What is osmrouter?

osmRouter is a self-hosted reverse tunnel system. It lets you point a public domain name at a program running on a computer you own, such as a home server or a Mac, without renting cloud hosting or opening a port on your router. It works for self-hosted apps as well as self-hosted AI inference servers. The system has three main pieces. A Caddy edge server sits on the public internet and handles incoming visitor traffic. An osm-proxy forwards that traffic through an encrypted tunnel to an osm-agent running on your own machine, which then passes the request to whatever local program is listening on that port. The connection between the proxy and your machine uses a pinned TLS certificate baked in at build time, so the proxy operator cannot read the contents of the requests passing through, only encrypted bytes. To run it yourself, you need a Linux server with Docker and a domain name you control. Setup involves cloning the repository, generating a certificate authority, filling in an environment file with secrets, and starting the Docker stack with a provided compose file, followed by configuring Caddy for TLS. End users then install a companion Mac app, built from the mac-app folder, which discovers local services on your Mac and lets you bind any of them to your verified domain with one click. The project can tunnel anything that speaks HTTP on a local port: a development server you want to share with a collaborator, an internal app on an office machine, a media server, or a local AI inference server such as one running Ollama or vLLM. The README lists what already works today, including sign up and domain verification flows, the tunnel itself, and the signed Mac app, while noting that some features such as automatic Stripe billing and admin multi-factor authentication are still incomplete.