Install and set up

Drover is on Google Play. Setting up a cluster takes an address and, if your cluster uses ACLs, a token.

Get it on Google Play

Add a cluster

1. Connect your phone to the network your cluster lives on, usually by turning on your VPN.
2. Open Drover and tap Add cluster.
3. Give it a name (say, "prod") and the address of any Nomad agent's HTTP API, for example http://10.0.0.5:4646 or https://nomad.example.com:4646.
4. Paste an ACL token if your cluster has ACLs on. Leave it empty if they're off.
5. Drover checks the connection step by step: the VPN, the address, TLS, the agent's version, the token. If something looks exposed it says so before connecting.

Which token to use

Give the phone its own token, so you can revoke it on its own if you lose the phone. A read-only policy covers everything Drover shows:

namespace "*" {
  policy       = "read"
  capabilities = ["read-logs", "read-fs"]
}

node {
  policy = "read"
}

agent {
  policy = "read"
}

operator {
  policy = "read"
}

nomad acl policy apply -description "Drover, read only" drover-read drover-read.hcl
nomad acl token create -name "phone" -policy drover-read

Paste the token's Secret ID into Drover. When you want the phone to act too, give it a token whose policy allows those actions (for example policy = "write" on the namespaces it should manage). If an action needs a permission the token lacks, Drover says which one and lets you paste a better token without losing your place.

Drover warns you a week before a token expires.

The free trial and the unlock

Drover starts with a 7-day free trial of everything, from its first launch. More › Unlock Drover shows the days left, and a banner on the Overview says so in the trial's last three days. When the trial ends, your clusters show Unlock to continue until you buy the one-time unlock there or in More › Unlock Drover; Settings, your saved clusters and the demo cluster stay open, and nothing is deleted. Payment goes through Google Play; Drover never sees your payment details.

If Google Play says the payment is pending (paying with cash, or waiting for family approval), Drover unlocks itself when the payment clears.

New phone? Restore the purchase

Sign in to Google Play with the account you bought Drover with. Drover asks Google Play when it starts, so it usually unlocks by itself; if it doesn't, tap Restore purchase on the Unlock page, or Restore in More › Settings › About. Your clusters and tokens aren't copied to the new phone: Drover keeps them out of Android backups on purpose. Add them again there. Android's backup does copy when your free trial started, so restoring a phone never starts it over.

Once unlocked, Drover remembers it, so a phone that can reach only your cluster (a VPN with no internet, in the middle of an incident) keeps every action.