Remote access

Using Hydor from your phone or another computer. Back to the README.

Hydor can run any command as your user, so treat access to it like SSH access to your machine. It listens on 127.0.0.1 only by default. To use it from your phone or another computer, put an HTTPS layer in front instead of opening the port:

• Tailscale: tailscale serve --bg 8790 serves it at https://<machine>.<tailnet>.ts.net, reachable only from your own devices.

• Cloudflare Tunnel: point a tunnel at http://localhost:8790. Cloudflare Access can add a second login.

• Your own reverse proxy, for example Caddy:

  CodeCopy

  agents.example.com {
      reverse_proxy 127.0.0.1:8790
  }
  

If the proxy changes the Host header, set ALLOWED_ORIGINS=https://agents.example.com.

Wrong passwords are counted by the visitor's address (a picture to read after three, an hour's pause after ten). The app takes it from the X-Forwarded-For header that a proxy on this computer or your own network adds; Cloudflare Tunnel and Caddy add it by themselves, and nginx needs proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;. Without it every visitor counts as the proxy, so one person's wrong passwords would pause everyone.

HTTPS is also what phones need for push notifications and to install the app.