cmd trust

nself trust

Moved to nself config trust in v1.5.0, removed in v1.6.0. The old spelling keeps working until then.

See cmd-config for the current command. Command-Canon lists every move.

Previous content

Set up local dev trust (DNS, SSL, port forwarding).

Description

nself trust configures everything needed for *.local projects to work locally with HTTPS: dnsmasq for wildcard DNS resolution, mkcert for trusted SSL certificates, and pfctl/iptables for port 80→8080 and 443→8443 forwarding. One run covers every ɳSelf project on the machine, not per project.

The command auto-detects the OS (macOS or Linux) and chooses the right toolchain. On macOS it uses Homebrew dnsmasq, /etc/resolver/local, and pfctl; on Linux it uses systemd-resolved or raw dnsmasq plus iptables. Steps that need elevation prompt for sudo (or trigger the macOS native admin dialog).

Use --status to see which components are already set up without making changes. Use --undo to print the exact commands to remove every change nself trust made. Use --skip-dns, --skip-ssl, or --skip-ports to opt out of any layer.

Headless hosts (CI, automation, containers). With NSELF_HEADLESS=1 or CI=1 (NSELF_HEADLESS=0 overrides CI), nself trust, nself dns-setup and the CA/hosts steps of nself build never raise an admin prompt and make no system change. Each step still checks its state first: a step that is already configured reports "already present"; a step that is missing is reported as skipped (headless) and the command exits 0. Run nself trust once on a machine where someone can answer the admin dialog. Accepted truthy values: 1, true, yes, on. In --json mode a run that skipped steps reports ok: false. On Linux, CI=1 also skips root-run changes (a root container); set NSELF_HEADLESS=0 to run them.

Examples

# Full setup (run once per machine)
nself trust

# Check what's already configured
nself trust --status

# Set up only mkcert SSL, skip DNS and port forwarding
nself trust --skip-dns --skip-ports

# Print undo instructions
nself trust --undo

# Run from outside the project root
nself trust --project /Users/me/projects/myapp

See Also

• cmd-dns-setup, /etc/hosts entries (alternative to dnsmasq)
• cmd-ssl, manage SSL certificates
• cmd-doctor, diagnose connectivity issues
• Commands, full command index

← Commands | Home →