fix(client): Generate unique tunnel IDs for each protocol configuration

apps/localup-desktop/src-tauri/src/daemon/service.rs

@@ -124,7 +124,8 @@ impl DaemonService {
                 },
                 "tls" => ProtocolConfig::Tls {
                     local_port,
-                    sni_hostname: custom_domain.clone(),
+                    sni_hostnames: custom_domain.clone().map(|d| vec![d]).unwrap_or_default(),
+                    http_port: None,
                 },
                 other => {
                     return DaemonResponse::Error {
@@ -474,7 +475,8 @@ async fn handle_request(
                 },
                 "tls" => ProtocolConfig::Tls {
                     local_port,
-                    sni_hostname: custom_domain.clone(),
+                    sni_hostnames: custom_domain.clone().map(|d| vec![d]).unwrap_or_default(),
+                    http_port: None,
                 },
                 other => {
                     return DaemonResponse::Error {

apps/localup-desktop/src-tauri/src/state/app_state.rs

@@ -269,7 +269,12 @@ pub fn build_protocol_config(
         }),
         "tls" => Ok(ProtocolConfig::Tls {
             local_port,
-            sni_hostname: config.custom_domain.clone(),
+            sni_hostnames: config
+                .custom_domain
+                .clone()
+                .map(|d| vec![d])
+                .unwrap_or_default(),
+            http_port: None,
         }),
         other => Err(format!("Unknown protocol: {}", other)),
     }
@@ -326,6 +331,12 @@ pub async fn run_tunnel(
             reconnect_attempt + 1
         );
 
+        // Update status to Connecting
+        {
+            let mut manager = tunnel_manager.write().await;
+            manager.update_status(&config_id, TunnelStatus::Connecting, None, None, None);
+        }
+
         match TunnelClient::connect(config.clone()).await {
             Ok(client) => {
                 reconnect_attempt = 0;
@@ -442,10 +453,18 @@ pub async fn run_tunnel(
                 // Abort metrics task when connection ends
                 metrics_task.abort();
 
+                // Update status to Disconnected (will change to Connecting on next loop iteration)
+                {
+                    let mut manager = tunnel_manager.write().await;
+                    manager.update_status(&config_id, TunnelStatus::Disconnected, None, None, None);
+                }
+
                 info!(
                     "[{}] Connection lost, attempting to reconnect...",
                     config_id
                 );
+
+                reconnect_attempt += 1;
             }
             Err(e) => {
                 error!("[{}] Failed to connect: {}", config_id, e);

crates/localup-api/src/handlers.rs

@@ -207,9 +207,9 @@ pub async fn list_tunnels(
                             }
                             localup_proto::Protocol::Tls {
                                 port: _,
-                                sni_pattern,
+                                sni_patterns,
                             } => TunnelProtocol::Tls {
-                                domain: sni_pattern.clone(),
+                                domains: sni_patterns.clone(),
                             },
                         },
                         public_url: e.public_url.clone(),
@@ -342,9 +342,9 @@ pub async fn get_tunnel(
                         }
                         localup_proto::Protocol::Tls {
                             port: _,
-                            sni_pattern,
+                            sni_patterns,
                         } => TunnelProtocol::Tls {
-                            domain: sni_pattern.clone(),
+                            domains: sni_patterns.clone(),
                         },
                     },
                     public_url: e.public_url.clone(),

crates/localup-api/src/models.rs

@@ -21,10 +21,10 @@ pub enum TunnelProtocol {
         /// Local port to forward
         port: u16,
     },
-    /// TLS tunnel with SNI
+    /// TLS tunnel with SNI (supports multiple domains/patterns)
     Tls {
-        /// Domain for SNI routing
-        domain: String,
+        /// Domains/patterns for SNI routing (can include wildcards like *.example.com)
+        domains: Vec<String>,
     },
 }
 

crates/localup-cert/src/acme.rs

@@ -15,7 +15,7 @@ use instant_acme::{
 use thiserror::Error;
 use tokio::fs;
 use tokio::sync::RwLock;
-use tracing::{debug, error, info};
+use tracing::{debug, info};
 
 use crate::Certificate;
 

crates/localup-cli/Cargo.toml

@@ -44,6 +44,7 @@ uuid = { version = "1.0", features = ["v4"] }
 ipnetwork = "0.20"
 chrono = { workspace = true }
 sea-orm = { workspace = true }
+axum = { workspace = true }
 
 [build-dependencies]
 chrono = { workspace = true }

crates/localup-cli/src/localup_store.rs

@@ -203,6 +203,7 @@ mod tests {
                 connection_timeout: Duration::from_secs(30),
                 preferred_transport: None,
                 http_auth: HttpAuthConfig::None,
+                ip_allowlist: Vec::new(),
             },
         }
     }