Reach a home service behind CGNAT

The agent connects out from your home machine, so your ISP does not need to give you a public IP or an inbound port.

Before you start

Confirm your service opens locally, for example at http://localhost:8096. Run the agent on that machine, or choose an address it can reach on your LAN.

1. Create the tunnel

In the dashboard, create a proxy tunnel with Target: http://localhost:8096. Copy the kpt_… agent token and keep it private.

2. Run the agent

Install the agent as a background service on the always-on machine:

curl -fsSL https://cdn.kepeink.hu/install.sh | sudo sh -s -- --token=kpt_xxxxxxxx

3. Check the URL

Open the assigned HTTPS URL from a phone away from your home Wi-Fi. The agent reconnects after a reboot or connection loss. You can disable the tunnel from the dashboard whenever you need to.