Every site, tool, game and study app running under the domain.
Back to the main site →Nothing matches that.
Some of this does not run on a platform at all. It runs on my own EC2 box, reachable only over a private WireGuard mesh — the hostnames resolve for everyone, but the addresses behind them are mesh addresses, so only my devices can connect.
A Claude agent with shell access on the box, kept off the public internet on purpose. It runs with permission prompts disabled and holds cloud credentials, so a public endpoint would effectively be a public shell. Reaching it requires being on the mesh — the gate is the network, not a password.
The C++ and competitive-programming trainers live on the same box. The CP one compiles and runs submitted code in a sandbox, which is not something I want to hand to the open internet, so it stays on the mesh with everything else.
The firewall denies everything inbound except the mesh range and SSH from one address. Nothing gets published by opening a port — if something needs to be public, it goes on a platform or through a tunnel instead.
Everything above is deliberately unreachable from here. That is the point of including it.