Get started

Connect Padella to your Tandoor server

Two minutes if you already run Tandoor. Padella needs Tandoor Recipes version 2 or later, on a server you host yourself or have an account on.

Before you start

You need the address you open Tandoor at in a browser, such as https://recipes.example.com, and either an API token or your Tandoor username and password. Padella checks the server as you type the address and shows its version. It needs Tandoor 2.0 or later; Tandoor 1.x servers can't sign in.

Sign in with an API token

Recommended. A token is a separate key you can revoke at any time without changing your password.

In Tandoor on the web, open your profile menu, choose Settings, then API.
Create a token with read and write access and copy it. Tandoor shows it once.
In Padella, enter your server address, choose API token, paste the token and tap Connect.

The token is kept in the iOS Keychain on your device and sent only to your server.

Sign in with a password

Choose Username & password on the sign-in screen. Padella signs in once, asks Tandoor for an access token, keeps that token and never stores the password.

Accounts that sign in to Tandoor through Google, GitHub or another single sign-on provider have no Tandoor password. Use an API token instead.

Cloudflare Access, Authentik and custom headers

If a login wall sits in front of your server, Padella can send extra headers with every request. Tap Advanced on the sign-in screen.

Cloudflare Access: tap the Cloudflare Access button. It adds the two headers a service token needs; create a Client ID and Secret in your Cloudflare Zero Trust dashboard under Access, then Service Auth, and paste them in.
Authentik, Authelia and others: add any header name and value by hand.

Headers are sent only to your server's address, never to recipe sites you import from. Values are stored in the Keychain.

Home servers on plain http

An address like http://192.168.1.20:8080 works. Off your home network, Padella warns you first: on an unencrypted connection, anyone in between can read your token. Where you can, give the server https with a reverse proxy, or reach it over Tailscale or another VPN.

If it won't connect

The address can't be reached: check that it opens in Safari on the same device. A server on your home network needs the phone on that network, or a VPN.
Sign-in is rejected: for a token, make sure it has read and write access. For a password, try signing in on the web first.
The server is on Tandoor 1.x: upgrade Tandoor, then try again.
Saving fails with a permissions error: some Tandoor versions before 2.7.2 reject writes made with a token. Update Tandoor.

Still stuck? Email support@liftbridgelabs.app with your Tandoor version and the message Padella shows. Please don't send tokens, passwords or your server address.