PowerGuardian logo
PowerGuardian

Documentation

Technical reference for all PowerGuardian components.

Controller

The Controller is the central hub of your PowerGuardian setup. It runs on a NanoPi R3S or Neo3 and manages all Connectors, UPS monitoring, alerts, and your encrypted vault.

Features

• LLDP discovery — auto-detects Connectors on your local subnet • Encrypted vault — PBKDF2-SHA256 (600k iterations) for all secrets • Multi-site support — group Connectors by physical location • Alert rules — custom triggers on battery %, load %, or status changes • OTA updates — push new Connector binaries from the dashboard • TOTP MFA — hardware-grade 2FA for the admin interface • Cloudflare Tunnel — secure remote access without port forwarding • SNMP RFC 1628 — enterprise UPS protocol support • Built-in NUT connector — monitor a local USB UPS without a separate agent

Getting Started

1. Flash the PowerGuardian controller image to your NanoPi 2. Open http://nanopi.local:9090 in your browser 3. Complete the setup wizard — set admin password, configure network 4. Enable LLDP scanning to discover Connectors automatically 5. Add your first UPS under Devices → Add New 6. Set up alert rules under Alerts → New Rule

Linking Your License

1. Log in at powerguardian.cloud/account 2. Copy your license token from the Account portal 3. In the Controller: Settings → License → Link License 4. Enter your email address 5. Enter the 6-digit code sent to your email 6. Your Controller is now license-verified

Connector OS

The Connector is a lightweight Go agent that runs on network-connected devices and bridges your UPS hardware to the Controller via WebSocket.

Features

• NUT protocol — USB/serial UPS via Network UPS Tools • SNMP RFC 1628 — enterprise networked UPS systems • WebSocket streaming — real-time telemetry to the Controller • Auto-reconnect — exponential backoff on connection loss, no data loss • OTA self-update — replaces its own binary on command from the Controller • LLDP beacon — announces itself to the Controller automatically • Encrypted vault communication — all tokens encrypted in transit

Installation

1. Download the pg-agent binary for your architecture (ARM64 or ARMv7) 2. Copy to /usr/local/bin/pg-agent and run: chmod +x /usr/local/bin/pg-agent 3. Set environment variables: CONTROLLER_URL=ws://your-controller-ip:9090/ws CONNECTOR_TOKEN=your-token-from-controller 4. Create a systemd service for automatic restarts on reboot 5. The Connector appears in the Controller dashboard within seconds

Supported Hardware

Runs on any Linux ARM device: • Raspberry Pi Zero W / Zero 2W • Raspberry Pi 3 / 4 • NanoPi R3S, Neo3, Zero2 • OpenWrt-compatible routers (via cross-compiled binary) • Any x86_64 Linux system (for testing) Minimum: 64 MB RAM, 50 MB disk space

Cloud & Licensing

The PowerGuardian cloud handles license management, passwordless authentication, and your account portal at powerguardian.cloud.

How It Works

After purchasing a Home or Pro license via PayPal, you receive a welcome email with setup instructions. Log in at powerguardian.cloud with your email — no password needed. Your license token is shown in the Account portal and is used to activate your Controller.

Magic-Link Login

1. Go to powerguardian.cloud/login 2. Enter your email address 3. Click the link in the email we send you (valid 15 minutes) 4. You're logged in — session lasts 24 hours No passwords to remember. No OAuth. Just your email.

Plans

Home — €4.99/month or €45/year • 1 Connector included • Single site • All core features Pro — €14.99/month or €140/year • 5 Connectors included • Multi-site support • All core features Add-on Connector — €2.99/month or €25 one-time • Add one extra connector to any existing plan