Case study
ProjectsPrivate ReelThe public host is the door, not the library
The public host is the door, not the library
Private Reel
V1 operational
Stack
- Next.js
- React
- TypeScript
- Tailwind
- Zod
- TanStack Form
- TanStack Query
- TanStack Pacer
- Drizzle
- Postgres
- WebAuthn
- SwiftUI
- Sparkle
Summary
Sign in, passkey, email code, and phone approval live on the public host. Media stays on reachable Macs.
Result
Anonymous visits stop at this door. The gallery, cooking, Keep, and projects stay session-gated.
Lesson
Do not treat a login screen as proof the library is public.