Proxy & IAM
Every VM you launch gets automatic HTTPS via a reverse proxy. No configuration needed.
How it works
When you create a VM named myproject, it becomes accessible at:
https://myproject.bootmeh.dev
The proxy handles:
- TLS certificate provisioning and renewal
- DNS routing
- HTTP โ HTTPS redirect
Access control
By default, your VM's HTTP endpoint is private โ only you can access it after signing in.
To make it public, run inside your VM:
sudo touch /nopassword
To re-enable protection:
sudo rm /nopassword
Share a link
From the dashboard, click Share on any VM to generate a shareable link. Anyone with the link can access your VM's HTTP endpoint without signing in.
To revoke access, click Share again to unshare.
Ports
The proxy forwards port 80 of your VM to HTTPS. If your app runs on a different port, redirect it:
# Forward port 3000 to port 80
sudo iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 3000