drok

Expose local ports to the internet with one command — powered by dynamoip and Cloudflare Tunnels.

drok http 3000
# => https://drok-a1b2c3.yourdomain.com → localhost:3000

No config files. No sudo. No ngrok accounts.

Prerequisites

• Bun (v1.0+)
• A domain managed by Cloudflare (free tier works)
• A Cloudflare API token with:
  • Zone : DNS : Edit
  • Account : Cloudflare Tunnel : Edit
• cloudflared (auto-installed on first run via Homebrew on macOS)

Create your Cloudflare API token

1. Go to https://dash.cloudflare.com/profile/api-tokens
2. Click Create Token
3. Use Custom Token with these permissions:
   • Zone → DNS → Edit (scoped to your domain)
   • Account → Cloudflare Tunnel → Edit
4. Copy the token — you'll need it for drok login

Install

# Clone and install
git clone <your-repo-url>cd drok
bun install
# Link globally so `drok` is available everywhere
bun link

Quick Start

1. Login (one-time setup)

drok login

This prompts for:

• Cloudflare API Token — the token you created above
• Base domain — e.g. yourdomain.com
• Email — optional, for Let's Encrypt notifications

Credentials are saved to ~/.drok/credentials.json (mode 0600). No files are created in your project.

2. Expose a port

# Start any local server first# e.g. python3 -m http.server 3000# Then expose it
drok http 3000

This will:

1. Create/reuse a Cloudflare Tunnel
2. Set a CNAME DNS record
3. Start a local reverse proxy on 127.0.0.1:8080
4. Print your live public URL

3. Test it

Open the printed URL (e.g. https://drok-a1b2c3.yourdomain.com) from any device — phone, another computer, anywhere.

Press Ctrl+C to stop.

Testing Locally (Step by Step)

Test 1: CLI runs

drok --help
drok http --help

Test 2: Login flow

drok login
# Enter your CF API token, domain, and optional email# Should print: "Credentials saved to ~/.drok/credentials.json"

Test 3: Verify config

drok config
# Should show your domain and masked token

Test 4: Expose a port

# Terminal 1 — start a test server
python3 -m http.server 8000
# Terminal 2 — expose it
drok http 8000

You should see output like:

╭──────────────────────────────────╮
│ drok — exposing localhost:8000 │
╰──────────────────────────────────╯
Domain : https://drok-a1b2c3.yourdomain.com
Proxy : http://127.0.0.1:8080
✔ cloudflared ready
✔ Tunnel ready
✔ DNS configured
╭─────────────────────────────────────────────────────────╮
│ ✨ Live on the internet! │
│ │
│ https://drok-a1b2c3.yourdomain.com → localhost:8000 │
│ │
│ Press Ctrl+C to stop. │
╰─────────────────────────────────────────────────────────╯

Test 5: Custom subdomain

drok http 3000 --subdomain myapp
# => https://myapp.yourdomain.com

Test 6: Override domain

drok http 3000 --subdomain api --domain other.com
# => https://api.other.com

Test 7: Logout

drok logout# Removes ~/.drok/credentials.json

Commands

Command	Description
drok login	Store Cloudflare credentials interactively
drok http <port>	Expose a local port to the internet
drok config	Show stored config (token masked)
drok logout	Remove stored credentials

drok http options

Flag	Short	Description
--subdomain <name>	-s	Custom subdomain (default: random drok-XXXXXX)
--domain <domain>	-d	Override base domain from credentials
--proxy-port <port>	-p	Local proxy port (default: 8080)

How It Works

Browser → https://myapp.yourdomain.com
→ Cloudflare Edge (TLS termination)
→ cloudflared daemon (outbound tunnel on your machine)
→ http://127.0.0.1:8080 (drok proxy)
→ localhost:3000 (your app)

• Uses Cloudflare Tunnel (Max mode) — no inbound ports, no firewall changes
• Tunnel credentials cached in ~/.localmap/tunnels/ (reused across runs)
• DNS CNAME records auto-managed via Cloudflare API

Project Structure

drok/
├── bin/drok.ts # Shebang entry point
├── src/
│ ├── index.ts # CLI root (citty)
│ ├── commands/
│ │ ├── http.ts # Tunnel orchestration
│ │ ├── login.ts # Interactive credential setup
│ │ ├── logout.ts # Remove credentials
│ │ └── config.ts # Display config
│ └── lib/
│ ├── credentials.ts # ~/.drok/ read/write
│ └── constants.ts # Paths, defaults
├── package.json
└── tsconfig.json

License

MIT