Private apps
Omit domain: and set internal: true and the app binds to 127.0.0.1 with
no Caddy fragment and nothing on 80/443.
internal: trueReach it two ways:
- From other apps on the box —
http://127.0.0.1:<port>(service-to-service). - From your laptop —
homeport tunnelforwards a local port over SSH:
homeport tunnel # → http://localhost:<port> (Ctrl-C to close)homeport tunnel 8080 # pick the local porthomeport tunnel works for public apps too, when you want private access
without going through the internet.