Cellular Raspberry Pi, managed remotely

Your Pi. Your Cloudflare. Anywhere there's a signal.

Pihat turns a Raspberry Pi and a cellular HAT into a device you can reach from anywhere — running entirely on your own Cloudflare account. No public IP, no open ports, no platform in the middle.

Start the setup wizard → Read the guide

Works on Raspberry Pi 4 & Pi 5 · Bring-your-own-Cloudflare · Free at any reasonable scale

Why Pihat

Remote access that you actually own

The tunnel, the DNS record and the access policy all live in your Cloudflare account — so you keep the control, the audit trail, and the keys.

Bring your own Cloudflare

Tunnel, DNS and access policy live in your account. Free at any reasonable scale, full audit visibility, and you decide who gets in.

Turnkey in minutes

Flash the image, run the browser wizard, drop one config file on the SD card, boot. The device provisions itself on first power-up.

Secure by design

No public IP and no open ports. Every connection rides a Cloudflare Tunnel, gated by Cloudflare Access at the edge.

Built to recover

Control it in real time over the HTTP API when it's online — and reach it by SMS out-of-band (OOB) if the data path drops. OOB keeps a device reachable without a working data session.

How it works

From SD card to remote control in three steps

No Linux wrangling and no port forwarding. The device does the provisioning for you.

Flash

Download the Pihat OS image for your Pi 4 or Pi 5 from the downloads section and write it to a microSD card.

Provision

Run the wizard at setup.pihat.net. It creates the tunnel, DNS and access policy in your Cloudflare account and hands you a config.env file.

Manage

Drop config.env on the card and boot. Reach the Pi from anywhere over SSH, the HTTP API, or the console — with SMS as your out-of-band lifeline.

Hardware

Standard Raspberry Pi. Cellular built in.

Pihat runs on the Raspberry Pi you already know, with a Teltonika LTE Pi HAT and a SIM — global connectivity provided by S-IMSY.

Raspberry Pi 4 and Pi 5 (Model B)
Teltonika LTE Pi HATs — with Quectel (RG255C-GL) or Teltonika (ALA440) modems
Hardware-agnostic software — the same commands work on either HAT
Real-time HTTP API, out-of-band (OOB) SMS recovery, and a management console

Control when onlineHTTP API

Out-of-band controlSMS (OOB)

Inbound accessCloudflare Tunnel

Edge authCloudflare Access

Public IP requiredNone

Setup time~20 min

Downloads

Get the Pihat OS image

Pick the image for your board and write it to a microSD card with Raspberry Pi Imager or balenaEtcher, then run the setup wizard. Verify each download against its SHA-256 checksum.

Raspberry Pi 5

Turnkey image — cellular, the HTTP API and out-of-band SMS recovery are baked in and start on first boot.

Download Pi 5 image

SHA-256 checksum

Raspberry Pi 4

Turnkey image — cellular, the HTTP API and out-of-band SMS recovery are baked in and start on first boot.

Download Pi 4 image

SHA-256 checksum

User guide

Flashing, first boot, running the setup wizard and managing the device day to day.

Read the guide (PDF)

Ready to bring a Pi online?

Grab an image, run the wizard, and you'll be managing your device over cellular in about twenty minutes.

Start setup Download images User guide