Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: Local development with .local domains and HTTPS

localcan.com

Post reply on HN
Print view View original

61–70 of 108 posts

Re: Show HN: Local development with .local domains and HTTPS

#61

Post by EspressoGPT »

afavour wrote: post #40
EspressoGPT wrote: post #24

> Forget editing /etc/hosts or typing 192.168.0.12! Instead, pay $19 (instead of $29!) excl. VAT for a service that does this for you! God damn, I hate this industry.

And sometimes I hate the HN comment section. Obviously you’re not paying $19 for hosts file editing. Obviously! SSL cert generation is a pain in the ass, a tool that automates all of that for you is a valid tool. And I find the mDNS stuff really interesting, I do a lot of testing on mobile devices and connecting to my dev server from a phone can be really annoying. If you don’t like the price that’s fine: don’t pay i…

Start your app, put Caddy issuing TLS certs in front of it, put your PC's IP behind some name on your router (maybe using something like Zeroconf), and spend the $19 buying some flowers for your partner.

Re: Show HN: Local development with .local domains and HTTPS

#62

Post by francislavoie »

bavell wrote: post #42
bsnnkv wrote: post #19

Earlier quoted context omitted.

I'm a big fan of mkcert for local HTTPS cert generation.

I just setup a local https dev domain wildcard (*.internal) with mkcert and caddy a few days ago - working great on all my devices and only took a few hours to figure out and get working.

FYI if you're using Caddy, you don't need mkcert. Caddy has smallstep built-in which does the same thing, automatically.

If you're not using .local or .localhost, just add `tls internal` to your config to make Caddy issue certs using its local CA. Caddy attempts to auto-install its root CA cert, just like mkcert (almost identical code, in fact; see https://github.com/smallstep/truststore).

Re: Show HN: Local development with .local domains and HTTPS

#63

Post by blacklight »

"Forget editing /etc/hosts!"

Right.

Why would you edit a local file (or create a record on your own local DNS), generate your own self-signed certificate, and immediately get a website that can be tested on your machine, on your local network or on your VPN, when you can pay someone $19 per device (MacOS only) for something less powerful?

I understand that everybody needs to make money for a living, but this seems like the digital equivalent of bottling tap water and asking people to pay for it.

Re: Show HN: Local development with .local domains and HTTPS

#64

Post by lapcat »

nathell wrote: post #58
lapcat wrote: post #46

This submission violates the HN guidelines: "Please don't use HN primarily for promotion. It's ok to post your own stuff part of the time, but the primary use of the site should be for curiosity." https://news.ycombinator.com/newsguidelines.html The https://news.ycombinator.com/user?id=jarekceborski account was created 1 day ago, the only submission is this one https://news.ycombinator.com/user?id=jarekceborski and t…

I’d give the OP the benefit of doubt. I’ve always read that rule as discouraging excessive self-promotion, not a ban on one-off ones, and I think that should apply even when that one-off happens to be the very first submission by the account in question.

I'm not saying that the account should be banned, or that self-promotion should never be allowed. Nonetheless, the account creation date and lack of other comments clearly shows that it was created for the purpose of selling the submitter's product. I think it's fair to flag this submission dead and then see what else the person does with their account, if anything.

Re: Show HN: Local development with .local domains and HTTPS

#65

Post by andrewmackrodt »

moondev wrote: post #55

foo-192-168-1-1.traefik.me bar-192-168-1-1.traefik.me http://traefik.me/fullchain.pem http://traefik.me/privkey.pem

Nice, thanks for sharing this. I use sslip.io but they do not provide TLS certificates, so acme v1 validation is required using a wan IP address and ensuring router port forwarding or cloudflare tunnel etc is running. This magic domain is so much easier.

Re: Show HN: Local development with .local domains and HTTPS

#66

Post by afavour »

EspressoGPT wrote: post #61
afavour wrote: post #40

Earlier quoted context omitted.

And sometimes I hate the HN comment section. Obviously you’re not paying $19 for hosts file editing. Obviously! SSL cert generation is a pain in the ass, a tool that automates all of that for you is a valid tool. And I find the mDNS stuff really interesting, I do a lot of testing on mobile devices and connecting to my dev server from a phone can be really annoying. If you don’t like the price that’s fine: don’t pay i…

Start your app, put Caddy issuing TLS certs in front of it, put your PC's IP behind some name on your router (maybe using something like Zeroconf), and spend the $19 buying some flowers for your partner.

$19 would be a business expense so I don’t think buying my partner flowers with it would go down well.

In a professional context time is money. Setting up everything you’re discussing takes time and would need tweaking every time my network changes (not to mention require router access). $19 a year is a rounding error in terms of developer expenses. It’s entirely legitimate to pay for a tool to just do it for you.

Re: Show HN: Local development with .local domains and HTTPS

#67

Post by yakshaving_jgt »

xeckr wrote: post #36
EspressoGPT wrote: post #24

> Forget editing /etc/hosts or typing 192.168.0.12! Instead, pay $19 (instead of $29!) excl. VAT for a service that does this for you! God damn, I hate this industry.

What could you possibly hate about this? $19 is only a couple minutes worth of engineering labour. This is actually useful if you're running multiple servers on your network and don't want to remember the IPs of every single one of them. And not having to set up HTTPS for every single one of them is a plus.

Which programmers are paid $570 per hour?

Re: Show HN: Local development with .local domains and HTTPS

#68

Post by EspressoGPT »

leonheld wrote: post #50
Thoeu388 wrote: post #35

Lets introduce proprietary service with a payment plan. That will simplify things LOL. Just switch to Linux and you will never ever had to deal with this weird stuff agian!

Just to be fair: it seems it has no "payment plan", but a one-time payment.

That "one-time payment" will only give you updates for a year.

Re: Show HN: Local development with .local domains and HTTPS

#69

Post by [deleted] »

raincole wrote: post #27
EspressoGPT wrote: post #24

> Forget editing /etc/hosts or typing 192.168.0.12! Instead, pay $19 (instead of $29!) excl. VAT for a service that does this for you! God damn, I hate this industry.

When I read this comment I knew it must be targeting MacOS users. The only reason I clicked the link is to confirm my assumption. Edit: I'm not trying to shame MacOS users. I'm just saying that Linux and MacOS users (Windows users don't use /etc/hosts so out of discussion) have very different behaviour regarding paying for software.

[deleted]

Re: Show HN: Local development with .local domains and HTTPS

#70

Post by lxgr »

andrewmackrodt wrote: post #65
moondev wrote: post #55

foo-192-168-1-1.traefik.me bar-192-168-1-1.traefik.me http://traefik.me/fullchain.pem http://traefik.me/privkey.pem

Nice, thanks for sharing this. I use sslip.io but they do not provide TLS certificates, so acme v1 validation is required using a wan IP address and ensuring router port forwarding or cloudflare tunnel etc is running. This magic domain is so much easier.

I don't think this is actually compatible with the browser security model – specifically, CAs are required to revoke certificates for known-compromised private keys, according to point 4.9.1 here: https://cabforum.org/wp-content/uploads/CA-Browser-Forum-BR-...
Post reply on HN