T3Mods relay

Connect T3Mods or stock T3 Code to a host through an operator-issued relay endpoint. Enrollment is free and limited to 32 active hosts.

1. Enroll a host

Generate a separate Ed25519 key for each host:

ssh-keygen -t ed25519 -f ~/.ssh/t3mods-relay
ssh-add ~/.ssh/t3mods-relay

Send the operator ~/.ssh/t3mods-relay.pub. Keep the private key on the host. The operator will give you a name and port.

2. Start the host and tunnel

Start T3 Code on the host:

t3 serve --host 127.0.0.1 --port 3773

In another terminal, download and run the helper:

curl -fSLo relay-host.py https://t3relay.k0.tel/relay-host.py
python3 relay-host.py YOUR-NAME YOUR-PORT ~/.ssh/t3mods-relay --local-port 3773

Use the local port where T3 Code is listening. The helper pins the relay SSH host key and can forward only the port assigned to your enrollment. Keep both processes running.

3. Pair a client

On the host, run:

t3 pair

In the receiving client, open Add environment. Enter your endpoint and the fresh pairing token:

https://YOUR-NAME.t3relay.k0.tel:4705

Pairing tokens expire after five minutes and work once. Treat the token as a secret. The relay does not replace the official t3 connect service.

Access

TLS ends at the relay operator's server, so the operator can read traffic. T3 Code still checks pairing, sessions, permissions, and WebSocket tickets. Ask the operator to revoke a host to remove its route and SSH key; revoked ports are never reused.

T3Mods downloads · T3 Code remote access guide