@srulyt/devbox-tunnel
v0.1.1
Published
Easy installer and manager for devbox tunnel client on Windows machines
Readme
Tunnel installer
Purpose: provide profile-aware install and management helpers for devbox tunnel agents, especially Windows always-on agents.
Use the root bootstrap scripts first. They call installer APIs with profile defaults and avoid legacy client-secret/RSA setup drift.
Build and run
pnpm --filter @srulyt/devbox-tunnel build
pnpm --filter @srulyt/devbox-tunnel dev
pnpm --filter @srulyt/devbox-tunnel startBootstrap entry points:
pnpm bootstrap:local
pnpm bootstrap:enterprise
pnpm bootstrap:high-secConfiguration
| Variable | Required | Purpose |
| --------------------------------------- | -----------------------: | ------------------------------------------------------------------------ |
| TUNNEL_TENANT_ID | enterprise/high-security | Entra tenant. |
| TUNNEL_CLIENT_ID | enterprise/high-security | Public/federated client id. |
| TUNNEL_SCOPE | enterprise/high-security | Proxy API scope. |
| TUNNEL_BEARER_TOKEN / BEARER_SECRET | local-dev | Local shared bearer. |
| TUNNEL_BEARER_TOKEN_FILE | no | Read bearer from file. |
| SECURITY_PROFILE | no | Profile selection. |
| TUNNEL_CREDENTIAL_MODE | no | wif, device_code, managed_identity, or local-only shared_secret. |
| TUNNEL_NETWORK_NAME | no | Optional network. |
| MTLS_AGENT_CERT_PATH | high-security | Client certificate path. |
| MTLS_AGENT_KEY_PATH | high-security | Client key path. |
| EXPECTED_MTLS_SUBJECT | high-security | Expected certificate subject. |
| TUNNEL_AGENT_COMMAND | no | real or mock. |
Test
pnpm test -- apps/tunnel-installer
pnpm --filter @srulyt/devbox-tunnel buildCanonical docs
- Agent setup: ../../AGENT-SETUP.md
- Bootstrap: ../../docs/operations/bootstrap.md
- App registrations: ../../docs/security/app-registrations.md
- mTLS ingress: ../../deploy/ingress/README.md
- Legacy notes: ../../docs/legacy-agent-setup.md
