Host: nameko (Cloudflare Lab)

Cloudflare lab instance used for browser automation and testing. Accessible via VNC over stunnel mTLS tunnel from kelp. IP address is ephemeral — see hosts/kelp for how to resolve current address.

GONE as of 2026-10-26. kelp's stunnel.conf has no nameko section at all; the only trace is a backup file named stunnel.conf.bak-20260930-vnc-bind-conflict. Local port 127.0.0.1:5901 (which the nameko client stanza below wanted) is now owned by kelp's own Xtigervnc desktop. The rest of this note is left as historical record of the design, not a current access path.

VNC Access

VNC server is tunneled through stunnel on port 5901 (local) to the remote host's 15901.

Stunnel Configuration (on kelp)

[nameko-vnc-client]
client = yes
accept = 127.0.0.1:5901
connect = <nameko-ip>:15901
CAfile = /etc/stunnel/kelp-client-CA.pem
cert = /etc/stunnel/kelp-client-cert.pem
key = /etc/stunnel/kelp-client-key.pem
verify = 0

Connection Details

• Local listening port: 127.0.0.1:5901
• Screen resolution: 1920×1080
• VNC security: None (tunnel provides auth)
• Status: Verified and responsive (2026-09-30)

Connect

• macOS: open vnc://localhost:5901
• Any platform: open VNC viewer, connect to localhost:5901
• Command line: vncviewer 127.0.0.1:5901

Related

• hosts/kelp
• delayrepay