Bramble Signalling Relay on a Mac

Self-hosted Bramble sync relay; Nostr subset + ICE endpoint (one-click Docker) · Secrets & Vaults

The Bramble signalling relay introduces your Bramble devices to each other: it speaks a tiny subset of Nostr (ephemeral NIP-01 events) to pass encrypted WebRTC setup messages, and never stores events or sees the vault. One-click self-host below clones the Bramble repo and builds its relay image (Node, non-root, healthcheck) on 127.0.0.1:7400 with bounded logs, and generates a RELAY_TOKEN so only your devices can use it; the token is in relay.env beside the compose file (delete the line for an open relay). GET / answers bramble signaling relay; POST /ice-servers returns the STUN/TURN list, empty unless you set ICE_SERVERS (and TURN_SECRET for a coturn server using shared-secret credentials) in relay.env. For devices off this Mac put a TLS reverse proxy in front (Reverse Proxy + Certificates panes) forwarding WebSocket upgrades and /ice-servers, then in Bramble ▸ Settings ▸ Sync ▸ Advanced set Nostr relay URL to wss://your-host/?token=… and clear the TURN / ICE field so it follows the relay. Any public Nostr relay (strfry, nostr-rs-relay…) also works for signalling.

Run Bramble Signalling Relay with FrontierStack

Install or connect Bramble Signalling Relay; then check its status, ports and certificate from FrontierStack. The same screen links to firewall checks and backups where they apply.

Related in Secrets & Vaults

• Bitwarden
• Vaultwarden
• Bramble
• Bramble Mailbox
• HashiCorp Vault
• Step CA
• Let's Encrypt
• GlobalSign