Show HN: Local development with .local domains and HTTPS • Hacker News Board

Re: Show HN: Local development with .local domains and HTTPS

#11

Post by agos » Tue, Aug 01, 2023, 1:08 PM UTC

capableweb wrote: post #6

Looks like an interesting project. What I guess is not really clear is why you'd want to do TLS for local only connections? Are the services published with the .local domain accessible from outside as well so it's like a ngrok alternative? I'm pretty sure I'm misunderstanding the value-add of having TLS for localhost connections...

browsers nowadays are picky about including content from and communicating with non secure hosts. Depending on your setup, it might make local development less of a hassle

Re: Show HN: Local development with .local domains and HTTPS

#12

Post by waithuh » Tue, Aug 01, 2023, 1:09 PM UTC

capableweb wrote: post #6

Looks like an interesting project. What I guess is not really clear is why you'd want to do TLS for local only connections? Are the services published with the .local domain accessible from outside as well so it's like a ngrok alternative? I'm pretty sure I'm misunderstanding the value-add of having TLS for localhost connections...

Maybe its just to avoid browsers nagging and blocking you from using certain APIs that require a "Secure Context (https)"

Re: Show HN: Local development with .local domains and HTTPS

#13

Post by redder23 » Tue, Aug 01, 2023, 1:09 PM UTC

I feels this is something that should NOT be a payable service at all. I am sure its not rocket science, not even Linux support?

Probably some open source tools for this to set it up your self for free.

Re: Show HN: Local development with .local domains and HTTPS

#14

Post by xcskier56 » Tue, Aug 01, 2023, 1:09 PM UTC

capableweb wrote: post #6

Looks like an interesting project. What I guess is not really clear is why you'd want to do TLS for local only connections? Are the services published with the .local domain accessible from outside as well so it's like a ngrok alternative? I'm pretty sure I'm misunderstanding the value-add of having TLS for localhost connections...

Dev Prod parity. There are starting to be more things that require tls even for localhost

Re: Show HN: Local development with .local domains and HTTPS

#15

Post by jasonlotito » Tue, Aug 01, 2023, 1:09 PM UTC

I'm curious about the license requirements. Is it 1 license per install, or 1 per install that is currently serving?

I have two devices, but I will never use them at the same time (and if I do by accident, I'd expect your software to stop working).

Re: Show HN: Local development with .local domains and HTTPS

#16

Post by francislavoie » Tue, Aug 01, 2023, 1:11 PM UTC

You can do this with Caddy already, with Automatic HTTPS. Caddy will automatically set up its own CA and use it to issue certs (using smallstep) with .local and .localhost domains.

We don't do anything with mDNS though but we've thought about it; none of us use macs anymore but PRs are welcome to make that work. I don't have enough expertise with mDNS to confidently implement it myself, and especially less-so because the implementation would be different on every OS (needs build flags to change the implementation depending on the build target). And this would be free and open source, rather than this paid product.

Re: Show HN: Local development with .local domains and HTTPS

#17

Post by waithuh » Tue, Aug 01, 2023, 1:12 PM UTC

Risky target audience. Maybe useful for people that hop networks regularly.

Re: Show HN: Local development with .local domains and HTTPS

#18

Post by kohanz » Tue, Aug 01, 2023, 1:12 PM UTC

We use puma-dev for this https://github.com/puma/puma-dev

Re: Show HN: Local development with .local domains and HTTPS

#19

Post by bsnnkv » Tue, Aug 01, 2023, 1:15 PM UTC

rickette wrote: post #10

Can recommend https://github.com/FiloSottile/mkcert for this purpose (local development certs).

I'm a big fan of mkcert for local HTTPS cert generation.

Re: Show HN: Local development with .local domains and HTTPS

#20

Post by rascul » Tue, Aug 01, 2023, 1:16 PM UTC

capableweb wrote: post #6

Looks like an interesting project. What I guess is not really clear is why you'd want to do TLS for local only connections? Are the services published with the .local domain accessible from outside as well so it's like a ngrok alternative? I'm pretty sure I'm misunderstanding the value-add of having TLS for localhost connections...

> I'm pretty sure I'm misunderstanding the value-add of having TLS for localhost connections...

.local tld is for the local subnet, not necessarily localhost.