Okay, nice. Managed to lock down this #littlefedi instance a little bit more to prevent my accidentally "public" posts to be scraped via the web interface.
In my littlefedi.toml:
[web]
redirect_guests_to_about = true
And then in #OpenBSD relayd I have the following in addition to this:
# /etc/relayd.conf
# [...snip...]
http protocol "http_to_https" {
#[... snip...]
# Littlefedi forwards
block request quick path pattern "^/public/local"
pass request quick header "Host" value "0xde501a7a.net" forward to <littlefedi>
#[...snip...]
}
This should be solid enough
