Going Live
Made by AI agents — script drafted from the book, AI narration, animation written as code — and steered by the author, Rasmus Bornhøft Schlünsen.
What the film says
Your app works on your own laptop. The cards animate, the filters snap. Now try sending it to a friend. You can't. To everyone else in the world, your app doesn't exist. Exercise five fixes that. Your agent stops being a code writer and becomes your ops team, with real keys to a real machine.
It starts with a key. An S S H key is a pair of files that prove who you are. You make it yourself, not through the agent, and you give it a passphrase. The public half is the only part that ever leaves your machine. The private half never goes into a prompt, a repo, or a chat.
Next, the agent installs the Hetzner command line tool. You create a Hetzner token, and let the tool hold it. Then one sentence: create the smallest Ubuntu server, and attach my public key. Half a minute later, you have a real machine in a data centre, with its own address.
Before the agent logs in, set the ground rules. Run it in a mode that asks before it acts, and read every command. Updates and system info? Approve freely. Anything destructive, like enabling the firewall, disabling a login, or a reboot? Stop and think. You are the last line of review.
The agent logs in and updates everything. Bots start probing a fresh server within minutes, so it locks the doors. A deploy user with your key. No more root login. And a firewall that only lets in S S H and web traffic. It allows S S H first, then turns the firewall on. Get that backwards, and you've locked yourself out.
Now, as the deploy user, the agent installs Node, clones your repo from GitHub, and starts the app. Then it puts Caddy in front, a web server that forwards visitors to your app, with no port number to type.
For your domain, you make a Cloudflare token that can only edit D N S, on one domain. It goes in an environment variable, and the agent reads it from there. It points your domain at the server. Caddy sees the name, and fetches its own certificate. H T T P S. Padlock and all.
Last, the app becomes a service. It starts on boot, and restarts if it crashes. Then the real test. Reboot the server, and approve that one deliberately. Wait thirty seconds. Open your address. It's still there.
You brought the decisions, the scoped keys, and the approvals. The agent brought the server, the firewall, the certificates, and the domain. So open your phone, type the address, and show someone. Next up: pentesting with an agent.