uses 301 for GET/HEAD and 308 for other methods) or "Serve".

• ACME HTTP-01 challenges, the PROXY protocol and automatic firewall opening apply to this port too; if the port is taken, the main port keeps running and the listener status shows why;
• Domains without a matching site are not redirected: they get the unknown-domain 404 or go to the default site (a default site set to "close connection" closes it), the same as over HTTPS; the same-port HTTP redirect now works this way too;
• Saving checks the HTTP port for conflicts with other listeners' ports; when a listener is reached through Protocol Routing or Port Forwarding and has no access port set, the editor reminds you to enter the entry port.

Navigation panels: themes

Navigation panels use the same color schemes as the admin UI (Gately originals and classic palettes), and the panel editor sets the default skin. Visitors switch the theme with the palette button at the top right, which works like the admin UI: light, dark or system mode, color schemes previewed on hover and spreading out from the click when chosen, and a custom accent color and corner radius; on phones it opens as a bottom sheet. The choice is saved in the visitor's browser and is shared between the panel and the admin UI when both are on the same domain. See Web Service · Navigation panels.