A road home: cloudflared.

Said and Done. answers only on your own machine —127.0.0.1:5180 — and never opens itself to the internet. A tunnel is how you change that on your terms: a small program on the same computer carries requests in from a public URL, and the desk's own password still guards the door. Cloudflare Tunnel is free for this, and it comes in two sizes.

1 · Arm the Remote Client

In the app: Settings → Connections → Remote Client → Set up…. Choose a password — that alone arms it. If your desk will stand behind a public URL, take the extra lock too: Add a one-time code… pairs an authenticator app in the same sheet. When the row says it is listening on127.0.0.1:5180, the desk is ready for a road.

2 · The one-command road

cloudflared tunnel --url http://127.0.0.1:5180

That is the whole thing. cloudflared prints a randomtrycloudflare.com URL — open it on your phone and your desk answers. No account, no DNS, nothing to clean up: close the terminal and the road is gone. Perfect for trying the Remote Client tonight; wrong for every day, because the URL changes each run.

3 · A road with your name on it

With a domain on Cloudflare, the tunnel can keep a fixed hostname and run as a service. Once, signed in to your Cloudflare account:

cloudflared tunnel login
cloudflared tunnel create desk
cloudflared tunnel route dns desk desk.your-domain.com

Then a small config file, ~/.cloudflared/config.yml, that says where the road ends:

tunnel: desk
credentials-file: /home/you/.cloudflared/<tunnel-id>.json
ingress:
  - hostname: desk.your-domain.com
    service: http://127.0.0.1:5180
  - service: http_status:404

cloudflared tunnel run desk

Now desk.your-domain.com is your desk, every day, HTTPS included. Keep it running with whatever your system uses to keep small things running — a systemd unit on Linux, a launch agent on macOS.

4 · From your phone

Open the URL, sign in with the password — and the code, if you set one. The record, the case files, and search are all there, sized for a thumb. Files you attach from the phone land in the desk's own attachment store, on the computer where the app runs.

One honest note: a public URL is a public door, and the password is the only thing behind it. Set a real one, and take the one-time code if the road stays open all day.