iCloud Sync

LogRaker keeps your setup in sync across all of your Macs through iCloud. It's always on and automatic - there's nothing to switch on and nothing to configure. Set LogRaker up on one Mac, sign in to the same iCloud account on another, and your sources, streams, and connection credentials appear there too.

What syncs

Your servers and sources (SSH, local, GCP / Firebase, AWS), streams, and the groups you organize them into.
Your layouts and monitors.
Your trusted SSH hosts - confirm a host's key once on one Mac and your other Macs already know to trust it.
Your connection credentials - SSH passwords, SSH private keys and their passphrases, GCP service-account keys, and AWS access keys and shared-profile credentials - so a synced source is ready to connect without re-entering anything or re-picking a key file.

How your credentials are protected

Your credentials are held to a higher standard than the rest of your configuration, and they travel separately.

They are never written into LogRaker's database, into your exported .lograker configuration file, or into the iCloud records that carry your setup. They live only in the macOS Keychain.
They move between your Macs through iCloud Keychain, which is end-to-end encrypted: protected by keys that only your own trusted devices hold. No one else - not even Apple - can read them in transit or on Apple's servers.
On each Mac they are stored available only after first unlock - readable after you've unlocked that Mac at least once since it started up, and never while it sits at the login window.

Because credentials live in the Keychain rather than in the synced configuration, iCloud sync requires that you also have iCloud Keychain enabled (it is on by default). If it's off, your servers and streams still sync, but their passwords and secrets won't travel with them.

How the rest is protected

Everything else - server names, hostnames, usernames, file paths, layouts, monitor patterns, and trusted-host fingerprints - syncs through your private iCloud database. It is encrypted in transit and stored encrypted under your iCloud account, and it contains no passwords or secret keys. Trusted-host records carry only public host keys and their fingerprints, never anything secret.

What stays on each Mac

A handful of machine-specific details stay local by nature. A local-file source tails a file on disk - that file's contents live on one Mac, so on another Mac the source points at that Mac's own copy (the log itself doesn't travel through iCloud). Everything needed to connect - passwords, passphrases, and the SSH, service-account, and AWS key files - now reattaches automatically through iCloud Keychain, with no re-picking.

Requirements

Sign in to iCloud and keep iCloud and iCloud Keychain turned on in System Settings ▸ [your name] ▸ iCloud. If you are not signed in to iCloud, LogRaker works exactly the same but doesn't sync any data with your other Macs.

See also Security Settings for the trusted-hosts list, and SSH Sources for how credentials are entered.