4. What not to Publish
1. Can it stay local-only?2. Can it be reachable only over VPN?3. Can it use private DNS/internal TLS?4. If it must have public DNS, can Caddy restrict it strongly?5. Does the app still require authentication?