Aprox connects straight from your device to your own Proxmox servers. Before you add a server, check that your device is supported, that the server is reachable over HTTPS, and that the account you sign in with has the rights for what you want to do.

Devices

Device Minimum version
iPhone and iPad iOS or iPadOS 26
Mac macOS 26
Apple Watch watchOS 26, paired with an iPhone that runs Aprox
Android phone or tablet Android 8.0
Wear OS watch Wear OS 3, paired with a phone that runs Aprox

The watch apps never connect to your servers themselves. They work through Aprox on the paired phone. See Watch app.

Servers

  • Proxmox VE 7.0 or newer, and/or a Proxmox Backup Server that you run yourself.
  • Nothing needs to be installed on the server. Aprox uses the standard Proxmox API:
    • Proxmox VE listens on port 8006;
    • Proxmox Backup Server listens on port 8007.
  • The connection must use HTTPS. Aprox does not talk to a Proxmox server over plain HTTP. Proxmox serves HTTPS on these ports by default.
  • The self-signed certificate that Proxmox installs is fine. You confirm its fingerprint once. See Self-signed certificates.
  • For IP addresses and operating system details of a virtual machine, the QEMU guest agent must run inside the VM. Everything else works without it. See Guest agent details.

Network

  • Your device must be able to reach the server's address and port.
  • Servers on your home or office network: Aprox needs the local network permission on iPhone, iPad and Mac, and on recent Android versions. See Local network access.
  • Servers behind a VPN: connect the VPN on your device first. Without it, Aprox reports that no server was found at that address.

Your Proxmox account

You sign in with an ordinary Proxmox account, either with its password or with an API token. Aprox can only do what that account is allowed to do on the server.

  • To look around (dashboards, charts, tasks, backup jobs), a read-only role is enough. On Proxmox VE this is typically the PVEAuditor role on /.
  • To change things (power actions, hardware, snapshots, backups, storage content), the account needs the matching Proxmox privileges. See Create an API token for a list of typical privileges per feature.
  • For the console, you must sign in with a password. Proxmox does not accept API tokens for console access.
  • For background features (alerts, widgets that control guests, Siri and Shortcuts, the watch app), Aprox needs a saved password or an API token, and the server must not require a two-factor code. See Sign-in methods and two-factor.

When the account lacks a right, Aprox tells you which privilege is missing and on which path, for example: "Your account is not allowed to do that on /vms/101."

Good to know

  • You do not need an Aprox account. Your servers and credentials stay on your device.