The challenge
What the system needed to solve
Deliver useful alerts and remote actions through familiar messaging channels without turning a bot into an unrestricted remote shell.
The build
Engineering decisions
Created Telegram alert delivery for monitoring, backup, and public-route events with recovery notifications.
Built a management bot around explicit command allowlists, archive-safe file transfer, credential rotation, and audit-friendly behavior.
Integrated a self-hosted WhatsApp gateway for application workflows and staged a self-hosted Android SMS bridge with Firebase-backed delivery.
Kept credentials sealed or local-only and documented revocation and rotation procedures.
Architecture
How the pieces connect
- 1Monitoring or approved operator command
- 2Channel-specific gateway
- 3Authentication and allowlist checks
- 4Bounded workflow action
- 5Audit and response
Results
What changed
- Operational events reach the operator outside the home network.
- Command capabilities remain narrower than the underlying host privileges.
- Each messaging channel can be rotated or disabled independently.
