cmd trust - nself-org/cli GitHub Wiki

nself trust

Set up local dev trust (DNS, SSL, port forwarding).

Synopsis

nself trust [flags]

Description

nself trust configures everything needed for *.local projects to work locally with HTTPS: dnsmasq for wildcard DNS resolution, mkcert for trusted SSL certificates, and pfctl/iptables for port 80→8080 and 443→8443 forwarding. One run covers every ɳSelf project on the machine, not per project.

The command auto-detects the OS (macOS or Linux) and chooses the right toolchain. On macOS it uses Homebrew dnsmasq, /etc/resolver/local, and pfctl; on Linux it uses systemd-resolved or raw dnsmasq plus iptables. Steps that need elevation prompt for sudo (or trigger the macOS native admin dialog).

Use --status to see which components are already set up without making changes. Use --undo to print the exact commands to remove every change nself trust made. Use --skip-dns, --skip-ssl, or --skip-ports to opt out of any layer.

Flags

Flag	Default	Description
`--skip-dns`	false	Skip dnsmasq and `/etc/resolver` setup
`--skip-ssl`	false	Skip mkcert CA and certificate generation
`--skip-ports`	false	Skip port forwarding setup
`--status`	false	Show current trust status and exit
`--undo`	false	Print instructions to undo all trust changes
`--project`, `-p`	`""`	Path to nself project directory (allows running from any cwd)
`--help`, `-h`	—	Show help

Examples

# Full setup (run once per machine)
nself trust

# Check what's already configured
nself trust --status

# Set up only mkcert SSL, skip DNS and port forwarding
nself trust --skip-dns --skip-ports

# Print undo instructions
nself trust --undo

# Run from outside the project root
nself trust --project /Users/me/projects/myapp