My agents on two laptops, controlled from one phone app

Description and use

Control agents on two laptops from a single phone app while keeping the work laptop isolated from incoming connections.

Problem

Need to control agents on two laptops from a single phone app while keeping work laptop isolated from incoming connections.

Outcome

Phone app now shows agents from both laptops; work laptop remains isolated; home laptop stays awake with lid closed; SSH access established; no external ports opened.

Workflow

• Set up separate Cloudflare tunnels for each laptop using herdr-mobile-relay stable tunnel wizard.
• Configure each laptop’s hostname (e.g., work-relay.example.dev, home-relay.example.dev).
• Set phone app deployment to the work laptop’s relay so both laptops join same app.
• Import home laptop’s invite into the phone app from within the app, not via camera.
• Configure work laptop to serve the phone app; optionally move app deployment to Cloudflare Pages. Configure SSH access from work to home via Tailscale or Cloudflare Access. Adjust macOS power settings on home laptop: use HDMI dummy plug, set pmset to prevent sleep on charger, enable wake on network. Ensure iOS pairing is done via home-screen app, not browser tab. Verify relays are running with herdr plugin action invoke status. Use phone app to control agents on both laptops.

Evidence

The phone app talks to two relays. Each laptop dials out to Cloudflare through its own tunnel, so neither one opens a port.

Source

The work laptop holds work credentials, so it accepts no incoming connections. Not from the phone, not from the home laptop, not from anywhere.

Source

Closing the lid is a separate trigger. macOS ignores the lid only in clamshell mode, and clamshell mode needs three things: the charger, an external display, and an external keyboard or mouse.

Source