Async architecture, local service proxy, TLS, blocking panel

## Summary Major rewrite of Numa from blocking to async architecture, plus new features: - **Async tokio runtime** — modular architecture with per-query task spawning - **Ad blocking** — 385K+ domains via hagezi (gzip), allowlist UI, pause/unpause, domain check - **Live dashboard** — real-time stats, query log, blocking panel (sources + allowlist), service management - **Local service proxy** — HTTP reverse proxy on :80 for `.numa` domains (`peekm.numa` -> `localhost:6419`), WebSocket upgrade for HMR - **Local TLS** — auto-generated CA + per-service certs on :443 via rustls, `numa install` trusts CA in OS keychain - **Service persistence** — user-added services saved to `/usr/local/var/numa/services.json` - **DNS query types** — recognizes A, NS, CNAME, SOA, PTR, MX, TXT, AAAA, SRV, HTTPS - **System DNS integration** — auto-detect upstream, conditional forwarding (Tailscale/VPN), launchd/systemd services - **Deploy workflow** — `make deploy` handles build + copy + codesign + restart - **Dashboard UX** — panel subtitles, better placeholders, proxy route display, blocking sources + allowlist management - **Demo recording** — `scripts/record-demo.sh` for hero GIF with Chrome CDP automation ## Test results - [x] `cargo build --release` compiles clean - [x] `make lint` passes (clippy + rustfmt) - [x] `make deploy` restarts the service successfully - [x] `sudo numa install` sets DNS + trusts CA in keychain - [x] `dig @127.0.0.1 google.com` resolves — `140.82.121.4` - [x] `dig @127.0.0.1 ads.google.com` blocked — `0.0.0.0` - [x] Dashboard loads at `http://numa.numa` — HTTP 200 - [x] Dashboard loads at `https://numa.numa` — HTTP 200, TLS valid - [x] `https://peekm.numa` proxied — HTTP 200 - [x] Blocking panel shows sources (hagezi, 383K domains), refresh timestamp - [x] Services API returns numa + peekm with health status - [x] Service persistence — peekm in `/usr/local/var/numa/services.json` - [x] `sudo numa uninstall` restores DNS + removes CA from keychain (verified: `SecKeychainSearchCopyNext: item not found`) - [x] `sudo numa install` re-installs cleanly after uninstall - [ ] Vite dev server HMR works through `.numa` proxy (WebSocket upgrade) - [ ] Pause/unpause blocking from dashboard 🤖 Generated with [Claude Code](https://claude.com/claude-code)

dearsky commented

2026-03-20 18:49:11 +08:00

(Migrated from gitea.proxy.dearsky.top)

Summary

Major rewrite of Numa from blocking to async architecture, plus new features:

Async tokio runtime — modular architecture with per-query task spawning
Ad blocking — 385K+ domains via hagezi (gzip), allowlist UI, pause/unpause, domain check
Live dashboard — real-time stats, query log, blocking panel (sources + allowlist), service management
Local service proxy — HTTP reverse proxy on :80 for .numa domains (peekm.numa -> localhost:6419), WebSocket upgrade for HMR
Local TLS — auto-generated CA + per-service certs on :443 via rustls, numa install trusts CA in OS keychain
Service persistence — user-added services saved to /usr/local/var/numa/services.json
DNS query types — recognizes A, NS, CNAME, SOA, PTR, MX, TXT, AAAA, SRV, HTTPS
System DNS integration — auto-detect upstream, conditional forwarding (Tailscale/VPN), launchd/systemd services
Deploy workflow — make deploy handles build + copy + codesign + restart
Dashboard UX — panel subtitles, better placeholders, proxy route display, blocking sources + allowlist management
Demo recording — scripts/record-demo.sh for hero GIF with Chrome CDP automation

Test results

cargo build --release compiles clean
make lint passes (clippy + rustfmt)
make deploy restarts the service successfully
sudo numa install sets DNS + trusts CA in keychain
dig @127.0.0.1 google.com resolves — 140.82.121.4
dig @127.0.0.1 ads.google.com blocked — 0.0.0.0
Dashboard loads at http://numa.numa — HTTP 200
Dashboard loads at https://numa.numa — HTTP 200, TLS valid
https://peekm.numa proxied — HTTP 200
Blocking panel shows sources (hagezi, 383K domains), refresh timestamp
Services API returns numa + peekm with health status
Service persistence — peekm in /usr/local/var/numa/services.json
sudo numa uninstall restores DNS + removes CA from keychain (verified: SecKeychainSearchCopyNext: item not found)
sudo numa install re-installs cleanly after uninstall
Vite dev server HMR works through .numa proxy (WebSocket upgrade)
Pause/unpause blocking from dashboard

🤖 Generated with Claude Code

Async architecture, local service proxy, TLS, blocking panel #3

Summary

Test results