Instant Local HTTPS Development

One command to production-like HTTPS domains. No more certificate warnings.

COMING SOON
$ bnd add api --proxy 3000 --https
Creating HTTPS domain api.myproject.localhost...
✓ SSL certificate generated and trusted
✓ Ready at https://api.myproject.localhost

Get started

Get HTTPS working locally in seconds, not hours

1

Install bnd

Downloads a single Go binary that manages dnsmasq and Caddy services for domain resolution and HTTPS.

$ curl -sSL https://bnd.dev/install | bash # ✨ One command, zero headaches
2

Bind your domain

Configures DNS resolution and generates SSL certificates through Caddy's internal CA for your custom domain.

$ bnd add myapp --proxy 3000 --domain myapp.test # 🚀 Your local dev server just got superpowers
3

Access via HTTPS

Your custom domain resolves locally and serves with trusted HTTPS certificates. Works across all browsers.

🎉 https://myapp.test # No more "Proceed anyway (unsafe)" clicks!

What gets installed on your system

Single Binary: /usr/local/bin/bnd

One executable file written in Go. No runtime dependencies, no package managers, no containers. Just a single 15MB binary that manages everything.

Configuration: ~/.bnd/

All configuration files, certificates, and domain mappings stored in your home directory. Contains domains.json, Caddyfile, and generated SSL certificates.

System Services: dnsmasq + Caddy

Installs and configures dnsmasq for DNS resolution and Caddy for HTTPS termination. Uses your system's service manager (Homebrew/systemctl).

DNS Configuration

Adds resolver configuration for your chosen domain suffix (e.g., *.test) to route to localhost. No changes to /etc/hosts or system DNS.

SSL Certificate Authority

Creates a local CA and adds it to your system's trust store. Enables browsers to trust locally-generated certificates without warnings.

Service Management

Tracks which services were pre-existing vs bnd-installed. Uses launchd on macOS, systemd on Linux. Clean uninstall removes only bnd components.

What you get

Smart Domain Binding

Automatically configures dnsmasq to resolve your custom domains (like *.myproject.test) to localhost without modifying system files.

Instant HTTPS Certificates

Leverages Caddy's internal certificate authority to generate and trust SSL certificates on-the-fly for all your local domains.

Intelligent Proxy Routing

Routes incoming requests to the correct local port based on domain configuration, supporting multiple services simultaneously.

System Integration

macOS Integration

Uses existing Homebrew services with no system modifications. Integrates cleanly with your existing development setup.

Linux Integration

Integrates with systemctl while respecting existing configurations. Works with your distribution's service management.

Security Considerations

All changes are scoped to your user and chosen domain suffix. No system-wide DNS hijacking. Certificates generated locally.