local-router.com — PQC-secured sync for Local Router

🔐 PQC access keys

Access secrets hashed with Argon2id and deliverable ML-KEM-768-wrapped to your post-quantum public key. The secret never travels in clear text.

☁️ Zero-knowledge sync

Your router keys and configurations are encrypted on your device (AES-256-GCM under a key derived from your access secret). The server stores ciphertext only.

🌐 Managed inference

Live: strict tools that reject loopback-resolving hosts (SSRF egress guards) reach your own router through a Cloudflare Tunnel on this domain — public, real-certificate HTTPS. Point Warp-class tools at your tunnel URL, no trust setup.

Live now

✅ Encrypted key/config sync — working on local-router-dot-com.pages.dev
✅ PQC-secured access keys — ML-KEM-768 wrapped delivery
🚧 Custom domain + paid tiers — rolling out

Create your access key

Wire up your router's public inference endpoint

cloudflared tunnel create lr-inference
cloudflared tunnel route dns lr-inference inference.local-router.com
cloudflared tunnel run --url http://127.0.0.1:11434 lr-inference

Full runbook: docs/DEPLOY.md