Sharing is included in PXM Free. It creates an explicit public link to an already running site. Links do not start automatically after a reboot. Stopping a link leaves the original site running.
pxm share start project.test --yes pxm share list pxm share stop project.test
The temporary link uses Cloudflare's Quick Tunnel service and requires no Cloudflare account. PXM downloads its authenticated, signed cloudflared runtime package. It waits for a healthy connector before reporting the public URL.
For your own domain, create a scoped Cloudflare API token with read access to the selected zones, DNS edit access to those zones, and Cloudflare Tunnel write access to their account. Save only the token in a private file owned by your Linux account, with mode 0600.
pxm share connect --credentials-file /private/cloudflare-token pxm share zones pxm share start project.test --zone example.com --subdomain preview --yes
PXM discovers authorized domains. In the browser dashboard, choose the domain and enter only the subdomain. The dashboard does not accept or expose Cloudflare credentials. It also offers sharing directly from the Sites page.
An existing DNS record is never overwritten. PXM records the IDs of the tunnel and DNS record it creates. Stop verifies those exact resources before deleting them. If a network error leaves cleanup incomplete, run pxm share stop project.test again. A changed or foreign resource is left untouched and reported for manual review.
The Cloudflare connector and its local bridge run as the account that owns the site. The bridge connects to the local web router with certificate and hostname verification, including PXM's private local CA when needed. It does not bypass TLS validation. Tokens, connector credentials and local configuration remain private; connector log content is not exposed in dashboard status.
A link exposes the application's content to anyone who can access it. Authentication remains the application's responsibility. Use appropriate trusted-proxy configuration in applications that generate absolute URLs from forwarded headers. PXM rewrites redirects that point exactly at the original local hostname, but does not rewrite HTML bodies or unrelated redirects.
Quick Tunnel publication is tested on all six Ubuntu targets. A separate isolated Ubuntu guest also completed the custom-domain flow using a temporary subdomain in an authorized Cloudflare zone: domain discovery, tunnel creation, verified public HTTPS, stop and exact DNS/tunnel cleanup. The original local site kept running. These checks use synthetic sites and leave existing DNS records untouched.