Forge
Data & integrations

HTTPS & push alerts

Plain HTTP works fine on your LAN, but a secure context unlocks the full PWA:

  • Rest-timer push with the screen locked — the killer feature. iOS 16.4+ delivers Web Push to installed home-screen apps; Forge schedules a push for the exact second your rest ends.
  • Offline app shell — the UI loads with no network.
Reading time —

Quickest path: Caddy

# Caddyfile
forge.example.org {
    reverse_proxy 127.0.0.1:8081
}

Caddy obtains and renews certificates automatically. Point a domain (or DuckDNS name) at your server and TLS is handled.

Alternatives

  • Tailscale Serve/Funnel — tailscale serve https / http://127.0.0.1:8081 gives a trusted *.ts.net URL with zero certificate work.
  • nginx / Traefik / Pangolin — any TLS-terminating reverse proxy works; Forge needs no special headers.

After switching to HTTPS

    1. Open the HTTPS URL and re-add Forge to your home screen (the PWA identity is per-origin).
    2. Enable Settings → Training → Rest alerts and grant the notification permission.
    3. Check off a set, lock the phone, and let the timer prove it.