🛠 kielay infra — cheat sheet

Self-hosted sharing from the Mac Studio. Full docs: ~/Developer/infra/ (git repo). This page: docs.kielay.com, invited-only, served by the very system it documents.

Share something

SHARE=~/.claude/skills/share/share.sh
$SHARE static report ./out             # → https://report.kielay.com
$SHARE port facets 5173                # → https://facets.kielay.com
$SHARE static memo ./m --invite a@b.c  # invited-only (email PIN)
$SHARE list
$SHARE rm report

Or tell Claude: "share this". Add --domain delta-dms.com for work shares.

How it flows

Internet → Cloudflare (DNS/TLS/Access)
        → tunnel (outbound-only daemon on the Studio)
        → Caddy :8788 (~/Shares/<host>/)  or  local app port

No open ports at home. *.kielay.com wildcard is pre-routed to the personal tunnel.

Key facts

Personal tunnel	`kielay-share` · daemon `com.kielay.cloudflared-share`
Work tunnel	`delta-dms-tunnel` · production — script-only edits
Tokens	1Password only, fetched via `op read` at runtime
Invite login	One-time PIN (emailed code) or Cloudflare SSO · team `kielay`
SSE caveat	keepalive every ~30s or Cloudflare kills the stream at 100s

If something breaks

`404`	share not published — `$SHARE list`, republish
`502`	local app isn't listening on that port
`503`	tunnel daemon down — `sudo launchctl kickstart -k system/com.kielay.cloudflared-share`
static 404s	Caddy — `brew services info caddy`; folder name must equal hostname

Roadmap

✅ Cloudflare footing · ✅ /share skill · ⬜ Coolify in OrbStack (app platform) · ⬜ Pangolin VPS bouncer (self-hosted) · ∞ promote anything that earns a buy button to real hosting.