⚡ devx

Supercharged local dev environment — Podman + Cloudflare Tunnels + Tailscale in one CLI

devx provisions a customized Fedora CoreOS VM via Podman Machine and automatically configures Cloudflare Tunnels (instant public HTTPS) and Tailscale (zero-trust corporate network access) — all from a single command.

The Problem

Local development is plagued by recurring friction:

1. "It works on my machine" — Inconsistent host OS configs, file watcher limits, kernel parameters
2. Accessing internal services — Developers need corporate APIs/databases without routing everything through a slow VPN
3. Webhooks & sharing — Testing Stripe/GitHub webhooks or sharing a prototype requires sketchy ngrok setups

The Solution

devx vm init    # One command. Done.

You get a fully-configured Fedora CoreOS VM with:

• 🌐 Instant public HTTPS — Your machine gets your-name.ipv1337.dev automatically
• 🔒 Zero-trust corporate access — The VM joins your Tailnet transparently
• 🚀 ngrok-like port exposure — devx tunnel expose 3000 gives you a public URL in seconds
• 🏗️ Host-level isolation — Pre-tuned inotify limits, rootful containers, dedicated kernel

Installation

From Releases (recommended)

Download the latest binary from GitHub Releases:

# macOS (Apple Silicon)
curl -sL https://github.com/VitruvianSoftware/devx/releases/latest/download/devx_darwin_arm64.tar.gz | tar xz
sudo mv devx /usr/local/bin/

# macOS (Intel)
curl -sL https://github.com/VitruvianSoftware/devx/releases/latest/download/devx_darwin_amd64.tar.gz | tar xz
sudo mv devx /usr/local/bin/

# Linux (amd64)
curl -sL https://github.com/VitruvianSoftware/devx/releases/latest/download/devx_linux_amd64.tar.gz | tar xz
sudo mv devx /usr/local/bin/

From Source

go install github.com/VitruvianSoftware/devx@latest

Prerequisites

These tools must be installed before running devx vm init:

Quick Start

# 1. Authenticate with Cloudflare (one-time)
cloudflared login

# 2. Provision your dev environment
devx vm init

# 3. Run something and expose it
devx exec podman run -d -p 8080:80 docker.io/nginx
# Visit https://your-name.ipv1337.dev — it's live!

# 4. Expose any local port instantly (like ngrok)
devx tunnel expose 3000 --name myapp
# → https://myapp.your-name.ipv1337.dev

Architecture

flowchart TB
    subgraph devlaptop["Developer's Mac"]
        direction TB
        Code[VS Code / Terminal] --> |podman run| UserContainers

        subgraph podmanvm["Podman Machine (Fedora CoreOS)"]
            subgraph daemons["Systemd Controlled"]
                TS[Tailscale Daemon]
                CF[Cloudflared Tunnel]
            end

            subgraph UserContainers["Developer's Apps"]
                App["API / Web App<br/>Port 8080"]
                DB[(Local DB)]
            end

            CF -->|Forwards Ingress| App
            TS -->|Exposes Subnets| App
        end
    end

    subgraph internet["Public Web"]
        CFEdge((Cloudflare Edge))
        PublicURL["https://developer.ipv1337.dev"]
        ExternalUser((External User / Webhook))

        ExternalUser --> PublicURL
        PublicURL --> CFEdge
    end

    subgraph tailnet["Internal Network (Corporate Tailnet)"]
        StagingDB[(Staging Database)]
        InternalAPI[Internal Microservices]
    end

    CFEdge <-->|Secure Encrypted Tunnel| CF
    TS <-->|Zero-Trust VPN Overlay| tailnet

    classDef vm fill:#f0f4f8,stroke:#0288d1,stroke-width:2px;
    classDef daemon fill:#e1f5fe,stroke:#0277bd,stroke-width:1px;
    classDef container fill:#e8f5e9,stroke:#2e7d32,stroke-width:1px;

    class podmanvm vm;
    class TS,CF daemon;
    class App,DB container;

CLI Reference

devx — Supercharged local dev environment

Commands:
  vm          Manage the local development VM
  tunnel      Manage Cloudflare tunnels and port exposure
  config      Manage devx configuration and credentials
  exec        Run low-level infrastructure tools directly
  version     Print the devx version

VM Management (devx vm)

Tunnel & Port Exposure (devx tunnel)

🗂️ Multi-Port Mapping (devx.yaml)

Manage complex projects that require multiple services (like a backend API, a frontend web app, and a webhook consumer) simultaneously via a unified single file.

Just create a devx.yaml in your project root:

name: my-project
tunnels:
  - name: api
    port: 8080
    basic_auth: "admin:pass"
  - name: web
    port: 3000

Then run devx tunnel up. Your local services will automatically map under contiguous domains like api-my-project-you.ipv1337.dev via a singular, highly efficient Cloudflare connection.

🔒 Built-in Authentication (--basic-auth)

Exposing local ports to the public internet securely shouldn't require premium subscriptions to external services. devx comes with a highly-performant built-in reverse proxy in Go.

Simply pass the --basic-auth flag to instantly protect your active development environment with encrypted basic authentication at the edge proxy layer.

# Expose your Next.js app but require credentials
devx tunnel expose 3000 --basic-auth "admin:supersecret"

# Inspect webhooks while restricting access
devx tunnel inspect 8080 --name stripe-test --basic-auth "webhook:testing123"

🌍 Custom Domain Support (BYOD)

Want to use your own company domain instead of the free .ipv1337.dev sandbox? Any devx tunnel command supports the --domain override!

As long as you are logged into a Cloudflare account that owns the zone, Cloudflared will dynamically configure the requested DNS edge dynamically.

# Provision a branded tunnel endpoint on your own custom domain
devx tunnel expose 8000 --domain mycompany.dev --name api
# → https://api.mycompany.dev

# Or use it globally across an entire YAML topology
devx tunnel up --domain mycompany.dev

Configuration (devx config)

🔍 Request Inspector (devx tunnel inspect)

A free, open-source replacement for ngrok's paid web inspector. Captures every HTTP request and response flowing through your tunnel in a live terminal UI.

# Inspect traffic to a local app (local-only, no tunnel)
devx tunnel inspect 8080

# Inspect AND expose via Cloudflare tunnel
devx tunnel inspect 3000 --expose

# With a static subdomain
devx tunnel inspect 8080 --name myapi

Features:

• 📋 Live scrollable request list with method, path, status, and duration
• 🔎 Detailed view showing full request/response headers and bodies
• 🔁 One-key replay (r) to resend any captured request
• 🏷️ Replay tagging so you can compare original vs replayed responses
• 🧹 Clear captured requests with c

Configuration (devx config)

Low-Level Tools (devx exec)

Pass-through wrappers that forward arguments directly to the underlying tools:

Configuration

devx reads its secrets from a .env file in the current directory. Copy the example and fill in your values:

cp .env.example .env
# Edit .env with your Cloudflare tunnel token and hostname

See .env.example for all available configuration options.

Contributing

We welcome contributions! Please read our Contributing Guide for details on:

• Development setup
• Code style and conventions
• Pull request process
• Commit message format

License

MIT © VitruvianSoftware