4. What not to Publish

1. Can it stay local-only?
2. Can it be reachable only over VPN?
3. Can it use private DNS/internal TLS?
4. If it must have public DNS, can Caddy restrict it strongly?
5. Does the app still require authentication?