Private apps | homeport

Run an app with no public URL — loopback only, reached from other apps or over an SSH tunnel.

Omit domain: and set internal: true and the app binds to 127.0.0.1 with no Caddy fragment and nothing on 80/443.

homeport.yamlyaml

internal: true

Reach it two ways:

From other apps on the box — http://127.0.0.1:<port> (service-to-service).
From your laptop — homeport tunnel forwards a local port over SSH:

homeport tunnel            # → http://localhost:<port>  (Ctrl-C to close)
homeport tunnel 8080       # pick the local port

homeport tunnel works for public apps too, when you want private access without going through the internet.